1.使用172.16.0.0/16划分网络
172.16.0.0/18area3
172.16.64.0/18area 1
172.16.128.0/18area 0
172.16.192.0/18area 2
2.使用ospf协议合理规划区域保证更新安全
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]ar
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]net
[r1-ospf-1-area-0.0.0.0]network 172.16.128.2 0.0.0.0
[r1-ospf-1-area-0.0.0.0]net
[r1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
3.加快收敛速度
r1]interface g0/0/1
[r1-GigabitEthernet0/0/1]os
[r1-GigabitEthernet0/0/1]ospf tin
[r1-GigabitEthernet0/0/1]ospf ti
[r1-GigabitEthernet0/0/1]ospf timer he
[r1-GigabitEthernet0/0/1]ospf timer hello 5
4.router1为DR没有BDR
r3]interface g0/0/0
[r3-GigabitEthernet0/0/0]os
[r3-GigabitEthernet0/0/0]ospf dr
[r3-GigabitEthernet0/0/0]ospf dr-priority 0
[r2]int
[r2]interface g0/0/0
[r2-GigabitEthernet0/0/0]os
[r2-GigabitEthernet0/0/0]ospf dr
[r2-GigabitEthernet0/0/0]ospf dr-priority 0
5.pc234自动获取ip地址
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.1.254
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.1.1
Physical address..................: 54-89-98-CE-69-9D
DNS server........................: 8.8.8.8
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.2.254
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.2.1
Physical address..................: 54-89-98-94-7F-D0
DNS server........................: 8.8.8.8
IPv6 address......................: :: / 128
IPv6 gateway......................: ::
IPv4 address......................: 192.168.3.254
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.3.1
Physical address..................: 54-89-98-C5-3E-AE
DNS server........................: 8.8.8.8
6.router7为运营商只能配置ip地址
7.pc4可以ping通router6但不能登录router6
[r7]acl 3000
[r7-acl-adv-3000]rule deny tcp source 192.168.3.2 0.0.0.0 destination 172.16.0.1
destination-port eq 23
[r7]interface g0/0/1
[r7-GigabitEthernet0/0/1]traffic-filter inbound acl 3000
[r7-acl-adv-3000]rule deny icmp source 192.168.3.2 0.0.0.0 destination 172.16.0.1
0.0.0.0 icmp-type echo-reply
8.pc3可以ping通pc5但pc5不能ping通pc3
[r5]acl 3000
[r5-acl-adv-3000]ru
[r5-acl-adv-3000]rule d
[r5-acl-adv-3000]rule deny i
[r5-acl-adv-3000]rule deny icmp s
[r5-acl-adv-3000]rule deny icmp source 192.168.2.2 0.0.0.0 d
[r5-acl-adv-3000]rule deny icmp source 192.168.2.2 0.0.0.0 destination 192.168.4
.2 0.0.0.0 ic
[r5-acl-adv-3000]rule deny icmp source 192.168.2.2 0.0.0.0 destination 192.168.4
.2 0.0.0.0 icmp-type e
[r5-acl-adv-3000]rule deny icmp source 192.168.2.2 0.0.0.0 destination 192.168.4
.2 0.0.0.0 icmp-type echo
[r5-acl-adv-3000]rule deny icmp source 192.168.2.2 0.0.0.0 destination 192.168.4
.2 0.0.0.0 icmp-type echo-reply
[r5-acl-adv-3000]quit
[r5]in
[r5]info-center
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]tr
[r5-GigabitEthernet0/0/1]tracert
[r5-GigabitEthernet0/0/1]traffic-filter in
[r5-GigabitEthernet0/0/1]traffic-filter inbound a
[r5-GigabitEthernet0/0/1]traffic-filter inbound acl 3000