“环回口”(loopback address口)在BGP上也有用到,他是一种在路由器协议上广泛使用的虚拟接口。是通过系统的编撰,在物理基础上是实现的。
首先,如果在这台路由器上设置环回口,可以通过"telnet"命令登陆这台路由器。由于环回口是虚拟的,如果不特别的去设置关掉它,它就不会因为物各种故障失效(即down掉)。并且每个环回口都是独立的,也不会太占资源。
其次,环回口的ip地址可以作为OSPF协议下各个路由器的路由器号(即router id),环回口ip地址不但不会出现重复,并且它又稳定。所以它就成了作为router id的最佳选择。
还有,他可以作为一些其他服务对路由器的访问接口,如tftp、snmp、tacace/radius等等在BGP中它也很重要
loopback 环回接口地址作为路由协议的router-id,因为环回接口是逻辑接口,比物理接口更加稳定。在对网络操作时,网路管理员有可能误操作导致物理接口地址删除,或者改动,而环回接口则一般会回去改动
###查看环回接口地址
[R5]display interface LoopBack 0
LoopBack0 current state : UP
Line protocol current state : UP (spoofing)
Description:HUAWEI, AR Series, LoopBack0 Interface
Route Port,The Maximum Transmit Unit is 1500
Internet Address is 5.5.5.5/32
Physical is Loopback
Current system time: 2020-05-14 14:37:06-08:00
Last 300 seconds input rate 0 bits/sec, 0 packets/sec
Last 300 seconds output rate 0 bits/sec, 0 packets/sec
Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
Input: 0 bytes
Output:0 bytes
Input bandwidth utilization : 0%
Output bandwidth utilization : 0%
###查看ip端口信息
<R5>disp ip inter br
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 4
The number of interface that is DOWN in Physical is 5
The number of interface that is UP in Protocol is 4
The number of interface that is DOWN in Protocol is 5
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 unassigned down down
GigabitEthernet0/0/1 172.16.12.1/24 up up
GigabitEthernet0/0/2 10.10.12.2/24 *down down
GigabitEthernet4/0/0 10.10.20.2/24 up up
GigabitEthernet4/0/1 unassigned down down
GigabitEthernet4/0/2 unassigned down down
GigabitEthernet4/0/3 unassigned down down
LoopBack0 5.5.5.5/32 up up(s)
##修改 router id 为环回接口
[R5]router id 5.5.5.5
##查看 ospf router id 是物理接口,需要重启修改成 新的router id
[R5]dis ospf peer br
OSPF Process 1 with Router ID 172.16.12.1
Peer Statistic Information
----------------------------------------------------------------------------
Area Id Interface Neighbor id State
----------------------------------------------------------------------------
[R5]quit
###重启生效
<R5>reset ospf process
Warning: The OSPF process will be reset. Continue? [Y/N]:y
<R5>sy
Enter system view, return user view with Ctrl+Z.
###确认是否修改
[R5]dis ospf peer br
OSPF Process 1 with Router ID 5.5.5.5
Peer Statistic Information
----------------------------------------------------------------------------
Area Id Interface Neighbor id State
----------------------------------------------------------------------------
[R5]
ospf
邻居表: 邻里关系
display osdf peer brief
LSDB: 链路状态信息,并需要实时同步
display ospf lsdb
路由表: spf ospf 中路由表单
display ospf route
OSPF 原理:
1. ospf 要求运行osdf 的路由器都有整个网络的链路状态信息,这样才能计算出到达目的地的最优路径
2. 把LSA集来的信息 建立自己的数据库LSDB,并用SPF计算,建立起到达每个网络的最短路径树
3.通过最短路径树计算最优路由,并更新到自己的路由表汇总
Router ID 是一个32位的值,表示了一个自治系统内路由器,管理员可以为每台运行ospf 的路由器手动配置一个RouterID。可以自动生成,为了防止由于端口地址更改,ID 发生变化,建议手动设置
##修改之前确认是否有RouterID了,如果更改可以要重启下进程
[R1]ospf router-id 172.172.172.10
Info: The configuration succeeded. You need to restart the OSPF process to valid
ate the new router ID.
###这个是之前自动生成的RouterID
[R1]display ospf peer
OSPF Process 1 with Router ID 172.16.10.1
#如果手动设置想要生效,需要重启 进程
<R1>reset ospf 1 process
Warning: The OSPF process will be reset. Continue? [Y/N]:y
<R1>display ospf peer
OSPF Process 1 with Router ID 172.172.172.10
## 确认应修改完成
router id 是整个自治域 唯一
###开启debug 设置 如果关闭可以ctrl +o
<R2>terminal debugging
Info: Current terminal debugging is on.
<R2>termi
<R2>terminal monit
<R2>terminal monitor ?
<cr> Please press ENTER to execute command
<R2>terminal monitor
Info: Current terminal monitor is on.
<R2>debugging ospf packet
<R2>
May 13 2020 17:10:18.346.1-08:00 R2 RM/6/RMDEBUG:
<R2>undo debugging all
Info: All possible debugging has been turned off
<R2>terminal debugging
配置ospf 是网络通信
###配置R1 路由器
[R1]ospf
[R1-ospf-1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]di th
[V200R003C00]
#
area 0.0.0.0
#
return
[R1-ospf-1-area-0.0.0.0]
[R1-ospf-1-area-0.0.0.0]
[R1-ospf-1-area-0.0.0.0]
[R1-ospf-1-area-0.0.0.0]network 172.16.10.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 10.10.20.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 10.10.10.0 0.0.0.255
###查看端口
<R1>disp ospf peer br
OSPF Process 1 with Router ID 1.1.1.1
Peer Statistic Information
----------------------------------------------------------------------------
Area Id Interface Neighbor id State
0.0.0.0 GigabitEthernet0/0/2 5.5.5.5 Full
----------------------------------------------------------------------------
##查看路由
<R1>disp ospf routing
OSPF Process 1 with Router ID 1.1.1.1
Routing Tables
Routing for Network
Destination Cost Type NextHop AdvRouter Area
10.10.20.0/24 1 Transit 10.10.20.1 1.1.1.1 0.0.0.0
172.16.10.0/24 1 Stub 172.16.10.1 1.1.1.1 0.0.0.0
172.16.12.0/24 2 Stub 10.10.20.2 5.5.5.5 0.0.0.0
Total Nets: 3
Intra Area: 3 Inter Area: 0 ASE: 0 NSSA: 0
###查看库文件
<R1>disp ospf lsdb
OSPF Process 1 with Router ID 1.1.1.1
Link State Database
Area: 0.0.0.0
Type LinkState ID AdvRouter Age Len Sequence Metric
Router 1.1.1.1 1.1.1.1 351 48 80000006 1
Router 5.5.5.5 5.5.5.5 369 48 80000007 1
Network 10.10.20.2 5.5.5.5 369 32 80000002 0
####配置 R5 路由器
[R5]ospf
[R5-ospf-1]di th
[V200R003C00]
#
ospf 1
#
return
[R5-ospf-1]are
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]dis ip inter br
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 4
The number of interface that is DOWN in Physical is 5
The number of interface that is UP in Protocol is 4
The number of interface that is DOWN in Protocol is 5
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 unassigned down down
GigabitEthernet0/0/1 172.16.12.1/24 up up
GigabitEthernet0/0/2 10.10.12.2/24 *down down
GigabitEthernet4/0/0 10.10.20.2/24 up up
GigabitEthernet4/0/1 unassigned down down
GigabitEthernet4/0/2 unassigned down down
GigabitEthernet4/0/3 unassigned down down
LoopBack0 5.5.5.5/32 up up(s)
NULL0 unassigned up up(s)
[R5-ospf-1-area-0.0.0.0]network 10.10.12.0 0.0.0.255
[R5-ospf-1-area-0.0.0.0]network 10.10.20.0 0.0.0.255
[R5-ospf-1-area-0.0.0.0]network 172.16.12.0 0.0.0.255
##查看ospf 的路由
[R5-ospf-1-area-0.0.0.0]disp ospf routing
OSPF Process 1 with Router ID 5.5.5.5
Routing Tables
Routing for Network
Destination Cost Type NextHop AdvRouter Area
10.10.20.0/24 1 Transit 10.10.20.2 5.5.5.5 0.0.0.0
172.16.12.0/24 1 Stub 172.16.12.1 5.5.5.5 0.0.0.0
172.16.10.0/24 2 Stub 10.10.20.1 1.1.1.1 0.0.0.0
Total Nets: 3
Intra Area: 3 Inter Area: 0 ASE: 0 NSSA: 0
[R5-ospf-1-area-0.0.0.0]
###LSDB: 链路状态信息,并需要实时同步
[R5-ospf-1-area-0.0.0.0]disp ospf lsdb
OSPF Process 1 with Router ID 5.5.5.5
Link State Database
Area: 0.0.0.0
Type LinkState ID AdvRouter Age Len Sequence Metric
Router 1.1.1.1 1.1.1.1 149 48 80000006 1
Router 5.5.5.5 5.5.5.5 165 48 80000007 1
Network 10.10.20.2 5.5.5.5 165 32 80000002 0
###修改DR 权限 更新DB
#####查看DR 和BDR
Enter system view, return user view with Ctrl+Z.
[R5]disp ospf peer
OSPF Process 1 with Router ID 5.5.5.5
Neighbors
Area 0.0.0.0 interface 10.10.20.2(GigabitEthernet4/0/0)s neighbors
Router ID: 1.1.1.1 Address: 10.10.20.1
State: Full Mode:Nbr is Slave Priority: 1
DR: 10.10.20.2 BDR: 10.10.20.1 MTU: 0
Dead timer due in 30 sec
Retrans timer interval: 5
Neighbor is up for 00:27:01
Authentication Sequence: [ 0 ]
##确认 DB 是R5 DBR 是R1
##升级R1 为DB,R5 为DBR
##在 R1 上提升权限为2
[R1-GigabitEthernet0/0/2]ospf dr-priority 2
[R1-GigabitEthernet0/0/2]disp ospf peer
OSPF Process 1 with Router ID 1.1.1.1
Neighbors
Area 0.0.0.0 interface 10.10.20.1(GigabitEthernet0/0/2)s neighbors
Router ID: 5.5.5.5 Address: 10.10.20.2
State: Full Mode:Nbr is Master Priority: 1
DR: 10.10.20.2 BDR: 10.10.20.1 MTU: 0
Dead timer due in 35 sec
Retrans timer interval: 5
Neighbor is up for 00:31:01
Authentication Sequence: [ 0 ]
发现 没有改变,因为DR 是非抢占的,需要重启R5 的 ospf 协议
<R5>reset ospf process
<R5>disp ospf peer
OSPF Process 1 with Router ID 5.5.5.5
Neighbors
Area 0.0.0.0 interface 10.10.20.2(GigabitEthernet4/0/0)s neighbors
Router ID: 1.1.1.1 Address: 10.10.20.1
State: Full Mode:Nbr is Slave Priority: 2
DR: 10.10.20.1 BDR: 10.10.20.2 MTU: 0
Dead timer due in 32 sec
Retrans timer interval: 0
Neighbor is up for 00:00:18
Authentication Sequence: [ 0 ]
<R5>
###ospf 可以在接口下设置 认证和开销
在R5 上进行设置,
[R5-GigabitEthernet4/0/0]ospf authentication-mode ?
hmac-md5 Use HMAC-MD5 algorithm
keychain Keychain authentication mode
md5 Use MD5 algorithm
null Use null authentication
simple Simple authentication mode
[R5-GigabitEthernet4/0/0]ospf authentication-mode md
[R5-GigabitEthernet4/0/0]ospf authentication-mode md5 ?
INTEGER<1-255> Key ID
<cr> Please press ENTER to execute command
[R5-GigabitEthernet4/0/0]ospf authentication-mode md5 1 ?
STRING<1-255>/<20-392> The password (key)
cipher Encryption type (Cryptogram)
plain Encryption type (Plain text)
[R5-GigabitEthernet4/0/0]ospf authentication-mode md5 1 ci
[R5-GigabitEthernet4/0/0]ospf authentication-mode md5 1 cipher ?
STRING<1-255>/<20-392> The password (key)
[R5-GigabitEthernet4/0/0]ospf authentication-mode md5 1 huayun
[R5-GigabitEthernet4/0/0]quit
[R5]q
<R5>save
The current configuration will be written to the device.
Are you sure to continue? (y/n)[n]:y
It will take several minutes to save configuration file, please wait.......
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
<R5>
May 14 2020 15:32:43-08:00 R5 %%01OSPF/3/NBR_CHG_DOWN(l)[0]:Neighbor event:neigh
bor state changed to Down. (ProcessId=256, NeighborAddress=1.1.1.1, NeighborEven
t=InactivityTimer, NeighborPreviousState=Full, NeighborCurrentState=Down)
<R5>
May 14 2020 15:32:43-08:00 R5 %%01OSPF/3/NBR_DOWN_REASON(l)[1]:Neighbor state le
aves full or changed to Down. (ProcessId=256, NeighborRouterId=1.1.1.1, Neighbor
AreaId=0, NeighborInterface=GigabitEthernet4/0/0,NeighborDownImmediate reason=Ne
ighbor Down Due to Inactivity, NeighborDownPrimeReason=Hello Not Seen, NeighborC
hangeTime=2020-05-14 15:32:43-08:00)
<R5>
###发现ping 的动作无法通过
From 172.16.12.12: bytes=32 seq=324 ttl=126 time=15 ms
From 172.16.12.12: bytes=32 seq=325 ttl=126 time=16 ms
From 172.16.12.12: bytes=32 seq=326 ttl=126 time=31 ms
Request timeout!
Request timeout!
Request timeout!
Request timeout!
--- 172.16.12.12 ping statistics ---
###在R1 上进行 做同样配置
R1-GigabitEthernet0/0/2]ospf auth
[R1-GigabitEthernet0/0/2]ospf authentication-mode md
[R1-GigabitEthernet0/0/2]ospf authentication-mode md5 1
[R1-GigabitEthernet0/0/2]ospf authentication-mode md5 1
[R1-GigabitEthernet0/0/2]ospf authentication-mode md5 1?
INTEGER<1-255> Key ID
[R1-GigabitEthernet0/0/2]ospf authentication-mode md5 1 huayun
[R1-GigabitEthernet0/0/2]
May 14 2020 15:34:47-08:00 R1 %%01OSPF/4/NBR_CHANGE_E(l)[0]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=2.20.10.10, Neighbo
rEvent=HelloReceived, NeighborPreviousState=Down, NeighborCurrentState=Init)
[R1-GigabitEthernet0/0/2]
May 14 2020 15:34:47-08:00 R1 %%01OSPF/4/NBR_CHANGE_E(l)[1]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=2.20.10.10, Neighbo
rEvent=2WayReceived, NeighborPreviousState=Init, NeighborCurrentState=ExStart)
[R1-GigabitEthernet0/0/2]
May 14 2020 15:34:47-08:00 R1 %%01OSPF/4/NBR_CHANGE_E(l)[2]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=2.20.10.10, Neighbo
rEvent=NegotiationDone, NeighborPreviousState=ExStart, NeighborCurrentState=Exch
ange)
[R1-GigabitEthernet0/0/2]
May 14 2020 15:34:47-08:00 R1 %%01OSPF/4/NBR_CHANGE_E(l)[3]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=2.20.10.10, Neighbo
rEvent=ExchangeDone, NeighborPreviousState=Exchange, NeighborCurrentState=Loadin
g)
[R1-GigabitEthernet0/0/2]
May 14 2020 15:34:47-08:00 R1 %%01OSPF/4/NBR_CHANGE_E(l)[4]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=2.20.10.10, Neighbo
rEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full)
[R1-GigabitEthernet0/0/2]
###发现 ospf 开始 Init -》ExStart -》 Exchange -》Loading -》 Full
##ping 状态重新通信
From 172.16.12.12: bytes=32 seq=12 ttl=126 time=32 ms
From 172.16.12.12: bytes=32 seq=13 ttl=126 time=15 ms
From 172.16.12.12: bytes=32 seq=14 ttl=126 time=32 ms
--- 172.16.12.12 ping statistics ---
14 packet(s) transmitted
13 packet(s) received
7.14% packet loss
round-trip min/avg/max = 0/28/32 ms