分配IP地址
172.16.0.0/20
172.16.0000 0000.0000 0 000/29
骨干网:
172.16.0.0/29
172.16.0.8/29
172.16.0.16/29
172.16.0.24/29
172.16.0.32/29
172.16.0.40/29
用户网:
172.16.16.0/20
172.16.32.0/20
172.16.48.0/20
172.16.64.0/20
172.16.80.0/20
172.16.96.0/20
172.16.112.0/20
172.16.128.0/20
area 0
[r3]int Serial 4/0/0
[r3-Serial4/0/0]ip add 34.0.0.1 24
[r4]int Serial 4/0/0
[r4-Serial4/0/0]ip add 34.0.0.2 24
[r4-Serial4/0/0]int s3/0/0
[r4-Serial3/0/0]ip add 45.0.0.1 24
[r4-Serial3/0/0]int s 4/0/1
[r4-Serial4/0/1]ip add 46.0.0.1 24
[r4-Serial4/0/1]int g 0/0/0
[r4-GigabitEthernet0/0/0]ip add 47.0.0.1 24
[r5]int s4/0/0
[r5-Serial4/0/0]ip add 45.0.0.2 24
[r6]int Serial 4/0/0
[r6-Serial4/0/0]ip add 46.0.0.2 24
[r4-LoopBack0]ip add 4.4.4.4 24
[r5-LoopBack0]ip add 5.5.5.5 24
[r6-LoopBack0]ip add 6.6.6.6 24
[r7-LoopBack0]ip add 7.7.7.7 24
NHRP
[r3]int t 0/0/0
[r3-Tunnel0/0/0]ip add 10.0.0.3 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source 34.0.0.1
[r3-Tunnel0/0/0]nhrp entry multicast dynamic
[r3]ip route-static 45.0.0.0 24 34.0.0.2
[r3]ip route-static 46.0.0.0 24 34.0.0.2
[r3]ip route-static 47.0.0.0 24 34.0.0.2
[r5-Tunnel0/0/0]ip add 10.0.0.5 24
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp
[r5-Tunnel0/0/0]source 45.0.0.2
[r5-Tunnel0/0/0]nhrp entry 10.0.0.3 34.0.0.1 register
[r5]ip route-static 34.0.0.0 24 45.0.0.1
[r5]ip route-static 46.0.0.0 24 45.0.0.1
[r5]ip route-static 47.0.0.0 24 45.0.0.1
[r6-Tunnel0/0/0]ip add 10.0.0.6 24
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp
[r6-Tunnel0/0/0]source 46.0.0.2
[r6-Tunnel0/0/0]nhrp entry 10.0.0.3 34.0.0.1 register
[r6]ip route-static 34.0.0.0 24 46.0.0.1
[r6]ip route-static 45.0.0.0 24 46.0.0.1
[r6]ip route-static 47.0.0.0 24 46.0.0.1
[r7-Tunnel0/0/0]ip add 10.0.0.7 24
[r7-Tunnel0/0/0]tunnel-protocol gre p2mp
[r7-Tunnel0/0/0]source 47.0.0.2
[r7-Tunnel0/0/0]nhrp entry 10.0.0.3 34.0.0.1 register
[r7]ip route-static 34.0.0.0 24 47.0.0.1
[r7]ip route-static 45.0.0.0 24 47.0.0.1
[r7]ip route-static 46.0.0.0 24 47.0.0.1
OSPF
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 10.0.0.3 0.0.0.0
[r3-Tunnel0/0/0]ospf network-type p2mp //可改为broadcast,但p2mp无需选举
[r3-Tunnel0/0/0]ospf timer hello 10
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 10.0.0.5 0.0.0.0
[r5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
[r5-Tunnel0/0/0]ospf network-type p2mp
[r5-Tunnel0/0/0]ospf timer hello 10
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 10.0.0.6 0.0.0.0
[r6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.0
[r6-Tunnel0/0/0]ospf network-type p2mp
[r6-Tunnel0/0/0]ospf timer hello 10
[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1]area 0
[r7-ospf-1-area-0.0.0.0]network 10.0.0.7 0.0.0.0
[r7-ospf-1-area-0.0.0.0]network 7.7.7.7 0.0.0.0
[r7-Tunnel0/0/0]ospf network-type p2mp
[r7-Tunnel0/0/0]ospf timer hello 10
[r5]ip route-static 0.0.0.0 0 45.0.0.1
area 1
[r1-GigabitEthernet0/0/0]ip add 172.16.0.1 29
[r2-GigabitEthernet0/0/0]ip add 172.16.0.2 29
[r3-GigabitEthernet0/0/0]ip add 172.16.0.3 29
[r1-LoopBack0]ip add 172.16.32.1 20
//[r1-LoopBack0]ospf network-type broadcast 别的邻居路由表学到的网关网络掩码为32,网络类型改为broadcast后显示正常
[r2-LoopBack0]ip add 172.16.48.1 20
[r3-LoopBack0]ip add 3.3.3.3 24
OSPF
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]network 3.3.3.3 0.0.0.0
[r3-ospf-1-area-0.0.0.1]network 172.16.0.3 0.0.0.0
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 1
[r1-ospf-1-area-0.0.0.1]network 172.16.0.1 0.0.0.0
[r1-ospf-1-area-0.0.0.1]network 172.16.32.1 0.0.0.0
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 1
[r2-ospf-1-area-0.0.0.1]network 172.16.0.2 0.0.0.0
[r2-ospf-1-area-0.0.0.1]network 172.16.48.1 0.0.0.0
配置末梢区域
[r1-ospf-1-area-0.0.0.1]stub
[r2-ospf-1-area-0.0.0.1]stub
[r3-ospf-1-area-0.0.0.1]stub
NAT
[r3]ip route-static 0.0.0.0 0 34.0.0.2
[r3]acl 2000
[r3-acl-basic-2000]rule permit source any
[r3]int Serial 4/0/0
[r3-Serial4/0/0]nat outbound 2000
area 3、4
[r7-GigabitEthernet0/0/1]ip add 172.16.0.9 29
[r8-GigabitEthernet0/0/0]ip add 172.16.0.10 29
[r8-GigabitEthernet0/0/1]ip add 172.16.0.17 29
[r9-GigabitEthernet0/0/0]ip add 172.16.0.18 29
[r9-GigabitEthernet0/0/1]ip add 172.16.0.25 29
[r10-GigabitEthernet0/0/0]ip add 172.16.0.26 29
[r8-LoopBack0]ip add 172.16.16.1 20
[r9-LoopBack0]ip add 172.16.64.1 20
[r10-LoopBack0]ip add 172.16.80.1 20
OSPF
[r7-ospf-1]area 3
[r7-ospf-1-area-0.0.0.3]network 172.16.0.9 0.0.0.0
[r8]ospf 1 router-id 8.8.8.8
[r8-ospf-1]area 3
[r8-ospf-1-area-0.0.0.3]network 172.16.0.10 0.0.0.0
[r8-ospf-1-area-0.0.0.3]network 172.16.16.1 0.0.0.0
[r8-ospf-1-area-0.0.0.3]network 172.16.0.17 0.0.0.0
[r9]ospf 1 router-id 9.9.9.9
[r9-ospf-1]area 3
[r9-ospf-1-area-0.0.0.3]network 172.16.0.18 0.0.0.0
[r9-ospf-1-area-0.0.0.3]network 172.16.64.1 0.0.0.0
[r9-ospf-1-area-0.0.0.3]network 172.16.0.25 0.0.0.0
[r10]ospf 1 router-id 10.10.10.10
[r10-ospf-1]area 3
[r10-ospf-1-area-0.0.0.3]network 172.16.0.26 0.0.0.0
[r10-ospf-1-area-0.0.0.3]network 172.16.80.1 0.0.0.0
NAT
[r7]acl 2000
[r7-acl-basic-2000]rule permit source any
[r7]int g 0/0/0
[r7-GigabitEthernet0/0/0]nat outbound 2000
[r7]ip route-static 0.0.0.0 0 47.0.0.1
[r7-ospf-1]default-route-advertise
VLINK
[r7-ospf-1-area-0.0.0.3]vlink-peer 9.9.9.9
[r9-ospf-1-area-0.0.0.3]vlink-peer 7.7.7.7
area 2
[r6-GigabitEthernet0/0/0]ip add 172.16.0.33 29
[r11-GigabitEthernet0/0/0]ip add 172.16.0.34 29
[r11-GigabitEthernet0/0/1]ip add 172.16.0.41 29
[r11-LoopBack0]ip add 172.16.128.1 20
[r12-GigabitEthernet0/0/0]ip add 172.16.0.42 29
[r12-LoopBack0]ip add 172.16.96.1 20
[r12-LoopBack1]ip add 172.16.112.1 20
OSPF
[r6-ospf-1]area 2
[r6-ospf-1-area-0.0.0.2]network 172.16.0.33 0.0.0.0
[r11]ospf 1 router-id 11.11.11.11
[r11-ospf-1]area 2
[r11-ospf-1-area-0.0.0.2]network 172.16.0.34 0.0.0.0
[r11-ospf-1-area-0.0.0.2]network 172.16.128.1 0.0.0.0
[r11-ospf-1-area-0.0.0.2]network 172.16.0.41 0.0.0.0
[r12]ospf 1 router-id 12.12.12.12
[r12-ospf-1]area 2
[r12-ospf-1-area-0.0.0.2]network 172.16.0.42 0.0.0.0
RIP
[r12]rip
[r12-rip-1]v 2
[r12-rip-1]network 172.16.0.0
[r12-rip-1]undo summary
NAT
[r6]acl 2000
[r6-acl-basic-2000]rule permit source any
[r6-Serial4/0/0]nat outbound 2000
[r6]ip route-static 0.0.0.0 0 46.0.0.1
[r6-ospf-1]default-route-advertise
PAP
[r3]aaa
[r3-aaa]local-user huawei password cipher 123456
[r3-aaa]local-user huawei service-type ppp
[r3-Serial4/0/0]ppp authentication-mode pap
[r4-Serial4/0/0]ppp pap local-user huawei password cipher 123456
AAA
[r7-aaa]domain huawei
[r7-aaa]local-user huawei@huawei password cipher 123456
[r7-aaa]local-user huawei@huawei service-type telnet
[r7-aaa]authorization-scheme huawei
[r7-aaa-author-huawei]authorization-mode local
[r7-aaa]authentication-scheme huawei
[r7-aaa-authen-huawei]authentication-mode local
[r7-aaa]domain huawei
[r7-aaa-domain-huawei]authorization-scheme huawei
[r7-aaa]authentication-scheme huawei
[r7-ui-vty0]user-interface vty 0 4
[r7-ui-vty0-4]authentication-mode aaa