hcip---实验4

要求

1，R4为ISP，其上只能配置IP地址；
   R4与其他所有直连设备间均使用公有IP
2，R3-R5/6/7为MGRE环境，R3为中心站点；
3，整个OSPF环境IP基于172.16.0.0/16划分；
4，所有设备均可访问R4的环回；
5，减少LSA的更新量，加快收敛，保障更新安全；
6，全网可达

IP配置

、

OSPF,RIP,缺省

[r2]​ip route-static 0.0.0.0 0 172.16.1.3

[r3]ip route-static 0.0.0.0 0 34.0.0.2

[r5]ip route-static 0.0.0.0 0 45.0.0.1

[r6]ip route-static 0.0.0.0 0 46.0.0.1

[r7]ip route-static 0.0.0.0 0 47.0.0.1

[r1]ospf 1 router-id 1.1.1.1

[r1-ospf-1]area 1

[r1-ospf-1-area-0.0.0.1]network 172.16.1.0 0.0.0.7

[r1-ospf-1-area-0.0.0.1]network 172.16.10.1 0.0.0.0

[r2]ospf 1 router-id 2.2.2.2

[r2-ospf-1]area 1

[r2-ospf-1-area-0.0.0.1]network 172.16.1.0 0.0.0.7

[r2-ospf-1-area-0.0.0.1]network 172.16.20.2 0.0.0.0

[r3]ospf 1 router-id 3.3.3.3

[r3-ospf-1]area 0

[r3-ospf-1-area-0.0.0.0]network 172.16.30.3 0.0.0.0

[r3-ospf-1-area-0.0.0.0]network 172.16.100.0 0.0.0.255

[r3-ospf-1-area-0.0.0.0]quit

[r3-ospf-1]area 1

[r3-ospf-1-area-0.0.0.1]network 172.16.1.0 0.0.0.7

[r3-ospf-1-area-0.0.0.1]default-route-advertise always

[r5]ospf 1 router-id 5.5.5.5

[r5-ospf-1]area 0

[r5-ospf-1-area-0.0.0.0]network 172.16.50.5 0.0.0.0

[r5-ospf-1-area-0.0.0.0]network 172.16.100.0 0.0.0.255

[r5-ospf-1-area-0.0.0.0]quit

[r5-ospf-1]area 3

[r5-ospf-1-area-0.0.0.3]network 172.16.3.0 0.0.0.3

[r6]ospf 1 router-id 6.6.6.6

[r6-ospf-1]area 0

[r6-ospf-1-area-0.0.0.0]network 172.16.60.6 0.0.0.0

[r6-ospf-1-area-0.0.0.0]network 172.16.100.0 0.0.0.255

[r6-ospf-1-area-0.0.0.0]quit

[r6-ospf-1]area 2

[r6-ospf-1-area-0.0.0.2]network 172.16.2.0 0.0.0.3

[r7]ospf 1 router-id 7.7.7.7

[r7-ospf-1]area 0

[r7-ospf-1-area-0.0.0.0]network 172.16.70.7 0.0.0.0

[r7-ospf-1-area-0.0.0.0]network 172.16.100.0 0.0.0.255

[r7-ospf-1-area-0.0.0.0]quit

[r7-ospf-1]area 4

[r7-ospf-1-area-0.0.0.4]network 172.16.3.4 0.0.0.3

[r8]ospf 1 router-id 8.8.8.8

[r8-ospf-1]area 3

[r8-ospf-1-area-0.0.0.3]network 172.16.3.0 0.0.0.3

[r8-ospf-1-area-0.0.0.3]network 172.16.80.8 0.0.0.0

[r9]ospf 1 router-id 9.9.9.9

[r9-ospf-1]area 3

[r9-ospf-1-area-0.0.0.3]network 172.16.3.8 0.0.0.3

[r9-ospf-1-area-0.0.0.3]network 172.16.90.9 0.0.0.0

[r9-ospf-1-area-0.0.0.3]quit

[r9-ospf-1]area 4

[r9-ospf-1-area-0.0.0.4]network 172.16.4.0 0.0.0.3

[r9-ospf-1-area-0.0.0.4]quit

[r9-ospf-1]import-route ospf 2

[r10]ospf 2 router-id 10.10.10.10

[r10-ospf-2]area 4

[r10-ospf-2-area-0.0.0.4]network 172.16.4.0 0.0.0.3

[r10-ospf-2-area-0.0.0.4]network 172.16.10.10 0.0.0.0

[r11]ospf 1 router-id 11.11.11.11

[r11-ospf-1]area 2

[r11-ospf-1-area-0.0.0.2]network 172.16.2.0 0.0.0.3

[r11-ospf-1-area-0.0.0.2]network 172.16.11.11 0.0.0.0

[r12]ospf 1 router-id 12.12.12.12

[r12-ospf-1]area 2

[r12-ospf-1-area-0.0.0.2]network 172.16.2.4 0.0.0.3

[r12-ospf-1-area-0.0.0.2]network 172.16.12.12 0.0.0.0

[r12-ospf-1-area-0.0.0.2]network 172.16.12.13 0.0.0.0

[r12-ospf-1-area-0.0.0.2]quit

[r12]rip 1

[r12-rip-1]version 2

[r12-rip-1]undo summary

[r12-rip-1]network 172.16.0.0

[r12-ospf-1]import-route rip

创建隧道，配置MGRE

[r3]int t0/0/0

[r3-Tunnel0/0/0]ip add 172.16.100.3 24

[r3-Tunnel0/0/0]tunnel-protocol gre p2mp

[r3-Tunnel0/0/0]source 34.0.0.1

[r3-Tunnel0/0/0]nhrp network-id 100

[r3-Tunnel0/0/0]nhrp entry multicast dynamic

[r5]int t0/0/0

[r5-Tunnel0/0/0]ip add 172.16.100.5 24

[r5-Tunnel0/0/0]tunnel-protocol gre p2mp

[r5-Tunnel0/0/0]source 45.0.0.2

[r5-Tunnel0/0/0]nhrp network-id 100

[r5-Tunnel0/0/0]nhrp entry 172.16.100.3 34.0.0.1 register

[r6]int t0/0/0

[r6-Tunnel0/0/0]ip add 172.16.100.6 24

[r6-Tunnel0/0/0]tunnel-protocol gre p2mp

[r6-Tunnel0/0/0]source 46.0.0.2

[r6-Tunnel0/0/0]nhrp network-id 100

[r6-Tunnel0/0/0]nhrp entry 172.16.100.3 34.0.0.1 register

[r7]int t0/0/0

[r7-Tunnel0/0/0]ip add 172.16.100.7 24

[r7-Tunnel0/0/0]tunnel-protocol gre p2mp

[r7-Tunnel0/0/0]source 47.0.0.2

[r7-Tunnel0/0/0]nhrp network-id 100

[r7-Tunnel0/0/0]nhrp entry 172.16.100.3 34.0.0.1 register

各设备都能访问R4环回

[r3]acl 2000

[r3-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255

[r3-acl-basic-2000]quit

[r3]interface Serial4/0/0

[r3-Serial4/0/0]nat outbound 2000

[r5]acl 2000

[r5-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255

[r5-acl-basic-2000]quit

[r5]interface Serial4/0/0

[r5-Serial4/0/0]nat outbound 2000

[r6]acl 2000

[r6-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255

[r6-acl-basic-2000]quit

[r6]interface Serial3/0/0

[r6-Serial3/0/0]nat outbound 2000

[r7]acl 2000

[r7-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255

[r7-acl-basic-2000]quit

[r7]interface Serial4/0/2

[r7-Serial4/0/2]nat outbound 2000

减少LSA更新量

[r3]ospf 1

[r3-ospf-1]area 1

[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0

[r6]ospf 1

[r6-ospf-1]area 2

[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0

[r7]ospf 1

[r7-ospf-1]area 3

[r7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0

[r9]ospf 1

[r9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0

[r12]ospf 1

[r12-ospf-1]asbr-summary 172.16.160.0 255.255.224.0

[r1]ospf 1

[r1-ospf-1]area 1

[r1-ospf-1-area-0.0.0.1]stub no-summary

[r2]ospf 1

[r2-ospf-1]area 1

[r2-ospf-1-area-0.0.0.1]stub no-summary

[r3]ospf 1

[r3-ospf-1]area 1

[r3-ospf-1-area-0.0.0.1]stub no-summary

[r6]ospf 1

[r6-ospf-1]area 2

[r6-ospf-1-area-0.0.0.2]nssa no-summary

[r11]ospf 1

[r11-ospf-1]area 2

[r11-ospf-1-area-0.0.0.2]nssa no-summary

[r12]ospf 1

[r12-ospf-1]area 2

[r12-ospf-1-area-0.0.0.2]nssa no-summary

[r7]ospf 1

[r7-ospf-1]area 3

[r7-ospf-1-area-0.0.0.3]nssa no-summary

[r8]ospf 1

[r8-ospf-1]area 3

[r8-ospf-1-area-0.0.0.3]nssa no-summary

[r9]ospf 1

[r9-ospf-1]area 3

[r9-ospf-1-area-0.0.0.3]nssa no-summary

加快收敛修改hello时间

[r1]interface GigabitEthernet0/0/0

[r1-GigabitEthernet0/0/0]ospf timer hello 5

[r2]interface GigabitEthernet0/0/0

[r2-GigabitEthernet0/0/0]ospf timer hello 5

[r3]interface GigabitEthernet0/0/0

[r3-GigabitEthernet0/0/0]ospf timer hello 5

[r3]interface Tunnel0/0/0

[r3-Tunnel0/0/0]ospf timer hello 5

[r5]interface Tunnel0/0/0

[r5-Tunnel0/0/0]ospf timer hello 5

[r6]interface GigabitEthernet0/0/0

[r6-GigabitEthernet0/0/0]ospf timer hello 5

[r6]interface Tunnel0/0/0

[r6-Tunnel0/0/0]ospf timer hello 5

[r7]interface GigabitEthernet0/0/1

[r7-GigabitEthernet0/0/1]ospf timer hello 5

[r7]interface Tunnel0/0/0

[r7-Tunnel0/0/0]ospf timer hello 5

[r8]interface GigabitEthernet0/0/1

[r8-GigabitEthernet0/0/1]ospf timer hello 5

[r8]interface GigabitEthernet0/0/0

[r8-GigabitEthernet0/0/0]ospf timer hello 5

[r9]interface GigabitEthernet0/0/0

[r9-GigabitEthernet0/0/0]ospf timer hello 5

[r9]interface GigabitEthernet0/0/1

[r9-GigabitEthernet0/0/1]ospf timer hello 5

[r10]interface GigabitEthernet0/0/0

[r10-GigabitEthernet0/0/0]ospf timer hello 5

[r11]interface GigabitEthernet0/0/0

[r11-GigabitEthernet0/0/0]ospf timer hello 5

[r11]interface GigabitEthernet0/0/1

[r11-GigabitEthernet0/0/1]ospf timer hello 5

[r12]interface GigabitEthernet0/0/0

[r12-GigabitEthernet0/0/0]ospf timer hello 5

保证安全

[r1]ospf 1

[r1-ospf-1]area 1

[r1-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456

[r2]ospf 1

[r2-ospf-1]area 1

[r2-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456

[r3]ospf 1

[r3-ospf-1]area 1

[r3-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456

[r3-ospf-1]area 0

[r3-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123456

[r5]ospf 1

[r5-ospf-1]area 0

[r5-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123456

[r6]ospf 1

[r6-ospf-1]area 2

[r6-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 123456

[r6-ospf-1]area 0

[r6-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123456

[r7]ospf 1

[r7-ospf-1]area 0

[r7-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123456

[r7-ospf-1]area 3

[r7-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456

[r8]ospf 1

[r8-ospf-1]area 3

[r8-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456

[r9]ospf 1

[r9-ospf-1]area 3

[r9-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456

[r9]ospf 2

[r9-ospf-2]area 4

[r9-ospf-2-area-0.0.0.4]authentication-mode md5 1 cipher 123456

[r10]ospf 2

[r10-ospf-2]area 4

[r10-ospf-2-area-0.0.0.4]authentication-mode md5 1 cipher 123456

[r11]ospf 1

[r11-ospf-1]area 2

[r11-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 123456

[r12]ospf 1

[r12-ospf-1]area 2

[r12-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 123456