玩转华为ENSP模拟器系列 | 配置OSPF的NSSA区域

已于 2023-07-04 12:06:24 修改
阅读量2.2k 收藏 4
点赞数 3
CC 4.0 BY-SA版权
分类专栏： 实验笔记 文章标签： 华为 网络
于 2022-05-12 17:51:39 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.youkuaiyun.com/guolianggsta/article/details/124736520
本文档详细介绍了如何在华为路由器上配置OSPF的NSSA区域，以减少路由信息数量并引入自治系统外部路由。通过配置Area1为NSSA区域， DeviceD引入静态路由，然后设置DeviceA为转换路由器，成功实现了NSSA区域的路由优化。最终验证结果显示，DeviceC的OSPF路由表中外部路由的发布路由器由DeviceB变为DeviceA，达到了预期目标。

摘要生成于 C知道 ，由 DeepSeek-R1 满血版支持， 前往体验 >

素材来源：华为路由器配置指南

一边学习一边整理试验笔记，并与大家分享，侵权即删，谢谢支持！

附上汇总贴：玩转华为ENSP模拟器系列 | 合集_COCOgsta的博客-优快云博客_华为模拟器实验

目标

举例介绍OSPF的NSSA区域的配置过程。

组网需求

某些网络由于引入大量外部路由导致路由表的规模过大，网络资源浪费，CPU占用率较高。为了解决这个问题，可以将位于自治系统边缘的非骨干区域配置成NSSA区域，减少传递的路由信息数量。配置区域为NSSA区域后，不传播来自OSPF网络其它区域的外部路由，但引入自治系统外部的路由，这样可以避免大量外部路由对路由器带宽和存储资源的消耗。

所有的路由器都运行OSPF，整个自治系统划分为两个区域。其中DeviceA和DeviceB作为ABR来转发区域间的路由，DeviceD作为ASBR引入了外部静态路由10.0.0.0/8。此时，在不影响路由可达的前提下，达到减少通告到Area1内的LSA数量，但引入自治系统外部路由的目的。需要将Area1配置为NSSA区域，并配置NSSA区域中的DeviceA为转换路由器。

配置思路

  • 在各路由器上使能OSPF，配置OSPF基本功能，实现OSPF协议互连。参见配置OSPF的基本功能。
  • 配置Area1为NSSA区域。
  • 在DeviceD上配置引入静态路由10.0.0.0/8。
  • 配置NSSA区域中的DeviceA为转换路由器。

操作步骤

  1. 配置各机接口的IP地址
  2. 配置OSPF基本功能
  3. 配置Area1区域为NSSA区域

说明：所有连接到NSSA区域的路由器必须使用nssa命令将该区域配置成NSSA属性。

  1. 配置DeviceD引入静态路由10.0.0.0/8

查看DeviceC的OSPF路由表。

<DeviceC>dis ospf routing
          OSPF Process 1 with Router ID 3.3.3.3
                   Routing Tables
 Routing for Network
 Destination        Cost     Type       NextHop         AdvRouter       Area           
 192.168.0.0/24     1        Direct     192.168.0.2     3.3.3.3         0.0.0.0        
 192.168.1.0/24     2        Inter-area 192.168.2.1     2.2.2.2         0.0.0.0        
 192.168.1.0/24     2        Inter-area 192.168.0.1     1.1.1.1         0.0.0.0        
 192.168.2.0/24     1        Direct     192.168.2.2     3.3.3.3         0.0.0.0        
 192.168.3.0/24     2        Inter-area 192.168.0.1     1.1.1.1         0.0.0.0        
 192.168.4.0/24     2        Inter-area 192.168.2.1     2.2.2.2         0.0.0.0        
 Routing for ASEs
 Destination        Cost       Type       Tag        NextHop         AdvRouter      
 10.0.0.0/8         1          Type2      1          192.168.0.1     2.2.2.2        
 Total Nets: 6
 Intra Area: 2  Inter Area: 3  ASE: 1  NSSA: 0
          OSPF Process 65534 with Router ID 128.1.138.140
                   Routing Tables
 Routing for Network
 Destination        Cost     Type       NextHop         AdvRouter       Area           
 128.1.138.137/32   100      Stub       128.1.138.137   128.1.138.137   0.0.0.0        
 128.1.138.137/32   100      Stub       128.1.138.137   128.1.138.137   0.0.0.0        
 128.1.138.138/32   200      Stub       128.1.138.137   128.1.138.138   0.0.0.0        
 128.1.138.138/32   200      Stub       128.1.138.139   128.1.138.138   0.0.0.0        
 128.1.138.138/32   200      Stub       128.1.138.137   128.1.138.138   0.0.0.0        
 128.1.138.139/32   100      Stub       128.1.138.139   128.1.138.139   0.0.0.0        
 128.1.138.140/32   0        Direct     128.1.138.140   128.1.138.140   0.0.0.0        
 128.1.138.141/32   100      Stub       128.1.138.141   128.1.138.141   0.0.0.0        
 128.1.138.141/32   100      Stub       128.1.138.141   128.1.138.141   0.0.0.0        
 Total Nets: 5
 Intra Area: 5  Inter Area: 0  ASE: 0  NSSA: 0
<DeviceC>

可以看到，NSSA区域引入AS外部路由的发布路由器的Router ID为2.2.2.2，即DeviceB为转换。这是因为OSPF会选举Router ID较大的ABR作为转换路由器。

  1. 配置DeviceA为转换路由器
[~DeviceA-ospf-1]area 1
[~DeviceA-ospf-1-area-0.0.0.1]nssa default-route-advertise translator-always
  1. 查看配置结果

查看DeviceC的OSPF路由表。

<DeviceC>dis ospf routing
          OSPF Process 1 with Router ID 3.3.3.3
                   Routing Tables
 Routing for Network
 Destination        Cost     Type       NextHop         AdvRouter       Area           
 192.168.0.0/24     1        Direct     192.168.0.2     3.3.3.3         0.0.0.0        
 192.168.1.0/24     2        Inter-area 192.168.2.1     2.2.2.2         0.0.0.0        
 192.168.1.0/24     2        Inter-area 192.168.0.1     1.1.1.1         0.0.0.0        
 192.168.2.0/24     1        Direct     192.168.2.2     3.3.3.3         0.0.0.0        
 192.168.3.0/24     2        Inter-area 192.168.0.1     1.1.1.1         0.0.0.0        
 192.168.4.0/24     2        Inter-area 192.168.2.1     2.2.2.2         0.0.0.0        
 Routing for ASEs
 Destination        Cost       Type       Tag        NextHop         AdvRouter      
 10.0.0.0/8         1          Type2      1          192.168.0.1     1.1.1.1        
 Total Nets: 6
 Intra Area: 2  Inter Area: 3  ASE: 1  NSSA: 0
          OSPF Process 65534 with Router ID 128.1.138.140
                   Routing Tables
 Routing for Network
 Destination        Cost     Type       NextHop         AdvRouter       Area           
 128.1.138.137/32   100      Stub       128.1.138.137   128.1.138.137   0.0.0.0        
 128.1.138.137/32   100      Stub       128.1.138.137   128.1.138.137   0.0.0.0        
 128.1.138.138/32   200      Stub       128.1.138.137   128.1.138.138   0.0.0.0        
 128.1.138.138/32   200      Stub       128.1.138.139   128.1.138.138   0.0.0.0        
 128.1.138.138/32   200      Stub       128.1.138.137   128.1.138.138   0.0.0.0        
 128.1.138.139/32   100      Stub       128.1.138.139   128.1.138.139   0.0.0.0        
 128.1.138.140/32   0        Direct     128.1.138.140   128.1.138.140   0.0.0.0        
 128.1.138.141/32   100      Stub       128.1.138.141   128.1.138.141   0.0.0.0        
 128.1.138.141/32   100      Stub       128.1.138.141   128.1.138.141   0.0.0.0        
 Total Nets: 5
 Intra Area: 5  Inter Area: 0  ASE: 0  NSSA: 0
<DeviceC>

可以看到，DeviceC引入了一条AS外部的路由，并且，引入的外部路由的发布路由器的Router ID变为1.1.1.1，即DeviceA成为了转换路由器。.

附上完整配置

DeviceA

<DeviceA>dis cur
!Software Version V800R011C00SPC607B607
!Last configuration was updated at 2019-12-10 16:40:57+00:00
!Last configuration was saved at 2019-12-10 16:44:18+00:00
#
sysname DeviceA
#
set neid 18a89
#
vsm on-board-mode enable
#
snmp-agent trap type base-trap
#
icmp rate-limit disable
#
router id 1.1.1.1
#
ip dcn vpn-instance __dcn_vpn__
 ipv4-family
#
aaa
 #
 authentication-scheme default0
 #
 authentication-scheme default1
 #
 authentication-scheme default
  authentication-mode local radius
 #
 authorization-scheme default
 #
 accounting-scheme default0
 #
 accounting-scheme default1
 #
 domain default0
 #
 domain default1
 #
 domain default_admin
#
license
#
interface Ethernet1/0/0
 undo shutdown
 ip address 192.168.3.1 255.255.255.0
 dcn
 dcn mode vlan  
#
interface Ethernet1/0/0.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/1
 undo shutdown
 ip address 192.168.0.1 255.255.255.0
 dcn
 dcn mode vlan
#
interface Ethernet1/0/1.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/2
 undo shutdown
 ip address 192.168.1.1 255.255.255.0
 dcn mode vlan
#
interface Ethernet1/0/2.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/3
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/3.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/4
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/4.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/5
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/5.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/6
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/6.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/7
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/7.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/8
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/8.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/9
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/9.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface GigabitEthernet0/0/0
 undo shutdown  
#
interface LoopBack2147483647
 description DCN loopback interface
 ip binding vpn-instance __dcn_vpn__
 ip address 128.1.138.137 255.255.0.0
#
interface NULL0
#
ospf 1
 area 0.0.0.0
  network 192.168.0.0 0.0.0.255
 area 0.0.0.1
  network 192.168.1.0 0.0.0.255
  network 192.168.3.0 0.0.0.255
  nssa default-route-advertise translator-always
#
ospf 65534 vpn-instance __dcn_vpn__
 description DCN ospf create by default
 opaque-capability enable
 hostname
 vpn-instance-capability simple
 area 0.0.0.0
  network 0.0.0.0 255.255.255.255
#
!The DCN function implements the capability of plug-and-play for this device.
!A NE IP address based on the unique NE ID is automatically generated in VPN
!of DCN. It is recommended that the NE IP address be changed to the planned 
!one by running the ne-ip X.X.X.X <MASK> command after the device being online.
dcn
#
lldp enable
#
ssh authorization-type default aaa
#
ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc
#
ssh server dh-exchange min-len 1024
#
ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc
#
user-interface con 0
#
user-interface aux 0
#
local-aaa-server
#               
vm-manager
#
return
<DeviceA> 
<DeviceA>
<DeviceA>
<DeviceA>

DeviceB

<DeviceB>dis cur
!Software Version V800R011C00SPC607B607
!Last configuration was updated at 2019-12-10 16:37:13+00:00
!Last configuration was saved at 2019-12-10 16:45:47+00:00
#
sysname DeviceB
#
set neid 18a8b
#
vsm on-board-mode enable
#
snmp-agent trap type base-trap
#
icmp rate-limit disable
#
router id 2.2.2.2
#
ip dcn vpn-instance __dcn_vpn__
 ipv4-family
#
aaa
 #
 authentication-scheme default0
 #
 authentication-scheme default1
 #
 authentication-scheme default
  authentication-mode local radius
 #
 authorization-scheme default
 #
 accounting-scheme default0
 #
 accounting-scheme default1
 #
 domain default0
 #
 domain default1
 #
 domain default_admin
#
license
#
interface Ethernet1/0/0
 undo shutdown
 ip address 192.168.1.2 255.255.255.0
 dcn
 dcn mode vlan  
#
interface Ethernet1/0/0.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/1
 undo shutdown
 ip address 192.168.4.2 255.255.255.0
 dcn
 dcn mode vlan
#
interface Ethernet1/0/1.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/2
 undo shutdown
 ip address 192.168.2.1 255.255.255.0
 dcn mode vlan
#
interface Ethernet1/0/2.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/3
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/3.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/4
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/4.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/5
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/5.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/6
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/6.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/7
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/7.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/8
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/8.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/9
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/9.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface GigabitEthernet0/0/0
 undo shutdown  
#
interface LoopBack2147483647
 description DCN loopback interface
 ip binding vpn-instance __dcn_vpn__
 ip address 128.1.138.139 255.255.0.0
#
interface NULL0
#
ospf 1
 area 0.0.0.0
  network 192.168.2.0 0.0.0.255
 area 0.0.0.1
  network 192.168.1.0 0.0.0.255
  network 192.168.4.0 0.0.0.255
  nssa
#
ospf 65534 vpn-instance __dcn_vpn__
 description DCN ospf create by default
 opaque-capability enable
 hostname
 vpn-instance-capability simple
 area 0.0.0.0
  network 0.0.0.0 255.255.255.255
#
!The DCN function implements the capability of plug-and-play for this device.
!A NE IP address based on the unique NE ID is automatically generated in VPN
!of DCN. It is recommended that the NE IP address be changed to the planned 
!one by running the ne-ip X.X.X.X <MASK> command after the device being online.
dcn
#
lldp enable
#
ssh authorization-type default aaa
#
ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc
#
ssh server dh-exchange min-len 1024
#
ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc
#
user-interface con 0
#
user-interface aux 0
#
local-aaa-server
#               
vm-manager
#
return
<DeviceB>
<DeviceB>
<DeviceB>

DeviceC

<DeviceC>dis cur
!Software Version V800R011C00SPC607B607
!Last configuration was updated at 2019-12-10 16:37:04+00:00
!Last configuration was saved at 2019-12-10 16:46:18+00:00
#
sysname DeviceC
#
set neid 18a8c
#
vsm on-board-mode enable
#
snmp-agent trap type base-trap
#
icmp rate-limit disable
#
router id 3.3.3.3
#
ip dcn vpn-instance __dcn_vpn__
 ipv4-family
#
aaa
 #
 authentication-scheme default0
 #
 authentication-scheme default1
 #
 authentication-scheme default
  authentication-mode local radius
 #
 authorization-scheme default
 #
 accounting-scheme default0
 #
 accounting-scheme default1
 #
 domain default0
 #
 domain default1
 #
 domain default_admin
#
license
#
interface Ethernet1/0/0
 undo shutdown
 dcn
 dcn mode vlan
#               
interface Ethernet1/0/0.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/1
 undo shutdown
 ip address 192.168.0.2 255.255.255.0
 dcn
 dcn mode vlan
#
interface Ethernet1/0/1.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/2
 undo shutdown
 ip address 192.168.2.2 255.255.255.0
 dcn mode vlan
#
interface Ethernet1/0/2.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/3
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/3.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/4
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/4.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/5
 undo shutdown  
 dcn mode vlan
#
interface Ethernet1/0/5.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/6
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/6.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/7
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/7.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/8
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/8.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/9
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/9.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface GigabitEthernet0/0/0
 undo shutdown
#               
interface LoopBack2147483647
 description DCN loopback interface
 ip binding vpn-instance __dcn_vpn__
 ip address 128.1.138.140 255.255.0.0
#
interface NULL0
#
ospf 1
 area 0.0.0.0
  network 192.168.0.0 0.0.0.255
  network 192.168.2.0 0.0.0.255
#
ospf 65534 vpn-instance __dcn_vpn__
 description DCN ospf create by default
 opaque-capability enable
 hostname
 vpn-instance-capability simple
 area 0.0.0.0
  network 0.0.0.0 255.255.255.255
#
!The DCN function implements the capability of plug-and-play for this device.
!A NE IP address based on the unique NE ID is automatically generated in VPN
!of DCN. It is recommended that the NE IP address be changed to the planned 
!one by running the ne-ip X.X.X.X <MASK> command after the device being online.
dcn
#
lldp enable
#
ssh authorization-type default aaa
#
ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc
#
ssh server dh-exchange min-len 1024
#
ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc
#
user-interface con 0
#
user-interface aux 0
#
local-aaa-server
#
vm-manager
#
return
<DeviceC>
<DeviceC>

DeviceD

<DeviceD>dis cur
!Software Version V800R011C00SPC607B607
!Last configuration was updated at 2019-12-10 16:38:15+00:00
!Last configuration was saved at 2019-12-10 16:46:53+00:00
#
sysname DeviceD
#
set neid 18a8a
#
vsm on-board-mode enable
#
snmp-agent trap type base-trap
#
icmp rate-limit disable
#
router id 4.4.4.4
#
ip dcn vpn-instance __dcn_vpn__
 ipv4-family
#
aaa
 #
 authentication-scheme default0
 #
 authentication-scheme default1
 #
 authentication-scheme default
  authentication-mode local radius
 #
 authorization-scheme default
 #
 accounting-scheme default0
 #
 accounting-scheme default1
 #
 domain default0
 #
 domain default1
 #
 domain default_admin
#
license
#
interface Ethernet1/0/0
 undo shutdown
 ip address 192.168.3.2 255.255.255.0
 dcn
 dcn mode vlan  
#
interface Ethernet1/0/0.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/1
 undo shutdown
 ip address 192.168.4.1 255.255.255.0
 dcn
 dcn mode vlan
#
interface Ethernet1/0/1.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/2
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/2.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/3
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/3.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/4
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/4.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/5
 undo shutdown  
 dcn mode vlan
#
interface Ethernet1/0/5.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/6
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/6.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/7
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/7.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/8
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/8.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface Ethernet1/0/9
 undo shutdown
 dcn mode vlan
#
interface Ethernet1/0/9.4094
 vlan-type dot1q 4094
 ip binding vpn-instance __dcn_vpn__
 ip address unnumbered interface LoopBack2147483647
#
interface GigabitEthernet0/0/0
 undo shutdown
#               
interface LoopBack2147483647
 description DCN loopback interface
 ip binding vpn-instance __dcn_vpn__
 ip address 128.1.138.138 255.255.0.0
#
interface NULL0
#
ospf 1
 import-route static
 area 0.0.0.1
  network 192.168.3.0 0.0.0.255
  network 192.168.4.0 0.0.0.255
  nssa
#
ospf 65534 vpn-instance __dcn_vpn__
 description DCN ospf create by default
 opaque-capability enable
 hostname
 vpn-instance-capability simple
 area 0.0.0.0
  network 0.0.0.0 255.255.255.255
#
!The DCN function implements the capability of plug-and-play for this device.
!A NE IP address based on the unique NE ID is automatically generated in VPN
!of DCN. It is recommended that the NE IP address be changed to the planned 
!one by running the ne-ip X.X.X.X <MASK> command after the device being online.
dcn
#
ip route-static 10.0.0.0 255.0.0.0 NULL0
#
lldp enable
#
ssh authorization-type default aaa
#
ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc
#
ssh server dh-exchange min-len 1024
#
ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes128_cbc 3des_cbc
#
user-interface con 0
#
user-interface aux 0
#
local-aaa-server
#               
vm-manager
#
return
<DeviceD>
<DeviceD>
<DeviceD>
<DeviceD>

【华为HCIP实战课程二十】OSPF特殊区域NSSA配置详解，网络工程师
Bert_Wang的博客
10-25 1000
在NSSA区域内可以拥有ASBR，并且重分发进入OSPF的路由是以7类LSA形式存在，该类型的LSA只能存在于NSSA区域内不接收5类LSA，ABR过滤外部进入该区域的4 5类LSA，可以引入外部路由，引入一种新的7类的NSSA的LSA。4、ABR同时也是ASBR的设备引入外部路由，NP不置位，因为这不需要把7类再转成5类，因为ASBR本身就产生了5类LSA。此时我们在SW3查看OSPF路由，华为设备上默认从ABR得到7类LSA产生的默认路由，思科设备上不会自动产生。下面我们把区域15配置成NSSA区域。
配置OSPF的NSSA区域示例
最新发布
精彩网络技术的博客
06-26 819
摘要 本文详细介绍了OSPF的NSSA（Not-So-Stubby Area）区域配置过程，通过对比Stub区域与NSSA区域的特点，说明NSSA区域允许传播ASBR引入的外部路由（Type-7 LSA），而Stub区域则禁止。配置示例中，Area1被设置为NSSA区域，并通过RouterA作为转换路由器将Type-7 LSA转换为Type-5 LSA。实验验证了NSSA区域对外部路由的传播能力及通过no-summary参数优化路由表的有效性。最终配置文件展示了各路由器的OSPF参数及静态路由引入设置，为网
ENSP模拟实验OSPF NSSA区域
jackpeng0521的博客
05-22 2099
OSPF NSSA区域实验原理介绍一、实验内容二、实验拓扑三、实验配置1.基本配置2.配置策略路由并且引入OSPF中3.查看R1，R4的路由表和LSDB表R1的路由表R1的LSDB表4.配置NSSA5.查看R4的路由表和LSDB表6.Totally NSSA区域配置7.修改R3的OSPF路由开销总结 原理介绍 介绍：NSSA区域或者Totally NSSA区域是将外部路由以Type-7 LSA的方式引进本区域，这些Type-7 LSA将在本区域的ABR路由器上被转换为Type-5 LSA并且泛洪到其他的O
华为的Stub和NSSA区域基本配置
weixin_33894640的博客
11-27 480
拓扑图如下： AR1的E0/0/1的地址是192.168.12.1 /24 AR1的E0/0/0的地址是192.168.15.1/24 AR2的E0/0/1的地址是192.168.12.2/24 AR2的E0/0/0的地址是192.168.23.2/24 AR3的E0/0/0的地址是192.168.23.3/24 AR3的E0/0/1的地址是192....
华为实验记录实现配置NSSA区域
解启超
03-30 779
搭建实验环境： 实现此案例需要按照如下步骤进行。 interface GigabitEthernet0/0/1 ip address 192.168.12.1 255.255.255.0 interface GigabitEthernet0/0/0 ip address 192.168.13.1 255.255.255.0 ospf 1 router-id 1.1.1.1 impor...
华为stub、nssa区域配置
weixin_33725272的博客
07-09 546
在这之前，91华为网已经发表了一篇“华为ospf协议基本配置”主要是介绍最为重要、基础的ospf配置。接着，91华为网将介绍华为ospf协议区域配置，包括ospf Stub和NSSA区域。 1、配置OSPF的STUB区域 请根据需求，在相应的华为路由器、华为交换机上进行以下配置。 步骤 1 执行命令system-view，进入系统视...
华为模拟器eNSP - HCIP - OSPF的Totally STUB 、Totally NSSA综合实验
炸鸡店老板z的博客
01-15 2430
华为模拟器eNSP - HCIP - OSPF的Totally STUB 、Totally NSSA综合实验
基于华为ENSP模拟器下的多个区域互联，减少LSA的更新量，加快收敛，保障更新安全的OSPF综合练习
m0_63172083的博客
10-05 8970
-----------该练习的目的是熟悉动态路由OSPF协议下路由器。
华为ensp之OSPF(S5700).docx
06-05
OSPF还支持多种高级特性，如虚链路（Virtual Link）、多进程OSPF、NSSA（Not So Stubby Area）和Stub区域等，这些在实际网络设计中可以根据需求进行选择性配置。 总的来说，OSPF的配置对于理解网络路由原理、优化...
华为ospf路由协议实验（包含末梢区域，完全末梢区域，nssa非纯末梢区域）
时光慢旅的博客
12-26 2393
文章目录一、实验环境二、实验拓扑三、实验需求需求1需求2需求3需求4四、实验步骤R1配置R2配置R3配置R4配置R5配置R6配置五、验证需求验证需求1验证需求2验证需求3验证需求4 一、实验环境 eNSP V100R003C00SPC100版本 二、实验拓扑 三、实验需求 需求1 红色区域为rip协议，蓝黄绿为ospf协议的3个区域，通过路由协议重分发实现全网互通。 需求2 设置图中绿色区域ar...
ensp 交换机与路由器ospf_【中级】华为路由器OSPF手把手配置举例（ENSP实现）
weixin_39922151的博客
12-21 2689
很久没有写博客了，最近华为发布了其官方数通设备模拟器ENSP，这也许是华为准备向思科培训体系宣战的信号，也许是华为站稳世界第一大电信设备供应商的必备条件，总之华为设备至少在中国会是主流。所以很感兴趣，研究了一下下，整体感觉良好，大部分功能可以完成，但依然有好多功能有待完善，至今发现的ENSP不支持功能列表如下：1、NAT2、三层接口ACL3、路由器上做VRRP(虚拟网关不通)三层交换上通过inte...
使用eNSP配置OSPF多区域实验
滿浚的博客
04-20 4089
172.16.0.0/19 - 172.16.32.0/19 - 172.16.64.0/19 - 172.16.96.0/19 - 172.16.128.0/19 - 172.16.160.0/19 - 172.16.192.0/19 - 172.16.224.0/19 ------- 这8各网点选出6个作为私网网段其余两个作为备份网段。R3 - R4之间划分的共有网段为 --- 34.0.0.0/24。R4 - R5之间划分的共有网段为 --- 45.0.0.0/24。
华为eNSP OSPF特殊区域（Stub、Totally Stub、NSSA 、Totally NSSA）的应用
iksjls的博客
03-19 2143
华为eNSP OSPF特殊区域（Stub、Totally Stub、NSSA 、Totally NSSA）的应用
华为设备配置OSPF的NSSA区域
Tony_long7483的博客
02-13 1626
华为设备配置OSPF的NSSA区域
配置NSSA区域实验报告
xuezha_liang的博客
09-08 127
2、R1去往合作公司，使用的也是静态路由，仅需要访问 PC-1 即可。R1去往合作公司，使用的也是静态路由，仅需要访问 PC-1 即可。确保 PC-1 和 Server-1 互通。1、R4去往ISP，使用的是静态的默认路由。a、用PC 1 ping Server 1。b、用Server 1 ping PC 1。a、用PC 1 ping Server 1。b、用Server 1 ping PC 1。a、用PC 1 ping Server 1。b、用Server 1 ping PC 1。1、配置路由器AR1。
Redis 缓存系列：springboot整合redis（一）
一天不写代码难受的博客
09-17 747
创建springboot项目 既然上面已经创建了springboot项目，pom文件里面也导入了redis的依赖 <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-data-redis</artifactId> </dependency&g
配置NSSA区域
A1323563583的博客
10-20 1225
实验名称:配置NSSA区域 实验要求： 如图配置设备IP地址和OSPF区域 R4去往ISP，使用的是静态的默认路由 R1去往合作公司，使用的也是静态路由，仅需要访问 PC-1 即可 区域 123 不允许出现 5类 LSA 确保 PC-1 和 Server-1 互通 实验拓扑： 实验配置： R1: IP 配置： interface GigabitEthernet0/0/0 ...
nssa和stub_stub和nssa华为nssa和stub
weixin_39739846的博客
12-21 250
totally-nssa实验要求：全网贯通，实现配置stub和totally-stub以及Nssa和totally-nssa解释：Stub(末梢区域)在ospf中一些区域出口很少为了减少路由条目(优化网络·减少路由器的压力)可以把此区域配置为末梢区域在末梢区域中仅仅需要区域的路由条目(如R1只需要知道自己direct的路由)和一条指向区域边界路由器(ABR:R2)的默认路由(R1到R2的默认路由0...
HuaWei ❀ 配置OSPF的NSSA区域
无糖可乐没有灵魂
04-09 521
配置OSPF的NSSA区域 如下图所示，所有的路由器都运行OSPF，整个自治系统划分为2个区域，其中R1和R2作为ABR来转发区域之间的路由； 接口IP地址配置： [r1]int g0/0/0 [r1-GigabitEthernet0/0/0]ip address 12.1.1.1 24 配置类似，不在阐述； 配置OSPF协议： [r1]ospf 100 router-id 91.1.1.1 [...
评论 2
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值