
1.划分地址172.16.0.0/16
2.静态公网通
3.MGRE
4.ospf内网通
5.rip
6.路由引人
7.nat
8.ospf不规则区域虚拟
9.减少LSA的更新量,加快收敛,保障更新安全
区域间路由聚合
域外路由聚合
特殊区域
更改hello时间
认证
1.地址172.16.0.0/16
1 172.16.0.0/19 area1
R1:172.16.0.0/21 R2:172.16.8.0/21 R3:172.16.16.0/21 172.16.24.0/21
2 172.16.32.0/19 area2
R6:172.16.32.0/21 R11:172.16.40.0/21 172.16.48.0/21 172.16.56.0/21
3 172.16.64.0/19 area3
R7:172.16.64.0/21 R8:172.16.72.0/21 172.16.80.0/21 172.16.88.0/21
4 172.16.96.0/19 area4
R9:172.16.96.0/21 R10:172.16.104.0/21 172.16.112.0/21 172.16.120.0/21
5 172.16.128.0/19 rip1
6 172.16.160.0/19 rip2
7 172.16.192.0/19 隧道
8 172.16.224.0/19 area0
R4:172.16.224.0/20 R5:172.16.240.0/20
2.公网通
ip route-static 0.0.0.0 0 10.1.1.4
ip route-static 0.0.0.0 0 11.1.1.4
ip route-static 0.0.0.0 0 13.1.1.4
ip route-static 0.0.0.0 0 12.1.1.4
3.MGRE
interface Tunnel0/0/0
ip address 172.16.192.1 255.255.224.0
tunnel-protocol gre p2mp
source 10.1.1.3
interface Tunnel0/0/0
ip address 172.16.192.2 255.255.224.0
tunnel-protocol gre p2mp
source 11.1.1.5
nhrp entry 172.16.192.1 10.1.1.3 register
[R6]interface Tunnel 0/0/0
[R6-Tunnel0/0/0]ip ad 172.16.192.3 19
[R6-Tunnel0/0/0]tunnel-protocol gre p2mp
[R6-Tunnel0/0/0]source 13.1.1.6
[R6-Tunnel0/0/0]nhrp entry 172.16.192.1 10.1.1.3 register
[R7]interface Tunnel 0/0/0
[R7-Tunnel0/0/0]ip ad 172.16.192.4 19 ^
[R7-Tunnel0/0/0]tunnel-protocol gre p2mp
[R7-Tunnel0/0/0]source 12.1.1.7
[R7-Tunnel0/0/0]nhrp entry 172.16.192.1 10.1.1.3 register
4.ospf让area0通
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 172.16.16.3 0.0.0.0
network 172.16.192.1 0.0.0.0
ospf 1 router-id 5.5.5.5
area 0.0.0.0
network 172.16.192.2 0.0.0.0
network 172.16.240.5 0.0.0.0
#
ospf 1 router-id 6.6.6.6
area 0.0.0.0
network 172.16.32.6 0.0.0.0
network 172.16.192.3 0.0.0.0
ospf 1 router-id 7.7.7.7
area 0.0.0.0
network 172.16.64.7 0.0.0.0
network 172.16.192.4 0.0.0.0
5.各个ospf区域的宣告
#
ospf 1 router-id 2.2.2.2
area 0.0.0.1
network 172.16.24.2 0.0.0.0
#
ospf 1 router-id 1.1.1.1
area 0.0.0.1
network 172.16.0.1 0.0.0.0
network 172.16.24.1 0.0.0.0
#
ospf 1 router-id 7.7.7.7
area 0.0.0.0
network 172.16.64.7 0.0.0.0
network 172.16.192.4 0.0.0.0
area 0.0.0.3
network 172.16.80.7 0.0.0.0
#
ospf 1 router-id 8.8.8.8
area 0.0.0.3
network 172.16.72.8 0.0.0.0
network 172.16.80.8 0.0.0.0
network 172.16.88.8 0.0.0.0
#
ospf 1 router-id 9.9.9.9
area 0.0.0.3
network 172.16.88.9 0.0.0.0
network 172.16.96.9 0.0.0.0
area 0.0.0.4
network 172.16.112.9 0.0.0.0
#
area 0.0.0.2
network 172.16.48.11 0.0.0.0
network 172.16.56.11 0.0.0.0
net 172.16.40.11 0.0.0.0
#
6.rip
[R12]rip 1
[R12-rip-1]v 2
[R12-rip-1]undo su
[R12-rip-1]net 172.16.0.0
[R12-rip-1]q
7.路由引入
[R12]rip 1
[R12-rip-1]im
[R12-rip-1]import-route os
[R12-rip-1]import-route ospf 1
[R12-rip-1]q
[R12]os
[R12]ospf 1
[R12-ospf-1]im
[R12-ospf-1]import-route rip 1
[R12-ospf-1]q
8.nat
[R3]acl 2000
[R3-acl-basic-2000]rule permit source 172.16.0.0 0.0.31.255
[R3]int s4/0/0
[R3-Serial4/0/0]nat outbound 2000
[R6]acl 2000
[R6-acl-basic-2000]rule permit source 172.16.32.0 0.0.31.255
[R6]int s4/0/0
[R6-Serial4/0/0]nat outbound 2000
[R7]acl 2000
[R7-acl-basic-2000]rule permit source 172.16.64.0 0.0.31.255
[R7-acl-basic-2000]rule permit source 172.16.96.0 0.0.31.255
[R7]int g 0/0/0
[R7-GigabitEthernet0/0/0]nat outbound 2000
ip route-static 0.0.0.0 0 172.16.24.3
ip route-static 0.0.0.0 0 172.16.80.7
ip route-static 0.0.0.0 0 172.16.48.6
9.不规则区域ospf
[R7-ospf-1-area-0.0.0.3]vlink-peer 9.9.9.9
[R9-ospf-1-area-0.0.0.3]vlink-peer 7.7.7.7
10.减少LSA的更新量,加快收敛,保障更新安全
[R3-ospf-1-area-0.0.0.1]abr-summary 172.16.0.0 255.255.224.0 abr与asbr设备聚合
[R3]ip route-static 172.16.0.0 19 NULL 0 防环
ospf timer hello 2
authentication-mode md5 1 cipher 123456
2411

被折叠的 条评论
为什么被折叠?



