目录
一、ospf的介绍
OSPF(Open Shortest Path First)是一种路由协议,用于在互联网协议(IP)网络中进行路由选择。在华为模拟器中,可以使用OSPF协议来实现网络的动态路由。
简单来说,OSPF可以通过不同的算法和策略确定最佳的路由路径,从而实现网络中的数据传输。OSPF协议具有快速收敛、可扩展性高等优点,常被用于大型网络中实现动态路由。
在华为模拟器中,通过配置OSPF协议可以实现网络的自动发现、路由计算和路径选择等功能,从而优化网络的性能和稳定性。
二、ospf的用途
OSPF(Open Shortest Path First)协议用于在IP(Internet Protocol)网络中进行路由选择。它是一种基于链路状态的协议,具有快速收敛、可扩展性高等优点,广泛应用于大型企业、ISP(Internet Service Provider)和其他需要动态路由的网络中。
以下是OSPF协议的一些常见用途:
1. 提高网络的可用性和可靠性:OSPF支持快速重构路由,当网络中出现故障或链路断开时,可以自动调整路由选择,重新建立可用的路由路径,从而保证网络的连通性。
2. 提高网络的性能和稳定性:OSPF通过链路状态数据库(Link State Database)来维护网络的拓扑结构,能够更准确地计算最优的路由路径,从而避免产生路由环路等问题,提高网络的性能和稳定性。
3. 提高网络的管理效率:OSPF支持分层设计,可以将网络划分为不同的区域,每个区域内部使用相同的链路状态数据,从而简化网络的管理和配置,减少死循环、丢包等故障发生的可能性。
总之,OSPF协议在大型网络中实现动态路由选择,提高网络的可用性、可靠性、性能、稳定性和管理效率,是现代网络中必不可少的一项技术。
三、ospf的优势
OSPF(Open Shortest Path First)协议是一种基于链路状态的路由协议,相比其他路由协议(如RIP、EIGRP等),OSPF协议具有以下优势:
1. 快速收敛:OSPF具有快速的网络重构能力,可以在几秒钟内(常见的是1秒)自动调整路由选择,重新建立可用的路由路径,从而保证网络的连通性。
2. 网络可扩展性高:OSPF支持分层设计,可以将网络划分为不同的区域,每个区域内部使用相同的链路状态数据,从而缩小网络范围,降低路由计算的复杂度,提高网络的可扩展性。
3. 精准的路由计算:OSPF通过链路状态数据库(Link State Database)来维护网络的拓扑结构,能够更准确地计算最优的路由路径,从而避免产生路由环路等问题,提高网络的性能和稳定性。
4. 路由灵活:OSPF协议具有多种路由选择策略,可以根据具体的网络需求、路径权重、成本等因素来进行路由选择,实现更灵活、更精准的路由控制。
5. 支持VLSM和CIDR:OSPF协议支持VLSM(Variable-Length Subnet Masking)和CIDR(Classless Inter-Domain Routing)技术,可以将IP地址空间划分为更小的子网,从而更好地利用IP地址资源,降低网络的复杂性和管理难度。
综上所述,OSPF协议具有快速收敛、网络可扩展性高、精准的路由计算、路由灵活、支持VLSM和CIDR等优势,被广泛应用于大型企业、ISP和其他需要动态路由的网络中。
四、ospf的应用场景
OSPF(Open Shortest Path First)协议是一种基于链路状态的路由协议,广泛应用于大型企业、ISP和其他需要动态路由的网络中。
以下是OSPF协议的一些常见应用场景:
1. 企业内部网络:OSPF适合于大型企业内部网络,可以实现动态路由选择、快速重构路由、路由优化和管理等功能,提高网络的可用性、可靠性、性能、稳定性和管理效率。
2. 互联网接入服务提供商(ISP):OSPF可以实现多个ISP路由器的互联互通,避免单点故障,支持大量BGP路由的扩展,提高互联网接入服务的质量和稳定性。
3. 数据中心网络:OSPF可以实现数据中心网络中服务器和应用之间的动态路由选择,根据数据包流量、需求和延迟等指标,实现灵活、高效的路由控制,提高数据中心网络的性能和可靠性。
4. 无线网络:OSPF还可以应用于无线网络中,实现无线AP(Access Point)之间的动态路由选择,避免单点故障,提高网络的可用性、可靠性和性能。在无线网络中,OSPF通常和其他路由协议(如BGP)结合使用,实现更灵活、更细致的路由控制。
总之,OSPF协议可以应用于各种需要动态路由选择的网络环境中,如企业内部网络、ISP、数据中心网络、无线网络等,是一种被广泛采用的网络技术。
五、ospf的基础代码
OSPF(Open Shortest Path First)协议的基础代码一般是通过编写路由器的配置、路由协议和拓扑信息等模块来实现。
下面是一个简单的OSPF协议基础代码示例:
路由器配置模块:
interface eth0
ip address 192.168.0.1 255.255.255.0
no shutdown
router ospf 1
network 192.168.0.0 0.0.0.255 area 0
interface eth0
ip address 192.168.0.1 255.255.255.0
no shutdown
router ospf 1
network 192.168.0.0 0.0.0.255 area 0
路由协议模块:
def ospf(pkt, iface):
if pkt.type == TYPE_HELLO:
# 处理收到的Hello报文
neighbor = pkt.source
self.neigh[neighbor] = Neighbor(neighbor, iface)
...
elif pkt.type == TYPE_LSA:
# 处理收到的链路状态报文
new_lsa = pkt.content
if new_lsa.id in self.lsdb:
old_lsa = self.lsdb[new_lsa.id].lsa
if new_lsa.seq > old_lsa.seq:
self.lsdb[new_lsa.id] = LSDBEntry(new_lsa, pkt.source, iface)
...
else:
self.lsdb[new_lsa.id] = LSDBEntry(new_lsa, pkt.source, iface)
...
def ospf(pkt, iface):
if pkt.type == TYPE_HELLO:
# 处理收到的Hello报文
neighbor = pkt.source
self.neigh[neighbor] = Neighbor(neighbor, iface)
...
elif pkt.type == TYPE_LSA:
# 处理收到的链路状态报文
new_lsa = pkt.content
if new_lsa.id in self.lsdb:
old_lsa = self.lsdb[new_lsa.id].lsa
if new_lsa.seq > old_lsa.seq:
self.lsdb[new_lsa.id] = LSDBEntry(new_lsa, pkt.source, iface)
...
else:
self.lsdb[new_lsa.id] = LSDBEntry(new_lsa, pkt.source, iface)
...
拓扑信息模块:
class Topology(object):
def __init__(self):
self.routers = {}
self.links = {}
def add_router(self, rid):
if rid not in self.routers:
self.routers[rid] = Router(rid)
def add_link(self, r1, r2, cost=1):
if r1 in self.routers and r2 in self.routers:
self.routers[r1].add_neighbor(r2, cost)
self.routers[r2].add_neighbor(r1, cost)
if (r1, r2) not in self.links:
self.links[(r1, r2)] = cost
self.links[(r2, r1)] = cost
class Topology(object):
def __init__(self):
self.routers = {}
self.links = {}
def add_router(self, rid):
if rid not in self.routers:
self.routers[rid] = Router(rid)
def add_link(self, r1, r2, cost=1):
if r1 in self.routers and r2 in self.routers:
self.routers[r1].add_neighbor(r2, cost)
self.routers[r2].add_neighbor(r1, cost)
if (r1, r2) not in self.links:
self.links[(r1, r2)] = cost
self.links[(r2, r1)] = cost
这只是一个简单的OSPF协议基础代码示例,实际应用中通常会更加复杂。但这些基础模块的作用都是为了实现OSPF协议的核心功能,包括路由器的配置、路由协议处理和拓扑信息维护等。
六、OSPF路由协议基础配置
目录
项目介绍
项目任务
•任务1:建立单区域OSPF
•任务2:通过开销进行选路
•任务3:通过OSPF发布默认路由
•任务4:配置OSPF认证
项目介绍
•静态路由是指用户手动配置在路由器上的路由,告诉路由器如何
根据目的IP地址转发数据包。相比较于动态路由协议,静态路由
的配置简单,但灵活性差。通常我们会至少用它来实现稳定性较
强的默认路由的指定。
•在本项目中,我们要实现两台主机之间的通信。通过几个任务,
分别完成单条静态路由、备份路由、负载分担和默认路由的配置。
项目目的
•理解 OSPF 的基本概念
•掌握单区域 OSPF 的配置
•掌握 OSPF 邻居状态的解读
•掌握通过 Cost 控制 OSPF 选路的方法
•掌握 OSPF 默认路由发布的方法
•掌握 OSPF 认证的配置方法
项目拓扑
AR1
AR2
AR3
AR4
PC1
PC2
G0/0/2
G0/0/1
G0/0/0
G0/0/0
G0/0/2
G0/0/1
G0/0/2
G0/0/1
G0/0/2
G0/0/1
OSPF区域0
网络地址规划
设备
接口
IP地址
子网掩码
默认网关
AR1
G0/0/0
172.16.10.1
255.255.255.0
—
G0/0/1
10.10.14.1
255.255.255.0
—
G0/0/2
10.10.12.1
255.255.255.0
—
Lo0
10.10.0.1
255.255.255.255
—
AR2
G0/0/1
10.10.12.2
255.255.255.0
—
G0/0/2
10.10.23.2
255.255.255.0
—
Lo0
10.10.0.2
255.255.255.255
—
AR3
G0/0/0
172.16.30.3
255.255.255.0
—
G0/0/1
10.10.34.3
255.255.255.0
—
G0/0/2
10.10.23.3
255.255.255.0
—
Lo0
10.10.0.3
255.255.255.255
—
AR4
G0/0/1
10.10.14.4
255.255.255.0
—
G0/0/2
10.10.34.4
255.255.255.0
—
Lo0
10.10.0.4
255.255.255.255
—
PC1
E0/0/1
172.16.10.10
255.255.255.0
172.16.10.1
PC2
E0/0/1
172.16.30.10
255.255.255.0
172.16.30.3
目录
•
3.1
项目介绍
•
3.2
项目任务
•
任务1:建立单区域OSPF
•
任务2:通过开销进行选路
•
任务3:通过OSPF发布默认路由
•
任务4:配置OSPF认证
任务1:建立单区域OSPF
•
项目目标:通过OSPF协议,让4台路由器分别学习到两台PC的网
段,以及每台路由器的环回接口地址,实现全网IP互通。
AR1
AR2
AR3
AR4
PC1
PC2
G0/0/2
G0/0/1
G0/0/0
G0/0/0
G0/0/2
G0/0/1
G0/0/2
G0/0/1
G0/0/2
G0/0/1
OSPF区域0
任务1:构建直连连通性(1)
•
AR1的基础配置
<Huawei>system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameAR1
[AR1]interfaceGigabitEthernet0/0/0
[AR1-GigabitEthernet0/0/0]ipaddress172.16.10.124
[AR1-GigabitEthernet0/0/0]quit
[AR1]interfaceGigabitEthernet0/0/1
[AR1-GigabitEthernet0/0/1]ipaddress10.10.14.124
[AR1-GigabitEthernet0/0/1]quit
[AR1]interfaceGigabitEthernet0/0/2
[AR1-GigabitEthernet0/0/2]ipaddress10.10.12.124
[AR1-GigabitEthernet0/0/2]quit
[AR1]interfaceLoopBack0
[AR1-LoopBack0]ipaddress10.10.0.132
<Huawei>system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameAR1
[AR1]interfaceGigabitEthernet0/0/0
[AR1-GigabitEthernet0/0/0]ipaddress172.16.10.124
[AR1-GigabitEthernet0/0/0]quit
[AR1]interfaceGigabitEthernet0/0/1
[AR1-GigabitEthernet0/0/1]ipaddress10.10.14.124
[AR1-GigabitEthernet0/0/1]quit
[AR1]interfaceGigabitEthernet0/0/2
[AR1-GigabitEthernet0/0/2]ipaddress10.10.12.124
[AR1-GigabitEthernet0/0/2]quit
[AR1]interfaceLoopBack0
[AR1-LoopBack0]ipaddress10.10.0.132
任务1:构建直连连通性(2)
•
AR2的基础配置
<Huawei>system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameAR2
[AR2]interfaceGigabitEthernet0/0/1
[AR2-GigabitEthernet0/0/1]ipaddress10.10.12.224
[AR2-GigabitEthernet0/0/1]quit
[AR2]interfaceGigabitEthernet0/0/2
[AR2-GigabitEthernet0/0/2]ipaddress10.10.23.224
[AR2-GigabitEthernet0/0/2]quit
[AR2]interfaceLoopBack0
[AR2-LoopBack0]ipaddress10.10.0.232
<Huawei>system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameAR2
[AR2]interfaceGigabitEthernet0/0/1
[AR2-GigabitEthernet0/0/1]ipaddress10.10.12.224
[AR2-GigabitEthernet0/0/1]quit
[AR2]interfaceGigabitEthernet0/0/2
[AR2-GigabitEthernet0/0/2]ipaddress10.10.23.224
[AR2-GigabitEthernet0/0/2]quit
[AR2]interfaceLoopBack0
[AR2-LoopBack0]ipaddress10.10.0.232
任务1:构建直连连通性(3)
•
AR3的基础配置
<Huawei>system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameAR3
[AR3]interfaceGigabitEthernet0/0/0
[AR3-GigabitEthernet0/0/0]ipaddress172.16.30.324
[AR3-GigabitEthernet0/0/0]quit
[AR3]interfaceGigabitEthernet0/0/1
[AR3-GigabitEthernet0/0/1]ipaddress10.10.34.324
[AR3-GigabitEthernet0/0/1]quit
[AR3]interfaceGigabitEthernet0/0/2
[AR3-GigabitEthernet0/0/2]ipaddress10.10.23.324
[AR3-GigabitEthernet0/0/2]quit
[AR3]interfaceLoopBack0
[AR3-LoopBack0]ipaddress10.10.0.332
<Huawei>system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameAR3
[AR3]interfaceGigabitEthernet0/0/0
[AR3-GigabitEthernet0/0/0]ipaddress172.16.30.324
[AR3-GigabitEthernet0/0/0]quit
[AR3]interfaceGigabitEthernet0/0/1
[AR3-GigabitEthernet0/0/1]ipaddress10.10.34.324
[AR3-GigabitEthernet0/0/1]quit
[AR3]interfaceGigabitEthernet0/0/2
[AR3-GigabitEthernet0/0/2]ipaddress10.10.23.324
[AR3-GigabitEthernet0/0/2]quit
[AR3]interfaceLoopBack0
[AR3-LoopBack0]ipaddress10.10.0.332
任务1:构建直连连通性(4)
•
AR4的基础配置
<Huawei>system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameAR4
[AR4]interfaceGigabitEthernet0/0/1
[AR4-GigabitEthernet0/0/1]ipaddress10.10.14.424
[AR4-GigabitEthernet0/0/1]quit
[AR4]interfaceGigabitEthernet0/0/2
[AR4-GigabitEthernet0/0/2]ipaddress10.10.34.424
[AR4-GigabitEthernet0/0/2]quit
[AR4]interfaceLoopBack0
[AR4-LoopBack0]ipaddress10.10.0.432
<Huawei>system-view
Entersystemview,returnuserviewwithCtrl+Z.
[Huawei]sysnameAR4
[AR4]interfaceGigabitEthernet0/0/1
[AR4-GigabitEthernet0/0/1]ipaddress10.10.14.424
[AR4-GigabitEthernet0/0/1]quit
[AR4]interfaceGigabitEthernet0/0/2
[AR4-GigabitEthernet0/0/2]ipaddress10.10.34.424
[AR4-GigabitEthernet0/0/2]quit
[AR4]interfaceLoopBack0
[AR4-LoopBack0]ipaddress10.10.0.432
任务1:OSPF配置命令(1)
•
创建并进入OSPF进程(系统视图)
ospfprocess-idrouter-idrouter-id
OSPF进程号
OSPFRID(路由器ID)
任务1:OSPF配置命令(2)
•
创建并进入OSPF区域(OSPF视图)
areaarea-id
OSPF区域
任务1:OSPF配置命令(3)
•
将接口加入OSPF区域(OSPF区域视图)
networkip-addresswildcard-mask
网络地址
通配符(反)掩码
任务1:AR1的OSPF配置
•
AR1上的OSPF配置
[AR1]ospf1router-id10.10.0.1
[AR1-ospf-1]area0
[AR1-ospf-1-area-0.0.0.0]network172.16.10.00.0.0.255
[AR1-ospf-1-area-0.0.0.0]network10.10.12.00.0.0.255
[AR1-ospf-1-area-0.0.0.0]network10.10.14.00.0.0.255
[AR1-ospf-1-area-0.0.0.0]network10.10.0.10.0.0.0
[AR1]ospf1router-id10.10.0.1
[AR1-ospf-1]area0
[AR1-ospf-1-area-0.0.0.0]network172.16.10.00.0.0.255
[AR1-ospf-1-area-0.0.0.0]network10.10.12.00.0.0.255
[AR1-ospf-1-area-0.0.0.0]network10.10.14.00.0.0.255
[AR1-ospf-1-area-0.0.0.0]network10.10.0.10.0.0.0
任务1:接口上的OSPF配置
•
将该接口加入OSPF区域(接口视图)
ospfenableprocess-idareaarea-id
OSPF进程号
OSPF区域
任务1:AR2的OSPF配置
•
AR2上的OSPF配置
[AR2]ospf2router-id10.10.0.2
[AR2-ospf-2]area0
[AR2-ospf-2-area-0.0.0.0]quit
[AR2-ospf-2]quit
[AR2]interfaceGigabitEthernet0/0/1
[AR2-GigabitEthernet0/0/1]ospfenable2area0
[AR2-GigabitEthernet0/0/1]quit
[AR2]interfaceGigabitEthernet0/0/2
[AR2-GigabitEthernet0/0/2]ospfenable2area0
[AR2-GigabitEthernet0/0/2]quit
[AR2]interfaceLoopBack0
[AR2-LoopBack0]ospfenable2area0
[AR2]ospf2router-id10.10.0.2
[AR2-ospf-2]area0
[AR2-ospf-2-area-0.0.0.0]quit
[AR2-ospf-2]quit
[AR2]interfaceGigabitEthernet0/0/1
[AR2-GigabitEthernet0/0/1]ospfenable2area0
[AR2-GigabitEthernet0/0/1]quit
[AR2]interfaceGigabitEthernet0/0/2
[AR2-GigabitEthernet0/0/2]ospfenable2area0
[AR2-GigabitEthernet0/0/2]quit
[AR2]interfaceLoopBack0
[AR2-LoopBack0]ospfenable2area0
任务1:观察OSPF邻居建立过程
•
观察AR1和AR2的OSPF邻居建立过程
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[2]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=HelloReceived,NeighborPreviousState=Down,NeighborCurrentState=Init)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[3]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=2WayReceived,NeighborPreviousState=Init,NeighborCurrentState=2Way)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[4]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=AdjOk?,NeighborPreviousState=2Way,NeighborCurrentState=ExStart)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[5]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=NegotiationDone,NeighborPreviousState=ExStart,NeighborCurrentState=Exc
hange)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[6]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=ExchangeDone,NeighborPreviousState=Exchange,NeighborCurrentState=Loadi
ng)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[7]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=LoadingDone,NeighborPreviousState=Loading,NeighborCurrentState=Full)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[2]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=HelloReceived,NeighborPreviousState=Down,NeighborCurrentState=Init)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[3]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=2WayReceived,NeighborPreviousState=Init,NeighborCurrentState=2Way)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[4]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=AdjOk?,NeighborPreviousState=2Way,NeighborCurrentState=ExStart)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[5]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=NegotiationDone,NeighborPreviousState=ExStart,NeighborCurrentState=Exc
hange)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[6]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=ExchangeDone,NeighborPreviousState=Exchange,NeighborCurrentState=Loadi
ng)
[AR2]
Mar18202102:32:06-08:00AR2%%01OSPF/4/NBR_CHANGE_E(l)[7]:Neighborchangesev
ent:neighborstatuschanged.(ProcessId=512,NeighborAddress=1.12.10.10,Neighb
orEvent=LoadingDone,NeighborPreviousState=Loading,NeighborCurrentState=Full)
任务1:查看OSPF邻居
•
在AR2上查看OSPF邻居
[AR2]displayospf2peerbrief
OSPFProcess2withRouterID10.10.0.2
PeerStatisticInformation
----------------------------------------------------------------------------
AreaId
Interface
Neighborid
State
0.0.0.0
GigabitEthernet0/0/1
10.10.0.1
Full
[AR2]displayospf2peerbrief
OSPFProcess2withRouterID10.10.0.2
PeerStatisticInformation
----------------------------------------------------------------------------
AreaId
Interface
Neighborid
State
0.0.0.0
GigabitEthernet0/0/1
10.10.0.1
Full
----------------------------------------------------------------------------
任务1:AR3的OSPF配置
•
AR3上的OSPF配置
[AR3]ospf3router-id10.10.0.3
[AR3-ospf-3]area0
[AR3-ospf-3-area-0.0.0.0]network0.0.0.00.0.0.0
[AR3-ospf-3-area-0.0.0.0]return
<AR3>
[AR3]ospf3router-id10.10.0.3
[AR3-ospf-3]area0
[AR3-ospf-3-area-0.0.0.0]network0.0.0.00.0.0.0
[AR3-ospf-3-area-0.0.0.0]return
<AR3>
匹配所有IP子网
任务1:查看OSPF接口
•
在AR3上查看OSPF接口
[AR3]displayospf3interfaceall
OSPFProcess3withRouterID10.10.0.3
Interfaces
Area:0.0.0.0
(MPLSTEnotenabled)
Interface:172.16.30.3(GigabitEthernet0/0/0)
Cost:1
State:DR
Type:BroadcastMTU:1500
Priority:1
DesignatedRouter:172.16.30.3
BackupDesignatedRouter:0.0.0.0
Timers:Hello10,Dead40,Poll120,Retransmit5,TransmitDelay1
Interface:10.10.34.3(GigabitEthernet0/0/1)
Cost:1
State:DR
Type:BroadcastMTU:1500
Priority:1
DesignatedRouter:10.10.34.3
BackupDesignatedRouter:0.0.0.0
Timers:Hello10,Dead40,Poll120,Retransmit5,TransmitDelay1
Interface:10.10.23.3(GigabitEthernet0/0/2)
Cost:1
State:BDR
Type:BroadcastMTU:1500
Priority:1
DesignatedRouter:10.10.23.2
BackupDesignatedRouter:10.10.23.3
Timers:Hello10,Dead40,Poll120,Retransmit5,TransmitDelay1
Interface:10.10.0.3(LoopBack0)
Cost:0
State:P-2-PType:P2P
MTU:1500
Timers:Hello10,Dead40,Poll120,Retransmit5,TransmitDelay1
[AR3]displayospf3interfaceall
OSPFProcess3withRouterID10.10.0.3
Interfaces
Area:0.0.0.0
(MPLSTEnotenabled)
Interface:172.16.30.3(GigabitEthernet0/0/0)
Cost:1
State:DR
Type:BroadcastMTU:1500
Priority:1
DesignatedRouter:172.16.30.3
BackupDesignatedRouter:0.0.0.0
Timers:Hello10,Dead40,Poll120,Retransmit5,TransmitDelay1
Interface:10.10.34.3(GigabitEthernet0/0/1)
Cost:1
State:DR
Type:BroadcastMTU:1500
Priority:1
DesignatedRouter:10.10.34.3
BackupDesignatedRouter:0.0.0.0
Timers:Hello10,Dead40,Poll120,Retransmit5,TransmitDelay1
Interface:10.10.23.3(GigabitEthernet0/0/2)
Cost:1
State:BDR
Type:BroadcastMTU:1500
Priority:1
DesignatedRouter:10.10.23.2
BackupDesignatedRouter:10.10.23.3
Timers:Hello10,Dead40,Poll120,Retransmit5,TransmitDelay1
Interface:10.10.0.3(LoopBack0)
Cost:0
State:P-2-PType:P2P
MTU:1500
Timers:Hello10,Dead40,Poll120,Retransmit5,TransmitDelay1
任务1:查看OSPF邻居详情
•
在AR3上查看OSPF邻居详情
[AR3]displayospfpeer
OSPFProcess3withRouterID10.10.0.3
Neighbors
Area0.0.0.0interface10.10.23.3(GigabitEthernet0/0/2)'sneighbors
RouterID:10.10.0.2
Address:10.10.23.2
State:FullMode:NbrisSlavePriority:1
DR:10.10.23.2BDR:10.10.23.3MTU:0
Deadtimerduein35sec
Retranstimerinterval:5
Neighborisupfor00:00:19
AuthenticationSequence:[0]
[AR3]displayospfpeer
OSPFProcess3withRouterID10.10.0.3
Neighbors
Area0.0.0.0interface10.10.23.3(GigabitEthernet0/0/2)'sneighbors
RouterID:10.10.0.2
Address:10.10.23.2
State:FullMode:NbrisSlavePriority:1
DR:10.10.23.2BDR:10.10.23.3MTU:0
Deadtimerduein35sec
Retranstimerinterval:5
Neighborisupfor00:00:19
AuthenticationSequence:[0]
任务1:验证PC间通信(1)
•
在AR2上查看OSPF路由
[AR2]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:6
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:6
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.1/32OSPF101
D10.10.12.1
GigabitEthernet0/0/1
10.10.0.3/32OSPF101
D10.10.23.3
GigabitEthernet0/0/2
10.10.14.0/24OSPF102
D10.10.12.1
GigabitEthernet0/0/1
10.10.34.0/24OSPF102
D10.10.23.3
GigabitEthernet0/0/2
172.16.10.0/24OSPF102
D10.10.12.1
GigabitEthernet0/0/1
172.16.30.0/24OSPF102
D10.10.23.3
GigabitEthernet0/0/2
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
[AR2]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:6
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:6
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.1/32OSPF101
D10.10.12.1
GigabitEthernet0/0/1
10.10.0.3/32OSPF101
D10.10.23.3
GigabitEthernet0/0/2
10.10.14.0/24OSPF102
D10.10.12.1
GigabitEthernet0/0/1
10.10.34.0/24OSPF102
D10.10.23.3
GigabitEthernet0/0/2
172.16.10.0/24OSPF102
D10.10.12.1
GigabitEthernet0/0/1
172.16.30.0/24OSPF102
D10.10.23.3
GigabitEthernet0/0/2
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
任务1:验证PC间通信(2)
•
PC1向PC2发起ping测试
PC1>ping172.16.30.10
Ping172.16.30.10:32databytes,PressCtrl_Ctobreak
From172.16.30.10:bytes=32seq=1ttl=125time=46ms
From172.16.30.10:bytes=32seq=2ttl=125time=62ms
From172.16.30.10:bytes=32seq=3ttl=125time=31ms
From172.16.30.10:bytes=32seq=4ttl=125time=31ms
From172.16.30.10:bytes=32seq=5ttl=125time=47ms
---
172.16.30.10pingstatistics---
5packet(s)transmitted
5packet(s)received
0.00%packetloss
round-tripmin/avg/max=31/43/62ms
PC1>ping172.16.30.10
Ping172.16.30.10:32databytes,PressCtrl_Ctobreak
From172.16.30.10:bytes=32seq=1ttl=125time=46ms
From172.16.30.10:bytes=32seq=2ttl=125time=62ms
From172.16.30.10:bytes=32seq=3ttl=125time=31ms
From172.16.30.10:bytes=32seq=4ttl=125time=31ms
From172.16.30.10:bytes=32seq=5ttl=125time=47ms
---
172.16.30.10pingstatistics---
5packet(s)transmitted
5packet(s)received
0.00%packetloss
round-tripmin/avg/max=31/43/62ms
任务1:AR4加入OSPF域
•
AR4上的OSPF配置
[AR4]ospf4router-id10.10.0.4
[AR4-ospf-4]area0
[AR4-ospf-4-area-0.0.0.0]network10.10.14.00.0.0.255
[AR4-ospf-4-area-0.0.0.0]network10.10.34.00.0.0.255
[AR4-ospf-4-area-0.0.0.0]network10.10.0.40.0.0.0
[AR4]ospf4router-id10.10.0.4
[AR4-ospf-4]area0
[AR4-ospf-4-area-0.0.0.0]network10.10.14.00.0.0.255
[AR4-ospf-4-area-0.0.0.0]network10.10.34.00.0.0.255
[AR4-ospf-4-area-0.0.0.0]network10.10.0.40.0.0.0
任务1:查看OSPF邻居关系
•
AR4上的OSPF邻居关系
[AR4]displayospfpeerbrief
OSPFProcess4withRouterID10.10.0.4
PeerStatisticInformation
----------------------------------------------------------------------------
AreaId
Interface
Neighborid
State
0.0.0.0
GigabitEthernet0/0/1
10.10.0.1
Full
0.0.0.0
GigabitEthernet0/0/2
10.10.0.3
Full
[AR4]displayospfpeerbrief
OSPFProcess4withRouterID10.10.0.4
PeerStatisticInformation
----------------------------------------------------------------------------
AreaId
Interface
Neighborid
State
0.0.0.0
GigabitEthernet0/0/1
10.10.0.1
Full
0.0.0.0
GigabitEthernet0/0/2
10.10.0.3
Full
----------------------------------------------------------------------------
任务1:查看OSPF路由
•
在AR3上查看OSPF路由
[AR3]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:8
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:8
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.1/32OSPF102
D10.10.34.4
GigabitEthernet0/0/1
OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.2/32OSPF101
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.4/32OSPF101
D10.10.34.4
GigabitEthernet0/0/1
10.10.12.0/24OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.14.0/24OSPF102
D10.10.34.4
GigabitEthernet0/0/1
172.16.10.0/24OSPF103
D10.10.23.2
GigabitEthernet0/0/2
OSPF103
D10.10.34.4
GigabitEthernet0/0/1
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
[AR3]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:8
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:8
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.1/32OSPF102
D10.10.34.4
GigabitEthernet0/0/1
OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.2/32OSPF101
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.4/32OSPF101
D10.10.34.4
GigabitEthernet0/0/1
10.10.12.0/24OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.14.0/24OSPF102
D10.10.34.4
GigabitEthernet0/0/1
172.16.10.0/24OSPF103
D10.10.23.2
GigabitEthernet0/0/2
OSPF103
D10.10.34.4
GigabitEthernet0/0/1
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
目录
•
3.1
项目介绍
•
3.2
项目任务
•
任务1:建立单区域OSPF
•
任务2:通过开销进行选路
•
任务3:通过OSPF发布默认路由
•
任务4:配置OSPF认证
任务2:通过开销进行选路
•
项目目的:通过AR1上的配置,使AR1优先使用AR1-AR2-AR3这条
路径转发去往PC2的数据包,将AR1-AR4-AR3路径作为去往PC2的
备用路径。
AR1
AR2
AR3
AR4
PC1
PC2
主用路由
备用路由
任务2:更改接口的OSPF开销(1)
•
为了影响AR1的OSPF选路,使AR1-AR4-AR3路径成为备用路由,用
户可以增加AR1连接AR4的接口(G0/0/1)的OSPF开销,使AR1-
AR2-AR3路径成为开销最低的最优路由。
•
更改OSPF开销(接口视图)
ospfcostcost
OSPF开销
任务2:更改接口的OSPF开销(2)
•
更改AR1 G0/0/1接口的OSPF开销
[AR1]interfaceGigabitEthernet0/0/1
[AR1-GigabitEthernet0/0/1]ospfcost5
[AR1]interfaceGigabitEthernet0/0/1
[AR1-GigabitEthernet0/0/1]ospfcost5
任务2:查看AR1的OSPF路由
•
在AR1上查看变更后的OSPF路由
[AR1]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:6
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:6
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.2/32OSPF101
D10.10.12.2
GigabitEthernet0/0/2
10.10.0.3/32OSPF102
D10.10.12.2
GigabitEthernet0/0/2
10.10.0.4/32OSPF103
D10.10.12.2
GigabitEthernet0/0/2
10.10.23.0/24OSPF102
D10.10.12.2
GigabitEthernet0/0/2
10.10.34.0/24OSPF103
D10.10.12.2
GigabitEthernet0/0/2
172.16.30.0/24OSPF103
D10.10.12.2
GigabitEthernet0/0/2
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
[AR1]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:6
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:6
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.2/32OSPF101
D10.10.12.2
GigabitEthernet0/0/2
10.10.0.3/32OSPF102
D10.10.12.2
GigabitEthernet0/0/2
10.10.0.4/32OSPF103
D10.10.12.2
GigabitEthernet0/0/2
10.10.23.0/24OSPF102
D10.10.12.2
GigabitEthernet0/0/2
10.10.34.0/24OSPF103
D10.10.12.2
GigabitEthernet0/0/2
172.16.30.0/24OSPF103
D10.10.12.2
GigabitEthernet0/0/2
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
任务2:对比AR3的OSPF路由
•
对比AR3的OSPF路由
[AR3]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:8
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:8
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.1/32OSPF102
D10.10.34.4
GigabitEthernet0/0/1
OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.2/32OSPF101
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.4/32OSPF101
D10.10.34.4
GigabitEthernet0/0/1
10.10.12.0/24OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.14.0/24OSPF102
D10.10.34.4
GigabitEthernet0/0/1
172.16.10.0/24OSPF103
D10.10.23.2
GigabitEthernet0/0/2
OSPF103
D10.10.34.4
GigabitEthernet0/0/1
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
[AR3]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:8
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:8
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.1/32OSPF102
D10.10.34.4
GigabitEthernet0/0/1
OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.2/32OSPF101
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.4/32OSPF101
D10.10.34.4
GigabitEthernet0/0/1
10.10.12.0/24OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.14.0/24OSPF102
D10.10.34.4
GigabitEthernet0/0/1
172.16.10.0/24OSPF103
D10.10.23.2
GigabitEthernet0/0/2
OSPF103
D10.10.34.4
GigabitEthernet0/0/1
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
任务2:验证备用路由效果
•
关闭AR1 G0/0/2接口后,查看OSPF路由
[AR1]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:5
Routes:5
OSPFroutingtablestatus:<Active>
Destinations:5
Routes:5
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.2/32OSPF107
D10.10.14.4
GigabitEthernet0/0/1
10.10.0.3/32OSPF106
D10.10.14.4
GigabitEthernet0/0/1
10.10.23.0/24OSPF107
D10.10.14.4
GigabitEthernet0/0/1
10.10.34.0/24OSPF106
D10.10.14.4
GigabitEthernet0/0/1
172.16.30.0/24OSPF107
D10.10.14.4
GigabitEthernet0/0/1
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
[AR1]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:5
Routes:5
OSPFroutingtablestatus:<Active>
Destinations:5
Routes:5
Destination/MaskProtoPreCost
FlagsNextHop
Interface
10.10.0.2/32OSPF107
D10.10.14.4
GigabitEthernet0/0/1
10.10.0.3/32OSPF106
D10.10.14.4
GigabitEthernet0/0/1
10.10.23.0/24OSPF107
D10.10.14.4
GigabitEthernet0/0/1
10.10.34.0/24OSPF106
D10.10.14.4
GigabitEthernet0/0/1
172.16.30.0/24OSPF107
D10.10.14.4
GigabitEthernet0/0/1
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
目录
•
3.1
项目介绍
•
3.2
项目任务
•
任务1:建立单区域OSPF
•
任务2:通过开销进行选路
•
任务3:通过OSPF发布默认路由
•
任务4:配置OSPF认证
任务3:通过OSPF发布默认路由
•
项目目的:将AR1作为OSPF网络的唯一出口,通过AR1向OSPF域
中发布默认路由。
AR1
AR2
AR3
AR4
PC1
PC2
G0/0/2
G0/0/1
G0/0/0
G0/0/0
G0/0/2
G0/0/1
G0/0/2
G0/0/1
G0/0/2
G0/0/1
OSPF区域0
默认路由
任务3:OSPF默认路由的配置
•
发布默认路由(OSPF视图)
default-route-advertise[always]
即使没有活跃的默认路由
也仍然发布默认路由
任务3:在AR1上发布默认路由
•
AR1上的默认路由发布配置
•
在AR1上添加测试地址
[AR1]ospf1
[AR1-ospf-1]default-route-advertisealways
[AR1]interfaceLoopBack1
[AR1-LoopBack1]ipaddress10.10.1.124
[AR1]ospf1
[AR1-ospf-1]default-route-advertisealways
[AR1]interfaceLoopBack1
[AR1-LoopBack1]ipaddress10.10.1.124
任务3:验证默认路由效果(1)
•
在AR3上查看OSPF路由
[AR3]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:6
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:6
Destination/MaskProtoPreCost
FlagsNextHop
Interface
0.0.0.0/0O_ASE1501
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.1/32OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.2/32OSPF101
D10.10.23.2
GigabitEthernet0/0/2
10.10.12.0/24OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.14.0/24OSPF102
D10.10.34.4
GigabitEthernet0/0/1
172.16.10.0/24OSPF103
D10.10.23.2
GigabitEthernet0/0/2
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
[AR3]displayiprouting-tableprotocolospf
RouteFlags:R-relay,D-downloadtofib
------------------------------------------------------------------------------
Publicroutingtable:OSPF
Destinations:6
Routes:6
OSPFroutingtablestatus:<Active>
Destinations:6
Routes:6
Destination/MaskProtoPreCost
FlagsNextHop
Interface
0.0.0.0/0O_ASE1501
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.1/32OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.0.2/32OSPF101
D10.10.23.2
GigabitEthernet0/0/2
10.10.12.0/24OSPF102
D10.10.23.2
GigabitEthernet0/0/2
10.10.14.0/24OSPF102
D10.10.34.4
GigabitEthernet0/0/1
172.16.10.0/24OSPF103
D10.10.23.2
GigabitEthernet0/0/2
OSPFroutingtablestatus:<Inactive>
Destinations:0
Routes:0
任务3:验证默认路由效果(2)
•
在PC2上向AR1测试地址发起ping测试
PC2>ping10.10.1.1
Ping10.10.1.1:32databytes,PressCtrl_Ctobreak
From10.10.1.1:bytes=32seq=1ttl=253time=62ms
From10.10.1.1:bytes=32seq=2ttl=253time=47ms
From10.10.1.1:bytes=32seq=3ttl=253time=62ms
From10.10.1.1:bytes=32seq=4ttl=253time=62ms
From10.10.1.1:bytes=32seq=5ttl=253time=46ms
---
10.10.1.1pingstatistics---
5packet(s)transmitted
5packet(s)received
0.00%packetloss
round-tripmin/avg/max=46/55/62ms
PC2>ping10.10.1.1
Ping10.10.1.1:32databytes,PressCtrl_Ctobreak
From10.10.1.1:bytes=32seq=1ttl=253time=62ms
From10.10.1.1:bytes=32seq=2ttl=253time=47ms
From10.10.1.1:bytes=32seq=3ttl=253time=62ms
From10.10.1.1:bytes=32seq=4ttl=253time=62ms
From10.10.1.1:bytes=32seq=5ttl=253time=46ms
---
10.10.1.1pingstatistics---
5packet(s)transmitted
5packet(s)received
0.00%packetloss
round-tripmin/avg/max=46/55/62ms
目录
•
3.1
项目介绍
•
3.2
项目任务
•
任务1:建立单区域OSPF
•
任务2:通过开销进行选路
•
任务3:通过OSPF发布默认路由
•
任务4:配置OSPF认证
任务4:配置OSPF认证
•
项目目的:为了加强OSPF域的安全性,在AR1与AR2之间配置
OSPF接口认证,在区域0中配置OSPF区域认证。
AR1
AR2
AR3
AR4
PC1
PC2
G0/0/2
G0/0/1
G0/0/0
G0/0/0
G0/0/2
G0/0/1
G0/0/2
G0/0/1
G0/0/2
G0/0/1
OSPF区域0
任务4:配置OSPF区域认证(2)
•
在AR2上配置OSPF区域认证
•
在AR3上配置OSPF区域认证
•
在AR4上配置OSPF区域认证
[AR2]ospf2
[AR2-ospf-2]area0
[AR2-ospf-2-area-0.0.0.0]authentication-modemd51cipherArea-0-Auth
[AR3]ospf3
[AR3-ospf-3]area0
[AR3-ospf-3-area-0.0.0.0]authentication-modemd51cipherArea-0-Auth
[AR4]ospf4
[AR4-ospf-4]area0
[AR4-ospf-4-area-0.0.0.0]authentication-modemd51cipherArea-0-Auth
[AR2]ospf2
[AR2-ospf-2]area0
[AR2-ospf-2-area-0.0.0.0]authentication-modemd51cipherArea-0-Auth
[AR3]ospf3
[AR3-ospf-3]area0
[AR3-ospf-3-area-0.0.0.0]authentication-modemd51cipherArea-0-Auth
[AR4]ospf4
[AR4-ospf-4]area0
[AR4-ospf-4-area-0.0.0.0]authentication-modemd51cipherArea-0-Auth
任务4:OSPF接口认证配置
•
OSPF接口认证(接口视图)
authentication-mode{md5}[key-id{plainplain-text|[cipher]cipher-text}]
明文保存配置
密文保存配置
明文密码
密文密码
任务4:配置OSPF接口认证(1)
•
在AR1上配置OSPF区域认证
[AR1]interfaceGigabitEthernet0/0/2
[AR1-GigabitEthernet0/0/2]ospfauthentication-modemd51plainAR1-AR2-Auth
[AR1-GigabitEthernet0/0/2]displaythis
[V200R003C00]
#
interfaceGigabitEthernet0/0/2
ipaddress10.10.12.1255.255.255.0
ospfauthentication-modemd51plainAR1-AR2-Auth
#
return
[AR1]interfaceGigabitEthernet0/0/2
[AR1-GigabitEthernet0/0/2]ospfauthentication-modemd51plainAR1-AR2-Auth
[AR1-GigabitEthernet0/0/2]displaythis
[V200R003C00]
#
interfaceGigabitEthernet0/0/2
ipaddress10.10.12.1255.255.255.0
ospfauthentication-modemd51plainAR1-AR2-Auth
#
return
任务4:配置OSPF接口认证(2)
•
在AR2上配置OSPF区域认证
[AR2]interfaceGigabitEthernet0/0/1
[AR2-GigabitEthernet0/0/1]ospfauthentication-modemd51cipherAR1-AR2-Auth
[AR2-GigabitEthernet0/0/1]displaythis
[V200R003C00]
#
interfaceGigabitEthernet0/0/1
ipaddress10.10.12.2255.255.255.0
ospfauthentication-modemd51cipher%$%$<]_9=.>&y.2f}+E-CC1OeCQ)%$%$
ospfenable2area0.0.0.0
#
return
[AR2]interfaceGigabitEthernet0/0/1
[AR2-GigabitEthernet0/0/1]ospfauthentication-modemd51cipherAR1-AR2-Auth
[AR2-GigabitEthernet0/0/1]displaythis
[V200R003C00]
#
interfaceGigabitEthernet0/0/1
ipaddress10.10.12.2255.255.255.0
ospfauthentication-modemd51cipher%$%$<]_9=.>&y.2f}+E-CC1OeCQ)%$%$
ospfenable2area0.0.0.0
#
return
最后感谢大家观看。