HCIP ospf 综合实验

最新推荐文章于 2024-05-06 16:35:12 发布

weixin_72849082

最新推荐文章于 2024-05-06 16:35:12 发布

阅读量112

点赞数

文章标签：网络

本文链接：https://blog.youkuaiyun.com/weixin_72849082/article/details/127318143

版权

配置 IP地址

[r1-GigabitEthernet0/0/0]ip address 172.16.33.1 29
[r1-LoopBack0]ip address 172.16.34.1 24
 
[r2-GigabitEthernet0/0/0]ip address 172.16.33.2 29
[r2-LoopBack0]ip address 172.16.35.1 24
 
[r3-GigabitEthernet0/0/0]ip address 172.16.33.3 29
[r3-Serial4/0/0]ip address 34.1.1.1 24
[r3-LoopBack0]ip address 172.16.36.1 24
 
[r4-Serial4/0/0]ip address 34.1.1.2 24
[r4-Serial4/0/1]ip address 45.1.1.2 24
[r4-Serial3/0/0]ip address 46.1.1.2 24
[r4-GigabitEthernet0/0/0]ip address 47.1.1.2 24
[r4-LoopBack0]ip address 172.16.5.1 24
 
[r5-Serial4/0/0]ip address 45.1.1.1 24
[r5-LoopBack0]ip address 172.16.2.1 24
 
[r6-Serial4/0/0]ip address 46.1.1.1 24
[r6-GigabitEthernet0/0/0]ip address 172.16.64.1 30
[r6-LoopBack0]ip address 172.16.3.1 24
 
[r7-GigabitEthernet0/0/0]ip address 47.1.1.1 24
[r7-GigabitEthernet0/0/1]ip address 172.16.96.1 30
[r7-LoopBack0]ip address 172.16.4.1 24
 
[r8-GigabitEthernet0/0/0]ip address 172.16.96.2 30
[r8-GigabitEthernet0/0/1]ip address 172.16.96.5 30
[r8-LoopBack0]ip address 172.16.98.1 24
 
[r9-GigabitEthernet0/0/0]ip address 172.16.96.6 30
[r9-GigabitEthernet0/0/1]ip address 172.16.128.1 30
[r9-LoopBack0]ip address 172.16.130.1 24
 
[r10-GigabitEthernet0/0/0]ip address 172.16.128.2 30
[r10-LoopBack0]ip address 172.16.131.1 24
 
[r11-GigabitEthernet0/0/0]ip address 172.16.64.2 30
[r11-GigabitEthernet0/0/1]ip address 172.16.64.5 30
[r11-LoopBack0]ip address 172.16.66.1 24
 
[r12-GigabitEthernet0/0/0]ip address 172.16.64.6 30
[r12-LoopBack0]ip address 172.16.162.1 24	
[r12-LoopBack1]ip address 172.16.163.1 24

配置通道

[r3-Tunnel0/0/0]ip address 172.16.1.1 29	
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp 	
[r3-Tunnel0/0/0]source 34.1.1.1
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry multicast dynamic
 
[r5-Tunnel0/0/0]ip address 172.16.1.2 29	
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp 
[r5-Tunnel0/0/0]source 45.1.1.1
[r5-Tunnel0/0/0]nhrp network-id 100	
[r5-Tunnel0/0/0]nhrp entry 172.16.1.1 34.1.1.1 register
 
[r6-Tunnel0/0/0]ip address 172.16.1.3 29
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp 
[r6-Tunnel0/0/0]source 46.1.1.1
[r6-Tunnel0/0/0]nhrp network-id 100	
[r6-Tunnel0/0/0]nhrp entry 172.16.1.1 34.1.1.1 register 
 
[r7-Tunnel0/0/0]ip address 172.16.1.4 29	
[r7-Tunnel0/0/0]tunnel-protocol gre p2mp 
[r7-Tunnel0/0/0]source 47.1.1.1	
[r7-Tunnel0/0/0]nhrp network-id 100	
[r7-Tunnel0/0/0]nhrp entry 172.16.1.1 34.1.1.1 register

写缺省让公网以及通道连接，修改通道ospf优先级以及MGRE修改为BMA网络，或者修改成p2mp网络就不用选举来修改ospf优先级

[r3]ip route-static 0.0.0.0 0 34.1.1.2
[r5]ip route-static 0.0.0.0 0 45.1.1.2
[r6]ip route-static 0.0.0.0 0 46.1.1.2
[r7]ip route-static 0.0.0.0 0 47.1.1.2
 
[r3-Tunnel0/0/0]ospf dr-priority 100	
[r3-Tunnel0/0/0]ospf network-type broadcast 
 
[r5-Tunnel0/0/0]ospf dr-priority 0
[r5-Tunnel0/0/0]ospf network-type broadcast
 
[r6-Tunnel0/0/0]ospf dr-priority 0
[r6-Tunnel0/0/0]ospf network-type broadcast
 
[r7-Tunnel0/0/0]ospf dr-priority 0
[r7-Tunnel0/0/0]ospf network-type broadcast

宣告ospf和rip

[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 1	
[r1-ospf-1-area-0.0.0.1]network 172.16.33.0 0.0.0.255	
[r1-ospf-1-area-0.0.0.1]network 172.16.34.0 0.0.0.255
 
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 1
[r2-ospf-1-area-0.0.0.1]network 172.16.33.0 0.0.0.255
[r2-ospf-1-area-0.0.0.1]network 172.16.35.0 0.0.0.255
 
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 1	
[r3-ospf-1-area-0.0.0.1]network 172.16.33.0 0.0.0.255
[r3-ospf-1-area-0.0.0.1]network 172.16.36.0 0.0.0.255
[r3-ospf-1-area-0.0.0.0]network 172.16.1.1 0.0.0.0
 
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 172.16.1.2 0.0.0.0
[r5-ospf-1-area-0.0.0.0]network 172.16.2.1 0.0.0.0
 
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 172.16.1.3 0.0.0.0
[r6-ospf-1-area-0.0.0.0]network 172.16.3.1 0.0.0.0
[r6-ospf-1-area-0.0.0.2]network 172.16.64.0 0.0.0.255
 
[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1]area 0
[r7-ospf-1-area-0.0.0.0]network 172.16.1.4 0.0.0.0	
[r7-ospf-1-area-0.0.0.0]network 172.16.4.1 0.0.0.0
[r7-ospf-1-area-0.0.0.3]network 172.16.96.0 0.0.0.255
 
[r8]ospf 1 router-id 8.8.8.8
[r8-ospf-1]area 3	
[r8-ospf-1-area-0.0.0.3]network 172.16.96.0 0.0.0.255
[r8-ospf-1-area-0.0.0.3]network 172.16.98.1 0.0.0.0
 
[r9]ospf 1 router-id 9.9.9.9
[r9-ospf-1]area 3
[r9-ospf-1-area-0.0.0.3]network 172.16.96.0 0.0.0.255
 
[r9]ospf 2 router-id 9.9.9.9
[r9-ospf-2]area 4	
[r9-ospf-2-area-0.0.0.4]network 172.16.130.1 0.0.0.0
[r9-ospf-2-area-0.0.0.4]network 172.16.128.0 0.0.0.255	
 
[r10]ospf 2 router-id 10.10.10.10
[r10-ospf-2]area 4	
[r10-ospf-2-area-0.0.0.4]network 172.16.131.1 0.0.0.0
[r10-ospf-2-area-0.0.0.4]network 172.16.128.0 0.0.0.255
 
[r11]ospf 1 router-id 11.11.11.11
[r11-ospf-1]area 2	
[r11-ospf-1-area-0.0.0.2]network 172.16.64.0 0.0.0.255	
[r11-ospf-1-area-0.0.0.2]network 172.16.66.1 0.0.0.0
 
[r12]ospf 1 router-id 12.12.12.12
[r12-ospf-1]area 2	
[r12-ospf-1-area-0.0.0.2]network 172.16.64.0 0.0.0.255
 
[r12]rip 1
[r12-rip-1]version 2
[r12-rip-1]network 172.16.0.0

r12路由器用单点单向重发布。r9路由器做一个单点单向重发布，r10路由器写一条缺省指向R9接口，或者在R9进程2下放一个缺省。

[r12-ospf-1]import-route rip 1
	
[r9-ospf-1]import-route ospf 2
 
[r10]ip route-static 0.0.0.0 0 172.16.128.1

r3/5/6/7路由器上做一个easy ip 使得其他路由器能访问r4的环回

[r3]acl 2000	
[r3-acl-basic-2000]rule permit source 172.16.0.0 0.0.0.255
[r3-Serial4/0/0]nat outbound 2000
 
[r7]acl 2000	
[r7-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r7-GigabitEthernet0/0/0]nat outbound 2000
 
[r6]acl 2000
[r6-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255	
[r6-Serial4/0/0]nat outbound 2000
 
[r5]acl 2000	
[r5-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r5-Serial4/0/0]nat outbound 2000

路由汇总以及空接口

[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0
[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0
[r7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0
[r9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0
[r12-ospf-1]asbr-summary 172.16.160.0 255.255.224.0
[r3]ip route-static 172.16.32.0 19 NULL 0
[r6]ip route-static 172.16.64.0 19 NULL 0
[r7]ip route-static 172.16.96.0 19 NULL 0
[r9]ip route-static 172.16.128.0 19 NULL 0
[r12]ip route-static 172.16.160.0 19 NULL 0

做特殊区域减少LSA

[r1-ospf-1-area-0.0.0.1]stub
[r2-ospf-1-area-0.0.0.1]stub
[r3-ospf-1-area-0.0.0.1]stub no-summary
 
[r16-ospf-1-area-0.0.0.2]nssa no-summary
[r11-ospf-1-area-0.0.0.2]nssa 
[r12-ospf-1-area-0.0.0.2]nssa 
 
[r7-ospf-1-area-0.0.0.3]nssa no-summary
[r8-ospf-1-area-0.0.0.3]nssa 
[r9-ospf-1-area-0.0.0.3]nssa

加快收敛

[r1-GigabitEthernet0/0/0]ospf timer hello 5
[r2-GigabitEthernet0/0/0]ospf timer hello 5
[r3-GigabitEthernet0/0/0]ospf timer hello 5

区域认证

[r1-ospf-1-area-0.0.0.1]authentication-mode simple plain 123456
[r2-ospf-1-area-0.0.0.1]authentication-mode simple plain 123456
[r3-ospf-1-area-0.0.0.1]authentication-mode simple plain 123456