一、实行拓扑图
二、实行要求
1、R4为ISP，其上只设置IP地址；R4与其他所直连装备间均利用公有IP；
2、R3-R5、R6、R7为MGRE环境，R3为中心站点；
3、整个OSPF环境IP基于172.16.0.0/16分别；除了R12有两个环回，其他路由器均有一个环回IP
4、所有装备均可访问R4的环回；
5、减少LSA的更新量，加快收敛，保障更新安全；
6、全网可达；
三、实行思路
分别网段：
1，先看需求有几种协议类型，根据协议类型先辈行分别
再根据地区进行分别
再按照网络类型分别（P2P,MA）
area 0：172.16.0.0 19
172.16.0.0 24 p2p骨干
172.16.1.0 24 MA骨干
172.16.2.0 24 R5环回
172.16.3.0 24 R6环回
172.16.4.0 24 R7环回
area 1：172.16.32.0 19
172.16.32.0 24 p2p骨干
172.16.33.0 24 MA骨干
172.16.33.0 30 1-2-3
172.16.34.0 24 R1环回
172.16.35.0 24 R2环回
172.16.36.0 24 R3环回
area 2：172.16.64.0 19
172.16.64.0 24 p2p骨干
172.16.65.0 24 MA骨干
172.16.65.0 29 6-11
172.16.65.8 29 11-12
area 3：172.16.96.0 19
172.16.96.0 24 p2p骨干
172.16.97.0 24 MA骨干
172.16.97.0 30 7-8
172.16.97.8 30 8-9
172.16.98.0 24 R8环回
area 4：172.16.128.0 19
172.16.128.0 24 p2p骨干
172.16.129.0 24 MA骨干
172.16.129.0 30 9-10
172.16.130.0 24 R9环回
172.16.131.0 24 R10环回
RIP环回：172.16.160.0 19
172.16.160.0 20
172.16.176.0 20
2、设置--IP地址
3、缺省路由+NAT、
4、MGRE环境设置
5、OSPF协议
6、重发步
7、域间路由汇总、域外路由汇总
8、空接口防环路由
9、特殊地区
10、更改hello时间
11、OSPF认证
12、测试全网可达
四、实行步调
1、为各个路由设置IP地址
(1）R1
[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip ad
[R1-GigabitEthernet0/0/0]ip address 172.16.33.1 24
[R1-GigabitEthernet0/0/0]q
[R1]int l 0
[R1-LoopBack0]ip address 172.16.34.1 24
(2) R2
[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip address 172.16.33.2 24
[R2]int l 0
[R2-LoopBack0]ip address 172.16.35.1 24
(3) R3
[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip address 172.16.33.3 24
[R3-GigabitEthernet0/0/0]q
[R3]int l 0
[R3-LoopBack0]ip ad
[R3-LoopBack0]ip address 192.16.36.1 24
[R3-LoopBack0]q
[R3]int s
[R3]int Serial 4/0/0
[R3-Serial4/0/0]ip address 34.0.0.3 24
(4) R4
[R4]int s 4/0/0
[R4-Serial4/0/0]ip address 34.0.0.4 24
[R4-Serial4/0/0].
[R4-Serial4/0/0]q
[R4]int s 4/0/1
[R4-Serial4/0/1]ip address 45.0.0.4 24
[R4-Serial4/0/1]q
[R4]int s 3/0/0
[R4-Serial3/0/0]ip address 46.0.0.4 24
[R4-Serial3/0/0]q
[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip address 47.0.0.4 24
[R4-GigabitEthernet0/0/0]q
[R4]int l 0
[R4-LoopBack0]ip address 172.16.2.1 24
(5) R5
[R5]int s 4/0/0
[R5-Serial4/0/0]ip address 45.0.0.5 24
[R5-Serial4/0/0]q
[R5]int l 0
[R5-LoopBack0]ip ad
[R5-LoopBack0]ip address 172.16.3.1 24
(6) R6
[R6]int s 4/0/0
[R6-Serial4/0/0]ip address 46.0.0.6 24
[R6-Serial4/0/0]q
[R6]int g 0/0/0
[R6-GigabitEthernet0/0/0]ip address 172.16.65.1 30
[R6-GigabitEthernet0/0/0]q
[R6]int l 0
[R6-LoopBack0]ip address 172.16.4.1 24
(7) R7
[R7]int g 0/0/0
[R7-GigabitEthernet0/0/0]ip ad
[R7-GigabitEthernet0/0/0]ip address 47.0.0.7 24
[R7-GigabitEthernet0/0/0]q
[R7]int g 0/0/1
[R7-GigabitEthernet0/0/1]ip address 172.16.97.1 30
[R7]int l 0
[R7-LoopBack0]ip address 172.16.5.1 24
[R7-LoopBack0]q
(8) R8
[R8]int g 0/0/0
[R8-GigabitEthernet0/0/0]ip address 172.16.97.2 30
[R8-GigabitEthernet0/0/0]q
[R8]int g 0/0/1
[R8-GigabitEthernet0/0/1]ip address 172.16.97.5 30
[R8-GigabitEthernet0/0/1]q
[R8]int l 0
[R8-LoopBack0]ip address 172.16.98.1 24
(9) R9
[R9]int g 0/0/0
[R9-GigabitEthernet0/0/0]ip address 172.16.97.6 30
[R9]int g 0/0/1
[R9-GigabitEthernet0/0/1]ip address 172.16.129.9 30
[R9]int l 0
[R9-LoopBack0]ip address 172.16.130.1 24
(10) R10
[R10]int g 0/0/0
[R10-GigabitEthernet0/0/0]ip address 172.16.129.10 30
[R10]int l 0
[R10-LoopBack0]ip address 172.16.131.1 24
(11) R11
[R11]int g 0/0/0
[R11-GigabitEthernet0/0/0]ip address 172.16.65.2 30
[R11]int g 0/0/1
[R11-GigabitEthernet0/0/1]ip address 172.16.65.5 30
[R11]int l 0
[R11-LoopBack0]ip address 172.16.66.1 24
(12) R12
[R12]int g 0/0/0
[R12-GigabitEthernet0/0/0]ip address 172.16.65.6 30
[R12]int l 0
[R12-LoopBack0]ip address 172.16.160.1 24
[R12]int l 1
[R12-LoopBack1]ip address 172.16.161.1 24
2、实现公网通，在area给路由器设置缺省
(1) R3
[R3]ip route-static 0.0.0.0 0 34.0.0.4
(2) R5
[R5]ip route-static 0.0.0.0 0 45.0.0.4
(3) R6
[R6]ip route-static 0.0.0.0 0 46.0.0.4
(4) R7
[R7]ip route-static 0.0.0.0 0 47.0.0.4
3、创建ospf地区
（1）area 1
R1
[R1]ospf router-id 1.1.1.1
[R1-ospf-1]area 1
[R1-ospf-1-area-0.0.0.1]network 0.0.0.0 255.255.255.255
R2
R2]ospf router-id 2.2.2.2
[R2-ospf-1]a 1
[R2-ospf-1-area-0.0.0.1]network 0.0.0.0 255.255.255.255
R3
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]a 1
[R3-ospf-1-area-0.0.0.1]network 172.16.33.0 0.0.0.255
[R3-ospf-1-area-0.0.0.1]network 172.16.36.0 0.0.0.255
（2）area 0
R5
[R5]ospf 1 router-id 5.5.5.5
[R5-ospf-1]a 0
[R5-ospf-1-area-0.0.0.0]network 172.16.3.0 0.0.0.255
R6
[R6]ospf 1 router-id 6.6.6.6
[R6-ospf-1]a 0
[R6-ospf-1-area-0.0.0.0]network 172.16.4.0 0.0.0.255
R7
[R7]ospf 1 router-id 7.7.7.7
[R7-ospf-1]a 0
[R7-ospf-1-area-0.0.0.0]network 172.16.5.0 0.0.0.255
(3) area 0
R6
[R6]ospf 1
[R6-ospf-1]a 2
[R6-ospf-1-area-0.0.0.2]network 172.16.65.1 0.0.0.0
R11
[R11]ospf 1 router-id 11.11.11.11
[R11-ospf-1]a 2
[R11-ospf-1-area-0.0.0.2]network 0.0.0.0 255.255.255.255
R12
[R12]ospf 1 router-id 12.12.12.12
[R12-ospf-1]a 2
[R12-ospf-1-area-0.0.0.2]network 172.16.65.6 0.0.0.0
宣告rip
[R12]rip 1
[R12-rip-1]v 2
[R12-rip-1]undo summary
[R12-rip-1]network 172.16.0.0
[R12-rip-1]osp
[R12-rip-1]q
[R12]ospf 1
[R12-ospf-1]import-route rip
（4）area 3
R8
[R8]ospf 1 router-id 8.8.8.8
[R8-ospf-1]a 3
[R8-ospf-1-area-0.0.0.3]network 0.0.0.0 255.255.255.25
R9
[R9]ospf 1 router-id 9.9.9.9
[R9-ospf-1]a 3
[R9-ospf-1-area-0.0.0.3]network 172.16.97.6 0.0.0.0
(5) area 4
[R9]ospf 2 router-id 9.9.9.9
[R9-ospf-2]a 4
[R9-ospf-2-area-0.0.0.4]network 172.16.129.9 0.0.0.0
[R9-ospf-2-area-0.0.0.4]network 172.16.130.0 0.0.0.255
R11
[R10]ospf 2 router-id 10.10.10.10
[R10-ospf-2]a 4
[R10-ospf-2-area-0.0.0.4]ne
[R10-ospf-2-area-0.0.0.4]network 0.0.0.0 255.255.255.255
4、设置MGRE
R3
[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ip address 172.16.6.3 24
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp
[R3-Tunnel0/0/0]source s 4/0/0
[R3-Tunnel0/0/0]nhrp network-id 100
[R3-Tunnel0/0/0]nhrp entry multicast dynamic
R5
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ip address 172.16.6.5 24
[R5-Tunnel0/0/0]tunnel-protocol gre p2mp
[R5-Tunnel0/0/0]source s 4/0/0
[R5-Tunnel0/0/0]nhrp network-id 100
[R5-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register
R6
[R6]int Tunnel 0/0/0
[R6-Tunnel0/0/0]ip address 172.16.6.6 24
[R6-Tunnel0/0/0]tunnel-protocol gre p2mp
[R6-Tunnel0/0/0]shutdown
[R6-Tunnel0/0/0]source s4/0/0
[R6-Tunnel0/0/0]nhrp network-id 100
[R6-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register
R7
[R7]int Tunnel 0/0/0
[R7-Tunnel0/0/0]ip address 172.16.6.7 24
[R7-Tunnel0/0/0]tunnel-protocol gre p2mp
[R7-Tunnel0/0/0]shutdown
[R7-Tunnel0/0/0]source g 0/0/0
[R7-Tunnel0/0/0]nhrp network-id 100
[R7-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register
5、将隧道口分别进ospf地区里
R3
[R3-ospf-1]a 1
[R3-ospf-1-area-0.0.0.1]q
[R3-ospf-1]a 0
[R3-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.255
[R3-ospf-1]q
[R3]int t
[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ospf network-type broadcast
R5
[R5]ospf 1
[R5-ospf-1]a 0
[R5-ospf-1-area-0.0.0.0]ne
[R5-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.25
[R5-ospf-1]q
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ospf network-type broadcast
R6
[R6]ospf 1
[R6-ospf-1]a 0
[R6-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.25
[R6]int Tunnel 0/0/0
[R6-Tunnel0/0/0]ospf network-type broadcast
R7
[R7]ospf 1
[R7-ospf-1]a 0
[R7-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.255
[R7-ospf-1-area-0.0.0.0]q
[R7-ospf-1]q
[R7]int Tunnel 0/0/0
[R7-Tunnel0/0/0]ospf network-type broadcast
6、取消选举权
R5
[R5]interface Tunnel 0/0/0
[R5-Tunnel0/0/0]ospf dr-priority 0
R6
[R6]int Tunnel 0/0/0
[R6-Tunnel0/0/0]ospf dr-priority 0
R7
[R7]int Tunnel 0/0/0
[R7-Tunnel0/0/0]ospf dr-priority 0
7、路由引入
R9
[R9]ospf 1
[R9-ospf-1]import-route ospf 2
[R9-ospf-1]q
[R9]ospf 2
[R9-ospf-2]import-route ospf 1
8、实现所有装备可以访问R4的环回（EZIP）
R3
[R3]acl 2000
[R3-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R3-acl-basic-2000]q
[R3]int Serial 4/0/0
[R3-Serial4/0/0]nat outbound 2000
R5
[R5]acl 2000
[R5-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R5-acl-basic-2000]q
[R5]int s 4/0/0
[R5-Serial4/0/0]nat outbound 2000
R6
[R6]acl 2000
[R6-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R6-acl-basic-2000]q
[R6]int s 4/0/0
[R6-Serial4/0/0]nat outbound 2000
R7
[R7]acl 2000
[R7-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R7-acl-basic-2000]q
[R7]int g0/0/0
[R7-GigabitEthernet0/0/0]nat outbound 2000
[R7-GigabitEthernet0/0/0]q
9、ABR聚合
R3
[R3]ospf 1
[R3-ospf-1]a 1
[R3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224
R6
[R6]ospf 1
[R6-ospf-1]a 2
[R6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0
R7
[R7]ospf 1
[R7-ospf-1]a 3
[R7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0
10、ASBR的聚合
R12
[R12]ospf 1
[R12-ospf-1]asbr-summary 172.16.160.0 255.255.224.0
R9
[R9]ospf 1
[R9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0
11、最大精简路由
(2)地区1为完全末梢地区
R3
[R3]ospf 1
[R3-ospf-1]a 1
[R3-ospf-1-area-0.0.0.1]stub no-summary
R2
[R2]ospf 1
[R2-ospf-1]a 1
[R2-ospf-1-area-0.0.0.1]stub no-summary
R1
[R1]ospf 1
[R1-ospf-1]a 1
[R1-ospf-1-area-0.0.0.1]stub no-summary
(2)地区2为完全NSSA地区
R6
[R6]ospf 1
[R6-ospf-1]a 2
[R6-ospf-1-area-0.0.0.2]nssa no-summary
R11
[R11]ospf 1
[R11-ospf-1]a 2
[R11-ospf-1-area-0.0.0.2]nssa no-summary
R12
[R12]ospf 1
[R12-ospf-1]a 2
[R12-ospf-1-area-0.0.0.2]nssa no-summary
(3)地区3为完全NSSA地区
R7
[R7]ospf 1
[R7-ospf-1]a 34
[R7-ospf-1-area-0.0.0.34]q
[R7-ospf-1]a 3
[R7-ospf-1-area-0.0.0.3]nssa no-summary
R8
[R8]ospf 1
[R8-ospf-1]a 3
[R8-ospf-1-area-0.0.0.3]nssa no-summary
R9
[R9]ospf 1
[R9-ospf-1]a 3
[R9-ospf-1-area-0.0.0.3]nssa no-summary
13、更改holle时间
（1）area 1
R1
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ospf timer hello 5
R2
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ospf timer hello 5
R3
[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ospf timer hello 5
（2）area 0
R3
[R3]int s 4/0/0
[R3-Serial4/0/0]ospf timer hello 5
R5
[R5]int s 4/0/0
[R5-Serial4/0/0]ospf timer hello 5
R6
[R6]int s 4/0/0
[R6-Serial4/0/0]ospf timer hello 5
R7
[R7]int g 0/0/0
[R7-GigabitEthernet0/0/0]ospf timer hello 5
(3) area 2
R6
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ospf timer hello 5
R11
[R11]int g 0/0/0
[R11-GigabitEthernet0/0/0]ospf timer hello 5
[R11-GigabitEthernet0/0/0]q
[R11]int g 0/0/1
[R11-GigabitEthernet0/0/1]ospf timer hello 5
R12
[R12]int g0/0/0
[R12-GigabitEthernet0/0/0]ospf timer hello 5
(4)area 3
R7
[R7]int g 0/0/1
[R7-GigabitEthernet0/0/1]ospf timer hello 5
R8
[R8]int g 0/0/0
[R8-GigabitEthernet0/0/0]ospf timer hello 5
[R8-GigabitEthernet0/0/0]q
[R8]int g 0/0/1
[R8-GigabitEthernet0/0/1]ospf timer hello 5
R9
[R9]int g 0/0/0
[R9-GigabitEthernet0/0/0]ospf timer hello 5
(5) area 4
R9
[R9]int g 0/0/1
[R9-GigabitEthernet0/0/1]ospf timer hello 5
R10
[R10]int g 0/0/0
[R10-GigabitEthernet0/0/0]ospf timer hello 5
至此试验竣事
免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！更多信息从访问主页：qidao123.com:ToB企服之家，中国第一个企服评测及商务社交产业平台。 |
