2020-10-08

ospf拓扑实验 ensp拓扑搭建公网ip规划及配置

[r3] int g0/0/2 ip add 34.1.1.1 24 [r4] int g0/0/0 ip add 34.1.1.2 24 int lo0 ip add 4.4.4.4 24 int g0/0/1 ip add 45.1.1.2 24 int g0/0/2 ip add 46.1.1.2 24 int g4/0/0 ip add 14.1.1.2 24 [r5] int g0/0/2 ip add 45.1.1.1 24 [r6] int g0/0/2 ip add 46.1.1.1 24 [r7] int g0/0/2 ip add 47.1.1.1 24

公网缺省路由

[r3] ip route-static 0.0.0.0 0 34.1.1.2 [r5] ip route-static 0.0.0.0 0 45.1.1.2 [r6] ip route-static 0.0.0.0 0 46.1.1.2 [r7] ip route-static 0.0.0.0 0 47.1.1.2

公网MGRE

[r3] int tunnel 0/0/0 ip add 172.16.0.129 29 tunnel-protocol gre p2mp source 34.1.1.1 nhrp entry multicast dynamic nhrp network-id 11 [r5] int tunnel 0/0/0 ip add 172.16.0.130 29 tunnel-protocol gre p2mp source g0/0/2 nhrp entry 172.16.0.129 34.1.1.1 register nhrp network-id 11 [r6] int tunnel 0/0/0 ip add 172.16.0.131 29 tunnel-protocol gre p2mp source g0/0/2 nhrp entry 172.16.0.129 34.1.1.1 register nhrp network-id 11 [r7] int tunnel 0/0/0 ip add 172.16.0.132 29 tunnel-protocol gre p2mp source g0/0/2 nhrp entry 172.16.0.129 34.1.1.1 register nhrp network-id 11

区域0剩余ip配置

[r5] int lo0 ip add 172.16.1.1 25 [r6] int lo0 ip add 172.16.1.129 25 [r7] int lo0 ip add 172.16.2.1 25

区域1 ip配置

[r1] int g0/0/0 ip add 172.16.32.129 29 int lo0 ip add 172.16.33.1 25 [r2] int g0/0/0 ip add 172.16.32.130 29 int lo0 ip add 172.16.33.129 25 [r3] int g0/0/0 ip add 172.16.32.131 29 int lo0 ip add 172.16.34.1 25

区域2 ip配置

[r6] int g 0/0/1 ip add 172.16.64.1 30 [r11] int g 0/0/0 ip add 172.16.64.2 30 int g0/0/1 ip add 172.16.64.5 30 int lo0 ip add 172.16.65.1 25 [r12] int g 0/0/0 ip add 172.16.64.6 30

区域3 ip配置

[r7] int g0/0/1 ip add 172.16.96.1 30 [r8] int g0/0/0 ip add 172.16.96.2 30 int g0/0/1 ip add 172.16.96.5 30 int lo0 ip add 172.16.97.1 25 [r9] int g0/0/0 ip add 172.16.96.6 30

区域4 ip配置

[r9] int g0/0/1 ip add 172.16.128.1 30 int lo0 ip add 172.16.129.1 25 [r10] int g0/0/0 ip add 172.16.128.2 30 int lo0 ip add 172.16.129.129 25

rip

[r12] int lo0 ip add 172.16.160.1 20 int lo1 ip add 172.16.176.1 20

启动各协议

[r1] ospf 1 router-id 1.1.1.1 area 1 network 172.16.0.0 0.0.255.255 [r2] ospf 1 router-id 2.2.2.2 area 1 network 172.16.0.0 0.0.255.255 [r3] ospf 1 router-id 3.3.3.3 area 0 network 172.16.0.129 0.0.0.0 q area 1 network 172.16.32.0 0.0.3.255 [r5] ospf 1 router-id 5.5.5.5 area 0 network 172.16.0.0 0.0.255.255 [r6] ospf 1 router-id 6.6.6.6 area 0 network 172.16.0.0 0.0.1.255 area 2 network 172.16.64.1 0.0.0.0 [r7] ospf 1 router-id 7.7.7.7 area 0 network 172.16.0.0 0.0.3.255 area 3 network 172.16.96.1 0.0.0.0 [r8] ospf 1 router-id 8.8.8.8 area 3 network 172.16.0.0 0.0.255.255 [r9] ospf 1 router-id 9.9.9.9 area 3 network 172.16.96.6 0.0.0.0 area 4 network 172.16.128.0 0.0.1.255 [r10] ospf 1 router-id 10.10.10.10 area 4 network 172.16.0.0 0.0.255.255 [r11] ospf 1 router-id 11.11.11.11 area 2 network 172.16.0.0 0.0.255.255 [r12] ospf 1 router-id 12.12.12.12 area 2 network 172.16.64.6 0.0.0.0 rip 1 version 2 un summary network 172.16.0.0

MGRE广播

[r3] int tunnel 0/0/0 ospf network-type broadcast [r5] int tunnel 0/0/0 ospf network-type broadcast ospf dr-priority 0 [r6] int tunnel 0/0/0 ospf network-type broadcast ospf dr-priority 0 [r7] int tunnel 0/0/0 ospf network-type broadcast ospf dr-priority 0

将rip与区域4宣告

[r12] ospf 1 import-route rip [r9] area 4 un network 172.16.128.0 0.0.1.255 ospf 2 area 4 network 172.16.128.0 0.0.1.255 ospf 1 import-route ospf 2

减少LSA更新量,配置特殊区域

[r3] ospf 1 area 1 abr-summary 172.16.32.0 255.255.224.0 [r6] ospf 1 area 2 abr-summary 172.16.64.0 255.255.224.0 [r7] ospf 1 area 3 abr-summary 172.16.96.0 255.255.224.0 [r12] ospf 1 asbr-summary 172.16.160.0 255.255.224.0 [r9] ospf 1 asbr-summary 172.16.128.0 255.255.224.0 [r1] ospf 1 area 1 stub [r2] ospf 1 area 1 stub [r3] ospf 1 area 1 stub no-summary //配置nssa [r6] ospf 1 area 2 nssa no-import-route nssa no-summary [r11] ospf 1 area 2 nssa [r12] ospf 1 area 2 nssa [r7] ospf 1 area 3 nssa no-summary [r8] ospf 1 area 3 nssa [r9] ospf 1 area 3 nssa ospf 2 default-route-advertise

NAT地址转换

[r3] acl 2000 rule permit source 172.16.0.0 0.0.255.255 int g0/0/2 nat outbound 2000 [r6] acl 2000 rule permit source 172.16.0.0 0.0.255.255 int g0/0/2 nat outbound 2000 [r7] acl 2000 rule permit source 172.16.0.0 0.0.255.255 int g0/0/2 nat outbound 2000

实验完成