综合实验2

1.根据划分网段配置ip

2.配置静态路由使公网通

3.配置ospf

area3使用进程1 area4使用进程2

在area3和area4使用路由引入

[r9-ospf-1]import-route ospf 2

[r9-ospf-2]import-route ospf 1

将rip引入area2

[r12-ospf-1]import-route rip

4.配置MGRE

[r3-Tunnel0/0/1]ip address 172.16.128.9 29

[r5-Tunnel0/0/1]ip address 172.16.128.10 29

[r6-Tunnel0/0/1]ip address 172.16.128.11 29

[r7-Tunnel0/0/1]ip address 172.16.128.12 29

[r3-Tunnel0/0/1]tunnel-protocol gre p2mp

[r3-Tunnel0/0/1]source 34.0.0.1

[r5-Tunnel0/0/1]tunnel-protocol gre p2mp

[r5-Tunnel0/0/1]source Serial 4/0/0

[r6-Tunnel0/0/1]tunnel-protocol gre p2mp

[r6-Tunnel0/0/1]source Serial 4/0/0

[r7-Tunnel0/0/1]tunnel-protocol gre p2mp

[r7-Tunnel0/0/1]source GigabitEthernet 0/0/0

[r3-Tunnel0/0/1]nhrp network-id 100

[r5-Tunnel0/0/1]nhrp network-id 100

[r5-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register

[r6-Tunnel0/0/1]nhrp network-id 100

[r6-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register

[r7-Tunnel0/0/1]nhrp network-id 100

[r7-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register

在中心站点开启伪广播

[r3-Tunnel0/0/1]nhrp entry multicast dynamic

修改serial线类型

[r5-Tunnel0/0/1]ospf network-type broadcast

[r6-Tunnel0/0/1]ospf network-type broadcast

修改dr的选举

[r6-Tunnel0/0/1]ospf dr-priority 0

[r7-Tunnel0/0/1]ospf dr-priority 0

5.内网出口配置nat

[r3-acl-basic-2000]rule permit source 172.16.0.0 0.0.0.255

[r3-Serial4/0/0]nat outbound 2000

[r6-acl-basic-2000]rule permit source 172.16.32.0 0.0.0.255

[r6-Serial4/0/0]nat outbound 2000

在abr上下放缺省路由

[r3-ospf-1]default-route-advertise

[r5-ospf-1]default-route-advertise

[r6-ospf-1]default-route-advertise

[r7-ospf-1]default-route-advertise

ping测试

6.路由聚合和特殊区域

[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.0.0 255.255.255.0

[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.32.0 255.255.255.0

[r9-ospf-2-area-0.0.0.4]abr-summary 172.16.96.0 255.255.255.0

[r3-ospf-1-area-0.0.0.1]stub no-summary

[r6-ospf-1-area-0.0.0.2]nssa no-summary

[r7-ospf-1-area-0.0.0.3]nssa no-summary

[r1-ospf-1-area-0.0.0.1]stub no-summary

[r2-ospf-1-area-0.0.0.1]stub no-summary

[r8-ospf-1-area-0.0.0.3]nssa no-summary

[r9-ospf-1-area-0.0.0.3]nssa no-summary

[r11-ospf-1-area-0.0.0.2]nssa no-summary

[r12-ospf-1-area-0.0.0.2]nssa no-summary

此时area4无法ping通外网

7.area4配置缺省

[r9-ospf-2]default-route-advertise

8.加快收敛，修改hello时间

[r1-GigabitEthernet0/0/0]ospf timer hello 1

[r2-GigabitEthernet0/0/0]ospf timer hello 1

[r3-GigabitEthernet0/0/0]ospf timer hello 1

[r3-Tunnel0/0/1]ospf timer hello 1

[r5-Tunnel0/0/1]ospf timer hello 1

[r6-Tunnel0/0/1]ospf timer hello 1

[r6-GigabitEthernet0/0/1]ospf timer hello 1

[r7-Tunnel0/0/1]ospf timer hello 1

[r7-GigabitEthernet0/0/1]ospf timer hello 1

[r8-GigabitEthernet0/0/0]ospf timer hello 1

[r8-GigabitEthernet0/0/1]ospf timer hello 1

[r9-GigabitEthernet0/0/0]ospf timer hello 1

[r9-GigabitEthernet0/0/1]ospf timer hello 1

[r10-GigabitEthernet0/0/0]ospf timer hello 1

[r11-GigabitEthernet0/0/0]ospf timer hello 1

[r11-GigabitEthernet0/0/1]ospf timer hello 1

[r12-GigabitEthernet0/0/0]ospf timer hello 1

9.配置OSPF认证

[r1-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234

[r2-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234

[r3-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234

[r3-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321

[r5-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321

[r6-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321

[r7-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321

[r6-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234

[r11-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234

[r12-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234

[r7-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456

[r8-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456

[r9-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456

[r9-ospf-2-area-0.0.0.4]authentication-mode md5 1 cipher 123

[r10-ospf-2-area-0.0.0.4]authentication-mode md5 1 cipher 123

全网ping