综合实验2
1.根据划分网段配置ip
2.配置静态路由使公网通
3.配置ospf
area3使用进程1 area4使用进程2
在area3和area4使用路由引入
[r9-ospf-1]import-route ospf 2
[r9-ospf-2]import-route ospf 1
将rip引入area2
[r12-ospf-1]import-route rip
4.配置MGRE
[r3-Tunnel0/0/1]ip address 172.16.128.9 29
[r5-Tunnel0/0/1]ip address 172.16.128.10 29
[r6-Tunnel0/0/1]ip address 172.16.128.11 29
[r7-Tunnel0/0/1]ip address 172.16.128.12 29
[r3-Tunnel0/0/1]tunnel-protocol gre p2mp
[r3-Tunnel0/0/1]source 34.0.0.1
[r5-Tunnel0/0/1]tunnel-protocol gre p2mp
[r5-Tunnel0/0/1]source Serial 4/0/0
[r6-Tunnel0/0/1]tunnel-protocol gre p2mp
[r6-Tunnel0/0/1]source Serial 4/0/0
[r7-Tunnel0/0/1]tunnel-protocol gre p2mp
[r7-Tunnel0/0/1]source GigabitEthernet 0/0/0
[r3-Tunnel0/0/1]nhrp network-id 100
[r5-Tunnel0/0/1]nhrp network-id 100
[r5-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register
[r6-Tunnel0/0/1]nhrp network-id 100
[r6-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register
[r7-Tunnel0/0/1]nhrp network-id 100
[r7-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register
在中心站点开启伪广播
[r3-Tunnel0/0/1]nhrp entry multicast dynamic
修改serial线类型
[r5-Tunnel0/0/1]ospf network-type broadcast
[r6-Tunnel0/0/1]ospf network-type broadcast
修改dr的选举
[r6-Tunnel0/0/1]ospf dr-priority 0
[r7-Tunnel0/0/1]ospf dr-priority 0
5.内网出口配置nat
[r3-acl-basic-2000]rule permit source 172.16.0.0 0.0.0.255
[r3-Serial4/0/0]nat outbound 2000
[r6-acl-basic-2000]rule permit source 172.16.32.0 0.0.0.255
[r6-Serial4/0/0]nat outbound 2000
在abr上下放缺省路由
[r3-ospf-1]default-route-advertise
[r5-ospf-1]default-route-advertise
[r6-ospf-1]default-route-advertise
[r7-ospf-1]default-route-advertise
ping测试
6.路由聚合和特殊区域
[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.0.0 255.255.255.0
[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.32.0 255.255.255.0
[r9-ospf-2-area-0.0.0.4]abr-summary 172.16.96.0 255.255.255.0
[r3-ospf-1-area-0.0.0.1]stub no-summary
[r6-ospf-1-area-0.0.0.2]nssa no-summary
[r7-ospf-1-area-0.0.0.3]nssa no-summary
[r1-ospf-1-area-0.0.0.1]stub no-summary
[r2-ospf-1-area-0.0.0.1]stub no-summary
[r8-ospf-1-area-0.0.0.3]nssa no-summary
[r9-ospf-1-area-0.0.0.3]nssa no-summary
[r11-ospf-1-area-0.0.0.2]nssa no-summary
[r12-ospf-1-area-0.0.0.2]nssa no-summary
此时area4无法ping通外网
7.area4配置缺省
[r9-ospf-2]default-route-advertise
8.加快收敛，修改hello时间
[r1-GigabitEthernet0/0/0]ospf timer hello 1
[r2-GigabitEthernet0/0/0]ospf timer hello 1
[r3-GigabitEthernet0/0/0]ospf timer hello 1
[r3-Tunnel0/0/1]ospf timer hello 1
[r5-Tunnel0/0/1]ospf timer hello 1
[r6-Tunnel0/0/1]ospf timer hello 1
[r6-GigabitEthernet0/0/1]ospf timer hello 1
[r7-Tunnel0/0/1]ospf timer hello 1
[r7-GigabitEthernet0/0/1]ospf timer hello 1
[r8-GigabitEthernet0/0/0]ospf timer hello 1
[r8-GigabitEthernet0/0/1]ospf timer hello 1
[r9-GigabitEthernet0/0/0]ospf timer hello 1
[r9-GigabitEthernet0/0/1]ospf timer hello 1
[r10-GigabitEthernet0/0/0]ospf timer hello 1
[r11-GigabitEthernet0/0/0]ospf timer hello 1
[r11-GigabitEthernet0/0/1]ospf timer hello 1
[r12-GigabitEthernet0/0/0]ospf timer hello 1
9.配置OSPF认证
[r1-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234
[r2-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234
[r3-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234
[r3-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321
[r5-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321
[r6-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321
[r7-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321
[r6-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234
[r11-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234
[r12-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234
[r7-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456
[r8-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456
[r9-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456
[r9-ospf-2-area-0.0.0.4]authentication-mode md5 1 cipher 123
[r10-ospf-2-area-0.0.0.4]authentication-mode md5 1 cipher 123