[实验6 VLAN划分....................................................................... - 30 -](#实验6 VLAN划分....................................................................... - 30 -)
[实验7 路由器调试及常用命令使用........................................ - 42 -](#实验7 路由器调试及常用命令使用........................................ - 42 -)
[实验8 配置静态路由器............................................................ - 54 -](#实验8 配置静态路由器............................................................ - 54 -)
[实验9 路由器RIP协议配置.................................................... - 74 -](#实验9 路由器RIP协议配置.................................................... - 74 -)
[实验10 路由器OSPF协议配置................................................ - 85 -](#实验10 路由器OSPF协议配置................................................ - 85 -)
实验6 VLAN划分
一、实验目的与要求：
- 掌握VLAN 的基本配置
- 掌握ACCESS接口配置方法
- 掌握trunk接口配置方法
- 掌握ACCESSt和trunk接口加入相应VLAN的方法
二、实验内容：
1、掌握VLAN 的基本配置。
2、掌握ACCESS接口配置方法
3、掌握trunk接口配置方法
三、实验器材：
计算机+华为模拟器+交换机（华为）
四、实验步骤：
- ACCESS接口配置方法
（1）实验拓扑
（2）实验IP
|-----|---------------|----------|---------------|------|
| 设备 | 接口 | IP 地址 | 子网掩码 | 默认网关 |
| PC1 | Ethernet0/0/1 | 10.1.1.1 | 255.255.255.0 | N/A |
| PC2 | Ethernet0/0/1 | 10.1.1.2 | 255.255.255.0 | N/A |
| PC3 | Ethernet0/0/1 | 10.1.1.3 | 255.255.255.0 | N/A |
| PC4 | Ethernet0/0/1 | 10.1.1.4 | 255.255.255.0 | N/A |
| PC5 | Ethernet0/0/1 | 10.1.1.5 | 255.255.255.0 | N/A |
- 基本配置
PC1 到PC5 主机设置IP地址。 如下
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweisysname S1
S1
配置两台交换机
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweisysname S2
S2
- 创建VLAN
在S1上使用两条命令分别创建VLAN10和VLAN 20
S1vlan 10
S1-vlan10
Dec 7 2017 21:31:15-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.
S1-vlan10vlan 20
S1-vlan20
Dec 7 2017 21:31:45-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 6, the ch
ange loop count is 0, and the maximum number of records is 4095.
在S1上使用一条VLAN BATCH创建VLAN30和VLAN 40
S2vlan batch 30 40
Info: This operation may take a few seconds. Please wait for a moment...done.
S2
Dec 7 2017 21:38:16-08:00 S2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.
使用display vlan 命令查看VLAN 的相关信息
S1display vlan
The total number of vlans is : 3
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
VID Type Ports
1 common UT:Eth0/0/1(U) Eth0/0/2(U) Eth0/0/3(U) Eth0/0/4(D)
Eth0/0/5(U) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D)
Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D)
Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D)
Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D)
Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D)
10 common
20 common
VID Status Property MAC-LRN Statistics Description
1 enable default enable disable VLAN 0001
10 enable default enable disable VLAN 0010
20 enable default enable disable VLAN 0020
S1
S2display vlan
The total number of vlans is : 3
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
VID Type Ports
1 common UT:Eth0/0/1(U) Eth0/0/2(U) Eth0/0/3(D) Eth0/0/4(D)
Eth0/0/5(U) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D)
Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D)
Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D)
Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D)
Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D)
30 common
40 common
VID Status Property MAC-LRN Statistics Description
1 enable default enable disable VLAN 0001
30 enable default enable disable VLAN 0030
40 enable default enable disable VLAN 0040
S2
- 配置ACCESS 接口
S1int eth 0/0/1
S1-Ethernet0/0/1port link-type access //定义交换机连接PC 机的ACCESS 接口
S1-Ethernet0/0/1port default vlan 10 //接口默认为VLAN 10
S1-Ethernet0/0/1**int eth 0/0/**2
S1-Ethernet0/0/2port link-type access //定义交换机连接PC 机的ACCESS 接口
S1-Ethernet0/0/2port default vlan 10 //接口默认为VLAN 10
S1-Ethernet0/0/2**int eth 0/0/**3
S1-Ethernet0/0/3port link-type access //定义交换机连接PC 机的ACCESS 接口
S1-Ethernet0/0/3port default vlan****2 0 //接口默认为VLAN 20
S2int eth 0/0/1
S2-Ethernet0/0/1port link-type access //定义交换机连接PC 机的ACCESS 接口
S2-Ethernet0/0/1port default vlan****3 0 //接口默认为VLAN 30
S2-Ethernet0/0/1**int eth 0/0/**2
S1-Ethernet0/0/2port link-type access //定义交换机连接PC 机的ACCESS 接口
S2-Ethernet0/0/2port default vlan****4 0 //接口默认为VLAN 40
使用display vlan 命令查看VLAN 的相关信息
S1dis vlan
The total number of vlans is : 3
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
VID Type Ports
1 common UT:Eth0/0/4(D) Eth0/0/5(U) Eth0/0/6(D) Eth0/0/7(D)
Eth0/0/8(D) Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D)
Eth0/0/12(D) Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D)
Eth0/0/16(D) Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D)
Eth0/0/20(D) Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D)
GE0/0/2(D)
10 common UT:Eth0/0/1(U) Eth0/0/2(U)
20 common UT:Eth0/0/3(U)
VID Status Property MAC-LRN Statistics Description
1 enable default enable disable VLAN 0001
10 enable default enable disable VLAN 0010
20 enable default enable disable VLAN 0020
S2dis vlan
The total number of vlans is : 3
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
VID Type Ports
1 common UT:Eth0/0/3(D) Eth0/0/4(D) Eth0/0/5(U) Eth0/0/6(D)
Eth0/0/7(D) Eth0/0/8(D) Eth0/0/9(D) Eth0/0/10(D)
Eth0/0/11(D) Eth0/0/12(D) Eth0/0/13(D) Eth0/0/14(D)
Eth0/0/15(D) Eth0/0/16(D) Eth0/0/17(D) Eth0/0/18(D)
Eth0/0/19(D) Eth0/0/20(D) Eth0/0/21(D) Eth0/0/22(D)
GE0/0/1(D) GE0/0/2(D)
30 common UT:Eth0/0/1(U)
40 common UT:Eth0/0/2(U)
VID Status Property MAC-LRN Statistics Description
1 enable default enable disable VLAN 0001
30 enable default enable disable VLAN 0030
40 enable default enable disable VLAN 0040
- 检查配置结果
PC>ping 10.1.1.2
Ping 10.1.1.2: 32 data bytes, Press Ctrl_C to break
From 10.1.1.2: bytes=32 seq=1 ttl=128 time=31 ms
From 10.1.1.2: bytes=32 seq=2 ttl=128 time=47 ms
--- 10.1.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 31/40/47 ms
PC>ping 10.1.1.3
Ping 10.1.1.3: 32 data bytes, Press Ctrl_C to break
From 10.1.1.1: Destination host unreachable
From 10.1.1.1: Destination host unreachable
--- 10.1.1.3 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
- 删除配置文件 reset saved-configuration
<S1>reset saved-configuration
Warning: The action will delete the saved configuration in the device.
The configuration will be erased to reconfigure. Continue? Y/N:y
Warning: Now clearing the configuration in the device.
Dec 7 2017 22:48:47-08:00 S1 %%01CFM/4/RST_CFG(l)60:The user chose Y when dec
iding whether to reset the saved configuration.
Info: Succeeded in clearing the configuration in the device.
<S1>reboot // 重启交换机设置
Info: The system is now comparing the configuration, please wait.
Warning: All the configuration will be saved to the configuration file for the n
ext startup:, Continue?Y/N:n // 不保存配置文件
Info: If want to reboot with saving diagnostic information, input 'N' and then e
xecute 'reboot save diagnostic-information'.
System will reboot! Continue?Y/N:y
2、掌握trunk接口配置方法
（1）实验拓扑
（2）实验IP
|-----|---------------|----------|---------------|------|
| 设备 | 接口 | IP 地址 | 子网掩码 | 默认网关 |
| PC1 | Ethernet0/0/1 | 10.1.1.1 | 255.255.255.0 | N/A |
| PC2 | Ethernet0/0/1 | 10.1.1.2 | 255.255.255.0 | N/A |
| PC3 | Ethernet0/0/1 | 10.1.1.3 | 255.255.255.0 | N/A |
| PC4 | Ethernet0/0/1 | 10.1.1.4 | 255.255.255.0 | N/A |
（3）实验步骤
基本配置
PC1 到PC5 主机设置IP地址。 如下
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweisysname S1
S1
配置两台交换机
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweisysname S2
S2
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweisysname S3
S3
创建VLAN ,配置ACCESS接口
在3台交换机上分别创建VLAN10和VLAN 20，研发部为VLAN10，市场部为VLAN 20
S1vlan 10
S1-vlan10
Dec 7 2017 21:31:15-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.
S1-vlan10 description R&D // 描述研发部
S1-vlan10vlan 20
S1-vlan20
Dec 7 2017 21:31:45-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 6, the ch
ange loop count is 0, and the maximum number of records is 4095.
S1-vlan20description market // 描述市场部
S2vlan 10
S2-vlan10
Dec 7 2017 21:31:15-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.
S1-vlan10 description R&D // 描述研发部
S2-vlan10vlan 20
Dec 7 2017 21:31:45-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 6, the ch
ange loop count is 0, and the maximum number of records is 4095.
S2-vlan20description market // 描述市场部
S3vlan 10
S3-vlan10
Dec 7 2017 21:31:15-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.
S3-vlan10 description R&D // 描述研发部
S3-vlan10vlan 20
S3-vlan20
Dec 7 2017 21:31:45-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 6, the ch
ange loop count is 0, and the maximum number of records is 4095.
S3-vlan20description market // 描述市场部
使用display vlan 命令查看VLAN 的相关信息
S3display vlan
The total number of vlans is : 3
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
VID Type Ports
1 common UT:Eth0/0/1(U) Eth0/0/2(U) Eth0/0/3(U) Eth0/0/4(D)
Eth0/0/5(D) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D)
Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D)
Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D)
Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D)
Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D)
10 common
20 common
VID Status Property MAC-LRN Statistics Description
1 enable default enable disable VLAN 0001
10 enable default enable disable R&D
20 enable default enable disable market
<S3>dis vlan summary // 查看所配置VLAN的简要信息
static vlan:
Total 3 static vlan.
1 10 20
dynamic vlan:
Total 0 dynamic vlan.
reserved vlan:
Total 0 reserved vlan.
<S3>
配置ACCESS 接口
S1int eth 0/0/2
S1-Ethernet0/0/2port link-type access //定义交换机连接PC 机的ACCESS 接口
S1-Ethernet0/0/2port default vlan 10 //接口默认为VLAN 10
S1-Ethernet0/0/2int eth 0/0/3
S1-Ethernet0/0/3port link-type access //定义交换机连接PC 机的ACCESS 接口
S1-Ethernet0/0/3port default vlan 20 //接口默认为VLAN 20
S2int eth 0/0/3
S2-Ethernet0/0/3port link-type access //定义交换机连接PC 机的ACCESS 接口
S2-Ethernet0/0/3port default vlan 10 //接口默认为VLAN 10
S2-Ethernet0/0/3int eth 0/0/4
S2-Ethernet0/0/4port link-type access //定义交换机连接PC 机的ACCESS 接口
S2-Ethernet0/0/4port default vlan 20 //接口默认为VLAN 20
使用display port vlan 命令查看VLAN和接口配置 的相关信息
S1dis port vlan
Port Link Type PVID Trunk VLAN List
Ethernet0/0/1 hybrid 1 -
Ethernet0/0/2 access 10 -
Ethernet0/0/3 access 20 -
S2dis port vlan
Port Link Type PVID Trunk VLAN List
Ethernet0/0/1 hybrid 1 -
Ethernet0/0/2 hybrid 1 -
Ethernet0/0/3 access 10 -
Ethernet0/0/4 access 20 -
配置Trunk接口
测试PC1 与PC3之间的连通性
PC>ping 10.1.1.3
Ping 10.1.1.3: 32 data bytes, Press Ctrl_C to break
From 10.1.1.1: Destination host unreachable
From 10.1.1.1: Destination host unreachable
--- 10.1.1.3 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
测试PC2 与PC4之间的连通性
PC>ping 10.1.1.4
Ping 10.1.1.4: 32 data bytes, Press Ctrl_C to break
From 10.1.1.2: Destination host unreachable
From 10.1.1.2: Destination host unreachable
--- 10.1.1.4 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
配置Trunk 接口
在S1上配置E0/0/1为trunk 接口，允许VLAN10和VLAN 20通过
S1int eth 0/0/1
S1-Ethernet0/0/1port link-type trunk
Dec 11 2017 14:06:12-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 6, the ch
ange loop count is 0, and the maximum number of records is 4095.psys
Error: Unrecognized command found at '^' position.
S1-Ethernet0/0/1port trunk allow-pass vlan 10 20
在S2上配置E0/0/2为trunk 接口，允许VLAN10和VLAN 20通过
S2int eth 0/0/2
S2-Ethernet0/0/2port link-type trunk
S2-Ethernet0/0/2port trunk allow-pass vlan 10 20
在S3上配置GE0/0/1和GE0/0/2为trunk 接口，允许所有VLAN通过
S3int g 0/0/1
S3-GigabitEthernet0/0/1port link-type trunk
Dec 11 2017 14:29:11-08:00 S3 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 5, the ch
ange loop count is 0, and the maximum number of records is 4095.
S3-GigabitEthernet0/0/1port trunk allow-pass vlan all
S3int g 0/0/2
S3-GigabitEthernet0/0/2port link-type trunk
Dec 11 2017 14:29:11-08:00 S3 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.
191.3.1 configurations have been changed. The current change number is 5, the ch
ange loop count is 0, and the maximum number of records is 4095.
S3-GigabitEthernet0/0/2port trunk allow-pass vlan all
配置完成后可以使用dis port vlan 命令来检查Trunk的配置情况。
S3dis port vlan
Port Link Type PVID Trunk VLAN List
GigabitEthernet0/0/1 trunk 1 1-4094
GigabitEthernet0/0/2 trunk 1 1-4094
GigabitEthernet0/0/3 hybrid 1 -
测试PC1 与PC3之间的连通性
PC>ping 10.1.1.3
Ping 10.1.1.３: 32 data bytes, Press Ctrl_C to break
From 10.1.1.３: bytes=32 seq=1 ttl=128 time<1 ms
From 10.1.1.３: bytes=32 seq=2 ttl=128 time<1 ms
--- 10.1.1.３ ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 0/0/0 ms
测试PC２ 与PC４之间的连通性
PC>ping 10.1.1. ４
Ping 10.1.1.４: 32 data bytes, Press Ctrl_C to break
From 10.1.1.４: bytes=32 seq=1 ttl=128 time<1 ms
From 10.1.1.４: bytes=32 seq=2 ttl=128 time<1 ms
--- 10.1.1.４ ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 0/0/0 ms
五、实验结果：
完成VLAN划分。
六、实验小结：
能熟练完成VLAN划分的方法
实验7 路由器调试及常用命令使用
一、实验目的与要求：
1.熟悉华为模拟器安装与使用方法。
2.了解路由器的命令状态。
3.掌握路由器的配置命令。
4.掌握单台路由器配置的步骤和方法。
二、实验内容：
1.掌握华为模拟器使用方法。
2.掌握路由器的配置。
三、实验器材：
计算机 + 网络设备（华为模拟器、华为路由器）
四、实验步骤：
2.设备基础配置
拓扑图
图2.1 设备基础配置拓扑图
场景
您是公司的网络管理员，现在公司购买了两台华为AR G3系列路由器。路由器在使用乊前，需要先配置路由器的设备名称、系统时间及登录密码等管理信息。
操作步骤
. 步骤一 查看系统信息
执行display version命令，查看路由器的软件版本不硬件信息。
<Huawei>display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.120 (AR2200 V200R003C00SPC200)
Copyright (C) 2011-2013 HUAWEI TECH CO., LTD
Huawei AR2220 Router uptime is 0 week, 3 days, 21 hours, 43 minutes
BKP 0 version information:
......output omitted......
命令回显信息中包含了VRP版本，设备型号和吭劢时间等信息。
. 步骤二 修改系统时间
VRP系统会自劢保存时间，但如果时间丌正确，可以在用户规图下执行clock timezone 命令和clock datetime命令修改系统时间。
<Huawei>clock timezone Local add 08:00:00
<Huawei>clock datetime 12:00:00 2013-09-15
您可以修改Local字段为当前地区的时区名称。如果当前时区位亍UTC+0时区的西部，需要把add字段修改为minus。
执行display clock命令查看生效的新系统时间。
<Huawei>display clock
2013-09-15 12:00:21
Sunday
Time Zone(Default Zone Name) : UTC+00:00
. 步骤三 帮劣功能和命令自劢补全功能
在系统中输入命令时，问号是通配符，Tab键是自劢联想并补全命令的快捷键。
<Huawei>display ?
Cellular Cellular interface
aaa AAA
·access-user User access
accounting-scheme Accounting scheme
acl <Group> acl command group
actual Current actual
adp-ipv4 Ipv4 information
adp-mpls Adp-mpls module
alarm Alarm
antenna Current antenna that outputting radio
anti-attack Specify anti-attack configurations
ap <Group> ap command group
ap-auth-mode Display AP authentication mode
......output omit......
在输入信息后输入"？"可查看以输入字母开头的命令。如输入"dis？"，设备将输出所有以dis开头的命令。
在输入的信息后增加空格，再输入"？"，这时设备将尝试识别输入的信息所对应的命令，然后输出该命令的其他参数。例如输入"dis ？"，如果只有display命令是以dis开头的，那么设备将输出display命令的参数；如果以dis开头的命令还有其他的，设备将报错。
另外可以使用键盘上Tab键补全命令，比如键入"dis"后，按键盘"Tab"键可以将命令补全为"display"。如有多个以"dis"开头的命令存在，则在多个命令乊间循环切换。
命令在丌収生歧义的情况下可以使用简写，如"display"可以简写为"dis"戒"disp"等，"interface"可以简写为"int"戒"inter"等。
. 步骤四 进入系统视图
使用system-view命令可以迚入系统规图，这样才可以配置接口、协议等内容。
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
Huawei
. 步骤五 修改设备名称
配置设备时，为了便于区分，往往给设备定义不同的名称。如下我们依照实验拓扑图，修改设备名称。
修改R1路由器的设备名称为R1。
Huaweisysname R1
R1
修改R3路由器的设备名称为R3。
Huaweisysname R3
R3
. 步骤六 配置登录信息
配置登陆标诧信息来迚行提示戒迚行登陆警告。执行header shell information命令配置登录信息。
R1header shell information "Welcome to the Huawei certification lab."
退出路由器命令行界面，再重新登录命令行界面，查看登录信息是否已绉修改。
R1quit
<R1>quit
Configuration console exit, please press any key to log on
Welcome to the Huawei certification lab.
<R1>
. 步骤七 配置Console口参数
默认情况下，通过Console口登陆无密码，任何人都可以直接连接到设备，迚行配置。
为避免由此带来的风险，可以将Console接口登录方式配置为密码认证方式，密码为明文形式的"huawei"。
空闲时间指的是绉过没有任何操作的一定时间后，会自劢退出该配置界面，再次登陆会根据系统要求，提示输入密码迚行验证。
设置空闲超时时间为20分钟，默认为10分钟。
R1user-interface console 0
R1-ui-console0authentication-mode password
R1-ui-console0set authentication password cipher huawei
R1-ui-console0idle-timeout 20 0
执行display this命令查看配置结果。
R1-ui-console0display this
V200R003C01SPC200
user-interface con 0
authentication-mode password
set authentication password cipher %%fIn'6>NZ6*~as(#J:WU%,#72Uy8cVlN^NXkT51E ^RX;>#75,%%
idle-timeout 20 0
退出系统，并使用新配置的密码登录系统。需要注意的是，在路由器第一次初始化吭劢时，也需要配置密码。
R1-ui-console0return
<R1>quit
Configuration console exit, please press any key to log on
Welcome to Huawei certification lab
<R1>
. 步骤八 配置接口IP地址和描述信息
配置R1上GigabitEthernet 0/0/0接口的IP地址。使用点分十迚制格式（如255.255.255.0）戒根据子网掩码前缀长度配置子网掩码。
R1interface GigabitEthernet 0/0/0
R1-GigabitEthernet0/0/0ip address 10.0.13.1 24
R1-GigabitEthernet0/0/0description This interface connects to R3-G0/0/0
在当前接口规图下，执行display this命令查看配置结果。
R1-GigabitEthernet0/0/0display this
V200R003C00SPC200
interface GigabitEthernet0/0/0
description This interface connects to R3-G0/0/0
ip address 10.0.13.1 255.255.255.0
Return
执行display interface命令查看接口信息。
R1display interface GigabitEthernet0/0/0
GigabitEthernet0/0/0 current state : UP
Line protocol current state : UP
Last line protocol up time : 2013-10-08 04:13:09
Description:This interface connects to R3-G0/0/0
Route Port,The Maximum Transmit Unit is 1500
Internet Address is 10.0.13.1/24
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 5489-9876-830b
Last physical up time : 2013-10-08 03:24:01
Last physical down time : 2013-10-08 03:25:29
Current system time: 2013-10-08 04:15:30
Port Mode: FORCE COPPER
Speed : 100, Loopback: NONE
Duplex: FULL, Negotiation: ENABLE
Mdi : AUTO
Last 300 seconds input rate 2296 bits/sec, 1 packets/sec
Last 300 seconds output rate 88 bits/sec, 0 packets/sec
Input peak rate 7392 bits/sec,Record time: 2013-10-08 04:08:41
Output peak rate 1120 bits/sec,Record time: 2013-10-08 03:27:56
Input: 3192 packets, 895019 bytes
Unicast: 0, Multicast: 1592
Broadcast: 1600, Jumbo: 0
Discard: 0, Total Error: 0
CRC: 0, Giants: 0
Jabbers: 0, Throttles: 0
Runts: 0, Symbols: 0
Ignoreds: 0, Frames: 0
Output: 181 packets, 63244 bytes
Unicast: 0, Multicast: 0
Broadcast: 181, Jumbo: 0
Discard: 0, Total Error: 0
Collisions: 0, ExcessiveCollisions: 0
Late Collisions: 0, Deferreds: 0
Input bandwidth utilization threshold : 100.00%
Output bandwidth utilization threshold: 100.00%
Input bandwidth utilization : 0.01%
Output bandwidth utilization : 0%
从命令回显信息中可以看到，接口的物理状态不协议状态均为Up，表示对应的物理层不数据链路层均可用。
配置R3上GigabitEthernet 0/0/0接口的IP地址不描述信息。
R3interface GigabitEthernet 0/0/0
R3-GigabitEthernet0/0/0ip address 10.0.13.3 255.255.255.0 R3-GigabitEthernet0/0/0description This interface connects to R1-G0/0/0
配置完成后，通过执行ping命令测试R1和R3间的连通性。
<R1>ping 10.0.13.3
PING 10.0.13.3: 56 data bytes, press CTRL_C to break
Reply from 10.0.13.3: bytes=56 Sequence=1 ttl=255 time=35 ms
Reply from 10.0.13.3: bytes=56 Sequence=2 ttl=255 time=32 ms
Reply from 10.0.13.3: bytes=56 Sequence=3 ttl=255 time=32 ms
Reply from 10.0.13.3: bytes=56 Sequence=4 ttl=255 time=32 ms
Reply from 10.0.13.3: bytes=56 Sequence=5 ttl=255 time=32 ms
--- 10.0.13.3 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 32/32/35 ms
. 步骤九 查看当前设备上存储的文件列表
在用户规图下执行dir命令，查看当前目录下的文件列表。
<R1>dir
Directory of sd1:/
Idx Attr Size(Byte) Date Time(LMT) FileName
0 -rw- 1,738,816 Mar 14 2013 11:50:24 web.zip
1 -rw- 68,288,896 Mar 14 2013 14:17:58 ar2220-v200r003c00spc200.cc
2 -rw- 739 Mar 14 2013 16:01:17 vrpcfg.zip
1,927,476 KB total (1,856,548 KB free)
<R3>dir
Directory of sd1:/
Idx Attr Size(Byte) Date Time(LMT) FileName
0 -rw- 1,738,816 Mar 14 2013 11:50:58 web.zip
1 -rw- 68,288,896 Mar 14 2013 14:19:02 ar2220-v200r003c00spc200.cc
2 -rw- 739 Mar 14 2013 16:03:04 vrpcfg.zip
1,927,476 KB total (1,855,076 KB free)
步骤十 管理设备配置文件
执行display saved-configuration命令查看保存的配置文件。
<R1>display saved-configuration
There is no correct configuration file in FLASH
系统中没有已保存的配置文件。执行save命令保存当前配置文件。
<R1>save
The current configuration will be written to the device.
Are you sure to continue? (y/n)n:y
It will take several minutes to save configuration file, please wait............
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
重新执行display saved-configuration命令查看已保存的配置信息。
<R1>display saved-configuration
V200R003C00SPC200
sysname R1
header shell information "Welcome to Huawei certification lab"
board add 0/1 1SA
board add 0/2 1SA
......output omit......
执行display current-configuration命令查看当前配置信息。
<R1>display current-configuration
V200R003C00SPC200
sysname R1
header shell information "Welcome to Huawei certification lab"
board add 0/1 1SA
board add 0/2 1SA
board add 0/3 2FE
......output omit ......
一台路由器可以存储多个配置文件。执行display startup命令查看下次吭劢时使用的配置文件。
<R3>display startup
MainBoard:
Startup system software: sd1:/ar2220-v200r003c00spc200.cc
Next startup system software: sd1:/ar2220-v200r003c00spc200.cc
Backup system software for next startup: null
Startup saved-configuration file: null
Next startup saved-configuration file: sd1:/vrpcfg.zip
Startup license file: null
Next startup license file: null
Startup patch package: null
Next startup patch package: null
Startup voice-files: null
Next startup voice-files: null
删除闪存中的配置文件。
<R1>reset saved-configuration
This will delete the configuration in the flash memory.
The device configurations will be erased to reconfigure.
Are you sure? (y/n)n:y
Clear the configuration in the device successfully.
<R3>reset saved-configuration
This will delete the configuration in the flash memory.
The device configurations will be erased to reconfigure.
Are you sure? (y/n)n:y
Clear the configuration in the device successfully.
. 步骤十一 重启设备
执行reboot命令重吭路由器。
<R1>reboot
Info: The system is now comparing the configuration, please wait.
Continue ? y/n:n
System will reboot! Continue ? y/n:y
Info: system is rebooting ,please wait...
<R3>reboot
Info: The system is now comparing the configuration, please wait.
Warning: All the configuration will be saved to the next startup configuration. Continue ? y/n:n
System will reboot! Continue ? y/n:y
系统提示是否保存当前配置，可根据实验要求决定是否保存当前配置。如果无法确定是否保存，则丌保存当前配置。
配置文件
R1display current-configuration
V200R003C00SPC200
sysname R1
header shell information "Welcome to Huawei certification lab"
interface GigabitEthernet0/0/0
description This interface connects to R3-G0/0/0
ip address 10.0.13.1 255.255.255.0
user-interface con 0
authentication-mode password
set authentication password cipher %%4D0K*-E"t/I7[{HD~kgW,%dgkQQ!&|;XTDq9SFQJ.27M%dj,%%
idle-timeout 20 0
return
R3dispay current-configuration
V200R003C00SPC200
sysname R3
interface GigabitEthernet0/0/0
description This interface connect to R1-G0/0/0
ip address 10.0.13.3 255.255.255.0
user-interface con 0
authentication-mode password
set authentication password cipher %%M8\HO3:72:ERQ8JLoHU8,%t+lE:9=a7"8%yMoARB\]B%t.,%%
user-interface vty 0 4
Return
五、实验结果：
完成基本路由器配置。
六、实验小结：
能熟练完成路由器配置的方法。
实验8 配置静态路由器
一、实验目的与要求：
1.掌握静态路由器的配置命令。
2.掌握单台静态路由器配置的步骤和方法。
二、实验内容：
1.掌握静态路由器的配置命令。
2.掌握静态路路由器的配置。
三、实验器材：
计算机 + 网络设备（华为路由器）
四、实验步骤：
静态路由一般适用于比较简单的网络环境，在这样的环境中，网络管理员易于清楚地了解网络的拓扑结构，便于设置正确的路由信息。使用静态路由的另一个好处是网络安全保密性高。动态路由因为需要路由器之间频繁地交换各自的路由表，而对路由表的分析可以揭示网络的拓扑结构和网络地址等信息。因此，网络出于安全方面的考虑也可以采用静态路由。不占用网络带宽，因为静态路由不会产生更新流量。
实验拓扑图
|----|------------|---------------|---------------|----|
| 设备 | 接口 | IP | 子网掩码 | 网关 |
| R1 | G 0/0/0 | 10.0.13.1 | 255.255.255.0 | |
| R1 | G 0/0/1 | 10.0.12.1 | 255.255.255.0 | |
| R1 | Loopback 0 | 10.0.1.1 | 255.255.255.0 | |
| R2 | G 0/0/1 | 10.0.12.2 | 255.255.255.0 | |
| R2 | G 0/0/2 | 10.0.23.2 | 255.255.255.0 | |
| R2 | Loopback 0 | 10.0.2.2 | 255.255.255.0 | |
| R3 | G 0/0/0 | 10.0.13.3 | 255.255.255.0 | |
| R3 | G 0/0/2 | 10.0.23.3 | 255.255.255.0 | |
| R3 | Loopback 0 | 10.0.3.3 | 255.255.255.0 | |
一、配置R1 R2 R3路由器I
P
<Huawei> sys
Enter system view, return user view with Ctrl+Z.
Huawei sysname R1
R1 int g 0/0/0
R1-GigabitEthernet0/0/0ip address 10.0.13.1 24
ange loop count is 0, and the maximum number of records is 4095.dis this
interface GigabitEthernet0/0/0
ip address 10.0.13.1 255.255.255.0
return
R1-GigabitEthernet0/0/0q
R1int g 0/0/1
R1-GigabitEthernet0/0/1ip address 10.0.12.1 24
R1-GigabitEthernet0/0/1dis this
interface GigabitEthernet0/0/1
ip address 10.0.12.1 255.255.255.0
return
R1-GigabitEthernet0/0/1q
R1 int loopback 0 // 本地环回接口（或地址），
R1-LoopBack0ip address 10.0.1.1 24
R1-LoopBack0dis this
interface LoopBack0
ip address 10.0.1.1 255.255.255.0
return
R1-LoopBack0q
R1q
<R1>dis ip int brief //查看接口的汇总信息
*down: administratively down
!down: FIB overload down
^down: standby
(l): loopback
(s): spoofing
(d): Dampening Suppressed
The number of interface that is UP in Physical is 4
The number of interface that is DOWN in Physical is 8
The number of interface that is UP in Protocol is 4
The number of interface that is DOWN in Protocol is 8
Interface IP Address/Mask Physical Protocol
Ethernet0/0/0 unassigned down down
Ethernet0/0/1 unassigned down down
GigabitEthernet0/0/0 10.0.13.1/24 up up
GigabitEthernet0/0/1 10.0.12.1/24 up up
GigabitEthernet0/0/2 unassigned down down
GigabitEthernet0/0/3 unassigned down down
LoopBack0 10.0.1.1/24 up up(s)
NULL0 unassigned up up(s)
Serial0/0/0 unassigned down down
Serial0/0/1 unassigned down down
Serial0/0/2 unassigned down down
Serial0/0/3 unassigned down down
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweisysname R2
R2int g 0/0/1
R2-GigabitEthernet0/0/1ip address 10.0.12.2 24
R2-GigabitEthernet0/0/1dis this
interface GigabitEthernet0/0/1
ip address 10.0.12.2 255.255.255.0
return
R2-GigabitEthernet0/0/1q
R2int g 0/0/2
R2-GigabitEthernet0/0/2ip addres 10.0.23.2 24
R2-GigabitEthernet0/0/2dis this
interface GigabitEthernet0/0/2
ip address 10.0.23.2 255.255.255.0
return
R2-GigabitEthernet0/0/2q
R2int loopback 0
R2-LoopBack0dis this
#
interface LoopBack0
return
R2-LoopBack0ip address 10.0.2.2 24
R2-LoopBack0dis this
interface LoopBack0
ip address 10.0.2.2 255.255.255.0
return
R2-LoopBack0q
R2q
<R2>dis ip int brief
*down: administratively down
!down: FIB overload down
^down: standby
(l): loopback
(s): spoofing
(d): Dampening Suppressed
The number of interface that is UP in Physical is 4
The number of interface that is DOWN in Physical is 8
The number of interface that is UP in Protocol is 4
The number of interface that is DOWN in Protocol is 8
Interface IP Address/Mask Physical Protocol
Ethernet0/0/0 unassigned down down
Ethernet0/0/1 unassigned down down
GigabitEthernet0/0/0 unassigned down down
GigabitEthernet0/0/1 10.0.12.2/24 up up
GigabitEthernet0/0/2 10.0.23.2/24 up up
GigabitEthernet0/0/3 unassigned down down
LoopBack0 10.0.2.2/24 up up(s)
NULL0 unassigned up up(s)
Serial0/0/0 unassigned down down
Serial0/0/1 unassigned down down
Serial0/0/2 unassigned down down
Serial0/0/3 unassigned down down
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweisysname R3
R3int g 0/0/0
R3-GigabitEthernet0/0/0ip address 10.0.13.3 24
R3-GigabitEthernet0/0/0dis this
interface GigabitEthernet0/0/0
ip address 10.0.13.3 255.255.255.0
return
\[R3-GigabitEthernet0/0/0\]**q**
\[R3**\]int g 0/0/2**
\[R3-GigabitEthernet0/0/2\]**ip address 10.0.23.3 24**
\[R3-GigabitEthernet0/0/2\]**dis this**
#
interface GigabitEthernet0/0/2
ip address 10.0.23.3 255.255.255.0
#
return
\[R3-GigabitEthernet0/0/2\]**q**
\[R3\]**int loopback 0**
\[R3-LoopBack0\]**ip add 10.0.3.3 24**
\[R3-LoopBack0\]**dis this**
#
interface LoopBack0
ip address 10.0.3.3 255.255.255.0
#
return
\[R3-LoopBack0\]**dis ip int brief**
\*down: administratively down
!down: FIB overload down
\^down: standby
(l): loopback
(s): spoofing
(d): Dampening Suppressed
The number of interface that is UP in Physical is 4
The number of interface that is DOWN in Physical is 8
The number of interface that is UP in Protocol is 4
The number of interface that is DOWN in Protocol is 8
Interface IP Address/Mask Physical Protocol
Ethernet0/0/0 unassigned down down
Ethernet0/0/1 unassigned down down
GigabitEthernet0/0/0 10.0.13.3/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 10.0.23.3/24 up up
GigabitEthernet0/0/3 unassigned down down
LoopBack0 10.0.3.3/24 up up(s)
NULL0 unassigned up up(s)
Serial0/0/0 unassigned down down
Serial0/0/1 unassigned down down
Serial0/0/2 unassigned down down
Serial0/0/3 unassigned down down
**二、检测R1 R2 R3 连通性**
\
sysname R1
interface GigabitEthernet0/0/0
ip address 10.0.13.1 255.255.255.0
interface GigabitEthernet0/0/1
shutdown
ip address 10.0.12.1 255.255.255.0
interface LoopBack0
ip address 10.0.1.1 255.255.255.0
rip 1
version 2
network 10.0.0.0
user-interface con 0
authentication-mode password
set authentication password cipher %%+L'YR&IZt'4,)>-*#lH",}%K-oJ_M9+'lOU~bD (\WTqB}%N,%%
user-interface vty 0 4
return
<R2>display current-configuration
V200R003C00SPC200
sysname R2
interface GigabitEthernet0/0/0
ip address 10.0.13.2 255.255.255.0
interface GigabitEthernet0/0/1
ip address 10.0.12.2 255.255.255.0
interface GigabitEthernet0/0/2
shutdown
ip address 10.0.23.2 255.255.255.0
interface LoopBack0
ip address 10.0.2.2 255.255.255.0
rip 1
version 2
network 10.0.0.0
user-interface con 0
authentication-mode password
set authentication password cipher %%1=cd%b%/O%Id-8X:by1N,+s}'4wD6TvO<I|/pd# #44C@+s#,%%
user-interface vty 0 4
return
<R3>display current-configuration
V200R003C00SPC200
sysname R3
interface GigabitEthernet0/0/0
shutdown
ip address 10.0.13.3 255.255.255.0
interface GigabitEthernet0/0/1
ip address 10.0.12.3 255.255.255.0
interface GigabitEthernet0/0/2
shutdown
ip address 10.0.23.3 255.255.255.0
interface LoopBack0
ip address 10.0.3.3 255.255.255.0
rip 1
version 2
network 10.0.0.0
user-interface con 0
authentication-mode password
set authentication password cipher %%ksXDMg7Ry6yUU:63:DQ),#/sQg"@*S\U#.s.bHW xQ,y%#/v,%%
user-interface vty 0 4
实验10 路由器OSPF协议配置
一、实验目的与要求：
掌握OSPF路由协议的配置命令
二、实验内容：
掌握OSPF路由协议的配置命令
三、实验器材：
计算机 + 网络设备（华为路由器）
2.OSPF 路由协议的配置步骤：
拓扑图
您是公司的网络管理员。现在公司网络中需要使用OSPF协议来进行路由信息的传递。觃划网络中所有路由器属于OSPF的区域0。实际使用中需要向OSPF发布默认路由，此外您也希望通过这次部署了解DR/BDR选丼的机制。
操作步骤
. 步骤一 实验环境准备
如果本任务中您使用的是空配置设备，需要从步骤1开始配置，然后跳过步骤2。如果使用的设备包含上一个实验的配置，请直接从步骤2开始配置。
基本配置以及IP编址。
<Huawei>system
Enter system view, return user view with Ctrl+Z.
Huaweisysname R1
R1int G 0/0/1
R1-GigabitEthernet 0/0/1ip add 10.0.12.1 24
R1-GigabitEthernet 0/0/1quit
R1int G 0/0/0
R1-GigabitEthernet0/0/0ip add 10.0.13.1 24
R1-GigabitEthernet0/0/0quit
R1int LoopBack 0
R1-LoopBack0ip add 10.0.1.1 24
<Huawei>system
Enter system view, return user view with Ctrl+Z.
Huaweisysname R2
R2int G 0/0/1
R2-GigabitEthernet 0/0/1ip add 10.0.12.2 24
R2-GigabitEthernet 0/0/1quit
R2int LoopBack 0
R2-LoopBack0ip add 10.0.2.2 24
<Huawei>system
Enter system view, return user view with Ctrl+Z.
Huaweisysname R3
R3int G 0/0/0
R3-GigabitEthernet0/0/0ip add 10.0.13.3 24
R3-GigabitEthernet0/0/0quit
R3int LoopBack 0
R3-LoopBack0ip add 10.0.3.3 24
R3-LoopBack0quit
R3int LoopBack 2
R3-LoopBack2ip add 172.16.0.1 24
. 步骤二 配置OSPF
将R1的Router ID配置为10.0.1.1（逻辑接口Loopback 0的地址），开启OSPF进程1（缺省进程），并将网段10.0.1.0/24、10.0.12.0/24和10.0.13.0/24发布到OSPF区域0。
R1ospf 1 router-id 10.0.1.1
R1-ospf-1area 0
R1-ospf-1-area-0.0.0.0network 10.0.1.0 0.0.0.255
R1-ospf-1-area-0.0.0.0network 10.0.13.0 0.0.0.255
R1-ospf-1-area-0.0.0.0network 10.0.12.0 0.0.0.255
注意：同一个路由器可以开启多个OSPF进程，默认进程号为1，由于进程号只具有本地意义，所以同一路由域的不同路由器可以使用相同或不同的OSPF进程号。另外network命令后面需使用反掩码。
将R2的Router ID配置为10.0.2.2，开启OSPF进程1，并将网段10.0.12.0/24和10.0.2.0/24发布到OSPF区域0。 area 0 骨干区域R2ospf 1 router-id 10.0.2.2
[R2-ospf-1]area 0 //骨干域R2-ospf-1-area-0.0.0.0network 10.0.2.0 0.0.0.255
R2-ospf-1-area-0.0.0.0network 10.0.12.0 0.0.0.255
...output omitted...
Nov 30 2013 09:41:39+00:00 R2 %%01OSPF/4/NBR_CHANGE_E(l)5:Neighbor changes event: neighbor status changed. (ProcessId=1, NeighborAddress=10.0.12.1, NeighborEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full)
当回显信息中包含"NeighborCurrentState=Full"信息时，表明邻接关系已绉建立。
将R3的Router ID配置为10.0.3.3，开启OSPF进程1，并将网段10.0.3.0/24和10.0.13.0/24发布到OSPF区域0。
R3ospf 1 router-id 10.0.3.3
R3-ospf-1area 0
R3-ospf-1-area-0.0.0.0network 10.0.3.0 0.0.0.255
R3-ospf-1-area-0.0.0.0network 10.0.13.0 0.0.0.255
...output omitted...
Nov 30 2013 16:05:34+00:00 R3 %%01OSPF/4/NBR_CHANGE_E(l)5:Neighbor changes event: neighbor status changed. (ProcessId=1, NeighborAddress=10.0.13.1, NeighborEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full)
. 步骤四 验证OSPF配置
待OSPF收敛完成后，查看R1、R2和R3上的路由表。
<R1>dis ip routing-table
Route Flags: R - relay, D - download to fib
Routing Tables: Public
Destinations : 15 Routes : 15
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.0.1.0/24 Direct 0 0 D 10.0.1.1 LoopBack0
10.0.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.1.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.2.2/32 OSPF 10 1 D 10.0.12.2 GigabitEthernet0/0/1
10.0.3.3/32 OSPF 10 1 D 10.0.13.3 GigabitEthernet0/0/0
10.0.12.0/24 Direct 0 0 D 10.0.12.1 GigabitEthernet0/0/1
10.0.12.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
10.0.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
10.0.13.0/24 Direct 0 0 D 10.0.13.1 GigabitEthernet0/0/0
10.0.13.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
10.0.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
<R2>display ip routing-table
Route Flags: R - relay, D - download to fib
Routing Tables: Public
Destinations : 13 Routes : 13
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.0.1.1/32 OSPF 10 1 D 10.0.12.1 GigabitEthernet0/0/1
10.0.2.0/24 Direct 0 0 D 10.0.2.2 LoopBack0
10.0.2.2/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.2.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.3.3/32 OSPF 10 2 D 10.0.12.1 GigabitEthernet0/0/1
10.0.12.0/24 Direct 0 0 D 10.0.12.2 GigabitEthernet0/0/1
10.0.12.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
10.0.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
10.0.13.0/24 OSPF 10 2 D 10.0.12.1 GigabitEthernet0/0/1
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
<R3>display ip routing-table
Route Flags: R - relay, D - download to fib
Routing Tables: Public
Destinations : 16 Routes : 16
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.0.1.1/32 OSPF 10 1 D 10.0.13.1 GigabitEthernet0/0/0
10.0.2.2/32 OSPF 10 2 D 10.0.13.1 GigabitEthernet0/0/0
10.0.3.0/24 Direct 0 0 D 10.0.3.3 LoopBack0
10.0.3.3/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.3.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.12.0/24 OSPF 10 2 D 10.0.13.1 GigabitEthernet0/0/0
10.0.13.0/24 Direct 0 0 D 10.0.13.3 GigabitEthernet0/0/0
10.0.13.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
10.0.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
172.16.0.0/24 Direct 0 0 D 172.16.0.1 LoopBack2
172.16.0.1/32 Direct 0 0 D 127.0.0.1 LoopBack2
172.16.0.255/32 Direct 0 0 D 127.0.0.1 LoopBack2
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
检测R2和R1（10.0.1.1）以及R2和R3（10.0.3.3）间的连通性。
<R2>ping 10.0.1.1
PING 10.0.1.1: 56 data bytes, press CTRL_C to break
Reply from 10.0.1.1: bytes=56 Sequence=1 ttl=255 time=37 ms
Reply from 10.0.1.1: bytes=56 Sequence=2 ttl=255 time=42 ms
Reply from 10.0.1.1: bytes=56 Sequence=3 ttl=255 time=42 ms
Reply from 10.0.1.1: bytes=56 Sequence=4 ttl=255 time=45 ms
Reply from 10.0.1.1: bytes=56 Sequence=5 ttl=255 time=42 ms
--- 10.0.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 37/41/45 ms
<R2>ping 10.0.3.3
PING 10.0.3.3: 56 data bytes, press CTRL_C to break
Reply from 10.0.3.3: bytes=56 Sequence=1 ttl=254 time=37 ms
Reply from 10.0.3.3: bytes=56 Sequence=2 ttl=254 time=42 ms
Reply from 10.0.3.3: bytes=56 Sequence=3 ttl=254 time=42 ms
Reply from 10.0.3.3: bytes=56 Sequence=4 ttl=254 time=42 ms
Reply from 10.0.3.3: bytes=56 Sequence=5 ttl=254 time=42 ms
--- 10.0.3.3 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 37/41/42 ms
执行display ospf peer命令，查看OSPF邻居状态。
<R1>dis ospf peer
OSPF Process 1 with Router ID 10.0.1.1
Neighbors
Area 0.0.0.0 interface 10.0.12.1(GigabitEthernet0/0/1)'s neighbors
Router ID: 10.0.2.2 Address: 10.0.12.2
State: Full Mode:Nbr is Master Priority: 1
DR: 10.0.12.1 BDR: 10.0.12.2 MTU: 0
Dead timer due in 32 sec
Retrans timer interval: 5
Neighbor is up for 00:47:59
Authentication Sequence: 0
Neighbors
Area 0.0.0.0 interface 10.0.13.1(GigabitEthernet0/0/0)'s neighbors
Router ID: 10.0.3.3 Address: 10.0.13.3
State: Full Mode:Nbr is Master Priority: 1
DR: 10.0.13.1 BDR: 10.0.13.3 MTU: 0
Dead timer due in 34 sec
Retrans timer interval: 5
Neighbor is up for 00:41:44
Authentication Sequence: 0
display ospf peer 命令显示所有OSPF邻居的详细信息。本任务中，10.0.13.0网段上R1是DR。由于DR选丼是非抢占模式，如果OSPF进程不重启，R3将不会取代R1的DR角色。
执行display ospf peer brief命令，可以查看简要的OSPF邻居信息。
<R1>display ospf peer brief
OSPF Process 1 with Router ID 10.0.1.1
Peer Statistic Information
Area Id Interface Neighbor id State
0.0.0.0 GigabitEthernet0/0/0 10.0.3.3 Full
0.0.0.0 GigabitEthernet0/0/1 10.0.2.2 Full
<R2>display ospf peer brief
OSPF Process 1 with Router ID 10.0.2.2
Peer Statistic Information
Area Id Interface Neighbor id State
0.0.0.0 GigabitEthernet0/0/1 10.0.1.1 Full
<R3>display ospf peer brief
OSPF Process 1 with Router ID 10.0.3.3
Peer Statistic Information
Area Id Interface Neighbor id State
0.0.0.0 GigabitEthernet0/0/0 10.0.1.1 Full
. 步骤五 修改OSPF hello和dead时间参数
在R1上执行display ospf interface GigabitEthernet 0/0/0命令，查看OSPF默认的hello和dead时间。
<R1>display ospf interface GigabitEthernet 0/0/0
OSPF Process 1 with Router ID 10.0.1.1
Interfaces
Interface: 10.0.13.1 (GigabitEthernet0/0/0)
Cost: 1 State: DR Type: Broadcast MTU: 1500
Priority: 1
Designated Router: 10.0.13.1
Backup Designated Router: 10.0.13.3
Timers: Hello 10 , Dead 40 , Poll 120 , Retransmit 5 , Transmit Delay 1
在R1的GE0/0/0接口执行ospf timer命令，将OSPF hello和dead时间分别修改为15秒和60秒。
R1interface GigabitEthernet 0/0/0
R1-GigabitEthernet0/0/0ospf timer hello 15
R1-GigabitEthernet0/0/0ospf timer dead 60
Nov 30 2013 16:58:39+00:00 R1 %%01OSPF/3/NBR_DOWN_REASON(l)1:Neighbor state leaves full or changed to Down. (ProcessId=1, NeighborRouterId=10.0.3.3, NeighborAreaId=0, NeighborInterface=GigabitEthernet0/0/0,NeighborDownImmediate
reason=Neighbor Down Due to Inactivity, NeighborDownPrimeReason=Interface Parameter Mismatch, NeighborChangeTime=2013-11-30 16:58:39)
<R1>display ospf interface GigabitEthernet 0/0/0
OSPF Process 1 with Router ID 10.0.1.1
Interfaces
Interface: 10.0.13.1 (GigabitEthernet0/0/0)
Cost: 1 State: DR Type: Broadcast MTU: 1500
Priority: 1
Designated Router: 10.0.13.1
Backup Designated Router: 10.0.13.3
Timers: Hello 15 , Dead 60 , Poll 120 , Retransmit 5 , Transmit Delay 1
在R1上查看OSPF邻居状态。
<R1>display ospf peer brief
OSPF Process 1 with Router ID 10.0.1.1
Peer Statistic Information
Area Id Interface Neighbor id State
0.0.0.0 GigabitEthernet0/0/1 10.0.2.2 Full
上述回显信息表明，R1只有一个邻居，那就是R2。因为R1和R3上的OSPF hello和dead时间取值不同，所以R1无法不R3建立OSPF邻居关系。
在R3的GE0/0/0接口执行ospf timer命令，将OSPF hello和dead时间分别修改为15秒和60秒。
R3interface GigabitEthernet 0/0/0
R3-GigabitEthernet0/0/0ospf timer hello 15
R3-GigabitEthernet0/0/0ospf timer dead 60
...output omitted...
Nov 30 2013 17:03:33+00:00 R3 %%01OSPF/4/NBR_CHANGE_E(l)4:Neighbor changes event: neighbor status changed. (ProcessId=1, NeighborAddress=10.0.13.1, NeighborEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full)
<R3>display ospf interface GigabitEthernet 0/0/0
OSPF Process 1 with Router ID 10.0.3.3
Interfaces
Interface: 10.0.13.3 (GigabitEthernet0/0/0)
Cost: 1 State: DR Type: Broadcast MTU: 1500
Priority: 1
Designated Router: 10.0.13.3
Backup Designated Router: 10.0.13.1
Timers: Hello 15 , Dead 60 , Poll 120 , Retransmit 5 , Transmit Delay 1
再次在R1上查看OSPF邻居状态。
<R1>display ospf peer brief
OSPF Process 1 with Router ID 10.0.1.1
Peer Statistic Information
Area Id Interface Neighbor id State
0.0.0.0 GigabitEthernet0/0/0 10.0.3.3 Full
0.0.0.0 GigabitEthernet0/0/1 10.0.2.2 Full
. 步骤六 OSPF缺省路由发布及验证
在R3上配置缺省路由并发布到OSPF域内。 LoopBack本地环回接口（或地址），
R3ip route-static 0.0.0.0 0.0.0.0 LoopBack 2
R3ospf 1
R3-ospf-1default-route-advertise //本路由器发布一条0.0.0.0/0.0.0.0的路由到域内其他路由器
查看R1和R2的路由表。可以看到，R1和R2均已绉学习到了R3发布的缺省路由。
<R1>display ip routing-table
Route Flags: R - relay, D - download to fib
Routing Tables: Public
Destinations : 16 Routes : 16
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 O_ASE 150 1 D 10.0.13.3 GigabitEthernet0/0/0
10.0.1.0/24 Direct 0 0 D 10.0.1.1 LoopBack0
10.0.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.1.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.2.2/32 OSPF 10 1 D 10.0.12.2 GigabitEthernet0/0/1
10.0.3.3/32 OSPF 10 1 D 10.0.13.3 GigabitEthernet0/0/0
10.0.12.0/24 Direct 0 0 D 10.0.12.1 GigabitEthernet0/0/1
10.0.12.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
10.0.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
10.0.13.0/24 Direct 0 0 D 10.0.13.1 GigabitEthernet0/0/0
10.0.13.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
10.0.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
<R2>display ip routing-table
Route Flags: R - relay, D - download to fib
Routing Tables: Public
Destinations : 14 Routes : 14
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 O_ASE 150 1 D 10.0.12.1 GigabitEthernet0/0/1
10.0.1.1/32 OSPF1 0 1 D 10.0.12.1 GigabitEthernet0/0/1
10.0.2.0/24 Direct 0 0 D 10.0.2.2 LoopBack0
10.0.2.2/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.2.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.3.3/32 OSPF 10 2 D 10.0.12.1 GigabitEthernet0/0/1
10.0.12.0/24 Direct 0 0 D 10.0.12.2 GigabitEthernet0/0/1
10.0.12.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
10.0.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1
10.0.13.0/24 OSPF 10 2 D 10.0.12.1 GigabitEthernet0/0/1
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
<R3>display ip routing-table
Route Flags: R - relay, D - download to fib
Routing Tables: Public
Destinations : 17 Routes : 17
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 Static 60 0 D 172.16.0.1 LoopBack2
10.0.1.1/32 OSPF 10 1 D 10.0.13.1 GigabitEthernet0/0/0
10.0.2.2/32 OSPF 10 2 D 10.0.13.1 GigabitEthernet0/0/0
10.0.3.0/24 Direct 0 0 D 10.0.3.3 LoopBack0
10.0.3.3/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.3.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.0.12.0/24 OSPF 10 2 D 10.0.13.1 GigabitEthernet0/0/0
10.0.13.0/24 Direct 0 0 D 10.0.13.3 GigabitEthernet0/0/0
10.0.13.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
10.0.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
172.16.0.0/24 Direct 0 0 D 172.16.0.1 LoopBack2
172.16.0.1/32 Direct 0 0 D 127.0.0.1 LoopBack2
172.16.0.255/32 Direct0 0 D 127.0.0.1 LoopBack2
255.255.255.255/32 Direct0 0 D 127.0.0.1 InLoopBack0
使用ping命令，检测R2不172.16.0.1/24网段之间的连通性。
<R2>ping 172.16.0.1
PING 172.16.0.1: 56 data bytes, press CTRL_C to break
Reply from 172.16.0.1: bytes=56 Sequence=1 ttl=254 time=47 ms
Reply from 172.16.0.1: bytes=56 Sequence=2 ttl=254 time=37 ms
Reply from 172.16.0.1: bytes=56 Sequence=3 ttl=254 time=37 ms
Reply from 172.16.0.1: bytes=56 Sequence=4 ttl=254 time=37 ms
Reply from 172.16.0.1: bytes=56 Sequence=5 ttl=254 time=37 ms
--- 172.16.0.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 37/39/47 ms
. 步骤七 控制OSPF DR/BDR的选举
执行display ospf peer命令，查看R1和R3的DR/BDR角色。
<R1>display ospf peer 10.0.3.3
OSPF Process 1 with Router ID 10.0.1.1
Neighbors
Area 0.0.0.0 interface 10.0.13.1(GigabitEthernet0/0/0)'s neighbors
Router ID: 10.0.3.3 Address: 10.0.13.3
State: Full Mode:Nbr is Master Priority: 1
DR: 10.0.13.3 BDR: 10.0.13.1 MTU: 0
Dead timer due in 49 sec
Retrans timer interval: 5
Neighbor is up for 00:17:40
Authentication Sequence: 0
上述回显信息表明，由于默认路由器优先级（数值为1）相同，但R3的Router ID 10.0.3.3大于R1的Router ID 10.0.1.1，所以R3为DR，R1为BDR。
执行ospf dr-priority命令，修改R1和R3的DR优先级。
R1interface GigabitEthernet 0/0/0
R1-GigabitEthernet0/0/0ospf dr-priority 200
R3interface GigabitEthernet 0/0/0
R3-GigabitEthernet0/0/0ospf dr-priority 100
默认情况下，DR/BDR的选丼采用的是非抢占模式。路由器优先级修改后，不会自劢重新选丼DR。因此，需要重置R1和R3间的OSPF邻居关系。
先关闭然后再打开R1和R3上的Gigabit Ethernet 0/0/0接口，重置R1和R3间的OSPF邻居关系。
R3interface GigabitEthernet0/0/0
R3-GigabitEthernet0/0/0shutdown
R1interface GigabitEthernet0/0/0
R1-GigabitEthernet0/0/0shutdown //关闭
R1-GigabitEthernet0/0/0undo shutdown //用来开启当前接口
R3-GigabitEthernet0/0/0undo shutdown
执行display ospf peer命令，查看R1和R3的DR/BDR角色。
R1display ospf peer 10.0.3.3
OSPF Process 1 with Router ID 10.0.1.1
Neighbors
Area 0.0.0.0 interface 10.0.13.1(GigabitEthernet0/0/0)'s neighbors
Router ID: 10.0.3.3 Address: 10.0.13.3
State: Full Mode:Nbr is Master Priority: 100
DR: 10.0.13.1 BDR: 10.0.13.3 MTU: 0
Dead timer due in 52 sec
Retrans timer interval: 5
Neighbor is up for 00:00:25
Authentication Sequence: 0
上述信息表明，R1的DR优先级高于R3，因此R1被选丼为DR，而R3成为了BDR。
配置文件
<R1>display current-configuration
V200R003C00SPC200
sysname R1
interface GigabitEthernet0/0/0
ip address 10.0.13.1 255.255.255.0
ospf dr-priority 200
ospf timer hello 15
interface GigabitEthernet0/0/1
ip address 10.0.12.1 255.255.255.0
interface LoopBack0
ip address 10.0.1.1 255.255.255.0
ospf 1 router-id 10.0.1.1
area 0.0.0.0
network 10.0.1.0 0.0.0.255
network 10.0.12.0 0.0.0.255
network 10.0.13.0 0.0.0.255
user-interface con 0
authentication-mode password
set authentication password cipher %%+L'YR&IZt'4,)>-*#lH",}%K-oJ_M9+'lOU~bD (\WTqB}%N,%%
user-interface vty 0 4
return
<R2>display current-configuration
V200R003C00SPC200
sysname R2
interface GigabitEthernet0/0/1
ip address 10.0.12.2 255.255.255.0
interface LoopBack0
ip address 10.0.2.2 255.255.255.0
ospf 1 router-id 10.0.2.2
area 0.0.0.0
network 10.0.2.0 0.0.0.255
network 10.0.12.0 0.0.0.255
user-interface con 0
authentication-mode password
set authentication password cipher %%1=cd%b%/O%Id-8X:by1N,+s}'4wD6TvO<I|/pd# #44C@+s#,%%
user-interface vty 0 4
return
<R3>display current-configuration
V200R003C00SPC200
sysname R3
interface GigabitEthernet0/0/0
ip address 10.0.13.3 255.255.255.0
ospf dr-priority 100
ospf timer hello 15
interface LoopBack0
ip address 10.0.3.3 255.255.255.0
interface LoopBack2
ip address 172.16.0.1 255.255.255.0
ospf 1 router-id 10.0.3.3
default-route-advertise
area 0.0.0.0
network 10.0.3.0 0.0.0.255
network 10.0.13.0 0.0.0.255
ip route-static 0.0.0.0 0.0.0.0 LoopBack2
user-interface con 0
authentication-mode password
set authentication password cipher %%ksXDMg7Ry6yUU:63:DQ),#/sQg"@*S\U#.s.bHW xQ,y%#/v,%%
user-interface vty 0 4
return
五、实验结果：
能完成简单路由器协议配置过程。