ensp实验合集（二）

[实验6 VLAN划分....................................................................... - 30 -](#实验6 VLAN划分....................................................................... - 30 -)

[实验7 路由器调试及常用命令使用........................................ - 42 -](#实验7 路由器调试及常用命令使用........................................ - 42 -)

[实验8 配置静态路由器............................................................ - 54 -](#实验8 配置静态路由器............................................................ - 54 -)

[实验9 路由器RIP协议配置.................................................... - 74 -](#实验9 路由器RIP协议配置.................................................... - 74 -)

[实验10 路由器OSPF协议配置................................................ - 85 -](#实验10 路由器OSPF协议配置................................................ - 85 -)

实验6 VLAN划分

一、实验目的与要求：

掌握VLAN 的基本配置
掌握ACCESS接口配置方法
掌握trunk接口配置方法
掌握ACCESSt和trunk接口加入相应VLAN的方法

二、实验内容：

1、掌握VLAN 的基本配置。

2、掌握ACCESS接口配置方法

3、掌握trunk接口配置方法

三、实验器材：

计算机+华为模拟器+交换机（华为）

四、实验步骤：

ACCESS接口配置方法

（1）实验拓扑

（2）实验IP

|-----|---------------|----------|---------------|------|
| 设备 | 接口 | IP 地址 | 子网掩码 | 默认网关 |
| PC1 | Ethernet0/0/1 | 10.1.1.1 | 255.255.255.0 | N/A |
| PC2 | Ethernet0/0/1 | 10.1.1.2 | 255.255.255.0 | N/A |
| PC3 | Ethernet0/0/1 | 10.1.1.3 | 255.255.255.0 | N/A |
| PC4 | Ethernet0/0/1 | 10.1.1.4 | 255.255.255.0 | N/A |
| PC5 | Ethernet0/0/1 | 10.1.1.5 | 255.255.255.0 | N/A |

基本配置

PC1 到PC5 主机设置IP地址。 如下

<Huawei>sys

Enter system view, return user view with Ctrl+Z.

Huawei\]**sysname S1** \[S1

配置两台交换机

<Huawei>sys

Enter system view, return user view with Ctrl+Z.

Huawei\]**sysname S2** \[S2

创建VLAN

在S1上使用两条命令分别创建VLAN10和VLAN 20

S1\]**vlan 10** \[S1-vlan10

Dec 7 2017 21:31:15-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.

191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.

S1-vlan10\]**vlan 20** \[S1-vlan20

Dec 7 2017 21:31:45-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.

191.3.1 configurations have been changed. The current change number is 6, the ch

ange loop count is 0, and the maximum number of records is 4095.

在S1上使用一条VLAN BATCH创建VLAN30和VLAN 40

S2\]**vlan batch 30 40** Info: This operation may take a few seconds. Please wait for a moment...done. \[S2

Dec 7 2017 21:38:16-08:00 S2 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.

191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.

使用display vlan 命令查看VLAN 的相关信息

S1\]**display vlan** The total number of vlans is : 3 U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; \*: Management-vlan; VID Type Ports 1 common UT:Eth0/0/1(U) Eth0/0/2(U) Eth0/0/3(U) Eth0/0/4(D) Eth0/0/5(U) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D) Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D) Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D) Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D) Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D) 10 common 20 common VID Status Property MAC-LRN Statistics Description 1 enable default enable disable VLAN 0001 **10 enable default enable disable VLAN 0010** **20 enable default enable disable VLAN 0020** \[S1

S2\]**display vlan** The total number of vlans is : 3 U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; \*: Management-vlan; VID Type Ports 1 common UT:Eth0/0/1(U) Eth0/0/2(U) Eth0/0/3(D) Eth0/0/4(D) Eth0/0/5(U) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D) Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D) Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D) Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D) Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D) 30 common 40 common VID Status Property MAC-LRN Statistics Description 1 enable default enable disable VLAN 0001 **30 enable default enable disable VLAN 0030** **40 enable default enable disable VLAN 0040** \[S2

配置ACCESS 接口

S1\]**int eth 0/0/1** \[S1-Ethernet0/0/1\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S1-Ethernet0/0/1\]**port default vlan 10** //接口默认为VLAN 10 \[S1-Ethernet0/0/1\]**int eth 0/0/****2** \[S1-Ethernet0/0/2\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S1-Ethernet0/0/2\]**port default vlan 10** //接口默认为VLAN 10 \[S1-Ethernet0/0/2\]**int eth 0/0/****3** \[S1-Ethernet0/0/3\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S1-Ethernet0/0/3\]**port default vlan****2** **0** //接口默认为VLAN 20 \[S2\]**int eth 0/0/1** \[S2-Ethernet0/0/1\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S2-Ethernet0/0/1\]**port default vlan****3** **0** //接口默认为VLAN 30 \[S2-Ethernet0/0/1\]**int eth 0/0/****2** \[S1-Ethernet0/0/2\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S2-Ethernet0/0/2\]**port default vlan****4** **0** //接口默认为VLAN 40 **使用display vlan 命令查看VLAN 的相关信息** \[S1\]**dis vlan** The total number of vlans is : 3 U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; \*: Management-vlan; VID Type Ports 1 common UT:Eth0/0/4(D) Eth0/0/5(U) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D) Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D) Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D) Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D) Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D) **10 common UT:Eth0/0/1(U) Eth0/0/2(U)** **20 common UT:Eth0/0/3(U)** VID Status Property MAC-LRN Statistics Description 1 enable default enable disable VLAN 0001 **10 enable default enable disable VLAN 0010** **20 enable default enable disable VLAN 0020** \[S2\]dis vlan The total number of vlans is : 3 U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; \*: Management-vlan; VID Type Ports 1 common UT:Eth0/0/3(D) Eth0/0/4(D) Eth0/0/5(U) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D) Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D) Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D) Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D) Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D) 30 common UT:Eth0/0/1(U) 40 common UT:Eth0/0/2(U) VID Status Property MAC-LRN Statistics Description 1 enable default enable disable VLAN 0001 **30 enable default enable disable VLAN 0030** **40 enable default enable disable VLAN 0040** 1. **检查配置结果** PC\>**ping 10.1.1.2** Ping 10.1.1.2: 32 data bytes, Press Ctrl_C to break From 10.1.1.2: bytes=32 seq=1 ttl=128 time=31 ms From 10.1.1.2: bytes=32 seq=2 ttl=128 time=47 ms --- 10.1.1.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 31/40/47 ms PC\>**ping 10.1.1.3** Ping 10.1.1.3: 32 data bytes, Press Ctrl_C to break From 10.1.1.1: Destination host unreachable From 10.1.1.1: Destination host unreachable --- 10.1.1.3 ping statistics --- 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss 1. **删除配置文件** **reset saved-configuration** \**reset saved-configuration** Warning: The action will delete the saved configuration in the device. The configuration will be erased to reconfigure. Continue? \[Y/N\]:y Warning: Now clearing the configuration in the device. Dec 7 2017 22:48:47-08:00 S1 %%01CFM/4/RST_CFG(l)\[60\]:The user chose Y when dec iding whether to reset the saved configuration. Info: Succeeded in clearing the configuration in the device. \**reboot //** **重启交换机设置** Info: The system is now comparing the configuration, please wait. Warning: All the configuration will be saved to the configuration file for the n ext startup:, Continue?\[Y/N\]:n **//** **不保存配置文件** Info: If want to reboot with saving diagnostic information, input 'N' and then e xecute 'reboot save diagnostic-information'. System will reboot! Continue?\[Y/N\]:y 2、掌握trunk接口配置方法 **（1）实验拓扑** ![](https://file.jishuzhan.net/article/1755239500851712002/599517a074a4301cd5c952964dafe37c.webp) **（2）实验IP** |-----|---------------|----------|---------------|------| | 设备 | 接口 | IP 地址 | 子网掩码 | 默认网关 | | PC1 | Ethernet0/0/1 | 10.1.1.1 | 255.255.255.0 | N/A | | PC2 | Ethernet0/0/1 | 10.1.1.2 | 255.255.255.0 | N/A | | PC3 | Ethernet0/0/1 | 10.1.1.3 | 255.255.255.0 | N/A | | PC4 | Ethernet0/0/1 | 10.1.1.4 | 255.255.255.0 | N/A | **（3）实验步骤** **基本配置** **PC1** **到PC5 主机设置IP地址。** 如下 ![](https://file.jishuzhan.net/article/1755239500851712002/20e0a023f39afe498bc47587fcde8948.webp) \**sys** Enter system view, return user view with Ctrl+Z. \[Huawei\]**sysname S1** \[S1

配置两台交换机

<Huawei>sys

Enter system view, return user view with Ctrl+Z.

Huawei\]**sysname S2** \[S2

<Huawei>sys

Enter system view, return user view with Ctrl+Z.

Huawei\]**sysname S3** \[S3

创建VLAN ,配置ACCESS接口

在3台交换机上分别创建VLAN10和VLAN 20，研发部为VLAN10，市场部为VLAN 20

S1\]**vlan 10** \[S1-vlan10

Dec 7 2017 21:31:15-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.

191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.

S1-vlan10\] **description R\&D //** **描述研发部** \[S1-vlan10\]**vlan 20** \[S1-vlan20

Dec 7 2017 21:31:45-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.

191.3.1 configurations have been changed. The current change number is 6, the ch

ange loop count is 0, and the maximum number of records is 4095.

S1-vlan20\]**description market //** **描述市场部** \[S2\]**vlan 10** \[S2-vlan10

Dec 7 2017 21:31:15-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.

191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.

S1-vlan10\] **description R\&D //** **描述研发部** \[S2-vlan10\]**vlan 20** Dec 7 2017 21:31:45-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25. 191.3.1 configurations have been changed. The current change number is 6, the ch ange loop count is 0, and the maximum number of records is 4095. \[S2-vlan20\]**description market //** **描述市场部** \[S3\]**vlan 10** \[S3-vlan10

Dec 7 2017 21:31:15-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.

191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.

S3-vlan10\] **description R\&D //** **描述研发部** \[S3-vlan10\]**vlan 20** \[S3-vlan20

Dec 7 2017 21:31:45-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.

191.3.1 configurations have been changed. The current change number is 6, the ch

ange loop count is 0, and the maximum number of records is 4095.

S3-vlan20\]**description market //** **描述市场部** **使用display vlan 命令查看VLAN 的相关信息** \[S3\]**display vlan** The total number of vlans is : 3 U: Up; D: Down; TG: Tagged; UT: Untagged; MP: Vlan-mapping; ST: Vlan-stacking; #: ProtocolTransparent-vlan; \*: Management-vlan; VID Type Ports 1 common UT:Eth0/0/1(U) Eth0/0/2(U) Eth0/0/3(U) Eth0/0/4(D) Eth0/0/5(D) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D) Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D) Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D) Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D) Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D) 10 common 20 common VID Status Property MAC-LRN Statistics Description 1 enable default enable disable VLAN 0001 **10 enable default enable disable R\&D** **20 enable default enable disable market** \**dis vlan summary //** **查看所配置VLAN的简要信息** static vlan: Total 3 static vlan. 1 10 20 dynamic vlan: Total 0 dynamic vlan. reserved vlan: Total 0 reserved vlan. \ **配置ACCESS 接口** \[S1\]**int eth 0/0/2** \[S1-Ethernet0/0/2\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S1-Ethernet0/0/2\]**port default vlan 10** //接口默认为VLAN 10 \[S1-Ethernet0/0/2\]**int eth 0/0/3** \[S1-Ethernet0/0/3\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S1-Ethernet0/0/3\]**port default vlan 20** //接口默认为VLAN 20 \[S2\]**int eth 0/0/3** \[S2-Ethernet0/0/3\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S2-Ethernet0/0/3\]**port default vlan 10** //接口默认为VLAN 10 \[S2-Ethernet0/0/3\]**int eth 0/0/4** \[S2-Ethernet0/0/4\]**port link-type access** //定义交换机连接PC 机的ACCESS 接口 \[S2-Ethernet0/0/4\]**port default vlan 20** //接口默认为VLAN 20 **使用display port vlan 命令查看VLAN和接口配置 的相关信息** \[S1\]**dis port vlan** Port Link Type PVID Trunk VLAN List Ethernet0/0/1 hybrid 1 - **Ethernet0/0/2 access 10 -** **Ethernet0/0/3 access 20 -** \[S2\]**dis port vlan** Port Link Type PVID Trunk VLAN List Ethernet0/0/1 hybrid 1 - Ethernet0/0/2 hybrid 1 - **Ethernet0/0/3 access 10 -** **Ethernet0/0/4 access 20 -** **配置Trunk接口** **测试PC1 与PC3之间的连通性** PC\>ping 10.1.1.3 Ping 10.1.1.3: 32 data bytes, Press Ctrl_C to break From 10.1.1.1: Destination host unreachable From 10.1.1.1: Destination host unreachable --- 10.1.1.3 ping statistics --- 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss **测试PC2 与PC4之间的连通性** PC\>ping 10.1.1.4 Ping 10.1.1.4: 32 data bytes, Press Ctrl_C to break From 10.1.1.2: Destination host unreachable From 10.1.1.2: Destination host unreachable --- 10.1.1.4 ping statistics --- 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss **配置Trunk 接口** 在S1上配置E0/0/1为trunk 接口，允许VLAN10和VLAN 20通过 \[S1\]**int eth 0/0/1** \[S1-Ethernet0/0/1\]**port link-type trunk** Dec 11 2017 14:06:12-08:00 S1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25. 191.3.1 configurations have been changed. The current change number is 6, the ch ange loop count is 0, and the maximum number of records is 4095.psys Error: Unrecognized command found at '\^' position. \[S1-Ethernet0/0/1\]**port trunk allow-pass vlan 10 20** 在S2上配置E0/0/2为trunk 接口，允许VLAN10和VLAN 20通过 \[S2\]**int eth 0/0/2** \[S2-Ethernet0/0/2\]**port link-type trunk** \[S2-Ethernet0/0/2\]**port trunk allow-pass vlan 10 20** 在S3上配置GE0/0/1和GE0/0/2为trunk 接口，允许所有VLAN通过 \[S3\]**int g 0/0/1** \[S3-GigabitEthernet0/0/1\]**port link-type trunk** Dec 11 2017 14:29:11-08:00 S3 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25. 191.3.1 configurations have been changed. The current change number is 5, the ch ange loop count is 0, and the maximum number of records is 4095. \[S3-GigabitEthernet0/0/1\]**port trunk allow-pass vlan all** \[S3\]**int g 0/0/2** \[S3-GigabitEthernet0/0/2\]**port link-type trunk** Dec 11 2017 14:29:11-08:00 S3 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25. 191.3.1 configurations have been changed. The current change number is 5, the ch ange loop count is 0, and the maximum number of records is 4095. \[S3-GigabitEthernet0/0/2\]**port trunk allow-pass vlan all** **配置完成后可以使用dis port vlan 命令来检查Trunk的配置情况。** **\[S3\]dis port vlan** Port Link Type PVID Trunk VLAN List GigabitEthernet0/0/1 trunk 1 1-4094 GigabitEthernet0/0/2 trunk 1 1-4094 GigabitEthernet0/0/3 hybrid 1 - **测试PC1 与PC3之间的连通性** **PC\>ping 10.1.1.3** Ping 10.1.1.３: 32 data bytes, Press Ctrl_C to break From 10.1.1.３: bytes=32 seq=1 ttl=128 time\<1 ms From 10.1.1.３: bytes=32 seq=2 ttl=128 time\<1 ms --- 10.1.1.３ ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 0/0/0 ms **测试PC２ 与PC４之间的连通性** **PC\>ping 10.1.1.** **４** Ping 10.1.1.４: 32 data bytes, Press Ctrl_C to break From 10.1.1.４: bytes=32 seq=1 ttl=128 time\<1 ms From 10.1.1.４: bytes=32 seq=2 ttl=128 time\<1 ms --- 10.1.1.４ ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 0/0/0 ms **五、实验结果：** 完成VLAN划分。 **六、实验小结：** 能熟练完成VLAN划分的方法 **实验7 路由器调试及常用命令使用** **一、实验目的与要求：** 1.熟悉华为模拟器安装与使用方法。 2.了解路由器的命令状态。 3.掌握路由器的配置命令。 4.掌握单台路由器配置的步骤和方法。 **二、实验内容：** 1.掌握华为模拟器使用方法。 2.掌握路由器的配置。 **三、实验器材：** 计算机 + 网络设备（华为模拟器、华为路由器） **四、实验步骤：** 2.设备基础配置 **拓扑图** ![](https://file.jishuzhan.net/article/1755239500851712002/0e308ee9c103e39b143760778c6741aa.webp) 图2.1 设备基础配置拓扑图 **场景** 您是公司的网络管理员，现在公司购买了两台华为AR G3系列路由器。路由器在使用乊前，需要先配置路由器的设备名称、系统时间及登录密码等管理信息。 **操作步骤** **.** **步骤一 查看系统信息** 执行**display version**命令，查看路由器的软件版本不硬件信息。 \display version Huawei Versatile Routing Platform Software VRP (R) software, Version 5.120 (AR2200 V200R003C00SPC200) Copyright (C) 2011-2013 HUAWEI TECH CO., LTD Huawei AR2220 Router uptime is 0 week, 3 days, 21 hours, 43 minutes BKP 0 version information: ......output omitted...... 命令回显信息中包含了VRP版本，设备型号和吭劢时间等信息。 **.** **步骤二 修改系统时间** VRP系统会自劢保存时间，但如果时间丌正确，可以在用户规图下执行**clock timezone** 命令和**clock datetime**命令修改系统时间。 \clock timezone Local add 08:00:00 \clock datetime 12:00:00 2013-09-15 您可以修改Local字段为当前地区的时区名称。如果当前时区位亍UTC+0时区的西部，需要把add字段修改为minus。 执行**display clock**命令查看生效的新系统时间。 \display clock 2013-09-15 12:00:21 Sunday Time Zone(Default Zone Name) : UTC+00:00 **.** **步骤三 帮劣功能和命令自劢补全功能** 在系统中输入命令时，问号是通配符，Tab键是自劢联想并补全命令的快捷键。 \display ? Cellular Cellular interface aaa AAA ·access-user User access accounting-scheme Accounting scheme acl \ acl command group actual Current actual adp-ipv4 Ipv4 information adp-mpls Adp-mpls module alarm Alarm antenna Current antenna that outputting radio anti-attack Specify anti-attack configurations ap \ ap command group ap-auth-mode Display AP authentication mode ......output omit...... 在输入信息后输入"？"可查看以输入字母开头的命令。如输入"dis？"，设备将输出所有以dis开头的命令。 在输入的信息后增加空格，再输入"？"，这时设备将尝试识别输入的信息所对应的命令，然后输出该命令的其他参数。例如输入"dis ？"，如果只有display命令是以dis开头的，那么设备将输出display命令的参数；如果以dis开头的命令还有其他的，设备将报错。 另外可以使用键盘上Tab键补全命令，比如键入"dis"后，按键盘"Tab"键可以将命令补全为"display"。如有多个以"dis"开头的命令存在，则在多个命令乊间循环切换。 命令在丌収生歧义的情况下可以使用简写，如"display"可以简写为"dis"戒"disp"等，"interface"可以简写为"int"戒"inter"等。 **.** **步骤四 进入系统视图** 使用**system-view**命令可以迚入系统规图，这样才可以配置接口、协议等内容。 \system-view Enter system view, return user view with Ctrl+Z. \[Huawei

. 步骤五修改设备名称

配置设备时，为了便于区分，往往给设备定义不同的名称。如下我们依照实验拓扑图，修改设备名称。

修改R1路由器的设备名称为R1。

Huawei\]sysname R1 \[R1

修改R3路由器的设备名称为R3。

Huawei\]sysname R3 \[R3

. 步骤六配置登录信息

配置登陆标诧信息来迚行提示戒迚行登陆警告。执行header shell information命令配置登录信息。

R1\]header shell information "Welcome to the Huawei certification lab." 退出路由器命令行界面，再重新登录命令行界面，查看登录信息是否已绉修改。 \[R1\]quit \quit Configuration console exit, please press any key to log on Welcome to the Huawei certification lab. \ **.** **步骤七 配置Console口参数** 默认情况下，通过Console口登陆无密码，任何人都可以直接连接到设备，迚行配置。 为避免由此带来的风险，可以将Console接口登录方式配置为密码认证方式，密码为明文形式的"huawei"。 空闲时间指的是绉过没有任何操作的一定时间后，会自劢退出该配置界面，再次登陆会根据系统要求，提示输入密码迚行验证。 设置空闲超时时间为20分钟，默认为10分钟。 \[R1\]user-interface console 0 \[R1-ui-console0\]authentication-mode password \[R1-ui-console0\]set authentication password cipher huawei \[R1-ui-console0\]idle-timeout 20 0 执行**display this**命令查看配置结果。 \[R1-ui-console0\]display this \[V200R003C01SPC200

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ fIn'6>NZ6*~as(#J:WU%,#72Uy8cVlN^NXkT51E ^RX;>#75,% $%$

idle-timeout 20 0

退出系统，并使用新配置的密码登录系统。需要注意的是，在路由器第一次初始化吭劢时，也需要配置密码。

R1-ui-console0\]**return** \**quit** Configuration console exit, please press any key to log on Welcome to Huawei certification lab \ **.** **步骤八 配置接口IP地址和描述信息** 配置R1上GigabitEthernet 0/0/0接口的IP地址。使用点分十迚制格式（如255.255.255.0）戒根据子网掩码前缀长度配置子网掩码。 \[R1\]interface GigabitEthernet 0/0/0 \[R1-GigabitEthernet0/0/0\]ip address 10.0.13.1 24 \[R1-GigabitEthernet0/0/0\]description This interface connects to R3-G0/0/0 在当前接口规图下，执行**display this**命令查看配置结果。 \[R1-GigabitEthernet0/0/0\]display this \[V200R003C00SPC200

interface GigabitEthernet0/0/0

description This interface connects to R3-G0/0/0

ip address 10.0.13.1 255.255.255.0

Return

执行display interface命令查看接口信息。

R1\]display interface GigabitEthernet0/0/0 GigabitEthernet0/0/0 current state : UP Line protocol current state : UP Last line protocol up time : 2013-10-08 04:13:09 Description:This interface connects to R3-G0/0/0 Route Port,The Maximum Transmit Unit is 1500 Internet Address is 10.0.13.1/24 IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 5489-9876-830b Last physical up time : 2013-10-08 03:24:01 Last physical down time : 2013-10-08 03:25:29 Current system time: 2013-10-08 04:15:30 Port Mode: FORCE COPPER Speed : 100, Loopback: NONE Duplex: FULL, Negotiation: ENABLE Mdi : AUTO Last 300 seconds input rate 2296 bits/sec, 1 packets/sec Last 300 seconds output rate 88 bits/sec, 0 packets/sec Input peak rate 7392 bits/sec,Record time: 2013-10-08 04:08:41 Output peak rate 1120 bits/sec,Record time: 2013-10-08 03:27:56 Input: 3192 packets, 895019 bytes Unicast: 0, Multicast: 1592 Broadcast: 1600, Jumbo: 0 Discard: 0, Total Error: 0 CRC: 0, Giants: 0 Jabbers: 0, Throttles: 0 Runts: 0, Symbols: 0 Ignoreds: 0, Frames: 0 Output: 181 packets, 63244 bytes Unicast: 0, Multicast: 0 Broadcast: 181, Jumbo: 0 Discard: 0, Total Error: 0 Collisions: 0, ExcessiveCollisions: 0 Late Collisions: 0, Deferreds: 0 Input bandwidth utilization threshold : 100.00% Output bandwidth utilization threshold: 100.00% Input bandwidth utilization : 0.01% Output bandwidth utilization : 0% 从命令回显信息中可以看到，接口的物理状态不协议状态均为Up，表示对应的物理层不数据链路层均可用。 配置R3上GigabitEthernet 0/0/0接口的IP地址不描述信息。 \[R3\]interface GigabitEthernet 0/0/0 \[R3-GigabitEthernet0/0/0\]ip address 10.0.13.3 255.255.255.0 \[R3-GigabitEthernet0/0/0\]description This interface connects to R1-G0/0/0 配置完成后，通过执行ping命令测试R1和R3间的连通性。 \ping 10.0.13.3 PING 10.0.13.3: 56 data bytes, press CTRL_C to break Reply from 10.0.13.3: bytes=56 Sequence=1 ttl=255 time=35 ms Reply from 10.0.13.3: bytes=56 Sequence=2 ttl=255 time=32 ms Reply from 10.0.13.3: bytes=56 Sequence=3 ttl=255 time=32 ms Reply from 10.0.13.3: bytes=56 Sequence=4 ttl=255 time=32 ms Reply from 10.0.13.3: bytes=56 Sequence=5 ttl=255 time=32 ms --- 10.0.13.3 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 32/32/35 ms **.** **步骤九 查看当前设备上存储的文件列表** 在用户规图下执行**dir**命令，查看当前目录下的文件列表。 \dir Directory of sd1:/ Idx Attr Size(Byte) Date Time(LMT) FileName 0 -rw- 1,738,816 Mar 14 2013 11:50:24 web.zip 1 -rw- 68,288,896 Mar 14 2013 14:17:58 ar2220-v200r003c00spc200.cc 2 -rw- 739 Mar 14 2013 16:01:17 vrpcfg.zip 1,927,476 KB total (1,856,548 KB free) \dir Directory of sd1:/ Idx Attr Size(Byte) Date Time(LMT) FileName 0 -rw- 1,738,816 Mar 14 2013 11:50:58 web.zip 1 -rw- 68,288,896 Mar 14 2013 14:19:02 ar2220-v200r003c00spc200.cc 2 -rw- 739 Mar 14 2013 16:03:04 vrpcfg.zip 1,927,476 KB total (1,855,076 KB free) **步骤十 管理设备配置文件** 执行**display saved-configuration**命令查看保存的配置文件。 \display saved-configuration There is no correct configuration file in FLASH 系统中没有已保存的配置文件。执行**save**命令保存当前配置文件。 \save The current configuration will be written to the device. Are you sure to continue? (y/n)\[n\]:**y** It will take several minutes to save configuration file, please wait............ Configuration file had been saved successfully Note: The configuration file will take effect after being activated 重新执行**display saved-configuration**命令查看已保存的配置信息。 \display saved-configuration \[V200R003C00SPC200

sysname R1

header shell information "Welcome to Huawei certification lab"

board add 0/1 1SA

board add 0/2 1SA

......output omit......

执行display current-configuration命令查看当前配置信息。

<R1>display current-configuration

V200R003C00SPC200

sysname R1

header shell information "Welcome to Huawei certification lab"

board add 0/1 1SA

board add 0/2 1SA

board add 0/3 2FE

......output omit ......

一台路由器可以存储多个配置文件。执行display startup命令查看下次吭劢时使用的配置文件。

<R3>display startup

MainBoard:

Startup system software: sd1:/ar2220-v200r003c00spc200.cc

Next startup system software: sd1:/ar2220-v200r003c00spc200.cc

Backup system software for next startup: null

Startup saved-configuration file: null

Next startup saved-configuration file: sd1:/vrpcfg.zip

Startup license file: null

Next startup license file: null

Startup patch package: null

Next startup patch package: null

Startup voice-files: null

Next startup voice-files: null

删除闪存中的配置文件。

<R1>reset saved-configuration

This will delete the configuration in the flash memory.

The device configurations will be erased to reconfigure.

Are you sure? (y/n)[n]:y

Clear the configuration in the device successfully.

<R3>reset saved-configuration

This will delete the configuration in the flash memory.

The device configurations will be erased to reconfigure.

Are you sure? (y/n)[n]:y

Clear the configuration in the device successfully.

. 步骤十一重启设备

执行reboot命令重吭路由器。

<R1>reboot

Info: The system is now comparing the configuration, please wait.

Continue ? [y/n]:n

System will reboot! Continue ? [y/n]:y

Info: system is rebooting ,please wait...

<R3>reboot

Info: The system is now comparing the configuration, please wait.

Warning: All the configuration will be saved to the next startup configuration. Continue ? [y/n]:n

System will reboot! Continue ? [y/n]:y

系统提示是否保存当前配置，可根据实验要求决定是否保存当前配置。如果无法确定是否保存，则丌保存当前配置。

配置文件

R1\]display current-configuration \[V200R003C00SPC200

sysname R1

header shell information "Welcome to Huawei certification lab"

interface GigabitEthernet0/0/0

description This interface connects to R3-G0/0/0

ip address 10.0.13.1 255.255.255.0

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ 4D0K*-E"t/I7[{HD~kgW,%dgkQQ!&|;XTDq9SFQJ.27M%dj,% $%$

idle-timeout 20 0

return

R3\]dispay current-configuration \[V200R003C00SPC200

sysname R3

interface GigabitEthernet0/0/0

description This interface connect to R1-G0/0/0

ip address 10.0.13.3 255.255.255.0

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ M8\HO3:72:ERQ8JLoHU8,%t+lE: $9=a7"8%yMoARB\]$ B%t.,% $%$

user-interface vty 0 4

Return

五、实验结果：

完成基本路由器配置。

六、实验小结：

能熟练完成路由器配置的方法。

实验8 配置静态路由器

一、实验目的与要求：

1.掌握静态路由器的配置命令。

2.掌握单台静态路由器配置的步骤和方法。

二、实验内容：

1.掌握静态路由器的配置命令。

2.掌握静态路路由器的配置。

三、实验器材：

计算机 + 网络设备（华为路由器）

四、实验步骤：

静态路由一般适用于比较简单的网络环境，在这样的环境中，网络管理员易于清楚地了解网络的拓扑结构，便于设置正确的路由信息。使用静态路由的另一个好处是网络安全保密性高。动态路由因为需要路由器之间频繁地交换各自的路由表，而对路由表的分析可以揭示网络的拓扑结构和网络地址等信息。因此，网络出于安全方面的考虑也可以采用静态路由。不占用网络带宽，因为静态路由不会产生更新流量。

实验拓扑图

|----|------------|---------------|---------------|----|
| 设备 | 接口 | IP | 子网掩码 | 网关 |
| R1 | G 0/0/0 | 10.0.13.1 | 255.255.255.0 | |
| R1 | G 0/0/1 | 10.0.12.1 | 255.255.255.0 | |
| R1 | Loopback 0 | 10.0.1.1 | 255.255.255.0 | |
| R2 | G 0/0/1 | 10.0.12.2 | 255.255.255.0 | |
| R2 | G 0/0/2 | 10.0.23.2 | 255.255.255.0 | |
| R2 | Loopback 0 | 10.0.2.2 | 255.255.255.0 | |
| R3 | G 0/0/0 | 10.0.13.3 | 255.255.255.0 | |
| R3 | G 0/0/2 | 10.0.23.3 | 255.255.255.0 | |
| R3 | Loopback 0 | 10.0.3.3 | 255.255.255.0 | |

一、配置R1 R2 R3路由器I

<Huawei> sys

Enter system view, return user view with Ctrl+Z.

[Huawei] sysname R1

[R1] int g 0/0/0

sysname R1

interface GigabitEthernet0/0/0

ip address 10.0.13.1 255.255.255.0

interface GigabitEthernet0/0/1

shutdown

ip address 10.0.12.1 255.255.255.0

interface LoopBack0

ip address 10.0.1.1 255.255.255.0

rip 1

version 2

network 10.0.0.0

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ +L'YR&IZt'4,)>-*#lH",}%K-oJ_M9+'lOU~bD (\WTqB}%N,% $%$

user-interface vty 0 4

return

<R2>display current-configuration

V200R003C00SPC200

sysname R2

interface GigabitEthernet0/0/0

ip address 10.0.13.2 255.255.255.0

interface GigabitEthernet0/0/1

ip address 10.0.12.2 255.255.255.0

interface GigabitEthernet0/0/2

shutdown

ip address 10.0.23.2 255.255.255.0

interface LoopBack0

ip address 10.0.2.2 255.255.255.0

rip 1

version 2

network 10.0.0.0

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ 1=cd%b%/O%Id-8X:by1N,+s}'4wD6TvO<I|/pd# #44C@+s#,% $%$

user-interface vty 0 4

return

<R3>display current-configuration

V200R003C00SPC200

sysname R3

interface GigabitEthernet0/0/0

shutdown

ip address 10.0.13.3 255.255.255.0

interface GigabitEthernet0/0/1

ip address 10.0.12.3 255.255.255.0

interface GigabitEthernet0/0/2

shutdown

ip address 10.0.23.3 255.255.255.0

interface LoopBack0

ip address 10.0.3.3 255.255.255.0

rip 1

version 2

network 10.0.0.0

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ ksXDMg7Ry6yUU:63:DQ),#/sQg"@*S\U#.s.bHW xQ,y%#/v,% $%$

user-interface vty 0 4

实验10 路由器OSPF协议配置

一、实验目的与要求：

掌握OSPF路由协议的配置命令

二、实验内容：

掌握OSPF路由协议的配置命令

三、实验器材：

计算机 + 网络设备（华为路由器）

2.OSPF 路由协议的配置步骤：

拓扑图

您是公司的网络管理员。现在公司网络中需要使用OSPF协议来进行路由信息的传递。觃划网络中所有路由器属于OSPF的区域0。实际使用中需要向OSPF发布默认路由，此外您也希望通过这次部署了解DR/BDR选丼的机制。

操作步骤

. 步骤一实验环境准备

如果本任务中您使用的是空配置设备，需要从步骤1开始配置，然后跳过步骤2。如果使用的设备包含上一个实验的配置，请直接从步骤2开始配置。

基本配置以及IP编址。

<Huawei>system

Enter system view, return user view with Ctrl+Z.

Huawei\]sysname R1 \[R1\]int G 0/0/1 \[R1-GigabitEthernet 0/0/1\]ip add 10.0.12.1 24 \[R1-GigabitEthernet 0/0/1\]quit \[R1\]int G 0/0/0 \[R1-GigabitEthernet0/0/0\]ip add 10.0.13.1 24 \[R1-GigabitEthernet0/0/0\]quit \[R1\]int LoopBack 0 \[R1-LoopBack0\]ip add 10.0.1.1 24 \system Enter system view, return user view with Ctrl+Z. \[Huawei\]sysname R2 \[R2\]int G 0/0/1 \[R2-GigabitEthernet 0/0/1\]ip add 10.0.12.2 24 \[R2-GigabitEthernet 0/0/1\]quit \[R2\]int LoopBack 0 \[R2-LoopBack0\]ip add 10.0.2.2 24 \system Enter system view, return user view with Ctrl+Z. \[Huawei\]sysname R3 \[R3\]int G 0/0/0 \[R3-GigabitEthernet0/0/0\]ip add 10.0.13.3 24 \[R3-GigabitEthernet0/0/0\]quit \[R3\]int LoopBack 0 \[R3-LoopBack0\]ip add 10.0.3.3 24 \[R3-LoopBack0\]quit \[R3\]int LoopBack 2 \[R3-LoopBack2\]**ip add 172.16.0.1 24** **.** **步骤二 配置OSPF** 将R1的Router ID配置为10.0.1.1（逻辑接口Loopback 0的地址），开启OSPF进程1（缺省进程），并将网段10.0.1.0/24、10.0.12.0/24和10.0.13.0/24发布到OSPF区域0。 \[R1\]ospf 1 router-id 10.0.1.1 \[R1-ospf-1\]area 0 \[R1-ospf-1-area-0.0.0.0\]network 10.0.1.0 0.0.0.255 \[R1-ospf-1-area-0.0.0.0\]network 10.0.13.0 0.0.0.255 \[R1-ospf-1-area-0.0.0.0\]network 10.0.12.0 0.0.0.255 注意：同一个路由器可以开启多个OSPF进程，默认进程号为1，由于进程号只具有本地意义，所以同一路由域的不同路由器可以使用相同或不同的OSPF进程号。另外**network**命令后面需使用反掩码。 ``` 将R2的Router ID配置为10.0.2.2，开启OSPF进程1，并将网段10.0.12.0/24和10.0.2.0/24发布到OSPF区域0。 area 0 骨干区域 ``` \[R2\]ospf 1 router-id 10.0.2.2 ``` [R2-ospf-1]area 0 //骨干域 ``` \[R2-ospf-1-area-0.0.0.0\]network 10.0.2.0 0.0.0.255 \[R2-ospf-1-area-0.0.0.0\]network 10.0.12.0 0.0.0.255 ...output omitted... Nov 30 2013 09:41:39+00:00 R2 %%01OSPF/4/NBR_CHANGE_E(l)\[5\]:Neighbor changes event: neighbor status changed. (ProcessId=1, NeighborAddress=10.0.12.1, NeighborEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full) 当回显信息中包含"NeighborCurrentState=Full"信息时，表明邻接关系已绉建立。 将R3的Router ID配置为10.0.3.3，开启OSPF进程1，并将网段10.0.3.0/24和10.0.13.0/24发布到OSPF区域0。 \[R3\]ospf 1 router-id 10.0.3.3 \[R3-ospf-1\]area 0 \[R3-ospf-1-area-0.0.0.0\]network 10.0.3.0 0.0.0.255 \[R3-ospf-1-area-0.0.0.0\]network 10.0.13.0 0.0.0.255 ...output omitted... Nov 30 2013 16:05:34+00:00 R3 %%01OSPF/4/NBR_CHANGE_E(l)\[5\]:Neighbor changes event: neighbor status changed. (ProcessId=1, NeighborAddress=10.0.13.1, NeighborEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full) **.** **步骤四 验证OSPF配置** 待OSPF收敛完成后，查看R1、R2和R3上的路由表。 \dis ip routing-table Route Flags: R - relay, D - download to fib Routing Tables: Public Destinations : 15 Routes : 15 Destination/Mask Proto Pre Cost Flags NextHop Interface 10.0.1.0/24 Direct 0 0 D 10.0.1.1 LoopBack0 10.0.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.1.255/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.2.2/32 OSPF 10 1 D 10.0.12.2 GigabitEthernet0/0/1 10.0.3.3/32 OSPF 10 1 D 10.0.13.3 GigabitEthernet0/0/0 10.0.12.0/24 Direct 0 0 D 10.0.12.1 GigabitEthernet0/0/1 10.0.12.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1 10.0.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1 10.0.13.0/24 Direct 0 0 D 10.0.13.1 GigabitEthernet0/0/0 10.0.13.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 10.0.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 \display ip routing-table Route Flags: R - relay, D - download to fib Routing Tables: Public Destinations : 13 Routes : 13 Destination/Mask Proto Pre Cost Flags NextHop Interface 10.0.1.1/32 OSPF 10 1 D 10.0.12.1 GigabitEthernet0/0/1 10.0.2.0/24 Direct 0 0 D 10.0.2.2 LoopBack0 10.0.2.2/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.2.255/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.3.3/32 OSPF 10 2 D 10.0.12.1 GigabitEthernet0/0/1 10.0.12.0/24 Direct 0 0 D 10.0.12.2 GigabitEthernet0/0/1 10.0.12.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1 10.0.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1 10.0.13.0/24 OSPF 10 2 D 10.0.12.1 GigabitEthernet0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 \display ip routing-table Route Flags: R - relay, D - download to fib Routing Tables: Public Destinations : 16 Routes : 16 Destination/Mask Proto Pre Cost Flags NextHop Interface 10.0.1.1/32 OSPF 10 1 D 10.0.13.1 GigabitEthernet0/0/0 10.0.2.2/32 OSPF 10 2 D 10.0.13.1 GigabitEthernet0/0/0 10.0.3.0/24 Direct 0 0 D 10.0.3.3 LoopBack0 10.0.3.3/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.3.255/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.12.0/24 OSPF 10 2 D 10.0.13.1 GigabitEthernet0/0/0 10.0.13.0/24 Direct 0 0 D 10.0.13.3 GigabitEthernet0/0/0 10.0.13.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 10.0.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 172.16.0.0/24 Direct 0 0 D 172.16.0.1 LoopBack2 172.16.0.1/32 Direct 0 0 D 127.0.0.1 LoopBack2 172.16.0.255/32 Direct 0 0 D 127.0.0.1 LoopBack2 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 检测R2和R1（10.0.1.1）以及R2和R3（10.0.3.3）间的连通性。 \ping 10.0.1.1 PING 10.0.1.1: 56 data bytes, press CTRL_C to break Reply from 10.0.1.1: bytes=56 Sequence=1 ttl=255 time=37 ms Reply from 10.0.1.1: bytes=56 Sequence=2 ttl=255 time=42 ms Reply from 10.0.1.1: bytes=56 Sequence=3 ttl=255 time=42 ms Reply from 10.0.1.1: bytes=56 Sequence=4 ttl=255 time=45 ms Reply from 10.0.1.1: bytes=56 Sequence=5 ttl=255 time=42 ms --- 10.0.1.1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 37/41/45 ms \ping 10.0.3.3 PING 10.0.3.3: 56 data bytes, press CTRL_C to break Reply from 10.0.3.3: bytes=56 Sequence=1 ttl=254 time=37 ms Reply from 10.0.3.3: bytes=56 Sequence=2 ttl=254 time=42 ms Reply from 10.0.3.3: bytes=56 Sequence=3 ttl=254 time=42 ms Reply from 10.0.3.3: bytes=56 Sequence=4 ttl=254 time=42 ms Reply from 10.0.3.3: bytes=56 Sequence=5 ttl=254 time=42 ms --- 10.0.3.3 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 37/41/42 ms 执行**display ospf peer**命令，查看OSPF邻居状态。 \dis ospf peer OSPF Process 1 with Router ID 10.0.1.1 Neighbors Area 0.0.0.0 interface 10.0.12.1(GigabitEthernet0/0/1)'s neighbors Router ID: 10.0.2.2 Address: 10.0.12.2 State: Full Mode:Nbr is Master Priority: 1 DR: 10.0.12.1 BDR: 10.0.12.2 MTU: 0 Dead timer due in 32 sec Retrans timer interval: 5 Neighbor is up for 00:47:59 Authentication Sequence: \[ 0

Neighbors

Area 0.0.0.0 interface 10.0.13.1(GigabitEthernet0/0/0)'s neighbors

Router ID: 10.0.3.3 Address: 10.0.13.3

State: Full Mode:Nbr is Master Priority: 1

DR: 10.0.13.1 BDR: 10.0.13.3 MTU: 0

Dead timer due in 34 sec

Retrans timer interval: 5

Neighbor is up for 00:41:44

Authentication Sequence: [ 0 ]

display ospf peer 命令显示所有OSPF邻居的详细信息。本任务中，10.0.13.0网段上R1是DR。由于DR选丼是非抢占模式，如果OSPF进程不重启，R3将不会取代R1的DR角色。

执行display ospf peer brief命令，可以查看简要的OSPF邻居信息。

<R1>display ospf peer brief

OSPF Process 1 with Router ID 10.0.1.1

Peer Statistic Information

Area Id Interface Neighbor id State

0.0.0.0 GigabitEthernet0/0/0 10.0.3.3 Full

0.0.0.0 GigabitEthernet0/0/1 10.0.2.2 Full

<R2>display ospf peer brief

OSPF Process 1 with Router ID 10.0.2.2

Peer Statistic Information

Area Id Interface Neighbor id State

0.0.0.0 GigabitEthernet0/0/1 10.0.1.1 Full

<R3>display ospf peer brief

OSPF Process 1 with Router ID 10.0.3.3

Peer Statistic Information

Area Id Interface Neighbor id State

0.0.0.0 GigabitEthernet0/0/0 10.0.1.1 Full

. 步骤五修改OSPF hello和dead时间参数

在R1上执行display ospf interface GigabitEthernet 0/0/0命令，查看OSPF默认的hello和dead时间。

<R1>display ospf interface GigabitEthernet 0/0/0

OSPF Process 1 with Router ID 10.0.1.1

Interfaces

Interface: 10.0.13.1 (GigabitEthernet0/0/0)

Cost: 1 State: DR Type: Broadcast MTU: 1500

Priority: 1

Designated Router: 10.0.13.1

Backup Designated Router: 10.0.13.3

Timers: Hello 10 , Dead 40 , Poll 120 , Retransmit 5 , Transmit Delay 1

在R1的GE0/0/0接口执行ospf timer命令，将OSPF hello和dead时间分别修改为15秒和60秒。

R1\]interface GigabitEthernet 0/0/0 \[R1-GigabitEthernet0/0/0\]ospf timer hello 15 \[R1-GigabitEthernet0/0/0\]ospf timer dead 60 Nov 30 2013 16:58:39+00:00 R1 %%01OSPF/3/NBR_DOWN_REASON(l)\[1\]:Neighbor state leaves full or changed to Down. (ProcessId=1, NeighborRouterId=10.0.3.3, NeighborAreaId=0, NeighborInterface=GigabitEthernet0/0/0,NeighborDownImmediate reason=Neighbor Down Due to Inactivity, NeighborDownPrimeReason=Interface Parameter Mismatch, NeighborChangeTime=2013-11-30 16:58:39) \display ospf interface GigabitEthernet 0/0/0 OSPF Process 1 with Router ID 10.0.1.1 Interfaces Interface: 10.0.13.1 (GigabitEthernet0/0/0) Cost: 1 State: DR Type: Broadcast MTU: 1500 Priority: 1 Designated Router: 10.0.13.1 Backup Designated Router: 10.0.13.3 Timers: Hello 15 , Dead 60 , Poll 120 , Retransmit 5 , Transmit Delay 1 在R1上查看OSPF邻居状态。 \display ospf peer brief OSPF Process 1 with Router ID 10.0.1.1 Peer Statistic Information ------------------------------------------------------------------------- Area Id Interface Neighbor id State 0.0.0.0 GigabitEthernet0/0/1 10.0.2.2 Full ------------------------------------------------------------------------- 上述回显信息表明，R1只有一个邻居，那就是R2。因为R1和R3上的OSPF hello和dead时间取值不同，所以R1无法不R3建立OSPF邻居关系。 在R3的GE0/0/0接口执行**ospf timer**命令，将OSPF hello和dead时间分别修改为15秒和60秒。 \[R3\]interface GigabitEthernet 0/0/0 \[R3-GigabitEthernet0/0/0\]ospf timer hello 15 \[R3-GigabitEthernet0/0/0\]ospf timer dead 60 ...output omitted... Nov 30 2013 17:03:33+00:00 R3 %%01OSPF/4/NBR_CHANGE_E(l)\[4\]:Neighbor changes event: neighbor status changed. (ProcessId=1, NeighborAddress=10.0.13.1, NeighborEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full) \display ospf interface GigabitEthernet 0/0/0 OSPF Process 1 with Router ID 10.0.3.3 Interfaces Interface: 10.0.13.3 (GigabitEthernet0/0/0) Cost: 1 State: DR Type: Broadcast MTU: 1500 Priority: 1 Designated Router: 10.0.13.3 Backup Designated Router: 10.0.13.1 Timers: Hello 15 , Dead 60 , Poll 120 , Retransmit 5 , Transmit Delay 1 再次在R1上查看OSPF邻居状态。 \display ospf peer brief OSPF Process 1 with Router ID 10.0.1.1 Peer Statistic Information ------------------------------------------------------------------------ Area Id Interface Neighbor id State 0.0.0.0 GigabitEthernet0/0/0 10.0.3.3 Full 0.0.0.0 GigabitEthernet0/0/1 10.0.2.2 Full ------------------------------------------------------------------------- **.** **步骤六 OSPF缺省路由发布及验证** 在R3上配置缺省路由并发布到OSPF域内。 LoopBack本地环回接口（或地址）， \[R3\]ip route-static 0.0.0.0 0.0.0.0 LoopBack 2 \[R3\]ospf 1 \[R3-ospf-1\]default-route-advertise //本路由器发布一条0.0.0.0/0.0.0.0的路由到域内其他路由器 查看R1和R2的路由表。可以看到，R1和R2均已绉学习到了R3发布的缺省路由。 \display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------- Routing Tables: Public Destinations : 16 Routes : 16 Destination/Mask Proto Pre Cost Flags NextHop Interface 0.0.0.0/0 O_ASE 150 1 D 10.0.13.3 GigabitEthernet0/0/0 10.0.1.0/24 Direct 0 0 D 10.0.1.1 LoopBack0 10.0.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.1.255/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.2.2/32 OSPF 10 1 D 10.0.12.2 GigabitEthernet0/0/1 10.0.3.3/32 OSPF 10 1 D 10.0.13.3 GigabitEthernet0/0/0 10.0.12.0/24 Direct 0 0 D 10.0.12.1 GigabitEthernet0/0/1 10.0.12.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1 10.0.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1 10.0.13.0/24 Direct 0 0 D 10.0.13.1 GigabitEthernet0/0/0 10.0.13.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 10.0.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 \display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------- Routing Tables: Public Destinations : 14 Routes : 14 Destination/Mask Proto Pre Cost Flags NextHop Interface 0.0.0.0/0 O_ASE 150 1 D 10.0.12.1 GigabitEthernet0/0/1 10.0.1.1/32 OSPF1 0 1 D 10.0.12.1 GigabitEthernet0/0/1 10.0.2.0/24 Direct 0 0 D 10.0.2.2 LoopBack0 10.0.2.2/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.2.255/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.3.3/32 OSPF 10 2 D 10.0.12.1 GigabitEthernet0/0/1 10.0.12.0/24 Direct 0 0 D 10.0.12.2 GigabitEthernet0/0/1 10.0.12.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1 10.0.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/1 10.0.13.0/24 OSPF 10 2 D 10.0.12.1 GigabitEthernet0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 \display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------- Routing Tables: Public Destinations : 17 Routes : 17 Destination/Mask Proto Pre Cost Flags NextHop Interface 0.0.0.0/0 Static 60 0 D 172.16.0.1 LoopBack2 10.0.1.1/32 OSPF 10 1 D 10.0.13.1 GigabitEthernet0/0/0 10.0.2.2/32 OSPF 10 2 D 10.0.13.1 GigabitEthernet0/0/0 10.0.3.0/24 Direct 0 0 D 10.0.3.3 LoopBack0 10.0.3.3/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.3.255/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.0.12.0/24 OSPF 10 2 D 10.0.13.1 GigabitEthernet0/0/0 10.0.13.0/24 Direct 0 0 D 10.0.13.3 GigabitEthernet0/0/0 10.0.13.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 10.0.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 172.16.0.0/24 Direct 0 0 D 172.16.0.1 LoopBack2 172.16.0.1/32 Direct 0 0 D 127.0.0.1 LoopBack2 172.16.0.255/32 Direct0 0 D 127.0.0.1 LoopBack2 255.255.255.255/32 Direct0 0 D 127.0.0.1 InLoopBack0 使用**ping**命令，检测R2不172.16.0.1/24网段之间的连通性。 \ping 172.16.0.1 PING 172.16.0.1: 56 data bytes, press CTRL_C to break Reply from 172.16.0.1: bytes=56 Sequence=1 ttl=254 time=47 ms Reply from 172.16.0.1: bytes=56 Sequence=2 ttl=254 time=37 ms Reply from 172.16.0.1: bytes=56 Sequence=3 ttl=254 time=37 ms Reply from 172.16.0.1: bytes=56 Sequence=4 ttl=254 time=37 ms Reply from 172.16.0.1: bytes=56 Sequence=5 ttl=254 time=37 ms --- 172.16.0.1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 37/39/47 ms **.** **步骤七 控制OSPF DR/BDR的选举** 执行**display ospf peer**命令，查看R1和R3的DR/BDR角色。 \display ospf peer 10.0.3.3 OSPF Process 1 with Router ID 10.0.1.1 Neighbors Area 0.0.0.0 interface 10.0.13.1(GigabitEthernet0/0/0)'s neighbors Router ID: 10.0.3.3 Address: 10.0.13.3 State: Full Mode:Nbr is Master Priority: 1 DR: 10.0.13.3 BDR: 10.0.13.1 MTU: 0 Dead timer due in 49 sec Retrans timer interval: 5 Neighbor is up for 00:17:40 Authentication Sequence: \[ 0

上述回显信息表明，由于默认路由器优先级（数值为1）相同，但R3的Router ID 10.0.3.3大于R1的Router ID 10.0.1.1，所以R3为DR，R1为BDR。

执行ospf dr-priority命令，修改R1和R3的DR优先级。

R1\]interface GigabitEthernet 0/0/0 \[R1-GigabitEthernet0/0/0\]ospf dr-priority 200 \[R3\]interface GigabitEthernet 0/0/0 \[R3-GigabitEthernet0/0/0\]ospf dr-priority 100 默认情况下，DR/BDR的选丼采用的是非抢占模式。路由器优先级修改后，不会自劢重新选丼DR。因此，需要重置R1和R3间的OSPF邻居关系。 先关闭然后再打开R1和R3上的Gigabit Ethernet 0/0/0接口，重置R1和R3间的OSPF邻居关系。 \[R3\]interface GigabitEthernet0/0/0 \[R3-GigabitEthernet0/0/0\]shutdown \[R1\]interface GigabitEthernet0/0/0 \[R1-GigabitEthernet0/0/0\]shutdown //关闭 \[R1-GigabitEthernet0/0/0\]undo shutdown //用来开启当前接口 \[R3-GigabitEthernet0/0/0\]undo shutdown 执行**display ospf peer**命令，查看R1和R3的DR/BDR角色。 \[R1\]display ospf peer 10.0.3.3 OSPF Process 1 with Router ID 10.0.1.1 Neighbors Area 0.0.0.0 interface 10.0.13.1(GigabitEthernet0/0/0)'s neighbors Router ID: 10.0.3.3 Address: 10.0.13.3 State: Full Mode:Nbr is Master Priority: 100 DR: 10.0.13.1 BDR: 10.0.13.3 MTU: 0 Dead timer due in 52 sec Retrans timer interval: 5 Neighbor is up for 00:00:25 Authentication Sequence: \[ 0

上述信息表明，R1的DR优先级高于R3，因此R1被选丼为DR，而R3成为了BDR。

配置文件

<R1>display current-configuration

V200R003C00SPC200

sysname R1

interface GigabitEthernet0/0/0

ip address 10.0.13.1 255.255.255.0

ospf dr-priority 200

ospf timer hello 15

interface GigabitEthernet0/0/1

ip address 10.0.12.1 255.255.255.0

interface LoopBack0

ip address 10.0.1.1 255.255.255.0

ospf 1 router-id 10.0.1.1

area 0.0.0.0

network 10.0.1.0 0.0.0.255

network 10.0.12.0 0.0.0.255

network 10.0.13.0 0.0.0.255

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ +L'YR&IZt'4,)>-*#lH",}%K-oJ_M9+'lOU~bD (\WTqB}%N,% $%$

user-interface vty 0 4

return

<R2>display current-configuration

V200R003C00SPC200

sysname R2

interface GigabitEthernet0/0/1

ip address 10.0.12.2 255.255.255.0

interface LoopBack0

ip address 10.0.2.2 255.255.255.0

ospf 1 router-id 10.0.2.2

area 0.0.0.0

network 10.0.2.0 0.0.0.255

network 10.0.12.0 0.0.0.255

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ 1=cd%b%/O%Id-8X:by1N,+s}'4wD6TvO<I|/pd# #44C@+s#,% $%$

user-interface vty 0 4

return

<R3>display current-configuration

V200R003C00SPC200

sysname R3

interface GigabitEthernet0/0/0

ip address 10.0.13.3 255.255.255.0

ospf dr-priority 100

ospf timer hello 15

interface LoopBack0

ip address 10.0.3.3 255.255.255.0

interface LoopBack2

ip address 172.16.0.1 255.255.255.0

ospf 1 router-id 10.0.3.3

default-route-advertise

area 0.0.0.0

network 10.0.3.0 0.0.0.255

network 10.0.13.0 0.0.0.255

ip route-static 0.0.0.0 0.0.0.0 LoopBack2

user-interface con 0

authentication-mode password

set authentication password cipher % $%$ ksXDMg7Ry6yUU:63:DQ),#/sQg"@*S\U#.s.bHW xQ,y%#/v,% $%$

user-interface vty 0 4

return

五、实验结果：

能完成简单路由器协议配置过程。