OSPF综合实验

ytdbc2026-05-31 18:43

1，R4 为 ISP，其上只能配置 IP 地址； R4 与其他所有直连设备间均使用公有 IP

2，R3-R5/6/7 为 MGRE 环境，R3 为中心站点；

3，整个 OSPF 环境 IP 基于 172.16.0.0/16 划分；

4，所有设备均可访问 R4 的环回；

5，减少 LSA 的更新量，加快收敛，保障更新安全；

6，全网可达

需求分析

1.R4 为 ISP，仅配置 IP 地址，与直连设备使用公有 IP

  1. 子网划分与OSPF基础配置

以172.16.0.0/16为总网段，根据设备接口需求划分对应子网，单独划分私网网段用于RIP协议。为每台路由器配置唯一的OSPF设备标识，按照拓扑规划划分多个OSPF区域，将所有内网接口网段宣告进对应OSPF区域，建立OSPF邻居关系

  1. 配置RIP协议与路由重发布

在指定内网路由器上部署RIP路由协议，宣告RIP对应的私网网段。在同时运行OSPF和RIP的边界设备上配置路由重发布，将RIP学习到的路由导入OSPF，解决两种路由协议互不通信的问题，让全网设备都能学习到所有内网网段路由。

4.所有设备均可访问 R4 的环回；

配置NAT实现内网访问公网 将AR4设备作为公网ISP服务器，在AR3、AR5、AR6、AR7四台出口路由器上配置简易NAT转换。

5.加快网络收敛：全网配置BFD与OSPF联动

6.，减少 LSA 的更新量 :在abr对零散的子网路由做路由汇总 划分特殊区域

代码实现

一.ip配置

  1. 先分配ip地址

先根据5个区域将总IP地址172.16.0.0/16分成5个，再细分 我图上有缩写

172.16.0.0/16

172.0.0.0/19 ---Area0

172.0.0.0/24 ---MGRE

172.0.0.1/24 ---R5

172.0.0.2/24 ---R6

172.0.0.3/24 ---R7

AR3--AR4 34.0.0.0/24

AR4--AR5 45.0.0.0/24

AR4--AR6 46.0.0.0/24

AR4--AR7 47.0.0.0/24

172.0.0.32/19----Area 1

172.16.35.0 / 29---互联

172.16.32.0 /24----AR1环回

172.16.33.0 /24----AR2环回

172.16.34.0 /24---AR3环回

172.0.0.64/19----Area 2

172.16.64.0 /24---AR11环回

AR6--AR11 172.16.65.0 /30

AR11--AR12 172.16.65.4 /30

(后面看我的图，有缩写)

172.0.0.96/19-----Area 3

172.0.0.128/19-----Area 4

AR12两环回给 192.168.1.0 /24 192.168.2.0 /24

bash 复制代码 
//AR1
[AR1-LoopBack0]ip address 172.16.32.1 24
[AR1-LoopBack0]ospf network-type broadcast    //OSPF 会按照你实际配置的掩码（这里 / 24）发布路由，不再强制改成 / 32
[AR1-LoopBack0]q
[AR1]int g 0/0/0 
[AR1-GigabitEthernet0/0/0]ip address 172.16.35.1 29
//AR2
[AR2]int LoopBack 0 
[AR2-LoopBack0]ip address 172.16.33.1 24
	
[AR2-LoopBack0]ospf network-type broadcast 
[AR2-LoopBack0]q
[AR2]int g 0/0/0
AR2-GigabitEthernet0/0/0]ip address  172.16.35.2 29


//AR3
[AR3]int LoopBack 0

[AR3-LoopBack0]ip address 192.16.34.1 24

[AR3-LoopBack0]ospf network-type broadcast 
[AR3-LoopBack0]q
[AR3]int g0/0/0
[AR3-GigabitEthernet0/0/0]ip address 172.16.35.3 29
[AR3]int Serial 4/0/0
[AR3-Serial4/0/0]ip address 34.0.0.3 24

//AR4
[AR4]int Serial 4/0/0

[AR4-Serial4/0/0]ip address 34.0.0.4 24
[AR4-Serial4/0/0]int Serial 4/0/1
[AR4-Serial4/0/1]ip address 45.0.0.4 24

[AR4-Serial4/0/1]int Serial 3/0/0
[AR4-Serial3/0/0]ip address 46.0.0.4 24

[AR4]int GigabitEthernet 0/0/0

[AR4-GigabitEthernet0/0/0]ip address 47.0.0.4 24
[AR4]int LoopBack 0
[AR4-LoopBack0]ip address 4.4.4.4 24


//AR5
[AR5]int LoopBack 0
[AR5-LoopBack0]ip address 172.16.1.1 24

[AR5]int Serial 4/0/0
	
[AR5-Serial4/0/0]ip address 45.0.0.5 24

[AR5-Serial4/0/0]int LoopBack 0

[AR5-LoopBack0]ospf network-type broadcast 


//AR6
[AR6]INT LoopBack 0
[AR6-LoopBack0]ip add 172.16.2.1 24
[AR6-LoopBack0]ospf network-type  broadcast 

[AR6]int Serial  4/0/0

[AR6-Serial4/0/0]ip address  46.0.0.6 24
[AR6]int g 0/0/0
[AR6-GigabitEthernet0/0/0]ip address 171.16.65.1 30

//AR7
[AR7]INt LoopBack 0
[AR7-LoopBack0]ip address 172.16.3.1 24
[AR7]int GigabitEthernet 0/0/0
[AR7-GigabitEthernet0/0/0]ip address  47.0.0.7 24
[AR7-GigabitEthernet0/0/0]int GigabitEthernet 0/0/1
[AR7-GigabitEthernet0/0/1]ip address 172.16.97.1 30


//AR8
[AR8]INt GigabitEthernet  0/0/0
[AR8-GigabitEthernet0/0/0]ip address 172.16.97.2 30
[AR8]INt GigabitEthernet 0/0/1
[AR8-GigabitEthernet0/0/1]ip address 172.16.97.5 30
[AR8]int LoopBack 0
[AR8-LoopBack0]ip address 172.16.96.1 24
[AR8-LoopBack0]ospf network-type broadcast 

//AR9
[AR9]int GigabitEthernet  0/0/0
	
[AR9-GigabitEthernet0/0/0]ip address 172.16.97.6 30

[AR9-GigabitEthernet0/0/0]int GigabitEthernet 0/0/1
[AR9-GigabitEthernet0/0/1]ip address 172.16.130.1 30


[AR9]int LoopBack  0
[AR9-LoopBack0]ip add	
[AR9-LoopBack0]ip address 172.16.128.1 24

[AR9-LoopBack0]ospf network-type  broadcast 

//AR10
[Huawei]sysname AR10

[AR10]INT GigabitEthernet 0/0/0

[AR10-GigabitEthernet0/0/0]IP address 172.16.130.2 30


	
[AR10]int LoopBack 0
[AR10-LoopBack0]ip add	
[AR10-LoopBack0]ip address 172.16.129.1 24
[AR10-LoopBack0]ospf network-type broadcast 

//AR11
[AR11]int GigabitEthernet 0/0/0


[AR11-GigabitEthernet0/0/0]ip address  172.16.65.2 30
 
[AR11-GigabitEthernet0/0/0]int GigabitEthernet 0/0/1
[AR11-GigabitEthernet0/0/1]ip address 172.16.65.5 30

[AR11-GigabitEthernet0/0/1]q
[AR11]int l	
[AR11]int LoopBack 0

[AR11-LoopBack0]ip address 172.16.64.1 24
[AR11-LoopBack0]ospf network-type broadcast 

//AR12
[AR12]int g 0/0/0
[AR12-GigabitEthernet0/0/0]ip address 172.16.65.6 30
[AR12-GigabitEthernet0/0/0]q
[AR12]int l	
[AR12]int LoopBack 0
[AR12-LoopBack0]ip address  192.168.1.1 24
[AR12-LoopBack0]int LoopBack 1
[AR12-LoopBack1]ip address 192.168.2.1 24

由于本题掩码不同的比较多要进行配置检查

二.搭mgre环境

bash 复制代码 
//AR3  hub
[AR3]int Tunnel  0/0/0
[AR3-Tunnel0/0/0]ip address 172.16.0.3 24
[AR3-Tunnel0/0/0]tunnel-protocol gre p2mp 

[AR3-Tunnel0/0/0]source 34.0.0.3 


//AR5 
[AR5]int t 0/0/0
[AR5-Tunnel0/0/0]ip address 172.16.0.5 24

[AR5-Tunnel0/0/0]tunnel-protocol  gre  p2mp 
	
[AR5-Tunnel0/0/0]source Serial 4/0/0

[AR5-Tunnel0/0/0]nhrp entry 172.16.0.3 34.0.0.3 register 

//AR6 
[AR6]int t 0/0/0
[AR6-Tunnel0/0/0]ip address  172.16.0.6 24
[AR6-Tunnel0/0/0]tunnel-protocol gre p2mp 
[AR6-Tunnel0/0/0]source Serial 4/0/0
[AR6-Tunnel0/0/0]nhrp entry 172.16.0.3 34.0.0.3 register 

//AR7

[AR7]int Tunnel  0/0/0
[AR7-Tunnel0/0/0]ip address 172.16.0.7 24
[AR7-Tunnel0/0/0]tunnel-protocol gre p2mp 
[AR7-Tunnel0/0/0]source GigabitEthernet 0/0/0
[AR7-Tunnel0/0/0]nhrp entry 172.16.0.3 34.0.0.3 register

配完但现在隧道是没有建立的，因为此时公网不可达少了缺省

bash 复制代码 
//AR3
[AR3]ip route-static 0.0.0.0 0 Serial 4/0/0  串接口下一跳写出接口

//AR5

[AR5]ip route-static 0.0.0.0 0 Serial 4/0/0

//AR6
[AR6]ip route-static 0.0.0.0 0 Serial 4/0/0

//AR7
[AR7]ip route-static 0.0.0.0 0 47.0.0.4

同时可以ping通

三.ospf配置

bash 复制代码 
//ar1
	
[AR1]ospf 1 router-id 1.1.1.1
[AR1-ospf-1]a 1
[AR1-ospf-1-area-0.0.0.1]network 172.16.32.0 0.0.31.255

//ar2
[AR2]ospf 1 router-id 2.2.2.2

[AR2-ospf-1-area-0.0.0.1]network 172.16.32.0 0.0.31.255

//ar3
[AR3-ospf-1]dis th
[V200R003C00]
#
ospf 1 router-id 3.3.3.3 
 area 0.0.0.0 
  network 172.16.0.3 0.0.0.0 
 area 0.0.0.1 
  network 172.16.34.1 0.0.0.0 
  network 172.16.35.3 0.0.0.0 

//ar4


//ar5
[AR5]ospf 1 router-id 5.5.5.5
[AR5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.31.255

//ar6
[AR6-ospf-1]display  th
[V200R003C00]
#
ospf 1 router-id 6.6.6.6 
 area 0.0.0.0 
  network 172.16.0.0 0.0.31.255 
 area 0.0.0.2 
  network 172.16.64.0 0.0.31.255 

//ar7
[AR7]ospf 1 router-id 7.7.7.7
	
[AR7-ospf-1-area-0.0.0.0]network  172.16.0.7 0.0.0.0

[AR7-ospf-1-area-0.0.0.3]network 172.16.96.0 0.0.31.255
[AR7-ospf-1-area-0.0.0.0]network 172.16.3.1 0.0.0.0

//ar8
[AR8-ospf-1]dis th
[V200R003C00]
#
ospf 1 router-id 8.8.8.8 
 area 0.0.0.3 
  network 172.16.96.0 0.0.31.255 
#


//ar9
[AR9-ospf-1]display th
[V200R003C00]
#
ospf 1 router-id 9.9.9.9 
 area 0.0.0.3 
  network 172.16.97.6 0.0.0.0 
#
[AR9-ospf-2]dis th
[V200R003C00]
#
ospf 2 router-id 9.9.9.9 
 area 0.0.0.4 
  network 172.16.128.0 0.0.31.255 
#


//ar10
[AR10]ospf 1 r 10.10.10.10

[AR10-ospf-1-area-0.0.0.4]network 172.16.128.0 0.0.31.255
//ar11

[AR11]ospf 1 router-id  11.11.11.11 
[AR11-ospf-1]a 2

[AR11-ospf-1-area-0.0.0.2]network 172.16.64.0 0.0.31.255\

//ar12
[AR12]rip 1

[AR12-rip-1]version 2
[AR12-rip-1]n	
[AR12-rip-1]network 192.168.1.0
[AR12-rip-1]network 192.168.2.0
[AR12-rip-1]

[AR12]ospf 1 router-id 12.12.12.12
[AR12-ospf-1]area 2
[AR12-ospf-1-area-0.0.0.2]network 172.16.65.6 0.0.0.0

此时检查AR3ospf邻居表 发现mgre里只有一个邻居 默认为点对点建立一个邻居要改格式

AR3-Tunnel0/0/0ospf network-type broadcast

bash 复制代码 
//AR3

[AR3-Tunnel0/0/0]ospf network-type broadcast 

[AR3-Tunnel0/0/0]nhrp entry multicast dynamic

AR3-Tunnel0/0/0nhrp entry multicast dynamic 开启伪广播

此时AR5类型

AR5没路由

还要改类型

bash 复制代码 
[AR5-Tunnel0/0/0]ospf network-type  broadcast 

[AR6-Tunnel0/0/0]ospf network-type  broadcast 

[AR7-Tunnel0/0/0]ospf network-type  broadcast

此时AR5,6,7可以参与选举DR,但DR必须为hub节点

改优先级

bash 复制代码 
[AR5-Tunnel0/0/0]ospf dr-priority  0
[AR6-Tunnel0/0/0]ospf dr-priority  0
[AR7-Tunnel0/0/0]ospf dr-priority  0

四.重发布

bash 复制代码 
//AR12
[AR12]ospf 1
[AR12-ospf-1]import-route rip 1


//AR9

[AR9-ospf-1]import-route ospf 2
[AR9-ospf-2]default-route-advertise  下放缺省

NAT公网转换

bash 复制代码 
[AR3]acl number 2000
[AR3-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[AR3-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[AR3-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255
[AR3-acl-basic-2000]q
[AR3]interface Serial 4/0/0
[AR3-Serial4/0/0]nat outbound 2000


[AR5]acl number 2000
[AR5-acl-basic-2000] rule permit source 172.16.0.0 0.0.255.255
[AR5-acl-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[AR5-acl-basic-2000] rule permit source 192.168.2.0 0.0.0.255
[AR5-acl-basic-2000]quit
[AR5]
[AR5]interface Serial 4/0/0
[AR5-Serial4/0/0] nat outbound 2000
[AR5-Serial4/0/0]quit


[AR6]acl number 2000
[AR6-acl-basic-2000] rule permit source 172.16.0.0 0.0.255.255
[AR6-acl-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[AR6-acl-basic-2000] rule permit source 192.168.2.0 0.0.0.255
[AR6-acl-basic-2000]quit
[AR6]interface Serial 4/0/0
[AR6-Serial4/0/0] nat outbound 2000
[AR6-Serial4/0/0]

[AR7]acl number 2000
[AR7-acl-basic-2000] rule permit source 172.16.0.0 0.0.255.255
[AR7-acl-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[AR7-acl-basic-2000] rule permit source 192.168.2.0 0.0.0.255
[AR7-acl-basic-2000]quit
[AR7]interface GigabitEthernet 0/0/0
[AR7-GigabitEthernet0/0/0] nat outbound 2000
[AR7-GigabitEthernet0/0/0]

ping通

AR1pingAR4环回

五.优化

路由汇总(减少骨干区域LSA)

AR3

在abr上 域间

bash 复制代码 
[AR3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0



[AR6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0


[AR7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0

域外 asbr

bash 复制代码 
[AR9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0

[AR12-ospf-1]asbr-summary 192.168.0.0 255.255.252.0

特殊区域

area1没有asbr，做成stub 区域

bash 复制代码 
[AR1-ospf-1-area-0.0.0.1]stub

[AR2-ospf-1-area-0.0.0.1]stub 

[AR3-ospf-1-area-0.0.0.1]stub no-summary  完全末梢区域


[AR7-ospf-1-area-0.0.0.3]nssa no-import-route 
[AR7-ospf-1-area-0.0.0.3]nssa no-summary 


[AR8-ospf-1-area-0.0.0.3]nssa 

[AR8-ospf-1-area-0.0.0.3]nssa 




[AR6-ospf-1-area-0.0.0.2]nssa no-import-route
[AR6-ospf-1-area-0.0.0.2]nssa no-summary 


[AR11-ospf-1-area-0.0.0.2]nssa 

[AR12-ospf-1-area-0.0.0.2]nssa

此时

加快收敛

bfd技术（所有设备都打，这里AR1举例）

bash 复制代码 
[AR1]bfd
[AR1-bfd]ospf 1
[AR1-ospf-1]bfd all-interfaces enable
相关推荐
kaisun642 小时前
Docker 构建网络问题排查
网络·docker·eureka
雪度娃娃2 小时前
存储器层次结构——磁盘硬盘存储
服务器·网络·数据库·计算机组成原理
YUANQIANG20243 小时前
通信领域进行蒙特卡洛仿真的思路和步骤
网络
eam0511233 小时前
OSPF综合实验
网络
QQ15401828563 小时前
USB转千兆以太网芯片方案
网络·pt153s·千兆以太网芯片·usb转以太网·千兆网口芯片
曦夜日长4 小时前
Linux系统篇，进程概念（一）：计算机体系、操作系统的认识、程序的加载过程
linux·运维·网络
似水এ᭄往昔4 小时前
【Linux网络编程】--Socket编程预备
linux·服务器·网络
笨蛋不要掉眼泪4 小时前
Java并发编程 ：深入剖析LinkedBlockingQueue
java·开发语言·网络·并发
杨浦老苏4 小时前
网络连接实时可视化利器TapMap
网络·docker·可视化·监控·群晖
热门推荐
01GitHub 镜像站点02【AI】2026 年具身智能模型和世界模型总结03【踩坑记录 | 第一篇】微软商店无法使用时，如何手动安装 OpenAI Codex？附`.msix`文件系统错误解决方法04DeepSeek V4 + Claude Code thinking mode 400 错误修复方案05Codex 接入 DeepSeek API 完整配置文档06裂开！ChatGPT 居然开始要手机号验证，附详细解决方法07几个好用的ip纯净度检测网站08CC-Switch & Claude 基于 Linux 服务器安装使用指南09CC-Switch 全平台下载、安装与使用全指南（Windows/macOS/Linux）10API Key 登录 Codex 也能用插件了，还支持会话删除和导出