一、实验需求
1、R4为ISP，其上只能配置IP地址
R4与其他所有直连设备间均使用公有IP
2、R3-R5/6/7为MGRE环境，R3为中心站点
3、整个ospf环境IP基于172.16.0.0/16划分
4、所有设备均可访问R4的环回
5、减少LSA的更新量，加快收敛，保障更新安全
6、全网可达
二、实验拓扑
三、实验分析
1、根据要求一，由于R4为ISP且只能配置IP和环回，所以优先配置R4所在区域网段
2、根据要求二要求三进行IP地址规划，共有五个区域，所以接三位作为网络位
area 0：172.16.0.0/19
area 1:172.16.32.0/24
area 2:172.16.64.0/24
area 3:172.16.96.0/24
area 4:172.16.128.0/24
3、由于需要节省LSA更新量，所以不用将路由引入area 4，直接在R9上发放缺省路由
4、加快收敛，修改hello，dead时间，将ma修改为p2p或者p2mp
5、在R3，R6，R7，R9，R12上配置空接口用于防环
四、配置IP地址
//R4
[R4]int l 0
[R4-LoopBack0]ip address 4.4.4.4 24
[R4-LoopBack0]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip ad 47.0.0.4 24
[R4-GigabitEthernet0/0/0]int s 4/0/0
[R4-Serial4/0/0]ip ad 45.0.0.4 24
[R4-Serial4/0/0]int s 3/0/0
[R4-Serial3/0/0]ip ad 46.0.0.4 24
//R1
[R1]int l 0
[R1-LoopBack0]ip ad 172.16.33.1 24
[R1-LoopBack0]ospf network-type broadcast
[R1-LoopBack0]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip ad 172.16.32.1 29
//R2
[R2]int l 0
[R2-LoopBack0]ip ad 172.16.34.1 24
[R2-LoopBack0]ospf network-type broadcast
[R2-LoopBack0]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip ad 172.16.32.2 29
//R3
[R3]int l 0
[R3-LoopBack0]ip ad 172.16.35.1 24
[R3-LoopBack0]ospf network-type broadcast
[R3-LoopBack0]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip ad 172.16.32.3 29
[R3-GigabitEthernet0/0/0]int s 4/0/0
[R3-Serial4/0/0]ip ad 34.0.0.3 24
[r3]ip rou 172.16.32.0 19 NULL 0
//R5
[R5]int l 0
[R5-LoopBack0]ip ad 172.16.3.1 24
[R5-LoopBack0]ospf network-type broadcast
[R5-LoopBack0]int s 4/0/0
[R5-Serial4/0/0]ip ad 45.0.0.5 24
//R6
[R6]int l 0
[R6-LoopBack0]ip ad 172.16.1.1 24
[R6-LoopBack0]ospf network-type broadcast
[R6-LoopBack0]int s 4/0/0
[R6-Serial4/0/0]ip ad 46.0.0.6 24
[R6-Serial4/0/0]int g 0/0/1
[R6-GigabitEthernet0/0/1]ip ad 172.16.64.1 30
[r6]ip rou 172.16.64.0 19 NULL 0
//R7
[R7]int l 0
[R7-LoopBack0]ip ad 172.16.2.1 24
[R7-LoopBack0]ospf network-type b
[R7-LoopBack0]ospf network-type broadcast
[R7-LoopBack0]int g 0/0/0
[R7-GigabitEthernet0/0/0]ip ad 47.0.0.7 24
[R7-GigabitEthernet0/0/0]int g 0/0/1
[R7-GigabitEthernet0/0/1]ip ad 172.16.96.1 30
[r7]ip rou 172.16.96.0 19 NULL 0
//R8
[R8]int l 0
[R8-LoopBack0]ip ad 172.16.97.1 24
[R8-LoopBack0]ospf network-type broadcast
[R8-LoopBack0]int g 0/0/0
[R8-GigabitEthernet0/0/0]ip ad 172.16.96.2 30
[R8-GigabitEthernet0/0/0]int g 0/0/1
[R8-GigabitEthernet0/0/1]ip ad 172.16.96.5 30
//R9
[R9]int l 0
[R9-LoopBack0]ip ad 172.16.129.1 24
[R9-LoopBack0]ospf network-type broadcast
[R9-LoopBack0]int g 0/0/0
[R9-GigabitEthernet0/0/0]ip ad 172.16.96.6 30
[R9-GigabitEthernet0/0/0]int g 0/0/1
[R9-GigabitEthernet0/0/1]ip ad 172.16.128.1 30
[r9]ip rou 172.16.128.0 19 NULL 0
//R10
[R10]int l 0
[R10-LoopBack0]ip ad 172.16.130.1 24
[R10-LoopBack0]ospf network-type broadcast
[R10-LoopBack0]int g 0/0/0
[R10-GigabitEthernet0/0/0]ip ad 172.16.128.2 30
//R11
[Huawei]int l 0
[Huawei-LoopBack0]ip ad 172.16.65.1 24
[Huawei-LoopBack0]ospf network-type broadcast
[Huawei-LoopBack0]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 172.16.64.2 30
[Huawei-GigabitEthernet0/0/0]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip ad 172.16.64.5 30
//R12
[R12]int g 0/0/0
[R12-GigabitEthernet0/0/0]ip ad 172.16.64.6 30
[R12-GigabitEthernet0/0/0]int l 0
[R12-LoopBack0]ip ad 192.168.1.1 24
[R12-LoopBack0]int l 1
[R12-LoopBack1]ip ad 192.168.2.1 24
[r12]ip rou 192.168.0.0 22 NULL 0五、搭建MGRE
//R3
[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ip ad 172.16.0.1 29
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp
[R3-Tunnel0/0/0]s 34.0.0.3
[R3]ip route-static 0.0.0.0 0 s4/0/0
[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ospf network-type broadcast
[R3-Tunnel0/0/0]nhrp entry multicast dynamic
//R5
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ip ad 172.16.0.2 29
[R5-Tunnel0/0/0]tunnel-protocol gre p2mp
[R5-Tunnel0/0/0]s s4/0/0
[R5-Tunnel0/0/0]nhrp entry 172.16.0.1 34.0.0.3 register
[R5]ip route-static 0.0.0.0 0 s4/0/0
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ospf network-type broadcast
[R5-Tunnel0/0/0]ospf dr-priority 0
//R6
[R6]int Tunnel 0/0/0
[R6-Tunnel0/0/0]ip ad 172.16.0.3 29
[R6-Tunnel0/0/0]tunnel-protocol gre p2mp
[R6-Tunnel0/0/0]s s4/0/0
[R6-Tunnel0/0/0]nhrp entry 172.16.0.1 34.0.0.3 register
[R6]ip route-static 0.0.0.0 0 s4/0/0
[R6]int Tunnel 0/0/0
[R6-Tunnel0/0/0]ospf network-type broadcast
[R6-Tunnel0/0/0]ospf dr-priority 0
//R7
[R7]int Tunnel 0/0/0
[R7-Tunnel0/0/0]ip ad 172.16.0.4 29
[R7-Tunnel0/0/0]tunnel-protocol gre p2mp
[R7-Tunnel0/0/0]s 47.0.0.7
[R7-Tunnel0/0/0]nhrp entry 172.16.0.1 34.0.0.3 register
[R7]ip route-static 0.0.0.0 0 47.0.0.4
[R7]int Tunnel 0/0/0
[R7-Tunnel0/0/0]ospf network-type broadcast
[R7-Tunnel0/0/0]ospf dr-priority 0六、配置OSPF
//R1
[R1]ospf 1 r 1.1.1.1
[R1-ospf-1]area 1
[R1-ospf-1-area-0.0.0.1]net 172.16.33.1 0.0.0.0
[R1-ospf-1-area-0.0.0.1]net 172.16.32.1 0.0.0.0
//R2
[R2]ospf 1 r 2.2.2.2
[R2-ospf-1]area 1
[R2-ospf-1-area-0.0.0.1]net 172.16.34.1 0.0.0.0
[R2-ospf-1-area-0.0.0.1]net 172.16.32.2 0.0.0.0
//R3
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0
[R3-ospf-1]area 1
[R3-ospf-1-area-0.0.0.1]net 172.16.35.1 0.0.0.0
[R3-ospf-1-area-0.0.0.1]net 172.16.32.3 0.0.0.0
//R5
[R5]ospf 1 r 5.5.5.5
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]net 172.16.0.2 0.0.0.0
[R5-ospf-1-area-0.0.0.0]net 172.16.3.1 0.0.0.0
//R6
[R6]ospf 1 r 6.6.6.6
[R6-ospf-1]area 0
[R6-ospf-1-area-0.0.0.0]net 172.16.0.3 0.0.0.0
[R6-ospf-1-area-0.0.0.0]net 172.16.1.1 0.0.0.0
[R6-ospf-1]area 2
[R6-ospf-1-area-0.0.0.2]net 172.16.64.1 0.0.0.0
//R7
[R7]ospf 1 r 7.7.7.7
[R7-ospf-1]area 0
[R7-ospf-1-area-0.0.0.0]net 172.16.0.4 0.0.0.0
[R7-ospf-1-area-0.0.0.0]net 172.16.2.1 0.0.0.0
[R7-ospf-1]area 3
[R7-ospf-1-area-0.0.0.3]net 172.16.96.1 0.0.0.0
//R8
[R8-ospf-1]area 3
[R8-ospf-1-area-0.0.0.3]net 172.16.97.1 0.0.0.0
[R8-ospf-1-area-0.0.0.3]net 172.16.96.2 0.0.0.0
[R8-ospf-1-area-0.0.0.3]net 172.16.96.5 0.0.0.0
//R9
[R9]ospf 1 r 9.9.9.9
[R9-ospf-1]area 3
[R9-ospf-1-area-0.0.0.3]net 172.16.96.6 0.0.0.0
[R9]ospf 2
[R9-ospf-2]area 4
[R9-ospf-2-area-0.0.0.4]net 172.16.129.1 0.0.0.0
[R9-ospf-2-area-0.0.0.4]net 172.16.129.1 0.0.0.0
//R10
[R10]ospf 1 r 10.10.10.10
[R10-ospf-1]area 4
[R10-ospf-1-area-0.0.0.4]net 172.16.130.1 0.0.0.0
[R10-ospf-1-area-0.0.0.4]net 172.16.128.2 0.0.0.0
//R11
[Huawei]ospf 1 r 11.11.11.11
[Huawei-ospf-1]area 2
[Huawei-ospf-1-area-0.0.0.2]net 172.16.65.1 0.0.0.0
[Huawei-ospf-1-area-0.0.0.2]net 172.16.64.2 0.0.0.0
[Huawei-ospf-1-area-0.0.0.2]net 172.16.64.5 0.0.0.0
//R12
[R12]ospf 1 r 12.12.12.12
[R12-ospf-1]area 2
[R12-ospf-1-area-0.0.0.2]net 172.16.64.6 0.0.0.0七、创建RIP
//R12
[R12]rip 1
[R12-rip-1]ver 2
[R12-rip-1]net 192.168.1.0
[R12-rip-1]net 192.168.2.0八、重发布
//R9
[R9]ospf 1
[R9-ospf-1]import-route ospf 2
//R12
[R12]ospf 1
[R12-ospf-1]im rip 1九、路由汇总
//r3
[r3]ospf 1
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0
//r6
[r6]ospf 1
[r6-ospf-1]area 2
[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0
//r7
[r7]ospf 1
[r7-ospf-1]area 3
[r7-ospf-1-area-0.0.0.3]abr 172.16.96.0 255.255.224.0
//r12
[r12]ospf 1
[r12-ospf-1]asbr-summary 192.168.0.0 255.255.252.0
//r9
[r9]ospf 1
[r9-ospf-1]asbr 172.16.128.0 255.255.224.0
[r9-ospf-1]ospf 2
[r9-ospf-2]default-route-advertise十、特殊区域
//r1
[r1]ospf 1
[r1-ospf-1]area 1
[r1-ospf-1-area-0.0.0.1]stub
//r2
[r2]ospf 1
[r2-ospf-1]area 1
[r2-ospf-1-area-0.0.0.1]stub
//r3
[r3]ospf 1
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]stub no-summary
//r6
[r6]ospf 1
[r6-ospf-1]area 2
[r6-ospf-1-area-0.0.0.2]nssa no-summary
//r7
[r7]ospf 1
[r7-ospf-1]area 3
[r7-ospf-1-area-0.0.0.3]nssa no-summary
//r8
[r8]ospf 1
[r8-ospf-1]area 3
[r8-ospf-1-area-0.0.0.3]nssa
//r9
[r9]ospf 1
[r9-ospf-1]area 3
[r9-ospf-1-area-0.0.0.3]nssa
//r11
[r11]ospf 1
[r11-ospf-1]area 2
[r11-ospf-1-area-0.0.0.2]nssa
//r12
[r12]ospf 1
[r12-ospf-1]area 2
[r12-ospf-1-area-0.0.0.2]nssa十一、NAT地址转换
//r3
[r3]acl 2000
[r3-acl-basic-2000]rule permit s 172.16.0.0 0.0.255.255
[r3-acl-basic-2000]rule permit s 192.168.0.0 0.0.3.255
[r3]int s4/0/0
[r3-Serial4/0/0]nat outbound 2000
//r6
[r6]acl number 2000
[r6-acl-basic-2000]rule 5 permit source 172.16.0.0 0.0.255.255
[r6-acl-basic-2000]rule 10 permit source 192.168.0.0 0.0.3.255
[r6-acl-basic-2000]int s4/0/0
[r6-Serial4/0/0]nat outbound 2000
//r7
[r7]acl number 2000
[r7-acl-basic-2000]rule 5 permit source 172.16.0.0 0.0.255.255
[r7-acl-basic-2000]rule 10 permit source 192.168.0.0 0.0.3.255
[r7-acl-basic-2000]int g0/0/0
[r7-GigabitEthernet0/0/0]nat outbound 2000十二、结果检验
