1、HCDA 路由实验OSPF 及路由引入实验 一、 实验编址及拓扑二、 实验要求 0、实验使用 eNSP 1.0.216 完成，v2.0 模拟器要相应更改接口编号等 1、如图所示搭建拓扑（可下载附件），并配置 IP 地址（交换机空配） 2、按规划配置 OSPF 及宣告接口到相应区域里 AR1 router-id 1.1.1.1 AR2 router-id 2.2.2.2 AR3 router-id 3.3.3.3 AR4 router-id 4.4.4.4 3、控制 DR 选举，让 AR3 成为 DR，AR2 成为 BDR，AR1 不参加选举；对区域 1 的172.16 的路由进行精确汇总 4、
2、修改 COST 让区域 3 优选 s0/0/0 链路，备用 s0/0/1 链路 5、区域 0 实现基于区域的 MD5 认证，密码为 hcda001,区域 3 实现基于接口的明文认证密码为 huawei 6、AR4 和 AR5 配置 RIP 互通（模拟的外网不宣告），在 AR5 手工写静态缺省路由并引入 RIP。 7、AR4 上进行 RIP 和 OSPF 的双向路由引入，并为 OSPF 通告默认路由，实现全网全通。三、实验配置参考： AR1 的配置 sysname r1#interface Ethernet0/0/0ip address 123.1.1.1 255.255.255.0ospf d
3、r-priority 0 /优先级是 0 不能参与 DR 选举，默认是 1#interface LoopBack0ip address 192.168.1.1 255.255.255.0ospf network-type broadcast /回环接口修改接口类型，为了让其它路由器计算出/24 位掩码的路由，不改是/32 掩码的路由#interface LoopBack1ip address 172.16.0.1 255.255.255.0#interface LoopBack2ip address 172.16.1.1 255.255.255.0#interface LoopBack3ip
4、address 172.16.2.1 255.255.255.0#interface LoopBack4ip address 172.16.3.1 255.255.255.0#ospf 1 router-id 1.1.1.1 /指定 router-id 并进入 OSPF 进程 1area 0.0.0.0authentication-mode md5 1 cipher hcda001 /基于区域进行 MD5 认证network 123.1.1.0 0.0.0.255area 0.0.0.1abr-summary 172.16.0.0 255.255.252.0 /在 ABR 上对路由进行手工汇总
5、network 192.168.1.0 0.0.0.255network 172.16.0.0 0.0.3.255#return AR2 的配置 sysname r2#interface Ethernet0/0/0ip address 123.1.1.2 255.255.255.0ospf dr-priority 5 /修改 DR 选举的优先级，这里是次优的，故 R2 是 BDR#interface LoopBack0ip address 192.168.2.1 255.255.255.0ospf network-type broadcast#ospf 1 router-id 2.2.2.2a
6、rea 0.0.0.0authentication-mode md5 1 cipher hcda001network 123.1.1.0 0.0.0.255area 0.0.0.2network 192.168.2.0 0.0.0.255# AR3 的配置 sysname r3#interface Ethernet0/0/0ip address 123.1.1.3 255.255.255.0ospf dr-priority 10 /修改 DR 选举的优先级，这里是最优的，故 R3 是 DR#interface Serial0/0/0link-protocol pppip address 34.
7、1.1.1 255.255.255.252ospf authentication-mode simple plain huawei /配置基于接口的认证ospf cost 800 /在接口下手工修改开销，主用路径#interface Serial0/0/1link-protocol pppip address 34.1.1.5 255.255.255.252ospf authentication-mode simple plain huaweiospf cost 1000 /在接口下手工修改开销，备用路径#interface LoopBack0ip address 192.168.3.1 25
8、5.255.255.0ospf network-type broadcast#ospf 1 router-id 3.3.3.3area 0.0.0.0authentication-mode md5 1 cipher hcda001network 123.1.1.0 0.0.0.255area 0.0.0.3network 192.168.3.0 0.0.0.255network 34.1.1.0 0.0.0.7#return AR4 的配置 sysname r4#interface Ethernet0/0/0ip address 45.1.1.1 255.255.255.0#interface
9、 Serial0/0/0link-protocol pppip address 34.1.1.2 255.255.255.252ospf authentication-mode simple plain huaweiospf cost 800#interface Serial0/0/1link-protocol pppip address 34.1.1.6 255.255.255.252ospf authentication-mode simple plain huaweiospf cost 1000#interface LoopBack0ip address 192.168.4.1 255.
10、255.255.0#ospf 1 router-id 4.4.4.4default-route-advertise /在 ASBR 上为其它 OSPF 路由器通知默认路由，不改 R1 上没有0.0.0.0/0 的 OSE 默认路由import-route rip 1 cost 2000 /引入 RIP 路由域的路由进入 OSPF 路由域（19.168.5.0、24的路由）area 0.0.0.3network 34.1.1.0 0.0.0.7#rip 1 /RIP 的配置undo summaryversion 2network 192.168.4.0network 45.0.0.0import
11、-route ospf 1 cost 5 /引入 OSPF 的路由进入 RIP 路由域#return AR5 的配置 sysname r5#interface Ethernet0/0/0ip address 45.1.1.2 255.255.255.0#interface LoopBack0ip address 192.168.5.1 255.255.255.0#interface LoopBack100ip address 100.100.100.100 255.255.255.0#interface LoopBack200ip address 200.200.200.200 255.255
12、.255.0#rip 1undo summarydefault-route originate cost 1 /RIP 通告默认路由version 2network 45.0.0.0network 192.168.5.0#ip route-static 0.0.0.0 0.0.0.0 LoopBack100 /模拟的去公网的路由# 四、检查配置 1、在 AR1 上可以验证 DR 选举dis ospf peer OSPF Process 1 with Router ID 1.1.1.1Neighbors Area 0.0.0.0 interface 123.1.1.1(Ethernet0/0/0
13、)s neighborsRouter ID: 2.2.2.2 Address: 123.1.1.2 State: Full Mode:Nbr is Master Priority: 5DR: 123.1.1.3 BDR: 123.1.1.2 MTU: 0 Dead timer due in 38 sec Retrans timer interval: 3 Neighbor is up for 00:43:16 Authentication Sequence: 2378 Router ID: 3.3.3.3 Address: 123.1.1.3 State: Full Mode:Nbr is M
14、aster Priority: 10DR: 123.1.1.3 BDR: 123.1.1.2 MTU: 0 Dead timer due in 34 sec Retrans timer interval: 4 Neighbor is up for 00:43:20 Authentication Sequence: 2387 2、在路由器上验证区域认证dis ospf brief OSPF Process 1 with Router ID 1.1.1.1OSPF Protocol Information RouterID: 1.1.1.1 Border Router: AREA AS Multi
15、-VPN-Instance is not enabledGlobal DS-TE Mode: Non-Standard IETF ModeSpf-schedule-interval: max 10000ms, start 500ms, hold 1000msDefault ASE parameters: Metric: 1 Tag: 1 Type: 2Route Preference: 10 ASE Route Preference: 150 SPF Computation Count: 9 RFC 1583 CompatibleRetransmission limitation is dis
16、abledArea Count: 2 Nssa Area Count: 0 ExChange/Loading Neighbors: 0Area: 0.0.0.0 (MPLS TE not enabled)Authtype: MD5 Area flag: NormalSPF scheduled Count: 9 ExChange/Loading Neighbors: 0Router ID conflict state: Normal 3、在 AR1 上检查 OSPF 路由表 可以看到 OSPF 普通路由，外部路由（包括默认路由）dis ip routing-table protocol ospf
17、 Route Flags: R - relay, D - download to fib-Public routing table : OSPFDestinations : 8 Routes : 8 OSPF routing table status : Destinations : 8 Routes : 8 Destination/Mask Proto Pre Cost Flags NextHop Interface 0.0.0.0/0 O_ASE 150 1 D 123.1.1.3 Ethernet0/0/034.1.1.0/30 OSPF 10 801 D 123.1.1.3 Ether
18、net0/0/034.1.1.4/30 OSPF 10 1001 D 123.1.1.3 Ethernet0/0/045.1.1.0/24 O_ASE 150 2000 D 123.1.1.3 Ethernet0/0/0192.168.2.0/24 OSPF 10 1 D 123.1.1.2 Ethernet0/0/0192.168.3.0/24 OSPF 10 1 D 123.1.1.3 Ethernet0/0/0192.168.4.0/24 O_ASE 150 2000 D 123.1.1.3 Ethernet0/0/0192.168.5.0/24 O_ASE 150 2000 D 123
19、.1.1.3 Ethernet0/0/0 OSPF routing table status : Destinations : 0 Routes : 0 4、在 AR4(ASBR)上检查全局路由表 可以看到 OSPF 路由，RIP 路由（包括默认路由）dis ip routing-table Route Flags: R - relay, D - download to fib-Routing Tables: PublicDestinations : 19 Routes : 19 Destination/Mask Proto Pre Cost Flags NextHop Interface 0
20、.0.0.0/0 RIP 100 2 D 45.1.1.2 Ethernet0/0/034.1.1.0/30 Direct 0 0 D 34.1.1.2 Serial0/0/034.1.1.1/32 Direct 0 0 D 34.1.1.1 Serial0/0/034.1.1.2/32 Direct 0 0 D 127.0.0.1 Serial0/0/034.1.1.4/30 Direct 0 0 D 34.1.1.6 Serial0/0/134.1.1.5/32 Direct 0 0 D 34.1.1.5 Serial0/0/134.1.1.6/32 Direct 0 0 D 127.0.
21、0.1 Serial0/0/145.1.1.0/24 Direct 0 0 D 45.1.1.1 Ethernet0/0/045.1.1.1/32 Direct 0 0 D 127.0.0.1 Ethernet0/0/0123.1.1.0/24 OSPF 10 801 D 34.1.1.1 Serial0/0/0127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0172.16.0.0/22 OSPF 10 801 D 34.1.1.1 Serial0/0/019
22、2.168.1.0/24 OSPF 10 801 D 34.1.1.1 Serial0/0/0192.168.2.0/24 OSPF 10 801 D 34.1.1.1 Serial0/0/0192.168.3.0/24 OSPF 10 800 D 34.1.1.1 Serial0/0/0192.168.4.0/24 Direct 0 0 D 192.168.4.1 LoopBack0192.168.4.1/32 Direct 0 0 D 127.0.0.1 LoopBack0192.168.5.0/24 RIP 100 1 D 45.1.1.2 Ethernet0/0/0 5、验证全网联通性
23、 ping 192.168.3.1PING 192.168.3.1: 56 data bytes, press CTRL_C to breakReply from 192.168.3.1: bytes=56 Sequence=1 ttl=255 time=40 msReply from 192.168.3.1: bytes=56 Sequence=2 ttl=255 time=30 msReply from 192.168.3.1: bytes=56 Sequence=3 ttl=255 time=50 msReply from 192.168.3.1: bytes=56 Sequence=4
24、 ttl=255 time=50 msReply from 192.168.3.1: bytes=56 Sequence=5 ttl=255 time=80 ms - 192.168.3.1 ping statistics -5 packet(s) transmitted5 packet(s) received0.00% packet lossround-trip min/avg/max = 30/50/80 ms ping 100.100.100.100PING 100.100.100.100: 56 data bytes, press CTRL_C to breakReply from 1
25、00.100.100.100: bytes=56 Sequence=1 ttl=253 time=100 msReply from 100.100.100.100: bytes=56 Sequence=2 ttl=253 time=110 msReply from 100.100.100.100: bytes=56 Sequence=3 ttl=253 time=80 msReply from 100.100.100.100: bytes=56 Sequence=4 ttl=253 time=80 msReply from 100.100.100.100: bytes=56 Sequence=
26、5 ttl=253 time=50 ms - 100.100.100.100 ping statistics -5 packet(s) transmitted5 packet(s) received0.00% packet lossround-trip min/avg/max = 50/84/110 ms r4ping 172.16.1.1PING 172.16.1.1: 56 data bytes, press CTRL_C to breakReply from 172.16.1.1: bytes=56 Sequence=1 ttl=254 time=50 msReply from 172.
27、16.1.1: bytes=56 Sequence=2 ttl=254 time=70 msReply from 172.16.1.1: bytes=56 Sequence=3 ttl=254 time=90 msReply from 172.16.1.1: bytes=56 Sequence=4 ttl=254 time=80 msReply from 172.16.1.1: bytes=56 Sequence=5 ttl=254 time=90 ms - 172.16.1.1 ping statistics -5 packet(s) transmitted5 packet(s) recei
28、ved0.00% packet lossround-trip min/avg/max = 50/76/90 ms r4ping 200.200.200.200PING 200.200.200.200: 56 data bytes, press CTRL_C to breakReply from 200.200.200.200: bytes=56 Sequence=1 ttl=255 time=40 msReply from 200.200.200.200: bytes=56 Sequence=2 ttl=255 time=50 msReply from 200.200.200.200: byt
29、es=56 Sequence=3 ttl=255 time=10 msReply from 200.200.200.200: bytes=56 Sequence=4 ttl=255 time=50 msReply from 200.200.200.200: bytes=56 Sequence=5 ttl=255 time=50 ms - 200.200.200.200 ping statistics -5 packet(s) transmitted5 packet(s) received0.00% packet lossround-trip min/avg/max = 10/40/50 ms
