ospf+PPPoE的技术实现.docx

ospf+PPPoE的技术实现时间：2009-3-12 7:54:28来源：中国软路由网吧应用技术网作者：转贴阅读261次 ospf+PPPoE的技术实现MIKROTIK官网的WIKI关于OSPF+PPPoE的配置有些问题，以下给出相对完整的说明、配置以及验证过程拓扑如下所述：总部的core有3条链路：1、wan通过222.222.222.222/24的地址与公网相连网关为222.222.222.2212、down_to_br通过192.168.33.2/24与分支机构的up_to_core相连3、co_office接总部办公网，地址为172.16.2.100/24分支机构也有3条链路：1、up_to_core通过192.168.33.1/24 与总部的 down_to_br相连2、br_office接分支机构办公网，地址为172.16.1.99/243、pppoe_svr未分配接口IP，下面用户只能通过PPPoE拨号访问技术实现要求：使用OSPF协议使全网互通，并且实现过程包含包括动态拨号的PPPoE用户两台设备的接口和IP配置结果如下： adminbranch ip ad prFlags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.33.1/24 192.168.33.0 192.168.33.255up_to_core1 172.16.1.99/24 172.16.1.0 172.16.1.255 br_office adminbranch admincore ip ad pr Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.33.2/24 192.168.33.0 192.168.33.255down_to_br1 172.16.2.100/24 172.16.2.0 172.16.2.255 co_office 2 222.222.222.222/24 222.222.222.0 222.222.222.255 wan admincore 分支机构OSPF配置： adminbranch ro os ex# sep/10/2008 22:54:18 by RouterOS 2.9.27# software id = PL4E-P00#/ routing ospf set router-id=1.1.1.1 distribute-default=never redistribute-connected=as-type-1 redistribute-static=as-type-1 redistribute-rip=no redistribute-bgp=no metric-default=1 metric-connected=20 metric-static=20 metric-rip=20 metric-bgp=20 / routing ospf area set backbone area-id=0.0.0.0 type=default translator-role=translate-candidate authentication=none prefix-list-import= prefix-list-export= disabled=no / routing ospf interface set FIXME interface=up_to_core cost=10 priority=1 authentication-key= network-type=broadcast retransmit-interval=5s transmit-delay=1s hello-interval=10s dead-interval=40s / routing ospf network add network=192.168.33.0/24 area=backbone disabled=no adminbranch 总部OSPF配置 admincore ro os ex # sep/10/2008 23:10:12 by RouterOS 2.9.27# software id = PL4E-P00#/ routing ospf set router-id=2.2.2.2 distribute-default=always-as-type-1 redistribute-connected=as-type-1 redistribute-static=as-type-1 redistribute-rip=no redistribute-bgp=no metric-default=1 metric-connected=20 metric-static=20 metric-rip=20 metric-bgp=20 / routing ospf area set backbone area-id=0.0.0.0 type=default translator-role=translate-candidate authentication=none prefix-list-import= prefix-list-export= disabled=no / routing ospf interface set FIXME interface=down_to_br cost=10 priority=1 authentication-key= network-type=broadcast retransmit-interval=5s transmit-delay=1s hello-interval=10s dead-interval=40s / routing ospf network add network=192.168.33.0/24 area=backbone disabled=no admincore 通过以上配置即可达到技术实现的要求（pppoe配置的部分略，请参考本论坛其他精华贴）下面，测试并验证配置的结果1、先检查静态路由 adminbranch ip ro ex# sep/10/2008 22:45:00 by RouterOS 2.9.27# software id = PL4E-P00#/ ip route adminbranch admincore ip ro ex # sep/11/2008 01:03:02 by RouterOS 2.9.27# software id = PL4E-P00#/ ip route add dst-address=0.0.0.0/0 gateway=222.222.222.221 scope=255 target-scope=10 comment= disabled=no admincore 通过核对静态路由配置，可以看出除了总部的缺省网关外，两台路由器上没有其它的静态路由配置2、检查无拨号的动态路由 adminbranch ip ro prFlags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf # DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE 0 ADC 172.16.1.0/24 172.16.1.99 br_office 1 ADo 172.16.2.0/24 r 192.168.33.2 up_to_core2 ADC 192.168.33.0/24 192.168.33.1 up_to_core3Do 192.168.33.0/24 4 ADo 222.222.222.0/24 r 192.168.33.2 up_to_core5 ADo 0.0.0.0/0 r 192.168.33.2 up_to_coreadminbranch 通过显示分支机构的路由表可以看到，它从总部通过OSPF协议学习到了1、3、4、5这4条路由信息，并且由于直连路由级别高，导致3这条路由处于非激活状态，另外需要特别注意的是，它还学到了0.0.0.0/0这条重要的默认路由，并指明了是从up_to_core这个口出去的！ admincore ip ro pr Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf # DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE 0 ADo 172.16.1.0/24 r 192.168.33.1 down_to_br1 ADC 172.16.2.0/24 172.16.2.100 co_office 2 ADC 192.168.33.0/24 192.168.33.2 down_to_br3Do 192.168.33.0/24 4 ADC 222.222.222.0/24 222.222.222.222 wan 5 A S 0.0.0.0/0 r 222.222.222.221 wan admincore 通过显示总部的路由表可以看到，通过OSPF协议，它从分支机构学习到了0、3这两条路由信息3、拨号以后，检查动态拨号路由在动态路由中的表现 adminbranch ip ro prFlags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf # DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE0 ADC 172.16.1.0/24 172.16.1.99 br_office1 ADo 172.16.2.0/24 r 192.168.33.2 up_to_core 2 ADC 172.16.51.255/32 1.1.1.1 3 ADC 192.168.33.0/24 192.168.33.1 up_to_core 4Do 192.168.33.0/24 5 ADo 222.222.222.0/24 r 192.168.33.2 up_to_core 6 ADo 0.0.0.0/0 r 192.168.33.2 up_to_core adminbranch 通过branch的路由表项2可以看到有一个账号为123的PPPoE的用户拨号成功后获得了172.16.51.255/32这个地址 admincore ip ro pr Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf # DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE 0 ADo 172.16.1.0/24 r 192.168.33.1 down_to_br1 ADC 172.16.2.0/24 172.16.2.100 co_office 2 ADo 172.16.51.255/32 r 192.168.33.1 down_to_br3 ADC 192.168.33.0/24 192.168.33.2 down_to_br4Do 192.168.33.0/24 5 ADC 222.222.222.0/24 222.222.222.222 wan 6 A S 0.0.0.0/0 r 222.222.222.221 wan admincore 通过core的路由表项2可以看到它学到了PPPoE用户的路由信息。现在将拨号断开检查路由信息更新的情况 admincore ip ro pr Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf # DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE 0 ADo 172.16.1.0/24 r 192.16