OSPF路由重分布及路由汇总分析实验《协议分析》实验报告模板

1、网络协议分析实验报告2011至2012学年第1学期姓名系另u计算机系实验地点E1A406学号年级、班实验时间2011 年 11 月 30 H实验项目实验八一 OSPF路由重分布及路由汇总分析实验一、实验目的实验目的：掌握OSPF的OSPF与RIP间的路由重分布的配置方法及RIP路由信息在OSPF区域中的LSA的类型与泛洪特点；掌握区域间路由汇总及外部路由汇总后LSA分发的特点。二、实验环境dynamips, windows 平台，PC 机三、实验内容及步骤：配置OSPF和RIP,使其能全网通信，并跟踪路由重分布的重新分发过程与特点。：3055匚QVIPCH*E3/1LOQ5 D也驻SOrti:

2、 10.0:10 0 561 皿SO/O it 045 WE3/0 10.1 1 1/24/PC1 +区域弘E (尹C i60O- / ) EVO 1C 61A4 10.1仁却曲GUJ : D.l Up | 衬02W04-超就SOAt 2.2H&胡 EMM 城0;t0.2.2S.b30SO/1 172.16 24 IB 如M22： E/24 丿i% JiVVij/l lb 2.2.1A/F?O 177 ti? 4 1/24在如上图所示的拓朴中，先为各路由器配置接口IP,然后在各路由器上配置RIPv2路由协议,使得PCK PC2相互之间可以连通。并在R3与R4之间的串口配置RIPv2认证。同时验

3、证认证 配置起了 作用。在对R1进行配置之前，在R3的S0/0端口和R4的S0/0端口上抓包：Dyn age n=capture R3 S0/0 ripl.pcap hdlcDyn age n=capture R4 S0/0 rip2.pcap hdlc 1、对于各串行链路，女口 R3,配置接口如下:R3#conf tR3(co nfig)#i nt s0/0R3(config-if)#ip addR3(co nfig-if)#clock rate 252000R3(co nfig-if)# no shR3(co nfig-if)#e nd对于各快速以太网接口，如 R1,配置接口 IP地址如下

4、:R1#conftR1(co nfig)#i nt f1/0R1 (c on fig-if)# no switchportR1(config-if)#ip addR1 (co nfig-if)# no sh R1 (co nfig-if)#e nd2、配置RIP路由协议:在R1上配置RIP路由协议如下:R1#conftR1(con fig)#router ripR1(co nfig)#version 2R1(c on fig)# networkR1(c on fig)# networkR1(co nfig)#e nd3、在对4台路由器都配置了RIPV2协议之后，查看R1的路由表：R1#show

5、 ip route并粘贴各路由器的路由表：R1R1#show ip routeCodes: C conn ected, S - static, R - RIP, M mobile, B BGPD EIGRP, EX - EIGRP external, O OSPF, IA OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 OSPF external type 1, E2 - OSPF external type 2 i IS-IS, su IS-IS summary, L1 - I

6、S-IS level-1, L2 - IS-IS level-2 ia - IS-IS in ter area, * can didate default, U per-user static route o ODR, P - periodic downloaded static routeGateway of last resort is not setR 120/1 via , 00:00:22, FastEthernet1/1is variably sub netted, 4 sub nets, 2 masksR120/1 via , 00:00:08, FastEthernet1/1C

7、is directly conn ected, FastEther net1/1R120/2 via , 00:00:22, FastEthernet1/1R120/1 via , 00:00:08, FastEthernet1/1is sub netted, 1 sub netsCis directly conn ected, FastEther net1/0查看R4的路由表，结果为：R4#show ip routeCodes: C conn ected, S static, R - RIP, M mobile, B BGPD EIGRP, EX EIGRP external, O OSPF

8、, IA OSPF inter area N1 OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 OSPF external type 1, E2 - OSPF external type 2i IS-IS, su IS-IS summary, L1 - IS-IS level-1, L2 IS-IS level-2 ia - IS-IS in ter area, * can didate default, U per-user static route o ODR, P periodic downloaded stati

9、c routeGateway of last resort is not setis variably sub netted, 2 sub nets, 2 masksR120/1 via , 00:00:07, Serial0/0Cis directly corm ected, Serial0/0is variably sub netted, 4 sub nets, 2 masks120/1 via , 00:00:03, Serial0/1 120/1 via , 00:00:03, Serial0/1 120/1 via , 00:00:07, Serial0/0 is directly

10、corm ected, Serial0/1is sub netted, 1 sub netsis directly conn ected, FastEther net1/04、在R2的串口上配置RIPv2认证：1）配置RIPv2认证步骤如下：（1）定义一个带名字的钥匙链；（2）定义在钥匙上的钥匙；（3）在接口上启动认证并指定使用的钥匙链；（4）指定这个接口使用明文认证还是密文认证；（5 ）可选地配置钥匙的管理。按上述步骤，在R3。R4的串口上配置RIPv2认证如下：R3#conf tR3(c on fig)# key cha in mykeyR3(config-keychain)# key 1

11、R3(config-keychain-key)# key-string 123456 R3(c on fig-keychai n-key)#e ndR3#conf tR3(co nfig)#i nt s0/0R3(config-if)#ip rip authentication key-chain mykeyR3 (config-if)#ip rip authentication mode text3)分别在R3、R4上开启rip调试信息，找出二者相互通过串口发送的RIPv2路由更新:R3#debug ip ripR3通过串口送给R4的RIPv2路由更新：R3#*Mar 1 00:33:33.

12、335: RIP: received packet with text authe ntication 123456*Mar 1 00:33:33.339: RIP: received v2 update from on Serial0/0*Mar 1 00:33:33.343:via in 1 hops*Mar 1 00:33:33.343:via in 1 hops*Mar 1 00:33:34.203: RIP: sending v2 update to via FastEthernet1/1 (R4通过串口送给R3的RIPv2路由更新：*Mar 1 00:34:22.147: RIP:

13、 received packet with text authe ntication 123456*Mar 1 00:34:22.151: RIP: received v2 update from on Serial0/0*Mar 1 00:34:22.155:via in 1 hops*Mar 1 00:34:22.155:via in 1 hops2)再从PC1 ping PC2,结果为：VPCS 1 pi ngicmp_seq=1 timeouticmp_seq=2 timeouticmp_seq=3 timeouticmp_seq=4 timeout icmp_seq=5 timeou

14、t查看R1的路由表，到子网没有R 120/1 via , 00:00:06, FastEthernet1/1is variably sub netted, 4 sub nets, 2 masksR120/1 via , 00:00:06, FastEthernet1/1Cis directly conn ected, FastEther net1/1R120/2 via , 00:00:06, FastEthernet1/1R120/1 via , 00:00:06, FastEthernetl/lis sub netted, 1 sub netsCis directly connected,

15、 FastEthernet1/03 )出现无相应子网路由的原因是边界路由器的自动汇总，为开启子网更新信息的传递，需关闭自动更新功能：R1上的关闭自动更新功能配置如下：R1#conftR1(con fig)#router ripR1 (con fig-router)#vers ion 2R1 (con fig-router)# no auto-summaryR1 (con fig-router)#e ndR4上也必须关闭自动汇总功能，配置如此类似，不再重复。4)在关闭了自动汇总后，再分别在 R1与R4上查看路由表，R1的路由表：R1#show ip routeR 120/1 via , 00:0

16、0:15, FastEthernet1/1is variably sub netted, 4 sub nets, 2 masksR120/1 via , 00:00:0乙 FastEthemet1/1Cis directly conn ected, FastEther net1/1R120/3 via , 00:00:07, FastEthernet1/1R120/1 via , 00:00:07, FastEthernet1/1is variably sub netted, 2 sub nets, 2 masksCis directly conn ected, FastEther net1/

17、0R120/2 via , 00:00:07, FastEthernet1/1120/2 via , 00:00:15, FastEthernet1/1R4的路由表：R4#show ip routeis variably sub netted, 3 sub nets, 3 masksR120 via , 00:00:14, Serial0/1R120/1 via , 00:00:00, Serial0/0Cis directly conn ected, Serial0/0is variably sub netted, 4 sub nets, 2 masksR120/1 via , 00:00:

18、14, Serial0/1R120/1 via , 00:00:14, Serial0/1R120/1 via , 00:00:00, Serial0/0Cis directly conn ected, Serial0/1is variably sub netted, 2 sub nets, 2 masksCis directly conn ected, FastEther net1/0R120/2 via , 00:00:14, Serial0/1120/2 via , 00:00:00, Serial0/05 )再从 PC1 ping PC2,结果为:VPCS 1 pi ngicmp_se

19、q=1 timeouticmp_seq=2 time=187.000 msicmp_seq=3 time=188.000 msicmp_seq=4 time=187.000 msicmp_seq=5 time=156.000 ms5、用wireshark分析抓包文件ripl.pcap,找出认证类型字段的值，以及口令：认证类型：simple password 口令：1234566、将R3、R4串口间的认证类型改为 md5,在R3 配置如下：R3#conf tR3(co nfig)#i nt s0/0R3(config-if)#ip rip authentication key-chain myk

20、eyR3 (con fig-if)# no ip rip authe nticati on mode textR3 (config-if)#ip rip authentication mode md5R3 (con fig-if)#e nd在R4上的配置如此类似，不再重复。再通过分析抓包文件rip2.pcap,找出认证类型与口令：认证类型：keyed message Digest口令：Authe ntication Data: b4 f9 de 4d bO be a9 14 20 9c ed ba 26 9b 7b e47、RIPv2除了可有认证外，还有什么地方与RIPvl不同？RIPv2无类路由协议，可以在关闭自动汇总