HCDA路由实验——OSPF及路由引入实验

1、HCDA路由实验OSPF及路由引入实验 一、 实验编址及拓扑 二、 实验要求 0、实验使用完成，v2.0模拟器要相应更改接口编号等 1、如图所示搭建拓扑（可下载附件），并配置IP地址（交换机空配） 2、按规划配置OSPF及宣告接口到相应区域里 AR1 router-id 1.1.1.1 AR2 router-id 2.2.2.2 AR3 router-id 3.3.3.3 AR4 router-id 4.4.4.4 3、控制DR选举，让AR3成为DR，AR2成为BDR，AR1不参加选举；对区域1的172.16的路由进行精确汇总 4、修改COST让区域3优选s0/0/0链路，备用s0/0/1链路

2、 5、区域0实现基于区域的MD5认证，密码为hcda001,区域3实现基于接口的明文认证密码为huawei 6、AR4和AR5配置RIP互通（模拟的外网不宣告），在AR5手工写静态缺省路由并引入RIP。 7、AR4上进行RIP和OSPF的双向路由引入，并为OSPF通告默认路由，实现全网全通。 三、实验配置参考： AR1的配置 sysname r1#interface Ethernet0/0/0ospf dr-priority 0 /优先级是0不能参与DR选举，默认是1#interface LoopBack0ospf network-type broadcast /回环接口修改接口类型，为了让其

3、它路由器计算出/24位掩码的路由，不改是/32掩码的路由#interface LoopBack1#interface LoopBack2#interface LoopBack3#interface LoopBack4#ospf 1 router-id 1.1.1.1 /指定router-id并进入OSPF进程1authentication-mode md5 1 cipher hcda001 /基于区域进行MD5认证abr-summary 172.16.0.0 255.255.252.0 /在ABR上对路由进行手工汇总#return AR2的配置 sysname r2#interface Eth

4、ernet0/0/0ospf dr-priority 5 /修改DR选举的优先级，这里是次优的，故R2是BDR#interface LoopBack0ospf network-type broadcast#authentication-mode md5 1 cipher hcda001# AR3的配置 sysname r3#interface Ethernet0/0/0ospf dr-priority 10 /修改DR选举的优先级，这里是最优的，故R3是DR#interface Serial0/0/0link-protocol pppospf authentication-mode simpl

5、e plain huawei /配置基于接口的认证ospf cost 800 /在接口下手工修改开销，主用路径#interface Serial0/0/1link-protocol pppospf authentication-mode simple plain huaweiospf cost 1000 /在接口下手工修改开销，备用路径#interface LoopBack0ospf network-type broadcast#authentication-mode md5 1 cipher hcda001#return AR4的配置 sysname r4#interface Etherne

6、t0/0/0#interface Serial0/0/0link-protocol pppospf authentication-mode simple plain huaweiospf cost 800#interface Serial0/0/1link-protocol pppospf authentication-mode simple plain huaweiospf cost 1000#interface LoopBack0#default-route-advertise /在ASBR上为其它OSPF路由器通知默认路由，不改R1上没有的OSE默认路由import-route rip

7、1 cost 2000 /引入RIP路由域的路由进入OSPF路由域（、24的路由）#rip 1 /RIP的配置undo summaryversion 2import-route ospf 1 cost 5 /引入OSPF的路由进入RIP路由域#return AR5的配置 sysname r5#interface Ethernet0/0/0#interface LoopBack0#interface LoopBack100#interface LoopBack200#rip 1undo summarydefault-route originate cost 1 /RIP通告默认路由version

8、 2#ip route-static 0.0.0.0 0.0.0.0 LoopBack100 /模拟的去公网的路由# 四、检查配置 1、在AR1上可以验证DR选举<r1>dis ospf peer Neighbors Area 0.0.0.0 interface 123.1.1.1(Ethernet0/0/0)'s neighborsRouter ID: 2.2.2.2 Address: 123.1.1.2 State: Full Mode:Nbr is Master Priority: 5DR: 123.1.1.3 BDR: 123.1.1.2 MTU: 0 Dead t

9、imer due in 38 sec Retrans timer interval: 3 Neighbor is up for 00:43:16 Authentication Sequence: 2378 Router ID: 3.3.3.3 Address: 123.1.1.3 State: Full Mode:Nbr is Master Priority: 10DR: 123.1.1.3 BDR: 123.1.1.2 MTU: 0 Dead timer due in 34 sec Retrans timer interval: 4 Neighbor is up for 00:43:20 A

10、uthentication Sequence: 2387 2、在路由器上验证区域认证<r1>dis ospf brief OSPF Protocol Information RouterID: 1.1.1.1 Border Router: AREA AS Multi-VPN-Instance is not enabledGlobal DS-TE Mode: Non-Standard IETF ModeSpf-schedule-interval: max 10000ms, start 500ms, hold 1000msDefault ASE parameters: Metric:

11、1 Tag: 1 Type: 2Route Preference: 10 ASE Route Preference: 150 SPF Computation Count: 9 RFC 1583 CompatibleRetransmission limitation is disabledArea Count: 2 Nssa Area Count: 0 ExChange/Loading Neighbors: 0Area: 0.0.0.0 (MPLS TE not enabled)Authtype: MD5 Area flag: NormalSPF scheduled Count: 9 ExCha

12、nge/Loading Neighbors: 0Router ID conflict state: Normal 3、在AR1上检查OSPF路由表 可以看到OSPF普通路由，外部路由（包括默认路由）<r1>dis ip routing-table protocol ospf Route Flags: R - relay, D - download to fib-Public routing table : OSPFDestinations : 8 Routes : 8 OSPF routing table status : <Active>Destinations :

13、8 Routes : 8 Destination/Mask Proto Pre Cost Flags NextHop Interface OSPF routing table status : <Inactive>Destinations : 0 Routes : 0 4、在AR4(ASBR)上检查全局路由表 可以看到OSPF路由，RIP路由（包括默认路由）<r4>dis ip routing-table Route Flags: R - relay, D - download to fib-Routing Tables: PublicDestinations : 19

14、 Routes : 19 Destination/Mask Proto Pre Cost Flags NextHop Interface 5、验证全网联通性 PING 192.168.3.1: 56 data bytes, press CTRL_C to breakReply from 192.168.3.1: bytes=56 Sequence=1 ttl=255 time=40 msReply from 192.168.3.1: bytes=56 Sequence=2 ttl=255 time=30 msReply from 192.168.3.1: bytes=56 Sequence=3

15、 ttl=255 time=50 msReply from 192.168.3.1: bytes=56 Sequence=4 ttl=255 time=50 msReply from 192.168.3.1: bytes=56 Sequence=5 ttl=255 time=80 ms - 192.168.3.1 ping statistics -5 packet(s) transmitted5 packet(s) received0.00% packet lossround-trip min/avg/max = 30/50/80 ms PING 100.100.100.100: 56 dat

16、a bytes, press CTRL_C to breakReply from 100.100.100.100: bytes=56 Sequence=1 ttl=253 time=100 msReply from 100.100.100.100: bytes=56 Sequence=2 ttl=253 time=110 msReply from 100.100.100.100: bytes=56 Sequence=3 ttl=253 time=80 msReply from 100.100.100.100: bytes=56 Sequence=4 ttl=253 time=80 msRepl

17、y from 100.100.100.100: bytes=56 Sequence=5 ttl=253 time=50 ms - 100.100.100.100 ping statistics -5 packet(s) transmitted5 packet(s) received0.00% packet lossround-trip min/avg/max = 50/84/110 ms PING 172.16.1.1: 56 data bytes, press CTRL_C to breakReply from 172.16.1.1: bytes=56 Sequence=1 ttl=254

18、time=50 msReply from 172.16.1.1: bytes=56 Sequence=2 ttl=254 time=70 msReply from 172.16.1.1: bytes=56 Sequence=3 ttl=254 time=90 msReply from 172.16.1.1: bytes=56 Sequence=4 ttl=254 time=80 msReply from 172.16.1.1: bytes=56 Sequence=5 ttl=254 time=90 ms - 172.16.1.1 ping statistics -5 packet(s) trans