实验篇---OSPF小实验

实验篇---OSPF小实验

实验要求:

1.R1-R2-R3为MGRE网络,R1为hub;R5-R6-R8为MGRE网络 R5位hub;

2.R3-R5之间为PPP封装;

3.R1-R2-R3-R5启用OSPF协议,R1-R2-R3网络类型为BMA;

4.R3-R5之间启用PPP chap 双向认证;

5.R5-R6-R8之间使用RIP协议;

6.如上运行动态路由协议,实现全网可达。

实验操作:

基础配置:

接口以及环回的IP地址:

[R1]int lo 0
[R1-LoopBack0]ip add 1.1.1.1 24
[R1-LoopBack0]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip add 14.1.1.1 24

[R2]int lo 0
[R2-LoopBack0]ip add 2.2.2.2 24
[R2-LoopBack0]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip add 24.1.1.1 24

[R3]int lo 0
[R3-LoopBack0]ip add 3.3.3.3 24
[R3-LoopBack0]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip add 34.1.1.1 24
[R3-GigabitEthernet0/0/0]int s 4/0/0
[R3-Serial4/0/0]ip add 35.1.1.1 24

[ISP1]int g 0/0/0
[ISP1-GigabitEthernet0/0/0]ip add 14.1.1.2 24
[ISP1-GigabitEthernet0/0/0]int g 0/0/1
[ISP1-GigabitEthernet0/0/1]ip add 24.1.1.2 24
[ISP1-GigabitEthernet0/0/1]int g 0/0/2
[ISP1-GigabitEthernet0/0/2]ip add 34.1.1.2 24

[R5]int lo 0
[R5-LoopBack0]ip add 5.5.5.5 24
[R5-LoopBack0]int g 0/0/0
[R5-GigabitEthernet0/0/0]ip add 57.1.1.1 24
[R5-GigabitEthernet0/0/0]int s 4/0/0
[R5-Serial4/0/0]ip add 35.1.1.2 24

[R6]int lo 0
[R6-LoopBack0]ip add 6.6.6.6 24
[R6-LoopBack0]int g 0/0/0
[R6-GigabitEthernet0/0/0]ip add 67.1.1.1 24

[ISP2]int g 0/0/0
[ISP2-GigabitEthernet0/0/0]ip add 57.1.1.2 24
[ISP2-GigabitEthernet0/0/0]int g 0/0/1
[ISP2-GigabitEthernet0/0/1]ip add 67.1.1.2 24
[ISP2-GigabitEthernet0/0/1]int g 0/0/2
[ISP2-GigabitEthernet0/0/2]ip add 87.1.1.2 24

[R8]int lo 0
[R8-LoopBack0]ip add 8.8.8.8 24
[R8-LoopBack0]int g 0/0/0
[R8-GigabitEthernet0/0/0]ip add 87.1.1.1 24

指向ISP1(R4),ISP2(R7)的静态缺省:

[R1]ip route-static 0.0.0.0 0 10.1.1.2
[R2]ip route-static 0.0.0.0 0 10.1.2.2
[R3]ip route-static 0.0.0.0 0 10.1.3.2
[R5]ip route-static 0.0.0.0 0 10.1.5.2
[R6]ip route-static 0.0.0.0 0 10.1.6.2
[R8]ip route-static 0.0.0.0 0 10.1.7.2

检测直连互通:
实验篇---OSPF小实验

开启MGRE:

在左边起MGRE:

[R1]int t 0/0/0
[R1-Tunnel0/0/0]ip add 100.1.1.1 24
[R1-Tunnel0/0/0]tunnel-protocol gre p2mp
[R1-Tunnel0/0/0]source 14.1.1.1
[R1-Tunnel0/0/0]nhrp network-id 100
[R1-Tunnel0/0/0]nhrp entry multicast dynamic

[R2]int t 0/0/0
[R2-Tunnel0/0/0]ip add 100.1.1.2 24
[R2-Tunnel0/0/0]tunnel-protocol gre p2mp
[R2-Tunnel0/0/0]source 24.1.1.1
[R2-Tunnel0/0/0]nhrp network-id 100
[R2-Tunnel0/0/0]nhrp entry 100.1.1.1 14.1.1.1 register

[R3]int t 0/0/0
[R3-Tunnel0/0/0]ip add 100.1.1.3 24
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp
[R3-Tunnel0/0/0]source 34.1.1.1
[R3-Tunnel0/0/0]nhrp network-id 100
[R3-Tunnel0/0/0]nhrp entry 100.1.1.1 14.1.1.1 register

测试MGRE:
实验篇---OSPF小实验
实验篇---OSPF小实验

在右边起MGRE:

[R5]int t 0/0/0
[R5-Tunnel0/0/0]ip add 200.1.1.1 24
[R5-Tunnel0/0/0]tunnel-protocol gre p2mp
[R5-Tunnel0/0/0]source 10.1.5.1
[R5-Tunnel0/0/0]nhrp network-id 200
[R5-Tunnel0/0/0]nhrp entry multicast dynamic

[R6]int t 0/0/0
[R6-Tunnel0/0/0]ip add 200.1.1.2 24
[R6-Tunnel0/0/0]tunnel-protocol gre p2mp
[R6-Tunnel0/0/0]source 10.1.6.1
[R6-Tunnel0/0/0]nhrp network-id 200
[R6-Tunnel0/0/0]nhrp entry 200.1.1.1 10.1.5.1 register

[R8]int t 0/0/0
[R8-Tunnel0/0/0]ip add 200.1.1.3 24
[R8-Tunnel0/0/0]tunnel-protocol gre p2mp
[R8-Tunnel0/0/0]source 10.1.7.1
[R8-Tunnel0/0/0]nhrp network-id 200
[R8-Tunnel0/0/0]nhrp entry 200.1.1.1 10.1.5.1 register

测试MGRE:
实验篇---OSPF小实验

在R3和R5上做双向认证:

主:

[R3]aaa
[R3-aaa]local-user huawei password cipher 123
Info: Add a new user.
[R3-aaa]local-user huawei service-type ppp
[R3-aaa]int s 4/0/0
[R3-Serial4/0/0]ppp authentication-mode chap

被:

[R5]int s 4/0/0
[R5-Serial4/0/0]link-protocol ppp
[R5-Serial4/0/0]ppp chap user huawei
[R5-Serial4/0/0]ppp chap password cipher 123

主:

[R5]aaa
[R5-aaa]local-user cisco password cipher 123
Info: Add a new user.
[R5-aaa]local-user cisco service-type ppp
[R5-aaa]int s 4/0/0
[R5-Serial4/0/0]ppp authentication-mode chap

被:

[R3-Serial4/0/0]link-protocol ppp
[R3-Serial4/0/0]ppp chap user cisco
[R3-Serial4/0/0]ppp chap password cipher 123

查看S4/0/0接口是否双UP,双UP则认证成功:
实验篇---OSPF小实验

左边起OSPF:

[R1]ospf 100 router-id 91.1.1.1
[R1-ospf-100]area 0
[R1-ospf-100-area-0.0.0.0]network 100.1.1.1 0.0.0.0
[R1-ospf-100-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[R1-ospf-100-area-0.0.0.0]int t0/0/0
[R1-Tunnel0/0/0]ospf network-type broadcast

[R2]ospf 100 router-id 92.2.2.2
[R2-ospf-100]area 0
[R2-ospf-100-area-0.0.0.0]network 100.1.1.2 0.0.0.0
[R2-ospf-100-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[R2-ospf-100-area-0.0.0.0]int t0/0/0
[R2-Tunnel0/0/0]ospf network-type broadcast

[R3]ospf 100 router-id 93.3.3.3
[R3-ospf-100]area 0
[R3-ospf-100-area-0.0.0.0]network 100.1.1.3 0.0.0.0
[R3-ospf-100-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[R3-ospf-100-area-0.0.0.0]network 35.1.1.1 0.0.0.0
[R3-ospf-100-area-0.0.0.0]int t0/0/0
[R3-Tunnel0/0/0]ospf network-type broadcast

[R5]ospf 100 router-id 95.5.5.5
[R5-ospf-100]area 0
[R5-ospf-100-area-0.0.0.0]network 35.1.1.2 0.0.0.0

查看R1是DR , R2&R3是BDR:实验篇---OSPF小实验
实验篇---OSPF小实验
实验篇---OSPF小实验
修改优先级,选出R1为DR,没有BDR:

[R1-Tunnel0/0/0]ospf dr-priority 100

[R2-Tunnel0/0/0]ospf dr-priority 0

[R3-Tunnel0/0/0]ospf dr-priority 0
此时R1为DR没有BDR:实验篇---OSPF小实验
查看邻居关系建立成功:
实验篇---OSPF小实验实验篇---OSPF小实验
测试OSPF网络成功:
实验篇---OSPF小实验
实验篇---OSPF小实验

在右边起RIP:

[R5]rip 100
[R5-rip-100]version 2
[R5-rip-100]network 200.1.1.0

[R6]rip 100
[R6-rip-100]version 2
[R6-rip-100]network 6.0.0.0
[R6-rip-100]network 200.1.1.0

[R8]rip 100
[R8-rip-100]version 2
[R8-rip-100]network 200.1.1.0
[R8-rip-100]network 8.0.0.0
查看:
此时R6只能学到R5的路由:实验篇---OSPF小实验
此时R8也只能学到R5路由:
实验篇---OSPF小实验

在R6和R8上做单播邻居(这里不能用关闭水平分割,华为有bug,可以自己去试):

[R6]rip 100
[R6-rip-100]peer 200.1.1.8

[R8]rip 100
[R8-rip-100]peer 200.1.1.6
实验篇---OSPF小实验实验篇---OSPF小实验

重发布:

[R5]ospf 100
[R5-ospf-100]import-route rip 100
[R5-ospf-100]q
[R5]rip 100
[R5-rip-100]import-route ospf 100
[R5-rip-100]q
实验篇---OSPF小实验
查看ospf区域与rip区域路由学习是否学习完毕:
R1:
实验篇---OSPF小实验
R8:
实验篇---OSPF小实验
测试全网互通:
R1:ping R8环回,(多测试几个,成功则全网互通)
实验篇---OSPF小实验