0x6 HCNP-R&S OSPF多区域实验（华为eNSP）

超、凢脫俗 2022-05-16 12:15 402阅读 0赞

# 要求 #

###    1，根据图示配置正确的ip地址   2，根据图示配置ospf协议及所属的区域，使全网互通   3，AR1上有两个环回接口，为了减少路由表规模，需要配置区域汇总   4，AR3上引入了两个环回接口地址（通过引入直连可实现）import direct   5，AR3上对引入的路由汇总   6, 区域1希望降低路由计算、存储压力 ，同时考虑网络扩展，需要保留引入外部路由的功能。   7，区域3外来人员较多，采用较安全的方式保证路由交互的安全性 ###

# 实验拓扑 #

![70][]

### 1 配置IP地址 ###

**AR1**

<Huawei>sys
    Enter system view, return user view with Ctrl+Z.
    [Huawei]sys AR1
    [AR1]undo info-center enable 
    Info: Information center is disabled.
    [AR1]interface g0/0/0
    [AR1-GigabitEthernet0/0/0]ip addr 1.1.1.1 24
    [AR1-GigabitEthernet0/0/0]inter l 1
    [AR1-LoopBack1]ip add 192.168.1.1 24
    [AR1-LoopBack1]inter l 2
    [AR1-LoopBack2]ip add 192.168.2

**AR2**

<Huawei>sys
    Enter system view, return user view with Ctrl+Z.
    [Huawei]sys AR2
    [AR2]un in en
    Info: Information center is disabled.
    [AR2]inte g0/0/0
    [AR2-GigabitEthernet0/0/0]ip add 1.1.1.2 24
    [AR2-GigabitEthernet0/0/0]inte g0/0/1
    [AR2-GigabitEthernet0/0/1]ip add 2.2.2.1 24

**AR3**

<Huawei>sys
    Enter system view, return user view with Ctrl+Z.
    [Huawei]sys AR3
    [AR3]un in en
    Info: Information center is disabled.
    [AR3]inter g0/0/0
    [AR3-GigabitEthernet0/0/0]ip add 2.2.2.2 24
    [AR3-GigabitEthernet0/0/0]inter g0/0/1
    [AR3-GigabitEthernet0/0/1]ip add 3.3.3.1 24
    [AR3-GigabitEthernet0/0/1]inter l 1
    [AR3-LoopBack1]ip add 172.16.1.1 24
    [AR3-LoopBack1]inter l 2
    [AR3-LoopBack2]ip add 172.16.2.1 24

**AR4**

<Huawei>sys
    Enter system view, return user view with Ctrl+Z.
    [Huawei]sys AR4
    [AR4]un in en
    Info: Information center is disabled.
    [AR4]inter g0/0/0
    [AR4-GigabitEthernet0/0/0]ip add 3.3.3.2 24
    [AR4-GigabitEthernet0/0/0]inter g0/0/1
    [AR4-GigabitEthernet0/0/1]ip add 4.4.4.1 24

**AR5**

<Huawei>sys
    Enter system view, return user view with Ctrl+Z.
    [Huawei]sys AR5
    [AR5]un in en
    Info: Information center is disabled.
    [AR5]inter g0/0/0
    [AR5-GigabitEthernet0/0/0]ip add 4.4.4.2 24
    [AR5-GigabitEthernet0/0/0]inter g0/0/1
    [AR5-GigabitEthernet0/0/1]ip  add 5.5.5.1 24

**AR6**

<Huawei>sys
    Enter system view, return user view with Ctrl+Z.
    [Huawei]sys AR6
    [AR6]un in en
    Info: Information center is disabled.
    [AR6]inter g0/0/0
    [AR6-GigabitEthernet0/0/0]ip add 5.5.5.2 24

### 配置OSPF ###

**AR1**

[AR1]router id 1.1.1.1   //手动指定全局Router ID
    Info: Router ID has been modified, please reset the relative protocols manually 
    to update the Router ID.
    [AR1]ospf
    [AR1-ospf-1]are 1
    [AR1-ospf-1-area-0.0.0.1]net 1.1.1.0 0.0.0.255

**AR2**

[AR2]router id 1.1.1.2
    Info: Router ID has been modified, please reset the relative protocols manually 
    to update the Router ID.
    [AR2]ospf 
    [AR2-ospf-1]are 1
    [AR2-ospf-1-area-0.0.0.1]net 1.1.1.0 0.0.0.255
    [AR2-ospf-1-area-0.0.0.1]qu
    [AR2-ospf-1]area 0
    [AR2-ospf-1-area-0.0.0.0]net 2.2.2.0 0.0.0.255

**AR3**

[AR3]router id 2.2.2.2
    Info: Router ID has been modified, please reset the relative protocols manually 
    to update the Router ID.
    [AR3]ospf 
    [AR3-ospf-1]area 0
    [AR3-ospf-1-area-0.0.0.0]net 2.2.2.0 0.0.0.255
    [AR3-ospf-1-area-0.0.0.0]net 3.3.3.0 0.0.0.255

**AR4**

[AR4]router id 3.3.3.2
    Info: Router ID has been modified, please reset the relative protocols manually 
    to update the Router ID.
    [AR4]ospf 
    [AR4-ospf-1]are 0
    [AR4-ospf-1-area-0.0.0.0]net 3.3.3.0 0.0.0.255
    [AR4-ospf-1-area-0.0.0.0]qu
    [AR4-ospf-1]area 2
    [AR4-ospf-1-area-0.0.0.2]net 4.4.4.0 0.0.0.255

**AR5**

[AR5]router id 4.4.4.2
    Info: Router ID has been modified, please reset the relative protocols manually 
    to update the Router ID.
    [AR5]ospf 
    [AR5-ospf-1]area 2
    [AR5-ospf-1-area-0.0.0.2]net 4.4.4.0 0.0.0.255
    [AR5-ospf-1-area-0.0.0.2]qu
    [AR5-ospf-1]area 3
    [AR5-ospf-1-area-0.0.0.3]net 5.5.5.0 0.0.0.255

**AR6**

[AR6]router id 5.5.5.2
    Info: Router ID has been modified, please reset the relative protocols manually 
    to update the Router ID.
    [AR6]ospf 
    [AR6-ospf-1]are 3
    [AR6-ospf-1-area-0.0.0.3]net 5.5.5.0 0.0.0.255

**2 ABR（AR4、AR5）路由器互指对方的Router  id 实现虚连接**

**AR4**

[AR4]ospf
    [AR4-ospf-1]area 2
    [AR4-ospf-1-area-0.0.0.2]vlink-peer 4.4.4.2

**AR5**

[AR5]ospf
    [AR5-ospf-1]area 2
    [AR5-ospf-1-area-0.0.0.2]vlink-peer 3.3.3.2

**4 AR3上引入了两个环回接口地址（通过引入直连可实现）import direct**

[AR3]ospf 
    [AR3-ospf-1]import-route direct

![70 1][]

**3 AR1环回接口配置及区域汇总**

[AR1]ospf
    [AR1-ospf-1]area 1
    [AR1-ospf-1-area-0.0.0.1]net 1.1.1.0 0.0.0.255 
    [AR1-ospf-1-area-0.0.0.1]network 192.168.1.0 0.0.0.255
    [AR1-ospf-1-area-0.0.0.1]network 192.168.2.0 0.0.0.255

**AR2（ABR）**

[AR2]ospf 
    [AR2-ospf-1]area 1
    [AR2-ospf-1-area-0.0.0.1]abr-summary 192.168.0.0 255.255.252.0

![70 2][]

**area 1 配置Stub**

未配置之前查看routing

display ospf routing

配置Stub需要在区域内所有路由器进行配置

**AR1**

[AR1]ospf
    [AR1-ospf-1]area 1
    [AR1-ospf-1-area-0.0.0.1]stub

**AR2**

[AR2]ospf 
    [AR2-ospf-1]area 1
    [AR2-ospf-1-area-0.0.0.1]stub

再看routing

![70 3][]

**6 area 1 配置完全Stub**

**AR2**

[AR2-ospf-1-area-0.0.0.1]stub no-summary

![70 4][]

**area 1配置NSSA**

[AR1]ospf	
    [AR1-ospf-1]area 1	
    [AR1-ospf-1-area-0.0.0.1]nssa

[AR2]ospf
    [AR2-ospf-1]area 1	
    [AR2-ospf-1-area-0.0.0.1]nssa

![70 5][]

![70 6][]

**5 AR3上对引入的路由汇总**

[AR3-ospf-1]asbr-summary 172.16.0.0 255.255.252.0

**7 area 3配置认证**

[AR5]ospf
    [AR5-ospf-1]area 3
    [AR5-ospf-1-area-0.0.0.3]authentication-mode hmac-md5 88 1234

[AR6]ospf
    [AR6-ospf-1]are 3
    [AR6-ospf-1-area-0.0.0.3]authentication-mode hmac-md5 88 1234

[70]: /images/20220516/ccba664bbe954d9a97eedff33e6870ce.png
[70 1]: /images/20220516/38e8cd7a079c4a2291fbe3614369a3b3.png
[70 2]: /images/20220516/f0652798671c4177b2694cd6e10b9364.png
[70 3]: /images/20220516/8ec15dd212674f2e8f3952a8b9cdf7d5.png
[70 4]: /images/20220516/915ca888455249b4b6f917c5f0955928.png
[70 5]: /images/20220516/e755a7d5d5ba4573b12e4c615f3d87f5.png
[70 6]: /images/20220516/2a04b5e2a4e849c586d5333893b9a6f5.png