R4环回不能宣告,全网可达,保障更新安全,避免环路,减少路由条目,缺省路由、路由条目全,手工认证,空接口,手工汇总。
三.实验步骤 1.设计IP地址和环回地址R1
system-view [Huawei]sysname r1 [r1]int g0/0/0 [r1-GigabitEthernet0/0/0]ip add 192.168.1.1 27 [r1-GigabitEthernet0/0/0]int lo0 [r1-LoopBack0]ip add 192.168.1.33 27
R2
system-view [Huawei]sysname r2 [r2]int g0/0/0 [r2-GigabitEthernet0/0/0]ip add 192.168.1.2 27 [r2-GigabitEthernet0/0/0]int lo0 [r2-LoopBack0]ip add 192.168.1.65 27
R3
system-view [Huawei]sysname r3 [r3]int g0/0/0 [r3-GigabitEthernet0/0/0]ip add 192.168.1.3 27 [r3-GigabitEthernet0/0/0]int g0/0/1 [r3-GigabitEthernet0/0/1]ip add 192.168.1.129 30 [r3-GigabitEthernet0/0/1]int lo0 [r3-LoopBack0]ip add 192.168.1.97 27
R4
2.OSPF协议的配置system-view [Huawei]sysname r4 [r4]int g0/0/0 [r4-GigabitEthernet0/0/0]ip add 192.168.1.130 30 [r4-GigabitEthernet0/0/0]int lo0 [r4-LoopBack0]ip add 4.4.4.4 24
R1:
R2:
R3:
system-view [r3]ospf 1 rou [r3]ospf 1 router-id 3.3.3.3 [r3-ospf-1]area 0 [r3-ospf-1-area-0.0.0.0]network 192.168.1.3 0.0.0.0 [r3-ospf-1-area-0.0.0.0]network 192.168.1.97 0.0.0.0
R4:
检查一下个个节点是否互通
2.修改DR路由器R1上:
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ospf dr-priority 0
路由器R2上:
[r2]interface GigabitEthernet 0/0/0
[r2-GigabitEthernet0/0/0]ospf dr-priority 0
结果如下:
[r2]display ospf peer
3.因为R4不能直接宣告,要做缺省 4.更新安全,要做手工认证
[r1-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456 [r2-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456 [r3-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456 [r3-GigabitEthernet0/0/1]ospf authentication-mode md5 1 cipher 123456 [r4-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 1234565.避免环路,在进行汇总的路由器使用空接口
[r3]ip route-static 192.168.1.0 25 NULL 0 ----- 给area0汇总的网段做的空接口 [r3]ip route-static 192.168.1.128 25 NULL 0 ----- area16.减少路由条目,对路由做手工汇总
[r3-ospf-1-area-0.0.0.0]abr-summary 192.168.1.0 255.255.255.128 [r3-ospf-1-area-0.0.0.1]abr-summary 192.168.1.128 255.255.255.128四.实验测试



