《實(shí)驗(yàn)16 OSPF末節(jié)區(qū)域的配置》由會(huì)員分享，可在線閱讀，更多相關(guān)《實(shí)驗(yàn)16 OSPF末節(jié)區(qū)域的配置（6頁珍藏版）》請(qǐng)?jiān)谘b配圖網(wǎng)上搜索。

1、廣東科學(xué)技術(shù)職業(yè)學(xué)院 銳捷網(wǎng)絡(luò)安全實(shí)驗(yàn)室 實(shí)驗(yàn)十六 OSPF末節(jié)區(qū)域的配置 試驗(yàn)?zāi)康模? 掌握OSPF各種類型區(qū)域的配置技術(shù)。 背景描述： 你是一名高級(jí)技術(shù)網(wǎng)絡(luò)工程師，某企業(yè)的網(wǎng)絡(luò)整個(gè)的網(wǎng)絡(luò)環(huán)境是ospf。 由于懷疑懷疑路由器R1、R4無法跟上ospf互連網(wǎng)絡(luò)發(fā)展的步伐，因此必須升級(jí)該路由器。通過診斷網(wǎng)絡(luò)您發(fā)現(xiàn)這臺(tái)路由器需要更多的內(nèi)存才可以解決路由表太大的問題，同時(shí)由于頻繁的最短路徑優(yōu)先計(jì)算，它需要一個(gè)更加高速的處理器。為了解決這個(gè)問題，您決定配置末節(jié)和完全末節(jié)區(qū)域以得到一個(gè)更小，更穩(wěn)定的路由表。 技術(shù)原理： 末節(jié)區(qū)域：阻止4類LSA、5類LSA。 完全末節(jié)區(qū)域：阻止阻止4

2、類LSA、5類LSA、域間LSA。 試驗(yàn)設(shè)備： RG-RSR20 四臺(tái)、網(wǎng)線若干 試驗(yàn)拓?fù)鋱D： 實(shí)驗(yàn)步驟及要求： 1、配置各臺(tái)路由器用戶名和接口IP地址，并且使用ping命令確認(rèn)各路由器的直連口的互通性。 2、在所有路由器上配置多區(qū)域OSPF路由協(xié)議。但暫時(shí)不要配置R2的Loopback 0 R1(config-if)#router osp 100 R1(config-router)#router-id 1.1.1.1 Change router-id and update OSPF process! [yes/no]:yes R1(config-router)#ne

3、twork 12.1.1.0 0.0.0.255 area 1 R1(config-router)# network 172.16.1.0 0.0.0.255 area 1 R1(config-router)# 3、查看R1的路由表，確定全網(wǎng)連通 R1#show ip route C 12.1.1.0/24 is directly connected, FastEthernet 0/0 C 12.1.1.1/32 is local host. O IA 23.1.1.0/24 [110/2] via 12.1.1.2, 00:03:06, FastEthernet 0

4、/0 O IA 34.1.1.0/24 [110/3] via 12.1.1.2, 00:01:17, FastEthernet 0/0 C 172.16.1.0/24 is directly connected, Loopback 0 C 172.16.1.1/32 is local host. O IA 192.168.1.1/32 [110/3] via 12.1.1.2, 00:00:06, FastEthernet 0/0R1學(xué)到了R4上的路由，說明全網(wǎng)連通 R1#ping 192.168.1.1 Sending 5, 100-byte ICMP Echo

5、es to 192.168.1.1, timeout is 2 seconds: < press Ctrl+C to break > !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms 4、按照下列命令在R2上配置一個(gè)回環(huán)接口 以模擬到ISP的串行接口連接。 R2(config)#inter loo0 R2(config-if)#ip address 10.1.1.1 255.255.255.0 R2(config-if)#exit R2(config)#ip route

6、10.0.0.0 255.0.0.0 loopback 0 R2(config)#router ospf 100 R2(config-router)#redistribute static metric 999 metric-type 2重發(fā)布靜態(tài)路由到ospf系統(tǒng)區(qū)域里面，設(shè)置度量值為999，路由類型為E2 R2(config-router)#end R2#show running router ospf 100 router-id 2.2.2.2 redistribute static metric 999 network 12.1.1.0 0.0.0.255 a

7、rea 1 network 23.1.1.0 0.0.0.255 area 0 ! ip route 10.0.0.0 255.0.0.0 Loopback 0 ! 5、在R1上查看ospf路由表和鏈路狀態(tài)數(shù)據(jù)庫 R1#show ip rou O E2 10.0.0.0/8 [110/999] via 12.1.1.2, 00:11:22, FastEthernet 0/0自主系統(tǒng)外部LSA，R1學(xué)到了由R2重發(fā)布路由 C 12.1.1.0/24 is directly connected, FastEthernet 0/0 C 12.1.1.1/32 is

8、 local host. O IA 23.1.1.0/24 [110/2] via 12.1.1.2, 00:25:28, FastEthernet 0/0 O IA 34.1.1.0/24 [110/3] via 12.1.1.2, 00:23:39, FastEthernet 0/0 C 172.16.1.0/24 is directly connected, Loopback 0 C 172.16.1.1/32 is local host. O IA 192.168.1.1/32 [110/3] via 12.1.1.2, 00:22:28, FastEtherne

9、t 0/0區(qū)域間LSA R1#show ip ospf database OSPF Router with ID (1.1.1.1) (Process ID 100) Router Link States (Area 0.0.0.1) Link ID ADV Router Age Seq# CkSum Link count 1.1.1.1 1.1.1.1 1654 0x80000004 0x4318 2 2.2.2.2 2.2.2

10、.2 800 0x80000004 0x61bc 1 Network Link States (Area 0.0.0.1) Link ID ADV Router Age Seq# CkSum 12.1.1.1 1.1.1.1 90 0x80000002 0x2a10 Summary Link States (Area 0.0.0.1) Link ID ADV Router Age Seq#

11、 CkSum Route 23.1.1.0 2.2.2.2 1659 0x80000001 0xf545 23.1.1.0/24 34.1.1.0 2.2.2.2 1532 0x80000001 0x70be 34.1.1.0/24 192.168.1.1 2.2.2.2 237 0x80000002 0x7a6c 192.168.1.1/32 AS External Link States Link ID ADV Router Age

12、 Seq# CkSum Route Tag 10.0.0.0 2.2.2.2 799 0x80000001 0x4e87 E2 10.0.0.0/8 0 5類LSA 6、R1擁有數(shù)條區(qū)域間(interarea)路由和一條E2外部路由.在復(fù)雜的ospf網(wǎng)絡(luò)中,太多不必要的區(qū)域間和外部路由將拖跨一些路由器.在這里,R1處于末節(jié)區(qū)域,即只有單一出口的區(qū)域.所以它不需要外部路由信息甚至也不需要區(qū)域間匯總路由信息.它需要的只是達(dá)到ABR路由器R2的一條缺省路由. 通過配置區(qū)域1為末節(jié)區(qū)域,R2將為區(qū)域1自動(dòng)生成一

13、條缺省路由 R1(config)#router osp 100 R1(config-router)#area 1 stub R2(config)#router osp 100 R2(config-router)#area 1 stub R1#show ip route O*IA 0.0.0.0/0 [110/2] via 12.1.1.2, 00:01:21, FastEthernet 0/0通過配置區(qū)域1為末節(jié)區(qū)域,R2將為區(qū)域1自動(dòng)生成一條缺省路由。 C 12.1.1.0/24 is directly connected, FastEthernet 0/

14、0 C 12.1.1.1/32 is local host. O IA 23.1.1.0/24 [110/2] via 12.1.1.2, 00:01:21, FastEthernet 0/0 O IA 34.1.1.0/24 [110/3] via 12.1.1.2, 00:01:21, FastEthernet 0/0 C 172.16.1.0/24 is directly connected, Loopback 0 C 172.16.1.1/32 is local host. O IA 192.168.1.1/32 [110/3] via 12.1.1.2,

15、 00:01:21, FastEthernet 0/0 此時(shí)R1上沒有了到外部AS中的路由條目,取而代之的是一條默認(rèn)路由.此時(shí)區(qū)域間路由還存在! 也就是說在末節(jié)區(qū)域,4類匯總LSA和5類外部ASA都進(jìn)不來,3類匯總LSA可以進(jìn)來. R1#show ip ospf Routing Process "ospf 100" with ID 1.1.1.1 Process uptime is 49 minutes Process bound to VRF default Conforms to RFC2328, and RFC1583Compatibility flag is

16、 enabled Supports only single TOS(TOS0) routes Supports opaque LSA SPF schedule delay 5 secs, Hold time between two SPFs 10 secs LsaGroupPacing: 240 secs Number of incomming current DD exchange neighbors 0/5 Number of outgoing current DD exchange neighbors 0/5 Number of external LSA 0.

17、 Checksum 0x000000 Number of opaque AS LSA 0. Checksum 0x000000 Number of non-default external LSA 0 External LSA database is unlimited. Number of LSA originated 3 Number of LSA received 17 Log Neighbor Adjency Changes : Enabled Number of areas attached to this router: 1 : 0 normal

18、1 stub 0 nssa Area 1 (Stub) Number of interfaces in this area is 2(2) Number of fully adjacent neighbors in this area is 1 Number of fully adjacent virtual neighbors through this area is 0 Area has no authentication SPF algorithm last executed 00:0

19、4:01.760 ago SPF algorithm executed 9 times Number of LSA 7. Checksum 0x0294cc 7、在R4上查看ospf路由表和鏈路狀態(tài)數(shù)據(jù)庫 R4#show ip route O E2 10.0.0.0/8 [110/999] via 34.1.1.1, 00:16:45, FastEthernet 0/1 O IA 12.1.1.0/24 [110/3] via 34.1.1.1, 00:27:55, FastEthernet 0/1 O IA 23.1.1.0/24 [

20、110/2] via 34.1.1.1, 00:27:55, FastEthernet 0/1 C 34.1.1.0/24 is directly connected, FastEthernet 0/1 C 34.1.1.2/32 is local host. O IA 172.16.1.1/32 [110/3] via 34.1.1.1, 00:27:55, FastEthernet 0/1 C 192.168.1.0/24 is directly connected, Loopback 0 C 192.168.1.1/32 is local host.

21、 R4#show ip ospf dat OSPF Router with ID (4.4.4.4) (Process ID 100) Router Link States (Area 0.0.0.2) Link ID ADV Router Age Seq# CkSum Link count 3.3.3.3 3.3.3.3 1702 0x80000004 0x8e5e 1 4.4.4.4 4.4.4.4 1695 0x8

22、0000004 0x6306 2 Network Link States (Area 0.0.0.2) Link ID ADV Router Age Seq# CkSum 34.1.1.1 3.3.3.3 1702 0x80000001 0x7993 Summary Link States (Area 0.0.0.2) Link ID ADV Router Age Seq# CkSum Route 1

23、2.1.1.0 3.3.3.3 1770 0x80000001 0x71cf 12.1.1.0/24 23.1.1.0 3.3.3.3 1782 0x80000001 0xd75f 23.1.1.0/24 172.16.1.1 3.3.3.3 1770 0x80000001 0x8a06 172.16.1.1/32 ASBR-Summary Link States (Area 0.0.0.2) Link ID ADV Router Age

24、 Seq# CkSum 2.2.2.2 3.3.3.3 1021 0x80000001 0xb096 AS External Link States Link ID ADV Router Age Seq# CkSum Route Tag 10.0.0.0 2.2.2.2 1026 0x80000001 0x4e87 E2 10.0.0.0/8 0 8、由于R4的性能更低，我們決定減少R4路由器表中

25、的域間路由條目，把Area 2配置成完全末節(jié)區(qū)域， R3(config)#router osp 100 R3(config-router)#area 2 stub no-summary 在ABR路由器上配置關(guān)鍵字no-summary用于阻止區(qū)域間路由進(jìn)入?yún)^(qū)域2,從而創(chuàng)建了一個(gè)完全的末節(jié)區(qū)域. 只有ABR路由器需要做這樣的額外配置. R4(config)#router osp 100 R4(config-router)#area 2 stub R4#show ip route O*IA 0.0.0.0/0 [110/2] via 34.1.1.1, 00:02:53,

26、FastEthernet 0/1區(qū)域間路由已經(jīng)被一條缺省路由所代替 C 34.1.1.0/24 is directly connected, FastEthernet 0/1 C 34.1.1.2/32 is local host. C 192.168.1.0/24 is directly connected, Loopback 0 C 192.168.1.1/32 is local host. R4#ping 172.16.1.1 source 192.168.1.1 Sending 5, 100-byte ICMP Echoes to 172.16.1.1, timeout is 2 seconds: < press Ctrl+C to break > !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/10 ms 9、試驗(yàn)完成 【注意事項(xiàng)】 l 只有在完全末節(jié)區(qū)域的路由器才能達(dá)到路由表最小化； l 末節(jié)區(qū)域的配置需要在其區(qū)域中所有路由器上配置。 6