神州数码多区域OSPF配置
神州数码路由交换配置命令(全)
路由sshaaa authentication login ssh localaaa authentication enable default enableenable password 0 123456username admin password 0 123456ip sshd enableip sshd auth-method sship sshd auth-retries 5ip sshd timeout 60TELNETR1_config#aaa authentication login default local R1_config#aaa authentication enable default enable R1_config#enable password 0 ruijieR1_config#line vty 0 4R1_config_line#login authentication defaultR1_config_line#password 0 cisco方法2，不需要经过3A认证R1_config#aaa authentication login default noneR1_config#aaa authentication enable default enable R1_config#enable password 0 ciscoR1_config#line vty 0 4R1_config_line#login authentication defaultCHAP认证单向认证，密码可以不一致R2_config#aaa authentication ppp test localR2_config#username R2 password 0 123456R2_config_s0/2#enc pppR2_config_s0/2#ppp authentication chap testR2_config_s0/2#ppp chap hostname R1R1_config#aaa authentication ppp test localR1_config#username R1 password 0 123456R1_config_s0/1#enc pppR1_config_s0/1#ppp authentication chap testR1_config_s0/1#ppp chap hostname R2pap认证双向认证，密码要求一致R2_config#aaa authentication ppp test localR2_config#username R2 password 0 123456R2_config_s0/2#enc pppR2_config_s0/2#ppp authentication pap testR2_config_s0/2#ppp pap sent-username R1 password 123456R1_config#aaa authentication ppp test localR1_config#username R1 password 0 123456R1_config_s0/1#enc pppR1_config_s0/1#ppp authentication pap testR1_config_s0/1#ppp pap sent-username R2 password 123456FRRouter-A_config_s1/1#encapsulation frame-relay ！封装帧中继协议Router-A_config_s1/1#frame-relay local-dlci 17 ！设置本地DLCI 号Router-A_config_s1/1# frame-relay intf-type dce ！配置FR的DCERouter-A_config_s1/1# frame-relay map 192.168.1.2 pvc 17 broadcast ！配置DLCI 与对端IP的映射VrrpInt g0/4vrrp 1 associate 192.168.20.254 255.255.255.0vrrp 1 priority 120 设置优先级，为主vrrp 1 preempt 开启抢占vrrp 1 track interface Serial0/1 30 追踪上行接口，防止上行接口DOWN了，自动降低优先级Int g0/6vrrp 1 associate 192.168.20.254 255.255.255.0vrrp 1 priority 100 设置优先级，为备，默认为100vrrp 1 preempt 开启抢占vrrp 1 track interface Serial0/2 30 追踪上行接口，防止上行接口DOWN了，自动降低优先级RIP 验证，只有V2支持验证interface Serial0/2 接口起验证和配密码ip rip authentication simpleip rip password 123456RIP改单播router ripnei 192.168.1.1RIP定时器router riptimers update 10 更新时间timers exipire 30 失效时间timers hosddown 50 抑制时间ospfrouter os 1net 192.168.1.0 255.255.255.0 ar 0 不能写32位掩码OSPF 虚链路ROUTER OS 2 进程起用AR 1 VI 2.2.2.2 对方ROUTER-IDOSPF 汇总ROUTER OS 2 进程起用ar 0 range 192.168.0.0 255.255.252.0OSPF 验证ROUTER OS 2 明文AR 0 AUTHEN SP 进程给需要验证的区域启用验证INT S0/1IP OS passw 123456 接口配置密码密文router os 2ar 0 authen meint s0/1ip os me 1 md5 123456bgprouter bgp 100no synchronization bgp全互联必须要关闭同步检查nei 192.168.12.1 remot 200 与AS外部路由建立邻居nei 2.2.2.2 remot 100 与AS内部路由建立邻居nei 2.2.2.2 up lo0 改更新接口为环回接口nei 2.2.2.2 next-hop-self 改下一跳为自己net 2.2.2.0 通告路由表里面有的路由ACL路由上面的ACL要写子网掩码,不能写反掩码！！！！！基于时间的ACLtime-range acl 定义一个时间范围periodic weekdays 09:00 to 12:00periodic weekdays 14:00 to 17:00IP access－list extended time 写一个基于时间的acl，调用时间段deny ip 192.168.10.0 255.255.255.0 any time-range aclpermit ip any anyint g0/4 应用到接口ip access-group time inint g0/6ip access-group time in静态NATip route 0.0.0.0 0.0.0.0 192.168.12.2ip nat inside source static 192.168.10.10 192.168.12.1int g0/6ip nat inints0/1ip nat outNAPTip access-list standard NAT 定义要转换的IP网段permit 192.168.10.0 255.255.255.0ip nat pool NAT 192.168.23.10 192.168.23.20 255.255.255.0 创建转换的IP地址池ip nat inside source list NAT pool NAT overload 关联要转换的IP网段和地址池ip route default 192.168.23.3 写一条缺省路由，下一跳为出口网关的下一跳router rip 如果跑路由协议，要把缺省重分发到动态路由redistribute staticinterface Serial0/1 运用到内网接口ip nat insideinterface Serial0/2 运用到外网接口ip nat outsideroute-mapip acce sta acl 定义要匹配的流量per 192.168.20.0 255.255.255.0route-map SHENMA 10 permitma ip add acl 调用ACLset ip next-hop 192.168.12.1 改下一跳int g0/3ip po route-map SHENMA 定义到原接口DHCP给路由接口分配IP，不能是S口！！！R1ip dhcpd enableip dhcpd pool 1network 192.168.12.0 255.255.255.0range 192.168.12.10 192.168.12.20R2interface GigaEthernet0/6ip address dhcp给PC分配IP,底层网络要起路由互通！！！！实验全网起了RIP协议R1ip dhcpd enableip dhcpd pool 2network 192.168.1.0 255.255.255.0range 192.168.1.10 192.168.1.20default-router 192.168.1.1R2ip dhcpd enable 要开启DHCP服务！interface GigaEthernet0/4ip address 192.168.1.1 255.255.255.0ip helper-address 192.168.12.2 设置DHCP服务器IPVPN （GRE）int t0ip add 172.168.10.1 255.255.255.0 给T0配IPt so s0/2 源，路由的出接口t de 192.168.23.3 目的，对端的出接口IP，注意，要可达t key 123456 T0口密码，两端要一致exitip route 192.168.20.0 255.255.255.0 t0 用T0口写一条要到达网段的静态路由int t0ip add 172.168.10.3 255.255.255.0t so s0/1t de 192.168.12.1t key 123456exitip route 192.168.10.0 255.255.255.0 t0VPN (IPSEC)R1crypto ipsec transform-set SHENMA 设置转换集transform-type esp-des esp-md5-hmac 转换集的加密方式ip access-list extended 100 匹配感兴趣流permit ip 192.168.10.0 255.255.255.0 192.168.20.0 255.255.255.0crypto map HAN 10 ipsec-isakmpset peer 192.168.23.3 设置对等体set transform-set SHENMA 关联转换集match address 100 关联感兴趣流interface Serial0/2 进接口调用crypto map HANR3crypto ipsec transform-set SHENMA 设置转换集transform-type esp-des esp-md5-hmac 转换集的加密方式,两端要一致ip access-list extended 100 匹配感兴趣流permit ip 192.168.20.0 255.255.255.0 192.168.10.0 255.255.255.0crypto map HAN 10 ipsec-isakmpset peer 192.168.12.1 设置对等体set transform-set SHENMA 关联转换集match address 100 关联感兴趣流interface Serial0/1 进接口调用crypto map HANVPN (IKE)crypto isakmp key SHENMA 192.168.23.3 255.255.255.0 设置公共用密钥crypto isakmp policy 10 设置IKE策略hash md5au preenc desgroup 1lifetime 86400crypto ipsec transform-set SHENMA 设置转换集transform-type esp-Des esp-Md5-hmacip access-list extended 100 匹配感兴趣流permit ip 192.168.10.0 255.255.255.0 192.168.30.0 255.255.255.0crypto map SHENMA 10 ipsec-isakmp 设置IPSEC加密映射set peer 192.168.23.3set transform-set SHENMAmatch address 100int s0/2 调用到接口crypto map SHENMAQOSint g0/4ip add 192.168.10.1 255.255.255.0no shutip add 192.168.20.1 255.255.255.0no shutint s0/1ip add 192.168.12.1 255.255.255.0phy spe 64000no shutip route 0.0.0.0 0.0.0.0 192.168.12.2ip access-list ex 1 定义ACL抓取流量permit ip 192.168.10.0 255.255.255.0 2.2.2.0 255.255.255.0ip access-list ex 2permit ip 192.168.20.0 255.255.255.0 2.2.2.0 255.255.255.0priority 1 protocol ip high list 1 写一个IP协议的优先列表，调用ACL 1里面的地址，级别为HIGHpriority 1 protocol ip low list 2 写一个IP协议的优先列表，调用ACL 2里面的地址，级别为LOWint s0/1 进接口调用priority 1交换banner motd 系统登录标题telnettelnet-server enable 开启TELNETtelnet-server max-connection 16 最大连接数sshusername ssh password 0 123456ssh-server enable 开启SSHssh-server timeout 60 连接超时时间ssh-server max-connection 16 最大连接数ssh-server authentication-retries 5 重连次数ssh-server host-key create rsa 创建新的主机密钥1，首先要给所有的VLAN配上IPINT VLAN 10IP ADD 192.168.10.1 255.255.255.0NO SHUT2，创建一个VRRP组ROUTER VRRP 10VIRTUAL-IP 192.168.10.254 给虚拟IPINT VLAN 10 关联VLANPRIORITY 120 给优先级（默认100）ENABLE 激活STPSW1spanning-tree 开启STPspanning-tree mode mstp 改为MSTP模式spanning-tree mst configurtaion 配置域name shenma域名revision-level 3 修正级别instance 1 vlan10;20 在实例里面关联VLANinstance2 vlan30;40exitspanning-tree mst 1priority 4096 给实例配置优先级，越小的级别越高spanning-tree mst 2 priority 8192SW2spanning-tree 开启STPspanning-tree mode mstp 改为MSTP模式spanning-tree mst configurtaion 配置域name shenma域名revision-level 3 修正级别instance 1 vlan10;20 在实例里面关联VLANinstance2 vlan30;40exitspanning-tree mst 1priority 8192 给实例配置优先级，越小的级别越高spanning-tree mst 2 priority 4096SW21spanning-tree 开启STPspanning-tree mode mstp 改为MSTP模式spanning-tree mst configurtaion 配置域name shenma域名revision-level 3 修正级别instance 1 vlan10;20 在实例里面关联VLANinstance2 vlan30;40AM端口安全am enableint e1/0/1am portam mac-ip-pool 0000.1111.2222 192.168.10.1端口镜像monitor session 1 source int e1/0/1 bothmonitor session 1 destination int e1/0/15RIPRouter ripNet 192.168.1.0/24Router os 1Net 192.168.1.0 0.0.0.255 ar 0AclFirewall enableIp access-list ex 100Per ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255单臂路由R1int g0/5no shutinterface GigaEthernet0/5.1encapsulation dot1Q 100ip address 192.168.10.1 255.255.255.0interface GigaEthernet0/5.2encapsulation dot1Q 200ip address 192.168.20.1 255.255.255.0interface GigaEthernet0/5.3encapsulation dot1Q 300ip address 192.168.30.1 255.255.255.0SW1vlan 100\sw int e1/0/1-2vlan 200sw int e1/0/3-4vlan 300sw int e1/0/5-6int e1/0/20sw mo trsw tr all vlan all端口聚合PORT-GROUP 1 创建一个组INT E1/0/17-18 聚合端口要设置为TRUNKSW MO TRSW TR ALL VLAN ALLPORT-GROUP 1 MO ON 设置聚合端口的模式为自动匹配EXITINT PORT-CHANNAL 1 进入聚合端口配置模式，也要设置为TRUNK SW MO TRSW TR ALL VLAN ALLEXITdhcpSERV DHCP 开启DHCP服务IP DHCP POOL VLAN10 创建地址池NETW 192.168.10.0 255.255.255.0def 192.168.10.1le 2dns 8.8.8.8ip dhcp ex 192.168.10.1 192.168.10.10 排除地址范围dhcp 中继serv dhcpip for udp bootint vlan 10ip he 192.168.12.2dhcp snoopingserv dhcp 开启DHCP服务ip dhcp snooping enable 开启DHCP SNOOPING 功能ip dhcp snooping binding enable 开启SNOOPING 绑定功能int e1/0/20ip dhcp snooping trust 设置接口为信任接口，一般是与服务器相连的接口int e1/0/1ip dhcp snooping binding user-control 设置端口自动绑定获取DHCP的地址设置端口手动绑定MAC,VLAN,IP,端口信息（全局模式）ip dhcp snooping binding user 00-11-22-33-44-55 address 192.168.22.22 vlan 1 int e1/0/5ipv66 to 4greipv6 unicast-routing 允许单播路由interface Tunnel0ipv6 enable 开启IPV6ipv6 address 2001:23::1/64tunnel source 192.168.12.1 本端接口地址tunnel destination 192.168.12.2 对端接口地址tunnel mode gre ip 隧道模式改为GREtunnel key 123456 隧道密码，两端一致ipv6 route 3::/64 Tunnel0 写一条下一跳为TUNNEL 0的IPV6静态，不能写默认静态natInternet(config)#ip route 0.0.0.0 0.0.0.0 fa0/1 ipv4网络要可达NA T-PT(config)#ip route 0.0.0.0 0.0.0.0 fa0/1NA T-PT(config)#ipv6 nat prefix 2001:db8:feed::/96 设置一个全局NAT前缀，掩码必须96位NA T-PT(config)#ipv6 nat v4v6 source 10.10.10.2 2001:db8:feed::2 写4 TO 6 地址转换，需要到达的地址都要写, 不需要与本地同一网段NA T-PT(config)#ipv6 nat v4v6 source 192.168.1.10 2001:db8:feed::3NA T-PT(config)#ipv6 nat v6v4 source 2001:db8:cafe:ffff::2 10.10.20.5 写6 to 4 地址转换，需要到达的地址都要写,不需要与本地同一网段int g0/4 调用到接口，进出都要调用ipv6 natint g0/4ipv6 natpatipv4 网络要可达NA T-PT(config)#ipv6 nat prefix 2001:db8:feed::/96 设置一个全局NAT 前缀，掩码必须96位NA T-PT(config)#ipv6 nat v4v6 source 10.10.10.2 2001:db8:feed::2 写4 TO 6 地址转换，需要到达的地址都要写NA T-PT(config)#ipv6 nat v4v6 source 192.168.1.10 2001:db8:feed::3 不需要与本地同一网段NA T-PT(config)#ipv6 access-list cafe 把IPV6要转换的网段匹配出来NA T-PT(config-ipv6-acl)#permit ipv6 2001:db8:cafe::/48 anyNA T-PT(config-ipv6-acl)#exitNA T-PT(config)#ipv6 nat v6v4 pool ipv4 10.10.20.5 10.10.20.6 prefix-length 24 写一个6 TO 4 的NAT地址池,不需要已知网段NA T-PT(config)#ipv6 nat v6v4 source list cafe pool ipv4 overload 把要转换的网段与地址池关联int g0/4ipv6 natint g0/4ipv6 natripingipv6 router rip 100 全局创建RIP实例，名字为100exitinterface GigaEthernet0/4ipv6 enable 开启IPV6ipv6 address 2001::1/64ipv6 rip 100 enable 启动为100的实例需要宣告的接口要设置ospfv3ipv6 router ospf 1 全局创建ospf，进程为1 int g0/6ipv6 enableipv6 address 2001::1/64ipv6 ospf 1 area 0 宣告本接口为area 0 需要宣告的接口要设置。
神州数码各实验配置注意文档
//重点：两个三层交换机之间可以通过Vlan 1 进行路由退出的命令的运用在神州数码的视图下是没有quit的命令的，但并不代表不能用quit，在大多数的视图下，都可以用quit命令退回上一级视图，当然用exit也可以，看个人喜好，但有视图也是例外的，例如：# spanning-tree mst configuration视图下就要用它专用的退出命令：abrotNAT配置：1、配置acl允许通过的网段；//一般用标准acl2、配置地址池；ip nat pool+名字+起始IP+终止IP+子网掩码3、配置nat转换那个网段；Ip nat inside source list +acl名字pool +地址池名字4、配置int接口和out接口；【接口试图】ip nat inside【接口试图】ip nat insideNAT server：# ip nat inside source static tcp + 服务的IP地址+ 服务端口+ 要转换成公网的IP地址+ 端口号在发布FTP的时候最好把21和20的都发布出去DNS一定要使用UDP服务路由器enable用户密码和时间配置：1、enable password 0/7（不验证和验证）+密码level+权限（默认不配置的时候是15）2、date（接下来按照指示配置就OK了）配置语言：1、路由器Chinese2、交换机language ChineseOSPF路由协议的配置：1、router id的配置，可以选择配置，配置的时候，要指向路由器接入的端口上的IP地址2、router ospf +数字（可以随意）network +使能的网段+子网掩码+area +区域号（ospf 分单区域和多区域两种,单区域的配置要注意每一个使能的网段后面的区域号都要一致，多区域配置两个区域相交的那路由器使能网段的时候要配置和对端相对应的区域号）3、ospf的虚连接配置（ospf的虚连接是只多个不能直接相连接的区域通过建立逻辑的上虚拟连接，建立邻居关系）：area +本网段的区域号+ virtual-link + 相同区域对端的路由器的router id（虚连接链路的配置是运用在至少3个不同区域的ospf上，而且其中两个区域，分别和第三个区域连接）4、可以使用neighbor + 邻接路由的IP地址Ping命令有趣使用：问题：ping 1.0.0.1 可以学成ping 1.001 ，写成1.1也能ping通因为ping 的协议的编写时采用了IPV6的机制的，中间是出现连续两个0的情况的话，可以合并，可以可以不写。
神州数码典型ospf配置
IPv4路由典型配置-OSPF一、组网说明网络中的三台设备运行OSPF协议，接口地址如下图。
配置单区OSPF协议确保三台设备之间可以互访。
二、组网图三、配置步骤SW 1的配置#配置三层接口地址及Loopback接口地址switch(config)#interface vlan10switch(config-If-Vlan10)#ip address192.168.10.1 255.255.255.0switch(config-If-Vlan10)#exitswitch(config)#interface vlan20switch(config-If-Vlan20)#ip address192.168.20.1 255.255.255.0switch(config-If-Vlan20)#exitswitch(config)#interface loopback 1switch(config-If-loopback1)#ip address10.1.1.1 255.255.255.255switch(config-If-loopback1)#exit#配置OSPF协议，宣告设备所连的网段switch(config)#router ospfswitch(config-router)#router-id10.1.1.1switch(config-router)#nework192.168.10.1/24 area 0switch(config-router)#nework192.168.20.1/24 area 0switch(config-router)#exitSW 2的配置#配置三层接口地址及Loopback接口地址switch(config)#interface vlan10switch(config-If-Vlan10)#ip address192.168.10.2 255.255.255.0 switch(config-If-Vlan10)#exitswitch(config)#interface vlan30switch(config-If-Vlan30)#ip address192.168.30.1 255.255.255.0 switch(config-If-Vlan30)#exitswitch(config)#interface loopback 1switch(config-If-loopback1)#ip address10.1.1.2 255.255.255.255 switch(config-If-loopback1)#exit#配置OSPF协议，宣告设备所连的网段switch(config)#router ospfswitch(config-router)#router-id10.1.1.2switch(config-router)#nework192.168.10.1/24 area 0switch(config-router)#nework192.168.30.1/24 area 0switch(config-router)#exitSW 3的配置#配置三层接口地址及Loopback接口地址switch(config)#interface vlan20switch(config-If-Vlan20)#ip address192.168.20.2 255.255.255.0 switch(config-If-Vlan20)#exitswitch(config)#interface vlan30switch(config-If-Vlan30)#ip address192.168.30.2 255.255.255.0 switch(config-If-Vlan30)#exitswitch(config)#interface loopback 1switch(config-If-loopback1)#ip address10.1.1.3 255.255.255.255 switch(config-If-loopback1)#exit#配置OSPF协议，宣告设备所连的网段switch(config)#router ospfswitch(config-router)#router-id10.1.1.3switch(config-router)#nework192.168.20.1/24 area 0switch(config-router)#nework192.168.30.1/24 area 0switch(config-router)#exit四、注意事项无本手册版权为DCN所有，欢迎传阅如果有任何意见或建议，请联系 400-810-9119。
多区OSPF完整配置
（一）基本配置一、交换部分说明: 本部分包括SW35-1和SW35-2上VLAN规划、STP、HSRP的实现，及SW65-1和SW65-2上的相关配置。
1. sw29-1的配置hostname sw29-1interface Vlan1ip address 172.16.10.1 255.255.255.0no ip routingip default-gateway 172.16.10.199 10.201 10.200 用于网络测试说明：本处将SW29-1模拟一个节点，进行测试。
第一步，将SW29-1网关设为10.199, SW29-2网关设为30.199, 进行测试。
通！第二步，将SW29-1网关设为10.201, SW29-2网关设为30.201, 进行测试。
通！第三步，将SW29-1网关设为10.200, SW29-2网关设为30.200, 进行测试。
不一定通，这是本虚拟机自身的一个问题。
只要SW35-1成为VLAN10,20的主网关，SW35-2成为VLAN30,40的主网关就行了。
2. sw29-2的配置hostname sw29-2vtp domain richvtp pass ciscovtp mode clientint range f1/1 - 2sw trunk encap dot1qsw mode trunkinterface Vlan30ip address 172.16.30.2 255.255.255.0no ip routingip default-gateway 172.16.30.199 30.201 30.200 用于网络测试说明：由于用SW29-2来模拟一个主机进行测试，因此只能设置一个IP（路由器可以设多个），这里把它作为VLAN30的一个主机30.2, 网关设为30.199 。
3. sw35-1的配置hostname sw35-1no ip domain lookupvtp domain richvtp pass ciscovtp mode servervlan 10vlan 20vlan 30vlan 40exitspanning-tree vlan 10 priority 4096 spanning-tree vlan 20 priority 4096 spanning-tree vlan 30 priority 8192 spanning-tree vlan 40 priority 8192interface Port-channel1switchport mode trunkinterface FastEthernet1/1no switchportip address 192.168.1.1 255.255.255.0interface FastEthernet1/2no switchportip address 192.168.2.1 255.255.255.0interface FastEthernet1/3switchport mode trunkchannel-group 1 mode oninterface FastEthernet1/4switchport mode trunkchannel-group 1 mode oninterface FastEthernet1/5switchport mode trunkinterface FastEthernet1/6switchport access vlan 10interface Vlan10ip address 172.16.10.199 255.255.255.0 standby 1 ip 172.16.10.200standby 1 priority 150standby 1 preemptstandby 1 authentication 123standby 1 track FastEthernet1/1 30 standby 1 track FastEthernet1/2 30interface Vlan20ip address 172.16.20.199 255.255.255.0 standby 2 ip 172.16.20.200standby 2 priority 150standby 2 preemptstandby 2 authentication 123standby 2 track FastEthernet1/1 30 standby 2 track FastEthernet1/2 30interface Vlan30ip address 172.16.30.199 255.255.255.0 standby 3 ip 172.16.30.200standby 3 preemptstandby 3 authentication 123interface Vlan40ip address 172.16.40.199 255.255.255.0 standby 4 ip 172.16.40.200standby 4 preemptstandby 4 authentication 123line con 0exec-timeout 0 0logging synchronous4. sw35-2的配置hostname sw35-2no ip domain lookupvtp domain richvtp pass ciscovtp mode clientspanning-tree vlan 10 priority 8192 spanning-tree vlan 20 priority 8192 spanning-tree vlan 30 priority 4096 spanning-tree vlan 40 priority 4096interface Port-channel1switchport mode trunkinterface FastEthernet1/1no switchportip address 192.168.4.1 255.255.255.0interface FastEthernet1/2no switchportip address 192.168.3.1 255.255.255.0interface FastEthernet1/3switchport mode trunkchannel-group 1 mode oninterface FastEthernet1/4switchport mode trunkchannel-group 1 mode oninterface FastEthernet1/5switchport access vlan 10interface FastEthernet1/6switchport mode trunkinterface Vlan10ip address 172.16.10.201 255.255.255.0 standby 1 ip 172.16.10.200standby 1 preemptstandby 1 authentication 123interface Vlan20ip address 172.16.20.201 255.255.255.0 standby 2 ip 172.16.20.200standby 2 preemptstandby 2 authentication 123interface Vlan30ip address 172.16.30.201 255.255.255.0 standby 3 ip 172.16.30.200standby 3 priority 150standby 3 preemptstandby 3 authentication 123standby 3 track FastEthernet1/1 30standby 3 track FastEthernet1/2 30interface Vlan40ip address 172.16.40.201 255.255.255.0standby 4 ip 172.16.40.200standby 4 priority 150standby 4 preemptstandby 4 authentication 123standby 4 track FastEthernet1/1 30standby 4 track FastEthernet1/2 30line con 0exec-timeout 0 0logging synchronous5. sw65-1的配置说明: 在实际网络应用中SW65-1和SW65-2上应划分VLAN50、60、70、80, 并配置HSRP来实现网关冗余，配置方法同SW35-1和SW35-2. 这里做了简化，用loopback接口来模拟。
实验一 ospf多区域配置
实验一OSPF多区域的配置一．实验目的1.掌握多区域的OSPF配置方法2.区别不同区域的路由3.掌握OSPF的基本配置命令二、实验拓扑图三、实验步骤及要求1.配置各台路由器的IP地址R1(config)#interface loopback 0R1(config-if)#ip address 10.1.1.1 255.255.255.0R1(config)#interface loopback 1R1(config-if)#ip address 10.1.2.1 255.255.255.0R1(config)#interface serial 2/0R1(config-if)#ip address 192.168.1.1 255.255.255.252 R1(config-if)#no shutdownRouter(config)#hostname r2r2(config)#interface serial 2/0r2(config-if)#ip address 192.168.1.2 255.255.255.252 r2(config-if)#clock rate 64000r2(config-if)#no shutdownr2(config-if)#exitr2(config)#interface serial 3/0r2(config-if)#ip address 192.168.1.5 255.255.255.252 r2(config-if)#clock rate 64000r2(config-if)#no shutdownr2(config-if)#exitRouter(config)#hostname r3r3(config)#interface serial 3/0r3(config-if)#ip address 192.168.1.6 255.255.255.252 r3(config-if)#exitr3(config)#interface serial 3/0r3(config-if)#no shutdownr3(config)#interface serial 2/0r3(config-if)#ip address 192.168.1.9 255.255.255.252r3(config-if)#clock rate 64000r3(config-if)#no shutdownRouter(config)#hostname r4r4(config)#interface serial 2/0r4(config-if)#ip address 192.168.1.10 255.255.255.252r4(config-if)#no shutdownr4(config-if)#exitr4(config)#interface loopback 0r4(config-if)#ip address 172.16.1.1 255.255.255.0r4(config-if)#exitr4(config)#interface loopback 1r4(config-if)#ip address 172.16.2.1 255.255.255.02.在r1上进行area1区域OSPF配置Router(config)#hostname r1r1(config)#router ospf 1r1(config-router)#network 10.1.2.0 0.0.0.255 area 1r1(config-router)#network 10.1.1.0 0.0.0.255 area 1r1(config-router)#network 192.168.1.0 0.0.0.3 area 1r1(config-router)#exit3.在r2上进行area1与area0的区域边界路由器(ABR)的OSPF配置r2(config)#router ospf 1r2(config-router)#network 192.168.1.0 0.0.0.3 area 1r2(config-router)#network 192.168.1.4 0.0.0.3 area 0r2(config-router)#exit4. 在r4上进行area2区域OSPF配置r4(config)#router ospf 1r4(config-router)#network 172.16.1.0 0.0.0.255 area 2r4(config-router)#network 172.16.2.0 0.0.0.255 area 2r4(config-router)#network 192.168.1.8 0.0.0.3 area 2r4(config-router)#exit在r3上进行area2与area0的区域边界路由器(ABR)的OSPF配置r3(config)#router ospf 1r3(config-router)#network 192.168.1.8 0.0.0.3 area 2r3(config-router)#network 192.168.1.4 0.0.0.3 area 0r3(config-router)#exit5. 在任一路由器上查看OSPF邻居表r2#show ip ospf neighborNeighbor ID Pri State Dead Time Address Interface 10.1.2.1 0 FULL/ - 00:00:38 192.168.1.1 Serial2/0 192.168.1.9 0 FULL/ - 00:00:39 192.168.1.6 Serial3/0R2路由器已经成功与r1和r3路由器建立邻居关系6.查看r1的路由表，观察其他区域的路由r1#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGPD - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGPi - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area* - candidate default, U - per-user static route, o - ODRP - periodic downloaded static routeGateway of last resort is not set10.0.0.0/24 is subnetted, 2 subnetsC 10.1.1.0 is directly connected, Loopback0C 10.1.2.0 is directly connected, Loopback1172.16.0.0/32 is subnetted, 2 subnetsO IA 172.16.1.1 [110/2344] via 192.168.1.2, 00:00:05, Serial2/0O IA 172.16.2.1 [110/2344] via 192.168.1.2, 00:00:05, Serial2/0192.168.1.0/30 is subnetted, 3 subnetsC 192.168.1.0 is directly connected, Serial2/0O IA 192.168.1.4 [110/1562] via 192.168.1.2, 00:00:05, Serial2/0O IA 192.168.1.8 [110/2343] via 192.168.1.2, 00:00:05, Serial2/07.查看r1的OSPF链路状态数据库r1#show ip ospf databaseOSPF Router with ID (10.1.2.1) (Process ID 1)Router Link States (Area 1)Link ID ADV Router Age Seq# Checksum Link count 10.1.2.1 10.1.2.1 310 0x80000007 0x00463f 4192.168.1.5 192.168.1.5 310 0x80000006 0x00164a 2Summary Net Link States (Area 1)Link ID ADV Router Age Seq# Checksum192.168.1.4 192.168.1.5 845 0x80000001 0x00fe75192.168.1.8 192.168.1.5 518 0x80000002 0x0072ec172.16.1.1 192.168.1.5 518 0x80000003 0x00fe0f8.在r1上使用ping命令确认路由的有效性r1#ping 172.16.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 78/87/94 ms9.查看r4的路由表和ospf的链路状态数据库r4#show ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGPD - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGPi - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area* - candidate default, U - per-user static route, o - ODRP - periodic downloaded static routeGateway of last resort is not set10.0.0.0/32 is subnetted, 2 subnetsO IA 10.1.1.1 [110/2344] via 192.168.1.9, 00:23:31, Serial2/0O IA 10.1.2.1 [110/2344] via 192.168.1.9, 00:23:31, Serial2/0172.16.0.0/24 is subnetted, 2 subnetsC 172.16.1.0 is directly connected, Loopback0C 172.16.2.0 is directly connected, Loopback1192.168.1.0/30 is subnetted, 3 subnetsO IA 192.168.1.0 [110/2343] via 192.168.1.9, 00:23:41, Serial2/0O IA 192.168.1.4 [110/1562] via 192.168.1.9, 00:27:24, Serial2/0C 192.168.1.8 is directly connected, Serial2/0r4#show ip ospf databaseOSPF Router with ID (172.16.2.1) (Process ID 1)Router Link States (Area 2)Link ID ADV Router Age Seq# Checksum Link count 172.16.2.1 172.16.2.1 34 0x80000005 0x00feff 4192.168.1.9 192.168.1.9 14 0x80000004 0x00feff 2Summary Net Link States (Area 2)Link ID ADV Router Age Seq# Checksum192.168.1.0 192.168.1.9 1590 0x80000005 0x00a4bb10.1.1.1 192.168.1.9 1580 0x80000007 0x00d5e1 192.168.1.4 192.168.1.9 9 0x80000008 0x00f206。
实验4 配置多区域OSPF
实验4 配置多区域OSPF一、初始配置：R1(config-line)#int s2/1R1(config-if)#ip add 12.0.0.1 255.255.255.0R1(config-if)#no shR1(config-if)#int lo0R1(config-if)#ip add 1.1.1.1 255.255.255.0R2(config-if)#int s2/2R2(config-if)#ip add 23.0.0.2 255.255.255.0R2(config-if)#no shR2(config-if)#int s2/1R2(config-if)#ip add 12.0.0.2 255.255.255.0R2(config-if)#no shR2(config-if)#int lo0R2(config-if)#ip add 2.2.2.2R3(config-line)#int s2/2R3(config-if)#ip add 34.0.0.3 255.255.255.0R3(config-if)#no shR3(config-if)#int s2/1R3(config-if)#ip add 23.0.0.3 255.255.255.0R3(config-if)#no shR3(config-if)#int lo0R3(config-if)#ip add 3.3.3.3 255.255.255.0R4(config-line)#int s2/1R4(config-if)#ip add 34.0.0.4 255.255.255.0R4(config-if)#no shR4(config-if)#int lo0R4(config-if)#ip add 4.4.4.4 255.255.255.0二、实验配置：//配置R1R1(config-if)#router os 1R1(config-router)#network 12.0.0.1 255.255.255.255 area 1R1(config-router)#network 1.1.1.1 255.255.255.255 area 1//配置R2R2(config-if)#router os 1R2(config-router)#net 12.0.0.2 255.255.255.255 a 1R2(config-router)#net 23.0.0.2 255.255.255.255 a 0R2(config-router)#net 2.2.2.2 255.255.255.255 a 0//配置R3R3(config-if)#router os 1R3(config-router)#net 23.0.0.3 255.255.255.255 a 0R3(config-router)#net 34.0.0.3 255.255.255.255 a 2R3(config-router)#net 3.3.3.3 255.255.255.255 a 0//配置R4R4(config)#router os 1R4(config-router)#net 34.0.0.4 255.255.255.255 a 2R4(config-router)#net 4.4.4.4 255.255.255.255 a 2三、调试1.查看OSPF邻居//查看R1的OSPF邻居R1(config-router)#do sh ip os neNeighbor ID Pri State Dead Time Address Interface2.2.2.2 0 FULL/ - 00:00:39 12.0.0.2 Serial2/1//查看R2的OSPF邻居R2(config-router)#do sh ip os neNeighbor ID Pri State Dead Time Address Interface3.3.3.3 0 FULL/ - 00:00:32 23.0.0.3 Serial2/21.1.1.1 0 FULL/ - 00:00:30 12.0.0.1 Serial2/1//查看R3的OSPF邻居R3(config-router)#do sh ip os neNeighbor ID Pri State Dead Time Address Interface2.2.2.2 0 FULL/ - 00:00:36 23.0.0.2 Serial2/14.4.4.4 0 FULL/ - 00:00:31 34.0.0.4 Serial2/2//查看R4的OSPF邻居R4(config-router)#do sh ip os neNeighbor ID Pri State Dead Time Address Interface3.3.3.3 0 FULL/ - 00:00:33 34.0.0.3 Serial2/1 2.查看链路状态数据库//查看R1上的链路状态数据库R1(config-router)#do sh ip os daOSPF Router with ID (1.1.1.1) (Process ID 1)Router Link States (Area 1)Link ID ADV Router Age Seq# Checksum Link count1.1.1.1 1.1.1.1 762 0x80000003 0x00F46F 32.2.2.2 2.2.2.2 749 0x80000002 0x00561E 2Summary Net Link States (Area 1)Link ID ADV Router Age Seq# Checksum2.2.2.2 2.2.2.2 631 0x80000001 0x00FA313.3.3.3 2.2.2.2 641 0x80000001 0x004F984.4.4.4 2.2.2.2 669 0x80000001 0x00A3FF23.0.0.0 2.2.2.2 745 0x80000001 0x00A33A34.0.0.0 2.2.2.2 708 0x80000001 0x0096FB//查看R2上的链路状态数据库R2(config-router)#do sh ip os daOSPF Router with ID (2.2.2.2) (Process ID 1)Router Link States (Area 0)Link ID ADV Router Age Seq# Checksum Link count2.2.2.2 2.2.2.2 770 0x80000003 0x008EAD 33.3.3.3 3.3.3.3 782 0x80000003 0x002C07 3Summary Net Link States (Area 0)Link ID ADV Router Age Seq# Checksum1.1.1.12.2.2.2 885 0x80000001 0x00AB444.4.4.4 3.3.3.3 806 0x80000001 0x0003DC12.0.0.0 2.2.2.2 885 0x80000001 0x0033B534.0.0.0 3.3.3.3 844 0x80000001 0x00F5D8Router Link States (Area 1)Link ID ADV Router Age Seq# Checksum Link count1.1.1.1 1.1.1.1 899 0x80000003 0x00F46F 32.2.2.2 2.2.2.2 884 0x80000002 0x00561E 2Summary Net Link States (Area 1)Link ID ADV Router Age Seq# Checksum2.2.2.2 2.2.2.2 766 0x80000001 0x00FA313.3.3.3 2.2.2.2 778 0x80000001 0x004F984.4.4.4 2.2.2.2 806 0x80000001 0x00A3FF23.0.0.0 2.2.2.2 882 0x80000001 0x00A33A34.0.0.0 2.2.2.2 845 0x80000001 0x0096FB3.查看路由表//查看R1上的路由表R1(config-router)#do sh ip rouCodes: C - connected, S - static, R - RIP, M - mobile, B - BGPD - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2E1 - OSPF external type 1, E2 - OSPF external type 2i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2ia - IS-IS inter area, * - candidate default, U - per-user static routeo - ODR, P - periodic downloaded static routeGateway of last resort is not set34.0.0.0/24 is subnetted, 1 subnetsO IA 34.0.0.0 [110/192] via 12.0.0.2, 00:16:01, Serial2/11.0.0.0/24 is subnetted, 1 subnetsC 1.1.1.0 is directly connected, Loopback02.0.0.0/32 is subnetted, 1 subnetsO IA 2.2.2.2 [110/65] via 12.0.0.2, 00:14:44, Serial2/13.0.0.0/32 is subnetted, 1 subnetsO IA 3.3.3.3 [110/129] via 12.0.0.2, 00:14:54, Serial2/14.0.0.0/32 is subnetted, 1 subnetsO IA 4.4.4.4 [110/193] via 12.0.0.2, 00:15:22, Serial2/123.0.0.0/24 is subnetted, 1 subnetsO IA 23.0.0.0 [110/128] via 12.0.0.2, 00:16:38, Serial2/112.0.0.0/24 is subnetted, 1 subnetsC 12.0.0.0 is directly connected, Serial2/1//查看R2上的路由表34.0.0.0/24 is subnetted, 1 subnetsO IA 34.0.0.0 [110/128] via 23.0.0.3, 00:16:09, Serial2/21.0.0.0/32 is subnetted, 1 subnetsO 1.1.1.1 [110/65] via 12.0.0.1, 00:18:03, Serial2/12.0.0.0/24 is subnetted, 1 subnetsC 2.2.2.0 is directly connected, Loopback03.0.0.0/32 is subnetted, 1 subnetsO 3.3.3.3 [110/65] via 23.0.0.3, 00:16:09, Serial2/24.0.0.0/32 is subnetted, 1 subnetsO IA 4.4.4.4 [110/129] via 23.0.0.3, 00:16:09, Serial2/223.0.0.0/24 is subnetted, 1 subnetsC 23.0.0.0 is directly connected, Serial2/212.0.0.0/24 is subnetted, 1 subnetsC 12.0.0.0 is directly connected, Serial2/1通过本实验，掌握了多区域OSPF的基本配置，应注意各非0区域必须与0区域相连，否则可能导致无法同步数据库，不能正常路由。
神州数码网络设备配置命令集合
网路信息安全技能大赛网络搭建部分资料整理第一部分：交换机配置：1.基本配置：开启SSH服务：debug ssh-server设置特权模式密码：enable password [8] <password> 注释：8为加密的密码设置退出特权模式超时时间：：exec-timeout <minutes > [<seconds>]Switch(config)#exec-timeout 5 30（退出时间为5分30秒）更改主机名：hostname 主机名设置主机名与IP地址的映射关系：Switch(config)#ip host beijing 200.121.1.1（beijing为主机）开启web配置服务：Switch(config)#ip http serve显示帮户信息的语言类型：language {chinese|english}使用密码验证：login使用本地用户密码验证：Switch(config)#login local设置用户在console上进入一般用户配置模式时的口令：Switch(config)#password 8 test热启动交换机：reload加密系统密码：service password-encryption恢复交换机出厂配置：set default保存当前配置：write配置交换机作为Telnet 服务器允许登录的Telnet 客户端的安全IP 地址：Switch(config)#telnet-server securityip 192.168.1.21设置Telnet 客户端的用户名及口令：Switch(config)#telnet-user Antony password 0 switch打开交换机的SSH服务器功能：Switch(config)#ssh-server enable设置SSH客户端的用户名及口令：Switch(config)#ssh-user switch password 0 switch通过DHCP 方式获取IP 地址。
多区域OSPF路由协议配置
实验四多区域OSPF路由协议配置一、实验目的1．掌握OSPF路由协议的配置方法；2．掌握OSPF末节区域的配置。
3．掌握OSPF绝对末节区域的配置二、实验说明1．本实验并非自行设计实验，学生必须按拓扑图指示连接各设备，并完成相关配置，按步骤完成实验；2．掌握OSPF路由协议的配置方法3．掌握末节区域与绝对末节区域三、实验拓扑Pc0Pc1四、实验步骤（所有2层配置省略）R1上的配置：R1<config>#router ospf 100R1<config-router>#network 192.168.12.0 0.0.0.255 area 0R1<config-router>#network 192.168.13.0 0.0.0.255 area 0R2上的配置：R2<config>#router ospf 100R2<config-router>#network 192.168.12.0 0.0.0.255 area 0R2<config-router>#network 192.168.23.0 0.0.0.255 area 0R2<config-router>#network 192.168.24.0 0.0.0.255 area 1 /*边界路由器*/R2<config-router>#area 1 stub /*1区域为末节区域*/ R3上的配置：R3<config>#router ospf 100R3<config-router>#network 192.168.13.0 0.0.0.255 area 0R3<config-router>#network 192.168.23.0 0.0.0.255 area 0R3<config-router>#network 192.168.37.0 0.0.0.255 area 2 /*边界路由器*/R3<config-router>#area 2 stub no-summary /*2区域为绝对末节区域*/ R7上的配置：R7<config>#router ospf 100R7<config-router>#network 192.168.37.0 0.0.0.255 area 2R7<config-router>#network 192.168.70.0 0.0.0.255 area 2R7<config-router>#area 2 stub no-summaryR4上的配置：R4<config>#router ospf 100R4<config-router>#network 192.168.24.0 0.0.0.255 area 1R4<config-router>#network 192.168.45.0 0.0.0.255 area 1R4<config-router>#network 192.168.46.0 0.0.0.255 area 1R4<config-router>#area 1 stubR5上的配置：R5<config>#router ospf 100R5<config-router>#network 192.168.45.0 0.0.0.255 area 1R5<config-router>#network 192.168.56.0 0.0.0.255 area 1R5<config-router>#network 192.168.50.0 0.0.0.255 area 1R5<config-router>#area 1 stubR6上的配置：R6<config>#router ospf 100R6<config-router>#network 192.168.56.0 0.0.0.255 area 1R6<config-router>#network 192.168.46.0 0.0.0.255 area 1R6<config-router>#network 192.168.60.0 0.0.0.255 area 1R6<config-router>#area 1 stub五、实验结果1.末节区域路由2.绝对末节区域路由3.连通性测试。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
五、 实验要求
配置表
Router-A
Router-B
S1/1(DCE) 192.168.1.1 S/1/0(DTE) 192.168.1.2 F0/0
F0/0
192.168.0.1 F0/0
192.168.2.1 E1/0
路由器 B 为 ABR
六、 实验步骤
第一步：参照实验三和上表配置各接口地址，并测试连通性 第二步：路由器 A 的配置 Router-A#conf Router-A_config#router ospf 100
第四步：路由器 C 的配置 Router-C#conf Router-C_config#router ospf 100 Router-C_config_ospf_100#network 192.168.2.0 255.255.255.0 area 0 Router-C_config_ospf_100#network 192.168.3.0 255.255.255.0 area 0 Router-C_config_ospf_100#^Z
九、 共同思考
1. 为什么必须有 area 0 存在？ 2. 在路由器 A 和 C 宣告网段的时候有其他的方法吗？
十、 课后练习
请将地址改为 10.0.0.0/25 重复以上实验
十一、 相关命令详解
network area
将一个区域中几个网段定义成一个网络范围， no network 命令取消网络范围。 network network mask area area_id [ advertise | not-advertise ] [ no ] network network mask area area_id [ advertise | not-advertise ]
O IA 192.168.0.0/24 O IA 192.168.1.1/32 O IA 192.168.1.2/32 C 192.168.2.0/24 C 192.168.3.0/24
[110,1602] via 192.168.2.1(on FastEthernet0/0) [110,1601] via 192.168.2.1(on FastEthernet0/0) [110,3201] via 192.168.2.1(on FastEthernet0/0) is directly connected, FastEthernet0/0 is directly connected, Ethernet1/0
VRF ID: 0
O
192.168.0.0/24
[110,1601] via 192.168.1.1(on Serial1/0)
C
192.168.1.0/24
C
192.168.2.0/24
O
192.168.3.0/24
is directly connected, Serial1/0 is directly connected, FastEthernet0/0 [110,11] via 192.168.2.2(on FastEthernet0/0)
参数
参数 network mask
参数说明 网络IP地址，点分十进制格式。 掩码，点分十进制格式。
area_id
advertise notadvertise
为区域号。 和 指定是否将到这一网络范围路由的摘要信息广播出去。
缺省 系统缺省没有配置网络范围。
命令模式 路由配置态
使用说明 一旦将某一网络的范围加入到区域中，到区域中所有落在这一范围内的 IP 地址的内部路由 都不再被独立地广播到别的区域，而只是广播整个网络范围路由的摘要信息。引入网络范围 和对该范围的限定，可以减少区域间路由信息的交流量。
VRF ID: 0
C C O IA O IA
192.168.0.0/24 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24
is directly connected, FastEthernet0/0 is directly connected, Serial1/1 [110,1601] via 192.168.1.2(on Serial1/1) [110,1611] via 192.168.1.2(on Serial1/1)
！对 ABR 来说是区域内的路由
Router-C#sh ip route Codes: RIP, B - BGP
D - DEIGRP, DEX - external DEIGRP, O - OSPF, OIA - OSPF inter area ON1 - OSPF NSSA external type 1, ON2 - OSPF NSSA external type 2 OE1 - OSPF external type 1, OE2 - OSPF external type 2
Router-C 192.168.2.2 192.168.3.1
Router-A_config_ospf_100#network 192.168.0.0 255.255.255.0 area 1 Router-A_config_ospf_100#network 192.168.1.0 255.255.255.0 area 1 Router-A_config_ospf_100#^Z
ip address 192.168.2.1 255.255.255.0 no ip directed-broadcast ! interface Serial1/0 ip address 192.168.1.2 255.255.255.0 no ip directed-broadcast ! interface Async0/0 no ip address no ip directed-broadcast ! ! ! router ospf 100 network 192.168.1.0 255.255.255.0 area 1 network 192.168.2.0 255.255.255.0 area 0 ! ! !
实验二十六、多区域 OSPF 配置
一、 实验目的
1. 掌握多区域 OSPF 的配置 2. 理解 OSPF 区域的意义
二、 应用环境
在大规模网络中，我们通常划分区域减少资源消耗，并将拓扑的变化本地化。
三、 实验设备
1. DCR-1751 2. CR-V35MT 3. CR-V35FC
三台 一条 一条
四、 实验拓扑
示例 定义网络范围 10.0.0.0 255.0.0.0 加入到区域 2 中。
router_config_ospf_10#network 10.0.0.0 255.0.0.0 area 2
！区域间的路由
七、 注意事项和排错
1. 区域的划分在接口上进行 2. 必须有 area 0 存在
八、 配置序列
Router-B#sh run Building configuration...
Current configuration: ! !version 1.3.2E service timestamps log date service timestamps debug date no service password-encryption ! hostname Router-B ! ip host a 192.168.1.1 ip host c 192.168.2.2 ! ! ! ! ! ! interface FastEthernet0/0
！区域间的路由
Router-B#sh ip route Codes: C - connected, S - static, R - RIP, B - BGP, BC - BGP connected
D - DEIGRP, DEX - external DEIGRP, O - OSPF, OIA - OSPF inter area ON1 - OSPF NSSA external type 1, ON2 - OSPF NSSA external type 2 OE1 - OSPF external type 1, OE2 - OSPF external type 2 DHCP - DHCP type
第三步：路由器 B 的配置 Router-B#conf Router-B_config#router ospf 100 Router-B_config_ospf_100#network 192.168.1.0 255.255.255.0 area 1
！注意区域的划分在接口上 Router-B_config_ospf_100#network 192.168.2.0 255.255.255.0 area 0 Router-B_config_ospf_100#^Z
第五步：查看路由表 Router-A#sh ip route Codes: C - connected, S - static, R - RIP, B - BGP, BC - BGP connected
D - DEIGRP, DEX - external DEIGRP, O - OSPF, OIA - OSPF inter area ON1 - OSPF NSSA external type 1, ON2 - OSPF NSSA external type 2 OE1 - OSPF external type 1, OE2 - OSPF external type 2 DHCP - DHCP type