CCNP之OSPF实验案例

CCNP之OSPF实验案例实验要求：1、总部和分部之间通过帧中继实现互访，协议要求采用OSPF。

要求帧中继不能动态获取映射，也不能静态配置映射2、配置好OSPF协议，验证邻居建立3、确保整个内网全网可达4、确保骨干区域高安全性5、尽量减少网关路由表条目6、R1、R3、R9性能不足，尽量减少其路由条目7、确保总部和分部都只通过自己的ISP上网8、不能出现主机路由实验拓扑：实验步骤：1、帧中继的配置：由于不能配置帧中继动态和静态映射，所以只能采用点对点子接口模式进行配置，在接口下声明自己的DLCI。

其中R5的Route-ID是1.1.1.1，R6的Route-ID是2.2.2.2。

由于是点对点连接，所以不存在DR和BDR。

FR-SW：FR-SW(config)#frame-relay switchingFR-SW(config)#int s0/0FR-SW(config)#no shutFR-SW(config-if)#encapsulation frame-relayFR-SW(config-if)#clock rate 64000FR-SW(config-if)#frame-relay intf-type dceFR-SW(config-if)#frame-relay route 102 int s0/1 201FR-SW(config)#int s0/1FR-SW(config)#no shutFR-SW(config-if)#encapsulation frame-relayFR-SW(config-if)#clock rate 64000FR-SW(config-if)#frame-relay intf-type dceFR-SW(config-if)#frame-relay route 201 int s0/0 102R5：R5(config)#int s2/1R5(config-if)#no shutR5(config-if)#encapsulation frame-relayR5(config)#int s2/1.1 point-to-pointR5(config-subif)#ip add 172.16.10.1 255.255.255.0R5(config-subif)#frame-relay int-dlci 102R5(config-subif)#no frame-relay inverse-arpR6：R6(config)#int s1/1R6(config-if)#no shutR6(config-if)#encapsulation frame-relayR6(config-if)#ip add 172.16.10.2 255.255.255.0R6(config-if)# frame-relay int-dlci 201R6(config-if)#no frame-relay inverse-arp测试帧中继连接情况：FR-SW#show frame-relay rouInput Intf Input Dlci Output Intf Output Dlci StatusSerial0/0 102 Serial0/1 201 activeSerial0/1 201 Serial0/0 102 activeR6#show ip ospf intSerial1/1.1 is up, line protocol is upInternet Address 172.16.10.2/24, Area 0Process ID 1, Router ID 2.2.2.2, Network Type POINT_TO_POINT, Cost: 64 Transmit Delay is 1 sec, State POINT_TO_POINT,Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5oob-resync timeout 40Hello due in 00:00:09Supports Link-local Signaling (LLS)Index 1/1, flood queue length 0Next 0x0(0)/0x0(0)Last flood scan length is 1, maximum is 6Last flood scan time is 0 msec, maximum is 4 msecNeighbor Count is 1, Adjacent neighbor count is 1Adjacent with neighbor 1.1.1.1Suppress hello for 0 neighbor(s)R5#show ip os nei detailNeighbor 2.2.2.2, interface address 172.16.10.2In the area 0 via interface Serial2/1.1Neighbor priority is 0, State is FULL, 12 state changesDR is 0.0.0.0 BDR is 0.0.0.0Options is 0x52LLS Options is 0x1 (LR)Dead timer due in 00:00:35Neighbor is up for 00:35:14Index 2/2, retransmission queue length 0, number of retransmission 3 First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)Last retransmission scan length is 1, maximum is 1Last retransmission scan time is 0 msec, maximum is 0 msec2、全网启用OSPF 协议（配置端口IP 和环回口步骤省略）R1：R1(config)#router ospf 1R1(config-router)#net 172.16.1.1 0.0.0.0 a 1R1(config-router)#net 172.16.2.1 0.0.0.0 a 1R1(config-router)#net 172.16.3.2 0.0.0.0 a 1R1(config-router)#area 1 stub //配置区域1 为末节路由R2：R2(config)#router ospf 1R2(config-router)#net 172.16.3.1 0.0.0.0 a 1R2(config-router)#net 172.16.8.2 0.0.0.0 a 0R2(config-router)#area 1 stubR3：R3(config)#router ospf 1R3(config-router)#net 172.16.4.1 0.0.0.0 a 2R3(config-router)#net 172.16.5.1 0.0.0.0 a 2R3(config-router)#net 172.16.6.2 0.0.0.0 a 2R3(config-router)#area 2 stub //配置区域2 为末节路由R4：R4(config)#router ospf 1R4(config-router)#net 172.16.6.1 0.0.0.0 a 2R4(config-router)#net 172.16.9.2 0.0.0.0 a 0R4(config-router)#area 2 stubR5：R5(config)#router ospf 1R5(config-router)#net 172.16.8.1 0.0.0.0 a 0R5(config-router)#net 172.16.9.1 0.0.0.0 a 0R5(config-router)#net 172.16.10.1 0.0.0.0 a 0R5(config-router)#default-information originate //启用OSPF默认路由R6：R6(config)#router ospf 1R6(config-router)#net 172.16.10.2 0.0.0.0 a 0R6(config-router)#net 10.1.1.1 0.0.0.0 a 3R6(config-router)#default-information originate //启用OSPF默认路由R7：R7(config)#router ospf 1R7(config-router)#net 10.1.1.2 0.0.0.0 a 3R7(config-router)#net 10.1.2.1 0.0.0.0 a 3R7(config-router)#net 10.1.3.1 0.0.0.0 a 3R8：R8(config)#router ospf 1R8(config-router)#net 10.1.3.2 0.0.0.0 a 3R8(config-router)#net 10.1.4.1 0.0.0.0 a 4R8(config-router)#area 4 stub //配置区域4为末节路由R9：R9(config)#router ospf 1R9(config-router)#net 10.1.4.2 0.0.0.0 a 4R9(config-router)#net 10.1.5.1 0.0.0.0 a 4R9(config-router)#area 4 stub因为不能出现主机路由，所以必须在每个环回口下配置OSPF点对点模式: (config-if)#ip ospf network point-to-point验证末节路由：R1#show ip ospfArea 1Number of interfaces in this area is 3It is a stub areaArea has no authenticationSPF algorithm last executed 01:08:53.436 agoSPF algorithm executed 6 timesArea ranges areNumber of LSA 8. Checksum Sum 0x048879Number of opaque link LSA 0. Checksum Sum 0x000000Number of DCbitless LSA 0Number of indication LSA 0Number of DoNotAge LSA 0Flood list length 0R3#show ip ospfArea 2It is a stub areaArea has no authenticationSPF algorithm last executed 01:28:33.156 agoSPF algorithm executed 4 timesArea ranges areNumber of LSA 8. Checksum Sum 0x04C421Number of opaque link LSA 0. Checksum Sum 0x000000 Number of DCbitless LSA 0Number of indication LSA 0Number of DoNotAge LSA 0Flood list length 0R5#show ip ospfArea BACKBONE(0)Number of interfaces in this area is 3Area has no authenticationSPF algorithm last executed 00:46:27.944 agoSPF algorithm executed 21 timesArea ranges areNumber of LSA 13. Checksum Sum 0x07169ENumber of opaque link LSA 0. Checksum Sum 0x000000 Number of DCbitless LSA 0Number of indication LSA 0Number of DoNotAge LSA 4Flood list length 0R9#show ip ospfArea 4Number of interfaces in this area is 2It is a stub areaArea has no authenticationSPF algorithm last executed 00:47:24.176 agoSPF algorithm executed 16 timesArea ranges areNumber of LSA 8. Checksum Sum 0x041E9ENumber of opaque link LSA 0. Checksum Sum 0x000000 Number of DCbitless LSA 0Number of indication LSA 0Number of DoNotAge LSA 0Flood list length 0R7#show ip ospfArea 3This area has transit capabilityArea has no authenticationSPF algorithm last executed 00:47:41.596 agoSPF algorithm executed 12 timesArea ranges areNumber of LSA 14. Checksum Sum 0x0D84E8Number of opaque link LSA 0. Checksum Sum 0x000000Number of DCbitless LSA 0Number of indication LSA 0Number of DoNotAge LSA 0Flood list length 03、启用OSPF区域汇总：因为R1、R3、R9性能不足，以及为了减少网关的路由条目，所以有必要在每个区域的ABR 上进行汇总。