环境:华为模拟器
实验要求
1.搭建拓扑
2.给各个路由器接口配置IP地址
R1:
R2:
R3:
R4:
R5:
R6:
3.公网通,添加缺省路由
R1缺省路由
[R1]ip route-static 0.0.0.0 0 16.1.1.2
[R1]ip route-static 0.0.0.0 0 66.1.1.2
R2缺省路由
[R2]ip route-static 0.0.0.0 0 26.1.1.2
R3缺省路由
[R3]ip route-static 0.0.0.0 0 36.1.1.2
R4缺省路由
[R4]ip route-static 0.0.0.0 0 46.1.1.2
R5缺省路由
[R5]ip route-static 0.0.0.0 0 56.1.1.2
测试ping通性:
(公网通!)
4.R1/2/3为星型拓扑,R1为中心站点
R1中心站点:
[R1]int Tunnel 0/0/0 //创建通道接口
[R1-Tunnel0/0/0]ip add 10.1.1.1 24//配置IP地址
[R1-Tunnel0/0/0]tunnel-protocol gre p2mp //修改接口模式为点到多点
[R1-Tunnel0/0/0]nhrp entry multicast dynamic //本地成为NHRP中心,同时可以进行伪广播
[R1-Tunnel0/0/0]source 16.1.1.1 //定义公有源IP地址
[R1-Tunnel0/0/0]nhrp network-id 100 //默认为0。该网段内所有节点的tunnel接口必须为相同域
R2分支站点:
[R2-Tunnel0/0/0]dis this //显示当前配置
[V200R003C00]
#
interface Tunnel0/0/0
ip address 10.1.1.2 255.255.255.0
tunnel-protocol gre p2mp
source GigabitEthernet0/0/0
nhrp network-id 100
nhrp entry 10.1.1.1 16.1.1.1 register
#
return
R3分支站点:
[R3-Tunnel0/0/0]dis this
[V200R003C00]
#
interface Tunnel0/0/0
ip address 10.1.1.3 255.255.255.0
tunnel-protocol gre p2mp
source GigabitEthernet0/0/0
nhrp network-id 100
nhrp entry 10.1.1.1 16.1.1.1 register
#
return
查看分支站点注册结果:
检测MGRE的ping通性:
(ping 通了!)
5.R1/4/5为全连拓扑
[全连网络拓扑互为中心站点和分站点;该网段内所有节点均能和其他节点通讯,故可以和以太网一样,启动OSPF时,可正常进行DR/BDR选举]
R1配置:
[R1]int Tunnel 0/0/2
[R1-Tunnel0/0/2]ip add 10.1.2.1 24
[R1-Tunnel0/0/2]tunnel-protocol gre p2mp
[R1-Tunnel0/0/2]source 66.1.1.1
[R1-Tunnel0/0/2]nhrp network-id 100
[R1-Tunnel0/0/2]nhrp entry multicast dynamic
[R1-Tunnel0/0/2]nhrp entry 10.1.2.2 56.1.1.1 register
[R1-Tunnel0/0/2]nhrp entry 10.1.2.3 46.1.1.1 register
R4配置:
[R4]int Tunnel 0/0/0
[R4-Tunnel0/0/0]ip add 10.1.2.3 24
[R4-Tunnel0/0/0]tunnel-protocol gre p2mp
[R4-Tunnel0/0/0]nhrp network-id 100
[R4-Tunnel0/0/0]source 46.1.1.1
[R4-Tunnel0/0/0]nhrp entry multicast dynamic
[R4-Tunnel0/0/0]nhrp entry 10.1.2.2 56.1.1.1 register
[R4-Tunnel0/0/0]nhrp entry 10.1.2.1 66.1.1.1 register
R5配置:
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ip add 10.1.2.2 24
[R5-Tunnel0/0/0]tunnel-protocol gre p2mp
[R5-Tunnel0/0/0]source 56.1.1.1
[R5-Tunnel0/0/0]nhrp network-id 100
[R5-Tunnel0/0/0]nhrp entry multicast dynamic
[R5-Tunnel0/0/0]nhrp entry 10.1.2.1 66.1.1.1 register
[R5-Tunnel0/0/0]nhrp entry 10.1.2.3 46.1.1.1 register
测试ping 通性:
(全连网络拓扑搭建成功!)
6.所有私有网段可以互相通讯,私有网段使用OSPF协议完成!
R1开启OSPF:
[R1]ospf 1 ro
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 10.1.1.1 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 192.168.1.1 0.0.0.0
R2开启OSPF:
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 10.1.1.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 192.168.2.1 0.0.0.0
R3开启OSPF:
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 10.1.1.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 192.168.3.1 0.0.0.0
R4开启OSPF:
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 192.168.4.1 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 10.1.2.3 0.0.0.0
R5开启OSPF:
[R5]ospf 1 router-id 5.5.5.5
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 10.1.2.2 0.0.0.0
[R5-ospf-1-area-0.0.0.0]network 192.168.5.1 0.0.0.0
这些Tunnel接口类型都为点到点类型,每个接口只允许建立一个邻居。
因此:所有Tunnel接口类型修改为broadcast,这样才能建立更多邻居。
R1
[R1]int Tunnel 0/0/0
[R1-Tunnel0/0/0]ospf network-type broadcast
[R1]int Tunnel 0/0/2
[R1-Tunnel0/0/2]ospf network-type broadcast
R2
[R2]int Tunnel 0/0/0
[R2-Tunnel0/0/0]ospf network-type broadcast
R3
[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ospf network-type broadcast
R4
[R4]int Tunnel 0/0/0
[R4-Tunnel0/0/0]ospf network-type broadcast
R5
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ospf network-type broadcast
由于R2和R3,只与R1连接,R2和R3没有直接联系,会导致这个网段DR/DBR选举结果不一致,网络无法正常收敛;
解决方法:R2,R3放弃选举,R1为DR,没有BDR
[R2-Tunnel0/0/0]ospf dr-priority 0
在R1上查看由OSPF产生的路由
测试ping通性
(实验成功!!!)
(点到点工作方式只允许建立一个邻居)
Huawei逻辑 | R2先发送hello包,R1和R2建邻 |
---|---|
Cisco 逻辑 | R2发hello,R1和R2建立邻;R3来hello,R1和R2断,R1和R3建邻;R2再发送hello,R1和R3断,R1和R2建邻; |
掩码32位的路由是主机路由,只能带到一个IP而不是一个网段
[R1]ip route-static 1.1.1.1 32 123.1.1.1
主机路由 一个IP地址