文章
文章用户商铺文档快讯圈子网址导航

OSPFv3配置 、 特殊区域之NSSA 、 OSPF安全认证 、 IPv6协议介绍 、 OSPF 虚链路 、 OSPF 路由汇总

1 案例：配置NSSA区域

1.1 问题

  1. 如图配置设备IP地址和OSPF区域
  2. R4去往ISP，使用的是静态的默认路由
  3. R1去往合作公司，使用的也是静态路由，仅需要访问 PC-1 即可
  4. 区域 123 不允许出现 5类 LSA
  5. 确保 PC-1 和 Server-1 互通

1.2 方案

搭建实验环境，如图-1所示。

OSPFv3配置 、 特殊区域之NSSA 、 OSPF安全认证 、 IPv6协议介绍 、 OSPF 虚链路 、 OSPF 路由汇总图-1

1.3 步骤

实现此案例需要按照如下步骤进行。[hidecontent type=”payshow”]

1）配置终端设备

  1. PC-1：
  2. 192.168.10.1
  3. 255.255.255.0
  4. 192.168.10.254
  5. Server-1:
  6. 192.168.20.1
  7. 255.255.255.0
  8. 192.168.20.254

2）配置IP地址和基本OSPF

  1. <Huawei>undo terminal monitor
  2. <Huawei>system–view
  3. [Huawei]sysname R1
  4. [R1]interface GigabitEthernet 0/0/0
  5. [R1–GigabitEthernet0/0/0]ip address 192.168.12.1 24
  6. [R1–GigabitEthernet0/0/0]quit
  7. [R1]interface GigabitEthernet 0/0/1
  8. [R1–GigabitEthernet0/0/1]ip address 192.168.16.1 24
  9. [R1–GigabitEthernet0/0/1]quit
  10. [R1]ospf 1 router–id 1.1.1.1
  11. [R1–ospf-1]area 123
  12. [R1–ospf-1–area-0.0.0.123]network 192.168.12.0 0.0.0.255
  13. [R1–ospf-1–area-0.0.0.123]quit
  14. [R1–ospf-1]quit
  16. <Huawei>undo terminal monitor
  17. <Huawei>system–view
  18. [Huawei]sysname R2
  19. [R2]interface GigabitEthernet 0/0/1
  20. [R2–GigabitEthernet0/0/1]ip address 192.168.12.2 24
  21. [R2–GigabitEthernet0/0/1]q
  22. [R2]interface GigabitEthernet 0/0/0
  23. [R2–GigabitEthernet0/0/0]ip address 192.168.23.2 24
  24. [R2–GigabitEthernet0/0/0]q
  25. [R2]ospf 1 router–id 2.2.2.2
  26. [R2–ospf-1]area 123
  27. [R2–ospf-1–area-0.0.0.123]network 192.168.12.0 0.0.0.255
  28. [R2–ospf-1–area-0.0.0.123]network 192.168.23.0 0.0.0.255
  29. [R2–ospf-1–area-0.0.0.123]quit
  30. [R2–ospf-1]quit
  32. <Huawei>undo terminal monitor
  33. <Huawei>system–view
  34. [Huawei]sysname R3
  35. [R3]interface GigabitEthernet 0/0/1
  36. [R3–GigabitEthernet0/0/1]ip address 192.168.23.3 24
  37. [R3–GigabitEthernet0/0/1]quit
  38. [R3]interface GigabitEthernet 0/0/0
  39. [R3–GigabitEthernet0/0/0]ip address 192.168.34.3 24
  40. [R3–GigabitEthernet0/0/0]quit
  41. [R3]ospf 1 router–id 3.3.3.3
  42. [R3–ospf-1]area 123
  43. [R3–ospf-1–area-0.0.0.123]network 192.168.23.0 0.0.0.255
  44. [R3–ospf-1–area-0.0.0.123]quit
  45. [R3–ospf-1]area 0
  46. [R3–ospf-1–area-0.0.0.0]network 192.168.34.0 0.0.0.255
  47. [R3–ospf-1]quit
  49. <Huawei>undo terminal monitor
  50. <Huawei>system–view
  51. [Huawei]sysname R4
  52. [R4]interface GigabitEthernet 0/0/1
  53. [R4–GigabitEthernet0/0/1]ip address 192.168.34.4 24
  54. [R4–GigabitEthernet0/0/1]quit
  55. [R4]interface GigabitEthernet 0/0/0
  56. [R4–GigabitEthernet0/0/0]ip address 192.168.45.4 24
  57. [R4–GigabitEthernet0/0/0]quit
  58. [R4]ospf 1 router–id 4.4.4.4
  59. [R4–ospf-1]area 0
  60. [R4–ospf-1–area-0.0.0.0]network 192.168.34.0 0.0.0.255
  61. [R4–ospf-1]quit
  63. <Huawei>undo terminal monitor
  64. <Huawei>system–view
  65. [Huawei]sysname ISP
  66. [ISP]interface GigabitEthernet 0/0/1
  67. [ISP–GigabitEthernet0/0/1]ip address 192.168.45.5 24
  68. [ISP–GigabitEthernet0/0/1]quit
  69. [ISP]interface GigabitEthernet 0/0/2
  70. [ISP–GigabitEthernet0/0/2]ip address 192.168.20.254 24
  71. [ISP–GigabitEthernet0/0/2]quit
  72. [ISP] ip route–static 192.168.0.0 16 192.168.45.4
  75. <Huawei>undo terminal monitor
  76. <Huawei>system–view
  77. [Huawei]sysname R6
  78. [R6]interface GigabitEthernet 0/0/0
  79. [R6–GigabitEthernet0/0/1]ip address 192.168.16.6 24
  80. [R6–GigabitEthernet0/0/1]quit
  81. [R6]interface GigabitEthernet 0/0/2
  82. [R6–GigabitEthernet0/0/2]ip address 192.168.10.254 24
  83. [R6–GigabitEthernet0/0/2]quit
  84. [R6] ip route–static 192.168.0.0 255.255.0.0 192.168.16.1

3）配置区域123为 NSSA 区域

  1. [R1]ospf 1
  2. [R1–ospf-1]area 123
  3. [R1–ospf-1–area-0.0.0.123]nssa
  4. [R1–ospf-1–area-0.0.0.123]quit
  6. [R2]ospf 1
  7. [R2–ospf-1]area 123
  8. [R2–ospf-1–area-0.0.0.123]nssa
  9. [R2–ospf-1–area-0.0.0.123]quit
  11. [R3]ospf 1
  12. [R3–ospf-1]area 123
  13. [R3–ospf-1–area-0.0.0.123]nssa
  14. [R3–ospf-1–area-0.0.0.123]quit

4）配置 R1 引入 合作公司的外部路由

  1. [R1]ip route–static 192.168.10.0 24 192.168.16.6
  2. [R1]ospf 1
  3. [R1–ospf-1]import–route static

5）配置 R4 引入 去往外部网络的路由

  1. [R4]ip route–static 0.0.0.0 0 192.168.45.5
  2. [R4]ospf 1
  3. [R4–ospf-1]default–route–advertise

6）测试 PC1 和 Server-1的连通性

  1. PC-1>ping 192.168.20.1
  2. Ping 192.168.20.1: 32 data bytes, Press Ctrl_C to break
  3. From 192.168.20.1: bytes=32 seq=1 ttl=125 time=31 ms
  4. From 192.168.20.1: bytes=32 seq=2 ttl=125 time=31 ms
  5. From 192.168.20.1: bytes=32 seq=3 ttl=125 time=16 ms
  6. From 192.168.20.1: bytes=32 seq=4 ttl=125 time=16 ms
  7. From 192.168.20.1: bytes=32 seq=5 ttl=125 time=31 ms
  9. — 192.168.20.1 ping statistics —
  10. 5 packet(s) transmitted

2 案例：配置OSPF汇总

2.1 问题

  1. 对区域 12 进行3类LSA汇总，汇总后为 10.10.0.0/16
  2. 对区域 45 的直连链路进行5类汇总，进行精确汇总

2.2 方案

搭建实验环境，如图-2所示。

OSPFv3配置 、 特殊区域之NSSA 、 OSPF安全认证 、 IPv6协议介绍 、 OSPF 虚链路 、 OSPF 路由汇总图-2

2.3 步骤

实现此案例需要按照如下步骤进行。

1）配置IP地址和OSPF

  1. <Huawei>undo terminal monitor
  2. <Huawei>system–view
  3. [Huawei]sysname R1
  4. [R1]interface GigabitEthernet 0/0/0
  5. [R1–GigabitEthernet0/0/0]ip add 192.168.12.1 24
  6. [R1–GigabitEthernet0/0/0]quit
  7. [R1]interface LoopBack 1
  8. [R1–LoopBack1]ip address 10.10.1.1 24
  9. [R1–LoopBack1]quit
  10. [R1]interface LoopBack 2
  11. [R1–LoopBack2]ip address 10.10.2.2 24
  12. [R1–LoopBack2]quit
  13. [R1]interface LoopBack 3
  14. [R1–LoopBack3]ip address 10.10.3.3 24
  15. [R1–LoopBack3]quit
  16. [R1]interface LoopBack 4
  17. [R1–LoopBack4]ip address 10.10.4.4 24
  18. [R1–LoopBack4]quit
  20. [R1]ospf 1 router–id 1.1.1.1
  21. [R1–ospf-1]area 12
  22. [R1–ospf-1–area-0.0.0.12]network 192.168.12.0 0.0.0.255
  23. [R1–ospf-1–area-0.0.0.12]network 10.10.1.0 0.0.0.255
  24. [R1–ospf-1–area-0.0.0.12]network 10.10.2.0 0.0.0.255
  25. [R1–ospf-1–area-0.0.0.12]network 10.10.3.0 0.0.0.255
  26. [R1–ospf-1–area-0.0.0.12]network 10.10.4.0 0.0.0.255
  27. [R1–ospf-1–area-0.0.0.12]quit
  30. <Huawei>undo terminal monitor
  31. <Huawei>system–view
  32. [Huawei]sysname R2
  33. [R2]interface GigabitEthernet 0/0/1
  34. [R2–GigabitEthernet0/0/1]ip add 192.168.12.2 24
  35. [R2–GigabitEthernet0/0/1]quit
  36. [R2]interface GigabitEthernet 0/0/0
  37. [R2–GigabitEthernet0/0/0]ip add 192.168.23.2 24
  38. [R2–GigabitEthernet0/0/0]quit
  39. [R2]ospf 1 router–id 2.2.2.2
  40. [R2–ospf-1]area 12
  41. [R2–ospf-1–area-0.0.0.12]network 192.168.12.0 0.0.0.255
  42. [R2–ospf-1–area-0.0.0.12]quit
  43. [R2–ospf-1]area 0
  44. [R2–ospf-1–area-0.0.0.0]network 192.168.23.0 0.0.0.255
  45. [R2–ospf-1–area-0.0.0.0]quit
  47. <Huawei>undo terminal monitor
  48. <Huawei>system–view
  49. [Huawei]sysname R3
  50. [R3]interface GigabitEthernet 0/0/1
  51. [R3–GigabitEthernet0/0/1]ip add 192.168.23.3 24
  52. [R3–GigabitEthernet0/0/1]quit
  53. [R3]interface GigabitEthernet 0/0/0
  54. [R3–GigabitEthernet0/0/0]ip add 192.168.34.3 24
  55. [R3–GigabitEthernet0/0/0]quit
  56. [R3]ospf 1 router–id 3.3.3.3
  57. [R3–ospf-1]area 0
  58. [R3–ospf-1–area-0.0.0.0]network 192.168.23.0 0.0.0.255
  59. [R3–ospf-1–area-0.0.0.0]network 192.168.34.0 0.0.0.255
  60. [R3–ospf-1–area-0.0.0.0]quit
  62. <Huawei>undo terminal monitor
  63. <Huawei>system–view
  64. [Huawei]sysname R4
  65. [R4]interface GigabitEthernet 0/0/1
  66. [R4–GigabitEthernet0/0/1]ip add 192.168.34.4 24
  67. [R4–GigabitEthernet0/0/1]quit
  68. [R4]interface GigabitEthernet 0/0/0
  69. [R4–GigabitEthernet0/0/0]ip add 192.168.45.4 24
  70. [R4–GigabitEthernet0/0/0]quit
  71. [R4]ospf 1 router–id 4.4.4.4
  72. [R4–ospf-1]area 0
  73. [R4–ospf-1–area-0.0.0.0]network 192.168.34.0 0.0.0.255
  74. [R4–ospf-1–area-0.0.0.0]quit
  75. [R4–ospf-1]area 45
  76. [R4–ospf-1–area-0.0.0.0]network 192.168.45.0 0.0.0.255
  78. <Huawei>undo terminal monitor
  79. <Huawei>system–view
  80. [Huawei]sysname R5
  81. [R5]interface GigabitEthernet 0/0/1
  82. [R5–GigabitEthernet0/0/1]ip add 192.168.45.5 24
  83. [R5–GigabitEthernet0/0/1]quit
  84. [R1]interface LoopBack 51
  85. [R1–LoopBack1]ip address 10.50.1.1 24
  86. [R1–LoopBack1]quit
  87. [R1]interface LoopBack 52
  88. [R1–LoopBack2]ip address 10.50.2.2 24
  89. [R1–LoopBack2]quit
  90. [R1]interface LoopBack 53
  91. [R1–LoopBack3]ip address 10.50.3.3 24
  92. [R1–LoopBack3]quit
  93. [R1]interface LoopBack 54
  94. [R1–LoopBack4]ip address 10.50.4.4 24
  95. [R1–LoopBack4]quit
  97. [R5]ospf 1 router–id 5.5.5.5
  98. [R5–ospf-1]import–route direct
  99. [R5–ospf-1]area 45
  100. [R5–ospf-1–area-0.0.0.56]network 192.168.45.0 0.0.0.255
  101. [R5–ospf-1–area-0.0.0.56]quit

2）对区域12进行3类LSA汇总

  1. [R2]ospf 1
  2. [R2–ospf-1]area 12
  3. [R2–ospf-1–area-0.0.0.12]abr–summary 10.10.0.0 255.255.0.0

3）对区域45的5类LSA进行精确汇总

  1. [R5]ospf 1
  2. [R5–ospf-1]asbr–summary 10.50.0.0 255.255.248.0

3 案例：OSPF虚链路配置

3.1 问题

  1. 公司网络扩容，新区域与骨干区域无法相连
  2. 通过配置虚链路解决问题

3.2 方案

搭建实验环境，如图-3所示。

OSPFv3配置 、 特殊区域之NSSA 、 OSPF安全认证 、 IPv6协议介绍 、 OSPF 虚链路 、 OSPF 路由汇总图-3

3.3 步骤

实现此案例需要按照如下步骤进行。

1）配置IP地址和OSPF网络

  1. <Huawei>undo terminal monitor
  2. <Huawei>system–view
  3. [Huawei]sysname R1
  4. [R1]interface GigabitEthernet 0/0/0
  5. [R1–GigabitEthernet0/0/0]ip add 192.168.14.1 24
  6. [R1–GigabitEthernet0/0/0]quit
  7. [R1]interface GigabitEthernet 0/0/1
  8. [R1–GigabitEthernet0/0/1]ip add 192.168.12.1 24
  9. [R1–GigabitEthernet0/0/1]quit
  10. [R1]ospf 1 router–id 1.1.1.1
  11. [R1–ospf-1]area 0
  12. [R1–ospf-1–area-0.0.0.0]network 192.168.14.0 0.0.0.255
  13. [R1–ospf-1–area-0.0.0.0]quit
  14. [R1–ospf-1]area 1
  15. [R1–ospf-1–area-0.0.0.1]network 192.168.12.0 0.0.0.255
  16. [R1–ospf-1–area-0.0.0.1]quit
  18. <Huawei>undo terminal monitor
  19. <Huawei>system–view
  20. [Huawei]sysname R4
  21. [R4]interface GigabitEthernet 0/0/0
  22. [R4–GigabitEthernet0/0/0]ip add 192.168.14.4 24
  23. [R4–GigabitEthernet0/0/0]quit
  24. [R4]ospf 1 router–id 4.4.4.4
  25. [R4–ospf-1]area 0
  26. [R4–ospf-1–area-0.0.0.0]network 192.168.14.0 0.0.0.255
  27. [R4–ospf-1–area-0.0.0.0]quit
  29. <Huawei>undo terminal monitor
  30. <Huawei>system–view
  31. [Huawei]sysname R2
  32. [R2]interface GigabitEthernet 0/0/1
  33. [R2–GigabitEthernet0/0/1]ip add 192.168.12.2 24
  34. [R2–GigabitEthernet0/0/1]quit
  35. [R2]interface GigabitEthernet 0/0/0
  36. [R2–GigabitEthernet0/0/0]ip add 192.168.23.2 24
  37. [R2–GigabitEthernet0/0/0]quit
  38. [R2]ospf 1 router–id 2.2.2.2
  39. [R2–ospf-1]area 1
  40. [R2–ospf-1–area-0.0.0.1]network 192.168.12.0 0.0.0.255
  41. [R2–ospf-1–area-0.0.0.1]quit
  42. [R2–ospf-1]area 2
  43. [R2–ospf-1–area-0.0.0.2]network 192.168.23.0 0.0.0.255
  44. [R2–ospf-1–area-0.0.0.2]quit

2）在R1和R2之间配置虚链路

  1. [R2]ospf 1
  2. [R2–ospf-1]area 1
  3. [R2–ospf-1–area-0.0.0.1]vlink–peer 1.1.1.1
  5. [R1]ospf 1
  6. [R1–ospf-1]area 1
  7. [R1–ospf-1–area-0.0.0.1]vlink–peer 2.2.2.2

3）验证 R3 和 R4 可以互相 Ping 通

  1. [R3]ping 192.168.14.4
  2. PING 192.168.14.4: 56 data bytes, press CTRL_C to break
  3. Reply from 192.168.14.4: bytes=56 Sequence=1 ttl=255 time=30 ms
  4. Reply from 192.168.14.4: bytes=56 Sequence=2 ttl=255 time=20 ms
  5. Reply from 192.168.14.4: bytes=56 Sequence=3 ttl=255 time=10 ms
  6. Reply from 192.168.14.4: bytes=56 Sequence=4 ttl=255 time=30 ms
  7. Reply from 192.168.14.4: bytes=56 Sequence=5 ttl=255 time=10 ms
  9. — 192.168.14.4 ping statistics —
  10. 5 packet(s) transmitted
  11. 5 packet(s) received
  12. 0.00% packet loss
  13. round–trip min/avg/max = 10/20/30 ms
  15. [R4]ping 192.168.23.3
  16. PING 192.168.23.3: 56 data bytes, press CTRL_C to break
  17. Reply from 192.168.23.3: bytes=56 Sequence=1 ttl=255 time=30 ms
  18. Reply from 192.168.23.3: bytes=56 Sequence=2 ttl=255 time=20 ms
  19. Reply from 192.168.23.3: bytes=56 Sequence=3 ttl=255 time=10 ms
  20. Reply from 192.168.23.3: bytes=56 Sequence=4 ttl=255 time=30 ms
  21. Reply from 192.168.23.3: bytes=56 Sequence=5 ttl=255 time=10 ms
  23. — 192.168.23.3 ping statistics —
  24. 5 packet(s) transmitted
  25. 5 packet(s) received
  26. 0.00% packet loss
  27. round–trip min/avg/max = 10/20/30 ms

4 案例：配置 OSPF 认证

4.1 问题

  1. 如图配置IP地址和OSPF区域
  2. 区域12启用密文的链路认证，密码为HCIE
  3. 区域56启用明文的区域认证，密码为HCIP
  4. 区域0启用最安全区域认证，密码为 HCIA
  5. R3-R4使用最安全密码为：HuaWei

4.2 方案

搭建实验环境，如图-4所示。

OSPFv3配置 、 特殊区域之NSSA 、 OSPF安全认证 、 IPv6协议介绍 、 OSPF 虚链路 、 OSPF 路由汇总图-4

4.3 步骤

实现此案例需要按照如下步骤进行。

1）配置IP地址和OSPF网络

  1. <Huawei>undo terminal monitor
  2. <Huawei>system–view
  3. [Huawei]sysname R1
  4. [R1]interface GigabitEthernet 0/0/0
  5. [R1–GigabitEthernet0/0/0]ip add 192.168.12.1 24
  6. [R1–GigabitEthernet0/0/0]quit
  7. [R1]ospf 1 router–id 1.1.1.1
  8. [R1–ospf-1]area 12
  9. [R1–ospf-1–area-0.0.0.12]network 192.168.12.0 0.0.0.255
  10. [R1–ospf-1–area-0.0.0.12]quit
  12. <Huawei>undo terminal monitor
  13. <Huawei>system–view
  14. [Huawei]sysname R2
  15. [R2]interface GigabitEthernet 0/0/1
  16. [R2–GigabitEthernet0/0/1]ip add 192.168.12.2 24
  17. [R2–GigabitEthernet0/0/1]quit
  18. [R2]interface GigabitEthernet 0/0/0
  19. [R2–GigabitEthernet0/0/0]ip add 192.168.23.2 24
  20. [R2–GigabitEthernet0/0/0]quit
  21. [R2]ospf 1 router–id 2.2.2.2
  22. [R2–ospf-1]area 12
  23. [R2–ospf-1–area-0.0.0.12]network 192.168.12.0 0.0.0.255
  24. [R2–ospf-1–area-0.0.0.12]quit
  25. [R2–ospf-1]area 0
  26. [R2–ospf-1–area-0.0.0.0]network 192.168.23.0 0.0.0.255
  27. [R2–ospf-1–area-0.0.0.0]quit
  29. <Huawei>undo terminal monitor
  30. <Huawei>system–view
  31. [Huawei]sysname R3
  32. [R3]interface GigabitEthernet 0/0/1
  33. [R3–GigabitEthernet0/0/1]ip add 192.168.23.3 24
  34. [R3–GigabitEthernet0/0/1]quit
  35. [R3]interface GigabitEthernet 0/0/0
  36. [R3–GigabitEthernet0/0/0]ip add 192.168.34.3 24
  37. [R3–GigabitEthernet0/0/0]quit
  38. [R3]ospf 1 router–id 3.3.3.3
  39. [R3–ospf-1]area 0
  40. [R3–ospf-1–area-0.0.0.0]network 192.168.23.0 0.0.0.255
  41. [R3–ospf-1–area-0.0.0.0]network 192.168.34.0 0.0.0.255
  42. [R3–ospf-1–area-0.0.0.0]quit
  44. <Huawei>undo terminal monitor
  45. <Huawei>system–view
  46. [Huawei]sysname R4
  47. [R4]interface GigabitEthernet 0/0/1
  48. [R4–GigabitEthernet0/0/1]ip add 192.168.34.4 24
  49. [R4–GigabitEthernet0/0/1]quit
  50. [R4]interface GigabitEthernet 0/0/0
  51. [R4–GigabitEthernet0/0/0]ip add 192.168.45.4 24
  52. [R4–GigabitEthernet0/0/0]quit
  53. [R4]ospf 1 router–id 4.4.4.4
  54. [R4–ospf-1]area 0
  55. [R4–ospf-1–area-0.0.0.0]network 192.168.34.0 0.0.0.255
  56. [R4–ospf-1–area-0.0.0.0]network 192.168.45.0 0.0.0.255
  57. [R4–ospf-1–area-0.0.0.0]quit
  59. <Huawei>undo terminal monitor
  60. <Huawei>system–view
  61. [Huawei]sysname R5
  62. [R5]interface GigabitEthernet 0/0/1
  63. [R5–GigabitEthernet0/0/1]ip add 192.168.45.5 24
  64. [R5–GigabitEthernet0/0/1]quit
  65. [R5]interface GigabitEthernet 0/0/0
  66. [R5–GigabitEthernet0/0/0]ip add 192.168.56.5 24
  67. [R5–GigabitEthernet0/0/0]quit
  68. [R5]ospf 1 router–id 5.5.5.5
  69. [R5–ospf-1]area 56
  70. [R5–ospf-1–area-0.0.0.56]network 192.168.56.0 0.0.0.255
  71. [R5–ospf-1–area-0.0.0.56]quit
  72. [R5–ospf-1]area 0
  73. [R5–ospf-1–area-0.0.0.0]network 192.168.45.0 0.0.0.255
  74. [R5–ospf-1–area-0.0.0.0]quit
  76. <Huawei>undo terminal monitor
  77. <Huawei>system–view
  78. [Huawei]sysname R6
  79. [R6]interface GigabitEthernet 0/0/1
  80. [R6–GigabitEthernet0/0/1]ip add 192.168.56.6 24
  81. [R6–GigabitEthernet0/0/1]quit
  82. [R6]ospf 1 router–id 6.6.6.6
  83. [R6–ospf-1]area 56
  84. [R6–ospf-1–area-0.0.0.56]network 192.168.56.0 0.0.0.255
  85. [R6–ospf-1–area-0.0.0.56]quit

2）配置区域12的认证

  1. [R1]interface GigabitEthernet 0/0/0
  2. [R1–GigabitEthernet0/0/0]ospf authentication–mode md5 1 cipher HCIE
  4. [R2]interface GigabitEthernet 0/0/1
  5. [R2–GigabitEthernet0/0/1]ospf authentication–mode md5 1 cipher HCIE

3）配置区域56的认证

  1. [R5]ospf 1
  2. [R5–ospf-1]area 56
  3. [R5–ospf-1–area-0.0.0.56]authentication–mode simple cipher HCIP
  5. [R6]ospf 1
  6. [R6–ospf-1]area 56
  7. [R6–ospf-1–area-0.0.0.56]authentication–mode simple cipher HCIP

4）配置区域0的认证

  1. [R2]ospf 1
  2. [R2–ospf-1]area 0
  3. [R2–ospf-1–area-0.0.0.0]authentication–mode md5 1 cipher HCIA
  5. [R3]ospf 1
  6. [R3–ospf-1]area 0
  7. [R3–ospf-1–area-0.0.0.0]authentication–mode md5 1 cipher HCIA
  9. [R4]ospf 1
  10. [R4–ospf-1]area 0
  11. [R4–ospf-1–area-0.0.0.0]authentication–mode md5 1 cipher HCIA
  13. [R5]ospf 1
  14. [R5–ospf-1]area 0
  15. [R5–ospf-1–area-0.0.0.0]authentication–mode md5 1 cipher HCIA

5）配置R3-R4之间的认证

  1. [R3]interface GigabitEthernet 0/0/0
  2. [R3–GigabitEthernet0/0/0]ospf authentication–mode md5 1 cipher HuaWei
  4. [R4]interface GigabitEthernet 0/0/1
  5. [R4–GigabitEthernet0/0/1]ospf authentication–mode md5 1 cipher HuaWei

5 案例：IPv6 基本配置

5.1 问题

  1. 如图配置IPv6地址
  2. 查看并测试IPv6接口和连通性
  3. 确保 PC-1 和 PC-2 互通

5.2 方案

搭建实验环境，如图-5所示。

OSPFv3配置 、 特殊区域之NSSA 、 OSPF安全认证 、 IPv6协议介绍 、 OSPF 虚链路 、 OSPF 路由汇总图-5

5.3 步骤

实现此案例需要按照如下步骤进行。

1）配置终端设备

  1. PC-1：
  2. 2001:11::1
  3. 64
  4. 2001:11::254
  6. PC-2：
  7. 2001:22::1
  8. 64
  9. 2001:22::254

2）配置网络设备

  1. <Huawei>undo terminal monitor
  2. <Huawei>system–view
  3. [Huawei]sysname R1
  4. [R1]ipv6
  5. [R1]interface GigabitEthernet 0/0/0
  6. [R1–GigabitEthernet0/0/0]ipv6 enable
  7. [R1–GigabitEthernet0/0/0]ipv6 address 2001:12::1 64
  8. [R1–GigabitEthernet0/0/0]quit
  9. [R1]interface GigabitEthernet 0/0/2
  10. [R1–GigabitEthernet0/0/2]ipv6 enable
  11. [R1–GigabitEthernet0/0/2]ipv6 address 2001:11::254 64
  12. [R1–GigabitEthernet0/0/2]quit
  14. <Huawei>undo terminal monitor
  15. <Huawei>system–view
  16. [Huawei]sysname R2
  17. [R2]ipv6
  18. [R2]interface GigabitEthernet 0/0/01
  19. [R2–GigabitEthernet0/0/1]ipv6 enable
  20. [R2–GigabitEthernet0/0/1]ipv6 address 2001:12::2 64
  21. [R2–GigabitEthernet0/0/1]quit
  22. [R2]interface GigabitEthernet 0/0/0
  23. [R2–GigabitEthernet0/0/0]ipv6 enable
  24. [R2–GigabitEthernet0/0/0]ipv6 address 2001:23::2 64
  25. [R2–GigabitEthernet0/0/0]quit
  27. <Huawei>undo terminal monitor
  28. <Huawei>system–view
  29. [Huawei]sysname R3
  30. [R3]ipv6
  31. [R3]interface GigabitEthernet 0/0/0
  32. [R3–GigabitEthernet0/0/0]ipv6 enable
  33. [R3–GigabitEthernet0/0/0]ipv6 address 2001:23::3 64
  34. [R3–GigabitEthernet0/0/0]quit
  35. [R3]interface GigabitEthernet 0/0/2
  36. [R3–GigabitEthernet0/0/2]ipv6 enable
  37. [R3–GigabitEthernet0/0/2]ipv6 address 2001:22::254 64
  38. [R3–GigabitEthernet0/0/2]quit

3）配置IPv6路由条目

  1. [R1]ipv6 route–static :: 0 2001:12::2
  2. [R3]ipv6 route–static :: 0 2001:23::2
  4. [R2] ipv6 route–static 2001:11:: 64 2001:12::1
  5. [R2] ipv6 route–static 2001:22:: 64 2001:23::3

4）测试 PC-1 与 PC2 的连通性

  1. PC-1>ping 2001:22::1
  2. Ping 2001:22::1: 32 data bytes, Press Ctrl_C to break
  3. From 2001:22::1: bytes=32 seq=1 hop limit=254 time<1 ms
  4. From 2001:22::1: bytes=32 seq=2 hop limit=254 time=15 ms
  5. From 2001:22::1: bytes=32 seq=3 hop limit=254 time=16 ms
  6. From 2001:22::1: bytes=32 seq=4 hop limit=254 time=15 ms
  7. From 2001:22::1: bytes=32 seq=5 hop limit=254 time=16 ms
  8. — 2001:22::1 ping statistics —
  9. 5 packet(s) transmitted
  10. 5 packet(s) received
  11. 0.00% packet loss
  12. round–trip min/avg/max = 0/12/16 ms
  14. PC-2>ping 2001:11::1
  15. Ping 2001:11::1: 32 data bytes, Press Ctrl_C to break
  16. From 2001:11::1: bytes=32 seq=1 hop limit=254 time=16 ms
  17. From 2001:11::1: bytes=32 seq=2 hop limit=254 time=16 ms
  18. From 2001:11::1: bytes=32 seq=3 hop limit=254 time=15 ms
  19. From 2001:11::1: bytes=32 seq=4 hop limit=254 time=16 ms
  20. From 2001:11::1: bytes=32 seq=5 hop limit=254 time=15 ms
  21. — 2001:11::1 ping statistics —
  22. 5 packet(s) transmitted
  23. 5 packet(s) received
  24. 0.00% packet loss
  25. round–trip min/avg/max = 15/15/16 ms

6 案例：配置 OSPFv3 网络

6.1 问题

  1. 如图配置IPv6地址和OSPFv3区域
  2. 查看OSPFv3邻居和数据库LSA
  3. 确保 R1 和 R3 可以互相访问

6.2 方案

搭建实验环境，如图-6所示。

OSPFv3配置 、 特殊区域之NSSA 、 OSPF安全认证 、 IPv6协议介绍 、 OSPF 虚链路 、 OSPF 路由汇总图-6

6.3 步骤

实现此案例需要按照如下步骤进行。

1）配置R1 地址，并启用 OSPFv3

  1. <Huawei>undo terminal monitor
  2. <Huawei>system–view
  3. [Huawei]sysname R1
  4. [R1]ipv6
  5. [R1]interface GigabitEthernet 0/0/0
  6. [R1–GigabitEthernet0/0/0]ipv6 enable
  7. [R1–GigabitEthernet0/0/0]ipv6 address 2001:12::1 64
  8. [R1–GigabitEthernet0/0/0]quit
  9. [R1]ospfv3 1
  10. [R1–ospfv3-1]router–id 1.1.1.1
  11. [R1–ospfv3-1]quit
  12. [R1]interface GigabitEthernet 0/0/0
  13. [R1–GigabitEthernet0/0/0]ospfv3 1 area 0
  14. [R1–GigabitEthernet0/0/0]quit

2）配置R2 地址，并启用 OSPFv3

  1. <Huawei>undo terminal monitor
  2. <Huawei>system–view
  3. [Huawei]sysname R2
  4. [R2]ipv6
  5. [R2]interface GigabitEthernet 0/0/0
  6. [R2–GigabitEthernet0/0/0]ipv6 enable
  7. [R2–GigabitEthernet0/0/0]ipv6 address 2001:23::2 64
  8. [R2–GigabitEthernet0/0/0]quit
  9. [R2]interface GigabitEthernet 0/0/1
  10. [R2–GigabitEthernet0/0/1]ipv6 enable
  11. [R2–GigabitEthernet0/0/1]ipv6 address 2001:12::2 64
  12. [R2–GigabitEthernet0/0/1]quit
  14. [R2]ospfv3 1
  15. [R2–ospfv3-1]router–id 2.2.2.2
  16. [R2–ospfv3-1]quit
  17. [R2]interface GigabitEthernet 0/0/1
  18. [R2–GigabitEthernet0/0/1]ospfv3 1 area 0
  19. [R2–GigabitEthernet0/0/1]quit
  20. [R2]interface GigabitEthernet 0/0/0
  21. [R2–GigabitEthernet0/0/0]ospfv3 1 area 1
  22. [R2–GigabitEthernet0/0/0]quit

3）配置R3 地址，并启用 OSPFv3

  1. <Huawei>undo terminal monitor
  2. <Huawei>system–view
  3. [Huawei]sysname R3
  4. [R3]ipv6
  5. [R3]interface GigabitEthernet 0/0/1
  6. [R3–GigabitEthernet0/0/1]ipv6 enable
  7. [R3–GigabitEthernet0/0/1]ipv6 address 2001:23::3 64
  8. [R3–GigabitEthernet0/0/1]quit
  9. [R3]ospfv3 1
  10. [R3–ospfv3-1]router–id 3.3.3.3
  11. [R3–ospfv3-1]quit
  12. [R3]interface GigabitEthernet 0/0/1
  13. [R3–GigabitEthernet0/0/1]ospfv3 1 area 1
  14. [R3–GigabitEthernet0/0/1]quit

4）验证PC-1与PC-2之间的互通性

  1. [R1]ping ipv6 2001:23::3
  3. PING 2001:23::3 : 56 data bytes, press CTRL_C to break
  4. Reply from 2001:23::3
  5. bytes=56 Sequence=1 hop limit=63 time = 30 ms
  6. Reply from 2001:23::3
  7. bytes=56 Sequence=2 hop limit=63 time = 30 ms
  8. Reply from 2001:23::3
  9. bytes=56 Sequence=3 hop limit=63 time = 40 ms
  10. Reply from 2001:23::3
  11. bytes=56 Sequence=4 hop limit=63 time = 30 ms
  12. Reply from 2001:23::3
  13. bytes=56 Sequence=5 hop limit=63 time = 30 ms
  15. — 2001:23::3 ping statistics —
  16. 5 packet(s) transmitted
  17. 5 packet(s) received
  18. 0.00% packet loss
  19. round–trip min/avg/max = 30/32/40 ms [/hidecontent]

给TA打赏
共{{data.count}}人
人已打赏
华为数通

OSPF数据库概述 、 4/5类LSA介绍 、 特殊区域之stub 、 OSFP路由引入 、 3类LSA介绍 、 1/2 类LSA介绍

2021-12-27 14:38:31

华为数通

DHCP工作原理 、 DHCP中继代理 、 全局模式DHCP 、 DHCP综合实战 、 三层交换机DHCP

2021-12-28 13:05:51

0 条回复 A文章作者 M管理员
    暂无讨论，说说你的看法吧
❯

解锁会员权限

开通会员

解锁海量优质VIP资源

立刻开通
个人中心
购物车
优惠劵
今日签到
有新私信 私信列表
搜索

  • 扫码打开当前页

返回顶部