电子商务营销策略_全国十大计算机培训机构_怎样才能被百度秒收录_惠州搜索引擎优化

一、实验拓扑

二、实验需求

1，R5为ISP，其上只能配置IP地址;R4作为企业边界路由器，出口公网地址需要通过PPP协议获取，并进行chap认证
2，整个0SPF环境IP基于172.16.0.0/16划分;
3,所有设备均可访问R5的环回;
4,减少LSA的更新量，加快收敛，保障更新安全;
5,全网可达

三、实验配置

1.IP地址划分

将172.16.0.0/16进行子网划分

运行ospf的路由器主干道基于172.16.0.0/16进行IP地址的大体划分：

172.16.0.0/24：Area 0
172.16.1.0/24：Area 1
172.16.2.0/24：Area 2
172.16.3.0/24：Area 3
172.16.4.0/24：Area 4

基于OSPF的区域进行IP地址的具体划分：

Area 0：172.16.0.0/26（R3-R4）、172.16.0.64/26（R4-R6）、172.16.0.128/26（R4-R7）、172.16.0.192/26（保留）；

Area 1：172.16.1.0/24（R1-R2-R3）
Area 2：172.16.2.0/25（R6-R11）、172.16.2.128/25（R11-R12）；
Area 3：172.16.3.0/25（R7-R8）、172.16.3.128/25（R8-R9）
Area 4：172.16.4.0/24（R9-R10）

方便记忆和排错，避免与公网IP冲突，环回地址一般根据路由器设备编号来配置，例如R1环回配置成1.1.1.1/24，R2，R3，R8，R9，R11也按照这个规则来进行配置（实验环境）

划分公网网段、R5环回网段、R12环回（rip）网段：

100.0.0.0/24（R4-R5）
5.5.5.0/24（R5环回）
10.0.1.0/24（R12环回L0）
10.0.2.0/24（R12环回L1）

2、配置IP地址和环回路由

r1：

[r1-GigabitEthernet0/0/0]ip address 172.16.1.1 24
[r1-LoopBack0]ip address 1.1.1.1 24

r2:

[r2-GigabitEthernet0/0/0]ip address 172.16.1.2 24
[r2-LoopBack0]ip address 2.2.2.2 24

r3:

[r3-GigabitEthernet0/0/0]ip address 172.16.1.3 24
[r3-GigabitEthernet0/0/1]ip address 172.16.0.1 26
[r3-LoopBack0]ip address 3.3.3.3 24

r4:

[r4-GigabitEthernet0/0/0]ip address 172.16.0.129 26
[r4-GigabitEthernet0/0/1]ip address 172.16.0.2 26
[r4-GigabitEthernet0/0/2]ip address 172.16.0.65 26

r5:

[r5-Serial4/0/0]ip address 100.0.0.1 24
[r5-LoopBack0]ip address 5.5.5.5 24

r6:

[r6-GigabitEthernet0/0/0]ip address 172.16.0.66 26
[r6-GigabitEthernet0/0/1]ip address 172.16.2.1 25

r7:

[r7-GigabitEthernet0/0/0]ip address 172.16.0.130 26
[r7-GigabitEthernet0/0/1]ip address 172.16.3.1 25

r8:

[r8-GigabitEthernet0/0/0]ip address 172.16.3.2 25
[r8-GigabitEthernet0/0/1]ip address 172.16.3.129 25
[r8-LoopBack0]ip address 8.8.8.8 24

r9:

[r9-GigabitEthernet0/0/0]ip address 172.16.3.130 25
[r9-GigabitEthernet0/0/1]ip address 172.16.4.1 24
[r9-LoopBack0]ip address 9.9.9.9 24

r10:

[r10-GigabitEthernet0/0/0]ip address 172.16.4.2 24
[r10-LoopBack0]ip address 10.10.10.10 24

r11:

[r11-GigabitEthernet0/0/0]ip address 172.16.2.2 25
[r11-GigabitEthernet0/0/1]ip address 172.16.2.129 25
[r11-LoopBack0]ip address 11.11.11.11 24

r12:

[r12-GigabitEthernet0/0/0]ip address 172.16.2.130 25
[r12-LoopBack0]ip address 10.0.1.1 24
[r12-LoopBack1]ip address 10.0.2.1 24

2、配置PPP以及使用CHAP认证

r5:

# 创建IP地址池
[r5] ip pool PPP_POOL
[r5-ip-pool-PPP_POOL] network 100.0.0.0 mask 255.255.255.0
[r5-ip-pool-PPP_POOL] gateway-list 100.0.0.1
[r5-ip-pool-PPP_POOL] dns-list 8.8.8.8# 配置PPP用户认证和地址分配
[r5] aaa
[r5-aaa] local-user client1 password cipher 123456
[r5-aaa] local-user client1 service-type ppp
[r5-aaa] quit# 在接口上启用PPP和地址池
[r5] interface Serial4/0/0
[r5-Serial4/0/0] link-protocol ppp
[r5-Serial4/0/0] ppp authentication-mode chap
[r5-Serial4/0/0] remote address pool PPP_POOL  # 指定地址池

r4:

[r4]int s4/0/0[r4-Serial4/0/0]ppp chap user client1[r4-Serial4/0/0]ppp chap password cipher 123456[r4-Serial4/0/0]ip address ppp-negotiate

R4接口IP获取情况：

3、配置OSPF和RIP协议

ospf手工区域认证：

[r1-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456[r2-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456[r3-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456[r3-ospf-1-area-0.0.0.0]authentication-mode md5 2 cipher 123456[r4-ospf-1-area-0.0.0.0]authentication-mode md5 2 cipher 123456[r6-ospf-1-area-0.0.0.0]authentication-mode md5 2 cipher 123456[r7-ospf-1-area-0.0.0.0]authentication-mode md5 2 cipher 123456[r6-ospf-1-area-0.0.0.2]authentication-mode md5 3 cipher 123456[r11-ospf-1-area-0.0.0.2]authentication-mode md5 3 cipher 123456[r12-ospf-1-area-0.0.0.2]authentication-mode md5 3 cipher 123456[r7-ospf-1-area-0.0.0.3]authentication-mode md5 4 cipher 123456[r8-ospf-1-area-0.0.0.3]authentication-mode md5 4 cipher 123456[r9-ospf-1-area-0.0.0.3]authentication-mode md5 4 cipher 123456[r9-ospf-2-area-0.0.0.4]authentication-mode md5 5 cipher 123456[r10-ospf-1-area-0.0.0.4]authentication-mode md5 5 cipher 123456

r1:

[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 1[r1-ospf-1-area-0.0.0.1]network 172.16.1.1 0.0.0.255
[r1-ospf-1-area-0.0.0.1]network 1.1.1.1 0.0.0.255

r2:

[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 1 [r2-ospf-1-area-0.0.0.1]network 172.16.1.2 0.0.0.255
[r2-ospf-1-area-0.0.0.1]network 2.2.2.2 0.0.0.255

r3:

[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]network 172.16.1.3 0.0.0.255
[r3-ospf-1-area-0.0.0.1]network 3.3.3.3 0.0.0.255[r3-ospf-1-area-0.0.0.1]area 0[r3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.63

r4:

[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]area 0
[r4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.63[r4-ospf-1-area-0.0.0.0]network 172.16.0.64 0.0.0.63
[r4-ospf-1-area-0.0.0.0]network 172.16.0.128 0.0.0.63

r5:

[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]area 0
[r4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.63[r4-ospf-1-area-0.0.0.0]network 172.16.0.64 0.0.0.63
[r4-ospf-1-area-0.0.0.0]network 172.16.0.128 0.0.0.63

r6:

[r6]ospf 1 router 6.6.6.6
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 172.16.0.64 0.0.0.63[r6-ospf-1-area-0.0.0.0]area 2
[r6-ospf-1-area-0.0.0.2]network 172.16.2.0 0.0.0.127

r7:

[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1]area 0
[r7-ospf-1-area-0.0.0.0]network 172.16.0.128 0.0.0.63[r7-ospf-1-area-0.0.0.0]area 3[r7-ospf-1-area-0.0.0.3]network 172.16.3.0 0.0.0.127

r8:

[r8]ospf 1 router-id 8.8.8.8
[r8-ospf-1]area 3    
[r8-ospf-1-area-0.0.0.3]network 172.16.3.128 0.0.0.127
[r8-ospf-1-area-0.0.0.3]network 172.16.3.0 0.0.0.127
[r8-ospf-1-area-0.0.0.3]network 8.8.8.8 0.0.0.255

r9:

[r9]ospf 1 router-id 9.9.9.9
[r9-ospf-1]area 3  
[r9-ospf-1-area-0.0.0.3]network 172.16.3.128 0.0.0.127
[r9]ospf 2 router-id 9.9.9.9
[r9-ospf-2-area-0.0.0.3]area 4
[r9-ospf-2-area-0.0.0.4]network 172.16.4.0 0.0.0.255
[r9-ospf-2-area-0.0.0.4]network 9.9.9.9 0.0.0.255

r10:

[r10]ospf 1 router-id 10.10.10.10
[r10-ospf-1]area 4
[r10-ospf-1-area-0.0.0.4]network 172.16.4.0 0.0.0.255
[r10-ospf-1-area-0.0.0.4]network 10.10.10.10 0.0.0.255

r11:

[r11]ospf 1 router-id 11.11.11.11
[r11-ospf-1]area 2
[r11-ospf-1-area-0.0.0.2]network 172.16.2.0 0.0.0.127
[r11-ospf-1-area-0.0.0.2]network 172.16.2.128 0.0.0.127
[r11-ospf-1-area-0.0.0.2]network 11.11.11.11 0.0.0.255

r12:

[r12]ospf 1 router-id 12.12.12.12
[r12-ospf-1]area 2 
[r12-ospf-1-area-0.0.0.2]network 172.16.2.128 0.0.0.127[r12]rip 1
[r12-rip-1]version 2[r12-rip-1]undo summary
[r12-rip-1]network 10.0.0.0

4、配置OSPF和RIP间的双向重发布

[r12]ospf 1[r12-ospf-1]import-route rip 1[r12]rip 1[r12-rip-1]import-route ospf  1

5、配置OSPF多进程双向重发布

[r9]ospf 1 
[r9-ospf-1]import-route ospf 2
[r9-ospf-1]ospf 2
[r9-ospf-2]import-route ospf 1

6、配置特殊区域

我们在area 1内配置Totally stub区域，在area 2内配置Totally NSSA区域，在area 3内配置Totally NSSA区域。

r1、r2：

[r1-ospf-1-area-0.0.0.1]stub[r2-ospf-1-area-0.0.0.1]stub

r3:

[r3-ospf-1-area-0.0.0.1]stub no-summary

r8、r9：

[r8-ospf-1-area-0.0.0.3]nssa[r9-ospf-1-area-0.0.0.3]nssa

r7:

[r7-ospf-1-area-0.0.0.3]nssa no-summary

r11、r12:

[r11-ospf-1-area-0.0.0.2]nssa[r12-ospf-1-area-0.0.0.2]nssa

r6:

[r6-ospf-1-area-0.0.0.2]nssa no-summary

查看特殊区域的LSA数据库：

r1:

r8:

r11:

7、配置LSA汇总

需要在骨干链路连接边缘区域的ABR上配置域间路由汇总，在ASBR设备上进行域外路由汇总。

r12:

[r12-ospf-1]asbr-summary 10.0.0.0 255.255.252.0
[r12]ip route-static 10.0.0.0 22 null0

r3:

[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.1.0 255.255.255.0

r6:

[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.2.0 255.255.255.0

r7:

[r7-ospf-1-area-0.0.0.3]abr-summary 172.16.3.0 255.255.255.0[r7]ip route-static 172.16.3.0 24 null0

再次查看骨干区域路由器收集到的LSA：

8、缩短hello计时器

[r1-GigabitEthernet0/0/0]ospf timer hello 5[r2-GigabitEthernet0/0/0]ospf timer hello 5[r3-GigabitEthernet0/0/0]ospf timer hello 5[r3-GigabitEthernet0/0/1]ospf timer hello 5[r4-GigabitEthernet0/0/0]ospf timer hello 5
[r4-GigabitEthernet0/0/1]ospf timer hello 5[r4-GigabitEthernet0/0/2]ospf timer hello 5[r6-GigabitEthernet0/0/0]ospf timer hello 5[r6-GigabitEthernet0/0/1]ospf timer hello 5[r7-GigabitEthernet0/0/0]ospf timer hello 5[r7-GigabitEthernet0/0/2]ospf timer hello 5[r8-GigabitEthernet0/0/0]ospf timer hello 5[r8-GigabitEthernet0/0/1]ospf timer hello 5[r9-GigabitEthernet0/0/1]ospf timer hello 5[r9-GigabitEthernet0/0/2]ospf timer hello 5[r10-GigabitEthernet0/0/2]ospf timer hello 5[r11-GigabitEthernet0/0/1]ospf timer hello 5[r11-GigabitEthernet0/0/2]ospf timer hello 5[r12-GigabitEthernet0/0/2]ospf timer hello 5

9、更改网络接口类型

[r3-GigabitEthernet0/0/1]ospf network-type p2p 
[r4-GigabitEthernet0/0/0]ospf network-type p2p[r4-GigabitEthernet0/0/1]ospf network-type p2p[r4-GigabitEthernet0/0/2]ospf network-type p2p[r6-GigabitEthernet0/0/0]ospf network-type p2p[r6-GigabitEthernet0/0/1]ospf network-type p2p[r7-GigabitEthernet0/0/0]ospf network-type p2p[r7-GigabitEthernet0/0/2]ospf network-type p2p[r8-GigabitEthernet0/0/0]ospf network-type p2p[r8-GigabitEthernet0/0/1]ospf network-type p2p[r9-GigabitEthernet0/0/1]ospf network-type p2p[r9-GigabitEthernet0/0/2]ospf network-type p2p[r10-GigabitEthernet0/0/2]ospf network-type p2p[r11-GigabitEthernet0/0/1]ospf network-type p2p[r11-GigabitEthernet0/0/2]ospf network-type p2p[r12-GigabitEthernet0/0/2]ospf network-type p2p

10、配置缺省和nat实现全网可达

[r4]acl 2000
[r4-acl-basic-2000]dis this
acl number 2000  rule 5 permit source 172.16.0.0 0.0.255.255 rule 10 permit source 1.1.1.1 0 rule 15 permit source 2.2.2.2 0 rule 20 permit source 3.3.3.3 0 rule 25 permit source 8.8.8.8 0 rule 30 permit source 9.9.9.9 0 rule 35 permit source 10.10.10.10 0 rule 40 permit source 11.11.11.11 0 rule 45 permit source 10.0.1.0 0.0.0.255 rule 50 permit source 10.0.2.0 0.0.0.255 [r4-Serial4/0/0]nat outbound 2000
[r4]ip route-static 0.0.0.0 0 100.0.0.1

配置缺省指向R4这个边界路由器

[r3]ip route-static 0.0.0.0 0 172.16.0.2[r6]ip route-static 0.0.0.0 0 172.16.0.65[r7]ip route-static 0.0.0.0 0 172.16.0.129[r10]ip route-static 0.0.0.0 0 172.16.4.1