实验要求1R5为ISP其上只能配置IP地址 R4作为企业边界路由器出口公网地址需要通过PPP协议 获取并进行chap认证2整个OSPF环境IP基于172.16.0.0/16划分3所有设备均可访问R5的环回4减少LSA的更新量加快收敛保障更新安全5全网可达第一步划分网段Area 0 172.16.0.0/19Area 1 172.16.32.0/19Area 2 172.16.64.0/19Area 3 172.16.96.0/19Area 4 172.16.128.0/19第二步配置 ISPR5sysname R5interface Serial4/0/0link-protocol pppppp authentication-mode chapip address 45.1.1.5 255.255.255.0quitinterface LoopBack0ip address 5.5.5.5 255.255.255.255quitaaalocal-user R4 password cipher Huawei123local-user R4 service-type pppquit第三步配置R4PPP/CHAP NAT OSPF 骨干 下发默认路由。sysname R4interface Serial4/0/0link-protocol pppppp authentication-mode chapip address 45.1.1.1 255.255.255.0quitinterface GigabitEthernet0/0/0ip address 172.16.5.1 255.255.255.252ospf authentication-mode md5 1 cipher Huawei123quitinterface GigabitEthernet0/0/1ip address 172.16.1.1 255.255.255.252ospf authentication-mode md5 1 cipher Huawei123quitinterface GigabitEthernet0/0/2ip address 172.16.9.1 255.255.255.252ospf authentication-mode md5 1 cipher Huawei123quitaaalocal-user R5 password cipher Huawei123local-user R5 service-type pppquitospf 1 router-id 4.4.4.4area 0.0.0.0network 172.16.5.0 0.0.0.3network 172.16.1.0 0.0.0.3network 172.16.9.0 0.0.0.3authentication-mode md5 1 cipher Huawei123area 0.0.0.1network 172.16.1.0 0.0.0.3stub no-summaryquitdefault-route-advertise alwaysquitacl number 3000rule permit ip source 172.16.0.0 0.0.255.255rule permit ip source 192.168.1.0 0.0.0.255quitinterface Serial4/0/0nat outbound 3000quitip route-static 0.0.0.0 0.0.0.0 45.1.1.5第四步配置OSPFR6ospf 1 router-id 6.6.6.6area 0.0.0.0network 172.16.1.0 0.0.0.3area 0.0.0.1network 172.16.1.0 0.0.0.3stub no-summaryquitR7ospf 1 router-id 7.7.7.7area 0.0.0.0network 172.16.5.0 0.0.0.3authentication-mode md5 1 cipher Huawei123area 0.0.0.3network 172.16.6.0 0.0.0.3stub no-summaryquit其他配置如上所示area4没有跟area0连接 路由传不到骨干 需要建立虚拟链路R7ospf 1 router-id 7.7.7.7area 3vlink-peer 9.9.9.9R9ospf 1 router-id 9.9.9.9area 3vlink-peer 7.7.7.7第五步减少LSA的更新量加快收敛保障更新安全特殊区域ABR 配置totally stubospf 1area 1路由汇总stub no-summaryquit内部设备配置stubospf 1area 1stubquit路由汇总在 ABR 上把区域内的明细路由合成一条发ospf 1area 0.0.0.1abr-summary 172.16.32.0 255.255.224.0area 0.0.0.3abr-summary 172.16.96.0 255.255.224.0area 0.0.0.4abr-summary 172.16.128.0 255.255.224.0quit静默接口连接终端/交换机/不需要建邻居的接口关掉 OSPF 发包ospf 1silent-interface GigabitEthernet0/0/2quit收敛计时器调优interface GigabitEthernet0/0/0ospf timer hello 5ospf timer dead 20quit————————————————版权声明本文为CSDN博主「2601_94927618」的原创文章遵循CC 4.0 BY-SA版权协议转载请附上原文出处链接及本声明。原文链接https://blog.csdn.net/2601_94927618/article/details/167385763