目录
题目：
实验拓扑要求：
实验要求：
实验前期准备步骤：
步骤一：搭建拓扑
步骤二：搭建思路
实验步骤：
步骤一：IP地址配置
R1
# R1
interface GigabitEthernet0/0/0
ip address 172.16.33.1 255.255.255.0
interface LoopBack0
ip address 172.16.34.1 255.255.255.0
#R2
interface GigabitEthernet0/0/0
ip address 172.16.33.2 255.255.255.0
interface LoopBack0
ip address 172.16.35.2 255.255.255.0
# R3
interface Serial4/0/0
link-protocol ppp
ip address 34.0.0.3 255.255.255.0
interface GigabitEthernet0/0/0
ip address 172.16.33.3 255.255.255.0
interface LoopBack0
ip address 172.16.36.3 255.255.255.0
# R4
interface Serial3/0/0
link-protocol ppp
ip address 46.0.0.4 255.255.255.0
interface Serial4/0/0
link-protocol ppp
ip address 34.0.0.4 255.255.255.0
interface Serial4/0/1
link-protocol ppp
ip address 45.0.0.4 255.255.255.0
interface GigabitEthernet0/0/0
ip address 47.0.0.4 255.255.255.0
interface LoopBack0
ip address 172.16.2.4 255.255.255.0
# R5
interface Serial4/0/0
link-protocol ppp
ip address 45.0.0.5 255.255.255.0
interface LoopBack0
ip address 172.16.3.5 255.255.255.0
# R6
interface Serial4/0/0
link-protocol ppp
ip address 46.0.0.6 255.255.255.0
interface GigabitEthernet0/0/0
ip address 172.16.65.1 255.255.255.252
interface LoopBack0
ip address 172.16.4.6 255.255.255.0
# R7
interface GigabitEthernet0/0/0
ip address 47.0.0.7 255.255.255.0
interface GigabitEthernet0/0/1
ip address 172.16.97.1 255.255.255.252
interface LoopBack0
ip address 172.16.5.7 255.255.255.0
# R8
interface GigabitEthernet0/0/0
ip address 172.16.97.2 255.255.255.252
interface GigabitEthernet0/0/1
ip address 172.16.97.5 255.255.255.252
interface LoopBack0
ip address 172.16.98.8 255.255.255.0
# R9
interface GigabitEthernet0/0/0
ip address 172.16.97.6 255.255.255.252
interface GigabitEthernet0/0/1
ip address 172.16.129.1 255.255.255.252
interface LoopBack0
ip address 172.16.130.9 255.255.255.0
# R10
interface GigabitEthernet0/0/0
ip address 172.16.129.2 255.255.255.252
interface LoopBack0
ip address 172.16.131.10 255.255.255.0
# R11
interface GigabitEthernet0/0/0
ip address 172.16.65.2 255.255.255.252
interface GigabitEthernet0/0/1
ip address 172.16.65.5 255.255.255.252
interface GigabitEthernet0/0/2
interface LoopBack0
ip address 172.16.66.11 255.255.255.0
# R12
interface GigabitEthernet0/0/0
ip address 172.16.65.6 255.255.255.252
interface LoopBack0
ip address 172.16.160.12 255.255.255.0
interface LoopBack1
ip address 172.16.161.12 255.255.255.0 步骤二：配置MGRE
中心站点R3：
[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ip add 172.16.6.3 24
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp
[R3-Tunnel0/0/0]source 34.0.0.3
[R3-Tunnel0/0/0]nhrp entry multicast dynamic
[R3-Tunnel0/0/0]ospf network-type broadcast
[R3-Tunnel0/0/0]ospf dr-priority 255
[R3-Tunnel0/0/0]q
[R3]ip route-static 0.0.0.0 0 34.0.0.4
分支站点R5.R6.R7：
# R5
[R5]int t0/0/0
[R5-Tunnel0/0/0]tunnel-protocol gre p2mp
[R5-Tunnel0/0/0]source Serial 4/0/0
[R5-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register
[R5-Tunnel0/0/0]ospf network-type broadcast
[R5-Tunnel0/0/0]ospf dr-priority 0
[R5]ip route-static 0.0.0.0 0 45.0.0.4
# R6
[R6]int t 0/0/0
[R6-Tunnel0/0/0]tunnel-protocol gre p2mp
[R6-Tunnel0/0/0]source Serial 4/0/0
[R6-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register
[R6-Tunnel0/0/0]ospf network-type broadcast
[R6-Tunnel0/0/0]ospf dr-priority 0
[R6-Tunnel0/0/0]q
[R6]ip route-static 0.0.0.0 0 46.0.0.4
# R7
[R7]int t 0/0/0
[R7-Tunnel0/0/0]tunnel-protocol gre p2mp
[R7-Tunnel0/0/0]source GigabitEthernet 0/0/0
[R7-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register
[R7-Tunnel0/0/0]ospf network-type broadcast
[R7-Tunnel0/0/0]ospf dr-priority 0
[R7]ip route-static 0.0.0.0 0 47.0.0.4
步骤三：OSPF配置
R1
ospf 1 router-id 1.1.1.1
area 0.0.0.1
network 172.16.33.0 0.0.0.255
network 172.16.34.0 0.0.0.255 R2
ospf 1 router-id 2.2.2.2
area 0.0.0.1
network 172.16.33.0 0.0.0.255
network 172.16.35.0 0.0.0.255 R3
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 172.16.6.0 0.0.0.255
area 0.0.0.1
network 172.16.33.0 0.0.0.255
network 172.16.36.0 0.0.0.255 R4
ospf 1 router-id 5.5.5.5
area 0.0.0.0
network 172.16.3.0 0.0.0.255
network 172.16.6.0 0.0.0.255 R5
ospf 1 router-id 5.5.5.5
area 0.0.0.0
network 172.16.3.0 0.0.0.255
network 172.16.6.0 0.0.0.255 R6
ospf 1 router-id 6.6.6.6
area 0.0.0.0
network 172.16.4.0 0.0.0.255
network 172.16.6.0 0.0.0.255
area 0.0.0.2
network 172.16.65.1 0.0.0.0 R7
ospf 1 router-id 7.7.7.7
area 0.0.0.0
network 172.16.5.0 0.0.0.255
network 172.16.6.0 0.0.0.255
area 0.0.0.3
network 172.16.97.1 0.0.0.0 R8
ospf 1 router-id 8.8.8.8
area 0.0.0.3
network 172.16.97.2 0.0.0.0
network 172.16.97.5 0.0.0.0
network 172.16.98.0 0.0.0.255 R9
ospf 1 router-id 9.9.9.9
area 0.0.0.3
network 172.16.97.6 0.0.0.0
ospf 2 router-id 9.9.9.9
area 0.0.0.4
network 172.16.129.1 0.0.0.0
network 172.16.130.0 0.0.0.255 R10
ospf 2 router-id 10.10.10.10
area 0.0.0.4
network 172.16.129.2 0.0.0.0
network 172.16.131.0 0.0.0.255 R11
ospf 1 router-id 11.11.11.11
area 0.0.0.2
network 172.16.65.2 0.0.0.0
network 172.16.65.5 0.0.0.0
network 172.16.66.0 0.0.0.0 R12
ospf 1 router-id 12.12.12.12
area 0.0.0.2
network 172.16.65.6 0.0.0.0
rip 1
version 2
network 172.16.0.0步骤四：NAT配置
# R3
[R3]acl 2000
[R3-acl-basic-2000]rule 1 permit source any
[R3]int Serial 4/0/0
[R3-Serial4/0/0]nat outbound 2000
# R5
[R5]acl 2000
[R5-acl-basic-2000]rule 1 permit source any
[R5]int Serial 4/0/0
[R5-Serial4/0/0]nat outbound 2000
# R6
[R6]acl 2000
[R6-acl-basic-2000]rule 1 permit source any
[R6-acl-basic-2000]int s 4/0/0
[R6-Serial4/0/0]nat outbound 2000
# R7
[R7]acl 2000
[R7-acl-basic-2000]rule 1 permit source any
[R7-acl-basic-2000]int g 0/0/0
[R7-GigabitEthernet0/0/0]nat outbound 2000步骤五：加快收敛
步骤六：双向重发布
R9:
[R9]ospf 1
[R9-ospf-1]import-route ospf 2
[R9]ospf 2
[R9-ospf-2]import-route ospf 1R12:
[R12-ospf-1]import-route rip 1
[R12]rip 1
[R12-rip-1]import-route ospf 1步骤七：区域汇总
# R3
[R3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0
# R9
[R9-ospf-1]asbr-summary 172.16.96.0 255.255.224.0
# R12
[R12-ospf-1]asbr-summary 172.16.64.0 255.255.224.0步骤八：保证更新安全
步骤九：检测
