OSPF特殊区域NSSA配置

了解SS区域的应用场景 两个业务部门网络或者合作公司网络合并的时候应用到。 了解NSSA区域数据库的特点 允许外部路由,用七类表示外部路由,不是5类表示的。 了解NSSA区域的默认路由的类型 是用7类表示的ABR自动产生的,使用totally NSSA ,ABR会产生两天默认路由一类是3类的一类是7类的 了解NSSA区域中7/5类LSA之间的转换 只能7类转换成5类,由ABR转换七类变成5类在普通区域进行传播

案例1:配置NSSA区域 1.1 问题 如图配置设备IP地址和OSPF区域 R4去往ISP,使用的是静态的默认路由 R1去往合作公司,使用的也是静态路由,仅需要访问 PC-1 即可 区域 123 不允许出现 5类 LSA 确保 PC-1 和 Server-1 互通

设置默认的静态路由 [R5] ip route-static 192.168.0.0 16 192.168.45.4 配置 R4 引入 去往外部网络的路由 R4]ip route-static 0.0.0.0 0 192.168.45.5 [R4]ospf 1 [R4-ospf-1]default-route-advertise R1可以ping通server1 区域123设置stub模式 R1 R2 R3全部设置stub [R1-ospf-1-area-0.0.0.123]stub

配置到10.0网段的静态路由 [R1]ip route-static 192.168.10.0 24 192.168.16.6 取消stub模式改成nssa 区域123里面的路由器都要修改 [R1-ospf-1-area-0.0.0.123]undo stub [R1-ospf-1-area-0.0.0.123]nssa 设置后产生的是7类lsa ABR转换成5类lsa R6设置ip地址,设定默认静态路由 [R6]ip route-static 0.0.0.0 0 192.168.16.1 [R1-ospf-1-area-0.0.0.123]nssa no-summary 设置totall nssa ,不接受3类lsa,会在产生一条3类默认路由条目 一共是一条7类和一条3类的默认路由条目

6 案例6:配置 OSPF 特殊区域 6.1 问题 如图,配置设备 IP 地址和 OSPF 区域 R6 与 R7 之间不运行 OSPF,通过静态路由互通 区域 12 没有外部路由 确保 PC-1 与 PC-3 可以互通 6.2 方案 搭建实验环境,如图-6所示。

图-6

6.3 步骤 实现此案例需要按照如下步骤进行。

1)配置IP地址,设置OSPF区域

<Huawei>undo terminal monitor <Huawei>system-view [Huawei]sysname R1 [R1]interface GigabitEthernet 0/0/0 [R1-GigabitEthernet0/0/0]ip add 192.168.12.1 24 [R1-GigabitEthernet0/0/0]quit [R1]interface GigabitEthernet 0/0/2 [R1-GigabitEthernet0/0/2]ip add 192.168.1.254 24 [R1-GigabitEthernet0/0/2]quit [R1]ospf 1 router-id 1.1.1.1 [R1-ospf-1]area 12
[R1-ospf-1-area-0.0.0.12]network 192.168.12.0 0.0.0.255 [R1-ospf-1-area-0.0.0.12]network 192.168.1.0 0.0.0.255 [R1-ospf-1-area-0.0.0.12]quit <Huawei>undo terminal monitor <Huawei>system-view [Huawei]sysname R2 [R2]interface GigabitEthernet 0/0/1 [R2-GigabitEthernet0/0/1]ip add 192.168.12.2 24 [R2-GigabitEthernet0/0/1]quit [R2]interface GigabitEthernet 0/0/0 [R2-GigabitEthernet0/0/0]ip add 192.168.23.2 24 [R2-GigabitEthernet0/0/0]quit [R2]ospf 1 router-id 2.2.2.2 [R2-ospf-1]area 12
[R2-ospf-1-area-0.0.0.12]network 192.168.12.0 0.0.0.255 [R2-ospf-1-area-0.0.0.12]quit [R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 192.168.23.0 0.0.0.255 [R2-ospf-1-area-0.0.0.0]quit <Huawei>undo terminal monitor <Huawei>system-view [Huawei]sysname R3 [R3]interface GigabitEthernet 0/0/1 [R3-GigabitEthernet0/0/1]ip add 192.168.23.3 24 [R3-GigabitEthernet0/0/1]quit [R3]interface GigabitEthernet 0/0/0 [R3-GigabitEthernet0/0/0]ip add 192.168.34.3 24 [R3-GigabitEthernet0/0/0]quit [R3]ospf 1 router-id 3.3.3.3 [R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 192.168.23.0 0.0.0.255 [R3-ospf-1-area-0.0.0.0]network 192.168.34.0 0.0.0.255 [R3-ospf-1-area-0.0.0.0]quit <Huawei>undo terminal monitor <Huawei>system-view [Huawei]sysname R4 [R4]interface GigabitEthernet 0/0/1 [R4-GigabitEthernet0/0/1]ip add 192.168.34.4 24 [R4-GigabitEthernet0/0/1]quit [R4]interface GigabitEthernet 0/0/0 [R4-GigabitEthernet0/0/0]ip add 192.168.45.4 24 [R4-GigabitEthernet0/0/0]quit [R4]ospf 1 router-id 4.4.4.4 [R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 192.168.45.0 0.0.0.255 [R4-ospf-1-area-0.0.0.0]network 192.168.34.0 0.0.0.255 [R4-ospf-1-area-0.0.0.0]quit <Huawei>undo terminal monitor <Huawei>system-view [Huawei]sysname R5 [R5]interface GigabitEthernet 0/0/1 [R5-GigabitEthernet0/0/1]ip add 192.168.45.5 24 [R5-GigabitEthernet0/0/1]quit [R5]interface GigabitEthernet 0/0/0 [R5-GigabitEthernet0/0/0]ip add 192.168.56.5 24 [R5-GigabitEthernet0/0/0]quit [R5]ospf 1 router-id 5.5.5.5 [R5-ospf-1]area 56
[R5-ospf-1-area-0.0.0.56]network 192.168.56.0 0.0.0.255 [R5-ospf-1-area-0.0.0.56]quit [R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 192.168.45.0 0.0.0.255 [R5-ospf-1-area-0.0.0.0]quit <Huawei>undo terminal monitor <Huawei>system-view [Huawei]sysname R6 [R6]interface GigabitEthernet 0/0/0 [R6-GigabitEthernet0/0/0]ip add 192.168.67.6 24 [R6-GigabitEthernet0/0/0]quit [R6]interface GigabitEthernet 0/0/1 [R6-GigabitEthernet0/0/1]ip add 192.168.56.6 24 [R6-GigabitEthernet0/0/1]quit [R6]interface GigabitEthernet 0/0/2 [R6-GigabitEthernet0/0/2]ip add 192.168.2.254 24 [R6-GigabitEthernet0/0/2]quit [R6]ospf 1 router-id 6.6.6.6 [R6-ospf-1]area 56
[R6-ospf-1-area-0.0.0.56]network 192.168.56.0 0.0.0.255 [R6-ospf-1-area-0.0.0.56]network 192.168.2.0 0.0.0.255 [R6-ospf-1-area-0.0.0.56]quit <Huawei>undo terminal monitor <Huawei>system-view [Huawei]sysname R7 [R7]interface GigabitEthernet 0/0/1 [R7-GigabitEthernet0/0/0]ip add 192.168.67.7 24 [R7-GigabitEthernet0/0/0]quit [R7]interface GigabitEthernet 0/0/2 [R7-GigabitEthernet0/0/2]ip add 192.168.3.254 24 [R7-GigabitEthernet0/0/2]quit [R7]ip route-static 192.168.0.0 24 192.168.67.6 2)配置 R6 与 R7 之间的互通路由,并引入 OSPF

[R6]ip route-static 192.168.3.0 24 192.168.67.7 [R6]ospf 1 router-id 6.6.6.6 [R6-ospf-1]import-route static [R6-ospf-1]area 56
[R6-ospf-1-area-0.0.0.56]network 192.168.56.0 0.0.0.255 [R6-ospf-1-area-0.0.0.56]network 192.168.2.0 0.0.0.255 [R6-ospf-1-area-0.0.0.56]quit 3)配置区域12 为特殊区域

[R1]ospf 1 [R1-ospf-1]area 12
[R1-ospf-1-area-0.0.0.12]stub [R1-ospf-1-area-0.0.0.12]quit [R2]ospf 1 [R2-ospf-1]area 12
[R2-ospf-1-area-0.0.0.12]stub [R2-ospf-1-area-0.0.0.12]quit 3)确保PC-1/2 与 PC3之间的互通

PC-1>ping 192.168.3.1 Ping 192.168.3.1: 32 data bytes, Press Ctrl_C to break From 192.168.3.1: bytes=32 seq=1 ttl=125 time=31 ms From 192.168.3.1: bytes=32 seq=2 ttl=125 time=31 ms From 192.168.3.1: bytes=32 seq=3 ttl=125 time=16 ms From 192.168.3.1: bytes=32 seq=4 ttl=125 time=16 ms From 192.168.3.1: bytes=32 seq=5 ttl=125 time=31 ms --- 192.168.3.1 ping statistics --- 5 packet(s) transmitted PC-2>ping 192.168.3.1 Ping 192.168.3.1: 32 data bytes, Press Ctrl_C to break From 192.168.3.1: bytes=32 seq=1 ttl=125 time=31 ms From 192.168.3.1: bytes=32 seq=2 ttl=125 time=31 ms From 192.168.3.1: bytes=32 seq=3 ttl=125 time=16 ms From 192.168.3.1: bytes=32 seq=4 ttl=125 time=16 ms From 192.168.3.1: bytes=32 seq=5 ttl=125 time=31 ms --- 192.168.3.1 ping statistics --- 5 packet(s) transmitted

1 案例1:配置NSSA区域

1.1 问题

如图配置设备IP地址和OSPF区域

R4去往ISP,使用的是静态的默认路由 R1去往合作公司,使用的也是静态路由,仅需要访问 PC-1 即可 区域 123 不允许出现 5类 LSA 确保 PC-1 和 Server-1 互通 1.2 方案 搭建实验环境,如图-1所示。

图-1

1.3 步骤 实现此案例需要按照如下步骤进行。

1)配置终端设备

PC-1: 192.168.10.1 255.255.255.0 192.168.10.254 Server-1: 192.168.20.1 255.255.255.0 192.168.20.254 2)配置IP地址和基本OSPF

<Huawei>undo terminal monitor
<Huawei>system-view [Huawei]sysname R1

[R1]interface GigabitEthernet 0/0/0 [R1-GigabitEthernet0/0/0]ip address 192.168.12.1 24 [R1-GigabitEthernet0/0/0]q

[R1]interface GigabitEthernet 0/0/1 [R1-GigabitEthernet0/0/1]ip address 192.168.16.1 24 [R1-GigabitEthernet0/0/1]q

[R1]ospf 1 router-id 1.1.1.1 [R1-ospf-1]area 123
[R1-ospf-1-area-0.0.0.123]network 192.168.12.0 0.0.0.255 [R1-ospf-1-area-0.0.0.123]quit [R1-ospf-1]quit <Huawei>undo terminal monitor
<Huawei>system-view [Huawei]sysname R2

[R2]interface GigabitEthernet 0/0/1 [R2-GigabitEthernet0/0/1]ip address 192.168.12.2 24 [R2-GigabitEthernet0/0/1]q

[R2]interface GigabitEthernet 0/0/0 [R2-GigabitEthernet0/0/0]ip address 192.168.23.2 24 [R2-GigabitEthernet0/0/0]q

[R2]ospf 1 router-id 2.2.2.2 [R2-ospf-1]area 123
[R2-ospf-1-area-0.0.0.123]network 192.168.12.0 0.0.0.255 [R2-ospf-1-area-0.0.0.123]network 192.168.23.0 0.0.0.255 [R2-ospf-1-area-0.0.0.123]quit [R2-ospf-1]quit <Huawei>undo terminal monitor
<Huawei>system-view [Huawei]sysname R3

[R3]interface GigabitEthernet 0/0/1 [R3-GigabitEthernet0/0/1]ip address 192.168.23.3 24 [R3-GigabitEthernet0/0/1]q

[R3]interface GigabitEthernet 0/0/0 [R3-GigabitEthernet0/0/0]ip address 192.168.34.3 24 [R3-GigabitEthernet0/0/0]q

[R3]ospf 1 router-id 3.3.3.3 [R3-ospf-1]area 123
[R3-ospf-1-area-0.0.0.123]network 192.168.23.0 0.0.0.255 [R3-ospf-1-area-0.0.0.123]quit [R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 192.168.34.0 0.0.0.255 [R3-ospf-1]quit <Huawei>undo terminal monitor
<Huawei>system-view [Huawei]sysname R4

[R4]interface GigabitEthernet 0/0/1 [R4-GigabitEthernet0/0/1]ip address 192.168.34.4 24 [R4-GigabitEthernet0/0/1]q

[R4]interface GigabitEthernet 0/0/0 [R4-GigabitEthernet0/0/0]ip address 192.168.45.4 24 [R4-GigabitEthernet0/0/0]q

[R4]ospf 1 router-id 4.4.4.4 [R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 192.168.34.0 0.0.0.255 [R4-ospf-1]quit <Huawei>undo terminal monitor
<Huawei>system-view [Huawei]sysname R5

[R5]interface GigabitEthernet 0/0/1 [R5-GigabitEthernet0/0/1]ip address 192.168.45.5 24 [R5-GigabitEthernet0/0/1]quit [R5]interface GigabitEthernet 0/0/2 [R5-GigabitEthernet0/0/2]ip address 192.168.20.254 24 [R5-GigabitEthernet0/0/2]quit [R5] ip route-static 192.168.0.0 16 192.168.45.4 <Huawei>undo terminal monitor
<Huawei>system-view [Huawei]sysname R6

[R6]interface GigabitEthernet 0/0/0 [R6-GigabitEthernet0/0/1]ip address 192.168.16.6 24 [R6-GigabitEthernet0/0/1]quit [R6]interface GigabitEthernet 0/0/2 [R6-GigabitEthernet0/0/2]ip address 192.168.10.254 24 [R6-GigabitEthernet0/0/2]quit [R6] ip route-static 192.168.0.0 255.255.0.0 192.168.16.1 3)配置区域123为 NSSA 区域

[R1]ospf 1 [R1-ospf-1]area 123
[R1-ospf-1-area-0.0.0.123]nssa [R1-ospf-1-area-0.0.0.123]quit [R2]ospf 1 [R2-ospf-1]area 123
[R2-ospf-1-area-0.0.0.123]nssa [R2-ospf-1-area-0.0.0.123]quit [R3]ospf 1 [R3-ospf-1]area 123
[R3-ospf-1-area-0.0.0.123]nssa [R3-ospf-1-area-0.0.0.123]quit 4)配置 R1 引入 合作公司的外部路由

[R1]ip route-static 192.168.10.0 24 192.168.16.6 [R1]ospf 1 [R1-ospf-1]import-route static 5)配置 R4 引入 去往外部网络的路由

[R4]ip route-static 0.0.0.0 0 192.168.45.5 [R4]ospf 1 [R4-ospf-1]default-route-advertise 6)测试 PC1 和 Server-1的连通性

PC-1>ping 192.168.20.1 Ping 192.168.20.1: 32 data bytes, Press Ctrl_C to break From 192.168.20.1: bytes=32 seq=1 ttl=125 time=31 ms From 192.168.20.1: bytes=32 seq=2 ttl=125 time=31 ms From 192.168.20.1: bytes=32 seq=3 ttl=125 time=16 ms From 192.168.20.1: bytes=32 seq=4 ttl=125 time=16 ms From 192.168.20.1: bytes=32 seq=5 ttl=125 time=31 ms --- 192.168.20.1 ping statistics --- 5 packet(s) transmitted