OSPF特殊区域NSSA配置
了解SS区域的应用场景 两个业务部门网络或者合作公司网络合并的时候应用到。 了解NSSA区域数据库的特点 允许外部路由,用七类表示外部路由,不是5类表示的。 了解NSSA区域的默认路由的类型 是用7类表示的ABR自动产生的,使用totally NSSA ,ABR会产生两天默认路由一类是3类的一类是7类的 了解NSSA区域中7/5类LSA之间的转换 只能7类转换成5类,由ABR转换七类变成5类在普通区域进行传播
案例1:配置NSSA区域 1.1 问题 如图配置设备IP地址和OSPF区域 R4去往ISP,使用的是静态的默认路由 R1去往合作公司,使用的也是静态路由,仅需要访问 PC-1 即可 区域 123 不允许出现 5类 LSA 确保 PC-1 和 Server-1 互通
设置默认的静态路由 [R5] ip route-static 192.168.0.0 16 192.168.45.4 配置 R4 引入 去往外部网络的路由 R4]ip route-static 0.0.0.0 0 192.168.45.5 [R4]ospf 1 [R4-ospf-1]default-route-advertise R1可以ping通server1 区域123设置stub模式 R1 R2 R3全部设置stub [R1-ospf-1-area-0.0.0.123]stub
配置到10.0网段的静态路由 [R1]ip route-static 192.168.10.0 24 192.168.16.6 取消stub模式改成nssa 区域123里面的路由器都要修改 [R1-ospf-1-area-0.0.0.123]undo stub [R1-ospf-1-area-0.0.0.123]nssa 设置后产生的是7类lsa ABR转换成5类lsa R6设置ip地址,设定默认静态路由 [R6]ip route-static 0.0.0.0 0 192.168.16.1 [R1-ospf-1-area-0.0.0.123]nssa no-summary 设置totall nssa ,不接受3类lsa,会在产生一条3类默认路由条目 一共是一条7类和一条3类的默认路由条目
6 案例6:配置 OSPF 特殊区域 6.1 问题 如图,配置设备 IP 地址和 OSPF 区域 R6 与 R7 之间不运行 OSPF,通过静态路由互通 区域 12 没有外部路由 确保 PC-1 与 PC-3 可以互通 6.2 方案 搭建实验环境,如图-6所示。
图-6
6.3 步骤 实现此案例需要按照如下步骤进行。
1)配置IP地址,设置OSPF区域
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.12.1 24
[R1-GigabitEthernet0/0/0]quit
[R1]interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]ip add 192.168.1.254 24
[R1-GigabitEthernet0/0/2]quit
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 12
[R1-ospf-1-area-0.0.0.12]network 192.168.12.0 0.0.0.255
[R1-ospf-1-area-0.0.0.12]network 192.168.1.0 0.0.0.255
[R1-ospf-1-area-0.0.0.12]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R2
[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]ip add 192.168.12.2 24
[R2-GigabitEthernet0/0/1]quit
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ip add 192.168.23.2 24
[R2-GigabitEthernet0/0/0]quit
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 12
[R2-ospf-1-area-0.0.0.12]network 192.168.12.0 0.0.0.255
[R2-ospf-1-area-0.0.0.12]quit
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 192.168.23.0 0.0.0.255
[R2-ospf-1-area-0.0.0.0]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R3
[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]ip add 192.168.23.3 24
[R3-GigabitEthernet0/0/1]quit
[R3]interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0]ip add 192.168.34.3 24
[R3-GigabitEthernet0/0/0]quit
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 192.168.23.0 0.0.0.255
[R3-ospf-1-area-0.0.0.0]network 192.168.34.0 0.0.0.255
[R3-ospf-1-area-0.0.0.0]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R4
[R4]interface GigabitEthernet 0/0/1
[R4-GigabitEthernet0/0/1]ip add 192.168.34.4 24
[R4-GigabitEthernet0/0/1]quit
[R4]interface GigabitEthernet 0/0/0
[R4-GigabitEthernet0/0/0]ip add 192.168.45.4 24
[R4-GigabitEthernet0/0/0]quit
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 192.168.45.0 0.0.0.255
[R4-ospf-1-area-0.0.0.0]network 192.168.34.0 0.0.0.255
[R4-ospf-1-area-0.0.0.0]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R5
[R5]interface GigabitEthernet 0/0/1
[R5-GigabitEthernet0/0/1]ip add 192.168.45.5 24
[R5-GigabitEthernet0/0/1]quit
[R5]interface GigabitEthernet 0/0/0
[R5-GigabitEthernet0/0/0]ip add 192.168.56.5 24
[R5-GigabitEthernet0/0/0]quit
[R5]ospf 1 router-id 5.5.5.5
[R5-ospf-1]area 56
[R5-ospf-1-area-0.0.0.56]network 192.168.56.0 0.0.0.255
[R5-ospf-1-area-0.0.0.56]quit
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 192.168.45.0 0.0.0.255
[R5-ospf-1-area-0.0.0.0]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R6
[R6]interface GigabitEthernet 0/0/0
[R6-GigabitEthernet0/0/0]ip add 192.168.67.6 24
[R6-GigabitEthernet0/0/0]quit
[R6]interface GigabitEthernet 0/0/1
[R6-GigabitEthernet0/0/1]ip add 192.168.56.6 24
[R6-GigabitEthernet0/0/1]quit
[R6]interface GigabitEthernet 0/0/2
[R6-GigabitEthernet0/0/2]ip add 192.168.2.254 24
[R6-GigabitEthernet0/0/2]quit
[R6]ospf 1 router-id 6.6.6.6
[R6-ospf-1]area 56
[R6-ospf-1-area-0.0.0.56]network 192.168.56.0 0.0.0.255
[R6-ospf-1-area-0.0.0.56]network 192.168.2.0 0.0.0.255
[R6-ospf-1-area-0.0.0.56]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R7
[R7]interface GigabitEthernet 0/0/1
[R7-GigabitEthernet0/0/0]ip add 192.168.67.7 24
[R7-GigabitEthernet0/0/0]quit
[R7]interface GigabitEthernet 0/0/2
[R7-GigabitEthernet0/0/2]ip add 192.168.3.254 24
[R7-GigabitEthernet0/0/2]quit
[R7]ip route-static 192.168.0.0 24 192.168.67.6
2)配置 R6 与 R7 之间的互通路由,并引入 OSPF
[R6]ip route-static 192.168.3.0 24 192.168.67.7
[R6]ospf 1 router-id 6.6.6.6
[R6-ospf-1]import-route static
[R6-ospf-1]area 56
[R6-ospf-1-area-0.0.0.56]network 192.168.56.0 0.0.0.255
[R6-ospf-1-area-0.0.0.56]network 192.168.2.0 0.0.0.255
[R6-ospf-1-area-0.0.0.56]quit
3)配置区域12 为特殊区域
[R1]ospf 1
[R1-ospf-1]area 12
[R1-ospf-1-area-0.0.0.12]stub
[R1-ospf-1-area-0.0.0.12]quit
[R2]ospf 1
[R2-ospf-1]area 12
[R2-ospf-1-area-0.0.0.12]stub
[R2-ospf-1-area-0.0.0.12]quit
3)确保PC-1/2 与 PC3之间的互通
PC-1>ping 192.168.3.1 Ping 192.168.3.1: 32 data bytes, Press Ctrl_C to break From 192.168.3.1: bytes=32 seq=1 ttl=125 time=31 ms From 192.168.3.1: bytes=32 seq=2 ttl=125 time=31 ms From 192.168.3.1: bytes=32 seq=3 ttl=125 time=16 ms From 192.168.3.1: bytes=32 seq=4 ttl=125 time=16 ms From 192.168.3.1: bytes=32 seq=5 ttl=125 time=31 ms --- 192.168.3.1 ping statistics --- 5 packet(s) transmitted PC-2>ping 192.168.3.1 Ping 192.168.3.1: 32 data bytes, Press Ctrl_C to break From 192.168.3.1: bytes=32 seq=1 ttl=125 time=31 ms From 192.168.3.1: bytes=32 seq=2 ttl=125 time=31 ms From 192.168.3.1: bytes=32 seq=3 ttl=125 time=16 ms From 192.168.3.1: bytes=32 seq=4 ttl=125 time=16 ms From 192.168.3.1: bytes=32 seq=5 ttl=125 time=31 ms --- 192.168.3.1 ping statistics --- 5 packet(s) transmitted
1 案例1:配置NSSA区域
1.1 问题
如图配置设备IP地址和OSPF区域
R4去往ISP,使用的是静态的默认路由 R1去往合作公司,使用的也是静态路由,仅需要访问 PC-1 即可 区域 123 不允许出现 5类 LSA 确保 PC-1 和 Server-1 互通 1.2 方案 搭建实验环境,如图-1所示。
图-1
1.3 步骤 实现此案例需要按照如下步骤进行。
1)配置终端设备
PC-1: 192.168.10.1 255.255.255.0 192.168.10.254 Server-1: 192.168.20.1 255.255.255.0 192.168.20.254 2)配置IP地址和基本OSPF
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/0 [R1-GigabitEthernet0/0/0]ip address 192.168.12.1 24 [R1-GigabitEthernet0/0/0]q
[R1]interface GigabitEthernet 0/0/1 [R1-GigabitEthernet0/0/1]ip address 192.168.16.1 24 [R1-GigabitEthernet0/0/1]q
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 123
[R1-ospf-1-area-0.0.0.123]network 192.168.12.0 0.0.0.255
[R1-ospf-1-area-0.0.0.123]quit
[R1-ospf-1]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R2
[R2]interface GigabitEthernet 0/0/1 [R2-GigabitEthernet0/0/1]ip address 192.168.12.2 24 [R2-GigabitEthernet0/0/1]q
[R2]interface GigabitEthernet 0/0/0 [R2-GigabitEthernet0/0/0]ip address 192.168.23.2 24 [R2-GigabitEthernet0/0/0]q
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 123
[R2-ospf-1-area-0.0.0.123]network 192.168.12.0 0.0.0.255
[R2-ospf-1-area-0.0.0.123]network 192.168.23.0 0.0.0.255
[R2-ospf-1-area-0.0.0.123]quit
[R2-ospf-1]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R3
[R3]interface GigabitEthernet 0/0/1 [R3-GigabitEthernet0/0/1]ip address 192.168.23.3 24 [R3-GigabitEthernet0/0/1]q
[R3]interface GigabitEthernet 0/0/0 [R3-GigabitEthernet0/0/0]ip address 192.168.34.3 24 [R3-GigabitEthernet0/0/0]q
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 123
[R3-ospf-1-area-0.0.0.123]network 192.168.23.0 0.0.0.255
[R3-ospf-1-area-0.0.0.123]quit
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 192.168.34.0 0.0.0.255
[R3-ospf-1]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R4
[R4]interface GigabitEthernet 0/0/1 [R4-GigabitEthernet0/0/1]ip address 192.168.34.4 24 [R4-GigabitEthernet0/0/1]q
[R4]interface GigabitEthernet 0/0/0 [R4-GigabitEthernet0/0/0]ip address 192.168.45.4 24 [R4-GigabitEthernet0/0/0]q
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 192.168.34.0 0.0.0.255
[R4-ospf-1]quit
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R5
[R5]interface GigabitEthernet 0/0/1
[R5-GigabitEthernet0/0/1]ip address 192.168.45.5 24
[R5-GigabitEthernet0/0/1]quit
[R5]interface GigabitEthernet 0/0/2
[R5-GigabitEthernet0/0/2]ip address 192.168.20.254 24
[R5-GigabitEthernet0/0/2]quit
[R5] ip route-static 192.168.0.0 16 192.168.45.4
<Huawei>undo terminal monitor
<Huawei>system-view
[Huawei]sysname R6
[R6]interface GigabitEthernet 0/0/0 [R6-GigabitEthernet0/0/1]ip address 192.168.16.6 24 [R6-GigabitEthernet0/0/1]quit [R6]interface GigabitEthernet 0/0/2 [R6-GigabitEthernet0/0/2]ip address 192.168.10.254 24 [R6-GigabitEthernet0/0/2]quit [R6] ip route-static 192.168.0.0 255.255.0.0 192.168.16.1 3)配置区域123为 NSSA 区域
[R1]ospf 1
[R1-ospf-1]area 123
[R1-ospf-1-area-0.0.0.123]nssa
[R1-ospf-1-area-0.0.0.123]quit
[R2]ospf 1
[R2-ospf-1]area 123
[R2-ospf-1-area-0.0.0.123]nssa
[R2-ospf-1-area-0.0.0.123]quit
[R3]ospf 1
[R3-ospf-1]area 123
[R3-ospf-1-area-0.0.0.123]nssa
[R3-ospf-1-area-0.0.0.123]quit
4)配置 R1 引入 合作公司的外部路由
[R1]ip route-static 192.168.10.0 24 192.168.16.6 [R1]ospf 1 [R1-ospf-1]import-route static 5)配置 R4 引入 去往外部网络的路由
[R4]ip route-static 0.0.0.0 0 192.168.45.5 [R4]ospf 1 [R4-ospf-1]default-route-advertise 6)测试 PC1 和 Server-1的连通性
PC-1>ping 192.168.20.1 Ping 192.168.20.1: 32 data bytes, Press Ctrl_C to break From 192.168.20.1: bytes=32 seq=1 ttl=125 time=31 ms From 192.168.20.1: bytes=32 seq=2 ttl=125 time=31 ms From 192.168.20.1: bytes=32 seq=3 ttl=125 time=16 ms From 192.168.20.1: bytes=32 seq=4 ttl=125 time=16 ms From 192.168.20.1: bytes=32 seq=5 ttl=125 time=31 ms --- 192.168.20.1 ping statistics --- 5 packet(s) transmitted