|
OSPF详细配置
启用OSPF动态路由协议
routerospf进程号
进程号可以随意设置，只标识ospf为本路由器内的一个进程
定义参与ospf的子网.该子网属于哪一个OSPF路由信息交换区域。
networkip子网号通配符area区域号
路由器将限制只能在相同区域内交换子网信息，不同区域间不交换路由信息。另外，区域0为主干OSPF区域。不同区域交换路由信息必须经过区域0。一般地，某一区域要接入OSPF0路由区域，该区域必须至少有一台路由器为区域边缘路由器，即它既参与本区域路由又参与区域0路由。
OSPF区域间的路由信息总结
如果区域中的子网是连续的，则区域边缘路由器向外传播给路由信息时，采用路由总结功能后，路由器就会将所有这些连续的子网总结为一条路由传播给其它区域，则在其它区域内的路由器看到这个区域的路由就只有一条。这样可以节省路由时所需网络带宽。
设置对某一特定范围的子网进行总结：area区域号range子网范围掩码
指明网络类型在需要进行OSPF路由信息的端口中，设置：
ipospfnetworkbroadcast或non-broadcast或point-to-mutlipoint
一般地，对于DDN，帧中继和X.25属于非广播型的网络，即non-broadcast
对于非广播型的网络连接，需指明路由器的相邻路由器
neighbor相邻路由器的相邻端口的IP地址
通过以上配置，路由器之间就可以完成交换路由信息了，其它设置，为了防止路由信息被窃取，可以对OSPF进行安全设置，只有合法的同一区域的路由器之间才能交换路由信息。
设置步骤
设置某区域使用安全设置MD5方式
area区域标号autherficationmessage-digest
可以采用明文方式，但建议采用MD5方式，较安全。
设置某端口验证其相邻路由器相邻端口时的MD5口令，在端口设置模式下
ipospfmessage-digest-key口令标号MD5口令字符串
其中，在同一区域的相邻路由器的相邻端口的口令标号及口令字符串必须相同，同一路由器的不同端口的MD5口令可以不同，也可以某些端口使用安全设置，某些端口不使用安全设置。
实例1无安全，无路由总结的OSPF设置
2511－1的设置
Currentconfiguration：
！
version11.3
noservicepassword-encryption
!
hostname2511-1
!
enablepasswordcisco
!
interfaceEthernet0
ipaddress192.4.1.1255.255.255.0
!
interfaceSerial0
ipaddress192.3.1.1255.255.255.0
encapsulationframe-relayIETF
noipmroute-cache
bandwidth2000
frame-relaymapip192.3.1.2100broadcast
frame-relaylmi-typecisco
!
interfaceSerial1
ipaddress192.1.1.1255.255.255.0
encapsulationppp
bandwidth64
!
routerospf1
passive-interfaceEthernet0
network192.1.1.00.0.0.255area0
network192.3.1.00.0.0.255area0
network192.4.1.00.0.0.255area0
neighbor192.1.1.2priority1
neighbor192.3.1.2priority1
!
ipclassless
!
linecon0
line18
lineaux0
linevty04
!
end
2505的设置
Currentconfiguration:
!
version11.2
noserviceudp-small-servers
noservicetcp-small-servers
!
hostname2505
!
enablesecret5$1$GbYT$OR05giiLZxI4hEAO0F8kV1
!
hubether01
link-test
auto-polarity
!
hubether02
link-test
auto-polarity
!
hubether03
link-test
auto-polarity
!
hubether04
link-test
auto-polarity
!
hubether05
link-test
auto-polarity
!
hubether06
link-test
auto-polarity
!
hubether07
link-test
auto-polarity
!
hubether08
link-test
auto-polarity
!
interfaceEthernet0
ipaddress192.1.4.1255.255.255.0
!
interfaceSerial0
ipaddress192.1.2.1255.255.255.0
ipospfnetworknon-broadcast
bandwidth2000
clockrate2000000
!
interfaceSerial1
ipaddress192.1.1.2255.255.255.0
enpsurationppp
ipospfnetworknon-broadcast
bandwidth64
clockrate64000
!
routerospf1
passive-interfaceEthernet0
network192.1.1.00.0.0.255area0
network192.1.2.00.0.0.255area2
network192.1.4.00.0.0.255area2
neighbor192.1.1.1priority1
neighbor192.1.2.2priority1
!
noipclassless
ipospfname-lookup
!
linecon0
lineaux0
linevty04
login
!
end
internal-2的设置
Currentconfiguration:
!
version11.2
noserviceudp-small-servers
noservicetcp-small-servers
!
hostnameinternal-2
!
enablesecret5$1$KX00$rTI/2TvDokWxT4xC6wvmi/
!
interfaceEthernet0
noipaddress
shutdown
!
interfaceSerial0
ipaddress192.1.2.2255.255.255.0
ipospfnetworknon-broadcast
!
interfaceSerial1
noipaddress
shutdown
!
routerospf1
network192.1.2.00.0.0.255area2
neighbor192.1.2.1priority1
!
noipclassless
!
linecon0
line116
lineaux0
linevty04
!
end
2514的设置
Currentconfiguration:
!
version11.2
noserviceudp-small-servers
noservicetcp-small-servers
!
hostname2514
!
enablesecret5$1$uoHU$Vks/lYCRi33z4TXs4qekI0
!
frame-relayswitching
!
interfaceEthernet0
ipaddress192.5.1.1255.255.255.0
!
interfaceEthernet1
noipaddress
shutdown
!
interfaceSerial0
ipaddress192.3.1.2255.255.255.0
encapsulationframe-relayIETF
bandwidth2000
clockrate2000000
frame-relaymapip192.3.1.1100broadcast
frame-relayintf-typedce
!
interfaceSerial1
ipaddress192.2.1.1255.255.255.0
noipmroute-cache
encapsulationX25dce
bandwidth64
x25address1234
x25htc16
x25nvc4
x25mapip192.2.1.25678broadcast
clockrate64000
!
routerospf1
passive-interfaceEthernet0
network192.3.1.00.0.0.255area0
network192.2.1.00.0.0.255area0
network192.5.1.00.0.0.255area0
neighbor192.2.1.2priority1
neighbor192.3.1.1priority1
!
noipclassless
!
linecon0
lineaux0
linevty04
login
!
end
2511-2的设置
Buildingconfiguration...
Currentconfiguration:
!
version11.3
noservicepassword-encryption
!
hostname2511-2
!
enablesecret5$1$7o5F$MSyFWzVf6JBgnjLJghHSB.
!
interfaceEthernet0
ipaddress192.2.4.1255.255.255.0
!
interfaceSerial0
ipaddress192.2.1.2255.255.255.0
encapsulationx25
noipmroute-cache
x25address5678
x25htc16
x25nvc4
x25mapip192.2.1.11234broadcast
!
interfaceSerial1
ipaddress192.2.2.1255.255.255.0
ipospfnetworknon-broadcast
noipmroute-cache
bandwidth2000
clockrate2000000
!
routerospf1
passive-interfaceEthernet0
network192.2.2.00.0.0.255area1
network192.2.4.00.0.0.255area1
network192.2.1.00.0.0.255area0
neighbor192.2.1.1piority1
neighbor192.2.2.2piority1
!
ipclassless
!
linecon0
line18
lineaux0
linevty04
!
end
internal-1的设置
Buildingconfiguration...
Currentconfiguration:
!
version11.2
noserviceudp-small-servers
noservicetcp-small-servers
!
hostnameinternal-1
!
enablesecret5$1$cF2M$z2T8Ohij5q/yn2RsiVaGE/
!
interfaceEthernet0
noipaddress
shutdown
!
interfaceSerial0
ipaddress192.2.2.2255.255.255.0
ipospfnetworknon-broadcast
!
interfaceSerial1
noipaddress
shutdown
!
routerospf10
network192.2.2.00.0.0.255area1
neighbor192.2.2.1priority1
!
noipclassless
!
linecon0
line116
lineaux0
linevty04
login
!
end
实例2有安全，路由总结的OSPF设置
internal-2的设置
Currentconfiguration:
!
version11.2
noserviceudp-small-servers
noservicetcp-small-servers
!
hostnameinternal-2
!
enablesecret5$1$KX00$rTI/2TvDokWxT4xC6wvmi/
!
interfaceEthernet0
noipaddress
shutdown
!
interfaceSerial0
ipaddress192.1.2.2255.255.255.0
ipospfmessage-digest-key1md5cisco
ipospfnetworknon-broadcast
!
interfaceSerial1
noipaddress
shutdown
!
routerospf1
network192.1.2.00.0.0.255area2
neighbor192.1.2.1priority1
area2authenticationmessage-digest
!
noipclassless
!
linecon0
line116
lineaux0
linevty04
login
!
end
2505的设置
Currentconfiguration:
!
version11.2
noserviceudp-small-servers
noservicetcp-small-servers
!
hostname2505
!
enablesecret5$1$b43o$CpEYSTC2EPwnR1QGvIm//
!
username2511-1password7104D000A0618
!
hubether01
link-test
auto-polarity
!
hubether02
link-test
auto-polarity
!
hubether03
link-test
auto-polarity
!
hubether04
link-test
auto-polarity
!
hubether05
link-test
auto-polarity
!
hubether06
link-test
auto-polarity
!
hubether07
link-test
auto-polarity
!
hubether08
link-test
auto-polarity
!
interfaceEthernet0
ipaddress192.1.4.1255.255.255.0
!
interfaceSerial0
ipaddress192.1.2.1255.255.255.0
ipospfmessage-digest–key1md5cisco
ipospfnetworknon-broadcast
bandwidth2000
clockrate2000000
!
interfaceSerial1
ipaddress192.7.1.2255.255.255.0
enpsulationppp
ipospfmessage-digest-key1md5kim
ipospfnetworknon-broadcast
bandwidth64
clockrate64000
pppauthenticationchap
!
routerospf1
passive-interfaceEthernet0
network192.1.2.00.0.0.255area2
network192.1.4.00.0.0.255area2
network192.7.1.00.0.0.255area0
neighbor192.7.1.1priority1
neighbor192.1.2.2priority1
area0authenticationmessage-digest
area2authenticationmessage-digest
area2range192.1.0.0255.255.0.0
!
noipclassless
ipospfname-lookup
!
linecon0
lineaux0
linevty04
login
!
end
2511－1的设置
Currentconfiguration：
！
version11.3
noservicepassword-encryption
!
hostname2511-1
!
enablepasswordcisco
!
username2505passweord0cisco
noipdomain-lookup
!
interfaceEthernet0
ipaddress192.4.1.1255.255.255.0
!
interfaceSerial0
ipaddress192.3.1.1255.255.255.0
encapsulationframe-relayIETF
ipospfmessage-digest-key1md5kim
noipmroute-cache
bandwidth2000
frame-relaymapip192.3.1.2100broadcast
frame-relaylmi-typecisco
!
interfaceSerial1
ipaddress192.7.1.1255.255.255.0
encapsulationppp
ipospfmessage-digest-key1md5kim
ipospfnetworknon-broadcast
bandwidth64
pppauthenticationchap
!
routerospf1
passive-interfaceEthernet0
network192.3.1.00.0.0.255area0
network192.4.1.00.0.0.255area0
network192.7.1.00.0.0.255area0
neighbor192.7.1.2priority1
neighbor192.3.1.2priority1
area0authenticationmessage-digest
!
noipclassless
!
linecon0
line18
lineaux0
linevty04
login
!
end
2514的设置
Currentconfiguration:
!
version11.2
noserviceudp-small-servers
noservicetcp-small-servers
!
hostname2514
!
enablesecret5$1$uoHU$Vks/lYCRi33z4TXs4qekI0
!
frame-relayswitching
!
interfaceEthernet0
ipaddress192.5.1.1255.255.255.0
!
interfaceEthernet1
noipaddress
shutdown
!
interfaceSerial0
ipaddress192.3.1.2255.255.255.0
encapsulationframe-relayIETF
ipospfmessage-digest-key1md5kim
bandwidth2000
clockrate2000000
frame-relaymapip192.3.1.1100broadcast
frame-relayintf-typedce
!
interfaceSerial1
ipaddress192.8.1.1255.255.255.0
noipmroute-cache
encapsulationX25dce
ipospfmessage-digest-key2md5cisco
bandwidth64
x25address1234
x25htc16
x25nvc4
x25mapip192.8.1.25678broadcast
clockrate64000
!
routerospf1
network192.3.1.00.0.0.255area0
network192.5.1.00.0.0.255area0
network192.8.1.00.0.0.255area0
neighbor192.8.1.2priority1
neighbor192.3.1.1priority1
area0authenticationmessage-digest
!
noipclassless
!
linecon0
lineaux0
linevty04
login
!
end
2511-2的设置
Currentconfiguration:
version11.3
noservicepassword-encryption
!
hostname2511-2
!
enablesecret5$1$7o5F$MSyFWzVf6JBgnjLJghHSB.
!
!
interfaceEthernet0
ipaddress192.2.4.1255.255.255.0
!
interfaceSerial0
ipaddress192.8.1.2255.255.255.0
encapsulationx25
ipospfmessage-digest-key2md5cisco
noipmroute-cache
x25address5678
x25htc16
x25nvc4
x25mapip192.8.1.11234broadcast
!
interfaceSerial1
ipaddress192.2.2.1255.255.255.0
ipospfauthentication-keykim
ipospfnetworknon-broadcast
noipmroute-cache
bandwidth2000
clockrate2000000
!
routerospf1
passive-interfaceEthernet0
network192.2.2.00.0.0.255area1
network192.2.4.00.0.0.255area1
network192.8.1.00.0.0.255area0
neighbor192.8.1.1priority1
neighbor192.2.2.2priority1
area0authenticationmessage-digest
area1authentication(疑应加上message-digest，但原文如此)
area1range192.2.0.0255.255.0.0
!
ipclassless
!
linecon0
line18
lineaux0
linevty04
login
!
end
internal-1的设置
Buildingconfiguration...
Currentconfiguration:
!
version11.2
noserviceudp-small-servers
noservicetcp-small-servers
!
hostnameinternal-1
!
enablesecret5$1$cF2M$z2T8Ohij5q/yn2RsiVaGE/
!
interfaceEthernet0
noipaddress
shutdown
!
interfaceSerial0
ipaddress192.2.2.2255.255.255.0
ipospfauthentication-keykim
ipospfnetworknon-broadcast
!
interfaceSerial1
noipaddress
shutdown
!
routerospf1
network92.2.2.00.0.0.255area1
neighbor192.2.2.1priority1
area1authentication
!
noipclassless
!
linecon0
line116
lineaux0
linevty04
login
!
end
|
