HCIA—15实验：规划与优化、检测。沉默接口、空接口。OSPF、认证 、汇总、沉默接口、加快收敛、缺省路由

学习目标：

• 实验：规划与优化、检测。沉默接口、空接口。OSPF、认证 、汇总、沉默接口、加快收敛、缺省路由

---

学习内容：

1. 实验：规划与优化、检测。沉默接口、空接口。OSPF、认证 、汇总、沉默接口、加快收敛、缺省路由

1.要求——基本的

作者的

思想：

1.虚拟成为现实

2.分层

3.预留—骨干、每一段骨干一个网段

4.节省-MASK30

5.防止被动黑洞—空接口

6. 减少路由条目—子网汇总——左右网段

7.认证-安全

8.选举——只有一个DR—，减少周期更新的cpu占用

9.宣告——ARB网段、其他路由器mask为0.0.0.0

沉默接口、加快收敛、缺省路由、（浮动路由-备份)

2.模型——IP分配、规划、优化

1）模型

2）IP分配

1.图

2.详细的

192.168.1.0 24
?. . .0 0000000 25
? ? ?128
192.168.1.0 25
192.168.1.128 25

192.168.1.128 25+5 30
?. . .0 00000 00 30
192.168.1.128 30-网段

192.168.1.0 25-网段
?. . .0 00 00000 27
? ? ? ? 00
? ? ? ? 01
? ? ? ? 10
? ? ? ? 11
? ? ? 64 ?32
192.168.1.0 27
192.168.1.32 27
192.168.1.64 27
192.168.1.96 27-骨干

192.168.1.96 27-骨干
?. . .000 000 00 27+3 30
? ? ? ? ? 000
? ? ? ? ? 001
? ? ? ? ? 010
? ? ? ? ? 011
? ? ? ? ?16 8 4 ? ??
? ? ? ? ?......
192.168.1.96 30
192.168.1.100 30
192.168.1.104 30
192.168.1.108 30

3.输入命令和检测

1）IP配置、交换机接口配置不了IP地址。

骨干
r1
interface GigabitEthernet 0/0/1
ip address 192.168.1.97 30
quit
interface GigabitEthernet 0/0/0
ip address 192.168.1.101 30
quit
r2
interface GigabitEthernet 0/0/0
ip address 192.168.1.105 30
quit
r3
interface GigabitEthernet 0/0/0
ip address 192.168.1.109 30
quit
interface GigabitEthernet 0/0/1
ip address 192.168.1.129 30
quit
r4
interface GigabitEthernet 0/0/0
ip address 192.168.1.130 30
quit
环回——
r1
interface LoopBack 0
ip address 192.168.1.1 27
quit
r2
interface LoopBack 0
ip address 192.168.1.33 27
quit
r3
interface LoopBack 0
ip address 192.168.1.65 27
quit

r3-r4?

ping 192.168.1.129
? PING 192.168.1.129: 56 ?data bytes, press CTRL_C to break
? ? Reply from 192.168.1.129: bytes=56 Sequence=1 ttl=255 time=150 ms
? ? Reply from 192.168.1.129: bytes=56 Sequence=2 ttl=255 time=20 ms
? ? Reply from 192.168.1.129: bytes=56 Sequence=3 ttl=255 time=20 ms
? ? Reply from 192.168.1.129: bytes=56 Sequence=4 ttl=255 time=30 ms
? ? Reply from 192.168.1.129: bytes=56 Sequence=5 ttl=255 time=30 ms

? --- 192.168.1.129 ping statistics ---
? ? 5 packet(s) transmitted
? ? 5 packet(s) received
? ? 0.00% packet loss
? ? round-trip min/avg/max = 20/50/150 ms

自己网段ping

ping 192.168.1.97
? PING 192.168.1.97: 56 ?data bytes, press CTRL_C to break
? ? Reply from 192.168.1.97: bytes=56 Sequence=1 ttl=255 time=10 ms
? ? Reply from 192.168.1.97: bytes=56 Sequence=2 ttl=255 time=1 ms
? ? Reply from 192.168.1.97: bytes=56 Sequence=3 ttl=255 time=1 ms
? ? Reply from 192.168.1.97: bytes=56 Sequence=4 ttl=255 time=1 ms
? ? Reply from 192.168.1.97: bytes=56 Sequence=5 ttl=255 time=1 ms

ping 192.168.1.101
? PING 192.168.1.101: 56 ?data bytes, press CTRL_C to break
? ? Reply from 192.168.1.101: bytes=56 Sequence=1 ttl=255 time=40 ms
? ? Reply from 192.168.1.101: bytes=56 Sequence=2 ttl=255 time=1 ms
? ? Reply from 192.168.1.101: bytes=56 Sequence=3 ttl=255 time=1 ms
? ? Reply from 192.168.1.101: bytes=56 Sequence=4 ttl=255 time=1 ms
? ? Reply from 192.168.1.101: bytes=56 Sequence=5 ttl=255 time=1 ms

? --- 192.168.1.101 ping statistics ---
? ? 5 packet(s) transmitted
? ? 5 packet(s) received
? ? 0.00% packet loss
? ? round-trip min/avg/max = 1/8/40 ms

ping 192.168.1.105
? PING 192.168.1.105: 56 ?data bytes, press CTRL_C to break
? ? Reply from 192.168.1.105: bytes=56 Sequence=1 ttl=255 time=40 ms
? ? Reply from 192.168.1.105: bytes=56 Sequence=2 ttl=255 time=1 ms
? ? Reply from 192.168.1.105: bytes=56 Sequence=3 ttl=255 time=1 ms
? ? Reply from 192.168.1.105: bytes=56 Sequence=4 ttl=255 time=1 ms
? ? Reply from 192.168.1.105: bytes=56 Sequence=5 ttl=255 time=1 ms

? --- 192.168.1.105 ping statistics ---
? ? 5 packet(s) transmitted
? ? 5 packet(s) received
? ? 0.00% packet loss
? ? round-trip min/avg/max = 1/8/40 ms

ping 192.168.1.109
? PING 192.168.1.105: 56 ?data bytes, press CTRL_C to break
? ? Reply from 192.168.1.105: bytes=56 Sequence=1 ttl=255 time=40 ms
? ? Reply from 192.168.1.105: bytes=56 Sequence=2 ttl=255 time=1 ms
? ? Reply from 192.168.1.105: bytes=56 Sequence=3 ttl=255 time=1 ms
? ? Reply from 192.168.1.105: bytes=56 Sequence=4 ttl=255 time=1 ms
? ? Reply from 192.168.1.105: bytes=56 Sequence=5 ttl=255 time=1 ms

? --- 192.168.1.105 ping statistics ---
? ? 5 packet(s) transmitted
? ? 5 packet(s) received
? ? 0.00% packet loss
? ? round-trip min/avg/max = 1/8/40 ms

? ? 为什么ping不通路由之间——交换机为2层设备，只有MAC地址，没有IP地址、认识MAC地址

而ping的是ip地址

2)开启ospf、选举只有一个DR，没有DBR

开启、改名
r3
ospf 1 router-id 9.9.9.9
r1
ospf 1 router-id 1.1.1.1
r2
ospf 1 router-id 2.2.2.2
r3
ospf 1 router-id 3.3.3.3

宣告
r3
ospf 1 
area 0
network 192.168.1.0 0.0.0.127
quit
area 1
network 192.168.1.128 0.0.0.127
quit
r1
ospf 1 
area 0
network 192.168.1.97 0.0.0.0
network 192.168.1.101 0.0.0.0
network 192.168.1.1 0.0.0.0
quit
quit
r2
ospf 1 
area 0
network 192.168.1.33 0.0.0.0
network 192.168.1.105 0.0.0.0
quit
quit
r4
ospf 1 
area 1
network 192.168.1.130 0.0.0.0
network 4.4.4.4 0.0.0.0
quit
quit

选举
r1
interface GigabitEthernet0/0/0
ospf dr-priority 0
quit
r2
interface GigabitEthernet0/0/0
ospf dr-priority 0
quit
r3
interface GigabitEthernet0/0/0
ospf dr-priority 255
quit
r4
interface GigabitEthernet0/0/0
ospf dr-priority 0
quit

认证
r1、r2、r3、r4
interface GigabitEthernet0/0/0
ospf authentication-mode md5 1 plain 666
quit
r3
interface GigabitEthernet0/0/1
ospf authentication-mode md5 1 plain 666
quit

缺省路由
r4
ospf 1 
default-route-advertise always 
quit

汇总
r3
ospf 1
area 0
abr-summary 192.168.1.0 255.255.255.128

修改带宽
r1r2r3r4
ospf 1
bandwidth-reference 1000
quit

加快收敛
r1
interface GigabitEthernet 0/0/1
ospf timer hello 5
quit
r2
interface GigabitEthernet 0/0/1
ospf timer hello 5
quit
r3
interface GigabitEthernet 0/0/0
ospf timer hello 5
quit
interface GigabitEthernet 0/0/1
ospf timer hello 5
quit
r4
interface GigabitEthernet 0/0/0
ospf timer hello 5
quit

空接口——防止被动黑洞
r1
ip route-static 192.168.1.1 27 NULL 0
r2
ip route-static 192.168.1.32 27 NULL 0
r3
ip route-static 192.168.1.64 27 NULL 0

?检验ping

ping 4.4.4.4
PING 4.4.4.4: 56 data bytes, press CTRL_c to break Reply from 4.4.4.4: bytes=56 Sequence=l ttl=255 time=50 msReply from 4.4.4.4: bytes=56 Sequence=2 ttl=255 time=30 msReply from 4.4.4.4: bytes=56 Sequence=3 ttl=255 time=30 msReply from 4.4.4.4: bytes=56 Sequence=4 ttl=255 time=20 msReply from 4.4.4.4: bytes=56 Sequence=5 ttl=255 time=20 ms
4.4.4.4 ping statistics ---
5 packet (s) transmitted
5 packet (s) received
0.00% packet loss round-trip min/avg/max = 20/30/50 ms

4.抓包

hello包

DMAC：ff-ff-ff-ff-ff-ff——交换机广播

以组播224.0.0.5（目标IP）

FUIl状态—邻接关系的建立

每日一讲：http://t.csdnimg.cn/t1WXj

• 技术笔记 1遍
• 有错误请指出，作者会及时改正