HCIP综合实验
实验要求：
- R4为ISP，其上只能配置IP地址；R4与其它所有直接设备间使用公有IP；
- R3—R5/6/7为MGRE环境，R3为中心站点；
- 整个OSPF环境IP地址为172.168.0.0/16;
- 所有设备均可访问R4的环回；
- 减少LSA的更新量，加快收敛，保障更新安全；
- 全网可达；
IP地址规划：
area1:
172.16.32.0/21
172.16.40.0/21
172.16.48.0/21
172.16.56.0/21
area 0:
172.16.64.0/21
172.16.72.0/21
172.16.80.0/21
172.16.88.0/21
area 2
172.16.96.0/21
172.16.104.0/21
172.16.112.0/21
area 3:
172.16.128.0/21
172.16.136.0/21
172.16.144.0/21
area 4:
172.16.160.0/21
172.16.168.0/21
172.16.176.0/21
eigrp :
172.16.192.0/20
172.16.208.0/20
配置MGRE环境（R3为中心站点）：
R3：
R5：
R6：
R7：
在R3、R5、R6、R7上写一条缺省路由指向外网ISP
基本配置：
R1:
interface GigabitEthernet0/0/0
ip address 172.16.64.1 255.255.248.0
interface LoopBack0
ip address 17.16.72.1 255.255.248.0
R2:
interface GigabitEthernet0/0/0
ip address 172.16.64.2 255.255.248.0
interface LoopBack0
ip address 172.16.80.1 255.255.248.0
R3:
interface Serial3/0/0
ip address 34.1.1.1 255.255.255.0
interface GigabitEthernet0/0/1
ip address 172.16.64.3 255.255.248.0
interface LoopBack0
ip address 172.16.88.1 255.255.248.0
ip route-static 0.0.0.0 0.0.0.0 34.1.1.2
R4:
interface Serial3/0/0
ip address 34.1.1.2 255.255.255.0
interface Serial3/0/1
ip address 45.1.1.2 255.255.255.0
interface Serial4/0/0
ip address 46.1.1.2 255.255.255.0
interface Serial4/0/1
ip address 47.1.1.2 255.255.255.0
interface LoopBack0
ip address 4.4.4.4 255.255.255.0
R5:
interface Serial3/0/1
ip address 45.1.1.1 255.255.255.0
interface LoopBack0
ip address 172.16.40.1 255.255.248.0
ip route-static 0.0.0.0 0.0.0.0 45.1.1.2
R6:
interface Serial4/0/0
ip address 46.1.1.1 255.255.255.0
interface Serial4/0/1
ip address 172.16.96.1 255.255.248.0
interface LoopBack0
ip address 172.16.48.1 255.255.248.0
ip route-static 0.0.0.0 0.0.0.0 46.1.1.2
R7:
interface Serial4/0/0
ip address 172.16.128.1 255.255.248.0
interface Serial4/0/1
ip address 47.1.1.1 255.255.255.0
interface LoopBack0
ip address 172.16.56.1 255.255.248.0
ip route-static 0.0.0.0 0.0.0.0 47.1.1.2
R8:
interface Serial4/0/0
ip address 172.16.128.2 255.255.248.0
interface Serial4/0/1
ip address 172.16.136.1 255.255.248.0
interface LoopBack0
ip address 172.16.144.1 255.255.248.0
R9:
interface Serial4/0/0
ip address 172.16.160.1 255.255.248.0
interface Serial4/0/1
ip address 172.16.136.2 255.255.248.0
interface LoopBack0
ip address 172.16.168.1 255.255.248.0
R10:
interface Serial4/0/0
ip address 172.16.160.2 255.255.248.0
interface LoopBack0
ip address 172.16.176.1 255.255.248.0
R11:
interface Serial4/0/0
ip address 172.16.104.1 255.255.248.0
interface Serial4/0/1
ip address 172.16.96.2 255.255.248.0
interface LoopBack0
ip address 172.16.112.1 255.255.248.0
R12:
interface Serial4/0/0
ip address 172.16.104.2 255.255.248.0
OSPF的配置：
R1:
ospf 1 router-id 1.1.1.1
area 0.0.0.1
network 172.16.0.0 0.0.255.255
R2:
ospf 1 router-id 2.2.2.2
area 0.0.0.1
network 172.16.0.0 0.0.255.255
R3:
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 172.16.32.1 0.0.0.0
area 0.0.0.1
network 172.16.64.3 0.0.0.0
network 172.16.88.1 0.0.0.0
R5:
ospf 1 router-id 5.5.5.5
area 0.0.0.0
network 172.16.0.0 0.0.255.255
R6:
ospf 1 router-id 6.6.6.6
area 0.0.0.0
network 172.16.32.3 0.0.0.0
network 172.16.48.1 0.0.0.0
area 0.0.0.2
network 172.16.96.1 0.0.0.0
R7:
ospf 1 router-id 7.7.7.7
area 0.0.0.0
network 172.16.32.4 0.0.0.0
network 172.16.56.1 0.0.0.0
area 0.0.0.3
network 172.16.128.1 0.0.0.0
R8:
ospf 1 router-id 8.8.8.8
area 0.0.0.3
network 172.16.0.0 0.0.255.255
R9:
ospf 1 router-id 9.9.9.9
import-route ospf 2
area 0.0.0.3
network 172.16.136.2 0.0.0.0
ospf 2 router-id 9.9.9.9
import-route ospf 1
area 0.0.0.4
network 172.16.160.1 0.0.0.0
network 172.16.168.1 0.0.0.0
R10:
ospf 2 router-id 10.10.10.10
area 0.0.0.4
network 172.16.0.0 0.0.255.255
R11:
ospf 1 router-id 11.11.11.11
area 0.0.0.2
network 172.16.0.0 0.0.255.255
R12:
ospf 1 router-id 12.12.12.12
import-route rip 1
area 0.0.0.2
network 172.16.104.2 0.0.0.0
不规则区域area4
方法：采用OSPF多进程重发布的方式解决重发布问题
R9:
ospf 1 router-id 9.9.9.9
import-route ospf 2
area 0.0.0.3
network 172.16.136.2 0.0.0.0
ospf 2 router-id 9.9.9.9
asbr-summary 172.16.160.0 255.255.224.0
import-route ospf 1
area 0.0.0.4
network 172.16.160.1 0.0.0.0
network 172.16.168.1 0.0.0.0
R10:
ospf 2 router-id 10.10.10.10
area 0.0.0.4
network 172.16.0.0 0.0.255.255
R12：
RIP配置
R12:
rip 1
version 2
network 172.16.0.0
在R12上实现路由过滤
asbr-summary 172.16.160.0 255.255.224.0 not-advertise
路由汇总
- area1的汇总
R3:
area 0.0.0.1
abr-summary 172.16.32.0 255.255.224.0
2.area2的汇总
R6:
area 0.0.0.2
abr-summary 172.16.96.0 255.255.224.0
- area3的汇总
R7:
area 0.0.0.3
abr-summary 172.16.128.0 255.255.224.0
域外路由汇总
1、OSPF2进程汇总
R9:
ospf 2
asbr-summary 172.16.160.0 255.255.224.0
2、RIP的汇总
R12:
ospf 1 router-id 12.12.12.12
asbr-summary 172.16.208.0 255.255.240.0 not-advertise
asbr-summary 172.16.192.0 255.255.240.0 not-advertise
特殊区域
1、area1的完全末梢区域
R1:
ospf 1
area 1
stub
R2:
ospf 1
area 1
stub
R3:
ospf 1
area 1
stub no-summary
2、area2、area3的完全NSSA
AREA2:
R6:
ospf 1
area 2
nssa no-summary
R11:
ospf 1
area 2
nssa
R12:
ospf 1
area 2
nssa
AREA3:
R7:
ospf 1
area 3
nssa no-summary
R8:
ospf 1
area 3
nssa
R9:
ospf 1
area 3
nssa
NAT配置
R3:
acl 2000
rule 5 permit source 172.16.0.0 0.0.255.255
int s3/0/0
nat outbound 2000
R6:
acl 2000
rule 5 permit source 172.16.0.0 0.0.255.255
int s4/0/0
nat outbound 2000
R7:
acl 2000
rule 5 permit source 172.16.0.0 0.0.255.255
int s4/0/1
nat outbound 2000