實(shí)訓(xùn)二十四三層交換機(jī)OSPF動(dòng)態(tài)路由

1、實(shí)訓(xùn)二十四三層交換機(jī)OSPF動(dòng)態(tài)路由實(shí)訓(xùn)目的1、掌握三層交換機(jī)之間通過OSPF協(xié)議實(shí)現(xiàn)網(wǎng)段互通的配置方法。2、理解RIP協(xié)議和OSPF協(xié)議內(nèi)部實(shí)現(xiàn)的不同點(diǎn)二、應(yīng)用環(huán)境當(dāng)兩臺(tái)三層交換機(jī)級(jí)聯(lián)時(shí)，為了保證每臺(tái)交換機(jī)上所連接的網(wǎng)段可以和另一臺(tái)交換機(jī)上 連接的網(wǎng)段互相通信，使用 OSPF協(xié)議可以動(dòng)態(tài)學(xué)習(xí)路由。三、實(shí)訓(xùn)設(shè)備1. DCRS-5650-52CT 交換機(jī) 2 臺(tái)2. PC 機(jī) 2-4 臺(tái)3. Console 線 1-2 根4. 直通網(wǎng)線2-4根四、實(shí)訓(xùn)拓?fù)鋠ia n30 via n40VlanlO Vlan20五、實(shí)訓(xùn)要求1、在交換機(jī)A和交換機(jī)B上分別劃分基于端口的VLAN ：交換機(jī)VLAN端c

2、喊員交換機(jī)A1018209-1610024交換機(jī)B3018409-16101242、交換機(jī)A和B通過的24 口級(jí)聯(lián)。3、配置交換機(jī)A和B各VLAN虛擬接口的IP地址分別如下表所示:VLAN 10VLAN20VLAN30VLAN40VLAN 100VLAN101192.168.10.1192.168.20.1192.168.30.1192.168.40.1192.168.100.1192.168.100.24、PC1PC4的網(wǎng)絡(luò)設(shè)置為:設(shè)備IP地址gatewayMaskPC1192.168.10.101192.168.10.1255.255.255.0PC2192.168.20.101192.1

3、68.20.1255.255.255.0PC3192.168.30.101192.168.30.1255.255.255.0PC4192.168.40.101192.168.40.1255.255.255.05、驗(yàn)證：沒有OSPF路由協(xié)議之前：PC1與PC2，PC3與PC4可以互通。PC1、PC2 與 PC3、PC4 不通。配置OSPF路由協(xié)議之后：四臺(tái)PC之間都可以互通。若實(shí)訓(xùn)結(jié)果和理論相符，則本實(shí)訓(xùn)完成。六、實(shí)訓(xùn)步驟第一步：交換機(jī)全部恢復(fù)出廠設(shè)置，配置交換機(jī)的VLAN信息交換機(jī)A ：DCRS-5650-52CT -A#co nfDCRS-5650-52CT -A(Co nfig)#vlan

4、 10DCRS-5650-52CT -A(Co nfig-Vla n10)#switchport in terface ethernet 0/0/1 -8Set the port Ether net0/0/1 access vlan 10 successfullySet the port Ether net0/0/2 access vlan 10 successfullySet the port Ether net0/0/3 access vlan 10 successfullySet the port Ether net0/0/4 access vlan 10 successfullySet

5、 the port Ether net0/0/5 access vlan 10 successfullySet the port Ether net0/0/6 access vlan 10 successfullySet the port Ether net0/0/7 access vlan 10 successfullySet the port Ether net0/0/8 access vlan 10 successfullyDCRS-5650-52CT -A(Co nfig-Vla n10)#exitDCRS-5650-52CT -A(Co nfig)#vlan 20DCRS-5650-

6、52CT -A(Co nfig-Vla n20)#switchport in terface ethernet 0/0/9-16Set the port Ether net0/0/9 access vlan 20 successfullySet the port Ether net0/0/10 access via n 20 successfullySet the port EthernetO/O/11 access vlan 20 successfullySet the port Ether net0/0/12 access via n 20 successfullySet the port

7、 EthemetO/O/13 access vlan 20 successfullySet the port Ether net0/0/15 access via n 20 successfullySet the port Ethernet0/0/14 access vlan 20 successfullySet the port EthemetO/O/16 access vlan 20 successfullyDCRS-5650-52CT -A(Co nfig-Vla n20)#exitDCRS-5650-52CT -A(Co nfig)#vlan 100DCRS-5650-52CT -A(

8、Co nfig-Vla n100)#switchport in terface ethernet 0/0/24Set the port EthernetO/O/24 access vlan 100 successfullyDCRS-5650-52CT -A(Co nfig-Vla n100)#exitDCRS-5650-52CT -A(Co nfig)#驗(yàn)證配置：DCRS-5650-52CT -A#show via nVLAN NameType Media Ports1defaultStaticENETEthemetO/O/17EthemetO/O/18EthernetO/O/19Ethern

9、et0/0/20EthernetO/O/2 1EthemetO/O/22EthernetO/O/23EthemetO/O/25EthernetO/O/26EthernetO/O/27EthernetO/O/2810VLAN0010StaticENETEthemetO/O/2EthernetO/O/3EthernetO/O/5EthernetO/O/720VLAN0020StaticENETEthernetO/O/1OEthernetO/O/11Ethernet0/0/12EthernetO/O/13EthernetO/O/14EthernetO/O/15Ethernet0/0/16100 VL

10、AN0100Static ENETEthernetO/O/24DCRS-5650-52CT -A#EthernetO/O/1EthemetO/O/4EthemetO/O/6EthemetO/O/8EthemetO/O/9交換機(jī)B：DCRS-5650-52CT -B(C on fig)#vla n 30DCRS-5650-52CT -B(Co nfig-Vla n30)#switchport in terface ethernet 0/0/1 -8Set the port Ether net0/0/1 access vlan 30 successfullySet the port Ether n

11、et0/0/2 access vlan 30 successfullySet the port Ether net0/0/3 access vlan 30 successfullySet the port Ether net0/0/4 access vlan 30 successfullySet the port Ether net0/0/5 access vlan 30 successfullySet the port Ether net0/0/6 access vlan 30 successfullySet the port Ether net0/0/7 access vlan 30 su

12、ccessfullySet the port Ether net0/0/8 access vlan 30 successfullyDCRS-5650-52CT -B(Config-Vlan30)#exitDCRS-5650-52CT -B(C on fig)#vla n 40DCRS-5650-52CT -B(Co nfig-Vla n40)#switchport in terface ethernet 0/0/9-16Set the port Ether net0/0/9 access vlan 40 successfullySet the port Ethernet0/0/10 acces

13、s vlan 40 successfullySet the port Ethernet0/0/11 access vlan 40 successfullySet the port Ethernet0/0/12 access vlan 40 successfullySet the port Ethernet0/0/13 access vlan 40 successfullySet the port Ethernet0/0/14 access vlan 40 successfullySet the port Ether net0/0/15 access via n 40 successfullyS

14、et the port Ethernet0/0/16 access vlan 40 successfullyDCRS-5650-52CT -B(Co nfig-Vla n40)#exitDCRS-5650-52CT -B(Co nfig)#vla n 101DCRS-5650-52CT -B(Co nfig-Vla n101)#switchport in terface ethernet 0/0/24Set the port EthernetO/O/24 access vlan 101 successfullyDCRS-5650-52CT -B(Co nfig-Vla n101)#exitDC

15、RS-5650-52CT -B(Co nfig)#驗(yàn)證配置:DCRS-5650-52CT -B#show vlanVLAN NameType1defaultEthernetO/O/18Ethernet0/0/20EthernetO/O/22EthernetO/O/25EthernetO/O/2710 VLAN0010EthernetO/O/2Media PortsStaticENETEthernet0/0/1720 VLAN0020Ethernet0/0/19Ethernet0/0/21EthemetO/O/23EthemetO/O/26Ethernet0/0/28StaticENETEthe

16、rnet0/0/3Ethernet0/0/5Ethernet0/0/7StaticENETEthernet0/0/1EthemetO/O/4EthernetO/O/6EthernetO/O/8EthernetO/O/9Ethernet0/0/10EthernetO/O/11EthemetO/O/12EthemetO/O/13EthernetO/O/14EthemetO/O/15EthemetO/O/16100 VLAN0100Static ENETEthemetO/O/24DCRS-5650-52CT B#第二步：配置交換機(jī)各vlan虛接口的IP地址交換機(jī)A ：DCRS-5650-52CT -

17、A(Co nfig)#i nt vlan 10DCRS-5650-52CT -A(C on fig-lf-Vla n10)#ip address 192.168.10.1 255.255.255.0DCRS-5650-52CT -A(Co nfig-lf-Vla n10)# no shutDCRS-5650-52CT -A(C on fig-lf-Vla n10)#exitDCRS-5650-52CT -A(Co nfig)#i nt vlan 20DCRS-5650-52CT -A(C on fig-lf-Vla n20)#ip address 192.168.20.1 255.255.25

18、5.0DCRS-5650-52CT -A(Co nfig-lf-Vla n20)# no shutDCRS-5650-52CT -A(C on fig-lf-Vla n20)#exitDCRS-5650-52CT -A(Co nfig)#i nt vlan 100-A(Co nfig-lf-Vla n100)#ipaddress 192.168.100.1DCRS-5650-52CT255.255.255.0DCRS-5650-52CT -A(Co nfig-lf-Vla n100)# no shutDCRS-5650-52CT -A(Config-lf-VlanlOO)#DCRS-5650-

19、52CT -A(Co nfig-lf-Vla n100)#exitDCRS-5650-52CT -A(Co nfig)#交換機(jī)B ：DCRS-5650-52CT -B(Co nfig)# in t vlan 30DCRS-5650-52CT -B(Co nfig-lf-Vla n30)#ip address 192.168.30.1 255.255.255.0DCRS-5650-52CT -B(Co nfig-lf-Vla n30)# no shutDCRS-5650-52CT -B(C on fig-lf-Vla n30)#exitDCRS-5650-52CT -B(Co nfig)#i n

20、terface vlan 40DCRS-5650-52CT -B(Co nfig-lf-Vla n40)#ip address 192.168.40.1 255.255.255.0DCRS-5650-52CT -B(C on fig-lf-Vla n40)#exitDCRS-5650-52CT -B(Co nfig)# in t vlan 101DCRS-5650-52CT -B(Co nfig-lf-Vla n101)#ipaddress 192.168.100.2255.255.255.0DCRS-5650-52CT -B(Co nfig-lf-Vla n101)#exitDCRS-565

21、0-52CT -B(Co nfig)#第三步：配置各PC的IP地址，注意配置網(wǎng)關(guān)設(shè)備IP地址gatewayMaskPC1192.168.10.101192.168.10.1255.255.255.0PC2192.168.20.101192.168.20.1255.255.255.0PC3192.168.30.101192.168.30.1255.255.255.0PC4192.168.40.101192.168.40.1255.255.255.0第四步：驗(yàn)證PC之間是否連通?PC端口PC端口結(jié)果原因PC1A :0/0/1PC2A ： 0/0/9通PC1A :0/0/1Vian 100A ： 0

22、/0/24通PC1A :0/0/1Vian 101B ： 0/0/24不通PC1A :0/0/1PC3B ： 0/0/1不通查看路由表，進(jìn)一步分析上一步的現(xiàn)象原因。交換機(jī)A ：DCRS-5650-52CT -A#show ip routeCodes: K - kernel, C - conn ected, S - static, R - RIP , B - BGP0 - OSPF, IA - OSPF in ter areai- IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS in ter areaE1 - OSPF exte

23、rnal type 1, E2 - OSPF external type 2 - can didate defaultC 127.0.0.0/8 is directly conn ected, LoopbackC192.168.10.0/24 is directly conn ected, Via n10C192.168.20.0/24 is directly conn ected, Via n20C 192.168.100.0/24 is directly conn ected, Via n100交換機(jī)B：DCRS-5650-52CT -B#show ip routeCodes: K - k

24、ernel, C - conn ected, S - static, R - RIP , B - BGPO - OSPF, IA - OSPF in ter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 -IS-IS level-2, ia - IS-IS in ter area - can didate defaultC 127.0.0

25、.0/8 is directly conn ected, LoopbackC192.168.30.0/24 is directly conn ected, Via n30C192.168.40.0/24 is directly conn ected, Via n40C 192.168.102.0/24 is directly conn ected, Via n101第五步：啟動(dòng)OSPF協(xié)議，并將對(duì)應(yīng)的直連網(wǎng)段配置到OSPF進(jìn)程中交換機(jī)A ：DCRS-5650-52CT -A(co nfig)#router ospfDCRS-5650-52CT -A(co nfig-router)# netwo

26、rk 192.168.10.0/24 area 0DCRS-5650-52CT -A(co nfig-router)# network 192.168.20.0/24 area 0DCRS-5650-52CT -A(co nfig-router)# network 192.168.100.0/24 area 0DCRS-5650-52CT -A(co nfig-router)#exit交換機(jī)B：DCRS-5650-52CT -B(co nfig)#router ospfDCRS-5650-52CT -B(co nfig-router)# network 192.168.30.0/24 area

27、 0DCRS-5650-52CT -B(co nfig-router)# network 192.168.40.0/24 area 0DCRS-5650-52CT -B(co nfig-router)# network 192.168.101.0/24 area 0 DCRS-5650-52CT -B(co nfig-router)#exit驗(yàn)證配置：交換機(jī)A ：DCRS-5650-52CT -A#show ip routeCodes: K - kernel, C - conn ected, S - static, R - RIP , B - BGPO - OSPF, IA - OSPF in

28、 ter areai- IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS in ter area-can didate default127.0.0.0/8 is directly conn ected, LoopbackE1 - OSPF external type 1, E2 - OSPF external type 2C192.168.10.0/24 is directly conn ected, Via n10C192.168.20.0/24 is directly conn ected, Via n20O192.168

29、.30.0/24 110/20 via 192.168.100.2, Vian100t00:00:23O192.168.40.0/24 110/20 via 192.168.100.2, Vian100,00:00:23C 192.168.100.0/24 is directly conn ected, Via n100（O代表ospf學(xué)習(xí)到的路由網(wǎng)段）交換機(jī)B：DCRS-5650-52CT -B#show ip routeCodes: K - kernel, C - conn ected, S - static, R - RIP , B - BGPO - OSPF, IA - OSPF in

30、 ter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS in ter area - can didate default127.0.0.0/8 is directly conn ected, LoopbackN1 - OSPF NSSA external type 1, N2 - O

31、SPF NSSA external type 2192.168.10.0/24 110/20 via 192.168.100.1, Via n101,00:00:23O192.168.20.0/24110/20 via 192.168.100.1, Via n101,00:00:23C192.168.30.0/24is directly conn ected,Via n30C192.168.40.0/24is directly conn ected,Via n40C192.168.100.0/24is directly conn ected,Via n101（。代表ospf學(xué)習(xí)到的路由網(wǎng)段）第

32、六步：驗(yàn)證PC之間是否連通?PC端口PC端口結(jié)果原因PC1A ：0/0/1PC2A ： 0/0/9通PC1A ：0/0/1Via n 100A ： 0/0/24通PC1A ：0/0/1Vian 101B ： 0/0/24通PC1A ：0/0/1PC3B ： 0/0/1通OSPF協(xié)議七、注意事項(xiàng)和排錯(cuò)在配置 ' 使用OSPF協(xié)議時(shí)，可能會(huì)由于物理連接、配置錯(cuò)誤等原因?qū)е挛茨苷＿\(yùn)行。因此，用戶應(yīng)注意一下要點(diǎn)：首先應(yīng)該保證物理連接的正確無誤;其次，保證接口和鏈路協(xié)議是UP （使用show in terface 命令）；然后在各接口上配置不同網(wǎng)段的IP地址；然后，先啟動(dòng)OSPF協(xié)議（使用ro

33、uter ospf命令）再在相應(yīng)接口配置所屬OSPF域；接著，注意OSPF協(xié)議的自身特點(diǎn)一一 OSPF骨干域（0域）必須保證是連續(xù)的，如果不連續(xù)使用 虛連接（virtual link ）接來保證，所有非0域只能通過0域與其他非0域相連，不允許非0域直接 相連；邊界三層交換機(jī)是指該三層交換機(jī)的一部分接口屬于0域，而另外一部分接口屬于非0域；對(duì)于廣播網(wǎng)等多路訪問網(wǎng)'需要選舉指定三層交換機(jī)DR。八、配置序列交換機(jī)A ：DCRS-5650-52CT -A#show runIno service password-e ncrypti on ihos tn ame DCRS-5650-52CT -

34、A iIn terface Ethernet0ivia n 1vlan 10vlan 20vlan 100iIn terface EthernetO/O/1 switchport access vlan 10 !In terface Ethernet0/0/2 switchport access vlan 10In terface Ethernet0/0/23iIn terface Ethernet0/0/24 switchport access vlan 100iIn terface Ethernet0/0/25iIn terface Ethernet0/0/26In terface Eth

35、ernet0/0/27In terface EthemetO/O/28in terface VlanlOip address 192.168.10.1 255.255.255.0 iin terface Via n100ip address 192.168.100.1 255.255.255.0 iin terface Vlan20ip address 192.168.20.1 255.255.255.0 iin terface sitOirouter ospfnetwork 192.168.10.0/24 area 0network 192.168.20.0/24 area 0network

36、 192.168.100.0/24 area 0 ino logi nendDCRS-5650-52CT -A#交換機(jī)B ：略九、共同思考本實(shí)訓(xùn)只體現(xiàn)了 area。的配置方法，大家可以參考理論教材和用戶手冊(cè)嘗試ospf運(yùn)行在多區(qū)域的配置方法十、課后練習(xí)1 .在交換機(jī)A和交換機(jī)B上分別劃分基于端口的VLAN ：交換機(jī)VLAN端口成員交換機(jī)A1028209-161001交換機(jī)B1028409-1610012.交換機(jī)A和B通過的24 口級(jí)聯(lián)。3.配置交換機(jī)A和B各VLAN虛擬接口的IP地址分別如卜.表所示:VLAN10_AVLAN20VLAN10_BVLAN40VLAN100_AVLAN10.B10

37、.1.10.110.1.20.110.1.30.110.1.40.110.1.100.110.1.100.24. PC1-PC4的網(wǎng)絡(luò)設(shè)置t為：設(shè)備IP地址gatewayMaskPC110.1.10.210.1.10.1255.255.255.0PC210.1.20.2110.1.20.1255.255.255.0PC310.1.30.210.1.30.1255.255.255.0PC410.1.40.210.140.1255.255.255.05.使用OSPF協(xié)議要求所有PC之間都可以通信卜一、相關(guān)配置命令詳解配置任務(wù)序列1 .啟動(dòng)OSPF協(xié)議（必須）（1）啟動(dòng)俟閉OSPF協(xié)議（必須）（2）

38、配置運(yùn)行OSPF三層交換機(jī)的ID號(hào)（可選）（3）配置運(yùn)行OSPF的網(wǎng)絡(luò)范圍（可選）（4）配置接口所屬的域（必須）2 .配置OSPF輔助參數(shù)（可選）（1） 配置OSPF發(fā)包機(jī)制參數(shù)1）配置OSPF數(shù)據(jù)包的驗(yàn)證2）配置OSPF接口為只收不發(fā)3）配置接口發(fā)送數(shù)據(jù)包的代價(jià)三層交換機(jī)失效定時(shí)器、接口傳送LSA時(shí)延定時(shí)器、鄰接三層交換機(jī)重傳LSA定 時(shí)器）（2） 配置OSPF引入路由參數(shù)1 ）配置引入外部路由的缺省參數(shù)（缺省類型、缺省標(biāo)記值、缺省代價(jià)值）2）配置在OSPF中引入其它協(xié)議的路由（3） 配置OSPF協(xié)議其它參數(shù)1）配置OSPF路由協(xié)議優(yōu)先級(jí)HELLO數(shù)據(jù)包的定時(shí)器、鄰接4）配置OSPF發(fā)包定時(shí)

39、器參數(shù)（廣播接口輪詢發(fā)送2）配置OSPF STUB域及缺省路由的代價(jià)3）配置OSPF虛鏈路4）配置接口在選舉指定三層交換機(jī) DR中的優(yōu)先級(jí)3 .關(guān)閉OSPF協(xié)議1 .啟動(dòng)OSPF協(xié)議在DCRS系列三層交換機(jī)上運(yùn)行OSPF路由協(xié)議的基本配置也很簡單，通常只需打開 OSPF開關(guān)、配置接口所在OSPF域即可，OSPF協(xié)議的參數(shù)都使用缺省值。如需修改OSPF協(xié)議參數(shù)值，參看2.配置OSPF輔助參數(shù)。命令解釋全局配置模式no router ospf process <id >啟動(dòng)OSPF協(xié)議進(jìn)程，本命令的no操作關(guān)閉OSPF協(xié)議。（必須）OSPF協(xié)議配置模式router-id <rou

40、ter_id> no router-id配置運(yùn)行OSPF協(xié)議三層交換機(jī)的ID號(hào)；本命令的n。操作取消三層交換機(jī)的ID號(hào)。缺省為選擇某個(gè)接口的IP地址作為三層交換機(jī)ID。（可選）no n etwork vn etwork> vmask> |<n etwork>/vprefix> area<area_id>配置某個(gè)網(wǎng)段屬于某個(gè)區(qū)域，本命令的 no操作為取消該配置。（必須）no passive-i nterfaceIFNAME |ethernet IFNAME | Vian < ID >將一個(gè)接口設(shè)置為只收不發(fā)；本命令的no操作取消配置。2

41、 .配置OSPF輔助參數(shù)（1 ）配置OSPF發(fā)包機(jī)制參數(shù)1）配置OSPF數(shù)據(jù)包的驗(yàn)證2）配置OSPF接口為只收不發(fā)3） 配置接口發(fā)送數(shù)據(jù)包的代價(jià)命令解釋接口配置模式ip ospf authe nticati on message-digest | n ullno ip ospf authe nticati on配置接口接受OSPF數(shù)據(jù)包所需要的驗(yàn)證方式本命令的no操作恢復(fù)為缺省值。ip ospf authentication-key LINE no ip ospf authe nticati on-key配置接口接受OSPF數(shù)據(jù)包所需要的驗(yàn)證方式的key ;本命令的no操作恢復(fù)為缺省值。ip

42、ospf cost < cost > no ip ospf cost指定接口運(yùn)行OSPF協(xié)議所需的代價(jià)；本命令的n。操作恢復(fù)代價(jià)的缺省值。4 ）配置OSPF發(fā)包定時(shí)器參數(shù)（廣播接口輪詢發(fā)送HELLO數(shù)據(jù)包的定時(shí)器、鄰接三層交換機(jī)失效定時(shí)器、接口傳送 LSA時(shí)延定時(shí)器、鄰接三層交換機(jī)重傳LSA定時(shí)器）命令解釋接口配置模式ip ospf hello-interval <time >no ip ospf hello-i nterval配置接口周期發(fā)送HELLO數(shù)據(jù)包的時(shí)間間隔；本 命令的n。操作恢復(fù)為缺省值。ip ospf dead-interval <time >

43、;no ip ospf dead-i nterval配置認(rèn)定相鄰三層交換機(jī)失效的時(shí)間間隔；本命令的n。操作恢復(fù)為缺省值。ip ospf transit-delay <time >no ip ospf tran sit-delay設(shè)置在接口上傳送鏈路狀態(tài)廣播的時(shí)延值；本命令的n。操作恢復(fù)為缺省值。ip ospf retransmit <time >no ip ospf retra nsmit配置接口與鄰接三層交換機(jī)之間傳送錐路狀態(tài)通告時(shí)的重傳間隔；本命令的no操作恢復(fù)為缺省值。（2 ）配置OSPF引人路由參數(shù)配置在OSPF中引入其它協(xié)議的路由命令解釋OSPF協(xié)議配置模式redistribute b