高級(jí)路由管理OSPF路由協(xié)議應(yīng)用配置

1、高級(jí)路由管理OSPF各由協(xié)議應(yīng)用配置高級(jí)路由管理一OSP潞由協(xié)議應(yīng)用配置xx年4月提綱？OSP豉術(shù)要點(diǎn)回顧？OSPF勺基本配置選項(xiàng)？OSPF勺附加配置-OSPFfloodingReductionOSPFRedistributionandFiltering-OSPFSummarization-OSPFDefaultRouting-OSPFAuthentication-OSPFVirtualLinks?確認(rèn)OSPF勺運(yùn)行»犬態(tài)Show-debug?OSPFv3的新特點(diǎn)OSP肢術(shù)要點(diǎn)回顧OSPFt點(diǎn)？快速收斂FastConvergence?支持VLSM支持路由聚合summarization

2、?借助分層及區(qū)域管理，支持大規(guī)模網(wǎng)絡(luò)？支持stub類型網(wǎng)絡(luò)，減小路由規(guī)模？借助multicast，實(shí)現(xiàn)高效率、可靠的路由信息傳送?采用鏈路特性的抽象評(píng)價(jià)cost,使得鏈路管理靈活?很好的負(fù)載均衡?支持認(rèn)證/加密?支持路由信息標(biāo)記，可依據(jù)此對(duì)外來路由信息進(jìn)行控制？支持無類地址路由OSPF®本工作過程?初始化，通過組播地址發(fā)送hello包到所有外連接口。在NBM厭口multipoint類型接口則采用單點(diǎn)地址。通過交互，路由維護(hù)各自鄰居信息。?鄰居關(guān)系獨(dú)立于物理連接關(guān)系，相當(dāng)于為交流路由信息而在路由之間選擇建立的專用虛擬鏈路。?路由器各自向其新加入的neighbour發(fā)送

3、LSA信息.？路由器將收到的LSA記錄下來，并繼續(xù)轉(zhuǎn)發(fā)到其他新加入的neighbour。?所有路由器根據(jù)收集到的LSA集合，建立Link-statedatabases當(dāng)databases構(gòu)建完成，運(yùn)用SPF算法計(jì)算出從本節(jié)點(diǎn)出發(fā)到達(dá)其他路由節(jié)點(diǎn)的loop-free的路徑，并組成SPF的tree結(jié)構(gòu)。?從SPF的tree結(jié)構(gòu)提取信息，對(duì)應(yīng)加入到路由表中，作為優(yōu)選的最佳路徑。OSPF的Hello協(xié)議?用于Neighbourdiscovery（Hello包中包含的信息）RouterIDAreaIDOriginatingrouterinterface的addressmask-AuthencationT

4、ype和Authencationinformation-HelloInterval-Hellodeadinterval-Routerpriority-DR/BDRSomeflags-RouterIDsoforiginatingrouter'sneighbour?鄰居關(guān)系的確認(rèn)及維護(hù)-使用Hellointerval、Deadinterval、areaIDs、authencationtypeandpassword驗(yàn)證鄰居關(guān)系的建立？鄰居keeplive算法-Deadinterval被設(shè)置為4倍的Hellointerval，如果在deadinterval之內(nèi)未收到hello信息，則鄰居關(guān)系解

5、除？在broadcast和NBMA1型網(wǎng)絡(luò)中DR/BDRs勺選擇-RouterID、現(xiàn)有DR/BDRrouterpriority用于新的DR/BD砒擇及狀態(tài)判定OSPF勺相鄰網(wǎng)絡(luò)類型？Point-to-Pointworks-不必選舉DR/BDRs但采用組播地址在路由之間傳送hello和LSA數(shù)據(jù)。?Broadcastworks-通過組播/在普通節(jié)點(diǎn)和DR/BDR互間傳送數(shù)據(jù)。?NBMAworks-不能使用組播地址傳送數(shù)據(jù)，鄰居關(guān)系需要手工指定，DR/BD越舉出后，所有的數(shù)據(jù)均為單播地址傳送。一般而言，DR/BD他該為與其他路由器均有鏈路相連

6、的節(jié)點(diǎn)。?Point-to-multipoint-必須被靜態(tài)指定，被作為多個(gè)點(diǎn)對(duì)點(diǎn)網(wǎng)絡(luò)對(duì)待？VirtualLinks-專用于連接Area。的特殊網(wǎng)絡(luò)在在NBMAJ絡(luò)中運(yùn)行OSPFRTARTDRTCRTB/24/24/24/24FrameRelayOSPF的DR/BDR選舉？?jī)?yōu)勢(shì)一減少LSA數(shù)據(jù)的傳送量-新加入的節(jié)點(diǎn)只需和已選出的DR/BDRt立鄰居關(guān)系？選舉過程-路由器各自發(fā)送及接收hello信息-Hello信息中的priority將被檢測(cè)，最高優(yōu)先級(jí)被選為DR默認(rèn)優(yōu)先級(jí)為1,可更改。優(yōu)先級(jí)為0的鄰居不參加選舉-如

7、果DR沒有選出或者不響應(yīng)，則BDR專為DR角色，而后選舉新的BDR如果出現(xiàn)一個(gè)以上相同優(yōu)先級(jí)的設(shè)備節(jié)點(diǎn)，則從RouterID最高的中選出BDR運(yùn)行過程中有新的更高優(yōu)先級(jí)的設(shè)備加入，DR/BDR5舊保持不變，只在失效時(shí)才重起選舉進(jìn)程-鄰居之間周期性發(fā)送hello信息，在deadinterval內(nèi)沒有信息傳送，則鄰居關(guān)系解除OSPF的RID?UniquerouterID可以帶來以下優(yōu)勢(shì)-可以識(shí)別出重復(fù)的LSA-唯一確認(rèn)virtuallink的端點(diǎn)-在DR/BD嚓選中起關(guān)鍵作用？RID(routerID)的選擇-路由設(shè)備所有有效接口的IP地址均參與RID的選擇，最高值被選為相應(yīng)鏈路上該設(shè)備的RID-

8、如果loopback接口存在，該接口地址被選用，如果有多個(gè)loopback接口，最高值的接口地址被選用-需要控制RID的值，選擇配置loopback接口，定制地址。此地址不需要被外界其他用戶所訪問OSPFLoopbackAddress?ForOSPFtofunctiontheremustalwaysbeanactiveinterface?Physicalinterfacese.g.serial/Ethermaynotalwaysbeactiveroutingwouldfail?Configurevirtual“l(fā)oopback”interfaceassolution?Submaskwillal

9、waysbe55Router(config)#interfaceloopbacknumberRouter(config-if)#ipaddressip-addresssub-maskSPF及OSP噬路的評(píng)估？SPF基于網(wǎng)絡(luò)拓?fù)涞挠袡?quán)無向圖進(jìn)行計(jì)算？各個(gè)鏈路的權(quán)值主要以來BWi+算-FDDI,ATM,GigabitEthercost=1-HSS145Mcost=2-16-MbpsTokenRingcost=6-10-MbpsEthercost=10-T1(1.544Mbps)cost=64-56kbpscost=1785?各個(gè)鏈路的權(quán)值可以人工指定OSPFCost計(jì)算？

10、CostistheOSPFmetricusedinpathselection?Costisbasedonbandwidth?Defaultbandwidthis1.544Mbps-costis64?Costis108bandwidthRouter(config)#interfaceserial0/0Router(config-if)#bandwidth64Router(config-if)#ipospfcostnumberCost=100,000,000/BandwidthFastEther100MbpsCost=100,000,000/100MCost=1SerialLink64kbpsCo

11、st=100,000,000/64kCost=1562OSPF的Router、Areas、LSAsTypes?AreaTypes-Backbonearea(area0/)-Nonbackbone,nonstubarea-Stubarea-Totallystubbyarea-Not-so-stubbyarea(NSSAs?RouterTypes-Internalrouters-AreaBorderRouters（ABRS-Backbonerouters-AutonomousSystemBoundaryRouters（ASBRs?LSAstypesRouterLSANetworkLS

12、A-SummaryLSAsforABRs-SummaryLSAsforASBRs-AutonomoussystemexternalLSAsNSSAexternalLSAOSPF的PATHtype?（o）Intra-areapaths/routers?（oIA）Interareapaths/routers?（oE1）ExternalType1paths/routers?（oE2）ExternalType2paths/routers?（oN1）OSPFNSSAtype1（?oN2）OSPFNSSAtype2OSP基本配置選項(xiàng)準(zhǔn)備參數(shù)？Area0的設(shè)定？所有路由器的RID?路由器的priority及

13、RID用于DR/BD越舉？在單域內(nèi)盡量保持地址連續(xù)，利于地址聚合收斂?選擇合適的stub網(wǎng)絡(luò)類型?盡量避免virtuallinks的使用STUEE域、路由聚合和虛連接Area0Area12Area19VirtualLinkArea8/24/24/24RTARTBRTCRTDRTEASBR/24/24/24/24OSPF8本配置步驟？將網(wǎng)絡(luò)劃分為若干邏輯區(qū)域area,明確backbonearea0。在需要選擇DR/BDR勺區(qū)域，

14、選擇最佳選擇。？通過loopbackinterface或者直接設(shè)定routerID的方式為每一臺(tái)路由指定RID?在路由器上啟用OSPF并配置RID?配置路由的各個(gè)接口地址參數(shù)？需要時(shí)指定OSPF勺鄰居節(jié)點(diǎn)？需要時(shí)設(shè)置特殊area類型？設(shè)置其他OSP運(yùn)行參數(shù)選項(xiàng)，如hellointerval/deadinterval,route summarizationauthencation等配置OSPF-議劃分區(qū)域？劃分區(qū)域的基本原則-按照自然的地區(qū)或者行政單位劃分-按照網(wǎng)絡(luò)中的高端路由器來劃分-按照IP地址的規(guī)律？一些制約條件-區(qū)域的規(guī)模-與骨干區(qū)域連通-ABR勺處理能力啟動(dòng)OSPFB議的基本配置1.E

15、nablinganOSPFprocessusingtherouterospfmand.2.Assigningareastotheinterfacesusingtheworkmand.3.Process-idcanbeavaluebetween0and65,5354.WildcardmaskNOTsubmaskusedwithworkmand啟動(dòng)OSP周J、議的基本配置？配置路由器的RouterID-QuidwayrouteridA.B.C.D?啟動(dòng)OSP新議-Quidwayospfenable?配置OSPFE域-Quidway-Serial0ospfenableareaarea_idOSPF基

16、本配置樣例一routerospf63work.area1work55area0workarea1Area0Area1E1T0E0E2TokenRingOSPF基本配置樣例二？Router5#configureterminal?Enterconfigurationmands,oneperline.EndwithTL/Z.？Router5(config)#routerospf87？Router5(confi

17、g-router)#work55area0？Router5(config-router)#exit？Router5(config)#end？Router5#OSPFlfi本配置樣例三？Router9#configureterminal?Enterconfigurationmands,oneperline.EndwithTL/Z.？Router9(config)#routerospf87?Router9(config-router)#exit?Router9(config)#interfaceFastEther0/0?Router9(config-if)#

18、ipaddress?Router9(config-if)#ipospf87area10?Router9(config-if)#exit?Router9(config)#end?Router9#OSPF的附加配置OSPFfloodingReduction/TuningOSPF?Router(config-if)#ipospfflood-reduction-默認(rèn)LSAflooding每3600秒(1小時(shí))進(jìn)行一次，此命令可禁止flooding?Router(config-if)#ospfdatabase-filterallout-禁止在指定接口向外傳送

19、LSA?Router(config-router)#neighbourip_addressdatabase-filterallout一禁止向特定的neighbour傳送LSA?Router(config-if)#ipospfhello-intervalinteral_in_seconds?Router(config-if)#ipospfdead-intervaldead_interval_in_seconds?Router(config-if)#ipospfretransmit-interval?Allowsrouting-informationexchangebetweenOSPFandot

20、herroutingprotocolsOSPFRouteRedistributionOSPFRIPIGRPEnhancedIGRPIS-ISBGPEGPRouter(config-router)#redistributeprotocolprocess-idmetricvaluemetric-typevaluesubsOSPFRedistributionCommand?RedistributesroutesfromOSPFintootherroutingprotocols(andviceversa)OSPFRedistributionExample1RedistributionbetweenRI

21、PandOSPFRIPOSPFArea0S0S1R1OSPFRedistributionExample1routerospf109work55area0work55area0redistributeripsubsmetric-type1metric20routerripworkpassive-interfaceserial0passive-interfaceserial1default-metric10redistrib

22、uteospf109matchinternalexternal1external2OSPFRedistributionExample2"Backdoor"createspotentialloopRIPRIPOSPFArea0RIPAvoidingLoopsR2R3R2R1RedistributionExample2controuterospf109work55area0work55area0redistributeripsubsmetric-type1metric

23、20distribute-list11outripaess-list11permit55?Minimizesroutingtableentries?LocalizesimpactofatopologychangeOSPFRouteSummarizationArea0BackboneABRsArea1SummarizationxOOOOO255.

24、255.252.0OORoutingTableforBRoutingTableforCIA?Inter-area(IA)summarylinkcarriesmask?OneentrycanrepresentseveralsubsRouteSummarization(cont.)Area1Area0ABRSummarizationBACSummaryRouteMask=240Address=12Ex

25、istingSubMask=252Address=1211111100000011001111000000001100Valid3rdSubInvalidSubZero?SomeaddressesmayneedreallocatingRouteSummarizationIssueRouter(config-router)#areaarea-idrangeaddressmaskRouteSummarizationCommands?ConsolidatesIAroutesonanABRRouter(config-router)#summary-ad

26、dressaddressmask?ConsolidatesexternalroutesonanASBRRouteSummarizationExampleR2R2#routerospf100work55area2work55area0area0rangearea2rangeR1#routerospf100work55area1work55area0ar

27、ea0rangearea1range-Area2--Area1InterfaceAddresses(mask)InterfaceAddresses(m

28、ask)R1R2Area0Defaultroutetoroutersoutsidethearea?AddadefaultroutetotheOSPFrouterconnectedtotheoutsidework.ThisroutecanberedistributedtoeachrouterintheAreathroughnormalOSPFupdates?Router(config)#iprouteinterface|next-hopaddress?Thefollowingconfigurationstatementwillpropagatethisroutetoa

29、lltheroutersinanormalOSPFarea:-Router(config-router)#default-informationoriginate-AllroutersintheOSPFareawilllearnadefaultrouteprovidedthattheinterfaceoftheborderroutertothedefaultgatewayisactive.OSPFrouteauthencation?Enableareaauthencationonallroutersinthatarea-Router(config-router)#areaarea_idauth

30、encation-Router(config-router)#ipospfauthencation-keypassword?MD5cyrptographicauthencation-Router(config-router)#areaarea_idauthencationmessage-digest-Router(config-router)#ipospfmessage-digest-keykey_valuemd5passwordOSPFvirtuallinks?Itsthelastoption,andthebetterchoiceistoavoidvirtuallinkRouter(conf

31、ig-router)#areatransit_area_idvirtual-linkrouter_id_of_remote-Router#showipospfvirtual-links確認(rèn)OSPFE置及運(yùn)行狀態(tài)？VerifiesinterfacesareincorrectareasRouter#showipospfinterfacee0Ether0isup,lineprotocolisupInterAddress,AreaProcessID10,RouterID1,NetworkTypeBROADCAST,

32、Cost:10TransmitDelayis1sec,StateBDR,Priority1DesignatedRouter(ID),InterfaceaddressBackupDesignatedrouter(ID)1,InterfaceaddressTimerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5Helloduein0:00:02NeighborCountis3,Adjacentneighborcountis3Adjacentwi

33、thneighbor(DesignatedRouter)Loopback0isup,lineprotocolisupInterAddress155,Area1ProcessID10,RouterID1,NetworkTypeLOOPBACK,Cost:1LoopbackinterfaceistreatedasastubHostshowipospfinterfaceCommandShowIPospfinterfaceInthisexample,weuseloopbackinterfaceinstea

34、dofEtherinterface?DisplaysgeneralinformationabouttheOSPFroutingprocessRouter#showipospfRoutingProcess"ospf1"withIDSupportsonlysingleTOS(TOS0)routesSPFscheduledelay5secs,HoldtimebetweentwoSPFs10secsNumberofareasinthisrouteris1Area23Numberofinterfacesinthisareais3Areahasnoauthenticati

35、onSPFalgorithmexecuted19timesArearangesareLinkStateUpdateIntervalis0:30:00andduein0:04:55LinkStateAgeIntervalis0:20:00andduein0:04:55showipospfCommandRouter#showipospfdatabaseOSPFRouterwithID()(ProcessID1)RouterLinkStates(Area23)LinkIDADVRouterAgeSeq#780x800000316

36、910x8000002B16930x80000030Checksum0x80B60xE11C0xE35ELinkcount516960x800000260x80A11NetLinkStates(Area23)LinkIDADVRouterAgeSeq#Checksum16910x800000300x2FCE16930x800000240xFB29showipospfdatabaseCommandRouter>showipprotocolRoutingProt

37、ocolis“ospf300”Sendingupdatesevery0secondsInvalidafter0seconds,holddown0,flushedafter0OutgoingupdatefilterlistforallinterfacesisnotsetIningupdatefilterlistforallinterfacesisnotsetRedistributing:ospf300RoutingforNetworks:/55/55RoutingInformationSources:GatewayDis

38、tanceLastUpdate1106d2121100:17:32921100:17:33941100:17:331106d211100:17:331100:17:33301106d19281100:17:331100:17:331100:17:33Distance:(defaultis110)-More-showipprotocolCommandRout

39、er#showipospfvirtual-linksOtherOSPFshowCommands?DisplaysparametersaboutOSPFvirtuallinksRouter#showipospfneighbordetail?DisplaysneighborinformationperinterfaceRouter#showipospfborder-routers?DisplaysroutestotheABRandASBROSPF的debug命令？Debugipospfadj-查看OSPF勺hello協(xié)議？Debugipospfevents-查看OSPF勺LSA信息傳送？將hell

40、o協(xié)議的運(yùn)做記入日志-Router(config)#routerospf7-Router(config-router)#log-adjacency-changes-Router#showlogOSPFv3的新特點(diǎn)OSPFv符點(diǎn)？OSPFforIPv6?BasedonOSPFv2,withenhancements？DistributesIPv6prefixes？RunsdirectlyoverIPv6？Ships-in-the-nightwithOSPFv2OSPFv3/OSPFv2相似性？Basicpackettypes？Hello,DBD,LSR,LSU,LSA？Mechanismsforn

41、eighbordiscoveryandadjacencyformation？Interfacetypes？P2P,P2MP,Broadcast,NBMA,Virtual？LSAfloodingandaging？NearlyidenticalLSAtypesOSPFv3/OSPFv2不同點(diǎn)？OSPFv3runsoveralink,ratherthanasub？Multipleinstancesperlink?OSPFv2topologynotIPv6-specific-RouterID-LinkID?Standardauthenticationmechanisms?Useslink-locala

42、ddresses？Generalizedfloodingscope？TwonewLSAtypesConfiguringOSPFv3inCiscoIOS?Software?SimilartoOSPFv2PrefixingexistingInterfaceandExecmodemandswith“ipv6”?InterfacesconfigureddirectlyReplacesworkmand?“Native”IPv6routermode-Notasub-modeofrouterospfConfigurationModesinOSPFv3?Enteringroutermode?noipv6rou

43、terospf?Enteringinterfacemode?noipv6ospfarea?Execmode?noshowipv6ospf?clearipv6ospfCiscoIOSOSPFv3SpecificAttributes?Configuringarearange?noarearange/?ShowingnewLSA?showipv6ospfdatabaselink?showipv6ospfdatabaseprefixOSPFv3DebugCommands?Adjacencyisnotappearing?nodebugipv6ospfadj?nodebugipv6ospfhello?SP

44、Fisrunningconstantly?nodebugipv6ospfspf?nodebugipv6ospfflooding?nodebugipv6ospfevents?nodebugipv6ospflsa-generation?nodebugipv6ospfdatabase-timer?Generalpurpose?nodebugipv6ospfpackets?nodebugipv6ospfretransmission?nodebugipv6ospftreeOSPFv3configurationexampleLAN1:xx:1:1:1:/64LAN2:xx:2:2:2:/64Eth0Eth

45、1Router1Router1#interfaceEther0ipv6addressxx:1:1:1:1/64ipv6ospf1area0interfaceEther1ipv6addressxx:2:2:2:2/64ipv6ospf1area1ipv6routerospf1router-idarea1rangexx:2:2:/48Area0Area1Router2CiscoIOSOSPFv3DisplayRouter2#showipv6routeospfIPv6RoutingTable-9entriesCodes:C-Connected,L-Local,S-Static,R-RI

46、P,B-BGPU-Per-userStaticrouteI1-ISISL1,I2-ISISL2,IA-ISISinterareaO-OSPFintra,OI-OSPFinter,OE1-OSPFext1,OE2-OSPFext2Oxx:1:1:2:1/128110/1viaFE80:205:5FFF:FEAF:2C38,Ether0OIxx:2:2:/48110/2viaFE80:205:5FFF:FEAF:2C38,Ether0Area0Area1Router2CiscoIOSOSPFv3DatabaseDisplayRouter2#showipv6ospfdatabaseOSPFRoute

47、rwithID()(ProcessID1)RouterLinkStates(Area0)LinkIDADVRouterAgeSeq#ChecksumLinkcount0xx0x8000000A0x2DB15010x800000070xF3E61NetLinkStates(Area0)LinkIDADVRouterAgeSeq#Checksum4800x800000060x3BADInterAreaPrefixLinkStates(Area0)ADVRouterAgeSeq#Prefix17610x80000005xx:2:2:2:/69820x80000005xx:2:2:4:2/128Link(Type-8)LinkStates(Area0)LinkIDADVRouterAgeSeq#ChecksumInterface2450x800000060xF3DCLo02360x800000080x68FFa2/05010x800000080xE7BCFa2/0IntraAreaPrefixLinkStates(Area0)LinkIDADVRouterAgeSeq#ChecksumRef