成果奧山威克諾ccna5enabling ospf

1、單區(qū)域 OSPF 實施實施 OSPFOSPF 概述通過交換 hello 數(shù)據(jù)包來創(chuàng)建鄰居關(guān)系以傳播 LSA 代替路由表更新鏈路：路由器接口狀態(tài)：描述接口以及它與鄰居路由器的關(guān)系將 LSA 泛洪到區(qū)域中的所有 OSPF 路由器，而不僅是直連的路由器收集由 OSPF 路由器生成的所有 LSA 以創(chuàng)建 OSPF 鏈路狀態(tài)數(shù)據(jù)庫使用 SPF 算法計算到每個目的地的最短距離，并將其置于路由表中OSPF 層級示例盡量減少路由表條目使拓?fù)渥兓瘍H影響本區(qū)域內(nèi)部鄰居關(guān)系：Hello 數(shù)據(jù)包SPF 算法將每臺路由器放置在樹的根節(jié)點 ，并根據(jù)累計開銷計算到達每個目的地的最短路徑開銷 = 參考帶寬 / 接口帶寬 (b

2、/s)配置單區(qū)域 OSPFnetwork address wildcard-mask area area-id將網(wǎng)絡(luò)分配到指定 OSPF 區(qū)域router ospf process-id將 OSPF 定義為 IP 路由協(xié)議RouterX(config)#RouterX(config-router)#配置環(huán)回接口路由器 ID：按照 OSPF 了解的路由器進行編號默認(rèn)值：OSPF 過程啟動時活動接口上的最高 IP 地址可以使用環(huán)回接口覆蓋：任何活動環(huán)回接口上的最高 IP 地址可以使用 router-id 命令手動設(shè)置檢驗 OSPF 的配置RouterX# show ip protocols 檢驗是

3、否已配置 OSPFRouterX# show ip route 顯示路由器獲知的所有路由RouterX# show ip routeCodes:I - IGRP derived, R - RIP derived, O - OSPF derived, C - connected, S - static, E - EGP derived, B - BGP derived, E2 - OSPF external type 2 route, N1 - OSPF NSSA external type 1 route, N2 - OSPF NSSA external type 2 route Gatewa

4、y of last resort is 10.119.254.240 to network 10.140.0.0 O 10.110.0.0 110/5 via 10.119.254.6, 0:01:00, Ethernet2 O IA 10.67.10.0 110/10 via 10.119.254.244, 0:02:22, Ethernet2 O 10.68.132.0 110/5 via 10.119.254.6, 0:00:59, Ethernet2 O 10.130.0.0 110/5 via 10.119.254.6, 0:00:59, Ethernet2 O E2 10.128.

5、0.0 170/10 via 10.119.254.244, 0:02:22, Ethernet2 . . .檢驗 OSPF 的配置（續(xù)）RouterX# show ip ospf Routing Process ospf 50 with ID 10.64.0.2 Number of areas in this router is 1. 1 normal 0 stub 0 nssa Number of areas transit capable is 0 External flood list length 0 Area BACKBONE(0) Area BACKBONE(0) Area ha

6、s no authentication SPF algorithm last executed 00:01:25.028 ago SPF algorithm executed 7 times 顯示 OSPF 路由器 ID、計時器和統(tǒng)計信息RouterX# show ip ospfRouterX#show ip ospf interface ethernet 0/0 Ethernet0/0 is up, line protocol is up Internet Address 192.168.1.2/24, Area 24 Process ID 201, Router ID 192.168.1.

7、2, Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State DR, Priority 255 Designated Router (ID) 192.168.1.2, Interface address 192.168.1.2 Backup Designated router (ID) 4.4.4.4, Interface address 192.168.1.4 Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 oob-resync t

8、imeout 40 Hello due in 00:00:08 Supports Link-local Signaling (LLS) Cisco NSF helper support enabled IETF NSF helper support enabled Index 1/3, flood queue length 0 Next 0 x0(0)/0 x0(0) Last flood scan length is 2, maximum is 2 Last flood scan time is 0 msec, maximum is 0 msec Neighbor Count is 1, A

9、djacent neighbor count is 1 Adjacent with neighbor 4.4.4.4 (Backup Designated Router Suppress hello for 0 neighbor(s)RouterX# show ip ospf interface檢驗 OSPF 的配置（續(xù)）顯示區(qū)域 ID 和鄰接信息RouterX#show ip ospf neighbor IDPri State Dead Time Address Interface 10.199.199.137 1 FULL/DR 0:00:31 192.168.80.37 FastEthe

10、rnet0/0 172.16.48.1 1 FULL/DROTHER 0:00:33 172.16.48.1 FastEthernet0/1 172.16.48.200 1 FULL/DROTHER 0:00:33 172.16.48.200 FastEthernet0/1 10.199.199.137 5 FULL/DR 0:00:33 172.16.48.189 FastEthernet0/1 檢驗 OSPF 的配置（續(xù)）RouterX# show ip ospf neighbor 顯示每個接口上的 OSPF 鄰居信息RouterX#show ip ospf neighbor 10.199

11、.199.137 Neighbor 10.199.199.137, interface address 192.168.80.37 In the area 0.0.0.0 via interface Ethernet0 Neighbor priority is 1, State is FULL Options 2 Dead timer due in 0:00:32 Link State retransmission due in 0:00:04 Neighbor 10.199.199.137, interface address 172.16.48.189 In the area 0.0.0.

12、0 via interface Fddi0 Neighbor priority is 5, State is FULL Options 2 Dead timer due in 0:00:32 Link State retransmission due in 00:00:03 檢驗 OSPF 的配置（續(xù)）RouterX# debug ip ospf eventsOSPF:hello with invalid timers on interface Ethernet0hello interval received 10 configured 10net mask received 255.255.

13、255.0 configured 255.255.255.0dead interval received 40 configured 30OSPF:rcv. v:2 t:1 l:48 rid:200.0.0.117 aid:0.0.0.0 chk:6AB2 aut:0 auk: RouterX# debug ip ospf packet OSPF:rcv. v:2 t:1 l:48 rid:200.0.0.116aid:0.0.0.0 chk:0 aut:2 keyid:1 seq:0 x0OSPF 調(diào)試命令使用 OSPF 配置負(fù)載均衡 OSPF 負(fù)載均衡：路徑必須為等價路徑默認(rèn)情況下，最多可

14、在路由表中加入四條等價路徑通過更改配置，最多可以配置 16 條路徑：(config-router)# maximum-paths 可更改特殊鏈路的開銷以確保路徑等價于負(fù)載均衡：(config-if)# ip ospf cost 使用 OSPF 配置負(fù)載均衡（續(xù)） OSPF 身份驗證 OSPF 支持以下幾種類型的身份驗證：空（無身份驗證）明文（或簡單）口令身份驗證MD5 身份驗證路由器生成并檢查每個 OSPF 數(shù)據(jù)包。 路由器驗證接收到的每個路由更新數(shù)據(jù)包的來源。配置“密鑰”（口令）；每個參與的鄰居都必須配置相同的密鑰。配置 OSPF 明文口令身份驗證ip ospf authentication

15、-key passwordRouterX(config-if)#分配用于鄰居路由器的口令RouterX(config-if)#ip ospf authentication message-digest | null指定接口的身份驗證類型（如 Cisco IOS 版本 12.0）RouterX(config-router)#area area-id authentication message-digest指定區(qū)域的身份驗證類型或者明文口令身份驗證配置示例檢驗明文口令身份驗證RouterX#show ip ospf neighborNeighbor ID Pri State Dead Time

16、Address Interface10.2.2.2 0 FULL/ - 00:00:32 192.168.1.102 Serial0/0/1RouterX# show ip routeGateway of last resort is not set 10.0.0.0/8 is variably subnetted, 2 subnets, 2 masksO 10.2.2.2/32 110/782 via 192.168.1.102, 00:01:17, Serial0/0/1C 10.1.1.0/24 is directly connected, Loopback0 192.168.1.0/2

17、7 is subnetted, 1 subnetsC 192.168.1.96 is directly connected, Serial0/0/1RouterX#ping 10.2.2.2Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.2.2.2, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 28/29/32 ms可視目標(biāo) 4-1：實施 OSPF總結(jié)OSPF 是無類鏈路狀態(tài)路由協(xié)議，它使用區(qū)域?qū)蛹壱约铀偈諗俊SPF 相互交換 hello 數(shù)據(jù)包