实验拓扑
实验需求
1、按照图示配置好IP地址，PC1网关指向为R8
2、OSPF划分为4个区域，其中192.168.0.0/24，192.168.1.0/24，192.168.2.0/24属于AREA 0，192.168.10.0/24属于AREA1，192.168.4.0/24，100.0.0.0/24属于AREA2，192.168.5.0，100.1.1.0/24属于AREA3
3、为了防止链路中断引起的骨干区域隔离，在R3和R4上配置虚连接
4、在R5上配置到达172.16.0.0/24和172.16.1.0/24网段的静态路由，并引入到OSPF内部
5、在R7和R8上配置默认路由，下一跳指向R5和R6
6、在ASBR上对172.16.0.0/24和172.16.1.0/24网段进行准确的路由聚合
7、在R3和R4上分别对AREA 0的网段进行路由聚合
8、将AREA3配置为NSSA区域
9、在R6上配置到达100.2.2.0/24网段的静态路由，并引入到AREA3
10、在AREA0配置区域认证，密码为123456
实验步骤
1. 配置相应接口IP地址及loopback 环回口地址
2. 按照图示分区域配置OSPF
AR1
[Huawei]ospf
[Huawei-ospf-1]area 0
[Huawei-ospf-1-area-0.0.0.0]network 192.168.0.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255AR2
[Huawei]ospf
[Huawei-ospf-1]area
[Huawei-ospf-1]area 0
[Huawei-ospf-1-area-0.0.0.0]net
[Huawei-ospf-1-area-0.0.0.0]network 192.168.0.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.0]ar
[Huawei-ospf-1-area-0.0.0.0]arp-ping
[Huawei-ospf-1-area-0.0.0.0]area
[Huawei-ospf-1-area-0.0.0.0]area
[Huawei-ospf-1-area-0.0.0.0]area 3
[Huawei-ospf-1-area-0.0.0.3]net
[Huawei-ospf-1-area-0.0.0.3]network 192.168.5.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.3]area 1
[Huawei-ospf-1-area-0.0.0.1]net
[Huawei-ospf-1-area-0.0.0.1]network 192.168.10.0 0.0.0.255AR3
[Huawei]ospf
[Huawei-ospf-1]area 0
[Huawei-ospf-1-area-0.0.0.0]net
[Huawei-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.0]area 1
[Huawei-ospf-1-area-0.0.0.1]network 192.168.10.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.1]area 2
[Huawei-ospf-1-area-0.0.0.2]net
[Huawei-ospf-1-area-0.0.0.2]network 192.168.4.0 0.0.0.255AR4
[Huawei]ospf
[Huawei-ospf-1]area 0
[Huawei-ospf-1-area-0.0.0.0]net
[Huawei-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255
AR5
[Huawei]ospf
[Huawei-ospf-1]ar
[Huawei-ospf-1]area 2
[Huawei-ospf-1-area-0.0.0.2]net
[Huawei-ospf-1-area-0.0.0.2]network 192.168.4.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.2]network 100.0.0.0 0.0.0.255AR6
[Huawei]ospf
[Huawei-ospf-1]ar
[Huawei-ospf-1]area 3
[Huawei-ospf-1-area-0.0.0.3]net
[Huawei-ospf-1-area-0.0.0.3]network 192.168.5.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.3]net
[Huawei-ospf-1-area-0.0.0.3]network 100.1.1.0 0.0.0.2553. 在R3和R4上配置虚连接
AR3
[Huawei-ospf-1-area-0.0.0.1]vlink-peer 192.168.10.2 AR4
[Huawei-ospf-1-area-0.0.0.1]vlink-peer 192.168.1.14. 静态路由，并引入到OSPF内部
AR5
[Huawei]IP route-static 172.16.0.1 24 100.0.0.1
[Huawei]IP route-static 172.16.1.1 24 100.0.0.1
[Huawei-ospf-1]import-route static 在AR3上查看OSPF 路由表
Huawei]dis ip routing-table protocol ospf
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
Destinations : 7 Routes : 7
OSPF routing table status : <Active>
Destinations : 7 Routes : 7
Destination/Mask Proto Pre Cost Flags NextHop Interface
100.0.0.0/24 OSPF 10 2 D 192.168.4.1 GigabitEthernet
0/0/2
100.1.1.0/24 OSPF 10 3 D 192.168.10.2 GigabitEthernet
0/0/1
172.16.0.0/24 O_ASE 150 1 D 192.168.4.1 GigabitEthernet
0/0/2
172.16.1.0/24 O_ASE 150 1 D 192.168.4.1 GigabitEthernet
0/0/2
192.168.0.0/24 OSPF 10 2 D 192.168.1.2 GigabitEthernet
0/0/0
192.168.2.0/24 OSPF 10 2 D 192.168.10.2 GigabitEthernet
0/0/1
192.168.5.0/24 OSPF 10 2 D 192.168.10.2 GigabitEthernet
0/0/15. 在R7和R8上配置默认路由，下一跳指向R5和R6
在AR7
[Huawei]ip route-static 192.168.4.0 24 100.0.0.2 在AR8
[Huawei]ip route-static 192.168.5.0 24 100.1.1.1 6. 在ASBR上对172.16.0.0/24和172.16.1.0/24网段进行准确的路由聚合
[Huawei-ospf-1]asbr-summary 172.16.0.0 255.255.254.0在AR7上PING 测试连通性
[Huawei]ping 192.168.4.1
PING 192.168.4.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.4.1: bytes=56 Sequence=1 ttl=255 time=30 ms
Reply from 192.168.4.1: bytes=56 Sequence=2 ttl=255 time=40 ms
Reply from 192.168.4.1: bytes=56 Sequence=3 ttl=255 time=10 ms
Reply from 192.168.4.1: bytes=56 Sequence=4 ttl=255 time=40 ms
Reply from 192.168.4.1: bytes=56 Sequence=5 ttl=255 time=10 ms
--- 192.168.4.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/26/40 ms在AR8上测试连通性
[Huawei]ping 192.168.5.1
PING 192.168.5.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.5.1: bytes=56 Sequence=1 ttl=254 time=30 ms
Reply from 192.168.5.1: bytes=56 Sequence=2 ttl=254 time=30 ms
Reply from 192.168.5.1: bytes=56 Sequence=3 ttl=254 time=30 ms
Reply from 192.168.5.1: bytes=56 Sequence=4 ttl=254 time=20 ms
Reply from 192.168.5.1: bytes=56 Sequence=5 ttl=254 time=30 ms
--- 192.168.5.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 20/28/30 ms7. 在R3和R4上分别对AREA 0的网段进行路由聚合
AR3
abr-summary 192.168.0.0 255.255.252.0AR4
abr-summary 192.168.0.0 255.255.252.0查看OSPF 路由表，发现已经聚合
[Huawei]DIS IP routing-table protocol ospf
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
Destinations : 5 Routes : 5
OSPF routing table status : <Active>
Destinations : 5 Routes : 5
Destination/Mask Proto Pre Cost Flags NextHop Interface
100.0.0.0/24 OSPF 10 4 D 192.168.5.1 GigabitEthernet
0/0/1
172.16.0.0/23 O_ASE 150 2 D 192.168.5.1 GigabitEthernet
0/0/1
192.168.0.0/22 OSPF 10 3 D 192.168.5.1 GigabitEthernet
0/0/1
192.168.4.0/24 OSPF 10 3 D 192.168.5.1 GigabitEthernet
0/0/1
192.168.10.0/24 OSPF 10 2 D 192.168.5.1 GigabitEthernet
0/0/18. 将AREA3配置为NSSA区域
AR4
[Huawei]ospf
[Huawei-ospf-1]area 3
[Huawei-ospf-1-area-0.0.0.3]nssa AR6
[Huawei]ospf
[Huawei-ospf-1]area 3
[Huawei-ospf-1-area-0.0.0.3]nssa 9. 在R6上配置到达100.2.2.0/24网段的静态路由，并引入到AREA3
AR6
[Huawei]ip route-static 100.2.2.0 24 100.1.1.2
[Huawei-ospf-1]import-route static 10. 在AREA0配置区域认证，密码为123456
AR1
[Huawei-ospf-1-area-0.0.0.0]authentication-mode simple cipher 123456AR2
[Huawei-ospf-1-area-0.0.0.0]authentication-mode simple cipher 123456AR3
[Huawei-ospf-1-area-0.0.0.0]authentication-mode simple cipher 123456AR4
[Huawei-ospf-1-area-0.0.0.0]authentication-mode simple cipher 123456