demand:
First divide the address
area0
172.16.0.0 24 tunnel
172.16.1.0 24 R5 loopback
172.16.2.0 24 R6 loopback
172.16.3.0 24 R7 loopback
area1
172.16.32.0 24 Backbone link
172.16.33.0 24 R1 loopback
172.16.34.0 24 R2 loopback
172.16.35.0 24 R3 loopback
area2
172.16.64.0 24 Backbone link
172.16.65.0 24 Backbone link
172.16.66.0 24 R11 loopback
area3
172.16.96.0 24 Backbone link
172.16.97.0 24 Backbone link
172.16.98.0 24 R8 loopback
area4
172.16.128.0 24 Backbone link
172.16.129.0 24 R9 loopback
172.16.130.0 24 R10 loopback
rip
10.1.1.0 24
10.1.2.0 24
Topology
First configure the address
Use public network addresses between public networks.
Then write a default pointing to the operator.
After the configuration is complete, configure nat on R3, 5, 6, 7
[r3]acl 2000
[r3-acl-basic-2000]rule permit source any
[r3-acl-basic-2000]q
[r3]int g0/0/1
[r3-GigabitEthernet0/0/1]nat outbound 2000
5,6,7 are similar. Now
you can access the public network
Then set up MGRE between R3, 5, 6, 7,
R3 as the site, the other branch
Configure Site
branch configure
test address is correctly configured
correctly
Enable ospf protocol
First
, announce your own network segment in area 0. The ones that are not marked with red boxes are to reduce LSA operations.
MGRE belongs to a point-to-point network, so when using ospf, you need to modify the ospf network type on the interface to broadcast type.
[r3-Tunnel0/0/0]ospf network-type broadcast
The configuration of area 1 2 3 is similar to that of area 0.
Area 4 can be seen as a discontinuous backbone in an irregular area. It is
recommended to use multi-process bidirectional re-release
to re-release process 1 and process 2
[r9-ospf-2]import-route ospf 1
[r9-ospf-1]import-route ospf 2
Using the rip area also uses two-way republishing
At this time, the entire network is reachable, and the amount of LSA updates is reduced.
At this time, it will be found that areas 2 and 3 belong to the complete NSSA area.
On the ABR
[r6-ospf-1-area-0.0.0.2]nssa no-summary
[r7-ospf-1-area-0.0.0.3]nssa no-summary
Also need to write nssa on other routers in this area
Area 1 is a completely peripheral area
on the ABR
[r3-ospf-1-area-0.0.0.1]stub no-summary
You also need to write stub on other routers in this area
After the special area is completed, the route summary outside the area is performed
[r7-ospf-1]asbr-summary 172.16.128.0 255.255.224.0
[r12-ospf-1]asbr-summary 10.1.0.0 255.255.252.0
Inter-domain route summary
[r3-ospf-1]abr-summary 172.16.32.0 255.255.224.0
[r7-ospf-1]abr-summary 172.16.96.0 255.255.224.0
[r6-ospf-1]abr-summary 172.16.64.0 255.255.224.0
At this time, the LSA update is reduced to the minimum.
Test:
Well, there may be errors in the operation of reducing LSA, and there may be force majeure factors that cause the private network to not be fully accessible. Before LSA is reduced, the whole network can be connected.