多区OSPF完整配置.docx
《多区OSPF完整配置.docx》由会员分享，可在线阅读，更多相关《多区OSPF完整配置.docx（19页珍藏版）》请在冰豆网上搜索。
多区OSPF完整配置
（一）交换部分
en
conft
noipdomain-lookup
linecon0
loggsyn
exec-time00
exit
一、基本配置
本部分包括VLAN规划和VLAN间的通信。
1.sw29-1的配置
hostnamesw29-1
vtpdomainrich
vtppasscisco
vtpmodeclient
intrangef1/1-2
swtrunkencapdot1q
swmodetrunk
swtrallvlan1,10
interfaceVlan1
ipaddress172.16.1.201255.255.255.0
interfaceVlan10
ipaddress172.16.10.201255.255.255.0
noiprouting
ipdefault-gateway172.16.10.25110.25210.254（HSRP）
说明：
这里用SW29-1的vlan10来模拟一个主机进行VLAN间通信测试。
2.sw29-5的配置
hostnamesw29-5
vtpdomainrich
vtppasscisco
vtpmodeclient
intrangef1/1-2
swtrunkencapdot1q
swmodetrunk
interfaceVlan1
ipaddress172.16.1.205255.255.255.0
interfaceVlan30
ipaddress172.16.30.205255.255.255.0
noiprouting
ipdefault-gateway172.16.30.25130.25230.254（HSRP）
说明：
这里用SW29-5的vlan30来模拟一个主机进行VLAN间通信测试。
3.sw35-1的配置
hostnamesw35-1
noipdomainlookup
vtpdomainrich
vtppasscisco
vtpmodeserver
vlan10
vlan20
vlan30
vlan40
exit
interfacePort-channel1
switchportmodetrunk
interfaceFastEthernet1/1
noswitchport
ipaddress192.168.1.1255.255.255.0
interfaceFastEthernet1/2
noswitchport
ipaddress192.168.2.1255.255.255.0
interfaceFastEthernet1/3
swtrunkencapsulationdot1q
switchportmodetrunk
channel-group1modeon
interfaceFastEthernet1/4
swtrunkencapsulationdot1q
switchportmodetrunk
channel-group1modeon
shutdown
interfaceFastEthernet1/5
swtrunkencapsulationdot1q
switchportmodetrunk
interfaceFastEthernet1/6
swtrunkencapsulationdot1q
switchportmodetrunk
interfaceVlan1
ipaddress172.16.1.251255.255.255.0
noshut
interfaceVlan10
ipaddress172.16.10.251255.255.255.0
interfaceVlan20
ipaddress172.16.20.251255.255.255.0
interfaceVlan30
ipaddress172.16.30.251255.255.255.0
interfaceVlan40
ipaddress172.16.40.251255.255.255.0
linecon0
exec-timeout00
loggingsynchronous
4.sw35-2的配置
hostnamesw35-2
noipdomainlookup
vtpdomainrich
vtppasscisco
vtpmodeclient
interfacePort-channel1
switchportmodetrunk
interfaceFastEthernet1/1
noswitchport
ipaddress192.168.4.1255.255.255.0
interfaceFastEthernet1/2
noswitchport
ipaddress192.168.3.1255.255.255.0
interfaceFastEthernet1/3
swtrunkencapsulationdot1q
switchportmodetrunk
channel-group1modeon
interfaceFastEthernet1/4
swtrunkencapsulationdot1q
switchportmodetrunk
channel-group1modeon
shutdown
interfaceFastEthernet1/5
swtrunkencapsulationdot1q
switchportmodetrunk
interfaceFastEthernet1/6
swtrunkencapsulationdot1q
switchportmodetrunk
interfaceVlan1
ipaddress172.16.1.252255.255.255.0
noshut
interfaceVlan10
ipaddress172.16.10.252255.255.255.0
interfaceVlan20
ipaddress172.16.20.252255.255.255.0
interfaceVlan30
ipaddress172.16.30.252255.255.255.0
interfaceVlan40
ipaddress172.16.40.252255.255.255.0
linecon0
exec-timeout00
loggingsynchronous
二、配置STP，防止二层环路，并实现不同VLAN流量的负载均衡。
1.sw35-1的配置
spanning-treevlan1priority4096
spanning-treevlan10priority4096
spanning-treevlan20priority4096
spanning-treevlan30priority8192
spanning-treevlan40priority8192
2.sw35-2的配置
spanning-treevlan1priority8192
spanning-treevlan10priority8192
spanning-treevlan20priority8192
spanning-treevlan30priority4096
spanning-treevlan40priority4096
三、配置HSRP，提供网关冗余，并实现不同VLAN流量的负载均衡。
1.sw35-1的配置
interfaceVlan1
ipaddress172.16.1.251255.255.255.0
standby1ip172.16.1.254
standby1priority150
standby1preempt
standby1authentication123
standby1trackFastEthernet1/130
standby1trackFastEthernet1/230
interfaceVlan10
ipaddress172.16.10.251255.255.255.0
standby10ip172.16.10.254
standby10priority150
standby10preempt
standby10authentication123
standby10trackFastEthernet1/130
standby10trackFastEthernet1/230
interfaceVlan20
ipaddress172.16.20.251255.255.255.0
standby20ip172.16.20.254
standby20priority150
standby20preempt
standby20authentication123
standby20trackFastEthernet1/130
standby20trackFastEthernet1/230
interfaceVlan30
ipaddress172.16.30.251255.255.255.0
standby30ip172.16.30.254
standby30preempt
standby30authentication123
interfaceVlan40
ipaddress172.16.40.251255.255.255.0
standby40ip172.16.40.254
standby40preempt
standby40authentication123
2.sw35-2的配置
interfaceVlan1
ipaddress172.16.1.252255.255.255.0
standby1ip172.16.1.254
standby1preempt
standby1authentication123
interfaceVlan10
ipaddress172.16.10.252255.255.255.0
standby10ip172.16.10.254
standby10preempt
standby10authentication123
interfaceVlan20
ipaddress172.16.20.252255.255.255.0
standby20ip172.16.20.254
standby20preempt
standby20authentication123
interfaceVlan30
ipaddress172.16.30.252255.255.255.0
standby30ip172.16.30.254
standby30priority150
standby30preempt
standby30authentication123
standby30trackFastEthernet1/130
standby30trackFastEthernet1/230
interfaceVlan40
ipaddress172.16.40.252255.255.255.0
standby40ip172.16.40.254
standby40priority150
standby40preempt
standby40authentication123
standby40trackFastEthernet1/130
standby40trackFastEthernet1/230
四、sw65-1的配置
说明:
在实际网络应用中SW65-1和SW65-2上应划分VLAN50、60、70、80,并配置HSRP来实现网关冗余，配置方法同SW35-1和SW35-2.这里做了简化，用loopback接口来模拟。
hostnames65-1
noipdomainlookup
interfaceLoopback1
ipaddress172.16.50.1255.255.255.255
interfaceLoopback2
ipaddress172.16.60.1255.255.255.255
interfaceLoopback3
ipaddress172.16.70.1255.255.255.255
interfaceLoopback4
ipaddress172.16.80.1255.255.255.255
interfaceFastEthernet1/1
noswitchport
ipaddress192.168.1.2255.255.255.0
noshut
interfaceFastEthernet1/2
noswitchport
ipaddress192.168.3.2255.255.255.0
noshut
interfaceFastEthernet1/3
noswitchport
ipaddress192.168.5.1255.255.255.0
noshut
interfaceFastEthernet1/4
shutdown
interfaceFastEthernet1/5
noswitchport
ipaddress192.168.7.1255.255.255.0
noshut
interfaceFastEthernet1/6
noswitchport
ipaddress192.168.6.1255.255.255.0
noshut
linecon0
exec-timeout00
loggingsynchronous
五、sw65-2的配置
说明:
在实际网络应用中SW65-1和SW65-2上应划分VLAN50、60、70、80,并配置HSRP来实现网关冗余，配置方法同SW35-1和SW35-2.这里做了简化，用loopback接口来模拟。
hostnamesw65-2
noipdomainlookup
interfaceLoopback1
ipaddress172.16.50.2255.255.255.255
interfaceLoopback2
ipaddress172.16.60.2255.255.255.255
interfaceLoopback3
ipaddress172.16.70.2255.255.255.255
interfaceLoopback4
ipaddress172.16.80.2255.255.255.255
interfaceFastEthernet1/1
noswitchport
ipaddress192.168.4.2255.255.255.0
noshut
interfaceFastEthernet1/2
noswitchport
ipaddress192.168.2.2255.255.255.0
noshut
interfaceFastEthernet1/3
noswitchport
ipaddress192.168.5.2255.255.255.0
noshut
interfaceFastEthernet1/4
shutdown
interfaceFastEthernet1/5
noswitchport
ipaddress192.168.9.1255.255.255.0
noshut
interfaceFastEthernet1/6
noswitchport
ipaddress192.168.8.1255.255.255.0
noshut
linecon0
exec-timeout00
loggingsynchronous
（二）路由基本配置
说明:
该配置包括各路由器的接口IP，及防火墙上应配置的静态路由。
1、R1的基本配置
hostnameR1
noipdomainlookup
interfaceFastEthernet0/0
ipaddress192.168.7.2255.255.255.0
noshut
interfaceFastEthernet0/1
ipaddress192.168.9.2255.255.255.0
noshut
interfaceSerial0/0
ipaddress192.168.17.1255.255.255.0
clockrate2000000
noshut
interfaceSerial0/1
ipaddress192.168.18.1255.255.255.0
noshut
clockrate2000000
linecon0
exec-timeout00
loggingsynchronous
2、R2的基本配置
hostnamer2
noipdomainlookup
interfaceFastEthernet0/0
ipaddress192.168.20.1255.255.255.0
noshut
interfaceSerial0/0
ipaddress192.168.17.2255.255.255.0
clockrate2000000
noshut
interfaceFastEthernet0/1
ipaddress172.17.24.2255.255.255.0
noshut
linecon0
exec-timeout00
loggingsynchronous
3、R3的基本配置
hostnamer3
noipdomainlookup
interfaceFastEthernet0/0
ipaddress192.168.30.1255.255.255.0
noshut
interfaceFastEthernet0/1
ipaddress172.18.35.3255.255.255.0
noshut
interfaceSerial0/1
ipaddress192.168.18.3255.255.255.0
clockrate2000000
noshut
linecon0
exec-timeout00
loggingsynchronous
4、R4的基本配置
hostnamer4
noipdomainlookup
interfaceLoopback1
ipaddress172.17.4.4255.255.255.0
interfaceFastEthernet0/1
ipaddress172.17.24.4255.255.255.0
noshut
linecon0
exec-timeout00
loggingsynchronous
5、R5的基本配置
hostnamer5
noipdomainlookup
interfaceLoopback1
ipaddress172.18.5.5255.255.255.0
interfaceFastEthernet0/1
ipaddress172.18.35.5255.255.255.0
noshut
linecon0
exec-timeout00
loggingsynchronous
6、wall-1的基本配置
hostnamewall-1
noipdomainlookup
interfaceLoopback1
ipaddress201.1.1.1255.255.255.0
interfaceFastEthernet0/0
ipaddress192.168.6.2255.255.255.0
noshut
interfaceFastEthernet0/1
ipaddress192.168.8.2255.255.255.0
noshut
iproute172.16.0.0255.255.0.0192.168.6.1
iproute172.16.0.0255.255.0.0192.168.8.1
linecon0
exec-timeout00
loggingsynchronous
7、wall-2的基本配置
hostnamewall-2
noipdomainlookup
interfaceLoopback1
ipaddress202.1.1.1255.255.255.0
interfaceFastEthernet0/0
ipaddress192.168.20.2255.255.255.0
noshut
iproute172.17.0.0255.255.0.0192.168.20.1
linecon0
exec-timeout00
loggingsynchronous
8、wall-3的基本配置
hostnamewall-3
noipdomainlookup
interfaceLoopback1
ipaddress203.1.1.1255.255.255.0
升级会员 