目录
题目
1.IP地址的规划设计
2.搭建拓扑并进行基础IP配置
3.配置虚拟局域网
1）按子网划分要求配置PC1和PC2
检测：输入[SW1]display vlan进行检查
配置路由器R3
检测：用PC1去访问PC2
2）配置拓扑中其余路由器的网关以及回环
R1配置：
R2配置：
R3配置：
R4配置：
4.配置动态路由
1）依次配置
R1配置：
R2配置：
R3配置：
R4配置：
2）完成要求2
R1配置：
R2配置：
R3配置：
检测：display ospf peer
5.完成要求4
1）R4回环不能宣告
2）保障更新安全
在R3上区域认证
在R4上接口认证
3）避免环路
4）减少路由条目在R3上配置
题目
1.IP地址的规划设计
0区域: 192.168.1.0/25
1区域: 192.168.1.128/30
其中0区域按要求需要进行再次划分，如下
192.168.1.0 28
192.168.1.16 28
192.168.1.32 28
192.168.1.64 28
192.168.1.80 28
192.168.1.96 28
192.168.1.109 28 保留地址
192.168.1.125 28
我们取前五，其余作为保留地址
则区域0 IP地址划分为：
R123的0/0/0接口: 192.168.1.0/28
R1的环回: 192.168.1.16/28
R2的环回: 192.168.1.32/28
vlan2: 192.168.1.64/28
vlan3: 192.168.1.80/28
2.搭建拓扑并进行基础IP配置
3.配置虚拟局域网
1）按子网划分要求配置PC1和PC2
同时配置提前规划好的网关192.168.1.65/28 192.168.1.81/28
在交换机中输入：
<Huawei>system-view
[Huawei]sys SW1
[SW1]vlan batch 2 3
[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access
[SW1-GigabitEthernet0/0/2]port default vlan 2
[SW1-GigabitEthernet0/0/2]q
[SW1]interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type access
[SW1-GigabitEthernet0/0/3]port default vlan 3
[SW1-GigabitEthernet0/0/3]q
检测：输入[SW1]display vlan进行检查
[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3
配置路由器R3
<Huawei>system-view
[Huawei]sysname R3
[R3]interface GigabitEthernet 0/0/2.1
[R3-GigabitEthernet0/0/2.1]ip address 192.168.1.65 28
[R3-GigabitEthernet0/0/2.1]q
[R3]interface GigabitEthernet 0/0/2.2
[R3-GigabitEthernet0/0/2.2]ip address 192.168.1.81 28
[R3-GigabitEthernet0/0/2.2]dot1q termination vid 3
[R3-GigabitEthernet0/0/2.2]arp broadcast enable
[R3-GigabitEthernet0/0/2.2]q
[R3]interface GigabitEthernet 0/0/2.1
[R3-GigabitEthernet0/0/2.1]dot1q termination vid 2
[R3-GigabitEthernet0/0/2.1]arp broadcast enable
检测：用PC1去访问PC2
2）配置拓扑中其余路由器的网关以及回环
R1配置：
<Huawei>system-view
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.1 28
[R1-GigabitEthernet0/0/0]q
[R1]interface LoopBack 0
[R1-LoopBack0]ip address 192.168.1.17 28
R2配置：
<Huawei>system-view
[Huawei]sysname R2
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ip address 192.168.1.2 28
[R2-GigabitEthernet0/0/0]q
[R2]interface LoopBack 0
[R2-LoopBack0]ip address 192.168.1.29 28
R3配置：
<R3>system-view
[R3]interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0]ip address 192.168.1.3 28
[R3-GigabitEthernet0/0/0]q
[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]ip address 192.168.1.129 30
R4配置：
<Huawei>system-view
[Huawei]sysname R4
[R4]interface GigabitEthernet 0/0/0
[R4-GigabitEthernet0/0/0]ip address 192.168.1.130 30
[R4-GigabitEthernet0/0/0]q
[R4]interface LoopBack 0
[R4-LoopBack0]ip address 4.4.4.4 24
检测：依次输入display ip interface brief 进行检测
4.配置动态路由
使用OSPF协议
1）依次配置
R1配置：
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 192.168.1.16 0.0.0.15
[R1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.15
R2配置：
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 192.168.1.32 0.0.0.15
[R2-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.15
R3配置：
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]a
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.15
[R3-ospf-1-area-0.0.0.0]network 192.168.1.64 0.0.0.15
[R3-ospf-1-area-0.0.0.0]q
[R3-ospf-1]area 1
[R3-ospf-1-area-0.0.0.1]network 192.168.1.129 0.0.0.0
R4配置：
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 1
[R4-ospf-1-area-0.0.0.1]network 192.168.1.130 0.0.0.0
2）完成要求2
.R1~R3 R3为DR设备，没有BDR
R1配置：
[R1-GigabitEthernet0/0/0]ospf dr-priority 0
R2配置：
[R2-GigabitEthernet0/0/0]ospf dr-priority 0
R3配置：
检测：<R3>display ospf peer
OSPF Process 1 with Router ID 3.3.3.3
Neighbors
Area 0.0.0.0 interface 192.168.1.3(GigabitEthernet0/0/0)'s neighbors
Router ID: 1.1.1.1 Address: 192.168.1.1
State: Full Mode:Nbr is Slave Priority: 0
DR: 192.168.1.3 BDR: None MTU: 0
Dead timer due in 39 sec
Retrans timer interval: 5
Neighbor is up for 00:02:15
Authentication Sequence: [ 0 ]
Router ID: 2.2.2.2 Address: 192.168.1.2
State: Full Mode:Nbr is Slave Priority: 0
DR: 192.168.1.3 BDR: None MTU: 0
Dead timer due in 32 sec
Retrans timer interval: 5
Neighbor is up for 00:01:32
Authentication Sequence: [ 0 ]
Neighbors
Area 0.0.0.1 interface 192.168.1.129(GigabitEthernet0/0/1)'s neighbors
Router ID: 4.4.4.4 Address: 192.168.1.130
State: Full Mode:Nbr is Master Priority: 1
DR: 192.168.1.130 BDR: 192.168.1.129 MTU: 0
Dead timer due in 29 sec
Retrans timer interval: 5
Neighbor is up for 00:13:43
Authentication Sequence: [ 0 ]
5.完成要求4
R4回环不能宣告，全网可达，保障更新安全，避免环路，减少路由条目
1）R4回环不能宣告
在R4 上配置 [R4-ospf-1]default-route-advertise always
检测：在R1上输入<R1>display ip routing-table 进行检查
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 13 Routes : 13
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 O_ASE 150 1 D 192.168.1.3 GigabitEthernet
0/0/0
……………
2）保障更新安全
认证
在R3上区域认证
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]authentication-mode md5 1 plain 123456
[R3-ospf-1]area 1
[R3-ospf-1-area-0.0.0.1]authentication-mode md5 1 plain 123456
在R4上接口认证
[R4]interface GigabitEthernet0/0/0
[R4-GigabitEthernet0/0/0]ospf authentication-mode md5 1 plain 123456
检测：在R1上输入<R1>display ip routing-table 进行检查
3）避免环路
配置空接
[R3]ip route-static 0.0.0.0 0 NULL 0
4）减少路由条目
在R3上配置
[R3-ospf-1-area-0.0.0.0]abr-summary 192.168.1.0 255.255.255.224
检测：在R4上输入display ip routing-table protocol ospf 检查。
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
Destinations : 2 Routes : 2
OSPF routing table status : <Active>
Destinations : 2 Routes : 2
Destination/Mask Proto Pre Cost Flags NextHop Interface
192.168.1.0/27 OSPF 10 2 D 192.168.1.129 GigabitEthernet
0/0/0
192.168.1.64/28 OSPF 10 2 D 192.168.1.129 GigabitEthernet
0/0/0
OSPF routing table status : <Inactive>
Destinations : 0 Routes : 0
