實(shí)訓(xùn)二十四 三層交換機(jī)OSPF動(dòng)態(tài)路由

1、精選文檔實(shí)訓(xùn)二十四 三層交換機(jī)OSPF動(dòng)態(tài)路由一、 實(shí)訓(xùn)目的1、 把握三層交換機(jī)之間通過(guò)OSPF協(xié)議實(shí)現(xiàn)網(wǎng)段互通的配置方法。2、 理解RIP協(xié)議和OSPF協(xié)議內(nèi)部實(shí)現(xiàn)的不同點(diǎn)二、 應(yīng)用環(huán)境當(dāng)兩臺(tái)三層交換機(jī)級(jí)聯(lián)時(shí)，為了保證每臺(tái)交換機(jī)上所連接的網(wǎng)段可以和另一臺(tái)交換機(jī)上連接的網(wǎng)段相互通信，使用OSPF協(xié)議可以動(dòng)態(tài)學(xué)習(xí)路由。三、 實(shí)訓(xùn)設(shè)備1. DCRS-5650-52CT 交換機(jī)2臺(tái)2. PC機(jī)2-4臺(tái)3. Console線(xiàn)1-2根4. 直通網(wǎng)線(xiàn)2-4根四、 實(shí)訓(xùn)拓?fù)湮濉?實(shí)訓(xùn)要求1、 在交換機(jī)A和交換機(jī)B上分別劃分基于端口的VLAN：交換機(jī)VLAN 端口成員 交換機(jī)A10182091610024交換

2、機(jī)B301840916101242、 交換機(jī)A和B通過(guò)的24口級(jí)聯(lián)。3、 配置交換機(jī)A和B各VLAN虛擬接口的IP地址分別如下表所示：VLAN10VLAN20VLAN30VLAN40VLAN100VLAN101192.168.10.1192.168.20.1192.168.30.1192.168.40.1192.168.100.1192.168.100.24、 PC1-PC4的網(wǎng)絡(luò)設(shè)置為：設(shè)備IP地址gatewayMaskPC1 192.168.10.101192.168.10.1255.255.255.0 PC2 192.168.20.101 192.168.20.1255.255.255.

3、0 PC3 192.168.30.101192.168.30.1255.255.255.0 PC4 192.168.40.101 192.168.40.1255.255.255.0 5、 驗(yàn)證：l 沒(méi)有OSPF路由協(xié)議之前：PC1與PC2，PC3與PC4可以互通。PC1、PC2與PC3、PC4不通。l 配置OSPF路由協(xié)議之后：四臺(tái)PC之間都可以互通。l 若實(shí)訓(xùn)結(jié)果和理論相符，則本實(shí)訓(xùn)完成。六、 實(shí)訓(xùn)步驟第一步：交換機(jī)全部恢復(fù)出廠(chǎng)設(shè)置，配置交換機(jī)的VLAN信息交換機(jī)A：DCRS-5650-52CT -A#confDCRS-5650-52CT -A(Config)#vlan 10DCRS-565

4、0-52CT -A(Config-Vlan10)#switchport interface ethernet 0/0/1-8Set the port Ethernet0/0/1 access vlan 10 successfullySet the port Ethernet0/0/2 access vlan 10 successfullySet the port Ethernet0/0/3 access vlan 10 successfullySet the port Ethernet0/0/4 access vlan 10 successfullySet the port Ethernet0

5、/0/5 access vlan 10 successfullySet the port Ethernet0/0/6 access vlan 10 successfullySet the port Ethernet0/0/7 access vlan 10 successfullySet the port Ethernet0/0/8 access vlan 10 successfullyDCRS-5650-52CT -A(Config-Vlan10)#exitDCRS-5650-52CT -A(Config)#vlan 20DCRS-5650-52CT -A(Config-Vlan20)#swi

6、tchport interface ethernet 0/0/9-16Set the port Ethernet0/0/9 access vlan 20 successfullySet the port Ethernet0/0/10 access vlan 20 successfullySet the port Ethernet0/0/11 access vlan 20 successfullySet the port Ethernet0/0/12 access vlan 20 successfullySet the port Ethernet0/0/13 access vlan 20 suc

7、cessfullySet the port Ethernet0/0/14 access vlan 20 successfullySet the port Ethernet0/0/15 access vlan 20 successfullySet the port Ethernet0/0/16 access vlan 20 successfullyDCRS-5650-52CT -A(Config-Vlan20)#exitDCRS-5650-52CT -A(Config)#vlan 100DCRS-5650-52CT -A(Config-Vlan100)#switchport interface

8、ethernet 0/0/24Set the port Ethernet0/0/24 access vlan 100 successfullyDCRS-5650-52CT -A(Config-Vlan100)#exitDCRS-5650-52CT -A(Config)#驗(yàn)證配置：DCRS-5650-52CT -A#show vlanVLAN Name Type Media Ports-1 default Static ENET Ethernet0/0/17 Ethernet0/0/18 Ethernet0/0/19 Ethernet0/0/20 Ethernet0/0/21 Ethernet0

9、/0/22 Ethernet0/0/23 Ethernet0/0/25 Ethernet0/0/26 Ethernet0/0/27 Ethernet0/0/2810 VLAN0010 Static ENET Ethernet0/0/1 Ethernet0/0/2 Ethernet0/0/3 Ethernet0/0/4 Ethernet0/0/5 Ethernet0/0/6 Ethernet0/0/7 Ethernet0/0/820 VLAN0020 Static ENET Ethernet0/0/9 Ethernet0/0/10 Ethernet0/0/11 Ethernet0/0/12 Et

10、hernet0/0/13 Ethernet0/0/14 Ethernet0/0/15 Ethernet0/0/16100 VLAN0100 Static ENET Ethernet0/0/24DCRS-5650-52CT -A#交換機(jī)B：DCRS-5650-52CT -B(Config)#vlan 30 DCRS-5650-52CT -B(Config-Vlan30)#switchport interface ethernet 0/0/1-8 Set the port Ethernet0/0/1 access vlan 30 successfully Set the port Ethernet

11、0/0/2 access vlan 30 successfully Set the port Ethernet0/0/3 access vlan 30 successfully Set the port Ethernet0/0/4 access vlan 30 successfully Set the port Ethernet0/0/5 access vlan 30 successfully Set the port Ethernet0/0/6 access vlan 30 successfully Set the port Ethernet0/0/7 access vlan 30 succ

12、essfully Set the port Ethernet0/0/8 access vlan 30 successfully DCRS-5650-52CT -B(Config-Vlan30)#exitDCRS-5650-52CT -B(Config)#vlan 40DCRS-5650-52CT -B(Config-Vlan40)#switchport interface ethernet 0/0/9-16Set the port Ethernet0/0/9 access vlan 40 successfullySet the port Ethernet0/0/10 access vlan 4

13、0 successfullySet the port Ethernet0/0/11 access vlan 40 successfullySet the port Ethernet0/0/12 access vlan 40 successfullySet the port Ethernet0/0/13 access vlan 40 successfullySet the port Ethernet0/0/14 access vlan 40 successfullySet the port Ethernet0/0/15 access vlan 40 successfullySet the por

14、t Ethernet0/0/16 access vlan 40 successfullyDCRS-5650-52CT -B(Config-Vlan40)#exitDCRS-5650-52CT -B(Config)#vlan 101DCRS-5650-52CT -B(Config-Vlan101)#switchport interface ethernet 0/0/24Set the port Ethernet0/0/24 access vlan 101 successfullyDCRS-5650-52CT -B(Config-Vlan101)#exitDCRS-5650-52CT -B(Con

15、fig)#驗(yàn)證配置：DCRS-5650-52CT -B#show vlanVLAN Name Type Media Ports-1 default Static ENET Ethernet0/0/17 Ethernet0/0/18 Ethernet0/0/19 Ethernet0/0/20 Ethernet0/0/21 Ethernet0/0/22 Ethernet0/0/23 Ethernet0/0/25 Ethernet0/0/26 Ethernet0/0/27 Ethernet0/0/2810 VLAN0010 Static ENET Ethernet0/0/1 Ethernet0/0/

16、2 Ethernet0/0/3 Ethernet0/0/4 Ethernet0/0/5 Ethernet0/0/6 Ethernet0/0/7 Ethernet0/0/820 VLAN0020 Static ENET Ethernet0/0/9 Ethernet0/0/10 Ethernet0/0/11 Ethernet0/0/12 Ethernet0/0/13 Ethernet0/0/14 Ethernet0/0/15 Ethernet0/0/16100 VLAN0100 Static ENET Ethernet0/0/24DCRS-5650-52CT -B#其次步：配置交換機(jī)各vlan虛接

17、口的IP地址交換機(jī)A：DCRS-5650-52CT -A(Config)#int vlan 10 DCRS-5650-52CT -A(Config-If-Vlan10)#ip address 192.168.10.1 255.255.255.0DCRS-5650-52CT -A(Config-If-Vlan10)#no shutDCRS-5650-52CT -A(Config-If-Vlan10)#exitDCRS-5650-52CT -A(Config)#int vlan 20DCRS-5650-52CT -A(Config-If-Vlan20)#ip address 192.168.20.

18、1 255.255.255.0DCRS-5650-52CT -A(Config-If-Vlan20)#no shutDCRS-5650-52CT -A(Config-If-Vlan20)#exitDCRS-5650-52CT -A(Config)#int vlan 100DCRS-5650-52CT -A(Config-If-Vlan100)#ip address 192.168.100.1 255.255.255.0DCRS-5650-52CT -A(Config-If-Vlan100)#no shutDCRS-5650-52CT -A(Config-If-Vlan100)#DCRS-565

19、0-52CT -A(Config-If-Vlan100)#exitDCRS-5650-52CT -A(Config)#交換機(jī)B：DCRS-5650-52CT -B(Config)#int vlan 30DCRS-5650-52CT -B(Config-If-Vlan30)#ip address 192.168.30.1 255.255.255.0DCRS-5650-52CT -B(Config-If-Vlan30)#no shutDCRS-5650-52CT -B(Config-If-Vlan30)#exitDCRS-5650-52CT -B(Config)#interface vlan 40

20、DCRS-5650-52CT -B(Config-If-Vlan40)#ip address 192.168.40.1 255.255.255.0DCRS-5650-52CT -B(Config-If-Vlan40)#exitDCRS-5650-52CT -B(Config)#int vlan 101DCRS-5650-52CT -B(Config-If-Vlan101)#ip address 192.168.100.2 255.255.255.0DCRS-5650-52CT -B(Config-If-Vlan101)#exitDCRS-5650-52CT -B(Config)#第三步：配置各

21、PC的IP地址，留意配置網(wǎng)關(guān)設(shè)備IP地址gatewayMaskPC1 192.168.10.101192.168.10.1255.255.255.0 PC2 192.168.20.101 192.168.20.1255.255.255.0 PC3 192.168.30.101192.168.30.1255.255.255.0 PC4 192.168.40.101 192.168.40.1255.255.255.0 第四步：驗(yàn)證PC之間是否連通？ PC端口PC端口結(jié)果緣由PC1A：0/0/1PC2A：0/0/9通PC1A：0/0/1Vlan 100A：0/0/24通PC1A：0/0/1Vlan

22、101B：0/0/24不通PC1A：0/0/1PC3B：0/0/1不通查看路由表，進(jìn)一步分析上一步的現(xiàn)象緣由。交換機(jī)A：DCRS-5650-52CT -A#show ip routeCodes: K - kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2

23、 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate defaultC 127.0.0.0/8 is directly connected, LoopbackC 192.168.10.0/24 is directly connected, Vlan10C 192.168.20.0/24 is directly connected, Vlan20C 192.168.100.0/24 is directly connected, Vlan100交換機(jī)B：DCRS-5650-52

24、CT -B#show ip routeCodes: K - kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter are

25、a * - candidate defaultC 127.0.0.0/8 is directly connected, LoopbackC 192.168.30.0/24 is directly connected, Vlan30C 192.168.40.0/24 is directly connected, Vlan40C 192.168.102.0/24 is directly connected, Vlan101第五步：?jiǎn)?dòng)OSPF協(xié)議，并將對(duì)應(yīng)的直連網(wǎng)段配置到OSPF進(jìn)程中交換機(jī)A：DCRS-5650-52CT -A(config)#router ospfDCRS-5650-52CT

26、-A(config-router)#network 192.168.10.0/24 area 0DCRS-5650-52CT -A(config-router)#network 192.168.20.0/24 area 0DCRS-5650-52CT -A(config-router)#network 192.168.100.0/24 area 0DCRS-5650-52CT -A(config-router)#exit交換機(jī)B：DCRS-5650-52CT -B(config)#router ospfDCRS-5650-52CT -B(config-router)#network 192.1

27、68.30.0/24 area 0DCRS-5650-52CT -B(config-router)#network 192.168.40.0/24 area 0DCRS-5650-52CT -B(config-router)#network 192.168.101.0/24 area 0DCRS-5650-52CT -B(config-router)#exit驗(yàn)證配置：交換機(jī)A：DCRS-5650-52CT -A#show ip routeCodes: K - kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA -

28、OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate defaultC 127.0.0.0/8 is directly connected, LoopbackC 192.168.10.0/24 is directly

29、 connected, Vlan10C 192.168.20.0/24 is directly connected, Vlan20O 192.168.30.0/24 110/20 via 192.168.100.2, Vlan100, 00:00:23O 192.168.40.0/24 110/20 via 192.168.100.2, Vlan100, 00:00:23C 192.168.100.0/24 is directly connected, Vlan100（O代表ospf學(xué)習(xí)到的路由網(wǎng)段）交換機(jī)B：DCRS-5650-52CT -B#show ip routeCodes: K -

30、kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate defaultC 127.0

31、.0.0/8 is directly connected, LoopbackO 192.168.10.0/24 110/20 via 192.168.100.1, Vlan101, 00:00:23O 192.168.20.0/24 110/20 via 192.168.100.1, Vlan101, 00:00:23C 192.168.30.0/24 is directly connected, Vlan30C 192.168.40.0/24 is directly connected, Vlan40C 192.168.100.0/24 is directly connected, Vlan

32、101（O代表ospf學(xué)習(xí)到的路由網(wǎng)段）第六步：驗(yàn)證PC之間是否連通？PC端口PC端口結(jié)果緣由PC1A：0/0/1PC2A：0/0/9通PC1A：0/0/1Vlan 100A：0/0/24通PC1A：0/0/1Vlan 101B：0/0/24通PC1A：0/0/1PC3B：0/0/1通七、 留意事項(xiàng)和排錯(cuò)在配置、使用OSPF協(xié)議時(shí)，可能會(huì)由于物理連接、配置錯(cuò)誤等緣由導(dǎo)致OSPF協(xié)議未能正常運(yùn)行。因此，用戶(hù)應(yīng)留意一下要點(diǎn)：首先應(yīng)當(dāng)保證物理連接的正確無(wú)誤；其次，保證接口和鏈路協(xié)議是UP（使用show interface命令）；然后在各接口上配置不同網(wǎng)段的IP地址；然后，先啟動(dòng)OSPF協(xié)議（使用ro

33、uter ospf命令）再在相應(yīng)接口配置所屬OSPF域；接著，留意OSPF協(xié)議的自身特點(diǎn)OSPF骨干域（0域）必需保證是連續(xù)的，假如不連續(xù)使用虛連接（virtual link）接來(lái)保證，全部非0域只能通過(guò)0域與其他非0域相連，不允許非0域直接相連；邊界三層交換機(jī)是指該三層交換機(jī)的一部分接口屬于0域，而另外一部分接口屬于非0域；對(duì)于廣播網(wǎng)等多路訪(fǎng)問(wèn)網(wǎng)，需要選舉指定三層交換機(jī)DR。八、 配置序列交換機(jī)A：DCRS-5650-52CT -A#show run ! no service password-encryption ! hostname DCRS-5650-52CT -A ! Interfa

34、ce Ethernet0 ! vlan 1 ! vlan 10 ! vlan 20 ! vlan 100 ! Interface Ethernet0/0/1 switchport access vlan 10 ! Interface Ethernet0/0/2 switchport access vlan 10 ! Interface Ethernet0/0/23 ! Interface Ethernet0/0/24 switchport access vlan 100 ! Interface Ethernet0/0/25 ! Interface Ethernet0/0/26 ! Interf

35、ace Ethernet0/0/27 !Interface Ethernet0/0/28!interface Vlan10 ip address 192.168.10.1 255.255.255.0!interface Vlan100 ip address 192.168.100.1 255.255.255.0!interface Vlan20 ip address 192.168.20.1 255.255.255.0!interface sit0!router ospf network 192.168.10.0/24 area 0 network 192.168.20.0/24 area 0

36、 network 192.168.100.0/24 area 0!no login!endDCRS-5650-52CT -A#交換機(jī)B：略九、 共同思考本實(shí)訓(xùn)只體現(xiàn)了area0的配置方法，大家可以參考理論教材和用戶(hù)手冊(cè)嘗試ospf運(yùn)行在多區(qū)域的配置方法十、 課后練習(xí)1. 在交換機(jī)A和交換機(jī)B上分別劃分基于端口的VLAN：交換機(jī)VLAN 端口成員 交換機(jī)A1028209161001交換機(jī)B10284091610012. 交換機(jī)A和B通過(guò)的24口級(jí)聯(lián)。3. 配置交換機(jī)A和B各VLAN虛擬接口的IP地址分別如下表所示：VLAN10_AVLAN20VLAN10_BVLAN40VLAN100_AVLAN

37、10_B10.1.10.110.1.20.110.1.30.110.1.40.110.1.100.110.1.100.24. PC1-PC4的網(wǎng)絡(luò)設(shè)置為：設(shè)備IP地址gatewayMaskPC1 10.1.10.210.1.10.1255.255.255.0 PC2 10.1.20.2 110.1.20.1255.255.255.0 PC3 10.1.30.210.1.30.1255.255.255.0 PC4 10.1.40.2 10.140.1255.255.255.0 5. 使用OSPF協(xié)議要求全部PC之間都可以通信十一、 相關(guān)配置命令詳解配置任務(wù)序列1. 啟動(dòng)OSPF協(xié)議（必需）（1）

38、啟動(dòng)/關(guān)閉OSPF協(xié)議（必需）（2）配置運(yùn)行OSPF三層交換機(jī)的ID號(hào)（可選）（3）配置運(yùn)行OSPF的網(wǎng)絡(luò)范圍（可選）（4）配置接口所屬的域（必需）2. 配置OSPF幫助參數(shù)（可選）（1）配置OSPF發(fā)包機(jī)制參數(shù)1）配置OSPF數(shù)據(jù)包的驗(yàn)證2）配置OSPF接口為只收不發(fā)3）配置接口發(fā)送數(shù)據(jù)包的代價(jià)4）配置OSPF發(fā)包定時(shí)器參數(shù)（廣播接口輪詢(xún)發(fā)送HELLO數(shù)據(jù)包的定時(shí)器、鄰接三層交換機(jī)失效定時(shí)器、接口傳送LSA時(shí)延定時(shí)器、鄰接三層交換機(jī)重傳LSA定時(shí)器）（2）配置OSPF引入路由參數(shù)1）配置引入外部路由的缺省參數(shù)（缺省類(lèi)型、缺省標(biāo)記值、缺省代價(jià)值）2）配置在OSPF中引入其它協(xié)議的路由（3）配置

39、OSPF協(xié)議其它參數(shù)1）配置OSPF路由協(xié)議優(yōu)先級(jí)2）配置OSPF STUB域及缺省路由的代價(jià)3）配置OSPF虛鏈路4）配置接口在選舉指定三層交換機(jī)DR中的優(yōu)先級(jí)3. 關(guān)閉OSPF協(xié)議1. 啟動(dòng)OSPF協(xié)議在DCRS系列三層交換機(jī)上運(yùn)行OSPF路由協(xié)議的基本配置也很簡(jiǎn)潔，通常只需打開(kāi)OSPF開(kāi)關(guān)、配置接口所在OSPF域即可，OSPF協(xié)議的參數(shù)都使用缺省值。如需修改OSPF協(xié)議參數(shù)值，參看2.配置OSPF幫助參數(shù)。命令解釋全局配置模式no router ospf process <id>啟動(dòng)OSPF協(xié)議進(jìn)程，本命令的no操作關(guān)閉OSPF協(xié)議。（必需）OSPF協(xié)議配置模式router-

40、id <router_id>no router-id配置運(yùn)行OSPF 協(xié)議三層交換機(jī)的 ID 號(hào)；本命令的no操作取消三層交換機(jī)的 ID 號(hào)。缺省為選擇某個(gè)接口的IP地址作為三層交換機(jī)ID。（可選）no network <network> <mask> | <network>/<prefix> area <area_id>配置某個(gè)網(wǎng)段屬于某個(gè)區(qū)域，本命令的no操作為取消該配置。（必需）no passive-interface IFNAME | ethernet IFNAME | Vlan <ID>將一個(gè)接口設(shè)置

41、為只收不發(fā)；本命令的no操作取消配置。2. 配置OSPF幫助參數(shù)（1）配置OSPF發(fā)包機(jī)制參數(shù)1）配置OSPF數(shù)據(jù)包的驗(yàn)證2）配置OSPF接口為只收不發(fā)3）配置接口發(fā)送數(shù)據(jù)包的代價(jià)命令解釋接口配置模式ip ospf authentication message-digest | nullno ip ospf authentication配置接口接受OSPF數(shù)據(jù)包所需要的驗(yàn)證方式本命令的no操作恢復(fù)為缺省值。ip ospf authentication-key LINEno ip ospf authentication-key配置接口接受OSPF數(shù)據(jù)包所需要的驗(yàn)證方式的key；本命令的no操作恢

42、復(fù)為缺省值。ip ospf cost <cost >no ip ospf cost指定接口運(yùn)行OSPF協(xié)議所需的代價(jià)；本命令的no操作恢復(fù)代價(jià)的缺省值。4）配置OSPF發(fā)包定時(shí)器參數(shù)（廣播接口輪詢(xún)發(fā)送HELLO數(shù)據(jù)包的定時(shí)器、鄰接三層交換機(jī)失效定時(shí)器、接口傳送LSA時(shí)延定時(shí)器、鄰接三層交換機(jī)重傳LSA定時(shí)器）命令解釋接口配置模式ip ospf hello-interval <time>no ip ospf hello-interval配置接口周期發(fā)送HELLO數(shù)據(jù)包的時(shí)間間隔；本命令的no操作恢復(fù)為缺省值。ip ospf dead-interval <time >no ip ospf dead-interval配置認(rèn)定相鄰三層交換機(jī)失效的時(shí)間間隔；本命令的no操作恢復(fù)為缺省值。ip ospf transit-delay <time>no ip ospf transit-delay設(shè)置在接口上傳送鏈路狀態(tài)廣播的時(shí)延值；本命令的no操作恢復(fù)為缺省值。ip ospf retransmit <time>no ip ospf retransmit配置接口與鄰接三層交換機(jī)之間傳送鏈路狀態(tài)通告時(shí)的重傳間隔；本命令的no操作恢復(fù)為缺省值。（2）配置OSPF引入路由參數(shù)配置在OSPF中引入其它協(xié)議的路由命令解釋OSPF協(xié)議配