OSPF加密和 OSPF 完全的存根区域及NAT Route-MAP实验

来源:互联网 发布:笔记本电脑 知乎 2017 编辑:程序博客网 时间:2024/05/04 05:12

 1,网络top图

2,各路由器配置:

 

A#sho run
Building configuration...

Current configuration : 1127 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname A
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
multilink bundle-name authenticated
!
interface Loopback0
 ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial1/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/1
 ip address 192.168.1.1 255.255.255.0
 serial restart-delay 0
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
router ospf 100
 log-adjacency-changes
 area 1 stub
 network 192.168.1.0 0.0.0.255 area 1
!
no ip http server
no ip http secure-server
!
!
logging alarm informational
!
!
control-plane
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 logging synchronous
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end

 

 

B#sho run
Building configuration...

Current configuration : 1231 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname B
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
!
multilink bundle-name authenticated
!
!
!
!
interface Loopback0
 ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial1/0
 ip address 192.168.25.2 255.255.255.0
 serial restart-delay 0
!
interface Serial1/1
 ip address 192.168.1.2 255.255.255.0
 serial restart-delay 0
!
interface Serial1/2
 ip address 192.168.2.2 255.255.255.0
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
router ospf 200
 log-adjacency-changes
 area 1 stub
 network 192.168.1.0 0.0.0.255 area 1
 network 192.168.2.0 0.0.0.255 area 0
 network 192.168.25.0 0.0.0.255 area 0
!
no ip http server
no ip http secure-server
!
!
!
logging alarm informational
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 logging synchronous
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end

C#sho run
Building configuration...

Current configuration : 1286 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname C
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
interface Loopback0
 ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial1/0
 no ip address
 serial restart-delay 0
!
interface Serial1/1
 ip address 192.168.35.3 255.255.255.0
 serial restart-delay 0
!
interface Serial1/2
 ip address 192.168.2.3 255.255.255.0
 serial restart-delay 0
!
interface Serial1/3
 ip address 192.168.3.3 255.255.255.0
 ip ospf message-digest-key 2 md5 cisco
 serial restart-delay 0
!
router ospf 300
 log-adjacency-changes
 area 2 authentication message-digest
 network 192.168.2.0 0.0.0.255 area 0
 network 192.168.3.0 0.0.0.255 area 2
 network 192.168.35.0 0.0.0.255 area 0
!
no ip http server
no ip http secure-server
!
!
!
logging alarm informational
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 logging synchronous
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end

 

 

D路由器配置仅仅配置ospf区域2,其他没有变化。

 

 

E#sho run
Building configuration...

Current configuration : 1731 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname E
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
interface Loopback0
 ip address 5.5.5.5 255.255.255.255
!
interface FastEthernet0/0
 ip address 192.168.55.5 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial1/0
 ip address 192.168.25.5 255.255.255.0
 ip nat outside
 ip virtual-reassembly
 serial restart-delay 0
!
interface Serial1/1
 ip address 192.168.35.5 255.255.255.0
 ip nat outside
 ip virtual-reassembly
 serial restart-delay 0
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
ip route 0.0.0.0 0.0.0.0 192.168.25.2
ip route 0.0.0.0 0.0.0.0 192.168.35.3
no ip http server
no ip http secure-server
!
!
ip nat pool pool25 192.168.25.100 192.168.25.200 netmask 255.255.255.0
ip nat pool pool35 192.168.35.100 192.168.35.200 netmask 255.255.255.0
ip nat inside source route-map inip pool pool25
ip nat inside source route-map inip1 pool pool35
!
ip access-list extended internet
 permit ip 192.168.55.0 0.0.0.255 any
!
logging alarm informational
!
!
!
route-map inip permit 10
 match ip address internet
 match interface Serial1/0
!
route-map inip1 permit 10
 match ip address internet
 match interface Serial1/1
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 logging synchronous
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end