![[ 永遠的UNIX::UNIX技術資料的寶庫 ]](/images/title.gif) GB | BIG5
|
| 首頁 > 網絡管理 > 網絡設備 > 正文 |
 |
| CISCO 2500、1600系列路由器使用手冊--OSPF設置 |
| 不詳 (2001-05-02 01:25:35) |
5.5. OSPF設置
啟用OSPF動態路由協議
router ospf 進程號
進程號可以隨意設置，只標識ospf為本路由器內的一個進程
定義參與ospf的子網.該子網屬哪一個OSPF路由信息交換區域。
network ip 子網號 通配符 area 區域號
路由器將限制只能在相同區域內交換子網信息，不同區域間不交換路由信息。另外，區域0為主幹OSPF區域。不同區域交換路由信息必須經過區域0。一般地，某一區域要接入OSPF0路由區域，該區域必須至少有一台路由器為區域邊緣路由器，即它既參與本區域路由又參與區域0路由。
OSPF區域間的路由信息總結
如果區域中的子網是連續的，則區域邊緣路由器向外傳播給路由信息時，採用路由總結功能，路由器就會將所有這些連續的子網總結為一條路由傳播給其它區域，則在其它區域內的路由器看到這個區域的路由就只有一條。這樣可以節省路由時所需網絡帶寬。
設置對某一特定范圍的子網進行總結：area 區域號 range 子網范圍掩碼
指明網絡類型 在需要進行OSPF路由信息的端口中，設置：
ip ospf network broadcast或non-broadcast或point-to -mutlipoint
一般地，對 DDN，幀中繼和X.25屬非廣播型的網絡，即non-broadcast
對非廣播型的網絡連接，需指明路由器的相鄰路由器
neighbor 相鄰路由器的相鄰端口的IP地址
通過以上配置，路由器之間就可以完成交換路由信息了，其它設置，為了防止路由信息被竊取，可以對OSPF進行安全設置，只有合法的同一區域的路由器之間才能交換路由信息。
設置步驟
設置某區域使用安全設置MD5方式
area 區域標號 autherfication message-digest
可以採用明文方式 ，但建議採用MD5方式，較安全。
設置某端口驗証其相鄰路由器相鄰端口時的MD5口令，在端口設置模式下
ip ospf message-digest-key 口令標號 MD5 口令字符串
其中，在同一區域的相鄰路由器的相鄰端口的口令標號及口令字符串必須相同，同一路由器的不同端口的MD5口令可以不同，也可以某些端口使用安全設置，某些端口不使用安全設置。
實例1 無安全，無路由總結的OSPF設置
2511－1的設置
Current configuration：
！
version 11.3
no service password-encryption
!
hostname 2511-1
!
enable password cisco
!
interface Ethernet0
ip address 192.4.1.1 255.255.255.0
!
interface Serial0
ip address 192.3.1.1 255.255.255.0
encapsulation frame-relay IETF
no ip mroute-cache
bandwidth 2000
frame-relay map ip 192.3.1.2 100 broadcast
frame-relay lmi-type cisco
!
interface Serial1
ip address 192.1.1.1 255.255.255.0
encapsulation ppp
bandwidth 64
!
router ospf 1
passive-interface Ethernet0
network 192.1.1.0 0.0.0.255 area 0
network 192.3.1.0 0.0.0.255 area 0
network 192.4.1.0 0.0.0.255 area 0
neighbor 192.1.1.2 priority 1
neighbor 192.3.1.2 priority 1
!
ip classless
!
line con 0
line 1 8
line aux 0
line vty 0 4
!
end
2505的設置
Current configuration:
!
version 11.2
no service udp-small-servers
no service tcp-small-servers
!
hostname 2505
!
enable secret 5 $1$GbYT$OR05giiLZxI4hEAO0F8kV1
!
hub ether 0 1
link-test
auto-polarity
!
hub ether 0 2
link-test
auto-polarity
!
hub ether 0 3
link-test
auto-polarity
!
hub ether 0 4
link-test
auto-polarity
!
hub ether 0 5
link-test
auto-polarity
!
hub ether 0 6
link-test
auto-polarity
!
hub ether 0 7
link-test
auto-polarity
!
hub ether 0 8
link-test
auto-polarity
!
interface Ethernet0
ip address 192.1.4.1 255.255.255.0
!
interface Serial0
ip address 192.1.2.1 255.255.255.0
ip ospf network non-broadcast
bandwidth 2000
clockrate 2000000
!
interface Serial1
ip address 192.1.1.2 255.255.255.0
enpsuration ppp
ip ospf network non-broadcast
bandwidth 64
clockrate 64000
!
router ospf 1
passive-interface Ethernet0
network 192.1.1.0 0.0.0.255 area 0
network 192.1.2.0 0.0.0.255 area 2
network 192.1.4.0 0.0.0.255 area 2
neighbor 192.1.1.1 priority 1
neighbor 192.1.2.2 priority 1
!
no ip classless
ip ospf name-lookup
!
line con 0
line aux 0
line vty 0 4
login
!
end
internal -2的設置
Current configuration :
!
version 11.2
no service udp-small-servers
no service tcp-small-servers
!
hostname internal-2
!
enable secret 5 $1$KX00$rTI/2TvDokWxT4xC6wvmi/
!
interface Ethernet0
no ip address
shutdown
!
interface Serial0
ip address 192.1.2.2 255.255.255.0
ip ospf network non-broadcast
!
interface Serial1
no ip address
shutdown
!
router ospf 1
network 192.1.2.0 0.0.0.255 area 2
neighbor 192.1.2.1 priority 1
!
no ip classless
!
line con 0
line 1 16
line aux 0
line vty 0 4
!
end
2514的設置
Current configuration :
!
version 11.2
no service udp-small-servers
no service tcp-small-servers
!
hostname 2514
!
enable secret 5 $1$uoHU$Vks/lY CRi33z4TXs4qekI0
!
frame-relay switching
!
interface Ethernet0
ip address 192.5.1.1 255.255.255.0
!
interface Ethernet1
no ip address
shutdown
!
interface Serial0
ip address 192.3.1.2 255.255.255.0
encapsulation frame-relay IETF
bandwidth 2000
clockrate 2000000
frame-relay map ip 192.3.1.1 100 broadcast
frame-relay intf-type dce
!
interface Serial1
ip address 192.2.1.1 255.255.255.0
no ip mroute-cache
encapsulation X25 dce
bandwidth 64
x25 address 1234
x25 htc 16
x25 nvc 4
x25 map ip 192.2.1.2 5678 broadcast
clockrate 64000
!
router ospf 1
passive-interface Ethernet0
network 192.3.1.0 0.0.0.255 area 0
network 192.2.1.0 0.0.0.255 area 0
network 192.5.1.0 0.0.0.255 area 0
neighbor 192.2.1.2 priority 1
neighbor 192.3.1.1 priority 1
!
no ip classless
!
line con 0
line aux 0
line vty 0 4
login
!
end
2511-2的設置
Building configuration ...
Current configuration:
!
version 11.3
no service password-encryption
!
hostname 2511-2
!
enable secret 5 $1$7o5F$MSyFWzVf6JBgnjLJghHSB.
!
interface Ethernet0
ip address 192.2.4.1 255.255.255.0
!
interface Serial0
ip address 192.2.1.2 255.255.255.0
encapsulation x25
no ip mroute-cache
x25 address 5678
x25 htc 16
x25 nvc 4
x25 map ip 192.2.1.1 1234 broadcast
!
interface Serial1
ip address 192.2.2.1 255.255.255.0
ip ospf network non-broadcast
no ip mroute-cache
bandwidth 2000
clockrate 2000000
!
router ospf 1
passive-interface Ethernet0
network 192.2.2.0 0.0.0.255 area 1
network 192.2.4.0 0.0.0.255 area 1
network 192.2.1.0 0.0.0.255 area 0
neighbor 192.2.1.1 piority 1
neighbor 192.2.2.2 piority 1
!
ip classless
!
line con 0
line 1 8
line aux 0
line vty 0 4
!
end
internal -1的設置
Building configuration...
Current configuration:
!
version 11.2
no service udp-small-servers
no service tcp-small-servers
!
hostname internal-1
!
enable secret 5 $1$cF2M$z2T8Ohij5q/yn2RsiVaGE/
!
interface Ethernet0
no ip address
shutdown
!
interface Serial0
ip address 192.2.2.2 255.255.255.0
ip ospf network non-broadcast
!
interface Serial1
no ip address
shutdown
!
router ospf 10
network 192.2.2.0 0.0.0.255 area 1
neighbor 192.2.2.1 priority 1
!
no ip classless
!
line con 0
line 1 16
line aux 0
line vty 0 4
login
!
end
實例2 有安全，路由總結的OSPF設置
internal-2的設置
Current configuration :
!
version 11.2
no service udp-small-servers
no service tcp-small-servers
!
hostname internal-2
!
enable secret 5 $1$KX00$rTI/2TvDokWxT4xC6wvmi/
!
interface Ethernet0
no ip address
shutdown
!
interface Serial0
ip address 192.1.2.2 255.255.255.0
ip ospf message-digest-key 1 md5 cisco
ip ospf network non-broadcast
!
interface Serial1
no ip address
shutdown
!
router ospf 1
network 192.1.2.0 0.0.0.255 area 2
neighbor 192.1.2.1 priority 1
area 2 authentication message-digest
!
no ip classless
!
line con 0
line 1 16
line aux 0
line vty 0 4
login
!
end
2505的設置
Current configuration:
!
version 11.2
no service udp-small-servers
no service tcp-small-servers
!
hostname 2505
!
enable secret 5 $1$b43o$CpEYSTC2EPwnR1QGvIm//
!
username 2511-1 password 7 104D000A0618
!
hub ether 0 1
link-test
auto-polarity
!
hub ether 0 2
link-test
auto-polarity
!
hub ether 0 3
link-test
auto-polarity
!
hub ether 0 4
link-test
auto-polarity
!
hub ether 0 5
link-test
auto-polarity
!
hub ether 0 6
link-test
auto-polarity
!
hub ether 0 7
link-test
auto-polarity
!
hub ether 0 8
link-test
auto-polarity
!
interface Ethernet0
ip address 192.1.4.1 255.255.255.0
!
interface Serial0
ip address 192.1.2.1 255.255.255.0
ip ospf message-digest key 1 md5 cisco
ip ospf network non-broadcast
bandwidth 2000
clockrate 2000000
!
interface Serial1
ip address 192.7.1.2 255.255.255.0
enpsulation ppp
ip ospf message-digest -key 1 md5 kim
ip ospf network non-broadcast
bandwidth 64
clockrate 64000
ppp authentication chap
!
router ospf 1
passive-interface Ethernet0
network 192.1.2.0 0.0.0.255 area 2
network 192.1.4.0 0.0.0.255 area 2
network 192.7.1.0 0.0.0.255 area 0
neighbor 192.7.1.1 priority 1
neighbor 192.1.2.2 priority 1
area 0 authentication message-digest
area 2 authentication message-digest
area 2 range 192.1.0.0 255.255.0.0
!
no ip classless
ip ospf name-lookup
!
line con 0
line aux 0
line vty 0 4
login
!
end
2511－1的設置
Current configuration：
！
version 11.3
no service password-encryption
!
hostname 2511-1
!
enable password cisco
!
username 2505 passweord 0 cisco
no ip domain-lookup
!
interface Ethernet0
ip address 192.4.1.1 255.255.255.0
!
interface Serial0
ip address 192.3.1.1 255.255.255.0
encapsulation frame-relay IETF
ip ospf message-digest-key 1 md5 kim
no ip mroute-cache
bandwidth 2000
frame-relay map ip 192.3.1.2 100 broadcast
frame-relay lmi-type cisco
!
interface Serial1
ip address 192.7.1.1 255.255.255.0
encapsulation ppp
ip ospf message-digest-key 1 md5 kim
ip ospf network non-broadcast
bandwidth 64
ppp authentication chap
!
router ospf 1
passive-interface Ethernet0
network 192.3.1.0 0.0.0.255 area 0
network 192.4.1.0 0.0.0.255 area 0
network 192.7.1.0 0.0.0.255 area 0
neighbor 192.7.1.2 priority 1
neighbor 192.3.1.2 priority 1
area 0 authentication message-digest
!
no ip classless
!
line con 0
line 1 8
line aux 0
line vty 0 4
login
!
end
2514的設置
Current configuration :
!
version 11.2
no service udp-small-servers
no service tcp-small-servers
!
hostname 2514
!
enable secret 5 $1$uoHU$Vks/lY CRi33z4TXs4qekI0
!
frame-relay switching
!
interface Ethernet0
ip address 192.5.1.1 255.255.255.0
!
interface Ethernet1
no ip address
shutdown
!
interface Serial0
ip address 192.3.1.2 255.255.255.0
encapsulation frame-relay IETF
ip ospf message-digest-key 1 md5 kim
bandwidth 2000
clockrate 2000000
frame-relay map ip 192.3.1.1 100 broadcast
frame-relay intf-type dce
!
interface Serial1
ip address 192.8.1.1 255.255.255.0
no ip mroute-cache
encapsulation X25 dce
ip ospf message-digest-key 2 md5 cisco
bandwidth 64
x25 address 1234
x25 htc 16
x25 nvc 4
x25 map ip 192.8.1.2 5678 broadcast
clockrate 64000
!
router ospf 1
network 192.3.1.0 0.0.0.255 area 0
network 192.5.1.0 0.0.0.255 area 0
network 192.8.1.0 0.0.0.255 area 0
neighbor 192.8.1.2 priority 1
neighbor 192.3.1.1 priority 1
area 0 authentication message-digest
!
no ip classless
!
line con 0
line aux 0
line vty 0 4
login
!
end
2511-2的設置
Current configuration :
version 11.3
no service password-encryption
!
hostname 2511-2
!
enable secret 5 $1$7o5F$MSyFWzVf6JBgnjLJghHSB.
!
!
interface Ethernet0
ip address 192.2.4.1 255.255.255.0
!
interface Serial0
ip address 192.8.1.2 255.255.255.0
encapsulation x25
ip ospf message-digest-key 2 md5 cisco
no ip mroute-cache
x25 address 5678
x25 htc 16
x25 nvc 4
x25 map ip 192.8.1.1 1234 broadcast
!
interface Serial1
ip address 192.2.2.1 255.255.255.0
ip ospf authentication-key kim
ip ospf network non-broadcast
no ip mroute-cache
bandwidth 2000
clockrate 2000000
!
router ospf 1
passive-interface Ethernet0
network 192.2.2.0 0.0.0.255 area 1
network 192.2.4.0 0.0.0.255 area 1
network 192.8.1.0 0.0.0.255 area 0
neighbor 192.8.1.1 priority 1
neighbor 192.2.2.2 priority 1
area 0 authentication message-digest
area 1 authentication (疑應加上message-digest，但原文如此)
area 1 range 192.2.0.0 255.255.0.0
!
ip classless
!
line con 0
line 1 8
line aux 0
line vty 0 4
login
!
end
internal -1的設置
Building configuration...
Current configuration:
!
version 11.2
no service udp-small-servers
no service tcp-small-servers
!
hostname internal-1
!
enable secret 5 $1$cF2M$z2T8Ohij5q/yn2RsiVaGE/
!
interface Ethernet0
no ip address
shutdown
!
interface Serial0
ip address 192.2.2.2 255.255.255.0
ip ospf authentication-key kim
ip ospf network non-broadcast
!
interface Serial1
no ip address
shutdown
!
router ospf 1
network 92.2.2.0 0.0.0.255 area 1
neighbor 192.2.2.1 priority 1
area 1authentication
!
no ip classless
!
line con 0
line 1 16
line aux 0
line vty 0 4
login
!
end
(http://www.fanqiang.com)
進入【UNIX論壇】
|
|
| 相關文章 |
cisco的異步回撥命令集 (2001-10-18 08:00:00)
Cisco PIX防火牆的安裝流程 (2001-10-18 07:00:00)
Cisco IOS 基本命令集 (2001-10-17 15:00:02)
Cisco HSRP的配置 (2001-10-17 12:00:01)
備份Cisco路由器用戶配置 (2001-08-17 15:00:01)
Cisco路由器密碼忘了該怎辦？ (2001-07-22 16:12:35)
Linux 網管 123 --- 第8章. 備份及回存程序 -3.Cisco 路由器組態備份 (2001-07-02 20:10:00)
CISCO2501，2522的詳細配置與調試 (2001-06-28 10:08:00)
Cisco路由器上如何防止DDoS (2001-06-25 07:00:00)
Cisco路由器配置實例 --反轉多路復用的妙用 (2001-06-08 17:04:00)
|
===更多相關=== |
|
|
|
★ 樊強制作 歡迎分享 ★ |