核心交换机1配置OSPF
[HX_SW1]ospf
[HX_SW1-ospf-1]are
[HX_SW1-ospf-1]area 0
[HX_SW1-ospf-1-area-0.0.0.0]network 192.168.200.0 0.0.0.255
[HX_SW1-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255
[HX_SW1-ospf-1-area-0.0.0.0]network 192.168.3.0 0.0.0.255
[HX_SW1-ospf-1-area-0.0.0.0]network 192.168.4.0 0.0.0.255
[HX_SW1-ospf-1-area-0.0.0.0]network 192.168.5.0 0.0.0.255
[HX_SW1-ospf-1-area-0.0.0.0]network 192.168.6.0 0.0.0.255
[HX_SW1-ospf-1-area-0.0.0.0]network 192.168.8.0 0.0.0.255
[HX_SW1-ospf-1-area-0.0.0.0]dis this
#
area 0.0.0.0
network 192.168.200.0 0.0.0.255
network 192.168.2.0 0.0.0.255
network 192.168.3.0 0.0.0.255
network 192.168.4.0 0.0.0.255
network 192.168.5.0 0.0.0.255
network 192.168.6.0 0.0.0.255
network 192.168.8.0 0.0.0.255
#
return
[HX_SW1-ospf-1-area-0.0.0.0]quit
[HX_SW1-ospf-1]quit
核心交换机2配置OSPF
[HX_SW2]ospf
[HX_SW2-ospf-1]area 0
[HX_SW2-ospf-1-area-0.0.0.0]network 192.168.200.0 0.0.0.255
[HX_SW2-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255
[HX_SW2-ospf-1-area-0.0.0.0]network 192.168.3.0 0.0.0.255
[HX_SW2-ospf-1-area-0.0.0.0]network 192.168.4.0 0.0.0.255
[HX_SW2-ospf-1-area-0.0.0.0]network 192.168.5.0 0.0.0.255
[HX_SW2-ospf-1-area-0.0.0.0]network 192.168.6.0 0.0.0.255
[HX_SW2-ospf-1-area-0.0.0.0]network 192.168.23.0 0.0.0.255
[HX_SW2-ospf-1-area-0.0.0.0]dis this
#
area 0.0.0.0
network 192.168.200.0 0.0.0.255
network 192.168.2.0 0.0.0.255
network 192.168.3.0 0.0.0.255
network 192.168.4.0 0.0.0.255
network 192.168.5.0 0.0.0.255
network 192.168.6.0 0.0.0.255
network 192.168.23.0 0.0.0.255
#
return
[HX_SW2-ospf-1-area-0.0.0.0]
出口路由OSPF配置
[R1]ospf
[R1-ospf-1]are 0
[R1-ospf-1-area-0.0.0.0]network 192.168.8.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 192.168.23.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 14.1.1.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 1.1.1.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]dis this
[V200R003C00]
#
area 0.0.0.0
network 1.1.1.0 0.0.0.255
network 14.1.1.0 0.0.0.255
network 192.168.8.0 0.0.0.255
network 192.168.23.0 0.0.0.255
#
return
[R1-ospf-1-area-0.0.0.0]quit
[R1-ospf-1]int gi2/0/0
分支公司路由OSPF配置
[R4]osp
[R4]ospf
[R4-ospf-1]are 0
[R4-ospf-1-area-0.0.0.0]netw
[R4-ospf-1-area-0.0.0.0]network 14.1.1.0 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 14.1.1.0 0.0.0.255
[R4-ospf-1-area-0.0.0.0]netwo
[R4-ospf-1-area-0.0.0.0]network 4.4.4.0 0.0.0.255
[R4-ospf-1-area-0.0.0.0]netwo
[R4-ospf-1-area-0.0.0.0]network 192.168.100.0 0.0.0.255
[R4-ospf-1-area-0.0.0.0]dis this
[V200R003C00]
#
area 0.0.0.0
network 4.4.4.0 0.0.0.255
network 14.1.1.0 0.0.0.0
network 14.1.1.0 0.0.0.255
network 192.168.100.0 0.0.0.255
#
return
[R4-ospf-1-area-0.0.0.0]
核心交换机最终路由表
[HX_SW1]display ip routing-table
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 27 Routes : 48
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.1.1.1/32 OSPF 10 1 D 192.168.8.1 Vlanif800
4.4.4.4/32 OSPF 10 2 D 192.168.8.1 Vlanif800
14.1.1.0/24 OSPF 10 2 D 192.168.8.1 Vlanif800
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
192.168.2.0/24 Direct 0 0 D 192.168.2.253 Vlanif2
192.168.2.1/32 Direct 0 0 D 127.0.0.1 Vlanif2
192.168.2.253/32 Direct 0 0 D 127.0.0.1 Vlanif2
192.168.3.0/24 Direct 0 0 D 192.168.3.253 Vlanif3
192.168.3.1/32 Direct 0 0 D 127.0.0.1 Vlanif3
192.168.3.253/32 Direct 0 0 D 127.0.0.1 Vlanif3
192.168.4.0/24 Direct 0 0 D 192.168.4.253 Vlanif4
192.168.4.1/32 OSPF 10 2 D 192.168.2.254 Vlanif2
OSPF 10 2 D 192.168.200.254 Vlanif200
OSPF 10 2 D 192.168.3.254 Vlanif3
OSPF 10 2 D 192.168.4.254 Vlanif4
OSPF 10 2 D 192.168.6.254 Vlanif6
OSPF 10 2 D 192.168.5.254 Vlanif5
192.168.4.253/32 Direct 0 0 D 127.0.0.1 Vlanif4
192.168.5.0/24 Direct 0 0 D 192.168.5.253 Vlanif5
192.168.5.1/32 OSPF 10 2 D 192.168.2.254 Vlanif2
OSPF 10 2 D 192.168.200.254 Vlanif200
OSPF 10 2 D 192.168.3.254 Vlanif3
OSPF 10 2 D 192.168.4.254 Vlanif4
OSPF 10 2 D 192.168.6.254 Vlanif6
OSPF 10 2 D 192.168.5.254 Vlanif5
192.168.5.253/32 Direct 0 0 D 127.0.0.1 Vlanif5
192.168.6.0/24 Direct 0 0 D 192.168.6.253 Vlanif6
192.168.6.1/32 OSPF 10 2 D 192.168.2.254 Vlanif2
OSPF 10 2 D 192.168.200.254 Vlanif200
OSPF 10 2 D 192.168.3.254 Vlanif3
OSPF 10 2 D 192.168.4.254 Vlanif4
OSPF 10 2 D 192.168.6.254 Vlanif6
OSPF 10 2 D 192.168.5.254 Vlanif5
192.168.6.253/32 Direct 0 0 D 127.0.0.1 Vlanif6
192.168.8.0/24 Direct 0 0 D 192.168.8.2 Vlanif800
192.168.8.2/32 Direct 0 0 D 127.0.0.1 Vlanif800
192.168.23.0/24 OSPF 10 2 D 192.168.2.254 Vlanif2
OSPF 10 2 D 192.168.200.254 Vlanif200
OSPF 10 2 D 192.168.3.254 Vlanif3
OSPF 10 2 D 192.168.4.254 Vlanif4
OSPF 10 2 D 192.168.6.254 Vlanif6
OSPF 10 2 D 192.168.5.254 Vlanif5
OSPF 10 2 D 192.168.8.1 Vlanif800
192.168.100.0/24 OSPF 10 3 D 192.168.8.1 Vlanif800
192.168.200.0/24 Direct 0 0 D 192.168.200.253 Vlanif200
192.168.200.1/32 Direct 0 0 D 127.0.0.1 Vlanif200
192.168.200.253/32 Direct 0 0 D 127.0.0.1 Vlanif200
核心交换机配置缺省路由
[HX_SW1]ip route-static 0.0.0.0 0 192.168.8.1
[HX_SW1]ip route-static 0.0.0.0 0 192.168.23.1 preference 65
[HX_SW2]ip route-static 0.0.0.0 0 192.168.23.1
[HX_SW2]ip route-static 0.0.0.0 0 192.168.8.1 preference 65
出口路由配置出访缺省路由
[R1]ip route-static 0.0.0.0 0 13.1.1.2
配置ACL，实现回包路由
[R1]acl 2001
[R1-acl-basic-2001]rule 5 deny source 192.168.200.0 0.0.0.255
[R1-acl-basic-2001]rule permit source any
[R1-acl-basic-2001]dis this
[V200R003C00]
#
acl number 2001
rule 5 deny source 192.168.200.0 0.0.0.255
rule 10 permit
#
return
出接口引用ACL
[R1]int gi1/0/0
[R1-GigabitEthernet1/0/0]dis this
[V200R003C00]
#
interface GigabitEthernet1/0/0
ip address 13.1.1.1 255.255.255.0
#
return
[R1-GigabitEthernet1/0/0]nat outbound 2001
[R1-GigabitEthernet1/0/0]dis this
[V200R003C00]
#
interface GigabitEthernet1/0/0
ip address 13.1.1.1 255.255.255.0
nat outbound 2001
#
return
[R1-GigabitEthernet1/0/0]
核对ACL配置结果
