tcp/ip_ospf案例研究6虚链路/认证/ABR filtering
1.area 1 virtual-link 33.1.1.1 (rid)
2.gre tunnel(ip封装ip的技术)
int tunnel0
ip add 113.1.1.1 255.255.255.0
ip ospf 110 area 0
tunnel source lo0
tunnel destination 33.1.1.1
3.认证有很多种组合,值需要记住本资粮链路认证
show ip ospf
show ip ospf int s0/1
4.区域间3类lsa过滤(in/out)
r1:area 0 filter-list prefix area 1 in
ip prefix-list areal permit
13.1.1.0/24(仅允许13.1.1.0进入)
5.ip ospf data filter all out过滤掉所有的出去的lsa接口
r1:
int f0/3
ip add 13.1.1.1 255.255.255.0
ip ospf 110 area 1
int lo0
ip add 11.1.1.1 255.255.255.0
ip ospf 110 area 1
r3:
int s0/3
ip add 13.1.1.3 255.255.255.0
ip ospf 110 area 1
int f1/0
ip ospf 110 area 2
ip ospf network point-to-point
r5:
int lo0
ip ospf 110 area 2
int f1/0
ip ospf 110 area 2
ip ospf network point-to-point
r1:
int f1/0
ip ospf 110 area 0
r2:
int f1/0
ip ospf 110 area 0
int lo0
ip ospf 110 area 0
虚链路解决原理区域和分割area 0的问题
在区域abr上做虚链路
step1
r2(config-router)#area 1 virtual-link 3.3.3.3(对方的router-id)
step2
r3(config-router)#area 1 virtual-link 2.2.2.2
另外一个解决方法tunnel
还有双进程重分布
r3:
int tunnel 0
tunnel source lo0
tunnel destination 11.1.1.1
ip add 113.1.1.3 255.255.255.0
r1:
int tunnel 0
tunnel source lo0
tunnel destination 33.1.1.1
ip add 113.1.1.1 255.255.255.0
int tunnel 0
ip ospf 110 area 0
r3:
int tunnel 0
ip ospf 110 area 0
show ip ospf int bri(tunnel的cost值比较大11111)
router ospf 110
area 1 virtual-link 11.1.1.1
r1:
router ospf 110
area 1 virtual-link 33.1.1.1
