一、实验拓扑二、实验需求1、R1-R3为区域0R3-R4为区域1其中R3在环回地址在区域02、R1、R2各有一个环回口3、R1-R3中R3为DR设备没有BDR4、R4环回地址固定4.4.4.4/24 ,其他网段使用192.168.1.0/24进行合理分配5、R4环回不宣告保证全网可达保证更新安全避免环路减少路由条目三、实验步骤1、划分IP地址192.168.1.0/24由上拓扑图和实验需求可得每个路由需要三个环回接口R1R2R3两个主干链路所以我们一共需要五个网段可以做以下划分1、因为区域0当中的骨干链路的接口有三个需要三个IP地址考虑到节省IP地址所以选择掩码为29。192.168.1.0/24可以划分为192.168.1.00000 000/29 //此网段为骨干链路192.168.1.00001 000/29 //此网段作为R1的环回192.168.1.00010 000/29 //此网段作为R2的环回192.168.1.00011 000/29 //此网段作为R3的环回192.168.1.00100 000/29 //此网段作为R3--R4之间的网段R3-R4之间这个为了节省IP地址还可以进行划分192.168.1.00100 000/29划分为192.168.1.001000 01/30--------192.168.1.33/30192.168.1.001000 10/30--------192.168.1.34/302、配置IP地址1、R1Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R1 [R1]inte [R1]interface lo0 [R1-LoopBack0]ip add [R1-LoopBack0]ip address 192.168.1.9 29 [R1-LoopBack0]q [R1]inte [R1]interface g0/0/0 [R1-GigabitEthernet0/0/0]ip add [R1-GigabitEthernet0/0/0]ip address 192.168.1.1 29 [R1-GigabitEthernet0/0/0]2、R2Huaweisy Enter system view, return user view with CtrlZ. [Huawei]sy R2 [R2]inte [R2]interface lo0 [R2-LoopBack0]ip ad [R2-LoopBack0]ip address 192.168.1.17 29 [R2-LoopBack0]q [R2]inte [R2]interface g0/0/0 [R2-GigabitEthernet0/0/0]ip ad [R2-GigabitEthernet0/0/0]ip address 192.168.1.2 293、R3The device is running! Huaweisy Enter system view, return user view with CtrlZ. [Huawei]sy R3 [R3]inter [R3]interface lo0 [R3-LoopBack0]ip ad [R3-LoopBack0]ip address 192.168.1.25 29 [R3-LoopBack0]q [R3]inte [R3]interface g0/0/0 [R3-GigabitEthernet0/0/0]ip ad [R3-GigabitEthernet0/0/0]ip address 192.168.1.3 29 May 8 2026 10:35:16-08:00 R3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R3-GigabitEthernet0/0/0]q [R3]inte [R3]interface g0/0/1 [R3-GigabitEthernet0/0/1]ip addr [R3-GigabitEthernet0/0/1]ip address 192.168.1.33 30 May 8 2026 10:47:07-08:00 R3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R3-GigabitEthernet0/0/1]4、R4The device is running! Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R4 [R4]inte [R4]interface g0/0/0 [R4-GigabitEthernet0/0/0]ip ad [R4-GigabitEthernet0/0/0]ip address 192.168.1.34 30 May 8 2026 10:47:35-08:00 R4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R4-GigabitEthernet0/0/0]q [R4]inter [R4]interface lo0 [R4-LoopBack0]ip ad [R4-LoopBack0]ip address 4.4.4.4 24 [R4-LoopBack0]q [R4]3、配置OSPF协议1.启动OSPF进程[R1]ospf 1 router-id 1.1.1.1手工配置RID需要再启动进程时配置一般建议手工配[R1-ospf-1]2.创建区域[R1-ospf-1]area 0[R1-ospf-1-area-0.0.0.0]3.宣告宣告的意义1.激活接口---只有激活的接口才可以去收到OSPF的数据包2.发布路由---只有激活的接口的对应的直连网段的路由信息才能发布出去1、R1[R1]ospf ro [R1]ospf router-id 1.1.1.1 [R1-ospf-1]ar [R1-ospf-1]area 0 [R1-ospf-1-area-0.0.0.0]net [R1-ospf-1-area-0.0.0.0]network 192.168.1.9 0.0.0.0 [R1-ospf-1-area-0.0.0.0]network 192.168.1.1 0.0.0.0 [R1-ospf-1-area-0.0.0.0]2、R2[R2]ospf ro [R2]ospf router-id 2.2.2.2 [R2-ospf-1]area 0 [R2-ospf-1-area-0.0.0.0]net [R2-ospf-1-area-0.0.0.0]network 192.168.1.17 0.0.0.0 [R2-ospf-1-area-0.0.0.0]network 192.168.1.2 0.0.0.0 [R2-ospf-1-area-0.0.0.0]3、R3[R3]ospf ro [R3]ospf router-id 3.3.3.3 [R3-ospf-1]area 0 [R3-ospf-1-area-0.0.0.0]net [R3-ospf-1-area-0.0.0.0]network 192.168.1.3 0.0.0.0 [R3-ospf-1-area-0.0.0.0]network 192.168.1.25 0.0.0.0 [R3-ospf-1-area-0.0.0.0]q [R3-ospf-1]area 1 [R3-ospf-1-area-0.0.0.1]network 192.168.1.33 0.0.0.0 [R3-ospf-1-area-0.0.0.1]4、R4[R4]ospf ro [R4]ospf router-id 4.4.4.4 [R4-ospf-1]area 1 [R4-ospf-1-area-0.0.0.1]net [R4-ospf-1-area-0.0.0.1]network 192.168.1.34 0.0.0.0 [R4-ospf-1-area-0.0.0.1]4、R4配置缺省路由因为R4不宣告环回又需要全网可达所以[R4-ospf-1]default-route-advertise always [R4-ospf-1]5、检查是否全网可达1、R12、R23、R34、R46、修改接口优先级因为区域0中没有BDR设备所以将R1和R2设备1的优先级改为0不参与DR和BDR设备的竞选。[R1]interface g0/0/0 [R1-GigabitEthernet0/0/0]ospf dr [R1-GigabitEthernet0/0/0]ospf dr-priority 0[R2]interface g0/0/0 [R2-GigabitEthernet0/0/0]ospf dr [R2-GigabitEthernet0/0/0]ospf dr-priority 07、查看邻居表和路由表1、R1的邻居表和路由表2、R2的邻居表和路由表3、R3的邻居表和路由表4、R4的邻居表和路由表8、配置接口认证用于保证数据传输的安全性1、给R1配置接口认证[R1-GigabitEthernet0/0/0]ospf au [R1-GigabitEthernet0/0/0]ospf authentication-mode ? hmac-md5 Use HMAC-MD5 algorithm keychain Keychain authentication mode md5 Use MD5 algorithm null Use null authentication simple Simple authentication mode [R1-GigabitEthernet0/0/0]ospf authentication-mode md5 ? INTEGER1-255 Key ID cr Please press ENTER to execute command [R1-GigabitEthernet0/0/0]ospf authentication-mode md5 1? INTEGER1-255 Key ID [R1-GigabitEthernet0/0/0]ospf authentication-mode md5 1 ? STRING1-255/20-392 The password (key) cipher Encryption type (Cryptogram) plain Encryption type (Plain text) [R1-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cip [R1-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456给R1配置成功后经过40S 查看一下路由表会发现只有直连了,所以需要给他们都配置接口认证2、给R2配置接口认证:[R2-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456 [R2-GigabitEthernet0/0/0]给R2认证成功后会发现又建立了邻接关系。3、给R3的0/0/0接口认证4、给R3的0/0/1接口认证5、R4的接口认证9、区域汇总对区域0进行汇总可以减少路由条目需要在R3的区域0上完成[R3-ospf-1-area-0.0.0.0]abr-summary 192.168.1.0 255.255.255.224 [R3-ospf-1-area-0.0.0.0]在R4上的路由表可以看出已经学习到了区域0的汇总。10、防环配置避免环路[R3]ip ro [R3]ip route [R3]ip route-static 192.168.1.0 27 NULL 0查看R3路由表是否配置成功根据实验需求已全部满足实验完成