1.根据划分网段配置ip2.配置静态路由使公网通3.配置ospfarea3使用进程1 area4使用进程2在area3和area4使用路由引入[r9-ospf-1]import-route ospf 2[r9-ospf-2]import-route ospf 1将rip引入area2[r12-ospf-1]import-route rip4.配置MGRE[r3-Tunnel0/0/1]ip address 172.16.128.9 29[r5-Tunnel0/0/1]ip address 172.16.128.10 29[r6-Tunnel0/0/1]ip address 172.16.128.11 29[r7-Tunnel0/0/1]ip address 172.16.128.12 29[r3-Tunnel0/0/1]tunnel-protocol gre p2mp[r3-Tunnel0/0/1]source 34.0.0.1[r5-Tunnel0/0/1]tunnel-protocol gre p2mp[r5-Tunnel0/0/1]source Serial 4/0/0[r6-Tunnel0/0/1]tunnel-protocol gre p2mp[r6-Tunnel0/0/1]source Serial 4/0/0[r7-Tunnel0/0/1]tunnel-protocol gre p2mp[r7-Tunnel0/0/1]source GigabitEthernet 0/0/0[r3-Tunnel0/0/1]nhrp network-id 100[r5-Tunnel0/0/1]nhrp network-id 100[r5-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register[r6-Tunnel0/0/1]nhrp network-id 100[r6-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register[r7-Tunnel0/0/1]nhrp network-id 100[r7-Tunnel0/0/1]nhrp entry 172.16.128.9 34.0.0.1 register在中心站点开启伪广播[r3-Tunnel0/0/1]nhrp entry multicast dynamic修改serial线类型[r5-Tunnel0/0/1]ospf network-type broadcast[r6-Tunnel0/0/1]ospf network-type broadcast修改dr的选举[r6-Tunnel0/0/1]ospf dr-priority 0[r7-Tunnel0/0/1]ospf dr-priority 05.内网出口配置nat[r3-acl-basic-2000]rule permit source 172.16.0.0 0.0.0.255[r3-Serial4/0/0]nat outbound 2000[r6-acl-basic-2000]rule permit source 172.16.32.0 0.0.0.255[r6-Serial4/0/0]nat outbound 2000在abr上下放缺省路由[r3-ospf-1]default-route-advertise[r5-ospf-1]default-route-advertise[r6-ospf-1]default-route-advertise[r7-ospf-1]default-route-advertiseping测试6.路由聚合和特殊区域[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.0.0 255.255.255.0[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.32.0 255.255.255.0[r9-ospf-2-area-0.0.0.4]abr-summary 172.16.96.0 255.255.255.0[r3-ospf-1-area-0.0.0.1]stub no-summary[r6-ospf-1-area-0.0.0.2]nssa no-summary[r7-ospf-1-area-0.0.0.3]nssa no-summary[r1-ospf-1-area-0.0.0.1]stub no-summary[r2-ospf-1-area-0.0.0.1]stub no-summary[r8-ospf-1-area-0.0.0.3]nssa no-summary[r9-ospf-1-area-0.0.0.3]nssa no-summary[r11-ospf-1-area-0.0.0.2]nssa no-summary[r12-ospf-1-area-0.0.0.2]nssa no-summary此时area4无法ping通外网7.area4配置缺省[r9-ospf-2]default-route-advertise8.加快收敛修改hello时间[r1-GigabitEthernet0/0/0]ospf timer hello 1[r2-GigabitEthernet0/0/0]ospf timer hello 1[r3-GigabitEthernet0/0/0]ospf timer hello 1[r3-Tunnel0/0/1]ospf timer hello 1[r5-Tunnel0/0/1]ospf timer hello 1[r6-Tunnel0/0/1]ospf timer hello 1[r6-GigabitEthernet0/0/1]ospf timer hello 1[r7-Tunnel0/0/1]ospf timer hello 1[r7-GigabitEthernet0/0/1]ospf timer hello 1[r8-GigabitEthernet0/0/0]ospf timer hello 1[r8-GigabitEthernet0/0/1]ospf timer hello 1[r9-GigabitEthernet0/0/0]ospf timer hello 1[r9-GigabitEthernet0/0/1]ospf timer hello 1[r10-GigabitEthernet0/0/0]ospf timer hello 1[r11-GigabitEthernet0/0/0]ospf timer hello 1[r11-GigabitEthernet0/0/1]ospf timer hello 1[r12-GigabitEthernet0/0/0]ospf timer hello 19.配置OSPF认证[r1-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234[r2-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234[r3-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 1234[r3-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321[r5-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321[r6-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321[r7-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123321[r6-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234[r11-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234[r12-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher 1234[r7-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456[r8-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456[r9-ospf-1-area-0.0.0.3]authentication-mode md5 1 cipher 123456[r9-ospf-2-area-0.0.0.4]authentication-mode md5 1 cipher 123[r10-ospf-2-area-0.0.0.4]authentication-mode md5 1 cipher 123全网ping