OSPF区域 认证和接口认证

1.拓扑图

链接:https://pan.baidu.com/s/1PMB1a2RX2tE9rli1s8Dr5Q
提取码:8888

eNSP
链接:https://pan.baidu.com/s/1wP0vHim4yqVV0bc0wmzhFw
提取码:8888在这里插入图片描述
2.网络需求
a. R1、R2、R3及R4运行OSPF;
b. 为保证骨干区域area0的安全性,需在area0开启区域认证,使用MD5的认证方式,密码为ht123123;
c. R3与R4之间开启OSPF接口认证,使用明文的认证方式,密码为ht123123;
3配置
在R1上开启area0区域认证:
[R1] ospf 1
[R1-ospf-1 ] area 0
[R1-ospf-1-area-0.0.0.0] authentication-mode md5 1 cipher ht123123

在R2上开启area0区域认证:
[R2] ospf 1
[R2-ospf-1 ] area 0
[R2-ospf-1-area-0.0.0.0] authentication-mode md5 1 cipher ht123123
在R3上开启area0区域认证:
[R3] ospf 1
[R3-ospf-1 ] area 0
[R3-ospf-1-area-0.0.0.0] authentication-mode md5 1 cipher ht123123
在R3上开启接口认证:
[R3] interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1] ospf authentication-mode simple cipher ht123123
在R4上开启接口认证:
[R4] interface GigabitEthernet 0/0/0
[R4-GigabitEthernet0/0/0] ospf authentication-mode simple cipher ht123123
3.1R1的配置
[R1]display current-configuration

sysname R1

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
local-user admin service-type http

firewall zone Local
priority 16

interface Ethernet0/0/0

interface Ethernet0/0/1

interface Serial0/0/0
link-protocol ppp

interface Serial0/0/1
link-protocol ppp

扫描二维码关注公众号,回复: 12447703 查看本文章

interface Serial0/0/2
link-protocol ppp

interface Serial0/0/3
link-protocol ppp

interface GigabitEthernet0/0/0
ip address 192.168.12.1 255.255.255.0

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

interface GigabitEthernet0/0/3

wlan

interface NULL0

ospf 1 router-id 1.1.1.1
area 0.0.0.0
authentication-mode md5 1 cipher eMOYUK3q%IECB7Ie7’/)*{W#
network 192.168.12.0 0.0.0.255

user-interface con 0
user-interface vty 0 4
user-interface vty 16 20

return

3.2 R2的配置
[R2]display current-configuration

sysname R2

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
local-user admin service-type http

firewall zone Local
priority 16

interface Ethernet0/0/0

interface Ethernet0/0/1

interface Serial0/0/0
link-protocol ppp

interface Serial0/0/1
link-protocol ppp

interface Serial0/0/2
link-protocol ppp

interface Serial0/0/3
link-protocol ppp

interface GigabitEthernet0/0/0
ip address 192.168.12.2 255.255.255.0

interface GigabitEthernet0/0/1
ip address 192.168.23.2 255.255.255.0

interface GigabitEthernet0/0/2

interface GigabitEthernet0/0/3

wlan

interface NULL0

ospf 1 router-id 2.2.2.2
area 0.0.0.0
authentication-mode md5 1 cipher {>faE’2%o33@9_G-B0Y2F|b#
network 192.168.12.0 0.0.0.255
network 192.168.23.0 0.0.0.255

user-interface con 0
user-interface vty 0 4
user-interface vty 16 20

return

3.3R3的配置
[R3]display current-configuration

sysname R3

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
local-user admin service-type http

firewall zone Local
priority 16

interface Ethernet0/0/0

interface Ethernet0/0/1

interface Serial0/0/0
link-protocol ppp

interface Serial0/0/1
link-protocol ppp

interface Serial0/0/2
link-protocol ppp

interface Serial0/0/3
link-protocol ppp

interface GigabitEthernet0/0/0
ip address 192.168.23.3 255.255.255.0

interface GigabitEthernet0/0/1
ip address 192.168.34.3 255.255.255.0
ospf authentication-mode simple cipher I""Z~(U@)'ani>"qh;&}_#

interface GigabitEthernet0/0/2

interface GigabitEthernet0/0/3

wlan

interface NULL0

ospf 1 router-id 3.3.3.3
area 0.0.0.0
authentication-mode md5 1 cipher {>faE’2%o3ZypQCee$t3F|x#
network 192.168.23.0 0.0.0.255
network 192.168.34.0 0.0.0.255

user-interface con 0
user-interface vty 0 4
user-interface vty 16 20

return
3.4 R4的配置
[R4]display current-configuration

sysname R4

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher OOCM4m($F4ajUn1vMEIBNUw#
local-user admin service-type http

firewall zone Local
priority 16

interface Ethernet0/0/0

interface Ethernet0/0/1

interface Serial0/0/0
link-protocol ppp

interface Serial0/0/1
link-protocol ppp

interface Serial0/0/2
link-protocol ppp

interface Serial0/0/3
link-protocol ppp

interface GigabitEthernet0/0/0
ip address 192.168.34.4 255.255.255.0
ospf authentication-mode simple cipher ;VXiQKc>-.ajUn1vMEIBP}P#

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

interface GigabitEthernet0/0/3

wlan

interface NULL0

ospf 1 router-id 4.4.4.4
area 0.0.0.1
network 192.168.34.0 0.0.0.255

user-interface con 0
user-interface vty 0 4
user-interface vty 16 20

return

4.配置完成后,可以做一下查看
在这里插入图片描述
5、R3、R4即可基于接口认证建立邻居关系
在这里插入图片描述

猜你喜欢

转载自blog.csdn.net/qq_41235506/article/details/109559415