Notes of JNCIP_OSPF
OSPF基本配置的3個問題:
-1)是否需要在loopback啟用OSPF?
-2)loopback是否需要passive?
-3)是否需要配置RID?
JNCIP-M考試新變化:
I believe the only thing that maybe you can see different is the fact that beginning junos 8.5 the router-id is not longer advertised as a stub network in OSPF:
"Historically, JUNOS software automatically advertised a stub route to the interface from which the RID is obtained. This meant that you did not need to run an IGP instance on the loopback interface to advertise reachability to the RID. Starting with JUNOS Release 8.5, this behavior has changed. Now, whether you use an explicit or an automatically generated RID that is lo0-based, you need to enable OSPF on the loopback interface to advertise reachability to the related loopback address, even when it is the source of an automatically selected RID."
Also, there are some slight differences in OSPF authentication between the 5.2 (book version) and the 8.1 version.
Troubleshooting Adjacency Problems中無法更改fxp接口mtu,故無法做實驗
Study Guide:
edit protocols ospf area 0.0.0.10]
lab@r4# show
nssa {
default-lsa {
default-metric 10;
metric-type 2;
type-7;
}
這句中的default-metric 10起什么作用?如何進行檢驗?
Virtul Links:R3/R5兩邊分別配置ospf area 3,但是R5上還是收到10.0.4/22路由,但是從R7到R2不通
重啟r4上的路由協(xié)議
run restart routing logical-router r4 immediately
RID是否需要配置?
JUNOS默認以lo0作為RID,無需配置
ospf下慎用int all
例如CaseStudy中R1要求10.0.5/24以外部路由宣告,而且R1的相應接口不能再建立鄰居
什么時候需要配置router-id?
不希望lo0路由被宣告出去
手工配置RID有什么樣的后果?
路由器不會為Lo0分配stub route,故這條路由(lo0)將無法傳遞出去,影響到loopback的連通性
如果此時要求lo0可達,則需要在lo0上啟用ospf或者手動配置RID
如果lo0啟用ospf會怎么樣?
lo0會以network summary route形式對外宣告為stub network
不在lo0上啟用ospf會怎么樣?
lo0會以type 1 LSAs形式對外宣告為stub network
lo0是否需要宣告到ospf中?
JUNNOS宣告stub路由到RID網(wǎng)段,一般不需要
WHY is passive required?
1.不允許建立adjacency
2.避免產生不必要的hello報文,浪費系統(tǒng)資源
顯示r3宣告的router LSA
關于RID選舉
網(wǎng)絡類型:
1.multipoint
(1)類型為P2MP,因為不具備broadcast能力,所以需要指明neighbor
(2)實際可以理解為類型是p2p,所以不會選舉DR
(3)hello interval默認10秒
(4)配置要點:
HUB:
1.接口上multipoint,ospf中無需指明
2.配置neihgbor
SPOKE?
JUNOS需要配置neighbor,IOS不需要配置neighbor
2.NBMA
(1)實際上還是一種廣播,所以要選舉DR
(2)但因為是non-broadcast,所以還是需要指明neighbor
(3)hello interval默認30秒
(4)ATM & FR全互聯(lián)的情況下使用(實際網(wǎng)絡架構很少用這種類型,所以NBMA很少用到)
(5)配置要點:
1.在ospf接口中指明NBMA
2.指明neihgbor
3.不參選的priority設置為0
eligible的作用
1.只會對自認為可以做DR的路由器有影響:產生hello
2.對實際DR選舉沒有任何影響
3.保證hello報文只在DR-eligible中間傳播
OSPF的non-preemptive特點
priority為128,配置R4的priority為200,此時R4不會搶占成為DR。
when to kick in?
網(wǎng)絡斷開
路由進程重啟
STUB區(qū)域
Network summary LSAs (type 3s) are generated by ABRs to summarize their SPF cost to destinations within their attached areas.
解讀:ABR創(chuàng)建到stub區(qū)域以外路由的summary路由,例如R3 & R4向AREA 10宣告area 1內的路由10.0.8/24
Other routers compute their SPF cost to each ABR, and then add (as in distance vector routing!) the metric received in summary LSAs to compute the shortest path to inter-area destinations.
解讀:other routers指的是stub區(qū)域內的non-ABR路由器,例如AREA 10內的R1 & R2
1.ABR(R3 & R4)宣告了一條匯總路由10.0.8/24,metric為10
2.non-ABR(R1 & R4)首先計算自己到ABR的最短metric,然后將ABR宣告過來的metric相加,最后得出自己到10.0.8/24的metric
NSSA的本質
STUB不許external LSAs進來,同時也不允許external LSAs從自己到bone
NSSA允許
ASBR metric向NSSA以外區(qū)域宣告,例如為R1的靜態(tài)路由設置metric
ABR metric向NSSA以內區(qū)域宣告,例如這里的R3 & R4配置的default-metric
OSPF & ISIS如何注入默認路由
1.OSPF在ABR上配置default-metric
2.ISIS無需配置,L1/L2 Router會自動向L1區(qū)域注入0/0路由
OSPF & ISIS關于loopback網(wǎng)段的宣告
1.OSPF的loopback地址默認會自動宣告到non-AREA 0區(qū)域中去
2.ISIS的loopback地址需要配置ISIS AREA
參考帶寬計算
參考帶寬/100,000,000bit=cost
例如,設置參考帶寬為1G,則cost=1G/100,000,000bit=10
Juniper vs OSPF
1.rip對外宣告metric
場景:r1-r2,r1設置metric-out 1
Juniper:r1-r2之間的直連接口也算一跳,加上1,最后r2看到metric為2
CISCO:r2看到metric為1
2.DUAL-ABR/L1-L2 Router情況下,OSPF & ISIS如何選定默認ABR/L1-L2 Router
OSPF路由選擇Router-ID較大的ABR
ISIS
3.area-range匯總路由的metric如何確定?
Juniper:由contributing route中子網(wǎng)最小的metric做為匯總metric
CISCO:由contributing route中子網(wǎng)最大的metric做為匯總metric
4.wide-metric中的contrbuting routes
ABR匯總:
1.匯總non-area 0內的物理網(wǎng)段
2.如果題目沒有明確要求禁止匯總loopback,area內的loopback地址也要匯總
3.ABR-ABR之間的網(wǎng)段不匯總,而且ABR的loopback不匯總
4.如果physical & loopback地址不連續(xù),可以發(fā)送兩個aggregates
area 1內部網(wǎng)段
8.0 0000 1000.0000 0000
8.4 0000 1000.0000 0100
8.8 0000 1000.0000 1000
9.6 0000 1001.0000 0110
9.7 0000 1001.0000 0111
匯總掩碼:8.0/23
3.5 0000 0011.0000 0101 (loopback@r5)
area 10內部網(wǎng)段
4.0 0000 0100.0000 0001
4.4
4.8
4.12
6.1 0000 0110.0000 0001
6.2 0000 0110.0000 0010
匯總掩碼:4.0/22
ABR-ABR loopback interfaces
3.3 0000 0011.0000 0011
3.4 0000 0011.0000 0100
2.4 0000 0010.0000 0100