NSSA区域处于边界引入默认路由该怎么处理呢？

标签：nssa边界引入默认路由

如下图的拓扑所示，内部网络的路由连接internet上，边界的路由器的内部网口属于ospf的NSSA区域，路由器上配置相应的默认路由指向internet的下一跳。内部网络中跑着不同协议的路由信息，保证内部的OSPF区域当中还需要引入其他类型的路由信息；并且要保证内部网络能够正常访问internet（在边界的路由器上做NAT暂时忽略，保证网络的连通性 ）

怎么保证内部的网络能够正常访问internet呢？

具体的配置信息如下：

R5的路由配置信息：

router ospf 1
 log-adjacency-changes
 area 1 nssa
 redistribute connected subnets
 redistribute static subnets
 network 192.168.4.0 0.0.0.255 area 1
ip route 0.0.0.0 0.0.0.0 192.168.5.6

R4的路由配置信息：

router ospf 1
 log-adjacency-changes
 area 1 nssa default-information-originate no-summary
 network 4.4.4.0 0.0.0.255 area 1
 network 192.168.3.0 0.0.0.255 area 0
 network 192.168.4.0 0.0.0.255 area 1
!

R3的路由配置信息：

router ospf 1
 log-adjacency-changes
 redistribute rip metric 1 subnets
 network 3.3.3.0 0.0.0.255 area 0
 network 192.168.2.0 0.0.0.255 area 3
 network 192.168.3.0 0.0.0.255 area 0
!
router rip
 version 2
 redistribute ospf 1 metric 2
 network 192.168.1.0
 no auto-summary

R2路由配置信息：

router ospf 1
 log-adjacency-changes
 network 2.2.2.0 0.0.0.255 area 3
 network 192.168.2.0 0.0.0.255 area 3

R1路由配置信息：

router rip
 version 2
 network 1.0.0.0
 network 192.168.1.0
 no auto-summary
查看R1的路由信息

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
     1.0.0.0/24 is subnetted, 1 subnets
C       1.1.1.0 is directly connected, Loopback1
     2.0.0.0/32 is subnetted, 1 subnets
R       2.2.2.2 [120/2] via 192.168.1.3, 00:00:16, FastEthernet0/0
     3.0.0.0/24 is subnetted, 1 subnets
R       3.3.3.0 [120/2] via 192.168.1.3, 00:00:16, FastEthernet0/0
     4.0.0.0/32 is subnetted, 1 subnets
R       4.4.4.4 [120/2] via 192.168.1.3, 00:00:16, FastEthernet0/0
     5.0.0.0/24 is subnetted, 1 subnets
R       5.5.5.0 [120/2] via 192.168.1.3, 00:00:16, FastEthernet0/0
R    192.168.4.0/24 [120/2] via 192.168.1.3, 00:00:16, FastEthernet0/0
R    192.168.5.0/24 [120/2] via 192.168.1.3, 00:00:16, FastEthernet0/0
     10.0.0.0/24 is subnetted, 1 subnets
C       10.1.1.0 is directly connected, Loopback10
C    192.168.1.0/24 is directly connected, FastEthernet0/0
R    192.168.2.0/24 [120/2] via 192.168.1.3, 00:00:17, FastEthernet0/0
R    192.168.3.0/24 [120/2] via 192.168.1.3, 00:00:17, FastEthernet0/0
查看R2的路由信息：

R2#  show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
     1.0.0.0/24 is subnetted, 1 subnets
O E2    1.1.1.0 [110/1] via 192.168.2.3, 04:44:05, FastEthernet0/1
     2.0.0.0/24 is subnetted, 1 subnets
C       2.2.2.0 is directly connected, Loopback2
     3.0.0.0/32 is subnetted, 1 subnets
O IA    3.3.3.3 [110/2] via 192.168.2.3, 05:06:48, FastEthernet0/1
     4.0.0.0/32 is subnetted, 1 subnets
O IA    4.4.4.4 [110/12] via 192.168.2.3, 05:06:48, FastEthernet0/1
     5.0.0.0/24 is subnetted, 1 subnets
O E2    5.5.5.0 [110/20] via 192.168.2.3, 04:43:55, FastEthernet0/1
O IA 192.168.4.0/24 [110/21] via 192.168.2.3, 04:44:05, FastEthernet0/1
O E2 192.168.5.0/24 [110/20] via 192.168.2.3, 04:43:55, FastEthernet0/1
O E2 192.168.1.0/24 [110/1] via 192.168.2.3, 04:44:05, FastEthernet0/1
C    192.168.2.0/24 is directly connected, FastEthernet0/1
O IA 192.168.3.0/24 [110/11] via 192.168.2.3, 05:06:49, FastEthernet0/1

查看R5路由的信息：

R5#   show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.5.6 to network 0.0.0.0
     4.0.0.0/32 is subnetted, 1 subnets
O       4.4.4.4 [110/11] via 192.168.4.4, 00:09:53, Ethernet1/0
     5.0.0.0/24 is subnetted, 1 subnets
C       5.5.5.0 is directly connected, Loopback5
C    192.168.4.0/24 is directly connected, Ethernet1/0
C    192.168.5.0/24 is directly connected, Ethernet1/2
S*   0.0.0.0/0 [1/0] via 192.168.5.6

R5的LSDB信息：

R5#show ip ospf database
            OSPF Router with ID (5.5.5.5) (Process ID 1)
                Router Link States (Area 1)
Link ID         ADV Router      Age         Seq#       Checksum Link count
4.4.4.4         4.4.4.4         618         0x80000007 0x00A253 2
5.5.5.5         5.5.5.5         601         0x80000006 0x003ED1 1
                Net Link States (Area 1)
Link ID         ADV Router      Age         Seq#       Checksum
192.168.4.5     5.5.5.5         627         0x80000001 0x001277
                Summary Net Link States (Area 1)
Link ID         ADV Router      Age         Seq#       Checksum
0.0.0.0         4.4.4.4         473         0x80000001 0x00C065
                Type-7 AS External Link States (Area 1)
Link ID         ADV Router      Age         Seq#       Checksum Tag
0.0.0.0         4.4.4.4         482         0x80000001 0x005D34 0
5.5.5.0         5.5.5.5         715         0x80000001 0x00B24E 0
192.168.5.0     5.5.5.5         715         0x80000001 0x007E23 0

查看到R1上的LSDB也会产生相应的7类0.0.0.0的默认路由LSA，但是查看路由表中只有一条去往internet的默认路由；为什么没有产生一条去往R2的默认路由呢？

是由于路由的管理距离起的作用，默认路由的管理距离是1 ，ospf的管理距离是110，管理距离是越小越优先，所以就没有产生ospf的默认路由

解决方案：1、要么修改Area 1的属性，nssa区域修改成普通的area区域并要在边界路由器的上注入默认路由（命令：default-information originate），保证内部网络能够正常访问internet网络

修改后：查看到的R1/R2上路由信息都能够学习到一条外部引入的默认路由信息

具体的修改信息如下：

修改后R5的配置如下：

 log-adjacency-changes
 redistribute connected subnets
 redistribute static subnets
 network 192.168.4.0 0.0.0.255 area 1
 default-information originate
!
ip route 0.0.0.0 0.0.0.0 192.168.5.6

R4的配置信息：

router ospf 1
 log-adjacency-changes
 network 4.4.4.0 0.0.0.255 area 1
 network 192.168.3.0 0.0.0.255 area 0
 network 192.168.4.0 0.0.0.255 area 1
!
查看R1的路由信息：

R1#            show ip ro
R1#            show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.1.3 to network 0.0.0.0
     1.0.0.0/24 is subnetted, 1 subnets
C       1.1.1.0 is directly connected, Loopback1
     2.0.0.0/32 is subnetted, 1 subnets
R       2.2.2.2 [120/2] via 192.168.1.3, 00:00:13, FastEthernet0/0
     3.0.0.0/24 is subnetted, 1 subnets
R       3.3.3.0 [120/2] via 192.168.1.3, 00:00:13, FastEthernet0/0
     4.0.0.0/32 is subnetted, 1 subnets
R       4.4.4.4 [120/2] via 192.168.1.3, 00:00:13, FastEthernet0/0
     5.0.0.0/24 is subnetted, 1 subnets
R       5.5.5.0 [120/2] via 192.168.1.3, 00:00:13, FastEthernet0/0
R    192.168.4.0/24 [120/2] via 192.168.1.3, 00:00:13, FastEthernet0/0
R    192.168.5.0/24 [120/2] via 192.168.1.3, 00:00:13, FastEthernet0/0
     10.0.0.0/24 is subnetted, 1 subnets
C       10.1.1.0 is directly connected, Loopback10
C    192.168.1.0/24 is directly connected, FastEthernet0/0
R    192.168.2.0/24 [120/2] via 192.168.1.3, 00:00:14, FastEthernet0/0
R    192.168.3.0/24 [120/2] via 192.168.1.3, 00:00:14, FastEthernet0/0
R*   0.0.0.0/0 [120/2] via 192.168.1.3, 00:00:14, FastEthernet0/0

查看R2的路由信息：

R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is 192.168.2.3 to network 0.0.0.0

     1.0.0.0/24 is subnetted, 1 subnets
O E2    1.1.1.0 [110/1] via 192.168.2.3, 00:04:04, FastEthernet0/1
     2.0.0.0/24 is subnetted, 1 subnets
C       2.2.2.0 is directly connected, Loopback2
     3.0.0.0/32 is subnetted, 1 subnets
O IA    3.3.3.3 [110/2] via 192.168.2.3, 05:25:49, FastEthernet0/1
     4.0.0.0/32 is subnetted, 1 subnets
O IA    4.4.4.4 [110/12] via 192.168.2.3, 05:25:49, FastEthernet0/1
     5.0.0.0/24 is subnetted, 1 subnets
O E2    5.5.5.0 [110/20] via 192.168.2.3, 00:04:04, FastEthernet0/1
O IA 192.168.4.0/24 [110/21] via 192.168.2.3, 00:04:19, FastEthernet0/1
O E2 192.168.5.0/24 [110/20] via 192.168.2.3, 00:04:04, FastEthernet0/1
O E2 192.168.1.0/24 [110/1] via 192.168.2.3, 00:04:04, FastEthernet0/1
C    192.168.2.0/24 is directly connected, FastEthernet0/1
O IA 192.168.3.0/24 [110/11] via 192.168.2.3, 05:25:49, FastEthernet0/1
O*E2 0.0.0.0/0 [110/1] via 192.168.2.3, 00:03:40, FastEthernet0/1

查看R2的LSDB信息：

R2#show ip ospf database
            OSPF Router with ID (2.2.2.2) (Process ID 1)
                Router Link States (Area 3)
Link ID         ADV Router      Age         Seq#       Checksum Link count
2.2.2.2         2.2.2.2         602         0x8000000D 0x005AC8 2
3.3.3.3         3.3.3.3         1666        0x8000000C 0x001F12 1
                Net Link States (Area 3)
Link ID         ADV Router      Age         Seq#       Checksum
192.168.2.2     2.2.2.2         602         0x8000000B 0x004E58
                Summary Net Link States (Area 3)
Link ID         ADV Router      Age         Seq#       Checksum
3.3.3.3         3.3.3.3         682         0x8000000B 0x009A7F
4.4.4.4         3.3.3.3         682         0x8000000B 0x00D03B
192.168.3.0     3.3.3.3         682         0x8000000D 0x00A806
192.168.4.0     3.3.3.3         396         0x80000001 0x001A95
                Summary ASB Link States (Area 3)
Link ID         ADV Router      Age         Seq#       Checksum
5.5.5.5         3.3.3.3         391         0x80000001 0x000305
                Type-5 AS External Link States
Link ID         ADV Router      Age         Seq#       Checksum Tag
0.0.0.0         5.5.5.5         359         0x80000001 0x00A4F9 1
1.1.1.0         3.3.3.3         1667        0x8000000A 0x009803 0
5.5.5.0         5.5.5.5         433         0x80000001 0x009CE0 0
192.168.1.0     3.3.3.3         1667        0x8000000A 0x00FF34 0
192.168.5.0     5.5.5.5         433         0x80000001 0x0068B5 0
网络测试：
R2# ping 6.6.6.6   模拟的外部internet网络
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 60/73/104 ms
R2#tracerou 6.6.6.6
Type escape sequence to abort.
Tracing the route to 6.6.6.6
  1 192.168.2.3 28 msec 12 msec 20 msec
  2 192.168.3.4 8 msec 24 msec 32 msec
  3 192.168.4.5 32 msec 40 msec 80 msec
  4 192.168.5.6 104 msec 60 msec 72 msec

NSSA区域处于边界引入默认路由该怎么处理呢？

标签：nssa边界引入默认路由

原文地址：http://205091.blog.51cto.com/195091/1882452