怎么做OSPF停在某种状态的实验

FNATIC.MSI_cArn

R1----R2  
R1起环回口1.1.1.1
R2起环回口2.2.2.2

R1---R2直接12.1.1.0网段

怎么用ACL控制OSPF的单播流量，控制在init的状态 ？

我写了2条，匹配不上，捉不到流量

Necui

FNATIC.MSI_cArn 发表于 2014-9-2 18:50
不行，我试过了，还是瞬间down 瞬间又full了

gns3上也没问题，你在R2上做ACL，然后重启R2的OSPF进程，再到R1上看结果；/--我是在对端做的ACL，然后在R10上看的结果--/

FNATIC.MSI_cArn

这个ACL语句怎么写？

qsy112233

我的想法是
access-list 100 deny  ospf any any
用在IN方向

Necui

在入接口限制目标地址为224.0.0.5的流量,让路由器收不到邻居的Hello包即可：
access-list 100 deny ip any host 224.0.0.5
access-list 100 permit ip any any

IE行不行

R2接口in方向：
access-list 101 deny ospf any host 224.0.0.5

R1就卡在init状态

FNATIC.MSI_cArn

Necui 发表于 2014-9-1 13:53
在入接口限制目标地址为224.0.0.5的流量,让路由器收不到邻居的Hello包即可：
access-list 100 deny ip any ...

瞬间邻居down瞬间又full。没实现init

FNATIC.MSI_cArn

IE行不行 发表于 2014-9-2 15:44
R2接口in方向：
access-list 101 deny ospf any host 224.0.0.5

瞬间邻居down瞬间又full。没实现init

FNATIC.MSI_cArn

R2#show run
Building configuration...

Current configuration : 1362 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
no ip icmp rate-limit unreachable
!
!
ip cef
no ip domain lookup
!
!
!         
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface Serial0/0
ip address 12.1.1.2 255.255.255.0
shutdown
serial restart-delay 0
!
interface Serial0/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
!
interface FastEthernet1/0
ip address 21.1.1.2 255.255.255.0
ip access-group 100 in
duplex auto
speed auto
!
router ospf 110
router-id 92.2.2.2
log-adjacency-changes
network 2.2.2.2 0.0.0.0 area 0
network 12.1.1.2 0.0.0.0 area 0
network 21.1.1.2 0.0.0.0 area 0
!
no ip http server
no ip http secure-server
!
!
!
access-list 100 deny   ip any host 224.0.0.5
access-list 100 deny   ip any host 224.0.0.6
access-list 100 permit ip any any
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end

Necui

FNATIC.MSI_cArn 发表于 2014-9-2 18:33
瞬间邻居down瞬间又full。没实现init

用clear ip ospf process重启OSPF进程，让它们从头开始建邻。

FNATIC.MSI_cArn

R1#show run
Building configuration...

Current configuration : 1214 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
no ip icmp rate-limit unreachable
!
!
ip cef
no ip domain lookup
!
!
!         
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
!
interface Loopback0
--More--
*Mar  1 00:37:49.879: %OSPF-5-ADJCHG: Process 110, Nbr 92.2.2.2 on FastEthernet1/0 from LOADING to FULL, Loading Done
ip address 1.1.1.1 255.255.255.255
!
interface Serial0/0
ip address 12.1.1.1 255.255.255.0
shutdown
serial restart-delay 0
!
interface Serial0/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial0/3
no ip address
shutdown
serial restart-delay 0
!
interface FastEthernet1/0
ip address 21.1.1.1 255.255.255.0
duplex auto
speed auto
!
router ospf 110
router-id 91.1.1.1
log-adjacency-changes
network 1.1.1.1 0.0.0.0 area 0
network 12.1.1.1 0.0.0.0 area 0
network 21.1.1.1 0.0.0.0 area 0
!
no ip http server
no ip http secure-server
!
!
!
!
!
!
control-plane
!
!
!
!         
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end

R1#

FNATIC.MSI_cArn

Necui 发表于 2014-9-2 18:46
用clear ip ospf process重启OSPF进程，让它们从头开始建邻。

不行，我试过了，还是瞬间down 瞬间又full了

Necui

FNATIC.MSI_cArn 发表于 2014-9-2 18:50
不行，我试过了，还是瞬间down 瞬间又full了

我在PT上试了，可以的。我再去gns3上试试。

yela2

yela2