KAZELMA EL MADOU Abary

Consultant Sécurité Réseau.

LinkedIn : https://www.linkedin.com/in/kazelma-abary/
Chaine Youtube : makinta Consulting

Configuring a Multi-Area / Multi- Domain Topology /Filtering

Dans ce tutoriel nous allons voir comment configurer OSPF interzone et multi-domaine de routage.
1- Configuration de base
2- Configuration OSPF
3- Configuration EIGRP
4- Redistribution
5- Résumer des routes
6- ABR, ASBR
7- Filtrage des routes ( Filter-list, Distribute-list)
Environnement de LAB : EVE-ng
Architecture :
Basic IP Configuration.
R1 :
enable
conf t
host R1
interface ethernet 0/0
ip address 192.1.12.1 255.255.255.0
no shutdown
exit
interface ethernet 0/1
ip address 192.1.13.1 255.255.255.0
no shutdown
exit
interface ethernet 0/2
ip address 192.1.17.1 255.255.255.0
no shutdown
exit
interface ethernet 0/3
ip address 192.1.18.1 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 1.1.1.1 255.0.0.0
exit
interface loopback 1
ip address 11.11.11.11 255.0.0.0
exit
----------------------------------------------------
R2
enable
conf t
host R2
interface ethernet 0/0
ip address 192.1.12.2 255.255.255.0
no shutdown
exit
interface ethernet 0/1
ip address 192.1.24.2 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 2.2.2.2 255.0.0.0
exit
interface loopback 1
ip address 22.22.22.22 255.0.0.0
exit
---------------------------------------------------------------------------------------------------------------------------------------------
R3
enable
conf t
host R3
interface ethernet 0/0
ip address 192.1.13.3 255.255.255.0
no shutdown
exit
interface ethernet 0/1
ip address 192.1.35.3 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 3.3.3.3 255.0.0.0
exit
interface loopback 1
ip address 33.33.33.33 255.0.0.0
exit
---------------------------------------------------------------------------------------------------------------------------------------
R4
enable
conf t
host R4
interface ethernet 0/0
ip address 192.1.24.4 255.255.255.0
no shutdown
exit
interface ethernet 0/1
ip address 192.1.40.4 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 4.4.4.4 255.0.0.0
exit
--------------------------------------------------------------------------------------------------------------------------
R5 :
enable
conf t
host R5
interface ethernet 0/0
ip address 192.1.35.5 255.255.255.0
no shutdown
exit
interface ethernet 0/1
ip address 192.1.56.5 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 5.5.5.5 255.0.0.0
exit

R6 :
enable
conf t
host R6
interface ethernet 0/0
ip address 192.1.56.6 255.255.255.0
no shutdown
exit
interface ethernet 0/1
ip address 192.1.69.6 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 6.6.6.6 255.0.0.0
exit
interface loopback 1
ip address 66.66.66.66 255.0.0.0
exit

R7 :
enable
conf t
host R7
interface ethernet 0/0
ip address 192.1.17.7 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 7.7.7.7 255.0.0.0
exit
interface loopback 1
ip address 107.7.72.1 255.255.255.0
exit
interface loopback 2
ip address 107.7.73.1 255.255.255.0
exit
interface loopback 3
ip address 107.7.74.1 255.255.255.0
exit
interface loopback 4
ip address 107.7.75.1 255.255.255.0
exit

R8 :
enable
conf t
host R8
interface ethernet 0/0
ip address 192.1.18.8 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 8.8.8.8 255.0.0.0
exit
interface loopback 1
ip address 88.88.88.88 255.0.0.0
exit

R9 :
enable
conf t
host R9
interface ethernet 0/0
ip address 192.1.69.9 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 9.9.9.9 255.0.0.0
exit
interface loopback 1
ip address 99.99.99.99 255.0.0.0
exit

R10 :
enable
conf t
host R10
interface ethernet 0/0
ip address 192.1.40.10 255.255.255.0
no shutdown
exit
interface ethernet 0/1
ip address 192.1.110.10 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 10.10.10.10 255.0.0.0
exit

R11 :
enable
conf t
host R11
interface ethernet 0/0
ip address 192.1.110.11 255.255.255.0
no shutdown
exit
interface loopback 0
ip address 111.111.100.11 255.255.255.0
exit
interface loopback 1
ip address 111.111.101.11 255.255.255.0
exit
interface loopback 2
ip address 111.111.102.11 255.255.255.0
exit
interface loopback 3
ip address 111.111.103.11 255.255.255.0
exit

Task 1
Configure OSPF in Area 0 between R1, R2 & R3. Besides the physical links, enable the Loopback 0 interfaces
of all 3 routers in Area 0.
Loopbacks should be advertised with the Interface Mask. Hard Code the Router-id based on the following:
R1 – 0.0.0.1
R2 – 0.0.0.2
R3 – 0.0.0.3
Config section

R1 :
conf t
router ospf 1
router-id 0.0.0.1
network 1.0.0.0 0.255.255.255 area 0
network 192.1.12.0 0.0.0.255 area 0
network 192.1.13.0 0.0.0.255 area 0
!
interface loopback 0
ip ospf network point-to-point
!
---------------------------------------------------------------------------------------------------------------------------
R2 :
conf t
router ospf 1
router-id 0.0.0.2
network 2.0.0.0 0.255.255.255 area 0
network 192.1.12.0 0.0.0.255 area 0
!
interface loopback 0
ip ospf network point-to-point
!
------------------------------------------------------------------------------------------------------------------------
R3 :
conf t
router ospf 1
router-id 0.0.0.3
network 3.0.0.0 0.255.255.255 area 0
network 192.1.13.0 0.0.0.255 area 0
!
interface loopback 0
ip ospf network point-to-point
!
---------------------------------------------------------------------------------------------------------------------
Task 2 :
Configure OSPF in Area 10 between R2, R4, R10 & R11. Besides the physical links, enable the Loopback 1
interface on R2 and all the loopbacks of the other 3 routers in Area 10. Loopbacks should be advertised
with the Interface Mask. Hard Code the Router-id based on the following:
R4 – 0.0.0.4
R10 – 0.0.0.10
R11 – 0.0.0.11

Config section

R2 :
conf t
router ospf 1
network 192.1.24.0 0.0.0.255 area 10
network 22.0.0.0 0.255.255.255 area 0
!
interface loopback 1
ip ospf network point-to-point
!
--------------------------------------------------------------------------------------------------------------------------------
R4 :
conf t
router ospf 1
router-id 0.0.0.4
network 4.0.0.0 0.255.255.255 area 10
network 192.1.24.0 0.0.0.255 area 10
network 192.1.40.0 0.0.0.255 area 10
!
interface loopback 0
ip ospf network point-to-point
!
--------------------------------------------------------------------------------------------------------------------
R10 :
conf t
router ospf 1
router-id 0.0.0.10
network 10.0.0.0 0.255.255.255 area 10
network 192.1.40.0 0.0.0.255 area 10
network 192.1.110.0 0.0.0.255 area 10
!
interface loopback 0
ip ospf network point-to-point
!
---------------------------------------------------------------------------------------------------------------------------
R11 :
conf t
router ospf 1
router-id 0.0.0.11
network 111.111.0.0 0.0.255.255 area 10
network 192.1.110.0 0.0.0.255 area 10
!
interface loopback 0
ip ospf network point-to-point
!
interface loopback 1
ip ospf network point-to-point
!
interface loopback 2
ip ospf network point-to-point
!
interface loopback 3
ip ospf network point-to-point
!

Task 3 :
Configure OSPF in Area 20 between R3, R5 & R6. Besides the physical links, enable the Loopback 1
interface on R3 & R6 and all the loopbacks on R5 in Area 20. Loopbacks should be advertised with the
Interface Mask. Hard Code the Router-id based on the following:
R5 – 0.0.0.5
R6 – 0.0.0.6

Config section

R3 :
conf t
router ospf 1
network 192.1.35.0 0.0.0.255 area 20
network 33.0.0.0 0.255.255.255 area 20
!
interface loopback 1
ip ospf network point-to-point
!

R5 :
conf t
router ospf 1
router-id 0.0.0.5
network 192.1.35.0 0.0.0.255 area 20
network 5.0.0.0 0.255.255.255 area 20
network 192.1.56.0 0.0.0.255 area 20
!
interface loopback 0
ip ospf network point-to-point
!

R6 :
conf t
router ospf 1
router-id 0.0.0.6
network 6.0.0.0 0.255.255.255 area 20
network 192.1.56.0 0.0.0.255 area 20
!
interface loopback 0
ip ospf network point-to-point
!

Task 4
Configure EIGRP is AS 111 between R1, R7 & R8. Enable all loopbacks on R7 & R8 in EIGRP 111. Enable
Loopback 1 on R1 in EIGRP 111.

Config section

R1 :
conf t
router eigrp 111
eigrp router-id 0.0.0.1
no auto-summary
network 192.1.17.0
network 192.1.18.0
network 11.0.0.0
!
---------------------------------------------------------------------------------------------------------
R7 :
conf t
router eigrp 111
eigrp router-id 0.0.0.7
no auto-summary
network 192.1.17.0
network 7.0.0.0
network 107.0.0.0
!
---------------------------------------------------------------------------------------------------------------------
R8 :
conf t
router eigrp 111
eigrp router-id 0.0.0.8
no auto-summary
network 192.1.18.0
network 8.0.0.0
network 88.0.0.0
!
------------------------------------------------------------------------------------------------------------------------------------------
Task 5
Configure EIGRP is AS 222 between R6 & R9. Enable all loopbacks on R9 in EIGRP 222. Enable Loopback 1
on R6 in EIGRP 222.

Config section

R6 :
conf t
router eigrp 222
eigrp router-id 0.0.0.6
no auto-summary
network 192.1.69.0
network 66.0.0.0
!
-------------------------------------------------------------------------------------------------------------------
R9 :
conf t
router eigrp 222
eigrp router-id 0.0.0.9
no auto-summary
network 192.1.69.0
network 9.0.0.0
network 99.0.0.0
!
----------------------------------------------------------------------------------------------------------------------------
Task 6
Configure Mutual Redistribution between the appropriate routers to allow end-to-end connectivity
between all routing domains. Use Seed metric of your choice.

Config section

R1 :
conf t
router ospf 1
redistribute eigrp 111 subnets
!
router eigrp 111
redistribute ospf 1 metric 1000 100 255 1 1500
!
-----------------------------------------------------------------------------------------------------------------------
R6 :
conf t
router ospf 1
redistribute eigrp 222 subnets
!
router eigrp 222
redistribute ospf 1 metric 1000 100 255 1 1500
!
-----------------------------------------------------------------------------------------------------------------------------------
use the ping command for all reliability.
show ip protocols
show ip interface brief
show ip ospf neighbor
show ip eigrp neighbor
show ip ospf database
show ip eigrp topology
show ip ospf interface brief
show ip eigrp interfaces
show ip eigrp interfaces detail
-----------------------------------------------------------------------------------------------------------------------------------------
Configuring Inter-Area Route Summarization

Task 1
Configure Route Summarization on the appropriate ABR to summarize all the R11 Loopbacks.

Config

R2 :
router ospf 1
area 10 range 111.111.100.0 255.255.252.0
!
-------------------------------------------------------------------------------------------------------------
Cheick the summarization un other router example R9
------------------------------------------------------------------------------------------------------------------------
Configuring External Route Summarization

Task 1
Configure Route Summarization on the appropriate ASBR to summarize all the routes from the 107.0.0.0/8
major network towards OSPF. Use the longest mask for Route Summarization.

Config section

R1 :
conf t
router ospf 1
summary-address 107.7.72.0 255.255.252.0
!
------------------------------------------------------------------------------------------------------------------------
Route Summarization and LSA Filtering

Task 1
Configure LSA Filtering such that network 4.0.0.0/8 is not allowed to leave Area 10.

Config section

R2 :
configure terminal
ip prefix-list FILTER_1 seq 10 deny 4.0.0.0/8
ip prefix-list FILTER_1 seq 20 permit 0.0.0.0/0 le 32
router ospf 1
area 10 distribute-list prefix-list prefex FILTER_1 out
exit

Vérifier toute les filtrages afin de confirmer leur bon fonctionnement

Tester la connectivité entre les routeurs
Question :
Quel est la différence entre Filter-List & Distribute-List ?
Vos réponse sur le Poste.
Merci