ttl-securityのみ

初期設定

ospf_ttlsecurity.txt

965 Bytes

ファイルダウンロードについて

ダウンロード

設定前

iosv-0(config-router)#do sh ip route | begin Gate
Gateway of last resort is not set

      172.16.0.0/24 is subnetted, 1 subnets
O IA     172.16.1.0 [110/3] via 192.168.12.2, 00:00:17, GigabitEthernet0/0
      192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.12.0/24 is directly connected, GigabitEthernet0/0
L        192.168.12.1/32 is directly connected, GigabitEthernet0/0
O     192.168.23.0/24 [110/2] via 192.168.12.2, 00:00:17, GigabitEthernet0/0

ttl-security hops 1設定後

iosv-0(config-router)#ttl-security all-interfaces hops 1
iosv-0(config-router)#do sh ip route | begin Gate
Gateway of last resort is not set

  10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C        10.1.1.0/24 is directly connected, GigabitEthernet0/1
L        10.1.1.1/32 is directly connected, GigabitEthernet0/1
172.16.0.0/24 is subnetted, 1 subnets
O IA     172.16.1.0 [110/3] via 192.168.12.2, 00:01:13, GigabitEthernet0/0
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.12.0/24 is directly connected, GigabitEthernet0/0
L        192.168.12.1/32 is directly connected, GigabitEthernet0/0
O     192.168.23.0/24 [110/2] via 192.168.12.2, 00:01:13, GigabitEthernet0/0

正直前回とやること変わらない、virtual-linkがなくてもttl-securityは実装できる。というかむしろ先v2でやったほうがスムーズに理解できたかもしれない。

参考

Chapter: Configuring OSPF TTL Security Check and OSPF Graceful Shutdown