2017年5月30日火曜日

OSPF データベース上限設定 ( max-lsa / maximum-prefix )

◾️OSPF データベース上限設定 ( max-lsa / maximum-prefix )

 【課題】
  ・R2にて他のOSPFルータから受信可能がLSAの数を10に制限する。
   ※オプションなしで設定後、warning-onlyオプションを有効にし警告のみにする。

  ・R3にて再配送可能な経路数を5に制限する。
   ※オプションなしで設定後、warning-onlyオプションを有効にし警告のみにする。

 【補足】
  MaxLSAは、他のOSPFルータ生成したLSAの受信数を制限する事ができます。
  デフォルトでは1分経過してもLSA受信最大数を超過している場合は、OSPFネイバーを
  解消します。(rest-timeオプションにて経過可能時間を変更する事が可能です。)
  又、warning-onlyオプションを有効にする事で警告のみに変更する事が可能です。

  Maximum-prefixは、OSPFへ再配布可能な経路数を制限する事ができます。
  又、warning-onlyオプションを有効にする事で警告のみに変更する事が可能です。  

◾️検証環境図















①検証環境 事前設定確認

(1)OSPFネイバー確認
 OSPFネイバーが正常に張れている事を確認する。
R1#show ip ospf neighbor 

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.2           1   FULL/BDR        00:00:30    192.168.12.2    Ethernet0/0


R2#show ip ospf neighbor 

Neighbor ID     Pri   State           Dead Time   Address         Interface
1.1.1.1           1   FULL/DR         00:00:37    192.168.12.1    Ethernet0/0
3.3.3.3           1   FULL/DR         00:00:32    192.168.23.3    Ethernet0/1


R3#show ip ospf neighbor 

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.2           1   FULL/BDR        00:00:38    192.168.23.2    Ethernet0/1

(2)OSPFインターフェース確認
 設定前のOSPFエリア設定を確認する。
R1#show ip ospf interface brief 
Interface    PID   Area            IP Address/Mask    Cost  State Nbrs F/C
Lo0          1     0               1.1.1.1/32         1     LOOP  0/0
Et0/0        1     0               192.168.12.1/24    10    DR    1/1


R2#show ip ospf interface brief 
Interface    PID   Area            IP Address/Mask    Cost  State Nbrs F/C
Lo0          1     0               2.2.2.2/32         1     LOOP  0/0
Et0/0        1     0               192.168.12.2/24    10    BDR   1/1
Et0/1        1     10              192.168.23.2/24    10    BDR   1/1

※172.16.x.x経路はOSPFarea10に含める。
R3#show ip ospf interface brief 
Interface    PID   Area            IP Address/Mask    Cost  State Nbrs F/C
Lo0          1     10              3.3.3.3/32         1     LOOP  0/0
Lo10         1     10              172.16.10.3/24     1     LOOP  0/0
Lo9          1     10              172.16.9.3/24      1     LOOP  0/0
Lo8          1     10              172.16.8.3/24      1     LOOP  0/0
Lo7          1     10              172.16.7.3/24      1     LOOP  0/0
Lo6          1     10              172.16.6.3/24      1     LOOP  0/0
Lo5          1     10              172.16.5.3/24      1     LOOP  0/0
Lo4          1     10              172.16.4.3/24      1     LOOP  0/0
Lo3          1     10              172.16.3.3/24      1     LOOP  0/0
Lo2          1     10              172.16.2.3/24      1     LOOP  0/0
Lo1          1     10              172.16.1.3/24      1     LOOP  0/0
Et0/1        1     10              192.168.23.3/24    10    DR    1/1

(3)R3再配布対象ネットワークの確認
192.168.x.x経路はOSPFへ再配布する。
R3#show ip interface brief | begin Loopback101
Interface                  IP-Address      OK? Method Status                Protocol
Loopback101                192.168.101.3   YES manual up                    up      
Loopback102                192.168.102.3   YES manual up                    up      
Loopback103                192.168.103.3   YES manual up                    up      
Loopback104                192.168.104.3   YES manual up                    up      
Loopback105                192.168.105.3   YES manual up                    up      
Loopback106                192.168.106.3   YES manual up                    up      
Loopback107                192.168.107.3   YES manual up                    up      
Loopback108                192.168.108.3   YES manual up                    up      
Loopback109                192.168.109.3   YES manual up                    up      
Loopback110                192.168.110.3   YES manual up                    up  


R3#show route-map Loopback-to-ospf
route-map Loopback-to-ospf, permit, sequence 10
  Match clauses:
    interface Loopback101 Loopback102 Loopback103 Loopback104 Loopback105 Loopback106 Loopback107 Loopback108 Loopback109 Loopback110 
  Set clauses:
  Policy routing matches: 0 packets, 0 bytes


R3#show run | se router ospf
router ospf 1
 router-id 3.3.3.3
 redistribute connected subnets route-map Loopback-to-ospf

(4)ルーティングの確認
R1#sh ip route ospf

Gateway of last resort is not set

      2.0.0.0/32 is subnetted, 1 subnets
O        2.2.2.2 [110/11] via 192.168.12.2, 00:06:54, Ethernet0/0
      3.0.0.0/32 is subnetted, 1 subnets
O IA     3.3.3.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
      172.16.0.0/32 is subnetted, 10 subnets
O IA     172.16.1.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.2.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.3.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.4.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.5.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.6.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.7.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.8.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.9.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA     172.16.10.3 [110/21] via 192.168.12.2, 00:06:50, Ethernet0/0
O IA  192.168.23.0/24 [110/20] via 192.168.12.2, 00:06:50, Ethernet0/0
O E2  192.168.101.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.102.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.103.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.104.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.105.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.106.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.107.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.108.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.109.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路
O E2  192.168.110.0/24 [110/20] via 192.168.12.2, 00:06:49, Ethernet0/0 //OSPF外部経路


R2#sh ip route ospf

Gateway of last resort is not set

      1.0.0.0/32 is subnetted, 1 subnets
O        1.1.1.1 [110/11] via 192.168.12.1, 00:06:57, Ethernet0/0
      3.0.0.0/32 is subnetted, 1 subnets
O        3.3.3.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
      172.16.0.0/32 is subnetted, 10 subnets
O        172.16.1.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.2.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.3.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.4.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.5.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.6.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.7.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.8.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.9.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O        172.16.10.3 [110/11] via 192.168.23.3, 00:06:57, Ethernet0/1
O E2  192.168.101.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.102.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.103.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.104.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.105.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.106.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.107.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.108.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.109.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路
O E2  192.168.110.0/24 [110/20] via 192.168.23.3, 00:06:57, Ethernet0/1 //OSPF外部経路

R3#sh ip route ospf

Gateway of last resort is not set

      1.0.0.0/32 is subnetted, 1 subnets
O IA     1.1.1.1 [110/21] via 192.168.23.2, 00:06:59, Ethernet0/1
      2.0.0.0/32 is subnetted, 1 subnets
O IA     2.2.2.2 [110/11] via 192.168.23.2, 00:06:59, Ethernet0/1
O IA  192.168.12.0/24 [110/20] via 192.168.23.2, 00:06:59, Ethernet0/1


設定変更(Maximum-prefix)

(1)R3にてMaximum-prefixを5に設定する。
R3(config)#router ospf 1
3(config-router)#redistribute maximum-prefix 5 

※数秒後、以下のメッセージが出力される。
*May  5 23:54:19.825: %IPRT-4-REDIST_THR_PFX: Redistribution prefix threshold has been reached "ospf 1" - 3 prefixes
*May  5 23:54:19.825: %IPRT-4-REDIST_MAX_PFX: Redistribution prefix limit has been reached "ospf 1" - 5 prefixes

(2)R3設定確認
R3#show ip ospf | include Maximum limit
    Maximum limit of redistributed prefixes 5

(3)R2 ルーティング確認&OSPFデータベース確認
R3でのMaximum-prefixにより、OSPF外部経路の一部(192.168.106~110)が広告されていない事及びLSAを受信していないことを確認する。
R2#sh ip route ospf

Gateway of last resort is not set

      1.0.0.0/32 is subnetted, 1 subnets
O        1.1.1.1 [110/11] via 192.168.12.1, 00:13:14, Ethernet0/0
      3.0.0.0/32 is subnetted, 1 subnets
O        3.3.3.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
      172.16.0.0/32 is subnetted, 10 subnets
O        172.16.1.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.2.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.3.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.4.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.5.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.6.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.7.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.8.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.9.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O        172.16.10.3 [110/11] via 192.168.23.3, 00:13:14, Ethernet0/1
O E2  192.168.101.0/24 [110/20] via 192.168.23.3, 00:02:54, Ethernet0/1
O E2  192.168.102.0/24 [110/20] via 192.168.23.3, 00:02:54, Ethernet0/1
O E2  192.168.103.0/24 [110/20] via 192.168.23.3, 00:02:54, Ethernet0/1
O E2  192.168.104.0/24 [110/20] via 192.168.23.3, 00:02:54, Ethernet0/1
O E2  192.168.105.0/24 [110/20] via 192.168.23.3, 00:02:54, Ethernet0/1
///OSPF外部経路(106~110)が広告されていない


R2#show ip ospf database | begin Type-5
Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.101.0   3.3.3.3         247         0x80000001 0x008045 0
192.168.102.0   3.3.3.3         247         0x80000001 0x00754F 0
192.168.103.0   3.3.3.3         247         0x80000001 0x006A59 0
192.168.104.0   3.3.3.3         247         0x80000001 0x005F63 0
192.168.105.0   3.3.3.3         247         0x80000001 0x00546D 0
///OSPF外部経路(106~110)に関連するLSAが受信できていない。

(4)R3にてMaximum-prefixを5でwarning-onlyを有効にする。
R3(config)#router ospf 1
R3(config-router)#redistribute maximum-prefix 5 warning-only 

※数秒後、以下のメッセージが出力される。
*May  6 00:00:00.522: %IPRT-4-REDIST_THR_PFX: Redistribution prefix threshold has been reached "ospf 1" - 3 prefixes
*May  6 00:00:00.523: %IPRT-4-REDIST_MAX_PFX: Redistribution prefix limit has been reached "ospf 1" - 5 prefixes

(5)R3設定確認
R3#show ip ospf | include Maximum limit  //
    Maximum limit of redistributed prefixes 5 (warning-only)

(6)R2 ルーティング確認&OSPFデータベース確認
R3でのMaximum-prefix(警告のみ)により、OSPF外部経路の一部(192.168.106~110)が広告されている事及びLSAを受信していることを確認する。
R2#sh ip route ospf                      
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override

Gateway of last resort is not set

      1.0.0.0/32 is subnetted, 1 subnets
O        1.1.1.1 [110/11] via 192.168.12.1, 00:19:05, Ethernet0/0
      3.0.0.0/32 is subnetted, 1 subnets
O        3.3.3.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
      172.16.0.0/32 is subnetted, 10 subnets
O        172.16.1.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.2.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.3.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.4.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.5.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.6.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.7.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.8.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.9.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O        172.16.10.3 [110/11] via 192.168.23.3, 00:19:05, Ethernet0/1
O E2  192.168.101.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.102.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.103.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.104.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.105.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.106.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.107.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.108.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.109.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1
O E2  192.168.110.0/24 [110/20] via 192.168.23.3, 00:03:04, Ethernet0/1

R2#show ip ospf database | begin Type-5
Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.101.0   3.3.3.3         139         0x80000001 0x008045 0
192.168.102.0   3.3.3.3         139         0x80000001 0x00754F 0
192.168.103.0   3.3.3.3         139         0x80000001 0x006A59 0
192.168.104.0   3.3.3.3         139         0x80000001 0x005F63 0
192.168.105.0   3.3.3.3         139         0x80000001 0x00546D 0
192.168.106.0   3.3.3.3         139         0x80000001 0x004977 0
192.168.107.0   3.3.3.3         139         0x80000001 0x003E81 0
192.168.108.0   3.3.3.3         139         0x80000001 0x00338B 0
192.168.109.0   3.3.3.3         139         0x80000001 0x002895 0
192.168.110.0   3.3.3.3         139         0x80000001 0x001D9F 0



設定変更(max-lsa)
(1)R3にてmax-lsaを10に設定する。
R2(config)#router ospf 1
R2(config-router)#max-lsa 10 reset-time 30

※数秒後、以下のメッセージが出力される。
May 15 07:20:34.133: %OSPF-4-OSPF_MAX_LSA_THR: Threshold for maximum number of non self-generated LSA has been reached "ospf 1" - 7 LSAs
May 15 07:20:34.133: %OSPF-4-OSPF_MAX_LSA: Maximum number of non self-generated LSA has been exceeded "ospf 1" - 14 LSAs

(2)R3設定確認
R2#show ip ospf | section LSA allowed
 Maximum number of non self-generated LSA allowed 10
    Current number of non self-generated LSA 0
    Threshold for warning message 75%
    Ignore-time 5 minutes, reset-time 30 minutes  //reset-timeが30秒であること
    Ignore-count allowed 5, current ignore-count 1
    Ignoring all neighbors due to max-lsa limit, tme remaining: 00:03:20

(3)R1 ルーティング確認&OSPFネイバー確認
R2にてLSA最大上限数を超過している為、OSPF関連経路を全て受信していない事及びOSPFネイバーが解消されている事を確認する。
R1#sh ip route ospf 

Gateway of last resort is not set

R1#show ip ospf neighbor        
R1#

(4)R3にてmax-lsaを10warning-onlyを有効にする。
R3(config)#router ospf 1
R2(config-router)#max-lsa 10 warning-only 

※数秒後、以下のメッセージが出力される。
May 15 07:25:49.403: %OSPF-4-OSPF_MAX_LSA_THR: Threshold for maximum number of non self-generated LSA has been reached "ospf 1" - 7 LSAs
May 15 07:25:49.403: %OSPF-4-OSPF_MAX_LSA: Maximum number of non self-generated LSA has been exceeded "ospf 1" - 11 LSAs

(5)R3設定確認
R2#show ip ospf | section LSA allowed
 Maximum number of non self-generated LSA allowed 10 (warning-only)
    Current number of non self-generated LSA 14
    Threshold for warning message 75%

(6)R1 ルーティング確認&OSPFネイバー確認
R3でのMax-lsa(警告のみ)により、OSPF関連経路が広告されている事及びネイバーが確立していることを確認する。
R1#show ip route ospf

Gateway of last resort is not set

      2.0.0.0/32 is subnetted, 1 subnets
O        2.2.2.2 [110/11] via 192.168.12.2, 00:01:27, Ethernet0/0
      3.0.0.0/32 is subnetted, 1 subnets
O IA     3.3.3.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
      172.16.0.0/32 is subnetted, 10 subnets
O IA     172.16.1.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.2.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.3.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.4.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.5.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.6.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.7.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.8.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.9.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA     172.16.10.3 [110/21] via 192.168.12.2, 00:01:22, Ethernet0/0
O IA  192.168.23.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.101.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.102.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.103.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.104.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.105.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.106.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.107.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.108.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.109.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0
O E2  192.168.110.0/24 [110/20] via 192.168.12.2, 00:01:22, Ethernet0/0


R1#show ip ospf neighbor 

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.2           1   FULL/BDR        00:00:36    192.168.12.2    Ethernet0/0