среда, 26 июня 2013 г.

Quagga ospf openVPN

http://wiki.sys-adm.org.ua/net/quagga-ospf

http://www.opennet.ru/openforum/vsluhforumID10/4519.html
ospf.conf
!
hostname web
password xxx
log file /var/log/quagga/ospfd.log
!
!
interface tun91
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 SHdJLapbQ1
ip ospf cost 10
!
interface tun92
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 SHdJLapbQ1
ip ospf cost 20
!
!
interface tun41
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 SHdJLapbQ1
ip ospf cost 10
!
interface tun42
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 SHdJLapbQ1
ip ospf cost 20
!
!
interface tun111
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 SHdJLapbQ1
ip ospf cost 10
!
interface tun112
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 SHdJLapbQ1
ip ospf cost 20
!
router ospf
ospf router-id 10.10.0.80
redistribute connected route-map Local_Network
network 10.10.9.1/30 area 0.0.0.0
network 10.11.9.1/30 area 0.0.0.0
network 10.10.4.1/30 area 0.0.0.0
network 10.11.4.1/30 area 0.0.0.0
network 10.10.11.1/30 area 0.0.0.0
network 10.11.11.1/30 area 0.0.0.0
area 0.0.0.0 authentication message-digest
!
ip prefix-list Local_Network seq 10 permit 10.1.1.0/24
ip prefix-list Local_Network seq 100 deny any
!
route-map Local_Network permit 10
match ip address prefix-list Local_Network
!
line vty
!



ospf.conf на hm(id10.10.0.9):
!
hostname hm
password xxx
log file /var/log/quagga/ospfd.log
!
!
!
interface eth2
!
interface lo
!
interface tun91
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 SHdJLapbQ1
ip ospf cost 10
!
interface tun92
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 SHdJLapbQ1
ip ospf cost 20
!
router ospf
ospf router-id 10.10.0.9
redistribute connected route-map Local_Network
network 10.10.9.2/30 area 0.0.0.0
network 10.11.9.2/30 area 0.0.0.0
area 0.0.0.0 authentication message-digest
!
ip prefix-list Local_Network seq 10 permit 10.3.9.0/24
ip prefix-list Local_Network seq 100 deny any
!
route-map Local_Network permit 10
match ip address prefix-list Local_Network
!
line vty
!