HCIA-Datacom lab 5 of 22

Multi-area OSPF with default routes and authentication

Split the network into a backbone and a branch area joined by an ABR, read the link-state database to see how routes cross areas, inject a default route from the internet edge, and protect adjacencies with area and interface authentication.

Run this lab

It needs Lite: its 4 nodes are set to 4 vCPU and 7,168 MB in total. That fits the free demo too.

In your workspace: Shared, then HCIA-Datacom H12-811 guided labs, then 05 - Multi-area OSPF with default routes and authentication

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Intermediate
Time
About 60 minutes
Nodes need
4 vCPU, 7,168 MB
Smallest plan
Lite

The scenario

Northwind is growing, and every topology change in one place triggers SPF everywhere. The team splits OSPF into the backbone (area 0), where R2 and R3 live, and a branch area (area 1) behind R1. R2 sits on both sides: it is the area border router (ABR). R3 connects to the internet, simulated by LoopBack1, and will hand everyone a default route. Finally, security wants every adjacency authenticated.

LinkNetworkArea
R1 GE0/0/0 – R2 GE0/0/010.0.12.0/241
R2 GE0/0/1 – R3 GE0/0/110.0.23.0/240
R1 GE0/0/1 – PC1 (branch LAN)192.168.10.0/241
Loopbacks 1.1.1.1 / 2.2.2.2 / 3.3.3.3/32R1: 1; R2, R3: 0

What you’ll practise

  • Build a two-area OSPF design with an ABR and explain why area 0 must be the backbone
  • Identify Router, Network, Summary, ASBR-summary and External LSAs in display ospf lsdb
  • Advertise a default route with default-route-advertise
  • Configure OSPF MD5 authentication per area and per interface, and recognise an authentication mismatch

The tasks

  • Task 0: Load the starting configuration
  • Task 1: Build the areas
  • Concept: the LSA types you'll meet
  • Task 2: Read the database from both sides
  • Concept: default routes in OSPF
  • Task 3: Hand out a default route from R3
  • Concept: OSPF authentication
  • Task 4: Authenticate the backbone
  • Task 5: Authenticate the branch link

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Multi-area OSPF with default routes and authentication4 nodes, 3 links. Every link is listed as text below the diagram.R1R2R3PC1GE0/0/1eth0GE0/0/0GE0/0/0GE0/0/1GE0/0/1
4 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Nodes in Multi-area OSPF with default routes and authentication, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
R1Huawei AR1000V routerhuaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn1 vCPU, 2,048 MB
R2Huawei AR1000V routerhuaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn1 vCPU, 2,048 MB
R3Huawei AR1000V routerhuaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn1 vCPU, 2,048 MB
PC1VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder HCIA-Datacom H12-811 guided labs.

  3. Open 05 - Multi-area OSPF with default routes and authentication and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More HCIA-Datacom labs

All HCIA-Datacom labs

Related labs in other courses

CloudLabBox is independent of Huawei. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.