HCIA-Datacom lab 5 of 22
Multi-area OSPF with default routes and authentication
Split the network into a backbone and a branch area joined by an ABR, read the link-state database to see how routes cross areas, inject a default route from the internet edge, and protect adjacencies with area and interface authentication.
Run this lab
It needs Lite: its 4 nodes are set to 4 vCPU and 7,168 MB in total. That fits the free demo too.
In your workspace: Shared, then HCIA-Datacom H12-811 guided labs, then 05 - Multi-area OSPF with default routes and authentication
- Level
- Intermediate
- Time
- About 60 minutes
- Nodes need
- 4 vCPU, 7,168 MB
- Smallest plan
- Lite
The scenario
Northwind is growing, and every topology change in one place triggers SPF everywhere. The team splits OSPF into the backbone (area 0), where R2 and R3 live, and a branch area (area 1) behind R1. R2 sits on both sides: it is the area border router (ABR). R3 connects to the internet, simulated by LoopBack1, and will hand everyone a default route. Finally, security wants every adjacency authenticated.
| Link | Network | Area |
|---|---|---|
| R1 GE0/0/0 – R2 GE0/0/0 | 10.0.12.0/24 | 1 |
| R2 GE0/0/1 – R3 GE0/0/1 | 10.0.23.0/24 | 0 |
| R1 GE0/0/1 – PC1 (branch LAN) | 192.168.10.0/24 | 1 |
| Loopbacks 1.1.1.1 / 2.2.2.2 / 3.3.3.3 | /32 | R1: 1; R2, R3: 0 |
What you’ll practise
- Build a two-area OSPF design with an ABR and explain why area 0 must be the backbone
- Identify Router, Network, Summary, ASBR-summary and External LSAs in display ospf lsdb
- Advertise a default route with default-route-advertise
- Configure OSPF MD5 authentication per area and per interface, and recognise an authentication mismatch
The tasks
- Task 0: Load the starting configuration
- Task 1: Build the areas
- Concept: the LSA types you'll meet
- Task 2: Read the database from both sides
- Concept: default routes in OSPF
- Task 3: Hand out a default route from R3
- Concept: OSPF authentication
- Task 4: Authenticate the backbone
- Task 5: Authenticate the branch link
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- R1
GE0/0/0to R2GE0/0/0 - R2
GE0/0/1to R3GE0/0/1 - R1
GE0/0/1to PC1eth0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| R1 | Huawei AR1000V router | huaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn | 1 vCPU, 2,048 MB |
| R2 | Huawei AR1000V router | huaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn | 1 vCPU, 2,048 MB |
| R3 | Huawei AR1000V router | huaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn | 1 vCPU, 2,048 MB |
| PC1 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
HCIA-Datacom H12-811 guided labs.Open
05 - Multi-area OSPF with default routes and authenticationand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More HCIA-Datacom labs
Related labs in other courses
CloudLabBox is independent of Huawei. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.