{"id":201042,"date":"2013-11-06T09:37:02","date_gmt":"2013-11-06T05:37:02","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=201042"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=201042","title":{"rendered":"<span class=\"post_title\">Mikrotik \u0438 OSPF. \u0421 \u0447\u0435\u043c \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0442\u044c\u0441\u044f \u0438 \u043a\u0430\u043a \u043c\u044b \u044d\u0442\u043e \u043f\u043e\u0431\u043e\u0440\u043e\u043b\u0438<\/span>"},"content":{"rendered":"<div class=\"content html_format\">   \t\u0414\u043e\u0431\u0440\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0443\u0442\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0435 \u0434\u0430\u0432\u0430\u043b\u043e \u043d\u0430\u043c \u0436\u0438\u0442\u044c, \u0432\u0437\u0440\u044b\u0432\u0430\u043b\u043e \u043d\u0430\u043c \u043c\u043e\u0437\u0433 \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u2014 Mikrotik \u0438 OSPF.<br \/>  Mikrotik \u0441\u0430\u043c\u0430 \u043f\u043e \u0441\u0435\u0431\u0435 \u043d\u0435\u043f\u043b\u043e\u0445\u0430\u044f \u0436\u0435\u043b\u0435\u0437\u043a\u0430, \u0441 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043a\u0443\u0447\u0435\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e, \u043d\u043e \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043d\u0435 \u0431\u0435\u0437 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432.<br \/>  \u0423 \u043d\u0430\u0441 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441\u0435\u0442\u0438:<br \/>  <img decoding=\"async\" src=\"http:\/\/habr.habrastorage.org\/post_images\/ffc\/f74\/ab9\/ffcf74ab9d86e91e12137e4cefbb1a63.jpg\"\/><br \/>  <a name=\"habracut\"><\/a><br \/>  ROU1 \u2014 Cisco c3845<br \/>  ROU2 \u2014 Cisco c3845<br \/>  \u041c\u04221 \u2014 Mikrotik 1100Ahx2<br \/>  \u041c\u04222 \u2014 Mikrotik 1100Ahx2<br \/>  c3550 \u2014 Cisco c3550<br \/>  GW68 \u2014 MikroTik RB751U-2HnD<br \/>  GW69 \u2014 MikroTik RB751U-2HnD<\/p>\n<p>  \u041d\u0430 ROU1 \u0438 ROU2 \u0443 \u043d\u0430\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u0438 \u0434\u043e MT1 \u0438 \u0434\u043e MT2 (IPSec \u043f\u0440\u043e\u043f\u0443\u0449\u0443), \u0437\u0430\u0432\u0435\u0434\u0435\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 OSPF \u0434\u043b\u044f backbone. \u041e\u0442\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0441\u0435\u0442\u044c 10.0.0.0\/19:<\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f ROU1 \u0438 ROU2<\/b><\/p>\n<div class=\"spoiler_text\">#ROU1<br \/>  interface Tunnel100641<br \/>   description # XXX_IRK64_YYY #<br \/>   ip address 172.20.64.1 255.255.255.252<br \/>   ip access-group DMZ_IN in<br \/>   ip access-group DMZ_OUT out<br \/>   ip mtu 1450<br \/>   ip ospf network point-to-point<br \/>   ip ospf cost 10<br \/>   ip ospf mtu-ignore<br \/>   ip ospf 1 area 0.0.0.0<br \/>   tunnel source 194.x.x.x<br \/>   tunnel mode ipip<br \/>   tunnel destination 195.x.x.x<\/p>\n<p>  router ospf 1<br \/>   router-id 255.255.255.255<br \/>   redistribute ospf 100 metric-type 1 subnets route-map OSPF_100_to_BB<br \/>   network 172.20.64.0 0.0.0.3 area 0.0.0.0<\/p>\n<p>  #ROU2<br \/>  interface Tunnel100642<br \/>   description # XXX_IRK64_YYY#<br \/>   ip address 172.20.64.5 255.255.255.252<br \/>   ip access-group DMZ_IN in<br \/>   ip access-group DMZ_OUT out<br \/>   ip mtu 1450<br \/>   ip ospf network point-to-point<br \/>   ip ospf cost 40<br \/>   ip ospf mtu-ignore<br \/>   ip ospf 1 area 0.0.0.0<br \/>   tunnel source 109.x.x.x<br \/>   tunnel mode ipip<br \/>   tunnel destination 85.x.x.x<\/p>\n<p>  router ospf 1<br \/>   router-id 255.255.255.254<br \/>   redistribute ospf 100 metric-type 1 subnets route-map OSPF_100_to_BB<br \/>   network 172.20.64.4 0.0.0.3 area 0.0.0.0<\/div>\n<\/div>\n<p>  \u041d\u0430 MT1 \u0438 MT2 \u0430\u0434\u0440\u0435\u0441\u0430 \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e 172.20.64.2 \u0438 172.20.64.6. Area backbone \u0442\u0430\u043c \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.<\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f MT1 \u0438 MT2<\/b><\/p>\n<div class=\"spoiler_text\">#MT1<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c<br \/>  \/interface ipip add comment=YYY_VL03_ROU1 disabled=no local-address=195.x.x.x mtu=1450 name=ipip_yyy_vl03_rou1 remote-address=194.x.x.x<\/p>\n<p>  #\u041f\u043e\u0432\u0435\u0441\u0438\u043c \u043d\u0430 \u043d\u0435\u0433\u043e \u0430\u0434\u0440\u0435\u0441<br \/>  \/ip address add address=172.20.64.2\/30 comment=YYY_VL03_XXX interface=ipip_yyy_vl03_rou1<\/p>\n<p>  #\u041f\u043e\u043f\u0440\u0430\u0432\u0438\u043c instance, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0438 id<br \/>  \/routing ospf instance set [ find default=yes ] in-filter=ospf-default-in out-filter=ospf-default-out redistribute-other-ospf=as-type-1 router-id=30.0.64.1<\/p>\n<p>  #\u0414\u043e\u0431\u0430\u0432\u0438\u043c \u043f\u043e\u0434\u0441\u0435\u0442\u044c \u0432 area backbone<br \/>  \/routing ospf network add area=backbone comment=\u00abBackbone Network VL\u00bb network=172.20.64.0\/30<\/p>\n<p>  #\u0421\u0434\u0435\u043b\u0430\u0435\u043c \u0444\u0438\u043b\u044c\u0442\u0440\u044b<br \/>  \/routing filter add action=accept chain=ospf-default-out prefix=10.0.64.0\/19<br \/>  \/routing filter add action=accept chain=ospf-default-out prefix=172.20.64.0\/19<br \/>  \/routing filter add action=discard chain=ospf-default-out<br \/>  \/routing filter add action=accept chain=ospf-default-in prefix=10.0.0.0\/19<br \/>  \/routing filter add action=accept chain=ospf-default-in prefix=172.20.0.0\/19<br \/>  \/routing filter add action=discard chain=ospf-default-in<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0438\u043d\u0442\u0435\u0444\u0435\u0439\u0441 OSPF<br \/>  \/routing ospf interface add authentication-key=0 interface=ipip_yyy_vl03_rou1 network-type=point-to-point priority=255<\/p>\n<p>  #MT2<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c<br \/>  \/interface ipip add comment=YYY_VL03_ROU2 disabled=no local-address=85.x.x.x mtu=1450 name=ipip_yyy_vl03_rou2 remote-address=109.x.x.x<\/p>\n<p>  #\u041f\u043e\u0432\u0435\u0441\u0438\u043c \u043d\u0430 \u043d\u0435\u0433\u043e \u0430\u0434\u0440\u0435\u0441<br \/>  \/ip address add address=172.20.64.6\/30 comment=YYY_VL03_ROU2 interface=ipip_yyy_vl03_rou2<\/p>\n<p>  #\u041f\u043e\u043f\u0440\u0430\u0432\u0438\u043c instance, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0438 id<br \/>  \/routing ospf instance set [ find default=yes ] in-filter=ospf-default-in out-filter=ospf-default-out redistribute-other-ospf=as-type-1 router-id=30.0.64.2<\/p>\n<p>  #\u0414\u043e\u0431\u0430\u0432\u0438\u043c \u043f\u043e\u0434\u0441\u0435\u0442\u044c \u0432 area backbone<br \/>  \/routing ospf network add area=backbone comment=\u00abBackbone Network VL\u00bb network=172.20.64.4\/30<\/p>\n<p>  #\u0421\u0434\u0435\u043b\u0430\u0435\u043c \u0444\u0438\u043b\u044c\u0442\u0440\u044b<br \/>  \/routing filter add action=accept chain=ospf-default-out prefix=10.0.64.0\/19<br \/>  \/routing filter add action=accept chain=ospf-default-out prefix=172.20.64.0\/19<br \/>  \/routing filter add action=discard chain=ospf-default-out<br \/>  \/routing filter add action=accept chain=ospf-default-in prefix=10.0.0.0\/19<br \/>  \/routing filter add action=accept chain=ospf-default-in prefix=172.20.0.0\/19<br \/>  \/routing filter add action=discard chain=ospf-default-in<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0438\u043d\u0442\u0435\u0444\u0435\u0439\u0441 OSPF<br \/>  \/routing ospf interface add authentication-key=0 cost=40 interface=ipip_yyy_vl03_rou2 network-type=point-to-point priority=200<\/div>\n<\/div>\n<p>  \u041d\u043e \u0443 \u043d\u0430\u0441 \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u0435\u0449\u0435 \u0441\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 \u041c\u04221 \u0438 \u041c\u04222 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e.<br \/>  \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0443 \u043d\u0430\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u043e\u0432\u0430\u044f area IRK. Cisco c3550 \u0443 \u043d\u0430\u0441 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0438\u0442\u0447, \u043e\u043d \u0443 \u043d\u0430\u0441 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043d\u0430 \u043d\u0435\u043c \u0437\u0430\u0432\u0435\u0434\u0435\u043d\u044b \u0432\u0441\u0435 \u0432\u043b\u0430\u043d\u044b, \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0433\u043e \u043f\u0440\u043e\u0431\u0440\u043e\u0448\u0435\u043d\u044b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b, \u043d\u0430 \u043d\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d vrf \u0438 \u0442.\u0434. (\u0435\u0441\u043b\u0438 \u0431\u0443\u0434\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0442\u043e \u043f\u043e\u0442\u043e\u043c \u043e\u043f\u0438\u0448\u0443 \u0432\u0441\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0442\u0438)<br \/>  \u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u043d\u0430 c3550 area IRK \u0438 \u0434\u0432\u0430 vlan \u0434\u043b\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 MT1 \u0438 MT2. Area IRK \u2014 \u044d\u0442\u043e \u0433\u043b\u0430\u0432\u043d\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u0420\u0423 \u2014 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0437\u043b\u0430, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0432\u0441\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043a \u0420\u0423 \u0440\u043e\u0443\u0442\u0435\u0440\u044b.  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f c3550<\/b><\/p>\n<div class=\"spoiler_text\">interface Vlan66<br \/>   description # MGM 1 VLAN #<br \/>   ip address 172.20.64.98 255.255.255.252<br \/>   ip policy route-map test<br \/>   ip ospf cost 10<br \/>   ip ospf hello-interval 5<br \/>   ip ospf dead-interval 10<br \/>   ip ospf priority 100<br \/>  !<br \/>  interface Vlan67<br \/>   description # MGM 2 VLAN #<br \/>   ip address 172.20.64.102 255.255.255.252<br \/>   ip ospf cost 10<br \/>   ip ospf hello-interval 5<br \/>   ip ospf dead-interval 10<br \/>   ip ospf priority 50<\/p>\n<p>  router ospf 100<br \/>   router-id 10.0.64.0<br \/>   log-adjacency-changes<br \/>   redistribute connected metric-type 1 subnets<br \/>   redistribute static metric-type 1 subnets<br \/>   network 172.20.64.96 0.0.0.3 area 10.0.64.0<br \/>   network 172.20.64.100 0.0.0.3 area 10.0.64.0<\/p>\n<p>  #\u0414\u0432\u0430 \u043d\u0443\u043b\u044c\u0440\u043e\u0443\u0442\u0430<\/p>\n<p>  ip route 10.0.64.0 255.255.224.0 Null0 250<br \/>  ip route 172.20.64.0 255.255.224.0 Null0 250  <\/div>\n<\/div>\n<p>  \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u0440\u0438\u043c\u0435\u043c \u043d\u0430 \u041c\u04221 \u0438 \u041c\u04222 \u044d\u0442\u0438 vlan, \u0438 \u0437\u0430\u0432\u0435\u0434\u0435\u043c \u043d\u043e\u0432\u044b\u0439 ospf instance \u0438 area, \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u043b\u0438\u043d\u043a \u043c\u0435\u0436\u0434\u0443 MT1 \u0438 \u041c\u04222 \u0438 \u043d\u0430\u0432\u0435\u0448\u0430\u0435\u043c \u0430\u0434\u0440\u0435\u0441.  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f MT1 \u0438 MT2<\/b><\/p>\n<div class=\"spoiler_text\">#\u041c\u04221<br \/>  #\u041f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u043c vlan<br \/>  \/interface vlan add interface=ether1 l2mtu=1594 name=vlan_66_mgm vlan-id=66<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0435\u043c area<br \/>  \/routing ospf area add area-id=10.0.64.0 instance=IRK name=IRK<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0435\u043c instance<br \/>  \/routing ospf instance add distribute-default=if-installed-as-type-1 name=IRK redistribute-other-ospf=as-type-1 redistribute-static=as-type-1 router-id=10.0.64.1<\/p>\n<p>  #\u0412\u0435\u0448\u0430\u0435\u043c IP<br \/>  \/ip address add address=172.20.64.97\/30 comment=MGM_Interface interface=vlan_66_mgm<br \/>  \/ip address add address=172.20.64.105\/30 comment=MT-MT_Interface interface=ether2<\/p>\n<p>  #\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \u0432 area IRK<br \/>  \/routing ospf network add area=IRK network=172.20.64.96\/30<br \/>  \/routing ospf network add area=IRK network=172.20.64.104\/30<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0435\u043c ospf interface<br \/>  \/routing ospf interface add dead-interval=10s hello-interval=5s interface=vlan_66_mgm network-type=broadcast priority=255<\/p>\n<p>  #\u041c\u04222<br \/>  #\u041f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u043c vlan<br \/>  \/interface vlan add interface=ether1 l2mtu=1594 name=vlan_67_mgm vlan-id=67<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0435\u043c area<br \/>  \/routing ospf area add area-id=10.0.64.0 instance=IRK name=IRK<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0435\u043c instance<br \/>  \/routing ospf instance add distribute-default=if-installed-as-type-1 name=IRK redistribute-other-ospf=as-type-1 redistribute-static=as-type-1 router-id=10.0.64.2<\/p>\n<p>  #\u0412\u0435\u0448\u0430\u0435\u043c IP<br \/>  \/ip address add address=172.20.64.101\/30 comment=MGM_Interface interface=vlan_67_mgm<br \/>  \/ip address add address=172.20.64.106\/30 comment=MT-MT_Interface interface=ether2<\/p>\n<p>  #\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \u0432 area IRK<br \/>  \/routing ospf network add area=IRK network=172.20.64.100\/30<br \/>  \/routing ospf network add area=IRK network=172.20.64.104\/30<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0435\u043c ospf interface<br \/>  \/routing ospf interface add dead-interval=10s hello-interval=5s interface=vlan_67_mgm network-type=broadcast priority=200<\/div>\n<\/div>\n<p>  \u0412\u0440\u043e\u0434\u0435 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0437\u0430\u0431\u044b\u043b, \u0447\u0442\u043e \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438:<\/p>\n<p>  1. \u0423 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c \u0434\u0432\u0430 \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u0434\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u0441 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u0430 \u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443.<br \/>  2. Cost 10 \u0438 40 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u0422\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u0438 \u0436\u0438\u0432\u043e\u043c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0440\u043e\u0443\u0442\u0435\u0440\u0435 (\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0435) MT1, \u0440\u043e\u0443\u0442 \u0438\u0437 backbone 10.0.0.0\/19 \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043c \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e ROU1, \u043f\u0440\u0438 \u043c\u0435\u0440\u0442\u0432\u043e\u043c \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e ROU2<br \/>  3. \u0423 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0439 \u043b\u0438\u043d\u043a \u043c\u0435\u0436\u0434\u0443 MT1 \u0438 MT2, \u0434\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0433\u043e\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0432\u0441\u0435\u0433\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 c3550.<\/p>\n<p>  \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043b\u0438, \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438. \u0412\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442:<\/p>\n<p>  #MT1<br \/>  ADo dst-address=10.0.0.0\/19 gateway=172.20.64.1 gateway-status=172.20.64.1 reachable via ipip_yyy_vl03_rou1 distance=110 scope=20 target-scope=10 ospf-metric=40 ospf-type=external-type-1<\/p>\n<p>  #MT2<br \/>  ADo dst-address=10.0.0.0\/19 gateway=172.20.64.105 gateway-status=172.20.64.105 reachable via ether2 distance=110 scope=20 target-scope=10 ospf-metric=50 ospf-type=external-type-1<\/p>\n<p>  \u041d\u0430 \u041c\u04222 \u0440\u043e\u0443\u0442 \u0434\u043e 10\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 ether2, \u043a\u0430\u043a \u0432 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u0438 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c.<\/p>\n<p>  <b>\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u21161:<\/b><\/p>\n<p>  \u041e\u0434\u043d\u0430\u0436\u0434\u044b, \u043d\u0430 \u041c\u04221 \u0443\u043c\u0438\u0440\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440. \u041f\u043e\u0434\u0441\u0435\u0442\u044c 10.0.0.0\/19 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e ROU2, \u0432\u0441\u0435 \u043a\u0430\u043a \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c:<\/p>\n<p>  #MT2<br \/>  ADo dst-address=10.0.0.0\/19 gateway=172.20.64.5 gateway-status=172.20.64.5 reachable via ipip_yyy_vl03_rou2 distance=110 scope=20 target-scope=10 ospf-metric=70 ospf-type=external-type-1 <\/p>\n<p>  \u041d\u041e! \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043d\u0430 \u041c\u04221, \u043c\u044b \u0432\u0438\u0434\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n<p>  #MT1<br \/>  ADo dst-address=10.0.0.0\/19 gateway=172.20.64.1 gateway-status=172.20.64.1 reachable via ipip_yyy_vl03_rou1 distance=110 scope=20 target-scope=10 ospf-metric=40 ospf-type=external-type-1<\/p>\n<p>  #MT2<br \/>  ADo dst-address=10.0.0.0\/19 gateway=172.20.64.5 gateway-status=172.20.64.5 reachable via ipip_yyy_vl03_rou2 distance=110 scope=20 target-scope=10 ospf-metric=70 ospf-type=external-type-1 <\/p>\n<p>  \u0412\u0438\u0434\u0438\u043c, \u0447\u0442\u043e \u043a\u0430\u0436\u0434\u044b\u0439 \u0440\u043e\u0443\u0442\u0435\u0440 \u0433\u043b\u044f\u0434\u0438\u0442 \u0432 \u0441\u0432\u043e\u0439 \u0442\u0443\u043d\u043d\u0435\u043b\u044c. \u0427\u0442\u043e \u043d\u0430\u0441 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442. \u041f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c \u041c\u04222. \u041e\u043d \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0440\u043e\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 ether2 \u043e\u0442 \u041c\u04221. \u041d\u0435\u043f\u043e\u0440\u044f\u0434\u043e\u043a. <\/p>\n<p>  \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043c\u044b \u0437\u0430\u0432\u0435\u043b\u0438 \u043d\u0430 ROU1 \u0438 ROU2 \u0432\u0441\u0435 area \u0438\u0437 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0437\u043b\u043e\u0432. \u0412\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u043e \u043e\u0447\u0435\u043d\u044c \u043a\u0440\u0430\u0441\u0438\u0432\u043e, \u043f\u043e\u043a\u0430 \u043e\u0434\u043d\u0430\u0436\u0434\u044b \u043d\u0430\u0448\u0438 \u0446\u0438\u0441\u043a\u0438 \u043d\u0435 \u0441\u043a\u0430\u0437\u0430\u043b\u0438: too many routing processes<\/p>\n<p>  \u0418 \u043c\u044b \u043e\u043f\u044f\u0442\u044c \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 backbone. \u0414\u043e\u043b\u0433\u0438\u0435 \u0431\u0438\u0442\u0432\u044b \u0441 \u0441\u0430\u043f\u043f\u043e\u0440\u0442\u043e\u043c \u043d\u0438 \u043a \u0447\u0435\u043c\u0443 \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442, \u043d\u043e \u0432 \u043e\u0434\u0438\u043d \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u043e\u0442\u0432\u0435\u0442, \u0447\u0442\u043e \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0440\u043e\u0443\u0442\u043e\u0432 \u043c\u0435\u0436\u0434\u0443 \u044d\u0440\u0438\u044f\u043c\u0438 (\u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u043e\u0443\u0442 \u0438\u0437 backbone \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 IRK),<br \/>  \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u043e\u0443\u0442\u044b. \u0418 \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u043a\u0430\u0440\u0442\u0438\u043d\u0443, \u0447\u0442\u043e \u043a\u0430\u0436\u0434\u044b\u0439 \u0440\u043e\u0443\u0442\u0435\u0440 \u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u0432 \u0441\u0432\u043e\u0439 \u0442\u0443\u043d\u043d\u0435\u043b\u044c. <br \/>  \u0422\u043e\u0433\u0434\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442 \u0441\u0430\u043c\u043e:<br \/>  \u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c IP \u043d\u0430 ether2, \u0432\u043d\u043e\u0441\u0438\u043c \u043d\u043e\u0432\u0443\u044e \u043f\u043e\u0434\u0441\u0435\u0442\u044c \u0432 backbone.<\/p>\n<p>  #MT1 <br \/>  \/ip address add address=172.20.64.121\/30 comment=\u00abMT-MT BB\u00bb interface=ether2<br \/>  \/routing ospf network add area=backbone network=172.20.64.120\/30<\/p>\n<p>  #\u0417\u0430\u043f\u0440\u0435\u0449\u0430\u0435\u043c \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u0440\u043e\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 IRK<br \/>  \/routing filter add action=discard chain=ospf-in prefix=10.0.0.0\/19<\/p>\n<p>  #MT2<br \/>  \/ip address add address=172.20.64.122\/30 comment=\u00abMT-MT BB\u00bb interface=ether2<br \/>  \/routing ospf network add area=backbone network=172.20.64.120\/30<\/p>\n<p>  #\u0417\u0430\u043f\u0440\u0435\u0449\u0430\u0435\u043c \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u0440\u043e\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 IRK<br \/>  \/routing filter add action=discard chain=ospf-in prefix=10.0.0.0\/19<\/p>\n<p>  \u0418 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c, \u0447\u0442\u043e \u0440\u043e\u0443\u0442 10.0.0.0\/19 \u043d\u0435 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0447\u0443\u0436\u0443\u044e \u044d\u0440\u0438\u044e, \u0430 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u043e\u0434\u043d\u043e\u0439. \u0424\u0443\u0444, \u043e\u0434\u043d\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0431\u0435\u0434\u0438\u043b\u0438.<\/p>\n<p>  \u0421\u0435\u0439\u0447\u0430\u0441 \u0434\u043b\u044f \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433 GW, \u043a\u043e\u043d\u0444\u0438\u0433 \u043d\u0430 \u041c\u04221 \u0438 \u041c\u04222 \u044f \u043e\u043f\u0443\u0449\u0443, \u0442\u0430\u043c \u043d\u0435\u0442 \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e.<\/p>\n<p>  \u041d\u0430 \u0440\u0438\u0441\u0443\u043d\u043a\u0435 \u0443 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c GW68 \u0438 GW69, \u044f \u043f\u0440\u0438\u0432\u0435\u0434\u0443 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438 \u0432 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0438:<\/p>\n<p>  \u041d\u0430 Mikrotik 751:<br \/>  ether2 \u2014 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0439 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440<br \/>  ether3 \u2014 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440<br \/>  ether5 \u2014 LAN<br \/>  \u0412\u043e\u0437\u043d\u0438\u043a\u043d\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441, \u043f\u043e\u0447\u0435\u043c\u0443 \u043d\u0435 ether2 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440. \u0421\u0434\u0435\u043b\u0430\u043b\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 ether1 \u2014 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440, \u043d\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u0440\u0442 \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u043f\u043e\u043b\u0443\u0441\u043e\u0444\u0442\u043e\u0432\u044b\u0439 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c IPSec \u0431\u044b\u043b\u0430 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0438\u043a\u0430\u043a\u0430\u044f, \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u043b\u0438 \u043d\u0430 ether3, \u0447\u0442\u043e\u0431 \u0441\u0438\u043b\u044c\u043d\u043e \u043d\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433.<\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f GW68<\/b><\/p>\n<div class=\"spoiler_text\">#\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u0438<br \/>  \/interface ipip add comment=X_GW64_X disabled=no local-address=195.x.x.x mtu=1440 name=ipip_x_gw64_x remote-address=195.x.x.x<br \/>  \/interface ipip add comment=Y_GW64_Y disabled=no local-address=87.x.x.x mtu=1440 name=ipip_y_gw64_y remote-address=85.x.x.x<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c bridge, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043c wifi ap \u0438 ether5<br \/>  \/interface bridge add l2mtu=1594 name=bridge_private<br \/>  \/interface bridge port add bridge=bridge_private interface=ether5<br \/>  \/interface bridge port add bridge=bridge_private interface=wlan_private<\/p>\n<p>  #\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c DHCP<br \/>  \/ip pool add name=10.0.68.0 ranges=10.0.68.64-10.0.68.160<br \/>  \/ip dhcp-server add address-pool=10.0.68.0 disabled=no interface=bridge_private name=10.0.68.0<br \/>  \/ip dhcp-server network add address=10.0.68.0\/24 dns-server=10.0.64.14,10.0.3.6 domain=partner.ru gateway=10.0.68.1<\/p>\n<p>  #\u041f\u043e\u0432\u0435\u0441\u0438\u043c IP<br \/>  \/ip address add address=10.0.68.1\/24 comment=LAN interface=bridge_private<br \/>  \/ip address add address=172.20.68.2\/30 comment=X_GW64_X interface=ipip_x_gw64_x<br \/>  \/ip address add address=172.20.68.6\/30 comment=Y_GW64_Y interface=ipip_y_gw64_y<br \/>  \/ip address add address=195.x.x.x\/30 comment=X interface=ether3<br \/>  \/ip address add address=87.x.x.x\/30 comment=Y interface=ether2<\/p>\n<p>  #\u0414\u043e\u0431\u0430\u0432\u0438\u043c \u0440\u043e\u0443\u0442\u044b \u0434\u043e \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u041c\u04221 \u0438 \u041c\u04222 \u0447\u0435\u0440\u0435\u0437 \u0448\u043b\u044e\u0437\u044b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432<br \/>  \/ip route add check-gateway=ping comment=Route_over_Y_to_Y distance=1 dst-address=85.x.x.x\/32 gateway=1.1.1.1<br \/>  \/ip route add check-gateway=ping comment=Route_over_X_to_X distance=1 dst-address=195.x.x.x\/32 gateway=2.2.2.2<\/p>\n<p>  #\u0414\u043e\u0431\u0430\u0432\u0438\u043c area \u0438 instance, network \u0438 ospf interface<br \/>  \/routing ospf instance set [ find default=yes ] disabled=yes<br \/>  \/routing ospf instance add name=IRK router-id=10.0.68.1<br \/>  \/routing ospf area add area-id=10.0.64.0 instance=IRK name=IRK<br \/>  \/routing ospf network add area=IRK network=172.20.68.0\/30<br \/>  \/routing ospf network add area=IRK network=172.20.68.4\/30<br \/>  \/routing ospf network add area=IRK network=10.0.68.0\/24<br \/>  \/routing ospf interface add authentication=md5 authentication-key=0 interface=ipip_x_gw64_x network-type=point-to-point priority=0<br \/>  \/routing ospf interface add authentication=md5 authentication-key=0 cost=40 interface=ipip_y_gw64_y network-type=point-to-point priority=0<br \/>  \/routing ospf interface add authentication=md5 authentication-key=0 interface=bridge_private network-type=broadcast passive=yes  <\/div>\n<\/div>\n<p>  \u041a\u0430\u043a \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442:<\/p>\n<p>  GW68 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0430 \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u0434\u043e \u041c\u04221 \u0438 \u0434\u043e \u041c\u04222, \u043a\u0430\u0436\u0434\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430. \u041d\u0430 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u0435 \u043d\u0435\u0442 \u0434\u0435\u0444\u043e\u043b\u0442\u0430, \u0430\u0434\u0440\u0435\u0441\u0430 \u041c\u04221 \u0438 \u041c\u04222 \u043f\u0440\u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0441\u0442\u0430\u0442\u0438\u043a\u0430\u043c\u0438.<br \/>  \u041d\u0430 \u0442\u0443\u043d\u043d\u0435\u043b\u0435 \u0434\u043e MT1 \u0441\u0442\u043e\u0438\u0442 cost 10, \u043d\u0430 \u0442\u0443\u043d\u043d\u0435\u043b\u0435 \u0434\u043e \u041cT2 cost 40. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u043e\u0436\u0438\u0432\u0430\u0435\u0442, \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u0434\u0435\u0444\u043e\u043b\u0442 \u0438 \u0432\u0441\u0435 \u0440\u043e\u0443\u0442\u044b \u0441 \u041c\u04221 \u0447\u0435\u0440\u0435\u0437 OSPF. \u0412\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0437\u0430\u0432\u0435\u0440\u043d\u0443\u0442 \u043d\u0430 \u041c\u04221. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043e\u0442\u0432\u0430\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f,<br \/>  \u043f\u043e \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044e \u0442\u0430\u0439\u043c\u0435\u0440\u0430 OSPF, \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0440\u043e\u0443\u0442\u044b \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e \u041c\u04222.<\/p>\n<p>  <b>\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 2:<\/b><\/p>\n<p>  \u041f\u0440\u0438 \u0436\u0438\u0432\u043e\u043c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u0430\u043d\u0430\u043b\u0435, \u043c\u044b \u0432\u0438\u0434\u0438\u043c \u0432 \u043b\u043e\u0433\u0435 GW68 <\/p>\n<p>  20:12:26 route,ospf,info Database Description packet has different master status flag <br \/>  20:12:26 route,ospf,info new master flag=false <\/p>\n<p>  \u0412 \u044d\u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u0443 \u043d\u0430\u0441 \u0442\u0440\u0430\u0444\u0438\u043a \u0441\u0430\u043c \u043f\u043e \u0441\u0435\u0431\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0431\u0435\u0436\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e MT2. \u0422\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e \u041c\u04221 \u0436\u0438\u0432\u043e\u0439, \u0430 \u0442\u0440\u0430\u0444\u0438\u043a \u0431\u0435\u0436\u0438\u0442 \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e \u041c\u04222. \u0410 \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u0430 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445 \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u0437\u0435\u0440\u0432 \u043f\u043e\u043c\u0435\u0433\u0430\u0431\u0430\u0439\u0442\u043d\u044b\u0439,<br \/>  \u0442\u043e \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u0432\u044b\u0441\u0430\u0441\u044b\u0432\u0430\u043d\u0438\u0435 \u0434\u0435\u043d\u0435\u0433 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043d\u0430 \u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d. <br \/>  \u0427\u0442\u043e\u0431\u044b \u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0441\u0435 \u0432 \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e \u041c\u04221 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0431\u044b\u043b\u043e \u043d\u0430 \u041c\u04221 \u0432\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438 \u043e\u043f\u044f\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e GW68. \u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0433\u043e\u0440\u043e\u0434\u0430\u0445, \u0438 \u043d\u0435 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445.<br \/>  \u041d\u0430 \u0444\u043e\u0440\u0443\u043c\u0435 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u0430, \u0432 \u0442\u0435\u0445. \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u043d\u0438\u043a\u0442\u043e \u043d\u0430\u043c \u043d\u0435 \u043f\u043e\u043c\u043e\u0433. \u041e\u0434\u043d\u0430\u0436\u0434\u044b \u043c\u043e\u0439 \u043a\u043e\u043b\u043b\u0435\u0433\u0430, \u043f\u044b\u0442\u0430\u044f\u0441\u044c \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0442\u0443\u043d\u043d\u0435\u043b\u044c MT1-Juniper SRX-650, \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0441\u044f \u043a\u0443\u0447\u0435\u0439 \u0430\u043b\u043a\u043e\u0433\u043e\u043b\u044f, \u0441\u043d\u0438\u0444\u0444\u0435\u0440\u043e\u043c \u0438 \u0434\u0435\u0431\u0430\u0433\u0433\u0435\u0440\u043e\u043c:)<br \/>  \u0418 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u044f IPSec, \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 OSPF \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u0430. \u041c\u044b \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u0445 OSPF \u0438 \u0432\u0443\u0430\u043b\u044f, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0430\u043c\u0430 \u0441\u043e\u0431\u043e\u0439 \u0438\u0441\u0447\u0435\u0437\u043b\u0430.<br \/>  \u041a\u0430\u043a \u0442\u0430\u043c \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f, \u0433\u0434\u0435 \u0441\u0431\u043e\u0439, \u0441\u0435\u0439\u0447\u0430\u0441 \u043d\u0435 \u043f\u043e\u043c\u043d\u0438\u0442 \u043d\u0438 \u043e\u043d, \u043d\u0438 \u044f. \u041d\u043e \u0432\u043e\u043f\u0440\u043e\u0441 \u0440\u0435\u0448\u0435\u043d. \u041f\u043e\u0447\u0435\u043c\u0443 \u0433\u0434\u0435-\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u043e \u043e\u0442\u043b\u0438\u0447\u043d\u043e \u0438 \u0441 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439, \u044f \u043d\u0435 \u043c\u043e\u0433\u0443 \u0441\u043a\u0430\u0437\u0430\u0442\u044c.<\/p>\n<p>  \u0421 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0433\u0430\u0434\u0430\u0442\u044c \u043d\u0430 \u043a\u043e\u0444\u0435\u0439\u043d\u043e\u0439 \u0433\u0443\u0449\u0435, \u0442\u0430\u043a \u043a\u0430\u043a \u043a\u0430\u0436\u0434\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 \u0441\u0430\u043f\u043f\u043e\u0440\u0442\u0430 \u2014 \u043d\u043e\u0432\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441, \u043a\u0430\u0436\u0434\u0430\u044f \u043d\u043e\u0432\u0430\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u0434\u0430\u0440\u0438\u0442 \u043d\u043e\u0432\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443:)    \t<\/p>\n<div class=\"clear\"><\/div>\n<\/p><\/div>\n<p> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"http:\/\/habrahabr.ru\/post\/201042\/\"> http:\/\/habrahabr.ru\/post\/201042\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div class=\"content html_format\">   \t\u0414\u043e\u0431\u0440\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0443\u0442\u043e\u043a. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0435 \u0434\u0430\u0432\u0430\u043b\u043e \u043d\u0430\u043c \u0436\u0438\u0442\u044c, \u0432\u0437\u0440\u044b\u0432\u0430\u043b\u043e \u043d\u0430\u043c \u043c\u043e\u0437\u0433 \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u2014 Mikrotik \u0438 OSPF.<br \/>  Mikrotik \u0441\u0430\u043c\u0430 \u043f\u043e \u0441\u0435\u0431\u0435 \u043d\u0435\u043f\u043b\u043e\u0445\u0430\u044f \u0436\u0435\u043b\u0435\u0437\u043a\u0430, \u0441 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043a\u0443\u0447\u0435\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e, \u043d\u043e \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043d\u0435 \u0431\u0435\u0437 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432.<br \/>  \u0423 \u043d\u0430\u0441 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0441\u0435\u0442\u0438:<br \/>  <img decoding=\"async\" src=\"http:\/\/habr.habrastorage.org\/post_images\/ffc\/f74\/ab9\/ffcf74ab9d86e91e12137e4cefbb1a63.jpg\"\/>  <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-201042","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/201042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=201042"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/201042\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=201042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=201042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=201042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}