IS-IS综合实验

实验要求

1、R1、2、3是Level-1路由器，R6是Level-2路由器，进程为1，自行配置部署System ID

2、R4和R6、R5和R6之间不能有DIS选举。R1、2、3在共享网络中，要求R3为DIS，在R1和R2上配置，且优先级尽量小

3、R6引入10.1.X.0网段，并且标记为100，要求47.0001区域能够通过R4学习到10.1.X.0网段明细，必须保持这些路由的标记为100

4、R2只允许通过缺省路由访问47.0002网络，不能使用ACL和前缀列表

5、区域47.0001所有路由器发送LSP和SNP需要进行认证，认证类型为MD5，密码为huawei
Level-2路由器发送IIH需要进行认证，认证类型为MD5，密码为huawei

配置文件

R1

sy
sy R1
inter loop0
ip add 1.1.1.1 32
inter g0/0/0
ip add 192.168.1.1 24

isis
net 47.0001.111111111111.00
is-level level-1
is-name R1
inter g0/0/0
isis en
inter loop0
isis en

inter g0/0/0
isis dis-pri 0

isis
cost-style wide

isis
area-authentication md5 huawei ip

R2

sy
sy R2
inter loop0
ip add 2.2.2.2 32
inter g0/0/0
ip add 192.168.1.2 24

isis
net 47.0001.222222222222.00
is-level level-1
is-name R2
inter g0/0/0
isis en
inter loop0
isis en

inter g0/0/0
isis dis-pri 0

isis
cost-style wide

route-policy D deny node 10
if-match tag 100
route-policy D permit node 20

isis
filter-policy route-policy D import

isis
area-authentication md5 huawei ip

R3

sy
sy R3
inter loop0
ip add 3.3.3.3 32
inter g0/0/0
ip add 192.168.1.3 24
inter s0/0/0
ip add 34.1.1.3 24
inter s0/0/1
ip add 35.1.1.3 24

isis
net 47.0001.333333333333.00
is-level level-1
is-name R3
inter g0/0/0
isis en
inter loop0
isis en
inter s0/0/0
isis en
inter s0/0/1
isis en

isis
cost-style wide

isis
area-authentication md5 huawei ip

R4

sy
sy R4
inter loop0
ip add 4.4.4.4 32
inte s0/0/0
ip add 34.1.1.4 24
inter g0/0/0
ip add 46.1.1.4 24

isis 
net 47.0001.444444444444.00
is-name R4
inter g0/0/0
isis en
inter loop0
isis en
inter s0/0/0
isis en

inter g0/0/0
isis ci p2p

isis
cost-style wide

inter g0/0/0
isis authentication md5 huawei ip

R5

sy
sy R5
inter loop0
ip add 5.5.5.5 32
inte s0/0/0
ip add 35.1.1.5 24
inter g0/0/0
ip add 56.1.1.5 24

isis 
net 47.0001.555555555555.00
is-name R5
inter g0/0/0
isis en
inter loop0
isis en
inter s0/0/0
isis en

inter g0/0/0
isis ci p2p

isis
cost-style wide

inter g0/0/0
isis authentication md5 huawei ip

R6

sy
sy R6
inter loop0
ip ad 6.6.6.6 32
inter g0/0/1
ip add 46.1.1.6 24
inter g0/0/0
ip add 56.1.1.6 24

isis
net 47.0002.666666666666.00
is-level level-2
is-name R6
inter g0/0/0
isis en
inter loop0
isis en
inter g0/0/1
isis en 

inter loop10
ip ad 10.1.0.1 24
inter loop11
ip add 10.1.1.1 24
inte loop12
ip add 10.1.2.1 24
inter loop13
ip add 10.1.3.1 24

acl 2001
rule permit source 10.1.0.0 0.0.3.255
route-policy IM permit node 10
if-match acl 2001
apply tag 100
route-policy IM permit node 20

isis 
import-route direct route-policy IM

isis
cost-style wide

inter g0/0/0
isis authentication md5 huawei ip
inter g0/0/1
isis authentication md5 huawei ip

作者：DC