路由过滤与引入实验

一.实验拓扑图及实验要求

二.实验思路

1）配置IP地址

2）R1、R2配置RIPv2路由协议，R3、R4配置ospf路由协议，各自协议内部互通

3）在R2上面配置双向路由引入，且在R2RIP视图下通过路由过滤或者路由策略拒绝R4业务网段的引入

4）在R4ospf视图下的进方向或者R3ospf的区域视图下的出方向通过路由过滤拒绝R1的业务网段的路由

5）在R2RIP视图下的g0/0/1口配置静默接口--rip主类宣告将ospf区域0的100.2.2.0/24网段也宣告进去了

三.实验配置

1.配置ip地址

R1:

        [R1]int g0/0/0
        [R1-GigabitEthernet0/0/0]ip add 100.1.1.1 24
        [R1-GigabitEthernet0/0/0]int L0
        [R1-LoopBack0]ip add 192.168.0.1 32
        [R1-LoopBack0]int L1
        [R1-LoopBack1]ip add 192.168.1.1 32

R2:

        [R2]int g0/0/0
        [R2-GigabitEthernet0/0/0]ip add 100.1.1.2 24

        [R2]int g0/0/1
        [R2-GigabitEthernet0/0/1]ip add 100.2.2.2 24

R3：

        [R3]int g0/0/0
        [R3-GigabitEthernet0/0/0]ip add 100.2.2.3 24
        [R3-GigabitEthernet0/0/0]int g0/0/1
        [R3-GigabitEthernet0/0/1]ip add 100.3.3.3 24
        [R3-GigabitEthernet0/0/1]int L0
        [R3-LoopBack0]ip add 192.168.2.1 32
        [R3-LoopBack0]int L1
        [R3-LoopBack1]ip add 192.168.3.1 32

R4：

        [R4]int g0/0/0
        [R4-GigabitEthernet0/0/0]ip add 100.3.3.4 24
        [R4-GigabitEthernet0/0/0]int L0
        [R4-LoopBack0]ip add 192.168.4.1 32
        [R4-LoopBack0]int L1
        [R4-LoopBack1]ip add 192.168.5.1 32

2.配置路由协议后，在R2上配置双向路由引入

R1:

        [R1]rip 1
        [R1-rip-1]v 2

        [R1-rip-1]undo summary 

        [R1-rip-1]network 192.168.0.0
        [R1-rip-1]network 192.168.1.0
        [R1-rip-1]network 100.0.0.0

R2：

        [R2]rip 1
        [R2-rip-1]v 2
        [R2-rip-1]undo summary 
        [R2-rip-1]network 100.0.0.0
        [R2]ospf 1 router-id 2.2.2.2
        [R2-ospf-1]area 0
        [R2-ospf-1-area-0.0.0.0]network 100.2.2.0 0.0.0.255

R3：

        [R3]ospf 1 router-id 3.3.3.3
        [R3-ospf-1]a 0
        [R3-ospf-1-area-0.0.0.0]network 100.2.2.0 0.0.0.255

        [R3-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.1.255
        [R3-ospf-1]a 1
        [R3-ospf-1-area-0.0.0.1]network 100.3.3.0 0.0.0.255

R4：

        [R4]ospf 1 router-id 4.4.4.4
        [R4-ospf-1]a 0
        [R4-ospf-1-area-0.0.0.1]network 100.3.3.0 0.0.0.255

        [R4-ospf-1-area-0.0.0.1]network 192.168.4.0 0.0.1.255

R2：

        [R2]rip 1
        [R2-rip-1]import-route ospf
        [R2-rip-1]q
        [R2]ospf 1
        [R2-ospf-1]import-route rip

3.配置路由过滤或者路由策略

R2（路由策略）：

        [R2-ospf-1]acl 2000
        [R2-acl-basic-2000]rule deny source 192.168.4.0 0.0.1.255
        [R2-acl-basic-2000]rule permit source 0.0.0.0 255.255.255.255
        [R2]route-policy oinr permit node 10

        [R2-route-policy]if-match acl 2000

        [R2-rip-1]import-route ospf route-policy oinr

        R4（路由过滤）：

        [R4]ip ip-prefix rino index 10 deny 192.168.0.0 23 less-equal 32

        [R4]ip ip-prefix rino index 20 permit 0.0.0.0 0 less-equal 32

        [R4-ospf-1]filter-policy ip-prefix rino import

4.沉默接口

        [R2-rip-1]silent-interface GigabitEthernet 0/0/1