HCIA---第五天动态路由

要求：

1. R3环回为3.3.3.0/24
2. 其他基于192.168.1.0/24
3. R1,R2基于两个环回
4. 整个网络运行RIPV2,但不能直接宣告R3的环回
5. 全网可达，保障更新安全，减少路由条目数量，避免环路

分析：

1.拓扑设计 – IP地址规划

192.168.1.0/26
192.168.1.64/26
192.168.1.128/26
192.168.1.192/26
两个用户
AR1:192.168.1.64/26
AR2:192.168.1.128/26
一个主干
192.168.1.0/26 192.168.1.0/30 192.168.1.4/30

2.配置

1）底层–根据所分配的IP为R1,R2设计两个环回，
2）使用缺省让整个网络运行RIPV2,但不能直接宣告R3的环回
3）路由–全网可达，保障更新安全，减少路由条目数量，避免环路

拓扑设计 – IP地址规划

IP配置

AR1

[r1]interface LoopBack 0
[r1-LoopBack0]ip address 192.168.1.65 27
[r1-LoopBack0]q
[r1]interface LoopBack 1
[r1-LoopBack1]ip address 192.168.1.97 27
[r1-LoopBack1]q
[r1]
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 30
[r1-GigabitEthernet0/0/0]q

AR2

[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add
[R2-GigabitEthernet0/0/0]ip address 192.168.1.2 30
[R2-GigabitEthernet0/0/0]q
[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]ip address 192.168.1.5 30
[R2-GigabitEthernet0/0/1]q
AR3
[R2]interface LoopBack 0
[R2-LoopBack0]ip address 192.168.1.129 27
[R2-LoopBack0]q
[R2]interface LoopBack 1
[R2-LoopBack1]ip address 192.168.1.161 27
[R2-LoopBack1]q

AR3

[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ip address 192.168.1.6 30
[r3-GigabitEthernet0/0/0]q
[r3]int LoopBack 0
[r3-LoopBack0]ip address 3.3.3.3 24
[r3-LoopBack0]q

ARP

AR1

[r1]rip
[r1-rip-1]version 2
[r1-rip-1]network 192.168.1.0
[r1-rip-1]q

AR2

[R2]rip
[R2-rip-1]net
[R2-rip-1]network 192.169.1.0
[R2-rip-1]q

AR3

[r3]rip
[r3-rip-1]version 2
[r3-rip-1]network 192.168.1.0
[r3-rip-1]q

AR3 缺省路由

[r3]
[r3]rip
[r3-rip-1]default-route originate
[r3-rip-1]q

认证----保障更新安全

AR1

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 123456
[R1-GigabitEthernet0/0/0]q

AR2

[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 123456
[R2-GigabitEthernet0/0/0]q
[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]rip authentication-mode md5 usual cipher 12345
[R2-GigabitEthernet0/0/1]q

AR3

[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 12345
[r3-GigabitEthernet0/0/0]q

手工汇总—减少路由条目数量

AR1

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]rip summary-address 192.168.1.64 255.255.255.192
[r1-GigabitEthernet0/0/0]q

AR2

[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]rip summary-address 192.168.1.128 255.255.255.192
[R2-GigabitEthernet0/0/0]q
[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]rip summary-address 192.168.1.128 255.255.255.192
[R2-GigabitEthernet0/0/1]q
[R2]

空接口—避免环路

AR1
[r1]ip route-static 192.168.1.64 26 NULL 0
AR2
[R2]ip route-static 192.168.1.128 26 NULL 0

验证：

AR1–>AR2
在AR3缺省前无法ping通AR3
>AR1–>AR3