IS-IS基本配置
原理概述
IS-IS (中间系统到中间系统)
IS-IS协议与OSPF协议非常相似。例如它们都是基于链路状态的路由协议,都需要建立和维护链路状态数据库LSDB,都用Hello报文来建立和维护邻居/邻接关系,都具有区域化和层次化的结构,如此等等,在这里不需说这么详细了。
注意:IS-IS协议和OSPF协议又有许多区别,例如,OSPF区域的分界位于路由器上,而IS-IS区域的分界位于链路上。
简单来说,其作用与OSPF一样。
这里使用华三模拟器(HCL)
实验拓扑
总的来说比如R1和R2在同一个网段10.0.12.0 24 里,那么最后一个为设备的编号,以此类推,目的方便使用和记忆。
开始配置
1:配置IP略 这里只拿出R1的IP地址配置
[R1]int g 0/0
[R1-GigabitEthernet0/0]ip add 10.0.12.1 24
[R1-GigabitEthernet0/0]int g 0/1
[R1-GigabitEthernet0/1]ip add 10.0.13.1 24
[R1-GigabitEthernet0/1]int lo 0
[R1-LoopBack0]ip add 10.0.1.1 32
2:在接口配置IS-IS基础配置
[R1]isis 1
[R1-isis-1]net
[R1-isis-1]network-entity 10.0000.0000.0001.00
[R1-isis-1]quit
[R1]int g 0/0
[R1-GigabitEthernet0/0]isis e
[R1-GigabitEthernet0/0]isis enable 1
[R1-GigabitEthernet0/0]int g 0/1
[R1-GigabitEthernet0/1]isis e
[R1-GigabitEthernet0/1]isis enable 1
[R1-GigabitEthernet0/1]int lo 0
[R1-LoopBack0]isis e
[R1-LoopBack0]isis enable 1
[R1-LoopBack0]quit
其实无非就是在ISIS 1 进程里添加了一个 network-entity
相当于OSPF里的 router-id ,然后在自己的所有接口下执行 isis enable 1
[R2]isis 1
[R2-isis-1]net
[R2-isis-1]network-entity 10.0000.0000.0002.00
[R2-isis-1]int g 0/0
[R2-GigabitEthernet0/0]isis e
[R2-GigabitEthernet0/0]isis enable 1
[R2-GigabitEthernet0/0]int g 0/2
[R2-GigabitEthernet0/2]isis e
[R2-GigabitEthernet0/2]isis enable 1
[R2-GigabitEthernet0/2]int lo 0
[R2-LoopBack0]isis e
[R2-LoopBack0]isis enable 1
[R3]isis 1
[R3-isis-1]net
[R3-isis-1]network-entity 10.0000.0000.0003.00
[R3-isis-1]int g 0/1
[R3-GigabitEthernet0/1]isis e
[R3-GigabitEthernet0/1]isis enable 1
[R3-GigabitEthernet0/1]int g 0/2
[R3-GigabitEthernet0/2]isis e
[R3-GigabitEthernet0/2]isis enable 1
[R3-GigabitEthernet0/2]int g 0/0
[R3-GigabitEthernet0/0]isis e
[R3-GigabitEthernet0/0]isis enable 1
[R4]isis 1
[R4-isis-1]net
[R4-isis-1]network-entity 20.0000.0000.0004.00
[R4-isis-1]int g 0/0
[R4-GigabitEthernet0/0]isis e
[R4-GigabitEthernet0/0]isis enable 1
[R4-GigabitEthernet0/0]int g 0/1
[R4-GigabitEthernet0/1]isis e
[R4-GigabitEthernet0/1]isis enable 1
[R5]isis 1
[R5-isis-1]net
[R5-isis-1]network-entity 30.0000.0000.0005.00
[R5-isis-1]int g 0/1
[R5-GigabitEthernet0/1]isis e
[R5-GigabitEthernet0/1]isis enable 1
[R5-GigabitEthernet0/1]int g 0/0
[R5-GigabitEthernet0/0]isis e
[R5-GigabitEthernet0/0]isis enable 1
[R6]isis 1
[R6-isis-1]net
[R6-isis-1]network-entity 30.0000.0000.0006.00
[R6-isis-1]int g 0/0
[R6-GigabitEthernet0/0]isis e
[R6-GigabitEthernet0/0]isis enable 1
[R6-GigabitEthernet0/0]int lo 1
[R6-LoopBack1]isis e
[R6-LoopBack1]isis enable 1
3:配置完成后检测一下连通性(用R1pingR6的loopback口)
[R1]ping 10.0.6.6
Ping 10.0.6.6 (10.0.6.6): 56 data bytes, press CTRL_C to break
56 bytes from 10.0.6.6: icmp_seq=0 ttl=252 time=1.000 ms
56 bytes from 10.0.6.6: icmp_seq=1 ttl=252 time=2.000 ms
56 bytes from 10.0.6.6: icmp_seq=2 ttl=252 time=2.000 ms
56 bytes from 10.0.6.6: icmp_seq=3 ttl=252 time=0.000 ms
56 bytes from 10.0.6.6: icmp_seq=4 ttl=252 time=1.000 ms
可以连通
由于IS-IS是默认都为L1/L2模式,所以我们要进行调整优化
4:优化IS-IS
[R1]isis 1
[R1-isis-1]is-
[R1-isis-1]is-level l
[R1-isis-1]is-level level-1
[R2]isis 1
[R2-isis-1]is-l
[R2-isis-1]is-level l
[R2-isis-1]is-level level-1
[R4]isis 1
[R4-isis-1]is-l
[R4-isis-1]is-level l
[R4-isis-1]is-level level-2
[R6]isis 1
[R6-isis-1]is-
[R6-isis-1]is-level l
[R6-isis-1]is-level level-1
再次优化IS-IS,因为L1和L1/L2之间只需要L1的报文,所以,我们直接把接口修改为只识别L1的接口即可。
分析:IS-IS 的路由器默认级别是 Level-1-2,R2 和 R3 在同一个区域,所以 R2 和 R3 会同时建立 Level-1 和 Level-2 的邻接关系,造成建立重新邻接,增加路由器的性能压力,浪费网路带宽
R2 和 R3 属于同一个区域,所以只需建立 Level-1 的邻接关系;但是由于R3连接了其他区域路由器,所以无法修改路由器级别为 Level-1,只能通过修改接口邻接关系级别为 Level-1 来解决
[R1]int g 0/1
[R1-GigabitEthernet0/1]isis circuit-level level-1
[R2]int g 0/2
[R2-GigabitEthernet0/2]isis ci
[R2-GigabitEthernet0/2]isis circuit-l
[R2-GigabitEthernet0/2]isis circuit-level l
[R2-GigabitEthernet0/2]isis circuit-level level-1
[R3]int g 0/0
[R3-GigabitEthernet0/0]isis ci
[R3-GigabitEthernet0/0]isis circuit-l
[R3-GigabitEthernet0/0]isis circuit-level l
[R3-GigabitEthernet0/0]isis circuit-level level-2
[R3]int g 0/1
[R3-GigabitEthernet0/1]isis ci
[R3-GigabitEthernet0/1]isis circuit-l
[R3-GigabitEthernet0/1]isis circuit-level l
[R3-GigabitEthernet0/1]isis circuit-level level-1
[R3-GigabitEthernet0/1]int g 0/2
[R3-GigabitEthernet0/2]isis ci
[R3-GigabitEthernet0/2]isis circuit-
[R3-GigabitEthernet0/2]isis circuit-l
[R3-GigabitEthernet0/2]isis circuit-level l
[R3-GigabitEthernet0/2]isis circuit-level level-1
[R4]int g 0/0
[R4-GigabitEthernet0/0]isis ci
[R4-GigabitEthernet0/0]isis circuit-l
[R4-GigabitEthernet0/0]isis circuit-level l
[R4-GigabitEthernet0/0]isis circuit-level level-2
[R4-GigabitEthernet0/0]int g 0/1
[R4-GigabitEthernet0/1]isis ci
[R4-GigabitEthernet0/1]isis circuit-l
[R4-GigabitEthernet0/1]isis circuit-level l
[R4-GigabitEthernet0/1]isis circuit-level level-2
[R5]int g 0/1
[R5-GigabitEthernet0/1]isis ci
[R5-GigabitEthernet0/1]isis circuit-l
[R5-GigabitEthernet0/1]isis circuit-level l
[R5-GigabitEthernet0/1]isis circuit-level level-2
[R5-GigabitEthernet0/1]int g 0/0
[R5-GigabitEthernet0/0]isis ci
[R5-GigabitEthernet0/0]isis circuit-l
[R5-GigabitEthernet0/0]isis circuit-level l
[R5-GigabitEthernet0/0]isis circuit-level level-1
[R6]int g 0/0
[R6-GigabitEthernet0/0]isis ci
[R6-GigabitEthernet0/0]isis circuit-l
[R6-GigabitEthernet0/0]isis circuit-level l
[R6-GigabitEthernet0/0]isis circuit-level level-1
到此,优化的差不多了。
[R1]display isis peer
Peer information for IS-IS(1)
-----------------------------
System ID: 0000.0000.0002
Interface: GE0/0 Circuit Id: 0000.0000.0002.01
State: Up HoldTime: 9s Type: L1 PRI: 64
System ID: 0000.0000.0003
Interface: GE0/1 Circuit Id: 0000.0000.0003.01
State: Up HoldTime: 7s Type: L1 PRI: 64
R1与R3就只有L1的邻居关系了
大佬们发现错误请给我指正,谢谢。