IS-IS路由协议(四)

1. IS-IS配置示例 a) 帧中继配置
如下图所示:
clip_image002
R1#sh running-config
!
hostname R1
ip cef
!
clns routing
!
interface FastEthernet0/0
ip address 11.1.1.1 255.255.255.0
ip router isis
duplex half
!
interface Serial1/0.1 multipoint
ip address 10.10.10.4 255.255.255.0
ip router isis
frame-relay map clns 120 broadcast
frame-relay map clns 110 broadcast
frame-relay map ip 10.10.10.1 120 broadcast
frame-relay map ip 10.10.10.3 110 broadcast
frame-relay map ip 10.10.10.4 110 broadcast
clns router isis
!
interface Serial1/0.2 point-to-point
ip address 10.10.20.1 255.255.255.0
ip router isis
frame-relay interface-dlci 100
clns router isis
!
router isis
net 49.0001.4444.4444.4444.00
!
R2#show running-config
!
hostname R2
ip cef
!
clns routing
!
interface FastEthernet0/0
ip address 11.1.2.1 255.255.255.0
ip router isis
duplex half
!
interface Serial1/0
no ip address
ip router isis
encapsulation frame-relay
serial restart-delay 0
no dce-terminal-timing-enable
clns router isis
!
interface Serial1/0.1 point-to-point
ip address 10.10.20.2 255.255.255.0
ip router isis
frame-relay interface-dlci 200
clns router isis
!
router isis
net 49.0001.2222.2222.2222.00
is-type level-1
!
R3#sh running-config
!
hostname R3
ip cef
!
!
!
!
!
clns routing
!
interface FastEthernet0/0
ip address 11.1.3.1 255.255.255.0
ip router isis
duplex half
!
interface Serial1/0
ip address 10.10.10.3 255.255.255.0
ip router isis
encapsulation frame-relay
serial restart-delay 0
no dce-terminal-timing-enable
frame-relay map clns 300 broadcast
frame-relay map clns 210 broadcast
frame-relay map ip 10.10.10.1 300 broadcast
frame-relay map ip 10.10.10.4 210 broadcast
clns router isis
!
router isis
net 49.0001.3333.3333.3333.00
is-type level-1
!
R4#sh running-config
!
hostname R4
ip cef
!
clns routing
!
interface Loopback0
ip address 12.1.1.1 255.255.255.0
ip router isis
clns router isis
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
ip address 10.10.10.1 255.255.255.0
ip router isis
encapsulation frame-relay
serial restart-delay 0
no dce-terminal-timing-enable
frame-relay map clns 310 broadcast
frame-relay map clns 220 broadcast
frame-relay map ip 10.10.10.3 310 broadcast
frame-relay map ip 10.10.10.4 220 broadcast
clns router isis
!
router isis
net 49.0001.1111.1111.1111.00
is-type level-1
!
配置完成后,可以使用show 命令来查看状态。
R4#sh isis route
IS-IS Level-1 Routing Table - version 12
System Id Next-Hop Interface SNPA Metric State
R4 --
R2 R1 Se1/0 DLCI 220 20 Up
R3 R3 Se1/0 DLCI 310 10 Up
R1 R1 Se1/0 DLCI 220 10 Up
R4#sh ip ro
R4#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
10.0.0.0/24 is subnetted, 2 subnets
C 10.10.10.0 is directly connected, Serial1/0
i L1 10.10.20.0 [115/20] via 10.10.10.4, Serial1/0
11.0.0.0/24 is subnetted, 3 subnets
i L1 11.1.2.0 [115/30] via 10.10.10.4, Serial1/0
i L1 11.1.3.0 [115/20] via 10.10.10.3, Serial1/0
i L1 11.1.1.0 [115/20] via 10.10.10.4, Serial1/0
12.0.0.0/24 is subnetted, 1 subnets
C 12.1.1.0 is directly connected, Loopback0
R4#sh isi
R4#sh isis neighbors
System Id Type Interface IP Address State Holdtime Circuit Id
R3 L1 Se1/0 10.10.10.3 UP 21 R1.01
R1 L1 Se1/0 10.10.10.4 UP 7 R1.01
R4#sh clns neighbors
System Id Interface SNPA State Holdtime Type Protocol
R3 Se1/0 DLCI 310 Up 27 L1 IS-IS
R1 Se1/0 DLCI 220 Up 7 L1 IS-IS
R4#sh isis database
IS-IS Level-1 Link State Database:
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
R4.00-00 * 0x0000000C 0x11A8 918 0/0/0
R2.00-00 0x00000009 0xED7B 685 0/0/0
R2.01-00 0x00000006 0xFF46 480 0/0/0
R3.00-00 0x0000000D 0x47C5 525 0/0/0
R1.00-00 0x0000000A 0x9F7A 672 0/0/0
R1.01-00 0x00000009 0xC034 651 0/0/0
R4#sh isis database detail R1.00-00
IS-IS Level-1 LSP R1.00-00
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
R1.00-00 0x0000000A 0x9F7A 651 0/0/0
Area Address: 49.0001
NLPID: 0x81 0xCC
Hostname: R1
IP Address: 10.10.20.1
Metric: 10 IP 11.1.1.0 255.255.255.0
Metric: 10 IP 10.10.10.0 255.255.255.0
Metric: 10 IP 10.10.20.0 255.255.255.0
Metric: 10 IS R1.01
Metric: 10 IS R2.00
Metric: 0 ES R1
R4#sh isis database detail R1.01-00
IS-IS Level-1 LSP R1.01-00
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
R1.01-00 0x00000009 0xC034 627 0/0/0
Metric: 0 IS R1.00
Metric: 0 IS R4.00
Metric: 0 IS R3.00
 
b) IS-IS认证
1 Interface Authentication
clip_image004
Router A
interface ethernet 0
ip address 10.3.3.1 255.255.255.0
ip router isis
isis password SECr3t
interface ethernet1
ip address 10.1.1.1 255.255.255.0
ip router isis
router isis
net 49.1234.1111.1111.1111.00
Router B
interface ethernet 0
ip address 10.3.3.2 255.255.255.0
ip router isis
isis password SECr3t
interface ethernet1
ip address 172.16.1.1 255.255.255.0
ip router isis
router isis
net 49.1234.2222.2222.2222.00
 
2.Area Authentication
clip_image006
Router A
interface ethernet 0
ip address 10.3.3.1 255.255.255.0
ip router isis
interface ethernet1
ip address 10.1.1.1 255.255.255.0
ip router isis
router isis
net 49.1234.1111.1111.1111.00
area-password tighter
Router B
interface ethernet 0
ip address 10.3.3.2 255.255.255.0
ip router isis
interface ethernet1
ip address 172.16.1.1 255.255.255.0
ip router isis
router isis
net 49.1234.2222.2222.2222.00
area-password tighter
Router C
interface ethernet1
ip address 172.16.1.2 255.255.255.0
ip router isis
interface ethernet0
ip address 192.168.50.1 255.255.255.0
ip router isis
router isis
net 49.1234.3333.3333.3333.00
area-password tighter
Router D
interface ethernet1
ip address 10.1.1.2 255.255.255.0
ip router isis
interface ethernet0
ip address 192.168.50.2 255.255.255.0
ip router isis
router isis
net 49.1234.4444.4444.4444.00
area-password tighter
3.Domain Authentication
clip_image008
Router A
interface ethernet 0
ip address 10.3.3.1 255.255.255.0
ip router isis
interface ethernet1
ip address 10.1.1.1 255.255.255.0
ip router isis
router isis
net 49.1234.1111.1111.1111.00
domain-password security
Router B
interface ethernet 0
ip address 10.3.3.2 255.255.255.0
ip router isis
interface ethernet1
ip address 172.16.1.1 255.255.255.0
ip router isis
router isis
net 49.1234.2222.2222.2222.00
domain-password security
Router C
interface ethernet1
ip address 172.16.1.2 255.255.255.0
ip router isis
interface ethernet0
ip address 192.168.50.1 255.255.255.0
ip router isis
router isis
net 49.5678.3333.3333.3333.00
domain-password security
Router D
interface ethernet1
ip address 10.1.1.2 255.255.255.0
ip router isis
interface ethernet0
ip address 192.168.50.2 255.255.255.0
ip router isis
router isis
net 49.9999.4444.4444.4444.00
domain-password security
4.Domain, Area, and Interface Authentication
clip_image008[1]
Router A
interface ethernet 0
ip address 10.3.3.1 255.255.255.0
ip router isis
interface ethernet1
ip address 10.1.1.1 255.255.255.0
ip router isis
router isis
net 49.1234.1111.1111.1111.00
domain-password seCurity
area-password tighter
Router B
interface ethernet 0
ip address 10.3.3.2 255.255.255.0
ip router isis
interface ethernet1
ip address 172.16.1.1 255.255.255.0
ip router isis
clns router isis
isis password Fri3nd level-2
router isis
net 49.1234.2222.2222.2222.00
domain-passwordseCurity
area-password tighter
Router C
interface ethernet1
ip address 172.16.1.2 255.255.255.0
ip router isis
isis password Fri3nd level-2
interfaceethernet0
ip address 192.168.50.1 255.255.255.0
ip router isis
router isis
net 49.5678.3333.3333.3333.00
domain-password security
Router D
interface ethernet1
ip address 10.1.1.2 255.255.255.0
ip router isis
interface ethernet0
ip address 192.168.50.2 255.255.255.0
ip router isis
router isis
net 49.9999.4444.4444.4444.00
domain-password seCurity
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值