HCIA--静态路由实验

一.拓扑：

二.要求：
1.全网使用192.168.1.0/24进行ip地址分配
2.R5作为DHCP服务器为pc分配IP地址
3.路由上均具备2个环回
4.R4与R5之间正常1000m,备份100m
5.全网尽量负载均衡
6.减少路由条目,并避免环路产生
7.全网可达

三.分析
1.根据要求划分网段.
2.配置网关ip.创建环回.
3.R5启用dhcp下放ip.
4.启用浮动静态路由满足负载均衡.
5.使用缺省减少路由条目,并配置破环机制避免环路产生.

四.配置
1.根据192.168.1.0/24划分子网.

 2.配置ip创建环回.以R4举例.

[r4]interface g0/0/0
[r4-GigabitEthernet0/0/0]ip address 192.168.1.10 30	
[r4-GigabitEthernet0/0/0]int g0/0/1	
[r4-GigabitEthernet0/0/1]ip address 192.168.1.14 30
[r4-GigabitEthernet0/0/1]int g0/0/2
[r4-GigabitEthernet0/0/2]ip address 192.168.1.17 30	
[r4-GigabitEthernet0/0/2]int g4/0/0
[r4-GigabitEthernet4/0/0]ip address 192.168.1.21 30
[r4]interface LoopBack 0	
[r4-LoopBack0]ip address 192.168.1.129 28
[r4-LoopBack0]int l 1	
[r4-LoopBack1]ip address 192.168.1.145 28

3.R5配置DHCP下放ip 

[r5]dhcp enable 
[r5]ip pool a	
[r5-ip-pool-a]network 192.168.1.24 mask 29
[r5-ip-pool-a]gateway-list 192.168.1.25	
[r5-ip-pool-a]dns-list 8.8.8.8 114.114.114.11
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]dhcp select global

4.配置缺省定义从左往右.修改优先级保持负载均衡

[r1]ip route-static 0.0.0.0 0 192.168.1.2
[r1]ip route-static 0.0.0.0 0 192.168.1.6

[r2]ip route-static 0.0.0.0 0 192.168.1.10

[r3]ip route-static 0.0.0.0 0 192.168.1.14

[r4]ip route-static 0.0.0.0 0 192.168.1.18
[r4]ip route-static 0.0.0.0 0 192.168.1.22 preference 90

5.定义从右到左使用汇总.保证等价路由并修改优先级保持负载均衡

[r5]ip route-static 192.168.1.0 24 192.168.1.17
[r5]ip route-static 192.168.1.0 24 192.168.1.21 pre	
[r5]ip route-static 192.168.1.0 24 192.168.1.21 preference 90

[r4]ip route-static 192.168.1.64 27 192.168.1.9
[r4]ip route-static 192.168.1.96 27 192.168.1.13
[r4]ip route-static 192.168.1.0 30 192.168.1.9
[r4]ip route-static 192.168.1.4 30 192.168.1.13
[r4]ip route-static 192.168.1.32 27 192.168.1.9
[r4]ip route-static 192.168.1.32 27 192.168.1.13

[r3]ip route-static 192.168.1.32 27 192.168.1.5
[r3]ip route-static 192.168.1.64 27 192.168.1.5
[r3]ip route-static 192.168.1.64 27 192.168.1.14
[r3]ip route-static 192.168.1.0 30 192.168.1.5
[r3]ip route-static 192.168.1.8 30 192.168.1.14

 6.由于会由环路产生的可能性所有要配置破环机制
 

[r5]ip route-static 192.168.1.192 26 NULL 0  //对保留网段进行防环

[r1]ip route-static 192.168.1.32 27 NULL 0
[r2]ip route-static 192.168.1.64 27 NULL 0
[r3]ip route-static 192.168.1.96 27 NULL 0
[r4]ip route-static 192.168.1.128 27 NULL 0
[r5]ip route-static 192.168.1.160 27 NULL 0   //根据最长匹配原则，对空接口进行防环


[r5]ip route-static 192.168.1.24 29 NULL 0//修改NULL 0口的优先级,对用户网段进行防护

结果：PC1 PING 192.168.1.1/30 和192.168.1.4/30  全网可达

PC>ping 192.168.1.1

Ping 192.168.1.1: 32 data bytes, Press Ctrl_C to break
From 192.168.1.1: bytes=32 seq=1 ttl=252 time=63 ms
From 192.168.1.1: bytes=32 seq=2 ttl=252 time=62 ms
From 192.168.1.1: bytes=32 seq=3 ttl=252 time=63 ms
From 192.168.1.1: bytes=32 seq=4 ttl=252 time=62 ms
From 192.168.1.1: bytes=32 seq=5 ttl=252 time=63 ms

--- 192.168.1.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 62/62/63 ms

PC>ping 192.168.1.5

Ping 192.168.1.5: 32 data bytes, Press Ctrl_C to break
From 192.168.1.5: bytes=32 seq=1 ttl=252 time=62 ms
From 192.168.1.5: bytes=32 seq=2 ttl=252 time=63 ms
From 192.168.1.5: bytes=32 seq=3 ttl=252 time=62 ms
From 192.168.1.5: bytes=32 seq=4 ttl=252 time=63 ms
From 192.168.1.5: bytes=32 seq=5 ttl=252 time=62 ms

--- 192.168.1.5 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 62/62/63 ms