路由策略实验

 

步骤：

1.配置IP

R1：

[R1]int g0/0/0

[R1-GigabitEthernet0/0/0]ip add 100.1.1.1 24

[R1-GigabitEthernet0/0/0]int l0

[R1-LoopBack0]ip add 192.168.0.1 32

[R1-LoopBack0]int l1

[R1-LoopBack1]ip add 192.168.1.1 32

 

 

R2：

[R2]int g0/0/1

[R2-GigabitEthernet0/0/1]ip add 100.2.2.2 24

[R2-GigabitEthernet0/0/0]ip add 100.1.1.2 24

 

 

R3：

[R3]int g0/0/0

[R3-GigabitEthernet0/0/0]ip add 100.2.2.3 24

[R3-GigabitEthernet0/0/0]int g0/0/1

[R3-GigabitEthernet0/0/1]ip add 100.3.3.3 24

[R3-GigabitEthernet0/0/1]int l0

[R3-LoopBack0]ip add 192.168.2.1 32

[R3-LoopBack0]int l1

[R3-LoopBack1]ip add 192.168.3.1 32

 

 

 

 

R4：

[R4]int g0/0/0

[R4-GigabitEthernet0/0/0]ip add 100.3.3.4 24

[R4-GigabitEthernet0/0/0]int l0

[R4-LoopBack0]ip add 192.168.4.1 32

[R4-LoopBack0]int l1

[R4-LoopBack1]ip add 192.168.5.1 32

 

 

2.配置RIP和OSPF，在R2上做路由引入

 

[R1]rip 1

[R1-rip-1]v 2

[R1-rip-1]undo s        

[R1-rip-1]undo silent-interface

[R1-rip-1]undo summary

[R1-rip-1]net 100.0.0.0

[R1-rip-1]net 192.168.0.0

 

 

[R2]rip 1

[R2-rip-1]v 2

[R2-rip-1]undo su        

[R2-rip-1]undo summary

[R2-rip-1]net 100.0.0.0

[R2]ospf 1 router-id 2.2.2.2

[R2-ospf-1]a 0

[R2-ospf-1-area-0.0.0.0]net 100.2.2.0 0.0.0.255

 

 

[R3]ospf 1 router-id 3.3.3.3

[R3-ospf-1]a 0

[R3-ospf-1-area-0.0.0.0]net 100.2.2.0 0.0.0.255

[R3-ospf-1-area-0.0.0.0]net 192.168.2.1 0.0.0.0

[R3-ospf-1-area-0.0.0.0]net 192.168.3.1 0.0.0.0

[R3-ospf-1-area-0.0.0.0]a 1

[R3-ospf-1-area-0.0.0.1]net 100.3.3.0 0.0.0.255

 

 

[R4]ospf 1 router-id 4.4.4.4

[R4-ospf-1]a 1

[R4-ospf-1-area-0.0.0.1]net 100.3.3.0 0.0.0.255

[R4-ospf-1-area-0.0.0.1]net 192.168.4.1 0.0.0.0

[R4-ospf-1-area-0.0.0.1]net 192.168.5.1 0.0.0.0

 

 

路由引入

[R2-ospf-1]import-route rip

[R2-ospf-1]q

[R2]rip 1

[R2-rip-1]im        

[R2-rip-1]import-route ospf

 

测试：

R1：

 

R2：

 

R3：

 

 

R4：

 

 

3.在R2上做路由策略，使R4上面的业务网段不能引入到RIP中

[R2]acl 2000

[R2-acl-basic-2000]rule deny source 192.168.4.0 0.0.1.255

[R2-acl-basic-2000]rule permit source 0.0.0.0 255.255.255.255

[R2]route-policy zz deny node 10

[R2-route-policy]if-match acl 2000

[R2-rip-1]import-rout ospf route-policy zz

 

测试：

R1:

 

 

5.在R4上做perfix-list，使R4学习不到R1的业务网段

 

[R4]ip ip-prefix aa index 10 deny 192.168.0.0 23 less-equal 32

[R4]ip ip-prefix aa index 20 permit 0.0.0.0 0 less-equal 32

[R4-ospf-1]filter-policy ip-prefix aa import

 

测试：

 

6.在R2上配置静默接口，让OSPF区域不出现RIP协议报文

[R2-rip-1]silent-interface g        

[R2-rip-1]silent-interface GigabitEthernet 0/0/1