路由引入,过滤实验

实验拓补图

实验目的:

1、按照图示配置 IP 地址,R1,R3,R4 loopback口模拟业务网段

2、R1 和 R2 运行 RIPv2,R2,R3和R4运行 OSPF,各自协议内部互通

3、在 RIP 和 oSPF 间配置双向路由引入,要求除 R4 上的业务网段以外,其他业务网段路由都引入到对方协议内部

4、使用路由过滤,使 R4 无法学习到 R1 的业务网段路由,要求使用 prefix-1ist 进行匹配

5、OSPF 区域中不能出现 RIP 协议报文

实验:

配置IP:

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 100.1.1.1 24
Apr 23 2024 19:43:23-08:00 R1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[R1-GigabitEthernet0/0/0]int l0
[R1-LoopBack0]ip add 192.168.0.1 32
[R1-LoopBack0]int l1
[R1-LoopBack1]ip add 192.168.1.1 32
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 100.1.1.2 24
[R2-GigabitEthernet0/0/0]
Apr 23 2024 19:45:04-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]ip add 100.2.2.2 24
Apr 23 2024 19:45:19-08:00 R2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 100.2.2.3 24
Apr 23 2024 19:45:59-08:00 R3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[R3-GigabitEthernet0/0/0]int l0
[R3-LoopBack0]ip add 192.168.2.1 32
[R3-LoopBack0]int l1
[R3-LoopBack1]ip add 192.168.3.1 32
[R3-LoopBack1]int g0/0/1
[R3-GigabitEthernet0/0/1]ip add 100.3.3.3 24
Apr 23 2024 19:46:44-08:00 R3 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[R3-GigabitEthernet0/0/1]
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 100.3.3.4 24
Apr 23 2024 19:47:21-08:00 R4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[R4-GigabitEthernet0/0/0]int l0
[R4-LoopBack0]ip add 192.168.4.1 32
[R4-LoopBack0]int l1
[R4-LoopBack1]ip add 192.168.5.1 32

配置ospp,rip

[R1]rip 1
[R1-rip-1]v 2
[R1-rip-1]undo summary 
[R1-rip-1]ne 100.0.0.0
[R1-rip-1]ne 192.168.0.0
[R1-rip-1]ne 192.168.1.0
[R2]rip 1
[R2-rip-1]v 2
[R2-rip-1]network 100.0.0.0
[R2-rip-1]q
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]a 0
[R2-ospf-1-area-0.0.0.0]ne	
[R2-ospf-1-area-0.0.0.0]network 100.1.1.0 0.0.0.255
[R2-ospf-1-area-0.0.0.0]ne	
[R2-ospf-1-area-0.0.0.0]network 100.2.2.0 0.0.0.255
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]a 1
[R4-ospf-1-area-0.0.0.1]ne	
[R4-ospf-1-area-0.0.0.1]network 192.168.4.1 0.0.0.0
[R4-ospf-1-area-0.0.0.1]network 192.168.5.1 0.0.0.0
[R4-ospf-1-area-0.0.0.1]network 100.3.3.0 0.0.0.255
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]a 0
[R3-ospf-1-area-0.0.0.0]ne	
[R3-ospf-1-area-0.0.0.0]network 100.2.2.0 0.0.0.255
Event=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full) 
[R3-ospf-1-area-0.0.0.0]network 192.168.2.1 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 192.168.3.1 0.0.0.0
[R3-ospf-1-area-0.0.0.0]a 1
[R3-ospf-1-area-0.0.0.1]network 100.3.3.0 0.0.0.0

路由引入:

[R2]rip
[R2-rip-1]im	
[R2-rip-1]import-route ospf 1
[R2-rip-1]q
[R2]ospf
[R2-ospf-1]im	
[R2-ospf-1]import-route rip 1
[R2-ospf-1]

R1:

R4:

路由过滤:

[R2]acl 2000
[R2-acl-basic-2000]rule deny source 192.168.4.0 0.0.1.255
[R2-acl-basic-2000]rule permit source 0.0.0.0 255.255.255.255
[R2-acl-basic-2000]q	
[R2]route-policy aa permit node 10
Info: New Sequence of this List.
[R2-route-policy]if-match acl 2000
[R2-route-policy]q
[R2]rip 1
[R2-rip-1]import-route ospf 1 ro	
[R2-rip-1]import-route ospf 1 route-policy aa

使用 prefix-1ist 进行路由过滤:


[R4]ip ip-prefix aa index 10 deny 192.168.0.0 23 les	
[R4]ip ip-prefix aa index 10 deny 192.168.0.0 23 less-equal 32	
[R4]ip ip-prefix aa index 20 permit 0.0.0.0 0 less-equal 32
[R4]ospf 1	
[R4-ospf-1]filter-policy ip-prefix aa import 

为达到OSPF 区域中不能出现 RIP 协议报文,将g0/0/0配置静默接口:
[R1]rip 1
[R1-rip-1]sil    
[R1-rip-1]silent-interface g    
[R1-rip-1]silent-interface GigabitEthernet 0/0/0

  • 6
    点赞
  • 4
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值