路由策略综合实验

给路由器配IP地址

[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip add 100.1.1.1 24

[R1-GigabitEthernet0/0/0]int l0
[R1-LoopBack0]ip add 192.168.0.1 32

[R1-LoopBack0]int l1
[R1-LoopBack1]ip add 192.168.1.1 32

[R2]int 0/0/0
[R2-GigabitEthernet0/0/0]ip add 100.1.1.2 24

[R3]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip add 100.2.2.3 24

[R3]int l0
[R3-LoopBack0]ip add 192.168.2.1 32

[R3-LoopBack0]int l1
[R3-LoopBack1]ip add 192.168.3.1 32

[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip add 100.3.3.4 24

[R4-GigabitEthernet0/0/0]int l0
[R4-LoopBack0]ip add 192.168.4.1 32

[R4-LoopBack0]int l1
[R4-LoopBack1]ip add 192.168.5.1 32

配置RIP

[R1]rip 
[R1-rip-1]v 2
[R1-rip-1]undo summary
[R1-rip-1]net 100.0.0.0
[R1-rip-1]net 192.168.0.0
[R1-rip-1]net 192.168.1.0

[R2]rip 
[R2-rip-1]v 2
[R2-rip-1]undo summary
[R2-rip-1]network 100.0.0.0

配置OSPF

[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]a 0
[R2-ospf-1-area-0.0.0.0]network 100.2.2.0 0.0.0.255

[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]a 0
[R3-ospf-1-area-0.0.0.0]network 100.2.2.0 0.0.0.255
[R3-ospf-1-area-0.0.0.0]network 192.168.2.1 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 192.168.3.1 0.0.0.0

[R3-ospf-1]a 1
[R3-ospf-1-area-0.0.0.1]ne	
[R3-ospf-1-area-0.0.0.1]network 100.3.3.0 0.0.0.255

[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]a 1
[R4-ospf-1-area-0.0.0.1]network 0.0.0.0 255.255.255.255

在R2上配置路由双向引入

[R2]rip 1	
[R2-rip-1]import-route ospf 1

[R2]ospf 1
[R2-ospf-1]import-route rip 1

观察R1、R4上学习到的路由表

R2上抓取流量，用路由策略拒绝R4的业务网段

[R2]acl 2000
[R2-acl-basic-2000]rule deny source 192.168.4.0 0.0.1.255
[R2-acl-basic-2000]rule permit source 0.0.0.0 255.255.255.255

[R2]route-policy aa permit node 10
[R2-route-policy]if-match acl 2000

[R2-rip-1]import-route ospf 1 route-policy aa

观察实验现象

R4上使用路由过滤

[R4]ip ip-prefix aa index 10 deny 192.168.0.0 23 less-equal 32
[R4]ip ip-prefix aa index 20 permit 0.0.0.0 0 less-equal 32

[R4-ospf-1]filter-policy ip-prefix aa import 

观察实验现象

OSPF中不能出现RIP的协议报文 配置静默接口

[R2-rip-1]silent-interface GigabitEthernet 0/0/1