- 积分
- 675
- 鸿鹄币
- 个
- 好评度
- 点
- 精华
- 注册时间
- 2010-12-18
- 最后登录
- 1970-1-1
- 阅读权限
- 40
- 听众
- 收听
中级工程师
|
. k. v+ O8 J1 t<<CCIE LAB K4 试验分解系列6 –IGP>># j4 J+ X W' J4 r h9 A7 N3 h2 Z
作者: -NULL) v! R% h) h( G/ w2 J: f
' D/ w' L8 I; A4 K5 v4 L上海亚威原创,转载请注明出处' S7 u8 t- k8 ?, f) Q
一. 前言:4 y/ x) o t' e$ c( D+ K4 }
相信CCIE RS试验考试目前最火的话题就是K4了,K4的需求和解法,国外国内网上都有,但解法终究是解法,其解题的思路,网上资料甚少,甚至出现一套题多解法的现象。
9 ?% c5 K# X s1 |, j4 r0 {而我写这个文章的目的,仅仅是针对LAB中比较有歧义,比较冷门或者比较有趣的的技术和现象,以及对多解法的各种利弊,抛砖引玉,和大家进行探讨,
2 }8 f: @5 w$ V: T如果时间够,预期我会把RS整个考试中 所有LAB 和TS 都为大家进行一个所谓的解法揭秘,当然这是在不违反cisco保密条例的情况下,具体的一些其他信息大家可以留意我的最新微博,里面还有一个我对RS 4.0的考纲的分析。
" \& D, @$ ^; v0 T9 c" b' z8 Z当然虽然打着考试的口号,但是其实研究重点还是技术!所以也请大家不吝赐教!
4 j+ g# H, T0 {$ M1 Z* m: S! G* S* c: m% d. R1 f6 Y8 W* {
作者和读者的约定:
. z' q% B! s; S4 o5 m( O$ X4 p我的解法会以试验分解的形式,是指我把我解题的试验思路一步一步分解出来,特别是有歧义的地方,在这里我们可以自由的进行探讨,不管你有任何天马行空的想法。
; [8 L6 N; e, d5 d- |3 y4 d- T9 L最后我还会以附件的形式上传此文档的主要内容,我的所有文档都保证是原创,并且该文档可以被任意转载,修改,但请不要删除我的logo。转载请注明出处和首发,文章只针对技术,不针对任何个人和团体。, m% _7 l/ U; j+ T
我以黄色背景加粗标出的意味着这句话或后面的内容或段落是比较有趣或者重要的知识点
' c. I5 R5 d. V8 L" l9 K: ^+ n* j% I# e
二. 简单的技术介绍:
) f3 h' W0 C/ a$ J# }IGP:内部网关协议2 ^) H8 |5 I1 \' a6 w; r' R
内部网关协议顾名思义,用于一个AS内部,IGP通常包含,RIP,EIGRP,OSPF,ISIS四种,CISCO考试的RS方向中是不考ISIS的,通常OSPF作为IE考试的一个重点,其次是EIGRP,最次是RIP,每种协议有其各自的优缺点,通常越晚出的协议就越优,按照时间来算的吧,先有RIP,后有OSPF,再有的EIGRP,RIP的特点是范用性强,什么设备都支持,缺点有2个,1是跳数太少,2是收敛太慢,当今网络中通常把RIP作为一种备用协议,即有的时候当你OSPF出现由于某些设计问题无法组建邻居的时候,此时可以用RIP作为桥梁,然后在RIP和OSPF之间重分发,解决路由问题。RIP作为最古老的协议他有2个特性是非常好的,一个是触发更新,还一个源校验可关闭,使得RIP可以成为其他协议的跳板,或者用于那些拨号线路。# O1 |5 c( d9 u- a8 D$ F& e% V7 T
OSPF其实不用多介绍了,链路状态协议,优点是多区域特殊设计可以减少设备性能上的损耗,此外他是一个公有协议,缺点是链路状态协议,自身可控性太差,做不了太细的路由决策2 W! {- P3 @- U% ^( l, l
EIGRP是cisco私有的协议,优点是收敛特快可以到达微秒级,而且设计的时候已经考虑到多点多向重分发时环路的问题,所以设计了2种管理距离,真要说缺点可能就是他是cisco私有的协议,是唯一缺点了
( m, s3 @! A0 ?9 M- E* g0 k$ Q: t# ~( p/ R; \0 S2 s
! w' Z5 a! X8 b
1 `2 e' E/ Z: b三. 需求分析和知识点扫盲:
9 Q* Y( j J5 e4 z9 cK4中的IGP
% X, D, T* }$ p% x# sSection 2 ---- Layer 3 Technologies
9 V8 z, o* d3 f* ?6 g0 ~1 D4 b6 W: P- R$ n. i
After finishing each of the following questions, make sure that all configured interface and subnets are consistently visible on all pertinent routers and switches.1 C. u0 a2 V1 ?, P& r8 z
Do not redistribute between any interior gateway protocol (IGP) and Border Gateway Protocol (BGP) unless stated otherwise in a question.
1 j7 K' ]" e* c" M! {3 Q You need to ping a BGP route only if it is stated explicitly in a question, otherwise the route should be only in BGP table.9 ~" E7 P& ^) K$ i$ F- G7 q
At the end of this section, all subnets in your topology, including the loopback interface must be reachable via ping from R3. The backbone interface must be reachable only if they are part of the solution to a question.- }* W! t9 w* X, @* O1 h
9 t! i4 h o4 Z( M4 H$ |
; k4 n9 j( O' Z1 W) l( [2.1 IPv4 OSPF" F7 g; ~; y. ^0 x2 }
! u" ^, D L0 Q% w5 _OSPF as per the “Diagram 1:IGP Routing” and as per the following requirements:
' {7 t( h1 F6 @3 ? s OSPF process ID can be any number.! F" x+ M3 z! C3 E' d( L
OSPF Router IDs must be stable and must be configured using the IP address of interface loopback0.# V# M& {7 D& o E2 a2 f1 ? w
Loopback0 interface must be advertised in the OSPF area shown in the “Diagram 1:IGP Routing”
0 c6 {) k5 r$ X' \. {' H3 u Do not create additional OSPF areas.* C9 N' c, P& u/ {0 x
Do not use any IP address not listed in “Diagram 1:IGP Routing”.5 d% R3 u, ?. Q7 Q& E0 u
In case either R1 or R5 is down, R4 must still be able to reach all other OSPF prefix via R3% }/ ~$ W" [% x. \; \9 r
Do not change the OSPF network type on Frame-Relay interface.
/ N( Z8 l, t- a% G5 J# M; M Do not propagate any default route in any area.& t8 E2 S" i: }( H& \7 m1 n3 Z: y5 v
4 c# j4 R# F" Q* f/ `7 t
2.2 IPv4 EIGRP
& h1 Q, b. L4 _
. D% Q" x# g9 c+ L/ ZConfigure your network as per the following requirements:
$ ~0 ^" o6 i1 [# J% B Configure EIGRP AS YY and EIGRP AS 100 as per the “Diagram 1:IGP Routing”.: Z5 d7 ]; U4 q! I
Redistribute EIGRP AS 100 into AS YY.
2 Y, \- Z4 I; k+ P9 c" L5 D Disable automatic summarization for both autonomous systems.2 ?/ s1 |5 ^( U. M
) {* y- t* C: ^ |! I6 Z0 _. G
2.5 IPv4 RIP
3 q" F8 A( ? s) i
2 i% b$ K3 c, UConfigure RIP version 2 as per the “Diagram 1:IGP Routing” diagram and the following requirement:# `. k% L1 F. E, v V- p4 m
Disable automatic summarization.
" q2 v( w0 W" T y* _8 w3 ?; ] RIP must be enabled only for the required interface. No other interface send any RIP update.
# H3 E% }8 L5 j* e* d( j
" H4 I# ]; c1 b2.7 Redistribution: EIGRP and OSPF
Z4 S( Z' z/ W3 l
' M) R3 ]% C# w' F8 CMutually redistribute EIGRP and OSPF on both R2 and R3 according to following requirements
5 Z8 P, }' N2 Q; U B ^The only EIGRP External routes that both R2 and R3 must see are the prefixes originated in EIGRP 100 and the VLAN 300 prefix* O9 v: u/ m6 ] R1 P
All internal OSPF prefixes (i.e. all existing subnets of YY.YY.0.0/16 that are not originated in EIGRP YY and EIGRP 100) must be seen as OSPF internal by both R2 and R3
* K( F3 V+ ` a7 C6 [% fWithout any additional configuration. Your solution must cover any future prefixes that could eventually be advertised by BB3! N+ o% Y( ?( I
You must use a route filtering mechanism but do not use any access-list or prefix-list to achieve this task. F9 H7 [) m6 o4 y" z
Ensure optimal routing is performed on both R2 and R3
) d M; L' S& a/ CDo not change any default administrative distance to achieve this task0 C7 c. Z, y, B! N' E2 y* S# I
1 a5 u* i: A8 j: { \
翻译:
r8 R9 M; g8 i6 z0 ]4 a翻译:
0 L; N: O* Z+ K" c+ ?8 E第二章 三层技术总纲:& f0 p9 Q2 ?3 d; t2 n
除非考试另有规定,否则 BGP不要求ping通,BGP和IGP不允许重分发,接口和子接口要和拓扑一致,环回口应该是/32的,除非题目另有要求
8 y. b7 J% u7 CR3要ping通所有子网- p( r5 i4 `9 z! s+ K1 ]+ X0 y$ q
2.1 ipv4 ospf
+ \$ U& @4 R6 z6 dOspf process 可以自己起
6 j! r* B; h. s' J1 t: y KOspf rid必须配置为lo0
2 i; c0 c! x0 W7 L0 V0 H$ BLo0 接口通告如图
$ m# e7 w: O+ v* m: Z, D0 M如果R1或R5 down了,R4依然可以通过R3 访问其他ospf路由
7 g$ e' H7 j/ I3 ?% }( L不允许改变帧中继这块的ospf接口网络类型
2 @2 f* `, `: G# R2 P( N不允许传递任何默认路由进任何区域: U1 L* w5 s% O( j0 h0 \! K& T
配置eigrp yy和eigrp 100如图
9 [) C1 h9 _, @% h- R1 F. `重分发eigrp 100 进eigrp yy
; S' v' c- X7 g关闭自动汇总
0 Y) i D% F/ }3 V基于图例配置Ripv2+ g/ q$ N. X9 J: J9 |7 g% k
关闭自动汇总3 i! q. ^3 B! ^1 i
RIP只在需要的的接口启用,其他接口不允许发送任何RIP更新
3 I" h/ @% F' a2.7 重分发:eigrp和ospf
1 U }+ x/ P5 B& p) {R2和R3上进行ospf和eigrp的相互重分发
& C- D+ ~; ?/ m! ^% u从EIGRP100和vlan300学到的路由,在R2和R3上下一跳必须依然是EIGRP5 P% M% B& B0 T
所有ospf区域内的路由在R2和R3上下一跳必须是依然是OSPF8 n$ T* H8 g& h4 [( e- a3 I) {
不允许使用一些额外的配置,要求能全覆盖将来可能的路由
3 E4 x2 C) S8 @8 ~# H4 W) H必须使用路由过滤机制,但是不允许使用任何acl和prefix-list完成此任务
* W B# u$ _# i" E9 P, `- [. i- w0 \$ s
四. K4的IGP解法:; l* a4 _) S! v9 o! y# T% J4 i& G' V
R4
0 y2 B1 ]$ z$ z9 xrouter ospf 30
8 V1 M8 {* V$ x2 a! R router-id 30.30.4.4( _+ Y( M( a& w
network 30.30.4.4 0.0.0.0 area 2
/ \4 d. v8 p5 E( ~ network 30.30.34.4 0.0.0.0 area 2! s* [% l( A. J. W+ R( [
# {9 c9 V' d; a6 P# d0 y
R3! q$ Y j6 S7 ?1 c! j/ L, B
router ospf 30
/ R& f9 w7 f2 C% i/ a9 Y2 ]1 a router-id 30.30.3.3
6 ~: f, c% y t- m! K5 [5 `area 1 virtual-link 30.30.1.1
+ n- W- q4 R5 N area 1 virtual-link 30.30.5.5
0 N" v* v: D: L network 30.30.3.3 0.0.0.0 area 1
& X. ?2 C! k; L5 I- p4 ]* n. D1 N network 30.30.23.3 0.0.0.0 area 1
( Y2 \8 J' H U network 30.30.34.3 0.0.0.0 area 2
3 u$ l" Z5 P$ k7 n" h. t network 30.30.35.3 0.0.0.0 area 10 a4 w9 c) ~" y7 {
/ f/ ]7 F" y$ ]% w' ^; o# ]" B! C
- i9 B; B" B+ A6 X- o) i2 l& ^R2
' M9 P5 k1 {8 s0 Z! U& Qrouter ospf 30' t7 i: c9 x. v7 v, D, a
router-id 30.30.2.2- [+ f. j" N/ ]* M1 I: U% k5 \ l
network 30.30.2.2 0.0.0.0 area 1
5 q) P7 a! F! n9 W7 |" H* c1 H network 30.30.12.2 0.0.0.0 area 1( }- Z' K* J# i- ~. ]
network 30.30.23.2 0.0.0.0 area 1
7 g7 k/ ]' Y' f6 J network 150.2.30.1 0.0.0.0 area 1
; I1 ]# \3 z9 C$ U neighbor 30.30.12.1" b# n! l$ e3 s3 S6 S8 w
passive-interface g0/07 l( c. K/ e8 D* r& y5 w8 O7 I9 O
! d0 H2 }+ _' V) D, t! L) q1 ~$ A" a/ `% O4 C( K1 B/ M: s, [9 ~
R1
9 F' s6 c5 @ ~' w8 |: orouter ospf 30; K, W; ?6 m" J# F
router-id 30.30.1.1* x5 h5 m. n; [0 @$ O
area 1 virtual-link 30.30.3.3
& u& f" C4 o P0 { network 30.30.1.1 0.0.0.0 area 0
8 K: }$ F E- E0 S4 O' k5 p network 30.30.12.1 0.0.0.0 area 1
6 | k3 A& }& E( | network 30.30.15.1 0.0.0.0 area 0' b, J' Q7 @* k, E6 U6 `
network 30.30.17.1 0.0.0.0 area 0/ G, E( o- [% ?
network 150.1.30.1 0.0.0.0 area 0
# M$ Z5 M, H( ]& M) Q neighbor 30.30.12.22 k9 z$ B w1 i+ H/ C
passive-interface g0/11 v) S1 K" s" `
/ q4 w) ^% s1 ]' p2 K# ]R5 " c; H2 d- ~6 d+ c, t6 y2 N1 `6 D
router ospf 30
y1 l1 [, b! `5 g0 |& \5 C! A router-id 30.30.5.5
- N1 P4 T3 @4 }# s$ A/ z/ oarea 1 virtual-link 30.30.3.3
& i& Y2 i$ K$ u! c network 30.30.5.5 0.0.0.0 area 09 X: ~" `6 K. R( K
network 30.30.15.5 0.0.0.0 area 0- B+ J/ f( z, f7 C
network 30.30.35.5 0.0.0.0 area 1$ c, h8 L8 P1 W$ F
network 30.30.56.5 0.0.0.0 area 0
7 R! ?$ M! I; l8 h
* w+ n4 q; x: E: Y6 V$ W4 Y9 H2 q+ A* u. z) L
Sw1; }% N' R' d1 k X. c% i' v* e
ip routing, x7 [" W) I0 T
router ospf 30
# T8 B9 r& R4 h" r router-id 30.30.6.6
1 b& m% X- n8 I5 wnetwork 30.30.6.6 0.0.0.0 area 0
5 E3 T2 S' \7 q' g: V6 x network 30.30.56.6 0.0.0.0 area 0
$ [! T2 |3 L g; F) Z% x network 30.30.67.6 0.0.0.0 area 0
2 z3 B, X( ?+ [- s
h* _3 m1 [4 RSw2
% r0 R' c4 L& _( Pip routing
/ \4 @% z/ @$ A+ _router ospf 30
0 }! v1 V" U! T4 y( V% y router-id 30.30.7.7
0 X: B# V6 X7 Fnetwork 30.30.7.7 0.0.0.0 area 0% z4 D) |+ Y; r0 Y* V4 }: T
network 30.30.17.7 0.0.0.0 area 0; I; P1 e' c$ x: [, z) n. O
network 30.30.67.7 0.0.0.0 area 0
4 x2 b6 j8 t( K$ w$ xSw3
: C7 e- k5 H0 I/ _0 J# Cip routing
6 s! O4 t$ q% e( \router eigrp 100
1 l. Y- x! \ `, D- z0 m+ r no au4 H' b7 C* L. I* J
network 150.3.30.0 0.0.0.255+ m. Z: A [0 b
router eigrp 30
/ f8 E9 \) @ Q" @$ o X no au
+ ~ Y5 U9 M" G/ g$ [& h8 x network 30.30.8.8 0.0.0.0
; W; Y9 f! [' v# ^! u) c network 30.30.38.0 0.0.0.255
' [4 i- b. k1 _& N @+ h9 t1 s. T network 30.30.89.0 0.0.0.255
) A) |* }/ Y/ n/ O redistribute eigrp 100! h% p' Y7 h5 Z! L( ^5 {
* y& j W2 v/ f- P( x v" U" Z+ YR3" Q9 w0 @- M2 Q: \. V+ y+ \
router eigrp 30& X) E. s4 Q2 _
network 30.30.38.0 0.0.0.255( [5 M. q5 @( k9 f: e4 N, d& n
no auto-summary. @, i. e4 X% R# O
* [9 C# [& o& ?: `7 g* j
Sw48 y q9 |/ V! e4 C+ C0 e
ip routing# U) u& _! \/ w. Z4 i
router eigrp 30
6 R" L7 c6 Q5 U$ C) Z s( W no au# P N' P9 b2 W! ]" ~% P% G
network 30.30.9.9 0.0.0.09 ~/ L8 h+ a. s- i
network 30.30.29.0 0.0.0.255; J8 u" j6 b5 c- [; T$ w1 v; o% Y
network 30.30.89.0 0.0.0.255( o; o& `) W$ _$ s8 v
8 G7 p- X/ P' D0 h; ^! ?R24 V% c# k9 c+ {8 F; h# S' F: \: Z
router eigrp 30
9 Y! C# v7 w% e# c! \ network 30.30.29.0 0.0.0.255
! I# P5 O6 C9 j' I7 h% k no auto-summary) n8 K( m8 k: e& u$ m3 x6 I
router rip
" n. q! W9 U O( ] version 2/ \; |; ]: F/ O2 H4 @ m/ C# ? x
no auto-summary
) r: N5 x( y9 h# w- C7 j$ d passive-interface default
" Z$ u* ]- X" N) V0 K network 30.0.0.0/ `' u# R: H1 j. ?3 K& T
no passive-interface f0/04 [, b2 w3 H9 F$ D
7 z& S p, w, r& d
R5
3 l3 e( o! a% ~+ w$ A. rrouter rip: a$ V1 @* ~( Y' Y! _6 E3 s2 ]
version 2; E; c4 e9 ?) }" j( @6 w6 u
passive-interface default! N" `+ _" q! `- @* ^- u: y
no passive-interface GigabitEthernet0/1( w* t" @5 `+ A# l5 q, S
network 30.0.0.0
$ x P. U) I2 { no auto-summary
5 ]& y& X' I* U# F7 UR5
w0 ~6 U4 R8 t, Lroute-map con permit 10
, b, u) s& M7 J& S. F match interface GigabitEthernet0/1
$ P. T( q/ K4 B; Y6 ]router rip
* ?" T2 T) E) N& D* `# I" vredistribute ospf 30 metric 2
" }. r4 T% m9 s, Jrouter ospf 302 j" `! e" r! }( _* H9 w. J
redistribute connected subnets route-map con
# Z7 f( W& Y; a( U2 u" N$ P2 ]: n# E; l* B1 i" e4 Y, k
R46 M. J1 F& F: N) s8 x9 z7 j5 u/ o2 |
Access-list 10 permit 30.30.6.6) |6 R! O, w1 k: I* b0 f5 A1 ?
Router os 30
4 q# a& D u7 y0 Odistance 125 30.30.3.3 0.0.0.0 10
% d: M" c( b+ _# k* o" U- d2 k4 g! A {
access-list 20 deny 30.30.34.38 r1 b3 M. Q/ @$ h1 D) R/ ?3 d
access-list 20 permit any
; m$ C9 T( ^6 h% t4 c7 Yrouter rip
4 @+ `- U6 I6 s* ]5 I1 ^, K' ^: Ndistribute-list 20 out f0/0
4 B, b) g$ ^+ p# |4 t8 LR2/R3:. u, L" @! t5 @1 q6 j. E
route-map tag permit 10, A! n7 G R$ `; ~- _. w9 L
match route-type external) [3 y" J2 I' u) v8 M p# A& l
set tag 300
9 v0 ~ a C6 Q# }7 Yroute-map tag permit 20. R4 f+ p# x2 W, R/ z( z
route-map de deny 109 L3 X; P6 P8 M: @; e$ |) h8 b
match tag 300
0 K i7 R& W8 ~8 f x5 G$ A+ Q0 kroute-map de permit 20
" R1 _6 u9 x J$ E- Z( s% \- o# Z. l: N. R( n
router ospf 30' s! c) x- o( e3 y' E d: P
redistribute eigrp 30 subnets route-map tag: J8 r5 ~* w* f1 [5 ]: e Z
distribute-list route-map de in/ {! Q" N D. P0 D+ v
. u5 H ?' o, `0 ?' X9 j/ W
router eigrp 30 U i: v( e: e3 }$ U
redistribute ospf 30 metric 100000 100 255 1 1500
/ F$ ]* }+ K9 I+ e; B
& g) D, K4 x3 N- R$ a5 @五. 结束语、下周预告、联系方式:4 a1 m6 O; Y5 J0 r2 S9 _' O3 G; M
任何技术有争论才有学习和进步,当然是在文明用语的前提下,所以大家如果有疑问的地方,或者你觉得我说错了,有哪些地方需要改经,可以跟贴留言,或在我的微薄留言,或者直接qq联系我,我如果看到了一定一一给大家回复。8 _. R9 r+ W7 k
下周预告:6 H! W \' f1 K# u: }
下周会对K4中的BGP进行相关的扫盲和技术讲解解法揭秘!" V% s; C+ Y% \$ {" `0 z
联系方式:: B* U& r; P: j1 u
官方主页:www.ccxx.com.cn- F# `; Y* f! [- `( Z
QQ:240937966. L, k$ M$ Z }, Z: ]+ ?
邮箱:240937966@qq.com
( X9 A2 j) i5 n1 P$ [. y/ p3 [) M1 h技术连载主微博:# U7 J+ K8 |! x, p$ Y$ Y. }4 k* K
http://5122591.blog.51cto.com
0 k+ u; j# k3 I; h2 O( }技术连载其他微博:* r1 ^2 ?; _4 G
http://blog.sina.com.cn/u/27749197418 F+ L% c6 X3 [1 m2 d& v
' u* F4 W# G4 a W3 f2 a
7 S" d% E- R5 d* C! u& P' n
7 W7 p% l9 o6 v2 l1 @% _4 [* Q6 ]( |4 |, Y8 R5 u. i% X7 L+ s
% s5 O4 g0 \4 n7 L: `
) W8 Q& Q X: W! a: } |
评分
-
参与人数 1 | 鸿鹄币 +5 |
收起
理由
|
7akella
| + 5 |
&lt;font&gt;&lt;font&gt;Как это!&lt;/fo. |
查看全部评分
|