1. RIP v1的基本配置
拓撲圖如下:
![](https://img.laitimes.com/img/_0nNw4CM6IyYiwiM6ICdiwiIwczX0xiRGZkRGZ0Xy9GbvNGL2EzXlpXazxSP9E1T0sGVNlnVyQmdChlWuZkMMBjVtJWd0ckW65UbM5WOHJWa5kHT20ESjBjUIF2X0hXZ0xCMx81dvRWYoNHLrdEZwZ1Rh5WNXp1bwNjW1ZUba9VZwlHdssmch1mclRXY39CXldWYtlWPzNXZj9mcw1ycz9WL49zZwpmL5kTM1QTMyEjMxMDOwkTMwIzLc52YucWbp5GZzNmLn9Gbi1yZtl2Lc9CX6MHc0RHaiojIsJye.jpg)
AR1的配置:
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 10.1.1.254 24
Aug 31 2019 21:28:13-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[0]:The line protocol
IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 12.1.1.1 24
Aug 31 2019 21:28:34-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[1]:The line protocol
IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[Huawei-GigabitEthernet0/0/1]q
[Huawei]rip 1
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]network 12.0.0.0
[Huawei-rip-1]q
[Huawei]dis rip 1 database
---------------------------------------------------
Advertisement State : [A] - Advertised
[I] - Not Advertised/Withdraw
---------------------------------------------------
10.0.0.0/8, cost 0, ClassfulSumm
10.1.1.0/24, cost 0, [A], Rip-interface
12.0.0.0/8, cost 0, ClassfulSumm
12.1.1.0/24, cost 0, [A], Rip-interface
[Huawei]dis ip routing-table
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 10 Routes : 10
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.1.1.0/24 Direct 0 0 D 10.1.1.254 GigabitEthernet
0/0/0
10.1.1.254/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
10.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
12.1.1.0/24 Direct 0 0 D 12.1.1.1 GigabitEthernet
0/0/1
12.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
12.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
AR2的配置:
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 20.1.1.254 24
Aug 31 2019 21:34:17-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[0]:The line protocol
IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 12.1.1.2 24
Aug 31 2019 21:34:37-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[1]:The line protocol
IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]ip add 23.1.1.1 24
Aug 31 2019 21:34:59-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[2]:The line protocol
IP on the interface GigabitEthernet0/0/2 has entered the UP state.
[Huawei-GigabitEthernet0/0/2]q
[Huawei]rip 1
[Huawei-rip-1]network 12.0.0.0
[Huawei-rip-1]network 20.0.0.0
[Huawei-rip-1]network 23.0.0.0
[Huawei-rip-1]q
[Huawei]dis rip 1 d
---------------------------------------------------
Advertisement State : [A] - Advertised
[I] - Not Advertised/Withdraw
---------------------------------------------------
10.0.0.0/8, cost 1, ClassfulSumm
10.0.0.0/8, cost 1, [A], nexthop 12.1.1.1
12.0.0.0/8, cost 0, ClassfulSumm
12.1.1.0/24, cost 0, [A], Rip-interface
20.0.0.0/8, cost 0, ClassfulSumm
20.1.1.0/24, cost 0, [A], Rip-interface
23.0.0.0/8, cost 0, ClassfulSumm
23.1.1.0/24, cost 0, [A], Rip-interface
[Huawei]dis ip routing-table
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 14 Routes : 14
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.0.0.0/8 RIP 100 1 D 12.1.1.1 GigabitEthernet
0/0/1
12.1.1.0/24 Direct 0 0 D 12.1.1.2 GigabitEthernet
0/0/1
12.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
12.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
20.1.1.0/24 Direct 0 0 D 20.1.1.254 GigabitEthernet
0/0/0
20.1.1.254/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
20.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/0
23.1.1.0/24 Direct 0 0 D 23.1.1.1 GigabitEthernet
0/0/2
23.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/2
23.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/2
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
用PC1 ping PC2測試:
PC>ping 12.1.1.1
Ping 12.1.1.1: 32 data bytes, Press Ctrl_C to break
From 12.1.1.1: bytes=32 seq=1 ttl=255 time=110 ms
From 12.1.1.1: bytes=32 seq=2 ttl=255 time=31 ms
From 12.1.1.1: bytes=32 seq=3 ttl=255 time=31 ms
From 12.1.1.1: bytes=32 seq=4 ttl=255 time=31 ms
From 12.1.1.1: bytes=32 seq=5 ttl=255 time=31 ms
--- 12.1.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 31/46/110 ms
PC>ping 12.1.1.2
Ping 12.1.1.2: 32 data bytes, Press Ctrl_C to break
From 12.1.1.2: bytes=32 seq=1 ttl=254 time=156 ms
From 12.1.1.2: bytes=32 seq=2 ttl=254 time=78 ms
From 12.1.1.2: bytes=32 seq=3 ttl=254 time=62 ms
From 12.1.1.2: bytes=32 seq=4 ttl=254 time=32 ms
From 12.1.1.2: bytes=32 seq=5 ttl=254 time=46 ms
--- 12.1.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 32/74/156 ms
PC>ping 20.1.1.254
Ping 20.1.1.254: 32 data bytes, Press Ctrl_C to break
From 20.1.1.254: bytes=32 seq=1 ttl=254 time=47 ms
From 20.1.1.254: bytes=32 seq=2 ttl=254 time=62 ms
From 20.1.1.254: bytes=32 seq=3 ttl=254 time=62 ms
From 20.1.1.254: bytes=32 seq=4 ttl=254 time=93 ms
From 20.1.1.254: bytes=32 seq=5 ttl=254 time=109 ms
--- 20.1.1.254 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 47/74/109 ms
PC>ping 20.1.1.1
Ping 20.1.1.1: 32 data bytes, Press Ctrl_C to break
Request timeout!
From 20.1.1.1: bytes=32 seq=2 ttl=126 time=31 ms
From 20.1.1.1: bytes=32 seq=3 ttl=126 time=31 ms
From 20.1.1.1: bytes=32 seq=4 ttl=126 time=47 ms
From 20.1.1.1: bytes=32 seq=5 ttl=126 time=31 ms
--- 20.1.1.1 ping statistics ---
5 packet(s) transmitted
4 packet(s) received
20.00% packet loss
round-trip min/avg/max = 0/35/47 ms
2. RIP v1與RIP v2的差別
RIP v1:
- 使用廣播位址255.255.255.255
- 不支援VLSM(可變長子網路遮罩)和CIDR(無類域間路由),隻支援有類
- 不支援預設關閉彙總功能
- 不支援路由标記功能
- 封包沒有掩碼和下一跳位址
-
不支援認證
RIP V2:
- 是用多點傳播位址224.0.0.9或廣播位址
- 支援無VLSM和CIDR
- 支援關閉彙總功能
- 支援路由标記功能
- 封包有掩碼和下一跳位址
- 支援明文認證和MD5密文認證
3. RIP v2的配置
[Huawei]rip 1
[Huawei-rip-1]version 2
//關閉自動彙總功能
[Huawei-rip-1]undo summary
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]network 12.0.0.0
4. 四個定時器
**
Update timer(更新定時器):當此定時器逾時時,立即發送更新封包
Age timer(老化定時器):RIP裝置如果在老化時間内沒有收到鄰居發來的更新封包,則認為該路由不可達
Garbage-collect timer(垃圾收集定時器):如果在垃圾收集時間内沒有收到不可達路由發來更新封包,則該路由将從路由表中徹底删除
Suppress timer(抑制定時器):當RIP收到對端的路由更新,其cost為16,對應路由進入抑制狀态,并啟動抑制定時器。為防止路由震蕩,在抑制定時器逾時前,即使再收到cost小于16的更新,也不接受。當抑制定時器逾時後,就重新允許接收對端發來的更新。
[Huawei]rip 1
//設定更新時間為20秒,老化時間為100秒,垃圾收集時間30秒
[Huawei-rip-1]timers rip 20 100 30
5. RIP的防環機制
A. 水準分割:路由器從某個接口學到的路由,不會從該接口再發回給鄰居路由器。再NBMA網絡中,預設不開啟水準分割。
[Huawei]int g0/0/1
//關閉水準分割
[Huawei-GigabitEthernet0/0/1]undo rip split-horizon
//開啟水準分割
[Huawei-GigabitEthernet0/0/1]rip split-horizon
B. 毒性反轉:路由器從某個接口學到路由後,将該路由的跳輸設定為16,并從原接收接口發送給鄰居路由器。利用這種方式可以清除對方的無用路由。
同時配置了水準分割與毒性反轉,隻有毒性反轉生效。
[Huawei]int g0/0/1
//關閉毒性反轉
[Huawei-GigabitEthernet0/0/1]undo rip poison-reverse
//開啟毒性反轉
[Huawei-GigabitEthernet0/0/1]rip poison-reverse
C. 觸發更新:預設情況下,路由器每30秒向鄰居路由發送一次路由跟新;開啟觸發更新後,當本地路由資訊發生變化時,立即向鄰居路由器發送路由跟新,進而加速了網絡收斂。
D. 路由毒化:當接口失效後,直接将路由cost值設定為16并通告出去。
6. metricin和metricout
metricin 用于在接收到路由後,給其增加一個附加的路徑成本,再将新的路徑成本釋出出去。會影響本地裝置與其他裝置的路由選擇。
metricout 用于自身路由的釋出,給其增加一個附加路徑成本,但自身路由表中的值不會變化。不影響本地裝置的路由選擇,但會影響其他裝置的路由選擇。
[Huawei]int g0/0/1
// metricin 設為5
[Huawei-GigabitEthernet0/0/1]rip metricin 5
//關閉 metricin
[Huawei-GigabitEthernet0/0/1]undo rip metricout
// metricout 設為3
[Huawei-GigabitEthernet0/0/1]rip metricout 3
//關閉 metricout
[Huawei-GigabitEthernet0/0/1]undo rip metricout
7. 控制收發更新路由封包
Input:允許端口接收更新封包。
Output:允許端口發送更新封包。
抑制端口:允許端口接收封包,禁止發送封包。抑制端口的優先級大于Input和Output。一般配置在與終端連接配接的端口,不要配置在路由器之間。
[Huawei]int g0/0/1
//關閉 Output
[Huawei-GigabitEthernet0/0/1]undo rip output
//關閉 Input
[Huawei-GigabitEthernet0/0/1]undo rip input
//開啟 Output
[Huawei-GigabitEthernet0/0/1]rip output
//開啟 Input
[Huawei-GigabitEthernet0/0/1]rip input
[Huawei-GigabitEthernet0/0/1]q
//開啟抑制端口
[Huawei]rip 1
[Huawei-rip-1]silent-interface g0/0/1
//關閉抑制端口
[Huawei-rip-1]undo silent-interface g0/0/1
- 認證
[Huawei]int g0/0/1
//配置密文認證,密碼為“hello”
[Huawei-GigabitEthernet0/0/1]rip authentication-mode md5 usual cipher hello
//配置明文認證,密碼為“123”
[Huawei-GigabitEthernet0/0/1]rip authentication-mode simple cipher 123
其他裝置的端口也要配置相同的認證方式和密碼
9. 路由彙總
[Huawei]int lo 1
[Huawei-LoopBack1]ip add 200.1.0.1 24
[Huawei-LoopBack1]int lo 2
[Huawei-LoopBack2]ip add 200.1.1.1 24
[Huawei-LoopBack2]int lo 3
[Huawei-LoopBack3]ip add 200.1.2.1 24
[Huawei-LoopBack3]int lo 4
[Huawei-LoopBack4]ip add 200.1.3.1 24
[Huawei-LoopBack4]rip 1
//隻有RIP v2才支援無類域間路由
[Huawei-rip-1]version 2
[Huawei-rip-1]undo summary
[Huawei-rip-1]int g0/0/1
[Huawei-GigabitEthernet0/0/1]rip summary-address 200.1.0.0 255.255.252.0