天天看點

HCNP-路由交換:RIP

1. RIP v1的基本配置

拓撲圖如下:

HCNP-路由交換:RIP

AR1的配置:

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 10.1.1.254 24
Aug 31 2019 21:28:13-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[0]:The line protocol
 IP on the interface GigabitEthernet0/0/0 has entered the UP state. 
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 12.1.1.1 24
Aug 31 2019 21:28:34-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[1]:The line protocol
 IP on the interface GigabitEthernet0/0/1 has entered the UP state. 
[Huawei-GigabitEthernet0/0/1]q
[Huawei]rip 1
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]network 12.0.0.0
[Huawei-rip-1]q
[Huawei]dis rip 1 database 
 ---------------------------------------------------
 Advertisement State : [A] - Advertised
                       [I] - Not Advertised/Withdraw
 ---------------------------------------------------
   10.0.0.0/8, cost 0, ClassfulSumm
       10.1.1.0/24, cost 0, [A], Rip-interface
   12.0.0.0/8, cost 0, ClassfulSumm
       12.1.1.0/24, cost 0, [A], Rip-interface
[Huawei]dis ip routing-table 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 10       Routes : 10       

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

       10.1.1.0/24  Direct  0    0           D   10.1.1.254      GigabitEthernet
0/0/0
     10.1.1.254/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
     10.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
       12.1.1.0/24  Direct  0    0           D   12.1.1.1        GigabitEthernet
0/0/1
       12.1.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
     12.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
           

AR2的配置:

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 20.1.1.254 24
Aug 31 2019 21:34:17-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[0]:The line protocol
 IP on the interface GigabitEthernet0/0/0 has entered the UP state. 
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 12.1.1.2 24
Aug 31 2019 21:34:37-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[1]:The line protocol
 IP on the interface GigabitEthernet0/0/1 has entered the UP state. 
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]ip add 23.1.1.1 24
Aug 31 2019 21:34:59-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[2]:The line protocol
 IP on the interface GigabitEthernet0/0/2 has entered the UP state. 
[Huawei-GigabitEthernet0/0/2]q
[Huawei]rip 1
[Huawei-rip-1]network 12.0.0.0
[Huawei-rip-1]network 20.0.0.0
[Huawei-rip-1]network 23.0.0.0
[Huawei-rip-1]q
[Huawei]dis rip 1 d
 ---------------------------------------------------
 Advertisement State : [A] - Advertised
                       [I] - Not Advertised/Withdraw
 ---------------------------------------------------
   10.0.0.0/8, cost 1, ClassfulSumm
   10.0.0.0/8, cost 1, [A], nexthop 12.1.1.1
   12.0.0.0/8, cost 0, ClassfulSumm
       12.1.1.0/24, cost 0, [A], Rip-interface
   20.0.0.0/8, cost 0, ClassfulSumm
       20.1.1.0/24, cost 0, [A], Rip-interface
   23.0.0.0/8, cost 0, ClassfulSumm
       23.1.1.0/24, cost 0, [A], Rip-interface
[Huawei]dis ip routing-table 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 14       Routes : 14       

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

       10.0.0.0/8   RIP     100  1           D   12.1.1.1        GigabitEthernet
0/0/1
       12.1.1.0/24  Direct  0    0           D   12.1.1.2        GigabitEthernet
0/0/1
       12.1.1.2/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
     12.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
       20.1.1.0/24  Direct  0    0           D   20.1.1.254      GigabitEthernet
0/0/0
     20.1.1.254/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
     20.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
       23.1.1.0/24  Direct  0    0           D   23.1.1.1        GigabitEthernet
0/0/2
       23.1.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
     23.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
           

用PC1 ping PC2測試:

PC>ping 12.1.1.1

Ping 12.1.1.1: 32 data bytes, Press Ctrl_C to break
From 12.1.1.1: bytes=32 seq=1 ttl=255 time=110 ms
From 12.1.1.1: bytes=32 seq=2 ttl=255 time=31 ms
From 12.1.1.1: bytes=32 seq=3 ttl=255 time=31 ms
From 12.1.1.1: bytes=32 seq=4 ttl=255 time=31 ms
From 12.1.1.1: bytes=32 seq=5 ttl=255 time=31 ms

--- 12.1.1.1 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/46/110 ms

PC>ping 12.1.1.2

Ping 12.1.1.2: 32 data bytes, Press Ctrl_C to break
From 12.1.1.2: bytes=32 seq=1 ttl=254 time=156 ms
From 12.1.1.2: bytes=32 seq=2 ttl=254 time=78 ms
From 12.1.1.2: bytes=32 seq=3 ttl=254 time=62 ms
From 12.1.1.2: bytes=32 seq=4 ttl=254 time=32 ms
From 12.1.1.2: bytes=32 seq=5 ttl=254 time=46 ms

--- 12.1.1.2 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 32/74/156 ms

PC>ping 20.1.1.254

Ping 20.1.1.254: 32 data bytes, Press Ctrl_C to break
From 20.1.1.254: bytes=32 seq=1 ttl=254 time=47 ms
From 20.1.1.254: bytes=32 seq=2 ttl=254 time=62 ms
From 20.1.1.254: bytes=32 seq=3 ttl=254 time=62 ms
From 20.1.1.254: bytes=32 seq=4 ttl=254 time=93 ms
From 20.1.1.254: bytes=32 seq=5 ttl=254 time=109 ms

--- 20.1.1.254 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 47/74/109 ms

PC>ping 20.1.1.1

Ping 20.1.1.1: 32 data bytes, Press Ctrl_C to break
Request timeout!
From 20.1.1.1: bytes=32 seq=2 ttl=126 time=31 ms
From 20.1.1.1: bytes=32 seq=3 ttl=126 time=31 ms
From 20.1.1.1: bytes=32 seq=4 ttl=126 time=47 ms
From 20.1.1.1: bytes=32 seq=5 ttl=126 time=31 ms

--- 20.1.1.1 ping statistics ---
  5 packet(s) transmitted
  4 packet(s) received
  20.00% packet loss
  round-trip min/avg/max = 0/35/47 ms
           

2. RIP v1與RIP v2的差別

RIP v1:

  1. 使用廣播位址255.255.255.255
  2. 不支援VLSM(可變長子網路遮罩)和CIDR(無類域間路由),隻支援有類
  3. 不支援預設關閉彙總功能
  4. 不支援路由标記功能
  5. 封包沒有掩碼和下一跳位址
  6. 不支援認證

    RIP V2:

  7. 是用多點傳播位址224.0.0.9或廣播位址
  8. 支援無VLSM和CIDR
  9. 支援關閉彙總功能
  10. 支援路由标記功能
  11. 封包有掩碼和下一跳位址
  12. 支援明文認證和MD5密文認證

3. RIP v2的配置

[Huawei]rip 1
[Huawei-rip-1]version 2
//關閉自動彙總功能
[Huawei-rip-1]undo summary
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]network 12.0.0.0
           

4. 四個定時器

**

Update timer(更新定時器):當此定時器逾時時,立即發送更新封包

Age timer(老化定時器):RIP裝置如果在老化時間内沒有收到鄰居發來的更新封包,則認為該路由不可達

Garbage-collect timer(垃圾收集定時器):如果在垃圾收集時間内沒有收到不可達路由發來更新封包,則該路由将從路由表中徹底删除

Suppress timer(抑制定時器):當RIP收到對端的路由更新,其cost為16,對應路由進入抑制狀态,并啟動抑制定時器。為防止路由震蕩,在抑制定時器逾時前,即使再收到cost小于16的更新,也不接受。當抑制定時器逾時後,就重新允許接收對端發來的更新。

[Huawei]rip 1 
//設定更新時間為20秒,老化時間為100秒,垃圾收集時間30秒
[Huawei-rip-1]timers rip 20 100 30
           

5. RIP的防環機制

A. 水準分割:路由器從某個接口學到的路由,不會從該接口再發回給鄰居路由器。再NBMA網絡中,預設不開啟水準分割。

[Huawei]int g0/0/1
//關閉水準分割	
[Huawei-GigabitEthernet0/0/1]undo rip split-horizon 
//開啟水準分割
[Huawei-GigabitEthernet0/0/1]rip split-horizon 
           

B. 毒性反轉:路由器從某個接口學到路由後,将該路由的跳輸設定為16,并從原接收接口發送給鄰居路由器。利用這種方式可以清除對方的無用路由。

同時配置了水準分割與毒性反轉,隻有毒性反轉生效。

[Huawei]int g0/0/1
//關閉毒性反轉	
[Huawei-GigabitEthernet0/0/1]undo rip poison-reverse 
//開啟毒性反轉
[Huawei-GigabitEthernet0/0/1]rip poison-reverse
           

C. 觸發更新:預設情況下,路由器每30秒向鄰居路由發送一次路由跟新;開啟觸發更新後,當本地路由資訊發生變化時,立即向鄰居路由器發送路由跟新,進而加速了網絡收斂。

D. 路由毒化:當接口失效後,直接将路由cost值設定為16并通告出去。

6. metricin和metricout

metricin 用于在接收到路由後,給其增加一個附加的路徑成本,再将新的路徑成本釋出出去。會影響本地裝置與其他裝置的路由選擇。

metricout 用于自身路由的釋出,給其增加一個附加路徑成本,但自身路由表中的值不會變化。不影響本地裝置的路由選擇,但會影響其他裝置的路由選擇。

[Huawei]int g0/0/1
// metricin 設為5
[Huawei-GigabitEthernet0/0/1]rip metricin 5
//關閉 metricin
[Huawei-GigabitEthernet0/0/1]undo rip metricout
// metricout 設為3
[Huawei-GigabitEthernet0/0/1]rip metricout 3
//關閉 metricout
[Huawei-GigabitEthernet0/0/1]undo rip metricout
           

7. 控制收發更新路由封包

Input:允許端口接收更新封包。

Output:允許端口發送更新封包。

抑制端口:允許端口接收封包,禁止發送封包。抑制端口的優先級大于Input和Output。一般配置在與終端連接配接的端口,不要配置在路由器之間。

[Huawei]int g0/0/1
//關閉 Output
[Huawei-GigabitEthernet0/0/1]undo rip output 
//關閉 Input
[Huawei-GigabitEthernet0/0/1]undo rip input 
//開啟 Output
[Huawei-GigabitEthernet0/0/1]rip output 
//開啟 Input
[Huawei-GigabitEthernet0/0/1]rip input
[Huawei-GigabitEthernet0/0/1]q
//開啟抑制端口
[Huawei]rip 1
[Huawei-rip-1]silent-interface g0/0/1 
//關閉抑制端口
[Huawei-rip-1]undo silent-interface g0/0/1
           
  1. 認證
[Huawei]int g0/0/1
//配置密文認證,密碼為“hello”
[Huawei-GigabitEthernet0/0/1]rip authentication-mode md5 usual cipher hello
//配置明文認證,密碼為“123”
[Huawei-GigabitEthernet0/0/1]rip authentication-mode simple cipher 123
           

其他裝置的端口也要配置相同的認證方式和密碼

9. 路由彙總

[Huawei]int lo 1
[Huawei-LoopBack1]ip add 200.1.0.1 24
[Huawei-LoopBack1]int lo 2
[Huawei-LoopBack2]ip add 200.1.1.1 24
[Huawei-LoopBack2]int lo 3
[Huawei-LoopBack3]ip add 200.1.2.1 24
[Huawei-LoopBack3]int lo 4
[Huawei-LoopBack4]ip add 200.1.3.1 24
[Huawei-LoopBack4]rip 1
//隻有RIP v2才支援無類域間路由
[Huawei-rip-1]version 2
[Huawei-rip-1]undo summary 
[Huawei-rip-1]int g0/0/1
[Huawei-GigabitEthernet0/0/1]rip summary-address 200.1.0.0 255.255.252.0
           

繼續閱讀