《网络实训指导书.doc》由会员分享，可在线阅读，更多相关《网络实训指导书.doc（251页珍藏版）》请在三一办公上搜索。
1、Lab ManualIndexBuilding Scalable Cisco Internetworks4Lab 1.Configuring Basic EIGRP5Lab 2.Configuring Default-network for EIGRP9Lab 3.Manually Summarizing EIGRP Routes16Lab 4.Configuring EIGRP Unequal-Cost Paths23Lab 5.Configuring EIGRP Authentication27Lab 6.Understand EIGRP Query31Lab 7.Configuring
2、Basic Multi Area OSPF and Area Summary39Lab 8.Configuring OSPF in NBMA44Lab 9.Configuring OSPF Authentication52Lab 10.Configuring OSPF External Summary59Lab 11.Configuring OSPF Default Route With Metric63Lab 12.Configuring OSPF Stub Area67Lab 13.Configuring OSPF Totally Stub Area72Lab 14.Configuring
3、 OSPF NSSA Area and NSSA Totally Stub76Lab 15.Configuring OSPF Virtual-Link84Lab 16.Configuring OSPF Virtual-Link（Cont.）88Lab 17.Understand OSPF Routing Between Inter Area92Lab 18.Configuring Basic IS-IS95Lab 19.Configuring IS-IS Multi Area and Summary Route100Lab 20.Migrate IS-IS Area107Lab 21.Redi
4、stributing into RIP and OSPF112Lab 22.Redistributing into EIGRP and IS-IS116Lab 23.Redistribution Using Administrative Distance121Lab 24.Filtering Routing Updates with a Distribute List124Lab 25.Filtering Routing Updates with a Router Maps128Lab 26.Using Route Tag Filtering Routing Updates132Lab 27.
5、Policy-based route136Lab 28.Configuring Basic BGP140Lab 29.Configuring BGP Using Loopback Addresses144Lab 30.Understand BGP Auto-Summary148Lab 31.Configuring BGP Summarization153Lab 32.Understand BGP Sychronization Rule157Lab 33.BGP Neighbor Authentication165Lab 34.Configuring BGP Local Preference17
6、0Lab 35.Using Route Maps to Configuring BGP Local Preference176Lab 36.Configuring BGP Multi-Exit Discriminator183Lab 37.Configuring BGP Weight189Lab 38.Affects the BGP Routing By Path Prepend195Lab 39.Using Route Tag to Store BGP AS-Path199Lab 40.Using Distribute-list to Filtering BGP Routing205Lab
7、41.Using Route-Map to Filtering BGP Routing208Lab 42.Using Prefix-List to Filtering BGP Routing211Lab 43.Configuring IPv6 Static Routing and Summary216Lab 44.Configuring IPv6 to IPv4 Tunneling223Lab 45.Configuring IPv6 NAT-PT227Lab 46.Configuring RIPng and Manual Summary230Lab 47.Configuring OSPFv3
8、and Area Authentication236Lab 48.Configuring OSPFv3 MultiArea and Area Summary241Lab 49.Configuring ISIS for IPv6 and Route Summary246Lab 50.Configuring Basic MP-BGP4 and Aggregate Addressing253Lab 51.Configuring MP-BGP4 Route Filtering259Lab ManualBuilding Scalable Cisco InternetworksLab ManualLab
9、1. Configuring Basic EIGRP实验目的：1、掌握EIGRP的基本配置。2、掌握EIGRP的通配符掩配置方法。3、掌握EIGRP的自动汇总特性，以及如何关闭自动汇总。4、掌握EIGRP的手工汇总。实验拓扑图：实验步骤及要求：1、配置各台路由器的IP地址，并且使用ping命令确认各路由器的直连口的互通性。2、在三台路由配置EIGRP自治系统编号为50。3、登录到R2路由器，作如下配置（其它路由器参照其进行配置）： R2#configure terminalR2(config-if)#router eigrp 50R2(config-router)#network 172.16
10、.0.0默认情况下，EIGRP在配置路由器时，可以直接network主类网络号。此处配置，可以同时将R2路由器两个串口直接加入到EIGRP的路由进程中。R2(config-router)#network 131.131.0.0R2(config-router)#exit4、在任意一台路由器上观察EIGRP的邻居关系：R2#show ip eigrp 50 neighbors 查看eigrp 50自治系统的邻居IP-EIGRP neighbors for process 50H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt
11、 Num1 172.16.1.6 Se1/1 13 00:00:37 436 2616 0 20 172.16.1.1 Se1/0 13 00:02:34 736 4416 0 4其中：列H指出邻居学习的顺序,Address指出邻居地址，Interface指出邻居所在本地接口。5、在任意一台路由器上查看路由器，确认路由：R2#show ip route 172.16.0.0/16 is variably subnetted, 3 subnets, 2 masksC 172.16.1.4/30 is directly connected, Serial1/1D 172.16.0.0/16 is
12、a summary, 00:06:33, Null0EIGRP会自动的为可汇总的子网生成一条指向null0口的路由。其目的：1.汇总路由2.避免路由黑洞C 172.16.1.0/30 is directly connected, Serial1/0D 192.168.4.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1D 10.0.0.0/8 90/2297856 via 172.16.1.1, 00:06:34, Serial1/0C 131.131.0.0/16 is directly connected, Loopback0D 192
13、.168.0.0/24 90/229785690为EIGRP的内部管理距离2297856为EIGRP计算的度量(FD) via 172.16.1.6, 00:04:39, Serial1/1D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1D 192.168.2.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1D 192.168.3.0/24 90/2297856 via 172.16.1.6, 00:04:39, Serial1/1R2#6、在R1路由器上使用更简
14、洁的查看关于EIGRP的路由命令：R2#show ip route eigrp 172.16.0.0/16 is variably subnetted, 3 subnets, 2 masksD 172.16.0.0/16 is a summary, 00:10:09, Null0D 192.168.4.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1D 10.0.0.0/8 90/2297856 via 172.16.1.1, 00:10:10, Serial1/0R1路由器的自动汇总的路由。D 192.168.0.0/24 90/2297
15、856 via 172.16.1.6, 00:08:14, Serial1/1D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1D 192.168.2.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1D 192.168.3.0/24 90/2297856 via 172.16.1.6, 00:08:14, Serial1/1R2#7、我们注意到在R2路由器上有一条指向s1/0口的10.0.0.0/8的汇总路由，这是EIGRP路由协议自动汇总的特性体现。可以使用no
16、auto-summary命令关闭。如下：R1(config)R1(config)#router eigrp 50R1(config-router)#no auto-summary关于EIGRP的自动汇总特性。 R1(config-router)#exitR1(config)#随后在R2上观察路由表的变化，如下显示：R2#show ip route eigrp 172.16.0.0/16 is variably subnetted, 3 subnets, 2 masksD 172.16.0.0/16 is a summary, 00:07:26, Null0D 192.168.4.0/24 90
17、/2297856 via 172.16.1.6, 00:05:09, Serial1/1 10.0.0.0/24 is subnetted, 4 subnetsD 10.1.3.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 10.1.2.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 10.1.1.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 10.1.4.0 90/2297856 via 172.16.1.1, 00:02:31, S
18、erial1/0当关闭了自动汇总后，R2可以看到明细路由。D 192.168.0.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1D 192.168.1.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1D 192.168.2.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1D 192.168.3.0/24 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1R2#7、EIGRP也可以进行手工地址
19、总结。手工地址总结，可以有效的减少路由表的大小。比如在R2上的路由中关于R3的192.168.*.*的网络显示为四条具体路由，可以在R3上进行如下配置，减少路由通告条目。R3(config)#interface serail 1/0R3(config-if)#ip summary eigrp 50 192.168.0.0 255.255.252.0R3(config-if)#exit8、观察R2路由器的路由表:R2#show ip route eigrp D 10.1.1.0 90/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 10.1.4.0 90
20、/2297856 via 172.16.1.1, 00:02:31, Serial1/0D 192.168.0.0/22 90/2297856 via 172.16.1.6, 00:05:09, Serial1/1显示为一条汇总路由。有效的减少路由表的大小。 9、在R2上使用通配符掩码进行配置EIGRP:R2(config)#no router eigrp 50R2(config)#router eigrp 50R2(config-router)#network 172.16.1.0 0.0.0.3使用通配符掩码，可以很好的控制，哪些接口加入到EIGRP的进程中工作。否则可能需要使用passi
21、ve-interface命令进行了设置。此处仅将s1/0接口加入到eigrp中，所以R2的s1/1接口，和R3的路由不会被转发给R1.R2(config-router)#network 131.131.0.0R2(config-router)#exit10、在R2确认邻居，此处仅发现与R1建立了邻居关系。R2#show ip eigrp neighbors IP-EIGRP neighbors for process 50H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num0 172.16.1.1 Se1/0 12
22、00:04:57 1510 5000 0 511、查看R1的路由表，进行确认所学习到的路由。R1#show ip route eigrp 172.16.0.0/16 is variably subnetted, 2 subnets, 2 masksD 172.16.0.0/16 is a summary, 00:02:55, Null0 10.0.0.0/8 is variably subnetted, 5 subnets, 2 masksD 10.0.0.0/8 is a summary, 00:02:55, Null0D 131.131.0.0/16 90/2297856 via 172.
23、16.1.2, 00:00:06, Serial1/1由于采用通配符掩码，进行选择性的配置，所以R1仅学习到131.131.0.0/16的路由条目。无法学习到R3的直接路由。R1#12、实验完成。Lab ManualLab 2. Configuring Default-network for EIGRP实验目的：1、掌握通过ip default-network命令配置EIGRP默认网络。实验拓扑图：实验步骤及要求：1、配置各台路由器的IP地址，并且使用Ping命令确认各路由器的直连口的互通性。2、配置R3路由器用于模拟外部网络，也可以把其假想为Internet网络，并且在R3上配置一条默认用于
24、，以便路由来自于EIGRP内部网络的数据包。R3(config)#R3(config)#ip route 0.0.0.0 0.0.0.0 192.168.10.1配置此条路由到达EIGRP内部网络。R3(config)#3、配置R1、R2和R5路由器的EIGRP路由协议，配置如下所示：R1(config)#router eigrp 50R1(config-router)#network 172.16.0.0R1(config-router)#exitR5(config)#router eigrp 50R5(config-router)#network 172.16.0.0R5(config-r
25、outer)#exitR2(config)#router eigrp 50R2(config-router)#network 172.16.0.0R2(config-router)#exit4、在R2上查看EIGRP的邻居，确认EIGRP正常运行：R2#show ip eigrp neighbors IP-EIGRP neighbors for process 50H Address Interface Hold Uptime SRTT RTO Q Seq Type (sec) (ms) Cnt Num1 172.16.1.6 Et1/2 11 00:00:54 1 3000 0 2 0 17
26、2.16.1.1 Et1/0 12 00:00:54 1 3000 0 2 5、在R2上配置静态默认路由，用于到达外部网络，配置如下：R2(config)#ip route 0.0.0.0 0.0.0.0 192.168.10.2R2通过此路由可以访问到外部网络。R2(config)#R2#ping 192.168.1.1测试静态默认路由的有效性。Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.!Success rate is 80 percen
27、t (4/5), round-trip min/avg/max = 4/43/92 msR2#6、路由器R2作为企业的出口路由器，由于其配置了静态路由，因此其可以直接访问外部，但是内部的R1和R5路由器由于缺少路由，因此无法访问外网。下面显示了R1路由器的路由表和其向外部发起ping的访问结果：R1#show ip route Gateway of last resort is not set 172.16.0.0/30 is subnetted, 2 subnetsD 172.16.1.4 90/284160 via 172.16.1.2, 00:06:40, FastEthernet0/1
28、C 172.16.1.0 is directly connected, FastEthernet0/1路由表中显示出R1没有外部网络路由。R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.由于R1缺少到达外部网络路由，因此R1无法访问外部网络。Success rate is 0 percent (0/5)R1#R5#show ip route Gateway of last resort is not s
29、et 172.16.0.0/30 is subnetted, 2 subnetsC 172.16.1.4 is directly connected, Ethernet1/1D 172.16.1.0 90/307200 via 172.16.1.5, 00:12:15, Ethernet1/1R5#R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.内部路由器R5也遇到了相同的问题。Success rate is
30、 0 percent (0/5)R5#7、为了解决问题，只需要在R1和R5路由器上配置一条指向R2路由器的静态默认路由即可，如下所示：R1(config)#ip route 0.0.0.0 0.0.0.0 172.16.1.2 R1(config)#exitR1#show ip route Gateway of last resort is 172.16.1.2 to network 0.0.0.0 172.16.0.0/30 is subnetted, 2 subnetsD 172.16.1.4 90/284160 via 172.16.1.2, 00:09:19, FastEthernet
31、0/1C 172.16.1.0 is directly connected, FastEthernet0/1S* 0.0.0.0/0 1/0 via 172.16.1.2为R1添加一条到达外网静态默认路由。R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!由于已经此时配置了默认路由，所以此时R1可以访问到外部网络。Success rate is 100 percent (5/5), round-trip
32、min/avg/max = 48/71/92 msR1#R5(config)#ip route 0.0.0.0 0.0.0.0 172.16.1.5 R5(config)#exitR5#R5#show ip route Gateway of last resort is 172.16.1.5 to network 0.0.0.0 172.16.0.0/30 is subnetted, 2 subnetsC 172.16.1.4 is directly connected, Ethernet1/1D 172.16.1.0 90/307200 via 172.16.1.5, 00:13:57, E
33、thernet1/1S* 0.0.0.0/0 1/0 via 172.16.1.5R5#R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 32/53/64 msR5#8、根据上面配置，其实只需要给内部路由器配置默认路由指向出口路由器R2即可解决外部网络无法访问的问题。但是如果内部网络路由器数量
34、较多时，采用手工配置静态默认路由，则会显得非常繁锁。因此，建议采用默认网络命令，让R2路由器自动的向内部通告默认路由。9、将R1和R5的静态默认路由删除后，查看R1和R5的路由表。如下所示：R1(config)#no ip route 0.0.0.0 0.0.0.0 172.16.1.2 R1(config)#exitR1#R1#show ip route Gateway of last resort is not set 172.16.0.0/30 is subnetted, 2 subnetsD 172.16.1.4 90/284160 via 172.16.1.2, 00:19:02,
35、FastEthernet0/1C 172.16.1.0 is directly connected, FastEthernet0/1R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:.Success rate is 0 percent (0/5)R1#R5(config)#no ip route 0.0.0.0 0.0.0.0 172.16.1.5 R5(config)#exitR5#R5#show ip
36、route Gateway of last resort is not set 172.16.0.0/30 is subnetted, 2 subnetsC 172.16.1.4 is directly connected, Ethernet1/1D 172.16.1.0 90/307200 via 172.16.1.5, 00:19:42, Ethernet1/1R5#R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seco
37、nds:.Success rate is 0 percent (0/5)R5#10、在R2上配置默认网络，配置如下所示：R2(config)#router eigrp 50R2(config-router)#network 192.168.10.0R2(config-router)#exitR2(config)#ip default-network 192.168.10.0R2(config)#exitR2#show ip route Gateway of last resort is 192.168.10.2 to network 0.0.0.0 * 192.168.10.0/24 is v
38、ariably subnetted, 2 subnets, 2 masksD* 192.168.10.0/24 is a summary, 00:00:53, Null0ip default-network命令标识的默认网络。C 192.168.10.0/30 is directly connected, Ethernet1/1 172.16.0.0/16 is variably subnetted, 3 subnets, 2 masksC 172.16.1.4/30 is directly connected, Ethernet1/2D 172.16.0.0/16 is a summary,
39、 00:22:22, Null0C 172.16.1.0/30 is directly connected, Ethernet1/0S* 0.0.0.0/0 1/0 via 192.168.10.2手工配置的静态默认路由。R2#11、查看R1和R5路由器的路由表，并且尝试访问外部网络：R1#show ip route Gateway of last resort is 172.16.1.2 to network 192.168.10.0D* 192.168.10.0/24 90/284160 via 172.16.1.2, 00:02:03, FastEthernet0/1由于R2上配置的默认
40、网络，EIGRP路由器会将其通告给R1路由器。 172.16.0.0/30 is subnetted, 2 subnetsD 172.16.1.4 90/284160 via 172.16.1.2, 00:02:04, FastEthernet0/1C 172.16.1.0 is directly connected, FastEthernet0/1R1#R1#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Suc
41、cess rate is 100 percent (5/5), round-trip min/avg/max = 48/105/188 msR1#R5#show ip route Gateway of last resort is 172.16.1.5 to network 192.168.10.0D* 192.168.10.0/24 90/307200 via 172.16.1.5, 00:04:15, Ethernet1/1 172.16.0.0/30 is subnetted, 2 subnetsC 172.16.1.4 is directly connected, Ethernet1/
42、1D 172.16.1.0 90/307200 via 172.16.1.5, 00:04:19, Ethernet1/1R5# R5#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 76/87/96 msR5#12、使用ip default-network命令可以有效减少内部网络配置任务。不过需
43、要注意的是ip default-network其指出默认网络，建议采用主类网络。如果使用无类网络，则可能会出现无法解释的问题。38、实验完成。CCNP Lab ManualLab 3. Manually Summarizing EIGRP Routes实验目的：1、理解EIGRP的自动汇总的缺点。2、掌握EIGRP的手工自动总结的配置方法。实验拓扑图：实验步骤及要求：1、配置各台路由器的IP地址，并且使用Ping命令确认各路由器的直连口的互通性。2、配置各台路由器的EIGRP协议,并且不关闭自动总结。3、在R2上使用ping测试网络路由，会发现R2路由器无法ping通路由器R4所连接的10.1.X.0/24网络子网。如下所示：R2#ping 10.1.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 1/46/92 msR2#R2#ping 10.1.16.1Type escape sequence to abort.Sending 5, 10
