《[计算机硬件及网络]新版CCNPROUTE实验.doc》由会员分享，可在线阅读，更多相关《[计算机硬件及网络]新版CCNPROUTE实验.doc（36页珍藏版）》请在三一办公上搜索。
1、一、.Access-list如何过滤奇数或偶数的地址？如：将 10.1.11.010.1.12.010.1.13.010.1.14.0（1）过滤掉偶数的路由。access-list 1 permit 10.1.1.0 0.0.254.255（2）过滤掉奇数的路由 access-list 1 deny 10.1.1.0 0.0.0.254.255二、prefix-list(1)1.ip prefix-list A permit 0.0.0.0/0 ge 32 All host routes2.ip prefix-list B permit 128.0.0.0/2 ge 17 Any subnet
2、 in class B address space3.ip prefix-list C permit 0.0.0.0/0 le 32 All routes4.ip prefix-list D permit 0.0.0.0/0 Just the default route5.ip prefix-list E permit 0.0.0.0/1 le 24 Any prefix in class A address space covering at least 256 addresses(2)1.Contruct a prefix-list that permits only the 192.16
3、8.1.0/24 networkip prefix-list test1 permit 192.168.1.0/242.Contrace a prefix-list that denies network 119.0.0.0,and permits al other prefixes (including all subnets of 119.0.0.0)ip prefix-list test2 deny 119.0.0.0/8ip prefix-list test2 permit 0.0.0.0/1 le 323. Contract a prefix-list that permits on
4、ly the default routeip prefix-list test3 permit 0.0.0.0/04.Contract a prefix-list that permits everything except the default routeip prefix-list test4 deny 0.0.0.0/0ip prefix-list test4 permit 0.0.0.0/0 le 325. Contract a prefix-list that permits network 172.0.0.0,and any of its subnets,and denies a
5、ll other prefixesip prefix-list test5 permit 172.16.0.0/16 le 326. Contract a prefix-list that permit only the following prefixes10.2.8.32/2710.2.8.32/2810.2.8.32/2910.2.8.32/30ip prefix-list test6 permit 10.2.8.32/27 le 307 .Contract a prefix-list that permit s 197.25.94.128/25denies 197.25.94.192/
6、26permits 197.25.94.224/27denies 197.25.94.240/28permits 197.25.94.248/29denies 197.25.94.252/30permits all other prefixes except for 198.82.0.0/16ip prefix-list test7 deny 197.25.94.192/26ip prefix-list test7 deny 197.25.94.240/28ip prefix-list test7 deny 197.25.94.252/30ip prefix-list test7 deny 1
7、98.82.0.0/16ip prefix-list test7 permit 0.0.0.0/0 le 328. .Contract a prefix-list that permits any prefix matching the first 20 bits of 175.29.64.0 which has a mask of at least /26 but not exceeding /29,and denies allother prefixesip prefix-list test8 permit 175.29.64.0/20 ge 26 le 299. .Contract a
8、prefix-list that denies any prefix matching the first 19 bits of 15.26.96.0 with any mask up to and including /32,and permits any other prefixip prefix-list test9 deny 15.26.96.0/19 le 32ip prefix-list test9 permit 0.0.0.0/0 le 3210. .Contract a prefix-list that denies the RFC 1918 private networks
9、and any of their subnets,and permits everything elseip prefix-list test10 deny 10.0.0.0/0 le 32ip prefix-list test10 deny 172.16.0.0/12 le 32ip prefix-list test10 deny 192.168.0.0/16 le 32ip prefix-list test10 permit 0.0.0.0/0 le 3211. .Contract a prefix-list that permits any subnet of network 15.0.
10、0.0(but not the network),and denies everything else ip prefix-list test11 permit 15.0.0.0/8 ge 912. .Contract a prefix-list that denies 162.56.0.0/16 and all of its subnets (exception of 162.56.209.208/29 is permitted),and permits all other prefixesip prefix-list test12 permit 162.56.209.208/29ip pr
11、efix-list test12 deny 162.56.0.0/16 le 32ip prefix-list test12 permit 0.0.0.0/0 le 3213. .Contract a prefix-list that permit the CIDR block containing the thirty-two class C networks beginning with 200.202.160.0/24ip prefix-list test13 permit 200.202.160.0/19 (是一个地址汇总的问题)14. .Contract a prefix-list
12、that denies any prefix for which the most significant four bits are”0110”,and permits everything elseip prefix-list test14 deny 96.0.0.0/4 le 32ip prefix-list test14 permit 0.0.0.0/0 le 3215. .Contract a prefix-list that permits the host address of “CatSpace”, and denies everything elseip prefix-lis
13、t test15 permit 64.82.100.67/3216. .Contract a prefix-list that permits only classful networks,and denies everything elseip prefix-list test16 permit 0.0.0.0/1 ge8 le 32ip prefix-list test16 permit 128.0.0.0/2 ge 16 le 32ip prefix-list test16 permit 192.0.0.0/3 ge 24 le 3217. .Contract a prefix-list
14、 that denies only supernets, and permits everything elseip prefix-list test17 deny 0.0.0.0/1 le 7ip prefix-list test17 deny 128.0.0.0/2 le 15ip prefix-list test17 deny 192.0.0.0/3 le 23ip prefix-list test17 permit 0.0.0.0/0 le 32注：低于主类网络号的网络称为“超网”（supernet）18. .Contract a prefix-list that permits on
15、ly subnets ,and denies everything elseip prefix-list test18 permit 0.0.0.0/1 ge 9ip prefix-list test18 permit 128.0.0.0/2 ge 17ip prefix-list test18 permit 192.0.0.0/3 ge 2519. .Contract a prefix-list that permits only CIDR blocks encompassing at least 32 class-C equivalentsip prefix-list test19 den
16、y 0.0.0.0/0ip prefix-list test19 permit 0.0.0.0/0 le 1920. .Contract a prefix-list that permits only the RFC 1918 private networks and their subnetsip prefix-list test20 permit 10.0.0.0/8 le 32ip prefix-list test20 permit 17216.0.0/12 le 32ip prefix-list test20 permit 192.168.0.0/16 le 32实验一 EIGRP的小
17、综合实验要求：1）每个路由器上要有一个环回0，如，R1的1.1.1.1/242）全网EIGRP1003）R1，R3的以太口通过DHCP从R4获得地址（不能跟缺省网关）4）R3上起一个环回100，地址是100.100.100.100/24不允许通告进EIGRP,但是全网可达5）R5 TELNET 到R4的环回0时，发现自己在R2身上6）R2下路接口带宽改为512K,，但R2到R4的网段仍然是负载均衡的7）R5上起环回10到环回20，要求手动汇总，让R1,R2,R3 学到最精确的汇总路由10.0 0000101011.0 00001011 172.16.10.0/2312.0 0000110013
18、.0 00001101 172.16.12.0/2314.0 0000111015.0 00001111 172.16.14.0/2316.0 0001000017.0 00010001 172.16.16.0/2318.0 0001001019.0 00010011 172.16.18.0/2320.0 00010100 172.16.20.0/24实验的具体配置：(1) R1Enconf tHostname R1Int lo0Ip address 1.1.1.1 255.255.255.0Int s1/0Ip addres 12.1.1.1 255.255.255.0No shutInt
19、fa0/0Ip address dhcpNo shutEndConf tRouter eigrp 100Network 12.1.1.0 0.0.0.255Network 1.1.1.0 0.0.0.255(2) R2EnConf tHostname R2Int lo0Ip address 2.2.2.2 255.255.255.0Int s1/1Ip address 12.1.1.2 255.255.255.0No shutInt s1/0Ip address 23.1.1.1 255.255.255.0No shutEndConf tRouter eigrp 100Network 12.1
20、.1.0 0.0.0.255Network 2.2.2.0 0.0.0.255Network 23.1.1.0 0.0.0.255EndConf tLine vty 0 4Password ciscoLoginEndConf tInt s1/0Bandwidth 512Show ip eigrp topology(查看去往R4的两条路径的度量值来确定变量值)Conf tRouter eigrp 100Variance 3 （不等价负载均衡）(3) R3EnConf tHostname R3Int lo0Ip address 3.3.3.3 255.255.255.0Int s1/1Ip add
21、ress 23.1.1.2 255.255.255.0No shutInt fa0/0Ip address dhcpNo shutEndConf tRouter eigrp 100Network 3.3.3.0 0.0.0.2555Network 23.1.1.0 0.0.0.2555Auto-summaryEndConf tInt lo100Ip address 100.100.100.100 255.255.255.255ExitIp default-network 3.0.0.0(4) R4EnConf tHostname R4Int lo0Ip address 4.4.4.4 255.
22、255.255.0Int s1/0Ip address 45.1.1.1 255.255.255.0No shutInt fa0/0Ip address 134.1.1.4 255.255.255.0No shutendConf tService dhcpNo ip dhcp conflict loggingIp dhcp excluded-address 134.1.1.2 134.1.1.2Ip dhcp excluded-address 134.1.1.4 134.1.1.254Ip dhcp pool ciscoNetwork 134.1.1.1 255.255.255.0EndCon
23、f tRouter eigrp 100Network 134.1.1.0 255.255.255.0Network 4.4.4.0 0.0.0.255Network 45.1.1.0 0.0.0.255Network 134.1.1.4 0.0.0.255EndLine vty 0 4Password ciscoLoginEndConf tIp nat inside source static tcp 2.2.2.2 23 4.4.4.4 23(用环回口作更稳定)Int f0/0Ip nat insideInt s1/0Ip nat outsideEnd(5)R5EnConf tHostnam
24、e R5Int lo0Ip address 5.5.5.5 255.255.255.0Int s1/1Ip address 45.1.1.2 255.255.255.0No shutEndConf tRouter eigrp 100Network 5.5.5.0 0.0.0.255Network 45.1.1.0 0.0.0.255实验二MPLS的基本配置(PE1,P1,PE2构成一个MPLS域，在其中运行)1):CEA-1Int lo0Ip address 1.1.1.1 255.255.255.255Int s1/1Ip address 12.1.1.1 255.255.255.0No s
25、hutRouter eigrp 100No auto-summaryNetwork 1.1.1.1 0.0.0.255Network 12.1.1.0 0.0.0.255(EIGRP通告接口子网，而OSPF通告接口地址)2):PE1Int lo0Ip add 2.2.2.2 255.255.255.255Int s1/1Ip address 12.1.1.2 255.255.255.0No shutInt s1/0Ip address 23.1.1.1 255.255.255.0No shutRouter eigrp 100No auto-summaryNetwork 2.2.2.2 0.0.
26、0.255Network 12.1.1.0 0.0.0.255Network 23.1.1.0 0.0.0.255Conf tIp cef (启动CEF是运行MPLS的前提)EndConf tMpls label protocol ldp （开始配置MPLS）Mpls ldp router-id lo0 force(强制使用环回0)EndConf tInt s1/0Mpls ip(或TAG IP) （接口上启用MPLS）3)P:Int lo0Ip address 3.3.3.3 255.255.255.255Int s1/0Ip address 23.1.1.2 255.255.255.0No
27、 shutInt s1/1Ip address 34.1.1.1 255.255.255.0No shutRouter eigrp 100No auto-summaryNetwork 3.3.3.0 0.0.0.255Network 23.1.1.0 0.0.0.255Network 34.1.1.0 0.0.0.255Conf tIp cefEndConf tMpls label protocol ldp （开始配置MPLS）Mpls ldp router-id lo0 force(强制使用环回0)Int s1/0Mpls ipInt s1/1Mpls ipEnd4)PE2Int lo0Ip
28、 address 4.4.4.4 255.255.255.255Int s1/0Ip address 34.1.1.2 255.255.255.0No shutInt s1/1Ip address 45.1.1.1 255.255.255.0No shutRouter eigrp 100No auto-summaryNetwork 4.4.4.0 0.0.0.255Network 34.1.1.0 0.0.0.255Network 45.1.1.0 0.0.0.255Conf tIp cefEndConf tMpls label protocol ldp （开始配置MPLS）Mpls ldp
29、router-id lo0 force(强制使用环回0)Int s1/0Mpls ipend5)CEA-2Int lo0Ip address 5.5.5.5 255.255.255.255Int s1/0Ip address 45.1.1.2 255.255.255.0Router eigrp 100Network 5.5.5.0 0.0.0.255Network 45.1.1.0 0.0.0.255实验三EoMPLS（Ethernet over MPLS）实验目的：让R1与R2像直接相连一样工作（即把中间的云团当作一个二层交换机来用）1):R1Conf tHostname R1Int lo0
30、Ip address 1.1.1.1 255.255.255.0Int f0/0Ip address 172.16.1.1 255.255.255.0No shutConf t Router eigrp 100No auto-summaryNetwork 1.1.1.0 0.0.0.255Network 172.16.1.0 0.0.0.2552):PE1Conf tHostname PE1Int lo0Ip address 2.2.2.2 255.255.255.255Int f0/0(没给地址)No shutInt s1/0Ip address 23.1.1.1 255.255.255.0
31、No shutRouter eigrp 1No auto-summaryNetwork 2.2.2.2 0.0.0.255Network 23.1.1.1 0.0.0.255Conf tIp cefMpls label protocol ldp (配置MPLS)Mpls ldp router id lo0 forceInt s1/0Mpls ipConf tInt f0/0Xconnect 4.4.4.4 1 encapsulation mpls (环回地址必须是32位,相当于打了一个隧道到R4)3)PConf tHostname PInt lo0Ip address 3.3.3.3 255.
32、255.255.255Int s1/1Ip address 23.1.1.2 255.255.255.0Int s1/0Ip address 34.1.1.1 255.255.255.0Router eigrp 1No auto-summaryNetwork 3.3.3.3 0.0.0.255Network 23. 1.1.1 0.0.0.255Network 34.1.1.1 0.0.0.255Conf tIp cefMpls label protocol ldp Mpls ldp router id lo0 forceInt s1/1Mpls ipInt s1/0Mpls ip4)PE2C
33、onf tHostname PE2Int lo0Ip address 4.4.4.4 255.255.255.255Int s1/1Ip address 34.1.1.2 255.255.255.0No shutInt f0/0No shut（没给地址）Router eigrp 1No auto-summaryNetwork 4.4.4.4 0.0.0.255Network 34.1.1.0 0.0.0.255Conf tIp cefMpls label protocol ldp Mpls ldp router id lo0 forceInt s1/1Mpls ipConf tInt f0/0
34、Xconnect 2.2.2.2 1 encapsulation mpls (环回地址必须是32位,相当于打了一个隧道到R4)5)R5Conf tHostname R5Int lo0Ip address 5.5.5.5 255.255.255.0Int f0/0Ip address 172.16.1.2 255.255.255.0No shutConf tRouter eigrp 100No auto-summaryNetwork 5.5.55 0.0.0.255Network 172.16.1.0 0.0.0.255实验三(1) BGP(EBGP)(1) R1:EnConf tHostnam
35、e R1No ip domain lookupLine con 0Exec-timeout 0 0Logging synchronousEndConf tInt lo0Ip address 1.1.1.1 255.255.255.0Int f0/0Ip address 12.1.1.1 255.255.255.0No shutEndRouter bgp 100No auto-summaryNo synchronizationBgp router-id 1.1.1.1Neighbor 12.1.1.2 remote-as 200(手动指定邻居地址必须是TCP可达（即能PING 通）)Networ
36、k 1.1.1.0 mask 255.255.255.0end(2) R2:EnConf tHostname R2No ip domain lookupLine con 0Exec-timeout 0 0Logging synchronousEndConf tInt lo0Ip address2.2.2.2 255.255.255.0Int f0/0Ip address 12.1.1.2 255.255.255.0No shutEndConf tRouter bgp 200No autoNo synBgp router-id 2.2.2.2Neighbor 12.1.1.1 remote-as
37、 100 /R1与R2起的是EBGP必须是直连接口/实验三（2）若拓扑变为下图时，配置BGP指定邻居时，用环回口来做(1)R1:Conf tRouter bgp 100No network 1.1.1.0 mask 255.255.255.0EndConf tIp route 2.2.2.0 255.255.255.0 12.1.1.2EndConf tRouter bgp 100No neighbor 12.1.1.2 remote-as 200Neighbor 2.2.2.2 remote-as 200Neighbor 2.2.2.2 update0source lo0Neighbor 2
38、.2.2.2 ebgp-multihop 2(2 )R2:Conf tIp route 1.1.1.0 255.255.255.0 12.1.1.1 EndConf tRouter bgp 200No neighbor 12.1.1.1 remote-as 100Neighbor 1.1.1.1 remote-as 100Neighbor 1.1.1.1 update-source lo0Neighbor 1.1.1.1 ebgp-multihop 2实验三（3）iBGP注：当从iBGP收到一条路由，由于iBGP的水平分割，而不会传递给iBGP的其他路由器(1)R1:EnConf tHostn
39、ame R1No ip domain lookupLine con 0Exec-timeout 0 0Logging synchronizationEndConf tInt lo0Ip address 1.1.1.1 255.255.255.0Int f0/0Ip address 12.1.1.1 255.255.255.0No shutEndRouter bgp 100No auto-summaryNo synchronizationBgp router-id 1.1.1.1Neighbor 12.1.1.2 remote-as 200EndConf tLo1Ip address 100.1
40、00.100.100 255.255.255.255EndConf tRouter bgp 100Network 100.100.100.100 mask 255.255.255.255(2)R2:EnConf tHostname R2No ip domain lookupLine con 0Exec-timeout 0 0Logging synchronousEndConf tInt lo0Ip address2.2.2.2 255.255.255.0Int f0/0Ip address 12.1.1.2 255.255.255.0No shutEndConf tRouter bgp 200
41、No autoNo synBgp router-id 2.2.2.2Neighbor 12.1.1.1 remote-as 100EndConf tInt s1/0Ip address 23.1.1.1 255.255.255.0No shutConf tRouter eigrp 200No auto-summaryNetwork 2.2.2.0 0.0.0.255Network 23.1.1.0 0.0.0.255EndConf tRouter bgp 200No auto-summaryNo synchronizationBgp router-id 2.2.2.2Neighbor 3.3.
42、3.3 remote-as 200Neighbor 3.3.3.3 update-source lo0Neighbor 4.4.4.4 remote-as 200Neighbor 4.4.4.4 update-source lo0Neighbor 3.3.3.3 next-hop-self(iBGP边界向内部做如果不配置该语句，学不到到达R1的lo0的路由)Neighbor 4.4.4.4 next-hop-self(3) R3:EnConf tHostname R3No ip domain lookupLine con 0Exec-timeout 0 0Logging synchroniza
43、tion EndConf tInt lo0Ip address 3.3.3.3 255.255.255.0Int s1/1Ip address 23.1.1.2 255.255.255.0No shutInt s1/0Ip address 34.1.1.1 255.255.255.0No shutEndConf tRouter eigrp 200No auto-summaryNetwork 3.3.3.0 0.0.0.255Network 23.1.1.0 0.0.0.255Network 34.1.1.0 0.0.0.255EndRouter bgp 200No auto-summaryNo
44、 synchronizationBgp router-id 3.3.3.3Neighbor 2.2.2.2 remote-as 200Neighbor 2.2.2.2 update-source lo0Neighbor 4.4.4.4 remote-as 200Neighbor 4.4.4.4 update-source lo0End(4) R4:EnConf tHostname R4No ip domain lookup Line con 0Exec-timeout 0 0Logging synchronizationEndInt lo0Ip address 4.4.4.4 255.255.255.0Int s1/1Ip address 34.1.1.2 255.255.255.0No shutEndConf tRouter e
