交换 路由 -路由器 -多层交换机 -核心工做表: 路由表 -路由条目 类型 prefix/mask [AD/Metric] via next-hop , interface Conneted Static RIP 路由类型: 直连路由 非直连 静态 动态 IGP:Internal gateway protocol ,内部网关协议 目的: 在内网,快速,计算出一个去往目标网络的,无环,最短, 数据转发路径; DV-distance vector ,距离矢量路由协议 RIP IGRP EIGRP LS-link state ,链路状态路由协议 ISIS OSPF EGP: external gateway protocol ,外部网关协议 目的: 在网络之间,经过BGP实现路由的灵活控制和选路,同时确保 无环; BGP
RIP 协议配置命令: 一、配置终端设备 - PC1/2 二、配置网络设备 R1/R2/R3/R4 router rip // 启用路由协议 RIP version 2 // 配置路由器使用 RIP 版本2 no auto-summary // 关闭 RIP 协议的自动汇总 network 192.168.10.0 network 192.168.12.0 // 以上两个network表示的是 宣告网络 192.168.10.0 192.168.12.0 进入 RIP 协议; 三、验证、测试、保存 show ip protocols //显示当前设备上正在使用的全部路由协议 show ip route // 显示路由表 PC1/2: ping 192.168.20.1 R1/R2/R3/R4 : Route#write
在IGP协议中, network 的做用: # network 10.0.0.0 , 10.0.0.0 表示的是一个“网络范围” &在设备上凡是被 10.0.0.0 表示的范围所覆盖住的接口,都启用 路由协议进程: 一、能够在该端口上发送协议报文; 二、能够在该端口上接收协议报文; 三、能够将该端口上的IP地址中的网络部分,放入协议报文中; interface gi0/1 -> 192.168.34.4 255.255.255.0 interface gi0/2 -> 192.168.20.254 255.255.255.0 interface loopback 0 -> 10.10.4.4 255.255.255.0 #发包 #收包 #10.10.4.0/24 --> RIP --> 发出去; router rip network 10.10.4.0 255.255.255.0
==================================================================数据库
RIP -定义: routing information protocol , 路由信息协议 在内网的多个路由器之间自动的学习、同步路由表, 以计算出一个去往目标网络的最短、无环、数据转发路径; -场景: 通常在小规模的企业内部网络使用 (由于RIP有最大跳数限制,最大为 16 跳) -版本: version 1 #属于有类路由选择协议(报文不携带子网掩码) #广播的发送方式 - 255.255.255.255 #没法关闭自动汇总 version 2 #属于无类路由选择协议(报文携带子网掩码) #组播的发送方式 - 224.0.0.9 #多了一个路由标记(tag)字段,能够实现路由的批量管理; #多了一个认证功能(使用的是RIP respone报文的第一个路由条目来充当) #多了一个 mask 字段,从而能够支持关闭自动汇总; #多了一个 next-hop 字段,从而能够解决“MA网络中的”次优路径问题; -报文: request:请求,用于向其余RIP路由器请求更新条目; respone:响应,用于向其余RIP路由器发送更新条目;是对request的回应 -工做表: (RIP邻居表): #凡是能与本身互通的路由器,都称之为 RIP 邻居; RIP数据库: #本地宣告的路由条目 #从其余路由器学习过来的路由条目 RIP路由表: #表示的是从数据库中挑选出来的最好的路由; -原理: 一、路由器启用RIP之后,会将本身本地路由表中的条目进行宣告进入到RIP 二、在启动RIP协议的端口上发送这些更新条目; 三、对方RIP路由器接收之后,通过路由比较,将最好的条目放入路由表; 四、全部的RIP路由器都会进行周期性、所有路由表更新,以广播的方式; (在RIPv2中,是触发式、增量更新,而且是以组播的方式) -配置 目前网络中凡是使用 RIP 的网络,均使用的 RIPv2 ; #思科 router rip version 2 no auto-summary network x.x.x.x (x.x.x.x必须是主类网络的形式) #华为 [Router]rip [id] // 若是不写后面的id,默认是1; [Router-rip-1]version 2 // 在华为中,启用RIPv2之后,默认关闭了自动汇总; [Router-rip-1]network x.x.x.x -验证 show ip protocols //查看目前正在运行的全部的路由协议; show ip rip database // 查看RIP的数据库 show ip route rip //仅仅查看路由表中的 RIP 路由; show ip route //查看路由表; display rip [id] display rip {id} neighbor // 查看 rip id 的 邻居表; display rip {id} database // 查看 rip id 的 数据库; display rip {id} route // 查看 rip id 的路由表; display ip routing-table 案例: 1 案例1:RIP路由协议原理 1.1 问题 1)动态路由协议的分类有哪些? 2)RIP路由协议的最大跳数是什么? 3)简述水平分割的做用 1.2 步骤 实现此案例须要按照以下步骤进行。 内部和外部网关协议 内部网关路由协议(IGP):RIP、OSPF、IS-IS 外部网关路由协议(EGP):BGP 距离矢量和链路状态路由协议 距离矢量路由协议:依据从源网络到目标网络所通过的路由器的个数选择路由,例如RIP、IGRP 链路状态路由协议:综合考虑从源网络到目标网络的各条路径的状况选择路由,例如OSPF、IS-IS 从一个接口学习到路由信息,再也不从这个接口发送出去 同时也能减小路由更新信息占用的链路带宽资源 2 案例2:配置RIP路由协议 2.1 问题 1)配置RIP协议实现网络互通 2)查看路由表,验证网络和RIP协议正常 2.2 方案 使用eNSP搭建实验环境,如图-1所示。
2.3 步骤 实现此案例须要按照以下步骤进行。 步骤一:配置RIP路由协议
[R1]dis cu
[V200R003C00]
#
sysname R1
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<08bmE3Uw}%$%$<br/>local-user admin service-type http<br/>#<br/>firewall zone Local<br/>priority 15<br/>#<br/>interface GigabitEthernet0/0/0<br/>ip address 192.168.12.1 255.255.255.0 <br/>#<br/>interface GigabitEthernet0/0/1<br/>ip address 192.168.13.1 255.255.255.0 <br/>#<br/>interface GigabitEthernet0/0/2<br/>#<br/>interface NULL0<br/>#<br/>interface LoopBack0<br/>ip address 192.168.10.1 255.255.255.0 <br/>#<br/>rip 1<br/>network 192.168.12.0<br/>network 192.168.13.0<br/>network 192.168.10.0<br/>#<br/>user-interface con 0<br/>authentication-mode password<br/>user-interface vty 0 4<br/>user-interface vty 16 20<br/>#<br/>wlan ac<br/>#<br/>return<br/>[R2]dis cu<br/>[V200R003C00]<br/>#<br/>sysname R2<br/>#<br/>snmp-agent local-engineid 800007DB03000000000000<br/>snmp-agent <br/>#<br/>clock timezone China-Standard-Time minus 08:00:00<br/>#<br/>portal local-server load portalpage.zip<br/>#<br/>drop illegal-mac alarm<br/>#<br/>set cpu-usage threshold 80 restore 75<br/>#<br/>aaa <br/>authentication-scheme default<br/>authorization-scheme default<br/>accounting-scheme default<br/>domain default <br/>domain default_admin <br/>local-user admin password cipher %$%$K8m.Nt84DZ}e#<0
8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 192.168.12.2 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 192.168.24.2 255.255.255.0
#
interface GigabitEthernet0/0/2
ip address 192.168.23.2 255.255.255.0
#
interface NULL0
#
interface LoopBack0
ip address 192.168.20.1 255.255.255.0
#
rip 1
network 192.168.12.0
network 192.168.23.0
network 192.168.24.0
network 192.168.20.0
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
[R3]dis cu
[V200R003C00]
#
sysname R3
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<08bmE3Uw}%$%$<br/>local-user admin service-type http<br/>#<br/>firewall zone Local<br/>priority 15<br/>#<br/>interface GigabitEthernet0/0/0<br/>#<br/>interface GigabitEthernet0/0/1<br/>ip address 192.168.13.3 255.255.255.0 <br/>#<br/>interface GigabitEthernet0/0/2<br/>ip address 192.168.23.3 255.255.255.0 <br/>#<br/>interface NULL0<br/>#<br/>interface LoopBack0<br/>ip address 192.168.30.1 255.255.255.0 <br/>#<br/>rip 1<br/>network 192.168.13.0<br/>network 192.168.23.0<br/>network 192.168.30.0<br/>#<br/>user-interface con 0<br/>authentication-mode password<br/>user-interface vty 0 4<br/>user-interface vty 16 20<br/>#<br/>wlan ac<br/>#<br/>return<br/>[R4]dis cu<br/>[V200R003C00]<br/>#<br/>sysname R4<br/>#<br/>snmp-agent local-engineid 800007DB03000000000000<br/>snmp-agent <br/>#<br/>clock timezone China-Standard-Time minus 08:00:00<br/>#<br/>portal local-server load portalpage.zip<br/>#<br/>drop illegal-mac alarm<br/>#<br/>set cpu-usage threshold 80 restore 75<br/>#<br/>aaa <br/>authentication-scheme default<br/>authorization-scheme default<br/>accounting-scheme default<br/>domain default <br/>domain default_admin <br/>local-user admin password cipher %$%$K8m.Nt84DZ}e#<0
8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
#
interface GigabitEthernet0/0/1
ip address 192.168.24.4 255.255.255.0
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
ip address 192.168.40.1 255.255.255.0
#
rip 1
network 192.168.24.0
network 192.168.40.0
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
步骤二:查看路由表,验证全网互通网络
Routing Tables: Public
Destinations : 16 Routes : 16
Destination/Mask Proto Pre Cost Flags NextHop Interface
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
192.168.10.0/24 RIP 100 2 D 192.168.24.2 GigabitEthernet
0/0/1
192.168.12.0/24 RIP 100 1 D 192.168.24.2 GigabitEthernet
0/0/1
192.168.13.0/24 RIP 100 2 D 192.168.24.2 GigabitEthernet
0/0/1
192.168.20.0/24 RIP 100 1 D 192.168.24.2 GigabitEthernet
0/0/1
192.168.23.0/24 RIP 100 1 D 192.168.24.2 GigabitEthernet
0/0/1
192.168.24.0/24 Direct 0 0 D 192.168.24.4 GigabitEthernet
0/0/1
192.168.24.4/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
192.168.24.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
192.168.30.0/24 RIP 100 2 D 192.168.24.2 GigabitEthernet
0/0/1
192.168.40.0/24 Direct 0 0 D 192.168.40.1 LoopBack0
192.168.40.1/32 Direct 0 0 D 127.0.0.1 LoopBack0
192.168.40.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
3 案例3:验证RIP v1和v2
3.1 问题
分别配置RIP v1和v2
查看路由表,验证网络通讯是否正常
3.2 方案
使用eNSP搭建实验环境,如图-2所示。less
3.3 步骤
实现此案例须要按照以下步骤进行。dom
步骤一:配置RIP v1ide
[R1]dis cu
[V200R003C00]
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<08bmE3Uw}%$%$<br/>local-user admin service-type http<br/>#<br/>firewall zone Local<br/>priority 15<br/>#<br/>interface GigabitEthernet0/0/0<br/>ip address 192.168.1.1 255.255.255.0 <br/>#<br/>interface GigabitEthernet0/0/1<br/>#<br/>interface GigabitEthernet0/0/2<br/>#<br/>interface NULL0<br/>#<br/>interface LoopBack0<br/>ip address 10.1.1.1 255.255.255.0 <br/>#<br/>rip 1<br/>network 192.168.1.0<br/>network 10.0.0.0<br/>#<br/>user-interface con 0<br/>authentication-mode password<br/>user-interface vty 0 4<br/>user-interface vty 16 20<br/>#<br/>wlan ac<br/>#<br/>return<br/>[R2]dis cu<br/>[V200R003C00]<br/>#<br/>snmp-agent local-engineid 800007DB03000000000000<br/>snmp-agent <br/>#<br/>clock timezone China-Standard-Time minus 08:00:00<br/>#<br/>portal local-server load portalpage.zip<br/>#<br/>drop illegal-mac alarm<br/>#<br/>set cpu-usage threshold 80 restore 75<br/>#<br/>aaa <br/>authentication-scheme default<br/>authorization-scheme default<br/>accounting-scheme default<br/>domain default <br/>domain default_admin <br/>local-user admin password cipher %$%$K8m.Nt84DZ}e#<0
8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 192.168.1.2 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 192.168.2.2 255.255.255.0
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
rip 1
network 192.168.1.0
network 192.168.2.0
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
[R3]dis cu
[V200R003C00]
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
#
interface GigabitEthernet0/0/1
ip address 192.168.2.3 255.255.255.0
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
ip address 10.1.2.1 255.255.255.0
#
rip 1
network 192.168.2.0
network 10.0.0.0
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
2)查看路由表,验证网络通讯是否正常oop
Routing Tables: Public
Destinations : 11 Routes : 11
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.1.2.0/24 Direct 0 0 D 10.1.2.1 LoopBack0
10.1.2.1/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.1.2.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
192.168.1.0/24 RIP 100 1 D 192.168.2.2 GigabitEthernet
0/0/1
192.168.2.0/24 Direct 0 0 D 192.168.2.3 GigabitEthernet
0/0/1
192.168.2.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
192.168.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
在R1上ping不通10.1.2.1。学习
步骤二:配置RIP v2测试
[R1]rip
[R1-rip-1]version 2
R二、R3均作一样配置。ui
2)查看路由表,验证网络通讯是否正常spa
Routing Tables: Public
Destinations : 12 Routes : 12
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.1.1.0/24 RIP 100 2 D 192.168.2.2 GigabitEthernet
0/0/1
10.1.2.0/24 Direct 0 0 D 10.1.2.1 LoopBack0
10.1.2.1/32 Direct 0 0 D 127.0.0.1 LoopBack0
10.1.2.255/32 Direct 0 0 D 127.0.0.1 LoopBack0
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
192.168.1.0/24 RIP 100 1 D 192.168.2.2 GigabitEthernet
0/0/1
192.168.2.0/24 Direct 0 0 D 192.168.2.3 GigabitEthernet
0/0/1
192.168.2.3/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
192.168.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet
0/0/1
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
在R1上能够ping通10.1.2.1。
4 案例4:Cisco路由器配置RIP v1和v2
4.1 问题
1)分别配置RIP v1和v2
2)查看路由表,验证网络通讯是否正常
4.2 方案
使用Cisco Packet Tracer 搭建实验环境,如图-3所示。
4.3 步骤
实现此案例须要按照以下步骤进行。
步骤一:配置RIP v1
R1#sh run
Building configuration...
Current configuration : 669 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1
!
ip cef
no ipv6 cef
!
spanning-tree mode pvst
!
interface Loopback0
ip address 10.1.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
router rip
network 10.0.0.0
network 192.168.1.0
!
ip classless
!
ip flow-export version 9
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
R2#sh run
Building configuration...
Current configuration : 628 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R2
!
ip cef
no ipv6 cef
!
spanning-tree mode pvst
!
interface FastEthernet0/0
ip address 192.168.1.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.2.2 255.255.255.0
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
network 192.168.1.0
network 192.168.2.0
!
ip classless
!
ip flow-export version 9
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
R3#sh run
Building configuration...
Current configuration : 669 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R3
!
ip cef
no ipv6 cef
!
spanning-tree mode pvst
!
interface Loopback0
ip address 10.1.2.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
shutdown
!
interface FastEthernet0/1
ip address 192.168.2.3 255.255.255.0
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
network 10.0.0.0
network 192.168.2.0
!
ip classless
!
ip flow-export version 9
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
2)查看路由表,验证网络通讯是否正常
R1#sh ip ro
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
步骤二:配置RIP v2
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#no auto-summary
R二、R3均作一样配置。
2)查看路由表,验证网络通讯是否正常
R1#sh ip ro
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area