CCNP BSCI配置实例.doc

一、桥接： 帧中继中（仅使用图中提供的DLCI号） (在主接口和子接口上关闭自动映射。手工映射注意还有自己接口的映射，每个路由器上都应该有三条映射命令，保证在没有运行任何协议的时候，R1、R2和R3要能通)二、OSPF 1、R1、R2、R3的S0接口在OSPF的Area1中，R2、R3的E0口在OSPF的Area0中，R1的Loopback1在OSPF的Area2中，R3的Loopback1在OSPF的Area3中。 2、OSPF的帧中继中不允许使用NBMA和广播模式(r3(config-if)#ip os network point-to-multipointP2MP模式） 3、Area2只接收OSPF的inter和intra路由（r1(config-router)#area 2 stub stub区域） 4、R3在日后回从Area3中接收到一些LSA7类型的路由，以及Area3中会有一条默认路由。 r3(config-router)#area 3 nssa no-summaryA和Total NSSA区域，注意设置为NSSA时，ASBR不会自动产生一条： Area x nssa default-information-originate) 5、Area0使用明文验证，Area1使用安全的认证方式，验证密码为cisco interface Ethernet1/0ip ospf authentication-key cisco router os 100area 0 authenticationinter s0/0ip ospf message-digest-key 1 md5 ciscorouter os 100area 1 authentication message-digestarea 0 authenticationarea 1 virtual-link authentication-key cisco area 1 virtual-link authentication-key cisco验证，注意在设置了虚链路后，还有虚链路的验证，必须在进程中给虚链路由器都应该启用认证） 6、所有Loopback0接口均在OSPF域内。 （在R1上Loopback0随便宣告进哪个区域，但在R2和R3上最好将Loopback0宣告进Area0中，这样在R2和R3之间的E0口断了以后，虚链路起用后将非常好。） 7、R1的Loop3到Loop10接口不允许直接宣告进OSPF域内。route-map CONN permit 10 match interface Loopback3 Loopback4 Loopback5 Loopback6 Loopback7 Loopback8 Loopback9 Loopback10 r1(config-router)#redistribute connected subnets route-map CONN 分布直链，重分布直链的时候要求用routemap，match所要重分布的接口。）三、EIGRP 1、R2的Loop1到Loop4在Eigrp中。router eigrp 100 network 55 2、Eigrp和OSPF在R2上做双向重分布，Eigrp只向OSPF发送一条路由（不允许是/16)。 redistribute eigrp 100 subnetssummary-add r2(config-router)#redistribute ospf 100 metric 1000 100 255 1 1500自动汇总， 1、先重分布，再在进程中用summary address.命令汇总。四、RIP 1、R3的Loop2到Loop5在RIP域内。r3(config)#router rip r3(config-router)#no aur3(config-router)#ver 2r3(config-router)#net 2、RIP和OSPF在R3上做双向重分布。 3、在R1和R2上只能看到RIP域过来的一条汇总路由（不那是/16)。要和Eigrp的汇总用不同的方法。r3(config)#router rip r3(config-router)#redistribute ospf 100 metric 1ip route null 0ip prefix-list 1 seq 5 permit /22route-map S permit 10 match ip address prefix-list 1router os 100redistribute rip subnets route-map S 4、R1的Loop2接口不允许宣告在任何路由协议中。 （虽然不能宣告，但是可以重分布直链。可以同二、7一起做）五、过滤 1、在R2上只能看见这样的一条路由168.1.x.0(x为奇数）。r2(config)#access-list 2 deny r2(config)#access-list 2 permit anyr2(config-router)#distribute-list 2 in （用distributelist过滤路由，在OSPF进程 2、在R3上只能看见这样的一条路由168.1.x.0(x为偶数）。access-list 3 deny access-list 3 permit any r3(config-router)#distribute-list 3 in access-list 1 deny （抓奇数） access-list 1 permit any ）注：要求全网互通，不允许出现任何主机路由。所有Loop0接口的地址为170.1.x.x(x为路由器号）。本实验主网段是 /16r1#r1#sh runBuilding configuration.Current configuration : 2398 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname r1!boot-start-markerboot-end-marker!no aaa new-modelmemory-size iomem 5!ip cefno ip domain lookup! ! !interface Loopback0 ip address !interface Loopback1 ip address !interface Loopback2 ip address !interface Loopback3 ip address !interface Loopback4 ip address !interface Loopback5 ip address !interface Loopback6 ip address !interface Loopback7 ip address !interface Loopback8 ip address ! interface Loopback9 ip address !interface Loopback10 ip address !interface Serial0/0 ip address encapsulation frame-relay ip ospf message-digest-key 1 md5 cisco ip ospf network point-to-multipoint serial restart-delay 0 frame-relay map ip 102 broadcast frame-relay map ip 103 broadcast no frame-relay inverse-arp!interface Serial0/1 no ip address shutdown serial restart-delay 0!interface Serial0/2 no ip address shutdown serial restart-delay 0!interface Serial0/3 no ip address shutdown serial restart-delay 0!interface Ethernet1/0 no ip address shutdown half-duplex!interface Ethernet1/1 no ip address shutdown half-duplex!interface Ethernet1/2 no ip address shutdown half-duplex! interface Ethernet1/3 no ip address shutdown half-duplex!router ospf 100 router-id log-adjacency-changes area 0 authentication area 1 authentication message-digest area 1 virtual-link authentication-key cisco area 1 virtual-link authentication-key cisco area 2 stub redistribute connected subnets route-map CONN network 55 area 2 network 55 area 1 network 55 area 1!ip http serverno ip http secure-server! !route-map CONN permit 10 match interface Loopback3 Loopback4 Loopback5 Loopback6 Loopback7 Loopback8 Loopback9 Loopback10!control-plane!line con 0 exec-timeout 0 0 logging synchronousline aux 0line vty 0 4!Endr2#sh run*Mar 1 00:51:30.447: %SYS-5-CONFIG_I: Configured from console by consoler2#sh runBuilding configuration.Current configuration : 2118 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname r2!boot-start-markerboot-end-marker!no aaa new-modelmemory-size iomem 5!ip cefno ip domain lookup! ! !interface Loopback0 ip address !interface Loopback1 ip address !interface Loopback2 ip address !interface Loopback3 ip address !interface Loopback4 ip address !interface Serial0/0 ip address encapsulation frame-relay ip ospf message-digest-key 1 md5 cisco ip ospf network point-to-multipoint serial restart-delay 0 frame-relay map ip 201 broadcast frame-relay map ip 201 broadcast no frame-relay inverse-arp!interface Serial0/1 no ip address shutdown serial restart-delay 0!interface Serial0/2 no ip address shutdown serial restart-delay 0!interface Serial0/3 no ip address shutdown serial restart-delay 0!interface Ethernet1/0 ip address ip ospf authentication-key cisco half-duplex!interface Ethernet1/1 no ip address shutdown half-duplex! interface Ethernet1/2 no ip address shutdown half-duplex!interface Ethernet1/3 no ip address shutdown half-duplex!router eigrp 100 redistribute ospf 100 metric 1544 100 255 1 1500 network 55 no auto-summary!router ospf 100 router-id log-adjacency-changes area 0 authentication area 1 authentication message-digest area 1 virtual-link authentication-key cisco summary-address redistribute eigrp 100 subnets network 55 area 0 network 55 area 0 network 55 area 1 distribute-list 1 in Serial0/0!ip http serverno ip http secure-server!access-list 1 permit !control-plane! !line con 0 exec-timeout 0 0 logging synchronousline aux 0line vty 0 4!Endr3#sh runBuilding configuration.Current configuration : 2312 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname r3!boot-start-markerboot-end-marker!no aaa new-modelmemory-size iomem 5!ip cefno ip domain lookup! ! !interface Loopback0 ip address !interface Loopback1 ip address !interface Loopback2 ip address !interface Loopback3 ip address !interface Loopback4 ip address !interface Loopback5 ip address !interface Serial0/0 ip address encapsulation frame-relay ip ospf message-digest-key 1 md5 cisco ip ospf network point-to-multipoint serial restart-delay 0 frame-relay map ip 301 broadcast frame-relay map ip 301 broadcast no frame-relay inverse-arp!interface Serial0/1 no ip address shutdown serial restart-delay 0!interface Serial0/2 no ip address shutdown serial restart-delay 0!interface Serial0/3 no ip address shutdown serial restart-delay 0!interface Ethernet1/0 ip address ip ospf authentication-key cisco half-duplex!interface Ethernet1/1 no ip address shutdown half-duplex!interface Ethernet1/2 no ip address shutdown half-duplex!interface Ethernet1/3 no ip address shutdown half-duplex!router ospf 100 router-id log-adjacency-changes area 0 authentication area 1 authentication message-digest area 1 virtual-link authentication-key cisco area 3 nssa no-summary redistribute rip subnets route-map S network 55 area 3 network 55 area 0 network 55 area 0 network 55 area 1 distribute-list 1 in!router rip version 2 redistribute ospf 100 metric 1 network no auto-summary!ip http serverno ip http secure-serverip route Null0!ip prefix-list 1 seq 5 permit /22access-list 1 permit !route-map S permit 10 match ip address prefix-list 1! !control-plane!line con 0 exec-timeout 0 0 logging synchronousline aux 0line vty 0 4!Endfr-sw#fr-sw#sh runBuilding configuration.Current configuration : 1339 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname fr-sw!boot-start-mark