ospf路由过滤.docx

OSPF路由过滤试验一、 试验说明Filter-policy可以指定出口和入口过滤策略，对接收和发布的路由进行过滤。OSPF路由器之间交换的是LSDB数据报文，路由表是根据LSDB计算出来的，因此使用Filter-policy在ABR路由器上执行过滤策略的时候，验证ABR路由器上路由表中是否有过滤的路由，LSDB中是否有；查看骨干区域中是否存在过滤的路由。本次试验由三台路由器模拟。三台路由器运行OSPf路由协议。R3、R2为区域0骨干路由器，R1为区域1路由器，R2为ABR。R1与R2通过一条千兆光纤链路和一条2M的帧中继链路连接。R2与R3通过两条帧中继链路连接，采用PPP封装。R1路由器的LO0、LO1、LO2模拟三个网段。在ABR路由器执行过滤策略，过滤其中的部分网段信息。二、 拓扑三、 配置步骤 配置接口地址：R1配置# interface Serial0/2/0 link-protocol ppp ip address 10.0.2.1 255.255.255.252#interface LoopBack0 ip address 192.168.0.1 255.255.255.255#interface LoopBack1 ip address 192.168.1.1 255.255.255.255#interface LoopBack2 ip address 192.168.2.1 255.255.255.255#interface GigabitEthernet0/1/0 port link-mode route ip address 10.0.1.1 255.255.255.252# R2配置#interface Serial0/2/0 link-protocol ppp ip address 10.0.3.1 255.255.255.252#interface Serial0/2/1 link-protocol ppp ip address 10.0.4.1 255.255.255.252#interface Serial0/2/2 link-protocol ppp ip address 10.0.2.2 255.255.255.252#interface GigabitEthernet0/1/0 port link-mode route ip address 10.0.1.2 255.255.255.252#R3配置#interface Serial0/2/0 link-protocol ppp ip address 10.0.3.2 255.255.255.252#interface Serial0/2/1 link-protocol ppp ip address 10.0.4.2 255.255.255.252# 配置OPSFR1配置#ospf 1 router-id 192.168.0.1 area 0.0.0.1 network 10.0.1.0 0.0.0.255 network 10.0.2.0 0.0.0.255 network 192.168.0.0 0.0.0.255 network 192.168.1.0 0.0.0.255 network 192.168.2.0 0.0.0.255#R2配置ospf 1 router-id 172.16.1.1 area 0.0.0.0 network 10.0.3.0 0.0.0.3 network 10.0.4.0 0.0.0.3 area 0.0.0.1 network 10.0.1.0 0.0.0.255 network 10.0.2.0 0.0.0.255 network 172.16.1.1 0.0.0.0#R3配置ospf 1 area 0.0.0.0 network 10.0.3.0 0.0.0.3 network 10.0.4.0 0.0.0.3# 配置过滤策略R2配置#方式一：使用ip-prefix过滤# ip ip-prefix h3c index 10 permit 192.168.0.1 32 ip ip-prefix h3c index 20 permit 192.168.1.1 32#ospf 1 router-id 172.16.1.1 filter-policy ip-prefix h3c import #在OSPF中增加ABR接收路由过滤#方式二：使用ACl过滤#Acl number 2000 Rule 0 permit source 192.168.0.1 0.0.0.0#ospf 1 router-id 172.16.1.1filter-policy 2000 import#四、 测试这种过滤方法仅能够对计算出的路由进行过滤，不能过滤LSA，所以LSA还在相应区域内传播。这种过滤方法仅能对本路由器的路由表过滤，无法对其他路由器的路由表产生影响。dis ip routing-table p ospf Public Routing Table : OSPFSummary Count : 14OSPF Routing table Status : Summary Count : 12Destination/Mask Proto Pre Cost NextHop Interface10.0.1.0/30 OSPF 10 1563 10.0.3.1 S0/2/0 OSPF 10 1563 10.0.4.1 S0/2/110.0.2.0/30 OSPF 10 3124 10.0.3.1 S0/2/0 OSPF 10 3124 10.0.4.1 S0/2/1172.16.1.1/32 OSPF 10 1562 10.0.3.1 S0/2/0 OSPF 10 1562 10.0.4.1 S0/2/1192.168.0.1/32 OSPF 10 1563 10.0.3.1 S0/2/0 OSPF 10 1563 10.0.4.1 S0/2/1192.168.1.1/32 OSPF 10 1563 10.0.3.1 S0/2/0 OSPF 10 1563 10.0.4.1 S0/2/1192.168.2.1/32 OSPF 10 1563 10.0.3.1 S0/2/0 OSPF 10 1563 10.0.4.1 S0/2/1OSPF Routing table Status : Summary Count : 2Destination/Mask Proto Pre Cost NextHop Interface10.0.3.0/30 OSPF 10 1562 10.0.3.2 S0/2/010.0.4.0/30 OSPF 10 1562 10.0.4.2 S0/2/1r2dis ip routing-table p oPublic Routing Table : OSPFSummary Count : 8OSPF Routing table Status : Summary Count : 2Destination/Mask Proto Pre Cost NextHop Interface192.168.0.1/32 OSPF 10 1 10.0.1.1 GE0/1/0192.168.1.1/32 OSPF 10 1 10.0.1.1 GE0/1/0OSPF Routing table Status : Summary Count : 6Destination/Mask Proto Pre Cost NextHop Interface10.0.1.0/30 OSPF 10 1 10.0.1.2 GE0/1/010.0.2.0/30 OSPF 10 1562 10.0.2.2 S0/2/210.0.3.0/30 OSPF 10 1562 10.0.3.1 S0/2/010.0.4.0/30 OSPF 10 1562 10.0.4.1 S0/2/1172.16.1.1/32 OSPF 10 0 172.16.1.1 Loop0192.168.2.1/32 OSPF 10 1 10.0.1.1 GE0/1/0dis ip routing-table p osPublic Routing Table : OSPFSummary Count : 8OSPF Routing table Status : Summary Count : 3Destination/Mask Proto Pre Cost NextHop Interface10.0.3.0/30 OSPF 10 1563 10.0.1.2 GE0/1/010.0.4.0/30 OSPF 10 1563 10.0.1.2 GE0/1/0172.16.1.1/32 OSPF 10 1 10.0.1.2 GE0/1/0OSPF Routing table Status : Summary Count : 5Destination/Mask Proto Pre Cost NextHop Interface10.0.1.0/30 OSPF 10 1 10.0.1.1 GE0/1/010.0.2.0/30 OSPF 10 1562 10.0.2.1 S0/2/0192.168.0.1/32 OSPF 10 0 192.168.0.1 Loop0192.168.1.1/32 OSPF 10 0 192.168.1.1 Loop1192.168.2.1/32 OSPF 10 0 192.168.2.1 Loop2说明：在ABR上执行路由过滤策略后，查看R2路由器的路由表，我们发现192.168.2.1/30处于不活动状态；192.168.0.1/30和192.168.1.1/30还处于活动状态（有效路由）。由于Filter-policy只能过