juniper_路由模式.ppt

1,路由模式（L3Mode）接口出去L3安全区，则进入路由模式,ExternalZone,PrivateZone,1.1.70.250,1.1.70.0/24,10.1.10.5,10.1.20.0/24,B,10.1.10.0/24,PublicZone,10.1.20.5,.254,200.5.5.5,A,B,C,D,10.1.1.0/24,10.1.2.0/24,.1.254,.1.254,1.1.7.0/24,1.1.8.0/24,.254.1,InterfaceAddressE110.1.1.1E210.1.2.1E71.1.7.1E81.1.8.1,2,创建L3安全区,setzonenameExample:ns208-setzonenamePrivate,NetworkZones,3,将接口划分到L3安全区,NetworkInterfaces(Edit),setinterfacezonens208-setinterfacee8zoneuntrust,4,给L3接口设定IP地址,setinterfaceip/ns208-setinterfacee8ip1.1.8.1/24,NetworkInterfaces(Edit),5,设置静态路由,setroute/interfacegatewayExample:ns208-setroute10.1.10.0/24interfacee1gateway10.1.1.254,NetworkRoutingDestinationEdit,6,设置动态路由协议OSPF全局配置,WebUI1.路由器IDNetworkRoutingVirtualRouter(trust-vr)Edit:输入以下内容，然后单击OK:VirtualRouterID:Custom(选择)在文本框中输入0.0.0.102.OSPF路由实例NetworkRoutingVirtualRouter(trust-vr)EditCreateOSPFInstance:选择OSPFEnabled，然后单击OK。CLI1.路由器IDsetvroutertrust-vrrouter-id102.OSPF路由实例setvroutertrust-vrprotocolospfsetvroutertrust-vrprotocolospfenablesave,7,设置动态路由协议OSPF创建OSPF区域,WebUINetworkRoutingVirtualRoutersEdit(trust-vr)EditOSPFInstanceArea:输入以下内容，然后单击OK:AreaID:10Type:normal(选择)Action:AddCLIsetvroutertrust-vrprotocolospfarea10save,8,设置动态路由协议OSPF创建OSPF区域并分配接口,WebUINetworkRoutingVirtualRoutersEdit(trust-vr)EditOSPFInstanceArea:输入以下内容，然后单击OK:AreaID:10Type:normal(选择)Action:AddCLIsetvroutertrust-vrprotocolospfarea10save,WebUINetworkRoutingVirtualRoutersEdit(trust-vr)EditOSPFInstanceAreaConfigure(Area10):使用Add按钮，将ethernet1接口从AvailableInterface(s)栏移动到SelectedInterfaces栏中。单击OK。CLIsetinterfaceethernet1protocolospfarea10,9,设置动态路由协议OSPF在接口上启用OSPF,在ethernet1(先前分配给area10)和ethernet3接口(先前分配给area0)上启用OSPF路由实例。WebUINetworkInterfacesEdit(对于ethernet1)OSPF:选择EnableProtocolOSPF，然后单击Apply。NetworkInterfacesEdit(对于ethernet3)OSPF:选择EnableProtocolOSPF，然后单击Apply。CLIsetinterfaceethernet1protocolospfenablesetinterfaceethernet3protocolospfenablesave,10,参看路由表WebUI模式,NetworkRoutingDestination,11,参看路由表CLI模式,ns208-getrouteuntrust-vr(0entries)-C-Connected,S-Static,A-Auto-Exported,I-Imported,R-RIPiB-IBGP,eB-EBGP,O-OSPF,E1-OSPFexternaltype1E2-OSPFexternaltype2trust-vr(9entries)-IDIP-PrefixInterfaceGatewayPPrefMtrVsys-*70.0.0.0/0eth81.1.8.254S201Root*810.1.1.0/24eth11.1.1.10S201Root910.2.1.0/24eth21.1.2.10S201Root*61.1.8.0/24eth80.0.0.0C00Root1110.3.1.0/24eth31.1.3.10S201Root*51.1.7.0/24eth70.0.0.0C00Root41.1.3.0/24eth30.0.0.0C00Root31.1.2.0/24eth20.0.0.0C00Root*21.1.1.0/24eth10.0.0.0C00Root,12,验证路由,ns208-ping10.1.10.5TypeescapesequencetoabortSending5,100-byteICMPEchosto10.1.10.5,timeoutis2seconds!SuccessRateis100percent(5/5),round-triptimemin/avg/max=2/3/9msns208-pingTargetIPaddress:10.1.10.5Repeatcount5:Datagramsize100:Timeoutinseconds2:Sourceinterface:TypeescapesequencetoabortSending5,100-byteICMPEchosto10.1.10.5,timeoutis2seconds!SuccessRateis100percent(5/5),round-triptimemin/avg/max=2/3/4ms,Ping与extendedping,13,验证路由（续）,ns208-trace10.1.10