IS-IS网络协议配置指南

1、IS-IS网络协议配置指南技术创新，变革未来IS-IS是一种链路状态型协议，其配置与OSPF有类似的地方。本章介绍了常用的IS-IS相关配置命令，如何配置IS-IS单区域、多区域，如何配置路由泄漏和验证，并在最后介绍如何使用命令来查看IS-IS的邻居和LSDB。引入掌握IS-IS路由协议的基本配置掌握IS-IS路由协议的高级配置掌握IS-IS路由协议的显示维护课程目标学习完本课程，您应该能够：IS-IS 基本配置IS-IS 高级配置IS-IS 显示和维护目录IS-IS基本功能配置创建IS-IS进程，并进入IS-IS视图配置IS-IS进程的网络实体名称在指定接口上使能IS-IS进程RTA isi

2、s process-id RTA network-entity netRTA-Ethernet0/0 isis enable process-idIS-IS路由器类型及接口邻接关系配置配置IS-IS路由器类型配置IS-IS接口邻接关系类型 RTA-isis-1 is-level level-1 | level-1-2 | level-2 RTA-Ethernet0/0 isis circuit-level level-1 | level-1-2 | level-2 IS-IS链路开销配置配置IS-IS开销值的类型使能自动计算接口链路开销值功能 RTA-isis-1 cost-style nar

3、row | wide | wide-compatible | compatible | narrow-compatible RTA-isis-1 auto-cost enable配置IS-IS接口的链路开销值 RTA-Ethernet0/0 isis cost value level-1 | level-2 IS-IS单区域配置示例RTA isis 1RTA-isis-1 is-level level-1RTA-isis-1 network-entity 10.0001.0001.0001.00RTA-Ethernet0/1 isis enable 1RTB isis 1RTB-isis-1

4、is-level level-1RTB-isis-1 network-entity 10.0001.0001.0002.00RTB-Ethernet0/0 isis enable 1E0/1E0/0RTARTBArea 10L1L1多区域配置示例RTARTCRTBRTDArea 20Area 10Cost 5Cost 60RTA isis 1RTA-isis-1 network-entity 10.0001.0001.0001.00RTA-isis-1 is-level level-1RTA-Ethernet0/0 isis enable 1RTA-Ethernet0/0 isis cost

5、5RTA-Serial1/1 isis enable 1RTA-Serial1/1 isis cost 60E0/0S1/1S1/1E0/0E0/2E0/1E0/4E0/0RTB isis 1RTB-isis-1 network-entity 10.0001.0001.0002.00RTB-Serial1/1 isis enable 1RTB-Serial1/1 isis circuit-level level-1RTB-Ethernet0/2 isis enable 1RTB-Ethernet0/2 isis circuit-level level-2L1/L2L1L2L1/L2Area 2

6、0多区域配置示例（续）RTD isis 1RTD-isis-1 network-entity 20.0001.0001.0004.00RTD-isis-1 is-level level-2RTD-Ethernet0/0 isis enable 1RTD-Ethernet0/1 isis enable 1RTC isis 1RTC-isis-1 network-entity 10.0001.0001.0003.00RTC-Ethernet0/0 isis enable 1RTC-Ethernet0/0 isis circuit-level level-1RTC-Ethernet0/4 isis

7、enable 1RTC-Ethernet0/4 isis circuit-level level-2RTARTCRTBRTDArea 10Cost 5Cost 60E0/0S1/1S1/1E0/0E0/2E0/1E0/4E0/0L1/L2L1L2L1/L2IS-IS 基本配置IS-IS 高级配置IS-IS 显示和维护目录IS-IS验证配置配置IS-IS邻居关系验证方式和验证密码配置IS-IS区域验证方式和验证密码配置IS-IS路由域验证方式和验证密码RTA-Ethernet0/0 isis authentication-mode md5 | simple password level-1 |

8、level-2 ip | osi RTA-isis-1 area-authentication-mode md5 | simple password ip | osi RTA-isis-1 domain-authentication-mode md5 | simple password ip | osi IS-IS聚合配置summary ip-address mask | mask-length avoid-feedback | generate_null0_route | level-1 | level-1-2 | level-2 | tag tag 在IS-IS视图下使用缺省只对level

9、-2路由进行聚合聚合后路由的开销值取所有被聚合路由中最小的开销值generate_null0_route表示聚合的同时生成NULL0路由IS-IS路由验证和聚合配置示例RTARTBRTCRTDE0/0E0/0E0/1E0/0S1/0S1/0Area 20Area 10RTA-Ethernet0/0 isis authentication-mode simple test1RTA-isis-1 area-authentication-mode simple test2RTB-isis-1 area-authentication-mode simple test214.1.0.0/1614.2.0

10、.0/1614.3.0.0/16RTC-Ethernet0/1 isis authentication-mode simple test1RTC-isis-1 area-authentication-mode simple test2RTC-isis-1 domain-authentication-mode md5 test3RTC-isis-1 summary 14.0.0.0 255.0.0.0 level-2RTD-isis-1 domain-authentication-mode md5 test3L1/L2L1L2L1区域外次优路由的产生缺省情况下，Level-1路由器只将去往其它区

11、域的报文发送到最近的Level-1-2路由器。RTARTBRTCRTDArea 20Area 10Cost 5Cost 10E0/0S1/1S1/1E0/0E0/2E0/1E0/4E0/0L1/L2L1L2L1/L2Cost 10Cost 3010.0.0.1/24RTAdisplay isis route ISIS(1) IPv4 Level-1 Forwarding TableIPV4 Destination IntCost ExtCost ExitInterface NextHop 0.0.0.0/0 5 NULL E0/0 2.1.1.1区域外次优路由的解决方法路由渗透使Level-1

12、-2路由器将Level-2区域的路由信息发布到Level-1区域。RTARTBRTCRTDArea 20Area 10Cost 5Cost 10E0/0S1/1S1/1E0/0E0/2E0/1E0/4E0/0L1/L2L1L2L1/L2Cost 10Cost 3010.0.0.1/2410.0.0.0/24, cost=3010.0.0.0/24, cost=10IS-IS路由渗透配置import-route isis level-2 into level-1 filter-policy acl-number | ip-prefix ip-prefix-name | route-policy

13、route-policy-name | tag tag 在IS-IS视图下使用此命令仅在Level-1-2路由器上使用才有意义如果未配置路由过滤，则所有的level-2路由会引入到level-1区域中IS-IS 基本配置IS-IS 高级配置IS-IS 显示和维护目录IS-IS显示和维护显示IS-IS的摘要信息 显示IS-IS的邻居信息 显示IS-IS的IPv4路由信息 显示IS-IS的链路状态数据库 Router display isis brief process-id Router display isis route process-id Router display isis lsdb

14、 l1 | l2 | level-1 | level-2 | lsp-id LSPID | lsp-name lspname | local | verbose process-id Router display isis peer process-id IS-IS摘要信息显示网络实体名称路由器类型开销类型路由优先级 display isis brief ISIS (1) Protocol Brief Information : network-entity: 10.0000.0000.0001.00 is-level :level-1-2 cost-style: narrow prefere

15、nce : 15 Lsp-length receive : 1497 Lsp-length originate : level-1 1497 level-2 1497 maximum imported routes number : 10000 Timers: lsp-max-age: 1200 lsp-refresh: 900 Interval between SPFs: 10IS-IS邻居信息显示链路状态邻居的系统ID链路关系类型邻居接口DIS优先级 display isis peer Peer information for ISIS(1) - System Id: 1111.1111.

16、1111 Interface: Ethernet1/1 Circuit Id: 1111.1111.1112.01 State: Up HoldTime: 23s Type: L1(L1L2) PRI: 64 System Id: 1111.1111.1111 Interface: Ethernet1/1 Circuit Id: 1111.1111.1112.01 State: Up HoldTime: 23s Type: L2(L1L2) PRI: 64IS-IS的路由信息显示 display isis route Route information for ISIS(1) - ISIS(1

17、) IPv4 Level-1 Forwarding Table -IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags- 1.1.0.0/16 20 NULL Eth1/1 1.2.1.1 R/L/- 1.2.0.0/16 10 NULL Eth1/1 Direct D/L/- ISIS(1) IPv4 Level-2 Forwarding Table -IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags- 1.1.0.0/16 20 NULL 1.2.0.

18、0/16 10 NULL Eth1/1 Direct D/L/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set路由是否已放到路由表中是否已经通过LSP发布IS-IS的链路状态数据库显示LSP生成路由器IP内部可达地址和掩码信息LSP生成路由器的区域地址是10LSP生成路由器的System ID display isis lsdb level-1 verbose Database information for ISIS(1) - Level-1 Link State DatabaseLSPID Seq Num Checksum Holdtime Length ATT/P/OL-1111.1111.1111.00-00 0 x00000005 0 x877 1090 68 0/0/0 SOURCE 1111.1111.1111.00 NLPID