-
XCIE-HUAWEI-双点双向引入带来的问题以及解决办法（三种）+各种路由环路
XCIE-HUAWEI-双点双向引入带来的问题以及解决办法（三种）+各种路由环路
本章内容很长，建议耐心观看
先来一个环境，很常见的哈
说个故事剧情哈，我是个大学生我文采也不好，也不知道兄弟们听不听 随便啦 左边部门A右边部门B，中心信息中心 那么这一天 部门AB都来了新人，又刚好那么巧 两边的原本的ip规划都用完了，现在要加上新的 lo就代表新的地址，我懒得加上个交换机表示网段了，一样的意思 然后这个时候，部门AB的网段已经弄好了，不要管以前是怎么通的 反正现在不通 然后信息中心归你管，两边的lo（新网段已经建设宣告好了） 到了信息中心这，我们应该做啥？- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
很明显，这不是重分布嘛，思科是重分布，华为叫引入
没毛病
先来看正常的
直接发上来dis cu了没什么好讲解的dis current-configuration [V200R003C00] # sysname R1 # snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00 # portal local-server load portalpage.zip # drop illegal-mac alarm # undo info-center enable # set cpu-usage threshold 80 restore 75 # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http # firewall zone Local priority 15 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Ethernet0/0/2 # interface Ethernet0/0/3 # interface Ethernet0/0/4 # interface Ethernet0/0/5 # interface Ethernet0/0/6 # interface Ethernet0/0/7 # interface GigabitEthernet0/0/0 ip address 1.1.1.1 255.255.255.0 ospf enable 1 area 0.0.0.0 # interface GigabitEthernet0/0/1 # interface NULL0 # interface LoopBack0 # interface LoopBack1 ip address 100.1.1.1 255.255.255.255 ospf enable 1 area 0.0.0.0 # interface LoopBack9 # ospf 1 router-id 1.1.1.1 area 0.0.0.0 # user-interface con 0 authentication-mode password user-interface vty 0 4 user-interface vty 16 20 # wlan ac # return dis ospf pe dis ospf peer OSPF Process 1 with Router ID 1.1.1.1 Neighbors Area 0.0.0.0 interface 1.1.1.1(GigabitEthernet0/0/0)'s neighbors Router ID: 2.2.2.2 Address: 1.1.1.2 State: Full Mode:Nbr is Master Priority: 1 DR: 1.1.1.1 BDR: 1.1.1.2 MTU: 0 Dead timer due in 34 sec Retrans timer interval: 5 Neighbor is up for 03:49:29 Authentication Sequence: [ 0 ] dis ip rou dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 10 Routes : 10 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 0 D 1.1.1.1 GigabitEthernet 0/0/0 1.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 1.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 2.2.2.0/24 O_ASE 150 1 D 1.1.1.2 GigabitEthernet 0/0/0 100.1.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 200.1.1.1/32 O_ASE 150 1 D 1.1.1.2 GigabitEthernet 0/0/0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 - 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
dis cu dis current-configuration [V200R003C00] # sysname XXZX # snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00 # portal local-server load portalpage.zip # drop illegal-mac alarm # undo info-center enable # set cpu-usage threshold 80 restore 75 # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http # isis 1 network-entity 49.0001.0000.0000.0001.00 import-route ospf 1 # firewall zone Local priority 15 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Ethernet0/0/2 # interface Ethernet0/0/3 # interface Ethernet0/0/4 # interface Ethernet0/0/5 # interface Ethernet0/0/6 # interface Ethernet0/0/7 # interface GigabitEthernet0/0/0 ip address 1.1.1.2 255.255.255.0 ospf enable 1 area 0.0.0.0 # interface GigabitEthernet0/0/1 ip address 2.2.2.1 255.255.255.0 isis enable 1 # interface NULL0 # ospf 1 router-id 2.2.2.2 import-route isis 1 area 0.0.0.0 # user-interface con 0 authentication-mode password user-interface vty 0 4 user-interface vty 16 20 # wlan ac # return dis isis p dis isis peer Peer information for ISIS(1) System Id Interface Circuit Id State HoldTime Type PRI ------------------------------------------------------------------------------- 0000.0000.0003 GE0/0/1 0000.0000.0003.01 Up 9s L2 64 Total Peer(s): 1 dis ospf pe dis ospf peer OSPF Process 1 with Router ID 2.2.2.2 Neighbors Area 0.0.0.0 interface 1.1.1.2(GigabitEthernet0/0/0)'s neighbors Router ID: 1.1.1.1 Address: 1.1.1.1 State: Full Mode:Nbr is Slave Priority: 1 DR: 1.1.1.1 BDR: 1.1.1.2 MTU: 0 Dead timer due in 32 sec Retrans timer interval: 5 Neighbor is up for 03:50:13 Authentication Sequence: [ 0 ] dis ip rou dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 12 Routes : 12 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 0 D 1.1.1.2 GigabitEthernet 0/0/0 1.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 1.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 2.2.2.0/24 Direct 0 0 D 2.2.2.1 GigabitEthernet 0/0/1 2.2.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 2.2.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 100.1.1.1/32 OSPF 10 1 D 1.1.1.1 GigabitEthernet 0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 200.1.1.1/32 ISIS-L2 15 10 D 2.2.2.2 GigabitEthernet 0/0/1 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 - 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
- 117
- 118
- 119
- 120
- 121
- 122
- 123
- 124
- 125
- 126
- 127
- 128
- 129
dis current-configuration [V200R003C00] # sysname R3 # snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00 # portal local-server load portalpage.zip # drop illegal-mac alarm # set cpu-usage threshold 80 restore 75 # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http # isis 1 is-level level-2 network-entity 49.0001.0000.0000.0003.00 # firewall zone Local priority 15 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Ethernet0/0/2 # interface Ethernet0/0/3 # interface Ethernet0/0/4 # interface Ethernet0/0/5 # interface Ethernet0/0/6 # interface Ethernet0/0/7 # interface GigabitEthernet0/0/0 ip address 2.2.2.2 255.255.255.0 isis enable 1 # interface GigabitEthernet0/0/1 # interface NULL0 # interface LoopBack0 ip address 200.1.1.1 255.255.255.255 isis enable 1 # user-interface con 0 authentication-mode password user-interface vty 0 4 user-interface vty 16 20 # wlan ac # return dis isis p dis isis peer Peer information for ISIS(1) System Id Interface Circuit Id State HoldTime Type PRI ------------------------------------------------------------------------------- 0000.0000.0001 GE0/0/0 0000.0000.0003.01 Up 29s L2 64 Total Peer(s): 1 dis ip rou dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 10 Routes : 10 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 ISIS-L2 15 74 D 2.2.2.1 GigabitEthernet 0/0/0 2.2.2.0/24 Direct 0 0 D 2.2.2.2 GigabitEthernet 0/0/0 2.2.2.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 2.2.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 100.1.1.1/32 ISIS-L2 15 74 D 2.2.2.1 GigabitEthernet 0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 200.1.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 - 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
注意上面的操作叫做
单点双向引入
而且工作中很常见补充知识
ospf里面看的是lsdb
isis也是，但是查看详细路由的方式不一样
display isis lsdb中
带*号的，都是这个本地产生的LSP对标ospf的LSA那么查看详细的
display isis lsdb LSPID verbose
就是查看的一条的详细信息问题来了，难道实际中就一台机器吗？？备份这东西，不是超级常见吗
重点来了 双点双向重分布是有可能会引起环路的！！！- 1
- 2
[XXZX-2]
[XXZX-2]dis cu
[V200R003C00]sysname XXZX-2
snmp-agent local-engineid 800007DB03000000000000
snmp-agentclock timezone China-Standard-Time minus 08:00:00
portal local-server load flash:/portalpage.zip
drop illegal-mac alarm
wlan ac-global carrier id other ac id 0
set cpu-usage threshold 80 restore 75
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type httpisis 1
is-level level-2
network-entity 49.0001.0000.0000.0004.00firewall zone Local
priority 15interface Ethernet0/0/0
interface Ethernet0/0/1
interface Ethernet0/0/2
interface Ethernet0/0/3
interface Ethernet0/0/4
interface Ethernet0/0/5
interface Ethernet0/0/6
interface Ethernet0/0/7
interface GigabitEthernet0/0/0
ip address 4.4.4.1 255.255.255.0
isis enable 1interface GigabitEthernet0/0/1
ip address 3.3.3.2 255.255.255.0
ospf enable 1 area 0.0.0.0interface NULL0
ospf 1
area 0.0.0.0user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20wlan ac
return
[XXZX-2]此处我先不引入这个路由表，当然了，配置也还没做，一会边说边做 因为目前我还没引入，所以还是只能走上面的 不过，现在做哈~- 1
- 2
- 3
目前这个就是双点双向的路由引入了说到这，兄弟们不要照抄我配置，没用 我是讲解技术点的 如果照抄可以发现发r4没用isis和ospf邻居 因为我2和3没宣告对应的 这个懒得贴出来了 我这个可能比较枯燥 因为我有点类似讲课的进度 但是我这个很齐全很完整！- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
这个时候我们先来看看两个信息中心的路由表
<XXZX>dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 14 Routes : 14 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 0 D 1.1.1.2 GigabitEthernet 0/0/0 1.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 1.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 2.2.2.0/24 Direct 0 0 D 2.2.2.1 GigabitEthernet 0/0/1 2.2.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 2.2.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 3.3.3.0/24 OSPF 10 2 D 1.1.1.1 GigabitEthernet 0/0/0 4.4.4.0/24 ISIS-L2 15 20 D 2.2.2.2 GigabitEthernet 0/0/1 100.1.1.1/32 OSPF 10 1 D 1.1.1.1 GigabitEthernet 0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 200.1.1.1/32 ISIS-L2 15 10 D 2.2.2.2 GigabitEthernet 0/0/1 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 <XXZX> --------------------------------------------------------- <XXZX-2>dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 14 Routes : 14 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 OSPF 10 2 D 3.3.3.1 GigabitEthernet 0/0/1 2.2.2.0/24 ISIS-L2 15 20 D 4.4.4.4 GigabitEthernet 0/0/0 3.3.3.0/24 Direct 0 0 D 3.3.3.2 GigabitEthernet 0/0/1 3.3.3.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 3.3.3.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 4.4.4.0/24 Direct 0 0 D 4.4.4.1 GigabitEthernet 0/0/0 4.4.4.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 4.4.4.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 100.1.1.1/32 OSPF 10 1 D 3.3.3.1 GigabitEthernet 0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 200.1.1.1/32 ISIS-L2 15 10 D 4.4.4.4 GigabitEthernet 0/0/0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 <XXZX-2>- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
这个是本章的重点，估计我自己都厌烦了哈哈，都多少东西了才到正文，这要是语文课本，我得被拉去打靶了
目前是没问题的
一会告诉你们为什么有问题
我们往下加一台路由器
问题出现了
为什么不通呢
他们都有彼此路由呀
为什么呢？相信这个时候已经有人发现问题了
为什么在R3的路由表里面 192.168.1.1这条 只有一边而不是两边呢？ 这就是问题所在- 1
- 2
- 3
- 4
答案是什么？ 这是什么情况呢？ 环路了！！！ 环路了 环路了 重要的事情说三遍- 1
- 2
- 3
- 4
- 5
- 6
给我看好了 为什么 什么原因 首先 ISIS-L2优先级为15 OSPF外部路由O_ASE为150 那么以上图为例 为什么R1会有两条负载的去往R8的路由？ 首先第一条 直连的走2/0/0 没毛病 第二条，是来自0/0/0口，那么，根据路由器防环，R2是肯定不可能从R1雪莱这条路有的 那么只能是R3 那么对于R3来说，这是怎么来的呢？ R4给的 R4怎么来的呢？ R1给的 这一串过来 到了R2对说 我左边收到192.168.1.1 OSPF的外部路由 优先级150 我右边收到192.168.1.1 isis-l2的路由 优先级15 那我路由表肯定加表优先级低的呀 没毛病 那么我就把isis的192.168.1.1传过去了，但是呢这边是ospf 所以 在r1上就能看到192.168.1.1这条负载的 所以这就是原因 那么负载的情况下，如果走了这条，不就是环路了嘛？ 这个就是本章的重点，因为重分布後优先级带来的环路的原因 原理和mqc是一样的，只不过这个是路由，那个是策略，如果连着看的话肯定能很快理解的- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
好了，找到问题了
找到我们得解决呀，怎么干呢？办法有两种 1.路由策略，过滤路由解决-用import里面附加route-policy 而不是用filter-policy，但是这个方法，没办法解决次优路径问题 假设现在在这个R2有一台pc去访问，192.168.1.1，那么他就不能走最优先的那边 得绕一圈，因为这个filter-polichy把他阻断了 2.使用优先级改动的办法 比如下面的是因为ISIS-L2的路由为15优先级，OSPF-ASE是因为这个150，所以选择了ISIS，那么现在，我把ISIS改大，看效果就知道了- 1
- 2
- 3
- 4
- 5
- 6
- 7
修改优先级只是本地有效哈！！！
但是R1还是不通
他是解决了，R4没解决，而且R2也会受到影响
因为R2受影响会间接导致R4也会受到影响为什么？ 因为，R4的192.168.1.1这个路由一开始是用的ISIS的，这个优先级一改 他就会选择OSPF的，那么它传输给R1的也是OSPF- 1
- 2
- 3
操作 R2和R4的ISIS优先级都调整到151 其实也可以改OSPF的一样的道理哈 然后目前看到的是 R2和R4都正常了，是来自OSPF的外部路由 而且在R1上也都正常了 这个时候全网ping，都是可以互通的 那么这个时候就可以形成备份了，只要他物理状态断了 因为物理状态断了，首先ip没了，其次协议肯定没了，然后路由也没了，那么这个时候 才会去走ISIS，形成备份- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
终于可以讲本章的重点了，TAG，标签，都1.2w字了呀妈呀
TAG呢是标签，包括VLAN呢这个，也叫打标签去标签这样
先说思路 在R5引入的外部路由打TAG,在R2和R4上，针对这一条路由，修改优先级，让他小于ISIS 就是给他个备注，然后呢，根据这个备注我们来做其他的操作- 1
- 2
- 3
TAG
记住他的作用，一个标记R8是始发源，那么，他在做引入的时候，带上这个名字为HCIE的route-policy 我是先做了绑定在做策略哈，然后引入的时候带上这个TAG，TAG名字为111- 1
- 2
发送端
接收
看着，OSPF的LSDB链路状态数据库
目前来说，还是没任何变动的哈，只是加上一个标记
怎么改呢？当然还是用策略了，其他的也改不了
做完了还得挂接哈，挂哪里呢？
既然改的是OSPF，当然是在OSPF里面呀
注意，仅仅修改的是OSPF的ASE的外部路由，不过呢其实挂全局也没问题，因为其他的路由不含有TAG-111这个属性，但是针对ASE的外部路由来做，更加精细检查- 1
当然了，不只是一边要做，另外一边，也要做- 1
<XXZX-2>sys Enter system view, return user view with Ctrl+Z. [XXZX-2]undo inf en Info: Information center is disabled. [XXZX-2]ospf [XXZX-2-ospf-1]pr [XXZX-2-ospf-1]preference a [XXZX-2-ospf-1]preference ase rou [XXZX-2-ospf-1]preference ase route-policy OSPF [XXZX-2-ospf-1] [XXZX-2-ospf-1]q [XXZX-2]rou [XXZX-2]route- [XXZX-2]route-policy-change [XXZX-2]route-policy OSPF p [XXZX-2]route-policy OSPF permit no [XXZX-2]route-policy OSPF permit node 10 Info: New Sequence of this List. [XXZX-2-route-policy]if [XXZX-2-route-policy]if-match t [XXZX-2-route-policy]if-match tag 111 [XXZX-2-route-policy]pr [XXZX-2-route-policy]app [XXZX-2-route-policy]apply p [XXZX-2-route-policy]apply preference 10 [XXZX-2-route-policy]dis ip rou pr ospf | in 192.168.1.1 Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Public routing table : OSPF Destinations : 7 Routes : 7 OSPF routing table status : <Active> Destinations : 6 Routes : 6 Destination/Mask Proto Pre Cost Flags NextHop Interface 192.168.1.1/32 O_ASE 10 1 D 3.3.3.1 GigabitEthernet0/0/ 1 OSPF routing table status : <Inactive> Destinations : 1 Routes : 1 Destination/Mask Proto Pre Cost Flags NextHop Interface [XXZX-2-route-policy]- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
这个就是通过PBR结合TAG的解决办法
新问题又来了
假设这样呢？
左边的是解决了，右边的新来的咋办呢？答案是不会出问题- 1
so why？？？- 1
因为- 1
路由引入有一个点是很重要的请记住
只有路由优先级低的往高的进入可能会被覆盖
高的进入低的是没问题的
因为优先级摆在这呀千万不要以为结束了，本章才到一半呢，现在是一万五千字
为什么这样说呢？
因为，还有环路的出现哦！
来看环境
还是他，环境不变，为什么说会出现环路呢？假设，这个R8，故障了或者说，他不在需要重分布OSPF以外的路由进来了，在刚刚的配置下会导致环路，你们信吗
先说为什么，再做实验- 1
假设现在，R8故障了，那就是说，收不到来自192.168.1.1这条LSA了（OSPF里面叫LSA，ISIS里面叫LSP，MPLS里面也有LSP） 那么OSPF的老化时间是多少？ 3600秒 10分钟 算你hello包那个40秒维护邻居了 这40秒内 就可以造成路由环路 为什么呢？ 当R1这边不泛洪这条192.168.1.1的这条LSA了 但是R2 R3 R4上面还是有的呀 然后，R2,R4对R1的就断了 收到了来自R5的ISIS的192.168.1.1 然后又回到两台信息中心R2,R4，然后这个重分布又到了R1这里 那么在R1上这条192.168.1.1的路由依然会存在，但是会变成啥呢？ 指向R2或者R4其中一个 这么一来，不就是环路了嘛？ 话不多说，做实验见真章，口说无凭- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
这个时候来看R1的路由表
这个时候，ping肯定不通，追踪
又衍生出一个新的环路问题哦~那怎么解决呢？
同理，就算R8不宣告了，我的R8的OSPF的LSDB一样会收到，你信不？
神奇吧~，他已经不是自己产生的了，是外部的来自2.2.2.2的传过来的路由出了问题咱们就解决问题！
说个扯淡的，你重启进程肯定能解决，但是真实环境中可能么？
绝对不可能，你都不知道他挂了，甚至都不知道环路了
只是挺突然的，网络突然挂了针对双点双向的路由引入环境的时候 当外部路由撤销的时候，可能会产生由于链路延迟的问题 导致优先级引入或者撤销LSA的情况，产生的路由环路的问题 解决办法：使用TAG作为标签，在中间的环境下，针对一个点引入的路由，在本端不在引入 啥意思呢？ 上面的，你有的我就不要了 下面的，你不要的话那就我要吧 （通过人为基于TAG的策略路由来做）- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
其实这个有点像啥呢？
路由器的防环机制，但是他不是
从一个接口发出去的路由不会再从我这个口回来，这个是防环的
但是这个是要做成什么呢？从我这口出去的，从我这里回来
这里先恢复环境，中间还是双点双向 下面则是正常的路由引入- 1
- 2
解决办法
首先
从OSPF引入到ISIS的路由，打上这个TAG-100，在R2上做
那么对应的
拒绝从ISIS重分布到OSPF，并且标签为TAG-100的路由，在R4上做
可能有点难理解啊
怎么说呢
今天，X市有疫情了，这里是Y市，只要你经过X市，你的行程卡就有X市，实施永久封禁，永世不得经过Y市=当地法律=策略，但是你可以回去X市
（当然，这是路由的，是双向哈）
在R4上，从OSPF引入到ISIS的路由打上标签TAG-200
反正这个逻辑自己理解一下哈，很简单的注意下方向哈，因为路由是双向的，那么左右都要做，并不是做一边就可以
总结一下 从左往右 A R2=信息中心主=从OSPF引入到ISIS的路由打上TAG=100=允许通过 B R2=信息中心主=从OSPF引入到ISIS的路由打上TAG=200=拒接通过 C R4=信息中心备=从ISIS引入OSPF的路由打上TAG=100=拒绝通过 D R4=信息中心备=从ISIS引入OSPF的路由打上TAG=200=`允许通过 从右往左 E R2=信息中心主=从ISIS引入到OSPF的路由打上TAG=300=允许通过 F R2=信息中心主=从ISIS引入到OSPF的路由打上TAG=400=拒绝通过 G R4=信息中心备=从OSPF到ISIS的路由打上TAG=300=拒绝通过 H R4=信息中心备=从OSPF到ISIS的路由打上TAG=400=允许通过 注意方向！！！ 看着我那个图 一个一看就能理解了- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
条件出来了，一会配置这个PBR就简单多了，不骗你们
就怕你们绕路啊，我还特别加上了这个ABCDEFGH 注意看一组对应一组的 解释一下AC R1始发的路由，到R2上，OSPF引入到ISIS，那么带上100的TAG 然后ISIS传输下来，到了R4，发现这路由带着TAG=100，拒绝通过 到了BD 那么到下面的收到之后转为200，TAG=200发给R1没问题，发给R2 发现TAG=200，拒绝通过，这样就肯定不会环路 以此类推哈- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
当然了还不够完美，还差一点就是前面做过的，至于为什么往上翻
始发打上TAG=500=R8设备 因为优先级的问题 优先级解决正常引入 TAG用来解决这个撤销回退 然后R2和R4上分别针对TAG=500的路由优先级改为10- 1
- 2
- 3
- 4
- 5
以上就是双点双向配置过程以及带来的问题以及解决办法 接下来是这个配置了- 1
- 2
上操作了， 慢慢看哈，很多！
这里一步一步讲解，最后会贴出来所有配置以及同款拓扑图链接，给我留个赞就行
R2-信息中心主
针对R2，这条要在ISIS里面去调用
我是按照顺序来做的，这条是针对从左到右，从OSPF到ISIS的路由的，所以要在ISIS上做
所以
这里是从左边到右边了
同理，从左到右是在ISIS里面做策略，那么从右到左自然是在OSPF下做
注意两个策略路由是不一样的，一个是针对OSPF_ASE-解决优先级
一个是解决环路-FANGHUAN-2的PBR这里在讲讲，为什么从左到右是在ISIS下做策略，从右到左是在OSPF下做策略 因为，我们先看从左到右，在ISIS中引入OSPF的策略，然后我再ISIS的内部在泛洪，传播LSP，那么我的规则就是这个呀，那么肯定是要在发的地方做的，我再OSPF里面做是没有意义的，因为实际上是在ISIS里面运作。他才是最终者 当然，从右到左也是同理，看上面的解释即可- 1
- 2
- 3
R4-信息中心-2
上面已经解释过了，这里不再过多解释，不懂的看上面的解释
R2和R4是同样的道理
注意哈，上面是ISIS，下面是OSPF了，为什么呢？
就是因为方向，真的这个要慢慢看，不然会晕的
R2防御红色的，R4防御绿色的各机的路由表以及测试以及配置
先测试
配置
<R8> <R8>dis cu <R8>dis current-configuration [V200R003C00] # sysname R8 # snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00 # portal local-server load flash:/portalpage.zip # drop illegal-mac alarm # undo info-center enable # wlan ac-global carrier id other ac id 0 # set cpu-usage threshold 80 restore 75 # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http # firewall zone Local priority 15 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Ethernet0/0/2 # interface Ethernet0/0/3 # interface Ethernet0/0/4 # interface Ethernet0/0/5 # interface Ethernet0/0/6 # interface Ethernet0/0/7 # interface GigabitEthernet0/0/0 ip address 10.1.1.1 255.255.255.0 ospf enable 1 area 0.0.0.0 # interface GigabitEthernet0/0/1 # interface NULL0 # interface LoopBack0 ip address 192.168.1.1 255.255.255.255 # ospf 1 import-route direct route-policy HCIE area 0.0.0.0 # route-policy HCIE permit node 10 apply tag 500 # user-interface con 0 authentication-mode password user-interface vty 0 4 user-interface vty 16 20 # wlan ac # return <R8>dis ip int br *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 3 The number of interface that is DOWN in Physical is 1 The number of interface that is UP in Protocol is 3 The number of interface that is DOWN in Protocol is 1 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 10.1.1.1/24 up up GigabitEthernet0/0/1 unassigned down down LoopBack0 192.168.1.1/32 up up(s) NULL0 unassigned up up(s) <R8>dis ip rou <R8>dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 14 Routes : 14 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 OSPF 10 2 D 10.1.1.10 GigabitEthernet 0/0/0 2.2.2.0/24 O_ASE 150 1 D 10.1.1.10 GigabitEthernet 0/0/0 3.3.3.0/24 OSPF 10 2 D 10.1.1.10 GigabitEthernet 0/0/0 4.4.4.0/24 O_ASE 150 1 D 10.1.1.10 GigabitEthernet 0/0/0 10.1.1.0/24 Direct 0 0 D 10.1.1.1 GigabitEthernet 0/0/0 10.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 100.1.1.1/32 OSPF 10 1 D 10.1.1.10 GigabitEthernet 0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 192.168.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack0 200.1.1.1/32 O_ASE 150 1 D 10.1.1.10 GigabitEthernet 0/0/0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 <R8>dis ospf lsdb OSPF Process 1 with Router ID 10.1.1.1 Link State Database Area: 0.0.0.0 Type LinkState ID AdvRouter Age Len Sequence Metric Router 4.4.4.1 4.4.4.1 1665 36 80000015 1 Router 2.2.2.2 2.2.2.2 1655 36 80000015 1 Router 1.1.1.1 1.1.1.1 356 72 80000022 1 Router 10.1.1.1 10.1.1.1 355 36 80000018 1 Network 1.1.1.2 2.2.2.2 1655 32 80000013 0 Network 10.1.1.10 1.1.1.1 356 32 80000002 0 Network 3.3.3.2 4.4.4.1 1665 32 80000012 0 AS External Database Type LinkState ID AdvRouter Age Len Sequence Metric External 192.168.1.1 10.1.1.1 356 36 8000000F 1 External 10.1.1.0 10.1.1.1 356 36 8000000F 1 External 4.4.4.0 4.4.4.1 596 36 80000013 1 External 4.4.4.0 2.2.2.2 1248 36 80000011 1 External 2.2.2.0 2.2.2.2 1248 36 80000013 1 External 200.1.1.1 2.2.2.2 1248 36 80000013 1 <R8>- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
- 117
- 118
- 119
- 120
- 121
- 122
- 123
- 124
- 125
- 126
- 127
- 128
- 129
- 130
- 131
- 132
- 133
- 134
- 135
- 136
- 137
- 138
- 139
- 140
- 141
- 142
- 143
- 144
- 145
- 146
- 147
- 148
- 149
- 150
<R1>dis current-configuration [V200R003C00] # sysname R1 # board add 0/2 1GEC # snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00 # portal local-server load flash:/portalpage.zip # drop illegal-mac alarm # undo info-center enable # wlan ac-global carrier id other ac id 0 # set cpu-usage threshold 80 restore 75 # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http # firewall zone Local priority 15 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Ethernet0/0/2 # interface Ethernet0/0/3 # interface Ethernet0/0/4 # interface Ethernet0/0/5 # interface Ethernet0/0/6 # interface Ethernet0/0/7 # interface GigabitEthernet0/0/0 ip address 1.1.1.1 255.255.255.0 ospf enable 1 area 0.0.0.0 # interface GigabitEthernet0/0/1 ip address 3.3.3.1 255.255.255.0 ospf enable 1 area 0.0.0.0 # interface GigabitEthernet2/0/0 ip address 10.1.1.10 255.255.255.0 ospf enable 1 area 0.0.0.0 # interface NULL0 # interface LoopBack0 # interface LoopBack1 ip address 100.1.1.1 255.255.255.255 ospf enable 1 area 0.0.0.0 # interface LoopBack9 # ospf 1 router-id 1.1.1.1 area 0.0.0.0 # user-interface con 0 authentication-mode password user-interface vty 0 4 user-interface vty 16 20 # wlan ac # return <R1>dis ip rou <R1>dis ip routing-tabl <R1>dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 18 Routes : 19 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 0 D 1.1.1.1 GigabitEthernet 0/0/0 1.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 1.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 2.2.2.0/24 O_ASE 150 1 D 1.1.1.2 GigabitEthernet 0/0/0 3.3.3.0/24 Direct 0 0 D 3.3.3.1 GigabitEthernet 0/0/1 3.3.3.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 3.3.3.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 4.4.4.0/24 O_ASE 150 1 D 3.3.3.2 GigabitEthernet 0/0/1 O_ASE 150 1 D 1.1.1.2 GigabitEthernet 0/0/0 10.1.1.0/24 Direct 0 0 D 10.1.1.10 GigabitEthernet 2/0/0 10.1.1.10/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 2/0/0 10.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 2/0/0 100.1.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 192.168.1.1/32 O_ASE 150 1 D 10.1.1.1 GigabitEthernet 2/0/0 200.1.1.1/32 O_ASE 150 1 D 1.1.1.2 GigabitEthernet 0/0/0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 <R1>dis ip int br *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 7 The number of interface that is DOWN in Physical is 0 The number of interface that is UP in Protocol is 7 The number of interface that is DOWN in Protocol is 0 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 1.1.1.1/24 up up GigabitEthernet0/0/1 3.3.3.1/24 up up GigabitEthernet2/0/0 10.1.1.10/24 up up LoopBack0 unassigned up up(s) LoopBack1 100.1.1.1/32 up up(s) LoopBack9 unassigned up up(s) NULL0 unassigned up up(s) <R1>dis ospf lsdb OSPF Process 1 with Router ID 1.1.1.1 Link State Database Area: 0.0.0.0 Type LinkState ID AdvRouter Age Len Sequence Metric Router 4.4.4.1 4.4.4.1 1705 36 80000015 1 Router 2.2.2.2 2.2.2.2 1695 36 80000015 1 Router 1.1.1.1 1.1.1.1 396 72 80000022 1 Router 10.1.1.1 10.1.1.1 397 36 80000018 1 Network 1.1.1.2 2.2.2.2 1695 32 80000013 0 Network 10.1.1.10 1.1.1.1 396 32 80000002 0 Network 3.3.3.2 4.4.4.1 1705 32 80000012 0 AS External Database Type LinkState ID AdvRouter Age Len Sequence Metric External 192.168.1.1 10.1.1.1 398 36 8000000F 1 External 4.4.4.0 4.4.4.1 636 36 80000013 1 External 4.4.4.0 2.2.2.2 1288 36 80000011 1 External 2.2.2.0 2.2.2.2 1288 36 80000013 1 External 10.1.1.0 10.1.1.1 398 36 8000000F 1 External 200.1.1.1 2.2.2.2 1288 36 80000013 1 <R1>dis rou <R1>dis route-policy <R1>- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
- 117
- 118
- 119
- 120
- 121
- 122
- 123
- 124
- 125
- 126
- 127
- 128
- 129
- 130
- 131
- 132
- 133
- 134
- 135
- 136
- 137
- 138
- 139
- 140
- 141
- 142
- 143
- 144
- 145
- 146
- 147
- 148
- 149
- 150
- 151
- 152
- 153
- 154
- 155
- 156
- 157
- 158
- 159
- 160
- 161
- 162
- 163
- 164
- 165
- 166
- 167
- 168
- 169
- 170
- 171
- 172
- 173
<XXZX>dis cu <XXZX>dis current-configuration [V200R003C00] # sysname XXZX # snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00 # portal local-server load flash:/portalpage.zip # drop illegal-mac alarm # undo info-center enable # wlan ac-global carrier id other ac id 0 # set cpu-usage threshold 80 restore 75 # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http # isis 1 network-entity 49.0001.0000.0000.0001.00 import-route ospf 1 route-policy FANGHUAN # firewall zone Local priority 15 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Ethernet0/0/2 # interface Ethernet0/0/3 # interface Ethernet0/0/4 # interface Ethernet0/0/5 # interface Ethernet0/0/6 # interface Ethernet0/0/7 # interface GigabitEthernet0/0/0 ip address 1.1.1.2 255.255.255.0 ospf enable 1 area 0.0.0.0 # interface GigabitEthernet0/0/1 ip address 2.2.2.1 255.255.255.0 isis enable 1 # interface NULL0 # ospf 1 router-id 2.2.2.2 import-route isis 1 route-policy FANGHUAN-2 preference ase route-policy OSPF 150 area 0.0.0.0 # route-policy OSPF permit node 10 if-match tag 500 apply preference 10 # route-policy FANGHUAN deny node 10 if-match tag 200 # route-policy FANGHUAN permit node 20 apply tag 100 # route-policy FANGHUAN-2 deny node 10 if-match tag 400 # route-policy FANGHUAN-2 permit node 20 apply tag 300 # user-interface con 0 authentication-mode password user-interface vty 0 4 user-interface vty 16 20 # wlan ac # return <XXZX> <XXZX>dis ip int br *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 3 The number of interface that is DOWN in Physical is 0 The number of interface that is UP in Protocol is 3 The number of interface that is DOWN in Protocol is 0 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 1.1.1.2/24 up up GigabitEthernet0/0/1 2.2.2.1/24 up up NULL0 unassigned up up(s) <XXZX>dis ip rou <XXZX>dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 16 Routes : 16 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 0 D 1.1.1.2 GigabitEthernet 0/0/0 1.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 1.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 2.2.2.0/24 Direct 0 0 D 2.2.2.1 GigabitEthernet 0/0/1 2.2.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 2.2.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 3.3.3.0/24 OSPF 10 2 D 1.1.1.1 GigabitEthernet 0/0/0 4.4.4.0/24 ISIS-L2 15 20 D 2.2.2.2 GigabitEthernet 0/0/1 10.1.1.0/24 OSPF 10 2 D 1.1.1.1 GigabitEthernet 0/0/0 100.1.1.1/32 OSPF 10 1 D 1.1.1.1 GigabitEthernet 0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 192.168.1.1/32 O_ASE 10 1 D 1.1.1.1 GigabitEthernet 0/0/0 200.1.1.1/32 ISIS-L2 15 10 D 2.2.2.2 GigabitEthernet 0/0/1 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 <XXZX>dis ospf lsdb OSPF Process 1 with Router ID 2.2.2.2 Link State Database Area: 0.0.0.0 Type LinkState ID AdvRouter Age Len Sequence Metric Router 4.4.4.1 4.4.4.1 1789 36 80000015 1 Router 2.2.2.2 2.2.2.2 1776 36 80000015 1 Router 1.1.1.1 1.1.1.1 479 72 80000022 1 Router 10.1.1.1 10.1.1.1 480 36 80000018 1 Network 1.1.1.2 2.2.2.2 1776 32 80000013 0 Network 10.1.1.10 1.1.1.1 480 32 80000002 0 Network 3.3.3.2 4.4.4.1 1789 32 80000012 0 AS External Database Type LinkState ID AdvRouter Age Len Sequence Metric External 4.4.4.0 2.2.2.2 1369 36 80000011 1 External 2.2.2.0 2.2.2.2 1369 36 80000013 1 External 200.1.1.1 2.2.2.2 1369 36 80000013 1 External 192.168.1.1 10.1.1.1 481 36 8000000F 1 External 4.4.4.0 4.4.4.1 719 36 80000013 1 External 10.1.1.0 10.1.1.1 481 36 8000000F 1 <XXZX>dis isis lsdb ve <XXZX>dis isis lsdb verbose Database information for ISIS(1) -------------------------------- Level-1 Link State Database LSPID Seq Num Checksum Holdtime Length ATT/P/OL ------------------------------------------------------------------------------- 0000.0000.0001.00-00* 0x0000002b 0xfa86 1121 56 0/0/0 SOURCE 0000.0000.0001.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 2.2.2.1 IP-Internal 2.2.2.0 255.255.255.0 COST: 10 Total LSP(s): 1 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload Level-2 Link State Database LSPID Seq Num Checksum Holdtime Length ATT/P/OL ------------------------------------------------------------------------------- 0000.0000.0001.00-00* 0x0000002d 0x1fc2 1121 70 0/0/0 SOURCE 0000.0000.0001.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 2.2.2.1 NBR ID 0000.0000.0003.01 COST: 10 IP-Internal 2.2.2.0 255.255.255.0 COST: 10 0000.0000.0001.00-01* 0x00000030 0xa9ae 1121 89 0/0/0 SOURCE 0000.0000.0001.00 IP-External 1.1.1.0 255.255.255.0 COST: 64 IP-External 3.3.3.0 255.255.255.0 COST: 64 IP-External 10.1.1.0 255.255.255.0 COST: 64 IP-External 100.1.1.1 255.255.255.255 COST: 64 IP-External 192.168.1.1 255.255.255.255 COST: 64 0000.0000.0003.00-00 0x0000002d 0x570b 653 113 0/0/0 SOURCE 0000.0000.0003.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 200.1.1.1 INTF ADDR 4.4.4.4 INTF ADDR 2.2.2.2 NBR ID 0000.0000.0003.02 COST: 10 NBR ID 0000.0000.0003.01 COST: 10 IP-Internal 200.1.1.1 255.255.255.255 COST: 0 IP-Internal 4.4.4.0 255.255.255.0 COST: 10 IP-Internal 2.2.2.0 255.255.255.0 COST: 10 0000.0000.0003.01-00 0x00000027 0x6101 653 55 0/0/0 SOURCE 0000.0000.0003.01 NLPID IPV4 NBR ID 0000.0000.0003.00 COST: 0 NBR ID 0000.0000.0001.00 COST: 0 0000.0000.0003.02-00 0x00000027 0xaeaf 653 55 0/0/0 SOURCE 0000.0000.0003.02 NLPID IPV4 NBR ID 0000.0000.0003.00 COST: 0 NBR ID 0000.0000.0004.00 COST: 0 0000.0000.0004.00-00 0x0000002b 0xb023 643 70 0/0/0 SOURCE 0000.0000.0004.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 4.4.4.1 NBR ID 0000.0000.0003.02 COST: 10 IP-Internal 4.4.4.0 255.255.255.0 COST: 10 0000.0000.0004.00-01 0x0000002d 0x97c0 714 89 0/0/0 SOURCE 0000.0000.0004.00 IP-External 1.1.1.0 255.255.255.0 COST: 64 IP-External 3.3.3.0 255.255.255.0 COST: 64 IP-External 10.1.1.0 255.255.255.0 COST: 64 IP-External 100.1.1.1 255.255.255.255 COST: 64 IP-External 192.168.1.1 255.255.255.255 COST: 64 Total LSP(s): 7 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload <XXZX> dis rou <XXZX>dis route-policy Route-policy : OSPF permit : 10 (matched counts: 2) Match clauses : if-match tag 500 Apply clauses : apply preference 10 Route-policy : FANGHUAN deny : 10 (matched counts: 0) Match clauses : if-match tag 200 permit : 20 (matched counts: 6) Apply clauses : apply tag 100 Route-policy : FANGHUAN-2 deny : 10 (matched counts: 0) Match clauses : if-match tag 400 permit : 20 (matched counts: 7) Apply clauses : apply tag 300 <XXZX>- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
- 117
- 118
- 119
- 120
- 121
- 122
- 123
- 124
- 125
- 126
- 127
- 128
- 129
- 130
- 131
- 132
- 133
- 134
- 135
- 136
- 137
- 138
- 139
- 140
- 141
- 142
- 143
- 144
- 145
- 146
- 147
- 148
- 149
- 150
- 151
- 152
- 153
- 154
- 155
- 156
- 157
- 158
- 159
- 160
- 161
- 162
- 163
- 164
- 165
- 166
- 167
- 168
- 169
- 170
- 171
- 172
- 173
- 174
- 175
- 176
- 177
- 178
- 179
- 180
- 181
- 182
- 183
- 184
- 185
- 186
- 187
- 188
- 189
- 190
- 191
- 192
- 193
- 194
- 195
- 196
- 197
- 198
- 199
- 200
- 201
- 202
- 203
- 204
- 205
- 206
- 207
- 208
- 209
- 210
- 211
- 212
- 213
- 214
- 215
- 216
- 217
- 218
- 219
- 220
- 221
- 222
- 223
- 224
- 225
- 226
- 227
- 228
- 229
- 230
- 231
- 232
- 233
- 234
- 235
- 236
- 237
- 238
- 239
- 240
- 241
- 242
- 243
- 244
- 245
- 246
- 247
- 248
- 249
- 250
- 251
- 252
- 253
- 254
- 255
- 256
- 257
- 258
- 259
- 260
- 261
- 262
- 263
- 264
- 265
- 266
- 267
- 268
- 269
- 270
- 271
- 272
- 273
- 274
- 275
- 276
- 277
- 278
- 279
- 280
<XXZX-2>dis cu [V200R003C00] # sysname XXZX-2 # snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00 # portal local-server load flash:/portalpage.zip # drop illegal-mac alarm # undo info-center enable # wlan ac-global carrier id other ac id 0 # set cpu-usage threshold 80 restore 75 # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http # isis 1 is-level level-2 network-entity 49.0001.0000.0000.0004.00 import-route ospf 1 route-policy FANGHUAN-2 preference 151 # firewall zone Local priority 15 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Ethernet0/0/2 # interface Ethernet0/0/3 # interface Ethernet0/0/4 # interface Ethernet0/0/5 # interface Ethernet0/0/6 # interface Ethernet0/0/7 # interface GigabitEthernet0/0/0 ip address 4.4.4.1 255.255.255.0 isis enable 1 # interface GigabitEthernet0/0/1 ip address 3.3.3.2 255.255.255.0 ospf enable 1 area 0.0.0.0 # interface NULL0 # ospf 1 import-route isis 1 route-policy FANGHUAN preference ase route-policy OSPF 150 area 0.0.0.0 # route-policy OSPF permit node 10 if-match tag 500 apply preference 10 # route-policy FANGHUAN deny node 10 if-match tag 100 # route-policy FANGHUAN permit node 20 apply tag 200 # route-policy FANGHUAN-2 deny node 10 if-match tag 300 # route-policy FANGHUAN-2 permit node 20 apply tag 400 # user-interface con 0 authentication-mode password user-interface vty 0 4 user-interface vty 16 20 # wlan ac # return <XXZX-2> <XXZX-2>dis ip int br *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 3 The number of interface that is DOWN in Physical is 0 The number of interface that is UP in Protocol is 3 The number of interface that is DOWN in Protocol is 0 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 4.4.4.1/24 up up GigabitEthernet0/0/1 3.3.3.2/24 up up NULL0 unassigned up up(s) <XXZX-2>dis ip rou <XXZX-2>dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 16 Routes : 16 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 OSPF 10 2 D 3.3.3.1 GigabitEthernet 0/0/1 2.2.2.0/24 O_ASE 150 1 D 3.3.3.1 GigabitEthernet 0/0/1 3.3.3.0/24 Direct 0 0 D 3.3.3.2 GigabitEthernet 0/0/1 3.3.3.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 3.3.3.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 4.4.4.0/24 Direct 0 0 D 4.4.4.1 GigabitEthernet 0/0/0 4.4.4.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 4.4.4.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.1.0/24 OSPF 10 2 D 3.3.3.1 GigabitEthernet 0/0/1 100.1.1.1/32 OSPF 10 1 D 3.3.3.1 GigabitEthernet 0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 192.168.1.1/32 O_ASE 10 1 D 3.3.3.1 GigabitEthernet 0/0/1 200.1.1.1/32 O_ASE 150 1 D 3.3.3.1 GigabitEthernet 0/0/1 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 <XXZX-2>dis ospf lsdb OSPF Process 1 with Router ID 4.4.4.1 Link State Database Area: 0.0.0.0 Type LinkState ID AdvRouter Age Len Sequence Metric Router 4.4.4.1 4.4.4.1 92 36 80000016 1 Router 2.2.2.2 2.2.2.2 84 36 80000016 1 Router 1.1.1.1 1.1.1.1 584 72 80000022 1 Router 10.1.1.1 10.1.1.1 585 36 80000018 1 Network 1.1.1.2 2.2.2.2 84 32 80000014 0 Network 10.1.1.10 1.1.1.1 585 32 80000002 0 Network 3.3.3.2 4.4.4.1 92 32 80000013 0 AS External Database Type LinkState ID AdvRouter Age Len Sequence Metric External 4.4.4.0 4.4.4.1 822 36 80000013 1 External 192.168.1.1 10.1.1.1 586 36 8000000F 1 External 4.4.4.0 2.2.2.2 1476 36 80000011 1 External 2.2.2.0 2.2.2.2 1476 36 80000013 1 External 10.1.1.0 10.1.1.1 586 36 8000000F 1 External 200.1.1.1 2.2.2.2 1476 36 80000013 1 <XXZX-2>dis isis lsdb ver Database information for ISIS(1) -------------------------------- Level-2 Link State Database LSPID Seq Num Checksum Holdtime Length ATT/P/OL ------------------------------------------------------------------------------- 0000.0000.0001.00-00 0x0000002d 0x1fc2 1009 70 0/0/0 SOURCE 0000.0000.0001.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 2.2.2.1 NBR ID 0000.0000.0003.01 COST: 10 IP-Internal 2.2.2.0 255.255.255.0 COST: 10 0000.0000.0001.00-01 0x00000030 0xa9ae 1009 89 0/0/0 SOURCE 0000.0000.0001.00 IP-External 1.1.1.0 255.255.255.0 COST: 64 IP-External 3.3.3.0 255.255.255.0 COST: 64 IP-External 10.1.1.0 255.255.255.0 COST: 64 IP-External 100.1.1.1 255.255.255.255 COST: 64 IP-External 192.168.1.1 255.255.255.255 COST: 64 0000.0000.0003.00-00 0x0000002d 0x570b 542 113 0/0/0 SOURCE 0000.0000.0003.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 200.1.1.1 INTF ADDR 4.4.4.4 INTF ADDR 2.2.2.2 NBR ID 0000.0000.0003.02 COST: 10 NBR ID 0000.0000.0003.01 COST: 10 IP-Internal 200.1.1.1 255.255.255.255 COST: 0 IP-Internal 4.4.4.0 255.255.255.0 COST: 10 IP-Internal 2.2.2.0 255.255.255.0 COST: 10 0000.0000.0003.01-00 0x00000027 0x6101 541 55 0/0/0 SOURCE 0000.0000.0003.01 NLPID IPV4 NBR ID 0000.0000.0003.00 COST: 0 NBR ID 0000.0000.0001.00 COST: 0 0000.0000.0003.02-00 0x00000027 0xaeaf 541 55 0/0/0 SOURCE 0000.0000.0003.02 NLPID IPV4 NBR ID 0000.0000.0003.00 COST: 0 NBR ID 0000.0000.0004.00 COST: 0 0000.0000.0004.00-00* 0x0000002b 0xb023 535 70 0/0/0 SOURCE 0000.0000.0004.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 4.4.4.1 NBR ID 0000.0000.0003.02 COST: 10 IP-Internal 4.4.4.0 255.255.255.0 COST: 10 0000.0000.0004.00-01* 0x0000002d 0x97c0 605 89 0/0/0 SOURCE 0000.0000.0004.00 IP-External 1.1.1.0 255.255.255.0 COST: 64 IP-External 3.3.3.0 255.255.255.0 COST: 64 IP-External 10.1.1.0 255.255.255.0 COST: 64 IP-External 100.1.1.1 255.255.255.255 COST: 64 IP-External 192.168.1.1 255.255.255.255 COST: 64 Total LSP(s): 7 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload <XXZX-2>dis rou <XXZX-2>dis route-policy Route-policy : OSPF permit : 10 (matched counts: 2) Match clauses : if-match tag 500 Apply clauses : apply preference 10 Route-policy : FANGHUAN deny : 10 (matched counts: 0) Match clauses : if-match tag 100 permit : 20 (matched counts: 3) Apply clauses : apply tag 200 Route-policy : FANGHUAN-2 deny : 10 (matched counts: 3) Match clauses : if-match tag 300 permit : 20 (matched counts: 6) Apply clauses : apply tag 400 <XXZX-2>- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
- 117
- 118
- 119
- 120
- 121
- 122
- 123
- 124
- 125
- 126
- 127
- 128
- 129
- 130
- 131
- 132
- 133
- 134
- 135
- 136
- 137
- 138
- 139
- 140
- 141
- 142
- 143
- 144
- 145
- 146
- 147
- 148
- 149
- 150
- 151
- 152
- 153
- 154
- 155
- 156
- 157
- 158
- 159
- 160
- 161
- 162
- 163
- 164
- 165
- 166
- 167
- 168
- 169
- 170
- 171
- 172
- 173
- 174
- 175
- 176
- 177
- 178
- 179
- 180
- 181
- 182
- 183
- 184
- 185
- 186
- 187
- 188
- 189
- 190
- 191
- 192
- 193
- 194
- 195
- 196
- 197
- 198
- 199
- 200
- 201
- 202
- 203
- 204
- 205
- 206
- 207
- 208
- 209
- 210
- 211
- 212
- 213
- 214
- 215
- 216
- 217
- 218
- 219
- 220
- 221
- 222
- 223
- 224
- 225
- 226
- 227
- 228
- 229
- 230
- 231
- 232
- 233
- 234
- 235
- 236
- 237
- 238
- 239
- 240
- 241
- 242
- 243
- 244
- 245
- 246
- 247
- 248
- 249
- 250
- 251
- 252
- 253
- 254
- 255
- 256
- 257
- 258
- 259
- 260
- 261
- 262
- 263
- 264
<R3>dis current-configuration [V200R003C00] # sysname R3 # snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone China-Standard-Time minus 08:00:00 # portal local-server load flash:/portalpage.zip # drop illegal-mac alarm # wlan ac-global carrier id other ac id 0 # set cpu-usage threshold 80 restore 75 # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http # isis 1 is-level level-2 network-entity 49.0001.0000.0000.0003.00 # firewall zone Local priority 15 # interface Ethernet0/0/0 # interface Ethernet0/0/1 # interface Ethernet0/0/2 # interface Ethernet0/0/3 # interface Ethernet0/0/4 # interface Ethernet0/0/5 # interface Ethernet0/0/6 # interface Ethernet0/0/7 # interface GigabitEthernet0/0/0 ip address 2.2.2.2 255.255.255.0 isis enable 1 # interface GigabitEthernet0/0/1 ip address 4.4.4.4 255.255.255.0 isis enable 1 # interface NULL0 # interface LoopBack0 ip address 200.1.1.1 255.255.255.255 isis enable 1 # user-interface con 0 authentication-mode password user-interface vty 0 4 user-interface vty 16 20 # wlan ac # return <R3> dis ip int br *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 4 The number of interface that is DOWN in Physical is 0 The number of interface that is UP in Protocol is 4 The number of interface that is DOWN in Protocol is 0 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 2.2.2.2/24 up up GigabitEthernet0/0/1 4.4.4.4/24 up up LoopBack0 200.1.1.1/32 up up(s) NULL0 unassigned up up(s) <R3>dis ip rou <R3>dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 16 Routes : 21 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 ISIS-L2 15 74 D 2.2.2.1 GigabitEthernet 0/0/0 ISIS-L2 15 74 D 4.4.4.1 GigabitEthernet 0/0/1 2.2.2.0/24 Direct 0 0 D 2.2.2.2 GigabitEthernet 0/0/0 2.2.2.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 2.2.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 3.3.3.0/24 ISIS-L2 15 74 D 4.4.4.1 GigabitEthernet 0/0/1 ISIS-L2 15 74 D 2.2.2.1 GigabitEthernet 0/0/0 4.4.4.0/24 Direct 0 0 D 4.4.4.4 GigabitEthernet 0/0/1 4.4.4.4/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 4.4.4.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 10.1.1.0/24 ISIS-L2 15 74 D 4.4.4.1 GigabitEthernet 0/0/1 ISIS-L2 15 74 D 2.2.2.1 GigabitEthernet 0/0/0 100.1.1.1/32 ISIS-L2 15 74 D 4.4.4.1 GigabitEthernet 0/0/1 ISIS-L2 15 74 D 2.2.2.1 GigabitEthernet 0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 192.168.1.1/32 ISIS-L2 15 74 D 4.4.4.1 GigabitEthernet 0/0/1 ISIS-L2 15 74 D 2.2.2.1 GigabitEthernet 0/0/0 200.1.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 <R3> dis isis lsdb ve <R3>dis isis lsdb verbose Database information for ISIS(1) -------------------------------- Level-2 Link State Database LSPID Seq Num Checksum Holdtime Length ATT/P/OL ------------------------------------------------------------------------------- 0000.0000.0001.00-00 0x0000002d 0x1fc2 893 70 0/0/0 SOURCE 0000.0000.0001.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 2.2.2.1 NBR ID 0000.0000.0003.01 COST: 10 IP-Internal 2.2.2.0 255.255.255.0 COST: 10 0000.0000.0001.00-01 0x00000030 0xa9ae 893 89 0/0/0 SOURCE 0000.0000.0001.00 IP-External 1.1.1.0 255.255.255.0 COST: 64 IP-External 3.3.3.0 255.255.255.0 COST: 64 IP-External 10.1.1.0 255.255.255.0 COST: 64 IP-External 100.1.1.1 255.255.255.255 COST: 64 IP-External 192.168.1.1 255.255.255.255 COST: 64 0000.0000.0003.00-00* 0x0000002d 0x570b 427 113 0/0/0 SOURCE 0000.0000.0003.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 200.1.1.1 INTF ADDR 4.4.4.4 INTF ADDR 2.2.2.2 NBR ID 0000.0000.0003.02 COST: 10 NBR ID 0000.0000.0003.01 COST: 10 IP-Internal 200.1.1.1 255.255.255.255 COST: 0 IP-Internal 4.4.4.0 255.255.255.0 COST: 10 IP-Internal 2.2.2.0 255.255.255.0 COST: 10 0000.0000.0003.01-00* 0x00000027 0x6101 427 55 0/0/0 SOURCE 0000.0000.0003.01 NLPID IPV4 NBR ID 0000.0000.0003.00 COST: 0 NBR ID 0000.0000.0001.00 COST: 0 0000.0000.0003.02-00* 0x00000027 0xaeaf 427 55 0/0/0 SOURCE 0000.0000.0003.02 NLPID IPV4 NBR ID 0000.0000.0003.00 COST: 0 NBR ID 0000.0000.0004.00 COST: 0 0000.0000.0004.00-00 0x0000002b 0xb023 419 70 0/0/0 SOURCE 0000.0000.0004.00 NLPID IPV4 AREA ADDR 49.0001 INTF ADDR 4.4.4.1 NBR ID 0000.0000.0003.02 COST: 10 IP-Internal 4.4.4.0 255.255.255.0 COST: 10 0000.0000.0004.00-01 0x0000002d 0x97c0 489 89 0/0/0 SOURCE 0000.0000.0004.00 IP-External 1.1.1.0 255.255.255.0 COST: 64 IP-External 3.3.3.0 255.255.255.0 COST: 64 IP-External 10.1.1.0 255.255.255.0 COST: 64 IP-External 100.1.1.1 255.255.255.255 COST: 64 IP-External 192.168.1.1 255.255.255.255 COST: 64 Total LSP(s): 7 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload <R3>- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
- 117
- 118
- 119
- 120
- 121
- 122
- 123
- 124
- 125
- 126
- 127
- 128
- 129
- 130
- 131
- 132
- 133
- 134
- 135
- 136
- 137
- 138
- 139
- 140
- 141
- 142
- 143
- 144
- 145
- 146
- 147
- 148
- 149
- 150
- 151
- 152
- 153
- 154
- 155
- 156
- 157
- 158
- 159
- 160
- 161
- 162
- 163
- 164
- 165
- 166
- 167
- 168
- 169
- 170
- 171
- 172
- 173
- 174
- 175
- 176
- 177
- 178
- 179
- 180
- 181
- 182
- 183
- 184
- 185
- 186
- 187
- 188
- 189
- 190
- 191
- 192
- 193
- 194
- 195
- 196
- 197
- 198
- 199
- 200
- 201
- 202
- 203
- 204
- 205
- 206
链接：https://pan.baidu.com/s/1FPam2fs4T6PvVfz0FCoxPg?pwd=CCIE
提取码：CCIE
–来自百度网盘超级会员V4的分享对应ENSP拓扑图（ 含配置）
牛的，四万多字，估计官方文档都没我这么多字，能看到这肯定铁粉了，留个赞谢谢啦~
-
相关阅读:
Flask 与 Django 框架对比
内存 分页、交换空间
kubernetes中pause容器的作用与源码详解
页面结构分析
VectorCAST/C++在汽车电子C++代码测试的应用
回溯算法题目
设计模式- 适配器模式（Adapter Pattern）结构|原理|优缺点|场景|示例
基于Java+SpringBoot+Vue前后端分离秒杀系统设计和实现
信息学奥赛算法入门之递归
K8s 部署 Nginx
- 原文地址：https://blog.csdn.net/weixin_48137911/article/details/127925732
