Junos路由器静态路由及动态路由rip和ospf配置测试
生活随笔
收集整理的這篇文章主要介紹了
Junos路由器静态路由及动态路由rip和ospf配置测试
小編覺得挺不錯的,現(xiàn)在分享給大家,幫大家做個參考.
一.測試拓?fù)?#xff1a;
二.基本配置:A.R1:
interface Ethernet0/0
ip address 202.100.100.1 255.255.255.0
? ? no shutinterface Loopback0
? ? ip address 1.1.1.1 255.255.255.255B.R2:interface Ethernet0/0
? ? ip address 202.100.100.2 255.255.255.0 ? ? no shutinterface Ethernet0/1
? ? ip address 202.100.1.2 255.255.255.0 ? ? no shutinterface Loopback0
? ? ip address 2.2.2.2 255.255.255.255C.JUNOS1:set system root-authentication plain-text-password
set interfaces em0 unit 0 family inet address 202.100.1.10/24
set interfaces em1 unit 0 family inet address 10.1.1.10/24D.R3:
interface Ethernet0/0 ? ? ip address 10.1.1.3 255.255.255.0
? ? no shutinterface Loopback0
? ? ip address 3.3.3.3 255.255.255.255三.JUNOS靜態(tài)路由配置:A.配置方法:set routing-options static route 0.0.0.0/0 next-hop 202.100.1.2commitB.測試:root> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1): 56 data bytes
64 bytes from 1.1.1.1: icmp_seq=0 ttl=255 time=51.869 ms
^C
--- 1.1.1.1 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max/stddev = 51.869/51.869/51.869/nan ms四.RIP動態(tài)路由配置:http://www.juniper.net/techpubs/en_US/junos13.3/topics/topic-map/rip-authentication.html--junos如果不配置認(rèn)證,不用配置策略,配置認(rèn)證,如果不配置策略,接口發(fā)出的rip包不會帶有認(rèn)證信息,junos只能接收rip。A.JUNOS:①配置策略:set policy-options policy-statement advertis-routers-through-rip term 1 from protocol direct
set policy-options policy-statement advertis-routers-through-rip term 1 from protocol rip
set policy-options policy-statement advertis-routers-through-rip term 1 then accept②配置接口,將接口加入groupset protocols rip group rip-group neighbor em1.0③group export策略set protocols rip group rip-group export advertis-routers-through-rip④配置認(rèn)證全局:set protocols rip authentication-type md5
set protocols rip authentication-key ?cisco接口:set protocols rip group rip-group neighbor em1.0 authentication-type md5
set protocols rip group rip-group neighbor em1.0 authentication-key ?ciscoB.R2:①基本配置:router rip
version 2
network 10.0.0.0
network 192.168.1.0②配置認(rèn)證:key chain rip
key 1
? key-string cisco
interface Ethernet0/0
? ? ip rip authentication mode md5
? ? ip rip authentication key-chain rip備注:測試時發(fā)現(xiàn)用c2691-adventerprisek9-mz.124-15.T14.BIN的2691的路由器配置完rip認(rèn)證后,rip包中不會有認(rèn)證信息,可能是IOS的問題。C.驗(yàn)證:root# run show route
inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
3.0.0.0/8 ? ? ? ? ?*[RIP/100] 00:09:09, metric 2, tag 0
? ? ? ? ? ? ? ? ? ?> to 10.1.1.3 via em1.0
10.1.1.0/24 ? ? ? ?*[Direct/0] 00:28:05
? ? ? ? ? ? ? ? ? ?> via em1.0
10.1.1.10/32 ? ? ? *[Local/0] 00:28:05
? ? ? ? ? ? ? ? ? ? ?Local via em1.0
13.0.0.0/8 ? ? ? ? *[RIP/100] 00:09:09, metric 2, tag 0
? ? ? ? ? ? ? ? ? ?> to 10.1.1.3 via em1.0
202.100.1.0/24 ? ? *[Direct/0] 00:28:05
? ? ? ? ? ? ? ? ? ?> via em0.0
202.100.1.10/32 ? ?*[Local/0] 00:28:05
? ? ? ? ? ? ? ? ? ? ?Local via em0.0
224.0.0.9/32 ? ? ? *[RIP/100] 00:01:10, metric 1
? ? ? ? ? ? ? ? ? ? ?MultiRecv
R3#show ip route rip
R ? ?202.100.1.0/24 [120/1] via 10.1.1.10, 00:00:19, Ethernet0/0
五.OSPF動態(tài)路由配置:http://www.juniper.net/techpubs/en_US/junos13.2/topics/topic-map/ospf-authentication.html
A.R1:router ospf 1
? ? router-id 1.1.1.1
? ? network 202.100.100.1 0.0.0.0 area 0 ? ? network 1.1.1.1 0.0.0.0 a 0interface Ethernet0/0
? ? ip ospf authentication message-digest
? ? ip ospf message-digest-key 1 md5 cisco---鏈路認(rèn)證B.R2:router ospf 1
? ? router-id 2.2.2.2
? ? area 0 authentication message-digest
? ? network 202.100.1.2 0.0.0.0 area 0
? ? network 202.100.100.2 0.0.0.0 area 0interface Ethernet0/0
? ? ip ospf message-digest-key 1 md5 cisco
interface Ethernet0/1
? ? ip ospf message-digest-key 1 md5 cisco---區(qū)域認(rèn)證C.JUNOS:set protocols ospf area 0.0.0.0 interface em0.0 authentication md5 1 key ciscoD:驗(yàn)證:root# run show ospf neighbor
Address ? ? ? ? ?Interface ? ? ? ? ? ? ?State ? ? ID ? ? ? ? ? ? ? Pri ?Dead
202.100.1.2 ? ? ?em0.0 ? ? ? ? ? ? ? ? ?Full ? ? ?2.2.2.2 ? ? ? ? ? ?1 ? ?32
root# run show route protocol ospf ?
inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
1.1.1.1/32 ? ? ? ? *[OSPF/10] 00:00:04, metric 12
? ? ? ? ? ? ? ? ? ?> to 202.100.1.2 via em0.0
202.100.100.0/24 ? *[OSPF/10] 04:48:10, metric 11
? ? ? ? ? ? ? ? ? ?> to 202.100.1.2 via em0.0
224.0.0.5/32 ? ? ? *[OSPF/10] 04:48:22, metric 1
? ? ? ? ? ? ? ? ? ? ?MultiRecv
六.OSPF和rip雙向路由重分布配置:A.RIP往OSPF:①配置策略:set policy-options policy-statement into-ospf term rip-to-ospf from protocol rip
set policy-options policy-statement into-ospf term rip-to-ospf from route-filter 3.0.0.0/8 exact
set policy-options policy-statement into-ospf term rip-to-ospf then acceptset policy-options policy-statement into-ospf term direct-to-ospf from protocol ?directset policy-options policy-statement into-ospf term direct-to-ospf from route-filter 10.1.1.0/24 exactset policy-options policy-statement into-ospf term direct-to-ospf then acceptset policy-options policy-statement into-ospf then reject②調(diào)用策略:set protocols ospf export into-ospf ③驗(yàn)證:R1#show ip route ospf
O E2 3.0.0.0/8 [110/2] via 202.100.100.2, 00:07:57, Ethernet0/0
O ? ?202.100.1.0/24 [110/20] via 202.100.100.2, 00:10:49, Ethernet0/0
? ? 10.0.0.0/24 is subnetted, 1 subnets
O E2 ? ?10.1.1.0 [110/0] via 202.100.100.2, 00:00:04, Ethernet0/0B.OSPF往RIP:①配置策略:set policy-options policy-statement into-rip term ospf-to-rip from protocol ospf
set policy-options policy-statement into-rip term ospf-to-rip from route-filter 202.100.100.0/24 exact
set policy-options policy-statement into-rip term ospf-to-rip from route-filter 1.1.1.1/32 exact
set policy-options policy-statement into-rip term ospf-to-rip then accept
set policy-options policy-statement into-rip term direct-to-rip from protocol direct
set policy-options policy-statement into-rip term direct-to-rip from route-filter 202.100.1.0/24 exact
set policy-options policy-statement into-rip term direct-to-rip then accept
set policy-options policy-statement into-rip then reject②調(diào)用策略:set protocols rip group rip-group export into-rip ③驗(yàn)證:R3#show ip route rip
? ? 1.0.0.0/32 is subnetted, 1 subnets
R ? ? ? 1.1.1.1 [120/1] via 10.1.1.10, 00:00:24, Ethernet0/0
R ? ?202.100.100.0/24 [120/1] via 10.1.1.10, 00:00:24, Ethernet0/0
R ? ?202.100.1.0/24 [120/1] via 10.1.1.10, 00:00:24, Ethernet0/0
總結(jié)
以上是生活随笔為你收集整理的Junos路由器静态路由及动态路由rip和ospf配置测试的全部內(nèi)容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: awk的正则表达式提取
- 下一篇: Linux中etc目录详解