4.3 IS-IS配置详解

图片[1]-4.3 IS-IS配置详解-大赛人网
图4-1 ISIS 基本配置网络拓扑

1.IS-IS基础配置

1)基础配置

[R1]isis 1
[R1-isis-1]network-entity 49.0123.0000.0000.0001.00
[R1-isis-1]is-level level-1-2
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]isis enable 1
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]isis enable 1

[R2]isis 1
[R2-isis-1]network-entity 49.0123.0000.0000.0002.00
[R2-isis-1]is-level level-1-2
[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]isis enable 1
[R2]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]isis enable 1

[R3]isis 1
[R3-isis-1]network-entity 49.0123.0000.0000.0003.00
[R3-isis-1]is-level level-1
[R3]interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0]isis enable 1
[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]isis enable 1

[R4]isis 1
[R4-isis-1]network-entity 49.0045.0000.0000.0004.00
[R4-isis-1]is-level level-1-2
[R4]interface GigabitEthernet 0/0/0
[R4-GigabitEthernet0/0/0]isis enable 1
[R4]interface GigabitEthernet 0/0/1
[R4-GigabitEthernet0/0/1]isis enable 1
[R4]interface GigabitEthernet 0/0/2
[R4-GigabitEthernet0/0/2]isis enable 1

[R5]isis 1
[R5-isis-1]network-entity 49.0045.0000.0000.0005.00
[R5-isis-1]is-level level-2
[R5-GigabitEthernet0/0/1]isis enable 1
[R5]interface LoopBack 0
[R5-LoopBack0]isis enable 1

2)查看R3的ISIS邻居

[R3]display isis peer
System Id     Interface          Circuit Id       State HoldTime Type     PRI
0000.0000.0001  GE0/0/0            0000.0000.0003.01 Up   25s      L1       64 
0000.0000.0002  GE0/0/1            0000.0000.0003.02 Up   27s      L1       64 

3)查看R3的ISIS-LSDB

[R3]display isis lsdb 
0000.0000.0001.00-00  0x00000007   0x28e9        451           86      1/0/0   
0000.0000.0002.00-00  0x00000008   0xad35        683           86      1/0/0   
0000.0000.0003.00-00* 0x00000005   0x73f6        559           97      0/0/0   
0000.0000.0003.01-00* 0x00000002   0xa9df        559           55      0/0/0   
0000.0000.0003.02-00* 0x00000002   0xbec8        559           55      0/0/0 

4)查看R3的ISIS路由表

[R3]display ip routing-table protocol isis
Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface
0.0.0.0/0   ISIS-L1 15   10          D   23.1.1.2        GigabitEthernet0/0/1
       ISIS-L1 15   10          D   13.1.1.1        GigabitEthernet0/0/0
14.0.0.0/8   ISIS-L1 15   20          D   13.1.1.1        GigabitEthernet0/0/0
24.0.0.0/8   ISIS-L1 15   20          D   23.1.1.2        GigabitEthernet0/0/1

5)查看R1的ISIS路由表

<R1>display ip routing-table protocol isis 
Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface
 5.5.5.5/32  ISIS-L2 15   20          D   14.1.1.4        GigabitEthernet0/0/1
23.0.0.0/8   ISIS-L1 15   20          D   13.1.1.3        GigabitEthernet0/0/0
24.0.0.0/8   ISIS-L1 15   30          D   13.1.1.3        GigabitEthernet0/0/0
45.0.0.0/8   ISIS-L2 15   20          D   14.1.1.4        GigabitEthernet0/0/1

2. IS-IS路由渗透

1)R1上配置路由渗透(图8-1),R3可以访问5.5.5.5/32
[R1]isis 1
[R1-isis-1]import-route isis level-2 into level-1 

2)查看R3的ISIS路由表

<R3>display  ip routing-table protocol isis
Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface
0.0.0.0/0   ISIS-L1 15   10          D   23.1.1.2        GigabitEthernet0/0/1
     ISIS-L1 15   10          D   13.1.1.1        GigabitEthernet0/0/0
5.5.5.5/32  ISIS-L1 15   30          D   13.1.1.1        GigabitEthernet0/0/0
14.0.0.0/8   ISIS-L1 15   20          D   13.1.1.1        GigabitEthernet0/0/0
24.0.0.0/8   ISIS-L1 15   20          D   23.1.1.2        GigabitEthernet0/0/1
45.0.0.0/8   ISIS-L1 15   30          D   13.1.1.1        GigabitEthernet0/0/0

3. IS-IS默认路由

图片[2]-4.3 IS-IS配置详解-大赛人网
图4-2 ISIS 基本配置网络拓扑

1)基本配置

[R1]isis 1
[R1-isis-1]network-entity 49.1234.0000.0000.0001.00
[R1-isis-1]is-level level-2
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]isis enable 1
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]isis enable 1
[R1]interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]isis enable 1
[R1]interface LoopBack 0
[R1-LoopBack0]isis enable 1

[R2]isis 1
[R2-isis-1]network-entity 49.1234.0000.0000.0002.00
[R2-isis-1]is-level level-2
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]isis enable 1

[R3]isis 1
[R3-isis-1]network-entity 49.1234.0000.0000.0003.00
[R3-isis-1]is-level level-2
[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]isis enable 1

[R4]isis 1
[R4-isis-1]network-entity 49.1234.0000.0000.0004.00
[R4-isis-1]is-level level-2
[R4]interface GigabitEthernet 0/0/2
[R4-GigabitEthernet0/0/2]isis enable 1

2)在R1发布默认路由

[R1]isis 1
[R1-isis-1]default-route-advertise level-2 cost 10

4. IS-IS接口认证

图片[3]-4.3 IS-IS配置详解-大赛人网
图4-3 ISIS 接口认证网络拓扑

1)明文认证配置

[R1]isis 1
[R1-isis-1]network-entity 49.0123.0000.0000.0001.00
[R1-isis-1]is-level level-1-2
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]isis enable 1 
[R1-GigabitEthernet0/0/0]isis  authentication-mode simple plain dsrw.com

[R2]isis 1
[R2-isis-1]network-entity 49.0123.0000.0000.0002.00
[R2-isis-1]is-level level-1-2
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]isis enable 1
[R2-GigabitEthernet0/0/0]isis authentication-mode simple plain dsrw.com

2)MD5认证配置

[R1-GigabitEthernet0/0/0]isis authentication-mode md5 cipher dsrw.com
[R2-GigabitEthernet0/0/0]isis authentication-mode md5 cipher dsrw.com
© 版权声明
THE END
喜欢就支持一下吧
点赞10 分享
评论 抢沙发
头像
欢迎您留下宝贵的见解!
提交
头像

昵称

取消
昵称

    请登录后查看评论内容