hcie lab2需求与解法所有设备IP地址如图为10 Y AB X24例如

IPinterfaceSerial1/0/erfaceSerial1/0/erfaceSerial2/0/erfaceGigabitEthernet0/0/erfaceSerial1/0/erfaceGigabitEthernet0/0/erfaceGigabitEthernet0/0/erfaceSerial1/0/erfaceGigabitEthernet0/0/erfaceGigabitEthernet0/0/erfaceSerial1/0/erfaceSerial1/0/erfaceGigabitEthernet0/0/erfaceGigabitEthernet0/0/erfaceSerial1/0/erfaceSerial1/0/erfaceGigabitEthernet0/0/erfaceGigabitEthernet0/0/erfaceSerial1/0/erfaceSerial1/0/erfaceipaddress255.255.255.VlanSysnamevlanbatch35 110113135222224255interfaceVlanif erfaceVlani erfaceGigabitEthernet0/0/1portlink-typeaccessportdefaultvlaninterfaceGigabitEthernet0/0/2portlink-typeaccessportdefaultvlan Sysnamevlanbatch35 110113135222224255interfaceVerfaceVerfaceGigabitEthernet0/0/2portlink-typeaccessportdefaultvlaninterfaceGigabitEthernet0/0/3portlink-typeaccessportdefaultvlaninterfaceGigabitEthernet0/0/4portlink-typeaccessportdefaultvlanSysnamevlanbatch35 110113135222224255interfaceVerfaceEthernet0/0/3portlink-typeaccessportdefaultvlan interfaceEthernet0/0/5portlink-typeaccessportdefaultvlan35interfaceEthernet0/0/22portlink-typeaccessportdefaultvlan255Sysnamevlanbatch35 110113135222224255interfaceEthernet0/0/5portlink-typeaccessportdefaultvlanSection1Layer日TrLNAC模LNLNSW1的GE0/0/13SW2的GE0/0/13，GE0/0/16连接SW3的Eth0/0/13，GE0019连接SW4的Eth0013。SW2的GE0016连接SW3的Eth0016，GE0019连接SW4的Eth0016。将上述W1、W2、W2、W4互连的接口修改为Trunk类型，允许除了LN1之外的所有LSW1:interfaceg0/0/13(g0/0/16)(g0/0/19)porttrunkpvid255portlink-typetrporttrunkall -passvlanSW2:interfaceg0/0/13(g0/0/16)(g0/0/19)porttrunkpvid255portlink-typetrporttrunkall -passvlanSW3:interface eth0/0/13(eth0/0/16)porttrunkpvid255portlink-typetrporttrunkall -passvlanSW4:interface eth0/0/13(eth0/0/16)porttrunkpvid255portlink-typetrporttrunkall -passvlan日在SW1、SW2、SW3都运行MSTPVlan110Vlan135Vlan222Vlan224关联到Instance10，SW1作为PrimaryRoot，SW2为SecondaryRoot。Vlan113Vlan35、Vlan255关联到Instance20。SW2作为PrimaryRoot，SW1为SecondaryRootMstp的regionname 。Revision-l SW3上防止E0/0/24收到携带更高优先级的BPDU而的根桥变化的危害SW1,SW2,stpmodemststpregion-configurationregion-namerevision-levelinstance10vlan110135222instance20vlan35113255activeregion-configurationstpinstance10rootprimarstpinstance20rootsecondarstpinstance10rootsecondarystpinstance20rootprimaryinterface eth0/0/24stproot-protectionSMART-日SW4通过Eth0013接口连接SW1的GE0/019接口，通过Eth0016接口连接SW2GE0019接口。Eth0013作为Master接口Eth0016作为Slave若SW4的Eth0013接口出现故障，流量自动切换到Eth0016接口。Eth0013恢复正常后，流量在30s内自动切回。Vlan110作为ControlVerface eth0/0/13stpdisableinterface eth0/0/16stpdisablesmart-linkgroupport eth0/0/13masterport eth0/0/16slavesmart-linkenablerestoreenabltimerwtr ###缺省回切时间为60flushsendcontr -vlanSW1/interfaceg0/0/19stpdisablesmart-linkflushreceivecontr -vlan建议在SW4上先down掉0/13和0/16接口，完成后再开启该端口，避免出现mac翻动FrameR1、R4、R5之间使用Frame-rel 进行互连，Hub-Spoke模式R1在Hub端,R4、R5在Spoke端，所有Frame-rel 接口不能使用子接口，并且需要关闭自InverseARP功interfaceSerial1/0/0erfaceSerial1/0/0erfaceSerial1/0/0link-protocolfrundofrinarpfrmapip401brfrmapip401bripaddress255.255.255.

R1和R2通过串行链路互连，封装类型为PPPR1需要对R2进行CHAP认证，R1为认证端。R2位被认证端。验证的用户名为chapuser，密码为CHAP123，且需以密文显示。2需要对R1认证，21papuser，为123且以显。interfaces1/0/pppauthenticati -modechapdomainppppaplocal-userpapuserpasswordcipherPAP123authentication-schemechapauthenticati -modeldomainauthenticati -schemelocal-userchapuserpasswordcipherCHAP123local-userchapuserservice -typepppinterfaces1/0/pppauthentication-modepapdomainppppappppchapuserchapuserpppchappasswordcipherCHAP123authentication-schemepapauthentication-modelocaldomainauthenticati -schemelocal-userpapuserpasswordcipherPAP123local-userpapuserservice-typepppBasic

代表你的CK，代表由号，1备号12设编为2，1设编号为11，2备为2，他此推设之互网段IP地为4掩，有路由器拥Loopback0接口，I址为10...X，码为32位4的Loopback1接口I地址为10.Y.40.4/24, （不置23之的连口址）所有设备接口IP地址Sw1上vlan110接口的ip地址为10Y1101124vlan113接口ip10Y1131124，SW2上vlan222的接口IP地址为10Y2221224VLAN224的接口IP地址为10.Y.224.1224,SW3上VLAN135的接口的IP地址为10Y1351324.R1连接R4使用DLCI104R1连接R5使用DLCI105R4连接R1使用DLCI401R5连接R1使用DLCI501DLCI号码。Framerelay接口之间需要能相互ping通。帧中继网络需支持广播。R1连接BB1的IP地址为157681124，R6连接BB2的IP地址为157682124，连接BB3的IP地址为157683124，设置路由器的RrouterID为Loopback0练习过程中，所有设备的端口IP地址自己按照图配置。R1-R6要在全局配置router-id； [R1]routerid[R2]routerid10.1.2.R5和R6运行RI versi 路由协议，且禁用汇总，通告R5与R6之间互联网段R1、R2和SW2运行RIPversion2路由协议，且禁用汇总，在RIP中通告R1与R2，R2SW2之间的互联网段，R2的loopback0通告进RIPripversion2undosummarynetwork10.0.0.ripversion2undosummarynetwork10.0.0.ripversion2undosummarynetwork10.0.0.ripversion2undosummarynetwork10.0.0.ripversion2undosummarynetwork10.0.0.RIP

R6通过S100接口和BB2互连，BB2运行RIPVersion2路由协议，BB2连接R6接口IP地址为:54，在R6上通告R6与BB2的互连网段。且只发送单播路由更新信息。R1和SW2不能向非相关接口发送和接收RIP更文work157.68.0.silent-interfaceSerial1/0/interfaceGigabitEthernet0/0/1(Serial1/0/0)undoripoutputundoripiinterfaceVlanif224undoripoutputundoripinputR5:interfaceg0/0/1(g0/0/0)(s1/0/0)undoripinputundoripoutRIP路由引R2的GE0/0/0接口不能运行RIP协议，但接口所在网段能被RIP区域的到ripimport-routedirectroute -policydirectroute-policydirectpermitnode10if-matchinterfaceg0/0/RIPROUTER实现R6只向BB2发送一条10.Y.0.0/ 的汇总路由interfaceSerial1/0/ripsummary-address avoid-feedbackrip1filter-policyip-prefix rip-sum-outexports1/0/0ipip-prefixrip-sum-outpermit16BASE

所有路由器OSPF进程号为R1、R4、R5之间通过Framerelay互连的接口以及他们的Loopback0接口，R1的S200（BackBone接口）都运行在OSPFAREA0内，不能修改接口默认的网络R1的GE001接口、R5的GE001接口和SW3上的VLAN135接口属于OSPFAREA135内，R5的GE000接口、R3的GE001和Loopback0接口属于OSPFAREA35内。R3的GE000接口、S300接口、R4的S101接口和SW1的VLAN113接口属于OSPFAREA34内，R4的GE000和SW2的VLAN224接口属于OSPFAREA224.erfaceSerial1/0/0erfaceSerial1/0/0work20.0.0.OSPFR1和R5之间的FrameRelay连接是主链路，正常情况下从AREA35到R1S200所在网段流量都会经过FrameRelay,但是这条链路不稳定，在FrameRelay链路中断的情况下，流量需要被切换到R1和R5之间的Ethernet备份链，Frame-Relay主链路恢复正常后流量自动被切回erfaceGigabitEthernet0/0/1erfaceGigabitEthernet0/0/1ospfcost1570流量优Vlan135VLAN113ospf1area0.0.0.vlink-peer10.1.5.ospf1area0.0.0.vlink-peer10.1.3.OSPF 0使用区域认证防护，认证方式使用MD5认证，口令类型为明文，认证为ospf1areaauthenticati -modemd51plainospfareaauthenticati -modemd51plainospfareaauthenticati -modemd51plainospfareaauthenticati -modemd51plain

OSPFAREA34不接受任何的OSPF其他AREA引入的外部路由。SW1只把VLAN110所在的IP网段引入到OSPF中。使用默认类型，TAG值vlanif110OSPFAREA34用stub区域,如果描述为“区域34不接收其他区域的外部路由”则使用route-policydirectpermitnode10if-matchinterfaceVlanif110applytag100ospfimport-routedirectroute -policydirectarea4ospf1area4OSPF和RIP在R5上RIP和OSPF在R1、SW2上分别进行RIP和OSPF的相互引入，RIP引入到OSPF的路由类型为实现在OSPF区域内能看到从R5引入来的所有路由 值为100，TAG值为100，且能学习10.Y.56.0/24、10.Y.6.6/32和171.10.X.0/24的汇总路由，请使用最少令，禁ripimportospf1ospf1asbr-summarytag100cost100importrip1route-policyr2oroute-policyr2opermitnode10if-matchip-prefixripapplycost100applytagiip-prefiriipermiiip-prefiriipermiiip-prefiriipermi16great-l-equalR1、SW2要通过走最优路径外部网络，配置要求有设计的扩展性R2优选经由SW2ospfimport-routerip1route-policyr2opreferenceaserout -policyextripimport-routeospf1route-policyroute-policyo2rdenynode10if-matchtag102route-policyo2rpermitnode20applytag101route-policyr2odenynode10if-matchtag201route-policyr2opermitnode20applytag202route-policyextpermitnode10if-matchtag100applyprefer interfaces1/0/1ripmetricoutospfimport-routerip1route-policyr2opreferenceaserout -policyextripimport-routeospf1route-policyroute-policyr2odenynode10if-matchtag101route-policyr2opermitnode20applytag102route-policyo2rdenynode10if-matchtag202route-policyo2rpermitnode20applytag201route-policyextpermitnode10if-matchtag100applyprefer R2与vl 135之间互访的流量往返路径一致，对于其他外部路由,R2优选SW2,有关于修改RI跳数的操作 都需要在R2上完成。则ipip-prefixvlan135permit10.1.135. intG0/0/ripmetricini -prefixvl 日R1和SW3属于AS10，R2和SW2属于AS20，R3、R4、R5属于AS345R6属于ASR1和SW3通过直连链路建立IBGP邻居，R2和SW2通过直连链路建立IBGP邻居在 345内的路由器建立稳定可靠的BGP邻居关系，R4和R5不建立BGP的邻居bgp10peer3as-numberbgppeeras-numberbgp345peeras-numberpeer -interfacebgp345peeras-numberpeer -interfacepeerrefl -clipeeras-numberpeer -interfacepeerrefl -clibgp345peeras-numberpeer -interfacebgp20peer2as-numberbgppeeras-number日EBGP全都使用直连建立邻居关系，BB1和BB2处于AS254内R1和R2建立EBGP关系，R5和R6建立EBGP关系 和R4建立EBGP关系R1和BB1建立EBGP，BB1地址为：157.68.1. ，BB1认为R1在AS100内R6和BB2建立EBGP，BB2地址为：157.68.2.bgp10peeras-number as-number fake-asbgp20peeras-numberbgppeeras-numberbgp345peer2as-numberbgp345peeras-numberbgp60peeras-number as-numberEBGP日 munity为1:254的路由汇聚成一条最优汇总路由，并继承明细路由的Community属性。bgp60peeradverti -communitipcommunity-filter1permit1:254route-policyoriginpermitnodeif-matchcommunity-filter1route-policyattpermitnode10applycommunityno-exportadditivebgp345aggregateas -setorigin-policyoriginattribute-policyattpeeradverti -communitbgp345peeradverti -communitBGP日R4上接口Loopback1，IP地址为10.Y.40.4/ ，通告到BGP中1需要汇总一条10.Y.0.0/16 的BP路由，明细路由不通告，2不能看到这条汇聚路由能路滤。bgp345networkbgp10aggregate -setdet -supprBGP日AS10、AS20、AS345、AS60优选从BB2来的路由，若BB2不可达，需要通过BB1R4的 1接口连接的网段需能被BB1、BB2正常到，只能在R1上配置bgp10peer54route -policyas-pathimportpeerroute -policyfrom_r2importroute-policyas-pathpermitnodeapplyas-path254254254254additiipip-prefixnet40index10permit24route-policyfrom_r2permitnode10if-matchip-prefixnetroute-policyfrom_r2permitnode20applyip-addressnext-hop日R1、R2、R3、R4、R5和SW2相邻设备使用PIMSM模式建立邻居关multicastrouting interfaceSerial1/0/0piminterfaceSerial1/0/1pimsminterfaceGigabitEthernet0/0/1pimsmmulticastrouting interfaceSerial1/0/1piminterfaceGigabitEthernet0/0/1pimsminterfaceLoopBack0pimsmmulticastrouting interfaceSerial1/0/1piminterfaceGigabitEthernet0/0/1pimsminterfaceLoopBack0pimsmmulticastrouting interfaceSerial1/0/0piminterfaceSerial1/0/1pimsminterfaceGigabitEthernet0/0/0pimsminterfaceLoopBack0pimsmmulticastrouting-enableinterfaceSerial1/0/0piminterfaceGigabitEthernet0/0/0pimsminterfaceGigabitEthernet0/0/1pimsmmulticastrouting-enableinterfacevlanif224piminterfacevlanif222pimsm日R2使用Loopback0地址作为-239.255.255. 组播地址段的C-RP地址R3使用Loopback0地址作为-239.255.255. 组播地址段的C-RP地址R4使用Loopback0地址作为CBSR的地要求所有组播路由器都能学习到C-RP的地aclnumberrule10permitsource55pimc-rpLoopBack0group-policyaclnumberrule10permitsource55pimc-rpLoopBack0group-policypimc-bsriprpf-route-static3210.1.145.日5的0/0/0接口静态加入组播组 ，5总是使用RP作为组播源。并且在2上能够看到这个地址的组播路由。有一组播源在 135网段，R1在这网段负责向RP进行组播源的interfaceGigabitEthernet0/0/pimhello-optiondr-priorityinterfaceGigabitEthernet0/0/igmpstatic-group0pimspt-switch-thresholdinfinit5.1日R3和R4创 -InstanceABC，RD为34:34，RT为34:R2的接口S1/0/0和R3的接口S1/0/0属于站点ABC，R2与R3172123X ，R4的接口GE0/0/1属于站点ABC，地址为/R2与R3的互连接口运行在OSPF23区域0中ip -instanceABCipv4-familyroute-distinguisher34:target34:34expor -extcommunittarget34:34import -extcommunityinterfaces1/0/0ipbinding -instanceABCipaddress24ip -instanceABCipv4-familyroute-distinguisher34:target34:34expor -extcommunittarget34:34import -extcommunityinterfaceg0/0/1ipbinding -instanceABCwork0.0.0.ospf23 -instanceABCareanetwork.2MP-日

R3与R4使用接口 0建 v4邻居实现站点ABC的互通互访，不能对现有IGP和BP路由进行修改，需运行MLS的路由器的L-ID为Lpack0 bgpipv4-famil peerenablipv4-family -instanceABCimport-routeospf23ospfimport-routebgp345ipv4-famil peerenablipv4-family -instanceABCimport-routedirectmplslsr-idmplsinterfaces1/0/0mplsstatic-lspegress34incoming -interfaceSerial1/0/0in -label32static-lspingress43destination32outgoing -interfaceSerial1/0/0nexthopout-label40mplslsr-idmplsinterfaces1/0/0mplsstatic-lsptransit43incoming -interfaceSerial1/0/0in -label40outgoing-interfaceSerial1/0/0nexthopout-label41static-lsptransit34incoming -interfaceSerial1/0/0in -label31outgoing-interfaceSerial1/0/0nexthopout-label32mplslsr-idmplsinterfaces1/0/0mplsinterfaceg0/0/0mplsstatic-lsptransit43incoming -interfaceSerial1/0/0in -label41outgoing-interfaceGigabitEthernet0/0/0nexthopout-labelstatic-lsptransit34incoming -interfaceGigabitEthernet0/0/0in label30outgoing-interfaceSerial1/0/0nexthopout-labelmplslsr-idmplsinterfaceg0/0/1mplsstatic-lspingress34destination32outgoing -interfaceGigabitEthernet0/0/1nexthopout-label30static-lspegress43incoming -interfaceGigabitEthernet0/0/1in label42QOS流分日路由器 GE0/0/0接口信任接收到的报文的优先级，将接收到的DSCP值为27的报文DSCP值映射并修改为在SW2GE0/0/10的入接口方向上把目的端为6000的UDP报文DSCP值修改为10，源I地址为10.Y.224.0/ 的TCP报文DSCP值修改为interfaceg0/0/trustdscpoverriqosmap-tabledscp-dscpinput27output7aclnumberrule10permitudpdestination -porteq6000aclnumber3001rule10permittcpsource55trafficclassifier10operatorandif-matchacltrafficclassifier20operatorandif-matchacl3001trafficbehavior10remarkdscp10trafficbehavior20remarkdscp20trafficpolicymarclassifier10behavior10classifier20behavior20intg0/0/traffic-policymarki aclnumberrule10permitudpdestination -porteq6000aclnumber3001rule10permittcpsource55intg0/0/10traffic-remarkinboundacl3000dscp10traffic-remarkinboundacl3001dscp日WRD20%30%95%drop-profilewredwreddscpdscpaf11low-limit20high -limit95discard-percentage30t