项目6、利用RIP实现网络互联.项目6、利用rip实现网络互联

项目六、利用RIP实现网络互联目录任务一、动态路由简介任务二、RIP概述任务三、RIP配置任务一、RIP简介任务一动态路由简介任务一动态路由简介1.动态路由协议的分类有类路由协议路由信息更新过程中不发送子网掩码信息不支持不连续网络不支持VLSM无类路由协议路由信息更新中包括网络地址和子网掩码支持不连续网络支持VLSM连续网络Discontiguousnetwork不连续网络Contiguous

network任务一动态路由简介1.动态路由协议的分类有类路由协议172.16.3.0/24172.16.4.0/24172.16.2.0/24172.16.1.0/24172.16.6.0/24172.16.5.0/24任务一动态路由简介2.收敛当所有路由器都获取到完整而准确的网络信息时，网络即完成收敛。收敛速度传播拓扑结构变化的速度计算最佳路径路由的速度网络在完成收敛后才可以正常运行任务二、RIP概述任务二RIP概述1.收敛当所有路由器都获取到完整而准确的网络信息时，网络即完成收敛。RIP采用距离向量算法简单易维护适合小型网络RIPv1&RIPv2&RIPng三个版本SiteBSiteASiteCRIPRTBRTARTCRIPRIP任务二RIP概述2.RIP协议

路由表路由表RTBRTARTC

路由表路由器运行RIP后，会首先发送路由更新请求，收到请求的路由器会发送自己的RIP路由进行响应。网络稳定后，路由器会周期性发送路由更新信息。任务二RIP概述3.RIP-度量缺省情况下，直连网络的路由跳数为0。当路由器发送路由更新时，会把度量值加1。10.0.0.0Metric=110.0.0.0Metric=1

10.0.0.0Metric=210.0.0.0/8

RTBRTARIP度量基于跳数0-15跳16跳为不可达任务二RIP概述4.RIP工作原理RIP度量值基于跳数每30s发送路由更新支持等价负载均衡UDP端口号为520路由器运行RIP后，会首先发送路由更新请求，收到请求的路由器会发送自己的RIP路由进行响应。网络稳定后，路由器会周期性发送路由更新信息。任务二RIP概述5.RIP计时器RIP计时器更新计时器UpdateTimer老化计时器AgeTimer垃圾收集计时器Garbage-collectTimer[RTD]displayripPublicVPN-instanceRIPprocess:1RIPversion:2Preference:100Checkzero:EnabledDefault-cost:0Summary:EnabledHost-route:EnabledMaximumnumberofbalancedpaths:8Updatetime:30secAgetime:180secGarbage-collecttime:120secGracefulrestart:DisabledBFD:DisabledSilent-interfaces:GigabitEthernet0/0/1任务二RIP概述6.RIPv1报文格式任务二RIP概述6.RIPv1报文格式UnusedIPAddressSubnetMaskMetricCommandAddressFamilyIdentifierVersionRouteTagNextHopUDP端口：520目的地址：224.0.0.9G0/0/0G0/0/0RTBRTA任务二RIP概述7.RIPv2–认证RIPv2支持对协议报文进行认证，认证方式有明文认证和MD5认证两种。Authentication0XFFFFAuthenticationTypePassword:huaweiUnusedCommandVersionG0/0/0G0/0/0RTBRTAPassword:huawei任务二RIP概述8.RIPv1vs.RIPv2RIPv1有类路由协议不支持VLSM/CIDR广播更新不支持认证RIPv2无类路由协议支持VLSM/CIDR组播更新支持认证任务二RIP概述9.路由环路数据包在一系列路由器之间不断传输却始终无法到达其预期目的网络的一种现象。当网络发生故障时，RIP网络有可能产生路由环路。10.0.0.0/810.0.0.0/8Metric=2192.168.1.2/24192.168.1.1/24Destination/MaskNexthopmetric10.0.0.0/8192.168.1.11192.168.1.0/8192.168.1.20Destination/MaskNexthopmetric192.168.1.0/8192.168.1.1010.0.0.0/810.0.0.10Destination/MaskNexthopmetric192.168.1.0/8192.168.1.10Destination/MaskNexthopmetric192.168.1.0/8192.168.1.1010.0.0.0/8192.168.1.2210.0.0.0/8Metric=3Destination/MaskNexthopmetric10.0.0.0/8192.168.1.13192.168.1.0/8192.168.1.20收敛慢配置错误16任务二RIP概述10.环路避免-水平分割路由器从某个接口学到的路由，不会从该接口再发回给邻居路由器。10.0.0.0/810.0.0.0/8Metric=2RTBRTA192.168.1.2/24192.168.1.1/2410.0.0.0/8Metric=1Destination/MaskNexthopmetric192.168.1.0/8192.168.1.1010.0.0.0/810.0.0.10任务二RIP概述11.环路避免-毒性反转毒性反转是指路由器从某个接口学到路由后，将该路由的跳数设置为16，并从原接收接口发回给邻居路由器。10.0.0.0/810.0.0.0/8Metric=16RTBRTADestination/MaskNexthopmetric10.0.0.0/810.0.0.10192.168.1.2/24192.168.1.1/2410.0.0.0/8Metric=1Destination/MaskNexthopmetric10.0.0.0/8192.168.1.11任务二RIP概述12.环路避免-路由毒化&触发更新触发更新是指当路由信息发生变化时，立即向邻居设备发送触发更新报文。10.0.0.0/810.0.0.0/8Metric=16RTCRTB192.168.1.2/24192.168.1.1/2410.0.0.0/8Metric=16RTA192.168.0.2/24192.168.0.1/24Destination/MaskNexthopmetric192.168.1.0/8192.168.1.1010.0.0.0/810.0.0.10Destination/MaskNexthopmetric192.168.1.0/8192.168.1.10路由不可达接口状态改变新增路由触发更新任务三、RIP配置任务三RIP配置RIP的基本配置rip

[

process-id

]network

network-addressversion

{

1

|

2

}RTARTBRTCRTD10.0.0.0/8[RTA]rip[RTA-rip-1]version2[RTA-rip-1]network10.0.0.0<R1>displayiprouting-tableprotocolripRouteFlags:R-relay,D-downloadtofib------------------------------------------------------------------------------Publicroutingtable:RIPDestinations:2Routes:3RIProutingtablestatus:<Active>Destinations:2Routes:3Destination/MaskProtoPreCostFlagsNextHopInterface172.16.123.8/30RIP1001D172.16.123.5Serial1/0/1RIP1001D172.16.123.2Serial1/0/0172.18.2.0/28RIP1001D172.16.123.2Serial1/0/0RIProutingtablestatus:<Inactive>Destinations:0Routes:0<R1>displayripPublicVPN-instanceRIPprocess:1RIPversion:2Preference:100Checkzero:EnabledDefault-cost:0Summary:EnabledHost-route:EnabledMaximumnumberofbalancedpaths:8Updatetime:30secAgetime:180secGarbage-collecttime:120secGracefulrestart:DisabledBFD:DisabledSilent-interfaces:NoneDefault-route:DisabledVerify-source:EnabledNetworks:172.16.0.0172.18.0.010.0.0.0Configuredpeers:None----More----<R2>displayrip1database---------------------------------------------------AdvertisementState:[A]-Advertised[I]-NotAdvertised/Withdraw---------------------------------------------------10.0.0.0/8,cost1,ClassfulSumm10.0.0.0/8,cost4,[A],nexthop172.16.123.110.1.1.0/30,cost1,[A],nexthop172.16.123.1172.16.0.0/16,cost0,ClassfulSumm172.16.123.0/30,cost0,[A],Rip-interface172.16.123.4/30,cost1,[A],nexthop172.16.123.10172.16.123.4/30,cost1,[A],nexthop172.16.123.1172.16.123.8/30,cost0,[A],Rip-interface172.18.0.0/16,cost0,ClassfulSumm172.18.1.0/28,cost1,[A],nexthop172.16.123.1172.18.2.0/28,cost0,[A],Rip-interface<R2>displayrip1neighbor

---------------------------------------------------------------------IPAddressInterfaceTypeLast-Heard-Time---------------------------------------------------------------------172.16.123.1Serial1/0/0RIP0:0:1NumberofRIProutes:4172.16.123.10Serial1/0/1RIP0:0:12NumberofRIProutes:1<R2>displayrip1routeRouteFlags:R-RIPA-Aging,G-Garbage-collect----------------------------------------------------------------------------Peer172.16.123.1onSerial1/0/0Destination/MaskNexthopCostTagFlagsSec172.18.1.0/28172.16.123.110RA30172.16.123.4/30172.16.123.110RA3010.0.0.0/8172.16.123.140RA3010.1.1.0/30172.16.123.110RA30Peer172.16.123.10onSerial1/0/1Destination/MaskNexthopCostTagFlagsSec172.16.123.4/30172.16.123.1010RA29<R2>displayrip1interfaceg0/0/0verboseGigabitEthernet0/0/0(10.0.13.2)State:UPMTU:500Metricin:0Metricout:1Input:EnabledOutput:EnabledProtocol:RIPv2MulticastSendversion:RIPv2MulticastPacketsReceiveversion:RIPv2MulticastandBroadcastPacketsPoison-reverse:DisabledSplit-Horizon:EnabledAuthenticationtype:NoneReplayProtection:Disabled任务三RIP配置1.RIP基本配置的验证RTARTCRTD10.0.0.0/810.0.0.0/8Metric=1RTBG0/0/0

192.168.1.0/24[RTC]interfaceGigabitEthernet0/0/0[RTC-GigabitEthernet0/0/0]ripmetricin2接口附加度量值MetricinMetricoutripmetricin

valuerip

metricout

value

RTARTCRTD10.0.0.0/8RTBG0/0/0Metric=1192.168.1.0/24[RTA]interfaceGigabitEthernet0/0/0[RTA-GigabitEthernet0/0/0]ripmetricout2任务三RIP配置2.配置RIP的路由属性——接口的附加度量值任务三RIP配置3.配置RIP的路由属性——优先级&最大等价路由条数preference

{

preference

|

route-policy

route-policy-name

}

*undopreferencemaximumload-balancing

numberundomaximumload-balancingRTARTCRTD10.0.0.0/8RTBG0/0/0Metric=1192.168.1.0/24[RTA]rip[RTA-rip-1]preference120[RTA]rip[RTC-rip-1]maximumload-balancing4任务三RIP配置4.控制路由信息的发布与接收rip

outputundo

rip

outputripinputundoripinput配置RTA的G0/0/0接口禁止发送RIP报文。RTARTCRTD10.0.0.0/8RTBG0/0/010.0.0.0/8Metric=1

[RTA]interfaceGigabitEthernet0/0/0[RTA-GigabitEthernet0/0/0]undoripoutput任务三RIP配置4.控制路由信息的发布与接收接口为抑制状态，不发送RIP报文只接收RIP报文。此命令的优先级大于ripinput和ripoutput。silent-interface

all命令比抑制某个接口的优先级高[RTD]rip[RTD-rip-1]silent-interfaceGigabitEthernet0/0/1RTARTCRTD10.0.0.0/8RTB10.0.0.0/8Metric=1

G0/0/1192.168.1.1G0/0/0192.168.1.2silent-interface

{

all

|

interface-type

interface-number

}undosilent-interface

{

all

|

interface-type

interface-number

}抑制接口任务三RIP配置4.控制路由信息的发布与接收[RTD]displayripPublicVPN-instanceRIPprocess:1RIPversion:2Preference:100Checkzero:EnabledDefault-cost:0Summary:EnabledHost-route:EnabledMaximumnumberofbalancedpaths:8Updatetime:30secAgetime:180secGarbage-collecttime:120secGracefulrestart:DisabledBFD:DisabledSilent-interfaces:GigabitEthernet0/0/1GigabitEthernet0/0/2任务三RIP配置4.控制路由信息的发布与接收配置RIP发布缺省路由[R2]iproute-static0.0.0.00.0.0.0GigabitEthernet0/0/2[R2]rip[R2-rip-1]default-routeoriginatecost2如果路由器本身生成缺省路由，它将不接收邻居发来的缺省路由default-routeoriginate

[

cost

cost

|{{

matchdefault

|

route-policy

route-policy-name

}[

avoid-learning

]}]

*undodefault-routeoriginate<R3>displayiprouting-tableprotocolripRouteFlags:R-relay,D-downloadtofib------------------------------------------------------------------------------Publicroutingtable:RIPDestinations:5Routes:7RIProutingtablestatus:<Active>Destinations:5Routes:7Destination/MaskProtoPreCostFlagsNextHopInterface0.0.0.0/0RIP1003D10.0.12.2GigabitEthernet0/0/010.0.2.0/24RIP1002D10.0.13.2GigabitEthernet0/0/1RIP1002D10.0.12.2GigabitEthernet0/0/010.0.24.0/30RIP1001D10.0.12.2GigabitEthernet0/0/010.0.34.0/30RIP1001D10.0.13.2GigabitEthernet0/0/1172.16.2.0/24RIP1002D10.0.13.2GigabitEthernet0/0/1RIP1002D10.0.12.2GigabitEthernet0/0/0RIProutingtablestatus:<Inactive>Destinations:0Routes:0任务三RIP配置4.控制路由信息的发布与接收配置RIP发布缺省路由import-route

{{

static

|

direct

|

unr

}|{{

rip

|

ospf

|

isis

}[

process-id

]}}[

cost

cost

|

route-policy

route-policy-name

]

*undoimport-route

{{

static

|

direct

|

unr

}|{{

rip

|

ospf

|

isis

}[

process-id

]}}[R2]iproute-static193.169.1.024GigabitEthernet

0/0/2[R2]rip[R2-rip-1]import-routestaticcost3<R1>displayiprouting-tableprotocolripRouteFlags:R-relay,D-downloadtofib------------------------------------------------------------------------------Publicroutingtable:RIPDestinations:5Routes:7RIProutingtablestatus:<Active>Destinations:5Routes:7Destination/MaskProtoPreCostFlagsNextHopInterface10.0.2.0/24RIP1002D10.0.13.2GigabitEthernet0/0/1RIP1002D10.0.12.2GigabitEthernet0/0/010.0.24.0/30RIP1001D10.0.12.2GigabitEthernet0/0/010.0.34.0/30RIP1001D10.0.13.2GigabitEthernet0/0/1172.16.2.0/24RIP1002D10.0.13.2GigabitEthernet0/0/1RIP1002D10.0.12.2GigabitEthernet0/0/0193.169.1.0/24RIP1004D10.0.12.2GigabitEthernet0/0/0RIProutingtablestatus:<Inactive>Destinations:0Routes:0任务三RIP配置5.配置RIPv2的特性——自动路由聚合summary

[

always

]undosummary[R2]rip[R2-rip-1]summaryalways缺省情况下，RIP-2已使能了有类聚合功能当配置了水平分割或毒性反转后，有类路由聚合失效。无论水平分割或毒性反转配置与否，运行summary

always命令启用有类聚合任务三RIP配置6.配置RIPv2的特性——手工路由聚合rip

summary-address

ip-address

mask

[

avoid-feedback

]undo

rip

summary-address

ip-address

mask[R2]interfaceserial1/0/0[R2-Serial1/0/0]ripsummary-address10.0.0.0255.255.128.0[R3]interfaceserial1/0/1[R3-Serial1/0/1]ripsummary-address10.0.128.0255.255.128.0接口上的路由聚合优先级高于RIP进程中的路由聚合优先级。即ripsummary-address

命令的优先级高于summary命令的优先级任务三RIP配置7.配置RIPv2的特性——认证RIPv2认证简单认证MD5密文认证ripauthentication-mode

simple

{[

plain

]

plain-text

|

cipher

password-key

}ripauthentication-mode

md5usual

{

plain

plain-text

|[

cipher

]

password-key

}ripauthentication-mode

md5nonstandard

{

keychain

keychain-name

|{{

plain

plain-text

|[

cipher

]

p