RIP实验笔记

[align=center]RIP[/b]实验学习笔记[/b][/b][/align]
[align=center]2009.6.5―6.10[/align]
一．实验目的[/b][/b]

二．拓扑和要求[/b][/b]
三．实验过程[/b][/b]
3.1 [/b]连通性配置[/b][/b]
遇到的问题：
3.2 [/b]基本[/b]rip[/b]配置[/b][/b]
R1(config)#router rip
R1(config-router)#?[/b]
Router configuration commands:
address-family Enter Address Family command mode
auto-summary Enable automatic network number summarization
default Set a command to its defaults
default-information Control distribution of default information
default-metric Set metric of redistributed routes
distance Define an administrative distance
distribute-list Filter networks in routing updates
exit Exit from routing protocol configuration mode
flash-update-threshold Specify flash update threshold in second
input-queue Specify input queue depth
maximum-paths Forward packets over multiple paths
neighbor Specify a neighbor router
network Enable routing on an IP network
no Negate a command or set its defaults
offset-list Add or subtract offset from IGRP or RIP metrics
output-delay Interpacket delay for RIP updates
passive-interface Suppress routing updates on an interface
redistribute Redistribute information from another routing protocol
timers Adjust routing timers
traffic-share How to compute traffic share over alternate paths
validate-update-source Perform sanity checks against source address of routing updates
version Set routing protocol version
network[/b]命令注解[/b][/b]
[align=left]The RIP network command only allows for a classful network as a parameter, which in turn enables RIP on all of that router’s interfaces that are part of that network. Enabling RIP on an interface makes the router begin sending RIP updates[/b], listening for RIP updates (UDP port 520), and advertising that interface’s connected subnet[/b].Because the RIP network command has no way to simply match one interface at a time, a RIP configuration may enable these three functions on an interface ，but some or all of these functions are not required. The three RIP functions can be ndividually disabled on an interface with some effort[/b]：[/b][/b][/align]

[align=left]RIP Function[/align]	[align=left]How to Disable[/align]
[align=left]Sending[/b] RIP updates [/align]	[align=left]Make the interface passive: configure router rip, followed by passiveinterface type number[/align]
[align=left]Listening f[/b]or RIP updates[/align]	[align=left]Filter all incoming routes using a distribute list[/align]
[align=left]Advertising [/b]the connected subnet[/align]	[align=left]Filter outbound advertisements on other interfaces using distribute lists, filtering an interface’s connected subnet;[/align] [align=left]using neighbor subcommand to advertise rip updates to that neighbor;[/align]
[align=left][/align]	[align=left][/align]

[align=left]问题1.Ping 172.31.25.1(R5的物理串口地址)问题[/align]
[align=left]（1）R6能ping通，R6路由表为：[/align]
[align=left]R6>sh ip route[/align]
[align=left] 172.31.0.0/16 is variably subnetted, 2 subnets, 2 masks[/align]
[align=left]C 172.31.16.0/24 is directly connected, Serial0/0.601[/align]
[align=left]R 172.31.0.0/16 [120/1] via 10.1.26.2, 00:00:14, Serial0/0.602[/align]
[align=left] 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks[/align]
[align=left]R 10.0.0.0/8 [120/3] via 10.1.26.2, 00:00:14, Serial0/0.602[/align]
[align=left]C 10.1.26.0/24 is directly connected, Serial0/0.602[/align]
[align=left]C 10.1.106.0/24 is directly connected, Loopback1[/align]
[align=left]（2）R5自己ping不通25.1，能ping通172.31.25.2[/align]
[align=left]（3）R4能ping通R5[/align]
[align=left]（4）R3ping不通172.31.25.1，也ping不通172.31.25.2；（R3ping自己反应很慢，ping其他都ping不通，R1ping R3的103.3正常，但ping不通R3的13.2），[/align]
[align=left]R3#ping 172.31.23.1[/align]
[align=left]Sending 5, 100-byte ICMP Echos to 172.31.23.1, timeout is 2 seconds:[/align]
[align=left]!!!!![/align]
[align=left]Success rate is 100 percent (5/5), round-trip min/avg/max = 1612/1685/1752 ms[/align]
[align=left]R3#ping 172.31.23.2[/align]
[align=left]Type escape sequence to abort.[/align]
[align=left]Sending 5, 100-byte ICMP Echos to 172.31.23.2, timeout is 2 seconds:[/align]
[align=left].....[/align]
[align=left]Success rate is 0 percent (0/5)[/align]
[align=left]R3路由表为：[/align]
[align=left] 172.31.0.0/16 is variably subnetted, 18 subnets, 2 masks[/align]
[align=left]R 172.31.211.0/24 [120/6] via 172.31.23.2, 00:00:11, Serial0/0.302[/align]
[align=left]R 172.31.223.0/24 [120/2] via 172.31.23.2, 00:00:11, Serial0/0.302[/align]
[align=left] [120/2] via 172.31.13.1, 00:00:17, Serial0/0.301[/align]
[align=left]R 172.31.16.0/24 [120/1] via 172.31.13.1, 00:00:17, Serial0/0.301[/align]
[align=left]R 172.31.23.0/30 [120/2] via 172.31.13.1, 00:00:17, Serial0/0.301[/align]
[align=left]C 172.31.23.0/24 is directly connected, Serial0/0.302[/align]
[align=left]R 172.31.25.0/30 [120/1] via 172.31.23.2, 00:00:13, Serial0/0.302[/align]
[align=left]R 172.31.24.0/30 [120/1] via 172.31.23.2, 00:00:13, Serial0/0.302[/align]
[align=left]？问题2：从R2上PING172.31.13.1（R1接口）和172.31.13.2（R3接口），[/align]
[align=left]如何解决？？？[/align]
[align=left]R2#sh ip route [/align]
[align=left]R 172.31.13.0/24 [120/1] via 172.31.23.1, 00:00:17, Serial1/0.203[/align]
[align=left]R 172.31.13.0/30 [120/1] via 172.31.11.1, 00:00:09, FastEthernet0/0[/align]
[align=left]R2#sh ip route 172.31.13.0[/align]
[align=left]Routing entry for 172.31.13.0/30[/align]
[align=left] Known via "rip", distance 120, metric 1[/align]
[align=left] Redistributing via rip[/align]
[align=left] Last update from 172.31.11.1 on FastEthernet0/0, 00:00:27 ago[/align]
[align=left] Routing Descriptor Blocks:[/align]
[align=left] * 172.31.11.1, from 172.31.11.1, 00:00:27 ago, via FastEthernet0/0[/align]
[align=left] Route metric is 1, traffic share count is 1[/align]
[align=left]R2#sh ip route 172.31.13.0 255.255.255.0[/align]
[align=left]Routing entry for 172.31.13.0/24[/align]
[align=left] Known via "rip", distance 120, metric 1[/align]
[align=left] Redistributing via rip[/align]
[align=left] Last update from 172.31.23.1 on Serial1/0.203, 00:00:19 ago[/align]
[align=left] Routing Descriptor Blocks:[/align]
[align=left] * 172.31.23.1, from 172.31.23.1, 00:00:19 ago, via Serial1/0.203[/align]
[align=left] Route metric is 1, traffic share count is 1[/align]
[align=left]3.3 认证配置[/align]
[align=left]配置R1,R2在LAN上MD5认证[/align]
[align=left]R1: 定义密钥链 [/align]
[align=left]R2：定义密钥链[/align]
[align=left]启用RIP认证：ip rip authentication mode md5àip rip authentication key-chain lankey;[/align]
[align=left]配置R1与R4明文认证[/align]
[align=left]R1：[/align]
[align=left]R4(config)#key chain withR2[/align]
[align=left]R4(config-keychain)#KEY 1[/align]
[align=left]R4(config-keychain-key)#key-string plaintext[/align]
[align=left]R4(config-keychain-key)#exit[/align]
[align=left]R4(config-keychain)#exit[/align]
[align=left]R4(config)#int s0/0.401[/align]
[align=left]R4(config-subif)#ip rip authentication key-chain withR2[/align]
[align=left]3.4 水平分割和下一跳[/align]
[align=left]水平分割缺省在每个接口上是ON的，除了配置了IP地址的FR封装的物理串口上（本例中的R5串口S0/0）[/align]
[align=left]R5#sh ip int s0/0[/align]
[align=left]Serial0/0 is up, line protocol is up[/align]
[align=left] Split[/b] horizon is disabled[/b][/align]
[align=left] ICMP redirects are always sent[/align]
[align=left] [/align]
[align=left]下一跳（next-hop）属性允许路由器对通告的路由下一跳指向其他路由器，而不是自己；本例中S2运行OSPF，R2将S2连接的网络通过重发布通告给其他路由器，由于R2/S2/R1连接在同一个LAN上，因此R2在向R1通告S2的路由的时候将下一条指向S2而不是R2自己[/align]
配置：
S2:router ospf 10ànetwork 172.31.0.0 .0.0.255.255 area 0
R2:router ospf 20ànetwork 172.31.0.0 0.0.255.255 area 0 ,network 10.1.26.0 0.0.0.255 area 0
Router rip-àredistribute ospf 20 metric 2
R1[/b]路由如下：[/b][/b]
R1#show ip route 172.31.221.202
Routing entry for 172.31.221.202/32
Known via "rip", distance 120, metric 2
Redistributing via rip
Last update from 172.31.11.202 on FastEthernet0/0, 00:00:02 ago
Routing Descriptor Blocks:
* 172.31.11.202, from 172.31.11.2, [/b]00:00:02 ago, via FastEthernet0/0
Route metric is 2, traffic share count is 1
R1#sh ip route
Gateway of last resort is not set
172.31.0.0/16 is variably subnetted, 14 subnets, 3 masks
C 172.31.16.0/24 is directly connected, Serial1/0.106
R 172.31.221.202/32 [120/2] via 172.31.11.202,[/b] 00:00:24, FastEthernet0/0
R 172.31.222.202/32 [120/2] via 172.31.11.202, 00:00:24, FastEthernet0/0
[/b]3.5 [/b]路由控制[/b][/b]
Offset lists---[/b]改变[/b]metric[/b]值，对于匹配[/b]ACL[/b]的路由，接口通告的和接口接收到的；[/b][/b]
R1[/b]上[/b]offset list[/b]配置[/b][/b]
R1(config)#router rip[/b]
R1(config-router)#offset-list 10 out 8 s1/0.103
R1(config-router)#offset-list 10 out 8 s1/0.104
R1(config-router)#offset-list 10 out 8 s1/0.106
R1(config-router)#exit
R1(config)#access-list 10 permit 172.31.208.0 0.0.7.255[/b]（匹配的地址范围？？？）[/b]
R2[/b]上[/b]offset list[/b]配置：[/b][/b]
R2(config)#router rip
R2(config-router)#offset-list 12 in 4 fa0/0
R2(config-router)#exit
R2(config)#access-list 12 permit 172.31.208.0 0.0.7.255
R2(config)#
使用[/b]Distribute list[/b]过滤路由[/b][/b]
匹配ACL和prefix list中deny的子网将被过滤
distribute-list {access-list-number | name} {in | out} [interface-type interface-number]
distribute-list {prefix list-name} {in | out } [interface-type interface-number]
四．实验总结[/b][/b]
RIP路由协议复杂的是，在路由失效拓扑收敛时为防止环路所使用的方法。
五．[/b]RIP[/b]基础知识[/b]复习[/b][/b]