7750SR中級(jí)培訓(xùn)-路由基礎(chǔ)課件

TER00002Issue17750SR中級(jí)培訓(xùn)

7750SR從入門到提高系列教材

BlankPageCourseContent課程介紹Module1─路由基礎(chǔ)Module2─鏈路狀態(tài)協(xié)議Module3─OSPF協(xié)議及配置Module4─ISIS協(xié)議及配置Module5─BGP協(xié)議及配置Module6─MPLS協(xié)議及配置CourseTimelineDay1Module0─課程介紹Module1─路由基礎(chǔ)Module2─鏈路狀態(tài)協(xié)議Day2Module2─OSPF協(xié)議及配置Lab1Day3Module3─ISIS協(xié)議及配置Lab2Day4Module4─BGP協(xié)議及配置Lab3Day5Module5─MPLS協(xié)議及配置Lab4ModuleObjectives成功完成本模塊后，學(xué)生應(yīng)理解:1、了解鏈路狀態(tài)協(xié)議2、理解OSPF協(xié)議基礎(chǔ)，掌握7750SR的OSPF配置3、理解ISIS協(xié)議基礎(chǔ)，掌握7750SR的ISIS配置4、理解BGP協(xié)議基礎(chǔ)，掌握7750SR的BGP配置5、理解MPLS協(xié)議基礎(chǔ)，掌握7750SR的MPLS配置Course學(xué)期準(zhǔn)備為了能夠更好的理解課程內(nèi)容，達(dá)到教學(xué)目的，在學(xué)校本課程之前：完成了《7750SR初級(jí)培訓(xùn)》。

之前做過7750SR的調(diào)測(cè)，對(duì)7750SR設(shè)備命令行熟悉。有一定路由基礎(chǔ)。BlankPage7750SR業(yè)務(wù)路由器從入門到提高7750SR中級(jí)培訓(xùn)Module1–路由基礎(chǔ)ModuleObjectives成功完成本模塊后，學(xué)生應(yīng)理解:1、熟悉OSI模型2、路由協(xié)議的分類3、路由層面和控制層面4、IP地址Module1–路由基礎(chǔ)section1–OSIReview

1.1OSIReview

EncapsulationApplicationPresentationSessionTransPortNetworkDataLinkPhysicalOSILayersBitsFramesPacketsSegments1.1OSIReview

AddressesApplicationPresentationSessionTransPortNetworkDataLinkPhysicalOSILayersMAC/WANIPPort1.1OSIReview

DevicesApplicationPresentationSessionTransPortNetworkDataLinkPhysicalOSILayersCable、HubSwitchesRouters1.1OSIReview

TCP/IPvs.OSIApplicationPresentationSessionTransPortNetworkDataLinkPhysicalOSILayersApplicationServicesTransportInternetProtocolNetworkInterfacesTCP/IPLayers1.1OSIReview

數(shù)據(jù)封裝ApplicationServicesTransportInternetProtocolNetworkInterfacesTCP/IPLayersMailHeaderMailBodyDataEncapsulation1.1OSIReview

數(shù)據(jù)封裝ApplicationServicesTransportInternetProtocolNetworkInterfacesTCP/IPLayersMailHeaderMailBodySource:1223Destination:25MailApplicationDataEncapsulation1.1OSIReview

數(shù)據(jù)封裝ApplicationServicesTransportInternetProtocolNetworkInterfacesTCP/IPLayersMailHeaderMailBodySource:1223Destination:25MailApplicationSource:10.10.10.1Dest.:192.168.1.1TransportDataEncapsulation1.1OSIReview

數(shù)據(jù)封裝ApplicationServicesTransportInternetProtocolNetworkInterfacesTCP/IPLayersMailHeaderMailBodySource:1223Destination:25MailApplicationSource:10.10.10.1Dest.:192.168.1.1TransportSA:00:20:13:13:bc:5FDA:00:D0:F5:A4:00:31InternetDataEncapsulationBlankPageModule1–路由基礎(chǔ)section2–路由轉(zhuǎn)發(fā)1.2路由轉(zhuǎn)發(fā)

數(shù)據(jù)Forwarding1.2路由轉(zhuǎn)發(fā)

PacketForwarding當(dāng)一個(gè)路由器接收到一個(gè)Packet：

1、提取Packet頭的目的IP地址，與FIB進(jìn)行比較

2、查看FIB，進(jìn)行最長(zhǎng)匹配（最優(yōu)）如果沒有匹配，這個(gè)Packet將被丟棄假設(shè)這個(gè)Packet要被轉(zhuǎn)發(fā)，必須知道他的下一條（Next-hop）和出接口如果FIB有匹配，這個(gè)Packet將發(fā)送到下一條

1、下一條決定了Packet轉(zhuǎn)發(fā)的路徑

2、出接口決定了這個(gè)Packet的封裝1.2路由轉(zhuǎn)發(fā)

控制層面和數(shù)據(jù)層面路由都有分離個(gè)功能組件：

1、ControlPlane

2、DataPlane7750SR是物理分離的兩個(gè)模塊：

1、CPM處理控制層面功能

2、IOM處理數(shù)據(jù)層面功能ControlPlane

1、路由器的操作和維護(hù) 2、與其他路由器進(jìn)行動(dòng)態(tài)路由協(xié)議的通訊 3、構(gòu)建FIB表然后分發(fā)到數(shù)據(jù)層面DataPlane 在物理端口接收和轉(zhuǎn)發(fā)Packets1.2路由轉(zhuǎn)發(fā)

路由協(xié)議路由器工作在網(wǎng)絡(luò)層，通常的路由協(xié)議包括：

1、RIPv1/v2

2、OSPF 3、ISIS 4、BGP1.2路由轉(zhuǎn)發(fā)

路由協(xié)議7750SR缺省路由優(yōu)先級(jí)：RouteTypeProferenceConfigurableDirect0NStatic5YOSPFinternal10YIS-ISlevel1internal15YIS-ISlevel2internal18YRIP100YOSPFexternal150YIS-ISlevel1external160YIS-ISlevel2external165YBGP170YBlankPageModule1–路由基礎(chǔ)section3–IP地址1.3路由基礎(chǔ)

IP地址IP地址的分類HOSTHOSTHOSTNetwork0NNNNNNN8ClassA162432(0-126)HOSTNetworkHOSTNetwork10NNNNNN8ClassB162432(128-191)HOSTNetworkNetworkNetwork110NNNNN8ClassC162432(192-223)MulticastGMulticastGMulticastGNetwork1110MMMM8ClassD162432(224-239)1.3

路由基礎(chǔ)

特殊IP地址特殊IP地址 主機(jī)全為0的地址-網(wǎng)絡(luò)地址

192.168.1.0/24

192.168.1.4/30 主機(jī)全為1的地址-廣播地址

192.168.1.255/24 192.168.1.7/30 127段，系統(tǒng)保留 127.0.0.1硬件回送地址

1.3

路由基礎(chǔ)

私有地址私網(wǎng)地址

10.0.0.0255.0.0.0

(10.0.0.0-10.255.255.255)

172.16.0.0255.240.0.0

(172.16.0.0-172.31.255.255) 192.168.0.0255.255.0.0

(192.168.0.0-192.168.255.255)

1.3路由基礎(chǔ)

VLSM可變長(zhǎng)子網(wǎng)掩碼把一個(gè)標(biāo)準(zhǔn)網(wǎng)絡(luò)劃分為不同的子網(wǎng)路由協(xié)議在更新時(shí)必須通告子網(wǎng)掩碼更有效的利用IP地址能夠支持VSLM的路由協(xié)議有：

RIPv2 OSPF IS-IS BGP

1.3路由基礎(chǔ)

CIDR無類域間路由把多個(gè)網(wǎng)絡(luò)匯聚為一個(gè)大的網(wǎng)絡(luò)VLSM掩碼右移，CIDR掩碼左移減少路由條目

VLSMCIDRBlankPage7750SR業(yè)務(wù)路由器從入門到提高7750SR中級(jí)培訓(xùn)Module2–鏈路狀態(tài)協(xié)議ModuleObjectives成功完成本模塊后，學(xué)生應(yīng)理解:1、了解鏈路狀態(tài)協(xié)議的特點(diǎn)2、了解鏈路狀態(tài)協(xié)議的實(shí)現(xiàn)Module2–鏈路狀態(tài)協(xié)議section1–協(xié)議特點(diǎn)2.1協(xié)議特點(diǎn)

鏈路狀態(tài)概述鏈路狀態(tài)協(xié)議能夠獲取一個(gè)全網(wǎng)的拓?fù)滏溌窢顟B(tài)協(xié)議通過能夠計(jì)算得到到其他路由器的最短路徑事件觸發(fā)更新，能夠快速收斂2.1協(xié)議特點(diǎn)

特點(diǎn)鏈路狀態(tài)驅(qū)動(dòng)，周期性hellosClassless協(xié)議，支持VLSM、CIDR和手工路由匯總支持認(rèn)證維護(hù)多個(gè)Databases通過組播地址發(fā)送更新Module2–鏈路狀態(tài)協(xié)議section2–實(shí)現(xiàn)2.2首先

OverivewLink=AninterfaceState=Activeorinactiveinterface，costIS-IS和OSPF是鏈路狀態(tài)協(xié)議三個(gè)Databases：Adjacency：NeighbourDatabaseTopology：Link-stateDatabaseRouting：ForwardingDatabase2.2實(shí)現(xiàn)

鏈路狀態(tài)AdjacencydatabaseLink-statedatabaseForwardingdatabase對(duì)于路由器B：RouterARouterBRouterC1/1/11/1/11/1/21/1/21/1/31/1/3Adjdatabase：RouterA1/1/1RouterC1/1/3Link-statedatabase：AlldirectlinkonRouterAAlldirectlinkonRouterBAlldirectlinkonRouterCForwardingdatabase：2.2.2.0/24via1/1/32.2.2.0/242.2實(shí)現(xiàn)

鏈路狀態(tài)信息AdjacencydatabaseRouterARouterBRouterC1/1/11/1/11/1/21/1/21/1/31/1/32.2.2.0/24Step1:RouterB從鄰居接收updatesStep2：產(chǎn)生LSDBAlldirectlinkonRouterAAlldirectlinkonRouterBAlldirectlinkonRouterCStep4：路由表產(chǎn)生2.2.2.0/24via1/1/3Step3：SPF計(jì)算Destination2.2.2.0/24via1/1/3cost20–BESTvia1/1/1cost402.2實(shí)現(xiàn)

鏈路狀態(tài)信息-ExchangeExchangeRouterARouterBRouterC1/1/11/1/11/1/21/1/21/1/31/1/32.2.2.0/24ACBLinkStateA10B10LinkStateB10C102.2.2.0/2410LinkStateA10C10RouterA:LinkStateA10B10RouterB:LinkStateB10C102.2.2.0/24102.2實(shí)現(xiàn)

鏈路狀態(tài)信息-SPFSPFcalculateRouterARouterBRouterC1/1/11/1/11/1/21/1/21/1/31/1/32.2.2.0/24ACBLinkStateA10C10RouterA:LinkStateA10B10RouterB:LinkStateB10C102.2.2.0/2410SPFcalculate:SPFTreeRouterB路由表:…2.2.2.0/24via1/1/32.2實(shí)現(xiàn)

鏈路狀態(tài)-TopologyChangeTopChangeRouterARouterBRouterC1/1/11/1/11/1/21/1/21/1/31/1/32.2.2.0/24ACBLinkStateA10C10RouterA:LinkStateA10B10RouterB:LinkStateB10C10RouterB：重新SPFcalculate:SPFTreeRouterB路由表:…2.2.2.0/24via1/1/32.2實(shí)現(xiàn)

鏈路狀態(tài)信息-FloodingChange鏈路狀態(tài)信息發(fā)送，當(dāng)：Top改變周期性疑問？可靠性？必須有一種方式確定是更新是否已經(jīng)收到-在LSDB中已經(jīng)存在？必須判斷更新是否發(fā)送跟鄰居或者丟棄？RouterARouterBRouterC1/1/11/1/11/1/21/1/21/1/31/1/32.2.2.0/24ACB2.2實(shí)現(xiàn)

鏈路狀態(tài)信息Update-AcknowledgmentsAcknowledgments當(dāng)路由器收到LSA后，必須回復(fù)ACK如果沒有收到對(duì)端的ACK，將重發(fā)RouterARouterBRouterC1/1/11/1/11/1/21/1/21/1/31/1/32.2.2.0/24ACB2.2實(shí)現(xiàn)

鏈路狀態(tài)信息Update-SequenceNumbersSequenceNumbersSeqNumber必須包含在鏈路信息中否則將無限的flood當(dāng)Router-Router直接flood的時(shí)候，SeqNumber應(yīng)該不能被改變RouterARouterBRouterC1/1/11/1/11/1/21/1/21/1/31/1/32.2.2.0/24ACB當(dāng)一個(gè)路由接收到鏈路狀態(tài)Update時(shí)：如果Seq#，比LSdatabase低，將discarded；如果Seq#，與LSdatabase相同，將Discarded，同時(shí)回復(fù)ACK；如果Seq#，與LSdatabase高，將更新LSdatabse，將發(fā)送跟他的鄰居，同時(shí)回復(fù)ACK。2.2實(shí)現(xiàn)

鏈路狀態(tài)信息Aging鏈路狀態(tài)信息包含Aging，當(dāng)鏈路狀態(tài)產(chǎn)生的時(shí)候設(shè)置：OSPFset0IS-ISset1200sOSPF將逐漸增加，IS-IS將逐漸減少當(dāng)Age達(dá)到最大時(shí)：不在被加載到路由表鏈路狀態(tài)信息將攜帶MaxAge，flood到鄰居鏈路狀態(tài)信息將從鏈路狀態(tài)數(shù)據(jù)庫中移除2.2實(shí)現(xiàn)

鏈路狀態(tài)信息Process2.2實(shí)現(xiàn)

分層設(shè)計(jì)Scalability問題：鏈路狀態(tài)數(shù)據(jù)庫隨網(wǎng)絡(luò)規(guī)模增加SPF越來越復(fù)雜Topology改變需要整個(gè)網(wǎng)絡(luò)的每個(gè)路由器重新計(jì)算層次設(shè)計(jì)把一個(gè)大了網(wǎng)絡(luò)邏輯分割為多個(gè)小的domainIS-IS和OSPF都支持層次化，但是技術(shù)細(xì)節(jié)不同層次化結(jié)構(gòu)可能導(dǎo)致次優(yōu)路由存在層次設(shè)計(jì)實(shí)現(xiàn)可管理網(wǎng)絡(luò)的規(guī)模，有能力處理數(shù)百的路由節(jié)點(diǎn)網(wǎng)絡(luò)2.2實(shí)現(xiàn)

IS-IS分層設(shè)計(jì)RouterRouterRouterRouterRouterRouterRouterArea2Area1Area32.2實(shí)現(xiàn)

OSPF分層設(shè)計(jì)RouterRouterRouterRouterRouterRouterRouterArea2Area0Area3LAB7750SR業(yè)務(wù)路由器從入門到提高7750SR中級(jí)培訓(xùn)Module3–OSPF協(xié)議及實(shí)現(xiàn)ModuleObjectives成功完成本模塊后，學(xué)生應(yīng)理解:1、了解OSPF協(xié)議2、理解實(shí)現(xiàn)7750SR設(shè)備上的OSPF配置Module3–OSPF協(xié)議及實(shí)現(xiàn)section1–OSPF協(xié)議3.1OSPF協(xié)議

狀態(tài)機(jī)RouterBRouterA1.1.1.11.1.1.2Hello2-Way(1)(2)(3)(1)Hello,RID=1.1.1.1Noneighborsknown(2)Hello,RID=1.1.1.2Iseeneighbor1.1.1.1(3)Hello,RID=1.1.1.1Iseeneighbor1.1.1.23.1OSPF協(xié)議

狀態(tài)機(jī)RouterBRouterA1.1.1.11.1.1.2ExstartExchange(1)(2)(3)(1)DBD:RID=1.1.1.1(2)DBD:RID=1.1.1.2(3)DBD:Summaryofallnetworksknown(4)(LowerRIDbegins)(4)DBD:Summaryofallnetworksknown3.1OSPF協(xié)議

狀態(tài)機(jī)RouterBRouterA1.1.1.11.1.1.2Loading(2)(1)(2)LSR:Sendinformationforthefollowingnetworks…(1)LSR:SendinformationfortheFollowingnetworks…(3)LSU:Hereiswhatyourequested(3)(4)(4)LSU:Hereiswhatyourequested3.1OSPF協(xié)議

狀態(tài)機(jī)RouterBRouterA1.1.1.11.1.1.2Full(2)(1)(2)ACK:Thanksfortheinformation(1)ACK:Thanksfortheinformation(3)Hello(3)(4)PeriodicHellos(4)hello3.1OSPF協(xié)議

DR/BDRselectionPoint-to-Point鏈路：PPP，HDLC鏈路是Point-to-PointEthernet鏈路可以配置為Point-to-PointPoint-to-Point不需要選舉DR/BDR采用224.0.0.5(AllofOSPFRouter)發(fā)送數(shù)據(jù)包

3.1OSPF協(xié)議

DR/BDRselectionLAN鏈路：LAN需要選舉DR/BDRDRs采用224.0.0.5發(fā)送數(shù)據(jù)到所有OSPF路由器路由器采用224.0.0.6發(fā)送數(shù)據(jù)到DRs即使LAN上只有兩臺(tái)路由器，也會(huì)選舉DRs，建議此時(shí)配置為P-t-P 3.1OSPF協(xié)議

DR/BDRselectionDR/BDR選舉：最高priority被選舉為DR如果priorrity相同，采用RouterID最高的作為DRDR是非搶占的，一旦選舉不會(huì)被改變（比如新增Router加入）Module3–OSPF協(xié)議及實(shí)現(xiàn)section2–OSPF實(shí)現(xiàn)3.2OSPF實(shí)現(xiàn)

配置流程StartConfigRouterIDDefineareaDefineinterfacesEnableDefineOSPFParametersDefineIntParameters3.2OSPF實(shí)現(xiàn)

配置OSPFStartOSPFprocess：7750#configurerouterospf<instance-id>3.2OSPF實(shí)現(xiàn)

配置OSPFConfigurerouterid：7750#configurerouterospf7750>config>router>ospf#router-id<XXX.XXX.XXX.XXX>3.2OSPF實(shí)現(xiàn)

配置OSPFConfigureOSPFparameters：7750>config>router>ospf#reference-bandwidth1000000007750>config>router>ospf#preference107750>config>router>ospf#external-preference1507750>config>router>ospf#graceful-restart3.2OSPF實(shí)現(xiàn)

配置OSPFDefinearea：7750>config>router>ospf#area0.0.0.03.2OSPF實(shí)現(xiàn)

配置OSPFDefineinterface：7750>config>router>ospf#interface<interface-name>3.2OSPF實(shí)現(xiàn)

配置OSPFDefineinterfaceparameters：7750>config>router>ospf>area>if#<no>passive7750>config>router>ospf>area>if#interface-type<broadcast>|<point-to-point>7750>config>router>ospf>area>if#priority17750>config>router>ospf>area>if#hello-interval107750>config>router>ospf>area>if#dead-interval407750>config>router>ospf>area>if#mtu<>7750>config>router>ospf>area>if#metric<>7750>config>router>ospf>area>if#authentication-type<>7750>config>router>ospf>area>if#authentication-key<>7750>config>router>ospf>area>if#

message-digest-key<>3.2OSPF實(shí)現(xiàn)

配置OSPFOSPFroutepolicy：鏈路狀態(tài)協(xié)議只有export策略，沒有import策略路由器沒有cisco的network通告方式，只能采用策略重分布路由配置步驟Step1：在config/router/policy-options下定義路由策略；Step2：在config/router/ospf下引用策略；Step3：定義OSPF路由器為ASBR3.2OSPF實(shí)現(xiàn)

配置OSPFOSPFroutepolicy：[cont.]step1：定義路由策略，如：1：發(fā)布指定的prefix；2：重分布其他協(xié)議路由，比如direct、static、isis、bgp重分布到OSPF開始配置路由策略7750#configrouterpolicy-options7750>config>router>policy-options#begin7750>config>router>policy-options#commit7750>config>router>policy-options#abort3.2OSPF實(shí)現(xiàn)

配置OSPFOSPFroutepolicy：[cont.]step1：定義路由策略，如：1：發(fā)布指定的prefix；2：重分布其他協(xié)議路由，比如direct、static、isis、bgp重分布到OSPF發(fā)布指定prefix7750>config>router>policy-options#prefix-listPUBLIC-IP-LIST7750>config>router>policy-options>prefix#prefix4.4.4.0/24exact7750>config>router>policy-options>prefix#exit7750>config>router>policy-options#policy-statementto-OSPF7750>config>router>policy-options>policy#entry107750>config>router>policy-options>policy>entry#from7750>config>router>policy-options>policy>entry>from#prefixPUBLIC-IP-LIST7750>config>router>policy-options>policy>entry>from#exit7750>config>router>policy-options>policy>entry#to7750>config>router>policy-options>policy>entry>to#protocolospf7750>config>router>policy-options>policy>entry>from#exit7750>config>router>policy-options>policy>entry>#acctionaccept3.2OSPF實(shí)現(xiàn)

配置OSPFOSPFroutepolicy：[cont.]step1：定義路由策略，如：1：發(fā)布指定的prefix；2：重分布其他協(xié)議路由，比如direct、static、isis、bgp重分布到OSPF重分布其他路由協(xié)議，比如直連7750>config>router>policy-options#policy-statementto-OSPF7750>config>router>policy-options>policy#entry207750>config>router>policy-options>policy>entry#from7750>config>router>policy-options>policy>entry>from#protocoldirect7750>config>router>policy-options>policy>entry>from#exit7750>config>router>policy-options>policy>entry#to7750>config>router>policy-options>policy>entry>to#protocolospf7750>config>router>policy-options>policy>entry>from#exit7750>config>router>policy-options>policy>entry>#acctionaccept3.2OSPF實(shí)現(xiàn)

配置OSPFOSPFroutepolicy：Step2/3：應(yīng)用策略7750>config>router>ospf#export“to-OSPF“7750>config>router>ospf#asbr3.2OSPF實(shí)現(xiàn)

配置OSPF查看狀態(tài)：showrouterospfinterface7750#showrouterospfinterface===============================================================================OSPFInterfaces===============================================================================IfNameAreaIdDesignatedRtrBkupDesigRtrAdmOpersystem0.0.0.0202.98.110.630.0.0.0UpDRsystem10.0.0.0202.98.110.630.0.0.0UpDRto-7750SR-10.0.0.0202.98.110.74202.98.110.63UpBDRNo.ofOSPFInterfaces:3===============================================================================showrouterospfneigbour7750#showrouterospfneighbor===============================================================================OSPFNeighbors===============================================================================Interface-NameRtrIdStatePriRetxQTTLto-7750SR-1202.98.110.74Full1034No.ofNeighbors:1===============================================================================3.2OSPF實(shí)現(xiàn)

配置OSPF查看狀態(tài)：showrouterospfdatabase7750#showrouterospfdatabase===============================================================================OSPFLinkStateDatabase(Type:All)===============================================================================TypeAreaIdLinkStateIdAdvRtrIdAgeSequenceCksumRouter0.0.0.01.157.118.1621.157.118.16210660x800018ee0x626cRouter0.0.0.01.188.1.201.188.1.206490x800028230x2219Router0.0.0.01.188.1.441.188.1.4414470x800036d10xa64bLAB7750SR業(yè)務(wù)路由器從入門到提高7750SR中級(jí)培訓(xùn)Module4–IS-IS協(xié)議及實(shí)現(xiàn)ModuleObjectives成功完成本模塊后，學(xué)生應(yīng)理解:1、了解IS-IS協(xié)議2、理解實(shí)現(xiàn)7750SR設(shè)備上的IS-IS配置Module4–IS-IS協(xié)議及實(shí)現(xiàn)section1–IS-IS協(xié)議4.1is-is協(xié)議

ProtocalComparisonFeatureRIPv2OSPFIS-ISUpdatesPeriodicIncrementalIncrementalUpdatetypeBroadcast/MulticastL3MulticastL2MulticastAuthenticationSimpleandMD5SimpleandMD5SimpleandMD5MetricHopsLinkcostLinkcostMetrictypeDistancevectorLink-stateLink-stateVLSM/CIDRsupportYesYesYesTopologysizeSmallVerylargeVerylargeSummarizationManualManualManualConvergenceSlowFastFast4.1is-is協(xié)議

link-StateProtocolComparisonFeatureIS-ISOSPFUpdatesIncrementalIncrementalMulticastlayerLayer2Layer3AuthenticationSimpleandMD5SimpleandMD5MetricDefault:allportscost10Auto-calculationoninterfaceMetrictypeLink-stateLink-stateUpdatetypesL1andL2MultipletypesAreahierarchyNotrequiredBackboneareaAreaboundariesOnsegmentAtinterfaceConvergenceFastFast4.1is-is協(xié)議

IS-ISvs.OSPFTerm

ComparisonDescriptionOSPFTerm

IS-ISTermHostSystemHostEndSystemRouterRouterIntermediateSystemAttachedNetworkSubnetCircuitLinkstateupdatesLinkStateAdvertisement(LSA)LinkStatePDUIndexofLinkStateDBDatabaseDescriptionpacketCompleteSequenceNumberPDU(CSNP)AcknowledgementACKPartialSequenceNumberPDU(PSNP)DesignatedRouterDesignatedISInterfaceaddressNetworkServiceAccessPoint(NSAP)4.1is-is協(xié)議

ISIS協(xié)議RouterCRouterBRouterACost10Cost10Cost10ISIS使用SPF算法決定最短路徑ISIS使用Cost值決定鏈路質(zhì)量4.1is-is協(xié)議

ISIS協(xié)議路由器被開著一個(gè)“IntermediateSystem”:ISISIS使用NSAP作為地址2層結(jié)構(gòu)設(shè)計(jì)：Level1：一個(gè)Localarea，如果轉(zhuǎn)發(fā)到其他area通過最近的L1/L2路由器Level2：在area間交換路由信息和轉(zhuǎn)發(fā)流量NSAP包含area、system和selectorL1鄰居必須是相同的area；L2鄰居可以是不通的area；4.1is-is協(xié)議

ISIS協(xié)議ISIS使用L2MulticastLevel1update：01-80-C2-00-00-14Level2updaet：01-80-C2-00-00-154.1is-is協(xié)議

ISIS協(xié)議Level1Router僅僅關(guān)心area內(nèi)的paths基于systemid標(biāo)示paths，不是areaid使用MAC地址：01-80-C2-00-00-14尋找最近的L1/L2路由器

Level2Router在area之間交換路由僅僅和其他L2或者L1/L2路由器交換使用MAC地址：01-80-C2-00-00-15L1/L2路由器設(shè)置ATTbit在L1的LSP4.1is-is協(xié)議

ISIS協(xié)議鄰接關(guān)系建立發(fā)送HelloPDU，IIH包含:Point-to-PointhelloLevel1LANhelloLevel2LANhello對(duì)于Point-to-Point鏈路收到對(duì)端的IIH，鄰接關(guān)系就UP對(duì)于Broadcast鏈路當(dāng)收到的IIH包含OWNID，鄰接關(guān)系就UP（2次握手）4.1is-is協(xié)議

ISIS協(xié)議同步建立鄰接關(guān)系后，發(fā)送CSPN：CSPN包含所有LSP的描述當(dāng)發(fā)送完CSPN后，發(fā)送LSP進(jìn)行更新通過PSPN進(jìn)行確認(rèn)LSP已經(jīng)收到在Broadcast鏈路上，DIS周期發(fā)送在Point-to-Point鏈路上，第一次建立鄰接時(shí)發(fā)送4.1is-is協(xié)議

ISIS協(xié)議DIS選舉最高接口優(yōu)先級(jí)如果相同，最高接口MACModule4–IS-IS協(xié)議及實(shí)現(xiàn)section2–IS-IS實(shí)現(xiàn)4.2isis實(shí)現(xiàn)

配置流程StartIS-ISConfigglobalparametersModifylevel-capability（optional）DefineinterfacesEnableDefineareaaddressModifyIntParameters4.2isis實(shí)現(xiàn)

配置IS-ISStartis-isprocess：7750#configurerouterisis<instrance-id>4.2is-is實(shí)現(xiàn)

配置IS-ISConfiguregobalparameters：7750#configurerouterisis7750>config>router>isis#area-id49.0180.0017750>config>router>isis#traffic-engineering7750>config>router>isis#level17750>config>router>isis>level#wide-metrics-only7750>config>router>isis#4.2is-is實(shí)現(xiàn)

配置is-isModifylevel-capability：7750#configurerouterisis7750>config>router>isis#level-capabilitylevel-1|level-2|level-1/24.2is-is實(shí)現(xiàn)

配置IS-ISDefineinterface：7750>config>router>isis#interface<interface-name>4.2is-is實(shí)現(xiàn)

配置IS-ISDefineinterfaceparameters：7750>config>router>isis>if#interface-type<broadcast>|<point-to-point>7750>config>router>isis>if#level1|27750>config>router>isis>if>level#hello-interval37750>config>router>isis>if>level#hello-multiplier47750>config>router>isis>if>level#passive7750>config>router>isis>if>level#metric<>7750>config>router>isis>if>level#hello-authentication-type<>7750>config>router>isis>if>level#hello-authentication-key<>7750>config>router>isis>if>level#

priority14.2is-is實(shí)現(xiàn)

配置IS-ISOSPFroutepolicy：鏈路狀態(tài)協(xié)議只有export策略，沒有import策略路由器沒有cisco的network通告方式，只能采用策略重分布路由配置步驟Step1：在config/router/policy-options下定義路由策略；Step2：在config/router/ospf下引用策略；Step3：定義OSPF路由器為ASBR4.2is-is實(shí)現(xiàn)

配置IS-ISISISroutepolicy：[cont.]step1：定義路由策略，如：1：發(fā)布指定的prefix；2：重分布其他協(xié)議路由，比如direct、static、ospf、bgp重分布到ISIS開始配置路由策略7750#configrouterpolicy-options7750>config>router>policy-options#begin7750>config>router>policy-options#commit7750>config>router>policy-options#abort4.2is-is實(shí)現(xiàn)

配置IS-ISISISroutepolicy：[cont.]step1：定義路由策略，如：1：發(fā)布指定的prefix；2：重分布其他協(xié)議路由，比如direct、static、ospf、bgp重分布到ISIS發(fā)布指定prefix7750>config>router>policy-options#prefix-listPUBLIC-IP-LIST7750>config>router>policy-options>prefix#prefix4.4.4.0/24exact7750>config>router>policy-options>prefix#exit7750>config>router>policy-options#policy-statementto-ISIS7750>config>router>policy-options>policy#entry107750>config>router>policy-options>policy>entry#from7750>config>router>policy-options>policy>entry>from#prefixPUBLIC-IP-LIST7750>config>router>policy-options>policy>entry>from#exit7750>config>router>policy-options>policy>entry#to7750>config>router>policy-options>policy>entry>to#protocolisis7750>config>router>policy-options>policy>entry>from#exit7750>config>router>policy-options>policy>entry>#acctionaccept4.2is-is實(shí)現(xiàn)

配置IS-ISISISroutepolicy：[cont.]step1：定義路由策略，如：1：發(fā)布指定的prefix；2：重分布其他協(xié)議路由，比如direct、static、ospf、bgp重分布到ISIS重分布其他路由協(xié)議，比如直連7750>config>router>policy-options#policy-statementto-ISIS7750>config>router>policy-options>policy#entry207750>config>router>policy-options>policy>entry#from7750>config>router>policy-options>policy>entry>from#protocoldirect7750>config>router>policy-options>policy>entry>from#exit7750>config>router>policy-options>policy>entry#to7750>config>router>policy-options>policy>entry>to#protocolisis7750>config>router>policy-options>policy>entry>from#exit7750>config>router>policy-options>policy>entry>#acctionaccept4.2is-is實(shí)現(xiàn)

配置IS-ISISISroutepolicy：Step2：應(yīng)用策略7750>config>router>isis#export“to-ISIS“4.2is-is實(shí)現(xiàn)

配置IS-IS查看狀態(tài)：showrouterisisinterface7750#showrouterisisinterface===============================================================================ISISInterfaces===============================================================================InterfaceLevelCircIDOperStateL1/L2MetricsystemL1L21Up0/0To-7750SR001_1L1L22Up1/3000system1L1L24Up0/0Interfaces:3===============================================================================showrouterisisajacency7750#showrouterisisadjacency===============================================================================ISISAdjacency===============================================================================SystemIDUsageStateHoldInterfaceMTEnabSR-Test-CR-01.MAN.CR*L2Up10To-7750SR001_1NoAdjacencies:1===============================================================================4.2is-is實(shí)現(xiàn)

配置IS-IS查看狀態(tài)：showrouterisisdatabase7750#showrouterisisdatabase===============================================================================ISISDatabase===============================================================================LSPIDSequenceChecksumLifetimeAttributesDisplayingLevel1databaseLevel(1)LSPCount:0DisplayingLevel2databaseSR-Test-7705-1.00-00 0x33ca70x2b1316L1L2SR-Test-7705-2.00-000x356460x9202467L1L2LAB7750SR業(yè)務(wù)路由器從入門到提高7750SR中級(jí)培訓(xùn)Module5–BGP協(xié)議及實(shí)現(xiàn)ModuleObjectives成功完成本模塊后，學(xué)生應(yīng)理解:1、了解BGP協(xié)議2、理解實(shí)現(xiàn)7750SR設(shè)備上的BGP配置Module5–BGP協(xié)議及實(shí)現(xiàn)section1–BGP協(xié)議5.1BGP協(xié)議

概述-IGPvs.EGPBGP用于連接ASIGP（OSPF、ISIS、RIP）用于AS內(nèi)RouterRouterRouterRouterRouterAS2AS1AS35.1BGP協(xié)議

概述在AS(autonomoussystems)之間交換路由信息AS是在單獨(dú)管理域下路由集合，提供一致的路由策略運(yùn)行TCP之上，端口179ASnumberPublic：0-64511Private：64512-65535Support4bytesAS#支持CIDR，減少路由規(guī)模5.1BGP協(xié)議

Features是一個(gè)PathVectorProtocolPeers可以是任意可達(dá)的設(shè)備可靠性通過TCP實(shí)現(xiàn)端口179周期的keepaliveEvent-driven復(fù)雜的metrics支持認(rèn)證與其他TCP應(yīng)用沒有區(qū)別BGPpeers不要求直接連接，因此BGPpeers需要IGP提供可達(dá)性5.1BGP協(xié)議

Features[cont.]PathVectorProtocol也是距離矢量協(xié)議BGP的HOP是AS#（區(qū)別RIP的router）滿足水平分割要求能管理更大的路由表BGP管理整個(gè)Internet需要消耗更多的CPU、Memory資源5.1BGP協(xié)議

消息類型Type1：openExchangeParametersType2：UpdateTranferrouteinformationType3：NotificationErrormessagesType4：KeepaliveManagesthesessionorresponsetoanopenType5：Route-refreshReuqestroutere-advertisement5.1BGP協(xié)議

狀態(tài)機(jī)1：IdleInitialIferrorisdetected2：ConnectWatingTCPconnectionIfsuccess，changeitsstatetoOpenSentIffails，changetoActive3：ActiveAcquireapeerbyinitiatingTCP4：OpenSentWaitingforOPENmessageIfopenisvalid，sentkeepalive，comparesparamters，changetoOpenConfirm5：OpenConfirmWaitingforakeepaliveIfreceiveakeepalivechangetoEstablished6：EstablishedTheoperationalstateCanexcangeUpdate、Notification、keepalive5.1BGP協(xié)議

狀態(tài)機(jī)Module5–BGP協(xié)議及實(shí)現(xiàn)section2–BGP實(shí)現(xiàn)5.2bgp實(shí)現(xiàn)

配置流程StartbgpConfigglobalparametersDefineBGPgroupDefineneighborEnableDefinerouter-idAssignAS#ModifyneigbourParametersModifygroupParameters5.2bgp實(shí)現(xiàn)

配置BGPStartis-isprocess：7750#configurerouterautonomous-system<#>7750#configurerouterbgp5.2bgp實(shí)現(xiàn)

配置BGPConfiguregobalparameters：7750#configurerouterbgp7750>config>router>bgp#router-id10.