【正文】 ? 請(qǐng)求包： 7 B D 拓?fù)浔? 網(wǎng)絡(luò) 鄰居 路由表 鄰居表 網(wǎng)絡(luò) 7 B H FDDIA 鄰居自動(dòng)發(fā)現(xiàn) B D H Enhanced IGRP IP RIP IP RIP 自治域 200 IGRP 自治域 200 增強(qiáng) IGRP 多協(xié)議支持 IP 增強(qiáng) IGRP 配置 Router (config) router eigrp autonomoussystemnumber IP 增強(qiáng) IGRP 配置 ? 定義一個(gè)增強(qiáng) IGRP 作為 IP 路由進(jìn)程 Router (configrouter) work worknumber ? 選擇相鄰的網(wǎng)絡(luò)、子網(wǎng) router eigrp 109 work work T0 S0 S1 S2 TokenRingTokenRingA B C E D IP 增強(qiáng) IGRP 實(shí)例 ? 增強(qiáng) IGRP用綜合的度量去選擇最佳路徑 IPX RIP T1 T1 T1 Enhanced IGRP IPX RIP AppleTalk RTMP IP RIP AppleTalk RTMP IP RIP 增強(qiáng) IGRP的路徑選擇 最小路由更新 ? 對(duì)于接收到的路由協(xié)議指定可以通過的路由 ? 用一個(gè)標(biāo)準(zhǔn)的訪問表來允許和禁止某些路由 ? 可以實(shí)施傳輸 (outbound)或接收 (inbound) 路由協(xié)議 ? 過濾所有的更新或指定接口的更新 Router (configrouter) distributelist accesslistnumber { out l in } [ interfacename l routingprocess ] 路由過濾 ? 用接口過濾來隱藏網(wǎng)絡(luò) S0 IP 路由過濾實(shí)例 router eigrp 1 work work distributelist 7 out s0 ! accesslist 7 permit ? 用重新分配過濾來隱藏網(wǎng)絡(luò) 重新分配過濾實(shí)例 EIGRP EIGRP RIP router rip work redistribute eigrp 1 defaultmetric 3 distributelist 7 out eigrp 1 ! router eigrp 1 work redistribute rip defaultmetric 56 2022 255 1 1500 ! accesslist 7 deny accesslist 7 permit ? 網(wǎng)絡(luò)層的路由總結(jié) ( A, B, C類 ) 缺省是 enabled Router (configrouter) no autosummary 增強(qiáng) IGRP 路由的總結(jié)(Summarization) Router (configif) ip summaryaddress eigrp asnumber address mask ? 允許在一個(gè)指定的接口進(jìn)行總結(jié)廣播 ? 關(guān)閉自動(dòng)總結(jié) ip address router eigrp 1 work work no autosummary router eigrp 1 work int s0 ip summaryaddress eigrp 1 S0 World 路由總結(jié)實(shí)例 Router (config) ip route work [ mask ] address [ distance ] Router (config) ip route work [ mask ] interface [ distance ] 靜態(tài)路由配置 ? 定義一條到 IP目的網(wǎng)絡(luò)或子網(wǎng)的路徑 – 缺省的管理距離 1 ? 需要重新分配 ? 定義一條到 IP目的網(wǎng)絡(luò)或子網(wǎng)的路徑 ? 缺省的管理距離 0 (意思是直接相連 ) ? 自動(dòng)重新分配 D E 靜態(tài)路由的重新分配 D E ip route ip route ! router eigrp 1 work defaultmetric 10000 100 255 1 1500 redistribute static distributelist 3 out static ! accesslist 3 permit passiveinterface s0 S0 B A C show ip protocols Router 校驗(yàn)增強(qiáng) IGRP 運(yùn)作 ? 顯示當(dāng)前激活的路由協(xié)議進(jìn)程的參數(shù)和當(dāng)前狀態(tài) show ip route eigrp Router ? 顯示路由表中當(dāng)前的 IGRP入口 show ip eigrp neighbors Router 校驗(yàn)增強(qiáng) IGRP 運(yùn)作 (續(xù) .) ? 顯示 IP 增強(qiáng) IGRP發(fā)現(xiàn)的鄰居 show ip eigrp topology Router ? 顯示 IP增強(qiáng) IGRP 拓?fù)浔? show ip eigrp traffic Router ? 顯示 IP 增強(qiáng) IGRP發(fā)送和接收到的包 Basic Traffic Management with Access Lists Module 9 Copyright ?1998, Cisco Systems, Inc. Managing IP ? Configure IP standard access lists ? Limit virtual terminal access ? Configure IP extended access lists ? Verify access list configuration ? Configure an alternative to using access lists ? Configure an IP helper address to manage broadcasts 目標(biāo) 在完成本章學(xué)習(xí)基礎(chǔ)上 , 你應(yīng)該能執(zhí)行以下任務(wù) Access List 應(yīng)用 ? 訪問列表可以控制通過網(wǎng)絡(luò)的包轉(zhuǎn)發(fā) 虛擬終端訪問 (IP) 在一個(gè)端口上傳遞一個(gè)包 Queue List Priority and custom queuing 其他訪問列表使用 ? 訪問列表是多用途的 Dialondemand routing Route filtering Routing Table 配置 IP 標(biāo)準(zhǔn) 訪問列表 Copyright ?1998, Cisco Systems, Inc. Managing IP IP Standard Access Lists Overview ? Use source address only ? Access list range: 1 to 99 Destination Address Source Address X For Standard IP Access Lists Route to interface Ining packet Access list? Next entry in list Does source address match? More entries? Apply condition Deny Permit Yes No Yes No ICMP Message Forward Packet Yes No Inbound Access List Processing Forward Packet For Standard IP Access Lists ICMP Message Ining packet Does source address match? More entries? Permit Yes No Yes No Route to interface Yes No Next entry in list Apply condition Access list? Deny Outbound Access List Processing Class B subs Class C subs HighOrder Bits First Octet Class Standard Mask 0 10 110 1126 128191 192223 A B C 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 0 1 2 3 4 5 6 7 IP Addressing Review exactly host Address Mask Matches any address work only sub * local broadcast * Assuming sub mask of ? 0 bit = must match bits in addresses ? 1 bit = unconditional match for bits in addresses Access Lists Use Wildcard Mask ? To create an access list, perform the following tasks: – Define an access list Apply the list to an interface Access List Configuration Tasks Router (config) accesslist accesslistnumber { permit | deny } { source [ sourcewildcard ] | any } Standard Access List Commands ? Defines a standard access list (numbered 199) Router (configif) ip accessgroup accesslistnumber { i