数通-路由过滤-路由控制-ensp练习
实验拓扑
实验要求及步骤
1、R3上只出现1.1.1.0/24-1.1.6.0/24这六个网段中,第三个字节是奇数的网段。
#
ospf 1
import-route rip 1 route-policy oir
area 0.0.0.0
network 10.0.23.0 0.0.0.255
#
2、R1上只出现1.1.32.0/24-1.1.63.0/24 这31个网段中第三个字节是偶数的网段。
#
rip 1
undo summary
version 2
network 10.0.0.0
filter-policy 2020 import
filter-policy 2021 export
import-route ospf 1 route-policy rio
#
#
acl number 2000
rule 5 permit source 172.16.3.100 0
#
acl number 2001
rule 5 permit source 172.16.2.0 0.0.0.255
#
acl number 2002
rule 5 permit source 172.16.1.0 0.0.0.255
#
#
acl number 2020
rule 5 deny source 1.1.0.0 0.0.6.255
rule 10 permit
#
acl number 2021
rule 5 deny source 1.1.33.0 0.0.30.255
rule 10 permit
#
3、R1上不出现172.16.3.100/32网段的路由,
2网段开销为10,
1网段携带tag值为10,
0网段不做修改。用acl匹配数据流。
#
route-policy rio deny node 10
if-match acl 2000
#
route-policy rio permit node 20
if-match acl 2001
apply cost 9
#
route-policy rio permit node 30
if-match acl 2002
apply tag 10
#
route-policy rio permit node 100
#
4、R3上不出现192.168.3.100/32网段的路由,
2网段tag值改为5,
查看dis rip1 router/dis ospf lsdb ase
1网段开销改为5,
查看dis ip routing
192.168.1.100/32 O_ASE 150 5 D 10.0.23.2 Ethernet0/0/0
0网段不做修改。用地址前缀列表匹配数据流。
#
route-policy oir deny node 10
if-match ip-prefix 3
#
route-policy oir permit node 20
if-match ip-prefix 2
apply tag 5
#
route-policy oir permit node 30
if-match ip-prefix 1
apply cost 5
#
route-policy oir permit node 100
#
ip ip-prefix 3 index 10 permit 192.168.3.100 32
ip ip-prefix 2 index 10 permit 192.168.2.0 24
ip ip-prefix 1 index 10 permit 192.168.1.0 24
#
实验验证