CCIE路由实验(10) -- IS-IS

1.配置基本的集成IS-IS路由协议
2.多区域的集成IS-IS配置
3.IS-IS认证
4.IS-IS路由泄露
5.IS-IS汇总
6.在IS-IS中手动产生一条默认路由
7.IS-IS协议重分布
8.用IS-IS支持IPv6
9.用IS-IS多拓扑支持IPv6
10.在帧中继环境中运行IS-IS

enable
conf t
no ip do lo
enable pass cisco
line con 0
logg sync
exec-t 0 0
line vty 0 4
pass cisco
logg sync
exit
host

1.配置基本的集成IS-IS路由协议

R1:
int l0
ip add 11.1.1.1 255.255.255.0
no shut
exit
int f0/0
ip add 12.1.1.1 255.255.255.0
no shut
exit

router isis
net 49.0001.0000.0000.0001.00
log-adjacency-changes
exit
int f0/0
ip router isis
exit
int l0
ip router isis
exit

R2:
int f0/0
ip add 12.1.1.2 255.255.255.0
no shut
exit
int l0
ip add 22.1.1.1 255.255.255.0
no shut
exit
int f0/1
ip add 23.1.1.2 255.255.255.0
no shut
exit

router isis
net 49.0001.0000.0000.0002.00
log-adjacency-changes
exit
int f0/0
ip router isis
exit
int l0
ip router isis
exit
int f0/1
ip router isis
exit

R3:
int f0/1
ip add 23.1.1.3 255.255.255.0
no shut
exit
int l0
ip add 33.1.1.1 255.255.255.0
no shut
exit

router isis
net 49.0001.0000.0000.0003.00
log-adjacency-changes
exit
int f0/1
ip router isis
exit
int l0
ip router isis
exit

R2:
show clns neighbors
show clns protocol
show clns int f0/0
show isis hostname
show isis topology
show isis database
conf t
int f0/1
isis priority 100
exit
show isis database
show ip route isis

R3:
show run int l0
router isis
passive-interface l0
exit
show run int l0

R1:
show ip route isis
show clns neighbors
router isis
passive-interface f0/0
exit
show clns neighbors
conf t
int f0/0
ip router isis
exit
show clns neighbors

2.多区域的集成IS-IS配置
-------------------------------------------------------------------------

R1:
int l0
ip add 11.1.1.1 255.255.255.0
no shut
exit
int f0/0
ip add 12.1.1.1 255.255.255.0
no shut
exit

router isis
net 49.0001.0000.0000.0001.00
exit
int l0
ip router isis
exit
int f0/0
ip router isis
exit

R2:
int f0/0
ip add 12.1.1.2 255.255.255.0
no shut
exit
int l0
ip add 22.1.1.1 255.255.255.0
no shut
exit
int f0/1
ip add 23.1.1.2 255.255.255.0
no shut
exit

router isis
net 49.0001.0000.0000.0002.00
exit
int f0/0
ip router isis
exit
int l0
ip router isis
exit
int f0/1
ip router isis
exit

R3:
int f0/1
ip add 23.1.1.3 255.255.255.0
no shut
exit
int l0
ip add 33.1.1.1 255.255.255.0
no shut
exit
int f0/0
ip add 34.1.1.3 255.255.255.0
no shut
exit

router isis
net 49.0002.0000.0000.0003.00
exit
int f0/1
ip router isis
exit
int l0
ip router isis
exit
int f0/0
ip router isis
exit

R4:
int f0/0
ip add 34.1.1.4 255.255.255.0
no shut
exit
int l0
ip add 44.1.1.1 255.255.255.0
no shut
exit
int f0/1
ip add 45.1.1.4 255.255.255.0
no shut
exit

router isis
net 49.0002.0000.0000.0004.00
exit
int f0/0
ip router isis
exit
int l0
ip router isis
exit
int f0/1
ip router isis
exit

R5:
int f0/1
ip add 45.1.1.5 255.255.255.0
no shut
exit
int l0
ip add 55.1.1.1 255.255.255.0
no shut
exit
int f0/0
ip add 56.1.1.5 255.255.255.0
no shut
exit

router isis
net 49.0003.0000.0000.0005.00
exit
int f0/1
ip router isis
exit
int l0
ip router isis
exit
int f0/0
ip router isis
exit

R6:
int f0/0
ip add 56.1.1.6 255.255.255.0
no shut
exit
int l0
ip add 66.1.1.1 255.255.255.0
no shut
exit

router isis
net 49.0003.0000.0000.0006.00
exit
int f0/0
ip router isis
exit
int l0
ip router isis
exit

定义骨干区域和非骨干区域
------------------------------------------------
R1:
router isis
is-type level-1
exit

R2:
router isis
is-type level-1-2
exit

R3:
router isis
is-type level-2
exit

R4:
router isis
is-type level-2
exit

R5:
router isis
is-type level-1-2
exit

R6:
router isis
is-type level-1
exit

修改接口电路类型
------------------------------------------------
R2:
int f0/0
isis circuit-type level-1
exit
int f0/1
isis circuit-type level-2
exit

R5：
int f0/0
isis circuit-type level-1
exit
int f0/1
isis circuit-type level-2
exit

3.ISIS认证
--------------------------------------------------
邻居认证：在接口上配置
(R1,R2)
R1:
int f0/0
isis password yeslab level-1
exit

R2:
int f0/0
isis password yeslab level-1
exit

(R2,R3)
R2:
int f0/1
isis password yeslab level-2
exit

R3:
int f0/1
isis password yeslab level-2
exit

(R3,R4)
R3:
key chain yeslab
key 1
key-string cisco
exit
exit
int f0/0
isis authentication mode md5 level-2
isis authentication key-chain yeslab level-2
exit

R4:
key chain yeslab
key 1
key-string cisco
exit
exit
int f0/0
isis authentication mode md5 level-2
isis authentication key-chain yeslab level-2
exit

区域认证
(49.0001区域)
R1:
router isis
area-password yeslab
exit
show ip route isis

R2:
router isis
area-password yeslab
exit

(49.0003区域)
R5:
key chain yeslab
key 1
key-string cisco
exit
exit
router isis
authentication mode md5 level-1
authentication key-chain yeslab level-1
exit

R6:
key chain yeslab
key 1
key-string cisco
exit
exit
router isis
authentication mode md5 level-1
authentication key-chain yeslab level-1
exit

域认证
(R2,R3,R4,R5)
R2:
router isis
domain-password yeslab
exit

R3:
router isis
domain-password yeslab
exit

R4:
router isis
domain-password yeslab
exit

R5:
router isis
domain-password yeslab
exit
------------------------------------------
R2:
key chain yeslab2
key 1
key-string cisco
exit
exit
router isis
no domain-password
authentication mode md5 level-2
authentication key-chain yeslab level-2
exit

R3:
key chain yeslab2
key 1
key-string cisco
exit
exit
router isis
no domain-password
authentication mode md5 level-2
authentication key-chain yeslab level-2
exit

R4:
key chain yeslab2
key 1
key-string cisco
exit
exit
router isis
no domain-password
authentication mode md5 level-2
authentication key-chain yeslab level-2
exit

R5:
key chain yeslab2
key 1
key-string cisco
exit
exit
router isis
no domain-password
authentication mode md5 level-2
authentication key-chain yeslab level-2
exit

4.IS-IS路由泄露
R2:
access-list 100 permit ip host 66.1.1.0 any
router isis
redistribute isis ip level-2 into level-1 distribute-list 100
exit

router isis
no redistribute isis ip level-2 into level-1 distribute-list 100
exit

access-list 10 permit 55.1.1.0
route-map yeslab permit 10
match ip add 10
exit

router isis
redistribute isis ip level-2 into level-1 route-map yeslab
exit

5.IS-IS路由汇总
R3:
show ip route isis

R2:
router isis
summary-add 11.1.0.0 255.255.0.0 metric 100
exit

R3:
show ip route isis
--------------------------------------------------------
R1:
show ip route isis

R2:
access-list 10 permit 66.1.1.0
route-map yeslab permit 10
match ip address 10
exit
router isis
redistribute isis ip level-2 into level-1 route-map yeslab
exit

R1:
show ip route isis

R2:
router isis
summary-add 66.1.0.0 255.255.0.0 level-1
exit

R1:
show ip route isis

R2:
show ip route isis

6.在IS-IS中手动产生一条默认路由
7.IS-IS协议重分布
8.用IS-IS支持IPv6
9.用IS-IS多拓扑支持IPv6
10.在帧中继环境中运行IS-IS