沃尔夫ccie实验室|CCIE实验室考试指南(2)
【shitiku.jxxyjl.com--思科指导交流】
lab 02 -
policy routing
the following scenario refers to the diagram below.
scenario:
all routers are configured in a single ospf area.
router_c, based on the cost metric for ospf will send all packets with
a destination network address of 10.4.0.0 out the e0 interface.
problem:
have all packets destined for network 10.4.0.0 exit the serial 0
router_c.
router_c#sh ip route
codes: c - connected, s - static,
i - igrp,
r - rip, m - mobile, b - bgp,
d - eigrp,
ex - eigrp external, o - ospf,
ia - ospf inter area,
n1 - ospf nssa external type 1,
n2 - ospf nssa external type 2,
e1 - ospf external type 1,
e2 - ospf external type 2, e - egp,
i - is-is,
l1 - is-is level-1,
l2 - is-is level-2,
* - candidate default,
u - per-user static route,
o - odr
gateway of last resort is not set
10.0.0.0/16 is subnetted, 3 subnets
c 10.2.0.0 is directly connected,
serial0
c 10.3.0.0 is directly connected,
ethernet0
o 10.4.0.0 [110/74] via 10.3.0.1,
00:00:13, ethernet0
solution:
policy routing will allow you to configure a route map. the route map
will be used by the router in lieu of destination routing.
in this scenario the best route to the destination network 10.4.0.0 is
to go ethernet. we want to force the route to take the serial
connection.
step 1
configure a route map tag. i chose "takeserial".
step 2
point the route map to the tag. don’t let the 10 shake you it is just a
sequence number.
router_c(config)#route-map
takeserial permit ?
<0-65535>
sequence to insert to/delete
from existing route-map entry
step 3
identify which packet should be route mapped. in our example we will
match the ip address of access list 1.
step 4
tell the router where to send the matched packet. we will send the
packets to serial 0.
current configuration:
!
version 11.2
!
hostname router_c
!
!
!
interface ethernet0
ip address 10.3.0.3 255.255.0.0
!
interface ethernet1
ip address 10.1.0.3 255.255.0.0
ip policy route-map takeserial*step 1
!
interface serial0
ip address 10.2.0.1 255.255.0.0
clockrate 38400
!
interface serial1
no ip address
shutdown
!
router ospf 100
network 10.0.0.0 0.255.255.255 area 0
no ip classless
access-list 1 permit 10.1.0.5
route-map takeserial permit 10 *step 2
match ip address 1 *step 3
set interface serial0 *step 4
!
line con 0
line aux 0
line vty 0 4
login
!
end
now we will ping 10.4.0.2 from workstaton a:
router_c#debug ip policy
policy routing debugging is on
router_c#
ip: s=10.1.0.5 (ethernet1), d=10.4.0.2,
len 74, policy match
ip: route map takeserial, item 10,
permit
ip: s=10.1.0.5 (ethernet1),
d=10.4.0.2 (serial0),
len 74, policy routed
ip: ethernet1 to serial0 10.4.0.2
ip: s=10.1.0.5 (ethernet1), d=10.4.0.2,
len 74, policy match
ip: route map takeserial, item 10,
permit
ip: s=10.1.0.5 (ethernet1),
d=10.4.0.2 (serial0),
len 74, policy routed
ip: ethernet1 to serial0 10.4.0.2
ip: s=10.1.0.5 (ethernet1), d=10.4.0.2,
len 74, policy match
ip: route map takeserial, item 10,
permit
ip: s=10.1.0.5 (ethernet1),
d=10.4.0.2 (serial0),
len 74, policy routed
ip: ethernet1 to serial0 10.4.0.2
ip: s=10.1.0.5 (ethernet1), d=10.4.0.2,
len 74, policy match
ip: route map takeserial, item 10,
permit
ip: s=10.1.0.5 (ethernet1),
d=10.4.0.2 (serial0),
len 74, policy routed
ip: ethernet1 to serial0 10.4.0.2
本文来源:https://shitiku.jxxyjl.com/sikezhidaojiaoliu/50538.html
-
cisco 认证_我的CISCO认证学习笔记总结详细阅读
第1章 故障处理方法 一、网络的复杂性 一般网络包括路由、拨号、交换、视频、wan(isdn、帧中继、atm、)、lan、vlan、 二、故障处理模型 1、 界定问题(define the problem) 详细而精确地描述故障的症状和潜在的原因...
-
思科认证工程师|思科认证的36个热门考点详细阅读
1 enterprise campus包括四部分:campus infrastructure; network management; server farm; edge distribution modules。 2 layer 3 forwarding engine 的两张重要的表:fib...
-
[cisco 网络安全]Cisco指导:网络安全的七大误解详细阅读
许多人对于自己的数据和网络目前有一种虚假的安全感;在边界安装了防火墙、在桌面上安装了防病毒和防间谍软件工具、使用加密技术发送和保存数据;此外,微软及各大安全公司不断增强安全工具和补丁程序似乎可以松口气了,但果真如此吗? 以下是有关安全的七大误解,不妨看看你的数据是否有你想象中的那么安全。误解...
-
[锐捷交换机密码恢复]思科交换机密码恢复方法介绍详细阅读
交换机是网络常用设备之一,也是网络必备设备之一,作为网络的基础构件,它的安全性着实成为许多工程师及网管人员的首要关注点。 交换机在单位局域网中是必须使用的网络设备。 本人工作单位局域网中使用了15台cisco catalyst2950交换机。管理交换机是网络管理员的重要职责,为了提高...
-
【交换机snmptrap配置监控】CiscoMDS9000交换机配置、监控和排障详细阅读
简介 cisco fabric manager是一种基于web、易于使用的响应性应用,能够用集成式方法实现交换机和网络管理,从而简化存储局域网(san)中cisco mds 9000系列交换机的管理。cisco fabric manager能够为存储管理员提供网络级管理功能,包括识别、多交换机配置、...
-
dhcp故障转移|解读DHCP故障,提升网络运行效率之一详细阅读
在规模较大的局域网中,工作站的ip地址通常都是从dhcp服务器中动态获取得到的,这样可以有效地节省ip地址资源;不过在与dhcp服务器长期接触的过程中,我们或许会遇到各种与dhcp服务有关的网络故障,这些故障极大地影响了局域网网络的运行效率。有鉴于此,本文下面就对几则常见的与dhcp...
-
沃尔夫ccie实验室_CCIE实验室考试指南(4)详细阅读
lab 04 - time protocol using the diagram below configure network time protocol send_ntp will provide time to receive_ntp use your curre...
-
沃尔夫ccie实验室|CCIE实验室考试指南(3)详细阅读
lab 03 -frame relay and ipx tunneling (gre)scenario:given the following diagram, configure ipx on the ethernet links ofrouter_a and router_c only pro...
-
【ccie高级网络工程师】CCIE高手修炼秘诀之“独孤九剑”详细阅读
在80386的电脑上有一个叫笑傲江湖的游戏,国产的;剑宗的风清扬使出9招剑式,威力无比,号称独孤九剑,令狐冲练了之后,武功迅速大增;气宗的岳不群练了数30年的神功,其武功确是十分地烂。这跟我们学习ccie和互联网技术是相通的,我们的学员,自从来了我们实验室,便逐渐抛弃了练神功的修炼方法,专心练起了独...
-
[ccie学什么]CCIE的学习方法和能力定位之经验谈详细阅读
今天凌晨一点,踢完球回到实验室,下午要讲mpls,虽然已经很熟悉,但还是想看看有没有什么新思路,所以又作了一下课程准备,两点的时候准备回去休息了,去np课室巡查了一下,发现movie-time还没结束,最后排有个学员正看得津津有味,他刚才跟我们一起踢得很累,本应该早早休息,准备明天的实...