利用distribute-list列表过滤路由
利用distribute-list列表过滤路由
实验目的：
1：熟练配置路由重分发
2：利用distribute-list过滤相应的路由
图片：
1：具体配置
R1
!
Enable
Conf t
hostname London
no ip domain-look
line cons 0
no exec-time
logg sync
!
interface Loopback0
ip address 172.16.1.1 255.255.255.0
!
interface Loopback1
ip address 172.16.2.1 255.255.255.0
!
interface Loopback2
ip address 172.16.3.1 255.255.255.0
!
interface Loopback3
ip address 172.16.4.1 255.255.255.0
!
interface Loopback4
ip address 172.16.5.1 255.255.255.0
!
interface Loopback5
ip address 172.16.6.1 255.255.255.0
!
interface Loopback6
ip address 172.16.7.1 255.255.255.0
!
interface Loopback7
ip address 172.16.8.1 255.255.255.0
!
Interface loopback 8
Ip add 1.1.1.1 255.255.255.255
!
interface Serial1
ip address 10.1.1.1 255.255.255.252
no sh
!
router ospf 1
router-id 1.1.1.1
network 0.0.0.0 255.255.255.255 area 0
!
end
按要求配置该路由器的各个接口，并启用ospf，最后把所有网络宣告进ospf中，且属于area0。
R13
!
Enable
Conf t
hostname Florence
no ip domain-look
line cons 0
no exec-time
logg sync
!
Int loo 0
Ip add 2.2.2.2 255.255.255.255
!
interface Serial1
ip address 10.1.1.2 255.255.255.252
clockrate 64000
no sh
!
interface Serial0
ip address 10.1.1.6 255.255.255.252
clockrate 64000
no sh
!
router eigrp 50
no auto
network 10.1.1.6 0.0.0.0
redistribute ospf 1 metric 10000 100 255 1 1500(把ospf宣告进eigrp)
distribute-list 12 out ospf 1（定义哪些路由会被过滤）
auto-summary
!
router ospf 1
router-id 2.2.2.2
network 10.1.1.2 0.0.0.0 area 0
redistribute eigrp 50 subnets（把eigrp重分发进ospf）
distribute-list 11 out eigrp 50 (对向eigrp发送的路由做过滤)
!
access-list 11 permit 192.168.1.0 0.0.0.255（允许哪些路由被公布给eigrp）
access-list 11 permit 192.168.3.0 0.0.0.255
access-list 11 permit 192.168.5.0 0.0.0.255
access-list 11 permit 192.168.7.0 0.0.0.255
access-list 12 deny 172.16.2.0 0.0.0.255（阻止哪些路由被公布出去）
access-list 12 deny 172.16.4.0 0.0.0.255
access-list 12 deny 172.16.6.0 0.0.0.255
access-list 12 deny 172.16.8.0 0.0.0.255
access-list 12 permit any
!
End
按要求配置该路由器的各个接口，并起用eigrp和ospf，把相应的网络宣告进ospf的area0和eigrp中，还分别在eigrp和ospf进程下用distribute-list过滤了默些路由，自己查看路由表和acl表，判断哪些路由被阻止，哪些被允许宣告出去。
R3
!
Enable
Conf t
hostname Denver
no ip domain-lookup
line cons 0
no exec-time
logg sync
!
interface Loopback0
ip address 192.168.1.1 255.255.255.0
!
interface Loopback1
ip address 192.168.2.1 255.255.255.0
!
interface Loopback2
ip address 192.168.3.1 255.255.255.0
!
interface Loopback3
ip address 192.168.4.1 255.255.255.0
!
interface Loopback4
ip address 192.168.5.1 255.255.255.0
interface Loopback5
ip address 192.168.6.1 255.255.255.0
!
interface Loopback6
ip address 192.168.7.1 255.255.255.0
!
interface Loopback7
ip address 192.168.8.1 255.255.255.0
!
interface Serial1
ip address 10.1.1.5 255.255.255.252
no sh
!
router eigrp 50
no auto-summary
network 0.0.0.0
!
end
按要求配置该路由器的各个接口，并起用eigrp，把所有的接口宣告进eigrp。
1：仔细查看路由表规定的路由是否被过滤了
2：思考acl如何只用1条命令，做到奇偶过滤。