一站式做网站技术,常州网上教科院,企业建站的目的是什么,手机端网站整站下载[原创]Route-map(一) (2009-12-05 14:01:59)转载 标签#xff1a; route-map 路由图 路由映射 cisco 杂谈 分类#xff1a; Router #xff1c;Route-Map#xff1e; 也叫路由图或者路由映射表#xff0c;是对路由进行加工处理的工具。 1、route-map可以调用ACL或prefix抓… [原创]Route-map(一) (2009-12-05 14:01:59)转载 标签 route-map 路由图 路由映射 cisco 杂谈 分类 Router Route-Map 也叫路由图或者路由映射表是对路由进行加工处理的工具。 1、route-map可以调用ACL或prefix抓出一部分路由进行加工处理 2、每一个route-map可以有多条语句每条语句都有一个序号 3、每条语句都有两种动作match 和 set 4、每条语句对抓出来的路由都有两种处理方式permit 或 deny route-map的使用分三步操作 1、定义ACL或prefix抓出路由 2、定义route-map说明对匹配的路由所采取的处理方式 3、调用route-map //route-map只是一个策略的工具不调用是没有作用的. route-map的匹配逻辑 route-map NAME permit 10 match ip address x y z ------- OR match ip address a match ip address b AND match ip address c ↓ 如不写match/set,默认 match any set nothing 案例1:路由映射和重新分配 要求在R1上将EIGRP重分布进OSPF其中172.16.1.0路由要以OE1重分布172.16.2.0路由重分布时metric值要改为100172.16.3.0的路由不允许重分布其它路由不改动默认重分布在R3上的几个环回口只向R2重分发第三个八位组是奇数的路由 在还没有配置策略时R2和R3的路由表分别为: R2#sh ip ro ei 1.0.0.0/24 is subnetted, 1 subnets D EX 1.1.1.0 [170/2195456] via 12.1.1.1, 00:04:50, Serial1/1 3.0.0.0/32 is subnetted, 1 subnets D EX 3.3.3.3 [170/2195456] via 12.1.1.1, 00:04:50, Serial1/1 111.0.0.0/32 is subnetted, 9 subnets D EX 111.111.1.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 D EX 111.111.3.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 D EX 111.111.2.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 D EX 111.111.5.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 D EX 111.111.4.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 D EX 111.111.7.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 D EX 111.111.6.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 D EX 111.111.9.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 D EX 111.111.8.1 [170/2195456] via 12.1.1.1, 00:00:05, Serial1/1 13.0.0.0/24 is subnetted, 1 subnets D EX 13.1.1.0 [170/2195456] via 12.1.1.1, 00:04:50, Serial1/1 R3#sh ip ro os 1.0.0.0/32 is subnetted, 1 subnets O 1.1.1.1 [110/65] via 13.1.1.1, 00:00:31, Serial1/0 2.0.0.0/24 is subnetted, 1 subnets O E2 2.2.2.0 [110/20] via 13.1.1.1, 00:00:31, Serial1/0 172.16.0.0/24 is subnetted, 3 subnets O E2 172.16.1.0 [110/20] via 13.1.1.1, 00:00:31, Serial1/0 O E2 172.16.2.0 [110/20] via 13.1.1.1, 00:00:31, Serial1/0 O E2 172.16.3.0 [110/20] via 13.1.1.1, 00:00:31, Serial1/0 12.0.0.0/24 is subnetted, 1 subnets O E2 12.1.1.0 [110/20] via 13.1.1.1, 00:00:31, Serial1/0 此时在R1上做配置: R1#sh run | b r e router eigrp 100 redistribute ospf 100 metric 10000 100 1 255 1500 route-map ccie ! router ospf 100 redistribute eigrp 100 subnets route-map wolf ! access-list 1 permit 172.16.1.0 0.0.0.255 access-list 2 permit 172.16.2.0 0.0.0.255 access-list 3 permit 172.16.3.0 0.0.0.255 access-list 4 permit 111.111.1.1 access-list 4 permit 111.111.3.1 access-list 4 permit 111.111.5.1 access-list 4 permit 111.111.7.1 access-list 4 permit 111.111.9.1 access-list 4 permit 13.1.1.0 ! route-map ccie permit 10 match ip address 4 ! route-map wolf permit 10 match ip address 1 set metric-type type-1 ! route-map wolf permit 20 match ip address 2 set metric 100 ! route-map wolf deny 30 match ip address 3 ! route-map wolf permit 40 再来看一看R2和R3的路由表: R2#sh ip ro ei 111.0.0.0/32 is subnetted, 5 subnets D EX 111.111.1.1 [170/2195456] via 12.1.1.1, 00:02:15, Serial1/1 D EX 111.111.3.1 [170/2195456] via 12.1.1.1, 00:01:57, Serial1/1 D EX 111.111.5.1 [170/2195456] via 12.1.1.1, 00:01:56, Serial1/1 D EX 111.111.7.1 [170/2195456] via 12.1.1.1, 00:01:54, Serial1/1 D EX 111.111.9.1 [170/2195456] via 12.1.1.1, 00:01:52, Serial1/1 13.0.0.0/24 is subnetted, 1 subnets D EX 13.1.1.0 [170/2195456] via 12.1.1.1, 00:01:43, Serial1/1 R3#sh ip ro os 1.0.0.0/32 is subnetted, 1 subnets O 1.1.1.1 [110/65] via 13.1.1.1, 00:16:55, Serial1/0 2.0.0.0/24 is subnetted, 1 subnets O E2 2.2.2.0 [110/20] via 13.1.1.1, 00:16:55, Serial1/0 172.16.0.0/24 is subnetted, 2 subnets O E1 172.16.1.0 [110/84] via 13.1.1.1, 00:10:36, Serial1/0 O E2 172.16.2.0 [110/100] via 13.1.1.1, 00:10:36, Serial1/0 12.0.0.0/24 is subnetted, 1 subnets O E2 12.1.1.0 [110/20] via 13.1.1.1, 00:16:55, Serial1/0 看一看三台路由器的配置: R2的配置: R2#sh run | b r e router eigrp 100 network 2.2.2.2 0.0.0.0 network 12.1.1.2 0.0.0.0 network 172.16.0.0 no auto-summary R1的配置: R1#sh run | b r e router eigrp 100 redistribute ospf 100 metric 10000 100 1 255 1500 route-map ccie network 12.1.1.1 0.0.0.0 no auto-summary ! router ospf 100 router-id 1.1.1.1 log-adjacency-changes redistribute eigrp 100 subnets route-map wolf network 1.1.1.1 0.0.0.0 area 0 network 13.1.1.1 0.0.0.0 area 0 ! ip classless no ip http server ! ! access-list 1 permit 172.16.1.0 0.0.0.255 access-list 2 permit 172.16.2.0 0.0.0.255 access-list 3 permit 172.16.3.0 0.0.0.255 access-list 4 permit 111.111.1.1 access-list 4 permit 111.111.3.1 access-list 4 permit 111.111.5.1 access-list 4 permit 111.111.7.1 access-list 4 permit 111.111.9.1 access-list 4 permit 13.1.1.0 ! route-map ccie permit 10 match ip address 4 ! route-map wolf permit 10 match ip address 1 set metric-type type-1 ! route-map wolf permit 20 match ip address 2 set metric 100 ! route-map wolf deny 30 match ip address 3 ! route-map wolf permit 40 R3的配置: R3#sh run | b r o router ospf 100 router-id 3.3.3.3 log-adjacency-changes network 3.3.3.3 0.0.0.0 area 0 network 13.1.1.3 0.0.0.0 area 0 network 111.111.0.0 0.0.255.255 area 0 注意 ·在route-map的最后隐含了一条deny any的语句 ·如果不写一句空Route-map 去允许其它路由通过则没有匹配的路由直接被丢弃。 还可以在重分布直连的时候match一个接口直接写route-map就可以不用定义访问列表。 R1(config)#route-map WOLF permit 10 R1(config-route-map)#match interface e0 案例2:使用route-map打tag 作用可以对一些路由打上tag好让后面的路由器根据tag找出这些路由并进行相应的策略 如上图所示要求 1、在R3上将RIP重分布进OSPF 2、在R1上将OSPF重分布进EIGRP但不能将从RIP学到的路由带过去 可以用tag解决 1、在R3上将RIP重分布进OSPF时利用route-map打上tag标记 2、在R1上将OSPF重分布进EIGRP时找出打了tag标记的路由再deny掉就行了 现看一看没有配置策略时R2和R1的路由表: R2#sh ip ro ei 1.0.0.0/24 is subnetted, 1 subnets D EX 1.1.1.0 [170/2195456] via 12.1.1.1, 00:04:09, Serial1/1 3.0.0.0/32 is subnetted, 1 subnets D EX 3.3.3.3 [170/2195456] via 12.1.1.1, 00:04:09, Serial1/1 172.16.0.0/24 is subnetted, 3 subnets D EX 172.16.1.0 [170/2195456] via 12.1.1.1, 00:00:41, Serial1/1 D EX 172.16.2.0 [170/2195456] via 12.1.1.1, 00:00:32, Serial1/1 D EX 172.16.3.0 [170/2195456] via 12.1.1.1, 00:00:24, Serial1/1 13.0.0.0/24 is subnetted, 1 subnets D EX 13.1.1.0 [170/2195456] via 12.1.1.1, 00:04:09, Serial1/1 R1#sh ip ro os 3.0.0.0/32 is subnetted, 1 subnets O 3.3.3.3 [110/65] via 13.1.1.3, 00:00:37, Serial1/1 172.16.0.0/24 is subnetted, 3 subnets O E2 172.16.1.0 [110/20] via 13.1.1.3, 00:00:37, Serial1/1 O E2 172.16.2.0 [110/20] via 13.1.1.3, 00:00:37, Serial1/1 O E2 172.16.3.0 [110/20] via 13.1.1.3, 00:00:37, Serial1/1 R1#sh ip ro 172.16.1.0 Routing entry for 172.16.1.0/24 Known via ospf 100, distance 110, metric 20, type extern 2, forward metric 64 Redistributing via eigrp 100 Advertised by eigrp 100 metric 10000 100 1 255 1500 Last update from 13.1.1.3 on Serial1/1, 00:01:04 ago Routing Descriptor Blocks: * 13.1.1.3, from 3.3.3.3, 00:01:04 ago, via Serial1/1 Route metric is 20, traffic share count is 1 此时我们在3上做配置: R3# sh run | b r o router ospf 100 redistribute rip subnets route-map wolf ! route-map wolf permit 10 set tag 20 此时查看R2和R1的路由表: R1#sh ip ro 172.16.1.0 Routing entry for 172.16.1.0/24 Known via ospf 100, distance 110, metric 20 Tag 20, type extern 2, forward metric 64 Redistributing via eigrp 100 Advertised by eigrp 100 metric 10000 100 1 255 1500 Last update from 13.1.1.3 on Serial1/1, 00:00:33 ago Routing Descriptor Blocks: * 13.1.1.3, from 3.3.3.3, 00:00:33 ago, via Serial1/1 Route metric is 20, traffic share count is 1 R2#sh ip ro 172.16.1.0 Routing entry for 172.16.1.0/24 Known via eigrp 100, distance 170, metric 2195456 Tag 20, type external Redistributing via eigrp 100 Last update from 12.1.1.1 on Serial1/1, 00:02:15 ago Routing Descriptor Blocks: * 12.1.1.1, from 12.1.1.1, 00:02:15 ago, via Serial1/1 Route metric is 2195456, traffic share count is 1 Total delay is 21000 microseconds, minimum bandwidth is 1544 Kbit Reliability 1/255, minimum MTU 1500 bytes Loading 255/255, Hops 1 到了R1之后对打tag的路由丢弃在R1上做配置: R1#sh run | b r e router eigrp 100 redistribute ospf 100 metric 10000 100 1 255 1500 route-map ccnp ! route-map ccnp deny 10 match tag 20 ! route-map ccnp permit 20 此时再查看R2的路由表: R2#sh ip ro ei 1.0.0.0/24 is subnetted, 1 subnets D EX 1.1.1.0 [170/2195456] via 12.1.1.1, 00:01:27, Serial1/1 3.0.0.0/32 is subnetted, 1 subnets D EX 3.3.3.3 [170/2195456] via 12.1.1.1, 00:01:27, Serial1/1 13.0.0.0/24 is subnetted, 1 subnets D EX 13.1.1.0 [170/2195456] via 12.1.1.1, 00:01:27, Serial1/1 案例3:TCP/IP卷一实验之------路由策略 实验需求: 1: Configure policy routes for Router A in Figure 14-14 that forward packets from subnets 172.16.1.0/28 through 172.16.1.112/28 to Router D and forward packets from subnets 172.16.1.128/28 through 172.16.1.240/28 to Router E. 2: Configure policy routes for Router A in Figure 14-14 so that packets from subnets 172.16.1.64/28 through 172.16.1.112/28 are forwarded to Router D if they are received from Router C. If packets from the same subnets are received from Router B, forward them to Router E. All other packets should be forwarded normally. 3: Configure policy routes for Router A in Figure 14-14 that will forward any packets destined for subnets 172.16.1.0/28 through 172.16.1.240/28, sourced from an SMTP port, to Router C. Route any other UDP packets destined for the same subnets to Router B. No other packets should be forwarded to Routers C or B by either the policy routes or the normal routing protocol. 当初始配置完成后RB,RC,RD,RE的路由表分别为: RB: RB#sh ip ro os 172.16.0.0/16 is variably subnetted, 36 subnets, 3 masks O 172.16.1.178/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.162/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.146/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.130/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.242/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.226/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.210/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.194/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.50/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.34/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.14.16/30 [110/128] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.18/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.14.8/30 [110/128] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.14.12/30 [110/128] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.2/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.114/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.98/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.82/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 O 172.16.1.66/32 [110/129] via 172.16.14.6, 00:01:27, Serial0/0 RC: RC#sh ip ro os 172.16.0.0/16 is variably subnetted, 36 subnets, 3 masks O 172.16.1.177/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.161/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.145/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.129/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.241/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.225/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.209/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.193/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.49/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.33/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.14.16/30 [110/128] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.17/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.14.4/30 [110/128] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.1/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.14.12/30 [110/128] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.113/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.97/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.81/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 O 172.16.1.65/32 [110/129] via 172.16.14.10, 00:02:03, Serial0/1 RD: RD#sh ip ro os 172.16.0.0/16 is variably subnetted, 36 subnets, 2 masks O 172.16.1.177/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.178/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.161/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.162/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.145/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.146/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.129/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.130/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.241/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.242/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.225/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.226/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.209/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.210/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.193/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.194/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.49/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.50/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.33/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.34/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.17/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.1.18/32 [110/129] via 172.16.14.18, 00:02:08, Serial0/2 O 172.16.14.4/30 [110/128] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.14.8/30 [110/128] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.1/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.14.12/30 [110/128] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.2/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.113/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.114/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.97/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.98/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.81/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.82/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.65/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 O 172.16.1.66/32 [110/129] via 172.16.14.18, 00:02:28, Serial0/2 转载于:https://blog.51cto.com/rista/627489
