1、实验6配置静态路由和缺省路由实验 6 配置静态路由和缺省路由学习目标掌握静态路由的配置方法掌握测试静态路由连通性的方法掌握通过配置缺省路由实现本地网络与外部网络间的访问掌握静态备份路由的配置方法拓扑图图4.1 静态路由和缺省路由实验拓扑图华为保密信息，XX禁止扩散 第62页场景您是公司的网络管理员。现在公司有一个总部与两个分支机构。其中R1为总部路由器，R2、R3为分支机构，总部与分支机构间通过以太网实现互连，且当前公司网络中没有配置任何路由协议。由于网络的规模比较小，您可以配置通过静态路由和缺省路由来实现网络互通。IP编址信息如拓扑图所示。操作步骤步骤一 基础配置和 IP 编址在R1、R2和
2、R3上配置设备名称和IP地址。system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R1R1interface GigabitEthernet 0/0/0R1-GigabitEthernet0/0/0ip address 10.0.13.1 24R1-GigabitEthernet0/0/0quitR1interface GigabitEthernet 0/0/1R1-GigabitEthernet0/0/1ip address 10.0.12.1 24R1-GigabitEthernet0/0/1qu
3、itR1interface LoopBack 0R1-LoopBack0ip address 10.0.1.1 24执行display current-configuration命令，检查配置情况。display ip interface briefInterfaceIP Address/MaskPhysicalProtocol.output omit.GigabitEthernet0/0/010.0.13.1/24upup华为保密信息，XX禁止扩散第63页GigabitEthernet0/0/110.0.12.1/24upupGigabitEthernet0/0/2unassignedupd
4、ownLoopBack010.0.1.1/24upup(s).output omit.system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R2R2interface GigabitEthernet 0/0/1R2-GigabitEthernet0/0/1ip address 10.0.12.2 24R2-GigabitEthernet0/0/1quitR2interface GigabitEthernet0/0/2R2-GigabitEthernet0/0/2ip add 10.0.23.2 24R2
5、-GigabitEthernet0/0/2quitR2interface LoopBack0R2-LoopBack0ip address 10.0.2.2 24display ip interface briefInterfaceIP Address/MaskPhysicalProtocol.output omit.GigabitEthernet0/0/0unassignedupdownGigabitEthernet0/0/110.0.12.2/24upupGigabitEthernet0/0/210.0.23.2/24upupLoopBack010.0.2.2/24upup(s).outpu
6、t omit.system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R3华为保密信息，XX禁止扩散第64页R3interface GigabitEthernet 0/0/0R3-GigabitEthernet0/0/0ip address 10.0.13.3 24R3-GigabitEthernet0/0/0quitR3interface GigabitEthernet0/0/2R3-GigabitEthernet0/0/2ip address 10.0.23.3 24R3-GigabitEtherne
7、t0/0/2quitR3interface LoopBack 0R3-LoopBack0ip address 10.0.3.3 24display ip interface briefInterfaceIP Address/MaskPhysical Protocoloutput omit.GigabitEthernet0/0/010.0.13.3/24upupGigabitEthernet0/0/1unassignedupdownGigabitEthernet0/0/210.0.23.3/24upupLoopBack010.0.3.3/24upup(s).output omit.执行ping命
8、令，检测R1与其它设备间的连通性。ping 10.0.12.2PING 10.0.12.2: 56 data bytes, press CTRL_C to breakReply from 10.0.12.2: bytes=56 Sequence=1 ttl=255 time=30 msReply from 10.0.12.2: bytes=56 Sequence=2 ttl=255 time=30 msReply from 10.0.12.2: bytes=56 Sequence=3 ttl=255 time=30 msReply from 10.0.12.2: bytes=56 Sequen
9、ce=4 ttl=255 time=30 msReply from 10.0.12.2: bytes=56 Sequence=5 ttl=255 time=30 ms- 10.0.12.2 ping statistics -5 packet(s) transmitted华为保密信息，XX禁止扩散 第65页5 packet(s) received0.00% packet lossround-trip min/avg/max = 30/30/30 msping 10.0.13.3PING 10.0.13.2: 56 data bytes, press CTRL_C to breakReply fr
10、om 10.0.13.3: bytes=56 Sequence=1 ttl=255 time=6 msReply from 10.0.13.3: bytes=56 Sequence=2 ttl=255 time=2 msReply from 10.0.13.3: bytes=56 Sequence=3 ttl=255 time=2 msReply from 10.0.13.3: bytes=56 Sequence=4 ttl=255 time=2 msReply from 10.0.13.3: bytes=56 Sequence=5 ttl=255 time=2 ms- 10.0.13.3 p
11、ing statistics -5 packet(s) transmitted5 packet(s) received0.00% packet lossround-trip min/avg/max = 2/2/6 ms执行ping命令，检测R2与其它设备间的连通性。ping 10.0.23.3PING 10.0.23.3: 56 data bytes, press CTRL_C to breakReply from 10.0.23.3: bytes=56 Sequence=1 ttl=255 time=31 msReply from 10.0.23.3: bytes=56 Sequence=2
12、 ttl=255 time=31 msReply from 10.0.23.3: bytes=56 Sequence=3 ttl=255 time=41 msReply from 10.0.23.3: bytes=56 Sequence=4 ttl=255 time=31 msReply from 10.0.23.3: bytes=56 Sequence=5 ttl=255 time=41 ms- 10.0.23.3 ping statistics -5 packet(s) transmitted5 packet(s) received华为保密信息，XX禁止扩散 第66页0.00% packe
13、t lossround-trip min/avg/max = 31/35/41 ms步骤二 测试R2 到目的网络10.0.13.0/24、10.0.3.0/24 的连通性ping 10.0.13.3PING 10.0.13.3: 56 data bytes, press CTRL_C to breakRequest time outRequest time outRequest time outRequest time outRequest time out- 10.0.13.3 ping statistics -5 packet(s) transmitted0 packet(s) recei
14、ved100.00% packet lossping 10.0.3.3PING 10.0.3.3: 56 data bytes, press CTRL_C to breakRequest time outRequest time outRequest time outRequest time outRequest time out- 10.0.3.3 ping statistics -5 packet(s) transmitted0 packet(s) received100.00% packet loss华为保密信息，XX禁止扩散 第67页R2如果要与10.0.3.0/24网络通信，需要R2
15、上有去往该网段的路由信息，并且R3上也需要有到R2相应接口所在IP网段的路由信息。上述检测结果表明，R2不能与10.0.3.3和10.0.13.3网络通信。执行display ip routing-table命令，查看R2上的路由表。可以发现路由表中没有到这两个网段的路由信息。display ip routing-tableRoute Flags: R - relay, D - download to fib-Routing Tables: PublicDestinations : 13Routes : 13Destination/MaskProtoPreCost Flags NextHopI
16、nterface10.0.2.0/24Direct00D10.0.2.2LoopBack010.0.2.2/32Direct00D127.0.0.1LoopBack010.0.2.255/32Direct00D127.0.0.1LoopBack010.0.12.0/24Direct00D10.0.12.2GigabitEthernet0/0/110.0.12.2/32Direct00D127.0.0.1GigabitEthernet0/0/110.0.12.255/32Direct00D127.0.0.1GigabitEthernet0/0/110.0.23.0/24Direct00D10.0
17、.23.2GigabitEthernet0/0/210.0.23.2/32Direct00D127.0.0.1GigabitEthernet0/0/210.0.23.255/32Direct00D127.0.0.1GigabitEthernet0/0/2127.0.0.0/8Direct00D127.0.0.1InLoopBack0127.0.0.1/32Direct00D127.0.0.1InLoopBack0127.255.255.255/32Direct00D127.0.0.1InLoopBack0255.255.255.255/32Direct00D127.0.0.1 InLoopBa
18、ck0步骤三在 R2 上配置静态路由配置目的地址为10.0.13.0/24和10.0.3.0/24的静态路由，路由的下一跳配置为R3的G0/0/0接口IP地址10.0.23.3。默认静态路由优先级为60，无需额外配置路由优先级信息。R2ip route-static 10.0.13.0 24 10.0.23.3华为保密信息，XX禁止扩散 第68页R2ip route-static 10.0.3.0 24 10.0.23.3注意：在ip route-static命令中，24代表子网掩码长度，也可以写成完整的掩码形式如255.255.255.0。display ip routing-tableRo
19、ute Flags: R - relay, D - download to fib-Routing Tables: PublicDestinations : 15Routes : 15Destination/MaskProtoPre CostFlags NextHopInterface10.0.2.0/24Direct00D10.0.2.2LoopBack010.0.2.2/32Direct00D127.0.0.1LoopBack010.0.2.255/32Direct00D127.0.0.1LoopBack010.0.3.0/24Static600RD10.0.23.3GigabitEthe
20、rnet0/0/210.0.12.0/24Direct00D10.0.12.2GigabitEthernet0/0/110.0.12.2/32Direct00D127.0.0.1GigabitEthernet0/0/110.0.12.255/32Direct00D127.0.0.1GigabitEthernet0/0/110.0.13.0/24Static600RD10.0.23.3GigabitEthernet0/0/210.0.23.0/24Direct00D10.0.23.2GigabitEthernet0/0/210.0.23.2/32Direct00D127.0.0.1Gigabit
21、Ethernet0/0/210.0.23.255/32Direct00D127.0.0.1GigabitEthernet0/0/2127.0.0.0/8Direct00D127.0.0.1InLoopBack0127.0.0.1/32Direct00D127.0.0.1InLoopBack0127.255.255.255/32Direct00D127.0.0.1InLoopBack0255.255.255.255/32Direct00D127.0.0.1InLoopBack0华为保密信息，XX禁止扩散 第69页步骤四 配置备份静态路由R2与网络10.0.13.3和10.0.3.3之间交互的数据
22、通过R2与R3间的链路传输。如果R2和R3间的链路发生故障，R2将不能与网络10.0.13.3和10.0.3.3通信。但是根据拓扑图可以看出，当R2和R3间的链路发生故障时，R2还可以通过R1与R3通信。所以可以通过配置一条备份静态路由实现路由的冗余备份。正常情况下，备份静态路由不生效。当R2和R3间的链路发生故障时，才使用备份静态路由传输数据。配置备份静态路由时，需要修改备份静态路由的优先级，确保只有主链路故障时才使用备份路由。本任务中，需要将备份静态路由的优先级修改为80。R1ip route-static 10.0.3.0 24 10.0.13.3R2ip route-static 10
23、.0.13.0 255.255.255.0 10.0.12.1 preference 80 R2ip route-static 10.0.3.0 24 10.0.12.1 preference 80R3ip route-static 10.0.12.0 24 10.0.13.1步骤五 验证静态路由在R2的路由表中，查看当前的静态路由配置。display ip routing-tableRoute Flags: R - relay, D - download to fib-Routing Tables: PublicDestinations : 15Routes : 15Destination/
24、MaskProtoPreCostFlags NextHopInterface10.0.2.0/24Direct00D10.0.2.2LoopBack010.0.2.2/32Direct00D127.0.0.1LoopBack010.0.2.255/32Direct00D127.0.0.1LoopBack010.0.3.0/24Static600RD10.0.23.3GigabitEthernet0/0/210.0.12.0/24Direct00D10.0.12.2GigabitEthernet0/0/110.0.12.2/32Direct00D127.0.0.1 GigabitEthernet
25、0/0/1华为保密信息，XX禁止扩散第70页10.0.12.255/32Direct00D127.0.0.1 GigabitEthernet0/0/110.0.13.0/24Static600RD10.0.23.3 GigabitEthernet0/0/210.0.23.0/24Direct00D10.0.23.2 GigabitEthernet0/0/210.0.23.2/32Direct00D127.0.0.1 GigabitEthernet0/0/210.0.23.255/32Direct00D127.0.0.1 GigabitEthernet0/0/2127.0.0.0/8Direct
26、00D127.0.0.1 InLoopBack0127.0.0.1/32Direct00D127.0.0.1 InLoopBack0127.255.255.255/32Direct00D127.0.0.1 InLoopBack0255.255.255.255/32Direct00D127.0.0.1 InLoopBack0路由表中包含两条静态路由。其中，Protocol字段的值是Static，表明该路由是静态路由。Preference字段的值是60，表明该路由使用的是默认优先级。当R2和R3之间链路正常时，R2与网络10.0.13.3和10.0.3.3之间交互的数据通过R2与R3间的链路传输。执行tracert命令，可以查看数据的传输路径。tracert
