Страница 14 из 18
На маршрутизаторе r1 подняты два хоста и они достигают маршрутизатор r4 через интерфейс FastEthernet0/0, а нам нужно, чтобы они приходили, через FastEthernet0/1.
r4#show ip route eigrp
10.0.0.0/8 is variably subnetted, 10 subnets, 2 masks
D 10.0.10.1/32 [90/435200] via 10.0.34.3, 00:01:35, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:01:35, FastEthernet0/1
D 10.0.12.0/24 [90/307200] via 10.0.24.2, 00:18:11, FastEthernet0/1
D 10.0.13.0/24 [90/307200] via 10.0.34.3, 00:18:11, FastEthernet0/0
10.2.2.2/32 [90/409600] via 10.0.24.2, 00:18:11, FastEthernet0/1
D 10.3.3.3/32 [90/409600] via 10.0.34.3, 00:18:17, FastEthernet0/0
D 10.1.1.1/32 [90/435200] via 10.0.34.3, 00:18:11, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:18:11, FastEthernet0/1
D 10.0.100.1/32 [90/435200] via 10.0.34.3, 00:01:28, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:01:28, FastEthernet0/1
Создаем простой лист доступа и ставим запрет на данные хосты, после этого применяем данный лист доступа как показано ниже:
r4(config)#access-list 1 deny 10.0.10.0 0.0.0.255
r4(config)#access-list 1 deny 10.0.100.0 0.0.0.255
r4(config)#access-list 1 permit any
r4(config)#router eigrp 1
r4(config-router)#distribute-list 1 in FastEthernet 0/0
В результате проверки получаем нужный нам результат.
r4#show ip route eigrp
10.0.0.0/8 is variably subnetted, 10 subnets, 2 masks
D 10.0.10.1/32 [90/435200] via 10.0.24.2, 00:00:32, FastEthernet0/1
D 10.0.12.0/24 [90/307200] via 10.0.24.2, 00:21:22, FastEthernet0/1
D 10.0.13.0/24 [90/307200] via 10.0.34.3, 00:21:22, FastEthernet0/0
D 10.2.2.2/32 [90/409600] via 10.0.24.2, 00:21:22, FastEthernet0/1
D 10.3.3.3/32 [90/409600] via 10.0.34.3, 00:21:29, FastEthernet0/0
D 10.1.1.1/32 [90/435200] via 10.0.34.3, 00:21:22, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:21:22, FastEthernet0/1
D 10.0.100.1/32 [90/435200] via 10.0.24.2, 00:00:32, FastEthernet0/1
EIGRP фильтрация с расширенным листом доступа (Filtering with Extended ACL)
Схема аналогична.
Для начало смотрим как приходят данные сети:
r4#show ip route eigrp
10.0.0.0/8 is variably subnetted, 10 subnets, 2 masks
D 10.0.10.1/32 [90/435200] via 10.0.34.3, 00:00:30, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:00:30, FastEthernet0/1
D 10.0.12.0/24 [90/307200] via 10.0.24.2, 00:24:23, FastEthernet0/1
D 10.0.13.0/24 [90/307200] via 10.0.34.3, 00:24:23, FastEthernet0/0
D 10.2.2.2/32 [90/409600] via 10.0.24.2, 00:24:23, FastEthernet0/1
D 10.3.3.3/32 [90/409600] via 10.0.34.3, 00:24:30, FastEthernet0/0
D 10.1.1.1/32 [90/435200] via 10.0.34.3, 00:24:23, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:24:23, FastEthernet0/1
D 10.0.100.1/32 [90/435200] via 10.0.34.3, 00:00:30, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:00:30, FastEthernet0/1
Создаем и применяем расширенный лист доступа.
r4(config)#access-list 100 deny ip host 10.0.10.1 host 10.4.4.4
r4(config)#access-list 100 deny ip host 10.0.100.1 host 10.4.4.4
r4(config)#access-list 100 permit ip any any
r4(config)#router eigrp 1
r4(config-router)#distribute-list 100 in FastEthernet 0/0
И получаем нужный нам результат.
r4#show ip route eigrp
10.0.0.0/8 is variably subnetted, 10 subnets, 2 masks
D 10.0.10.1/32 [90/435200] via 10.0.24.2, 00:01:17, FastEthernet0/1
D 10.0.12.0/24 [90/307200] via 10.0.24.2, 00:01:17, FastEthernet0/1
D 10.0.13.0/24 [90/332800] via 10.0.24.2, 00:01:17, FastEthernet0/1
D 10.2.2.2/32 [90/409600] via 10.0.24.2, 00:04:09, FastEthernet0/1
D 10.3.3.3/32 [90/460800] via 10.0.24.2, 00:01:17, FastEthernet0/1
D 10.1.1.1/32 [90/435200] via 10.0.24.2, 00:01:17, FastEthernet0/1
D 10.0.100.1/32 [90/435200] via 10.0.24.2, 00:01:17, FastEthernet0/1
EIGRP
фильтрация
с
префикс
листом
(Filtering with Prefix-List)
В данном примере, мы запрещаем распространение адреса 10.4.4.4 и не пускаем на маршрутизатор r4 адрес 10.1.1.1.
r4(config)#ip prefix-list r4_out seq 5 deny 10.4.4.4/32
r4(config)#ip prefix-list r4_out seq 10 permit 0.0.0.0/0 le 32
r4(config)# ip prefix-list r4_in seq 5 deny 10.1.1.1/32
r4(config)# ip prefix-list r4_in seq 10 permit 0.0.0.0/0 le 32
r4(config)#router eigrp 1
r4(config-router)#distribute-list prefix r4_out out
r4(config-router)#distribute-list prefix r4_in in
В результате проверки, мы видим, что на маршрутизаторах r1 и r2 нет адреса 10.4.4.4, а адрес 10.1.1.1 присутствует на маршрутизаторе r2, а на r4 его нет.
r1#show ip route eigrp
10.0.0.0/8 is variably subnetted, 9 subnets, 2 masks
D 10.2.2.2/32 [90/409600] via 10.0.12.2, 01:16:56, FastEthernet0/0
D 10.3.3.3/32 [90/409600] via 10.0.13.3, 01:15:17, FastEthernet0/1
D 10.0.24.0/24 [90/307200] via 10.0.12.2, 00:43:44, FastEthernet0/0
D 10.0.34.0/24 [90/307200] via 10.0.13.3, 00:43:44, FastEthernet0/1
r2#show ip route eigrp
10.0.0.0/8 is variably subnetted, 9 subnets, 2 masks
D 10.0.10.1/32 [90/409600] via 10.0.12.1, 00:46:20, FastEthernet0/0
D 10.0.13.0/24 [90/307200] via 10.0.12.1, 00:26:53, FastEthernet0/0
D 10.3.3.3/32 [90/435200] via 10.0.24.4, 00:26:53, FastEthernet0/1
[90/435200] via 10.0.12.1, 00:26:53, FastEthernet0/0
D 10.1.1.1/32 [90/409600] via 10.0.12.1, 01:18:16, FastEthernet0/0
D 10.0.34.0/24 [90/307200] via 10.0.24.4, 00:48:05, FastEthernet0/1
D 10.0.100.1/32 [90/409600] via 10.0.12.1, 00:46:14, FastEthernet0/0
r4#show ip route eigrp
10.0.0.0/8 is variably subnetted, 9 subnets, 2 masks
D 10.0.10.1/32 [90/435200] via 10.0.34.3, 00:30:33, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:30:33, FastEthernet0/1
D 10.0.12.0/24 [90/307200] via 10.0.24.2, 00:30:33, FastEthernet0/1
D 10.0.13.0/24 [90/307200] via 10.0.34.3, 00:30:33, FastEthernet0/0
D 10.2.2.2/32 [90/409600] via 10.0.24.2, 00:51:45, FastEthernet0/1
D 10.3.3.3/32 [90/409600] via 10.0.34.3, 00:30:33, FastEthernet0/0
D 10.0.100.1/32 [90/435200] via 10.0.34.3, 00:30:33, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:30:33, FastEthernet0/1
EIGRP
фильтрация
с
картой
маршрутов
(Filtering with Route-Map)
В данном примере мы перераспределяем в EIGRP два адреса, которым присваиваем им соответствующие метки, в дальнейшем по меткам их можно будет перераспределять.
r1(config)#route-map co
r1(config-route-map)#match interface loopback10
r1(config-route-map)#set tag 10
r1(config-route-map)#route-map co
r1(config-route-map)#match interface loopback100
r1(config-route-map)#set tag 100
r1(config-route-map)#exit
r1(config)#router eigrp 1
r1(config-router)#redistribute co
Первая команда показывает, что данные маршруты пришли как внешние, две другие присвоенные метки. Проверка осуществляется командами:
r4#show ip route eigrp
10.0.0.0/8 is variably subnetted, 10 subnets, 2 masks
D EX 10.0.10.1/32 [170/435200] via 10.0.34.3, 00:00:30,FastEthernet0/0
[170/435200] via 10.0.24.2, 00:00:30, FastEthernet0/1
D 10.0.12.0/24 [90/307200] via 10.0.24.2, 01:11:03, FastEthernet0/1
D 10.0.13.0/24 [90/307200] via 10.0.34.3, 01:11:03, FastEthernet0/0
D 10.2.2.2/32 [90/409600] via 10.0.24.2, 01:32:15, FastEthernet0/1
D 10.3.3.3/32 [90/409600] via 10.0.34.3, 01:11:03, FastEthernet0/0
D 10.1.1.1/32 [90/435200] via 10.0.34.3, 00:19:50, FastEthernet0/0
[90/435200] via 10.0.24.2, 00:19:50, FastEthernet0/1
D EX 10.0.100.1/32 [170/435200] via 10.0.34.3,00:00:30,FastEthernet0/0