Cisco高级路由综合练习题(ccnp)参考答案
- 1、下载文档前请自行甄别文档内容的完整性,平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益,请联系客服反馈,我们会尽快为您处理(人工客服工作时间:9:00-18:30)。
(1)按照要求配置路由器各个端口的IP地址,保证直连链路通。
(2)配置OSPF路由协议,保证OSPF各区域路由正常;
①将区域2配置成nssa区域;
R2:area 2 nssa no-sunmmary
R4:area 2 nssa
②区域0需要MD5认证,密码为cisco;区域2需要简单口令认证,密码ccna R1:
router ospf 1
area 0 authentication message-digest
int s0/0
ip ospf message-digest-key 1 md5 cisco
int e1/0
ip ospf message-digest-key 1 md5 cisco
R2:
router ospf 1
area 0 authentication message-digest
int s0/0
ip ospf message-digest-key 1 md5 cisco
int e1/0
ip ospf message-digest-key 1 md5 cisco
exit
int s0/2
ip ospf authentication
ip ospf authentication-key ccna
R4:
int s0/2
ip ospf authentication
ip ospf authentication-key ccna
③R1的s0/0的hello interval 设置为5秒,dead-interval设置为20秒
int s0/0
ip ospf hell-interval 5
ip ospf dead-interval 20
④控制DR选举,使得R2没有机会成为DR.
R2:
int e1/0
ip ospf priority 0
(3)配置RIP V2路由协议,KEYCHAIN名字为CCIE,路由器R1和R5采用MD5验证,key的ID为1,密码为cisco,路由器R4和R6采用明文验证,密码是cisco。
R1:
router rip
version 2
network 192.15.1.0
network 1.1.1.0
no auto-summary
key chain CCIE
key 1
key-string cisco
exit
int e1/1
ip rip authentication key-chain CCIE
R5:
router rip
version 2
network 5.0.0.0
network 192.15.1.0
no auto-summary
key chain CCIE
key 1
key-string cisco
exit
int e1/0
ip rip authentication key-chain CCIE
R4:
router rip
version 2
network 192.46.1.0
no auto-summary
exit
do sh ip route
key chain CCIE
key 1
key-string cisco
exit
int e1/0
ip rip authentication key-chain CCIE
R6:
router rip
version 2
network 192.46.1.0
network 6.6.6.6
no auto-summary
exit
key chain CCIE
key 1
key-string cisco
exit
int e1/0
ip rip authentication key-chain CCIE
(4)配置EIGRP路由协议,采用MD5验证,KEYCHAIN名字为EI,,key的ID为1,密码为cisco,并且关闭自动汇总。
R2:
key chain EI
key 1
key-string cisco
exit
router eigrp 1
network 192.23.1.2 0.0.0.0
no auto-summary
exit
int s0/1
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EI
R3:
router eigrp 1
no auto-summary
network 3.3.3.3 0.0.0.0
network 3.3.64.3 0.0.0.0
network 3.3.65.3 0.0.0.0
network 3.3.66.3 0.0.0.0
network 3.3.67.3 0.0.0.0
network 192.23.1.3 0.0.0.0
no auto-summary
exit
key chain EI
key 1
key-string cisco
exit
int s0/1
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EI
(5)R1和R5配置EBGP路由协议,用环回接口做更新源,通告R5的L50和L55。在路由器R1上配置BGP属性,使得:
A: L50的as-path属性追加300 400 500
B: L55的起源为EGP 600
C:L50的local-preference值为2000
R1:
Router bgp 100
bgp router-id 1.1.1.1
no synchronization
neighbor 5.5.5.5 remote-as 500
neighbor 5.5.5.5 ebgp-multihop 255
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 route-map BGP in
exit
access-list 50 permit 50.50.50.0
access-list 55 permit 55.55.55.0
route-map BGP permit 10
match ip address 50
set local-preference 2000
set as-path prepend 300 400 500
!
route-map BGP permit 20
match ip address 55
set origin egp 600
R5:
router bgp 500
no synchronization
bgp router-id 5.5.5.5
bgp log-neighbor-changes
network 50.50.50.0 mask 255.255.255.0
network 55.55.55.0 mask 255.255.255.0
neighbor 1.1.1.1 remote-as 100
neighbor 1.1.1.1 ebgp-multihop 255
neighbor 1.1.1.1 update-source Loopback0
no auto-summary
(6)在R1上向OSPF网络注入一条默认路由,并将OSPF网络重分布到BGP中,为了确保网络的