跳到主要內容

RIP V2 小記

RIP


1. RIP 只支援FLSM(SLSM),不支援VLSM,但可以切割子網段,以介面上的Subnet Mask判斷,所以RIP宣告的時候,沒有宣告Subnet Mask

2. RIP V2 支援不連續網路!

3. 只對直接相連的介面丟出Routing Table

4.RIP 支援自動彙整(關不掉),不支援手動彙整 ,RIP V2支援自動彙整/手動彙整


假設有一Router有兩個介面

FA 0   ==> IP  10.2.2.2/16
FA 1   ==> IP  10.1.1.1/16

r1(config)#router rip 
r1(config-router)#version 2
r1(config-router)#network 10.0.0.0
*在正確的介面啟動RIP
*介面有3個10.0.0.0的網段只要打1次,若是有2個192.168.x.0的網段,要打2次

r1(config-router)#no auto-summary
*有不連續網路要關掉 auto-summary


檢查

r1#show ip protocols 
Routing Protocol is "rip"
Sending updates every 30 seconds, next due in 7 seconds
Invalid after 180 seconds, hold down 180, flushed after 240
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Redistributing: rip
Default version control: send version 2, receive 2
  Interface             Send  Recv  Triggered RIP  Key-chain
  FastEthernet0/0       2     2     
Automatic network summarization is not in effect (有下no auto-summary)
Maximum path: 4
Routing for Networks:
10.0.0.0
Passive Interface(s):
Routing Information Sources:
Gateway         Distance      Last Update
10.1.1.2             120      00:00:04
Distance: (default is 120)


*如果還要看更清楚的訊息,可以下 debug ip rip
*AD值
直接連接 0
靜態路由 1
EIGRP 90
OSPF 110
RIP(V1,V2) 120
其他介紹請參考這裡



Static Route

RO13(config)#ip route 10.0.0.0 255.255.255.0 192.168.1.254
RO13(config)#ip route 172.16.1.0 255.255.255.0 192.168.2.254
RO13(config)#ip route 0.0.0.0 0.0.0.0 192.168.3.254 (Default Route)

留言

這個網誌中的熱門文章

使用Cisco L3 Switch做VLAN的Routing

目標: 讓VLAN100與VLAN200的電腦透過L3 Swtich做VLAN的Routing,並且可以互相存取資源與上網,另外再使用Windows Server 2012配發VLAN100,VLAN200的IP Firewall: 使用ASUS AP當Firewall,並設兩條Static Route Switch: Core Switch為Cisco 3750切VLAN 10,VLAN100,VLAN200,VLAN10為預設的VLAN,VLAN100為Sales,VLAN200為RD Edge Switch為Cisco 3750與2950,其中2950為VLAN100,3750為VLAN200,如果要By Port切VLAN也可以,這裡只是為了方便說明,所以Edge Switch都直接設為單一VLAN Core Switch的設定 原本我只想Show Running-config其中比較重要的設定,後來想想還是全部列出,用紅色標記重要的設定 Gi 1/0/1接2950 Gi 1/0/2接3750 Gi 1/0/24接Router Core-3750#show running-config Building configuration... Current configuration : 2436 bytes ! version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Core-3750 ! boot-start-marker boot-end-marker ! ! ! ! no aaa new-model switch 1 provision ws-c3750g-24t system mtu routing 1546 ip routing no ip domain-lookup ! ! ! ! ! ! ! ! spanning-tree mode pvst spanning-tree portfas...

Cisco Switch 發生Loopback

User告知網路無法使用,看了Switch的狀況後,發現那個Port的狀態是Error Disable,接著又看了Switch的log Feb  8 12:14:14 TW: %DHCP_SNOOPING-5-DHCP_SNOOPING_UNTRUSTED_PORT: DHCP_SNOOPING drop message on untrusted port, message type: DHCPNAK, MAC sa: 2c56.dc86.xxxx Feb  8 12:15:49 TW: %DHCP_SNOOPING-5-DHCP_SNOOPING_UNTRUSTED_PORT: DHCP_SNOOPING drop message on untrusted port, message type: DHCPNAK, MAC sa: 2c56.dc86.xxxx Feb  8 12:18:00 TW: %ETHCNTR-3-LOOP_BACK_DETECTED: Keepalive packet loop-back detected on FastEthernet0/10. Feb  8 12:18:00 TW: %PM-4-ERR_DISABLE: loopback error detected on Fa0/10, putting Fa0/10 in err-disable state Feb  8 12:18:01 TW: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/10, changed state to down Feb  8 12:18:02 TW: %LINK-3-UPDOWN: Interface FastEthernet0/10, changed state to down 應該是User私接設備,除了造成Loopback之外,又在隨便發放IP....... 不過因為那個User比較特殊,先教育了一下之後,再把那個Port shutdown , no shutdown,接著把Recovery設了上去,下次如果再遇到相同狀況,10分鐘後會自動恢復 xxx...

2台 Vigor 2920建立 LAN To LAN VPN (IPsec)

我有兩台Vigor 2920,環境如下: Vigor B 撥出 LAN:192.168.1.0/24 Vigor A 撥入 LAN:172.16.1.0/24 設定如下: Vigor B設定 Vigor A設定 詳細設定請參考官網 http://www.draytek.com/index.php?option=com_k2&view=item&id=2666&Itemid=264&lang=tw