IS-IS網(wǎng)絡(luò)協(xié)議配置指南

1、IS-IS網(wǎng)絡(luò)協(xié)議配置指南技術(shù)創(chuàng)新，變革未來(lái)IS-IS是一種鏈路狀態(tài)型協(xié)議，其配置與OSPF有類似的地方。本章介紹了常用的IS-IS相關(guān)配置命令，如何配置IS-IS單區(qū)域、多區(qū)域，如何配置路由泄漏和驗(yàn)證，并在最后介紹如何使用命令來(lái)查看IS-IS的鄰居和LSDB。引入掌握IS-IS路由協(xié)議的基本配置掌握IS-IS路由協(xié)議的高級(jí)配置掌握IS-IS路由協(xié)議的顯示維護(hù)課程目標(biāo)學(xué)習(xí)完本課程，您應(yīng)該能夠：IS-IS 基本配置IS-IS 高級(jí)配置IS-IS 顯示和維護(hù)目錄IS-IS基本功能配置創(chuàng)建IS-IS進(jìn)程，并進(jìn)入IS-IS視圖配置IS-IS進(jìn)程的網(wǎng)絡(luò)實(shí)體名稱在指定接口上使能IS-IS進(jìn)程RTA isi

2、s process-id RTA network-entity netRTA-Ethernet0/0 isis enable process-idIS-IS路由器類型及接口鄰接關(guān)系配置配置IS-IS路由器類型配置IS-IS接口鄰接關(guān)系類型 RTA-isis-1 is-level level-1 | level-1-2 | level-2 RTA-Ethernet0/0 isis circuit-level level-1 | level-1-2 | level-2 IS-IS鏈路開銷配置配置IS-IS開銷值的類型使能自動(dòng)計(jì)算接口鏈路開銷值功能 RTA-isis-1 cost-style nar

3、row | wide | wide-compatible | compatible | narrow-compatible RTA-isis-1 auto-cost enable配置IS-IS接口的鏈路開銷值 RTA-Ethernet0/0 isis cost value level-1 | level-2 IS-IS單區(qū)域配置示例RTA isis 1RTA-isis-1 is-level level-1RTA-isis-1 network-entity 10.0001.0001.0001.00RTA-Ethernet0/1 isis enable 1RTB isis 1RTB-isis-1

4、is-level level-1RTB-isis-1 network-entity 10.0001.0001.0002.00RTB-Ethernet0/0 isis enable 1E0/1E0/0RTARTBArea 10L1L1多區(qū)域配置示例RTARTCRTBRTDArea 20Area 10Cost 5Cost 60RTA isis 1RTA-isis-1 network-entity 10.0001.0001.0001.00RTA-isis-1 is-level level-1RTA-Ethernet0/0 isis enable 1RTA-Ethernet0/0 isis cost

5、5RTA-Serial1/1 isis enable 1RTA-Serial1/1 isis cost 60E0/0S1/1S1/1E0/0E0/2E0/1E0/4E0/0RTB isis 1RTB-isis-1 network-entity 10.0001.0001.0002.00RTB-Serial1/1 isis enable 1RTB-Serial1/1 isis circuit-level level-1RTB-Ethernet0/2 isis enable 1RTB-Ethernet0/2 isis circuit-level level-2L1/L2L1L2L1/L2Area 2

6、0多區(qū)域配置示例（續(xù)）RTD isis 1RTD-isis-1 network-entity 20.0001.0001.0004.00RTD-isis-1 is-level level-2RTD-Ethernet0/0 isis enable 1RTD-Ethernet0/1 isis enable 1RTC isis 1RTC-isis-1 network-entity 10.0001.0001.0003.00RTC-Ethernet0/0 isis enable 1RTC-Ethernet0/0 isis circuit-level level-1RTC-Ethernet0/4 isis

7、enable 1RTC-Ethernet0/4 isis circuit-level level-2RTARTCRTBRTDArea 10Cost 5Cost 60E0/0S1/1S1/1E0/0E0/2E0/1E0/4E0/0L1/L2L1L2L1/L2IS-IS 基本配置IS-IS 高級(jí)配置IS-IS 顯示和維護(hù)目錄IS-IS驗(yàn)證配置配置IS-IS鄰居關(guān)系驗(yàn)證方式和驗(yàn)證密碼配置IS-IS區(qū)域驗(yàn)證方式和驗(yàn)證密碼配置IS-IS路由域驗(yàn)證方式和驗(yàn)證密碼RTA-Ethernet0/0 isis authentication-mode md5 | simple password level-1 |

8、level-2 ip | osi RTA-isis-1 area-authentication-mode md5 | simple password ip | osi RTA-isis-1 domain-authentication-mode md5 | simple password ip | osi IS-IS聚合配置summary ip-address mask | mask-length avoid-feedback | generate_null0_route | level-1 | level-1-2 | level-2 | tag tag 在IS-IS視圖下使用缺省只對(duì)level

9、-2路由進(jìn)行聚合聚合后路由的開銷值取所有被聚合路由中最小的開銷值generate_null0_route表示聚合的同時(shí)生成NULL0路由IS-IS路由驗(yàn)證和聚合配置示例RTARTBRTCRTDE0/0E0/0E0/1E0/0S1/0S1/0Area 20Area 10RTA-Ethernet0/0 isis authentication-mode simple test1RTA-isis-1 area-authentication-mode simple test2RTB-isis-1 area-authentication-mode simple test214.1.0.0/1614.2.0

10、.0/1614.3.0.0/16RTC-Ethernet0/1 isis authentication-mode simple test1RTC-isis-1 area-authentication-mode simple test2RTC-isis-1 domain-authentication-mode md5 test3RTC-isis-1 summary 14.0.0.0 255.0.0.0 level-2RTD-isis-1 domain-authentication-mode md5 test3L1/L2L1L2L1區(qū)域外次優(yōu)路由的產(chǎn)生缺省情況下，Level-1路由器只將去往其它區(qū)

11、域的報(bào)文發(fā)送到最近的Level-1-2路由器。RTARTBRTCRTDArea 20Area 10Cost 5Cost 10E0/0S1/1S1/1E0/0E0/2E0/1E0/4E0/0L1/L2L1L2L1/L2Cost 10Cost 3010.0.0.1/24RTAdisplay isis route ISIS(1) IPv4 Level-1 Forwarding TableIPV4 Destination IntCost ExtCost ExitInterface NextHop 0.0.0.0/0 5 NULL E0/0 2.1.1.1區(qū)域外次優(yōu)路由的解決方法路由滲透使Level-1

12、-2路由器將Level-2區(qū)域的路由信息發(fā)布到Level-1區(qū)域。RTARTBRTCRTDArea 20Area 10Cost 5Cost 10E0/0S1/1S1/1E0/0E0/2E0/1E0/4E0/0L1/L2L1L2L1/L2Cost 10Cost 3010.0.0.1/2410.0.0.0/24, cost=3010.0.0.0/24, cost=10IS-IS路由滲透配置import-route isis level-2 into level-1 filter-policy acl-number | ip-prefix ip-prefix-name | route-policy

13、route-policy-name | tag tag 在IS-IS視圖下使用此命令僅在Level-1-2路由器上使用才有意義如果未配置路由過濾，則所有的level-2路由會(huì)引入到level-1區(qū)域中IS-IS 基本配置IS-IS 高級(jí)配置IS-IS 顯示和維護(hù)目錄IS-IS顯示和維護(hù)顯示IS-IS的摘要信息 顯示IS-IS的鄰居信息 顯示IS-IS的IPv4路由信息 顯示IS-IS的鏈路狀態(tài)數(shù)據(jù)庫(kù) Router display isis brief process-id Router display isis route process-id Router display isis lsdb

14、 l1 | l2 | level-1 | level-2 | lsp-id LSPID | lsp-name lspname | local | verbose process-id Router display isis peer process-id IS-IS摘要信息顯示網(wǎng)絡(luò)實(shí)體名稱路由器類型開銷類型路由優(yōu)先級(jí) display isis brief ISIS (1) Protocol Brief Information : network-entity: 10.0000.0000.0001.00 is-level :level-1-2 cost-style: narrow prefere

15、nce : 15 Lsp-length receive : 1497 Lsp-length originate : level-1 1497 level-2 1497 maximum imported routes number : 10000 Timers: lsp-max-age: 1200 lsp-refresh: 900 Interval between SPFs: 10IS-IS鄰居信息顯示鏈路狀態(tài)鄰居的系統(tǒng)ID鏈路關(guān)系類型鄰居接口DIS優(yōu)先級(jí) display isis peer Peer information for ISIS(1) - System Id: 1111.1111.

16、1111 Interface: Ethernet1/1 Circuit Id: 1111.1111.1112.01 State: Up HoldTime: 23s Type: L1(L1L2) PRI: 64 System Id: 1111.1111.1111 Interface: Ethernet1/1 Circuit Id: 1111.1111.1112.01 State: Up HoldTime: 23s Type: L2(L1L2) PRI: 64IS-IS的路由信息顯示 display isis route Route information for ISIS(1) - ISIS(1

17、) IPv4 Level-1 Forwarding Table -IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags- 1.1.0.0/16 20 NULL Eth1/1 1.2.1.1 R/L/- 1.2.0.0/16 10 NULL Eth1/1 Direct D/L/- ISIS(1) IPv4 Level-2 Forwarding Table -IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags- 1.1.0.0/16 20 NULL 1.2.0.

18、0/16 10 NULL Eth1/1 Direct D/L/- Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set路由是否已放到路由表中是否已經(jīng)通過LSP發(fā)布IS-IS的鏈路狀態(tài)數(shù)據(jù)庫(kù)顯示LSP生成路由器IP內(nèi)部可達(dá)地址和掩碼信息LSP生成路由器的區(qū)域地址是10LSP生成路由器的System ID display isis lsdb level-1 verbose Database information for ISIS(1) - Level-1 Link State DatabaseLSPID Seq Num Checksum Holdtime Length ATT/P/OL-1111.1111.1111.00-00 0 x00000005 0 x877 1090 68 0/0/0 SOURCE 1111.1111.1111.00 NLPID