路由器（網路層）
作用：
1、隔離泛洪范圍——路由器的一個介面對應一個廣播域——路由器也被稱為網關
2、轉發
路由器的轉發原理
當一個資料包來到路由器，路由器將基于資料包中的目標IP地址查看路由表，
若表中有記錄，則將無條件按照路由表的指示轉發，否則直接將資料包丟棄
路由表分析
display ip routing-table——查看路由表
Destination/Mask Proto Pre Cost Flags NextHop Interface
192.168.1.0/24 Direct 0 0 D 192.168.1.1 GigabitEthernet0/0/0
192.168.2.0/24 Direct 0 0 D 192.168.2.1 GigabitEthernet0/0/1
Destination/Mask——表明要去的目的子網
Proto ——協議——可以表示路由條目的型別
Direct——直連路由
Pre——優先級——當兩條路由條目的目標網段相同時，我們僅加載優先級較高的路由條目到路由表中，取值范圍（0~255），數值越大優先級越低
華為設備靜態路由優先級默認為60，直連路由優先級默認為0
NextHop ——嚇一跳，就是資料到達目標網段下一個經過路由器介面的入介面的IP，直連路由直接寫路由器出介面的IP
Interface——流量流出的介面
直連路由生成的條件
1、介面雙UP
2、介面必須配IP
路由器與路由器連接的鏈路：稱為骨干鏈路——鏈路中間不添加任何設備
路由器獲取前往未知網段的路由資訊
1、靜態路由：由網路管理員手工添加
2、動態路由：所有路由器上運行相同的路由協議，之后通過路由器之間的溝通交流，最終計算生成的路由條
TTL（生存時間值）的主要作用是避免IP包在網路中的無限回圈和收發(環路問題)，節省了網路資源，并能使IP包的發送者能收到告警訊息，
靜態路由配置實作全網可達
根據分出的網段和介面的IP進行添加
配置AR1的網關
<Huawei>system-view //進入用戶視圖
[Huawei]sysname r1 //方便區分，更名為r1
[r1]interface GigabitEthernet 0/0/0 //進入0/0/0介面
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 24 //添加網關，子網掩碼
[r1-GigabitEthernet0/0/0]q //退出介面界面
[r1]interface GigabitEthernet 0/0/1 //進入0/0/1介面
[r1-GigabitEthernet0/0/1]ip address 192.168.2.1 24 //添加網關，子網掩碼
[r1-GigabitEthernet0/0/1]q
[r1]interface GigabitEthernet 0/0/2 //進入0/0/2介面
[r1-GigabitEthernet0/0/2]ip address 192.168.3.1 24 //添加網關
[r1-GigabitEthernet0/0/2]q
[r1]display ip interface brief //查看路由器的介面資訊
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.1.1/24 up up
GigabitEthernet0/0/1 192.168.2.1/24 up up
GigabitEthernet0/0/2 192.168.3.1/24 up up
NULL0 unassigned up up(s) 配置AR2的網關
<Huawei>system-view
[Huawei]sysname r2
[r2]interface GigabitEthernet 0/0/0
[r2-GigabitEthernet0/0/0]ip address 192.168.2.2 24
[r2-GigabitEthernet0/0/0]q
[r2]interface GigabitEthernet 0/0/1
[r2-GigabitEthernet0/0/1]ip address 192.168.4.1 24
[r2-GigabitEthernet0/0/1]q
[r2]display ip interface brief
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.2.2/24 up up
GigabitEthernet0/0/1 192.168.4.1/24 up up
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s) 配置AR3的網關
<Huawei>system-view
[Huawei]sysname r3
[r3]interface GigabitEthernet 0/0/0
[r3-GigabitEthernet0/0/0]ip address 192.168.3.2 24
[r3-GigabitEthernet0/0/0]q
[r3]interface GigabitEthernet 0/0/1
[r3-GigabitEthernet0/0/1]ip address 192.168.5.1 24
[r3-GigabitEthernet0/0/1]q
[r3]display ip interface brief
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.3.2/24 up up
GigabitEthernet0/0/1 192.168.5.1/24 up up
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s) 配置AR4的網關
<Huawei>system-view
[Huawei]sysname r4
[r4]interface GigabitEthernet 0/0/0
[r4-GigabitEthernet0/0/0]ip address 192.168.5.2 24
[r4-GigabitEthernet0/0/0]q
[r4]interface GigabitEthernet 0/0/1
[r4-GigabitEthernet0/0/1]ip address 192.168.4.2 24
[r4-GigabitEthernet0/0/1]q
[r4]interface GigabitEthernet 0/0/2
[r4-GigabitEthernet0/0/2]ip address 192.168.6.1 24
[r4-GigabitEthernet0/0/2]q
[r4]display ip interface brief
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.5.2/24 up up
GigabitEthernet0/0/1 192.168.4.2/24 up up
GigabitEthernet0/0/2 192.168.6.1/24 up up
NULL0 unassigned up up(s) 配置PC1的IP地址、網關、子網掩碼
配置PC2的IP地址、網關、子網掩碼
使用PC1簡單測驗
總結：
直連路由：192.168.2.1 192.168.3.1全能ping通
非直連路由都無法ping通，
為什么PC1無法ping通192.168.2.2
原因：tcp是雙向傳輸的程序，在AR2的路由表中查詢不到PC1的地址資訊，就直接扔掉了，
所以無法實作ping通
PC>ping 192.168.6.10
Ping 192.168.6.10: 32 data bytes, Press Ctrl_C to break
Request timeout!
Request timeout!
--- 192.168.6.10 ping statistics ---
2 packet(s) transmitted
0 packet(s) received
100.00% packet loss
PC>ping 192.168.2.1
Ping 192.168.2.1: 32 data bytes, Press Ctrl_C to break
From 192.168.2.1: bytes=32 seq=1 ttl=255 time=31 ms
From 192.168.2.1: bytes=32 seq=2 ttl=255 time<1 ms
--- 192.168.2.1 ping statistics ---
2 packet(s) transmitted
2 packet(s) received
0.00% packet loss
round-trip min/avg/max = 0/15/31 ms
PC>ping 192.168.3.1
Ping 192.168.3.1: 32 data bytes, Press Ctrl_C to break
From 192.168.3.1: bytes=32 seq=1 ttl=255 time<1 ms
From 192.168.3.1: bytes=32 seq=2 ttl=255 time=15 ms
--- 192.168.3.1 ping statistics ---
2 packet(s) transmitted
2 packet(s) received
0.00% packet loss
round-trip min/avg/max = 0/7/15 ms
PC>ping 192.168.3.2
Ping 192.168.3.2: 32 data bytes, Press Ctrl_C to break
Request timeout!
Request timeout!
--- 192.168.3.2 ping statistics ---
3 packet(s) transmitted
0 packet(s) received
100.00% packet loss
使用PC2進行今天測驗
PC>ping 192.168.1.10
Ping 192.168.1.10: 32 data bytes, Press Ctrl_C to break
Request timeout!
Request timeout!
Request timeout!
--- 192.168.1.10 ping statistics ---
3 packet(s) transmitted
0 packet(s) received
100.00% packet loss
PC>ping 192.168.4.2
Ping 192.168.4.2: 32 data bytes, Press Ctrl_C to break
From 192.168.4.2: bytes=32 seq=1 ttl=255 time=32 ms
From 192.168.4.2: bytes=32 seq=2 ttl=255 time=46 ms
--- 192.168.4.2 ping statistics ---
2 packet(s) transmitted
2 packet(s) received
0.00% packet loss
round-trip min/avg/max = 32/39/46 ms
PC>ping 192.168.4.1
Ping 192.168.4.1: 32 data bytes, Press Ctrl_C to break
Request timeout!
Request timeout!
--- 192.168.4.1 ping statistics ---
2 packet(s) transmitted
0 packet(s) received
100.00% packet loss
PC>ping 192.168.5.2
Ping 192.168.5.2: 32 data bytes, Press Ctrl_C to break
From 192.168.5.2: bytes=32 seq=1 ttl=255 time<1 ms
From 192.168.5.2: bytes=32 seq=2 ttl=255 time=16 ms
--- 192.168.5.2 ping statistics ---
2 packet(s) transmitted
2 packet(s) received
0.00% packet loss
round-trip min/avg/max = 0/8/16 ms
PC>ping 192.168.2.1
Ping 192.168.2.1: 32 data bytes, Press Ctrl_C to break
Request timeout!
Request timeout!
--- 192.168.2.1 ping statistics ---
2 packet(s) transmitted
0 packet(s) received
100.00% packet loss
配置靜態路由
命令：ip route-static 目標網段 子網掩碼 下一個路由器的入口IP
方法：查看直連路由，然后再配靜態
配置AR1的靜態路由
[r1]display ip routing-table //查看路由表，以下為直連路由
192.168.1.0/24 Direct 0 0 D 192.168.1.1 GigabitEthernet
0/0/0
192.168.2.0/24 Direct 0 0 D 192.168.2.1 GigabitEthernet
0/0/1
192.168.3.0/24 Direct 0 0 D 192.168.3.1 GigabitEthernet
0/0/2
[r1]ip route-static 192.168.4.0 24 192.168.2.2 //配置到達4.0網段的的靜態路由
[r1]ip route-static 192.168.5.0 24 192.168.3.2 //配置到達5.0網段的的靜態路由
[r1]ip route-static 192.168.6.0 24 192.168.3.2 //配置到達6.0網段的的靜態路由配置AR2的靜態路由
[r2]display ip routing-table
192.168.2.0/24 Direct 0 0 D 192.168.2.2 GigabitEthernet
0/0/0
192.168.4.0/24 Direct 0 0 D 192.168.4.1 GigabitEthernet
0/0/1
[r2]ip route-static 192.168.1.0 24 192.168.2.1
[r2]ip route-static 192.168.3.0 24 192.168.2.1
[r2]ip route-static 192.168.5.0 24 192.168.4.2
[r2]ip route-static 192.168.6.0 24 192.168.4.2配置AR3的靜態路由
[r3]display ip routing-table
192.168.3.0/24 Direct 0 0 D 192.168.3.2 GigabitEthernet
0/0/0
192.168.5.0/24 Direct 0 0 D 192.168.5.1 GigabitEthernet
0/0/1
[r3]ip route-static 192.168.1.0 24 192.168.3.1
[r3]ip route-static 192.168.2.0 24 192.168.3.1
[r3]ip route-static 192.168.4.0 24 192.168.5.2
[r3]ip route-static 192.168.6.0 24 192.168.5.2配置AR4的靜態路由
[r4]display ip routing-table
192.168.4.0/24 Direct 0 0 D 192.168.4.2 GigabitEthernet
0/0/1
192.168.5.0/24 Direct 0 0 D 192.168.5.2 GigabitEthernet
0/0/0
[r4]ip route-static 192.168.1.0 24 192.168.5.1
[r4]ip route-static 192.168.2.0 24 192.168.4.1
[r4]ip route-static 192.168.3.0 24 192.168.5.1
測驗
PC1 ping PC2
PC>ping 192.168.6.10 //PC1pingPC2
Ping 192.168.6.10: 32 data bytes, Press Ctrl_C to break
From 192.168.6.10: bytes=32 seq=1 ttl=125 time=31 ms
From 192.168.6.10: bytes=32 seq=2 ttl=125 time=31 ms
--- 192.168.6.10 ping statistics ---
2 packet(s) transmitted
2 packet(s) received
0.00% packet loss
round-trip min/avg/max = 31/31/31 ms
路由器ping網關
<r1>ping 192.168.4.2
PING 192.168.4.2: 56 data bytes, press CTRL_C to break
Reply from 192.168.4.2: bytes=56 Sequence=1 ttl=254 time=40 ms
Reply from 192.168.4.2: bytes=56 Sequence=2 ttl=254 time=30 ms
Reply from 192.168.4.2: bytes=56 Sequence=3 ttl=254 time=30 ms
Reply from 192.168.4.2: bytes=56 Sequence=4 ttl=254 time=30 ms
--- 192.168.4.2 ping statistics ---
4 packet(s) transmitted
4 packet(s) received
0.00% packet loss
round-trip min/avg/max = 30/32/40 ms
<r1>ping 192.168.5.2
PING 192.168.5.2: 56 data bytes, press CTRL_C to break
Reply from 192.168.5.2: bytes=56 Sequence=1 ttl=254 time=30 ms
Reply from 192.168.5.2: bytes=56 Sequence=2 ttl=254 time=30 ms
Reply from 192.168.5.2: bytes=56 Sequence=3 ttl=254 time=30 ms
--- 192.168.5.2 ping statistics ---
3 packet(s) transmitted
3 packet(s) received
0.00% packet loss
round-trip min/avg/max = 30/30/30 ms
拓展配置
負載均衡：
當路由器訪問同一個目標，且有多條開銷相似的路徑時，可以讓設備將流量拆分后沿多條路徑同時傳輸，起到帶寬疊加的功能
1.0~6.0
ip route-static 192.168.6.0 24 192.168.2.2
ip route-static 192.168.6.0 24 192.168.3.2
環回介面：
路由器配置的虛擬介面，一般用于虛擬實驗，不受設備的額限制，
ping -a 192.168.1.1 172.16.1.1 ——指定發送資料包的源IP
配置AR1網關
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 12.0.0.1 24
配置環回AR1介面
[Huawei]interface loopback0
[Huawei-LoopBack0]ip address 192.168.1.1 24
[Huawei]interface loopback1
[Huawei-LoopBack1]ip address 192.168.2.1 24
配置AR2網關
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 12.0.0.2 24
配置環回AR2介面
[Huawei]interface loopback0
[Huawei-LoopBack0]ip address 172.16.1.1 24
[Huawei]interface loopback1
[Huawei-LoopBack1]ip address 172.16.2.124
測驗
[Huawei]ping -a 192.168.1.1 172.16.1.1 ——可以指定發送資料包中的源IP
手工匯總：
當路由器可以訪問多個連續的子網時，若均通過相同的下一跳，可以將這些網段進行匯總計算后，僅編輯到達匯總網段的路由即可，以達到減少路由條目，提高轉發效率
匯總：192.168.1.0/24，192.168.2.0/24——192.168.0.0/224
路由黑洞：
在匯總中包含網路內實際不存在的網段，可能使流量有去無回浪費鏈路資源
合理的子網劃分和匯總可以減少路由黑洞的產生
例子：網段劃分192.168.1.0/24，192.168.2.0/24 匯總為192.168.0.0/22
ping 192.168.0.1這時沒有這個網段，則出現黑洞
預設路由：
一條不限定目標的路由條目（不指定目標，只指定下一跳），
特點：若查詢本地所有路由均未匹配，則走預設路由
[r1]ip route-static 0.0.0.0 0.0.0.0 12.0.0.2
[r1]ping 1.1.1.1
空介面路由：預設路由和路由黑洞相遇將100%出環
空介面路由——Null0
如果Null0口做為出介面，則將所有匹配的路由資訊全部丟棄
路由表匹配原則——最長匹配原則/精確匹配原則：子網掩碼最長的（范圍越小）
空介面路由配置：在黑洞路由器上配置一天空介面路由
ip route-static 192.168.0.0/22 Null 0
浮動靜態路由：
通過修改默認優先級實作靜態路由的備份效果
配置浮動靜態路由
ip route-static 21.0.0.2 preference 100
display ip routing-table protocol static //只查看路由表的靜態路由
測驗使用另一條靜太路由關閉之前的介面shutdown
轉載請註明出處，本文鏈接：https://www.uj5u.com/qita/299417.html
標籤：其他
上一篇：1.開發環境搭建