RIP 实验学习笔记实验学习笔记 2009.6.56.10 一实验目的一实验目的 A.理解 RIP 的原理和操作； B.清楚 RIP 注意问题； C.熟悉 RIP 配置命令； D.使用 show 和 debug 命令查看拓扑变化时收敛过程； E.抓包分析 RIP 报文；二拓扑和要求二拓扑和要求S1、R1、R2 之间 RIP 采用 MD5 认证； R1、R4 之间 RIP 采用明文认证； S2 运行 OSPF,R2 从 S2 重发布，并在 LAN 上通告这些路由，用于演示 RIP 的下一条特 性； R5 的帧中继配置在物理接口上，一边查看 no ip split-horizon 默认行为的效果； 三实验过程三实验过程 3.1 连通性配置连通性配置 遇到的问题：?1.R5 路由器路由器 ping 不通自己的不通自己的 S0/0 接口地址接口地址 172.31.25.1，能，能 ping 通通 R2 的子接口的子接口 s1/0.205 地址地址 172.31.25.2，从，从 R2 上却能上却能ping 通通 172.31.25.1；R5ping 172.31.25.1Sending 5, 100-byte ICMP Echos to 172.31.25.1, timeout is 2 seconds:.Success rate is 0 percent (0/5)R5ping 172.31.25.2Sending 5, 100-byte ICMP Echos to 172.31.25.2, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 16/28/44 msR2#ping 172.31.25.1Sending 5, 100-byte ICMP Echos to 172.31.25.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 28/36/48 ms 2.子接口水平分割缺省是 enable 的；但物理接口的水平分割缺省是 disable 的（配置了 IP 地 址的 FR 封装的物理接口上水平分割缺省是 disable 的！） ；R2#sh ip int s1/0.203Serial1/0.203 is up, line protocol is upInternet address is 172.31.23.2/30Broadcast address is 255.255.255.255Proxy ARP is enabledSecurity level is defaultSplit horizon is enabledR5#sh ip int s0/0Serial0/0 is up, line protocol is upInternet address is 172.31.25.1/30Broadcast address is 255.255.255.255Proxy ARP is enabledSecurity level is defaultSplit horizon is disabled2.traceroute 的问题，从的问题，从 S1 上上 traceroute 172.31.103.3S1#traceroute 172.31.103.31 172.31.11.1 28 msec172.31.11.2 32 msec172.31.11.1 16 msec2 172.31.23.1 52 msec172.31.13.2 24 msec172.31.23.1 20 msec3. S2 的的 loopback 接口地址在路由条目里显示为接口地址在路由条目里显示为 172.31.221.202/32(从从 OSPF 重发布来的重发布来的)，而，而 S1 的的 loopback 接口地址路由接口地址路由条目显示为条目显示为 172.31.211.0/24（rip 来）来）3.2 基本基本 rip 配置配置R1(config)#router ripR1(config-router)#?Router configuration commands:address-family Enter Address Family command modeauto-summary Enable automatic network number summarizationdefault Set a command to its defaultsdefault-information Control distribution of default informationdefault-metric Set metric of redistributed routesdistance Define an administrative distancedistribute-list Filter networks in routing updatesexit Exit from routing protocol configuration modeflash-update-threshold Specify flash update threshold in secondinput-queue Specify input queue depthmaximum-paths Forward packets over multiple pathsneighbor Specify a neighbor routernetwork Enable routing on an IP networkno Negate a command or set its defaultsoffset-list Add or subtract offset from IGRP or RIP metricsoutput-delay Interpacket delay for RIP updatespassive-interface Suppress routing updates on an interfaceredistribute Redistribute information from another routing protocoltimers Adjust routing timerstraffic-share How to compute traffic share over alternate pathsvalidate-update-source Perform sanity checks against source address of routing updatesversion Set routing protocol versionnetwork 命令注解命令注解The RIP network command only allows for a classful network as a parameter, which in turn enables RIP on all of that routers interfaces that are part of that network. Enabling RIP on an interface makes the router begin sending RIP updates, listening for RIP updates (UDP port 520), and advertising that interfaces connected subnet.Because the RIP network command has no way to simply match one interface at a time, a RIP configuration may enable these three functions on an interface ，but some or all of these functions are not required. The three RIP functions can be ndividually disabled on an interface with some effort：RIP FunctionHow to DisableSending RIP updates Make the interface passive: configure router rip, followed by passiveinterface type numberListening for RIP updatesFilter all incoming routes using a distribute listAdvertising the connected subnetFilter outbound advertisements on other interfaces using distribute lists, filtering an interfaces connected subnet;using neighbor subcommand to advertise rip updates to that neighbor;问题问题1.Ping 172.31.25.1(R5的物理串口地址的物理串口地址)问题问题（1）R6能能ping通，通，R6路由表为：路由表为：R6sh ip route172.31.0.0/16 is variably subnetted, 2 subnets, 2 masksC 172.31.16.0/24 is directly connected, Serial0/0.601R 172.31.0.0/16 120/1 via 10.1.26.2, 00:00:14, Serial0/0.60210.0.0.0/8 is variably subnetted, 3 subnets, 2 masksR 10.0.0.0/8 120/3 via 10.1.26.2, 00:00:14, Serial0/0.602C 10.1.26.0/24 is directly connected, Serial0/0.602C 10.1.106.0/24 is directly connected, Loopback1（2）R5自己自己ping不通不通25.1，能，能ping通通172.31.25.2（3）R4能能ping通通R5（4 4）R3pingR3ping不通不通172.31.25.1172.31.25.1，也，也pingping不通不通172.31.25.2172.31.25.2；（；（R3pingR3ping自己反应很慢，自己反应很慢，pingping其他都其他都pingping不通，不通，R1pingR1ping R3R3的的103.3103.3正常，但正