Giáo trình Advanced Certificate in Information Technology - Sanlein part 107 docx

ip address 192.168.1.254 255.255.255.252 clockrate 64000 router eigrp 1 passive-interface Serial0/0 network 192.168.1.0 network 192.168.192.0 network 192.168.193.0 network 192.168.194.0 network 192.168.195.0 no auto-summary router bgp 100 no synchronization bgp log-neighbor-changes aggregate-address 192.168.192.0 255.255.248.0 redistribute eigrp 1 neighbor 192.168.1.202 remote-as 100 neighbor 192.168.1.202 next-hop-self neighbor 192.168.1.253 remote-as 200 neighbor 192.168.1.253 send-community neighbor 192.168.1.253 route-map COMMUNITY out no auto-summary no ip http server ip classless ip prefix-list summary seq 1 permit 192.168.192.0/21 access-list 101 permit ip host 192.168.192.0 host 255.255.248.0 route-map COMMUNITY permit 1 match ip address prefix-list summary set community none route-map COMMUNITY permit 10 set community no-export call rsvp-sync mgcp profile default dial-peer cor custom line con 0 logging synchronous line aux 0 line vty 0 4 password cisco login end Tiếp theo ta sẻ sử dụng suppress-map trong aggregate route Các route nằm trong route map đều bị đánh giấu là chử s Tức nó sẻ không được quảng bá ra AS bên ngoài Ta sẻ cấu hình cho R1 chỉ cho phếp quảng cáo route 192.168.192.0 ,192.168.193.0,192.168.194.0 còn tất cả các route còn lại đều bị suppress không được quảng cáo ra bên ngoài Tương tự đối với R5 chỉ được quảng cáo mạng 192.168.196.0, 192.168.197.0,192.168.198.0 Còn route 192.168.195.0 và 192.168.199.0 sẻ không được quảng cáo ra bên ngoài bởi các router trong AS 100 R1#show runn Building configuration Current configuration : 1946 bytes version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption hostname R1 logging queue-limit 100 memory-size iomem 10 ip subnet-zero no ip domain lookup mpls ldp logging neighbor-changes no voice hpi capture buffer no voice hpi capture destination mta receive maximum-recipients 0 interface Loopback0 ip address 192.168.192.1 255.255.255.0 interface Loopback1 ip address 192.168.193.1 255.255.255.0 interface Loopback2 ip address 192.168.194.1 255.255.255.0 interface Loopback3 ip address 192.168.195.1 255.255.255.0 interface Ethernet0/0 ip address 192.168.1.201 255.255.255.252 half-duplex interface Serial0/0 ip address 192.168.1.254 255.255.255.252 clockrate 64000 router eigrp 1 passive-interface Serial0/0 network 192.168.1.0 network 192.168.192.0 network 192.168.193.0 network 192.168.194.0 network 192.168.195.0 no auto-summary router bgp 100 no synchronization bgp log-neighbor-changes aggregate-address 192.168.192.0 255.255.248.0 suppress-map suppress redistribute eigrp 1 neighbor 192.168.1.202 remote-as 100 neighbor 192.168.1.202 next-hop-self neighbor 192.168.1.253 remote-as 200 neighbor 192.168.1.253 send-community neighbor 192.168.1.253 route-map COMMUNITY out no auto-summary no ip http server ip classless ip prefix-list summary seq 1 permit 192.168.192.0/21 access-list 1 permit 192.168.196.0 0.0.3.255 access-list 1 permit 192.168.195.0 0.0.0.255 access-list 101 permit ip host 192.168.192.0 host 255.255.248.0 route-map suppress permit 1 match ip address 1 route-map COMMUNITY permit 1 match ip address prefix-list summary set community none route-map COMMUNITY permit 10 set community no-export call rsvp-sync mgcp profile default dial-peer cor custom line con 0 logging synchronous line aux 0 line vty 0 4 password cisco login end R5#show runn Building configuration Current configuration: version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption hostname R5 ip subnet-zero no ip domain-lookup interface Loopback0 ip address 192.168.196.1 255.255.255.0 interface Loopback1 ip address 192.168.197.1 255.255.255.0 interface Loopback2 ip address 192.168.198.1 255.255.255.0 interface Loopback3 ip address 192.168.199.1 255.255.255.0 interface Ethernet0 ip address 192.168.1.202 255.255.255.252 interface Serial0 ip address 192.168.1.245 255.255.255.252 no fair-queue clockrate 64000 interface Serial1 no ip address clockrate 64000 router eigrp 1 passive-interface Serial1 network 192.168.1.0 network 192.168.196.0 network 192.168.197.0 network 192.168.198.0 network 192.168.199.0 no auto-summary no eigrp log-neighbor-changes router bgp 100 no synchronization aggregate-address 192.168.192.0 255.255.248.0 suppress-map suppress redistribute eigrp 1 neighbor 192.168.1.201 remote-as 100 neighbor 192.168.1.201 next-hop-self neighbor 192.168.1.246 remote-as 200 neighbor 192.168.1.246 send-community neighbor 192.168.1.246 route-map COMMUNITY out ip classless no ip http server ip prefix-list summary seq 1 permit 192.168.192.0/21 access-list 1 permit 192.168.192.0 0.0.3.255 access-list 1 permit 192.168.199.0 0.0.0.255 access-list 101 permit ip host 192.168.192.0 host 255.255.248.0 route-map suppress permit 1 match ip address 1 route-map COMMUNITY permit 1 match ip address prefix-list summary set community none route-map COMMUNITY permit 10 set community no-export line con 0 logging synchronous transport input none line aux 0 line vty 0 4 login end Ta thấy chỉ những route 192,193,194,195,199 bi suppress trong R5 bây giờ ta sẻ xem bảng route của R5 . no-export call rsvp-sync mgcp profile default dial-peer cor custom line con 0 logging synchronous line aux 0 line vty 0 4 password cisco login end Tiếp theo ta sẻ sử dụng suppress-map. hostname R1 logging queue-limit 100 memory-size iomem 10 ip subnet-zero no ip domain lookup mpls ldp logging neighbor-changes no voice hpi capture buffer no voice hpi capture destination mta. bgp log-neighbor-changes aggregate-address 192.168.192.0 255.255.248.0 suppress-map suppress redistribute eigrp 1 neighbor 192.168.1.202 remote-as 100 neighbor 192.168.1.202 next-hop-self