下面是两个工程实例的简要配置,如需详细方案,可留言。
如下是深圳市某大型单位的一个网络拓扑图,其中有cisco7513...................等cisco路由器与交换机约120台左右。网络覆盖广东省大部分地区,如下是在ciscowork上的拓扑图
Cisco7513上的配置为:
Sh ru
Current configuration : 8511 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname cisco_7513
!
enable secret 5 $1$ycCM$6GK24Ndfdfdsfdfd9Q1
!
!
!
ip subnet-zero
no ip domain-lookup
!
ip multicast-routing
ip cef
……………………………….
router eigrp 1
redistribute static
network 192.168.0.0
network 172.16.10.0
no auto-summary
no eigrp log-neighbor-changes
cisco4500上的配置:
sh ru
Current configuration:
!
version 11.1
service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname Cisco4500
!
enable secret 5 $1$l.Uf$XDRSQb/gdfdffdf8DiRoW1
!
username admin
ip subnet-zero
no ip domain-lookup
!
router eigrp 1
redistribute static
network 192.168.0.0
network 192.168.10.0
network 172.16.10.0
no auto-summary
其它一些路由器上的配置:如25xx 36xx
outer eigrp 1
network 192.168.0.0
network 172.16.10.0
neighbor 10.10.176.60
no auto-summary
广州一家公司的总部位于天河,分公司遍及全国各地和香港,大约有20家分公司,现在通过一家ISP建立了一个VPN互连网络,路由协议采用EIGRP.其中一个路由器配置为:
router eigrp 1
redistribute static metric 100 100 255 1 1500 route-map static2eigrp
network 192.168.254.0 0.0.0.255
network 192.168.255.0 0.0.0.255
network 192.168.0.0
distribute-list prefix 111 out vpn40101
distribute-list prefix 112 out vpn40102
distribute-list prefix 111 out vpn40201 这里的vpn40201指的是IP tunnel的VPN遂道接口名称
distribute-list prefix 112 out vpn40202
distribute-list prefix 111 out vpn40301
distribute-list prefix 112 out vpn40302
distribute-list prefix 111 out vpn40501
distribute-list prefix 112 out vpn40502
no auto-summary
no eigrp log-neighbor-changes
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0
............
no ip http server
!
!
ip prefix-list 111 description "Deny ERP"
ip prefix-list 111 seq 5 permit 0.0.0.0/0 le 31
!
ip prefix-list 112 description "Permit ERP"
ip prefix-list 112 seq 5 permit 0.0.0.0/0 ge 32
access-list 2 permit 192.168.100.0 0.0.0.255
access-list 2 permit 192.168.101.0 0.0.0.255
route-map static2eigrp permit 10
match ip address 2
EIGRP拓扑表如下:
sh ip eigrp topology:
IP-EIGRP Topology Table for AS(1)/ID(x.x.x.254)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - reply Status, s - sia Status
P 192.168.254.0/30, 2 successors, FD is 310044416
via 192.168.255.13 (310044416/297244416), vpn40101
via 192.168.255.21 (310044416/297244416), vpn40201
P 192.168.255.0/30, 2 successors, FD is 310044416
via 192.168.255.13 (310044416/297244416), vpn40101
via 192.168.255.21 (310044416/297244416), vpn40201
P 192.168.254.4/30, 1 successors, FD is 297244416
via Connected, vpn40302
P 192.168.255.4/30, 1 successors, FD is 297244416
via Connected, vpn40301
P 192.168.254.8/30, 2 successors, FD is 310044416
via 192.168.255.5 (310044416/297244416), vpn40301
via 192.168.255.13 (310044416/297244416), vpn40101
P 192.168.255.8/30, 2 successors, FD is 310044416
via 192.168.255.5 (310044416/297244416), vpn40301
via 192.168.255.13 (310044416/297244416), vpn40101
P 192.168.254.12/30, 1 successors, FD is 297244416
via Connected, vpn40102
P 192.168.255.12/30, 1 successors, FD is 297244416
via Connected, vpn40101
P 192.168.254.16/30, 2 successors, FD is 310044416
via 192.168.255.5 (310044416/297244416), vpn40301
via 192.168.255.21 (310044416/297244416), vpn40201
P 192.168.255.16/30, 2 successors, FD is 310044416
via 192.168.255.5 (310044416/297244416), vpn40301
via 192.168.255.21 (310044416/297244416), vpn40201
P 192.168.254.20/30, 1 successors, FD is 297244416
via Connected, vpn40202
P 192.168.255.20/30, 1 successors, FD is 297244416
via Connected, vpn40201
P 192.168.254.24/30, 2 successors, FD is 310044416
via 192.168.255.5 (310044416/297244416), vpn40301
via 192.168.255.30 (310044416/297244416), vpn40501
P 192.168.255.24/30, 2 successors, FD is 310044416
via 192.168.255.5 (310044416/297244416), vpn40301
via 192.168.255.30 (310044416/297244416), vpn40501
P 192.168.254.28/30, 1 successors, FD is 297244416
via Connected, vpn40502
P 192.168.255.28/30, 1 successors, FD is 297244416
via Connected, vpn40501
P 192.168.9.0/24, 1 successors, FD is 297270016
via 192.168.255.30 (297270016/25625600), vpn40501
P 192.168.100.0/24, 1 successors, FD is 25625600
via Rstatic (25625600/0)
P 192.168.101.0/24, 1 successors, FD is 25625600
via Rstatic (25625600/0)
..............
转载请注明!如需详细方案,可留言。