A公司用的是IS-IS，B公司用的是OSPF，现在这两个公司要合并，网络要相通

![](/static/img/路由引入中次优路由和路由环路问题/05ac2f4622a54838831faed683a07d31.png)

# 项目目标

> **前期准备**
>
> 1. **配置IP地址：**完成IP地址规划，A公司和B公司内部网络通过路由器R2和R4环回接口模拟。配置路由器接口的IP地址并测试所有直连链路的连通性
> 2. **配置IS-IS：**路由器R1、R2和R3上网络配置IS-IS路由协议，区域为49.0001，R2上引入直连路由
> 3. **配置OSPF：**路由器R1、R3和R4上配置OSPF路由协议,区域为0，R4上引入直连路由

> **核心**
>
> 1. **配置路由引入：**在边界设备R1和R3上配置路由引入。
> 2. **分析次优路由：**在路由器R3上首先执行OSPF和IS-IS双向路由引入，在路由器R1的路由表中出现到达R4环回接口所在网络的次优路由。
> 3. **分析路由环路：**在路由器R1上也完成OSPF和IS-IS双向路由引入，在器R1、R2和R3路由器上中出现到达R4环回接口所在网络的路由环路。
> 4. **解决路由环路和次优路由：**在路由引入时使用路由策略和路由标记来解决次优路由、路由反馈和路由环路的方案扩展性非常好





# 项目步骤

## 准备工作

### （1）配置各设备的IP地址

​    完成实验拓扑图的IP的地址规划，AR2、AR4之间的内部网络通过环回接口模拟

```
# AR1配置
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]ip address 172.16.12.1 255.255.255.0
[AR1-GigabitEthernet0/0/0]q
[AR1]interface GigabitEthernet 0/0/1
[AR1-GigabitEthernet0/0/1]ip address 172.16.134.1 24
[AR1-GigabitEthernet0/0/1]q
[AR1]

# AR2配置
[AR2]interface LoopBack 2
[AR2-LoopBack2]ip address 172.16.2.2 24
[AR2-LoopBack2]q
[AR2]interface LoopBack 22
[AR2-LoopBack22]ip address 172.16.22.2 24
[AR2-LoopBack22]q
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]ip address 172.16.12.2 24
[AR2-GigabitEthernet0/0/0]q
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]ip address 172.16.23.2 24
[AR2-GigabitEthernet0/0/1]q
[AR2]

# AR3配置
[AR3]interface GigabitEthernet 0/0/0
[AR3-GigabitEthernet0/0/0]ip address 172.16.23.3 24
[AR3-GigabitEthernet0/0/0]q
[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]ip address 172.16.134.3 24
[AR3-GigabitEthernet0/0/1]q
[AR3]

# AR4配置
[AR4]interface GigabitEthernet 0/0/0
[AR4-GigabitEthernet0/0/0]ip address 172.16.134.4 24
[AR4-GigabitEthernet0/0/0]q
[AR4]interface LoopBack 4
[AR4-LoopBack4]ip address 172.16.4.4 24
[AR4-LoopBack4]q
[AR4]interface LoopBack 44
[AR4-LoopBack44]ip address 172.16.44.4 24
[AR4-LoopBack44]q
[AR4]
```

​    验证（以AR2为例）

```
<AR2>display ip interface brief | exclude unassigned
```

![](/static/img/路由引入中次优路由和路由环路问题/b6eb8c8ff40644cc88d13581d5f51818.png)

### （2）配置IS-IS

​    路由器AR1、AR2、AR3上网络配置IS-IS路由协议，区域为49.0001，AR2上引入直连路由

```
# AR1配置
[AR1]isis 1
[AR1-isis-1]cost-style wide
[AR1-isis-1]network-entity 49.0001.1111.1111.1111.00
[AR1-isis-1]q
[AR1]interface  GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]isis enable 1
[AR1-GigabitEthernet0/0/0]q
[AR1]

# AR2配置
[AR2]isis 1	
[AR2-isis-1]cost-style wide
[AR2-isis-1]network-entity 49.0001.2222.2222.2222.00	
[AR2-isis-1]import-route direct 
[AR2-isis-1]q
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]isis enable 1
[AR2-GigabitEthernet0/0/0]q
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]isis enable 1
[AR2-GigabitEthernet0/0/1]q
[AR2]

# AR3配置
[AR3]isis 1
[AR3-isis-1]cost-style wide
[AR3-isis-1]network-entity 49.0001.3333.3333.3333.00
[AR3-isis-1]q
[AR3]interface GigabitEthernet 0/0/0
[AR3-GigabitEthernet0/0/0]isis enable 1
[AR3-GigabitEthernet0/0/0]q
[AR3]
```

​    验证（以AR1为例）

```
<AR1>display ip routing-table protocol isis
```

![](/static/img/路由引入中次优路由和路由环路问题/3da5dc54f9e24b23b1d2067f322aaea1.png)

### （3）配置OSPF

​    路由器AR1、AR3、AR4上配置OSPF路由协议，区域为0，AR4上引入直连路由

```
# AR1配置
[AR1]ospf 1 router-id 1.1.1.1
[AR1-ospf-1]bandwidth-reference 1000
Info: Reference bandwidth is changed. Please ensure that the reference bandwidth
 that is configured for all the routers are the same.
[AR1-ospf-1]area 0
[AR1-ospf-1-area-0.0.0.0]network 172.16.134.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]q
[AR1-ospf-1]q
[AR1]

# AR3配置
[AR3]ospf 1 router-id 3.3.3.3
[AR3-ospf-1]bandwidth-reference 1000
Info: Reference bandwidth is changed. Please ensure that the reference bandwidth
 that is configured for all the routers are the same.
[AR3-ospf-1]area 0
[AR3-ospf-1-area-0.0.0.0]network 172.16.134.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]q
[AR3]

# AR4配置
[AR4]ospf 1 router-id 4.4.4.4
[AR4-ospf-1]import-route direct cost 10
[AR4-ospf-1]bandwidth-reference 1000
Info: Reference bandwidth is changed. Please ensure that the reference bandwidth
 that is configured for all the routers are the same.
[AR4-ospf-1]area 0
[AR4-ospf-1-area-0.0.0.0]network 172.16.134.4 0.0.0.0
[AR4-ospf-1-area-0.0.0.0]q
[AR4-ospf-1]q
[AR4]
```

​    验证（以AR1为例）

```
<AR1>display ip routing-table protocol ospf
```

![](/static/img/路由引入中次优路由和路由环路问题/909e286d12294880a71edf4dd1191fce.png)


## 核心工作

### （1）配置路由引入

​    在路由器AR3上首先执行OSPF和IS-IS双向路由引入

```
[AR3]ospf 1
[AR3-ospf-1]import-route isis 1
[AR3-ospf-1]q

[AR3]isis 1
[AR3-isis-1]import-route ospf 1
[AR3-isis-1]q
[AR3]
```


### （2）分析次优路由

​    在路由器AR3上首先执行OSPF和IS-IS双向路由引入后，在路由器AR1的路由表中，发现到目的网络172.16.4.0和172.16.44.0的下一跳地址是172.16.12.2，也就是经过路由器AR2和AR3到达，而没有选择直接到AR4，就是次优路由

```
<AR1>display ip routing-table protocol isis
```

![](/static/img/路由引入中次优路由和路由环路问题/1184ba96efbe4baba7445b6ac6eb19dd.png)


​    由于172.16.4.0和172.16.44.0是通过在路由器AR4引入直连进入OSPF的，所以是OSPF ASE路由，在路由器AR1和AR3上没有执行双向路由引入之前，路由172.16.4.0和172.16.44.0会以O_ASE代码出现在路由器AR1和AR3的路由表上，路由优先级为150。

​    在路由器AR3上首先执行了OSPF和IS-IS双向路由引入，外部路由条目172.16.4.0和172.16.44.0进入OSPF进程，该条目通过5类LSA传递给路由器AR1，路由器AR1通过比较路由优先级，发现从路由器AR2收到该路由条目的优先级为15，而从路由器AR4收到的路由条目优先级为150，所以路由器AR1更新路由表，选择路由条目优先级低的路由安装进路由表，即下一跳指向路由器AR2，所以造成了次优路由

​    查看AR1到达172.16.4.4的信息

```
<AR1>tracert 172.16.4.4
```

![](/static/img/路由引入中次优路由和路由环路问题/5ac40b61406c4501abcf856a8b78a410.png)


### （3）分析次优路由

​    在路由器AR1上也完成OSPF和IS-IS双向路由引入，在路由器AR1、AR2和AR3上出现到达AR4环回接口所在网络的路由环路

```
[AR1]ospf 1	
[AR1-ospf-1]import-route isis 1
[AR1-ospf-1]q

[AR1]isis 1
[AR1-isis-1]import-route ospf 1
[AR1-isis-1]q
[AR1]
```

​    接下来在路由器AR1、AR2、AR3上查看路由表，只需要关注172.16.4.0和172.16.44.0两条路由（以AR1为例）

```
<AR1>display ip routing-table
```

![](/static/img/路由引入中次优路由和路由环路问题/4140fba05a95491da8274b2116e91212.png)


​    以上输出关注3台路由器上路由条目172.16.4.0和172.16.44.0的下一跳，发现路由环路已经产生

![](/static/img/路由引入中次优路由和路由环路问题/1103393192ec48078dc76151f968912c.png)


### （4）解决路由环路和次优路由

​    在路由引入时使用路由策略和路由标记来解决次优路由、路由反馈和路由环路

​    首先通过修改路由优先级来解决次优路由和路由反馈的问题

```
# AR1配置
[AR1]ip ip-prefix 4 index 10 permit 172.16.4.0 24
[AR1]ip ip-prefix 4 index 20 permit 172.16.44.0 24
[AR1]route-policy PRE permit node 10
Info: New Sequence of this List.
[AR1-route-policy]if-match ip-prefix 4
[AR1-route-policy]apply preference 160
[AR1-route-policy]q
[AR1]route-policy PRE permit node 20
Info: New Sequence of this List.
[AR1-route-policy]q
[AR1]isis 1	
[AR1-isis-1]preference route-policy PRE
[AR1-isis-1]q
[AR1]

# AR3配置
[AR3]ip ip-prefix 4 index 10 permit 172.16.4.0 24
[AR3]ip ip-prefix 4 index 20 permit 172.16.44.0 24
[AR3]route-policy PRE permit node 10
Info: New Sequence of this List.
[AR3-route-policy]if-match ip-prefix 4
[AR3-route-policy]apply preference 160
[AR3-route-policy]q
[AR3]route-policy PRE permit node 20
Info: New Sequence of this List.
[AR3-route-policy]q
[AR3]isis 1
[AR3-isis-1]preference route-policy PRE
[AR3-isis-1]q
[AR3]
```

​    然后用路由策略和路由标记来解决路由环路问题

```
# AR1配置
[AR1]route-policy O2I deny node 10
Info: New Sequence of this List.
[AR1-route-policy]if-match tag 200
[AR1-route-policy]q
[AR1]route-policy O2I permit node 20
Info: New Sequence of this List.
[AR1-route-policy]apply tag 100
[AR1-route-policy]q
[AR1]route-policy I2O deny node 10
Info: New Sequence of this List.
[AR1-route-policy]if-match tag 400
[AR1-route-policy]q
[AR1]route-policy I2O permit node 20
Info: New Sequence of this List.
[AR1-route-policy]apply tag 300
[AR1-route-policy]q

[AR1]ospf 1
[AR1-ospf-1]import-route isis 1 route-policy I2O
[AR1-ospf-1]q
[AR1]isis 1
[AR1-isis-1]import-route ospf 1 route-policy O2I
[AR1-isis-1]q
[AR1]

# AR3配置
[AR3]route-policy I2O deny node 10
Info: New Sequence of this List.
[AR3-route-policy]if-match tag 100
[AR3-route-policy]q
[AR3]route-policy I2O permit node 20
Info: New Sequence of this List.
[AR3-route-policy]apply tag 200
[AR3-route-policy]q
[AR3]route-policy O2I deny node 10
Info: New Sequence of this List.
[AR3-route-policy]if-match tag 300
[AR3-route-policy]q
[AR3]route-policy O2I permit node 20
Info: New Sequence of this List.
[AR3-route-policy]apply tag 400
[AR3-route-policy]q

[AR3]ospf 1
[AR3-ospf-1]import-route isis 1 route-policy I2O
[AR3-ospf-1]q
[AR3]isis 1
[AR3-isis-1]import-route ospf 1 route-policy I2O
[AR3-isis-1]q
[AR3]
```


## 查看路由表（以AR1为例）

![](/static/img/路由引入中次优路由和路由环路问题/04f5ddd11d094c1d899322e0aa8711b6.png)

路由引入中次优路由和路由环路问题

 

![](/static/img/路由策略与路由控制实验/3b4e3685513f4630b50e33199d9251a3.png)

​    AR1、AR2、AR3在互联接口、Loopback0接口上激活OSPF。AR3、AR4属于IS-IS Area 49.0001，这两者都是Level-1路由器，AR3、AR4的系统ID采用0000.0000.000x格式，其中x为设备编号

​    AR1上存在三个业务网段A、B、C（分别用Loopback1、2、3接口路由模拟），在AR1上将直连路由引入到OSPF中，但是OSPF域内的路由器上不需要C业务的路由，为此在AR1上引入直连路由时通过Route-Policy过滤引入的路由

​    AR2上不选哟A业务网段的路由，但是AR3上需要A、B业务网段的路由，为此在AR2上配置Filter-Policy对OSPF接收的路由进行过滤

​    IS-IS域内的路由器需要访问A业务，因此需要在AR3上执行路由重分发，将OSPF路由引入到IS-IS，但是IS-IS域内的路由器不需要访问B业务，为此在AR1上引入直连路由时为A、B业务网段路由打上不同的路由标记，AR3上执行重分发时根据路由标记过滤B业务网段路由



# 实验任务

1. 设备基础IP地址配置
2. 配置AR1、AR2、AR3之间的OSPF，在互联接口、Loopback0接口上激活OSPF。在AR3、AR4之间配置IS-IS
3. 在AR1上将直连路由引入到OSPF中，同时配置路由策略不引入C业务网段的路由，将A、B业务网段路由分别打上路由标记10、20
4. 在AR2上配置Filter-Policy对接收的OSPF路由进行过滤，只接受B业务网段的路由
5. 在AR3上将OSPF路由引入到IS-IS中，通过Route-Policy匹配路由标记，只引入A业务网段的OSPF外部路由



# 实验步骤

### （1）互联接口、环回接口IP地址配置

```
# AR1配置
[AR1]interface GigabitEthernet 0/0/1
[AR1-GigabitEthernet0/0/1]ip address 10.0.12.1 24
[AR1-GigabitEthernet0/0/1]q
[AR1]interface LoopBack 0
[AR1-LoopBack0]ip address 10.0.1.1 32
[AR1-LoopBack0]q
[AR1]interface LoopBack 1
[AR1-LoopBack1]ip address 172.16.1.1 24
[AR1-LoopBack1]q
[AR1]interface LoopBack 2
[AR1-LoopBack2]ip address 172.16.2.1 24
[AR1-LoopBack2]q
[AR1]interface LoopBack 3
[AR1-LoopBack3]ip address 172.16.3.1 24
[AR1-LoopBack3]q
[AR1]

# AR2配置
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]ip address 10.0.12.2 24
[AR2-GigabitEthernet0/0/0]q
[AR2]interface LoopBack 0
[AR2-LoopBack0]ip address 10.0.2.2 32
[AR2-LoopBack0]q
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]ip address 10.0.23.2 24
[AR2-GigabitEthernet0/0/1]q
[AR2]

# AR3配置
[AR3]interface GigabitEthernet 0/0/0
[AR3-GigabitEthernet0/0/0]ip address 10.0.23.3 24 
[AR3-GigabitEthernet0/0/0]q
[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]ip address 10.0.34.3 24
[AR3-GigabitEthernet0/0/1]q
[AR3]interface LoopBack 0
[AR3-LoopBack0]ip address 10.0.3.3 32
[AR3-LoopBack0]q
[AR3]

# AR4配置
[AR4]interface GigabitEthernet 0/0/0
[AR4-GigabitEthernet0/0/0]ip address 10.0.34.4 24
[AR4-GigabitEthernet0/0/0]q
[AR4]interface LoopBack 0
[AR4-LoopBack0]ip address 10.0.4.4 32
[AR4-LoopBack0]q
[AR4]
```


### （2）配置OSPF、IS-IS

​    AR1、AR2、AR3使用Loopback0接口地址作为Router ID，在互联接口、Loopback0接口上激活OSPF

```
# AR1配置
[AR1]ospf 1 router-id 10.0.1.1
[AR1-ospf-1]area 0
[AR1-ospf-1-area-0.0.0.0]network 10.0.1.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]network 10.0.12.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]q
[AR1-ospf-1]q
[AR1]

# AR2配置
[AR2]ospf 1 router-id 10.0.2.2
[AR2-ospf-1]area 0
[AR2-ospf-1-area-0.0.0.0]network 10.0.2.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.0.12.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.0.23.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]q
[AR2-ospf-1]q
[AR2]

# AR3配置
[AR3]ospf 1 router-id 10.0.3.3
[AR3-ospf-1]area 0
[AR3-ospf-1-area-0.0.0.0]network 10.0.3.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]network 10.0.23.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]q
[AR3]
```

​    在AR2上查看OSPF邻居关系的概要信息

```
<AR2>display ospf peer brief 
```

![](/static/img/路由策略与路由控制实验/f7248419af7e444688f19d5db9a09be3.png)


​    AR3、AR4上配置IS-IS，区域为49.0001，系统ID采用0000.0000.000x格式，两台设备都为Level-1路由器，在互联接口、AR4的Loopback0接口上激活IS-IS

```
# AR3配置
[AR3]isis 1
[AR3-isis-1]is-level level-1
[AR3-isis-1]network-entity 49.0001.0000.0000.0003.00
[AR3-isis-1]q
[AR3]interface GigabitEthernet 0/0/2
[AR3-GigabitEthernet0/0/2]isis enable 1
[AR3-GigabitEthernet0/0/2]q
[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]isis enable 1
[AR3-GigabitEthernet0/0/1]q
[AR3]

# AR4配置
[AR4]isis 1
[AR4-isis-1]is-level level-1
[AR4-isis-1]network 49.0001.0000.0000.0004.00
[AR4-isis-1]q
[AR4]interface GigabitEthernet 0/0/0
[AR4-GigabitEthernet0/0/0]isis enable 1
[AR4-GigabitEthernet0/0/0]q
[AR4]interface LoopBack 0
[AR4-LoopBack0]isis en	
[AR4-LoopBack0]isis enable 1
[AR4-LoopBack0]q
[AR4]
```

​    在AR3上检查IS-IS邻居状态

```
<AR3>display isis peer
```

![](/static/img/路由策略与路由控制实验/bd914a8ef59e47e4aa789bef9711bc9a.png)



### （3）在AR1上引入直连路由

​    在AR1上将直连路由引入到OSPF中，同时配置路由策略过滤C业务网段，将A、B业务网段路由分别打上路由标记10、20

```
# 创建IP前缀列表1，匹配Loopback1接口路由（A业务）
[AR1]ip ip-prefix 1 index 10 permit 172.16.1.0 24 greater-equal 24 less-equal 24

# 创建IP前缀列表2，匹配Loopback2接口路由（B业务）
[AR1]ip ip-prefix 2 index 10 permit 172.16.2.0 24 greater-equal 24 less-equal 24

# 创建Route-Policy ren，并创建节点10、20，分别调用IP前缀列表1、2，打上路由标记
[AR1]route-policy ren permit node 10
Info: New Sequence of this List.
[AR1-route-policy]if-match ip-prefix 1
[AR1-route-policy]apply tag 10
[AR1-route-policy]q

[AR1]route-policy ren permit node 20
Info: New Sequence of this List.
[AR1-route-policy]if-match ip-prefix 2
[AR1-route-policy]apply tag 20
[AR1-route-policy]q
[AR1]

# 引入直连路由，调用Route-Policy ren
[AR1]ospf 1	
[AR1-ospf-1]import-route direct route-policy ren
```

​    在AR1上查看OSPF的LSDB

```
<AR1>display ospf lsdb
```

![](/static/img/路由策略与路由控制实验/87a57f337087429c96030fbde96de453.png)

​    Loopback1、2接口路由已经被成功引入到OSPF中



在AR1上查看OSPF的LSDB中AS-external LSA 172.16.1.0的相关信息

```
<AR1>display ospf lsdb ase 172.16.1.0
```

![](/static/img/路由策略与路由控制实验/c621fb14b43149db99c2c34ff81e9167.png)

​    外部路由172.16.1.0/24已经被打上Tag 10



在AR1上查看OSPF的LSDB中AS-external LSA 172.16.2.0的相关信息

```
<AR1>display ospf lsdb ase 172.16.2.0
```

![](/static/img/路由策略与路由控制实验/f43451498da74122a268c253eb153e08.png)

​    外部路由172.16.2.0/24已经被打上Tag 20



### （4）在AR2上配置过滤策略

​    在AR2上配置Filter-Policy对接收的OSPF路由进行过滤，只接受B业务网段的路由



查看配置Filter-Policy前的OSPF路由表

```
<AR2>display ospf routing
```

![](/static/img/路由策略与路由控制实验/2d6962c7b43d492d82f11d79eb854979.png)

查看配置Filter-Policy前的IP路由表中的OSPF路由

```
<AR2>display ip routing-table protocol ospf
```

![](/static/img/路由策略与路由控制实验/ba01bf90fd2640de87c54de5bb53c537.png)

​    在OSPF路由表以及IP路由表中都可以看到OSPF外部路由172.16.1.0/24、172.16.2.0/24



配置Filter-Policy

```
# 配置基础ACL
[AR2]acl number 2000
[AR2-acl-basic-2000]rule 5 deny source 172.16.1.0 0.0.0.255	
[AR2-acl-basic-2000]rule 10 permit 
[AR2-acl-basic-2000]q
[AR2]

# 在OSPF中部署入方向的Filter-Policy，调用ACL 2000
[AR2]ospf 1
[AR2-ospf-1]filter-policy 2000 import 
[AR2-ospf-1]q
[AR2]
```

查看配置Filter-Policy后的OSPF的路由表

```
<AR2>display ospf routing
```

![](/static/img/路由策略与路由控制实验/5591cb3c1432462898806a4f11ca382f.png)


查看配置Filter-Policy后的IP路由表中的OSPF路由

```
<AR2>display ip routing-table protocol ospf
```

![](/static/img/路由策略与路由控制实验/8cea64bd2410462f875463068593e361.png)


​    在IP路由表中路由172.16.2.0/24已经不存在，但是在OSPF路由表中依旧存在。这也验证了对于OSPF，Filter-Policy只是限制路由加入IP路由表，不影响本地的LSDB以及LSA的传递



在AR3上查看IP路由表中的OSPF路由

```
<AR3>display ip routing-table protocol ospf
```

![](/static/img/路由策略与路由控制实验/7eacc512cc2142f3a0f6169f733bb6a6.png)


​    AR3的的IP路由表中OSPF外部路由172.16.1.0/24、172.16.2.0/24依旧存在



### （5）在AR3上将OSPF路由引入到IS-IS

​    在AR3上将OSPF路由引入到IS-IS中，通过Route-Policy匹配路由标记，只引入A业务网段的OSPF外部路由

```
# 创建Route-Policy ren
[AR3]route-policy ren permit node 10
Info: New Sequence of this List.
[AR3-route-policy]if-match tag 10
[AR3-route-policy]q
[AR3]

# 在IS-IS中引入OSPF路由，调用Route-Policy ren只引入A业务网段的OSPF外部路由
[AR3]isis 1
[AR3-isis-1]import-route ospf 1 level-1 route-policy ren
[AR3-isis-1]q
[AR3]
```

查看AR3的IS-IS路由表

```
<AR3>display isis route
```

![](/static/img/路由策略与路由控制实验/6b1892ebe8a84b49907360e5c06cb6cc.png)


​    Level-1的路由重分发表中只有172.16.1.0/24

路由策略与路由控制实验

#  项目背景

​    随着A公司网络规模的增长和新业务对互联网接入速度及稳定性需求的提升，公司决定升级其网络设施。为此，A公司向运营商B租用了两条线路以接入网络，旨在提高网络资源的利用率，并增强网络的安全性、稳定性和可靠性，从而为用户提供更优质的服务和体验

​    在这一背景下，正在A公司实习的小李同学被项目经理安排在实验室环境中模拟企业边界设备接入运营商网络的操作，以提高工作准确性和效率，并为项目实施和技术储备打下坚实基础。小李使用一台路由器模拟运营商的网络，并配置了两台边界路由器来接入运营商B的网络。在企业内部，网络通过运行OSPF协议实现互联



# 实验拓扑

![](/static/img/华为ENSP--BGP路由协议实验详解/69cc7d17375949bfb61250250a67c114.png)


# 项目目标

> **前期准备**
>
> 1. **配置IP地址：**公司内部之间及环回接口使用私有地址，公司业务网段和与ISP设备互联使用公网地址
> 2. **配置OSPF：**内部网络路由器AR1、AR2、AR3上配置OSPF路由协议，以便建立IBGP邻居时提供发送BGP报文源地址的连通性

> **项目核心**
>
> 1. **配置BGP基本功能：**启动BGP进程，配置BGP路由器ID，创建IBGP和EBGP对等体，指定BGP报文发送源地址，配置IBGP的next-hop-local和通告网络等
> 2. **配置BGP验证：**为了提高网络安全性，在AR1到ISP的链路上，配置BGP MD5验证。在AR3到ISP的链路上，配置BGP Keychain验证
> 3. **配置路由反射器：**IBGP对等体之间不需要建立全连接关系，将路由器AR2配置为BGP路由反射器，AR1和AR3作为客户机
> 4. **配置BGP路由聚合：**在边界路由器AR1和AR3上分别配置BGP路由聚合，减少路由器ISP路由表大小
> 5. **配置BGP团体属性：**在边界路由器AR1和AR3上分别配置BGP团体属性，实现聚合路由发布给ISP路由器时携带团体属性
> 6. **配置BGP Damping：**在路由器AR1对4.4.4.4路由配置Damping功能，抑制不稳定的路由



| 设备   | 接口          | 接口所在网段  | 对端设备及接口 |
| ------ | ------------- | ------------- | -------------- |
| AR1    | G0/0/0        | 10.12.12.0/24 | AR2 G0/0/0     |
| G0/0/2 | 201.1.4.0/30  | ISP G0/0/0    |                |
| AR2    | G0/0/0        | 10.12.12.0/24 | AR1 G0/0/0     |
| G0/0/1 | 10.23.23.0/24 | AR3 G0/0/1    |                |
| AR3    | G0/0/1        | 10.23.23.0/24 | AR2 G0/0/1     |
| G0/0/2 | 201.1.4.4/30  | ISP G0/0/1    |                |
| ISP    | G0/0/0        | 201.1.4.0/30  | AR2 G0/0/2     |
| G0/0/1 | 201.1.4.4/30  | AR3 G0/0/2    |                |



| 设备 | 接口        | IP地址        | 备注                   |
| ---- | ----------- | ------------- | ---------------------- |
| AR1  | G0/0/0      | 10.12.12.1/24 |                        |
|      | G0/0/2      | 201.1.4.1/30  |                        |
|      | Loopback 0  | 10.1.1.1/32   | 建立IBGP邻居更新源地址 |
| AR2  | G0/0/0      | 10.12.12.2/24 |                        |
|      | G0/0/1      | 10.23.23.2/24 |                        |
|      | Loopback 0  | 10.2.2.2/24   | 建立IBGP邻居更新源地址 |
|      | Loopback 10 | 201.1.0.1/24  | 模拟公司内部网络主机   |
|      | Loopback 11 | 201.1.1.1/24  | 模拟公司内部网络主机   |
|      | Loopback 12 | 201.1.2.1/24  | 模拟公司内部网络主机   |
|      | Loopback 13 | 201.1.3.1/24  | 模拟公司内部网络主机   |
| AR3  | G0/0/1      | 10.23.23.3/24 |                        |
|      | G0/0/2      | 201.1.4.5/30  |                        |
|      | Loopback 0  | 10.3.3.3/32   | 建立IBGP邻居更新源地址 |
| ISP  | G0/0/0      | 201.1.4.2/30  | 建立IBGP邻居更新源地址 |
|      | G0/0/1      | 201.1.4.6/30  | 建立IBGP邻居更新源地址 |
|      | Loopback 0  | 4.4.4.4/24    | 模拟ISP主机            |



# 项目步骤

## 准备工作

### （1）配置IP地址

​    公司内部网络设备之间及其环回接口使用私有地址，公司业务网段和与ISP设备互联的网络使用公网地址，业务网段在路由器AR2和ISP上分别使用环回接口模拟。配置路由器接口的IP地址

```
# AR1配置
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]ip address 10.12.12.1 24
[AR1-GigabitEthernet0/0/0]q
[AR1]interface GigabitEthernet 0/0/2
[AR1-GigabitEthernet0/0/2]ip address 201.1.4.1 30
[AR1-GigabitEthernet0/0/2]q
[AR1]interface LoopBack 0
[AR1-LoopBack0]ip address 10.1.1.1 32
[AR1-LoopBack0]q
[AR1]

# AR2配置
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]ip address 10.12.12.2 24
[AR2-GigabitEthernet0/0/0]q
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]ip address 10.23.23.2 24
[AR2-GigabitEthernet0/0/1]q
[AR2]interface LoopBack 0
[AR2-LoopBack0]ip address 10.2.2.2 32
[AR2-LoopBack0]q
[AR2]interface LoopBack 10
[AR2-LoopBack10]ip address 201.1.0.1 24
[AR2-LoopBack10]q	
[AR2]interface LoopBack 11
[AR2-LoopBack11]ip address 201.1.1.1 24
[AR2-LoopBack11]q	
[AR2]interface LoopBack 12
[AR2-LoopBack12]ip address 201.1.2.1 24
[AR2-LoopBack12]q
[AR2]interface LoopBack 13
[AR2-LoopBack13]ip address 201.1.3.1 24
[AR2-LoopBack13]q
[AR2]

# AR3配置
[AR3]interface GigabitEthernet 0/0/1
[AR3-GigabitEthernet0/0/1]ip address 10.23.23.3 24
[AR3-GigabitEthernet0/0/1]q
[AR3]interface GigabitEthernet 0/0/2
[AR3-GigabitEthernet0/0/2]ip address 201.1.4.5 30
[AR3-GigabitEthernet0/0/2]q
[AR3]interface LoopBack 0
[AR3-LoopBack0]ip address 10.3.3.3 32
[AR3-LoopBack0]q
[AR3]

# ISP配置
[ISP]interface GigabitEthernet 0/0/0
[ISP-GigabitEthernet0/0/0]ip address 201.1.4.2 30
[ISP-GigabitEthernet0/0/0]q
[ISP]interface GigabitEthernet 0/0/1
[ISP-GigabitEthernet0/0/1]ip address 201.1.4.6 30
[ISP-GigabitEthernet0/0/1]q
[ISP]interface LoopBack 0
[ISP-LoopBack0]ip address 4.4.4.4 32
[ISP-LoopBack0]q
[ISP]
```


查看配置效果（以AR1为例）

```
[AR1]display ip interface brief | exclude unassigned
```

![](/static/img/华为ENSP--BGP路由协议实验详解/cf02869a37f8407fae79fb8993ed36e0.png)


### （2）配置OSPF

​    内部网络路由器AR1、AR2、AR3之间配置OSPF路由协议，以便建立IBGP邻居时提供发送BGP报文源地址的连通性

```
# AR1配置
[AR1]ospf 1 router-id 1.1.1.1
[AR1-ospf-1]bandwidth-reference 1000
Info: Reference bandwidth is changed. Please ensure that the reference bandwidth
 that is configured for all the routers are the same.
[AR1-ospf-1]area 0
[AR1-ospf-1-area-0.0.0.0]network 10.1.1.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]network 10.12.12.1 0.0.0.0
[AR1-ospf-1-area-0.0.0.0]q
[AR1-ospf-1]q
[AR1]

# AR2配置
[AR2]ospf 1 router-id 2.2.2.2
[AR2-ospf-1]bandwidth-reference 1000
Info: Reference bandwidth is changed. Please ensure that the reference bandwidth
 that is configured for all the routers are the same.
[AR2-ospf-1]area 0
[AR2-ospf-1-area-0.0.0.0]network 10.2.2.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.12.12.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]network 10.23.23.2 0.0.0.0
[AR2-ospf-1-area-0.0.0.0]q
[AR2-ospf-1]q
[AR2]

# AR3配置
[AR3]ospf 1 router-id 3.3.3.3
[AR3-ospf-1]bandwidth-reference 1000
Info: Reference bandwidth is changed. Please ensure that the reference bandwidth
 that is configured for all the routers are the same.
[AR3-ospf-1]area 0
[AR3-ospf-1-area-0.0.0.0]network 10.3.3.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]network 10.23.23.3 0.0.0.0
[AR3-ospf-1-area-0.0.0.0]q
[AR3-ospf-1]q
[AR3]
```


验证OSPF配置

```
<AR1>display ip routing-table protocol ospf
```


![](/static/img/华为ENSP--BGP路由协议实验详解/edde5270c684492d9d3606559649a95b.png)

## 项目核心

### （1）配置BGP基本功能

​    启动BGP进程，配置BGP路由器ID，创建IBGP和EBGP对等体,指定BGP报文发送源地址,配置IBGP的next-hop-local，修改keepalive计时器和通告网络等

```
# AR1配置
[AR1]bgp 65100
[AR1-bgp]router-id 1.1.1.1
[AR1-bgp]peer 10.2.2.2 as-number 65100
[AR1-bgp]peer 10.2.2.2 connect-interface LoopBack 0
[AR1-bgp]peer 10.2.2.2 enable
[AR1-bgp]peer 10.2.2.2 next-hop-local
[AR1-bgp]peer 201.1.4.2 as-number 65200
[AR1-bgp]peer 201.1.4.2 enable 
[AR1-bgp]timer keepalive 60 hold 180
[AR1-bgp]q
[AR1]

# AR2配置
[AR2]bgp 65100
[AR2-bgp]router-id 2.2.2.2
[AR2-bgp]peer 10.1.1.1 as-number 65100
[AR2-bgp]peer 10.1.1.1 connect-interface LoopBack 0
[AR2-bgp]peer 10.1.1.1 enable
[AR2-bgp]peer 10.3.3.3 as-number 65100
[AR2-bgp]peer 10.3.3.3 connect-interface LoopBack 0
[AR2-bgp]peer 10.3.3.3 enable
[AR2-bgp]network 201.1.0.0 24
[AR2-bgp]network 201.1.1.0 24
[AR2-bgp]network 201.1.2.0 24
[AR2-bgp]network 201.1.3.0 24
[AR2-bgp]q

# AR3配置
[AR3]bgp 65100
[AR3-bgp]router-id 3.3.3.3
[AR3-bgp]peer 10.2.2.2 as-number 65100
[AR3-bgp]peer 10.2.2.2 connect-interface LoopBack 0
[AR3-bgp]peer 10.2.2.2 enable
[AR3-bgp]peer 10.2.2.2 next-hop-local
[AR3-bgp]peer 201.1.4.6 as-number 65200
[AR3-bgp]peer 201.1.4.6 enable
[AR3-bgp]q
[AR3]

# ISP配置
[ISP]bgp 65200
[ISP-bgp]router-id 4.4.4.4
[ISP-bgp]peer 201.1.4.1 as-number 65100
[ISP-bgp]peer 201.1.4.1 enable
[ISP-bgp]peer 201.1.4.5 as-number 65100
[ISP-bgp]peer 201.1.4.5 enable
[ISP-bgp]network 4.4.4.4 255.255.255.255
[ISP-bgp]q
[ISP]
```


### （2）配置BGP验证

​    为了提高网络安全性，在AR1到ISP的链路上，配置BGP MD5验证，在AR3到ISP的链路上，配置BGP Keychain验证

配置BGP MD5验证

```
# AR1配置
[AR1]bgp 65100
[AR1-bgp]peer 201.1.4.2 password cipher ren123456
[AR1-bgp]q
[AR1]

# ISP配置
[ISP]bgp 65200
[ISP-bgp]peer 201.1.4.1 password cipher ren123456
[ISP-bgp]q
[ISP]
```


配置BGP Keychain验证

```
# AR3配置
[AR3]keychain toISP mode periodic daily 
[AR3-keychain]key-id 1
[AR3-keychain-keyid-1]algorithm md5
[AR3-keychain-keyid-1]key-string cipher ren123456
[AR3-keychain-keyid-1]send-time daily 00:00 to 23:59
[AR3-keychain-keyid-1]receive-time daily 00:00 to 23:59
[AR3-keychain-keyid-1]q
[AR3-keychain]q
[AR3]bgp 65100
[AR3-bgp]peer 201.1.4.6 keychain toISP
[AR3-bgp]q
[AR3]

# ISP配置
[ISP]keychain toAR3 mode periodic daily
[ISP-keychain]key-id 1
[ISP-keychain-keyid-1]algorithm md5
[ISP-keychain-keyid-1]key-string cipher ren123456
[ISP-keychain-keyid-1]send-time daily 00:00 to 23:59
[ISP-keychain-keyid-1]receive-time daily 00:00 to 23:59
[ISP-keychain-keyid-1]q
[ISP-keychain]q
[ISP]bgp 65200
[ISP-bgp]peer 201.1.4.5 keychain toAR3
[ISP-bgp]q
[ISP]
```

### （3）配置路由反射器

​    IBGP对等体之间不需要建立全连接关系，将路由器AR2配置为BGP路由反射器，AR1和AR3作为客户机

```
[AR2]bgp 65100
[AR2-bgp]undo reflect between-clients 
[AR2-bgp]reflector cluster-id 123
[AR2-bgp]peer 10.1.1.1 reflect-client 
[AR2-bgp]peer 10.3.3.3 reflect-client 
[AR2-bgp]q
[AR2]
```


### （4）配置BGP路由聚合

​    在边界路由器AR1和AR3上分别配置BGP路由聚合，减少路由ISP路由表大小

```
# AR1配置
[AR1]bgp 65100
[AR1-bgp]aggregate 201.1.0.0 255.255.252.0 as-set detail-suppressed 
[AR1-bgp]q
[AR1]

# AR3配置
[AR3]bgp 65100	
[AR3-bgp]aggregate 201.1.0.0 255.255.252.0 as-set detail-suppressed
[AR3-bgp]q
[AR3]
```


### （5）配置BGP团体属性

​    在边界路由器AR1和AR3上分别配置BGP团体属性，实现聚合路由发布给ISP路由器时携带团体属性

```
# AR1配置
[AR1]ip ip-prefix AR1 index 10 permit 201.1.0.0 22
[AR1]route-policy AR1 permit node 10
Info: New Sequence of this List.
[AR1-route-policy]if-match ip-prefix AR1
[AR1-route-policy]apply community 65100:123
[AR1-route-policy]q
[AR1]route-policy AR1 permit node 20
Info: New Sequence of this List.
[AR1-route-policy]q
[AR1]bgp 65100
[AR1-bgp]peer 201.1.4.2 route-policy AR1 export
[AR1-bgp]peer 201.1.4.2 advertise-community
[AR1-bgp]q
[AR1]

# AR3配置
[AR3]ip ip-prefix AR3 index 10 permit 201.1.0.0 22
[AR3]route-policy AR3 permit node 10
Info: New Sequence of this List.
[AR3-route-policy]if-match ip-prefix AR3
[AR3-route-policy]apply community 65100:123
[AR3-route-policy]q
[AR3]route-policy AR3 permit node 20
Info: New Sequence of this List.
[AR3-route-policy]q
[AR3]bgp 65100
[AR3-bgp]peer 201.1.4.6 route-policy AR3 export
[AR3-bgp]peer 201.1.4.6 advertise-community
[AR3-bgp]q
[AR3]
```


### （6）配置BGP Damping

​    在路由器AR1上对4.4.4.4路由配置Damping功能，抑制不稳定路由

```
[AR1]ip ip-prefix 4 index 10 permit 4.4.4.4 32
[AR1]route-policy formISP permit node 10
Info: New Sequence of this List.
[AR1-route-policy]if-match ip-prefix 4
[AR1-route-policy]apply dampening 15 750 2000 3000
[AR1-route-policy]q
[AR1]route-policy formISP permit node 20
Info: New Sequence of this List.
[AR1-route-policy]q
[AR1]bgp 65100
[AR1-bgp]dampening route-policy formISP
[AR1-bgp]q
[AR1]
```


# 验证

（1）查看TCP连接状态信息

```
<ISP>display tcp status | include 179

<AR2>display tcp status | include 179
```

![](/static/img/华为ENSP--BGP路由协议实验详解/f87f605d67544f37b38164c5888ac837.png)

![](/static/img/华为ENSP--BGP路由协议实验详解/d045ac3a3cfc480ab0de5662df5f64fb.png)


（2）查看四个设备的BGP对等体信息

```
<AR1>display bgp peer
```


​    **AR1** 

![](/static/img/华为ENSP--BGP路由协议实验详解/65b0ad47b1a94196ad2db611545f3833.png)

​    **AR2** 

![](/static/img/华为ENSP--BGP路由协议实验详解/5806b90022a443ba829944a2d6b8a1f7.png)

​    **AR3** 

![](/static/img/华为ENSP--BGP路由协议实验详解/73db185b344144daade2183ae04add47.png)

​    **ISP** 

![](/static/img/华为ENSP--BGP路由协议实验详解/5ac7ec8440d34ce5a8cb6d8e6c660da9.png)

（3）查看BGP对等体详细信息

```
<AR3>display bgp peer 201.1.4.6 verbose
```

![](/static/img/华为ENSP--BGP路由协议实验详解/ac9e500f62c04ee3946e96a1aed77cf2.png)

（4）查看BGP初始化默认配置

```
[AR2]display default-parameter bgp
```

![](/static/img/华为ENSP--BGP路由协议实验详解/69411601a83241559618027e1468f614.png)


（5）查看AR1的BGP路由信息

```
<AR1>display bgp routing-table
```

![](/static/img/华为ENSP--BGP路由协议实验详解/59fea424c69a48fca8e7f4ba8dfae7e7.png)


（6）查看BGP路由详细信息

```
[AR2]display bgp routing-table 4.4.4.4 32
```

![](/static/img/华为ENSP--BGP路由协议实验详解/a59bf2ae4c3743598900f8d02f89938d.png)


（7）查看BGP路由表中携带团体属性的路由

```
<ISP>display bgp routing-table community
```

![](/static/img/华为ENSP--BGP路由协议实验详解/38378e43c37d4787a9832a2b103c05c9.png)



# 实验包

[配置BGP实现企业网络接入运营商网络![img](https://csdnimg.cn/release/blog_editor_html/release2.4.5/ckeditor/plugins/CsdnLink/icons/icon-default.png?t=PBP8)https://www.alipan.com/s/ogaqitQfUwo](https://www.alipan.com/s/ogaqitQfUwo)

华为ENSP--BGP路由协议实验详解

四种远程登录管理方式

##  项目拓扑

![](/static/img/华为VER系统及CLI命令熟悉/31fb111a748645e68eb265c8eeb1b4bf.png)


## 项目任务

### 一、视图切换，配置设备名称

路由器进入系统视图，并配置设备名称

```
<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname AR1
[AR1]
```


路由器切换回用户视图，并保存设置

```
[AR1]quit
<AR1>save
<AR1>

或者

[AR1]return
<AR1>save
<AR1>
```

交换机也是同路由器一样的操作命令



### 二、查看设备VRP版本

查看并记录AR1的版本

```
[AR1]display version
```

![](/static/img/华为VER系统及CLI命令熟悉/2ffd741b59184e8cad50a42e125c228c.png)



查看并记录SW1的版本

```
[SW1]display version
```

![](/static/img/华为VER系统及CLI命令熟悉/f9907d6a59de4bf89283844cb27fbc40.png)


### 三、熟悉在线帮助

​    在路由器上要熟悉完全帮助和不完全帮助

**完全帮助**

【1】显示display可以查看的所有命令

```
[AR1]display ?
```

![](/static/img/华为VER系统及CLI命令熟悉/3b1a1cc2577c47679d6dcb802f808b2f.png)


【2】显示用户视图下可以使用的所有命令

```
<AR1>?
```

![](/static/img/华为VER系统及CLI命令熟悉/2fd6ec333f084a0aa9210b0c19ecfdb5.png)


**部分帮助**

【1】用户视图下，显示所有以 “ d ” 开头的命令

```
<AR1>d?
```

![](/static/img/华为VER系统及CLI命令熟悉/6f89dfb981824a0cb1a18f829d828de3.png)


【2】显示display查询命令可以查看所有以 “ i ” 开头的命令

![](/static/img/华为VER系统及CLI命令熟悉/1c9d03eee48d4286aec136b5b59adda4.png)


### 四、熟悉查询命令行使用

【1】使用查询命令行查看某个协议或服务的配置

```
[SW1]display vlan
```

![](/static/img/华为VER系统及CLI命令熟悉/b872d8c418da418e805ad40357ce6e23.png)


【2】使用查询命令行查看设备当前配置与起始配置

当前配置

```
[SW1]display current-configuration
```

![](/static/img/华为VER系统及CLI命令熟悉/e46c7fb2990746f48d077cb18bf563c2.png)


起始配置

```
[SW1]display saved-configuration 
```

![](/static/img/华为VER系统及CLI命令熟悉/0b1063df82864651ab10eec10450a622.png)


【3】使用查询命令行查看当前视图下的配置

查看全局系统视图下的配置

```
[SW1]display this
```

![](/static/img/华为VER系统及CLI命令熟悉/e487e15a51d44a6c81df268f21c4da7d.png)


查看某接口视图下的配置

```
[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]display this
```

![](/static/img/华为VER系统及CLI命令熟悉/93625021466444048159014dc0786c6a.png)



查看AAA视图下的配置

```
[SW1-aaa]display this
```

![](/static/img/华为VER系统及CLI命令熟悉/2365ce322d6a44dfbe3f51ffd43e2994.png)


### 五、设置命令行显示信息的过滤方式

使用查询命令查看当前配置，设置过滤方式为包含字符串 “ Gigabit ” （过滤方式字符串 区分大小写）

```
[SW1]display current-configuration | include Gigabit
```

![](/static/img/华为VER系统及CLI命令熟悉/26674077d2a74c6bb16f54b937f1c7b2.png)


使用查询命令查看当前配置，设置过滤方式为不包含字符串 “ Gigabit ” 或 “ # ”（过滤方式字符串区分大小写） 

```
[SW1]display current-configuration | exclude Gigabit|#
```

![](/static/img/华为VER系统及CLI命令熟悉/9af1ce7cf01c4a34a19b7045b56d0839.png)

使用查询命令查看当前配置，设置过滤方式为匹配 “ user-interface ” 开始之后的配置

```
[SW1]display current-configuration | begin user-interface
```

![](/static/img/华为VER系统及CLI命令熟悉/b5c13360fec9489e8e4008df0e76d7ab.png)



### 六、配置系统时钟

【1】显示当前时钟

```
[AR1]display clock
```

![](/static/img/华为VER系统及CLI命令熟悉/13ba36be878c4883868ca8a47e943bcc.png)


【2】设置时区，名为Beijing，时区为东8区

```
<AR1>clock timezone Beijing minus 8:00:00
# 东12时区使用minus，表示时间比UTC时间早；西时区使用add，表示时间比UTC时间迟
```


【3】设置当前日期和时间（将【1】）显示时间推迟一个小时

```
<AR1>clock datetime 20:31:25 2024-11-20
```


【4】再次显示当前时钟，确认配置修改

```
<AR1>display clock
```

![](/static/img/华为VER系统及CLI命令熟悉/9f1e3ea208d249ab9b0fb5968043b481.png)


### 七、配置IP地址

路由器配置IP地址

```
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]ip address 10.0.0.1 24
[AR1-GigabitEthernet0/0/0]q
[AR1]
```

交换机配置IP地址

```
[SW1]interface vlan1
[SW1-Vlanif1]ip address 10.0.0.2 24
[SW1-Vlanif1]q
[SW1]
**```**

项目背景

一、Console登录管理

项目拓扑