Juniper
1. RIPv1
例)インターフェースeth0/2.1(192.168.255.254/24)でRIPv1によるルーティングを行う。
[[SSG]]-> set vrouter "trust-vr"
SSG(trust-vr)-> set protocol rip
SSG(trust-vr)-> set enable
SSG(trust-vr)-> set version v1
SSG(trust-vr)-> exit
SSG-> set interface ethernet0/2.1 protocol rip enable
2. RIP情報の確認
SSG-> get vrouter "trust-vr" protocol rip
VR: trust-vr
----------------------------------------------------------------------------
State: enabled
Version: 1
Default metric for routes redistributed into RIP: 10
Maximum neighbors per interface: 16
Not validating neighbor in same subnet: disabled
Next RIP update scheduled after: 20 sec
Maximum number of Alternate routes per prefix: 0
Advertising default route: disabled
Default routes learnt by RIP will be accepted
Incoming routes filter and offset-metric: not configured
Outgoing routes filter and offset-metric: not configured
Update packet threshold is not configured
Total number of RIP interfaces created on vr(trust-vr): 1
Update| Invalid| Flush| DC Retransmit| DC Poll| Hold Down (Timers in seconds)
-------------------------------------------------------------
30| 180| 120| 5| 180| 90
Flags: Split Horizon - S, Split Horizon with Poison Reverse - P, Passive - I
Demand Circuit - D
Interface IP-Prefix Admin State Flags NbrCnt Metric Ver-Rx/Tx
----------------------------------------------------------------------------
eth0/2.1 192.168.255.254/24 enabled enabled S 1 1 1/1
Cisco
1. Route Filtering
例)RIPにて受信したルートの内、不要なルート(192.168.16.0/24, 192.168.17.0/24)をフィルタリングする。
最初に、RIPの設定を行う。
VRF環境のため、address-familyにてVRF01を指定する。
router rip
address-family ipv4 vrf VRF01
[[network]] 172.16.0.0
network 192.168.33.0
no auto-summary
version 1
exit-address-family
exit
ルートフィルタリング適用前のルーティングテーブル
Switch(config)#do show ip route vrf VRF01
Load for five secs: 7%/0%; one minute: 10%; five minutes: 9%
Time source is [[NTP]], 02:54:18.860 JST Sun Dec 22 2013
[[Routing]] Table: VRF01
Codes: C - connected, S - static, R - RIP, M - mobile, B - [[BGP]]
D - EIGRP, EX - EIGRP external, O - [[OSPF]], IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.255.254 to network 0.0.0.0
R 172.16.0.0/16 [120/1] via 192.168.255.254, 00:00:28, Vlan997
C 192.168.255.0/24 is directly connected, Vlan997
R 192.168.17.0/24 [120/2] via 192.168.255.254, 00:00:28, Vlan997
R 192.168.16.0/24 [120/2] via 192.168.255.254, 00:00:28, Vlan997
C 192.168.33.0/24 is directly connected, Vlan33
R* 0.0.0.0/0 [120/1] via 192.168.255.254, 00:00:28, Vlan997
Prefix-listにより192.168.16.0/22 ~ 24の範囲のルートをフィルタリング対象とする。
それいがいのルートは全て受け付ける。
ip prefix-list rip-list01 seq 5 deny 192.168.16.0/22 le 24
ip prefix-list rip-list01 seq 10 permit 0.0.0.0/0 le 32
RIPにフィルタリングをIN方向で適用する。
router rip
address-family ipv4 vrf VRF01
distribute-list prefix rip-list01 in
exit-address-family
exit
ルートフィルタリング適用後のルーティングテーブル。
192.168.16.0/24及び192.168.17.0/24がフィルタリングされていることが分かる。
Switch(config)#do show ip route vrf VRF01
Load for five secs: 7%/0%; one minute: 7%; five minutes: 8%
Time source is NTP, 02:58:16.153 JST Sun Dec 22 2013
Routing Table: VRF01
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.255.254 to network 0.0.0.0
R 172.16.0.0/16 [120/1] via 192.168.255.254, 00:00:03, Vlan997
C 192.168.255.0/24 is directly connected, Vlan997
C 192.168.33.0/24 is directly connected, Vlan33
R* 0.0.0.0/0 [120/1] via 192.168.255.254, 00:00:03, Vlan997
最終更新:2013年12月22日 03:29