實驗需求

1、讓 R3 可以學(xué)到R1的 192.168.10.0/24和192.168.20.0/24的 路由，不能學(xué)到192.168.30.0/24。
2、讓 R1可以學(xué)到 R3 的 172.16.20.0/24和172.16.30.0/24的路由，不能學(xué)到 172.16.10.0/24，并且cost 設(shè)置為 10。

拓撲

配置

AR1

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysn AR1[AR1]undo info-center en
Info: Information center is disabled.[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip address 12.1.1.1 30
[AR1-GigabitEthernet0/0/0]QU##創(chuàng)建三個回訪口，并配置規(guī)劃好的IP地址
[AR1]int LoopBack 1
[AR1-LoopBack1]ip address 192.168.10.1 24
[AR1-LoopBack1]qu[AR1]int lo2
[AR1-LoopBack2]ip address 192.168.20.1 24
[AR1-LoopBack2]qu[AR1]int lo3
[AR1-LoopBack3]ip address 192.168.30.1 24
[AR1-LoopBack3]qu## 進入RIP進程1,修改RIP版本為2，宣告的時候不用帶掩碼
[AR1]rip
[AR1-rip-1]version 2
[AR1-rip-1]network 12.0.0.0
[AR1-rip-1]network 192.168.10.0
[AR1-rip-1]network 192.168.20.0
[AR1-rip-1]network 192.168.30.0
[AR1-rip-1]quit

AR2

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname AR2[AR2]undo info-center enable 
Info: Information center is disabled.[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ip address 12.1.1.2 30
[AR2-GigabitEthernet0/0/0]qu[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]ip address 23.1.1.1 30
[AR2-GigabitEthernet0/0/1]qu[AR2]rip
[AR2-rip-1]version 2
[AR2-rip-1]network 12.0.0.0
[AR2-rip-1]quit[AR2]ospf 10 router-id 2.2.2.2
[AR2-ospf-10]area 0
[AR2-ospf-10-area-0.0.0.0]network 23.1.1.0 0.0.0.3
[AR2-ospf-10-area-0.0.0.0]quit

需求1

## 選擇要放行的流量
[AR2]acl 2000
[AR2-acl-basic-2000]rule permit source 192.168.10.0 0.0.0.255
[AR2-acl-basic-2000]rule permit source 192.168.20.0 0.0.0.255
[AR2-acl-basic-2000]qu## 創(chuàng)建路由策略“Learn_R1”,動作允許，序號為10
[AR2]route-policy Learn_R1 permit node 10
[AR2-route-policy]if-match acl 2000      ## 包含ACL 2000流量
[AR2-route-policy]quit## 將RIP進程1 導(dǎo)入OSPF進程10中
[AR2]ospf 10
[AR2-ospf-10]import-route rip 1 route-policy Learn_R1
[AR2-ospf-10]qu

需求2

[AR2]acl 2001
[AR2-acl-basic-2001]rule permit source 172.16.20.0 0.0.0.255
[AR2-acl-basic-2001]rule permit source 172.16.30.0 0.0.0.25
[AR2-acl-basic-2001]qu[AR2]route-policy Learn_R3 permit node 10
Info: New Sequence of this List.	
[AR2-route-policy]if-match acl 2001
[AR2-route-policy]apply cost 10## 將OSPF進程10 導(dǎo)入RIP進程1中
[AR2]rip
[AR2-rip-1]import-route ospf 10 route-policy Learn_R3
[AR2-rip-1]qu

AR3

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysn AR3[AR3]undo info-center en
Info: Information center is disabled.[AR3]int g0/0/0
[AR3-GigabitEthernet0/0/0]ip address 23.1.1.2 30
[AR3-GigabitEthernet0/0/0]qu##創(chuàng)建三個回訪口，并配置規(guī)劃好的IP地址
[AR3]int lo1	
[AR3-LoopBack1]ip address 172.16.10.1 24
[AR3-LoopBack1]qu[AR3]int lo2
[AR3-LoopBack2]ip address 172.16.20.1 24
[AR3-LoopBack2]qu[AR3]int lo3
[AR3-LoopBack3]ip address 172.16.30.1 24
[AR3-LoopBack3]qu## 進入OSPF進程10，RID指定為3.3.3.3 ，并進去骨干區(qū)域0宣告自己內(nèi)部流量
[AR3]ospf 10 router-id 3.3.3.3
[AR3-ospf-10]area 0	
[AR3-ospf-10-area-0.0.0.0]network 172.16.10.0 0.0.0.255
[AR3-ospf-10-area-0.0.0.0]network 172.16.20.0 0.0.0.255
[AR3-ospf-10-area-0.0.0.0]network 172.16.30.0 0.0.0.255
[AR3-ospf-10-area-0.0.0.0]network 23.1.1.0 0.0.0.3

檢驗

AR1身上已經(jīng)學(xué)到了AR3的兩條路由，并且跳數(shù)設(shè)置為11
AR1到AR2需要1跳，AR1又從AR2身上學(xué)到了AR3的兩條路由，跳數(shù)又為10
所以總得跳數(shù)就為11啦，說明實驗效果成功啦

此時AR3已經(jīng)學(xué)到了AR1的192.168.10.0/24和192.168.20.0/24