实战 | F1060路由模式ISIS典型组网配置案例

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]sysname R1

[R1]int gi 0/0

[R1-GigabitEthernet0/0]ip address 192.168.1.1 24

[R1-GigabitEthernet0/0]quit

[R1]int gi 0/1

[R1-GigabitEthernet0/1]des <connect to FW1>

[R1-GigabitEthernet0/1]ip address 10.0.0.1 30

[R1-GigabitEthernet0/1]quit

[R1]int loopback 0

[R1-LoopBack0]ip address 1.1.1.1 32

[R1-LoopBack0]quit

[R1]isis 1

[R1-isis-1]network-entity 10.0000.0000.0001.00

[R1-isis-1]quit

[R1]int gi 0/0

[R1-GigabitEthernet0/0]isis enable 1

[R1-GigabitEthernet0/0]quit

[R1]int gi 0/1

[R1-GigabitEthernet0/1]isis enable 1

[R1-GigabitEthernet0/1]quit

[R1]int loopback 0

[R1-LoopBack0]isis enable 1

[R1-LoopBack0]quit

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]sysname R2

[R2]int gi 0/0

[R2-GigabitEthernet0/0]ip address 172.16.1.1 24

[R2-GigabitEthernet0/0]quit

[R2]int gi 0/1

[R2-GigabitEthernet0/1]des <connect to FW1>

[R2-GigabitEthernet0/1]ip address 10.0.0.5 30

[R2-GigabitEthernet0/1]quit

[R2]int loopback 0

[R2-LoopBack0]ip address 3.3.3.3 32

[R2-LoopBack0]quit

[R2]isis 1

[R2-isis-1]network 10.0000.0000.0003.00

[R2-isis-1]quit

[R2]int loopback 0

[R2-LoopBack0]isis enable 1

[R2-LoopBack0]quit

[R2]int gi 0/1

[R2-GigabitEthernet0/1]isis enable 1

[R2-GigabitEthernet0/1]quit

[R2]int gi 0/0

[R2-GigabitEthernet0/0]isis enable 1

[R2-GigabitEthernet0/0]quit

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]sysname FW1

[FW1]acl basic 2002

[FW1-acl-ipv4-basic-2002]rule 0 permit source any

[FW1-acl-ipv4-basic-2002]quit

[FW1]

[FW1]zone-pair security source trust destination untrust

[FW1-zone-pair-security-Trust-Untrust]packet-filter 2002

[FW1-zone-pair-security-Trust-Untrust]quit

[FW1]

[FW1]zone-pair security source untrust destination trust

[FW1-zone-pair-security-Untrust-Trust]packet-filter 2002

[FW1-zone-pair-security-Untrust-Trust]quit

[FW1]

[FW1]zone-pair security source trust destination local

[FW1-zone-pair-security-Trust-Local]packet-filter 2002

[FW1-zone-pair-security-Trust-Local]quit

[FW1]

[FW1]zone-pair security source local destination trust

[FW1-zone-pair-security-Local-Trust]packet-filter 2002

[FW1-zone-pair-security-Local-Trust]quit

[FW1]

[FW1]zone-pair security source untrust destination local

[FW1-zone-pair-security-Untrust-Local]packet-filter 2002

[FW1-zone-pair-security-Untrust-Local]quit

[FW1]

[FW1]zone-pair security source local destination untrust

[FW1-zone-pair-security-Local-Untrust]packet-filter 2002

[FW1-zone-pair-security-Local-Untrust]quit

[FW1]

[FW1]zone-pair security source trust destination trust

[FW1-zone-pair-security-Trust-Trust]packet-filter 2002

[FW1-zone-pair-security-Trust-Trust]quit

[FW1]

[FW1]zone-pair security source untrust destination untrust

[FW1-zone-pair-security-Untrust-Untrust]packet-filter 2002

[FW1-zone-pair-security-Untrust-Untrust]quit

[FW1]int loopback 0

[FW1-LoopBack0]ip address 2.2.2.2 32

[FW1-LoopBack0]quit

[FW1]int gi 1/0/2

[FW1-GigabitEthernet1/0/2]des <connect to R1>

[FW1-GigabitEthernet1/0/2]ip address 10.0.0.2 30

[FW1-GigabitEthernet1/0/2]quit

[FW1]int gi 1/0/3

[FW1-GigabitEthernet1/0/3]des <connect to R2>

[FW1-GigabitEthernet1/0/3]ip address 10.0.0.6 30

[FW1-GigabitEthernet1/0/3]quit

[FW1]security-zone name Trust

[FW1-security-zone-Trust]import interface GigabitEthernet 1/0/2

[FW1-security-zone-Trust]import interface loopback 0

[FW1-security-zone-Trust]quit

[FW1]security-zone name Untrust

[FW1-security-zone-Untrust]import interface GigabitEthernet 1/0/3

[FW1-security-zone-Untrust]quit

[FW1]isis 1

[FW1-isis-1]network 10.0000.0000.0002.00

[FW1-isis-1]quit

[FW1]int loopback 0

[FW1-LoopBack0]isis enable 1

[FW1-LoopBack0]quit

[FW1]int gi 1/0/2

[FW1-GigabitEthernet1/0/2]isis enable 1

[FW1-GigabitEthernet1/0/2]quit

[FW1]int gi 1/0/3

[FW1-GigabitEthernet1/0/3]isis enable 1

[FW1-GigabitEthernet1/0/3]quit