[case sharing] configure the routing penetration function of IS-IS

The topology

Networking requirements

As shown in the figure , Headquarters and branches of a company 1 Use IS-IS Routing protocol for interconnection . An independent network has been set up for the marketing department and the finance department in the company's headquarters . A division of the company 2 It uses OSPF Routing protocol . Current requirements ：

• The marketing department and the finance department in the headquarters of the company can communicate ; And configure the routing penetration function , Between headquarters and branches 、 The marketing department and the branch can communicate normally , The finance department and the branch cannot communicate , And the branch cannot view the routing information of the finance department .

• Segment 2 Of OSPF Routing is introduced into the network of the company branch , And ensure that the marketing department and branches 2 Can communicate .

• When the gateway equipment of the headquarters Router_3 IS-IS When the protocol process restarts , The original communication is uninterrupted .

Operation steps

Router_1 Configuration of

sysname Router_1
#
isis 1    // To configure IS-IS Basic function 
 is-level level-1
 network-entity 10.0000.0000.1001.00
#
interface GigabitEthernet2/0/1
 ip address 1.1.1.1 255.255.255.0
 isis enable 1
#
interface GigabitEthernet2/0/2
 ip address 10.100.1.1 255.255.255.0
 isis enable 1
#

Router_2 Configuration of

sysname Router_2
#
isis 1    // To configure IS-IS Basic function 
 is-level level-1
 network-entity 10.0000.0000.2001.00
#
interface GigabitEthernet2/0/1
 ip address 1.1.2.1 255.255.255.0
 isis enable 1
#
interface GigabitEthernet2/0/2
 ip address 10.100.2.1 255.255.255.0
 isis enable 1
#
return

Router_3 Configuration of

sysname Router_3
# 
isis 1    // To configure IS-IS Basic function 
 graceful-restart    // Can make IS-IS Agreed GR Ability 
 network-entity 10.0000.0001.0001.00
 import-route isis level-1 into level-2 filter-policy ip-prefix 1    // To configure IS-IS Route penetration , And quote the name 1 List of address prefixes , Realization Level-1 Area will only 10.100.1.0/24 The routing information of the network segment goes to Level-2 Release 
#
interface GigabitEthernet2/0/1
 ip address 1.1.1.2 255.255.255.0
 isis enable 1
#
interface GigabitEthernet2/0/2
 ip address 1.1.2.2 255.255.255.0
 isis enable 1
#
interface GigabitEthernet2/0/3
 ip address 1.1.10.1 255.255.255.0
 isis enable 1
#
ip ip-prefix 1 index 10 permit 10.100.1.0 24
#
return

Router_4 Configuration of

sysname Router_4
#
isis 1    // To configure IS-IS Basic function 
 is-level level-2
 network-entity 20.0000.0002.0001.00
 import-route direct    // To configure IS-IS Process introduces direct route 
 import-route ospf 1    // To configure IS-IS Process introduction OSPF Process routing 
#
interface GigabitEthernet2/0/1 
 ip address 1.1.10.2 255.255.255.0
 isis enable 1
#
interface GigabitEthernet2/0/2
 ip address 1.1.20.1 255.255.255.0
 isis enable 1
#
ospf 1    // To configure OSPF Basic function 
 import-route direct    // To configure OSPF Process introduces direct route 
 import-route isis 1    // To configure OSPF Process introduction IS-IS Process routing 
 area 0.0.0.0
  network 1.1.20.0 0.0.0.255
#
return

Router_5 Configuration of

sysname Router_5
#
interface GigabitEthernet2/0/1
 ip address 1.1.20.2 255.255.255.0
#
interface GigabitEthernet2/0/2
 ip address 10.200.1.1 255.255.255.0
#
ospf 1    // To configure OSPF Basic function 
 area 0.0.0.0
  network 10.200.1.0 0.0.0.255
  network 1.1.20.0 0.0.0.255
#
return

Verify configuration results

• stay Router_4 Check out IS-IS Routing table , You can check the marketing department （10.100.1.0/24） The routing , Unable to view the finance department （10.100.2.0/24） The routing , Explain that the company branch can only communicate with the marketing department .

• stay Router_3 Check out IS-IS Routing table , You can see 10.200.1.0/24 The routing , And perform ping Order to 10.200.1.1 Address , Routing can be up to , Explain the marketing department and branches of the company 2 Can communicate normally .

• stay Router_1 Continue to execute ping Order to Router_2, In the meantime Router_3 Restart on IS-IS process , see Router_3 Of IS-IS When the protocol restarts , Communication is not interrupted . And use display isis graceful-restart status command , You can see Router_3 On IS-IS Agreed GR state .

  Welcome to WeChat official account. 【 Xiamen Weisi network 】.www.xmws.cn major IT Certification training 19 Anniversary of the
Main courses ： Cisco 、 Huawei 、 Red hat 、ORACLE、VMware、CISP、PMP And other certification training and research