- 产品与解决方案
- 行业解决方案
- 服务
- 支持
- 合作伙伴
- 新华三人才研学中心
- 关于我们
24-IS-IS典型配置举例
本章节下载： 24-IS-IS典型配置举例 (177.59 KB)
目 录
本章介绍了IS-IS路由协议的各种典型配置。
表1 配置适用的产品与软件版本关系
|
产品 |
软件版本 |
|
S5830V2&S5820V2系列以太网交换机 |
Release 2208P01，Release 2210 |
如图1所示网络，通过配置IS-IS基本功能实现网络内所有设备的路由互通，每台设备都能学习到网络中所有网段的路由。
图1 IS-IS基本配置组网图
(1) 配置各接口的IP地址（略）
(2) 配置IS-IS基本功能
# 配置Switch A。
<SwitchA> system-view
[SwitchA] isis 1
[SwitchA-isis-1] is-level level-1
[SwitchA-isis-1] network-entity 10.0000.0000.0001.00
[SwitchA-isis-1] quit
[SwitchA] interface vlan-interface 100
[SwitchA-Vlan-interface100] isis enable 1
[SwitchA-Vlan-interface100] quit
# 配置Switch B。
<SwitchB> system-view
[SwitchB] isis 1
[SwitchB-isis-1] is-level level-1
[SwitchB-isis-1] network-entity 10.0000.0000.0002.00
[SwitchB-isis-1] quit
[SwitchB] interface vlan-interface 200
[SwitchB-Vlan-interface200] isis enable 1
[SwitchB-Vlan-interface200] quit
# 配置Switch C。
<SwitchC> system-view
[SwitchC] isis 1
[SwitchC-isis-1] network-entity 10.0000.0000.0003.00
[SwitchC-isis-1] quit
[SwitchC] interface vlan-interface 100
[SwitchC-Vlan-interface100] isis enable 1
[SwitchC-Vlan-interface100] quit
[SwitchC] interface vlan-interface 200
[SwitchC-Vlan-interface200] isis enable 1
[SwitchC-Vlan-interface200] quit
[SwitchC] interface vlan-interface 300
[SwitchC-Vlan-interface300] isis enable 1
[SwitchC-Vlan-interface300] quit
# 配置Switch D。
<SwitchD> system-view
[SwitchD] isis 1
[SwitchD-isis-1] is-level level-2
[SwitchD-isis-1] network-entity 20.0000.0000.0004.00
[SwitchD-isis-1] quit
[SwitchD] interface vlan-interface 100
[SwitchD-Vlan-interface100] isis enable 1
[SwitchD-Vlan-interface100] quit
[SwitchD] interface vlan-interface 300
[SwitchD-Vlan-interface300] isis enable 1
[SwitchD-Vlan-interface300] quit
# 查看各交换机的邻居信息，可以看到Switch A、Switch B与Switch C，Switch C与Switch D形成了IS-IS邻居。
[SwitchA]display isis peer
Peer information for IS-IS(1)
-----------------------------
System Id: 0000.0000.0003
Interface: Vlan100 Circuit Id: 0000.0000.0001.01
State: Up HoldTime: 24s Type: L1(L1L2) PRI: 64
[SwitchB]display isis peer
Peer information for IS-IS(1)
-----------------------------
System Id: 0000.0000.0003
Interface: Vlan100 Circuit Id: 0000.0000.0002.01
State: Up HoldTime: 24s Type: L1(L1L2) PRI: 64
[SwitchC]display isis peer
Peer information for IS-IS(1)
-----------------------------
System Id: 0000.0000.0001
Interface: Vlan100 Circuit Id: 0000.0000.0001.01
State: Up HoldTime: 7s Type: L1 PRI: 64
System Id: 0000.0000.0004
Interface: Vlan300 Circuit Id: 0000.0000.0004.01
State: Up HoldTime: 8s Type: L2 PRI: 64
System Id: 0000.0000.0002
Interface: Vlan200 Circuit Id: 0000.0000.0002.01
State: Up HoldTime: 8s Type: L1 PRI: 64
[SwitchD]display isis peer
Peer information for IS-IS(1)
-----------------------------
System Id: 0000.0000.0003
Interface: Vlan300 Circuit Id: 0000.0000.0004.01
State: Up HoldTime: 24s Type: L2(L1L2) PRI: 64
# 显示各交换机的IS-IS LSDB信息，查看LSP是否完整。
[SwitchA] display isis lsdb
Database information for IS-IS(1)
---------------------------------
Level-1 Link State Database
---------------------------
LSPID Seq Num Checksum Holdtime Length ATT/P/OL
--------------------------------------------------------------------------
0000.0000.0001.00-00* 0x00000004 0xdf5e 1096 68 0/0/0
0000.0000.0002.00-00 0x00000004 0xee4d 1102 68 0/0/0
0000.0000.0002.01-00 0x00000001 0xdaaf 1102 55 0/0/0
0000.0000.0003.00-00 0x00000009 0xcaa3 1161 111 1/0/0
0000.0000.0003.01-00 0x00000001 0xadda 1112 55 0/0/0
*-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload
[SwitchB] display isis lsdb
Database information for IS-IS(1)
---------------------------------
Level-1 Link State Database
---------------------------
LSPID Seq Num Checksum Holdtime Length ATT/P/OL
--------------------------------------------------------------------------
0000.0000.0001.00-00 0x00000006 0xdb60 988 68 0/0/0
0000.0000.0002.00-00* 0x00000008 0xe651 1189 68 0/0/0
0000.0000.0002.01-00* 0x00000005 0xd2b3 1188 55 0/0/0
0000.0000.0003.00-00 0x00000014 0x194a 1190 111 1/0/0
0000.0000.0003.01-00 0x00000002 0xabdb 995 55 0/0/0
*-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload
[SwitchC] display isis lsdb
Database information for IS-IS(1)
---------------------------------
Level-1 Link State Database
---------------------------
LSPID Seq Num Checksum Holdtime Length ATT/P/OL
--------------------------------------------------------------------------
0000.0000.0001.00-00 0x00000006 0xdb60 847 68 0/0/0
0000.0000.0002.00-00 0x00000008 0xe651 1053 68 0/0/0
0000.0000.0002.01-00 0x00000005 0xd2b3 1052 55 0/0/0
0000.0000.0003.00-00* 0x00000014 0x194a 1051 111 1/0/0
0000.0000.0003.01-00* 0x00000002 0xabdb 854 55 0/0/0
*-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload
Level-2 Link State Database
---------------------------
LSPID Seq Num Checksum Holdtime Length ATT/P/OL
--------------------------------------------------------------------------
0000.0000.0003.00-00* 0x00000012 0xc93c 842 100 0/0/0
0000.0000.0004.00-00 0x00000026 0x331 1173 84 0/0/0
0000.0000.0004.01-00 0x00000001 0xee95 668 55 0/0/0
*-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload
[SwitchD] display isis lsdb
Database information for IS-IS(1)
---------------------------------
Level-2 Link State Database
---------------------------
LSPID Seq Num Checksum Holdtime Length ATT/P/OL
-------------------------------------------------------------------------------
0000.0000.0003.00-00 0x00000013 0xc73d 1003 100 0/0/0
0000.0000.0004.00-00* 0x0000003c 0xd647 1194 84 0/0/0
0000.0000.0004.01-00* 0x00000002 0xec96 1007 55 0/0/0
*-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload
# 显示各交换机的IS-IS路由信息。Level-1交换机的路由表中应该有一条缺省路由，且下一跳为Level-1-2交换机，Level-2交换机的路由表中应该有所有Level-1和Level-2的路由。
[SwitchA] display isis route
Route information for IS-IS(1)
------------------------------
Level-1 IPv4 Forwarding Table
-----------------------------
IPv4 Destination IntCost ExtCost ExitInterface NextHop Flags
-------------------------------------------------------------------------------
10.1.1.0/24 10 NULL Vlan100 Direct D/L/-
10.1.2.0/24 20 NULL Vlan100 10.1.1.1 R/-/-
192.168.0.0/24 20 NULL Vlan100 10.1.1.1 R/-/-
0.0.0.0/0 10 NULL Vlan100 10.1.1.1 R/-/-
Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set
[SwitchC] display isis route
Route information for IS-IS(1)
------------------------------
Level-1 IPv4 Forwarding Table
-----------------------------
IPv4 Destination IntCost ExtCost ExitInterface NextHop Flags
-------------------------------------------------------------------------------
192.168.0.0/24 10 NULL Vlan300 Direct D/L/-
10.1.1.0/24 10 NULL Vlan100 Direct D/L/-
10.1.2.0/24 10 NULL Vlan200 Direct D/L/-
Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set
Level-2 IPv4 Forwarding Table
-----------------------------
IPv4 Destination IntCost ExtCost ExitInterface NextHop Flags
-------------------------------------------------------------------------------
192.168.0.0/24 10 NULL Vlan300 Direct D/L/-
10.1.1.0/24 10 NULL Vlan100 Direct D/L/-
10.1.2.0/24 10 NULL Vlan200 Direct D/L/-
172.16.0.0/16 20 NULL Vlan300 192.168.0.2 R/-/-
Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set
[SwitchD] display isis route
Route information for IS-IS(1)
------------------------------
Level-2 IPv4 Forwarding Table
-----------------------------
IPv4 Destination IntCost ExtCost ExitInterface NextHop Flags
-------------------------------------------------------------------------------
192.168.0.0/24 10 NULL Vlan300 Direct D/L/-
10.1.1.0/24 20 NULL Vlan300 192.168.0.1 R/-/-
10.1.2.0/24 20 NULL Vlan300 192.168.0.1 R/-/-
172.16.0.0/16 10 NULL Vlan100 Direct D/L/-
Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set
· Switch A
#
isis 1
is-level level-1
network-entity 10.0000.0000.0001.00
#
vlan 100
#
interface Vlan-interface100
ip address 10.1.1.2 255.255.255.0
isis enable 1
#
· Switch B
#
isis 1
is-level level-1
network-entity 10.0000.0000.0002.00
#
vlan 200
#
interface Vlan-interface200
ip address 10.1.2.2 255.255.255.0
isis enable 1
#
· Switch C
#
isis 1
network-entity 10.0000.0000.0003.00
#
vlan 100
#
vlan 200
#
vlan 300
#
interface Vlan-interface100
ip address 10.1.1.1 255.255.255.0
isis enable 1
#
interface Vlan-interface200
ip address 10.1.2.1 255.255.255.0
isis enable 1
#
interface Vlan-interface300
ip address 192.168.0.1 255.255.255.0
isis enable 1
· Switch D
#
isis 1
network-entity 10.0000.0000.0004.00
is-level level-2
#
vlan 100
#
vlan 300
#
interface Vlan-interface100
ip address 172.16.1.1 255.255.0.0
isis enable 1
#
interface Vlan-interface300
ip address 192.168.0.2 255.255.255.0
isis enable 1
#
表2 配置适用的产品与软件版本关系
|
产品 |
软件版本 |
|
S5830V2&S5820V2系列以太网交换机 |
Release 2208P01，Release 2210 |
如图2所示网络，通过配置GR（Graceful Restart，平滑重启）功能实现设备在协议重启过程中不会产生路由振荡，报文转发路径也没有任何改变，整个系统可以不间断地转发数据。
图2 IS-IS GR配置组网图
(1) 配置各交换机接口的IP地址和IS-IS协议。
(2) 请按照图2配置各接口的IP地址和子网掩码，具体配置过程略。
(3) 配置各交换机之间采用IS-IS协议进行互连，确保Switch A、Switch B和Switch C之间能够在网络层互通，并且各交换机之间能够借助IS-IS协议实现动态路由更新，具体配置过程略。
(4) 配置IS-IS GR
# 使能Switch A的IS-IS协议的GR能力。
<SwitchA> system-view
[SwitchA] isis 1
[SwitchA-isis-1] graceful-restart
[SwitchA-isis-1] return
运行稳定后，在Switch A上以GR方式重启IS-IS进程。可以看到在GR过程中，所有交换机的路由表保持不变，网络保持畅通，此时可以通过ping命令验证GR过程中的网络连通性。
# 重启Switch A的IS-IS进程。
<SwitchA> reset isis all 1 graceful-restart
Reset IS-IS process? [Y/N]:y
# 查看Switch A上IS-IS协议的GR状态。
<SwitchA> display isis graceful-restart status
Restart information for IS-IS(1)
--------------------------------
Restart status: COMPLETE
Restart phase: Finish
Restart t1: 3, count 10; Restart t2: 60; Restart t3: 300
SA Bit: supported
Level-1 restart information
---------------------------
Total number of interfaces: 1
Number of waiting LSPs: 0
Level-2 restart information
---------------------------
Total number of interfaces: 1
Number of waiting LSPs: 0
· Switch A
#
isis 1
is-level level-1
graceful-restart
network-entity 10.0000.0000.0001.00
#
vlan 100
#
interface Vlan-interface100
ip address 10.0.0.1 255.255.255.0
isis enable 1
#
· Switch B
#
isis 1
is-level level-1
network-entity 10.0000.0000.0002.00
#
vlan 100
#
interface Vlan-interface100
ip address 10.0.0.2 255.255.255.0
isis enable 1
#
· Switch C
isis 1
is-level level-1
network-entity 10.0000.0000.0003.00
#
vlan 100
#
interface Vlan-interface100
ip address 10.1.1.2 255.255.255.0
isis enable 1
#
表3 配置适用的产品与软件版本关系
|
产品 |
软件版本 |
|
S5830V2&S5820V2系列以太网交换机 |
Release 2208P01，Release 2210 |
如图3所示网络，所有设备上均运行IS-IS，网络层相互可达。通过配置IS-IS BFD功能，监测通过L2 Switch通信的链路；当链路出现故障时设备能够快速感知并通告IS-IS协议，快速切换到备份链路进行通信。
图3 IS-IS与BFD联动配置组网图
|
设备 |
接口 |
IP地址 |
设备 |
接口 |
IP地址 |
|
Switch A |
Vlan-int10 |
10.1.0.102/24 |
Switch B |
Vlan-int10 |
10.1.0.100/24 |
|
|
Vlan-int11 |
11.1.1.1/24 |
|
Vlan-int13 |
13.1.1.1/24 |
|
Switch C |
Vlan-int11 |
11.1.1.2/24 |
|
|
|
|
|
Vlan-int13 |
13.1.1.2/24 |
|
|
|
BFD control报文双向检测，需要建立IS-IS邻居的两端设备均进行BFD配置。
(1) 配置各接口的IP地址（略）
(2) 配置IS-IS基本功能
# 配置Switch A。
<SwitchA> system-view
[SwitchA] isis
[SwitchA-isis-1] network-entity 10.0000.0000.0001.00
[SwitchA-isis-1] quit
[SwitchA] interface vlan-interface 10
[SwitchA-Vlan-interface10] isis enable
[SwitchA-Vlan-interface10] quit
[SwitchA] interface vlan-interface 11
[SwitchA-Vlan-interface11] isis enable
[SwitchA-Vlan-interface11] quit
# 配置Switch B。
<SwitchB> system-view
[SwitchB] isis
[SwitchB-isis-1] network-entity 10.0000.0000.0002.00
[SwitchB-isis-1] quit
[SwitchB] interface vlan-interface 10
[SwitchB-Vlan-interface10] isis enable
[SwitchB-Vlan-interface10] quit
[SwitchB] interface vlan-interface 13
[SwitchB-Vlan-interface13] isis enable
[SwitchB-Vlan-interface13] quit
# 配置Switch C。
<SwitchC> system-view
[SwitchC] isis
[SwitchC-isis-1] network-entity 10.0000.0000.0003.00
[SwitchC-isis-1] quit
[SwitchC] interface vlan-interface 11
[SwitchC-Vlan-interface11] isis enable
[SwitchC-Vlan-interface11] quit
[SwitchC] interface vlan-interface 13
[SwitchC-Vlan-interface13] isis enable
[SwitchC-Vlan-interface13] quit
配置BFD功能
# 在Switch A上使能BFD检测功能。
[SwitchA] bfd session init-mode passive
[SwitchA] interface vlan-interface 10
[SwitchA-Vlan-interface10] isis bfd enable
# 在Switch B上使能BFD检测功能。
[SwitchB] bfd session init-mode active
[SwitchB] interface vlan-interface 10
[SwitchB-Vlan-interface10] isis bfd enable
下面以Switch A为例，Switch B和Switch A类似，不再赘述。
# 显示Switch A的BFD信息。
<SwitchA> display bfd session
Total Session Num: 1 Up Session Num: 1 Init Mode: Passive
IPv4 Session Working Under Ctrl Mode:
LD/RD SourceAddr DestAddr State Holdtime Interface
33/33 10.1.0.102 10.1.0.100 Up 3820ms
# 在Switch A上查看120.1.1.0/24的路由信息，可以看出Switch A和Switch B是通过L2 Switch进行通信的。
<SwitchA> display ip routing-table 120.1.1.0 verbose
Summary Count : 1
Destination: 120.1.1.0/24
Protocol: ISIS Process ID: 1
SubProtID: 0x1 Age: 04h20m37s
Cost: 10 Preference: 10
Tag: 0 State: Active Adv
OrigTblID: 0x0 OrigVrf: default-vrf
TableID: 0x2 OrigAs: 0
NBRID: 0x26000002 LastAs: 0
AttrID: 0xffffffff Neighbor: 0.0.0.0
Flags: 0x1008c OrigNextHop: 10.1.0.100
Label: NULL RealNextHop: 10.1.0.100
BkLabel: NULL BkNextHop: N/A
Tunnel ID: Invalid Interface: Vlan-interface10
BkTunnel ID: Invalid BkInterface: N/A
当Switch A和Switch B通过L2 Switch通信的链路出现故障时：
# 在Switch A上查看120.1.1.0/24的路由信息，可以看出Switch A和Switch B已经切换到Switch C进行通信。
<SwitchA> display ip routing-table 120.1.1.0 verbose
Summary Count : 1
Destination: 120.1.1.0/24
Protocol: ISIS Process ID: 1
SubProtID: 0x1 Age: 04h20m37s
Cost: 20 Preference: 10
Tag: 0 State: Active Adv
OrigTblID: 0x0 OrigVrf: default-vrf
TableID: 0x2 OrigAs: 0
NBRID: 0x26000002 LastAs: 0
AttrID: 0xffffffff Neighbor: 0.0.0.0
Flags: 0x1008c OrigNextHop: 11.1.1.2
Label: NULL RealNextHop: 11.1.1.2
BkLabel: NULL BkNextHop: N/A
Tunnel ID: Invalid Interface: Vlan-interface11
BkTunnel ID: Invalid BkInterface: N/A
· Switch A
#
isis
network-entity 10.0000.0000.0001.00
#
vlan 10
#
interface Vlan-interface10
ip address 10.1.0.102 255.255.255.0
isis bfd enable
isis enable 1
#
vlan 11
#
interface Vlan-interface11
ip address 11.1.1.1 255.255.255.0
isis enable 1
#
vlan 12
#
interface Vlan-interface12
ip address 121.1.1.1 255.255.255.0
isis enable 1
#
bfd session init-mode passive
#
· Switch B
#
isis
network-entity 10.0000.0000.0002.00
#
vlan 10
#
interface Vlan-interface10
ip address 10.1.0.100 255.255.255.0
isis bfd enable
isis enable 1
#
vlan 12
#
interface Vlan-interface12
ip address 120.1.1.1 255.255.255.0
isis enable 1
#
vlan 13
#
interface Vlan-interface13
ip address 13.1.1.1 255.255.255.0
isis enable 1
#
bfd session init-mode active
#
· Switch C
#
isis
network-entity 10.0000.0000.0003.00
#
vlan 11
#
interface Vlan-interface11
ip address 11.1.1.2 255.255.255.0
isis enable 1
#
vlan 13
#
interface Vlan-interface13
ip address 13.1.1.2 255.255.255.0
isis enable 1
#
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!
支持
售前咨询
售后咨询
人工在线咨询
