IPv4路由基礎(chǔ)配置與靜態(tài)路由(配置ipv4靜態(tài)路由和默認(rèn)路由)

小編：迷魂冰更新時間：2022-10-05 21:03

背景：

AR1、AR2、AR3來自3個不同的網(wǎng)絡(luò)(網(wǎng)段)并且分別為自己網(wǎng)絡(luò)的網(wǎng)關(guān)，通過靜態(tài)路由配置實現(xiàn)各網(wǎng)絡(luò)之間的互通，當(dāng)AR1>AR2線路中斷時能夠?qū)⒘髁孔詣忧袚Q到AR1>AR3>AR2路線進(jìn)行訪問。

拓?fù)洌?/p>

步驟一：

查看3臺設(shè)備是否已經(jīng)配置IP地址

display ip interface brief命令是用來查看接口與IP相關(guān)的簡要信息，包括IP地、子網(wǎng)掩碼、物理狀態(tài)、協(xié)議狀態(tài)等處于不同狀態(tài)的接口數(shù)目等。

system-view #其他兩臺設(shè)備均為此命令查看，這里就不在詳述。 [AR1]display ip interface brief *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 3 The number of interface that is DOWN in Physical is 1 The number of interface that is UP in Protocol is 1 The number of interface that is DOWN in Protocol is 3 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 unassigned up down GigabitEthernet0/0/1 unassigned up down GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)

IP Address/Mask 顯示為unassigned則表示該接口未配置地址

步驟二：

配置設(shè)備與終端互聯(lián)的IP地址以及PC終端地址

AR1：

system-view [AR1]interface GigabitEthernet 0/0/0 [AR1-GigabitEthernet0/0/0]ip address 10.1.12.1 24 [AR1]interface GigabitEthernet 0/0/1 [AR1-GigabitEthernet0/0/1]ip address 10.1.13.1 24 [AR1-GigabitEthernet0/0/2]ip address 1.1.1.1 24

AR2:

system-view [AR2]interface GigabitEthernet 0/0/0 [AR2-GigabitEthernet0/0/0]ip address 10.1.12.2 24 [AR2]interface GigabitEthernet 0/0/1 [AR2-GigabitEthernet0/0/1]ip address 10.1.23.2 24 [AR2-GigabitEthernet0/0/2]ip address 2.2.2.1 24

AR3:

system-view [AR3]interface GigabitEthernet 0/0/0 [AR3-GigabitEthernet0/0/0]ip address 10.1.13.3 24 [AR3]interface GigabitEthernet 0/0/1 [AR3-GigabitEthernet0/0/1]ip address 10.1.23.3 24 [AR3-GigabitEthernet0/0/2]ip address 3.3.3.1 24 IPv4路由基礎(chǔ)配置與靜態(tài)路由(配置ipv4靜態(tài)路由和默認(rèn)路由)

步驟三：

查看物理接口地址是否配置成功

[AR1]display ip interface brief *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 4 The number of interface that is DOWN in Physical is 0 The number of interface that is UP in Protocol is 4 The number of interface that is DOWN in Protocol is 0 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 10.1.12.1/24 up up GigabitEthernet0/0/1 10.1.13.1/24 up up GigabitEthernet0/0/2 1.1.1.1/24 up up NULL0 unassigned up up(s) [AR2]display ip interface brief *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 4 The number of interface that is DOWN in Physical is 0 The number of interface that is UP in Protocol is 4 The number of interface that is DOWN in Protocol is 0 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 10.1.12.2/24 up up GigabitEthernet0/0/1 10.1.23.2/24 up up GigabitEthernet0/0/2 2.2.2.1/24 up up NULL0 unassigned up up(s) [AR3]display ip interface brief *down: administratively down ^down: standby (l): loopback (s): spoofing The number of interface that is UP in Physical is 4 The number of interface that is DOWN in Physical is 0 The number of interface that is UP in Protocol is 4 The number of interface that is DOWN in Protocol is 0 Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 10.1.13.3/24 up up GigabitEthernet0/0/1 10.1.23.3/24 up up GigabitEthernet0/0/2 3.3.3.1/24 up up NULL0 unassigned up up(s)

步驟四：

測試各網(wǎng)段的連通性，在此以AR1為例。

[AR1]ping 10.1.12.2 PING 10.1.12.2: 56 data bytes, press CTRL_C to break Reply from 10.1.12.2: bytes=56 Sequence=1 ttl=255 time=40 ms Reply from 10.1.12.2: bytes=56 Sequence=2 ttl=255 time=30 ms Reply from 10.1.12.2: bytes=56 Sequence=3 ttl=255 time=20 ms Reply from 10.1.12.2: bytes=56 Sequence=4 ttl=255 time=30 ms Reply from 10.1.12.2: bytes=56 Sequence=5 ttl=255 time=20 ms --- 10.1.12.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 20/28/40 ms

[AR1]ping 10.1.13.3 PING 10.1.13.3: 56 data bytes, press CTRL_C to break Reply from 10.1.13.3: bytes=56 Sequence=1 ttl=255 time=60 ms Reply from 10.1.13.3: bytes=56 Sequence=2 ttl=255 time=20 ms Reply from 10.1.13.3: bytes=56 Sequence=3 ttl=255 time=20 ms Reply from 10.1.13.3: bytes=56 Sequence=4 ttl=255 time=20 ms Reply from 10.1.13.3: bytes=56 Sequence=5 ttl=255 time=20 ms --- 10.1.13.3 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 20/28/60 ms

步驟五：

查看AR1的路由表

[AR1]display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 13 Routes : 13 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 0 D 1.1.1.1 GigabitEthernet 0/0/2 1.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 1.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 10.1.12.0/24 Direct 0 0 D 10.1.12.1 GigabitEthernet 0/0/0 10.1.12.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.13.0/24 Direct 0 0 D 10.1.13.1 GigabitEthernet 0/0/1 10.1.13.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 10.1.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0

大家可以看到，當(dāng)接口地址配置完成之后，針對每個接口IP地址會自動生成3條直連路由。

步驟六：

測試PC1與PC2之間的連通性

PC>ping 2.2.2.5 Ping 2.2.2.5: 32 data bytes, Press Ctrl_C to break Request timeout! Request timeout! Request timeout! Request timeout! Request timeout! --- 2.2.2.5 ping statistics --- 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss

使用Ping命令來指定發(fā)送ICMP echo-request報文，此時由于路由器上沒有到達(dá)該目的IP的路由條目，所以無法Ping通PC2。

步驟七：

在AR1上配置到達(dá)AR2和AR3的PC網(wǎng)段的路由條目

ip route-static 2.2.2.5 24 10.1.12.2 ip route-static 3.3.3.5 24 10.1.13.3

查看AR1的路由表

[AR1]dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 15 Routes : 15 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 0 D 1.1.1.1 GigabitEthernet 0/0/2 1.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 1.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 2.2.2.0/24 Static 60 0 RD 10.1.12.2 GigabitEthernet 0/0/0 3.3.3.0/24 Static 60 0 RD 10.1.13.3 GigabitEthernet 0/0/1 10.1.12.0/24 Direct 0 0 D 10.1.12.1 GigabitEthernet 0/0/0 10.1.12.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.13.0/24 Direct 0 0 D 10.1.13.1 GigabitEthernet 0/0/1 10.1.13.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 10.1.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0

此時查看標(biāo)紅處我們配置的靜態(tài)路由已經(jīng)加入到了AR1的路由表中。

此時我們再次測試PC1是否能與PC2互通

PC1>ping 2.2.2.5 Ping 2.2.2.5: 32 data bytes, Press Ctrl_C to break Request timeout! Request timeout! Request timeout! Request timeout! Request timeout! --- 2.2.2.5 ping statistics --- 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss

大家可以看到，我們雖然寫了去往PC2的靜態(tài)路由但是還是無法通信，原因就是數(shù)據(jù)包去往PC2后他無法將數(shù)據(jù)包返回到我們PC1的接口，靜態(tài)路由是需要我們將兩端的雙向路由都要寫進(jìn)各自的路由表中，這樣我們才能通信。

此時我們將AR2也添加上去往PC1的路由再來試試。

[AR2]ip route-static 1.1.1.5 24 10.1.12.1

查看我們的AR2的路由表中是否存在去往AR1中PC網(wǎng)關(guān)的路由條目。

[AR2]display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 14 Routes : 14 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Static 60 0 RD 10.1.12.1 GigabitEthernet 0/0/0 2.2.2.0/24 Direct 0 0 D 2.2.2.1 GigabitEthernet 0/0/2 2.2.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 2.2.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 10.1.12.0/24 Direct 0 0 D 10.1.12.2 GigabitEthernet 0/0/0 10.1.12.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.23.0/24 Direct 0 0 D 10.1.23.2 GigabitEthernet 0/0/1 10.1.23.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 10.1.23.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0

標(biāo)紅處我們可以看到AR2的路由表中存在去往PC1的路由，那么這個時候我們再去看下PC1能否Ping通PC2。

PC1>ping 2.2.2.5 Ping 2.2.2.5: 32 data bytes, Press Ctrl_C to break Request timeout! From 2.2.2.5: bytes=32 seq=2 ttl=126 time=15 ms From 2.2.2.5: bytes=32 seq=3 ttl=126 time=16 ms From 2.2.2.5: bytes=32 seq=4 ttl=126 time=31 ms From 2.2.2.5: bytes=32 seq=5 ttl=126 time=32 ms --- 2.2.2.5 ping statistics --- 5 packet(s) transmitted 4 packet(s) received 20.00% packet loss round-trip min/avg/max = 0/23/32 ms

這個時候我們就可以看到PC1與PC2互通了。

步驟八：

我們將剩余的路由條目完成配置

[AR2]ip route-static 1.1.1.5 24 10.1.12.1 [AR2]ip route-static 3.3.3.5 24 10.1.23.3 [AR3]ip route-static 1.1.1.5 24 10.1.13.1 [AR3]ip route-static 2.2.2.5 24 10.1.23.2

PC1>ping 3.3.3.5 Ping 3.3.3.5: 32 data bytes, Press Ctrl_C to break Request timeout! From 3.3.3.5: bytes=32 seq=2 ttl=126 time=31 ms From 3.3.3.5: bytes=32 seq=3 ttl=126 time=31 ms From 3.3.3.5: bytes=32 seq=4 ttl=126 time=16 ms From 3.3.3.5: bytes=32 seq=5 ttl=126 time=31 ms --- 3.3.3.5 ping statistics --- 5 packet(s) transmitted 4 packet(s) received 20.00% packet loss round-trip min/avg/max = 0/27/31 ms

此時我們3臺終端都能成功互相訪問了。

步驟九：

我們查看AR1和AR2的鏈路沒斷開之前路由的走向

tracert命令只要用于查看數(shù)據(jù)包從源端到目的端的路徑信息。

PC1>tracert 2.2.2.5 traceroute to 2.2.2.5, 8 hops max (ICMP), press Ctrl+C to stop 1 1.1.1.1 16 ms <1 ms 15 ms 2 *10.1.12.2 32 ms 15 ms 3 *2.2.2.5 16 ms 31 ms

標(biāo)紅處下一跳是AR2的接口地址，說明此時走的是主路線。

配置PC1到PC2的備份路由

[AR1]ip route-static 2.2.2.5 24 10.1.13.3 preference 100 [AR2]ip route-static 1.1.1.5 24 10.1.23.3 preference 100

我們在查看AR1和AR2的路由表

[AR2]dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 15 Routes : 15 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Static 60 0 RD 10.1.12.1 GigabitEthernet 0/0/0 2.2.2.0/24 Direct 0 0 D 2.2.2.1 GigabitEthernet 0/0/2 2.2.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 2.2.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 3.3.3.0/24 Static 60 0 RD 10.1.23.3 GigabitEthernet 0/0/1 10.1.12.0/24 Direct 0 0 D 10.1.12.2 GigabitEthernet 0/0/0 10.1.12.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.12.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/0 10.1.23.0/24 Direct 0 0 D 10.1.23.2 GigabitEthernet 0/0/1 10.1.23.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 10.1.23.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0

我們可以看到AR1和AR2的路由表中并沒有存在剛剛配置的備份路由條目

這個時候我們關(guān)閉AR1>AR2互聯(lián)的接口

[AR1]int GigabitEthernet 0/0/0 [AR1-GigabitEthernet0/0/0]shutdown

在查看AR1和AR2的路由表

[AR1]dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 12 Routes : 12 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 0 D 1.1.1.1 GigabitEthernet 0/0/2 1.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 1.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 2.2.2.0/24 Static 100 0 RD 10.1.13.3 GigabitEthernet 0/0/1 3.3.3.0/24 Static 60 0 RD 10.1.13.3 GigabitEthernet 0/0/1 10.1.13.0/24 Direct 0 0 D 10.1.13.1 GigabitEthernet 0/0/1 10.1.13.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 10.1.13.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0

[AR2]dis ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 12 Routes : 12 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.0/24 Static 100 0 RD 10.1.23.3 GigabitEthernet 0/0/1 2.2.2.0/24 Direct 0 0 D 2.2.2.1 GigabitEthernet 0/0/2 2.2.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 2.2.2.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/2 3.3.3.0/24 Static 60 0 RD 10.1.23.3 GigabitEthernet 0/0/1 10.1.23.0/24 Direct 0 0 D 10.1.23.2 GigabitEthernet 0/0/1 10.1.23.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 10.1.23.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet 0/0/1 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0

標(biāo)紅處我們可以看到剛剛配置的備份路由(浮動靜態(tài)路由)在接口shutdown時，原先的路由失效，優(yōu)先級低的路由出現(xiàn)了。

這個時候我們在用tracert命令進(jìn)行追蹤數(shù)據(jù)包看去往PC2的流量是否切換到AR3的路線。

PC1>tracert 2.2.2.5 traceroute to 2.2.2.5, 8 hops max (ICMP), press Ctrl+C to stop 1 1.1.1.1 15 ms 16 ms 16 ms 2 10.1.13.3 15 ms 32 ms 15 ms 3 *10.1.23.2 31 ms 16 ms 4 *2.2.2.5 31 ms 16 ms

標(biāo)紅處我們可以看到當(dāng)主路線斷開以后備份路由(浮動靜態(tài)路由)自動生效接替了主線路的路由，到此所有配置結(jié)束，備份路由(浮動靜態(tài)路由)在我們實際生產(chǎn)環(huán)境中用途很廣泛，大家可以在使用過程中靈活搭配其他路由協(xié)議來進(jìn)行配置。

結(jié)束：

感謝大家的觀看！到這里我們的文章就結(jié)束了，以上就是IPv4路由基礎(chǔ)配置與靜態(tài)路由的講解，更多內(nèi)容請大家關(guān)注個人公眾號：ytwbyg