无色无味(杨波) 的Web Log(博客)
杨波,ccna,h3cse-security/Email:yangbo@ghitr.com
九 28 2009
【转】JUNOS8.5+JWEB8.5虚拟机[117M]组播固化-VLAN-逻辑路由器
Junos成功瘦身，117M，解压缩后149M。内置组播补丁，组播固化补丁，
支持Vlan-tagging，支持Jweb 支持逻辑路由器
支持十个千兆网卡，这下可以搭出非常复杂的拓扑了！
支持FreeBSD下的操作。
经本人试验，可稳定运行，启动与关机均只需一分钟。
系统运行后，可直接在虚拟机里操作，或者通过SecureCRT 来Telnet登陆，
同时支持串口登陆，压缩包内含pipe proxy，
系统账号：root 密码：juniper123
用户账号：mengmeng 密码：test123
系统环境：
VMware-6.0
Freebsd 6.1
jinstall-8.5R1.14-domestic-signed
jweb-8.5R1.14-signed
系统运行后，自动支持组播，
支持web访问，地址：http://192.168.1.254
支持Telnet 访问，地址：192.168.1.254 端口号：23
里面已经配置了OSPF协议，可以完美运行。拓扑图如下：
root> show ospf neighbor logical-router r1
Address Interface State ID Pri Dead
10.0.4.6 em1.12 Full 10.0.6.2 128 37
10.0.4.13 em1.13 Full 10.0.3.3 128 34
Address Interface State ID Pri Dead
10.0.4.6 em1.12 Full 10.0.6.2 128 37
10.0.4.13 em1.13 Full 10.0.3.3 128 34
root> show ospf neighbor logical-router r5
Address Interface State ID Pri Dead
10.0.2.2 em5.53 Full 10.0.3.3 128 34
10.0.2.10 em5.54 Full 10.0.3.4 128 33
10.0.8.5 em5.56 Full 10.0.9.6 128 31
10.0.8.10 em5.57 Full 10.0.9.7 128 34
Address Interface State ID Pri Dead
10.0.2.2 em5.53 Full 10.0.3.3 128 34
10.0.2.10 em5.54 Full 10.0.3.4 128 33
10.0.8.5 em5.56 Full 10.0.9.6 128 31
10.0.8.10 em5.57 Full 10.0.9.7 128 34
root> show route logical-router r1
inet.0: 20 destinations, 20 routes (20 active, 0 holddown, 0 hidden)
+ = Active Route, – = Last Active, * = Both
+ = Active Route, – = Last Active, * = Both
10.0.2.0/30 *[OSPF/10] 00:02:51, metric 2
> to 10.0.4.13 via em1.13
10.0.2.4/30 *[OSPF/10] 00:02:51, metric 2
> to 10.0.4.13 via em1.13
10.0.2.8/30 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.6 via em1.12
to 10.0.4.13 via em1.13
10.0.3.3/32 *[OSPF/10] 00:02:51, metric 1
> to 10.0.4.13 via em1.13
10.0.3.4/32 *[OSPF/10] 00:02:51, metric 2
to 10.0.4.6 via em1.12
> to 10.0.4.13 via em1.13
10.0.3.5/32 *[OSPF/10] 00:02:51, metric 2
> to 10.0.4.13 via em1.13
10.0.4.0/30 *[OSPF/10] 00:02:51, metric 2
to 10.0.4.6 via em1.12
> to 10.0.4.13 via em1.13
10.0.4.4/30 *[Direct/0] 00:03:56
> via em1.12
10.0.4.5/32 *[Local/0] 00:03:56
Local via em1.12
10.0.4.8/30 *[OSPF/10] 00:03:06, metric 2
> to 10.0.4.6 via em1.12
10.0.4.12/30 *[Direct/0] 00:03:56
> via em1.13
10.0.4.14/32 *[Local/0] 00:03:56
Local via em1.13
10.0.6.1/32 *[Direct/0] 00:03:56
> via lo0.1
10.0.6.2/32 *[OSPF/10] 00:03:06, metric 1
> to 10.0.4.6 via em1.12
10.0.8.0/30 *[OSPF/10] 00:02:51, metric 4
> to 10.0.4.13 via em1.13
10.0.8.4/30 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.13 via em1.13
10.0.8.8/30 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.13 via em1.13
10.0.9.6/32 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.13 via em1.13
10.0.9.7/32 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.13 via em1.13
224.0.0.5/32 *[OSPF/10] 00:03:56, metric 1
MultiRecv
> to 10.0.4.13 via em1.13
10.0.2.4/30 *[OSPF/10] 00:02:51, metric 2
> to 10.0.4.13 via em1.13
10.0.2.8/30 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.6 via em1.12
to 10.0.4.13 via em1.13
10.0.3.3/32 *[OSPF/10] 00:02:51, metric 1
> to 10.0.4.13 via em1.13
10.0.3.4/32 *[OSPF/10] 00:02:51, metric 2
to 10.0.4.6 via em1.12
> to 10.0.4.13 via em1.13
10.0.3.5/32 *[OSPF/10] 00:02:51, metric 2
> to 10.0.4.13 via em1.13
10.0.4.0/30 *[OSPF/10] 00:02:51, metric 2
to 10.0.4.6 via em1.12
> to 10.0.4.13 via em1.13
10.0.4.4/30 *[Direct/0] 00:03:56
> via em1.12
10.0.4.5/32 *[Local/0] 00:03:56
Local via em1.12
10.0.4.8/30 *[OSPF/10] 00:03:06, metric 2
> to 10.0.4.6 via em1.12
10.0.4.12/30 *[Direct/0] 00:03:56
> via em1.13
10.0.4.14/32 *[Local/0] 00:03:56
Local via em1.13
10.0.6.1/32 *[Direct/0] 00:03:56
> via lo0.1
10.0.6.2/32 *[OSPF/10] 00:03:06, metric 1
> to 10.0.4.6 via em1.12
10.0.8.0/30 *[OSPF/10] 00:02:51, metric 4
> to 10.0.4.13 via em1.13
10.0.8.4/30 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.13 via em1.13
10.0.8.8/30 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.13 via em1.13
10.0.9.6/32 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.13 via em1.13
10.0.9.7/32 *[OSPF/10] 00:02:51, metric 3
> to 10.0.4.13 via em1.13
224.0.0.5/32 *[OSPF/10] 00:03:56, metric 1
MultiRecv
root>
全部配置如下：
root> show configuration
## Last commit: 2008-10-10 17:44:21 UTC by root
version 8.5R1.14;
system {
backup-router 192.168.1.1;
root-authentication {
encrypted-password “$1$Mvxox7d8$UVmJd7OLkwbIJ/B7Kbavz0″; ## SECRET-DATA
}
login {
user mengmeng {
uid 2001;
class super-user;
authentication {
encrypted-password “$1$GAAB2nYd$v.aOFalSpMh5rbiWG/f1a.”; ## SECRET-DATA
}
}
}
services {
ftp;
telnet;
web-management {
http {
port 80;
}
}
}
}
logical-routers {
r1 {
interfaces {
em1 {
unit 12 {
vlan-id 12;
family inet {
address 10.0.4.5/30;
}
}
unit 13 {
vlan-id 13;
family inet {
address 10.0.4.14/30;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.0.6.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em1.12;
interface em1.13;
interface lo0.1;
}
}
}
}
r2 {
interfaces {
em2 {
unit 21 {
vlan-id 12;
family inet {
address 10.0.4.6/30;
}
}
unit 23 {
vlan-id 23;
family inet {
address 10.0.4.2/30;
}
}
unit 24 {
vlan-id 24;
family inet {
address 10.0.4.10/30;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.0.6.2/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em2.21;
interface em2.23;
interface em2.24;
interface lo0.2;
}
}
}
}
r3 {
interfaces {
em3 {
unit 31 {
vlan-id 13;
family inet {
address 10.0.4.13/30;
}
}
unit 32 {
vlan-id 23;
family inet {
address 10.0.4.1/30;
}
}
unit 34 {
vlan-id 34;
family inet {
address 10.0.2.5/30;
}
}
unit 35 {
vlan-id 35;
family inet {
address 10.0.2.2/30;
}
}
}
lo0 {
unit 3 {
family inet {
address 10.0.3.3/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em3.31;
interface em3.32;
}
area 0.0.0.0 {
interface em3.34;
interface em3.35;
interface lo0.3;
}
}
}
}
r4 {
interfaces {
em4 {
unit 42 {
vlan-id 24;
family inet {
address 10.0.4.9/30;
}
}
unit 43 {
vlan-id 34;
family inet {
address 10.0.2.6/30;
}
}
unit 45 {
vlan-id 45;
family inet {
address 10.0.2.10/30;
}
}
}
lo0 {
unit 4 {
family inet {
address 10.0.3.4/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em4.42;
}
area 0.0.0.0 {
interface em4.43;
interface em4.45;
interface lo0.4;
}
}
}
}
r5 {
interfaces {
em5 {
unit 53 {
vlan-id 35;
family inet {
address 10.0.2.1/30;
}
}
unit 54 {
vlan-id 45;
family inet {
address 10.0.2.9/30;
}
}
unit 56 {
vlan-id 56;
family inet {
address 10.0.8.6/30;
}
}
unit 57 {
vlan-id 57;
family inet {
address 10.0.8.9/30;
}
}
}
lo0 {
unit 5 {
family inet {
address 10.0.3.5/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em5.53;
interface em5.54;
interface lo0.5;
}
area 0.0.0.1 {
interface em5.56;
interface em5.57;
}
}
}
}
r6 {
interfaces {
em6 {
unit 65 {
vlan-id 56;
family inet {
address 10.0.8.5/30;
}
}
unit 67 {
vlan-id 67;
family inet {
address 10.0.8.1/30;
}
}
}
lo0 {
unit 6 {
family inet {
address 10.0.9.6/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.1 {
interface em6.65;
interface em6.67;
interface lo0.6;
}
}
}
}
r7 {
interfaces {
em7 {
unit 75 {
vlan-id 57;
family inet {
address 10.0.8.10/30;
}
}
unit 76 {
vlan-id 67;
family inet {
address 10.0.8.2/30;
}
}
}
lo0 {
unit 7 {
family inet {
address 10.0.9.7/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.1 {
interface em7.75;
interface em7.76;
interface lo0.7;
}
}
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 192.168.1.254/24;
}
}
}
em1 {
vlan-tagging;
}
em2 {
vlan-tagging;
}
em3 {
vlan-tagging;
}
em4 {
vlan-tagging;
}
em5 {
vlan-tagging;
}
em6 {
vlan-tagging;
}
em7 {
vlan-tagging;
}
}
routing-options {
static {
route 0.0.0.0/0 {
next-hop 192.168.1.1;
retain;
no-readvertise;
}
}
}
## Last commit: 2008-10-10 17:44:21 UTC by root
version 8.5R1.14;
system {
backup-router 192.168.1.1;
root-authentication {
encrypted-password “$1$Mvxox7d8$UVmJd7OLkwbIJ/B7Kbavz0″; ## SECRET-DATA
}
login {
user mengmeng {
uid 2001;
class super-user;
authentication {
encrypted-password “$1$GAAB2nYd$v.aOFalSpMh5rbiWG/f1a.”; ## SECRET-DATA
}
}
}
services {
ftp;
telnet;
web-management {
http {
port 80;
}
}
}
}
logical-routers {
r1 {
interfaces {
em1 {
unit 12 {
vlan-id 12;
family inet {
address 10.0.4.5/30;
}
}
unit 13 {
vlan-id 13;
family inet {
address 10.0.4.14/30;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.0.6.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em1.12;
interface em1.13;
interface lo0.1;
}
}
}
}
r2 {
interfaces {
em2 {
unit 21 {
vlan-id 12;
family inet {
address 10.0.4.6/30;
}
}
unit 23 {
vlan-id 23;
family inet {
address 10.0.4.2/30;
}
}
unit 24 {
vlan-id 24;
family inet {
address 10.0.4.10/30;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.0.6.2/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em2.21;
interface em2.23;
interface em2.24;
interface lo0.2;
}
}
}
}
r3 {
interfaces {
em3 {
unit 31 {
vlan-id 13;
family inet {
address 10.0.4.13/30;
}
}
unit 32 {
vlan-id 23;
family inet {
address 10.0.4.1/30;
}
}
unit 34 {
vlan-id 34;
family inet {
address 10.0.2.5/30;
}
}
unit 35 {
vlan-id 35;
family inet {
address 10.0.2.2/30;
}
}
}
lo0 {
unit 3 {
family inet {
address 10.0.3.3/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em3.31;
interface em3.32;
}
area 0.0.0.0 {
interface em3.34;
interface em3.35;
interface lo0.3;
}
}
}
}
r4 {
interfaces {
em4 {
unit 42 {
vlan-id 24;
family inet {
address 10.0.4.9/30;
}
}
unit 43 {
vlan-id 34;
family inet {
address 10.0.2.6/30;
}
}
unit 45 {
vlan-id 45;
family inet {
address 10.0.2.10/30;
}
}
}
lo0 {
unit 4 {
family inet {
address 10.0.3.4/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em4.42;
}
area 0.0.0.0 {
interface em4.43;
interface em4.45;
interface lo0.4;
}
}
}
}
r5 {
interfaces {
em5 {
unit 53 {
vlan-id 35;
family inet {
address 10.0.2.1/30;
}
}
unit 54 {
vlan-id 45;
family inet {
address 10.0.2.9/30;
}
}
unit 56 {
vlan-id 56;
family inet {
address 10.0.8.6/30;
}
}
unit 57 {
vlan-id 57;
family inet {
address 10.0.8.9/30;
}
}
}
lo0 {
unit 5 {
family inet {
address 10.0.3.5/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em5.53;
interface em5.54;
interface lo0.5;
}
area 0.0.0.1 {
interface em5.56;
interface em5.57;
}
}
}
}
r6 {
interfaces {
em6 {
unit 65 {
vlan-id 56;
family inet {
address 10.0.8.5/30;
}
}
unit 67 {
vlan-id 67;
family inet {
address 10.0.8.1/30;
}
}
}
lo0 {
unit 6 {
family inet {
address 10.0.9.6/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.1 {
interface em6.65;
interface em6.67;
interface lo0.6;
}
}
}
}
r7 {
interfaces {
em7 {
unit 75 {
vlan-id 57;
family inet {
address 10.0.8.10/30;
}
}
unit 76 {
vlan-id 67;
family inet {
address 10.0.8.2/30;
}
}
}
lo0 {
unit 7 {
family inet {
address 10.0.9.7/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.1 {
interface em7.75;
interface em7.76;
interface lo0.7;
}
}
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 192.168.1.254/24;
}
}
}
em1 {
vlan-tagging;
}
em2 {
vlan-tagging;
}
em3 {
vlan-tagging;
}
em4 {
vlan-tagging;
}
em5 {
vlan-tagging;
}
em6 {
vlan-tagging;
}
em7 {
vlan-tagging;
}
}
routing-options {
static {
route 0.0.0.0/0 {
next-hop 192.168.1.1;
retain;
no-readvertise;
}
}
}
root>
九 02 2009
Please ,GFW
Posted by in 日记
我不知道何时才可以访问我的Google协作平台！！！
Please ,GFW。 放我的Google sites一马！
九 01 2009
CCNP BSCI ospf/bgp/eigrp/更新过滤
————————————————————————————————————————————–
Instructions
Configure the routers according to the above diagram and the requirements
below.
Requirements
• Configure the interfaces with the IP addresses shown in the diagram.
• Configure R2 and R3 to be in EIGRP AS 65100. Add the entire class B network
and disable automatic summarization.
2 – 2 CCNP: Building Scalable Internetworks v5.0 – Skills-Based Assessment 2 Copyright © 2006, Cisco Systems, Inc
• Configure OSPF area 0 on the link between R1 and R2. Also add the loopback
interfaces on R1 into area 0.
• Have R3 redistribute its connected routes into EIGRP.
• Make sure all loopback interfaces are advertised with the correct mask.
• Have R2 originate a default route into the OSPF domain.
• Redistribute OSPF into EIGRP.
• Filter out 172.16.120.0 and 172.16.121.0 from being advertised to R3.
• Configure R2 and R3 in BGP AS 65100. Configure R4 in BGP AS 65400.
• Peer R2 and R3 in BGP on their loopback interfaces.
• Peer R3 and R4 in BGP.
• Have R4 advertise its loopback interfaces into BGP.
• Configure R3 to filter out 172.31.8.0 and 172.31.12.0 on the inbound updates
from R4.
• Configure R4 with a static route to the 172.16.0.0/16 network via R3.
我自己
