3. Capítulo III. Caracterización de las formas de Habitar
3.2. Trabajo con las familias
3.2.1. Conversaciones y hallazgos del taller escrito en categorías de análisis . 48
interface LoopBack0
ip address 10.0.6.6 255.255.255.255
#
interface LoopBack1
ip address 192.168.10.1 255.255.255.0
#
interface LoopBack2
ip address 192.168.20.1 255.255.255.0
#
rip 1
version 2
network 10.0.0.0
network 192.168.10.0
network 192.168.20.0
#
return
Chapter 3 IS-IS Hands-on Exercise Guide
Overview
Intermediate System to Intermediate System (IS-IS) is a dynamic routing protocol initially designed by the International Organization for Standardization (ISO) for its Connectionless Network Protocol (CLNP).
To support IP routing, the Internet Engineering Task Force (IETF) extended and modified IS-IS in RFC 1195. This modification enables IS-IS to apply to TCP/IP and OSI environments. This version of IS-IS is called Integrated IS-IS or Dual IS-IS.
IS-IS is an Interior Gateway Protocol (IGP) that runs within an autonomous system (AS).
IS-IS is a link state protocol and uses the shortest path first (SPF) algorithm to calculate routes. It is similar to OSPF in many aspects.
IS-IS uses a two-level hierarchy in a routing domain to support large-scale routing
networks. A large routing domain is divided into one or more areas. Level-1 routers manage
intra-area routes. Level-2 routers manage inter-area routes.
The topology of an IS-IS network is similar to the multi-area topology of an OSPF network. Generally, all devices in the backbone area are Level-2 routers. Non-backbone areas contain Level-1 routers and connect to the backbone area through Level-1-2 routers. The backbone area in IS-IS is not a fixed area, that is, the area ID varies.
The networking is one of the differences between IS-IS and OSPF. In OSPF, inter-area routes must be forwarded through the backbone area, and only routers in the same area use the SPF algorithm. In IS-IS, both Level-1 and Level-2 routes are calculated using the SPF algorithm to generate the shortest path tree (SPT).
Objectives
Upon completion of this exercise guide, you will be able to:
Configure IS-IS.
Use IS-IS in different network environments.
Change the IS-IS cost.
Configure IS-IS authentication modes.
Configure IS-IS route aggregation.
Configure route leaking in different areas.
Configure a router to advertise default routes.
Tasks
The following topology shows the network of Company A. Deploy the network according to the following requirements:
(1) Add R1 to area 49.0001, add R2, R3, R4, and R5 to area 49.0002, and add R6 to area 49.0006. Set the system ID of each router to 0000.0000.000X.
(2) Configure IS-IS on interfaces according to the topology. Run IS-IS on E1/0/0 of R6 and disable E1/0/0 from sending any IS-IS packets to its directly connected network segment.
Enable routers in the IS-IS area to learn addresses of the network segment directly connected to E1/0/0.
(3) Configure R1 as a Level-2 router, R2 and R3 as Level-1-2 routers, R4 and R5 as Level-1 routers, and interfaces on R6 as Level-2 interfaces.
(4) Run proper commands to configure the names (such as R1, R2, and R3) of the routers because routers are difficult to maintain when identified using only system IDs.
(5) Ensure that no DIS exists between R4 and R5, and establish a neighbor relationship between them.
(6) Configure IS-IS to automatically calculate the cost.
(7) Use a proper authentication mode to authenticate LSPs and SNPs in area 49.0002. Set the authentication password to HUAWEI and authentication type to MD5.
(8) Disable R4 and R5 from sending Hello packets with the padding field to each other to improve bandwidth usage between them.
(9) Only configure R4 to import directly connected network segment 4.0.X.0/24 to the IS-IS area and do not summary, configure R1 to import directly connected network segment 1.0.X.0/24 to the IS-IS area, and perform optimal aggregation. Use as few commands as possible.
(10) Disable R2 and R3 from advertising 4.0.0.0/24 and 4.0.2.0/24 to area 49.0001, configure ACLs and disable routing policies on R2 and R3. Ensure that R4 and R5 can learn the aggregated network segment 1.0.X.0/24, and disable routing policies on R4 and R5.
(11) Disable R6 from adding aggregated routes generated by R1 to the routing table. Enable R6 to
advertise a default route when routing information for network segment 1.0.X.0/24 exists on
R1.
Topology
IP Address Table
Device Interface IP Address Subnet Mask Default
Gateway
R1
S2/0/0.2 12.1.1.1 255.255.255.0 N/A
S2/0/0.3 13.1.1.1 255.255.255.0 N/A
G0/0/0 16.1.1.1 255.255.255.0 N/A
Loopback 0 10.1.1.1 255.255.255.255 N/A
R2
S2/0/0.2 12.1.1.2 255.255.255.0 N/A
S2/0/1 24.1.1.2 255.255.255.0 N/A
Loopback 0 10.2.2.2 255.255.255.255 N/A
R3
S2/0/0.3 13.1.1.3 255.255.255.0 N/A
S2/0/1 35.1.1.3 255.255.255.0 N/A
Loopback 0 10.3.3.3 255.255.255.255 N/A
R4
S2/0/1 24.1.1.4 255.255.255.0 N/A
E1/0/0 45.1.1.4 255.255.255.0 N/A
Loopback 0 10.4.4.4 255.255.255.255 N/A
R5
S2/0/1 35.1.1.5 255.255.255.0 N/A
E1/0/0 45.1.1.5 255.255.255.255 N/A
Loopback 0 10.5.5.5 255.255.255.255 N/A
R6 G0/0/0 16.1.1.6 255.255.255.0 N/A
E1/0/0 6.0.0.1 255.255.255.0 N/A
Loopback 0 10.6.6.6 255.255.255.255 N/A
Configuration and Verification
1. Add R1 to area 49.0001, add R2, R3, R4, and R5 to area 49.0002, and add R6 to area 49.0006. Set the system ID of each router to 0000.0000.000X.
Perform basic configuration according to the "IP Address Table", and then run the display isis 1 brief command to view brief IS-IS information. The following uses the display of R1 as an example. The table shows only key information, while other information is omitted.
[R1]display isis 1 brief
ISIS Protocol Information for ISIS(1)
---
SystemId: 0000.0000.0001 System Level: L12
Area-Authentication-mode: NULL
Domain-Authentication-mode: NULL
Ipv6 is not enabled
ISIS is in invalid restart status
ISIS is in protocol hot standby state: Real-Time Backup
During the configuration, view and understand the requirements to avoid incorrect configuration.
2. Configure IS-IS on interfaces according to the topology. Run IS-IS on E1/0/0 of R6 and disable E1/0/0 from sending any IS-IS packets to its directly connected network segment. Enable routers in the IS-IS area to learn addresses of the network segment directly connected to E1/0/0.
After completing this task, run the display isis interface command to view interfaces that have IS-IS enabled, run the display isis peer command to view IS-IS neighbors, and run the display ip routing-table protocol isis command to view the IS-IS routing table. The following uses the display of R1 as an example. The table shows only key information, while other information is omitted.
[R1]display isis interface
Interface information for ISIS(1)
Interface Id IPV4.State IPV6.State MTU Type DIS
GE0/0/0 001 Up Down 1497 L1/L2 No/No
Loop0 001 Up Down 1500 L1/L2 --
S2/0/0.2 002 Up Down 1500 L1/L2 --
S2/0/0.3 003 Up Down 1500 L1/L2 –
[R1]display isis peer
Peer information for ISIS(1)
System Id Interface Circuit Id State HoldTime Type PRI
---
0000.0000.0006 GE0/0/0 0000.0000.0006.01 Up 8s L2(L1L2) 64
0000.0000.0002 S2/0/0.2 0000000002 Up 22s L2 --
0000.0000.0003 S2/0/0.3 0000000001 Up 23s L2 --
[R1]display ip routing-table protocol isis
Destination/Mask Proto Pre Cost Flags NextHop Interface
6.0.0.0/24 ISIS-L2 15 74 D 16.1.1.6 GigabitEthernet0/0/0
10.2.2.2/32 ISIS-L2 15 10 D 12.1.1.2 Serial2/0/0.2
10.3.3.3/32 ISIS-L2 15 10 D 13.1.1.3 Serial2/0/0.3
10.4.4.4/32 ISIS-L2 15 20 D 12.1.1.2 Serial2/0/0.2
10.5.5.5/32 ISIS-L2 15 20 D 13.1.1.3 Serial2/0/0.3
10.6.6.6/32 ISIS-L2 15 10 D 16.1.1.6 GigabitEthernet0/0/0
24.1.1.0/24 ISIS-L2 15 20 D 12.1.1.2 Serial2/0/0.2
35.1.1.0/24 ISIS-L2 15 20 D 13.1.1.3 Serial2/0/0.3
45.1.1.0/24 ISIS-L2 15 30 D 13.1.1.3 Serial2/0/0.3
ISIS-L2 15 30 D 12.1.1.2 Serial2/0/0.2
When IS-IS runs in a frame relay (FR) network, you need to configure FR interfaces as sub-interfaces that work in P2P mode, otherwise, IS-IS neighbor relationships cannot be established even if the network type is changed.
IS-IS only support broadcast and P2P network type by default.
In addition, you should understand IS-IS features when configuring IS-IS on E1/0/0 of R6. IS-IS can disable a certain interface to receive and send data, so the build of the IS-IS neighbor and transfer of route information can be controlled. You can also run the following command to verify the results:
display isis lsdb
display isis route
display isis peer
3. Configure R1 as a Level-2 router, R2 and R3 as Level-1-2 routers, R4 and R5 as Level-1 routers, and interfaces on R6 as Level-2 interfaces.
After completing this task, run the display isis brief command to view the level at which a device works. The following uses the display of R1 as an example. The table shows only key information, while other information is omitted.
[R1]display isis 1 brief
ISIS Protocol Information for ISIS(1)
---
SystemId: 0000.0000.0001 System Level: L2
Area-Authentication-mode: NULL
Domain-Authentication-mode: NULL
Ipv6 is not enabled
ISIS is in invalid restart status
ISIS is in protocol hot standby state: Real-Time Backup
According to the requirement, interfaces on R6 should be configured as Level-2 interfaces. You cannot run the is-level command to configure R6 as a Level-2 router.
You can also run the following command to verify the results:
display isis peer
4. Run proper commands to configure the names (such as R1, R2, and R3) of the routers because routers are difficult to maintain when identified using only system IDs.
After completing this task, run the display isis name-table command to view the mapping between the host name and system ID of local and remote IS-IS routers. The following uses the display of R1 as an example. The table shows only key information, while other information is omitted.
[R1]display isis name-table
Name table information for ISIS(1)
System ID Hostname Type
---
0000.0000.0001 R1 DYNAMIC
0000.0000.0002 R2 DYNAMIC
0000.0000.0003 R3 DYNAMIC
0000.0000.0006 R6 DYNAMIC
The host name is delivered to each router running IS-IS through LSPs. Note that the length of a specified dynamic host name is limited within 64 bits
IS-IS can name the remote device by the command “is-name 0001.0001.0001 R1”, so
that it is easy to check the LSDB.
You can also run the following commands to verify the results:
display isis peerdisplay isis lsdb
5. Ensure that no DIS exists between R4 and R5, and establish a neighbor relationship between them.
After completing this task, view the network type of connected interfaces on R4 and R5.
The following uses the display of R5 as an example. The table shows only key information, while other information is omitted.
[R5]display isis interface Ethernet 1/0/0 verbose
Interface information for ISIS(1)
---
Interface Id IPV4.State IPV6.State MTU Type DIS
Eth1/0/0 003 Up Down 1497 L1/L2 --
Circuit MT State : Standard
Circuit Parameters : p2p
Description : HUAWEI, AR Series, Ethernet1/0/0 Interface
SNPA Address : 00e0-fc04-31d5
IP Address : 45.1.1.5
In a P2P network, a three-way handshake is forcibly performed when an IS-IS neighbor relationship is established. The three-way handshake ensures that the neighbor relationship is established successfully and prevents unidirectional communication.
ISIS provides default support for Ethernet and P2P, but here we need to adjust it to reliable 3-way handshake P2P network.
You can also run the following command to verify the results:
display isis peer display isis interface
6. Configure IS-IS to automatically calculate the cost.
After completing this task, run the display isis cost interface command to view the cost of each interface. The following uses the display of R1 as an example. The table shows only key information, while other information is omitted.
[R1]display isis cost interface GigabitEthernet 0/0/0
Interface: GE0/0/0
Level-2 interface cost
Topology base(0):
Link effective cost: 1(A) enabled by auto cost
IP prefix effective cost:
16.1.1.0/24 cost: 1 enabled by auto cost
Flags: R-Relative cost A-Absolute cost
By default, the IS-IS link cost is 10.
To enable automatic link cost calculation, the cost style must be Wide or Wide-Compatible.
You can also run the following command to verify the results:
display isis interface GigabitEthernet 0/0/0 verbose | include cost
7. Use a proper authentication mode to authenticate LSPs and SNPs in area 49.0002. Set the authentication password to HUAWEI and authentication type to MD5.
After completing this task, run the display isis error command to verify whether the configuration succeeds. The following uses the display of R5 as an example. The table shows only key information, while other information is omitted.
[R5]display isis error | include Authentication
Statistics of error packets for ISIS(1)
---
LSP packet errors:
Bad Authentication : 0 Bad Auth Count : 0
Hello packet errors:
Mismatched Max Area Addr: 0 Bad Authentication : 0
During the configuration, note that there are three IS-IS authentication modes that have different functions.
Default packet of ISIS has 3 formats: IHH、SNP、LSP, among which SNP includes CSNP and PSNP of Level-1 and Level-2. Domain authentication is used to encrypt Level-2 packet ,area authentication is used to encrypt Level-1 packet and interface authentication is used to encrypt Hello packet.
You can also run the following command to verify the results:
display isis brief
8. Disable R4 and R5 from sending Hello packets with the padding field to each other to improve bandwidth usage between them.
Default Hello packet carries huge number of useless padding field, as shown below:
After completing this task, view detailed information about E1/0/0 on R4 and R5. The following uses the display of R5 as an example. The table shows only key information, while other information is omitted.
[R5]display isis interface Ethernet 1/0/0 verbose
Interface information for ISIS(1)
---
Interface Id IPV4.State IPV6.State MTU Type DIS
Eth1/0/0 003 Up Down 1497 L1/L2 --
Circuit MT State : Standard
Circuit Parameters : small-hello p2p
Description : HUAWEI, AR Series, Ethernet1/0/0 Interface
SNPA Address : 00e0-fc04-31d5
IP Address : 45.1.1.5
Different types of networks process Hello packets in different ways.
9. Only configure R4 to import directly connected network segment 4.0.X.0/24 to the IS-IS area and do not summary, configure R1 to import directly connected network segment 1.0.X.0/24 to the IS-IS area, and perform optimal aggregation. Use as few commands as possible.
After completing this task, run the display ip routing-table protocol isis command to view IS-IS routes. The following uses the display of R6 as an example. The table shows only key information, while other information is omitted.
[R6]display ip routing-table protocol isis -
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.0.0.0/22 ISIS-L2 15 1 D 16.1.1.1 GigabitEthernet0/0/0
4.0.0.0/24 ISIS-L2 15 987 D 16.1.1.1 GigabitEthernet0/0/0
4.0.1.0/24 ISIS-L2 15 987 D 16.1.1.1 GigabitEthernet0/0/0
4.0.2.0/24 ISIS-L2 15 987 D 16.1.1.1 GigabitEthernet0/0/0
4.0.3.0/24 ISIS-L2 15 987 D 16.1.1.1 GigabitEthernet0/0/0
During the configuration, note that only required network segments can be imported to the IS-IS Area. Do not import irrelevant network segments. During IS-IS route aggregation, a route to the Null0 interface is not generated by default.
10. Disable R2 and R3 from advertising 4.0.0.0/24 and 4.0.2.0/24 to area 49.0001, configure ACLs and disable routing policies on R2 and R3. Ensure that R4 and R5 can learn the aggregated network segment 1.0.X.0/24, and disable routing policies on R4 and R5.
After completing this task, run the display ip routing-table protocol isis command to view IS-IS routes. The following table shows information of R1 and R4. Only key information is displayed, while other information is omitted.
[R1]display ip routing-table protocol isis
Destination/Mask Proto Pre Cost Flags NextHop Interface
4.0.1.0/24 ISIS-L2 15 976 D 12.1.1.2 Serial2/0/0.2
4.0.3.0/24 ISIS-L2 15 976 D 12.1.1.2 Serial2/0/0.2
6.0.0.0/24 ISIS-L2 15 11 D 16.1.1.6 GigabitEthernet0/0/0
10.2.2.2/32 ISIS-L2 15 488 D 12.1.1.2 Serial2/0/0.2
10.3.3.3/32 ISIS-L2 15 488 D 13.1.1.3 Serial2/0/0.3
10.4.4.4/32 ISIS-L2 15 976 D 12.1.1.2 Serial2/0/0.2
10.5.5.5/32 ISIS-L2 15 976 D 13.1.1.3 Serial2/0/0.3
10.6.6.6/32 ISIS-L2 15 1 D 16.1.1.6 GigabitEthernet0/0/0
24.1.1.0/24 ISIS-L2 15 976 D 12.1.1.2 Serial2/0/0.2
35.1.1.0/24 ISIS-L2 15 976 D 13.1.1.3 Serial2/0/0.3
45.1.1.0/24 ISIS-L2 15 986 D 12.1.1.2 Serial2/0/0.2
ISIS-L2 15 986 D 13.1.1.3 Serial2/0/0.3
[R4]display ip routing-table protocol isis
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 ISIS-L1 15 488 D 24.1.1.2 Serial2/0/1
1.0.0.0/22 ISIS-L1 15 976 D 24.1.1.2 Serial2/0/1
10.2.2.2/32 ISIS-L1 15 488 D 24.1.1.2 Serial2/0/1
10.3.3.3/32 ISIS-L1 15 498 D 45.1.1.5 Ethernet1/0/0
10.5.5.5/32 ISIS-L1 15 10 D 45.1.1.5 Ethernet1/0/0
12.1.1.0/24 ISIS-L1 15 976 D 24.1.1.2 Serial2/0/1
13.1.1.0/24 ISIS-L1 15 986 D 45.1.1.5 Ethernet1/0/0
35.1.1.0/24 ISIS-L1 15 498 D 45.1.1.5 Ethernet1/0/0
This task requires bidirectional route leaking between Level-1 and Level-2 areas. Filter routes according to the requirement.
11. Disable R6 from adding aggregated routes generated by R1 to the routing table. Enable R6 to advertise a default route when routing information for network segment 1.0.X.0/24 exists on R1.
After completing this task, run the display ip routing-table protocol isis command to view IS-IS routes. The following uses the display of R6 as an example. The table shows only key information, while other information is omitted.
[R6]display ip routing-table protocol isis
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 ISIS-L2 15 1 D 16.1.1.1 GigabitEthernet0/0/0
4.0.1.0/24 ISIS-L2 15 977 D 16.1.1.1 GigabitEthernet0/0/0
4.0.3.0/24 ISIS-L2 15 977 D 16.1.1.1 GigabitEthernet0/0/0
10.1.1.1/32 ISIS-L2 15 1 D 16.1.1.1 GigabitEthernet0/0/0
10.2.2.2/32 ISIS-L2 15 489 D 16.1.1.1 GigabitEthernet0/0/0
10.3.3.3/32 ISIS-L2 15 489 D 16.1.1.1 GigabitEthernet0/0/0
10.4.4.4/32 ISIS-L2 15 977 D 16.1.1.1 GigabitEthernet0/0/0
10.5.5.5/32 ISIS-L2 15 977 D 16.1.1.1 GigabitEthernet0/0/0
12.1.1.0/24 ISIS-L2 15 489 D 16.1.1.1 GigabitEthernet0/0/0
13.1.1.0/24 ISIS-L2 15 489 D 16.1.1.1 GigabitEthernet0/0/0
24.1.1.0/24 ISIS-L2 15 977 D 16.1.1.1 GigabitEthernet0/0/0
35.1.1.0/24 ISIS-L2 15 977 D 16.1.1.1 GigabitEthernet0/0/0
45.1.1.0/24 ISIS-L2 15 987 D 16.1.1.1 GigabitEthernet0/0/0
Questions
In requirement 1, if the interfaces are not FR sub-interfaces or the sub-interface type is not P2MP, can IS-IS neighbor relationships be established?
Yes, IS-IS support P2P network type, but doesn’t support NBMA and P2MP network.
In requirement 2, why do R2 and R3 not use the default routes they advertise?
R4 and R5 will generate default route after receive the LSP-level-1 of ATT bit is set and they will choose the nearest Level-1-2 router as next hop. R2 and R3 as Level-1-2 routers, they will ignore this LSP.
In requirement 11, are corresponding LSPs filtered when route filtering is implemented on R6, and what are the considerations that should be taken for advertising default routes?
Because ISIS and OSPF are Link-state protocol, R6 can’t use filter-policy to filter LSP in inbound direction. The filter-policy will effect in the process of LSP into routing-table, but can’t deny LSP into LSDB.
When advertising routes under a certain condition, it is required detailed routes and the summary route to avoid the unknown loop. When the edge device’s routing table contains the external route to meet route policy, R4 released a default route to ISIS domain, avoid due to link failures and other reasons caused the equipment to do not exist already some important external routing, still advertise default route resulting in routing loop. The routing strategy here does not affect the introduction of external ISIS routing.
Configuration List
<R1>display current-configuration
#
sysname R1
#
acl number 2010
rule 5 permit source 1.0.0.0 0.0.252.255
#
isis 1
is-level level-2
cost-style wide
auto-cost enable
network-entity 49.0001.0000.0000.0001.00
is-name R1
import-route direct route-policy SUMM
default-route-advertise route-policy OTHERROUTE
summary 1.0.0.0 255.255.252.0
#
interface Serial2/0/0
link-protocol fr
undo fr inarp
#
interface Serial2/0/0.2
fr dlci 102
ip address 12.1.1.1 255.255.255.0
fr map ip 12.1.1.2 102 broadcast
isis enable 1
#
interface Serial2/0/0.3
fr dlci 103
ip address 13.1.1.1 255.255.255.0
fr map ip 13.1.1.3 103 broadcast
isis enable 1
#
interface GigabitEthernet0/0/0
ip address 16.1.1.1 255.255.255.0
isis enable 1
#
interface LoopBack0
ip address 10.1.1.1 255.255.255.255
isis enable 1
#
interface LoopBack10
ip address 1.0.0.1 255.255.255.0
#
interface LoopBack11
ip address 1.0.1.1 255.255.255.0
#
interface LoopBack12
ip address 1.0.2.1 255.255.255.0
#
interface LoopBack13
ip address 1.0.3.1 255.255.255.0
#
route-policy SUMM permit node 10
if-match ip-prefix SUMM
#
route-policy OTHERROUTE permit node 10
if-match acl 2010
#
ip ip-prefix SUMM index 10 permit 1.0.0.0 22 greater-equal 24 less-equal 24
#
return
<R2>display current-configuration
#
sysname R2
#
acl number 2000
rule 5 deny source 4.0.0.0 0.0.254.255
rule 10 permit
#
isis 1
cost-style wide
auto-cost enable
network-entity 49.0002.0000.0000.0002.00
is-name R2
import-route isis level-2 into level-1 filter-policy ip-prefix LEAKSUMM
import-route isis level-1 into level-2 filter-policy 2000
area-authentication-mode md5 plain HUAWEI
#
interface Serial2/0/0
link-protocol fr
undo fr inarp
#
interface Serial2/0/0.2
fr dlci 201
ip address 12.1.1.2 255.255.255.0
fr map ip 12.1.1.1 201 broadcast
isis enable 1
#
interface Serial2/0/1
link-protocol ppp
ip address 24.1.1.2 255.255.255.0
isis enable 1
#
interface LoopBack0
ip address 10.2.2.2 255.255.255.255
isis enable 1
#
ip ip-prefix LEAKSUMM index 10 permit 1.0.0.0 22
#
return
<R3>display current-configuration
#
sysname R3
#
acl number 2000
rule 5 deny source 4.0.0.0 0.0.254.255
rule 10 permit
#
isis 1
cost-style wide
auto-cost enable
network-entity 49.0002.0000.0000.0003.00
is-name R3
import-route isis level-2 into level-1 filter-policy ip-prefix LEAKSUMM
import-route isis level-1 into level-2 filter-policy 2000
area-authentication-mode md5 plain HUAWEI
#
interface Serial2/0/0
link-protocol fr
undo fr inarp
#
interface Serial2/0/0.3
fr dlci 301
ip address 13.1.1.3 255.255.255.0
fr map ip 13.1.1.1 301 broadcast
isis enable 1
#
interface Serial2/0/1
link-protocol ppp
ip address 35.1.1.3 255.255.255.0
isis enable 1
#
interface LoopBack0
ip address 10.3.3.3 255.255.255.255
isis enable 1
#
ip ip-prefix LEAKSUMM index 10 permit 1.0.0.0 22
#
return
<R4>display current-configuration
#
sysname R4
#
isis 1
is-level level-1
cost-style wide
auto-cost enable
network-entity 49.0002.0000.0000.0004.00
is-name R4
import-route direct level-1 route-policy SUMM
area-authentication-mode md5 plain HUAWEI
#
interface Ethernet1/0/0
ip address 45.1.1.4 255.255.255.0
isis enable 1
isis circuit-type p2p
isis small-hello
#
interface Serial2/0/1
link-protocol ppp
ip address 24.1.1.4 255.255.255.0
isis enable 1
#
interface LoopBack0
ip address 10.4.4.4 255.255.255.255
isis enable 1
#
interface LoopBack10
ip address 4.0.0.1 255.255.255.0
#
interface LoopBack11
ip address 4.0.1.1 255.255.255.0
#
interface LoopBack12
ip address 4.0.2.1 255.255.255.0
#
interface LoopBack13
ip address 4.0.3.1 255.255.255.0
#
route-policy SUMM permit node 10
if-match ip-prefix SUMM
#
ip ip-prefix SUMM index 10 permit 4.0.0.0 22 greater-equal 24 less-equal 24
#
return
<R5>display current-configuration
#
sysname R5
#
isis 1
is-level level-1
cost-style wide
auto-cost enable
network-entity 49.0002.0000.0000.0005.00
is-name R5
area-authentication-mode md5 plain HUAWEI
summary 1.0.0.0 255.255.252.0
#
interface Ethernet1/0/0
ip address 45.1.1.5 255.255.255.0
isis enable 1
isis circuit-type p2p
isis small-hello
#
interface Serial2/0/1
link-protocol ppp
ip address 35.1.1.5 255.255.255.0
isis enable 1
#
interface LoopBack0
ip address 10.5.5.5 255.255.255.255
isis enable 1
#
return
<R6>display current-configuration
#
sysname R6
#
isis 1
cost-style wide
auto-cost enable
network-entity 49.0006.0000.0000.0006.00
is-name R6
filter-policy ip-prefix FILTERR1SUMM import
#
interface Ethernet1/0/0
ip address 6.0.0.1 255.255.255.0
isis enable 1
isis silent
#
interface GigabitEthernet0/0/0
ip address 16.1.1.6 255.255.255.0
isis enable 1
isis circuit-level level-2
#
interface LoopBack0
ip address 10.6.6.6 255.255.255.255
isis enable 1
#
ip ip-prefix FILTERR1SUMM index 5 deny 1.0.0.0 22
ip ip-prefix FILTERR1SUMM index 10 permit 0.0.0.0 0 less-equal 32
ip ip-prefix FILTERR1SUMM index 10 permit 0.0.0.0 0 less-equal 32