{"id":928,"date":"2012-10-07T22:23:00","date_gmt":"2012-10-07T14:23:00","guid":{"rendered":"http:\/\/note.systw.net\/note\/?p=928"},"modified":"2023-11-07T22:29:13","modified_gmt":"2023-11-07T14:29:13","slug":"cisco-distribute-list","status":"publish","type":"post","link":"https:\/\/systw.net\/note\/archives\/928","title":{"rendered":"Cisco Distribute-List"},"content":{"rendered":"\n

route filter\u7684\u7406\u7531
1\u96b1\u67d0\u7db2\u8def
2\u63a7\u5236network overhead(\u7db2\u8def\u7684\u8ca0\u64d4)
3\u7c21\u55ae\u7684\u5b89\u5168\u6027 <\/p>\n\n\n\n

\u4ee5distribute-list\u904e\u6ffe\u8def\u5f91
(config)# router < protocol-router>
(config-router)#distribute-list < filte-method> < out |in> [ protocol-option] [interface]<\/strong><\/p>\n\n\n\n

< out|in>\u8aaa\u660e\u5982\u4e0b<\/p>\n\n\n\n

out:\u904e\u6ffe<\/strong>\u516c\u544aroute,
<\/strong>\u8868\u793a\u8def\u7531\u8a0a\u606f\u96e2\u958b\u672c\u8a2d\u5099\u6642\u9032\u884c\u6bd4\u5c0d 
ps:\u8def\u7531\u8a0a\u606f\u6703\u5148\u9032\u5165\u8a72\u8a2d\u5099\u4e4b\u8def\u7531\u8868,\u624d\u53ef\u9032\u884croute\u516c\u544a <\/p>\n\n\n\n

ex
\u8a7210.1.1.2\/24 route\u9032\u5165\u672c\u8a2d\u5099\u5f8c,\u82e5\u8981\u5c07\u6b64route\u516c\u544a\u5230\u5176\u4ed6\u8a2d\u5099\u6642
\u5c07\u5176route\u904e\u6ffe
(config)# access-list 10 deny 10.1.1.0 0.0.0.255
(config)# access-list 10 permit any
(config)# router eigrp 1
(config-router)#distribute-list 10 out
ex
\u8a7210.1.1.2\/24 route\u9032\u5165\u672c\u8a2d\u5099\u5f8c,\u82e5\u8981\u5c07\u6b64route\u516c\u544a\u5230\u5176\u4ed6\u8a2d\u5099\u6642,\u4e14\u662f\u516c\u544a\u5230serial0
\u5247\u5c07\u5176route\u904e\u6ffe
(config)# router eigrp 1
(config-router)#distribute-list 10 out serial 0<\/p>\n\n\n\n

ex
\u8a7210.1.1.2\/24 route\u9032\u5165\u672c\u8a2d\u5099\u5f8c,\u82e5\u8981\u5c07\u6b64route\u516c\u544a\u5230\u5176\u4ed6\u8a2d\u5099\u6642,\u4e14\u662f\u5f9eospf2\u5b78\u5230\u7684route
\u5247\u5c07\u5176route\u904e\u6ffe
(config)# router eigrp 1
(config-router)#distribute-list 10 out ospf 2<\/p>\n\n\n\n

ex:
\u8a7210.1.1.2\/24 route\u9032\u5165\u672c\u8a2d\u5099\u5f8c,\u82e5\u8981\u5c07\u6b64route\u516c\u544a\u5230\u5176\u4ed6\u8a2d\u5099\u6642,\u4e14\u662f\u5f9eeigrp1\u5b78\u5230\u7684route
\u5247\u5c07\u5176route\u904e\u6ffe ,\u53e6\u5916\u5c07acl\u6539\u70baprefix-list
(config)#ip prefix-list p_2 seq 1 deny 10.1.1.0\/24
(config)#ip prefix-list p_2 seq 2 permit 0.0.0.0\/0 le 32
(config)# router ospf 2
(config-router)#distribute-list p_2 out eigrp 1<\/p>\n\n\n\n

in:<\/strong>\u904e\u6ffe<\/strong>route<\/strong>\u5b78\u7fd2<\/strong>,
<\/strong>\u8868\u793a\u8def\u7531\u8a0a\u606f\u9032\u5165\u8a72\u8a2d\u5099\u524d\u6703\u5148\u9032\u884c\u6bd4\u5c0d <\/p>\n\n\n\n

ex:
\u6307\u5b9arouter\u4e0d\u8981\u5c0710.1.1.0\/24\u52a0\u5165\u8def\u7531\u8868
(config)#ip prefix-list fpolicy seq 5 deny 10.1.1.0\/24
(config)#ip prefix-list fpolicy seq 10 permit 0.0.0.0\/0 le 32
(config)#router ospf 1
(config-router)#distribute-list prefix fpolicy in ex:
\u5f9eserial0\u5b78\u5230\u7684route 10.1.1.0\/24\u6703\u88ab\u904e\u6ffe,\u56e0\u6b64\u8a2d\u8a2d\u5099\u7121\u6cd5\u5b78\u5230\u6b64route\u3000
(config)#ip prefix-list p_2 seq 1 deny 10.1.1.0\/24 
(config)#ip prefix-list p_2 seq 2 permit 0.0.0.0\/0 le 32 
(config)# router ospf 2
(config-router)#distribute-list p_2 in serial0 <\/p>\n\n\n\n

….. <\/p>\n\n\n\n

< filter-method>\u4e3b\u8981\u6709\u4ee5\u4e0b\u4e09\u7a2e\u65b9\u5f0f,\u8aaa\u660e\u5982\u4e0b<\/p>\n\n\n\n

1\u4ee5acl\u904e\u6ffe
(config-router)#distribute-list < acl id> out [int]<\/strong>
int:\u6307\u5b9a\u53ea\u5c0d\u55ae\u4e00\u4ecb\u9762\u6709\u6548
ex:
\u4e0d\u8981\u516c\u544a10.1.1.0\/24\u7684\u8def\u5f91
(config)# access-list 10 deny 10.1.1.0 0.0.0.255
(config)# access-list 10 permit any
(config)# router eigrp 1
(config-router)#distribute-list 10 out<\/p>\n\n\n\n

2\u4ee5ip prefix-list\u904e\u6ffe
(config-router)#distribute-list prefix < list-name> out<\/strong>
(config)#ip prefix-list < list-name> [seq < id>] < deny|permit> < net\/p-length> [ge < 0-32>] [le < 0-32>]<\/strong>
\u4e0d\u6307\u5b9ale\u548cge:\u8868\u793a\u5be6\u969b\u7684prefix-length\u7b49\u65bc\u6307\u4ee4\u6240\u4e0b\u7684p-length
\u6307\u5b9ale:\u8868\u793a\u5be6\u969bprefix-length\u9700\u5c0f\u65bcle\u7684\u503c
\u6307\u5b9age:\u8868\u793a\u5be6\u969bprefix-length\u9700\u5927\u65bcge\u7684\u503c
le\u8207ge\u540c\u6642:\u8868\u793a\u5be6\u969bprefix-length\u9700\u5927\u65bcge\u7684\u503c\u4e26\u5c0f\u65bcle\u7684\u503c\uff0c\u4e14ge\u503c\u9700\u5927\u65bcp-length
ex:permit 10.0.0.0\/24 ge 16 le 28 \u662finvaild
ps:
0.0.0.0\/0 le 32 \u8868\u793a\u4efb\u4f55\u8def\u5f91
0.0.0.0\/0 \u8868\u793a\u9810\u8a2d\u8def\u5f91
ex:
\u4ee5ip prefix-list\u904e\u6ffe
(config-router)#distribute-list prefix fpolicy1 out
(config)#ip prefix-list fpolicy1 seq 1 deny 10.1.1.0\/24 \/\/prefix-length=24
(config)#ip prefix-list fpolicy1 seq 2 deny 10.1.2.0\/24 le 25 \/\/prefix-length\u70ba24-25
(config)#ip prefix-list fpolicy1 seq 3 deny 10.1.3.0\/24 ge 23 \/\/prefix-length\u70ba23-24
(config)#ip prefix-list fpolicy1 seq 4 deny 10.1.4.0\/24 ge 25 le 26 \/\/prefix-length\u70ba25-26
(config)#ip prefix-list fpolicy1 seq 5 permit 0.0.0.0\/0 le 32<\/p>\n\n\n\n

3\u4ee5route-map\u904e\u6ffe
(config-router)#distribute-list route-map < map-name> out<\/strong>
\u5b9a\u7fa9\u8981\u904e\u6ffe\u7684\u8def\u5f91
(config)#route-map < map-name> deny < m-id>
(config-route-map)#match ip address < prefix-list < list-name>| acl >
(config-route-map)#exit
\u5176\u4ed6\u8def\u5f91\u90fd\u4e0d\u904e\u6ffe
(config)#route-map < map-name> permit < m-id><\/p>\n\n\n\n

ex:
\u4ee5route-map\u904e\u6ffe
(config-router)#distribute-list route-map fmap out
\u5b9a\u7fa9\u8981\u904e\u6ffe\u7684\u8def\u5f91
(config)#ip prefix-list fpolicy seq 1 permit 10.1.1.0\/24
(config)#ip prefix-list fpolicy seq 2 permit 10.1.2.0\/24
(config)#route-map fmap deny 1
(config-route-map)#match ip address prefix-list fpolicy
(config-route-map)#exit
\u5176\u4ed6\u8def\u5f91\u90fd\u4e0d\u904e\u6ffe
(config)#route-map fmap permit 2<\/p>\n","protected":false},"excerpt":{"rendered":"

route filter\u7684\u7406\u75311\u96b1\u67d0\u7db2\u8def2\u63a7\u5236network …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[33],"tags":[],"class_list":["post-928","post","type-post","status-publish","format-standard","hentry","category-cisco-layer3"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/928","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=928"}],"version-history":[{"count":0,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/928\/revisions"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=928"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=928"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=928"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}