BGP综合实验

BGP综合实验

• 实验拓扑图

• 实验思路

• IP网段的划分

1. 根据题意，把172.16.0.0/16网段划分成24位掩码，如下网段：

172.16.0.0/24

172.16.1.0/24

172.16.2.0/24

172.16.3.0/24

172.16.4.0/24

172.16.5.0/24

172.16.6.0/24

172.16.7.0/24

1. 用1716.0.0/24网段用来划分成环回建邻

172.16.0.0/24

172.16.0.1/32

172.16.0.2/32

172.16.0.3/32

172.16.0.4/32

172.16.0.5/32

172.16.0.6/32

172.16.0.7/32

172.16.0.8/32

1. 使用172.16.1.0/24网段划分骨干链路

172.16.1.0/24

172.16.1.0000 00 00/30----172.16.1.0/30

172.16.1.0000 01 00/30----172.16.1.4/30

172.16.1.0000 10 00/30----172.16.1.8/30

172.16.1.0000 11 00/30----172.16.1.12/30

172.16.1.0001 00 00/30----172.16.1.16/30

172.16.1.0001 01 00/30----172.16.1.20/30

1. 各路由业务网段

172.16.3.0/24

172.16.4.0/24

172.16.5.0/24

172.16.6.0/24

172.16.7.0/24

• 配置网络协议通

1. 配置OSPF，在AS 2中建立a 0区域宣告网段
2. BGP建邻，R2与R1建EBGP邻居，R2与R3建立IBGP邻居，R3 和R4建立IBGP邻居， R2和 R5建立联盟EBGP邻居，

R5 与R6 建立IBGP邻居，R6与 R7建立IBGP邻居，R7与R8建立EBGP邻居

1. 进BGP行宣告R1和R8的建邻口，查看是否A 2内路由全被引入

• BGP属性更改

1. 172.16.0.1/32 网段在A 2 R4和 R7并没有学到，这里是因为，BGP的水平分割属性，我们采用反射器来解决这个问题。

合理建设反射器，如果是R2为反射器，那么它只会传给R5和R3；R4 R7并不能接收到网段；所以这里我们建立R3,R6为反射器。

1. BGP的网段宣告可以采用汇总宣告，同时配置缺省路由，避免环路，同时也解决了路由条目少的问题，同时在R2和R7上配置命令，使宣告环回路由全网互通。

• R1与R2业务网段如何达到全网通

1. 建立GRM隧道口

• 实验IP配置

[R1]int g0/0/0

[R1-GigabitEthernet0/0/0]ip ad 12.1.1.1 24

[R1-GigabitEthernet0/0/0]int l0

[R1-LoopBack0]ip ad 172.16.0.1 32

[R1-LoopBack0]int l1

[R1-LoopBack1]ip ad 192.168.1.0 24

[R1-LoopBack1]

[R2]int g0/0/0

[R2-GigabitEthernet0/0/0]ip ad 12.1.1.2 24

[R2-GigabitEthernet0/0/0]int g0/0/1

[R2-GigabitEthernet0/0/1]ip ad 172.16.1.1 30

[R2-GigabitEthernet0/0/1]int g0/0/2

[R2-GigabitEthernet0/0/2]ip ad 172.16.1.21 30

[R2-GigabitEthernet0/0/2]int l0

[R2-LoopBack0]ip ad 172.16.0.2 32



[R3]int g0/0/0

[R3-GigabitEthernet0/0/0]ip ad 172.16.1.2 30

[R3-GigabitEthernet0/0/0]int g0/0/1

[R3-GigabitEthernet0/0/1]ip ad 172.16.1.5 30

[R3-GigabitEthernet0/0/1]int l0

[R3-LoopBack0]ip ad 172.16.0.3 32

[R3-LoopBack0]int l1

[R3-LoopBack1]ip ad 172.16.3.3 24



[R4]int g0/0/0

[R4-GigabitEthernet0/0/0]ip ad 172.16.1.6 30

[R4-GigabitEthernet0/0/0]int g0/0/1

[R4-GigabitEthernet0/0/1]ip ad 172.16.1.9 30

[R4-GigabitEthernet0/0/0]int l0

[R4-LoopBack0]ip ad 172.16.0.4 32

[R4-LoopBack0]int l1

[R4-LoopBack1]ip a 172.16.4.4 24



[R5]int g0/0/0

[R5-GigabitEthernet0/0/0]ip ad 172.16.1.22 30

[R5-GigabitEthernet0/0/0]int g0/0/1

[R5-GigabitEthernet0/0/1]ip ad 172.16.1.17 30

[R5-GigabitEthernet0/0/1]int l0

[R5-LoopBack0]ip ad 172.16.0.5 32

[R5-LoopBack0]int l1

[R5-LoopBack1]ip ad 172.16.5.5 24



[R6]int g0/0/0

[R6-GigabitEthernet0/0/0]ip ad 172.16.1.18 30

[R6-GigabitEthernet0/0/0]int g0/0/1

[R6-GigabitEthernet0/0/1]ip ad 172.16.1.13 30

[R6-GigabitEthernet0/0/1]int l0

[R6-LoopBack0]ip ad 172.16.0.6 32

[R6-LoopBack0]int l1

[R6-LoopBack1]ip ad 172.16.6.6 24



[R7]int g0/0/0

[R7-GigabitEthernet0/0/0]ip ad 172.16.1.14 30

[R7-GigabitEthernet0/0/0]int g0/0/1

[R7-GigabitEthernet0/0/1]ip ad 172.16.1.10 30

[R7-GigabitEthernet0/0/1]int g0/0/2

[R7-GigabitEthernet0/0/2]ip ad 34.1.1.7 24

[R7-GigabitEthernet0/0/2]int l0

[R7-LoopBack0]ip ad 172.16.0.7 32

[R7-LoopBack0]int l1

[R7-LoopBack1]ip ad 172.16.7.7 24



[R8]int g0/0/0

[R8-GigabitEthernet0/0/0]ip ad 34.1.1.8 24

[R8-GigabitEthernet0/0/0]

[R8-GigabitEthernet0/0/0]int l0

[R8-LoopBack0]ip ad 172.16.0.8 32

[R8-LoopBack0]int l1

[R8-LoopBack1]ip ad 192.168.2.8 24

实验配置
OSPF配置

[R2]ospf 1 router-id 2.2.2.2

[R2-ospf-1]a 0

[R2-ospf-1-area-0.0.0.0]ne 172.16.0.0 0.0.255.255



[R3]ospf 1 rou   

[R3]ospf 1 router-id 3.3.3.3

[R3-ospf-1]a 0

[R3-ospf-1-area-0.0.0.0]ne 172.16.0.0 0.0.255.255



[R4]ospf 1 router-id 4.4.4.4

[R4-ospf-1]a 0

[R4-ospf-1-area-0.0.0.0]ne 172.16.0.0 0.0.255.255



[R5]ospf 1 router-id 5.5.5.5

[R5-ospf-1]a 0

[R5-ospf-1-area-0.0.0.0]ne 172.16.0.0 0.0.255.255



[R6]ospf 1 router-id 6.6.6.6

[R6-ospf-1]a 0

[R6-ospf-1-area-0.0.0.0]ne 172.16.0.0 0.0.255.255



[R7]ospf 1 rou   

[R7]ospf 1 router-id 7.7.7.7

[R7-ospf-1]a 0

[R7-ospf-1-area-0.0.0.0]ne 172.16.0.0 0.0.255.255

查看R2 R3 R6是否OSPF建邻成功

BGP连接

[R1]bgp 1

[R1-bgp]peer 12.1.1.2 as 2



[R2]bgp 64512

[R2-bgp]confederation id 2

[R2-bgp]confederation peer-as 64513

[R2-bgp]peer 12.1.1.1 as 1

[R2-bgp]peer 172.16.1.22 as 64513

[R2-bgp]peer 172.16.1.22 next-hop-local

[R2-bgp]peer 172.16.0.3 as 64512

[R2-bgp]peer 172.16.0.3 connect-interface l0

[R2-bgp]peer 172.16.0.3 next-hop-local



[R3]bgp 64512

[R3-bgp]confederation id 2

[R3-bgp]peer 172.16.0.2 as 64512

[R3-bgp]peer 172.16.0.2 connect-interface l0

[R3-bgp]peer 172.16.0.4 as 64512

[R3-bgp]peer 172.16.0.4 connect-interface l0





[R4]bgp 64512

[R4-bgp]confederation id 2

[R4-bgp]peer 172.16.0.3 as 64512

[R4-bgp]peer 172.16.0.3 connect-interface l0

[R4-bgp]peer 172.16.0.3 next-hop-local



[R5]bgp 64513

[R5-bgp]confederation id 2

[R5-bgp]confederation peer-as 64512

[R5-bgp]peer 172.16.1.21 as 64512

[R5-bgp]peer 172.16.1.21 next-hop-local

[R5-bgp]peer 172.16.0.6 as 64513

[R5-bgp]peer 172.16.0.6 next-hop-local

[R5-bgp]peer 172.16.0.6 connect-interface l0



[R6]bgp 64513

[R6-bgp]confederation id 2

[R6-bgp]peer 172.16.0.5 as 64513

[R6-bgp]peer 172.16.0.5 connect-interface l0

[R6-bgp]peer 172.16.0.7 as 64513

[R6-bgp]peer 172.16.0.7 connect-interface l0







[R7]bgp 64513

[R7-bgp]confederation id 2

[R7-bgp]peer 172.16.0.6 as 64513

[R7-bgp]peer 172.16.0.6 connect-interface l0

[R7-bgp]peer 172.16.0.6 next-hop-local

[R7-bgp]peer 34.1.1.8 as 3



[R8]bgp 3

[R8-bgp]peer 34.1.1.7 as 2

查看建邻是否成功？

 

 

宣告网段

[R1-bgp]ne 172.16.0.1 32



[R8-bgp]ne 172.16.0.8 32

出现这个现象，是BGP存在水平分割现象，我们应该配置反射器，为R3,R6;

[R3-bgp]peer 172.16.0.4 reflect-client



[R6-bgp]peer 172.16.0.7 reflect-client

[R6-bgp]peer 172.16.0.5 reflect-client

达到R1 R8两个环回口Ping通

进行bgp宣告前，要配置路由接空，防止路由环回，宣告172.16.0.0/16 ，减少路由条目

[R2]ip route-static 172.16.0.0 16 NULL 0

[R2-bgp]ne 172.16.0.0 16

[R7]ip route-static 172.16.0.0 16 NULL 0

[R7-bgp]ne 172.16.0.0 16

在不宣告192.168.1.0/24，192.168.2.0/24网段协议，却能保证能被访问，我们应该建立GRE隧道

[R1]int t0/0/0

[R1-Tunnel0/0/0]ip ad 100.1.1.1 24

[R1-Tunnel0/0/0]tunnel-protocol gre

[R1-Tunnel0/0/0]source 172.16.0.1

[R1-Tunnel0/0/0]destination 172.16.0.8

[R1]ip route-static 192.168.2.0 24 100.1.1.2

[R8]int t0/0/0

[R8-Tunnel0/0/0]ip ad 100.1.1.2 24

[R8-Tunnel0/0/0]tunnel-protocol gre

[R8-Tunnel0/0/0]source 172.16.0.8

[R8-Tunnel0/0/0]destination 172.16.0.1

[R8]ip route-static 192.168.1.0 24 100.1.1.1