一.实验拓扑
二.实验要求
1.AS1中存在两个环回,一个地址为192.168.1.8/24,该地址不能在任何协议中宣告:
一个地址为192.168.2.8/24,该地址不能在任何协议中宣告,最终要求这两个环回可以ping通
2.R1-R8的建邻环回用x.x.x.x/32表示
3.整个AS2的IP地址为172.16.0.0/16,R3-R7上各有一个业务网段,请合理划分;并且其内部配置OSPF协议
4.As间的骨干链路IP地址随意定制 :
5.使用BGp协议让整个网络所有设备的环回可以互相访问;
6.减少路由条目数量,避免环路出现;
三.实验步骤
1.配置IP
2.用OSPF进行宣告
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 172.16.1.1 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 172.16.1.21 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 172.16.1.2 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 172.16.1.5 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 172.16.3.1 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 172.16.1.6 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 172.16.1.9 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 172.16.4.1 0.0.0.0
[R5]ospf 1 router-id 5.5.5.5
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 172.16.1.22 0.0.0.0
[R5-ospf-1-area-0.0.0.0]network 172.16.1.17 0.0.0.0
[R5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
[R5-ospf-1-area-0.0.0.0]network 172.16.5.1 0.0.0.0
[R6]ospf 1 router-id 6.6.6.6
[R6-ospf-1]area 0
[R6-ospf-1-area-0.0.0.0]network 172.16.1.18 0.0.0.0
[R6-ospf-1-area-0.0.0.0]network 172.16.1.13 0.0.0.0
[R6-ospf-1-area-0.0.0.0]network 172.16.6.1 0.0.0.0
[R6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.0
[R7]ospf 1 router-id 7.7.7.7
[R7-ospf-1]area 0
[R7-ospf-1-area-0.0.0.0]network 172.16.1.14 0.0.0.0
[R7-ospf-1-area-0.0.0.0]network 172.16.1.10 0.0.0.0
[R7-ospf-1-area-0.0.0.0]network 7.7.7.7 0.0.0.0
[R7-ospf-1-area-0.0.0.0]network 172.16.7.1 0.0.0.0
3.BGP建立邻居
R1
[R1]bgp 1
[R1-bgp]peer 12.1.1.2 as-number 2
R2
[R2]bgp 64512
[R2-bgp]confederation id 2
[R2-bgp]confederation peer-as 64513
R2和R1建邻
[R2-bgp]peer 12.1.1.1 as-number 1
R2和R3建邻
[R2-bgp]peer 3.3.3.3 as-number 64512
[R2-bgp]peer 3.3.3.3 connect-interface l0
[R2-bgp]peer 3.3.3.3 next-hop-local
R2和R5建邻
[R2-bgp]peer 5.5.5.5 as-number 64513
[R2-bgp]peer 5.5.5.5 connect-interface l0
[R2-bgp]peer 5.5.5.5 ebgp-max-hop
[R2-bgp]peer 5.5.5.5 next-hop-local
R3
[R3]bgp 64512
[R3-bgp]confederation id 2
R3和R2建邻
[R3-bgp]peer 2.2.2.2 as-number 64512
[R3-bgp]peer 2.2.2.2 connect-interface l0
R3和R4建邻
[R3-bgp]peer 4.4.4.4 as-number 64512
[R3-bgp]peer 4.4.4.4 connect-interface l0
R4
[R4]bgp 64512
[R4-bgp]confederation id 2
R4和R3建邻
[R4-bgp]peer 3.3.3.3 as-number 64512
[R4-bgp]peer 3.3.3.3 connect-interface l0
[R4-bgp]peer 3.3.3.3 next-hop-local
R5
[R5]bgp 64513
[R5-bgp]confederation id 2
[R5-bgp]confederation peer-as 64512
R5和R2建邻
[R5-bgp]peer 2.2.2.2 as-number 64512
[R5-bgp]peer 2.2.2.2 connect-interface l0
[R5-bgp]peer 2.2.2.2 next-hop-local
[R5-bgp]peer 2.2.2.2 ebgp-max-hop
R5和R6建邻
[R5-bgp]peer 6.6.6.6 as-number 64513
[R5-bgp]peer 6.6.6.6 connect-interface l0
[R5-bgp]peer 6.6.6.6 next-hop-local
R6
[R6]bgp 64513
[R6-bgp]confederation id 2
R6和R5建邻
[R6-bgp]peer 5.5.5.5 as-number 64513
[R6-bgp]peer 5.5.5.5 connect-interface l0
R6和R7建邻
[R6-bgp]peer 7.7.7.7 as 64513
[R6-bgp]peer 7.7.7.7 connect-interface l0
R7
[R7]bgp 64513
[R7-bgp]confederation id 2
R7和R6建邻
[R7-bgp]peer 6.6.6.6 as 64513
[R7-bgp]peer 6.6.6.6 connect-interface l0
[R7-bgp]peer 6.6.6.6 next-hop-local
R7和R8建邻
[R7-bgp]
[R7-bgp]peer 34.1.1.2 as-number 3
R8
[R8]bgp 3
[R8-bgp]peer 34.1.1.1 as-number
4. R3-R6配置反射器全连接
[R3]bgp 64512
[R3-bgp]peer 4.4.4.4 reflect-client
[R6]bgp 64513
[R6-bgp]peer 7.7.7.7 reflect-client
5.宣告网段
[R1-bgp]network 1.1.1.1 32
[R3-bgp]network 172.16.3.1 24
[R4-bgp]network 172.16.4.1 24
[R5-bgp]network 172.16.5.1 24
[R6-bgp]network 172.16.6.1 24
[R7-bgp]network 172.16.7.1 24
[R8-bgp]network 8.8.8.8 32
6.手动汇总
汇总:
[R3-bgp]aggregate 172.16.0.0 16 detail-suppressed
[R4-bgp]aggregate 172.16.0.0 16 detail-suppressed
[R5-bgp]aggregate 172.16.0.0 16 detail-suppressed
[R6-bgp]aggregate 172.16.0.0 16 detail-suppressed
[R7-bgp]aggregate 172.16.0.0 16 detail-suppressed
防环:
[R3]ip route-static 172.16.0.0 16 NULL 0
[R4]ip route-static 172.16.0.0 16 NULL 0
[R5]ip route-static 172.16.0.0 16 NULL 0
[R6]ip route-static 172.16.0.0 16 NULL 0
[R7]ip route-static 172.16.0.0 16 NULL
7.R1-R8GRE配置
[R1]int Tunnel 0/0/0
[R1-Tunnel0/0/0]ip address 20.1.1.1 24
[R1-Tunnel0/0/0]tunnel-protocol gre
[R1-Tunnel0/0/0]source 1.1.1.1
[R1-Tunnel0/0/0]description 8.8.8.8
[R1]ip route-static 192.168.2.0 24 20.1.1.2
[R8]int t 0/0/0
[R8-Tunnel0/0/0]ip address 20.1.1.2 24
[R8-Tunnel0/0/0]tunnel-protocol gre
[R8-Tunnel0/0/0]source 8.8.8.8
[R8-Tunnel0/0/0]description 1.1.1.1
[R8]ip route-static 192.168.1.0 24 20.1.1.1