目录
在R2-R7上启OSPF协议,然后在R2-R7上把类型改为broadcast (即掩码改为24)。R2-R7配置都一样,因此只展示R2配置
在R1-R8上启BGP,配置完后用display bgp peer命令看是否是Established
在R1和R8上做,配置完用display bgp routing-table 命令在R8上查看,在进行测试
在R2和R7上做,先写聚合,然后再写策略,R2的是bgp 64512 ,R7的是bgp 64513,代码是差不多的,就展示R7的配置,配置完查看R1和R8,最后测试
需求
1.AS1存在两个环回,一个地址为192.168.1.0/24该地址不能在任何协议中宣告,
AS3中存在两个环回,一个地址为192.168.2.0/24该地址不能在任何协议中宣告,最终要求这两个环回可以互相通讯
2.整个AS2的IP地址为172.16.0.0/16,请合理划分
3.AS间的骨干链路IP地址随意定制
4.使用BGP协议让整个网络所有设备的环回可以相互访问
5.减少路由条目数量,避免环路出现
实验步骤
第一步:IP地址规划
设备 | 接口 | 地址 | 设备 | 接口 | 地址 |
R1 | LoopBack0 | 1.1.1.1/24 | LoopBack1 | 172.16.6.1/24 | |
g0/0/0 | 12.1.1.1/24 | g0/0/1 | 172.16.1.14/30 | ||
R2 | LoopBack0 | 172.16.0.2/32 | g0/0/0 | 172.16.1.17/30 | |
LoopBack1 | 172.16.2.1/24 | R7 | LoopBack0 | 172.16.0.7/32 | |
g0/0/0 | 12.1.1.2/24 | LoopBack1 | 172.16.7.1/24 | ||
g0/0/1 | 172.16.1.1/30 | g0/0/1 | 172.16.1.10/30 | ||
R3 | LoopBack0 | 172.16.0.3/32 | g0/0/2 | 78.1.1.7/24 | |
LoopBack1 | 172.16.3.1/24 | g0/0/0 | 172.16.1.13/30 | ||
g0/0/0 | 172.16.1.2/30 | R8 | LoopBack0 | 8.8.8.8/24 | |
g0/0/1 | 172.16.1.5/30 | g0/0/0 | 78.1.1.8/24 | ||
R4 | LoopBack0 | 172.16.0.4/32 | R2 | g0/0/2 | 172.16.1.22 30 |
LoopBack1 | 172.16.4.1/24 | ||||
g0/0/0 | 172.16.1.6/30 | ||||
g0/0/1 | 172.16.1.9/30 | ||||
R5 | LoopBack0 | 172.16.0.5/32 | |||
LoopBack1 | 172.16.5.1/24 | ||||
g0/0/1 | 172.16.1.18/30 | ||||
g0/0/0 | 172.16.1.21/30 | ||||
R6 | LoopBack0 | 172.16.0.6/32 |
第二步:配IP地址
给R1-R8每个接口和环回配置IP地址
R1配置
[R1]int l0
[R1-LoopBack0]ip address 1.1.1.1 24
[R1-LoopBack0]q
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]ip address 12.1.1.1 24
R2配置
[R2]int l0
[R2-LoopBack0]ip address 172.16.0.2 32
[R2-LoopBack0]q
[R2]int l1
[R2-LoopBack1]ip address 172.16.2.1 24
[R2-LoopBack1]q
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24
[R2-GigabitEthernet0/0/0]q
[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]ip address 172.16.1.1 30
[R2-GigabitEthernet0/0/1]q
[R2]int g0/0/2
[R2-GigabitEthernet0/0/2]ip address 172.16.1.22 30
R3配置
[R3]int l0
[R3-LoopBack0]ip address 172.16.0.3 32
[R3-LoopBack0]q
[R3]int LoopBack 1
[R3-LoopBack1]ip address 172.16.3.1 24
[R3-LoopBack1]q
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip address 172.16.1.2 30
[R3-GigabitEthernet0/0/0]q
[R3]int g0/0/1
[R3-GigabitEthernet0/0/1]ip address 172.16.1.5 30
R4配置
[R4]int l0
[R4-LoopBack0]ip address 172.16.0.4 32
[R4-LoopBack0]q
[R4]int l1
[R4-LoopBack1]ip address 172.16.4.1 24
[R4-LoopBack1]q
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip address 172.16.1.6 30
[R4-GigabitEthernet0/0/0]q
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ip address 172.16.1.9 30
R5配置
[R5]int l0
[R5-LoopBack0]ip address 172.16.0.5 32
[R5-LoopBack0]q
[R5]int l1
[R5-LoopBack1]ip address 172.16.5.1 24
[R5-LoopBack1]q
[R5]int g0/0/1
[R5-GigabitEthernet0/0/1]ip address 172.16.1.18 30
[R5-GigabitEthernet0/0/1]q
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip address 172.16.1.21 30
R6配置
[R6]int l0
[R6-LoopBack0]ip address 172.16.0.6 32
[R6-LoopBack0]q
[R6]int l1
[R6-LoopBack1]ip address 172.16.6.1 24
[R6-LoopBack1]q
[R6]int g0/0/1
[R6-GigabitEthernet0/0/1]ip address 172.16.1.14 30
[R6-GigabitEthernet0/0/1]q
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ip address 172.16.1.17 30
R7配置
[R7]int l0
[R7-LoopBack0]ip address 172.16.0.7 32
[R7-LoopBack0]q
[R7]int l1
[R7-LoopBack1]ip address 172.16.7.1 24
[R7-LoopBack1]q
[R7]int g0/0/1
[R7-GigabitEthernet0/0/1]ip address 172.16.1.10 30
[R7-GigabitEthernet0/0/1]q
[R7]int g0/0/2
[R7-GigabitEthernet0/0/2]ip address 78.1.1.7 24
[R7-GigabitEthernet0/0/2]q
[R7]int g0/0/0
[R7-GigabitEthernet0/0/0]ip address 172.16.1.13 30
R8配置
[R8]int l0
[R8-LoopBack0]ip address 8.8.8.8 24
[R8-LoopBack0]q
[R8]int g0/0/0
[R8-GigabitEthernet0/0/0]ip address 78.1.1.8 24
第三步:启协议
在R2-R7上启OSPF协议,然后在R2-R7上把类型改为broadcast (即掩码改为24)。R2-R7配置都一样,因此只展示R2配置
R2配置
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255[R2]int l1
[R2-LoopBack1]ospf network-type broadcast
第四步:启BGP
在R1-R8上启BGP,配置完后用display bgp peer命令看是否是Established
R1配置
[R1]bgp 1
[R1-bgp]peer 12.1.1.2 as-number 2
R2配置
[R2]bgp 64512
[R2-bgp]confederation id 2
[R2-bgp]confederation peer-as 64513
[R2-bgp]peer 12.1.1.1 as-number 1
[R2-bgp]peer 172.16.0.5 as-number 64513
[R2-bgp]peer 172.16.0.5 connect-interface LoopBack 0
[R2-bgp]peer 172.16.0.5 ebgp-max-hop 2
[R2-bgp]peer 172.16.0.3 as-number 64512
[R2-bgp]peer 172.16.0.3 connect-interface LoopBack 0
[R2-bgp]peer 172.16.0.3 next-hop-local
R3配置
[R3]bgp 64512
[R3-bgp]confederation id 2
[R3-bgp]peer 172.16.0.2 as-number 64512
[R3-bgp]peer 172.16.0.2 connect-interface LoopBack 0
[R3-bgp]peer 172.16.0.2 next-hop-local
[R3-bgp]q
[R3]bgp 64512
[R3-bgp]peer 172.16.0.4 as-number 64512
[R3-bgp]peer 172.16.0.4 connect-interface LoopBack 0
[R3-bgp]peer 172.16.0.4 next-hop-local
R4配置
[R4]bgp 64512
[R4-bgp]confederation id 2
[R4-bgp]confederation peer-as 64513
[R4-bgp]peer 172.16.0.3 as-number 64512
[R4-bgp]peer 172.16.0.3 connect-interface LoopBack 0
[R4-bgp]peer 172.16.0.3 next-hop-local
[R4-bgp]peer 172.16.0.7 as-number 64513
[R4-bgp]peer 172.16.0.7 connect-interface LoopBack 0
[R4-bgp]peer 172.16.0.7 ebgp-max-hop 2
R5配置
[R5]bgp 64513
[R5-bgp]confederation id 2
[R5-bgp]confederation peer-as 64512
[R5-bgp]peer 172.16.0.2 as-number 64512
[R5-bgp]peer 172.16.0.2 connect-interface LoopBack 0
[R5-bgp]peer 172.16.0.2 ebgp-max-hop 2
[R5-bgp]peer 172.16.0.6 as-number 64513
[R5-bgp]peer 172.16.0.6 next-hop-local
[R5-bgp]peer 172.16.0.6 connect-interface LoopBack 0
R6配置
[R6]bgp 64513
[R6-bgp]confederation id 2
[R6-bgp]peer 172.16.0.5 as-number 64513
[R6-bgp]peer 172.16.0.5 connect-interface LoopBack 0
[R6-bgp]peer 172.16.0.5 next-hop-local
[R6-bgp]peer 172.16.0.7 as-number 64513
[R6-bgp]peer 172.16.0.7 next-hop-local
[R6-bgp]peer 172.16.0.7 connect-interface LoopBack 0
R7配置
[R7]bgp 64513
[R7-bgp]confederation id 2
[R7-bgp]confederation peer-as 64512
[R7-bgp]peer 172.16.0.4 as-number 64512
[R7-bgp]peer 172.16.0.4 connect-interface LoopBack 0
[R7-bgp]peer 172.16.0.4 ebgp-max-hop 2
[R7-bgp]peer 172.16.0.6 as-number 64513
[R7-bgp]peer 172.16.0.6 connect-interface LoopBack 0
[R7-bgp]peer 172.16.0.6 next-hop-local
[R7-bgp]peer 78.1.1.8 as-number 3
R8配置
[R8]bgp 3
[R8-bgp]peer 78.1.1.7 as-number 2
查看R1-R8的图
第五步:做反射器
在R3和R6上做
R3配置
[R3]bgp 64512
[R3-bgp]peer 172.16.0.4 reflect-client
R6配置
[R6]bgp 64513
[R6-bgp]peer 172.16.0.7 reflect-client
第六步:宣告
在R1和R8上做,配置完用display bgp routing-table 命令在R8上查看,在进行测试
R1配置
[R1]bgp 1
[R1-bgp]network 1.1.1.0 24
R8配置
[R8]bgp 3
[R8-bgp]network 8.8.8.0 24
查看
测试
第七步:重发布
在R2和R7上做重发布,在R1上查看
R2配置
[R2]bgp 64512
[R2-bgp]import-route ospf 1
R7配置
[R7]bgp 64513
[R7-bgp]import-route ospf 1
查看
第八步:写策略
在R2和R7上做,先写聚合,然后再写策略,R2的是bgp 64512 ,R7的是bgp 64513,代码是差不多的,就展示R7的配置,配置完查看R1和R8,最后测试
R7配置
[R7]bgp 64513
[R7-bgp]aggregate 172.16.0.0 24 detail-suppressed
[R7-bgp]aggregate 172.16.1.0 24 detail-suppressed[R7-bgp]aggregate 172.16.0.0 21 detail-suppressed
[R7]ip ip-prefix linju permit 172.16.0.0 24
[R7]ip ip-prefix gugan permit 172.16.1.0 24
[R7]route-policy a deny node 10
Info: New Sequence of this List.
[R7-route-policy]if-match ip-prefix linju
[R7-route-policy]q
[R7]route-policy a deny node 20
Info: New Sequence of this List.
[R7-route-policy]if-match ip-prefix gugan
[R7-route-policy]q
[R7]route-policy a permit node 30
Info: New Sequence of this List.
[R7-route-policy]q
[R7]bgp 64513
[R7-bgp]peer 78.1.1.8 route-policy a exportR2最后导出不一样
[R2-bgp]peer 12.1.1.1 route-policy a export
查看
测试
第九步:选路
在R2、R4、R5、R7上配置
R2配置
[R2]bgp 64512
[R2-bgp]peer 172.16.0.5 next-hop-local
R4配置
[R4]bgp 64512
[R4-bgp]peer 172.16.0.7 next-hop-local
R5配置
[R5]bgp 64513
[R5-bgp]peer 172.16.0.2 next-hop-local
R7配置
[R7]bgp 64513
[R7-bgp]undo peer 172.16.0.4
[R7-bgp]q
[R7]bgp 64513
[R7-bgp]peer 172.16.0.4 as-number 64512
[R7-bgp]peer 172.16.0.4 connect-interface LoopBack 0
[R7-bgp]peer 172.16.0.4 ebgp-max-hop 2
[R7-bgp]peer 172.16.0.4 next-hop-local