BGP实验

绘世繁星

已于 2024-07-23 09:21:59 修改

阅读量909

点赞数 26

文章标签：网络运维

于 2024-07-23 00:55:11 首次发布

本文链接：https://blog.csdn.net/2301_78209684/article/details/140608557

版权

题目：

一.IP划分以及配置：

IP划分：

可以看出有三个AS大区所以先将网段一分为三然后，AS二中也有俩个私有as所以还需要再把as2的ip一分为二

as 1：172.16.0.0 18

as 2：172.16.64.0 18

as 3：172.16.128.0 18

as1：

骨干链路：172.16.0.0 30

as 2：

as 65512：172.16.64.0 19

骨干链路:172.16.64.0 30

172.16.64.4 30

172.16.64.8 30

172.16.64.12 30

as 65513：172.16.96.0 19

骨干链路:172.16.96.0 30

172.16.96.4 30

as 3：

骨干链路：172.16.128.0 30

规划后如图所示

配置命令：

R1：

                        [r1]interface GigabitEthernet 0/0/0

                        [r1-GigabitEthernet0/0/0]ip address 172.16.0.1 30

                        [r1]interface LoopBack 0

                        [r1-LoopBack0]ip address 1.1.1.1 24

                        [r1]interface LoopBack 1

                        [r1-LoopBack1]ip address 192.168.1.1 24

R2:

                        [r2]interface g 0/0/0

                        [r2-GigabitEthernet0/0/0]ip address 172.16.0.2 30

                        [r2]interface GigabitEthernet 0/0/1

                        [r2-GigabitEthernet0/0/1]ip address 172.16.64.5 30

                        [r2]interface GigabitEthernet 0/0/2

                        [r2-GigabitEthernet0/0/2]ip address 172.16.64.2 30

                        [r2]interface LoopBack 0
                        [r2-LoopBack0]ip address 2.2.2.2 24

R3：

                        [r3]interface GigabitEthernet 0/0/0

                        [r3-GigabitEthernet0/0/0]ip address 172.16.64.6 30

                        [r3-GigabitEthernet0/0/0]interface GigabitEthernet 0/0/1

                        [r3-GigabitEthernet0/0/1]ip address 172.16.64.9 30

                        [r3]interface LoopBack 0
                        [r3-LoopBack0]ip address 3.3.3.3 24

                        [r3]interface LoopBack 1
                        [r3-LoopBack1]ip address 192.168.2.1 24

R4：

                        [r4]interface g 0/0/0

                        [r4-GigabitEthernet0/0/0]ip address 172.16.64.10 30

                        [r4-GigabitEthernet0/0/0]interface g 0/0/1
                        [r4-GigabitEthernet0/0/1]ip address 172.16.64.13 30

                        [r4]interface LoopBack 0
                        [r4-LoopBack0]ip address 4.4.4.4 24

R5：

                        [r5]interface g 0/0/0
                        [r5-GigabitEthernet0/0/0]ip address 172.16.64.1 30

                        [r5-GigabitEthernet0/0/0]interface g 0/0/1
                        [r5-GigabitEthernet0/0/1]ip address 172.16.96.6 30

                        [r5]interface LoopBack 0
                        [r5-LoopBack0]ip address 5.5.5.5 24

R6：

                        [r6]interface g 0/0/0
                        [r6-GigabitEthernet0/0/0]ip add
                        [r6-GigabitEthernet0/0/0]ip address 172.16.96.5 30

                        [r6-GigabitEthernet0/0/0]interface g 0/0/1
                        [r6-GigabitEthernet0/0/1]ip address 172.16.96.2 30

                        [r6]interface LoopBack 0
                        [r6-LoopBack0]ip address 6.6.6.6 24

R7：

                        [r7]interface GigabitEthernet 0/0/0

                        [r7-GigabitEthernet0/0/0]ip address 172.16.96.1 30

                        [r7-GigabitEthernet0/0/0]interface GigabitEthernet 0/0/1
                        [r7-GigabitEthernet0/0/1]ip address 172.16.64.14 30

                        [r7-GigabitEthernet0/0/1]interface GigabitEthernet 0/0/2
                        [r7-GigabitEthernet0/0/2]ip address 172.16.128.1 30

                        [r7]interface LoopBack 0
                        [r7-LoopBack0]ip address 7.7.7.7 24

R8：

                        [r8]interface g 0/0/0

                        [r8-GigabitEthernet0/0/0]ip address 172.16.128.2 30

                        [r8]interface LoopBack 0

                        [r8-LoopBack0]ip address 8.8.8.8 24

                        [r8]interface LoopBack 1

                        [r8-LoopBack1]ip address 192.168.2.1 24

二.使用BGP协议使所有环回都能访问

想要使用BGP协议必须要有对应的路由所以在AS2区域中我们使用ospf协议使AS2区域的设备互通，然后在AR1与AR2,AR7与AR8身上使用静态的的方式使1.1.1.1与2.2.2.2 ，7.7.7.7与8.8.8.8互通。

OSPF配置：

AR2:

                        [r2]ospf 1 router-id 2.2.2.2
                        [r2-ospf-1]area 0
                        [r2-ospf-1-area-0.0.0.0]network 172.16.64.5 0.0.0.3
                        [r2-ospf-1-area-0.0.0.0]network 172.16.64.2 0.0.0.3
                        [r2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.255
                        [r2-ospf-1-area-0.0.0.0]network 172.16.0.2 0.0.0.3

AR3:

                        [r3]ospf 1 router-id 3.3.3.3
                        [r3-ospf-1]area 0
                        [r3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.255
                        [r3-ospf-1-area-0.0.0.0]network 172.16.64.6 0.0.0.3

                        [r3-ospf-1-area-0.0.0.0]network 172.16.64.9 0.0.0.3

AR4:

                        [r4]ospf 1 router-id 4.4.4.4
                        [r4-ospf-1]area 0
                        [r4-ospf-1-area-0.0.0.0]network 172.16.64.10 0.0.0.3

                        [r4-ospf-1-area-0.0.0.0]network 172.16.64.13 0.0.0.3

                        [r4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.255

AR5:

                        [r5]ospf 1 router-id 5.5.5.5
                        [r5-ospf-1]area 0
                        [r5-ospf-1-area-0.0.0.0]network 172.16.96.6 0.0.0.3
                        [r5-ospf-1-area-0.0.0.0]network 172.16.64.1 0.0.0.3

                        [r5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.255

AR6:

                        [r6]ospf 1 router-id 6.6.6.6
                        [r6-ospf-1]area 0
                        [r6-ospf-1-area-0.0.0.0]network 172.16.96.5 0.0.0.3

                        [r6-ospf-1-area-0.0.0.0]network 172.16.96.2 0.0.0.3
                        [r6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.255

AR7:

                        [r7]ospf 1 router-id 7.7.7.7
                        [r7-ospf-1]area 0
                        [r7-ospf-1-area-0.0.0.0]network 172.16.96.1 0.0.0.3

                        [r7-ospf-1-area-0.0.0.0]network 172.16.64.14 0.0.0.3

                        [r7-ospf-1-area-0.0.0.0]network 7.7.7.7 0.0.0.255

                        [r7-ospf-1-area-0.0.0.0]network 172.16.128.1 0.0.0.3

此时AR2能访问AR7的环回说明ospf配置完成

BGP配置：

AR1与AR2,AR8与AR7采用直连建邻

注意虽然AR2在AS65512中但也属于公共的AS2所以需要使用confederation去宣告

  AR1:

          [r1]bgp 1

[r1-bgp]router-id 1.1.1.1
                        [r1-bgp]peer 172.16.0.2 as-number 2

AR2:

                        [r2]bgp 65512
                        [r2-bgp]router-id 2.2.2.2

                        [r2-bgp]confederation id 2
                        [r2-bgp]peer 172.16.0.1 as-number 1

AR8:

                        [r8]bgp 3
                        [r8-bgp]router-id 8.8.8.8
                        [r8-bgp]peer 172.16.128.1 as-number 2

AR7:

                        [r7]bgp 65513
                        [r7-bgp]router-id 7.7.7.7
                        [r7-bgp]confederation id 2
                        [r7-bgp]peer 172.16.128.2 as-number 3

查看bgp的关系表已经是Established状态说明建邻成功

AS65512中的IBGP设备采用环回接口建邻：

注意：因为AS-by-AS原则导致AS内部IBGP路由传递过程中下一跳属性

不会自行修改，导致AS内部路由器下一跳不可达，路由不可用。

需要使用next-hop-local修改下一跳

为了防环IBGP对等体之间只会传一跳，所以需要使用reflect-client来

指定反射客户，自己自动成为反射器，这里认为AR3,AR6最为合适

        AS 65512:

                AR2:

                        [r2]bgp 65512
                        [r2-bgp]peer 3.3.3.3 as-number 65512
                        [r2-bgp]peer 3.3.3.3 connect-interface LoopBack 0

AS3:

                        [r3]bgp 65512
                        [r3-bgp]router-id 3.3.3.3
                        [r3-bgp]peer 2.2.2.2 as-number 65512
                        [r3-bgp]peer 2.2.2.2 connect-interface LoopBack 0
                        [r3-bgp]peer 2.2.2.2 next-hop-local
                        [r3-bgp]peer 4.4.4.4 as-number 65512
                        [r3-bgp]peer 4.4.4.4 connect-interface LoopBack 0
                        [r3-bgp]peer 4.4.4.4 next-hop-local

AS4:

                        [r4]bgp 65512

                        [r4-bgp]confederation id 2
                        [r4-bgp]peer 3.3.3.3 as-number 65512
                        [r4-bgp]peer 3.3.3.3 connect-interface LoopBack 0

查看AR3的bgp的关系表已经是Established状态说明建邻成功

AS 65513:

AR5:

                        [r5]bgp 65513
                        [r5-bgp]router-id 5.5.5.5
                        [r5-bgp]peer 6.6.6.6 as-number 65513
                        [r5-bgp]peer 6.6.6.6 connect-interface LoopBack 0

                        [r5-bgp][r4-bgp]confederation id 2

AR6:

                        [r6]bgp 65513
                        [r6-bgp]router-id 6.6.6.6
                        [r6-bgp]peer 5.5.5.5 as-number 65513
                        [r6-bgp]peer 5.5.5.5 connect-interface LoopBack 0
                        [r6-bgp]peer 5.5.5.5 next-hop-local
                        [r6-bgp]peer 7.7.7.7 as-number 65512
                        [r6-bgp]peer 7.7.7.7 connect-interface LoopBack 0
                        [r6-bgp]peer 7.7.7.7 next-hop-local

AR7:

                        [r7-bgp]router-id 7.7.7.7
                        [r7-bgp]peer 6.6.6.6 as-number 65513
                        [r7-bgp]peer 6.6.6.6 connect-interface LoopBack 0

查看AR6的bgp的关系表已经是Established状态说明建邻成功

AS65512与AS65513之间建立EBGP对等体

注意：因为EBGP数据包默认的TTL值为1，所以在使用环回建立0

EBGP对等体时，需要手工修改TTL值

必须先声明公有的AS号和建立对端的AS号

AS 65512

AR2:

                                [r2]BGP 65512

                                [r2-bgp]confederation peer-as 65513
                                [r2-bgp]peer 5.5.5.5 as 65513
                                [r2-bgp]peer 5.5.5.5 connect-interface LoopBack 0
                                [r2-bgp]peer 5.5.5.5 ebgp-max-hop

AR4:

                                [r4]bgp 65512

                                [r4-bgp]confederation id 2

                                [r4-bgp]confederation peer-as 65513
                                [r4-bgp]peer 7.7.7.7 as-number 65513
                                [r4-bgp]peer 7.7.7.7 connect-interface LoopBack 0
                                [r4-bgp]peer 7.7.7.7 ebgp-max-hop

AS 65513

AR5:

                                [r5]BGP 65513

                                [r5-bgp]confederation id 2
                                [r5-bgp]confederation peer-as 65512
                                [r5-bgp]peer 2.2.2.2 as-number 65512
                                [r5-bgp]peer 2.2.2.2 connect-interface LoopBack 0
                                [r5-bgp]peer 2.2.2.2 ebgp-max-hop

AR7：

                                [r7]bgp 65513
                                [r7-bgp]confederation peer-as 65512
                                [r7-bgp]peer 4.4.4.4 as-number 65512
                                [r7-bgp]peer 4.4.4.4 connect-interface LoopBack 0
                                [r7-bgp]peer 4.4.4.4 ebgp-max-hop

查看AR2，AR4的bgp的关系表已经是Established状态说明建邻成功

宣告网段：

AR2:

                        [r2]bgp 65512
                        [r2-bgp]network 172.16.0.2 30
                        [r2-bgp]network 172.16.64.5 30
                        [r2-bgp]network 172.16.64.2 30

                        [r2-bgp]network 2.2.2.2 24

AR3:

                        [r3]bgp 65512
                        [r3-bgp]network 172.16.64.6 30
                        [r3-bgp]network 172.16.64.9 30

                        [r3-bgp]network 192.168.2.0 24
                        [r3-bgp]network 3.3.3.3 24

AR4:

                        [r4]bgp 65512
                        [r4-bgp]network 172.16.64.10 30
                        [r4-bgp]network 172.16.64.13 30
                        [r4-bgp]network 4.4.4.4 24

AR5:

                        [r5]bgp 65513
                        [r5-bgp]network 172.16.96.6 30
                        [r5-bgp]network 172.16.64.1 30
                        [r5-bgp]network 5.5.5.5 24

AR6:

                        [r6]bgp 65513
                        [r6-bgp]network 172.16.96.5
                        [r6-bgp]network 172.16.96.5 30
                        [r6-bgp]network 172.16.96.2 30
                        [r6-bgp]network 6.6.6.6 24

AR7:

                        [r7]bgp 65513
                        [r7-bgp]network 172.16.96.1 30
                        [r7-bgp]network 172.16.64.14 30
                        [r7-bgp]network 172.16.128.1 30
                        [r7-bgp]network 7.7.7.7 24

AR1:

                        [r1]bgp 1

                        [r1-bgp]network 172.16.0.1 30
                        [r1-bgp]network 1.1.1.1 24
                        [r1-bgp]network 192.168.1.0 24
AR8:

                        [r8]BGP 3
                        [r8-bgp]network 8.8.8.8 24
                        [r8-bgp]network 172.16.128.2 30

此时AR3有完整的bgp路由表但AR1上没有AS2区域中完整的路由表

配置反射器：

AR3:

                                [r3]bgp 65512
                                [r3-bgp]peer 4.4.4.4 reflect-client
                                [r3-bgp]peer 2.2.2.2 reflect-client

AR6:

                                [r6]bgp 65513
                                [r6-bgp]peer 5.5.5.5 reflect-client
                                [r6-bgp]peer 7.7.7.7 reflect-client

查看AR1的BGP路由表此时已经或起到AS2区域完整的BGP路由表

所以此时192.168.1.0一定能与192168.2.0互通

三.路由汇总：

建议只用在边界路由进行汇总

R2:

                        [r2]bgp 65512
                        [r2-bgp]agg
                        [r2-bgp]aggregate 172.16.64.0 28 de
                        [r2-bgp]aggregate 172.16.64.0 28 detail-suppressed

                        [r2-bgp]aggregate 172.16.96.0 29 detail-suppressed

R7:

                        [r7]bgp 65513
                        [r7-bgp]aggregate 172.16.96.0 29 detail-suppressed
                        [r7-bgp]aggregate 172.16.64.0 28 detail-suppressed