BGP小综合

DK_one

已于 2023-03-06 19:29:06 修改

阅读量131

点赞数

文章标签：网络安全 Powered by 金山文档

于 2023-01-26 19:38:24 首次发布

本文链接：https://blog.csdn.net/DK_one/article/details/128767083

版权

题目

top

ip配置：

R1  GigabitEthernet0/0/0              12.1.1.1/24          up         up            
LoopBack0                         1.1.1.1/24           up         up(s)   
R2  
GigabitEthernet0/0/0              12.1.1.2/24          up         up        
GigabitEthernet0/0/1              172.16.0.1/30        up         up        
GigabitEthernet0/0/2              172.16.0.9/30        up         up        
LoopBack0                         172.16.1.2/32        up         up(s)     
LoopBack1                         172.16.2.1/24        up         up(s)  
R3
GigabitEthernet0/0/0              172.16.0.2/30        up         up        
GigabitEthernet0/0/1              172.16.0.5/30        up         up        
LoopBack0                         172.16.1.3/32        up         up(s)     
LoopBack1                         172.16.3.1/24        up         up(s)     
R4
GigabitEthernet0/0/0              172.16.0.6/30        up         up        
GigabitEthernet0/0/1              172.16.0.21/30       up         up        
LoopBack0                         172.16.1.4/32        up         up(s)     
LoopBack1                         172.16.4.1/24        up         up(s) 
R5
GigabitEthernet0/0/0              172.16.0.10/30       up         up        
GigabitEthernet0/0/1              172.16.0.13/30       up         up        
LoopBack0                         172.16.1.5/32        up         up(s)     
LoopBack1                         172.16.5.1/24        up         up(s)   
R6
GigabitEthernet0/0/0              172.16.0.14/30       up         up        
GigabitEthernet0/0/1              172.16.0.17/30       up         up        
LoopBack0                         172.16.1.6/32        up         up(s)     
LoopBack1                         172.16.6.1/24        up         up(s)
R7
GigabitEthernet0/0/0              172.16.0.18/30       up         up        
GigabitEthernet0/0/1              172.16.0.22/30       up         up        
GigabitEthernet0/0/2              78.1.1.1/24          up         up        
LoopBack0                         172.16.1.7/32        up         up(s)     
LoopBack1                         172.16.7.1/24        up         up(s)    
R8   
GigabitEthernet0/0/0              78.1.1.2/24          up         up        
LoopBack0                         8.8.8.8/24           up         up(s)

ospf的配置：

OSPF的配置：
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[r2-LoopBack1]ospf network-type broadcast  //用于区分建邻环回  ospf默认路由传递是 32 位 
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[r3-LoopBack1]ospf network-type broadcast 

[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[r4-LoopBack1]ospf network-type broadcast

[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[r5-LoopBack1]ospf network-type broadcast

[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[r6-LoopBack1]ospf network-type broadcast

[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[r7-LoopBack1]ospf network-type broadcast

bgp的建立：

[r1]bgp 1
[r1-bgp]router-id 1.1.1.1
[r1-bgp]peer 12.1.1.2 as-number 2

[r2]bgp 64512                 宣告小as号
[r2-bgp]router-id 2.2.2.2
[r2-bgp]confederation id 2   宣告大as号
[r2-bgp]confederation peer-as 64513    邻居as号
[r2-bgp]peer 12.1.1.1 as-number 1
[r2-bgp]peer 172.16.1.3 as-number 64512
[r2-bgp]peer 172.16.1.3 connect-interface LoopBack 0  换更新源
[r2-bgp]peer 172.16.1.5 as-number 64513
[r2-bgp]peer 172.16.1.5 connect-interface LoopBack 0
[r2-bgp]peer 172.16.1.5 ebgp-max-hop 2    更改跳数

[r3]bgp 64512
[r3-bgp]router-id 3.3.3.3
[r3-bgp]confederation id 2
[r3-bgp]peer 172.16.1.2 as-number 64512
[r3-bgp]peer 172.16.1.2 connect-interface LoopBack 0
[r3-bgp]peer 172.16.1.4 as-number 64512
[r3-bgp]peer 172.16.1.4 connect-interface LoopBack 0

[r4]bgp 64512                 宣告小as号
[r4-bgp]router-id 4.4.4.4
[r4-bgp]confederation id 2   宣告大as号
[r4-bgp]confederation peer-as 64513    邻居as号
[r4-bgp]peer 172.16.1.3 as-number 64512
[r4-bgp]peer 172.16.1.3 connect-interface LoopBack 0  换更新源
[r4-bgp]peer 172.16.1.7 as-number 64513
[r4-bgp]peer 172.16.1.7 connect-interface LoopBack 0
[r4-bgp]peer 172.16.1.7 ebgp-max-hop 2    更改跳数

[r5]bgp 64513
[r5-bgp]router-id 5.5.5.5
[r5-bgp]confederation id 2
[r5-bgp]confederation peer-as 64512
[r5-bgp]peer 172.16.1.2 as-number 64512
[r5-bgp]peer 172.16.1.2 connect-interface LoopBack 0
[r5-bgp]peer 172.16.1.2 ebgp-max-hop 2
[r5-bgp]peer 172.16.1.6 as-number 64513
[r5-bgp]peer 172.16.1.6 connect-interface LoopBack 0

[r6]bgp 64513
[r6-bgp]router-id 6.6.6.6
[r6-bgp]confederation id 2
[r6-bgp]peer 172.16.1.5 as-number 64513
[r6-bgp]peer 172.16.1.5 connect-interface LoopBack 0
[r6-bgp]peer 172.16.1.7 as-number 64513
[r6-bgp]peer 172.16.1.7 connect-interface LoopBack 0

[r7]bgp 4513 
[r7-bgp]router-id 7.7.7.7
[r7-bgp]confederation id 2
[r7-bgp]confederation peer-as 64512
[r7-bgp]peer 78.1.1.2 as-number 3
[r7-bgp]peer 172.16.1.6 as-number 64513
[r7-bgp]peer 172.16.1.6 connect-interface LoopBack 0
[r7-bgp]peer 172.16.1.4 as-number 64512
[r7-bgp]peer 172.16.1.4 connect-interface LoopBack 0
[r7-bgp]peer 172.16.1.4 ebgp-max-hop 2

[r8]bgp 3
[r8-bgp]router-id 8.8.8.8
[r8-bgp]peer 78.1.1.1 as-number 2

宣告路由：

[r1-bgp]network 1.1.1.1 24
[r2-bgp]peer 172.16.1.5 next-hop-local   更改下一跳为本地
[r2-bgp]peer 172.16.1.3 next-hop-local   更改下一跳为本地
[r7-bgp]peer 172.16.1.6 next-hop-local 
[r7-bgp]peer 172.16.1.4 next-hop-local 
[r3-bgp]peer 172.16.1.4 reflect-client   r3作为r4的路由反射器
[r6-bgp]peer 172.16.1.7 reflect-client   r6作为r7的路由反射器
[r3-bgp]peer 172.16.1.2 reflect-client
[r6-bgp]peer 172.16.1.5 reflect-client 

在ebgp上设置空接口使其他as的ebgp(r1 r7)产生一条路由  汇总路由
[r2]ip route-static 172.16.0.0 21 NULL 0
[r2-bgp]network 172.16.0.0 21
[r7]ip route-static 172.16.0.0 21 NULL 0
[r7-bgp]network 172.16.0.0 21

与next-hop-local 一样的作用  同样是更改下一跳   但在r2和r3  r6和r7之间会产生环   因为next-hop-local更改下一跳的命令只针对ebgp学的路由  也就是说r2只针对r1的路由进行更改  r7只针对r8的路由进行更改
[r2]route-policy nex permit node 10
[r2-toute-policy]apply ip-address next-hop peer-address
[r2-bgp]peer 172.16.1.3 route-policy nex export
[r2-bgp]peer 172.16.1.5 route-policy nex export