一、实验内容
二、实验拓扑
三、实验配置
先配置ipv4部分
1.r2/3/4为公网,首先配置公网ip
r2
[r2]int g 0/0/1
[r2-GigabitEthernet0/0/1]ip add 23.1.1.1 24
[r2-LoopBack0]ip add 192.168.2.1 24
[r2-LoopBack0]
r3
[r3]int g 0/0/0
[r3-GigabitEthernet0/0/0]ip add 23.1.1.2 24
[r3]int g 0/0/1
[r3-GigabitEthernet0/0/1]ip add 34.1.1.1 24
[r3]int lo0
[r3-LoopBack0]ip add 3.3.3.3 24
r4
[r4]int g 0/0/0
[r4-GigabitEthernet0/0/0]ip add 34.1.1.2 24
[r4]int lo0
[r4-LoopBack0]ip add 4.4.4.4 24
在r2和r4上写两条缺省指向r3
[r2]ip route-static 0.0.0.0 0 23.1.1.2
[r4]ip route-static 0.0.0.0 0 34.1.1.1
2.配置r1上的两个环回接口
[r1]int lo0
[r1-LoopBack0]ip add 192.168.1.1 25
[r1]int lo1
[r1-LoopBack1]ip add 192.168.1.129 25
r1g0/0/0接口ip
[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.0.1 30
r2g0/0/0接口ip
[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.0.2 30
3.使用rip宣告r1环回和g0/0/0接口 r2的环回和g0/0/0接口
[r1]rip 1
[r1-rip-1]version 2
[r1-rip-1]network 192.168.1.0
[r1-rip-1]network 192.168.0.0
r2
[r2]rip 1
[r2-rip-1]version 2
[r2-rip-1]network 192.168.2.0
[r2-rip-1]network 192.168.0.0
查看r2路由表,r2学到了r1上的环回
将r1上的环回汇总发给r2
[r1-rip-1]int g 0/0/0
[r1-GigabitEthernet0/0/0]rip summary-address 192.168.1.0 255.255.255.0
r2上写一条缺省发给r1
[r2]rip 1
[r2-rip-1]default-route originate
在r1上做一个空接口,防环
[r1]ip route-static 192.168.1.0 24 NULL 0
在r2上做一个nat地址转换,
[r2]acl 2000
[r2-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[r2-acl-basic-2000]int g 0/0/1
[r2-GigabitEthernet0/0/1]nat outbound 2000
r1访问r3环回
[r1]ping 3.3.3.3
PING 3.3.3.3: 56 data bytes, press CTRL_C to break
Reply from 3.3.3.3: bytes=56 Sequence=1 ttl=254 time=40 ms
Reply from 3.3.3.3: bytes=56 Sequence=2 ttl=254 time=20 ms
Reply from 3.3.3.3: bytes=56 Sequence=3 ttl=254 time=30 ms
Reply from 3.3.3.3: bytes=56 Sequence=4 ttl=254 time=30 ms
ipv4部分已经完成
4.配置ipv6部分
将r1两个环回和g0/0/0ip转为ipv6地址
[r1]ipv6
[r1]int lo0
[r1-LoopBack0]ipv6 enable
[r1-LoopBack0]ipv6 add 2002:1701:101::1 65
[r1]int lo1
[r1-LoopBack1]ipv6 enable
[r1-LoopBack1]ipv6 add 2002:1701:101:0:8000::1 65
[r1-LoopBack1]int g 0/0/0
[r1-GigabitEthernet0/0/0] ipv6 enable
[r1-GigabitEthernet0/0/0]ipv6 add 2002:1701:0101:1::1 64
r2的环回和g0/0/0接口IP转换为ipv6
[r2]ipv6
[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]ipv6 enable
[r2-GigabitEthernet0/0/0]ipv6 add 2002:1701:0101:1::2 64
[r2-GigabitEthernet0/0/0]int lo0
[r2-LoopBack0]ipv6 enable
[r2-LoopBack0]ipv6 add 2002:1701:0101:2::1 64
配置rip
在r1的两个环回接口和g0/0/0接口宣告
[r1]ripng 1
[r1-ripng-1]int lo0
[r1-LoopBack0]ripng 1 enable
[r1-LoopBack0]int lo1
[r1-LoopBack1]ripng 1 enable
[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]ripng 1 enable
r2的环回和g0/0/0接口宣告
[r2]ripng 1
[r2-ripng-1]int g 0/0/0
[r2-GigabitEthernet0/0/0]ripng 1 enable
[r2-GigabitEthernet0/0/0]int lo0
[r2-LoopBack0]ripng 1 enable
查看r2ipv6路由表,已经学到了r1的两个环回
将r1上的两个环回汇总
[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]ripng summary-address 2002:1701:0101:0000:: 64
在r2g0/0/0接口上写一条缺省
[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]ripng default-route only
5.配置tunnel
在r2上配置一个tunnel接口
[r2]int Tunnel 0/0/0
[r2-Tunnel0/0/0]ipv6 enable
[r2-Tunnel0/0/0]ipv6 address 2002:1701:0101:3::1 64
[r2-Tunnel0/0/0]tunnel-protocol ipv4-ipv6
[r2-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[r2-Tunnel0/0/0]source 23.1.1.1
[r2]ipv6 route-static 2002:: 16 Tunnel 0/0/0
在r1上的环回配置空接口,防环
[r1]ipv6 route-static 2002:1701:0101:0000:: 64 NULL 0
6.在r4环回和g0/0/1上配置ipv6
[r4]ipv6
[r4]int lo0
[r4-LoopBack0]ipv6 enable
[r4-LoopBack0]ipv6 address 2002:2201:0102::1 64
[r4-LoopBack0]int g0/0/1
[r4-GigabitEthernet0/0/1]ipv6 enable
[r4-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:1::1 64
r5的环回和g0/0/0和g0/0/1接口
[r5]int g 0/0/0
[r5-GigabitEthernet0/0/0]ipv6 enable
[r5-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:1::2 64
[r5]int lo0
[r5-LoopBack0]ipv6 enable
[r5-LoopBack0]ipv6 address 2002:2201:0102:8000::1 64
[r5-LoopBack0]int g 0/0/1
[r5-GigabitEthernet0/0/1]ipv6 enable
[r5-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8001::1 64
r6的环回,g0/0/0,g0/0/1接口
[r6]ipv6
[r6]int g0/0/0
[r6-GigabitEthernet0/0/0]ipv6 enable
[r6-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8001::2 64
[r6-GigabitEthernet0/0/0]int lo0
[r6-LoopBack0]ipv6 enable
[r6-LoopBack0]ipv6 address 2002:2201:0102:8002::1 64
[r6-LoopBack0]int g 0/0/1
[r6-GigabitEthernet0/0/1]ipv6 enable
[r6-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8003::1 64
r7的环回,g0/0/0,g0/0/1接口
[r7]ipv
[r7]ipv6
[r7]int g 0/0/0
[r7-GigabitEthernet0/0/0]ipv6 enable
[r7-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8003::2 64
[r7-GigabitEthernet0/0/0]int lo0
[r7-LoopBack0]ipv6 enable
[r7-LoopBack0]ipv6 add
[r7-LoopBack0]ipv6 address 2002:2201:0102:8004::1 64
[r7-LoopBack0]int g 0/0/1
[r7-GigabitEthernet0/0/1]ipv6 enable
[r7-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8005::1 64
r8的环回,g0/0/0,g0/0/1
[r8]ipv6
[r8]int g 0/0/0
[r8-GigabitEthernet0/0/0]ipv6 enable
[r8-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8005::2 64
[r8-GigabitEthernet0/0/0]int lo0
[r8-LoopBack0]ipv6 enable
[r8-LoopBack0]ipv6 address 2002:2201:0102:8006::1 64
7.使用ospfv3 宣告r5/6/78
r5
[r5]ospfv3 1
[r5-ospfv3-1]router-id 5.5.5.5
[r5-ospfv3-1]int lo0
[r5-LoopBack0]ospfv3 1 area 0
[r5-LoopBack0]int g 0/0/1
[r5-GigabitEthernet0/0/1]ospfv3 1 area 0
r6
[r6]ospfv3 1
[r6-ospfv3-1]router-id 6.6.6.6
[r6-ospfv3-1]int g 0/0/0
[r6-GigabitEthernet0/0/0]ospfv3 1 area 0
[r6-GigabitEthernet0/0/0]int lo0
[r6-LoopBack0]ospfv3 1 area 0
[r6-LoopBack0]int g 0/0/1
[r6-GigabitEthernet0/0/1]ospfv3 1 area 0
r7
[r7]ospfv3 1
[r7-ospfv3-1]router-id 7.7.7.7
[r7-ospfv3-1]int g 0/0/0
[r7-GigabitEthernet0/0/0]ospfv3 1 area 0
[r7-GigabitEthernet0/0/0]int lo0
[r7-LoopBack0]ospfv3 1 area 0
[r7-LoopBack0]int g 0/0/1
[r7-GigabitEthernet0/0/1]ospfv3 1 area 0
r8
[r8]ospfv3 1
[r8-ospfv3-1]router-id 8.8.8.8
[r8-ospfv3-1]int g0/0/0
[r8-GigabitEthernet0/0/0]ospfv3 1 area 0
[r8-GigabitEthernet0/0/0]int lo0
[r8-LoopBack0]ospfv3 1 area 0
查看r6邻居表,与5.5.5.5和7.7.7.7建邻成功
8.启用bgp
r4与r5为ebgp
[r4]bgp 1
[r4-bgp]router-id 4.4.4.4
[r4-bgp]peer 2002:2201:102:1::2 as-number 2
r5
[r5]bgp 64512
[r5-bgp]router-id 5.5.5.5
[r5-bgp]confederation id 2
[r5-bgp]peer 2002:2201:102:1::1 as-number 1
可以使用ipv6的家族模式,再建一次邻
[r4-bgp]ipv6-family
[r4-bgp-af-ipv6]peer 2002:2201:102:1::2 enable
[r5-bgp]ipv6-family
[r5-bgp-af-ipv6]peer 2002:2201:102:1::1 enable
为了简化建邻方式,可以使用多数组,在r5/6/7/8环回接口上配置,添加本地站点
[r5-LoopBack0]ipv6 address 5::5 64
[r6-LoopBack0]ipv6 address 6::6 64
[r7-LoopBack0]ipv6 address 7::7 64
[r8-LoopBack0]ipv6 address 8::8 64
r5,由于提前配置过r567的环回,所以需要附上新的更新源5::5
[r5-bgp]bgp 64512
[r5-bgp]peer 6::6 as-number 64512
[r5-bgp]peer 6::6 connect-interface LoopBack 0 5::5
[r5-bgp]ipv6-family
[r5-bgp-af-ipv6]peer 6::6 enable
r6
[r6]bgp 64512
[r6-bgp]router-id 6.6.6.6
[r6-bgp]confederation id 2
[r6-bgp]peer 5::5 as-number 64512
[r6-bgp]peer 5::5 connect-interface LoopBack 0 6::6
[r6-bgp]ipv6-family
[r6-bgp-af-ipv6]peer 5::5 enable
[r6-bgp]peer 7::7 as-number 64512
[r6-bgp]peer 7::7 connect-interface LoopBack 0 6::6
[r6-bgp]ipv6-family
[r6-bgp-af-ipv6]peer 7::7 enable
r7
[r7]bgp 64512
[r7-bgp]router-id 7.7.7.7
[r7-bgp]confederation id 2
[r7-bgp]confederation peer-as 64513
[r7-bgp]peer 6::6 as-number 64512
[r7-bgp]peer 6::6 connect-interface LoopBack 0 7::7
[r7-bgp]ipv6-family
[r7-bgp-af-ipv6]peer 6::6 enable
[r7-bgp]peer 8::8 as-number 64513
[r7-bgp]peer 8::8 connect-interface LoopBack 0 7::7
[r7-bgp]ipv6-family
[r7-bgp-af-ipv6]peer 8::8 enable
修改跳数
[r7-bgp]peer 8::8 ebgp-max-hop 2
r8
[r8]bgp 64513
[r8-bgp]router-id 8.8.8.8
[r8-bgp]confederation id 2
[r8-bgp]confederation peer-as 64512
[r8-bgp]peer 7::7 as-number 64512
[r8-bgp]peer 7::7 connect-interface LoopBack 0 8::8
[r8-bgp]ipv6
[r8-bgp]ipv6-family
[r8-bgp-af-ipv6]peer 7::7 enable
[r8-bgp]peer 7::7 ebgp-max-hop 2
查看 r5 ipv6bgp路由表
r6
r7
r8
全部建邻成功
在r4创建tunnel接口
[r4]int Tunnel 0/0/0
[r4-Tunnel0/0/0]ipv6 enable
[r4-Tunnel0/0/0]ipv6 address 2002:2201:0102:2::1 64
[r4-Tunnel0/0/0]tunnel-protocol ipv6-
[r4-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[r4-Tunnel0/0/0]source 34.1.1.2
写一条静态路由指向左边
[r4]ipv6 route-static 2002:: 16 Tunnel 0/0/0
将r5/6/7/8的路由汇总发给r4,在r5上写一条到汇总网段的空接口
[r5]ipv6 route-static 2002:2201:0102:8000:: 49 NULL 0
[r5]bgp 64512
[r5-bgp]ipv6-family
[r5-bgp-af-ipv6]network 2002:2201:0102:8000:: 49
查看r4bgp路由表,已经学到汇总路由
将r4上的2002:: 16宣告到r5/6/7/8
[r4]bgp 1
[r4-bgp]ipv6
[r4-bgp-af-ipv6]network 2002:: 16
查看r4bgp路由表,宣告成功,状态为优
查看r5,r5也为优
查看r6,r6不为优
需要在r5上修改下一跳
[r5]bgp 64512
[r5-bgp]ipv6
[r5-bgp-af-ipv6]peer 6::6 next-hop-local
再次查看,为优
由于下一跳为r5,r7也是不优,所以在r6上调路由反射器,让r7成为客户端,把路由反射给r7
[r6]bgp 64512
[r6-bgp]ipv6
[r6-bgp-af-ipv6]peer 7::7 reflect-client
查看r7,为优