IP配置:
R1
r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]ip ad 12.0.0.1 24
[r1-GigabitEthernet0/0/0]int l0
[r1-LoopBack0]ip ad 192.168.1.1 24
[r1-LoopBack0]int l1
[r1-LoopBack1]ip ad 10.0.0.1 24
R2
Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 12.0.0.2 24
[Huawei-LoopBack0]ip ad 172.16.2.1 24
[Huawei-LoopBack0]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip ad 172.16.1.1 29
[Huawei-GigabitEthernet0/0/1]in g 0/0/2
[Huawei-GigabitEthernet0/0/2]ip ad 172.16.1.9 29
R3
[r3]int g 0/0/0
[r3-GigabitEthernet0/0/0]ip ad 172.16.1.2 29
[r3-LoopBack0]ip ad 172.16.3.1 24
[r3-LoopBack0]int g 0/0/1
[r3-GigabitEthernet0/0/1]ip ad 172.16.1.17 29
R4
[r4]int g 0/0/0
[r4-GigabitEthernet0/0/0]ip ad 172.16.1.28 29
[r4-LoopBack0]ip ad 172.16.4.1 24
[r4-LoopBack0]int g 0/0/1
[r4-GigabitEthernet0/0/1]ip ad 172.16.1.25 29
Error: The specified address conflicts with another address.
[r4-GigabitEthernet0/0/1]int g 0/0/0
[r4-GigabitEthernet0/0/0]undo ip ad 172.16.1.28 29
[r4-GigabitEthernet0/0/0]ip ad 172.16.1.18 29
[r4-GigabitEthernet0/0/0]int g 0/0/1
[r4-GigabitEthernet0/0/1]ip ad 172.16.1.25 29
R5
[r5]int g 0/0/0
[r5-GigabitEthernet0/0/0]ip ad 172.16.1.10 29
[r5-GigabitEthernet0/0/0]
[r5-GigabitEthernet0/0/0]int g 0/0/1
[r5-GigabitEthernet0/0/1]ip ad 172.16.1.33 29
[r5-LoopBack0]ip ad 172.16.5.1 24
R6
[r6]int g 0/0/0
[r6-GigabitEthernet0/0/0]ip ad 172.16.1.34 29
[r6-GigabitEthernet0/0/0]int l0
[r6-LoopBack0]ip ad 172.16.6.1 24
[r6-LoopBack0]int g 0/0/1
[r6-GigabitEthernet0/0/1]ip ad 172.16.1.41 29
R7
[r7]int g 0/0/0
[r7-GigabitEthernet0/0/0]ip ad 172.16.1.42 29
[r7-LoopBack0]ip ad 172.16.7.1 24
[r7-LoopBack0]int g 0/0/1
[r7-GigabitEthernet0/0/1]ip ad 172.16.1.26 29
[r7-GigabitEthernet0/0/2]ip ad 78.0.0.1 24
R8
[r8]int g 0/0/0
[r8-GigabitEthernet0/0/0]ip ad 78.0.0.2 24
[r8-GigabitEthernet0/0/0]int l0
[r8-LoopBack0]ip ad 192.168.2.1 24
[r8-LoopBack0]int l1
[r8-LoopBack1]ip ad 11.0.0.1 24
下一步启动ospf然后再运行BGP:
r2--r7都要启动:
[Huawei]ospf 1 router-id 2.2.2.2
[Huawei-ospf-1]a 0
[Huawei-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[Huawei-ospf-1-area-0.0.0.0]display ip routing-table protocol ospf --查看ospf路由
接下来启动BGP(所有设备包括r1和r8)
R1
[r1]bgp 1
[r1-bgp]router-id 1.1.1.1
[r1-bgp]peer 12.0.0.2 as-number 2
R2
[Huawei]bgp 64512---定义小的区域
[Huawei-bgp]router-id 2.2.2.2--宣告自己的id
[Huawei-bgp]confederation id 2---自己所在大的区域
[Huawei-bgp]confederation peer-as 64513---声明另外一个联邦
[Huawei-bgp]peer 12.0.0.1 as-number 1---和r1之间建立的ebgp关系
与r3之间建立ibgp:
[Huawei-bgp]peer 172.16.3.1 as 64512--和r3之间建立ibgp关系
[Huawei-bgp]peer 172.16.3.1 connect-interface LoopBack 0---因为内部使用的环回建立,所以要声明自己的环回接口,方便r3找到
与r5之间建立ibgp:
[Huawei-bgp]peer 172.16.5.1 as 64513
[Huawei-bgp]peer 172.16.5.1 connect-interface LoopBack 0
因为r2和r5之间是联邦之间建立的,类似于ebgp关系,要把他们之间的ttl值修改为2:
[Huawei-bgp]peer 172.16.5.1 ebgp-max-hop 2
R3
[r3]bgp 64513
[r3]bgp 64512
Error: BGP is already running. The AS is 64513.
[r3]undo bgp 64513
[r3-bgp]router-id 3.3.3.3
[r3-bgp]confederation id 2
[r3-bgp]peer 172.16.2.1 as 64512
[r3-bgp]pe
[r3-bgp]peer 172.16.2.1 con
[r3-bgp]peer 172.16.2.1 connect-interface l
[r3-bgp]peer 172.16.2.1 connect-interface LoopBack 0
[r3-bgp]peer 172.16.4.1 as 64512
[r3-bgp]peer 172.16.4.1 connect-interface LoopBack 0
R4
[r4]bgp 64512
[r4-bgp]router-id 4.4.4.4
[r4-bgp]confederation id 2
[r4-bgp]confederation peer-as 64513
[r4-bgp]pe
[r4-bgp]peer 172.16.3.1 as 64512
[r4-bgp]peer 172.16.3.1 connect-interface l
[r4-bgp]peer 172.16.3.1 connect-interface LoopBack 0Public,
StateChangeReason=Up)
[r4-bgp]pe
[r4-bgp]peer 172.16.171.1 as
[r4-bgp]peer 172.16.171.1 as-number 64513
[r4-bgp]peer 172.16.7.1 as-number 64513
[r4-bgp]peer 172.16.7.1 connect-interface LoopBack 0
[r4-bgp]peer 172.16.7.1 ebgp-max-hop 2
R5 R6 R7 R8......
---display bgp peer 查看
要求整个BGP协议让整个网络所有设备的环回都可以互相访问
互相访问,就把所有的路由信息发布出来。
此时r1发布之后,只有r2可以用,r3和后面的路由器都不可用(后面路由器里面没有到达12.0.0.1的路由,所以不可达,就不可用),此时就需要把下一条改为通告者本身,大家直接找通告这就ok。
[r8-bgp]network 11.0.0.0 24
[r7-bgp]peer 172.16.6.1 next-hop-invariable
[r7-bgp]peer 172.16.4.1 next-hop-local
[Huawei-bgp]peer 172.16.3.1 next-hop-local---给r3发布,声明自己为下一条,直接找我就可以
[Huawei-bgp]peer 172.16.5.1 next-hop-local
此时再r3查看,此时可以看到r1环回可达。
此时r4仍然收不到,因为他们是ibgp关系,因为水平分割的原因,其他ibgp接受不到。因此把r3和r6作为路由反射器。
[r3-bgp]peer 172.16.2.1 reflect-client -----把r2作为反射客户,因为反射器会把信息发送给反射客户和非反射客户,所以r4也可以收到。只有非非不传
[r6-bgp]peer 172.16.7.1 reflect-client
用r1的环回去ping r8环回:
减少路由条目
[Huawei]ip route-static 172.16.0.0 21 NULL 0---在r2和r7上都做一条空接口,并且发布出去。
[Huawei]bgp 64512
[Huawei-bgp]ne
[Huawei-bgp]network 172.16.0.0 21
[r7]ip route-static 172.16.0.0 21 NULL 0
[r7]bgp 64513
[r7-bgp]network 172.16.0.0 21
存在ebgp的邻居关系的所有设备都建议宣告内部as路由。
创建vpn-
因为r1和r8之间的物理接口不通,所以用环回建立
[r1]int t 0/0/0
[r1-Tunnel0/0/0]tunnel-protocol gre
[r1-Tunnel0/0/0]source 10.0.0.1
[r1-Tunnel0/0/0]destination 11.0.0.2
[r8]int t 0/0/0
[r8-Tunnel0/0/0]tunnel-protocol gre
[r8-Tunnel0/0/0]source 11.0.0.1
[r8-Tunnel0/0/0]destination 10.0.0.1