【无标题】BGP综合实验

一、实验要求

1.AS1存在两个环回，一个地址为192.168.1.0/24该地址不能在任何协议中宣告
  AS3中存在两个环回，一个地址为192.168.2.0/24该地址不能在任何协议中宣告，最终要求这两个环回可以互相通讯
2.整个AS2的Ip地址为172.16.0.8/16，请合理划分
3.AS间的骨干链路IP地址随意定制
4.使用BGP协议让整个网络所有设备的环回可以互相访问
5.减少路由条自数量，避免环路出现 

 二、实验步骤 

1.AS2的Ip地址为172.16.0.0/16进行子网划分

172.16.0.0 /16分到24网段

172.16.0.0 24  ——用来bgp建立邻居
172.16.0.2  32
172.16.0.3  32
172.16.0.4  32
172.16.0.5  32
172.16.0.6  32
172.16.0.7  32 

  
172.16.1.0 24  ——分配给骨干链路

172.16.1.0 30
172.16.1.4 30
172.16.1.8 30
172.16.1.12 30
172.16.1.16 30
172.16.1.20 30

R2-R7路由器的环回地址

R2  172.16.2.0 /24
R3  172.16.3.0 /24
R4  172.16.4.0 /24
R5  172.16.5.0 /24
R6  172.16.6.0 /24
R7  172.16.7.0 /24

2.给路由器配置IP地址及环回

AS1——R1 
[r1]interface LoopBack 0
[r1-LoopBack0]ip address 192.168.1.1 24
[r1-LoopBack0]q
[r1]interface LoopBack 1
[r1-LoopBack1]ip address 10.0.0.1 24
[r1-LoopBack1]q
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ip address 12.0.0.1 2

AS2 
R2 
[r2]interface GigabitEthernet 0/0/0
[r2-GigabitEthernet0/0/0]ip address 12.0.0.2 24
[r2-GigabitEthernet0/0/0]q 
[r2]interface LoopBack 0
[r2-LoopBack0]ip address 172.16.0.0 32
[r2-LoopBack0]q   
[r2]interface LoopBack 1  
[r2-LoopBack1]ip address 172.16.2.1 24
[r2-LoopBack1]q
[r2]interface GigabitEthernet 0/0/1  
[r2-GigabitEthernet0/0/1]ip address 172.16.1.1 30

[r2]interface GigabitEthernet 0/0/2
[r2-GigabitEthernet0/0/2]ip address 172.16.1.9 30

R3

[r3]interface GigabitEthernet 0/0/0
[r3-GigabitEthernet0/0/0]ip address 172.16.1.2 30
[r3-GigabitEthernet0/0/0]q  
[r3]interface LoopBack 0 
[r3-LoopBack0]ip address 172.16.0.3 32
[r3-LoopBack0]q
[r3]interface LoopBack 1 
[r3-LoopBack1]ip address 172.16.3.1 24
[r3-LoopBack1]q
[r3]interface GigabitEthernet 0/0/1
[r3-GigabitEthernet0/0/1]ip address 172.16.1.5 30

R4
[r4]interface GigabitEthernet 0/0/0
[r4-GigabitEthernet0/0/0]ip address 172.16.1.6 30 
[r4-GigabitEthernet0/0/0]q
[r4]interface GigabitEthernet 0/0/1
[r4-GigabitEthernet0/0/1]ip address 172.16.1.22 30
[r4-GigabitEthernet0/0/1]q   
[r4]interface LoopBack 0    
[r4-LoopBack0]ip address 172.16.0.4 32
[r4-LoopBack0]q
[r4]interface LoopBack 1
[r4-LoopBack1]ip address 172.16.4.1 24
 R5
[r5]interface GigabitEthernet 0/0/0
[r5-GigabitEthernet0/0/0]ip address 172.16.1.10 30
[r5-GigabitEthernet0/0/0]q
[r5]interface GigabitEthernet 0/0/1
[r5-GigabitEthernet0/0/1]ip address 172.16.1.13 30
[r5-GigabitEthernet0/0/1]q
[r5]interface LoopBack 0
[r5-LoopBack0]ip address 172.16.0.5 32
[r5-LoopBack0]q
[r5]interface LoopBack 1
[r5-LoopBack1]ip address 172.16.5.1 24
[r5-LoopBack1]q

R6

[r6]interface GigabitEthernet 0/0/0 
[r6-GigabitEthernet0/0/0]ip address 172.16.1.14 30
[r6-GigabitEthernet0/0/0]q 
[r6]interface GigabitEthernet 0/0/1
[r6-GigabitEthernet0/0/1]ip address 172.16.1.17 30
[r6-GigabitEthernet0/0/1]q
[r6]interface LoopBack 0
[r6-LoopBack0]ip address 172.16.0.6 32
[r6-LoopBack0]q
[r6]interface LoopBack 1
[r6-LoopBack1]ip address 172.16.6.1 24

R7

[r7]interface GigabitEthernet 0/0/0  
[r7-GigabitEthernet0/0/0]ip address 172.16.1.18 30
[r7-GigabitEthernet0/0/0]q  
[r7]interface GigabitEthernet 0/0/1
[r7-GigabitEthernet0/0/1]ip address 172.16.1.21 30
[r7-GigabitEthernet0/0/1]q 
[r7]interface GigabitEthernet 0/0/2
[r7-GigabitEthernet0/0/2]ip address 78.0.0.1 24
[r7-GigabitEthernet0/0/2]q  
[r7]interface LoopBack 0 
[r7-LoopBack0]ip address 172.16.0.7 32
[r7-LoopBack0]q  
[r7]interface LoopBack 1  
[r7-LoopBack1]ip address 172.16.7.1 24

AS3 ——R8
[r8]interface GigabitEthernet 0/0/0 
[r8-GigabitEthernet0/0/0]ip address 78.0.0.2 24
[r8-GigabitEthernet0/0/0]q
[r8]interface LoopBack 0
[r8-LoopBack0]ip address 192.168.2.1 24
[r8-LoopBack0]q
[r8]interface LoopBack 1
[r8-LoopBack1]ip address 11.0.0.1 24
[r8-LoopBack1]q

3. 给AS之间建立BGP对等体

R1与R2间建立EBGP对等体采用直连建邻

R1

[r1]bgp 1
[r1-bgp]router-id 1.1.1.1  
[r1-bgp]peer 12.0.0.2 as-number 2

R2

[r2]bgp 64512  
[r2-bgp]confederation id 2
[r2-bgp]confederation peer-as 64513---要提前声明与64513建立EBGP邻居关系，否则无法建立
[r2-bgp]peer 12.0.0.1 as-number 1
[r2-bgp]peer 172.16.0.3 as-number 64512   
[r2-bgp]peer 172.16.0.3 connect-interface LoopBack 0   
[r2-bgp]peer 172.16.0.5 as-number 64513  
[r2-bgp]peer 172.16.0.5 connect-interface LoopBack 0  
[r2-bgp]peer 172.16.0.5 ebgp-max-hop 
[r2-bgp]q  

R2-R7都要跑通OSPF
[r2]ospf   ---采用ospf使其他路由器能够学习到未知的网段
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255......

R3

[r3]ospf
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r3-ospf-1-area-0.0.0.0]q
[r3-ospf-1]q
[r3]bgp 64512
[r3-bgp]confederation id 2
[r3-bgp]peer 172.16.0.0 as-number 64512  
[r3-bgp]peer 172.16.0.0 connect-interface LoopBack 0 
[r3-bgp]peer 172.16.0.4 as-number 64512  
[r3-bgp]peer 172.16.0.4 connect-interface LoopBack 0 

R4

[r4]ospf 
[r4-ospf-1]area 0
[r4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[r4-ospf-1]q 
[r4]bgp 64512 
[r4-bgp]confederation id 2
[r4-bgp]confederation peer-as 64513
[r4-bgp]peer 172.16.0.3 as-number 64512
[r4-bgp]peer 172.16.0.3 connect-interface LoopBack 0   
[r4-bgp]peer 172.16.0.7 as-number 64513
[r4-bgp]peer 172.16.0.7 connect-interface LoopBack 0
[r4-bgp]peer 172.16.0.7 ebgp-max-hop 

R5

[r5]ospf
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r5]bgp 64513 
[r5-bgp]confederation id 2  
[r5-bgp]confederation  peer-as 64512
[r5-bgp]peer 172.16.0.0 as-number 64512   
[r5-bgp]peer 172.16.0.0 connect-interface LoopBack 0  
[r5-bgp]peer 172.16.0.0 ebgp-max-hop

[r5-bgp]peer 172.16.0.6 as-number 64513
[r5-bgp]peer 172.16.0.6 connect-interface LoopBack 0

R6

[r6]ospf
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r6]bgp 64513  
[r6-bgp]confederation id 2
[r6-bgp]peer 172.16.0.5 as-number 64513 
[r6-bgp]peer 172.16.0.5 connect-interface LoopBack 0    
[r6-bgp]peer 172.16.0.7 as-number 64513

[r6-bgp]peer 172.16.0.7 connect-interface LoopBack 0

R7

[r7]ospf
[r7-ospf-1]area 0
[r7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[r7]bgp 64513
[r7-bgp]confederation id 2
[r7-bgp]confederation peer-as 64512
[r7-bgp]peer 172.16.0.4 as-number 64512
[r7-bgp]peer 172.16.0.4 connect-interface LoopBack 0
[r7-bgp]peer 172.16.0.4 ebgp-max-hop  
[r7-bgp]peer 172.16.0.6 as-number 64513  
[r7-bgp]peer 172.16.0.6 connect-interface LoopBack 0
[r7-bgp]peer 78.0.0.2 as-number 3

R8

[r8]bg        
[r8-bgp]peer 78.0.0.1 as-number 2

4.发布路由

R1

[r1]bgp 1   
[r1-bgp]network 192.168.1.0 24 
[r1-bgp]network 10.0.0.0 24

由于R1与R2之间为EBGP对等体则R2学习到的路由是可用且优的，而R3则只能学习到R1的路由，但不是可用且优的（下一跳不可达），要使AS中的路由器学到路由则则需要在R2传路由时修改为下一跳为本地。

R2

[r2]bgp 64512
[r2-bgp]peer 172.16.0.3 next-hop-local
[r2-bgp]peer 172.16.0.5 next-hop-local

R7也如此

R7

[r7]bgp 64513
[r7-bgp]peer 172.16.0.4 next-hop-local
[r7-bgp]peer 172.16.0.6 next-hop-local

又因为R3与R4之间为IBGP对等体关系学习不到R1传过来的路由，如若要使路由的到达R4则可以设置R3为反射器，也可以将R2与R4之间构建成直连的IBGP对等体关系，此时我选择的是将R3设置为反射器，设置R2为客户。 

R7

[r3]bgp 64512  
[r3-bgp]peer 172.16.0.0 reflect-client 

当反射器从自身的客户处学习到一条IBGP路由，则会反射给自身的客户和 非客户，此时R4就可以学到路由，R2与 R5之间为EBGP对等体，则R5可以学习到路由又因为R5与R6之间为IBGP对等体关系则R6也可以学习到路由，但R4也可以将学习到的路由传递给R7,R7与R4为EBGP对等体关系，与R6为IBGP对等关系，则R6此时就可以有两条路径学习到路由，但如果路由从R5传递给R6，R6与R7为IBGP对等体关系，则路由信息不会传递给R7,则需把R6也配置为反射器。

R6

[r6]bgp 64513
[r6-bgp]peer  172.16.0.5 reflect-client 

R8

[r8]bgp 3
[r8-bgp]network 192.168.2.0 24
[r8-bgp]network 11.0.0.0 24

此时，R1与R8之间的10与11网段可以相互通信 。

5.要使R1与R8之间的192网段互相通信，则需要建立隧道 

R1

[r1]interface Tunnel 0/0/0

[r1-Tunnel0/0/0]ip address 1.1.1.1 24

[r1-Tunnel0/0/0]tunnel-protocol gre     
[r1-Tunnel0/0/0]source 10.0.0.1

[r1-Tunnel0/0/0]destination 11.0.0.1

[r1]ip route-static 192.168.2.0 24 1.1.1.2

R8

[r8]interface Tunnel 0/0/0
[r8-Tunnel0/0/0]ip address 1.1.1.2 24  
[r8-Tunnel0/0/0]tunnel-protocol gre 
[r8-Tunnel0/0/0]source 11.0.0.1     
[r8-Tunnel0/0/0]destination 10.0.0.1
[r8]ip route-static 192.168.1.0 24 1.1.1.1