【HCIP-BGP&MPLS综合大实验】

1、实验要求

2、实验拓扑图

3、实验分析

1）IP规划

已知AS2网段为172.16.0.0/16
R2-7每个路由有两个环回，其中，用于建邻的环回为32位，所以将172.16.0.2/32-172.16.0.7/32分配；

用于连接用户的环回为24位，所以将172.16.2.0/24-172.16.7.0/24分配；

有172.16.1.0/24网段空余，将其分给骨干链路，分路在拓扑图中

2）IP配置完成后，需要配R1/2/5和R7/8之间的静态和R2/3/4/5/6/7的动态路由协议（OSPF）
3）建立EBGP和IBGP关系，其中R3/4/6不得运行BGP协议
4）部署MPLS协议
5）对应网段在BGP协议内的宣告
6）完成选路条件

4、路由配置

R1

[R1]int g 0/0/0 
[R1-GigabitEthernet0/0/0]ip address 12.1.1.1 24
[R1]int g 0/0/1
[R1-GigabitEthernet0/0/1]ip address 15.1.1.1 24
[R1]int l0
[R1-LoopBack0]ip address 1.1.1.1 24

[R1]ip route-static 172.16.0.2 32 12.1.1.2
[R1]ip route-static 172.16.0.5 32 15.1.1.5
[R1]bgp 1
[R1-bgp]peer 172.16.0.2 as-number 2
[R1-bgp]peer 172.16.0.2 connect-interface l0
[R1-bgp]peer 172.16.0.2 ebgp-max-hop 2
[R1-bgp]peer 172.16.0.5 as-number 2
[R1-bgp]peer 172.16.0.5 connect-interface l0
[R1-bgp]peer 172.16.0.5 ebgp-max-hop 2

[R1]int l1
[R1-LoopBack1]ip address 100.1.1.1 24
[R1]bgp 1
[R1-bgp]network 100.1.1.0 24

R2

[R2]int l0     
[R2-LoopBack0]ip address 172.16.0.2 32
[R2]int l1
[R2-LoopBack1]ip address 172.16.2.1 24
[R2]int g 0/0/0 
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24
[R2]int g 0/0/1
[R2-GigabitEthernet0/0/1]ip address 172.16.1.1 30
[R2]int g 0/0/2
[R2-GigabitEthernet0/0/2]ip address 172.16.1.9 30

[R2]ip route-static 1.1.1.1 24 12.1.1.1
[R2]bgp 2
[R2-bgp]peer 1.1.1.1 as-number 1
[R2-bgp]peer 1.1.1.1 connect-interface l0
[R2-bgp]peer 1.1.1.1 ebgp-max-hop 2

[R2]ospf 1
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R2-LoopBack1]ospf network-type broadcast

[R2-bgp]peer 172.16.0.5 as-number 2
[R2-bgp]peer 172.16.0.5 connect-interface l0
[R2-bgp]peer 172.16.0.5 next-hop-local
[R2-bgp]peer 172.16.0.7 as-number 2
[R2-bgp]peer 172.16.0.7 connect-interface l0
[R2-bgp]peer 172.16.0.7 next-hop-local

[R2]mpls lsr-id 172.16.0.2
[R2]mpls 
[R2-mpls]mpls ldp
[R2-GigabitEthernet0/0/1]mpls 
[R2-GigabitEthernet0/0/1]mpls ldp 
[R2-GigabitEthernet0/0/2]mpls 
[R2-GigabitEthernet0/0/2]mpls ldp

[R2]route recursive-lookup tunnel

[R2]ip route-static 172.16.0.0 16 NULL 0
[R2]bgp 2
[R2-bgp]network 172.16.0.0 16

[R2]bgp 2
[R2-bgp]network 172.16.2.0 24
[R2-bgp]network 172.16.3.0 24
[R2-bgp]network 172.16.4.0 24
[R2]ip ip-prefix med permit 172.16.2.0 24
[R2]route-policy med permit node 10
[R2-route-policy]if-match ip-prefix med
[R2-route-policy]apply cost 1
[R2]route-policy med permit node 20
[R2]bgp 2
[R2-bgp]peer 1.1.1.1 route-policy med export 

R3

[R3]int l0
[R3-LoopBack0]ip address 172.16.0.3 32   
[R3]int l1
[R3-LoopBack1]ip address 172.16.3.1 24
[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip address 172.16.1.2 30
[R3]int g 0/0/1
[R3-GigabitEthernet0/0/1]ip address 172.16.1.5 30
[R3]int g 0/0/2
[R3-GigabitEthernet0/0/2]ip address 172.16.1.13 30

[R3]ospf 1
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R3-LoopBack1]ospf network-type broadcast

[R3]mpls lsr-id 172.16.0.3
[R3]mpls 
[R3-mpls]mpls ldp
[R3-GigabitEthernet0/0/0]mpls 
[R3-GigabitEthernet0/0/0]mpls ldp 
[R3-GigabitEthernet0/0/1]mpls 
[R3-GigabitEthernet0/0/1]mpls ldp 
[R3-GigabitEthernet0/0/2]mpls 
[R3-GigabitEthernet0/0/2]mpls ldp 

[R3]ip route-static 0.0.0.0 0 172.16.0.2

R4

[R4]int l0
[R4-LoopBack0]ip address 172.16.0.4 32   
[R4]int l1
[R4-LoopBack1]ip address 172.16.4.1 24
[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip address 172.16.1.6 30
[R4]int g 0/0/1
[R4-GigabitEthernet0/0/1]ip address 172.16.1.17 30

[R4]ospf 1
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R4-LoopBack1]ospf network-type broadcast

[R4]mpls lsr-id 172.16.0.4
[R4]mpls
[R4-mpls]mpls ldp
[R4-GigabitEthernet0/0/0]mpls
[R4-GigabitEthernet0/0/0]mpls ldp 
[R4-GigabitEthernet0/0/1]mpls
[R4-GigabitEthernet0/0/1]mpls ldp

[R4]ip route-static 0.0.0.0 0 172.16.0.7

R5

[R5]int l0
[R5-LoopBack0]ip address 172.16.0.5 32   
[R5]int l1
[R5-LoopBack1]ip address 172.16.5.1 24
[R5]int g 0/0/0
[R5-GigabitEthernet0/0/0]ip address 172.16.1.10 30
[R5]int g 0/0/1
[R5-GigabitEthernet0/0/1]ip address 172.16.1.21 30
[R5]int g 0/0/2
[R5-GigabitEthernet0/0/2]ip address 15.1.1.5 24

[R5]ip route-static 1.1.1.1 24 15.1.1.1
[R5]bgp 2
[R5-bgp]peer 1.1.1.1 as-number 1
[R5-bgp]peer 1.1.1.1 connect-interface l0
[R5-bgp]peer 1.1.1.1 ebgp-max-hop 2

[R5]ospf 1
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R5-LoopBack1]ospf network-type broadcast

[R5-bgp]peer 172.16.0.2 as-number 2
[R5-bgp]peer 172.16.0.2 connect-interface l0
[R5-bgp]peer 172.16.0.2 next-hop-local
[R5-bgp]peer 172.16.0.7 as-number 2
[R5-bgp]peer 172.16.0.7 connect-interface l0
[R5-bgp]peer 172.16.0.7 next-hop-local

[R5]mpls lsr-id 172.16.0.5
[R5]mpls
[R5-mpls]mpls ldp
[R5-GigabitEthernet0/0/0]mpls
[R5-GigabitEthernet0/0/0]mpls ldp 
[R5-GigabitEthernet0/0/1]mpls
[R5-GigabitEthernet0/0/1]mpls ldp

[R5]route recursive-lookup tunnel

[R5]ip route-static 172.16.0.0 16 NULL 0
[R5]bgp 2
[R5-bgp]network 172.16.0.0 16

[R5]bgp 2
[R5-bgp]network 172.16.5.0 24
[R5-bgp]network 172.16.6.0 24
[R5-bgp]network 172.16.7.0 24

R6

[R6]int l0
[R6-LoopBack0]ip address 172.16.0.6 32   
[R6]int l1
[R6-LoopBack1]ip address 172.16.6.1 24
[R6]int g 0/0/0
[R6-GigabitEthernet0/0/0]ip address 172.16.1.22 30
[R6]int g 0/0/1
[R6-GigabitEthernet0/0/1]ip address 172.16.1.25 30
[R6]int g 0/0/2
[R6-GigabitEthernet0/0/2]ip address 172.16.1.14 30

[R6]ospf 1
[R6-ospf-1]area 0
[R6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R6-LoopBack1]ospf network-type broadcast

[R6]mpls lsr-id 172.16.0.6
[R6]mpls 
[R6-mpls]mpls ldp
[R6-GigabitEthernet0/0/0]mpls 
[R6-GigabitEthernet0/0/0]mpls ldp 
[R6-GigabitEthernet0/0/1]mpls 
[R6-GigabitEthernet0/0/1]mpls ldp 
[R6-GigabitEthernet0/0/2]mpls 
[R6-GigabitEthernet0/0/2]mpls ldp 

[R6]ip route-static 0.0.0.0 0 172.16.0.5

R7

[R7]int l0
[R7-LoopBack0]ip address 172.16.0.7 32   
[R7]int l1
[R7-LoopBack1]ip address 172.16.7.1 24
[R7]int g 0/0/0
[R7-GigabitEthernet0/0/0]ip address 172.16.1.26 30
[R7]int g 0/0/1
[R7-GigabitEthernet0/0/1]ip address 78.1.1.7 24
[R7]int g 0/0/2
[R7-GigabitEthernet0/0/2]ip address 172.16.1.18 30

[R7]ip route-static 8.8.8.8 24 78.1.1.8
[R7]bgp 2
[R7-bgp]peer 8.8.8.8 as-number 3
[R7-bgp]peer 8.8.8.8 connect-interface l0
[R7-bgp]peer 8.8.8.8 ebgp-max-hop 2

[R7]ospf 1
[R7-ospf-1]area 0
[R7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R7-LoopBack1]ospf network-type broadcast

[R7-bgp]peer 172.16.0.2 as-number 2 
[R7-bgp]peer 172.16.0.2 connect-interface l0
[R7-bgp]peer 172.16.0.2 next-hop-local
[R7-bgp]peer 172.16.0.5 as-number 2
[R7-bgp]peer 172.16.0.5 connect-interface l0
[R7-bgp]peer 172.16.0.5 next-hop-local

[R7]mpls lsr-id 172.16.0.7
[R7]mpls 
[R7-mpls]mpls ldp
[R7-GigabitEthernet0/0/0]mpls 
[R7-GigabitEthernet0/0/0]mpls ldp 
[R7-GigabitEthernet0/0/2]mpls 
[R7-GigabitEthernet0/0/2]mpls ldp 

[R7]route recursive-lookup tunnel

[R7]ip route-static 172.16.0.0 16 NULL 0
[R7]bgp 2
[R7-bgp]network 172.16.0.0 16

R8

[R8]int g 0/0/0
[R8-GigabitEthernet0/0/0]ip address 78.1.1.8 24
[R8]int l0
[R8-LoopBack0]ip address 8.8.8.8 24

[R8]ip route-static 172.16.0.7 32 78.1.1.7
[R8]bgp 3
[R8-bgp]peer 172.16.0.7 as-number 2
[R8-bgp]peer 172.16.0.7 connect-interface l0
[R8-bgp]peer 172.16.0.7 ebgp-max-hop 2

[R8]int l1
[R8-LoopBack1]ip address 88.1.1.1 24
[R8]bgp 3
[R8-bgp]network 88.1.1.0 24

5、结果检测

R1到AS2中R2/3/4用户网段基于R5访问
R1到AS2中R5/6/7用户网段基于R2访问

R1/8的环回均可访问内部AS2中所有用户网段环回

实验完成