一、配置ip
思路:把172.16.0.0划分成24的网段
172.16.1.1/24 172.16.2.1/24 172.16.3.1/24 172.16.4.1/24 172.16.5.1/24 172.16.6.1/24给AS2中的设备环回
172.16.0.0/24给骨干网路(MA)划分成为172.16.0.0/19
二、配置路由(OSPF)
在AS2中配置ospf可直接使用172.16.0.0 0.0.255.255来进行宣告但是不建议尽量使用精确宣告
R2:
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 172.16.0.0 0.0.0.255
network 172.16.1.0 0.0.0.255
R3:
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 172.16.0.0 0.0.0.255
network 172.16.2.0 0.0.0.255
R4:
ospf 1 router-id 4.4.4.4
area 0.0.0.0
network 172.16.0.0 0.0.0.255
network 172.16.3.0 0.0.0.255
R5:
ospf 1 router-id 5.5.5.5
area 0.0.0.0
network 172.16.0.0 0.0.0.255
network 172.16.4.0 0.0.0.255
R6:
ospf 1 router-id 6.6.6.6
area 0.0.0.0
network 172.16.0.0 0.0.0.255
network 172.16.5.0 0.0.0.255
R7:
ospf 1 router-id 7.7.7.7
area 0.0.0.0
network 172.16.0.0 0.0.0.255
network 172.16.6.0 0.0.0.255
配置完成后检查下路由是否可达
三、建立联邦的IBGP和EBGP对等体关系
R1:
bgp 1
router-id 1.1.1.1
peer 12.0.0.2 as-number 2
R2:
bgp 65412
router-id 2.2.2.2
confederation id 2
confederation peer-as 65413
peer 12.0.0.1 as-number 1
peer 172.16.2.1 as-number 65412
peer 172.16.2.1 connect-interface LoopBack0
peer 172.16.4.1 as-number 65413
peer 172.16.4.1 ebgp-max-hop 255
peer 172.16.4.1 connect-interface LoopBack0
R3:
bgp 65412
router-id 3.3.3.3
confederation id 2
peer 172.16.1.1 as-number 65412
peer 172.16.1.1 connect-interface LoopBack0
peer 172.16.3.1 as-number 65412
peer 172.16.3.1 connect-interface LoopBack0
R4:
bgp 65412
confederation id 2
confederation peer-as 65413
peer 172.16.2.1 as-number 65412
peer 172.16.2.1 connect-interface LoopBack0
peer 172.16.6.1 as-number 65413
peer 172.16.6.1 ebgp-max-hop 255
peer 172.16.6.1 connect-interface LoopBack0
R5:
bgp 65413
router-id 5.5.5.5
confederation id 2
confederation peer-as 65412
peer 172.16.1.1 as-number 65412
peer 172.16.1.1 ebgp-max-hop 255
peer 172.16.1.1 connect-interface LoopBack0
peer 172.16.5.1 as-number 65413
peer 172.16.5.1 connect-interface LoopBack0
R6:
bgp 65413
router-id 6.6.6.6
peer 172.16.4.1 as-number 65413
peer 172.16.4.1 connect-interface LoopBack0
peer 172.16.6.1 as-number 65413
peer 172.16.6.1 connect-interface LoopBack0
R7:
bgp 65413
router-id 7.7.7.7
confederation id 2
confederation peer-as 65412
peer 23.0.0.2 as-number 3
peer 172.16.3.1 as-number 65412
peer 172.16.3.1 ebgp-max-hop 255
peer 172.16.3.1 connect-interface LoopBack0
peer 172.16.5.1 as-number 65413
peer 172.16.5.1 connect-interface LoopBack0
network 172.16.0.0 255.255.248.0
查看建邻关系,是否建邻完成
四、发布路由以及防环汇总以及搭建和路由反射器
R1:
network 10.0.0.0 255.255.255.0
R8:
network 11.0.0.0 255.255.255.0
因为IBGP的水平分割,当一个BGP设备从自己的IBGP对等体处学习到一条路由信息,之后将不会发送给其他的IBGP对等体。
所以需要使用next-hop-local 来修改
R2: peer 172.16.2.1 next-hop-local
R4: peer 172.16.2.1 next-hop-local
peer 172.16.6.1 next-hop-local
R5: peer 172.16.1.1 next-hop-local
peer 172.16.5.1 next-hop-local
R7: peer 172.16.3.1 next-hop-local
peer 172.16.5.1 next-hop-local
路由反射器:需要在R3和R6上
R3:peer 172.16.1.1 reflect-client
R6:peer 172.16.4.1 reflect-client
防环:
R2:ip route-static 172.16.0.0 255.255.248.0 NULL0
R7:ip route-static 172.16.0.0 255.255.248.0 NULL0
五、搭建虚拟隧道(gre环境)
R1:
interface Tunnel0/0/0
ip address 34.0.0.1 255.255.255.0
tunnel-protocol gre
source 10.0.0.1
destination 11.0.0.1
R8:
interface Tunnel0/0/0
ip address 34.0.0.2 255.255.255.0
tunnel-protocol gre
source 11.0.0.1
destination 10.0.0.1
写一条静态路由
R1:
ip route-static 192.168.2.0 255.255.255.0 34.0.0.2
R8:
ip route-static 192.168.1.0 255.255.255.0 34.0.0.1