目录
要求:
分析:
1、这个拓扑图中想实现的功能就是AS2两边各有一个AS,AS2内部的的用户网段可以访问两边的域外路由;AS2中采用了联邦打破了BGP的水平分割,可以让每台路由器搬运路由,最终实现用户互访,在一个簇中,至少存在一个客户端,一个RR(路由反射器)
2、联邦:
将一个真实的大AS,逻辑的分为多个小AS;小AS的编号建议为私有编号;小AS间构建联邦内的EBGP邻居关系,可以向真实EBGP关系一样传递路由条目,但不修改属性; 对于该大AS外的其他AS,是不知道内部的小AS情况;
3、路由反射器:
3者构建一个簇;可以理解为RR为中心站点,客户端或非客户端是分支站点 ;RR从一台非客户端邻居处学习到的路由条目,可以传输给本地的客户端,其他EBGP邻居;不得传输给本地的其他非客户端;
IP划分:
(L0用于BGP建邻居,L1用于表示用户网段)
[R1]in l1
[R1-LoopBack1]ip add 1.1.1.1 32
[R1-LoopBack1]in g0/0/0
[R1-GigabitEthernet0/0/0]ip add 12.1.1.1 30
[R2]in l0
[R2-LoopBack0]ip add 172.16.0.5 30
[R2]in l1
[R2-LoopBack1]ip add 172.16.1.1 27
[R2-LoopBack1]in g0/0/0
[R2-GigabitEthernet0/0/0]ip add 12.1.1.2 30
[R2-GigabitEthernet0/0/0]in g0/0/1
[R2-GigabitEthernet0/0/1]ip add 172.16.0.17 30
[R2-LoopBack0]in g0/0/2
[R2-GigabitEthernet0/0/2]ip add 172.16.0.25 30
[R3]in l0
[R3-LoopBack0]ip add 172.16.0.9 30
[R3-LoopBack0]in l1
[R3-LoopBack1]ip add 172.16.1.33 27
[R3-LoopBack1]in g0/0/0
[R3-GigabitEthernet0/0/0]ip add 172.16.0.18 30
[R3-GigabitEthernet0/0/0]in g0/0/1
[R3-GigabitEthernet0/0/1]ip add 172.16.0.21 30
[R4]in l0
[R4-LoopBack0]ip add 172.16.0.13 30
[R4-LoopBack0]in l1
[R4-LoopBack1]ip add 172.16.1.65 27
[R4-LoopBack1]in g0/0/0
[R4-GigabitEthernet0/0/0]ip add 172.16.0.22 30
[R4-GigabitEthernet0/0/0]in g0/0/1
[R4-GigabitEthernet0/0/1]ip add 172.16.0.29 30
[R5]in l0
[R5-LoopBack0]ip add 172.16.0.41 30
[R5-LoopBack0]in l1
[R5-LoopBack1]ip add 172.16.1.97 27
[R5-LoopBack1]in g0/0/0
[R5-GigabitEthernet0/0/0]ip add 172.16.0.26 30
[R5-GigabitEthernet0/0/0]in g0/0/1
[R5-GigabitEthernet0/0/1]ip add 172.16.0.33 30
[R6]in l0
[R6-LoopBack0]ip add 172.16.0.45 30
[R6-LoopBack0]in l1
[R6-LoopBack1]ip add 172.16.1.129 27
[R6-LoopBack1]in g0/0/0
[R6-GigabitEthernet0/0/0]ip add 172.16.0.34 30
[R6-GigabitEthernet0/0/0]in g0/0/1
[R6-GigabitEthernet0/0/1]ip add 172.16.0.37 30
[R7]in l0
[R7-LoopBack0]ip add 172.16.0.49 30
[R7-LoopBack0]in l1
[R7-LoopBack1]ip add 172.16.1.161 27
[R7-LoopBack1]in g0/0/0
[R7-GigabitEthernet0/0/0]ip add 172.16.0.38 30
[R7-GigabitEthernet0/0/0]in g0/0/1
[R7-GigabitEthernet0/0/1]ip add 172.16.0.30 30
[R7-GigabitEthernet0/0/1]in g0/0/2
[R7-GigabitEthernet0/0/2]ip add 78.1.1.1 30
[R8]in l1
[R8-LoopBack1]ip add 8.8.8.8 32
[R8-LoopBack1]in g0/0/0
[R8-GigabitEthernet0/0/0]ip add 78.1.1.2 30
AS2中进行OSPF配置:
[R2]ospf 100 router-id 2.2.2.2
[R2-ospf-100]area 0
[R2-ospf-100-area-0.0.0.0]network 172.16.0.0 0.0.0.255
[R3]ospf 100 router-id 3.3.3.3
[R3-ospf-100]a 0
[R3-ospf-100-area-0.0.0.0]network 172.16.0.0 0.0.0.255
[R4]ospf 100 router-id 4.4.4.4
[R4-ospf-100]area 0
[R4-ospf-100-area-0.0.0.0]network 172.16.0.0 0.0.0.255
[R5]ospf 100 ro 5.5.5.5
[R5-ospf-100]a 0
[R5-ospf-100-area-0.0.0.0]net 172.16.0.0 0.0.0.255
[R6]ospf 100 ro 6.6.6.6
[R6-ospf-100]a 0
[R6-ospf-100-area-0.0.0.0]net 172.16.0.0 0.0.0.255
[R7]ospf 100 ro 7.7.7.7
[R7-ospf-100]a 0
[R7-ospf-100-area-0.0.0.0]net 172.16.0.0 0.0.0.255
BGP的配置:
[R1]bgp 1
[R1-bgp]router-id 1.1.1.1
[R1-bgp]peer 12.1.1.2 as-number 2
[R2]bgp 64512 #联邦号
[R2-bgp]router-id 2.2.2.2
[R2-bgp]confederation id 2 #真正的AS号
[R2-bgp]confederation peer-as 64513 #同一AS中的联邦邻居
[R2-bgp]peer 12.1.1.1 as-number 1
[R2-bgp]peer 172.16.0.9 as 64512
[R2-bgp]peer 172.16.0.9 connect-interface l 0
[R2-bgp]peer 172.16.0.9 next-hop-local #修改下一跳为本地
[R2-bgp]peer 172.16.0.41 as 64513
[R2-bgp]peer 172.16.0.41 connect-interface l 0
[R2-bgp]peer 172.16.0.41 ebgp-max-hop 2
[R3]bgp 64512
[R3-bgp]router-id 3.3.3.3
[R3-bgp]confederation id 2
[R3-bgp]peer 172.16.0.5 as 64512
[R3-bgp]peer 172.16.0.5 connect-interface l 0
[R3-bgp]peer 172.16.0.5 reflect-client #选择客户进行镜像反射
[R3-bgp]peer 172.16.0.13 as 64512
[R3-bgp]peer 172.16.0.13 connect-interface l 0
[R4]bgp 64512
[R4-bgp]router-id 4.4.4.4
[R4-bgp]confederation id 2
[R4-bgp]confederation peer-as 64513
[R4-bgp]peer 172.16.0.9 as 64512
[R4-bgp]peer 172.16.0.9 co l 0
[R4-bgp]peer 172.16.0.49 as 64513
[R4-bgp]peer 172.16.0.49 co l 0
[R5]bgp 64513
[R5-bgp]router-id 5.5.5.5
[R5-bgp]confederation id 2
[R5-bgp]confederation peer-as 64512
[R5-bgp]peer 172.16.0.5 as 64512
[R5-bgp]peer 172.16.0.5 connect-interface l 0
[R5-bgp]peer 172.16.0.45 as 64513
[R5-bgp]peer 172.16.0.45 connect-interface l 0
[R6]bgp 64513
[R6-bgp]router 6.6.6.6
[R6-bgp]con id 2
[R6-bgp]peer 172.16.0.41 as 64513
[R6-bgp]peer 172.16.0.41 con l 0
[R6-bgp]peer 172.16.0.49 as 64513
[R6-bgp]peer 172.16.0.49 con l 0
[R6-bgp]peer 172.16.0.49 reflect-client #选择客户进行镜像反射
[R7]bgp 64513
[R7-bgp]router 7.7.7.7
[R7-bgp]con id 2
[R7-bgp]confederation peer-as 64512
[R7-bgp]peer 172.16.0.13 as 64512
[R7-bgp]peer 172.16.0.13 co l 0
[R7-bgp]peer 172.16.0.45 as 64513
[R7-bgp]peer 172.16.0.45 co l 0
[R7-bgp]peer 172.16.0.45 next-hop-local #修改下一跳为本地
[R7-bgp]peer 78.1.1.2 as 3
[R8]bgp 3
[R8-bgp]router 8.8.8.8
[R8-bgp]peer 78.1.1.1 as 2
BGP宣告:
[R1]bgp 1
[R1-bgp]network 1.1.1.1 32
[R2]bgp 64512
[R3-bgp]network 172.16.1.0 27
[R3]bgp 64512
[R3-bgp]network 172.16.1.32 27
[R4]bgp 64512
[R4-bgp]network 172.16.1.64 27
[R5]bgp 64513
[R5-bgp]network 172.16.1.96 2
[R6]bgp 64513
[R6-bgp]network 172.16.1.128 2
[R7]bgp 64513
[R7-bgp]network 172.16.1.160 27
[R8]bgp 3
[R8-bgp]network 8.8.8.8 32
结果检测: