BGP策略

思路：

1、配置各接口ip、环回地址---测试;

      建立IBGP--ospf

[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip add 12.0.0.2 24
[R1-GigabitEthernet0/0/0]int g 0/0/1
[R1-GigabitEthernet0/0/1]ip add 13.0.0.2 24
[R1-GigabitEthernet0/0/1]int g 0/0/2
[R1-GigabitEthernet0/0/2]ip add 15.0.0.1 24

[R1]int l 0
[R1-LoopBack0]ip add 1.1.1.1 32
[R1-LoopBack0]int l 1
[R1-LoopBack1]ip add 192.168.100.1 24
 

[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip add 24.0.0.2 24
[R2-GigabitEthernet0/0/0]int g 0/0/1
[R2-GigabitEthernet0/0/1]ip add 12.0.0.1 24

[R2]int l 0
[R2-LoopBack0]ip add 2.2.2.2 32
[R2-LoopBack0]int l 1
[R2-LoopBack1]ip add 192.168.20.1 24
 
[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip add 34.0.0.2 24
[R3-GigabitEthernet0/0/0]int g 0/0/1
[R3-GigabitEthernet0/0/1]ip add 13.0.0.1 24
[R3]int l 0
[R3-LoopBack0]ip add 3.3.3.3 32
[R3-LoopBack0]int l 1
[R3-LoopBack1]ip add 192.168.30.1 24 
 

[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip add 24.0.0.1 24
[R4-GigabitEthernet0/0/0]int g 0/0/1
[R4-GigabitEthernet0/0/1]ip add 34.0.0.1 24

[R4]int l 0
[R4-LoopBack0]ip add 192.168.1.1 24
[R4-LoopBack0]int l 1
[R4-LoopBack1]ip add 192.168.2.1 24
[R4-LoopBack1]int l 2
[R4-LoopBack2]ip add 192.168.3.1 24
 
[R5]int l 0
[R5-LoopBack0]ip add 192.168.10.1 24
[R5-LoopBack0]int l 1
[R5-LoopBack1]ip add 192.168.11.1 24
[R5-LoopBack1]int l 2
[R5-LoopBack2]ip add 192.168.12.1 24
[R5-LoopBack2]int g 0/0/0
[R5-GigabitEthernet0/0/0]ip add 15.0.0.2 24

[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]a 0
[R1-ospf-1-area-0.0.0.0]net 1.1.1.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]net 12.0.0.2 0.0.0.0
[R1-ospf-1-area-0.0.0.0]net 13.0.0.2 0.0.0.0
[R1-ospf-1-area-0.0.0.0]net 192.168.100.1 0.0.0.0
 
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]a 0
[R2-ospf-1-area-0.0.0.0]net 2.2.2.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]net 192.168.20.1 0.0.0.0
[R2-ospf-1-area-0.0.0.0]net 12.0.0.1 0.0.0.0
 
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]a 0
[R3-ospf-1-area-0.0.0.0]net 3.3.3.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]net 192.168.30.1 0.0.0.0
[R3-ospf-1-area-0.0.0.0]net 13.0.0.1 0.0.0.0
 

[R1]int l 1    
[R1-LoopBack1]ospf network-type broadcast 
 
[R2]int l 1
[R2-LoopBack1]ospf network-type broadcast 
 
[R3]int l 1
[R3-LoopBack1]ospf network-type broadcast
 

3、BGP配置

[R4]bgp 400
[R4-bgp]router-id 4.4.4.4
[R4-bgp]peer 24.0.0.2 as 123
[R4-bgp]peer 34.0.0.2 as 123
 
[R2]bgp 123
[R2-bgp]router-id 2.2.2.2
[R2-bgp]peer 24.0.0.1 as 400
[R2-bgp]peer 1.1.1.1 as 123
[R2-bgp]peer 1.1.1.1 con l0
[R2-bgp]peer 1.1.1.1 next-hop-local
 
[R3]bgp 123
[R3-bgp]router-id 3.3.3.3
[R3-bgp]peer 34.0.0.1 as 400
[R3-bgp]peer 1.1.1.1 as 123
[R3-bgp]peer 1.1.1.1 con l0
[R3-bgp]peer 1.1.1.1 next-hop-local
 
[R1]bgp 123
[R1-bgp]router-id 1.1.1.1
[R1-bgp]peer 2.2.2.2 as 123
[R1-bgp]peer 2.2.2.2 con l0
[R1-bgp]peer 2.2.2.2 next-hop-local
[R1-bgp]peer 3.3.3.3 as 123
[R1-bgp]peer 3.3.3.3 con l0
[R1-bgp]peer 3.3.3.3 next-hop-local
[R1-bgp]peer 15.0.0.2 as 500
 
[R5]bgp 500
[R5-bgp]router-id 5.5.5.5
[R5-bgp]peer 15.0.0.1 as 123
 

4、Preval 策略

[r4]ip ip-prefix aa permit 192.168.10.0 24---抓流量

[r4]route-policy aa permit node 10-----作策略
[r4-route-policy]if-match ip-prefix aa
[r4-route-policy]apply preferred-value 1000
[r4]route-policy aa permit node 20

[r4-bgp]peer 24.0.0.2 route-policy aa import---调用

5、  AS策略

[r4]ip ip-prefix bb permit 192.168.11.0 24

[r4]route-policy aa permit node 15

[r4-route-policy]if-match ip-prefix bb

[r4-route-policy]apply as-path 123 123 500 500 overwrite

 6、MED 策略

[r2]ip ip-prefix aa permit 192.168.12.0 24
[r2]route-policy aa permit node 15
[r2-route-policy]if-match ip-prefix aa
[r2-route-policy]apply cost 500
[r2]route-policy aa permit node 20

[r2]bgp 123
[r2-bgp]peer 24.0.0.4 route-policy aa export
 

[r3]ip ip-prefix aa permit 192.168.12.0 24
[r3]route-policy aa permit node 10
[r3-route-policy]if-match ip-prefix aa
[r3-route-policy]apply cost 100
[r3]route-policy aa permit node 20

[r3]bgp 123
[r3-bgp]peer 34.0.0.4 route-policy aa export

 7、Local Preference 策略

[r1]ip ip-prefix aa permit 192.168.1.0 24
[r1]route-policy aa permit node 10
[r1-route-policy]if-match ip-prefix aa
[r1-route-policy]apply local-preference 200

[r1]route-policy aa permit node 20

[r1]bgp 123
[r1-bgp]peer 2.2.2.2 route-policy aa import

[r1]ip ip-prefix bb permit 192.168.2.0 24
[r1]route-policy bb permit node 10
[r1-route-policy]if-match ip-prefix bb
[r1-route-policy]apply local-preference 200
[r1]route-policy bb permit node 20

[r1]bgp 123
[r1-bgp]peer 3.3.3.3 route-policy bb import

8、负载均衡

[r1]bgp 123

[r1-bgp]maximum load-balancing  ibgp 2 

9、AS 策略： AS500不接受任何始发于AS123的路由

[r5]ip as-path-filter 1 deny ^123$

[r5]ip as-path-filter 1 permit .*

[r5]bgp 500

[r5-bgp]peer 15.0.0.1 as-path-filter 1 import

10、自定义 Community 策略

[r4]route-policy com permit node 10
[r4-route-policy]apply community  400：500
[r4]bgp 400
[r4-bgp]network 192.168.3.0 24 route-policy com

[r4]bgp 400

[r4-bgp]peer 24.0.0.2  advertise-community

[r4-bgp]peer 34.0.0.3  advertise-community
 
[r2]bgp 123

[r2-bgp]peer 1.1.1.1 advertise-community

[r3]bgp 123

[r3-bgp]peer 1.1.1.1 advertise-community

[r1]bgp 123 
[r1-bgp]peer 15.0.0.5 advertise-community

[r1]ip community-filter 1 permit  400:500
[r1]route-policy com deny node 10

[r1-route-policy]if-match community-filter 1

[r1]route-policy com permit node 20

[r1-bgp]peer 15.0.0.5 route-policy com export