拓扑结构:
要求:
1、使用BGP协议,按照真实网络环境的逻辑配置;
2、实现所有PC间可以相互通讯
3、解决环路,所有路径选择最优
使用的设备:5台路由器,5台PC
解决网络拓扑:
1、确定广播域的个数
2、分配网段
3、配置IP地址 (优先配置路由器)
确定广播域的个数
根据拓扑结构图以及要求可知,BGP协议是在AS(自治系统)之间运行的,自治系统 AS 是在一个或多个网络运营商代表单个管理实体或域的控制下,所以在本次实验之中,均使用公网IPV4地址进行配置
分配网段
自主分配网段
接口网段:
接口 | 分配网段 |
R1:GE 0/0/0 R1:GE 0/0/1 | 12.0.0.0/30 20.0.1.0/25 |
R2:GE 0/0/0 R2:GE 0/0/1 R2:GE 0/0/2 | 12.0.0.0/30 23.0.0.0/30 30.0.1.0/25 |
R3:GE 0/0/0 R3:GE 0/0/1 R3:GE 0/0/2 | 23.0.0.0/30 34.0.0.0/30 40.0.1.0/25 |
R4:GE 0/0/0 R4:GE 0/0/1 R4:GE 0/0/2 R4:GE 1/0/0 | 34.0.0.0/30 45.0.0.0/30 45.0.0.4/30 50.0.1.0/25 |
R5:GE 0/0/0 R5:GE 0/0/1 R5:GE 0/0/2 | 45.0.0.0/30 45.0.0.4/30 60.0.1.0/25 |
环回网段:
环回 | 分配网段 |
R1 LoopBack 0 | 20.0.1.128/25 |
R2 LoopBack 0 | 30.0.1.128/25 |
R3 LoopBack 0 | 40.0.1.128/25 |
R4 LoopBack 0 | 50.0.1.128/25 |
R5 LoopBack 0 | 60.0.1.128/25 |
配置路由器IP地址
AR1:
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname r1
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ip address 12.0.0.1 30
May 23 2023 21:16:18-08:00 r1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[r1-GigabitEthernet0/0/0]q
[r1]interface GigabitEthernet 0/0/1
[r1-GigabitEthernet0/0/1]ip address 20.0.1.1 25
May 23 2023 21:16:40-08:00 r1 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[r1-GigabitEthernet0/0/1]q
[r1]interface LoopBack 0
[r1-LoopBack0]ip address 20.0.1.129 25
[r1-LoopBack0]q
[r1]
AR2:
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname r2
[r2]interface GigabitEthernet 0/0/0
[r2-GigabitEthernet0/0/0]ip address 12.0.0.2 30
[r2-GigabitEthernet0/0/0]
May 23 2023 21:17:32-08:00 r2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[r2-GigabitEthernet0/0/0]q
[r2]interface GigabitEthernet 0/0/1
[r2-GigabitEthernet0/0/1]ip address 23.0.0.1 30
[r2-GigabitEthernet0/0/1]
May 23 2023 21:17:46-08:00 r2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[r2-GigabitEthernet0/0/1]q
[r2]interface GigabitEthernet 0/0/2
[r2-GigabitEthernet0/0/2]ip address 30.0.1.1 25
[r2-GigabitEthernet0/0/2]
May 23 2023 21:18:00-08:00 r2 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP on the interface GigabitEthernet0/0/2 has entered the UP state.
[r2-GigabitEthernet0/0/2]q
[r2]interface LoopBack 0
[r2-LoopBack0]ip address 30.0.1.129 25
[r2-LoopBack0]q
[r2]
AR3:
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname r3
[r3]interface GigabitEthernet 0/0/0
[r3-GigabitEthernet0/0/0]ip address 23.0.0.2 30
[r3-GigabitEthernet0/0/0]
May 23 2023 21:18:56-08:00 r3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[r3-GigabitEthernet0/0/0]q
[r3]interface GigabitEthernet 0/0/1
[r3-GigabitEthernet0/0/1]ip address 34.0.0.1 30
[r3-GigabitEthernet0/0/1]
May 23 2023 21:19:07-08:00 r3 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[r3-GigabitEthernet0/0/1]q
[r3]interface GigabitEthernet 0/0/2
[r3-GigabitEthernet0/0/2]ip address 40.0.1.1 25
[r3-GigabitEthernet0/0/2]
May 23 2023 21:19:19-08:00 r3 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP on the interface GigabitEthernet0/0/2 has entered the UP state.
[r3-GigabitEthernet0/0/2]q
[r3]interface LoopBack 0
[r3-LoopBack0]ip address 40.0.1.129 25
[r3-LoopBack0]q
[r3]
AR4:
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname r4
[r4]interface GigabitEthernet 0/0/0
[r4-GigabitEthernet0/0/0]ip address 34.0.0.2 30
May 23 2023 21:20:11-08:00 r4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[r4-GigabitEthernet0/0/0]q
[r4]interface GigabitEthernet 0/0/1
[r4-GigabitEthernet0/0/1]ip address 45.0.0.1 30
May 23 2023 21:20:31-08:00 r4 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[r4-GigabitEthernet0/0/1]q
[r4]interface GigabitEthernet 0/0/2
[r4-GigabitEthernet0/0/2]ip address 45.0.0.5 30
[r4-GigabitEthernet0/0/2]
May 23 2023 21:20:48-08:00 r4 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP on the interface GigabitEthernet0/0/2 has entered the UP state.
[r4-GigabitEthernet0/0/2]q
[r4]interface GigabitEthernet 1/0/0
[r4-GigabitEthernet1/0/0]ip address 50.0.1.1 25
[r4-GigabitEthernet1/0/0]
May 23 2023 21:21:04-08:00 r4 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol IP on the interface GigabitEthernet1/0/0 has entered the UP state.
[r4-GigabitEthernet1/0/0]q
[r4]interface LoopBack 0
[r4-LoopBack0]ip address 50.0.1.129 25
[r4-LoopBack0]q
[r4]
AR5:
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname r5
[r5]interface GigabitEthernet 0/0/0
[r5-GigabitEthernet0/0/0]ip address 45.0.0.2 30
[r5-GigabitEthernet0/0/0]
May 23 2023 21:21:44-08:00 r5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[r5-GigabitEthernet0/0/0]q
[r5]interface GigabitEthernet 0/0/1
[r5-GigabitEthernet0/0/1]ip address 45.0.0.6 30
[r5-GigabitEthernet0/0/1]
May 23 2023 21:22:02-08:00 r5 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[r5-GigabitEthernet0/0/1]q
[r5]interface GigabitEthernet 0/0/2
[r5-GigabitEthernet0/0/2]ip address 60.0.1.1 25
[r5-GigabitEthernet0/0/2]
May 23 2023 21:22:22-08:00 r5 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP on the interface GigabitEthernet0/0/2 has entered the UP state.
[r5-GigabitEthernet0/0/2]q
[r5]interface LoopBack 0
[r5-LoopBack0]ip address 60.0.1.129 25
[r5-LoopBack0]q
[r5]
配置OSPF动态路由协议
BGP协议承载于IGP协议之上,先将IGP内部网络联通,配置IGP协议
AR2:
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 23.0.0.0 0.0.0.3
[r2-ospf-1-area-0.0.0.0]network 30.0.1.0 0.0.0.255
[r2-ospf-1-area-0.0.0.0]q
[r2-ospf-1]q
[r2]interface GigabitEthernet 0/0/1
[r2-GigabitEthernet0/0/1]ospf authentication-mode md5 1 cipher 123456
[r2-GigabitEthernet0/0/1]q
[r2]
AR3:
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 23.0.0.0 0.0.0.3
[r3-ospf-1-area-0.0.0.0]network 40.0.1.0 0.0.0.255
[r3-ospf-1-area-0.0.0.0]network 34.0.0.0 0.0.0.3
[r3-ospf-1-area-0.0.0.0]q
[r3-ospf-1]q
[r3]interface GigabitEthernet 0/0/0
[r3-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
[r3-GigabitEthernet0/0/0]q
[r3]interface GigabitEthernet 0/0/1
[r3-GigabitEthernet0/0/1]ospf authentication-mode md5 1 cipher 123456
[r3-GigabitEthernet0/0/1]q
[r3]
AR4:
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]area 0
[r4-ospf-1-area-0.0.0.0]network 34.0.0.0 0.0.0.3
[r4-ospf-1-area-0.0.0.0]network 50.0.1.0 0.0.0.255
[r4-ospf-1-area-0.0.0.0]q
[r4-ospf-1]q
[r4]interface GigabitEthernet 0/0/0
[r4-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
[r4-GigabitEthernet0/0/0]q
[r4]
配置OSPF动态路由协议,在接口配置认证,保证更新安全
配置BGP-边界网关协议
配置完OSPF协议之后AS2之内的设备可以相互通信,然后接着在AS1、AS2、AS3上配置BGP-边界网关协议,实现三个自治系统间的网络通信,暂时未学习新的技术解决BGP黑洞,所以5台路由器均配置BGP协议
AR1:
[r1]bgp 1
[r1-bgp]router-id 1.1.1.1
[r1-bgp]peer 12.0.0.2 as-number 2
[r1-bgp]q
[r1]
AR2:
[r2]bgp 2
[r2-bgp]router-id 2.2.2.2
[r2-bgp]peer 12.0.0.1 as-number 1
[r2-bgp]peer 40.0.1.129 as-number 2
[r2-bgp]peer 40.0.1.129 connect-interface LoopBack 0
[r2-bgp]q
[r2]
AR3:
[r3]bgp 2
[r3-bgp]router-id 3.3.3.3
[r3-bgp]peer 30.0.1.129 as-number 2
[r3-bgp]peer 30.0.1.129 connect-interface LoopBack 0
[r3-bgp]peer 50.0.1.129 as-number 2
[r3-bgp]peer 50.0.1.129 connect-interface LoopBack 0
[r3-bgp]q
[r3]
AR4:
#在R4上配置BGP协议时,左边和AS3的两条链路都要建邻,所以两边的环回要通信,先写静态路由
[r4]ip route-static 60.0.1.128 25 45.0.0.2
[r4]ip route-static 60.0.1.128 25 45.0.0.6
[r4]bgp 2
[r4-bgp]router-id 4.4.4.4
[r4-bgp]peer 40.0.1.129 as-number 2
[r4-bgp]peer 40.0.1.129 connect-interface LoopBack 0
[r4-bgp]peer 60.0.1.129 as-number 3
[r4-bgp]peer 60.0.1.129 connect-interface LoopBack 0
[r4-bgp]peer 60.0.1.129 ebgp-max-hop 2
[r4-bgp]q
[r4]
AR5:
#与R4类似
[r5]ip route-static 50.0.1.128 25 45.0.0.1
[r5]ip route-static 50.0.1.128 25 45.0.0.5
[r5]bgp 3
[r5-bgp]router-id 5.5.5.5
[r5-bgp]peer 50.0.1.129 as-number 2
[r5-bgp]peer 50.0.1.129 connect-interface LoopBack 0
[r5-bgp]peer 50.0.1.129 ebgp-max-hop 2
[r5-bgp]q
[r5]
宣告网段:
AR1:
[r1]bgp 1
[r1-bgp]network 20.0.1.0 25
[r1-bgp]network 20.0.1.128 25
该路由宣告后传递给R2,R2在将该路由传递给R3,但是R2的路由表上是有该网段,R3的路由表上没有该网段,因为AS BY AS规则,导致传递到R2的路由条目为优(去该网段下一跳可达),可以加入路由表,但是传递到R3时,路由条目不优(去该网段下一跳不可达),不能加入路由表。所以需要在R2上将该路由条目的下一跳改为本地。
AR2:
[r2]bgp 2
[r2-bgp]peer 40.0.1.129 next-hop-local
[r2-bgp]network 30.0.1.0 25
#AR3:
[r3-bgp]network 40.0.1.0 25
R3上的路由条目为优后,可以加入路由表,但是因为BGP协议的水平分割,导致不能传递给R4,所以我们需要在R2与R4之间再建立邻居关系(还有其他方法,但是本次未学习)。同样,路由传递给R4时也不优,也要修改下一跳为本地。
AR2:
[r2]bgp 2
[r2-bgp]peer 50.0.1.129 as-number 2
[r2-bgp]peer 50.0.1.129 connect-interface LoopBack 0
[r2-bgp]peer 50.0.1.129 next-hop-local
AR4:
[r4]bgp 2
[r4-bgp]peer 30.0.1.129 as-number 2
[r4-bgp]peer 30.0.1.129 connect-interface LoopBack 0
[r4-bgp]network 50.0.1.0 25
同样在R5上也是一样的操作
#AR5:
[r5]bgp 3
[r5-bgp]network 60.0.1.0 25
#AR4:
[r4]bgp 2
[r4-bgp]peer 40.0.1.129 next-hop-local
[r4-bgp]peer 30.0.1.129 next-hop-local
[r4-bgp]q
[r4]
在R2、R3、R4宣告各自的用户网段(也可以在R2上一次性宣告),最后PC1可以ping通PC5,全网可达,并且满足要求。