BGP实验,MPLS多协议标签交换防路由黑洞

实验拓扑在这里插入图片描述

在这里插入图片描述

实验要求

1.As2区域内ip地址为172.16.0.0/16
As2中每台设备存在两个环回接口,一个专门建立邻居关系的32位;一个为代表用户网段的24位;
2.AS2中R3/4/6不得运行BGP协议
3.R1到AS2中R2/3/4用户基于R5访问
R5/6/7 R2
4.保留备份路由
5.R1/8的环回均可访问AS2中所有用户网段环回

实验内容

IP地址的划分
R1:
环回1.1.1.1/24 R1/2网段12.1.1.0/24
R2/3网段 172.16.1.0/30
R3/4网段 172.16.1.4/30
R4/7网段 172.16.1.8/30
R6/7网段 172.16.1.12/30
R5/6网段 172.16.1.16/30
R2/5网段 172.16.1.20/30
R2两个环回:172.16.2.1/24 172.16.0.2/32
R3: 172.16.3.1/24 172.16.0.3/32
R4: 172.16.4.1/24 172.16.0.4/32
R5 :172.16.5.1/24 172.16.0.5/32
R6 : 172.16.6.1/24 172.16.0.6/32
R7 : 172.16.7.1/24 172.16.0.7/32
R7/8: 78.1.1.0/24
R8:8.8.8.8/24

接着可以给每台路由器配置上IP地址
R1

#
interface GigabitEthernet0/0/0
 ip address 12.1.1.1 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 15.1.1.1 255.255.255.0 
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 1.1.1.1 255.255.255.0 
#

R2

#
interface GigabitEthernet0/0/0
 ip address 12.1.1.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 172.16.1.1 255.255.255.252 
#
interface GigabitEthernet0/0/2
 ip address 172.16.1.21 255.255.255.252 
#
interface NULL0
#
interface LoopBack0
 ip address 172.16.2.1 255.255.255.0 
#
interface LoopBack1
 ip address 172.16.0.2 255.255.255.255 
#

R3

#
interface GigabitEthernet0/0/0
 ip address 172.16.1.2 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 172.16.1.5 255.255.255.252 
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 172.16.3.1 255.255.255.0 
#
interface LoopBack1
 ip address 172.16.0.3 255.255.255.255 
#

R4

#
interface GigabitEthernet0/0/0
 ip address 172.16.1.6 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 172.16.1.9 255.255.255.252 
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 172.16.4.1 255.255.255.0 
#
interface LoopBack1
 ip address 172.16.0.4 255.255.255.255 
#

R5

#
interface GigabitEthernet0/0/0
 ip address 172.16.1.17 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 172.16.1.22 255.255.255.252 
#
interface GigabitEthernet0/0/2
 ip address 15.1.1.2 255.255.255.0 
#
interface NULL0
#
interface LoopBack0
 ip address 172.16.5.1 255.255.255.0 
#
interface LoopBack1
 ip address 172.16.0.5 255.255.255.255 
#

R6

#
interface GigabitEthernet0/0/0
 ip address 172.16.1.13 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 172.16.1.18 255.255.255.252 
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 172.16.6.1 255.255.255.0 
#
interface LoopBack1
 ip address 172.16.0.6 255.255.255.255 
#

R7

#
interface GigabitEthernet0/0/0
 ip address 172.16.1.10 255.255.255.252 
#
interface GigabitEthernet0/0/1
 ip address 172.16.1.14 255.255.255.252 
#
interface GigabitEthernet0/0/2
 ip address 78.1.1.1 255.255.255.0 
#
interface NULL0
#
interface LoopBack0
 ip address 172.16.7.1 255.255.255.0 
#
interface LoopBack1
 ip address 172.16.0.7 255.255.255.255 
#

R8

#
interface GigabitEthernet0/0/0
 ip address 78.1.1.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 8.8.8.8 255.255.255.0 
#

ip地址配置完成,就建立对应的BGP对等体关系
这里为了方便
R1、2 R7、8之间我采用直连建邻

R1/2和R1/5
以及就是AS2中对等体关系的建立

#
bgp 1
 router-id 1.1.1.1
 peer 12.1.1.2 as-number 2 
 peer 15.1.1.2 as-number 2 
 #
 ipv4-family unicast
  undo synchronization
  network 1.1.1.0 255.255.255.0 
  peer 12.1.1.2 enable
  peer 15.1.1.2 enable
#

R2

#
bgp 2
 router-id 2.2.2.2
 peer 12.1.1.1 as-number 1 
 peer 172.16.0.5 as-number 2 
 peer 172.16.0.5 connect-interface LoopBack1
 peer 172.16.0.7 as-number 2 
 peer 172.16.0.7 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 12.1.1.1 enable
  peer 172.16.0.5 enable
  peer 172.16.0.5 next-hop-local 
  peer 172.16.0.7 enable
  peer 172.16.0.7 next-hop-local 
#

R5

#
bgp 2
 router-id 5.5.5.5
 peer 15.1.1.1 as-number 1 
 peer 172.16.0.2 as-number 2 
 peer 172.16.0.2 connect-interface LoopBack1
 peer 172.16.0.7 as-number 2 
 peer 172.16.0.7 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 15.1.1.1 enable
  peer 172.16.0.2 enable
  peer 172.16.0.2 next-hop-local 
  peer 172.16.0.7 enable
  peer 172.16.0.7 next-hop-local 
#

R7和R8之间的对等体建立关系是相同的,我就不做过多的配置了

简单的查看一些bgp邻居的建立情况
R2

<r2>display bgp peer

 BGP local router ID : 2.2.2.2
 Local AS number : 2
 Total number of peers : 3		  Peers in established state : 3

  Peer            V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State Pre
fRcv

  12.1.1.1        4           1      187      187     0 02:36:45 Established    
   1
  172.16.0.5      4           2      162      166     0 02:36:10 Established    
   4
  172.16.0.7      4           2      158      164     0 02:34:18 Established    
   2

R5

<r5>display bgp peer

 BGP local router ID : 5.5.5.5
 Local AS number : 2
 Total number of peers : 3		  Peers in established state : 3

  Peer            V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State Pre
fRcv

  15.1.1.1        4           1      179      169     0 02:37:13 Established    
   1
  172.16.0.2      4           2      165      162     0 02:36:41 Established    
   5
  172.16.0.7      4           2      156      160     0 02:32:11 Established    
   2

发现AS2中对等体关系的建立没有问题

起AS2中的OSPF协议
R2

#
ospf 1 
 area 0.0.0.0 
  network 172.16.0.0 0.0.255.255 
#

R3

#
ospf 1 
 area 0.0.0.0 
  network 172.16.0.0 0.0.255.255 
#

R4

#
ospf 1 
 area 0.0.0.0 
  network 172.16.0.0 0.0.255.255 
#

R5/6/7OPSF宣告相同,因为AS2中的IP地址都是基于172.16.0.0/16划分的
查看R2的路由表

<r2>display ip routing-table protocol ospf 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : OSPF
         Destinations : 14       Routes : 16       

OSPF routing table status : <Active>
         Destinations : 14       Routes : 16

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

     172.16.0.3/32  OSPF    10   1           D   172.16.1.2      GigabitEthernet
0/0/1
     172.16.0.4/32  OSPF    10   2           D   172.16.1.2      GigabitEthernet
0/0/1
     172.16.0.5/32  OSPF    10   1           D   172.16.1.22     GigabitEthernet
0/0/2
     172.16.0.6/32  OSPF    10   2           D   172.16.1.22     GigabitEthernet
0/0/2
     172.16.0.7/32  OSPF    10   3           D   172.16.1.22     GigabitEthernet
0/0/2
                    OSPF    10   3           D   172.16.1.2      GigabitEthernet
0/0/1
     172.16.1.4/30  OSPF    10   2           D   172.16.1.2      GigabitEthernet
0/0/1
     172.16.1.8/30  OSPF    10   3           D   172.16.1.2      GigabitEthernet
0/0/1
    172.16.1.12/30  OSPF    10   3           D   172.16.1.22     GigabitEthernet
0/0/2
    172.16.1.16/30  OSPF    10   2           D   172.16.1.22     GigabitEthernet
0/0/2
     172.16.3.0/24  OSPF    10   1           D   172.16.1.2      GigabitEthernet
0/0/1
     172.16.4.0/24  OSPF    10   2           D   172.16.1.2      GigabitEthernet
0/0/1
     172.16.5.1/32  OSPF    10   1           D   172.16.1.22     GigabitEthernet
0/0/2
     172.16.6.0/24  OSPF    10   2           D   172.16.1.22     GigabitEthernet
0/0/2
     172.16.7.0/24  OSPF    10   3           D   172.16.1.2      GigabitEthernet
0/0/1
                    OSPF    10   3           D   172.16.1.22     GigabitEthernet
0/0/2

OSPF routing table status : <Inactive>
         Destinations : 0        Routes : 0

发现该学的路由都已经学到了,路由条目没有问题。
接着在整个MPLS域起做MPLS
R2

#
mpls lsr-id 172.16.0.2
mpls
 lsp-trigger all 
#
mpls ldp

#
interface GigabitEthernet0/0/1
 ip address 172.16.1.1 255.255.255.252 
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/2
 ip address 172.16.1.21 255.255.255.252 
 mpls
 mpls ldp
#

R3

#
mpls lsr-id 172.16.0.3
mpls
 lsp-trigger all 
#
mpls ldp

interface GigabitEthernet0/0/0
 ip address 172.16.1.2 255.255.255.252 
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip address 172.16.1.5 255.255.255.252 
 mpls
 mpls ldp
#

R3

mpls lsr-id 172.16.0.4
mpls
 lsp-trigger all 
#
mpls ldp

interface GigabitEthernet0/0/0
 ip address 172.16.1.6 255.255.255.252 
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip address 172.16.1.9 255.255.255.252 
 mpls
 mpls ldp
#

其余配置都是一样的
注意:[r2]mpls lsr-id 2.2.2.2 必须先定义mpls的router-id,要为本地设备的真实ip地址,且邻居可达,因为
该地址将用于建立TCP会话,建议使用环回地址

路由器在MPLS域里面的接口都要做MPLS操作

在R2,R5,R7上
配置执行下一跳机制,路由基于隧道进行递归查找

route recursive-lookup tunnel

MPLS配置完成

在R1和R8上各自在BGP协议中宣告一条路由
R1

#
bgp 1
 router-id 1.1.1.1
 peer 12.1.1.2 as-number 2 
 peer 15.1.1.2 as-number 2 
 #
 ipv4-family unicast
  undo synchronization
  network 1.1.1.0 255.255.255.0 

R8

#
bgp 3
 router-id 8.8.8.8
 peer 78.1.1.1 as-number 2 
 #
 ipv4-family unicast
  undo synchronization
  network 8.8.8.0 255.255.255.0

查看R2的BGP表

<r2>display bgp routing-table 

 BGP Local router ID is 2.2.2.2 
 Status codes: * - valid, > - best, d - damped,
               h - history,  i - internal, s - suppressed, S - Stale
               Origin : i - IGP, e - EGP, ? - incomplete


 Total Number of Routes: 11
      Network            NextHop        MED        LocPrf    PrefVal Path/Ogn

 *>   1.1.1.0/24         12.1.1.1        0                     0      1i
 * i                     172.16.0.5      0          100        0      1i
 *>i  8.8.8.0/24         172.16.0.7      0          100        0      3

能够收到R8的路由
用R1ping R8

<r1>ping -a 1.1.1.1 8.8.8.8
  PING 8.8.8.8: 56  data bytes, press CTRL_C to break
    Reply from 8.8.8.8: bytes=56 Sequence=1 ttl=252 time=60 ms
    Reply from 8.8.8.8: bytes=56 Sequence=2 ttl=252 time=40 ms
    Reply from 8.8.8.8: bytes=56 Sequence=3 ttl=252 time=40 ms
    Reply from 8.8.8.8: bytes=56 Sequence=4 ttl=252 time=40 ms
    Reply from 8.8.8.8: bytes=56 Sequence=5 ttl=252 time=40 ms

  --- 8.8.8.8 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 40/44/60 ms

发现能够通
但是ping不同R2/3/6的用户网段

这时 我们需要将他们的用户网段宣告到BGP协议中去
由于用户网段由OPSF协议宣告,所有环回地址均为32位
所以
R3

#
interface LoopBack0
 ip address 172.16.3.1 255.255.255.0 
 ospf network-type broadcast
#

R4

#
interface LoopBack0
 ip address 172.16.4.1 255.255.255.0 
 ospf network-type broadcast
#

R7

#
interface LoopBack0
 ip address 172.16.7.1 255.255.255.0 
 ospf network-type broadcast
#

其他路由器的操作都一致
将他们修改位24位
在没有运行BGP的R3/4/6上写一条,向外指的缺省,这样才会有路由

ip route-static 0.0.0.0 0.0.0.0 172.16.1.1

R4

ip route-static 0.0.0.0 0.0.0.0 172.16.1.10

R6

ip route-static 0.0.0.0 0.0.0.0 172.16.1.17

注:这条缺省,指向最近的边界运行BGP协议的路由器
在R2BGP中宣告R2/3/4


#
bgp 2
 router-id 2.2.2.2
 peer 12.1.1.1 as-number 1 
 peer 172.16.0.5 as-number 2 
 peer 172.16.0.5 connect-interface LoopBack1
 peer 172.16.0.7 as-number 2 
 peer 172.16.0.7 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  network 172.16.0.0 
  network 172.16.0.0 255.255.248.0 
  network 172.16.2.0 255.255.255.0 
  network 172.16.3.0 255.255.255.0 
  network 172.16.4.0 255.255.255.0 

查看R1的BGP表

<r1>display bgp routing-table 

 BGP Local router ID is 1.1.1.1 
 Status codes: * - valid, > - best, d - damped,
               h - history,  i - internal, s - suppressed, S - Stale
               Origin : i - IGP, e - EGP, ? - incomplete


 Total Number of Routes: 17
      Network            NextHop        MED        LocPrf    PrefVal Path/Ogn

 *>   1.1.1.0/24         0.0.0.0         0                     0      i
 *>   8.8.8.0/24         12.1.1.2                              0      2 3i
 *                       15.1.1.2                              0      2 3i
 *>   172.16.0.0/21      12.1.1.2        0                     0      2i
 *                       15.1.1.2                              0      2i
 *>   172.16.2.0/24      12.1.1.2                              0      2i
 *                       15.1.1.2        0                     0      2 2 2 2i
 *>   172.16.3.0/24      15.1.1.2                              0      2i
 *                       12.1.1.2        1                     0      2i
 *>   172.16.4.0/24      15.1.1.2                              0      2i
 *                       12.1.1.2        2                     0      2i

发现去172.16.2.0网段走的是R2,与题意不符合
造成的原因: 由于他们的med值是相同的,所以比较他们的Routerid .

需要抓流量,做路由策略
在R1上

#
route-policy as permit node 10 
 if-match ip-prefix as 
 apply as-path 2 2 2 additive
#
route-policy as permit node 20 
#
ip ip-prefix as index 10 permit 172.16.2.0 24
#

在查看R1的BGP表

<r1>display bgp routing-table 

 BGP Local router ID is 1.1.1.1 
 Status codes: * - valid, > - best, d - damped,
               h - history,  i - internal, s - suppressed, S - Stale
               Origin : i - IGP, e - EGP, ? - incomplete


 Total Number of Routes: 17
      Network            NextHop        MED        LocPrf    PrefVal Path/Ogn

 *>   1.1.1.0/24         0.0.0.0         0                     0      i
 *>   8.8.8.0/24         12.1.1.2                              0      2 3i
 *                       15.1.1.2                              0      2 3i
 *>   172.16.0.0/21      12.1.1.2        0                     0      2i
 *                       15.1.1.2                              0      2i
 *>   172.16.2.0/24      15.1.1.2                              0      2i
 *                       12.1.1.2        0                     0      2 2 2 2i
 *>   172.16.3.0/24      15.1.1.2                              0      2i
 *                       12.1.1.2        1                     0      2i
 *>   172.16.4.0/24      15.1.1.2                              0      2i
 *                       12.1.1.2        2                     0      2i

这下选路符合了
同样
在R5上宣告R5/6/7
查看R1的BGP表

<r1>display bgp routing-table 

 BGP Local router ID is 1.1.1.1 
 Status codes: * - valid, > - best, d - damped,
               h - history,  i - internal, s - suppressed, S - Stale
               Origin : i - IGP, e - EGP, ? - incomplete


 Total Number of Routes: 17
      Network            NextHop        MED        LocPrf    PrefVal Path/Ogn

 *>   1.1.1.0/24         0.0.0.0         0                     0      i
 *>   8.8.8.0/24         12.1.1.2                              0      2 3i
 *                       15.1.1.2                              0      2 3i
 *>   172.16.0.0/21      12.1.1.2        0                     0      2i
 *                       15.1.1.2                              0      2i
 *>   172.16.2.0/24      15.1.1.2                              0      2i
 *                       12.1.1.2        0                     0      2 2 2 2i
 *>   172.16.3.0/24      15.1.1.2                              0      2i
 *                       12.1.1.2        1                     0      2i
 *>   172.16.4.0/24      15.1.1.2                              0      2i
 *                       12.1.1.2        2                     0      2i
 *>   172.16.5.0/24      12.1.1.2                              0      2i
 *                       15.1.1.2        0                     0      2i
 *>   172.16.6.0/24      12.1.1.2                              0      2i
 *                       15.1.1.2        1                     0      2i
 *>   172.16.7.0/24      12.1.1.2                              0      2i
 *                       15.1.1.2        2                     0      2i

发现选路是正确的,不需要在干涉选路了
用R1ping R3 的用户

<r1>ping -a 1.1.1.1 172.16.3.1
  PING 172.16.3.1: 56  data bytes, press CTRL_C to break
    Reply from 172.16.3.1: bytes=56 Sequence=1 ttl=254 time=20 ms
    Reply from 172.16.3.1: bytes=56 Sequence=2 ttl=254 time=30 ms
    Reply from 172.16.3.1: bytes=56 Sequence=3 ttl=254 time=40 ms
    Reply from 172.16.3.1: bytes=56 Sequence=4 ttl=254 time=50 ms
    Reply from 172.16.3.1: bytes=56 Sequence=5 ttl=254 time=30 ms

  --- 172.16.3.1 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 20/34/50 ms

能够ping通 ,实验完成。

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值