实验需求
本实验模拟多个AS使用BGP协议传递路由的网络环境,根据选路需求修改BGP属性。
预配:各设备物理接口和环回口已配置必要的IPv4和IPv6地址。
一、部署IGP
1.1 部署OSPF
1.1.1 在AS100和AS400中部署OSPF,进程1,RID使用Loopback0地址。
1.1.2 全部划入区域0,通配符0.0.0.0
1.1.3 不宣告与其他AS互联的地址。
1.1.4 确认OSPF邻居关系。
1.1.5 确认环回口互通。
1.2 部署OSPFv3
1.2.1 在AS100和AS400中部署OSPFv3,进程1,RID使用Loopback0地址。
1.2.2 全部划入区域0
1.2.3 与其他AS互联的接口不运行OSPFv3。
1.2.4 确认OSPFv3邻居关系。
1.2.5 确认环回口互通。
二、部署BGP
2.1 部署EBGP
2.1.1 如图所示,配置各AS之间的EBGP邻居关系。
2.1.2 Router-id使用Loopback0地址。
2.1.2 使用物理接口建立邻居。
2.1.3 同时建立IPv4和IPv6邻居。
2.2 部署IBGP
2.2.1 在AS100和AS400中部署IBGP
2.2.2 Router-ID使用Loopback0地址。
2.2.2 使用Loopback0建立邻居。
2.2.3 同时建立IPv4和IPv6邻居,必要时修改下一跳为本地。
2.2.4 确认各设备的邻居关系。
2.3 宣告路由
2.3.1 在R1上使用BGP宣告Loopback10的IPv4和IPv6网段。
2.3.2 在R7上使用BGP宣告Loopback10的IPv4和IPv6网段。
2.3.3 确认R1和R7可以使用IPv4和IPv6通信。
三、部署策略
3.1 PrefVal
3.1.1 确认R1去往10.7.7.0/24和2000:7::/64的最佳下一跳为R2,分析原因。
3.1.2 修改PrefVal,使得R1去往2000:7::/64的最佳下一跳为R3。
3.1.3 使用ipv6前缀列表,名称为7,index 10。
3.1.4 使用路由策略,名称为fromR3,node 10修改PrefVal为3,node 100 允许其他路由。
3.1.5 在R1与对等体R3的输入策略中调用。
3.1.6 确认策略生效。
3.2 Local_Pref
3.2.1 确认R1去往2000:17::/64的最佳下一跳为R2。
3.2.2 R3修改Local_Pref,让R1去往10.7.7.0/24和2000:17::/64都走R3。
3.2.3 ipv4前缀列表匹配10.7.7.0/24,名称7,index 10
3.2.4 ipv6前缀列表匹配2000:17::/64,名称17,index 10
3.2.5 路由策略toR1v4,node 10修改ipv4路由Local_Pref为200,node 100允许其他路由。
3.2.6 路由策略toR1v6,node 10 修改ipv6路由Local_Pref为200,node 100允许其他路由。
3.2.7 在R3与对等体R1的输出策略中调用。
3.2.8 确认策略生效
3.3 MED
3.3.1 查看R5去往AS100的选路,分析目前网络存在的问题。
3.3.2 R2修改MED,影响R5去往AS100选路走R3。
3.3.3 ipv4前缀列表匹配10.1.1.0/24,名称1,index 10
3.3.4 ipv6前缀列表匹配2000:1::/64,名称1,index 10
3.3.5 路由策略toR5v4,node 10修改ipv4路由MED为100,node 100允许其他路由。
3.3.6 路由策略toR5v6,node 10修改ipv6路由MED为100,node 100允许其他路由。
3.3.7 在R2与对等体R5的输出策略中调用。
3.4 AS-path
3.4.1 查看R6去往AS100的选路,分析网络中存在的问题。
3.4.2 AS200的R4上增加AS-path,使得R6选路走AS300。
3.4.3 使用AS-path过滤工具,名称AS100,匹配起源于AS 100的路由。
3.4.4 路由策略名称toR6,node 10,所有起源于AS100的路由都增加AS 4000。
node 100 允许其他路由且不做修改。
3.4.5 在R4与对等体R6的输出策略中调用。
3.4.6 确认策略生效
3.5 Load-balance
3.5.1 在AS500中的R8上查看去往AS100的BGP路由,发现AS-path中没有AS4000,分析原因。
3.5.2 R8开启负载均衡,使得全局路由表中去往AS100的路由有两个下一跳。
四、代码
<R1>dis cu
[V200R003C00]
#
sysname R1
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
ipv6
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
ospfv3 1
router-id 1.1.1.1
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ipv6 enable
ip address 12.1.1.1 255.255.255.0
ipv6 address auto link-local
ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/1
ipv6 enable
ip address 13.1.1.1 255.255.255.0
ipv6 address auto link-local
ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/2
ipv6 enable
ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
ipv6 enable
ip address 1.1.1.1 255.255.255.255
ipv6 address 2000::1/128
ospfv3 1 area 0.0.0.0
#
interface LoopBack10
ipv6 enable
ip address 10.1.1.1 255.255.255.0
ipv6 address 2000:1::1/64
ospfv3 1 area 0.0.0.0
#
bgp 100
router-id 1.1.1.1
peer 2.2.2.2 as-number 100
peer 2.2.2.2 connect-interface LoopBack0
peer 3.3.3.3 as-number 100
peer 3.3.3.3 connect-interface LoopBack0
peer 2000::2 as-number 100
peer 2000::2 connect-interface LoopBack0
peer 2000::3 as-number 100
peer 2000::3 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
network 10.1.1.0 255.255.255.0
peer 2.2.2.2 enable
peer 3.3.3.3 enable
#
ipv6-family unicast
undo synchronization
network 2000:1:: 64
peer 2000::2 enable
peer 2000::3 enable
peer 2000::3 route-policy fromR3 import
#
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 10.0.1.1 0.0.0.0
network 12.1.1.1 0.0.0.0
network 13.1.1.1 0.0.0.0
#
route-policy fromR3 permit node 10
if-match ipv6 address prefix-list 7
apply preferred-value 3
#
route-policy fromR3 permit node 100
#
ip ipv6-prefix 7 index 10 permit 2000:7:: 64
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R2>dis cu
[V200R003C00]
#
sysname R2
#
board add 0/1 1GEC
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
ipv6
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
ospfv3 1
router-id 2.2.2.2
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ipv6 enable
ip address 12.1.1.2 255.255.255.0
ipv6 address auto link-local
ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/1
ipv6 enable
ip address 23.1.1.2 255.255.255.0
ipv6 address auto link-local
ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/2
ipv6 enable
ip address 25.1.1.2 255.255.255.0
ipv6 address 2000:25::2/64
ipv6 address auto link-local
#
interface GigabitEthernet1/0/0
ipv6 enable
ip address 24.1.1.2 255.255.255.0
ipv6 address 2000:24::2/64
#
interface NULL0
#
interface LoopBack0
ipv6 enable
ip address 2.2.2.2 255.255.255.255
ipv6 address 2000::2/128
ospfv3 1 area 0.0.0.0
#
bgp 100
router-id 2.2.2.2
peer 1.1.1.1 as-number 100
peer 1.1.1.1 connect-interface LoopBack0
peer 3.3.3.3 as-number 100
peer 3.3.3.3 connect-interface LoopBack0
peer 24.1.1.4 as-number 200
peer 25.1.1.5 as-number 300
peer 2000::1 as-number 100
peer 2000::1 connect-interface LoopBack0
peer 2000::3 as-number 100
peer 2000::3 connect-interface LoopBack0
peer 2000:24::4 as-number 200
peer 2000:25::5 as-number 300
#
ipv4-family unicast
undo synchronization
peer 1.1.1.1 enable
peer 1.1.1.1 next-hop-local
peer 3.3.3.3 enable
peer 3.3.3.3 next-hop-local
peer 24.1.1.4 enable
peer 25.1.1.5 enable
peer 25.1.1.5 route-policy toR5v4 export
#
ipv6-family unicast
undo synchronization
peer 2000::1 enable
peer 2000::1 next-hop-local
peer 2000::3 enable
peer 2000::3 next-hop-local
peer 2000:24::4 enable
peer 2000:25::5 enable
peer 2000:25::5 route-policy toR5v6 export
#
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 12.1.1.2 0.0.0.0
network 23.1.1.2 0.0.0.0
#
route-policy toR5v4 permit node 10
if-match ip-prefix 1
apply cost 100
#
route-policy toR5v4 permit node 100
#
route-policy toR5v6 permit node 10
if-match ipv6 address prefix-list 1
apply cost 100
#
route-policy toR5v6 permit node 100
#
ip ip-prefix 1 index 10 permit 10.1.1.0 24
#
ip ipv6-prefix 1 index 10 permit 2000:1:: 64
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R3>dis cu
[V200R003C00]
#
sysname R3
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
ipv6
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
ospfv3 1
router-id 3.3.3.3
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ipv6 enable
ip address 13.1.1.3 255.255.255.0
ipv6 address auto link-local
ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/1
ipv6 enable
ip address 23.1.1.3 255.255.255.0
ipv6 address auto link-local
ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/2
ipv6 enable
ip address 35.1.1.3 255.255.255.0
ipv6 address 2000:35::3/64
ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
ipv6 enable
ip address 3.3.3.3 255.255.255.255
ipv6 address 2000::3/128
ospfv3 1 area 0.0.0.0
#
bgp 100
router-id 3.3.3.3
peer 1.1.1.1 as-number 100
peer 1.1.1.1 connect-interface LoopBack0
peer 2.2.2.2 as-number 100
peer 2.2.2.2 connect-interface LoopBack0
peer 35.1.1.5 as-number 300
peer 2000::1 as-number 100
peer 2000::1 connect-interface LoopBack0
peer 2000::2 as-number 100
peer 2000::2 connect-interface LoopBack0
peer 2000:35::5 as-number 300
#
ipv4-family unicast
undo synchronization
peer 1.1.1.1 enable
peer 1.1.1.1 route-policy toR1v4 export
peer 1.1.1.1 next-hop-local
peer 2.2.2.2 enable
peer 2.2.2.2 next-hop-local
peer 35.1.1.5 enable
#
ipv6-family unicast
undo synchronization
peer 2000::1 enable
peer 2000::1 route-policy toR1v6 export
peer 2000::1 next-hop-local
peer 2000::2 enable
peer 2000::2 next-hop-local
peer 2000:35::5 enable
#
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 3.3.3.3 0.0.0.0
network 13.1.1.3 0.0.0.0
network 23.1.1.3 0.0.0.0
#
route-policy toR1v4 permit node 10
if-match ip-prefix 7
apply local-preference 200
#
route-policy toR1v4 permit node 100
#
route-policy toR1v6 permit node 10
if-match ipv6 address prefix-list 17
apply local-preference 200
#
route-policy toR1v6 permit node 100
#
ip ip-prefix 7 index 10 permit 10.7.7.0 24
#
ip ipv6-prefix 17 index 10 permit 2000:17:: 64
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R4>dis cu
[V200R003C00]
#
sysname R4
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
ipv6
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ipv6 enable
ip address 24.1.1.4 255.255.255.0
ipv6 address 2000:24::4/64
#
interface GigabitEthernet0/0/1
ipv6 enable
ip address 46.1.1.4 255.255.255.0
ipv6 address 2000:46::4/64
ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
ipv6 enable
ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
ipv6 enable
ip address 4.4.4.4 255.255.255.255
ipv6 address 2000::4/128
#
bgp 200
router-id 4.4.4.4
peer 24.1.1.2 as-number 100
peer 46.1.1.6 as-number 400
peer 2000:24::2 as-number 100
peer 2000:46::6 as-number 400
#
ipv4-family unicast
undo synchronization
peer 24.1.1.2 enable
peer 46.1.1.6 enable
peer 46.1.1.6 route-policy toR6 export
#
ipv6-family unicast
undo synchronization
peer 2000:24::2 enable
peer 2000:46::6 enable
peer 2000:46::6 route-policy toR6 export
#
route-policy toR6 permit node 10
if-match as-path-filter AS100
apply as-path 4000 additive
#
route-policy toR6 permit node 100
#
ip as-path-filter AS100 permit _100$
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R5>dis cu
[V200R003C00]
#
sysname R5
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
ipv6
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ipv6 enable
ip address 35.1.1.5 255.255.255.0
ipv6 address 2000:35::5/64
ipv6 address auto link-local
#
interface GigabitEthernet0/0/1
ipv6 enable
ip address 56.1.1.5 255.255.255.0
ipv6 address 2000:56::5/64
ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
ipv6 enable
ip address 25.1.1.5 255.255.255.0
ipv6 address 2000:25::5/64
ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
ip address 5.5.5.5 255.255.255.255
#
bgp 300
router-id 5.5.5.5
peer 25.1.1.2 as-number 100
peer 35.1.1.3 as-number 100
peer 56.1.1.6 as-number 400
peer 2000:25::2 as-number 100
peer 2000:35::3 as-number 100
peer 2000:56::6 as-number 400
#
ipv4-family unicast
undo synchronization
peer 25.1.1.2 enable
peer 35.1.1.3 enable
peer 56.1.1.6 enable
#
ipv6-family unicast
undo synchronization
peer 2000:25::2 enable
peer 2000:35::3 enable
peer 2000:56::6 enable
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R6>dis cu
[V200R003C00]
#
sysname R6
#
board add 0/1 1GEC
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
ipv6
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
ospfv3 1
router-id 6.6.6.6
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ipv6 enable
ip address 56.1.1.6 255.255.255.0
ipv6 address 2000:56::6/64
ipv6 address auto link-local
#
interface GigabitEthernet0/0/1
ipv6 enable
ip address 46.1.1.6 255.255.255.0
ipv6 address 2000:46::6/64
ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
ipv6 enable
ip address 67.1.1.6 255.255.255.0
ipv6 address auto link-local
ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet1/0/0
ipv6 enable
ip address 68.1.1.6 255.255.255.0
ipv6 address 2000:68::6/64
ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
ipv6 enable
ip address 6.6.6.6 255.255.255.255
ipv6 address 2000::6/128
ospfv3 1 area 0.0.0.0
#
bgp 400
router-id 6.6.6.6
peer 7.7.7.7 as-number 400
peer 7.7.7.7 connect-interface LoopBack0
peer 46.1.1.4 as-number 200
peer 56.1.1.5 as-number 300
peer 68.1.1.8 as-number 500
peer 2000::7 as-number 400
peer 2000::7 connect-interface LoopBack0
peer 2000:46::4 as-number 200
peer 2000:56::5 as-number 300
peer 2000:68::8 as-number 500
#
ipv4-family unicast
undo synchronization
peer 7.7.7.7 enable
peer 7.7.7.7 next-hop-local
peer 46.1.1.4 enable
peer 56.1.1.5 enable
peer 68.1.1.8 enable
#
ipv6-family unicast
undo synchronization
peer 2000::7 enable
peer 2000::7 next-hop-local
peer 2000:46::4 enable
peer 2000:56::5 enable
peer 2000:68::8 enable
#
ospf 1 router-id 6.6.6.6
area 0.0.0.0
network 6.6.6.6 0.0.0.0
network 67.1.1.6 0.0.0.0
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R7>dis cu
[V200R003C00]
#
sysname R7
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
ipv6
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
ospfv3 1
router-id 7.7.7.7
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ipv6 enable
ip address 67.1.1.7 255.255.255.0
ipv6 address auto link-local
ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/1
ipv6 enable
ip address 78.1.1.7 255.255.255.0
ipv6 address 2000:78::7/64
ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
ipv6 enable
ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
ipv6 enable
ip address 7.7.7.7 255.255.255.255
ipv6 address 2000::7/128
ospfv3 1 area 0.0.0.0
#
interface LoopBack10
ipv6 enable
ip address 10.7.7.7 255.255.255.0
ipv6 address 2000:7::7/64
ipv6 address 2000:17::7/64
ospfv3 1 area 0.0.0.0
#
bgp 400
router-id 7.7.7.7
peer 6.6.6.6 as-number 400
peer 6.6.6.6 connect-interface LoopBack0
peer 78.1.1.8 as-number 500
peer 2000::6 as-number 400
peer 2000::6 connect-interface LoopBack0
peer 2000:78::8 as-number 500
#
ipv4-family unicast
undo synchronization
network 10.7.7.0 255.255.255.0
peer 6.6.6.6 enable
peer 78.1.1.8 enable
#
ipv6-family unicast
undo synchronization
network 2000:7:: 64
network 2000:17:: 64
peer 2000::6 enable
peer 2000:78::8 enable
#
ospf 1 router-id 7.7.7.7
area 0.0.0.0
network 7.7.7.7 0.0.0.0
network 10.7.7.7 0.0.0.0
network 67.1.1.7 0.0.0.0
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R8>dis cu
[V200R003C00]
#
sysname R8
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
ipv6
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ipv6 enable
ip address 68.1.1.8 255.255.255.0
ipv6 address 2000:68::8/64
ipv6 address auto link-local
#
interface GigabitEthernet0/0/1
ipv6 enable
ip address 78.1.1.8 255.255.255.0
ipv6 address 2000:78::8/64
ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
ipv6 enable
ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
ip address 8.8.8.8 255.255.255.255
#
bgp 500
router-id 8.8.8.8
peer 68.1.1.6 as-number 400
peer 78.1.1.7 as-number 400
peer 2000:68::6 as-number 400
peer 2000:78::7 as-number 400
#
ipv4-family unicast
undo synchronization
maximum load-balancing 2
peer 68.1.1.6 enable
peer 78.1.1.7 enable
#
ipv6-family unicast
undo synchronization
maximum load-balancing 2
peer 2000:68::6 enable
peer 2000:78::7 enable
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return