BGP选路实验

实验需求

本实验模拟多个AS使用BGP协议传递路由的网络环境,根据选路需求修改BGP属性。
预配:各设备物理接口和环回口已配置必要的IPv4和IPv6地址。
在这里插入图片描述

一、部署IGP

1.1 部署OSPF

1.1.1 在AS100和AS400中部署OSPF,进程1,RID使用Loopback0地址。
1.1.2 全部划入区域0,通配符0.0.0.0
1.1.3 不宣告与其他AS互联的地址。
1.1.4 确认OSPF邻居关系。
1.1.5 确认环回口互通。

1.2 部署OSPFv3

1.2.1 在AS100和AS400中部署OSPFv3,进程1,RID使用Loopback0地址。
1.2.2 全部划入区域0
1.2.3 与其他AS互联的接口不运行OSPFv3。
1.2.4 确认OSPFv3邻居关系。
1.2.5 确认环回口互通。

二、部署BGP

2.1 部署EBGP

2.1.1 如图所示,配置各AS之间的EBGP邻居关系。
2.1.2 Router-id使用Loopback0地址。
2.1.2 使用物理接口建立邻居。
2.1.3 同时建立IPv4和IPv6邻居。

2.2 部署IBGP

2.2.1 在AS100和AS400中部署IBGP
2.2.2 Router-ID使用Loopback0地址。
2.2.2 使用Loopback0建立邻居。
2.2.3 同时建立IPv4和IPv6邻居,必要时修改下一跳为本地。
2.2.4 确认各设备的邻居关系。

2.3 宣告路由

2.3.1 在R1上使用BGP宣告Loopback10的IPv4和IPv6网段。
2.3.2 在R7上使用BGP宣告Loopback10的IPv4和IPv6网段。
2.3.3 确认R1和R7可以使用IPv4和IPv6通信。

三、部署策略

3.1 PrefVal

3.1.1 确认R1去往10.7.7.0/24和2000:7::/64的最佳下一跳为R2,分析原因。
3.1.2 修改PrefVal,使得R1去往2000:7::/64的最佳下一跳为R3。
3.1.3 使用ipv6前缀列表,名称为7,index 10。
3.1.4 使用路由策略,名称为fromR3,node 10修改PrefVal为3,node 100 允许其他路由。
3.1.5 在R1与对等体R3的输入策略中调用。
3.1.6 确认策略生效。

3.2 Local_Pref

3.2.1 确认R1去往2000:17::/64的最佳下一跳为R2。
3.2.2 R3修改Local_Pref,让R1去往10.7.7.0/24和2000:17::/64都走R3。
3.2.3 ipv4前缀列表匹配10.7.7.0/24,名称7,index 10
3.2.4 ipv6前缀列表匹配2000:17::/64,名称17,index 10
3.2.5 路由策略toR1v4,node 10修改ipv4路由Local_Pref为200,node 100允许其他路由。
3.2.6 路由策略toR1v6,node 10 修改ipv6路由Local_Pref为200,node 100允许其他路由。
3.2.7 在R3与对等体R1的输出策略中调用。
3.2.8 确认策略生效

3.3 MED

3.3.1 查看R5去往AS100的选路,分析目前网络存在的问题。
3.3.2 R2修改MED,影响R5去往AS100选路走R3。
3.3.3 ipv4前缀列表匹配10.1.1.0/24,名称1,index 10
3.3.4 ipv6前缀列表匹配2000:1::/64,名称1,index 10
3.3.5 路由策略toR5v4,node 10修改ipv4路由MED为100,node 100允许其他路由。
3.3.6 路由策略toR5v6,node 10修改ipv6路由MED为100,node 100允许其他路由。
3.3.7 在R2与对等体R5的输出策略中调用。

3.4 AS-path

3.4.1 查看R6去往AS100的选路,分析网络中存在的问题。
3.4.2 AS200的R4上增加AS-path,使得R6选路走AS300。
3.4.3 使用AS-path过滤工具,名称AS100,匹配起源于AS 100的路由。
3.4.4 路由策略名称toR6,node 10,所有起源于AS100的路由都增加AS 4000。
node 100 允许其他路由且不做修改。
3.4.5 在R4与对等体R6的输出策略中调用。
3.4.6 确认策略生效

3.5 Load-balance

3.5.1 在AS500中的R8上查看去往AS100的BGP路由,发现AS-path中没有AS4000,分析原因。
3.5.2 R8开启负载均衡,使得全局路由表中去往AS100的路由有两个下一跳。

四、代码

<R1>dis cu
[V200R003C00]
#
 sysname R1
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
ipv6 
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
ospfv3 1
 router-id 1.1.1.1
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ipv6 enable 
 ip address 12.1.1.1 255.255.255.0 
 ipv6 address auto link-local
 ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/1
 ipv6 enable 
 ip address 13.1.1.1 255.255.255.0 
 ipv6 address auto link-local
 ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/2
 ipv6 enable 
 ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
 ipv6 enable 
 ip address 1.1.1.1 255.255.255.255 
 ipv6 address 2000::1/128 
 ospfv3 1 area 0.0.0.0
#
interface LoopBack10
 ipv6 enable 
 ip address 10.1.1.1 255.255.255.0 
 ipv6 address 2000:1::1/64 
 ospfv3 1 area 0.0.0.0
#
bgp 100
 router-id 1.1.1.1
 peer 2.2.2.2 as-number 100 
 peer 2.2.2.2 connect-interface LoopBack0
 peer 3.3.3.3 as-number 100 
 peer 3.3.3.3 connect-interface LoopBack0
 peer 2000::2 as-number 100 
 peer 2000::2 connect-interface LoopBack0
 peer 2000::3 as-number 100 
 peer 2000::3 connect-interface LoopBack0
 #
 ipv4-family unicast
  undo synchronization
  network 10.1.1.0 255.255.255.0 
  peer 2.2.2.2 enable
  peer 3.3.3.3 enable
 #
 ipv6-family unicast
  undo synchronization
  network 2000:1:: 64 
  peer 2000::2 enable
  peer 2000::3 enable
  peer 2000::3 route-policy fromR3 import
#
ospf 1 router-id 1.1.1.1 
 area 0.0.0.0 
  network 1.1.1.1 0.0.0.0 
  network 10.0.1.1 0.0.0.0 
  network 12.1.1.1 0.0.0.0 
  network 13.1.1.1 0.0.0.0 
#
route-policy fromR3 permit node 10 
 if-match ipv6 address prefix-list 7 
 apply preferred-value 3
#
route-policy fromR3 permit node 100 
#
ip ipv6-prefix 7 index 10 permit 2000:7:: 64
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R2>dis cu
[V200R003C00]
#
 sysname R2
#
 board add 0/1 1GEC 
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
ipv6 
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
ospfv3 1
 router-id 2.2.2.2
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ipv6 enable 
 ip address 12.1.1.2 255.255.255.0 
 ipv6 address auto link-local
 ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/1
 ipv6 enable 
 ip address 23.1.1.2 255.255.255.0 
 ipv6 address auto link-local
 ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/2
 ipv6 enable 
 ip address 25.1.1.2 255.255.255.0 
 ipv6 address 2000:25::2/64 
 ipv6 address auto link-local
#
interface GigabitEthernet1/0/0
 ipv6 enable 
 ip address 24.1.1.2 255.255.255.0 
 ipv6 address 2000:24::2/64 
#
interface NULL0
#
interface LoopBack0
 ipv6 enable 
 ip address 2.2.2.2 255.255.255.255 
 ipv6 address 2000::2/128 
 ospfv3 1 area 0.0.0.0
#
bgp 100
 router-id 2.2.2.2
 peer 1.1.1.1 as-number 100 
 peer 1.1.1.1 connect-interface LoopBack0
 peer 3.3.3.3 as-number 100 
 peer 3.3.3.3 connect-interface LoopBack0
 peer 24.1.1.4 as-number 200 
 peer 25.1.1.5 as-number 300 
 peer 2000::1 as-number 100 
 peer 2000::1 connect-interface LoopBack0
 peer 2000::3 as-number 100 
 peer 2000::3 connect-interface LoopBack0
 peer 2000:24::4 as-number 200 
 peer 2000:25::5 as-number 300 
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 1.1.1.1 next-hop-local 
  peer 3.3.3.3 enable
  peer 3.3.3.3 next-hop-local 
  peer 24.1.1.4 enable
  peer 25.1.1.5 enable
  peer 25.1.1.5 route-policy toR5v4 export
 #
 ipv6-family unicast
  undo synchronization
  peer 2000::1 enable
  peer 2000::1 next-hop-local 
  peer 2000::3 enable
  peer 2000::3 next-hop-local 
  peer 2000:24::4 enable
  peer 2000:25::5 enable
  peer 2000:25::5 route-policy toR5v6 export
#
ospf 1 router-id 2.2.2.2 
 area 0.0.0.0 
  network 2.2.2.2 0.0.0.0 
  network 12.1.1.2 0.0.0.0 
  network 23.1.1.2 0.0.0.0 
#
route-policy toR5v4 permit node 10 
 if-match ip-prefix 1 
 apply cost 100 
#
route-policy toR5v4 permit node 100 
#
route-policy toR5v6 permit node 10 
 if-match ipv6 address prefix-list 1 
 apply cost 100 
#
route-policy toR5v6 permit node 100 
#
ip ip-prefix 1 index 10 permit 10.1.1.0 24
#
ip ipv6-prefix 1 index 10 permit 2000:1:: 64
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R3>dis cu
[V200R003C00]
#
 sysname R3
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
ipv6 
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
ospfv3 1
 router-id 3.3.3.3
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ipv6 enable 
 ip address 13.1.1.3 255.255.255.0 
 ipv6 address auto link-local
 ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/1
 ipv6 enable 
 ip address 23.1.1.3 255.255.255.0 
 ipv6 address auto link-local
 ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/2
 ipv6 enable 
 ip address 35.1.1.3 255.255.255.0 
 ipv6 address 2000:35::3/64 
 ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
 ipv6 enable 
 ip address 3.3.3.3 255.255.255.255 
 ipv6 address 2000::3/128 
 ospfv3 1 area 0.0.0.0
#
bgp 100
 router-id 3.3.3.3
 peer 1.1.1.1 as-number 100 
 peer 1.1.1.1 connect-interface LoopBack0
 peer 2.2.2.2 as-number 100 
 peer 2.2.2.2 connect-interface LoopBack0
 peer 35.1.1.5 as-number 300 
 peer 2000::1 as-number 100 
 peer 2000::1 connect-interface LoopBack0
 peer 2000::2 as-number 100 
 peer 2000::2 connect-interface LoopBack0
 peer 2000:35::5 as-number 300 
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 1.1.1.1 route-policy toR1v4 export
  peer 1.1.1.1 next-hop-local 
  peer 2.2.2.2 enable
  peer 2.2.2.2 next-hop-local 
  peer 35.1.1.5 enable
 #
 ipv6-family unicast
  undo synchronization
  peer 2000::1 enable
  peer 2000::1 route-policy toR1v6 export
  peer 2000::1 next-hop-local 
  peer 2000::2 enable
  peer 2000::2 next-hop-local 
  peer 2000:35::5 enable
#
ospf 1 router-id 3.3.3.3 
 area 0.0.0.0 
  network 3.3.3.3 0.0.0.0 
  network 13.1.1.3 0.0.0.0 
  network 23.1.1.3 0.0.0.0 
#
route-policy toR1v4 permit node 10 
 if-match ip-prefix 7 
 apply local-preference 200 
#
route-policy toR1v4 permit node 100 
#
route-policy toR1v6 permit node 10 
 if-match ipv6 address prefix-list 17 
 apply local-preference 200 
#
route-policy toR1v6 permit node 100 
#
ip ip-prefix 7 index 10 permit 10.7.7.0 24
#
ip ipv6-prefix 17 index 10 permit 2000:17:: 64
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R4>dis cu
[V200R003C00]
#
 sysname R4
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
ipv6 
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ipv6 enable 
 ip address 24.1.1.4 255.255.255.0 
 ipv6 address 2000:24::4/64 
#
interface GigabitEthernet0/0/1
 ipv6 enable 
 ip address 46.1.1.4 255.255.255.0 
 ipv6 address 2000:46::4/64 
 ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
 ipv6 enable 
 ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
 ipv6 enable 
 ip address 4.4.4.4 255.255.255.255 
 ipv6 address 2000::4/128 
#
bgp 200
 router-id 4.4.4.4
 peer 24.1.1.2 as-number 100 
 peer 46.1.1.6 as-number 400 
 peer 2000:24::2 as-number 100 
 peer 2000:46::6 as-number 400 
 #
 ipv4-family unicast
  undo synchronization
  peer 24.1.1.2 enable
  peer 46.1.1.6 enable
  peer 46.1.1.6 route-policy toR6 export
 #
 ipv6-family unicast
  undo synchronization
  peer 2000:24::2 enable
  peer 2000:46::6 enable
  peer 2000:46::6 route-policy toR6 export
#
route-policy toR6 permit node 10 
 if-match as-path-filter AS100 
 apply as-path 4000 additive
#
route-policy toR6 permit node 100 
#
ip as-path-filter AS100 permit _100$
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R5>dis cu
[V200R003C00]
#
 sysname R5
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
ipv6 
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ipv6 enable 
 ip address 35.1.1.5 255.255.255.0 
 ipv6 address 2000:35::5/64 
 ipv6 address auto link-local
#
interface GigabitEthernet0/0/1
 ipv6 enable 
 ip address 56.1.1.5 255.255.255.0 
 ipv6 address 2000:56::5/64 
 ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
 ipv6 enable 
 ip address 25.1.1.5 255.255.255.0 
 ipv6 address 2000:25::5/64 
 ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
 ip address 5.5.5.5 255.255.255.255 
#
bgp 300
 router-id 5.5.5.5
 peer 25.1.1.2 as-number 100 
 peer 35.1.1.3 as-number 100 
 peer 56.1.1.6 as-number 400 
 peer 2000:25::2 as-number 100 
 peer 2000:35::3 as-number 100 
 peer 2000:56::6 as-number 400 
 #
 ipv4-family unicast
  undo synchronization
  peer 25.1.1.2 enable
  peer 35.1.1.3 enable
  peer 56.1.1.6 enable
 #
 ipv6-family unicast
  undo synchronization
  peer 2000:25::2 enable
  peer 2000:35::3 enable
  peer 2000:56::6 enable
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R6>dis cu
[V200R003C00]
#
 sysname R6
#
 board add 0/1 1GEC 
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
ipv6 
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
ospfv3 1
 router-id 6.6.6.6
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ipv6 enable 
 ip address 56.1.1.6 255.255.255.0 
 ipv6 address 2000:56::6/64 
 ipv6 address auto link-local
#
interface GigabitEthernet0/0/1
 ipv6 enable 
 ip address 46.1.1.6 255.255.255.0 
 ipv6 address 2000:46::6/64 
 ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
 ipv6 enable 
 ip address 67.1.1.6 255.255.255.0 
 ipv6 address auto link-local
 ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet1/0/0
 ipv6 enable 
 ip address 68.1.1.6 255.255.255.0 
 ipv6 address 2000:68::6/64 
 ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
 ipv6 enable 
 ip address 6.6.6.6 255.255.255.255 
 ipv6 address 2000::6/128 
 ospfv3 1 area 0.0.0.0
#
bgp 400
 router-id 6.6.6.6
 peer 7.7.7.7 as-number 400 
 peer 7.7.7.7 connect-interface LoopBack0
 peer 46.1.1.4 as-number 200 
 peer 56.1.1.5 as-number 300 
 peer 68.1.1.8 as-number 500 
 peer 2000::7 as-number 400 
 peer 2000::7 connect-interface LoopBack0
 peer 2000:46::4 as-number 200 
 peer 2000:56::5 as-number 300 
 peer 2000:68::8 as-number 500 
 #
 ipv4-family unicast
  undo synchronization
  peer 7.7.7.7 enable
  peer 7.7.7.7 next-hop-local 
  peer 46.1.1.4 enable
  peer 56.1.1.5 enable
  peer 68.1.1.8 enable
 #
 ipv6-family unicast
  undo synchronization
  peer 2000::7 enable
  peer 2000::7 next-hop-local 
  peer 2000:46::4 enable
  peer 2000:56::5 enable
  peer 2000:68::8 enable
#
ospf 1 router-id 6.6.6.6 
 area 0.0.0.0 
  network 6.6.6.6 0.0.0.0 
  network 67.1.1.6 0.0.0.0 
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R7>dis cu
[V200R003C00]
#
 sysname R7
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
ipv6 
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
ospfv3 1
 router-id 7.7.7.7
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ipv6 enable 
 ip address 67.1.1.7 255.255.255.0 
 ipv6 address auto link-local
 ospfv3 1 area 0.0.0.0
#
interface GigabitEthernet0/0/1
 ipv6 enable 
 ip address 78.1.1.7 255.255.255.0 
 ipv6 address 2000:78::7/64 
 ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
 ipv6 enable 
 ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
 ipv6 enable 
 ip address 7.7.7.7 255.255.255.255 
 ipv6 address 2000::7/128 
 ospfv3 1 area 0.0.0.0
#
interface LoopBack10
 ipv6 enable 
 ip address 10.7.7.7 255.255.255.0 
 ipv6 address 2000:7::7/64 
 ipv6 address 2000:17::7/64 
 ospfv3 1 area 0.0.0.0
#
bgp 400
 router-id 7.7.7.7
 peer 6.6.6.6 as-number 400 
 peer 6.6.6.6 connect-interface LoopBack0
 peer 78.1.1.8 as-number 500 
 peer 2000::6 as-number 400 
 peer 2000::6 connect-interface LoopBack0
 peer 2000:78::8 as-number 500 
 #
 ipv4-family unicast
  undo synchronization
  network 10.7.7.0 255.255.255.0 
  peer 6.6.6.6 enable
  peer 78.1.1.8 enable
 #
 ipv6-family unicast
  undo synchronization
  network 2000:7:: 64 
  network 2000:17:: 64 
  peer 2000::6 enable
  peer 2000:78::8 enable
#
ospf 1 router-id 7.7.7.7 
 area 0.0.0.0 
  network 7.7.7.7 0.0.0.0 
  network 10.7.7.7 0.0.0.0 
  network 67.1.1.7 0.0.0.0 
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
<R8>dis cu
[V200R003C00]
#
 sysname R8
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
ipv6 
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ipv6 enable 
 ip address 68.1.1.8 255.255.255.0 
 ipv6 address 2000:68::8/64 
 ipv6 address auto link-local
#
interface GigabitEthernet0/0/1
 ipv6 enable 
 ip address 78.1.1.8 255.255.255.0 
 ipv6 address 2000:78::8/64 
 ipv6 address auto link-local
#
interface GigabitEthernet0/0/2
 ipv6 enable 
 ipv6 address auto link-local
#
interface NULL0
#
interface LoopBack0
 ip address 8.8.8.8 255.255.255.255 
#
bgp 500
 router-id 8.8.8.8
 peer 68.1.1.6 as-number 400 
 peer 78.1.1.7 as-number 400 
 peer 2000:68::6 as-number 400 
 peer 2000:78::7 as-number 400 
 #
 ipv4-family unicast
  undo synchronization
  maximum load-balancing 2
  peer 68.1.1.6 enable
  peer 78.1.1.7 enable
 #
 ipv6-family unicast
  undo synchronization
  maximum load-balancing 2
  peer 2000:68::6 enable
  peer 2000:78::7 enable
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
  • 0
    点赞
  • 3
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

土豆aaa

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值