用MPLS解决BGP路由黑洞

1,R1/2/3/4/5/9/12/13/14/15运行BGP邻居,R4/5存在BGP邻居,R12/13运行BGP邻居,R4/5/12/13只能与R9建立BGP邻居

2.ospf分三个区域

3.所有设备均可访问

4.选路最佳

拓扑如下

AS1地址为192.168.1.0/24,划分完之后都是192.168.1.x/27(上面有标注)

AS2地址为172.16.0.0/16,划分完之后基本都是172.16.x.1/21,中间area1掩码为22位

AS3地址为,14.14.14.14/24

AS4地址为,15.15.15.15/24

一、

先讲AS2内部ospf建立起来

R4/5/6/7是area0

R6/7/8/9/10是area1

R10/11/12/13是area2

建立过程不演示了,R10与R11启用两个ospf进程,进行双向重发布

R10

ospf 1 router-id 10.10.10.10 
 import-route ospf 2
 area 0.0.0.1 
  network 172.16.72.0 0.0.7.255 
  network 172.16.112.0 0.0.3.255 

ospf 2 router-id 10.10.10.10 
 import-route ospf 1
 area 0.0.0.2 
  network 172.16.160.0 0.0.7.255 

R11

ospf 1 router-id 11.11.11.11 
 import-route ospf 2
 area 0.0.0.1 
  network 172.16.88.0 0.0.7.255 
  network 172.16.128.0 0.0.3.255 
#
ospf 2 router-id 11.11.11.11 
 import-route ospf 1
 area 0.0.0.2 
  network 172.16.168.0 0.0.7.255

二、

将AS1内部建立RIP协议

建立过程也不演示了

三、

建立BGP邻居关系

R1

bgp 1
 router-id 1.1.1.1
 peer 192.168.1.33 as-number 1 //跟R2建立邻居
 peer 192.168.1.33 connect-interface LoopBack0
 peer 192.168.1.65 as-number 1 //跟R3建立邻居
 peer 192.168.1.65 connect-interface LoopBack0

R2

bgp 1
 router-id 2.2.2.2
 peer 24.1.1.2 as-number 2 //跟R4建立邻居
 peer 192.168.1.1 as-number 1 //跟R1建立邻居
 peer 192.168.1.1 connect-interface LoopBack0
 peer 192.168.1.65 as-number 1 //跟R3建立邻居
 peer 192.168.1.65 connect-interface LoopBack0

R3

bgp 1
 router-id 3.3.3.3
 peer 35.1.1.2 as-number 2 //跟R5建立邻居
 peer 192.168.1.1 as-number 1 //跟R1建立邻居
 peer 192.168.1.1 connect-interface LoopBack0
 peer 192.168.1.33 as-number 1 //跟R2建立邻居
 peer 192.168.1.33 connect-interface LoopBack0

R4

bgp 2
 router-id 4.4.4.4
 peer 24.1.1.1 as-number 1 //跟R2建立邻居
 peer 172.16.16.1 as-number 2 //跟R5建立邻居
 peer 172.16.16.1 connect-interface LoopBack0
 peer 172.16.80.1 as-number 2 //跟R9建立邻居
 peer 172.16.80.1 connect-interface LoopBack0

R5

bgp 2
 router-id 5.5.5.5
 peer 35.1.1.1 as-number 1 //跟R3建立邻居
 peer 172.16.0.1 as-number 2 //跟R4建立邻居
 peer 172.16.0.1 connect-interface LoopBack0
 peer 172.16.80.1 as-number 2 //跟R9建立邻居
 peer 172.16.80.1 connect-interface LoopBack0

R9

bgp 2
 router-id 9.9.9.9
 peer 9.15.1.2 as-number 4 //跟R15建立邻居
 peer 172.16.0.1 as-number 2 //跟R4建立邻居
 peer 172.16.0.1 connect-interface LoopBack0
 peer 172.16.16.1 as-number 2 //跟R5建立邻居
 peer 172.16.16.1 connect-interface LoopBack0
 peer 172.16.136.1 as-number 2 //跟R12建立邻居
 peer 172.16.136.1 connect-interface LoopBack0
 peer 172.16.144.1 as-number 2 //跟R13建立邻居
 peer 172.16.144.1 connect-interface LoopBack0

R12

bgp 2
 router-id 12.12.12.12
 peer 12.14.1.2 as-number 3 //跟R14建立邻居
 peer 172.16.80.1 as-number 2 //跟R9建立邻居
 peer 172.16.80.1 connect-interface LoopBack0
 peer 172.16.144.1 as-number 2 //跟R13建立邻居
 peer 172.16.144.1 connect-interface LoopBack0

R13

bgp 2
 router-id 13.13.13.13
 peer 13.14.1.2 as-number 3 //跟R14建立邻居
 peer 172.16.80.1 as-number 2 //跟R9建立邻居
 peer 172.16.80.1 connect-interface LoopBack0
 peer 172.16.136.1 as-number 2 //跟R12建立邻居
 peer 172.16.136.1 connect-interface LoopBack0

R14

bgp 3
 router-id 14.14.14.14
 peer 12.14.1.1 as-number 2 //跟R12建立邻居
 peer 13.14.1.1 as-number 2 //跟R13建立邻居

R15

bgp 4
 router-id 15.15.15.15
 peer 9.15.1.1 as-number 2 //跟R9建立邻居

四、

将IGP路由通告进入BGP,并且对AS内不邻居修改下一跳

R2

bgp 1
  network 192.168.1.0 
  peer 192.168.1.1 next-hop-local 
  peer 192.168.1.65 next-hop-local

R3

bgp 1
  network 192.168.1.0 
  peer 192.168.1.1 next-hop-local 
  peer 192.168.1.33 next-hop-local 

R4

bgp 2
  network 172.16.0.0 
  peer 172.16.16.1 next-hop-local 
  peer 172.16.80.1 next-hop-local 

R5

bgp 2
  network 172.16.0.0 
  peer 172.16.0.1 next-hop-local 
  peer 172.16.80.1 next-hop-local

R9

bgp 2
  network 172.16.0.0 
  peer 172.16.0.1 next-hop-local 
  peer 172.16.16.1 next-hop-local 
  peer 172.16.136.1 next-hop-local 
  peer 172.16.144.1 next-hop-local 

R12

bgp 2
  network 172.16.0.0 
  peer 172.16.80.1 next-hop-local 
  peer 172.16.144.1 next-hop-local 

R13

bgp 2
  network 172.16.0.0 
  peer 172.16.80.1 next-hop-local 
  peer 172.16.136.1 next-hop-local 

R14

bgp 3
  network 14.14.14.0 255.255.255.0 

R15

bgp 4
  network 15.15.15.0 255.255.255.0 

五、

解决BGP路由黑洞,在AS2内所有路由器都开启MPLS,在工作在AS内的接口也开启MPLS

拿R2举个例子,剩下的都一样

mpls lsr-id 172.16.0.1 //写环回地址

mpls
 lsp-trigger all 

mpls ldp

interface GigabitEthernet0/0/0
 mpls
 mpls ldp

interface GigabitEthernet0/0/2
 mpls
 mpls ldp

AS1 ping AS4

<Huawei>ping -a 192.168.1.1 15.15.15.15
  PING 15.15.15.15: 56  data bytes, press CTRL_C to break
    Reply from 15.15.15.15: bytes=56 Sequence=1 ttl=251 time=50 ms
    Reply from 15.15.15.15: bytes=56 Sequence=2 ttl=251 time=40 ms
    Reply from 15.15.15.15: bytes=56 Sequence=3 ttl=251 time=60 ms
    Reply from 15.15.15.15: bytes=56 Sequence=4 ttl=251 time=40 ms
    Reply from 15.15.15.15: bytes=56 Sequence=5 ttl=251 time=50 ms

  --- 15.15.15.15 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 40/48/60 ms

六、

AS2内部没有运行BGP的路由器无法访问AS1/3/4,在AS2的边界路由器下放缺省

R4

ospf 1 router-id 4.4.4.4 
 default-route-advertise always

R5

ospf 1 router-id 5.5.5.5 
 default-route-advertise always

R9

ospf 1 router-id 9.9.9.9 
 default-route-advertise always

R12

ospf 2 router-id 12.12.12.12 
 default-route-advertise always

R13

ospf 2 router-id 13.13.13.13 
 default-route-advertise always

内部没有运行BGP的路由器会根据缺省自己选路,不用担心选路

AS1 ping R8

<Huawei>ping -a 192.168.1.1 172.16.64.1
  PING 172.16.64.1: 56  data bytes, press CTRL_C to break
    Reply from 172.16.64.1: bytes=56 Sequence=1 ttl=252 time=40 ms
    Reply from 172.16.64.1: bytes=56 Sequence=2 ttl=252 time=40 ms
    Reply from 172.16.64.1: bytes=56 Sequence=3 ttl=252 time=40 ms
    Reply from 172.16.64.1: bytes=56 Sequence=4 ttl=252 time=40 ms
    Reply from 172.16.64.1: bytes=56 Sequence=5 ttl=252 time=40 ms

  --- 172.16.64.1 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 40/40/40 ms

七、

对于AS1和AS3来说,学到的是汇总路由,BGP协议只会选择一条路由,就会产生选路不佳

R1路由表,只要去AS2就会选择R2,R2也就会选择R4

 *>i  172.16.0.0         192.168.1.33    0          100        0      2i
 * i                     192.168.1.65    0          100        0      2i

所以在R4上将R5/7/9/11/13的明细路由宣告,会携带度量值传递给AS1,这样AS1在选择R5/7/9/11/13会选择R5

R12传递给AS3时同理

R4

bgp 2
  network 172.16.16.1 255.255.255.255 
  network 172.16.24.1 255.255.255.255 
  network 172.16.80.1 255.255.255.255 
  network 172.16.88.1 255.255.255.255 
  network 172.16.144.1 255.255.255.255 

此时查看R1路由表

 *>i  172.16.0.0         192.168.1.33    0          100        0      2i
 * i                     192.168.1.65    0          100        0      2i
 *>i  172.16.0.1/32      192.168.1.33               100        0      2i
 * i                     192.168.1.65               100        0      2i
 *>i  172.16.8.1/32      192.168.1.33               100        0      2i
 * i                     192.168.1.65               100        0      2i
 *>i  172.16.16.1/32     192.168.1.65               100        0      2i
 *>i  172.16.24.1/32     192.168.1.65               100        0      2i
 *>i  172.16.64.1/32     192.168.1.33               100        0      2i
 * i                     192.168.1.65               100        0      2i
 *>i  172.16.72.1/32     192.168.1.33               100        0      2i
 * i                     192.168.1.65               100        0      2i
 *>i  172.16.80.1/32     192.168.1.65               100        0      2i
 *>i  172.16.88.1/32     192.168.1.65               100        0      2i
 *>i  172.16.136.1/32    192.168.1.33               100        0      2i
 * i                     192.168.1.65               100        0      2i
 *>i  172.16.144.1/32    192.168.1.65               100        0      2i

 

 

  • 1
    点赞
  • 5
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值