BGP的综合应用

要求：

1、R2-7每台路由器均存在一个环回接口用于建立邻居；同时还存在一个环回来代表连接用户的接口；最终这些连接用户的接口网络需要可以和R1/8的环回通讯
2、AS2网段地址172.16. 0.0/16减少路由条目数量

拓扑图：

 IP地址规划

首先把172.16.0.0/16划分出8个子网掩码

把第一个子网掩码172.16.0.0/19划分出6个32位的子网掩码作为RA2/7的环回，着六个环回作为BGP协议的源IP地址：

172.16.0.1/32
172.16.0.2/32
172.16.0.3/32
172.16.0.4/32
172.16.0.5/32
172.16.0.6/32

把这个子网掩码172.16.32.0/19划分6个30位的子网掩码作为为AR2/7相连的IP
172.16.32.0/30
172.16.32.4/30     
172.16.32.8/30
172.16.32.12/30
172.16.32.16/30
172.16.32.20/30

剩下的这六个子网掩码作为AR2/7这几个路由的用户网段，这里是模拟实验可以把这几个网段模拟成环回

AR2:172.16.64.0/19
AR3:172.16.96.0/19
AR4:172.16.128.0/19
AR5:172.16.160.0/19
AR6:172.16.192.0/19
AR7:172.16.224.0/19

AR1模拟为AS1区，AR2/7模拟为AS2区其中把AR2/4划为一个联邦，编号为64512，AR4/7划为一个联邦，编号为64513，AR3为AS3区域。

AR1的环回：1.1.1.1 32   10.1.1.1 24

AR3的环回：8.8.8.8 32   20.1.1.1 24

配置展示

AR1
interface GigabitEthernet0/0/0
 ip address 12.1.1.1 255.255.255.0
interface LoopBack0
 ip address 1.1.1.1 255.255.255.255                                                                                              interface LoopBack1
 ip address 10.1.1.1 255.255.255.0

bgp 1（使用环回通过EBGP建立AS区域之间的邻居关系）
 peer 172.16.0.1 as-number 2
 peer 172.16.0.1 ebgp-max-hop 2
 peer 172.16.0.1 connect-interface LoopBack0
  network 10.1.1.0 255.255.255.0
  peer 172.16.0.1 enable

ip route-static 172.16.0.1 255.255.255.255 12.1.1.2（通过静态路由使AS1与AS2区域的源IP建立联系）

AR2

interface GigabitEthernet0/0/0
 ip address 12.1.1.2 255.255.255.0
 rip metricin ip-prefix 1 2
interface GigabitEthernet0/0/1
 ip address 172.16.32.1 255.255.255.252
interface GigabitEthernet0/0/2
 ip address 172.16.32.17 255.255.255.252
interface LoopBack0
 ip address 172.16.0.1 255.255.255.255
interface LoopBack1
 ip address 172.16.65.0 255.255.224.0

bgp 64512
 confederation id 2   （  在联邦里宣告自己大的区域AS2）                
 confederation peer-as 64513（联邦之间建立关系时也要指出该联邦的编号）
 peer 1.1.1.1 as-number 1
 peer 1.1.1.1 ebgp-max-hop 2
 peer 1.1.1.1 connect-interface LoopBack0
 peer 172.16.0.2 as-number 64512
 peer 172.16.0.2 connect-interface LoopBack0
 peer 172.16.0.4 as-number 64513
 peer 172.16.0.4 ebgp-max-hop 2
 peer 172.16.0.4 connect-interface LoopBack0
 peer 1.1.1.1 enable                     
 peer 172.16.0.2 enable
 peer 172.16.0.2 next-hop-local
 peer 172.16.0.4 enable

宣告AR2/7上的用户网段，使其它AS区域的宣告的网段能够进行访问
  aggregate 172.16.64.0 255.255.240.0
  network 172.16.64.0 255.255.224.0
  network 172.16.65.0 255.255.255.255
  network 172.16.96.0 255.255.224.0
  network 172.16.97.0 255.255.255.255
  network 172.16.129.0 255.255.255.255
  network 172.16.161.0 255.255.255.255
  network 172.16.193.0 255.255.255.255
  network 172.16.225.0 255.255.255.255
 

通过ospf协议使AS2区域的网络全网可达，使AR2能够学习AS2区域的所有路由，方便AR2宣告所有的 用户网段。也让整个AS2区域的路由通过IBGP协议建立关系，防止路由黑洞。

ospf 1 router-id 2.2.2.2
 area 0.0.0.0
  network 172.16.0.1 0.0.0.0
  network 172.16.32.0 0.0.0.3
  network 172.16.32.17 0.0.0.0
  network 172.16.64.0 0.0.31.255

ip route-static 1.1.1.1 255.255.255.255 12.1.1.1

AR3

interface GigabitEthernet0/0/0
 ip address 172.16.32.2 255.255.255.252
interface GigabitEthernet0/0/1
 ip address 172.16.32.5 255.255.255.252
interface LoopBack0
 ip address 172.16.0.2 255.255.255.255
interface LoopBack1
 ip address 172.16.97.0 255.255.224.0

bgp 64512（IBGP）
 confederation id 2
 peer 172.16.0.1 as-number 64512
 peer 172.16.0.1 connect-interface LoopBack0
 peer 172.16.0.3 as-number 64512
 peer 172.16.0.3 connect-interface LoopBack0
 peer 172.16.0.1 enable
 peer 172.16.0.1 next-hop-local
 peer 172.16.0.3 enable
 peer 172.16.0.3 reflect-client（路由反射器，宣告AR4为客户端使AR4能够搬运AR3上搬运AR2的路由条目）
 peer 172.16.0.3 next-hop-local

ospf 1 router-id 3.3.3.3
 area 0.0.0.0
  network 172.16.0.2 0.0.0.0
  network 172.16.32.2 0.0.0.0
  network 172.16.32.5 0.0.0.0
  network 172.16.96.0 0.0.31.255

AR4

interface GigabitEthernet0/0/0
 ip address 172.16.32.6 255.255.255.252
interface GigabitEthernet0/0/1
 ip address 172.16.32.21 255.255.255.252
interface LoopBack0
 ip address 172.16.0.3 255.255.255.255
interface LoopBack1
 ip address 172.16.129.0 255.255.224.0

bgp 64512
 confederation id 2
 confederation peer-as 64513
 peer 172.16.0.2 as-number 64512          
 peer 172.16.0.2 connect-interface LoopBack0
 peer 172.16.0.6 as-number 64513
 peer 172.16.0.6 ebgp-max-hop 2
 peer 172.16.0.6 connect-interface LoopBack0
 peer 172.16.0.2 enable
 peer 172.16.0.2 next-hop-local
 peer 172.16.0.6 enable

ospf 1 router-id 4.4.4.4
 area 0.0.0.0
  network 172.16.0.3 0.0.0.0
  network 172.16.32.6 0.0.0.0
  network 172.16.32.21 0.0.0.0
  network 172.16.128.0 0.0.31.255

AR5
interface GigabitEthernet0/0/0
 ip address 172.16.32.18 255.255.255.252
interface GigabitEthernet0/0/1
 ip address 172.16.32.9 255.255.255.252
interface LoopBack0
 ip address 172.16.0.4 255.255.255.255
interface LoopBack1
 ip address 172.16.161.0 255.255.224.0

bgp 64513
 confederation id 2
 confederation peer-as 64512
 peer 172.16.0.1 as-number 64512          
 peer 172.16.0.1 ebgp-max-hop 2
 peer 172.16.0.1 connect-interface LoopBack0
 peer 172.16.0.5 as-number 64513
 peer 172.16.0.5 connect-interface LoopBack0
 peer 172.16.0.1 enable
 peer 172.16.0.5 enable
 peer 172.16.0.5 next-hop-local

ospf 1 router-id 5.5.5.5
 area 0.0.0.0
  network 172.16.0.4 0.0.0.0
  network 172.16.32.9 0.0.0.0
  network 172.16.32.18 0.0.0.0
  network 172.16.160.0 0.0.31.255

AR6

interface GigabitEthernet0/0/0
 ip address 172.16.32.10 255.255.255.252
interface GigabitEthernet0/0/1
 ip address 172.16.32.13 255.255.255.252
interface LoopBack0
 ip address 172.16.0.5 255.255.255.255
interface LoopBack1
 ip address 172.16.193.0 255.255.224.0

bgp 64513
 confederation id 2
 peer 172.16.0.4 as-number 64513
 peer 172.16.0.4 connect-interface LoopBack0
 peer 172.16.0.6 as-number 64513
 peer 172.16.0.6 connect-interface LoopBack0
 peer 172.16.0.4 enable
 peer 172.16.0.4 next-hop-local
 peer 172.16.0.6 enable
 peer 172.16.0.6 reflect-client
 peer 172.16.0.6 next-hop-local

ospf 1 router-id 6.6.6.6
 area 0.0.0.0
  network 172.16.0.5 0.0.0.0
  network 172.16.32.10 0.0.0.0
  network 172.16.32.13 0.0.0.0
  network 172.16.192.0 0.0.31.255

AR7

interface GigabitEthernet0/0/0
 ip address 172.16.32.14 255.255.255.252
interface GigabitEthernet0/0/1
 ip address 172.16.32.22 255.255.255.252
interface GigabitEthernet0/0/2
 ip address 78.1.1.1 255.255.255.0
interface LoopBack0
 ip address 172.16.0.6 255.255.255.255
interface LoopBack1
 ip address 172.16.225.0 255.255.224.0

bgp 64513
 confederation id 2
 confederation peer-as 64512              
 peer 8.8.8.8 as-number 3
 peer 8.8.8.8 ebgp-max-hop 2
 peer 8.8.8.8 connect-interface LoopBack0
 peer 172.16.0.3 as-number 64512
 peer 172.16.0.3 ebgp-max-hop 2
 peer 172.16.0.3 connect-interface LoopBack0
 peer 172.16.0.5 as-number 64513
 peer 172.16.0.5 connect-interface LoopBack0
 peer 8.8.8.8 enable
 peer 172.16.0.3 enable
 peer 172.16.0.5 enable
 peer 172.16.0.5 next-hop-local

ospf 1 router-id 7.7.7.7
 area 0.0.0.0
  network 172.16.0.6 0.0.0.0
  network 172.16.32.14 0.0.0.0
  network 172.16.32.22 0.0.0.0
  network 172.16.224.0 0.0.31.255

ip route-static 8.8.8.8 255.255.255.255 78.1.1.2

AR8
interface GigabitEthernet0/0/0
 ip address 78.1.1.2 255.255.255.0

interface LoopBack0
 ip address 8.8.8.8 255.255.255.255

bgp 3
 peer 172.16.0.6 as-number 2
 peer 172.16.0.6 ebgp-max-hop 2
 peer 172.16.0.6 connect-interface LoopBack0
network 20.1.1.0 255.255.255.0
peer 172.16.0.6 enable

ip route-static 172.16.0.6 255.255.255.255 78.1.1.1

测试