BGP策略实验

一、拓扑图

二、实验要求

三、基本配置

1.IP配置

R1:int g 0/0/0

[R1-G0/0/0]ip address 12.0.0.1 24

[R1-G0/0/0]int g0/0/1

[R1-G0/0/1]ip address 13.0.0.1 24

[R1-G0/0/1]int g0/0/2

[R1-G0/0/2]ip address 15.0.0.1 24

int l 0

[R1-Loopback0]ip address 1.1.1.1 32

[R1-Loopback0]int l 1

[R1-Loopback1]ip address 192.168.100.1 24

[R1-Loopback1]ospf network broadcast

R2:int g 0/0/0

[R2-G0/0/0]ip address 24.0.0.2 24

[R2-G0/0/0]int g0/0/1

[R2-G0/0/1]ip address 12.0.0.2 24

int l 0

[R2-Loopback0]ip address 2.2.2.2 32

[R2-Loopback0]int l 1

[R2-Loopback1]ip address 192.168.20.1 24

[R2-Loopback1]ospf network broadcast

R3:int g 0/0/0

[R3-G0/0/0]ip address 34.0.0.3 24

[R3-G0/0/0]int g0/0/1

[R3-G0/0/1]ip address 13.0.0.3 24

int l 0

[R3-Loopback0]ip address 3.3.3.3 32

[R3-Loopback0]int l 1

[R3-Loopback1]ip address 192.168.30.1 24

[R3-Loopback1]ospf network broadcast

R4:int g 0/0/0

[R4-G0/0/0]ip address 24.0.0.4 24

[R4-G0/0/0]int g0/0/1

[R4-G0/0/1]ip address 34.0.0.4 24

int l 0

[R4-Loopback0]ip address 192.168.1.1 24

[R4-Loopback0]int l 1

[R4-Loopback1]ip address 192.168.2.1 24

[R4-Loopback1]int l 2

[R4-Loopback2]ip address 192.168.3.1 24

R5:int g 0/0/0

[R5-G0/0/0]ip address 15.0.0.5 24

int l 0

[R5-Loopback0]ip address 192.168.10.1 24

[R5-Loopback0]int l 1

[R5-Loopback1]ip address 192.168.11.1 24

[R5-Loopback1]int l 2

[R5-Loopback2]ip address 192.168.12.1 24

2.启动ospf协议

R1:ospf 1 router-id 1.1.1.1

[R1-ospf-1]area 0

[R1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0

[R1-ospf-1-area-0.0.0.0]network 192.168.100.1 0.0.0.0

[R1-ospf-1-area-0.0.0.0]network 12.0.0.1 0.0.0.0

[R1-ospf-1-area-0.0.0.0]network 13.0.0.1 0.0.0.0

R2:ospf 1 router-id 2.2.2.2

[R2-ospf-1]area 0

[R2-ospf-1-area-0.0.0.0]network 12.0.0.2 0.0.0.0

[R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0

[R2-ospf-1-area-0.0.0.0]network 192.168.20.1 0.0.0.0

R3:ospf 1 router-id 3.3.3.3

[R3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0

[R3-ospf-1-area-0.0.0.0]network 192.168.30.1 0.0.0.0

[R3-ospf-1-area-0.0.0.0]network 13.0.0.3 0.0.0.0

3.启用bgp协议

R1:bgp 123

[R1-bgp]router-id 1.1.1.1

[R1-bgp]peer 15.0.0.5 as-number 500

[R1-bgp]peer 2.2.2.2 as-number 123

[R1-bgp]peer 2.2.2.2 connect-interface Loopback 0

[R1-bgp]peer 2.2.2.2 next-hop-local

[R1-bgp]peer 3.3.3.3 as-number 123

[R1-bgp]peer 3.3.3.3 connect-interface Loopback 0

[R1-bgp]peer 3.3.3.3 next-hop-local

R2:bgp 123

[R2-bgp]router-id 2.2.2.2

[R2-bgp]peer 24.0.0.4 as-number 400

[R2-bgp]peer 1.1.1.1 as-number 123

[R2-bgp]peer 1.1.1.1 connect-interface Loopback 0

[R2-bgp]peer 1.1.1.1 next-hop-local

R3:bgp 123

[R3-bgp]router-id 3.3.3.3

[R3-bgp]peer 34.0.0.4 as-number 400

[R3-bgp]peer 1.1.1.1 as-number 123

[R3-bgp]peer 1.1.1.1 connect-interface Loopback 0

[R3-bgp]peer 1.1.1.1 next-hop-local

R4:bgp 400

[R4-bgp]router-id 4.4.4.4

[R4-bgp]peer 24.0.0.2 as-number 123

[R4-bgp]peer 34.0.0.3 as-number 123

R5:bgp 500

[R5-bgp]router-id 5.5.5.5

[R5-bgp]peer 15.0.0.1 as-number 123

4.宣告路由

R4:bgp 400

[R4-bgp]network 192.168.1.0 24

[R4-bgp]network 192.168.2.0 24

[R4-bgp]network 192.168.3.0 24

R5:bgp 500

[R5-bgp]network 192.168.10.0 24

[R5-bgp]network 192.168.11.0 24

[R5-bgp]network 192.168.12.0 24

R1:bgp 123

[R1-bgp]network 192.168.20.0 24

[R1-bgp]network 192.168.30.0 24

[R1-bgp]network 192.168.100.0 24

R2:bgp 123

[R2-bgp]network 192.168.20.0 24

[R2-bgp]network 192.168.30.0 24

[R2-bgp]network 192.168.100.0 24

R3:bgp 123

[R3-bgp]network 192.168.20.0 24

[R3-bgp]network 192.168.30.0 24

[R3-bgp]network 192.168.100.0 24

5.抓取流量

R4:ip ip-prefix aa permit 192.168.10.0 24

router-policy aa permit node 10

[R4-router-policy]if-match ip-prefix aa 

[R4-router-policy]apply preferred-value 100

router-policy aa permit node 20

bgp 400

[R4-bgp]peer 24.0.0.2 router-policy aa import

ip ip-prefix bb permit 192.168.11.0 24

router-policy aa permit node 15

[R4-router-policy]if-match ip-prefix bb

[R4-router-policy]apply as-path 123 123 500 overwrite

[R4-router-policy]q

R2:ip ip-prefix aa permit 192.168.12.0 24

router-policy aa permit node 10

[R2-router-policy]if-match ip-prefix aa 

[R2-router-policy]apply cost 20

router-policy aa permit node 20

bgp 123

[R2-bgp]peer 24.0.0.4 router-policy aa export

R3:ip ip-prefix aa permit 192.168.12.0 24

router-policy aa permit node 10

[R3-router-policy]if-match ip-prefix aa 

[R3-router-policy]apply cost 20

router-policy aa permit node 20

bgp 123

[R3-bgp]peer 34.0.0.4 router-policy aa export

R1:ip ip-prefix aa permit 192.168.1.0 24

ip ip-prefix bb permit 192.168.2.0 24

router-policy aa permit node 10

[R1-router-policy]if-match ip-prefix aa 

[R1-router-policy]apply local-preference 200

router-policy aa permit node 20

router-policy bb permit node 10

[R1-router-policy]if-match ip-prefix bb 

[R1-router-policy]apply local-preference 200

router-policy bb permit node 20

bgp 123

[R1-bgp]peer 2.2.2.2 router-policy aa import

[R1-bgp]peer 3.3.3.3 router-policy bb import

R5:ip as-path-filter 1 deny ^123

ip as-path-filter 1 permit .*

bgp 500

[R5-bgp]peer 15.0.0.1 as-path-filter 1 import

6.做策略

R1:router-policy aa permit node 15

[R1-router-policy]if-match ip-prefix cc

[R1-router-policy]apply community no-export

router-policy bb permit node 15

[R1-router-policy]if-match ip-prefix cc

[R1-router-policy]apply community no-export

R4:router-policy com permit node 10

[R4-router-policy]apply community 400:500

bgp 400

[R4-bgp]network 192.168.3.0 24 router-policy com

R4:bgp 400

[R4-bgp]peer 24.0.0.2 advertise-community

[R4-bgp]peer 34.0.0.3 advertise-community

R2:bgp 123

[R2-bgp]peer 1.1.1.1 advertise-community

R3:bgp 123

[R3-bgp]peer 1.1.1.1 advertise-community

R1:bgp 123

[R1-bgp]peer 15.0.0.5 advertise-community

R1:apply community-filter 1  permit 400:500

router-policy com deny node 10

[R1-router-policy]apply community-filter 1

router-policy com deny node 20

bgp 123

[R1-bgp]peer 15.0.0.5 router-policy com export