HCIP 第七天

HCIP 第七天

1.配置底层IP地址，上面用RIP ，下面用OSPF

R1为一个联邦AS号64512，R2 R3 R4为一个联邦AS号64513.大AS号为100

R5为一个联邦AS号64514，R6 R7 R8为一个联邦AS号64515.大AS号为101

2.进行BGP 配置

[R1]bgp 64512
[R1-bgp]route-select
[R1-bgp]router-id 1.1.1.1
[R1-bgp]confederation id 100
[R1-bgp]confederation peer-as 64513
[R1-bgp] router-id 1.1.1.1
[R1-bgp] confederation id 100
[R1-bgp] confederation peer-as 64513
[R1-bgp] peer 2.2.2.2 as-number 64513
[R1-bgp] peer 2.2.2.2 ebgp-max-hop
[R1-bgp] peer 2.2.2.2 connect-interface LoopBack0
[R1-bgp] peer 15.1.1.2 as-number 101

[R2]bgp 64513
[R2-bgp]router-id 2.2.2.2
[R2-bgp]confederation id 100
[R2-bgp]confederation peer-as 64512
[R2-bgp]peer 1.1.1.1 as-number 64512
[R2-bgp]peer 1.1.1.1 connect-interface LoopBack 0
[R2-bgp]peer 3.3.3.3 as-number 64513
[R2-bgp]peer 3.3.3.3 connect-interface LoopBack 0
[R2-bgp] peer 1.1.1.1 ebgp-max-hop

在R3 R7上做反射器
[R3]bgp 64513
[R3-bgp]peer 2.2.2.2 reflect-client
[R3-bgp]peer 4.4.4.4 reflect-client

更改下一跳,所有路由器都要更改邻居的下一跳
[R1-bgp]peer 2.2.2.2 next-hop-local

3.更改选路

R1访问R8的环回走R5
在R5上更改 preferred-value 为1
[R5]ip ip-prefix nn permit 8.8.8.8 32
[R5]route-policy mm permit node 10
[R5-route-policy]if-match ip-prefix nn
[R5-route-policy]apply preferred-value 1
[R5]route-policy mm permit node 20
[R5-bgp]peer 15.1.1.1 route-policy mm import

R5访问R4的环回走R1
更改AS-PATH 条目在传递过程中，将记录所有经过的AS号；AS号只能在条目传递给其他EBGP邻居时写入；----AS的写入只能在EBGP邻居间进行；优选经过AS数量较少的路径；
[r8]ip ip-prefix as permit 4.4.4.4 32
[r8]route-policy as permit node 10
[r8-route-policy]if-match ip-prefix as
[r8-route-policy]apply as-path 3 4 5 additive
[r8]route-policy as permit node 20
[r8]bgp 64515
[r8-bgp]peer 18.1.1.1 route-policy as import

R9访问R1的环回走R8也是更改AS-PATH
[r9]ip ip-prefix as permit 1.1.1.1 32
[r9]route-policy as permit node 10
[r9-route-policy]if-match ip-prefix as
[r9-route-policy]apply as-path 3 4 5 additive
[r9]route-policy as permit node 20
[r9]bgp 102
[r9-bgp]peer 19.1.1.1 route-policy as import

4.全网可达

R1ping R9

R5pingR9