BGP联邦实验

最新推荐文章于 2024-05-28 20:44:27 发布

海底恶霸章鱼哥

最新推荐文章于 2024-05-28 20:44:27 发布

阅读量119

点赞数

文章标签：网络运维

本文链接：https://blog.csdn.net/weixin_57323666/article/details/130171923

版权

IP基础配置
R1

[r1]int l0

[r1-LoopBack0]ip add 10.0.0.1 24

[r1-LoopBack0]int l1

[r1-LoopBack1]ip add 192.168.1.1 24

[r1-LoopBack1]int g 0/0/0

[r1-GigabitEthernet0/0/0]ip add 12.0.0.1 24

R2

[r2]int l0

[r2-LoopBack0]ip add 172.16.2.1 24

[r2-LoopBack0]int g 0/0/0

[r2-GigabitEthernet0/0/0]ip add 12.0.0.2 24

[r2-GigabitEthernet0/0/0]int g 0/0/1

[r2-GigabitEthernet0/0/1]ip add 172.16.1.1 29

[r2-GigabitEthernet0/0/1]int g 0/0/2

[r2-GigabitEthernet0/0/2]ip add 172.16.1.17 29

R3

[r3]int l0

[r3-LoopBack0]ip add 172.16.3.1 24

[r3-LoopBack0]int g 0/0/0

[r3-GigabitEthernet0/0/0]ip add 172.16.1.2 29

[r3-GigabitEthernet0/0/0]int g 0/0/1

[r3-GigabitEthernet0/0/1]ip add 172.16.1.9 29

R4

[r4]int l0

[r4-LoopBack0]ip add 172.16.4.1 24

[r4-LoopBack0]int g 0/0/0

[r4-GigabitEthernet0/0/0]ip add 172.16.1.10 29

[r4-GigabitEthernet0/0/0]int g 0/0/1

[r4-GigabitEthernet0/0/1]ip add 172.16.1.41 29

R5

[r5]int l0

[r5-LoopBack0]ip add 172.16.5.1 24

[r5-LoopBack0]int g 0/0/0

[r5-GigabitEthernet0/0/0]ip add 172.16.1.18 29

[r5-GigabitEthernet0/0/0]int g 0/0/1

[r5-GigabitEthernet0/0/1]ip add 172.16.1.25 29

R6

[r6]int l0

[r6-LoopBack0]ip add 172.16.6.1 24

[r6-LoopBack0]int g 0/0/0

[r6-GigabitEthernet0/0/0]ip add 172.16.1.26 29

[r6-GigabitEthernet0/0/0]int g 0/0/1

[r6-GigabitEthernet0/0/1]ip add 172.16.1.33 29

R7

[r7]int l0

[r7-LoopBack0]ip add 172.16.7.1 24

[r7-LoopBack0]int g 0/0/0

[r7-GigabitEthernet0/0/0]ip add 172.16.1.34 29

[r7-GigabitEthernet0/0/0]int g 0/0/1

[r7-GigabitEthernet0/0/1]ip add 172.16.1.42 29

[r7-GigabitEthernet0/0/1]int g 0/0/2

[r7-GigabitEthernet0/0/2]ip add 78.0.0.2 24

R8

[r8]int l0

[r8-LoopBack0]ip add 11.0.0.1 24

[r8-LoopBack0]int l1

[r8-LoopBack1]ip add 192.168.2.1 24

[r8-LoopBack1]int g 0/0/0

[r8-GigabitEthernet0/0/0]ip add 78.0.0.1 24

开启OSPF进程

[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 0

[r2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r3]ospf 1 router-id 3.3.3.3

[r3-ospf-1]area 0

[r3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r4]ospf 1 router-id 4.4.4.4

[r4-ospf-1]area 0

[r4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r5]ospf 1 router-id 5.5.5.5

[r5-ospf-1]area 0

[r5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r6]ospf 1 router-id 6.6.6.6

[r6-ospf-1]area 0

[r6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

[r7]ospf 1 router-id 7.7.7.7

[r7-ospf-1]area 0

[r7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255

各路由之间建立对等体关系
联邦EBGP建立对等体关系要修改TTL值，IBGP之间建立对等体关系使用环回

[r1]bgp 1

[r1-bgp]router-id 1.1.1.1

[r1-bgp]peer 12.0.0.2 as-number 2

[r2]bgp 64512

[r2-bgp]router-id 2.2.2.2

[r2-bgp]confederation id 2

[r2-bgp]confederation peer-as 64513

[r2-bgp]peer 12.0.0.1 as-number 1

[r2-bgp]peer 172.16.3.1 as-number 64512

[r2-bgp]peer 172.16.3.1 connect-interface LoopBack 0

[r2-bgp]peer 172.16.5.1 as-number 64513

[r2-bgp]peer 172.16.5.1 connect-interface LoopBack 0

[r2-bgp]peer 172.16.5.1 ebgp-max-hop

[r3]bgp 64512

[r3-bgp]router-id 3.3.3.3

[r3-bgp]confederation id 2

[r3-bgp]peer 172.16.2.1 as-number 64512

[r3-bgp]peer 172.16.2.1 connect-interface LoopBack 0

[r3-bgp]peer 172.16.4.1 as-number 64512

[r3-bgp]peer 172.16.4.1 connect-interface LoopBack 0

[[r4]bgp 64512

[r4-bgp]router-id 4.4.4.4

[r4-bgp]confederation id 2

[r4-bgp]confederation peer-as 64513

[r4-bgp]peer 172.16.3.1 as-number 64512

[r4-bgp]peer 172.16.3.1 connect-interface LoopBack 0

[r4-bgp]peer 172.16.7.1 as-number 64513

[r4-bgp]peer 172.16.7.1 connect-interface LoopBack 0

[r4-bgp]peer 172.16.7.1 ebgp-max-hop

[r5]bgp 64513

[r5-bgp]router-id 5.5.5.5

[r5-bgp]confederation id 2

[r5-bgp]confederation peer-as 64512

[r5-bgp]peer 172.16.6.1 as-number 64513

[r5-bgp]peer 172.16.6.1 connect-interface LoopBack 0

[r5-bgp]peer 172.16.2.1 as-number 64512

[r5-bgp]peer 172.16.2.1 connect-interface LoopBack 0

[r5-bgp]peer 172.16.2.1 ebgp-max-hop

[r6]bgp 64513

[r6-bgp]router-id 6.6.6.6

[r6-bgp]confederation id 2

[r6-bgp]peer 172.16.5.1 as-number 64513

[r6-bgp]peer 172.16.5.1 connect-interface LoopBack 0

[r6-bgp]peer 172.16.7.1 as-number 64513

[r6-bgp]peer 172.16.7.1 connect-interface LoopBack 0

[r7]bgp 64513

[r7-bgp]router-id 7.7.7.7

[r7-bgp]confederation id 2

[r7-bgp]confederation peer-as 64512

[r7-bgp]peer 78.0.0.1 as-number 3

[r7-bgp]peer 172.16.6.1 as-number 64513

[r7-bgp]peer 172.16.6.1 connect-interface LoopBack 0

[r7-bgp]peer 172.16.4.1 as-number 64512

[r7-bgp]peer 172.16.4.1 connect-interface LoopBack 0

[r7-bgp]peer 172.16.4.1 ebgp-max-hop

[r8]bgp 3

[r8-bgp]router-id 8.8.8.8

[r8-bgp]peer 78.0.0.2 as-number 2

在R2/R7上将下一跳地址改为本地地址
变成可用且优，才会发送给其他设备

[r1-bgp]network 10.0.0.0 24

[r2]bgp 64512

[r2-bgp]peer 172.16.3.1 next-hop-local

[r2-bgp]peer 172.16.5.1 next-hop-local

[r8]bgp 3

[r8-bgp]network 11.0.0.0 24

[r7]bgp 64513

[r7-bgp]peer 172.16.4.1 next-hop-local

[r7-bgp]peer 172.16.6.1 next-hop-local

R4和R7收不到这条路由信息，是因为IBGP的水平分割机制。

要想R4和R7收到整条路由信息，可以设定R3和R6为RR设备，R2和R5作为RR设备的客户

[r3]bgp 64512

[r3-bgp]peer 172.16.2.1 reflect-client

[r6]bgp 64513

[r6-bgp]peer 172.16.5.1 reflect-client

减少路由条目数量，避免环路

[r2]ip route-static 172.16.0.0 21 NULL 0
[r2]bgp 64512

[r2-bgp]network 172.16.0.0 21

[r7]ip route-static 172.16.0.0 21 NULL 0

[r7]bgp 64513

[r7-bgp]network 172.16.0.0 21

整个网络设备的环回可以互相访问
要使192.168.1.0和192.168.2.0能通，可以通过虚拟接口。

这里源IP和目标IP不能写物理接口。

[r1]interface Tunnel 0/0/0

[r1-Tunnel0/0/0]ip add 18.0.0.1 24

[r1-Tunnel0/0/0]tunnel-protocol gre

[r1-Tunnel0/0/0]source 10.0.0.1

[r1-Tunnel0/0/0]destination 11.0.0.1

[r8]interface Tunnel 0/0/0

[r8-Tunnel0/0/0]ip add 18.0.0.2 24

[r8-Tunnel0/0/0]tunnel-protocol gre

[r8-Tunnel0/0/0]source 11.0.0.1

[r8-Tunnel0/0/0]destination 10.0.0.1

[r1]ip route-static 192.168.2.0 24 18.0.0.2

[r8]ip route-static 192.168.1.0 24 18.0.0.1