一、实验内容
二、实验步骤
1、IP地址划分
骨干链路
将172.16.0.0/24划分至30位:
172.16.0.0/30、172.16.0.4/30、172.16.0.8/30、172.16.0.12/30、
172.16.0.16/30、172.16.0.20/30、172.16.0.28/30、172.16.0.32/30...
建邻环回172.16.1.0/24下地址: 172.16.1.2/32、172.16.1.3/32...
用户网段172.16.2.8/24、172.16.3.0/24...
2、基础配置
网段划分好之后,配置各路由器接口IP地址:
R1配置
[R1]int l0
[R1-LoopBack0]ip add 1.1.1.1 24
[R1-LoopBack0]int l1
[R1-LoopBack1]ip add 192.168.1.1 24
[R1-LoopBack1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 12.1.1.1 24
R2配置
[R2]int l0
[R2-LoopBack0]ip add 172.16.1.2 32
[R2-LoopBack0]int l1
[R2-LoopBack1]ip add 172.16.2.1 24
[R2-LoopBack1]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 12.1.1.2 24
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]ip add 172.16.0.1 30
[R2-GigabitEthernet0/0/1]int g0/0/2
[R2-GigabitEthernet0/0/2]ip add 172.16.0.13 30
R3配置
[R3]int l0
[R3-LoopBack0]ip add 172.16.1.3 32
[R3-LoopBack0]int l1
[R3-LoopBack1]ip add 172.16.3.1 24
[R3-LoopBack1]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 172.16.0.2 30
[R3-GigabitEthernet0/0/0]int g0/0/1
[R3-GigabitEthernet0/0/1]ip add 172.16.0.5 30
R4配置
[R4]int l0
[R4-LoopBack0]ip add 172.16.1.4 32
[R4-LoopBack0]int l1
[R4-LoopBack1]ip add 172.16.4.1 24
[R4-LoopBack1]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 172.16.0.6 30
[R4-GigabitEthernet0/0/0]int g0/0/1
[R4-GigabitEthernet0/0/1]ip add 172.16.0.9 30
R5配置
[R5]int l0
[R5-LoopBack0]ip add 172.16.1.5 32
[R5-LoopBack0]int l1
[R5-LoopBack1]ip add 172.16.5.1 24
[R5-LoopBack1]int g0/0/0
[R5-GigabitEthernet0/0/0]ip add 172.16.0.14 30
[R5-GigabitEthernet0/0/0]int g0/0/1
[R5-GigabitEthernet0/0/1]ip add 172.16.0.17 30
R6配置
[R6]int l0
[R6-LoopBack0]ip add 172.16.1.6 32
[R6-LoopBack0]int l1
[R6-LoopBack1]ip add 172.16.6.1 24
[R6-LoopBack1]int g0/0/0
[R6-GigabitEthernet0/0/0]ip add 172.16.0.18 30
[R6-GigabitEthernet0/0/0]int g0/0/1
[R6-GigabitEthernet0/0/1]ip add 172.16.0.21 30
R7配置
[R7]int l0
[R7-LoopBack0]ip add 172.16.1.7 32
[R7-LoopBack0]int l1
[R7-LoopBack1]ip add 172.16.7.1 24
[R7-LoopBack1]int g0/0/0
[R7-GigabitEthernet0/0/0]ip add 172.16.0.22 30
[R7-GigabitEthernet0/0/0]int g0/0/1
[R7-GigabitEthernet0/0/1]ip add 172.16.0.10 30
[R7-GigabitEthernet0/0/1]int g0/0/2
[R7-GigabitEthernet0/0/2]ip add 78.1.1.7 24
R8配置
[R8]int l0
[R8-LoopBack0]ip add 8.8.8.8 24
[R8-LoopBack0]int l1
[R8-LoopBack1]ip add 192.168.2.1 24
[R8-LoopBack1]int g0/0/0
[R8-GigabitEthernet0/0/0]ip add 78.1.1.8 24
3、配置OSPF
R2配置
[R2]ospf 1 router-id 172.16.1.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R2-ospf-1]int l1
[R2-LoopBack1]ospf network-type broadcast
R3配置
[R3]ospf 1
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R3-ospf-1-area-0.0.0.0]int l1
[R3-LoopBack1]ospf network-type broadcast
R4配置
[R4]ospf 1
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R4-ospf-1-area-0.0.0.0]int l1
[R4-LoopBack1]ospf network-type broadcast
R5配置
[R5]ospf 1
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R5]int l1
[R5-LoopBack1]ospf network-type broadcast
R6配置
[R6]ospf 1
[R6-ospf-1]area 0
[R6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R6]int l1
[R6-LoopBack1]ospf network-type broadcast
R7配置
[R7]ospf 1
[R7-ospf-1]area 0
[R7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
[R7]int l1
[R7-LoopBack1]ospf network-type broadcast
4、配置BGP,建立对等体
先保证R1和R2、R7和R8可以通信,所以先写静态:
[R1]ip route-static 172.16.1.2 32 12.1.1.2
[R2]ip route-static 1.1.1.1 32 12.1.1.1
[R7]ip route-static 8.8.8.8 32 78.1.1.8
[R8]ip route-static 172.16.1.7 32 78.1.1.7
再建立BGP对等体:
R1配置
[R1]bgp 1
[R1-bgp]router-id 1.1.1.1
[R1-bgp]peer 172.16.1.2 as-number 2
[R1-bgp]peer 172.16.1.2 connect-interface LoopBack 0
[R1-bgp]peer 172.16.1.2 ebgp-max-hop 2
R2配置
#和R1 EBGP:
[R2]bgp 64512
[R2-bgp]router-id 172.16.1.2
[R2-bgp]confederation id 2
[R2-bgp]peer 1.1.1.1 as-number 1
[R2-bgp]peer 1.1.1.1 connect-interface LoopBack 0
[R2-bgp]peer 1.1.1.1 ebgp-max-hop 2
#和R3 IBGP:
[R2-bgp]peer 172.16.1.3 as-number 64512
[R2-bgp]peer 172.16.1.3 connect-interface l0
[R2-bgp]peer 172.16.1.3 next-hop-local
#和R5:
[R2-bgp]confederation peer-as 64513
[R2-bgp]peer 172.16.1.5 as-number 64513
[R2-bgp]peer 172.16.1.5 connect-interface l0
[R2-bgp]peer 172.16.1.5 ebgp-max-hop 2
R3配置
[R3]bgp 64512
[R3-bgp]router-id 172.16.1.3
[R3-bgp]confederation id 2
[R3-bgp]peer 172.16.1.2 as-number 64512
[R3-bgp]peer 172.16.1.2 connect-interface l0
[R3-bgp]peer 172.16.1.4 as-number 64512
[R3-bgp]peer 172.16.1.4 connect-interface l0
R4配置
[R4]bgp 64512
[R4-bgp]router-id 172.16.1.4
[R4-bgp]confederation id 2
[R4-bgp]peer 172.16.1.3 as-number 64512
[R4-bgp]peer 172.16.1.3 connect-interface l0
#和R7
[R4-bgp]confederation peer-as 64513
[R4-bgp]peer 172.16.1.7 as-number 64513
[R4-bgp]peer 172.16.1.7 connect-interface l0
[R4-bgp]peer 172.16.1.7 ebgp-max-hop 2
R5配置
[R5]bgp 64513
[R5-bgp]router-id 172.16.1.5
[R5-bgp]confederation id 2
[R5-bgp]confederation peer-as 64512
[R5-bgp]peer 172.16.1.2 as-number 64512
[R5-bgp]peer 172.16.1.2 connect-interface l0
[R5-bgp]peer 172.16.1.2 ebgp-max-hop 2
[R5-bgp]peer 172.16.1.6 as-number 64513
[R5-bgp]peer 172.16.1.6 connect-interface l0
R6配置
[R6]bgp 64513
[R6-bgp]router-id 172.16.1.6
[R6-bgp]confederation id 2
[R6-bgp]peer 172.16.1.5 as-number 64513
[R6-bgp]peer 172.16.1.5 connect-interface l0
[R6-bgp]peer 172.16.1.7 as-number 64513
[R6-bgp]peer 172.16.1.7 connect-interface l0
R7配置
[R7]bgp 64513
[R7-bgp]confederation id 2
[R7-bgp]router-id 172.16.1.7
[R7-bgp]peer 172.16.1.6 as-number 64513
[R7-bgp]peer 172.16.1.6 connect-interface l0
[R7-bgp]peer 172.16.1.6 next-hop-local
[R7-bgp]confederation peer-as 64512
[R7-bgp]peer 172.16.1.4 as-number 64512
[R7-bgp]peer 172.16.1.4 connect-interface l0
[R7-bgp]peer 172.16.1.4 ebgp-max-hop 2
[R7-bgp]peer 8.8.8.8 as-number 3
[R7-bgp]peer 8.8.8.8 connect-interface l0
[R7-bgp]peer 8.8.8.8 ebgp-max-hop 2
R8配置
[R8]ip route-static 172.16.1.7 32 78.1.1.7
[R8]bgp 3
[R8-bgp]router-id 8.8.8.8
[R8-bgp]peer 172.16.1.7 as-number 2
[R8-bgp]peer 172.16.1.7 connect-interface l0
[R8-bgp]peer 172.16.1.7 ebgp-max-hop 2
5、宣告网段,发布BGP路由
R1配置
[R1]bgp 1
[R1-bgp]network 1.1.1.1 24
R2配置
[R2]bgp 64512
[R2-bgp]network 172.16.2.0 24
[R2-bgp]network 172.16.3.0 24
[R2-bgp]network 172.16.4.0 24
[R2-bgp]network 172.16.5.0 24
[R2-bgp]network 172.16.5.0 24
[R2-bgp]network 172.16.6.0 24
[R2-bgp]network 172.16.7.0 24
R8配置
[R8]bgp 3
[R8-bgp]network 8.8.8.8 32
6、配置路由反射器,破除IBGP之间的水平分割
[R3-bgp]peer 172.16.1.2 reflect-client
[R6-bgp]peer 172.16.1.7 reflect-client
7、建立GRE隧道,使环回通信
#建立隧道
R1配置
[R1]int tu0/0/0
[R1-Tunnel0/0/0]source 1.1.1.1
[R1-Tunnel0/0/0]tunnel-protocol gre
[R1-Tunnel0/0/0]ip add 10.1.1.1 24
[R1-Tunnel0/0/0]destination 8.8.8.8
[R1-Tunnel0/0/0]q
[R1]ip route-static 192.168.2.0 24 tu0/0/0
R8配置
[R8]int tu0/0/0
[R8-Tunnel0/0/0]ip add 10.1.1.2 24
[R8-Tunnel0/0/0]tunnel-protocol gre
[R8-Tunnel0/0/0]source 8.8.8.8
[R8-Tunnel0/0/0]destination 1.1.1.1
[R8-Tunnel0/0/0]q
[R8]ip route-static 192.168.1.0 24 tu0/0/0
8、聚合
[R2-bgp]aggregate 172.16.0.0 21 detail-suppressed
9、测试
R1上BGP路由表:
R2上BGP路由表:
R8上BGP路由表:
通信: