一、实验目的:
1、AS1存在两个环回,一个地址为192.168.1.0/24,该地址不能在任何协议中
宣告,AS3存在两个环回,一个地址为192.168.2.0/24,该地址不能在任何
协议中宣告,最终要求这两个环回可以相互通讯
2、整个AS2的IP地址为172.16.0.0/22,请合理划分
3、AS间的骨干链路IP地址随意定制
4、使用BGP协议让整个网络所有设备的环回可以相互访问
5、减少路由条目数量,避免环路出现
二、实验拓补:
三、实验基础配置:
1.各路由的IP配置:
R1:
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 12.0.0.1/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
LoopBack0 192.168.1.1/24 up up(s)
LoopBack1 11.0.0.1/24 up up(s)
NULL0 unassigned up up(s)
Tunnel0/0/0 100.0.0.1/24 up down
R2:
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 12.0.0.2/24 up up
GigabitEthernet0/0/1 172.16.1.1/30 up up
GigabitEthernet0/0/2 172.16.1.9/30 up up
LoopBack0 172.16.2.1/24 up up(s)
LoopBack1 172.16.0.1/32 up up(s)
NULL0 unassigned up up(s)
R3:
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 172.16.1.2/30 up up
GigabitEthernet0/0/1 172.16.1.5/30 up up
GigabitEthernet0/0/2 unassigned down down
LoopBack0 172.16.3.1/24 up up(s)
LoopBack1 172.16.0.2/32 up up(s)
NULL0 unassigned up up(s)
R4:
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 172.16.1.6/30 up up
GigabitEthernet0/0/1 172.16.1.21/30 up up
GigabitEthernet0/0/2 unassigned down down
LoopBack0 172.16.4.1/24 up up(s)
LoopBack1 172.16.0.3/32 up up(s)
NULL0 unassigned up up(s)
R5:
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 172.16.1.10/30 up up
GigabitEthernet0/0/1 172.16.1.13/30 up up
GigabitEthernet0/0/2 unassigned down down
LoopBack0 172.16.5.1/24 up up(s)
LoopBack1 172.16.0.4/32 up up(s)
NULL0 unassigned up up(s)
R6:
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 172.16.1.14/30 up up
GigabitEthernet0/0/1 172.16.1.17/30 up up
GigabitEthernet0/0/2 unassigned down down
LoopBack0 172.16.6.1/24 up up(s)
LoopBack1 172.16.0.5/32 up up(s)
NULL0 unassigned up up(s)
R7:
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 172.16.1.18/30 up up
GigabitEthernet0/0/1 172.16.1.22/30 up up
GigabitEthernet0/0/2 78.0.0.1/24 up up
LoopBack0 172.16.7.1/24 up up(s)
LoopBack1 172.16.0.6/32 up up(s)
NULL0 unassigned up up(s)
R8:Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 78.0.0.2/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
LoopBack0 192.168.2.1/24 up up(s)
LoopBack1 10.0.0.1/24 up up(s)
NULL0 unassigned up up(s)
Tunnel0/0/0 100.0.0.2/24 up down
2.ospf宣告网段
[r2]ospf 1
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
---因为是由这个网段划分的,所以可直接宣告这个网段,因为r2的
各接口ip地址都在area 0,所以不用每个接口地址宣告这么麻烦
R3、R4、R5、R6、R7同上
检查:
3.建立IBGP对等体:
[r1-bgp]display this
[V200R003C00]
#
bgp 1
peer 12.0.0.2 as-number 2
#
ipv4-family unicast
undo synchronization
network 11.0.0.0 255.255.255.0
peer 12.0.0.2 enable
#
return
[r2-bgp]display this
[V200R003C00]
#
bgp 64512
confederation id 2
confederation peer-as 64513
peer 12.0.0.1 as-number 1
peer 172.16.0.2 as-number 64512
peer 172.16.0.2 connect-interface LoopBack1
peer 172.16.0.4 as-number 64513
peer 172.16.0.4 ebgp-max-hop 255
peer 172.16.0.4 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
peer 12.0.0.1 enable
peer 172.16.0.2 enable
peer 172.16.0.4 enable
#
return
[r3-bgp]display this
[V200R003C00]
#
bgp 64512
confederation id 2
peer 172.16.0.1 as-number 64512
peer 172.16.0.1 connect-interface LoopBack1
peer 172.16.0.3 as-number 64512
peer 172.16.0.3 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
peer 172.16.0.1 enable
peer 172.16.0.3 enable
#
return
[r4-bgp]display this
[V200R003C00]
#
bgp 64512
confederation id 2
confederation peer-as 64513
peer 172.16.0.2 as-number 64512
peer 172.16.0.2 connect-interface LoopBack1
peer 172.16.0.6 as-number 64513
peer 172.16.0.6 ebgp-max-hop 255
peer 172.16.0.6 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
network 172.16.3.0 255.255.255.0
peer 172.16.0.2 enable
peer 172.16.0.6 enable
#
return
[r5-bgp]display this
[V200R003C00]
#
bgp 64513
confederation id 2
peer 172.16.0.5 as-number 64513
peer 172.16.0.5 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
peer 172.16.0.5 enable
#
return
[r6-bgp]display this
[V200R003C00]
#
bgp 64513
confederation id 2
peer 172.16.0.4 as-number 64513
peer 172.16.0.4 connect-interface LoopBack1
peer 172.16.0.6 as-number 64513
peer 172.16.0.6 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
peer 172.16.0.4 enable
peer 172.16.0.6 enable
#
return
[r7-bgp]display this
[V200R003C00]
#
bgp 64513
confederation id 2
peer 172.16.0.5 as-number 64513
peer 172.16.0.5 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
peer 172.16.0.5 enable
#
return
[r8-bgp]display this
[V200R003C00]
#
bgp 3
peer 78.0.0.1 as-number 2
#
ipv4-family unicast
undo synchronization
network 10.0.0.0 255.255.255.0
peer 78.0.0.1 enable
#
return
4.建立EBGP对等体、联邦EBGP对等体:
R2与R5建邻:
[r2]bgp 64512
[r2-bgp]confederation peer-as 64513
[r2-bgp]peer 172.16.0.4 as-number 64513
[r2-bgp]peer 172.16.0.4 connect-interface LoopBack 1
[r2-bgp]peer 172.16.0.4 ebgp-max-hop
[r5]bgp 64513
[r5-bgp]confederation peer-as 64512
[r5-bgp]peer 172.16.0.1 as-number 64512
[r5-bgp]peer 172.16.0.1 connect-interface LoopBack 1
[r5-bgp]peer 172.16.0.1 ebgp-max-hop
R4与R7建邻:
[r4]bgp 64512
[r4-bgp]confederation peer-as 64513
[r4-bgp]peer 172.16.0.6 as-number 64513
[r4-bgp]peer 172.16.0.6 connect-interface LoopBack 1
[r4-bgp]peer 172.16.0.6 ebgp-max-hop
[r7]bgp 64513
[r7-bgp]confederation peer-as 64512
[r7-bgp]peer 172.16.0.3 as-number 64512
[r7-bgp]peer 172.16.0.3 connect-interface LoopBack 1
[r7-bgp]peer 172.16.0.3 ebgp-max-hop
R7与R8:
[r7]bgp 64513
[r7-bgp]peer 78.0.0.2 as-number 3
[r8]bgp 3
[r8-bgp]peer 78.0.0.1 as-number 2
5.配置R3、R6为路由反射器
使R1和R8都能学到全部的网段(R1缺4.0和7.0网段;R8缺2.0和5.0网段)
R3指定R2为客户端:
[r3]bgp 64512
[r3-bgp]peer 172.16.0.3 reflect-client
[r3-bgp]network 172.16.3.0 24
R6指定R5为客户端
[r6]bgp 64513
[r6-bgp]peer 172.16.0.4 reflect-client
6.在R2-R7中将接口下一跳改为本地:
[r2]bgp 64512
[r2-bgp]peer 172.16.0.2 next-hop-local
[r2-bgp]peer 172.16.0.4 next-hop-local
[r7]bgp 64513
[r7-bgp]peer 172.16.0.3 next-hop-local
[r7-bgp]peer 172.16.0.5 next-hop-local
7.给两个固定环回搭建隧道,即在 R1与R8之间建立隧道接口:
[r1]interface Tunnel 0/0/0
[r1-Tunnel0/0/0]ip address 100.0.0.1 24
[r1-Tunnel0/0/0]tunnel-protocol gre
[r1-Tunnel0/0/0]source 11.0.0.1
[r1-Tunnel0/0/0]description 10.0.0.1
[r1]ip route-static 192.168.2.0 24 Tunnel 0/0/0
[r8]interface Tunnel 0/0/0
[r8-Tunnel0/0/0]ip address 100.0.0.2 24
[r8-Tunnel0/0/0]tunnel-protocol gre
[r8-Tunnel0/0/0]source 10.0.0.1
[r8-Tunnel0/0/0]description 11.0.0.1
[r8]ip route-static 192.168.1.0 24 Tunnel 0/0/0
8.边界设备做空接口,防止环路,并宣告边界设备的环回
[R2]ip route-static 172.16.0.0 16 NULL 0
[R2-bgp]network 172.16.0.0 16
[R7]ip route-static 172.16.0.0 16 NULL 0
[R7-bgp]network 172.16.0.0 16
9.ping 测试
至此,我们的实验就全部符合要求了!!!