新华三BGP路由控制实验

新华三BGP路由控制实验

实验拓扑：

实验要求：

实验步骤：

1.建立OSPF邻居实现环回口可达

[RT2]ospf 1 router-id 2.2.2.2 
[RT2-ospf-1]area 0
[RT2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[RT2-ospf-1-area-0.0.0.0]network 100.3.3.0 0.0.0.255

[RT3]ospf 1 router-id 3.3.3.3
[RT3-ospf-1]area 0
[RT3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[RT3-ospf-1-area-0.0.0.0]network 100.4.4.0 0.0.0.255

[RT4]ospf 1 router-id 4.4.4.4
[RT4-ospf-1]area 0
[RT4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0
[RT4-ospf-1-area-0.0.0.0]network 100.3.3.0 0.0.0.255
[RT4-ospf-1-area-0.0.0.0]network 100.4.4.0 0.0.0.255

2.配置BGP邻居关系

1.建立EBGP

[RT1]bgp 100
[RT1-bgp-default]peer 100.1.1.2 as-number 200
[RT1-bgp-default]peer 100.2.2.3 as-number 200
[RT1-bgp-default]address-family ipv4
[RT1-bgp-default-ipv4]peer 100.1.1.2 enable 
[RT1-bgp-default-ipv4]peer 100.2.2.3 enable 

[RT2]bgp 200
[RT2-bgp-default]peer 100.1.1.1 as-number 100
[RT2-bgp-default]address-family ipv4
[RT2-bgp-default-ipv4]peer 100.1.1.1 enable 

[RT3]bgp 200
[RT3-bgp-default]peer 100.2.2.1 as-number 100
[RT3-bgp-default]address-family ipv4
[RT3-bgp-default-ipv4]peer 100.2.2.1 enable 

2.建立IBGP

[RT2]bgp 200
[RT2-bgp-default]peer 3.3.3.3 as-number 200
[RT2-bgp-default]peer 4.4.4.4 as-number 200
[RT2-bgp-default]peer 3.3.3.3 connect-interface LoopBack 0
[RT2-bgp-default]peer 4.4.4.4 connect-interface LoopBack 0
[RT2-bgp-default]address-family ipv4
[RT2-bgp-default-ipv4]peer 3.3.3.3 enable 
[RT2-bgp-default-ipv4]peer 4.4.4.4 enable 

[RT3]bgp 200
[RT3-bgp-default]peer 2.2.2.2 as-number 200
[RT3-bgp-default]peer 4.4.4.4 as-number 200
[RT3-bgp-default]peer 2.2.2.2 connect-interface LoopBack 0
[RT3-bgp-default]peer 4.4.4.4 connect-interface LoopBack 0
[RT3-bgp-default]address-family ipv4
[RT3-bgp-default-ipv4]peer 2.2.2.2 enable 
[RT3-bgp-default-ipv4]peer 4.4.4.4 enable 

[RT4]bgp 200
[RT4-bgp-default]peer 2.2.2.2 as-number 200
[RT4-bgp-default]peer 3.3.3.3 as-number 200
[RT4-bgp-default]peer 2.2.2.2 connect-interface LoopBack 0
[RT4-bgp-default]peer 3.3.3.3 connect-interface LoopBack 0
[RT4-bgp-default]address-family ipv4
[RT4-bgp-default-ipv4]peer 2.2.2.2 en
[RT4-bgp-default-ipv4]peer 2.2.2.2 enable 
[RT4-bgp-default-ipv4]peer 3.3.3.3 enable 
[RT4]dis bgp peer ipv4（查看bgp邻居）

3.在R1和R4的BGP地址族下宣告业务网段传递路由

[RT1]bgp 100
[RT1-bgp-default]address-family ipv4
[RT1-bgp-default-ipv4]network 192.168.10.0 24
[RT1-bgp-default-ipv4]network 192.168.20.0 24

[RT4]bgp 200
[RT4-bgp-default]address-family ipv4
[RT4-bgp-default-ipv4]network 100.10.10.0 24
[RT4-bgp-default-ipv4]network 200.20.20.0 24

在RT2和RT3上对RT4传递路由时把下一跳修改为本地:
[RT2]bgp 200
[RT2-bgp-default]address-family ipv4
[RT2-bgp-default-ipv4]peer 4.4.4.4 next-hop-local 

[RT3]bgp 200
[RT3-bgp-default]address-family ipv4
[RT3-bgp-default-ipv4]peer 4.4.4.4 next-hop-local 

4.把RT2传递给RT1的100.10.10.0/24网段的路由，使用MED值修改为120

[RT2]acl basic 2000
[RT2-acl-ipv4-basic-2000]rule 0 permit source 100.10.10.0 0.0.0.255
[RT2-acl-ipv4-basic-2000]qu
[RT2]route-policy RT2toRT1 permit node 10
Routing policy node created.
[RT2-route-policy-RT2toRT1-10]if-match ip address acl 2000
[RT2-route-policy-RT2toRT1-10]apply cost 120
[RT2-route-policy-RT2toRT1-10]qu
[RT2]route-policy RT2toRT1 permit node 20
Routing policy node created.
[RT2-route-policy-RT2toRT1-20]qu
[RT2]bgp 200
[RT2-bgp-default]address-family ipv4
[RT2-bgp-default-ipv4]peer 100.1.1.1 route-policy RT2toRT1 export 
[RT2-bgp-default-ipv4]qu

效果图：

5.把RT2传递给RT1的200.20.20.0/24网段的路由，使用AS-PATH修改为200 400

[RT1]acl basic 2000
[RT1-acl-ipv4-basic-2000]rule 0 permit source 200.20.20.0 0.0.0.255
[RT1-acl-ipv4-basic-2000]qu
[RT1]route-policy RT2toRT1 permit node 10
Routing policy node created.
[RT1-route-policy-RT2toRT1-10]if-match ip address acl 2000
[RT1-route-policy-RT2toRT1-10]apply as-path 200 400
[RT1-route-policy-RT2toRT1-10]qu
[RT1]route-policy RT2toRT1 permit node 20
Routing policy node created.
[RT1-route-policy-RT2toRT1-20]qu
[RT1]bgp 100
[RT1-bgp-default]address-family ipv4
[RT1-bgp-default-ipv4]peer 100.1.1.2 route-policy RT2toRT1 import 
[RT1-bgp-default-ipv4]qu

效果图：

6.把RT2传递给RT4的192.168.10.0/24网段的路由，使用Preferred-value 属性修改为180

[RT4]acl basic 2000
[RT4-acl-ipv4-basic-2000]rule 0 permit source 192.168.10.0 0.0.0.255 
[RT4-acl-ipv4-basic-2000]qu
[RT4]route-policy RT2toRT4 permit node 10
Routing policy node created.
[RT4-route-policy-RT2toRT4-10]if-match ip address acl 2000
[RT4-route-policy-RT2toRT4-10]app preferred-value 180
[RT4-route-policy-RT2toRT4-10]qu
[RT4]route-policy RT2toRT4 permit node 20
Routing policy node created.
[RT4]bgp 200
[RT4-bgp-default]address-family ipv4 
[RT4-bgp-default-ipv4]peer 2.2.2.2 route-policy RT2toRT4 import 
[RT4-bgp-default-ipv4]qu

效果图：

7. 把RT2传递RT4的192.168.20.0/24网段的路由本地优先级设置为9999

[RT2]acl basic 2000
[RT2-acl-ipv4-basic-2000]rule 0 permit source 192.168.20.0 0.0.0.255
The rule was edited successfully.
[RT2-acl-ipv4-basic-2000]qu
[RT2]route-policy RT2toRT4 permit node 10
Routing policy node created.
[RT2-route-policy-RT2toRT4-10]if-match ip add acl 2000
[RT2-route-policy-RT2toRT4-10]apply local-preference 9999
[RT2-route-policy-RT2toRT4-10]qu
[RT2]route-policy RT2toRT4 permit node 20
Routing policy node created.
[RT2-route-policy-RT2toRT4-20]qu
[RT2]bgp 200
[RT2-bgp-default]address-family ipv4
[RT2-bgp-default-ipv4]peer 4.4.4.4 route-policy RT2toRT4 export 
[RT2-bgp-default-ipv4]qu

效果图：