联邦和反射路由器

实验topo

配置环回

R1

R8

AS2

IP划分

骨干之间

172.16.0.0/30----2/3
172.16.0.4/30----3/4
172.16.0.8/30----4/7
172.16.0.12/30–2/5
172.16.0.16/30–5/6
172.16.0.20/30–6/7

用户网段

172.16.2.0/24–r2
172.16.3.0/24–r3
172.16.4.0/24–r4
172.16.5.0/24–r5
172.16.6.0/24–r6
172.16.7.0/24–r7

建立邻居的地址

r2就用2.2.2.2以此类推

r2

r3

r4

r5

r6

r7

BGP

r1

bgp 1
router-id 1.1.1.1
peer 12.0.0.2 as-number 2
ipv4-family unicast
undo synchronization
network 10.1.1.0 255.255.255.0
peer 12.0.0.2 enable

r2

bgp 64512
router-id 2.2.2.2
confederation id 2
confederation peer-as 64513 ----在联邦EBGP对等体关系的设备上进行指定，告知设备与自己建邻的成员AS号；如果不指定，则邻居关系无法正常建立。一定要写在配置不同AS联邦建立邻居之前，不然不能成功
peer 3.3.3.3 as-number 64512 —联邦内建邻要写上联邦AS号
peer 3.3.3.3 connect-interface LoopBack0
peer 5.5.5.5 as-number 64513
peer 5.5.5.5 ebgp-max-hop 255
peer 5.5.5.5 connect-interface LoopBack0
peer 12.0.0.1 as-number 1
aggregate 172.16.0.0 255.255.248.0 detail-suppressed —聚合，自动抑制路由
network 172.16.0.0 255.255.248.0
network 172.16.0.0 255.255.255.252
network 172.16.0.12 255.255.255.252
network 172.16.2.0 255.255.255.0
peer 3.3.3.3 next-hop-local
peer 5.5.5.5 next-hop-local

r3

bgp 64512
router-id 3.3.3.3
confederation id 2
peer 2.2.2.2 as-number 64512
peer 2.2.2.2 connect-interface LoopBack0
peer 4.4.4.4 as-number 64512
peer 4.4.4.4 connect-interface LoopBack0
network 172.16.0.0 255.255.255.252
network 172.16.0.4 255.255.255.252
network 172.16.3.0 255.255.255.0
peer 2.2.2.2 enable
peer 2.2.2.2 reflect-client
peer 2.2.2.2 next-hop-local
peer 4.4.4.4 enable
peer 4.4.4.4 reflect-client
peer 4.4.4.4 next-hop-local

r4

bgp 64512
router-id 4.4.4.4
confederation id 2
confederation peer-as 64513
peer 3.3.3.3 as-number 64512
peer 3.3.3.3 connect-interface LoopBack0
peer 7.7.7.7 as-number 64513
peer 7.7.7.7 ebgp-max-hop 255
peer 7.7.7.7 connect-interface LoopBack0
network 172.16.0.4 255.255.255.252
network 172.16.0.8 255.255.255.252
network 172.16.4.0 255.255.255.0
peer 3.3.3.3 next-hop-local
peer 7.7.7.7 next-hop-local

r5

bgp 64513
router-id 5.5.5.5
confederation id 2
confederation peer-as 64512
peer 2.2.2.2 as-number 64512
peer 2.2.2.2 ebgp-max-hop 255
peer 2.2.2.2 connect-interface LoopBack0
peer 6.6.6.6 as-number 64513
peer 6.6.6.6 connect-interface LoopBack0
network 172.16.0.12 255.255.255.252
network 172.16.0.16 255.255.255.252
network 172.16.5.0 255.255.255.0
peer 2.2.2.2 next-hop-local
peer 6.6.6.6 next-hop-local

r6

bgp 64513
router-id 6.6.6.6
confederation id 2
peer 5.5.5.5 as-number 64513
peer 5.5.5.5 connect-interface LoopBack0
peer 7.7.7.7 as-number 64513
peer 7.7.7.7 connect-interface LoopBack0
network 172.16.0.16 255.255.255.252
network 172.16.0.20 255.255.255.252
network 172.16.6.0 255.255.255.0
peer 5.5.5.5 reflect-client
peer 5.5.5.5 next-hop-local
peer 7.7.7.7 reflect-client
peer 7.7.7.7 next-hop-local

r7

bgp 64513
router-id 7.7.7.7
confederation id 2
confederation peer-as 64512
peer 4.4.4.4 as-number 64512
peer 4.4.4.4 ebgp-max-hop 255
peer 4.4.4.4 connect-interface LoopBack0
peer 6.6.6.6 as-number 64513
peer 6.6.6.6 connect-interface LoopBack0
peer 78.0.0.8 as-number 3
network 172.16.0.0 255.255.248.0
network 172.16.0.8 255.255.255.252
network 172.16.0.20 255.255.255.252
network 172.16.7.0 255.255.255.0
peer 4.4.4.4 next-hop-local
peer 6.6.6.6 next-hop-local
peer 78.0.0.8 next-hop-local
aggregate 172.16.0.0 21 detail-suppressed

r8

bgp 3
router-id 8.8.8.8
peer 78.0.0.7 as-number 2
network 11.1.1.0 255.255.255.0
peer 78.0.0.7 enable

截图

BGP路由表

R1和R8中以r8举例上面一半是没有聚合，下面是聚合后的

R2-R7中以R2为例

R1/8的C类ip地址不能在任何协议中宣告，但是要互通

r1

使用gre
interface Tunnel0/0/0
ip address 192.168.0.1 255.255.255.252
tunnel-protocol gre
source 10.1.1.1
destination 11.1.1.1
[r1]ip route-static 192.168.2.0 24 192.168.0.2

r8

interface Tunnel0/0/0
ip address 192.168.0.2 255.255.255.252
tunnel-protocol gre
source 11.1.1.1
destination 10.1.1.1
[r8]ip route-static 192.168.1.0 24 192.168.0.1

截图

细节

为了防止路由黑洞我们需要在边界路由器即 R2 和 R7 进行空接口防环
[r2]ip route-static 172.16.0.0 21 null0
[r7]ip route-static 172.16.0.0 21 null0

过程中的问题

上图中因为R2先和R5写了peer关系导致在联邦EBGP对等体关系的设备上进行指定时出错。这个时候必须先删除现有的64513AS才能进行对等体关系指定