HCIP-BGP实验 文章目录一、拓扑二、需求三、步骤1. IP划分2. IP配置3. IGP(OSPF)配置4. BGP配置1建立对等体关系2发布路由5. 配置GRE实现环回通信四、测试一、拓扑二、需求AS1存在两个环回一个地址为192.168.1.0/24该地址不能在任何协议中宣告AS3中存在两个环回一个地址为192.168.2.0/24该地址不能在任何协议中宣告最终要求这两个环回可以互相通讯AS1的另一个环回为10.0.0.0/24AS3的另一个环回为11.0.0.0/24整个AS2的IP地址为172.16.0.0/16请合理划分AS间的骨干链路IP地址随意定制使用BGP协议让整个网络所有设备的环回可以互相访问少路由条目数量避免环路出现三、步骤1. IP划分路由器AS号IPR11LB0: 192.168.1.1/24LB1: 10.0.0.1/24G0/0/0: 100.0.0.1/30R2264512G0/0/0: 100.0.0.2/30G0/0/1: 172.16.0.1/30G0/0/2: 172.16.0.9/30R3264512G0/0/0: 172.16.0.2/30G0/0/1: 172.16.0.5/30R4264512G0/0/0: 172.16.0.6/30G0/0/1: 172.16.0.129/30R5264513G0/0/0: 172.16.0.10/30G0/0/1: 172.16.0.133/30R6264513G0/0/0: 172.16.0.134/30G0/0/1: 172.16.0.137/30R7264513G0/0/0: 172.16.0.138/30G0/0/1: 172.16.0.130/30G0/0/2: 101.0.0.1/30R83LB0: 192.168.2.1/24LB1: 11.0.0.1/24G0/0/0: 101.0.0.2/302. IP配置R1Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 100.0.0.1/30 up up GigabitEthernet0/0/1 unassigned down down GigabitEthernet0/0/2 unassigned down down LoopBack0 192.168.1.1/24 up up(s) LoopBack1 10.0.0.1/24 up up(s) NULL0 unassigned up up(s)R2Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 100.0.0.2/30 up up GigabitEthernet0/0/1 172.16.0.1/30 up up GigabitEthernet0/0/2 172.16.0.9/30 up up NULL0 unassigned up up(s)R3Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.2/30 up up GigabitEthernet0/0/1 172.16.0.5/30 up up GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)R4Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.6/30 up up GigabitEthernet0/0/1 172.16.0.129/30 up up GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)R5Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.10/30 up up GigabitEthernet0/0/1 172.16.0.133/30 up up GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)R6Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.134/30 up up GigabitEthernet0/0/1 172.16.0.137/30 up up GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)R7Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.138/30 up up GigabitEthernet0/0/1 172.16.0.130/30 up up GigabitEthernet0/0/2 101.0.0.1/30 up up NULL0 unassigned up up(s)R8Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 101.0.0.2/30 up up GigabitEthernet0/0/1 unassigned down down GigabitEthernet0/0/2 unassigned down down LoopBack0 192.168.2.1/24 up up(s) LoopBack1 11.0.0.1/24 up up(s) NULL0 unassigned up up(s)3. IGP(OSPF)配置R2[R2]ospf 1 router-id 2.2.2.2 [R2-ospf-1]area 0 [R2-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0 [R2-ospf-1-area-0.0.0.0]network 172.16.0.9 0.0.0.0R3[R3]ospf 1 router-id 3.3.3.3 [R3-ospf-1]area 0 [R3-ospf-1-area-0.0.0.0]network 172.16.0.2 0.0.0.0 [R3-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0R4[R4]ospf 1 router-id 4.4.4.4 [R4-ospf-1]area 0 [R4-ospf-1-area-0.0.0.0]network 172.16.0.6 0.0.0.0 [R4-ospf-1-area-0.0.0.0]network 172.16.0.129 0.0.0.0R5[R5]ospf 1 router-id 5.5.5.5 [R5-ospf-1]area 0 [R5-ospf-1-area-0.0.0.0]network 172.16.0.10 0.0.0.0 [R5-ospf-1-area-0.0.0.0]network 172.16.0.133 0.0.0.0R6[R6]ospf 1 router-id 6.6.6.6 [R6-ospf-1]area 0 [R6-ospf-1-area-0.0.0.0]network 172.16.0.134 0.0.0.0 [R6-ospf-1-area-0.0.0.0]network 172.16.0.137 0.0.0.0R7[R7]ospf 1 router-id 7.7.7.7 [R7-ospf-1]area 0 [R7-ospf-1-area-0.0.0.0]network 172.16.0.138 0.0.0.0 [R7-ospf-1-area-0.0.0.0]network 172.16.0.130 0.0.0.0测试OSPF是否已全网可达4. BGP配置1建立对等体关系在AS2中需要用联邦防止IBGP的水平分割在联邦中需要配置路由反射防止IBGP水平分割R1[R1]bgp 1 [R1-bgp]router-id 1.1.1.1 [R1-bgp]peer 100.0.0.2 as-number 2R2注意配置点需指定下一跳、联邦之间连接配置[R2]bgp 64512 [R2-bgp]router-id 2.2.2.2 [R2-bgp]router-id 2.2.2.2 [R2-bgp]confederation id 2 [R2-bgp]peer 100.0.0.1 as-number 1 [R2-bgp]peer 172.16.0.2 as-number 64512 [R2-bgp]peer 172.16.0.2 next-hop-local [R2-bgp]confederation peer-as 64513 [R2-bgp]peer 172.16.0.10 as-number 64513R3注意配置点需指定下一跳、指定反射客户[R3]bgp 64512 [R3-bgp]router-id 3.3.3.3 [R3-bgp]confederation id 2 [R3-bgp]peer 172.16.0.1 as-number 64512 [R3-bgp]peer 172.16.0.1 next-hop-local [R3-bgp]peer 172.16.0.1 reflect-client [R3-bgp]peer 172.16.0.6 as-number 64512 [R3-bgp]peer 172.16.0.6 next-hop-localR4注意配置点需指定下一跳、联邦之间连接配置[R4]bgp 64512 [R4-bgp]router-id 4.4.4.4 [R4-bgp]confederation id 2 [R4-bgp]peer 172.16.0.5 as-number 64512 [R4-bgp]peer 172.16.0.5 next-hop-local [R4-bgp]confederation peer-as 64513 [R4-bgp]peer 172.16.0.130 as-number 64513R5[R5]bgp 64513 [R5-bgp]router-id 5.5.5.5 [R5-bgp]confederation id 2 [R5-bgp]confederation peer-as 64512 [R5-bgp]peer 172.16.0.9 as-number 64512 [R5-bgp]peer 172.16.0.134 as-number 64513 [R5-bgp]peer 172.16.0.134 next-hop-localR6[R6]bgp 64513 [R6-bgp]router-id 6.6.6.6 [R6-bgp]confederation id 2 [R6-bgp]peer 172.16.0.133 as-number 64513 [R6-bgp]peer 172.16.0.133 next-hop-local [R6-bgp]peer 172.16.0.138 reflect-client [R6-bgp]peer 172.16.0.138 as-number 64513 [R6-bgp]peer 172.16.0.138 next-hop-localR7[R7]bgp 64513 [R7-bgp]router-id 7.7.7.7 [R7-bgp]confederation id 2 [R7-bgp]peer 101.0.0.2 as-number 3 [R7-bgp]peer 172.16.0.137 as-number 64513 [R7-bgp]peer 172.16.0.137 next-hop-local [R7-bgp]confederation peer-as 64512 [R7-bgp]peer 172.16.0.129 as-number 64512R8[R8]bgp 3 [R8-bgp]router-id 8.8.8.8 [R8-bgp]peer 101.0.0.1 as-number 22发布路由[R2-bgp]network 100.0.0.0 30 [R7-bgp]network 101.0.0.0 30 [R7-bgp]import-route ospf 1 [R7-bgp]aggregate 172.16.0.0 16 detail-suppressed as-set防止环路[R2-bgp]ip route-static 172.16.0.0 16 NULL 0 [R7-bgp]ip route-static 172.16.0.0 16 NULL 0测试是否发布成功5. 配置GRE实现环回通信R1[R1]interface Tunnel 0/0/0 [R1-Tunnel0/0/0]tunnel-protocol gre [R1-Tunnel0/0/0]ip address 12.0.0.1 24 [R1-Tunnel0/0/0]source 100.0.0.1 [R1-Tunnel0/0/0]destination 101.0.0.2 [R1]ip route-static 192.168.2.0 24 Tunnel 0/0/0 [R1]ip route-static 11.0.0.0 24 Tunnel 0/0/0R8[R8]int Tunnel 0/0/0 [R8-Tunnel0/0/0]tunnel-protocol gre [R8-Tunnel0/0/0]ip address 12.0.0.2 24 [R8-Tunnel0/0/0]source 101.0.0.2 [R8-Tunnel0/0/0]destination 100.0.0.1 [R8]ip route-static 10.0.0.0 24 Tunnel 0/0/0 [R8]ip route-static 192.168.1.0 24 Tunnel 0/0/0四、测试已实现R1与R8环回互相通信