一、实验拓扑
二、实验要求
1、按照图示配置IP地址,R2, R3, R4, R5分别配置Loopback0口地址作为OSPF的Router_id和IBGP邻居地址,地址格式为x.x.x.x/32,x为设备编号。R1上配置Loopback口模拟业务网段
2、AS 200内部配置OSPF,仅用于实现BGP的TCP可达
3、AS 200内部建立BGP联盟,联盟AS为AS 200,包含2个子AS为AS 65001和AS 65002。
R1和R2建立EBGP邻居,R4和R6建立EBGP邻居,R2和R4建立EBGP邻居,子AS内部建立IBGP全连接
4、R1把业务网段宣告进BGP,要求AS 200内部所有路由器都能够学习到该业务网段路由
5、通过配置团体属性,使192.168.0.0/24网段路由只能传递至AS 200
三、实验思路
总体设计
- OSPF全域互联
- BGP Confederation
- EBGP出口
- 路由注入
四、实验配置
1. 接口IP地址配置
AR1 (AS1)
interface GigabitEthernet0/0/0 ip address 12.1.1.1 255.255.255.0 interface LoopBack0 ip address 1.1.1.1 255.255.255.255 interface LoopBack1 ip address 192.168.1.1 255.255.255.0R2 (Sub-AS 64512)
interface GigabitEthernet0/0/0 ip address 12.1.1.2 255.255.255.0 interface GigabitEthernet0/0/1 ip address 10.0.23.1 255.255.255.252 interface GigabitEthernet0/0/2 ip address 10.0.25.1 255.255.255.252 interface LoopBack0 ip address 2.2.2.2 255.255.255.255R3 (Sub-AS 64512)
interface GigabitEthernet0/0/0 ip address 10.0.23.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.34.1 255.255.255.252 interface LoopBack0 ip address 3.3.3.3 255.255.255.255 interface LoopBack1 ip address 172.16.3.1 255.255.255.0r4 (Sub-AS 64512)
interface GigabitEthernet0/0/0 ip address 10.0.34.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.47.1 255.255.255.252 interface LoopBack0 ip address 4.4.4.4 255.255.255.255r5 (Sub-AS 64513)
interface GigabitEthernet0/0/0 ip address 10.0.25.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.56.1 255.255.255.252 interface LoopBack0 ip address 5.5.5.5 255.255.255.255r6 (Sub-AS 64513)
interface GigabitEthernet0/0/0 ip address 10.0.56.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.67.1 255.255.255.252 interface LoopBack0 ip address 6.6.6.6 255.255.255.255r7 (Sub-AS 64513)
interface GigabitEthernet0/0/0 ip address 10.0.67.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.47.2 255.255.255.252 interface GigabitEthernet0/0/2 ip address 34.1.1.1 255.255.255.0 interface LoopBack0 ip address 7.7.7.7 255.255.255.255 interface LoopBack1 ip address 172.16.7.1 255.255.255.0r8 (AS3)
interface GigabitEthernet0/0/0 ip address 34.1.1.2 255.255.255.0 interface LoopBack0 ip address 8.8.8.8 255.255.255.255 interface LoopBack1 ip address 192.168.2.1 255.255.255.02. OSPF配置
AR1 OSPF
ospf 1 router-id 1.1.1.1 area 0.0.0.0 network 1.1.1.1 0.0.0.0 network 12.1.1.1 0.0.0.0R2 OSPF
ospf 1 router-id 2.2.2.2 area 0.0.0.0 network 2.2.2.2 0.0.0.0 network 10.0.23.1 0.0.0.0 network 10.0.25.1 0.0.0.0R3 OSPF
ospf 1 router-id 3.3.3.3 area 0.0.0.0 network 3.3.3.3 0.0.0.0 network 10.0.23.2 0.0.0.0 network 10.0.34.1 0.0.0.0 network 172.16.3.1 0.0.0.0r4 OSPF
ospf 1 router-id 4.4.4.4 area 0.0.0.0 network 4.4.4.4 0.0.0.0 network 10.0.34.2 0.0.0.0 network 10.0.47.1 0.0.0.0r5 OSPF
ospf 1 router-id 5.5.5.5 area 0.0.0.0 network 5.5.5.5 0.0.0.0 network 10.0.25.2 0.0.0.0 network 10.0.56.1 0.0.0.0r6 OSPF
ospf 1 router-id 6.6.6.6 area 0.0.0.0 network 6.6.6.6 0.0.0.0 network 10.0.56.2 0.0.0.0 network 10.0.67.1 0.0.0.0r7 OSPF
ospf 1 router-id 7.7.7.7 area 0.0.0.0 network 7.7.7.7 0.0.0.0 network 10.0.47.2 0.0.0.0 network 10.0.67.2 0.0.0.0 network 172.16.7.1 0.0.0.0r8 OSPF
ospf 1 router-id 8.8.8.8 area 0.0.0.0 network 8.8.8.8 0.0.0.0 network 34.1.1.2 0.0.0.03. BGP Confederation配置
AR1 (AS1)
bgp 1 peer 12.1.1.2 as-number 2 ipv4-family unicast undo synchronization network 1.1.1.1 255.255.255.255 network 192.168.1.0 peer 12.1.1.2 enableR2 (Sub-AS 64512)
bgp 64512 confederation id 2 confederation peer-as 64513 peer 3.3.3.3 as-number 64512 peer 3.3.3.3 connect-interface LoopBack0 peer 4.4.4.4 as-number 64512 peer 4.4.4.4 connect-interface LoopBack0 peer 10.0.25.2 as-number 64513 peer 12.1.1.1 as-number 1 ipv4-family unicast undo synchronization network 2.2.2.2 255.255.255.255 network 3.3.3.3 255.255.255.255 network 4.4.4.4 255.255.255.255 peer 3.3.3.3 enable peer 3.3.3.3 next-hop-local peer 3.3.3.3 preferred-value 100 peer 4.4.4.4 enable peer 4.4.4.4 next-hop-local peer 4.4.4.4 preferred-value 100 peer 10.0.25.2 enable peer 10.0.25.2 next-hop-local peer 12.1.1.1 enableR3 (Sub-AS 64512)
bgp 64512 confederation id 2 peer 2.2.2.2 as-number 64512 peer 2.2.2.2 connect-interface LoopBack0 peer 4.4.4.4 as-number 64512 peer 4.4.4.4 connect-interface LoopBack0 ipv4-family unicast undo synchronization network 3.3.3.3 255.255.255.255 network 172.16.3.0 255.255.255.0 peer 2.2.2.2 enable peer 2.2.2.2 next-hop-local peer 4.4.4.4 enable peer 4.4.4.4 next-hop-localr4 (Sub-AS 64512)
bgp 64512 confederation id 2 confederation peer-as 64513 peer 2.2.2.2 as-number 64512 peer 2.2.2.2 connect-interface LoopBack0 peer 3.3.3.3 as-number 64512 peer 3.3.3.3 connect-interface LoopBack0 peer 10.0.47.2 as-number 64513 ipv4-family unicast undo synchronization network 4.4.4.4 255.255.255.255 peer 2.2.2.2 enable peer 2.2.2.2 next-hop-local peer 3.3.3.3 enable peer 3.3.3.3 next-hop-local peer 10.0.47.2 enable peer 10.0.47.2 next-hop-localr5 (Sub-AS 64513)
bgp 64513 confederation id 2 confederation peer-as 64512 peer 6.6.6.6 as-number 64513 peer 6.6.6.6 connect-interface LoopBack0 peer 7.7.7.7 as-number 64513 peer 7.7.7.7 connect-interface LoopBack0 peer 10.0.25.1 as-number 64512 ipv4-family unicast undo synchronization network 5.5.5.5 255.255.255.255 peer 6.6.6.6 enable peer 6.6.6.6 next-hop-local peer 7.7.7.7 enable peer 7.7.7.7 next-hop-local peer 10.0.25.1 enable peer 10.0.25.1 next-hop-localr6 (Sub-AS 64513)
bgp 64513 confederation id 2 peer 5.5.5.5 as-number 64513 peer 5.5.5.5 connect-interface LoopBack0 peer 7.7.7.7 as-number 64513 peer 7.7.7.7 connect-interface LoopBack0 ipv4-family unicast undo synchronization network 6.6.6.6 255.255.255.255 peer 5.5.5.5 enable peer 5.5.5.5 next-hop-local peer 5.5.5.5 preferred-value 100 peer 7.7.7.7 enable peer 7.7.7.7 next-hop-local peer 7.7.7.7 preferred-value 100r7 (Sub-AS 64513)
bgp 64513 confederation id 2 confederation peer-as 64512 peer 5.5.5.5 as-number 64513 peer 5.5.5.5 connect-interface LoopBack0 peer 6.6.6.6 as-number 64513 peer 6.6.6.6 connect-interface LoopBack0 peer 10.0.47.1 as-number 64512 peer 34.1.1.2 as-number 3 ipv4-family unicast undo synchronization network 5.5.5.5 255.255.255.255 network 6.6.6.6 255.255.255.255 network 7.7.7.7 255.255.255.255 network 172.16.7.0 255.255.255.0 peer 5.5.5.5 enable peer 5.5.5.5 next-hop-local peer 6.6.6.6 enable peer 6.6.6.6 next-hop-local peer 10.0.47.1 enable peer 10.0.47.1 next-hop-local peer 34.1.1.2 enabler8 (AS3)
bgp 3 peer 34.1.1.1 as-number 2 ipv4-family unicast undo synchronization network 8.8.8.8 255.255.255.255 network 192.168.2.0 peer 34.1.1.1 enable五、验证汇总
1. BGP路由表验证
AR1 (AS1) BGP路由表
AR1已收到全部12条BGP路由,所有前缀均为valid+best(*>),包含全部8个环回地址及特殊环回。
R2 (Sub-AS 64512) BGP路由表
2. 连通性验证
AR1特殊环回 → r8特殊环回
AR1> ping -a 192.168.1.1 192.168.2.1 Reply from 192.168.2.1: bytes=56 Sequence=1 ttl=251 time=40 ms Reply from 192.168.2.1: bytes=56 Sequence=2 ttl=251 time=50 ms Reply from 192.168.2.1: bytes=56 Sequence=3 ttl=251 time=50 ms Reply from 192.168.2.1: bytes=56 Sequence=4 ttl=251 time=40 ms Reply from 192.168.2.1: bytes=56 Sequence=5 ttl=251 time=40 ms 0.00% packet loss3. BGP对等体状态验证
所有8台设备的BGP对等体均处于Established状态: