文章目录
- 一、拓扑
- 二、需求
- 三、步骤
- 1. IP划分
- 2. IP配置
- 3. IGP(OSPF)配置
- 4. BGP配置
- 1)建立对等体关系
- 2)发布路由
- 5. 配置GRE实现环回通信
- 四、测试
一、拓扑
二、需求
- AS1存在两个环回,一个地址为192.168.1.0/24该地址不能在任何协议中宣告
AS3中存在两个环回,一个地址为192.168.2.0/24该地址不能在任何协议中宣告,最终要求这两个环回可以互相通讯
AS1的另一个环回为10.0.0.0/24,AS3的另一个环回为11.0.0.0/24 - 整个AS2的IP地址为172.16.0.0/16,请合理划分
- AS间的骨干链路IP地址随意定制
- 使用BGP协议让整个网络所有设备的环回可以互相访问
- 少路由条目数量,避免环路出现
三、步骤
1. IP划分
| 路由器 | AS号 | IP |
|---|---|---|
| R1 | 1 | LB0: 192.168.1.1/24 LB1: 10.0.0.1/24 G0/0/0: 100.0.0.1/30 |
| R2 | 2 64512 | G0/0/0: 100.0.0.2/30 G0/0/1: 172.16.0.1/30 G0/0/2: 172.16.0.9/30 |
| R3 | 2 64512 | G0/0/0: 172.16.0.2/30 G0/0/1: 172.16.0.5/30 |
| R4 | 2 64512 | G0/0/0: 172.16.0.6/30 G0/0/1: 172.16.0.129/30 |
| R5 | 2 64513 | G0/0/0: 172.16.0.10/30 G0/0/1: 172.16.0.133/30 |
| R6 | 2 64513 | G0/0/0: 172.16.0.134/30 G0/0/1: 172.16.0.137/30 |
| R7 | 2 64513 | G0/0/0: 172.16.0.138/30 G0/0/1: 172.16.0.130/30 G0/0/2: 101.0.0.1/30 |
| R8 | 3 | LB0: 192.168.2.1/24 LB1: 11.0.0.1/24 G0/0/0: 101.0.0.2/30 |
2. IP配置
R1
Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 100.0.0.1/30 up up GigabitEthernet0/0/1 unassigned down down GigabitEthernet0/0/2 unassigned down down LoopBack0 192.168.1.1/24 up up(s) LoopBack1 10.0.0.1/24 up up(s) NULL0 unassigned up up(s)R2
Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 100.0.0.2/30 up up GigabitEthernet0/0/1 172.16.0.1/30 up up GigabitEthernet0/0/2 172.16.0.9/30 up up NULL0 unassigned up up(s)R3
Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.2/30 up up GigabitEthernet0/0/1 172.16.0.5/30 up up GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)R4
Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.6/30 up up GigabitEthernet0/0/1 172.16.0.129/30 up up GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)R5
Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.10/30 up up GigabitEthernet0/0/1 172.16.0.133/30 up up GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)R6
Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.134/30 up up GigabitEthernet0/0/1 172.16.0.137/30 up up GigabitEthernet0/0/2 unassigned down down NULL0 unassigned up up(s)R7
Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 172.16.0.138/30 up up GigabitEthernet0/0/1 172.16.0.130/30 up up GigabitEthernet0/0/2 101.0.0.1/30 up up NULL0 unassigned up up(s)R8
Interface IP Address/Mask Physical Protocol GigabitEthernet0/0/0 101.0.0.2/30 up up GigabitEthernet0/0/1 unassigned down down GigabitEthernet0/0/2 unassigned down down LoopBack0 192.168.2.1/24 up up(s) LoopBack1 11.0.0.1/24 up up(s) NULL0 unassigned up up(s)3. IGP(OSPF)配置
R2
[R2]ospf 1 router-id 2.2.2.2 [R2-ospf-1]area 0 [R2-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0 [R2-ospf-1-area-0.0.0.0]network 172.16.0.9 0.0.0.0R3
[R3]ospf 1 router-id 3.3.3.3 [R3-ospf-1]area 0 [R3-ospf-1-area-0.0.0.0]network 172.16.0.2 0.0.0.0 [R3-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0R4
[R4]ospf 1 router-id 4.4.4.4 [R4-ospf-1]area 0 [R4-ospf-1-area-0.0.0.0]network 172.16.0.6 0.0.0.0 [R4-ospf-1-area-0.0.0.0]network 172.16.0.129 0.0.0.0R5
[R5]ospf 1 router-id 5.5.5.5 [R5-ospf-1]area 0 [R5-ospf-1-area-0.0.0.0]network 172.16.0.10 0.0.0.0 [R5-ospf-1-area-0.0.0.0]network 172.16.0.133 0.0.0.0R6
[R6]ospf 1 router-id 6.6.6.6 [R6-ospf-1]area 0 [R6-ospf-1-area-0.0.0.0]network 172.16.0.134 0.0.0.0 [R6-ospf-1-area-0.0.0.0]network 172.16.0.137 0.0.0.0R7
[R7]ospf 1 router-id 7.7.7.7 [R7-ospf-1]area 0 [R7-ospf-1-area-0.0.0.0]network 172.16.0.138 0.0.0.0 [R7-ospf-1-area-0.0.0.0]network 172.16.0.130 0.0.0.0测试OSPF是否已全网可达
4. BGP配置
1)建立对等体关系
在AS2中,需要用联邦防止IBGP的水平分割
在联邦中,需要配置路由反射防止IBGP水平分割
R1
[R1]bgp 1 [R1-bgp]router-id 1.1.1.1 [R1-bgp]peer 100.0.0.2 as-number 2R2(注意配置点:需指定下一跳、联邦之间连接配置)
[R2]bgp 64512 [R2-bgp]router-id 2.2.2.2 [R2-bgp]router-id 2.2.2.2 [R2-bgp]confederation id 2 [R2-bgp]peer 100.0.0.1 as-number 1 [R2-bgp]peer 172.16.0.2 as-number 64512 [R2-bgp]peer 172.16.0.2 next-hop-local [R2-bgp]confederation peer-as 64513 [R2-bgp]peer 172.16.0.10 as-number 64513R3(注意配置点:需指定下一跳、指定反射客户)
[R3]bgp 64512 [R3-bgp]router-id 3.3.3.3 [R3-bgp]confederation id 2 [R3-bgp]peer 172.16.0.1 as-number 64512 [R3-bgp]peer 172.16.0.1 next-hop-local [R3-bgp]peer 172.16.0.1 reflect-client [R3-bgp]peer 172.16.0.6 as-number 64512 [R3-bgp]peer 172.16.0.6 next-hop-localR4(注意配置点:需指定下一跳、联邦之间连接配置)
[R4]bgp 64512 [R4-bgp]router-id 4.4.4.4 [R4-bgp]confederation id 2 [R4-bgp]peer 172.16.0.5 as-number 64512 [R4-bgp]peer 172.16.0.5 next-hop-local [R4-bgp]confederation peer-as 64513 [R4-bgp]peer 172.16.0.130 as-number 64513R5
[R5]bgp 64513 [R5-bgp]router-id 5.5.5.5 [R5-bgp]confederation id 2 [R5-bgp]confederation peer-as 64512 [R5-bgp]peer 172.16.0.9 as-number 64512 [R5-bgp]peer 172.16.0.134 as-number 64513 [R5-bgp]peer 172.16.0.134 next-hop-localR6
[R6]bgp 64513 [R6-bgp]router-id 6.6.6.6 [R6-bgp]confederation id 2 [R6-bgp]peer 172.16.0.133 as-number 64513 [R6-bgp]peer 172.16.0.133 next-hop-local [R6-bgp]peer 172.16.0.138 reflect-client [R6-bgp]peer 172.16.0.138 as-number 64513 [R6-bgp]peer 172.16.0.138 next-hop-localR7
[R7]bgp 64513 [R7-bgp]router-id 7.7.7.7 [R7-bgp]confederation id 2 [R7-bgp]peer 101.0.0.2 as-number 3 [R7-bgp]peer 172.16.0.137 as-number 64513 [R7-bgp]peer 172.16.0.137 next-hop-local [R7-bgp]confederation peer-as 64512 [R7-bgp]peer 172.16.0.129 as-number 64512R8
[R8]bgp 3 [R8-bgp]router-id 8.8.8.8 [R8-bgp]peer 101.0.0.1 as-number 22)发布路由
[R2-bgp]network 100.0.0.0 30 [R7-bgp]network 101.0.0.0 30 [R7-bgp]import-route ospf 1 [R7-bgp]aggregate 172.16.0.0 16 detail-suppressed as-set防止环路
[R2-bgp]ip route-static 172.16.0.0 16 NULL 0 [R7-bgp]ip route-static 172.16.0.0 16 NULL 0测试是否发布成功
5. 配置GRE实现环回通信
R1
[R1]interface Tunnel 0/0/0 [R1-Tunnel0/0/0]tunnel-protocol gre [R1-Tunnel0/0/0]ip address 12.0.0.1 24 [R1-Tunnel0/0/0]source 100.0.0.1 [R1-Tunnel0/0/0]destination 101.0.0.2 [R1]ip route-static 192.168.2.0 24 Tunnel 0/0/0 [R1]ip route-static 11.0.0.0 24 Tunnel 0/0/0R8
[R8]int Tunnel 0/0/0 [R8-Tunnel0/0/0]tunnel-protocol gre [R8-Tunnel0/0/0]ip address 12.0.0.2 24 [R8-Tunnel0/0/0]source 101.0.0.2 [R8-Tunnel0/0/0]destination 100.0.0.1 [R8]ip route-static 10.0.0.0 24 Tunnel 0/0/0 [R8]ip route-static 192.168.1.0 24 Tunnel 0/0/0四、测试
已实现R1与R8环回互相通信