当前位置：首页 > news >正文

BGP联邦和发射试验

news 来源：原创 2025/5/15 10:10:10

一、要求

二、需求分析

1. **拓扑与地址规划**
- **AS1**：环回`16.1.1.0/24`需宣告，`192.168.1.0/24`不宣告。
- **AS3**：环回`11.1.1.0/24`需宣告，`192.168.2.0/24`不宣告。
- **AS2**：使用`172.16.0.0/16`划分子网。
- **骨干链路**：灵活分配。

2. **路由协议**
- **AS内部**：AS1/AS3用OSPF/EIGRP，过滤未宣告环回；AS2用OSPF全网可达。
- **AS间**：通过BGP互联（AS1-AS2-AS3），宣告`16.1.1.0/24`和`11.1.1.0/24`。

3. **优化与防环**
- **路由汇总**：BGP边界汇总路由，减少条目。
- **防环机制**：BGP通过`AS_PATH`检测环路，IGP过滤未宣告网段。

4. **配置核心步骤**
- 配置环回接口，仅宣告指定网段。
- AS间链路启用BGP，建立eBGP邻居并宣告合法路由。
- AS内启用IGP（如OSPF），通过前缀列表过滤敏感路由。

5. **验证要点**
- 测试`16.1.1.0/24`与`11.1.1.0/24`互通性。
- 检查路由表中无未宣告的`192.168.x.0/24`网段。
- 确认BGP表无重复AS_PATH。

**关键点**：通过BGP实现跨AS通信，IGP保障AS内连通，严格路由过滤与汇总优化网络性能。

三、配置

AR1

interface GigabitEthernet 0/0/0ip address 12.0.0.1 24interface LoopBack0ip address 10.1.1.1 24interface LoopBack1ip address 192.168.1.1 24bgp 1router-id 1.1.1.1peer 12.0.0.2 as-number 2network 10.1.1.0 24interface Tunnel 0/0/0ip address 18.1.1.1 24tunnel-protocol gresource 10.1.1.1destination 11.1.1.1ip route-static 192.168.2.0 24 18.1.1.2

AR2

interface GigabitEthernet 0/0/0ip address 12.0.0.2 24interface GigabitEthernet 0/0/1ip address 172.16.0.1 30interface GigabitEthernet 0/0/2ip address 172.16.0.21 30interface LoopBack0ip address 2.2.2.2 32interface LoopBack1ip address 172.16.2.1 24ospf 1 router-id 2.2.2.2area 0network 172.16.0.0 0.0.0.255network 2.2.2.2 0.0.0.0bgp 64512router-id 2.2.2.2confederation id 2peer 12.0.0.1 as-number 1peer 3.3.3.3 as-number 64512peer 3.3.3.3 connect-interface LoopBack 0peer 3.3.3.3 next-hop-localpeer 5.5.5.5 as-number 64513peer 5.5.5.5 connect-interface LoopBack 0peer 5.5.5.5 next-hop-localpeer 5.5.5.5 ebgp-max-hop 255confederation peer-as 64513network 172.16.0.0 24network 172.16.0.0 16ip route-static 172.16.0.0 16 NULL 0

AR3

interface GigabitEthernet 0/0/0ip address 172.16.0.2 30interface GigabitEthernet 0/0/1ip address 172.16.0.5 30interface LoopBack0ip address 3.3.3.3 32interface LoopBack1ip address 172.16.3.1 24ospf 1 router-id 3.3.3.3area 0network 172.16.0.0 0.0.0.255network 3.3.3.3 0.0.0.0bgp 64512confederation id 2router-id 3.3.3.3peer 2.2.2.2 as-number 64512peer 2.2.2.2 connect-interface LoopBack 0peer 4.4.4.4 as-number 64512peer 4.4.4.4 connect-interface LoopBack 0peer 2.2.2.2 reflect-client peer 4.4.4.4 reflect-client

AR4

interface GigabitEthernet 0/0/0ip address 172.16.0.6 30interface GigabitEthernet 0/0/1ip address 172.16.0.9 30interface LoopBack0ip address 4.4.4.4 32interface LoopBack1ip address 172.16.4.1 24ospf 1 router-id 4.4.4.4area 0network 172.16.0.0 0.0.0.255network 4.4.4.4 0.0.0.0bgp 64512confederation id 2router-id 4.4.4.4peer 3.3.3.3 as-number 64512peer 3.3.3.3 connect-interface LoopBack 0peer 3.3.3.3 next-hop-localconfederation peer-as 64513peer 7.7.7.7 as-number 64513peer 7.7.7.7 connect-interface LoopBack 0peer 7.7.7.7 next-hop-localpeer 7.7.7.7 ebgp-max-hop 255

AR5

interface GigabitEthernet 0/0/0ip address 172.16.0.22 30interface GigabitEthernet 0/0/1ip address 172.16.0.17 30interface LoopBack0ip address 5.5.5.5 32interface LoopBack1ip address 172.16.5.1 24ospf 1 router-id 5.5.5.5area 0network 172.16.0.0 0.0.0.255network 5.5.5.5 0.0.0.0bgp 64513confederation id 2router-id 5.5.5.5peer 6.6.6.6 as-number 64513peer 6.6.6.6 connect-interface LoopBack 0peer 6.6.6.6 next-hop-localconfederation peer-as 64512peer 2.2.2.2 as-number 64512peer 2.2.2.2 connect-interface LoopBack 0peer 2.2.2.2 next-hop-localpeer 2.2.2.2 ebgp-max-hop 255

AR6

interface GigabitEthernet 0/0/0ip address 172.16.0.18 30interface GigabitEthernet 0/0/1ip address 172.16.0.13 30interface LoopBack0ip address 6.6.6.6 32interface LoopBack1ip address 172.16.6.1 24ospf 1 router-id 6.6.6.6area 0network 172.16.0.0 0.0.0.255network 6.6.6.6 0.0.0.0bgp 64513confederation id 2router-id 6.6.6.6peer 5.5.5.5 as-number 64513peer 5.5.5.5 connect-interface LoopBack 0peer 7.7.7.7 as-number 64513peer 7.7.7.7 connect-interface LoopBack 0peer 5.5.5.5 reflect-client peer 7.7.7.7 reflect-client

AR7

interface GigabitEthernet 0/0/0ip address 172.16.0.14 30interface GigabitEthernet 0/0/1ip address 172.16.0.10 30interface GigabitEthernet 0/0/2ip address 78.0.0.7 24interface LoopBack0ip address 7.7.7.7 32interface LoopBack1ip address 172.16.7.1 24ospf 1 router-id 7.7.7.7area 0network 172.16.0.0 0.0.0.255network 7.7.7.7 0.0.0.0bgp 64513confederation id 2router-id 7.7.7.7peer 78.0.0.8 as-number 3peer 6.6.6.6 as-number 64513peer 6.6.6.6 connect-interface LoopBack 0peer 6.6.6.6 next-hop-localconfederation peer-as 64512peer 4.4.4.4 as-number 64512peer 4.4.4.4 connect-interface LoopBack 0peer 4.4.4.4 next-hop-localpeer 4.4.4.4 ebgp-max-hop 255network 172.16.0.0 24network 172.16.0.0 16ip route-static 172.16.0.0 16 NULL 0

AR8

interface GigabitEthernet 0/0/0ip address 78.0.0.8 24interface LoopBack0ip address 11.1.1.1 24interface LoopBack1ip address 192.168.2.1 24bgp 3router-id 8.8.8.8peer 78.0.0.7 as-number 2network 11.1.1.0 24interface Tunnel 0/0/0ip address 18.1.1.2 24tunnel-protocol gresource 11.1.1.1destination 10.1.1.1ip route-static 192.168.1.0 24 18.1.1.1