BGP实验报告
实验需求
1、AS1中存在两个环回,一个地址为192.168.1.0/24,该地址不能在任何协议中宣告;
AS3中存在两个环回,一个地址为192.168.2.0/24,该地址不能在任何协议中宣告,最终要求这两个环回可以ping通;
2、整个AS2的IP地址为172.16.0.0/16,请合理划分;并且其内部配置OSPF协议
3、AS间的骨干链路IP地址随意定制;
4、使用BGP协议让整个网络所有设备的环回可以互相访问;
5、减少路由条目数量,避免环路出现;
实验思路
1、子网划分:
首先,根据实验要求,将172.16.0.0/16全部划分为掩码为24的子网
172.16.0.0/24
172.16.1.0/24
172.16.2.0/24
172.16.3.0/24
172.16.4.0/24
172.16.5.0/24
172.16.6.0/24
172.16.7.0/24
建邻环回:此拓扑中有8个路由,这8个路由器都需要建邻,用172.16.0.0/24进行划分
172.16.0.1/32------R1
172.16.0.2/32------R2
172.16.0.3/32------R3
172.16.0.4/32------R4
172.16.0.5/32------R5
172.16.0.6/32------R6
172.16.0.7/32------R7
172.16.0.8/32------R8
AS2的骨干链路,用172.16.1.0/24网段进行划分,因为每条链路只需要两个IP地址,所以为了节约IP地址,可给限制可用IP地址数量为2个,AS 2中有6条骨干链路,所以需要6个/30的网段。
子网划分如下:
172.16.1.0/30
172.16.4.0/30
172.16.8.0/30
172.16.12.0/30
172.16.16.0/30
172.16.20.0/30
业务环回:将剩余的子网划分给业务环回
172.16.2.0/24------R2
172.16.3.0/24------R3
172.16.4.0/24------R4
172.16.5.0/24------R5
172.16.6.0/24------R6
172.16.7.0/24------R7
2、使用ospf配置通AS 2内部
3、配置BGP,建立EBGP、IBGP对等体关系,并修改一些属性,配置完成后,查看BGP邻居表,确保邻居都起来。
4、按题目要求宣告网段,查看BGP路由表的学习情况。
5、给两个固定环回搭建虚拟隧道。并在R1和R8上写个静态控制流量方向,实现192.168.1.0至192.168.2.0能通
6、检查实验要求是否达到,测试全网通。【ping -a 本地IP 目标IP】
实验步骤
1.配置各设备的接口IP地址
2.配置ospf协议,给R2至R7,,实现整个AS 2内部互通
[AR2-ospf-1]dis this
[V200R003C00]
#
ospf 1 router-id 2.2.2.2 area 0.0.0.0 network 172.16.0.2 0.0.0.0 network 172.16.1.1 0.0.0.0 network 172.16.1.21 0.0.0.0
#
return
[AR3-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 3.3.3.3 area 0.0.0.0 network 172.16.0.3 0.0.0.0 network 172.16.1.2 0.0.0.0 network 172.16.1.5 0.0.0.0 network 172.16.3.1 0.0.0.0
#
return
[AR4-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 4.4.4.4 area 0.0.0.0 network 172.16.0.4 0.0.0.0 network 172.16.1.6 0.0.0.0 network 172.16.1.9 0.0.0.0 network 172.16.3.1 0.0.0.0
#
return
[AR5-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 5.5.5.5 area 0.0.0.0 network 172.16.0.5 0.0.0.0 network 172.16.1.17 0.0.0.0 network 172.16.1.22 0.0.0.0 network 172.16.5.1 0.0.0.0
#
return
[AR6-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 6.6.6.6 area 0.0.0.0 network 172.16.0.6 0.0.0.0 network 172.16.1.13 0.0.0.0 network 172.16.1.18 0.0.0.0 network 172.16.6.1 0.0.0.0
#
return
[AR7-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 7.7.7.7 area 0.0.0.0 network 172.16.0.7 0.0.0.0 network 172.16.1.10 0.0.0.0 network 172.16.1.14 0.0.0.0 network 172.16.7.1 0.0.0.0
#
return
3.配置BGP协议
[AR1-bgp]display th
[V200R003C00]
#
bgp 1router-id 1.1.1.1peer 12.1.1.2 as-number 2 #ipv4-family unicastundo synchronizationnetwork 172.16.0.1 255.255.255.255 peer 12.1.1.2 enable#ipv6-family unicastundo synchronization
#
return[AR2-bgp]display this
[V200R003C00]
#
bgp 64512router-id 2.2.2.2confederation id 2confederation peer-as 64513peer 12.1.1.1 as-number 1 peer 172.16.0.3 as-number 64512 peer 172.16.0.3 connect-interface LoopBack0peer 172.16.0.5 as-number 64513 peer 172.16.0.5 ebgp-max-hop 255 peer 172.16.0.5 connect-interface LoopBack0#ipv4-family unicastundo synchronizationnetwork 172.16.0.2 255.255.255.255 network 172.16.2.0 255.255.255.0 peer 12.1.1.1 enablepeer 172.16.0.3 enablepeer 172.16.0.3 next-hop-local peer 172.16.0.5 enable#ipv6-family unicastundo synchronization
#
return[AR3-bgp]display this
[V200R003C00]
#
bgp 64512router-id 3.3.3.3confederation id 2peer 172.16.0.2 as-number 64512 peer 172.16.0.2 connect-interface LoopBack0peer 172.16.0.4 as-number 64512 peer 172.16.0.4 connect-interface LoopBack0#ipv4-family unicastundo synchronizationnetwork 172.16.0.3 255.255.255.255 network 172.16.3.0 255.255.255.0 peer 172.16.0.2 enablepeer 172.16.0.2 reflect-clientpeer 172.16.0.2 next-hop-local peer 172.16.0.4 enablepeer 172.16.0.4 next-hop-local
#
return[AR4-bgp]display this
[V200R003C00]
#
bgp 64512router-id 4.4.4.4confederation id 2confederation peer-as 64513peer 172.16.0.3 as-number 64512 peer 172.16.0.3 connect-interface LoopBack0peer 172.16.0.7 as-number 64513 peer 172.16.0.7 ebgp-max-hop 255 peer 172.16.0.7 connect-interface LoopBack0#ipv4-family unicastundo synchronizationnetwork 172.16.0.0 network 172.16.0.4 255.255.255.255 network 172.16.4.0 255.255.255.0 peer 172.16.0.3 enablepeer 172.16.0.3 next-hop-local peer 172.16.0.7 enable
#
return[AR5-bgp]display this
[V200R003C00]
#
bgp 64513router-id 5.5.5.5confederation id 2confederation peer-as 64512peer 172.16.0.2 as-number 64512 peer 172.16.0.2 ebgp-max-hop 255 peer 172.16.0.2 connect-interface LoopBack0peer 172.16.0.6 as-number 64513 peer 172.16.0.6 connect-interface LoopBack0#ipv4-family unicastundo synchronizationnetwork 172.16.0.5 255.255.255.255 network 172.16.5.0 255.255.255.0 peer 172.16.0.2 enablepeer 172.16.0.6 enablepeer 172.16.0.6 next-hop-local
#
return[AR6-bgp]display this
[V200R003C00]
#
bgp 64513router-id 6.6.6.6confederation id 2peer 172.16.0.5 as-number 64513 peer 172.16.0.5 connect-interface LoopBack0peer 172.16.0.7 as-number 64513 peer 172.16.0.7 connect-interface LoopBack0#ipv4-family unicastundo synchronizationnetwork 172.16.0.6 255.255.255.255 network 172.16.6.0 255.255.255.0 peer 172.16.0.5 enablepeer 172.16.0.5 next-hop-local peer 172.16.0.7 enablepeer 172.16.0.7 reflect-clientpeer 172.16.0.7 next-hop-local
#
return[AR7-bgp]display this
[V200R003C00]
#
bgp 64513router-id 7.7.7.7confederation id 2confederation peer-as 64512peer 34.1.1.8 as-number 3 peer 172.16.0.4 as-number 64512 peer 172.16.0.4 ebgp-max-hop 255 peer 172.16.0.4 connect-interface LoopBack0peer 172.16.0.6 as-number 64513 peer 172.16.0.6 connect-interface LoopBack0#ipv4-family unicastundo synchronizationnetwork 172.16.0.7 255.255.255.255 network 172.16.7.0 255.255.255.0 peer 34.1.1.8 enablepeer 172.16.0.4 enablepeer 172.16.0.6 enablepeer 172.16.0.6 next-hop-local
#
return[AR8-bgp]display this
[V200R003C00]
#
bgp 3router-id 8.8.8.8peer 34.1.1.7 as-number 2 #ipv4-family unicastundo synchronizationnetwork 172.16.0.8 255.255.255.255 peer 34.1.1.7 enable#ipv6-family unicastundo synchronization
#
return
做192.168.1.0/24到192.168.2.0/24之间的GRE,使两个网段互通。
[AR1-Tunnel0/0/0]display this
[V200R003C00]
#
interface Tunnel0/0/0ip address 10.1.1.1 255.255.255.0 tunnel-protocol gresource 172.16.0.1destination 172.16.0.8
#
return
[AR1-Tunnel0/0/0]dsi
[AR1-Tunnel0/0/0]q
[AR1]dis th
[AR1]dis this
[V200R003C00]
#
ip route-static 192.168.2.0 255.255.255.0 10.1.1.2
#
return
[AR1][AR8-Tunnel0/0/0]display this
[V200R003C00]
#
interface Tunnel0/0/0ip address 10.1.1.2 255.255.255.0 tunnel-protocol gresource 172.16.0.8destination 172.16.0.1
#
return
[AR8-Tunnel0/0/0]q
[AR8]dis
[AR8]display th
[AR8]display this
[V200R003C00]
#
ip route-static 192.168.1.0 255.255.255.0 10.1.1.1
#
return
[AR8]