实验需求
1、AS1中存在两个环回,一个地址为192.168.1.0/24,该地址不能在任何协议中宣告;
AS3中存在两个环回,一个地址为192.168.2.0/24,该地址不能在任何协议中宣告,最终要求这两个环回可以ping通;
2、整个AS2的IP地址为172.16.0.0/16,请合理划分;并且其内部配置OSPF协议
3、AS间的骨干链路IP地址随意定制;
4、使用BGP协议让整个网络所有设备的环回可以互相访问;
5、减少路由条目数量,避免环路出现;
实验思路
1、子网划分:
首先,根据实验要求,将172.16.0.0/16全部划分为掩码为24的子网
172.16.0.0/24
172.16.1.0/24
172.16.2.0/24
172.16.3.0/24
172.16.4.0/24
172.16.5.0/24
172.16.6.0/24
172.16.7.0/24
建邻环回:此拓扑中有8个路由,这8个路由器都需要建邻,用172.16.0.0/24进行划分
172.16.0.1/32------R1
172.16.0.2/32------R2
172.16.0.3/32------R3
172.16.0.4/32------R4
172.16.0.5/32------R5
172.16.0.6/32------R6
172.16.0.7/32------R7
172.16.0.8/32------R8
AS2的骨干链路,用172.16.1.0/24网段进行划分,因为每条链路只需要两个IP地址,所以为了节约IP地址,可给限制可用IP地址数量为2个,AS 2中有6条骨干链路,所以需要6个/30的网段。
子网划分如下:
172.16.1.0/30
172.16.4.0/30
172.16.8.0/30
172.16.12.0/30
172.16.16.0/30
172.16.20.0/30
业务环回:将剩余的子网划分给业务环回
172.16.2.0/24------R2
172.16.3.0/24------R3
172.16.4.0/24------R4
172.16.5.0/24------R5
172.16.6.0/24------R6
172.16.7.0/24------R7
2、使用ospf配置通AS 2内部
3、配置BGP,建立EBGP、IBGP对等体关系,并修改一些属性,配置完成后,查看BGP邻居表,确保邻居都起来。
4、按题目要求宣告网段,查看BGP路由表的学习情况。
5、给两个固定环回搭建虚拟隧道。并在R1和R8上写个静态控制流量方向,实现192.168.1.0至192.168.2.0能通
6、检查实验要求是否达到,测试全网通。【ping -a 本地IP 目标IP】
实验步骤
1.配置各设备的接口IP地址
2.配置ospf协议,给R2至R7,,实现整个AS 2内部互通
[AR2-ospf-1]dis this
[V200R003C00]
#
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 172.16.0.2 0.0.0.0
network 172.16.1.1 0.0.0.0
network 172.16.1.21 0.0.0.0
#
return
[AR3-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 172.16.0.3 0.0.0.0
network 172.16.1.2 0.0.0.0
network 172.16.1.5 0.0.0.0
network 172.16.3.1 0.0.0.0
#
return
[AR4-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 4.4.4.4
area 0.0.0.0
network 172.16.0.4 0.0.0.0
network 172.16.1.6 0.0.0.0
network 172.16.1.9 0.0.0.0
network 172.16.3.1 0.0.0.0
#
return
[AR5-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 5.5.5.5
area 0.0.0.0
network 172.16.0.5 0.0.0.0
network 172.16.1.17 0.0.0.0
network 172.16.1.22 0.0.0.0
network 172.16.5.1 0.0.0.0
#
return
[AR6-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 6.6.6.6
area 0.0.0.0
network 172.16.0.6 0.0.0.0
network 172.16.1.13 0.0.0.0
network 172.16.1.18 0.0.0.0
network 172.16.6.1 0.0.0.0
#
return
[AR7-ospf-1]display this
[V200R003C00]
#
ospf 1 router-id 7.7.7.7
area 0.0.0.0
network 172.16.0.7 0.0.0.0
network 172.16.1.10 0.0.0.0
network 172.16.1.14 0.0.0.0
network 172.16.7.1 0.0.0.0
#
return
3.配置BGP协议
[AR1-bgp]display th
[V200R003C00]
#
bgp 1
router-id 1.1.1.1
peer 12.1.1.2 as-number 2
#
ipv4-family unicast
undo synchronization
network 172.16.0.1 255.255.255.255
peer 12.1.1.2 enable
#
ipv6-family unicast
undo synchronization
#
return
[AR2-bgp]display this
[V200R003C00]
#
bgp 64512
router-id 2.2.2.2
confederation id 2
confederation peer-as 64513
peer 12.1.1.1 as-number 1
peer 172.16.0.3 as-number 64512
peer 172.16.0.3 connect-interface LoopBack0
peer 172.16.0.5 as-number 64513
peer 172.16.0.5 ebgp-max-hop 255
peer 172.16.0.5 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
network 172.16.0.2 255.255.255.255
network 172.16.2.0 255.255.255.0
peer 12.1.1.1 enable
peer 172.16.0.3 enable
peer 172.16.0.3 next-hop-local
peer 172.16.0.5 enable
#
ipv6-family unicast
undo synchronization
#
return
[AR3-bgp]display this
[V200R003C00]
#
bgp 64512
router-id 3.3.3.3
confederation id 2
peer 172.16.0.2 as-number 64512
peer 172.16.0.2 connect-interface LoopBack0
peer 172.16.0.4 as-number 64512
peer 172.16.0.4 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
network 172.16.0.3 255.255.255.255
network 172.16.3.0 255.255.255.0
peer 172.16.0.2 enable
peer 172.16.0.2 reflect-client
peer 172.16.0.2 next-hop-local
peer 172.16.0.4 enable
peer 172.16.0.4 next-hop-local
#
return
[AR4-bgp]display this
[V200R003C00]
#
bgp 64512
router-id 4.4.4.4
confederation id 2
confederation peer-as 64513
peer 172.16.0.3 as-number 64512
peer 172.16.0.3 connect-interface LoopBack0
peer 172.16.0.7 as-number 64513
peer 172.16.0.7 ebgp-max-hop 255
peer 172.16.0.7 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
network 172.16.0.0
network 172.16.0.4 255.255.255.255
network 172.16.4.0 255.255.255.0
peer 172.16.0.3 enable
peer 172.16.0.3 next-hop-local
peer 172.16.0.7 enable
#
return
[AR5-bgp]display this
[V200R003C00]
#
bgp 64513
router-id 5.5.5.5
confederation id 2
confederation peer-as 64512
peer 172.16.0.2 as-number 64512
peer 172.16.0.2 ebgp-max-hop 255
peer 172.16.0.2 connect-interface LoopBack0
peer 172.16.0.6 as-number 64513
peer 172.16.0.6 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
network 172.16.0.5 255.255.255.255
network 172.16.5.0 255.255.255.0
peer 172.16.0.2 enable
peer 172.16.0.6 enable
peer 172.16.0.6 next-hop-local
#
return
[AR6-bgp]display this
[V200R003C00]
#
bgp 64513
router-id 6.6.6.6
confederation id 2
peer 172.16.0.5 as-number 64513
peer 172.16.0.5 connect-interface LoopBack0
peer 172.16.0.7 as-number 64513
peer 172.16.0.7 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
network 172.16.0.6 255.255.255.255
network 172.16.6.0 255.255.255.0
peer 172.16.0.5 enable
peer 172.16.0.5 next-hop-local
peer 172.16.0.7 enable
peer 172.16.0.7 reflect-client
peer 172.16.0.7 next-hop-local
#
return
[AR7-bgp]display this
[V200R003C00]
#
bgp 64513
router-id 7.7.7.7
confederation id 2
confederation peer-as 64512
peer 34.1.1.8 as-number 3
peer 172.16.0.4 as-number 64512
peer 172.16.0.4 ebgp-max-hop 255
peer 172.16.0.4 connect-interface LoopBack0
peer 172.16.0.6 as-number 64513
peer 172.16.0.6 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
network 172.16.0.7 255.255.255.255
network 172.16.7.0 255.255.255.0
peer 34.1.1.8 enable
peer 172.16.0.4 enable
peer 172.16.0.6 enable
peer 172.16.0.6 next-hop-local
#
return
[AR8-bgp]display this
[V200R003C00]
#
bgp 3
router-id 8.8.8.8
peer 34.1.1.7 as-number 2
#
ipv4-family unicast
undo synchronization
network 172.16.0.8 255.255.255.255
peer 34.1.1.7 enable
#
ipv6-family unicast
undo synchronization
#
return
做192.168.1.0/24到192.168.2.0/24之间的GRE,使两个网段互通。
[AR1-Tunnel0/0/0]display this
[V200R003C00]
#
interface Tunnel0/0/0
ip address 10.1.1.1 255.255.255.0
tunnel-protocol gre
source 172.16.0.1
destination 172.16.0.8
#
return
[AR1-Tunnel0/0/0]dsi
[AR1-Tunnel0/0/0]q
[AR1]dis th
[AR1]dis this
[V200R003C00]
#
ip route-static 192.168.2.0 255.255.255.0 10.1.1.2
#
return
[AR1]
[AR8-Tunnel0/0/0]display this
[V200R003C00]
#
interface Tunnel0/0/0
ip address 10.1.1.2 255.255.255.0
tunnel-protocol gre
source 172.16.0.8
destination 172.16.0.1
#
return
[AR8-Tunnel0/0/0]q
[AR8]dis
[AR8]display th
[AR8]display this
[V200R003C00]
#
ip route-static 192.168.1.0 255.255.255.0 10.1.1.1
#
return
[AR8]