02實(shí)驗(yàn)手冊hcrse207-bgp advance指導(dǎo)書

1、認(rèn)證 R&S 系列HCIE-R&SIP網(wǎng)絡(luò)工程師實(shí)驗(yàn)指導(dǎo)手冊版本:3.0技術(shù)非經(jīng)本公司播。技術(shù)，任何2018。 保留一切權(quán)利。和個人不得擅自摘抄、本文檔內(nèi)容的部分或全部，并不得以傳商標(biāo)和其他商標(biāo)均為技術(shù)的商標(biāo)。本文檔提及的其他所有商標(biāo)或商標(biāo)，由各自的所有人擁有。注意您的產(chǎn)品、服務(wù)或特性等應(yīng)受公司商業(yè)合同和條款的約束，本文檔中描述的全部或部分產(chǎn)品、服務(wù)或特性可能不在您的或使用范圍之內(nèi)。除非合同另有約定，公司對本文檔內(nèi)容不做任何明示或暗示的或保證。由于產(chǎn)品版本升級或其他原因，本文檔內(nèi)容會不定期進(jìn)行更新。除非另有約定，本文檔僅作為使用指導(dǎo)，本文檔中的所有陳述、信息和建議不任何明示或暗示的擔(dān)保。技術(shù)總

2、部辦公樓地址：市龍崗區(qū)坂田：518129：h專有和信息技術(shù)第 1頁認(rèn)證體系介紹培養(yǎng)經(jīng)驗(yàn)及對行業(yè)發(fā)展的深刻理解，基于認(rèn)證體系是公司憑借多年“平臺生態(tài)”，圍繞“”協(xié)同的新技術(shù)架構(gòu)，打造包含架構(gòu)認(rèn)證、開發(fā)者認(rèn)證、行業(yè)認(rèn)證三大類認(rèn)證的認(rèn)證體系，是業(yè)界唯一覆蓋全技術(shù)領(lǐng)域的認(rèn)證體系。依托公司雄厚的技術(shù)實(shí)力和專業(yè)的培訓(xùn)體系，認(rèn)證考慮到不同客戶對R&S技術(shù)不同層次的需求，致力于為客戶提供實(shí)戰(zhàn)性、專業(yè)化的技術(shù)認(rèn)證。HCIE-R&S（Certifiedernetwork Expert-Routing & Switching ，認(rèn)證網(wǎng)絡(luò)通信工程師R&S方向）是對企業(yè)網(wǎng)絡(luò)級知識和技能的認(rèn)證。目的是幫助企業(yè)網(wǎng)絡(luò)高級工程

3、師搭建完整的大型復(fù)雜企業(yè)網(wǎng)絡(luò)，支撐企業(yè)所需的語音、無線、云、安全和等應(yīng)用全面集成到網(wǎng)絡(luò)之中，滿足企業(yè)各種應(yīng)用對網(wǎng)絡(luò)的使用需求。同時能夠提供完整的故障排除能力，可根據(jù)企業(yè)和網(wǎng)絡(luò)技術(shù)發(fā)展來規(guī)劃企業(yè)網(wǎng)絡(luò)，提高安全性、可用性和可靠性。認(rèn)證協(xié)助您打開行業(yè)之窗，開啟改變，屹立在R&S網(wǎng)絡(luò)世界的潮頭浪尖！第 2頁第 3頁目錄1 BGP Advance 實(shí)驗(yàn)4實(shí)驗(yàn)介紹41.1關(guān)于本實(shí)驗(yàn)4實(shí)驗(yàn)?zāi)康?實(shí)驗(yàn)組網(wǎng)介紹5實(shí)驗(yàn)規(guī)劃51.1.11.1.21.1.31.1.4實(shí)驗(yàn)任務(wù)配置71.2配置思路7配置步驟及驗(yàn)證81.2.11.2.2配置參考211.3R1 的配置21R2 的配置24R3 的配置27R4 的配置29R5

4、 的配置31R6 的配置34R7 的配置35R8 的配置38思考題391.4第 4頁1BGP Advance 實(shí)驗(yàn)實(shí)驗(yàn)介紹關(guān)于本實(shí)驗(yàn)本實(shí)驗(yàn)通過配置以及使用 BGP 的各種工具，熟悉并掌握常見的 BGP 應(yīng)用場景及屬性特性用法。1.1.2 實(shí)驗(yàn)?zāi)康恼莆章酚删酆系脑瓌t和方法掌握路由反射器的原理和配置方法掌握 BGP 認(rèn)證的配置方法掌握團(tuán)體屬性以及 Community-Filter 的原理和使用方法掌握 BGP 負(fù)載分擔(dān)的配置方法屬性 BGP 常見屬性的用途以及用法第 5頁1.1.3 實(shí)驗(yàn)組網(wǎng)介紹圖 1-1 BGP Advance 實(shí)驗(yàn)拓?fù)鋱D1.1.4 實(shí)驗(yàn)規(guī)劃設(shè)備接口參數(shù)設(shè)計設(shè)備端口端口地址R1G

5、E0/0/0IPv4:10.0.12.1/24 IPv6:2000:1201/120GE0/0/1IPv4:10.0.13.1/24 IPv6:2000:1301/120Loack 0IPv4:10.0.1.1/32 IPv6:2000:1/128Vlanif1IPv4:221.12.128.1/24Vlanif2IPv4:115.192.0.1/24Vlanif3IPv4:10.1.1.1/24第 6頁IPv6: 2000:0:0:11:1/64R2GE0/0/0IPv4:10.0.12.2/24 IPv6:2000:1202/120GE0/0/1IPv4:10.0.24.2/24 IPv6

6、:2000:2402/120Loack 0IPv4:10.0.2.2/32 IPv6:2000:2/128R3GE0/0/0IPv4:10.0.13.3/24 IPv6:2000:1303/120GE0/0/1IPv4:10.0.35.3/24 IPv6:2000:3503/120Loack 0IPv4:10.0.3.3/32 IPv6:2000:3/128R4GE0/0/0IPv4:10.0.46.4/24 IPv6:2000:4604/120GE0/0/1IPv4:10.0.24.4/24 IPv6:2000:2404/120Loack 0IPv4:10.0.4.4/32 IPv6:200

7、0:4/128R5GE0/0/0IPv4:10.0.35.5/24 IPv6:2000:3505/120GE0/0/1IPv4:10.0.58.5/24 IPv6:2000:5805/120Loack 0IPv4:10.0.5.5/32 IPv6:2000:5/128R6GE0/0/0IPv4:10.0.67.6/24 IPv6:2000:6706/120GE0/0/1IPv4:10.0.46.6/24 IPv6:2000:4606/120第 7頁實(shí)驗(yàn)任務(wù)配置配置思路配置設(shè)備接口 IPv4 和 IPv6 地址。在 AS 100 使用 OSPF 和 OSPFv3 做為 IGP 協(xié)議。Loack

8、0IPv4:10.0.6.6/32 IPv6:2000:6/128Vlanif1IPv4: 10.1.6.1/24R7GE0/0/0IPv4:10.0.67.7/24 IPv6:2000:6707/120GE0/0/1IPv4:10.0.78.7/24 IPv6:2000:7807/120Loack 0IPv4:10.0.7.7/32 IPv6:2000:7/128Vlanif1IPv4:10.1.7.1/24Vlanif2IPv6:2000:0:0:70:1Vlanif3IPv6:2000:0:0:71:1Vlanif4IPv6:2000:0:0:72:1Vlanif5IPv6:2000:0

9、:0:73:1R8GE0/0/0IPv4:10.0.78.8/24 IPv6:2000:7808/120GE0/0/1IPv4:10.0.58.8/24 IPv6:2000:5808/120Loack 0IPv4:10.0.8.8/32 IPv6:2000:8/128Vlanif1IPv4: 10.1.8.1/24第 8頁3.各直連路由器之間建立IBGP 或EBGP 鄰居關(guān)系；IBGP 鄰居使用Loack 口建立鄰居關(guān)系，EBGP 采用直連接口建立鄰居關(guān)系，AS 100 的兩臺出口路由器 R4 和 R5 需要對鄰居進(jìn)行驗(yàn)證。R2 和 R3 分別作為 R4 和 R5 的反射器，同時 R2 和 R

10、3 又作為 R1 的客戶機(jī)。所有設(shè)備上直連的網(wǎng)段全部宣告到 BGP 當(dāng)中 ，由于 AS 200 和 AS 400 為不同 ISP, 而221.12.128.1/24 和 115.192.0.0/24 分屬兩個 ISP，為了實(shí)現(xiàn)不用 ISP 的用戶擁有 IP 地址的服務(wù)器的需求，故要求：1)221.12.128.1/24 的路由僅通告到 AS 2002)115.192.0.0/24 的路由僅通告到 AS 400對應(yīng) ISP 所此外，為了不讓 ISP 之間互訪的流量經(jīng)過 AS 100，AS 100 不將從 AS 200 學(xué)習(xí)到的路由通告到 AS 400 當(dāng)中去，反之亦然。（僅針對 IPv4 路由條

11、目）注：需通過 Community 屬性實(shí)現(xiàn)。6.AS 1002000:0:0:70: /64、2000:0:0:71: /64、2000:0:0:72: /64 和 2000:0:0:73: /64這四個網(wǎng)段，同時需做到盡量減小這幾個網(wǎng)絡(luò)震蕩對整個網(wǎng)絡(luò)的影響以及防止環(huán)路的發(fā)生。7.要求 R1 上的 10.1.1.0/24 網(wǎng)段份。10.1.7.0/24 時能夠充分利用鏈路帶寬，并且做到冗余備1.2.2 配置步驟及驗(yàn)證步驟 1 配置設(shè)備接口 IP 地址按照實(shí)驗(yàn)規(guī)劃配置各設(shè)備的 IPv4 及 IPv6 地址，以 R1 的接口為例。#syssysname R1R1ipv6R1erface Giga

12、bitEthernet 0/0/0R1-GigabitEthernet0/0/0ip address 10.0.12.1 24 R1-GigabitEthernet0/0/0ipv6 enableR1-GigabitEthernet0/0/0ipv6 address 2000:1201 120步驟 2 配置 IGP 路由協(xié)議配置 OSPF 協(xié)議，以 R1 為例。 # 在 R1 上配置 OSPF 協(xié)議 R1ospf 1R1-ospf-1area 0第 9頁R1-ospf-1-area-0.0.0.0quitR1-ospf-1quit R1ospfv3 1R1-ospfv3-1router-id

13、10.0.1.1R1-ospfv3-1quitR1R1-LoR1-LoR1-Loerface Loack 0ack0ospf en area 0ack0ospfv3 1 area 0 ack0quitR1GigabitEthernet0/0/0R1-GigabitEthernet0/0/0ospfv3 1 area 0 R1-GigabitEthernet0/0/0ospf enable area 0 R1-GigabitEthernet0/0/0quitR1 GigabitEthernet0/0/1R1-GigabitEthernet0/0/1ospf en area 0 R1-Gigabi

14、tEthernet0/0/1ospfv3 1 area 0 R1-GigabitEthernet0/0/1quit結(jié)果驗(yàn)證#查看 IPv4 鄰居關(guān)系R1display ospf peerOSPF Pros 1 with Router ID 10.0.1.1NeighborsArea 0.0.0.0erface 10.0.12.1(GigabitEthernet0/0/0)s neighborsRouter ID: 10.0.2.2Address: 10.0.12.2Se: Full Mode:Nbr is Mastriority: 1DR: 10.0.12.1 BDR: 10.0.12.2 M

15、TU: 0Dead timer due in 36 secRetrans timererval: 5Neighup for 00:08:49Authentication Sequence: 0 第 10頁NeighborsArea 0.0.0.0erface 10.0.13.1(GigabitEthernet0/0/1)s neighborsRouter ID: 10.0.3.3Address: 10.0.13.3Se: Full Mode:Nbr is Mastriority: 1DR: 10.0.13.1 BDR: 10.0.13.3 MTU: 0Dead timer due in 32

16、secRetrans timererval: 5Neighup for 00:06:27Authentication Sequence: 0 #查看 IPv4 OSPF 路由表R1display ip routing-table protocol ospfRoute Flags: R - relay, D - download to fibPublic routing table : OSPFDestinations : 8Routes : 8OSPF routing table sus : Destinations : 8Routes : 8Destination/MaskProtoPreC

17、ostFlags NextHoperface10.0.2.2/32OSPF101D10.0.12.2GigabitEthernet0/0/010.0.3.3/32OSPF101D10.0.13.3GigabitEthernet0/0/110.0.4.4/32OSPF102D10.0.12.2GigabitEthernet0/0/010.0.5.5/32OSPF102D10.0.13.3GigabitEthernet0/0/110.0.24.0/24OSPF102D10.0.12.2GigabitEthernet0/0/0第 11頁10.0.35.0/24OSPF102D10.0.13.3Gig

18、abitEthernet0/0/110.0.46.0/24OSPF103D10.0.12.2GigabitEthernet0/0/010.0.58.0/24OSPF103D10.0.13.3GigabitEthernet0/0/1OSPF routing table sus : Destinations : 0Routes : 0#查看 IPv6 鄰居關(guān)系R1display ospfv3 peerOSPFv3 Pros (1)OSPFv3 Area (0.0.0.0)Neighbor ID10.0.2.210.0.3.3Pri11SeFull/Backup Full/BackupDead Ti

19、meerfaceInstance ID0000:00:35 GE0/0/000:00:38 GE0/0/1#查看 IPv6 OSPFV3 鄰居路由表（以下內(nèi)容僅保留關(guān)鍵部分）R1display ipv6 routing-table protocol ospfv3 Public Routing Table : OSPFv3Summary Count : 11OSPFv3 Routing Tables Sus : Summary Count : 8DestinationNextHopCost: 2000:2: FE80:2E0:FC: 1PrefixLength : 128ED3:22C2Pref

20、erenceProtocol TunnelID Flags: 10: OSPFv3: 0 x0RelayNextHop : :erface: GigabitEthernet0/0/0: DDestinationNextHop Cost: 2000:3: FE80:2E0:FC: 1PrefixLength : 128Preference10EF1:7B55Protocol: OSPFv3第 12頁RelayNextHop : :TunnelIDFlags: 0 x0: Derface: GigabitEthernet0/0/1DestinationNextHop Cost: 2000:4: F

21、E80:2E0:FC: 2PrefixLength : 128ED3:22C2PreferenceProtocol TunnelIDFlags: 10: OSPFv3: 0 x0RelayNextHop : :erface: GigabitEthernet0/0/0: DDestinationNextHopCost: 2000:5: FE80:2E0:FC: 2PrefixLength : 128EF1:7B55PreferenceProtocol TunnelID Flags: 10: OSPFv3: 0 x0: DRelayNextHop : :erface: GigabitEtherne

22、t0/0/1DestinationNextHop Cost: 2000:2400: FE80:2E0:FC: 2PrefixLength : 120ED3:22C2PreferenceProtocolTunnelID Flags: 10: OSPFv3: 0 x0RelayNextHop : :erface: GigabitEthernet0/0/0: DDestinationNextHopCost: 2000:3500: FE80:2E0:FC: 2PrefixLength : 120EF1:7B55PreferenceProtocol TunnelID Flags: 10: OSPFv3:

23、 0 x0: DRelayNextHop : :erface: GigabitEthernet0/0/1DestinationNextHopCost: 2000:4600: FE80:2E0:FC: 3PrefixLength : 120ED3:22C2PreferenceProtocol TunnelID Flags: 10: OSPFv3: 0 x0RelayNextHop : :erface: GigabitEthernet0/0/0: DDestinationNextHop Cost: 2000:5800: FE80:2E0:FC: 3PrefixLength : 120EF1:7B5

24、5PreferenceProtocolTunnelID Flags: 10: OSPFv3: 0 x0: DRelayNextHop : :erface: GigabitEthernet0/0/1第 13頁步驟 3 配置 BGP 鄰居關(guān)系配置 BGP 鄰居關(guān)系，AS100 內(nèi)用 Loack 0 建立 IBGP 鄰居關(guān)系，其他 EBGP 鄰居關(guān)系均使用直連接口地址建立。此外，出于安全性考慮，R4 和 R5 需對其 EBGP 鄰居進(jìn)行認(rèn)證，以R4和 R6 為例。# 在 R4 上配置 BGP 鄰居R4 bgp 100R4-bgprouter-id 10.0.4.4R4-bgppeer 10.0.46

25、.6 as-number 200 R4-bgp peer 10.0.46.6 password cipher R4-bgppeer 2000:4606 as-number 200 R4-bgp peer 2000:4606 password cipher R4-bgpipv6-family unicastR4-bgp-af-ipv6peer 2000:4606 enable在 R6 上配置 BGP 鄰居R6bgp 200R6-bgprouter-id 10.0.6.6R6-bgppeer 10.0.46.4 as-number 100 R6-bgppeer 10.0.46.4 password

26、 cipher R6-bgppeer 2000:4604 as-number 100 R6-bgppeer 2000:4604 password cipher R6-bgpipv6-family unicastR6-bgp-af-ipv6peer 2000:4604 enable結(jié)果驗(yàn)證#查看 BGP 鄰居關(guān)系建立情況R4display bgp peerBGP local router ID : 10.0.4.4Local AS number : 100 Total number of peers : 2Peers in established se : 2第 14頁P(yáng)eerfRcvVASMs

27、gRcvdMsgSentOutQ Up/DownSe Pre10.0.2.2110.0.46.60410027270 00:24:16 Established4200340 00:00:53 EstablishedR4display bgp ipv6 peerBGP local router ID : 10.0.4.4Local AS number : 100Total number of peers : 2Peers in established se : 2PeerfRcvVASMsgRcvdMsgSentOutQ Up/DownSe Pre2000:212000:460604100272

28、60 00:24:41 Established4200890 00:06:22 Established4配置反射器步驟為了 BGP 路由能在 AS 100 內(nèi)能夠順利傳遞，配置 R4 為 R2 的客戶機(jī)，R5 為 R3 的客戶機(jī)，R1 同時作為 R2 和 R3 的反射器。以 R1 為例。# 在 R1 上配置客戶機(jī)R1bgp 100R1-bgppeer 10.0.2.2 reflect-c nt R1-bgppeer 10.0.3.3 reflect-c nt R1-bgpipv6-family unicastR1-bgp-af-ipv6peer 2000:2 reflect-c ntR1-bg

29、p-af-ipv6peer 2000:3 reflect-c nt結(jié)果驗(yàn)證# 查看 R1 的 BGP 鄰居表（僅保留關(guān)鍵部分）R1display bgp peer 10.0.2.2 vere第 15頁BGP Peer is 10.0.2.2, remote AS 100Type: IBGP linkBGP ver4, Remote router ID 10.0.2.2Authentication type configured: NoneLast keepalive received: 2018/09/29 19:43:36-08:00-08:00-08:00-08:00Last keepal

30、ive sent: 2018/09/29 19:43:37Last updateLast updatereceived: 2018/09/29 19:12:36sent: 2018/09/29 19:41:15Minimum route advertisementOptional capabilities:erval is 15 secondsRoute refresh capability has been enabled4-byte-as capability has been enabledConnect-erface has been configuredPereferred Valu

31、e: 0Routing policy configured:No routing policy is configuredR1dis bgp peer 10.0.3.3 vereBGP Peer is 10.0.3.3,remote AS 100Type: IBGP linkBGP ver4, Remote router ID 10.0.3.3Authentication type configured: NoneLast keepalive received: 2018/09/29 19:46:05-08:00-08:00-08:00-08:00Last keepalive sent: 20

32、18/09/29 19:46:06Last updateLast updatereceived: 2018/09/29 19:12:05sent: 2018/09/29 19:41:20Minimum route advertisementOptional capabilities:erval is 15 secondsRoute refresh capability has been enabled4-byte-as capability has been enabled Its route-reflector-cntConnect-erface has been configuredIts

33、route-reflector-c nt第 16頁P(yáng)ereferred Value: 0Routing policy configured:No routing policy is configure步驟 5 將相應(yīng)的路由引入到 BGP，并使用 Community 屬性按照要求進(jìn)行路由過濾為了使得配置盡量簡單，在配置之前需稍加規(guī)劃。如，定義團(tuán)體屬性值 100:200 表示此路由不傳遞給 AS 200 ,100:400 表示不傳遞給 AS 400。# 在 R1 上配置路由策略，在引入 221.12.128.1/24 和 115.192.0.0/24 這兩條路由時，附加上相應(yīng)的 community

34、 屬性。R1ip ip-prefix not_to_200 permit 115.192.0.0 24R1ip ip-prefix not_to_400 permit 221.12.128.0 24R1route-policymunity permit node 10Info: New Sequence of this List.R1-route-policyif-match ip-prefix not_to_200R1-route-policyapply community 100:200 additive R1-route-policyquitR1route-policymunity pe

35、rmit node 20Info: New Sequence of this List.R1-route-policyif-match ip-prefix not_to_400 R1-route-policyapply community 100:400 R1-route-policyquitR1route-policymunity permit node 30Info: New Sequence of this List.R1-route-policyquit R1bgp 100R1-bgppeer 10.0.2.2R1-bgppeer 10.0.3.3munitymunityR1-bgpn

36、etwork 115.192.0.0 24 route-policyR1-bgpnetwork 221.12.128.0 24 route-policyR1-bgpnetwork 10.0.1.1 32 R1-bgpipv6-family unicastR1-bgp-af-ipv6network 2000:0:0:11:1 64munitymunity# 在 R4 上配置相應(yīng)的策略第 17頁R4route-policymunity permit node 10R4-route-policy apply community 100:400R4-route-policyquitR4ip commu

37、nity-filter 10 deny 100:200 R4route-policy filter deny node 10R4-route-policyif-match community-filter 10 R4-route-policyquitR4route-policy filtermit node 20 R4-route-policyquitR4bgp 100R4-bgppeer 10.0.46.6 route-policymunity importR4-bgppeer 10.0.46.6 route-policy filter export結(jié)果驗(yàn)證：R6display bgp ro

38、uting-tableBGP Local router ID is 10.0.6.6Sus codes: * - valid, - best, d - damped,h - history, i -ernal, s - suppressed, S - StaleOrigin : i - IGP, e - EGP, ? -pleteTotal Number of Routes: 7NetworkNextHopMEDLocPrfPrefVal Path/Ogn*10.0.4.4/3210.0.7.7/3210.1.1.0/2410.1.6.0/2410.0.46.410.0.67.710.0.46

39、.40.0.0.0000000100i300i100ii00iR8display bgp routing-table*221.12.128.010.0.46.40100i*10.1.8.0/2410.0.67.70300 400i*115.192.0.0/2410.0.67.70300 400 10第 18頁BGP Local router ID is 10.0.8.8Sus codes: * - valid, - best, d - damped,h - history, i -ernal, s - suppressed, S - StaleOrigin : i - IGP, e - EGP

40、, ? -pleteTotal Number of Routes: 8NetworkNextHopMEDLocPrfPrefVal Path/Ogn*0i*0i10.0.4.4/3210.0.78.70300 200 1010.0.7.7/3210.1.1.0/2410.0.78.710.0.58.510.0.78.70000300i100i300 200 10*10.1.8.0/240.0.0.000i*115.192.0.0/2410.0.58.50100i*221.12.128.010.0.78.70300 200 100i6路由聚合以及路徑選擇步驟在 R4 和 R5 進(jìn)行 4 條指定路

41、由的聚合，聚合后的條目為 2000:0:0:70: /62，同時為了防止環(huán)路并且實(shí)現(xiàn)優(yōu)先走 AS 200 的需求，需要進(jìn)行明細(xì)路由的抑制以及屬性的修改，以 R4 的配置為例。# 在 R4 上進(jìn)行相應(yīng)的配置R4ip ipv6-prefix aggregation permit 2000:0:0:72: 62 R4route-policy aggregation permit node 10R4-route-policyif-match ipv6 address prefix-list aggregation R4-route-policyapply local-preference 200R4-

42、route-policyquitR4route-policy aggregation permit node 20 R4-route-policyquitR4bgp 100*10.1.6.0/2410.0.78.70300 200i第 19頁R4-bgpipv6-family unicastR4-bgp-af-ipv6aggregate 2000:0:0:70: 62 as-set licy aggregation-suppressed attribute-po結(jié)果驗(yàn)證：R1display bgp ipv6 routing-tableBGP Local router ID is 10.0.1.

43、1Sus codes: * - valid, - best, d - damped,h - history, i -ernal, s - suppressed, S - StaleOrigin : i - IGP, e - EGP, ? -pleteTotal Number of Routes: 4i Network : 2000:2 NextHop : 2000:2PrefixLen : 128LocPrfPrefVal: 100: 0MEDLabel: 0:Path/Ogn : ii Network : 2000:3 NextHop : 2000:3PrefixLen : 128LocPr

44、fPrefVal: 100: 0MEDLabel: 0:Path/Ogn : i* NetworkNextHop MEDLabel: 2000:0:0:11: : 0PrefixLen : 64LocPrf:PrefVal: 0:Path/Ogn : iPath/Ogn : 200 300 i*i Network : 2000:0:0:70:PrefixLen : 62NextHop : 2000:4LocPrf200MED:PrefVal0Label:第 20頁步驟 7 負(fù)載分擔(dān)配置在 R1 上配置 IBGP 鄰居的負(fù)載分擔(dān)功能，同時由于兩條 10.1.7.0/24 路由的 AS_Path

45、屬性內(nèi)容不同，需要關(guān)閉形成負(fù)載分擔(dān)時比較 AS_Path 屬性的機(jī)制。R1bgp 100R1-bgpum load-balancing ibgp 2R1-bgpload-balancing as-path-ignoreR1-bgpquit結(jié)果驗(yàn)證R1display ip routing-tableRoute Flags: R - relay, D - download to fibRouting Tables: PublicDestinations : 32Routes : 34Destination/MaskProtoPre CostFlags NextHoperface0/0/0IBGP2

46、55 0RD10.0.58.8GigabitEthernet0/0/110.1.8.0/24IBGP255 0RD10.0.58.8GigabitEthernet0/0/1127.0.0.0/8127.0.0.1/32DirectDirect000000DD DD127.0.0.1127.0.0.1127.0.0.1127.0.0.1InLoInLo InLoInLoack0ack0 ack0ack0127.255.255.255/32 Direct 0255.255.255.255/32 Direct 0R1display bgp routing-tableBGP Local router

47、ID is 10.0.1.1Sus codes: * - valid, - best, d - damped,h - history, i -ernal, s - suppressed, S - StaleOrigin : i - IGP, e - EGP, ? -pleteTotal Number of Routes: 1210.1.7.0/24 IBGP255 0RD10.0.46.6GigabitEthernet第 21頁*i*i* i *i*10.1.1.0/2410.1.6.0/2410.1.7.0/240.0.0.010.0.46.610.0.46.610.0.58.810.0.5

48、8.80.0.0.00.0.0.0000000000i200i200 300i400 300i400ii i10010010010010.1.8.0/24115.192.0.0/24221.12.128.00001.3 配置參考R1 的配置#sysname R1 #ipv6 #vlan batch 2 to 6 #ospfv3 1router-id 10.0.1.1 #firewall zone Local priority 15#erface Vlanif1ip address 221.12.128.1 255.255.255.0#erface Vlanif2ip address 115.1

49、92.0.1 255.255.255.01.3.1*i 10.0.7.7/3210.0.46.61000200 300i* i10.0.58.81000400 300i第 22頁#erface Vlanif3ipv6 enableip address 10.1.1.1 255.255.255.0 ipv6 address 2000:0:0:11:1/64#erface Ethernet0/0/0 port link-type trunkport trunk allo#ss vlan 2 to 4094erface GigabitEthernet0/0/0ipv6 enableip addres

50、s 10.0.12.1 255.255.255.0ipv6 address 2000:1201/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0 #erface GigabitEthernet0/0/1 ipv6 enableip address 10.0.13.1 255.255.255.0ipv6 address 2000:1301/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0#erface Loipv6 enableack0ip address 10.0.1.1 255.255

51、.255.255ipv6 address 2000:1/32 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0第 23頁#bgp 100router-id 10.0.1.1peer 10.0.2.2 as-number 100peer 10.0.2.2 connect-erface Loack0peer 10.0.3.3 as-number 100peer 10.0.3.3 connect-erface Loack0peer 2000:2 as-number 100peer 2000:2 connect-erface Loack0peer 2000

52、:3 as-number 100peer 2000:3 connect-erface Lo #ipv4-family unicast undo synchronizationnetwork 10.0.1.0 255.255.255.0network 10.0.1.1 255.255.255.255network 10.1.1.0 255.255.255.0ack0network 115.192.0.0 255.255.255.0 route-policymunitynetwork 221.12.128.0 route-policyum load-balancing ibgp 2load-bal

53、ancing as-path-ignore peer 10.0.2.2 enablemunitypeer 10.0.2.2 reflect-cpeer 10.0.2.2peer 10.0.3.3 enablepeer 10.0.3.3 reflect-cpeer 10.0.3.3 #ipv6-family unicastundo synchronizationntmunityntmunity第 24頁network 2000:0:0:11: 64peer 2000:2 enablepeer 2000:2 reflect-cnt peer 2000:3 enablepeer 2000:3 ref

54、lect-cnt#ospf 1area 0.0.0.0 #route-policymunity permit node 10if-match ip-prefix not_to_200apply community 100:200 additive #route-policymunity permit node 20if-match ip-prefix not_to_400apply community 100:400 #route-policy#munity permit node 30ip ip-prefix not_to_200 index 10 permit 115.192.0.0 24

55、ip ip-prefix not_to_400 index 10 permit 221.12.128.0 24 #returnR2 的配置#sysname R2 #ipv6 #ospfv3 11.3.2第 25頁router-id 10.0.2.2#erface GigabitEthernet0/0/0 ipv6 enableip address 10.0.12.2 255.255.255.0ipv6 address 2000:1202/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0 #erface GigabitEthernet0/0/

56、1 ipv6 enableip address 10.0.24.2 255.255.255.0ipv6 address 2000:2402/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0#erface Loipv6 enableack0ip address 10.0.2.2 255.255.255.255ipv6 address 2000:2/128 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0 #bgp 100router-id 10.0.2.2peer 10.0.1.1 as-numb

57、er 100peer 10.0.1.1 connect-erface Loack0peer 10.0.4.4 as-number 100peer 10.0.4.4 connect-erface Loack0peer 2000:1 as-number 100第 26頁peer 2000:1 connect-erface Loack0peer 2000:4 as-number 100peer 2000:4 connect-erface Lo #ipv4-family unicast undo synchronizationnetwork 10.0.2.2 255.255.255.255peer 1

58、0.0.1.1 enableack0peer 10.0.1.1peer 10.0.4.4 enablepeer 10.0.4.4 reflect-cpeer 10.0.4.4 #ipv6-family unicast undo synchronization network 2000:2 128peer 2000:1 enablepeer 2000:4 enablepeer 2000:4 reflect-c#ospf 1area 0.0.0.0 #munityntmunityntroute-policy filter deny node 10if-match community-filter

59、10#route-policy filt#ermit node 20ip community-filter 10 permit 100:400#第 27頁return1.3.3 R3 的配置#sysname R3 #ipv6 #ospfv3 1router-id 10.0.3.3 #erface GigabitEthernet0/0/0 ipv6 enableip address 10.0.13.3 255.255.255.0ipv6 address 2000:1303/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0 #erface Gi

60、gabitEthernet0/0/1 ipv6 enableip address 10.0.35.3 255.255.255.0ipv6 address 2000:3503/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0#erface Loipv6 enableack0ip address 10.0.3.3 255.255.255.255ipv6 address 2000:3/128 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0第 28頁#bgp 100router-id 10.0.3.3