18DA113007MP-BGPforIPv6原理與實(shí)現(xiàn)ISSUE100課件

16四月202418DA113007MP-BGPforIPv6原理與實(shí)現(xiàn)ISSUE100MP-BGPforIPv6原理與實(shí)現(xiàn)前言BGP-4多協(xié)議擴(kuò)展（MP-BGP）定義了兩種新的BGP屬性，可以用來完成IPv6的域間路由。3參考資料RFC2858MultiprotocolExtensionsforBGP-4RFC2545UseofBGP-4MultiprotocolExtensionsforIPv6Inter-DomainRoutingRFC1771ABorderGatewayProtocol4(BGP-4)RFC1700AssignedNumbersRFC2842CapabilitiesAdvertisementwithBGP-44培訓(xùn)目標(biāo)學(xué)完本課程后，您應(yīng)該能：了解MP-BGP的屬性掌握MP-BGP如何實(shí)現(xiàn)IPv6域間路由5目錄MP-BGPMP-BGPforIPv6MP-BGPforIPv6基本配置大型網(wǎng)絡(luò)配置6MP-BGP（RFC2858）BGP協(xié)議的擴(kuò)展承載多種網(wǎng)絡(luò)層協(xié)議的路由信息IPv6單播6PE多播（IPv4,IPv6）MPLSVPN(IPv4,IPv6)CLNS會話建立階段協(xié)商交換Multi-protocolReachabilityInformation。7MP-BGP（RFC2858）IPv4BGP-4屬性NEXT-HOPAGGREGATORNLRIMP-BGP新增屬性MP_REACH_NLRIMP_UNREACH_NLRInexthop信息能夠用于特定的網(wǎng)絡(luò)協(xié)議NLRI能夠用于特定的網(wǎng)絡(luò)協(xié)議RFC2858中規(guī)定任何一個BGPSpeaker(包括支持多協(xié)議的BGPSpeaker)都必須有一個IPv4地址以便用在AGGREGATOR中。8BGPUPDATEMessageUnfeasibleRouteLength(2octets)WithdrawnRoutes(variable)TotalpathAttributeLength(2octets)PathAttributes(variable)NetworkLayerReachabilityInformation(variable)Length(1octet)Prefix(variable)AttributeTypeAttributeLengthAttributeValueLength(1octet)Prefix(variable)9PathAttributeAttributeType(2octets)AttributeLengthAttributeValue

Attr.Typecode

01234567

01234567Attr.Flags1optional0well-known1transitive0non-transitive1ORIGIN2AS-PATH3NEXT-HOP4MULTI_EXIT_DISC5LOCAL_PREF6ATOMIC_AGGREGATE7AGGREGATOR14MP_REACH_NLRI15MP_UNREACH_NLRI10MP-BGP屬性MP_REACH_NLRI承載可達(dá)網(wǎng)絡(luò)集合和next-hop信息。MP_UNREACH_NLRI承載不可達(dá)網(wǎng)絡(luò)集合信息。OptionalNon-transitive11MP_REACH_NLRIAddressFamilyIdentifier(2octets)SubsequentAddressFamilyIdentifier(1octet)LengthofNextHopNetworkAddress(1octet)NetworkAddressofNextHop(variable)NumberofSNPA(1octet)LengthoffirstSNPA(1octet)FirstSNPA(variable)LengthofsecondSNPA(1octet)SecondSNPA(variable)……LengthofLastSNPA(1octet)LastSNPA(variable)NetworkLayerReachabilityInformation(variable)Length(1octets)Prefix(variable)12MP_UNREACH_NLRIAddressFamilyIdentifier(2octets)SubsequentAddressFamilyIdentifier(1octet)WithdrawnRoutes(variable)需要撤銷的路由的NLRI13CapabilitiesOptionalParameterMyAutonomousSystem(2octets)Version(1octet)HoldTime(2octets)BGPIdentifier(4octets)OptParmLength(1octet)OptionalParameters(4octets)BGPOPENMessageCapabilityCode(1octet)CapabilityLength(1octet)CapabilityValue(variable)CapabilitiesOptionalParameterCapabilityCode(1octet)1CapabilityLength(1octet)4MultiprotocolExtensionsCapabilitiesAFI(2octets)Res(1octet)SAFI(1octet)14目錄MP-BGPMP-BGPforIPv6

MP-BGPforIPv6基本配置大型網(wǎng)絡(luò)配置15MP-BGPforIPv6（RFC2545）IPv6單播地址范圍GlobalSite-localLink-localMP-BGP對IPv6的特殊擴(kuò)展Next-HOP包含一個GlobalIPv6地址和一個Link-Local地址NEXT-HOP，NLRI都使用IPv6地址和前綴表示16MP_REACH_NLRIAddressFamilyIdentifier(2octets)SubsequentAddressFamilyIdentifier(1octet)LengthofNextHopNetworkAddress(1octet)NetworkAddressofNextHop(variable)NumberofSNPA(1octet)LengthoffirstSNPA(1octet)FirstSNPA(variable)LengthofsecondSNPA(1octet)SecondSNPA(variable)……LengthofLastSNPA(1octet)LastSNPA(variable)NetworkLayerReachabilityInformation(variable)2IPv6NLRIisusedforunicastNLRIisusedformulticastRPFcheckNLRIisusedforbothunicastandmuticastRPFcheckLabel128VPNNext-hop只包含Global地址32Next-hop包含Global地址和Link-Local地址17目錄MP-BGPMP-BGPforIPv6

MP-BGPforIPv6基本配置大型網(wǎng)絡(luò)配置18MP-BGPforIPv6基本配置-配置實(shí)例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R2-NE40E-A和R1-NE5000E之間建立EBGP鄰居關(guān)系，R2-NE40E-A和R6-NE20-C之間建立IBGP鄰居關(guān)系。AS200內(nèi)運(yùn)行OSPFv3，在R1-NE5000E上將OSPFv3路由注入到BGP路由表中。19MP-BGPforIPv6基本配置-配置實(shí)例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64[R2-NE40E-A]bgp100[R2-NE40E-A-bgp]router-id2.2.2.2[R2-NE40E-A-bgp]peer2001:21::1as-number200[R2-NE40E-A-bgp]ipv6-family[R2-NE40E-A-bgp-af-ipv6]peer2001:21::1enable[R1-NE5000E]bgp200[R1-NE5000E-bgp]router-id1.1.1.1[R1-NE5000E-bgp]peer2001:21::2as-number100[R1-NE5000E-bgp]ipv6-family[R1-NE5000E-bgp-af-ipv6]peer2001:21::2enable[R2-NE40E-A-bgp-af-ipv6]displaybgpipv6peerBGPlocalrouterID:2.2.2.2LocalASnumber:100Totalnumberofpeers:1Peersinestablishedstate:1PeerVASMsgRcvdMsgSentOutQUp/DownStatePrefRcv2001:21::1420045000:01:14Established

020MP-BGPforIPv6基本配置-配置實(shí)例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64[R2-NE40E-A]bgp100[R2-NE40E-A-bgp]peer2001:26::2as-number100[R2-NE40E-A-bgp]ipv6-family[R2-NE40E-A-bgp-af-ipv6]peer2001:26::2enable[R6-NE20-C]bgp100[R6-NE20-C-bgp]router-id6.6.6.6[R6-NE20-C-bgp]peer2001:26::1as-number100[R6-NE20-C-bgp]ipv6-family[R6-NE20-C-bgp-af-ipv6]peer2001:26::1enable[R2-NE40E-A]displaybgpipv6peerBGPlocalrouterID:2.2.2.2LocalASnumber:100Totalnumberofpeers:2Peersinestablishedstate:2PeerVASMsgRcvdMsgSentOutQUp/DownStatePrefRcv2001:21::142003436000:29:40Established02001:26::241001010000:06:48Established021MP-BGPforIPv6基本配置-配置實(shí)例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64[R1-NE5000E]bgp200[R1-NE5000E-bgp]ipv6-family[R1-NE5000E-bgp-af-ipv6]import-routeospfv31<R2-NE40E-A>displaybgpipv6routing-tableTotalNumberofRoutes:2BGPLocalrouterIDis2.2.2.2Statuscodes:*-valid,>-best,d-damped,h-history,i-internal,s-suppressed,S-StaleOrigin:i-IGP,e-EGP,?-incomplete*>Network:2001:31::PrefixLen:64NextHop:2001:21::1LocPrf:Label:0PrefVal:0Path/Ogn:200?22MP-BGPforIPv6基本配置-配置實(shí)例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64[R6-NE20-C]displaybgpipv6routing-tableTotalNumberofRoutes:2BGPLocalrouterIDis6.6.6.6Statuscodes:*-valid,>-best,d-damped,h-history,i-internal,s-suppressed,S-StaleOrigin:i-IGP,e-EGP,?-incomplete

iNetwork:2001:31::PrefixLen:64NextHop:2001:21::1LocPrf:100Label:0PrefVal:0Path/Ogn:200?為什么該路由為無效路由呢？23目錄MP-BGPMP-BGPforIPv6MP-BGPforIPv6基本配置大型網(wǎng)絡(luò)配置24大型BGP網(wǎng)絡(luò)配置－路由反射器R2-NE40E-A和R4-NE20-A之間建立EBGP鄰居關(guān)系，R1-NE5000E和R2-NE40E-A,R3-NE40E-B建立IBGP鄰居關(guān)系。R1-NE5000E為AS100中的路由反射器，R3-NE40E-B為客戶端。R2-NE40E-AR1-NE5000Eg2/0/3g2/0/2g2/0/41212001:21::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R4-NE20-Ag2/0/0g2/0/52001:24::/6412RouteReflectorClient25大型BGP網(wǎng)絡(luò)配置－路由反射器R2-NE40E-AR1-NE5000Eg2/0/3g2/0/2g2/0/41212001:21::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R4-NE20-Ag2/0/0g2/0/52001:24::/6412RouteReflectorClient[R4-NE20-A]bgp100[R4-NE20-A-bgp]router-id4.4.4.4[R4-NE20-A-bgp]peer2001:24::1as-number100[R4-NE20-A-bgp]ipv6-family[R4-NE20-A-bgp-af-ipv6]peer2001:24::1enable[R4-NE20-A-bgp-af-ipv6]network2001:4::44128[R2-NE40E-A]bgp100[R2-NE40E-A-bgp]router-id2.2.2.2[R2-NE40E-A-bgp]peer2001:24::2as-number200[R2-NE40E-A-bgp]peer2001:1::11as-number100[R2-NE40E-A-bgp]peer2001:1::11connect-interfaceLoopBack1[R2-NE40E-A-bgp]ipv6-family[R2-NE40E-A-bgp-af-ipv6]peer2001:24::2enable[R2-NE40E-A-bgp-af-ipv6]peer2001:1::11enable[R2-NE40E-A-bgp-af-ipv6]peer2001:1::11next-hop-local[R1-NE5000E]bgp100[R1-NE5000E]router-id1.1.1.1[R1-NE5000E-bgp]peer2001:2::22as-number100[R1-NE5000E-bgp]peer2001:3::33as-number100[R1-NE5000E-bgp]peer2001:2::22connect-interfaceLoopBack1[R1-NE5000E-bgp]peer2001:3::33connect-interfaceLoopBack1[R1-NE5000E-bgp]ipv6-family[R1-NE5000E-bgp-af-ipv6]peer2001:2::22enable[R1-NE5000E-bgp-af-ipv6]peer2001:3::33enable[R3-NE40E-B]bgp100[R3-NE40E-B-bgp]router-id1.1.1.1[R3-NE40E-B-bgp]peer2001:1::11as-number100[R3-NE40E-B-bgp]peer2001:1::11connect-interfaceLoopBack1[R3-NE40E-B-bgp]ipv6-family[R3-NE40E-B-bgp-af-ipv6]peer2001:2::22enable26大型BGP網(wǎng)絡(luò)配置－路由反射器R2-NE40E-AR1-NE5000Eg2/0/3g2/0/2g2/0/41212001:21::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R4-NE20-Ag2/0/0g2/0/52001:24::/6412RouteReflectorClient<R3-NE40E-B>displaybgpipv6routing-table<R1-NE5000E>displaybgpipv6routing-tableTotalNumberofRoutes:1BGPLocalrouterIDis1.1.1.1Statuscodes:*-valid,>-best,d-damped,h-history,i-internal,s-suppressed,S-StaleOrigin:i-IGP,e-EGP,?-incomplete*>iNetwork:2001:4::44PrefixLen:128NextHop:2001:2::22LocPrf:100Label:0PrefVal:0Path/Ogn:200i27大型BGP網(wǎng)絡(luò)配置－路由反射器R2-NE40E-AR1-NE5000Eg2/0/3g2/0/2g2/0/41212001:21::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R4-NE20-Ag2/0/0g2/0/52001:24::/6412RouteReflectorClient[R1-NE5000E]bgp100[R1-NE5000E-bgp]ipv6-family[R1-NE5000E-bgp-af-ipv6]peer2001:3::33reflect-client<R3-NE40E-B>displaybgpipv6routing-tableTotalNumberofRoutes:1BGPLocalrouterIDis3.3.3.3Statuscodes:*-valid,>-best,d-damped,h-history,i-internal,s-suppressed,S-StaleOrigin:i-IGP,e-EGP,?-incomplete*>iNetwork:2001:4::44PrefixLen:128NextHop:2001:2::22LocPrf:100Label:0PrefVal:0Path/Ogn:200i28大型BGP網(wǎng)絡(luò)配置－團(tuán)體屬性R4-NE20-A通過BGP發(fā)布路由信息給AS100，為該路由信息設(shè)置COMMUNITY屬性NO_EXPORT，使得AS100內(nèi)的路由器可以接收該路由信息，但是不會將該路由信息發(fā)給AS500。R2-NE40E-AAS2000R3-NE40E-Bg2/0/61R4-NE20-Ag2/0/0g2/0/52001:24::/6412R5-NE20-B22001:53::/64AS100g2/0/1g2/0/2g2/0/22001:32::/6412AS50029大型BGP網(wǎng)絡(luò)配置－團(tuán)體屬性R2-NE40E-AAS2000R3-NE40E-Bg2/0/61R4-NE20-Ag2/0/0g2/0/52001:24::/6412R5-NE20-B22001:53::/64AS100g2/0/1g2/0/2g2/0/22001:32::/6412AS500[R4-NE20-A]interfaceLoopBack1[R4-NE20-A-LoopBack1]ipv6address2001:4::4000/128[R4-NE20-A]ipipv6-prefix1permit2001:4::4000128[R4-NE20-A]route-policytttpermitnode0[R4-NE20-A-route-policy]if-matchipv6addressprefix-list1[R4-NE20-A-route-policy]applycommunityno-export[R4-NE20-A-route-policy]quit[R4-NE20-A]bgp2000[R4-NE20-A-bgp]router-id4.4.4.4[R4-NE20-A-bgp]peer2001:24::1as-number100[R4-NE20-A-bgp]ipv6-family[R4-NE20-A-bgp-af-ipv6]peer2001:24::1enable[R4-NE20-A-bgp-af-ipv6]network2001:4::4000128[R4-NE20-A-bgp-af-ipv6]ipeer2001:24::1route-policytttexport[R4-NE20-A-bgp-af-ipv6]peer2001:24::1advertise-community[R2-NE40E-A]bgp100[R2-NE40E-A-bgp]router-id2.2.2.2[R2-NE40E-A-bgp]peer2001:24::2as-number2000[R2-NE40E-A-bgp]peer2001:32::2as-number100[R2-NE40E-A-bgp]ipv6-family[R2-NE40E-A-bgp-af-ipv6]peer2001:24::2enable[R2-NE40E-A-bgp-af-ipv6]peer2001:32::2enable[R2-NE40E-A-bgp-af-ipv6]peer2001:32::2advertise-community[R2-NE40E-A-bgp-af-ipv6]peer2001:32::2next-hop-local30大型BGP網(wǎng)絡(luò)配置－團(tuán)體屬性R2-NE40E-AAS2000R3-NE40E-Bg2/0/61R4-NE20-Ag2/0/0g2/0/52001:24::/6412R5-