一、实验拓扑二、实验需求1、AS1中存在两个环回一个地址为192.168.1.0/24该地址不能在任何协议中宣告AS3中存在两个环回一个地址为192.168.2.0/24该地证不能在任何协议中宣告最终要求这两个环回可以ping通2、整个AS2的IP地址为172.16.0.0/16请合理划分并且其内部配置OSPF协议3、R1-R8的建邻环回用X.X.X.X/32表示R3-R7上再划分一个业务网段4、AS间的骨干链路IP地址随意定制5、使用BGP协议让整个网络所有设备的环回可以互相访问6、减少路由条目数量避免环路出现三、实验思路1、划分IP地址2、配置IP地址3、AS 2中配置OSPF协议4、配置bgp邻居和联盟5、宣告业务网段6、配置手工汇总减少路由条目数7、通过GRE实现R1、R8的环回不宣告且互相访问a.通过路由过滤引入直连b.通过GRE隧道四、实验步骤1、划分IP地址172.16.0.0/16172.16.1.0/24---AS 2的路由链路172.16.1.0/30---R2~R3172.16.1.4/30---R3~R4172.16.1.8/30---R2~R5172.16.1.12/30---R4~R7172.16.1.16/30---R5~R6172.16.1.20/30---R6~R7172.16.3.0/24---R3业务网段172.16.4.0/24---R4业务网段172.16.5.0/24---R5业务网段172.16.6.0/24---R6业务网段172.16.7.0/24---R7业务网段2、配置IP地址R1[R1]int g 0/0/0[R1-GigabitEthernet0/0/0]ip address 12.1.1.1 24[R1-GigabitEthernet0/0/1]int l 0[R1-LoopBack0]ip address 1.1.1.1 32[R1-LoopBack0]int l 1[R1-LoopBack1]ip address 192.168.1.1 24[R1-LoopBack1]qR2[R2]int g 0/0/0[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24[R2-GigabitEthernet0/0/0]int g 0/0/1[R2-GigabitEthernet0/0/1]ip address 172.16.1.1 30[R2-GigabitEthernet0/0/1]int g 0/0/2[R2-GigabitEthernet0/0/2]ip address 172.16.1.9 30[R2-GigabitEthernet0/0/2]int l 0[R2-LoopBack0]ip address 2.2.2.2 32[R2-LoopBack0]qR3[R3]int g 0/0/0[R3-GigabitEthernet0/0/0]ip address 172.16.1.2 30[R3-GigabitEthernet0/0/0]int g 0/0/1[R3-GigabitEthernet0/0/1]ip address 172.16.1.5 30[R3-GigabitEthernet0/0/1]int l 0[R3-LoopBack0]ip address 3.3.3.3 32[R3-LoopBack0]int l 1[R3-LoopBack1]ip address 172.16.3.1 24[R3-LoopBack1]qR4[R4]int g 0/0/0[R4-GigabitEthernet0/0/0]ip address 172.16.1.6 30[R4-GigabitEthernet0/0/0]int g 0/0/1[R4-GigabitEthernet0/0/1]ip address 172.16.1.13 30[R4-GigabitEthernet0/0/1]int l 0[R4-LoopBack0]ip address 4.4.4.4 32[R4-LoopBack0]int l 1[R4-LoopBack1]ip address 172.16.4.1 24[R4-LoopBack1]qR5[R5]int g 0/0/0[R5-GigabitEthernet0/0/0]ip address 172.16.1.10 30[R5-GigabitEthernet0/0/0]int g 0/0/1[R5-GigabitEthernet0/0/1]ip address 172.16.1.17 30[R5-GigabitEthernet0/0/1]int l 0[R5-LoopBack0]ip address 5.5.5.5 32[R5-LoopBack0]int l 1[R5-LoopBack1]ip address 172.16.5.1 24[R5-LoopBack1]qR6[R6]int g 0/0/0[R6-GigabitEthernet0/0/0]ip address 172.16.1.18 30[R6-GigabitEthernet0/0/0]int g 0/0/1[R6-GigabitEthernet0/0/1]ip address 172.16.1.21 30[R6-GigabitEthernet0/0/1]int l 0[R6-LoopBack0]ip address 6.6.6.6 32[R6-LoopBack0]int l 1[R6-LoopBack1]ip address 172.16.6.1 24[R6-LoopBack1]qR7[R7]int g 0/0/0[R7-GigabitEthernet0/0/0]ip address 172.16.1.22 30[R7-GigabitEthernet0/0/0]int g 0/0/1[R7-GigabitEthernet0/0/1]ip address 172.16.1.14 30[R7-GigabitEthernet0/0/1]int g 0/0/2[R7-GigabitEthernet0/0/2]ip address 34.1.1.1 24[R7-GigabitEthernet0/0/2]int l 0[R7-LoopBack0]ip address 7.7.7.7 32[R7-LoopBack0]int l 1[R7-LoopBack1]ip address 172.16.7.1 24[R7-LoopBack1]qR8[R8]int g 0/0/0[R8-GigabitEthernet0/0/0]ip address 34.1.1.2 24[R8-GigabitEthernet0/0/0]int l 0[R8-LoopBack0]ip address 8.8.8.8 32[R8-LoopBack0]int l 1[R8-LoopBack1]ip address 192.168.2.1 24[R8-LoopBack1]q3、AS 2中配置OSPF协议R2[R2]ospf 1 router-id 2.2.2.2[R2-ospf-1]area 0[R2-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255[R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0[R2-ospf-1-area-0.0.0.0]q[R2-ospf-1]qR3[R3]ospf 1 router-id 3.3.3.3[R3-ospf-1]area 0[R3-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255[R3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0[R3-ospf-1-area-0.0.0.0]network 172.16.3.0 0.0.0.255[R3-ospf-1-area-0.0.0.0]q[R3-ospf-1]qR4[R4]ospf 1 router-id 4.4.4.4[R4-ospf-1]area 0[R4-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255[R4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0[R4-ospf-1-area-0.0.0.0]network 172.16.4.0 0.0.0.255[R4-ospf-1-area-0.0.0.0]q[R4-ospf-1]qR5[R5]ospf 1 router-id 5.5.5.5[R5-ospf-1]area 0[R5-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255[R5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0[R5-ospf-1-area-0.0.0.0]network 172.16.5.0 0.0.0.255[R5-ospf-1-area-0.0.0.0]q[R5-ospf-1]qR6[R6]ospf 1 router-id 6.6.6.6[R6-ospf-1]area 0[R6-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255[R6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.0[R6-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.255[R6-ospf-1-area-0.0.0.0]q[R6-ospf-1]qR7[R7]ospf 1 router-id 7.7.7.7[R7-ospf-1]area 0[R7-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255[R7-ospf-1-area-0.0.0.0]network 7.7.7.7 0.0.0.0[R7-ospf-1-area-0.0.0.0]network 172.16.7.0 0.0.0.255[R7-ospf-1-area-0.0.0.0]q[R7-ospf-1]q4、配置bgp邻居和联盟R1[R1]bgp 1[R1-bgp]peer 12.1.1.2 as-number 2[R1-bgp]qR2[R2]bgp 64512[R2-bgp]confederation id 2[R2-bgp]confederation peer-as 64513[R2-bgp]peer 12.1.1.1 as-number 1[R2-bgp]peer 172.16.1.10 as-number 64513[R2-bgp]peer 172.16.1.10 next-hop-local[R2-bgp]peer 3.3.3.3 as-number 64512[R2-bgp]peer 3.3.3.3 connect-interface l0[R2-bgp]peer 3.3.3.3 next-hop-local[R2-bgp]peer 4.4.4.4 as-number 64512[R2-bgp]peer 4.4.4.4 connect-interface l0[R2-bgp]peer 4.4.4.4 next-hop-local[R2-bgp]peer 3.3.3.3 reflect-client[R2-bgp]peer 4.4.4.4 reflect-client[R2-bgp]qR3[R3]bgp 64512[R3-bgp]confederation id 2[R3-bgp]peer 2.2.2.2 as-number 64512[R3-bgp]peer 2.2.2.2 connect-interface l0[R3-bgp]qR4[R4]bgp 64512[R4-bgp]confederation id 2[R4-bgp]peer 2.2.2.2 as-number 64512[R4-bgp]peer 2.2.2.2 connect-interface l0[R4-bgp]qR5[R5]bgp 64513[R5-bgp]confederation id 2[R5-bgp]confederation peer-as 64512[R5-bgp]peer 172.16.1.9 as-number 64512[R5-bgp]peer 172.16.1.9 next-hop-local[R5-bgp]peer 7.7.7.7 as-number 64513[R5-bgp]peer 7.7.7.7 connect-interface l0[R5-bgp]qR6[R6]bgp 64513[R6-bgp]confederation id 2[R6-bgp]peer 7.7.7.7 as-number 64513[R6-bgp]peer 7.7.7.7 connect-interface l0[R6-bgp]qR7[R7]bgp 64513[R7-bgp]confederation id 2[R7-bgp]peer 34.1.1.2 as-number 3[R7-bgp]peer 5.5.5.5 as-number 64513[R7-bgp]peer 5.5.5.5 connect-interface l0[R7-bgp]peer 5.5.5.5 next-hop-local[R7-bgp]peer 6.6.6.6 as-number 64513[R7-bgp]peer 6.6.6.6 connect-interface l0[R7-bgp]peer 6.6.6.6 next-hop-local[R7-bgp]peer 5.5.5.5 reflect-client[R7-bgp]peer 6.6.6.6 reflect-client[R7-bgp]qR8[R8]bgp 3[R8-bgp]peer 34.1.1.1 as-number 2[R8-bgp]q5、宣告业务网段R2[R2]bgp 64512[R2-bgp]network 172.16.3.0 24[R2-bgp]network 172.16.4.0 24[R2-bgp]network 172.16.5.0 24[R2-bgp]network 172.16.6.0 24[R2-bgp]network 172.16.7.0 24[R2-bgp]qR3[R3]int l 1[R3-LoopBack1]ospf network-type broadcast //通过修改环回口接口类型改变路由表中该接口路由的掩码为24[R3-LoopBack1]qR4[R4]int l 1[R4-LoopBack1]ospf network-type broadcast[R4-LoopBack1]qR5[R5]int l 1[R5-LoopBack1]ospf network-type broadcast[R5-LoopBack1]qR6[R6]int l 1[R6-LoopBack1]ospf network-type broadcast[R6-LoopBack1]qR7[R7]int l 1[R7-LoopBack1]ospf network-type broadcast[R7-LoopBack1]q[R7]bgp 64513[R7-bgp]network 172.16.3.0 24[R7-bgp]network 172.16.4.0 24[R7-bgp]network 172.16.5.0 24[R7-bgp]network 172.16.6.0 24[R7-bgp]network 172.16.7.0 24[R7-bgp]q6、手工汇总R2[R2]bgp 64512[R2-bgp]aggregate 172.16.0.0 21 detail-suppressed as-set[R2-bgp]qR7[R7]bgp 64513[R7-bgp]aggregate 172.16.0.0 21 detail-suppressed as-set[R7-bgp]q7、实现R1、R8的环回不宣告且互相访问a.通过路由过滤引入直连R1[R1]acl 2000[R1-acl-basic-2000]rule deny source 192.168.1.1 0.0.0.0[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255[R1-acl-basic-2000]q[R1]route-policy 1.0 permit node 10[R1-route-policy]if-match acl 2000[R1-route-policy]q[R1]bgp 1[R1-bgp]import-route direct route-policy 1.0[R1-bgp]qR8[R8]acl 2000[R8-acl-basic-2000]rule deny source 192.168.2.1 0.0.0.0[R8-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255[R8-acl-basic-2000]q[R8]route-policy 2.0 permit node 10[R8-route-policy]if-match acl 2000[R8-route-policy]q[R8]bgp 3[R8-bgp]import-route direct route-policy 2.0[R8-bgp]qb.通过GRE隧道R1[R1]interface Tunnel 0/0/0[R1-Tunnel0/0/0]ip address 10.1.1.1 24[R1-Tunnel0/0/0]tunnel-protocol gre[R1-Tunnel0/0/0]source 1.1.1.1[R1-Tunnel0/0/0]destination8.8.8.8[R1-Tunnel0/0/0]q[R1]bgp 1[R1-bgp]network 1.1.1.1 32[R1-bgp]q[R1]ip route-static 192.168.2.0 24 10.1.1.2R8[R8]int Tunnel 0/0/0[R8-Tunnel0/0/0]ip address 10.1.1.2 24[R8-Tunnel0/0/0]tunnel-protocol gre[R8-Tunnel0/0/0]source 8.8.8.8[R8-Tunnel0/0/0]destination1.1.1.1[R8-Tunnel0/0/0]q[R8]bgp 3[R8-bgp]network 8.8.8.8 32[R8-bgp]q[R8]ip route-static 192.168.1.0 24 10.1.1.1