实验拓扑实验需求1、AS1中存在两个环回一个地址为192.168.1.0/24该地址不能在任何协议中宣告AS3中存在两个环回一个地址为192.168.2.0/24该地址不能在任何协议中宣告最终要求这两个环回可以ping通2、R1-R8的建邻环回用X.X.X.X/32表示3、整个AS2的IP地址用172.16.0.0/16R3-R7上各有一个业务网段请合理划分并且其内部配置OSPF协议4、AS间的骨干链路IP地址随意定制5、使用BGP协议让整个网络所有设备的环回可以互相访问6、减少路由条目数量避免环回出现实验步骤按照172.16.0.0/16的地址给AS 2区域划分IP地址R3-R7总共5个业务网段需要172.16.0.0进行划分AS 2中拥有6个网段需要划分总共11个网段建邻网段题目给了分析为了配置时更加方便直接借8位主机地址使子网掩码为24为了使后面汇总更加方便划分下面其中一个网段的地址作为整个AS中分网段172.16.0.0/24172.16.1.0/24——172.16.1.0/30172.16.1.4/30172.16.1.9/30172.16.1.12/30172.16.1.16.30172.16.1.20/30172.16.2.0/24172.16.3.0/24172.16.4.0/24172.16.5.0/24172.16.6.0/24172.16.7.0/24备注这里的172.16.3.0-172.16.7.0用作AS2中的路由的业务网段172.16.1.0再细划分地址作为AS2的各个网段的地址2.按照划分好的IP地址和题目要求配置路由接口IP地址R1interface GigabitEthernet0/0/0ip address 12.1.1.1 255.255.255.0interface LoopBack0ip address 1.1.1.1 255.255.255.255interface LoopBack1ip address 192.168.1.1 255.255.255.0R2:interface GigabitEthernet0/0/0ip address 12.1.1.2 255.255.255.0interface GigabitEthernet0/0/1ip address 172.16.1.1 255.255.255.252interface GigabitEthernet0/0/2ip address 172.16.1.21 255.255.255.252interface LoopBack1ip address 2.2.2.2 255.255.255.255R3:interface GigabitEthernet0/0/0ip address 172.16.1.2 255.255.255.252interface GigabitEthernet0/0/1ip address 172.16.1.5 255.255.255.252interface LoopBack0ip address 3.3.3.3 255.255.255.255interface LoopBack1ip address 172.16.3.3 255.255.255.0R4:interface GigabitEthernet0/0/0ip address 172.16.1.6 255.255.255.252interface GigabitEthernet0/0/1ip address 172.16.1.10 255.255.255.252interface LoopBack0ip address 4.4.4.4 255.255.255.255interface LoopBack1ip address 172.16.4.4 255.255.255.0R5:interface GigabitEthernet0/0/0ip address 172.16.1.22 255.255.255.252interface GigabitEthernet0/0/1ip address 172.16.1.17 255.255.255.252interface LoopBack0ip address 5.5.5.5 255.255.255.255interface LoopBack1ip address 172.16.5.5 255.255.255.0R6interface GigabitEthernet0/0/0ip address 172.16.1.13 255.255.255.252interface GigabitEthernet0/0/1ip address 172.16.1.18 255.255.255.252interface LoopBack0ip address 6.6.6.6 255.255.255.255interface LoopBack1ip address 172.16.6.6 255.255.255.0R7interface GigabitEthernet0/0/0ip address 172.16.1.9 255.255.255.252interface GigabitEthernet0/0/1ip address 172.16.1.14 255.255.255.252interface GigabitEthernet0/0/2ip address 34.1.1.7 255.255.255.0interface LoopBack0ip address 7.7.7.7 255.255.255.255interface LoopBack1ip address 172.16.7.7 255.255.255.0R8:interface GigabitEthernet0/0/0ip address 34.1.1.8 255.255.255.0interface LoopBack0ip address 8.8.8.8 255.255.255.255interface LoopBack1ip address 192.168.2.8 255.255.255.0配置OSPF协议R2:ospf 1 router-id 2.2.2.2area 0.0.0.0network 2.2.2.2 0.0.0.0network 172.16.1.0 0.0.0.3network 172.16.1.20 0.0.0.3R3ospf 1 router-id 3.3.3.3area 0.0.0.0network 3.3.3.3 0.0.0.0network 172.16.1.0 0.0.0.3network 172.16.1.4 0.0.0.3network 172.16.3.0 0.0.0.255R4ospf 1 router-id 4.4.4.4area 0.0.0.0network 4.4.4.4 0.0.0.0network 172.16.1.4 0.0.0.3network 172.16.1.8 0.0.0.3network 172.16.4.0 0.0.0.255R5ospf 1 router-id 5.5.5.5area 0.0.0.0network 5.5.5.5 0.0.0.0network 172.16.1.16 0.0.0.3network 172.16.1.20 0.0.0.3network 172.16.5.0 0.0.0.255R6ospf 1 router-id 6.6.6.6area 0.0.0.0network 6.6.6.6 0.0.0.0network 172.16.1.12 0.0.0.3network 172.16.1.16 0.0.0.3network 172.16.6.0 0.0.0.255R7ospf 1 router-id 7.7.7.7area 0.0.0.0network 7.7.7.7 0.0.0.0network 172.16.1.8 0.0.0.3network 172.16.1.12 0.0.0.3network 172.16.7.0 0.0.0.255查看路由表观察学习到的OSPF路由3.配置BGP协议R1与R2建立EBGP领居R2与R5建立EBGP领居R7与R8建立EBGP领居R2与R3、R4建立IBGP领居R5与R6、R7建立IBGP领居步骤1配置EBGP领居和IBGP的领居R1bgp 1peer 12.1.1.2 as-number 2R2bgp 64512confederation id 2confederation peer-as 64513peer 3.3.3.3 as-number 64512peer 3.3.3.3 connect-interface LoopBack1peer 4.4.4.4 as-number 64512peer 4.4.4.4 connect-interface LoopBack1peer 12.1.1.1 as-number 1peer 172.16.1.22 as-number 64513peer 3.3.3.3 enablepeer 3.3.3.3 next-hop-localpeer 4.4.4.4 enablepeer 4.4.4.4 next-hop-localpeer 12.1.1.1 enablepeer 172.16.1.22 enablepeer 172.16.1.22 next-hop-localR3bgp 64512confederation id 2peer 2.2.2.2 as-number 64512peer 2.2.2.2 connect-interface LoopBack0peer 2.2.2.2 enableR4bgp 64512confederation id 2peer 2.2.2.2 as-number 64512peer 2.2.2.2 connect-interface LoopBack0peer 2.2.2.2 enableR5bgp 64513confederation id 2confederation peer-as 64512peer 6.6.6.6 as-number 64513peer 6.6.6.6 connect-interface LoopBack0peer 7.7.7.7 as-number 64513peer 7.7.7.7 connect-interface LoopBack0peer 172.16.1.21 as-number 64512network 172.16.5.0 255.255.255.0peer 6.6.6.6 enablepeer 6.6.6.6 next-hop-localpeer 7.7.7.7 enablepeer 7.7.7.7 next-hop-localpeer 172.16.1.21 enablepeer 172.16.1.21 next-hop-localR6bgp 64513confederation id 2peer 5.5.5.5 as-number 64513peer 5.5.5.5 connect-interface LoopBack0ipv4-family unicastundo synchronizationpeer 5.5.5.5 enableR7bgp 64513confederation id 2peer 5.5.5.5 as-number 64513peer 5.5.5.5 connect-interface LoopBack0peer 34.1.1.8 as-number 3ipv4-family unicastundo synchronizationpeer 5.5.5.5 enablepeer 5.5.5.5 next-hop-localpeer 34.1.1.8 enableR8bgp 3peer 34.1.1.7 as-number 2效果测试使用命令display bgp peer 检查领居是否正确建立。步骤2将R2和R5配置为反射器R2peer 3.3.3.3 reflect-clientpeer 4.4.4.4 reflect-clientR5peer 6.6.6.6 reflect-clientpeer 7.7.7.7 reflect-client步骤3优化宣告路由的操作分析由于我们在OSPF协议中宣告过业务网段了并且在建邻的时候使用的是环回32位子网掩码接口所以查看路由表会发现OSPF中的业务网段的子网掩码是32如果我们直接在BGP里按照我们划分的路由条目宣告会导致路由条目冗余在配置时因为BGP宣告的特殊性直连和非直连都可以宣告为了精简配置可以在一个使用了BGP协议的设备上面宣告想要下发的所有路由但是在宣告时必须要做的操作任选其一1直接在BGP中宣告路由并且路由的子网掩码为32按照原路由表宣告2更改想要宣告路由接口的OSPF网络类型命令如下[R X-LoopBack1]ospf network-type broadcast[R3]int l1[R3-LoopBack1]ospf network-type broadcast[R4]int l1[R4-LoopBack1]ospf network-type broadcast[R5]int l1[R5-LoopBack1]ospf network-type broadcast[R6]int l1[R6-LoopBack1]ospf network-type broadcast[R7]int l1[R7-LoopBack1]ospf network-type broadcast步骤4宣告业务网段在R2,R7建立联盟导致子AS的IBGP设备会继承本地子AS的EBGP设备的下一跳IBGP设备不认识这个下一跳所以需要在两个子AS中分别宣告一次路由上宣告BGP路由的操作[R2-bgp] network 172.16.3.0 24[R2-bgp] network 172.16.4.0 255.255.255.0[R2-bgp] network 172.16.5.0 255.255.255.0[R2-bgp] network 172.16.6.0 255.255.255.0[R2-bgp] network 172.16.7.0 255.255.255.0[R7-bgp] network 172.16.3.0 24[R7-bgp] network 172.16.4.0 255.255.255.0[R7-bgp] network 172.16.5.0 255.255.255.0[R7-bgp] network 172.16.6.0 255.255.255.0[R7-bgp] network 172.16.7.0 255.255.255.0利用命令dis bgp routing-table查看BGP的路由学习情况4.利用GRE技术使R1和R8能ping通步骤1建立虚拟通道并且封装地址分析由于公网上没有协议宣告过R1和R8的物理接口地址所以不能直接封装R1和R8 的物理接口地址作为隧道的逻辑接口的源地址R1interface Tunnel0/0/0ip address 10.1.1.1 255.255.255.0tunnel-protocol gresource 1.1.1.1destination 8.8.8.8R8interface Tunnel0/0/0ip address 10.1.1.2 255.255.255.0tunnel-protocol gresource 8.8.8.8destination 1.1.1.1步骤2将封装的源地址宣告进BGP协议中使R1和R8的地址可以在公网联通[R1]bgp 1[R1-bgp]network 1.1.1.1 32[R8]bgp 3[R8-bgp]network 8.8.8.8 32步骤3配置命令传递私网路由[R1]ip route-static 192.168.2.0 24 10.1.1.2[R8]ip route-static 192.168.1.0 24 10.1.1.1查看R1和R8的业务网段的连通情况