当前位置：网站首页>HCIP第十三天作业——综合实验

HCIP第十三天作业——综合实验

2022-08-08 18:01:00 【　ᝰꫛꫀꪝ】

1、实验要求

1.合理IP地址
2.AS 1 2 3 内部使用OSPF 协议， AS 1 AS 2内部建立全互联的IBGP邻居，AS之间建立全部的EBGP邻居
3.PC 1 3 5 属于电信的路由，通信时必须使用电信AS 1 ;
PC 2 4 6 属于联通的路由，通信时必须使用联通的 AS 2
4.若 R1-R9之间链路断开，电信的路由依然通过电信 AS 1 通信

2、实验拓扑

3、分析过程

1、IP的规划以及配置
2、AS1、AS2、AS3区域内的OSPF的配置
3、IBGP与EBGP关系的配置
4、6个用户网段在BGP中的宣告
5、BGP的扩展配置

4、配置内容

1、IP的规划，如拓扑所示，除R11外每台路由器配置一个建邻环回，R1为1.1.1.1/24 以此类推
2、AS1、AS2、AS3区域内的OSPF的配置——这里以R1为例

3、IBGP与EBGP关系的配置——AS1、AS2、AS3区域内为全IBGP关系——这里以R1和R8为例

bgp 1
 peer 3.3.3.3 as-number 1 
 peer 3.3.3.3 connect-interface LoopBack0
 peer 5.5.5.5 as-number 1 
 peer 5.5.5.5 connect-interface LoopBack0
 peer 7.7.7.7 as-number 1 
 peer 7.7.7.7 connect-interface LoopBack0
 peer 12.1.1.2 as-number 2 
 peer 19.1.1.9 as-number 3 
 #
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.3 enable
  peer 3.3.3.3 next-hop-local 
  peer 3.3.3.3 advertise-community
  peer 5.5.5.5 enable
  peer 5.5.5.5 next-hop-local 
  peer 5.5.5.5 advertise-community
  peer 7.7.7.7 enable
  peer 7.7.7.7 next-hop-local 
  peer 7.7.7.7 advertise-community
  peer 12.1.1.2 enable
  peer 12.1.1.2 advertise-community       
  peer 19.1.1.9 enable
  peer 19.1.1.9 advertise-community

R8：

bgp 2
 peer 2.2.2.2 as-number 2 
 peer 2.2.2.2 connect-interface LoopBack0
 peer 4.4.4.4 as-number 2 
 peer 4.4.4.4 connect-interface LoopBack0
 peer 6.6.6.6 as-number 2 
 peer 6.6.6.6 connect-interface LoopBack0
 peer 11.8.1.11 as-number 4 
 peer 78.1.1.7 as-number 1 
 #
 ipv4-family unicast
  undo synchronization
  peer 2.2.2.2 enable
  peer 2.2.2.2 next-hop-local 
  peer 2.2.2.2 advertise-community
  peer 4.4.4.4 enable
  peer 4.4.4.4 next-hop-local 
  peer 4.4.4.4 advertise-community
  peer 6.6.6.6 enable
  peer 6.6.6.6 next-hop-local 
  peer 6.6.6.6 advertise-community
  peer 11.8.1.11 enable
  peer 11.8.1.11 advertise-community      
  peer 78.1.1.7 enable
  peer 78.1.1.7 route-policy 5 import
  peer 78.1.1.7 advertise-community

4、6个用户网段在BGP中的宣告——这里以R9为例

5、BGP的扩展配置
①首先将图中所有的邻居关系都打开使用扩展配置的命令——以R1为例所有的邻居间都需要设置

  peer 19.1.1.9 advertise-community
  peer 12.1.1.2 advertise-community
  peer 3.3.3.3 advertise-community
  peer 5.5.5.5 advertise-community
  peer 7.7.7.7 advertise-community

②分别在R9、R10、R11上面设置对应网段的扩展属性——首先抓取流量，之后使用route-policy配置
R9与R10相同：

ip ip-prefix 13 index 10 permit 192.168.1.0 24
ip ip-prefix 13 index 20 permit 192.168.3.0 24
ip ip-prefix 24 index 10 permit 192.168.2.0 24
ip ip-prefix 24 index 20 permit 192.168.4.0 24

route-policy a permit node 10 
 if-match ip-prefix 13 
 apply community 100:3                    
#
route-policy a permit node 20 
 if-match ip-prefix 24 
 apply community 200:3 
#
route-policy a permit node 30

随后在接口调用

最后在R11上配置对应的内容

ip community-filter advanced a13 permit 100:.*
ip community-filter advanced a24 permit 200:.*

使用route-policy将相对应的流量抓取，之后修改其local-preference

route-policy a permit node 10 
 if-match community-filter a13 
 apply local-preference 105 
#
route-policy a permit node 20
#
route-policy b permit node 10 
 if-match community-filter a24 
 apply local-preference 105 
#
route-policy b permit node 20