網(wǎng)絡(luò)實驗總結(jié)word版(編輯修改稿)
2025-04-19 03:33 本頁面
【文章內(nèi)容簡介】 inter s0/0ospf cost 200shutundoshut【R2】inter e0/0ip add 24inter e0/1ip add 24inter s1/0ip add 24ospfarea 0network network inter s1/0ospf cost 200shutundoshutinter e0/1ospf cost 200【S2】vlan 2port e0/1inter vlan 2ip add vlan 3port e0/2inter vlan 3ip add inter loop1ip add //其他配置靜態(tài)路由【S1ospf】importroute direct【R1】ip rout 24 【R1ospf】importroute static【R2】ip rout 24 【R2ospf】importroute static【S2】ip routestatic （默認路由亦可）【S2】ip routestatic （默認路由亦可）配置結(jié)束，首先全網(wǎng)通，PC上tracert ，經(jīng)過S1—R1—S2。BGP協(xié)議分析BGP基本分析E0/1VLAN2:E0/2Vlan2:E0/2Vlan3:Vlan3:E0/1Loopback1:Loopback1:AS100AS200AS300E0:E0:S1S2R1R2PCA【R1】inter loop 1ip add 8bgp 100group r1s1 externalpeer r1s1 asnumber 300peer group r1s1【R2】inter loop 1ip add 8bgp 200group r2s2 external //如果是在一個AS內(nèi)，則使用internalpeer r2s2 asnumber 300peer group r2s2【S1】bgp 300peer asnumber 100peer adnumber 300peer nexthoplocal【S2】bgp 300peer asnumber 200peer asnumber 300peer nexthoplocal //諸如路由信息【R1BGP】network 【R2BGP】network 此時，【R1】ping –a 。因為路由器默認E0口ping，但E0口的IP地址未引入到BGP中，所以不能作為目的地址，但可以作為下一跳地址，即可以通過。BGP同步機制驗證：在圖上配置的基礎(chǔ)上：【S2】ip rout 【S2】ip rout BGP狀態(tài)轉(zhuǎn)換分析PCAR2R1S2S1E0:E0:AS300AS200AS100Loopback1:Loopback1:E0/1Vlan3:Vlan3:E0/2Vlan2:E0/2VLAN2:E0/1BGP協(xié)議狀態(tài)機：【R】路由器和交換機均可，但推薦用路由器。1. Debug bgp event (或all)2. Terminal debugging3. Reset bgp allbgp路由分析E0/1VLAN1:E0/2Vlan1:E0/2Vlan2:Vlan2:E0/1Loopback1:AS100AS200AS300E0:E0:Loopback3:Loopback2:Loopback1:S1R1S2R2Loopback1:【R1】配置ip，vlan，loop，啟動bgpbgp 100group r1s1 externalpeer r1s1 asnumber 300peer group r1s1network 【S1】配置ip，vlan，loop，啟動bgpbgp 300peer asnumber 100peer asnumber 300peer nexthoplocal【R2】【S2】類似。BGP的路由策略（過濾）。【S2】acl number 2000rule 0 deny source rule 1 permit source qbgp 300peer filtrpolicy 2000 export注：設(shè)備中提示0~100，兩條rule的編號不能相同，rule 0/rule 1……基于ASpath的路由過濾在S1上阻止as100的路由通告，只通告AS300內(nèi)部路由【S1】ip aspathacl 1 deny \b100$ip aspathacl 1 permit 300ip aspathacl 1 perimit source anybgp 300peer aspathacl 1 export注：\b是as號碼之間的分隔符，\$匹配本地路由，\b200$（或者200$）匹配從AS200始發(fā)的路由?；趓oute policy的路由過濾，并使cost都為888【S1】bgppeer routepolicy deny6 exportroutepolicy deny6 permit node 10ifmatch acl 2000applay cost 888qacl number 2000rule deny source rule permit rule 1 permit source 200rule 2 permit source 300rule 3 permit source
教學(xué)教案相關(guān)推薦
鄂ICP備17016276號-1