实验拓扑
实验需求
现有三个自治系统,需要对R1访问R4的loopback-X数据走向进行精确控制:
R1访问R4的loopback0走R2,通过在R1上修改本地优先级实现
R1访问R4的loopback1走R3,通过在R2上修改MED实现
R1访问R4的loopback2走R2,通过在R4上修改AS-path实现
R1访问R4的loopback3走R3,通过在R3上修改origi属性实现
实验步骤
1.配置IP地址及环回口地址
2.配置OSPF 使全网互通(略)
3.R1访问R4的loopback0走R2,通过在R1上修改本地优先级实现
R1
[R1]ip ip-prefix 2 index 10 permit 4.4.4.1 32
[R1]route-policy c permit node 10
[R1-route-policy]if-match ip-prefix 2
[R1-route-policy]apply local-preference 200
[R1]route-policy c permit node 20
[R1]bgp 100
[R1-bgp]peer 192.168.1.2 route-policy c import
4. R1查看BGP协议路由表
[R1]dis bgp routing-table
BGP Local router ID is 192.168.1.1
Status codes: * - valid, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Total Number of Routes: 6
Network NextHop MED LocPrf PrefVal Path/Ogn
*> 4.4.4.1/32 192.168.1.2 200 0 200 300i
* 192.168.2.2 0 200 300i
*> 4.4.4.2/32 192.168.1.2 0 200 300i
* 192.168.2.2 0 200 300i
*> 4.4.4.3/32 192.168.1.2 0 200 300i
* 192.168.2.2 0 200 300 30
0 300 300i
5. R1访问R4的loopback1走R3,通过在R2上修改MED实现
R2
[Huawei]ip ip-prefix 3 index 10 permit 4.4.4.2 32
[Huawei]route-policy h permit node 10
[Huawei-route-policy]if-match ip-prefix 3
[Huawei-route-policy]apply cost 100
[Huawei]route-policy h permit node 20
[Huawei]bgp 200
[Huawei-bgp]peer 192.168.1.1 route-policy h export
分析:当路由器学习到多条去往相同目的网段的BGP路由时,在其他条件都相同的情况下,BGP将比较这些路由的MED 属性,越小越优。其实可理解为就是改开销
6. 在R1上查看BGP协议路由表
[R1]dis bgp routing-table
BGP Local router ID is 192.168.1.1
Status codes: * - valid, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Total Number of Routes: 6
Network NextHop MED LocPrf PrefVal Path/Ogn
*> 4.4.4.1/32 192.168.1.2 200 0 200 300i
* 192.168.2.2 0 200 300i
*> 4.4.4.2/32 192.168.2.2 0 200 300i
* 192.168.1.2 100 0 200 300i
*> 4.4.4.3/32 192.168.1.2 0 200 300i
* 192.168.2.2 0 200 300 30
0 300 300i
7. 在R1上检查一下BGP的详细信息表
[R1]dis bgp routing-table 4.4.4.2
BGP local router ID : 192.168.1.1
Local AS number : 100
Paths: 2 available, 1 best, 1 select
BGP routing table entry information of 4.4.4.2/32:
From: 192.168.2.2 (192.168.2.2)
Route Duration: 00h21m07s
Direct Out-interface: GigabitEthernet0/0/1
Original nexthop: 192.168.2.2
Qos information : 0x0
AS-path 200 300, origin igp, pref-val 0, valid, external, best, select, active,
pre 255
Advertised to such 2 peers:
192.168.1.2
192.168.2.2
BGP routing table entry information of 4.4.4.2/32:
From: 192.168.1.2 (192.168.1.2)
Route Duration: 00h09m37s
Direct Out-interface: GigabitEthernet0/0/0
Original nexthop: 192.168.1.2
Qos information : 0x0
AS-path 200 300, origin igp, MED 100, pref-val 0, valid, external, pre 255, not
preferred for MED
Not advertised to any peer yet
//发现我们修改的MED 值 已生效,在这里可以检查核对。
8. R1访问R4的loopback2走R2,通过在R4上修改AS-path实现
R4
[Huawei]ip ip-prefix s index 10 permit 4.4.4.3 32
[Huawei]route-policy s permit node 10
[Huawei-route-policy]if-match ip-prefix s
[Huawei-route-policy]apply as-path 300 300 300 additive
[Huawei]route-policy s permit node 20
[Huawei]bgp 300
[Huawei-bgp]peer 192.168.200.2 route-policy s export
分析:BGP 优选AS-path 属性最短的路由,我把AS-path 属性变长(增加了AS号),达到实验需求。
9. R1上查看BGP路由表,发现在表中可以观察到已生效.
[R1]dis bgp routing-table
BGP Local router ID is 192.168.1.1
Status codes: * - valid, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Total Number of Routes: 6
Network NextHop MED LocPrf PrefVal Path/Ogn
*> 4.4.4.1/32 192.168.1.2 200 0 200 300i
* 192.168.2.2 0 200 300i
*> 4.4.4.2/32 192.168.2.2 0 200 300i
* 192.168.1.2 100 0 200 300i
*> 4.4.4.3/32 192.168.1.2 0 200 300i
* 192.168.2.2 0 200 300 30
0 300 300i
10. R1访问R4的loopback3走R3,通过在R3上修改origi属性实现
做这道题,首先要搞清楚BGP的Origin属性的优先级
BGP属性 - Origin ;3种Origin属性的优先级为:i>e>Incomplete(?)
Origin的3种属性:
i 表明BGP路由通过network命令注入;
e 表明BGP路由是从EGP学来的,EGP协议在现网中很难见到,但可以通过路由策略将路由的Origin属性修改为e;
? 即Incomplete表明BGP路由通过其它方式学到路由信息,如使用import命令引入的路由。
把loopback3引入BGP 300中,只引入4.4.4.4 的路由,不想产生其他路由条目。
[Huawei]ip ip-prefix huawei permit 4.4.4.4 32
[Huawei]route-policy huawei permit node 10
[Huawei-route-policy]if-match ip-prefix huawei
[Huawei]route-policy huawei permit node 10
[Huawei]bgp 300
[Huawei-bgp]import-route direct route-policy huawei
11. 在AR1上查看BGP路由表,发现学习到的4.4.4.4路由为 ? ,此时只需要到R3上更改Origin属性为IGP 即可
R3
[R3] ip ip-prefix 321 permit 4.4.4.4 32
[R3] route-policy 321 permit node 10
[R3-route-policy]if-match ip-prefix 321
[R3-route-policy]apply origin igp //修改属性
[R3]route-policy 321 permit node 20
[R3]bgp 200
[R3-bgp]peer 192.168.2.1 route-policy 321 export //出方向
12. R1上查看BGP路由表
[R1]dis bgp routing-table
BGP Local router ID is 192.168.1.1
Status codes: * - valid, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Total Number of Routes: 8
Network NextHop MED LocPrf PrefVal Path/Ogn
*> 4.4.4.1/32 192.168.1.2 200 0 200 300i
* 192.168.2.2 0 200 300i
*> 4.4.4.2/32 192.168.2.2 0 200 300i
* 192.168.1.2 100 0 200 300i
*> 4.4.4.3/32 192.168.1.2 0 200 300i
* 192.168.2.2 0 200 300 30
0 300 300i
*> 4.4.4.4/32 192.168.2.2 0 200 300i
* 192.168.1.2 0 200 300?