BGP综合实验（广域网互通，AS，OSPF，EBGP，IBGP，汇总，防环）

一、实验需求1AS1存在两个环回一个地址为192.168.1.0/24该地址不能在任何协议中宣告AS3中存在两个环回一个地址为192.168.2.0/24该地址不能在任何协议中宣告最终要求这两个环回可以互相通讯AS1的另一个环回为10.0.0.0/24AS3的另一个环回为11.0.0.0/242整个AS2的Ip地址为172.16.0.0/16请合理划分3AS间的骨干链路IP地址随意定制4使用BGP协议让整个网络所有设备的环回可以互相访问5减少路由条目数量避免环路出现二、实验拓扑三、实验步骤一、划分网段1、需求整个AS2的Ip地址为172.16.0.0/16请合理划分因为如上拓扑图可以看出在AS2中一共有12个网段6个主干网段6个环回网段所以我们可以用172.16.0.0/26进行划分一共可以划分出16个掩码为30的网段只需要12个剩下的备用AS2:主干172.16.0.00 000000/26172.16.0.00 000000/30---172.16.0.0/30172.16.0.00 000100/30---172.16.0.4/30172.16.0.00 001000/30---172.16.0.8/30172.16.0.00 001100/30---172.16.0.12/30172.16.0.00 010000/30---172.16.0.16/30172.16.0.00 010100/30---172.16.0.20/30AS2环回R2:172.16.0.00 011000/30---172.16.0.24/30R3:172.16.0.00 011100/30---172.16.0.28/30R4:172.16.0.00 100000/30---172.16.0.32/30R5:172.16.0.00 100100/30---172.16.0.36/30R6:172.16.0.00 101000/30---172.16.0.40/30R7:172.16.0.00 101100/30---172.16.0.44/302、需求AS间的骨干链路IP地址随意定制因为需求给出骨干随意定制所以我们可以定制为AR1--AR2之间为12.0.0.0/24网段进行定制接口IP地址分别为12.0.0.1/24 12.0.0.2/24AR7--AR8之间为78.0.0.0/24网段进行定制接口IP地址分别为78.0.0.1/24 78.0.0.2/24二、配置IP地址1、AR1Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R1 [R1]interface g0/0/0 [R1-GigabitEthernet0/0/0]ip address 12.0.0.1 24 [R1-GigabitEthernet0/0/0]q [R1]interface lo0 [R1-LoopBack0]ip address 192.168.1.1 24 [R1-LoopBack1]ip address 10.0.0.1 24 [R1-LoopBack1]q2、AR2Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R2 [R2]interface g0/0/0 [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0]ip address 12.0.0.2 24 Jul 11 2026 18:24:48-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0]q [R2] [R2]interface g0/0/1 [R2-GigabitEthernet0/0/1] [R2-GigabitEthernet0/0/1]ip address 172.16.0.1 30 [R2-GigabitEthernet0/0/1] [R2-GigabitEthernet0/0/1]q [R2] [R2]interface g0/0/2 [R2-GigabitEthernet0/0/2] Jul 11 2026 18:24:48-08:00 R2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R2-GigabitEthernet0/0/2] [R2-GigabitEthernet0/0/2]ip address 172.16.0.9 30 [R2]interface lo0 [R2-LoopBack0]ip ad [R2-LoopBack0]ip address 172.16.0.25 303、AR3Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R3 [R3] [R3]interface g0/0/0 [R3-GigabitEthernet0/0/0] [R3-GigabitEthernet0/0/0]ip address 172.16.0.2 30 [R3-GigabitEthernet0/0/0] Jul 11 2026 18:25:38-08:00 R3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R3-GigabitEthernet0/0/0]q [R3-GigabitEthernet0/0/0] [R3] [R3]interface g0/0/1 [R3-GigabitEthernet0/0/1] [R3-GigabitEthernet0/0/1]ip address 172.16.0.5 30 [R3]interface lo0 [R3-LoopBack0] [R3-LoopBack0]ip address 172.16.0.29 304、AR4Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys ^ Error:Incomplete command found at ^ position. [Huawei]sys R4 [R4]interface g0/0/0 [R4-GigabitEthernet0/0/0] [R4-GigabitEthernet0/0/0]ip address 172.16.0.6 30 Jul 11 2026 18:26:15-08:00 R4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R4-GigabitEthernet0/0/0] [R4-GigabitEthernet0/0/0]q [R4] [R4]interface g0/0/1 [R4-GigabitEthernet0/0/1] [R4-GigabitEthernet0/0/1]ip address 172.16.0.21 30 [R4-GigabitEthernet0/0/1] [R4-GigabitEthernet0/0/1]q Jul 11 2026 18:26:15-08:00 R4 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R4-GigabitEthernet0/0/1]q [R4]interface lo0 [R4-LoopBack0] [R4-LoopBack0]ip address 172.16.0.33 305、AR5Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R5 [R5] [R5] [R5]interface g0/0/0 [R5-GigabitEthernet0/0/0] [R5-GigabitEthernet0/0/0]ip address 172.16.0.10 30 [R5-GigabitEthernet0/0/0] Jul 11 2026 18:28:30-08:00 R5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R5-GigabitEthernet0/0/0] [R5-GigabitEthernet0/0/0]q [R5] [R5]interface g0/0/1 [R5-GigabitEthernet0/0/1] [R5-GigabitEthernet0/0/1]ip address 172.16.0.13 30 [R5-GigabitEthernet0/0/1] [R5-GigabitEthernet0/0/1]q Jul 11 2026 18:28:30-08:00 R5 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R5-GigabitEthernet0/0/1]q [R5]interface lo0 [R5-LoopBack0] [R5-LoopBack0]ip address 172.16.0.37 306、AR6Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R6 [R6]interface g0/0/0 [R6-GigabitEthernet0/0/0] [R6-GigabitEthernet0/0/0]ip address 172.16.0.14 30 [R6-GigabitEthernet0/0/0] Jul 11 2026 18:27:58-08:00 R6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R6-GigabitEthernet0/0/0] [R6-GigabitEthernet0/0/0]q [R6] [R6]interface g0/0/1 [R6-GigabitEthernet0/0/1] [R6-GigabitEthernet0/0/1]ip address 172.16.0.17 30 Jul 11 2026 18:27:59-08:00 R6 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R6-GigabitEthernet0/0/1] [R6-GigabitEthernet0/0/1]q [R6]interface lo0 [R6-LoopBack0] [R6-LoopBack0]ip address 172.16.0.41 307、AR7Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R7 [R7]interface g0/0/0 [R7-GigabitEthernet0/0/0] [R7-GigabitEthernet0/0/0]ip address 172.16.0.18 30 [R7-GigabitEthernet0/0/0] Jul 11 2026 18:27:04-08:00 R7 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R7-GigabitEthernet0/0/0] [R7-GigabitEthernet0/0/0]q [R7] [R7]interface g0/0/1 [R7-GigabitEthernet0/0/1] [R7-GigabitEthernet0/0/1]ip address 172.16.0.22 30 [R7-GigabitEthernet0/0/1] [R7-GigabitEthernet0/0/1]q [R7] [R7]interface g0/0/2 Jul 11 2026 18:27:04-08:00 R7 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R7]interface g0/0/2 [R7-GigabitEthernet0/0/2] [R7-GigabitEthernet0/0/2]ip address 78.0.0.1 24 [R7]interface lo0 [R7-LoopBack0] [R7-LoopBack0]ip address 172.16.0.45 308、AR8Huaweisys Enter system view, return user view with CtrlZ. [Huawei]sys R8 [R8]inte [R8]interface g0/0/0 [R8-GigabitEthernet0/0/0]ip ad [R8-GigabitEthernet0/0/0]ip address 78.0.0.2 24 [R8-GigabitEthernet0/0/0] Jul 11 2026 18:31:33-08:00 R8 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R8-GigabitEthernet0/0/0]q [R8]inte [R8]interface lo 0 [R8-LoopBack0]ip ad [R8-LoopBack0]ip address 192.168.2.1 24 [R8-LoopBack0]q [R8]inte [R8]interface lo1 [R8-LoopBack1]ip ad [R8-LoopBack1]ip address 11.0.0.1 24 [R8-LoopBack1]q三、AS2内部使用OSPF协议进行互通1、R2[R2]ospf 1 router-id 2.2.2.2 [R2-ospf-1]area 0 [R2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.2552、R3[R3]ospf 1 router-id 3.3.3.3 [R3-ospf-1] [R3-ospf-1]area 0 [R3-ospf-1-area-0.0.0.0] [R3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.2553、R4[R4]ospf 1 router-id 4.4.4.4 [R4-ospf-1] [R4-ospf-1]area 0 [R4-ospf-1-area-0.0.0.0] [R4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.2554、R5[R5]ospf 1 router-id 5.5.5.5 [R5-ospf-1] [R5-ospf-1]area 0 [R5-ospf-1-area-0.0.0.0] [R5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.2555、R6[R6]ospf 1 router-id 6.6.6.6 [R6-ospf-1] [R6-ospf-1]area 0 [R6-ospf-1-area-0.0.0.0] [R6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.2556、R7[R7]ospf 1 router-id 7.7.7.7 [R7-ospf-1] [R7-ospf-1]area 0 [R7-ospf-1-area-0.0.0.0] [R7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255四、AS之间用EBGP去建邻1、AR1与AR2之间用EBGP去建邻1、R1上的BGP配置[R1]bgp 1 [R1-bgp]router-id 1.1.1.1 [R1-bgp]peer 12.0.0.2 as-number 22、R2上的BGP配置[R2]bgp 64512 //注意需要用小的AS号来创建 [R2-bgp]confederation id 2 //声明自己大的AS号2 [R2-bgp]peer 12.0.0.1 as-number 12、AR7与AR8之间用EBGP去建邻1、R7[R7]bgp 64513 [R7-bgp]router-id 7.7.7.7 [R7-bgp]confederation id 2 [R7-bgp]peer 78.0.0.2 as-number 32、R8[R8]bgp 3 [R8-bgp]router-id 8.8.8.8 [R8-bgp]peer 78.0.0.1 as [R8-bgp]peer 78.0.0.1 as-number 2五、AS2内部分别用IBGP和EBGP去建邻1、AR2,AR3,AR4之间分别用IBGP去建邻1、R2:[R2]bgp 64512 [R2-bgp]peer 172.16.0.29 a [R2-bgp]peer 172.16.0.29 advertise-community [R2-bgp]peer 172.16.0.29 advertise-ext-community [R2-bgp]peer 172.16.0.29 allow-as-loop [R2-bgp]peer 172.16.0.29 as-number 64512 [R2-bgp]peer [R2-bgp]peer 172.16.0.29 c [R2-bgp]peer 172.16.0.29 capability-advertise [R2-bgp]peer 172.16.0.29 connect-interface lo [R2-bgp]peer 172.16.0.29 connect-interface LoopBack 0 [R2-bgp]peer 172.16.0.29 next-hop-local2、R3[R3]bgp 64512 [R3-bgp]router-id 3.3.3.3 [R3-bgp]peer 172.16.0.25 a [R3-bgp]peer 172.16.0.25 as [R3-bgp]peer 172.16.0.25 as-path-filter [R3-bgp]peer 172.16.0.25 as-number 64512 [R3-bgp]peer 172.16.0.25 connect-interface LoopBack 0 [R3-bgp]peer 172.16.0.25 next-hop-local [R3-bgp]peer 172.16.0.33 as [R3-bgp]peer 172.16.0.33 as-number 64512 [R3-bgp]peer 172.16.0.33 connect-interface LoopBack 0 [R3-bgp]peer 172.16.0.33 next-hop-local3、R4[R4]bgp 64512 [R4-bgp]ro [R4-bgp]route-select [R4-bgp]router-id 4.4.4.4 [R4-bgp]peer 172.16.0.29 as [R4-bgp]peer 172.16.0.29 as-number 64512 [R4-bgp]peer 172.16.0.29 con [R4-bgp]peer 172.16.0.29 connect-interface lo [R4-bgp]peer 172.16.0.29 connect-interface LoopBack 0 [R4-bgp]peer 172.16.0.29 next-hop-local2、AR5,AR6,AR7之间分别用IBGP去建邻1、R5[R5]bgp 64513 [R5-bgp]ro [R5-bgp]route-select [R5-bgp]router-id 5.5.5.5 [R5-bgp]peer 172.16.0.41 as [R5-bgp]peer 172.16.0.41 as-number 64513 [R5-bgp]peer 172.16.0.41 connect-interface LoopBack 0 [R5-bgp]peer 172.16.0.41 next-hop-local [R5-bgp]2、R6[R6]bgp 64513 [R6-bgp]rot [R6-bgp]ro [R6-bgp]route-select [R6-bgp]router-id 6.6.6.6 [R6-bgp]peer 172.16.0.37 as [R6-bgp]peer 172.16.0.37 as-number 64513 [R6-bgp]peer 172.16.0.37 con [R6-bgp]peer 172.16.0.37 connect-interface lo [R6-bgp]peer 172.16.0.37 connect-interface LoopBack 0 [R6-bgp]peer 172.16.0.37 next-hop-local [R6-bgp]peer 172.16.0.45 as [R6-bgp]peer 172.16.0.45 as-number 64513 [R6-bgp]peer 172.16.0.45 conn [R6-bgp]peer 172.16.0.45 connect-interface lo [R6-bgp]peer 172.16.0.45 connect-interface LoopBack 0 [R6-bgp]peer 172.16.0.45 next-hop-local [R6-bgp]3、R7[R7-bgp]peer 172.16.0.41 as [R7-bgp]peer 172.16.0.41 as-number 64513 [R7-bgp]peer 172.16.0.41 con [R7-bgp]peer 172.16.0.41 connect-interface lo [R7-bgp]peer 172.16.0.41 connect-interface LoopBack 0 [R7-bgp]peer 172.16.0.41 next-hop-local3、AR2和AR5之间用EBGP直连去建邻[R2-bgp]peer 172.16.0.10 as-number 64513 [R2-bgp]peer 172.16.0.10 next-hop-local[R5-bgp]peer 172.16.0.9 as-number 64512 [R5-bgp]peer 172.16.0.9 next-hop-local4、AR4和AR7之间用EBGP非直连去建邻因为上面AR2和AR5之间用的直连所以我们这个用非直连换一种方法[R4-bgp]confederation peer-as 64513 [R4-bgp]peer 172.16.0.45 as-number 64513 [R4-bgp]peer 172.16.0.45 connect-interface LoopBack 0 [R4-bgp]peer 172.16.0.45 next-hop-local [R4-bgp]peer 172.16.0.45 ebgp-max-hop[R7]bgp 64513 [R7-bgp]con [R7-bgp]confederation p [R7-bgp]confederation peer-as 64512 [R7-bgp]peer 172.16.0.33 as [R7-bgp]peer 172.16.0.33 as-number 64512 [R7-bgp]peer 172.16.0.33 e [R7-bgp]peer 172.16.0.33 enable [R7-bgp]peer 172.16.0.33 ebgp-max-hop [R7-bgp]peer 172.16.0.33 ne [R7-bgp]peer 172.16.0.33 next-hop-local [R7-bgp]peer 172.16.0.33 con [R7-bgp]peer 172.16.0.33 connect-interface lo [R7-bgp]peer 172.16.0.33 connect-interface LoopBack 0六、将AR3和AR6作为路由反馈器将R2指定为客户[R3-bgp]peer 172.16.0.25 reflect-client[R6-bgp]peer 172.16.0.37 reflect-client七、减少路由条目数量避免环路出现1、宣告这四个网段[R1-bgp]network 10.0.0.0 [R1-bgp]network 192.168.1.0[R1-bgp] network 11.0.0.0 255.255.255.0 [R1-bgp] network 192.168.2.0 255.255.252.02、手动汇总和去除环路[R1-bgp]aggregate 192.168.0.0 22 [R1-bgp]AG [R1-bgp]aggregate 192.168.0.0 22 DE [R1-bgp]aggregate 192.168.0.0 22 detail-suppressed [R1-bgp]aggregate 192.168.0.0 22 as-set ---需要在聚合是添加关键字[R8-bgp]aggregate 192.168.0.0 22 [R8-bgp]aggregate 192.168.0.0 22 d [R8-bgp]aggregate 192.168.0.0 22 detail-suppressed八、查看是否可以通过bgp协议互相访问