Сүлжээний аюулгүй байдал

1. Lab1 Without IGP on BGP
192.168.1.220/30
IBGP
4003
R4
R3
R5
192.168.1.224/30 EBGP
192.168.100.0/24
192.168.200.0/24
192.168.1.216/30
AS 200
AS 100
R2
AS 300
192.168.1.208/30
192.168.250.0/24
192.168.1.212/30
EBGP
R6
AS 400
EBGP
192.168.1.196/30
192.168.1.204/30
192.168.50.0/24
192.168.70.0/24
192.168.1.200/30
IBGP
IBGP

2. Lab1 Basic BGP Configuration
Physical Topology (Use Dynamips)
Router1 F0/0 <----> Switch1 F0/0
Router1 F1/0 <----> Switch1 F0/1
Router1 F2/0 <----> Switch1 F0/2
Router2 F0/0 <----> Switch1 F0/3
Router2 F1/0 <----> Switch1 F0/4
Router2 F2/0 <----> Switch1 F0/5
Router3 F0/0 <----> Switch1 F0/6
Router3 F1/0 <----> Switch1 F0/7
Router3 F2/0 <----> Switch1 F0/8
Router4 F0/0 <----> Switch1 F0/9
Router4 F1/0 <----> Switch1 F0/10
Router4 F2/0 <----> Switch1 F0/11
Router5 F0/0 <----> Switch1 F0/12
Router5 F1/0 <----> Switch1 F0/13
Router5 F2/0 <----> Switch1 F0/14
Router6 F0/0 <----> Switch1 F0/15
Router6 F1/0 <----> Switch1 F1/0
Router6 F2/0 <----> Switch1 F1/1
Router1:
hostname 4003
interface FastEthernet0/0
ip address 192.168.1.210 255.255.255.252
!
interface FastEthernet1/0
ip address 192.168.1.221 255.255.255.252
!
interface FastEthernet2/0
ip address 192.168.1.225 255.255.255.252
!
end

3. Router2:
hostname R2
!
interface Loopback0
ip address 192.168.250.1 255.255.255.0
!
interface Loopback1
ip address 192.168.1.213 255.255.255.252
!
interface FastEthernet0/0
ip address 192.168.1.209 255.255.255.252
!
end
Router3
hostname R3
!
interface Loopback0
ip address 192.168.100.1 255.255.255.0
!
interface Loopback1
ip address 192.168.200.1 255.255.255.0
!
interface Loopback2
ip address 192.168.1.217 255.255.255.252
!
interface FastEthernet0/0
ip address 192.168.1.226 255.255.255.252
!
end

4. Router4
hostname R4
!
interface FastEthernet0/0
ip address 192.168.1.222 255.255.255.252
!
interface FastEthernet1/0
ip address 192.168.1.197 255.255.255.252
!
end
Router5
hostname R5
interface FastEthernet0/0
ip address 192.168.1.198 255.255.255.252
!
interface FastEthernet1/0
ip address 192.168.1.205 255.255.255.252
!
end
R6
hostname R6
interface Loopback0
ip address 192.168.50.1 255.255.255.0
!
interface Loopback1
ip address 192.168.70.1 255.255.255.0
!
interface Loopback2
ip address 192.168.1.201 255.255.255.252
!
interface FastEthernet0/0
ip address 192.168.1.206 255.255.255.252
end

5. Switch
vlan database
vlan 11
vlan 12
vlan 13
vlan 14
vlan 15
exit
!
hostname Switch
!
interface FastEthernet0/0
switchport access vlan 11
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 13
!
interface FastEthernet0/3
switchport access vlan 11
!
interface FastEthernet0/6
switchport access vlan 13
!
interface FastEthernet0/9
switchport access vlan 12
!
interface FastEthernet0/10
switchport access vlan 14
!
interface FastEthernet0/12
switchport access vlan 14
!
interface FastEthernet0/13
switchport access vlan 15
!
interface FastEthernet0/15
switchport access vlan 15
!
end

6. Step1
Ping test
R2
Ping 192.168.1.210
4003
Ping 192.168.1.209
Ping 192.168.1.226
R3
Ping 192.168.1.225
R4
Ping 192.168.1.221
Ping 192.168.1.198
R5
Ping 192.168.1.197
Ping 192.168.1.206
R6
Ping 192.168.1.205

7. Step 2
Configure BGP
4003
router bgp 100
no synchronization
bgp router-id 192.168.1.210
network 192.168.1.208mask 255.255.255.252
network 192.168.1.224mask 255.255.255.252
neighbor 192.168.1.198 remote-as 100
neighbor 192.168.1.209 remote-as 300
neighbor 192.168.1.222 remote-as 100
neighbor 192.168.1.226 remote-as 200
no auto-summary
R2
router bgp 300
no synchronization
bgp router-id 192.168.1.209
network 192.168.1.212mask 255.255.255.252
network 192.168.250.0
neighbor 192.168.1.210 remote-as 100
no auto-summary
R3
router bgp 200
no synchronization
bgp router-id 192.168.1.226
network 192.168.1.216mask 255.255.255.252
network 192.168.100.0
network 192.168.200.0
neighbor 192.168.1.225 remote-as 100
no auto-summary

8. R4
router bgp 100
no synchronization
bgp router-id 192.168.1.222
bgp log-neighbor-changes
network 192.168.1.196mask 255.255.255.252
network 192.168.1.220mask 255.255.255.252
neighbor 192.168.1.198 remote-as 100
neighbor 192.168.1.221 remote-as 100
no auto-summary
R5
router bgp 100
no synchronization
bgp router-id 192.168.1.198
network 192.168.1.204mask 255.255.255.252
neighbor 192.168.1.197 remote-as 100
neighbor 192.168.1.206 remote-as 400
neighbor 192.168.1.221 remote-as 100
no auto-summary
R6
router bgp 400
no synchronization
bgp router-id 192.168.1.206
network 192.168.1.200mask 255.255.255.252
network 192.168.50.0
network 192.168.70.0
neighbor 192.168.1.205 remote-as 100
no auto-summary

9. Step3
Use show command on R2,4003,R3,R4,R5andR6
Show ip route
Show ip bgp
Show ip bgp summary
Show ip bgp neighbor
Show ip bgp neighbor detail
Show ip bgp <ip address>

10. Step4 BGPSynchoronization
Before configure the Synchoronization try to do ping test on R2,R3and R6
R2(AS300)
Show ip route
Show ip bgp
Ping 192.168.50.1(AS400)
Ping 192.168.100.1(AS200)
R3(AS200)
Show ip route
Show ip bgp
Ping 192.168.250.1(AS300)
Ping 192.168.50.1(AS400)
R6(AS400)
Show ip route
Show ip bgp
Ping 192.168.250.1(AS300)
Ping 192.168.100.1(AS200)

11. 1. Change BGPSynchoronization on R4
Router bgp 100
synchoronization
clear ip bgp *
Use show command on R2,4003,R3,R4,R5andR6
show ip route
show ip bgp
ping,Traceroute test on R2,R3,R4and 4003
R2(AS300)
Show ip route
Show ip bgp
Ping 192.168.50.1(AS400)
Ping 192.168.100.1(AS200)
Traceroute 192.168.50.1 (AS400)
Traceroute 192.168.100.1(AS200)
4003(AS100)
Show ip route
Show ip bgp
Ping 192.168.50.1(AS400)
Ping 192.168.100.1(AS200)
Traceroute 192.168.50.1 (AS400)
Traceroute 192.168.100.1(AS200)
R4(AS100)
Show ip route
Show ip bgp
Ping 192.168.50.1(AS400)
Traceroute 192.168.50.1 (AS400)
R3(AS200)
Show ip route
Show ip bgp
Ping 192.168.250.1(AS300)
Traceroute 192.168.250.1(AS300)
4003(AS100)
Show ip route
Show ip bgp
Ping 192.168.100.1(AS200)
Traceroute 192.168.100.1(AS200)

12. 2. Resume BGP Synchoronization on R4
Router bgp 100
no synchoronization
clear ip bgp *
ping,Traceroute test on R6
R6(AS400)
Show ip route
Show ip bgp
Ping 192.168.250.1(AS300)
Ping 192.168.100.1(AS200)

13. Step5 BGPNext-hop-self
command: neighbor <ip address> next-hop-self
1. Use show ip bgp on R4,R5and 4003
2. Use next-hop-self command on 4003
neighbor 192.168.1.198 next-hop-self
neighbor 192.168.1.222 next-hop-self
3. Clear ip bgp * on 4003
4. Use show ip bgp again on R4,R5 and 4003
Practice
command: neighbor <ip address> next-hop-self
5. Use show ip bgp on R4,R5and 4003
6. Use next-hop-self command on R5
neighbor 192.168.1.197 next-hop-self
neighbor 192.168.1.221 next-hop-self
7. Clear ip bgp * on R5
8. Use show ip bgp again on R4,R5 and 4003