当前位置： 首页 > news >正文

BGP综合实验（广域网互通，AS，OSPF，EBGP，IBGP，汇总，防环）

news 2026/7/17 5:55:29

一、实验需求

1，AS1存在两个环回，一个地址为192.168.1.0/24该地址不能在任何协议中宣告
AS3中存在两个环回，一个地址为192.168.2.0/24该地址不能在任何协议中宣告，最终要求这两个环回可以互相通讯
AS1的另一个环回为10.0.0.0/24，AS3的另一个环回为11.0.0.0/24
2，整个AS2的Ip地址为172.16.0.0/16，请合理划分
3，AS间的骨干链路IP地址随意定制
4，使用BGP协议让整个网络所有设备的环回可以互相访问
5，减少路由条目数量，避免环路出现

二、实验拓扑

三、实验步骤

一、划分网段

1、需求：整个AS2的Ip地址为172.16.0.0/16，请合理划分

因为如上拓扑图可以看出在AS2中一共有12个网段（6个主干网段，6个环回网段），所以我们可以用172.16.0.0/26进行划分，一共可以划分出16个掩码为30的网段，只需要12个，剩下的备用

AS2:主干
172.16.0.00 000000/26
172.16.0.00 000000/30---172.16.0.0/30
172.16.0.00 000100/30---172.16.0.4/30
172.16.0.00 001000/30---172.16.0.8/30
172.16.0.00 001100/30---172.16.0.12/30
172.16.0.00 010000/30---172.16.0.16/30
172.16.0.00 010100/30---172.16.0.20/30

AS2：环回
R2:172.16.0.00 011000/30---172.16.0.24/30
R3:172.16.0.00 011100/30---172.16.0.28/30
R4:172.16.0.00 100000/30---172.16.0.32/30
R5:172.16.0.00 100100/30---172.16.0.36/30
R6:172.16.0.00 101000/30---172.16.0.40/30
R7:172.16.0.00 101100/30---172.16.0.44/30

2、需求：AS间的骨干链路IP地址随意定制

因为需求给出骨干随意定制，所以我们可以定制为：

AR1--AR2之间为：12.0.0.0/24网段进行定制，接口IP地址分别为12.0.0.1/24 12.0.0.2/24

AR7--AR8之间为：78.0.0.0/24网段进行定制，接口IP地址分别为78.0.0.1/24 78.0.0.2/24

二、配置IP地址

1、AR1

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R1 [R1]interface g0/0/0 [R1-GigabitEthernet0/0/0]ip address 12.0.0.1 24 [R1-GigabitEthernet0/0/0]q [R1]interface lo0 [R1-LoopBack0]ip address 192.168.1.1 24 [R1-LoopBack1]ip address 10.0.0.1 24 [R1-LoopBack1]q

2、AR2

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R2 [R2]interface g0/0/0 [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0]ip address 12.0.0.2 24 Jul 11 2026 18:24:48-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0]q [R2] [R2]interface g0/0/1 [R2-GigabitEthernet0/0/1] [R2-GigabitEthernet0/0/1]ip address 172.16.0.1 30 [R2-GigabitEthernet0/0/1] [R2-GigabitEthernet0/0/1]q [R2] [R2]interface g0/0/2 [R2-GigabitEthernet0/0/2] Jul 11 2026 18:24:48-08:00 R2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R2-GigabitEthernet0/0/2] [R2-GigabitEthernet0/0/2]ip address 172.16.0.9 30 [R2]interface lo0 [R2-LoopBack0]ip ad [R2-LoopBack0]ip address 172.16.0.25 30

3、AR3

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R3 [R3] [R3]interface g0/0/0 [R3-GigabitEthernet0/0/0] [R3-GigabitEthernet0/0/0]ip address 172.16.0.2 30 [R3-GigabitEthernet0/0/0] Jul 11 2026 18:25:38-08:00 R3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R3-GigabitEthernet0/0/0]q [R3-GigabitEthernet0/0/0] [R3] [R3]interface g0/0/1 [R3-GigabitEthernet0/0/1] [R3-GigabitEthernet0/0/1]ip address 172.16.0.5 30 [R3]interface lo0 [R3-LoopBack0] [R3-LoopBack0]ip address 172.16.0.29 30

4、AR4

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys ^ Error:Incomplete command found at '^' position. [Huawei]sys R4 [R4]interface g0/0/0 [R4-GigabitEthernet0/0/0] [R4-GigabitEthernet0/0/0]ip address 172.16.0.6 30 Jul 11 2026 18:26:15-08:00 R4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R4-GigabitEthernet0/0/0] [R4-GigabitEthernet0/0/0]q [R4] [R4]interface g0/0/1 [R4-GigabitEthernet0/0/1] [R4-GigabitEthernet0/0/1]ip address 172.16.0.21 30 [R4-GigabitEthernet0/0/1] [R4-GigabitEthernet0/0/1]q Jul 11 2026 18:26:15-08:00 R4 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R4-GigabitEthernet0/0/1]q [R4]interface lo0 [R4-LoopBack0] [R4-LoopBack0]ip address 172.16.0.33 30

5、AR5

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R5 [R5] [R5] [R5]interface g0/0/0 [R5-GigabitEthernet0/0/0] [R5-GigabitEthernet0/0/0]ip address 172.16.0.10 30 [R5-GigabitEthernet0/0/0] Jul 11 2026 18:28:30-08:00 R5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R5-GigabitEthernet0/0/0] [R5-GigabitEthernet0/0/0]q [R5] [R5]interface g0/0/1 [R5-GigabitEthernet0/0/1] [R5-GigabitEthernet0/0/1]ip address 172.16.0.13 30 [R5-GigabitEthernet0/0/1] [R5-GigabitEthernet0/0/1]q Jul 11 2026 18:28:30-08:00 R5 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R5-GigabitEthernet0/0/1]q [R5]interface lo0 [R5-LoopBack0] [R5-LoopBack0]ip address 172.16.0.37 30

6、AR6

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R6 [R6]interface g0/0/0 [R6-GigabitEthernet0/0/0] [R6-GigabitEthernet0/0/0]ip address 172.16.0.14 30 [R6-GigabitEthernet0/0/0] Jul 11 2026 18:27:58-08:00 R6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R6-GigabitEthernet0/0/0] [R6-GigabitEthernet0/0/0]q [R6] [R6]interface g0/0/1 [R6-GigabitEthernet0/0/1] [R6-GigabitEthernet0/0/1]ip address 172.16.0.17 30 Jul 11 2026 18:27:59-08:00 R6 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R6-GigabitEthernet0/0/1] [R6-GigabitEthernet0/0/1]q [R6]interface lo0 [R6-LoopBack0] [R6-LoopBack0]ip address 172.16.0.41 30

7、AR7

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R7 [R7]interface g0/0/0 [R7-GigabitEthernet0/0/0] [R7-GigabitEthernet0/0/0]ip address 172.16.0.18 30 [R7-GigabitEthernet0/0/0] Jul 11 2026 18:27:04-08:00 R7 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R7-GigabitEthernet0/0/0] [R7-GigabitEthernet0/0/0]q [R7] [R7]interface g0/0/1 [R7-GigabitEthernet0/0/1] [R7-GigabitEthernet0/0/1]ip address 172.16.0.22 30 [R7-GigabitEthernet0/0/1] [R7-GigabitEthernet0/0/1]q [R7] [R7]interface g0/0/2 Jul 11 2026 18:27:04-08:00 R7 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R7]interface g0/0/2 [R7-GigabitEthernet0/0/2] [R7-GigabitEthernet0/0/2]ip address 78.0.0.1 24 [R7]interface lo0 [R7-LoopBack0] [R7-LoopBack0]ip address 172.16.0.45 30

8、AR8

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R8 [R8]inte [R8]interface g0/0/0 [R8-GigabitEthernet0/0/0]ip ad [R8-GigabitEthernet0/0/0]ip address 78.0.0.2 24 [R8-GigabitEthernet0/0/0] Jul 11 2026 18:31:33-08:00 R8 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R8-GigabitEthernet0/0/0]q [R8]inte [R8]interface lo 0 [R8-LoopBack0]ip ad [R8-LoopBack0]ip address 192.168.2.1 24 [R8-LoopBack0]q [R8]inte [R8]interface lo1 [R8-LoopBack1]ip ad [R8-LoopBack1]ip address 11.0.0.1 24 [R8-LoopBack1]q

三、AS2内部使用OSPF协议进行互通

1、R2

[R2]ospf 1 router-id 2.2.2.2 [R2-ospf-1]area 0 [R2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255
2、R3
[R3]ospf 1 router-id 3.3.3.3 [R3-ospf-1] [R3-ospf-1]area 0 [R3-ospf-1-area-0.0.0.0] [R3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255
3、R4
[R4]ospf 1 router-id 4.4.4.4 [R4-ospf-1] [R4-ospf-1]area 0 [R4-ospf-1-area-0.0.0.0] [R4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

4、R5

[R5]ospf 1 router-id 5.5.5.5 [R5-ospf-1] [R5-ospf-1]area 0 [R5-ospf-1-area-0.0.0.0] [R5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

5、R6

[R6]ospf 1 router-id 6.6.6.6 [R6-ospf-1] [R6-ospf-1]area 0 [R6-ospf-1-area-0.0.0.0] [R6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

6、R7

[R7]ospf 1 router-id 7.7.7.7 [R7-ospf-1] [R7-ospf-1]area 0 [R7-ospf-1-area-0.0.0.0] [R7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

四、AS之间用EBGP去建邻

1、AR1与AR2之间用EBGP去建邻

1、R1上的BGP配置
[R1]bgp 1 [R1-bgp]router-id 1.1.1.1 [R1-bgp]peer 12.0.0.2 as-number 2
2、R2上的BGP配置
[R2]bgp 64512 //注意：需要用小的AS号来创建 [R2-bgp]confederation id 2 //声明自己大的AS号2 [R2-bgp]peer 12.0.0.1 as-number 1

2、AR7与AR8之间用EBGP去建邻

1、R7
[R7]bgp 64513 [R7-bgp]router-id 7.7.7.7 [R7-bgp]confederation id 2 [R7-bgp]peer 78.0.0.2 as-number 3
2、R8
[R8]bgp 3 [R8-bgp]router-id 8.8.8.8 [R8-bgp]peer 78.0.0.1 as [R8-bgp]peer 78.0.0.1 as-number 2

五、AS2内部分别用IBGP和EBGP去建邻

1、AR2,AR3,AR4之间分别用IBGP去建邻

1、R2:
[R2]bgp 64512 [R2-bgp]peer 172.16.0.29 a [R2-bgp]peer 172.16.0.29 advertise-community [R2-bgp]peer 172.16.0.29 advertise-ext-community [R2-bgp]peer 172.16.0.29 allow-as-loop [R2-bgp]peer 172.16.0.29 as-number 64512 [R2-bgp]peer [R2-bgp]peer 172.16.0.29 c [R2-bgp]peer 172.16.0.29 capability-advertise [R2-bgp]peer 172.16.0.29 connect-interface lo [R2-bgp]peer 172.16.0.29 connect-interface LoopBack 0 [R2-bgp]peer 172.16.0.29 next-hop-local
2、R3
[R3]bgp 64512 [R3-bgp]router-id 3.3.3.3 [R3-bgp]peer 172.16.0.25 a [R3-bgp]peer 172.16.0.25 as [R3-bgp]peer 172.16.0.25 as-path-filter [R3-bgp]peer 172.16.0.25 as-number 64512 [R3-bgp]peer 172.16.0.25 connect-interface LoopBack 0 [R3-bgp]peer 172.16.0.25 next-hop-local [R3-bgp]peer 172.16.0.33 as [R3-bgp]peer 172.16.0.33 as-number 64512 [R3-bgp]peer 172.16.0.33 connect-interface LoopBack 0 [R3-bgp]peer 172.16.0.33 next-hop-local
3、R4
[R4]bgp 64512 [R4-bgp]ro [R4-bgp]route-select [R4-bgp]router-id 4.4.4.4 [R4-bgp]peer 172.16.0.29 as [R4-bgp]peer 172.16.0.29 as-number 64512 [R4-bgp]peer 172.16.0.29 con [R4-bgp]peer 172.16.0.29 connect-interface lo [R4-bgp]peer 172.16.0.29 connect-interface LoopBack 0 [R4-bgp]peer 172.16.0.29 next-hop-local

2、AR5,AR6,AR7之间分别用IBGP去建邻

1、R5
[R5]bgp 64513 [R5-bgp]ro [R5-bgp]route-select [R5-bgp]router-id 5.5.5.5 [R5-bgp]peer 172.16.0.41 as [R5-bgp]peer 172.16.0.41 as-number 64513 [R5-bgp]peer 172.16.0.41 connect-interface LoopBack 0 [R5-bgp]peer 172.16.0.41 next-hop-local [R5-bgp]
2、R6
[R6]bgp 64513 [R6-bgp]rot [R6-bgp]ro [R6-bgp]route-select [R6-bgp]router-id 6.6.6.6 [R6-bgp]peer 172.16.0.37 as [R6-bgp]peer 172.16.0.37 as-number 64513 [R6-bgp]peer 172.16.0.37 con [R6-bgp]peer 172.16.0.37 connect-interface lo [R6-bgp]peer 172.16.0.37 connect-interface LoopBack 0 [R6-bgp]peer 172.16.0.37 next-hop-local [R6-bgp]peer 172.16.0.45 as [R6-bgp]peer 172.16.0.45 as-number 64513 [R6-bgp]peer 172.16.0.45 conn [R6-bgp]peer 172.16.0.45 connect-interface lo [R6-bgp]peer 172.16.0.45 connect-interface LoopBack 0 [R6-bgp]peer 172.16.0.45 next-hop-local [R6-bgp]
3、R7
[R7-bgp]peer 172.16.0.41 as [R7-bgp]peer 172.16.0.41 as-number 64513 [R7-bgp]peer 172.16.0.41 con [R7-bgp]peer 172.16.0.41 connect-interface lo [R7-bgp]peer 172.16.0.41 connect-interface LoopBack 0 [R7-bgp]peer 172.16.0.41 next-hop-local

3、AR2和AR5之间用EBGP直连去建邻

[R2-bgp]peer 172.16.0.10 as-number 64513 [R2-bgp]peer 172.16.0.10 next-hop-local
[R5-bgp]peer 172.16.0.9 as-number 64512 [R5-bgp]peer 172.16.0.9 next-hop-local

4、AR4和AR7之间用EBGP非直连去建邻

因为上面AR2和AR5之间用的直连，所以我们这个用非直连（换一种方法）

[R4-bgp]confederation peer-as 64513 [R4-bgp]peer 172.16.0.45 as-number 64513 [R4-bgp]peer 172.16.0.45 connect-interface LoopBack 0 [R4-bgp]peer 172.16.0.45 next-hop-local [R4-bgp]peer 172.16.0.45 ebgp-max-hop
[R7]bgp 64513 [R7-bgp]con [R7-bgp]confederation p [R7-bgp]confederation peer-as 64512 [R7-bgp]peer 172.16.0.33 as [R7-bgp]peer 172.16.0.33 as-number 64512 [R7-bgp]peer 172.16.0.33 e [R7-bgp]peer 172.16.0.33 enable [R7-bgp]peer 172.16.0.33 ebgp-max-hop [R7-bgp]peer 172.16.0.33 ne [R7-bgp]peer 172.16.0.33 next-hop-local [R7-bgp]peer 172.16.0.33 con [R7-bgp]peer 172.16.0.33 connect-interface lo [R7-bgp]peer 172.16.0.33 connect-interface LoopBack 0

六、将AR3和AR6作为路由反馈器

将R2指定为客户

[R3-bgp]peer 172.16.0.25 reflect-client
[R6-bgp]peer 172.16.0.37 reflect-client

七、减少路由条目数量，避免环路出现

1、宣告这四个网段

[R1-bgp]network 10.0.0.0 [R1-bgp]network 192.168.1.0
[R1-bgp] network 11.0.0.0 255.255.255.0 [R1-bgp] network 192.168.2.0 255.255.252.0

2、手动汇总和去除环路

[R1-bgp]aggregate 192.168.0.0 22 [R1-bgp]AG [R1-bgp]aggregate 192.168.0.0 22 DE [R1-bgp]aggregate 192.168.0.0 22 detail-suppressed [R1-bgp]aggregate 192.168.0.0 22 as-set ---需要在聚合是添加关键字
[R8-bgp]aggregate 192.168.0.0 22 [R8-bgp]aggregate 192.168.0.0 22 d [R8-bgp]aggregate 192.168.0.0 22 detail-suppressed

八、查看是否可以通过bgp协议互相访问

http://www.jsqmd.com/news/1204795/

相关文章：

  • Ubuntu Chrome中文乱码终极解决方案
  • 2026年7月护栏网生产厂家推荐，钢丝网/石笼网/草原网/勾花网/钢筋网片/围栏网/钢格板/防护网，护栏网公司哪家好 - 品牌推荐师
  • Ubuntu中Ctrl+Alt+F7失效的原因与解决方案
  • VSCode+STM32CubeMX+GCC构建现代嵌入式开发环境实战
  • Python+LLM构建智能对话引擎：从零实现可定制AI助手
  • 2026年Claude Skills开发实战：从配置到企业级部署
  • AI编程工具安全部署与工程实践：Claude Code风险排查与GPT/Grok对比
  • 美度中国官方售后服务中心｜服务热线及门店详细地址权威信息公告（2026年7月更新） - 亨得利官方服务中心
  • OpenAI微调技术实战：从基础到高级应用
  • 十分钟实现SVG Loading动画的完整指南
  • DSC28034PNT与CH340G串口通信及FIFO实现详解
  • Ubuntu美化：White Sur主题配置全攻略
  • 2026年7月最新温州欧米茄官方售后客服服务电话及地址网点大全 - 欧米茄官方服务中心
  • Unity引擎入门指南：从核心架构到实战开发全解析
  • 雅典官方售后服务中心详细地址与电话实地考察报告_多信源验证（2026年7月更新） - 亨得利钟表维修中心
  • AI+菌株设计的“伪AI“识别清单：3个月量化验证红线
  • 源代码论文分享｜基于智能推荐的卫生健康系统！
  • C++设计模式实战：避免开源项目中的常见陷阱与性能优化
  • C++引用深度解析：从概念到实战，掌握高效编程核心
  • QT C++ 短信验证码发送模块：基于MVC模式的可复用业务逻辑模型设计与实现
  • 轻量级卷积技术解析与应用实践
  • 从零理解JavaScript游戏框架：核心原理、实现与选型指南
  • 百达翡丽中国官方专柜客户服务电话权威信息声明（2026年7月最新） - 百达翡丽服务中心
  • Windows X-Lite 26H1系统优化：老电脑流畅运行3A游戏
  • 简易版鸿蒙元服务局域网多人聊天室
  • Windows通过WSL运行Flatpak应用的完整指南
  • 大模型推理优化：从TPS指标到Cerebras硬件架构的工程实践
  • 2026 年新消息：恩施值得关注的钢厂炉门铸件厂家电话制造商联系方式,别再花冤枉钱！炉门铸件的秘密电话曝光 - 行业推荐官【认证】
  • Unity 2023安装深度解析：模块化机制与企业级部署
  • 人形机器人产线落地：从宣传话术到工程水位线的硬核复盘