当前位置: 首页 > news >正文

03_策略路由实验

配置IP
R1

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip ad 12.0.0.1 24
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]ip ad 13.0.0.1 24
[R1-GigabitEthernet0/0/1]int g0/0/2
[R1-GigabitEthernet0/0/2]ip ad 15.0.0.1 24
[R1-GigabitEthernet0/0/2]int l0
[R1-LoopBack0]ip ad 1.1.1.1 32
[R1-LoopBack0]int l1
[R1-LoopBack1]ip ad 192.168.100.1 24
[R1-LoopBack1]ospf network-type broadcast

R2

[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip ad 24.0.0.2 24
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]ip ad 12.0.0.2 24
[R2-GigabitEthernet0/0/1]int l0
[R2-LoopBack0]ip ad 2.2.2.2 32
[R2-LoopBack0]int l1
[R2-LoopBack1]ip ad 192.168.20.1 24
[R2-LoopBack1]ospf network-type broadcast

R3

[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip ad 34.0.0.3 24
[R3-GigabitEthernet0/0/0]int g0/0/1
[R3-GigabitEthernet0/0/1]ip ad 13.0.0.3 24
[R3-GigabitEthernet0/0/1]int l0
[R3-LoopBack0]ip ad 3.3.3.3 32
[R3-LoopBack0]int l1
[R3-LoopBack1]ip ad 192.168.30.1 24
[R3-LoopBack1]ospf network-type broadcast

R4

[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip ad 24.0.0.4 24
[R4-GigabitEthernet0/0/0]int g0/0/1
[R4-GigabitEthernet0/0/0]ip ad 34.0.0.4 24
[R4-GigabitEthernet0/0/0]int l0
[R4-LoopBack0]ip ad 192.168.1.1 24
[R4-LoopBack0]int l1
[R4-LoopBack1]ip ad 192.168.2.1 24
[R4-LoopBack1]int l2
[R4-LoopBack2]ip ad 192.168.3.1 24

R5

[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip ad 15.0.0.5 24
[R5-GigabitEthernet0/0/0]int l0
[R5-LoopBack0]ip ad 192.168.10.1 24
[R5-LoopBack0]int l1
[R5-LoopBack1]ip ad 192.168.11.1 24
[R5-LoopBack1]int l2
[R5-LoopBack2]ip ad 192.168.12.1 24

OSPF配置
R1

[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 12.0.0.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 13.0.0.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 192.168.100.1 0.0.0.0

R2

[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 12.0.0.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 192.168.20.1 0.0.0.0

R3

[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 13.0.0.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 192.168.30.1 0.0.0.0

BGP配置
R1

[R1]bgp 123
[R1-bgp]router-id 1.1.1.1
[R1-bgp]peer 15.0.0.5 as-number 500
[R1-bgp]peer 2.2.2.2 as-number 123
[R1-bgp]peer 2.2.2.2 connect-interface l0
[R1-bgp]peer 2.2.2.2 next-hop-local
[R1-bgp]peer 3.3.3.3 as-number 123
[R1-bgp]peer 3.3.3.3 connect-interface l0
[R1-bgp]peer 3.3.3.3 next-hop-local

R2

[R2]bgp 123
[R2-bgp]router-id 2.2.2.2
[R2-bgp]peer 24.0.0.4 as-number 400
[R2-bgp]peer 1.1.1.1 as-number 123
[R2-bgp]peer 1.1.1.1 connect-interface l0
[R2-bgp]peer 1.1.1.1 next-hop-local

R3

[R3]bgp 123
[R3-bgp]router-id 3.3.3.3
[R3-bgp]peer 34.0.0.4 as-number 400
[R3-bgp]peer 1.1.1.1 as-number 123
[R3-bgp]peer 1.1.1.1 connect-interface l0
[R3-bgp]peer 1.1.1.1 next-hop-local

R4

[R4]bgp 400

[R4-bgp]router-id 4.4.4.4

[R4-bgp]peer 24.0.0.2 as-number 123

[R4-bgp]peer 34.0.0.3 as-number 123

R5

[R5]bgp 500

[R5-bgp]router-id 5.5.5.5

[R5-bgp]peer 15.0.0.1 as-number 123

宣告BGP路由
R1

[R1]bgp 123

[R1-bgp]net 192.168.20.0 24

[R1-bgp]net 192.168.30.0 24

[R1-bgp]net 192.168.100.0 24

R2

[R2]bgp 123

[R2-bgp]net 192.168.20.0 24

[R2-bgp]net 192.168.30.0 24

[R2-bgp]net 192.168.100.0 24

R3

[R3]bgp 123

[R3-bgp]net 192.168.20.0 24

[R3-bgp]net 192.168.30.0 24

[R3-bgp]net 192.168.100.0 24

R4

[R4]bgp 400

[R4-bgp]net 192.168.1.0 24

[R4-bgp]net 192.168.2.0 24

[R4-bgp]net 192.168.3.0 24

R5

[R5]bgp 500

[R5-bgp]net 192.168.10.0 24

[R5-bgp]net 192.168.11.0 24

[R5-bgp]net 192.168.12.0 24

路由策略配置
1、使用preval策略,确保R4通过R2到达192.168.10.0/24
R4

[R4]ip ip-prefix PV permit 192.168.10.0 24
[R4]route-policy PV permit node 10
[R4-route-policy]if-match ip-prefix PV
[R4-route-policy]apply preferred-value 100
[R4-route-policy]q
[R4]route-policy PV permit node 20
[R4-route-policy]q
[R4]bgp 400
[R4-bgp]peer 24.0.0.2 route-policy PV import

2、使用AS Path策略,确保R4通过R3到达192.168.11.0/24
R4

[R4]ip ip-prefix AS permit 192.168.11.0 24
[R4]route-policy AS permit node 10
[R4-route-policy]if-match ip-prefix AS
[R4-route-policy]apply as-path 123 overwrite
[R4-route-policy]q
[R4]bgp 400
[R4-bgp]peer 34.0.0.3 route-policy PV import

3、配置MED策略,确保R4通过R3到达192.168.12.0/24
R2

[R2]ip ip-prefix MED permit 192.168.12.0 24
[R2]route-policy MED permit node 10
[R2-route-policy]if-match ip-prefix MED
[R2-route-policy]apply cost 200
[R2-route-policy]q
[R2]route-policy MED permit node 20
[R2]bgp 123
[R2-bgp]peer 24.0.0.4 route-policy MED export

R3

[R3]ip ip-prefix MED permit 192.168.12.0 24
[R3]route-policy MED permit node 10
[R3-route-policy]if-match ip-prefix MED
[R3-route-policy]apply cost 200
[R3-route-policy]q
[R3]route-policy MED permit node 20
[R3]bgp 123
[R3-bgp]peer 34.0.0.4 route-policy MED export

4、使用Local Preference策略,确保R1通过R2到达192.168.1.0/24
R1

[R1]ip ip-prefix LP1 permit 192.168.1.0 24
[R1]route-policy LP1 permit node 10
[R1-route-policy]if-match ip-prefix LP
[R1-route-policy]apply local-preference 200
[R1-route-policy]q
[R1]route-policy LP1 permit node 20
[R1]bgp 123
[R1-bgp]peer 2.2.2.2 route-policy LP import

5、使用Local Preference策略,确保R1通过R3到达192.168.2.0/24
R1

[R1]ip ip-prefix LP2 permit 192.168.2.0 24
[R1]route-policy LP2 permit node 10
[R1-route-policy]if-match ip-prefix LP2
[R1-route-policy]apply local-preference 200
[R1-route-policy]q
[R1]route-policy LP1 permit node 20
[R1]bgp 123
[R1-bgp]peer 3.3.3.3 route-policy LP import

6、配置负载均衡,确保R1通过R2和R3到达192.168.3.0/24
R1

[R1]bgp 123
[R1-bgp]maximum load-balancing 2

7、使用As策略,AS 500不接受任何始发于AS 123的路由
R1

[R1]ip as-path-filter 1 deny ^$
[R1]ip as-path-filter 1 permit .*
[R1]bgp 123
[R1-bgp]peer 15.0.0.5 as-path-filter 1 export

8、使用自定义Community策略,确保192.168.3.0/24路由不会被发布到AS 500
R4

[R4]route-policy com permit node 10
[R4-route-policy]apply community 400:500
[R4]bgp 400
[R4-bgp]network 192.168.3.0 24 route-policy com
[R4-bgp]peer 24.0.0.2 advertise-community
[R4-bgp]peer 34.0.0.3 advertise-community

R2

[R2]bgp 123
[R2-bgp]peer 1.1.1.1 advertise-community

R3

[R3]bgp 123
[R3-bgp]peer 1.1.1.1 advertise-community

R1

[R1]bgp 123
[R1-bgp]peer 15.0.0.5 advertise-community
————————————————
版权声明:本文为CSDN博主「shushdsjsjjd」的原创文章,遵循CC 4.0 BY-SA版权协议,转载请附上原文出处链接及本声明。
原文链接:https://blog.csdn.net/shushdsjsjjd/article/details/148085064

http://www.jsqmd.com/news/1370276/

相关文章:

  • Unity音频优化:音效池技术原理与工业级实现详解
  • 2026年8月三亚废铜废品回收/三亚不锈钢厨具废品回收工程公司哪家**_三亚吉阳冯坤新旧日用家电零售店 - 品牌宣传支持者
  • 搜索自动化智能体建设的运行
  • 上海黄浦区瓷砖空鼓维修上门团队推荐_2026上海长江口避坑全集与价格_全屋卫生间厨房阳台客厅墙砖地砖 - 雨婺虹修缮
  • C语言文件操作全解析:从流与缓冲区到安全编程实践
  • TuxGuitar Android版:免费专业的移动吉他谱编辑器终极指南
  • 如何在5分钟内用YOLOv8 AI自瞄助手打造你的FPS游戏智能瞄准系统
  • SpringBoot+Vue双创竞赛管理平台开发实践
  • Windows+VS2019配置MS-MPI全攻略:从零搭建并行计算开发环境
  • 筛选潍坊性价比高的单人轨道滑草批发商,文旅项目优选建大游乐设备(潍坊服务中心) - 热点品牌推荐
  • 【Python经济量化】手写投入产出模型:用列昂惕夫逆矩阵推演产业链“断链”风险
  • 重庆优选一体乳胶垫批发商参考重庆市伊莎妮娅床垫有限公司(重庆营销部) - 热点品牌推荐
  • 分布式系统核心原理与实践指南
  • SpringBoot+Vue毕业生就业管理系统开发实践
  • RAGFlow知识库构建实战:从文档解析、向量化到入库的完整流程与避坑指南
  • GEO一句话顶一万句?怎么降低获客成本?试试让AI主动推荐你 - AZJ888
  • 量化交易框架VeighNa安装指南:从Python环境配置到实战部署
  • Agent 安全事件成为本周核心风险信号,从三起越界评测到 Hugging Face 入侵
  • 推客系统选型指南:六大核心维度与实战策略
  • Unity GPU加速Boids算法:万级群体智能模拟与性能优化实战
  • STM32智能书桌
  • Python heapq模块详解:最小堆原理、实现与应用场景
  • 江苏贴标机生产厂家哪家可靠?找源头更省心——苏州缔尔智能包装(江苏营销部) - 热点品牌推荐
  • 《重启日记》第二十周|低产出常态,在忙碌里守住双重节律
  • Windows 11 LTSC微软商店完整安装指南:3步恢复完整应用生态
  • 短文本兴趣解析实战:从语义向量化到标签映射的完整方案
  • 谷歌给娃发“数字零花钱“了!不用开银行账户,家长手机就能管
  • Claude Code上下文拼接机制解析:从API调用看AI编码助手的高效协作
  • Godot 4通用约束求解器:从WFC算法到程序化内容生成的架构设计
  • 【Java核心高阶进阶】20-OOM与内存泄漏排查