BGP路由控制实验完整配置手册

发布时间:2026/7/12 19:11:39
BGP路由控制实验完整配置手册 一、实验拓扑与地址规划1.2 环回口地址规划设备LoopBack0 (Router-ID/IBGP)LoopBack1 (模拟用户网段)所属ASAR11.1.1.1/32192.168.1.1/24AS 100AR22.2.2.2/32192.168.2.1/24AS 200AR33.3.3.3/32192.168.3.1/24AS 200AR44.4.4.4/32192.168.4.1/24AS 200AR55.5.5.5/32192.168.5.1/24AS 300AR66.6.6.6/32192.168.6.1/24AS 300AR77.7.7.7/32192.168.7.1/24AS 400AR88.8.8.8/32192.168.8.1/24AS 500AR99.9.9.9/32192.168.9.1/24AS 500AR1010.10.10.10/32192.168.10.1/24AS 5001.3 直连网段规划链路网段本端地址对端地址协议类型AR1-GE0/0/0 ↔ AR2-GE0/0/0100.1.12.0/24100.1.12.1100.1.12.2EBGPAR1-GE0/0/1 ↔ AR3-GE0/0/0100.1.13.0/24100.1.13.1100.1.13.3EBGPAR2-GE0/0/1 ↔ AR7-GE0/0/0100.1.47.0/24100.1.47.2100.1.47.7EBGPAR2-GE0/0/2 ↔ AR4-GE0/0/0100.1.24.0/24100.1.24.2100.1.24.4IBGPAR3-GE0/0/1 ↔ AR4-GE0/0/1100.1.34.0/24100.1.34.3100.1.34.4IBGPAR4-GE0/0/2 ↔ AR5-GE0/0/0100.1.45.0/24100.1.45.4100.1.45.5EBGPAR5-GE0/0/1 ↔ AR7-GE0/0/1100.1.67.0/24100.1.67.5100.1.67.7EBGPAR5-GE0/0/2 ↔ AR6-GE0/0/0100.1.56.0/24100.1.56.5100.1.56.6IBGPAR6-GE0/0/1 ↔ AR7-GE0/0/3100.1.36.0/24100.1.36.6100.1.36.7EBGPAR6-GE0/0/2 ↔ AR9-GE0/0/0100.1.69.0/24100.1.69.6100.1.69.9EBGPAR7-GE0/0/2 ↔ AR8-GE0/0/0100.1.78.0/24100.1.78.7100.1.78.8EBGPAR8-GE0/0/1 ↔ AR10-GE0/0/0100.1.107.0/24100.1.107.8100.1.107.10IBGPAR9-GE0/0/1 ↔ AR10-GE0/0/1100.1.109.0/24100.1.109.9100.1.109.10IBGP二、实验需求每个设备配置两个环回接口LoopBack0用于BGP建邻/32LoopBack1模拟用户网段192.168.X.0/24所有AS内部运行OSPF协议实现IBGP TCP可达避免BGP路由黑洞同一个AS内建立全连接IBGP对等体关系AS 200中AR2与AR3之间模拟路由传递故障不建立IBGP按照图示建立所有EBGP对等体关系BGP仅传递用于模拟用户网段的LoopBack1路由信息AS内部如有需要自行连接IGP协议进行运行实现所有模拟PC的环回接口之间相互通讯三、第一步配置IP地址3.1 AR1 配置AS 100[AR1]int g0/0/0[AR1-GigabitEthernet0/0/0]ipadd100.1.12.124[AR1-GigabitEthernet0/0/0]int g0/0/1[AR1-GigabitEthernet0/0/1]ipadd100.1.13.124[AR1-GigabitEthernet0/0/1]int LoopBack0[AR1-LoopBack0]ipadd1.1.1.132[AR1-LoopBack0]int LoopBack1[AR1-LoopBack1]ipadd192.168.1.1243.2 AR2 配置AS 200[AR2]int g0/0/0[AR2-GigabitEthernet0/0/0]ipadd100.1.12.224[AR2-GigabitEthernet0/0/0]int g0/0/1[AR2-GigabitEthernet0/0/1]ipadd100.1.47.224[AR2-GigabitEthernet0/0/1]int g0/0/2[AR2-GigabitEthernet0/0/2]ipadd100.1.24.224[AR2-GigabitEthernet0/0/2]int LoopBack0[AR2-LoopBack0]ipadd2.2.2.232[AR2-LoopBack0]int LoopBack1[AR2-LoopBack1]ipadd192.168.2.1243.3 AR3 配置AS 200[AR3]int g0/0/0[AR3-GigabitEthernet0/0/0]ipadd100.1.13.324[AR3-GigabitEthernet0/0/0]int g0/0/1[AR3-GigabitEthernet0/0/1]ipadd100.1.34.324[AR3-GigabitEthernet0/0/1]int LoopBack0[AR3-LoopBack0]ipadd3.3.3.332[AR3-LoopBack0]int LoopBack1[AR3-LoopBack1]ipadd192.168.3.1243.4 AR4 配置AS 200[AR4]int g0/0/0[AR4-GigabitEthernet0/0/0]ipadd100.1.24.424[AR4-GigabitEthernet0/0/0]int g0/0/1[AR4-GigabitEthernet0/0/1]ipadd100.1.34.424[AR4-GigabitEthernet0/0/1]int g0/0/2[AR4-GigabitEthernet0/0/2]ipadd100.1.45.424[AR4-GigabitEthernet0/0/2]int LoopBack0[AR4-LoopBack0]ipadd4.4.4.432[AR4-LoopBack0]int LoopBack1[AR4-LoopBack1]ipadd192.168.4.1243.5 AR5 配置AS 300[AR5]int g0/0/0[AR5-GigabitEthernet0/0/0]ipadd100.1.45.524[AR5-GigabitEthernet0/0/0]int g0/0/1[AR5-GigabitEthernet0/0/1]ipadd100.1.67.524[AR5-GigabitEthernet0/0/1]int g0/0/2[AR5-GigabitEthernet0/0/2]ipadd100.1.56.524[AR5-GigabitEthernet0/0/2]int LoopBack0[AR5-LoopBack0]ipadd5.5.5.532[AR5-LoopBack0]int LoopBack1[AR5-LoopBack1]ipadd192.168.5.1243.6 AR6 配置AS 300[AR6]int g0/0/0[AR6-GigabitEthernet0/0/0]ipadd100.1.56.624[AR6-GigabitEthernet0/0/0]int g0/0/1[AR6-GigabitEthernet0/0/1]ipadd100.1.36.624[AR6-GigabitEthernet0/0/1]int g0/0/2[AR6-GigabitEthernet0/0/2]ipadd100.1.69.624[AR6-GigabitEthernet0/0/2]int LoopBack0[AR6-LoopBack0]ipadd6.6.6.632[AR6-LoopBack0]int LoopBack1[AR6-LoopBack1]ipadd192.168.6.1243.7 AR7 配置AS 400[AR7]int g0/0/0[AR7-GigabitEthernet0/0/0]ipadd100.1.47.724[AR7-GigabitEthernet0/0/0]int g0/0/1[AR7-GigabitEthernet0/0/1]ipadd100.1.67.724[AR7-GigabitEthernet0/0/1]int g0/0/2[AR7-GigabitEthernet0/0/2]ipadd100.1.78.724[AR7-GigabitEthernet0/0/2]int g0/0/3[AR7-GigabitEthernet0/0/3]ipadd100.1.36.724[AR7-GigabitEthernet0/0/3]int LoopBack0[AR7-LoopBack0]ipadd7.7.7.732[AR7-LoopBack0]int LoopBack1[AR7-LoopBack1]ipadd192.168.7.1243.8 AR8 配置AS 500[AR8]int g0/0/0[AR8-GigabitEthernet0/0/0]ipadd100.1.78.824[AR8-GigabitEthernet0/0/0]int g0/0/1[AR8-GigabitEthernet0/0/1]ipadd100.1.107.824[AR8-GigabitEthernet0/0/1]int LoopBack0[AR8-LoopBack0]ipadd8.8.8.832[AR8-LoopBack0]int LoopBack1[AR8-LoopBack1]ipadd192.168.8.1243.9 AR9 配置AS 500[AR9]int g0/0/0[AR9-GigabitEthernet0/0/0]ipadd100.1.69.924[AR9-GigabitEthernet0/0/0]int g0/0/1[AR9-GigabitEthernet0/0/1]ipadd100.1.109.924[AR9-GigabitEthernet0/0/1]int LoopBack0[AR9-LoopBack0]ipadd9.9.9.932[AR9-LoopBack0]int LoopBack1[AR9-LoopBack1]ipadd192.168.9.1243.10 AR10 配置AS 500[AR10]int g0/0/0[AR10-GigabitEthernet0/0/0]ipadd100.1.107.1024[AR10-GigabitEthernet0/0/0]int g0/0/1[AR10-GigabitEthernet0/0/1]ipadd100.1.109.1024[AR10-GigabitEthernet0/0/1]int LoopBack0[AR10-LoopBack0]ipadd10.10.10.1032[AR10-LoopBack0]int LoopBack1[AR10-LoopBack1]ipadd192.168.10.124四、第二步配置OSPFAS内部IGPOSPF仅宣告LoopBack0和AS内部直连接口用于IBGP建邻的TCP可达性不宣告业务网段LoopBack1和EBGP直连网段。4.1 AS 200 内部 OSPF 配置AR2 / AR3 / AR4AR2 OSPF 配置[AR2]ospf1router-id2.2.2.2[AR2-ospf-1]area0[AR2-ospf-1-area-0.0.0.0]network2.2.2.20.0.0.0[AR2-ospf-1-area-0.0.0.0]network100.1.24.20.0.0.0AR3 OSPF 配置[AR3]ospf1router-id3.3.3.3[AR3-ospf-1]area0[AR3-ospf-1-area-0.0.0.0]network3.3.3.30.0.0.0[AR3-ospf-1-area-0.0.0.0]network100.1.34.30.0.0.0AR4 OSPF 配置[AR4]ospf1router-id4.4.4.4[AR4-ospf-1]area0[AR4-ospf-1-area-0.0.0.0]network4.4.4.40.0.0.0[AR4-ospf-1-area-0.0.0.0]network100.1.24.40.0.0.0[AR4-ospf-1-area-0.0.0.0]network100.1.34.40.0.0.04.2 AS 300 内部 OSPF 配置AR5 / AR6AR5 OSPF 配置[AR5]ospf1router-id5.5.5.5[AR5-ospf-1]area0[AR5-ospf-1-area-0.0.0.0]network5.5.5.50.0.0.0[AR5-ospf-1-area-0.0.0.0]network100.1.56.50.0.0.0AR6 OSPF 配置[AR6]ospf1router-id6.6.6.6[AR6-ospf-1]area0[AR6-ospf-1-area-0.0.0.0]network6.6.6.60.0.0.0[AR6-ospf-1-area-0.0.0.0]network100.1.56.60.0.0.04.3 AS 500 内部 OSPF 配置AR8 / AR9 / AR10AR8 OSPF 配置[AR8]ospf1router-id8.8.8.8[AR8-ospf-1]area0[AR8-ospf-1-area-0.0.0.0]network8.8.8.80.0.0.0[AR8-ospf-1-area-0.0.0.0]network100.1.107.80.0.0.0AR9 OSPF 配置[AR9]ospf1router-id9.9.9.9[AR9-ospf-1]area0[AR9-ospf-1-area-0.0.0.0]network9.9.9.90.0.0.0[AR9-ospf-1-area-0.0.0.0]network100.1.109.90.0.0.0AR10 OSPF 配置[AR10]ospf1router-id10.10.10.10[AR10-ospf-1]area0[AR10-ospf-1-area-0.0.0.0]network10.10.10.100.0.0.0[AR10-ospf-1-area-0.0.0.0]network100.1.107.100.0.0.0[AR10-ospf-1-area-0.0.0.0]network100.1.109.100.0.0.0**验证命令**在各AS内路由器上执行 display ip routing-table protocol ospf确认已学到所有LoopBack0路由确保IBGP建邻可达。五、第三步配置BGP基本部分5.1 AS 100 — AR1 BGP 配置[AR1]bgp100[AR1-bgp]router-id1.1.1.1[AR1-bgp]peer100.1.12.2 as-number200[AR1-bgp]peer100.1.13.3 as-number2005.2 AS 200 — AR2 BGP 配置[AR2]bgp200[AR2-bgp]router-id2.2.2.2[AR2-bgp]peer100.1.12.1 as-number100[AR2-bgp]peer100.1.47.7 as-number400[AR2-bgp]peer4.4.4.4 as-number200[AR2-bgp]peer4.4.4.4 connect-interface LoopBack0[AR2-bgp]peer4.4.4.4 next-hop-local5.3 AS 200 — AR3 BGP 配置[AR3]bgp200[AR3-bgp]router-id3.3.3.3[AR3-bgp]peer100.1.13.1 as-number100[AR3-bgp]peer4.4.4.4 as-number200[AR3-bgp]peer4.4.4.4 connect-interface LoopBack0[AR3-bgp]peer4.4.4.4 next-hop-local**AS 200 故障模拟**AR2 与 AR3 之间不建立 IBGP 邻居模拟路由传递故障。两台设备仅分别与 AR4 建立 IBGP。5.4 AS 200 — AR4 BGP 配置[AR4]bgp200[AR4-bgp]router-id4.4.4.4[AR4-bgp]peer2.2.2.2 as-number200[AR4-bgp]peer2.2.2.2 connect-interface LoopBack0[AR4-bgp]peer3.3.3.3 as-number200[AR4-bgp]peer3.3.3.3 connect-interface LoopBack0[AR4-bgp]peer100.1.45.5 as-number3005.5 AS 300 — AR5 BGP 配置[AR5]bgp300[AR5-bgp]router-id5.5.5.5[AR5-bgp]peer100.1.45.4 as-number200[AR5-bgp]peer100.1.67.7 as-number400[AR5-bgp]peer6.6.6.6 as-number300[AR5-bgp]peer6.6.6.6 connect-interface LoopBack0[AR5-bgp]peer6.6.6.6 next-hop-local5.6 AS 300 — AR6 BGP 配置[AR6]bgp300[AR6-bgp]router-id6.6.6.6[AR6-bgp]peer100.1.36.7 as-number400[AR6-bgp]peer100.1.69.9 as-number500[AR6-bgp]peer5.5.5.5 as-number300[AR6-bgp]peer5.5.5.5 connect-interface LoopBack0[AR6-bgp]peer5.5.5.5 next-hop-local5.7 AS 400 — AR7 BGP 配置[AR7]bgp400[AR7-bgp]router-id7.7.7.7[AR7-bgp]peer100.1.47.2 as-number200[AR7-bgp]peer100.1.67.5 as-number300[AR7-bgp]peer100.1.36.6 as-number300[AR7-bgp]peer100.1.78.8 as-number5005.8 AS 500 — AR8 BGP 配置[AR8]bgp500[AR8-bgp]router-id8.8.8.8[AR8-bgp]peer100.1.78.7 as-number400[AR8-bgp]peer10.10.10.10 as-number500[AR8-bgp]peer10.10.10.10 connect-interface LoopBack0[AR8-bgp]peer10.10.10.10 next-hop-local[AR8-bgp]peer9.9.9.9 as-number500[AR8-bgp]peer9.9.9.9 connect-interface LoopBack0[AR8-bgp]peer9.9.9.9 next-hop-local5.9 AS 500 — AR9 BGP 配置[AR9]bgp500[AR9-bgp]router-id9.9.9.9[AR9-bgp]peer100.1.69.6 as-number300[AR9-bgp]peer10.10.10.10 as-number500[AR9-bgp]peer10.10.10.10 connect-interface LoopBack0[AR9-bgp]peer10.10.10.10 next-hop-local[AR9-bgp]peer8.8.8.8 as-number500[AR9-bgp]peer8.8.8.8 connect-interface LoopBack0[AR9-bgp]peer8.8.8.8 next-hop-local5.10 AS 500 — AR10 BGP 配置[AR10]bgp500[AR10-bgp]router-id10.10.10.10[AR10-bgp]peer8.8.8.8 as-number500[AR10-bgp]peer8.8.8.8 connect-interface LoopBack0[AR10-bgp]peer9.9.9.9 as-number500[AR10-bgp]peer9.9.9.9 connect-interface LoopBack0**验证命令**display bgp peer — 检查所有BGP邻居状态全为 Established。六、第四步宣告用户网段进BGP仅宣告 LoopBack1 模拟用户网段192.168.X.0/24LoopBack0 不宣告进BGP。6.1 AR1 宣告[AR1]bgp100[AR1-bgp]network192.168.1.0246.2 AR2 宣告[AR2]bgp200[AR2-bgp]network192.168.2.0246.3 AR3 宣告[AR3]bgp200[AR3-bgp]network192.168.3.0246.4 AR4 宣告[AR4]bgp200[AR4-bgp]network192.168.4.0246.5 AR5 宣告[AR5]bgp300[AR5-bgp]network192.168.5.0246.6 AR6 宣告[AR6]bgp300[AR6-bgp]network192.168.6.0246.7 AR7 宣告[AR7]bgp400[AR7-bgp]network192.168.7.0246.8 AR8 宣告[AR8]bgp500[AR8-bgp]network192.168.8.0246.9 AR9 宣告[AR9]bgp500[AR9-bgp]network192.168.9.0246.10 AR10 宣告[AR10]bgp500[AR10-bgp]network192.168.10.024七、第五步全网连通性验证7.1 查看BGP路由表display bgp routing-table确认各路由器是否学习到全部10条用户网段路由192.168.1.0/24 ~ 192.168.10.0/24。7.2 Ping 测试端到端连通性在AR1上测试到AR10用户网段[AR1]ping-a192.168.1.1192.168.10.1在AR7上测试到AR1用户网段[AR7]ping-a192.168.7.1192.168.1.1在AR10上测试到AR4用户网段[AR10]ping-a192.168.10.1192.168.4.1八、BGP邻居关系汇总表8.1 EBGP 邻居关系本端本端AS对端地址对端对端ASAR1100100.1.12.2AR2200AR1100100.1.13.3AR3200AR2200100.1.47.7AR7400AR4200100.1.45.5AR5300AR5300100.1.67.7AR7400AR6300100.1.36.7AR7400AR6300100.1.69.9AR9500AR7400100.1.78.8AR85008.2 IBGP 邻居关系AS本端对端LoopBack0说明AS 200AR24.4.4.4 (AR4)AR2与AR3不建IBGP模拟故障AS 200AR34.4.4.4 (AR4)AR4作为路由反射点AS 200AR42.2.2.2 / 3.3.3.3分别与AR2、AR3建立IBGPAS 300AR56.6.6.6 (AR6)全互联AS 300AR65.5.5.5 (AR5)全互联AS 500AR89.9.9.9 / 10.10.10.10全互联AS 500AR98.8.8.8 / 10.10.10.10全互联AS 500AR108.8.8.8 / 9.9.9.9全互联