BGP的一个经典试验引发的思考

本TOP为经典BGP的过度AS图



接下来是配置
AR2811-1

[AR2811-1]
[AR2811-1]
[AR2811-1]dis cur
#
sysname AR2811-1
#
cpu-usage cycle 1min
#
radius scheme system
#
domain system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#
interface Aux0
async mode flow
#
interface Ethernet0/0
description to_s3526-1_vlan3
ip address 2.2.2.2 255.255.255.252
#
interface Ethernet0/1
ip address 3.3.3.1 255.255.255.252
---- More ---- [42D [42D#
interface Serial0/0
clock DTECLK1
link-protocol ppp
ip address dhcp-alloc
#
interface NULL0
#
bgp 200
undo synchronization
group to-as100 external
peer to-as100 as-number 100
peer 2.2.2.1 group to-as100
group IBGP internal
peer IBGP next-hop-local
peer 4.4.4.2 group IBGP
peer 3.3.3.2 group IBGP
preference 256 100 130
#
ospf 1
import-route bgp
area 0.0.0.0
network 3.3.3.1 0.0.0.0
#
---- More ---- [42D [42D FTP server enable
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
[AR2811-1]
-------------------------------------------------------------------------------------------------
AR2811-2

[AR2811-2]dis cuir [1D [1D [1D [1Dr
#
sysname AR2811-2
#
cpu-usage cycle 1min
#
radius scheme system
#
domain system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address 5.5.5.2 255.255.255.252
#
interface Ethernet0/1
ip address 4.4.4.2 255.255.255.252
#
---- More ---- [42D [42Dinterface Serial0/0
clock DTECLK1
link-protocol ppp
ip address dhcp-alloc
#
interface NULL0
#
bgp 200
undo synchronization
group IBGP internal
peer IBGP next-hop-local
peer 3.3.3.1 group IBGP
peer 4.4.4.1 group IBGP
group to-as300 external
peer to-as300 as-number 300
peer 5.5.5.1 group to-as300
preference 256 100 100
#
ospf 1
import-route bgp
area 0.0.0.0
network 4.4.4.2 0.0.0.0
#
FTP server enable
---- More ---- [42D [42D#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
[AR2811-2]
--------------------------------------------------------------
AR46

#
sysname AR46
#
cpu-usage cycle 1min
#
radius scheme system
#
domain system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#
interface Aux0
async mode flow
#
interface GigabitEthernet0/0/0
ip address dhcp-alloc
#
interface GigabitEthernet0/0/1
ip address 3.3.3.2 255.255.255.252
#
---- More ---- [42D [42Dinterface GigabitEthernet0/0/2
ip address 4.4.4.1 255.255.255.252
#
interface NULL0
#
ospf 1
area 0.0.0.0
network 0.0.0.0 255.255.255.255
#
FTP server enable
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
<AR46>
-------------------------------
S3526-1

#
sysname S3526-1
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
domain system
radius-scheme system
access-limit disable
state active
idle-cut disable
self-service-url disable
messenger time disable
domain default enable system
#
local-server nas-ip 127.0.0.1 key huawei
#
vlan 1
#
---- More ---- [42D [42Dvlan 2
#
vlan 3
#
interface Vlan-interface2
ip address 1.1.1.2 255.255.255.252
#
interface Vlan-interface3
ip address 2.2.2.1 255.255.255.0
#
interface Aux0/0
#
interface Ethernet0/1
#
interface Ethernet0/2
port access vlan 2
#
interface Ethernet0/3
port access vlan 3
#
interface Ethernet0/4
#
interface Ethernet0/5
---- More ---- [42D [42D#
interface Ethernet0/6
#
interface Ethernet0/7
#
interface Ethernet0/8
#
interface Ethernet0/9
#
interface Ethernet0/10
#
interface Ethernet0/11
#
interface Ethernet0/12
#
interface Ethernet0/13
#
interface Ethernet0/14
#
interface Ethernet0/15
#
interface Ethernet0/16
---- More ---- [42D [42D#
interface Ethernet0/17
#
interface Ethernet0/18
#
interface Ethernet0/19
#
interface Ethernet0/20
#
interface Ethernet0/21
#
interface Ethernet0/22
#
interface Ethernet0/23
#
interface Ethernet0/24
#
interface NULL0
#
interface LoopBack1
ip address 20.20.20.20 255.255.255.0
#
---- More ---- [42D [42Dbgp 100
network 20.20.20.0 255.255.255.0
import-route ospf
undo synchronization
group to-as200
peer 2.2.2.2 as-number 200
peer 2.2.2.2 group to-as200
#
ospf
area 0.0.0.0
network 1.1.1.0 0.0.0.3
network 20.20.20.0 0.0.0.255
#
user-interface aux 0
user-interface vty 0 4
#
return
[S3526-1]
-------------------------------------------------
S3526-2

<S3526-2>
%Oct 25 14:10:15 2007 S3526-2 SHELL/5/LOGIN: Console login from Aux0/0dis cr [1D [1D [1D [1D
^
% Incomplete command found at '^' position.
<S3526-2>
<S3526-2>
<S3526-2>
<S3526-2>dis cur
#
sysname S3526-2
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
domain system
radius-scheme system
access-limit disable
state active
idle-cut disable
self-service-url disable
messenger time disable
domain default enable system
#
local-server nas-ip 127.0.0.1 key huawei
#
vlan 1
#
---- More ---- [42D [42Dvlan 2
#
vlan 3
#
interface Vlan-interface2
ip address 6.6.6.2 255.255.255.252
#
interface Vlan-interface3
ip address 5.5.5.1 255.255.255.252
#
interface Aux0/0
#
interface Ethernet0/1
#
interface Ethernet0/2
port access vlan 2
#
interface Ethernet0/3
port access vlan 3
#
interface Ethernet0/4
#
interface Ethernet0/5
---- More ---- [42D [42D#
interface Ethernet0/6
#
interface Ethernet0/7
#
interface Ethernet0/8
#
interface Ethernet0/9
#
interface Ethernet0/10
#
interface Ethernet0/11
#
interface Ethernet0/12
#
interface Ethernet0/13
#
interface Ethernet0/14
#
interface Ethernet0/15
#
interface Ethernet0/16
---- More ---- [42D [42D#
interface Ethernet0/17
#
interface Ethernet0/18
#
interface Ethernet0/19
#
interface Ethernet0/20
#
interface Ethernet0/21
#
interface Ethernet0/22
#
interface Ethernet0/23
#
interface Ethernet0/24
#
interface NULL0
#
interface LoopBack1
ip address 30.30.30.30 255.255.255.0
#
network 30.30.30.0 255.255.255.0
import-route ospf
undo synchronization
group to-as200
peer 5.5.5.2 as-number 200
peer 5.5.5.2 group to-as200
#
ospf
area 0.0.0.0
network 6.6.6.0 0.0.0.3
network 30.30.30.0 0.0.0.255
#
user-interface aux 0
user-interface vty 0 4
#
return
<S3526-2>
---------------------------------------------------------------
s cur [7C
Now create configuration...
Current configuration
!
version 1.44
firewall enable
sysname R25-1
!
interface Ethernet0
ip address 1.1.1.1 255.255.255.252
ospf enable area 0.0.0.0
!
interface Serial0
link-protocol ppp
!
interface Serial1
link-protocol ppp
!
interface Serial2
flow-control none
async mode protocol
link-protocol ppp
!
interface LoopBack1
------ More (Press CTRL_C to break) ------ [42D [42D
ip address 10.10.10.10 255.255.255.0
ospf enable area 0.0.0.0
!
quit
ospf enable
!
quit
!
quit
ip route-static 0.0.0.0 0.0.0.0 1.1.1.2 preference 60
!
return
[R25-1]
----------------------------------------
R25-2

[R25-2]
[R25-2]dis cur [7C
Now create configuration...
Current configuration
!
version 1.44
firewall enable
sysname R25-2
!
interface Ethernet0
ip address 6.6.6.1 255.255.255.252
ospf enable area 0.0.0.0
!
interface Serial0
link-protocol ppp
!
interface Serial1
link-protocol ppp
!
interface Serial2
flow-control none
async mode protocol
link-protocol ppp
!
interface LoopBack1
------ More (Press CTRL_C to break) ------ [42D [42D
ip address 40.40.40.40 255.255.255.0
ospf enable area 0.0.0.0
!
quit
ospf enable
!
quit
!
quit
ip route-static 0.0.0.0 0.0.0.0 6.6.6.2 preference 60
!
return
[R25-2]