一、实验拓扑

二、实验要求

1、按照图示配置IP地址，R2, R3, R4, R5分别配置Loopback0口地址作为OSPF的Router_id和IBGP邻居地址，地址格式为x.x.x.x/32,x为设备编号。R1上配置Loopback口模拟业务网段
2、AS 200内部配置OSPF，仅用于实现BGP的TCP可达
3、AS 200内部建立BGP联盟，联盟AS为AS 200，包含2个子AS为AS 65001和AS 65002。
R1和R2建立EBGP邻居，R4和R6建立EBGP邻居，R2和R4建立EBGP邻居，子AS内部建立IBGP全连接
4、R1把业务网段宣告进BGP，要求AS 200内部所有路由器都能够学习到该业务网段路由
5、通过配置团体属性，使192.168.0.0/24网段路由只能传递至AS 200

三、实验思路

总体设计

1. OSPF全域互联
2. BGP Confederation
3. EBGP出口
4. 路由注入

四、实验配置

1. 接口IP地址配置

AR1 (AS1)

interface GigabitEthernet0/0/0 ip address 12.1.1.1 255.255.255.0 interface LoopBack0 ip address 1.1.1.1 255.255.255.255 interface LoopBack1 ip address 192.168.1.1 255.255.255.0

R2 (Sub-AS 64512)

interface GigabitEthernet0/0/0 ip address 12.1.1.2 255.255.255.0 interface GigabitEthernet0/0/1 ip address 10.0.23.1 255.255.255.252 interface GigabitEthernet0/0/2 ip address 10.0.25.1 255.255.255.252 interface LoopBack0 ip address 2.2.2.2 255.255.255.255

R3 (Sub-AS 64512)

interface GigabitEthernet0/0/0 ip address 10.0.23.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.34.1 255.255.255.252 interface LoopBack0 ip address 3.3.3.3 255.255.255.255 interface LoopBack1 ip address 172.16.3.1 255.255.255.0

r4 (Sub-AS 64512)

interface GigabitEthernet0/0/0 ip address 10.0.34.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.47.1 255.255.255.252 interface LoopBack0 ip address 4.4.4.4 255.255.255.255

r5 (Sub-AS 64513)

interface GigabitEthernet0/0/0 ip address 10.0.25.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.56.1 255.255.255.252 interface LoopBack0 ip address 5.5.5.5 255.255.255.255

r6 (Sub-AS 64513)

interface GigabitEthernet0/0/0 ip address 10.0.56.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.67.1 255.255.255.252 interface LoopBack0 ip address 6.6.6.6 255.255.255.255

r7 (Sub-AS 64513)

interface GigabitEthernet0/0/0 ip address 10.0.67.2 255.255.255.252 interface GigabitEthernet0/0/1 ip address 10.0.47.2 255.255.255.252 interface GigabitEthernet0/0/2 ip address 34.1.1.1 255.255.255.0 interface LoopBack0 ip address 7.7.7.7 255.255.255.255 interface LoopBack1 ip address 172.16.7.1 255.255.255.0

r8 (AS3)

interface GigabitEthernet0/0/0 ip address 34.1.1.2 255.255.255.0 interface LoopBack0 ip address 8.8.8.8 255.255.255.255 interface LoopBack1 ip address 192.168.2.1 255.255.255.0

2. OSPF配置

AR1 OSPF

ospf 1 router-id 1.1.1.1 area 0.0.0.0 network 1.1.1.1 0.0.0.0 network 12.1.1.1 0.0.0.0

R2 OSPF

ospf 1 router-id 2.2.2.2 area 0.0.0.0 network 2.2.2.2 0.0.0.0 network 10.0.23.1 0.0.0.0 network 10.0.25.1 0.0.0.0

R3 OSPF

ospf 1 router-id 3.3.3.3 area 0.0.0.0 network 3.3.3.3 0.0.0.0 network 10.0.23.2 0.0.0.0 network 10.0.34.1 0.0.0.0 network 172.16.3.1 0.0.0.0

r4 OSPF

ospf 1 router-id 4.4.4.4 area 0.0.0.0 network 4.4.4.4 0.0.0.0 network 10.0.34.2 0.0.0.0 network 10.0.47.1 0.0.0.0

r5 OSPF

ospf 1 router-id 5.5.5.5 area 0.0.0.0 network 5.5.5.5 0.0.0.0 network 10.0.25.2 0.0.0.0 network 10.0.56.1 0.0.0.0

r6 OSPF

ospf 1 router-id 6.6.6.6 area 0.0.0.0 network 6.6.6.6 0.0.0.0 network 10.0.56.2 0.0.0.0 network 10.0.67.1 0.0.0.0

r7 OSPF

ospf 1 router-id 7.7.7.7 area 0.0.0.0 network 7.7.7.7 0.0.0.0 network 10.0.47.2 0.0.0.0 network 10.0.67.2 0.0.0.0 network 172.16.7.1 0.0.0.0

r8 OSPF

ospf 1 router-id 8.8.8.8 area 0.0.0.0 network 8.8.8.8 0.0.0.0 network 34.1.1.2 0.0.0.0

3. BGP Confederation配置

AR1 (AS1)

bgp 1 peer 12.1.1.2 as-number 2 ipv4-family unicast undo synchronization network 1.1.1.1 255.255.255.255 network 192.168.1.0 peer 12.1.1.2 enable

R2 (Sub-AS 64512)

bgp 64512 confederation id 2 confederation peer-as 64513 peer 3.3.3.3 as-number 64512 peer 3.3.3.3 connect-interface LoopBack0 peer 4.4.4.4 as-number 64512 peer 4.4.4.4 connect-interface LoopBack0 peer 10.0.25.2 as-number 64513 peer 12.1.1.1 as-number 1 ipv4-family unicast undo synchronization network 2.2.2.2 255.255.255.255 network 3.3.3.3 255.255.255.255 network 4.4.4.4 255.255.255.255 peer 3.3.3.3 enable peer 3.3.3.3 next-hop-local peer 3.3.3.3 preferred-value 100 peer 4.4.4.4 enable peer 4.4.4.4 next-hop-local peer 4.4.4.4 preferred-value 100 peer 10.0.25.2 enable peer 10.0.25.2 next-hop-local peer 12.1.1.1 enable

R3 (Sub-AS 64512)

bgp 64512 confederation id 2 peer 2.2.2.2 as-number 64512 peer 2.2.2.2 connect-interface LoopBack0 peer 4.4.4.4 as-number 64512 peer 4.4.4.4 connect-interface LoopBack0 ipv4-family unicast undo synchronization network 3.3.3.3 255.255.255.255 network 172.16.3.0 255.255.255.0 peer 2.2.2.2 enable peer 2.2.2.2 next-hop-local peer 4.4.4.4 enable peer 4.4.4.4 next-hop-local

r4 (Sub-AS 64512)

bgp 64512 confederation id 2 confederation peer-as 64513 peer 2.2.2.2 as-number 64512 peer 2.2.2.2 connect-interface LoopBack0 peer 3.3.3.3 as-number 64512 peer 3.3.3.3 connect-interface LoopBack0 peer 10.0.47.2 as-number 64513 ipv4-family unicast undo synchronization network 4.4.4.4 255.255.255.255 peer 2.2.2.2 enable peer 2.2.2.2 next-hop-local peer 3.3.3.3 enable peer 3.3.3.3 next-hop-local peer 10.0.47.2 enable peer 10.0.47.2 next-hop-local

r5 (Sub-AS 64513)

bgp 64513 confederation id 2 confederation peer-as 64512 peer 6.6.6.6 as-number 64513 peer 6.6.6.6 connect-interface LoopBack0 peer 7.7.7.7 as-number 64513 peer 7.7.7.7 connect-interface LoopBack0 peer 10.0.25.1 as-number 64512 ipv4-family unicast undo synchronization network 5.5.5.5 255.255.255.255 peer 6.6.6.6 enable peer 6.6.6.6 next-hop-local peer 7.7.7.7 enable peer 7.7.7.7 next-hop-local peer 10.0.25.1 enable peer 10.0.25.1 next-hop-local

r6 (Sub-AS 64513)

bgp 64513 confederation id 2 peer 5.5.5.5 as-number 64513 peer 5.5.5.5 connect-interface LoopBack0 peer 7.7.7.7 as-number 64513 peer 7.7.7.7 connect-interface LoopBack0 ipv4-family unicast undo synchronization network 6.6.6.6 255.255.255.255 peer 5.5.5.5 enable peer 5.5.5.5 next-hop-local peer 5.5.5.5 preferred-value 100 peer 7.7.7.7 enable peer 7.7.7.7 next-hop-local peer 7.7.7.7 preferred-value 100

r7 (Sub-AS 64513)

bgp 64513 confederation id 2 confederation peer-as 64512 peer 5.5.5.5 as-number 64513 peer 5.5.5.5 connect-interface LoopBack0 peer 6.6.6.6 as-number 64513 peer 6.6.6.6 connect-interface LoopBack0 peer 10.0.47.1 as-number 64512 peer 34.1.1.2 as-number 3 ipv4-family unicast undo synchronization network 5.5.5.5 255.255.255.255 network 6.6.6.6 255.255.255.255 network 7.7.7.7 255.255.255.255 network 172.16.7.0 255.255.255.0 peer 5.5.5.5 enable peer 5.5.5.5 next-hop-local peer 6.6.6.6 enable peer 6.6.6.6 next-hop-local peer 10.0.47.1 enable peer 10.0.47.1 next-hop-local peer 34.1.1.2 enable

r8 (AS3)

bgp 3 peer 34.1.1.1 as-number 2 ipv4-family unicast undo synchronization network 8.8.8.8 255.255.255.255 network 192.168.2.0 peer 34.1.1.1 enable

五、验证汇总

1. BGP路由表验证

AR1 (AS1) BGP路由表

AR1已收到全部12条BGP路由，所有前缀均为valid+best（*>），包含全部8个环回地址及特殊环回。

R2 (Sub-AS 64512) BGP路由表

2. 连通性验证

AR1特殊环回 → r8特殊环回

AR1> ping -a 192.168.1.1 192.168.2.1 Reply from 192.168.2.1: bytes=56 Sequence=1 ttl=251 time=40 ms Reply from 192.168.2.1: bytes=56 Sequence=2 ttl=251 time=50 ms Reply from 192.168.2.1: bytes=56 Sequence=3 ttl=251 time=50 ms Reply from 192.168.2.1: bytes=56 Sequence=4 ttl=251 time=40 ms Reply from 192.168.2.1: bytes=56 Sequence=5 ttl=251 time=40 ms 0.00% packet loss

3. BGP对等体状态验证

所有8台设备的BGP对等体均处于Established状态：