一、实验需求1.AS1中存在两个环回一个地址为192.168.1.0/24该地址不能在任何协议中宣告AS3中存在两个环回一个地址为192.168.2.0/24该地址不能在任何协议中宣告最终要求这两个环回可以ping通2.整个AS2的IP地址为172.16.0.0/16请合理规划并且其内部配置OSPF协议3.R1-R8的建邻环回用x.x.x.x/32表示R3-R7上再划分一个业务网段4.AS间的骨干链路IP地址随意定制5.使用BGP协议让整个网络所有设备的环回可以互相访问6.减少路由条目数量避免环路出现二.实验步骤1.地址划分R1环回L0:1.1.1.1/32L1:192.168.1.0/24R2环回L1:2.2.2.2/32R3环回L0:3.3.3.3/32L1172.16.3.0/24R4环回L04.4.4.4/32L1172.16.4.0/24R5环回L0:5.5.5.5/32L1172.16.5.0/24R6环回L0:6.6.6.6/32L1:172.16.6.0/24R7环回L0:7.7.7.7/32L1172.16.7.0/24R8环回L08.8.8.8/32L1192.168.2.0/242.配置IP地址r1[R1]INT G 0/0/0[R1-GigabitEthernet0/0/0]ip add 12.1.1.1 24[R1-GigabitEthernet0/0/0]int l0[R1-LoopBack0]ip add 1.1.1.1 32[R1-LoopBack0]int l1[R1-LoopBack1]ip add 192.168.1.1 24r2[R2]int g 0/0/0[R2-GigabitEthernet0/0/0]ip add 12.1.1.2 24[R2-GigabitEthernet0/0/0]int g 0/0/1[R2-GigabitEthernet0/0/1]ip add 172.16.1.1 30[R2-GigabitEthernet0/0/1]int g 0/0/2[R2-GigabitEthernet0/0/2]ip add 172.16.1.21 30[R2-GigabitEthernet0/0/2]int l0[R2-LoopBack0]ip add 2.2.2.2 32r3[R3]int g 0/0/0[R3-GigabitEthernet0/0/0]ip add 172.16.1.2 30[R3-GigabitEthernet0/0/0]int g 0/0/1[R3-GigabitEthernet0/0/1]ip add 172.16.1.5 30[R3-GigabitEthernet0/0/1]int l0[R3-LoopBack0]ip add 3.3.3.3 32[R3-LoopBack0]int l1[R3-LoopBack1]ip add 172.16.3.3 24r4[R4]int g 0/0/0[R4-GigabitEthernet0/0/0]ip add 172.16.1.6 30[R4-GigabitEthernet0/0/0]int g 0/0/1[R4-GigabitEthernet0/0/1]ip add 172.16.1.9 30[R4-GigabitEthernet0/0/1]int l0[R4-LoopBack0]ip add 4.4.4.4 32[R4-LoopBack0]int l1[R4-LoopBack1]ip add 172.16.4.4 24r5[R5]int g 0/0/0[R5-GigabitEthernet0/0/0]ip add 172.16.1.22 30R5-GigabitEthernet0/0/0]int g 0/0/1[R5-GigabitEthernet0/0/1]ip add 172.16.1.17 30[R5-GigabitEthernet0/0/1]int L0[R5-LoopBack0]ip add 5.5.5.5 32[R5-LoopBack0]int L1[R5-LoopBack1]ip add 172.16.5.5 24r6[R6]int g 0/0/0[R6-GigabitEthernet0/0/0]ip add 172.16.1.18 30[R6-GigabitEthernet0/0/0]int G 0/0/1[R6-GigabitEthernet0/0/1]ip add 172.16.1.13 30[R6-GigabitEthernet0/0/1]int l0[R6-LoopBack0]ip add 6.6.6.6 32[R6-LoopBack0]int l1[R6-LoopBack1]ip add 172.16.6.6 24r7[R7]int g 0/0/0[R7-GigabitEthernet0/0/0]ip add 172.16.1.14 30[R7-GigabitEthernet0/0/0]int g 0/0/1[R7-GigabitEthernet0/0/1]ip add 172.16.1.10 30[R7-GigabitEthernet0/0/1]int g 0/0/2[R7-GigabitEthernet0/0/2]ip add 34.1.1.7 24[R7-GigabitEthernet0/0/2]int L0[R7-LoopBack0]ip add 7.7.7.7 32[R7-LoopBack0]int l1[R7-LoopBack1]ip add 172.16.7.7 24r8[R8]int g 0/0/0[R8-GigabitEthernet0/0/0]ip add 34.1.1.8 24[R8-GigabitEthernet0/0/0]int l0[R8-LoopBack0]ip add 8.8.8.8 32[R8-LoopBack0]int l1[R8-LoopBack1]ip add 192.168.2.8 243.ospf协议联通R2[R2]ospf 1 router-id 2.2.2.2[R2-ospf-1]a 0[R2-ospf-1-area-0.0.0.0]net 172.16.1.1 0.0.0.0[R2-ospf-1-area-0.0.0.0]net 172.16.1.21 0.0.0.0[R2-ospf-1-area-0.0.0.0]net 2.2.2.2 0.0.0.0R3[R3]ospf 1 router-id 3.3.3.3[R3-ospf-1]a 0[R3-ospf-1-area-0.0.0.0]net 172.16.1.2 0.0.0.0[R3-ospf-1-area-0.0.0.0]net 172.16.1.5 0.0.0.0[R3-ospf-1-area-0.0.0.0]net 3.3.3.3 0.0.0.0[R3-ospf-1-area-0.0.0.0]net 172.16.3.0 0.0.0.255R4[R4]OSPF 1 router-id 4.4.4.4[R4-ospf-1]A 0[R4-ospf-1-area-0.0.0.0]net 172.16.1.6 0.0.0.0[R4-ospf-1-area-0.0.0.0]net 172.16.1.9 0.0.0.0[R4-ospf-1-area-0.0.0.0]net 4.4.4.4 0.0.0.0[R4-ospf-1-area-0.0.0.0]net 172.16.4.0 0.0.0.255R5[R5]ospf 1 router-id 5.5.5.5[R5-ospf-1]a 0[R5-ospf-1-area-0.0.0.0]net 172.16.1.22 0.0.0.0[R5-ospf-1-area-0.0.0.0]net 172.16.1.17 0.0.0.0[R5-ospf-1-area-0.0.0.0]net 5.5.5.5 0.0.0.0[R5-ospf-1-area-0.0.0.0]net 172.16.5.0 0.0.0.255R6[R6]OSPF 1 router-id 6.6.6.6[R6-ospf-1]a 0[R6-ospf-1-area-0.0.0.0]net 6.6.6.6 0.0.0.0[R6-ospf-1-area-0.0.0.0]net 172.16.1.18 0.0.0.0[R6-ospf-1-area-0.0.0.0]net 172.16.1.13 0.0.0.0[R6-ospf-1-area-0.0.0.0]net 172.16.6.0 0.0.0.255R7[R7]OSPF 1 router-id 7.7.7.7[R7-ospf-1]a 0[R7-ospf-1-area-0.0.0.0]net 172.16.1.14 0.0.0.0[R7-ospf-1-area-0.0.0.0]net 172.16.1.10 0.0.0.0[R7-ospf-1-area-0.0.0.0]net 7.7.7.7 0.0.0.0[R7-ospf-1-area-0.0.0.0]net 172.16.7.0 0.0.0.2554.BGP协议R2[R2]bgp 64512[R2-bgp]confederation id 2[R2-bgp]confederation peer-as 64513[R2-bgp]peer 12.1.1.1 as 1[R2-bgp]peer 3.3.3.3 as 64512[R2-bgp]peer 3.3.3.3 connect-interface l0[R2-bgp]peer 3.3.3.3 next-hop-local[R2-bgp]peer 172.16.1.22 as 64513[R2-bgp]peer 172.16.1.22 next-hop-localR3[R3]BGP 64512[R3-bgp]confederation id 2[R3-bgp]confederation peer-as 64513[R3-bgp]peer 2.2.2.2 as 64512[R3-bgp]peer 2.2.2.2 connect-interface l0[R3-bgp]peer 4.4.4.4 as 64512[R3-bgp]peer 4.4.4.4 connect-interface l0[R3-bgp]peer 2.2.2.2 reflect-client[R3-bgp]peer 4.4.4.4 reflect-clientR4[R4]bgp 64512[R4-bgp]confederation id 2[R4-bgp]confederation peer-as 64513[R4-bgp]peer 3.3.3.3 as 64512[R4-bgp]peer 3.3.3.3 connect-interface l0R5[R5]bgp 64513[R5-bgp]confederation id 2[R5-bgp]confederation peer-as 64512[R5-bgp]peer 172.16.1.21 as 64512[R5-bgp]peer 172.16.1.21 next-hop-local[R5-bgp]peer 6.6.6.6 as 64513[R5-bgp]peer 6.6.6.6 connect-interface l0[R5-bgp]peer 6.6.6.6 next-hop-localR6[R6]bgp 64513[R6-bgp]confederation id 2[R6-bgp]confederation peer-as 64512[R6-bgp]peer 5.5.5.5 as 64513[R6-bgp]peer 5.5.5.5 connect-interface l0[R6-bgp]peer 7.7.7.7 as 64513[R6-bgp]peer 7.7.7.7 connect-interface l0[R6-bgp]peer 5.5.5.5 reflect-client[R6-bgp]peer 7.7.7.7 reflect-clientR7[R7]BGP 64513[R7-bgp]confederation ID 2[R7-bgp]peer 6.6.6.6 AS 64513[R7-bgp]peer 6.6.6.6 connect-interface L0[R7-bgp]peer 6.6.6.6 next-hop-local[R7-bgp]peer 34.1.1.8 as 3R8[R8]BGP 3[R8-bgp]peer 34.1.1.7 as 2宣告网段[R3]bgp 64512[R3-bgp]net 172.16.3.0 24[R4]bgp 64512[R4-bgp]net 172.16.4.0 24[R5]bgp 64513[R5-bgp]net 172.16.5.0 24[R6]bgp 64513[R6-bgp]net 172.16.6.0 24[R7]bgp 64513[R7-bgp]net 172.16.7.0 24[R1]bgp 1[R1-bgp]net 1.1.1.1 32[R8]bgp 3[R8-bgp]net 8.8.8.8 325.bgp聚合[R2]bgp 64512[R2-bgp]aggregate 172.16.0.0 21 detail-suppressed as-set[R7]bgp 64513[R7-bgp]aggregate 172.16.0.0 21 detail-suppressed as-set[R2]route-policy aa permit node 10Info: New Sequence of this List.[R2-route-policy]apply ip-address next-hop 7.7.7.7[R2]bgp 64512[R2-bgp]aggregate 172.16.0.0 255.255.248.0 as-set detail-suppressed attribute-policy aa[R2]route-policy aa permit node 206.路由引入R1[R1]acl 2000[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255[R1]route-policy aa permit node 10Info: New Sequence of this List.[R1-route-policy]if-match acl 2000[R1-bgp]import-route direct route-policy aaR8[R8]acl 2000[R8-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255[R8]route-policy BB permit node 10Info: New Sequence of this List.[R8-route-policy]if-match ACL 2000[R8-bgp]import-route direct route-policy bb