BGP联盟（联邦）

最新推荐文章于 2025-03-10 15:03:23 发布

不过是三年五载

最新推荐文章于 2025-03-10 15:03:23 发布

阅读量2k

点赞数 1

分类专栏：网络安全产品配置文章标签：网络

本文链接：https://blog.youkuaiyun.com/m0_65096687/article/details/127462309

版权

网络安全产品配置专栏收录该内容

8 篇文章

订阅专栏

本文介绍了BGP的水平分割防环机制以及如何通过建立BGP联盟来扩展IBGP路由传播。AR系列路由器的配置展示了BGP联盟的使用，包括子AS的设定、路由反射及联盟内部AS的交互，以确保路由信息的有效传播。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

因为BGP有水平分割机制防环，从任何IBGP邻居学来的路由信息都不再向任何IBGP路由器转发。

所以为了使传给更多的IBGP邻居，就有了BGP联盟，BGP联盟就是在原有的AS内，再创建子AS，那么有了跟多的EBGP，就不会触发BGP的防环机制，路由也会传递下去。

AR1

interface GigabitEthernet0/0/0
 ip address 200.1.14.1 255.255.255.0 
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 11.11.11.11 255.255.255.255 
#
interface LoopBack1
 ip address 1.1.1.1 255.255.255.255 
#
bgp 100
 router-id 1.1.1.1
 peer 4.4.4.4 as-number 200 
 peer 4.4.4.4 ebgp-max-hop 5 
 peer 4.4.4.4 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  network 11.11.11.11 255.255.255.255 
  peer 4.4.4.4 enable
#
ip route-static 0.0.0.0 0.0.0.0 200.1.14.4

AR4

interface GigabitEthernet0/0/0
 ip address 200.1.14.4 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 10.1.42.4 255.255.255.0 
#
interface GigabitEthernet0/0/2
 ip address 10.1.45.4 255.255.255.0 
#
interface NULL0
#
interface LoopBack1
 ip address 4.4.4.4 255.255.255.255 
#
bgp 2002
 confederation id 200
 confederation peer-as 2003 2001
 peer 1.1.1.1 as-number 100 
 peer 1.1.1.1 ebgp-max-hop 5 
 peer 1.1.1.1 connect-interface LoopBack1
 peer 2.2.2.2 as-number 2001 
 peer 2.2.2.2 ebgp-max-hop 5 
 peer 2.2.2.2 connect-interface LoopBack1
 peer 5.5.5.5 as-number 2003 
 peer 5.5.5.5 ebgp-max-hop 5 
 peer 5.5.5.5 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 2.2.2.2 enable
  peer 2.2.2.2 next-hop-local 
  peer 5.5.5.5 enable
  peer 5.5.5.5 next-hop-local 
#
ip route-static 1.1.1.1 255.255.255.255 200.1.14.1
ip route-static 2.2.2.2 255.255.255.255 10.1.42.2
ip route-static 5.5.5.5 255.255.255.255 10.1.45.5

AR2

interface GigabitEthernet0/0/0
 ip address 10.1.42.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 10.1.23.2 255.255.255.0 
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack1
 ip address 2.2.2.2 255.255.255.255 
#
bgp 2001
 router-id 2.2.2.2
 confederation id 200
 confederation peer-as 2002
 peer 3.3.3.3 as-number 2001 
 peer 3.3.3.3 connect-interface LoopBack1
 peer 4.4.4.4 as-number 2002 
 peer 4.4.4.4 ebgp-max-hop 5 
 peer 4.4.4.4 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
#
ospf 1 router-id 2.2.2.2 
 area 0.0.0.0 
  network 2.2.2.2 0.0.0.0 
  network 10.1.23.2 0.0.0.0 
#
ip route-static 4.4.4.4 255.255.255.255 10.1.42.4

AR3

interface GigabitEthernet0/0/0
 ip address 10.1.23.3 255.255.255.0 
#
interface LoopBack1
 ip address 3.3.3.3 255.255.255.255 
#
bgp 2001
 router-id 3.3.3.3
 confederation id 200
 peer 2.2.2.2 as-number 2001 
 peer 2.2.2.2 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 2.2.2.2 enable
#
ospf 1 router-id 3.3.3.3 
 area 0.0.0.0 
  network 3.3.3.3 0.0.0.0 
  network 10.1.23.3 0.0.0.0

AR5

interface GigabitEthernet0/0/0
 ip address 10.1.45.5 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 10.1.56.5 255.255.255.0 
#
interface LoopBack1
 ip address 5.5.5.5 255.255.255.255 
#
bgp 2003
 router-id 5.5.5.5
 confederation id 200
 confederation peer-as 2002
 peer 4.4.4.4 as-number 2002 
 peer 4.4.4.4 ebgp-max-hop 5 
 peer 4.4.4.4 connect-interface LoopBack1
 peer 6.6.6.6 as-number 2003 
 peer 6.6.6.6 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 4.4.4.4 enable
  peer 6.6.6.6 enable
#
ospf 1 router-id 5.5.5.5 
 area 0.0.0.0 
  network 5.5.5.5 0.0.0.0 
  network 10.1.56.5 0.0.0.0 
#
ip route-static 4.4.4.4 255.255.255.255 10.1.45.4

AR6

interface GigabitEthernet0/0/0
 ip address 10.1.56.6 255.255.255.0 
#
interface LoopBack1
 ip address 6.6.6.6 255.255.255.255 
#
bgp 2003
 router-id 6.6.6.6
 confederation id 200
 peer 5.5.5.5 as-number 2003 
 peer 5.5.5.5 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 5.5.5.5 enable
#
ospf 1 router-id 6.6.6.6 
 area 0.0.0.0 
  network 6.6.6.6 0.0.0.0 
  network 10.1.56.6 0.0.0.0

就多了两条配置

confederation id 200 指定反射器的联盟id
confederation peer-as 2002 指定联盟内部其他as

有了子联盟，AS号也应该为子联盟