5.15晚作业-优快云博客

AR1（AS 123）

# 基础配置
sysname AR1
interface GigabitEthernet0/0/0
ip address 192.168.100.1 255.255.255.0

# 用户网段接口配置（假设三个物理接口分别连接三个用户网段）
interface GigabitEthernet0/0/1
ip address 192.168.10.1 255.255.255.0
ospf network-type broadcast # 修改为广播类型

interface GigabitEthernet0/0/2
ip address 192.168.11.1 255.255.255.0
ospf network-type broadcast

# 使用子接口配置第三个用户网段（若物理接口不足）
interface GigabitEthernet0/0/1.12
dot1q termination vid 12
ip address 192.168.12.1 255.255.255.0
arp broadcast enable
ospf network-type broadcast

# OSPF配置（假设需要IGP支持）
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.11.0 0.0.0.255
network 192.168.12.0 0.0.0.255

# BGP配置
bgp 123
router-id 1.1.1.1
# 宣告用户网段（/24掩码）
network 192.168.10.0 255.255.255.0
network 192.168.11.0 255.255.255.0
network 192.168.12.0 255.255.255.0

# EBGP邻居（物理接口建邻）
peer 192.168.100.2 as-number 400
peer 192.168.100.3 as-number 500

# IBGP邻居（环回接口建邻）
peer 2.2.2.2 as-number 123
peer 2.2.2.2 connect-interface LoopBack0
peer 3.3.3.3 as-number 123
peer 3.3.3.3 connect-interface LoopBack0

# MED策略（影响R4选路到192.168.12.0/24）
ip ip-prefix 12.0.0.0 index 10 permit 192.168.12.0 24
route-policy MED permit node 10
if-match ip-prefix 12.0.0.0
apply med 50 # 设置较小MED值
bgp 123
peer 192.168.100.3 route-policy MED export

# 负载均衡配置（针对192.168.3.0/24）
bgp 123
maximum load-balancing 2

# Community策略（禁止192.168.3.0/24发布到AS500）
ip ip-prefix 3.0.0.0 index 10 permit 192.168.3.0 24
route-policy COMMUNITY permit node 10
if-match ip-prefix 3.0.0.0
apply community 123:300 additive
bgp 123
peer 192.168.100.3 route-policy COMMUNITY export

AR2（AS 123）

sysname AR2
interface GigabitEthernet0/0/0
ip address 192.168.100.2 255.255.255.0

interface LoopBack0
ip address 2.2.2.2 255.255.255.255

# OSPF配置（与AR1互通）
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 192.168.100.0 0.0.0.255

# BGP配置
bgp 123
router-id 2.2.2.2
# EBGP邻居
peer 192.168.100.1 as-number 400
# IBGP邻居
peer 1.1.1.1 as-number 123
peer 1.1.1.1 connect-interface LoopBack0
peer 3.3.3.3 as-number 123
peer 3.3.3.3 connect-interface LoopBack0

# PreVal策略（影响R4选路到192.168.10.0/24）
bgp 123
peer 192.168.1.1 preferred-value 100 # 假设R4的连接IP为192.168.1.1

AR3（AS 123）

sysname AR3
interface GigabitEthernet0/0/0
ip address 192.168.100.3 255.255.255.0

interface LoopBack0
ip address 3.3.3.3 255.255.255.255

# OSPF配置
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 192.168.100.0 0.0.0.255

# BGP配置
bgp 123
router-id 3.3.3.3
# EBGP邻居
peer 192.168.100.1 as-number 500
# IBGP邻居
peer 1.1.1.1 as-number 123
peer 1.1.1.1 connect-interface LoopBack0
peer 2.2.2.2 as-number 123
peer 2.2.2.2 connect-interface LoopBack0

# AS_Path策略（影响R4选路到192.168.11.0/24）
ip as-path-filter 1 permit ^$
ip ip-prefix 11.0.0.0 index 10 permit 192.168.11.0 24
route-policy AS_PATH permit node 10
if-match ip-prefix 11.0.0.0
apply as-path 500 additive # 添加AS500到路径
bgp 123
peer 192.168.100.1 route-policy AS_PATH export

AR4（AS 400）

sysname AR4
interface GigabitEthernet0/0/0
ip address 192.168.1.1 255.255.255.0
interface GigabitEthernet0/0/1
ip address 192.168.2.1 255.255.255.0
interface GigabitEthernet0/0/2
ip address 192.168.3.1 255.255.255.0

interface LoopBack0
ip address 4.4.4.4 255.255.255.255

# OSPF配置（内部路由）
ospf 1 router-id 4.4.4.4
area 0.0.0.0
network 192.168.1.0 0.0.0.255
network 192.168.2.0 0.0.0.255
network 192.168.3.0 0.0.0.255

# BGP配置
bgp 400
router-id 4.4.4.4
# EBGP邻居
peer 192.168.100.2 as-number 123
peer 192.168.100.3 as-number 123

# 宣告本地网段
network 192.168.1.0 255.255.255.0
network 192.168.2.0 255.255.255.0
network 192.168.3.0 255.255.255.0

AR5（AS 500）

sysname AR5
interface GigabitEthernet0/0/0
ip address 192.168.10.1 255.255.255.0
interface GigabitEthernet0/0/1
ip address 192.168.11.1 255.255.255.0
interface GigabitEthernet0/0/2
ip address 192.168.12.1 255.255.255.0

interface LoopBack0
ip address 5.5.5.5 255.255.255.255

# OSPF配置
ospf 1 router-id 5.5.5.5
area 0.0.0.0
network 192.168.10.0 0.0.0.255
network 192.168.11.0 0.0.0.255
network 192.168.12.0 0.0.0.255

# BGP配置
bgp 500
router-id 5.5.5.5
# EBGP邻居
peer 192.168.100.3 as-number 123

# AS策略（拒绝AS123始发的路由）
ip as-path-filter 2 deny ^123$
bgp 500
peer 192.168.100.3 as-path-filter 2 import

# Community策略（过滤特定Community）
ip community-filter 2 deny 123:300
bgp 500
peer 192.168.100.3 community-filter 2 import