大规模路由实验（H3C）

目录

目录

目录

实验需求

实验配置

配置 IP 地址（略）

总公司和分公司 OSPF 配置

办事处 RIPv2 配置

调整链路 Cost 避免等价路由

BGP 配置与互通

AS_PATH 修改实现流量负载均衡

RIP 和 BGP 双向引入

协议报文优化

总公司只能对分公司发布属于本 AS 的路由

实验结果

OSPF 邻居关系

BGP 邻居关系

无RIP协议报文

A流走R2/4，B流走R3/5

总结

---

实验需求

本实验模拟某企业的网络架构，其中总公司和分公司运行 BGP 进行互联，同时办事处运行 RIPv2。目标是实现各个分支的高效路由，同时确保不同流量的分流。

实验配置

拓扑图

配置 IP 地址（略）

• 按照拓扑图配置 IP 地址。

• 除 R7 外，所有路由器配置 Loopback0 口 IP 作为 OSPF Router-ID 和 IBGP 邻居。

总公司和分公司 OSPF 配置

[05-R1-ospf-1]are 0
[05-R1-ospf-1-area-0.0.0.0]net 1.1.1.1 0.0.0.0
[05-R1-ospf-1-area-0.0.0.0]net 10.0.0.0 0.0.0.3
[05-R1-ospf-1-area-0.0.0.0]net 10.0.0.4 0.0.0.3

[05-R2-ospf-1-area-0.0.0.0]dis this
#
 area 0.0.0.0
  network 2.2.2.2 0.0.0.0
  network 10.0.0.0 0.0.0.3
  network 10.0.0.8 0.0.0.3
#
return

[05-R3]ospf 1 rou 3.3.3.3
[05-R3-ospf-1]are 0
[05-R3-ospf-1-area-0.0.0.0]net 3.3.3.3 0.0.0.0 
[05-R3-ospf-1-area-0.0.0.0]net 10.0.0.8 0.0.0.3
[05-R3-ospf-1-area-0.0.0.0]net 10.0.0.4 0.0.0.3




[05-R4]ospf 1 rou 4.4.4.4 
[05-R4-ospf-1]ar 0
[05-R4-ospf-1-area-0.0.0.0]net 10.0.0.20 0.0.0.3
[05-R4-ospf-1-area-0.0.0.0]net 10.0.0.24 0.0.0.3
[05-R4-ospf-1-area-0.0.0.0]net 4.4.4.4 0.0.0.0




[05-R5]ospf 1 rou 5.5.5.5
[05-R5-ospf-1]are 0
[05-R5-ospf-1-area-0.0.0.0]net 5.5.5.5 0.0.0.0
[05-R5-ospf-1-area-0.0.0.0]net 10.0.0.20 0.0.0.3
[05-R5-ospf-1-area-0.0.0.0]net 10.0.0.28 0.0.0.3





[05-R6-ospf-1]ospf 1 rou 6.6.6.6
[05-R6-ospf-1]ar 0
[05-R6-ospf-1-area-0.0.0.0]net 6.6.6.6 0.0.0.0
[05-R6-ospf-1-area-0.0.0.0]net 10.0.0.24 0.0.0.3
[05-R6-ospf-1-area-0.0.0.0]net 10.0.0.28 0.0.0.3

办事处 RIPv2 配置

[05-R2-rip-1]rip 1
[05-R2-rip-1]undo summary
[05-R2-rip-1]version 2
[05-R2-rip-1]network 10.0.0.0
[05-R2-rip-1]network 192.168.0.0

[05-R7-rip-1]rip 1
[05-R7-rip-1]undo summary
[05-R7-rip-1]version 2
[05-R7-rip-1]network 10.0.0.0

调整链路 Cost 避免等价路由

[ R1]int g0/1
[ 05-R1-GigabitEthernet0/1]ospf cost 66    
 
[ R3]int g0/1
[ 05-R3-GigabitEthernet0/1]ospf cost 66
 
[ R4]int g0/0
[ r4-GigabitEthernet0/0]ospf cost 66
 
[ R6]int g0/1
[ 05-R6-GigabitEthernet0/1]ospf cost 66

BGP 配置与互通

• [05-R1-bgp-default]dis
  tnis
  #
  bgp 65001
  grouprin internal
  peer in connect-interfaceLoopBacko
  peer 2.2.2.2 group in
  peer 3.3.3.3 group in
  #
  address-family ipv4 unicast
  peer in enable
  peer in next-hop-local
  #
  
  
  
  [05-R2-bgp-default]dis this
  #
  bgp 65001
  G0/0:10.0.0.6/30
  比
  group in internal
  peer_in connect-interface_L.oopBack0
  peer'1.1.1.1 group in
  peer3.3.3.3-group in
  peer 10.0.0.14 as-number 65002
  #
  address-family ipv4 unicast
  peer in enable
  peer in next-hop-local
  peer 10.0.0.14 enable
  #
  
  
  
  [05-R3-bgp-default]dis th
  bgp 65001
  group inbinternal
  peer in connect-interface LoopBackO
  peer 1.1.1.1 group in
  peer 2.2.2.2 group in
  peer110.0.0.18 as-number 65002
  #
  address-family ipv4 unicast
   peer in enable
   peerin next-hop-local
   peer 10.0.0.18 enable
  #
  return
  
  
  [05-R4-bgp-default]dis this3:
  #
  bgp 65002
   group_in internal
   peer in connect-interface LoopBacko
   peer 5.5.5.5 group in
   peer 6.6.6.6 group in
   peer 10.0.0.13 as-number 65001
  #
   address-family ipv4 unicast
    peer in enable
    peer in next-hop-local
    peer 10.0.0.13 enable
  #
  
  
  
  
  [05-R5-bgp-default]dis this
  bgp 65002
   group in internal
    peer in connect-interface LoopBacko
    peer 4.4.4.4,group in
    peer 6.6.6.6 group in
    peer 0.0.0.17 as-number 65001
  #
  address-family ipv4 unicast
   peer in enable
   peer in next-hop-local
   peer 10.0.0.17 enable
  
  
  
  
  [05-R6-bgp-default]dis this
  #
  bgp 65002
   group in internal
   peer in connect-interface LoopBack0
   peer 4.4.4.4 group in
   peer 5.5.5.5 group in
  
   address-family ipv4 unicast
   peer in enabie
   peer in next-hop-local
  
  
  
  
  

[05-R6-bgp-default-ipv4]net 192.168.1.0 24
[05-R6-bgp-default-ipv4]net 172.16.1.0 24


[05-R1-bgp-default-ipv4]net 192.168.1.0 24
[05-R1-bgp-default-ipv4]net 172.16.1.0 24

AS_PATH 修改实现流量负载均衡

[05-R3]acl basic 2000
[05-R3-acl-ipv4-basic-2000]rule permit source 192.168.0.0 0.0.0.255
[05-R3-aci-ipv4-basic-2000]route-p as per no 10
[05-R3-route-policy-as-10]if ip address acl 2000
[05-R3-route-policy-as-10]apply as-path 65001 65002
[05-R3-route-policy-as-10]route-p as pe no 20
[05-R3]bgp 65001
[05-R3-bgp-default]ad ipv4
[05-R3-bgp-default-ipv4]peer 10.0.0.18 route-policy as export


[05-R4]acl ba 2000
[05-R4-acl-ipv4-basic-2000]rule permit source 172.16.1.0 0.0.0.255
[05-R4-acl-ipv4-basic-2000]route- as pe no 10
[05-R4-route-policy-as-10]if ip ad acl 2000
[05-R4-route-policy-as-10]ap as 65002 65002
[05-R4-route-policy-as-10]route-p as per no 20
[05-R4-route-policy-as-20]bgp 65002
[05-R4-bgp-default]ad ipv4
[05-R4-bgp-default-ipv4]pe 10.0.0.13 route-p as ex



[05-R5]acl ba 2000
[05-R5-acl-ipv4-basic-2000]rule pe sou 192.168.0.0 0.0.0.255    
[05-R5-acl-ipv4-basic-2000]route-p as pe no 10 
[05-R5-route-policy-as-10]if ip ad acl 2000
[05-R5-route-policy-as-10]apply as 65002 65002
[05-R5-route-policy-as-10]route-p as pe no 20
[05-R5]bgp 65002
[05-R5-bgp-default]ad ipv4
[05-R5-bgp-default-ipv4]pe 10.0.0.17 route-p as ex



[05-R2]acl bas
[05-R2]acl basic 2000
[05-R2-acl-ipv4-basic-2000]ru pe sou 172.16.1.0 0.0.0.255
[05-R2-acl-ipv4-basic-2000]route-p as pe node 10
Routing policy node created.
[05-R2-route-policy-as-10]if ip ad acl 2000
[05-R2-route-policy-as-10]ap as 65001 65001
[05-R2-route-policy-as-10]route-p as pe no 20
Routing policy node created.
[05-R2-route-policy-as-20]bgp 65001
[05-R2-bgp-default]ad ipv4
[05-R2-bgp-default-ipv4]pe 10.0.0.14 route-p as ex
[05-R2-bgp-default-ipv4]

RIP 和 BGP 双向引入

[05-R2]acl basic 2001
[05-R2-acl-ipv4-basic-2000]rule permit source 192.168.0.0 0.0.1.255
[05-R2-acl-ipv4-basic-2000]rule permit source 172.16.0.0 0.0.0.255
[05-R2-acl-ipv4-basic]route-p per btr node 10
[05-R2-route-policy-btr-10]if ip ad acl 2001
[05-R2-route-policy-btr-10]rip 1
[05-R2-rip-1]im bgp allow-ibgp route-p btr
[05-R2-rip-1]import-route rip
Cannotredistribute routes from the same RIP process.

协议报文优化

[05-R2-rip-1]si g0/1
[05-R2-rip-l]si g0/0
[05-R2-rip-1]si g0/2

总公司只能对分公司发布属于本 AS 的路由

[05-R2]ip as-ma
[05-R2lip as-pa
[05-R2]bgp 65001
[05-R2-bgp-default]ad ipv4
[05-R2-bgp-default-ipv4]pe 10.0.0.14 as-path-acl 1 export


[05-R3]bgp 65001
[05-R3-bgp-default]ad ipv4
[05-R3-bgp-default-ipv4]pe 10.0.0.18 as-path-acl 1 export

---

实验结果

OSPF 邻居关系

BGP 邻居关系

无RIP协议报文

A流走R2/4，B流走R3/5

---

总结

本实验通过 OSPF、BGP 和 RIPv2 的综合配置，实现了企业网络的互联与优化：

• 利用 OSPF 作为 IGP，确保 BGP TCP 可达性。

• 通过 AS_PATH 修改实现流量负载均衡，优化流量路径。

• 使用 ACL 和 Route-policy 进行路由控制，确保安全性。

• 避免等价路由，优化 RIP 和 BGP 互通策略。

未来可以通过引入 BGP 社区属性和 MED 值进行更细粒度的流量控制，并进一步优化 QoS 策略，以适应更复杂的企业网络环境。