H3C BGP路由策略之选路

  • 格式:doc
  • 大小:82.50 KB
  • 文档页数:12

1 修改AS列表的属性只能在EBGP的出方向上增加这个属性并且只能添加在AS-PATH列表的前面。

同时证实在EBGP的进入方向无法添加AS号码。

2 关于缺省路由,在BGP中缺省路由最好是通过一条IGP比如静态的缺省路由,然后network 0.0.0.0 0.0.0.0则可以得到通告。

也可以在BGP下使用1 default-route imported,2 import-route static。

3 BGP的network只能通告非BGP的路由,比如R1---R2---R3,R1上某路由在R2上的BGP路由再次network则不可以生效。

AR18配置[AR18]dis curNow create configuration...Current configuration!version 1.74sysname AR18firewall enableaaa-enableaaa accounting-scheme optional!acl 2000 match-order autorule normal permit source 20.20.30.0 0.0.0.255rule normal deny source any!interface Aux0async mode flowflow-control nonelink-protocol ppp!interface Ethernet0!interface Serial0link-protocol pppip address 1.1.1.10 255.255.255.252! interface Serial1clock DTECLK1link-protocol pppip address 1.1.1.14 255.255.255.252!interface LoopBack1ip address 20.20.10.254 255.255.255.0 !interface LoopBack2ip address 20.20.20.254 255.255.255.0 !interface LoopBack3ip address 20.20.30.254 255.255.255.0 !quitbgp 200undo synchronizationimport-route direct route-policy lv peer 1.1.1.9 as-number 200peer 1.1.1.13 as-number 200!quit!quitroute-policy lv permit 1if-match ip address 2000 !returnAR46配置#sysname AR46#cpu-usage cycle 1min#radius scheme system#domain system#local-user adminpassword cipher .]@USE=B,53Q=^Q`MAF4<1!! service-type telnet terminallevel 3service-type ftp#interface Aux0async mode flow#interface GigabitEthernet0/0/0ip address 1.1.1.1 255.255.255.252#interface GigabitEthernet0/0/1ip address 1.1.1.5 255.255.255.252#interface GigabitEthernet0/0/2 ip address dhcp-alloc#interface NULL0#interface LoopBack1ip address 10.10.10.254 255.255.255.0#interface LoopBack2ip address 10.10.20.254 255.255.255.0#interface LoopBack3ip address 10.10.30.254 255.255.255.0#bgp 100import-route direct route-policy lvundo synchronizationgroup to200 externalpeer 1.1.1.2 group to200 as-number 200peer 1.1.1.6 group to200 as-number 200#route-policy lv permit node 1if-match ip-prefix lv#FTP server enable#ip ip-prefix lv index 10 permit 10.10.10.0 24 #user-interface con 0user-interface aux 0user-interface vty 0 4authentication-mode scheme#return<AR46>AR2811配置#sysname AR2811#cpu-usage cycle 1min#radius scheme system#domain system#local-user adminpassword cipher .]@USE=B,53Q=^Q`MAF4<1!! service-type telnet terminallevel 3service-type ftp#acl number 2000rule 0 permit source 10.10.10.0 0.0.0.255 #interface Aux0async mode flow#interface Ethernet0/0ip address 1.1.1.2 255.255.255.252#interface Ethernet0/1 ip address dhcp-alloc#interface Serial0/0clock DTECLK1link-protocol pppip address 1.1.1.9 255.255.255.252#interface NULL0#bgp 200undo synchronizationgroup to100 externalpeer 1.1.1.1 group to100 as-number 100group ibgp internalpeer ibgp next-hop-localpeer ibgp route-policy lv exportpeer 1.1.1.10 group ibgp#route-policy lv permit node 1if-match acl 2000apply local-preference 50#FTP server enable# user-interface con 0user-interface aux 0user-interface vty 0 4authentication-mode scheme#returnAR2812配置#sysname AR2812#cpu-usage cycle 1min#radius scheme system#domain system#local-user adminpassword cipher .]@USE=B,53Q=^Q`MAF4<1!! service-type telnet terminallevel 3service-type ftp#acl number 2000rule 0 permit source 20.20.30.0 0.0.0.255 #interface Aux0async mode flow#interface Ethernet0/0ip address 1.1.1.6 255.255.255.252#interface Ethernet0/1ip address dhcp-alloc#interface Serial0/0link-protocol pppip address 1.1.1.13 255.255.255.252#interface NULL0#bgp 200undo synchronizationgroup to100 externalpeer to100 route-policy lv exportpeer 1.1.1.5 group to100 as-number 100 group ibgp internalpeer ibgp next-hop-localpeer 1.1.1.14 group ibgp#route-policy lv permit node 1if-match acl 2000apply cost 100#FTP server enable#user-interface con 0 user-interface aux 0user-interface vty 0 4authentication-mode scheme#return。