fdfdfwe 发表于 2015-5-8 09:14:03

思科设备部署运营商架构-ipv6+isis+bgp配置实战

1.            实验拓扑:
使用GNS3(版本0.8.6)+c3725-adventerprisek9-mz.124-15.T5.bin2.            实验需求:
A.       通过IPV6技术部署
B.       省干通过ISIS协议将AS内部的直连口和环回口路由通告
C.       通过路由反射器实现省内、市内业务路由互传
D.      国干通过OSPF协议将AS内部的直连口和环回口路由通告
E.       通过EBGP协议实现省干与国干路由互传
3.            实验步骤:
A.       IP地址规划

R1f0/012::1/120R5f0/125::5/120
f0/116::1/120f0/056::5/120
Loopback01::1/128Loopback05::5/128
R2f0/012::2/120R6f0/156::6/120
f1/025::2/120f1/016::6/120
f1/126::2/120f1/126::6/120
f0/123::2/120f0/067::6/120
Loopback02::2/128Loopback06::6/128
R3f0/023::3/120R7f0/167::7/120
f1/137::3/120f1/137::7/120
f0/134::3/120f0/078::7/120
Loopback03::3/128loopback7::7/128
R4f0/034::4/120R8f0/178::8/120
f0/148::4/120f0/048::8/120
Loopback04::4/128Loopback08::8/128
B.       IP地址配置
R1的IP配置如下R1#conf t                  //进入配置模式R1(config)#ipv6 unicast-routing   //开启设备ipv6功能R1(config)#int f0/0             //进入接口配置模式R1(config-if)#ipv6 add 12::1/120//配置ipv6地址R1(config-if)#no shut         //激活接口R1(config-if)#int f0/1R1(config-if)#ipv6 add 16::1/120R1(config-if)#no shutR1(config)#int lo 0R1(config-if)#ipv6 add 1::1/128R1(config-if)#no shutR2的IP配置如下R2#conf tR2(config)#ipv6 unicast-routingR2(config)#int f0/0R2(config-if)#ipv6 add 12::2/120R2(config-if)#no shutR2(config-if)#int f1/0R2(config-if)#no switchport      //三层接口不够用,加了二层接口,因为二层接口不可以陪IP地址,所以需要开启三层接口R2(config-if)#ipv6 add 25::2/120R2(config-if)#no shutR2(config-if)#int f1/1R2(config-if)#no switchportR2(config-if)#ipv6 add 26::2/120R2(config-if)#no shutR2(config-if)#int f0/1R2(config-if)#ipv6 add 23::2/120R2(config-if)#no shutR2(config-if)#int lo 0R2(config-if)#ipv6 add 2::2/128R2(config-if)#no shutR3的IP配置如下R3#conf tR3(config)#ipv unicast-routingR3(config)#int f0/0R3(config-if)#ipv6 add 23::3/120R3(config-if)#no shutR3(config-if)#int f1/1R3(config-if)#no switchportR3(config-if)#ipv6 add 37::3/120R3(config-if)#no shutR3(config-if)#int f0/1R3(config-if)#ipv6 add 34::3/120R3(config-if)#no shutR3(config-if)#int lo 0R3(config-if)#ipv6 add 3::3/128R3(config-if)#no shutR4的IP配置如下R4#conf tR4(config)#ipv6 unicast-routingR4(config)#int f0/0R4(config-if)#ipv6 add 34::4/120R4(config-if)#no shutR4(config-if)#int f0/1R4(config-if)#ipv6 add 48::4/120R4(config-if)#no shutR4(config)#int lo 0R4(config-if)#ipv6 add 4::4/128R4(config-if)#no shutR5的IP配置如下R5#conf tR5(config)#ipv6 unicast-routingR5(config)#int f0/1R5(config-if)#ipv6 add 25::5/120R5(config-if)#no shutR5(config-if)#int f0/0R5(config-if)#ipv6 add 56::5/120R5(config-if)#no shutR5(config-if)#int lo 0R5(config-if)#ipv add 5::5/128R5(config-if)#no shutR6的IP配置如下R6#conf tR6(config)#ipv6 unicast-routingR6(config)#int f0/1R6(config-if)#ipv6 add 56::6/120R6(config-if)#no shutR6(config-if)#int f1/0R6(config-if)#no switchportR6(config-if)#ipv6 add 16::6/120R6(config-if)#no shutR6(config-if)#int f1/1R6(config-if)#no switchportR6(config-if)#ipv6 add 26::6/120R6(config-if)#no shutR6(config-if)#int f0/0R6(config-if)#ipv6 add 67::6/120R6(config-if)#no shutR6(config-if)#int lo 0R6(config-if)#ipv6 add 6::6/128R6(config-if)#no shutR7的IP配置如下R7#conf tR7(config)#ipv6 unicast-routingR7(config)#int f0/1R7(config-if)#ipv6 add 67::7/120R7(config-if)#no shutR7(config-if)#int f1/1R7(config-if)#no switchportR7(config-if)#ipv6 add 37::7/120R7(config-if)#no shutR7(config-if)#int f0/0R7(config-if)#ipv6 add 78::7/120R7(config-if)#no shutR7(config-if)#int lo 0R7(config-if)#ipv6 add 7::7/128R7(config-if)#no shutR8的IP配置如下R8#conf tR8(config)#ipv6 unicast-routingR8(config)#int f0/1R8(config-if)#ipv6 add 78::8/120R8(config-if)#no shutR8(config-if)#int f0/0R8(config-if)#ipv6 add 48::8/120R8(config-if)#no shutR8(config-if)#int lo 0R8(config-if)#ipv6 add 8::8/128R8(config-if)#no shut--------------------------------以上是IP地址配置----------------------------------
C.       配置脚本
R1的配置如下R1(config)#router isis         //开启ISIS协议R1(config-router)#net 49.0001.0001.0001.0001.00//配置net地址,49是主网络号,第一个0001表示区域号,第二到第四个0001表示系统号,系统号是唯一的,最后00表示NSELR1(config-router)#is-type level-1//配置路由器类型级别为level-1,默认是level-1-2R1(config-router)#int f0/0R1(config-if)#ipv6 router isisR1(config-if)#int f0/1R1(config-if)#ipv6 router isisR1(config-if)#int lo 0R1(config-if)#ipv6 router isisR2的配置如下R2(config)#router isisR2(config-router)#net 49.0001.0002.0002.0002.00R2(config-router)#is-type level-1-2 //配置路由器类型级别为level-1-2,默认就是了level-1-2,可以不配置R2(config-router)#int f0/0R2(config-if)#ipv6 router isisR2(config-if)#int f1/0R2(config-if)#ipv6 router isisR2(config-if)#int f1/1R2(config-if)#ipv6 router isisR2(config-if)#int f0/1R2(config-if)#ipv6 router isisR2(config-if)#int lo 0R2(config-if)#ipv6 router isisR3的配置如下R3(config)#router isisR3(config-router)#net 49.0002.0003.0003.0003.00//省干属于区域2R3(config-router)#is-type level-2R3(config-router)#int f0/0R3(config-if)#ipv6 router isisR3(config-if)#int f1/1R3(config-if)#ipv6 router isisR3(config-if)#int f0/1R3(config-if)#ipv6 router isisR3(config-if)#int lo 0R3(config-if)#ipv6 router isisR5的配置如下R5(config)#router isisR5(config-router)#net 49.0001.0005.0005.0005.00R5(config-router)#is-type level-1R5(config-router)#int f0/1R5(config-if)#ipv6 router isisR5(config-if)#int f0/0R5(config-if)#ipv6 router isisR5(config-if)#int lo 0R5(config-if)#ipv6 router isisR6的配置如下R6(config-router)#int f0/1R6(config-if)#ipv6 router isisR6(config-if)#int f1/0R6(config-if)#ipv6 router isisR6(config-if)#int f1/1R6(config-if)#ipv6 router isisR6(config-if)#int f0/0R6(config-if)#ipv6 router isisR6(config-if)#int lo 0R6(config-if)#ipv6 router isisR7的配置如下R7(config)#router isisR7(config-router)#net 49.0002.0007.0007.0007.00R7(config-router)#is-type level-2R7(config-router)#int f0/1R7(config-if)#ipv6 router isisR7(config-if)#int f1/1R7(config-if)#ipv6 router isisR7(config-if)#int f0/0R7(config-if)#ipv6 router isisR7(config-if)#int lo 0R7(config-if)#ipv6 router isis在R1上查看路由表(查看命令show ipv6 route)

说明:level-1是区域内路由,只可以学习到内部的路由。Level-2是区域间路由,可以学习到内部路由也可以学习到其他区域的路由。Level-1-2是不同区域路由,即属于内部路由也属于区域间路由----------------------------------以上是ISIS协议配置---------------------------------------
R4的配置如下R4(config)#ipv6 router ospf 100//开启OSPFv3版本协议,OSPFv3版本协议支持ipv6,R4(config-rtr)#router-id 4.4.4.4//配置OSPF的routerID为4.4.4.4R4(config-rtr)#int f0/0R4(config-if)#ipv6 ospf 100 area 0 //R4(config-if)#int f0/1R4(config-if)#ipv6 ospf 100 area 0R4(config-if)#int lo 0R4(config-if)#ipv6 ospf 100 area 0R8的配置如下R8(config)#ipv6 router ospf 100R8(config-rtr)#router-id 8.8.8.8R8(config-rtr)#int f0/1R8(config-if)#ipv6 ospf 100 area 0R8(config-if)#int f0/0R8(config-if)#ipv6 ospf 100 area 0R8(config-if)#int lo 0R8(config-if)#ipv6 ospf 100 area 0在R4上查看路由表(查看命令show ipv6 route)-------------------------------以上是OSPF协议配置----------------------------------
R1的配置如下R1(config)#router bgp 65001//开启BGP协议,指定ASidR1(config-router)#bgp router-id 1.1.1.1 //配置BGP的routerID为1.1.1.1R1(config-router)#address-family ipv6 unicastR1(config-router-af)#neighbor 2::2 remote-as 65001 //手工指定邻居关系R1(config-router-af)#neighbor 2::2 update-source lo 0 //指定通过地址的lo 0环回口地址建立R1(config-router-af)#neighbor 3::3 remote-as 65001R1(config-router-af)#neighbor 3::3 update-source lo 0R1(config-router-af)#neighbor 5::5 remote-as 65001R1(config-router-af)#neighbor 5::5 update-source lo 0R1(config-router-af)#neighbor 6::6 remote-as 65001R1(config-router-af)#neighbor 6::6 update-source lo 0R1(config-router-af)#neighbor 7::7 remote-as 65001R1(config-router-af)#neighbor 7::7 update-source lo 0R2的配置如下R2(config)#router bgp 65001R2(config-router)#bgp router-id 2.2.2.2R2(config-router)#address-family ipv6 unicastR2(config-router-af)#neighbor 1::1 remote-as 65001R2(config-router-af)#neighbor 1::1 update-source lo 0R2(config-router-af)#neighbor 1::1route-reflector-client //配置路由发射器客户端,指定1::1为自己的客户端R2(config-router-af)#neighbor 3::3 remote-as 65001R2(config-router-af)#neighbor 3::3 update-source lo 0R2(config-router-af)#neighbor 5::5 remote-as 65001R2(config-router-af)#neighbor 5::5 update-source lo 0R2(config-router-af)#neighbor 5::5 route-reflector-clientR2(config-router-af)#neighbor 6::6 remote-as 65001R2(config-router-af)#neighbor 6::6 update-source lo 0R2(config-router-af)#neighbor 7::7 remote-as 65001R2(config-router-af)#neighbor 7::7 update-source lo 0R3的配置如下R3(config)#router bgp 65001R3(config-router)#bgp router-id 3.3.3.3R3(config-router)#address-family ipv6 unicastR3(config-router-af)#neighbor 1::1 remote-as 65001R3(config-router-af)#neighbor 1::1 update-source lo 0R3(config-router-af)# neighbor 1::1 next-hop-self//指定下一跳地址为自己R3(config-router-af)#neighbor 2::2 remote-as 65001R3(config-router-af)#neighbor 2::2 update-source lo 0R3(config-router-af)#neighbor 2::2route-reflector-clientR3(config-router-af)# neighbor 2::2 next-hop-selfR3(config-router-af)#neighbor 5::5 remote-as 65001R3(config-router-af)#neighbor 5::5 update-source lo 0R3(config-router-af)# neighbor 5::5 next-hop-selfR3(config-router-af)#neighbor 6::6 remote-as 65001R3(config-router-af)#neighbor 6::6 update-source lo 0R3(config-router-af)# neighbor 6::6 next-hop-selfR3(config-router-af)#neighbor 7::7 remote-as 65001R3(config-router-af)#neighbor 7::7 update-source lo 0R4的配置如下R4(config)#router bgp 65002R4(config-router)#bgp router-id 4.4.4.4R4(config-router)#address-family ipv6 unicastR4(config-router-af)#neighbor 8::8 remote-as 65002R4(config-router-af)#neighbor 8::8 update-source lo 0R5的配置如下R5(config)#router bgp 65001R5(config-router)#bgp router-id 5.5.5.5R5(config-router)#address-family ipv6 unicastR5(config-router-af)#neighbor 1::1 remote-as 65001R5(config-router-af)#neighbor 1::1 update-source lo 0R5(config-router-af)#neighbor 2::2 remote-as65001R5(config-router-af)#neighbor 2::2 update-source lo 0R5(config-router-af)#neighbor 3::3 remote-as 65001R5(config-router-af)#neighbor 3::3 update-sourcelo 0R5(config-router-af)#neighbor 6::6 remote-as 65001R5(config-router-af)#neighbor 6::6 update-sourcelo 0R5(config-router-af)#neighbor 7::7 remote-as 65001R5(config-router-af)#neighbor 7::7 update-source lo 0R6的配置如下R6(config)#router bgp 65001R6(config-router)#bgp router-id 6.6.6.6R6(config-router)#address-family ipv6 unicastR6(config-router-af)#neighbor 1::1 remote-as 65001R6(config-router-af)#neighbor 1::1 update-source lo 0R6(config-router-af)#neighbor 1::1 route-reflector-clientR6(config-router-af)#neighbor 2::2 remote-as 65001R6(config-router-af)#neighbor 2::2 update-source lo 0R6(config-router-af)#neighbor 3::3 remote-as 65001R6(config-router-af)#neighbor 3::3 update-source lo 0R6(config-router-af)#neighbor 5::5 remote-as 65001R6(config-router-af)#neighbor 5::5 update-source lo 0R6(config-router-af)#neighbor 5::5route-reflector-clientR6(config-router-af)#neighbor 7::7 remote-as 65001R6(config-router-af)#neighbor 7::7 update-source lo 0R7的配置如下R7(config)#router bgp 65001R7(config-router)#bgp router-id 7.7.7.7R7(config-router)#address-family ipv6 unicastR7(config-router-af)#neighbor 1::1 remote-as 65001R7(config-router-af)#neighbor 1::1 update-source lo 0R7(config-router-af)#neighbor 1::1 next-hop-selfR7(config-router-af)#neighbor 2::2 remote-as 65001R7(config-router-af)#neighbor 2::2 update-source lo 0R7(config-router-af)#neighbor 2::2 next-hop-selfR7(config-router-af)#neighbor 3::3 remote-as 65001R7(config-router-af)#neighbor 3::3 update-source lo 0R7(config-router-af)#neighbor 5::5 remote-as 65001R7(config-router-af)#neighbor 5::5 update-source lo 0R7(config-router-af)#neighbor 5::5 next-hop-selfR7(config-router-af)#neighbor 6::6 remote-as 65001R7(config-router-af)#neighbor 6::6 update-source lo 0R7(config-router-af)#neighbor 6::6 next-hop-selfR7(config-router-af)#neighbor 6::6route-reflector-clientR8的配置如下R8(config)#router bgp 65002R8(config-router)#bgp router-id 8.8.8.8R8(config-router)#address-family ipv6 unicastR8(config-router-af)#neighbor 4::4 remote-as 65002R8(config-router-af)#neighbor 4::4 update-source lo 0---------------------------以上是建立IBGP邻居----------------------------
R3的配置如下R3(config)#ipv6 route 4::4/128 34::4//配置静态路由,因为用loopback0建立邻居关系需要可以ping通loopback0R3(config)#router bgp 65001R3(config-router)#address-family ipv6 unicastR3(config-router-af)#neighbor 4::4 remote-as 65002R3(config-router-af)#neighbor 4::4 update-source lo 0R3(config-router-af)#neighbor 4::4 ebgp-multihop 2//因为ebgp的默认条数为1跳,当与loopback0建立邻居关系需要2跳,所以需要设置为2跳R4的配置如下R4(config)#ipv6 route 3::3/128 34::3R4(config)#router bgp 65002R4(config-router)#address-family ipv6 unicastR4(config-router-af)#neighbor 3::3 remote-as 65001R4(config-router-af)#neighbor 3::3 update-source lo 0R4(config-router-af)#neighbor 3::3 ebgp-multihop 2R7的配置如下R7(config)#ipv6 route 8::8/128 78::8R7(config)#router bgp 65001R7(config-router)#address-family ipv6 unicastR7(config-router-af)#neighbor 8::8 remote-as 65002R7(config-router-af)#neighbor 8::8 update-source lo 0R7(config-router-af)#neighbor 8::8 ebgp-multihop 2R8的配置如下R8(config)#ipv6 route 7::7/128 78::7R8(config)#router bgp 65002R8(config-router)#address-family ipv6 unicastR8(config-router-af)#neighbor 7::7 remote-as 65001R8(config-router-af)#neighbor 7::7 update-source lo 0R8(config-router-af)#neighbor 7::7 ebgp-multihop 2在R3上查看邻居关系(命令show bgp ipv6 unicast summary)------------------------------以上是建立EBGP邻居关系----------------------------------
D.      配置业务网段
在R1下挂个业务并通过BGP通告出去R1#conf tR1(config)#int lo 10R1(config-if)#ipv6 add 11::1/120R1(config-if)#router bgp 65001R1(config-router)#address-family ipv6 unicastR1(config-router-af)#net 11::/120//通告业务网段在R8下挂个业务并通过BGP通告出去R8#conf tR8(config)#int lo 10R8(config-if)#ipv6 add 88::1/120R8(config-if)#router bgp 65002R8(config-router)#address-family ipv6 unicastR8(config-router-af)#net 88::/120在R1上查看通告通告的路由4.            验证结果:
在R1上用loopback10访问 R8的loopback10

页: [1]
查看完整版本: 思科设备部署运营商架构-ipv6+isis+bgp配置实战