Esercitazione BGP 29-05-2009

Transcript

Esercitazione BGP 29-05-2009
Esercitazione BGP 29-05-2009
• Configurazione del processo BGP:
• router bgp ASN
• il comando abilita il BGP per uno specifico AS
• bgp router-id A.B.C.D
• il comando indica il router-id che verrà utilizzato dal processo
• se non è settato viene scelto per defalut l’indirizzo più alto
• distance bgp <1-255> <1-255> <1-255>
• il comando indica la distanza BGP per external routes, internal routes and local routes
• network A.B.C.D/M
• annuncia la network a tutti i neighbors
Esercitazione BGP 29-05-2009
• Route Aggregation:
•aggregate-address A.B.C.D/M
• permette di specificare un indirizzo aggregato
• aggregate-address A.B.C.D/M as-set
• viene aggiunta l’informazione sugli AS
• aggregate-address A.B.C.D/M summary-only
• il comando fa annuncia solo le rotte aggregate gli annnunci specifici vengono filtrati
Esercitazione BGP 29-05-2009
• Redistribute to BGP:
• redistribute kernel
• redistribute static
• redistribute connected
• redistribute rip
• redistribute ospf
• i comandi permettono di redistribuire le rotte apprese in BGP
Esercitazione BGP 29-05-2009
• Peer Filtering:
•neighbor peer distribute-list name [in|out]
•This command specifies a distribute-list for the peer. direct is in or out.
•neighbor peer prefix-list name [in|out]
•neighbor peer filter-list name [in|out]
•neighbor peer route-map name [in|out]
••Apply a route-map on the neighbor. direct must be in or out.
• IP Prefix List
• ip prefix-list name (permit|deny) prefix
• ip prefix-list name seq number (permit|deny) prefix
160.10.1.0/16
160.20.1.0/16
.100 / eth0
.100 / eth0
.1 / eth1
.1/ eth0
Router A
HostB
HostA
.2 / eth0
AS 100
Router B
AS 300
.3/ eth0
.1 / eth2
.1 / eth0
AS 200
.1 / eth1
Router C
.1 / eth2
160.30.1.0/16
.100 / eth0
.4 / eth0
.1 / eth3
.5 / eth0
Router E
HostE
.6 / eth1
.1 / eth2
.1 / eth2
Router D
.1 / eth1
HostD
180.20.1.0/16
.100 / eth0
.100 / eth0
180.30.1.0/16
AS 500
HostF
AS 400
Configurazioni AS 100
hostname RouterA
password zebra
enable password zebra
!
! Interface's description.
!
interface lo
description Loopback
ip address 127.0.0.1/8
interface eth0
description Verso AS 300
ip address 2.2.2.2/8
interface eth1
description Entro l'AS
ip address 160.20.1.1/16
interface eth2
description Verso AS 500
ip address 5.5.5.1/8
!
!
! Static default route sample.
!
!ip route 0.0.0.0/0 203.181.89.241
!
log file /var/log/zebra/zebra.log
!
hostname bgpd
password zebra
enable password zebra
!
router bgp 100
network 160.20.0.0
neighbor 2.2.2.1 remote-as 300
neighbor 5.5.5.5 remote-as 500
redistribute connected
log file /var/log/zebra/bgpd.log
!
debug bgp
debug bgp events
debug bgp filters
debug bgp fsm
debug bgp keepalives
debug bgp updates
!
hostname HostA
password zebra
enable password zebra
!
! Interface's description.
!
interface lo
description Loopback
ip address 127.0.0.1/8
interface eth0
description Verso il router
ip address 160.20.1.100/16
!Static default route.
ip route 0.0.0.0/0 160.20.1.1
log file /var/log/zebra/zebra.log
Configurazioni AS 200
hostname RouterB
password zebra
enable password zebra
!
! Interface's description.
!
interface lo
description Loopback
ip address 127.0.0.1/8
interface eth0
description Verso AS 300
ip address 3.3.3.3/8
interface eth1
description Verso interno
ip address 160.10.1.1/16
!
!
! Static default route sample.
!
!ip route 0.0.0.0/0 203.181.89.241
!
log file /var/log/zebra/zebra.log
!
hostname bgpd
password zebra
enable password zebra
!
router bgp 200
network 160.10.0.0
neighbor 3.3.3.1 remote-as 300
!
log file /var/log/zebra/bgpd.log
!
debug bgp
debug bgp events
debug bgp filters
debug bgp fsm
debug bgp keepalives
debug bgp updates
!
hostname HostB
password zebra
enable password zebra
!
! Interface's description.
!
interface lo
description Loopback
ip address 127.0.0.1/8
interface eth0
description Verso il router
ip address 160.10.1.100/16
! Static default route sample.
ip route 0.0.0.0/0 160.10.1.1
log file /var/log/zebra/zebra.log
Configurazioni AS 400
hostname RouterD
password zebra
enable password zebra
!
! Interface's description.
!
interface lo description
Loopback ip address 127.0.0.1/8
interface eth0
description Verso AS 300
ip address 4.4.4.4/8
interface eth1
description Verso interno
ip address 180.30.1.1/16
interface eth2
description Verso AS 500
ip address 6.6.6.1/8
!
!
! Static default route sample.
!
!ip route 0.0.0.0/0 203.181.89.241
!
log file /var/log/zebra/zebra.log
!hostname bgpd
password zebra
enable password zebra
!
router bgp 400
network 180.30.0.0
neighbor 4.4.4.1 remote-as 300
neighbor 6.6.6.6 remote-as 500
redistribute connected
!
log file /var/log/zebra/bgpd.log
!
debug bgp
debug bgp events
debug bgp filters
debug bgp fsm
debug bgp keepalives
debug bgp updates
!
hostname HostD
password zebra
enable password zebra
!
! Interface's description.
!
interface lo
description Loopback
ip address 127.0.0.1/8
interface eth0
description Verso il router
ip address 180.30.1.100/16
!Static default route.
ip route 0.0.0.0/0 180.30.1.1
log file /var/log/zebra/zebra.log
Configurazioni AS 300
hostname RouterC
password zebra
enable password zebra
!
! Interface's description.
!
interface lo
description Loopback
ip address 127.0.0.1/8
interface eth0
description Verso AS 100
ip address 2.2.2.1/8
interface eth1
description Verso AS 200
ip address 3.3.3.1/8
interface eth2
description Verso AS 400
ip address 4.4.4.1/8
!
!
! Static default route sample.
!
!ip route 0.0.0.0/0 203.181.89.241
!
log file /var/log/zebra/zebra.log
hostname bgpd
password zebra
enable password zebra
!
router bgp 300
neighbor 2.2.2.2 remote-as 100
neighbor 3.3.3.3 remote-as 200
neighbor 4.4.4.4 remote-as 400
redistribute connected
! Pubblica soltanto come “summary" le reti
aggregate-address 160.10.0.0/16 summary-only
aggregate-address 160.20.0.0/16 summary-only
aggregate-address 180.30.0.0/16 summary-only
! aggrega le due reti
!aggregate-address 160.0.0.0/8 summary-only
! Pubblica una route aggregata as-set
!aggregate-address 160.0.0.0/8 summary-only as-set
!aggregate-address 180.30.0.0/16 summary-only
!network 180.30.0.0/16
log file /var/log/zebra/bgpd.log
!
debug bgp
debug bgp events
debug bgp filters
debug bgp fsm
debug bgp keepalives
debug bgp updates
Configurazioni AS 500
hostname RouterE
password zebra
enable password zebra
!
! Interface's description.
!
interface lo
description Loopback
ip address 127.0.0.1/8
interface eth0
description Verso AS 100
ip address 5.5.5.5/8
interface eth1
description Verso AS 400
ip address 6.6.6.6/8
interface eth2
description Verso interno
ip address 180.20.1.1/16
interface eth3
description Verso interno
ip address 160.30.1.1/16
! Static default route sample.
!ip route 0.0.0.0/0 203.181.89.241
log file /var/log/zebra/zebra.log
hostname bgpd
password zebra
enable password zebra
!
router bgp 500
network 180.20.0.0
network 160.30.0.0
neighbor 5.5.5.1 remote-as 100
neighbor 6.6.6.1 remote-as 400
redistribute connected
!
log file /var/log/zebra/bgpd.log
debug bgp
debug bgp events
debug bgp filters
debug bgp fsm
debug bgp keepalives
debug bgp updates
Configurazioni AS 500
• Configurazione BGP per:
• Utilizzare il link RouterE-RouterD per il traffico diretto alla
rete 180.20.1.0/24
• Utilizzare il link RouterE-RouterA per il traffico diretto alla
rete 160.30.1.0/24
• In caso di fualt di uno dei link
• RouterE-RouterA
• RouterE-RouterD
far in modo che il traffico diretto alle reti precedenti non
vada perso
Configurazioni AS 500
hostname RouterE
password zebra
enable password zebra
!
! Interface's description.
!
interface lo
description Loopback
ip address 127.0.0.1/8
interface eth0
description Verso AS 100
ip address 5.5.5.5/8
interface eth1
description Verso AS 400
ip address 6.6.6.6/8
interface eth2
description Verso interno
ip address 180.20.1.1/16
interface eth3
description Verso interno
ip address 160.30.1.1/16
! Static default route sample.
!ip route 0.0.0.0/0 203.181.89.241
log file /var/log/zebra/zebra.log
hostname bgpd
password zebra
enable password zebra
!
router bgp 500
redistribute connected
!ip prefix-list In400 permit 0.0.0.0/0
ip prefix-list Out400 permit 180.20.0.0/16
ip prefix-list Out400 permit 160.30.0.0/16
ip prefix-list Out400 permit 180.20.1.0/24
!ip prefix-list Out400 permit 5.5.0.0/16
!ip prefix-list Out400 permit 6.6.6.0/24
network 180.20.0.0/16
network 180.20.1.0/24
network 160.30.0.0/16
network 160.30.1.0/24
log file /var/log/zebra/bgpd.log
debug bgp
debug bgp events
debug bgp filters
debug bgp fsm
debug bgp keepalives
debug bgp updates
neighbor 5.5.5.1 remote-as 100
!neighbor 5.5.5.1 prefix-list In100 in
neighbor 5.5.5.1 prefix-list Out100 out
neighbor 6.6.6.1 remote-as 400
!neighbor 6.6.6.1 prefix-list In400 in
neighbor 6.6.6.1 prefix-list Out400 out
!ip prefix-list In100 permit 0.0.0.0/0
ip prefix-list Out100 permit 160.30.0.0/16
ip prefix-list Out100 permit 180.20.0.0/16
ip prefix-list Out100 permit 160.30.1.0/24
!ip prefix-list Out100 permit 5.5.5.0/24
!ip prefix-list Out100 permit 6.6.0.0/16