打开APP
userphoto
未登录

开通VIP,畅享免费电子书等14项超值服

开通VIP
BGP配置示例 - 51CTO.COM
    本文是关于边界网关协议BGP配置的实例演示

    CAT 1
    CAT1> (enable) show running-config
    begin
    !
    # ***** NON-DEFAULT CONFIGURATION *****
    !
    !
    #version 6.3(5)
    !
    #system
    set system name CAT1
    set system highavailability enable
    !-- Enables high availability on Catalyst switch.
    !
    #vtp
    set vtp domain cisco
    set vlan 1 name default type ethernet mtu 1500 said 100001 state active
    [..]
    set vlan 10,20
    !
    #set boot command
    set boot config-register 0x2102
    set boot system flash bootflash:cat6000-sup.6-3-5.bin
    !
    #module 3 : 48-port 10/100BaseTX Ethernet
    set vlan 10 3/2
    !-- Port 3/2 is connected to AS10 on VLAN 10.
    !
    #module 5 : 8-port 1000BaseX Ethernet
    set module name 5
    set trunk 5/2 on isl 1-1005,1025-4094
    !-- Port 5/2 is connected to CAT 2 as Trunk.
    !
    #module 15 : 1-port Multilayer Switch Feature Card
    !-- MSFC #1 on Port 1, Mod 15.
    !
    #module 16 : 1-port Multilayer Switch Feature Card
    !-- MSFC #2 on Port 2, Mod 16.
    CAT 2
    CAT2 (enable) show running-config
    begin
    !
    # ***** NON-DEFAULT CONFIGURATION *****
    !
    !
    #version 6.3(5)
    !
    #system
    set system name CAT2
    set system highavailability enable
    !-- Enables high availability on Catalyst switch.
    !
    #vtp
    set vtp domain cisco
    set vlan 1 name default type ethernet mtu 1500 said 100001 state active
    set vlan 10,20
    !
    #set boot command
    set boot config-register 0x2102
    set boot system flash bootflash:cat6000-sup.6-3-5.bin
    !
    !
    #module 3 : 48-port 10/100BaseTX Ethernet
    set vlan 20 3/3
    !-- Port 3/3 is connected to AS20 on VLAN 20.
    !
    #module 4 : 8-port 1000BaseX Ethernet
    set module name 4
    set trunk 4/2 on isl 1-1005,1025-4094
    !-- Port 4/2 is connected to CAT 1 as Trunk.
    !
    #module 15 : 1-port Multilayer Switch Feature Card
    !-- MSFC 1 on Port 1, Mod 15.
    !
    #module 16 : 1-port Multilayer Switch Feature Card
    !-- MSFC #2 on Port 2, Mod 16.
    MSFC Configuration on CAT1
    CAT1> (enable)
    CAT1> (enable) session 15
    Trying Router-15...
    Connected to Router-15.
    Escape character is '^]'.
    MSFC-CAT1>enable
    MSFC-CAT1#show running-config
    Building configuration...
    Current configuration : 868 bytes
    !
    version 12.1
    !
    hostname MSFC-CAT1
    !
    boot system bootflash:c6msfc2-jsv-mz.121-8b.E7
    !
    ip subnet-zero
    !
    !
    !
    redundancy
    !-- This command enables redundancy.
    high-availability
    !-- This command enables high availability.
    single-router-mode
    !-- This command enables SRM.
    !
    interface Vlan10
    ip address 192.168.1.1 255.255.255.0
    !-- Interface Vlan10 is connected to AS10.
    !
    interface Vlan20
    ip address 192.168.2.3 255.255.255.0
    !-- Interface Vlan20 is connected to interface Vlan20 on CAT2 via the trunk.
    !
    router bgp 4
    no synchronization
    bgp log-neighbor-changes
    network 192.168.0.0 mask 255.255.0.0
    neighbor 192.168.1.2 remote-as 10
    !-- This command establishes eBGP peering with AS10.
    neighbor 192.168.2.1 remote-as 4
    !-- This command establishes iBGP peering with interface VLAN 20 on CAT2.
    neighbor 192.168.2.1 next-hop-self
    !-- This command assigns a next-hop value to 192.168.2.3 !-- for updates sent to 192.168.2.1 (the iBGP peer).
    !
    ip classless
    ip route 192.168.0.0 255.255.0.0 Null0
    MSFC Configuration on CAT2
    CAT2 (enable)
    CAT2 (enable) session 15
    Trying Router-15...
    Connected to Router-15.
    Escape character is '^]'.
    MSFC-CAT2>enable
    MSFC-CAT2#show running-config
    Building configuration...
    Current configuration : 890 bytes
    !
    version 12.1
    !
    hostname MSFC-CAT2
    !
    boot system flash bootflash:c6msfc-jsv-mz.121-8b.E7
    !
    ip subnet-zero
    !
    !
    redundancy
    !-- This command enables redundancy.
    high-availability
    !-- This command enables high availability.
    single-router-mode
    !-- This command enables SRM.
    !
    interface Vlan10
    ip address 192.168.1.3 255.255.255.0
    !-- Interface Vlan10 connected to interface Vlan10 on CAT1 via the trunk.
    !
    interface Vlan20
    ip address 192.168.2.1 255.255.255.0
    !-- Interface Vlan20 connected to AS20.
    !
    router bgp 4
    no synchronization
    bgp log-neighbor-changes
    network 192.168.0.0 mask 255.255.0.0
    neighbor 192.168.2.2 remote-as 20
    !-- This command establishes eBGP peering with AS20.
    neighbor 192.168.2.3 remote-as 4
    !-- This command establishes iBGP peering with interface Vlan20 on CAT1.
    neighbor 192.168.2.3 next-hop-self
    !-- This command assigns a next-hop value to 192.168.2.1 !-- for updates sent to 192.168.2.3 (the iBGP peer).
    !
    ip classless
    ip route 192.168.0.0 255.255.0.0 Null0
    Troubleshoot
    Now that you've verified the high availability SRM configuration, you need to verify the BGP MSFC on CAT1 and CAT2. Use the show ip bgp summary command to verify the neighbor establishment. The output below confirms successful eBGP and iBGP peering with AS10 and the CAT2 MSFC respectively.
    MSFC-CAT1#show ip bgp summary
    BGP router identifier 192.168.2.3, local AS number 4
    BGP table version is 4, main routing table version 4
    3 network entries and 4 paths using 435 bytes of memory
    4 BGP path attribute entries using 240 bytes of memory
    2 BGP AS-PATH entries using 48 bytes of memory
    0 BGP route-map cache entries using 0 bytes of memory
    0 BGP filter-list cache entries using 0 bytes of memory
    BGP activity 3/14 prefixes, 4/0 paths, scan interval 15 secs
    Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
    192.168.1.2 4 10 90 92 4 0 0 01:26:02 1
    192.168.2.1 4 4 91 91 4 0 0 01:25:38 2
    Verify the BGP state on the active MSFC in CAT2. The output below confirms successful eBGP and iBGP peering with AS20 and CAT1 respectively
    MSFC-CAT2#show ip bgp summary
    BGP router identifier 192.168.2.1, local AS number 4
    BGP table version is 4, main routing table version 4
    3 network entries and 4 paths using 435 bytes of memory
    4 BGP path attribute entries using 240 bytes of memory
    2 BGP AS-PATH entries using 48 bytes of memory
    0 BGP route-map cache entries using 0 bytes of memory
    0 BGP filter-list cache entries using 0 bytes of memory
    BGP activity 3/0 prefixes, 4/0 paths, scan interval 15 secs
    Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
    192.168.2.2 4 20 110 112 4 0 0 01:46:43 1
    192.168.2.3 4 4 101 101 4 0 0 01:35:09 2
    In the event the designated MSFC (Mod 15 on CAT1) experiences a failure, the standby MSFC (Mod 16 on CAT1) takes over the role of active MSFC. It is important to understand that with the failure of the designated MSFC and fail over to the non-designated MSFC, packet switching will continue to work with the Cisco Express Forwarding (CEF) table programmed by the old designated MSFC. The newly designated MSFC will eventually re-program the CEF table with its own entries and the old entries will expire.
    Failure of designated MSFC is simulated by resetting Mod 15 on CAT1 as shown below.
    CAT1> (enable) reset 15
    This command will reset module 15.
    Unsaved configuration on module 15 will be lost
    Do you want to continue (y/n) [n]? y
    2002 May 16 11:52:54 %SYS-5-MOD_RESET:Module 15 reset from Console//
    Resetting module 15...
    Ping traffic was generated from AS10 to a destination in AS20 during the fail over on CAT1 from designated to non-designated MSFC. Note that there was minimal packet loss during this fail over and the packet forwarding continued to work with the old CEF table programmed by the Mod 15 MSFC until the Mod 16 MSFC re-programs the CEF table with its own entries.
    AS10-Router#ping
    Protocol [ip]:
    Target IP address: 172.16.1.1
    Repeat count [5]: 1000
    Datagram size [100]:
    Timeout in seconds [2]:
    Extended commands [n]:
    Sweep range of sizes [n]:
    Type escape sequence to abort.
    Sending 1000, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!
    Success rate is 99 percent (999/1000), round-trip min/avg/max = 1/3/116 ms 
本站仅提供存储服务,所有内容均由用户发布,如发现有害或侵权内容,请点击举报
打开APP,阅读全文并永久保存 查看更多类似文章
猜你喜欢
类似文章
【热】打开小程序,算一算2024你的财运
【干货】华为/思科命令对照表
最新版的华三模拟器(HCL)出炉了,支持更多功能!如本期EVPN案例!
华为、H3C和锐捷:一起学习BGP基本的配置
ChinaDDoS BGP 流量牵引二层VLAN回注配置
交换机配置- 使用channel方式封装子接口
H3C S3600三层交换机配置方法(2)
更多类似文章 >>
生活服务
热点新闻
分享 收藏 导长图 关注 下载文章
绑定账号成功
后续可登录账号畅享VIP特权!
如果VIP功能使用有故障,
可点击这里联系客服!

联系客服