BGP综合实验（广域网互通，AS，OSPF，EBGP，IBGP，汇总，防环）

一、实验需求

1，AS1存在两个环回，一个地址为192.168.1.0/24该地址不能在任何协议中宣告
AS3中存在两个环回，一个地址为192.168.2.0/24该地址不能在任何协议中宣告，最终要求这两个环回可以互相通讯
AS1的另一个环回为10.0.0.0/24，AS3的另一个环回为11.0.0.0/24
2，整个AS2的Ip地址为172.16.0.0/16，请合理划分
3，AS间的骨干链路IP地址随意定制
4，使用BGP协议让整个网络所有设备的环回可以互相访问
5，减少路由条目数量，避免环路出现

二、实验拓扑

三、实验步骤

一、划分网段

1、需求：整个AS2的Ip地址为172.16.0.0/16，请合理划分

因为如上拓扑图可以看出在AS2中一共有12个网段（6个主干网段，6个环回网段），所以我们可以用172.16.0.0/26进行划分，一共可以划分出16个掩码为30的网段，只需要12个，剩下的备用

AS2:主干
172.16.0.00 000000/26
172.16.0.00 000000/30---172.16.0.0/30
172.16.0.00 000100/30---172.16.0.4/30
172.16.0.00 001000/30---172.16.0.8/30
172.16.0.00 001100/30---172.16.0.12/30
172.16.0.00 010000/30---172.16.0.16/30
172.16.0.00 010100/30---172.16.0.20/30

AS2：环回
R2:172.16.0.00 011000/30---172.16.0.24/30
R3:172.16.0.00 011100/30---172.16.0.28/30
R4:172.16.0.00 100000/30---172.16.0.32/30
R5:172.16.0.00 100100/30---172.16.0.36/30
R6:172.16.0.00 101000/30---172.16.0.40/30
R7:172.16.0.00 101100/30---172.16.0.44/30

2、需求：AS间的骨干链路IP地址随意定制

因为需求给出骨干随意定制，所以我们可以定制为：

AR1--AR2之间为：12.0.0.0/24网段进行定制，接口IP地址分别为12.0.0.1/24 12.0.0.2/24

AR7--AR8之间为：78.0.0.0/24网段进行定制，接口IP地址分别为78.0.0.1/24 78.0.0.2/24

二、配置IP地址

1、AR1

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R1 [R1]interface g0/0/0 [R1-GigabitEthernet0/0/0]ip address 12.0.0.1 24 [R1-GigabitEthernet0/0/0]q [R1]interface lo0 [R1-LoopBack0]ip address 192.168.1.1 24 [R1-LoopBack1]ip address 10.0.0.1 24 [R1-LoopBack1]q

2、AR2

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R2 [R2]interface g0/0/0 [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0]ip address 12.0.0.2 24 Jul 11 2026 18:24:48-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R2-GigabitEthernet0/0/0] [R2-GigabitEthernet0/0/0]q [R2] [R2]interface g0/0/1 [R2-GigabitEthernet0/0/1] [R2-GigabitEthernet0/0/1]ip address 172.16.0.1 30 [R2-GigabitEthernet0/0/1] [R2-GigabitEthernet0/0/1]q [R2] [R2]interface g0/0/2 [R2-GigabitEthernet0/0/2] Jul 11 2026 18:24:48-08:00 R2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R2-GigabitEthernet0/0/2] [R2-GigabitEthernet0/0/2]ip address 172.16.0.9 30 [R2]interface lo0 [R2-LoopBack0]ip ad [R2-LoopBack0]ip address 172.16.0.25 30

3、AR3

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R3 [R3] [R3]interface g0/0/0 [R3-GigabitEthernet0/0/0] [R3-GigabitEthernet0/0/0]ip address 172.16.0.2 30 [R3-GigabitEthernet0/0/0] Jul 11 2026 18:25:38-08:00 R3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R3-GigabitEthernet0/0/0]q [R3-GigabitEthernet0/0/0] [R3] [R3]interface g0/0/1 [R3-GigabitEthernet0/0/1] [R3-GigabitEthernet0/0/1]ip address 172.16.0.5 30 [R3]interface lo0 [R3-LoopBack0] [R3-LoopBack0]ip address 172.16.0.29 30

4、AR4

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys ^ Error:Incomplete command found at '^' position. [Huawei]sys R4 [R4]interface g0/0/0 [R4-GigabitEthernet0/0/0] [R4-GigabitEthernet0/0/0]ip address 172.16.0.6 30 Jul 11 2026 18:26:15-08:00 R4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R4-GigabitEthernet0/0/0] [R4-GigabitEthernet0/0/0]q [R4] [R4]interface g0/0/1 [R4-GigabitEthernet0/0/1] [R4-GigabitEthernet0/0/1]ip address 172.16.0.21 30 [R4-GigabitEthernet0/0/1] [R4-GigabitEthernet0/0/1]q Jul 11 2026 18:26:15-08:00 R4 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R4-GigabitEthernet0/0/1]q [R4]interface lo0 [R4-LoopBack0] [R4-LoopBack0]ip address 172.16.0.33 30

5、AR5

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R5 [R5] [R5] [R5]interface g0/0/0 [R5-GigabitEthernet0/0/0] [R5-GigabitEthernet0/0/0]ip address 172.16.0.10 30 [R5-GigabitEthernet0/0/0] Jul 11 2026 18:28:30-08:00 R5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R5-GigabitEthernet0/0/0] [R5-GigabitEthernet0/0/0]q [R5] [R5]interface g0/0/1 [R5-GigabitEthernet0/0/1] [R5-GigabitEthernet0/0/1]ip address 172.16.0.13 30 [R5-GigabitEthernet0/0/1] [R5-GigabitEthernet0/0/1]q Jul 11 2026 18:28:30-08:00 R5 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R5-GigabitEthernet0/0/1]q [R5]interface lo0 [R5-LoopBack0] [R5-LoopBack0]ip address 172.16.0.37 30

6、AR6

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R6 [R6]interface g0/0/0 [R6-GigabitEthernet0/0/0] [R6-GigabitEthernet0/0/0]ip address 172.16.0.14 30 [R6-GigabitEthernet0/0/0] Jul 11 2026 18:27:58-08:00 R6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R6-GigabitEthernet0/0/0] [R6-GigabitEthernet0/0/0]q [R6] [R6]interface g0/0/1 [R6-GigabitEthernet0/0/1] [R6-GigabitEthernet0/0/1]ip address 172.16.0.17 30 Jul 11 2026 18:27:59-08:00 R6 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R6-GigabitEthernet0/0/1] [R6-GigabitEthernet0/0/1]q [R6]interface lo0 [R6-LoopBack0] [R6-LoopBack0]ip address 172.16.0.41 30

7、AR7

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R7 [R7]interface g0/0/0 [R7-GigabitEthernet0/0/0] [R7-GigabitEthernet0/0/0]ip address 172.16.0.18 30 [R7-GigabitEthernet0/0/0] Jul 11 2026 18:27:04-08:00 R7 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R7-GigabitEthernet0/0/0] [R7-GigabitEthernet0/0/0]q [R7] [R7]interface g0/0/1 [R7-GigabitEthernet0/0/1] [R7-GigabitEthernet0/0/1]ip address 172.16.0.22 30 [R7-GigabitEthernet0/0/1] [R7-GigabitEthernet0/0/1]q [R7] [R7]interface g0/0/2 Jul 11 2026 18:27:04-08:00 R7 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R7]interface g0/0/2 [R7-GigabitEthernet0/0/2] [R7-GigabitEthernet0/0/2]ip address 78.0.0.1 24 [R7]interface lo0 [R7-LoopBack0] [R7-LoopBack0]ip address 172.16.0.45 30

8、AR8

<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]sys R8 [R8]inte [R8]interface g0/0/0 [R8-GigabitEthernet0/0/0]ip ad [R8-GigabitEthernet0/0/0]ip address 78.0.0.2 24 [R8-GigabitEthernet0/0/0] Jul 11 2026 18:31:33-08:00 R8 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R8-GigabitEthernet0/0/0]q [R8]inte [R8]interface lo 0 [R8-LoopBack0]ip ad [R8-LoopBack0]ip address 192.168.2.1 24 [R8-LoopBack0]q [R8]inte [R8]interface lo1 [R8-LoopBack1]ip ad [R8-LoopBack1]ip address 11.0.0.1 24 [R8-LoopBack1]q

三、AS2内部使用OSPF协议进行互通

1、R2

[R2]ospf 1 router-id 2.2.2.2 [R2-ospf-1]area 0 [R2-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255
2、R3
[R3]ospf 1 router-id 3.3.3.3 [R3-ospf-1] [R3-ospf-1]area 0 [R3-ospf-1-area-0.0.0.0] [R3-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255
3、R4
[R4]ospf 1 router-id 4.4.4.4 [R4-ospf-1] [R4-ospf-1]area 0 [R4-ospf-1-area-0.0.0.0] [R4-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

4、R5

[R5]ospf 1 router-id 5.5.5.5 [R5-ospf-1] [R5-ospf-1]area 0 [R5-ospf-1-area-0.0.0.0] [R5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

5、R6

[R6]ospf 1 router-id 6.6.6.6 [R6-ospf-1] [R6-ospf-1]area 0 [R6-ospf-1-area-0.0.0.0] [R6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

6、R7

[R7]ospf 1 router-id 7.7.7.7 [R7-ospf-1] [R7-ospf-1]area 0 [R7-ospf-1-area-0.0.0.0] [R7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.0.255

四、AS之间用EBGP去建邻

1、AR1与AR2之间用EBGP去建邻

1、R1上的BGP配置
[R1]bgp 1 [R1-bgp]router-id 1.1.1.1 [R1-bgp]peer 12.0.0.2 as-number 2
2、R2上的BGP配置
[R2]bgp 64512 //注意：需要用小的AS号来创建 [R2-bgp]confederation id 2 //声明自己大的AS号2 [R2-bgp]peer 12.0.0.1 as-number 1

2、AR7与AR8之间用EBGP去建邻

1、R7
[R7]bgp 64513 [R7-bgp]router-id 7.7.7.7 [R7-bgp]confederation id 2 [R7-bgp]peer 78.0.0.2 as-number 3
2、R8
[R8]bgp 3 [R8-bgp]router-id 8.8.8.8 [R8-bgp]peer 78.0.0.1 as [R8-bgp]peer 78.0.0.1 as-number 2

五、AS2内部分别用IBGP和EBGP去建邻

1、AR2,AR3,AR4之间分别用IBGP去建邻

1、R2:
[R2]bgp 64512 [R2-bgp]peer 172.16.0.29 a [R2-bgp]peer 172.16.0.29 advertise-community [R2-bgp]peer 172.16.0.29 advertise-ext-community [R2-bgp]peer 172.16.0.29 allow-as-loop [R2-bgp]peer 172.16.0.29 as-number 64512 [R2-bgp]peer [R2-bgp]peer 172.16.0.29 c [R2-bgp]peer 172.16.0.29 capability-advertise [R2-bgp]peer 172.16.0.29 connect-interface lo [R2-bgp]peer 172.16.0.29 connect-interface LoopBack 0 [R2-bgp]peer 172.16.0.29 next-hop-local
2、R3
[R3]bgp 64512 [R3-bgp]router-id 3.3.3.3 [R3-bgp]peer 172.16.0.25 a [R3-bgp]peer 172.16.0.25 as [R3-bgp]peer 172.16.0.25 as-path-filter [R3-bgp]peer 172.16.0.25 as-number 64512 [R3-bgp]peer 172.16.0.25 connect-interface LoopBack 0 [R3-bgp]peer 172.16.0.25 next-hop-local [R3-bgp]peer 172.16.0.33 as [R3-bgp]peer 172.16.0.33 as-number 64512 [R3-bgp]peer 172.16.0.33 connect-interface LoopBack 0 [R3-bgp]peer 172.16.0.33 next-hop-local
3、R4
[R4]bgp 64512 [R4-bgp]ro [R4-bgp]route-select [R4-bgp]router-id 4.4.4.4 [R4-bgp]peer 172.16.0.29 as [R4-bgp]peer 172.16.0.29 as-number 64512 [R4-bgp]peer 172.16.0.29 con [R4-bgp]peer 172.16.0.29 connect-interface lo [R4-bgp]peer 172.16.0.29 connect-interface LoopBack 0 [R4-bgp]peer 172.16.0.29 next-hop-local

2、AR5,AR6,AR7之间分别用IBGP去建邻

1、R5
[R5]bgp 64513 [R5-bgp]ro [R5-bgp]route-select [R5-bgp]router-id 5.5.5.5 [R5-bgp]peer 172.16.0.41 as [R5-bgp]peer 172.16.0.41 as-number 64513 [R5-bgp]peer 172.16.0.41 connect-interface LoopBack 0 [R5-bgp]peer 172.16.0.41 next-hop-local [R5-bgp]
2、R6
[R6]bgp 64513 [R6-bgp]rot [R6-bgp]ro [R6-bgp]route-select [R6-bgp]router-id 6.6.6.6 [R6-bgp]peer 172.16.0.37 as [R6-bgp]peer 172.16.0.37 as-number 64513 [R6-bgp]peer 172.16.0.37 con [R6-bgp]peer 172.16.0.37 connect-interface lo [R6-bgp]peer 172.16.0.37 connect-interface LoopBack 0 [R6-bgp]peer 172.16.0.37 next-hop-local [R6-bgp]peer 172.16.0.45 as [R6-bgp]peer 172.16.0.45 as-number 64513 [R6-bgp]peer 172.16.0.45 conn [R6-bgp]peer 172.16.0.45 connect-interface lo [R6-bgp]peer 172.16.0.45 connect-interface LoopBack 0 [R6-bgp]peer 172.16.0.45 next-hop-local [R6-bgp]
3、R7
[R7-bgp]peer 172.16.0.41 as [R7-bgp]peer 172.16.0.41 as-number 64513 [R7-bgp]peer 172.16.0.41 con [R7-bgp]peer 172.16.0.41 connect-interface lo [R7-bgp]peer 172.16.0.41 connect-interface LoopBack 0 [R7-bgp]peer 172.16.0.41 next-hop-local

3、AR2和AR5之间用EBGP直连去建邻

[R2-bgp]peer 172.16.0.10 as-number 64513 [R2-bgp]peer 172.16.0.10 next-hop-local
[R5-bgp]peer 172.16.0.9 as-number 64512 [R5-bgp]peer 172.16.0.9 next-hop-local

4、AR4和AR7之间用EBGP非直连去建邻

因为上面AR2和AR5之间用的直连，所以我们这个用非直连（换一种方法）

[R4-bgp]confederation peer-as 64513 [R4-bgp]peer 172.16.0.45 as-number 64513 [R4-bgp]peer 172.16.0.45 connect-interface LoopBack 0 [R4-bgp]peer 172.16.0.45 next-hop-local [R4-bgp]peer 172.16.0.45 ebgp-max-hop
[R7]bgp 64513 [R7-bgp]con [R7-bgp]confederation p [R7-bgp]confederation peer-as 64512 [R7-bgp]peer 172.16.0.33 as [R7-bgp]peer 172.16.0.33 as-number 64512 [R7-bgp]peer 172.16.0.33 e [R7-bgp]peer 172.16.0.33 enable [R7-bgp]peer 172.16.0.33 ebgp-max-hop [R7-bgp]peer 172.16.0.33 ne [R7-bgp]peer 172.16.0.33 next-hop-local [R7-bgp]peer 172.16.0.33 con [R7-bgp]peer 172.16.0.33 connect-interface lo [R7-bgp]peer 172.16.0.33 connect-interface LoopBack 0

六、将AR3和AR6作为路由反馈器

将R2指定为客户

[R3-bgp]peer 172.16.0.25 reflect-client
[R6-bgp]peer 172.16.0.37 reflect-client

七、减少路由条目数量，避免环路出现

1、宣告这四个网段

[R1-bgp]network 10.0.0.0 [R1-bgp]network 192.168.1.0
[R1-bgp] network 11.0.0.0 255.255.255.0 [R1-bgp] network 192.168.2.0 255.255.252.0

2、手动汇总和去除环路

[R1-bgp]aggregate 192.168.0.0 22 [R1-bgp]AG [R1-bgp]aggregate 192.168.0.0 22 DE [R1-bgp]aggregate 192.168.0.0 22 detail-suppressed [R1-bgp]aggregate 192.168.0.0 22 as-set ---需要在聚合是添加关键字
[R8-bgp]aggregate 192.168.0.0 22 [R8-bgp]aggregate 192.168.0.0 22 d [R8-bgp]aggregate 192.168.0.0 22 detail-suppressed

八、查看是否可以通过bgp协议互相访问