一、技术介绍
使用BGP协议要将两个网络建立邻居关系,因为卫星走的是单向链路,不能建立起邻居关系,为了使BGP协议建立起邻居关系,我们在路由器中使用了代表路由器本身地址的环路地址,环路地址是逻辑地址, 这样在BGP要建立邻居是路由器间均使用环路地址,因为环路地址是双向的。
在建立BGP动态路由时,要使路由器间处在一个自治域中,建立邻居路由更新从环路地址更新。
由于BGP生成动态协议是建立在TCP的基础上,它通过环路地址的邻居关系建立双向握手,从而生成动态路由,它的级别是200,所以ISDN备份的动态路由级别要大于200,级别越大优先级越低。
策略路由在主站和小站之间都不是不须的,为了使配置易于理解,建议配置策略路由。
在BGP发出握手请求时,要有一条路由到达对方路由器,我们的配置中使用默认路由到达DBN24 (如果没有默认路由必须增加到对方环路地址的静态路有),所以在DBN24上要添加到对方(远程小站路由器)环路地址的静态路由。
远程小站路由器也必须配置一条到达主站环路地址的静态路由(如果小站没有默认路由)。
二、配置
路由器中建立环路地址:
Interface loopbackup 0Ip address 172.31.254.1 255.255.255.0
路由器中建立BGP 自治域:
Router bgp 65500Network 172.16.5.0 mask 255.255.255.0 (本地网络) Network 172.16.6.0 mask 255.255.255.0 (本地网络) Neighbor 172.25.10.1 remote-as 65500 (使邻居在同一个自治域) Neighbor 172.25.10.1 update-source loopback0(设置邻居更新在环路接口0) Neighbor 172.25.10.1 route-map jinhua in (使用策略路由)
策略路由样例:
route-map jinhua permit 5macth ip address 30set ip next-hop 172.16.5.200
策略路由观察的访问列表:
access-list 30 permit ip 172.19.10.0 0.0.0.255
三、容易忽略的地方及问题
1、容易忽略的地方是:在路由器中有了路由,因为路由是到dbn24的,所以不能忘了在dbn24中的各远程点路由部分增加到对方环路地址的路由。
2、问题1:bgp中的network地址指的是什么地址?
答 :network地址指的是与邻居网络能建立通信的地址,在本网络中指本地两个网段地址。
3、问题2:为什么邻居与本地网络必须配置在同一个自治域内?
答:不在一个自治域的路由器必须是直接相联的才可以互相通信。
4、问题3:路由表中配置了默认路由,同时还有浮动静态ISDN路由,级别是201,那么静态路由比默认路由级别高,为什么在建立TCP会话中不使用浮动静态路由,而使用默认路由。
答:因为在BGP建立握手时,它寻找的目标地址是对方的环路地址,而ISDN的目标地址是对方的以太口地址,所以建立TCP握手使用默认路由(也可以设置一条指向对方环路地址的静态路由,级别明显高于ISDN路由,易于理解)。BGP建立动态路由的级别是200,在建立TCP握手后,它生成的路由表也是指向对方以太口地址,但它的优先级高于ISDN设置的路由级别201,而禁止ISDN路由生效,如果不能建立起指向对方以太口的BGP动态路由,那么在主站与小站的连接时,就是启用ISDN路由,引起ISDN拨号。
5、问题4:为什么配置串口的时候,必须加上ignore-dcd、no keepalive、ip igmp unidirectional-link、ip multicast ttl-threshold 14、ip pim dense-mode、ip igmp static-group 239.16.5.144.
答:因为在卫星链路中路由器串口不发送cd信号必须忽略,keepalive是指第二层的保持活动协议,如果让keepalive生效,那么它将监测某一链路的第二层双向是否保持活动,由于卫星链路在串口是单向的(小站指向主站),它将会是串口down掉,ip igmp unidirectional-link标示串口是单向链路,ip multicast ttl-threshold 14标示让小站的组播包的默认ttl-threshold为14,而让小站的组播包不至于未到主站就被丢失,也不能设大于14的值。ip pim dense-mode启用协议无关组播协议,ip igmp static-group 239.16.5.144标示小站的路由器加入239.16.5.144组播组。
四、BGP是否生效查询
1、使用命令:show ip bgp neighbors 查询bgp 状态。
tongji#sh ip bgp neighbors BGP neighbor is 172.25.10.1, remote AS 65500, internal linkBGP version 4, remote router ID 172.25.10.1BGP state = Established, up for 00:41:10Last read 00:00:11, hold time is 180, keepalive interval is 60 secondsNeighbor capabilities:Route refresh: advertised and received(new)Address family IPv4 Unicast: advertised and receivedReceived 1763 messages, 0 notifications, 0 in queueSent 1766 messages, 0 notifications, 0 in queueRoute refresh request: received 0, sent 0Default minimum time between advertisement runs is 5 secondsFor address family: IPv4 UnicastBGP table version 4, neighbor version 4Index 1, Offset 0, Mask 0x21 accepted prefixes consume 36 bytesPrefix advertised 6, suppressed 0, withdrawn 2Number of NLRIs in the update sent: max 2, min 0Connections established 3; dropped 2Last reset 00:41:43, due to User resetConnection state is ESTAB, I/O status: 1, unread input bytes: 0Local host: 172.31.254.1, Local port: 179Foreign host: 172.25.10.1, Foreign port: 11045 Enqueued packets for retransmit: 0, input: 0 mis-ordered: 0 (0 bytes)Event Timers (current time is 0x644BFAC):Timer Starts Wakeups NextRetrans 48 1 0x0TimeWait 0 0 0x0AckHold 45 39 0x0SendWnd 0 0 0x0KeepAlive 0 0 0x0GiveUp 0 0 0x0PmtuAger 0 0 0x0DeadWait 0 0 0x0iss: 1548750689 snduna: 1548751630 sndnxt: 1548751630 sndwnd: 15985irs: 127891366 rcvnxt: 127892303 rcvwnd: 15985 delrcvwnd: 399SRTT: 771 ms, RTTO: 806 ms, RTV: 35 ms, KRTT: 0 msminRTT: 568 ms, maxRTT: 1032 ms, ACK hold: 200 msFlags: passive open, nagle, gen tcbsDatagrams (max data segment is 536 bytes):Rcvd: 90 (out of order: 0), with data: 45, total data bytes: 936Sent: 87 (retransmit: 1, fastretransmit: 0), with data: 46, total data bytes: 9402、使用命令:show ip route (注意黑体)tongji#sh ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGPD - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGPi - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area* - candidate default, U - per-user static route, o - ODRP - periodic downloaded static routeGateway of last resort is 172.16.5.200 to network 0.0.0.0172.16.0.0/24 is subnetted, 7 subnetsC 172.16.4.0 is directly connected, FastEthernet0/0.4C 172.16.5.0 is directly connected, FastEthernet0/0.5C 172.16.6.0 is directly connected, FastEthernet0/0.6C 172.16.1.0 is directly connected, FastEthernet0/0.1C 172.16.2.0 is directly connected, FastEthernet0/0.2C 172.16.3.0 is directly connected, FastEthernet0/0.3S 172.16.100.0 [1/0] via 172.16.5.200172.19.0.0/16 is variably subnetted, 11 subnets, 2 masksB 172.19.10.0/24 [200/0] via 172.25.10.1 00:57:53C 172.19.101.24/30 is directly connected, Serial4/2C 172.19.101.28/30 is directly connected, Serial4/3C 172.19.101.16/30 is directly connected, Serial4/0C 172.19.101.20/30 is directly connected, Serial4/1C 172.19.101.8/30 is directly connected, Serial3/2C 172.19.101.12/30 is directly connected, Serial3/3C 172.19.101.0/30 is directly connected, Serial3/0C 172.19.101.4/30 is directly connected, Serial3/1C 172.19.101.32/30 is directly connected, Serial5/0C 172.19.101.36/30 is directly connected, Serial5/1172.20.0.0/24 is subnetted, 1 subnetsS 172.20.2.0 [1/0] via 10.0.20.2172.31.0.0/24 is subnetted, 1 subnetsC 172.31.254.0 is directly connected, Loopback0203.91.153.0/29 is subnetted, 1 subnetsC 203.91.153.240 is directly connected, FastEthernet0/0.5210.74.232.0/32 is subnetted, 1 subnetsS 210.74.232.178 [1/0] via 172.16.1.2810.0.0.0/24 is subnetted, 2 subnetsC 10.0.20.0 is directly connected, Dialer20C 10.0.254.0 is directly connected, Dialer10S* 0.0.0.0/0 [1/0] via 172.16.5.200S 192.168.0.0/16 [1/0] via 172.16.1.253S 202.120.176.0/20 [1/0] via 172.16.1.253
3、 更改bgp后,必须更新,使用命令:
clear ip bgp *