HUAWEI BGP配置

1、配置BGP的基本实例
bgp 65008
router-id 172.17.1.1
peer 192.168.1.1 as-number 65009
ipv4-family unicast
undo synchronization
network 10.1.0.0 255.255.0.0
peer 192.168.1.1 enable

2、BGP与IGP交互实例
bgp 65009
router-id 10.2.2.2
peer 10.3.1.2 as-number 65008
ipv4-family unicast
undo synchronization
summary automatic
import-route ospf 1
peer 10.3.1.2 enable
#
ospf 1
import-route bgp
area 0.0.0.0
network 10.9.1.0 0.0.0.255

3、AS-PATH过滤实例
ip as-path-filter path-filter2 deny _10_
ip as-path-filter path-filter2 permit .*
bgp 20
router-id 172.16.2.2
peer 192.168.2.1 as-number 10
peer 192.168.3.2 as-number 30
ipv4-family unicast
undo synchronization
import-route direct
peer 192.168.3.2 enable
peer 192.168.3.2 as-path-filter path-filter2 export

4、BGP负载分担
bgp 100
router-id 172.16.1.1
peer 192.168.1.2 as-number 300
peer 192.168.2.2 as-number 300
ipv4-family unicast
undo synchronization
maximum load-balancing 2
peer 192.168.1.2 enable
peer 192.168.2.2 enable

5、配置BGP的MED属性
bgp 65009
router-id 172.16.2.2
peer 10.1.1.2 as-number 65009
peer 192.168.1.2 as-number 65008
ipv4-family unicast
undo synchronization
network 10.1.1.0 255.255.255.0
peer 10.1.1.2 enable
peer 192.168.1.2 enable
peer 192.168.1.2 route-policy 10 export
#
route-policy 10 permit node 10
apply cost 100

6、BGP的路由反射器
bgp 200
router-id 10.3.3.3
peer 10.10.20.1 as-number 200
peer 10.10.30.2 as-number 200
ipv4-family unicast
undo synchronization
network 10.10.20.0 255.255.255.0
network 10.10.30.0 255.255.255.0
peer 10.10.20.1 enable
peer 10.10.20.1 reflect-client
peer 10.10.30.2 enable
peer 10.10.30.2 reflect-client

7、BGP社团属性,本质:打标记(no-export)
no-export:收到一个bgp的路由带有no-export属性是这台路由器就不会再向EBGP对等体发送该路由了(针对联盟无效)
no-advertise:是不更新给任何邻居
local-AS:不更新出本A,对于联邦来说就是本联邦的AS,对于正常的AS来说就是自己本身AS号

bgp 10
router-id 172.16.1.1
peer 192.168.2.2 as-number 20
ipv4-family unicast
undo synchronization
network 10.1.1.0 255.255.255.0
peer 192.168.2.2 enable
peer 192.168.2.2 route-policy comm_policy export
peer 192.168.2.2 advertise-community
#
route-policy comm_policy permit node 10
apply community no-export

8、origin起源属性
IGP>EGP>Incomplete
IGP:为network方式宣告
EGP:外部网关协议BGP
incomplete:引入BGP的方式
bgp 65001
ipv4-family unicast
peer 10.1.3.2 route-policy for_d import
route-policy for_d permit node 10
apply origin incomplete

9、本地优先级(越大越优)
bgp 65001
ipv4-family unicast
peer 10.1.1.1 route-policy rp1 import

route-policy rp1 permit node 10
if-match ip-prefix addpref
apply local-preference 120
route-policy rp1 permit node 20
if-match ip-prefix reducepref
apply local-preference 80
route-policy rp1 permit node 30

ip ip-prefix addpref index 10 permit 10.11.0.0 16 //定义地址前缀列表,匹配路由10.11.0.0/16
ip ip-prefix reducepref index 10 permit 10.22.0.0 16

10、BGP的联盟实例
bgp 65001
router-id 172.16.1.1
confederation id 200 -----声明大的AS
confederation peer-as 65002 65003 ----声明小的AS
peer 10.1.1.2 as-number 65002
peer 10.1.2.2 as-number 65003
peer 10.1.3.2 as-number 65001
peer 10.1.4.2 as-number 65001
peer 192.168.1.2 as-number 100
#
ipv4-family unicast
undo synchronization
peer 10.1.1.2 enable
peer 10.1.1.2 next-hop-local -----ibgp邻居改为自身下一跳
peer 10.1.2.2 enable
peer 10.1.2.2 next-hop-local
peer 10.1.3.2 enable
peer 10.1.3.2 next-hop-local
peer 10.1.4.2 enable
peer 10.1.4.2 next-hop-local
peer 192.168.1.2 enable

11、BGP的缺省路由向某个邻居下发
peer 10.1.1.2 default-route-advertise

12、BGP与BFD联动功能
bfd
bgp 200
router-id 172.17.2.2
peer 10.1.1.2 as-number 200
peer 192.168.1.1 as-number 100
peer 192.168.1.1 bfd min-tx-interval 100 min-rx-interval 100 detect-multiplier 4
peer 192.168.1.1 bfd enable
#
ipv4-family unicast
undo synchronization
network 172.16.1.0 255.255.255.0
peer 192.168.1.1 enable

13、MP-BGP
执行命令ipv4-family unicast,进入BGP-IPv4单播地址族视图。
执行命令ipv4-family vpnv4,进入BGP-VPNv4地址族视图。
执行命令ipv4-family vpn-instance vpn-instance-name,进入BGP-VPN实例IPv4地址族视图。
执行命令ipv4-family multicast,进入BGP-IPv4组播地址族视图。
执行命令ipv6-family unicast,进入BGP-IPv6单播地址族视图。
执行命令ipv6-family vpnv6,进入BGP-VPNv6地址族视图。
执行命令ipv6-family vpn-instance vpn-instance-name,进入BGP-VPN实例IPv6地址族视图。

 

posted @ 2021-02-24 10:55  Me-lihu  阅读(1327)  评论(0编辑  收藏  举报