1.网络拓扑
2.现状
路由器与核心交换机为BGP互联,核心交换机与汇聚交换机为静态路由互联
1)路由器当前配置
isis 1 cost-style wide set-att never ignore-att network-entity 03.0100.0320.8255.00 interface LoopBack0 ip address 10.3.208.255 255.255.255.255 isis enable 1 interface GigabitEthernet0/3 port link-mode route ip address 10.3.210.1 255.255.255.252 isis enable 1 isis circuit-type p2p
bgp 65003 group core internal peer core connect-interface LoopBack0 peer core password cipher $c$3$sYDsvTPylfCDtz4ZswhVrWm7xGu/c3uifUq/Qv3x5Ic= peer 10.3.208.1 group core # address-family ipv4 unicast preference 20 200 200 aggregate 10.3.0.0 255.255.0.0 peer core enable peer core default-route-advertise peer core next-hop-local
2)核心交换机当前配置
isis 1 cost-style wide set-att never ignore-att network-entity 03.0100.0320.8001.00 interface LoopBack0 ip address 10.3.208.1 255.255.255.255 isis enable 1 interface GigabitEthernet2/0/19 port link-mode route description to_RT ip address 10.3.210.2 255.255.255.252 isis enable 1 isis circuit-type p2p
bgp 65003 router-id 10.3.208.1 peer 10.3.208.255 as-number 65003 peer 10.3.208.255 connect-interface LoopBack0 peer 10.3.208.255 password cipher $c$3$h3AgA9cG9rkMiCm78jWiUvILrsNG3WxSBSbeFbwDMvI= # address-family ipv4 unicast preference 20 200 200 network 10.3.5.0 255.255.255.0 network 10.3.6.0 255.255.255.0 network 10.3.209.0 255.255.255.252 network 10.3.211.0 255.255.255.248 network 10.3.212.0 255.255.255.252
peer 10.3.208.255 enable peer 10.3.208.255 reflect-client
静态回指:
ip route-static 10.3.5.0 24 10.3.212.2
3)汇聚交换机当前配置
ip route-static 0.0.0.0 0 10.3.212.1
3.变更核心和汇聚的互联为ISIS加BGP
1)核心交换机配置
interface Vlan-interface312 description To_5# ip address 10.3.212.1 255.255.255.252 isis enable 1 isis circuit-type p2p bgp 65003 router-id 10.3.208.1 peer 10.3.208.51 as-number 65003 peer 10.3.208.51 connect-interface LoopBack0 peer 10.3.208.51 password cipher $c$3$565hZ1Wl3KMTRNTshYzX63UMgC8b3jLEGDd3a5jzum0=
删除核心上的BGP宣告网段,不然会优选本地network而不选从汇聚IBGP获取的。
使核心上的IBGP路由高于静态回指路由:修改静态路由的preference大于200。动态路由测试成功后可将静态路由删除。
2)汇聚交换机配置
isis 1 cost-style wide set-att never ignore-att network-entity 03.0100.0320.8051.00 interface LoopBack0 ip address 10.3.208.51 255.255.255.255 isis enable 1 int vlan 312 description to_core ip address 10.3.212.2 255.255.255.252 isis enable 1 isis circuit-type p2p bgp 65003 router-id 10.3.208.51 group core internal peer core connect-interface LoopBack0 peer core password cipher $c$3$OAX8o1gAOJ6IWWHDPc1HcWil6q+cMJKWdrO2lFQfmrE= peer 10.1.208.1 as-number 65001 peer 10.3.208.1 group core peer 10.1.208.1 as-number 65001(华为需配,H3C配上不报错,但是也不在dis cu里显示) address-family ipv4 unicast preference 20 200 200 network 10.3.5.0 255.255.255.0 peer core enable peer 10.3.208.1 group core(华为需配,H3C配上不报错,但是也不在dis cu里显示)
原创文章,作者:ItWorker,如若转载,请注明出处:https://blog.ytso.com/278718.html