企业官网建设流程全解析

一 网络拓扑

如上图所示，分支属于AS100，R1和R2属于AS200，总部属于AS300，通过BGP Prefre-Value属性实现如下需求：

分支所有地址访问总部192.168.2.1走分支——R1——总部；

分支所有地址访问总部192.168.12.1走分支——R2——总部；

总部所有地址访问分支192.168.1.1走总部——R1——分支；

总部所有地址访问分支192.168.11.1走总部——R2——分支；

总结：Weight本地生成路由默认 32768，学习到的路由默认 0，数值越大越优，仅设备本地有效不传递给邻居。

二 设备配置

2.1 FZ-分支设备配置+路由策略

hostname FZ-R

!

ip access-list extended 101

10 permit ip host 192.168.2.1 any

!

ip access-list extended 102

10 permit ip host 192.168.12.1 any

!

route-map 10 permit 10

match ip address 101

set weight 188

!

route-map 10 permit 20

!

route-map 20 permit 10

match ip address 102

set weight 199

!

route-map 20 permit 20

!

interface GigabitEthernet 0/0

ip address 1.1.1.1 255.255.255.0

!

interface GigabitEthernet 0/1

ip address 2.2.2.1 255.255.255.0

!

interface Loopback 1

ip address 192.168.1.1 255.255.255.255

!

interface Loopback 2

ip address 192.168.11.1 255.255.255.255

!

router bgp 100

bgp log-neighbor-changes

bgp graceful-restart restart-time 120

bgp graceful-restart stalepath-time 360

bgp graceful-restart

neighbor 1.1.1.2 remote-as 200

neighbor 2.2.2.2 remote-as 200

address-family ipv4

network 192.168.1.1 mask 255.255.255.255

network 192.168.11.1 mask 255.255.255.255

neighbor 1.1.1.2 activate

neighbor 1.1.1.2 route-map 10 in

neighbor 2.2.2.2 activate

neighbor 2.2.2.2 route-map 20 in

exit-address-family

!

2.2 ZB-总部设备配置+路由策略

hostname ZB-R

!

ip access-list extended 102

10 permit ip host 192.168.11.1 any

!

interface GigabitEthernet 0/0

ip address 4.4.4.1 255.255.255.0

!

route-map 10 permit 10

match ip address 101

set weight 188

!

route-map 10 permit 20

!

route-map 20 permit 10

match ip address 102

set weight 199

!

route-map 20 permit 20

!

ip access-list extended 101

10 permit ip host 192.168.1.1 any

!

interface GigabitEthernet 0/1

ip address 3.3.3.1 255.255.255.0

!

interface Loopback 1

ip address 192.168.2.1 255.255.255.255

!

interface Loopback 2

ip address 192.168.12.1 255.255.255.255

!

router bgp 300

bgp log-neighbor-changes

bgp graceful-restart restart-time 120

bgp graceful-restart stalepath-time 360

bgp graceful-restart

neighbor 3.3.3.2 remote-as 200

neighbor 4.4.4.2 remote-as 200

address-family ipv4

network 192.168.2.1 mask 255.255.255.255

network 192.168.12.1 mask 255.255.255.255

neighbor 3.3.3.2 activate

neighbor 3.3.3.2 route-map 10 in

neighbor 4.4.4.2 activate

neighbor 4.4.4.2 route-map 20 in

exit-address-family

!

2.3 R1设备配置

hostname R1

!

interface GigabitEthernet 0/0

ip address 1.1.1.2 255.255.255.0

!

interface GigabitEthernet 0/1

ip address 3.3.3.2 255.255.255.0

!

router bgp 200

bgp log-neighbor-changes

bgp graceful-restart restart-time 120

bgp graceful-restart stalepath-time 360

bgp graceful-restart

neighbor 1.1.1.1 remote-as 100

neighbor 3.3.3.1 remote-as 300

address-family ipv4

neighbor 1.1.1.1 activate

neighbor 3.3.3.1 activate

exit-address-family

!

2.4 R2设备配置

hostname R2

!

interface GigabitEthernet 0/0

ip address 4.4.4.2 255.255.255.0

!

interface GigabitEthernet 0/1

ip address 2.2.2.2 255.255.255.0

!

router bgp 200

bgp log-neighbor-changes

bgp graceful-restart restart-time 120

bgp graceful-restart stalepath-time 360

bgp graceful-restart

neighbor 2.2.2.1 remote-as 100

neighbor 4.4.4.1 remote-as 300

address-family ipv4

neighbor 2.2.2.1 activate

neighbor 4.4.4.1 activate

exit-address-family

!

三 业务测试

3.1配置路由策略前业务测试-访问路径随机

3.1.1分支访问路径查看

FZ-R#traceroute 192.168.2.1 source 192.168.1.1

< press Ctrl+C to break >

Tracing the route to 192.168.2.1

1 1.1.1.2 3 msec <1 msec 1 msec

2 1.1.1.2 <1 msec

192.168.2.1 3 msec <1 msec

FZ-R#

FZ-R#traceroute 192.168.2.1 source 192.168.11.1

< press Ctrl+C to break >

Tracing the route to 192.168.2.1

1 1.1.1.2 2 msec <1 msec 2 msec

2 1.1.1.2 <1 msec

192.168.2.1 3 msec <1 msec

FZ-R#

FZ-R#traceroute 192.168.12.1 source 192.168.1.1

< press Ctrl+C to break >

Tracing the route to 192.168.12.1

1 1.1.1.2 2 msec <1 msec 1 msec

2 192.168.12.1 6 msec 3 msec 5 msec

FZ-R#

FZ-R#traceroute 192.168.12.1 source 192.168.11.1

< press Ctrl+C to break >

Tracing the route to 192.168.12.1

1 1.1.1.2 4 msec 1 msec 6 msec

2 192.168.12.1 11 msec 11 msec 10 msec

FZ-R#

3.1.2总部访问路径查看

ZB-R#traceroute 192.168.1.1 source 192.168.2.1

< press Ctrl+C to break >

Tracing the route to 192.168.1.1

1 3.3.3.2 3 msec <1 msec <1 msec

2 3.3.3.2 <1 msec

192.168.1.1 6 msec 2 msec

ZB-R#

ZB-R#traceroute 192.168.11.1 source 192.168.2.1

< press Ctrl+C to break >

Tracing the route to 192.168.11.1

1 3.3.3.2 1 msec <1 msec <1 msec

2 3.3.3.2 <1 msec <1 msec

192.168.11.1 4 msec

ZB-R#

ZB-R#traceroute 192.168.1.1 source 192.168.12.1

< press Ctrl+C to break >

Tracing the route to 192.168.1.1

1 3.3.3.2 2 msec <1 msec 2 msec

2 192.168.1.1 4 msec 5 msec 4 msec

ZB-R#

ZB-R#

ZB-R#traceroute 192.168.11.1 source 192.168.12.1

< press Ctrl+C to break >

Tracing the route to 192.168.11.1

1 3.3.3.2 2 msec 1 msec <1 msec

2 3.3.3.2 1 msec <1 msec

192.168.11.1 7 msec

ZB-R#

3.2配置路由策略后业务测试-实现功能

3.2.1分支访问路径查看

FZ-R#traceroute 192.168.2.1 source 192.168.1.1

< press Ctrl+C to break >

Tracing the route to 192.168.2.1

1 1.1.1.2 1 msec 1 msec <1 msec

2 1.1.1.2 <1 msec <1 msec

192.168.2.1 5 msec

FZ-R#

FZ-R#traceroute 192.168.12.1 source 192.168.1.1

< press Ctrl+C to break >

Tracing the route to 192.168.12.1

1 2.2.2.2 1 msec 2 msec <1 msec

2 2.2.2.2 <1 msec <1 msec

192.168.12.1 6 msec

FZ-R#

FZ-R#traceroute 192.168.2.1 source 192.168.11.1

< press Ctrl+C to break >

Tracing the route to 192.168.2.1

1 1.1.1.2 1 msec <1 msec <1 msec

2 1.1.1.2 <1 msec

192.168.2.1 3 msec 3 msec

FZ-R#

FZ-R#traceroute 192.168.12.1 source 192.168.11.1

< press Ctrl+C to break >

Tracing the route to 192.168.12.1

1 2.2.2.2 2 msec <1 msec 3 msec

2 192.168.12.1 3 msec 2 msec 3 msec

FZ-R#

3.2.2总部访问路径查看

ZB-R#traceroute 192.168.1.1 source 192.168.2.1

< press Ctrl+C to break >

Tracing the route to 192.168.1.1

1 3.3.3.2 2 msec <1 msec <1 msec

2 3.3.3.2 <1 msec <1 msec <1 msec

3 192.168.1.1 <1 msec 6 msec 3 msec

ZB-R#

ZB-R#traceroute 192.168.11.1 source 192.168.2.1

< press Ctrl+C to break >

Tracing the route to 192.168.11.1

1 4.4.4.2 1 msec <1 msec 2 msec

2 4.4.4.2 <1 msec

192.168.11.1 4 msec <1 msec

ZB-R#

ZB-R#traceroute 192.168.1.1 source 192.168.12.1

< press Ctrl+C to break >

Tracing the route to 192.168.1.1

1 3.3.3.2 2 msec 1 msec <1 msec

2 3.3.3.2 <1 msec <1 msec

192.168.1.1 3 msec

ZB-R#

ZB-R#traceroute 192.168.11.1 source 192.168.12.1

< press Ctrl+C to break >

Tracing the route to 192.168.11.1

1 4.4.4.2 1 msec <1 msec 1 msec

2 4.4.4.2 <1 msec <1 msec <1 msec

3 192.168.11.1 6 msec 2 msec 2 msec

ZB-R#

四 路由查看

4.1配置路由策略前路由查看

4.1.1分支路由查看

FZ-R#show ip route bgp

B 192.168.2.1/32 [20/0] via 1.1.1.2, 00:06:51

B 192.168.12.1/32 [20/0] via 1.1.1.2, 00:06:51

FZ-R#

FZ-R#show ip route

Codes:C - Connected, L - Local, S - Static

R - RIP, O - OSPF, B - BGP, I - IS-IS, V - Overflow route

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

SU - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

IA - Inter area, EV - BGP EVPN, A - Arp to host

LA - Local aggregate route

* - candidate default

Gateway of last resort is no set

C1.1.1.0/24 is directly connected, GigabitEthernet 0/0

C1.1.1.1/32 is local host.

C2.2.2.0/24 is directly connected, GigabitEthernet 0/1

C2.2.2.1/32 is local host.

C192.168.1.1/32 is local host.

B 192.168.2.1/32 [20/0] via 1.1.1.2, 00:08:11

C192.168.11.1/32 is local host.

B 192.168.12.1/32 [20/0] via 1.1.1.2, 00:08:11

FZ-R#

FZ-R#show bgp all

For address family: IPv4 Unicast

BGP table version is 2, local router ID is 192.168.11.1

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

S Stale, b - backup entry, m - multipath, f Filter, a additional-path

Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>192.168.1.1/32 0.0.0.0 0 32768 i

*b192.168.2.1/32 2.2.2.2 0 0 200 300 i

*> 1.1.1.2 0 0 200 300 i

*>192.168.11.1/32 0.0.0.0 0 32768 i

*b192.168.12.1/32 2.2.2.2 0 0 200 300 i

*> 1.1.1.2 0 0 200 300 i

Total number of prefixes 4

FZ-R#

注意：*>为主路由，*b为备份路由。

4.1.2总部路由查看

ZB-R#show ip route bgp

B 192.168.1.1/32 [20/0] via 3.3.3.2, 00:13:02

B 192.168.11.1/32 [20/0] via 3.3.3.2, 00:13:02

ZB-R#

ZB-R#show ip route

Codes:C - Connected, L - Local, S - Static

R - RIP, O - OSPF, B - BGP, I - IS-IS, V - Overflow route

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

SU - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

IA - Inter area, EV - BGP EVPN, A - Arp to host

LA - Local aggregate route

* - candidate default

Gateway of last resort is no set

C3.3.3.0/24 is directly connected, GigabitEthernet 0/1

C3.3.3.1/32 is local host.

C4.4.4.0/24 is directly connected, GigabitEthernet 0/0

C4.4.4.1/32 is local host.

B 192.168.1.1/32 [20/0] via 3.3.3.2, 00:13:15

C192.168.2.1/32 is local host.

B 192.168.11.1/32 [20/0] via 3.3.3.2, 00:13:15

C192.168.12.1/32 is local host.

ZB-R#

ZB-R#show bgp all

For address family: IPv4 Unicast

BGP table version is 2, local router ID is 192.168.12.1

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

S Stale, b - backup entry, m - multipath, f Filter, a additional-path

Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*b192.168.1.1/32 4.4.4.2 0 0 200 100 i

*> 3.3.3.2 0 0 200 100 i

*>192.168.2.1/32 0.0.0.0 0 32768 i

*b192.168.11.1/32 4.4.4.2 0 0 200 100 i

*> 3.3.3.2 0 0 200 100 i

*>192.168.12.1/32 0.0.0.0 0 32768 i

Total number of prefixes 4

ZB-R#

注意：*>为主路由，*b为备份路由。

4.2配置路由策略后路由查看

4.2.1分支路由查看

FZ-R#show ip rou bgp

B 192.168.2.1/32 [20/0] via 1.1.1.2, 00:14:27

B 192.168.12.1/32 [20/0] via 2.2.2.2, 00:14:12

FZ-R#

FZ-R#

FZ-R#show ip route

Codes:C - Connected, L - Local, S - Static

R - RIP, O - OSPF, B - BGP, I - IS-IS, V - Overflow route

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

SU - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

IA - Inter area, EV - BGP EVPN, A - Arp to host

LA - Local aggregate route

* - candidate default

Gateway of last resort is no set

C1.1.1.0/24 is directly connected, GigabitEthernet 0/0

C1.1.1.1/32 is local host.

C2.2.2.0/24 is directly connected, GigabitEthernet 0/1

C2.2.2.1/32 is local host.

C192.168.1.1/32 is local host.

B 192.168.2.1/32 [20/0] via 1.1.1.2, 00:14:32

C192.168.11.1/32 is local host.

B 192.168.12.1/32 [20/0] via 2.2.2.2, 00:14:17

FZ-R#

FZ-R#show bgp all

For address family: IPv4 Unicast

BGP table version is 4, local router ID is 192.168.11.1

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

S Stale, b - backup entry, m - multipath, f Filter, a additional-path

Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>192.168.1.1/32 0.0.0.0 0 32768 i

*b192.168.2.1/32 2.2.2.2 0 0 200 300 i

*> 1.1.1.2 0 188 200 300 i

*>192.168.11.1/32 0.0.0.0 0 32768 i

*> 192.168.12.1/32 2.2.2.2 0 199 200 300 i

*b 1.1.1.2 0 0 200 300 i

Total number of prefixes 4

FZ-R#

注意：*>为主路由，*b为备份路由。

4.2.2总部路由查看

ZB-R#show ip route bgp

B 192.168.1.1/32 [20/0] via 3.3.3.2, 00:17:10

B 192.168.11.1/32 [20/0] via 4.4.4.2, 00:18:01

ZB-R#show ip route

Codes:C - Connected, L - Local, S - Static

R - RIP, O - OSPF, B - BGP, I - IS-IS, V - Overflow route

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

SU - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

IA - Inter area, EV - BGP EVPN, A - Arp to host

LA - Local aggregate route

* - candidate default

Gateway of last resort is no set

C3.3.3.0/24 is directly connected, GigabitEthernet 0/1

C3.3.3.1/32 is local host.

C4.4.4.0/24 is directly connected, GigabitEthernet 0/0

C4.4.4.1/32 is local host.

B 192.168.1.1/32 [20/0] via 3.3.3.2, 00:05:55

C192.168.2.1/32 is local host.

B 192.168.11.1/32 [20/0] via 4.4.4.2, 00:06:46

C192.168.12.1/32 is local host.

ZB-R#

ZB-R#show bgp all

For address family: IPv4 Unicast

BGP table version is 15, local router ID is 192.168.12.1

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

S Stale, b - backup entry, m - multipath, f Filter, a additional-path

Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*b192.168.1.1/32 4.4.4.2 0 0 200 100 i

*> 3.3.3.2 0 188 200 100 i

*>192.168.2.1/32 0.0.0.0 0 32768 i

*> 192.168.11.1/32 4.4.4.2 0 199 200 100 i

*b 3.3.3.2 0 0 200 100 i

*>192.168.12.1/32 0.0.0.0 0 32768 i

Total number of prefixes 4

ZB-R#

注意：*>为主路由，*b为备份路由。

五 路由策略配置总结

5.1分支路由器配置

!

ip access-list extended 101

10 permit ip host 192.168.2.1 any

!

ip access-list extended 102

10 permit ip host 192.168.12.1 any

!

route-map 10 permit 10

match ip address 101

set weight 188

!

route-map 10 permit 20

!

route-map 20 permit 10

match ip address 102

set weight 199

!

route-map 20 permit 20

!

router bgp 100

bgp log-neighbor-changes

bgp graceful-restart restart-time 120

bgp graceful-restart stalepath-time 360

bgp graceful-restart

neighbor 1.1.1.2 remote-as 200

neighbor 2.2.2.2 remote-as 200

address-family ipv4

network 192.168.1.1 mask 255.255.255.255

network 192.168.11.1 mask 255.255.255.255

neighbor 1.1.1.2 activate

neighbor 1.1.1.2 route-map 10 in

neighbor 2.2.2.2 activate

neighbor 2.2.2.2 route-map 20 in

exit-address-family

!

5.2总部路由器配置

!

ip access-list extended 101

10 permit ip host 192.168.1.1 any

!

ip access-list extended 102

10 permit ip host 192.168.11.1 any

!

route-map 10 permit 10

match ip address 101

set weight 188

!

route-map 10 permit 20

!

route-map 20 permit 10

match ip address 102

set weight 199

!

route-map 20 permit 20

!

router bgp 300

bgp log-neighbor-changes

bgp graceful-restart restart-time 120

bgp graceful-restart stalepath-time 360

bgp graceful-restart

neighbor 3.3.3.2 remote-as 200

neighbor 4.4.4.2 remote-as 200

address-family ipv4

network 192.168.2.1 mask 255.255.255.255

network 192.168.12.1 mask 255.255.255.255

neighbor 3.3.3.2 activate

neighbor 3.3.3.2 route-map 10 in

neighbor 4.4.4.2 activate

neighbor 4.4.4.2 route-map 20 in

exit-address-family

!