Isebenza njani iBGP

Namhlanje siza kujonga i-protocol ye-BGP. Asiyi kuthetha ixesha elide malunga nokuba kutheni kwaye kutheni isetyenziswa njengeprotocol kuphela. Kukho ulwazi oluninzi ngalo mbandela, umzekelo apha.

Ke yintoni iBGP? I-BGP yiprothokholi yomzila oguquguqukayo kwaye yiyo kuphela iprotocol ye-EGP (iProtocol yangaphandle yeSango). Le protocol isetyenziselwa ukwakha indlela kwi-Intanethi. Makhe sijonge indlela ebumelwaneni yakhiwe phakathi iirutha ezimbini BGP.

Isebenza njani iBGP
Qwalasela ubumelwane phakathi kwe-Router1 kunye ne-Router3. Masiziqwalasele ngokusebenzisa le miyalelo ilandelayo:

router bgp 10
  network 192.168.12.0
  network 192.168.13.0
  neighbor 192.168.13.3 remote-as 10

router bgp 10
  network 192.168.13.0
  network 192.168.24.0
  neighbor 192.168.13.1 remote-as 10

Ummelwane ngaphakathi kwenkqubo eyodwa yokuzimela yi-AS 10. Emva kokufaka ulwazi kwi-router, njenge-Router1, loo router izama ukuseka ubudlelwane obusondeleyo kunye ne-Router3. Imeko yokuqala xa kungekho nto yenzekayo ibizwa ngokuba Ezingabonakaliyo. Nje ukuba i-bgp iqwalaselwe kwi-Router1, iya kuqalisa ukumamela i-TCP port 179 - iya kurhulumente. Dibanisa, kwaye xa izama ukuvula iseshoni nge-Router3, iya kurhulumente esebenzayo.

Emva kokuba iseshoni isekiwe phakathi kwe-Router1 kunye ne-Router3, imiyalezo evuliwe iyatshintshwa. Xa lo myalezo uthunyelwe ngu-Router1, le meko iyakubizwa Vula iThunyelwe. Kwaye xa ifumana umyalezo ovulekileyo ovela kwi-Router3, iya kurhulumente Vula uQinisekiso. Makhe sijonge ngakumbi kumyalezo ovulekileyo:

Isebenza njani iBGP
Lo myalezo udlulisela ulwazi malunga neprotocol yeBGP ngokwayo, esebenzisa umzila. Ngokutshintshiselana ngemiyalezo evuliweyo, i-Router1 kunye ne-Router3 zinxibelelana ngolwazi malunga nesetingi enye kwenye. Ezi parameters zilandelayo zigqithisiwe:

  • inguqulelo: oku kuquka uguqulelo BGP ukuba umzila usebenzisa. Ushicilelo lwangoku lwe-BGP yinguqulo 4 echazwe kwi-RFC 4271. Iirutha ezimbini ze-BGP ziya kuzama ukuthetha-thethana ngoguqulelo oluhambelanayo, xa kukho ukungahambelani ngoko akuyi kubakho seshoni ye-BGP.
  • I-AS yam: oku kuquka inani AS ye BGP umzila, iirotha kuya kufuneka bavumelane kwi AS inombolo(s) kwaye kwakhona ichaza ukuba baya kuqhuba iBGP okanye eBGP.
  • Bamba ixesha: ukuba BGP ayifumani nayiphi na imiyalezo egciniweyo okanye uhlaziyo ukusuka kwelinye icala ixesha lexesha lokubamba ngoko iya kubhengeza elinye icala 'ufile' kwaye iya kudiliza iseshoni BGP. Ngokungagqibekanga ixesha lokubamba limiselwe kwimizuzwana eyi-180 kwiirutha zeCisco IOS, umyalezo wokugcina uthunyelwa rhoqo ngemizuzwana engama-60. Zombini iirouter kufuneka zivumelane ngexesha lokubamba okanye akuyi kubakho iseshoni ye-BGP.
  • Isichongi se-BGP: le yi-ID ye-BGP yomzila wengingqi onyulwe kanye njengoko i-OSPF isenza:
    • Sebenzisa i-ID yomzila-eye yaqwalaselwa ngesandla kunye nomyalelo we-bgp umzila-id.
    • Sebenzisa eyona dilesi ye-IP iphezulu kwi-loopback interface.
    • Sebenzisa eyona dilesi ye-IP iphezulu kujongano olubonakalayo.
  • Iiparamitha oziKhethekileyo: Apha uya kufumana ubunakho obunokuzikhethela bomzila we-BGP. Lo mmandla wongezwe ukuze iimpawu ezintsha zifakwe kwi-BGP ngaphandle kokwenza uguqulelo olutsha.Izinto onokuzifumana apha zezi:
    • inkxaso MP-BGP (Multi Protocol BGP).
    • inkxaso yoHlaziyo lweNdlela.
    • inkxaso 4-octet amanani AS.

Ukuseka indawo yokuhlala, le miqathango ilandelayo kufuneka ifezekiswe:

  • Inombolo yenguqulelo. Inguqulelo yangoku yi-4.
  • Inombolo ye-AS kufuneka ihambelane nento oyiqwalaseleyo ummelwane 192.168.13.3 kude-njengoko 10.
  • I-ID yomzila kufuneka yahluke kummelwane.

Ukuba nayiphi na iparameters ayikwanelisi le miqathango, i-router iya kuthumela Isaziso umyalezo obonisa impazamo. Emva kokuthumela nokufumana imiyalezo evulekileyo, ubudlelwane bobumelwane bungena kurhulumente ESENZIWA. Emva koku, ii-routers zinokutshintshiselana ngolwazi malunga neendlela kwaye zenze oku ngokusebenzisa Gqiba imiyalezo. Lo ngumyalezo woHlaziyo othunyelwe ngu-Router1 kwi-Router3:

Isebenza njani iBGP

Apha unokubona uthungelwano oluxelwe yi-Router1 kunye neempawu ze-Path, ezifana neemetrics. Siza kuthetha ngeempawu zeNdlela ngokweenkcukacha ngakumbi. Imiyalezo ye-Keepalive nayo ithunyelwa ngaphakathi kweseshoni ye-TCP. Ziyadluliselwa, ngokungagqibekanga, rhoqo ngemizuzwana engama-60. Esi siSibali-xesha seKeepalive. Ukuba umyalezo we-Keepalive awufunyanwanga ngexesha le-Hold Timer, oku kuya kuthetha ukulahlekelwa konxibelelwano nommelwane. Ngokungagqibekanga, ilingana nemizuzwana eyi-180.

Uphawu oluluncedo:

Isebenza njani iBGP

Kubonakala ngathi siye safumanisa indlela abahambisa ngayo ulwazi omnye komnye, ngoku makhe sizame ukuqonda ingqiqo ye-protocol ye-BGP.

Ukubhengeza indlela eya kwitafile ye-BGP, njengoko kwiiprothokholi ze-IGP, umyalelo wothungelwano uyasetyenziswa, kodwa ingqiqo yokusebenza yahlukile. Ukuba kwi-IGP, emva kokuchaza indlela kumyalelo womnatha, i-IGP ijonga ukuba yeyiphi i-interfaces yale subnet kwaye ibandakanya kwitafile yayo, ngoko umyalelo womnatha kwi-BGP ujonge kwitafile yokujonga kwaye ujonge ngqo ihambelana nendlela ekumyalelo wothungelwano. Ukuba ezinjalo zifunyenwe, ezi ndlela ziya kuvela kwitafile ye BGP.

Khangela indlela kwitheyibhile ye-IP yangoku ye-IP ehambelana ngokuchanekileyo neparameters yomyalelo wothungelwano; ukuba indlela ye IP ikhona, faka i NLRI elinganayo kwitafile ye BGP yobulali.

Ngoku masiphakamise i-BGP kubo bonke abaseleyo kwaye sibone indlela ekhethwa ngayo indlela phakathi kwe-AS enye. Emva kokuba i-router ye-BGP ifumana iindlela kummelwane wayo, iqala ukukhetha eyona ndlela ilungileyo. Apha kufuneka uqonde ukuba luhlobo luni lwabamelwane olunokubakho - lwangaphakathi nangaphandle. Ngaba i-router iyaqonda ngokucwangcisa ukuba ummelwane omiselweyo ungaphakathi okanye ngaphandle? Ukuba kwiqela:

neighbor 192.168.13.3 remote-as 10 

i-remote-njengoko ipharamitha ichaza i-AS, elungiselelwe kwi-router ngokwayo ku-router bgp umyalelo we-10. Iindlela ezivela kwi-AS yangaphakathi zibhekwa zangaphakathi, kwaye iindlela ezivela kwi-AS yangaphandle zibhekwa zangaphandle. Kwaye nganye, ingqiqo eyahlukileyo yokufumana kunye nokuthumela imisebenzi. Qwalasela le topology:

Isebenza njani iBGP

I-router nganye ine-interface ye-loopback iqwalaselwe kunye ne-ip: xxxx 255.255.255.0 - apho i-x yinombolo yomzila. Kwi-Router9 sine-loopback interface kunye nedilesi - 9.9.9.9 255.255.255.0. Siza kubhengeza nge-BGP kwaye sibone ukuba isasazeka njani. Le ndlela iyakuthunyelwa kwi-Router8 kunye ne-Router12. Ukusuka kwi-Router8, le ndlela iya kwi-Router6, kodwa ukuya kwi-Router5 ayiyi kuba kwitafile yomzila. Kwakhona kwi-Router12 le ndlela iya kuvela etafileni, kodwa kwi-Router11 ayizubakho nayo. Makhe sizame ukuqonda oku. Makhe siqwalasele ukuba yeyiphi idatha kunye neeparamitha i-Router9 ihambisa kubamelwane bayo, inika ingxelo ngale ndlela. Ipakethi engezantsi iya kuthunyelwa ukusuka kwi-Router9 ukuya kwi-Router8.

Isebenza njani iBGP
Ulwazi lwendlela lubandakanya iimpawu zeNdlela.

Iimpawu zendlela zohlulwe ngokweendidi ezi-4:

  1. Isinyanzelo esaziwayo - Zonke iirotha ezisebenzisa i-BGP kufuneka ziqaphele ezi mpawu. Kufuneka ibekho kulo lonke uhlaziyo.
  2. I-discretionary eyaziwayo - Zonke iirotha ezisebenzisa i-BGP kufuneka ziqaphele ezi mpawu. Basenokubakho kuhlaziyo, kodwa ubukho babo abufuneki.
  3. Ukhetho lokutshintshela - ayinakuqatshelwa kuzo zonke ukuphunyezwa kwe-BGP. Ukuba i-router ayiqapheli uphawu, iphawula ukuhlaziywa njengenxalenye kwaye iyithumele kubamelwane bayo, igcina uphawu olungaziwayo.
  4. Ukhetho olungaguqukiyo - ayinakuqatshelwa kuzo zonke ukuphunyezwa kwe-BGP. Ukuba i-router ayiqapheli uphawu, ngoko uphawu aluhoywa kwaye lulahlwe xa ludluliselwa kubamelwane.

Imizekelo yeempawu zeBGP:

  • Isinyanzelo esaziwayo:
    • Indlela yenkqubo yokuzimela
    • Okulandelayo-hop
    • imvelaphi

  • I-discretionary eyaziwayo:
    • Ukhetho lwasekuhlaleni
    • Atomic aggregate
  • Ukhetho lokutshintshela:
    • I-aggregator
    • Abantu
  • Ukhetho olungaguqukiyo:
    • Umcaluli wokuphuma okuninzi (MED)
    • Isazisi somsunguli
    • Uluhlu lweqela

Kule meko, okwangoku siya kuba nomdla kwiMvelaphi, i-Next-hop, i-AS Path. Ekubeni indlela idlulisa phakathi kwe-Router8 kunye ne-Router9, oko kukuthi, ngaphakathi kwe-AS enye, ithathwa njengengaphakathi kwaye siya kunika ingqalelo kwi-Origin.

Uphawu lwemvelaphi - lubonisa indlela efunyenwe ngayo indlela ekuhlaziyweni. Iimpawu zoyelelwano olunokwenzeka:

  • I-0 - IGP: I-NLRI ifunyenwe ngaphakathi kwenkqubo yokuzimela yoqobo;
  • I-1 - EGP: I-NLRI ifundwa kusetyenziswa iProtocol yeSango sangaphandle (EGP). Umanduleli ukuya BGP, ayisetyenziswa
  • I-2 - Ayigqitywanga: I-NLRI yafundwa ngenye indlela

Kwimeko yethu, njengoko kunokubonwa kwipakethe, ilingana no-0. Xa le ndlela idluliselwa kwi-Router12, le khowudi iya kuba nekhowudi ye-1.

Okulandelayo, Next-hop. Uphawu olulandelayo lwe-hop

  • Le yidilesi ye-IP ye-eBGP umzila apho umendo wothungelwano lwendawo uya kuyo.
  • Uphawu loyelelwano luyatshintsha xa isimaphambili sithunyelwa kwenye i-AS.

Kwimeko ye-iBGP, oko kukuthi, ngaphakathi kwe-AS enye, i-Next-hop iya kuboniswa ngulowo ufundileyo okanye uxelelwe ngale ndlela. Kwimeko yethu, iya kuba yi-192.168.89.9. Kodwa xa le ndlela igqithiselwa ukusuka kwi-Router8 ukuya kwi-Router6, i-Router8 iya kuyitshintsha kwaye iyibuyisele endaweni yayo. Okulandelayo-hop iya kuba 192.168.68.8. Oku kusikhokelela kwimigaqo emibini:

  1. Ukuba i-router idlulisela indlela eya kummelwane wayo wangaphakathi, ayitshintshi iparamitha elandelayo-hop.
  2. Ukuba i-router idlulisela indlela kummelwane wayo wangaphandle, itshintsha i-Next-hop kwi-ip ye-interface apho le router ihambisa khona.

Oku kusikhokelela ekuqondeni ingxaki yokuqala - Kutheni kungasayi kubakho mzila kwitheyibhile yomzila kwi-Router5 kunye ne-Router11. Makhe sihlolisise. Ke, i-Router6 ifumene ulwazi malunga nendlela 9.9.9.0/24 kwaye yongeze ngempumelelo kwitafile yokubonisa:

Router6#show ip route bgp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is not set

      9.0.0.0/24 is subnetted, 1 subnets
B        9.9.9.0 [20/0] via 192.168.68.8, 00:38:25<source>
Теперь Router6 передал маршрут Router5 и первому правилу Next-hop не изменил. То есть, Router5 должен добавить  <b>9.9.9.0 [20/0] via 192.168.68.8</b> , но у него нет маршрута до 192.168.68.8 и поэтому данный маршрут добавлен не будет, хотя информация о данном маршруте будет храниться в таблице BGP:

<source><b>Router5#show ip bgp
BGP table version is 1, local router ID is 5.5.5.5
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
              x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 * i 9.9.9.0/24       192.168.68.8             0    100      0 45 i</b>

Imeko efanayo iya kwenzeka phakathi kwe-Router11-Router12. Ukunqanda le meko, kufuneka uqwalasele i-Router6 okanye i-Router12, xa udlula indlela eya kubamelwane babo bangaphakathi, ukutshintsha idilesi yabo ye-IP njenge-Next-hop. Oku kwenziwa kusetyenziswa lo myalelo:

neighbor 192.168.56.5 next-hop-self

Emva kwalo myalelo, i-Router6 iya kuthumela umyalezo woHlaziyo, apho i-ip ye-interface ye-Gi0/0 Router6 iya kucaciswa njenge-Next-hop yeendlela - 192.168.56.6, emva koko le ndlela iya kuba sele ifakwe kwitafile yomzila.

Masiqhubele phambili kwaye sibone ukuba le ndlela ibonakala kwi-Router7 kunye ne-Router10. Ayizukuba kwitafile yomzila kwaye sinokucinga ukuba ingxaki iyafana neyokuqala ene-Next-hop parameter, kodwa ukuba sijonga imveliso yomyalelo we-ip bgp, siza kubona ukuba indlela ayizange yamkelwe apho nokuba iNext-hop engeyiyo, nto leyo ethetha ukuba indlela ayizange idluliselwe. Kwaye oku kuya kusikhokelela kubukho bomnye umgaqo:

Iindlela ezifunyenwe kubamelwane bangaphakathi azisasazwa kwabanye abamelwane bangaphakathi.

Kuba i-Router5 ifumene indlela esuka kwi-Router6, ayizukudluliselwa komnye ummelwane wangaphakathi. Ukuze udluliselo lwenzeke, kufuneka uqwalasele umsebenzi Isibonisi seNdlela, okanye uqwalasele unxibelelwano lobumelwane oluqhagamshelwe ngokupheleleyo (iMesh egcweleyo), oko kukuthi, i-Router5-7 wonke umntu uya kuba ngummelwane kuye wonke umntu. Kule meko siza kusebenzisa i-Route Reflector. Kwi-Router5 kufuneka usebenzise lo myalelo:

neighbor 192.168.57.7 route-reflector-client

Umzila-Reflector utshintsho ukuziphatha BGP xa udlula indlela kummelwane wangaphakathi. Ukuba ummelwane wangaphakathi uchazwe njenge umzila-reflector-client, emva koko iindlela zangaphakathi ziya kubhengezwa kwaba bathengi.

Indlela ayizange ivele kwi-Router7? Ungalibali nge-Next-hop nayo. Emva kolu buchule, indlela kufuneka ihambe nayo kwi-Router7, kodwa oku akwenzeki. Oku kusizisa komnye umgaqo:

Umgaqo olandelayo we-hop usebenza kuphela kwiindlela zangaphandle. Kwiindlela zangaphakathi, uphawu loyelelwano olulandelayo lwe-hop alutshintshwa.

Kwaye sifumana imeko apho kuyimfuneko ukudala imeko-bume usebenzisa i-static routing okanye i-IGP protocols ukwazisa iirouters malunga nazo zonke iindlela ngaphakathi kwe-AS. Masibhalise iindlela ezimileyo kwi-Router6 kunye ne-Router7 kwaye emva koko siya kufumana indlela esiyifunayo kwitafile ye-router. Kwi-AS 678, siya kuyenza ngokwahlukileyo kancinci - siya kubhalisa iindlela ezimileyo ze-192.168.112.0/24 kwi-Router10 kunye ne-192.168.110.0/24 kwi-Router12. Emva koko, siya kuseka ubudlelwane bommelwane phakathi kwe-Router10 kunye ne-Router12. Siza kuqwalasela kwakhona i-Router12 ukuthumela i-hop yayo elandelayo kwi-Router10:

neighbor 192.168.110.10 next-hop-self

Isiphumo siya kuba kukuba i-Router10 iya kufumana indlela 9.9.9.0/24, iya kwamkelwa kuzo zombini i-Router7 kunye ne-Router12. Makhe sibone ukuba i-Router10 ikhetha ntoni:

Router10#show ip bgp
BGP table version is 3, local router ID is 6.6.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
              x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network              Next Hop            Metric LocPrf Weight Path
 *>i 9.9.9.0/24       192.168.112.12           0    100       0      45 i

                               192.168.107.7                                0     123 45 i  

Njengoko sibona, iindlela ezimbini kunye notolo (>) kuthetha ukuba indlela edlula 192.168.112.12 ikhethiwe.
Makhe sibone ukuba inkqubo yokukhetha indlela isebenza njani:

  1. Inyathelo lokuqala xa ufumana indlela kukukhangela ukufumaneka kwayo Next-hop. Yiyo loo nto, xa sifumene indlela kwi-Router5 ngaphandle kokuseta i-Next-hop-self, le ndlela ayizange iqhubekeke phambili.
  2. Okulandelayo kuza iparameter yobunzima. Le parameter ayilophawu lophawu lweNdlela (PA) kwaye ayithunyelwanga kwimiyalezo yeBGP. Iqwalaselwe ekuhlaleni kwi-router nganye kwaye isetyenziselwa ukuphatha ukhetho lwendlela kwi-router ngokwayo. Makhe sijonge umzekelo. Ngaphezulu ungabona ukuba i-Router10 ikhethe indlela ye-9.9.9.0/24 nge-Router12 (192.168.112.12). Ukutshintsha iparameter yeWieght, ungasebenzisa imephu yendlela ukuseta iindlela ezithile, okanye unikeze ubunzima kummelwane usebenzisa umyalelo:
     neighbor 192.168.107.7 weight 200       

    Ngoku zonke iindlela ezivela kulo mmelwane ziya kuba nalo bunzima. Makhe sibone ukuba ukhetho lwendlela lutshintsha njani emva kolu qheliso:

    Router10#show bgp
    *Mar  2 11:58:13.956: %SYS-5-CONFIG_I: Configured from console by console
    BGP table version is 2, local router ID is 6.6.6.6
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
                  r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
                  x best-external, a additional-path, c RIB-compressed,
    Origin codes: i - IGP, e - EGP, ? - incomplete
    RPKI validation codes: V valid, I invalid, N Not found
    
         Network          Next Hop            Metric LocPrf Weight      Path
     *>  9.9.9.0/24       192.168.107.7                        200      123 45 i
     * i                          192.168.112.12           0          100      0 45 i

    Njengoko ubona, indlela edlula kwi-Router7 ikhethiwe ngoku, kodwa oku akuyi kuba nasiphumo kwezinye iirouters.

  3. Kwindawo yesithathu sinoKhetho lweNdawo. Le parameter luphawu olwaziwayo lwe discretionary, nto leyo ethetha ukuba ubukho bayo bungakhethwa. Le parameter isebenza kuphela ngaphakathi kwe-AS enye kwaye ichaphazela ukhetho lwendlela kuphela kubamelwane bangaphakathi. Yiyo loo nto ihanjiswa kuphela kwimiyalezo yoHlaziyo eyenzelwe ummelwane wangaphakathi. Ayikho kuHlaziyo lwemiyalezo yabamelwane bangaphandle. Ke ngoko, yahlelwa njenge-Eyaziwa ngokuba yi-Discretionary. Makhe sizame ukuyifaka kwi-Router5. Kwi-Router5 kufuneka sibe neendlela ezimbini ze-9.9.9.0/24 - enye nge-Router6 kunye neyesibini nge-Router7.

    Sijonge:

    Router5#show bgp
    BGP table version is 2, local router ID is 5.5.5.5
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
                  r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
                  x best-external, a additional-path, c RIB-compressed,
    Origin codes: i - IGP, e - EGP, ? - incomplete
    RPKI validation codes: V valid, I invalid, N Not found
    
         Network          Next Hop            Metric LocPrf Weight Path
     *>i 9.9.9.0/24       192.168.56.6             0    100      0 45 i

    Kodwa njengoko sibona indlela enye kwi-Router6. Iphi indlela edlula kwi-Router7? Mhlawumbi i-Router7 ayinayo nayo? Masijonge:

    Router#show bgp
    BGP table version is 10, local router ID is 7.7.7.7
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
                  r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
                  x best-external, a additional-path, c RIB-compressed,
    Origin codes: i - IGP, e - EGP, ? - incomplete
    RPKI validation codes: V valid, I invalid, N Not found
    
         Network                Next Hop            Metric LocPrf  Weight    Path
     *>i 9.9.9.0/24       192.168.56.6             0     100           0      45 i
    
                                  192.168.107.10                                  0     678 45 i 

    Okumangalisayo, yonke into ibonakala ilungile. Kutheni ingagqithiselwanga kwi-Router5? Into kukuba iBGP inomgaqo:

    I-router ithumela kuphela ezo ndlela izisebenzisayo.

    I-Router7 isebenzisa indlela edlula kwi-Router5, ngoko ke indlela edlula kwi-Router10 ayiyi kuhanjiswa. Masibuyele kuLudwe lwaseKhaya. Masisete okuKhethayo kwiNdawo kwi-Router7 kwaye sibone ukuba i-Router5 isabela njani kule nto:

    route-map BGP permit 10
     match ip address 10
     set local-preference 250
    access-list 10 permit any
    router bgp 123
     neighbor 192.168.107.10 route-map BGP in</b>

    Ke, senze imephu yendlela equlathe zonke iindlela kwaye saxelela i-Router7 ukuba itshintshe iparamitha yokuKhetha yaseKhaya ukuya kuma-250 xa ifunyenwe, ukungagqibeki yi-100. Makhe sibone ukuba kwenzeke ntoni kwi-Router5:

    Router5#show bgp
    BGP table version is 8, local router ID is 5.5.5.5
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
                  r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
                  x best-external, a additional-path, c RIB-compressed,
    Origin codes: i - IGP, e - EGP, ? - incomplete
    RPKI validation codes: V valid, I invalid, N Not found
    
         Network          Next Hop            Metric LocPrf Weight        Path
     *>i 9.9.9.0/24       192.168.57.7             0          250      0 678 45 i

    Njengoko sibona ngoku i-Router5 ikhetha indlela edlula kwi-Router7. Umfanekiso ofanayo uya kuba kwi-Router6, nangona kunenzuzo ngakumbi kuye ukukhetha indlela nge-Router8. Kwakhona songeza ukuba ukutshintsha le parameter kufuna ukuqaliswa kwakhona kwendawo yokuhlala ukuze utshintsho lusebenze. Funda apha. Silungise Ukhetho lwaseKhaya. Masiqhubele phambili kwiparameter elandelayo.

  4. Khetha indlela ene-Next-hop parameter 0.0.0.0, oko kukuthi, iindlela zasekhaya okanye ezidityanisiweyo. Ezi ndlela zabelwa ngokuzenzekelayo iparameter yobunzima obulingana nobuninzi-32678-emva kokungena kumyalelo womnatha:
    Router#show bgp
    BGP table version is 2, local router ID is 9.9.9.9
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
                  r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
                  x best-external, a additional-path, c RIB-compressed,
    Origin codes: i - IGP, e - EGP, ? - incomplete
    RPKI validation codes: V valid, I invalid, N Not found
    
         Network          Next Hop            Metric LocPrf Weight    Path
     *>  9.9.9.0/24       0.0.0.0                  0            32768    i
  5. Eyona ndlela imfutshane nge-AS. Eyona imfutshane ye-AS_Path parameter ikhethiwe. Okukhona ii-AS ezimbalwa indlela ihamba, kokukhona ibangcono. Qwalasela indlela eya ku-9.9.9.0/24 kwi-Router10:
    Router10#show bgp
    BGP table version is 2, local router ID is 6.6.6.6
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
                  r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
                  x best-external, a additional-path, c RIB-compressed,
    Origin codes: i - IGP, e - EGP, ? - incomplete
    RPKI validation codes: V valid, I invalid, N Not found
    
         Network          Next Hop            Metric LocPrf Weight Path
     *   9.9.9.0/24     192.168.107.7                           0           123 45 i
     *>i                     192.168.112.12           0    100       0       45 i

    Njengoko ubona, i-Router10 ikhethe indlela nge-192.168.112.12 kuba kule ndlela iparamitha ye-AS_Path iqulethe kuphela i-45, kwaye kwenye imeko 123 kunye ne-45. Intuitively icacile.

  6. Iparameter elandelayo nguMvelaphi. IGP (umzila efunyenwe usebenzisa BGP) ingcono EGP (umzila efunyenwe usebenzisa owandulela BGP kaThixo, ayisekho kusetyenziswa), kunye EGP ingcono Ayiphelelanga? (ifunyenwe ngenye indlela, umzekelo ngolwabiwo ngokutsha).
  7. Iparamitha elandelayo yiMED. SasineWieght esebenza kuphela kwindawo kwi-router. Kwakukho uKhetho lweNdawo, olwalusebenza kuphela kwinkqubo enye yokuzimela. Njengoko unokuthekelela, i-MED yiparamitha eya kuhanjiswa phakathi kweenkqubo ezizimeleyo. Kakuhle kakhulu inqaku malunga nale parameter.

Azisekho iimpawu ziya kusetyenziswa, kodwa ukuba iindlela ezimbini zineempawu ezifanayo, le migaqo ilandelayo iyasetyenziswa:

  1. Khetha indlela eya kummelwane we-IGP okufutshane.
  2. Khetha eyona ndlela indala yendlela ye-eBGP.
  3. Khetha umendo ngommelwane nge-ID yerouter encinci ye-BGP.
  4. Khetha umendo ngommelwane onedilesi ye-IP ephantsi.

Ngoku makhe sijonge umba wokuhlangana kwe-BGP.

Makhe sibone ukuba kwenzeka ntoni ukuba i-Router6 ilahlekelwe yindlela 9.9.9.0/24 nge-Router9. Masikhubaze ujongano lwe-Gi0/1 ye-Router6, eya kuqonda ngokukhawuleza ukuba iseshoni ye-BGP kunye ne-Router8 iphelile kwaye ummelwane uye wanyamalala, oku kuthetha ukuba indlela efunyenwe kuyo ayisebenzi. I-Router6 ithumela ngokukhawuleza imiyalezo yoHlaziyo, apho ibonisa inethiwekhi 9.9.9.0/24 kwindawo yeNdlela ezirhoxisiweyo. Nje ukuba i-Router5 ifumane umyalezo onjalo, iya kuwuthumela kwi-Router7. Kodwa ekubeni i-Router7 inendlela edlula kwi-Router10, iya kuphendula ngoko nangoko ngoHlaziyo ngendlela entsha. Ukuba akunakwenzeka ukufumanisa ukuwa kommelwane ngokusekwe kwimeko yojongano, kuya kufuneka ulinde ukubamba iSibali-xesha sitshise.

Umanyano.

Ukuba uyakhumbula, sithethe ngento yokuba uhlala kufuneka usebenzise itopology eqhagamshelwe ngokupheleleyo. Ngenani elikhulu lee-routers kwelinye AS oku kunokubangela iingxaki ezinkulu, ukuphepha oku kufuneka usebenzise imibutho. I-AS enye yahlulwe kwii-sub-AS ezininzi, ezivumela ukuba zisebenze ngaphandle kwemfuneko ye-topology edibeneyo ngokupheleleyo.

Isebenza njani iBGP

Nali ikhonkco kule nto labu, kwaye apha uqwalaselo lwe-GNS3.

Umzekelo, ngale topology kuya kufuneka siqhagamshele zonke iirotha AS 2345 omnye komnye, kodwa ngokusebenzisa Confederation, sinokuseka ubudlelwane adjacency kuphela phakathi imizila eqhagamshelwe ngokuthe ngqo omnye komnye. Makhe sithethe ngale nto ngokweenkcukacha. Ukuba besino-AS 2345 kuphela, ngoko laForge emva kokufumana imatshi evela Picard ungaxelela iirotha Iinkcukacha и Worf, kodwa abayi kuxelela i-router ngayo I-Crusher . Kwakhona iindlela ezisasazwa yi-router ngokwayo laForge, ngengazange idluliselwe I-Crusher akukho Worf-Oh hayi Iinkcukacha.

Kuya kufuneka uqwalasele i-Route-Reflector okanye unxulumano lobumelwane oluqhagamshelwe ngokupheleleyo. Ngokwahlula i-AS 2345 enye kwi-4 sub-AS (2,3,4,5) kwi-router nganye, sigqiba ngengqiqo yokusebenza eyahlukileyo. Yonke into ichazwe ngokugqibeleleyo apha.

Imithombo:

  1. I-CCIE Routing kunye noTshintsho v5.0 ISikhokelo seSitifiketi esisemthethweni, uMqulu 2, uHlelo lwesihlanu, uNarbik Kocharians, uTerry Vinson.
  2. website xgu.ru
  3. website GNS3Vault.

umthombo: www.habr.com

Yongeza izimvo