您的位置:首页 > 职场人生

使用分发列表过滤BGP路由 推荐

2010-02-03 12:00 344 查看
一、拓扑图:



二、配置各路由器的IP地址,并运行BGP协议。
1、为了让R3学到明细路由,我们把R1自动汇总关掉:

R1(config)#router bgp 64512
R1(config-router)#no auto-summary
R1(config-router)#net 172.16.255.0 mask 255.255.255.252
R1(config-router)#net 172.16.0.1 mask 255.255.255.252
R1(config-router)#net 172.16.0.0 mask 255.255.255.0
R1(config-router)#net 172.16.1.0 mask 255.255.255.0
R1(config-router)#net 172.16.2.0 mask 255.255.255.0
R1(config-router)#net 172.16.3.0 mask 255.255.255.0
R1(config-router)#nei 172.16.255.2 remote 64512

R2(config-if)#router bgp 64512
R2(config-router)#net 172.16.255.0 mask 255.255.255.252
R2(config-router)#net 10.1.255.0 mask 255.255.255.252
R2(config-router)#nei 172.16.255.1 remote 64512
R2(config-router)#nei 10.1.255.2 remote 64513

R3(config-if)#router bgp 64513
R3(config-router)#net 10.1.255.0 mask 255.255.255.252
R3(config-router)#nei 10.1.255.1 remote 64512
2、配置完之后,看一下R3的路由表:

R3#sh ip route
…………
Gateway of last resort is not set

172.16.0.0/16 is variably subnetted, 5 subnets, 2 masks
B 172.16.255.0/30 [20/0] via 10.1.255.1, 00:08:58
B 172.16.0.0/24 [20/0] via 10.1.255.1, 00:08:58
B 172.16.1.0/24 [20/0] via 10.1.255.1, 00:08:58
B 172.16.2.0/24 [20/0] via 10.1.255.1, 00:08:58
B 172.16.3.0/24 [20/0] via 10.1.255.1, 00:08:58
10.0.0.0/30 is subnetted, 1 subnets
C 10.1.255.0 is directly connected, Serial1/0
三、在R2上建立ACL,并用分发列表去应用ACL以达到过滤指定的路由:

R2(config)#access-list 1 deny 172.16.0.0 0.0.0.255
R2(config)#access-list 1 deny 172.16.1.0 0.0.0.255
R2(config)#access-list 1 per any (其它路由都不拒绝)
R2(config-router)#nei 10.1.255.2 distribute-list 1 out (对目标邻居应用分发列表)
四、再来查看一下R3的路由表,发现指定的两条路由被过滤掉了:

R3#clear ip bgp * soft (软涮新一下BGP数据库)
R3#sh ip route
………………
Gateway of last resort is not set

172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks
B 172.16.255.0/30 [20/0] via 10.1.255.1, 00:17:19
B 172.16.2.0/24 [20/0] via 10.1.255.1, 00:17:19
B 172.16.3.0/24 [20/0] via 10.1.255.1, 00:17:19
10.0.0.0/30 is subnetted, 1 subnets
C 10.1.255.0 is directly connected, Serial1/0
R3#
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息