Laborator 11 - BGP - basic config

Motivaie
Pentru conectarea noii reele la Internet se vor folosi 2 provideri (Derp i Derpina). Cum
angajaii celor 2 ISP-uri nu au absolvit cursul de PR, apar probleme n configurarea corect a
BGP. V oferii s ajutai providerii cu configurarea router-elor lor de edge (pentru o sum
rezonabil, bineneles).
Configuraiile iniiale (interfee, adresare IP) sunt deja realizate pe echipamente. De
asemenea, pe fiecare router este configurat interfaa Lo0, cu IP 150.0.x.x/24. NU modificai
setrile interfeelor dac laboratorul nu v cere explicit acest lucru!

Topologie

Cerine
1. [10p] Configurai OSPF area 0 pentru tot sistemul autonom 100 (Troll, MeGusta i
FUUUUU). Introducei n OSPF i interfeele de loopback de pe Troll i FUUUUU.
Rezolvare
Pe toate:
router ospf 1

Pe interfetele dorite:

ip ospf 1 area 0

2. [10p] Configurai adiacene eBGP ntre Derp i Troll, i ntre Derpina i FUUUUU.
Folosii adresele IP ale interfeelor direct conectate.
Rezolvare
Pe Derp:
router bgp 200
neighbor 69.63.186.38 remote-as 100

Pe Troll:
router bgp 100
neighbor 69.63.186.37 remote-as 200

Similar pentru Derpina i FUUUUU.

3. [10p] Configurai adiacen iBGP ntre Troll i FUUUUU. Folosii interfeele de loopback
pentru stabilirea adiacenelor. Verificai tabelele BGP de pe cele 4 rutere.
Rezolvare
Troll(config)#router bgp 100
Troll(config-router)#neighbor 150.0.3.3 remote-as 100
Troll(config-router)#neighbor 150.0.3.3 update-source lo0

FUUUUU(config)#router bgp 100

FUUUUU(config-router)#neighbor 150.0.1.1 remote-as 100
FUUUUU(config-router)#neighbor 150.0.1.1 update-source l0

Nu ar trebui s apar nimic n tabelele de rutare.

4. [10p] Propagai interfaa Lo0 de pe Derp n BGP cu originea intern (i). Propagai doar
interfaa Lo0 de pe Derpina n BGP cu originea necunoscut (?). Verificai propagarea
corect a mtii.
Rezolvare
Derp(config)#router bgp 200
Derp(config-router)#network 150.0.5.0 mask 255.255.255.0

Derpina(config)#ip access-list standard ACL_BGP_RDST

Derpina(config-std-nacl)#permit 150.0.4.4 0.0.255.255
Derpina(config-std-nacl)#exit
Derpina(config)#route-map BGP_RDST
Derpina(config-route-map)#match ip add ACL_BGP_RDST
Derpina(config-route-map)#exit
Derpina(config)#router bgp 300
Derpina(config-router)#redistribute connected route-map BGP_RDST

5. [10p] Configurai protocolul BGP astfel nct Lo0 de pe Derpina s apar n tabela de
rutare de pe Troll, respectiv Lo0 de pe Derp s apar n tabela de rutare de pe
FUUUUU.
Rezolvare
Troll(config)#router bgp 100
Troll(config-router)#neighbor 150.0.3.3 next-hop-self

FUUUUU(config)#router bgp 100

FUUUUU(config-router)#neighbor 150.0.1.1 next-hop-self

6. [5p] Datorit sincronizrii nu exist conectivitate ntre Derp i Derpina (de pe

interfeele de loopback). Configurai o adiacen iBGP ntre MeGusta i FUUUUU
folosind adresele de pe interfaa direct conectat.
Rezolvare
FUUUUU(config)#router bgp 100
FUUUUU(config-router)#neighbor 172.4.0.1 remote-as 100

MeGusta(config)#router bgp 100

MeGusta(config-router)#neighbor 172.4.0.2 remote-as 100

7. [15p] Verificai conectivitatea dintre Derp i Derpina. Funcioneaz? Fr a crea noi

adiacene rezolvai acest problem.
Rezolvare
FUUUUU(config)#router bgp 100
FUUUUU(config-router)#neighbor 172.4.0.1 route-reflector-client
FUUUUU(config-router)#neighbor 150.0.1.1 route-reflector-client
FUUUUU(config-router)# neighbor 172.4.0.1 next-hop-self

8. [10p] Adugai 4 interfee de loopback din spaiul 192.180.0.0/16 pe ruterul MeGusta.

Propagai aceste interfee n BGP avnd originea intern (i). Verificai conectivitatea cu
aceste interfee de pe Derp i Derpina.
Rezolvare
MeGusta(config)#int l0
MeGusta(config-if)#ip add 192.180.0.1 255.255.255.0
MeGusta(config-if)#int l1
MeGusta(config-if)#ip add 192.180.1.1 255.255.255.0
MeGusta(config-if)#int l2
MeGusta(config-if)#ip add 192.180.2.1 255.255.255.0
MeGusta(config-if)#int l3
MeGusta(config-if)#ip add 192.180.3.1 255.255.255.0

MeGusta(config)#router bgp 100

MeGusta(config-router)#network 192.180.0.0 mask 255.255.255.0
MeGusta(config-router)#network 192.180.1.0 mask 255.255.255.0

MeGusta(config-router)#network 192.180.2.0 mask 255.255.255.0

MeGusta(config-router)#network 192.180.3.0 mask 255.255.255.0

9. [15p] Pe ruterele Troll i FUUUUU filtrai actualizrile trimise folosind un route-map

(neighbor IP route-map NUME), astfel nct doar primele dou interfee de Loopback
de la punctul anterior s fie promovate ctre vecinii eBGP. Pentru a vedea modificrile
resetai conexiunea eBGP (clear ip bgp NEIGHBOR).
Rezolvare
Troll(config)#ip access-list standard ACL_BGP_DERP_OUT
Troll(config-std-nacl)#permit 192.180.0.0 0.0.0.255
Troll(config-std-nacl)#permit 192.180.1.0 0.0.0.255
Troll(config-std-nacl)#exit
Troll(config)#route-map BGP_DERP_OUT
Troll(config-route-map)#match ip add ACL_BGP_DERP_OUT
Troll(config-route-map)#exit
Troll(config)#router bgp 100
Troll(config-router)#neighbor 69.63.186.37 route-map BGP_DERP_OUT out

Pe FUUUUU asemntor.
10. [5p] Verificai conectivitatea ntre Derp i Derpina (interfeele de loopback). La
sfritul acestui exerciiu trebuie s avei conectivitate.
Rezolvare
Troll(config)#ip access-list standard ACL_BGP_DERP_OUT
Troll(config-std-nacl)#25 permit 150.0.4.0 0.0.0.255

11. [10p] Creai dou interfee de loopback pe Derp i Derpina (loopback1) folosind
adresele 192.168.0.1/24, respectiv 192.168.1.1/24. Configurai o adiacen eBGP
ntre Derp i Derpina, folosind cele dou interfee create. Pentru conectivitate folosii
rute statice.
Rezolvare
Derp(config)#int l1
Derp(config-if)#ip add 192.168.0.1 255.255.255.0
Derp(config-if)#exit
Derp(config)#ip route 192.168.1.0 255.255.255.0 74.125.39.102
Derp(config)#ip route 192.168.1.0 255.255.255.0 87.248.113.14
Derp(config)#router bgp 200
Derp(config-router)#neighbor 192.168.1.1 remote-as 300
Derp(config-router)#neighbor 192.168.1.1 update-source l1
Derp(config-router)#neighbor 192.168.1.1 ebgp-multihop 2

Derpina(config)#int l1
Derpina(config-if)#ip add 192.168.1.1 255.255.255.0
Derpina(config-if)#exit
Derpina(config)#ip route 192.168.0.0 255.255.255.0 74.125.39.101
Derpina(config)#ip route 192.168.0.0 255.255.255.0 87.248.113.13
Derpina(config)#router bgp 300

Derpina(config-router)#neighbor 192.168.0.1 remote-as 200

Derpina(config-router)#neighbor 192.168.0.1 update-source l1
Derpina(config-router)#neighbor 192.168.0.1 ebgp-multihop 2