1、社團屬性community解析
讓客戶滿意是我們工作的目標,不斷超越客戶的期望值來自于我們對這個行業的熱愛。我們立志把好的技術通過有效、簡單的方式提供給客戶,將通過不懈努力成為客戶在信息化領域值得信任、有價值的長期合作伙伴,公司提供的服務項目有:國際域名空間、網站空間、營銷軟件、網站建設、常德網站維護、網站推廣。BGP社團屬性community:
可開啟:BGP社團屬性community為可選屬性,默認不識別。可通過命令開啟:neighbor x.x.x.x send-community
傳遞性:BGP社團屬性community只在鄰居有效,鄰居的鄰居不再有效,想要傳遞到鄰居的鄰居需配置neighbor x.x.x.x send-community
修改BGP社團屬性community步驟:
ip prefix-list 1 permit 1.1.1.0/24
route-map COM permit 10
match ip address prefix-list 1
set community no-advertise 不傳給BGP鄰居
set community no-export不傳出大AS
set community local-AS 不傳出小AS
route-map COM permit 20
router bgp 1
neighbor 12.1.1.2 send-community
neighbor 12.1.1.2 route-map COM out
2、實驗拓撲
3、基礎配置
R1配置
interface Loopback0
ip address 1.1.1.1 255.255.255.0
interface Serial0/0
ip address 12.1.1.1 255.255.255.0
router bgp 1
no synchronization
bgp router-id 1.1.1.1
network 1.1.1.0 mask 255.255.255.0
neighbor 12.1.1.2 remote-as 2
neighbor 12.1.1.2 send-community
no auto-summary
R2配置
interface Loopback0
ip address 2.2.2.2 255.255.255.0
interface Serial0/0
ip address 12.1.1.2 255.255.255.0
interface Serial0/1
ip address 23.1.1.2 255.255.255.0
router ospf 110
router-id 2.2.2.2
network 2.2.2.0 0.0.0.255 area 0
network 23.1.1.0 0.0.0.255 area 0
router bgp 64512
no synchronization
bgp router-id 2.2.2.2
bgp confederation identifier 2
neighbor 3.3.3.3 remote-as 64512
neighbor 3.3.3.3 update-source Loopback0
neighbor 3.3.3.3 next-hop-self
neighbor 12.1.1.1 remote-as 1
neighbor 3.3.3.3 send-community
no auto-summary
R3配置
interface Loopback0
ip address 3.3.3.3 255.255.255.0
interface Serial0/0
ip address 34.1.1.3 255.255.255.0
interface Serial0/1
ip address 23.1.1.3 255.255.255.0
router ospf 110
router-id 3.3.3.3
network 3.3.3.0 0.0.0.255 area 0
network 23.1.1.0 0.0.0.255 area 0
network 34.1.1.0 0.0.0.255 area 0
router bgp 64512
no synchronization
bgp router-id 3.3.3.3
bgp confederation identifier 2
bgp confederation peers 64513
neighbor 2.2.2.2 remote-as 64512
neighbor 2.2.2.2 update-source Loopback0
neighbor 4.4.4.4 remote-as 64513
neighbor 4.4.4.4 ebgp-multihop 255
neighbor 4.4.4.4 update-source Loopback0
neighbor 4.4.4.4 send-community
no auto-summary
R4配置
interface Loopback0
ip address 4.4.4.4 255.255.255.0
interface Serial0/0
ip address 34.1.1.4 255.255.255.0
interface Serial0/1
ip address 45.1.1.4 255.255.255.0
router ospf 110
router-id 4.4.4.4
network 4.4.4.0 0.0.0.255 area 0
network 34.1.1.0 0.0.0.255 area 0
network 45.1.1.0 0.0.0.255 area 0
router bgp 64513
no synchronization
bgp router-id 4.4.4.4
bgp confederation identifier 2
bgp confederation peers 64512
neighbor 3.3.3.3 remote-as 64512
neighbor 3.3.3.3 ebgp-multihop 255
neighbor 3.3.3.3 update-source Loopback0
neighbor 5.5.5.5 remote-as 64513
neighbor 5.5.5.5 update-source Loopback0
neighbor 5.5.5.5 send-community
no auto-summary
R5配置
interface Loopback0
ip address 5.5.5.5 255.255.255.0
interface Serial0/0
ip address 56.1.1.5 255.255.255.0
interface Serial0/1
ip address 45.1.1.5 255.255.255.0
router ospf 110
router-id 5.5.5.5
network 5.5.5.0 0.0.0.255 area 0
network 45.1.1.0 0.0.0.255 area 0
router bgp 64513
no synchronization
bgp router-id 5.5.5.5
bgp confederation identifier 2
neighbor 4.4.4.4 remote-as 64513
neighbor 4.4.4.4 update-source Loopback0
neighbor 56.1.1.6 remote-as 6
neighbor 56.1.1.6 send-community
no auto-summary
R6配置
interface Loopback0
ip address 6.6.6.6 255.255.255.0
interface Serial0/0
ip address 56.1.1.6 255.255.255.0
router bgp 6
no synchronization
bgp router-id 6.6.6.6
neighbor 56.1.1.5 remote-as 2
no auto-summary
4、社團屬性驗證
ip prefix-list 1 seq 5 permit 1.1.1.0/24
route-map COM permit 10
match ip address prefix-list 1
set community no-advertise
route-map COM permit 20
router bgp 1
neighbor 12.1.1.2 send-community
neighbor 12.1.1.2 route-map COM out
ip prefix-list 1 seq 5 permit 1.1.1.0/24
route-map COM permit 10
match ip address prefix-list 1
set community no-export
route-map COM permit 20
router bgp 1
neighbor 12.1.1.2 send-community
neighbor 12.1.1.2 route-map COM out
ip prefix-list 1 seq 5 permit 1.1.1.0/24
route-map COM permit 10
match ip address prefix-list 1
set community local-AS
route-map COM permit 20
router bgp 1
neighbor 12.1.1.2 send-community
neighbor 12.1.1.2 route-map COM out
另外有需要云服務器可以了解下創新互聯scvps.cn,海內外云服務器15元起步,三天無理由+7*72小時售后在線,公司持有idc許可證,提供“云服務器、裸金屬服務器、高防服務器、香港服務器、美國服務器、虛擬主機、免備案服務器”等云主機租用服務以及企業上云的綜合解決方案,具有“安全穩定、簡單易用、服務可用性高、性價比高”等特點與優勢,專為企業上云打造定制,能夠滿足用戶豐富、多元化的應用場景需求。