CCNA Lab - Solution Rev1.0 Basic BGP I

Task 8.1: ♦ Configure BB1 in AS57 and advertise all pre-configured Loopback networks.. Use minimum amount of CLI commands.. Use minimum amount of CLI commands... In this task you may exp

Trang 1

Task 8.1:

♦ Configure BB1 in AS57 and advertise all pre-configured Loopback networks Use minimum amount of CLI commands

BB1

router bgp 57

no synchronization bgp log-neighbor-changes network 10.12.1.0 mask 255.255.255.0 redistribute connected metric 2

no auto-summary

BB1-RACK1#sho ip bgp BGP table version is 21, local router ID is 209.112.70.1 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S Stale Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path

*> 5.5.5.0/24 0.0.0.0 2 32768 ?

*> 8.1.1.0/24 0.0.0.0 2 32768 ?

*> 10.12.1.0/24 0.0.0.0 0 32768 i

*> 12.1.1.0/24 0.0.0.0 2 32768 ?

*> 18.2.1.0/24 0.0.0.0 2 32768 ?

*> 28.3.1.0/24 0.0.0.0 2 32768 ?

*> 38.1.1.0/24 0.0.0.0 2 32768 ?

*> 156.46.1.0/24 0.0.0.0 2 32768 ?

*> 156.46.2.0/24 0.0.0.0 2 32768 ?

*> 156.46.3.0/24 0.0.0.0 2 32768 ?

*> 156.46.4.0/24 0.0.0.0 2 32768 ?

*> 156.46.100.0/22 0.0.0.0 2 32768 ?

*> 209.112.65.0 0.0.0.0 2 32768 ?

*> 209.112.66.0 0.0.0.0 2 32768 ?

*> 209.112.67.0 0.0.0.0 2 32768 ?

*> 209.112.68.0 0.0.0.0 2 32768 ?

*> 209.112.69.0 0.0.0.0 2 32768 ?

*> 209.112.70.0 0.0.0.0 2 32768 ?

♦ Configure BB2 in AS1540 and advertise all pre-configured Loopback networks Use minimum amount of CLI commands

BB2

router bgp 1540

no synchronization bgp log-neighbor-changes network 172.16.122.0 mask 255.255.255.0 redistribute connected metric 2

Trang 2

no auto-summary

BB2-RACK1#sho ip bgp BGP table version is 58, local router ID is 210.112.70.1 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal

Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path

*> 3.3.3.0/24 0.0.0.0 2 32768 ?

*> 8.2.1.0/24 0.0.0.0 2 32768 ?

*> 12.2.1.0/24 0.0.0.0 2 32768 ?

*> 18.2.2.0/24 0.0.0.0 2 32768 ?

*> 28.3.2.0/24 0.0.0.0 2 32768 ?

*> 38.2.1.0/24 0.0.0.0 2 32768 ?

* 140.100.1.0/24 140.100.1.2 0 0 65001 i

*> 0.0.0.0 2 32768 ?

♦ Configure AS65002 for SP1 and PE4 in AS 65002

PE4-RACK1(config)#interface loopback 4 PE4-RACK1(config-if)#ip address 44.44.44.44 255.255.255.0 PE4-RACK1(config-if)#router bgp 65002

PE4-RACK1(config-router)#network 44.44.44.0 mask 255.255.255.0

PE4-RACK1#sho ip bgp Network Next Hop Metric LocPrf Weight Path

*> 44.44.44.0/24 0.0.0.0 0 32768 i

♦ Configure ASBR1 in AS 100

ASBR1-RACK1(config)#int loopback 100 ASBR1-RACK1(config-if)#ip address 101.101.101.101 255.255.255.0 ASBR1-RACK1(config-if)#router bgp 100

ASBR1-RACK1(config-router)#network 101.101.101.0 mask 255.255.255.0

ASBR1-RACK1#sho ip bg Network Next Hop Metric LocPrf Weight Path

*> 101.101.101.0/24 0.0.0.0 0 32768 i

♦ Configure ASBR2 in AS 200

Trang 3

ASBR2-RACK1(config)#int loopback 200 ASBR2-RACK1(config-if)#ip address 202.202.202.202 255.255.255.0 ASBR2-RACK1(config-router)#router bgp 200

ASBR2-RACK1(config-router)#network 202.202.202.0 mask 255.255.255.0

ASBR2-RACK1#sho ip bgp Network Next Hop Metric LocPrf Weight Path

*> 202.202.202.0 0.0.0.0 0 32768 i

Task 8.2:

BB1

router bgp 57

no synchronization bgp log-neighbor-changes network 10.12.1.0 mask 255.255.255.0 redistribute connected metric 2 neighbor 10.12.1.2 remote-as 65001 neighbor 10.12.1.2 description to AS65001-SP1-PE2 neighbor 10.12.1.2 password iementor

no auto-summary

PE2-RACK1(config)#router bgp 65001 PE2-RACK1(config-router)#bgp log-neighbor-changes PE2-RACK1(config-router)#neighbor 10.12.1.1 remote-as 57 PE2-RACK1(config-router)#neighbor 10.12.1.1 password iementor PE2-RACK1(config-router)#neighbor 10.12.1.1 description Peer to BB1-AS57 PE2-RACK1(config-router)#network 22.22.22.0 mask 255.255.255.0

PE2-RACK1(config)#int loopback 22 PE2-RACK1(config-if)#ip address 22.22.22.22 255.255.255.0

PE2-RACK1#sho ip bgp summary Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

10.12.1.1 4 57 7 6 21 0 0 00:01:38 18

BB1-RACK1#ping 22.22.22.22 Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 22.22.22.22, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

PE2-RACK1#sho ip bgp BGP table version is 21, local router ID is 22.22.22.22 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S Stale Origin codes: i - IGP, e - EGP, ? - incomplete

Trang 4

Network Next Hop Metric LocPrf Weight Path

*> 5.5.5.0/24 10.12.1.1 2 0 57 ?

*> 8.1.1.0/24 10.12.1.1 2 0 57 ? r> 10.12.1.0/24 10.12.1.1 0 0 57 i

*> 12.1.1.0/24 10.12.1.1 2 0 57 ?

*> 18.2.1.0/24 10.12.1.1 2 0 57 ?

*> 22.22.22.0/24 0.0.0.0 0 32768 i

*> 28.3.1.0/24 10.12.1.1 2 0 57 ?

*> 38.1.1.0/24 10.12.1.1 2 0 57 ?

*> 156.46.1.0/24 10.12.1.1 2 0 57 ?

*> 156.46.2.0/24 10.12.1.1 2 0 57 ?

*> 156.46.3.0/24 10.12.1.1 2 0 57 ?

*> 156.46.4.0/24 10.12.1.1 2 0 57 ?

*> 156.46.100.0/22 10.12.1.1 2 0 57 ?

*> 209.112.65.0 10.12.1.1 2 0 57 ?

*> 209.112.66.0 10.12.1.1 2 0 57 ?

*> 209.112.67.0 10.12.1.1 2 0 57 ?

*> 209.112.68.0 10.12.1.1 2 0 57 ?

*> 209.112.69.0 10.12.1.1 2 0 57 ?

*> 209.112.70.0 10.12.1.1 2 0 57 ?

Task 8.3:

Configure your eBGP peering to be secure

♦ CORRECTION!!! You should receive 8 routes from BB2

♦ Verify end-to-end connectivity with a ping

♦ BB1 should be able to ping 11.11.11.11 of PE1 PE1-RACK1(config)#interface Loopback11

PE1-RACK1(config-if)# description BGP Loopback PE1-RACK1(config-if)# ip address 11.11.11.11 255.255.255.0

PE1-RACK1(config)#router bgp 65001 PE1-RACK1(config-router)# no synchronization PE1-RACK1(config-router)# bgp log-neighbor-changes PE1-RACK1(config-router)#network 11.11.11.0 mask 255.255.255.0 PE1-RACK1(config-router)# network 140.100.1.0 mask 255.255.255.0 PE1-RACK1(config-router)# neighbor 140.100.1.1 remote-as 1540 PE1-RACK1(config-router)# neighbor 140.100.1.1 password iementor PE1-RACK1(config-router)# no auto-summary

PE1-RACK1#sho ip bgp BGP table version is 25, local router ID is 11.11.11.11 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S Stale Origin codes: i - IGP, e - EGP, ? - incomplete

Trang 5

Network Next Hop Metric LocPrf Weight Path

*> 3.3.3.0/24 140.100.1.1 2 0 1540 ?

*> 8.2.1.0/24 140.100.1.1 2 0 1540 ?

*> 11.11.11.0/24 0.0.0.0 0 32768 i

*> 12.2.1.0/24 140.100.1.1 2 0 1540 ?

*> 18.2.2.0/24 140.100.1.1 2 0 1540 ?

*> 28.3.2.0/24 140.100.1.1 2 0 1540 ?

*> 38.2.1.0/24 140.100.1.1 2 0 1540 ?

* 140.100.1.0/24 140.100.1.1 2 0 1540 ?

*> 0.0.0.0 0 32768 i

BB2-RACK1(config)#router bgp 1540 BB2-RACK1(config-router)# no synchronization BB2-RACK1(config-router)# bgp log-neighbor-changes BB2-RACK1(config-router)# network 140.100.1.2 mask 255.255.255.0 BB2-RACK1(config-router)# redistribute connected metric 2

BB2-RACK1(config-router)# neighbor 140.100.1.2 remote-as 65001 BB2-RACK1(config-router)# neighbor 140.100.1.2 password iementor BB2-RACK1(config-router)# no auto-summary

BB2-RACK1#sho ip route bg 11.0.0.0/24 is subnetted, 1 subnets

B 11.11.11.0 [20/0] via 140.100.1.2, 00:02:01

BB2-RACK1#ping 11.11.11.11 Type escape sequence to abort

!!!!!

Task 8.4:

♦ Verify connectivity before peering with ASBR1

♦ Peer ASBR1 with PE1 and advertise ASBR1 BGP Loopback only

♦ CORRECTION!!! ASBR1 should be able to ping BB2 12.2.1.1

In this task you may experience a problem peering if you are using

a Loopback as the source IP address with ASBR1 If you are using a physical IP address, the problem will not happen

So let’s observe the problem with using a Loopback as the source instead of the physical

Configure ASBR1 to peer with PE1 in the following manner:

Trang 6

ASBR1-RACK1(config)#router bgp 100 ASBR1-RACK1(config-router)# neighbor 10.1.1.1 remote-as 65001 ASBR1-RACK1(config-router)# neighbor 10.1.1.1 description to PE1 ASBR1-RACK1(config-router)# neighbor 10.1.1.1 update-source Loopback0

PE1-RACK1(config)#router bgp 65001 PE1-RACK1(config-router)# neighbor 10.1.1.100 remote-as 100 PE1-RACK1(config-router)# neighbor 10.1.1.100 description to ASBR1 PE1-RACK1(config-router)# neighbor 10.1.1.100 update-source Loopback0

Let’s verify the status of peering

10.1.1.100 4 100 5 6 0 0 0 00:26:42 Idle 140.100.1.1 4 1540 110 90 11 0 0 00:27:58 7

ASBR1-RACK1#sho ip bgp summary Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

10.1.1.1 4 65001 6 5 0 0 0 00:27:15 Idle

Notice “Idle” above; AS65001 will not peer with AS100

To solve this problem, start out by running the debug ip bgp and debug ip tcp transactions commands to see the TCP connection

failing Then configure BGP as follows:

ASBR1-RACK1(config)#router bgp 100 ASBR1-RACK1(config-router)# no synchronization ASBR1-RACK1(config-router)# bgp router-id 10.1.1.100 ASBR1-RACK1(config-router)# bgp log-neighbor-changes ASBR1-RACK1(config-router)# network 101.101.101.0 mask 255.255.255.0 ASBR1-RACK1(config-router)# neighbor 10.1.1.1 remote-as 65001

ASBR1-RACK1(config-router)# neighbor 10.1.1.1 ebgp-multihop 2 Å

Resolves this issue

ASBR1-RACK1(config-router)# neighbor 10.1.1.1 update-source Loopback0 ASBR1-RACK1(config-router)# no auto-summary

PE1-RACK1(config)#router bgp 65001 PE1-RACK1(config-router)# no synchronization PE1-RACK1(config-router)# bgp router-id 10.1.1.1 PE1-RACK1(config-router)# bgp log-neighbor-changes PE1-RACK1(config-router)# network 11.11.11.0 mask 255.255.255.0 PE1-RACK1(config-router)# network 140.100.1.0 mask 255.255.255.0 PE1-RACK1(config-router)# neighbor 10.1.1.100 remote-as 100 PE1-RACK1(config-router)# neighbor 10.1.1.100 description to ASBR1

Trang 7

PE1-RACK1(config-router)# neighbor 10.1.1.100 ebgp-multihop 2 Å

Resolves this issue

PE1-RACK1(config-router)# neighbor 10.1.1.100 update-source Loopback0 PE1-RACK1(config-router)# neighbor 140.100.1.1 remote-as 1540

PE1-RACK1(config-router)# neighbor 140.100.1.1 description To BB2 PE1-RACK1(config-router)# neighbor 140.100.1.1 password iementor PE1-RACK1(config-router)# no auto-summary

debug ip bgp and debug ip tcp transactions on ASBR1

*Mar 1 11:18:21.600: BGP: 10.1.1.100 went from Idle to Active

*Mar 1 11:18:21.600: BGP: 10.1.1.100 open active, delay 26998ms

*Mar 1 11:18:40.860: BGP: Applying map to find origin for 11.11.11.0/24

*Mar 1 11:18:40.860: BGP: Applying map to find origin for 140.100.1.0/24

10.1.1.100 4 100 5 6 0 0 0 00:34:37 Active 140.100.1.1 4 1540 118 98 11 0 0 00:35:53 7

10.1.1.100 4 100 10 12 11 0 0 00:00:00 1 140.100.1.1 4 1540 118 99 12 0 0 00:35:55 7

*Mar 1 11:18:48.600: BGP: 10.1.1.100 open active, local address 10.1.1.1

*Mar 1 11:18:48.600: TCB83046FC8 created

*Mar 1 11:18:48.600: TCB83046FC8 setting property TCP_WINDOW_SIZE (0) 831105BC

*Mar 1 11:18:48.600: TCB83046FC8 setting property TCP_MD5KEY (5) 0

*Mar 1 11:18:48.600: TCB83046FC8 setting property TCP_TOS (11) 831105A8

*Mar 1 11:18:48.600: TCP: Random local port generated 47173

*Mar 1 11:18:48.600: TCB83046FC8 bound to 10.1.1.1.47173

*Mar 1 11:18:48.600: TCP: sending SYN, seq 886127879, ack 0

*Mar 1 11:18:48.600: TCP0: Connection to 10.1.1.100:179, advertising MSS 536

*Mar 1 11:18:48.600: TCP0: state was CLOSED -> SYNSENT [47173 -> 10.1.1.100(179 )]

*Mar 1 11:18:48.612: TCP0: state was SYNSENT -> ESTAB [47173 -> 10.1.1.100(179) ]

*Mar 1 11:18:48.612: TCP: tcb 83046FC8 connection to 10.1.1.100:179, peer MSS 5

36, MSS is 536

*Mar 1 11:18:48.612: TCB83046FC8 connected to 10.1.1.100.179

*Mar 1 11:18:48.616: BGP: 10.1.1.100 went from Active to OpenSent

*Mar 1 11:18:48.616: BGP: 10.1.1.100 sending OPEN, version 4, my as: 65001

*Mar 1 11:18:48.616: BGP: 10.1.1.100 send message type 1, length (incl header)

45

*Mar 1 11:18:48.628: BGP: 10.1.1.100 rcv message type 1, length (excl header)

26

*Mar 1 11:18:48.628: BGP: 10.1.1.100 rcv OPEN, version 4

*Mar 1 11:18:48.628: BGP: 10.1.1.100 rcv OPEN w/ OPTION parameter len: 16

*Mar 1 11:18:48.628: BGP: 10.1.1.100 rcvd OPEN w/ optional parameter type 2 (Ca

Trang 8

pability) len 6

*Mar 1 11:18:48.632: BGP: 10.1.1.100 OPEN has CAPABILITY code: 1, length 4

*Mar 1 11:18:48.632: BGP: 10.1.1.100 OPEN has MP_EXT CAP for afi/safi: 1/1

*Mar 1 11:18:48.632: BGP: 10.1.1.100 rcvd OPEN w/ optional parameter type 2 (Ca pability) len 2

*Mar 1 11:18:48.632: BGP: 10.1.1.100 OPEN has ROUTE-REFRESH capability(old) for all address-families

*Mar 1 11:18:48.632: BGP: 10.1.1.100 rcvd OPEN w/ optional parameter type 2 (Ca pability) len 2

*Mar 1 11:18:48.632: BGP: 10.1.1.100 OPEN has ROUTE-REFRESH capability(new) for all address-families

*Mar 1 11:18:48.632: BGP: 10.1.1.100 went from OpenSent to OpenConfirm

*Mar 1 11:18:48.632: BGP: 10.1.1.100 went from OpenConfirm to Established

*Mar 1 11:18:48.632: %BGP-5-ADJCHANGE: neighbor 10.1.1.100 Up

*Mar 1 11:18:53.837: TCP: sending RST, seq 0, ack 1452704497

*Mar 1 11:18:53.837: TCP: sent RST to 10.1.1.254:13346 from 10.1.1.1:179

10.1.1.100 4 100 11 13 12 0 0 00:01:34 1 140.100.1.1 4 1540 120 101 12 0 0 00:37:29 7

PE1-RACK1#sho ip bgp BGP table version is 12, local router ID is 10.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best, i - intern

*> 3.3.3.0/24 140.100.1.1 2 0 1540 ?

*> 8.2.1.0/24 140.100.1.1 2 0 1540 ?

*> 11.11.11.0/24 0.0.0.0 0 32768 i

*> 12.2.1.0/24 140.100.1.1 2 0 1540 ?

*> 18.2.2.0/24 140.100.1.1 2 0 1540 ?

*> 28.3.2.0/24 140.100.1.1 2 0 1540 ?

*> 38.2.1.0/24 140.100.1.1 2 0 1540 ?

*> 101.101.101.0/24 10.1.1.100 0 0 100 i

* 140.100.1.0/24 140.100.1.1 2 0 1540 ?

*> 0.0.0.0 0 32768 i

PE1-RACK1#sho ip route bg 18.0.0.0/24 is subnetted, 1 subnets

B 18.2.2.0 [20/2] via 140.100.1.1, 00:37:27 3.0.0.0/24 is subnetted, 1 subnets

Trang 9

B 28.3.2.0 [20/2] via 140.100.1.1, 00:37:27

PE1-RACK1(config)#router bgp 65001 PE1-RACK1(config-router)#no auto-summary Å don’t forget to disable

summary

PE1-RACK1#ping 101.101.101.101 Type escape sequence to abort

!!!!!

Now let’s ping the BB2 Loopback

ASBR1-RACK1#ping 12.2.1.1 Type escape sequence to abort

Success rate is 0 percent (0/5)

This is the first sign that BB2 is not aware of the source network from ASBR1-to-PE1, which is 172.16.222.0

ASBR1-RACK1#traceroute 12.2.1.1 Type escape sequence to abort

Tracing the route to 12.2.1.1

1 172.16.222.1 4 msec 5 msec 0 msec

2 * * *

Let’s look at the BGP database before going further

ASBR1-RACK1#sho ip bgp BGP table version is 42, local router ID is 10.1.1.100 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

*> 3.3.3.0/24 10.1.1.1 0 65001 1540 ?

*> 8.2.1.0/24 10.1.1.1 0 65001 1540 ?

*> 11.11.11.0/24 10.1.1.1 0 0 65001 i

Trang 10

*> 12.2.1.0/24 10.1.1.1 0 65001 1540 ?

*> 18.2.2.0/24 10.1.1.1 0 65001 1540 ?

*> 28.3.2.0/24 10.1.1.1 0 65001 1540 ?

*> 38.2.1.0/24 10.1.1.1 0 65001 1540 ?

*> 101.101.101.0/24 0.0.0.0 0 32768 i

*> 140.100.1.0/24 10.1.1.1 0 0 65001 i

As you can see, 172.16.222.0 network is missing, and we need to

advertise this network from ASBR1 with the network statement or redistribute connected

ASBR1-RACK1(config)#router bgp 100 ASBR1-RACK1(config-router)#network 172.16.222.0 mask 255.255.255.0

ASBR1-RACK1#sho ip bgp BGP table version is 43, local router ID is 10.1.1.100 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

*> 3.3.3.0/24 10.1.1.1 0 65001 1540 ?

*> 8.2.1.0/24 10.1.1.1 0 65001 1540 ?

*> 11.11.11.0/24 10.1.1.1 0 0 65001 i

*> 12.2.1.0/24 10.1.1.1 0 65001 1540 ?

*> 18.2.2.0/24 10.1.1.1 0 65001 1540 ?

*> 28.3.2.0/24 10.1.1.1 0 65001 1540 ?

*> 38.2.1.0/24 10.1.1.1 0 65001 1540 ?

*> 101.101.101.0/24 0.0.0.0 0 32768 i

*> 140.100.1.0/24 10.1.1.1 0 0 65001 i

*> 172.16.222.0/24 0.0.0.0 0 32768 i

ASBR1-RACK1#ping 12.2.1.1 Type escape sequence to abort

!!!!!

We realize that this is all basic, but we must ensure that you are comfortable with basic BGP so that you are not puzzled later in the advanced BGP section and MPLS VPN In the advanced section we are not going to go into detail about basic components; we will be under assumption that you are familiar with BGP and are ready to move on

Task 8.5: Configure eBGP ASBR1-AS100 with eBGP ASBR2-AS200

Định dạng
Số trang	16
Dung lượng	236,12 KB