配置脚本及测试步骤.docx
- 文档编号:8034693
- 上传时间:2023-01-28
- 格式:DOCX
- 页数:11
- 大小:182.12KB
配置脚本及测试步骤.docx
《配置脚本及测试步骤.docx》由会员分享,可在线阅读,更多相关《配置脚本及测试步骤.docx(11页珍藏版)》请在冰豆网上搜索。
配置脚本及测试步骤
第1章实施步骤
1.1数据中心
1.1.1BGP配置
4.1.1.2BJ-R7609-1
因该链路属于点到多点的链路,所以BGP协议配置已经配置完成,无需再配置
4.1.1.3BJ-R7609-2
1)配置静态路由实现7609-2与XX2811-1的loopback地址互通
iproute10.18.254.248255.255.255.25510.2.6.90
iproute10.18.254.248255.255.255.25510.2.7.90
2)配置BGP协议
routerbgp65535
neighbor10.18.254.248remote-as64152
neighbor10.18.254.248ebgp-multihop2
neighbor10.18.254.248update-sourceLoopback0
!
address-familyipv4
neighbor10.18.254.248activate
noauto-summary
nosynchronization
exit-address-family
1.1.2策略路由配置
1)BJ-R7609-1
ipaccess-listextendedBGP_DianXiao
permitip10.18.30.00.0.0.255any
permitip10.18.31.00.0.0.255any
permitip10.18.32.00.0.0.255any
2)BJ-R7609-2
ipaccess-listextendedSD_DianXiao
permitip10.18.30.00.0.0.255any
permitip10.18.31.00.0.0.255any
permitip10.18.32.00.0.0.255any
!
route-mapSD_DianXiaopermit10
matchipaddressSD_DianXiao
setlocal-preference300
!
route-mapSD_DianXiaopermit20
setlocal-preference200
3)策略应用
routerbgp65535
address-familyipv4
neighbor10.18.254.248route-mapSD_DianXiaoin
1.2XX省分公司
1.2.1现在网络情况
泰康人寿XX省分公司目前网络两台2811作为广域网接入路由器,与数据中心采用两条2MSDH线路,与灾备中心采用一条2MSDH链路。
1.2.2改造后网络情况
泰康人寿山省分公司网络改造后,将增加一台Cisco2911路由器为广域网接入路由器,共计三台广域网接入路由器
一台2911通过联通MPLSVPN链路至数据中心7609-1;
一台2811通过2X2MSDH连接至数据中心7609-2路由器。
一台2811通过2MSDH链路连接至灾备中心。
割接后的网络拓扑如下所示:
1.2.3实施步骤
4.2.3.1配置2911路由器
1)配置与联通互联地址
interfaceGigabitEthernet0/0
ipaddress10.2.9.89255.255.255.252
2)配置与SD-CS3750-01互联
interfaceGigabitEthernet0/1
ipaddress10.18.253.249255.255.255.252
3)配置与SD-CS3750-02互联
interfaceGigabitEthernet0/2
ipaddress10.18.253.253255.255.255.252
4)配置loopback地址
interfaceloopback0
ipaddress10.18.254.250255.255.255.255
5)OSPF协议配置
routerospf531
router-id10.18.254.250
redistributestaticsubnets
redistributebgp64152subnets
network10.18.253.00.0.0.255area0
network10.18.254.2500.0.0.0area0
6)BGP协议配置
routerbgp64152
bgprouter-id10.18.254.250
neighbor10.2.9.90remote-as9929
neighbor10.18.254.248remote-as64152
neighbor10.18.254.248update-sourceLoopback0
!
address-familyipv4
nosynchronization
network10.2.9.88mask255.255.255.252
neighbor10.2.9.90activate
neighbor10.18.254.248activate
neighbor10.18.254.248next-hop-self
network10.18.30.0mask255.255.0.0
network10.18.32.0mask255.255.0.0
network10.18.33.0mask255.255.0.0
network10.18.0.0mask255.255.0.0
还有一写银行的地址需要network,需要和用户确认,即需要和互除了10.18.0.0/16之外的地址段
noauto-summary
exit-address-family
7)发布汇总路由
iproute10.18.0.0255.255.0.0Null0
8)配置路由选路策略
ipaccess-listextendedCore_DianXiao
permitip10.1.30.00.0.0.255any
permitip10.1.31.00.0.0.255any
route-mapDianXiaopermit10
matchipaddressCore_DianXiao
setlocal-preference200
!
route-mapDianXiaopermit20
setlocal-preference300
!
routerbgp64152
address-familyipv4
neighbor10.2.9.90route-mapDianXiaoin
4.2.3.2配置HN-CR2811-01
1)配置loopback地址
interfaceloopback0
ipaddress10.18.254.248255.255.255.255
2)配置与BJ-R7609-2路由器loopback地址互通
iproute10.254.254.253255.255.255.25510.2.6.89
iproute10.254.254.253255.255.255.25510.2.7.89
3)OSPF协议配置
A将AREA531改成AREA0
network10.18.253.00.0.0.3area531
network10.18.253.80.0.0.3area531
B正确配置
routerospf531
router-id10.18.254.248
redistributestaticsubnets
redistributebgp64152subnets
network10.18.254.2480.0.0.0area0
network10.18.253.00.0.0.255area0
4)发布汇总路由
iproute10.18.0.0255.255.0.0Null0
5)配置静态路由实现7609-2与XX2811-1的loopback地址互通
iproute10.254.254.253255.255.255.25510.2.6.89
iproute10.254.254.253255.255.255.25510.2.7.89
6)BGP协议配置
routerbgp64152
bgprouter-id10.18.254.248
bgplog-neighbor-changes
neighbor10.18.254.250remote-as64152
neighbor10.18.254.250update-sourceLoopback0
neighbor10.254.254.253remote-as65535
neighbor10.254.254.253ebgp-multihop2
neighbor10.254.254.253update-sourceLoopback0
!
address-familyipv4
neighbor10.18.254.250activate
neighbor10.18.254.250next-hop-self
neighbor10.254.254.253activate
noauto-summary
nosynchronization
network10.18.0.0mask255.255.0.0
network10.18.30.0mask255.255.0.0
network10.18.32.0mask255.255.0.0
network10.18.33.0mask255.255.0.0
还有一些银行的地址需要network,需要和用户确认,即需要和互通除10.18.0.0/16之外的地址段
exit-address-family
9)配置路由选路策略
ipaccess-listextendedCore_DianXiao
permitip10.1.30.00.0.0.255any
permitip10.1.31.00.0.0.255any
!
route-mapDianXiaopermit10
matchipaddressCore_DianXiao
setlocal-preference300
!
route-mapDianXiaopermit20
setlocal-preference200
!
routerbgp64152
address-familyipv4
neighbor10.254.254.253route-mapDianXiaoin
4.2.3.3配置3750-01交换机
1)配置与2911互联地址
interfaceGigabitEthernet1/0/X
ipaddress10.18.253.253255.255.255.252
2)配置loopback地址
interfaceloopback0
ipaddress10.18.254.254255.255.255.255
3)OSPF协议配置更改
routerospf531
router-id10.18.254.254
redistributestaticsubnets
network10.18.254.25400.0.0area0
network10.18.253.000.0.255area0
network10.18.253.000.0.3area0
network10.18.253.400.0.3area0
network10.18.2.000.0.255area0
network10.18.6.000.0.255area0
network10.18.8.000.0.255area0
network10.18.9.000.0.255area0
network10.18.1.000.0.255area0
network10.18.128.000.0.255area0
4.2.3.4配置3750-02交换机
1)配置与2911互联地址
interfaceGigabitEthernet1/0/19
ipaddress10.18.253.249255.255.255.252
2)配置loopback地址
interfaceloopback0
ipaddress10.18.254.253255.255.255.255
3)OSPF协议配置更改
routerospf531
router-id10.18.254.253
network10.18.254.2530.0.0.0area0
network10.18.253.000.0.255area0
network10.18.253.000.0.3area0
network10.18.253.400.0.3area0
network10.18.2.000.0.255area0
network10.18.6.000.0.255area0
network10.18.8.000.0.255area0
network10.18.9.000.0.255area0
network10.18.1.000.0.255area0
network10.18.128.000.0.255area0
4.2.3.5配置HN-CR7200
1)配置loopback地址
interfaceloopback0
ipaddress10.18.254.251255.255.255.255
2)OSPF协议配置更改区域由Area
routerospf531
router-id10.18.254.251
network10.18.241.00.0.0.255area531
network10.18.253.00.0.0.255area0
第2章测试及检查步骤
一、检查内网loopback地址是否冲突
1.先按照实施方案中loopback地址,配置好设备loopback地址,在查找下全网loopback是否有重复的,这项工作可以在网络割接前检查。
如果有冲突将冲突的地址删除
二、配置2911路由器
2911加电配置,配置与运营商互通,配置和两台3750互通。
Ospf、bgp
三、配置分公司核心设备互联及ospf路由协议
四、配置2811-1bgp协议等
1.bgp路由协议查看
HN-CR2811-02#showipbgpsummary
BGProuteridentifier10.19.254.248,localASnumber64162
BGPtableversionis302,mainroutingtableversion302
48networkentriesusing5760bytesofmemory
93pathentriesusing4836bytesofmemory
17/7BGPpath/bestpathattributeentriesusing2108bytesofmemory
4BGPAS-PATHentriesusing96bytesofmemory
0BGProute-mapcacheentriesusing0bytesofmemory
0BGPfilter-listcacheentriesusing0bytesofmemory
Bitfieldcacheentries:
current3(atpeak4)using96bytesofmemory
BGPusing12896totalbytesofmemory
BGPactivity494/446prefixes,2657/2564paths,scaninterval60secs
NeighborVASMsgRcvdMsgSentTblVerInQOutQUp/DownState/PfxRcd
10.19.254.250464162115011833020001:
35:
594617(此处一定不是never)
2.OSPF协议查看
#showiposneighbor
NeighborIDPriStateDeadTimeAddressInterface
10.44.254.2520FULL/-00:
00:
3910.2.7.246Serial1/1/0.1/2/5/1:
0
10.20.241.530FULL/-00:
00:
3910.2.7.106Serial1/1/0.1/2/4/2:
0
在2911上showiproute10.1.30.1下一条是2811路由器
2811上看10.7.1.1下一条是2911路由器
五.如果以上测试没问题
1.ping10.2.1.1–t在一台用户客户机上长ping总部地址10.2.1.1
然后手动shutdown2911与运营商互联的端口,测试链路冗余性。
Shutdown后大约中断三分钟后恢复,
2.然后再打开该端口几秒钟后恢复
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 配置 脚本 测试 步骤