18DA113007MP-BGPforIPv6原理与实现ISSUE100课件

16四月202418DA113007MP-BGPforIPv6原理与实现ISSUE100MP-BGPforIPv6原理与实现前言BGP-4多协议扩展（MP-BGP）定义了两种新的BGP属性，可以用来完成IPv6的域间路由。3参考资料RFC2858MultiprotocolExtensionsforBGP-4RFC2545UseofBGP-4MultiprotocolExtensionsforIPv6Inter-DomainRoutingRFC1771ABorderGatewayProtocol4(BGP-4)RFC1700AssignedNumbersRFC2842CapabilitiesAdvertisementwithBGP-44培训目标学完本课程后，您应该能：了解MP-BGP的属性掌握MP-BGP如何实现IPv6域间路由5目录MP-BGPMP-BGPforIPv6MP-BGPforIPv6基本配置大型网络配置6MP-BGP（RFC2858）BGP协议的扩展承载多种网络层协议的路由信息IPv6单播6PE多播（IPv4,IPv6）MPLSVPN(IPv4,IPv6)CLNS会话建立阶段协商交换Multi-protocolReachabilityInformation。7MP-BGP（RFC2858）IPv4BGP-4属性NEXT-HOPAGGREGATORNLRIMP-BGP新增属性MP_REACH_NLRIMP_UNREACH_NLRInexthop信息能够用于特定的网络协议NLRI能够用于特定的网络协议RFC2858中规定任何一个BGPSpeaker(包括支持多协议的BGPSpeaker)都必须有一个IPv4地址以便用在AGGREGATOR中。8BGPUPDATEMessageUnfeasibleRouteLength(2octets)WithdrawnRoutes(variable)TotalpathAttributeLength(2octets)PathAttributes(variable)NetworkLayerReachabilityInformation(variable)Length(1octet)Prefix(variable)AttributeTypeAttributeLengthAttributeValueLength(1octet)Prefix(variable)9PathAttributeAttributeType(2octets)AttributeLengthAttributeValue

Attr.Typecode

01234567

01234567Attr.Flags1optional0well-known1transitive0non-transitive1ORIGIN2AS-PATH3NEXT-HOP4MULTI_EXIT_DISC5LOCAL_PREF6ATOMIC_AGGREGATE7AGGREGATOR14MP_REACH_NLRI15MP_UNREACH_NLRI10MP-BGP属性MP_REACH_NLRI承载可达网络集合和next-hop信息。MP_UNREACH_NLRI承载不可达网络集合信息。OptionalNon-transitive11MP_REACH_NLRIAddressFamilyIdentifier(2octets)SubsequentAddressFamilyIdentifier(1octet)LengthofNextHopNetworkAddress(1octet)NetworkAddressofNextHop(variable)NumberofSNPA(1octet)LengthoffirstSNPA(1octet)FirstSNPA(variable)LengthofsecondSNPA(1octet)SecondSNPA(variable)……LengthofLastSNPA(1octet)LastSNPA(variable)NetworkLayerReachabilityInformation(variable)Length(1octets)Prefix(variable)12MP_UNREACH_NLRIAddressFamilyIdentifier(2octets)SubsequentAddressFamilyIdentifier(1octet)WithdrawnRoutes(variable)需要撤销的路由的NLRI13CapabilitiesOptionalParameterMyAutonomousSystem(2octets)Version(1octet)HoldTime(2octets)BGPIdentifier(4octets)OptParmLength(1octet)OptionalParameters(4octets)BGPOPENMessageCapabilityCode(1octet)CapabilityLength(1octet)CapabilityValue(variable)CapabilitiesOptionalParameterCapabilityCode(1octet)1CapabilityLength(1octet)4MultiprotocolExtensionsCapabilitiesAFI(2octets)Res(1octet)SAFI(1octet)14目录MP-BGPMP-BGPforIPv6

MP-BGPforIPv6基本配置大型网络配置15MP-BGPforIPv6（RFC2545）IPv6单播地址范围GlobalSite-localLink-localMP-BGP对IPv6的特殊扩展Next-HOP包含一个GlobalIPv6地址和一个Link-Local地址NEXT-HOP，NLRI都使用IPv6地址和前缀表示16MP_REACH_NLRIAddressFamilyIdentifier(2octets)SubsequentAddressFamilyIdentifier(1octet)LengthofNextHopNetworkAddress(1octet)NetworkAddressofNextHop(variable)NumberofSNPA(1octet)LengthoffirstSNPA(1octet)FirstSNPA(variable)LengthofsecondSNPA(1octet)SecondSNPA(variable)……LengthofLastSNPA(1octet)LastSNPA(variable)NetworkLayerReachabilityInformation(variable)2IPv6NLRIisusedforunicastNLRIisusedformulticastRPFcheckNLRIisusedforbothunicastandmuticastRPFcheckLabel128VPNNext-hop只包含Global地址32Next-hop包含Global地址和Link-Local地址17目录MP-BGPMP-BGPforIPv6

MP-BGPforIPv6基本配置大型网络配置18MP-BGPforIPv6基本配置-配置实例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R2-NE40E-A和R1-NE5000E之间建立EBGP邻居关系，R2-NE40E-A和R6-NE20-C之间建立IBGP邻居关系。AS200内运行OSPFv3，在R1-NE5000E上将OSPFv3路由注入到BGP路由表中。19MP-BGPforIPv6基本配置-配置实例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64[R2-NE40E-A]bgp100[R2-NE40E-A-bgp]router-id2.2.2.2[R2-NE40E-A-bgp]peer2001:21::1as-number200[R2-NE40E-A-bgp]ipv6-family[R2-NE40E-A-bgp-af-ipv6]peer2001:21::1enable[R1-NE5000E]bgp200[R1-NE5000E-bgp]router-id1.1.1.1[R1-NE5000E-bgp]peer2001:21::2as-number100[R1-NE5000E-bgp]ipv6-family[R1-NE5000E-bgp-af-ipv6]peer2001:21::2enable[R2-NE40E-A-bgp-af-ipv6]displaybgpipv6peerBGPlocalrouterID:2.2.2.2LocalASnumber:100Totalnumberofpeers:1Peersinestablishedstate:1PeerVASMsgRcvdMsgSentOutQUp/DownStatePrefRcv2001:21::1420045000:01:14Established

020MP-BGPforIPv6基本配置-配置实例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64[R2-NE40E-A]bgp100[R2-NE40E-A-bgp]peer2001:26::2as-number100[R2-NE40E-A-bgp]ipv6-family[R2-NE40E-A-bgp-af-ipv6]peer2001:26::2enable[R6-NE20-C]bgp100[R6-NE20-C-bgp]router-id6.6.6.6[R6-NE20-C-bgp]peer2001:26::1as-number100[R6-NE20-C-bgp]ipv6-family[R6-NE20-C-bgp-af-ipv6]peer2001:26::1enable[R2-NE40E-A]displaybgpipv6peerBGPlocalrouterID:2.2.2.2LocalASnumber:100Totalnumberofpeers:2Peersinestablishedstate:2PeerVASMsgRcvdMsgSentOutQUp/DownStatePrefRcv2001:21::142003436000:29:40Established02001:26::241001010000:06:48Established021MP-BGPforIPv6基本配置-配置实例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64[R1-NE5000E]bgp200[R1-NE5000E-bgp]ipv6-family[R1-NE5000E-bgp-af-ipv6]import-routeospfv31<R2-NE40E-A>displaybgpipv6routing-tableTotalNumberofRoutes:2BGPLocalrouterIDis2.2.2.2Statuscodes:*-valid,>-best,d-damped,h-history,i-internal,s-suppressed,S-StaleOrigin:i-IGP,e-EGP,?-incomplete*>Network:2001:31::PrefixLen:64NextHop:2001:21::1LocPrf:Label:0PrefVal:0Path/Ogn:200?22MP-BGPforIPv6基本配置-配置实例R2-NE40E-AR1-NE5000ER6-NE20-Cg2/0/3g2/0/2g2/0/4g2/0/012122001:21::/642001:26::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64[R6-NE20-C]displaybgpipv6routing-tableTotalNumberofRoutes:2BGPLocalrouterIDis6.6.6.6Statuscodes:*-valid,>-best,d-damped,h-history,i-internal,s-suppressed,S-StaleOrigin:i-IGP,e-EGP,?-incomplete

iNetwork:2001:31::PrefixLen:64NextHop:2001:21::1LocPrf:100Label:0PrefVal:0Path/Ogn:200?为什么该路由为无效路由呢？23目录MP-BGPMP-BGPforIPv6MP-BGPforIPv6基本配置大型网络配置24大型BGP网络配置－路由反射器R2-NE40E-A和R4-NE20-A之间建立EBGP邻居关系，R1-NE5000E和R2-NE40E-A,R3-NE40E-B建立IBGP邻居关系。R1-NE5000E为AS100中的路由反射器，R3-NE40E-B为客户端。R2-NE40E-AR1-NE5000Eg2/0/3g2/0/2g2/0/41212001:21::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R4-NE20-Ag2/0/0g2/0/52001:24::/6412RouteReflectorClient25大型BGP网络配置－路由反射器R2-NE40E-AR1-NE5000Eg2/0/3g2/0/2g2/0/41212001:21::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R4-NE20-Ag2/0/0g2/0/52001:24::/6412RouteReflectorClient[R4-NE20-A]bgp100[R4-NE20-A-bgp]router-id4.4.4.4[R4-NE20-A-bgp]peer2001:24::1as-number100[R4-NE20-A-bgp]ipv6-family[R4-NE20-A-bgp-af-ipv6]peer2001:24::1enable[R4-NE20-A-bgp-af-ipv6]network2001:4::44128[R2-NE40E-A]bgp100[R2-NE40E-A-bgp]router-id2.2.2.2[R2-NE40E-A-bgp]peer2001:24::2as-number200[R2-NE40E-A-bgp]peer2001:1::11as-number100[R2-NE40E-A-bgp]peer2001:1::11connect-interfaceLoopBack1[R2-NE40E-A-bgp]ipv6-family[R2-NE40E-A-bgp-af-ipv6]peer2001:24::2enable[R2-NE40E-A-bgp-af-ipv6]peer2001:1::11enable[R2-NE40E-A-bgp-af-ipv6]peer2001:1::11next-hop-local[R1-NE5000E]bgp100[R1-NE5000E]router-id1.1.1.1[R1-NE5000E-bgp]peer2001:2::22as-number100[R1-NE5000E-bgp]peer2001:3::33as-number100[R1-NE5000E-bgp]peer2001:2::22connect-interfaceLoopBack1[R1-NE5000E-bgp]peer2001:3::33connect-interfaceLoopBack1[R1-NE5000E-bgp]ipv6-family[R1-NE5000E-bgp-af-ipv6]peer2001:2::22enable[R1-NE5000E-bgp-af-ipv6]peer2001:3::33enable[R3-NE40E-B]bgp100[R3-NE40E-B-bgp]router-id1.1.1.1[R3-NE40E-B-bgp]peer2001:1::11as-number100[R3-NE40E-B-bgp]peer2001:1::11connect-interfaceLoopBack1[R3-NE40E-B-bgp]ipv6-family[R3-NE40E-B-bgp-af-ipv6]peer2001:2::22enable26大型BGP网络配置－路由反射器R2-NE40E-AR1-NE5000Eg2/0/3g2/0/2g2/0/41212001:21::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R4-NE20-Ag2/0/0g2/0/52001:24::/6412RouteReflectorClient<R3-NE40E-B>displaybgpipv6routing-table<R1-NE5000E>displaybgpipv6routing-tableTotalNumberofRoutes:1BGPLocalrouterIDis1.1.1.1Statuscodes:*-valid,>-best,d-damped,h-history,i-internal,s-suppressed,S-StaleOrigin:i-IGP,e-EGP,?-incomplete*>iNetwork:2001:4::44PrefixLen:128NextHop:2001:2::22LocPrf:100Label:0PrefVal:0Path/Ogn:200i27大型BGP网络配置－路由反射器R2-NE40E-AR1-NE5000Eg2/0/3g2/0/2g2/0/41212001:21::/64AS100AS200R3-NE40E-Bg2/0/3g2/0/3122001:31::/64R4-NE20-Ag2/0/0g2/0/52001:24::/6412RouteReflectorClient[R1-NE5000E]bgp100[R1-NE5000E-bgp]ipv6-family[R1-NE5000E-bgp-af-ipv6]peer2001:3::33reflect-client<R3-NE40E-B>displaybgpipv6routing-tableTotalNumberofRoutes:1BGPLocalrouterIDis3.3.3.3Statuscodes:*-valid,>-best,d-damped,h-history,i-internal,s-suppressed,S-StaleOrigin:i-IGP,e-EGP,?-incomplete*>iNetwork:2001:4::44PrefixLen:128NextHop:2001:2::22LocPrf:100Label:0PrefVal:0Path/Ogn:200i28大型BGP网络配置－团体属性R4-NE20-A通过BGP发布路由信息给AS100，为该路由信息设置COMMUNITY属性NO_EXPORT，使得AS100内的路由器可以接收该路由信息，但是不会将该路由信息发给AS500。R2-NE40E-AAS2000R3-NE40E-Bg2/0/61R4-NE20-Ag2/0/0g2/0/52001:24::/6412R5-NE20-B22001:53::/64AS100g2/0/1g2/0/2g2/0/22001:32::/6412AS50029大型BGP网络配置－团体属性R2-NE40E-AAS2000R3-NE40E-Bg2/0/61R4-NE20-Ag2/0/0g2/0/52001:24::/6412R5-NE20-B22001:53::/64AS100g2/0/1g2/0/2g2/0/22001:32::/6412AS500[R4-NE20-A]interfaceLoopBack1[R4-NE20-A-LoopBack1]ipv6address2001:4::4000/128[R4-NE20-A]ipipv6-prefix1permit2001:4::4000128[R4-NE20-A]route-policytttpermitnode0[R4-NE20-A-route-policy]if-matchipv6addressprefix-list1[R4-NE20-A-route-policy]applycommunityno-export[R4-NE20-A-route-policy]quit[R4-NE20-A]bgp2000[R4-NE20-A-bgp]router-id4.4.4.4[R4-NE20-A-bgp]peer2001:24::1as-number100[R4-NE20-A-bgp]ipv6-family[R4-NE20-A-bgp-af-ipv6]peer2001:24::1enable[R4-NE20-A-bgp-af-ipv6]network2001:4::4000128[R4-NE20-A-bgp-af-ipv6]ipeer2001:24::1route-policytttexport[R4-NE20-A-bgp-af-ipv6]peer2001:24::1advertise-community[R2-NE40E-A]bgp100[R2-NE40E-A-bgp]router-id2.2.2.2[R2-NE40E-A-bgp]peer2001:24::2as-number2000[R2-NE40E-A-bgp]peer2001:32::2as-number100[R2-NE40E-A-bgp]ipv6-family[R2-NE40E-A-bgp-af-ipv6]peer2001:24::2enable[R2-NE40E-A-bgp-af-ipv6]peer2001:32::2enable[R2-NE40E-A-bgp-af-ipv6]peer2001:32::2advertise-community[R2-NE40E-A-bgp-af-ipv6]peer2001:32::2next-hop-local30大型BGP网络配置－团体属性R2-NE40E-AAS2000R3-NE40E-Bg2/0/61R4-NE20-Ag2/0/0g2/0/52001:24::/6412R5-