配置脚本及测试步骤.docx
《配置脚本及测试步骤.docx》由会员分享，可在线阅读，更多相关《配置脚本及测试步骤.docx（11页珍藏版）》请在冰豆网上搜索。
配置脚本及测试步骤
第1章实施步骤
1.1数据中心
1.1.1BGP配置
4.1.1.2BJ-R7609-1
因该链路属于点到多点的链路，所以BGP协议配置已经配置完成，无需再配置
4.1.1.3BJ-R7609-2
1）配置静态路由实现7609-2与XX2811-1的loopback地址互通
iproute10.18.254.248255.255.255.25510.2.6.90
iproute10.18.254.248255.255.255.25510.2.7.90
2）配置BGP协议
routerbgp65535
neighbor10.18.254.248remote-as64152
neighbor10.18.254.248ebgp-multihop2
neighbor10.18.254.248update-sourceLoopback0
!
address-familyipv4
neighbor10.18.254.248activate
noauto-summary
nosynchronization
exit-address-family
1.1.2策略路由配置
1）BJ-R7609-1
ipaccess-listextendedBGP_DianXiao
permitip10.18.30.00.0.0.255any
permitip10.18.31.00.0.0.255any
permitip10.18.32.00.0.0.255any
2）BJ-R7609-2
ipaccess-listextendedSD_DianXiao
permitip10.18.30.00.0.0.255any
permitip10.18.31.00.0.0.255any
permitip10.18.32.00.0.0.255any
!
route-mapSD_DianXiaopermit10
matchipaddressSD_DianXiao
setlocal-preference300
!
route-mapSD_DianXiaopermit20
setlocal-preference200
3）策略应用
routerbgp65535
address-familyipv4
neighbor10.18.254.248route-mapSD_DianXiaoin
1.2XX省分公司
1.2.1现在网络情况
泰康人寿XX省分公司目前网络两台2811作为广域网接入路由器，与数据中心采用两条2MSDH线路，与灾备中心采用一条2MSDH链路。
1.2.2改造后网络情况
泰康人寿山省分公司网络改造后，将增加一台Cisco2911路由器为广域网接入路由器，共计三台广域网接入路由器
一台2911通过联通MPLSVPN链路至数据中心7609-1；
一台2811通过2X2MSDH连接至数据中心7609-2路由器。
一台2811通过2MSDH链路连接至灾备中心。
割接后的网络拓扑如下所示：
1.2.3实施步骤
4.2.3.1配置2911路由器
1）配置与联通互联地址
interfaceGigabitEthernet0/0
ipaddress10.2.9.89255.255.255.252
2）配置与SD-CS3750-01互联
interfaceGigabitEthernet0/1
ipaddress10.18.253.249255.255.255.252
3）配置与SD-CS3750-02互联
interfaceGigabitEthernet0/2
ipaddress10.18.253.253255.255.255.252
4）配置loopback地址
interfaceloopback0
ipaddress10.18.254.250255.255.255.255
5）OSPF协议配置
routerospf531
router-id10.18.254.250
redistributestaticsubnets
redistributebgp64152subnets
network10.18.253.00.0.0.255area0
network10.18.254.2500.0.0.0area0
6）BGP协议配置
routerbgp64152
bgprouter-id10.18.254.250
neighbor10.2.9.90remote-as9929
neighbor10.18.254.248remote-as64152
neighbor10.18.254.248update-sourceLoopback0
!
address-familyipv4
nosynchronization
network10.2.9.88mask255.255.255.252
neighbor10.2.9.90activate
neighbor10.18.254.248activate
neighbor10.18.254.248next-hop-self
network10.18.30.0mask255.255.0.0
network10.18.32.0mask255.255.0.0
network10.18.33.0mask255.255.0.0
network10.18.0.0mask255.255.0.0
还有一写银行的地址需要network，需要和用户确认，即需要和互除了10.18.0.0/16之外的地址段
noauto-summary
exit-address-family
7）发布汇总路由
iproute10.18.0.0255.255.0.0Null0
8）配置路由选路策略
ipaccess-listextendedCore_DianXiao
permitip10.1.30.00.0.0.255any
permitip10.1.31.00.0.0.255any
route-mapDianXiaopermit10
matchipaddressCore_DianXiao
setlocal-preference200
！
route-mapDianXiaopermit20
setlocal-preference300
！
routerbgp64152
address-familyipv4
neighbor10.2.9.90route-mapDianXiaoin
4.2.3.2配置HN-CR2811-01
1）配置loopback地址
interfaceloopback0
ipaddress10.18.254.248255.255.255.255
2）配置与BJ-R7609-2路由器loopback地址互通
iproute10.254.254.253255.255.255.25510.2.6.89
iproute10.254.254.253255.255.255.25510.2.7.89
3）OSPF协议配置
A将AREA531改成AREA0
network10.18.253.00.0.0.3area531
network10.18.253.80.0.0.3area531
B正确配置
routerospf531
router-id10.18.254.248
redistributestaticsubnets
redistributebgp64152subnets
network10.18.254.2480.0.0.0area0
network10.18.253.00.0.0.255area0
4）发布汇总路由
iproute10.18.0.0255.255.0.0Null0
5）配置静态路由实现7609-2与XX2811-1的loopback地址互通
iproute10.254.254.253255.255.255.25510.2.6.89
iproute10.254.254.253255.255.255.25510.2.7.89
6）BGP协议配置
routerbgp64152
bgprouter-id10.18.254.248
bgplog-neighbor-changes
neighbor10.18.254.250remote-as64152
neighbor10.18.254.250update-sourceLoopback0
neighbor10.254.254.253remote-as65535
neighbor10.254.254.253ebgp-multihop2
neighbor10.254.254.253update-sourceLoopback0
!
address-familyipv4
neighbor10.18.254.250activate
neighbor10.18.254.250next-hop-self
neighbor10.254.254.253activate
noauto-summary
nosynchronization
network10.18.0.0mask255.255.0.0
network10.18.30.0mask255.255.0.0
network10.18.32.0mask255.255.0.0
network10.18.33.0mask255.255.0.0
还有一些银行的地址需要network，需要和用户确认，即需要和互通除10.18.0.0/16之外的地址段
exit-address-family
9）配置路由选路策略
ipaccess-listextendedCore_DianXiao
permitip10.1.30.00.0.0.255any
permitip10.1.31.00.0.0.255any
！
route-mapDianXiaopermit10
matchipaddressCore_DianXiao
setlocal-preference300
！
route-mapDianXiaopermit20
setlocal-preference200
！
routerbgp64152
address-familyipv4
neighbor10.254.254.253route-mapDianXiaoin
4.2.3.3配置3750-01交换机
1）配置与2911互联地址
interfaceGigabitEthernet1/0/X
ipaddress10.18.253.253255.255.255.252
2）配置loopback地址
interfaceloopback0
ipaddress10.18.254.254255.255.255.255
3）OSPF协议配置更改
routerospf531
router-id10.18.254.254
redistributestaticsubnets
network10.18.254.25400.0.0area0
network10.18.253.000.0.255area0
network10.18.253.000.0.3area0
network10.18.253.400.0.3area0
network10.18.2.000.0.255area0
network10.18.6.000.0.255area0
network10.18.8.000.0.255area0
network10.18.9.000.0.255area0
network10.18.1.000.0.255area0
network10.18.128.000.0.255area0
4.2.3.4配置3750-02交换机
1）配置与2911互联地址
interfaceGigabitEthernet1/0/19
ipaddress10.18.253.249255.255.255.252
2）配置loopback地址
interfaceloopback0
ipaddress10.18.254.253255.255.255.255
3）OSPF协议配置更改
routerospf531
router-id10.18.254.253
network10.18.254.2530.0.0.0area0
network10.18.253.000.0.255area0
network10.18.253.000.0.3area0
network10.18.253.400.0.3area0
network10.18.2.000.0.255area0
network10.18.6.000.0.255area0
network10.18.8.000.0.255area0
network10.18.9.000.0.255area0
network10.18.1.000.0.255area0
network10.18.128.000.0.255area0
4.2.3.5配置HN-CR7200
1）配置loopback地址
interfaceloopback0
ipaddress10.18.254.251255.255.255.255
2）OSPF协议配置更改区域由Area
routerospf531
router-id10.18.254.251
network10.18.241.00.0.0.255area531
network10.18.253.00.0.0.255area0
第2章测试及检查步骤
一、检查内网loopback地址是否冲突
1.先按照实施方案中loopback地址，配置好设备loopback地址，在查找下全网loopback是否有重复的，这项工作可以在网络割接前检查。
如果有冲突将冲突的地址删除
二、配置2911路由器
2911加电配置，配置与运营商互通，配置和两台3750互通。
Ospf、bgp
三、配置分公司核心设备互联及ospf路由协议
四、配置2811-1bgp协议等
1.bgp路由协议查看
HN-CR2811-02#showipbgpsummary
BGProuteridentifier10.19.254.248,localASnumber64162
BGPtableversionis302,mainroutingtableversion302
48networkentriesusing5760bytesofmemory
93pathentriesusing4836bytesofmemory
17/7BGPpath/bestpathattributeentriesusing2108bytesofmemory
4BGPAS-PATHentriesusing96bytesofmemory
0BGProute-mapcacheentriesusing0bytesofmemory
0BGPfilter-listcacheentriesusing0bytesofmemory
Bitfieldcacheentries:
current3（atpeak4）using96bytesofmemory
BGPusing12896totalbytesofmemory
BGPactivity494/446prefixes,2657/2564paths,scaninterval60secs
NeighborVASMsgRcvdMsgSentTblVerInQOutQUp/DownState/PfxRcd
10.19.254.250464162115011833020001:
35:
594617（此处一定不是never）
2.OSPF协议查看
#showiposneighbor
NeighborIDPriStateDeadTimeAddressInterface
10.44.254.2520FULL/-00:
00:
3910.2.7.246Serial1/1/0.1/2/5/1:
0
10.20.241.530FULL/-00:
00:
3910.2.7.106Serial1/1/0.1/2/4/2:
0
在2911上showiproute10.1.30.1下一条是2811路由器
2811上看10.7.1.1下一条是2911路由器
五．如果以上测试没问题
1.ping10.2.1.1–t在一台用户客户机上长ping总部地址10.2.1.1
然后手动shutdown2911与运营商互联的端口，测试链路冗余性。
Shutdown后大约中断三分钟后恢复，
2.然后再打开该端口几秒钟后恢复
升级会员 