BGP Juniper 没有反映给思科？

网络工程 思科 路由 BGP 杜松 多路复用器
2022-02-14 09:32:26

我对使用瞻博网络真的很陌生，而且我在使用 Route Reflector 配置时遇到了一些困难。

我有 3 个路由器 Cisco-Juniper-Juniper2

这是我的配置：思科：

 router bgp 100 
 neighbor 10.255.255.1 remote-as 100
 neighbor 10.255.255.1 update-source Loopback0
 neighbor 10.255.255.1 route-reflector-client
 neighbor 10.255.255.1 next-hop-self all
 neighbor 10.255.255.1 send-label
 neighbor 10.255.255.3 remote-as 100
 neighbor 10.255.255.3 update-source Loopback0
 neighbor 10.255.255.3 next-hop-self all
 neighbor 10.255.255.3 send-label

杜松：

bgp {
    group ibgp {
        type internal;
        local-address 10.255.255.3;
        family inet {
            labeled-unicast;
        }
        export next-hop-self;
        cluster 10.255.255.3;
        peer-as 100;
        neighbor 10.255.255.2;
        neighbor 10.255.255.4;
    }
}

policy-options {
policy-statement next-hop-self {
    term 1 {
        from route-type internal;
        then {
            next-hop self;
        }
    }
}

}

瞻博网络2：

bgp {
    group ibgp {
        type internal;
        local-address 10.255.255.4;
        family inet {
            labeled-unicast;        
        }
        export BGP_import_Lo0;
        peer-as 100;
        neighbor 10.255.255.3;
    }
}

policy-options {
policy-statement BGP_import_Lo0 {
    from {
        route-filter 10.255.255.4/32 exact;
    }
    then accept;
}

这是一个SeamlessMPLS尝试，Cisco + Juniper在IS-IS，Juniper + Juniper2在OSPF

BGP 使用 Loopback0 接口连接

在这 3 台机器之前，还有另一台 Cisco 机器正在使用网络 10.255.255.255.1 掩码 255.255.255.255 向 BGP 通告路由

路由 10.255.255.1 使用具有正确下一跳的此集群到达 Juniper 2（到 Cisco-> Juniper2 有效）

Juniper> show route advertising-protocol bgp 10.255.255.4
inet.0: 12 destinations, 13 routes (12 active, 0 holddown, 0 hidden)
  Prefix                  Nexthop              MED     Lclpref    AS path
* 10.255.255.1/32         Self                 0       100        I

但是 Juniper2 -> Cisco 不起作用

Juniper> show route receive-protocol bgp 10.255.255.4
inet.0: 12 destinations, 13 routes (12 active, 0 holddown, 0 hidden)
  Prefix                  Nexthop              MED     Lclpref    AS path
  10.255.255.4/32         10.255.255.4                 100        I

这条路线永远不会经过瞻博网络到达思科

所以我猜从瞻博网络到思科的过程中我错过了什么？因为思科从未听说过 10.255.255.4/32

有没有人可以弄清楚为什么？非常感谢您！

编辑 我可能过度简化了描述......好吧，我们开始：这是我的拓扑 在此处输入图像描述

ABR2 是瞻博网络

PE2 是瞻博网络

ABR1 和 ABR2 Lo0 在 OSPF 和 IS-IS 中

每个 IGP 区域都在运行 MPLS

IGP 区域之间没有重新分配

我正在尝试使用SeamlessMPLS 在PE1 和PE2 之间建立LSP

PE1 Lo0 是 10.255.255.1/32，它通过 2 个 RR（ABR1 和 ABR2）到达 PE2

我能够通过 ABR2 将 PE1（10.255.255.1/32）的 Lo0 反映到 PE2

但我无法通过 ABR2 将 PE2 的 Lo0 反映到 ABR1

顺便说一句，每个路由器都是 BGP 邻居，只与最近的路由器相邻，所以 ABR1 有 PE1 和 ABR2 作为邻居，ABR2 有 ABR1 和 PE2 ......等等

PE1：

PE1_2#sh run
Building configuration...

Current configuration : 2268 bytes
!
! Last configuration change at 20:01:09 UTC Wed Jan 2 2019
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE1_2
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no ip icmp rate-limit unreachable
!
!
!
!
!
!
!
!


!
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!         
!
!
!
!
!
redundancy
!
!
ip tcp synwait-time 5
! 
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 10.255.255.1 255.255.255.255
 ip ospf 1 area 0
!
interface Ethernet0/0
 ip address 10.0.1.1 255.255.255.0
 ip ospf network point-to-point
 ip ospf 1 area 0
 mpls ip
!
interface Ethernet0/1
 no ip address
 shutdown
!
interface Ethernet0/2
 no ip address
 shutdown
!
interface Ethernet0/3
 no ip address
 shutdown
!
interface Ethernet1/0
 no ip address
 shutdown
!
interface Ethernet1/1
 no ip address
 shutdown
!
interface Ethernet1/2
 no ip address
 shutdown
!
interface Ethernet1/3
 no ip address
 shutdown
!
interface Serial2/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/3
 no ip address
 shutdown
 serial restart-delay 0
!
router ospf 1
 passive-interface Loopback0
 network 10.255.255.1 0.0.0.0 area 0
!
router bgp 100
 bgp log-neighbor-changes
 network 10.255.255.1 mask 255.255.255.255
 neighbor 10.255.255.2 remote-as 100
 neighbor 10.255.255.2 update-source Loopback0
 neighbor 10.255.255.2 send-label
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line vty 0 4
 login
 transport input none
!
!
end

ABR1：

ABR1_2#sh run
Building configuration...

Current configuration : 2552 bytes
!
! Last configuration change at 17:58:29 UTC Wed Jan 2 2019
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ABR1_2
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no ip icmp rate-limit unreachable
!
!
!
!
!
!
!
!


!
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!         
!
!
!
!
!
redundancy
!
!
ip tcp synwait-time 5
! 
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 10.255.255.2 255.255.255.255
 ip router isis 
 ip ospf 1 area 0
!
interface Ethernet0/0
 ip address 10.0.2.1 255.255.255.252
 ip router isis 
 mpls ip
!
interface Ethernet0/1
 ip address 10.0.1.2 255.255.255.0
 ip ospf network point-to-point
 ip ospf 1 area 0
 mpls ip
!
interface Ethernet0/2
 no ip address
 shutdown
!
interface Ethernet0/3
 no ip address
 shutdown
!         
interface Ethernet1/0
 no ip address
 shutdown
!
interface Ethernet1/1
 no ip address
 shutdown
!
interface Ethernet1/2
 no ip address
 shutdown
!
interface Ethernet1/3
 no ip address
 shutdown
!
interface Serial2/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/1
 no ip address
 shutdown
 serial restart-delay 0
!         
interface Serial3/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/3
 no ip address
 shutdown
 serial restart-delay 0
!
router ospf 1
!
router isis
 net 49.0001.0102.5525.5002.00
!
router bgp 100
 bgp log-neighbor-changes
 neighbor 10.255.255.1 remote-as 100
 neighbor 10.255.255.1 update-source Loopback0
 neighbor 10.255.255.1 route-reflector-client
 neighbor 10.255.255.1 next-hop-self all
 neighbor 10.255.255.1 send-label
 neighbor 10.255.255.3 remote-as 100
 neighbor 10.255.255.3 update-source Loopback0
 neighbor 10.255.255.3 route-reflector-client
 neighbor 10.255.255.3 next-hop-self all
 neighbor 10.255.255.3 send-label
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
!
!
!
!
!
!         
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line vty 0 4
 login
 transport input none
!
!
end

磷：

P_2#sh run
Building configuration...

Current configuration : 2026 bytes
!
! Last configuration change at 20:02:07 UTC Wed Jan 2 2019
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname P_2
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no ip icmp rate-limit unreachable
!
!
!
!
!
!
!
!


!
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!         
!
!
!
!
!
redundancy
!
!
ip tcp synwait-time 5
! 
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 3.3.3.3 255.255.255.255
 ip router isis 
!
interface Ethernet0/0
 ip address 10.0.2.5 255.255.255.252
 ip router isis 
 mpls ip
!
interface Ethernet0/1
 ip address 10.0.2.2 255.255.255.252
 ip router isis 
 mpls ip
!
interface Ethernet0/2
 no ip address
 shutdown
!
interface Ethernet0/3
 no ip address
 shutdown
!
interface Ethernet1/0
 no ip address
 shutdown
!
interface Ethernet1/1
 no ip address
 shutdown
!
interface Ethernet1/2
 no ip address
 shutdown
!
interface Ethernet1/3
 no ip address
 shutdown
!
interface Serial2/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/3
 no ip address
 shutdown
 serial restart-delay 0
!
router isis
 net 49.0001.0030.0300.3003.00
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!         
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line vty 0 4
 login
 transport input none
!
!
end

ABR2：

root# run show configuration 
## Last commit: 2019-01-02 18:41:19 UTC by root
version 17.3R1.10;
system {
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
    ## Warning: missing mandatory statement(s): 'root-authentication'
}
interfaces {
    em0 {
        unit 0 {
            family inet {
                address 10.0.3.1/24;
            }
            family mpls;                
        }
    }
    em1 {
        unit 0 {
            family inet {
                address 10.0.2.6/30;
            }
            family iso;
            family mpls;
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 10.255.255.3/32;
            }
            family iso {
                address 49.0001.0102.5525.5003.00;
            }
        }
    }
}
routing-options {                       
    autonomous-system 100;
}
protocols {
    mpls {
        interface em1.0;
        interface em0.0;
    }
    bgp {
        group ibgp {
            type internal;
            local-address 10.255.255.3;
            family inet {
                labeled-unicast;
            }
            export next-hop-self;
            cluster 10.255.255.3;
            peer-as 100;
            neighbor 10.255.255.2;
            neighbor 10.255.255.4;
        }
    }
    isis {
        interface em1.0;                
        interface lo0.0;
    }
    ospf {
        area 0.0.0.0 {
            interface em0.0;
            interface lo0.0;
        }
    }
    ldp {
        interface em0.0;
        interface em1.0;
    }
}
policy-options {
    policy-statement next-hop-self {
        term 1 {
            from route-type internal;
            then {
                next-hop self;
            }
        }
    }
}

PE2：

root# run show configuration    
## Last commit: 2019-01-02 17:23:09 UTC by root
version 17.3R1.10;
system {
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
    ## Warning: missing mandatory statement(s): 'root-authentication'
}
interfaces {
    em1 {
        unit 0 {
            family inet {
                address 10.0.3.2/24;
            }
            family mpls;                
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 10.255.255.4/32;
            }
        }
    }
}
routing-options {
    autonomous-system 100;
}
protocols {
    mpls {
        interface em1.0;
    }
    bgp {
        group ibgp {
            type internal;
            local-address 10.255.255.4;
            family inet {
                labeled-unicast;        
            }
            export BGP_import_Lo0;
            peer-as 100;
            neighbor 10.255.255.3;
        }
    }
    ospf {
        area 0.0.0.0 {
            interface em1.0;
            interface lo0.0;
        }
    }
    ldp {
        interface em1.0;
    }
}
policy-options {
    policy-statement BGP_import_Lo0 {
        from {
            route-filter 10.255.255.4/32 exact;
        }
        then accept;
    }                                   
}
1个回答

好的，所以我现在知道问题出在哪里了...

问题是瞻博网络和思科的行为有很大不同

思科：如果您学习了一条 BGP 路由，但它已经在路由表中（例如来自 IGP），思科仍会将其视为 BGP 中的最佳路由，但会显示 RIB 故障，但仍会将其反映给 RR 客户端

Juniper：如果您学习了 BGP 路由，但它已经在路由表中（例如来自 IGP），如果它不用于路由，则不会反映它

我必须更改首选项，以便在路由表中通过 OSPF 使用 BGP 路由

其它你可能感兴趣的问题
上一篇没有端口号如何访问网站？ 下一篇关于 SFP 上具有 SC 连接的单模电缆的光纤问题