H3C Technologies H3C SecPath F1000-E - Manual (Page 505)

480
Configuration procedure
1. Configure IP addresses for interfaces. (Details not shown)
2. Configure OSPF:
Enable OSPF in AS 65009, so that SecPath B can obtain the route to 9.1.2.0/24.
# Configure SecPath B.
system-view
[SecPathB] ospf 1
[SecPathB-ospf-1] area 0
[SecPathB-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0
[SecPathB-ospf-1-area-0.0.0.0] network 9.1.1.0 0.0.0.255
[SecPathB-ospf-1-area-0.0.0.0] quit
[SecPathB-ospf-1] quit
# Configure SecPath C.
system-view
[SecPathC] ospf 1
[SecPathC-ospf-1] import-route direct
[SecPathC-ospf-1] area 0
[SecPathC-ospf-1-area-0.0.0.0] network 9.1.1.0 0.0.0.255
[SecPathC-ospf-1-area-0.0.0.0] quit
[SecPathC-ospf-1] quit
3. Configure the EBGP connection:
Configure the EBGP connection and inject network 8.1.1.0/24 to the BGP routing table of
SecPath A, so that SecPath B can obtain the route to 8.1.1.0/24.
# Configure SecPath A.
system-view
[SecPathA] bgp 65008
[SecPathA-bgp] router-id 1.1.1.1
[SecPathA-bgp] peer 3.1.1.1 as-number 65009
[SecPathA-bgp] network 8.1.1.0 24
[SecPathA-bgp] quit
# Configure SecPath B.
[SecPathB] bgp 65009
[SecPathB-bgp] router-id 2.2.2.2
[SecPathB-bgp] peer 3.1.1.2 as-number 65008
4. Configure BGP and IGP synchronization:
{
Configure BGP to redistribute routes from OSPF on SecPath B, so that SecPath A can obtain the
route to 9.1.2.0/24.
{
Configure OSPF to redistribute routes from BGP on SecPath B, so that SecPath C can obtain the
route to 8.1.1.0/24.
# Configure BGP to redistribute routes from OSPF on SecPath B.
[SecPathB-bgp] import-route ospf 1
[SecPathB-bgp] quit
[SecPathB] ospf 1
[SecPathB-ospf-1] import-route bgp
[SecPathB-ospf-1] quit