Bgp route reflector configuration at the cli, Network requirements, Configuration procedure – H3C Technologies H3C SecPath F1000-E User Manual
Page 512
487
BGP route reflector configuration at the CLI
Network requirements
In
, all firewalls run BGP.
•
Between SecPath A and SecPath B is an EBGP connection, and between SecPath C and SecPath B,
and between SecPath C and SecPath D are IBGP connections.
•
SecPath C is a route reflector with clients SecPath B and D.
•
SecPath D can learn route 1.0.0.0/8 from SecPath C.
Figure 292 Network diagram
Configuration procedure
1.
Configure IP addresses for interfaces. (Details not shown)
2.
Configure BGP connections:
# Configure SecPath A.
[SecPathA] bgp 100
[SecPathA-bgp] peer 192.1.1.2 as-number 200
# Inject network 1.0.0.0/8 to the BGP routing table.
[SecPathA-bgp] network 1.0.0.0
[SecPathA-bgp] quit
# Configure SecPath B.
[SecPathB] bgp 200
[SecPathB-bgp] peer 192.1.1.1 as-number 100
[SecPathB-bgp] peer 193.1.1.1 as-number 200
[SecPathB-bgp] peer 193.1.1.1 next-hop-local
[SecPathB-bgp] quit
# Configure SecPath C.
[SecPathC] bgp 200
[SecPathC-bgp] peer 193.1.1.2 as-number 200
[SecPathC-bgp] peer 194.1.1.2 as-number 200
[SecPathC-bgp] quit
# Configure SecPath D.
GE0/2
192.1.1.1/24
SecPath A
AS 100
GE0/1
192.1.1.2/24
GE0/1
1.1.1.1/8
GE0/2
193.1.1.2/24
GE0/1
194.1.1.2/24
GE0/1
194.1.1.1/24
GE0/2
193.1.1.1/24
SecPath C
SecPath B
SecPath D
AS 200
Route reflector
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer