H3C Technologies H3C SecPath F1000-E - Manual (Page 514)

489
Figure 293 Network diagram
Device Interface IP address Device Interface IP address
SecPath A GE0/5 200.1.1.1/24 SecPath D GE0/1 10.1.5.1/24
GE0/1 10.1.2.1/24 GE0/2 10.1.3.2/24
GE0/2 10.1.3.1/24 SecPath E GE0/1 10.1.5.2/24
GE0/3 10.1.4.1/24 GE0/2 10.1.4.2/24
GE0/4 10.1.1.1/24 SecPath F GE0/1 9.1.1.1/24
SecPath B GE0/1 10.1.1.2/24 GE0/2 200.1.1.2/24
SecPath C GE0/1 10.1.2.2/24
Configuration procedure
1. Configure IP addresses for interfaces. (Details not shown)
2. Configure the BGP confederation:
# Configure SecPath A.
system-view
[SecPathA] bgp 65001
[SecPathA-bgp] router-id 1.1.1.1
[SecPathA-bgp] confederation id 200
[SecPathA-bgp] confederation peer-as 65002 65003
[SecPathA-bgp] peer 10.1.1.2 as-number 65002
[SecPathA-bgp] peer 10.1.1.2 next-hop-local
[SecPathA-bgp] peer 10.1.2.2 as-number 65003
[SecPathA-bgp] peer 10.1.2.2 next-hop-local
[SecPathA-bgp] quit
# Configure SecPath B.
system-view
[SecPathB] bgp 65002
[SecPathB-bgp] router-id 2.2.2.2
[SecPathB-bgp] confederation id 200
[SecPathB-bgp] confederation peer-as 65001 65003
[SecPathB-bgp] peer 10.1.1.1 as-number 65001
[SecPathB-bgp] quit
# Configure SecPath C.
SecPath F
SecPath A
SecPath D
SecPath E
AS 200
AS 100
GE0/1
SecPath B SecPath C
AS 65002
AS 65003 GE0/2
GE0/5
GE0/4
GE0/1
GE0/1
GE0/1
GE0/2
GE0/2
GE0/2
GE0/3
GE0/1
GE0/1
AS 65001