H3C Technologies H3C SecPath F1000-E User Manual
Page 518
493
[SecPathB-ospf-1-area-0.0.0.0] network 192.1.1.0 0.0.0.255
[SecPathB-ospf-1-area-0.0.0.0] network 194.1.1.0 0.0.0.255
[SecPathB-ospf-1-area-0.0.0.0] quit
[SecPathB-ospf-1] quit
# Configure SecPath C.
[SecPathC] ospf
[SecPathC-ospf] area 0
[SecPathC-ospf-1-area-0.0.0.0] network 193.1.1.0 0.0.0.255
[SecPathC-ospf-1-area-0.0.0.0] network 195.1.1.0 0.0.0.255
[SecPathC-ospf-1-area-0.0.0.0] quit
[SecPathC-ospf-1] quit
# Configure SecPath D.
[SecPathD] ospf
[SecPathD-ospf] area 0
[SecPathD-ospf-1-area-0.0.0.0] network 194.1.1.0 0.0.0.255
[SecPathD-ospf-1-area-0.0.0.0] network 195.1.1.0 0.0.0.255
[SecPathD-ospf-1-area-0.0.0.0] quit
[SecPathD-ospf-1] quit
3.
Configure BGP connections:
# Configure SecPath A.
[SecPathA] bgp 100
[SecPathA-bgp] peer 192.1.1.2 as-number 200
[SecPathA-bgp] peer 193.1.1.2 as-number 200
# Inject network 1.0.0.0/8 into the BGP routing table of SecPath A.
[SecPathA-bgp] network 1.0.0.0 8
[SecPathA-bgp] quit
# Configure SecPath B.
[SecPathB] bgp 200
[SecPathB-bgp] peer 192.1.1.1 as-number 100
[SecPathB-bgp] peer 194.1.1.1 as-number 200
[SecPathB-bgp] quit
# Configure SecPath C
[SecPathC] bgp 200
[SecPathC-bgp] peer 193.1.1.1 as-number 100
[SecPathC-bgp] peer 195.1.1.1 as-number 200
[SecPathC-bgp] quit
# Configure SecPath D
[SecPathD] bgp 200
[SecPathD-bgp] peer 194.1.1.2 as-number 200
[SecPathD-bgp] peer 195.1.1.2 as-number 200
[SecPathD-bgp] quit
4.
Configure different attribute values for the route 1.0.0.0/8 to make SecPath D give priority to the
route learned from SecPath C:
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer