在BGP视图下执行graceful-restart会导致BGP重新协商,然后BGP会中断1秒左右
组网:
Loopback10: 192.168.114.1)F1070(G1/0/9 10.11.10.10)------三层设备------(G1/0/910.11.10.100)F5020(loopback10 192.168.110.1)
基本配置:
F1070
interface LoopBack10
ip binding vpn-instance 123
ip address 192.168.114.1 255.255.255.0
interface GigabitEthernet1/0/9
port link-mode route
ip binding vpn-instance 123
ip address 10.11.10.10 255.255.255.0
#
ip vpn-instance 123
route-distinguisher 10:11(必须配置)
vpn-target 10:10 import-extcommunity
vpn-target 10:10 export-extcommunity
bgp 100
graceful-restart
#
ip vpn-instance 123
router-id 111.111.111.111
peer 10.11.10.100 as-number 200
#
address-family ipv4 unicast
preference 10 10 10(必须配置,否则BGP不会加入IP路由表,因为缺省优先级是255)
import-route direct
network 192.168.114.1 255.255.255.255
peer 10.11.10.100 enable
#
策略:不要忘记接口加入安全域,并且策略下要配置VRF
security-policy ip
rule 9999 name 9999
action pass
vrf 123
#
F5020
interface LoopBack10
ip binding vpn-instance 123
ip address 192.168.110.1 255.255.255.0
#
interface GigabitEthernet1/0/9
port link-mode route
ip binding vpn-instance 123
ip address 10.11.10.100 255.255.255.0
ip vpn-instance 123
route-distinguisher 10:11
vpn-target 10:10 import-extcommunity
vpn-target 10:10 export-extcommunity
#
bgp 200
#
ip vpn-instance 123
router-id 222.222.222.222
peer 10.11.10.10 as-number 100
#
address-family ipv4 unicast
preference 10 10 10
import-route direct
network 192.168.110.1 255.255.255.255
peer 10.11.10.10 enable
#
策略:不要忘记接口加入安全域,并且策略下要配置VRF
security-policy ip
rule 9999 name 9999
action pass
vrf 123
配置完成之后分别在F1070与F5020上查看BGP邻居与BGP路由表
F1070
[F1070-bgp-default]dis bgp peer ipv4 vpn-instance 123
BGP local router ID: 111.111.111.111
Local AS number: 100
Total number of peers: 1 Peers in established state: 1
* - Dynamically created peer
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
10.11.10.100 200 23 18 0 2 00:13:36 Established
[F1070-bgp-default]dis bgp routing-table ipv4 vpn-instance 123
Total number of routes: 6
BGP local router ID is 111.111.111.111
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
* > 10.11.10.0/24 10.11.10.10 0 32768 ?
* e 10.11.10.100 0 0 200?
* > 10.11.10.10/32 127.0.0.1 0 32768 ?
* >e 192.168.110.0 10.11.10.100 0 0 200?
* > 192.168.114.0 192.168.114.1 0 32768 ?
* > 192.168.114.1/32 127.0.0.1 0 32768 i
F5020
[F5020_IRF-bgp-default]dis bgp peer ipv4 vpn-instance 123
BGP local router ID: 222.222.222.222
Local AS number: 200
Total number of peers: 1 Peers in established state: 1
* - Dynamically created peer
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
10.11.10.10 100 18 20 0 2 00:12:58 Established
[F5020_IRF]dis bgp routing-table ipv4 vpn-instance 123
Total number of routes: 6
BGP local router ID is 222.222.222.222
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
* > 10.11.10.0/24 10.11.10.100 0 32768 ?
* e 10.11.10.10 0 0 100?
* > 10.11.10.100/32 127.0.0.1 0 32768 ?
* > 192.168.110.0 192.168.110.1 0 32768 ?
* > 192.168.110.1/32 127.0.0.1 0 32768 i
* >e 192.168.114.0 10.11.10.10 0 0 100?
在F5020上长ping1000个包,在F1070 BGP视图下执行undo graceful-restart并且重新配置graceful-restart,F5020上ping包会中断2个将近1秒钟
该现象属于正常现象,无需关注
不涉及
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作