Simulazione connettivit BGP su due Datacenter

con link back-to-back

Indirizzamenti IP:
1.0.0.0/8 ISP (internet cloud)
11.0.0.0/16 Datacenter 1
12.0.0.0/16 Datacenter 2
La rete interna realizzata tutta OSPF area 0, i datacenter annunciano la propria aggregata pi
l'altra aggregata, solo se ricevuta via OSPF, con as-prepending.
Il core switch (layer 3) ridistribuisce su OSPF le statiche e le connesse. sempre il core switch che
ha come statica su null0 l'aggregata completa. In questo modo, se l'edge router non possiede
l'aggregata da annunciare, non la annuncia.
Loopbacks:
ISP1: 1.2.3.4
DC1RT: 11.0.0.1
DC1SW: 11.0.0.2
DC2RT: 12.0.0.1
DC2SW: 12.0.0.2
Reti interne:
DC1FW: 11.0.100.0/24
DC2FW: 12.0.100.0/24

Configurazioni salienti:
ISP1:
interface Loopback0
ip address 1.2.3.4 255.255.255.255 secondary
ip address 1.1.1.1 255.255.255.255
!
interface Ethernet0/0
ip address 1.0.0.1 255.255.255.252
!
interface Ethernet0/1
ip address 1.1.0.1 255.255.255.252
!
router bgp 1
no synchronization
network 1.0.0.0
neighbor customer peer-group
neighbor customer remote-as 2
neighbor customer default-originate
neighbor customer soft-reconfiguration inbound
neighbor 1.0.0.2 peer-group customer
neighbor 1.1.0.2 peer-group customer

P-t-P:
ISP1-DC1RT: 1.0.0.0/30
ISP1-DC2RT: 1.1.0.0/30
DC1RT-DC1SW: 11.0.0.0/30
DC1SW-DC1FW: 11.0.1.0/30
DC1SW-DC2SW: 11.0.9.0/30
DC2RT-DC2SW: 12.0.0.0/30
DC2SW-DC2FW: 12.0.1.0/30

no auto-summary
!
ip route 0.0.0.0 0.0.0.0 Null0
ip route 1.0.0.0 255.0.0.0 Null0
DC1RT:
interface Loopback0
ip address 11.0.0.1 255.255.255.255
!
interface FastEthernet0/0
ip address 1.0.0.2 255.255.255.252
!
interface FastEthernet0/1
ip address 11.0.1.1 255.255.255.252
!
router ospf 2
network 11.0.0.1 0.0.0.0 area 0
network 11.0.1.0 0.0.0.3 area 0
default-information originate
!
router bgp 2
no synchronization
network 11.0.0.0 mask 255.255.0.0
network 12.0.0.0 mask 255.255.0.0
neighbor 1.0.0.1 remote-as 1
neighbor 1.0.0.1 soft-reconfiguration inbound
neighbor 1.0.0.1 route-map as-prepend out
no auto-summary
!
ip prefix-list dc2 seq 5 permit 12.0.0.0/16 le 24
!
route-map as-prepend permit 10
match ip address prefix-list dc2
set as-path prepend 2 2
route-map as-prepend permit 20
DC1SW:
interface Loopback0
ip address 11.0.0.2 255.255.255.255
!
interface Ethernet0/0
ip address 11.0.1.2 255.255.255.252
!
interface Ethernet0/1
ip address 11.0.2.1 255.255.255.252
!
interface Ethernet1/0
ip address 11.0.9.1 255.255.255.252
!
router ospf 2
redistribute connected subnets
redistribute static subnets
network 11.0.0.2 0.0.0.0 area 0
network 11.0.1.0 0.0.0.3 area 0
network 11.0.9.0 0.0.0.3 area 0

!
ip route 11.0.0.0 255.255.0.0 Null0
ip route 11.0.100.0 255.255.255.0 11.0.2.2
DC2RT:
interface Loopback0
ip address 12.0.0.1 255.255.255.255
!
interface FastEthernet0/0
ip address 1.1.0.2 255.255.255.252
!
interface FastEthernet0/1
ip address 12.0.1.1 255.255.255.252
!
router ospf 2
network 12.0.0.1 0.0.0.0 area 0
network 12.0.1.0 0.0.0.3 area 0
default-information originate
!
router bgp 2
no synchronization
network 11.0.0.0 mask 255.255.0.0
network 12.0.0.0 mask 255.255.0.0
neighbor 1.1.0.1 remote-as 1
neighbor 1.1.0.1 soft-reconfiguration inbound
neighbor 1.1.0.1 route-map as-prepend out
no auto-summary
!
ip prefix-list dc1 seq 5 permit 11.0.0.0/16 le 24
!
route-map as-prepend permit 10
match ip address prefix-list dc1
set as-path prepend 2 2
route-map as-prepend permit 20
DC2SW:
interface Loopback0
ip address 12.0.0.2 255.255.255.255
!
interface Ethernet0/0
ip address 12.0.1.2 255.255.255.252
!
interface Ethernet0/1
ip address 12.0.2.1 255.255.255.252
!
interface Ethernet1/0
ip address 11.0.9.2 255.255.255.252
!
router ospf 2
redistribute connected subnets
redistribute static subnets
network 11.0.9.0 0.0.0.3 area 0
network 12.0.0.2 0.0.0.0 area 0
network 12.0.1.0 0.0.0.3 area 0
!

ip route 12.0.0.0 255.255.0.0 Null0

ip route 12.0.100.0 255.255.255.0 12.0.2.2

Verifica iniziale operativit rete:

Rotte DC1SW

Rotte DC2SW

Rotte e BGP DC1RT

Rotte e BGP DC2RT

Traceroute da DC1

Traceroute da DC2

Rotte e BGP ISP

Traceroute da ISP verso DC1 e DC2

Simulazione failure DC2RT: vediamo come il traffico viene veicolato tramite il DC-1
Rotte e BGP DC2RT

Rotte e BGP ISP

Traceroute da DC2

Traceroute da ISP verso DC2