Escenario full routing BGP y ruta por defecto BGP IPV6

Versión para imprimir

2 Archivos adjunto(s)

Archivo adjunto 3942

Configuración de router Facebook

Este router se usa para simular comunicación hacia Facebook. Como el router tiene su propio ASN esta publicando el prefijo 2906:666:3010:aaaa::/64 mediante BGP.

Configurar direccionamiento en las interfaces.

Este equipo tiene dos enlaces, uno hacia el router de Alestra y otro hacia un servidor que es a donde deben conectarse los clientes de la red ISP.

/interface ethernet

set [ find default-name=ether4 ] name=ether1

set [ find default-name=ether1 ] name=ether2

set [ find default-name=ether2 ] name=ether3

set [ find default-name=ether3 ] name=ether4

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=100 router-id=10.20.30.1

/ip dhcp-client

add disabled=no interface=ether1

/ipv6 address

add address=2906:666:3010:aaaa:bbbb:cccc:ddd:1 advertise=no interface=ether3

add address=2007:4860:4860::7776 advertise=no interface=ether2

/routing bgp network

add network=2906:666:3010:aaaa::/64 synchronize=no

add network=2007:4860:4000::/36 synchronize=no

/routing bgp peer

add address-families=ipv6 name=peer-to-alestra remote-address=2906:666:3010:aaaa:bbbb:cccc:ddd:2 remote-as=300

/system identity

set name=Facebook

/tool romon

set enabled=yes

Configuración de router Alestra



/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=300 router-id=10.20.30.2

/ip dhcp-client

add disabled=no interface=ether1

/ip dns

set servers=2001:4860:4860::8888,2001:4860:4860::7777

/ipv6 address

add address=2906:666:3010:aaaa:bbbb:cccc:ddd:2 advertise=no comment=\

    Facebook interface=ether1

add address=2906:666:3010:bbbb:bbbb:cccc:ccc:1 advertise=no comment=Google \

    interface=ether2

add address=2906:666:3010:cccc:bbbb:cccc:eee:1 advertise=no comment=\

    ISP_Borde interface=ether3

/ipv6 dhcp-client

add interface=ether1 pool-name="cliente " request=prefix

/routing bgp network

add network=2906:666:3010:aaaa::/64 synchronize=no

add network=2906:666:3010:bbbb::/64 synchronize=no

add network=2906:666:3010:cccc::/64 synchronize=no

/routing bgp peer

add address-families=ipv6 name=peer-to-facebook remote-address=\

    2906:666:3010:aaaa:bbbb:cccc:ddd:1 remote-as=100

add address-families=ipv6 name=peer-to-google remote-address=\

    2906:666:3010:bbbb:bbbb:cccc:ccc:2 remote-as=200

add address-families=ipv6 name=peer-to-isp-borde remote-address=\

    2906:666:3010:cccc:bbbb:cccc:eee:2 remote-as=400

/system identity

set name=Alestra

/tool romon

set enabled=yes

Configuración de router Google

/interface ethernet

set [ find default-name=ether3 ] name=ether1

set [ find default-name=ether4 ] name=ether2

set [ find default-name=ether1 ] name=ether3

set [ find default-name=ether2 ] name=ether4

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=200 router-id=10.20.30.3

/ip dhcp-client

add disabled=no interface=ether1

/ipv6 address

add address=2906:666:3010:bbbb:bbbb:cccc:ccc:2 advertise=no comment=to-Alestra \

    interface=ether1

add address=2001:4860:4860::8887 advertise=no comment=to-Server-Google \

    interface=ether2

add address=2002:5000:4fff::4487 advertise=no comment=to-Server-Apple \

    interface=ether3

/routing bgp network

add network=2906:666:3010:bbbb::/64 synchronize=no

add disabled=yes network=2001:4860:4860::/64 synchronize=no

add network=2001:4860:4000::/36 synchronize=no

add network=2002:5000:4000::/36 synchronize=no

/routing bgp peer

add address-families=ipv6 name=peer-to-alestra remote-address=\

    2906:666:3010:bbbb:bbbb:cccc:ccc:1 remote-as=300

/system identity

set name=Google

/tool romon

set enabled=yes

Configuración de router ISP-Border

/interface ethernet

set [ find default-name=ether3 ] name=ether1

set [ find default-name=ether4 ] name=ether2

set [ find default-name=ether1 ] name=ether3

set [ find default-name=ether2 ] name=ether4

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=400 redistribute-static=yes router-id=10.20.30.4

/ip dhcp-client

add disabled=no interface=ether1

/ip dns

set servers=2001:4860:4860::8888,2007:4860:4860::7777

/ipv6 address

add address=2906:666:3010:cccc:bbbb:cccc:eee:2 advertise=no comment=to-Alestra \

    interface=ether1

add address=2906:666:3010:dddd:bbbb:cccc:bbb:1 advertise=no comment=\

    to-ISP-Core interface=ether2

add address=2008:666:0:ffff::1 advertise=no comment=to-ISP-Core interface=\

    ether2

/ipv6 route

add distance=1 dst-address=2906:666:3010:eeee::/64 gateway=\

    2906:666:3010:dddd:bbbb:cccc:bbb:2

/routing bgp network

add network=2906:666:3010:cccc::/64 synchronize=no

add network=2906:666:3010:dddd::/64 synchronize=no

/routing bgp peer

add address-families=ipv6 name=peer-to-alestra remote-address=\

    2906:666:3010:cccc:bbbb:cccc:eee:1 remote-as=300

/system identity

set name=ISP-Border

/tool romon

set enabled=yes

Configuración de router ISP-Core



/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/ip dhcp-client

add disabled=no interface=ether1

/ip dns

set servers=2001:4860:4860::8888,2007:4860:4860::7777

/ipv6 address

add address=2906:666:3010:dddd:bbbb:cccc:bbb:2 advertise=no comment=\

    to-ISP-Borde interface=ether1

add address=2906:666:3010:eeee:bbbb:cccc:eee:1 comment=LAN interface=\

    ether2

add address=2008:666:0:ffff::2 advertise=no comment=to-ISP-Borde \

    interface=ether1

/ipv6 dhcp-client

add add-default-route=yes interface=ether1 pool-name=salida request=\

    address,prefix

/ipv6 nd

set [ find default=yes ] interface=ether2 other-configuration=yes

/ipv6 route

add distance=1 gateway=2906:666:3010:dddd:bbbb:cccc:bbb:1

/system identity

set name=ISP-Core

/tool romon

set enabled=yes

Nota

Esta ruta en router Borde es muy importante para poder sacar el trafico del Linux y poder contar con ping a los equipos de arriba

Archivo adjunto 3943

2 Archivos adjunto(s)

Caso 1
Archivo adjunto 3944

Configuración de router ISP-Border

/interface ethernet

set [ find default-name=ether2 ] name=ether1

set [ find default-name=ether3 ] name=ether2

set [ find default-name=ether4 ] name=ether3

set [ find default-name=ether1 ] name=ether4

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=400 redistribute-static=yes router-id=10.20.30.4

/ip dhcp-client

add disabled=no interface=ether1

/ip dns

set servers=2001:4860:4860::8888,2007:4860:4860::7777

/ipv6 address

add address=2906:666:3010:cccc:bbbb:cccc:eee:2 advertise=no comment=to-Alestra interface=ether1

add address=2906:666:3010:dddd:bbbb:cccc:bbb:1 advertise=no comment=to-ISP-Core interface=ether2

add address=2008:666:0:ffff::1 advertise=no comment=to-ISP-Core interface=ether2

add address=2906:666:3010:feee:bbbb:cccc:fee:1 comment="Zona 2" interface=ether3

/ipv6 route

add distance=1 dst-address=2906:666:3010:eeee::/64 gateway=2906:666:3010:dddd:bbbb:cccc:bbb:2

add check-gateway=ping distance=0 dst-address=2906:666:3010:ffff::/64 gateway=\

    2906:666:3010:feee:bbbb:cccc:fee:2 scope=10

/routing bgp network

add network=2906:666:3010::/56 synchronize=no

/routing bgp peer

add address-families=ipv6 name=peer-to-alestra remote-address=2906:666:3010:cccc:bbbb:cccc:eee:1 \

    remote-as=300

/system identity

set name=ISP-Border

/tool romon

set enabled=yes

Configuración de router ISP-Core

/interface ethernet

set [ find default-name=ether6 ] name=ether2

set [ find default-name=ether7 ] name=ether3

set [ find default-name=ether8 ] name=ether4

set [ find default-name=ether9 ] name=ether5

set [ find default-name=ether10 ] name=ether6

set [ find default-name=ether2 ] name=ether7

set [ find default-name=ether3 ] name=ether8

set [ find default-name=ether4 ] name=ether9

set [ find default-name=ether5 ] name=ether10

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/ip dhcp-client

add disabled=no interface=ether1

/ip dns

set servers=2001:4860:4860::8888,2007:4860:4860::7777

/ipv6 address

add address=2906:666:3010:dddd:bbbb:cccc:bbb:2 advertise=no comment=\

    to-ISP-Borde interface=ether1

add address=2906:666:3010:eeee:bbbb:cccc:eee:1 comment=LAN interface=\

    ether2

add address=2008:666:0:ffff::2 advertise=no comment=to-ISP-Borde \

    interface=ether1

/ipv6 dhcp-client

add add-default-route=yes interface=ether1 pool-name=salida request=\

    address,prefix

/ipv6 nd

set [ find default=yes ] interface=ether2 other-configuration=yes

/ipv6 route

add distance=1 gateway=2906:666:3010:dddd:bbbb:cccc:bbb:1

/system identity

set name=ISP-Core

/tool romon

set enabled=yes

Configuración de router Zona 2

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/ip dhcp-client

add disabled=no interface=ether1

/ipv6 address

add address=2906:666:3010:feee:bbbb:cccc:fee:2 advertise=no comment=\

    "Ruta a core" interface=ether1

add address=2906:666:3010:ffff:bbbb:cccc:fff:1 advertise=no comment=\

    "Ruta a cliente" interface=ether2

/ipv6 route

add distance=1 gateway=2906:666:3010:feee:bbbb:cccc:fee:1

/system identity

set name=Zona2

/tool romon

set enabled=yes

Pruebas

Archivo adjunto 3945

1 Archivos adjunto(s)

Caso 2
Archivo adjunto 3946

Configuración de router ISP-Border

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=400 redistribute-connected=yes redistribute-static=yes router-id=10.20.30.4

/ip dhcp-client

add disabled=no interface=ether1

/ip dns

set servers=2001:4860:4860::8888,2007:4860:4860::7777

/ipv6 address

add address=2906:666:3010:cccc:bbbb:cccc:eee:2 advertise=no comment=to-Alestra interface=ether1

add address=2906:666:3010:dddd:bbbb:cccc:bbb:1 advertise=no comment=to-ISP-Core interface=ether2

add address=2008:666:0:ffff::1 advertise=no comment=to-ISP-Core interface=ether2

add address=2906:666:3010:feee:bbbb:cccc:fee:1 comment="Zona 2" interface=ether3

/ipv6 route

add distance=1 dst-address=2906:666:3010:eeee::/64 gateway=2906:666:3010:dddd:bbbb:cccc:bbb:2

add check-gateway=ping disabled=yes distance=0 dst-address=2906:666:3010:ffff::/64 gateway=2906:666:3010:feee:bbbb:cccc:fee:2 scope=10

/routing bgp network

add network=2906:666:3010::/56 synchronize=no

/routing bgp peer

add address-families=ipv6 name=peer-to-alestra remote-address=2906:666:3010:cccc:bbbb:cccc:eee:1 remote-as=300

/system identity

set name=ISP-Border

/tool romon

set enabled=yes