Escenario full routing BGP y ruta por defecto BGP

[JuanJose]

Prueba 3


Alestra

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=300 redistribute-connected=yes redistribute-static=yes

/ip address

add address=1.1.1.2/30 comment=to-Facebook interface=ether1 network=1.1.1.0

add address=2.2.2.2/24 comment=to-Google interface=ether2 network=2.2.2.0

add address=3.3.3.1/24 comment=to-ISP-Borde interface=ether3 network=3.3.3.0

add address=7.7.7.1/24 comment=to-ISP-Borde2 interface=ether4 network=7.7.7.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=3.3.3.0/24 synchronize=no

/routing bgp peer

add name=peer-to-facebook remote-address=1.1.1.1 remote-as=100

add name=peer-to-google remote-address=2.2.2.1 remote-as=200

add name=peer-to-isp-borde remote-address=3.3.3.2 remote-as=400

add name=peer-to-isp-core2 remote-address=7.7.7.2 remote-as=500

/system identity

set name=Alestra

/tool romon

set enabled=yes

Borde 2

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=500

/ip address

add address=7.7.7.2/24 interface=ether1 network=7.7.7.0

add address=5.5.5.254/24 interface=ether2 network=5.5.5.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=5.5.4.0/22 synchronize=no

/routing bgp peer

add name=peer1 remote-address=7.7.7.1 remote-as=300

/system identity

set name=Isp-Borde2

/tool romon

Core 2

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/ip address

add address=5.5.5.2/24 interface=ether1 network=5.5.5.0

add address=192.168.10.254/24 interface=ether2 network=192.168.10.0

/ip firewall nat

add action=masquerade chain=srcnat out-interface=ether1

/ip route

add distance=1 gateway=5.5.5.254

/system identity

set name=ISP-Core

/tool romon

[JuanJose]

Prueba 4


Google

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=200

/interface bridge port

add bridge=bridge1 interface=ether1

add bridge=bridge1 interface=ether3

/ip address

add address=2.2.2.1/24 comment=to-Alestra interface=ether1 network=2.2.2.0

add address=8.8.8.2/24 comment=to-Server-Google interface=ether2 network=\

    8.8.8.0

/ip dhcp-client

# DHCP client can not run on slave interface!

add disabled=no interface=ether1

/routing bgp network

add network=2.2.2.0/24 synchronize=no

add network=8.8.8.0/24 synchronize=no

/routing bgp peer

add name=peer-to-alestra remote-address=2.2.2.2 remote-as=300

add name=peer1 remote-address=2.2.2.10 remote-as=600

/system identity

set name=Google

/tool romon

set enabled=yes

Cirion

/interface ethernet

set [ find default-name=ether4 ] name=ether1

set [ find default-name=ether1 ] name=ether2

set [ find default-name=ether2 ] name=ether3

set [ find default-name=ether3 ] name=ether4

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=600 redistribute-connected=yes

/ip address

add address=2.2.2.10/24 interface=ether1 network=2.2.2.0

add address=6.6.6.1/24 interface=ether2 network=6.6.6.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=6.6.6.0/24 synchronize=no

/routing bgp peer

add name=peer1 remote-address=2.2.2.1 remote-as=200

add name=peer2 remote-address=6.6.6.2 remote-as=700

/system identity

set name=Cirion

/tool romon

set enabled=yes

ISP-Borde3

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=700

/ip address

add address=6.6.6.2/24 interface=ether1 network=6.6.6.0

add address=7.7.7.1/24 interface=ether2 network=7.7.7.0

/ip dhcp-client

add disabled=no interface=ether1

/ip firewall nat

add action=masquerade chain=srcnat out-interface=ether1

/routing bgp network

add network=7.7.4.0/24 synchronize=no

/routing bgp peer

add name=peer1 remote-address=6.6.6.1 remote-as=600

/system identity

set name=ISP-Borde3

/tool romon

set enabled=yes

ISP-Core3

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/ip address

add address=7.7.7.2/24 interface=ether1 network=7.7.7.0

add address=192.168.10.254/24 interface=ether2 network=192.168.10.0

/ip dhcp-client

add disabled=no interface=ether1

/ip firewall nat

add action=masquerade chain=srcnat out-interface=ether1

/ip route

add distance=1 gateway=7.7.7.1

/system identity

set name=ISP-Core3

/tool romon

set enabled=yes

[NEMUELOXTE]

Laboratorio full routing BGP y ruta por defecto BGP

CASO 1
Agrega router ISP-Zona2 conectado a isp-borde y que use la red publica 4.4.7.0/24, luego agregas una laptop y puedas hacer ping hacía .8.8.8, 1.1.1.1, 2.2.2.1, 3.3.3.1




ISP-BORDER

/interface wireless security-profiles

set [ finddefault=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=400 redistribute-connected=yesredistribute-static=yes

/ip address

addaddress=3.3.3.2/24 comment=to-Alestra interface=ether1 network=3.3.3.0

addaddress=4.4.5.254/24 comment=to-ISP-Core interface=ether2 network=4.4.5.0

addaddress=4.4.7.254/24 comment=to-ISP-Core interface=ether3 network=4.4.7.0

/ip dhcp-client

adddisabled=nointerface=ether1

/routing bgp network

addnetwork=4.4.4.0/22 synchronize=no

addnetwork=4.4.5.0/24 synchronize=no

addnetwork=4.4.7.0/24 synchronize=no

/routing bgp peer

addname=peer-to-alestra remote-address=3.3.3.1 remote-as=300

/system identity

setname=Borde

ZONA 2

/interface wireless security-profiles

set [ finddefault=yes ] supplicant-identity=MikroTik

/ip address

addaddress=4.4.7.2/24 interface=ether1 network=4.4.7.0

addaddress=192.168.10.254/24 interface=ether2 network=192.168.10.0

/ip firewall nat

addaction=masquerade chain=srcnat out-interface=ether1

/ip route

adddistance=1 gateway=4.4.7.254

/system identity

setname=Zona2

/tool romon

setenabled=yes

CASO 2
Ahora elimina router ISP-zona2, y conecta una laptop enether3 directamente a ISP Borde, y asigna una ip de la red 4.4.7.0/24. Luego has pinga 8.8.8.8,1.1.1.1,2.2.2.1, 3.3.3.



ALESTRA

/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=300 redistribute-connected=yes

/ip address

add address=1.1.1.2/30 comment=to-facebook interface=ether1 network=1.1.1.0

add address=2.2.2.2/24 comment=to-google interface=ether2 network=2.2.2.0

add address=3.3.3.1/24 comment=to-isp-border interface=ether3 network=3.3.3.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=3.3.3.0/32 synchronize=no

/routing bgp peer

add name=peer-to-facebook remote-address=1.1.1.1 remote-as=100

add name=peer-to-google remote-address=2.2.2.1 remote-as=200

add name=peer-to-isp-border remote-address=3.3.3.2 remote-as=400

/system identity

set name=Alestra

/tool romon

set enabled=yes

ISP-BORDER

/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=400

/ip address

add address=3.3.3.2/24 comment=to-alestra interface=ether1 network=3.3.3.0

add address=4.4.5.254/24 comment=to-isp-core interface=ether2 network=4.4.5.0

add address=4.4.7.254/24 comment=pc interface=ether3 network=4.4.7.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=4.4.4.0/24 synchronize=no

add network=4.4.5.0/24 synchronize=no

add network=4.4.6.0/24 synchronize=no

add network=4.4.7.0/24 synchronize=no

/routing bgp peer

add name=peer-to-alestra remote-address=3.3.3.1 remote-as=300

/system identity

set name=Isp-border

/tool romon

set enabled=yes

CASO 3
Agrega una sesion BGP con alestra con el ASN500, con router ISPborde2, ISP Core 2 y laptop. Usarasla red5.5.4.0/22, lo subneteas a /24, y solo anuncia la red 5.5.6.0/24 enisp borde. ISP Borde2->ASN500, red5.5.4.0/22, subnetear a /24 yusar 5.5.6.0/24 Puedes hacer ping al8.8.8.8,1.1.1.1, 2.2.2.1, 3.3.3.1 desde isp Borde2, ispcore2 y la laptop






ALESTRA

/interface wireless security-profiles



set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=300 redistribute-connected=yes redistribute-static=yes

/ip address

add address=1.1.1.2/30 comment=to-Facebook interface=ether1 network=1.1.1.0

add address=2.2.2.2/24 comment=to-Google interface=ether2 network=2.2.2.0

add address=3.3.3.1/24 comment=to-ISP-Borde interface=ether3 network=3.3.3.0

add address=7.7.7.1/24 comment=to-ISP-Borde2 interface=ether4 network=7.7.7.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=3.3.3.0/24 synchronize=no

/routing bgp peer

add name=peer-to-facebook remote-address=1.1.1.1 remote-as=100

add name=peer-to-google remote-address=2.2.2.1 remote-as=200

add name=peer-to-isp-borde remote-address=3.3.3.2 remote-as=400

add name=peer-to-isp-core2 remote-address=7.7.7.2 remote-as=500

/system identity

set name=Alestra

/tool romon

BORDE 2

/interface wireless security-profiles



set [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=500

/ip address

add address=7.7.7.2/24 interface=ether1 network=7.7.7.0

add address=5.5.5.254/24 interface=ether2 network=5.5.5.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=5.5.4.0/22 synchronize=no

/routing bgp peer

add name=peer1 remote-address=7.7.7.1 remote-as=300

/system identity

set name=Isp-Borde2

/tool romon

CORE 2

/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik

/ip address

add address=5.5.5.2/24 interface=ether1 network=5.5.5.0

add address=192.168.10.254/24 interface=ether2 network=192.168.10.0

/ip dhcp-client

add disabled=no interface=ether1

/ip firewall nat

add action=masquerade chain=srcnat out-interface=ether1

/ip route

add distance=1 gateway=5.5.5.254

/system identity

set name=ips-core2

/tool romon

set enabled=yes

CASO 4
hacer sesión bgp Carrier cirion ASN600 solo con google, luego agregas ispborde 3, ispcore 3 y su laptop.
Cirion ASN600–red6.6.6.0/24
ISPBorde3ASN700, red7.7.4.0/22, solo usara la red7.7.7.0/24



GOOGLE

/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=200

/ip address

add address=2.2.2.1/24 comment=to-Alestra interface=ether1 network=2.2.2.0

add address=8.8.8.2/24 comment=to-Server-Google interface=ether2 network=\

    8.8.8.0

add address=4.4.4.1/24 comment=cirion interface=ether3 network=4.4.4.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=2.2.2.0/24 synchronize=no

add network=8.8.8.0/24 synchronize=no

/routing bgp peer

add name=peer-to-alestra remote-address=2.2.2.2 remote-as=300

add name=peer_cirion remote-address=4.4.4.2 remote-as=600

/system identity

set name=Google

/tool romon

set enabled=yes

CIRION

/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=600 redistribute-connected=yes

/ip address

add address=4.4.4.2/24 interface=ether1 network=4.4.4.0

add address=6.6.6.1/24 interface=ether2 network=6.6.6.0

/ip dhcp-client

add disabled=no interface=ether1

/routing bgp network

add network=6.6.6.0/24 synchronize=no

add network=4.4.4.0/24 synchronize=no

/routing bgp peer

add name=peer_google remote-address=4.4.4.1 remote-as=200

add name=peer_ispborder3 remote-address=6.6.6.2 remote-as=700

/system identity

set name=Cirion

/tool romon

set enabled=yes

ISP-BORDER3

/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik

/routing bgp instance

set default as=700

/ip address

add address=6.6.6.2/24 interface=ether1 network=6.6.6.0

add address=7.7.7.1/24 interface=ether2 network=7.7.7.0

/ip dhcp-client

add disabled=no interface=ether1

/ip firewall nat

add action=masquerade chain=srcnat out-interface=ether1

/routing bgp network

add network=7.7.4.0/24 synchronize=no

/routing bgp peer

add name=peer_cirion remote-address=6.6.6.1 remote-as=600

/system identity

set name=ISP-Borde3

/tool romon

set enabled=yes

ISP-CORE3

interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik

/ip address

add address=7.7.7.2/24 interface=ether1 network=7.7.7.0

add address=192.168.9.254/24 interface=ether2 network=192.168.9.0

/ip dhcp-client

add disabled=no interface=ether1

/ip firewall nat

add action=masquerade chain=srcnat out-interface=ether1

/ip route

add distance=1 gateway=7.7.7.1

/system identity

set name=ISP-Core3

/tool romon

set enabled=yes