All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1

Similar documents
橡C14.PDF

BGP ( ) BGP4 community community community community July 3, 1998 JANOG2: What is BGP Community? 2

ネットワークのおべんきょしませんか? 究める BGP サンプル COMMUNITY アトリビュートここまで解説してきた WEIGHT LOCAL_PREFERENCE MED AS_PATH アトリビュートはベストパス決定で利用します ですが COMMUNITY アトリビュートはベストパスの決定とは

宛先変更のトラブルシューティ ング

Inter-IX IX/-IX 10/21/2003 JAPAN2003 2

Microsoft PowerPoint - janog20-bgp-public-last.ppt

2004 IPv6 BGP G01P005-5

橡3-MPLS-VPN.PDF

JANOG14-コンバージェンスを重視したMPLSの美味しい使い方

BGPルートがアドバタイズされない場合のトラブルシューティング

Microsoft PowerPoint irs14-rtbh.ppt

JUNOSインターネットソフトウェアとIOSのコンフィグレーション変換

PowerPoint プレゼンテーション

ループ防止技術を使用して OSPFv3 を PE-CE プロトコルとして設定する

untitled

TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2

untitled

routing_tutorial key

IP.dvi

2011 NTT Information Sharing Platform Laboratories

関連事項の整理 62 IGP と EGP の違い ルータルータ ルータルータ EGP は Routing Domain 間の中の経路のみ扱う EGP の Next Hop は境界ルータへの IP アドレス Routing Domain - A ルータ ルータ IGP は Routing Domain

MR1000 コマンド設定事例集

経路奉行の取り組み

橡2-TrafficEngineering(revise).PDF

第1回 ネットワークとは

IP.dvi

1000 Copyright(C)2009 All Rights Reserved - 2 -

BSD Unix IPv6 WIDE Project / ( ) All rights reserved. Copyright(c)2006 WIDE Project 1

IP... 9 IP... 9 IP IP IP Unnumbered IP PPP IPCP IP DHCP IP IP

今日のトピック 実験結果の共有 RPKI/Router 周りの基本的な動き 今後の課題と展望 2012/7/6 copyright (c) tomop 2

total.dvi

RENAT - NW検証自動化

IPv6 トラブルシューティング~ ISP編~

15群(○○○)-8編

BGPベストパス選択の実際

untitled

untitled

CCIE IP Anycast RP Anycast RP Anycast RP Anycast RP PIM-SM RP RP PIM-SM RP RP RP PIM Register RP PIM-SM RP PIM-SM RP RP RP RP Auto RP/BSR RP RP RP RP

WG /04/

網設計のためのBGP入門

25.pdf

untitled

Polling Question 1

設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応

IIJ Technical WEEK SEILシリーズ開発動向:IPv6対応の現状と未来

【公開】村越健哉_ヤフーのIP CLOSネットワーク

Si-R30コマンドリファレンス

VyOSではじめるBGPルータ

ip nat outside source list コマンドを使用した設定例

Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2

untitled

Microsoft PowerPoint ppt [互換モード]

PowerPoint プレゼンテーション

untitled

Clos IP Fabrics with QFX5100 Switches

ict2-.key

<4D F736F F F696E74202D C F815B834E95D2836E E9197BF2E707074>

Firepower Threat Defense の BGP

tcp/ip.key

第1回 ネットワークとは

owners.book

IRS-Meeting-Log txt

IP 2.2 (IP ) IP 2.3 DNS IP IP DNS DNS 3 (PC) PC PC PC Linux(ubuntu) PC TA 2

リング型IPカメラ監視ソリューション(マルチキャスト編)

初めてのBFD

untitled

今からはじめるIPv6 ~IPv6標準化最新動向編~

はじめに xsp のルータにおいて設定を推奨するフィルタの項目について の IPv6 版 最低限 設定することが推奨されるフィルタ について まず議論したい 接続形態に変化はないので IPv6 対応をメインに IETF draft RIR でproposal 進行中のものについては今回の検討外とした

wide93.dvi

U コマンド

3. LISP B EID RLOC ETR B 4. ETR B ITR A 1: LISP 5. ITR A B EID RLOC 6. A SYN 7. ITR A ITR A B EID RLOC SYN ITR A RLOC ETR B RLOC 8. ETR B SYN ETR B B

IP.dvi

BGP/MPLS-VPN とは ルータによる 多様な IF による提供が可能 (ATM~ HSD などの非対称構成も可能 ) 暗号に頼らないセキュリティの確保が可能 (FR などと同等の機能を IP ネットワークで実現 ) お客様側への特別な装置が不要 (a)ipsec-vpn 方式 暗号化装置 (

Foil 2 Agenda RIP2 RIP, OSPF OSPF

untitled

EIGRP MPLS VPN PE-CE Site of Origin の設定


仕様と運用

Microsoft PowerPoint ISC203(印刷版).ppt

AirMac ネットワーク構成の手引き

tutorial.dvi

橡A little bit faster line to the home

本日のお話 運用 / 運用システムの現状 ネットワーク運用の自動化のススメ 1) ネットワーク管理の自動化 2) ネットワーク工事 ( 設定 ) の自動化 3) ネットワーク運用時 ( 障害時 ) の自動化 Copyright 2012 NTT Communications Corporation.


IPv4aaSを実現する技術の紹介

release-270.PDF

IP IPv4-IPv6

RPKI in DNS DAY

untitled

tp2ps output file

SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Grou

untitled

RTX830 取扱説明書

Microsoft PowerPoint - Amazon VPCとのVPN接続.pptx

42

SRT/RTX/RT設定例集

untitled


worm hoihoi

Transcription:

asaba@iij.ad.jp All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 2

user IX IX IX All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 3

ISP ISP IX ISP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 4

ISP IX Internet exchange) ISP FDDI ATM ISP Network Access Point (NAP) Metropolitan Area Exchange (MAE) LINX, NSPIXP,JPIX, MEX,HKIX, etc. All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 5

IX ISP ISP ISP Ethernet, FDDI, ATM ISP ISP ISP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 6

2 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 7

2 ISP Interior Gateway (or Routing) Protocol (IGP) OSPF, RIP2 Exterior Gateway (or Routing) Protocol (EGP) BGP4 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 8

2 Class-less Inter-Domain Routing (RFC1918) IPv6 (RFC1883) All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 9

Classless Inter-Domain Routing IPv4 202.232.68.0-202.232.68.63 = 202.232.68.0/26 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 10

Classless VLSM / / Supernet / Classfull all-0, all-1 Classless All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 11

ISP 202.233.0.0/16 202.233.0.0/18 ISP A 202.233.64.0/18 202.233.160.0/27 202.233.128.0/19 ISP B ISP C User E User F 202.233.0.0/23 202.233.4.0/22 202.233.64.0/19 202.233.96.0/21 User A User B User C User D All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 12

User F User E 202.233.160.0/27 ISP A 202.233.128.0/19 202.233.0.0/16 ISP 202.233.0.0/18 202.233.64.0/18 202.233.0.0/23 User A ISP B 202.233.4.0/22 User B ISP C 202.233.64.0/19 User C 202.233.96.0/21 User D All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 13

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 14

<SURFNET Eric-Jan Boss > All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 15

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 16

RFC1771 AS de-facto Autonomous System (AS) ISP AS AS CIDR CIDR All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 17

TCP 179 (peer) 1 1 RIP Incremental 16 AS ( IIJ AS2497) Path Vector Path Attribute) AS Path Origin Next Hop Multi-Exit- Discriminator(MED) Local Preference etc. All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 18

BGP ( ) BGP EBGP (External BGP) AS BGP BGP IBGP (Internal BGP) AS BGP BGP full mesh BGP IBGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 19

AS1 R1 EBGP AS2 R2 IBGP R3 AS3 R4 EBGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 20

BGP4 BGP4 BGP4 BGP4 IBGP OSPF EBGP EBGP EBGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 21

Transitive) Non- Transitive) Mandatory) Optional) All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 22

BGP IGP EGP Incomplete All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 23

AS / AS Path prepend, stuffing All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 24

202.221.0.0/16 AS2 AS4 AS1 202.232.0.0/16 AS3 AS5 202.221.0.0/16 3 2 202.221.0.0/16 4 2 202.232.0.0/16 3 2 1 202.232.0.0/16 4 2 1 AS1 202.232.0.0/16 AS2 202.221.0.0/16 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 25

AS1 R1 202.232.0.0/16 R3 prefix 202.232.0.0/16 Next hop 202.232.1.1 202.232.1.1 202.232.1.2 AS2 R2 EBGP R2 prefix 202.232.0.0/16 Next hop 202.232.1.1 R4 prefix 202.232.0.0/16 Next hop 202.221.10.1 AS3 202.221.10.1 202.221.10.2 R4 EBGP R3 IBGP AS IP IBGP R3 R1 IGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 26

AS IGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 27

AS1 R1 R2 L1 MED=100 MED=100 MED=200 MED=200 L2 R3 AS2 R4 L1 AS1 AS2 MED All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 28

AS All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 29

local_pref=100 AS4 IBGP Prefix 202.232.0.0/16 90 202.232.0.0/16 100 local_pref=90 Local_Pref EBGP EBGP AS2 AS3 EBGP AS1 EBGP 202.232.0.0/16 AS4 AS2 AS1 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 30

Aggregate) All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 31

BGP IP AS All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 32

AS1 202.232.0.0/24 202.232.10.1 AS2 AS3 202.232.0.0/16 Atomic_Aggregate, Aggregator={3,202.232.10.1} 202.232.1.0/24 Atomic Aggregate Aggregator All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 33

RFC1997 32 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 34

0x00000000-0x0000FFFF 0xFFFF0000-0xFFFFFFFF Well-Known Community NO_EXPORT(0xFFFFFF01) AS NO_ADVERTISE(0xFFFFF02) NO_EXPORT_SUBCONFED(0xFFFFFF03) AS All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 35

AS Community 16 : Community AS 16 : AS Community : AS :Community All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 36

local_pref=100 AS4 IBGP local_pref=90 community=4:100 community=4:90 AS2 AS3 community=4:100 AS1 community=4:90 RFC1998 AS All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 37

AS Community 2497:10 2497:20 peer Community All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 38

RFC1965 AS AS AS AS AS 64512-65535) AS AS IBGP EBGP AS Next Hop, MED, Local Preference AS IBGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 39

AS1 AS2 Member AS2 Member AS1 Member AS3 AS3 AS4 AS5 AS IGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 40

IBGP N x N IBGP AS BGP AS BGP BGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 41

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 42

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 43

ISP(AS) ISP BGP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 44

(2) (1) (3) 1. AS : 2. AS : 3. AS : All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 45

IX-B AS1 AS2 IX-A AS4 AS1 AS2 AS1 AS3 AS2 AS1 AS3 AS4 AS5 AS4 AS_PATH AS5 AS4 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 46

AS1 AS2 AS4 AS3 AS4 AS1 AS3 AS_PATH All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 47

MED,AS PATH Prepend, Community All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 48

(RR) AS (RS) 2 ISP BGP RR ISP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 49

Policy Info. RR Policy DB ISP BGP RS ISP ISP ISP ISP ISP All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 50

BGP4 AS BGP4 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 51

RR RS route flapping All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 52

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 53

AS65001 R1 R2 AS65002 172.16.0.0/16 192.168.10.1 192.168.10.2 172.17.0.0/16 router bgp 65001 network 172.16.0.0 neighbor 192.168.10.2 remote-as 65002 router bgp 65002 network 172.17.0.0 neighbor 192.168.10.1 remote-as 65001 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 54

28 28 192.168.10.1/32 AS1 192.168.10.2/32 192.168.20.2/30 EBGP R1 MED=100 IBGP R2 MED=200 EBGP 192.168.21.2/30 192.168.20. /30 MED=100 R3 IBGP AS2 MED=200 R4 192.168.21.1/30 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 55

1 interface loopback 0 ip address 192.168.10.1 255.255.255.255 router bgp 1 no synchronization neighbor 192.168.10.2 remote-as 1 neighbor 192.168.10.2 update-source loopback0 neighbor 192.168.20.1 remote-as 2 neighbor 192.168.20.1 route-map MED-OUT out route-map MED-OUT permit 10 match as-path 10 set metric 100 ip as-path access-list 10 permit ^$ 2 interface loopback 0 ip address 192.168.10.2 255.255.255.255 router bgp 1 no synchronization neighbor 192.168.10.1 remote-as 1 neighbor 192.168.10.1 update-source loopback0 neighbor 192.168.21.1 remote-as 2 neighbor 192.168.21.1 route-map MED-OUT out route-map MED-OUT permit 10 match as-path 10 set metric 200 ip as-path access-list 10 permit ^$ All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 56

AS1 202.232.0.0/24 202.232.10.2/32 AS3 202.232.10.1/32 AS2 202.232.1.0/24 202.232.0.0/16 Atomic_Aggregate, Aggregator={3,202.232.10.1} AS PATH= PATH= 3 {1, 2} 202.232.10.3/32 interface loopback 0 ip address 202.232.10.1 255.255.255.255 router bgp 3 no synchronization network 202.232.10.0 aggregate-address 202.232.0.0 255.255.0.0 as-set summary-only neighbor 202.232.10.2 remote-as 3 neighbor 202.232.10.2 update-source loopback0 neighbor 202.232.10.3 remote-as 3 neighbor 202.232.10.3 update-source loopback0 neighbor X.X.X.X remote-as XX All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 57

1 AS2 2 1 AS4 AS1 202.232.0.0/16 1 AS3 AS5 router bgp 5 neighbor 192.168.10.1 remote-as 3 neighbor 192.168.10.1 fromas3 in ip as-path access-list 10 permit ^3 1$ route-map fromas3 permit 10 match as-path 10 set local-preference 90 192.168.10.5/30 192.168.10.1/30 3 1 AS5 4 2 1 AS1 AS4 cisco local-preference 100 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 58

1 AS2 2 1 AS4 192.168.10.1/30 AS1 192.168.10.5/30 4 2 1 202.232.0.0/16 1 1 1 AS3 3 1 1 1 AS5 AS1 router bgp 1 network 202.232.0.0 mask 255.255.0.0 neighbor 192.168.10.1 remote-as 2 neighbor 192.168.10.5 remote-as 3 neighbor 192.168.10.5 route-map PREPEND out route-map PREPEND permit 10 set as-path prepend 1 1 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 59

local_pref=100 AS4 IBGP local_pref=90 EBGP EBGP AS2 192.168.10.1/30 AS3 192.168.10.5/30 EBGP AS1 AS1 EBGP 202.232.0.0/16 ip bgp new-format access-list 10 202.232.0.0 0.0.255.255 router bgp 1 neighbor 192.168.10.1 remote-as 2 neighbor 192.168.10.1 send-community neighbor 192.168.10.1 route-map toas2 out neighbor 192.168.10.5 remote-as 3 neighbor 192.168.10.5 send-community neighbor 192.168.10.5 route-map toas3 out route-map toas2 permit 10 match ip address 10 set community 4:100 route-map toas3 permit 10 match ip address 10 set community 4:90 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 60