R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

358
[Firewall-ospf-1] area 0
[Firewall-ospf-1-area-0.0.0.0] network 2.2.2.2 32
[Firewall-ospf-1-area-0.0.0.0] network 9.1.1.0 24
[Firewall-ospf-1-area-0.0.0.0] quit
[Firewall-ospf-1] quit
# Configure Router B.
<RouterB> system-view
[RouterB] ospf 1
[RouterB-ospf-1] import-route direct
[RouterB-ospf-1] area 0
[RouterB-ospf-1-area-0.0.0.0] network 9.1.1.0 24
[RouterB-ospf-1-area-0.0.0.0] quit
[RouterB-ospf-1] quit
3. Configure the eBGP connection.
Configure the eBGP connection and inject network 8.1.1.0/24 to the BGP routing table of Router A, so
that Firewall can obtain the route to 8.1.1.0/24.
# Configure Router A.
<RouterA> system-view
[RouterA] bgp 65008
[RouterA-bgp] router-id 1.1.1.1
[RouterA-bgp] peer 3.1.1.1 as-number 65009
[RouterA-bgp] network 8.1.1.0 24
[RouterA-bgp] quit
# Configure Firewall.
[Firewall] bgp 65009
[Firewall-bgp] router-id 2.2.2.2
[Firewall-bgp] peer 3.1.1.2 as-number 65008
4. Configure BGP and IGP synchronization.
• Configure BGP to redistribute routes from OSPF on Firewall, so that Router A can obtain the route to
9.1.2.0/24.
• Configure OSPF to redistribute routes from BGP on Firewall, so that Router B can obtain the route to
8 .1.1.0 / 24 .
# Configure BGP to redistribute routes from OSPF on Firewall.
[Firewall-bgp] import-route ospf 1
[Firewall-bgp] quit
[Firewall] ospf 1
[Firewall-ospf-1] import-route bgp
[Firewall-ospf-1] quit
# Display the BGP routing table on Router A.
[RouterA] display bgp routing-table
Total Number of Routes: 3
BGP Local router ID is 1.1.1.1
Status codes: * - valid, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale