iT邦幫忙

0

FRRouting簡介

containerlab network automation frrouting netops cicd
pentium2000 2023-08-04 00:33:40 ‧ 1355 瀏覽

  • 分享至 

  • xImage
    •  

請自行CLONE REPO使用

前言

最近公司專案使用FRRouting套件，發現網路上只有少量的中文資料。於是想寫一篇文章貢獻給網路工程師們並總結一下自己實作的過程，並為後續NETOPS系列文章做暖身。

FRRouting簡介

如果你也是位網路工程師，一定對OSPF及BGP這些路由協定相當熟悉。以前要把資料中心或辨公室透過路由協定相連，需要買貴鬆鬆的網路設備。有了FRRouting，現在你可以在Linux Server上執行路由協定。我們來看看官方的介紹：

FRRouting (FRR) is a free and open source Internet routing protocol suite for Linux and Unix platforms. It implements BGP, OSPF, RIP, IS-IS, PIM, LDP, BFD, Babel, PBR, OpenFabric and VRRP, with alpha support for EIGRP and NHRP.>

需要的技術知識

網路架構

https://ithelp.ithome.com.tw/upload/images/20230803/20152488W7PqZecRBW.jpg

實作步驟

1.編寫網路拓樸yml檔
2.編寫frr daemones設定檔
3.使用containerlab啟動拓撲
4.設定路由器介面IP及PC的網卡
5.設定路由器OSPF
6.永久保存FRR設定及啟用PC網卡
7.自動化Shell Script
8.結論

1.編寫網路拓樸定義檔

首先建立一個資料夾

$ mkdir frr
$ cd frr

編輯lab.yml。

name: lab
topology:
  nodes:
    router1:
      kind: linux
      image: frrouting/frr:v7.5.1
      binds:
        - router1/daemons:/etc/frr/daemons
    router2:
      kind: linux
      image: frrouting/frr:v7.5.1
      binds:
        - router2/daemons:/etc/frr/daemons
    PC1:
      kind: linux
      image: praqma/network-multitool:latest
    PC2:
      kind: linux
      image: praqma/network-multitool:latest
  links:
    - endpoints: ["router1:eth1", "router2:eth1"]
    - endpoints: ["PC1:eth1", "router1:eth2"]
    - endpoints: ["PC2:eth1", "router2:eth2"]
  • name欄位：定義LAB的名稱
  • node：定義設備的名稱
  • kind：定義設備的種類。支援設備類型請參考
  • image：設備image version
  • binds：掛載實體檔案到container的檔案系統
  • links：設備間的接線情況

2.編寫frr daemons設定檔

FRRouting在linux container中使用daemon的形式執行。所以我們建立frr daemons設定檔並透過上述binds掛載。
建立子資料夾方便管理

$ mkdir router1
$ mkdir router2

$ vi router1/daemons

從這裡複制標準的樣板，並啟用zebra ospfd ldpd

zebra=yes
bgpd=no
ospfd=yes
ospf6d=no
ripd=no
ripngd=no
isisd=no
pimd=no
ldpd=yes
nhrpd=no
eigrpd=no
babeld=no
sharpd=no
staticd=no
pbrd=no
bfdd=no
fabricd=no

vtysh_enable=yes
zebra_options=" -s 90000000 --daemon -A 127.0.0.1"
bgpd_options="   --daemon -A 127.0.0.1"
ospfd_options="  --daemon -A 127.0.0.1"
ospf6d_options=" --daemon -A ::1"
ripd_options="   --daemon -A 127.0.0.1"
ripngd_options=" --daemon -A ::1"
isisd_options="  --daemon -A 127.0.0.1"
pimd_options="  --daemon -A 127.0.0.1"
ldpd_options="  --daemon -A 127.0.0.1"
nhrpd_options="  --daemon -A 127.0.0.1"
eigrpd_options="  --daemon -A 127.0.0.1"
babeld_options="  --daemon -A 127.0.0.1"
sharpd_options="  --daemon -A 127.0.0.1"
staticd_options="  --daemon -A 127.0.0.1"
pbrd_options="  --daemon -A 127.0.0.1"
bfdd_options="  --daemon -A 127.0.0.1"
fabricd_options="  --daemon -A 127.0.0.1"

copy router1/daemons router2/dammons

3.使用containerlab啟動拓撲

$ sudo clab deploy -t lab.yml

chan@LAPTOP-UP9VD31I:~/tmp/frr$ sudo clab deploy -t lab.yml 
[sudo] password for pchan: 
INFO[0000] Containerlab v0.42.0 started                 
INFO[0000] Parsing & checking topology file: lab.yml    
INFO[0000] Creating lab directory: /home/pchan/tmp/frr/clab-lab 
INFO[0000] Creating container: "router2"                
INFO[0000] Creating container: "router1"                
INFO[0000] Creating container: "PC1"                    
INFO[0000] Creating container: "PC2"                    
INFO[0000] Creating virtual wire: router1:eth1 <--> router2:eth1 
INFO[0001] Creating virtual wire: PC1:eth1 <--> router1:eth2 
INFO[0001] Creating virtual wire: PC2:eth1 <--> router2:eth2 
INFO[0001] Adding containerlab host entries to /etc/hosts file 
+---+------------------+--------------+---------------------------------+-------+---------+-----------------+----------------------+
| # |       Name       | Container ID |              Image              | Kind  |  State  |  IPv4 Address   |     IPv6 Address     |
+---+------------------+--------------+---------------------------------+-------+---------+-----------------+----------------------+
| 1 | clab-lab-PC1     | d07377432fb6 | praqma/network-multitool:latest | linux | running | 172.20.20.14/24 | 2001:172:20:20::e/64 |
| 2 | clab-lab-PC2     | 61fab0bbfa7e | praqma/network-multitool:latest | linux | running | 172.20.20.13/24 | 2001:172:20:20::d/64 |
| 3 | clab-lab-router1 | f935bc12f4ff | frrouting/frr:v7.5.1            | linux | running | 172.20.20.11/24 | 2001:172:20:20::b/64 |
| 4 | clab-lab-router2 | b9d4372ae8e0 | frrouting/frr:v7.5.1            | linux | running | 172.20.20.12/24 | 2001:172:20:20::c/64 |
+---+------------------+--------------+---------------------------------+-------+---------+-----------------+----------------------+

4.設定路由器OSPF及PC網卡

設定PC1

$ sudo docker exec -it clab-lab-PC1 /bin/ash

ip addr add 192.168.1.1/24 dev eth1
ip route add 192.168.0.0/16 via 192.168.1.254 dev eth1
ip route add 10.10.10.0/24 via 192.168.1.254 dev eth1
exit

設定PC2

$ sudo docker exec -it clab-lab-PC2 /bin/ash

ip addr add 192.168.2.1/24 dev eth1
ip route add 192.168.0.0/16 via 192.168.2.254 dev eth1
ip route add 10.10.10.0/24 via 192.168.2.254 dev eth1
exit

設定router1

$ sudo docker exec -it clab-lab-router1 vtysh
Hello, this is FRRouting (version 7.5.1_git).
Copyright 1996-2005 Kunihiro Ishiguro, et al.
router1#

configure terminal 
service integrated-vtysh-config
interface eth1
 ip address 192.168.12.1/24
 exit
interface eth2
 ip address 192.168.1.254/24
 exit
interface lo
 ip address 10.10.10.1/32
 exit
exit
write
exit

設定router2

$ sudo docker exec -it clab-lab-router2 vtysh

configure terminal 
service integrated-vtysh-config
interface eth1
 ip address 192.168.12.2/24
 exit
interface eth2
 ip address 192.168.2.254/24
 exit
interface lo
 ip address 10.10.10.2/32
 exit
exit
write
exit

PING gateway and loopback interface

$ sudo docker exec -it clab-lab-PC1 ping 192.168.1.254
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
64 bytes from 192.168.1.254: icmp_seq=1 ttl=64 time=0.036 ms

$ sudo docker exec -it clab-lab-PC1 ping 10.10.10.1
PING 10.10.10.1 (10.10.10.1) 56(84) bytes of data.
64 bytes from 10.10.10.1: icmp_seq=1 ttl=64 time=0.128 ms

$ sudo docker exec -it clab-lab-PC2 ping 192.168.2.254
PING 192.168.2.254 (192.168.2.254) 56(84) bytes of data.
64 bytes from 192.168.2.254: icmp_seq=1 ttl=64 time=0.054 ms

$ sudo docker exec -it clab-lab-PC2 ping 10.10.10.2
PING 10.10.10.2 (10.10.10.2) 56(84) bytes of data.
64 bytes from 10.10.10.2: icmp_seq=1 ttl=64 time=0.109 ms

5.設定路由器OSPF

$ sudo docker exec -it clab-lab-router1 vtysh

configure terminal 
router ospf
 passive-interface eth2
 passive-interface lo
 network 192.168.12.0/24 area 0.0.0.0
 redistribute connected
 exit
exit
write
exit

$ sudo docker exec -it clab-lab-router2 vtysh

configure terminal 
router ospf
 passive-interface eth2
 passive-interface lo
 network 192.168.12.0/24 area 0.0.0.0
 redistribute connected
 exit
exit
write
exit

OSPF設定結束開始進行測試，Test PC1 <-> Gateway

$ sudo docker exec clab-lab-PC1 ping -c1 192.168.1.254  
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
64 bytes from 192.168.1.254: icmp_seq=1 ttl=64 time=0.031 ms
1 packets transmitted, 1 received, 0% packet loss, time 0ms

Test PC1 <-> router2 eth1

$ sudo docker exec clab-lab-PC1 ping -c1 192.168.12.2
PING 192.168.12.2 (192.168.12.2) 56(84) bytes of data.
64 bytes from 192.168.12.2: icmp_seq=1 ttl=63 time=0.041 ms
1 packets transmitted, 1 received, 0% packet loss, time 0ms

Test PC1 <-> Router1 loopback

$ sudo docker exec clab-lab-PC1 ping -c1 10.10.10.2
PING 10.10.10.2 (10.10.10.2) 56(84) bytes of data.
64 bytes from 10.10.10.2: icmp_seq=1 ttl=63 time=0.093 ms
1 packets transmitted, 1 received, 0% packet loss, time 0ms

Test PC1 <-> PC2

pchan@pchan:~/github/frr$ sudo docker exec clab-lab-PC1 ping -c1 192.168.2.1
PING 192.168.2.1 (192.168.2.1) 56(84) bytes of data.
64 bytes from 192.168.2.1: icmp_seq=1 ttl=62 time=0.051 ms
1 packets transmitted, 1 received, 0% packet loss, time 0ms

6.永久保存設定

接下來我們如何把配置儲存下來，下次執行直接載入。有二個重要的設定檔

      binds:
        - router1/daemons:/etc/frr/daemons 　　設定實體路徑：Container frr deamons設定 
        - router1/frr.conf:/etc/frr/frr.conf　設定實體路徑：Router OSPF及介面設定

所以新的lab.yaml會長這個樣子

name: lab
topology:
  nodes:
    router1:
      kind: linux
      image: frrouting/frr:v7.5.1
      binds:
        - router1/daemons:/etc/frr/daemons
        - router1/frr.conf:/etc/frr/frr.conf
    router2:
      kind: linux
      image: frrouting/frr:v7.5.1
      binds:
        - router2/daemons:/etc/frr/daemons
        - router2/frr.conf:/etc/frr/frr.conf
    PC1:
      kind: linux
      image: praqma/network-multitool:latest
    PC2:
      kind: linux
      image: praqma/network-multitool:latest
  links:
    - endpoints: ["router1:eth1", "router2:eth1"]
    - endpoints: ["PC1:eth1", "router1:eth2"]
    - endpoints: ["PC2:eth1", "router2:eth2"]

router1/frr.conf

frr version 7.5.1_git
frr defaults traditional
hostname router1
no ipv6 forwarding
!
interface eth1
 ip address 192.168.12.1/24
!
interface eth2
 ip address 192.168.1.254/24
!
interface lo
 ip address 10.10.10.1/32
!
router ospf
 passive-interface eth2
 network 192.168.12.0/24 area 0.0.0.0
 redistribute connected
!
line vty

router2/frr.conf

frr version 7.5.1_git
frr defaults traditional
hostname router2
no ipv6 forwarding
!
interface eth1
 ip address 192.168.12.2/24
!
interface eth2
 ip address 192.168.2.254/24
!
interface lo
 ip address 10.10.10.2/32
!
router ospf
 passive-interface eth2
 network 192.168.12.0/24 area 0.0.0.0
 redistribute connected
!
line vty

接下來我們要寫一個Shell Script把PC1及PC2的網路卡帶起來

$ vim NIC-UP.sh

#!/bin/sh
sudo docker exec clab-lab-PC1 ip link set eth1 up
sudo docker exec clab-lab-PC1 ip addr add 192.168.1.1/24 dev eth1
sudo docker exec clab-lab-PC1 ip route add 192.168.0.0/16 via 192.168.1.254 dev eth1
sudo docker exec clab-lab-PC1 ip route add 10.10.10.0/24 via 192.168.1.254 dev eth1

sudo docker exec clab-lab-PC2 ip link set eth1 up
sudo docker exec clab-lab-PC2 ip addr add 192.168.2.1/24 dev eth1
sudo docker exec clab-lab-PC2 ip route add 192.168.0.0/16 via 192.168.2.254 dev eth1
sudo docker exec clab-lab-PC2 ip route add 10.10.10.0/24 via 192.168.2.254 dev eth1

$ chmod u+x NIC-UP.sh

最後寫一個Shell Script整合執行撲拓和帶起網卡

$ vim run.sh

＃！/bin/bash
sudo clab deploy --topo lab.yml
./NIC-UP.sh

$ chmod u+x run.sh

最後的檔案結構會長這個樣子

$ tree
.
├── lab.yml
├── NIC-UP.sh
├── router1
│   ├── daemons
│   └── frr.conf
├── router2
│   ├── daemons
│   └── frr.conf
└── run.sh

8.結論

這篇實作文章參考了這裡，歡迎可以跟大家多多交流Network automation及Netops的技術。


圖片
  直播研討會
圖片
{{ item.channelVendor }} {{ item.webinarstarted }} |
{{ formatDate(item.duration) }}
直播中

1 則留言

2
I.T. Wang
iT邦新手 1 級 ‧ 2023-08-05 10:20:59

感謝無私分享!

pentium2000 iT邦新手 5 級 ‧ 2023-08-07 12:45:02 檢舉

不客氣
歡迎有機會多多交流

登入發表回應

我要留言

立即登入留言
iThome鐵人賽
參賽組數
1064 組
團體組數
40 組
累計文章數
22200 篇
完賽人數
602 人
iT+看影片追技術 看影片追技術 看更多
熱門tag 看更多
15th鐵人賽 16th鐵人賽 13th鐵人賽 14th鐵人賽 12th鐵人賽 11th鐵人賽 鐵人賽 2019鐵人賽 javascript 2018鐵人賽 python 2017鐵人賽 windows php c# windows server linux css react vue.js
熱門問題
熱門回答
熱門文章
IT邦幫忙