实现跨域MPLS VPN
1、 拓扑
2、 说明：
此方案有两个AS之间不是通过TUNNEL子接口建立邻接关系，而是使用用VPNV4通过物理直连接口建立邻接关系，所以在ASBR收到对端ASBR发来的VPNV4路由时，由于都是通过VPNV4学习过来的，所以下一跳不改变，所以要在在本AS内部邻居建立邻接关系时要next-hop-self。这样才能实现路BGP路由的优化 特点
ASBR需要处理VPN信息，但不需要配置VRF实例
ASBR之间一条链路传递所有VPN信息
根据不同的情况，ASBR之间构建单层或双层LSP国家行政机关公文处理办法隧道
当VPN业务发展到一定阶段，ASBR空间光调制器之间的链路受限时，可以考虑OPTION B跨域方法
3、 配置
R1: 一般用户配置
en
config t
hostname ce1
enable secret cisco
username cisco password cisco
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
产品标识标注规定service password-encryption
clock timezone BJT 8
no ip source-route
no ip http server
no ip http secure-server
no ip domain-lookup
line consol 0
login local
logging synchronous
stopbit 1
exec-timeout 0 0
line vty 0 4
login local
logging synchronous
stopbit 1
exec-timeout 5 0
侯雄飞
exit
ip classless
ip cef
interface Loopback0
no sh
ip address 192.168.3.1 255.255.255.0
interface Serial1/1
no sh
ip address 172.16.1.2 255.255.255.252
serial restart-delay 0
exit
ip route 0.0.0.0 0.0.0.0 172.16.1.1
end
R2:
en
config t
hostname PE-L
enable secret cisco
username cisco password cisco
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
service password-encryption
clock timezone BJT 8
no ip source-route
no ip http server
no ip http secure-server
no ip domain-lookup
line consol 0
login local
logging synchronous
stopbit 1
exec-timeout 0 0
line vty 0 4
login local
logging synchronous
stopbit 1
exec-timeout 5 0
exit
ip classless
ip cef
ip vrf vpna
rd 32:1
route-target export 32:1
route-target import 32:1
route-target import 31:1 //导入收到的其它VPNV4标记（其它域）的路由
exit
interface Loopback0
上海国乐
no sh
ip address 202.98.32.2 255.255.255.255
interface Serial1/0
no sh
ip vrf forwarding vpna
ip address 172.16.1.1 255.255.255.252
interface Serial1/1
no sh
ip address 10.1.1.2 255.255.255.252
mpls ip
router ospf 1
log-adjacency-changes
network 10.1.1.0 0.0.0.3 area 0
network 202.98.32.2 0.0.0.0 area 0
exit
router bgp 32
no synchronization
bgp log-neighbor-changes
neighbor 202.98.32.3 remote-as 32
neighbor 202.98.32.3 update-source Loopback0
no auto-summary
address-family vpnv4
neighbor 202.98.32.3 activate
neighbor 202.98.32.3 send-community both
exit-address-family
address-family ipv4 vrf vpna
redistribute connected
redistribute static
no synchronization
exit-address-family
exit
ip route vrf vpna 192.168.3.0 255.255.255.0 172.16.1.2
end
R3:
en
config t
hostname ASBR-L
enable secret cisco
username cisco password cisco
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
service password-encryption
clock timezone BJT 8
no ip source-route
no ip http server
no ip http secure-server
no ip domain-lookup
line consol 0
login local
logging synchronous
stopbit 1
exec-timeout 0 0
line vty 0 4
login local
logging synchronous
stopbit 1
exec-timeout 5 0
exit
ip classless
ip cef
interface Loopback0徐胖胖
no sh
ip address 202.98.32.3 255.255.255.255
interface Serial1/0
no sh
ip address 10.1.1.1 255.255.255.252
mpls ip
interface Serial1/1
no sh
ip address 1.1.1.1 255.255.255.252
router ospf 1
log-adjacency-changes
network 10.1.1.0 0.0.0.3 area 0
network 202.98.32.3 0.0.0.0 area 0
exit
router bgp 32
no synchronization
no bgp default route-target filter
豫公网安备41160202000603
站长QQ:729038198
关于我们
投诉建议