bgpvpn实例.docx
- 文档编号:3540859
- 上传时间:2022-11-23
- 格式:DOCX
- 页数:15
- 大小:75.02KB
bgpvpn实例.docx
《bgpvpn实例.docx》由会员分享,可在线阅读,更多相关《bgpvpn实例.docx(15页珍藏版)》请在冰豆网上搜索。
bgpvpn实例
去年12月的时候做了一个项目,中间碰到一个问题,今天写出来跟大家分享一下。
项目概况是这样的,国家电网的一市局,市局里放了两台NE20E-8的路由器,做为全市的核心路由器,每台NE20E-8用一个CPOS口通过传输设备复用出多个2M线路,下接多个变电所,变电所路由器为cisco的2811路由器。
cisco2811路由器与两台NE20E-8组成一个链路双归网络,cisco2811、两台NE20E-8路由器均为PE设备,两台NE20E-8做为全市的路由反射器,变电所的cisco2811路由器只与两台NE20E-8路由器建立BGP邻居关系。
全市存在两个VPN(MPLS/VPN),分别以VRFA和VRFB表示,两台NE20E-8使用upe方式向cisco2811下发缺省路由引导上行流量,在cisco2811中重分布直连路由。
以下为网络示意图:
以下为三台设备的配置文件
NE20E-8A:
discu
#
sysnameHZLA-NE20E-8A
#
routerid33.10.191.11
#
diffservdomain
#
ipvpn-instancerealtime
route-distinguisher2007:
1
vpn-target30033:
11export-extcommunity
vpn-target30033:
130033:
1130033:
13import-extcommunity
#
ipvpn-instancenrt
route-distinguisher2007:
2
vpn-target30033:
12export-extcommunity
vpn-target30033:
230033:
1230033:
14import-extcommunity
#
mplslsr-id33.10.191.11
mpls
#
mplsldp
#
controllerCpos3/0/0
e16channel-set0timeslot-list1-31
#
interfaceAux0
asyncmodeflow
link-protocolppp
#
interfaceEthernet1/0/0
#
interfaceEthernet1/0/1
#
interfaceEthernet1/0/2
#
interfaceEthernet1/0/3
#
interfaceEthernet1/0/4
descriptionLINK_TO_HZ-NE20-8A
ipaddress33.10.190.6255.255.255.252
mpls
mplsldp
#
interfaceEthernet1/0/5
#
interfaceEthernet1/0/6
#
interfaceEthernet1/0/7
#
interfaceEthernet2/0/0
#
interfaceEthernet2/0/1
#
interfaceEthernet2/0/2
descriptionLINK_TO_HZLA-NE20-8B
ipaddress33.10.190.61255.255.255.252
mpls
mplsldp
#
interfaceEthernet2/0/3
#
interfaceEthernet2/0/4
#
interfaceEthernet2/0/5
#
interfaceEthernet2/0/6
#
interfaceEthernet2/0/6.100
vlan-typedot1q100
descriptionLINK_TO_HZLA-S3328TP-RT
ipbindingvpn-instancerealtime
ipaddress33.10.190.209255.255.255.252
#
interfaceEthernet2/0/6.200
vlan-typedot1q200
descriptionrealtime
ipbindingvpn-instancerealtime
ipaddress10.33.177.94255.255.255.224
vrrpvrid200virtual-ip10.33.177.94
#
interfaceEthernet2/0/7
#
interfaceEthernet4/0/0
#
interfaceEthernet4/0/1
#
interfaceEthernet4/0/2
#
interfaceEthernet4/0/3
#
interfaceEthernet4/0/4
#
interfaceEthernet4/0/5
#
interfaceEthernet4/0/6
#
interfaceEthernet4/0/6.300
#
interfaceEthernet4/0/6.400
descriptionnrt
#
interfaceEthernet4/0/7
#
interfaceSerial3/0/0/6:
0
link-protocolppp
descriptionxiushui
ipaddress33.10.177.217255.255.255.252
mpls
mplsldp
#
interfaceGigabitEthernet0/0/1
#
interfaceGigabitEthernet0/0/2
#
interfaceNULL0
#
interfaceLoopBack0
ipaddress33.10.191.11255.255.255.255
#
bgp30033
group500internal
peer500connect-interfaceLoopBack0
peer33.10.191.131as-number30033
peer33.10.191.131group500
group300internal
peer300connect-interfaceLoopBack0
peer33.10.191.1as-number30033
peer33.10.191.1group300
peer33.10.191.12as-number30033
peer33.10.191.12group300
#
ipv4-familyunicast
undosynchronization
reflectorcluster-id100.100.100.100
peer300enable
peer33.10.191.1enable
peer33.10.191.1group300
peer33.10.191.12enable
peer33.10.191.12group300
peer500enable
peer500reflect-client
peer33.10.191.131enable
peer33.10.191.131group500
#
ipv4-familyvpnv4
reflectorcluster-id100.100.100.100
policyvpn-target
peer300enable
peer33.10.191.1enable
peer33.10.191.1group300
peer33.10.191.12enable
peer33.10.191.12group300
peer500enable
peer500reflect-client
peer500upe
peer500default-originatevpn-instancerealtime
peer500default-originatevpn-instancenrt
peer33.10.191.131enable
peer33.10.191.131group500
#
ipv4-familyvpn-instancerealtime
import-routedirect
import-routestatic
#
ipv4-familyvpn-instancenrt
import-routedirect
import-routestatic
#
aaa
local-useradminpasswordcipher.]@USE=B,53Q=^Q`MAF4<1!
!
local-useradminservice-typetelnet
local-useradminlevel15
authentication-schemedefault
#
authorization-schemedefault
#
accounting-schemedefault
#
domaindefault
#
#
ospf1
area0.0.0.21
network33.10.191.110.0.0.0
network33.10.190.40.0.0.3
network33.10.190.600.0.0.3
network33.10.177.2160.0.0.3
#
nqa-jittertag-version1
#
snmp-agent
snmp-agentlocal-engineid000007DB7F00000100004E8B
snmp-agentcommunitywriteZpepbdc@sjw
snmp-agentcommunityreadhuaWei8zjep
snmp-agentsys-infoversionall
snmp-agenttarget-hosttrapaddressudp-domain10.33.223.178paramssecuritynamehuaWei8zjep
snmp-agenttarget-hosttrapaddressudp-domain10.33.223.179paramssecuritynamehuaWei8zjep
snmp-agenttrapenablestandard
snmp-agenttrapsourceLoopBack0
#
user-interfacecon0
user-interfaceaux0
user-interfacevty04
authentication-modeaaa
#
return
NE20—B:
discu
#
sysnameHZLA-NE20E-8B
#
routerid33.10.191.12
#
diffservdomain
#
ipvpn-instancerealtime
route-distinguisher2008:
1
vpn-target30033:
11export-extcommunity
vpn-target30033:
130033:
1130033:
13import-extcommunity
#
ipvpn-instancenrt
route-distinguisher2008:
2
vpn-target30033:
12export-extcommunity
vpn-target30033:
230033:
1230033:
14import-extcommunity
#
mplslsr-id33.10.191.12
mpls
#
mplsldp
#
controllerCpos3/0/0
e16channel-set0timeslot-list1-31
#
interfaceAux0
asyncmodeflow
link-protocolppp
#
interfaceEthernet1/0/0
#
interfaceEthernet1/0/1
#
interfaceEthernet1/0/2
#
interfaceEthernet1/0/3
#
interfaceEthernet1/0/4
#
interfaceEthernet1/0/5
#
interfaceEthernet1/0/6
#
interfaceEthernet1/0/7
#
interfaceEthernet2/0/0
#
interfaceEthernet2/0/1
#
interfaceEthernet2/0/2
descriptionLINK_TO_HZLA-NE20-8A
ipaddress33.10.190.62255.255.255.252
mpls
mplsldp
#
interfaceEthernet2/0/3
#
interfaceEthernet2/0/4
#
interfaceEthernet2/0/5
#
interfaceEthernet2/0/6
#
interfaceEthernet2/0/6.300
vlan-typedot1q300
descriptionLINK_TO_HZLA-S3328TP-NRT
ipbindingvpn-instancenrt
ipaddress33.10.190.217255.255.255.252
#
interfaceEthernet2/0/6.400
vlan-typedot1q400
descriptionnrt
ipbindingvpn-instancenrt
ipaddress10.33.177.126255.255.255.224
vrrpvrid40virtual-ip10.33.177.126
#
interfaceEthernet2/0/7
#
interfaceEthernet4/0/0
#
interfaceEthernet4/0/1
#
interfaceEthernet4/0/2
#
interfaceEthernet4/0/3
#
interfaceEthernet4/0/4
descriptionLINK_TO_HZFY-NE20-8A
ipaddress33.10.190.58255.255.255.252
mpls
mplsldp
#
interfaceEthernet4/0/5
#
interfaceEthernet4/0/6
#
interfaceEthernet4/0/6.100
#
interfaceEthernet4/0/6.200
descriptionrealtime
#
interfaceEthernet4/0/7
#
interfaceSerial3/0/0/6:
0
link-protocolppp
descriptionxiushui
ipaddress33.10.226.217255.255.255.252
mpls
mplsldp
#
interfaceGigabitEthernet0/0/1
#
interfaceGigabitEthernet0/0/2
#
interfaceNULL0
#
interfaceLoopBack0
ipaddress33.10.191.12255.255.255.255
#
bgp30033
group500internal
peer500connect-interfaceLoopBack0
peer33.10.191.131as-number30033
peer33.10.191.131group500
group300internal
peer300connect-interfaceLoopBack0
peer33.10.191.11as-number30033
peer33.10.191.11group300
peer33.10.191.9as-number30033
peer33.10.191.9group300
#
ipv4-familyunicast
undosynchronization
reflectorcluster-id100.100.100.100
peer300enable
peer33.10.191.11enable
peer33.10.191.11group300
peer33.10.191.9enable
peer33.10.191.9group300
peer500enable
peer33.10.191.131enable
peer33.10.191.131group500
#
ipv4-familyvpnv4
reflectorcluster-id100.100.100.100
policyvpn-target
peer300enable
peer33.10.191.11enable
peer33.10.191.11group300
peer33.10.191.9enable
peer33.10.191.9group300
peer500enable
peer500reflect-client
peer500upe
peer500default-originatevpn-instancerealtime
peer500default-originatevpn-instancenrt
peer33.10.191.131enable
peer33.10.191.131group500
#
ipv4-familyvpn-instancerealtime
import-routedirect
import-routestatic
#
ipv4-familyvpn-instancenrt
import-routedirect
import-routestatic
#
aaa
local-useradminpasswordcipher.]@USE=B,53Q=^Q`MAF4<1!
!
local-useradminservice-typetelnet
local-useradminlevel15
authentication-schemedefault
#
authorization-schemedefault
#
accounting-schemedefault
#
domaindefault
#
#
ospf1
import-routedirect
area0.0.0.21
network33.10.191.120.0.0.0
network33.10.190.600.0.0.3
network33.10.190.560.0.0.3
network33.10.226.2160.0.0.3
#
nqa-jittertag-version1
#
snmp-agent
snmp-agentlocal-engineid000007DB7F00000100004E8B
snmp-agentcommunitywriteZpepbdc@sjw
snmp-agentcommunityreadhuaWei8zjep
snmp-agentsys-infoversionall
snmp-agenttarget-hosttrapaddressudp-domain10.33.223.178paramssecuritynamehuaWei8zjep
snmp-agenttarget-hosttrapadd
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- bgpvpn 实例
![提示](https://static.bdocx.com/images/bang_tan.gif)