MPLS VPN配置.docx
- 文档编号:3729964
- 上传时间:2022-11-25
- 格式:DOCX
- 页数:14
- 大小:19.69KB
MPLS VPN配置.docx
《MPLS VPN配置.docx》由会员分享,可在线阅读,更多相关《MPLS VPN配置.docx(14页珍藏版)》请在冰豆网上搜索。
MPLSVPN配置
MPLSVPN
[local]JC_SFJ_SE800#showconfigmpls
Buildingconfiguration...
Currentconfiguration:
!
router-id124.164.0.252
contextlocal
!
routermpls
interfaceGE-1/1
interfaceGE-1/2
interfaceGE-2/3
interfaceGE-2/4
interfaceloopback0
!
!
**EndContext**
!
end
[local]JC_SFJ_SE800#showconfigldp
Buildingconfiguration...
Currentconfiguration:
contextlocal
!
routerldp
label-bindingprefix-listloopback-onlyin
label-bindingprefix-listloopback-onlyout
interfaceGE-1/1
interfaceGE-1/2
interfaceGE-2/3
interfaceGE-2/4
interfaceloopback0
!
!
**EndContext**
[local]JC_SFJ_SE800#showconfigcontextAP-MGMT
Buildingconfiguration...
Currentconfiguration:
!
contextAP-MGMTvpn-rd64640:
20002007
!
noipdomain-lookup
!
interfaceTo_APmultibind
ipaddress10.78.6.1/24
dhcprelay600
nologgingconsole
!
routerbgpvpn
address-familyipv4unicast
exportroute-target64640:
20002007
importroute-target64640:
20002006
redistributeconnected
redistributestatic
!
dhcprelayserver192.168.1.2
!
检查:
查看是否收到VPN路由
[AP-MGMT]JC_SFJ_SE800#showbgproute
AddressFamily:
ipv4unicast
BGPtableversionis4548967,localrouterIDis124.164.0.252
Statuscodes:
ddamped,hhistory,>best,iinternal
Origincodes:
i-IGP,e-EGP,?
-incomplete
VPNRD:
64640:
20002007
NetworkNextHopMetricLocPrfWeightPath
>i10.78.0.0/24124.164.0.2530100100?
i124.164.0.2530100100?
>10.78.6.0/240.0.0.0010032768?
>i192.168.1.0/30124.164.0.2530100100?
i124.164.0.2530100100?
因为MPLSVPN的内层标签分配是由MP-BGP完成的,所以我们在VPNcontext里面看内层标签分配信息。
[AP-MGMT]JC_SFJ_SE800#showbgproutelabels
VPNRD:
64640:
20002007
NetworkNextHopRcvLabelAllocLabel
10.78.0.0/24124.164.0.253589828nolabel
124.164.0.253589828nolabel
10.78.6.0/240.0.0.0nolabel589828
192.168.1.0/30124.164.0.253589828nolabel
124.164.0.253589828nolabel
[AP-MGMT]JC_SFJ_SE800#traceroute192.168.1.1verbose
se_tracerouteto192.168.1.1(192.168.1.1),30hopsmax,40bytepackets
1124.164.3.133(124.164.3.133)36bytesto10.78.6.113.877ms4.165ms2.949ms
2124.164.2.134(124.164.2.134)148bytesto10.78.6.14.806ms4.849ms4.874ms
MplsLabel:
589828MplsExpBits:
0TTL:
1和上面看到的收到的label信息匹配
3192.168.1.1(192.168.1.1)36bytesto10.78.6.14.176ms4.124ms3.877ms
在contextlocal里检查,外层相关信息
检查LDP邻居建立情况
[local]JC_SFJ_SE800#showldpneighbor
PeerFlags:
A-LocalActiveOpen,D-Deleted,R-Reseting,E-OpenExtraDelay
N-OpenNoDelay,P-SetMD5Passwd,T-RetainRoute,F-FlushState
X-ExplicitNullEnabled,C-ExplicitNullStatusChanging
G-GracefulRestartSupported,L-SessionLifeExtended
V-ReachableViaRSVP-TELSP
SHld-SessionHoldtimeLeft,HHld-HelloHoldtimeLeft
NeighborAddrLDPIdentifierStateFlagSHldHHldInterface
124.164.0.1124.164.0.1:
0OperA3810GE-1/1
11GE-2/3
124.164.0.2124.164.0.2:
0OperA3712GE-1/2
12GE-2/4
[local]JC_SFJ_SE800#showldpneighbordetail
PeerFlags:
A-LocalActiveOpen,D-Deleted,R-Reseting,E-OpenExtraDelay
N-OpenNoDelay,P-SetMD5Passwd,T-RetainRoute,F-FlushState
X-ExplicitNullEnabled,C-ExplicitNullStatusChanging
G-GracefulRestartSupported,L-SessionLifeExtended
V-ReachableViaRSVP-TELSP
SHld-SessionHoldtimeLeft,HHld-HelloHoldtimeLeft
Rcvd-HelloHoldtimeReceived,Used-HelloHoldtimeUsed
Left-HelloHoldtimeLeft,Intv-HelloIntervalUsed
NeighborAddress:
124.164.0.1State:
Oper
LDPIdentifier:
124.164.0.1:
0Flags:
A
LastResetReason:
LDPinitializedError:
RecvNotification:
SuccessSentNotification:
Success
FECVer:
449ADDRVer:
82
TCPConnLocal:
124.164.0.252/65126Remote:
124.164.0.1/646(邻居路由器的loopback地址)
SessHoldExpire:
39NextKeepAlive:
7sec
RcvdReconnTime:
0RcvdRecoverTime:
0
MsgRcvd:
338914MsgSent:
340035
Up/DownTimeSinceLastChg:
8w2dResetCount:
0
#ofAdjacency:
2
#InterfaceI/FAddressRcvdUsedLeftIntv
1:
GE-1/1124.164.2.138/301515105
2:
GE-2/3124.164.3.130/301515125
NeighborAddress:
124.164.0.2State:
Oper
LDPIdentifier:
124.164.0.2:
0Flags:
A
LastResetReason:
LDPinitializedError:
RecvNotification:
SuccessSentNotification:
Success
FECVer:
449ADDRVer:
82
TCPConnLocal:
124.164.0.252/59471Remote:
124.164.0.2/646
SessHoldExpire:
38NextKeepAlive:
1sec
RcvdReconnTime:
0RcvdRecoverTime:
0
MsgRcvd:
333148MsgSent:
334273
Up/DownTimeSinceLastChg:
8w1dResetCount:
0
#ofAdjacency:
2
#InterfaceI/FAddressRcvdUsedLeftIntv
1:
GE-1/2124.164.2.142/301515135
2:
GE-2/4124.164.3.134/301515135
[local]JC_SFJ_SE800#
我们通过trace可以得知neighbor是本地互联的路由器的地址,这一点和LDP协议里邻居发现是通过224.0.0.2的udphello数据包完成的,是一致的。
[local]JC_SFJ_SE800#traceroute124.164.0.1
se_tracerouteto124.164.0.1(124.164.0.1),30hopsmax,40bytepackets
1124.164.3.129(124.164.3.129)5.386ms4.918ms4.895ms
[local]JC_SFJ_SE800#traceroute124.164.0.2
se_tracerouteto124.164.0.2(124.164.0.2),30hopsmax,40bytepackets
1124.164.2.141(124.164.2.141)23.949ms33.194ms8.774ms
查看有哪些interface起了ldp协议
[local]JC_SFJ_SE800#showldpinterface
Flag:
B-Bound,U-Up,D-Deleted,S-Stale,E-Holdexpired
T-BindStaleL-Loopback
InterfaceLocalAddrFlagRemoteLSRIdHoldExpr
GE-1/1124.164.2.138/30BU124.164.0.1:
012
GE-1/2124.164.2.142/30BU124.164.0.2:
010
GE-2/3124.164.3.130/30BU124.164.0.1:
014
GE-2/4124.164.3.134/30BU124.164.0.2:
010
loopback0124.164.0.252/32BUL
[local]JC_SFJ_SE800#showldpbinding
>activebinding,Local/In-local/inputlabelbinding
From-sourceofremotelabel,Remote/Out-remote/outputlabelbinding
Prefix/FECLearned-FromLocal/InRemote/OutInterface
>118.76.224.0/22local3
>118.76.228.0/22local3
>124.164.0.1/32124.164.0.1:
05242903GE-1/1
>3GE-2/3
124.164.0.2:
01024
>124.164.0.2/32124.164.0.2:
05242913GE-1/2
>3GE-2/4
124.164.0.1:
01024
>124.164.0.16/32124.164.0.2:
05242951037GE-1/2
>1037GE-2/4
124.164.0.1:
01025
>124.164.0.238/32124.164.0.1:
05242981027GE-1/1
>1027GE-2/3
>124.164.0.2:
01025GE-1/2
>1025GE-2/4
>124.164.0.245/32124.164.0.1:
05242991028GE-1/1
>1028GE-2/3
>124.164.0.2:
01026GE-1/2
>1026GE-2/4
>124.164.0.246/32124.164.0.1:
05243001029GE-1/1
>1029GE-2/3
>124.164.0.2:
01027GE-1/2
>1027GE-2/4
>124.164.0.247/32124.164.0.1:
05243011030GE-1/1
>1030GE-2/3
>124.164.0.2:
01028GE-1/2
>1028GE-2/4
>124.164.0.248/32124.164.0.2:
05243021029GE-1/2
>1029GE-2/4
>124.164.0.1:
01031GE-1/1
>1031GE-2/3
>124.164.0.249/32124.164.0.1:
05243031032GE-1/1
>1032GE-2/3
>124.164.0.2:
01030GE-1/2
>1030GE-2/4
>124.164.0.250/32124.164.0.1:
05243041033GE-1/1
>1033GE-2/3
>124.164.0.2:
01031GE-1/2
>1031GE-2/4
>124.164.0.251/32124.164.0.1:
05243051034GE-1/1
>1034GE-2/3
>124.164.0.2:
01032GE-1/2
>1032GE-2/4
>124.164.0.252/32local3
124.164.0.1:
01035
124.164.0.2:
01033
>124.164.0.253/32124.164.0.1:
05243061036GE-1/1本地VPN学到的几条路由都是从这个PE学到的。
>1036GE-2/3
>124.164.0.2:
01034GE-1/2
>1034GE-2/4
>124.164.0.254/32124.164.0.1:
05243071037GE-1/1
>1037GE-2/3
>124.164.0.2:
01035GE-1/2
>1035GE-2/4
>124.164.2.136/30local3
>124.164.2.140/30local3
>124.164.2.144/30local3
>124.164.3.128/30local3
>124.164.3.132/30local3
>124.164.80.0/22local3
>124.164.84.0/22local3
>124.164.88.0/22local3
>124.164.224.0/22local3
>124.164.228.0/22local3
>192.168.102.64/27local3
[local]JC_SFJ_SE800#
从上面可以看到,只有学习到/32的地址label-mapping信息。
因为做了下面的配置
routerldp
label-bindingprefix-listloopback-onlyin
label-bindingprefix-listloopback-onlyout
所以只有loopback地址的label-mapping信息会被发给LDP邻居。
[local]JC_SFJ_SE800#showldpbinding|greplocal
>activebinding,Local/In-local/inputlabelbinding
>118.76.224.0/22local3
>118.76.228.0/22local3
>124.164.0.252/32local3
>124.164.2.136/30local3
>124.164.2.140/30local3
>124.164.2.144/30local3
>124.164.3.128/30local3
>124.164.3.132/30local3
>124.164.80.0/22local3
>124.164.84.0/22local3
>124.164.88.0/22local3
>124.164.224.0/22local3
>124.164.228.0/22local3
>192.168.102.64/27local3
上面我们看到对本地终结的网段,分配的标签为3,这是因为缺省情况下为PHP模式。
和下面的输出比较完全匹配。
[local]JC_SFJ_SE800#showipinterfacebrief|grepUp
3FJ--xinyonglians192.168.102.65/270Updot1q-1q1/4vlan-id100:
1999
GE-1/1124.164.2.138/301500Upethernet1/1
GE-1/2124.164.2.142/301500Upethernet1/2
GE-1/3.99124.164.2.145/301500Updot1q1/3vlan-id99
GE-2/3124.164.3.130/301500Upethernet2/3
GE-2/4124.164.3.134/301500Upethernet2/4
loopback0124.164.0.252/321500Up(Loopback)
pppoe-pool1124.164.80.1/220Up
pppoe-pool10124.164.224.1/220Up
pppoe-pool11124.164.228.1/220Up
pppoe-pool2124.164.84.1/220Up
pppoe-pool3118.76.224.1/220Up
pppoe-pool4118.76.228.1/220Up
pppoe-pool5124.164.88.1/220Up
“showldpbinding”其实就应该是通常其他产品文档里讲的LFIB表。
我没有在redback里找到通常所说的LIB表(labelinformationbase)的显示命令。
[local]JC_SFJ_SE800#showldpsummary
LDPIdentifier:
124.164.0.252:
0ConfigTransAddr:
None
FECVersion:
449ADDRVersion:
82
LabelManagerversion:
449OperationalPeers:
2
LabelsAllocated:
27RouterState:
Normal
Gracefulrestartenabled,Fast-reroutedisabled,Track-IGP-metricdisabled,Create-LSP-Circuitdisabled,use-te-lspdisa
bled,max-session1200
[local]JC_SFJ_SE800#showldplog
NumEntries:
37,Start:
0,End:
36,Max:
8192,EntrySize:
48
0Jun1002:
38:
05.392STRLDPinternalloginitialized.Maxnumbe
1Jun1002:
38:
05.392STRroflogentriesis8192.Logentrysiz
2Jun1002:
38:
05.392STREeis48.Totalmemoryconsumption393K.
3
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- MPLS VPN配置 VPN 配置