H3CMSR系列路由器MPLSL3VPN跨域方案ABC功能配置.docx
- 文档编号:8557773
- 上传时间:2023-01-31
- 格式:DOCX
- 页数:23
- 大小:859.66KB
H3CMSR系列路由器MPLSL3VPN跨域方案ABC功能配置.docx
《H3CMSR系列路由器MPLSL3VPN跨域方案ABC功能配置.docx》由会员分享,可在线阅读,更多相关《H3CMSR系列路由器MPLSL3VPN跨域方案ABC功能配置.docx(23页珍藏版)》请在冰豆网上搜索。
H3CMSR系列路由器MPLSL3VPN跨域方案ABC功能配置
peB
MSF系列路由器MPLSL3VP跨域方案A功能的配置
关键词:
MSR;MPLS;L3VPN;跨域;OptionA
一、组网需求:
peA和asbrA在AS1,peB和asbrB在AS2;peA和peB者E下挂着vpna和口vpnb的站点,peA下挂vpna和口vpnb站点1,peB下挂vpna和口vpnb站点2。
设备清单:
MSF系列路由器4台
、组网图:
pc
E0
192.1八82.1
vpn-target1:
1export-exteommunityvpn-target1:
1import-exteommunity
ipvpn-instancevpnbroute-distinguisher3:
2vpn-target2:
2export-extcommunityvpn-target2:
2import-extcommunity
#
mplslsr-id3.3.3.3
#
mpls
#
mplsldp
#
interfaceEthernet0/0
portlink-moderoute
ipaddress1.3.0.3255.255.255.0mpls
mplsldp
#
interfaceEthernet0/1
portlink-moderoute
ipbindingvpn-instancevpna
ipaddress192.168.1.1255.255.255.0
#
interfaceEthernet1/0
portlink-moderoute
ipbindingvpn-instancevpnb
ipaddress172.32.1.1255.255.255.0
#
interfaceLoopBack0
ipaddress3.3.3.3255.255.255.255
bgp1
undosynchronization
peer1.1.1.1as-number1
peer1.1.1.1connect-intefaceLoopBackO
ipv4-familyvpnv4
peer1.1.1.1enable
#
ipv4-familyvpn-instaneevpna
import-routedirect
#
ipv4-familyvpn-instaneevpnb
import-routedirect
#
ospf1
area0.0.0.0
network3.3.3.30.0.0.0
network1.3.0.00.0.0.255
#
asbrA配置:
routerid1.1.1.1
#
ipvpn-instaneevpna
route-distinguisher1:
1
vpn-target1:
1export-extcommunity
vpn-target1:
1import-extcommunity
#
ipvpn-instaneevpnb
route-distinguisher1:
2vpn-target2:
2export-extcommunityvpn-target2:
2import-extcommunity#mplslsr-id1.1.1.1
#
mpls
#
mplsldp
间用子接口区分不同vpn流量
间用子接口区分不同vpn流量
interfaceEthernet0/0.1//asbr
vlan-typedot1qvid1
ipbindingvpn-instancevpna
ipaddress1.2.1.1255.255.255.0
#
interfaceEthernet0/0.2//asbr
vlan-typedot1qvid2
ipbindingvpn-instancevpnb
ipaddress1.2.2.1255.255.255.0
#
interfaceEthernet0/1
portlink-moderoute
ipaddress1.3.0.1255.255.255.0mpls
mplsldp
#
interfaceLoopBack0
ipaddress1.1.1.1255.255.255.255
#
bgp1
undosynchronization
peer3.3.3.3as-number1//asbr
peer3.3.3.3connect-inteface
LoopBackO
#
ipv4-familyvpnv4
peer3.3.3.3enable
#
ipv4-familyvpn-instaneevpna
//asbr
peer1.2.1.2as-number2
#
ipv4-familyvpn-instaneevpnb
//asbr
peer1.2.2.2as-number2
#
ospf1
area0.0.0.0
network1.1.1.10.0.0.0
network1.3.0.00.0.0.255
#
asbrB配置:
#
routerid2.2.2.2
#
ipvpn-instaneevpna
route-distinguisher2:
1
vpn-target1:
1export-extcommunity
vpn-target1:
1import-extcommunity#
ipvpn-instaneevpnb
route-distinguisher2:
2
vpn-target2:
2iemxport-extcommunitymunity
和pe间是标准L3VPN配置
间使用PE-CE模式传vpna路由
间使用PE-CE模式传vpna路由
mplslsr-id222.2
#
mpls
#
mplsIdp
#
interfaceEthernet0/0.1//asbr
vlan-typedotlqvid1
ipbindingvpn-instaneevpna
ipaddress1.2.1.2255.255.255.0
#
interfaeeEthernet0/0.2//asbr
vlan-typedotlqvid2
ipbindingvpn-instaneevpnb
ipaddress1.2.2.2255.255.255.0
#
interfaeeEthernet0/1
portlink-moderoute
ipaddress2.4.0.2255.255.255.0mpls
mplsldp
#
interfaeeLoopBack0
ipaddress2.2.2.2255.255.255.255
#
bgp2
undosynchronization
peer4.444as-number2//asbr
peer4.4.4.4conneet-interface
LoopBaek0
间用子接口区分不同vpn流量
间用子接口区分不同vpn流量
和pe间是标准L3VPN配置
ipv4-familyvpnv4
peer4.4.4.4enable
间使用PE-CE模式传vpna路由
#
ipv4-familyvpn-instaneevpna//asbr
peer1.2.1.1as-number1
间使用PE-CE模式传vpnb路由
#
ipv4-familyvpn-instaneevpnb//asbr
peer1.2.2.1as-number1
#
ospf1
area0.0.0.0
network2.2.2.20.0.0.0
network2.4.0.00.0.0.255
#
peB配置:
routerid4.4.4.4
#
ipvpn-instaneevpna
route-distinguisher4:
1
vpn-target1:
1export-exteommunity
vpn-target1:
1import-exteommunity
#
ipvpn-instaneevpnb
route-distinguisher4:
2
vpn-target2:
2export-exteommunity
vpn-target2:
2import-exteommunity
#mplslsr-id4.4.4.4
mpls#mplsldp
#
interfaceEthernet0/0
portlink-moderoute
ipaddress2.4.0.4255.255.255.0mplsmplsldp
#
interfaceEthernet0/1
portlink-moderoute
ipbindingvpn-instancevpna
ipaddress192.168.2.1255.255.255.0
#
interfaceEthernet1/0
portlink-moderoute
ipbindingvpn-instancevpnb
ipaddress172.32.2.1255.255.255.0
#
interfaceLoopBack0
ipaddress4.4.4.4255.255.255.255
#
bgp2
undosynchronization
peer2.2.2.2as-number2
peer2.2.2.2connect-interfaceLoopBack0#ipv4-familyvpnv4
peer2.2.2.2enable
ipv4-familyvpn-instaneevpnaimport-routedirect
#
ipv4-familyvpn-instaneevpnbimport-routedirect
ospf1
area0.0.0.0
network4.4.4.40.0.0.0
network240.00.0.0.255
#
四、配置关键点:
1.asbr间需要用不同链路隔离不同vpn流量,可以使用不同物理链路或逻辑链路如子接口或E1/T1通道;
2.asbr问互相把对方认为CE所以要配置在bgp的vpn实例视图下配置
MSF系列路由器MPLSL3VP跨域方案B功能的配置
关键词:
MSR;MPLS;L3VPN;跨域;OptionB一、组网需求:
peA和asbrA在AS1,peB和asbrB在AS2peA和peB都下挂着vpna禾口vpnb的站点,peA下挂vpna禾口vpnb站点1,peB下挂vpna禾口vpnb站点
2。
设备清单:
MS療列路由器4台
、组网图:
三、配置步骤
适用设备和版本:
MSR系列、Version5.20,Beta1105后所有版本
peA配置:
#
routerid333.3
#
ipvpn-instaneevpna
route-distinguisher3:
1
vpn-target1:
1export-extcommunityvpn-target1:
1import-extcommunity#
ipvpn-instaneevpnb
route-distinguisher3:
2
vpn-target2:
2export-extcommunityvpn-target2:
2import-extcommunity#
mpls#mplsldp
#
interfaceEthernet0/0
portlink-moderoute
ipaddress1.3.0.3255.255.255.0mpls
mplsldp
#
interfaceEthernet0/1
portlink-moderoute
ipbindingvpn-instancevpna
ipaddress192.168.1.1255.255.255.0
#
interfaceEthernet1/0
portlink-moderoute
ipbindingvpn-instancevpnb
ipaddress172.32.1.1255.255.255.0
#interfaceLoopBack0
ipaddress3.3.3.3255.255.255.255
#
bgp1
undosynchronization
peer1.1.1.1as-number1
peer1.1.1.1connect-interfaceLoopBack0#
ipv4-familyvpnv4
peer1.1.1.1enable
#
ipv4-familyvpn-instaneevpna
import-routedirect
#
ipv4-familyvpn-instaneevpnb
import-routedirect
#
ospf1
area0.0.0.0
network3.3.3.30.0.0.0
network1.3.0.00.0.0.255
#
asbrA配置:
routerid1.1.1.1
#
mplsIsr-id1.1.1.1
#
mpls
#
mplsldp
#
interfaceEthernet。
/。
portlink-moderoute
ipaddress1.2.0.1255.255.255.0mpls//使能MPLS流量转发能力#
interfaceEthernet0/1
portlink-moderoute
mplsmplsIdp
interfaceLoopBackO
ipaddress1.1.1.1255.255.255.255
#
bgp1
undosynchronization
peer1.2.0.2as-number2//建立EBGP连接
peer3.3.3.3as-number1
peer3.3.3.3connect-interfaceLoopBack0ipv4-familyvpnv4undopolicyvpn-target//取消vpn-target策略peer3.3.3.3enable
peer1.2.0.2enable//向EBGP邻居发vpn所有vpn路由
#
ospf1
area0.0.0.0
network1.1.1.10.0.0.0
network1.3.0.00.0.0.255
#
asbrB配置:
#
routerid2.2.2.2
#
mplslsr-id2.2.2.2
#
mpls
mplsldp#
interfaceEthernet0/0
portlink-moderoute
ipaddress1.2.0.2255.255.255.0
mpls//使能MPLS流量转发能力
interfaceEthernet0/1portlink-moderoute
ipaddress2.4.0.2255.255.255.0
mpls
mplsldp
#
interfaceLoopBack0
ipaddress2.2.2.2255.255.255.255
#
bgp2
undosynchronization
peer1.2.0.1as-number1//建立EBGP连接
peer4.4.4.4as-number2
peer4.4.4.4connect-interfaceLoopBack0
#ipv4-familyvpnv4
undopolicyvpn-target//取消vpn-target策略
peer4.4.4.4enable
peer1.2.0.1enable//向EBGP邻居发vpn所有vpn路由
#
ospf1
area0.0.0.0
network240.00.0.0.255#
peB配置:
routerid444.4
#
ipvpn-instaneevpna
route-distinguisher4:
1
vpn-target1:
1export-exteommunityvpn-target1:
1import-exteommunity#ipvpn-instaneevpnb
route-distinguisher4:
2
vpn-target2:
2export-exteommunityvpn-target2:
2import-exteommunity#
mplsIsr-id4.4.4.4
#
mpls
#
mplsIdp
#
interfaeeEthernet0/0
portlink-moderoute
ipaddress2.4.0.4255.255.255.0
mpls
mplsIdp
#
interfaeeEthernet0/1
portlink-moderouteipbindingvpn-instaneevpnaipaddress192.16821255.255.255.0
#
interfaceEthernet1/0
portlink-moderoute
ipbindingvpn-instaneevpnb
ipaddress172.32.2.1255.255.255.0#
interfaeeLoopBaekO
ipaddress4.444255.255.255.255#
bgp2
undosynehronization
peer2.2.2.2as-number2
peer2.2.2.2conneet-interfaceLoopBaekO#
ipv4-familyvpnv4
peer2.2.2.2enable
#
ipv4-familyvpn-instaneevpnaimport-routedireet
#
ipv4-familyvpn-instaneevpnbimport-routedireet
#
ospf1
area0.0.0.0
network4.4.4.40.0.0.0
network2.4.0.00.0.0.255#
四、配置关键点:
1.asbr间的直连链路必须要使能MPL験发能力;
2.asbr间要建立MP-EBG连接,配置类似于普通L3VPN的MP-IBGP连
接;
3.asbr可以不用配置vpn实例,需要在bgp的vpnv4视图下取消
vpn-target策略。
MS療列路由器MPLSL3VP跨域方案C功能的配置
关键词:
MSR;MPLS;L3VP跨域;OptionC
一、组网需求:
peA和asbrA在AS1,peB和asbrB在AS2;peA和peB都下挂着vpna和vpnb的站点,peA下挂vpna和vpnb站点1,peB下挂vpna和vpnb站点2。
设备清单:
MS療列路由器4台
、组网图:
pcA
168.1.1:
2
EO
asbrA
asbrB
■
13.0.124/5/1
03/2+
多姚EBGP
八.4,0.2/24
XEO
2.4.(J.422K_
■EM
vpnaSite2
适用设备和版本
MSR系列、Version5.20,Beta1105
后所有版
192.168.242
EO;
1
pua
本
。
peA配置:
#
routerid3.333
#
ipvpn-instaneevpna
route-distinguisher3:
1
vpn-target1:
1export-extcommunity
vpn-target1:
1import-extcommunity#
ipvpn-instaneevpnbroute-distinguisher3:
2
vpn-target2:
2export-extcommunityvpn-target2:
2import-extcommunity#
mplslsr-id3.3.3.3
#
mpls
#
mplsldp
#
interfaceEthernet0/0
portlink-moderoute
ipaddress1.3.0.3255.255.255.0
mpls
mplsldp
#
interfaceEthernet0/1
portlink-moderoute
ipbindingvpn-instancevpna
ipaddress192.168.1.1255.255.255.0
#
interfaceEthernet1/0
portlink-moderoute
ipbindingvpn-instancevpnb
ipaddress172.32.1.1255.255.255.0
#
interfaceLoopBack0
ipaddress3.3.3.3255.255.255.255#bgp1undosynchronization
支持多跳EBGP连接
peer1.1.1.1as-number1peer4.4.4.4ebgp-max-hop64//
peer4.4.4.4connect-intefaceLoopBackO//使用环回口连接
peer1.1.1.1label-route-capability//使能标签路由能力
peer1.1.1.1connect-
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- H3CMSR 系列 路由器 MPLSL3VPN 方案 ABC 功能 配置
![提示](https://static.bdocx.com/images/bang_tan.gif)