HCIE - 数通｜MPLS虚拟专用网跨域实验
目录
一、前言
二、实验拓扑
三、实验需求
四、实验配置
（一）PE设备
① R2配置
② R7配置
③ R10配置
④ R11配置
（二）RR设备
① R3配置
② R6配置
（三）ASBR设备
① R4配置
② R5配置
五、实验效果
① R1到R8流量路径
② R9到R12流量路径
各位如果有学习python相关知识及相应算法的同学，推荐关注一下我的朋友：Neptune_yx
一、前言
该实验是对MPLS虚拟专用网跨域的一次应用，通过该实验可以掌握相应的MPLS虚拟专用网跨域的有关配置，由于时间比较仓促，实验配置部分只说明设备的有关配置，不再按步骤进行说明，有关原理知识，可以参考前面的博文 MPLS虚拟专用网跨域（一）以及MPLS虚拟专用网跨域（二）。
二、实验拓扑
三、实验需求
① AR3和AR6作为图中RR设备、AR2、AR9、AR7、AR10是PE设备；
② 通过MPLS VPN跨域option C1将AR1和AR8完成通信，AR11和AR12之间完成通信；
③ 各设备之间互访为最优路径。
四、实验配置
（一）PE设备
① R2配置如下
ip vpn-instance CE1ipv4-familyroute-distinguisher 2:2vpn-target 100:1 export-extcommunityvpn-target 100:1 import-extcommunity
#
mpls lsr-id 2.2.2.2
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0ip binding vpn-instance CE1ip address 12.1.1.2 255.255.255.0
#
interface GigabitEthernet0/0/1ip address 23.1.1.2 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface LoopBack1ip address 2.2.2.2 255.255.255.255 ospf enable 1 area 0.0.0.0
#
bgp 200peer 3.3.3.3 as-number 200 peer 3.3.3.3 connect-interface LoopBack1#ipv4-family unicastundo synchronizationpeer 3.3.3.3 enablepeer 3.3.3.3 label-route-capability# ipv4-family vpnv4policy vpn-targetpeer 3.3.3.3 enable#ipv4-family vpn-instance CE1 peer 12.1.1.1 as-number 100
#
ospf 1 area 0.0.0.0 ② R7配置如下
ip vpn-instance CE2ipv4-familyroute-distinguisher 7:7vpn-target 100:1 export-extcommunityvpn-target 100:1 import-extcommunity
#
mpls lsr-id 7.7.7.7
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0ip address 67.1.1.7 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface GigabitEthernet0/0/1ip binding vpn-instance CE2ip address 78.1.1.7 255.255.255.0
#
interface LoopBack1ip address 7.7.7.7 255.255.255.255 ospf enable 1 area 0.0.0.0
#
bgp 300peer 6.6.6.6 as-number 300 peer 6.6.6.6 connect-interface LoopBack1#ipv4-family unicastundo synchronizationpeer 6.6.6.6 enablepeer 6.6.6.6 label-route-capability# ipv4-family vpnv4policy vpn-targetpeer 6.6.6.6 enable#ipv4-family vpn-instance CE2 peer 78.1.1.8 as-number 400
#
ospf 1 area 0.0.0.0 ③ R10配置如下
#
ip vpn-instance CE3ipv4-familyroute-distinguisher 10:10vpn-target 200:1 export-extcommunityvpn-target 200:1 import-extcommunity
#
mpls lsr-id 10.10.10.10
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0ip binding vpn-instance CE3ip address 109.1.1.10 255.255.255.0
#
interface GigabitEthernet0/0/1ip address 103.1.1.10 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface LoopBack1ip address 10.10.10.10 255.255.255.255 ospf enable 1 area 0.0.0.0
#
bgp 200peer 3.3.3.3 as-number 200 peer 3.3.3.3 connect-interface LoopBack1#ipv4-family unicastundo synchronizationpeer 3.3.3.3 enablepeer 3.3.3.3 label-route-capability# ipv4-family vpnv4policy vpn-targetpeer 3.3.3.3 enable#ipv4-family vpn-instance CE3 peer 109.1.1.9 as-number 500
#
ospf 1 area 0.0.0.0 ④ R11配置如下
#
ip vpn-instance CE4ipv4-familyroute-distinguisher 11:11vpn-target 200:1 export-extcommunityvpn-target 200:1 import-extcommunity
#
mpls lsr-id 11.11.11.11
mpls
#
mpls ldp
#
#
interface GigabitEthernet0/0/0ip binding vpn-instance CE4ip address 112.1.1.11 255.255.255.0
#
interface GigabitEthernet0/0/1ip address 116.1.1.11 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface LoopBack1ip address 11.11.11.11 255.255.255.255 ospf enable 1 area 0.0.0.0
#
bgp 300peer 6.6.6.6 as-number 300 peer 6.6.6.6 connect-interface LoopBack1#ipv4-family unicastundo synchronizationpeer 6.6.6.6 enablepeer 6.6.6.6 label-route-capability# ipv4-family vpnv4policy vpn-targetpeer 6.6.6.6 enable#ipv4-family vpn-instance CE4 peer 112.1.1.12 as-number 600
#
ospf 1 area 0.0.0.0
#（二）RR设备
① R3配置如下
#
mpls lsr-id 3.3.3.3
mpls
#
mpls ldp
#
#
interface GigabitEthernet0/0/0ip address 23.1.1.3 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface GigabitEthernet0/0/1ip address 34.1.1.3 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface GigabitEthernet0/0/2ip address 103.1.1.3 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface LoopBack1ip address 3.3.3.3 255.255.255.255 ospf enable 1 area 0.0.0.0
#
bgp 200peer 2.2.2.2 as-number 200 peer 2.2.2.2 connect-interface LoopBack1peer 4.4.4.4 as-number 200 peer 4.4.4.4 connect-interface LoopBack1peer 6.6.6.6 as-number 300 peer 6.6.6.6 ebgp-max-hop 10 peer 6.6.6.6 connect-interface LoopBack1peer 10.10.10.10 as-number 200 peer 10.10.10.10 connect-interface LoopBack1#ipv4-family unicastundo synchronizationpeer 2.2.2.2 enablepeer 2.2.2.2 reflect-clientpeer 2.2.2.2 label-route-capabilitypeer 4.4.4.4 enablepeer 4.4.4.4 reflect-clientpeer 4.4.4.4 label-route-capabilitypeer 6.6.6.6 enablepeer 10.10.10.10 enablepeer 10.10.10.10 reflect-clientpeer 10.10.10.10 label-route-capability# ipv4-family vpnv4undo policy vpn-targetpeer 2.2.2.2 enablepeer 2.2.2.2 next-hop-invariable peer 4.4.4.4 enablepeer 6.6.6.6 enablepeer 6.6.6.6 next-hop-invariable peer 10.10.10.10 enablepeer 10.10.10.10 next-hop-invariable
#
ospf 1 area 0.0.0.0
#② R6配置如下
#
mpls lsr-id 6.6.6.6
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0ip address 56.1.1.6 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface GigabitEthernet0/0/1ip address 67.1.1.6 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface GigabitEthernet0/0/2ip address 116.1.1.6 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface LoopBack1ip address 6.6.6.6 255.255.255.255 ospf enable 1 area 0.0.0.0
#
bgp 300peer 3.3.3.3 as-number 200 peer 3.3.3.3 ebgp-max-hop 10 peer 3.3.3.3 connect-interface LoopBack1peer 5.5.5.5 as-number 300 peer 5.5.5.5 connect-interface LoopBack1peer 7.7.7.7 as-number 300 peer 7.7.7.7 connect-interface LoopBack1peer 11.11.11.11 as-number 300 peer 11.11.11.11 connect-interface LoopBack1#ipv4-family unicastundo synchronizationpeer 3.3.3.3 enablepeer 5.5.5.5 enablepeer 5.5.5.5 reflect-clientpeer 5.5.5.5 label-route-capabilitypeer 7.7.7.7 enablepeer 7.7.7.7 reflect-clientpeer 7.7.7.7 label-route-capabilitypeer 11.11.11.11 enablepeer 11.11.11.11 reflect-clientpeer 11.11.11.11 label-route-capability# ipv4-family vpnv4undo policy vpn-targetpeer 3.3.3.3 enablepeer 3.3.3.3 next-hop-invariable peer 5.5.5.5 enablepeer 7.7.7.7 enablepeer 7.7.7.7 next-hop-invariable peer 11.11.11.11 enablepeer 11.11.11.11 next-hop-invariable
#
ospf 1 area 0.0.0.0
#（三）ASBR设备
① R4配置如下：
#
mpls lsr-id 4.4.4.4
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0ip address 34.1.1.4 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface GigabitEthernet0/0/1ip address 45.1.1.4 255.255.255.0 mpls
#
#
interface LoopBack1ip address 4.4.4.4 255.255.255.255 ospf enable 1 area 0.0.0.0
#
bgp 200peer 3.3.3.3 as-number 200 peer 3.3.3.3 connect-interface LoopBack1peer 45.1.1.5 as-number 300 #ipv4-family unicastundo synchronizationnetwork 2.2.2.2 255.255.255.255 network 3.3.3.3 255.255.255.255 network 10.10.10.10 255.255.255.255 peer 3.3.3.3 enablepeer 3.3.3.3 route-policy rr exportpeer 3.3.3.3 label-route-capabilitypeer 45.1.1.5 enablepeer 45.1.1.5 route-policy asbr exportpeer 45.1.1.5 label-route-capability# ipv4-family vpnv4undo policy vpn-targetpeer 3.3.3.3 enable
#
ospf 1 area 0.0.0.0
#
route-policy asbr permit node 10 apply mpls-label
#
route-policy rr permit node 10 if-match mpls-label apply mpls-label
#② R5配置如下
mpls lsr-id 5.5.5.5
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0ip address 45.1.1.5 255.255.255.0 mpls
#
interface GigabitEthernet0/0/1ip address 56.1.1.5 255.255.255.0 ospf enable 1 area 0.0.0.0mplsmpls ldp
#
interface LoopBack1ip address 5.5.5.5 255.255.255.255 ospf enable 1 area 0.0.0.0
#
bgp 300peer 6.6.6.6 as-number 300 peer 6.6.6.6 connect-interface LoopBack1peer 45.1.1.4 as-number 200 #ipv4-family unicastundo synchronizationnetwork 6.6.6.6 255.255.255.255 network 7.7.7.7 255.255.255.255 network 11.11.11.11 255.255.255.255 peer 6.6.6.6 enablepeer 6.6.6.6 route-policy rr exportpeer 6.6.6.6 label-route-capabilitypeer 45.1.1.4 enablepeer 45.1.1.4 route-policy asbr exportpeer 45.1.1.4 label-route-capability# ipv4-family vpnv4undo policy vpn-targetpeer 6.6.6.6 enable
#
ospf 1 area 0.0.0.0
#
route-policy asbr permit node 10 apply mpls-label
#
route-policy rr permit node 10if-match mpls-label apply mpls-label
#五、实验效果
① R1到R8流量路径如下
② R9到R12流量路径如下
本文来自互联网用户投稿，文章观点仅代表作者本人，不代表本站立场，不承担相关法律责任。如若转载，请注明出处。 如若内容造成侵权/违法违规/事实不符，请点击【内容举报】进行投诉反馈！