HCMSR系列路由器MPLSLVPN跨域方案ABC功能配置.docx

HCMSR系列路由器MPLSLVPN跨域方案ABC功能配置.docx

《HCMSR系列路由器MPLSLVPN跨域方案ABC功能配置.docx》由会员分享，可在线阅读，更多相关《HCMSR系列路由器MPLSLVPN跨域方案ABC功能配置.docx（27页珍藏版）》请在冰豆网上搜索。

HCMSR系列路由器MPLSLVPN跨域方案ABC功能配置

Companynumber【1089WT-1898YT-1W8CB-9UUT-92108】

HCMSR系列路由器MPLSLVPN跨域方案ABC功能配置

MSR系列路由器MPLSL3VPN跨域方案A功能的配置

关键词：

MSR;MPLS;L3VPN;跨域;OptionA

一、组网需求：

peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下挂着vpna和vpnb的站点，peA下挂vpna和vpnb站点1，peB下挂vpna和vpnb站点2。

设备清单：

MSR系列4台

二、组网图：

三、步骤：

peA：

#

routerid3.3.3.3

#

ipvpn-instancevpna

route-distinguisher3:

1

vpn-target1:

1export-extcommunity

vpn-target1:

1import-extcommunity

#

ipvpn-instancevpnb

route-distinguisher3:

2

vpn-target2:

2export-extcommunity

vpn-target2:

2import-extcommunity

#

mplslsr-id3.3.3.3

#

mpls

#

mplsldp

#

interfaceEthernet0/0

portlink-moderoute

ipaddress1.3.0

mpls

mplsldp

#

interfaceEthernet0/1

portlink-moderoute

ipbindingvpn-instancevpna

#

interfaceEthernet1/0

portlink-moderoute

ipbindingvpn-instancevpnb

#

interfaceLoopBack0

ipaddress3.3.3

#

bgp1

undosynchronization

peer1.1.1.1as-number1

peer1.1.1.1connect-interfaceLoopBack0

#

ipv4-familyvpnv4

peer1.1.1.1enable

#

ipv4-familyvpn-instancevpna

import-routedirect

#

ipv4-familyvpn-instancevpnb

import-routedirect

#

ospf1

area0.0.0.0

network3.3.3

network1.3.0

#

asbrA：

routerid1.1.1.1

#

ipvpn-instancevpna

route-distinguisher1:

1

vpn-target1:

1export-extcommunity

vpn-target1:

1import-extcommunity

#

ipvpn-instancevpnb

route-distinguisher1:

2

vpn-target2:

2export-extcommunity

vpn-target2:

2import-extcommunity

#

mplslsr-id1.1.1.1

#

mpls

#

mplsldp

#

interfaceEthernet0/0.1//asbr间用子接口区分不同vpn流量

vlan-typedot1qvid1

ipbindingvpn-instancevpna

ipaddress1.2.1

#

interfaceEthernet0/0.2//asbr间用子接口区分不同vpn流量

vlan-typedot1qvid2

ipbindingvpn-instancevpnb

ipaddress1.2.2

#

interfaceEthernet0/1

portlink-moderoute

ipaddress1.3.0

mpls

mplsldp

#

interfaceLoopBack0

ipaddress1.1.1

#

bgp1

undosynchronization

peer3.3.3.3as-number1//asbr和pe间是标准L3VPN

peer3.3.3.3connect-interfaceLoopBack0

#

ipv4-familyvpnv4

peer3.3.3.3enable

#

ipv4-familyvpn-instancevpna//asbr间使用PE-CE模式传vpna路由

peer1.2.1.2as-number2

#

ipv4-familyvpn-instancevpnb//asbr间使用PE-CE模式传vpna路由

peer1.2.2.2as-number2

#

ospf1

area0.0.0.0

network1.1.1

network1.3.0

#

asbrB：

#

routerid2.2.2.2

#

ipvpn-instancevpna

route-distinguisher2:

1

vpn-target1:

1export-extcommunity

vpn-target1:

1import-extcommunity

#

ipvpn-instancevpnb

route-distinguisher2:

2

vpn-target2:

2export-extcommunity

vpn-target2:

2import-extcommunity

#

mplslsr-id2.2.2.2

#

mpls

#

mplsldp

#

interfaceEthernet0/0.1//asbr间用子接口区分不同vpn流量

vlan-typedot1qvid1

ipbindingvpn-instancevpna

ipaddress1.2.1

#

interfaceEthernet0/0.2//asbr间用子接口区分不同vpn流量

vlan-typedot1qvid2

ipbindingvpn-instancevpnb

ipaddress1.2.2

#

interfaceEthernet0/1

portlink-moderoute

ipaddress2.4.0

mpls

mplsldp

#

interfaceLoopBack0

ipaddress2.2.2

#

bgp2

undosynchronization

peer4.4.4.4as-number2//asbr和pe间是标准L3VPN

peer4.4.4.4connect-interfaceLoopBack0

#

ipv4-familyvpnv4

peer4.4.4.4enable

#

ipv4-familyvpn-instancevpna//asbr间使用PE-CE模式传vpna路由

peer1.2.1.1as-number1

#

ipv4-familyvpn-instancevpnb//asbr间使用PE-CE模式传vpnb路由

peer1.2.2.1as-number1

#

ospf1

area0.0.0.0

network2.2.2

network2.4.0

#

peB：

routerid4.4.4.4

#

ipvpn-instancevpna

route-distinguisher4:

1

vpn-target1:

1export-extcommunity

vpn-target1:

1import-extcommunity

#

ipvpn-instancevpnb

route-distinguisher4:

2

vpn-target2:

2export-extcommunity

vpn-target2:

2import-extcommunity

#

mplslsr-id4.4.4.4

#

mpls

#

mplsldp

#

interfaceEthernet0/0

portlink-moderoute

ipaddress2.4.0

mpls

mplsldp

#

interfaceEthernet0/1

portlink-moderoute

ipbindingvpn-instancevpna

#

interfaceEthernet1/0

portlink-moderoute

ipbindingvpn-instancevpnb

#

interfaceLoopBack0

ipaddress4.4.4

#

bgp2

undosynchronization

peer2.2.2.2as-number2

peer2.2.2.2connect-interfaceLoopBack0

#

ipv4-familyvpnv4

peer2.2.2.2enable

#

ipv4-familyvpn-instancevpna

import-routedirect

#

ipv4-familyvpn-instancevpnb

import-routedirect

#

ospf1

area0.0.0.0

network4.4.4

network2.4.0

#

四、关键点：

1.asbr间需要用不同链路隔离不同vpn流量，可以使用不同物理链路或逻辑链路如子接口或E1/T1通道；

2.asbr间互相把对方认为CE，所以要在bgp的vpn实例视图下。

MSR系列路由器MPLSL3VPN跨域方案B功能的配置

关键词：

MSR;MPLS;L3VPN;跨域;OptionB

一、组网需求：

peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下挂着vpna和vpnb的站点，peA下挂vpna和vpnb站点1，peB下挂vpna和vpnb站点2。

设备清单：

MSR系列4台

二、组网图：

三、步骤：

适用设备和版本：

MSR系列、Version5.20,Beta1105后所有版本。

peA：

#

routerid3.3.3.3

#

ipvpn-instancevpna

route-distinguisher3:

1

vpn-target1:

1export-extcommunity

vpn-target1:

1import-extcommunity

#

ipvpn-instancevpnb

route-distinguisher3:

2

vpn-target2:

2export-extcommunity

vpn-target2:

2import-extcommunity

#

mplslsr-id3.3.3.3

#

mpls

#

mplsldp

#

interfaceEthernet0/0

portlink-moderoute

ipaddress1.3.0

mpls

mplsldp

#

interfaceEthernet0/1

portlink-moderoute

ipbindingvpn-instancevpna

#

interfaceEthernet1/0

portlink-moderoute

ipbindingvpn-instancevpnb

#

interfaceLoopBack0

ipaddress3.3.3

#

bgp1

undosynchronization

peer1.1.1.1as-number1

peer1.1.1.1connect-interfaceLoopBack0

#

ipv4-familyvpnv4

peer1.1.1.1enable

#

ipv4-familyvpn-instancevpna

import-routedirect

#

ipv4-familyvpn-instancevpnb

import-routedirect

#

ospf1

area0.0.0.0

network3.3.3

network1.3.0

#

asbrA：

routerid1.1.1.1

#

mplslsr-id1.1.1.1

#

mpls

#

mplsldp

#

interfaceEthernet0/0

portlink-moderoute

ipaddress1.2.0

mpls//使能MPLS流量转发能力

#

interfaceEthernet0/1

portlink-moderoute

ipaddress1.3.0

mpls

mplsldp

#

interfaceLoopBack0

ipaddress1.1.1

#

bgp1

undosynchronization

peer1.2.0.2as-number2//建立EBGP连接

peer3.3.3.3as-number1

peer3.3.3.3connect-interfaceLoopBack0

#

ipv4-familyvpnv4

undopolicyvpn-target//取消vpn-target策略

peer3.3.3.3enable

peer1.2.0.2enable//向EBGP邻居发vpn所有vpn路由

#

ospf1

area0.0.0.0

network1.1.1

network1.3.0

#

asbrB：

#

routerid2.2.2.2

#

mplslsr-id2.2.2.2

#

mpls

#

mplsldp

#

interfaceEthernet0/0

portlink-moderoute

ipaddress1.2.0

mpls//使能MPLS流量转发能力

#

interfaceEthernet0/1

portlink-moderoute

ipaddress2.4.0

mpls

mplsldp

#

interfaceLoopBack0

ipaddress2.2.2

#

bgp2

undosynchronization

peer1.2.0.1as-number1//建立EBGP连接

peer4.4.4.4as-number2

peer4.4.4.4connect-interfaceLoopBack0

#

ipv4-familyvpnv4

undopolicyvpn-target//取消vpn-target策略

peer4.4.4.4enable

peer1.2.0.1enable//向EBGP邻居发vpn所有vpn路由

#

ospf1

area0.0.0.0

network2.2.2

network2.4.0

#

peB：

routerid4.4.4.4

#

ipvpn-instancevpna

route-distinguisher4:

1

vpn-target1:

1export-extcommunity

vpn-target1:

1import-extcommunity

#

ipvpn-instancevpnb

route-distinguisher4:

2

vpn-target2:

2export-extcommunity

vpn-target2:

2import-extcommunity

#

mplslsr-id4.4.4.4

#

mpls

#

mplsldp

#

interfaceEthernet0/0

portlink-moderoute

ipaddress2.4.0

mpls

mplsldp

#

interfaceEthernet0/1

portlink-moderoute

ipbindingvpn-instancevpna

#

interfaceEthernet1/0

portlink-moderoute

ipbindingvpn-instancevpnb

#

interfaceLoopBack0

ipaddress4.4.4

#

bgp2

undosynchronization

peer2.2.2.2as-number2

peer2.2.2.2connect-interfaceLoopBack0

#

ipv4-familyvpnv4

peer2.2.2.2enable

#

ipv4-familyvpn-instancevpna

import-routedirect

#

ipv4-familyvpn-instancevpnb

import-routedirect

#

ospf1

area0.0.0.0

network4.4.4

network2.4.0

#

四、关键点：

1.asbr间的直连链路必须要使能MPLS转发能力；

2.asbr间要建立MP-EBGP连接，类似于普通L3VPN的MP-IBGP连接；

3.asbr可以不用vpn实例，需要在bgp的vpnv4视图下取消vpn-target策略。

MSR系列路由器MPLSL3VPN跨域方案C功能的配置

关键词：

MSR;MPLS;L3VPN;跨域;OptionC

一、组网需求：

peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下挂着vpna和vpnb的站点，peA下挂vpna和vpnb站点1，peB下挂vpna和vpnb站点2。

设备清单：

MSR系列4台

二、组网图：

三、步骤：

适用设备和版本：

MSR系列、Version5.20,Beta1105后所有版本。

peA：

#

routerid3.3.3.3

#

ipvpn-instancevpna

route-distinguisher3:

1

vpn-target1:

1export-extcommunity

vpn-target1:

1import-extcommunity

#

ipvpn-instancevpnb

route-distinguisher3:

2

vpn-target2:

2export-extcommunity

vpn-target2:

2import-extcommunity

#

mplslsr-id3.3.3.3

#

mpls

#

mplsldp

#

interfaceEthernet0/0

portlink-moderoute

ipaddress1.3.0

mpls

mplsldp

#

interfaceEthernet0/1

portlink-moderoute

ipbindingvpn-instancevpna

#

interfaceEthernet1/0

portlink-moderoute

ipbindingvpn-instancevpnb

#

interfaceLoopBack0

ipaddress3.3.3

#

bgp1

undosynchronization

peer4.4.4.4as-number2//与peB建立EBGP连接

peer1.1.1.1as-number1

peer4.4.4.4ebgp-max-hop64//支持多跳EBGP连接

peer4.4.4.4connect-interfaceLoopBack0//使用环回口连接

peer1.1.1.1label-route-capability//使能标签路由能力

peer1.1.1.1connect-interfaceLoopBack0

#

ipv4-familyvpnv4

peer4.4.4.4enable//与peB交换vpn路由

#

ipv4-familyvpn-instancevpna

import-routedirect

#

ipv4-familyvpn-instancevpnb

import-routedirect

#

ospf1

area0.0.0.0

network3.3.3

network1.3.0

#

asbrA：

routerid1.1.1.1

#

mplslsr-id1.1.1.1

#

mpls

#

mplsldp

#

aclnumber2000//定义ACL用于路由策略

rule0permitsource3.3.3.30

rule5deny

#

interfaceEthernet0/0

portlink-moderoute

ipaddress1.2.0

mpls//使能MPLS流量转发能力

#

interfaceEthernet0/1

portlink-moderoute

ipaddress1.3.0

mpls

mplsldp

#

interfaceLoopBack0

ipaddress1.1.1

#

bgp1

network3.3.3引入peA路由

undosynchronization

peer1.2.0.2as-number2

peer3.3.3.3as-number1

peer1.2.0.2route-policyasbrBexport//应用路由策略

peer1.2.0.2label-route-capability//使能标签路由能力

peer3.3.3.3route-policypeAexport//应用路由策略

peer3.3.3.3label-route-capability//使能标签路由能力

peer3.3.3.3connect-interfaceLoopBack0

#

ospf1

area0.0.0.0

network1.1.1

network1.3.0

#

route-policyasbrBpermitnode0//对asbrB的路由策略

if-matchacl2000//匹配条件

applympls-label//分标签操作

route-policypeApermitnode0//对peA的路由策略

if-