cisco路由器mpls vpn配置思路.docx

cisco路由器mpls vpn配置思路.docx

《cisco路由器mpls vpn配置思路.docx》由会员分享，可在线阅读，更多相关《cisco路由器mpls vpn配置思路.docx（16页珍藏版）》请在冰豆网上搜索。

cisco路由器mplsvpn配置思路

一、网络环境

由5台CISCO7204组成的网络,一台为P路由器,两台PE路由器,两台CE路由器;

二、网络描述

在P和两台PE路由器这间通过OSPF动态路由协议完成MPLS网络的建立，两台PE路由器这间启用BGP路由协议，在PE路由器上向所属的CE路由器指VPN路由，在CE路由器中向PE路由器配置静态路由。

配置思路：

1、在P和两台PE路由器这间通过OSPF动态路由协议，在P和PE路由器两两互连的端口上启用MPLS，两台PE之间的路为备份路由，这属公网路由。

2、两台PE路由器这间启用BGP路由协议，这使得属于VPN的IP地址能在两个网络（两台CE所属的网络）互相发布，这属私网（VPN）路由。

3、在PE路由器上向所属的CE路由器指VPN路由，这打通了两个网络（两台CE所属的网络）之间的路由。

三、网络拓扑图

四、P路由器配置

p#SHOWRUN

Buildingconfiguration...

Currentconfiguration:

1172bytes

!

version12.3

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnamep

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

ipsubnet-zero

!

!

!

ipcef

ipauditpomax-events100

!

!

interfaceLoopback0

ipaddress202.98.4.3255.255.255.255

!

interfaceFastEthernet0/0

descriptionto_r2

ipaddress10.1.1.10255.255.255.252

ipospfcost20

duplexfull

tag-switchingmtu1508

tag-switchingip

!

interfaceFastEthernet1/0

descriptionto_r3

ipaddress10.1.1.6255.255.255.252

ipospfcost20

duplexfull

tag-switchingmtu1508

tag-switchingip

!

interfaceFastEthernet2/0

noipaddress

shutdown

duplexhalf

!

interfaceFastEthernet3/0

noipaddress

shutdown

duplexhalf

!

routerospf100

log-adjacency-changes

redistributeconnectedsubnets

redistributestaticsubnets

network10.1.1.60.0.0.0area0

network10.1.1.100.0.0.0area0

!

ipclassless

noiphttpserver

noiphttpsecure-server

!

gatekeeper

shutdown

!

!

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

login

!

!

end

p#

五、PE1路由器配置

pe1#showrun

Buildingconfiguration...

Currentconfiguration:

1813bytes

!

version12.3

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnamepe1

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

ipsubnet-zero

!

!

!

ipvrfvpna

rd1:

100

route-targetexport200:

1

route-targetimport200:

1

!

ipcef

ipauditpomax-events100

!

!

interfaceLoopback0

ipaddress202.98.4.1255.255.255.255

!

interfaceFastEthernet0/0

descriptionto_r5

ipvrfforwardingvpna

ipaddress172.16.1.1255.255.255.252

duplexfull

tag-switchingip

!

interfaceFastEthernet1/0

descriptionto_r1

ipaddress10.1.1.5255.255.255.252

ipospfcost20

duplexfull

tag-switchingmtu1508

tag-switchingip

!

interfaceFastEthernet2/0

ipaddress10.1.1.1255.255.255.252

ipospfcost100

duplexfull

tag-switchingmtu1508

tag-switchingip

!

interfaceFastEthernet3/0

noipaddress

shutdown

duplexhalf

!

routerospf100

log-adjacency-changes

redistributeconnectedmetric-type1subnets

network10.1.1.00.0.0.255area0

network202.98.4.00.0.0.255area0

!

routerbgp100

nobgpdefaultipv4-unicast

bgplog-neighbor-changes

neighbor202.98.4.2remote-as100

neighbor202.98.4.2update-sourceLoopback0

neighbor202.98.4.2version4

!

address-familyvpnv4

neighbor202.98.4.2activate

neighbor202.98.4.2send-communityextended

exit-address-family

!

address-familyipv4vrfvpna

redistributeconnected

redistributestatic

noauto-summary

nosynchronization

exit-address-family

!

ipclassless

iproutevrfvpna192.168.3.0255.255.255.0172.16.1.2

noiphttpserver

noiphttpsecure-server

!

ipospfname-lookup

!

!

gatekeeper

shutdown

!

!

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

login

!

!

end

pe1#

六、PE2路由器配置

pe2#showrun

Buildingconfiguration...

Currentconfiguration:

1725bytes

!

version12.3

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnamepe2

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

ipsubnet-zero

!

!

!

ipvrfvpna

rd1:

100

route-targetexport200:

1

route-targetimport200:

1

!

ipcef

ipauditpomax-events100

!

!

interfaceLoopback0

ipaddress202.98.4.2255.255.255.255

!

interfaceFastEthernet0/0

descriptionto_r1

ipaddress10.1.1.9255.255.255.252

ipospfcost20

duplexfull

tag-switchingip

!

interfaceFastEthernet1/0

ipvrfforwardingvpna

ipaddress172.16.2.1255.255.255.0

duplexfull

tag-switchingip

!

interfaceFastEthernet2/0

ipaddress10.1.1.2255.255.255.252

ipospfcost100

duplexfull

tag-switchingip

!

interfaceFastEthernet3/0

noipaddress

shutdown

duplexhalf

!

routerospf100

log-adjacency-changes

redistributeconnectedmetric1subnets

redistributestaticmetric-type1subnets

network10.1.1.00.0.0.255area0

!

routerbgp100

nobgpdefaultipv4-unicast

bgplog-neighbor-changes

neighbor202.98.4.1remote-as100

neighbor202.98.4.1update-sourceLoopback0

neighbor202.98.4.1version4

!

address-familyvpnv4