MPLS综合实验报告.docx

MPLS综合实验报告.docx

《MPLS综合实验报告.docx》由会员分享，可在线阅读，更多相关《MPLS综合实验报告.docx（9页珍藏版）》请在冰豆网上搜索。

MPLS综合实验报告

[RT1]discu

sysnameRT1

ikelocal-namer1

aclnumber2000

rule0denysource192.168.3.10

rule5permit

aclnumber3000

rule0permitipsource192.168.0.10destination192.168.1.10

aclnumber3001

rule0permitipsource192.168.0.10destination192.168.2.10

#

ikepeerr14

exchange-modeaggressive

pre-shared-keysimple123

id-typename

remote-namer4

#

ikepeerr15

exchange-modeaggressive

pre-shared-keysimple123

id-typename

remote-namer5

ipsecproposal1

espauthentication-algorithmsha1

espencryption-algorithmaes192

ipsecpolicy-template110

securityacl3000

ike-peerr14

proposal1

#

ipsecpolicy-template120

securityacl3001

ike-peerr15

proposal1

#

ipsecpolicya10isakmptemplate1

interfaceLoopBack0

ipaddress192.168.0.1255.255.255.255

interfaceGigabitEthernet0/0/0

portlink-moderoute

ipaddress12.12.12.1255.255.255.0

ospfauthentication-modemd51cipher7-CZB#/YX]KQ=^Q`MAF4<1!

!

ipsecpolicya

interfaceTunnel0

ipaddress30.1.1.1255.255.255.0

source12.12.12.1

destination34.34.34.4

#

interfaceTunnel1

ipaddress40.1.1.1255.255.255.0

source12.12.12.1

destination35.35.35.5

#

ospf1

filter-policy2000import

area0.0.0.0

authentication-modemd5

network192.168.0.10.0.0.0

network12.12.12.00.0.0.255

discu

sysnameRT2

mplslsr-id2.2.2.2

ipvpn-instance1

route-distinguisher100:

1

vpn-target100:

2export-extcommunity

vpn-target100:

1import-extcommunity

mpls

mplsldp

isis1

network-entity10.0000.0000.0002.00

interfaceLoopBack0

ipaddress2.2.2.2255.255.255.255

isisenable1

interfaceGigabitEthernet0/0/0

portlink-moderoute

ipbindingvpn-instance1

ipaddress12.12.12.2255.255.255.0

ospfauthentication-modemd51cipher7-CZB#/YX]KQ=^Q`MAF4<1!

!

mpls

#

interfaceGigabitEthernet0/0/1

portlink-moderoute

ipaddress23.23.23.2255.255.255.0

isisenable1

mpls

mplsldp

#

bgp100

undosynchronization

peer3.3.3.3as-number100

peer3.3.3.3next-hop-local

peer3.3.3.3connect-interfaceLoopBack0

#

ipv4-familyvpn-instance1

import-routedirect

import-routeospf1

#

ipv4-familyvpnv4

peer3.3.3.3enable

#

ospf1vpn-instance1

import-routebgp

area0.0.0.0

authentication-modemd5

network12.12.12.00.0.0.255

discu

sysnameRT3

mplslsr-id3.3.3.3

ipvpn-instance1

route-distinguisher100:

1

vpn-target100:

1export-extcommunity

vpn-target100:

2import-extcommunity

ipvpn-instance2

route-distinguisher200:

1

vpn-target100:

1export-extcommunity

vpn-target100:

2import-extcommunity

mpls

mplsldp

#

isis1

network-entity10.0000.0000.0003.00

interfaceLoopBack0

ipaddress3.3.3.3255.255.255.255

isisenable1

interfaceGigabitEthernet0/0/1

portlink-moderoute

ipaddress23.23.23.3255.255.255.0

isisenable1

mpls

mplsldp

interfaceGigabitEthernet0/0/2

portlink-moderoute

ipbindingvpn-instance1

ipaddress34.34.34.3255.255.255.0

ospfauthentication-modemd51cipher7-CZB#/YX]KQ=^Q`MAF4<1!

!

Mpls

interfaceGigabitEthernet0/0/3

portlink-moderoute

ipbindingvpn-instance2

ipaddress35.35.35.3255.255.255.0

ospfauthentication-modemd51cipher7-CZB#/YX]KQ=^Q`MAF4<1!

!

mpls

#

bgp100

undosynchronization

peer2.2.2.2as-number100

peer2.2.2.2next-hop-local

peer2.2.2.2connect-interfaceLoopBack0

#

ipv4-familyvpn-instance1

import-routedirect

import-routeospf1

#

ipv4-familyvpn-instance2

import-routedirect

import-routeospf2

#

ipv4-familyvpnv4

peer2.2.2.2enable

#

ospf1vpn-instance1

import-routeisis1

import-routebgp

area0.0.0.0

authentication-modemd5

network34.34.34.00.0.0.255

#

ospf2vpn-instance2

import-routeisis1

import-routebgp

area0.0.0.0

authentication-modemd5

network35.35.35.00.0.0.255

discu

sysnameRT4

ikelocal-namer4

aclnumber3000

rule0permitipsource192.168.1.10destination192.168.0.10

#

ikepeerr41

exchange-modeaggressive

pre-shared-keysimple123

id-typename

remote-namer1

remote-address12.12.12.1

#

ipsecproposal1

espauthentication-algorithmsha1

espencryption-algorithmaes192

#

ipsecpolicy110isakmp

securityacl3000

ike-peerr41

proposal1

interfaceLoopBack0

ipaddress192.168.1.1255.255.255.255

interfaceGigabitEthernet0/0/2

portlink-moderoute

ipaddress34.34.34.4255.255.255.0

ospfauthentication-modemd51cipher7-CZB#/YX]KQ=^Q`MAF4<1!

!

ipsecpolicy1

interfaceTunnel0

ipaddress30.1.1.2255.255.255.0

source34.34.34.4

destination12.12.12.1

#

ospf1

area0.0.0.0

authentication-modemd5

network192.168.1.10.0.0.0

network34.34.34.00.0.0.255

[RT5]discu

sysnameRT5

ikelocal-namer5

aclnumber3000

rule0permitipsource192.168.2.10destination192.168.0.10

ikepeerr51

exchange-modeaggressive

pre-shared-keysimple123

id-typename

remote-namer1

remote-address12.12.12.1

#

ipsecproposal1

espauthentication-algorithmsha1

espencryption-algorithmaes192

#

ipsecpolicy110isakmp

securityacl3000

ike-peerr51

proposal1

interfaceLoopBack0

ipaddress192.168.2.1255.255.255.255

#

interfaceLoopBack1

ipaddress192.168.3.1255.255.255.255

interfaceGigabitEthernet0/0/3

portlink-moderoute

ipaddress35.35.35.5255.255.255.0

ospfauthentication-modemd51cipher7-CZB#/YX]KQ=^Q`MAF4<1!

!

ipsecpolicy1

#

interfaceTunnel0

ipaddress40.1.1.2255.255.255.0

source35.35.35.5

destination12.12.12.1

#

ospf1

area0.0.0.0

authentication-modemd5

network192.168.3.10.0.0.0

network192.168.2.10.0.0.0

network35.35.35.00.0.0.255