Mpls vpn跨域optionB有两种方式.docx
《Mpls vpn跨域optionB有两种方式.docx》由会员分享,可在线阅读,更多相关《Mpls vpn跨域optionB有两种方式.docx(13页珍藏版)》请在冰豆网上搜索。
Mplsvpn跨域optionB有两种方式
Mplsvpn跨域optionB有两种方式:
第一种方式为ASBR之间通过单跳MP-EBGP,ASBR之间必须直联
第二种方式为ASBR之间通过多跳MP-EBGP,ASBR之间必须采用tunnel方式,本文只介绍这种方式。
Mplsvpnovergre!
对于mplsvpnovergre的这种方式,有两种方法可以使VPNv4的下一跳地址在接收路由更新的AS中可达:
(1)将ASBR之间的tunnel互联地址重分布到IGP;
(2)ASBR在向PE(或RR)传递从另一个AS学到的VPNv4的路由时,下一跳为自已,也就是next-hop-self
实验拓扑图如下:
方法一:
默认情况下,R6从AS1学到VPNv4的路由再通告给R10(RR)时,下一跳地址为R4的F0/0的地址,但是R10学到VPNv4路由的下一跳地址不可达,所以在R4和R6上分别将tunnel的互联地址重新分发到IGP中,这样R10才通将VPNv4的路由传递给R9。
在标签交换方面,下一跳地址不改变,就不会重新分配标签。
如R9学到的VPNv4的路由分配out标签是由R4分配的。
R9#showipcefvrftest11.11.11.11
11.11.11.11/32,version34,epoch0,cachedadjacency192.168.2.9
0packets,0bytes
taginformationset,allrewritesowned
localtag:
VPNroutehead
fasttagrewritewithFa0/0,192.168.2.9,tagsimposed{840427}
via192.168.0.5,0dependencies,recursive
nexthop192.168.2.9,FastEthernet0/0via192.168.0.5/32(Default)
validcachedadjacency
tagrewritewithFa0/0,192.168.2.9,tagsimposed{840427}
R11#traceroute12.12.12.12
Typeescapesequencetoabort.
Tracingtherouteto12.12.12.12
110.0.0.160msec140msec168msec
2192.168.1.2[MPLS:
Labels232/643Exp0]1008msec1028msec936msec
3192.168.1.6[MPLS:
Labels332/643Exp0]840msec1004msec816msec
4192.168.1.10[MPLS:
Labels426/643Exp0]888msec836msec768msec
5192.168.0.6[MPLS:
Label643Exp0]768msec812msec1176msec//只有单层标签
6192.168.2.2[MPLS:
Labels717/939Exp0]888msec932msec936msec
7192.168.2.6[MPLS:
Labels813/939Exp0]792msec740msec816msec
810.0.0.5[AS20][MPLS:
Label939Exp0]796msec688msec984msec
910.0.0.6[AS20]1032msec884msec984msec
R11#
R4和R6上只保存本AS内的VPNv4的路由。
R4#showmplsforwarding-table
LocalOutgoingPrefixBytestagOutgoingNextHop
tagtagorVCorTunnelIdswitchedinterface
416Untagged6.6.6.6/320Fa0/0192.168.0.2
4171101:
1:
10.0.0.0/30610Fa1/1192.168.1.9
418Poptag192.168.1.16/300Fa1/1192.168.1.9
419Poptag192.168.1.4/300Fa1/1192.168.1.9
420303192.168.1.12/300Fa1/1192.168.1.9
421300192.168.1.0/300Fa1/1192.168.1.9
4223011.1.1.1/3215844Fa1/1192.168.1.9
4233022.2.2.2/320Fa1/1192.168.1.9
424Poptag3.3.3.3/320Fa1/1192.168.1.9
4253285.5.5.5/323573Fa1/1192.168.1.9
426Poptag192.168.0.6/32640Tu0point2point
4271381:
1:
11.11.11.11/32\
5068Fa1/1192.168.1.9
4281371:
1:
192.168.10.0/24\
0Fa1/1192.168.1.9
R6#showmplsforwarding-table
LocalOutgoingPrefixBytestagOutgoingNextHop
tagtagorVCorTunnelIdswitchedinterface
608Untagged4.4.4.4/320Fa0/0192.168.0.1
609Poptag192.168.0.1/320Fa0/0192.168.0.1
610Poptag192.168.2.12/300Fa1/0192.168.2.2
611Poptag192.168.2.4/300Fa1/0192.168.2.2
612714192.168.2.16/300Fa1/0192.168.2.2
613716192.168.2.8/300Fa1/0192.168.2.2
614Poptag7.7.7.7/320Fa1/0192.168.2.2
6157158.8.8.8/320Fa1/0192.168.2.2
6407179.9.9.9/320Fa1/0192.168.2.2
64171310.10.10.10/321216Fa1/0192.168.2.2
642Poptag192.168.0.5/32640Tu0point2point
6439391:
1:
12.12.12.12/32\
610Fa1/0192.168.2.2
6449381:
1:
192.168.20.0/24\
0Fa1/0192.168.2.2
R4的配置:
hostnameR4
!
boot-start-marker
boot-end-marker
!
!
ipsubnet-zero
!
!
ipcef
noipdomain-lookup
mplslabelrange400499
mplslabelprotocolldp
!
!
!
interfaceLoopback0
ipaddress4.4.4.4255.255.255.255
noipdirected-broadcast
!
interfaceTunnel0
ipaddress192.168.0.5255.255.255.252
noipdirected-broadcast
mplsbgpforwarding
tunnelsourceLoopback0
tunneldestination6.6.6.6
!
interfaceFastEthernet0/0
ipaddress192.168.0.1255.255.255.252
noipdirected-broadcast
mplsbgpforwarding
!
interfaceFastEthernet1/0
noipaddress
noipdirected-broadcast
shutdown
duplexhalf
speedauto
!
interfaceFastEthernet1/1
ipaddress192.168.1.10255.255.255.252
noipdirected-broadcast
duplexhalf
speedauto
tag-switchingip
!
routerospf1
log-adjacency-changes
redistributeconnectedsubnets
network4.4.4.40.0.0.0area0
network192.168.1.80.0.0.3area0
!
routerbgp1
nobgpdefaultroute-targetfilter
bgplog-neighbor-changes
neighbor5.5.5.5remote-as1
neighbor5.5.5.5update-sourceLoopback0
neighbor192.168.0.6remote-as2
!
address-familyipv4
neighbor5.5.5.5activate
noneighbor192.168.0.6activate
noauto-summary
nosynchronization
exit-address-family
!
address-familyvpnv4
neighbor5.5.5.5activate
neighbor5.5.5.5send-communityboth
neighbor192.168.0.6activate
neighbor192.168.0.6send-communityboth
exit-address-family
!
ipclassless
iproute6.6.6.6255.255.255.255192.168.0.2
!
!
!
control-plane
!
!
linecon0
exec-timeout00
stopbits1
lineaux0
stopbits1
linevty04
login
!
nocnsaaaenable
R6的配置:
hostnameR6
!
boot-start-marker
boot-end-marker
!
!
ipsubnet-zero
!
!
ipcef
noipdomain-lookup
mplslabelrange600699
mplslabelprotocolldp
!
!
!
interfaceLoopback0
ipaddress6.6.6.6255.255.255.255
noipdirected-broadcast
!
interfaceTunnel0
ipaddress192.168.0.6255.255.255.252
noipdirected-broadcast
mplsbgpforwarding
tunnelsourceLoopback0
tunneldestination4.4.4.4
!
interfaceFastEthernet0/0
ipaddress192.168.0.2255.255.255.252
noipdirected-broadcast
mplsbgpforwarding
!
interfaceFastEthernet1/0
ipaddress192.168.2.1255.255.255.252
noipdirected-broadcast
duplexhalf
speedauto
tag-switchingip
!
interfaceFastEthernet1/1
noipaddress
noipdirected-broadcast
shutdown
duplexhalf
speedauto
!
routerodr
!
routerospf1
log-adjacency-changes
redistributeconnectedsubnets
network6.6.6.60.0.0.0area0
network192.168.2.00.0.0.3area0
!
routerbgp2
nosynchronization
nobgpdefaultroute-targetfilter
bgplog-neighbor-changes
neighbor10.10.10.10remote-as2
neighbor10.10.10.10update-sourceLoopback0
neighbor192.168.0.5remote-as1
noauto-summary
!
address-familyvpnv4
neighbor10.10.10.10activate
neighbor10.10.10.10send-communityboth
neighbor192.168.0.5activate
neighbor192.168.0.5send-communityboth
exit-address-family
!
ipclassless
iproute4.4.4.4255.255.255.255192.168.0.1
!
!
!
tag-switchingtdprouter-idLoopback0
control-plane
!
!
linecon0
exec-timeout00
stopbits1
lineaux0
stopbits1
linevty04
login
!
nocnsaaaenable
end
第二种方法:
采用next-host-self
这时ASBR上同时保存另一个AS的VPN路由,标签也由ASBR分配
R9#showipcefvrftest11.11.11.11
11.11.11.11/32,version37,epoch0,cachedadjacency192.168.2.9
0packets,0bytes
taginformationset,allrewritesowned
localtag:
VPNroutehead
fasttagrewritewithFa0/0,192.168.2.9,tagsimposed{810645}
via6.6.6.6,0dependencies,recursive
nexthop192.168.2.9,FastEthernet0/0via6.6.6.6/32(Default)
validcachedadjacency
tagrewritewithFa0/0,192.168.2.9,tagsimposed{810645}
R6#showmplsforwarding-table
LocalOutgoingPrefixBytestagOutgoingNextHop
tagtagorVCorTunnelIdswitchedinterface
608Untagged4.4.4.4/320Fa0/0192.168.0.1
609Poptag192.168.0.1/320Fa0/0192.168.0.1
610Poptag192.168.2.12/300Fa1/0192.168.2.2
611Poptag192.168.2.4/300Fa1/0192.168.2.2
612714192.168.2.16/300Fa1/0192.168.2.2
613716192.168.2.8/300Fa1/0192.168.2.2
614Poptag7.7.7.7/320Fa1/0192.168.2.2
6157158.8.8.8/320Fa1/0192.168.2.2
6407179.9.9.9/320Fa1/0192.168.2.2
64171310.10.10.10/320Fa1/0192.168.2.2
642Poptag192.168.0.5/325068Tu0point2point
6439391:
1:
12.12.12.12/32\
2956Fa1/0192.168.2.2
6449381:
1:
192.168.20.0/24\
0Fa1/0192.168.2.2
6454271:
1:
11.11.11.11/32\
0Tu0point2point
6464281:
1:
192.168.10.0/24\
0Tu0point2point
6474171:
1:
10.0.0.0/300Tu0point2point
R4#showmplsforwarding-table
LocalOutgoingPrefixBytestagOutgoingNextHop
tagtagorVCorTunnelIdswitchedinterface
416Untagged6.6.6.6/320Fa0/0192.168.0.2
4171101:
1:
10.0.0.0/304894Fa1/1192.168.1.9
418Poptag192.168.1.16/300Fa1/1192.168.1.9
419Poptag192.168.1.4/300Fa1/1192.168.1.9
420303192.168.1.12/300Fa1/1192.168.1.9
421300192.168.1.0/300Fa1/1192.168.1.9
4223011.1.1.1/3215844Fa1/1192.168.1.9
4233022.2.2.2/320Fa1/1192.168.1.9
424Poptag3.3.3.3/320Fa1/1192.168.1.9
4253285.5.5.5/323573Fa1/1192.168.1.9
426Poptag192.168.0.6/322680Tu0point2point
4271381:
1:
11.11.11.11/32\
5068Fa1/1192.168.1.9
4281371:
1:
192.168.10.0/24\
0Fa1/1192.168.1.9
4296441:
1:
192.168.20.0/24\
0Tu0point2point
4486431:
1:
12.12.12.12/32\
0Tu0point2point
4496091:
1:
10.0.0.4/300Tu0point2point
R11#traceroute12.12.12.12
Typeescapesequencetoabort.
Tracingtherouteto12.12.12.12
110.0.0.1112msec88msec100msec
2192.168.1.2[MPLS:
Labels205/448Exp0]912msec884msec936msec
3192.168.1.6[MPLS:
Labels329/448Exp0]984msec1008msec884msec
4192.168.1.10[MPLS:
Label448Exp0]936msec812msec888msec
5192.168.0.6[MPLS:
Label643Exp0]840msec764msec860msec//标签由448变成643
6192.168.2.2[MPLS:
Labels717/939Exp0]912msec764msec1080msec
7192.168.2.6[MPLS:
Labels813/939Exp0]1008msec884msec864msec
810.0.0.5[AS20][MPLS:
Label939Exp0]744msec764msec792msec
910.0.0.6[AS20]864msec812msec888msec
R4的配置
routerospf1
log-adjacency-changes
network4.4.4.40.0.0.0area0
network192.168.1.80.0.0.3area0
!
routerbgp1
nobgpdefaultroute-targetfilter
bgplog-neighbor-changes
neighbor5.5.5.5remote-as1
neighbor5.5.5.5update-sourceLoopback0
neighbor192.168.0.6remote-as2
!
address-familyipv4
neighbor5.5.5.5activate
noneighbor192.168.0.6activate
noauto-summary
nosynchronization
exit-address-f