juniper MPLS VPN 实验.docx

1、juniper MPLS VPN 实验工作太忙的关系，有一段时间没搞JUNIPER实验。近期由于要整理一些实验文档的关系，趁假期的时间又重新做了一遍juniper的MPLS VPN的实验。实验拓扑：实验说明：实验是用OLIVE的逻辑路由器来实现的。模拟7台路由器，r1,r5,r6,r7分别模拟CE1,CE2,CE3,CE4，中间三台路由器模拟ISP的核心网络。配置：show configuration |no-more # Last commit: 2010-02-14 22:57:09 UTC by linversion 8.5R1.14;system host-name MPLS-VPN;

2、 domain-name ; authentication-order radius password ; root-authentication encrypted-password $1$7ZQaCQps$EqPR2y83tbGr6XRDo/WMD/; # SECRET-DATA radius-server 192.168.1.129 port 1812; secret $9$k.Tzn/CuBI6/vWX7Vb; # SECRET-DATA login class ops idle-timeout 5; permissions network; allow-commands show i

3、nterface; deny-commands traceroute|telnet|ssh; user hmily uid 2008; class super-user; authentication encrypted-password $1$UUI.FWPe$bSYWxLRreVza1jc9P4LGd/; # SECRET-DATA user lin uid 2000; class super-user; authentication encrypted-password $1$IbVuXUgf$mDrmX.SRr3mjpFOMfqgYo/; # SECRET-DATA user ops

4、uid 2001; class ops; authentication encrypted-password $1$W31PgUWw$d667i1B0agPAzbvO4hiFd1; # SECRET-DATA services ftp; ssh; telnet; web-management http; syslog user * any emergency; file messages any notice; file interactive-commands interactive-commands any; file auth authorization info; archive si

5、ze 5m; files 5; ntp authentication-key 101 type md5 value $9$H.fz1IcylM; # SECRET-DATA server 10.0.200.2 key 101; # SECRET-DATA trusted-key 101; logical-routers r1 interfaces em1 unit 12 vlan-id 12; family inet address 133.10.12.1/24; lo0 unit 1 family inet address 1.1.1.1/32; protocols bgp group to

6、-pe type external; export direct; neighbor 133.10.12.2 peer-as 200; policy-options policy-statement direct term 1 from protocol direct; then accept; routing-options router-id 1.1.1.1; autonomous-system 100; r2 interfaces em1 unit 61 vlan-id 61; family inet address 133.10.61.1/24; em2 unit 12 vlan-id

7、 12; family inet address 133.10.12.2/24; family mpls; unit 23 vlan-id 23; family inet address 133.10.23.2/24; family iso; family mpls; lo0 unit 2 family inet address 2.2.2.2/32; family iso address 47.0000.0000.0000.0002.00; protocols mpls interface em2.12; interface em2.23; interface lo0.2; bgp grou

8、p ibgp type internal; local-address 2.2.2.2; family inet-vpn unicast; neighbor 4.4.4.4 peer-as 65000; isis interface em2.23; interface lo0.2; ldp interface em2.23; interface lo0.2; routing-instances vpn1 instance-type vrf; interface em2.12; route-distinguisher 65000:1; vrf-target target:65000:1; vrf

9、-table-label; routing-options router-id 2.2.2.2; autonomous-system 200; protocols bgp group to-ce type external; neighbor 133.10.12.1 peer-as 100; vpn2 instance-type vrf; interface em1.61; route-distinguisher 65000:2; vrf-target target:65000:2; vrf-table-label; routing-options static route 6.6.6.6/3

10、2 next-hop 133.10.61.2; routing-options router-id 2.2.2.2; autonomous-system 65000; r3 interfaces em1 unit 23 vlan-id 23; family inet address 133.10.23.1/24; family iso; family mpls; unit 34 vlan-id 34; family inet address 133.10.34.3/24; family iso; family mpls; lo0 unit 3 family inet address 3.3.3

11、.3/32; family iso address 47.0000.0000.0000.0003.00; protocols mpls interface em1.23; interface em1.34; interface lo0.3; isis interface em1.23; interface em1.34; interface lo0.3; ldp interface all; r4 interfaces em1 unit 47 vlan-id 47; family inet address 133.10.47.1/24; em2 unit 34 vlan-id 34; fami

12、ly inet address 133.10.34.4/24; family iso; family mpls; unit 45 vlan-id 45; family inet address 133.10.45.4/24; family mpls; lo0 unit 4 family inet address 4.4.4.4/32; family iso address 47.0000.0000.0000.0004.00; protocols mpls interface em2.34; interface lo0.4; bgp group ibgp type internal; local

13、-address 4.4.4.4; family inet-vpn unicast; neighbor 2.2.2.2 peer-as 65000; isis interface em2.34; interface lo0.4; ldp interface all; policy-options policy-statement bgp-ospf from protocol bgp; then accept; routing-instances vpn1 instance-type vrf; interface em2.45; route-distinguisher 65000:1; vrf-target target:65000:1; vrf-table-label; routing-options router-id 4.4.4.4; autonomous-system 2000; protocols bgp