H3C MSR系列路由器MPLS L3VPN跨域方案【A B C功能配置】.doc

《H3C MSR系列路由器MPLS L3VPN跨域方案【A B C功能配置】.doc》由会员分享，可在线阅读，更多相关《H3C MSR系列路由器MPLS L3VPN跨域方案【A B C功能配置】.doc（20页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、如有侵权，请联系网站删除，仅供学习与交流H3C MSR系列路由器MPLS L3VPN跨域方案【A B C功能配置】【精品文档】第 20 页MSR系列路由器MPLS L3VPN跨域方案A功能的配置关键词：MSR;MPLS;L3VPN;跨域;OptionA一、组网需求：peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下挂着vpna和vpnb的站点，peA下挂vpna和vpnb站点1，peB下挂vpna和vpnb站点2。设备清单：MSR系列4台二、组网图：三、步骤：peA：router id 3.3.3.3ip vpn-instance vpnaroute-distingui

2、sher 3:1vpn-target 1:1 export-extcommunityvpn-target 1:1 import-extcommunityip vpn-instance vpnbroute-distinguisher 3:2vpn-target 2:2 export-extcommunityvpn-target 2:2 import-extcommunitympls lsr-id 3.3.3.3mplsmpls ldpinterface Ethernet0/0port link-mode routeip address 1.3.0.3 255.255.255.0mplsmpls

3、ldpinterface Ethernet0/1port link-mode routeip binding vpn-instance vpnaip address 192.168.1.1 255.255.255.0interface Ethernet1/0port link-mode routeip binding vpn-instance vpnbip address 172.32.1.1 255.255.255.0interface LoopBack0ip address 3.3.3.3 255.255.255.255bgp 1undo synchronizationpeer 1.1.1

4、.1 as-number 1peer 1.1.1.1 connect-interface LoopBack0ipv4-family vpnv4peer 1.1.1.1 enableipv4-family vpn-instance vpnaimport-route directipv4-family vpn-instance vpnbimport-route directospf 1area 0.0.0.0network 3.3.3.3 0.0.0.0network 1.3.0.0 0.0.0.255asbrA：router id 1.1.1.1ip vpn-instance vpnaroute

5、-distinguisher 1:1vpn-target 1:1 export-extcommunityvpn-target 1:1 import-extcommunityip vpn-instance vpnbroute-distinguisher 1:2vpn-target 2:2 export-extcommunityvpn-target 2:2 import-extcommunitympls lsr-id 1.1.1.1mplsmpls ldpinterface Ethernet0/0.1 /asbr间用子接口区分不同vpn流量vlan-type dot1q vid 1ip bindi

6、ng vpn-instance vpnaip address 1.2.1.1 255.255.255.0interface Ethernet0/0.2 /asbr间用子接口区分不同vpn流量vlan-type dot1q vid 2ip binding vpn-instance vpnbip address 1.2.2.1 255.255.255.0interface Ethernet0/1port link-mode routeip address 1.3.0.1 255.255.255.0mplsmpls ldpinterface LoopBack0ip address 1.1.1.1 2

7、55.255.255.255bgp 1undo synchronizationpeer 3.3.3.3 as-number 1 /asbr和pe间是标准L3VPNpeer 3.3.3.3 connect-interface LoopBack0ipv4-family vpnv4peer 3.3.3.3 enableipv4-family vpn-instance vpna /asbr间使用PE-CE模式传vpna路由peer 1.2.1.2 as-number 2ipv4-family vpn-instance vpnb /asbr间使用PE-CE模式传vpna路由peer 1.2.2.2 as

8、-number 2ospf 1area 0.0.0.0network 1.1.1.1 0.0.0.0network 1.3.0.0 0.0.0.255asbrB：router id 2.2.2.2ip vpn-instance vpnaroute-distinguisher 2:1vpn-target 1:1 export-extcommunityvpn-target 1:1 import-extcommunityip vpn-instance vpnbroute-distinguisher 2:2vpn-target 2:2 export-extcommunityvpn-target 2:2

9、 import-extcommunitympls lsr-id 2.2.2.2mplsmpls ldpinterface Ethernet0/0.1 /asbr间用子接口区分不同vpn流量vlan-type dot1q vid 1ip binding vpn-instance vpnaip address 1.2.1.2 255.255.255.0interface Ethernet0/0.2 /asbr间用子接口区分不同vpn流量vlan-type dot1q vid 2ip binding vpn-instance vpnbip address 1.2.2.2 255.255.255.0i

10、nterface Ethernet0/1port link-mode routeip address 2.4.0.2 255.255.255.0mplsmpls ldpinterface LoopBack0ip address 2.2.2.2 255.255.255.255bgp 2undo synchronizationpeer 4.4.4.4 as-number 2 /asbr和pe间是标准L3VPNpeer 4.4.4.4 connect-interface LoopBack0ipv4-family vpnv4peer 4.4.4.4 enableipv4-family vpn-inst

11、ance vpna /asbr间使用PE-CE模式传vpna路由peer 1.2.1.1 as-number 1ipv4-family vpn-instance vpnb /asbr间使用PE-CE模式传vpnb路由peer 1.2.2.1 as-number 1ospf 1area 0.0.0.0network 2.2.2.2 0.0.0.0network 2.4.0.0 0.0.0.255peB：router id 4.4.4.4ip vpn-instance vpnaroute-distinguisher 4:1vpn-target 1:1 export-extcommunityvpn-

12、target 1:1 import-extcommunityip vpn-instance vpnbroute-distinguisher 4:2vpn-target 2:2 export-extcommunityvpn-target 2:2 import-extcommunitympls lsr-id 4.4.4.4mplsmpls ldpinterface Ethernet0/0port link-mode routeip address 2.4.0.4 255.255.255.0mplsmpls ldpinterface Ethernet0/1port link-mode routeip

13、 binding vpn-instance vpnaip address 192.168.2.1 255.255.255.0interface Ethernet1/0port link-mode routeip binding vpn-instance vpnbip address 172.32.2.1 255.255.255.0interface LoopBack0ip address 4.4.4.4 255.255.255.255bgp 2undo synchronizationpeer 2.2.2.2 as-number 2peer 2.2.2.2 connect-interface L

14、oopBack0ipv4-family vpnv4peer 2.2.2.2 enableipv4-family vpn-instance vpnaimport-route directipv4-family vpn-instance vpnbimport-route directospf 1area 0.0.0.0network 4.4.4.4 0.0.0.0network 2.4.0.0 0.0.0.255四、关键点：1. asbr间需要用不同链路隔离不同vpn流量，可以使用不同物理链路或逻辑链路如子接口或E1/T1通道；2. asbr间互相把对方认为CE，所以要在bgp的vpn实例视图下。

15、MSR系列路由器MPLS L3VPN跨域方案B功能的配置关键词：MSR;MPLS;L3VPN;跨域;OptionB一、组网需求：peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下挂着vpna和vpnb的站点，peA下挂vpna和vpnb站点1，peB下挂vpna和vpnb站点2。设备清单：MSR系列4台二、组网图：三、步骤：适用设备和版本：MSR系列、Version 5.20, Beta 1105后所有版本。peA：router id 3.3.3.3ip vpn-instance vpnaroute-distinguisher 3:1vpn-target 1:1 exp

16、ort-extcommunityvpn-target 1:1 import-extcommunityip vpn-instance vpnbroute-distinguisher 3:2vpn-target 2:2 export-extcommunityvpn-target 2:2 import-extcommunitympls lsr-id 3.3.3.3mplsmpls ldpinterface Ethernet0/0port link-mode routeip address 1.3.0.3 255.255.255.0mplsmpls ldpinterface Ethernet0/1po

17、rt link-mode routeip binding vpn-instance vpnaip address 192.168.1.1 255.255.255.0interface Ethernet1/0port link-mode routeip binding vpn-instance vpnbip address 172.32.1.1 255.255.255.0interface LoopBack0ip address 3.3.3.3 255.255.255.255bgp 1undo synchronizationpeer 1.1.1.1 as-number 1peer 1.1.1.1

18、 connect-interface LoopBack0ipv4-family vpnv4peer 1.1.1.1 enableipv4-family vpn-instance vpnaimport-route directipv4-family vpn-instance vpnbimport-route directospf 1area 0.0.0.0network 3.3.3.3 0.0.0.0network 1.3.0.0 0.0.0.255asbrA：router id 1.1.1.1mpls lsr-id 1.1.1.1mplsmpls ldpinterface Ethernet0/

19、0port link-mode routeip address 1.2.0.1 255.255.255.0mpls /使能MPLS流量转发能力interface Ethernet0/1port link-mode routeip address 1.3.0.1 255.255.255.0mplsmpls ldpinterface LoopBack0ip address 1.1.1.1 255.255.255.255bgp 1undo synchronizationpeer 1.2.0.2 as-number 2 /建立EBGP连接peer 3.3.3.3 as-number 1peer 3.3

20、.3.3 connect-interface LoopBack0ipv4-family vpnv4undo policy vpn-target /取消vpn-target策略peer 3.3.3.3 enablepeer 1.2.0.2 enable /向EBGP邻居发vpn所有vpn路由ospf 1area 0.0.0.0network 1.1.1.1 0.0.0.0network 1.3.0.0 0.0.0.255asbrB：router id 2.2.2.2mpls lsr-id 2.2.2.2mplsmpls ldpinterface Ethernet0/0port link-mode

21、 routeip address 1.2.0.2 255.255.255.0mpls /使能MPLS流量转发能力interface Ethernet0/1port link-mode routeip address 2.4.0.2 255.255.255.0mplsmpls ldpinterface LoopBack0ip address 2.2.2.2 255.255.255.255bgp 2undo synchronizationpeer 1.2.0.1 as-number 1 /建立EBGP连接peer 4.4.4.4 as-number 2peer 4.4.4.4 connect-in

22、terface LoopBack0ipv4-family vpnv4undo policy vpn-target /取消vpn-target策略peer 4.4.4.4 enablepeer 1.2.0.1 enable /向EBGP邻居发vpn所有vpn路由ospf 1area 0.0.0.0network 2.2.2.2 0.0.0.0network 2.4.0.0 0.0.0.255peB：router id 4.4.4.4ip vpn-instance vpnaroute-distinguisher 4:1vpn-target 1:1 export-extcommunityvpn-ta

23、rget 1:1 import-extcommunityip vpn-instance vpnbroute-distinguisher 4:2vpn-target 2:2 export-extcommunityvpn-target 2:2 import-extcommunitympls lsr-id 4.4.4.4mplsmpls ldpinterface Ethernet0/0port link-mode routeip address 2.4.0.4 255.255.255.0mplsmpls ldpinterface Ethernet0/1port link-mode routeip b

24、inding vpn-instance vpnaip address 192.168.2.1 255.255.255.0interface Ethernet1/0port link-mode routeip binding vpn-instance vpnbip address 172.32.2.1 255.255.255.0interface LoopBack0ip address 4.4.4.4 255.255.255.255bgp 2undo synchronizationpeer 2.2.2.2 as-number 2peer 2.2.2.2 connect-interface Loo

25、pBack0ipv4-family vpnv4peer 2.2.2.2 enableipv4-family vpn-instance vpnaimport-route directipv4-family vpn-instance vpnbimport-route directospf 1area 0.0.0.0network 4.4.4.4 0.0.0.0network 2.4.0.0 0.0.0.255四、关键点：1. asbr间的直连链路必须要使能MPLS转发能力；2. asbr间要建立MP-EBGP连接，类似于普通L3VPN的MP-IBGP连接；3. asbr可以不用vpn实例，需要在b

26、gp的vpnv4视图下取消vpn-target策略。MSR系列路由器MPLS L3VPN跨域方案C功能的配置关键词：MSR;MPLS;L3VPN;跨域;OptionC一、组网需求：peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下挂着vpna和vpnb的站点，peA下挂vpna和vpnb站点1，peB下挂vpna和vpnb站点2。设备清单：MSR系列4台二、组网图：三、步骤：适用设备和版本：MSR系列、Version 5.20, Beta 1105后所有版本。peA：router id 3.3.3.3ip vpn-instance vpnaroute-distingui

27、sher 3:1vpn-target 1:1 export-extcommunityvpn-target 1:1 import-extcommunityip vpn-instance vpnbroute-distinguisher 3:2vpn-target 2:2 export-extcommunityvpn-target 2:2 import-extcommunitympls lsr-id 3.3.3.3mplsmpls ldpinterface Ethernet0/0port link-mode routeip address 1.3.0.3 255.255.255.0mplsmpls

28、ldpinterface Ethernet0/1port link-mode routeip binding vpn-instance vpnaip address 192.168.1.1 255.255.255.0interface Ethernet1/0port link-mode routeip binding vpn-instance vpnbip address 172.32.1.1 255.255.255.0interface LoopBack0ip address 3.3.3.3 255.255.255.255bgp 1undo synchronizationpeer 4.4.4

29、.4 as-number 2 /与peB建立EBGP连接peer 1.1.1.1 as-number 1peer 4.4.4.4 ebgp-max-hop 64 /支持多跳EBGP连接peer 4.4.4.4 connect-interface LoopBack0 /使用环回口连接peer 1.1.1.1 label-route-capability /使能标签路由能力peer 1.1.1.1 connect-interface LoopBack0ipv4-family vpnv4peer 4.4.4.4 enable /与peB交换vpn路由ipv4-family vpn-instance

30、vpnaimport-route directipv4-family vpn-instance vpnbimport-route directospf 1area 0.0.0.0network 3.3.3.3 0.0.0.0network 1.3.0.0 0.0.0.255asbrA：router id 1.1.1.1mpls lsr-id 1.1.1.1mplsmpls ldpacl number 2000 /定义ACL用于路由策略rule 0 permit source 3.3.3.3 0rule 5 denyinterface Ethernet0/0port link-mode rout

31、eip address 1.2.0.1 255.255.255.0mpls /使能MPLS流量转发能力interface Ethernet0/1port link-mode routeip address 1.3.0.1 255.255.255.0mplsmpls ldpinterface LoopBack0ip address 1.1.1.1 255.255.255.255bgp 1network 3.3.3.3 255.255.255.255 /引入peA路由undo synchronizationpeer 1.2.0.2 as-number 2peer 3.3.3.3 as-number

32、 1peer 1.2.0.2 route-policy asbrB export /应用路由策略peer 1.2.0.2 label-route-capability /使能标签路由能力peer 3.3.3.3 route-policy peA export /应用路由策略peer 3.3.3.3 label-route-capability /使能标签路由能力peer 3.3.3.3 connect-interface LoopBack0ospf 1area 0.0.0.0network 1.1.1.1 0.0.0.0network 1.3.0.0 0.0.0.255route-policy

33、 asbrB permit node 0 /对asbrB的路由策略if-match acl 2000 /匹配条件apply mpls-label /分标签操作route-policy peA permit node 0 /对peA的路由策略if-match mpls-label /匹配条件apply mpls-label /分标签asbrB：router id 2.2.2.2mpls lsr-id 2.2.2.2mplsmpls ldpacl number 2000 /定义ACL用于路由策略rule 0 permit source 4.4.4.4 0rule 5 denyinterface E

34、thernet0/0port link-mode routeip address 1.2.0.2 255.255.255.0mpls /使能MPLS流量转发能力interface Ethernet0/1port link-mode routeip address 2.4.0.2 255.255.255.0mplsmpls ldpinterface LoopBack0ip address 2.2.2.2 255.255.255.255bgp 2network 4.4.4.4 255.255.255.255 /引入peB路由undo synchronizationpeer 1.2.0.1 as-n

35、umber 1peer 4.4.4.4 as-number 2peer 1.2.0.1 route-policy asbrA export /应用路由策略peer 1.2.0.1 label-route-capability /使能标签路由能力peer 4.4.4.4 route-policy peB export /应用路由策略peer 4.4.4.4 label-route-capability /使能标签路由能力peer 4.4.4.4 connect-interface LoopBack0ospf 1area 0.0.0.0network 2.2.2.2 0.0.0.0network

36、2.4.0.0 0.0.0.255route-policy asbrA permit node 0 /对asbrA的路由策略if-match acl 2000 /匹配条件apply mpls-label /分标签操作route-policy peB permit node 0 /对peB的路由策略if-match mpls-label /匹配条件apply mpls-label /分标签peB：router id 4.4.4.4ip vpn-instance vpnaroute-distinguisher 4:1vpn-target 1:1 export-extcommunityvpn-tar

37、get 1:1 import-extcommunityip vpn-instance vpnbroute-distinguisher 4:2vpn-target 2:2 export-extcommunityvpn-target 2:2 import-extcommunitympls lsr-id 4.4.4.4mplsmpls ldpinterface Ethernet0/0port link-mode routeip address 2.4.0.4 255.255.255.0mplsmpls ldpinterface Ethernet0/1port link-mode routeip bi

38、nding vpn-instance vpnaip address 192.168.2.1 255.255.255.0interface Ethernet1/0port link-mode routeip binding vpn-instance vpnbip address 172.32.2.1 255.255.255.0interface LoopBack0ip address 4.4.4.4 255.255.255.255bgp 2undo synchronizationpeer 3.3.3.3 as-number 1 /与peA建立EBGP连接peer 2.2.2.2 as-numbe

39、r 2peer 3.3.3.3 ebgp-max-hop 64 /支持多跳EBGP连接peer 3.3.3.3 connect-interface LoopBack0 /使用环回口连接peer 2.2.2.2 label-route-capability /使能标签路由能力peer 2.2.2.2 connect-interface LoopBack0ipv4-family vpnv4peer 3.3.3.3 enable /与peA交换vpn路由ipv4-family vpn-instance vpnaimport-route directipv4-family vpn-instance vpnbimport-route directospf 1area 0.0.0.0network 4.4.4.4 0.0.0.0network 2.4.0.0 0.0.0.255四、关键点：1. asbr上要匹配pe环回接口地址的ACL、对asbr和pe的路由策略；2. asbr间不传递vpn路由，但是在bgp中要引入pe环回接口路由；3. asbr上要仔细路由策略；4. asbr间和asbr-pe间都要使能bgp路由标签能力；5. pe间建立多跳EBGP连接必须要注意多跳选项；6. pe间的多跳EBGP连接必须使用环回接口建立连接。