IOS XR MPLS VPN案例_v10-精品文档资料整理.pptx

《IOS XR MPLS VPN案例_v10-精品文档资料整理.pptx》由会员分享，可在线阅读，更多相关《IOS XR MPLS VPN案例_v10-精品文档资料整理.pptx（17页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、IOS XR MPLS VPNConfigurationv1.02Topology3接接口配置口配置interface Loopback0 description for P function ipv4 address 124.75.0.24 255.255.255.255!interface Loopback1 description for PE function ipv4 address 124.75.1.24 255.255.255.255!interface TE0/0/0/2 /上联接口配置 description ipb-s-cx-7609-1 to ipb-c-kj-tx-1

2、13/3/0 mtu 4510 load-interval 30 ipv4 address 124.75.131.166 255.255.255.252按照topo要求配置CE/PE的loopback地址及接口地址验证命令：Show ipv4 interface briefShow run interface x/x/x/xShow ipv4 vrf all interface briefPing x.x.x.x4在在mpls core核心上配置核心上配置IGP ISISPE1/PE2的面向核心侧接口启用isis，最终PE1/PE2上各自对方的loopback0地址可达ISIS area验证命

3、令：Show isis neighorSh run router isis5isis 相关相关验证命令命令6配配置启动置启动MPLSPE1与PE2上配置面向核心的接口启用mplsPE1mpls ldp router-id 1.1.1.1 discovery hello holdtime 30 discovery hello interval 1 nsr session protection log neighbor nsr session-protection!interface tenGigE 0/0/0/2!Verfication：1.sh mpls ldp neighbor2.sh mp

4、ls ldp interface7配配置置VRFPE1与PE2上配置vrfPE1与PE2面向CE的接口放入相应的vrfPE1vrf lab-vrf address-family ipv4 unicast import route-target 65060:100 !export route-target 65060:100 !Interface gigabitEthernet 0/0/x/x vrf lab-vrf验证命令：配置完vrf使用Ping vrf x.x.x.x验证连通性8配置配置MP-BGPPE1与PE2建立MP-BGP关系,PE BGP AS号为300PE与CE建立Ebgp关系，

5、CE BGP AS号为1PE1router bgp 300 bgp router-id 1.1.1.1 timers bgp 6 20!Enable BGP NSR nsr address-family vpnv4 unicast!neighbor-group vrf-ce remote-as 1 address-family ipv4 unicast route-policy allow-all in route-policy allow-all out !neighbor-group REMOTE_PE remote-as 300 update-source Loopback0 addre

6、ss-family ipv4 unicast allowas-in next-hop-self soft-reconfiguration inbound !address-family vpnv4 unicast next-hop-self soft-reconfiguration inbound !neighbor 2.2.2.2 use neighbor-group REMOTE_PE!vrf lab-vrf rd 300:1!address-family ipv4 unicast redistribute connected!neighbor 10.1.1.1 use neighbor-

7、group vrf-ce!9Router Configuration:MP-BGProuter bgp 1 address-family ipv4 unicast network 192.168.11.11/32!neighbor 144.50.100.3 remote-as 300 address-family ipv4 unicast route-policy allow-all in route-policy allow-all out !A Sample Configuration on CEroute-policy allow-all passend-policy10BGP 验证Ve

8、rification:1.show running-config router bgp as-number vrf vrf-name 2.show bgp vrf vrf-name summary 3.show bgp vrf vrf-name neighbors ip-address 4.show bgp vrf vrf-name 5.show bgp vpn unicast summary 6.show mpls ldp forwarding 7.show bgp vpnv4 unicast show bgp vrf vrf-name 8.show bgp vrf vrf-name imp

9、orted-routes 9.show route vrf vrf-name ip-address 10.show cef vrf vrf-name ip-address 11.show cef vrf vrf-name ip-address location node-id 12.show bgp vrf vrf-name ip-address Verification and Troubleshooting11111112show commands:MP-BGPRP/0/7/CPU0:D5#show bgp vpnv4 unicast summaryBGP router identifie

10、r 192.168.55.55,local AS number 300BGP generic scan interval 60 secsBGP table state:ActiveBGP main routing table version 2BGP scan interval 60 secsBGP is operating in STANDALONE mode.Process RecvTblVer bRIB/RIB LabelVer ImportVer SendTblVerSpeaker 2 2 2 2 2Neighbor Spk AS MsgRcvd MsgSent TblVer InQ

11、OutQ Up/Down St/PfxRcd192.168.33.33 0 300 275 273 2 0 0 04:00:58 113show commands:MP-BGPRP/0/7/CPU0:D3#show bgp vrf LAB-VRF1 summaryBGP VRF LAB-VRF1,state:ActiveBGP Route Distinguisher:300:1BGP router identifier 192.168.33.33,local AS number 300BGP table state:ActiveBGP main routing table version 3B

12、GP is operating in STANDALONE mode.Process RecvTblVer bRIB/RIB LabelVer ImportVer SendTblVerSpeaker 3 3 3 3 3Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd144.50.100.2 0 1 268 270 3 0 0 04:02:39 014show commands:MP-BGP VRF-PingRP/0/7/CPU0:D3#ping vrf LAB-VRF1 192.168.77.77Type esc

13、ape sequence to abort.Sending 5,100-byte ICMP Echos to 192.168.77.77,timeout is 2 seconds:!Success rate is 100 percent(5/5),round-trip min/avg/max=3/4/5 msVRF-ping on a PERP/0/7/CPU0:D3#sh route vrf LAB-VRF1Gateway of last resort is not setC 144.50.100.2/31 is directly connected,1d00h,GigabitEtherne

14、t0/0/0/0L 144.50.100.3/32 is directly connected,1d00h,GigabitEthernet0/0/0/0B 192.168.3.0/24 200/0 via 192.168.55.55(nexthop in vrf default),00:10:36B 192.168.11.11/32 20/0 via 144.50.100.2,00:22:46B 192.168.77.77/32 200/0 via 192.168.55.55(nexthop in vrf default),00:10:10Checking for routes under t

15、he VRF-RIB 15BGP:Show&Debug commandsshow bgp vrf summary labelsshow bgp vpnv4 unicast summary labelsShow bgp vpnv4 unicast rd show bgp vrf bestpath-compareshow bgp vrf imported-routesdebug bgp vrf io|rib|label|import|update|16SummaryMPLS VPN support is available since IOS-XR release 3.3Major infrastructure components include RSI,BCDL and LPTSDistinguishing features such as label allocation control,per CE/per vrf label assignments and auto-rd configuration etc.Separate address-family for IPv4+label configuration17Thank you.