第36章 Inter AS MPLS VPN Option A

1.CE1配置BGP

[R1]bgp 100
[R1-bgp]peer 12.1.1.2 as-number 234
[R1-bgp]network 1.1.1.1 32

2.PE1配置OSPF

[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 23.1.1.0 0.255.255.255

3.P1配置OSPF

[Huawei]ospF 1 router-id 3.3.3.3
[Huawei-ospf-1]area 0
[Huawei-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[Huawei-ospf-1-area-0.0.0.0]network 23.1.1.0 0.255.255.255
[Huawei-ospf-1-area-0.0.0.0]network 34.1.1.0 0.255.255.255

4.ASBR1上的配置OSPF

[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 34.1.1.0 0.255.255.255

5.PE1配置VPN实例

[R2]ip vpn-instance dsrw
[R2-vpn-instance-dsrw]route-distinguisher 1:1
[R2-vpn-instance-dsrw-af-ipv4]vpn-target 100:1 export-extcommunity
[R2-vpn-instance-dsrw-af-ipv4]vpn-target 100:1 import-extcommunity

6.PE1配置MPLS、LDP

[R2]mpls lsr-id 2.2.2.2
[R2]mpls
[R2]mpls ldp
[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]mpls
[R2-GigabitEthernet0/0/1]mpls ldp
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ip binding vpn-instance dsrw
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 8

7.PE1配置BGP

[R2]bgp 234
[R2-bgp]peer 4.4.4.4 as-number 234
[R2-bgp]peer 4.4.4.4 connect-interface LoopBack 0
[R2-bgp]ipv4-family vpnv4
[R2-bgp-af-vpnv4]peer 4.4.4.4 enable
[R2-bgp]ipv4-family vpn-instance dsrw
[R2-bgp-dsrw]peer 12.1.1.1 as-number 100

8.P1配置MPLS、LDP

[R3]mpls lsr-id 3.3.3.3
[R3]mpls
[R3-mpls]mpls ldp
[R3]interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0]mpls
[R3-GigabitEthernet0/0/0]mpls ldp
[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]mpls
[R3-GigabitEthernet0/0/1]mpls ldp

9.ASBR1配置VPN实例

[R4]ip vpn-instance dsrw
[R4-vpn-instance-dsrw]route-distinguisher 3:3
[R4-vpn-instance-dsrw-af-ipv4]vpn-target 100:1 export-extcommunity 
[R4-vpn-instance-dsrw-af-ipv4]vpn-target 100:1 import-extcommunity 

10.ASBR1配置MPLS、LDP

[R4]mpls lsr-id 4.4.4.4
[R4]mpls
[R4]mpls ldp
[R4]interface GigabitEthernet 0/0/0
[R4-GigabitEthernet0/0/0]mpls 
[R4-GigabitEthernet0/0/0]mpls ldp  
[R4]interface GigabitEthernet 0/0/1
[R4-GigabitEthernet0/0/1]ip binding vpn-instance dsrw
[R4-GigabitEthernet0/0/1]ip address 45.1.1.4 8

11.ASBR1配置BGP

[R4]bgp 234
[R4-bgp]peer 2.2.2.2 as-number 234
[R4-bgp]peer 2.2.2.2 connect-interface LoopBack 0
[R4-bgp]ipv4-family vpnv4
[R4-bgp-af-vpnv4]peer 2.2.2.2 enable
[R4-bgp]ipv4-family vpn-instance dsrw
[R4-bgp-dsrw]peer 45.1.1.5 as-number 567
//配置ASBR1与ASBR2的BGP邻居关系

12.ASBR2上配置OSPF

[R5]ospf 1 router-id 5.5.5.5
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
[R5-ospf-1-area-0.0.0.0]network 56.1.1.0 0.255.255.255

13.P2上配置OSPF

[R6]ospf 1 router-id 6.6.6.6
[R6-ospf-1]area  0
[R6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.0
[R6-ospf-1-area-0.0.0.0]network 56.1.1.0 0.255.255.255
[R6-ospf-1-area-0.0.0.0]network 67.1.1.0 0.255.255.255

14.PE2上配置OSPF

[R7]ospf 1 router-id 7.7.7.7
[R7-ospf-1]area 0
[R7-ospf-1-area-0.0.0.0]network 7.7.7.7 0.0.0.0
[R7-ospf-1-area-0.0.0.0]network 67.1.1.0 0.255.255.255

15.ASBR2配置VPN实例

[R5]ip vpn-instance dsrw
[R5-vpn-instance-dsrw]route-distinguisher 4:4
[R5-vpn-instance-dsrw-af-ipv4]vpn-target 100:1 export-extcommunity
[R5-vpn-instance-dsrw-af-ipv4]vpn-target 100:1 import-extcommunity 

16.ASBR2配置MPLS、LDP

[R5]mpls lsr-id 5.5.5.5 
[R5]mpls
[R5]mpls ldp
[R5]interface GigabitEthernet 0/0/0
[R5-GigabitEthernet0/0/0]ip binding vpn-instance dsrw
[R5-GigabitEthernet0/0/0]ip address 45.1.1.5 8
[R5]interface GigabitEthernet 0/0/1
[R5-GigabitEthernet0/0/1]mpls
[R5-GigabitEthernet0/0/1]mpls ldp 

17.ASBR2配置BGP

[R5]bgp 567
[R5-bgp]peer 7.7.7.7 as-number 567
[R5-bgp]peer 7.7.7.7 connect-interface LoopBack 0
[R5-bgp]ipv4-family vpnv4
[R5-bgp-af-vpnv4]peer 7.7.7.7 enable 
[R5-bgp]ipv4-family vpn-instance dsrw
[R5-bgp-dsrw]peer 45.1.1.4 as-number 234
//配置ASBR2与ASBR1的BGP邻居关系

18.P2配置MPLS、LDP

[R6]mpls lsr-id 6.6.6.6
[R6]mpls
[R6]mpls ldp
[R6]interface GigabitEthernet 0/0/0
[R6-GigabitEthernet0/0/0]mpls
[R6-GigabitEthernet0/0/0]mpls ldp
[R6]interface GigabitEthernet 0/0/1
[R6-GigabitEthernet0/0/1]mpls 
[R6-GigabitEthernet0/0/1]mpls ldp 

19.PE2配置VPN实例

[R7]ip vpn-instance dsrw
[R7-vpn-instance-dsrw]route-distinguisher 6:6
[R7-vpn-instance-dsrw-af-ipv4]vpn-target 100:1 export-extcommunity 
[R7-vpn-instance-dsrw-af-ipv4]vpn-target 100:1 import-extcommunity

20.PE2配置MPLS、LDP

[R7]mpls lsr-id 7.7.7.7
[R7]mpls
[R7]mpls ldp
[R7]interface GigabitEthernet 0/0/0
[R7-GigabitEthernet0/0/0]mpls
[R7-GigabitEthernet0/0/0]mpls ldp
[R7]interface GigabitEthernet 0/0/1
[R7-GigabitEthernet0/0/1]ip binding vpn-instance dsrw
[R7-GigabitEthernet0/0/1]ip address 78.1.1.7 8

21.PE2配置BGP

[R7]bgp 567
[R7-bgp]peer 5.5.5.5 as-number 567
[R7-bgp]peer 5.5.5.5 connect-interface LoopBack 0
[R7-bgp]ipv4-family vpnv4
[R7-bgp-af-vpnv4]peer 5.5.5.5 enable
[R7-bgp]ipv4-family vpn-instance dsrw
[R7-bgp-dsrw]peer 78.1.1.8 as-number 800

22.CE2配置

[R8]bgp 800
[R8-bgp]peer 78.1.1.7 as-number 567
[R8-bgp]network 8.8.8.8 32

23.CE1连通性测试CE2

<R1>ping -a 1.1.1.1 8.8.8.8
  PING 8.8.8.8: 56  data bytes, press CTRL_C to break
    Reply from 8.8.8.8: bytes=56 Sequence=1 ttl=249 time=80 ms
    Reply from 8.8.8.8: bytes=56 Sequence=2 ttl=249 time=60 ms
    Reply from 8.8.8.8: bytes=56 Sequence=3 ttl=249 time=70 ms
    Reply from 8.8.8.8: bytes=56 Sequence=4 ttl=249 time=60 ms
    Reply from 8.8.8.8: bytes=56 Sequence=5 ttl=249 time=50 ms