eNSP实验BGP_MPLS_VPN

BGPMPLSVPN配置实验目录1网络拓扑...................................................................................................................................22配置文件...................................................................................................................................22.1PE1的相关配置............................................................................................................22.1.1在MPLS骨干网上配置IGP协议，实现骨干网PE和P的互通..................22.1.2在PE1上配置与PE2、P的IBGP....................................................................32.1.3MPLS骨干网上配置MPLS基本能力和MPLSLDP，建立LDPLSP...............32.1.4在PE设备上配置VPN实例，将CE接入PE.................................................32.1.5在PE与CE之间建立EBGP对等体，引入VPN路由...................................42.2P的相关配置................................................................................................................52.2.1在MPLS骨干网上配置IGP协议，实现骨干网PE和P的互通..................52.2.2P上配置与PE1、PE2的IBGP.........................................................................52.2.3MPLS骨干网上配置MPLS基本能力和MPLSLDP，建立LDPLSP...............62.2.4xxx......................................................................................错误!未定义书签。2.3PE2相关配置................................................................................................................62.3.1在MPLS骨干网上配置IGP协议，实现骨干网PE和P的互通..................62.3.2在PE2上配置与P、PE1的IBGP....................................................................72.3.3MPLS骨干网上配置MPLS基本能力和MPLSLDP，建立LDPLSP...............72.3.4在PE设备上配置VPN实例，将CE接入PE.................................................82.3.5PE与CE之间建立EBGP对等体，引入VPN路由........................................82.4CE1的相关配置............................................................................................................92.5CE2的相关配置............................................................................................................92.6CE3的相关配置............................................................................................................92.7CE4的相关配置............................................................................................................93实验结果：.............................................................................................................................103.1PE1vpn路由表..........................................................................................................103.2P路由表......................................................................................................................113.3Ping:相同VPN之间可以通，不同VPN之间不通，...............................................131网络拓扑2配置文件2.1PE1的相关配置2.1.1在MPLS骨干网上配置IGP-OSPF协议，实现骨干网PE和P的互通#SysnaPE1ospf1area0.0.0.0network10.0.0.00.0.0.3network1.1.1.10.0.0.0（igp-ospf）#interfaceLoopBack0ipaddress1.1.1.1255.255.255.255ospfenable1area0.0.0.0端口使能ospf）interfaceEthernet0/0/0ipaddress10.0.0.1255.255.255.252ospfenable1area0.0.0.0（端口使能ospf）#2.1.2在PE1上配置与PE2、P的IBGP#bgp65115router-id1.1.1.1peer3.3.3.3as-number65115peer3.3.3.3connect-interfaceLoopBack0（配置bgp）peer2.2.2.2as-number65115peer2.2.2.2connect-interfaceLoopBack0ipv4-familyunicastundosynchronizationnetwork1.1.1.1255.255.255.255network10.0.0.0255.255.255.252peer2.2.2.2enablepeer3.3.3.3enable（宣告网络）#2.1.3MPLS骨干网上配置MPLS基本能力和MPLSLDP，建立LDPLSP#mplslsr-id1.1.1.1mplslsp-triggerallmplsldp（使能mpls）#interfaceEthernet0/0/0mplsmplsldp（端口使能mpls）#2.1.4在PE设备上配置VPN实例，将CE接入PEipvpn-instanceVPN1创建并进入VPN实例视图ipv4-familyroute-distinguisher100:1为vpn-instance创建RDvpn-target111:1export-extcommunity为vpn-instance创建vpn-target扩展团体mplslsr-id命令用来配置本节点的LSRID,缺省情况下，未配置LSRID。配置LSRID是配置其它MPLS命令的前提。推荐使用LSR某个Loopback接口的地址做为LSRID。lsp-trigger命令用来配置LSP的触发策略。undolsp-trigger命令用来恢复缺省情况。缺省情况下，只有32位掩码的主机路由能够触发LDP建立LSP。需要注意的是：•IP地址前缀列表只对静态路由和IGP路由有效。•LSP的建立需要LSR上有精确匹配的路由项，如果使用32位掩码的Loopback接口，则必须有精确匹配的主机路由才能触发LSP的建立。•如果指定vpn-instancevpn-instance-name参数，则配置指定VPN的LSP触发策略；如果未指定vpn-instancevpn-instance-name参数，则配置公网路由的LSP触发策略。•有关IP前缀列表的介绍请参见“三层技术-IP路由配置指导”中的“路由策略”。【举例】#配置所有路由项都能够触发LDP建立LSP。Sysnamesystem-view[Sysname]mpls[Sysname-mpls]lsp-triggerallvpn-target111:1import-extcommunity（配置VPN1）#ipvpn-instanceVPN2ipv4-familyroute-distinguisher200:1vpn-target222:1export-extcommunityvpn-target222:1import-extcommunity（配置VPN2）#interfaceEthernet0/0/1ipbindingvpn-instanceVPN1将接口与vpn-instance关联ipaddress10.0.0.13255.255.255.252（端口绑定VPN）interfaceGigabitEthernet0/0/0ipbindingvpn-instanceVPN2ipaddress10.0.0.9255.255.255.252（端口绑定VPN）#2.1.5在PE与CE之间建立EBGP对等体，引入VPN路由#bgp65115ipv4-familyvpnv4进入MBGP的VPNv4地址族视图policyvpn-targetpeer2.2.2.2enable激活MBGP对等体peer3.3.3.3enable（建立邻居关系）#ipv4-familyvpn-instanceVPN1进入BGP的VPN地址族视图import-routedirectimport-routestatic（配置vpn路由）ipv4-familyvpn-instanceVPN2import-routedirectimport-routestatic（配置vpn路由）#iproute-staticvpn-instanceVPN10.0.0.00.0.0.010.0.0.14iproute-staticvpn-instanceVPN20.0.0.00.0.0.010.0.0.10（配置vpn静态路由:PE和CE间通过静态路由链接的配置）#2.2P的相关配置2.2.1在MPLS骨干网上配置IGP协议，实现骨干网PE和P的互通#sysnaPospf1area0.0.0.0network10.0.0.00.0.0.3network10.0.0.40.0.0.3network2.2.2.20.0.0.0（igp-ospf）#interfaceLoopBack0i