| 关键词: nbsp neighbor 1.1 rrc 互访 address 65000 group family peer |
MPLS VPN 互访关系控制 1.各路由器基本信息配置 2.OSPF规范配置,修改网络类型为点对点,配置被动接口 3.MPLS骨干网运行OSPF,标签分发协议为LDP 4.RT1、RT2、RT3、RT4和RT5运行MP_IPGP,RT1为MP_IPGP RR,RT2、RT3、RT4和RT5分别与RR建立MP_IBGP邻居 5.RT4的S0/1和E3/0划分到VRF SC,S0/2、E3/1划分到VRF BG,E3/2划分到VRF HUB,RT5的S0/1和E3/0划分到VRF SC,S0/2、E3/1划分到VRF BG,E3/2划分到VRF HUB 6.RT4 VRF SC与RT6运行RIP、RT4 VRF BG 与RT7配置静态路由、RT5 VRF SC与RT8运行OSPF,RT5 VRF BG与RT9运行EBGP IP地址分配如下: RT2 E3/2 172.18.2.1/24 RT4 E3/2 172.18.4.1 RT3 E3/2 172.18.3.1/24 RT5 E3/2 172.18.5.1/24 MPLS VPN 互访关系控制如下: 1.VPN WG的站点可相互访问 2.HUB-Spoke MPLS VPN 调整WG为HUB-Spoke MPLS VPN,RT2为HUB端(中心端),RT3、RT4、RT5为Spoke端(分支端);Spoke端的WG只能访问HUB端,Spoke端间不能互访。 3.复杂MPLS VPN 调整WG的互访关系:RT2、RT3为中心端,中心端之间能够互访,RT4、RT5为分支端,分支端只能访问中心端,分支端之间不能互访。 一、MPLS 骨干网的IGP及MPLS配置略 (不明白请看http://tangfangxiao.blog.51cto.com/2116646/663010 ) 二、MP_IPGP RR调测 RT1: router bgp 65000 no synchronization neighbor rrc peer-group //创建一个对等组命名rrc neighbor rrc remote-as 65000 neighbor rrc update-source Loopback0 neighbor rrc next-hop-self neighbor 2.2.2.2 peer-group rrc neighbor 3.3.3.3 peer-group rrc //调用对等组rrc建立IBGP邻居 neighbor 4.4.4.4 peer-group rrc neighbor 5.5.5.5 peer-group rrc no auto-summary address-family vpnv4 neighbor rrc activate //创建一个对等组命名rrc neighbor rrc send-community extended neighbor rrc route-reflector-client //配置成为RR的客户端 neighbor 2.2.2.2 peer-group rrc //调用对等组rrc建立MP_BGP RR neighbor 3.3.3.3 peer-group rrc neighbor 4.4.4.4 peer-group rrc neighbor 5.5.5.5 peer-group rrc exit-address-family RT2: router bgp 65000 no synchronization neighbor 1.1.1.1 remote-as 65000 neighbor 1.1.1.1 update-source Loopback0 no auto-summary address-family vpnv4 neighbor 1.1.1.1 activate neighbor 1.1.1.1 send-community extended exit-address-family RT3: router bgp 65000 no synchronization neighbor 1.1.1.1 remote-as 65000 neighbor 1.1.1.1 update-source Loopback0 no auto-summary address-family vpnv4 neighbor 1.1.1.1 activate neighbor 1.1.1.1 send-community extended exit-address-family RT4: router bgp 65000 no synchronization neighbor 1.1.1.1 remote-as 65000 neighbor 1.1.1.1 update-source Loopback0 no auto-summary address-family vpnv4 neighbor 1.1.1.1 activate neighbor 1.1.1.1 send-community extended exit-address-family RT5: router bgp 65000 |
|
声明:文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|