華為路由器MPLS VPN配置示例

-.z.配置BGP/MPLSIPVPN例如圖1

配置BGP/MPLSIPVPN組網(wǎng)圖組網(wǎng)需求配置思路操作步驟配置文件組網(wǎng)需求如圖1配置各CE的接口IP地址。#配置CE1。CE2、CE3和CE4與CE1類(lèi)似，不再贅述。<Huawei>system-view[Huawei]sysnameCE1[CE1]interfacegigabitethernet1/0/0[CE1-GigabitEthernet1/0/0]ipaddress10.1.1.124[CE1-GigabitEthernet1/0/0]quit配置完成后，在PE設(shè)備上執(zhí)行displayipvpn-instanceverbose命令可以看到VPN實(shí)例的配置情況。各PE能ping通自己接入的CE。說(shuō)明：當(dāng)PE上有多個(gè)接口綁定了同一個(gè)VPN，則使用ping-vpn-instance命令ping對(duì)端PE接入的CE時(shí)，要指定源IP地址，即要指定ping-vpn-instancevpn-instance-name

-a

source-ip-addressdest-ip-address命令中的參數(shù)-asource-ip-address，否則可能ping不通。以PE1為例：[PE1]displayipvpn-instanceverboseTotalVPN-Instancesconfigured:2TotalIPv4VPN-Instancesconfigured:2TotalIPv6VPN-Instancesconfigured:0VPN-InstanceNameandID:vpna,1Interfaces:GigabitEthernet1/0/0Addressfamilyipv4Createdate:2012/07/2500:58:17Uptime:0days,22hours,24minutesand53secondsRouteDistinguisher:100:1E*portVPNTargets:111:1ImportVPNTargets:111:1LabelPolicy:labelperrouteLogInterval:5VPN-InstanceNameandID:vpnb,2Interfaces:GigabitEthernet2/0/0Addressfamilyipv4Createdate:2012/07/2500:58:17Uptime:0days,22hours,24minutesand53secondsRouteDistinguisher:100:2E*portVPNTargets:222:2ImportVPNTargets:222:2LabelPolicy:labelperrouteLogInterval:5[PE1]PING10.1.1.1:56databytes,pressCTRL_CtobreakReplyfrom10.1.1.1:bytes=56Sequence=1ttl=255time=5msReplyfrom10.1.1.1:bytes=56Sequence=2ttl=255time=3msReplyfrom10.1.1.1:bytes=56Sequence=3ttl=255time=3msReplyfrom10.1.1.1:bytes=56Sequence=4ttl=255time=3msReplyfrom10.1.1.1:bytes=56Sequence=5ttl=255time=16ms10.1.1.1pingstatistics5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/ma*=3/6/16ms在PE之間建立MP-IBGP對(duì)等體關(guān)系#配置PE1。[PE1]bgp100[PE1-bgp]peer3.3.3.9as-number100[PE1-bgp]peer3.3.3.9connect-interfaceloopback1[PE1-bgp]ipv4-familyvpnv4[PE1-bgp-af-vpnv4]peer3.3.3.9enable[PE1-bgp-af-vpnv4]quit[PE1-bgp]quit#配置PE2。[PE2]bgp100[PE2-bgp]peer1.1.1.9as-number100[PE2-bgp]peer1.1.1.9connect-interfaceloopback1[PE2-bgp]ipv4-familyvpnv4[PE2-bgp-af-vpnv4]peer1.1.1.9enable[PE2-bgp-af-vpnv4]quit[PE2-bgp]quit配置完成后，在PE設(shè)備上執(zhí)行displaybgppeer或displaybgpvpnv4allpeer命令，可以看到PE之間的BGP對(duì)等體關(guān)系已建立，并到達(dá)Established狀態(tài)。[PE1]displaybgppeerLocalASnumber:100Totalnumberofpeers:1Peersinestablishedstate:1PeerVASMsgRcvdMsgSentOutQUp/DownStatePrefRcv3.3.3.94100126000:02:21Established0[PE1]displaybgpvpnv4allpeerLocalASnumber:100Totalnumberofpeers:1Peersinestablishedstate:1PeerVASMsgRcvdMsgSentOutQUp/DownStatePrefRcv3.3.3.941001218000:09:38Established0在PE與CE之間建立EBGP對(duì)等體關(guān)系，引入VPN路由#配置CE1。CE2、CE3和CE4與CE1類(lèi)似，不再贅述。[CE1]bgp65410[CE1-bgp]peer10.1.1.2as-number100[CE1-bgp]import-routedirect[CE1-bgp]quit#配置PE1。PE2的配置與PE1類(lèi)似，不再贅述。[PE1]bgp100[PE1-bgp]ipv4-familyvpn-instancevpna[PE1-bgp-vpna]peer10.1.1.1as-number65410[PE1-bgp-vpna]import-routedirect[PE1-bgp-vpna]quit[PE1-bgp]ipv4-familyvpn-instancevpnb[PE1-bgp-vpnb]peer10.2.1.1as-number65420[PE1-bgp-vpnb]import-routedirect[PE1-bgp-vpnb]quit[PE1-bgp]quit配置完成后，在PE設(shè)備上執(zhí)行displaybgpvpnv4vpn-instancepeer命令，可以看到PE與CE之間的BGP對(duì)等體關(guān)系已建立，并到達(dá)Established狀態(tài)。以PE1與CE1的對(duì)等體關(guān)系為例：[PE1]displaybgpvpnv4vpn-instancevpnapeerBGPlocalrouterID:1.1.1.9LocalASnumber:100VPN-Instancevpna,RouterID1.1.1.9:Totalnumberofpeers:1Peersinestablishedstate:1PeerVASMsgRcvdMsgSentOutQUp/DownStatePrefRcv10.1.1.146541063000:00:02Established4驗(yàn)證配置結(jié)果#在PE設(shè)備上執(zhí)行displayiprouting-tablevpn-instance命令，可以看到去往對(duì)端CE的路由。#以PE1的顯示為例：[PE1]displayiprouting-tablevpn-instancevpnaRouteFlags:R-relay,D-downloadtofibRoutingTables:vpnaDestinations:5Routes:5Destination/MaskProtoPreCostFlagsNe*tHopInterface[PE1]displayiprouting-tablevpn-instancevpnbRouteFlags:R-relay,D-downloadtofibRoutingTables:vpnbDestinations:5Routes:5Destination/MaskProtoPreCostFlagsNe*tHopInterface#同一VPN的CE能夠相互Ping通，不同VPN的CE不能相互Ping通。#例如：CE1能夠Ping通CE3〔〕，但不能Ping通CE4〔〕。[CE1]PING10.3.1.1:56databytes,pressCTRL_CtobreakReplyfrom10.3.1.1:bytes=56Sequence=1ttl=253time=72msReplyfrom10.3.1.1:bytes=56Sequence=2ttl=253time=34msReplyfrom10.3.1.1:bytes=56Sequence=3ttl=253time=50msReplyfrom10.3.1.1:bytes=56Sequence=4ttl=253time=50msReplyfrom10.3.1.1:bytes=56Sequence=5ttl=253time=34ms10.3.1.1pingstatistics5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/ma*=34/48/72ms[CE1]PING10.4.1.1:56databytes,pressCTRL_CtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout10.4.1.1pingstatistics5packet(s)transmitted0packet(s)received100.00%packetloss配置文件PE1的配置文件#sysnamePE1#ipvpn-instancevpnaipv4-familyroute-distinguisher100:1vpn-target111:1e*port-e*tmunityvpn-target111:1import-e*tmunity#ipvpn-instancevpnbipv4-familyroute-distinguisher100:2vpn-target222:2e*port-e*tmunityvpn-target222:2import-e*tmunity#mpls#mplsldp#interfaceGigabitEthernet1/0/0ipbindingvpn-instancevpna#interfaceGigabitEthernet2/0/0ipbindingvpn-instancevpnb#interfaceGigabitEthernet3/0/0mplsmplsldp#interfaceLoopBack1#bgp100peer3.3.3.9as-number100peer3.3.3.9connect-interfaceLoopBack1#ipv4-familyunicastundosynchronizationpeer3.3.3.9enable#ipv4-familyvpnv4policyvpn-targetpeer3.3.3.9enable#ipv4-familyvpn-instancevpnaimport-routedirectpeer10.1.1.1as-number65410#ipv4-familyvpn-instancevpnbimport-routedirectpeer10.2.1.1as-number65420#ospf1#returnP的配置文件#sysnameP#mpls#mplsldp#interfaceGigabitEthernet1/0/0mplsmplsldp#interfaceGigabitEthernet2/0/0mplsmplsldp#interfaceLoopBack1#ospf1#returnPE2的配置文件#sysnamePE2#ipvpn-instancevpnaipv4-familyroute-distinguisher200:1vpn-target111:1e*port-e*tmunityvpn-target111:1import-e*tmunity#ipvpn-instancevpnb