H3C MSR系列路由器MPLS L3VPN跨域方案【A B C功能配置】

MSR系列路由器MPLSL3VPN跨域方案A功能的配置關鍵詞：MSR;MPLS;L3VPN;跨域;OPtiOnA一、組網(wǎng)需求：PeA和asbrA在AS1,peB和asbrB在AS2；PeA和PeB都下掛著VPna和VPnb的站點，PeA下掛VPna和VPnb站點1，PeB下掛VPna和VPnb站點2。設備清單：MSR系列路由器4臺二、組網(wǎng)圖：?；,0.2240,1.242J.0.4192,168El/ff1.221asbrB5■L?.J'vpπbSite1vρnbSite2VPnaSite2vρnaSite1三、配置步驟：PeA配置#routerid3.3.3.3#ipvpn-instancevpnaroute-distinguisher3:1vpn-target1:1export-extcommunityvpn-target1:1import-extcommunity#ipvpn-instancevpnbroute-distinguisher3:2vpn-target2:2export-extcommunityvpn-target2:2import-extcommunity#mplslsr-id3.3.3.3#mpls#mplsldp#interfaceEthernet0/0portlink-moderouteipaddress1.3.0.3255.255.255.0mpls#interfaceEthernet0/1portlink-moderouteipbindingvpn-instancevpnaipaddress192.168.1.1255.255.255.0#interfaceEthernet1/0portlink-moderouteipbindingvpn-instancevpnbipaddress172.32.1.1255.255.255.0#interfaceLoopBack0ipaddress3.3.3.3255.255.255.255#bgp1undosynchronizationpeer1.1.1.1as-number1peer1.1.1.1connect-interfaceLoopBack0##ipv4-familyvpn-instancevpnaimport-routedirect#ipv4-familyvpn-instancevpnbimport-routedirect#ospf1area0.0.0.0network3.3.3.30.0.0.0network1.3.0.00.0.0.255#asbrA配：routerid1.1.1.1#ipvpn-instancevpnaroute-distinguisher1:1vpn-target1:1export-extcommunityvpn-target1:1import-extcommunityipvpn-instancevpnbroute-distinguisher1:2vpn-target2:2export-extcommunityvpn-target2:2import-extcommunity#mplslsr-id1.1.1.1#mpls#mplsldp#interfaceEthernet0/0.1//asbr間用子接口區(qū)分不同VPn流量vlan-typedot1qvid1iPbindingvPn-instancevPnaiPaddress1.2.1.1255.255.255.0#interfaceEthernet0/0.2//asbr間用子接口區(qū)分不同VPn流量vlan-tyPedot1qvid2iPbindingVPn-instanceVPnbiPaddress1.2.2.1255.255.255.0portlink-moderouteipaddress1.3.0.1255.255.255.0mplsmplsldp#interfaceLoopBack0ipaddress1.1.1.1255.255.255.255#bgp1undosynchronizationpeer3.3.3.3as-number1//asbr和Pe間是標準L3VPN配詈peer3.3.3.3connect-interfaceLoopBack0#ipv4-familyvpnv4peer3.3.3.3enable#ipv4-familyvpn-instanceVPna//asbr間使用PE-CE模式傳VPna路由peer1.2.1.2as-number2##ospf1area0.0.0.0network1.1.1.10.0.0.0network1.3.0.00.0.0.255#asbrB配：#routerid2.2.2.2#ipvpn-instancevpnaroute-distinguisher2:1vpn-target1:1export-extcommunityvpn-target1:1import-extcommunity#ipvpn-instancevpnbroute-distinguisher2:2vpn-target2:2export-extcommunityvpn-target2:2import-extcommunity#mpls#mplsldp#interfaceEthernet0/0.1//asbr間用子接口區(qū)分不同VPn流量vlan-typedot1qvid1iPbindingvPn-instancevPnaiPaddress1.2.1.2255.255.255.0#interfaceEthernet0/0.2//asbr間用子接口區(qū)分不同VPn流量vlan-tyPedot1qvid2iPbindingVPn-instanceVPnbiPaddress1.2.2.2255.255.255.0#interfaceEthernet0/1Portlink-moderouteiPaddress2.4.0.2255.255.255.0mPlsmPlsldPinterfaceLoopBack0ipaddress2.2.2.2255.255.255.255#bgp2undosynchronizationpeer4.4.4.4as-number2//asbr和Pe間是標準L3VPN配胃peer4.4.4.4connect-interfaceLoopBack0#ipv4-familyvpnv4peer4.4.4.4enable#ipv4-familyvpn-instanceVPna//asbr間使用PE-CE模式傳VPna路由peer1.2.1.1as-number1#ipv4-familyvpn-instanceVPnb//asbr間使用PE-CE模式傳VPnb路由peer1.2.2.1as-number1#ospf1area0.0.0.0network2.2.2.20.0.0.0#PeB配：routerid4.4.4.4#ipvpn-instancevpnaroute-distinguisher4:1vpn-target1:1export-extcommunityvpn-target1:1import-extcommunity#ipvpn-instancevpnbroute-distinguisher4:2vpn-target2:2export-extcommunityvpn-target2:2import-extcommunity#mplslsr-id4.4.4.4#mpls#mplsldpportlink-moderouteipaddress2.4.0.4255.255.255.0mplsmplsldp#interfaceEthernet0/1portlink-moderouteipbindingvpn-instancevpnaipaddress192.168.2.1255.255.255.0#interfaceEthernet1/0portlink-moderouteipbindingvpn-instancevpnbipaddress172.32.2.1255.255.255.0#interfaceLoopBack0ipaddress4.4.4.4255.255.255.255#bgp2undosynchronizationpeer2.2.2.2connect-interfaceLoopBack0#ipv4-familyvpnv4peer2.2.2.2enable#ipv4-familyvpn-instancevpnaimport-routedirect#ipv4-familyvpn-instancevpnbimport-routedirect#ospf1area0.0.0.0network4.4.4.40.0.0.0network2.4.0.00.0.0.255#四、配置關鍵點:.asbr間需要用不同鏈路隔離不同VPn流量，可以使用不同物理鏈路或邏輯鏈路如子接口或E1/T1通道;.asbr間互相把對方認為CE,所以要配置在bgp的VPn實例視圖下配置MSR系列路由器MPLSL3VPN跨域方案B功能的配置關鍵詞：MSR;MPLS;L3VPN;跨域;OPtionB一、組網(wǎng)需求：peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下掛著VPna和VPnb的站點，PeA下掛vpna和vpnb站點1，PeB下掛vpna和vpnb站點2。設備清單：MSR系列路由器4臺二、組網(wǎng)圖：4.0.224EH/.0324V168.2IyElN∕1"232.2,124vpnbSite1pnbSite2VPnaSiteIvpnaSite2三、配置步驟：適用設備和版本：MSR系列、Version5.20,Beta1105后所有版本。PeA配置routerid3.3.3.3#ipvpn-instancevpnaroute-distinguisher3:1vpn-target1:1export-extcommunityvpn-target1:1import-extcommunity#ipvpn-instancevpnbroute-distinguisher3:2vpn-target2:2export-extcommunityvpn-target2:2import-extcommunity#mplslsr-id3.3.3.3#mpls#mplsldp#interfaceEthernet0/0portlink-moderoutemplsmplsldp#interfaceEthernet0/1portlink-moderouteipbindingvpn-instancevpnaipaddress192.168.1.1255.255.255.0#interfaceEthernet1/0portlink-moderouteipbindingvpn-instancevpnbipaddress172.32.1.1255.255.255.0#interfaceLoopBack0ipaddress3.3.3.3255.255.255.255#bgp1undosynchronizationpeer1.1.1.1as-number1peer1.1.1.1connect-interfaceLoopBack0ipv4-familyvpnv4peer1.1.1.1enable#ipv4-familyvpn-instancevpnaimport-routedirect#ipv4-familyvpn-instancevpnbimport-routedirect#ospf1area0.0.0.0network3.3.3.30.0.0.0network1.3.0.00.0.0.255#asbrA配置routerid1.1.1.1#mplslsr-id1.1.1.1#mplsldp#interfaceEthernet0/0portlink-moderouteipaddress1.2.0.1255.255.255.0mpls//使能MPLS流量轉(zhuǎn)發(fā)能力#interfaceEthernet0/1portlink-moderouteipaddress1.3.0.1255.255.255.0mplsmplsldp#interfaceLoopBack0ipaddress1.1.1.1255.255.255.255#bgp1undosynchronizationPeer1.2.0.2as-number2//建立EBGP連接peer3.3.3.3as-number1#ipv4-familyvpnv4undopolicyvpn-target〃取消vpn-target策略peer3.3.3.3enablepeer1.2.0.2enable〃向EBGP鄰居發(fā)VPn所有VPn路由#ospf1area0.0.0.0network1.1.1.10.0.0.0network1.3.0.00.0.0.255#asbrB配置#routerid2.2.2.2#mplslsr-id2.2.2.2#mpls#interfaceEthernet0/0portlink-moderouteipaddress1.2.0.2255.255.255.0mpls//使能MPLS流量轉(zhuǎn)發(fā)能力#interfaceEthernet0/1portlink-moderouteipaddress2.4.0.2255.255.255.0mplsmplsldp#interfaceLoopBack0ipaddress2.2.2.2255.255.255.255#bgp2undosynchronizationPeer1.2.0.1as-number1//建立EBGP連接peer4.4.4.4as-number2Peer4.4.4.4connect-interfaceLooPBack0undopolicyvpn-target〃取消vpn-target策略peer4.4.4.4enablepeer1.2.0.1enable〃向EBGP鄰居發(fā)VPn所有VPn路由#ospf1area0.0.0.0network2.2.2.20.0.0.0network2.4.0.00.0.0.255#PeB配置routerid4.4.4.4#ipVpn-instanceVpnaroute-distinguisher4:1Vpn-target1:1export-extcommunityVpn-target1:1import-extcommunity#ipVpn-instanceVpnbroute-distinguisher4:2Vpn-target2:2export-extcommunity#mplslsr-id4.4.4.4#mpls#mplsldp#interfaceEthernet0/0portlink-moderouteipaddress2.4.0.4255.255.255.0mplsmplsldp#interfaceEthernet0/1portlink-moderouteipbindingvpn-instancevpnaipaddress192.168.2.1255.255.255.0#interfaceEthernet1/0portlink-moderouteipaddress172.32.2.1255.255.255.0#interfaceLoopBack0ipaddress4.4.4.4255.255.255.255#bgp2undosynchronizationpeer2.2.2.2as-number2peer2.2.2.2connect-interfaceLoopBack0#ipv4-familyvpnv4peer2.2.2.2enable#ipv4-familyvpn-instancevpnaimport-routedirect#ipv4-familyvpn-instancevpnbimport-routedirect#network4.4.4.40.0.0.0network2.4.0.00.0.0.255#四、配置關鍵點:.asbr間的直連鏈路必須要使能MPLS轉(zhuǎn)發(fā)能力；.asbr間要建立MP-EBGP連接，配置類似于普通L3VPN的MP-IBGP連接；.asbr可以不用配置VPn實例，需要在bgp的vpnv4視圖下取消vpn-target策略。MSR系列路由器MPLSL3VPN跨域方案C功能的配置關鍵詞：MSR;MPLS;L3VPN;跨域;OPtionC一、組網(wǎng)需求：PeA和asbrA在AS1,peB和asbrB在AS2；PeA和peB都下掛著VPna和VPnb的站點，peA下掛vpna和vpnb站點1，PeB下掛vpna和vpnb站點2。設備清單：MSR系列路由器4臺二、組網(wǎng)圖：168.1.1;2asbr?asbιBRW=QI1.30. /?vpnaSiteI步驟：03/24E0?2.0.b2412.02.24^,—--一一3J∕?姚EBGP`vpnbSite1:ta2.4,0,1242.4.0.4/2RflOlE(VPna192.168.2,1∕2√ 1vpnaSite21適用設備和版本：MSR系列、Version5.20,Beta1105后所有版本。PeA配置#routerid3.3.3.3#ipvpn-instancevpnaroute-distinguisher3:1vpn-target1:1export-extcommunityvpn-target1:1import-extcommunityroute-distinguisher3:2vpn-target2:2export-extcommunityvpn-target2:2import-extcommunity#mplslsr-id3.3.3.3#mpls#mplsldp#interfaceEthernet0/0portlink-moderouteipaddress1.3.0.3255.255.255.0mplsmplsldp#interfaceEthernet0/1portlink-moderouteipbindingvpn-instancevpnaipaddress192.168.1.1255.255.255.0#interfaceEthernet1/0portlink-moderouteipbindingvpn-instancevpnbipaddress172.32.1.1255.255.255.0#interfaceLoopBack0ipaddress3.3.3.3255.255.255.255#bgp1undosynchronizationpeer4.4.4.4as-number2//與PeB建立EBGP連接peer1.1.1.1as-number1peer4.4.4.4ebgp-max-hop64//支持多跳EBGP連接peer4.4.4.4connect-interfaceLoopBack0//使用環(huán)回口連接peer1.1.1.1label-route-capability//使能標簽路由能力peer1.1.1.1connect-interfaceLoopBack0#ipv4-familyvpnv4peer4.4.4.4enable〃與peB交換VPn路由import-routedirect#ipv4-familyvpn-instancevpnbimport-routedirect#ospf1area0.0.0.0network3.3.3.30.0.0.0network1.3.0.00.0.0.255#asbrA配：routerid1.1.1.1#mplslsr-id1.1.1.1#mpls#mplsldp#aclnumber2000〃定義ACL用于路由策略rule5deny#interfaceEthernet0/0portlink-moderouteipaddress1.2.0.1255.255.255.0mpls〃使能MPLS流量轉(zhuǎn)發(fā)能力#interfaceEthernet0/1portlink-moderouteipaddress1.3.0.1255.255.255.0mplsmplsldp#interfaceLoopBack0ipaddress1.1.1.1255.255.255.255#bgp1network3.3.3.3255.255.255.255//引入PeA路由undosynchronizationPeer1.2.0.2as-number2peer1.2.0.2route-policyasbrBexport//應用路由策略peer1.2.0.2label-route-capability//使能標簽路由能力peer3.3.3.3route-policypeAexport//應用路由策略peer3.3.3.3label-route-capability//使能標簽路由能力peer3.3.3.3connect-interfaceLoopBack0#ospf1area0.0.0.0network1.1.1.10.0.0.0network1.3.0.00.0.0.255#route-policyasbrBpermitnode0〃對asbrB的路由策略if-matchacl2000//匹配條件applympls-label//分標簽操作route-policyPeApermitnode0〃對PeA的路由策略if-matchmpls-label//匹配條件applympls-label//分標簽#asbrB配：#mplslsr-id2.2.2.2#mpls#mplsldp#aclnumber2000〃定義ACL用于路由策略rule0permitsource4.4.4.40rule5deny#interfaceEthernet0/0portlink-moderouteipaddress1.2.0.2255.255.255.0mpls〃使能MPLS流量轉(zhuǎn)發(fā)能力#interfaceEthernet0/1portlink-moderouteipaddress2.4.0.2255.255.255.0#interfaceLoopBack0ipaddress2.2.2.2255.255.255.255#bgp2network4.4.4.4255.255.255.255〃引入PeB路由undosynchronizationPeer1.2.0.1as-number1Peer4.4.4.4as-number2Peer1.2.0.1route-PolicyasbrAexPort//應用路由策略Peer1.2.0.1label-route-caPability//使能標簽路由能力Peer4.4.4.4route-PolicyPeBexPort//應用路由策略Peer4.4.4.4label-route-caPability//使能標簽路由能力Peer4.4.4.4connect-interfaceLooPBack0#osPf1area0.0.0.0network2.2.2.20.0.0.0network2.4.0.00.0.0.255route-policyasbrApermitnode0〃對asbrA的路由策略if-matchacl2000//匹配條件applympls-label//分標簽操作route-policyPeBpermitnode0〃對PeB的路由策略if-matchmpls-label//匹配條件applympls-label//分標簽#PeB配：routerid4.4.4.4#ipvpn-instancevpnaroute-distinguisher4:1vp