H3C MSR系列路由器MPLS L3VPN跨域方案【A B C功能配置】

北京市达诺兴盛新型建筑材料有限公司

MSR系列路由器MPLS L3VPN跨域方案A功能的配置

关键词：MSR;MPLS;L3VPN;跨域;OptionA

一、组网需求：

peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下挂着vpna 和vpnb的站点，peA下挂vpna和vpnb站点1，peB下挂vpna和vpnb 站点2。

设备清单：MSR系列路由器4台

二、组网图：

三、配置步骤：

peA配置：

#

router id 3.3.3.3

页脚内容

北京市达诺兴盛新型建筑材料有限公司#

ip vpn-instance vpna

route-distinguisher 3:1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

#

ip vpn-instance vpnb

route-distinguisher 3:2

vpn-target 2:2 export-extcommunity

vpn-target 2:2 import-extcommunity

#

mpls lsr-id 3.3.3.3

#

mpls

#

mpls ldp

#

interface Ethernet0/0

port link-mode route

ip address 1.3.0.3 255.255.255.0

mpls

页脚内容

北京市达诺兴盛新型建筑材料有限公司mpls ldp

#

interface Ethernet0/1

port link-mode route

ip binding vpn-instance vpna

ip address 192.168.1.1 255.255.255.0

#

interface Ethernet1/0

port link-mode route

ip binding vpn-instance vpnb

ip address 172.32.1.1 255.255.255.0

#

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

#

bgp 1

undo synchronization

peer 1.1.1.1 as-number 1

peer 1.1.1.1 connect-interface LoopBack0

#

ipv4-family vpnv4

页脚内容

北京市达诺兴盛新型建筑材料有限公司peer 1.1.1.1 enable

#

ipv4-family vpn-instance vpna

import-route direct

#

ipv4-family vpn-instance vpnb

import-route direct

#

ospf 1

area 0.0.0.0

network 3.3.3.3 0.0.0.0

network 1.3.0.0 0.0.0.255

#

asbrA配置：

router id 1.1.1.1

#

ip vpn-instance vpna

route-distinguisher 1:1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

#

页脚内容

北京市达诺兴盛新型建筑材料有限公司

ip vpn-instance vpnb

route-distinguisher 1:2

vpn-target 2:2 export-extcommunity

vpn-target 2:2 import-extcommunity

#

mpls lsr-id 1.1.1.1

#

mpls

#

mpls ldp

#

interface Ethernet0/0.1 //asbr间用子接口区分不同vpn流量vlan-type dot1q vid 1

ip binding vpn-instance vpna

ip address 1.2.1.1 255.255.255.0

#

interface Ethernet0/0.2 //asbr间用子接口区分不同vpn流量vlan-type dot1q vid 2

ip binding vpn-instance vpnb

ip address 1.2.2.1 255.255.255.0

#

页脚内容

北京市达诺兴盛新型建筑材料有限公司

interface Ethernet0/1

port link-mode route

ip address 1.3.0.1 255.255.255.0

mpls

mpls ldp

#

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

#

bgp 1

undo synchronization

peer 3.3.3.3 as-number 1 //asbr和pe间是标准L3VPN配置

peer 3.3.3.3 connect-interface LoopBack0

#

ipv4-family vpnv4

peer 3.3.3.3 enable

#

ipv4-family vpn-instance vpna //asbr间使用PE-CE模式传vpna路由peer 1.2.1.2 as-number 2

#

ipv4-family vpn-instance vpnb //asbr间使用PE-CE模式传vpna路由

页脚内容

北京市达诺兴盛新型建筑材料有限公司peer 1.2.2.2 as-number 2

#

ospf 1

area 0.0.0.0

network 1.1.1.1 0.0.0.0

network 1.3.0.0 0.0.0.255

#

asbrB配置：

#

router id 2.2.2.2

#

ip vpn-instance vpna

route-distinguisher 2:1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

#

ip vpn-instance vpnb

route-distinguisher 2:2

vpn-target 2:2 export-extcommunity

vpn-target 2:2 import-extcommunity

#

页脚内容

北京市达诺兴盛新型建筑材料有限公司mpls lsr-id 2.2.2.2

#

mpls

#

mpls ldp

#

interface Ethernet0/0.1 //asbr间用子接口区分不同vpn流量vlan-type dot1q vid 1

ip binding vpn-instance vpna

ip address 1.2.1.2 255.255.255.0

#

interface Ethernet0/0.2 //asbr间用子接口区分不同vpn流量vlan-type dot1q vid 2

ip binding vpn-instance vpnb

ip address 1.2.2.2 255.255.255.0

#

interface Ethernet0/1

port link-mode route

ip address 2.4.0.2 255.255.255.0

mpls

mpls ldp

页脚内容

北京市达诺兴盛新型建筑材料有限公司

#

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

#

bgp 2

undo synchronization

peer 4.4.4.4 as-number 2 //asbr和pe间是标准L3VPN配置

peer 4.4.4.4 connect-interface LoopBack0

#

ipv4-family vpnv4

peer 4.4.4.4 enable

#

ipv4-family vpn-instance vpna //asbr间使用PE-CE模式传vpna路由peer 1.2.1.1 as-number 1

#

ipv4-family vpn-instance vpnb //asbr间使用PE-CE模式传vpnb路由peer 1.2.2.1 as-number 1

#

ospf 1

area 0.0.0.0

network 2.2.2.2 0.0.0.0

页脚内容

北京市达诺兴盛新型建筑材料有限公司network 2.4.0.0 0.0.0.255

#

peB配置：

router id 4.4.4.4

#

ip vpn-instance vpna

route-distinguisher 4:1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

#

ip vpn-instance vpnb

route-distinguisher 4:2

vpn-target 2:2 export-extcommunity

vpn-target 2:2 import-extcommunity

#

mpls lsr-id 4.4.4.4

#

mpls

#

mpls ldp

#

页脚内容

北京市达诺兴盛新型建筑材料有限公司interface Ethernet0/0

port link-mode route

ip address 2.4.0.4 255.255.255.0

mpls

mpls ldp

#

interface Ethernet0/1

port link-mode route

ip binding vpn-instance vpna

ip address 192.168.2.1 255.255.255.0

#

interface Ethernet1/0

port link-mode route

ip binding vpn-instance vpnb

ip address 172.32.2.1 255.255.255.0

#

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

#

bgp 2

undo synchronization

页脚内容

北京市达诺兴盛新型建筑材料有限公司

peer 2.2.2.2 as-number 2

peer 2.2.2.2 connect-interface LoopBack0

#

ipv4-family vpnv4

peer 2.2.2.2 enable

#

ipv4-family vpn-instance vpna

import-route direct

#

ipv4-family vpn-instance vpnb

import-route direct

#

ospf 1

area 0.0.0.0

network 4.4.4.4 0.0.0.0

network 2.4.0.0 0.0.0.255

#

四、配置关键点：

1.asbr间需要用不同链路隔离不同vpn流量，可以使用不同物理链路或

逻辑链路如子接口或E1/T1通道；

页脚内容

北京市达诺兴盛新型建筑材料有限公司

2.asbr间互相把对方认为CE，所以要配置在bgp的vpn实例视图下配置。MSR系列路由器MPLS L3VPN跨域方案B功能的配置

关键词：MSR;MPLS;L3VPN;跨域;OptionB

一、组网需求：

peA和asbrA在AS1，peB和asbrB在AS2；peA和peB都下挂着vpna 和vpnb的站点，peA下挂vpna和vpnb站点1，peB下挂vpna和vpnb 站点2。

设备清单：MSR系列路由器4台

二、组网图：

三、配置步骤：

适用设备和版本：MSR系列、Version 5.20, Beta 1105后所有版本。peA配置：

页脚内容

北京市达诺兴盛新型建筑材料有限公司#

router id 3.3.3.3

#

ip vpn-instance vpna

route-distinguisher 3:1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

#

ip vpn-instance vpnb

route-distinguisher 3:2

vpn-target 2:2 export-extcommunity

vpn-target 2:2 import-extcommunity

#

mpls lsr-id 3.3.3.3

#

mpls

#

mpls ldp

#

interface Ethernet0/0

port link-mode route

页脚内容

北京市达诺兴盛新型建筑材料有限公司ip address 1.3.0.3 255.255.255.0

mpls

mpls ldp

#

interface Ethernet0/1

port link-mode route

ip binding vpn-instance vpna

ip address 192.168.1.1 255.255.255.0

#

interface Ethernet1/0

port link-mode route

ip binding vpn-instance vpnb

ip address 172.32.1.1 255.255.255.0

#

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

#

bgp 1

undo synchronization

peer 1.1.1.1 as-number 1

peer 1.1.1.1 connect-interface LoopBack0

页脚内容

北京市达诺兴盛新型建筑材料有限公司#

ipv4-family vpnv4

peer 1.1.1.1 enable

#

ipv4-family vpn-instance vpna

import-route direct

#

ipv4-family vpn-instance vpnb

import-route direct

#

ospf 1

area 0.0.0.0

network 3.3.3.3 0.0.0.0

network 1.3.0.0 0.0.0.255

#

asbrA配置：

router id 1.1.1.1

#

mpls lsr-id 1.1.1.1

#

mpls

页脚内容

北京市达诺兴盛新型建筑材料有限公司#

mpls ldp

#

interface Ethernet0/0

port link-mode route

ip address 1.2.0.1 255.255.255.0

mpls //使能MPLS流量转发能力

#

interface Ethernet0/1

port link-mode route

ip address 1.3.0.1 255.255.255.0

mpls

mpls ldp

#

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

#

bgp 1

undo synchronization

peer 1.2.0.2 as-number 2 //建立EBGP连接

peer 3.3.3.3 as-number 1

页脚内容

北京市达诺兴盛新型建筑材料有限公司peer 3.3.3.3 connect-interface LoopBack0

#

ipv4-family vpnv4

undo policy vpn-target //取消vpn-target策略

peer 3.3.3.3 enable

peer 1.2.0.2 enable //向EBGP邻居发vpn所有vpn路由

#

ospf 1

area 0.0.0.0

network 1.1.1.1 0.0.0.0

network 1.3.0.0 0.0.0.255

#

asbrB配置：

#

router id 2.2.2.2

#

mpls lsr-id 2.2.2.2

#

mpls

#

mpls ldp

页脚内容

北京市达诺兴盛新型建筑材料有限公司#

interface Ethernet0/0

port link-mode route

ip address 1.2.0.2 255.255.255.0

mpls //使能MPLS流量转发能力

#

interface Ethernet0/1

port link-mode route

ip address 2.4.0.2 255.255.255.0

mpls

mpls ldp

#

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

#

bgp 2

undo synchronization

peer 1.2.0.1 as-number 1 //建立EBGP连接

peer 4.4.4.4 as-number 2

peer 4.4.4.4 connect-interface LoopBack0

#

页脚内容

北京市达诺兴盛新型建筑材料有限公司ipv4-family vpnv4

undo policy vpn-target //取消vpn-target策略

peer 4.4.4.4 enable

peer 1.2.0.1 enable //向EBGP邻居发vpn所有vpn路由

#

ospf 1

area 0.0.0.0

network 2.2.2.2 0.0.0.0

network 2.4.0.0 0.0.0.255

#

peB配置：

router id 4.4.4.4

#

ip vpn-instance vpna

route-distinguisher 4:1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

#

ip vpn-instance vpnb

route-distinguisher 4:2

vpn-target 2:2 export-extcommunity

页脚内容

北京市达诺兴盛新型建筑材料有限公司vpn-target 2:2 import-extcommunity

#

mpls lsr-id 4.4.4.4

#

mpls

#

mpls ldp

#

interface Ethernet0/0

port link-mode route

ip address 2.4.0.4 255.255.255.0

mpls

mpls ldp

#

interface Ethernet0/1

port link-mode route

ip binding vpn-instance vpna

ip address 192.168.2.1 255.255.255.0

#

interface Ethernet1/0

port link-mode route

页脚内容

本文来源：https://www.bwwdw.com/article/eppl.html