NE20E mpls vpn 2端都学习到路由但是不通

发布时间:  2016-06-19 浏览次数:  237 下载次数:  0
问题描述

1.组网如下

 

2.问题描述:TYHZL-AR02下面的某个vpn业务和BZC-AR02的vpn业务不通,路由都学习正常

<TY-BZC-AR02-NE20E>ping -vpn-instance 65102VCS103 -a 9.9.9.1  10.90.220.1       Request time out
    Request time out
    Request time out
    Request time out
    Request time out

处理过程

1.查看路由学习情况

<TY-BZC-AR02-NE20E>display  ip routing-table   vpn-instance 65102VCS103 10.90.22  verbose
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Table : 65102VCS103
Summary Count : 2


Destination: 10.90.220.0/29
     Protocol: BGP             Process ID: 0
   Preference: 255                   Cost: 0
      NextHop: 10.86.225.2      Neighbour: 10.86.224.3
        State: Active Adv GotQ        Age: 02h47m35s
          Tag: 0                 Priority: 0
        Label: 32769              QoSInfo: 0x0
RelayNextHop: 0.0.0.0          Interface: GigabitEthernet4/0/0
     TunnelID: 0x9EF9               Flags: RD  //查看有路由,且隧道迭代出来了 

Destination: 10.90.220.0/29
     Protocol: BGP             Process ID: 0
   Preference: 255                   Cost: 0
      NextHop: 10.86.225.2      Neighbour: 10.86.224.4
        State: Inactive Adv GotQ      Age: 02h47m35s
          Tag: 0                 Priority: 0
        Label: 32769              QoSInfo: 0x0

查看对端.

<TY-TYHZL-AR02-NE20E-S8>dis ip routing-table vpn-instance 65102VCS103 
   9.9.9.1

------------------------------------------------------------------------------
Routing Table : 65102VCS103
Summary Count : 1

Destination/Mask    Proto   Pre  Cost        Flags NextHop         Interface

        9.9.9.1/32  IBGP    255  0             RD 10.86.225.24    LDP LSP

 

逐跳查看lsp是否正确

<TY-TYHZL-AR02-NE20E-S8>dis mpls lsp | include  10.86.225.24
-------------------------------------------------------------------------------
                 LSP Information: LDP LSP
-------------------------------------------------------------------------------
FEC                In/Out Label    In/Out IF                      Vrf Name
10.86.225.24/32    NULL/156650     -/GE0/1/0
10.86.225.24/32    34350/156650    -/GE0/1/0

 

中间设备过程略,都是正常的,直接到TY-LN-AR02-NE20E

[~TY-LN-AR02-NE20E]dis mpls lsp | include 10.86.225.24

-------------------------------------------------------------------------------

                 LSP Information: LDP LSP

-------------------------------------------------------------------------------

FEC                In/Out Label    In/Out IF                      Vrf Name

10.86.225.24/32    35101/NULL      -/-   ///没有出接口,不符合预期

-------------------------------------------------------------------------------

                 LSP Information: BGP LSP

-------------------------------------------------------------------------------

FEC                In/Out Label    In/Out IF                      Vrf Name

 

查看和对端互联接口是否启用了mpls lsp

interface GigabitEthernet0/1/0

description TO-TY-BZ-AR02-NE20E8-G4/0/0

undo shutdown

ip address 10.86.247.22 255.255.255.252

isis enable 86

isis circuit-level level-2

isis cost 200

mpls

mpls ldp

dcn

 

查看去往10.86.225.24的路由

 

[~TY-LN-AR02-NE20E]dis ip routing-table 10.86.225.24

Route Flags: R - relay, D - download to fib, T - to vpn-instance

------------------------------------------------------------------------------

Routing Table : _public_

Summary Count : 2

 

Destination/Mask    Proto   Pre  Cost        Flags NextHop         Interface

 

   10.86.225.24/32  OSPF    10   4             D  10.74.56.18     GigabitEthernet0/1/7                        

                    OSPF    10   4             D  10.86.246.221   GigabitEthernet0/1/1  //ospf学习过来的

 

 

 

[~TY-LN-AR02-NE20E]dis  isis route  10.86.225.24

 

                         Route information for ISIS(86)

                         -----------------------------

 

                        ISIS(86) Level-2 Forwarding Table

                        --------------------------------

 

IPV4 Destination   IntCost    ExtCost ExitInterface     NextHop         Flags

-------------------------------------------------------------------------------

10.86.225.24/32    200        NULL    GE0/1/0           10.86.247.21    A/-/-/-  //发现在本端是通过isis学习到的,但是ospf的优先级高

     Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut,

                               U-Up/Down Bit Set

 

 

根因

通过查看配置发现在TY-BZC-AR02-NE20E配置了isis和ospf,且都宣告了loopback0的地址的路由. 由于这台设备还和其它ne20互联了,且链接到了TY-LN-AR02-NE20E这台设备.从而由于ospf路由优先级高于isis.导致TY-LN-AR02-NE20E收到的lsp和出接口不一致.因此转发的lsp出了问题.

解决方案

在设备TY-BZC-AR02-NE20E上的ospf 进程中不宣告loopback地址.问题解决

 

 

[TY-BZC-AR02-NE20E-ospf-1]area 2

[TY-BZC-AR02-NE20E-ospf-1-area-0.0.0.2]q

[TY-BZC-AR02-NE20E-ospf-1]undo network 10.86.225.24 0.0.0.0

 

<TY-BZC-AR02-NE20E>ping -vpn-instance 65102VCS103 10.90.220.129

  PING 10.90.220.129: 56  data bytes, press CTRL_C to break

    Reply from 10.90.220.129: bytes=56 Sequence=1 ttl=251 time=13 ms

    Reply from 10.90.220.129: bytes=56 Sequence=2 ttl=251 time=13 ms

    Reply from 10.90.220.129: bytes=56 Sequence=3 ttl=251 time=13 ms

Reply from 10.90.220.129: bytes=56 Sequence=4 ttl=251 time=13 ms

END