配置EVPN迭代静态SR-MPLS TE Policy示例

NE20E-S V800R011C10 配置指南 - Segment Routing 02

评分并提供意见反馈 :

华为采用机器翻译与人工审校相结合的方式将此文档翻译成不同语言，希望能帮助您更容易理解此文档的内容。请注意：即使是最好的机器翻译，其准确度也不及专业翻译人员的水平。华为对于翻译的准确性不承担任何责任，并建议您参考英文文档（已提供链接）。

介绍在EVPN组网中，EVPN路由通过迭代静态SR-MPLS TE Policy承载流量的配置过程。

组网需求

如图2-27所示，PE1、P1、P2和PE2属于同一自治系统，要求它们之间通过IS-IS协议达到网络互连的目的。在PE1和PE2上通过配置SR-MPLS TE Policy实现迭代SR隧道承载EVPN业务的目的。

图2-27 EVPN迭代静态SR-MPLS TE Policy组网图

本例中interface1、interface2、interface3分别代表GE0/1/0、GE0/2/0、GE0/3/0。

配置注意事项

在配置过程中，需注意以下事项：

PE与CE相连的接口绑定了VPN实例后，将删除该接口上已经配置的IP地址、路由协议等三层特性，如果需要应重新配置。

配置思路

采用如下的思路配置EVPN迭代静态SR-MPLS TE Policy：

在各个设备上配置接口IP地址。
在各个设备上配置IGP协议，实现骨干网PE和P的互通。本例中以IS-IS为例进行说明。
在各个设备上使能MPLS，配置Segment Routing和静态邻接标签。
在PE上配置SR-MPLS TE Policy，SR-MPLS TE Policy配置路径信息。
在PE上配置SBFD和HSB功能，增强SR-MPLS TE Policy可靠性。
在PE之间建立BGP EVPN对等体关系，同时应用入口策略，为路由添加扩展团体属性Color。
PE之间配置MP-IBGP交换路由信息。
PE上配置使能IPv4地址族VPN实例，并把与CE相连的接口和相应的VPN实例绑定。
在PE设备上配置隧道选择策略。
CE与PE之间配置EBGP交换路由信息。

数据准备

为完成此配置例，需准备如下的数据：

PE及P上的MPLS LSR-ID。
EVPN实例evrf1和L3VPN实例vpn1的VPN-Target和RD。

操作步骤

在各个设备上配置接口IP地址。

# 配置PE1。

<HUAWEI> system-view

[~HUAWEI] sysname PE1

[*HUAWEI] commit

[~PE1] interface loopback 1

[*PE1-LoopBack1] ip address 1.1.1.9 32

[*PE1-LoopBack1] quit

[*PE1] interface gigabitethernet0/1/0

[*PE1-GigabitEthernet0/1/0] ip address 10.11.1.1 24

[*PE1-GigabitEthernet0/1/0] quit

[*PE1] interface gigabitethernet0/2/0

[*PE1-GigabitEthernet0/2/0] ip address 10.13.1.1 24

[*PE1-GigabitEthernet0/2/0] quit

[*PE1] commit

# 配置P1。

<HUAWEI> system-view

[~HUAWEI] sysname P1

[*HUAWEI] commit

[~P1] interface loopback 1

[*P1-LoopBack1] ip address 2.2.2.9 32

[*P1-LoopBack1] quit

[*P1] interface gigabitethernet0/1/0

[*P1-GigabitEthernet0/1/0] ip address 10.11.1.2 24

[*P1-GigabitEthernet0/1/0] quit

[*P1] interface gigabitethernet0/2/0

[*P1-GigabitEthernet0/2/0] ip address 10.12.1.1 24

[*P1-GigabitEthernet0/2/0] quit

[*P1] commit

# 配置PE2。

<HUAWEI> system-view

[~HUAWEI] sysname PE2

[*HUAWEI] commit

[~PE2] interface loopback 1

[*PE2-LoopBack1] ip address 3.3.3.9 32

[*PE2-LoopBack1] quit

[*PE2] interface gigabitethernet0/1/0

[*PE2-GigabitEthernet0/1/0] ip address 10.12.1.2 24

[*PE2-GigabitEthernet0/1/0] quit

[*PE2] interface gigabitethernet0/2/0

[*PE2-GigabitEthernet0/2/0] ip address 10.14.1.2 24

[*PE2-GigabitEthernet0/2/0] quit

[*PE2] commit

# 配置P2。

<HUAWEI> system-view

[~HUAWEI] sysname P2

[*HUAWEI] commit

[~P2] interface loopback 1

[*P2-LoopBack1] ip address 4.4.4.9 32

[*P2-LoopBack1] quit

[*P2] interface gigabitethernet0/1/0

[*P2-GigabitEthernet0/1/0] ip address 10.13.1.2 24

[*P2-GigabitEthernet0/1/0] quit

[*P2] interface gigabitethernet0/2/0

[*P2-GigabitEthernet0/2/0] ip address 10.14.1.1 24

[*P2-GigabitEthernet0/2/0] quit

[*P2] commit

在各个设备上配置IGP协议，实现骨干网PE和P的互通。本例中以IS-IS为例进行说明

# 配置PE1。

[~PE1] isis 1

[*PE1-isis-1] is-level level-1

[*PE1-isis-1] network-entity 10.0000.0000.0001.00

[*PE1-isis-1] quit

[*PE1] interface loopback 1

[*PE1-LoopBack1] isis enable 1

[*PE1-LoopBack1] quit

[*PE1] interface gigabitethernet0/1/0

[*PE1-GigabitEthernet0/1/0] isis enable 1

[*PE1-GigabitEthernet0/1/0] quit

[*PE1] interface gigabitethernet0/2/0

[*PE1-GigabitEthernet0/2/0] isis enable 1

[*PE1-GigabitEthernet0/2/0] quit

[*PE1] commit

# 配置P1。

[~P1] isis 1

[*P1-isis-1] is-level level-1

[*P1-isis-1] network-entity 10.0000.0000.0002.00

[*P1-isis-1] quit

[*P1] interface loopback 1

[*P1-LoopBack1] isis enable 1

[*P1-LoopBack1] quit

[*P1] interface gigabitethernet0/1/0

[*P1-GigabitEthernet0/1/0] isis enable 1

[*P1-GigabitEthernet0/1/0] quit

[*P1] interface gigabitethernet0/2/0

[*P1-GigabitEthernet0/2/0] isis enable 1

[*P1-GigabitEthernet0/2/0] quit

[*P1] commit

# 配置PE2。

[~PE2] isis 1

[*PE2-isis-1] is-level level-1

[*PE2-isis-1] network-entity 10.0000.0000.0003.00

[*PE2-isis-1] quit

[*PE2] interface loopback 1

[*PE2-LoopBack1] isis enable 1

[*PE2-LoopBack1] quit

[*PE2] interface gigabitethernet0/1/0

[*PE2-GigabitEthernet0/1/0] isis enable 1

[*PE2-GigabitEthernet0/1/0] quit

[*PE2] interface gigabitethernet0/2/0

[*PE2-GigabitEthernet0/2/0] isis enable 1

[*PE2-GigabitEthernet0/2/0] quit

[*PE2] commit

# 配置P2。

[~P2] isis 1

[*P2-isis-1] is-level level-1

[*P2-isis-1] network-entity 10.0000.0000.0004.00

[*P2-isis-1] quit

[*P2] interface loopback 1

[*P2-LoopBack1] isis enable 1

[*P2-LoopBack1] quit

[*P2] interface gigabitethernet0/1/0

[*P2-GigabitEthernet0/1/0] isis enable 1

[*P2-GigabitEthernet0/1/0] quit

[*P2] interface gigabitethernet0/2/0

[*P2-GigabitEthernet0/2/0] isis enable 1

[*P2-GigabitEthernet0/2/0] quit

[*P2] commit

在各个设备上配置MPLS基本能力

# 配置PE1。

[~PE1] mpls lsr-id 1.1.1.9

[*PE1] mpls

[*PE1-mpls] commit

[~PE1-mpls] quit

# 配置P1。

[~P1] mpls lsr-id 2.2.2.9

[*P1] mpls

[*P1-mpls] commit

[~P1-mpls] quit

# 配置PE2。

[~PE2] mpls lsr-id 3.3.3.9

[*PE2] mpls

[*PE2-mpls] commit

[~PE2-mpls] quit

# 配置P2。

[~P2] mpls lsr-id 4.4.4.9

[*P2] mpls

[*P2-mpls] commit

[~P2-mpls] quit

在骨干网上配置Segment Routing

# 配置PE1。

[~PE1] segment-routing

[*PE1-segment-routing] ipv4 adjacency local-ip-addr 10.11.1.1 remote-ip-addr 10.11.1.2 sid 330000

[*PE1-segment-routing] ipv4 adjacency local-ip-addr 10.13.1.1 remote-ip-addr 10.13.1.2 sid 330001

[*PE1-segment-routing] quit

[*PE1] commit

[~PE1] isis 1

[*PE1-isis-1] cost-style wide

[*PE1-isis-1] segment-routing mpls

[*PE1-isis-1] quit

[*PE1] commit

# 配置P1。

[~P1] segment-routing

[*P1-segment-routing] ipv4 adjacency local-ip-addr 10.11.1.2 remote-ip-addr 10.11.1.1 sid 330003

[*P1-segment-routing] ipv4 adjacency local-ip-addr 10.12.1.1 remote-ip-addr 10.12.1.2 sid 330002

[*P1-segment-routing] quit

[*P1] commit

[~P1] isis 1

[*P1-isis-1] cost-style wide

[*P1-isis-1] segment-routing mpls

[*P1-isis-1] quit

[*P1] commit

# 配置PE2。

[~PE2] segment-routing

[*PE2-segment-routing] ipv4 adjacency local-ip-addr 10.12.1.2 remote-ip-addr 10.12.1.1 sid 330000

[*PE2-segment-routing] ipv4 adjacency local-ip-addr 10.14.1.2 remote-ip-addr 10.14.1.1 sid 330001

[*PE2-segment-routing] quit

[*PE2] commit

[~PE2] isis 1

[*PE2-isis-1] cost-style wide

[*PE2-isis-1] segment-routing mpls

[*PE2-isis-1] quit

[*PE2] commit

# 配置P2。

[~P2] segment-routing

[*P2-segment-routing] ipv4 adjacency local-ip-addr 10.13.1.2 remote-ip-addr 10.13.1.1 sid 330002

[*P2-segment-routing] ipv4 adjacency local-ip-addr 10.14.1.1 remote-ip-addr 10.14.1.2 sid 330003

[*P2-segment-routing] quit

[*P2] commit

[~P2] isis 1

[*P2-isis-1] cost-style wide

[*P2-isis-1] segment-routing mpls

[*P2-isis-1] quit

[*P2] commit

在PE上配置SR-MPLS TE Policy

# 配置PE1。

[~PE1] segment-routing

[~PE1-segment-routing] segment-list path1

[*PE1-segment-routing-segment-list] index 10 sid label 330000

[*PE1-segment-routing-segment-list] index 20 sid label 330002

[*PE1-segment-routing-segment-list] quit

[*PE1-segment-routing] segment-list path2

[*PE1-segment-routing-segment-list] index 10 sid label 330001

[*PE1-segment-routing-segment-list] index 20 sid label 330003

[*PE1-segment-routing-segment-list] quit

[*PE1-segment-routing] sr-te policy policy100 endpoint 3.3.3.9 color 100

[*PE1-segment-routing-te-policy] binding-sid 115

[*PE1-segment-routing-te-policy] mtu 1000

[*PE1-segment-routing-te-policy] candidate-path preference 100

[*PE1-segment-routing-te-policy-path] segment-list path1

[*PE1-segment-routing-te-policy-path] quit

[*PE1-segment-routing-te-policy] quit

[*PE1-segment-routing] sr-te policy policy200 endpoint 3.3.3.9 color 200

[*PE1-segment-routing-te-policy] binding-sid 215

[*PE1-segment-routing-te-policy] mtu 1000

[*PE1-segment-routing-te-policy] candidate-path preference 100

[*PE1-segment-routing-te-policy-path] segment-list path2

[*PE1-segment-routing-te-policy-path] quit

[*PE1-segment-routing-te-policy] quit

[*PE1-segment-routing] quit

[*PE1] commit

# 配置PE2。

[~PE2] segment-routing

[~PE2-segment-routing] segment-list path1

[*PE2-segment-routing-segment-list] index 10 sid label 330000

[*PE2-segment-routing-segment-list] index 20 sid label 330003

[*PE2-segment-routing-segment-list] quit

[*PE2-segment-routing] segment-list path2

[*PE2-segment-routing-segment-list] index 10 sid label 330001

[*PE2-segment-routing-segment-list] index 20 sid label 330002

[*PE2-segment-routing-segment-list] quit

[*PE2-segment-routing] sr-te policy policy100 endpoint 1.1.1.9 color 100

[*PE2-segment-routing-te-policy] binding-sid 115

[*PE2-segment-routing-te-policy] mtu 1000

[*PE2-segment-routing-te-policy] candidate-path preference 100

[*PE2-segment-routing-te-policy-path] segment-list path1

[*PE2-segment-routing-te-policy-path] quit

[*PE2-segment-routing-te-policy] quit

[*PE2-segment-routing] sr-te policy policy200 endpoint 1.1.1.9 color 200

[*PE2-segment-routing-te-policy] binding-sid 215

[*PE2-segment-routing-te-policy] mtu 1000

[*PE2-segment-routing-te-policy-path] segment-list path2

[*PE2-segment-routing-te-policy-path] quit

[*PE2-segment-routing-te-policy] quit

[*PE2-segment-routing] quit

[*PE2] commit

配置SBFD及HSB功能

# 配置PE1。

[~PE1] bfd

[*PE1-bfd] quit

[*PE1] sbfd

[*PE1-sbfd] reflector discriminator 1.1.1.9

[*PE1-sbfd] quit

[*PE1] segment-routing

[*PE1-segment-routing] sr-te-policy seamless-bfd enable

[*PE1-segment-routing] sr-te-policy backup hot-standby enable

[*PE1-segment-routing] commit

[~PE1-segment-routing] quit

# 配置PE2。

[~PE2] bfd

[*PE2-bfd] quit

[*PE2] sbfd

[*PE2-sbfd] reflector discriminator 3.3.3.9

[*PE2-sbfd] quit

[*PE2] segment-routing

[*PE2-segment-routing] sr-te-policy seamless-bfd enable

[*PE2-segment-routing] sr-te-policy backup hot-standby enable

[*PE2-segment-routing] commit

[~PE2-segment-routing] quit

在PE上配置路由策略

# 配置PE1。

[~PE1] route-policy color100 permit node 1

[*PE1-route-policy] if-match route-type evpn mac

[*PE1-route-policy] apply extcommunity color 0:100

[*PE1-route-policy] quit

[*PE1] route-policy color100 permit node 2

[*PE1-route-policy] if-match route-type evpn prefix

[*PE1-route-policy] apply extcommunity color 0:200

[*PE1-route-policy] quit

[*PE1] route-policy color100 permit node 3

[*PE1-route-policy] quit

[*PE1] commit

# 配置PE2。

[~PE2] route-policy color100 permit node 1

[*PE2-route-policy] if-match route-type evpn mac

[*PE2-route-policy] apply extcommunity color 0:100

[*PE2-route-policy] quit

[*PE2] route-policy color100 permit node 2

[*PE2-route-policy] if-match route-type evpn prefix

[*PE2-route-policy] apply extcommunity color 0:200

[*PE2-route-policy] quit

[~PE2] route-policy color100 permit node 3

[*PE2-route-policy] quit

[*PE2] commit

在PE之间建立BGP EVPN对等体关系，同时应用入口策略，为路由添加扩展团体属性Color

# 配置PE1。

[~PE1] bgp 100

[~PE1-bgp] peer 3.3.3.9 as-number 100

[*PE1-bgp] peer 3.3.3.9 connect-interface loopback 1

[*PE1-bgp] l2vpn-family evpn

[*PE1-bgp-af-evpn] peer 3.3.3.9 enable

[*PE1-bgp-af-evpn] peer 3.3.3.9 route-policy color100 import

[*PE1-bgp-af-evpn] peer 3.3.3.9 advertise irb

[*PE1-bgp-af-evpn] quit

[*PE1-bgp] quit

[*PE1] commit

# 配置PE2。

[~PE2] bgp 100

[~PE2-bgp] peer 1.1.1.9 as-number 100

[*PE2-bgp] peer 1.1.1.9 connect-interface loopback 1

[*PE2-bgp] l2vpn-family evpn

[*PE2-bgp-af-evpn] peer 1.1.1.9 enable

[*PE2-bgp-af-evpn] peer 1.1.1.9 route-policy color100 import

[*PE2-bgp-af-evpn] peer 1.1.1.9 advertise irb

[*PE2-bgp-af-evpn] quit

[*PE2-bgp] quit

[*PE2] commit

配置完成后，在PE设备上执行display bgp evpn peer命令，可以看到PE之间的BGP EVPN对等体关系已建立，并达到Established状态。以PE1的显示为例。

[~PE1] display bgp evpn peer

 BGP local router ID : 10.13.1.1
 Local AS number : 100
 Total number of peers : 1                 Peers in established state : 1

  Peer            V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State  PrefRcv
  3.3.3.9         4         100        4        4     0 00:00:28 Established        0

在PE设备上配置EVPN实例和L3VPN实例，将Site接入PE

# 配置PE1。

[~PE1] ip vpn-instance vpn1

[*PE1-vpn-instance-vpn1] ipv4-family

[*PE1-vpn-instance-vpn1-af-ipv4] route-distinguisher 100:1

[*PE1-vpn-instance-vpn1-af-ipv4] vpn-target 1:1 evpn

[*PE1-vpn-instance-vpn1-af-ipv4] evpn mpls routing-enable

[*PE1-vpn-instance-vpn1-af-ipv4] quit

[*PE1-vpn-instance-vpn1] quit

[*PE1] evpn vpn-instance evrf1 bd-mode

[*PE1-evpn-instance-evrf1] route-distinguisher 200:1

[*PE1-evpn-instance-evrf1] vpn-target 2:2

[*PE1-evpn-instance-evrf1] quit

[*PE1] evpn source-address 1.1.1.9

[*PE1] bridge-domain 10

[*PE1-bd10] evpn binding vpn-instance evrf1

[*PE1-bd10] quit

[*PE1] interface gigabitethernet0/3/0

[*PE1-GigabitEthernet0/3/0] esi 0011.1001.1001.1001.1001

[*PE1-GigabitEthernet0/3/0] quit

[*PE1] interface gigabitethernet0/3/0.1 mode l2

[*PE1-GigabitEthernet0/3/0.1] encapsulation dot1q vid 10

[*PE1-GigabitEthernet0/3/0.1] rewrite pop single

[*PE1-GigabitEthernet0/3/0.1] bridge-domain 10

[*PE1-GigabitEthernet0/3/0.1] quit

[*PE1] interface Vbdif10

[*PE1-Vbdif10] ip binding vpn-instance vpn1

[*PE1-Vbdif10] ip address 10.1.1.1 255.255.255.0

[*PE1-Vbdif10] arp collect host enable

[*PE1-Vbdif10] quit

[*PE1] bgp 100

[*PE1-bgp] ipv4-family vpn-instance vpn1

[*PE1-bgp-vpn1] import-route direct

[*PE1-bgp-vpn1] advertise l2vpn evpn

[*PE1-bgp-vpn1] quit

[*PE1-bgp] quit

[*PE1] commit

# 配置PE2。

[~PE2] ip vpn-instance vpn1

[*PE2-vpn-instance-vpn1] ipv4-family

[*PE2-vpn-instance-vpn1-af-ipv4] route-distinguisher 100:1

[*PE2-vpn-instance-vpn1-af-ipv4] vpn-target 1:1 evpn

[*PE2-vpn-instance-vpn1-af-ipv4] evpn mpls routing-enable

[*PE2-vpn-instance-vpn1-af-ipv4] quit

[*PE2-vpn-instance-vpn1] quit

[*PE2] evpn vpn-instance evrf1 bd-mode

[*PE2-evpn-instance-evrf1] route-distinguisher 200:1

[*PE2-evpn-instance-evrf1] vpn-target 2:2

[*PE2-evpn-instance-evrf1] quit

[*PE2] evpn source-address 3.3.3.9

[*PE2] bridge-domain 10

[*PE2-bd10] evpn binding vpn-instance evrf1

[*PE2-bd10] quit

[*PE2] interface gigabitethernet0/3/0

[*PE2-GigabitEthernet0/3/0] esi 0011.1001.1001.1001.1002

[*PE2-GigabitEthernet0/3/0] quit

[*PE2] interface gigabitethernet0/3/0.1 mode l2

[*PE2-GigabitEthernet0/3/0.1] encapsulation dot1q vid 10

[*PE2-GigabitEthernet0/3/0.1] rewrite pop single

[*PE2-GigabitEthernet0/3/0.1] bridge-domain 10

[*PE2-GigabitEthernet0/3/0.1] quit

[*PE2] interface Vbdif10

[*PE2-Vbdif10] ip binding vpn-instance vpn1

[*PE2-Vbdif10] ip address 10.1.1.1 255.255.255.0

[*PE2-Vbdif10] arp collect host enable

[*PE2-Vbdif10] quit

[*PE2] bgp 100

[*PE2-bgp] ipv4-family vpn-instance vpn1

[*PE2-bgp-vpn1] import-route direct

[*PE2-bgp-vpn1] advertise l2vpn evpn

[*PE2-bgp-vpn1] quit

[*PE2-bgp] quit

[*PE2] commit

在PE设备上配置隧道选择策略，优选SR-MPLS TE Policy。

# 配置PE1。

[~PE1] tunnel-policy p1

[*PE1-tunnel-policy-p1] tunnel select-seq sr-te-policy load-balance-number 1 unmix

[*PE1-tunnel-policy-p1] quit

[*PE1] ip vpn-instance vpn1

[*PE1-vpn-instance-vpn1] ipv4-family

[*PE1-vpn-instance-vpn1-af-ipv4] tnl-policy p1 evpn

[*PE1-vpn-instance-vpn1-af-ipv4] quit

[*PE1-vpn-instance-vpn1] quit

[*PE1] evpn vpn-instance evrf1 bd-mode

[*PE1-evpn-instance-evrf1] tnl-policy p1

[*PE1-evpn-instance-evrf1] quit

[*PE1] commit

# 配置PE2。

[~PE2] tunnel-policy p1

[*PE2-tunnel-policy-p1] tunnel select-seq sr-te-policy load-balance-number 1 unmix

[*PE2-tunnel-policy-p1] quit

[*PE2] ip vpn-instance vpn1

[*PE2-vpn-instance-vpn1] ipv4-family

[*PE2-vpn-instance-vpn1-af-ipv4] tnl-policy p1 evpn

[*PE2-vpn-instance-vpn1-af-ipv4] quit

[*PE2-vpn-instance-vpn1] quit

[*PE2] evpn vpn-instance evrf1 bd-mode

[*PE2-evpn-instance-evrf1] tnl-policy p1

[*PE2-evpn-instance-evrf1] quit

[*PE2] commit

检查配置结果

在PE1设备上执行display bgp evpn all routing-table prefix-route命令，可以看到PE2发来的IP前缀路由信息。

[~PE1] display bgp evpn all routing-table prefix-route

 Local AS number : 100

 BGP Local router ID is 10.13.1.1
 Status codes: * - valid, > - best, d - damped, x - best external, a - add path,
               h - history,  i - internal, s - suppressed, S - Stale
               Origin : i - IGP, e - EGP, ? - incomplete

 
 EVPN address family:
 Number of Ip Prefix Routes: 2
 Route Distinguisher: 100:1
       Network(EthTagId/IpPrefix/IpPrefixLen)                 NextHop
 *>    0:10.1.1.0:24                                          0.0.0.0
 *>i   0:10.2.1.0:24                                          3.3.3.9

在PE1设备上执行display bgp evpn all routing-table prefix-route 0:10.2.1.0:24命令，可以看到PE2发来的IP前缀路由信息。

[~PE1] display bgp evpn all routing-table prefix-route 0:10.2.1.0:24

 BGP local router ID : 10.13.1.1
 Local AS number : 100
 Total routes of Route Distinguisher(100:1): 1
 BGP routing table entry information of 0:10.2.1.0:24:
 Label information (Received/Applied): 330000/NULL
 From: 3.3.3.9 (10.12.1.2) 
 Route Duration: 0d00h09m04s
 Relay IP Nexthop: 10.11.1.2
 Relay IP Out-Interface:GigabitEthernet0/1/0
 Relay Tunnel Out-Interface: SRBE LSP
 Original nexthop: 3.3.3.9
 Qos information : 0x0
 Ext-Community: RT <1 : 1>, Color <0 : 200>
 AS-path Nil, origin incomplete, MED 0, localpref 100, pref-val 0, valid, internal, best, select, pre 255, IGP cost 20
 Route Type: 5 (Ip Prefix Route)
 Ethernet Tag ID: 0, IP Prefix/Len: 10.2.1.0/24, ESI: 0000.0000.0000.0000.0000, GW IP Address: 0.0.0.0
 Not advertised to any peer yet

在PE1设备上执行display ip routing-table vpn-instance vpn1命令，可以看到PE2发来的私网路由信息。

[~PE1] display ip routing-table vpn-instance vpn1

Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route
------------------------------------------------------------------------------
Routing Table : vpn1
         Destinations : 6        Routes : 6         

Destination/Mask    Proto   Pre  Cost        Flags NextHop         Interface

       10.1.1.0/24  Direct  0    0             D   10.1.1.1        Vbdif10
       10.1.1.1/32  Direct  0    0             D   127.0.0.1       Vbdif10
     10.1.1.255/32  Direct  0    0             D   127.0.0.1       Vbdif10
       10.2.1.0/24  IBGP    255  0             RD  3.3.3.9         SR TE Policy
      127.0.0.0/8   Direct  0    0             D   127.0.0.1       InLoopBack0
255.255.255.255/32  Direct  0    0             D   127.0.0.1       InLoopBack0

在PE1设备上执行display bgp evpn all routing-table mac-route命令，可以看到PE2发来的MAC路由信息。

[~PE1] display bgp evpn all routing-table mac-route

 Local AS number : 100

 BGP Local router ID is 10.13.1.1
 Status codes: * - valid, > - best, d - damped, x - best external, a - add path,
               h - history,  i - internal, s - suppressed, S - Stale
               Origin : i - IGP, e - EGP, ? - incomplete

 
 EVPN address family:
 Number of Mac Routes: 4
 Route Distinguisher: 200:1
       Network(EthTagId/MacAddrLen/MacAddr/IpAddrLen/IpAddr)  NextHop
 *>i   0:48:38ba-2e49-fa04:0:0.0.0.0                          3.3.3.9
 *>i   0:48:38ba-2e49-fa04:32:10.2.1.1                        3.3.3.9
 *>    0:48:38ba-d70d-3801:0:0.0.0.0                          0.0.0.0
 *>    0:48:38ba-d70d-3801:32:10.1.1.1                        0.0.0.0
    

 EVPN-Instance evrf1:
 Number of Mac Routes: 4
       Network(EthTagId/MacAddrLen/MacAddr/IpAddrLen/IpAddr)  NextHop
 *>i   0:48:38ba-2e49-fa04:0:0.0.0.0                          3.3.3.9
 *>i   0:48:38ba-2e49-fa04:32:10.2.1.1                        3.3.3.9
 *>    0:48:38ba-d70d-3801:0:0.0.0.0                          0.0.0.0
 *>    0:48:38ba-d70d-3801:32:10.1.1.1                        0.0.0.0

在PE1设备上执行display bgp evpn all routing-table mac-route 0:48:38ba-2e49-fa04:0:0.0.0.0命令，可以看到PE2发来的MAC路由的详细信息。

[~PE1] display bgp evpn all routing-table mac-route 0:48:38ba-2e49-fa04:0:0.0.0.0

 BGP local router ID : 10.13.1.1
 Local AS number : 100
 Total routes of Route Distinguisher(200:1): 1
 BGP routing table entry information of 0:48:38ba-2e49-fa04:0:0.0.0.0:
 Label information (Received/Applied): 330000/NULL
 From: 3.3.3.9 (10.12.1.2) 
 Route Duration: 0d00h01m49s
 Relay IP Nexthop: 10.11.1.2
 Relay IP Out-Interface:GigabitEthernet0/1/0
 Relay Tunnel Out-Interface: SRBE LSP
 Original nexthop: 3.3.3.9
 Qos information : 0x0
 Ext-Community: RT <2 : 2>, Color <0 : 100>, Mac Mobility <flag:1 seq:0 res:0>
 AS-path Nil, origin incomplete, localpref 100, pref-val 0, valid, internal, best, select, pre 255, IGP cost 20
 Route Type: 2 (MAC Advertisement Route)
 Ethernet Tag ID: 0, MAC Address/Len: 38ba-2e49-fa04/48, IP Address/Len: 0.0.0.0/0, ESI:0000.0000.0000.0000.0000
 Not advertised to any peer yet
 
    

 EVPN-Instance evrf1:
 Number of Mac Routes: 1
 BGP routing table entry information of 0:48:38ba-2e49-fa04:0:0.0.0.0:
 Route Distinguisher: 200:1
 Remote-Cross route
 Label information (Received/Applied): 330000/NULL
 From: 3.3.3.9 (10.12.1.2) 
 Route Duration: 2d02h23m40s
 Relay Tunnel Out-Interface: SR TE Policy
 Original nexthop: 3.3.3.9
 Qos information : 0x0
 Ext-Community: RT <2 : 2>, Color <0 : 100>, Mac Mobility <flag:1 seq:0 res:0>
 AS-path Nil, origin incomplete, localpref 100, pref-val 0, valid, internal, best, select, pre 255
 Route Type: 2 (MAC Advertisement Route)
 Ethernet Tag ID: 0, MAC Address/Len: 38ba-2e49-fa04/48, IP Address/Len: 0.0.0.0/0, ESI:0000.0000.0000.0000.0000
 Not advertised to any peer yet

配置文件

PE1的配置文件

#
sysname PE1
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 200:1
 tnl-policy p1
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 100:1
  vpn-target 1:1 export-extcommunity evpn
  vpn-target 1:1 import-extcommunity evpn
  tnl-policy p1 evpn
  evpn mpls routing-enable
#
bfd
#
sbfd
 reflector discriminator 1.1.1.9
#
mpls lsr-id 1.1.1.9
#
mpls
#
bridge-domain 10
 evpn binding vpn-instance evrf1
#
segment-routing
 ipv4 adjacency local-ip-addr 10.11.1.1 remote-ip-addr 10.11.1.2 sid 330000
 ipv4 adjacency local-ip-addr 10.13.1.1 remote-ip-addr 10.13.1.2 sid 330001
 sr-te-policy backup hot-standby enable
 sr-te-policy seamless-bfd enable
 segment-list path1
  index 10 sid label 330000
  index 20 sid label 330002
 segment-list path2
  index 10 sid label 330001
  index 20 sid label 330003
 sr-te policy policy100 endpoint 3.3.3.9 color 100
  binding-sid 115
  mtu 1000
  candidate-path preference 100
   segment-list path1
 sr-te policy policy200 endpoint 3.3.3.9 color 200
  binding-sid 215
  mtu 1000
  candidate-path preference 100
   segment-list path2
#
isis 1
 is-level level-1
 cost-style wide
 network-entity 10.0000.0000.0001.00
 segment-routing mpls
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ip address 10.1.1.1 255.255.255.0
 arp collect host enable
#
interface GigabitEthernet0/1/0
 undo shutdown
 ip address 10.11.1.1 255.255.255.0
 isis enable 1
#
interface GigabitEthernet0/2/0
 undo shutdown
 ip address 10.13.1.1 255.255.255.0
 isis enable 1
#
interface GigabitEthernet0/3/0
 undo shutdown
 esi 0011.1001.1001.1001.1001
#
interface GigabitEthernet0/3/0.1 mode l2
 encapsulation dot1q vid 10
 rewrite pop single
 bridge-domain 10
#
interface LoopBack1
 ip address 1.1.1.9 255.255.255.255
 isis enable 1
#
bgp 100
 peer 3.3.3.9 as-number 100
 peer 3.3.3.9 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.9 enable
 #
 ipv4-family vpn-instance vpn1
  import-route direct
  advertise l2vpn evpn
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 3.3.3.9 enable
  peer 3.3.3.9 route-policy color100 import
  peer 3.3.3.9 advertise irb
#
route-policy color100 permit node 1
 if-match route-type evpn mac
 apply extcommunity color 0:100
#
route-policy color100 permit node 2
 if-match route-type evpn prefix
 apply extcommunity color 0:200
#
route-policy color100 permit node 3
#
tunnel-policy p1
 tunnel select-seq sr-te-policy load-balance-number 1 unmix
#
evpn source-address 1.1.1.9
#
return

P1的配置文件

#
sysname P1
#
mpls lsr-id 2.2.2.9
#
mpls
#
segment-routing
 ipv4 adjacency local-ip-addr 10.11.1.2 remote-ip-addr 10.11.1.1 sid 330003
 ipv4 adjacency local-ip-addr 10.12.1.1 remote-ip-addr 10.12.1.2 sid 330002
#
isis 1
 is-level level-1
 cost-style wide
 network-entity 10.0000.0000.0002.00
 segment-routing mpls
#
interface GigabitEthernet0/1/0
 undo shutdown
 ip address 10.11.1.2 255.255.255.0
 isis enable 1
#
interface GigabitEthernet0/2/0
 undo shutdown
 ip address 10.12.1.1 255.255.255.0
 isis enable 1
#
interface LoopBack1
 ip address 2.2.2.9 255.255.255.255
 isis enable 1
#
return

P2的配置文件

#
sysname P2
#
mpls lsr-id 4.4.4.9
#
mpls
#
segment-routing
 ipv4 adjacency local-ip-addr 10.13.1.2 remote-ip-addr 10.13.1.1 sid 330002
 ipv4 adjacency local-ip-addr 10.14.1.1 remote-ip-addr 10.14.1.2 sid 330003
#
isis 1
 is-level level-1
 cost-style wide
 network-entity 10.0000.0000.0004.00
 segment-routing mpls
#
interface GigabitEthernet0/1/0
 undo shutdown
 ip address 10.13.1.2 255.255.255.0
 isis enable 1
#
interface GigabitEthernet0/2/0
 undo shutdown
 ip address 10.14.1.1 255.255.255.0
 isis enable 1
#
interface LoopBack1
 ip address 4.4.4.9 255.255.255.255
 isis enable 1
#
return

PE2的配置文件

#
sysname PE2
#
evpn vpn-instance evrf1 bd-mode
 route-distinguisher 200:1
 tnl-policy p1
 vpn-target 2:2 export-extcommunity
 vpn-target 2:2 import-extcommunity
#
ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 100:1
  vpn-target 1:1 export-extcommunity evpn
  vpn-target 1:1 import-extcommunity evpn
  tnl-policy p1 evpn
  evpn mpls routing-enable
#
bfd
#
sbfd
 reflector discriminator 3.3.3.9
#
mpls lsr-id 3.3.3.9
#
mpls
#
bridge-domain 10
 evpn binding vpn-instance evrf1
#
segment-routing
 ipv4 adjacency local-ip-addr 10.12.1.2 remote-ip-addr 10.12.1.1 sid 330000
 ipv4 adjacency local-ip-addr 10.14.1.2 remote-ip-addr 10.14.1.1 sid 330001
 sr-te-policy backup hot-standby enable
 sr-te-policy seamless-bfd enable
 segment-list path1
  index 10 sid label 330000
  index 20 sid label 330003
 segment-list path2
  index 10 sid label 330001
  index 20 sid label 330002
 sr-te policy policy100 endpoint 1.1.1.9 color 100
  binding-sid 115
  mtu 1000
  candidate-path preference 100
   segment-list path1
 sr-te policy policy200 endpoint 1.1.1.9 color 200
  binding-sid 215
  mtu 1000
  candidate-path preference 200
   segment-list path2
#
isis 1
 is-level level-1
 cost-style wide
 network-entity 10.0000.0000.0003.00
 segment-routing mpls
#
interface Vbdif10
 ip binding vpn-instance vpn1
 ip address 10.2.1.1 255.255.255.0
 arp collect host enable
#
interface GigabitEthernet0/1/0
 undo shutdown
 ip address 10.12.1.2 255.255.255.0
 isis enable 1
#
interface GigabitEthernet0/2/0
 undo shutdown
 ip address 10.14.1.2 255.255.255.0
 isis enable 1
#
interface GigabitEthernet0/3/0
 undo shutdown
 esi 0011.1001.1001.1001.1002
#
interface GigabitEthernet0/3/0.1 mode l2
 encapsulation dot1q vid 10
 rewrite pop single
 bridge-domain 10
#
interface LoopBack1
 ip address 3.3.3.9 255.255.255.255
 isis enable 1
#
bgp 100
 peer 1.1.1.9 as-number 100
 peer 1.1.1.9 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.9 enable
 #
 ipv4-family vpn-instance vpn1
  import-route direct
  advertise l2vpn evpn
 #
 l2vpn-family evpn
  undo policy vpn-target
  peer 1.1.1.9 enable
  peer 1.1.1.9 route-policy color100 import
  peer 1.1.1.9 advertise irb
#
route-policy color100 permit node 1
 if-match route-type evpn mac
 apply extcommunity color 0:100
#
route-policy color100 permit node 2
 if-match route-type evpn prefix
 apply extcommunity color 0:200
#
route-policy color100 permit node 3
#
tunnel-policy p1
 tunnel select-seq sr-te-policy load-balance-number 1 unmix
#
evpn source-address 3.3.3.9
#
return

翻译

English

下载文档

更新时间：2020-02-07

文档编号：EDOC1100125618

浏览量：2144

下载量：14

平均得分:

本文档适用于这些产品

提示

组网需求

配置注意事项

配置思路

数据准备

操作步骤

配置文件

相关版本

相关文档

关于华为

如何购买

合作伙伴

资源

快速链接

企业业务App

提示

企业用户

集团网站

个人用户

运营商用户

AFRICA

LATIN AMERICA

MIDDLE EAST

ASIA PACIFIC

NORTH AMERICA

EUROPE

配置EVPN迭代静态SR-MPLS TE Policy示例

组网需求

配置注意事项

配置思路

数据准备

操作步骤

配置文件

相关版本

相关文档

关于华为

如何购买

合作伙伴

资源

快速链接

企业业务App