配置OptionA方式跨域BGP AD VPLS示例

NetEngine 8000 X V800R012C00SPC300 配置指南 - VPN 04

评分并提供意见反馈 :

华为采用机器翻译与人工审校相结合的方式将此文档翻译成不同语言，希望能帮助您更容易理解此文档的内容。请注意：即使是最好的机器翻译，其准确度也不及专业翻译人员的水平。华为对于翻译的准确性不承担任何责任，并建议您参考英文文档（已提供链接）。

当跨域VPLS数量比较少时可以采用此方案。

组网需求

如图10-31，CE1和CE2属于同一个VPLS，分别通过AS100内的PE1和AS200内的PE2接入骨干网。

由于VPLS数量较少，因此本示例采用OptionA方式跨域BGP AD VPLS，ASBR间的接口被当作AC接口与VSI实例绑定，实现CE1与CE2的互通。

图10-31 配置OptionA方式跨域BGP AD VPLS组网图

本示例中interface1，subinterface1.1，inerface2，subinterface2.1分别代表GE1/0/0，GE1/0/0.1，GE2/0/0，GE2/0/0.1。

配置思路

采用如下的思路配置OptionA方式跨域BGP AD VPLS示例

在骨干网上运行IGP协议实现ASBR与PE之间的互通，并且PE之间要建立隧道。
PE与域内的ASBR建立MP-IBGP对等体关系。
在PE1、ASBR1、ASBR2和PE2上配置VSI实例，并与AC接口绑定。

数据准备

为完成此配置例，需准备如下的数据：

PE、ASBR的MPLS LSR ID。
CE-ID和CE range。
CE上接入PE的接口IP地址。PE上接入CE的接口无需配置IP地址。
PE上VSI的RD和VPN-Target，VSI所属的Site ID。

操作步骤

配置各设备接口的IP地址

# 配置CE1。

<HUAWEI> system-view

[~HUAWEI] sysname CE1

[*HUAWEI] commit

[*CE1] interface gigabitethernet 1/0/0.1

[*CE1-GigabitEthernet1/0/0.1] ip address 10.1.1.1 24

[*CE1-GigabitEthernet1/0/0.1] quit

[*CE1] commit

# 配置PE1。

<HUAWEI> system-view

[~HUAWEI] sysname PE1

[*HUAWEI] commit

[~PE1] interface loopback1

[*PE1-Loopback1] ip address 1.1.1.1 32

[*PE1-Loopback1] quit

[*PE1] interface gigabitethernet 2/0/0

[*PE1-GigabitEthernet2/0/0] ip address 10.10.1.1 24

[*PE1-GigabitEthernet2/0/0] quit

[*PE1] commit

# 配置ASBR1。

<HUAWEI> system-view

[~HUAWEI] sysname ASBR1

[*HUAWEI] commit

[~ASBR1] interface loopback1

[*ASBR1-Loopback1] ip address 2.2.2.2 32

[*ASBR1-Loopback1] quit

[*ASBR1] interface gigabitethernet 1/0/0

[*ASBR1-GigabitEthernet1/0/0] ip address 10.10.1.2 24

[*ASBR1-GigabitEthernet1/0/0] quit

[*ASBR1] commit

# 配置ASBR2。

<HUAWEI> system-view

[~HUAWEI] sysname ASBR2

[*HUAWEI] commit

[~ASBR2] interface loopback1

[*ASBR2-Loopback1] ip address 3.3.3.3 32

[*ASBR2-Loopback1] quit

[*ASBR2] interface gigabitethernet 2/0/0

[*ASBR2-GigabitEthernet2/0/0] ip address 10.20.1.1 24

[*ASBR2-GigabitEthernet2/0/0] quit

[*ASBR2] commit

# 配置PE2。

<HUAWEI> system-view

[~HUAWEI] sysname PE2

[*HUAWEI] commit

[~PE2] interface loopback1

[*PE2-Loopback1] ip address 4.4.4.4 32

[*PE2-Loopback1] quit

[*PE2] interface gigabitethernet 1/0/0

[*PE2-GigabitEthernet1/0/0] ip address 10.20.1.2 24

[*PE2-GigabitEthernet1/0/0] quit

[*PE2] commit

# 配置CE2。

<HUAWEI> system-view

[~HUAWEI] sysname CE2

[~HUAWEI] commit

[*CE2] interface gigabitethernet 1/0/0.1

[*CE2-GigabitEthernet1/0/0.1] ip address 10.1.1.2 24

[*CE2-GigabitEthernet1/0/0.1] quit

[*CE2] commit

配置骨干网的IGP协议

# 配置PE1。

[~PE1] ospf 1

[*PE1-ospf-1] area 0.0.0.0

[*PE1-ospf-1-area-0.0.0.0] network 1.1.1.1 0.0.0.0

[*PE1-ospf-1-area-0.0.0.0] network 10.10.1.0 0.0.0.255

[*PE1-ospf-1-area-0.0.0.0] quit

[*PE1-ospf-1] quit

[*PE1] commit

# 配置ASBR1。

[~ASBR1] ospf 1

[*ASBR1-ospf-1] area 0.0.0.0

[*ASBR1-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0

[*ASBR1-ospf-1-area-0.0.0.0] network 10.10.1.0 0.0.0.255

[*ASBR1-ospf-1-area-0.0.0.0] quit

[*ASBR1-ospf-1] quit

[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] ospf 1

[*ASBR2-ospf-1] area 0.0.0.0

[*ASBR2-ospf-1-area-0.0.0.0] network 3.3.3.3 0.0.0.0

[*ASBR2-ospf-1-area-0.0.0.0] network 10.20.1.0 0.0.0.255

[*ASBR2-ospf-1-area-0.0.0.0] quit

[*ASBR2-ospf-1] quit

[*ASBR2] commit

# 配置PE2。

[~PE2] ospf 1

[*PE2-ospf-1] area 0.0.0.0

[*PE2-ospf-1-area-0.0.0.0] network 4.4.4.4 0.0.0.0

[*PE2-ospf-1-area-0.0.0.0] network 10.20.1.0 0.0.0.255

[*PE2-ospf-1-area-0.0.0.0] quit

[*PE2-ospf-1] quit

[*PE2] commit

使能MPLS，建立LSP隧道

# 配置PE1。

[~PE1] mpls lsr-id 1.1.1.1

[*PE1] mpls

[*PE1-mpls] quit

[*PE1] mpls ldp

[*PE1-mpls-ldp] quit

[*PE1] inerface gigabitethernet 2/0/0

[*PE1-GigabitEthernet2/0/0] mpls

[*PE1-GigabitEthernet2/0/0] mpls ldp

[*PE1-GigabitEthernet2/0/0] quit

[*PE1] commit

# 配置ASBR1。

[~ASBR1] mpls lsr-id 2.2.2.2

[*ASBR1] mpls

[*ASBR1-mpls] quit

[*ASBR1] mpls ldp

[*ASBR1-mpls-ldp] quit

[*ASBR1] inerface gigabitethernet 1/0/0

[*ASBR1-GigabitEthernet1/0/0] mpls

[*ASBR1-GigabitEthernet1/0/0] mpls ldp

[*ASBR1-GigabitEthernet1/0/0] quit

[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] mpls lsr-id 3.3.3.3

[*ASBR2] mpls

[*ASBR2-mpls] quit

[*ASBR2] mpls ldp

[*ASBR2-mpls-ldp] quit

[*ASBR2] inerface gigabitethernet 2/0/0

[*ASBR2-GigabitEthernet2/0/0] mpls

[*ASBR2-GigabitEthernet2/0/0] mpls ldp

[*ASBR2-GigabitEthernet2/0/0] quit

[*ASBR2] commit

# 配置PE2。

[~PE2] mpls lsr-id 4.4.4.4

[*PE2] mpls

[*PE2-mpls] quit

[*PE2] mpls ldp

[*PE2-mpls-ldp] quit

[*PE2] inerface gigabitethernet 1/0/0

[*PE2-GigabitEthernet1/0/0] mpls

[*PE2-GigabitEthernet1/0/0] mpls ldp

[*PE2-GigabitEthernet1/0/0] quit

[*PE2] commit

配置域内的MP-IBGP连接

# 配置PE1。

[~PE1] bgp 100

[*PE1-bgp] peer 2.2.2.2 as-number 100

[*PE1-bgp] peer 2.2.2.2 connect-interface loopback 1

[*PE1-bgp] l2vpn-ad-family

[*PE1-bgp-af-l2vpn-ad] peer 2.2.2.2 enable

[*PE1-bgp-af-l2vpn-ad] quit

[*PE1-bgp] quit

[*PE1] commit

# 配置ASBR1。

[~ASBR1] bgp 100

[*ASBR1-bgp] peer 1.1.1.1 as-number 100

[*ASBR1-bgp] peer 1.1.1.1 connect-interface loopback 1

[*ASBR1-bgp] l2vpn-ad-family

[*ASBR1-bgp-af-l2vpn-ad] peer 1.1.1.1 enable

[*ASBR1-bgp-af-l2vpn-ad] quit

[*ASBR1-bgp] quit

[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] bgp 200

[*ASBR2-bgp] peer 4.4.4.4 as-number 200

[*ASBR2-bgp] peer 4.4.4.4 connect-interface loopback 1

[*ASBR2-bgp] l2vpn-ad-family

[*ASBR2-bgp-af-l2vpn-ad] peer 4.4.4.4 enable

[*ASBR2-bgp-af-l2vpn-ad] quit

[*ASBR2-bgp] quit

[*ASBR2] commit

# 配置PE2。

[~PE2] bgp 200

[*PE2-bgp] peer 3.3.3.3 as-number 200

[*PE2-bgp] peer 3.3.3.3 connect-interface loopback 1

[*PE2-bgp] l2vpn-ad-family

[*PE2-bgp-af-l2vpn-ad] peer 3.3.3.3 enable

[*PE2-bgp-af-l2vpn-ad] quit

[*PE2-bgp] quit

[*PE2] commit

完成此步骤后，在PE或ASBR上执行display bgp l2vpn-ad peer命令，可看到MP-IBGP对等体连接状态为“Established”。以PE1的显示为例：

[~PE1] display bgp l2vpn-ad peer

 
 BGP local router ID : 10.10.1.1
 Local AS number : 100
 Total number of peers : 1                 Peers in established state : 1

  Peer            V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State  PrefRcv
  2.2.2.2         4         100       97       97     0 01:18:54 Established       1

配置BGP AD方式VPLS

# 配置PE1。

[~PE1] mpls l2vpn

[*PE1] quit

[*PE1] vsi vplsad1

[*PE1-vsi-vplsad1] bgp-ad

[*PE1-vsi-vplsad1-bgpad] vpls-id 100:1

[*PE1-vsi-vplsad1-bgpad] vpn-target 200:1 import-extcommunity

[*PE1-vsi-vplsad1-bgpad] vpn-target 200:1 export-extcommunity

[*PE1-vsi-vplsad1-bgpad] quit

[*PE1-vsi-vplsad1] quit

[*PE1] interface gigabitethernet1/0/0.1

[*PE1-GigabitEthernet1/0/0.1] vlan-type dot1q 10

[*PE1-GigabitEthernet1/0/0.1] l2 binding vsi vplsad1

[*PE1-GigabitEthernet1/0/0.1] quit

[*PE1] commit

# 配置ASBR1。

[~ASBR1] mpls l2vpn

[*ASBR1] quit

[*ASBR1] vsi vplsad1

[*ASBR1-vsi-vplsad1] bgp-ad

[*ASBR1-vsi-vplsad1-bgpad] vpls-id 100:1

[*ASBR1-vsi-vplsad1-bgpad] vpn-target 200:1 import-extcommunity

[*ASBR1-vsi-vplsad1-bgpad] vpn-target 200:1 export-extcommunity

[*ASBR1-vsi-vplsad1-bgpad] quit

[*ASBR1-vsi-vplsad1] quit

[*ASBR1] interface gigabitethernet2/0/0.1

[*ASBR1-GigabitEthernet2/0/0.1] vlan-type dot1q 10

[*ASBR1-GigabitEthernet2/0/0.1] l2 binding vsi vplsad1

[*ASBR1-GigabitEthernet2/0/0.1] quit

[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] mpls l2vpn

[*ASBR2] quit

[*ASBR2] vsi vplsad1

[*ASBR2-vsi-vplsad1] bgp-ad

[*ASBR2-vsi-vplsad1-bgpad] vpls-id 100:1

[*ASBR2-vsi-vplsad1-bgpad] vpn-target 200:1 import-extcommunity

[*ASBR2-vsi-vplsad1-bgpad] vpn-target 200:1 export-extcommunity

[*ASBR2-vsi-vplsad1-bgpad] quit

[*ASBR2-vsi-vplsad1] quit

[*ASBR2] interface gigabitethernet1/0/0.1

[*ASBR2-GigabitEthernet1/0/0.1] vlan-type dot1q 10

[*ASBR2-GigabitEthernet1/0/0.1] l2 binding vsi vplsad1

[*ASBR2-GigabitEthernet1/0/0.1] quit

[*ASBR2] commit

# 配置PE2。

[*PE2] mpls l2vpn

[*PE2] quit

[*PE2] vsi vplsad1

[*PE2-vsi-vplsad1] bgp-ad

[*PE2-vsi-vplsad1-bgpad] vpls-id 100:1

[*PE2-vsi-vplsad1-bgpad] vpn-target 200:1 import-extcommunity

[*PE2-vsi-vplsad1-bgpad] vpn-target 200:1 export-extcommunity

[*PE2-vsi-vplsad1-bgpad] quit

[*PE2-vsi-vplsad1] quit

[~PE2] interface gigabitethernet2/0/0.1

[*PE2-GigabitEthernet2/0/0.1] vlan-type dot1q 10

[*PE2-GigabitEthernet2/0/0.1] l2 binding vsi vplsad1

[*PE2-GigabitEthernet2/0/0.1] quit

[*PE2] commit

配置CE允许VLAN 10的报文通过

# 配置CE1。

[~CE1] interface gigabitethernet1/0/0.1

[*CE1-GigabitEthernet1/0/0.1] vlan-type dot1q 10

[*CE1-GigabitEthernet1/0/0.1] quit

[*CE1] commit

# 配置CE2。

[~CE2] interface gigabitethernet1/0/0.1

[*CE2-GigabitEthernet1/0/0.1] vlan-type dot1q 10

[*CE2-GigabitEthernet1/0/0.1] quit

[*CE2] commit

完成此步骤后，在PE或ASBR上执行display vsi命令，可看到VSI的状态为“up”。以PE1的显示为例：

[~PE1] display vsi

Total VSI number is 1, 1 is up, 0 is down, 0 is LDP mode, 0 is BGP mode, 1 is BGPAD mode, 0 is mixed mode, 0 is unspecified mode
--------------------------------------------------------------------------
Vsi                             Mem    PW    Mac       Encap     Mtu   Vsi
Name                            Disc   Type  Learn     Type      Value State
--------------------------------------------------------------------------
bgpad1                          --     bgpad unqualify vlan      1500  up

检验配置结果

完成上述配置后，CE1与CE2可以相互ping通。以CE1的显示为例：

[~CE1] ping 10.1.1.2

  PING 10.1.1.2: 56  data bytes, press CTRL_C to break
    Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=8 ms
    Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=3 ms
    Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=3 ms
    Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=3 ms
    Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=4 ms

  --- 10.1.1.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 3/4/8 ms

配置文件

CE1的配置文件

#
sysname CE1
#
interface GigabitEthernet1/0/0
 undo shutdown
#
interface GigabitEthernet1/0/0.1
 undo shutdown
 vlan-type dot1q 10
 ip address 10.1.1.1 255.255.255.0
#
return

PE1的配置文件

#
sysname PE1
#
mpls lsr-id 1.1.1.1
#
mpls
#
mpls l2vpn
#
vsi bgpad1
 bgp-ad
  vpls-id 100:1
  vpn-target 200:1 import-extcommunity
  vpn-target 200:1 export-extcommunity
#               
mpls ldp        
#                           
interface GigabitEthernet1/0/0
 undo shutdown
#
interface GigabitEthernet1/0/0.1
 vlan-type dot1q 10
 l2 binding vsi bgpad1
#                     
interface GigabitEthernet2/0/0
 undo shutdown  
 ip address 10.10.1.1 255.255.255.0
 mpls           
 mpls ldp       
#               
interface LoopBack1
 ip address 1.1.1.1 255.255.255.255
#                      
bgp 100         
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
  peer 2.2.2.2 enable
 #              
 l2vpn-ad-family
  policy vpn-target
  peer 2.2.2.2 enable
#               
ospf 1          
 area 0.0.0.0   
  network 1.1.1.1 0.0.0.0
  network 10.10.1.0 0.0.0.255
#               
return

ASBR1的配置文件

#
sysname ASBR1
#
mpls lsr-id 2.2.2.2
#
mpls
#
mpls l2vpn
#
vsi bgpad1
 bgp-ad
  vpls-id 100:1
  vpn-target 200:1 import-extcommunity
  vpn-target 200:1 export-extcommunity
#               
mpls ldp         
#               
interface GigabitEthernet2/0/0
 undo shutdown  
#               
interface GigabitEthernet2/0/0.1
 vlan-type dot1q 10
 l2 binding vsi bgpad1
#               
interface GigabitEthernet1/0/0
 undo shutdown  
 ip address 10.10.1.2 255.255.255.0
 mpls           
 mpls ldp       
#               
interface LoopBack1
 ip address 2.2.2.2 255.255.255.255
#                           
bgp 100         
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
 #              
 l2vpn-ad-family
  policy vpn-target
  peer 1.1.1.1 enable
#               
ospf 1          
 area 0.0.0.0   
  network 2.2.2.2 0.0.0.0
  network 10.10.1.0 0.0.0.255
#               
return

ASBR2的配置文件

#
sysname ASBR2
#
mpls lsr-id 3.3.3.3
#
mpls
#
mpls l2vpn
#
vsi bgpad1
 bgp-ad
  vpls-id 100:1
  vpn-target 200:1 import-extcommunity
  vpn-target 200:1 export-extcommunity
#               
mpls ldp        
#                            
interface GigabitEthernet2/0/0
 undo shutdown  
 ip address 10.20.1.1 255.255.255.0
 mpls           
 mpls ldp                 
#               
interface GigabitEthernet1/0/0
 undo shutdown  
#               
interface GigabitEthernet1/0/0.1
 vlan-type dot1q 10
 l2 binding vsi bgpad1
#               
interface LoopBack1
 ip address 3.3.3.3 255.255.255.255
#                      
bgp 200         
 peer 3.3.3.3 as-number 200
 peer 4.4.4.4 as-number 200
 peer 4.4.4.4 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.3 enable
  peer 4.4.4.4 enable
 #              
 l2vpn-ad-family
  policy vpn-target
  peer 4.4.4.4 enable
#               
ospf 1          
 area 0.0.0.0   
  network 3.3.3.3 0.0.0.0
  network 10.20.1.0 0.0.0.255
#               
return

PE2的配置文件

#
sysname PE2
#
mpls lsr-id 4.4.4.4
#
mpls
#
mpls l2vpn
#
vsi bgpad1
 bgp-ad
  vpls-id 100:1
  vpn-target 200:1 import-extcommunity
  vpn-target 200:1 export-extcommunity
#               
mpls ldp        
#                   
interface GigabitEthernet1/0/0
 undo shutdown  
 ip address 10.20.1.2 255.255.255.0
 mpls           
 mpls ldp       
#                         
interface GigabitEthernet2/0/0
 undo shutdown  
#               
interface GigabitEthernet2/0/0.1
 vlan-type dot1q 10
 l2 binding vsi bgpad1
#               
interface LoopBack1
 ip address 4.4.4.4 255.255.255.255
#               
bgp 200         
 peer 3.3.3.3 as-number 200
 peer 3.3.3.3 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.3 enable
 #              
 l2vpn-ad-family
  policy vpn-target
  peer 3.3.3.3 enable
#               
ospf 1          
 area 0.0.0.0   
  network 4.4.4.4 0.0.0.0
  network 10.20.1.0 0.0.0.255
#               
return

CE2的配置文件

#
sysname CE2
#
interface GigabitEthernet1/0/0
 undo shutdown
#
interface GigabitEthernet1/0/0.1
 undo shutdown
 vlan-type dot1q 10
 ip address 10.1.1.2 255.255.255.0
#
return

翻译

English

下载文档

更新时间：2020-06-20

文档编号：EDOC1100143312

浏览量：60400

下载量：128

平均得分:

本文档适用于这些产品

组网需求

配置思路

数据准备

操作步骤

配置文件

相关版本

相关文档