配置跨域IPv6 VPN-OptionC示例(方案二)
PE和ASBR之间没有建立MP-IBGP关系时,也可以通过LDP为BGP分标签,实现跨域的IPv6 VPN OptionC方案。
组网需求
如图8-17所示,CE1和CE2属于同一个VPN。CE1通过AS100的PE1接入,CE2通过AS200的PE2接入。
在PE和ASBR之间不用配置IBGP邻居关系,当ASBR从对端的ASBR学到对端AS域内的带标签BGP公网路由后,通过在ASBR上将BGP路由引入IGP协议之中,LDP就能够为这些路由分配标签,触发建立跨域的LDP LSP。这样就能实现OptionC方式跨域的BGP/MPLS IPv6 VPN。
配置思路
本例配置主要思路是:
将域内PE的路由发布给对端PE:先在本端ASBR上通过BGP将域内PE的路由发布给对端ASBR,在远端ASBR上将BGP路由引入到IGP,则远端PE就依靠IGP学到了本端域内PE的路由。
在ASBR上配置路由策略:对从本AS的PE接收的Loopback路由,在向对端ASBR发布时,分配MPLS标签;对于向本AS的PE发布的路由,如果是带标签的IPv4路由,为其分配新的MPLS标签。
ASBR与对端ASBR之间能够交换带标签的IPv4路由。
在ASBR上配置为带标签的公网BGP路由建立LDP LSP。
在不同AS间的PE间建立MP-EBGP对等体关系;不同AS间的PE通常不是直连的,为了在它们之间建立EBGP连接,需要配置PE之间允许的最大跳数。
数据准备
为完成此配置例,需准备如下的数据:
PE及ASBR上的MPLS LSR-ID分别为1.1.1.9、2.2.2.9、3.3.3.9、4.4.4.9
PE上创建的VPN实例名为vpn1、路由标志RD为100:1,出方向和入方向的VPN-Target值为1:1
ASBR上配置的路由策略名称为policy1和policy2
操作步骤
- 在AS100和AS200的MPLS骨干网上分别配置IGP协议,实现各自骨干网内部PE和ASBR的互通
本例中IGP协议采用OSPF,具体配置步骤略。
需要将作为LSR ID的LoopBack接口的32位地址通过OSPF发布出去。
配置完成后,同一AS的ASBR与PE之间应能建立OSPF邻居关系,执行display ospf peer命令可以看到邻居状态为Full。
以PE1为例:
<PE1> display ospf peer
(M) Indicates MADJ neighbor OSPF Process 1 with Router ID 1.1.1.9 Neighbors Area 0.0.0.0 interface 172.16.1.2 (GE1/0/0)'s neighbors Router ID: 2.2.2.9 Address: 172.16.1.1 State: Full Mode:Nbr is Master Priority: 1 DR: 2.2.2.9 BDR: 1.1.1.9 MTU: 0 Dead timer due in 31 sec Retrans timer interval: 5 Neighbor is up for 00h21m46s Neighbor Up Time : 2020-03-04 06:56:08 Authentication Sequence: [ 0 ]
同一AS的ASBR和PE能学习到对方的Loopback1的IP地址,并能够互相ping通。
- 在ASBR间建立EBGP对等体
# 配置ASBR1。
[~ASBR1] bgp 100 [*ASBR1-bgp] peer 192.168.1.2 as-number 200 [*ASBR1-bgp] commit [~ASBR1-bgp] quit
# 配置ASBR2。
[~ASBR2] bgp 200 [*ASBR2-bgp] peer 192.168.1.1 as-number 100 [*ASBR2-bgp] commit [~ASBR2-bgp] quit
配置完成后,在ASBR上执行display bgp peer命令可以看到邻居状态为“Established”。
以ASBR1为例:
[~ASBR1] display bgp peer
BGP local router ID : 172.16.1.1 Local AS number : 100 Total number of peers : 1 Peers in established state : 1 Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv 192.168.1.2 4 200 129 134 0 01:39:21 Established 1
- 将域内PE的路由发送给对端PE
# 配置ASBR1:将PE1的Loopback地址发布给ASBR2。
[~ASBR1] bgp 100 [~ASBR1-bgp] network 1.1.1.9 32 [*ASBR1-bgp] commit [~ASBR1-bgp] quit
# 配置ASBR2:将PE2的Loopback地址发布给ASBR1。
[~ASBR2] bgp 200 [~ASBR2-bgp] network 4.4.4.9 32 [*ASBR2-bgp] commit [~ASBR2-bgp] quit
# 配置ASBR1:将BGP路由引入到OSPF,通过OSPF将PE2的路由发布给PE1。
[~ASBR1] ospf 1 [~ASBR1-ospf-1] import-route bgp [*ASBR1-ospf-1] commit [~ASBR1-ospf-1] quit
# 配置ASBR2:将BGP路由引入到OSPF,通过OSPF将PE1的路由发布给PE2。
[~ASBR2] ospf 1 [~ASBR2-ospf-1] import-route bgp [*ASBR2-ospf-1] commit [~ASBR2-ospf-1] quit
配置完成后,在PE上执行display ip routing-table命令查看路由表,以PE1为例:
[~PE1] display ip routing-table
Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route ------------------------------------------------------------------------------ Routing Table : _public_ Destinations : 10 Routes : 10 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.9/32 Direct 0 0 D 127.0.0.1 LoopBack1 2.2.2.9/32 OSPF 10 1 D 172.16.1.1 GigabitEthernet1/0/0 4.4.4.9/32 O_ASE 150 1 D 172.16.1.1 GigabitEthernet1/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 172.16.1.0/24 Direct 0 0 D 172.16.1.2 GigabitEthernet1/0/0 172.16.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet1/0/0 172.16.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet1/0/0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
- 在AS100和AS200的MPLS骨干网上分别配置MPLS基本能力和MPLS LDP,建立LDP LSP
# 配置PE1的MPLS基本能力,并在与ASBR1相连的接口上使能LDP。
[~PE1] mpls lsr-id 1.1.1.9 [*PE1] mpls [*PE1-mpls] quit [*PE1] mpls ldp [*PE1-mpls-ldp] quit [*PE1] interface gigabitethernet1/0/0 [*PE1-GigabitEthernet1/0/0] mpls [*PE1-GigabitEthernet1/0/0] mpls ldp [*PE1-GigabitEthernet1/0/0] commit [~PE1-GigabitEthernet1/0/0] quit
# 配置ASBR1的MPLS基本能力,并在与PE1相连的接口上使能LDP。
[~ASBR1] mpls lsr-id 2.2.2.9 [*ASBR1] mpls [*ASBR1-mpls] quit [*ASBR1] mpls ldp [*ASBR1-mpls-ldp] quit [*ASBR1] interface gigabitethernet1/0/0 [*ASBR1-GigabitEthernet1/0/0] mpls [*ASBR1-GigabitEthernet1/0/0] mpls ldp [*ASBR1-GigabitEthernet1/0/0] commit [~ASBR1-GigabitEthernet1/0/0] quit
# 配置ASBR2的MPLS基本能力,并在与PE2相连的接口上使能LDP。
[~ASBR2] mpls lsr-id 3.3.3.9 [*ASBR2] mpls [*ASBR2-mpls] quit [*ASBR2] mpls ldp [*ASBR2-mpls-ldp] quit [*ASBR2] interface gigabitethernet 1/0/0 [*ASBR2-GigabitEthernet1/0/0] mpls [*ASBR2-GigabitEthernet1/0/0] mpls ldp [*ASBR2-GigabitEthernet1/0/0] commit [~ASBR2-GigabitEthernet1/0/0] quit
# 配置PE2的MPLS基本能力,并在与ASBR2相连的接口上使能LDP。
[~PE2] mpls lsr-id 4.4.4.9 [*PE2] mpls [*PE2-mpls] quit [*PE2] mpls ldp [*PE2-mpls-ldp] quit [*PE2] interface gigabitethernet1/0/0 [*PE2-GigabitEthernet1/0/0] mpls [*PE2-GigabitEthernet1/0/0] mpls ldp [*PE2-GigabitEthernet1/0/0] commit [~PE2-GigabitEthernet1/0/0] quit
上述配置完成后,PE1与ASBR1、ASBR2与PE2之间应能建立LDP会话,执行display mpls ldp session命令可以看到显示结果中Status项为“Operational”。执行display mpls ldp lsp命令,可以看到LDP LSP的建立情况。
以PE1的显示为例:
[~PE1] display mpls ldp session LDP Session(s) in Public Network Codes: LAM(Label Advertisement Mode), SsnAge Unit(DDDD:HH:MM) An asterisk (*) before a session means the session is being deleted. -------------------------------------------------------------------------- PeerID Status LAM SsnRole SsnAge KASent/Rcv -------------------------------------------------------------------------- 2.2.2.9:0 Operational DU Passive 0000:00:10 43/43 -------------------------------------------------------------------------- TOTAL: 1 Session(s) Found.
[~PE1] display mpls ldp lsp LDP LSP Information ------------------------------------------------------------------------------- Flag after Out IF: (I) - RLFA Iterated LSP, (I*) - Normal and RLFA Iterated LSP ------------------------------------------------------------------------------- DestAddress/Mask In/OutLabel UpstreamPeer NextHop OutInterface ------------------------------------------------------------------------------- 1.1.1.9/32 3/NULL 2.2.2.9 127.0.0.1 Loop1 *1.1.1.9/32 Liberal/32828 DS/2.2.2.9 2.2.2.9/32 NULL/3 - 172.16.1.1 GigabitEthernet1/0/0 2.2.2.9/32 32828/3 2.2.2.9 172.16.1.1 GigabitEthernet1/0/0 4.4.4.9/32 NULL/32831 - 172.16.1.1 GigabitEthernet1/0/0 4.4.4.9/32 32831/32831 2.2.2.9 172.16.1.1 GigabitEthernet1/0/0 ------------------------------------------------------------------------------- TOTAL: 5 Normal LSP(s) Found. TOTAL: 1 Liberal LSP(s) Found. TOTAL: 0 FRR LSP(s) Found. An asterisk (*) before an LSP means the LSP is not established An asterisk (*) before a Label means the USCB or DSCB is stale An asterisk (*) before an UpstreamPeer means the session is stale An asterisk (*) before a DS means the session is stale An asterisk (*) before a NextHop means the LSP is FRR LSP
- 在ASBR上配置标签IPv4路由交换能力
# 配置ASBR1:在与ASBR2相连的接口GE2/0/0上使能MPLS。
[~ASBR1] interface gigabitethernet2/0/0 [~ASBR1-GigabitEthernet2/0/0] ip address 192.168.1.1 24 [*ASBR1-GigabitEthernet2/0/0] mpls [*ASBR1-GigabitEthernet2/0/0] commit [~ASBR1-GigabitEthernet2/0/0] quit
# 配置ASBR1:创建路由策略。
[~ASBR1] route-policy policy1 permit node 1 [*ASBR1-route-policy] apply mpls-label [*ASBR1-route-policy] commit [~ASBR1-route-policy] quit
# 配置ASBR1:对向ASBR2发布的路由应用路由策略,并使能与ASBR2交换标签IPv4路由的能力。
[~ASBR1] bgp 100 [~ASBR1-bgp] peer 192.168.1.2 route-policy policy1 export [*ASBR1-bgp] peer 192.168.1.2 label-route-capability [*ASBR1-bgp] commit [~ASBR1-bgp] quit
ASBR2上的配置分别与ASBR1类似,请参见配置文件,此处不再详述。
- 在ASBR上配置为带标签的公网BGP路由建立LDP LSP
# 配置ASBR1。
[~ASBR1] mpls [~ASBR1-mpls] lsp-trigger bgp-label-route [*ASBR1-mpls] commit [~ASBR1-mpls] quit
# 配置ASBR2。
[~ASBR2] mpls [~ASBR2-mpls] lsp-trigger bgp-label-route [*ASBR2-mpls] commit [~ASBR2-mpls] quit
- 在PE上配置VPN实例,并接入CE
# 配置PE1。
[~PE1] ip vpn-instance vpn1 [*PE1-vpn-instance-vpn1] ipv6-family [*PE1-vpn-instance-vpn1-af-ipv6] route-distinguisher 100:1 [*PE1-vpn-instance-vpn1-af-ipv6] vpn-target 1:1 export-extcommunity [*PE1-vpn-instance-vpn1-af-ipv6] vpn-target 1:1 import-extcommunity [*PE1-vpn-instance-vpn1-af-ipv6] quit [*PE1-vpn-instance-vpn1] quit
[*PE1] interface gigabitethernet2/0/0 [*PE1-GigabitEthernet2/0/0] ip binding vpn-instance vpn1 [*PE1-GigabitEthernet2/0/0] ipv6 enable [*PE1-GigabitEthernet2/0/0] ipv6 address 2001:db8:1::2 64 [*PE1-GigabitEthernet2/0/0] commit [~PE1-GigabitEthernet2/0/0] quit
# 配置PE2。
[~PE2] ip vpn-instance vpn1 [*PE2-vpn-instance-vpn1] ipv6-family [*PE2-vpn-instance-vpn1-af-ipv6] route-distinguisher 100:1 [*PE2-vpn-instance-vpn1-af-ipv6] vpn-target 1:1 export-extcommunity [*PE2-vpn-instance-vpn1-af-ipv6] vpn-target 1:1 import-extcommunity [*PE2-vpn-instance-vpn1-af-ipv6] quit [*PE2-vpn-instance-vpn1] quit
[*PE2] interface gigabitethernet2/0/0 [*PE2-GigabitEthernet2/0/0] ip binding vpn-instance vpn1 [*PE2-GigabitEthernet2/0/0] ipv6 enable [*PE2-GigabitEthernet2/0/0] ipv6 address 2001:db8:2::2 64 [*PE2-GigabitEthernet2/0/0] commit [~PE2-GigabitEthernet2/0/0] quit
配置完成后,在PE设备上执行display ip vpn-instance verbose命令可以看到VPN实例的配置情况。各PE能ping通自己接入的CE。
以PE1为例:
[~PE1] display ip vpn-instance verbose Total VPN-Instances configured : 1 Total IPv4 VPN-Instances configured : 0 Total IPv6 VPN-Instances configured : 1 VPN-Instance Name and ID : vpn1, 2 Interfaces : GigabitEthernet2/0/0 Address family ipv6 Create date : 2027-06-04 23:23:53+00:00 Up time : 0 days, 00 hours, 13 minutes and 38 seconds Vrf Status : UP Route Distinguisher : 100:1 Export VPN Targets : 1:1 Import VPN Targets : 1:1 Label Policy : label per route The diffserv-mode Information is : uniform The ttl-mode Information is : pipe
[~PE1] ping ipv6 vpn-instance vpn1 2001:db8:1::1 PING 2001:db8:1::1 : 56 data bytes, press CTRL_C to break Reply from 2001:db8:1::1 bytes=56 Sequence=1 hop limit=64 time=25 ms Reply from 2001:db8:1::1 bytes=56 Sequence=2 hop limit=64 time=1 ms Reply from 2001:db8:1::1 bytes=56 Sequence=3 hop limit=64 time=2 ms Reply from 2001:db8:1::1 bytes=56 Sequence=4 hop limit=64 time=1 ms Reply from 2001:db8:1::1 bytes=56 Sequence=5 hop limit=64 time=1 ms ---2001:db8:1::1 ping statistics--- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max=1/6/25 ms
- 在PE1与PE2之间建立MP-EBGP对等体关系
# 配置PE1。
[~PE1] bgp 100 [*PE1-bgp] peer 4.4.4.9 as-number 200 [*PE1-bgp] peer 4.4.4.9 connect-interface LoopBack 1 [*PE1-bgp] peer 4.4.4.9 ebgp-max-hop 10 [*PE1-bgp] ipv6-family vpnv6 [*PE1-bgp-af-vpnv6] peer 4.4.4.9 enable [*PE1-bgp-af-vpnv6] quit [*PE1-bgp] commit [~PE1-bgp] quit
# 配置PE2。
[~PE2] bgp 200 [*PE2-bgp] peer 1.1.1.9 as-number 100 [*PE2-bgp] peer 1.1.1.9 connect-interface LoopBack 1 [*PE2-bgp] peer 1.1.1.9 ebgp-max-hop 10 [*PE2-bgp] ipv6-family vpnv6 [*PE2-bgp-af-vpnv6] peer 1.1.1.9 enable [*PE2-bgp-af-vpnv6] quit [*PE2-bgp] commit [~PE2-bgp] quit
- 在PE与CE之间建立EBGP对等体关系,引入VPN路由
# 配置CE1。
[~CE1] bgp 65001 [*CE1-bgp] ipv6-family unicast [*CE1-bgp-af-ipv6] peer 2001:db8:1::2 as-number 100 [*CE1-bgp-af-ipv6] import-route direct [*CE1-bgp-af-ipv6] quit [*CE1-bgp] commit [~CE1-bgp] quit
# 配置CE2。
[~CE2] bgp 65002 [*CE2-bgp] ipv6-family unicast [*CE2-bgp-af-ipv6] peer 2001:db8:2::2 as-number 200 [*CE2-bgp-af-ipv6] import-route direct [*CE2-bgp-af-ipv6] quit [*CE2-bgp] commit [~CE2-bgp] quit
# 配置PE1。
[~PE1] bgp 100 [*PE1-bgp] ipv6-family vpn-instance vpn1 [*PE1-bgp-6-vpn1] peer 2001:db8:1::1 as-number 65001 [*PE1-bgp-6-vpn1] import-route direct [*PE1-bgp-6-vpn1] quit [*PE1-bgp] commit [~PE1-bgp] quit
# 配置PE2。
[~PE2] bgp 200 [*PE2-bgp] ipv6-family vpn-instance vpn1 [*PE2-bgp-6-vpn1] peer 2001:db8:2::1 as-number 65002 [*PE2-bgp-6-vpn1] import-route direct [*PE2-bgp-6-vpn1] quit [*PE2-bgp] commit [~PE2-bgp] quit
配置完成后,在PE设备上执行display bgp vpnv6 vpn-instance peer命令,可以看到PE与CE之间的BGP对等体关系已建立,并达到Established状态。
以PE1与CE1的对等体关系为例:
[~PE1] display bgp vpnv6 vpn-instance vpn1 peer BGP local router ID : 172.16.1.2 Local AS number : 100 Total number of peers : 1 Peers in established state : 1 Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv 2001:db8:1::1 4 65001 16 28 0 00:11:49 Established 0
- 检查配置结果
上述配置完成后,CE之间能学习到对方的接口路由,CE1和CE2能够相互ping通。
以CE1的显示为例:
[~CE1] display ipv6 routing-table Routing Table : _public_ Destinations : 7 Routes : 7 Destination : ::1 PrefixLength : 128 NextHop : ::1 Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : InLoopBack0 Flags : D Destination : ::FFFF:127.0.0.0 PrefixLength : 104 NextHop : ::FFFF:127.0.0.1 Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : InLoopBack0 Flags : D Destination : ::FFFF:127.0.0.1 PrefixLength : 128 NextHop : ::1 Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : InLoopBack0 Flags : D Destination : 2001:db8:1:: PrefixLength : 64 NextHop : 2001:db8:1::1 Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : GigabitEthernet1/0/0 Flags : D Destination : 2001:db8:1::1 PrefixLength : 128 NextHop : ::1 Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : GigabitEthernet1/0/0 Flags : D Destination : 2001:db8:2:: PrefixLength : 64 NextHop : 2001:db8:1::2 Preference : 255 Cost : 0 Protocol : EBGP RelayNextHop : 2001:db8:1::2 TunnelID : 0x0 Interface : GigabitEthernet1/0/0 Flags : RD Destination : FE80:: PrefixLength : 10 NextHop : :: Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : NULL0 Flags : D
[~CE1] ping ipv6 2001:db8:2::1 PING 2001:DB8:2::1 : 56 data bytes, press CTRL_C to break Reply from 2001:DB8:2::1 bytes=56 Sequence=1 hop limit=60 time=318 ms Reply from 2001:DB8:2::1 bytes=56 Sequence=2 hop limit=60 time=22 ms Reply from 2001:DB8:2::1 bytes=56 Sequence=3 hop limit=60 time=21 ms Reply from 2001:DB8:2::1 bytes=56 Sequence=4 hop limit=60 time=14 ms Reply from 2001:DB8:2::1 bytes=56 Sequence=5 hop limit=60 time=22 ms --- 2001:DB8:2::1 ping statistics--- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max=14/79/318 ms
配置完成后,在ASBR1上执行display ip routing-table dest-ip-address verbose命令,可以看到ASBR1到PE2的路由为带标签的公网BGP路由:Routing Table为“Public”,协议类型为“BGP”,标签值不为零。
以ASBR1的显示为例:
[~ASBR1] display ip routing-table 4.4.4.9 verbose Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route ------------------------------------------------------------------------------ Routing Table : _public_ Summary Count : 1 Destination: 4.4.4.9/32 Protocol: EBGP Process ID: 0 Preference: 255 Cost: 1 NextHop: 192.168.1.2 Neighbour: 0.0.0.0 State: Active Adv Relied Age: 00h18m41s Tag: 0 Priority: low Label: NULL QoSInfo: 0x0 IndirectID: 0xA1000071 RelayNextHop: 0.0.0.0 Interface: MPLS LOCAL IFNET TunnelID: 0x000000000c00030000 Flags: RD
并且在ASBR1和PE2上分别执行display mpls lsp protocol ldp include dest-ip-address verbose命令,可以看到ASBR1和PE2之间建立了一条LDP LSP,并且在PE上可以看到到达对端PE的LDP Ingress LSP。
[~ASBR1] display mpls lsp protocol ldp include 4.4.4.9 32 verbose ------------------------------------------------------------------------------- LSP Information: LDP LSP ------------------------------------------------------------------------------- No : 1 VrfIndex : Fec : 4.4.4.9/32 Nexthop : 0.0.0.0 In-Label : 32831 Out-Label : NULL In-Interface : ---------- Out-Interface : ---------- LspIndex : 5000033 Type : Primary OutSegmentIndex : 4294967295 LsrType : Egress Outgoing TunnelID : 0x1040020 Label Operation : SWAPPUSH Mpls-Mtu : ------ LspAge : 1185 sec
配置文件
CE1的配置文件
# sysname CE1 # interface GigabitEthernet1/0/0 undo shutdown ipv6 enable ipv6 address 2001:db8:1::1/64 # bgp 65001 router-id 5.5.5.9 peer 2001:db8:1::2 as-number 100 # ipv6-family unicast undo synchronization peer 2001:db8:1::2 enable # return
PE1的配置文件
# sysname PE1 # ip vpn-instance vpn1 ipv6-family route-distinguisher 100:1 apply-label per-instance vpn-target 1:1 export-extcommunity vpn-target 1:1 import-extcommunity # mpls lsr-id 1.1.1.9 # mpls # mpls ldp # interface GigabitEthernet1/0/0 undo shutdown ip address 172.16.1.2 255.255.255.0 mpls mpls ldp # interface GigabitEthernet2/0/0 undo shutdown ip binding vpn-instance vpn1 ipv6 enable ipv6 address 2001:db8:1::2/64 # interface LoopBack1 ip address 1.1.1.9 255.255.255.255 # bgp 100 peer 4.4.4.9 as-number 200 peer 4.4.4.9 ebgp-max-hop 10 peer 4.4.4.9 connect-interface LoopBack1 # ipv4-family unicast undo synchronization peer 4.4.4.9 enable # ipv6-family vpnv6 policy vpn-target peer 4.4.4.9 enable # ipv6-family vpn-instance vpn1 import-route direct peer 2001:db8:1::1 as-number 65001 # ospf 1 area 0.0.0.0 network 1.1.1.9 0.0.0.0 network 172.16.1.0 0.0.0.255 # return
ASBR1的配置文件
# sysname ASBR1 # mpls lsr-id 2.2.2.9 # mpls lsp-trigger bgp-label-route # mpls ldp # interface GigabitEthernet1/0/0 undo shutdown ip address 172.16.1.1 255.255.255.0 mpls mpls ldp # interface GigabitEthernet2/0/0 undo shutdown ip address 192.168.1.1 255.255.255.0 mpls # interface LoopBack1 ip address 2.2.2.9 255.255.255.255 # bgp 100 peer 192.168.1.2 as-number 200 # ipv4-family unicast undo synchronization network 1.1.1.9 255.255.255.255 peer 192.168.1.2 enable peer 192.168.1.2 route-policy policy1 export peer 192.168.1.2 label-route-capability # ospf 1 import-route bgp area 0.0.0.0 network 2.2.2.9 0.0.0.0 network 172.16.1.0 0.0.0.255 # route-policy policy1 permit node 1 apply mpls-label # return
ASBR2的配置文件
# sysname ASBR2 # mpls lsr-id 3.3.3.9 # mpls lsp-trigger bgp-label-route # mpls ldp # ipv4-family # interface GigabitEthernet1/0/0 undo shutdown ip address 10.162.1.1 255.255.255.0 mpls mpls ldp # interface GigabitEthernet2/0/0 undo shutdown ip address 192.168.1.2 255.255.255.0 mpls # interface LoopBack1 ip address 3.3.3.9 255.255.255.255 # bgp 200 peer 192.168.1.1 as-number 100 # ipv4-family unicast undo synchronization network 4.4.4.9 255.255.255.255 peer 192.168.1.1 enable peer 192.168.1.1 route-policy policy1 export peer 192.168.1.1 label-route-capability # ospf 1 import-route bgp area 0.0.0.0 network 3.3.3.9 0.0.0.0 network 10.162.1.0 0.0.0.255 # route-policy policy1 permit node 1 apply mpls-label # return
PE2的配置文件
# sysname PE2 # ip vpn-instance vpn1 ipv6-family route-distinguisher 100:1 apply-label per-instance vpn-target 1:1 export-extcommunity vpn-target 1:1 import-extcommunity # mpls lsr-id 4.4.4.9 # mpls # mpls ldp # interface GigabitEthernet1/0/0 undo shutdown ip binding vpn-instance vpn1 ipv6 enable ipv6 address 2001:db8:2::2/64 # interface GigabitEthernet2/0/0 undo shutdown ip address 10.162.1.2 255.255.255.0 mpls mpls ldp # interface LoopBack1 ip address 4.4.4.9 255.255.255.255 # bgp 200 peer 1.1.1.9 as-number 100 peer 1.1.1.9 ebgp-max-hop 10 peer 1.1.1.9 connect-interface LoopBack1 # ipv4-family unicast undo synchronization peer 1.1.1.9 enable # ipv6-family vpnv6 policy vpn-target peer 1.1.1.9 enable # ipv6-family vpn-instance vpn1 import-route direct peer 2001:db8:2::1 as-number 65002 # ospf 1 area 0.0.0.0 network 4.4.4.9 0.0.0.0 network 10.162.1.0 0.0.0.255 # return
CE2的配置文件
# sysname CE2 # interface GigabitEthernet1/0/0 undo shutdown ipv6 enable ipv6 address 2001:db8:2::1/64 # bgp 65002 router-id 6.6.6.9 peer 2001:db8:2::2 as-number 200 # ipv6-family unicast undo synchronization import-route direct peer 2001:db8:2::2 enable # return