配置运营商的运营商(相同AS)示例
一级运营商和二级运营商处于相同的AS中,二级运营商提供BGP/MPLS IPv6 VPN服务的配置举例。
组网需求
一级运营商和二级运营商在同一个AS中,二级运营商向自己的客户提供BGP/MPLS IPv6 VPN服务。如图8-18:
PE1和PE2是一级运营商骨干网的PE设备。
CE1和CE2是二级运营商的设备,作为CE接入一级运营商的骨干网。
PE3和PE4是二级运营商的设备,为二级运营商的客户提供接入。
CE3和CE4是二级运营商的客户。
配置思路
本例配置主要思路是:
配置运营商的运营商关键在于理解两类路由的交换过程,即:
二级运营商内部路由在一级运营商骨干网上的交换:一级运营商将二级运营商作为自己的CE接入;
二级运营商外部路由在二级运营商PE设备间的交换:需要在二级运营商PE设备(PE3和PE4)间建立MP-IBGP对等体关系。
配置相同AS的运营商的运营商,由于一级运营商PE与一级运营商CE位于同一个AS,它们之间需要配置IGP和LDP。
数据准备
完成本例配置,需准备如下数据:
一级运营商的PE及二级运营商的PE、CE上的MPLS LSR-ID
配置IGP协议所需数据
一级运营商PE上的使能IPv4地址族的VPN实例名称、RD和VPN-Target
二级运营商PE上的使能IPv6地址族的VPN实例名称、RD和VPN-Target
操作步骤
- 配置一级运营商骨干网的BGP/MPLS IP VPN
使用IS-IS作为骨干网的IGP协议,PE1和PE2之间使能LDP,并建立MP-IBGP对等体关系。
# 配置PE1。
<~HUAWEI> system-view
[~HUAWEI] sysname PE1
[*HUAWEI] commit
[~PE1] interface loopback 1
[*PE1-LoopBack1] ip address 3.3.3.9 32
[*PE1-LoopBack1] quit
[*PE1] mpls lsr-id 3.3.3.9
[*PE1] mpls
[*PE1-mpls] quit
[*PE1] mpls ldp
[*PE1-mpls-ldp] quit
[*PE1] isis 1
[*PE1-isis-1] network-entity 10.0000.0000.0004.00
[*PE1-isis-1] quit
[*PE1] interface loopback 1
[*PE1-LoopBack1] isis enable 1
[*PE1-LoopBack1] quit
[*PE1] interface gigabitEthernet 2/0/0
[*PE1-GigabitEthernet2/0/0] ip address 30.1.1.1 24
[*PE1-GigabitEthernet2/0/0] isis enable 1
[*PE1-GigabitEthernet2/0/0] mpls
[*PE1-GigabitEthernet2/0/0] mpls ldp
[*PE1-GigabitEthernet2/0/0] quit
[*PE1] bgp 100
[*PE1-bgp] peer 4.4.4.9 as-number 100
[*PE1-bgp] peer 4.4.4.9 connect-interface loopback 1
[*PE1-bgp] ipv4-family vpnv4
[*PE1-bgp-af-vpnv4] peer 4.4.4.9 enable
[*PE1-bgp-af-vpnv4] commit
[~PE1-bgp-af-vpnv4] quit
[~PE1-bgp] quit
PE2的配置与PE1类似,配置过程省略。
配置完成后,在PE1或PE2上执行display isis peer命令可以看到IS-IS邻居关系已建立,状态为UP;执行display mpls ldp session命令可以看到LDP会话建立成功;执行display bgp vpnv4 all peer命令可以看到BGP对等体关系已建立,并达到Established状态。
以PE1的显示为例:
[~PE1] display isis peer
Peer information for ISIS(1)
System Id Interface Circuit Id State HoldTime Type PRI -------------------------------------------------------------------------------
0000.0000.0005 GigabitEthernet2/0/0 0000000001 Up 29s L2(L1L2) --
Total Peer(s): 1
[~PE1] display mpls ldp session
LDP Session(s) in Public Network Codes: LAM(Label Advertisement Mode), SsnAge Unit(DDDD:HH:MM) A '*' before a session means the session is being deleted.
----------------------------------------------------------------
PeerID Status LAM SsnRole SsnAge KASent/Rcv
----------------------------------------------------------------
4.4.4.9:0 Operational DU Active 0000:00:01 8/8
----------------------------------------------------------------
TOTAL: 1 session(s) Found.
[~PE1] display bgp vpnv4 all peer
BGP local router ID : 3.3.3.9
Local AS number : 100
Total number of peers : 1 Peers in established state : 1
Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv
4.4.4.9 4 100 162 145 0 02:12:47 Established 0
- 配置二级运营商网络
使用OSPF作为IGP协议,PE3和CE1、PE4和CE2之间分别使能LDP。
# 配置PE3。
<~HUAWEI> system-view
[~HUAWEI] sysname PE3
[*HUAWEI] commit
[~PE3] interface loopback 1
[*PE3-LoopBack1] ip address 1.1.1.9 32
[*PE3-LoopBack1] quit
[*PE3] mpls lsr-id 1.1.1.9
[*PE3] mpls
[*PE3-mpls] quit
[*PE3] mpls ldp
[*PE3-mpls-ldp] quit
[*PE3] interface gigabitEthernet 2/0/0
[*PE3-GigabitEthernet2/0/0] ip address 40.1.1.1 24
[*PE3-GigabitEthernet2/0/0] mpls
[*PE3-GigabitEthernet2/0/0] mpls ldp
[*PE3-GigabitEthernet2/0/0] quit
[*PE3] ospf 1
[*PE3-ospf-1] area 0
[*PE3-ospf-1-area-0.0.0.0] network 1.1.1.9 0.0.0.0
[*PE3-ospf-1-area-0.0.0.0] network 40.1.1.0 0.0.0.255
[*PE3-ospf-1-area-0.0.0.0] commit
[~PE3-ospf-1-area-0.0.0.0] quit
[~PE3-ospf-1] quit
# 配置CE1。
<~HUAWEI> system-view
[~HUAWEI] sysname CE1
[*HUAWEI] commit
[~CE1] interface loopback 1
[*CE1-LoopBack1] ip address 2.2.2.9 32
[*CE1-LoopBack1] quit
[*CE1] mpls lsr-id 2.2.2.9
[*CE1] mpls
[*CE1-mpls] quit
[*CE1] mpls ldp
[*CE1-mpls-ldp] quit
[*CE1] interface gigabitEthernet 1/0/0
[*CE1-GigabitEthernet1/0/0] ip address 40.1.1.2 24
[*CE1-GigabitEthernet1/0/0] mpls
[*CE1-GigabitEthernet1/0/0] mpls ldp
[*CE1-GigabitEthernet1/0/0] quit
[*CE1] ospf 1
[*CE1-ospf-1] area 0
[*CE1-ospf-1-area-0.0.0.0] network 2.2.2.9 0.0.0.0
[*CE1-ospf-1-area-0.0.0.0] network 40.1.1.0 0.0.0.255
[*CE1-ospf-1-area-0.0.0.0] commit
[~CE1-ospf-1-area-0.0.0.0] quit
[~CE1-ospf-1] quit
配置完成后,PE3和CE1之间应能建立LDP和OSPF邻居关系。
PE4和CE2之间的配置与PE3和CE1之间的配置类似,配置过程省略。
- 配置一级运营商CE接入到一级运营商的PE
# 配置PE1。
[~PE1] ip vpn-instance vpn1
[*PE1-vpn-instance-vpn1] ipv4-family
[*PE1-vpn-instance-vpn1-af-ipv4] route-distinguisher 200:1
[*PE1-vpn-instance-vpn1-af-ipv4] apply-label per-route
[*PE1-vpn-instance-vpn1-af-ipv4] vpn-target 1:1 both
[*PE1-vpn-instance-vpn1-af-ipv4] quit
[*PE1-vpn-instance-vpn1] quit
[*PE1] bgp 100
[*PE1-bgp] ipv4-family vpn-instance vpn1
[*PE1-bgp-vpn1] import-route ospf 1
[*PE1-bgp-vpn1] quit
[*PE1-bgp] quit
[*PE1] mpls ldp vpn-instance vpn1
[*PE1-mpls-ldp-vpn-instance-vpn1] quit
[*PE1] ospf 1 vpn-instance vpn1
[*PE1-ospf-1] import-route bgp
[*PE1-ospf-1] quit
[*PE1] interface gigabitEthernet 1/0/0
[*PE1-GigabitEthernet1/0/0] ip binding vpn-instance vpn1
[*PE1-GigabitEthernet1/0/0] ip address 11.1.1.2 24
[*PE1-GigabitEthernet1/0/0] mpls
[*PE1-GigabitEthernet1/0/0] mpls ldp
[*PE1-GigabitEthernet1/0/0] mpls ldp transport-address interface
[*PE1-GigabitEthernet1/0/0] quit
[*PE1] ospf 1
[*PE1-ospf-1] area 0
[*PE1-ospf-1-area-0.0.0.0] network 3.3.3.9 0.0.0.0
[*PE1-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255
[*PE1-ospf-1-area-0.0.0.0] commit
[~PE1-ospf-1-area-0.0.0.0] quit
[~PE1-ospf-1] quit
# 配置CE1。
[~CE1] interface gigabitEthernet 2/0/0
[*CE1-GigabitEthernet2/0/0] ip address 11.1.1.1 24
[*CE1-GigabitEthernet2/0/0] mpls
[*CE1-GigabitEthernet2/0/0] mpls ldp
[*CE1-GigabitEthernet2/0/0] mpls ldp transport-address interface
[*CE1-GigabitEthernet2/0/0] quit
[*CE1] ospf 1
[*CE1-ospf-1] area 0
[*CE1-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255
[*CE1-ospf-1-area-0.0.0.0] commit
[~CE1-ospf-1-area-0.0.0.0] quit
[~CE1-ospf-1] quit
配置完成后,PE1和CE1之间应能建立LDP和OSPF邻居关系。
PE2和CE2之间的配置与PE1和CE1之间的配置类似,配置过程省略。
- 配置二级运营商的CE接入到二级运营商的PE
# 配置CE3。
<~HUAWEI> system-view
[~HUAWEI] sysname CE3
[*HUAWEI] commit
[~CE3] interface gigabitethernet 1/0/0
[*CE3-GigabitEthernet1/0/0] ipv6 enable
[*CE3-GigabitEthernet1/0/0] ipv6 address 2001:db8:1::1 64
[*CE3-GigabitEthernet1/0/0] quit
[*CE3] bgp 65410
[*CE3-bgp] router-id 10.10.10.10
[*CE3-bgp] peer 2001:db8:1::2 as-number 100
[*CE3-bgp] ipv6-family unicast
[*CE3-bgp-af-ipv6] peer 2001:db8:1::2 enable
[*CE3-bgp-af-ipv6] import-route direct
[*CE3-bgp-af-ipv6] commit
[~CE3-bgp-af-ipv6] quit
[~CE3-bgp] quit
# 配置PE3。
[~PE3] ip vpn-instance vpn1
[*PE3-vpn-instance-vpn1] ipv6-family
[*PE3-vpn-instance-vpn1-af-ipv6] route-distinguisher 100:1
[*PE1-vpn-instance-vpn1-af-ipv6] apply-label per-route
[*PE3-vpn-instance-vpn1-af-ipv6] vpn-target 1:1 both
[*PE3-vpn-instance-vpn1-af-ipv6] quit
[*PE3-vpn-instance-vpn1] quit
[*PE3] interface gigabitethernet 1/0/0
[*PE3-GigabitEthernet1/0/0] ipv6 enable
[*PE3-GigabitEthernet1/0/0] ip binding vpn-instance vpn1
[*PE3-GigabitEthernet1/0/0] ipv6 address 2001:db8:1::2 64
[*PE3-GigabitEthernet1/0/0] quit
[*PE3] bgp 100
[*PE3-bgp] ipv6-family vpn-instance vpn1
[*PE3-bgp6-vpn1] peer 2001:db8:1::1 as-number 65410
[*PE3-bgp6-vpn1] import-route direct
[*PE3-bgp6-vpn1] commit
[~PE3-bgp6-vpn1] quit
[~PE3-bgp] quit
PE4和CE4之间的配置与PE3和CE3之间的配置类似,配置过程省略。
完成此步骤后,在PE3和PE4上执行display bgp vpnv6 vpn-instance vpn1 peer命令或者在CE3和CE4上执行display bgp ipv6 peer命令,可看到PE3与CE3之间,PE4与CE4之间的BGP对等体状态为“Established”。
- 在二级运营商的PE之间建立MP-IBGP对等体关系,交换二级运营商的客户的VPN路由
# 配置PE3。
[~PE3] bgp 100
[*PE3-bgp] peer 6.6.6.9 as-number 100
[*PE3-bgp] peer 6.6.6.9 connect-interface loopback 1
[*PE3-bgp] ipv6-family vpnv6
[*PE3-bgp-af-vpnv6] peer 6.6.6.9 enable
[*PE3-bgp-af-vpnv6] commit
[~PE3-bgp-af-vpnv6] quit
[~PE3-bgp] quit
PE4的配置与PE3类似,配置过程省略。
完成此步骤后,在PE3和PE4上执行display bgp vpnv6 vpn-instance vpn1 peer命令可看到PE3与PE4之间的MP-IBGP对等体状态为“Established”。
- 检查配置结果
所有配置完成后,在PE1和PE2上执行display ip routing-table命令,可以看到PE1和PE2的公网路由表中只有一级运营商网络的路由。以PE1的显示为例:
[~PE1] display ip routing-table Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 7 Routes : 7 Destination/Mask Proto Pre Cost Flags NextHop Interface 3.3.3.9/32 Direct 0 0 D 127.0.0.1 LoopBack1 4.4.4.9/32 ISIS 15 10 D 30.1.1.2 GigabitEthernet2/0/0 30.1.1.0/24 Direct 0 0 D 30.1.1.1 GigabitEthernet2/0/0 30.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0 30.1.1.2/32 Direct 0 0 D 30.1.1.2 GigabitEthernet2/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
在PE1和PE2上执行display ip routing-table vpn-instance命令,可以看到VPN路由表中有二级运营商网络的内部路由。以PE1的显示为例:
[~PE1] display ip routing-table vpn-instance vpn1 Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route ------------------------------------------------------------------------------ Routing Tables: vpn1 Destinations : 11 Routes : 11 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.9/32 OSPF 10 2 D 11.1.1.1 GigabitEthernet1/0/0 2.2.2.9/32 OSPF 10 1 D 11.1.1.1 GigabitEthernet1/0/0 5.5.5.9/32 IBGP 255 0 RD 4.4.4.9 GigabitEthernet2/0/0 6.6.6.9/32 IBGP 255 0 RD 4.4.4.9 GigabitEthernet2/0/0 40.1.1.0/24 OSPF 10 2 D 11.1.1.1 GigabitEthernet1/0/0 11.1.1.0/24 Direct 0 0 D 11.1.1.1 GigabitEthernet1/0/0 11.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet1/0/0 11.1.1.2/32 Direct 0 0 D 11.1.1.2 GigabitEthernet1/0/0 20.1.1.0/24 IBGP 255 0 RD 4.4.4.9 GigabitEthernet2/0/0 21.1.1.0/24 IBGP 255 0 RD 4.4.4.9 GigabitEthernet2/0/0
在CE1和CE2上执行display ip routing-table命令,可以看到公网路由表中有二级运营商网络内部路由。以CE1的显示为例:
[~CE1] display ip routing-table Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route ------------------------------------------------------------------------------ Routing Tables: vpn1 Routing Tables: Public Destinations : 15 Routes : 15 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.9/32 OSPF 10 1 D 40.1.1.2 GigabitEthernet1/0/0 2.2.2.9/32 Direct 0 0 D 127.0.0.1 LoopBack1 5.5.5.9/32 OSPF 10 3 D 11.1.1.2 GigabitEthernet2/0/0 6.6.6.9/32 OSPF 10 4 D 11.1.1.2 GigabitEthernet2/0/0 40.1.1.0/24 Direct 0 0 D 40.1.1.2 GigabitEthernet1/0/0 40.1.1.1/32 Direct 0 0 D 40.1.1.1 LoopBack1 40.1.1.2/32 Direct 0 0 D 127.0.0.1 InLoopBack0 11.1.1.0/24 Direct 0 0 D 11.1.1.1 GigabitEthernet2/0/0 11.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0 11.1.1.2/32 Direct 0 0 D 11.1.1.2 GigabitEthernet2/0/0 20.1.1.0/24 OSPF 10 4 D 11.1.1.2 GigabitEthernet2/0/0 21.1.1.0/24 OSPF 10 3 D 11.1.1.2 GigabitEthernet2/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
在PE3和PE4上执行display ip routing-table命令,可以看到公网路由表中有二级运营商网络的内部路由。以PE3的显示为例:
[~PE3] display ip routing-table Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 13 Routes : 13 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.9/32 Direct 0 0 D 127.0.0.1 LoopBack1 2.2.2.9/32 OSPF 10 1 D 40.1.1.2 GigabitEthernet2/0/0 5.5.5.9/32 OSPF 10 4 D 40.1.1.2 GigabitEthernet2/0/0 6.6.6.9/32 OSPF 10 5 D 40.1.1.2 GigabitEthernet2/0/0 40.1.1.0/24 Direct 0 0 D 40.1.1.1 GigabitEthernet2/0/0 40.1.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0 40.1.1.2/32 Direct 0 0 D 40.1.1.2 GigabitEthernet2/0/0 11.1.1.0/24 OSPF 10 2 D 40.1.1.2 GigabitEthernet2/0/0 20.1.1.0/24 OSPF 10 5 D 40.1.1.2 GigabitEthernet2/0/0 20.1.1.1/32 EBGP 255 0 RD 6.6.6.9 GigabitEthernet2/0/0 21.1.1.0/24 OSPF 10 4 D 40.1.1.2 GigabitEthernet2/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
在PE3和PE4上执行display ipv6 routing-table vpn-instance命令,可以看到VPN路由表中有远端VPN客户的路由,即,有二级运营商的外部路由。以PE3的显示为例:
[~PE3] display ipv6 routing-table vpn-instance vpn1
Routing Table : vpn1 Destinations : 4 Routes : 4 Destination : 2001:db8:1:: PrefixLength : 64 NextHop : 2001:db8:1::2 Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : GigabitEthetnet1/0/0 Flags : D Destination : 2001:db8:1::2 PrefixLength : 128 NextHop : ::1 Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : GigabitEthetnet1/0/0 Flags : D Destination : 2001:db8:2:: PrefixLength : 64 NextHop : ::FFFF:6.6.6.9 Preference : 255 Cost : 0 Protocol : EBGP RelayNextHop : :: TunnelID : 0xf0010056 Interface : NULL0 Flags : RD Destination : FE80:: PrefixLength : 10 NextHop : :: Preference : 0 Cost : 0 Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : NULL0 Flags : D
PE3和PE4可以相互Ping通:
[~PE3] ping 20.1.1.2 PING 20.1.1.2: 56 data bytes, press CTRL_C to break Reply from 20.1.1.2: bytes=56 Sequence=1 ttl=251 time=125 ms Reply from 20.1.1.2: bytes=56 Sequence=2 ttl=251 time=109 ms Reply from 20.1.1.2: bytes=56 Sequence=3 ttl=251 time=110 ms Reply from 20.1.1.2: bytes=56 Sequence=4 ttl=251 time=94 ms Reply from 20.1.1.2: bytes=56 Sequence=5 ttl=251 time=109 ms --- 20.1.1.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 94/109/125 ms
CE3和CE4可以互相Ping通。
[~CE3] ping ipv6 2001:db8:2::1 PING 2001:db8:2::1 : 56 data bytes, press CTRL_C to break Reply from 2001:db8:2::1 bytes=56 Sequence=1 hop limit=62 time = 141 ms Reply from 2001:db8:2::1 bytes=56 Sequence=2 hop limit=62 time = 157 ms Reply from 2001:db8:2::1 bytes=56 Sequence=3 hop limit=62 time = 141 ms Reply from 2001:db8:2::1 bytes=56 Sequence=4 hop limit=62 time = 141 ms Reply from 2001:db8:2::1 bytes=56 Sequence=5 hop limit=62 time = 141 ms --- 2001:db8:2::1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 141/144/157 ms
配置文件
CE3的配置文件
#
sysname CE3
#
ipv6
#
interface GigabitEthernet1/0/0
undo shutdown
ipv6 enable
ipv6 address 2001:db8:1::1/64
#
bgp 65410
router-id 10.10.10.10
peer 2001:db8:1::2 as-number 100
#
ipv6-family unicast
undo synchronization
import-route direct
peer 2001:db8:1::2 enable
#
return
PE3的配置文件
#
sysname PE3
#
ip vpn-instance vpn1
ipv6-family
route-distinguisher 100:1
apply-label per-route
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity
#
ipv6
#
mpls lsr-id 1.1.1.9
mpls
#
mpls ldp
#
interface GigabitEthernet1/0/0
undo shutdown
ip binding vpn-instance vpn1
ipv6 enable
ipv6 address 2001:db8:1::2/64
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 40.1.1.1 255.255.255.0
mpls
mpls ldp
#
interface LoopBack1
ip address 1.1.1.9 255.255.255.255
#
bgp 100
peer 6.6.6.9 as-number 100
peer 6.6.6.9 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
import-route direct
peer 6.6.6.9 enable
#
ipv6-family vpnv6
policy vpn-target
peer 6.6.6.9 enable
#
ipv6-family vpn-instance vpn1
peer 2001:db8:1::1 as-number 65410
import-route direct
#
ospf 1
area 0.0.0.0
network 1.1.1.9 0.0.0.0
network 40.1.1.0 0.0.0.255
#
return
CE1的配置文件
#
sysname CE1
#
mpls lsr-id 2.2.2.9
mpls
#
mpls ldp
#
interface GigabitEthernet1/0/0
undo shutdown
ip address 40.1.1.2 255.255.255.0
mpls
mpls ldp
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 11.1.1.1 255.255.255.0
mpls
mpls ldp
mpls ldp transport-address interface
#
interface LoopBack1
ip address 2.2.2.9 255.255.255.255
#
ospf 1
area 0.0.0.0
network 2.2.2.9 0.0.0.0
network 11.1.1.0 0.0.0.255
network 40.1.1.0 0.0.0.255
#
return
PE1的配置文件
#
sysname PE1
#
ip vpn-instance vpn1
ipv4-family
route-distinguisher 200:1
apply-label per-route
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity
#
mpls lsr-id 3.3.3.9
mpls
#
mpls ldp
#
mpls ldp vpn-instance vpn1
#
isis 1
network-entity 10.0000.0000.0004.00
#
ospf 1 vpn-instance vpn1
import-route bgp
area 0.0.0.0
network 3.3.3.9 0.0.0.0
network 11.1.1.0 0.0.0.255
#
interface GigabitEthernet1/0/0
undo shutdown
ip binding vpn-instance vpn1
ip address 11.1.1.2 255.255.255.0
mpls
mpls ldp
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 30.1.1.1 255.255.255.0
isis enable 1
mpls
mpls ldp
#
interface LoopBack1
ip address 3.3.3.9 255.255.255.255
isis enable 1
#
bgp 100
peer 4.4.4.9 as-number 100
peer 4.4.4.9 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
peer 4.4.4.9 enable
#
ipv4-family vpnv4
policy vpn-target
peer 4.4.4.9 enable
#
ipv4-family vpn-instance vpn1
import-route ospf 1
#
return
PE2的配置文件
#
sysname PE2
#
ip vpn-instance vpn1
ipv4-family
route-distinguisher 200:2
apply-label per-route
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity
#
mpls lsr-id 4.4.4.9
mpls
#
mpls ldp
#
mpls ldp vpn-instance vpn1
#
isis 1
network-entity 10.0000.0000.0005.00
#
ospf 1 vpn-instance vpn1
import-route bgp
area 0.0.0.0
network 4.4.4.9 0.0.0.0
network 21.1.1.0 0.0.0.255
#
interface GigabitEthernet1/0/0
undo shutdown
ip address 30.1.1.2 255.255.255.0
isis enable 1
mpls
mpls ldp
#
interface GigabitEthernet2/0/0
undo shutdown
ip binding vpn-instance vpn1
ip address 21.1.1.1 255.255.255.0
mpls
mpls ldp
#
interface LoopBack1
ip address 4.4.4.9 255.255.255.255
isis enable 1
#
bgp 100
peer 3.3.3.9 as-number 100
peer 3.3.3.9 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
peer 3.3.3.9 enable
#
ipv4-family vpnv4
policy vpn-target
peer 3.3.3.9 enable
#
ipv4-family vpn-instance vpn1
import-route ospf 1
#
return
CE2的配置文件
#
sysname CE2
#
mpls lsr-id 5.5.5.9
mpls
#
mpls ldp
#
interface GigabitEthernet1/0/0
undo shutdown
ip address 21.1.1.2 255.255.255.0
mpls
mpls ldp
mpls ldp transport-address interface
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 20.1.1.1 255.255.255.0
mpls
mpls ldp
#
interface LoopBack1
ip address 5.5.5.9 255.255.255.255
#
ospf 1
area 0.0.0.0
network 5.5.5.9 0.0.0.0
network 20.1.1.0 0.0.0.255
network 21.1.1.0 0.0.0.255
#
return
PE4的配置文件
#
sysname PE4
#
ip vpn-instance vpn1
ipv6-family
route-distinguisher 100:2
apply-label per-route
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity
#
ipv6
#
mpls lsr-id 6.6.6.9
mpls
#
mpls ldp
#
interface GigabitEthernet1/0/0
undo shutdown
ip binding vpn-instance vpn1
ipv6 enable
ipv6 address 2001:db8:2::2/64
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 20.1.1.2 255.255.255.0
mpls
mpls ldp
#
interface LoopBack1
ip address 6.6.6.9 255.255.255.255
#
bgp 100
peer 1.1.1.9 as-number 100
peer 1.1.1.9 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
import-route direct
peer 1.1.1.9 enable
#
ipv6-family vpnv6
policy vpn-target
peer 1.1.1.9 enable
#
ospf 1
area 0.0.0.0
network 6.6.6.9 0.0.0.0
network 20.1.1.0 0.0.0.255
#
ipv6-family vpn-instance vpn1
peer 2001:db8:2::1 as-number 65420
import-route direct
#
return
CE4的配置文件
#
sysname CE4
#
ipv6
#
interface GigabitEthernet1/0/0
undo shutdown
ipv6 enable
ipv6 address 2001:db8:2::1/64
#
bgp 65420
router-id 20.20.20.20
peer 2001:db8:2::2 as-number 100
#
ipv6-family unicast
undo synchronization
import-route direct
peer 2001:db8:2::2 enable
#
return