配置OptionA方式跨域BGP VPWS示例

NetEngine 8000 X V800R012C00SPC300 配置指南 - VPN 04

评分并提供意见反馈 :

华为采用机器翻译与人工审校相结合的方式将此文档翻译成不同语言，希望能帮助您更容易理解此文档的内容。请注意：即使是最好的机器翻译，其准确度也不及专业翻译人员的水平。华为对于翻译的准确性不承担任何责任，并建议您参考英文文档（已提供链接）。

实现比较简单，当ASBR上的跨域PW数量比较少时可以采用此方案。

组网需求

如图9-29，CE1和CE2分别通过AS100内的PE1和AS200内的PE2接入骨干网。

由于VPWS数量较少，因此本示例采用OptionA方式跨域LDP VPWS，ASBR间的接口被当作AC接口，实现CE1与CE2的互通。

图9-29 配置OptionA方式跨域BGP VPWS组网图

本示例中interface1，interface2分别代表GE1/0/0，GE2/0/0。

配置思路

采用如下的思路配置OptionA方式跨域LDP VPWS：

在骨干网上运行IGP协议，使同一个AS域内的各设备能互通。
在骨干网上配置MPLS基本能力，在同一AS域内的PE与ASBR之间建立动态LSP隧道。如果PE与ASBR非直连，建立LDP远程会话。
使能BGP对等体交换VPWS信息的功能。
在同一个AS的PE与ASBR之间建立BGP VPWS连接。

数据准备

为完成此配置例，需准备如下的数据：

远端对等体的IP地址。
配置IGP协议所需的数据。
PE、ASBR的MPLS LSR-ID（设置为本端Loopback接口IP地址）。

操作步骤

配置各设备接口的IP地址

# 配置CE1。

<HUAWEI> system-view

[~HUAWEI] sysname CE1

[*HUAWEI] commit

[~CE1] interface gigabitethernet 1/0/0

[*CE1-GigabitEthernet1/0/0] ip address 10.1.1.1 24

[*CE1-GigabitEthernet1/0/0] quit

[*CE1] commit

# 配置PE1。

<HUAWEI> system-view

[~HUAWEI] sysname PE1

[*HUAWEI] commit

[~PE1] interface loopback1

[*PE1-Loopback1] ip address 1.1.1.9 32

[*PE1-Loopback1] quit

[*PE1] interface gigabitethernet 2/0/0

[*PE1-GigabitEthernet2/0/0] ip address 10.10.1.1 24

[*PE1-GigabitEthernet2/0/0] quit

[*PE1] commit

# 配置ASBR1。

<HUAWEI> system-view

[~HUAWEI] sysname ASBR1

[*HUAWEI] commit

[~ASBR1] interface loopback1

[*ASBR1-Loopback1] ip address 2.2.2.9 32

[*ASBR1-Loopback1] quit

[*ASBR1] interface gigabitethernet 1/0/0

[*ASBR1-GigabitEthernet1/0/0] ip address 10.10.1.2 24

[*ASBR1-GigabitEthernet1/0/0] quit

[*ASBR1] commit

# 配置ASBR2。

<HUAWEI> system-view

[~HUAWEI] sysname ASBR2

[*HUAWEI] commit

[~ASBR2] interface loopback1

[*ASBR2-Loopback1] ip address 3.3.3.9 32

[*ASBR2-Loopback1] quit

[*ASBR2] interface gigabitethernet 2/0/0

[*ASBR2-GigabitEthernet2/0/0] ip address 10.20.1.1 24

[*ASBR2-GigabitEthernet2/0/0] quit

[*ASBR2] commit

# 配置PE2。

<HUAWEI> system-view

[~HUAWEI] sysname PE2

[*HUAWEI] commit

[~PE2] interface loopback1

[*PE2-Loopback1] ip address 4.4.4.9 32

[*PE2-Loopback1] quit

[*PE2] interface gigabitethernet 1/0/0

[*PE2-GigabitEthernet1/0/0] ip address 10.20.1.2 24

[*PE2-GigabitEthernet1/0/0] quit

[*PE2] commit

# 配置CE2。

<HUAWEI> system-view

[~HUAWEI] sysname CE2

[*HUAWEI] commit

[~CE2] interface gigabitethernet 1/0/0

[*CE2-GigabitEthernet1/0/0] ip address 10.1.1.2 24

[*CE2-GigabitEthernet1/0/0] quit

[*CE2] commit

配置骨干网的IGP协议

# 配置PE1。

[~PE1] ospf 1

[*PE1-ospf-1] area 0.0.0.0

[*PE1-ospf-1-area-0.0.0.0] network 1.1.1.9 0.0.0.0

[*PE1-ospf-1-area-0.0.0.0] network 10.10.1.0 0.0.0.255

[*PE1-ospf-1-area-0.0.0.0] quit

[*PE1-ospf-1] quit

[*PE1] commit

# 配置ASBR1。

[~ASBR1] ospf 1

[*ASBR1-ospf-1] area 0.0.0.0

[*ASBR1-ospf-1-area-0.0.0.0] network 2.2.2.9 0.0.0.0

[*ASBR1-ospf-1-area-0.0.0.0] network 10.10.1.0 0.0.0.255

[*ASBR1-ospf-1-area-0.0.0.0] quit

[*ASBR1-ospf-1] quit

[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] ospf 1

[*ASBR2-ospf-1] area 0.0.0.0

[*ASBR2-ospf-1-area-0.0.0.0] network 3.3.3.9 0.0.0.0

[*ASBR2-ospf-1-area-0.0.0.0] network 10.20.1.0 0.0.0.255

[*ASBR2-ospf-1-area-0.0.0.0] quit

[*ASBR2-ospf-1] quit

[*ASBR2] commit

# 配置PE2。

[~PE2] ospf 1

[*PE2-ospf-1] area 0.0.0.0

[*PE2-ospf-1-area-0.0.0.0] network 4.4.4.9 0.0.0.0

[*PE2-ospf-1-area-0.0.0.0] network 10.20.1.0 0.0.0.255

[*PE2-ospf-1-area-0.0.0.0] quit

[*PE2-ospf-1] quit

[*PE2] commit

使能MPLS，建立LSP隧道

# 配置PE1。

[~PE1] mpls lsr-id 1.1.1.9

[*PE1] mpls

[*PE1-mpls] quit

[*PE1] mpls ldp

[*PE1-mpls-ldp] quit

[*PE1] interface gigabitethernet 2/0/0

[*PE1-GigabitEthernet2/0/0] mpls

[*PE1-GigabitEthernet2/0/0] mpls ldp

[*PE1-GigabitEthernet2/0/0] quit

[*PE1] commit

# 配置ASBR1。

[~ASBR1] mpls lsr-id 2.2.2.9

[*ASBR1] mpls

[*ASBR1-mpls] quit

[*ASBR1] mpls ldp

[*ASBR1-mpls-ldp] quit

[*ASBR1] interface gigabitethernet 1/0/0

[*ASBR1-GigabitEthernet1/0/0] mpls

[*ASBR1-GigabitEthernet1/0/0] mpls ldp

[*ASBR1-GigabitEthernet1/0/0] quit

[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] mpls lsr-id 3.3.3.9

[*ASBR2] mpls

[*ASBR2-mpls] quit

[*ASBR2] mpls ldp

[*ASBR2-mpls-ldp] quit

[*ASBR2] interface gigabitethernet 2/0/0

[*ASBR2-GigabitEthernet2/0/0] mpls

[*ASBR2-GigabitEthernet2/0/0] mpls ldp

[*ASBR2-GigabitEthernet2/0/0] quit

[*ASBR2] commit

# 配置PE2。

[~PE2] mpls lsr-id 4.4.4.9

[*PE2] mpls

[*PE2-mpls] quit

[*PE2] mpls ldp

[*PE2-mpls-ldp] quit

[*PE2] interface gigabitethernet 1/0/0

[*PE2-GigabitEthernet1/0/0] mpls

[*PE2-GigabitEthernet1/0/0] mpls ldp

[*PE2-GigabitEthernet1/0/0] quit

[*PE2] commit

使能BGP对等体交换VPWS信息的功能

# 配置PE1。

[~PE1] bgp 100

[*PE1-bgp] peer 2.2.2.9 as-number 100

[*PE1-bgp] peer 2.2.2.9 connect-interface loopback 1

[*PE1-bgp] l2vpn-ad-family

[*PE1-bgp-af-l2vpn-ad] peer 2.2.2.9 enable

[*PE1-bgp-af-l2vpn-ad] peer 2.2.2.9 signaling vpws

[*PE1-bgp-af-l2vpn-ad] quit

[*PE1-bgp] quit

[*PE1] commit

# 配置ASBR1。

[~ASBR1] bgp 100

[*ASBR1-bgp] peer 1.1.1.9 as-number 100

[*ASBR1-bgp] peer 1.1.1.9 connect-interface loopback 1

[*ASBR1-bgp] l2vpn-ad-family

[*ASBR1-bgp-af-l2vpn-ad] peer 1.1.1.9 enable

[*ASBR1-bgp-af-l2vpn-ad] peer 1.1.1.9 signaling vpws

[*ASBR1-bgp-af-l2vpn-ad] quit

[*ASBR1-bgp] quit

[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] bgp 200

[*ASBR2-bgp] peer 4.4.4.9 as-number 200

[*ASBR2-bgp] peer 4.4.4.9 connect-interface loopback 1

[*ASBR2-bgp] l2vpn-ad-family

[*ASBR2-bgp-af-l2vpn-ad] peer 4.4.4.9 enable

[*ASBR2-bgp-af-l2vpn-ad] peer 4.4.4.9 signaling vpws

[*ASBR2-bgp-af-l2vpn-ad] quit

[*ASBR2-bgp] quit

[*ASBR2] commit

# 配置PE2。

[~PE2] bgp 200

[*PE2-bgp] peer 3.3.3.9 as-number 200

[*PE2-bgp] peer 3.3.3.9 connect-interface loopback 1

[*PE2-bgp] l2vpn-ad-family

[*PE2-bgp-af-l2vpn-ad] peer 3.3.3.9 enable

[*PE2-bgp-af-l2vpn-ad] peer 3.3.3.9 signaling vpws

[*PE2-bgp-af-l2vpn-ad] quit

[*PE2-bgp] quit

[*PE2] commit

配置BGP方式连接

# 配置PE1。

[~PE1] mpls l2vpn

[*PE1-l2vpn] quit

[*PE1] mpls l2vpn vpn1 encapsulation ethernet

[*PE1-mpls-l2vpn-vpn1] route-distinguisher 100:1

[*PE1-mpls-l2vpn-vpn1] vpn-target 1:1 both

[*PE1-mpls-l2vpn-vpn1] ce ce1 id 1 range 10

[*PE1-mpls-l2vpn-vpn1-ce-ce1] connection ce-offset 2 interface gigabitethernet 1/0/0

[*PE1-mpls-l2vpn-vpn1-ce-ce1] quit

[*PE1-mpls-l2vpn-vpn1] quit

[*PE1] commit

# 配置ASBR1。

[~ASBR1] mpls l2vpn

[*ASBR1-l2vpn] quit

[*ASBR1] mpls l2vpn vpn1 encapsulation ethernet

[*ASBR1-mpls-l2vpn-vpn1] route-distinguisher 100:1

[*ASBR1-mpls-l2vpn-vpn1] vpn-target 1:1 both

[*ASBR1-mpls-l2vpn-vpn1] ce ce2 id 2 range 10

[*ASBR1-mpls-l2vpn-vpn1-ce-ce2] connection ce-offset 1 interface gigabitethernet 2/0/0

[*ASBR1-mpls-l2vpn-vpn1-ce-ce2] quit

[*ASBR1-mpls-l2vpn-vpn1] quit

[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] mpls l2vpn

[*ASBR2-l2vpn] quit

[*ASBR2] mpls l2vpn vpn1 encapsulation ethernet

[*ASBR2-mpls-l2vpn-vpn1] route-distinguisher 200:1

[*ASBR2-mpls-l2vpn-vpn1] vpn-target 1:1 both

[*ASBR2-mpls-l2vpn-vpn1] ce ce3 id 3 range 10

[*ASBR2-mpls-l2vpn-vpn1-ce-ce3] connection ce-offset 4 interface gigabitethernet 1/0/0

[*ASBR2-mpls-l2vpn-vpn1-ce-ce3] quit

[*ASBR2-mpls-l2vpn-vpn1] quit

[*ASBR2] commit

# 配置PE2。

[~PE2] mpls l2vpn

[*PE2-l2vpn] quit

[*PE2] mpls l2vpn vpn1 encapsulation ethernet

[*PE2-mpls-l2vpn-vpn1] route-distinguisher 200:1

[*PE2-mpls-l2vpn-vpn1] vpn-target 1:1 both

[*PE2-mpls-l2vpn-vpn1] ce ce4 id 4 range 10

[*PE2-mpls-l2vpn-vpn1-ce-ce4] connection ce-offset 3 interface gigabitethernet 2/0/0

[*PE2-mpls-l2vpn-vpn1-ce-ce4] quit

[*PE2-mpls-l2vpn-vpn1] quit

[*PE2] commit

验证配置结果

完成上述配置后，在PE上执行display mpls l2vpn connection interface gigabitethernet命令，可以看到建立了一条BGP方式VC连接。以PE1的显示为例：

[~PE1] display mpls l2vpn connection interface gigabitethernet 1/0/0

conn-type: remote
     local vc state:             up
     remote vc state:            up
     local ce-id:                1
     local ce name:              ce1
     remote ce-id:               2
     intf(state,encap):          GigabitEthernet1/0/0(up,ethernet)
     peer id:                    2.2.2.9
     route-distinguisher:        100:1
     local vc label:             294930
     remote vc label:            294929
     tunnel policy:              default 
     CKey:                       65
     NKey:                       3841982617
     primary or secondary:       primary
     forward entry exist or not: true
     forward entry active or not:true
     manual fault set or not:    not set 
     AC OAM state:               up 
     BFD for PW session index:   -- 
     BFD for PW state:           invalid 
     BFD for LSP state:          true
     Local C bit is not set       
     Remote C bit is not set             
     tunnel type:                ldp
     tunnel id:                  0x0000000001004c6b42

CE1和CE2能够相互Ping通。以CE1的显示为例：

[~CE1] ping 10.1.1.2

  PING 10.1.1.2: 56  data bytes, press CTRL_C to break
    Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=430 ms
    Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=220 ms
    Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=190 ms
    Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=190 ms
    Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=190 ms

  --- 10.1.1.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 190/244/430 ms

配置文件

CE1的配置文件

#
sysname CE1
#
interface GigabitEthernet1/0/0
 undo shutdown  
 ip address 10.1.1.1 255.255.255.0
#               
return

CE2的配置文件

#
sysname CE2
#
interface GigabitEthernet1/0/0
 undo shutdown  
 ip address 10.1.1.2 255.255.255.0
#               
return

PE1的配置文件

#
sysname PE1
#
mpls lsr-id 1.1.1.9
#
mpls
#
mpls l2vpn
#
mpls ldp
#               
interface GigabitEthernet2/0/0
 undo shutdown  
 ip address 10.10.1.1 255.255.255.0
 mpls           
 mpls ldp       
#               
interface LoopBack1
 ip address 1.1.1.9 255.255.255.255
#               
mpls l2vpn vpn1 encapsulation ethernet
 route-distinguisher 100:1
 vpn-target 1:1 import-extcommunity
 vpn-target 1:1 export-extcommunity
 ce ce1 id 1 range 10 default-offset 0
  connection ce-offset 2 interface GigabitEthernet1/0/0
#               
bgp 100         
 peer 2.2.2.9 as-number 100
 peer 2.2.2.9 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
  peer 2.2.2.9 enable
 #              
 l2vpn-ad-family
  policy vpn-target
  peer 2.2.2.9 enable
  peer 2.2.2.9 signaling vpws
#               
ospf 1          
 area 0.0.0.0   
  network 1.1.1.9 0.0.0.0
  network 10.10.1.0 0.0.0.255
#               
return

ASBR1的配置文件

#
sysname ASBR1
#
mpls lsr-id 2.2.2.9
#
mpls
#
mpls l2vpn
#
mpls ldp
#               
interface GigabitEthernet1/0/0
 undo shutdown  
 ip address 10.10.1.2 255.255.255.0
 mpls           
 mpls ldp       
#               
interface GigabitEthernet2/0/0
 undo shutdown  
#               
interface LoopBack1
 ip address 2.2.2.9 255.255.255.255
#               
mpls l2vpn vpn1 encapsulation ethernet
 route-distinguisher 100:1
 vpn-target 1:1 import-extcommunity
 vpn-target 1:1 export-extcommunity
 ce ce2 id 2 range 10 default-offset 0
  connection ce-offset 1 interface GigabitEthernet2/0/0
#               
bgp 100         
 peer 1.1.1.9 as-number 100
 peer 1.1.1.9 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.9 enable
 #              
 l2vpn-ad-family
  policy vpn-target
  peer 1.1.1.9 enable
  peer 1.1.1.9 signaling vpws
#               
ospf 1          
 area 0.0.0.0   
  network 2.2.2.9 0.0.0.0
  network 10.10.1.0 0.0.0.255
#               
return

ASBR2的配置文件

#
sysname ASBR2
#
mpls lsr-id 3.3.3.9
#
mpls
#
mpls l2vpn
#
mpls ldp
#
interface GigabitEthernet1/0/0
 undo shutdown  
#               
interface GigabitEthernet2/0/0
 undo shutdown  
 ip address 10.20.1.1 255.255.255.0
 mpls           
 mpls ldp       
#               
interface LoopBack1
 ip address 3.3.3.9 255.255.255.0
#               
mpls l2vpn vpn1 encapsulation ethernet
 route-distinguisher 200:1
 vpn-target 1:1 import-extcommunity
 vpn-target 1:1 export-extcommunity
 ce ce3 id 3 range 10 default-offset 0
  connection ce-offset 4 interface GigabitEthernet1/0/0
#               
bgp 200         
 peer 4.4.4.9 as-number 200
 peer 4.4.4.9 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
  peer 4.4.4.9 enable
 #              
 l2vpn-ad-family
  policy vpn-target
  peer 4.4.4.9 enable
  peer 4.4.4.9 signaling vpws
#               
ospf 1          
 area 0.0.0.0   
  network 3.3.3.9 0.0.0.0
  network 10.20.1.0 0.0.0.255
#               
return

PE2的配置文件

#
sysname PE2
#
mpls lsr-id 4.4.4.9
#
mpls
#
mpls l2vpn
#
mpls ldp
#               
interface GigabitEthernet1/0/0
 undo shutdown  
 ip address 10.20.1.2 255.255.255.0
 mpls           
 mpls ldp       
#               
interface GigabitEthernet2/0/0
 undo shutdown  
#               
interface LoopBack1
 ip address 4.4.4.9 255.255.255.0
#               
mpls l2vpn vpn1 encapsulation ethernet
 route-distinguisher 200:1
 vpn-target 1:1 import-extcommunity
 vpn-target 1:1 export-extcommunity
 ce ce4 id 4 range 10 default-offset 0
  connection ce-offset 3 interface GigabitEthernet2/0/0
#               
bgp 200         
 peer 3.3.3.9 as-number 200
 peer 3.3.3.9 connect-interface LoopBack1
 #              
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.9 enable
 #              
 l2vpn-ad-family
  policy vpn-target
  peer 3.3.3.9 enable
  peer 3.3.3.9 signaling vpws
#               
ospf 1          
 area 0.0.0.0   
  network 4.4.4.9 0.0.0.0
  network 10.20.1.0 0.0.0.255
#               
return

翻译

English

下载文档

更新时间：2020-06-20

文档编号：EDOC1100143312

浏览量：60869

下载量：128

平均得分:

本文档适用于这些产品

组网需求

配置思路

数据准备

操作步骤

配置文件

相关版本

相关文档