配置QinQ终结子接口接入L2VPN示例
从典型的应用场景描述了QinQ终结子接口接入L2VPN(Layer 2 virtual private network)后,如何保证发送带有两层VLAN Tag报文的终端用户通过L2VPN网络通信。
组网需求
如果通过终结子接口接入L2VPN网络,为了保证用户之间互通,需要配置终结子接口绑定VSI(Virtual Switching Instance)/VPWS(Virtual Private Wire Service)接入L2VPN网络。
如图8-22所示,CE通过路由器接入PE,路由器发送到PE的用户报文带有两层VLAN Tag,并通过QinQ终结子接口接入L2VPN用户网络。为了保证CE1~CE6的用户网络可以互通,需要在PE1、PE2、PE3上部署QinQ终结子接口绑定VSI/L2VC接入L2VPN网络。
注意事项
L2VPN包括VPWS和VPLS。
VPWS
VPWS(Virtual Private Wire Service)是使用IP网络对传统租用线业务的模拟和仿真技术。它提供了非对称、低成本的DDN(Digital Data Network)业务。从虚拟租用线两端的用户来看,该虚拟租用线近似于传统的租用线。VPWS技术是一种点到点的虚拟专线技术,能够支持几乎所有的链路层协议。
VPLS
VPLS可以实现多点到多点的VPN组网,利用VPLS技术,服务提供商可以通过MPLS骨干网向用户提供基于以太的多点业务。
本示例以VPLS组网为例说明QinQ终结子接口如何接入L2VPN网络,实现CE间互通。如果L2VPN网络是VPWS网络时,只有PE的用户侧子接口配置不同,需要配置QinQ终结子接口绑定L2VC接入L2VPN网络,其他设备配置相同。
配置思路
采用如下的思路配置QinQ终结子接口接入L2VPN:
分别在CE上配置二层转发功能,使得CE发往路由器的报文带有一层VLAN Tag。
分别在路由器上配置QinQ功能和二层转发功能,使得路由器发往PE的报文带有两层VLAN Tag。
分别在PE上配置VPLS、QinQ终结子接口,将VSI与QinQ终结子接口绑定,实现用户通过VPLS网络通信。
分别在PE上配置路由协议,保证网络三层互通。
本示例以OSPF(Open Shortest Path First)为例。
- 分别在PE上配置MPLS(Multiprotocol Label Switching)基本能力和MPLS LDP(Label Distribution Protocol),建立MPLS LSP(Label Switched Path)。
- 分别在PE上使能MPLS L2VPN,全局使能设备L2VPN功能。
- 分别在PE上配置VSI和QinQ终结子接口,并将VSI与QinQ终结子接口绑定,实现QinQ终结子接口接入L2VPN。
数据准备
为完成此配置例,需准备如下的数据:
- 用户所属的VLAN ID、用户的IP地址。
- 路由器发往PE的报文外层VLAN Tag值。
- 路由器与CE连接的接口名称、PE与路由器连接的接口名称、PE之间连接的接口名称和IP地址。
- PE上的VSI ID(必须一致)、MPLS LSR-ID、VSI名称及绑定VSI的接口。
操作步骤
- 在CE上配置二层转发功能
# 配置CE1。
<HUAWEI> system-view
[~HUAWEI] sysname CE1
[*HUAWEI] commit
[~CE1] vlan 10
[*CE1-vlan10] quit
[*CE1] interface gigabitethernet 0/1/1
[*CE1-GigabitEthernet0/1/1] undo shutdown
[*CE1-GigabitEthernet0/1/1] quit
[*CE1] interface gigabitethernet 0/1/1.1
[*CE1-GigabitEthernet0/1/1.1] ip address 10.1.1.1 24
[*CE1-GigabitEthernet0/1/1.1] vlan-type dot1q 10
[*CE1-GigabitEthernet0/1/1.1] quit
[*CE1] commit
# 配置CE2。
<HUAWEI> system-view
[~HUAWEI] sysname CE2
[*HUAWEI] commit
[~CE2] vlan 10
[*CE2-vlan10] quit
[*CE2] interface gigabitethernet 0/1/1
[*CE2-GigabitEthernet0/1/1] undo shutdown
[*CE2-GigabitEthernet0/1/1] quit
[*CE2] interface gigabitethernet 0/1/1.1
[*CE2-GigabitEthernet0/1/1.1] ip address 10.1.1.2 24
[*CE2-GigabitEthernet0/1/1.1] vlan-type dot1q 10
[*CE2-GigabitEthernet0/1/1.1] quit
[*CE2] commit
# 配置CE3。
<HUAWEI> system-view
[~HUAWEI] sysname CE3
[*HUAWEI] commit
[~CE3] vlan 10
[*CE3-vlan10] quit
[*CE3] interface gigabitethernet 0/1/1
[*CE3-GigabitEthernet0/1/1] undo shutdown
[*CE3-GigabitEthernet0/1/1] quit
[*CE3] interface gigabitethernet 0/1/1.1
[*CE3-GigabitEthernet0/1/1.1] ip address 10.1.1.3 24
[*CE3-GigabitEthernet0/1/1.1] vlan-type dot1q 10
[*CE3-GigabitEthernet0/1/1.1] quit
[*CE3] commit
# 配置CE4。
<HUAWEI> system-view
[~HUAWEI] sysname CE4
[*HUAWEI] commit
[~CE4] vlan 20
[*CE4-vlan20] quit
[*CE4] interface gigabitethernet 0/1/1
[*CE4-GigabitEthernet0/1/1] undo shutdown
[*CE4-GigabitEthernet0/1/1] quit
[*CE4] interface gigabitethernet 0/1/1.1
[*CE4-GigabitEthernet0/1/1.1] ip address 10.2.1.1 24
[*CE4-GigabitEthernet0/1/1.1] vlan-type dot1q 20
[*CE4-GigabitEthernet0/1/1.1] quit
[*CE4] commit
# 配置CE5。
<HUAWEI> system-view
[~HUAWEI] sysname CE5
[*HUAWEI] commit
[~CE5] vlan 20
[*CE5-vlan20] quit
[*CE5] interface gigabitethernet 0/1/1
[*CE5-GigabitEthernet0/1/1] undo shutdown
[*CE5-GigabitEthernet0/1/1] quit
[*CE5] interface gigabitethernet 0/1/1.1
[*CE5-GigabitEthernet0/1/1.1] ip address 10.2.1.2 24
[*CE5-GigabitEthernet0/1/1.1] vlan-type dot1q 20
[*CE5-GigabitEthernet0/1/1.1] quit
[*CE5] commit
# 配置CE6。
<HUAWEI> system-view
[~HUAWEI] sysname CE6
[*HUAWEI] commit
[~CE6] vlan 20
[*CE6-vlan20] quit
[*CE6] interface gigabitethernet 0/1/1
[*CE6-GigabitEthernet0/1/1] undo shutdown
[*CE6-GigabitEthernet0/1/1] quit
[*CE6] interface gigabitethernet 0/1/1.1
[*CE6-GigabitEthernet0/1/1.1] ip address 10.2.1.3 24
[*CE6-GigabitEthernet0/1/1.1] vlan-type dot1q 20
[*CE6-GigabitEthernet0/1/1.1] quit
[*CE6] commit
- 在路由器上配置QinQ功能和二层转发功能
# 配置DeviceA。
<HUAWEI> system-view
[~HUAWEI] sysname DeviceA
[*HUAWEI] commit
[~DeviceA] vlan 100
[*DeviceA-vlan100] quit
[*DeviceA] interface gigabitethernet 0/1/1
[*DeviceA-GigabitEthernet0/1/1] undo shutdown
[*DeviceA-GigabitEthernet0/1/1] portswitch
[*DeviceA-GigabitEthernet0/1/1] port vlan-stacking vlan 10 stack-vlan 100
[*DeviceA-GigabitEthernet0/1/1] quit
[*DeviceA] interface gigabitethernet 0/1/2
[*DeviceA-GigabitEthernet0/1/2] undo shutdown
[*DeviceA-GigabitEthernet0/1/2] portswitch
[*DeviceA-GigabitEthernet0/1/2] port vlan-stacking vlan 20 stack-vlan 100
[*DeviceA-GigabitEthernet0/1/2] quit
[*DeviceA] interface gigabitethernet 0/1/3
[*DeviceA-GigabitEthernet0/1/3] undo shutdown
[*DeviceA-GigabitEthernet0/1/3] portswitch
[*DeviceA-GigabitEthernet0/1/3] port link-type trunk
[*DeviceA-GigabitEthernet0/1/3] port trunk allow-pass vlan 100
[*DeviceA-GigabitEthernet0/1/3] quit
[*DeviceA] commit
# 配置DeviceB。
<HUAWEI> system-view
[~HUAWEI] sysname DeviceB
[*HUAWEI] commit
[~DeviceB] vlan 100
[*DeviceB-vlan100] quit
[*DeviceB] interface gigabitethernet 0/1/1
[*DeviceB-GigabitEthernet0/1/1] undo shutdown
[*DeviceB-GigabitEthernet0/1/1] portswitch
[*DeviceB-GigabitEthernet0/1/1] port vlan-stacking vlan 10 stack-vlan 100
[*DeviceB-GigabitEthernet0/1/1] quit
[*DeviceB] interface gigabitethernet 0/1/2
[*DeviceB-GigabitEthernet0/1/2] undo shutdown
[*DeviceB-GigabitEthernet0/1/2] portswitch
[*DeviceB-GigabitEthernet0/1/2] port vlan-stacking vlan 20 stack-vlan 100
[*DeviceB-GigabitEthernet0/1/2] quit
[*DeviceB] interface gigabitethernet 0/1/3
[*DeviceB-GigabitEthernet0/1/3] undo shutdown
[*DeviceB-GigabitEthernet0/1/3] portswitch
[*DeviceB-GigabitEthernet0/1/3] port link-type trunk
[*DeviceB-GigabitEthernet0/1/3] port trunk allow-pass vlan 100
[*DeviceB-GigabitEthernet0/1/3] quit
[*DeviceB] commit
# 配置DeviceC。
<HUAWEI> system-view
[~HUAWEI] sysname DeviceC
[*HUAWEI] commit
[~DeviceC] vlan 100
[*DeviceC-vlan100] quit
[*DeviceC] interface gigabitethernet 0/1/1
[*DeviceC-GigabitEthernet0/1/1] undo shutdown
[*DeviceC-GigabitEthernet0/1/1] portswitch
[*DeviceC-GigabitEthernet0/1/1] port vlan-stacking vlan 10 stack-vlan 100
[*DeviceC-GigabitEthernet0/1/1] quit
[*DeviceC] interface gigabitethernet 0/1/2
[*DeviceC-GigabitEthernet0/1/2] undo shutdown
[*DeviceC-GigabitEthernet0/1/2] portswitch
[*DeviceC-GigabitEthernet0/1/2] port vlan-stacking vlan 20 stack-vlan 100
[*DeviceC-GigabitEthernet0/1/2] quit
[*DeviceC] interface gigabitethernet 0/1/3
[*DeviceC-GigabitEthernet0/1/3] undo shutdown
[*DeviceC-GigabitEthernet0/1/3] portswitch
[*DeviceC-GigabitEthernet0/1/3] port link-type trunk
[*DeviceC-GigabitEthernet0/1/3] port trunk allow-pass vlan 100
[*DeviceC-GigabitEthernet0/1/3] quit
[*DeviceC] commit
如果设备不支持port vlan-stacking命令,也可以在接口上使用命令port link-type dot1q-tunnel和port default vlan来配置QinQ功能。
- 配置VPLS
分别在PE上配置OSPF协议。
配置PE的各接口地址。配置OSPF时,注意需要发布PE的32位Loopback接口地址。
# 配置PE1。
<HUAWEI> system-view
[~HUAWEI] sysname PE1
[*HUAWEI] commit
[~PE1] interface loopback 1
[*PE1-LoopBack1] ip address 1.1.1.9 32
[*PE1-LoopBack1] quit
[*PE1] interface gigabitethernet 0/1/2
[*PE1-GigabitEthernet0/1/2] ip address 192.168.1.1 24
[*PE1-GigabitEthernet0/1/2] undo shutdown
[*PE1-GigabitEthernet0/1/2] quit
[*PE1] interface gigabitethernet 0/1/3
[*PE1-GigabitEthernet0/1/3] ip address 192.168.3.1 24
[*PE1-GigabitEthernet0/1/3] undo shutdown
[*PE1-GigabitEthernet0/1/3] quit
[*PE1] ospf
[*PE1-ospf-1] area 0
[*PE1-ospf-1-area-0.0.0.0] network 1.1.1.9 0.0.0.0
[*PE1-ospf-1-area-0.0.0.0] network 192.168.1.0 0.0.0.255
[*PE1-ospf-1-area-0.0.0.0] network 192.168.3.0 0.0.0.255
[*PE1-ospf-1-area-0.0.0.0] quit
[*PE1-ospf-1] quit
[*PE1] commit
# 配置PE2。
<HUAWEI> system-view
[~HUAWEI] sysname PE2
[*HUAWEI] commit
[~PE2] interface LoopBack 1
[*PE2-LoopBack1] ip address 2.2.2.9 32
[*PE2-LoopBack1] quit
[*PE2] interface gigabitethernet 0/1/2
[*PE2-GigabitEthernet0/1/2] ip address 192.168.2.2 24
[*PE2-GigabitEthernet0/1/2] undo shutdown
[*PE2-GigabitEthernet0/1/2] quit
[*PE2] interface gigabitethernet 0/1/3
[*PE2-GigabitEthernet0/1/3] ip address 192.168.3.2 24
[*PE2-GigabitEthernet0/1/3] undo shutdown
[*PE2-GigabitEthernet0/1/3] quit
[*PE2] ospf
[*PE2-ospf-1] area 0
[*PE2-ospf-1-area-0.0.0.0] network 2.2.2.9 0.0.0.0
[*PE2-ospf-1-area-0.0.0.0] network 192.168.2.0 0.0.0.255
[*PE2-ospf-1-area-0.0.0.0] network 192.168.3.0 0.0.0.255
[*PE2-ospf-1-area-0.0.0.0] quit
[*PE2-ospf-1] quit
[*PE2] commit
# 配置PE3。
<HUAWEI> system-view
[~HUAWEI] sysname PE3
[*HUAWEI] commit
[~PE3] interface loopback 1
[*PE3-LoopBack1] ip address 3.3.3.9 32
[*PE3-LoopBack1] quit
[*PE3] interface gigabitethernet 0/1/2
[*PE3-GigabitEthernet0/1/2] ip address 192.168.1.2 24
[*PE3-GigabitEthernet0/1/2] undo shutdown
[*PE3-GigabitEthernet0/1/2] quit
[*PE3] interface gigabitethernet 0/1/3
[*PE3-GigabitEthernet0/1/3] ip address 192.168.2.1 24
[*PE3-GigabitEthernet0/1/3] undo shutdown
[*PE3-GigabitEthernet0/1/3] quit
[*PE3] ospf
[*PE3-ospf-1] area 0
[*PE3-ospf-1-area-0.0.0.0] network 3.3.3.9 0.0.0.0
[*PE3-ospf-1-area-0.0.0.0] network 192.168.1.0 0.0.0.255
[*PE3-ospf-1-area-0.0.0.0] network 192.168.2.0 0.0.0.255
[*PE3-ospf-1-area-0.0.0.0] quit
[*PE3-ospf-1] quit
[*PE3] commit
完成上述步骤后,PE1和PE2、PE1和PE3之间通过OSPF协议发现的对方Loopback1的IP路由,并能互相Ping通。
以PE1的显示为例。
[~PE1] display ip routing-table
Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route ------------------------------------------------------------------------------ Routing Table : _public_ Destinations : 14 Routes : 14 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.9/32 Direct 0 0 D 127.0.0.1 LoopBack1 2.2.2.9/32 OSPF 10 1 D 192.168.3.2 GigabitEthernet0/1/3 3.3.3.9/32 OSPF 10 1 D 192.168.1.2 GigabitEthernet0/1/2 192.168.1.0/24 Direct 0 0 D 192.168.1.1 GigabitEthernet0/1/2 192.168.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/1/2 192.168.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/1/2 192.168.2.0/24 OSPF 10 2 D 192.168.3.2 GigabitEthernet0/1/3 OSPF 10 2 D 192.168.1.2 GigabitEthernet0/1/2 192.168.3.0/24 Direct 0 0 D 192.168.3.1 GigabitEthernet0/1/3 192.168.3.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/1/3 192.168.3.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/1/3 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
[*PE1] ping 192.168.2.2
PING 192.168.2.2: 56 data bytes, press CTRL_C to break Reply from 192.168.2.2: bytes=56 Sequence=1 ttl=254 time=6 ms Reply from 192.168.2.2: bytes=56 Sequence=2 ttl=254 time=2 ms Reply from 192.168.2.2: bytes=56 Sequence=3 ttl=254 time=1 ms Reply from 192.168.2.2: bytes=56 Sequence=4 ttl=254 time=2 ms Reply from 192.168.2.2: bytes=56 Sequence=5 ttl=254 time=1 ms --- 192.168.2.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 1/2/6 ms
使能MPLS基本能力和LDP。
# 配置PE1。
[*PE1] mpls lsr-id 1.1.1.9
[*PE1] mpls
[*PE1-mpls] quit
[*PE1] mpls ldp
[*PE1-mpls-ldp] quit
[*PE1] interface gigabitethernet 0/1/2
[*PE1-GigabitEthernet0/1/2] mpls
[*PE1-GigabitEthernet0/1/2] mpls ldp
[*PE1-GigabitEthernet0/1/2] quit
[*PE1] interface gigabitethernet 0/1/3
[*PE1-GigabitEthernet0/1/3] mpls
[*PE1-GigabitEthernet0/1/3] mpls ldp
[*PE1-GigabitEthernet0/1/3] quit
[*PE1] commit
# 配置PE2。
[~PE2] mpls lsr-id 2.2.2.9
[*PE2] mpls
[*PE2-mpls] quit
[*PE2] mpls ldp
[*PE2-mpls-ldp] quit
[*PE2] interface gigabitethernet0/1/2
[*PE2-GigabitEthernet0/1/2] mpls
[*PE2-GigabitEthernet0/1/2] mpls ldp
[*PE2-GigabitEthernet0/1/2] quit
[*PE2] interface gigabitethernet0/1/3
[*PE2-GigabitEthernet0/1/3] mpls
[*PE2-GigabitEthernet0/1/3] mpls ldp
[*PE2-GigabitEthernet0/1/3] quit
[*PE2] commit
# 配置PE3。
[~PE3] mpls lsr-id 3.3.3.9
[*PE3] mpls
[*PE3-mpls] quit
[*PE3] mpls ldp
[*PE3-mpls-ldp] quit
[*PE3] interface gigabitethernet 0/1/2
[*PE3-GigabitEthernet0/1/2] mpls
[*PE3-GigabitEthernet0/1/2] mpls ldp
[*PE3-GigabitEthernet0/1/2] quit
[*PE3] interface gigabitethernet 0/1/3
[*PE3-GigabitEthernet0/1/3] mpls
[*PE3-GigabitEthernet0/1/3] mpls ldp
[*PE3-GigabitEthernet0/1/3] quit
[*PE3] commit
上述配置完成后,PE1与PE2、PE1与PE3之间建立LDP会话,执行命令display mpls ldp session可以看到显示结果中Status项为“Operational”。
以PE1的显示为例。
[~PE1] display mpls ldp session
LDP Session(s) in Public Network Codes: LAM(Label Advertisement Mode), SsnAge Unit(DDDD:HH:MM) An asterisk (*) before a session means the session is being deleted. -------------------------------------------------------------------------- PeerID Status LAM SsnRole SsnAge KASent/Rcv -------------------------------------------------------------------------- 2.2.2.9:0 Operational DU Passive 0000:00:01 6/6 3.3.3.9:0 Operational DU Passive 0000:00:00 1/1 -------------------------------------------------------------------------- TOTAL: 2 Session(s) Found.
如果PE之间非直连,还需要使用mpls ldp remote-peer和remote-ip命令,在PE之间建立远端LDP会话。
使能MPLS L2VPN。
# 配置PE1。
[*PE1] mpls l2vpn
[*PE1-l2vpn] quit
[*PE1] commit
# 配置PE2。
[~PE2] mpls l2vpn
[*PE2-l2vpn] quit
[*PE2] commit
# 配置PE3。
[~PE3] mpls l2vpn
[*PE3-l2vpn] quit
[*PE3] commit
配置VSI和QinQ终结子接口,并将VSI与QinQ终结子接口绑定。
# 配置PE1。
[~PE1] vsi ldp1 static
[*PE1-vsi-ldp1] pwsignal ldp
[*PE1-vsi-ldp1-ldp] vsi-id 2
[*PE1-vsi-ldp1-ldp] peer 2.2.2.9
[*PE1-vsi-ldp1-ldp] peer 3.3.3.9
[*PE1-vsi-ldp1-ldp] quit
[*PE1-vsi-ldp1] quit
[*PE1] interface gigabitethernet 0/1/1.1
[*PE1-GigabitEthernet0/1/1.1] control-vid 1 qinq-termination
[*PE1-GigabitEthernet0/1/1.1] qinq termination l2 symmetry
[*PE1-GigabitEthernet0/1/1.1] qinq termination pe-vid 100 ce-vid 10
[*PE1-GigabitEthernet0/1/1.1] qinq termination pe-vid 100 ce-vid 20
[*PE1-GigabitEthernet0/1/1.1] l2 binding vsi ldp1
[*PE1-GigabitEthernet0/1/1.1] quit
[*PE1] commit
# 配置PE2。
[~PE2] vsi ldp1 static
[*PE2-vsi-ldp1] pwsignal ldp
[*PE2-vsi-ldp1-ldp] vsi-id 2
[*PE2-vsi-ldp1-ldp] peer 1.1.1.9
[*PE2-vsi-ldp1-ldp] peer 3.3.3.9
[*PE2-vsi-ldp1-ldp] quit
[*PE2-vsi-ldp1] quit
[*PE2] interface gigabitethernet 0/1/1.1
[*PE2-GigabitEthernet0/1/1.1] control-vid 1 qinq-termination
[*PE2-GigabitEthernet0/1/1.1] qinq termination l2 symmetry
[*PE2-GigabitEthernet0/1/1.1] qinq termination pe-vid 100 ce-vid 10
[*PE2-GigabitEthernet0/1/1.1] qinq termination pe-vid 100 ce-vid 20
[*PE2-GigabitEthernet0/1/1.1] l2 binding vsi ldp1
[*PE2-GigabitEthernet0/1/1.1] quit
[*PE2] commit
# 配置PE3。
[~PE3] vsi ldp1 static
[*PE3-vsi-ldp1] pwsignal ldp
[*PE3-vsi-ldp1-ldp] vsi-id 2
[*PE3-vsi-ldp1-ldp] peer 1.1.1.9
[*PE3-vsi-ldp1-ldp] peer 2.2.2.9
[*PE3-vsi-ldp1-ldp] quit
[*PE3-vsi-ldp1] quit
[*PE3] interface gigabitethernet 0/1/1.1
[*PE3-GigabitEthernet0/1/1.1] control-vid 1 qinq-termination
[*PE3-GigabitEthernet0/1/1.1] qinq termination l2 symmetry
[*PE3-GigabitEthernet0/1/1.1] qinq termination pe-vid 100 ce-vid 10
[*PE3-GigabitEthernet0/1/1.1] qinq termination pe-vid 100 ce-vid 20
[*PE3-GigabitEthernet0/1/1.1] l2 binding vsi ldp1
[*PE3-GigabitEthernet0/1/1.1] quit
[*PE3] commit
同一主接口不同子接口上使用qinq termination命令时,当两个不同的子接口的pe-vid取值相同时,ce-vid的取值范围不能有重叠。
完成上述配置后,在PE1上执行命令display vsi name ldp1 verbose,可以看到名字为ldp1的VSI建立了到PE2、PE3的PW,VSI状态为Up。[~PE1] display vsi name ldp1 verbose
***VSI Name : ldp1 Administrator VSI : no Isolate Spoken : disable VSI Index : 1 PW Signaling : ldp Member Discovery Style : static Bridge-domain Mode : disable PW MAC Learn Style : unqualify Encapsulation Type : vlan MTU : 1500 Diffserv Mode : uniform Service Class : -- Color : -- DomainId : 255 Domain Name : Ignore AcState : disable P2P VSI : disable Create Time : 0 days, 0 hours, 3 minutes, 8 seconds VSI State : up VSI ID : 2 *Peer Router ID : 2.2.2.9 primary or secondary : primary ignore-standby-state : no VC Label : 17 Peer Type : dynamic Session : up Tunnel ID :0x0000000001006a5c21 Broadcast Tunnel ID : -- Broad BackupTunnel ID : -- CKey : 1 NKey : 3154116711 Stp Enable : 0 PwIndex : 0 Control Word : disable *Peer Router ID : 3.3.3.9 primary or secondary : primary ignore-standby-state : no VC Label : 18 Peer Type : dynamic Session : up Tunnel ID : 0x0000000001004c4b43 Broadcast Tunnel ID : -- Broad BackupTunnel ID : -- CKey : 2 NKey : 3154116712 Stp Enable : 0 PwIndex : 0 Control Word : disable Interface Name : GigabitEthernet0/1/1.1 State : up Access Port : false Last Up Time : 2012/07/19 03:19:14 Total Up Time : 0 days, 0 hours, 3 minutes, 11 seconds **PW Information: *Peer Ip Address : 2.2.2.9 PW State : up Local VC Label : 17 Remote VC Label : 17 Remote Control Word : disable PW Type : label Tunnel ID : 0x0000000001006a5c21 Broadcast Tunnel ID : -- Broad BackupTunnel ID : -- Ckey : 1 Nkey : 3154116711 Main PW Token : 0x0 Slave PW Token : 0x0 Tnl Type : ldp OutInterface : LDP LSP Backup OutInterface : Stp Enable : 0 PW Last Up Time : 2012/07/19 03:21:09 PW Total Up Time : 0 days, 0 hours, 0 minutes, 29 seconds *Peer Ip Address : 3.3.3.9 PW State : up Local VC Label : 18 Remote VC Label : 17 Remote Control Word : disable PW Type : label Tunnel ID : 0x0000000001004c4b43 Broadcast Tunnel ID : -- Broad BackupTunnel ID : -- Ckey : 2 Nkey : 3154116712 Main PW Token : 0x0 Slave PW Token : 0x0 Tnl Type : ldp OutInterface : LDP LSP Backup OutInterface : Stp Enable : 0 PW Last Up Time : 2012/07/19 03:21:09 PW Total Up Time : 0 days, 0 hours, 0 minutes, 29 seconds
- 检查配置结果
上述配置完成后,执行命令display qinq information termination interface,可以查看到QinQ终结子接口配置信息,及QinQ终结子接口绑定了VSI。
以PE1的显示为例。
[*PE1] display qinq information termination interface gigabitethernet 0/1/1
GigabitEthernet0/1/1.1 VSI bound qinq termination l2 symmetry Total QinQ Num: 2 qinq termination pe-vid 100 ce-vid 10 qinq termination pe-vid 100 ce-vid 20 Total vlan-group Num: 0 encapsulation qinq-termination
CE1、CE2和CE3下的主机能够相互Ping通。
[*CE1] ping 10.1.1.2
PING 10.1.1.2: 56 data bytes, press CTRL_C to break Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=43 ms Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=33 ms Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=98 ms Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=181 ms Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=129 ms --- 10.1.1.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 33/96/181 ms
[*CE1] ping 10.1.1.3
PING 10.1.1.3: 56 data bytes, press CTRL_C to break Reply from 10.1.1.3: bytes=56 Sequence=1 ttl=255 time=3 ms Reply from 10.1.1.3: bytes=56 Sequence=2 ttl=255 time=2 ms Reply from 10.1.1.3: bytes=56 Sequence=3 ttl=255 time=2 ms Reply from 10.1.1.3: bytes=56 Sequence=4 ttl=255 time=2 ms Reply from 10.1.1.3: bytes=56 Sequence=5 ttl=255 time=2 ms --- 10.1.1.3 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 2/2/3 ms
配置文件
PE1的配置文件
# sysname PE1 # mpls lsr-id 1.1.1.9 # mpls # mpls l2vpn # vsi ldp1 static pwsignal ldp vsi-id 2 peer 3.3.3.9 peer 2.2.2.9 # mpls ldp # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 encapsulation qinq-termination qinq termination l2 symmetry qinq termination pe-vid 100 ce-vid 10 qinq termination pe-vid 100 ce-vid 20 l2 binding vsi ldp1 # interface GigabitEthernet0/1/2 undo shutdown ip address 192.168.1.1 255.255.255.252 mpls mpls ldp # interface GigabitEthernet0/1/3 undo shutdown ip address 192.168.3.1 255.255.255.252 mpls mpls ldp # interface LoopBack1 ip address 1.1.1.9 255.255.255.255 # ospf 1 area 0.0.0.0 network 1.1.1.9 0.0.0.0 network 192.168.1.0 0.0.0.3 network 192.168.3.0 0.0.0.3 # return
PE2的配置文件
# sysname PE2 # mpls lsr-id 2.2.2.9 # mpls # mpls l2vpn # vsi ldp1 static pwsignal ldp vsi-id 2 peer 1.1.1.9 peer 3.3.3.9 # mpls ldp # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 encapsulation qinq-termination qinq termination l2 symmetry qinq termination pe-vid 100 ce-vid 10 qinq termination pe-vid 100 ce-vid 20 l2 binding vsi ldp1 # interface GigabitEthernet0/1/2 undo shutdown ip address 192.168.2.2 255.255.255.252 mpls mpls ldp # interface GigabitEthernet0/1/3 undo shutdown ip address 192.168.3.2 255.255.255.252 mpls mpls ldp # interface LoopBack1 ip address 2.2.2.9 255.255.255.255 # ospf 1 area 0.0.0.0 network 2.2.2.9 0.0.0.0 network 192.168.3.0 0.0.0.3 network 192.168.2.0 0.0.0.3 # return
PE3的配置文件
# sysname PE3 # mpls lsr-id 3.3.3.9 # mpls # mpls l2vpn # vsi ldp1 static pwsignal ldp vsi-id 2 peer 1.1.1.9 peer 2.2.2.9 # mpls ldp # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 encapsulation qinq-termination qinq termination l2 symmetry qinq termination pe-vid 100 ce-vid 10 qinq termination pe-vid 100 ce-vid 20 l2 binding vsi ldp1 # interface GigabitEthernet0/1/2 undo shutdown ip address 192.168.1.2 255.255.255.252 mpls mpls ldp # interface GigabitEthernet0/1/3 undo shutdown ip address 192.168.2.1 255.255.255.252 mpls mpls ldp # interface LoopBack1 ip address 3.3.3.9 255.255.255.255 # ospf 1 area 0.0.0.0 network 3.3.3.9 0.0.0.0 network 192.168.1.0 0.0.0.3 network 192.168.2.0 0.0.0.3 # return
DeviceA的配置文件
# sysname DeviceA # vlan batch 100 # interface GigabitEthernet0/1/3 portswitch undo shutdown port link-type trunk port trunk allow-pass vlan 100 # interface GigabitEthernet0/1/1 portswitch undo shutdown port vlan-stacking vlan 10 stack-vlan 100 # interface GigabitEthernet0/1/2 portswitch undo shutdown port vlan-stacking vlan 20 stack-vlan 100 # return
DeviceB的配置文件
# sysname DeviceB # vlan batch 100 # interface GigabitEthernet0/1/3 portswitch undo shutdown port link-type trunk port trunk allow-pass vlan 100 # interface GigabitEthernet0/1/1 portswitch undo shutdown port vlan-stacking vlan 10 stack-vlan 100 # interface GigabitEthernet0/1/2 portswitch undo shutdown port vlan-stacking vlan 20 stack-vlan 100 # return
DeviceC的配置文件
# sysname DeviceC # vlan batch 100 # interface GigabitEthernet0/1/3 portswitch undo shutdown port link-type trunk port trunk allow-pass vlan 100 # interface GigabitEthernet0/1/1 portswitch undo shutdown port vlan-stacking vlan 10 stack-vlan 100 # interface GigabitEthernet0/1/2 portswitch undo shutdown port vlan-stacking vlan 20 stack-vlan 100 # return
CE1的配置文件
# sysname CE1 # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 vlan-type dot1q 10 ip address 10.1.1.1 255.255.255.0 # return
CE2的配置文件
# sysname CE2 # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 vlan-type dot1q 10 ip address 10.1.1.2 255.255.255.0 # return
CE3的配置文件
# sysname CE3 # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 vlan-type dot1q 10 ip address 10.1.1.3 255.255.255.0 # return
CE4的配置文件
# sysname CE4 # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 vlan-type dot1q 20 ip address 10.2.1.1 255.255.255.0 # return
CE5的配置文件
# sysname CE5 # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 vlan-type dot1q 20 ip address 10.2.1.2 255.255.255.0 # return
CE6的配置文件
# sysname CE6 # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 vlan-type dot1q 20 ip address 10.2.1.3 255.255.255.0 # return