配置Dot1q终结子接口接入L2VPN示例
从典型的应用场景描述了Dot1q终结子接口接入L2VPN(Layer 2 virtual private network)后,如何保证发送带有一层VLAN Tag报文的终端用户通过L2VPN网络通信。
组网需求
如果通过终结子接口接入L2VPN网络,为了保证用户之间互通,需要配置终结子接口绑定VSI(Virtual Switching Instance)/VPWS(Virtual Private Wire Service)接入L2VPN网络。
如图8-21所示,CE通过路由器接入PE,路由器发送到PE的用户报文带有一层VLAN Tag,并通过Dot1q终结子接口接入L2VPN用户网络。为了保证CE1~CE6的用户网络可以互通,需要在PE1、PE2、PE3上部署Dot1q终结子接口绑定VSI/VPWS接入L2VPN网络。
注意事项
L2VPN包括VPWS和VPLS。
VPWS
VPWS(Virtual Private Wire Service)是使用IP网络对传统租用线业务的模拟和仿真技术。它提供了非对称、低成本的DDN(Digital Data Network)业务。从虚拟租用线两端的用户来看,该虚拟租用线近似于传统的租用线。VPWS技术是一种点到点的虚拟专线技术,能够支持几乎所有的链路层协议。
VPLS
VPLS可以实现多点到多点的VPN组网,利用VPLS技术,服务提供商可以通过MPLS骨干网向用户提供基于以太的多点业务。
本示例以VPLS组网为例说明Dot1q终结子接口如何接入L2VPN网络,实现CE间互通。如果L2VPN网络是VPWS网络时,只有PE的用户侧子接口配置不同,需要配置Dot1q终结子接口绑定L2VC接入L2VPN网络,其他设备配置相同。
配置思路
采用如下的思路配置Dot1q终结子接口接入L2VPN:
分别配置CE上接口IP地址,CE发往路由器的报文不带VLAN Tag。
分别在路由器上创建VLAN,确定用户所属的VLAN。
分别在路由器、CE上配置二层转发功能,使得路由器发往PE的报文带有一层VLAN Tag。
分别在PE上配置VPLS、Dot1q终结子接口,将VSI与Dot1q终结子接口绑定,实现用户通过VPLS网络通信。
分别在PE上配置路由协议,保证网络三层互通。
本示例以OSPF(Open Shortest Path First)为例。
- 分别在PE上配置MPLS(Multiprotocol Label Switching)基本能力和MPLS LDP(Label Distribution Protoco),建立MPLS LSP(Label Switched Path)。
- 分别在PE上使能MPLS L2VPN,全局使能设备L2VPN功能。
- 分别在PE上配置VSI和Dot1q终结子接口,并将VSI与Dot1q终结子接口绑定,实现Dot1q终结子接口接入L2VPN。
数据准备
为完成此配置例,需准备如下的数据:
- 用户所属的VLAN ID、用户的IP地址。
- 路由器与CE连接的接口名称、IP地址。
- PE与路由器连接的接口名称、IP地址。
- PE之间连接的接口名称、IP地址。
- PE上的VSI ID(必须一致)、MPLS LSR-ID、VSI名称及绑定VSI的接口。
操作步骤
- 在CE上配置接口IP地址
# 配置CE1。
<HUAWEI> system-view
[~HUAWEI] sysname CE1
[*HUAWEI] commit
[~CE1] interface gigabitethernet 0/1/1
[*CE1-GigabitEthernet0/1/1] undo shutdown
[*CE1-GigabitEthernet0/1/1] ip address 10.1.1.1 24
[*CE1-GigabitEthernet0/1/1] quit
[*CE1] commit
# 配置CE2。
<HUAWEI> system-view
[~HUAWEI] sysname CE2
[*HUAWEI] commit
[~CE2] interface gigabitethernet 0/1/1
[*CE2-GigabitEthernet0/1/1] undo shutdown
[*CE2-GigabitEthernet0/1/1] ip address 10.1.1.2 24
[*CE2-GigabitEthernet0/1/1] quit
[*CE2] commit
# 配置CE3。
<HUAWEI> system-view
[~HUAWEI] sysname CE3
[*HUAWEI] commit
[~CE3] interface gigabitethernet 0/1/1
[*CE3-GigabitEthernet0/1/1] undo shutdown
[*CE3-GigabitEthernet0/1/1] ip address 10.1.1.3 24
[*CE3-GigabitEthernet0/1/1] quit
[*CE3] commit
# 配置CE4。
<HUAWEI> system-view
[~HUAWEI] sysname CE4
[*HUAWEI] commit
[~CE4] interface gigabitethernet 0/1/1
[*CE4-GigabitEthernet0/1/1] undo shutdown
[*CE4-GigabitEthernet0/1/1] ip address 10.1.1.4 24
[*CE4-GigabitEthernet0/1/1] quit
[*CE4] commit
# 配置CE5。
<HUAWEI> system-view
[~HUAWEI] sysname CE5
[*HUAWEI] commit
[~CE5] interface gigabitethernet 0/1/1
[*CE5-GigabitEthernet0/1/1] undo shutdown
[*CE5-GigabitEthernet0/1/1] ip address 10.1.1.5 24
[*CE5-GigabitEthernet0/1/1] quit
[*CE5] commit
# 配置CE6。
<HUAWEI> system-view
[~HUAWEI] sysname CE6
[*HUAWEI] commit
[~CE6] interface gigabitethernet 0/1/1
[*CE6-GigabitEthernet0/1/1] undo shutdown
[*CE6-GigabitEthernet0/1/1] ip address 10.1.1.6 24
[*CE6-GigabitEthernet0/1/1] quit
[*CE6] commit
- 在路由器上创建VLAN,并关联二层端口和VLAN
# 配置DeviceA。
<HUAWEI> system-view
[~HUAWEI] sysname DeviceA
[*HUAWEI] commit
[~DeviceA] vlan batch 10 20
[*DeviceA] interface gigabitethernet 0/1/1
[*DeviceA-GigabitEthernet0/1/1] undo shutdown
[*DeviceA-GigabitEthernet0/1/1] portswitch
[*DeviceA-GigabitEthernet0/1/1] port link-type access
[*DeviceA-GigabitEthernet0/1/1] port default vlan 10
[*DeviceA-GigabitEthernet0/1/1] quit
[*DeviceA] interface gigabitethernet 0/1/2
[*DeviceA-GigabitEthernet0/1/2] undo shutdown
[*DeviceA-GigabitEthernet0/1/2] portswitch
[*DeviceA-GigabitEthernet0/1/2] port link-type access
[*DeviceA-GigabitEthernet0/1/2] port default vlan 20
[*DeviceA-GigabitEthernet0/1/2] quit
[*DeviceA] commit
# 配置DeviceB。
<HUAWEI> system-view
[~HUAWEI] sysname DeviceB
[*HUAWEI] commit
[~DeviceB] vlan batch 10 20
[*DeviceB] interface gigabitethernet 0/1/1
[*DeviceB-GigabitEthernet0/1/1] undo shutdown
[*DeviceB-GigabitEthernet0/1/1] portswitch
[*DeviceB-GigabitEthernet0/1/1] port link-type access
[*DeviceB-GigabitEthernet0/1/1] port default vlan 10
[*DeviceB-GigabitEthernet0/1/1] quit
[*DeviceB] interface gigabitethernet 0/1/2
[*DeviceB-GigabitEthernet0/1/2] undo shutdown
[*DeviceB-GigabitEthernet0/1/2] portswitch
[*DeviceB-GigabitEthernet0/1/2] port link-type access
[*DeviceB-GigabitEthernet0/1/2] port default vlan 20
[*DeviceB-GigabitEthernet0/1/2] quit
[*DeviceB] commit
# 配置DeviceC。
<HUAWEI> system-view
[~HUAWEI] sysname DeviceC
[*HUAWEI] commit
[~DeviceC] vlan batch 10 20
[*DeviceC] interface gigabitethernet 0/1/1
[*DeviceC-GigabitEthernet0/1/1] undo shutdown
[*DeviceC-GigabitEthernet0/1/1] portswitch
[*DeviceC-GigabitEthernet0/1/1] port link-type access
[*DeviceC-GigabitEthernet0/1/1] port default vlan 10
[*DeviceC-GigabitEthernet0/1/1] quit
[*DeviceC] interface gigabitethernet 0/1/2
[*DeviceC-GigabitEthernet0/1/2] undo shutdown
[*DeviceC-GigabitEthernet0/1/2] portswitch
[*DeviceC-GigabitEthernet0/1/2] port link-type access
[*DeviceC-GigabitEthernet0/1/2] port default vlan 20
[*DeviceC-GigabitEthernet0/1/2] quit
[*DeviceC] commit
- 配置二层转发功能
# 配置DeviceA。
[~DeviceA] interface gigabitethernet 0/1/3
[*DeviceA-GigabitEthernet0/1/3] undo shutdown
[*DeviceA-GigabitEthernet0/1/3] portswitch
[*DeviceA-GigabitEthernet0/1/3] port link-type trunk
[*DeviceA-GigabitEthernet0/1/3] port trunk allow-pass vlan 10 20
[*DeviceA-GigabitEthernet0/1/3] quit
[*DeviceA] commit
# 配置DeviceB。
[~DeviceB] interface gigabitethernet 0/1/3
[*DeviceB-GigabitEthernet0/1/3] undo shutdown
[*DeviceB-GigabitEthernet0/1/3] portswitch
[*DeviceB-GigabitEthernet0/1/3] port link-type trunk
[*DeviceB-GigabitEthernet0/1/3] port trunk allow-pass vlan 10 20
[*DeviceB-GigabitEthernet0/1/3] quit
[*DeviceB] commit
# 配置DeviceC。
[~DeviceC] interface gigabitethernet 0/1/3
[*DeviceC-GigabitEthernet0/1/3] undo shutdown
[*DeviceC-GigabitEthernet0/1/3] portswitch
[*DeviceC-GigabitEthernet0/1/3] port link-type trunk
[*DeviceC-GigabitEthernet0/1/3] port trunk allow-pass vlan 10 20
[*DeviceC-GigabitEthernet0/1/3] quit
[*DeviceC] commit
如果设备的接口已经是二层接口,则不需要执行portswitch命令。
- 配置VPLS
分别在PE上配置OSPF协议。
配置PE的各接口地址。配置OSPF时,注意需要发布PE的32位Loopback接口地址。
# 配置PE1。
<HUAWEI> system-view
[~HUAWEI] sysname PE1
[*HUAWEI] commit
[~PE1] interface loopback 1
[*PE1-LoopBack1] ip address 1.1.1.9 32
[*PE1-LoopBack1] quit
[*PE1] interface gigabitethernet 0/1/2
[*PE1-GigabitEthernet0/1/2] ip address 192.168.1.1 24
[*PE1-GigabitEthernet0/1/2] undo shutdown
[*PE1-GigabitEthernet0/1/2] quit
[*PE1] interface gigabitethernet 0/1/3
[*PE1-GigabitEthernet0/1/3] ip address 192.168.3.1 24
[*PE1-GigabitEthernet0/1/3] undo shutdown
[*PE1-GigabitEthernet0/1/3] quit
[*PE1] ospf
[*PE1-ospf-1] area 0
[*PE1-ospf-1-area-0.0.0.0] network 1.1.1.9 0.0.0.0
[*PE1-ospf-1-area-0.0.0.0] network 192.168.1.0 0.0.0.255
[*PE1-ospf-1-area-0.0.0.0] network 192.168.3.0 0.0.0.255
[*PE1-ospf-1-area-0.0.0.0] quit
[*PE1-ospf-1] quit
[*PE1] commit
# 配置PE2。
<HUAWEI> system-view
[~HUAWEI] sysname PE2
[*HUAWEI] commit
[~PE2] interface LoopBack 1
[*PE2-LoopBack1] ip address 2.2.2.9 32
[*PE2-LoopBack1] quit
[*PE2] interface gigabitethernet 0/1/2
[*PE2-GigabitEthernet0/1/2] ip address 192.168.2.2 24
[*PE2-GigabitEthernet0/1/2] undo shutdown
[*PE2-GigabitEthernet0/1/2] quit
[*PE2] interface gigabitethernet 0/1/3
[*PE2-GigabitEthernet0/1/3] ip address 192.168.3.2 24
[*PE2-GigabitEthernet0/1/3] undo shutdown
[*PE2-GigabitEthernet0/1/3] quit
[*PE2] ospf
[*PE2-ospf-1] area 0
[*PE2-ospf-1-area-0.0.0.0] network 2.2.2.9 0.0.0.0
[*PE2-ospf-1-area-0.0.0.0] network 192.168.2.0 0.0.0.255
[*PE2-ospf-1-area-0.0.0.0] network 192.168.3.0 0.0.0.255
[*PE2-ospf-1-area-0.0.0.0] quit
[*PE2-ospf-1] quit
[*PE2] commit
# 配置PE3。
<HUAWEI> system-view
[~HUAWEI] sysname PE3
[*HUAWEI] commit
[~PE3] interface loopback 1
[*PE3-LoopBack1] ip address 3.3.3.9 32
[*PE3-LoopBack1] quit
[*PE3] interface gigabitethernet 0/1/2
[*PE3-GigabitEthernet0/1/2] ip address 192.168.1.2 24
[*PE3-GigabitEthernet0/1/2] undo shutdown
[*PE3-GigabitEthernet0/1/2] quit
[*PE3] interface gigabitethernet 0/1/3
[*PE3-GigabitEthernet0/1/3] ip address 192.168.2.1 24
[*PE3-GigabitEthernet0/1/3] undo shutdown
[*PE3-GigabitEthernet0/1/3] quit
[*PE3] ospf
[*PE3-ospf-1] area 0
[*PE3-ospf-1-area-0.0.0.0] network 3.3.3.9 0.0.0.0
[*PE3-ospf-1-area-0.0.0.0] network 192.168.1.0 0.0.0.255
[*PE3-ospf-1-area-0.0.0.0] network 192.168.2.0 0.0.0.255
[*PE3-ospf-1-area-0.0.0.0] quit
[*PE3-ospf-1] quit
[*PE3] commit
完成上述步骤后,PE1和PE2、PE1和PE3之间通过OSPF协议发现的对方Loopback1的IP路由,并能互相Ping通。
以PE1的显示为例。
[~PE1] display ip routing-table
Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route ------------------------------------------------------------------------------ Routing Table : _public_ Destinations : 14 Routes : 14 Destination/Mask Proto Pre Cost Flags NextHop Interface 1.1.1.9/32 Direct 0 0 D 127.0.0.1 LoopBack1 2.2.2.9/32 OSPF 10 1 D 192.168.3.2 GigabitEthernet0/1/3 3.3.3.9/32 OSPF 10 1 D 192.168.1.2 GigabitEthernet0/1/2 192.168.1.0/24 Direct 0 0 D 192.168.1.1 GigabitEthernet0/1/2 192.168.1.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/1/2 192.168.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/1/2 192.168.2.0/24 OSPF 10 2 D 192.168.3.2 GigabitEthernet0/1/3 OSPF 10 2 D 192.168.1.2 GigabitEthernet0/1/2 192.168.3.0/24 Direct 0 0 D 192.168.3.1 GigabitEthernet0/1/3 192.168.3.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/1/3 192.168.3.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/1/3 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0 127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0 255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
[*PE1] ping 192.168.2.2
PING 192.168.2.2: 56 data bytes, press CTRL_C to break Reply from 192.168.2.2: bytes=56 Sequence=1 ttl=254 time=6 ms Reply from 192.168.2.2: bytes=56 Sequence=2 ttl=254 time=2 ms Reply from 192.168.2.2: bytes=56 Sequence=3 ttl=254 time=1 ms Reply from 192.168.2.2: bytes=56 Sequence=4 ttl=254 time=2 ms Reply from 192.168.2.2: bytes=56 Sequence=5 ttl=254 time=1 ms --- 192.168.2.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 1/2/6 ms
使能MPLS基本能力和LDP。
# 配置PE1。
[*PE1] mpls lsr-id 1.1.1.9
[*PE1] mpls
[*PE1-mpls] quit
[*PE1] mpls ldp
[*PE1-mpls-ldp] quit
[*PE1] interface gigabitethernet 0/1/2
[*PE1-GigabitEthernet0/1/2] mpls
[*PE1-GigabitEthernet0/1/2] mpls ldp
[*PE1-GigabitEthernet0/1/2] quit
[*PE1] interface gigabitethernet 0/1/3
[*PE1-GigabitEthernet0/1/3] mpls
[*PE1-GigabitEthernet0/1/3] mpls ldp
[*PE1-GigabitEthernet0/1/3] quit
[*PE1] commit
# 配置PE2。
[~PE2] mpls lsr-id 2.2.2.9
[*PE2] mpls
[*PE2-mpls] quit
[*PE2] mpls ldp
[*PE2-mpls-ldp] quit
[*PE2] interface gigabitethernet0/1/2
[*PE2-GigabitEthernet0/1/2] mpls
[*PE2-GigabitEthernet0/1/2] mpls ldp
[*PE2-GigabitEthernet0/1/2] quit
[*PE2] interface gigabitethernet0/1/3
[*PE2-GigabitEthernet0/1/3] mpls
[*PE2-GigabitEthernet0/1/3] mpls ldp
[*PE2-GigabitEthernet0/1/3] quit
[*PE2] commit
# 配置PE3。
[~PE3] mpls lsr-id 3.3.3.9
[*PE3] mpls
[*PE3-mpls] quit
[*PE3] mpls ldp
[*PE3-mpls-ldp] quit
[*PE3] interface gigabitethernet 0/1/2
[*PE3-GigabitEthernet0/1/2] mpls
[*PE3-GigabitEthernet0/1/2] mpls ldp
[*PE3-GigabitEthernet0/1/2] quit
[*PE3] interface gigabitethernet 0/1/3
[*PE3-GigabitEthernet0/1/3] mpls
[*PE3-GigabitEthernet0/1/3] mpls ldp
[*PE3-GigabitEthernet0/1/3] quit
[*PE3] commit
上述配置完成后,PE1与PE2、PE1与PE3之间建立LDP会话,执行命令display mpls ldp session可以看到显示结果中Status项为“Operational”。
以PE1的显示为例。
[~PE1] display mpls ldp session
LDP Session(s) in Public Network Codes: LAM(Label Advertisement Mode), SsnAge Unit(DDDD:HH:MM) An asterisk (*) before a session means the session is being deleted. -------------------------------------------------------------------------- PeerID Status LAM SsnRole SsnAge KASent/Rcv -------------------------------------------------------------------------- 2.2.2.9:0 Operational DU Passive 0000:00:01 6/6 3.3.3.9:0 Operational DU Passive 0000:00:00 1/1 -------------------------------------------------------------------------- TOTAL: 2 Session(s) Found.
如果PE之间非直连,还需要使用mpls ldp remote-peer和remote-ip命令,在PE之间建立远端LDP会话。
使能MPLS L2VPN。
# 配置PE1。
[*PE1] mpls l2vpn
[*PE1-l2vpn] quit
[*PE1] commit
# 配置PE2。
[~PE2] mpls l2vpn
[*PE2-l2vpn] quit
[*PE2] commit
# 配置PE3。
[~PE3] mpls l2vpn
[*PE3-l2vpn] quit
[*PE3] commit
配置VSI和Dot1q终结子接口,并将VSI与Dot1q终结子接口绑定。
# 配置PE1。
[~PE1] vsi ldp1 static
[*PE1-vsi-ldp1] pwsignal ldp
[*PE1-vsi-ldp1-ldp] vsi-id 2
[*PE1-vsi-ldp1-ldp] peer 2.2.2.9
[*PE1-vsi-ldp1-ldp] peer 3.3.3.9
[*PE1-vsi-ldp1-ldp] quit
[*PE1-vsi-ldp1] quit
[*PE1] interface gigabitethernet 0/1/1.1
[*PE1-GigabitEthernet0/1/1.1] control-vid 1 dot1q-termination
[*PE1-GigabitEthernet0/1/1.1] dot1q termination vid 10
[*PE1-GigabitEthernet0/1/1.1] dot1q termination vid 20
[*PE1-GigabitEthernet0/1/1.1] l2 binding vsi ldp1
[*PE1-GigabitEthernet0/1/1.1] quit
[*PE1] commit
# 配置PE2。
[~PE2] vsi ldp1 static
[*PE2-vsi-ldp1] pwsignal ldp
[*PE2-vsi-ldp1-ldp] vsi-id 2
[*PE2-vsi-ldp1-ldp] peer 1.1.1.9
[*PE2-vsi-ldp1-ldp] peer 3.3.3.9
[*PE2-vsi-ldp1-ldp] quit
[*PE2-vsi-ldp1] quit
[*PE2] interface gigabitethernet 0/1/1.1
[*PE2-GigabitEthernet0/1/1.1] control-vid 1 dot1q-termination
[*PE2-GigabitEthernet0/1/1.1] dot1q termination vid 10
[*PE2-GigabitEthernet0/1/1.1] dot1q termination vid 20
[*PE2-GigabitEthernet0/1/1.1] l2 binding vsi ldp1
[*PE2-GigabitEthernet0/1/1.1] quit
[*PE2] commit
# 配置PE3。
[~PE3] vsi ldp1 static
[*PE3-vsi-ldp1] pwsignal ldp
[*PE3-vsi-ldp1-ldp] vsi-id 2
[*PE3-vsi-ldp1-ldp] peer 1.1.1.9
[*PE3-vsi-ldp1-ldp] peer 2.2.2.9
[*PE3-vsi-ldp1-ldp] quit
[*PE3-vsi-ldp1] quit
[*PE3] interface gigabitethernet 0/1/1.1
[*PE3-GigabitEthernet0/1/1.1] control-vid 1 dot1q-termination
[*PE3-GigabitEthernet0/1/1.1] dot1q termination vid 10
[*PE3-GigabitEthernet0/1/1.1] dot1q termination vid 20
[*PE3-GigabitEthernet0/1/1.1] l2 binding vsi ldp1
[*PE3-GigabitEthernet0/1/1.1] quit
[*PE3] commit
同一主接口不同子接口上使用dot1q termination命令时,两个不同子接口的VLAN Tag取值范围不能有重叠。
完成上述配置后,在PE1上执行命令display vsi name ldp1 verbose,可以看到名字为ldp1的VSI建立了到PE2、PE3的PW,VSI状态为Up。[~PE1] display vsi name ldp1 verbose
***VSI Name : ldp1 Administrator VSI : no Isolate Spoken : disable VSI Index : 1 PW Signaling : ldp Member Discovery Style : static Bridge-domain Mode : disable PW MAC Learn Style : unqualify Encapsulation Type : vlan MTU : 1500 Diffserv Mode : uniform Service Class : -- Color : -- DomainId : 255 Domain Name : Ignore AcState : disable P2P VSI : disable Create Time : 0 days, 0 hours, 3 minutes, 8 seconds VSI State : up VSI ID : 2 *Peer Router ID : 2.2.2.9 primary or secondary : primary ignore-standby-state : no VC Label : 17 Peer Type : dynamic Session : up Tunnel ID :0x0000000001006a5c21 Broadcast Tunnel ID : -- Broad BackupTunnel ID : -- CKey : 1 NKey : 3154116711 Stp Enable : 0 PwIndex : 0 Control Word : disable *Peer Router ID : 3.3.3.9 primary or secondary : primary ignore-standby-state : no VC Label : 18 Peer Type : dynamic Session : up Tunnel ID : 0x0000000001004c4b43 Broadcast Tunnel ID : -- Broad BackupTunnel ID : -- CKey : 2 NKey : 3154116712 Stp Enable : 0 PwIndex : 0 Control Word : disable Interface Name : GigabitEthernet0/1/1.1 State : up Access Port : false Last Up Time : 2012/07/19 03:19:14 Total Up Time : 0 days, 0 hours, 3 minutes, 11 seconds **PW Information: *Peer Ip Address : 2.2.2.9 PW State : up Local VC Label : 17 Remote VC Label : 17 Remote Control Word : disable PW Type : label Tunnel ID : 0x0000000001006a5c21 Broadcast Tunnel ID : -- Broad BackupTunnel ID : -- Ckey : 1 Nkey : 3154116711 Main PW Token : 0x0 Slave PW Token : 0x0 Tnl Type : ldp OutInterface : LDP LSP Backup OutInterface : Stp Enable : 0 PW Last Up Time : 2012/07/19 03:21:09 PW Total Up Time : 0 days, 0 hours, 0 minutes, 29 seconds *Peer Ip Address : 3.3.3.9 PW State : up Local VC Label : 18 Remote VC Label : 17 Remote Control Word : disable PW Type : label Tunnel ID : 0x0000000001004c4b43 Broadcast Tunnel ID : -- Broad BackupTunnel ID : -- Ckey : 2 Nkey : 3154116712 Main PW Token : 0x0 Slave PW Token : 0x0 Tnl Type : ldp OutInterface : LDP LSP Backup OutInterface : Stp Enable : 0 PW Last Up Time : 2012/07/19 03:21:09 PW Total Up Time : 0 days, 0 hours, 0 minutes, 29 seconds
- 检查配置结果
上述配置完成后,执行命令display dot1q information termination interface,可以查看到Dot1q终结子接口配置信息,及Dot1q终结子接口绑定了VSI。
以PE1的显示为例。
[*PE1] display dot1q information termination interface gigabitethernet 0/1/1.1
GigabitEthernet0/1/1.1 VSI bound Total QinQ Num: 2 dot1q termination vid 10 dot1q termination vid 20 Total vlan-group Num: 0 encapsulation dot1q-termination
CE1、CE2和CE3下的主机能够相互Ping通。
[~CE1] ping 10.1.1.2
PING 10.1.1.2: 56 data bytes, press CTRL_C to break Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=43 ms Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=33 ms Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=98 ms Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=181 ms Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=129 ms --- 10.1.1.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 33/96/181 ms
[~CE1] ping 10.1.1.3
PING 10.1.1.3: 56 data bytes, press CTRL_C to break Reply from 10.1.1.3: bytes=56 Sequence=1 ttl=255 time=3 ms Reply from 10.1.1.3: bytes=56 Sequence=2 ttl=255 time=2 ms Reply from 10.1.1.3: bytes=56 Sequence=3 ttl=255 time=2 ms Reply from 10.1.1.3: bytes=56 Sequence=4 ttl=255 time=2 ms Reply from 10.1.1.3: bytes=56 Sequence=5 ttl=255 time=2 ms --- 10.1.1.3 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 2/2/3 ms
配置文件
PE1的配置文件
# sysname PE1 # mpls lsr-id 1.1.1.9 # mpls # mpls l2vpn # vsi ldp1 static pwsignal ldp vsi-id 2 peer 3.3.3.9 peer 2.2.2.9 # mpls ldp # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 encapsulation dot1q-termination dot1q termination vid 10 dot1q termination vid 20 l2 binding vsi ldp1 # interface GigabitEthernet0/1/2 undo shutdown ip address 192.168.1.1 255.255.255.252 mpls mpls ldp # interface GigabitEthernet0/1/3 undo shutdown ip address 192.168.3.1 255.255.255.252 mpls mpls ldp # interface LoopBack1 ip address 1.1.1.9 255.255.255.255 # ospf 1 area 0.0.0.0 network 1.1.1.9 0.0.0.0 network 192.168.1.0 0.0.0.3 network 192.168.3.0 0.0.0.3 # return
PE2的配置文件
# sysname PE2 # mpls lsr-id 2.2.2.9 # mpls # mpls l2vpn # vsi ldp1 static pwsignal ldp vsi-id 2 peer 1.1.1.9 peer 3.3.3.9 # mpls ldp # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 encapsulation dot1q-termination dot1q termination vid 10 dot1q termination vid 20 l2 binding vsi ldp1 # interface GigabitEthernet0/1/2 undo shutdown ip address 192.168.2.2 255.255.255.252 mpls mpls ldp # interface GigabitEthernet0/1/3 undo shutdown ip address 192.168.3.2 255.255.255.252 mpls mpls ldp # interface LoopBack1 ip address 2.2.2.9 255.255.255.255 # ospf 1 area 0.0.0.0 network 2.2.2.9 0.0.0.0 network 192.168.3.0 0.0.0.3 network 192.168.2.0 0.0.0.3 # return
PE3的配置文件
# sysname PE3 # mpls lsr-id 3.3.3.9 # mpls # mpls l2vpn # vsi ldp1 static pwsignal ldp vsi-id 2 peer 1.1.1.9 peer 2.2.2.9 # mpls ldp # interface GigabitEthernet0/1/1 undo shutdown # interface GigabitEthernet0/1/1.1 encapsulation dot1q-termination dot1q termination vid 10 dot1q termination vid 20 l2 binding vsi ldp1 # interface GigabitEthernet0/1/2 undo shutdown ip address 192.168.1.2 255.255.255.252 mpls mpls ldp # interface GigabitEthernet0/1/3 undo shutdown ip address 192.168.2.1 255.255.255.252 mpls mpls ldp # interface LoopBack1 ip address 3.3.3.9 255.255.255.255 # ospf 1 area 0.0.0.0 network 3.3.3.9 0.0.0.0 network 192.168.1.0 0.0.0.3 network 192.168.2.0 0.0.0.3 # return
DeviceA的配置文件
# sysname DeviceA # vlan batch 10 20 # interface GigabitEthernet0/1/1 portswitch undo shutdown port link-type access port default vlan 10 # interface GigabitEthernet0/1/2 portswitch undo shutdown port link-type access port default vlan 20 # interface GigabitEthernet0/1/3 portswitch undo shutdown port link-type trunk port trunk allow-pass vlan 10 20 # return
DeviceB的配置文件
# sysname DeviceB # vlan batch 10 20 # interface GigabitEthernet0/1/1 portswitch undo shutdown port link-type access port default vlan 10 # interface GigabitEthernet0/1/2 portswitch undo shutdown port link-type access port default vlan 20 # interface GigabitEthernet0/1/3 portswitch undo shutdown port link-type trunk port trunk allow-pass vlan 10 20 # return
DeviceC的配置文件
# sysname DeviceC # vlan batch 10 20 # interface GigabitEthernet0/1/1 portswitch undo shutdown port link-type access port default vlan 10 # interface GigabitEthernet0/1/2 portswitch undo shutdown port link-type access port default vlan 20 # interface GigabitEthernet0/1/3 portswitch undo shutdown port link-type trunk port trunk allow-pass vlan 10 20 # return
CE1的配置文件
# sysname CE1 # interface GigabitEthernet0/1/1 undo shutdown ip address 10.1.1.1 255.255.255.0 # return
CE2的配置文件
# sysname CE2 # interface GigabitEthernet0/1/1 undo shutdown ip address 10.1.1.2 255.255.255.0 # return
CE3的配置文件
# sysname CE3 # interface GigabitEthernet0/1/1 undo shutdown ip address 10.1.1.3 255.255.255.0 # return
CE4的配置文件
# sysname CE4 # interface GigabitEthernet0/1/1 undo shutdown ip address 10.1.1.4 255.255.255.0 # return
CE5的配置文件
# sysname CE5 # interface GigabitEthernet0/1/1 undo shutdown ip address 10.1.1.5 255.255.255.0 # return
CE6的配置文件
# sysname CE6 # interface GigabitEthernet0/1/1 undo shutdown ip address 10.1.1.6 255.255.255.0 # return