MPLS VPN跨域C1方案 RR反射器(二)

简介: MPLS VPN跨域C1方案 RR反射器

R3

mpls lsr-id 3.3.3.3
mpls
#
mpls ldp
#
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 49.0000.0000.0003.00
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 23.1.1.3 255.255.255.0
 isis enable 1
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip address 34.1.1.3 255.255.255.0
 mpls
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 3.3.3.3 255.255.255.255
 isis enable 1
#
bgp 100
 peer 9.9.9.9 as-number 100
 peer 9.9.9.9 connect-interface LoopBack0
 peer 34.1.1.4 as-number 200
 #
 ipv4-family unicast
  undo synchronization
  network 1.1.1.1 255.255.255.255
  network 9.0.0.0
  network 9.9.9.9 255.255.255.255
  peer 9.9.9.9 enable
  peer 9.9.9.9 route-policy 2 export
  peer 9.9.9.9 label-route-capability
  peer 34.1.1.4 enable
  peer 34.1.1.4 route-policy 1 export
  peer 34.1.1.4 label-route-capability
#
route-policy 1 permit node 10
 apply mpls-label
#
route-policy 2 permit node 10
 if-match mpls-label
 apply mpls-label

R9

mpls lsr-id 9.9.9.9
mpls
#
mpls ldp
#
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 49.0000.0000.0009.00
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 29.1.1.9 255.255.255.0
 isis enable 1
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 9.9.9.9 255.255.255.255
 isis enable 1
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack0
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack0
 peer 10.10.10.10 as-number 200
 peer 10.10.10.10 ebgp-max-hop 255
 peer 10.10.10.10 connect-interface LoopBack0
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 1.1.1.1 reflect-client
  peer 1.1.1.1 label-route-capability
  peer 3.3.3.3 enable
  peer 3.3.3.3 label-route-capability
  peer 10.10.10.10 enable
 #
 ipv4-family vpnv4
  undo policy vpn-target
  peer 1.1.1.1 enable
  peer 1.1.1.1 reflect-client
  peer 10.10.10.10 enable
  peer 10.1

R4

mpls lsr-id 4.4.4.4
mpls
#
mpls ldp
#
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 50.0000.0000.0004.00
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 34.1.1.4 255.255.255.0
 mpls
#
interface GigabitEthernet0/0/1
 ip address 45.1.1.4 255.255.255.0
 isis enable 1
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 4.4.4.4 255.255.255.255
 isis enable 1
#
bgp 200
 peer 10.10.10.10 as-number 200
 peer 10.10.10.10 connect-interface LoopBack0
 peer 34.1.1.3 as-number 100
 #
 ipv4-family unicast
  undo synchronization
  network 6.6.6.6 255.255.255.255
  network 10.10.10.10 255.255.255.255
  peer 10.10.10.10 enable
  peer 10.10.10.10 route-policy 2 export
  peer 10.10.10.10 label-route-capability
  peer 34.1.1.3 enable
  peer 34.1.1.3 route-policy 1 export
  peer 34.1.1.3 label-route-capability
#
route-policy 2 permit node 10
 if-match mpls-label
 apply mpls-label
#
route-policy 1 permit node 10
 apply mpls-label

R6

ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 6:6
  vpn-target 6:1 export-extcommunity
  vpn-target 1:6 import-extcommunity
#
mpls lsr-id 6.6.6.6
mpls
#
mpls ldp
#
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 50.0000.0000.0006.00
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 56.1.1.6 255.255.255.0
 isis enable 1
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip binding vpn-instance vpn1
 ip address 68.1.1.6 255.255.255.0
 ospf enable 1 area 0.0.0.0
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 6.6.6.6 255.255.255.255
 isis enable 1
#
bgp 200
 peer 10.10.10.10 as-number 200
 peer 10.10.10.10 connect-interface LoopBack0
 #
 ipv4-family unicast
  undo synchronization
  peer 10.10.10.10 enable
  peer 10.10.10.10 label-route-capability
 #
 ipv4-family vpnv4
  policy vpn-target
  peer 10.10.10.10 enable
 #
 ipv4-family vpn-instance vpn1
  import-route ospf 1
#
ospf 1 vpn-instance vpn1
 import-route bgp
 area 0.0.0.0

R10

 

mpls lsr-id 10.10.10.10
mpls
#
mpls ldp
#
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 50.0000.0000.0010.00
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 15.1.1.1 255.255.255.0
 isis enable 1
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 10.10.10.10 255.255.255.255
 isis enable 1
#
interface LoopBack9
#
bgp 200
 peer 4.4.4.4 as-number 200
 peer 4.4.4.4 connect-interface LoopBack0
 peer 6.6.6.6 as-number 200
 peer 6.6.6.6 connect-interface LoopBack0
 peer 9.9.9.9 as-number 100
 peer 9.9.9.9 ebgp-max-hop 255
 peer 9.9.9.9 connect-interface LoopBack0
 #
 ipv4-family unicast
  undo synchronization
  peer 4.4.4.4 enable
  peer 4.4.4.4 label-route-capability
  peer 6.6.6.6 enable
  peer 6.6.6.6 reflect-client
  peer 6.6.6.6 label-route-capability
  peer 9.9.9.9 enable
 #
 ipv4-family vpnv4
  undo policy vpn-target
  peer 6.6.6.6 enable
  peer 6.6.6.6 reflect-client
  peer 9.9.9.9 enable
  peer 9.9.9.9 next-hop-invariable
目录
相关文章
|
4月前
|
网络协议 PHP 网络虚拟化
BGP MPLS VPN(OPTION C)实验笔记
BGP MPLS VPN(OPTION C)实验笔记
71 1
|
4月前
|
网络协议 网络虚拟化
MPLS VPN 跨域OptionC2
MPLS VPN 跨域OptionC2
|
4月前
|
网络协议 PHP 网络虚拟化
BGP MPLS VPN(OPTION B)实验笔记
BGP MPLS VPN(OPTION B)实验笔记
72 0
BGP MPLS VPN(OPTION B)实验笔记
|
4月前
|
网络协议 网络虚拟化
|
4月前
|
网络协议 PHP 网络虚拟化
MPLS VPN 跨域OptionB
使用跨域方式B实现两家公司的通信
|
4月前
|
网络协议 网络虚拟化
MPLS VPN 跨域OptionA
通过跨域A的方式实现两家公司互相通信
|
4月前
|
网络协议 网络虚拟化
MPLS VPN Hub&Spoke架构
MPLS VPN Hub&Spoke架构
|
5月前
|
新制造 SDN 网络虚拟化
SD-WAN 大战 MPLS VPN 多年,赢了吗?
在过去的10年中,SDN(软件定义网络)已在数据中心和云节点之间的网络中得到广泛应用。而SD-WAN(软件定义广域网)则解决了各种复杂的广域网连接场景,成为大多数中小型企业组网的首选方案。 尽管当前SD-WAN市场有着广泛的应用,但在经过近几年的发展后,我们也开始意识到SD-WAN面临着各种问题,其中有些问题是不可调和的。那么,SD-WAN的发展面临哪些阻碍?如何应对这些挑战?本文将着重探讨这些问题,同时分享行业的最佳实践。
SD-WAN 大战 MPLS VPN 多年,赢了吗?
|
6月前
|
网络虚拟化
MPLS VPN跨域C2 RR反射器方案(二)
MPLS VPN跨域C2 RR反射器方案
55 0
|
6月前
|
网络虚拟化
MPLS VPN跨域C2 RR反射器方案(一)
MPLS VPN跨域C2 RR反射器方案
46 0