MPLS VPN跨域C2 RR反射器方案（二）-阿里云开发者社区

MPLS VPN跨域C2 RR反射器方案（二）

2023-10-27 238

版权

本文内容由阿里云实名注册用户自发贡献，版权归原作者所有，阿里云开发者社区不拥有其著作权，亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容，填写侵权投诉表单进行举报，一经查实，本社区将立刻删除涉嫌侵权内容。

简介： MPLS VPN跨域C2 RR反射器方案

ip vpn-instance vpn1
 ipv4-family
  route-distinguisher 6:6
  vpn-target 6:1 export-extcommunity
  vpn-target 1:6 import-extcommunity
#
mpls lsr-id 6.6.6.6
mpls
#
mpls ldp
#
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 50.0000.0000.0006.00
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 56.1.1.6 255.255.255.0
 isis enable 1
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip binding vpn-instance vpn1
 ip address 68.1.1.6 255.255.255.0
 ospf enable 1 area 0.0.0.0
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 6.6.6.6 255.255.255.255
 isis enable 1
#
bgp 200
 peer 10.10.10.10 as-number 200
 peer 10.10.10.10 connect-interface LoopBack0
 #
 ipv4-family unicast
  undo synchronization
  peer 10.10.10.10 enable
  peer 10.10.10.10 label-route-capability
 #
 ipv4-family vpnv4
  policy vpn-target
  peer 10.10.10.10 enable
 #
 ipv4-family vpn-instance vpn1
  import-route ospf 1
#
ospf 1 vpn-instance vpn1
 import-route bgp
 area 0.0.0.0

R10

mpls lsr-id 10.10.10.10
mpls
#
mpls ldp
#
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
isis 1
 is-level level-2
 cost-style wide
 network-entity 50.0000.0000.0010.00
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 15.1.1.1 255.255.255.0
 isis enable 1
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
 ip address 10.10.10.10 255.255.255.255
 isis enable 1
#
bgp 200
 peer 4.4.4.4 as-number 200
 peer 4.4.4.4 connect-interface LoopBack0
 peer 6.6.6.6 as-number 200
 peer 6.6.6.6 connect-interface LoopBack0
 peer 9.9.9.9 as-number 100
 peer 9.9.9.9 ebgp-max-hop 255
 peer 9.9.9.9 connect-interface LoopBack0
 #
 ipv4-family unicast
  undo synchronization
  peer 4.4.4.4 enable
  peer 4.4.4.4 label-route-capability
  peer 6.6.6.6 enable
  peer 9.9.9.9 enable
  peer 9.9.9.9 next-hop-invariable
  peer 9.9.9.9 label-route-capability
 #
 ipv4-family vpnv4
  undo policy vpn-target
  peer 6.6.6.6 enable
  peer 6.6.6.6 next-hop-invariable
  peer 9.9.9.9 enable
  peer 9.9.9.9 next-hop-invariable
#

路由传递

如图，7.7.7.7的路由传递给R6时，首先R1把R7的路由引入到MP-BGP中，MP-BGP会为这个VRF实例分配一个内层标签会被VPNV4路由携带。这条路由被R1传递给MP-IBGP邻居R9（也就是反射器），因为反射器配置了不检查RT值功能，所以他可以接收这条路由，并把这条路由继续传递给R10设备，R10也是一台RR设备，它同时也配置了不检查RT值功能，所以他也可以收到这条路由，并把路由反射给了R6设备，R6设备根据内层标签将路由传递给了VRF实例。