ENSP-MPLS VPN实例

Z7·

已于 2024-05-15 09:16:39 修改

阅读量1.9k

点赞数 12

分类专栏：网络运维文章标签：网络

于 2024-05-14 16:44:42 首次发布

本文链接：https://blog.youkuaiyun.com/qq_38255759/article/details/138853411

版权

网络运维专栏收录该内容

8 篇文章

订阅专栏

【实验思路】

1. 公网互通：IGP协议使用ISIS

2. 建立隧道：使用MPLS-LDP建立隧道，用来传递路由协议

3. 创建实例：使用VRF虚拟路由技术，在PE中创建VPN实例（虚拟路由），连接各CE

4. PE-PE路由传递：使用MP-BGP协议，创建对等体，依托隧道传递路由。

5. PE-CE路由传递：使用OSPF动态路由

6. PE-CE路由引入：BGP和OSPF双向路由引入

【实验步骤】

一. 公网配置

1. 配置IP

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 12.0.0.1 24
[R1]int LoopBack 1   // 回环用处：MPLS-LDP RID、BGP RID、OSPF RID、模拟PC端
[R1-LoopBack1]ip add 1.1.1.1 32

[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 12.0.0.2 24
[R2]int g0/0/1
[R2-GigabitEthernet0/0/0]ip add 23.0.0.1 24
[R2]int LoopBack 1
[R2-LoopBack1]ip add 2.2.2.2 32

[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 23.0.0.2 24
[R3]int LoopBack 1
[R3-LoopBack1]ip add 3.3.3.3 32

2. 配置ISIS

[R1]isis 15 	
[R1-isis-15]network-entity 4901.0000.0000.0001.00
[R1-isis-15]is-level level-2

[R1-GigabitEthernet0/0/0]isis enable 15
[R1-LoopBack1]isis enable 15

[R2]isis 15 	
[R2-isis-15]network-entity 4901.0000.0000.0002.00
[R2-isis-15]is-level level-2

[R2-GigabitEthernet0/0/0]isis enable 15
[R2-GigabitEthernet0/0/1]isis enable 15
[R2-LoopBack1]isis enable 15

[R3]isis 15 	
[R3-isis-15]network-entity 4901.0000.0000.0003.00
[R3-isis-15]is-level level-2

[R3-GigabitEthernet0/0/0]isis enable 15
[R3-LoopBack1]isis enable 15

3. 配置MPLS

[R1]mpls lsr-id 1.1.1.1
[R1]mpls
[R1]mpls ldp
[R1-GigabitEthernet0/0/0]mpls 
[R1-GigabitEthernet0/0/0]mpls ldp

[R2]mpls lsr-id 2.2.2.2
[R2]mpls
[R2]mpls ldp
[R2-GigabitEthernet0/0/0]mpls 
[R2-GigabitEthernet0/0/0]mpls ldp
[R2-GigabitEthernet0/0/1]mpls 
[R2-GigabitEthernet0/0/1]mpls ldp

[R3]mpls lsr-id 3.3.3.3
[R3]mpls
[R3]mpls ldp
[R3-GigabitEthernet0/0/0]mpls 
[R3-GigabitEthernet0/0/0]mpls ldp

4. 验证配置

<R2>dis isis peer   // 查看is邻居
<R2>dis isis lsdb   // 查看is数据库
<R2>dis isis route  // 查看is路由表

<R2>dis mpls lsp    // 查看标签转发表
<R2>dis fib         // 查看路由转发表

<R2>dis ip routing-table // 查看路由表

二、公司A配置

1. 创建VPN实例（VRF虚拟路由）

[R1]ip vpn-instance A
[R1-vpn-instance-A]route-distinguisher 1:3
[R1-vpn-instance-A-af-ipv4]vpn-target 1:3 export-extcommunity
[R1-vpn-instance-A-af-ipv4]vpn-target 3:1 import-extcommunity

[R3]ip vpn-instance A
[R3-vpn-instance-A]route-distinguisher 1:3
[R3-vpn-instance-A-af-ipv4]vpn-target 1:3 import-extcommunity
[R3-vpn-instance-A-af-ipv4]vpn-target 3:1 export-extcommunity

2. 接口绑定VPN实例

[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ip binding vpn-instance A
[R1-GigabitEthernet0/0/1]ip add 192.168.10.1 24

[R3]int g0/0/1
[R3-GigabitEthernet0/0/1]ip binding vpn-instance A
[R3-GigabitEthernet0/0/1]ip add 192.168.20.1 24

3 .配置OSPF(PE-CE)

[R1]ospf 10 router-id 1.1.1.1 vpn-instance A
[R1-ospf-10]area 0
[R1-ospf-10-area-0.0.0.0]network 192.168.10.0 0.0.0.255

[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 192.168.10.2 24
[R4]int LoopBack 1
[R4-LoopBack1]ip add 4.4.4.4 32

[R4]ospf 10 router-id 4.4.4.4
[R4-ospf-10]area 0
[R4-ospf-10-area-0.0.0.0]network 0.0.0.0 0.0.0.0

[R3]ospf 10 router-id 3.3.3.3 vpn-instance A
[R3-ospf-10]area 0
[R3-ospf-10-area-0.0.0.0]network 192.168.20.0 0.0.0.255

[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip add 192.168.20.2 24
[R5]int LoopBack 1
[R5-LoopBack1]ip add 5.5.5.5 32

[R5]ospf 10 router-id 5.5.5.5
[R5-ospf-10]area 0
[R5-ospf-10-area-0.0.0.0]network 0.0.0.0 0.0.0.0

4. 配置MP-BGP并且宣告路由

// 创建bgp并且使用回环口建立邻居
[R1]bgp 100
[R1-bgp]router-id 1.1.1.1
[R1-bgp]peer 3.3.3.3 as-number 100
[R1-bgp]peer 3.3.3.3 connect-interface LoopBack 1

// 开启BGP-VPN传递功能
[R1-bgp]ipv4-family vpnv4
[R1-bgp-af-vpnv4]peer 3.3.3.3 enable 

// 宣告路由
[R1-bgp]ipv4-family vpn-instance A
[R1-bgp-A]network 192.168.10.0 24

[R3]bgp 100
[R3-bgp]router-id 3.3.3.3
[R3-bgp]peer 1.1.1.1 as-number 100
[R3-bgp]peer 1.1.1.1 connect-interface LoopBack 1

[R3-bgp]ipv4-family vpnv4
[R3-bgp-af-vpnv4]peer 1.1.1.1 enable 

[R3-bgp]ipv4-family vpn-instance A
[R3-bgp-A]network 192.168.20.0 24

5. 双向路由引入

[R1]bgp 100
[R1-bgp]ipv4-family vpn-instance A
[R1-bgp-A]import-route ospf 10

[R1]ospf 10
[R1-ospf-10]import-route bgp

[R3]bgp 100
[R3-bgp]ipv4-family vpn-instance A
[R3-bgp-A]import-route ospf 10

[R3]ospf 10
[R3-ospf-10]import-route bgp

6. 验证配置

// 查看VPN1 路由表
[R1]dis ip routing-table vpn-instance A

// 查看BGP-VPN1 路由表
[R1]dis bgp vpnv4 vpn-instance A routing-table

<R4>ping 192.168.20.2
<R4>ping -a 4.4.4.4 5.5.5.5
<R4>tracert -v 5.5.5.5

二、公司B配置

1. 创建VPN实例（VRF虚拟路由）

[R1]ip vpn-instance B
[R1-vpn-instance-A]route-distinguisher 2:4
[R1-vpn-instance-A-af-ipv4]vpn-target 2:4 export-extcommunity
[R1-vpn-instance-A-af-ipv4]vpn-target 4:2 import-extcommunity

[R3]ip vpn-instance B
[R3-vpn-instance-A]route-distinguisher 2:4
[R3-vpn-instance-A-af-ipv4]vpn-target 2:4 import-extcommunity
[R3-vpn-instance-A-af-ipv4]vpn-target 4:2 export-extcommunity

2. 接口绑定VPN实例

[R1]int g2/0/0
[R1-GigabitEthernet2/0/0]ip binding vpn-instance B
[R1-GigabitEthernet2/0/0]ip add 192.168.30.1 24

[R3]int g2/0/0
[R3-GigabitEthernet2/0/0]ip binding vpn-instance B
[R3-GigabitEthernet2/0/0]ip add 192.168.40.1 24

3 .配置OSPF(PE连接CE)

[R1]ospf 11 vpn-instance B
[R1-ospf-11]area 0
[R1-ospf-11-area-0.0.0.0]network 192.168.30.0 0.0.0.255

[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ip add 192.168.30.2 24
[R6]int LoopBack 1
[R6-LoopBack1]ip add 6.6.6.6 32

[R6]ospf 11
[R6-ospf-10]area 0
[R6-ospf-10-area-0.0.0.0]network 0.0.0.0 0.0.0.0

[R3]ospf 11 vpn-instance B
[R3-ospf-11]area 0
[R3-ospf-11-area-0.0.0.0]network 192.168.40.0 0.0.0.255

[R7]int g0/0/0
[R7-GigabitEthernet0/0/0]ip add 192.168.40.2 24
[R7]int LoopBack 1
[R7-LoopBack1]ip add 7.7.7.7 32

[R5]ospf 11
[R5-ospf-11]area 0
[R5-ospf-11-area-0.0.0.0]network 0.0.0.0 0.0.0.0

4. 宣告并且双向路由引入

[R1]bgp 100
[R1-bgp]ipv4-family vpn-instance B
[R1-bgp-B]network 192.168.30.0 24
[R1-bgp-B]import-route ospf 11

[R1]ospf 11
[R1-ospf-11]import-route bgp

[R3]bgp 100
[R3-bgp]ipv4-family vpn-instance B
[R3-bgp-B]network 192.168.40.0 24
[R3-bgp-B]import-route ospf 11

[R3]ospf 11
[R3-ospf-11]import-route bgp