华为MPLS V&N Instance 配置实验

一、实验要求

1、在ISP创建MPLS V&N Instance
2、CE1的SiteA和CE3的SiteA可以互通路由，但不能访问ISP各网段
3、CE2的SiteB和CE34的SiteB可以互通路由，但不能访问ISP各网段
4、CE1和PE1之间跑IS-IS，CE3和PE2之间跑OSPF
5、CE2和PE1之间跑BGP，CE4和PE2之间跑BGP
6、抓包观察双层MPLS包头

二、网络拓扑

三、各路由器配置

AR1 Configuration

sysname AR1
#
isis 1                                    
 is-level level-2
 network-entity 10.0000.0000.0001.00
#
interface GigabitEthernet0/0/0
 ip address 15.1.1.1 255.255.255.0 
 isis enable 1
 isis circuit-level level-2
interface LoopBack0
 ip address 192.168.1.1 255.255.255.0 
 isis enable 1
 isis circuit-level level-2

AR2 Configuration

sysname AR2
#
interface GigabitEthernet0/0/0
 ip address 25.1.1.2 255.255.255.0 
interface LoopBack0
 ip address 192.168.1.1 255.255.255.0 
#
bgp 2
 peer 25.1.1.5 as-number 5678 
 network 192.168.1.0 

AR3 Configuration

sysname AR3
#
interface GigabitEthernet0/0/0
 ip address 38.1.1.3 255.255.255.0 
interface LoopBack0
 ip address 172.16.1.1 255.255.255.0 
#
ospf 2 router-id 3.3.3.3 
 area 0.0.0.0 
  network 38.1.1.0 0.0.0.255 
  network 172.16.1.0 0.0.0.255

AR4 Configuration

sysname AR4
#
interface GigabitEthernet0/0/0
 ip address 48.1.1.4 255.255.255.0 
interface LoopBack0
 ip address 172.16.1.1 255.255.255.0 
#
bgp 4
 peer 48.1.1.8 as-number 5678 
 network 172.16.1.0 255.255.255.0 

AR5 Configuration

sysname AR5
#
interface GigabitEthernet0/0/0
 ip binding vpn-instance SiteA
 ip address 15.1.1.5 255.255.255.0 
 isis enable 1
 isis circuit-level level-2

interface GigabitEthernet0/0/1
 ip binding vpn-instance SiteB
 ip address 25.1.1.5 255.255.255.0 

interface GigabitEthernet0/0/2
 ip address 56.1.1.5 255.255.255.0 
 mpls
 mpls ldp

interface LoopBack5
 ip address 5.5.5.5 255.255.255.255 
#
ospf 1 router-id 5.5.5.5 
 area 0.0.0.0                             
  network 5.5.5.5 0.0.0.0 
  network 56.1.1.0 0.0</