跨域MPLS option A

跨域MPLS  option A

跨越AS100和AS200两个自治系统

MCE1和MCE2上的loopback10组建vpn a，loopback20组建vpn b

option A的关键在于ASBR间，即P3和P4间通过静态或IGP传递路由，需要在ASBR上为每个vpn创建对应vpn-instance，绑定对应子接口到vpn-instance中

接口IP地址规划如下图：

PE1、PE2、PE3运行OSPF，打通AS 100内部路由；PE1和PE3间建ibgp vpnv4邻居

PE4、PE5、PE6运行OSPF，打通AS 200内部路由；PE4和PE6间建ibgp vpnv4邻居

PE1、PE2、PE3运行MPLS LDP

PE4、PE5、PE6运行MPLS LDP

vpn a的PE和CE间使用EBGP传路由，P3和P4间运行OSPF传路由

vpn b的PE和CE间，MCE1和P1间用静态路由，MCE2和P6间运行OPF，P3和P4间用静态路由

配置步骤：

MCE1	P1	P2	P3	P4	P5	P6	MCE2
int loo 0	int loo 0	int loo 0	int loo 0	int loo 0	int loo 0	int loo 0	int loo 0
ip add 11.11.11.11 32	ip add 1.1.1.1 32	ip add 2.2.2.2 32	ip add 3.3.3.3 32	ip add 4.4.4.4 32	ip add 5.5.5.5 32	ip add 6.6.6.6 32	ip add 22.22.22.22 32
	mpls lsr-id 1.1.1.1	mpls lsr-id 2.2.2.2	mpls lsr-id 3.3.3.3	mpls lsr-id 4.4.4.4	mpls lsr-id 5.5.5.5	mpls lsr-id 6.6.6.6
	mpls	mpls	mpls	mpls	mpls	mpls
	mpls ldp	mpls ldp	mpls ldp	mpls ldp	mpls ldp	mpls ldp
	int g0/0/0	int g0/0/0			int g0/0/0	int g0/0/0
	ip add 12.1.1.1 24	ip add 12.1.1.2 24			ip add 56.1.1.5 24	ip add 56.1.1.6 24
	mpls	mpls			mpls	mpls
	mpls ldp	mpls ldp			mpls ldp	mpls ldp
		int g0/0/1	int g0/0/1	int g0/0/1	int g0/0/1
		ip add 23.1.1.2 24	ip add 23.1.1.3 24	ip add 45.1.1.4 24	ip add 45.1.1.5 24
		mpls	mpls	mpls	mpls
		mpls ldp	mpls ldp	mpls ldp	mpls ldp
	ospf router-id 1.1.1.1	ospf router-id 2.2.2.2	ospf router-id 3.3.3.3	ospf router-id 4.4.4.4	ospf router-id 5.5.5.5	ospf router-id 6.6.6.6
	area 0	area 0	area 0	area 0	area 0	area 0
	network 1.1.1.1 0.0.0.0	network 2.2.2.2 0.0.0.0	network 3.3.3.3 0.0.0.0	network 4.4.4.4 0.0.0.0	network 5.5.5.5 0.0.0.0	network 6.6.6.6 0.0.0.0
	network 12.1.1.1 0.0.0.0	network 12.1.1.2 0.0.0.0	network 23.1.1.3 0.0.0.0	network 45.1.1.4 0.0.0.0	network 56.1.1.5 0.0.0.0	network 56.1.1.6 0.0.0.0
		network 23.1.1.2 0.0.0.0			network 45.1.1.5 0.0.0.0
ip vpn-instance a	ip vpn-instance a		ip vpn-instance a	ip vpn-instance a		ip vpn-instance a	ip vpn-instance a
route-distinguisher 11:1	route-distinguisher 1:1		route-distinguisher 3:1	route-distinguisher 4:1		route-distinguisher 6:1	route-distinguisher 22:1
	vpn-target 1:10		vpn-target 1:10	vpn-target 4:10		vpn-target 4:10
ip vpn-instance b	ip vpn-instance b		ip vpn-instance b	ip vpn-instance b		ip vpn-instance b	ip vpn-instance b
route-distinguisher 11:2	route-distinguisher 1:2		route-distinguisher 3:2	route-distinguisher 4:2		route-distinguisher 6:2	route-distinguisher 22:2
	vpn-target 1:20		vpn-target 1:20	vpn-target 4:20		vpn-target 4:20
	bgp 100		bgp 100	bgp 200		bgp 200
	peer 3.3.3.3 as-number 100		peer 1.1.1.1 as-number 100	peer 6.6.6.6 as-number 200		peer 4.4.4.4 as-number 200
	peer 3.3.3.3 con loo 0		peer 1.1.1.1 con loo 0	peer 6.6.6.6 con loo 0		peer 4.4.4.4 con loo 0
	undo peer 3.3.3.3 enable		undo peer 1.1.1.1 enable	undo peer 6.6.6.6 enable		undo peer 4.4.4.4 enable
	ipv4-family vpnv4		ipv4-family vpnv4	ipv4-family vpnv4		ipv4-family vpnv4
	peer 3.3.3.3 enable		peer 1.1.1.1 enable	peer 6.6.6.6 enable		peer 4.4.4.4 enable
			int g0/0/0	int g0/0/0
			int g0/0/0.10	int g0/0/0.10
			ip binding vpn-instance a	ip binding vpn-instance a
int loo 10			ip add 10.1.34.3 24	ip add 10.1.34.4 24			int loo 10
ip binding vpn-instance a			dot1q termination vid 10	dot1q termination vid 10			ip binding vpn-instance a
ip add 192.168.1.1 24			arp broadcast enable	arp broadcast enable			ip add 172.16.1.1 24
int loo 20			int g0/0/0.20	int g0/0/0.20			int loo 20
ip binding vpn-instance b			ip binding vpn-instance b	ip binding vpn-instance b			ip binding vpn-instance b
ip add 192.168.1.1 24			ip add 10.2.34.3 24	ip add 10.2.34.4 24			ip add 172.16.1.1 24
			dot1q termination vid 20	dot1q termination vid 20
			arp broadcast enable	arp broadcast enable
int g0/0/1	int g0/0/1					int g0/0/1	int g0/0/1
int g0/0/1.10	int g0/0/1.10					int g0/0/1.10	int g0/0/1.10
ip binding vpn-instance a	ip binding vpn-instance a					ip binding vpn-instance a	ip binding vpn-instance a
ip add 10.1.11.11 24	ip add 10.1.11.1 24					ip add 10.1.62.6 24	ip add 10.1.62.22 24
dot1q termination vid 10	dot1q termination vid 10					dot1q termination vid 10	dot1q termination vid 10
arp broadcast enable	arp broadcast enable					arp broadcast enable	arp broadcast enable
int g0/0/1.20	int g0/0/1.20					int g0/0/1.20	int g0/0/1.20
ip binding vpn-instance b	ip binding vpn-instance b					ip binding vpn-instance b	ip binding vpn-instance b
ip add 10.2.11.11 24	ip add 10.2.11.1 24					ip add 10.2.62.6 24	ip add 10.2.62.22 24
dot1q termination vid 20	dot1q termination vid 20					dot1q termination vid 20	dot1q termination vid 20
arp broadcast enable	arp broadcast enable					arp broadcast enable	arp broadcast enable
bgp 65001	bgp 100					bgp 200	bgp 65001
ipv4-family vpn-instance a	ipv4-family vpn-instance a					ipv4-family vpn-instance a	ipv4-family vpn-instance a
peer 10.1.11.1 as-nu 100	peer 10.1.11.11 as-nu 65001					peer 10.1.62.22 as-nu 65001	peer 10.1.62.6 as-nu 200
network 192.168.1.0 24							network 172.16.1.0 24
			ospf 10 vpn-instance a	ospf 10 vpn-instance a
			import bgp permit-ibgp	import bgp permit-ibgp
			route-tag disable	route-tag disable
			vpn-instance-capability simple	vpn-instance-capability simple
			area 0	area 0
			network 10.1.34.3 0.0.0.0	network 10.1.34.4 0.0.0.0
			bgp 100	bgp 200
			ipv4-family vpn-instance a	ipv4-family vpn-instance a
			import-route ospf 10	import-route ospf 10
ip route-static vpn-instance b 172.16.1.0 24 10.2.11.1	ip route-static vpn-instance b 192.168.1.0 24 10.2.11.11					ospf 20 vpn-instance b	ospf 20 vpn-instance b
	bgp 100					import bgp permit-ibgp	silent-interface loop 0
	ipv4-family vpn-instance b					route-tag disable
	import-route static					vpn-instance-capability simple
						area 0	area 0
						network 10.2.62.6 0.0.0.0	network 10.2.62.22 0.0.0.0
							network 172.16.1.1 0.0.0.0
						bgp 200
						ipv4-family vpn-instance b
						import-route ospf 20
			ip route-static vpn-instance b 172.16.1.0 24 10.2.34.4	ip route-static vpn-instance b 192.168.1.0 24 10.2.34.3
			bgp 100	bgp 200
			ipv4-family vpn-instance b	ipv4-family vpn-instance b
			import-route static	import-route static

配置完成后效果