华为mpls vpn跨域方案c-1无RR

重要的几点注意:

1、r2和r5上面不需要跑bgp,只开mpls ldp负责传递标签

2、r3和r4上面不需要跑vpnv4路由,只传标签就可以了。所以不要和自己as内的对端建立vpnv4路由,减轻压力。

3、r1和r6使用的是vpnv4路由,vpnv4路由的特点是它会自动进入mpls vpn隧道,所以r2和r5上面不存在mpls黑洞路由。

4、asbr之间只建立普通的ebgp邻居,且接口上只开mpls

5、2个asbr之间和各对内的ibgp都要开启发送标签能力,并用策略路由加上标签。

以下关键配置

R1:

ip vpn-instance a

ipv4-family

route-distinguisher 1:1

vpn-target 100:100 export-extcommunity

vpn-target 100:100 import-extcommunity

mpls lsr-id 1.1.1.1

mpls

mpls ldp

isis 1

network-entity 49.0000.0000.0000.0001.00

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.12.1 255.255.255.0

isis enable 1

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip binding vpn-instance a

ip address 10.0.17.1 255.255.255.0

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

isis enable 1

bgp 100

peer 3.3.3.3 as-number 100

peer 3.3.3.3 connect-interface LoopBack0

peer 6.6.6.6 as-number 200

peer 6.6.6.6 ebgp-max-hop 255

peer 6.6.6.6 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 3.3.3.3 enable

peer 3.3.3.3 label-route-capability

peer 6.6.6.6 enable

ipv4-family vpnv4

policy vpn-target

peer 6.6.6.6 enable

ipv4-family vpn-instance a

peer 10.0.17.7 as-number 60000

R2:

mpls lsr-id 2.2.2.2

mpls

mpls ldp

isis 1

network-entity 49.0000.0000.0002.00

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.12.2 255.255.255.0

isis enable 1

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip address 10.0.23.2 255.255.255.0

isis enable 1

mpls

mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

isis enable 1

R3

mpls lsr-id 3.3.3.3

mpls

mpls ldp

isis 1

network-entity 49.0000.0000.0003.00

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.23.3 255.255.255.0

isis enable 1

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip address 10.0.34.3 255.255.255.0

mpls

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

isis enable 1

bgp 100

peer 1.1.1.1 as-number 100

peer 1.1.1.1 connect-interface LoopBack0

peer 10.0.34.4 as-number 200

ipv4-family unicast

undo synchronization

network 1.1.1.1 255.255.255.255

peer 1.1.1.1 enable

peer 1.1.1.1 route-policy labe1 export

peer 1.1.1.1 label-route-capability

peer 10.0.34.4 enable

peer 10.0.34.4 route-policy labe2 export

peer 10.0.34.4 label-route-capability

route-policy labe1 permit node 10

if-match mpls-label //只对过来带标签的数据加上标签,不带标签的数据则不加

apply mpls-label

route-policy labe2 permit node 10

apply mpls-label

R4

mpls lsr-id 4.4.4.4

mpls

mpls ldp

isis 1

network-entity 49.0001.0000.0000.0004.00

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.34.4 255.255.255.0

mpls

interface GigabitEthernet0/0/1

ip address 10.0.45.4 255.255.255.0

isis enable 1

mpls

mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

isis enable 1

bgp 200

peer 6.6.6.6 as-number 200

peer 6.6.6.6 connect-interface LoopBack0

peer 10.0.34.3 as-number 100

ipv4-family unicast

undo synchronization

network 6.6.6.6 255.255.255.255

peer 6.6.6.6 enable

peer 6.6.6.6 route-policy ibgp export

peer 6.6.6.6 label-route-capability

peer 10.0.34.3 enable

peer 10.0.34.3 route-policy asbr export

peer 10.0.34.3 label-route-capability

route-policy ibgp permit node 10

if-match mpls-label

apply mpls-label

route-policy asbr permit node 10

apply mpls-label

R5

mpls lsr-id 5.5.5.5

mpls

mpls ldp

isis 1

network-entity 49.0001.0000.0000.0005.00

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.45.5 255.255.255.0

isis enable 1

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip address 10.0.56.5 255.255.255.0

isis enable 1

mpls

mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0

ip address 5.5.5.5 255.255.255.255

isis enable 1

R6:

ip vpn-instance a

ipv4-family

route-distinguisher 1:1

vpn-target 100:100 export-extcommunity

vpn-target 100:100 import-extcommunity

mpls lsr-id 6.6.6.6

mpls

mpls ldp

isis 1

network-entity 49.0001.0000.0000.0006.00

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.56.6 255.255.255.0

isis enable 1

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip binding vpn-instance a

ip address 10.0.68.6 255.255.255.0

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0

ip address 6.6.6.6 255.255.255.255

isis enable 1

bgp 200

peer 1.1.1.1 as-number 100

peer 1.1.1.1 ebgp-max-hop 255

peer 1.1.1.1 connect-interface LoopBack0

peer 4.4.4.4 as-number 200

peer 4.4.4.4 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 1.1.1.1 enable

peer 4.4.4.4 enable

peer 4.4.4.4 label-route-capability

ipv4-family vpnv4

policy vpn-target

peer 1.1.1.1 enable

ipv4-family vpn-instance a

peer 10.0.68.8 as-number 60001

相关推荐
搁浅小泽4 小时前
新能源汽车多合一压缩机控制器CAN网络测试规范
网络·汽车
Fate_I_C5 小时前
Capacitor 插件鸿蒙化实战:@capacitor/device 从安装到模拟器验证全记录
华为·harmonyos
xixiaoyunya6 小时前
虚拟机备份怎么做:镜像级与文件级搭配的完整实操方案
linux·运维·网络
anew___6 小时前
《从零手写操作系统 (30):环境变量与进程上下文——export/unset与继承语义》
java·开发语言·网络·jvm·算法
谢亮_vipxieliang6 小时前
Go GMP调度模型——从原理到实战的完整指南
开发语言·网络·golang
wdfk_prog7 小时前
LWIP教程 03:从 `low_level_input()` 到 `pbuf_free()`——`pbuf` 的数据视图、Chain 与引用计数
运维·网络·笔记·学习
福兮说7 小时前
IP 地址转整数的七个坑:192.168.1.1 算出负数、127.1 也是合法地址、存进 INT 直接溢出
javascript·网络·网络协议·tcp/ip·mysql·golang
xiaoye-duck7 小时前
《Linux 网络编程》深入理解 epoll(上):从接口到底层内核工作机制剖析
linux·网络
anew___8 小时前
《从零手写操作系统 (29):管道与重定向进阶——命名管道、Here Document与Shell语法扩展》
java·开发语言·前端·javascript·网络
奇牙coding8 小时前
GPT-5.5 API 报 401 但 GPT-5.4 正常怎么办?不是 Key 失效,是 Organization 头的强制校验变了
java·网络·gpt·ai