华为mpls vpn方案B配置案例带RR

方案B的特点是asbr互连要开mpls,但不开ldp,因为要用mpls标签转发数据包。

asbr设备上不用起vpn-instance,把vpnv4路由过滤关掉即可接收经过的vpnv4的vpn-instance路由

拓扑图中的业务数据和控制数据会自动分开不用特别的设置,原因是mpls是根据IGP的优先级进行转发的,也就是根据ospf转发,ospf会自动选择最优的下面走,所以业务数据会自动走下面,只有路由控制数据才会走上面RR

R2

router id 2.2.2.2

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

ip vpn-instance vpn

ipv4-family

route-distinguisher 100:1

vpn-target 100:1 export-extcommunity

vpn-target 100:1 import-extcommunity

mpls lsr-id 2.2.2.2

mpls

mpls ldp

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %

local-user admin service-type http

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip binding vpn-instance vpn

ip address 10.0.12.2 255.255.255.0

interface GigabitEthernet0/0/1

ip address 10.0.23.2 255.255.255.0

mpls

mpls ldp

interface GigabitEthernet0/0/2

ip address 10.0.24.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls ldp

interface NULL0

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

ospf enable 1 area 0.0.0.0

bgp 100

peer 3.3.3.3 as-number 100

peer 3.3.3.3 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 3.3.3.3 enable

ipv4-family vpnv4

policy vpn-target

peer 3.3.3.3 enable

ipv4-family vpn-instance vpn

peer 10.0.12.1 as-number 65001

ospf 1

area 0.0.0.0

network 10.0.23.2 0.0.0.0

R3:

router id 3.3.3.3

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

mpls lsr-id 3.3.3.3

mpls

mpls ldp

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %

local-user admin service-type http

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.23.3 255.255.255.0

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip address 10.0.34.3 255.255.255.0

mpls

mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

ospf enable 1 area 0.0.0.0

bgp 100

peer 2.2.2.2 as-number 100

peer 2.2.2.2 connect-interface LoopBack0

peer 4.4.4.4 as-number 100

peer 4.4.4.4 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 2.2.2.2 enable

peer 4.4.4.4 enable

ipv4-family vpnv4

undo policy vpn-target

peer 2.2.2.2 enable

peer 2.2.2.2 reflect-client

peer 4.4.4.4 enable

peer 4.4.4.4 reflect-client

ospf 1

area 0.0.0.0

network 10.0.23.3 0.0.0.0

network 10.0.34.3 0.0.0.0

R4

router id 4.4.4.4

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

mpls lsr-id 4.4.4.4

mpls

mpls ldp

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %

local-user admin service-type http

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.34.4 255.255.255.0

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip address 10.0.45.4 255.255.255.0

mpls

interface GigabitEthernet0/0/2

ip address 10.0.24.4 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls ldp

interface NULL0

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

ospf enable 1 area 0.0.0.0

bgp 100

peer 3.3.3.3 as-number 100

peer 3.3.3.3 connect-interface LoopBack0

peer 10.0.45.5 as-number 200

ipv4-family unicast

undo synchronization

peer 3.3.3.3 enable

peer 10.0.45.5 enable

ipv4-family vpnv4

undo policy vpn-target

peer 3.3.3.3 enable

peer 10.0.45.5 enable

ospf 1

area 0.0.0.0

network 10.0.34.4 0.0.0.0

R5

router id 5.5.5.5

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

mpls lsr-id 5.5.5.5

mpls

mpls ldp

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %

local-user admin service-type http

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.45.5 255.255.255.0

mpls

interface GigabitEthernet0/0/1

ip address 10.0.56.5 255.255.255.0

mpls

mpls ldp

interface GigabitEthernet0/0/2

ip address 10.0.57.5 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls ldp

interface NULL0

interface LoopBack0

ip address 5.5.5.5 255.255.255.255

ospf enable 1 area 0.0.0.0

bgp 200

peer 6.6.6.6 as-number 200

peer 6.6.6.6 connect-interface LoopBack0

peer 10.0.45.4 as-number 100

ipv4-family unicast

undo synchronization

peer 6.6.6.6 enable

peer 10.0.45.4 enable

ipv4-family vpnv4

undo policy vpn-target

peer 6.6.6.6 enable

peer 10.0.45.4 enable

ospf 1

area 0.0.0.0

network 10.0.56.5 0.0.0.0

R6

router id 6.6.6.6

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

mpls lsr-id 6.6.6.6

mpls

mpls ldp

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %

local-user admin service-type http

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.56.6 255.255.255.0

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip address 10.0.67.6 255.255.255.0

mpls

mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0

ip address 6.6.6.6 255.255.255.255

ospf enable 1 area 0.0.0.0

bgp 200

peer 5.5.5.5 as-number 200

peer 5.5.5.5 connect-interface LoopBack0

peer 7.7.7.7 as-number 200

peer 7.7.7.7 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 5.5.5.5 enable

peer 7.7.7.7 enable

ipv4-family vpnv4

undo policy vpn-target

peer 5.5.5.5 enable

peer 5.5.5.5 reflect-client

peer 7.7.7.7 enable

peer 7.7.7.7 reflect-client

ospf 1

area 0.0.0.0

network 10.0.56.6 0.0.0.0

network 10.0.67.6 0.0.0.0

R7

router id 7.7.7.7

wlan ac-global carrier id other ac id 0

set cpu-usage threshold 80 restore 75

ip vpn-instance vpn

ipv4-family

route-distinguisher 100:1

vpn-target 100:1 export-extcommunity

vpn-target 100:1 import-extcommunity

mpls lsr-id 7.7.7.7

mpls

mpls ldp

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %

local-user admin service-type http

firewall zone Local

priority 15

interface GigabitEthernet0/0/0

ip address 10.0.67.7 255.255.255.0

mpls

mpls ldp

interface GigabitEthernet0/0/1

ip binding vpn-instance vpn

ip address 10.0.78.7 255.255.255.0

interface GigabitEthernet0/0/2

ip address 10.0.57.7 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls ldp

interface NULL0

interface LoopBack0

ip address 7.7.7.7 255.255.255.255

ospf enable 1 area 0.0.0.0

bgp 200

peer 6.6.6.6 as-number 200

peer 6.6.6.6 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 6.6.6.6 enable

ipv4-family vpnv4

policy vpn-target

peer 6.6.6.6 enable

ipv4-family vpn-instance vpn

peer 10.0.78.8 as-number 65002

ospf 1

area 0.0.0.0

network 10.0.67.7 0.0.0.0

相关推荐
梦帮科技8 分钟前
LoRA / QLoRA 低秩矩阵流形更新:SVD 分解、秩与缩放因子 α 的物理意义与梯度稳定性保障
网络·深度学习·神经网络·线性代数·矩阵·架构·数据挖掘
阿钱真强道14 分钟前
28 嵌入式操作系统 | 网关加 TCP 命令通道:粘包/半包怎么切
网络·网络协议·tcp/ip·粘包
李游Leo33 分钟前
HarmonyOS 7 + Core Vision Kit-TaskPool:文搜图相似度阈值分桶与硬负样本回流【鸿蒙心迹】
华为·harmonyos
HY小宝F37 分钟前
树莓派智能摄像头系统 30 天重学计划之 Day 03 · 网络基础:建立“包“的思维 —— 学习总结
网络·学习
ayaya_mana39 分钟前
MCTier 组网联机工具:安装、配置与私有化部署
网络·windows·内网穿透·联机
故七月43 分钟前
GEO 信源评估体系:如何判断一条网页信源能否被大模型采信
前端·网络·人工智能
李游Leo1 小时前
HarmonyOS 7 EasyGo + ArkUI Navigation:平行视界导航模式的列表选中态、右栏路由栈与全局返回收口【鸿蒙心迹】
华为·harmonyos
hasty1 小时前
一次 WebSocket 握手为何能终止进程?Undici CVE-2026-19534 的异常边界
网络·websocket·网络协议
李游Leo1 小时前
HarmonyOS 7 + ArkUI Accessibility:闪控窗紧凑态的语义树裁剪与读屏焦点收敛【鸿蒙心迹】
华为·harmonyos
实点科技2 小时前
XB6S-EI2002如何与信捷XDH-60T4-E实现EtherNet/IP通讯?
网络