华为evpn vxlan分布式网关配置

两边的RD和RT设计的核心思想是:

考虑怎么样把对端发过来的的evpn export二层RT,必须和接收端的三层RT import及本端的evpn import二层匹同时配上。

RT随便配置要全网唯一

三层vni值两边要一样

ce1

sysname edag1

evpn-overlay enable //开启支持evpn功能

ip vpn-instance edge //三层vpn实例,可以被多个vn绑定

ipv4-family

route-distinguisher 8888:12 //三层RD和RT配置

vpn-target 1020:12 export-extcommunity evpn

vpn-target 1020:12 import-extcommunity evpn

vxlan vni 9999 //三层vni和对端保持一致

bridge-domain 10 //evpn 二层实例

vxlan vni 10 //关联vni

evpn //evpn 二层RD和RT配置

route-distinguisher 10:1

vpn-target 10:10 export-extcommunity

vpn-target 1020:12 export-extcommunity

vpn-target 10:10 import-extcommunity

arp broadcast-suppress enable //arp广播抑制功能开启

bridge-domain 20

vxlan vni 20

evpn

route-distinguisher 20:1

vpn-target 20:20 export-extcommunity

vpn-target 1020:12 export-extcommunity

vpn-target 20:20 import-extcommunity

arp broadcast-suppress enable

interface Vbdif10

ip binding vpn-instance edge //绑定三层vpn实例

ip address 192.168.0.1 255.255.255.0

mac-address 707b-e8be-0010 //随便配置,只要保证是单播mac并且两边一样

arp collect host enable //开启二类evpn路由生成功能

interface Vbdif20

ip binding vpn-instance edge

ip address 192.168.20.1 255.255.255.0

mac-address 707b-e8be-0020

arp collect host enable

interface GE1/0/0

undo portswitch

undo shutdown

ip address 10.0.12.1 255.255.255.0

ospf enable 1 area 0.0.0.0

interface GE1/0/1.10 mode l2

encapsulation dot1q vid 10

bridge-domain 10

interface GE1/0/1.20 mode l2

encapsulation dot1q vid 20

bridge-domain 20

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

ospf enable 1 area 0.0.0.0

interface LoopBack1 //模拟非vxlan网络接入vxlan

ip binding vpn-instance edge //绑定相同的三层vpn实例

ip address 123.0.0.1 255.255.255.0

interface Nve1

source 1.1.1.1

vni 10 head-end peer-list protocol bgp //头端复制列表用bgp生成

vni 20 head-end peer-list protocol bgp

bgp 100

peer 3.3.3.3 as-number 100

peer 3.3.3.3 connect-interface LoopBack0

ipv4-family unicast

peer 3.3.3.3 enable

ipv4-family vpn-instance edge

network 123.0.0.0 255.255.255.0 //发布非vxlan路由

advertise l2vpn evpn //开启vpn实例向evpn实例发布IP路由功能

l2vpn-family evpn

policy vpn-target

peer 3.3.3.3 enable

peer 3.3.3.3 advertise irb //开启IRB路由传递功能

ospf 1

area 0.0.0.0

ce2

interface GE1/0/0

undo portswitch

undo shutdown

ip address 10.0.12.2 255.255.255.0

ospf enable 1 area 0.0.0.0

interface GE1/0/1

undo portswitch

undo shutdown

ip address 10.0.23.2 255.255.255.0

ospf enable 1 area 0.0.0.0

ospf 1

area 0.0.0.0

ce3

sysname edag2

evpn-overlay enable

ip vpn-instance edge

ipv4-family

route-distinguisher 7777:12

vpn-target 1020:12 export-extcommunity evpn

vpn-target 1020:12 import-extcommunity evpn

vxlan vni 9999

bridge-domain 10

vxlan vni 10

evpn

route-distinguisher 10:2

vpn-target 10:10 export-extcommunity

vpn-target 1020:12 export-extcommunity

vpn-target 10:10 import-extcommunity

arp broadcast-suppress enable

bridge-domain 20

vxlan vni 20

evpn

route-distinguisher 20:2

vpn-target 20:20 export-extcommunity

vpn-target 1020:12 export-extcommunity

vpn-target 20:20 import-extcommunity

arp broadcast-suppress enable

interface Vbdif10

ip binding vpn-instance edge

ip address 192.168.0.1 255.255.255.0

mac-address 707b-e8be-0010

arp collect host enable

interface Vbdif20

ip binding vpn-instance edge

ip address 192.168.20.1 255.255.255.0

mac-address 707b-e8be-0020

arp collect host enable

interface GE1/0/0

undo portswitch

undo shutdown

ip address 10.0.23.3 255.255.255.0

ospf enable 1 area 0.0.0.0

interface GE1/0/1.10 mode l2

encapsulation dot1q vid 10

bridge-domain 10

interface GE1/0/1.20 mode l2

encapsulation dot1q vid 20

bridge-domain 20

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

ospf enable 1 area 0.0.0.0

interface Nve1

source 3.3.3.3

vni 10 head-end peer-list protocol bgp

vni 20 head-end peer-list protocol bgp

bgp 100

peer 1.1.1.1 as-number 100

peer 1.1.1.1 connect-interface LoopBack0

ipv4-family unicast

peer 1.1.1.1 enable

ipv4-family vpn-instance edge

advertise l2vpn evpn

l2vpn-family evpn

policy vpn-target

peer 1.1.1.1 enable

peer 1.1.1.1 advertise irb

ospf 1

area 0.0.0.0

lsw1

vlan batch 10 20

interface GigabitEthernet0/0/1

port link-type trunk

port trunk allow-pass vlan 10 20

interface GigabitEthernet0/0/2

port link-type access

port default vlan 10

interface GigabitEthernet0/0/3

port link-type access

port default vlan 20

lsw2

vlan batch 10 20

interface GigabitEthernet0/0/1

port link-type trunk

port trunk allow-pass vlan 10 20

interface GigabitEthernet0/0/2

port link-type access

port default vlan 10

interface GigabitEthernet0/0/3

port link-type access

port default vlan 20

查看

edag1dddis bgp evpn all routing-table

edag1dis bgp evpn all routing-table inclusive-route 0:32:3.3.3.3 看三类路由

edag1 dis vxlan tunnel

edag1dis vxlan peer

edag1dis mac-address

edag1dis arp vpn-instance edge

edag1dis mac-address bridge-domain 10

edag1dis bgp evpn vpn-instance 10 routing-table mac-route 看二类路由

edag1dis bgp evpn vpn-instance 10 routing-table mac-route 0:48:5489-9832-7a68:32:192.168.0.10 看明细路由

edag1dis ip routing-table vpn-instance edge 查看vpn实例路由表

edag1dis bgp vpnv4 vpn-instance edge routing-table 192.168.20.20 看vpn实例的vpnv4路由

edag1dis arp broadcast-suppress user bridge-domain 10 arp广播抑制查看

edag2dis ip routing-table vpn-instance edge 查看对端vxlan以外的5类路由学到的网络

edag2dis bgp evpn all routing-table prefix-route 查看5类路由

edag2dis bgp evpn all routing-table prefix-route 0:123.0.0.0:24 查看5类路由明细

相关推荐
xixiaoyunya4 分钟前
局域网多电脑文件互备:从传统痛点到自动化方案的技术路径
网络·安全
万物智能信息科技27 分钟前
板载按键key的ADC转换和信号控制—【万物智能之开源鸿蒙OpenHarmony系统实战开发系列教程】
嵌入式硬件·华为·开源·harmonyos·鸿蒙
Lynne3091 小时前
为什么工业数据越来越需要在现场处理?边缘计算正在解决什么问题?
网络·数据分析·数据
刃神太酷啦1 小时前
Redis 核心进阶:哨兵、集群、缓存问题与分布式锁详解----《Hello Redis!》(6)
linux·c语言·数据库·c++·redis·分布式·缓存
m0_734571762 小时前
深入理解5g <十二> pucch
网络·5g
威哥爱编程2 小时前
HarmonyOS 6.1 端侧 3DGS 重建实战:重建在 C 层,ArkTS 只管"看"和"改"
华为·harmonyos·arkts
闲云野鹤在人间2 小时前
Docker入门|第3章 镜像详解
linux·网络·docker·容器·centos·云计算·php
luj_17682 小时前
击穿分析五大关键步骤
开发语言·网络·c++·经验分享·算法
开开心心就好3 小时前
低年级识字练笔顺工具,电脑和安卓端都能用
前端·javascript·网络·安全·scala·erlang·语音识别
个性小王3 小时前
配置kali在线源(阿里云)
网络·网络安全