SR-MPLS BE简单配置实例原理

pe1

[pe1]dis current-configuration

ip vpn-instance vpn

ipv4-family

route-distinguisher 100:100

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 2.2.2.2

mpls

segment-routing //开启sr功能

interface Ethernet1/0/0

undo shutdown

ip address 10.0.23.2 255.255.255.0

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance vpn

ip address 172.16.0.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

ospf prefix-sid index 100 //node sid全局唯一

bgp 100

peer 3.3.3.3 as-number 100

peer 3.3.3.3 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 3.3.3.3 enable

ipv4-family vpnv4

policy vpn-target

peer 3.3.3.3 enable

ipv4-family vpn-instance vpn

peer 172.16.0.2 as-number 65001

ospf 1

opaque-capability enable //启用10类扩展路由

segment-routing mpls //用mpls方式分配标签

segment-routing global-block 16000 23999 //设置SRGB范围,建议都配置相同范围

area 0.0.0.0

network 0.0.0.0 255.255.255.255

p

[p]dis current-configuration

mpls lsr-id 3.3.3.3

mpls

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.23.3 255.255.255.0

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.34.3 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

ospf prefix-sid index 200

interface NULL0

bgp 100

peer 2.2.2.2 as-number 100

peer 2.2.2.2 connect-interface LoopBack0

peer 4.4.4.4 as-number 100

peer 4.4.4.4 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 2.2.2.2 enable

peer 4.4.4.4 enable

ipv4-family vpnv4

undo policy vpn-target

peer 2.2.2.2 enable

peer 2.2.2.2 reflect-client

peer 4.4.4.4 enable

peer 4.4.4.4 reflect-client

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

network 0.0.0.0 255.255.255.255

pe2

[pe2]dis current-configuration

ip vpn-instance vpn

ipv4-family

route-distinguisher 100:200

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 4.4.4.4

mpls

segment-routing

interface Ethernet1/0/0

undo shutdown

ip binding vpn-instance vpn

ip address 192.168.0.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.34.4 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

ospf prefix-sid index 300

interface NULL0

bgp 100

peer 3.3.3.3 as-number 100

peer 3.3.3.3 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 3.3.3.3 enable

ipv4-family vpnv4

policy vpn-target

peer 3.3.3.3 enable

ipv4-family vpn-instance vpn

peer 192.168.0.2 as-number 65002

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

network 0.0.0.0 255.255.255.255

如果路ldp又跑sr-mpls be,默认走ldp隧道,让其优先走sr-mpls be隧道,要用策略引:

tunnel-policy p1 //先定义策略

tunnel select-seq sr-lsp load-balance-number 2

ip vpn-instance vpn //在vpn实例中引用

ipv4-family

tnl-policy p1 调用策略

查看

[pe1]dis segment-routing prefix mpls forwarding //查看标签等信息

[pe1]dis tunnel-info all //查看隧道

[pe1]dis ospf lsdb //查看10类lsa

pe1接口上捉包:48120是mp-bgp的私网标签,和mpls里面那个区别vpn-instance一样

相关推荐
黑客Ash2 小时前
【D01】网络安全概论
网络·安全·web安全·php
->yjy2 小时前
计算机网络(第一章)
网络·计算机网络·php
摘星星ʕ•̫͡•ʔ3 小时前
计算机网络 第三章:数据链路层(关于争用期的超详细内容)
网络·计算机网络
.Ayang4 小时前
SSRF漏洞利用
网络·安全·web安全·网络安全·系统安全·网络攻击模型·安全架构
好想打kuo碎4 小时前
1、HCIP之RSTP协议与STP相关安全配置
网络·安全
虚拟网络工程师5 小时前
【网络系统管理】Centos7——配置主从mariadb服务器案例(下半部分)
运维·服务器·网络·数据库·mariadb
JosieBook6 小时前
【网络工程】查看自己电脑网络IP,检查网络是否连通
服务器·网络·tcp/ip
SuperHeroWu76 小时前
【HarmonyOS】鸿蒙应用接入微博分享
华为·harmonyos·鸿蒙·微博·微博分享·微博sdk集成·sdk集成
期待未来的男孩6 小时前
华为FusionCube 500-8.2.0SPC100 实施部署文档
华为