华为L3VPNv4 over SRv6 BE配置案例

NE1

sysname pe1

ip vpn-instance vpn

ipv4-family

route-distinguisher 1:1

vpn-target 100:100 export-extcommunity

vpn-target 100:100 import-extcommunity

segment-routing ipv6 //建立srv6-BE路径

encapsulation source-address 2000::1 //用自己的回环口地址建立node sid

locator test ipv6-prefix 2000:1::1 64 static 32 //funcation用默认的动态自动生成

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0001.00

ipv6 enable topology ipv6

segment-routing ipv6 locator test //调用上面的名为test的locator,用isis扩散出去

interface Ethernet1/0/0

undo shutdown

ip binding vpn-instance vpn

ip address 192.168.0.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ipv6 enable

ipv6 address auto link-local

isis ipv6 enable 1

undo dcn

undo dcn mode vlan

interface LoopBack0

ipv6 enable

ipv6 address 2000::1/128

isis ipv6 enable 1

interface NULL0

bgp 100

router-id 1.1.1.1

peer 2000::3 as-number 100

peer 2000::3 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

ipv4-family vpnv4

policy vpn-target

peer 2000::3 enable

peer 2000::3 prefix-sid //段路由产生一个V标,私网路由携带SID

ipv4-family vpn-instance vpn

peer 192.168.0.2 as-number 65001

segment-routing ipv6 locator test //给vpn实例分配srv6标签,End.DT4

segment-routing ipv6 best-effort

undo dcn

NE2

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0002.00

ipv6 enable topology ipv6

interface Ethernet1/0/1

undo shutdown

ipv6 enable

ipv6 address auto link-local

isis ipv6 enable 1

undo dcn

undo dcn mode vlan

interface Ethernet1/0/2

undo shutdown

ipv6 enable

ipv6 address auto link-local

isis enable 1

isis ipv6 enable 1

undo dcn mode vlan

interface LoopBack0

ipv6 enable

ipv6 address 2000::2/128

isis ipv6 enable 1

undo dcn

NE3

ip vpn-instance vpn

ipv4-family

route-distinguisher 1:2

vpn-target 100:100 export-extcommunity

vpn-target 100:100 import-extcommunity

segment-routing ipv6

encapsulation source-address 2000::3

locator test ipv6-prefix 2000:3::3 64 static 32

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0003.00

ipv6 enable topology ipv6

segment-routing ipv6 locator test

interface Ethernet1/0/0

undo shutdown

ip binding vpn-instance vpn

ip address 192.168.1.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

undo dcn

undo dcn mode vlan

interface Ethernet1/0/2

undo shutdown

ipv6 enable

ipv6 address auto link-local

isis ipv6 enable 1

undo dcn mode vlan

interface LoopBack0

ipv6 enable

ipv6 address 2000::3/128

isis ipv6 enable 1

interface NULL0

bgp 100

router-id 3.3.3.3

peer 2000::1 as-number 100

peer 2000::1 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

ipv4-family vpnv4

policy vpn-target

peer 2000::1 enable

peer 2000::1 prefix-sid

ipv4-family vpn-instance vpn

peer 192.168.1.2 as-number 65002

segment-routing ipv6 locator test

segment-routing ipv6 best-effort

undo dcn

静态手动指定funcation

如果要用静态手动指定funcation就用以下配置替换上面的对应配,两边pe都要配:

isis 1

pe2-isis-1dis segment-routing ipv6 local-sid end forwarding //默认是动态,关掉它

segment-routing ipv6

locator test

opcode ::111 end //手动指定end

查看

pe1dis segment-routing ipv6 local-sid end-dt4 forwarding

pe1dis ip routing-table vpn-instance vpn 22.1.1.1 verbose

pe2dis segment-routing ipv6 local-sid end forwarding

相关推荐
程序猿追4 小时前
那个右下角的小数字怎么“卡”住我打字——我用 HarmonyOS 自己写了一个字数限制输入框
pytorch·华为·harmonyos
古德new4 小时前
鸿蒙PC使用electron迁移:Joplin Electron 桌面适配全记录
华为·electron·harmonyos
世人万千丶4 小时前
桌面便签小应用 - HarmonyOS ArkUI 开发实战-TextArea与Flex布局-PC版本
华为·harmonyos·鸿蒙·鸿蒙系统
慧海灵舟5 小时前
AGenUI 鸿蒙端实战踩坑录:从 Column 布局消失到异步组件宽度为 0
华为·harmonyos
yuegu7775 小时前
HarmonyOS应用<节气通>开发第33篇:状态管理实战
华为·harmonyos
YM52e6 小时前
买菜计算器小应用 - HarmonyOS ArkUI 开发实战-PC版本
学习·华为·harmonyos·鸿蒙·鸿蒙系统
网络研究院6 小时前
2026年网络安全
网络·安全·法律·法规·趋势·发展
阿捏利6 小时前
系列总览-鸿蒙科普系列完全指南
华为·harmonyos
酣大智6 小时前
ARP代理--工作原理
运维·网络·arp·arp代理
treesforest6 小时前
AI安全系统如何识别异常访问?IP风险识别正在成为关键能力
网络·人工智能·tcp/ip·安全·web安全