华为L3VPNv4 over SRv6 BE配置案例

NE1

sysname pe1

ip vpn-instance vpn

ipv4-family

route-distinguisher 1:1

vpn-target 100:100 export-extcommunity

vpn-target 100:100 import-extcommunity

segment-routing ipv6 //建立srv6-BE路径

encapsulation source-address 2000::1 //用自己的回环口地址建立node sid

locator test ipv6-prefix 2000:1::1 64 static 32 //funcation用默认的动态自动生成

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0001.00

ipv6 enable topology ipv6

segment-routing ipv6 locator test //调用上面的名为test的locator,用isis扩散出去

interface Ethernet1/0/0

undo shutdown

ip binding vpn-instance vpn

ip address 192.168.0.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ipv6 enable

ipv6 address auto link-local

isis ipv6 enable 1

undo dcn

undo dcn mode vlan

interface LoopBack0

ipv6 enable

ipv6 address 2000::1/128

isis ipv6 enable 1

interface NULL0

bgp 100

router-id 1.1.1.1

peer 2000::3 as-number 100

peer 2000::3 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

ipv4-family vpnv4

policy vpn-target

peer 2000::3 enable

peer 2000::3 prefix-sid //段路由产生一个V标,私网路由携带SID

ipv4-family vpn-instance vpn

peer 192.168.0.2 as-number 65001

segment-routing ipv6 locator test //给vpn实例分配srv6标签,End.DT4

segment-routing ipv6 best-effort

undo dcn

NE2

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0002.00

ipv6 enable topology ipv6

interface Ethernet1/0/1

undo shutdown

ipv6 enable

ipv6 address auto link-local

isis ipv6 enable 1

undo dcn

undo dcn mode vlan

interface Ethernet1/0/2

undo shutdown

ipv6 enable

ipv6 address auto link-local

isis enable 1

isis ipv6 enable 1

undo dcn mode vlan

interface LoopBack0

ipv6 enable

ipv6 address 2000::2/128

isis ipv6 enable 1

undo dcn

NE3

ip vpn-instance vpn

ipv4-family

route-distinguisher 1:2

vpn-target 100:100 export-extcommunity

vpn-target 100:100 import-extcommunity

segment-routing ipv6

encapsulation source-address 2000::3

locator test ipv6-prefix 2000:3::3 64 static 32

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0003.00

ipv6 enable topology ipv6

segment-routing ipv6 locator test

interface Ethernet1/0/0

undo shutdown

ip binding vpn-instance vpn

ip address 192.168.1.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

undo dcn

undo dcn mode vlan

interface Ethernet1/0/2

undo shutdown

ipv6 enable

ipv6 address auto link-local

isis ipv6 enable 1

undo dcn mode vlan

interface LoopBack0

ipv6 enable

ipv6 address 2000::3/128

isis ipv6 enable 1

interface NULL0

bgp 100

router-id 3.3.3.3

peer 2000::1 as-number 100

peer 2000::1 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

ipv4-family vpnv4

policy vpn-target

peer 2000::1 enable

peer 2000::1 prefix-sid

ipv4-family vpn-instance vpn

peer 192.168.1.2 as-number 65002

segment-routing ipv6 locator test

segment-routing ipv6 best-effort

undo dcn

静态手动指定funcation

如果要用静态手动指定funcation就用以下配置替换上面的对应配,两边pe都要配:

isis 1

pe2-isis-1\]dis segment-routing ipv6 local-sid end forwarding //默认是动态,关掉它 segment-routing ipv6 locator test opcode ::111 end //手动指定end ### 查看 \[pe1\]dis segment-routing ipv6 local-sid end-dt4 forwarding ![在这里插入图片描述](https://file.jishuzhan.net/article/1783359243294871554/bb00ea898eb317ca3512115484773aa9.webp) \[pe1\]dis ip routing-table vpn-instance vpn 22.1.1.1 verbose ![在这里插入图片描述](https://file.jishuzhan.net/article/1783359243294871554/ab6aa31051337ce87ff7f14e95fa8902.webp) \[pe2\]dis segment-routing ipv6 local-sid end forwarding ![在这里插入图片描述](https://file.jishuzhan.net/article/1783359243294871554/d11bf6968fdb97c244a7f4c3ef57239e.webp)

相关推荐
万添裁9 分钟前
huawei 机考
算法·华为·深度优先
发光小北5 小时前
Modbus TCP 转 Profinet 主站网关如何应用?
网络·网络协议·tcp/ip
易连EDI—EasyLink8 小时前
易连EDI–EasyLink实现OCR智能数据采集
网络·人工智能·安全·汽车·ocr·edi
@insist1238 小时前
信息安全工程师考点精讲:身份认证核心原理与分类体系(上篇)
大数据·网络·分类·信息安全工程师·软件水平考试
nashane8 小时前
HarmonyOS Wi-Fi连接用户操作监听全解析:从系统弹框到Promise回调
华为·harmonyos·harmonyos 5
SmartRadio9 小时前
ESP32-S3 双模式切换实现:兼顾手机_路由器连接与WiFi长距离通信
开发语言·网络·智能手机·esp32·长距离wifi
_.Switch9 小时前
东方财富股票数据JS逆向:secids字段和AES加密实战
开发语言·前端·javascript·网络·爬虫·python·ecmascript
金色光环10 小时前
FreeModbus释放底层的 TCP 监听端口
服务器·网络·tcp/ip
数智化精益手记局10 小时前
拆解物料管理erp系统的核心功能,看物料管理erp系统如何解决库存积压与缺料难题
大数据·网络·人工智能·安全·信息可视化·精益工程
Lanren的编程日记11 小时前
Flutter 鸿蒙应用数据版本管理实战:版本记录+版本回退+版本对比,实现全链路数据版本控制
flutter·华为·harmonyos