华为SR-MPLS TE跨域(E2E)配置案例

网络规划设计

1、在AS 100和AS 200内分别配置域内SR-MPLS TE隧道。同时为SR-MPLS TE隧道配置Binding SID。

2、在ASBR1和ASBR2之间配置EBGP邻居,使能BGP EPE和BGP-LS,生成BGP Peer SID。注意BGP-LS仅需使能地址族,无须在该地址族下使能BGP邻居。

3、在PE1和PE2节点创建E2E SR-MPLS TE隧道接口,指定隧道的IP地址、隧道协议、以及目的地址等,路径计算采用显式路径。

4、当前BGP EPE仅支持EBGP邻居场景,对于多跳EBGP邻居,也必须是通过物理链路直连,因为如果存在中间节点,则中间节点上没有BGP Peer SID信息,会造成转发失败

更多细节来全球计算机技术群讨论!!!

pe1配置

pe1dis current-configuration

sysname pe1

ip vpn-instance a

ipv4-family

route-distinguisher 1:1

tnl-policy p1 //调用隧道策略

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 1.1.1.1

mpls

mpls te

explicit-path pe1-asbr-pe1

next sid label 16002 type prefix

next sid label 16003 type prefix

explicit-path pe1-pe6

next sid label 1000 type binding-sid //自己隧道口binding-sid

next sid label 48060 type adjacency //asbr-pe1的peer sid

next sid label 2000 type binding-sid //asbr-pe2的binding-sid

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.12.1 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance a

ip address 10.0.11.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 1

interface Tunnel1

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 3.3.3.3

mpls te signal-protocol segment-routing

mpls te tunnel-id 1 //本地有效

mpls te path explicit-path pe1-asbr-pe1

mpls te binding-sid label 1000 //定义binding-sid

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 6.6.6.6

mpls te signal-protocol segment-routing

mpls te tunnel-id 100

mpls te path explicit-path pe1-pe6

interface NULL0

bgp 100

peer 6.6.6.6 as-number 200

peer 6.6.6.6 ebgp-max-hop 255

peer 6.6.6.6 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

dampening

peer 6.6.6.6 enable

ipv4-family vpnv4

policy vpn-target

peer 6.6.6.6 enable //建立vpnv4邻居

ipv4-family vpn-instance a

peer 10.0.11.2 as-number 65100

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999 //SRGB范围

area 0.0.0.0

mpls-te enable

undo dcn

lldp enable

tunnel-policy p1 //定义sr-te隧道

tunnel select-seq sr-te load-balance-number 1

p1配置

p1dis current-configuration

sysname p1

mpls lsr-id 2.2.2.2

mpls

mpls te

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.12.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.23.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 2

interface NULL0

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

mpls-te enable

asbr-pe1配置

asbr-pe1dis current-configuration

sysname asbr-pe1

mpls lsr-id 3.3.3.3

mpls

mpls te

explicit-path asbr-pe1-pe1

next sid label 16002 type prefix

next sid label 16001 type prefix

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.23.3 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.34.3 255.255.255.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 3

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 1.1.1.1

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path asbr-pe1-pe1 //路径调用

mpls te binding-sid label 4000 //设置binding sid

interface NULL0

bgp 100

peer 10.0.34.4 as-number 200

peer 10.0.34.4 egress-engineering //使能BGP EPE

ipv4-family unicast

undo synchronization

network 1.1.1.1 255.255.255.255

peer 10.0.34.4 enable

link-state-family unicast //使能BGP-LS能力

ospf 1

import-route bgp

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

mpls-te enable

asbr-pe2配置

asbr-pe2dis current-configuration

sysname asbr-pe2

set neid 18a8d

vsm on-board-mode enable

snmp-agent trap type base-trap

icmp rate-limit disable

mpls lsr-id 4.4.4.4

mpls

mpls te

explicit-path asbr-pe2-pe6

next sid label 16005 type prefix

next sid label 16006 type prefix

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0001.00

import-route bgp

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.34.4 255.255.255.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.45.4 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

isis enable 1

isis prefix-sid index 4

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 6.6.6.6

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path asbr-pe2-pe6

mpls te binding-sid label 2000 //设置binding-sid

interface NULL0

bgp 200

peer 10.0.34.3 as-number 100

peer 10.0.34.3 egress-engineering //命令用来使能BGP EPE(Egress Peer Engineering)功能

ipv4-family unicast

undo synchronization

network 6.6.6.6 255.255.255.255

peer 10.0.34.3 enable

link-state-family unicast

p2配置

dis current-configuration

sysname p2

mpls lsr-id 5.5.5.5

mpls

mpls te

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0002.00

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.45.5 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.56.5 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 5.5.5.5 255.255.255.255

isis enable 1

isis prefix-sid index 5

pe6配置

pe6dis current-configuration

sysname pe6

set neid 18a8e

ip vpn-instance a

ipv4-family

route-distinguisher 2:2

tnl-policy p1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 6.6.6.6

mpls

mpls te

explicit-path pe6-asbr-pe2

next sid label 16005 type prefix

next sid label 16004 type prefix

explicit-path pe6-pe1

next sid label 3000 type binding-sid

next sid label 48180 type adjacency

next sid label 4000 type binding-sid

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0003.00

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.56.6 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance a

ip address 10.0.62.6 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 6.6.6.6 255.255.255.255

isis enable 1

isis prefix-sid index 6

interface Tunnel1

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 4.4.4.4

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path pe6-asbr-pe2

mpls te binding-sid label 3000

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 1.1.1.1

mpls te signal-protocol segment-routing

mpls te tunnel-id 100

mpls te path explicit-path pe6-pe1

interface NULL0

bgp 200

peer 1.1.1.1 as-number 100

peer 1.1.1.1 ebgp-max-hop 255

peer 1.1.1.1 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 1.1.1.1 enable

ipv4-family vpnv4

policy vpn-target

peer 1.1.1.1 enable

ipv4-family vpn-instance a

peer 10.0.62.2 as-number 65101

undo dcn

lldp enable

tunnel-policy p1

tunnel select-seq sr-te load-balance-number 1

结果验证

sid label查看48060,路径编排使用

隧道路由查看

联通性测试

相关推荐
anyup9 天前
来简单聊聊鸿蒙开发,万元奖金的事~
前端·华为·harmonyos
程序猿追16 天前
那个右下角的小数字怎么“卡”住我打字——我用 HarmonyOS 自己写了一个字数限制输入框
pytorch·华为·harmonyos
古德new16 天前
鸿蒙PC使用electron迁移:Joplin Electron 桌面适配全记录
华为·electron·harmonyos
世人万千丶16 天前
桌面便签小应用 - HarmonyOS ArkUI 开发实战-TextArea与Flex布局-PC版本
华为·harmonyos·鸿蒙·鸿蒙系统
慧海灵舟16 天前
AGenUI 鸿蒙端实战踩坑录:从 Column 布局消失到异步组件宽度为 0
华为·harmonyos
yuegu77716 天前
HarmonyOS应用<节气通>开发第33篇:状态管理实战
华为·harmonyos
YM52e16 天前
买菜计算器小应用 - HarmonyOS ArkUI 开发实战-PC版本
学习·华为·harmonyos·鸿蒙·鸿蒙系统
阿捏利16 天前
系列总览-鸿蒙科普系列完全指南
华为·harmonyos
小雨下雨的雨16 天前
HarmonyOS ArkUI训练营入门-组件掌握系列-Animation 动画效果实现-PC版本
学习·华为·harmonyos·鸿蒙
2601_9620725516 天前
李梦娇常识4600问|题库|打印版
sql·华为od·华为·c#·华为云·.net·harmonyos