华为SR-MPLS TE跨域(E2E)配置案例

网络规划设计

1、在AS 100和AS 200内分别配置域内SR-MPLS TE隧道。同时为SR-MPLS TE隧道配置Binding SID。

2、在ASBR1和ASBR2之间配置EBGP邻居,使能BGP EPE和BGP-LS,生成BGP Peer SID。注意BGP-LS仅需使能地址族,无须在该地址族下使能BGP邻居。

3、在PE1和PE2节点创建E2E SR-MPLS TE隧道接口,指定隧道的IP地址、隧道协议、以及目的地址等,路径计算采用显式路径。

4、当前BGP EPE仅支持EBGP邻居场景,对于多跳EBGP邻居,也必须是通过物理链路直连,因为如果存在中间节点,则中间节点上没有BGP Peer SID信息,会造成转发失败

更多细节来全球计算机技术群讨论!!!

pe1配置

pe1dis current-configuration

sysname pe1

ip vpn-instance a

ipv4-family

route-distinguisher 1:1

tnl-policy p1 //调用隧道策略

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 1.1.1.1

mpls

mpls te

explicit-path pe1-asbr-pe1

next sid label 16002 type prefix

next sid label 16003 type prefix

explicit-path pe1-pe6

next sid label 1000 type binding-sid //自己隧道口binding-sid

next sid label 48060 type adjacency //asbr-pe1的peer sid

next sid label 2000 type binding-sid //asbr-pe2的binding-sid

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.12.1 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance a

ip address 10.0.11.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 1

interface Tunnel1

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 3.3.3.3

mpls te signal-protocol segment-routing

mpls te tunnel-id 1 //本地有效

mpls te path explicit-path pe1-asbr-pe1

mpls te binding-sid label 1000 //定义binding-sid

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 6.6.6.6

mpls te signal-protocol segment-routing

mpls te tunnel-id 100

mpls te path explicit-path pe1-pe6

interface NULL0

bgp 100

peer 6.6.6.6 as-number 200

peer 6.6.6.6 ebgp-max-hop 255

peer 6.6.6.6 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

dampening

peer 6.6.6.6 enable

ipv4-family vpnv4

policy vpn-target

peer 6.6.6.6 enable //建立vpnv4邻居

ipv4-family vpn-instance a

peer 10.0.11.2 as-number 65100

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999 //SRGB范围

area 0.0.0.0

mpls-te enable

undo dcn

lldp enable

tunnel-policy p1 //定义sr-te隧道

tunnel select-seq sr-te load-balance-number 1

p1配置

p1dis current-configuration

sysname p1

mpls lsr-id 2.2.2.2

mpls

mpls te

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.12.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.23.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 2

interface NULL0

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

mpls-te enable

asbr-pe1配置

asbr-pe1dis current-configuration

sysname asbr-pe1

mpls lsr-id 3.3.3.3

mpls

mpls te

explicit-path asbr-pe1-pe1

next sid label 16002 type prefix

next sid label 16001 type prefix

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.23.3 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.34.3 255.255.255.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 3

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 1.1.1.1

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path asbr-pe1-pe1 //路径调用

mpls te binding-sid label 4000 //设置binding sid

interface NULL0

bgp 100

peer 10.0.34.4 as-number 200

peer 10.0.34.4 egress-engineering //使能BGP EPE

ipv4-family unicast

undo synchronization

network 1.1.1.1 255.255.255.255

peer 10.0.34.4 enable

link-state-family unicast //使能BGP-LS能力

ospf 1

import-route bgp

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

mpls-te enable

asbr-pe2配置

asbr-pe2dis current-configuration

sysname asbr-pe2

set neid 18a8d

vsm on-board-mode enable

snmp-agent trap type base-trap

icmp rate-limit disable

mpls lsr-id 4.4.4.4

mpls

mpls te

explicit-path asbr-pe2-pe6

next sid label 16005 type prefix

next sid label 16006 type prefix

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0001.00

import-route bgp

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.34.4 255.255.255.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.45.4 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

isis enable 1

isis prefix-sid index 4

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 6.6.6.6

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path asbr-pe2-pe6

mpls te binding-sid label 2000 //设置binding-sid

interface NULL0

bgp 200

peer 10.0.34.3 as-number 100

peer 10.0.34.3 egress-engineering //命令用来使能BGP EPE(Egress Peer Engineering)功能

ipv4-family unicast

undo synchronization

network 6.6.6.6 255.255.255.255

peer 10.0.34.3 enable

link-state-family unicast

p2配置

dis current-configuration

sysname p2

mpls lsr-id 5.5.5.5

mpls

mpls te

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0002.00

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.45.5 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.56.5 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 5.5.5.5 255.255.255.255

isis enable 1

isis prefix-sid index 5

pe6配置

pe6dis current-configuration

sysname pe6

set neid 18a8e

ip vpn-instance a

ipv4-family

route-distinguisher 2:2

tnl-policy p1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 6.6.6.6

mpls

mpls te

explicit-path pe6-asbr-pe2

next sid label 16005 type prefix

next sid label 16004 type prefix

explicit-path pe6-pe1

next sid label 3000 type binding-sid

next sid label 48180 type adjacency

next sid label 4000 type binding-sid

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0003.00

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.56.6 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance a

ip address 10.0.62.6 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 6.6.6.6 255.255.255.255

isis enable 1

isis prefix-sid index 6

interface Tunnel1

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 4.4.4.4

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path pe6-asbr-pe2

mpls te binding-sid label 3000

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 1.1.1.1

mpls te signal-protocol segment-routing

mpls te tunnel-id 100

mpls te path explicit-path pe6-pe1

interface NULL0

bgp 200

peer 1.1.1.1 as-number 100

peer 1.1.1.1 ebgp-max-hop 255

peer 1.1.1.1 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 1.1.1.1 enable

ipv4-family vpnv4

policy vpn-target

peer 1.1.1.1 enable

ipv4-family vpn-instance a

peer 10.0.62.2 as-number 65101

undo dcn

lldp enable

tunnel-policy p1

tunnel select-seq sr-te load-balance-number 1

结果验证

sid label查看48060,路径编排使用

隧道路由查看

联通性测试

相关推荐
马剑威(威哥爱编程)11 小时前
【共创稿事节】HarmonyOS 7 文搜图实战:自然语言检索本地图片,全流程端侧闭环
华为·harmonyos
昇腾知识体系12 小时前
鲲鹏+昇腾 NUMA 亲和性调优:Kunpeng 920 双路服务器给 NPU 工作负载绑核
人工智能·华为·知识图谱
youyin14 小时前
HarmonyOS 鸿蒙 ArkTS/ArkUI 装饰器大全
华为·harmonyos
youyin15 小时前
HarmonyOS ArkTS 与智能融合案例之实时语音翻译应用 实验指导书和代码
华为·harmonyos
zhangfeng113319 小时前
Ubuntu 版的 CANN 9.2.0-beta.1 的下载方式 三大云厂商的服务器系统
人工智能·华为·ai编程·npu·cann
威哥爱编程19 小时前
HarmonyOS 7 空间音频实战:降噪、美化、变声、空间渲染的节点编排
华为·harmonyos·arkts
威哥爱编程19 小时前
HarmonyOS 7 视觉 AI 实战:系统级场景化控件,低门槛接入端侧视觉能力
华为·harmonyos·arkts
光锥智能21 小时前
Agentic Cloud,云厂商们的新叙事
人工智能·华为
传奇开心果编程1 天前
【ArkUI 练中学】第15课:UI 界面设计与实战
学习·ui·华为·harmonyos
zhangfeng11332 天前
ATK(华为算子测试平台)详细介绍 CANN(Compute Architecture for Neural Networks,神经网络计算架构
人工智能·华为·ai编程·npu·cann