华为SR-MPLS TE跨域(E2E)配置案例

网络规划设计

1、在AS 100和AS 200内分别配置域内SR-MPLS TE隧道。同时为SR-MPLS TE隧道配置Binding SID。

2、在ASBR1和ASBR2之间配置EBGP邻居,使能BGP EPE和BGP-LS,生成BGP Peer SID。注意BGP-LS仅需使能地址族,无须在该地址族下使能BGP邻居。

3、在PE1和PE2节点创建E2E SR-MPLS TE隧道接口,指定隧道的IP地址、隧道协议、以及目的地址等,路径计算采用显式路径。

4、当前BGP EPE仅支持EBGP邻居场景,对于多跳EBGP邻居,也必须是通过物理链路直连,因为如果存在中间节点,则中间节点上没有BGP Peer SID信息,会造成转发失败

更多细节来全球计算机技术群讨论!!!

pe1配置

pe1\]dis current-configuration sysname pe1 ip vpn-instance a ipv4-family route-distinguisher 1:1 tnl-policy p1 //调用隧道策略 vpn-target 1:1 export-extcommunity vpn-target 1:1 import-extcommunity mpls lsr-id 1.1.1.1 mpls mpls te explicit-path pe1-asbr-pe1 next sid label 16002 type prefix next sid label 16003 type prefix explicit-path pe1-pe6 next sid label 1000 type binding-sid //自己隧道口binding-sid next sid label 48060 type adjacency //asbr-pe1的peer sid next sid label 2000 type binding-sid //asbr-pe2的binding-sid segment-routing interface Ethernet1/0/0 undo shutdown ip address 10.0.12.1 255.255.255.0 ospf enable 1 area 0.0.0.0 mpls mpls te undo dcn undo dcn mode vlan interface Ethernet1/0/1 undo shutdown ip binding vpn-instance a ip address 10.0.11.1 255.255.255.0 undo dcn undo dcn mode vlan interface LoopBack0 ip address 1.1.1.1 255.255.255.255 ospf enable 1 area 0.0.0.0 ospf prefix-sid index 1 interface Tunnel1 ip address unnumbered interface LoopBack0 tunnel-protocol mpls te destination 3.3.3.3 mpls te signal-protocol segment-routing mpls te tunnel-id 1 //本地有效 mpls te path explicit-path pe1-asbr-pe1 mpls te binding-sid label 1000 //定义binding-sid interface Tunnel2 ip address unnumbered interface LoopBack0 tunnel-protocol mpls te destination 6.6.6.6 mpls te signal-protocol segment-routing mpls te tunnel-id 100 mpls te path explicit-path pe1-pe6 interface NULL0 bgp 100 peer 6.6.6.6 as-number 200 peer 6.6.6.6 ebgp-max-hop 255 peer 6.6.6.6 connect-interface LoopBack0 ipv4-family unicast undo synchronization dampening peer 6.6.6.6 enable ipv4-family vpnv4 policy vpn-target peer 6.6.6.6 enable //建立vpnv4邻居 ipv4-family vpn-instance a peer 10.0.11.2 as-number 65100 ospf 1 opaque-capability enable segment-routing mpls segment-routing global-block 16000 23999 //SRGB范围 area 0.0.0.0 mpls-te enable undo dcn lldp enable tunnel-policy p1 //定义sr-te隧道 tunnel select-seq sr-te load-balance-number 1 ### p1配置 \[p1\]dis current-configuration sysname p1 mpls lsr-id 2.2.2.2 mpls mpls te segment-routing interface Ethernet1/0/0 undo shutdown ip address 10.0.12.2 255.255.255.0 ospf enable 1 area 0.0.0.0 mpls mpls te undo dcn undo dcn mode vlan interface Ethernet1/0/1 undo shutdown ip address 10.0.23.2 255.255.255.0 ospf enable 1 area 0.0.0.0 mpls mpls te undo dcn undo dcn mode vlan interface LoopBack0 ip address 2.2.2.2 255.255.255.255 ospf enable 1 area 0.0.0.0 ospf prefix-sid index 2 interface NULL0 ospf 1 opaque-capability enable segment-routing mpls segment-routing global-block 16000 23999 area 0.0.0.0 mpls-te enable ### asbr-pe1配置 \[asbr-pe1\]dis current-configuration sysname asbr-pe1 mpls lsr-id 3.3.3.3 mpls mpls te explicit-path asbr-pe1-pe1 next sid label 16002 type prefix next sid label 16001 type prefix segment-routing interface Ethernet1/0/0 undo shutdown ip address 10.0.23.3 255.255.255.0 ospf enable 1 area 0.0.0.0 mpls mpls te undo dcn undo dcn mode vlan interface Ethernet1/0/1 undo shutdown ip address 10.0.34.3 255.255.255.0 mpls mpls te undo dcn undo dcn mode vlan interface LoopBack0 ip address 3.3.3.3 255.255.255.255 ospf enable 1 area 0.0.0.0 ospf prefix-sid index 3 interface Tunnel2 ip address unnumbered interface LoopBack0 tunnel-protocol mpls te destination 1.1.1.1 mpls te signal-protocol segment-routing mpls te tunnel-id 1 mpls te path explicit-path asbr-pe1-pe1 //路径调用 mpls te binding-sid label 4000 //设置binding sid interface NULL0 bgp 100 peer 10.0.34.4 as-number 200 peer 10.0.34.4 egress-engineering //使能BGP EPE ipv4-family unicast undo synchronization network 1.1.1.1 255.255.255.255 peer 10.0.34.4 enable link-state-family unicast //使能BGP-LS能力 ospf 1 import-route bgp opaque-capability enable segment-routing mpls segment-routing global-block 16000 23999 area 0.0.0.0 mpls-te enable ### asbr-pe2配置 \[asbr-pe2\]dis current-configuration sysname asbr-pe2 set neid 18a8d vsm on-board-mode enable snmp-agent trap type base-trap icmp rate-limit disable mpls lsr-id 4.4.4.4 mpls mpls te explicit-path asbr-pe2-pe6 next sid label 16005 type prefix next sid label 16006 type prefix segment-routing isis 1 is-level level-2 cost-style wide network-entity 49.0001.0000.0000.0001.00 import-route bgp traffic-eng level-2 segment-routing mpls segment-routing global-block 16000 23999 interface Ethernet1/0/0 undo shutdown ip address 10.0.34.4 255.255.255.0 mpls mpls te undo dcn undo dcn mode vlan interface Ethernet1/0/1 undo shutdown ip address 10.0.45.4 255.255.255.0 isis enable 1 mpls mpls te undo dcn undo dcn mode vlan interface LoopBack0 ip address 4.4.4.4 255.255.255.255 isis enable 1 isis prefix-sid index 4 interface Tunnel2 ip address unnumbered interface LoopBack0 tunnel-protocol mpls te destination 6.6.6.6 mpls te signal-protocol segment-routing mpls te tunnel-id 1 mpls te path explicit-path asbr-pe2-pe6 mpls te binding-sid label 2000 //设置binding-sid interface NULL0 bgp 200 peer 10.0.34.3 as-number 100 peer 10.0.34.3 egress-engineering //命令用来使能BGP EPE(Egress Peer Engineering)功能 ipv4-family unicast undo synchronization network 6.6.6.6 255.255.255.255 peer 10.0.34.3 enable link-state-family unicast ### p2配置 dis current-configuration sysname p2 mpls lsr-id 5.5.5.5 mpls mpls te segment-routing isis 1 is-level level-2 cost-style wide network-entity 49.0001.0000.0000.0002.00 traffic-eng level-2 segment-routing mpls segment-routing global-block 16000 23999 interface Ethernet1/0/0 undo shutdown ip address 10.0.45.5 255.255.255.0 isis enable 1 mpls mpls te undo dcn undo dcn mode vlan interface Ethernet1/0/1 undo shutdown ip address 10.0.56.5 255.255.255.0 isis enable 1 mpls mpls te undo dcn undo dcn mode vlan interface LoopBack0 ip address 5.5.5.5 255.255.255.255 isis enable 1 isis prefix-sid index 5 ### pe6配置 \[pe6\]dis current-configuration sysname pe6 set neid 18a8e ip vpn-instance a ipv4-family route-distinguisher 2:2 tnl-policy p1 vpn-target 1:1 export-extcommunity vpn-target 1:1 import-extcommunity mpls lsr-id 6.6.6.6 mpls mpls te explicit-path pe6-asbr-pe2 next sid label 16005 type prefix next sid label 16004 type prefix explicit-path pe6-pe1 next sid label 3000 type binding-sid next sid label 48180 type adjacency next sid label 4000 type binding-sid segment-routing isis 1 is-level level-2 cost-style wide network-entity 49.0001.0000.0000.0003.00 traffic-eng level-2 segment-routing mpls segment-routing global-block 16000 23999 interface Ethernet1/0/0 undo shutdown ip address 10.0.56.6 255.255.255.0 isis enable 1 mpls mpls te undo dcn undo dcn mode vlan interface Ethernet1/0/1 undo shutdown ip binding vpn-instance a ip address 10.0.62.6 255.255.255.0 undo dcn undo dcn mode vlan interface LoopBack0 ip address 6.6.6.6 255.255.255.255 isis enable 1 isis prefix-sid index 6 interface Tunnel1 ip address unnumbered interface LoopBack0 tunnel-protocol mpls te destination 4.4.4.4 mpls te signal-protocol segment-routing mpls te tunnel-id 1 mpls te path explicit-path pe6-asbr-pe2 mpls te binding-sid label 3000 interface Tunnel2 ip address unnumbered interface LoopBack0 tunnel-protocol mpls te destination 1.1.1.1 mpls te signal-protocol segment-routing mpls te tunnel-id 100 mpls te path explicit-path pe6-pe1 interface NULL0 bgp 200 peer 1.1.1.1 as-number 100 peer 1.1.1.1 ebgp-max-hop 255 peer 1.1.1.1 connect-interface LoopBack0 ipv4-family unicast undo synchronization peer 1.1.1.1 enable ipv4-family vpnv4 policy vpn-target peer 1.1.1.1 enable ipv4-family vpn-instance a peer 10.0.62.2 as-number 65101 undo dcn lldp enable tunnel-policy p1 tunnel select-seq sr-te load-balance-number 1 结果验证 ![在这里插入图片描述](https://i-blog.csdnimg.cn/direct/f91cc9f6461f45c5833ae58cf26d15da.png) ![在这里插入图片描述](https://i-blog.csdnimg.cn/direct/da321909e7fa46b3acd279bbb355c83c.png) sid label查看48060,路径编排使用 ![在这里插入图片描述](https://i-blog.csdnimg.cn/direct/46dcc12746ce4e0b8b56691632e4bad4.png) ![在这里插入图片描述](https://i-blog.csdnimg.cn/direct/8f598d520db34622ae9a85a92cea9c7b.png) 隧道路由查看 ![在这里插入图片描述](https://i-blog.csdnimg.cn/direct/7e19ae48f310470d826c0981c3a6ee70.png) ![在这里插入图片描述](https://i-blog.csdnimg.cn/direct/a760911cb8c94a94b7f6e6e4046f22b3.png) 联通性测试 ![在这里插入图片描述](https://i-blog.csdnimg.cn/direct/fb4281bd67cb402ca3827dbdbcb89339.png)

相关推荐
Neolnfra3 小时前
华为中小型企业网络建设
网络·华为·毕业设计·ensp代做
晚风(●•σ )4 小时前
【华为 ICT & HCIA & eNSP 习题汇总】——题目集26
网络·计算机网络·华为
4 小时前
鸿蒙——布局——线性布局
华为·harmonyos
萌虎不虎14 小时前
【在鸿蒙系统中实现录制视频预览功能】
华为·音视频·harmonyos
m0_6855350814 小时前
Zemax 车载前视ADAS镜头
华为·光学·光学设计·光学工程·镜头设计
萌虎不虎17 小时前
【鸿蒙ETS中WebSocket使用说明】
websocket·华为·harmonyos
子榆.21 小时前
Flutter 与开源鸿蒙(OpenHarmony)国际化与无障碍适配指南:打造真正包容的跨平台应用
flutter·华为·开源·harmonyos
C雨后彩虹1 天前
斗地主之顺子
java·数据结构·算法·华为·面试
子榆.1 天前
Flutter 与开源鸿蒙(OpenHarmony)深度集成:从原理到实战进阶
flutter·华为·开源·harmonyos