华为SR-MPLS TE跨域(E2E)配置案例

网络规划设计

1、在AS 100和AS 200内分别配置域内SR-MPLS TE隧道。同时为SR-MPLS TE隧道配置Binding SID。

2、在ASBR1和ASBR2之间配置EBGP邻居,使能BGP EPE和BGP-LS,生成BGP Peer SID。注意BGP-LS仅需使能地址族,无须在该地址族下使能BGP邻居。

3、在PE1和PE2节点创建E2E SR-MPLS TE隧道接口,指定隧道的IP地址、隧道协议、以及目的地址等,路径计算采用显式路径。

4、当前BGP EPE仅支持EBGP邻居场景,对于多跳EBGP邻居,也必须是通过物理链路直连,因为如果存在中间节点,则中间节点上没有BGP Peer SID信息,会造成转发失败

更多细节来全球计算机技术群讨论!!!

pe1配置

pe1dis current-configuration

sysname pe1

ip vpn-instance a

ipv4-family

route-distinguisher 1:1

tnl-policy p1 //调用隧道策略

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 1.1.1.1

mpls

mpls te

explicit-path pe1-asbr-pe1

next sid label 16002 type prefix

next sid label 16003 type prefix

explicit-path pe1-pe6

next sid label 1000 type binding-sid //自己隧道口binding-sid

next sid label 48060 type adjacency //asbr-pe1的peer sid

next sid label 2000 type binding-sid //asbr-pe2的binding-sid

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.12.1 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance a

ip address 10.0.11.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 1

interface Tunnel1

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 3.3.3.3

mpls te signal-protocol segment-routing

mpls te tunnel-id 1 //本地有效

mpls te path explicit-path pe1-asbr-pe1

mpls te binding-sid label 1000 //定义binding-sid

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 6.6.6.6

mpls te signal-protocol segment-routing

mpls te tunnel-id 100

mpls te path explicit-path pe1-pe6

interface NULL0

bgp 100

peer 6.6.6.6 as-number 200

peer 6.6.6.6 ebgp-max-hop 255

peer 6.6.6.6 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

dampening

peer 6.6.6.6 enable

ipv4-family vpnv4

policy vpn-target

peer 6.6.6.6 enable //建立vpnv4邻居

ipv4-family vpn-instance a

peer 10.0.11.2 as-number 65100

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999 //SRGB范围

area 0.0.0.0

mpls-te enable

undo dcn

lldp enable

tunnel-policy p1 //定义sr-te隧道

tunnel select-seq sr-te load-balance-number 1

p1配置

p1dis current-configuration

sysname p1

mpls lsr-id 2.2.2.2

mpls

mpls te

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.12.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.23.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 2

interface NULL0

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

mpls-te enable

asbr-pe1配置

asbr-pe1dis current-configuration

sysname asbr-pe1

mpls lsr-id 3.3.3.3

mpls

mpls te

explicit-path asbr-pe1-pe1

next sid label 16002 type prefix

next sid label 16001 type prefix

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.23.3 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.34.3 255.255.255.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 3

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 1.1.1.1

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path asbr-pe1-pe1 //路径调用

mpls te binding-sid label 4000 //设置binding sid

interface NULL0

bgp 100

peer 10.0.34.4 as-number 200

peer 10.0.34.4 egress-engineering //使能BGP EPE

ipv4-family unicast

undo synchronization

network 1.1.1.1 255.255.255.255

peer 10.0.34.4 enable

link-state-family unicast //使能BGP-LS能力

ospf 1

import-route bgp

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

mpls-te enable

asbr-pe2配置

asbr-pe2dis current-configuration

sysname asbr-pe2

set neid 18a8d

vsm on-board-mode enable

snmp-agent trap type base-trap

icmp rate-limit disable

mpls lsr-id 4.4.4.4

mpls

mpls te

explicit-path asbr-pe2-pe6

next sid label 16005 type prefix

next sid label 16006 type prefix

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0001.00

import-route bgp

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.34.4 255.255.255.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.45.4 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

isis enable 1

isis prefix-sid index 4

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 6.6.6.6

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path asbr-pe2-pe6

mpls te binding-sid label 2000 //设置binding-sid

interface NULL0

bgp 200

peer 10.0.34.3 as-number 100

peer 10.0.34.3 egress-engineering //命令用来使能BGP EPE(Egress Peer Engineering)功能

ipv4-family unicast

undo synchronization

network 6.6.6.6 255.255.255.255

peer 10.0.34.3 enable

link-state-family unicast

p2配置

dis current-configuration

sysname p2

mpls lsr-id 5.5.5.5

mpls

mpls te

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0002.00

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.45.5 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.56.5 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 5.5.5.5 255.255.255.255

isis enable 1

isis prefix-sid index 5

pe6配置

pe6dis current-configuration

sysname pe6

set neid 18a8e

ip vpn-instance a

ipv4-family

route-distinguisher 2:2

tnl-policy p1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 6.6.6.6

mpls

mpls te

explicit-path pe6-asbr-pe2

next sid label 16005 type prefix

next sid label 16004 type prefix

explicit-path pe6-pe1

next sid label 3000 type binding-sid

next sid label 48180 type adjacency

next sid label 4000 type binding-sid

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0003.00

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.56.6 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance a

ip address 10.0.62.6 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 6.6.6.6 255.255.255.255

isis enable 1

isis prefix-sid index 6

interface Tunnel1

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 4.4.4.4

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path pe6-asbr-pe2

mpls te binding-sid label 3000

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 1.1.1.1

mpls te signal-protocol segment-routing

mpls te tunnel-id 100

mpls te path explicit-path pe6-pe1

interface NULL0

bgp 200

peer 1.1.1.1 as-number 100

peer 1.1.1.1 ebgp-max-hop 255

peer 1.1.1.1 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 1.1.1.1 enable

ipv4-family vpnv4

policy vpn-target

peer 1.1.1.1 enable

ipv4-family vpn-instance a

peer 10.0.62.2 as-number 65101

undo dcn

lldp enable

tunnel-policy p1

tunnel select-seq sr-te load-balance-number 1

结果验证

sid label查看48060,路径编排使用

隧道路由查看

联通性测试

相关推荐
黑臂麒麟1 天前
HarmonyOS鸿蒙实战应用7:随手账本——数据导出与分享
华为·app·arkts·鸿蒙
2501_919749031 天前
华为鸿蒙录音可视化APP—小羊声觉
华为·harmonyos·鸿蒙
大雷神1 天前
HarmonyOS AR Engine深度估计实战——把毫米距离画成实时热力图
华为·ar·harmonyos
GKxx1 天前
在 HarmonyOS 上给 QEMU 搭一个最小 aarch64 Linux guest(内核 + busybox initramfs)
linux·华为·qemu·harmonyos·鸿蒙·鸿蒙pc
黑臂麒麟1 天前
屏幕信息全解析:HarmonyOS的分辨率、刷新率、折叠状态一个API搞定
华为·arkts·鸿蒙
黑臂麒麟1 天前
HarmonyOS 网络连接诊断实战:检测网络状态、WiFi 切换、弱网监测一网打尽
网络·华为·arkts·鸿蒙
2501_919749031 天前
华为鸿蒙免费反诈APP—小羊反诈
华为·harmonyos·鸿蒙
2501_919749031 天前
华为鸿蒙免费视频播放器—小羊免费播放器
华为·harmonyos·鸿蒙
黑臂麒麟1 天前
Harmony鸿蒙实战应用10:随手账本——发布检查与最终验收
华为·app·arkts·鸿蒙
黑臂麒麟1 天前
HarmonyOS鸿蒙实战应用6:随手账本——Preferences本地持久化
数据库·华为·app·鸿蒙