华为SR-MPLS TE跨域(E2E)配置案例

网络规划设计

1、在AS 100和AS 200内分别配置域内SR-MPLS TE隧道。同时为SR-MPLS TE隧道配置Binding SID。

2、在ASBR1和ASBR2之间配置EBGP邻居,使能BGP EPE和BGP-LS,生成BGP Peer SID。注意BGP-LS仅需使能地址族,无须在该地址族下使能BGP邻居。

3、在PE1和PE2节点创建E2E SR-MPLS TE隧道接口,指定隧道的IP地址、隧道协议、以及目的地址等,路径计算采用显式路径。

4、当前BGP EPE仅支持EBGP邻居场景,对于多跳EBGP邻居,也必须是通过物理链路直连,因为如果存在中间节点,则中间节点上没有BGP Peer SID信息,会造成转发失败

更多细节来全球计算机技术群讨论!!!

pe1配置

pe1dis current-configuration

sysname pe1

ip vpn-instance a

ipv4-family

route-distinguisher 1:1

tnl-policy p1 //调用隧道策略

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 1.1.1.1

mpls

mpls te

explicit-path pe1-asbr-pe1

next sid label 16002 type prefix

next sid label 16003 type prefix

explicit-path pe1-pe6

next sid label 1000 type binding-sid //自己隧道口binding-sid

next sid label 48060 type adjacency //asbr-pe1的peer sid

next sid label 2000 type binding-sid //asbr-pe2的binding-sid

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.12.1 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance a

ip address 10.0.11.1 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 1.1.1.1 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 1

interface Tunnel1

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 3.3.3.3

mpls te signal-protocol segment-routing

mpls te tunnel-id 1 //本地有效

mpls te path explicit-path pe1-asbr-pe1

mpls te binding-sid label 1000 //定义binding-sid

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 6.6.6.6

mpls te signal-protocol segment-routing

mpls te tunnel-id 100

mpls te path explicit-path pe1-pe6

interface NULL0

bgp 100

peer 6.6.6.6 as-number 200

peer 6.6.6.6 ebgp-max-hop 255

peer 6.6.6.6 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

dampening

peer 6.6.6.6 enable

ipv4-family vpnv4

policy vpn-target

peer 6.6.6.6 enable //建立vpnv4邻居

ipv4-family vpn-instance a

peer 10.0.11.2 as-number 65100

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999 //SRGB范围

area 0.0.0.0

mpls-te enable

undo dcn

lldp enable

tunnel-policy p1 //定义sr-te隧道

tunnel select-seq sr-te load-balance-number 1

p1配置

p1dis current-configuration

sysname p1

mpls lsr-id 2.2.2.2

mpls

mpls te

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.12.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.23.2 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 2.2.2.2 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 2

interface NULL0

ospf 1

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

mpls-te enable

asbr-pe1配置

asbr-pe1dis current-configuration

sysname asbr-pe1

mpls lsr-id 3.3.3.3

mpls

mpls te

explicit-path asbr-pe1-pe1

next sid label 16002 type prefix

next sid label 16001 type prefix

segment-routing

interface Ethernet1/0/0

undo shutdown

ip address 10.0.23.3 255.255.255.0

ospf enable 1 area 0.0.0.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.34.3 255.255.255.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 3.3.3.3 255.255.255.255

ospf enable 1 area 0.0.0.0

ospf prefix-sid index 3

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 1.1.1.1

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path asbr-pe1-pe1 //路径调用

mpls te binding-sid label 4000 //设置binding sid

interface NULL0

bgp 100

peer 10.0.34.4 as-number 200

peer 10.0.34.4 egress-engineering //使能BGP EPE

ipv4-family unicast

undo synchronization

network 1.1.1.1 255.255.255.255

peer 10.0.34.4 enable

link-state-family unicast //使能BGP-LS能力

ospf 1

import-route bgp

opaque-capability enable

segment-routing mpls

segment-routing global-block 16000 23999

area 0.0.0.0

mpls-te enable

asbr-pe2配置

asbr-pe2dis current-configuration

sysname asbr-pe2

set neid 18a8d

vsm on-board-mode enable

snmp-agent trap type base-trap

icmp rate-limit disable

mpls lsr-id 4.4.4.4

mpls

mpls te

explicit-path asbr-pe2-pe6

next sid label 16005 type prefix

next sid label 16006 type prefix

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0001.00

import-route bgp

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.34.4 255.255.255.0

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.45.4 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

isis enable 1

isis prefix-sid index 4

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 6.6.6.6

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path asbr-pe2-pe6

mpls te binding-sid label 2000 //设置binding-sid

interface NULL0

bgp 200

peer 10.0.34.3 as-number 100

peer 10.0.34.3 egress-engineering //命令用来使能BGP EPE(Egress Peer Engineering)功能

ipv4-family unicast

undo synchronization

network 6.6.6.6 255.255.255.255

peer 10.0.34.3 enable

link-state-family unicast

p2配置

dis current-configuration

sysname p2

mpls lsr-id 5.5.5.5

mpls

mpls te

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0002.00

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.45.5 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip address 10.0.56.5 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 5.5.5.5 255.255.255.255

isis enable 1

isis prefix-sid index 5

pe6配置

pe6dis current-configuration

sysname pe6

set neid 18a8e

ip vpn-instance a

ipv4-family

route-distinguisher 2:2

tnl-policy p1

vpn-target 1:1 export-extcommunity

vpn-target 1:1 import-extcommunity

mpls lsr-id 6.6.6.6

mpls

mpls te

explicit-path pe6-asbr-pe2

next sid label 16005 type prefix

next sid label 16004 type prefix

explicit-path pe6-pe1

next sid label 3000 type binding-sid

next sid label 48180 type adjacency

next sid label 4000 type binding-sid

segment-routing

isis 1

is-level level-2

cost-style wide

network-entity 49.0001.0000.0000.0003.00

traffic-eng level-2

segment-routing mpls

segment-routing global-block 16000 23999

interface Ethernet1/0/0

undo shutdown

ip address 10.0.56.6 255.255.255.0

isis enable 1

mpls

mpls te

undo dcn

undo dcn mode vlan

interface Ethernet1/0/1

undo shutdown

ip binding vpn-instance a

ip address 10.0.62.6 255.255.255.0

undo dcn

undo dcn mode vlan

interface LoopBack0

ip address 6.6.6.6 255.255.255.255

isis enable 1

isis prefix-sid index 6

interface Tunnel1

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 4.4.4.4

mpls te signal-protocol segment-routing

mpls te tunnel-id 1

mpls te path explicit-path pe6-asbr-pe2

mpls te binding-sid label 3000

interface Tunnel2

ip address unnumbered interface LoopBack0

tunnel-protocol mpls te

destination 1.1.1.1

mpls te signal-protocol segment-routing

mpls te tunnel-id 100

mpls te path explicit-path pe6-pe1

interface NULL0

bgp 200

peer 1.1.1.1 as-number 100

peer 1.1.1.1 ebgp-max-hop 255

peer 1.1.1.1 connect-interface LoopBack0

ipv4-family unicast

undo synchronization

peer 1.1.1.1 enable

ipv4-family vpnv4

policy vpn-target

peer 1.1.1.1 enable

ipv4-family vpn-instance a

peer 10.0.62.2 as-number 65101

undo dcn

lldp enable

tunnel-policy p1

tunnel select-seq sr-te load-balance-number 1

结果验证

sid label查看48060,路径编排使用

隧道路由查看

联通性测试

相关推荐
坚果派·白晓明9 分钟前
鸿蒙PC】libuv适配:AtomCode Skills一站式指南
c语言·c++·华为·ai编程·harmonyos·atomcode
FrameNotWork21 分钟前
HarmonyOS 6.1 Canvas粒子效果系统从零实现
华为·harmonyos
祭曦念1 小时前
宠物成长日记_鸿蒙开发实战
华为·harmonyos·宠物
AI_零食2 小时前
HarmonyOS ArkTS 设计系统构建实战指南
学习·华为·harmonyos·鸿蒙·鸿蒙系统
风华圆舞2 小时前
鸿蒙工程里build-profile-module-oh-package分别负责什么
华为·harmonyos
佛系菜狗2 小时前
【鸿蒙NEXT】textInput银行卡号格式化(每四位显示加一个空格),用户在中间修改时光标总是移动到最右侧重置
华为·harmonyos
AI_零食2 小时前
HarmonyOS ArkTS 常用工具函数实现与应用详解
华为·开源·harmonyos·鸿蒙·鸿蒙系统
lichenyang4533 小时前
# 打车票根卡片 UI 重构:从 Circle 挖洞到 clipShape PathShape,再到 100% 自适应
ui·华为·重构·harmonyos
风华圆舞3 小时前
鸿蒙导航意图 的 Flutter 侧封装思路
flutter·华为·harmonyos
风华圆舞3 小时前
Flutter 调用原生失败时,如何优雅处理 `MissingPluginException`
flutter·华为·harmonyos