配置步骤
一、在PE路由器上配置VRF（虚拟路由转发），VRF将路由器的2个实例分割，实例之间不能直接通信。 二、在PE和P路由器上配置路由协议，互联网的内部路由器可以互通 三、在PE设备之间配置BGP协议，BGP协议支持标签转发 四、在PE和P路由器上配置MPLS协议，将端口设置允许MPLS协议 五、配置××× 六、配置VRF路由注入，让PE间设备能够学习到对方的路由协议 |
PE1配置
| [PE1]displaycurrent-configuration [V200R003C00] # sysnamePE1 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # ip***-instance***a ipv4-family route-distinguisher100:1 ***-target100:3export-extcommunity ***-target100:3import-extcommunity # ip***-instance***b ipv4-family route-distinguisher100:2 ***-target100:4export-extcommunity ***-target100:4import-extcommunity # mplslsr-id3.3.3.3 mpls lsp-triggerall # mplsldp # # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress34.1.1.3255.255.255.0 mpls mplsldp # interfaceGigabitEthernet0/0/1 ipbinding***-instance***b ipaddress23.1.1.3255.255.255.0 # interfaceGigabitEthernet0/0/2 ipbinding***-instance***a ipaddress13.1.1.3255.255.255.0 # interfaceNULL0 # interfaceLoopBack0 ipaddress3.3.3.3255.255.255.0 # bgp100 peer5.5.5.5as-number100 peer5.5.5.5connect-interfaceLoopBack0 # ipv4-familyunicast undosynchronization peer5.5.5.5enable peer5.5.5.5next-hop-local # ipv4-family***v4 policy***-target peer5.5.5.5enable # ipv4-family***-instance***a import-routerip1 # ipv4-family***-instance***b import-routerip2 # ospf1 area0.0.0.0 network3.3.3.00.0.0.255 network34.1.1.00.0.0.255 # rip1***-instance***a undosummary version2 network13.0.0.0 import-routebgp # rip2***-instance***b undosummary version2 network23.0.0.0 network2.0.0.0 import-routebgp # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return |
PE2配置
| [PE2]displaycurrent-configuration [V200R003C00] # sysnamePE2 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # ip***-instance***a ipv4-family route-distinguisher100:1 ***-target100:3export-extcommunity ***-target100:3import-extcommunity # ip***-instance***b ipv4-family route-distinguisher100:2 ***-target100:4export-extcommunity ***-target100:4import-extcommunity # mplslsr-id5.5.5.5 mpls lsp-triggerall # mplsldp # # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress45.1.1.5255.255.255.0 mpls mplsldp # interfaceGigabitEthernet0/0/1 ipbinding***-instance***a ipaddress76.1.1.6255.255.255.0 # interfaceGigabitEthernet0/0/2 ipbinding***-instance***b ipaddress86.1.1.6255.255.255.0 # interfaceNULL0 # interfaceLoopBack0 ipaddress5.5.5.5255.255.255.0 # bgp100 peer3.3.3.3as-number100 peer3.3.3.3connect-interfaceLoopBack0 # ipv4-familyunicast undosynchronization peer3.3.3.3enable peer3.3.3.3next-hop-local # ipv4-family***v4 policy***-target peer3.3.3.3enable # ipv4-family***-instance***a import-routerip1 # ipv4-family***-instance***b import-routerip2 # ospf1 area0.0.0.0 network5.5.5.00.0.0.255 network45.1.1.00.0.0.255 # rip1***-instance***a undosummary version2 network76.0.0.0 import-routebgp # rip2***-instance***b undosummary version2 network86.0.0.0 import-routebgp # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return |
P配置
| [P]displaycurrent-configuration [V200R003C00] # sysnameP # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # mplslsr-id4.4.4.4 mpls lsp-triggerall # mplsldp # # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress34.1.1.4255.255.255.0 mpls mplsldp # interfaceGigabitEthernet0/0/1 ipaddress45.1.1.4255.255.255.0 mpls mplsldp # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress4.4.4.4255.255.255.0 # ospf1 area0.0.0.0 network4.4.4.00.0.0.255 network34.1.1.00.0.0.255 network45.1.1.00.0.0.255 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return |
siteA1配置
| [siteA-1]displaycurrent-configuration [V200R003C00] # sysnamesiteA-1 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress13.1.1.1255.255.255.0 # interfaceGigabitEthernet0/0/1 # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress1.1.1.1255.255.255.0 # rip1 undosummary version2 network1.0.0.0 network13.0.0.0 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return |
siteA2配置
| [siteA-2]displaycurrent-configuration [V200R003C00] # sysnamesiteA-2 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress76.1.1.7255.255.255.0 # interfaceGigabitEthernet0/0/1 # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress6.6.6.6255.255.255.0 # rip1 undosummary version2 network6.0.0.0 network76.0.0.0 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return |
siteB1配置
| [siteB-1]displaycurrent-configuration [V200R003C00] # sysnamesiteB-1 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress23.1.1.2255.255.255.0 # interfaceGigabitEthernet0/0/1 # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress2.2.2.2255.255.255.0 # rip1 undosummary version2 network2.0.0.0 network23.0.0.0 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return |
siteB2配置
| [siteB-2]displaycurrent-configuration [V200R003C00] # sysnamesiteB-2 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress86.1.1.8255.255.255.0 # interfaceGigabitEthernet0/0/1 # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress7.7.7.7255.255.255.0 # rip1 undosummary version2 network86.0.0.0 network7.0.0.0 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return |