HCIE - 数通｜MPLS虚拟专用网跨域实验

目录

一、前言

二、实验拓扑

三、实验需求

四、实验配置

（一）PE设备

① R2配置

② R7配置

③ R10配置

④ R11配置

（二）RR设备

① R3配置

② R6配置

（三）ASBR设备

① R4配置

② R5配置

五、实验效果

① R1到R8流量路径

② R9到R12流量路径

---

各位如果有学习python相关知识及相应算法的同学，推荐关注一下我的朋友：Neptune_yx

---

一、前言

        该实验是对MPLS虚拟专用网跨域的一次应用，通过该实验可以掌握相应的MPLS虚拟专用网跨域的有关配置，由于时间比较仓促，实验配置部分只说明设备的有关配置，不再按步骤进行说明，有关原理知识，可以参考前面的博文 MPLS虚拟专用网跨域（一）以及MPLS虚拟专用网跨域（二）。

二、实验拓扑

三、实验需求

        ① AR3和AR6作为图中RR设备、AR2、AR9、AR7、AR10是PE设备；

        ② 通过MPLS VPN跨域option C1将AR1和AR8完成通信，AR11和AR12之间完成通信；

        ③ 各设备之间互访为最优路径。 

四、实验配置

（一）PE设备

① R2配置如下

ip -instance CE1
 ipv4-family
  route-distinguisher 2:2
  -target 100:1 export-extcommunity
  -target 100:1 import-extcommunity
#
mpls lsr-id 2.2.2.2
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0
 ip binding -instance CE1
 ip address 12.1.1.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 23.1.1.2 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface LoopBack1
 ip address 2.2.2.2 255.255.255.255 
 ospf enable 1 area 0.0.0.0
#
bgp 200
 peer 3.3.3.3 as-number 200 
 peer 3.3.3.3 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.3 enable
  peer 3.3.3.3 label-route-capability
 # 
 ipv4-family v4
  policy -target
  peer 3.3.3.3 enable
 #
 ipv4-family -instance CE1 
  peer 12.1.1.1 as-number 100 
#
ospf 1 
 area 0.0.0.0 

② R7配置如下

ip -instance CE2
 ipv4-family
  route-distinguisher 7:7
  -target 100:1 export-extcommunity
  -target 100:1 import-extcommunity
#
mpls lsr-id 7.7.7.7
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0
 ip address 67.1.1.7 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip binding -instance CE2
 ip address 78.1.1.7 255.255.255.0 
#
interface LoopBack1
 ip address 7.7.7.7 255.255.255.255 
 ospf enable 1 area 0.0.0.0
#
bgp 300
 peer 6.6.6.6 as-number 300 
 peer 6.6.6.6 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 6.6.6.6 enable
  peer 6.6.6.6 label-route-capability
 # 
 ipv4-family v4
  policy -target
  peer 6.6.6.6 enable
 #
 ipv4-family -instance CE2 
  peer 78.1.1.8 as-number 400 
#
ospf 1 
 area 0.0.0.0 

③ R10配置如下

#
ip -instance CE3
 ipv4-family
  route-distinguisher 10:10
  -target 200:1 export-extcommunity
  -target 200:1 import-extcommunity
#
mpls lsr-id 10.10.10.10
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0
 ip binding -instance CE3
 ip address 109.1.1.10 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 103.1.1.10 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface LoopBack1
 ip address 10.10.10.10 255.255.255.255 
 ospf enable 1 area 0.0.0.0
#
bgp 200
 peer 3.3.3.3 as-number 200 
 peer 3.3.3.3 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.3 enable
  peer 3.3.3.3 label-route-capability
 # 
 ipv4-family v4
  policy -target
  peer 3.3.3.3 enable
 #
 ipv4-family -instance CE3 
  peer 109.1.1.9 as-number 500 
#
ospf 1 
 area 0.0.0.0 

④ R11配置如下

#
ip -instance CE4
 ipv4-family
  route-distinguisher 11:11
  -target 200:1 export-extcommunity
  -target 200:1 import-extcommunity
#
mpls lsr-id 11.11.11.11
mpls
#
mpls ldp
#
#
interface GigabitEthernet0/0/0
 ip binding -instance CE4
 ip address 112.1.1.11 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 116.1.1.11 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface LoopBack1
 ip address 11.11.11.11 255.255.255.255 
 ospf enable 1 area 0.0.0.0
#
bgp 300
 peer 6.6.6.6 as-number 300 
 peer 6.6.6.6 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 6.6.6.6 enable
  peer 6.6.6.6 label-route-capability
 # 
 ipv4-family v4
  policy -target
  peer 6.6.6.6 enable
 #
 ipv4-family -instance CE4 
  peer 112.1.1.12 as-number 600 
#
ospf 1 
 area 0.0.0.0 
#

（二）RR设备

① R3配置如下

#
mpls lsr-id 3.3.3.3
mpls
#
mpls ldp
#
#
interface GigabitEthernet0/0/0
 ip address 23.1.1.3 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip address 34.1.1.3 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/2
 ip address 103.1.1.3 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface LoopBack1
 ip address 3.3.3.3 255.255.255.255 
 ospf enable 1 area 0.0.0.0
#
bgp 200
 peer 2.2.2.2 as-number 200 
 peer 2.2.2.2 connect-interface LoopBack1
 peer 4.4.4.4 as-number 200 
 peer 4.4.4.4 connect-interface LoopBack1
 peer 6.6.6.6 as-number 300 
 peer 6.6.6.6 ebgp-max-hop 10 
 peer 6.6.6.6 connect-interface LoopBack1
 peer 10.10.10.10 as-number 200 
 peer 10.10.10.10 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 2.2.2.2 enable
  peer 2.2.2.2 reflect-client
  peer 2.2.2.2 label-route-capability
  peer 4.4.4.4 enable
  peer 4.4.4.4 reflect-client
  peer 4.4.4.4 label-route-capability
  peer 6.6.6.6 enable
  peer 10.10.10.10 enable
  peer 10.10.10.10 reflect-client
  peer 10.10.10.10 label-route-capability
 # 
 ipv4-family v4
  undo policy -target
  peer 2.2.2.2 enable
  peer 2.2.2.2 next-hop-invariable 
  peer 4.4.4.4 enable
  peer 6.6.6.6 enable
  peer 6.6.6.6 next-hop-invariable 
  peer 10.10.10.10 enable
  peer 10.10.10.10 next-hop-invariable 
#
ospf 1 
 area 0.0.0.0 
#

② R6配置如下

#
mpls lsr-id 6.6.6.6
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0
 ip address 56.1.1.6 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip address 67.1.1.6 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/2
 ip address 116.1.1.6 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface LoopBack1
 ip address 6.6.6.6 255.255.255.255 
 ospf enable 1 area 0.0.0.0
#
bgp 300
 peer 3.3.3.3 as-number 200 
 peer 3.3.3.3 ebgp-max-hop 10 
 peer 3.3.3.3 connect-interface LoopBack1
 peer 5.5.5.5 as-number 300 
 peer 5.5.5.5 connect-interface LoopBack1
 peer 7.7.7.7 as-number 300 
 peer 7.7.7.7 connect-interface LoopBack1
 peer 11.11.11.11 as-number 300 
 peer 11.11.11.11 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 3.3.3.3 enable
  peer 5.5.5.5 enable
  peer 5.5.5.5 reflect-client
  peer 5.5.5.5 label-route-capability
  peer 7.7.7.7 enable
  peer 7.7.7.7 reflect-client
  peer 7.7.7.7 label-route-capability
  peer 11.11.11.11 enable
  peer 11.11.11.11 reflect-client
  peer 11.11.11.11 label-route-capability
 # 
 ipv4-family v4
  undo policy -target
  peer 3.3.3.3 enable
  peer 3.3.3.3 next-hop-invariable 
  peer 5.5.5.5 enable
  peer 7.7.7.7 enable
  peer 7.7.7.7 next-hop-invariable 
  peer 11.11.11.11 enable
  peer 11.11.11.11 next-hop-invariable 
#
ospf 1 
 area 0.0.0.0 
#

（三）ASBR设备

① R4配置如下：

#
mpls lsr-id 4.4.4.4
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0
 ip address 34.1.1.4 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface GigabitEthernet0/0/1
 ip address 45.1.1.4 255.255.255.0 
 mpls
#
#
interface LoopBack1
 ip address 4.4.4.4 255.255.255.255 
 ospf enable 1 area 0.0.0.0
#
bgp 200
 peer 3.3.3.3 as-number 200 
 peer 3.3.3.3 connect-interface LoopBack1
 peer 45.1.1.5 as-number 300 
 #
 ipv4-family unicast
  undo synchronization
  network 2.2.2.2 255.255.255.255 
  network 3.3.3.3 255.255.255.255 
  network 10.10.10.10 255.255.255.255 
  peer 3.3.3.3 enable
  peer 3.3.3.3 route-policy rr export
  peer 3.3.3.3 label-route-capability
  peer 45.1.1.5 enable
  peer 45.1.1.5 route-policy asbr export
  peer 45.1.1.5 label-route-capability
 # 
 ipv4-family v4
  undo policy -target
  peer 3.3.3.3 enable
#
ospf 1 
 area 0.0.0.0 
#
route-policy asbr permit node 10 
 apply mpls-label
#
route-policy rr permit node 10 
 if-match mpls-label 
 apply mpls-label
#

② R5配置如下

mpls lsr-id 5.5.5.5
mpls
#
mpls ldp
#
interface GigabitEthernet0/0/0
 ip address 45.1.1.5 255.255.255.0 
 mpls
#
interface GigabitEthernet0/0/1
 ip address 56.1.1.5 255.255.255.0 
 ospf enable 1 area 0.0.0.0
 mpls
 mpls ldp
#
interface LoopBack1
 ip address 5.5.5.5 255.255.255.255 
 ospf enable 1 area 0.0.0.0
#
bgp 300
 peer 6.6.6.6 as-number 300 
 peer 6.6.6.6 connect-interface LoopBack1
 peer 45.1.1.4 as-number 200 
 #
 ipv4-family unicast
  undo synchronization
  network 6.6.6.6 255.255.255.255 
  network 7.7.7.7 255.255.255.255 
  network 11.11.11.11 255.255.255.255 
  peer 6.6.6.6 enable
  peer 6.6.6.6 route-policy rr export
  peer 6.6.6.6 label-route-capability
  peer 45.1.1.4 enable
  peer 45.1.1.4 route-policy asbr export
  peer 45.1.1.4 label-route-capability
 # 
 ipv4-family v4
  undo policy -target
  peer 6.6.6.6 enable
#
ospf 1 
 area 0.0.0.0 
#
route-policy asbr permit node 10 
 apply mpls-label
#
route-policy rr permit node 10
 if-match mpls-label 
 apply mpls-label
#

五、实验效果

① R1到R8流量路径如下

② R9到R12流量路径如下