MPLS VPN 实验手册资料cis

MPLSVPN试验

一、拓朴图

说明：

1、设备接互联地址：如R1与R2间的互联地址为10.1.12.0/24；

LOOKBACK接口地址为：1.1.1.1/32;

2、CORE内运行OSPF（进行号100,area0），激活MPLS;

3、PE上创建VRF（VPNA）,PE与CE间通过OSPF互联（进程号:

1）；

4、R2与R4两台PE间建立MP-IBGP邻接关系，（BGPAS234）

5、完成PE-CE间的路由重发布；

二、配置信息:

RI:(CE1)

Rl#showrun

!

hostnameRI

!

ipcef

!

interfaceLoopbackO

ipospfnetworkpoint-to-point

!

interfaceFastEthernetO/0

duplexauto

speedauto

mplsip

!

interfaceFastEthernetO/1

noipaddress

shutdown

duplexauto

speedauto

routerospf1

log-adjacency-changes

network1.1.1.10.0.0.0area0

network10.1.12.10.0.0.0area0

!

!

end

RI#

session-192.168.197.12001-20170116.log

R2:(PEI)

R2#

R2#showrun

!

hostnameR2

ipcef

ipvrfvpna

rd1:1

route-targetexport234:2

route-targetimport234:4

I

mplslabelrange200299

mplsIdprouter-idLoopbackO

!

!

interfaceLoopbackO

!

interfaceFastEthernet0/0

ipvrfforwardingvpna

duplexauto

speedauto

!

interfaceFastEthernetO/1

duplexauto

speedauto

mplsip

routerospf1vrfvpna

log-adjacency-changes

redistributebgp234subnets

network10.1.12.20.0.0.0area0

I

routerospf100

log-adjacency-changes

network2.2.2.20.0.0.0area0

network10.1.23.20.0.0.0area0

I

routerbgp234

nobgpdefaultipv4-unicast

bgplog-neighbor-changes

neighbor4.4.4.4remote-as234

neighbor4.4.4.4update-sourceLoopbackO

I

address-familyvpnv4

neighbor4.4.4.4activate

neighbor4.4.4.4send-communityextended

exit-address-family

address-familyipv4vrfvpna

redistributeospf1vrfvpnamatchinternalexternal1

external2

noauto-summary

nosynchronization

exit-address-family

I

!

end

R2#

session-192.168.197.12002-20170116.log

R3:(P)

R3#

R3#showrun

!

hostnameR3

ipcef

mplslabelrange300399

mplsIdprouter-idLoopbackO

!

!

interfaceLoopbackO

!

interfaceFastEthemetO/0

duplexauto

speedauto

mplsip

!

interfaceFastEthemetO/1

duplexauto

speedauto

mplsip

!

routerospf100

log-adjacency-changes

network3.3.3.30.0.0.0area0

network10.1.23.30.0.0.0area0

network10.1.34.30.0.0.0area0

end

R3#

session-192.168.197.12003-20170116.log

R4：(PE2)

R4#

R4#showrun

Buildingconfiguration...

!

hostnameR4

!

ipcef

!

ipvrfvpna

rd1:1

route-targetexport234:4

route-targetimport234:2

mplslabelrange400499

mplsIdprouter-idLoopbackO

!

!

interfaceLoopbackO

!

interfaceFastEthemetO/0

duplexauto

speedauto

mplsip

!

interfaceFastEthemetO/1

ipvrfforwardingvpna

duplexauto

speedauto

!

routerospf1vrfvpna

log-adjacency-changes

redistributebgp234subnets

network10.1.45.40.0.0.0area0

routerospf100

log-adjacency-changes

network4.4.4.40.0.0.0area0

network10.1.34.40.0.0.0area0

I

routerbgp234

nobgpdefaultipv4-unicast

bgplog-neighbor-changes

neighbor2.2.2.2remote-as234

neighbor2.2.2.2update-sourceLoopbackO

!

address-familyvpnv4

neighbor2.2.2.2activate

neighbor2.2.2.2send-communityextended

exit-address-family

I

address-familyipv4vrfvpna

redistributeospf1vrfvpnamatchinternalexternal1

external2

noauto-summary

nosynchronization

exit-address-family

end

session-192.168.197.12004-20170116.log

R5:(CE2)

R5#

R5#showrun

Buildingconfiguration...

!

hostnameR5

!

ipcef

!

interfaceLoopbackO

ipospfnetworkpoint-to-point

!

interfaceFastEthernetO/0

duplexauto

speedauto

interfaceFastEthernetO/1

noipaddress

shutdown

duplexauto

speedauto

I

routerospf1

log-adjacency-changes

network5.5.5.50.0.0.0area0

network10.1.45.50.0.0.0area0

!

end

R5#

session-192.168.197.12005-20170116.log

三、相关检查吩咐：

1、R2#shipospfneighbor//查PE的OSPF邻居

R2#shipospfneighbor〃查PE的OSPF邻居

NeighborIDPriStateDeadTimeAddress

Interface

3.3.3.31FULL/DR00:00:30

10.1.23.3FastEthernetO/1

1.1.1.11FULL/BDR00:00:30

10.1.12.1FastEthernetO/0

2、R2#shmplsIdpneighbor〃查PE上的MPLS邻居信息

R2#shmplsIdpneighbor〃查PE上的MPLS邻居信息

PeerLDPIdent:3.3.3.3:0;LocalLDPIdent2.2.2.2:0

State:Oper;Msgssent/rcvd:11/11;Downstream

Uptime:00:03:23

LDPdiscoverysources:

AddressesboundtopeerLDPIdent:

10.1.23.33.3.3.310.1.34.3

3、R2#shmplsforwarding-table//查PE上的MPLS标签转发表

R2#shmplsforwarding-table〃查PE上的MPLS标签转发表

LocalOutgoingPrefixBytestagOutgoing

NextHop

tagtagorVCorTunnelIdswitchedinterface

203Untagged1.1.1.1/32[V]3138Fa0/0

10.1.12.1

204Aggregate10.1.12.0/24[V]0

R2#

4、R2#shipbgpvpnv4allsummary〃查PE上的VPNV4邻居

信息

R2#shipbgpvpnv4allsummary〃查PE上的VPNV4邻居

信息：

BGProuteridentifier2.2.2.2,localASnumber234

BGPtableversionis9,mainroutingtableversion9

4networkentriesusing548bytesofmemory

4pathentriesusing272bytesofmemory

5/4BGPpath/bestpathattributeentriesusing620bytesof

memory

2BGPextendedcommunityentriesusing80bytesofmemory

0BGProute-mapcacheentriesusing0bytesofmemory

0BGPfilter-listcacheentriesusing0bytesofmemory

BGPusing1520totalbytesofmemory

BGPactivity4/0prefixes,4/0paths,scaninterval15secs

NeighborVASMsgRcvdMsgSentTblVerInQOutQ

Up/DownState/PfxRcd

4.4.4.44234191990

000:12:012

5、R2#shipbgpvpnv4all〃查PE上的VPNV4路由信息，可推

断路由重发布是否正确

R2#shipbgpvpnv4all〃查PE上的VPNV4路由信息，可

推断路由重发布是否正确

Statuscodes:ssuppressed,ddamped,hhistory,*valid,>

best,i-internal,

rRIB-failure,SStale

Origincodes:i-IGP,e-EGP,?-incomplete

NetworkNextHopMetricLocPrf

WeightPath

RouteDistinguisher:1:1(defaultforvrfvpna)

*>ilO.1.45.0/244.4.4.40100

0?

6、R2#shiprovrfvpna〃查看VRF下的路由表信息

R2#shiprovrfvpna//查看VRF下的路由表信息

RoutingTable:vpna

Codes:C-connected,S-static,R-RIP,M-mobile,B-BGP

D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPF

interarea

N1-OSPFNSSAexternaltype1,N2-OSPFNSSA

externaltype2

El-OSPFexternaltype1,E2-OSPFexternaltype2

i-IS-IS,su-IS-ISsummary,LI-IS-ISlevel-1,L2-

IS-ISlevel-2

ia-IS-ISinterarea,*-candidatedefault,U-per-user

staticroute

o-ODR,P-periodicdownloadedstaticroute

Gatewayoflastresortisnotset

1.0.0.0/32issubnetted,1subnets

o1.1.1.1[110/2]via10.1.12.1,00:17:52,

FastEthernetO/0

5.0.0.0/24issubnetted,1subnets

B5.5.5.0[200/2]via4.4.4.4,00:17:02

10.0.0.0/24issubnetted,2subnets

C10.1.12.0isdirectlyconnected,FastEthernetO/0

B10.1.45.0[200/0]via4.4.4.4,00:17:02

R2#

7、R2#shipcef〃查看CEF表

R2#shipcef//查看CEF表

PrefixNextHopInterface

O.O.O.O/OdropNullO(default

routehandlerentry)

R2#

8、〃在CE1上带源地址拼CE2

R1#〃在CE1上带源地址拼CE2

Typeescapesequencetoabort.

Sending5,100-byteICMPEchosto5.5.5.5,timeoutis2

seconds:

Packetsentwithasourceaddressof1.1.1.1

mu

9、//在CE1上带源地址路由跟踪CE2

RI#〃在CE1上带源地址路由跟踪CE2

Typeescapesequencetoabort.

110.1.12.2128msec188msec196msec

210.1.23.3[MPLS:Labels300/403Exp0]664msec600

msec616msec

310.1.45.4[MPLS:Label403Exp0]372msec408msec

560msec

410.1.45.5624msec764msec576msec

RI#

10、Rl#showipospfneighbor//查看CE1上的OSPF邻居表

Rl#showipospfneighbor//查看CE1上的OSPF邻居表

NeighborIDPriStateDeadTimeAddress

Interface

10.1.12.21FULL/DR00:00:3810.1.12.2

FastEthernet0