BGP MPLS VPN配置与排错——H3C.ppt

资源ID：2205609 资源大小：559.01KB 全文页数：28页
资源格式： PPT 下载积分：8金币

快捷下载

会员登录下载

三方登录下载：

下载资源需要8金币

邮箱/手机：
温馨提示：	用户名和密码都是您填写的邮箱或者手机号，方便查询和重复下载（系统自动生成）
支付方式：
验证码：	换一换

加入VIP免费专享

账号：
密码：
验证码：	换一换
当日自动登录忘记密码？

友情提示

1、下载资料失败解决办法

2、PDF文件下载后，可能会被浏览器默认打开，此种情况可以点击浏览器菜单，保存网页到桌面，就可以正常下载了。

3、本站不支持迅雷下载，请使用电脑自带的IE浏览器，或者360浏览器、谷歌浏览器下载即可。

4、本站资源下载后的文档和图纸-无水印,预览文档经过压缩，下载后原文更清晰。

5、试题试卷类文档，如果标题没有明确说明有答案则都视为没有答案，请知晓。

网站客服

侵权投诉

BGP MPLS VPN配置与排错——H3C.ppt

BGP/MPLS VPN配置与排错,BGP/MPLS VPN实现原理回顾BGP/MPLS VPN配置步骤与排错方法总结与提要,目标,1.巩固BGP/MPLS VPN的原理,3.熟悉MPLS VPN网络的排错方法,2.掌握MPLS VPN的配置方法,PC(CE4),SR88(PE1),S75E(PE2),AS37937,Lo=59.0.0.1,S36(CE1),Lo=59.0.0.2,Gig3/1/1,Vlan10 Gig2/0/1,Gig3/1/20,Gig3/1/19,Vlan20 Gig2/0/24,Vlan 30 Gig2/0/23,192.168.10.1/30,172.32.10.1/24,Lo=192.168.254.10,192.168.12.1/30,172.32.12.1/24,Lo=192.168.255.10,VPN1,一个简单的MPLS VPN组网,172.32.10.2/24,S36(CE3),172.32.12.2/24,192.168.12.2/30,PC(CE2),192.168.10.2/30,VLan20 eth1/0/1,vlan20eth1/0/1,59.0.10.1/30,59.0.10.2/30,VPN2,PC(CE8),SR88(PE3),S75E(PE4),AS37937,Lo=59.0.0.3,S36(CE5),Lo=59.0.0.4,Gig3/1/1,Vlan10 Gig2/0/1,Gig3/1/20,Gig3/1/19,Vlan20 Gig2/0/24,Vlan 30 Gig2/0/23,192.168.1.1/30,172.32.1.1/24,Lo=192.168.254.1,192.168.2.1/30,172.32.2.1/24,Lo=192.168.255.1,VPN1,一个简单的MPLS VPN组网,172.32.1.2/24,S36(CE7),172.32.2.2/24,192.168.2.2/30,PC(CE6),192.168.1.2/30,VLan20 eth1/0/1,vlan20eth1/0/1,59.0.1.1/30,59.0.1.2/30,VPN2,BGP/MPLS VPN实现原理回顾BGP/MPLS VPN配置步骤与排错方法总结与提要,1.配置IGP公网路由协议,2.配置MPLS,3.配置BGP,4.配置VPN，配置PE和CE之间的路由,目标：所有PE和P设备可以互相学到32位loopback地址,目标：所有相邻PE和P设备之间建立LDPsession，并为其32位loopback地址分配MPLS标签,目标：所有PE设备之间普通BGP邻居和BGP vpnv4邻居,目标：PE设备可以学习到直连CE侧的私网路由（以OSPF为例）,5.将本端学到的私网路由引入到对应的BGP的VPN实例，将BGP学过来的远端私网路由引入给本端的CE侧。,目标：PE设备可以学习到远端CE侧的私网路由 CE设备可以学习到远端CE侧的私网路由,MPLS VPN的配置步骤与逐步排错方法,1.配置IGP公网路由协议,目标：所有PE和P设备可以互相学到32位loop地址,SR88(PE1),S75(PE2),router id 59.0.0.1 ospf 1 area 0.0.0.0 network 59.0.0.1 0.0.0.0 network 59.0.10.0 0.0.0.3,router id 59.0.0.2 ospf 1 area 0.0.0.0 network 59.0.0.2 0.0.0.0 network 59.0.10.2 0.0.0.3,1.配置IGP公网路由协议,目标：所有PE和P设备可以互相学到32位loop地址,SR88(PE1),PE1dis ip routing-table Routing Tables:Public Destinations:6 Routes:6Destination/Mask Proto Pre Cost NextHop Interface59.0.0.1/32 Direct 0 0 127.0.0.1 InLoop059.0.0.2/32 OSPF 10 1 59.0.10.2 GE3/1/1,1.配置IGP公网路由协议,目标：所有PE和P设备可以互相学到32位loop地址,S75(PE2),PE2dis ip routing-table Routing Tables:Public Destinations:8 Routes:8Destination/Mask Proto Pre Cost NextHop Interface59.0.0.1/32 OSPF 10 1 59.0.10.1 Vlan1059.0.0.2/32 Direct 0 0 127.0.0.1 InLoop0,2.配置MPLS,目标：所有PE和P设备之间建立LDPsession，并为其32位loopback地址分配MPLS标签,SR88(PE1),S75(PE2),mpls lsr-id 59.0.0.1 mpls mpls ldp,mpls lsr-id 59.0.0.2mplsmpls ldp,interface Gig3/1/1ip address 59.0.10.1 255.255.255.252 mpls mpls ldp,interface VLAN 10 ip address 59.0.10.2 255.255.255.252 mpls mpls ldp,2.配置MPLS,目标：所有相邻PE和P设备之间建立LDPsession，并为其32位loopback地址分配MPLS标签,SR88(PE1),dis mpls ldp session LDP Session(s)in Public Network Total number of sessions:1-Peer-ID Status LAM SsnRole FT MD5 KA-Sent/Rcv-59.0.0.2:0 Operational DU Passive Off Off 10/10-LAM:Label Advertisement Mode FT:Fault Tolerancedis mpls ldp lsp LDP LSP Information-SN DestAddress/Mask In/OutLabel Next-Hop In/Out-Interface-1 59.0.0.1/32 3/NULL 127.0.0.1-/InLoop0 2 59.0.0.2/32 NULL/3 59.0.10.2-/GE3/1/1-A*before an LSP means the LSP is not established A*before a Label means the USCB or DSCB is stale,2.配置MPLS,目标：所有PE和P设备之间建立LDPsession，并为其32位loopback地址分配MPLS标签,S75(PE2),PE2dis mpls ldp session LDP Session(s)in Public Network Total number of sessions:1-Peer-ID Status LAM SsnRole FT MD5 KA-Sent/Rcv-59.0.0.1:0 Operational DU Active Off Off 4/4-LAM:Label Advertisement Mode FT:Fault TolerancePE2dis mpls ldp lsp LDP LSP Information-SN DestAddress/Mask In/OutLabel Next-Hop In/Out-Interface-1 59.0.0.1/32 NULL/3 59.0.10.1-/Vlan10 2 59.0.0.2/32 3/NULL 127.0.0.1 Vlan10/InLoop0-A*before an LSP means the LSP is not established A*before a Label means the USCB or DSCB is stale,3.配置BGP,目标：所有PE设备之间普通BGP邻居和BGP vpnv4邻居,SR88(PE1),S75(PE2),bgp 37937 peer 59.0.0.2 as-number 37937 peer 59.0.0.2 connect-interface LoopBack0#ipv4-family vpnv4 peer 59.0.0.2 enable,bgp 37937 peer 59.0.0.1 as-number 37937 peer 59.0.0.1 connect-interface LoopBack0#ipv4-family vpnv4 peer 59.0.0.1 enable,3.配置BGP,目标：所有PE设备之间普通BGP邻居和BGP vpnv4邻居,SR88(PE1),PE1dis bgp peer BGP local router ID:59.0.0.1 Local AS number:37937 Total number of peers:1 Peers in established state:1 Peer V AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State 59.0.0.2 4 37937 3 3 0 0 00:01:45 EstablishedPE1dis bgp vpnPE1dis bgp vpnv4 allPE1dis bgp vpnv4 all peer BGP local router ID:59.0.0.1 Local AS number:37937 Total number of peers:1 Peers in established state:1 Peer V AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State 59.0.0.2 4 37937 4 3 0 0 00:02:03 Established,3.配置BGP,目标：所有PE设备之间普通BGP邻居和BGP vpnv4邻居,S75(PE2),PE2-bgpdis bgp peer BGP local router ID:59.0.0.2 Local AS number:37937 Total number of peers:1 Peers in established state:1 Peer V AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State 59.0.0.1 4 37937 2 2 0 0 00:00:16 EstablishedPE2-bgpdis bgp vpnv4 all peer BGP local router ID:59.0.0.2 Local AS number:37937 Total number of peers:1 Peers in established state:1 Peer V AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State 59.0.0.1 4 37937 2 2 0 0 00:00:33 Established,4.配置VPN，配置PE和CE之间的路由,目标：PE设备可以学习到直连CE侧的私网路由（以OSPF为例）,SR88(PE1),ip vpn-instance vpn1 route-distinguisher 37937:1 vpn-target 37937:1 export-extcommunity vpn-target 37937:1 import-extcommunity#ip vpn-instance vpn2 route-distinguisher 37937:2 vpn-target 37937:2 export-extcommunity vpn-target 37937:2 import-extcommunity#interface GigabitEthernet3/1/19 port link-mode route description TO_CE2 ip binding vpn-instance vpn2 ip address 172.32.10.1 255.255.255.0#interface GigabitEthernet3/1/20 port link-mode route description TO_CE1 ip binding vpn-instance vpn1 ip address 192.168.10.1 255.255.255.252#,ospf 11 vpn-instance vpn1 area 0.0.0.0 network 192.168.10.0 0.0.0.3,S36(PE1)ospf 1 area 0.0.0.0 network 192.168.10.0 0.0.0.3 network 192.168.254.10 0.0.0.0,4.配置VPN，配置PE和CE之间的路由,目标：PE设备可以学习到直连CE侧的私网路由（以OSPF为例）,ip vpn-instance vpn1 route-distinguisher 37937:1 vpn-target 37937:1 export-extcommunity vpn-target 37937:1 import-extcommunity#ip vpn-instance vpn2 route-distinguisher 37937:2 vpn-target 37937:2 export-extcommunity vpn-target 37937:2 import-extcommunity#interface Vlan-interface20 description TO_CE3 ip binding vpn-instance vpn1 ip address 192.168.12.1 255.255.255.252#interface Vlan-interface30 description TO_CE4 ip binding vpn-instance vpn2 ip address 172.32.12.1 255.255.255.0#,ospf 11 vpn-instance vpn1 area 0.0.0.0 network 192.168.2.0 0.0.0.3,S36-CE3ospf 1 area 0.0.0.0 network 192.168.12.0 0.0.0.3 network 192.168.255.10 0.0.0.0,S75(PE2),4.配置VPN，配置PE和CE之间的路由,目标：PE设备可以学习到直连CE侧的私网路由（以OSPF为例）,SR88(PE1),PE1dis ospf peer OSPF Process 1 with Router ID 59.0.0.1 Neighbor Brief Information Area:0.0.0.0 Router ID Address Pri Dead-Time Interface State 59.0.0.2 59.0.10.2 1 36 GE3/1/1 Full/BDR OSPF Process 11 with Router ID 192.168.10.1 Neighbor Brief Information Area:0.0.0.0 Router ID Address Pri Dead-Time Interface State 192.168.10.2 192.168.10.2 1 33 GE3/1/20 Full/BDR,PE1dis ip rout vpn vpn1Routing Tables:vpn1 Destinations:7 Routes:7Destination/Mask Proto Pre Cost NextHop Interface127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.10.0/30 Direct 0 0 192.168.10.1 GE3/1/20192.168.10.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.254.10/32 OSPF 10 2 192.168.10.2 GE3/1/20,dis ip rout vpn-instance vpn1Routing Tables:vpn1 Destinations:7 Routes:7Destination/Mask Proto Pre Cost NextHop Interface127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.12.0/30 Direct 0 0 192.168.12.1 Vlan20192.168.12.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.255.10/32 OSPF 10 2 192.168.12.2 Vlan20,4.配置VPN，配置PE和CE之间的路由,目标：PE设备可以学习到直连CE侧的私网路由（以OSPF为例）,dis ospf peer OSPF Process 1 with Router ID 59.0.0.2 Neighbor Brief Information Area:0.0.0.0 Router ID Address Pri Dead-Time Interface State 59.0.0.1 59.0.10.1 1 36 Vlan10 Full/DR OSPF Process 11 with Router ID 192.168.12.1 Neighbor Brief Information Area:0.0.0.0 Router ID Address Pri Dead-Time Interface State 192.168.255.10 192.168.12.2 1 33 Vlan20 Full/BDR,S75(PE2),5.将本端学到的私网路由引入到对应的BGP的VPN实例将BGP学过来的远端私网路由引入给本端的CE侧,SR88(PE1),S75(PE2),bgp 37937 ipv4-family vpn-instance vpn1 import-route direct import-route ospf 11#ipv4-family vpn-instance vpn2 import-route direct,bgp 37937 ipv4-family vpn-instance vpn1 import-route direct import-route ospf 11#ipv4-family vpn-instance vpn2 import-route direct,ospf 11 vpn-instance vpn1 import-route bgp area 0.0.0.0 network 192.168.1.0 0.0.0.3#,ospf 11 vpn-instance vpn1 import-route bgp area 0.0.0.0 network 192.168.2.0 0.0.0.3,目标：PE设备可以学习到远端CE侧的私网路由 CE设备可以学习到远端CE侧的私网路由,5.将本端学到的私网路由引入到对应的BGP的VPN实例将BGP学过来的远端私网路由引入给本端的CE侧,SR88(PE1),PE1dis ip rout vpn vpn1Routing Tables:vpn1 Destinations:7 Routes:7Destination/Mask Proto Pre Cost NextHop Interface127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.10.0/30 Direct 0 0 192.168.10.1 GE3/1/20192.168.10.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.12.0/30 BGP 255 0 59.0.0.2 NULL0192.168.254.10/32 OSPF 10 2 192.168.10.2 GE3/1/20192.168.255.10/32 BGP 255 3 59.0.0.2 NULL0,目标：PE设备可以学习到远端CE侧的私网路由 CE设备可以学习到远端CE侧的私网路由,5.将本端学到的私网路由引入到对应的BGP的VPN实例将BGP学过来的远端私网路由引入给本端的CE侧,dis ip routing-table vpn vpn1Routing Tables:vpn1 Destinations:7 Routes:7Destination/Mask Proto Pre Cost NextHop Interface127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.10.0/30 BGP 255 0 59.0.0.1 NULL0192.168.12.0/30 Direct 0 0 192.168.12.1 Vlan20192.168.12.1/32 Direct 0 0 127.0.0.1 InLoop0192.168.254.10/32 BGP 255 3 59.0.0.1 NULL0192.168.255.10/32 OSPF 10 2 192.168.12.2 Vlan20,S75(PE2),目标：PE设备可以学习到远端CE侧的私网路由 CE设备可以学习到远端CE侧的私网路由,5.将本端学到的私网路由引入到对应的BGP的VPN实例将BGP学过来的远端私网路由引入给本端的CE侧,S36(CE1),目标：PE设备可以学习到远端CE侧的私网路由 CE设备可以学习到远端CE侧的私网路由,dis ip routing-table Routing Table:public netDestination/Mask Protocol Pre Cost Nexthop Interface127.0.0.0/8 DIRECT 0 0 127.0.0.1 InLoopBack0127.0.0.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0192.168.10.0/30 DIRECT 0 0 192.168.10.2 Vlan-interface10192.168.10.2/32 DIRECT 0 0 127.0.0.1 InLoopBack0192.168.12.0/30 O_ASE 150 1 192.168.10.1 Vlan-interface10192.168.254.10/32 DIRECT 0 0 127.0.0.1 InLoopBack0192.168.255.10/32 OSPF 10 13 192.168.10.1 Vlan-interface10ping 192.168.255.10 PING 192.168.255.10:56 data bytes,press CTRL_C to break Reply from 192.168.255.10:bytes=56 Sequence=1 ttl=252 time=4 ms Reply from 192.168.255.10:bytes=56 Sequence=2 ttl=252 time=4 ms Reply from 192.168.255.10:bytes=56 Sequence=3 ttl=252 time=4 ms,5.将本端学到的私网路由引入到对应的BGP的VPN实例将BGP学过来的远端私网路由引入给本端的CE侧,S36(CE3),目标：PE设备可以学习到远端CE侧的私网路由 CE设备可以学习到远端CE侧的私网路由,dis ip routing-table Routing Table:public netDestination/Mask Protocol Pre Cost Nexthop Interface127.0.0.0/8 DIRECT 0 0 127.0.0.1 InLoopBack0127.0.0.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0192.168.10.0/30 O_ASE 150 1 192.168.12.1 Vlan-interface20192.168.12.0/30 DIRECT 0 0 192.168.12.2 Vlan-interface20192.168.12.2/32 DIRECT 0 0 127.0.0.1 InLoopBack0192.168.254.10/32 OSPF 10 13 192.168.12.1 Vlan-interface20192.168.255.10/32 DIRECT 0 0 127.0.0.1 InLoopBack0ping 192.168.254.10 PING 192.168.254.10:56 data bytes,press CTRL_C to break Reply from 192.168.254.10:bytes=56 Sequence=1 ttl=252 time=6 ms Reply from 192.168.254.10:bytes=56 Sequence=2 ttl=252 time=4 ms Reply from 192.168.254.10:bytes=56 Sequence=3 ttl=252 time=4 ms,BGP/MPLS VPN实现原理回顾BGP/MPLS VPN配置步骤与排错方法总结与提要,总结,MPLS VPN配置的5个步骤,1.配置IGP公网路由协议,2.配置MPLS,3.配置BGP,4.配置VPN，配置PE和CE之间的路由,5.将本端学到的私网路由引入到对应的BGP的VPN实例，将BGP学过来的远端私网路由引入给本端的CE侧。,总结,感谢各位！,

注意事项

本文（BGP MPLS VPN配置与排错——H3C.ppt）为本站会员（仙人指路1688）主动上传，三一办公仅提供信息存储空间，仅对用户上传内容的表现方式做保护处理，对上载内容本身不做任何修改或编辑。若此文所含内容侵犯了您的版权或隐私，请立即通知三一办公（点击联系客服），我们立即给予删除！

温馨提示：如果因为网速或其他原因下载失败请重新下载，重复下载不扣分。