CISCO 路由器MPLS VPN配置实例.docx

CISCO 路由器MPLS VPN配置实例.docx

《CISCO 路由器MPLS VPN配置实例.docx》由会员分享，可在线阅读，更多相关《CISCO 路由器MPLS VPN配置实例.docx（19页珍藏版）》请在冰点文库上搜索。

CISCO路由器MPLSVPN配置实例

CISCO路由器MPLSVPN配置实例（2009-07-2323:

20:

33）

标签：

it分类：

IT

一、网络环境...3

二、网络描述...3

三、网络拓扑图...4

四、P路由器配置...4

五、PE1路由器配置...6

六、PE2路由器配置...9

七、CE1路由器配置...11

八、CE2路由器配置...13

九、业务测试...14

一、网络环境

由5台CISCO7204组成的网络,一台为P路由器,两台PE路由器,两台CE路由器;

二、网络描述

在P和两台PE路由器这间通过OSPF动态路由协议完成MPLS网络的建立，两台PE路由器这间启用BGP路由协议，在PE路由器上向所属的CE路由器指VPN路由，在CE路由器中向PE路由器配置静态路由。

配置思路：

1、在P和两台PE路由器这间通过OSPF动态路由协议，在P和PE路由器两两互连的端口上启用MPLS，两台PE之间的路为备份路由，这属公网路由。

2、两台PE路由器这间启用BGP路由协议，这使得属于VPN的IP地址能在两个网络（两台CE所属的网络）互相发布，这属私网（VPN）路由。

3、在PE路由器上向所属的CE路由器指VPN路由，这打通了两个网络（两台CE所属的网络）之间的路由。

三、网络拓扑图

四、P路由器配置

p#SHOWRUN

Buildingconfiguration...

Currentconfiguration:

1172bytes

!

version12.3

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnamep

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

ipsubnet-zero

!

!

!

ipcef

ipauditpomax-events100

!

!

interfaceLoopback0

ipaddress202.98.4.3255.255.255.255

!

interfaceFastEthernet0/0

descriptionto_r2

ipaddress10.1.1.10255.255.255.252

ipospfcost20

duplexfull

tag-switchingmtu1508

tag-switchingip

!

interfaceFastEthernet1/0

descriptionto_r3

ipaddress10.1.1.6255.255.255.252

ipospfcost20

duplexfull

tag-switchingmtu1508

tag-switchingip

!

interfaceFastEthernet2/0

noipaddress

shutdown

duplexhalf

!

interfaceFastEthernet3/0

noipaddress

shutdown

duplexhalf

!

routerospf100

log-adjacency-changes

redistributeconnectedsubnets

redistributestaticsubnets

network10.1.1.60.0.0.0area0

network10.1.1.100.0.0.0area0

!

ipclassless

noiphttpserver

noiphttpsecure-server

!

gatekeeper

shutdown

!

!

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

login

!

!

end

p#

五、PE1路由器配置

pe1#showrun

Buildingconfiguration...

Currentconfiguration:

1813bytes

!

version12.3

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnamepe1

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

ipsubnet-zero

!

!

!

ipvrfvpna

rd1:

100

route-targetexport200:

1

route-targetimport200:

1

!

ipcef

ipauditpomax-events100

!

!

interfaceLoopback0

ipaddress202.98.4.1255.255.255.255

!

interfaceFastEthernet0/0

descriptionto_r5

ipvrfforwardingvpna

ipaddress172.16.1.1255.255.255.252

duplexfull

tag-switchingip

!

interfaceFastEthernet1/0

descriptionto_r1

ipaddress10.1.1.5255.255.255.252

ipospfcost20

duplexfull

tag-switchingmtu1508

tag-switchingip

!

interfaceFastEthernet2/0

ipaddress10.1.1.1255.255.255.252

ipospfcost100

duplexfull

tag-switchingmtu1508

tag-switchingip

!

interfaceFastEthernet3/0

noipaddress

shutdown

duplexhalf

!

routerospf100

log-adjacency-changes

redistributeconnectedmetric-type1subnets

network10.1.1.00.0.0.255area0

network202.98.4.00.0.0.255area0

!

routerbgp100

nobgpdefaultipv4-unicast

bgplog-neighbor-changes

neighbor202.98.4.2remote-as100

neighbor202.98.4.2update-sourceLoopback0

neighbor202.98.4.2version4

!

address-familyvpnv4

neighbor202.98.4.2activate

neighbor202.98.4.2send-communityextended

exit-address-family

!

address-familyipv4vrfvpna

redistributeconnected

redistributestatic

noauto-summary

nosynchronization

exit-address-family

!

ipclassless

iproutevrfvpna192.168.3.0255.255.255.0172.16.1.2

noiphttpserver

noiphttpsecure-server

!

ipospfname-lookup

!

!

gatekeeper

shutdown

!

!

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

login

!

!

end

pe1#

六、PE2路由器配置

pe2#showrun

Buildingconfiguration...

Currentconfiguration:

1725bytes

!

version12.3

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnamepe2

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

ipsubnet-zero

!

!

!

ipvrfvpna

rd1:

100

route-targetexport200:

1

route-targetimport200:

1

!

ipcef

ipauditpomax-events100

!

!

interfaceLoopback0

ipaddress202.98.4.2255.255.255.255

!

interfaceFastEthernet0/0

descriptionto_r1

ipaddress10.1.1.9255.255.255.252

ipospfcost20

duplexfull

tag-switchingip

!

interfaceFastEthernet1/0

ipvrfforwardingvpna

ipaddress172.16.2.1255.255.255.0

duplexfull

tag-switchingip

!

interfaceFastEthernet2/0

ipaddress10.1.1.2255.255.255.252

ipospfcost100

duplexfull

tag-switchingip

!

interfaceFastEthernet3/0

noipaddress

shutdown

duplexhalf

!

routerospf100

log-adjacency-changes

redistributeconnectedmetric1subnets

redistributestaticmetric-type1subnets

network10.1.1.00.0.0.255area0

!

routerbgp100

nobgpdefaultipv4-unicast

bgplog-neighbor-changes

neighbor202.98.4.1remote-as100

neighbor202.98.4.1update-sourceLoopback0

neighbor202.98.4.1version4

!

address-familyvpnv4

neighbor202.98.4.1activate

neighbor202.98.4.1send-communityextended

exit-address-family

!

address-familyipv4vrfvpna

redistributeconnected

redistributestatic

noauto-summary

nosynchronization

exit-address-family

!

ipclassless

iproutevrfvpna192.168.4.0255.255.255.0172.16.2.2

noiphttpserver

noiphttpsecure-server

!

gatekeeper

shutdown

!

!

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

login

!

!

End

七、CE1路由器配置

ce1#showrun

Buildingconfiguration...

Currentconfiguration:

892bytes

!

version12.3

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnamece1

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

ipsubnet-zero

!

!

!

ipcef

ipauditpomax-events100

!

!

interfaceLoopback0

ipaddress192.168.3.1255.255.255.0

!

interfaceFastEthernet0/0

descriptionto_r3

ipaddress172.16.1.2255.255.255.252

duplexfull

!

interfaceFastEthernet1/0

noipaddress

shutdown

duplexhalf

!

interfaceFastEthernet2/0

noipaddress

shutdown

duplexhalf

!

interfaceFastEthernet3/0

noipaddress

shutdown

duplexhalf

!

ipclassless

iproute0.0.0.00.0.0.0172.16.1.1

noiphttpserver

noiphttpsecure-server

!

!

!

gatekeeper

shutdown

!

!

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

login

!

!

end

八、CE2路由器配置

Ce2#showrun

Buildingconfiguration...

*Sep313:

53:

56.167:

%SYS-5-CONFIG_I:

Configuredfromconsolebyconsole

Currentconfiguration:

888bytes

!

version12.3

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnamece2

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

ipsubnet-zero

!

!

!

ipcef

ipauditpomax-events100

!

!

interfaceLoopback0

ipaddress10.10.13.1255.255.255.0

!

interfaceFastEthernet0/0

noipaddress

shutdown

duplexhalf

!

interfaceFastEthernet1/0

descriptionto_r2

ipaddress10.10.12.2255.255.255.0

duplexfull

!

interfaceFastEthernet2/0

noipaddress

shutdown

duplexhalf

!

interfaceFastEthernet3/0

noipaddress

shutdown

duplexhalf

!

ipclassless

iproute0.0.0.00.0.0.0172.16.2.1

noiphttpserver

noiphttpsecure-server

!

!

gatekeeper

shutdown

!

!

linecon0

exec-timeout00

loggingsynchronous

stopbits1

lineaux0

stopbits1

linevty04

login

!

!

end

九、业务测试

ce1#ping172.16.1.1

Typeescapesequencetoabort.

Sending5,100-byteICMPEchosto172.16.1.1,timeoutis2seconds:

!

!

!

!

!

Successrateis100percent（5/5）,round-tripmin/avg/max=96/190/324ms

ce1#

ce2#ping192.168.3.1

Typeescapesequencetoabort.

Sending5,100-byteICMPEchosto192.168.3.1,timeoutis2seconds:

!

!

!

!

!

Successrateis100percent（5/5）,round-tripmin/avg/max=336/468/588ms

ce2#