MPLS VPN 实验手册cisco.docx

资源描述

MPLS VPN 实验手册cisco.docx

《MPLS VPN 实验手册cisco.docx》由会员分享，可在线阅读，更多相关《MPLS VPN 实验手册cisco.docx（13页珍藏版）》请在冰点文库上搜索。

MPLS VPN 实验手册cisco.docx

MPLSVPN实验手册cisco

MPLSVPN实验

一、拓朴图

说明：

1、设备接互联地址：

如R1与R2间的互联地址为10.1.12.0/24；LOOKBACK接口地址为：

1.1.1.1/32；

2、CORE内运行OSPF（进行号100,area0）,激活MPLS；

3、PE上创建VRF（VPNA），PE与CE间通过OSPF互联（进程号：

1）；

4、R2与R4两台PE间建立MP-IBGP邻接关系，（BGPAS234）

5、完成PE-CE间的路由重发布；

二、配置信息：

R1：

（CE1）

R1#showrun

hostnameR1

ipcef

interfaceLoopback0

ipaddress1.1.1.1255.255.255.255

ipospfnetworkpoint-to-point

interfaceFastEthernet0/0

ipaddress10.1.12.1255.255.255.0

duplexauto

speedauto

mplsip

interfaceFastEthernet0/1

noipaddress

shutdown

duplexauto

speedauto

routerospf1

router-id1.1.1.1

log-adjacency-changes

network1.1.1.10.0.0.0area0

network10.1.12.10.0.0.0area0

end

R1#

R2：

（PE1）

R2#

R2#showrun

hostnameR2

ipcef

ipvrfvpna

rd1:

route-targetexport234:

route-targetimport234:

mplslabelrange200299

mplsldprouter-idLoopback0

interfaceLoopback0

ipaddress2.2.2.2255.255.255.255

interfaceFastEthernet0/0

ipvrfforwardingvpna

ipaddress10.1.12.2255.255.255.0

duplexauto

speedauto

interfaceFastEthernet0/1

ipaddress10.1.23.2255.255.255.0

duplexauto

speedauto

mplsip

routerospf1vrfvpna

log-adjacency-changes

redistributebgp234subnets

network10.1.12.20.0.0.0area0

routerospf100

router-id2.2.2.2

log-adjacency-changes

network2.2.2.20.0.0.0area0

network10.1.23.20.0.0.0area0

routerbgp234

bgprouter-id2.2.2.2

nobgpdefaultipv4-unicast

bgplog-neighbor-changes

neighbor4.4.4.4remote-as234

neighbor4.4.4.4update-sourceLoopback0

address-familyvpnv4

neighbor4.4.4.4activate

neighbor4.4.4.4send-communityextended

exit-address-family

address-familyipv4vrfvpna

redistributeospf1vrfvpnamatchinternalexternal1external2

noauto-summary

nosynchronization

exit-address-family

end

R2#

R3：

（P）

R3#

R3#showrun

hostnameR3

ipcef

mplslabelrange300399

mplsldprouter-idLoopback0

interfaceLoopback0

ipaddress3.3.3.3255.255.255.255

interfaceFastEthernet0/0

ipaddress10.1.23.3255.255.255.0

duplexauto

speedauto

mplsip

interfaceFastEthernet0/1

ipaddress10.1.34.3255.255.255.0

duplexauto

speedauto

mplsip

routerospf100

router-id3.3.3.3

log-adjacency-changes

network3.3.3.30.0.0.0area0

network10.1.23.30.0.0.0area0

network10.1.34.30.0.0.0area0

end

R3#

R4：

（PE2）

R4#

R4#showrun

Buildingconfiguration...

hostnameR4

ipcef

ipvrfvpna

rd1:

route-targetexport234:

route-targetimport234:

mplslabelrange400499

mplsldprouter-idLoopback0

interfaceLoopback0

ipaddress4.4.4.4255.255.255.255

interfaceFastEthernet0/0

ipaddress10.1.34.4255.255.255.0

duplexauto

speedauto

mplsip

interfaceFastEthernet0/1

ipvrfforwardingvpna

ipaddress10.1.45.4255.255.255.0

duplexauto

speedauto

routerospf1vrfvpna

log-adjacency-changes

redistributebgp234subnets

network10.1.45.40.0.0.0area0

routerospf100

router-id4.4.4.4

log-adjacency-changes

network4.4.4.40.0.0.0area0

network10.1.34.40.0.0.0area0

routerbgp234

bgprouter-id4.4.4.4

nobgpdefaultipv4-unicast

bgplog-neighbor-changes

neighbor2.2.2.2remote-as234

neighbor2.2.2.2update-sourceLoopback0

address-familyvpnv4

neighbor2.2.2.2activate

neighbor2.2.2.2send-communityextended

exit-address-family

address-familyipv4vrfvpna

redistributeospf1vrfvpnamatchinternalexternal1external2

noauto-summary

nosynchronization

exit-address-family

end

R5：

（CE2）

R5#

R5#showrun

Buildingconfiguration...

hostnameR5

ipcef

interfaceLoopback0

ipaddress5.5.5.5255.255.255.0

ipospfnetworkpoint-to-point

interfaceFastEthernet0/0

ipaddress10.1.45.5255.255.255.0

duplexauto

speedauto

interfaceFastEthernet0/1

noipaddress

shutdown

duplexauto

speedauto

routerospf1

router-id5.5.5.5

log-adjacency-changes

network5.5.5.50.0.0.0area0

network10.1.45.50.0.0.0area0

end

R5#

三、相关检查命令：

1、R2#shipospfneighbor//查PE的OSPF邻居

R2#shipospfneighbor//查PE的OSPF邻居

NeighborIDPriStateDeadTimeAddressInterface

3.3.3.31FULL/DR00:

00:

3010.1.23.3FastEthernet0/1

1.1.1.11FULL/BDR00:

00:

3010.1.12.1FastEthernet0/0

2、R2#shmplsldpneighbor//查PE上的MPLS邻居信息

R2#shmplsldpneighbor//查PE上的MPLS邻居信息

PeerLDPIdent:

3.3.3.3:

0;LocalLDPIdent2.2.2.2:

TCPconnection:

3.3.3.3.19951-2.2.2.2.646

State:

Oper;Msgssent/rcvd:

11/11;Downstream

Uptime:

00:

03:

LDPdiscoverysources:

FastEthernet0/1,SrcIPaddr:

10.1.23.3

AddressesboundtopeerLDPIdent:

10.1.23.33.3.3.310.1.34.3

3、R2#shmplsforwarding-table//查PE上的MPLS标签转发表

R2#shmplsforwarding-table//查PE上的MPLS标签转发表

LocalOutgoingPrefixBytestagOutgoingNextHop

tagtagorVCorTunnelIdswitchedinterface

200Poptag10.1.34.0/240Fa0/110.1.23.3

201Poptag3.3.3.3/320Fa0/110.1.23.3

2023004.4.4.4/320Fa0/110.1.23.3

203Untagged1.1.1.1/32[V]3138Fa0/010.1.12.1

204Aggregate10.1.12.0/24[V]0

R2#

4、R2#shipbgpvpnv4allsummary//查PE上的VPNV4邻居信息

R2#shipbgpvpnv4allsummary//查PE上的VPNV4邻居信息：

BGProuteridentifier2.2.2.2,localASnumber234

BGPtableversionis9,mainroutingtableversion9

4networkentriesusing548bytesofmemory

4pathentriesusing272bytesofmemory

5/4BGPpath/bestpathattributeentriesusing620bytesofmemory

2BGPextendedcommunityentriesusing80bytesofmemory

0BGProute-mapcacheentriesusing0bytesofmemory

0BGPfilter-listcacheentriesusing0bytesofmemory

BGPusing1520totalbytesofmemory

BGPactivity4/0prefixes,4/0paths,scaninterval15secs

NeighborVASMsgRcvdMsgSentTblVerInQOutQUp/DownState/PfxRcd

4.4.4.44234191990000:

12:

012

5、R2#shipbgpvpnv4all//查PE上的VPNV4路由信息，可判断路由重发布是否正确

R2#shipbgpvpnv4all//查PE上的VPNV4路由信息，可判断路由重发布是否正确

BGPtableversionis9,localrouterIDis2.2.2.2

Statuscodes:

ssuppressed,ddamped,hhistory,*valid,>best,i-internal,

rRIB-failure,SStale

Origincodes:

i-IGP,e-EGP,?

-incomplete

NetworkNextHopMetricLocPrfWeightPath

RouteDistinguisher:

1（defaultforvrfvpna）

*>1.1.1.1/3210.1.12.1232768?

*>i5.5.5.0/244.4.4.421000?

*>10.1.12.0/240.0.0.0032768?

*>i10.1.45.0/244.4.4.401000?

6、R2#shiprovrfvpna//查看VRF下的路由表信息

R2#shiprovrfvpna//查看VRF下的路由表信息

RoutingTable:

vpna

Codes:

C-connected,S-static,R-RIP,M-mobile,B-BGP

D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterarea

N1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2

E1-OSPFexternaltype1,E2-OSPFexternaltype2

i-IS-IS,su-IS-ISsummary,L1-IS-ISlevel-1,L2-IS-ISlevel-2

ia-IS-ISinterarea,*-candidatedefault,U-per-userstaticroute

o-ODR,P-periodicdownloadedstaticroute

Gatewayoflastresortisnotset

1.0.0.0/32issubnetted,1subnets

O1.1.1.1[110/2]via10.1.12.1,00:

17:

52,FastEthernet0/0

5.0.0.0/24issubnetted,1subnets

B5.5.5.0[200/2]via4.4.4.4,00:

17:

10.0.0.0/24issubnetted,2subnets

C10.1.12.0isdirectlyconnected,FastEthernet0/0

B10.1.45.0[200/0]via4.4.4.4,00:

17:

R2#

7、R2#shipcef//查看CEF表

R2#shipcef//查看CEF表

PrefixNextHopInterface

0.0.0.0/0dropNull0（defaultroutehandlerentry）

0.0.0.0/32receive

2.2.2.2/32receive

3.3.3.3/3210.1.23.3FastEthernet0/1

4.4.4.4/3210.1.23.3FastEthernet0/1

10.1.23.0/24attachedFastEthernet0/1

10.1.23.0/32receive

10.1.23.2/32receive

10.1.23.3/3210.1.23.3FastEthernet0/1

10.1.23.255/32receive

10.1.34.0/2410.1.23.3FastEthernet0/1

224.0.0.0/4drop

224.0.0.0/24receive

255.255.255.255/32receive

R2#

8、R1#ping5.5.5.5source1.1.1.1//在CE1上带源地址拼CE2

R1#ping5.5.5.5source1.1.1.1//在CE1上带源地址拼CE2

Typeescapesequencetoabort.

Sending5,100-byteICMPEchosto5.5.5.5,timeoutis2seconds:

Packetsentwithasourceaddressof1.1.1.1

9、R1#traceroute5.5.5.5source1.1.1.1//在CE1上带源地址路由跟踪CE2

R1#traceroute5.5.5.5source1.1.1.1//在CE1上带源地址路由跟踪CE2

Typeescapesequencetoabort.

Tracingtherouteto5.5.5.5

110.1.12.2128msec188msec196msec

210.1.23.3[MPLS:

Labels300/403Exp0]664msec600msec616msec

310.1.45.4[MPLS:

Label403Exp0]372msec408msec560msec

410.1.45.5624msec764msec576msec

R1#

10、R1#showipospfneighbor//查看CE1上的OSPF邻居表

R1#showipospfneighbor//查看CE1上的OSPF邻居表

NeighborIDPriStateDeadTimeAddressInterface

10.1.12.21FULL/DR00:

00:

3810.1.12.2FastEthernet0/0

R1#

11、R1#shipro//查CEF上的路由表

R1#shipro//查CEF上的路由表

Codes:

C-connected,S-static,R-RIP,M-mobile,B-BGP

D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterarea

N1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2

E1-OSPFexternaltype1,E2-OSPFexternaltype2

i-IS-IS,su-IS-ISsummary,L1-IS-ISlevel-1,L2-IS-ISlevel-2

ia-IS-ISinterarea,*-candidatedefault,U-per-userstaticroute

o-ODR,P-periodicdownloadedstaticroute

Gatewayoflastresortisnotset

1.0.0.0/32issubnetted,1subnets

C1.1.1.1isdirectlyconnected,Loopback0

5.0.0.0/24issubnetted,1subnets

OIA5.5.5.0[110/3]via10.1.12.2,00:

02:

00,FastEthernet0/0

10.0.0.0/24issubnetted,2subnets

C10.1.12.0isdirectlyconnected,FastEthernet0/0

OIA10.1.45.0[110/2]via10.1.12.2,00:

02:

00,FastEthernet0/0

R1#

展开阅读全文