650) this. width = 650; "title =" MPLS VPN.jpg "src =" http://www.bkjia.com/uploads/allimg/131227/160K94L6-0.jpg "alt =" 155156109.jpg"/>
Procedure
1. Configure VRF virtual route forwarding on the PE router). VRF separates the two instances of the router and cannot directly communicate with each other. 2. Configure the routing protocol on the PE and P routers. The internal routers of the Internet can communicate with each other. 3. Configure the BGP protocol between PE devices. The BGP protocol supports tag forwarding. 4. Configure the MPLS protocol on the PE and P routers and set the port to allow the MPLS Protocol 5. Configure VPN 6. Configure VRF route injection so that devices in the PE can learn the route protocol of the Peer device. |
PE1 Configuration
[PE1] displaycurrent-configuration [V200R003C00] # SysnamePE1 # Snmp-agentlocal-engineid800007DB03000000000000 Snmp-agent # ClocktimezoneIndianStandardTimeminus05: 13: 20 Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005 # Dropillegal-macalarm # Setcpu-usagethreshold80restore75 # Ipvpn-instancevpna Ipv4-family Route-distinguisher100: 1 Vpn-target100: 3export-extcommunity Vpn-target100: 3import-extcommunity # Ipvpn-instancevpnb Ipv4-family Route-distinguisher100: 2 Vpn-target100: 4export-extcommunity Vpn-target100: 4import-extcommunity # Mplslsr-id3.3.3.3 Mpls Lsp-triggerall # Mplsldp # # Aaa Authentication-schemedefault Authorization-schemedefault Accounting-schemedefault Domaindefault Domaindefault_admin Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $ Local-useradminservice-typehttp # FirewallzoneLocal Priority15 # InterfaceGigabitEthernet0/0/0 Ipaddress34.1.1.32.16255.255.0 Mpls Mplsldp # InterfaceGigabitEthernet0/0/1 Ipbindingvpn-instancevpnb Ipaddress23.1.1.32.16255.255.0 # InterfaceGigabitEthernet0/0/2 Ipbindingvpn-instancevpna Ipaddress13.1.1.32.16255.255.0 # InterfaceNULL0 # InterfaceLoopBack0 Ipaddress3.3.32.16255.255.0 # Bgp100 Peer5.5.5as-number100 Peer5.5.5connect-interfaceLoopBack0 # Ipv4-familyunicast Undosynchronization Peer5.5.5enable Peer5.5.5next-hop-local # Ipv4-familyvpnv4 Yyvpn-target Peer5.5.5enable # Ipv4-familyvpn-instancevpna Import-routerip1 # Ipv4-familyvpn-instancevpnb Import-routerip2 # Ospf1 Area0.0.0.0 Network3.3.00.0.0.255 Network34.1.1.00.0.0.255 # Rip1vpn-instancevpna Undosummary Version2 Network13.0.0.0 Import-routebgp # Rip2vpn-instancevpnb Undosummary Version2 Network23.0.0.0 Network2.0.0.0 Import-routebgp # User-interfacecon0 Authentication-modepassword User-interfacevty04 User-interfacevty1620 # Wlanac # Return |
PE2 Configuration
[PE2] displaycurrent-configuration [V200R003C00] # SysnamePE2 # Snmp-agentlocal-engineid800007DB03000000000000 Snmp-agent # ClocktimezoneIndianStandardTimeminus05: 13: 20 Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005 # Dropillegal-macalarm # Setcpu-usagethreshold80restore75 # Ipvpn-instancevpna Ipv4-family Route-distinguisher100: 1 Vpn-target100: 3export-extcommunity Vpn-target100: 3import-extcommunity # Ipvpn-instancevpnb Ipv4-family Route-distinguisher100: 2 Vpn-target100: 4export-extcommunity Vpn-target100: 4import-extcommunity # Mplslsr-id5.5.5.5 Mpls Lsp-triggerall # Mplsldp # # Aaa Authentication-schemedefault Authorization-schemedefault Accounting-schemedefault Domaindefault Domaindefault_admin Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $ Local-useradminservice-typehttp # FirewallzoneLocal Priority15 # InterfaceGigabitEthernet0/0/0 Ipaddress45.1.1.5255.255.255.0 Mpls Mplsldp # InterfaceGigabitEthernet0/0/1 Ipbindingvpn-instancevpna Ipaddress76.1.1.62.16255.255.0 # InterfaceGigabitEthernet0/0/2 Ipbindingvpn-instancevpnb Ipaddress86.1.1.62.16255.255.0 # InterfaceNULL0 # InterfaceLoopBack0 Ipaddress5.5.5255.255.255.0 # Bgp100 Peer3.3.3as-number100 Peer3.3.3connect-interfaceLoopBack0 # Ipv4-familyunicast Undosynchronization Peer3.3.3enable Peer3.3.3next-hop-local # Ipv4-familyvpnv4 Yyvpn-target Peer3.3.3enable # Ipv4-familyvpn-instancevpna Import-routerip1 # Ipv4-familyvpn-instancevpnb Import-routerip2 # Ospf1 Area0.0.0.0 Network5.5.5.00.0.0.255 Network45.1.1.00.0.0.255 # Rip1vpn-instancevpna Undosummary Version2 Network76.0.0.0 Import-routebgp # Rip2vpn-instancevpnb Undosummary Version2 Network86.0.0.0 Import-routebgp # User-interfacecon0 Authentication-modepassword User-interfacevty04 User-interfacevty1620 # Wlanac # Return |
P Configuration
[P] displaycurrent-configuration [V200R003C00] # SysnameP # Snmp-agentlocal-engineid800007DB03000000000000 Snmp-agent # ClocktimezoneIndianStandardTimeminus05: 13: 20 Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005 # Dropillegal-macalarm # Setcpu-usagethreshold80restore75 # Mplslsr-id4.4.4.4 Mpls Lsp-triggerall # Mplsldp # # Aaa Authentication-schemedefault Authorization-schemedefault Accounting-schemedefault Domaindefault Domaindefault_admin Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $ Local-useradminservice-typehttp # FirewallzoneLocal Priority15 # InterfaceGigabitEthernet0/0/0 Ipaddress34.1.1.20.5.255.255.0 Mpls Mplsldp # InterfaceGigabitEthernet0/0/1 Ipaddress45.1.1.20.5.255.255.0 Mpls Mplsldp # InterfaceGigabitEthernet0/0/2 # InterfaceNULL0 # InterfaceLoopBack0 Ipaddress4.4.20.5.255.255.0 # Ospf1 Area0.0.0.0 Network4.4.4.00.0.0.255 Network34.1.1.00.0.0.255 Network45.1.1.00.0.0.255 # User-interfacecon0 Authentication-modepassword User-interfacevty04 User-interfacevty1620 # Wlanac # Return |
SiteA1 Configuration
[SiteA-1] displaycurrent-configuration [V200R003C00] # SysnamesiteA-1 # Snmp-agentlocal-engineid800007DB03000000000000 Snmp-agent # ClocktimezoneIndianStandardTimeminus05: 13: 20 Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005 # Dropillegal-macalarm # Setcpu-usagethreshold80restore75 # Aaa Authentication-schemedefault Authorization-schemedefault Accounting-schemedefault Domaindefault Domaindefault_admin Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $ Local-useradminservice-typehttp # FirewallzoneLocal Priority15 # InterfaceGigabitEthernet0/0/0 Ipaddress13.1.1.1255.20.255.0 # InterfaceGigabitEthernet0/0/1 # InterfaceGigabitEthernet0/0/2 # InterfaceNULL0 # InterfaceLoopBack0 Ipaddress1.1.1.1255.20.255.0 # Rip1 Undosummary Version2 Network1.0.0.0 Network13.0.0.0 # User-interfacecon0 Authentication-modepassword User-interfacevty04 User-interfacevty1620 # Wlanac # Return |
SiteA2 Configuration
[SiteA-2] displaycurrent-configuration [V200R003C00] # SysnamesiteA-2 # Snmp-agentlocal-engineid800007DB03000000000000 Snmp-agent # ClocktimezoneIndianStandardTimeminus05: 13: 20 Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005 # Dropillegal-macalarm # Setcpu-usagethreshold80restore75 # Aaa Authentication-schemedefault Authorization-schemedefault Accounting-schemedefault Domaindefault Domaindefault_admin Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $ Local-useradminservice-typehttp # FirewallzoneLocal Priority15 # InterfaceGigabitEthernet0/0/0 Ipaddress76.1.1.7255.255.255.0 # InterfaceGigabitEthernet0/0/1 # InterfaceGigabitEthernet0/0/2 # InterfaceNULL0 # InterfaceLoopBack0 Ipaddress6.6.6.6255.255.255.0 # Rip1 Undosummary Version2 Network6.0.0.0 Network76.0.0.0 # User-interfacecon0 Authentication-modepassword User-interfacevty04 User-interfacevty1620 # Wlanac # Return |
SiteB1 Configuration
[SiteB-1] displaycurrent-configuration [V200R003C00] # SysnamesiteB-1 # Snmp-agentlocal-engineid800007DB03000000000000 Snmp-agent # ClocktimezoneIndianStandardTimeminus05: 13: 20 Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005 # Dropillegal-macalarm # Setcpu-usagethreshold80restore75 # Aaa Authentication-schemedefault Authorization-schemedefault Accounting-schemedefault Domaindefault Domaindefault_admin Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $ Local-useradminservice-typehttp # FirewallzoneLocal Priority15 # InterfaceGigabitEthernet0/0/0 Ipaddress23.1.1.2255.255.255.0 # InterfaceGigabitEthernet0/0/1 # InterfaceGigabitEthernet0/0/2 # InterfaceNULL0 # InterfaceLoopBack0 Ipaddress2.2.2.2255.255.255.0 # Rip1 Undosummary Version2 Network2.0.0.0 Network23.0.0.0 # User-interfacecon0 Authentication-modepassword User-interfacevty04 User-interfacevty1620 # Wlanac # Return |
SiteB2 Configuration
[SiteB-2] displaycurrent-configuration [V200R003C00] # SysnamesiteB-2 # Snmp-agentlocal-engineid800007DB03000000000000 Snmp-agent # ClocktimezoneIndianStandardTimeminus05: 13: 20 Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005 # Dropillegal-macalarm # Setcpu-usagethreshold80restore75 # Aaa Authentication-schemedefault Authorization-schemedefault Accounting-schemedefault Domaindefault Domaindefault_admin Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $ Local-useradminservice-typehttp # FirewallzoneLocal Priority15 # InterfaceGigabitEthernet0/0/0 Ipaddress86.1.1.8255.255.255.0 # InterfaceGigabitEthernet0/0/1 # InterfaceGigabitEthernet0/0/2 # InterfaceNULL0 # InterfaceLoopBack0 Ipaddress7.7.7255.255.255.0 # Rip1 Undosummary Version2 Network86.0.0.0 Network7.0.0.0 # User-interfacecon0 Authentication-modepassword User-interfacevty04 User-interfacevty1620 # Wlanac # Return |
This article is from the "ZKingHou" blog and will not be reproduced!