Huawei mpls vpv Configuration

Source: Internet
Author: User

650) this. width = 650; "title =" MPLS VPN.jpg "src =" http://www.bkjia.com/uploads/allimg/131227/160K94L6-0.jpg "alt =" 155156109.jpg"/>

Procedure

1. Configure VRF virtual route forwarding on the PE router). VRF separates the two instances of the router and cannot directly communicate with each other.

2. Configure the routing protocol on the PE and P routers. The internal routers of the Internet can communicate with each other.

3. Configure the BGP protocol between PE devices. The BGP protocol supports tag forwarding.

4. Configure the MPLS protocol on the PE and P routers and set the port to allow the MPLS Protocol

5. Configure VPN

6. Configure VRF route injection so that devices in the PE can learn the route protocol of the Peer device.

PE1 Configuration

[PE1] displaycurrent-configuration
[V200R003C00]
#
SysnamePE1
#
Snmp-agentlocal-engineid800007DB03000000000000
Snmp-agent
#
ClocktimezoneIndianStandardTimeminus05: 13: 20
Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005
#
Dropillegal-macalarm
#
Setcpu-usagethreshold80restore75
#
Ipvpn-instancevpna
Ipv4-family
Route-distinguisher100: 1
Vpn-target100: 3export-extcommunity
Vpn-target100: 3import-extcommunity
#
Ipvpn-instancevpnb
Ipv4-family
Route-distinguisher100: 2
Vpn-target100: 4export-extcommunity
Vpn-target100: 4import-extcommunity
#
Mplslsr-id3.3.3.3
Mpls
Lsp-triggerall
#
Mplsldp
#
#
Aaa
Authentication-schemedefault
Authorization-schemedefault
Accounting-schemedefault
Domaindefault
Domaindefault_admin
Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $
Local-useradminservice-typehttp
#
FirewallzoneLocal
Priority15
#
InterfaceGigabitEthernet0/0/0
Ipaddress34.1.1.32.16255.255.0
Mpls
Mplsldp
#
InterfaceGigabitEthernet0/0/1
Ipbindingvpn-instancevpnb
Ipaddress23.1.1.32.16255.255.0
#
InterfaceGigabitEthernet0/0/2
Ipbindingvpn-instancevpna
Ipaddress13.1.1.32.16255.255.0
#
InterfaceNULL0
#
InterfaceLoopBack0
Ipaddress3.3.32.16255.255.0
#
Bgp100
Peer5.5.5as-number100
Peer5.5.5connect-interfaceLoopBack0
#
Ipv4-familyunicast
Undosynchronization
Peer5.5.5enable
Peer5.5.5next-hop-local
#
Ipv4-familyvpnv4
Yyvpn-target
Peer5.5.5enable
#
Ipv4-familyvpn-instancevpna
Import-routerip1
#
Ipv4-familyvpn-instancevpnb
Import-routerip2
#
Ospf1
Area0.0.0.0
Network3.3.00.0.0.255
Network34.1.1.00.0.0.255
#
Rip1vpn-instancevpna
Undosummary
Version2
Network13.0.0.0
Import-routebgp
#
Rip2vpn-instancevpnb
Undosummary
Version2
Network23.0.0.0
Network2.0.0.0
Import-routebgp
#
User-interfacecon0
Authentication-modepassword
User-interfacevty04
User-interfacevty1620
#
Wlanac
#
Return

PE2 Configuration

[PE2] displaycurrent-configuration
[V200R003C00]
#
SysnamePE2
#
Snmp-agentlocal-engineid800007DB03000000000000
Snmp-agent
#
ClocktimezoneIndianStandardTimeminus05: 13: 20
Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005
#
Dropillegal-macalarm
#
Setcpu-usagethreshold80restore75
#
Ipvpn-instancevpna
Ipv4-family
Route-distinguisher100: 1
Vpn-target100: 3export-extcommunity
Vpn-target100: 3import-extcommunity
#
Ipvpn-instancevpnb
Ipv4-family
Route-distinguisher100: 2
Vpn-target100: 4export-extcommunity
Vpn-target100: 4import-extcommunity
#
Mplslsr-id5.5.5.5
Mpls
Lsp-triggerall
#
Mplsldp
#
#
Aaa
Authentication-schemedefault
Authorization-schemedefault
Accounting-schemedefault
Domaindefault
Domaindefault_admin
Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $
Local-useradminservice-typehttp
#
FirewallzoneLocal
Priority15
#
InterfaceGigabitEthernet0/0/0
Ipaddress45.1.1.5255.255.255.0
Mpls
Mplsldp
#
InterfaceGigabitEthernet0/0/1
Ipbindingvpn-instancevpna
Ipaddress76.1.1.62.16255.255.0
#
InterfaceGigabitEthernet0/0/2
Ipbindingvpn-instancevpnb
Ipaddress86.1.1.62.16255.255.0
#
InterfaceNULL0
#
InterfaceLoopBack0
Ipaddress5.5.5255.255.255.0
#
Bgp100
Peer3.3.3as-number100
Peer3.3.3connect-interfaceLoopBack0
#
Ipv4-familyunicast
Undosynchronization
Peer3.3.3enable
Peer3.3.3next-hop-local
#
Ipv4-familyvpnv4
Yyvpn-target
Peer3.3.3enable
#
Ipv4-familyvpn-instancevpna
Import-routerip1
#
Ipv4-familyvpn-instancevpnb
Import-routerip2
#
Ospf1
Area0.0.0.0
Network5.5.5.00.0.0.255
Network45.1.1.00.0.0.255
#
Rip1vpn-instancevpna
Undosummary
Version2
Network76.0.0.0
Import-routebgp
#
Rip2vpn-instancevpnb
Undosummary
Version2
Network86.0.0.0
Import-routebgp
#
User-interfacecon0
Authentication-modepassword
User-interfacevty04
User-interfacevty1620
#
Wlanac
#
Return

P Configuration

[P] displaycurrent-configuration
[V200R003C00]
#
SysnameP
#
Snmp-agentlocal-engineid800007DB03000000000000
Snmp-agent
#
ClocktimezoneIndianStandardTimeminus05: 13: 20
Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005
#
Dropillegal-macalarm
#
Setcpu-usagethreshold80restore75
#
Mplslsr-id4.4.4.4
Mpls
Lsp-triggerall
#
Mplsldp
#
#
Aaa
Authentication-schemedefault
Authorization-schemedefault
Accounting-schemedefault
Domaindefault
Domaindefault_admin
Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $
Local-useradminservice-typehttp
#
FirewallzoneLocal
Priority15
#
InterfaceGigabitEthernet0/0/0
Ipaddress34.1.1.20.5.255.255.0
Mpls
Mplsldp
#
InterfaceGigabitEthernet0/0/1
Ipaddress45.1.1.20.5.255.255.0
Mpls
Mplsldp
#
InterfaceGigabitEthernet0/0/2
#
InterfaceNULL0
#
InterfaceLoopBack0
Ipaddress4.4.20.5.255.255.0
#
Ospf1
Area0.0.0.0
Network4.4.4.00.0.0.255
Network34.1.1.00.0.0.255
Network45.1.1.00.0.0.255
#
User-interfacecon0
Authentication-modepassword
User-interfacevty04
User-interfacevty1620
#
Wlanac
#
Return

SiteA1 Configuration

[SiteA-1] displaycurrent-configuration
[V200R003C00]
#
SysnamesiteA-1
#
Snmp-agentlocal-engineid800007DB03000000000000
Snmp-agent
#
ClocktimezoneIndianStandardTimeminus05: 13: 20
Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005
#
Dropillegal-macalarm
#
Setcpu-usagethreshold80restore75
#
Aaa
Authentication-schemedefault
Authorization-schemedefault
Accounting-schemedefault
Domaindefault
Domaindefault_admin
Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $
Local-useradminservice-typehttp
#
FirewallzoneLocal
Priority15
#
InterfaceGigabitEthernet0/0/0
Ipaddress13.1.1.1255.20.255.0
#
InterfaceGigabitEthernet0/0/1
#
InterfaceGigabitEthernet0/0/2
#
InterfaceNULL0
#
InterfaceLoopBack0
Ipaddress1.1.1.1255.20.255.0
#
Rip1
Undosummary
Version2
Network1.0.0.0
Network13.0.0.0
#
User-interfacecon0
Authentication-modepassword
User-interfacevty04
User-interfacevty1620
#
Wlanac
#
Return

SiteA2 Configuration

[SiteA-2] displaycurrent-configuration
[V200R003C00]
#
SysnamesiteA-2
#
Snmp-agentlocal-engineid800007DB03000000000000
Snmp-agent
#
ClocktimezoneIndianStandardTimeminus05: 13: 20
Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005
#
Dropillegal-macalarm
#
Setcpu-usagethreshold80restore75
#
Aaa
Authentication-schemedefault
Authorization-schemedefault
Accounting-schemedefault
Domaindefault
Domaindefault_admin
Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $
Local-useradminservice-typehttp
#
FirewallzoneLocal
Priority15
#
InterfaceGigabitEthernet0/0/0
Ipaddress76.1.1.7255.255.255.0
#
InterfaceGigabitEthernet0/0/1
#
InterfaceGigabitEthernet0/0/2
#
InterfaceNULL0
#
InterfaceLoopBack0
Ipaddress6.6.6.6255.255.255.0
#
Rip1
Undosummary
Version2
Network6.0.0.0
Network76.0.0.0
#
User-interfacecon0
Authentication-modepassword
User-interfacevty04
User-interfacevty1620
#
Wlanac
#
Return

SiteB1 Configuration

[SiteB-1] displaycurrent-configuration
[V200R003C00]
#
SysnamesiteB-1
#
Snmp-agentlocal-engineid800007DB03000000000000
Snmp-agent
#
ClocktimezoneIndianStandardTimeminus05: 13: 20
Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005
#
Dropillegal-macalarm
#
Setcpu-usagethreshold80restore75
#
Aaa
Authentication-schemedefault
Authorization-schemedefault
Accounting-schemedefault
Domaindefault
Domaindefault_admin
Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $
Local-useradminservice-typehttp
#
FirewallzoneLocal
Priority15
#
InterfaceGigabitEthernet0/0/0
Ipaddress23.1.1.2255.255.255.0
#
InterfaceGigabitEthernet0/0/1
#
InterfaceGigabitEthernet0/0/2
#
InterfaceNULL0
#
InterfaceLoopBack0
Ipaddress2.2.2.2255.255.255.0
#
Rip1
Undosummary
Version2
Network2.0.0.0
Network23.0.0.0
#
User-interfacecon0
Authentication-modepassword
User-interfacevty04
User-interfacevty1620
#
Wlanac
#
Return

SiteB2 Configuration

[SiteB-2] displaycurrent-configuration
[V200R003C00]
#
SysnamesiteB-2
#
Snmp-agentlocal-engineid800007DB03000000000000
Snmp-agent
#
ClocktimezoneIndianStandardTimeminus05: 13: 20
Clockdaylight-saving-timeDayLightSavingTimerepeating12: 329-11:3211-2300: 0020052005
#
Dropillegal-macalarm
#
Setcpu-usagethreshold80restore75
#
Aaa
Authentication-schemedefault
Authorization-schemedefault
Accounting-schemedefault
Domaindefault
Domaindefault_admin
Local-useradminpasswordcipher % $ K8m. Nt84DZ} e #<0 '8bme3uw} % $
Local-useradminservice-typehttp
#
FirewallzoneLocal
Priority15
#
InterfaceGigabitEthernet0/0/0
Ipaddress86.1.1.8255.255.255.0
#
InterfaceGigabitEthernet0/0/1
#
InterfaceGigabitEthernet0/0/2
#
InterfaceNULL0
#
InterfaceLoopBack0
Ipaddress7.7.7255.255.255.0
#
Rip1
Undosummary
Version2
Network86.0.0.0
Network7.0.0.0
#
User-interfacecon0
Authentication-modepassword
User-interfacevty04
User-interfacevty1620
#
Wlanac
#
Return

This article is from the "ZKingHou" blog and will not be reproduced!

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.