[Review]OSPF PE-CE Routing

关于OSPF multi-instance  在工程上应用比较广泛，CE间发布路由的平滑过渡， 防止环路等等都有相应的措施可以实现。

大概就这么几点内容

1. domain-ID的使用： PE端配置了相同的domain ID internal lsa 和 External LSA 都能平滑过渡

2. domain-ID 或 默认 CE-PE端的 process ID 不同 发布给对端的 LSA都按照五类来处理

3. DN bit 的设置处理 type 3 LSA 环路问题

4. Route tag 处理 type 5 LSA 环路

5. sham link 处理 CE 间的 back door 链路 问题

 

CE1 配置

R1#show run
Building configuration...

Current configuration : 941 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
!
no ip ips deny-action ips-interface
!
!
interface Loopback0
 ip address 10.10.10.10 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex half
!
interface FastEthernet1/0
 ip address 1.1.1.1 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet1/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
router ospf 10
 log-adjacency-changes
 network 0.0.0.0 255.255.255.255 area 0
!
ip classless
no ip http server
no ip http secure-server!
!
!
control-plane!
!
!
gatekeeper
 shutdown
!
!
line con 0
 timeout login response 300
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
!
!
end

PE1 配置

R2#show run
Building configuration...

Current configuration : 1740 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
!
ip vrf vpn1
 rd 1:100
 route-target export 1:100
 route-target import 1:100
!
no ip ips deny-action ips-interface
!
mpls label protocol ldp
mpls ldp router-id Loopback0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 20.20.20.20 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex half
!
interface FastEthernet1/0
 ip vrf forwarding vpn1
 ip address 1.1.1.2 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet1/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface POS2/0
 ip address 2.1.1.1 255.255.255.0
 mpls ip
!
router ospf 101 vrf vpn1
 router-id 20.20.20.20
 log-adjacency-changes
 redistribute bgp 1 subnets
 network 0.0.0.0 255.255.255.255 area 0
!
router ospf 10
 log-adjacency-changes
 network 0.0.0.0 255.255.255.255 area 0
!
router bgp 1
 no synchronization
 bgp log-neighbor-changes
 neighbor 50.50.50.50 remote-as 1
 neighbor 50.50.50.50 update-source Loopback0
 no auto-summary
 !
 address-family vpnv4
 neighbor 50.50.50.50 activate
 neighbor 50.50.50.50 send-community extended
 exit-address-family
 !
 address-family ipv4 vrf vpn1
 redistribute ospf 101 vrf vpn1 match internal external 1 external 2
 no auto-summary
 no synchronization
 exit-address-family
!
ip classless
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 timeout login response 300
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
!
!
end

P1配置 

R3>en
R3#show run
Building configuration...

Current configuration : 953 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
!
no ip ips deny-action ips-interface
!
mpls label protocol ldp
mpls ldp router-id Loopback0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 30.30.30.30 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex half
!
interface POS1/0
 ip address 2.1.1.2 255.255.255.0
 mpls ip
!
interface POS2/0
 ip address 3.1.1.1 255.255.255.0
 mpls ip
!
router ospf 10
 log-adjacency-changes
 network 0.0.0.0 255.255.255.255 area 0
!
ip classless
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 timeout login response 300
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
!
!
end

 

P2 配置

R4#show run
Building configuration...

Current configuration : 953 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
!
no ip ips deny-action ips-interface
!
mpls label protocol ldp
mpls ldp router-id Loopback0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 40.40.40.40 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex half
!
interface POS1/0
 ip address 3.1.1.2 255.255.255.0
 mpls ip
!
interface POS2/0
 ip address 4.1.1.1 255.255.255.0
 mpls ip
!
router ospf 10
 log-adjacency-changes
 network 0.0.0.0 255.255.255.255 area 0
!
ip classless
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 timeout login response 300
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
!
!
end

 

 

PE2 配置

R5#show run
Building configuration...

Current configuration : 1740 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
!
ip vrf vpn1
 rd 1:100
 route-target export 1:100
 route-target import 1:100
!
no ip ips deny-action ips-interface
!
mpls label protocol ldp
mpls ldp router-id Loopback0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 50.50.50.50 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex half
!
interface POS1/0
 ip address 4.1.1.2 255.255.255.0
 mpls ip
!
interface FastEthernet2/0
 ip vrf forwarding vpn1
 ip address 5.1.1.1 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet2/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
router ospf 101 vrf vpn1
 router-id 50.50.50.50
 log-adjacency-changes
 redistribute bgp 1 subnets
 network 0.0.0.0 255.255.255.255 area 0
!
router ospf 10
 log-adjacency-changes
 network 0.0.0.0 255.255.255.255 area 0
!
router bgp 1
 no synchronization
 bgp log-neighbor-changes
 neighbor 20.20.20.20 remote-as 1
 neighbor 20.20.20.20 update-source Loopback0
 no auto-summary
 !
 address-family vpnv4
 neighbor 20.20.20.20 activate
 neighbor 20.20.20.20 send-community extended
 exit-address-family
 !
 address-family ipv4 vrf vpn1
 redistribute ospf 101 vrf vpn1 match internal external 1 external 2
 no auto-summary
 no synchronization
 exit-address-family
!
ip classless
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 timeout login response 300
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
!
!
end

 

 

CE2 配置

R6#show run
Building configuration...

Current configuration : 940 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
!
no ip ips deny-action ips-interface
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 60.60.60.60 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex half
!
interface FastEthernet1/0
 ip address 5.1.1.2 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet1/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
router ospf 1
 log-adjacency-changes
 network 0.0.0.0 255.255.255.255 area 0
!
ip classless
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 timeout login response 300
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
!
!
end