EVPN SRV6 TE-Policy

以下效果并未完美达成（由于重启后配置部分丢失无法纠正所以效果搁置）不过配置思路可以借鉴。

配置思路：

①基础环境配置

(1)IP地址配置

(2)配置IGP（ISIS）

(3)创建vpn实例，建立EBGP的vpn实例邻居

(4)PE之间创建EVPN邻居关系

PS：BGP（涉及ipv6）一定要配置RID

②配置Locator，设置源，配置SID，配置opcode

（每台设备均配置opcode）

③在IGP中发布，EVPN通告SRV6类型，vpn实例中通告Locator（即打上SRH）、设置TE

④设置路径列表

⑤配置color路由图（打上color），在EVPN邻居中调用，且vpn实例邻居中通告EVPN

⑥最后及拿过CE的流量引到tunnel隧道

配置：

===================①基础环境配置================

(1)IP地址配置

[NE6]int ethe 3/0/0

[NE6-Ethernet3/0/0]ipv en

[NE6-Ethernet3/0/0]ipv add 56::6 64

[NE6-Ethernet3/0/0]int ethe 3/0/2

[NE6-Ethernet3/0/2]ipv en

[NE6-Ethernet3/0/2]ipv add 26::6 64

[NE6-Ethernet3/0/2]int ethe3/0/1

[NE6-Ethernet3/0/1]ipv en

[NE6-Ethernet3/0/1]ipv add 46::6 64

[NE6-Ethernet3/0/1]int lo1

[NE6-LoopBack1]ipv en

[NE6-LoopBack1]ipv add 6000::1 64

(2)配置IGP（ISIS）

[NE1]isis

[NE1-isis-1]cost-style wide

[NE1-isis-1]network-entity 49.0001.0000.0000.0001.00

[NE1-isis-1]ipv6 enable topology ipv6

[NE1]int ethe 3/0/1

[NE1-Ethernet3/0/1]isis ipv6 enable

[NE1]int ethe3/0/2

[NE1-Ethernet3/0/2]isis ipv6 enable

[NE1-Ethernet3/0/2]int lo1

[NE1-LoopBack1]isis ipv6 enable

(3)创建vpn实例，建立EBGP的vpn实例邻居

[NE1]ip vpn-instance A

[NE1-vpn-instance-A]route-distinguisher 1:1

[NE1-vpn-instance-A-af-ipv4]vpn-target 1:1

[NE1-vpn-instance-A-af-ipv4]int ethe3/0/0

[NE1-Ethernet3/0/0]ip binding vpn-instance A

[NE1]bgp 100

[NE1-bgp]ipv4-family vpn-instance A

[NE1-bgp-A]peer 1.1.11.1 as-number 1

[AR1]bgp 1

[AR1-bgp]peer 1.1.11.11 as-number 100

[AR1-bgp]network 1.1.1.1 32

(4)PE之间创建EVPN邻居关系

PS：BGP（涉及ipv6）一定要配置RID

[NE1]bgp 100

[NE1-bgp]router-id 1.1.1.1-------涉及ipv6一定要配置RID

[NE1-bgp]peer 4000::1 as-number 100

[NE1-bgp]peer 4000::1 connect-interface lo1

[NE1-bgp]l2vpn-family evpn --------------EVPN邻居关系

[NE1-bgp-af-evpn]peer 4000::1 enable

Warning: This operation will reset the peer session. Continue? [Y/N]:y

======②配置Locator，设置源，配置SID，配置opcode==========

（每台设备均配置opcode）

[NE1]segment-routing ipv6

[NE1-segment-routing-ipv6]encapsulation source-address 1000::1

[NE1-segment-routing-ipv6]locator NE1 ipv6-prefix 1111:1:: 64 static 32

[NE1-segment-routing-ipv6-locator]opcode ::1 end psp

[NE1-segment-routing-ipv6-locator]opcode ::10 end-x interface ethe3/0/1 nexthop 12::2 psp                              

[NE1-segment-routing-ipv6-locator]opcode ::20 end-x interface ethe3/0/2 nexthop 15::5 psp

[NE1-segment-routing-ipv6-locator]opcode ::100 end-op

（每台ISP的设备都需要配置此，end-x写的是相邻的路由器的吓一跳）

[NE2]segment-routing ipv6

[NE2-segment-routing-ipv6]locator NE2 ipv6-prefix 2222:2:: 64 static 32

[NE2-segment-routing-ipv6-locator]opcode ::1 end psp

[NE2-segment-routing-ipv6-locator]opcode ::10 end-x interface ethe3/0/1 nexthop 23::3 psp

[NE2-segment-routing-ipv6-locator]opcode ::20 end-x interface ethe 3/0/2 nexthop 26::6 psp

[NE2-segment-routing-ipv6-locator]opcode ::30 end-x interface ethe 3/0/0 nexthop 12::1 psp--opcode后面的数字一般以接口的数字来

[NE2-segment-routing-ipv6-locator]opcode ::100 end-op

==================③在IGP中发布，EVPN通告SRV6类型，vpn实例中通告Locator（即打上SRH）、设置TE=====================

[NE1]isis

[NE1-isis-1]segment-routing ipv6 locator NE1-------------每台ISP设备都需要配置

[NE1]bgp 100

[NE1-bgp]l2vpn-family evpn

[NE1-bgp-af-evpn]peer 4000::1 advertise encap-type srv6

[NE1-bgp]ipv4-family vpn-instance A

[NE1-bgp-A]segment-routing ipv6 locator NE1 evpn

[NE1-bgp-A]segment-routing ipv6 traffic-engineer best-effort evpn

=====================④设置路径列表===============

[NE1-bgp]segment-routing ipv6

[NE1-segment-routing-ipv6]segment-list list264

[NE1-segment-routing-ipv6-segment-list-list264]index 10 sid ipv6 2222:2::20

[NE1-segment-routing-ipv6-segment-list-list264]index 20 sid ipv6 6666:6::60

[NE1-segment-routing-ipv6-segment-list-list264]index 30 sid ipv6 4444:4::40--------这个后面跟的IPv6地址有错，写的是吓一跳的东西

[NE1-segment-routing-ipv6]srv6-te policy p1264 endpoint 4000::1 color 40

[NE1-segment-routing-ipv6-policy-p1264]candidate-path preference 100

[NE1-segment-routing-ipv6-policy-p1264-path]segment-list list264

纠正：

[NE1-bgp]segment-routing ipv6

[NE1-segment-routing-ipv6]segment-list list264

[NE1-segment-routing-ipv6-segment-list-list264]index 10 sid ipv6 1111:1::10

[NE1-segment-routing-ipv6-segment-list-list264]index 20 sid ipv6 2222:2::20

[NE1-segment-routing-ipv6-segment-list-list264]index 30 sid ipv6 6666:6::10

[NE1-segment-routing-ipv6]srv6-te policy p1264 endpoint 4000::1 color 40

[NE1-segment-routing-ipv6-policy-p1264]candidate-path preference 100

[NE1-segment-routing-ipv6-policy-p1264-path]segment-list list264

[NE4-bgp]segment-routing ipv6

[NE4-segment-routing-ipv6]segment-list list351

[NE4-segment-routing-ipv6-segment-list-list351]index 10 sid ipv6 3333:3::30

[NE4-segment-routing-ipv6-segment-list-list351]index 20 sid ipv6 5555:5::50

[NE4-segment-routing-ipv6-segment-list-list351]index 30 sid ipv6 1111:1::10

[NE4-segment-routing-ipv6]srv6-te policy p4351 endpoint 1000::1 color 10

[NE4-segment-routing-ipv6-policy-p4351]candidate-path preference 100

[NE4-segment-routing-ipv6-policy-p4351-path]segment-list list351

纠正：

[NE4-bgp]segment-routing ipv6

[NE4-segment-routing-ipv6]segment-list list351

[NE4-segment-routing-ipv6-segment-list-list351]index 10 sid ipv6 4444:4::10

[NE4-segment-routing-ipv6-segment-list-list351]index 20 sid ipv6 3333:3::20

[NE4-segment-routing-ipv6-segment-list-list351]index 30 sid ipv6 5555:5::30

[NE4-segment-routing-ipv6]srv6-te policy p4351 endpoint 1000::1 color 10

[NE4-segment-routing-ipv6-policy-p4351]candidate-path preference 100

[NE4-segment-routing-ipv6-policy-p4351-path]segment-list list351

==================⑤配置color路由图（打上color），在EVPN邻居中调用，且vpn实例邻居中通告EVPN======================

[NE1]ip ip-prefix net permit 2.2.2.2 32

[NE1]route-policy color permit node 10

[NE1-route-policy]if-match ip-prefix net

[NE1-route-policy]apply extcommunity color 0:40

[NE1-route-policy]route-policy color permit node 20

[NE1]bgp 100

[NE1-bgp]l2vpn-family evpn

[NE1-bgp-af-evpn]peer 4000::1 route-policy color import

[NE1]bgp 100

[NE1-bgp]ipv4-family vpn-instance A

[NE1-bgp-A]advertise l2vpn evpn

===============⑥最后及拿过CE的流量引到tunnel隧道=========

[NE1]tunnel-policy p1

[NE1-tunnel-policy-p1]tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

[NE1]ip vpn-instance A

[NE1-vpn-instance-A]tnl-policy p1 evpn