MPLS网络搭建

DK_one

已于 2023-03-06 19:25:24 修改

阅读量168

点赞数

文章标签：网络服务器 Powered by 金山文档

于 2023-02-02 21:18:50 首次发布

本文链接：https://blog.csdn.net/DK_one/article/details/128857273

版权

文章详细描述了公网和私网的网络配置，包括IP地址分配、OSPF路由协议、MPLS的启用、IPVPN实例创建以及BGP邻居关系建立。私网部分涉及RIP和OSPF的使用，以及路由重分发策略，确保了跨网络的路由可达性。

摘要由CSDN通过智能技术生成

题目：

top：

IP 配置：(公网部分)

[r2-LoopBack0]ip address 2.2.2.2 24
[r2-GigabitEthernet0/0/1]ip address 23.1.1.1 24

[r3-LoopBack0]ip address 3.3.3.3 24
[r3-GigabitEthernet0/0/0]ip address 23.1.1.2 24
[r3-GigabitEthernet0/0/1]ip address 34.1.1.1 24

[r4-LoopBack0]ip address 4.4.4.4 24
[r4-GigabitEthernet0/0/0]ip address 34.1.1.2 24
[r4-GigabitEthernet4/0/0]ip address 47.1.1.1 24

[r7-GigabitEthernet0/0/0]ip address 47.1.1.2 24

公网路由配置：

[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 23.1.1.1 0.0.0.0

[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 23.1.1.2 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 34.1.1.1 0.0.0.0

[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0
[r4-ospf-1-area-0.0.0.0]network 34.1.1.2 0.0.0.0
[r4-ospf-1-area-0.0.0.0]network 47.1.1.1 0.0.0.0

[r4-ospf-1]silent-interface GigabitEthernet 4/0/0
[r4-GigabitEthernet4/0/0]ospf authentication-mode md5 1 cipher 123456    (因r4 g4/0/0口是私网 所以不能访问公网 即沉默接口和加密 使r7无法接收hell包)
[r7]ip route-static 0.0.0.0 0 47.1.1.1  （ 缺省指向公网）
到这一步r7就能访问公网了

公网起mpls：

公网起mpls：
[r2]mpls lsr-id 2.2.2.2
[r2]mpls
[r2-mpls]mpls ldp
[r2-GigabitEthernet0/0/1]mpls
[r2-GigabitEthernet0/0/1]mpls ldp

[r3]mpls lsr-id 3.3.3.3
[r3-mpls]mpl
[r3-mpls]mpls ldp
[r3-GigabitEthernet0/0/0]mpl    
[r3-GigabitEthernet0/0/0]mpls ldp
[r3-GigabitEthernet0/0/1]mpls 
[r3-GigabitEthernet0/0/1]mpls ldp 

[r4]mpls lsr-id 4.4.4.4
[r4]mpls
[r4-mpls]mpls ldp
[r4-GigabitEthernet0/0/0]mpls 
[r4-GigabitEthernet0/0/0]mpls ldp 

<r3>display mpls ldp peer（查看mpls邻居）

IP vpn的创建：（分别在r2和r4上起两个空间来保证私网的畅通）

[r2]ip vpn-instance b1                           (r1)
[r2-vpn-instance-b1]route-distinguisher 1:1
[r2-vpn-instance-b1-af-ipv4]vpn-target 1:1
[r2-GigabitEthernet0/0/0]ip binding vp
[r2-GigabitEthernet0/0/0]ip binding vpn-instance b1
[r2-GigabitEthernet0/0/0]ip address 192.168.2.2 24

[r2]ip vpn-instance a1                            (r2)
[r2-vpn-instance-a1]route-distinguisher 2:2
[r2-vpn-instance-a1-af-ipv4]vpn-target 2:2
[r2-GigabitEthernet0/0/2]ip binding vpn-instance a1
[r2-GigabitEthernet0/0/2]ip address 192.168.2.2 24


[r2]display ip routing-table vpn-instance a1
[r2]display ip routing-table vpn-instance b1
[r4]ip vpn-instance b2                            (r5)
[r4-vpn-instance-b2]route-distinguisher 1:1
[r4-vpn-instance-b2-af-ipv4]vpn-target 1:1
[r4]ip vpn-instance a2                            (r7)
[r4-vpn-instance-a2]route-distinguisher 2：2
[r4-vpn-instance-a2-af-ipv4]vpn-target 2:2
[r4]int g0/0/1
[r4-GigabitEthernet0/0/1]ip binding vpn-instance b2
[r4-GigabitEthernet0/0/1]ip address 192.168.3.1 24
[r4]int g0/0/2
[r4-GigabitEthernet0/0/2]ip binding vpn-instance a2
[r4-GigabitEthernet0/0/2]ip address 192.168.3.1 24
[r2]ping -vpn-instance  a2  192.168.2.1   正常测试将在公有路由表中查询记录；该命令为基于VRF空间
a进行路由查询

公网bgp的建立：

[r2]bgp 1
[r2-bgp]router-id 2.2.2.2
[r2-bgp]peer 4.4.4.4 as-number 1（先和对端建立正常BGP邻居关系，可用于传递正常的公网路由）
[r2-bgp]peer 4.4.4.4 connect-interface LoopBack 0
[r2-bgp]ipv4-family vpnv4
[r2-bgp-af-vpnv4]peer 4.4.4.4 enable（还需要再在IPV4的家族模式中，与对端建立一个VPNV4的关系，用于传递VPNV4路由）

[r4]bgp 1
[r4-bgp]router-id 4.4.4.4
[r4-bgp]peer 2.2.2.2 as-number 1
[r4-bgp]peer 2.2.2.2 connect-interface LoopBack 0
[r4-bgp-af-vpnv4]peer 2.2.2.2 enable

[r2-bgp]display bgp vpnv4 all peer  查看mp-bgp邻居关系

私网配置：

[r6]int LoopBack 0
[r6-LoopBack0]ip address 192.168.1.1 24
[r6-GigabitEthernet0/0/0]ip address 192.168.2.1 24
[r6-rip-1]network 192.168.1.0
[r6-rip-1]network 192.168.2.0
[r2]rip 1 vp    
[r2]rip 1 vpn-instance a1
[r2-rip-1]network 192.168.2.0

[r7-GigabitEthernet0/0/2]ip address 192.168.3.1 24
[r7-LoopBack0]ip address 192.168.4.2 24
[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1-area-0.0.0.0]network 192.168.4.2 0.0.0.0
[r7-ospf-1-area-0.0.0.0]network 192.168.3.1 0.0.0.0
[r4]ospf 2 vp    
[r4]ospf 2 vpn-instance a2
[r4-ospf-2-area-0.0.0.0]network 192.168.3.2 0.0.0.0

[r4]display ip routing-table vpn-instance a2  （指定查看空间内的路由）

双向重发部学习路由:

[r2]rip 1 vpn-instance a1
[r2-rip-1]version 2
[r2-rip-1]import-route bgp
[r2]bgp 1
[r2-bgp]ipv4-family vpn-instance a1
[r2-bgp-a1]import-route rip 1

[r4-bgp]ipv4-family vpn-instance a2
[r4-bgp-a2]import-route ospf 2
[r4]ospf 2 vpn-instance a2
[r4-ospf-2]import-route bgp

私网路由：

[r1-LoopBack0]ip address 192.168.1.1 24
[r1-GigabitEthernet0/0/1]ip address 192.168.2.1 24
[r1]ip route-static 192.168.3.0 24 192.168.2.2
[r1]ip route-static 192.168.4.0 24 192.168.2.2

[r5-LoopBack0]ip address 192.168.4.1 24
[r5-GigabitEthernet0/0/0]ip address 192.168.3.1 24
[r5]ip route-static 192.168.1.0 24 192.168.3.2
[r5]ip route-static 192.168.2.0 24 192.168.3.2

[r2]ip route-static vpn-instance b1 192.168.1.0 24 192.168.2.1
[r4]ip route-static vpn-instance b2 192.168.4.0 24 192.168.3.1

双向重发部学习路由:

[r4]bgp 1
[r4-bgp]ipv4-family vpn-instance b2
[r4-bgp-b2]import-route direct 
[r4-bgp-b2]import-route static

[r2]bgp 1
[r2-bgp]ipv4-family vpn-instance b1
[r2-bgp-b1]import-route direct 
[r2-bgp-b1]import-route static