【HCIE】MPLS-Hub&Spoke

1. 实验拓扑

2. 实验目标

2.1 目标

• 实现R5去R6依次走R5-R3-R2-R1-R2-R4-R6

2.2 步骤

• IP地址、OSPF编号等按如图所示划分。
• 配置R5、R6IP地址，OSPF1。
• R3、R4配置实例、绑定接口、配置IP、OSPF2。
• 配置R2、R3、R4 MPLS LDP、BGP、IP、OSPF1。
• 配置R2 的出入实例，将R3、R4的BGP VPNv4路由与OSPF2互相引入。
• 配置R1、R2的子接口、IP、OSPF；R2的子接口、IP、OSPF、绑定接口。

3. 配置脚本

3.1 配置R5、R6

R5

//配置R5的IP、OSPF
[R5]ospf 1  
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]interface g0/0/0
[R5-GigabitEthernet0/0/0]ip add 192.168.35.5 24
[R5-GigabitEthernet0/0/0]ospf enable 1 area 0
[R5-GigabitEthernet0/0/0]interface LoopBack 0
[R5-LoopBack0]ip add 5.5.5.5 32
[R5-LoopBack0]ospf enable 1 area 0

R6

//配置R6的IP、OSPF
[R6]ospf 1 
[R6-ospf-1]area 0
[R6-ospf-1-area-0.0.0.0]interface g0/0/0
[R6-GigabitEthernet0/0/0]ip add 192.168.46.6 24
[R6-GigabitEthernet0/0/0]ospf enable 1 area 0
[R6-GigabitEthernet0/0/0]interface LoopBack 0
[R6-LoopBack0]ip add 6.6.6.6 32
[R6-LoopBack0]ospf enable 1 area 0

3.2 配置R3、R4

R3

//R3配置实例、绑定接口、配置IP、OSPF2。
[R3]ip vpn-instance spoke1
[R3-vpn-instance-spoke1]route-distinguisher 33:33
[R3-vpn-instance-spoke1-af-ipv4]vpn-target 35:35 export-extcommunity 
[R3-vpn-instance-spoke1-af-ipv4]vpn-target 53:53 import-extcommunity
[R3]ospf 2 vpn-instance spoke1
[R3-ospf-2]area 0
[R3-ospf-2-area-0.0.0.0]interface g0/0/1 
[R3-GigabitEthernet0/0/1]ip binding vpn-instance spoke1      //注：此命令会清除所有的IP地址。
[R3-GigabitEthernet0/0/1]ip add 192.168.35.3 24
[R3-GigabitEthernet0/0/1]ospf enable 2 area 0

R4

//R4配置实例、绑定接口、配置IP、OSPF2。
[R4]ip vpn-instance spoke2
[R4-vpn-instance-spoke2]route-distinguisher 44：44
[R4-vpn-instance-spoke2-af-ipv4]vpn-target 46:46 export-extcommunity 
[R4-vpn-instance-spoke2-af-ipv4]vpn-target 64:64 import-extcommunity
[R4]ospf 2 vpn-instance spoke2
[R4-ospf-2]area 0
[R4-ospf-2-area-0.0.0.0]interface g0/0/1 
[R4-GigabitEthernet0/0/1]ip binding vpn-instance spoke2
[R4-GigabitEthernet0/0/1]ip add 192.168.46.4 24
[R4-GigabitEthernet0/0/1]ospf enable 2 area 0

3.3 配置R2、R3、R4

R3

//配置R3的OSPF、IP
[R3]ospf 1 
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]interface g0/0/0
[R3-GigabitEthernet0/0/0]ip add 23.1.1.3 24
[R3-GigabitEthernet0/0/0]ospf enable 1 area 0
[R3-GigabitEthernet0/0/0]interface LoopBack 0
[R3-LoopBack0]ip add 3.3.3.3 32
[R3-LoopBack0]ospf en 1 a 0

//配置R3的MPLS LDP
[R3]mpls lsr-id 3.3.3.3
[R3]mpls 
[R3-mpls]mpls ldp
[R3-mpls-ldp]interface g0/0/0
[R3-GigabitEthernet0/0/0]mpls
[R3-GigabitEthernet0/0/0]mpls ldp

//配置R3的BGP
[R3]bgp 234
[R3-bgp]peer 2.2.2.2 as-number 234
[R3-bgp]peer 2.2.2.2 connect-interface LoopBack 0
[R3-bgp]ipv4-family vpnv4 
[R3-bgp-af-vpnv4]peer 2.2.2.2 enable

R2

//配置R2的OSPF、IP
[R2]ospf 1 
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]interface g0/0/1
[R2-GigabitEthernet0/0/1]ip add 23.1.1.2 24
[R2-GigabitEthernet0/0/1]ospf enable 1 area 0
[R2-GigabitEthernet0/0/1]int g0/0/2
[R2-GigabitEthernet0/0/2]ip add 24.1.1.2 24
[R2-GigabitEthernet0/0/2]ospf enable 1 area 0
[R2-GigabitEthernet0/0/2]interface LoopBack 0
[R2-LoopBack0]ip add 2.2.2.2 32
[R2-LoopBack0]ospf enable 1 area 0

//配置R2的MPLS LDP
[R2]mpls lsr-id 2.2.2.2
[R2]mpls 
[R2-mpls]mpls ldp
[R2-mpls-ldp]interface g0/0/1
[R2-GigabitEthernet0/0/1]mpls 
[R2-GigabitEthernet0/0/1]mpls ldp
[R2-GigabitEthernet0/0/1]interface g0/0/2
[R2-GigabitEthernet0/0/2]mpls 
[R2-GigabitEthernet0/0/2]mpls ldp

//配置R2的BGP
[R2]bgp 234
[R2-bgp]peer 3.3.3.3 as-number 234
[R2-bgp]peer 4.4.4.4 as-number 234
[R2-bgp]peer 3.3.3.3 connect-interface LoopBack 0
[R2-bgp]peer 4.4.4.4 connect-interface LoopBack 0
[R2-bgp]ipv4-family vpnv4
[R2-bgp-af-vpnv4]peer 3.3.3.3 enable
[R2-bgp-af-vpnv4]peer 4.4.4.4 enable

R4

//配置R4的OSPF、IP
[R4]ospf 1
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]interface g0/0/0
[R4-GigabitEthernet0/0/0]ip add 24.1.1.4 24
[R4-GigabitEthernet0/0/0]ospf enable 1 area 0
[R4-GigabitEthernet0/0/0]interface LoopBack 0
[R4-LoopBack0]ip add 4.4.4.4 32
[R4-LoopBack0]ospf enable 1 area 0

//配置R4的MPLS LDP
[R4]mpls lsr-id 4.4.4.4
[R4]mpls 
[R4-mpls]mpls ldp
[R4-mpls-ldp]interface g0/0/0
[R4-GigabitEthernet0/0/0]mpls
[R4-GigabitEthernet0/0/0]mpls ldp

//配置R4的BGP
[R4]bgp 234
[R4-bgp]peer 2.2.2.2 as-number 234
[R4-bgp]peer 2.2.2.2 connect-interface LoopBack 0
[R4-bgp]ipv4-family vpnv4
[R4-bgp-af-vpnv4]peer 2.2.2.2 enable

3.4 配置R2实例

R2

//配置R2的出入实例
[R2]ip vpn-instance input
[R2-vpn-instance-input]route-distinguisher 12:12
[R2-vpn-instance-input-af-ipv4]vpn-target 35:35 46:46 import-extcommunity

[R2]ip vpn-instance output
[R2-vpn-instance-output]route-distinguisher 21:21
[R2-vpn-instance-output-af-ipv4]vpn-target 53:53 64:64 export-extcommunity

R3

//BGP中引入OSPF2
[R3]bgp 234
[R3-bgp]ipv4-family vpn-instance spoke1
[R3-bgp-spoke1]import-route  ospf 2

//OSPF2中引入BGP
[R3]ospf 2 vpn-instance spoke1
[R3-ospf-2]import-route bgp

R4

//BGP中引入OSPF2
[R4]bgp 234
[R4-bgp]ipv4-family vpn-instance spoke2
[R4-bgp-spoke2]import-route ospf 2

//OSPF2中引入BGP
[R4]ospf 2 vpn-instance spoke2
[R4-ospf-2]import-route bgp

R3、R4的BGPVPNv4路由中引入OSPF2后，R2收到R5、R6的路由。

3.5 配置R1、R2

R1

//配置R1的OSPF1、子接口、IP
[R1]ospf 1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]interface g0/0/0.10 
[R1-GigabitEthernet0/0/0.10]dot1q  termination vid 10
[R1-GigabitEthernet0/0/0.10]arp broadcast enable
[R1-GigabitEthernet0/0/0.10]ip add 192.168.12.1 24
[R1-GigabitEthernet0/0/0.10]ospf enable 1 area 0
[R1-GigabitEthernet0/0/0.10]interface g0/0/0.20
[R1-GigabitEthernet0/0/0.20]dot1q  termination vid 20
[R1-GigabitEthernet0/0/0.20]arp broadcast enable
[R1-GigabitEthernet0/0/0.20]ip add 192.168.21.1 24
[R1-GigabitEthernet0/0/0.20]ospf enable 1 area 0

R2

//配置R2的子接口、IP、OSPF2和3、绑定接口
[R2]ospf 2  vpn-instance input 
[R2-ospf-2]area 0
[R2]ospf 3 vpn-instance output
[R2-ospf-3]area 0
[R2-ospf-3-area-0.0.0.0]interface g0/0/0.10
[R2-GigabitEthernet0/0/0.10]dot1q termination vid 10
[R2-GigabitEthernet0/0/0.10]arp broadcast enable
[R2-GigabitEthernet0/0/0.10]ip binding vpn-instance input
[R2-GigabitEthernet0/0/0.10]ip add 192.168.12.2 24
[R2-GigabitEthernet0/0/0.10]ospf enable 2 area 0
[R2-GigabitEthernet0/0/0.10]interface g0/0/0.20
[R2-GigabitEthernet0/0/0.20]dot1q  termination vid 20
[R2-GigabitEthernet0/0/0.20]arp broadcast enable
[R2-GigabitEthernet0/0/0.20]ip binding vpn-instance output
[R2-GigabitEthernet0/0/0.20]ip add 192.168.21.2 24
[R2-GigabitEthernet0/0/0.20]ospf enable 3 area 0

//OSPF2中引入BGP
[R2]ospf 2 vpn-instance input
[R2-ospf-2]import-route bgp

//BGP中引入OSPF3
[R2]bgp 234
[R2-bgp]ipv4-family vpn-instance output
[R2-bgp-output]import-route ospf 3

//配置禁止检查DN位
[R2]ospf 3 vpn-instance  output
[R2-ospf-3]dn-bit-check disable summary   //禁止检查三类DN位
[R2-ospf-3]dn-bit-check disable ase       //禁止检查五类DN位

R2收到R1传来的路由

4. 实验结果

R5 tracert -a 5.5.5.5 6.6.6.6 依次走R5-R3-R2-R1-R2-R4-R6

5. 总结

• R2接受不到R5和R6的路由？

在Vpnv4路由中引入OSPF 2
[R3]bgp 234
[R3-bgp]ipv4-family vpn-instance spoke1
[R3-bgp-spoke1]import-route ospf 2

• R2 OSPF3 需禁止DN位。

[R2]ospf 3 vpn-instance  output
[R2-ospf-3]dn-bit-check disable summary 
[R2-ospf-3]dn-bit-check disable ase

• Hub&Spoke有以下组网方案

方式一：Hub-CE与Hub-PE，Spoke-PE与Spoke-CE使用EBGP。
方式二：Hub-CE与Hub-PE，Spoke-PE与Spoke-CE使用IGP。
方式三：Hub-CE与Hub-PE使用EBGP，Spoke-PE与Spoke-CE使用IGP。
注：Hub-CE与Hub-PE使用EBGP，Spoke-PE与Spoke-CE使用EBGP，此方式是不可行的。