HCIP---MPLS实验

题目及ip规划

配置各个路由的接口及环回

注: R3 g0/0/1 g0/0/2 R4 g0/0/0 4/0/2 这几个接口的IP暂时先不用配置，根据图片配置基本ip和环回

公网配置ospf路由协议

R2

[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 23.1.1.1 0.0.0.0

R3

[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 23.1.1.2 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 34.1.1.1 0.0.0.0

R4

[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0 
[R4-ospf-1-area-0.0.0.0]network 34.1.1.2 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 47.1.1.1 0.0.0.0

配置MPLS ldp

R2

[R2]mpls lsr-id 2.2.2.2--------------(必须先定义mpls的router-id，要为本地设备的真实ip地址，且邻居可达，因为该地址将用于建立TCP会话，建议使用环回地址)
[R2]mpls -----------------(再开启mpls协议
)
Info: Mpls starting, please wait... OK!
[R2-mpls]mpls ldp----------------(再激活LDP协议)
[R2-mpls-ldp]q
[R2]int G0/0/0----------------------------(之后需要在所有标签经过的接口上开启协议)
[R2-GigabitEthernet0/0/0]mpls -------------(先开启MPLS)	
[R2-GigabitEthernet0/0/0]mpls ldp--------------(再激活LDP协议)
[R2-GigabitEthernet0/0/0]

R3

[R3]mpls lsr-id 3.3.3.3
[R3]mpls 
Info: Mpls starting, please wait... OK!
[R3-mpls]mpls ldp
[R3-mpls-ldp]q
[R3]int G0/0/0
[R3-GigabitEthernet0/0/0]mpls 
[R3-GigabitEthernet0/0/0]mpls ldp
[R3-GigabitEthernet0/0/0]int G0/0/1
[R3-GigabitEthernet0/0/1]mpls
[R3-GigabitEthernet0/0/1]mpls ldp

R4

[R4]mpls lsr-id 4.4.4.4
[R4]mpls 
Info: Mpls starting, please wait... OK!
[R4-mpls]mpls ldp
[R4-mpls-ldp]int G0/0/1	
[R4-GigabitEthernet0/0/1]mpls 
[R4-GigabitEthernet0/0/1]mpls ldp

在R2和R4上开启BGP并建立MP-BGP邻居关系

R2

[R2]bgp 1
[R2-bgp]router-id 2.2.2.2	
[R2-bgp]peer 4.4.4.4 as-number 1
[R2-bgp]peer 4.4.4.4 connect-interface LoopBack 0
[R2-bgp]ipv4-family vpnv4
[R2-bgp-af-vpnv4]peer 4.4.4.4 enable

R4

[R2]bgp 1
[R2-bgp]router-id 2.2.2.2
[R2-bgp]peer 4.4.4.4 as-number 1
[R2-bgp]peer 4.4.4.4 connect-interface LoopBack 0
[R2-bgp]ipv4-family vpnv4
[R2-bgp-af-vpnv4]peer 4.4.4.4 enable

配置MPLS VPN

R2上创建两个vrf空间B1和A1分别对应R4上创建的B2和A2
R2

[R2]ip vpn-instance B1--------------(创建名为B1的vrf空间)
[R2-vpn-instance-B1]ipv4-family-------------------(进入IPV4的配置模式下)
[R2-vpn-instance-B1-af-ipv4]route-distinguisher 1:1------(设置RD值)
[R2-vpn-instance-B1-af-ipv4]vpn-target 1:1-------(设置RT值 必须对端的PE端一致)
[R2-vpn-instance-B1-af-ipv4]int G0/0/1------------(进入链接CE端的接口)
[R2-GigabitEthernet0/0/1]ip binding vpn-instance B1-----------(关联到vrf空间)
Info: All IPv4 related configurations on this interface are removed!
Info: All IPv6 related configurations on this interface are removed!
[R2-GigabitEthernet0/0/1]ip add 192.168.2.2 24----------(配置私有ip地址)
[R2-GigabitEthernet0/0/1]q
[R2]ip vpn-instance A1-----------(创建名为A1的vrf空间)
[R2-vpn-instance-A1]ipv4-family	----------(进入IPV4的配置模式下)
[R2-vpn-instance-A1-af-ipv4]route-distinguisher 2:2------(设置RD值)
[R2-vpn-instance-A1-af-ipv4]vpn-target 2:2-------(设置RT值 必须对端的PE端一致)
 IVT Assignment result: 
Info: VPN-Target assignment is successful.
 EVT Assignment result: 
Info: VPN-Target assignment is successful.
[R2-vpn-instance-A1-af-ipv4]int G0/0/2------------(进入链接CE端的接口)
[R2-GigabitEthernet0/0/2]ip binding vpn-instance A1-----------(关联到vrf空间)
Info: All IPv4 related configurations on this interface are removed!
Info: All IPv6 related configurations on this interface are removed!
[R2-GigabitEthernet0/0/2]ip add 192.168.2.2 24----------(配置私有ip地址)

R4创建两个VRF,B2和A2

[R4]ip vpn-instance B2
[R4-vpn-instance-B2]ipv4-family	
[R4-vpn-instance-B2-af-ipv4]route-distinguisher 1:1
[R4-vpn-instance-B2-af-ipv4]vpn-target 1:1
 IVT Assignment result: 
Info: VPN-Target assignment is successful.
 EVT Assignment result: 
Info: VPN-Target assignment is successful.
[R4-vpn-instance-B2-af-ipv4]int G0/0/2
[R4-GigabitEthernet0/0/2]ip binding vpn-instance B2
Info: All IPv4 related configurations on this interface are removed!
Info: All IPv6 related configurations on this interface are removed!
[R4-GigabitEthernet0/0/2]ip add 192.168.3.2 24
[R4-GigabitEthernet0/0/2]q
[R4]ip vpn-instance A2
[R4-vpn-instance-A2]ipv4-family
[R4-vpn-instance-A2-af-ipv4]route-distinguisher 2:2
[R4-vpn-instance-A2-af-ipv4]vpn-target 2:2
 IVT Assignment result: 
Info: VPN-Target assignment is successful.
 EVT Assignment result: 
Info: VPN-Target assignment is successful.
[R4-vpn-instance-A2-af-ipv4]int G0/0/0	
[R4-GigabitEthernet0/0/0]ip binding vpn-instance A2
Info: All IPv4 related configurations on this interface are removed!
Info: All IPv6 related configurations on this interface are removed!
[R4-GigabitEthernet0/0/0]ip add 192.168.3.2 24

CE端与PE端交互路由

R1上写B2（r5）的静态路由，R5上写到B1（r1）的静态路由，并在R2和R4上分别做静态和直连重发布

静态
CE端直接编写静态路由即可
PE端编写到VRF空间内的静态路由
R1

[R1]ip route-static 192.168.3.0 255.255.255.0 192.168.2.2
[R1]ip route-static 192.168.4.0 255.255.255.0 192.168.2.2

R5

[R5]ip route-static 192.168.1.0 255.255.255.0 192.168.3.2
[R5]ip route-static 192.168.2.0 255.255.255.0 192.168.3.2

R2

[R2]ip route-static vpn-instance B1 192.168.1.0 255.255.255.0 192.168.2.1
[R2]bgp 1
[R2-bgp]ipv4 vpn-instance B1
[R2-bgp-B1]import-route direct 
[R2-bgp-B1]import-route static

R4

[R4]ip route-static vpn-instance B2 192.168.4.0 255.255.255.0 192.168.3.1
[R4]bgp 1
[R4-bgp]ipv4-family vpn-instance B2
[R4-bgp-B2]import-route direct 
[R4-bgp-B2]import-route static 

动态协议

CE端正常启动RIP或OSPF即可
PE端，启动VPNV4专用的ospf协议
之后使用双向重发布，实现路由共享
R6

[R6]rip 2
[R6-rip-2]version 2
[R6-rip-2]network 192.168.6.0
[R6-rip-2]network 192.168.2.0

R7

[R7]ospf 2 router-id 7.7.7.7
[R7-ospf-2]area 1 
[R7-ospf-2-area-0.0.0.1]network 192.168.3.1 0.0.0.0
[R7-ospf-2-area-0.0.0.1]network 192.168.4.1 0.0.0.0

R2

[R2]rip 2 vpn-instance A1
[R2-rip-2]version 2
[R2-rip-2]network 192.168.2.0
[R2-rip-2]import-route bgp
[R2-rip-2]q
[R2]bgp 1
[R2-bgp]ipv4-family vpn-instance A1
[R2-bgp-A1]import-route  rip 2
[R2-bgp-A1]q
[R2-bgp]q
[R2]rip 2 vpn-instance A1
[R2-rip-2]import-route bgp 

R4

[R4]ospf 2 vpn-instance A2
[R4-ospf-2]area 1
[R4-ospf-2-area-0.0.0.1]network 192.168.3.2 0.0.0.0
[R4-ospf-2-area-0.0.0.1]q
[R4-ospf-2]q
[R4]bgp 1
[R4-bgp]ipv4-family vpn-instance A2
[R4-bgp-A2]import-route ospf 2
[R4-bgp-A2]q
[R4-bgp]q
[R4]ospf 2 vpn-instance A2
[R4-ospf-2]import-route bgp