hub spoke架构的MPLS VPN配置笔记

hub spoke架构的MPLS VPN

配置步骤：

1、配置好运营商网络的R4 R5 R6的IGP互联和开启MPLS转发和LDP，采用OSPF

2、配置分支2处PE的实例，配置R5的实例spoke2,RD 25:25  RT 发出标记25:25，接收14:14标记路由，这里的思路是分支PE发送分支的私网路由并打标记，只接受总部PE发出的汇总路由的标记。并配置分部PE与总部PE的vpn v4地址簇的IBGP对等体关系。 

3、再配置分支3处PE的实例spoke3，RD 36:36 RT 发出标记 36:36 接收 14:14标记路由，同分支2

4、配置各个分部CE和分别PE建立ipv4 地址簇的EBGP对等体并导入直连路由

5、配置总部端PE设备建立两个实例

6、配置R4子接口绑定对应的实例

7、配置总部PE R4和R5 R6建立vpn v4对等体关系

8、配置R4两个实例与R1总部CE的BGP ipv4对等体

9、配置R1建立连个子接口与R4的不同实例互联，然后建立BGP邻居

配置如下：

1、配置好运营商网络的R4 R5 R6的IGP互联和开启MPLS转发和LDP

2、配置分支2处PE的实例，配置R5的实例spoke2,RD 25:25 RT 发出标记25:25，接收14:14标记路由，这里的思路是分支PE发送分支的私网路由并打标记，只接受总部PE发出的汇总路由的标记。并配置分部PE与总部PE的vpn v4地址簇的IBGP对等体关系。

# 1、配置好运营商网络的R4 R5 R6的IGP互联和开启MPLS转发和LDP
# 2、先陪分支2处PE的实例，先R5的实例spoke2,RD 25:25  RT 发出标记25:25，接受14:14标记路由
[R5]ip vpn-instance spoke2
[R5-vpn-instance-spoke2]route-distinguisher 25:25
[R5-vpn-instance-spoke2-af-ipv4]vpn-target 25:25 export-extcommunity 
[R5-vpn-instance-spoke2-af-ipv4]vpn-target 14:14 import-extcommunity 
[R5-vpn-instance-spoke2-af-ipv4]q
[R5-vpn-instance-spoke2]q
[R5]int g0/0/2
[R5-GigabitEthernet0/0/2]ip binding vpn-instance spoke2
[R5-GigabitEthernet0/0/2]ip addr 172.16.25.5 24
[R5-GigabitEthernet0/0/2]q

# 配置R5和R4 R6的VPN v4 BGP对等体
[R5]bgp 10 
[R5-bgp]router-id 5.5.5.5	
[R5-bgp]undo default ipv4-unicast 
[R5-bgp]peer 4.4.4.4 as-number 10
[R5-bgp]peer 4.4.4.4 connect-interface LoopBack 0
[R5-bgp]peer 6.6.6.6 as-number 10
[R5-bgp]peer 6.6.6.6 connect-interface LoopBack 0	
[R5-bgp]ipv4-family vpnv4 unicast 
[R5-bgp-af-vpnv4]peer 4.4.4.4 enable 
[R5-bgp-af-vpnv4]peer 6.6.6.6 enable 
[R5-bgp-af-vpnv4]q
[R5-bgp]q

# 配置R5的实例spoke2和R2的ipv4地址簇邻居关系	
[R5]bgp 10	
[R5-bgp]ipv4-family vpn-instance spoke2	
[R5-bgp-spoke2]peer 172.16.25.2 as-number 2
[R5-bgp-spoke2]q
[R5-bgp]q

3、再配置分支3处PE的实例spoke3，RD 36:36 RT 发出标记 36:36 接受 14:14标记路由

# 3、再配置分支3处PE的实例spoke3，RD 36:36 RT 发出标记 36:36 接受 14:14标记路由
[R6]ip vpn-instance spoke3
[R6-vpn-instance-spoke3]route-distinguisher 36:36
[R6-vpn-instance-spoke3-af-ipv4]vpn-target 36:36 export-extcommunity 	
[R6-vpn-instance-spoke3-af-ipv4]vpn-target 14:14 import-extcommunity 
[R6-vpn-instance-spoke3-af-ipv4]q
[R6-vpn-instance-spoke3]q
[R6]int g0/0/1
[R6-GigabitEthernet0/0/1]ip binding vpn-instance spoke3
[R6-GigabitEthernet0/0/1]ip addr 172.16.36.6 24
[R6-GigabitEthernet0/0/1]q

# 配置R6与R5 R4的VPN v4对等体
[R6]bgp 10
[R6-bgp]router-id 6.6.6.6
[R6-bgp]undo default ipv4-unicast	
[R6-bgp]peer 4.4.4.4 as-number 10
[R6-bgp]peer 4.4.4.4 connect-interface LoopBack 0	
[R6-bgp]peer 5.5.5.5 as-number 10	
[R6-bgp]peer 5.5.5.5 connect-interface LoopBack 0		
[R6-bgp]ipv4-family vpnv4 unicast 	
[R6-bgp-af-vpnv4]peer 4.4.4.4 enable 
[R6-bgp-af-vpnv4]peer 5.5.5.5 enable 
[R6-bgp-af-vpnv4]q
[R6-bgp]q

# 配置R6的实例spoke3与R3的ipv4 BGP对等体
[R6]bgp 10
[R6-bgp]ipv4-family vpn-instance spoke3	
[R6-bgp-spoke3]peer 172.16.36.3 as-number 3
[R6-bgp-spoke3]q
[R6-bgp]q

4、配置各个分部CE和分别PE建立ipv4 地址簇的EBGP对等体并导入直连路由

# 4、配置各个分部CE和分别PE建立ipv4 地址簇的EBGP对等体并导入直连路由
# 分支2
[R2]bgp 2
[R2-bgp]router-id 2.2.2.2	
[R2-bgp]undo default ipv4-unicast 	
[R2-bgp]peer 172.16.25.5 as-number 10
[R2-bgp]ipv4-family unicast 	
[R2-bgp-af-ipv4]peer 172.16.25.5 enable 
[R2-bgp-af-ipv4]q	
[R2-bgp]import-route direct 
[R2-bgp]q

# 分部3
[R3]bgp 3
[R3-bgp]router-id 3.3.3.3	
[R3-bgp]undo default ipv4-unicast 	
[R3-bgp]peer 172.16.36.6 as-number 10
[R3-bgp]ipv4-family unicast 	
[R3-bgp-af-ipv4]peer 172.16.36.6 enable 
[R3-bgp-af-ipv4]q	
[R3-bgp]import-route direct 
[R3-bgp]q

5、配置总部端PE设备建立两个实例

# 5、配置总部端PE设备建立两个实例

# 一个实例pe_hub接收分支PE发送的路由，RD 41:41 RT 接受25:25 和36:36 标记路由
[R4]ip vpn-instance pe_hub
[R4-vpn-instance-pe_hub]route-distinguisher 41:41	
[R4-vpn-instance-pe_hub-af-ipv4]vpn-target 25:25 import-extcommunity 	
[R4-vpn-instance-pe_hub-af-ipv4]vpn-target 36:36 import-extcommunity 
[R4-vpn-instance-pe_hub-af-ipv4]q
[R4-vpn-instance-pe_hub]q

# 第二个实例hub_pe导出汇总路由给分支的PE，RD 14:14 RT 导出14:14标记汇总路由
[R4]ip vpn-instance hub_pe	
[R4-vpn-instance-hub_pe]route-distinguisher 14:14	
[R4-vpn-instance-hub_pe-af-ipv4]vpn-target 14:14 export-extcommunity 
[R4-vpn-instance-hub_pe-af-ipv4]q
[R4-vpn-instance-hub_pe]q

6、配置R4子接口绑定对应的实例

# 6、配置R4子接口绑定对应的实例
[R4]int g0/0/0.14	
[R4-GigabitEthernet0/0/0.14]ip binding vpn-instance hub_pe
[R4-GigabitEthernet0/0/0.14]dot1q termination vid 14	
[R4-GigabitEthernet0/0/0.14]arp broadcast enable 
[R4-GigabitEthernet0/0/0.14]ip addr 172.16.14.4 24
[R4-GigabitEthernet0/0/0.14]q

[R4]int g0/0/0.41
[R4-GigabitEthernet0/0/0.41]ip binding vpn-instance pe_hub
[R4-GigabitEthernet0/0/0.41]dot1q termination vid 41	
[R4-GigabitEthernet0/0/0.41]arp broadcast enable 
[R4-GigabitEthernet0/0/0.41]ip addr 172.16.41.4 24
[R4-GigabitEthernet0/0/0.41]q

7、配置总部PE R4和R5 R6建立vpn v4对等体关系

# 7、配置总部PE R4和R5 R6建立vpn v4对等体关系
[R4]bgp 10
[R4-bgp]router-id 4.4.4.4	
[R4-bgp]undo default ipv4-unicast 	
[R4-bgp]peer 5.5.5.5 as-number 10	
[R4-bgp]peer 5.5.5.5 connect-interface LoopBack 0	
[R4-bgp]peer 6.6.6.6 as-number 10	
[R4-bgp]peer 6.6.6.6 connect-interface LoopBack 0	
[R4-bgp]ipv4-family vpnv4 unicast 
[R4-bgp-af-vpnv4]peer 5.5.5.5 enable 
[R4-bgp-af-vpnv4]peer 6.6.6.6 enable 
[R4-bgp-af-vpnv4]q
[R4-bgp]q

8、配置R4两个实例与R1总部CE的BGP ipv4对等体

# 8、配置R4连个实例与R1总部CE的BGP ipv4对等体
# pe_hub实例会接受分部的路由通过BGP会传给R1
[R4]bgp 10
[R4-bgp]ipv4-family vpn-instance pe_hub	
[R4-bgp-pe_hub]peer 172.16.41.1 as-number 1
[R4-bgp-pe_hub]q

# hub_pe实例指会把从R1收到的汇总路由打上14:14标记发给分支PE
[R4-bgp]ipv4-family vpn-instance hub_pe	
[R4-bgp-hub_pe]peer 172.16.14.1 as-number 1
[R4-bgp-hub_pe]q
[R4-bgp]q

9、配置R1建立连个子接口与R4的不同实例互联，然后建立BGP邻居

# 9、配置R1建立连个子接口与R4的不同实例互联，然后建立BGP邻居
[R1]int g0/0/0.41
[R1-GigabitEthernet0/0/0.41]dot1q termination vid 41	
[R1-GigabitEthernet0/0/0.41]arp broadcast enable 
[R1-GigabitEthernet0/0/0.41]ip addr 172.16.41.1 24
[R1-GigabitEthernet0/0/0.41]q
[R1]int g0/0/0.14
[R1-GigabitEthernet0/0/0.14]dot1q termination vid 14	
[R1-GigabitEthernet0/0/0.14]arp broadcast enable 
[R1-GigabitEthernet0/0/0.14]ip address 172.16.14.1 24 
[R1-GigabitEthernet0/0/0.14]q

[R1]bgp 1
[R1-bgp]router-id 1.1.1.1	
[R1-bgp]undo default ipv4-unicast 	
[R1-bgp]peer 172.16.41.4 as-number 10	
[R1-bgp]peer 172.16.14.4 as-number 10
[R1-bgp]ipv4-family unicast 	
[R1-bgp-af-ipv4]peer 172.16.41.4 enable 	
[R1-bgp-af-ipv4]peer 172.16.14.4 enable 
[R1-bgp-af-ipv4]import-route direct 
[R1-bgp-af-ipv4]aggregate 172.16.0.0 16 detail-suppressed 
[R1-bgp-af-ipv4]q
[R1-bgp]q