实验摘要:
CE2是PC1和PC2的网关设备,CE3是PC3的网关设备 ,网关的IP地址是一样的,因为要实现虚拟机的热迁移。
使用EVPN的方式动态的建立VXLAN分布式网关。
本端的ERT要和对端的IRT一样配置一样,这样才可以建立vxlan隧道,这里就全部规划成1:1了。
最后实现:
PC1和PC2本地跨子网通信,
PC1和PC3分布式同子网通信。
实验拓扑:
基础配置命令:
SW1:
#
sysname sw1
#
vlan batch 10 20
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 20
SW2:
#
sysname sw2
#
undo info-center enable
#
vlan batch 10
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 10
CE2:
#
sysname ce2
#
bridge-domain 10
vxlan vni 10
#
bridge-domain 20
vxlan vni 20
#
interface GE1/0/0
undo portswitch
undo shutdown
ip address 10.1.12.2 255.255.255.0
#
interface LoopBack0
ip address 2.2.2.2 255.255.255.255
#
interface GE1/0/1
undo shutdown
#
interface GE1/0/1.10 mode l2
encapsulation dot1q vid 10
bridge-domain 10
#
interface GE1/0/1.20 mode l2
encapsulation dot1q vid 20
bridge-domain 20
#
ospf 1
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 10.1.12.2 0.0.0.0
CE1:
#
sysname ce1
#
interface GE1/0/0
undo portswitch
undo shutdown
ip address 10.1.12.1 255.255.255.0
#
interface GE1/0/1
undo portswitch
undo shutdown
ip address 10.1.13.1 255.255.255.0
#
interface LoopBack0
ip address 1.1.1.1 255.255.255.255
#
ospf 1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 10.1.12.1 0.0.0.0
network 10.1.13.1 0.0.0.0
CE3
#
sysname ce3
#
bridge-domain 10
vxlan vni 10
#
interface GE1/0/0
undo portswitch
undo shutdown
ip address 10.1.13.3 255.255.255.0
#
interface LoopBack0
ip address 3.3.3.3 255.255.255.255
#
interface GE1/0/1
undo shutdown
#
interface GE1/0/1.10 mode l2
encapsulation dot1q vid 10
bridge-domain 10
#
ospf 1
area 0.0.0.0
network 3.3.3.3 0.0.0.0
network 10.1.13.3 0.0.0.0
高级配置命令:
前面的基础命令配置完成后,下面开始正式配置分布式网关的配置
CE1:
#
evpn-overlay enable
#
bgp 100
peer 2.2.2.2 as-number 100
peer 2.2.2.2 connect-interface LoopBack0
peer 2.2.2.2 reflect-client //CE1作为RR设备,这样就不用全互联了,CE2和CE3只需和RR建立BGP关系,由RR来反射路由
peer 3.3.3.3 as-number 100
peer 3.3.3.3 connect-interface LoopBack0
peer 3.3.3.3 reflect-client
#
l2vpn-family evpn
undo policy vpn-target //关闭vpn-target可以避免由于RT值不一样导致不能通信,也可以不关闭
peer 2.2.2.2 enable
peer 2.2.2.2 advertise irb
peer 2.2.2.2 reflect-client
peer 3.3.3.3 enable
peer 3.3.3.3 advertise irb
peer 3.3.3.3 reflect-client
CE2:
#
evpn-overlay enable
#
bgp 100
peer 1.1.1.1 as-number 100
peer 1.1.1.1 connect-interface LoopBack0
#
l2vpn-family evpn
peer 1.1.1.1 enable
peer 1.1.1.1 advertise irb
#
bridge-domain 10
evpn
route-distinguisher 1:1
vpn-target 1:1 both
#
bridge-domain 20
evpn
route-distinguisher 1:2
vpn-target 1:2 both
#
ip vpn-instance 10
route-distinguisher 1:1
#
interface Vbdif10
ip binding vpn-instance 10
ip address 192.168.1.254 255.255.255.0
arp distribute-gateway enable
arp collect host enable
#
interface Vbdif20
ip binding vpn-instance 10
ip address 192.168.2.254 255.255.255.0
arp distribute-gateway enable
arp collect host enable
CE3:
#
evpn-overlay enable
#
bgp 100
peer 1.1.1.1 as-number 100
peer 1.1.1.1 connect-interface LoopBack0
#
l2vpn-family evpn
peer 1.1.1.1 enable
peer 1.1.1.1 advertise irb
#
bridge-domain 10
evpn
route-distinguisher 1:1
vpn-target 1:1 both
#
ip vpn-instance 10
route-distinguisher 1:1
#
interface Vbdif10
ip binding vpn-instance 10
ip address 192.168.1.254 255.255.255.0
arp distribute-gateway enable
arp collect host enable
在CE2上配置完VPN实例、EVPN实例、Vbdif10和Vbdif20的网关即可实现PC1和PC2实现本地跨子网通信
最后一步:
实现PC1和PC3分布式网关同子网通信
CE2:
#
interface Nve1
source 2.2.2.2
vni 10 head-end peer-list protocol bgp
CE3:
#
interface Nve1
source 3.3.3.3
vni 10 head-end peer-list protocol bgp
实验效果:
此时,VXLAN的隧道就正式建立了