[eNSP]华为设备实现Hub&&Spoke组网

实验拓扑

实验介绍

Hub-CE与Hub-PE使用EBGP，Spoke-PE与Spoke-CE使用IGP，R3、R4、R5运行IS-IS、BGP、MPLS（配置除了IP地址不一样，其余的和前几次实验的配置一模一样）

配置步骤

1、IP地址

<R1>dis ip in br
Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              192.168.13.1/24      up         up        
GigabitEthernet0/0/1              unassigned           down       down      
GigabitEthernet0/0/2              unassigned           down       down      
LoopBack0                         172.16.1.1/32        up         up(s)     
NULL0                             unassigned           up         up(s)   

<R2>dis ip in br
Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              192.168.23.2/24      up         up        
GigabitEthernet0/0/1              unassigned           down       down      
GigabitEthernet0/0/2              unassigned           down       down      
LoopBack0                         172.16.2.1/32        up         up(s)     
NULL0                             unassigned           up         up(s)  

<R3>dis ip in br
Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              172.16.13.3/24       up         up        
GigabitEthernet0/0/1              172.16.23.3/24       up         up        
GigabitEthernet0/0/2              172.16.34.3/24       up         up        
LoopBack0                         3.3.3.3/32           up         up(s)     
NULL0                             unassigned           up         up(s)    

<R4>dis ip in br
Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              172.16.34.4/24       up         up        
GigabitEthernet0/0/1              172.16.45.4/24       up         up        
GigabitEthernet0/0/2              unassigned           down       down      
LoopBack0                         4.4.4.4/32           up         up(s)     
NULL0                             unassigned           up         up(s)     

<R5>dis ip in br
Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              172.16.45.5/24       up         up        
GigabitEthernet0/0/1              unassigned           up         down      
GigabitEthernet0/0/2              unassigned           down       down      
LoopBack0                         5.5.5.5/32           up         up(s)     
NULL0                             unassigned           up         up(s)  

<R6>dis ip in br
Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              unassigned           up         down      
GigabitEthernet0/0/1              unassigned           down       down      
GigabitEthernet0/0/2              unassigned           down       down      
LoopBack0                         172.16.3.1/32        up         up(s)     
NULL0                             unassigned           up         up(s)     

2、IS-IS

[R3]isis 1
[R3-isis-1]network-entity 49.0123.0000.0000.0001.00
[R3-isis-1]is-level level-2

[R4]isis 1
[R4-isis-1]network-entity 49.0123.0000.0000.0002.00
[R4-isis-1]is-level level-2

[R5]isis 1
[R5-isis-1]network-entity 49.0123.0000.0000.0003.00
[R5-isis-1]is-level level-2

[R3]int g 0/0/2
[R3-GigabitEthernet0/0/0]isis enable 1
[R3-GigabitEthernet0/0/0]int loo 0
[R3-LoopBack0]isis enable 1

[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]isis enable 1
[R4-GigabitEthernet0/0/0]int g 0/0/1
[R4-GigabitEthernet0/0/1]isis enable 1
[R4-GigabitEthernet0/0/1]int loo 0
[R4-LoopBack0]isis enable 1

[R5]int g 0/0/0
[R5-GigabitEthernet0/0/0]isis enable 1
[R5-GigabitEthernet0/0/0]int loo 0
[R5-LoopBack0]isis enable 1

2、MPLS

[R3]mpls lsr-id 3.3.3.3
[R3]mpls
[R3-mpls]mpls ldp
[R3-mpls-ldp]int g 0/0/2
[R3-GigabitEthernet0/0/0]mpls
[R3-GigabitEthernet0/0/0]mpls ldp

[R4]mpls lsr-id 4.4.4.4
[R4]mpls
[R4-mpls]mpls ldp
[R4-mpls-ldp]int g 0/0/0
[R4-GigabitEthernet0/0/0]mpls
[R4-GigabitEthernet0/0/0]mpls ldp
[R4-GigabitEthernet0/0/0]int g 0/0/1
[R4-GigabitEthernet0/0/1]mpls
[R4-GigabitEthernet0/0/1]mpls ldp

[R5]mpls lsr-id 5.5.5.5
[R5]mpls
[R5-mpls]mpls ldp
[R5-mpls-ldp]int g 0/0/0
[R5-GigabitEthernet0/0/0]mpls
[R5-GigabitEthernet0/0/0]mpls ldp

3、BGP预配置

[R3]bgp 500
[R3]router-id 3.3.3.3
[R3-bgp]undo default ipv4-unicast
[R3-bgp]peer 5.5.5.5 as 500
[R3-bgp]peer 5.5.5.5 connect-interface LoopBack 0
[R3-bgp]ipv4-family vpnv4
[R3-bgp-af-vpnv4]peer 5.5.5.5 enable

[R5]bgp 500
[R5]router-id 5.5.5.5
[R5-bgp]undo default ipv4-unicast
[R5-bgp]peer 3.3.3.3 as 500
[R5-bgp]peer 3.3.3.3 connect-interface LoopBack 0
[R5-bgp]ipv4-family vpnv4
[R5-bgp-af-vpnv4]peer 3.3.3.3 enable

4、创建VPN实例并绑定接口

[R3]ip vpn-instance 1
[R3-vpn-instance-1]route-distinguisher 1:1
[R3-vpn-instance-1-af-ipv4]vpn-target 1:12 import-extcommunity 
[R3-vpn-instance-1-af-ipv4]vpn-target 12:1 export-extcommunity 	
[R3]ip vpn-instance  2
[R3-vpn-instance-2]route-distinguisher 2:2
[R3-vpn-instance-2-af-ipv4]vpn-target 12:1 export-extcommunity 
[R3-vpn-instance-2-af-ipv4]vpn-target 1:12 import-extcommunity 
[R3-vpn-instance-2-af-ipv4]int g 0/0/1
[R3-GigabitEthernet0/0/1]ip binding vpn-instance 2
[R3-GigabitEthernet0/0/1]ip address 192.168.23.3 24
[R3-GigabitEthernet0/0/1]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip binding  vpn-instance 1
[R3-GigabitEthernet0/0/0]ip address 192.168.13.3 24

[R5]ip vpn-instance  in	
[R5-vpn-instance-in]route-distinguisher 3:2
[R5-vpn-instance-in-af-ipv4]vpn-target 12:1 import-extcommunity 
[R5]ip vpn-instance out
[R5-vpn-instance-out]rou	
[R5-vpn-instance-out]route-distinguisher 4:4
[R5-vpn-instance-out-af-ipv4]vpn-target 1:12 export-extcommunity 
[R5]int g 0/0/01.10	
[R5-GigabitEthernet0/0/1.10]dot1q  termination  vid 10
[R5-GigabitEthernet0/0/1.10]arp broadcast  enable 
[R5-GigabitEthernet0/0/1.10]ip binding vpn-instance in
[R5-GigabitEthernet0/0/1.10]ip address 192.168.10.5 24
[R5-GigabitEthernet0/0/1.10]int g 0/0/01.20
[R5-GigabitEthernet0/0/1.20]arp broadcast enable 
[R5-GigabitEthernet0/0/1.20]dot1q termination vid 20
[R5-GigabitEthernet0/0/1.20]ip binding vpn-instance out
[R5-GigabitEthernet0/0/1.20]ip address 192.168.20.5 24

R6配置子接口

[R6]int g 0/0/0.10	
[R6-GigabitEthernet0/0/0.10]dot1q  termination  vid 10
[R6-GigabitEthernet0/0/0.10]ip address 192.168.10.6 24
[R6-GigabitEthernet0/0/0.10]arp broadcast enable 
[R6-GigabitEthernet0/0/0.10]int g 0/0/0.20	
[R6-GigabitEthernet0/0/0.20]dot1q  termination  vid  20
[R6-GigabitEthernet0/0/0.20]arp broadcast  enable 	
[R6-GigabitEthernet0/0/0.20]ip address 192.168.20.6 24

5、配置Spoke——OSPF协议

[R1]ospf 1 router-id  1.1.1.1
[R1-ospf-1]ar 0
[R1-ospf-1-area-0.0.0.0]network  192.168.13.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network  172.16.1.1 0.0.0.0

[R2]ospf 1 router-id  2.2.2.2
[R2-ospf-1]ar 0 
[R2-ospf-1-area-0.0.0.0]network  192.168.23.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network  172.16.2.1 0.0.0.0

[R3]ospf 1 router-id  3.3.3.3 vpn-instance 1
[R3-ospf-1]ar 0 	
[R3-ospf-1-area-0.0.0.0]network  192.168.13.3 0.0.0.0
[R3]ospf 2 router-id 3.3.3.2 vpn-instance 2
[R3-ospf-2]ar 0
[R3-ospf-2-area-0.0.0.0]network  192.168.23.3 0.0.0.0	

6、配置Hub——EBGP协议

[R5]bgp  500
[R5-bgp]ipv4-family vpn-instance in
[R5-bgp-in]peer  192.168.10.6 as 100
[R5-bgp]ipv4-family vpn-instance out 
[R5-bgp-out]pe 192.168.20.6 as 100

[R5-bgp]ipv4-family vpn-instance out
[R5-bgp-out]peer 192.168.20.6 allow-as-loop 
//这是允许环路，
不配置这allow-as-loop在R5上out实例的路由会被防环机制给拦住，
从而没有out实例的路由表

[R6-GigabitEthernet0/0/0.20]bgp 100
[R6-bgp]router-id 6.6.6.6
[R6-bgp]peer  192.168.10.5 as-number 500
[R6-bgp]peer  192.168.20.5 as-number 500

7、OSPF宣告进BGP、BGP宣告进OSPF

PS：抓取路由这段可写可不写。

//就是这段！！！可写可不写！！！
[R3]ip ip-prefix 1 permit  172.16.1.1 32
[R3]ip ip-prefix 2 pe 172.16.2.1 32
[R3]route-policy 1 permit node 10
[R3-route-policy]if-match ip-prefix 1
[R3]route-policy 2 permit node 10
[R3-route-policy]if-match ip-prefix 2

[R3]bgp  500
[R3-bgp]ipv4-family vpn-instance 1
[R3-bgp-1]import-route ospf  1 route-policy 1
[R3-bgp-1]q
[R3-bgp]ipv4-famil vpn-instance 2
[R3-bgp-2]import-route ospf  2 route-policy 2
[R3]ospf 1 	
[R3-ospf-1]import-route bgp
[R3-ospf-1]ospf 2	
[R3-ospf-2]import-route bgp 

8、实验测试

[R1]tracert -a 172.16.1.1 172.16.2.1

 1 192.168.13.3 20 ms  20 ms  20 ms 

 2 172.16.34.4 30 ms  20 ms  50 ms 

 3 192.168.20.5 30 ms  40 ms  30 ms 

 4 192.168.20.6 40 ms  30 ms  20 ms 

 5 192.168.10.5 30 ms  30 ms  40 ms 

 6 172.16.45.4 50 ms  50 ms  60 ms 

 7 192.168.23.3 40 ms  50 ms  50 ms 

 8 192.168.23.2 50 ms  50 ms  60 ms 

———————————————————————————————
hub&spoke组网方案
方式一：Hub-CE与Hub-PE，Spoke-PE与Spoke-CE使用EBGP
方式二：Hub-CE与Hub-PE，Spoke-PE与Spoke-CE使用IGP
方式三：Hub-CE与Hub-PE使用EBGP，Spoke-PE与Spoke-CE使用IGP
方式四：Hub-CE与Hub-PE使用IGP，Spoke-PE与Spoke-CE使用EBGP（路由震荡，不成立）
———————————————————————————————
这里配置的是方式三，其余3种有待实现！
有大佬做完的可以交流一下，嘿嘿嘿~
最后问一问有没有大佬同考HCIE-Datacom的可以交流一下经验或者资源~