MPLS实验

实验要求如下

一、拓扑设计

 

 二、先进行公网的环境搭建

1.公网的IP地址配置

[R2]int g0/0/1
[R2-GigabitEthernet0/0/1]ip address 23.1.1.1 24
[R2-GigabitEthernet0/0/2]int lo0    
[R2-LoopBack0]ip address 2.2.2.2 24

[R3]int g0/0/1
[R3-GigabitEthernet0/0/1]ip address 23.1.1.2 24
[R3-GigabitEthernet0/0/1]int g0/0/2     
[R3-GigabitEthernet0/0/2]ip address 34.1.1.1 24
[R3-GigabitEthernet0/0/2]int lo0    
[R3-LoopBack0]ip address 3.3.3.3 24

[R4]int g0/0/2 
[R4-GigabitEthernet0/0/2]ip address 34.1.1.2 24
[R4-GigabitEthernet0/0/2]int g4/0/0
[R4-GigabitEthernet4/0/0]ip address 47.1.1.1 24
[R4-GigabitEthernet4/0/0]int lo0 
[R4-LoopBack0]ip address 4.4.4.4 24
 

2.ospf配置

[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1-area-0.0.0.0]network 23.1.1.1 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0

[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1-area-0.0.0.0]network 23.1.1.2 0.0.0.0   
[R3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 34.1.1.1 0.0.0.0

[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1-area-0.0.0.0]network 34.1.1.2 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0

 3.进行MPLS配置

 

3.R2和R４之间BGP的配置

[R2]bgp 1
[R2-bgp]router-id 2.2.2.2
[R2-bgp]peer 4.4.4.4 as-number 1
[R2-bgp]peer 4.4.4.4 connect-interface LoopBack 0
[R2-bgp]ipv4-family vpnv4  
[R2-bgp-af-vpnv4]peer 4.4.4.4 enable 

[R4]bgp 1
[R4-bgp]router-id 4.4.4.4
[R4-bgp]peer 2.2.2.2 as-number 1    
[R4-bgp]peer 2.2.2.2 connect-interface LoopBack 0   
[R4-bgp]ipv4-family vpnv4
[R4-bgp-af-vpnv4]peer 2.2.2.2 enable 

 三、私网配置

1.R2上的VPN配置，R1，R6的IP配置

[R1]int g0/0/0    
[R1-GigabitEthernet0/0/0]ip address 192.168.2.1 24
[R1-GigabitEthernet0/0/0]int lo0
[R1-LoopBack0]ip address 192.168.1.1 24

[R6]int g0/0/2   
[R6-GigabitEthernet0/0/2]ip address 192.168.2.1 24
[R6-GigabitEthernet0/0/2]int lo0
[R6-LoopBack0]ip address 192.168.1.1 24

[R2]ip vpn-instance a
[R2-vpn-instance-a]ipv4-family  
[R2-vpn-instance-a-af-ipv4]route-distinguisher 1:1  
[R2-vpn-instance-a-af-ipv4]vpn-target 1:1
[R2]int g0/0/0 
[R2-GigabitEthernet0/0/0]ip binding vpn-instance a
[R2-GigabitEthernet0/0/0]ip address 192.168.2.2 24
[R2]ip vpn-instance b  
[R2-vpn-instance-b]ipv4-family  
[R2-vpn-instance-b-af-ipv4]route-distinguisher 2:2 
[R2-vpn-instance-b-af-ipv4]vpn-target 2:2
[R2]int g0/0/2  
[R2-GigabitEthernet0/0/2]ip binding vpn-instance b 
[R2-GigabitEthernet0/0/2]ip address 192.168.2.2 24

 2.R4上的VPN配置，R5，R7的IP配置

[R5]int g0/0/1  
[R5-GigabitEthernet0/0/1]ip address 192.168.3.1 24
[R5-GigabitEthernet0/0/1]int lo0  
[R5-LoopBack0]ip address 192.168.4.1 24

[R7]int g0/0/0   
[R7-GigabitEthernet0/0/0]ip address 192.168.3.1 24
[R7-GigabitEthernet0/0/0]int lo0
[R7-LoopBack0]ip address 192.168.4.2 24

[R7]int g0/0/1
[R7-GigabitEthernet0/0/1]ip address 47.1.1.2 24

[R4]ip vpn-instance a
[R4-vpn-instance-a]ipv4-family   
[R4-vpn-instance-a-af-ipv4]route-distinguisher 1:1
[R4-vpn-instance-a-af-ipv4]vpn-target 1:1
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ip binding vpn-instance a
[R4-GigabitEthernet0/0/1]ip address 192.168.3.2 24
[R4]ip vpn-instance b
[R4-vpn-instance-b]ipv4-family    
[R4-vpn-instance-b-af-ipv4]route-distinguisher 2:2
[R4-vpn-instance-b-af-ipv4]vpn-target 2:2
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip binding vpn-instance b   
[R4-GigabitEthernet0/0/0]ip address 192.168.3.2 24

 3.重发布

1）R1,R5起静态

[R1]ip route-static 192.168.3.0 24 192.168.2.2
[R1]ip route-static 192.168.4.0 24 192.168.2.2

[R2]ip route-static vpn-instance a 192.168.1.0 24 192.168.2.1
[R2]bgp 1
[R2-bgp]ipv4-family vpn-instance a 
[R2-bgp-a]import-route direct 
[R2-bgp-a]import-route static 

[R5]ip route-static 192.168.1.0 24 192.168.3.2
[R5]ip route-static 192.168.2.0 24 192.168.3.2

[R4]ip route-static vpn-instance a 192.168.4.0 24 192.168.3.1
[R4]bgp 1   
[R4-bgp]ipv4-family vpn-instance a 
[R4-bgp-a]import-route direct 
[R4-bgp-a]import-route static

2）R6起rip，R7起ospf

[R6]rip 1
[R6-rip-1]ver 2 
[R6-rip-1]network 192.168.1.0  
[R6-rip-1]network 192.168.2.0

[R2]rip 1 vpn-instance b
[R2-rip-1]ver 2 
[R2-rip-1]network 192.168.2.0

[R7]ospf 1 router-id 5.5.5.5  
[R7-ospf-1]area 0   
[R7-ospf-1-area-0.0.0.0]network 192.168.3.1 0.0.0.0    
[R7-ospf-1-area-0.0.0.0]network 192.168.4.2 0.0.0.0

[R4]ospf 2 vpn-instance b  
[R4-ospf-2]area 0   
[R4-ospf-2-area-0.0.0.0]network 192.168.3.2 0.0.0.0

3）r2，r4上重发布

[R2]rip 1 vpn-instance b  
[R2-rip-1]import-route bgp
[R2-rip-1]q
[R2]bgp 1      
[R2-bgp]ipv4-family vpn-instance b
[R2-bgp-b]import-route rip 1

[R4]ospf 2 vpn-instance b 
[R4-ospf-2]import-route bgp
[R4-ospf-2]q
[R4]bgp 1
[R4-bgp]ipv4    
[R4-bgp]ipv4-family vpn-instance b 
[R4-bgp-b]import-route ospf 2

R3和R7上进行缺省路由的配置

[R3]ip route-static 0.0.0.0 0 34.1.1.2

[R7]ip route-static 0.0.0.0 0 47.1.1.1

测试：