MPLS Virtual Private Network（虚拟专用网）基础实验

实验拓扑：

【一】在MPLS VPN骨干网运行ospf，实现骨干网内部网络的互通。
内部IGP为后期MP-BGP对等体关系建立、LDP对等体关系建立、以及LDP标签分发做铺垫。该ospf进程属于根实例。在PE1，P1，P2，PE2创建Loopback0接口，用于实现骨干网络内部互通的ospf进程的Process-ID统一为100。

配置完成路由：

【二】全局和接口激活MPLS和LDP
[PE1]mpls lsr-id 2.2.2.2
[PE1]mpls
Info: Mpls starting, please wait… OK!
[PE1-mpls]q
[PE1]mpls ldp
[PE1-mpls-ldp]q
[PE1]inter g0/0/1
[PE1-GigabitEthernet0/0/1]mpls
[PE1-GigabitEthernet0/0/1]mpls ldp
[PE1-GigabitEthernet0/0/1]q

[P1]mpls lsr-id 3.3.3.3
[P1]mpls
Info: Mpls starting, please wait… OK!
[P1-mpls]q
[P1]mpls ldp
[P1-mpls-ldp]inter g0/0/0
[P1-GigabitEthernet0/0/0]mpls
[P1-GigabitEthernet0/0/0]mpls ldp
[P1-GigabitEthernet0/0/0]inter g0/0/1
[P1-GigabitEthernet0/0/1]mpls
[P1-GigabitEthernet0/0/1]mpls ldp

[P2]mpls lsr-id 4.4.4.4
[P2]mpls
Info: Mpls starting, please wait… OK!
[P2-mpls]q
[P2]mpls ldp
[P2-mpls-ldp]inter g0/0/0
[P2-GigabitEthernet0/0/0]mpls
[P2-GigabitEthernet0/0/0]mpls ldp
[P2-GigabitEthernet0/0/0]inte g0/0/1
[P2-GigabitEthernet0/0/1]mpls
[P2-GigabitEthernet0/0/1]mpls ldp

[PE2]mpls lsr-id 5.5.5.5
[PE2]mpls
Info: Mpls starting, please wait… OK!
[PE2-mpls]q
[PE2]mpls ldp
[PE2-mpls-ldp]inter g0/0/0
[PE2-GigabitEthernet0/0/0]mpls
[PE2-GigabitEthernet0/0/0]mpls ldp
查看LDP邻居关系的建立：

查看LSP的建立，尤其是2.2和5.5两条路由的LSP建立情况，因为这两个地址是VPNV4路由的下一跳IP地址。

【三】在PE1和PE2上创建VRF，并将连接CE设备的接口分配给相应的VRF，然后配置PE-CE间的动态路由协议。
客户A的CE设备的接口分配给对应VRF。然后PE1需与CE1建立基于VRF的BGP对等体关系，而在PE2上，则需要部署OSPF，并与CE2形成邻接关系，该OSPF进程必须与VRF绑定，而且需与该设备已经存在的OSPF进程100进行区分,即使用不同的Process-ID。

[PE1]ip vpn-instance ?
STRING<1-31> VPN instance name
[PE1]ip vpn-instance A
[PE1-vpn-instance-A]route-distinguisher 64538:100
[PE1-vpn-instance-A-af-ipv4]vpn-target 64538:1 export-extcommunity ?
Please press ENTER to execute command
[PE1-vpn-instance-A-af-ipv4]vpn-target 64538:1 export-extcommunity
EVT Assignment result:
Info: VPN-Target assignment is successful.
[PE1-vpn-instance-A-af-ipv4]vpn-target 64539:2 import-extcommunity
IVT Assignment result:
Info: VPN-Target assignment is successful.
[PE1-vpn-instance-A-af-ipv4]q
[PE1-vpn-instance-A]q

[PE1]inter g0/0/0
[PE1-GigabitEthernet0/0/0]ip binding vpn-instance A
Sep 5 2022 17:22:07-08:00 PE1 %%01IFNET/4/LINK_STATE(l)[8]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the DOWN state.
Info: All IPv4 related configurations on this interface are removed!
Info: All IPv6 related configurations on this interface are removed!
[PE1-GigabitEthernet0/0/0]ip add 172.16.0.1 30
Sep 5 2022 17:22:19-08:00 PE1 %%01IFNET/4/LINK_STATE(l)[9]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.

VRFA的RD值指定为64538:100，Export RT及Import RT分别为64538:1，64539:2
并将对应接口分配给VRF A

PE1需要与CE1建立EBGP邻居：
[PE1]bgp 2345
[PE1-bgp]ipv4-family ?
multicast Specify multicast address family
unicast Specify unicast address family
vpn-instance Specify VPN instance
vpnv4 Specify VPNv4 address family
[PE1-bgp]ipv4-family vpnv4
[PE1-bgp]ipv4-family vpn-instance A
[PE1-bgp-A]router-id 172.16.0.1
[PE1-bgp-A]peer 172.16.0.2 as-number 64538

CE1与PE1建立EBGP对等体关系，传统BGP配置,并将172.16.1.0发布到BGP：
[CE1]bgp 64538
[CE1-bgp]router-id 172.16.0.2
[CE1-bgp]peer 172.16.0.1 as-number 2345
[CE1-bgp]network 172.16.1.0 24
[CE1-bgp]

PE2配置：
[PE2]ip vpn-instance A
[PE2-vpn-instance-A]route-distinguisher 64539:200
[PE2-vpn-instance-A-af-ipv4]vpn-target 64538:1 import-extcommunity
IVT Assignment result:
Info: VPN-Target assignment is successful.
[PE2-vpn-instance-A-af-ipv4]vpn-target 64539:2 export-extcommunity
EVT Assignment result:
Info: VPN-Target assignment is successful.
[PE2-vpn-instance-A-af-ipv4]q
[PE2-vpn-instance-A]q

[PE2]inter g0/0/1
[PE2-GigabitEthernet0/0/1]ip binding vpn-instance A
Sep 5 2022 17:38:46-08:00 PE2 %%01IFNET/4/LINK_STATE(l)[6]:The line protocol IP
on the interface GigabitEthernet0/0/1 has entered the DOWN state.
Info: All IPv4 related configurations on this interface are removed!
Info: All IPv6 related configurations on this interface are removed!
[PE2-GigabitEthernet0/0/1]ip add 172.16.0.5 30
Sep 5 2022 17:39:00-08:00 PE2 %%01IFNET/4/LINK_STATE(l)[7]:The line protocol IP
on the interface GigabitEthernet0/0/1 has entered the UP state.

[PE2]ospf 1 vpn-instance A
[PE2-ospf-1]area 0
[PE2-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.3

CE2配置：：
[CE2]ospf 1 router-id 6.6.6.6
[CE2-ospf-1]area 0
[CE2-ospf-1-area-0.0.0.0]net 172.16.2.0 0.0.0.255
[CE2-ospf-1-area-0.0.0.0]net 172.16.0.6 0.0.0.3
[CE2-ospf-1-area-0.0.0.0]q

在PE1上查看VRF A的路由表学习到的客户路由：

在PE2上查看VRF A的路由表学习到的客户路由：

【四】在PE1与PE2之间配置MP-BGP，并且双方基于Lopback0接口建立MP-BGP对等体
同属于骨干网络采用相同的AS号2345
PE1配置：
[PE1]bgp 2345
[PE1-bgp]router-id 2.2.2.2
[PE1-bgp]undo default ipv4-unicast
[PE1-bgp]peer 5.5.5.5 as-number 2345
[PE1-bgp]peer 5.5.5.5 connect-interface LoopBack 0
[PE1-bgp]ipv4-family vpnv4 （unicast）
[PE1-bgp-af-vpnv4]peer 5.5.5.5 enable

PE2配置：
[PE2]bgp 2345
[PE2-bgp]router-id 5.5.5.5
[PE2-bgp]undo default ipv4-unicast
[PE2-bgp]peer 2.2.2.2 as-number 2345
[PE2-bgp]peer 2.2.2.2 connect-interface LoopBack 0
[PE2-bgp]ipv4-family vpnv4 unicast
[PE2-bgp-af-vpnv4]peer 2.2.2.2 enable

查看PE1与PE2 BGP对等体建立关系：

【五】在PE设备上根据实际情况配置路由引入：
由于站点1，PE-CE建立BGP对等体关系：所有不需要配置引入：
查看VRF实例中BGP路由

客户路由1.0已经存在PE的BGP路由表中，PE会自动的将该BGP路由转换成VPNv4路由。
查看VPNv4路由：[PE1]dis bgp vpnv4 all routing-table

在PE2上进行配置

[PE2]bgp 2345
[PE2-bgp]ipv4-family vpn-instance A
[PE2-bgp-A]import-route ospf 1

[PE2]ospf 1
[PE2-ospf-1]dis this
[V200R003C00]

ospf 1 vpn-instance A
area 0.0.0.0
network 172.16.0.4 0.0.0.3

return
[PE2-ospf-1]import-route bgp

查看PE2上的VPNV4路由信息：[PE2]dis bgp vpnv4 all routing-table

PE2将BGP路由1.0引入OSPF，并通过OSPF通告给CE2：