hcie datacome srv6

X_PE1
ipv6
int ethe3/0/0
ipv6 enable
ipv6 address fc01::10:1 126

int ethe3/0/1
ipv6 enable
ipv6 address fc01::10:5 126

int ethe3/0/2
ipv6 enable
ipv6 address fc01::10:9 126

int loop 0
ipv6 enable
ipv6 address fc01::1 128

X_PE2
ipv6
int ethe3/0/0
ipv6 enable
ipv6 address fc01::10:2 126

int ethe3/0/1
ipv6 enable
ipv6 address fc01::10:D 126

int ethe3/0/2
ipv6 enable
ipv6 address fc01::10:11 126

int loop 0
ipv6 enable
ipv6 address fc00::2 128

Y_PE1
ipv6
int ethe3/0/0
ipv6 enable
ipv6 address fc01::10:15 126

int ethe3/0/1
ipv6 enable
ipv6 address fc01::10:6 126

int ethe3/0/2
ipv6 enable
ipv6 address fc01::10:19 126

int loop 0
ipv6 enable
ipv6 address fc00::3 128

Y_PE2
ipv6
int ethe3/0/0
ipv6 enable
ipv6 address fc01::10:16 126

int ethe3/0/1
ipv6 enable
ipv6 address fc01::10:E 126

int ethe3/0/2
ipv6 enable
ipv6 address fc01::10:1D 126

int loop 0
ipv6 enable
ipv6 address fc00::4 128

Z_PE1
ipv6
int ethe3/0/0
ipv6 enable
ipv6 address fc01::10:21 126

int ethe3/0/1
ipv6 enable
ipv6 address fc01::10:A 126

int ethe3/0/2
ipv6 enable
ipv6 address fc01::10:1A 126

int loop 0
ipv6 enable
ipv6 address fc00::5 128

Z_PE2
ipv6
int ethe3/0/0
ipv6 enable
ipv6 address fc01::10:22 126

int ethe3/0/1
ipv6 enable
ipv6 address fc01::10:12 126

int ethe3/0/2
ipv6 enable
ipv6 address fc01::10:1E 126

int loop 0
ipv6 enable
ipv6 address fc00::6 128

ISIS基础配置
X_PE1
router id 1.0.0.1
isis
is-level level-2
cost-style wide
network-entity 49.0001.0010.0000.0001.00
domain-authentication-mode md5 cipher Huawei@123
ipv6 enable topology ipv6

inter loop 0
isis ipv6 enable 1

int ethe3/0/0
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/1
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/2
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

X_PE2
router id 2.0.0.2
isis
is-level level-2
cost-style wide
network-entity 49.0001.0020.0000.0002.00
domain-authentication-mode md5 cipher Huawei@123
ipv6 enable topology ipv6

inter loop 0
isis ipv6 enable 1

int ethe3/0/0
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/1
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/2
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

Y_PE1
router id 3.0.0.3
isis
is-level level-2
cost-style wide
network-entity 49.0001.0030.0000.0003.00
domain-authentication-mode md5 cipher Huawei@123
ipv6 enable topology ipv6

inter loop 0
isis ipv6 enable 1

int ethe3/0/0
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/1
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/2
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

Y_PE2
router id 4.0.0.4
isis
is-level level-2
cost-style wide
network-entity 49.0001.0040.0000.0004.00
domain-authentication-mode md5 cipher Huawei@123
ipv6 enable topology ipv6

inter loop 0
isis ipv6 enable 1

int ethe3/0/0
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/1
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/2
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

Z_PE1
router id 5.0.0.5
isis
is-level level-2
cost-style wide
network-entity 49.0001.0050.0000.0005.00
domain-authentication-mode md5 cipher Huawei@123
ipv6 enable topology ipv6

inter loop 0
isis ipv6 enable 1

int ethe3/0/0
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/1
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/2
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

Z_PE1
router id 6.0.0.6
isis
is-level level-2
cost-style wide
network-entity 49.0001.0060.0000.0006.00
domain-authentication-mode md5 cipher Huawei@123
ipv6 enable topology ipv6

inter loop 0
isis ipv6 enable 1

int ethe3/0/0
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/1
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

int ethe3/0/2
isis ipv6 enable 1
isis circuit-type p2p
isis ppp-negotiation 2-way
isis authentication-mode md5 cipher Huawei@123

验证
dis isis route ipv6

ISIS快速收敛
X_PE1
bfd
isis
ipv6 bfd all-interfaces enable
ipv6 bfd all-interfaces min-rx-interval 15 min-tx-interval 15 frr-binding
ipv6 frr
loop-free-alternate level-2
ti-lfa level-2

X_PE2
bfd
isis
ipv6 bfd all-interfaces enable
ipv6 bfd all-interfaces min-rx-interval 15 min-tx-interval 15 frr-binding
ipv6 frr
loop-free-alternate level-2
ti-lfa level-2

Y_PE1
bfd
isis
ipv6 bfd all-interfaces enable
ipv6 bfd all-interfaces min-rx-interval 15 min-tx-interval 15 frr-binding
ipv6 frr
loop-free-alternate level-2
ti-lfa level-2

Y_PE2
bfd
isis
ipv6 bfd all-interfaces enable
ipv6 bfd all-interfaces min-rx-interval 15 min-tx-interval 15 frr-binding
ipv6 frr
loop-free-alternate level-2
ti-lfa level-2

Z_PE1
bfd
isis
ipv6 bfd all-interfaces enable
ipv6 bfd all-interfaces min-rx-interval 15 min-tx-interval 15 frr-binding
ipv6 frr
loop-free-alternate level-2
ti-lfa level-2

Z_PE2
bfd
isis
ipv6 bfd all-interfaces enable
ipv6 bfd all-interfaces min-rx-interval 15 min-tx-interval 15 frr-binding
ipv6 frr
loop-free-alternate level-2
ti-lfa level-2

验证
dis isis ipv6 bfd session all

ISIS路径优选
X_PE1
int ethe3/0/0
isis ipv6 cost 4 level-2

X_PE2
int ethe3/0/0
isis ipv6 cost 4 level-2

Y_PE1
int ethe3/0/0
isis ipv6 cost 4 level-2

Y_PE2
int ethe3/0/0
isis ipv6 cost 4 level-2

Z_PE1
int ethe3/0/0
isis ipv6 cost 3 level-2

Z_PE2
int ethe3/0/0
isis ipv6 cost 3 level-2

验证
dis isis route ipv6
dis ipv6 routing-table fc00::5 verbose
tracert ipv6 -a fc00::1 fc00::5

SRV6基础部署
X_PE1
segment-routing ipv6
encapsulation source-address fc00::1
locator 1 ipv6-prefix fc02:1:: 96 static 16
opcode ::1 end
opcode ::10 end-x interface ethe3/0/0 nexthop fc01::10:2 psp
opcode ::20 end-x interface ethe3/0/1 nexthop fc01::10:6 psp
opcode ::30 end-x interface ethe3/0/2 nexthop fc01::10:a psp
opcode ::100 end-op

isis
segment-routing ipv6 locator 1 auto-sid-disable
ipv6 avoid-microloop segment-routing

查看
dis segment-routing ipv6 local-sid forwarding

X_PE2
segment-routing ipv6
encapsulation source-address fc00::2
locator 1 ipv6-prefix fc02:2:: 96 static 16
opcode ::1 end psp
opcode ::10 end-x interface ethe3/0/0 nexthop fc01::10:1 psp
opcode ::20 end-x interface ethe3/0/1 nexthop fc01::10:e psp
opcode ::30 end-x interface ethe3/0/2 nexthop fc01::10:12 psp
opcode ::100 end-op

isis
segment-routing ipv6 locator 1 auto-sid-disable
ipv6 avoid-microloop segment-routing

查看
dis segment-routing ipv6 local-sid forwarding

Y_PE1
segment-routing ipv6
encapsulation source-address fc00::3
locator 1 ipv6-prefix fc02:3:: 96 static 16
opcode ::1 end psp
opcode ::10 end-x interface ethe3/0/0 nexthop fc01::10:16 psp
opcode ::20 end-x interface ethe3/0/1 nexthop fc01::10:5 psp
opcode ::30 end-x interface ethe3/0/2 nexthop fc01::10:1a psp
opcode ::100 end-op

isis
segment-routing ipv6 locator 1 auto-sid-disable
ipv6 avoid-microloop segment-routing

查看
dis segment-routing ipv6 local-sid forwarding

Y_PE2
segment-routing ipv6
encapsulation source-address fc00::4
locator 1 ipv6-prefix fc02:4:: 96 static 16
opcode ::1 end psp
opcode ::10 end-x interface ethe3/0/0 nexthop fc01::10:15 psp
opcode ::20 end-x interface ethe3/0/1 nexthop fc01::10:d psp
opcode ::30 end-x interface ethe3/0/2 nexthop fc01::10:1e psp
opcode ::100 end-op

isis
segment-routing ipv6 locator 1 auto-sid-disable
ipv6 avoid-microloop segment-routing

查看
dis segment-routing ipv6 local-sid forwarding

Z_PE1
segment-routing ipv6
encapsulation source-address fc00::5
locator 1 ipv6-prefix fc02:5:: 96 static 16
opcode ::1 end psp
opcode ::10 end-x interface ethe3/0/0 nexthop fc01::10:22 psp
opcode ::20 end-x interface ethe3/0/1 nexthop fc01::10:9 psp
opcode ::30 end-x interface ethe3/0/2 nexthop fc01::10:19 psp
opcode ::100 end-op

isis
segment-routing ipv6 locator 1 auto-sid-disable
ipv6 avoid-microloop segment-routing

查看
dis segment-routing ipv6 local-sid forwarding

Z_PE2
segment-routing ipv6
encapsulation source-address fc00::6
locator 1 ipv6-prefix fc02:6:: 96 static 16
opcode ::1 end psp
opcode ::10 end-x interface ethe3/0/0 nexthop fc01::10:21 psp
opcode ::20 end-x interface ethe3/0/1 nexthop fc01::10:11 psp
opcode ::30 end-x interface ethe3/0/2 nexthop fc01::10:1d psp
opcode ::100 end-op

isis
segment-routing ipv6 locator 1 auto-sid-disable
ipv6 avoid-microloop segment-routing

查看
dis segment-routing ipv6 local-sid forwarding
dis isis route

SRv6 Policy部署
X_PE1
segment-routing ipv6
segment-list X_PE1-Z_PE1-1
index 5 sid ipv6 fc02:1::30

segment-list X_PE1-Z_PE1-2
index 5 sid ipv6 fc02:1::10
index 10 sid ipv6 fc02:2::30
index 15 sid ipv6 fc02:6::10

srv6-te policy X_PE1-Z_PE1 endpoint fc00::5 color 101
candidate-path preference 100
segment-list X_PE1-Z_PE1-1

candidate-path preference 50
segment-list X_PE1-Z_PE1-2

tunnel-policy p1
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

Z_PE1
segment-routing ipv6
segment-list Z_PE1-X_PE1-1
index 5 sid ipv6 fc02:5::20

segment-list Z_PE1-X_PE1-2
index 5 sid ipv6 fc02:5::10
index 10 sid ipv6 fc02:6::20
index 15 sid ipv6 fc02:2::10

srv6-te policy Z_PE1-X_PE1 endpoint fc00::1 color 101
candidate-path preference 100
segment-list Z_PE1-X_PE1-1

candidate-path preference 50
segment-list Z_PE1-X_PE1-2

tunnel-policy p1
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

X_PE2
segment-routing ipv6
segment-list X_PE2-Z_PE2-1
index 5 sid ipv6 fc02:2::30

segment-list X_PE2-Z_PE2-2
index 5 sid ipv6 fc02:2::10
index 10 sid ipv6 fc02:1::30
index 15 sid ipv6 fc02:5::10

srv6-te policy X_PE2-Z_PE2 endpoint fc00::6 color 102
candidate-path preference 100
segment-list X_PE2-Z_PE2-1

candidate-path preference 50
segment-list X_PE2-Z_PE2-2

tunnel-policy p1
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

Z_PE2
segment-routing ipv6
segment-list Z_PE2-X_PE2-1
index 5 sid ipv6 fc02:6::20

segment-list Z_PE2-X_PE2-2
index 5 sid ipv6 fc02:6::10
index 10 sid ipv6 fc02:5::30
index 15 sid ipv6 fc02:1::10

srv6-te policy Z_PE2-X_PE2 endpoint fc00::2 color 102
candidate-path preference 100
segment-list Z_PE2-X_PE2-1

candidate-path preference 50
segment-list Z_PE2-X_PE2-2

tunnel-policy p1
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

Y_PE1
segment-routing ipv6
segment-list X_PE1-Z_PE1-1
index 5 sid ipv6 fc02:3::30

segment-list Y_PE1-Z_PE1-2
index 5 sid ipv6 fc02:3::10
index 10 sid ipv6 fc02:4::30
index 15 sid ipv6 fc02:6::10

srv6-te policy Y_PE1-Z_PE1 endpoint fc00::5 color 103
candidate-path preference 100
segment-list Y_PE1-Z_PE1-1

candidate-path preference 50
segment-list Y_PE1-Z_PE1-2

tunnel-policy p1
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

Z_PE1
segment-routing ipv6
segment-list Z_PE1-Y_PE1-1
index 5 sid ipv6 fc02:5::30

segment-list Z_PE1-Y_PE1-2
index 5 sid ipv6 fc02:5::10
index 10 sid ipv6 fc02:6::30
index 15 sid ipv6 fc02:4::10

srv6-te policy Z_PE1-Y_PE1 endpoint fc00::3 color 103
candidate-path preference 100
segment-list Z_PE1-Y_PE1-1

candidate-path preference 50
segment-list Z_PE1-Y_PE1-2

tunnel-policy p1
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

Y_PE2
segment-routing ipv6
segment-list Y_PE2-Z_PE2-1
index 5 sid ipv6 fc02:4::30

segment-list Y_PE2-Z_PE2-2
index 5 sid ipv6 fc02:4::10
index 10 sid ipv6 fc02:3::30
index 15 sid ipv6 fc02:5::10

srv6-te policy Y_PE2-Z_PE2 endpoint fc00::6 color 104
candidate-path preference 100
segment-list Y_PE2-Z_PE2-1

candidate-path preference 50
segment-list Y_PE2-Z_PE2-2

tunnel-policy p1
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

Z_PE2
segment-routing ipv6
segment-list Z_PE2-Y_PE2-1
index 5 sid ipv6 fc02:3::30

segment-list Z_PE2-Y_PE2-2
index 5 sid ipv6 fc02:6::10
index 10 sid ipv6 fc02:5::30
index 15 sid ipv6 fc02:3::10

srv6-te policy Z_PE2-Y_PE2 endpoint fc00::4 color 104
candidate-path preference 100
segment-list Z_PE2-Y_PE2-1

candidate-path preference 50
segment-list Z_PE2-Y_PE2-2

tunnel-policy p1
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1

SRv6 policy快速收敛SBFD
X_PE1
te ipv6-router-id fc00::1
sbfd
destination ipv6 fc00::5 remote-discriminator 1.0.0.5
reflector discriminator 5.0.0.1

segment-routing ipv6
srv6-te-policy backup hot-standby enable
srv6-te-policy bfd seamless enable
或srv6-te-policy seamless enable

srv6-te-policy path verification enable
srv6-te-policy bfd min-tx-interval 60
或srv6-te-policy seamless min-tx-interval 60
srv6-te-policy bfd min-tx-interval 60 detect-multiplier 3 backup-path

Z_PE1
te ipv6-router-id fc00::5
sbfd
destination ipv6 fc00::1 remote-discriminator 5.0.0.1
reflector discriminator 1.0.0.5

segment-routing ipv6
srv6-te-policy backup hot-standby enable
srv6-te-policy bfd seamless enable

srv6-te-policy path verification enbable
srv6-te-policy bfd min-tx-interval 60
或srv6-te-policy seamless min-tx-interval 60
srv6-te-policy bfd min-tx-interval 60 detect-multiplier 3 backup-path

sbfd
destination ipv6 fc00::3 remote-discriminator 5.0.0.3
refector discriminator 3.0.0.5

X_PE2
te ipv6-router-id fc00::2
sbfd
destination ipv6 fc00::6 remote-discriminator 2.0.0.6
reflector discriminator 6.0.0.2

segment-routing ipv6
srv6-te-policy backup hot-standby enable
srv6-te-policy bfd seamless enable

srv6-te-policy path verification enbable
srv6-te-policy bfd min-tx-interval 60
或srv6-te-policy seamless min-tx-interval 60
srv6-te-policy bfd min-tx-interval 60 detect-multiplier 3 backup-path

Z_PE2
te ipv6-router-id fc00::6
sbfd
destination ipv6 fc00::2 remote-discriminator 6.0.0.2
reflector discriminator 2.0.0.6

segment-routing ipv6
srv6-te-policy backup hot-standby enable
srv6-te-policy bfd seamless enable

srv6-te-policy path verification enbable
srv6-te-policy bfd min-tx-interval 60
或srv6-te-policy seamless min-tx-interval 60
srv6-te-policy bfd min-tx-interval 60 detect-multiplier 3 backup-path

sbfd
destination ipv6 fc00::4 remote-discriminator 6.0.0.4
reflector discriminator 4.0.0.6

Y_PE1
te ipv6-router-id fc00::3
sbfd
destination ipv6 fc00::5 remote-discriminator 3.0.0.5
reflector discriminator 5.0.0.3

segment-routing ipv6
srv6-te-policy backup hot-standby enable
srv6-te-policy bfd seamless enable

srv6-te-policy path verification enbable
srv6-te-policy bfd min-tx-interval 60
或srv6-te-policy seamless min-tx-interval 60
srv6-te-policy bfd min-tx-interval 60 detect-multiplier 3 backup-path

Y_PE2
te ipv6-router-id fc00::4
sbfd
destination ipv6 fc00::6 remote-discriminator 4.0.0.6
reflector discriminator 6.0.0.4

segment-routing ipv6
srv6-te-policy backup hot-standby enable
srv6-te-policy bfd seamless enable

srv6-te-policy path verification enbable
srv6-te-policy bfd min-tx-interval 60
或srv6-te-policy seamless min-tx-interval 60
srv6-te-policy bfd min-tx-interval 60 detect-multiplier 3 backup-path

验证
tracert srv6-te policy policy-name X_PE1-Z_PE1 end-op fc02:5::100
tracert srv6-te policy policy-name X_PE1-Z_PE2 end-op fc02:6::100
tracert srv6-te policy policy-name Y_PE1-Z_PE1 end-op fc02:5::100
tracert srv6-te policy policy-name Y_PE2-Z_PE2 end-op fc02:6::100

evpn建立
X_PE1
bgp 65000
router-id 1.0.0.1
undo default ipv4-unicast
group evpn internal
peer evpn password simple Huawei@123
peer evpn connect-interface loopback0
peer fc00::5 group evpn
peer fc00::6 group evpn
l2vpn-family evpn
peer evpn enable
peer fc00::5 group evpn
peer fc00::6 group evpn
peer evpn advertise encap-type srv6

X_PE2
bgp 65000
router-id 2.0.0.2
undo default ipv4-unicast
group evpn internal
peer evpn password simple Huawei@123
peer evpn connect-interface loopback0
peer fc00::5 group evpn
peer fc00::6 group evpn
l2vpn-family evpn
peer evpn enable
peer fc00::5 group evpn
peer fc00::6 group evpn
peer evpn advertise encap-type srv6

Y_PE1
bgp 65000
router-id 3.0.0.3
undo default ipv4-unicast
group evpn internal
peer evpn password simple Huawei@123
peer evpn connect-interface loopback0
peer fc00::5 group evpn
peer fc00::6 group evpn
l2vpn-family evpn
peer evpn enable
peer fc00::5 group evpn
peer fc00::6 group evpn
peer evpn advertise encap-type srv6

Y_PE2
bgp 65000
router-id 4.0.0.4
undo default ipv4-unicast
group evpn internal
peer evpn password simple Huawei@123
peer evpn connect-interface loopback0
peer fc00::5 group evpn
peer fc00::6 group evpn
l2vpn-family evpn
peer evpn enable
peer fc00::5 group evpn
y
peer fc00::6 group evpn
y
peer evpn advertise encap-type srv6

Z_PE1
bgp 65000
router-id 5.0.0.5
undo default ipv4-unicast
group evpn internal
peer evpn password simple Huawei@123
peer evpn connect-interface loopback0
peer fc00::1 group evpn
peer fc00::2 group evpn
peer fc00::3 group evpn
peer fc00::4 group evpn
l2vpn-family evpn
peer evpn enable
peer fc00::1 group evpn
y
peer fc00::2 group evpn
y
peer fc00::3 group evpn
y
peer fc00::4 group evpn
y
peer evpn advertise encap-type srv6

Z_PE2
bgp 65000
router-id 6.0.0.6
undo default ipv4-unicast
group evpn internal
peer evpn password simple Huawei@123
peer evpn connect-interface loopback0
peer fc00::1 group evpn
peer fc00::2 group evpn
peer fc00::3 group evpn
peer fc00::4 group evpn
l2vpn-family evpn
peer evpn enable
peer fc00::1 group evpn
y
peer fc00::2 group evpn
y
peer fc00::3 group evpn
y
peer fc00::4 group evpn
y
peer evpn advertise encap-type srv6

验证
dis bgp evpn peer

VPN实例部署
X_PE1
ip vpn-instance OA
ipv4-family
route-distinguisher 65000:1
vpn-target 100:1 both evpn
tnl-policy p1 evpn

X_PE2
ip vpn-instance OA
ipv4-family
route-distinguisher 65000:2
vpn-target 100:1 both evpn
tnl-policy p1 evpn

Y_PE1
ip vpn-instance OA
ipv4-family
route-distinguisher 65000:3
vpn-target 100:1 both evpn
tnl-policy p1 evpn

ip vpn-instance R&D
ipv4-family
route-distinguisher 65000:31
vpn-target 300:1 both evpn
tnl-policy p1 evpn

Y_PE2
ip vpn-instance OA
ipv4-family
route-distinguisher 65000:4
vpn-target 100:1 both evpn
tnl-policy p1 evpn

ip vpn-instance R&D
ipv4-family
route-distinguisher 65000:41
vpn-target 300:1 both evpn
tnl-policy p1 evpn

Z_PE1
ip vpn-instance OA
ipv4-family
route-distinguisher 65000:5
vpn-target 100:1 both evpn
tnl-policy p1 evpn

ip vpn-instance R&D
ipv4-family
route-distinguisher 65000:52
vpn-target 300:1 both evpn
tnl-policy p1 evpn

Z_PE2
ip vpn-instance OA
ipv4-family
route-distinguisher 65000:6
vpn-target 100:1 both evpn
tnl-policy p1 evpn

ip vpn-instance R&D
ipv4-family
route-distinguisher 65000:61
vpn-target 300:1 both evpn
tnl-policy p1 evpn

配置PE互联
X_PE1
interface ethe3/0/7
ip binding vpn-instance OA
ip add 10.20.1.2 30

X_PE2
interface ethe3/0/7
ip binding vpn-instance OA
ip add 10.20.1.10 30

Y_PE1
interface ethe3/0/7.10
ip binding vpn-instance OA
encapsulation dot1q-termination
dot1q termination vid 10
arp broadcast enable
ip add 10.20.2.2 30

interface ethe3/0/7.20
ip binding vpn-instance R&D
encapsulation dot1q-termination
dot1q termination vid 20
arp broadcast enable
ip add 10.20.2.6 30

Y_PE2
interface ethe3/0/7.10
ip binding vpn-instance OA
encapsulation dot1q-termination
dot1q termination vid 10
arp broadcast enable
ip add 10.20.2.10 30

interface ethe3/0/7.20
ip binding vpn-instance R&D
encapsulation dot1q-termination
dot1q termination vid 20
arp broadcast enable
ip add 10.20.2.14 30

Z_PE1
interface ethe3/0/7.10
ip binding vpn-instance OA
encapsulation dot1q-termination
dot1q termination vid 10
arp broadcast enable
ip add 10.20.3.2 30

interface ethe3/0/7.20
ip binding vpn-instance R&D
encapsulation dot1q-termination
dot1q termination vid 20
arp broadcast enable
ip add 10.20.3.6 30

Z_PE2
interface ethe3/0/7.10
ip binding vpn-instance OA
encapsulation dot1q-termination
dot1q termination vid 10
arp broadcast enable
ip add 10.20.3.10 30

interface ethe3/0/7.20
ip binding vpn-instance R&D
encapsulation dot1q-termination
dot1q termination vid 20
arp broadcast enable
ip add 10.20.3.14 30

---

配置CE互联地址
X_Export1
int ge0/0/7
undo portswitch
ip add 10.20.1.1 30

int ge0/0/8
undo portswitch
ip add 10.20.1.5 30

X_Export2
interface ge0/0/7
undo portswitch
ip add 10.20.1.9 30

interface ge0/0/8
undo portswitch
ip add 10.20.1.6 30

Y_Export1
interface ge0/0/7
undo portswitch

int ge0/0/7.10
ip binding vpn-instance OA
dot1q termination vid 10
arp broadcast enable
ip add 10.20.2.1 30

int ge0/0/7.20
ip binding vpn-instance R&D
dot1q termination vid 20
arp broadcast enable
ip add 10.20.2.5 30

int g0/0/6
undo portswitch

int g0/0/6.10
ip binding vpn-instance OA
dot1q termination vid 10
arp broadcast enable
ip add 10.20.2.9 30

int g0/0/6.20
ip binding vpn-instance R&D
dot1q termination vid 20
arp broadcast enable
ip add 10.20.2.13 30

Z_Export1
ip vpn-instance OA
ipv4-family
route-distinguisher 65004:1

ip vpn-instance R&D
ipv4-family
route-distinguisher 65004:2

int ge0/0/7
undo portswitch

int ge0/0/7.10
ip binding vpn-instance OA
dot1q termination vid 10
arp broadcast enable
ip add 10.20.3.1 30

int ge0/0/7.20
ip binding vpn-instance R&D
dot1q termination vid 20
arp broadcast enable
ip add 10.20.3.5 30

inter ge0/0/6
undo portswitch

int ge0/0/6.10
ip binding vpn-instance OA
dot1q termination vid 10
arp broadcast enable
ip add 10.20.3.9 30

int ge0/0/6.20
ip binding vpn-instance R&D
dot1q termination vid 20
arp broadcast enable
ip add 10.20.3.13 30

int loop 0
ip binding vpn-instance OA
ip add 10.3.101.254 24

int loop 1
ip binding vpn-instance R&D
ip add 10.3.99.254 24

int loop 2
ip binding vpn-instance R&D
ip add 10.3.100.254 24

PE与CE对接BGP协议
X_PE1
bgp 65000
ipv4-family vpn-instance OA
peer 10.20.1.1 as 65001
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

X_PE2
bgp 65000
ipv4-family vpn-instance OA
peer 10.20.1.9 as 65001
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

X_Export1
bgp 65001
router-id 10.1.0.1
peer 10.20.1.2 as 65000

X_Export2
bgp 65001
router-id 10.1.0.2
peer 10.20.1.10 as 65000

验证
dis bgp peer

Y_PE1
bgp 65000
ipv4-family vpn-instance OA
peer 10.20.2.1 as 65003
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

ipv4-family vpn-instance R&D
peer 10.20.2.5 as 65003
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

Y_PE2
bgp 65000
ipv4-family vpn-instance OA
peer 10.20.2.9 as 65003
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

ipv4-family vpn-instance R&D
peer 10.20.2.13 as 65003
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

Y_Export1
bgp 65003
ipv4-family vpn-instance OA
peer 10.20.2.2 as 65000
peer 10.20.2.10 as 65000

ipv4-family vpn-instance R&D
peer 10.20.2.6 as 65000
peer 10.20.2.14 as 65000

验证
dis bgp vpnv4 all peer

Z_PE1
bgp 65000
ipv4-family vpn-instance OA
peer 10.20.3.1 as 65004
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

ipv4-family vpn-instance R&D
peer 10.20.3.5 as 65004
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

================================
Z_PE2
bgp 65000
ipv4-family vpn-instance OA
peer 10.20.3.9 as 65004
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

ipv4-family vpn-instance R&D
peer 10.20.3.13 as 65004
advertise l2vpn evpn
segment-routing ipv6 locator 1 evpn
segment-routing ipv6 traffic-engineer best-effort evpn

Z_Export1
bgp 65004
router-id 10.3.0.1
ipv4-family vpn-instance OA
peer 10.20.3.2 as 65000
peer 10.20.3.10 as 65000
network 10.3.101.0 24

ipv4-family vpn-instance R&D
peer 10.20.3.6 as 65000
peer 10.20.3.14 as 65000
network 10.3.99.0 24
network 10.3.100.0 24

验证
dis bgp vpnv4 all peer

---

流量转发优化
X_PE2
route-policy MED permit node 10
apply cost 100

bgp 65000
ipv4-family vpn-instance OA
peer 10.20.1.9 route-policy MED export

Z_PE2
route-policy MED permit node 10
apply cost 100

bgp 65000
ipv4-family vpn-instance OA
peer 10.20.3.9 route-policy MED export

Y_PE2
route-policy MED permit node 10
apply cost 100

bgp 65000
ipv4-family vpn-instance OA
peer 10.20.2.9 route-policy MED export

Y_PE1
route-policy MED permit node 10
apply cost 100

bgp 65000
ipv4-family vpn-instance R&D
peer 10.20.2.5 route-policy MED export

Z_PE1
route-policy MED permit node 10
apply cost 100

bgp 65000
ipv4-family vpn-instance R&D
peer 10.20.3.5 route-policy MED export

X_PE1
route-policy color101 permit node 10
apply extcommunity color 0:101

bgp 65000
l2vpn-family evpn
peer fc00::5 route-policy color101 import

Z_PE1
route-policy color101 permit node 10
apply extcommunity color 0:101

bgp 65000
l2vpn-family evpn
peer fc00::1 route-policy color101 import

Y_PE1
route-policy color103 permit node 10
apply extcommunity color 0:103

bgp 65000
l2vpn-family evpn
peer fc00::5 route-policy color103 import

Z_PE1
route-policy color103 permit node 10
apply extcommunity color 0:103

bgp 65000
l2vpn-family evpn
peer fc00::3 route-policy color103 import

Y_PE2
route-policy color104 permit node 10
apply extcommunity color 0:104

bgp 65000
l2vpn-family evpn
peer fc00::6 route-policy color104 import

Z_PE2
route-policy color104 permit node 10
apply extcommunity color 0:104

bgp 65000
l2vpn-family evpn
peer fc00::4 route-policy color104 import

X_PE2
route-policy color104 permit node 10
apply extcommunity color 0:102

bgp 65000
l2vpn-family evpn
peer fc00::6 route-policy color104 import

Z_PE2
route-policy color104 permit node 10
apply extcommunity color 0:102

bgp 65000
l2vpn-family evpn
peer fc00::2 route-policy color104 import

---

X_PE2
route-policy color102 permit node 10
apply extcommunity color 0:102

bgp 65000
l2vpn-family evpn
peer fc00::6 route-policy color102 import

Z_PE2
route-policy color102 permit node 10
apply extcommunity color 0:102

bgp 65000
l2vpn-family evpn
peer fc00::2 route-policy color102 import

双点双向重分布
X_Export1
ospf 1
default cost inherit-metric tag 100
import-route bgp
area 0
network 10.20.1.5 0.0.0.0

ip ip-prefix Guest permit 10.1.101.0 24
ip ip-prefix Guest permit 10.1.102.0 24
ip ip-prefix Guest permit 10.1.103.0 24
ip ip-prefix Guest permit 10.1.104.0 24
ip ip-prefix Guest permit 10.1.105.0 24

route-policy o2b deny node 10
if-match tag 100

route-policy o2b deny node 20
if-match ip-prefix Guest

route-policy o2b permit node 30

bgp 65001
preference 120 255 255
import-route ospf 1 route-policy o2b

X_Export2
ospf 1
default cost inherit-metric tag 100
import-route bgp
area 0
network 10.20.1.6 0.0.0.0

ip ip-prefix Guest permit 10.1.101.0 24
ip ip-prefix Guest permit 10.1.102.0 24
ip ip-prefix Guest permit 10.1.103.0 24
ip ip-prefix Guest permit 10.1.104.0 24
ip ip-prefix Guest permit 10.1.105.0 24

route-policy o2b deny node 10
if-match tag 100

route-policy o2b deny node 20
if-match ip-prefix Guest

route-policy o2b permit node 30

bgp 65001
preference 120 255 255
import-route ospf 1 route-policy o2b

验证
dis ip routing-table 10.3.101.0

Y_Export1
ip ip-prefix deny_default deny 0.0.0.0 0
ip ip-prefix deny_default permit 0.0.0.0 0 less 32

bgp 65003
ipv4-family vpn-instance OA
import-route ospf 2
peer 10.20.2.2 ip-prefix deny_default export
peer 10.20.2.10 ip-prefix deny_default export

ipv4-family vpn-instance R&D
import-route ospf 3

ospf 2
default cost inherit-metric
import-route bgp

ospf 3
default cost inherit-metric
import-route bgp

验证
dis ip routing-table vpn-instance OA verbose
dis ip routing-table vpn-instance R&D verbose
ping -vpn-instance OA -a 10.3.101.254 10.100.2.1
ping -vpn-instance R&D -a 10.3.99.254 10.100.3.1

QoS配置

Y_EXport1
acl 3001
rule permit ip source 10.2.11.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.11.0 0.0.0.255 destination 10.3.100.0 0.0.0.255
rule permit ip source 10.2.12.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.12.0 0.0.0.255 destination 10.3.100.0 0.0.0.255
rule permit ip source 10.2.13.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.13.0 0.0.0.255 destination 10.3.100.0 0.0.0.255
rule permit ip source 10.2.14.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.14.0 0.0.0.255 destination 10.3.100.0 0.0.0.255
rule permit ip source 10.2.15.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.15.0 0.0.0.255 destination 10.3.100.0 0.0.0.255

acl 3002
rule permit ip source 10.2.21.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.21.0 0.0.0.255 destination 10.3.100.0 0.0.0.255
rule permit ip source 10.2.22.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.22.0 0.0.0.255 destination 10.3.100.0 0.0.0.255
rule permit ip source 10.2.23.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.23.0 0.0.0.255 destination 10.3.100.0 0.0.0.255
rule permit ip source 10.2.24.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.24.0 0.0.0.255 destination 10.3.100.0 0.0.0.255
rule permit ip source 10.2.25.0 0.0.0.255 destination 10.3.99.0 0.0.0.255
rule permit ip source 10.2.25.0 0.0.0.255 destination 10.3.100.0 0.0.0.255

traffic classifier RD
if-match acl 3001

traffic classifier Production
if-match acl 3002

traffic behavior RD
remark dscp af41
gts cir 307200
或car cir 307200

traffic behavior Production
remark dscp ef
car cir 102400

traffic policy R&D
classifier RD behavior RD
classifier Production behavior Production

int g0/0/7.20
traffic-policy R&D outbound

int g0/0/6.20
traffic-policy R&D outbound

Y_PE1
port-wred RD
color green low-limit 80 high-limit 100 discard-percentage 20

int g5/0/0
port-queue ef pq shaping 102400 outbound
port-queue af4 wfq shaping 307200 port-wred RD outbound

int g5/0/2
port-queue ef pq shaping 102400 outbound
port-queue af4 wfq shaping 307200 port-wred RD outbound

Y_PE2
port-wred RD
color green low-limit 80 high-limit 100 discard-percentage 20

int g5/0/0
port-queue ef pq shaping 102400 outbound
port-queue af4 wfq shaping 307200 port-wred RD outbound

int g5/0/2
port-queue ef pq shaping 102400 outbound
port-queue af4 wfq shaping 307200 port-wred RD outbound

Z_PE1
port-wred RD
color green low-limit 80 high-limit 100 discard-percentage 20

int g5/0/0
port-queue ef pq shaping 102400 outbound
port-queue af4 wfq shaping 307200 port-wred RD outbound

int ethe3/0/7.20
port-queue ef pq shaping 102400 outbound
port-queue af4 wfq shaping 307200 port-wred RD outbound

Z_PE2
port-wred RD
color green low-limit 80 high-limit 100 discard-percentage 20

int g5/0/0
port-queue ef pq shaping 102400 outbound
port-queue af4 wfq shaping 307200 port-wred RD outbound

int ethe3/0/7.20
port-queue ef pq shaping 102400 outbound
port-queue af4 wfq shaping 307200 port-wred RD outbound