华为MPLS VPV配置

ere

配置步骤

一、在PE路由器上配置VRF（虚拟路由转发），VRF将路由器的2个实例分割，实例之间不能直接通信。 二、在PE和P路由器上配置路由协议，互联网的内部路由器可以互通 三、在PE设备之间配置BGP协议，BGP协议支持标签转发 四、在PE和P路由器上配置MPLS协议，将端口设置允许MPLS协议 五、配置VPN 六、配置VRF路由注入，让PE间设备能够学习到对方的路由协议

PE1配置

[PE1]displaycurrent-configuration [V200R003C00] # sysnamePE1 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # ipvpn-instancevpna ipv4-family route-distinguisher100:1 vpn-target100:3export-extcommunity vpn-target100:3import-extcommunity # ipvpn-instancevpnb ipv4-family route-distinguisher100:2 vpn-target100:4export-extcommunity vpn-target100:4import-extcommunity # mplslsr-id3.3.3.3 mpls lsp-triggerall # mplsldp # # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress34.1.1.3255.255.255.0 mpls mplsldp # interfaceGigabitEthernet0/0/1 ipbindingvpn-instancevpnb ipaddress23.1.1.3255.255.255.0 # interfaceGigabitEthernet0/0/2 ipbindingvpn-instancevpna ipaddress13.1.1.3255.255.255.0 # interfaceNULL0 # interfaceLoopBack0 ipaddress3.3.3.3255.255.255.0 # bgp100 peer5.5.5.5as-number100 peer5.5.5.5connect-interfaceLoopBack0 # ipv4-familyunicast undosynchronization peer5.5.5.5enable peer5.5.5.5next-hop-local # ipv4-familyvpnv4 policyvpn-target peer5.5.5.5enable # ipv4-familyvpn-instancevpna import-routerip1 # ipv4-familyvpn-instancevpnb import-routerip2 # ospf1 area0.0.0.0 network3.3.3.00.0.0.255 network34.1.1.00.0.0.255 # rip1vpn-instancevpna undosummary version2 network13.0.0.0 import-routebgp # rip2vpn-instancevpnb undosummary version2 network23.0.0.0 network2.0.0.0 import-routebgp # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return

PE2配置

[PE2]displaycurrent-configuration [V200R003C00] # sysnamePE2 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # ipvpn-instancevpna ipv4-family route-distinguisher100:1 vpn-target100:3export-extcommunity vpn-target100:3import-extcommunity # ipvpn-instancevpnb ipv4-family route-distinguisher100:2 vpn-target100:4export-extcommunity vpn-target100:4import-extcommunity # mplslsr-id5.5.5.5 mpls lsp-triggerall # mplsldp # # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress45.1.1.5255.255.255.0 mpls mplsldp # interfaceGigabitEthernet0/0/1 ipbindingvpn-instancevpna ipaddress76.1.1.6255.255.255.0 # interfaceGigabitEthernet0/0/2 ipbindingvpn-instancevpnb ipaddress86.1.1.6255.255.255.0 # interfaceNULL0 # interfaceLoopBack0 ipaddress5.5.5.5255.255.255.0 # bgp100 peer3.3.3.3as-number100 peer3.3.3.3connect-interfaceLoopBack0 # ipv4-familyunicast undosynchronization peer3.3.3.3enable peer3.3.3.3next-hop-local # ipv4-familyvpnv4 policyvpn-target peer3.3.3.3enable # ipv4-familyvpn-instancevpna import-routerip1 # ipv4-familyvpn-instancevpnb import-routerip2 # ospf1 area0.0.0.0 network5.5.5.00.0.0.255 network45.1.1.00.0.0.255 # rip1vpn-instancevpna undosummary version2 network76.0.0.0 import-routebgp # rip2vpn-instancevpnb undosummary version2 network86.0.0.0 import-routebgp # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return

P配置

[P]displaycurrent-configuration [V200R003C00] # sysnameP # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # mplslsr-id4.4.4.4 mpls lsp-triggerall # mplsldp # # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress34.1.1.4255.255.255.0 mpls mplsldp # interfaceGigabitEthernet0/0/1 ipaddress45.1.1.4255.255.255.0 mpls mplsldp # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress4.4.4.4255.255.255.0 # ospf1 area0.0.0.0 network4.4.4.00.0.0.255 network34.1.1.00.0.0.255 network45.1.1.00.0.0.255 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return

siteA1配置

[siteA-1]displaycurrent-configuration [V200R003C00] # sysnamesiteA-1 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress13.1.1.1255.255.255.0 # interfaceGigabitEthernet0/0/1 # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress1.1.1.1255.255.255.0 # rip1 undosummary version2 network1.0.0.0 network13.0.0.0 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return

siteA2配置

[siteA-2]displaycurrent-configuration [V200R003C00] # sysnamesiteA-2 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress76.1.1.7255.255.255.0 # interfaceGigabitEthernet0/0/1 # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress6.6.6.6255.255.255.0 # rip1 undosummary version2 network6.0.0.0 network76.0.0.0 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return

siteB1配置

[siteB-1]displaycurrent-configuration [V200R003C00] # sysnamesiteB-1 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress23.1.1.2255.255.255.0 # interfaceGigabitEthernet0/0/1 # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress2.2.2.2255.255.255.0 # rip1 undosummary version2 network2.0.0.0 network23.0.0.0 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return

siteB2配置

[siteB-2]displaycurrent-configuration [V200R003C00] # sysnamesiteB-2 # snmp-agentlocal-engineid800007DB03000000000000 snmp-agent # clocktimezoneIndianStandardTimeminus05:13:20 clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005 # dropillegal-macalarm # setcpu-usagethreshold80restore75 # aaa authentication-schemedefault authorization-schemedefault accounting-schemedefault domaindefault domaindefault_admin local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-useradminservice-typehttp # firewallzoneLocal priority15 # interfaceGigabitEthernet0/0/0 ipaddress86.1.1.8255.255.255.0 # interfaceGigabitEthernet0/0/1 # interfaceGigabitEthernet0/0/2 # interfaceNULL0 # interfaceLoopBack0 ipaddress7.7.7.7255.255.255.0 # rip1 undosummary version2 network86.0.0.0 network7.0.0.0 # user-interfacecon0 authentication-modepassword user-interfacevty04 user-interfacevty1620 # wlanac # return

wyyy721

只要不下流，我们就是主流!

binghai03

我在马路边丢了一分钱

sunren

帮你顶下哈！！

ty9919

为中华而努力读书!一包中华好多钱啊~~~

阿尔哦覅和

床上运动也可以减肥的，你们都不知道吗？

奥尔覅几22

我不在江湖,但江湖中有我的传说。