【正文】 /1/2 create *A:PE2configservicevprnif$ address *A:PE2configservicevprnif$ sap 2/1/2 create *A:PE2configservicevprnifsap$ back *A:PE2configservicevprnif$ back *A:PE2configservicevprn autobind ldp *A:PE2configservicevprn no shutdown 按圖51配置各CE的接口IP地址，配置過(guò)程略。(4) 在PE與CE之間建立OSPF、EBGP對(duì)等體關(guān)系，引入VPN路由 配置PE1的路由策略。*A:PE1 configure router policyoptions *A:PE1configrouterpolicyoptions begin *A:PE1configrouterpolicyoptions policystatement vpnospf *A:PE1configrouterpolicyoptionspolicystatement$ entry 1 *A:PE1configrouterpolicyoptionspolicystatemententry$ to protocol ospf *A:PE1configrouterpolicyoptionspolicystatemententry action accept *A:PE1configrouterpolicyoptionspolicystatemententryaction back *A:PE1configrouterpolicyoptionspolicystatemententry back *A:PE1configrouterpolicyoptionspolicystatement back *A:PE1configrouterpolicyoptions mit *A:PE1configrouterpolicyoptions exit*A:PE1configservice vprn 100 customer 1 create *A:PE1configservicevprn ospf *A:PE1configservicevprnospf$ area *A:PE1configservicevprnospf$ export vpnospf*A:PE1configservicevprnospfarea$ interface GE2/1/1 *A:PE1configservicevprnospfarea$ back *A:PE1configservicevprnospf back *A:PE1configservicevprn back *A:PE1configservice vprn 200 customer 1 create*A:PE1configservicevprn ospf *A:PE1configservicevprnospf$ export vpnospf*A:PE1configservicevprnospf$ area *A:PE1configservicevprnospfarea$ interface GE2/1/2 *A:PE1configservicevprnospfarea$ back *A:PE1configservicevprnospf back *A:PE1configservicevprn no shutdown 配置PE2的路由策略。*A:PE2 configure router policyoptions *A:PE2configrouterpolicyoptions begin *A:PE2configrouterpolicyoptions policystatement vpnbgp *A:PE2configrouterpolicyoptionspolicystatement$ entry 1 *A:PE2configrouterpolicyoptionspolicystatemententry$ to protocol bgp *A:PE2configrouterpolicyoptionspolicystatemententry action accept *A:PE2configrouterpolicyoptionspolicystatemententryaction back *A:PE2configrouterpolicyoptionspolicystatemententry back *A:PE2configrouterpolicyoptionspolicystatement back *A:PE2configrouterpolicyoptions mit *A:PE2configrouterpolicyoptions exit*A:PE2 configure service *A:PE2configservice vprn 100 customer 1 create *A:PE2configservicevprn autonomoussystem 500 *A:PE2configservicevprn bgp *A:PE2configservicevprnbgp$ group ce *A:PE2configservicevprnbgpgroup type external *A:PE2configservicevprnbgpgroup peeras 400 *A:PE2configservicevprnbgpgroup family ipv4 *A:PE2configservicevprnbgpgroup localaddress *A:PE2configservicevprnbgpgroup neighbor *A:PE2configservicevprnbgpgroupneighbor back *A:PE2configservicevprnbgpgroup back *A:PE2configservicevprnbgp back *A:PE2configservicevprn no shutdown*A:PE2configservicevprn back*A:PE2configservice vprn 200 customer 1 create *A:PE2configservicevprn autonomoussystem 500 *A:PE2configservicevprn bgp *A:PE2configservicevprnbgp$ group ce *A:PE2configservicevprnbgpgroup type external *A:PE2configservicevprnbgpgroup peeras 400 *A:PE2configservicevprnbgpgroup family ipv4 *A:PE2configservicevprnbgpgroup localaddress *A:PE2configservicevprnbgpgroup neighbor *A:PE2configservicevprnbgpgroupneighbor back *A:PE2configservicevprnbgpgroup back *A:PE2configservicevprnbgp back *A:PE2configservicevprn no shutdown(5) 在PE之間建立MPIBGP對(duì)等體關(guān)系 配置PE1。*A:PE1 configure router *A:PE1configrouter autonomoussystem 500 *A:PE1configrouter bgp *A:PE1configrouterbgp group mpls *A:PE1configrouterbgpgroup$ family vpnipv4 *A:PE1configrouterbgpgroup$ type internal *A:PE1configrouterbgpgroup$ localaddress *A:PE1configrouterbgpgroup$ neighbor *A:PE1configrouterbgpgroupneighbor$ back *A:PE1configrouterbgpgroup back *A:PE1configrouterbgp 配置PE2。*A:PE2 configure router *A:PE2configrouter autonomoussystem 500 *A:PE2configrouter bgp *A:PE2configrouterbgp group mpls *A:PE2configrouterbgpgroup$ family vpnipv4 *A:PE2configrouterbgpgroup$ type internal *A:PE2configrouterbgpgroup$ localaddress *A:PE2configrouterbgpgroup$ neighbor *A:PE2configrouterbgpgroupneighbor$ back *A:PE2configrouterbgpgroup back *A:PE2configrouterbgp (6) 檢查配置結(jié)果在PE路由器上執(zhí)行display ip routingtable vpninstance命令，可以看到去往對(duì)端CE的路由。以PE1的顯示為例：5. 配置文件 配置Hubamp。Spoke的VPRN示例1. 組網(wǎng)需求如圖52，SpokeCE之間的通信通過(guò)中心站點(diǎn)HubCE控制，即SpokeCE之間的流量經(jīng)過(guò)HubCE轉(zhuǎn)發(fā)，而不是只經(jīng)過(guò)HubPE轉(zhuǎn)發(fā)。圖52 Hubamp。Spoke組網(wǎng)圖2. 配置思路本例配置主要思路是：(1) HubPE與SpokePE建立IBGP鄰居關(guān)系，SpokePE之間不建立IBGP鄰居關(guān)系，不交換VPN路由信息；(2) 在HubPE上創(chuàng)建兩個(gè)VPN實(shí)例，其接收的VPNtarget團(tuán)體屬性分別為兩個(gè)SpokePE發(fā)布的VPNtarget團(tuán)體屬性值，設(shè)置發(fā)布的VPNtarget團(tuán)體屬性值與接收的VPNtarget團(tuán)體屬性不同；(3) 在SpokePE上創(chuàng)建一個(gè)VPN實(shí)例，引入VPNtarget團(tuán)體屬性值為HubPE發(fā)布的VPNtarget團(tuán)體屬性值，對(duì)發(fā)布的路由設(shè)置VPNtarget團(tuán)體屬性值；(4) CE和PE之間使用BGP；(5) HubPE和SpokePE上配置接收AS重復(fù)1次的路由通過(guò)。3. 數(shù)據(jù)準(zhǔn)備l HubPE和SpokePE的VPN實(shí)例名、路由標(biāo)志（RouteDistinguisher）及VPNTarget屬性4. 配置步驟(1) 在骨干網(wǎng)上配置IGP協(xié)議，實(shí)現(xiàn)骨干網(wǎng)HubPE和SpokePE的互通本例中采用OSPF，具體配置過(guò)程見(jiàn)上一例。(2) 在骨干網(wǎng)上配置MPLS基本能力和MPLS LDP，建立LDP LSP具體配置過(guò)程見(jiàn)上一例。(3) 在各PE路由器上配置VPN實(shí)例，將CE接入PE。amp。 說(shuō)明：注意HubPE與SpokePE上的VPN Target屬性設(shè)置。 配置SpokePE1。*A:SpokePE1config port 2/1/1 *A:SpokePE1configport ethernet mode access*A:SpokePE1configport no shutdown*A:SpokePE1configport exit*A:SpokePE1configservicevprn back*A:SpokePE1configservice vprn 200 customer 1 create *A:SpokePE1configservicevprn$ routedistinguisher 500:200 *A:SpokePE1configservicevprn$ vrftarget import target:500:200 export target:500:100 *A:SpokePE1configservicevprn$ interface GE2/1/1 create *A:SpokePE1configservicev