【正文】 amily ipv4 vrf gulouquzhenfu redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf shiyunhui redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf zhongshihua redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf shenglaodongju redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 南京電信城域網(wǎng) ASBR 對接 CN2 ASBR 割接方案 第 28 頁 共 58 頁 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf caizhenju redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf shengcaizhenting redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf nanjingdianxin redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf bianfangzongdui redistribute connected 南京電信城域網(wǎng) ASBR 對接 CN2 ASBR 割接方案 第 29 頁 共 58 頁 no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf langchi redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf jiaotongguanlichu redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunityexitaddressfamily ! addressfamily ipv4 vrf LDJhujiaopingtai redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! 南京電信城域網(wǎng) ASBR 對接 CN2 ASBR 割接方案 第 30 頁 共 58 頁 addressfamily ipv4 vrf vpnbaixiaquzhengfu redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf pukoulaobao redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf vpnxiaguanquzhenfu redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf panchengyiyuan redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity 南京電信城域網(wǎng) ASBR 對接 CN2 ASBR 割接方案 第 31 頁 共 58 頁 exitaddressfamily ! addressfamily ipv4 vrf CT_SoftSwitch_Media redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf huiminyiyuanbanqiao redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily !三．城域網(wǎng) ASBR 建立至 VRR 的 IBGP 鄰居在 YNL NE40（VRR）和 HZM NE40（VRR）上分別進行如下配置：bgp 64512 peer 鼓樓 GSR12416loopback0 asnumber 64512 peer 鼓樓 GSR12416loopback0 reflectclient peer 鼓樓 GSR12416loopback0 connectinterface LoopBack0 ipv4family vpnv4 peer 鼓樓 GSR12416loopback0 enable peer 鼓樓 GSR12416loopback0 reflectclient 南京電信城域網(wǎng) ASBR 對接 CN2 ASBR 割接方案 第 32 頁 共 58 頁 在城域網(wǎng)鼓樓 GSR12416 上進行如下配置： router bgp 64512 no nei shutdown no nei shutdown通過命令 sh ip bgp vpnv4 all summary 檢查和 vrr 鄰居是否建立四．開通城域網(wǎng)鼓樓 GSR12416 至 CN2 鼓樓 PE 鏈路在 YNL NE40（VRR）上進行如下配置： interface GigabitEther2/0/1 shutdown將城域網(wǎng)鼓樓 GSR12416 至 CN2 鼓樓 PE 的光路開通，CN2 鼓樓 PE 側(cè)在 ODF架跳纖至城域網(wǎng)鼓樓 GSR12416。本次割接實現(xiàn) ASBR從華為 NE40割接至南京城域網(wǎng)利舊的兩臺GSR12416（原城域網(wǎng)核心設備）上，采用性能更優(yōu)的 GSR12416作為跨域VPN的專用 ASBR，以滿足網(wǎng)絡擴展的要求，完成 CN2 MPLS VPN與南京電信 MPLS VPN城域網(wǎng)之間跨域?qū)庸ぷ?，與 CN2 PE設備采用 POS鏈路互聯(lián)，所以在 CN2 PE側(cè)還需要各增加一塊 POS板卡，互聯(lián)路由（實為 PE－CE 路由）采用 eBGP（每客戶一個會話） ，跨域互聯(lián)采用 Option A方式。其中 C設備已與 IP城域網(wǎng)核心 Cisco12416設備采用 OC192端口互聯(lián)；S 設備已與 IP城域網(wǎng) VPN設備的 VRR采用 GE端口互聯(lián)，目前采用兩臺華為 NE40作為 ASBR。在整個實施方案中，我們一直遵循如下原則：? 充分保證實施方案整體的可靠性；? 全面考慮網(wǎng)絡過渡過程的各方面因素，盡可能地減少對現(xiàn)網(wǎng)業(yè)務的影響；? 在實施過程中進行必要的測試，保證整個實施過程的正確性。本方案是基于對現(xiàn)行的江蘇電信 16CN2 及 IP 城域網(wǎng)運行狀態(tài)的理解，以及將來業(yè)務的規(guī)劃而做出的。Comment [a1]: Comment [a2]: 南京電信城域網(wǎng) ASBR對接 CN2 ASBR割接方案 第 4頁 共 58 頁網(wǎng)絡現(xiàn)狀描述目前中國電信 CN2網(wǎng)絡江蘇南京節(jié)點有 T640兩臺作為 C設備，有 GSR12416兩臺作為 S設備。南京城域網(wǎng)和 CN2使用 Option A方式實現(xiàn)跨域 VPN，在這種方式下作為ASBR的 PE需要管理所有 VPN，這將導致 PE上的 VPNIPv4路由數(shù)量非常龐大，對 PE設備的要求非常高。YNL NE40割接步驟本次割接工作要求傳輸及尾纖布放工作(鼓樓 GSR12416—CN2鼓樓 PE)提前Comment [a3]: Comment [a4]: 南京電信城域網(wǎng) ASBR對接 CN2 ASBR割接方案 第 5頁 共 58 頁準備，并調(diào)通相應互聯(lián)鏈路。 在 CN2 鼓樓 PE 側(cè)通過 sh ip b vpnv4 all 查看是否能學習到城域網(wǎng)內(nèi)的vpn 路由，并檢查路由的正確