【正文】 amily ipv4 vrf gulouquzhenfu redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf shiyunhui redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf zhongshihua redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf shenglaodongju redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 南京電信城域網(wǎng) ASBR 對(duì)接 CN2 ASBR 割接方案 第 28 頁(yè) 共 58 頁(yè) neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf caizhenju redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf shengcaizhenting redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf nanjingdianxin redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf bianfangzongdui redistribute connected 南京電信城域網(wǎng) ASBR 對(duì)接 CN2 ASBR 割接方案 第 29 頁(yè) 共 58 頁(yè) no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf langchi redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf jiaotongguanlichu redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunityexitaddressfamily ! addressfamily ipv4 vrf LDJhujiaopingtai redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! 南京電信城域網(wǎng) ASBR 對(duì)接 CN2 ASBR 割接方案 第 30 頁(yè) 共 58 頁(yè) addressfamily ipv4 vrf vpnbaixiaquzhengfu redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf pukoulaobao redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf vpnxiaguanquzhenfu redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf panchengyiyuan redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity 南京電信城域網(wǎng) ASBR 對(duì)接 CN2 ASBR 割接方案 第 31 頁(yè) 共 58 頁(yè) exitaddressfamily ! addressfamily ipv4 vrf CT_SoftSwitch_Media redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily ! addressfamily ipv4 vrf huiminyiyuanbanqiao redistribute connected no synchronization neighbor *.*.*.* remoteas 64512 neighbor *.*.*.* activate neighbor *.*.*.* sendmunity exitaddressfamily !三．城域網(wǎng) ASBR 建立至 VRR 的 IBGP 鄰居在 YNL NE40（VRR）和 HZM NE40（VRR）上分別進(jìn)行如下配置：bgp 64512 peer 鼓樓 GSR12416loopback0 asnumber 64512 peer 鼓樓 GSR12416loopback0 reflectclient peer 鼓樓 GSR12416loopback0 connectinterface LoopBack0 ipv4family vpnv4 peer 鼓樓 GSR12416loopback0 enable peer 鼓樓 GSR12416loopback0 reflectclient 南京電信城域網(wǎng) ASBR 對(duì)接 CN2 ASBR 割接方案 第 32 頁(yè) 共 58 頁(yè) 在城域網(wǎng)鼓樓 GSR12416 上進(jìn)行如下配置： router bgp 64512 no nei shutdown no nei shutdown通過(guò)命令 sh ip bgp vpnv4 all summary 檢查和 vrr 鄰居是否建立四．開(kāi)通城域網(wǎng)鼓樓 GSR12416 至 CN2 鼓樓 PE 鏈路在 YNL NE40（VRR）上進(jìn)行如下配置： interface GigabitEther2/0/1 shutdown將城域網(wǎng)鼓樓 GSR12416 至 CN2 鼓樓 PE 的光路開(kāi)通，CN2 鼓樓 PE 側(cè)在 ODF架跳纖至城域網(wǎng)鼓樓 GSR12416。本次割接實(shí)現(xiàn) ASBR從華為 NE40割接至南京城域網(wǎng)利舊的兩臺(tái)GSR12416（原城域網(wǎng)核心設(shè)備）上，采用性能更優(yōu)的 GSR12416作為跨域VPN的專(zhuān)用 ASBR，以滿(mǎn)足網(wǎng)絡(luò)擴(kuò)展的要求，完成 CN2 MPLS VPN與南京電信 MPLS VPN城域網(wǎng)之間跨域?qū)庸ぷ鳎c CN2 PE設(shè)備采用 POS鏈路互聯(lián)，所以在 CN2 PE側(cè)還需要各增加一塊 POS板卡，互聯(lián)路由（實(shí)為 PE－CE 路由）采用 eBGP（每客戶(hù)一個(gè)會(huì)話(huà)） ，跨域互聯(lián)采用 Option A方式。其中 C設(shè)備已與 IP城域網(wǎng)核心 Cisco12416設(shè)備采用 OC192端口互聯(lián)；S 設(shè)備已與 IP城域網(wǎng) VPN設(shè)備的 VRR采用 GE端口互聯(lián)，目前采用兩臺(tái)華為 NE40作為 ASBR。在整個(gè)實(shí)施方案中，我們一直遵循如下原則：? 充分保證實(shí)施方案整體的可靠性；? 全面考慮網(wǎng)絡(luò)過(guò)渡過(guò)程的各方面因素，盡可能地減少對(duì)現(xiàn)網(wǎng)業(yè)務(wù)的影響；? 在實(shí)施過(guò)程中進(jìn)行必要的測(cè)試，保證整個(gè)實(shí)施過(guò)程的正確性。本方案是基于對(duì)現(xiàn)行的江蘇電信 16CN2 及 IP 城域網(wǎng)運(yùn)行狀態(tài)的理解，以及將來(lái)業(yè)務(wù)的規(guī)劃而做出的。Comment [a1]: Comment [a2]: 南京電信城域網(wǎng) ASBR對(duì)接 CN2 ASBR割接方案 第 4頁(yè) 共 58 頁(yè)網(wǎng)絡(luò)現(xiàn)狀描述目前中國(guó)電信 CN2網(wǎng)絡(luò)江蘇南京節(jié)點(diǎn)有 T640兩臺(tái)作為 C設(shè)備，有 GSR12416兩臺(tái)作為 S設(shè)備。南京城域網(wǎng)和 CN2使用 Option A方式實(shí)現(xiàn)跨域 VPN，在這種方式下作為ASBR的 PE需要管理所有 VPN，這將導(dǎo)致 PE上的 VPNIPv4路由數(shù)量非常龐大，對(duì) PE設(shè)備的要求非常高。YNL NE40割接步驟本次割接工作要求傳輸及尾纖布放工作(鼓樓 GSR12416—CN2鼓樓 PE)提前Comment [a3]: Comment [a4]: 南京電信城域網(wǎng) ASBR對(duì)接 CN2 ASBR割接方案 第 5頁(yè) 共 58 頁(yè)準(zhǔn)備，并調(diào)通相應(yīng)互聯(lián)鏈路。 在 CN2 鼓樓 PE 側(cè)通過(guò) sh ip b vpnv4 all 查看是否能學(xué)習(xí)到城域網(wǎng)內(nèi)的vpn 路由，并檢查路由的正確