【正文】 配置PE1。圖53 多角色主機組網(wǎng)圖2. 配置思路(1) 在PE1上配置VPRN實例VPNB，接入CE1；在PE2上配置VPRN實例VPNB，接入CE2。*A:PE1 configure router *A:PE1configrouter autonomoussystem 500 *A:PE1configrouter bgp *A:PE1configrouterbgp group mpls *A:PE1configrouterbgpgroup$ family vpnipv4 *A:PE1configrouterbgpgroup$ type internal *A:PE1configrouterbgpgroup$ localaddress *A:PE1configrouterbgpgroup$ neighbor *A:PE1configrouterbgpgroupneighbor$ loopdetect*A:PE1configrouterbgpgroupneighbor$ back *A:PE1configrouterbgpgroup back *A:PE1configrouterbgp 配置SpokePE2。*A:HUBPE3config port 2/1/1 *A:HUBPE3configport ethernet mode access*A:HUBPE3configport no shutdown*A:HUBPE3configport exit*A:HUBPE3config port 2/1/2*A:HUBPE3configport ethernet mode access*A:HUBPE3configport no shutdown*A:HUBPE3configport exit*A:HUBPE3configservicevprn back*A:HUBPE3configservice vprn 100 customer 1 create *A:HUBPE3configservicevprn$ routedistinguisher 500:100 *A:HUBPE3configservicevprn$ vrftarget expport target:500:200 *A:HUBPE3configservicevprn$ interface GE2/1/1 create *A:HUBPE3configservicevprnif$ address *A:HUBPE3configservicevprnif$ sap 2/1/1 create *A:HUBPE3configservicevprnifsap$ back *A:HUBPE3configservicevprnif$ back *A:HUBPE3configservicevprn autobind ldp *A:HUBPE3configservicevprn no shutdown *A:HUBPE3configservicevprn back*A:HUBPE3configservice vprn 200 customer 1 create *A:HUBPE3configservicevprn$ routedistinguisher 500:200 *A:HUBPE3configservicevprn$ vrftarget impport target:500:100 *A:HUBPE3configservicevprn$ interface GE2/1/1 create *A:HUBPE3configservicevprnif$ address *A:HUBPE3configservicevprnif$ sap 2/1/1 create *A:HUBPE3configservicevprnifsap$ back *A:HUBPE3configservicevprnif$ back *A:HUBPE3configservicevprn autobind ldp *A:HUBPE3configservicevprn no shutdown (4) 在PE與CE之間建立EBGP對等體關(guān)系，引入VPN路由amp。3. 數(shù)據(jù)準(zhǔn)備l HubPE和SpokePE的VPN實例名、路由標(biāo)志（RouteDistinguisher）及VPNTarget屬性4. 配置步驟(1) 在骨干網(wǎng)上配置IGP協(xié)議，實現(xiàn)骨干網(wǎng)HubPE和SpokePE的互通本例中采用OSPF，具體配置過程見上一例。*A:PE1 configure router policyoptions *A:PE1configrouterpolicyoptions begin *A:PE1configrouterpolicyoptions policystatement vpnospf *A:PE1configrouterpolicyoptionspolicystatement$ entry 1 *A:PE1configrouterpolicyoptionspolicystatemententry$ to protocol ospf *A:PE1configrouterpolicyoptionspolicystatemententry action accept *A:PE1configrouterpolicyoptionspolicystatemententryaction back *A:PE1configrouterpolicyoptionspolicystatemententry back *A:PE1configrouterpolicyoptionspolicystatement back *A:PE1configrouterpolicyoptions mit *A:PE1configrouterpolicyoptions exit*A:PE1configservice vprn 100 customer 1 create *A:PE1configservicevprn ospf *A:PE1configservicevprnospf$ area *A:PE1configservicevprnospf$ export vpnospf*A:PE1configservicevprnospfarea$ interface GE2/1/1 *A:PE1configservicevprnospfarea$ back *A:PE1configservicevprnospf back *A:PE1configservicevprn back *A:PE1configservice vprn 200 customer 1 create*A:PE1configservicevprn ospf *A:PE1configservicevprnospf$ export vpnospf*A:PE1configservicevprnospf$ area *A:PE1configservicevprnospfarea$ interface GE2/1/2 *A:PE1configservicevprnospfarea$ back *A:PE1configservicevprnospf back *A:PE1configservicevprn no shutdown 配置PE2的路由策略。*B:PE1 configure router inteface GE1/1/1*B:PE1configrouterifport 1/1/1*B:PE1configrouterifaddress *B:PE1configrouterifback*B:PE1 configure router inteface GE1/1/2*B:PE1configrouterifport 1/1/2*B:PE1configrouterifaddress *B:PE1configrouterifback*B:PE1configrouterinterface system*B:PE1configrouterifaddress *B:PE1configrouterifback*B:PE1configrouterospf*B:PE1configrouterospfarea *B:PE1configrouterospfareainterface system*B:PE1configrouterospfareainterface GE1/1/1*B:PE1configrouterospfareainterface GE1/1/2 配置PE2。Spoke示例l 配置BGP/MPLS IP VPN采用GRE隧道示例l 配置多角色主機示例 配置基本的VPRN示例1. 組網(wǎng)需求如圖51，CECE3屬于VPNA，CECE4屬于VPNB；VPNA使用的VRFtarget屬性為500:100，VPNB使用的VRFtarget屬性為500:300，CE1與PE1之間運行OSPF，CE2與PE1之間運行OSPF，CE3與PE2之間運行EBGP，CE4與PE2之間運行EBGP。它使用BGP在服務(wù)提供商骨干網(wǎng)上發(fā)布VPN路由，使用MPLS在服務(wù)提供商骨干網(wǎng)上轉(zhuǎn)發(fā)VPN報文。3. 數(shù)據(jù)準(zhǔn)備l PE及P上的MPLS LSR為各自Loopback1的IP地址；l VPNA與VPNB的收發(fā)路由屬性VPNTarget設(shè)置為不同。*A:PE1config port 2/1/1 *A:PE1configport ethernet mode access*A:PE1configport exit*A:PE1config port 2/1/2 *A:PE1configport ethernet mode access*A:PE1configport exit*A:PE1 configure service *A:PE1configservice vprn 100 customer 1 create *A:PE1configservicevprn$ routedistinguisher 500:100 *A:PE1configservicevprn$ vrftarget target:500:100 *A:PE1configservicevprn$ interface GE2/1/1 create *A:PE1configservicevprnif$ address *A:PE1configservicevprnif$ sap 2/1/1 create *A:PE1configservicevprnifsap$ back *A:PE1configservicevprnif$ back *A:PE1configservicevprn autobind ldp *A:PE1configservicevprn no shutdown *A:PE1configservicevprn back *A:PE1configservice vprn 200 customer 1 create*A:PE1configservicevprn$ routedistinguisher 500:200 *A:PE1configservicevprn$ vrftarget target:500:200 *A:PE1configservicevprn$ interface GE2/1/2 create *A:PE1configservicevprnif$ address *A:PE1configservicevprnif$ sap 2/1/2 create *A:PE1configservicevprnifsap$ back *A:PE1configservicevprnif$ back *A:PE1configservicevprn autobind ldp *A:PE1configservicevprn no shutdown 配置PE2。Spoke的VPRN示例1. 組網(wǎng)需求如圖52，SpokeCE之間的通信通過中心站點HubCE控制，即SpokeCE之間的流量經(jīng)過HubCE轉(zhuǎn)發(fā)，而不是只經(jīng)過HubPE轉(zhuǎn)發(fā)。 配置SpokePE1。*A:HUBPE3 configure router policyoptions *A:HUBPE3configrouterpolicyoptions begin *A:HUBPE3conf