【正文】 mily R8 輸入命令 router eigrp 100 work work no autosummary 配置核心網(wǎng) MPLS 如圖 34 所示 在核心網(wǎng)路由器 R R R R R R6 輸入命令 ip cef mpls ip 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 28 mpls label protocol ldp mpls ldp routerid loop 1 mpls label range [161048575 Minimum label value] () 在所有內(nèi)部接口輸入 mpls ip 配置 BGP VPNV4 R1 輸入命令 router bgp 100 bgp routerid no bgp default ipv4unicast bgp clusterid bgp logneighborchanges neighbor remoteas 100 neighbor password cisco neighbor updatesource Loopback1 neighbor remoteas 100 neighbor password cisco neighbor updatesource Loopback1 neighbor remoteas 100 neighbor password cisco neighbor updatesource Loopback1 neighbor remoteas 100 neighbor password cisco neighbor updatesource Loopback1 ! addressfamily vpnv4 neighbor activate 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 29 neighbor sendmunity extended neighbor routereflectorclient neighbor activate neighbor sendmunity extended neighbor routereflectorclient neighbor activate neighbor sendmunity extended neighbor routereflectorclient neighbor activate neighbor sendmunity extended neighbor routereflectorclient exitaddressfamily R2 命令輸入 router bgp 100 bgp routerid no bgp default ipv4unicast bgp clusterid bgp logneighborchanges neighbor vpnv4 peergroup neighbor vpnv4 remoteas 100 neighbor vpnv4 password cisco neighbor vpnv4 updatesource Loopback1 neighbor peergroup vpnv4 neighbor peergroup vpnv4 neighbor peergroup vpnv4 neighbor peergroup vpnv4 ! addressfamily ipv4 neighbor vpnv4 routereflectorclient 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 30 neighbor activate neighbor activate neighbor activate neighbor activate no autosummary no synchronization exitaddressfamily ! addressfamily vpnv4 neighbor vpnv4 sendmunity extended neighbor vpnv4 routereflectorclient neighbor activate neighbor activate neighbor activate neighbor activate exitaddressfamily R3 輸入命令 router bgp 100 bgp routerid no bgp default ipv4unicast bgp logneighborchanges neighbor remoteas 100 neighbor password cisco neighbor updatesource Loopback1 neighbor remoteas 100 neighbor password cisco neighbor updatesource Loopback1 ! addressfamily ipv4 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 31 neighbor activate neighbor nexthopself neighbor activate neighbor nexthopself no autosummary no synchronization exitaddressfamily ! addressfamily vpnv4 neighbor activate neighbor sendmunity extended neighbor activate neighbor sendmunity extended exitaddressfamily ! addressfamily ipv4 vrf vpn1 redistribute eigrp 100 metric 10000 routemap vrf_vpn1 no synchronization exitaddressfamily R4 輸入命令 router bgp 100 bgp routerid no bgp default ipv4unicast bgp logneighborchanges neighbor remoteas 100 neighbor password cisco neighbor updatesource Loopback1 neighbor remoteas 100 neighbor password cisco 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 32 neighbor updatesource Loopback1 ! addressfamily ipv4 no synchronization neighbor activate neighbor activate no autosummary exitaddressfamily ! addressfamily vpnv4 neighbor activate neighbor sendmunity extended neighbor activate neighbor sendmunity extended exitaddressfamily ! addressfamily ipv4 vrf vpn1 no synchronization redistribute rip metric 100 routemap vrf_vpn1 exitaddressfamily R5 輸入命令 router bgp 100 bgp routerid no bgp default ipv4unicast bgp logneighborchanges neighbor remoteas 100 neighbor password cisco neighbor updatesource Loopback1 neighbor remoteas 100 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 33 neighbor password cisco neighbor updatesource Loopback1 ! addressfamily ipv4 neighbor activate neighbor activate no autosummary no synchronization exitaddressfamily ! addressfamily vpnv4 neighbor activate neighbor sendmunity extended neighbor activate neighbor sendmunity extended exitaddressfamily ! addressfamily ipv4 vrf vpn1 redistribute ospf 101 vrf vpn1 match internal external 1 external 2 routemap vrf_vpn1 no synchronization exitaddressfamily 配置 VRF 在 R R R5 輸入 ip vrf vpn1 rd 100:1 routetarget export 100:1 routetarget import 100:1 在連接 CE 的接口輸入命令 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 34 ip vrf forwarding vpn1 (接口與 VPN 關(guān)聯(lián) ) L2VPN Eompls 如圖 35 所示 R4 輸入命令 pseudowireclass L2VPN_EoMPLS encapsulation mpls interface FastEther2/0 no ip address duplex full xconnect 64 pwclass L2VPN_EoMPLS R6 輸入命令 pseudowireclass L2VPN_EoMPLS encapsulation mpls interface FastEther2/0 no ip address duplex full xconnect 64 pwclass L2VPN_EoMPLS R7 輸入命令 interface FastEther0/0 ip address duplex auto speed auto 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 35 R10 輸入命令 interface FastEther0/0 ip address duplex auto speed auto 路由過濾 R3 輸入命令 ip accesslist extended vrf_vpn1 permit ip any routemap vrf_vpn1 deny 10 match ip address vrf_vpn1 routemap vrf_vpn1 permit 20 redistribute eigrp 100 metric 10000 routemap vrf_vpn1 (在 BGP ipv4 vrf vpn 1 重分布時調(diào)用 ) R4 輸入命令 ip accesslist extended vrf_vpn1 permit ip any routemap vrf_vpn1 permit 10 match ip address vrf_vpn1 redistribute rip metric 100 routemap vrf_vpn1(在 BGP ipv4 vrf vpn 1 重分布時調(diào)用 ) R5 輸入命令 ip accesslist extended vrf_vpn1 permit ip any routemap vrf_vpn1 deny 10 match ip address vrf_vpn1 routemap vrf_vpn1 permit 20 redistribute ospf 101 vrf vpn1 match internal external 1 external 2 routemap vrf_vpn1(在BGP ipv4 vrf vpn 1 重分布時調(diào)用 ) 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 36 江蘇省徐州機電高等職業(yè)學(xué)校 畢業(yè)論文 37 4 MPLS VPN網(wǎng)絡(luò)測試 三層 VPN 連通性 測試 R8 ping R9 R8 Traceroute R9 R8 ping R11