【正文】 igservice vprn 200 customer 1 create *A:SpokePE2configservicevprn$ routedistinguisher 500:200 *A:SpokePE2configservicevprn$ vrftarget import target:500:200 export target:500:100 *A:SpokePE2configservicevprn$ interface GE2/1/1 create *A:SpokePE2configservicevprnif$ address *A:SpokePE2configservicevprnif$ sap 2/1/1 create *A:SpokePE2configservicevprnifsap$ back *A:SpokePE2configservicevprnif$ back *A:SpokePE2configservicevprn autobind ldp *A:SpokePE2configservicevprn no shutdown 配置HubPE。 配置SpokePE1。PCPC3只能訪問VPNB。并在CE上配置默認路由，使其有到對端CE相連網(wǎng)段的路由。*A:PE1config port 2/1/1 *A:PE1configport ethernet mode access*A:PE1configport no shutdown*A:PE1configport exit*A:PE1configservicevprn back*A:PE1configservice vprn 200 customer 1 create *A:PE1configservicevprn$ routedistinguisher 500:200 *A:PE1configservicevprn$ vrftarget import target:500:200 export target:500:100 *A:PE1configservicevprn$ interface GE2/1/1 create *A:PE1configservicevprnif$ address *A:PE1configservicevprnif$ sap 2/1/1 create *A:PE1configservicevprnifsap$ back *A:PE1configservicevprnif$ back *A:PE1configservicevprn autobind ldp *A:PE1configservicevprn no shutdown 配置PE2。(2) 在PE3上配置二個VPRN實例VPNA和VPNB，接入CECE4。*A:SpokePE2 configure router *A:SpokePE2configrouter autonomoussystem 500 *A:SpokePE2configrouter bgp *A:SpokePE2configrouterbgp group mpls *A:SpokePE2configrouterbgpgroup$ family vpnipv4 *A:SpokePE2configrouterbgpgroup$ type internal *A:SpokePE2configrouterbgpgroup$ localaddress *A:SpokePE2configrouterbgpgroup$ neighbor *A:SpokePE2configrouterbgpgroupneighbor$ loopdetect*A:SpokePE2configrouterbgpgroupneighbor$ back *A:SpokePE2configrouterbgpgroup back *A:SpokePE2configrouterbgp 配置HubPE。 說明：HubPE上需要配置允許一次AS號重復(fù)，以接收HubCE發(fā)布的路由。(2) 在骨干網(wǎng)上配置MPLS基本能力和MPLS LDP，建立LDP LSP具體配置過程見上一例。*A:PE2 configure router policyoptions *A:PE2configrouterpolicyoptions begin *A:PE2configrouterpolicyoptions policystatement vpnbgp *A:PE2configrouterpolicyoptionspolicystatement$ entry 1 *A:PE2configrouterpolicyoptionspolicystatemententry$ to protocol bgp *A:PE2configrouterpolicyoptionspolicystatemententry action accept *A:PE2configrouterpolicyoptionspolicystatemententryaction back *A:PE2configrouterpolicyoptionspolicystatemententry back *A:PE2configrouterpolicyoptionspolicystatement back *A:PE2configrouterpolicyoptions mit *A:PE2configrouterpolicyoptions exit*A:PE2 configure service *A:PE2configservice vprn 100 customer 1 create *A:PE2configservicevprn autonomoussystem 500 *A:PE2configservicevprn bgp *A:PE2configservicevprnbgp$ group ce *A:PE2configservicevprnbgpgroup type external *A:PE2configservicevprnbgpgroup peeras 400 *A:PE2configservicevprnbgpgroup family ipv4 *A:PE2configservicevprnbgpgroup localaddress *A:PE2configservicevprnbgpgroup neighbor *A:PE2configservicevprnbgpgroupneighbor back *A:PE2configservicevprnbgpgroup back *A:PE2configservicevprnbgp back *A:PE2configservicevprn no shutdown*A:PE2configservicevprn back*A:PE2configservice vprn 200 customer 1 create *A:PE2configservicevprn autonomoussystem 500 *A:PE2configservicevprn bgp *A:PE2configservicevprnbgp$ group ce *A:PE2configservicevprnbgpgroup type external *A:PE2configservicevprnbgpgroup peeras 400 *A:PE2configservicevprnbgpgroup family ipv4 *A:PE2configservicevprnbgpgroup localaddress *A:PE2configservicevprnbgpgroup neighbor *A:PE2configservicevprnbgpgroupneighbor back *A:PE2configservicevprnbgpgroup back *A:PE2configservicevprnbgp back *A:PE2configservicevprn no shutdown(5) 在PE之間建立MPIBGP對等體關(guān)系 配置PE1。*B:PE1 configure router inteface GE1/1/2*B:PE1configrouterifport 1/1/2*B:PE1configrouterifaddress *B:PE1configrouterifback*B:PE1configrouterinterface system*B:PE1configrouterifaddress *B:PE1configrouterifback*B:PE1configrouterospf*B:PE1configrouterospfarea *B:PE1configrouterospfareainterface system*B:PE1configrouterospfareainterface GE1/1/2(2) 在MPLS骨干網(wǎng)上配置MPLS基本能力和LDP，建立LDP LSP 配置PE1。不同VPN用戶之間不能互相訪問。Spoke的VPRN示例 8 配置多角色主機示例 14 故障檢查步驟 18 檢查用戶端口/VLAN的狀態(tài)是否正常，是否UP 、誤碼等情況？ 18 檢查PE的VPRNinstance狀態(tài)是否UP？ 19 檢查到對端PE的VPRN私網(wǎng)路由是否學(xué)習(xí)到？ 20 檢查到對端PE的VPRN私網(wǎng)標(biāo)簽是否已分配？ 21 檢查到對端PE的loopback接口地址的32位掩碼路由LSP是否正常？ 21i7750Service Route VPRN配置實例與排障手冊BGP/MPLS IP VPN配置VPRN是一種基于網(wǎng)絡(luò)邊緣設(shè)備PE（Provider Edge）的L3VPN技術(shù)。(2) CE與PE之間配置EBGP、OSPF交換VPRN路由信息。*B:PE1 configure router mpls *B:PE1configroutermplsinterface system*B:PE1configroutermplsifback*B:PE1configroutermplsinterface GE1/1/2*B:PE1configroutermplsifback*B:PE1configroutermplsback*B:PE1configrouterldp*B:PE1configrouterldpinterfaceparameters*B:PE1configrouterldpifparamsinterface GE1/1/2(3) 在PE路由器上配置VPRN實例，將CE接入PE 配置PE1。以PE1的顯示為例：5. 配置文件 配置Hubamp。 說明：注意HubPE與SpokePE上的VPN Target屬性設(shè)置。省略，詳見上一例 配置HubPE。主機PC PC2和PC3通過CE3接入。l PE2上創(chuàng)建一個VPRN實例。 檢查PE的VPRNinstance狀態(tài)是否UP？*B: show service id 10 base /查看VPRNinstance狀態(tài)/===============================================================================Service Basic Information===============================================================================Service Id : 10 Vpn Id : 0 Service Type : VPRN Description : EPON_TEST_TRUSTCustomer Id : 1 Last Status Change: 07/03/2008 11:01:52