【正文】 l PE2上創(chuàng)建一個VPRN實例。省略，詳見上一例 配置HubPE。以PE1的顯示為例：5. 配置文件 配置Hubamp。(2) CE與PE之間配置EBGP、OSPF交換VPRN路由信息。不同VPN用戶之間不能互相訪問。*A:PE2 configure router policyoptions *A:PE2configrouterpolicyoptions begin *A:PE2configrouterpolicyoptions policystatement vpnbgp *A:PE2configrouterpolicyoptionspolicystatement$ entry 1 *A:PE2configrouterpolicyoptionspolicystatemententry$ to protocol bgp *A:PE2configrouterpolicyoptionspolicystatemententry action accept *A:PE2configrouterpolicyoptionspolicystatemententryaction back *A:PE2configrouterpolicyoptionspolicystatemententry back *A:PE2configrouterpolicyoptionspolicystatement back *A:PE2configrouterpolicyoptions mit *A:PE2configrouterpolicyoptions exit*A:PE2 configure service *A:PE2configservice vprn 100 customer 1 create *A:PE2configservicevprn autonomoussystem 500 *A:PE2configservicevprn bgp *A:PE2configservicevprnbgp$ group ce *A:PE2configservicevprnbgpgroup type external *A:PE2configservicevprnbgpgroup peeras 400 *A:PE2configservicevprnbgpgroup family ipv4 *A:PE2configservicevprnbgpgroup localaddress *A:PE2configservicevprnbgpgroup neighbor *A:PE2configservicevprnbgpgroupneighbor back *A:PE2configservicevprnbgpgroup back *A:PE2configservicevprnbgp back *A:PE2configservicevprn no shutdown*A:PE2configservicevprn back*A:PE2configservice vprn 200 customer 1 create *A:PE2configservicevprn autonomoussystem 500 *A:PE2configservicevprn bgp *A:PE2configservicevprnbgp$ group ce *A:PE2configservicevprnbgpgroup type external *A:PE2configservicevprnbgpgroup peeras 400 *A:PE2configservicevprnbgpgroup family ipv4 *A:PE2configservicevprnbgpgroup localaddress *A:PE2configservicevprnbgpgroup neighbor *A:PE2configservicevprnbgpgroupneighbor back *A:PE2configservicevprnbgpgroup back *A:PE2configservicevprnbgp back *A:PE2configservicevprn no shutdown(5) 在PE之間建立MPIBGP對等體關系 配置PE1。 說明：HubPE上需要配置允許一次AS號重復，以接收HubCE發(fā)布的路由。(2) 在PE3上配置二個VPRN實例VPNA和VPNB，接入CECE4。并在CE上配置默認路由，使其有到對端CE相連網段的路由。 配置SpokePE1。Spoke組網圖2. 配置思路本例配置主要思路是：(1) HubPE與SpokePE建立IBGP鄰居關系，SpokePE之間不建立IBGP鄰居關系，不交換VPN路由信息；(2) 在HubPE上創(chuàng)建兩個VPN實例，其接收的VPNtarget團體屬性分別為兩個SpokePE發(fā)布的VPNtarget團體屬性值，設置發(fā)布的VPNtarget團體屬性值與接收的VPNtarget團體屬性不同；(3) 在SpokePE上創(chuàng)建一個VPN實例，引入VPNtarget團體屬性值為HubPE發(fā)布的VPNtarget團體屬性值，對發(fā)布的路由設置VPNtarget團體屬性值；(4) CE和PE之間使用BGP；(5) HubPE和SpokePE上配置接收AS重復1次的路由通過。*B:PE1 configure router inteface GE1/1/1*B:PE1configrouterifport 1/1/1*B:PE1configrouterifaddress *B:PE1configrouterifback*B:PE1configrouterinterface system*B:PE1configrouterifaddress *B:PE1configrouterifback*B:PE1configrouterospf*B:PE1configrouterospfarea *B:PE1configrouterospfareainterface system*B:PE1configrouterospfareainterface GE1/1/1 配置P。 配置舉例本章的配置舉例包括以下案例。*A:PE1config port 2/1/1 *A:PE1configport ethernet mode access*A:PE1configport exit*A:PE1config port 2/1/2 *A:PE1configport ethernet mode access*A:PE1configport exit*A:PE2 configure service *A:PE2configservice vprn 100 customer 1 create *A:PE2configservicevprn$ routedistinguisher 500:100 *A:PE2configservicevprn$ vrftarget target:500:100 *A:PE2configservicevprn$ interface GE2/1/1 create *A:PE2configservicevprnif$ address *A:PE2configservicevprnif$ sap 2/1/1 create *A:PE2configservicevprnifsap$ back *A:PE2configservicevprnif$ back *A:PE2configservicevprn autobind ldp *A:PE2configservicevprn no shutdown*A:PE2configservicevprn back*A:PE2configservice vprn 200 customer 1 create *A:PE2configservicevprn$ routedistinguisher 500:200 *A:PE2configservicevprn$ vrftarget target:500:200 *A:PE2configservicevprn$ interface GE2/1/2 create *A:PE2configservicevprnif$ address *A:PE2configservicevprnif$ sap 2/1/2 create *A:PE2configservicevprnifsap$ back *A:PE2configservicevprnif$ back *A:PE2configservicevprn autobind ldp *A:PE2configservicevprn no shutdown 按圖51配置各CE的接口IP地址，配置過程略。*A:SpokePE1config port 2/1/1 *A:SpokePE1configport ethernet mode access*A:SpokePE1configport no shutdown*A:SpokePE1configport exit*A:SpokePE1configservicevprn back*A:SpokePE1configservice vprn 200 customer 1 create *A:SpokePE1configservicevprn$ routedistinguisher 500:200 *A:SpokePE1configservicevprn$ vrftarget import target:500:200 export target:500:100 *A:SpokePE1configservicevprn$ interface GE2/1/1 create *A:SpokePE1configservicevprnif$ address *A:SpokePE1configservicevprnif$ sap 2/1/1 create *A:SpokePE1configservicevprnifsap$ back *A:SpokePE1configservicevprnif$ back *A:SpokePE1configservicevprn autobind ldp *A:SpokePE1configservicevprn no shutdown 配置SpokePE2。PC1作為多角色主機，既可以訪問VPNA，也可以訪問VPNB。*A:PE2config port 2/1/1 *A:PE2configport ethernet mode access*A:PE2configport no shutdown*A:PE2configport exit*A:PE2configservicevprn back*A:PE2configservice vprn 200 customer 1 create *A:PE2configservicevprn$ routedistinguisher 500:200 *A:PE2configservicevprn$ vrftarget import target:500:400 export target:500:100 *A:PE2configservicevprn$ interface GE2/1/1 create *A:PE2configservicevprnif$ address *A:PE2configservicevprnif$ sap 2/1/1 create *A:PE2configservicevprnifsap$ back *A:PE2configservicevprnif$ back *A:PE2configservicevprn autobind ldp *A:PE2configservicevprn no shutdown 配置PE3。*A:SpokePE2 configure router *A:SpokePE2configrouter autonomoussystem 500 *A:SpokePE2configrouter bgp *A:SpokePE2configrouterbgp group mpls *A:SpokePE2configrouterbgpgroup$ family vpnipv4 *A:SpokePE2con