【正文】 ghbor loopdetect off*A:HUBPE3configservicevprnbgpgroupneighbor back *A:HUBPE3configservicevprnbgpgroup back *A:HUBPE3configservicevprnbgp back *A:HUBPE3configservicevprn no shutdown(5) 在PE之間建立MPIBGP對等體關(guān)系amp。省略，詳見上一例 配置SpokePE2。 說明：HubPE上需要配置允許一次AS號重復(fù)，以接收HubCE發(fā)布的路由。*A:SpokePE2config port 2/1/1 *A:SpokePE2configport ethernet mode access*A:SpokePE2configport no shutdown*A:SpokePE2configport exit*A:SpokePE2configservicevprn back*A:SpokePE2configservice vprn 200 customer 1 create *A:SpokePE2configservicevprn$ routedistinguisher 500:200 *A:SpokePE2configservicevprn$ vrftarget import target:500:200 export target:500:100 *A:SpokePE2configservicevprn$ interface GE2/1/1 create *A:SpokePE2configservicevprnif$ address *A:SpokePE2configservicevprnif$ sap 2/1/1 create *A:SpokePE2configservicevprnifsap$ back *A:SpokePE2configservicevprnif$ back *A:SpokePE2configservicevprn autobind ldp *A:SpokePE2configservicevprn no shutdown 配置HubPE。 配置SpokePE1。amp。(2) 在骨干網(wǎng)上配置MPLS基本能力和MPLS LDP，建立LDP LSP具體配置過程見上一例。Spoke組網(wǎng)圖2. 配置思路本例配置主要思路是：(1) HubPE與SpokePE建立IBGP鄰居關(guān)系，SpokePE之間不建立IBGP鄰居關(guān)系，不交換VPN路由信息；(2) 在HubPE上創(chuàng)建兩個(gè)VPN實(shí)例，其接收的VPNtarget團(tuán)體屬性分別為兩個(gè)SpokePE發(fā)布的VPNtarget團(tuán)體屬性值，設(shè)置發(fā)布的VPNtarget團(tuán)體屬性值與接收的VPNtarget團(tuán)體屬性不同；(3) 在SpokePE上創(chuàng)建一個(gè)VPN實(shí)例，引入VPNtarget團(tuán)體屬性值為HubPE發(fā)布的VPNtarget團(tuán)體屬性值，對發(fā)布的路由設(shè)置VPNtarget團(tuán)體屬性值；(4) CE和PE之間使用BGP；(5) HubPE和SpokePE上配置接收AS重復(fù)1次的路由通過。Spoke的VPRN示例1. 組網(wǎng)需求如圖52，SpokeCE之間的通信通過中心站點(diǎn)HubCE控制，即SpokeCE之間的流量經(jīng)過HubCE轉(zhuǎn)發(fā)，而不是只經(jīng)過HubPE轉(zhuǎn)發(fā)。*A:PE2 configure router *A:PE2configrouter autonomoussystem 500 *A:PE2configrouter bgp *A:PE2configrouterbgp group mpls *A:PE2configrouterbgpgroup$ family vpnipv4 *A:PE2configrouterbgpgroup$ type internal *A:PE2configrouterbgpgroup$ localaddress *A:PE2configrouterbgpgroup$ neighbor *A:PE2configrouterbgpgroupneighbor$ back *A:PE2configrouterbgpgroup back *A:PE2configrouterbgp (6) 檢查配置結(jié)果在PE路由器上執(zhí)行display ip routingtable vpninstance命令，可以看到去往對端CE的路由。*A:PE2 configure router policyoptions *A:PE2configrouterpolicyoptions begin *A:PE2configrouterpolicyoptions policystatement vpnbgp *A:PE2configrouterpolicyoptionspolicystatement$ entry 1 *A:PE2configrouterpolicyoptionspolicystatemententry$ to protocol bgp *A:PE2configrouterpolicyoptionspolicystatemententry action accept *A:PE2configrouterpolicyoptionspolicystatemententryaction back *A:PE2configrouterpolicyoptionspolicystatemententry back *A:PE2configrouterpolicyoptionspolicystatement back *A:PE2configrouterpolicyoptions mit *A:PE2configrouterpolicyoptions exit*A:PE2 configure service *A:PE2configservice vprn 100 customer 1 create *A:PE2configservicevprn autonomoussystem 500 *A:PE2configservicevprn bgp *A:PE2configservicevprnbgp$ group ce *A:PE2configservicevprnbgpgroup type external *A:PE2configservicevprnbgpgroup peeras 400 *A:PE2configservicevprnbgpgroup family ipv4 *A:PE2configservicevprnbgpgroup localaddress *A:PE2configservicevprnbgpgroup neighbor *A:PE2configservicevprnbgpgroupneighbor back *A:PE2configservicevprnbgpgroup back *A:PE2configservicevprnbgp back *A:PE2configservicevprn no shutdown*A:PE2configservicevprn back*A:PE2configservice vprn 200 customer 1 create *A:PE2configservicevprn autonomoussystem 500 *A:PE2configservicevprn bgp *A:PE2configservicevprnbgp$ group ce *A:PE2configservicevprnbgpgroup type external *A:PE2configservicevprnbgpgroup peeras 400 *A:PE2configservicevprnbgpgroup family ipv4 *A:PE2configservicevprnbgpgroup localaddress *A:PE2configservicevprnbgpgroup neighbor *A:PE2configservicevprnbgpgroupneighbor back *A:PE2configservicevprnbgpgroup back *A:PE2configservicevprnbgp back *A:PE2configservicevprn no shutdown(5) 在PE之間建立MPIBGP對等體關(guān)系 配置PE1。(4) 在PE與CE之間建立OSPF、EBGP對等體關(guān)系，引入VPN路由 配置PE1的路由策略。*A:PE1config port 2/1/1 *A:PE1configport ethernet mode access*A:PE1configport exit*A:PE1config port 2/1/2 *A:PE1configport ethernet mode access*A:PE1configport exit*A:PE1 configure service *A:PE1configservice vprn 100 customer 1 create *A:PE1configservicevprn$ routedistinguisher 500:100 *A:PE1configservicevprn$ vrftarget target:500:100 *A:PE1configservicevprn$ interface GE2/1/1 create *A:PE1configservicevprnif$ address *A:PE1configservicevprnif$ sap 2/1/1 create *A:PE1configservicevprnifsap$ back *A:PE1configservicevprnif$ back *A:PE1configservicevprn autobind ldp *A:PE1configservicevprn no shutdown *A:PE1configservicevprn back *A:PE1configservice vprn 200 customer 1 create*A:PE1configservicevprn$ routedistinguisher 500:200 *A:PE1configservicevprn$ vrftarget target:500:200 *A:PE1configservicevprn$ interface GE2/1/2 create *A:PE1configservicevprnif$ address *A:PE1configservicevprnif$ sap 2/1/2 create *A:PE1configservicevprnifsap$ back *A:PE1configservicevprnif$ back *A:PE1configservicevprn autobind ldp *A:PE1configservicevprn no shutdown 配置PE2。*B:PE1 configure router mpls *B:PE1configroutermplsinterface system*B:PE1configroutermplsifback*B:PE1configroutermplsinterface GE1/1/1*B:PE1configroutermplsifback*B:PE1configroutermplsinterface GE1/1/1*B:PE1configroutermplsifback*B:PE1configroutermplsback*B:PE1configrouterldp*B:PE1configrouterldpinterfaceparameters*B:PE1configrouterldpifparamsinterface GE1/1/1*B:PE1configrouterldpifparamsifback*B:PE1configrouterldpifparamsinterface GE1/1/2 配置PE2。*B:PE1 configure router inteface GE1/1/2*B:PE1configrouterifport 1/1/2