l2vpn (pw) + l3vpn over inter-AS mpls network with aggregation ipv4 vrf routes on ASBR

Может быть кому-то пригодится.

Применимость - стыковка транспорта разных ISP при объединении/поглощении, сегментация сети одного ISP для масштабирования.

Задинамисил топологию с тремя AS, и попробовал поднять на ней L2 и L3 vpn.
Для L2 - option C, для L3 - option B, на ASBR-ах  сделана суммаризация vrf-маршрутов и фильтрация неагрегированных.
Пот катом конфиги динамипса и собственно роутеров.

autostart = False
[127.0.0.1:7202]
    workingdir = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/working
    udp = 10200
    [[2621]]
        image = /home/rmavrichev/.gns3/IOS/c2600-i-mz.123-25.image
        idlepc = 0x803cb650
        ghostios = True
        chassis = 2621
    [[ROUTER CE2]]
        model = 2621
        console = 2012
        aux = 2100
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/CE2.cfg
        wic0/0 = WIC-1T
        wic0/1 = WIC-1T
        f0/0 = PE3 f1/1
        f0/1 = PE3 f2/0
        x = 476.75440072
        y = -27.0
    [[ROUTER CE1]]
        model = 2621
        console = 2011
        aux = 2111
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/CE1.cfg
        wic0/0 = WIC-1T
        wic0/1 = WIC-1T
        f0/0 = PE1 f0/1
        f0/1 = PE1 f1/0
        slot1 = NM-1FE-TX
        f1/0 = PE2 f1/0
        x = -658.78950135
        y = -17.7573593128
[qemu 127.0.0.1:10525]
    workingdir = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/working
    udp = 20000
[127.0.0.1:7200]
    workingdir = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/working
    udp = 10000
    [[7200]]
        image = /home/rmavrichev/.gns3/IOS/c7200-advipservicesk9-mz.152-4.S4.image
        ram = 512
        idlepc = 0x63180cac
        ghostios = True
    [[ROUTER PE1]]
        console = 2000
        aux = 2100
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/PE1.cfg
        slot0 = C7200-IO-2FE
        f0/0 = PE2 f0/0
        f0/1 = CE1 f0/0
        slot1 = PA-2FE-TX
        f1/0 = CE1 f0/1
        f1/1 = CR1 f2/0
        slot2 = PA-2FE-TX
        symbol = edge_label_switch_router
        x = -458.419876941
        y = -33.6568542495
[127.0.0.1:7201]
    workingdir = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/working
    udp = 10100
    [[7200]]
        image = /home/rmavrichev/.gns3/IOS/c7200-advipservicesk9-mz.152-4.S4.image
        ram = 512
        idlepc = 0x63180cac
        ghostios = True
    [[ROUTER CR2]]
        console = 2006
        aux = 2111
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/CR2.cfg
        slot0 = C7200-IO-2FE
        slot1 = PA-2FE-TX
        f1/0 = CR1 f1/1
        f1/1 = PE3 f1/0
        slot2 = PA-2FE-TX
        symbol = label_switch_router
        x = 38.3553390594
        y = -39.3847763109
    [[ROUTER CR1]]
        console = 2004
        aux = 2112
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/CR1.cfg
        slot0 = C7200-IO-2FE
        f0/0 = CR3 f1/1
        slot1 = PA-2FE-TX
        f1/0 = PE2 f0/1
        f1/1 = CR2 f1/0
        slot2 = PA-2FE-TX
        f2/0 = PE1 f1/1
        symbol = label_switch_router
        x = -139.066017178
        y = -37.5563491861
    [[ROUTER PE2]]
        console = 2002
        aux = 2113
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/PE2.cfg
        slot0 = C7200-IO-2FE
        f0/0 = PE1 f0/0
        f0/1 = CR1 f1/0
        slot1 = PA-2FE-TX
        f1/0 = CE1 f1/0
        f1/1 = CR3 f1/0
        slot2 = PA-2FE-TX
        f2/0 = CE3 f0/0
        symbol = edge_label_switch_router
        x = -387.503138061
        y = 264.119841047
    [[ROUTER PE3]]
        console = 2008
        aux = 2114
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/PE3.cfg
        slot0 = C7200-IO-2FE
        slot1 = PA-2FE-TX
        f1/0 = CR2 f1/1
        f1/1 = CE2 f0/0
        slot2 = PA-2FE-TX
        f2/0 = CE2 f0/1
        symbol = edge_label_switch_router
        x = 266.291413922
        y = -35.0710678119
[127.0.0.1:7204]
    workingdir = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/working
    udp = 10400
    [[2621]]
        image = /home/rmavrichev/.gns3/IOS/c2600-i-mz.123-25.image
        idlepc = 0x803cb650
        ghostios = True
        chassis = 2621
    [[ROUTER CE3]]
        model = 2621
        console = 2013
        aux = 2116
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/CE3.cfg
        f0/0 = PE2 f2/0
        x = -605.756492762
        y = 303.269119347
[127.0.0.1:7203]
    workingdir = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/working
    udp = 10300
    [[7200]]
        image = /home/rmavrichev/.gns3/IOS/c7200-advipservicesk9-mz.152-4.S4.image
        ram = 512
        idlepc = 0x63180cac
        ghostios = True
    [[ROUTER CR3]]
        console = 2009
        aux = 2107
        cnfg = /home/rmavrichev/.gns3/interAS_mpls_CR_igp_ebgp_transitAS/configs/CR3.cfg
        slot1 = PA-2FE-TX
        f1/0 = PE2 f1/1
        f1/1 = CR1 f0/0
        symbol = label_switch_router
        x = -139.066017178
        y = 259.428498913
[GNS3-DATA]
    configs = configs
    workdir = working
    m11 = 0.707106781185
    m22 = 0.707106781185
    [[NOTE 1]]
        text = isis 20
        x = -258.801081915
        y = 241.656420974
        color = "#3c3c3c"
    [[NOTE 2]]
        text = bgp AS65000
        x = -326.997041408
        y = -156.845237791
        color = "#3c3c3c"
    [[NOTE 3]]
        text = bgp AS65001
        x = 140.34105371
        y = -150.502092041
        color = "#3c3c3c"
    [[NOTE 4]]
        text = isis 20
        x = 162.634559673
        y = -97.5538238693
        color = "#3c3c3c"
    [[NOTE 5]]
        text = bgp AS65003
        x = -289.579869252
        y = 362.656420975
        color = "#3c3c3c"
    [[NOTE 6]]
        text = isis 20
        x = -296.984848099
        y = -91.6959594931
        color = "#3c3c3c"
    [[NOTE 7]]
        text = isis 10
        x = -41.0121933092
        y = 144.07568517
        color = "#3c3c3c"
    [[NOTE 8]]
        text = mpls bgp\nforwarding
        x = -55.1543289326
        y = 38.0096679921
        color = "#3c3c3c"
    [[NOTE 9]]
        text = f1/0
        x = 60.7376588626
        y = 50.8205183996
        interface = CE1 f1/0
        color = "#3c3c3c"
    [[NOTE 10]]
        text = f0/1
        x = 73.2701714274
        y = 23.8202453695
        interface = CE1 f0/1
        color = "#3c3c3c"
    [[NOTE 11]]
        text = f0/0
        x = 72.8746605279
        y = 18.8359128035
        interface = CE1 f0/0
        color = "#3c3c3c"
    [[NOTE 12]]
        text = f0/1
        x = -6.77901462127
        y = 15.4708349875
        interface = CE2 f0/1
        color = "#3c3c3c"
    [[NOTE 13]]
        text = f0/0
        x = -6.97061932095
        y = 20.4671624026
        interface = CE2 f0/0
        color = "#3c3c3c"
    [[NOTE 14]]
        text = f2/0
        x = 73.1622240206
        y = 18.5365101823
        interface = PE3 f2/0
        color = "#3c3c3c"
    [[NOTE 15]]
        text = f1/1
        x = 72.9706193209
        y = 23.5328375974
        interface = PE3 f1/1
        color = "#3c3c3c"
    [[NOTE 16]]
        text = f1/0
        x = -6.99946064505
        y = 22.2077212202
        interface = PE3 f1/0
        color = "#3c3c3c"
    [[NOTE 17]]
        text = f1/0
        x = -39.9924928586
        y = 29.9490342221
        interface = PE2 f1/0
        color = "#3c3c3c"
    [[NOTE 18]]
        text = f0/0
        x = 23.733011626
        y = -16.9117325042
        interface = PE2 f0/0
        color = "#3c3c3c"
    [[NOTE 19]]
        text = f0/1
        x = 58.6759842734
        y = -8.6715475904
        interface = PE2 f0/1
        color = "#3c3c3c"
    [[NOTE 20]]
        text = f1/1
        x = 72.9997872483
        y = 22.130461072
        interface = PE2 f1/1
        color = "#3c3c3c"
    [[NOTE 21]]
        text = f1/0
        x = -6.4791496283
        y = 30.1484197625
        interface = PE1 f1/0
        color = "#3c3c3c"
    [[NOTE 22]]
        text = f0/1
        x = -6.87466052787
        y = 25.1640871965
        interface = PE1 f0/1
        color = "#3c3c3c"
    [[NOTE 23]]
        text = f0/0
        x = 42.266988374
        y = 60.9117325042
        interface = PE1 f0/0
        color = "#3c3c3c"
    [[NOTE 24]]
        text = f1/1
        x = 72.9994960905
        y = 22.200779743
        interface = PE1 f1/1
        color = "#3c3c3c"
    [[NOTE 25]]
        text = f2/0
        x = -7.49949609051
        y = 27.299220257
        interface = CR1 f2/0
        color = "#3c3c3c"
    [[NOTE 26]]
        text = f1/0
        x = 0.405019658208
        y = 65.839434488
        interface = CR1 f1/0
        color = "#3c3c3c"
    [[NOTE 27]]
        text = f0/0
        x = 32.5
        y = 67.5
        interface = CR1 f0/0
        color = "#3c3c3c"
    [[NOTE 28]]
        text = f1/1
        x = 72.4978760762
        y = 27.087799332
        interface = CR1 f1/1
        color = "#3c3c3c"
    [[NOTE 29]]
        text = f1/1
        x = 32.5
        y = -12.5
        interface = CR3 f1/1
        color = "#3c3c3c"
    [[NOTE 30]]
        text = f1/0
        x = -7.49978724829
        y = 27.369538928
        interface = CR3 f1/0
        color = "#3c3c3c"
    [[NOTE 31]]
        text = f1/1
        x = 72.499460645
        y = 27.2922787798
        interface = CR2 f1/1
        color = "#3c3c3c"
    [[NOTE 32]]
        text = f1/0
        x = -7.49787607623
        y = 27.912200668
        interface = CR2 f1/0
        color = "#3c3c3c"
    [[SHAPE 1]]
        type = ellipse
        x = 95.4142135626
        y = -118.899494937
        width = 200.0
        height = 211.0
        border_style = 2
        z = -2.0
    [[SHAPE 2]]
        type = ellipse
        x = -412.950360214
        y = -106.066017178
        width = 296.166522242
        height = 149.906637612
        border_style = 2
        z = -2.0
    [[SHAPE 3]]
        type = ellipse
        x = -127.17871555
        y = -103.43860018
        width = 221.8355698
        height = 464.063058586
        border_style = 2
        z = -2.0
    [[SHAPE 4]]
        type = ellipse
        x = -330.465078839
        y = 223.445742855
        width = 200.0
        height = 124.426406871
        border_style = 2
        z = -2.0
    [[SHAPE 5]]
        type = ellipse
        x = -373.553390594
        y = 173.747258046
        width = 268.901586979
        height = 230.516810667
        fill_color = "#ffaa7f"
        z = -3.0
    [[SHAPE 6]]
        type = ellipse
        x = -449.719912836
        y = -164.048773235
        width = 342.239682096
        height = 230.516810667
        fill_color = "#aaff7f"
        z = -3.0
    [[SHAPE 7]]
        type = ellipse
        x = 83.8953108547
        y = -176.0
        width = 229.959594929
        height = 330.000000001
        fill_color = "#ffff7f"
        z = -3.0


 !


########################################################################
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE1
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
no ip domain lookup
!
!
!
!
!
!
interface FastEthernet0/0
 description to_PE1_l2vpn
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 description to_PE1_l3vpn
 ip address 192.168.10.2 255.255.255.252
 duplex auto
 speed auto
!
interface Serial0/1
 no ip address
 shutdown
!
interface FastEthernet1/0
 description to_PE2_l2vpn
 ip address 192.168.0.1 255.255.255.252
 duplex auto
 speed auto
!
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.10.1 name DEF_to_L3_VPN
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end
!
########################################################################
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE2
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
no ip domain lookup
!
!
!
!
!
!
interface FastEthernet0/0
 description to_PE3_l3vpn
 ip address 192.168.20.2 255.255.255.252
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 description to_PE3_l2vpn
 ip address 192.168.0.2 255.255.255.252
 duplex auto
 speed auto
!
interface Serial0/1
 no ip address
 shutdown
!
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.20.1 name DEF_to_L3_VPN
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end
!
########################################################################
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE3
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
no ip domain lookup
!
!
!
!
!
!
interface FastEthernet0/0
 description to_PE2_l3vpn
 ip address 192.168.30.2 255.255.255.252
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.30.1 name DEF_to_L3_VPN
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end
!
!
! Last configuration change at 17:15:27 UTC Mon Oct 21 2013
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname CR1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.11:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.11 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 description to_CR3
 ip address 10.6.0.1 255.255.255.252
 ip router isis 10
 speed auto
 duplex auto
 mpls ip
 mpls bgp forwarding
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet0/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet1/0
 description to_PE2
 ip address 10.2.0.2 255.255.255.252
 ip router isis 20
 shutdown
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/1
 description to_CR2
 ip address 10.3.0.1 255.255.255.252
 ip router isis 10
 speed auto
 duplex auto
 mpls ip
 mpls bgp forwarding
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/0
 description to_PE1
 ip address 10.5.0.2 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 10
 net 49.0010.1921.6800.0011.00
 is-type level-2-only
 metric-style wide
 redistribute connected route-map access_loopbacks
 mpls ldp sync
!
router isis 20
 net 49.0010.1921.6810.0011.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65000
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 no bgp default route-target filter
 neighbor 192.168.0.1 remote-as 65000
 neighbor 192.168.0.1 update-source Loopback0
 neighbor 192.168.0.12 remote-as 65001
 neighbor 192.168.0.12 ebgp-multihop 255
 neighbor 192.168.0.12 update-source Loopback0
 neighbor 192.168.0.13 remote-as 65002
 neighbor 192.168.0.13 ebgp-multihop 255
 neighbor 192.168.0.13 update-source Loopback0
 !
 address-family ipv4
  neighbor 192.168.0.1 activate
  neighbor 192.168.0.1 route-reflector-client
  neighbor 192.168.0.1 next-hop-self
  neighbor 192.168.0.1 send-label
  neighbor 192.168.0.12 activate
  neighbor 192.168.0.12 send-label
  neighbor 192.168.0.13 activate
  neighbor 192.168.0.13 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.1 activate
  neighbor 192.168.0.1 send-community extended
  neighbor 192.168.0.1 route-reflector-client
  neighbor 192.168.0.1 next-hop-self
  neighbor 192.168.0.12 activate
  neighbor 192.168.0.12 send-community extended
  neighbor 192.168.0.12 prefix-list unAGG-filter out
  neighbor 192.168.0.13 activate
  neighbor 192.168.0.13 send-community extended
  neighbor 192.168.0.13 prefix-list unAGG-filter out
 exit-address-family
 !
 address-family ipv4 vrf TEST
  aggregate-address 192.168.10.0 255.255.255.0
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.11/32
!
ip prefix-list unAGG-filter seq 5 permit 0.0.0.0/0 le 24
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!
!
! Last configuration change at 17:14:35 UTC Mon Oct 21 2013
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname CR2
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.12:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.12 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 no ip address
 shutdown
 speed auto
 duplex half
!
interface FastEthernet0/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet1/0
 description to_CR1
 ip address 10.3.0.2 255.255.255.252
 ip router isis 10
 speed auto
 duplex auto
 mpls ip
 mpls bgp forwarding
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/1
 description to_PE3
 ip address 10.4.0.1 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/0
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 10
 net 49.0010.1921.6800.0012.00
 is-type level-2-only
 metric-style wide
 redistribute connected route-map access_loopbacks
 mpls ldp sync
!
router isis 20
 net 49.0010.1921.6810.0012.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65001
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 no bgp default route-target filter
 neighbor 192.168.0.3 remote-as 65001
 neighbor 192.168.0.3 update-source Loopback0
 neighbor 192.168.0.11 remote-as 65000
 neighbor 192.168.0.11 ebgp-multihop 255
 neighbor 192.168.0.11 update-source Loopback0
 !
 address-family ipv4
  neighbor 192.168.0.3 activate
  neighbor 192.168.0.3 route-reflector-client
  neighbor 192.168.0.3 next-hop-self
  neighbor 192.168.0.3 send-label
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.3 activate
  neighbor 192.168.0.3 send-community extended
  neighbor 192.168.0.3 route-reflector-client
  neighbor 192.168.0.3 next-hop-self
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-community extended
  neighbor 192.168.0.11 prefix-list unAGG-filter out
 exit-address-family
 !
 address-family ipv4 vrf TEST
  aggregate-address 192.168.20.0 255.255.255.0
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.12/32
!
ip prefix-list unAGG-filter seq 5 permit 0.0.0.0/0 le 24
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!
!
! Last configuration change at 17:12:40 UTC Mon Oct 21 2013
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname CR3
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.13:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.13 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface FastEthernet1/0
 description to_PE2
 ip address 10.7.0.2 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/1
 description to_CR1
 ip address 10.6.0.2 255.255.255.252
 ip router isis 10
 speed auto
 duplex auto
 mpls ip
 mpls bgp forwarding
 isis circuit-type level-2-only
 isis network point-to-point
!
router isis 10
 net 49.0010.1921.6800.0013.00
 is-type level-2-only
 metric-style wide
 redistribute connected route-map access_loopbacks
 mpls ldp sync
!
router isis 20
 net 49.0010.1921.6810.0013.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65002
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 no bgp default route-target filter
 neighbor 192.168.0.2 remote-as 65002
 neighbor 192.168.0.2 update-source Loopback0
 neighbor 192.168.0.11 remote-as 65000
 neighbor 192.168.0.11 ebgp-multihop 255
 neighbor 192.168.0.11 update-source Loopback0
 !
 address-family ipv4
  neighbor 192.168.0.2 activate
  neighbor 192.168.0.2 route-reflector-client
  neighbor 192.168.0.2 next-hop-self
  neighbor 192.168.0.2 send-label
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.2 activate
  neighbor 192.168.0.2 send-community extended
  neighbor 192.168.0.2 route-reflector-client
  neighbor 192.168.0.2 next-hop-self
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-community extended
  neighbor 192.168.0.11 prefix-list unAGG-filter out
 exit-address-family
 !
 address-family ipv4 vrf TEST
  aggregate-address 192.168.30.0 255.255.255.0
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.13/32
!
ip prefix-list unAGG-filter seq 5 permit 0.0.0.0/0 le 24
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!


!
! Last configuration change at 15:09:45 UTC Fri Oct 18 2013
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname PE1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.1:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.1 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 description to_PE2
 ip address 10.1.0.1 255.255.255.252
 ip router isis 20
 shutdown
 speed auto
 duplex half
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet0/1
 description to_CE1_l2vpn
 no ip address
 shutdown
 speed auto
 duplex auto
 no keepalive
!
interface FastEthernet1/0
 description to_CE1_l3vpn
 ip vrf forwarding TEST
 ip address 192.168.10.1 255.255.255.252
 speed auto
 duplex auto
!
interface FastEthernet1/1
 description to_CR1
 ip address 10.5.0.1 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/0
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 20
 net 49.0010.1921.6800.0001.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65000
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 neighbor 192.168.0.11 remote-as 65000
 neighbor 192.168.0.11 update-source Loopback0
 !
 address-family ipv4
  redistribute connected route-map access_loopbacks
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-community extended
 exit-address-family
 !
 address-family ipv4 vrf TEST
  redistribute connected
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.1/32
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!
!
! Last configuration change at 16:55:53 UTC Mon Oct 21 2013
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname PE2
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.2:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.2 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 description to_PE1
 ip address 10.1.0.2 255.255.255.252
 ip router isis 20
 shutdown
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet0/1
 description to_CR1
 ip address 10.2.0.1 255.255.255.252
 ip router isis 20
 shutdown
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/0
 description to_CE1_l2vpn
 no ip address
 speed auto
 duplex auto
 no keepalive
 xconnect 192.168.0.3 100 encapsulation mpls
  mtu 1500
!
interface FastEthernet1/1
 description to_CR3
 ip address 10.7.0.1 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/0
 description to_CE3_l3vpn
 ip vrf forwarding TEST
 ip address 192.168.30.1 255.255.255.252
 speed auto
 duplex auto
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 20
 net 49.0010.1921.6800.0002.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65002
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 neighbor 192.168.0.13 remote-as 65002
 neighbor 192.168.0.13 update-source Loopback0
 !
 address-family ipv4
  redistribute connected route-map access_loopbacks
  neighbor 192.168.0.13 activate
  neighbor 192.168.0.13 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.13 activate
  neighbor 192.168.0.13 send-community extended
 exit-address-family
 !
 address-family ipv4 vrf TEST
  redistribute connected
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.2/32
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!


########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname PE3
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.3:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.3 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 no ip address
 shutdown
 speed auto
 duplex half
!
interface FastEthernet0/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet1/0
 description to_CR2
 ip address 10.4.0.2 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/1
 description to_CE2_l3vpn
 ip vrf forwarding TEST
 ip address 192.168.20.1 255.255.255.252
 speed auto
 duplex auto
!
interface FastEthernet2/0
 description to_CE2_l2vpn
 no ip address
 speed auto
 duplex auto
 no keepalive
 xconnect 192.168.0.2 100 encapsulation mpls
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 20
 net 49.0010.1921.6800.0003.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65001
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 neighbor 192.168.0.12 remote-as 65001
 neighbor 192.168.0.12 update-source Loopback0
 !
 address-family ipv4
  redistribute connected route-map access_loopbacks
  neighbor 192.168.0.12 activate
  neighbor 192.168.0.12 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.12 activate
  neighbor 192.168.0.12 send-community extended
 exit-address-family
 !
 address-family ipv4 vrf TEST
  redistribute connected
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.3/32
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end







Комментариев нет:

Отправить комментарий