Использование Seemless MPLS / Unified MPLS на сети оператора связи


В mpls-сети крупного ISP, в процессе роста, неизбежно возникает проблема масштабирования по числу igp и vpnv4 маршрутов. Однако, наши глубокоуважаемые вендоры (Cisco, Huawei... etc.) заботятся о нас :)

В частности, на ciscoexpo`12 была неплохая сессия по Unified MPLS . Аналогичные решения есть и у Huawei, отличия в незначительных деталях, например, Cisco использует level 1- level 2 is-is, a Huawei - отдельные igp-процессы c редистрибьюцией. Для нас удобнее второй вариант, т.к. существующая сеть организована как единый is-is level 2 only домен.


Србственно, захотелось пощупать это руками в динамипсе. Между СЕ1 и СЕ2 организован L2vpn+L3vpn, на СR1 и СR2 для vrf TEST осуществляется аггрегация маршрутов в сети /24, между СR1 и СR2 фильтруются все vpnv4 маршруты длиннее /24.


Конфигурации динамипса (GNS3) и роутеров под катом.



autostart = False
[127.0.0.1:7202]
    workingdir = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/working
    udp = 10200
    [[2621]]
        image = /home/rmavrichev/.gns3/IOS/c2600-i-mz.123-25.image
        idlepc = 0x803cb650
        ghostios = True
        chassis = 2621
    [[ROUTER CE2]]
        model = 2621
        console = 2010
        aux = 2100
        cnfg = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/configs/CE2.cfg
        wic0/0 = WIC-1T
        wic0/1 = WIC-1T
        f0/0 = PE3 f1/1
        f0/1 = PE3 f2/0
        x = 476.75440072
        y = -27.0
    [[ROUTER CE1]]
        model = 2621
        console = 2011
        aux = 2111
        cnfg = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/configs/CE1.cfg
        wic0/0 = WIC-1T
        wic0/1 = WIC-1T
        f0/0 = PE1 f0/1
        f0/1 = PE1 f1/0
        slot1 = NM-1FE-TX
        f1/0 = PE2 f1/0
        x = -658.78950135
        y = -17.7573593128
[qemu 127.0.0.1:10525]
    workingdir = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/working
    udp = 20000
[127.0.0.1:7200]
    workingdir = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/working
    udp = 10000
    [[7200]]
        image = /home/rmavrichev/.gns3/IOS/c7200-advipservicesk9-mz.152-4.S4.image
        ram = 512
        idlepc = 0x631801fc
        ghostios = True
    [[ROUTER PE1]]
        console = 2000
        aux = 2100
        cnfg = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/configs/PE1.cfg
        slot0 = C7200-IO-2FE
        f0/0 = PE2 f0/0
        f0/1 = CE1 f0/0
        slot1 = PA-2FE-TX
        f1/0 = CE1 f0/1
        f1/1 = CR1 f2/0
        slot2 = PA-2FE-TX
        symbol = edge_label_switch_router
        x = -458.419876941
        y = -33.6568542495
[127.0.0.1:7201]
    workingdir = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/working
    udp = 10100
    [[7200]]
        image = /home/rmavrichev/.gns3/IOS/c7200-advipservicesk9-mz.152-4.S4.image
        ram = 512
        idlepc = 0x631801fc
        ghostios = True
    [[ROUTER CR2]]
        console = 2006
        aux = 2111
        cnfg = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/configs/CR2.cfg
        slot0 = C7200-IO-2FE
        slot1 = PA-2FE-TX
        f1/0 = CR1 f1/1
        f1/1 = PE3 f1/0
        slot2 = PA-2FE-TX
        symbol = label_switch_router
        x = 38.3553390594
        y = -39.3847763109
    [[ROUTER CR1]]
        console = 2004
        aux = 2112
        cnfg = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/configs/CR1.cfg
        slot0 = C7200-IO-2FE
        slot1 = PA-2FE-TX
        f1/0 = PE2 f0/1
        f1/1 = CR2 f1/0
        slot2 = PA-2FE-TX
        f2/0 = PE1 f1/1
        symbol = label_switch_router
        x = -139.066017178
        y = -37.5563491861
    [[ROUTER PE2]]
        console = 2002
        aux = 2113
        cnfg = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/configs/PE2.cfg
        slot0 = C7200-IO-2FE
        f0/0 = PE1 f0/0
        f0/1 = CR1 f1/0
        slot1 = PA-2FE-TX
        f1/0 = CE1 f1/0
        slot2 = PA-2FE-TX
        symbol = edge_label_switch_router
        x = -374.775216
        y = 71.7867965643
    [[ROUTER PE3]]
        console = 2008
        aux = 2114
        cnfg = /home/rmavrichev/.gns3/seemless_mpls_separate_igp/configs/PE3.cfg
        slot0 = C7200-IO-2FE
        slot1 = PA-2FE-TX
        f1/0 = CR2 f1/1
        f1/1 = CE2 f0/0
        slot2 = PA-2FE-TX
        f2/0 = CE2 f0/1
        symbol = edge_label_switch_router
        x = 266.291413922
        y = -35.0710678119
[GNS3-DATA]
    configs = configs
    workdir = working
    m11 = 0.707106781185
    m22 = 0.707106781185
    [[NOTE 1]]
        text = bgp AS65000
        x = -93.6518036158
        y = -161.087878479
        color = "#3c3c3c"
    [[NOTE 2]]
        text = isis 20
        x = 162.634559673
        y = -97.5538238693
        color = "#3c3c3c"
    [[NOTE 3]]
        text = isis 20
        x = -296.984848099
        y = -91.6959594931
        color = "#3c3c3c"
    [[NOTE 4]]
        text = isis 10
        x = -52.3259018079
        y = -97.754833996
        color = "#3c3c3c"
    [[NOTE 5]]
        text = f1/0
        x = 71.1488785026
        y = 34.0275961435
        interface = CE1 f1/0
        color = "#3c3c3c"
    [[NOTE 6]]
        text = f0/1
        x = 73.2701714274
        y = 23.8202453695
        interface = CE1 f0/1
        color = "#3c3c3c"
    [[NOTE 7]]
        text = f0/0
        x = 72.8746605279
        y = 18.8359128035
        interface = CE1 f0/0
        color = "#3c3c3c"
    [[NOTE 8]]
        text = f0/1
        x = -6.77901462127
        y = 15.4708349875
        interface = CE2 f0/1
        color = "#3c3c3c"
    [[NOTE 9]]
        text = f0/0
        x = -6.97061932095
        y = 20.4671624026
        interface = CE2 f0/0
        color = "#3c3c3c"
    [[NOTE 10]]
        text = f2/0
        x = 73.1622240206
        y = 18.5365101823
        interface = PE3 f2/0
        color = "#3c3c3c"
    [[NOTE 11]]
        text = f1/1
        x = 72.9706193209
        y = 23.5328375974
        interface = PE3 f1/1
        color = "#3c3c3c"
    [[NOTE 12]]
        text = f1/0
        x = -6.99946064505
        y = 22.2077212202
        interface = PE3 f1/0
        color = "#3c3c3c"
    [[NOTE 13]]
        text = f1/0
        x = -5.14887850263
        y = 9.97240385649
        interface = PE2 f1/0
        color = "#3c3c3c"
    [[NOTE 14]]
        text = f0/0
        x = 8.14112154305
        y = -9.33745621237
        interface = PE2 f0/0
        color = "#3c3c3c"
    [[NOTE 15]]
        text = f0/1
        x = 69.5924373289
        y = 5.84470581109
        interface = PE2 f0/1
        color = "#3c3c3c"
    [[NOTE 16]]
        text = f1/0
        x = -6.4791496283
        y = 30.1484197625
        interface = PE1 f1/0
        color = "#3c3c3c"
    [[NOTE 17]]
        text = f0/1
        x = -6.87466052787
        y = 25.1640871965
        interface = PE1 f0/1
        color = "#3c3c3c"
    [[NOTE 18]]
        text = f0/0
        x = 57.858878457
        y = 53.3374562124
        interface = PE1 f0/0
        color = "#3c3c3c"
    [[NOTE 19]]
        text = f1/1
        x = 72.9994960905
        y = 22.200779743
        interface = PE1 f1/1
        color = "#3c3c3c"
    [[NOTE 20]]
        text = f2/0
        x = -7.49949609051
        y = 27.299220257
        interface = CR1 f2/0
        color = "#3c3c3c"
    [[NOTE 21]]
        text = f1/0
        x = -4.0924373289
        y = 43.6552941889
        interface = CR1 f1/0
        color = "#3c3c3c"
    [[NOTE 22]]
        text = f1/1
        x = 72.4978760762
        y = 27.087799332
        interface = CR1 f1/1
        color = "#3c3c3c"
    [[NOTE 23]]
        text = f1/1
        x = 72.499460645
        y = 27.2922787798
        interface = CR2 f1/1
        color = "#3c3c3c"
    [[NOTE 24]]
        text = f1/0
        x = -7.49787607623
        y = 27.912200668
        interface = CR2 f1/0
        color = "#3c3c3c"
    [[SHAPE 1]]
        type = ellipse
        x = -414.364573776
        y = -104.651803616
        width = 296.166522242
        height = 222.13708499
        border_style = 2
        z = -2.0
    [[SHAPE 2]]
        type = ellipse
        x = 94.0000000002
        y = -109.0
        width = 200.0
        height = 200.0
        border_style = 2
        z = -2.0
    [[SHAPE 3]]
        type = ellipse
        x = -119.74011537
        y = -107.43860018
        width = 200.0
        height = 200.0
        border_style = 2
        z = -2.0
    [[SHAPE 4]]
        type = ellipse
        x = -468.104689147
        y = -173.948268172
        width = 810.344371242
        height = 351.320851174
        fill_color = "#aaff7f"
        z = -3.0


 !
########################################################################
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE1
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
no ip domain lookup
!
!
!
!
!
!
interface FastEthernet0/0
 description to_PE1_l2vpn
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 description to_PE1_l3vpn
 ip address 192.168.10.2 255.255.255.252
 duplex auto
 speed auto
!
interface Serial0/1
 no ip address
 shutdown
!
interface FastEthernet1/0
 description to_PE2_l2vpn
 ip address 192.168.0.1 255.255.255.252
 duplex auto
 speed auto
!
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.10.1 name DEF_to_L3_VPN
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end
!
########################################################################
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE2
!
boot-start-marker
boot-end-marker
!
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
no ip domain lookup
!
!
!
!
!
!
interface FastEthernet0/0
 description to_PE3_l3vpn
 ip address 192.168.20.2 255.255.255.252
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 description to_PE3_l2vpn
 ip address 192.168.0.2 255.255.255.252
 duplex auto
 speed auto
!
interface Serial0/1
 no ip address
 shutdown
!
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.20.1 name DEF_to_L3_VPN
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end
!
!
! Last configuration change at 11:12:09 UTC Tue Oct 22 2013
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname CR1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.11:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.11 255.255.255.255
 ip router isis 10
!
interface FastEthernet0/0
 no ip address
 shutdown
 speed auto
 duplex half
!
interface FastEthernet0/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet1/0
 description to_PE2
 ip address 10.2.0.2 255.255.255.252
 ip router isis 20
 shutdown
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/1
 description to_CR2
 ip address 10.3.0.1 255.255.255.252
 ip router isis 10
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/0
 description to_PE1
 ip address 10.5.0.2 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 10
 net 49.0010.1921.6800.0011.00
 is-type level-2-only
 metric-style wide
 redistribute isis 20 ip route-map access_loopbacks
 mpls ldp sync
!
router isis 20
 net 49.0010.1921.6810.0011.00
 is-type level-2-only
 metric-style wide
 redistribute connected route-map ibgp_nexthops
 redistribute isis 10 ip route-map ibgp_nexthops
 mpls ldp sync
!
router bgp 65000
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 neighbor 192.168.0.1 remote-as 65000
 neighbor 192.168.0.1 update-source Loopback0
 neighbor 192.168.0.2 remote-as 65000
 neighbor 192.168.0.2 update-source Loopback0
 neighbor 192.168.0.12 remote-as 65000
 neighbor 192.168.0.12 update-source Loopback0
 !
 address-family ipv4
  neighbor 192.168.0.1 activate
  neighbor 192.168.0.1 route-reflector-client
  neighbor 192.168.0.1 send-label
  neighbor 192.168.0.2 activate
  neighbor 192.168.0.2 route-reflector-client
  neighbor 192.168.0.2 send-label
  neighbor 192.168.0.12 activate
  neighbor 192.168.0.12 next-hop-self all
  neighbor 192.168.0.12 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.1 activate
  neighbor 192.168.0.1 send-community extended
  neighbor 192.168.0.1 route-reflector-client
  neighbor 192.168.0.12 activate
  neighbor 192.168.0.12 send-community extended
  neighbor 192.168.0.12 next-hop-self all
  neighbor 192.168.0.12 prefix-list unAGG-filter out
 exit-address-family
 !
 address-family ipv4 vrf TEST
  aggregate-address 192.168.10.0 255.255.255.0
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.1/32
ip prefix-list access_loopbacks seq 10 permit 192.168.0.2/32
ip prefix-list access_loopbacks seq 15 permit 192.168.0.3/32
ip prefix-list access_loopbacks seq 20 permit 192.168.0.11/32
ip prefix-list access_loopbacks seq 25 permit 192.168.0.12/32
!
ip prefix-list ibgp_nexthops seq 5 permit 192.168.0.11/32
ip prefix-list ibgp_nexthops seq 10 permit 192.168.0.12/32
!
ip prefix-list unAGG-filter seq 5 permit 0.0.0.0/0 le 24
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
route-map ibgp_nexthops permit 10
 match ip address prefix-list ibgp_nexthops
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!
!
! Last configuration change at 11:12:22 UTC Tue Oct 22 2013
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname CR2
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.12:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.12 255.255.255.255
 ip router isis 10
!
interface FastEthernet0/0
 no ip address
 shutdown
 speed auto
 duplex half
!
interface FastEthernet0/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet1/0
 description to_CR1
 ip address 10.3.0.2 255.255.255.252
 ip router isis 10
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/1
 description to_PE3
 ip address 10.4.0.1 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/0
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 10
 net 49.0010.1921.6800.0012.00
 is-type level-2-only
 metric-style wide
 redistribute isis 20 ip route-map access_loopbacks
 mpls ldp sync
!
router isis 20
 net 49.0010.1921.6810.0012.00
 is-type level-2-only
 metric-style wide
 redistribute connected route-map ibgp_nexthops
 redistribute isis 10 ip route-map ibgp_nexthops
 default-information originate
 mpls ldp sync
!
router bgp 65000
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 neighbor 192.168.0.3 remote-as 65000
 neighbor 192.168.0.3 update-source Loopback0
 neighbor 192.168.0.11 remote-as 65000
 neighbor 192.168.0.11 update-source Loopback0
 !
 address-family ipv4
  neighbor 192.168.0.3 activate
  neighbor 192.168.0.3 route-reflector-client
  neighbor 192.168.0.3 send-label
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 next-hop-self all
  neighbor 192.168.0.11 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.3 activate
  neighbor 192.168.0.3 send-community extended
  neighbor 192.168.0.3 route-reflector-client
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-community extended
  neighbor 192.168.0.11 next-hop-self all
  neighbor 192.168.0.11 prefix-list unAGG-filter out
 exit-address-family
 !
 address-family ipv4 vrf TEST
  aggregate-address 192.168.20.0 255.255.255.0
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.1/32
ip prefix-list access_loopbacks seq 10 permit 192.168.0.2/32
ip prefix-list access_loopbacks seq 15 permit 192.168.0.3/32
ip prefix-list access_loopbacks seq 20 permit 192.168.0.11/32
ip prefix-list access_loopbacks seq 25 permit 192.168.0.12/32
!
ip prefix-list ibgp_nexthops seq 5 permit 192.168.0.11/32
ip prefix-list ibgp_nexthops seq 10 permit 192.168.0.12/32
!
ip prefix-list unAGG-filter seq 5 permit 0.0.0.0/0 le 24
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
route-map ibgp_nexthops permit 10
 match ip address prefix-list ibgp_nexthops
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname PE1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.1:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.1 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 description to_PE2
 ip address 10.1.0.1 255.255.255.252
 ip router isis 20
 speed auto
 duplex half
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet0/1
 description to_CE1_l2vpn
 no ip address
 shutdown
 speed auto
 duplex auto
 no keepalive
!
interface FastEthernet1/0
 description to_CE1_l3vpn
 ip vrf forwarding TEST
 ip address 192.168.10.1 255.255.255.252
 speed auto
 duplex auto
!
interface FastEthernet1/1
 description to_CR1
 ip address 10.5.0.1 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet2/0
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 20
 net 49.0010.1921.6800.0001.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65000
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 neighbor 192.168.0.11 remote-as 65000
 neighbor 192.168.0.11 update-source Loopback0
 !
 address-family ipv4
  redistribute connected route-map access_loopbacks
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-community extended
 exit-address-family
 !
 address-family ipv4 vrf TEST
  redistribute connected
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.1/32
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname PE2
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.2:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.2 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 description to_PE1
 ip address 10.1.0.2 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet0/1
 description to_CR1
 ip address 10.2.0.1 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/0
 description to_CE1_l2vpn
 no ip address
 speed auto
 duplex auto
 no keepalive
 xconnect 192.168.0.3 100 encapsulation mpls
  mtu 1500
!
interface FastEthernet1/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet2/0
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 20
 net 49.0010.1921.6800.0002.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65000
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 neighbor 192.168.0.11 remote-as 65000
 neighbor 192.168.0.11 update-source Loopback0
 !
 address-family ipv4
  redistribute connected route-map access_loopbacks
  neighbor 192.168.0.11 activate
  neighbor 192.168.0.11 send-label
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.2/32
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end
!
########################################################################
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname PE3
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ip cef
!
ip vrf TEST
 rd 192.168.0.3:100
 route-target export 100:100
 route-target import 100:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label protocol ldp
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 description GRT Lo isis+ldp+bgp
 ip address 192.168.0.3 255.255.255.255
 ip router isis 20
!
interface FastEthernet0/0
 no ip address
 shutdown
 speed auto
 duplex half
!
interface FastEthernet0/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet1/0
 description to_CR2
 ip address 10.4.0.2 255.255.255.252
 ip router isis 20
 speed auto
 duplex auto
 mpls ip
 isis circuit-type level-2-only
 isis network point-to-point
!
interface FastEthernet1/1
 description to_CE2_l3vpn
 ip vrf forwarding TEST
 ip address 192.168.20.1 255.255.255.252
 speed auto
 duplex auto
!
interface FastEthernet2/0
 description to_CE2_l2vpn
 no ip address
 speed auto
 duplex auto
 no keepalive
 xconnect 192.168.0.2 100 encapsulation mpls
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
router isis 20
 net 49.0010.1921.6800.0003.00
 is-type level-2-only
 metric-style wide
 mpls ldp sync
!
router bgp 65000
 bgp log-neighbor-changes
 bgp graceful-restart restart-time 120
 bgp graceful-restart stalepath-time 360
 bgp graceful-restart
 neighbor 192.168.0.12 remote-as 65000
 neighbor 192.168.0.12 update-source Loopback0
 !
 address-family ipv4
  redistribute connected route-map access_loopbacks
  neighbor 192.168.0.12 activate
  neighbor 192.168.0.12 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor 192.168.0.12 activate
  neighbor 192.168.0.12 send-community extended
 exit-address-family
 !
 address-family ipv4 vrf TEST
  redistribute connected
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list access_loopbacks seq 5 permit 192.168.0.3/32
!
route-map access_loopbacks permit 10
 match ip address prefix-list access_loopbacks
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end

 

Комментариев нет:

Отправить комментарий