msr1 1口(vrf1)-----1口 msr2 0口-----1口 msr3 loop0(vrf2)
#
ip vpn-instance 1
#
ip route-static vpn-instance 1 0.0.0.0 0 12.1.1.2
#
interface GigabitEthernet0/1
ip binding vpn-instance 1
ip address 12.1.1.1 255.255.255.0
#
interface Tunnel0 mode gre
ip address 192.168.1.1 255.255.255.0
ospf 1 area 0.0.0.0
source 12.1.1.1
destination 23.1.1.3
tunnel vpn-instance 1
#
[H3C-Tunnel0]dis ospf peer
OSPF Process 1 with Router ID 192.168.1.1
Neighbor Brief Information
Area: 0.0.0.0
Router ID Address Pri Dead-Time State Interface
4.4.4.4 192.168.1.2 1 39 Full/ - Tun0
[H3C-Tunnel0]dis ip rou
Destinations : 13 Routes : 13
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0
4.4.4.4/32 O_INTRA 10 1562 192.168.1.2 Tun0
MSR3
#
ip vpn-instance 2
#
ip route-static 0.0.0.0 0 23.1.1.2
#
interface GigabitEthernet0/1
ip address 23.1.1.3 255.255.255.0
#
interface Tunnel1 mode gre
ip binding vpn-instance 2
ip address 192.168.1.2 255.255.255.0
ospf 2 area 0.0.0.0
source 23.1.1.3
destination 12.1.1.1
#
interface LoopBack0
ip binding vpn-instance 2
ip address 4.4.4.4 255.255.255.0
ospf 2 area 0.0.0.0
#
[H3C-LoopBack0]dis ospf peer
OSPF Process 2 with Router ID 4.4.4.4
Neighbor Brief Information
Area: 0.0.0.0
Router ID Address Pri Dead-Time State Interface
192.168.1.1 192.168.1.1 1 37 Full/ - Tun1
1,针对于msr1,写过vpn层面的路由之后,在tunnel口下 tunnel vpn-instance +和公网口对应的实例即可,内网口业务按照物理层面正常配置
2,针对于msr3,要想保证业务可直接通信,需要tunnel口绑定和内网业务同vpn实例,公网的路由直接写一个物理层面的缺省就可以,如果不想和业务口绑定同实例,则需要配置vpn层面互访路由实现通信
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作