1
见图
关键点在于S6800上两个VPN实例之间如何相互引入,有两种方法:
(1)在S6800连接MSR3610上创建vlan虚接口或者子接口绑定到VPN10,在BGP vpn视图中与对端建立邻居;
(2)本地VPN实例之间进行路由复制;复制到自己VPN路由表中,再在BGP中network,使对端BGP能学到。
注意:一边全局一边vpn实例无法只能单边互引,无法将全局路由复制到VPN实例中
S5800配置:
#
interface GigabitEthernet1/0/1
port link-mode bridge
#
interface Vlan-interface1
ip address 1.1.1.1 255.255.255.0
#
ospf 1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 3.3.3.3 0.0.0.0
S6800配置:
#
ip vpn-instance 10
route-distinguisher 1:1
#
address-family ipv4
route-replicate from vpn-instance 20 protocol direct advertise
route-replicate from vpn-instance 20 protocol ospf 10 advertise
route-replicate from vpn-instance 20 protocol bgp 100
#
ip vpn-instance 20
route-distinguisher 2:2
#
address-family ipv4
route-replicate from vpn-instance 10 protocol ospf 1 advertise
#
ospf 1 vpn-instance 10
default-route-advertise always
area 0.0.0.0
network 1.1.1.2 0.0.0.0
network 4.4.4.4 0.0.0.0
network 10.10.10.1 0.0.0.0
#
ospf 10 vpn-instance 20
area 0.0.0.0
network 2.2.2.1 0.0.0.0
#
interface Vlan-interface1
ip binding vpn-instance 10
ip address 1.1.1.2 255.255.255.0
#
interface Vlan-interface2
ip binding vpn-instance 20
ip address 2.2.2.1 255.255.255.0
#
interface Ten-GigabitEthernet1/0/17
port link-mode bridge
mirroring-group 1 mirroring-port both
#
interface Ten-GigabitEthernet1/0/48
port link-mode bridge
port access vlan 10
port-isolate enable group 1
mirroring-group 1 monitor-port
#
bgp 100
#
ip vpn-instance 20
peer 2.2.2.2 as-number 100
#
address-family ipv4 unicast
network 3.3.3.3 255.255.255.255
peer 2.2.2.2 enable
#
MSR3610配置:
#
ospf 10
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 4.4.4.4 0.0.0.0
#
interface LoopBack0
ip address 4.4.4.4 255.255.255.255
#
interface GigabitEthernet0/1
port link-mode route
ip address 2.2.2.2 255.255.255.0
#
S5800路由表:
S6800路由表:
MSR3610路由表:
测试结果,MSR3610学的到S5800的环回口路由,且可达;
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作