VPN实例间通信

1

见图

关键点在于S6800上两个VPN实例之间如何相互引入，有两种方法：

（1）在S6800连接MSR3610上创建vlan虚接口或者子接口绑定到VPN10，在BGP vpn视图中与对端建立邻居；

（2）本地VPN实例之间进行路由复制；复制到自己VPN路由表中，再在BGP中network，使对端BGP能学到。

注意：一边全局一边vpn实例无法只能单边互引，无法将全局路由复制到VPN实例中

S5800配置：

#

interface GigabitEthernet1/0/1

port link-mode bridge

#

interface Vlan-interface1

ip address 1.1.1.1 255.255.255.0

#

ospf 1

area 0.0.0.0

network 1.1.1.1 0.0.0.0

network 3.3.3.3 0.0.0.0

S6800配置：

#

ip vpn-instance 10

route-distinguisher 1:1

#

address-family ipv4

  route-replicate from vpn-instance 20 protocol direct advertise

  route-replicate from vpn-instance 20 protocol ospf 10 advertise

  route-replicate from vpn-instance 20 protocol bgp 100

#

ip vpn-instance 20

route-distinguisher 2:2

#

address-family ipv4

  route-replicate from vpn-instance 10 protocol ospf 1 advertise

#

ospf 1 vpn-instance 10

default-route-advertise always

area 0.0.0.0

  network 1.1.1.2 0.0.0.0

  network 4.4.4.4 0.0.0.0

  network 10.10.10.1 0.0.0.0

#

ospf 10 vpn-instance 20

area 0.0.0.0

  network 2.2.2.1 0.0.0.0

#

interface Vlan-interface1

ip binding vpn-instance 10

ip address 1.1.1.2 255.255.255.0

#

interface Vlan-interface2

ip binding vpn-instance 20

ip address 2.2.2.1 255.255.255.0

#

interface Ten-GigabitEthernet1/0/17

port link-mode bridge

mirroring-group 1 mirroring-port both

#

interface Ten-GigabitEthernet1/0/48

port link-mode bridge

port access vlan 10

port-isolate enable group 1

mirroring-group 1 monitor-port

#

bgp 100

#

ip vpn-instance 20

  peer 2.2.2.2 as-number 100

  #

  address-family ipv4 unicast

   network 3.3.3.3 255.255.255.255

   peer 2.2.2.2 enable

#

MSR3610配置：

#

ospf 10

area 0.0.0.0

  network 2.2.2.2 0.0.0.0

  network 4.4.4.4 0.0.0.0

#

interface LoopBack0

ip address 4.4.4.4 255.255.255.255

#

interface GigabitEthernet0/1

port link-mode route

ip address 2.2.2.2 255.255.255.0

#

S5800路由表：

S6800路由表：

MSR3610路由表：

测试结果，MSR3610学的到S5800的环回口路由，且可达；