• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

PBR 引流到路由器后产生环路

2024-06-03提问
  • 0关注
  • 0收藏,231浏览
粉丝:0人 关注:0人

问题描述:

组网及组网描述:

MSR36-20_1-5 分别为R1-R5 ,MSR-20_8 是R6,底层协议ospf ,R1-R3 建立IBGP邻居,R1与R4,R3-R4建立EBGP 邻居,并且R1-R5之间互联接口配置mpls ldp 功能 ,并且ldp 邻居正常。

<R1>dis cur
#
 version 7.1.064, Release 0427P22
#
 sysname R1
#
track 1 nqa entry admin test reaction 1
#
ospf 10 router-id 1.1.1.1
 area 0.0.0.0
#
 mpls lsr-id 1.1.1.1
#
 ip unreachables enable
 ip ttl-expires enable
#
 sysid R1
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#              
policy-based-route xxx deny node 5
 if-match acl 3001
#
policy-based-route xxx permit node 10
 if-match acl 3000
 apply next-hop 10.0.16.6 track 1
#
nqa entry admin test
 type icmp-echo
  destination ip 10.0.16.6
  frequency 1000
  next-hop ip 10.0.16.6
  reaction 1 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only
#
 nqa schedule admin test start-time now lifetime forever
#
mpls ldp
#
interface Serial1/0
#
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface LoopBack0
 ip address 1.1.1.1 255.255.255.255
 ospf 10 area 0.0.0.0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 10.0.12.1 255.255.255.0
 ospf 10 area 0.0.0.0
 mpls enable
 mpls ldp enable
 ip policy-based-route xxx
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip address 10.0.14.1 255.255.255.0
 mpls enable   
 mpls ldp enable
 ip policy-based-route xxx
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 ip address 10.0.16.1 255.255.255.0
#
interface GigabitEthernet5/0
 port link-mode route
 combo enable copper
 ip address 10.0.61.1 255.255.255.0
#
interface GigabitEthernet5/1
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/1
 port link-mode route
 combo enable copper
#
bgp 100
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack0
 peer 10.0.14.4 as-number 200
 #
 address-family ipv4 unicast
  network 1.1.1.1 255.255.255.255
  peer 2.2.2.2 enable
  peer 2.2.2.2 next-hop-local
  peer 10.0.14.4 enable
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-operator
#
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
acl advanced 3000
 rule 5 permit ip source 192.168.1.1 0 destination 100.1.1.1 0 counting
#
acl advanced 3001
 rule 0 permit ip destination 1.1.1.1 0
 rule 5 permit ip source 10.0.14.0 0.0.0.255
 rule 10 permit ip destination 10.0.14.0 0.0.0.255
 rule 15 permit ip source 10.0.12.0 0.0.0.255
 rule 20 permit ip destination 10.0.12.0 0.0.0.255
#              
domain system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#              
role name level-14
 description Predefined level-14 role
#
user-group system
#
return
<R1>            
<R1>

<R2>dis cur
#
 version 7.1.064, Release 0427P22
#
 sysname R2
#
ospf 10 router-id 2.2.2.2
 area 0.0.0.0
#
 mpls lsr-id 2.2.2.2
#
 ip unreachables enable
 ip ttl-expires enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
policy-based-route xxx deny node 5
 if-match acl 3001
#
policy-based-route xxx permit node 10
 if-match acl 3000
 apply next-hop 10.0.16.6 track 1
#
mpls ldp
#
interface Serial1/0
#
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface LoopBack0
 ip address 2.2.2.2 255.255.255.255
 ospf 10 area 0.0.0.0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 10.0.12.2 255.255.255.0
 ospf 10 area 0.0.0.0
 mpls enable
 mpls ldp enable
 ip policy-based-route xxx
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip address 10.0.23.2 255.255.255.0
 ospf 10 area 0.0.0.0
 mpls enable
 mpls ldp enable
 ip policy-based-route xxx
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
 ip address 10.0.16.1 255.255.255.0
#
interface GigabitEthernet5/0
 port link-mode route
 combo enable copper
#              
interface GigabitEthernet5/1
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/1
 port link-mode route
 combo enable copper
#
bgp 100
 peer 1.1.1.1 as-number 100
 peer 1.1.1.1 connect-interface LoopBack0
 peer 3.3.3.3 as-number 100
 peer 3.3.3.3 connect-interface LoopBack0
 #
 address-family ipv4 unicast
  network 2.2.2.2 255.255.255.255
  peer 1.1.1.1 enable
  peer 1.1.1.1 next-hop-local
  peer 1.1.1.1 reflect-client
  peer 3.3.3.3 enable
  peer 3.3.3.3 next-hop-local
  peer 3.3.3.3 reflect-client
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-operator
#
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
domain system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#              
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return
<R2>                                        
<R2>

<R3>
<R3>dis cur
#
 version 7.1.064, Release 0427P22
#
 sysname R3
#
ospf 10 router-id 3.3.3.3
 area 0.0.0.0
#
 mpls lsr-id 3.3.3.3
#
 ip unreachables enable
 ip ttl-expires enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
mpls ldp
#
interface Serial1/0
#              
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface LoopBack0
 ip address 3.3.3.3 255.255.255.255
 ospf 10 area 0.0.0.0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 10.0.23.3 255.255.255.0
 ospf 10 area 0.0.0.0
 mpls enable
 mpls ldp enable
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip address 10.0.35.3 255.255.255.0
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
#
interface GigabitEthernet5/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet5/1
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/1
 port link-mode route
 combo enable copper
#
bgp 100        
 peer 2.2.2.2 as-number 100
 peer 2.2.2.2 connect-interface LoopBack0
 peer 10.0.35.5 as-number 300
 #
 address-family ipv4 unicast
  network 3.3.3.3 255.255.255.255
  peer 2.2.2.2 enable
  peer 2.2.2.2 next-hop-local
  peer 10.0.35.5 enable
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-operator
#
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
domain system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#              
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return
<R3>           
<R3>

<R4>dis cur
#
 version 7.1.064, Release 0427P22
#
 sysname R4
#
 mpls lsr-id 4.4.4.4
#
 ip unreachables enable
 ip ttl-expires enable
#
 sysid R4
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
mpls ldp
#
interface Serial1/0
#
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface LoopBack0
 ip address 4.4.4.4 255.255.255.255
#
interface LoopBack1
 ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 10.0.14.4 255.255.255.0
 mpls enable
 mpls ldp enable
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
#
interface GigabitEthernet5/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet5/1
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/1
 port link-mode route
 combo enable copper
#
bgp 200
 peer 10.0.14.1 as-number 100
 #
 address-family ipv4 unicast
  network 4.4.4.4 255.255.255.255
  network 192.168.1.0 255.255.255.0
  peer 10.0.14.1 enable
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-operator
#              
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
domain system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#              
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return
<R4>                                     
<R4>

<R5>dis cur
#
 version 7.1.064, Release 0427P22
#
 sysname R5
#
 ip unreachables enable
 ip ttl-expires enable
#
 sysid R4
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
interface Serial1/0
#
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface LoopBack1
 ip address 100.1.1.1 255.255.255.0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 10.0.35.5 255.255.255.0
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
#
interface GigabitEthernet5/0
 port link-mode route
 combo enable copper
#              
interface GigabitEthernet5/1
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/1
 port link-mode route
 combo enable copper
#
bgp 300
 peer 10.0.35.3 as-number 100
 #
 address-family ipv4 unicast
  network 100.1.1.0 255.255.255.0
  peer 10.0.35.3 enable
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-operator
#
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
domain system
#
 domain default enable system
#              
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return
<R5>                                               
<R5>

<R6>dis cur
#
 version 7.1.064, Release 0427P22
#
 sysname R6
#
 ip unreachables enable
 ip ttl-expires enable
#
 system-working-mode standard
 xbar load-single
 password-recovery enable
 lpu-type f-series
#
vlan 1
#
interface Serial1/0
#
interface Serial2/0
#
interface Serial3/0
#
interface Serial4/0
#
interface NULL0
#
interface GigabitEthernet0/0
 port link-mode route
 combo enable copper
 ip address 10.0.16.6 255.255.255.0
#
interface GigabitEthernet0/1
 port link-mode route
 combo enable copper
 ip address 10.0.61.16 255.255.255.0
#
interface GigabitEthernet0/2
 port link-mode route
 combo enable copper
#
interface GigabitEthernet5/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet5/1
 port link-mode route
 combo enable copper
#              
interface GigabitEthernet6/0
 port link-mode route
 combo enable copper
#
interface GigabitEthernet6/1
 port link-mode route
 combo enable copper
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0     
 user-role network-operator
#
line con 0
 user-role network-admin
#
line vty 0 63
 user-role network-operator
#
 ip route-static 0.0.0.0 0 10.0.16.1
#
domain system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#              
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return
<R6>                                    
<R6>

<R4>
<R4>tracert -a 192.168.1.1 100.1.1.1
traceroute to 100.1.1.1 (100.1.1.1) from 192.168.1.1, 30 hops at most, 40 bytes each packet, press CTRL+C to break
 1  10.0.14.1 (10.0.14.1)  0.791 ms  0.728 ms  0.645 ms
 2  10.0.16.6 (10.0.16.6)  1.109 ms  0.755 ms  1.217 ms
 3  10.0.16.1 (10.0.16.1)  1.599 ms  1.229 ms  1.168 ms
 4  10.0.16.6 (10.0.16.6)  1.213 ms  1.624 ms  1.964 ms
 5  10.0.16.1 (10.0.16.1)  0.996 ms  1.976 ms  1.291 ms
 6  10.0.16.6 (10.0.16.6)  2.136 ms  2.312 ms  1.714 ms
 7  10.0.16.1 (10.0.16.1)  1.840 ms  2.298 ms *
 8  10.0.16.6 (10.0.16.6)  2.947 ms  2.841 ms  2.525 ms
 9  10.0.16.1 (10.0.16.1)  3.200 ms  2.018 ms  2.161 ms
10  10.0.16.6 (10.0.16.6)  3.619 ms  2.488 ms  3.402 ms
11  10.0.16.1 (10.0.16.1)  2.886 ms  2.512 ms  3.671 ms
12  10.0.16.6 (10.0.16.6)  3.648 ms  3.743 ms  2.733 ms
13  10.0.16.1 (10.0.16.1)  3.129 ms  3.596 ms  3.904 ms
14  10.0.16.6 (10.0.16.6)  3.630 ms  3.985 ms *
15  10.0.16.1 (10.0.16.1)  4.231 ms  2.843 ms  3.755 ms
16  10.0.16.6 (10.0.16.6)  3.924 ms  3.866 ms  4.911 ms
17  10.0.16.1 (10.0.16.1)  4.433 ms  5.034 ms  4.040 ms
18  10.0.16.6 (10.0.16.6)  4.251 ms  6.207 ms  4.286 ms
19  10.0.16.1 (10.0.16.1)  4.913 ms  4.799 ms  5.504 ms
20  10.0.16.6 (10.0.16.6)  5.012 ms  5.312 ms  5.595 ms
21  10.0.16.1 (10.0.16.1)  4.956 ms  5.719 ms *
22  10.0.16.6 (10.0.16.6)  6.421 ms  5.169 ms  5.160 ms
23  10.0.16.1 (10.0.16.1)  4.964 ms  6.103 ms  4.856 ms
24  10.0.16.6 (10.0.16.6)  6.338 ms  7.052 ms  5.205 ms
25  10.0.16.1 (10.0.16.1)  6.623 ms  5.766 ms  4.965 ms
26  10.0.16.6 (10.0.16.6)  6.754 ms  6.956 ms  5.699 ms
27  10.0.16.1 (10.0.16.1)  7.208 ms  6.311 ms  7.193 ms
28  10.0.16.6 (10.0.16.6)  7.221 ms  6.826 ms *
29  10.0.16.1 (10.0.16.1)  8.865 ms  7.428 ms  6.927 ms
30  10.0.16.6 (10.0.16.6)  7.188 ms  8.371 ms  6.611 ms
!Destination not found inside Max Hop Count.
<R4>

 

1 个回答
粉丝:27人 关注:8人

R1在系统视图下undo ip fast-forwarding load-sharing即可解决。

或者在使用RBR时配置VPN实例也行。

暂无评论

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明