问

如何使ospf路由与evpn路由相通

VxLAN
EVPN

1天前提问

0关注
0收藏，73浏览

不会吧

不会吧零段

粉丝：0人关注：1人

问题描述：

sy
undo info en
sysname S10510X-1
int LoopBack 0
IP ADD 173.16.19.100 32

int rang g1/0/1 to g1/0/4
port link-mode route
int g1/0/1
ip add 173.16.18.153 30
int g1/0/2
ip add 173.16.18.109 30
int g1/0/3
ip add 173.16.18.137 30
int g1/0/4
ip add 1.1.1.1 30


sy
undo info en
sysname S10510X-2
int LoopBack 0
IP ADD 173.16.19.200 32

int rang g1/0/1 to g1/0/3
port link-mode route
int g1/0/1
ip add 173.16.18.154 30
int g1/0/2
ip add 173.16.18.141 30
int g1/0/3
ip add 173.16.18.145 30



sy
undo info en
sysname Leaf-1
int LoopBack 0
IP ADD 173.16.19.80 32

int rang g1/0/1 to g1/0/2
port link-mode route
int g1/0/1
ip add 173.16.18.110 30
int g1/0/2
ip add 173.16.18.142 30



sy
undo info en
sysname Leaf-2
int LoopBack 0
IP ADD 173.16.19.90 32

int rang g1/0/1 to g1/0/2
port link-mode route
int g1/0/1
ip add 173.16.18.138 30
int g1/0/2
ip add 173.16.18.146 30


ospf
ar 0
net 0.0.0.0 0.0.0.0
quit
quit

#leaf-设备
l2vpn enable
vlan 10 20
vxlan tunnel arp-learning disable
vxlan tunnel mac-learning disable
vsi vpna
#，开启arp抑制功能，关闭广播泛洪 禁止广播、未知单播和未知组播数据帧向远端站点泛洪。 statistics enable命令用来开启以太网服务实例的报文统计功能
# arp suppression enable
# flooding disable all
vxlan 10
quit
# 实例下启用evpn来创建bum隧道   EVPN使用三类路由创建  传递二层路由  不涉及 1 4 5 除非引入外部路由时才涉及
evpn encapsulation vxlan
route-distinguisher 10:10
vpn-target 10:10 export-extcommunity
vpn-target 10:10 import-extcommunity


vsi vpnb
# arp suppression enable
# flooding disable all
vxlan 20

quit
evpn encapsulation vxlan
route-distinguisher 20:20
vpn-target 20:20 export-extcommunity
vpn-target 20:20 import-extcommunity

bgp 100
ip vpn-instance a
 address-family ipv4
   balance 4
   network 0.0.0.0 0.0.0.0
return
sy
#
bgp 100
 peer 173.16.19.100 as-number 100
 peer 173.16.19.100 connect-interface LoopBack0
 peer 173.16.19.200 as-number 100
 peer 173.16.19.200 connect-interface LoopBack0
 #
 address-family l2vpn evpn
  peer 173.16.19.100 enable
  peer 173.16.19.200 enable
#
q
#S10510X的配置
q
# graceful-restart 平滑重启 双机
#
bgp 100
# graceful-restart

 peer 173.16.19.80 as-number 100
 peer 173.16.19.80 connect-interface LoopBack0
 peer 173.16.19.90 as-number 100
 peer 173.16.19.90 connect-interface LoopBack0
 #
 address-family l2vpn evpn
  undo policy vpn-target
  peer 173.16.19.80 enable
  peer 173.16.19.80 reflect-client
  peer 173.16.19.90 enable
  peer 173.16.19.90 reflect-client
#
q
#S10510X
q

# leaf设备

# 根据用户侧以太网服务实例的报文匹配规则创建IPL上的AC时，
# 用户侧以太网服务实例配置的报文匹配规则只能为匹配报文的外层VLAN tag（encapsulation s-vid vlan-id）、
# 匹配不携带VLAN tag的所有报文（encapsulation untagged），且AC的接入模式必须为VLAN模式。
# 采用VXLAN ID映射方式生成IPL上动态AC的报文匹配规则，AC的接入模式必须为VLAN模式。
#
interface GigabitEthernet1/0/3
 port link-mode bridge
 port link-type access
 port access vlan 10
 combo enable fiber
 vtep access port
 #
 service-instance 10
  encapsulation s-vid 10
  xconnect vsi vpna
  #
interface GigabitEthernet1/0/4
port link-mode bridge
port link-type access
port access vlan 20
combo enable fiber
vtep access port
 #
 service-instance 20
  encapsulation s-vid 20
  xconnect vsi vpnb
#


# VXLAN L3 
# leaf
# 创建IPV4地址族 vpn实例 让IRB二类学习


# RD 无所谓
# vpn名字 这里是a也无所谓
# 只要rt相同就会学习
# vsi 10 20 这里隔离了 因为vpn名字本地会隔离
#
ip vpn-instance a
 route-distinguisher 1000:1000
 #
 address-family ipv4
 import-route direct
  vpn-target 1000:1000 import-extcommunity
  vpn-target 1000:1000 export-extcommunity
 #
 address-family evpn
  vpn-target 1000:1000 import-extcommunity
  vpn-target 1000:1000 export-extcommunity
#
return

sy
# distributed-gateway local开启分布式网关

#
interface Vsi-interface10
 ip binding vpn-instance a
 ip address 192.168.10.254 255.255.255.0
 local-proxy-arp enable
 mac-address 0001-0001-0001
 distributed-gateway local
#

#
interface Vsi-interface20
 ip binding vpn-instance a
 local-proxy-arp enable
 ip address 192.168.20.254 255.255.255.0
 mac-address 0002-0002-0002
 distributed-gateway local
#


# 关联实例 绑定vsi接口
# 这些都是L2  vni  
vsi vpna
gateway Vsi-interface 10
vsi vpnb
gateway Vsi-interface 20


# 配置L3   vni
# 这里UP主觉得多此一举 华为的直接在ipv4地址族下配置的
# 这里  1111 无所谓俩台leaf相同即可
#
interface Vsi-interface8191
 ip binding vpn-instance a
 l3-vni 1000
#




# S10510上
# 开启L2VPN 关闭自动学习arp
l2vpn enable
vxlan tunnel arp-learning disable
# 创建vpn实例与leaf设备的实例rt相匹配
ip vpn-instance a
 route-distinguisher 1000:1000
 #
 address-family ipv4
  vpn-target 1000:1000 import-extcommunity
  vpn-target 1000:1000 export-extcommunity
 #
 address-family evpn
  vpn-target 1000:1000 import-extcommunity
  vpn-target 1000:1000 export-extcommunity


# 创建vsi三层接口绑定vpn实例
interface Vsi-interface 2401

 description SDN_VRF_VSI_Interface_24001
 ip binding vpn-instance a
 l3-vni 1000
 
 bgp 65205 instance SDN_INSTANCE_BGP

 ip vpn-instance a

  address-family ipv4 unicast

   import-route ospf 3

# 引入bgp路由
 ospf 3 vpn-instance a
 import-route bgp 100 allow-ibgp
 area 0.0.0.0
  network 0.0.0.0 0.0.0.0


  # xxx配置
  int g1/0/1
  port link-mode route
  ip add 1.1.1.2 30

  ospf
  ar 0
  net 0.0.0.0 0.0.0.0


 