这是两台路由器的配置,各位大神能给指导指导吗?
站端
<zhanduan1>dis cu
#
 version 5.20, Release 1508P02, Standard
#
 sysname zhanduan1
#
 clock timezone Beijing add 08:00:00
#
 domain default enable system
#
 router id 37.2.92.160
#
ip vpn-instance vpn-rt
 route-distinguisher 23726:1
 vpn-target 23726:101 export-extcommunity
 vpn-target 23726:100 20000:100 30000:100 import-extcommunity
#
ip vpn-instance vpn-nrt
 route-distinguisher 23726:2
 vpn-target 23726:201 export-extcommunity
 vpn-target 23726:200 20000:200 30000:200 import-extcommunity
#
ip vpn-instance vpn-pw
 route-distinguisher 23726:4
 vpn-target 23726:401 export-extcommunity
 vpn-target 23726:400 import-extcommunity
#
vlan 1
#
vlan 10
 description NMS
#
vlan 199
 description To_vpn-rt
#
vlan 299
 description To_vpn-nrt
#
vlan 499
 description To_vpn-pw
#
mpls lsr-id 37.2.92.160
#
mpls
#
mpls ldp
#
domain system   
 access-limit disable
 state active
 idle-cut disable
 self-service-url disable
#
local-user bzzdh
 password cipher IV/L%>K11XF,YWX*NZ55OA!!
 service-type ssh terminal
#
acl number 2000
 rule 1 permit source 37.172.0.250 0
 rule 2 permit source 37.172.0.200 0
 rule 3 permit source 37.172.160.1 0
 rule 5 deny
acl number 2001
 rule 1 permit source 37.172.0.250 0
#
acl number 3001
 rule 0 deny tcp destination-port eq 135
 rule 5 deny tcp destination-port eq 137
 rule 10 deny tcp destination-port eq 138
 rule 15 deny tcp destination-port eq 139
 rule 20 deny tcp destination-port eq 445
 rule 25 deny udp destination-port eq 135
 rule 30 deny udp destination-port eq netbios-ns
 rule 35 deny udp destination-port eq netbios-dgm
 rule 40 deny udp destination-port eq netbios-ssn
 rule 45 deny udp destination-port eq 445
#
interface Aux0
 async mode flow
 link-protocol ppp
#
interface Serial6/0
 link-protocol ppp
#
interface Serial6/1
 link-protocol ppp
#
interface Serial6/2
 link-protocol ppp
#
interface Serial6/3
 link-protocol ppp
#
interface NULL0 
#
interface LoopBack0
 ip address 37.2.92.160 255.255.255.255
#
interface GigabitEthernet0/0
 port link-mode route
 ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet0/0.10
 vlan-type dot1q vid 10
 description To_NMS
 ip address 37.172.160.30 255.255.255.240
#
interface GigabitEthernet0/0.199
 vlan-type dot1q vid 199
 description to vpn-rt
 ip binding vpn-instance vpn-rt
 ip address 37.173.160.126 255.255.255.128
#
interface GigabitEthernet0/0.299
 vlan-type dot1q vid 299
 description to vpn-nrt
 ip binding vpn-instance vpn-nrt
 ip address 37.174.160.126 255.255.255.128
#
interface GigabitEthernet0/1
 port link-mode route
 ip address 37.172.160.2 255.255.255.252
 ospf cost 10
 mpls
 mpls ldp
#
bgp 23726
 undo synchronization
 timer keepalive 5 hold 15
 group hexin internal
 peer hexin connect-interface LoopBack0
 peer 37.2.92.170 group hexin
 #
 ipv4-family vpnv4
  peer hexin enable
  peer 37.2.92.170 enable
  peer 37.2.92.170 group hexin
 #
 ipv4-family vpn-instance vpn-rt
  import-route direct
 #
 ipv4-family vpn-instance vpn-nrt
  import-route direct
 #
 ipv4-family vpn-instance vpn-pw
  import-route direct
#
ospf 1
 import-route direct
 area 0.0.0.1
  network 37.172.160.0 0.0.0.3
#
 ip route-static 37.172.160.0 255.255.255.252 37.172.160.1
 ip route-static 37.173.0.0 255.255.0.0 37.172.160.1
 ip route-static 37.174.0.0 255.255.0.0 37.172.160.1
#
 ssh server enable
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
 acl 2000 inbound
 authentication-mode scheme
 idle-timeout 5 0
 protocol inbound ssh
#
return
核心
<hexin>dis cu
#
 version 5.20, Release 1508P02, Standard
#
 sysname hexin
#
 clock timezone Beijing add 08:00:00
#
 domain default enable system
#
 router id 37.2.92.170
#
ip vpn-instance vpn-rt
 route-distinguisher 23726:1
 vpn-target 23726:100 20000:100 30000:100 export-extcommunity
 vpn-target 23726:101 23726:100 30000:100 20000:100 import-extcommunity
#
ip vpn-instance vpn-nrt
 route-distinguisher 23726:2
 vpn-target 23726:201 export-extcommunity
 vpn-target 23726:200 20000:200 30000:200 import-extcommunity
#
ip vpn-instance vpn-pw
 route-distinguisher 23726:4
 vpn-target 23726:401 export-extcommunity
 vpn-target 23726:400 import-extcommunity
#
vlan 1
#
vlan 10
 description NMS
#
vlan 199
 description To_vpn-rt
#
vlan 299
 description To_vpn-nrt
#
vlan 499
 description To_vpn-pw
#
mpls lsr-id 37.2.92.170
#
mpls
#
mpls ldp
#
domain system   
 access-limit disable
 state active
 idle-cut disable
 self-service-url disable
#
local-user admin
 password cipher H;-]Ma5VSZD=`&4T-(O7UH*2_*aAEH84Z7W/O2`\89H>(,<4Z,BO&L"TX$_S#6.NM(0=0\)*5WWQ=^Q`MAF4<1!!
 service-type telnet
local-user bzzdh
 password cipher IV/L%>K11XF,YWX*NZ55OA!!
 service-type ssh terminal
#
acl number 2000
 rule 1 permit source 37.172.0.250 0
 rule 2 permit source 37.172.0.200 0
 rule 3 permit source 37.172.160.1 0
 rule 5 deny
acl number 2001
 rule 1 permit source 37.172.0.250 0
#
acl number 3001
 rule 0 deny tcp destination-port eq 135
 rule 5 deny tcp destination-port eq 137
 rule 10 deny tcp destination-port eq 138
 rule 15 deny tcp destination-port eq 139
 rule 20 deny tcp destination-port eq 445
 rule 25 deny udp destination-port eq 135
 rule 30 deny udp destination-port eq netbios-ns
 rule 35 deny udp destination-port eq netbios-dgm
 rule 40 deny udp destination-port eq netbios-ssn
 rule 45 deny udp destination-port eq 445
#
interface Aux0
 async mode flow
 link-protocol ppp
#
interface Serial6/0
 link-protocol ppp
#
interface Serial6/1
 link-protocol ppp
#
interface Serial6/2
 link-protocol ppp
#
interface Serial6/3
 link-protocol ppp
#
interface NULL0
#
interface LoopBack0
 ip address 37.2.92.170 255.255.255.255
#
interface GigabitEthernet0/0
 port link-mode route
 ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet0/0.10
 vlan-type dot1q vid 10
 description To_NMS
 ip address 37.172.170.30 255.255.255.240
#
interface GigabitEthernet0/0.199
 vlan-type dot1q vid 199
 description vpn-rt
 ip binding vpn-instance vpn-rt
 ip address 37.173.170.126 255.255.255.128
#
interface GigabitEthernet0/0.299
 vlan-type dot1q vid 299
 description vpn-nrt
 ip binding vpn-instance vpn-nrt
 ip address 37.174.92.126 255.255.255.128
#
interface GigabitEthernet0/1
 port link-mode route
 description to zhuanduan1
 ip address 37.172.160.1 255.255.255.252
 ospf cost 10
#
bgp 23726
 undo synchronization
 timer keepalive 5 hold 15
 group zhanduan1 internal
 peer zhanduan1 connect-interface LoopBack0
 peer 37.2.92.160 group zhanduan1
 #
 ipv4-family vpnv4
  peer zhanduan1 enable
  peer zhanduan1 route-policy Deny-DD-Sum-Pri export
  peer 37.2.92.160 enable
  peer 37.2.92.160 group zhanduan1
 #
 ipv4-family vpn-instance vpn-rt
  import-route direct
 #
 ipv4-family vpn-instance vpn-nrt
  import-route direct
#
ospf 1
 import-route direct
 area 0.0.0.1
  description to zhanduan
  network 37.172.160.0 0.0.0.3
#
 ip route-static 37.173.0.0 255.255.0.0 37.172.160.2
 ip route-static 37.173.160.0 255.255.255.0 37.172.160.2
 ip route-static 37.174.0.0 255.255.0.0 37.172.160.2
#
user-interface con 0
 authentication-mode scheme
 idle-timeout 5 0
user-interface aux 0
user-interface vty 0 4
 acl 2000 inbound
 authentication-mode scheme
 idle-timeout 5 0
 protocol inbound ssh
#
return
<hexin>ping -vpn-instance vpn-rt 37.173.170.2
  PING 37.173.170.2: 56  data bytes, press CTRL_C to break
    Reply from 37.173.170.2: bytes=56 Sequence=1 ttl=128 time=1 ms
    Reply from 37.173.170.2: bytes=56 Sequence=2 ttl=128 time=1 ms
    Reply from 37.173.170.2: bytes=56 Sequence=3 ttl=128 time=1 ms
    Reply from 37.173.170.2: bytes=56 Sequence=4 ttl=128 time=1 ms
    Reply from 37.173.170.2: bytes=56 Sequence=5 ttl=128 time=1 ms
  --- 37.173.170.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 1/1/1 ms
<hexin>ping -vpn-instance vpn-rt 37.173.160.126
  PING 37.173.160.126: 56  data bytes, press CTRL_C to break
    Request time out
    Request time out
    Request time out
    Request time out
    Request time out

(0)
最佳答案
 
				
				
					问题
(0)
 
							
							 
									
									先看看路由学到没
(0)
有到loopback地址的路由,业务的加的静态路由
有到loopback地址的路由,业务的加的静态路由
 
	 
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
没注意到你把直连宣告到OSPF,BGP确实能起来.但是你的MPLS,起不来,你上面的配置就没使能