ADCampus方案私网和vpn-default里的默认路由不发布到对方
每个vpn都用各自的缺省路由参考如下配置过滤策略,在Spine和所有的Leaf上都配置相同的命令:
#
ip vpn-instance abc
route-distinguisher 1:2
description SDN_VRF_cec7b572-e927-4bea-aae1-ff1e3ff69a8f
import route-policy 1
#
address-family ipv4
vpn-target 1:2 1:1 import-extcommunity
vpn-target 1:2 export-extcommunity
#
address-family evpn
vpn-target 1:2 1:1 import-extcommunity
vpn-target 1:2 export-extcommunity
#
ip vpn-instance vpn-default
route-distinguisher 1:1
description SDN_VRF_110c5625-faca-42f5-97bd-6a6c51d996dd
import route-policy 2
vpn-target 1:1 import-extcommunity
vpn-target 1:1 export-extcommunity
#
address-family ipv4
vpn-target 1:1 1:2 1:3 import-extcommunity
vpn-target 1:1 export-extcommunity
#
address-family evpn
vpn-target 1:1 1:2 1:3 import-extcommunity
vpn-target 1:1 export-extcommunity
#
route-policy 1 deny node 10
if-match extcommunity 1
if-match ip address prefix-list 1
#
route-policy 1 permit node 20
#
route-policy 2 deny node 10
if-match extcommunity 2
if-match ip address prefix-list 1
#
route-policy 2 deny node 20
if-match extcommunity 3
if-match ip address prefix-list 1
#
route-policy 2 permit node 30
#
ip prefix-list 1 index 10 permit 0.0.0.0 0
#
ip extcommunity-list 1 permit rt 1:1
ip extcommunity-list 2 permit rt 1:2
ip extcommunity-list 3 permit rt 1:3
#
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作