关键词:
组网需求
如图1所示:
-
路由器PE1、P和PE2属于同一自治系统,要求它们之间通过IS-IS协议达到IPv6网络互连的目的。
-
PE1、P和PE2属于IS-IS进程1,都是Level-1设备。
要求在PE1和PE2之间建立双向SRv6 BE路径,承载EVPN L3VPNv4业务。同时由于公网PE之间存在多条链路,要求数据流量在时延较低的链路PE1-P1-PE2上进行转发。
本例通过定义静态时延属性,来支持vpn1的业务需求。
图1 配置EVPN L3VPNv4 over SRv6 BE Flex-Algo组网图
配置思路
-
使能PE1、P1、PE2和P2各接口的IPv6转发能力,配置各接口的IPv6地址。
-
在PE1、P1、PE2和P2上使能IS-IS,配置Level级别,指定网络实体。
- 配置Flex-Algo链路的时延属性。
- 配置Flex-Algo算法定义。
- 使能IS-IS发布灵活算法能力,使能IS-IS进程的TE特性,使能IS-IS发布IPv6链路的时延。
-
在PE1和PE2上配置VPN实例。
-
在PE和CE之间建立EBGP对等体关系。
-
在PE之间建立BGP EVPN对等体关系。
- 在PE之间建立基于Flex-Algo的SRv6 BE路径。
操作步骤
1. 使能各接口的IPv6转发能力,配置IPv6地址,以PE1为例,其他路由器的配置过程相同,不再赘述
<HUAWEI> system-view
[~HUAWEI] sysname PE1
[*HUAWEI] commit
[~PE1] interface gigabitethernet 1/0/0
[~PE1-GigabitEthernet1/0/0] ipv6 enable
[*PE1-GigabitEthernet1/0/0] ipv6 address 2001:db8:1::1 96
[*PE1-GigabitEthernet1/0/0] quit
[*PE1] interface gigabitethernet 3/0/0
[*PE1-GigabitEthernet3/0/0] ipv6 enable
[*PE1-GigabitEthernet3/0/0] ipv6 address 2001:db8:3::1 96
[*PE1-GigabitEthernet3/0/0] quit
[*PE1] interface LoopBack 1
[*PE1-LoopBack1] ipv6 enable
[*PE1-LoopBack1] ipv6 address 2001:db8:11::1 128
[*PE1-LoopBack1] quit
[*PE1] commit
2. 配置IS-IS
# 配置PE1。
[~PE1] isis 1
[*PE1-isis-1] is-level level-1
[*PE1-isis-1] cost-style wide
[*PE1-isis-1] network-entity 10.0000.0000.0001.00
[*PE1-isis-1] ipv6 enable topology ipv6
[*PE1-isis-1] quit
[*PE1] interface gigabitethernet 1/0/0
[*PE1-GigabitEthernet1/0/0] isis ipv6 enable 1
[*PE1-GigabitEthernet1/0/0] quit
[*PE1] interface gigabitethernet 3/0/0
[*PE1-GigabitEthernet3/0/0] isis ipv6 enable 1
[*PE1-GigabitEthernet3/0/0] quit
[*PE1] interface loopback1
[*PE1-LoopBack1] isis ipv6 enable 1
[*PE1-LoopBack1] commit
[~PE1-LoopBack1] quit
# 配置P1。
[~P1] isis 1
[*P1-isis-1] is-level level-1
[*P1-isis-1] cost-style wide
[*P1-isis-1] network-entity 10.0000.0000.0002.00
[*P1-isis-1] ipv6 enable topology ipv6
[*P1-isis-1] quit
[*P1] interface gigabitethernet 1/0/0
[*P1-GigabitEthernet1/0/0] isis ipv6 enable 1
[*P1-GigabitEthernet1/0/0] quit
[*P1] interface gigabitethernet 2/0/0
[*P1-GigabitEthernet2/0/0] isis ipv6 enable 1
[*P1-GigabitEthernet2/0/0] quit
[*P1] interface loopback1
[*P1-LoopBack1] isis ipv6 enable 1
[*P1-LoopBack1] commit
[~P1-LoopBack1] quit
# 配置PE2。
[~PE2] isis 1
[*PE2-isis-1] is-level level-1
[*PE2-isis-1] cost-style wide
[*PE2-isis-1] network-entity 10.0000.0000.0003.00
[*PE2-isis-1] ipv6 enable topology ipv6
[*PE2-isis-1] quit
[*PE2] interface gigabitethernet 1/0/0
[*PE2-GigabitEthernet1/0/0] isis ipv6 enable 1
[*PE2-GigabitEthernet1/0/0] quit
[*PE2] interface gigabitethernet 3/0/0
[*PE2-GigabitEthernet3/0/0] isis ipv6 enable 1
[*PE2-GigabitEthernet3/0/0] quit
[*PE2] interface loopback1
[*PE2-LoopBack1] isis ipv6 enable 1
[*PE2-LoopBack1] commit
[~PE2-LoopBack1] quit
# 配置P2。
[~P2] isis 1
[*P2-isis-1] is-level level-1
[*P2-isis-1] cost-style wide
[*P2-isis-1] network-entity 10.0000.0000.0004.00
[*P2-isis-1] ipv6 enable topology ipv6
[*P2-isis-1] quit
[*P2] interface gigabitethernet 1/0/0
[*P2-GigabitEthernet1/0/0] isis ipv6 enable 1
[*P2-GigabitEthernet1/0/0] quit
[*P2] interface gigabitethernet 2/0/0
[*P2-GigabitEthernet2/0/0] isis ipv6 enable 1
[*P2-GigabitEthernet2/0/0] quit
[*P2] interface loopback1
[*P2-LoopBack1] isis ipv6 enable 1
[*P2-LoopBack1] commit
[~P2-LoopBack1] quit
配置完成后,可按如下指导检查IS-IS是否配置成功。
# 显示IS-IS邻居信息。以PE1为例。
[~PE1] display isis peer
Peer information for ISIS(1)
System Id Interface Circuit Id State HoldTime Type PRI
--------------------------------------------------------------------------------
0000.0000.0002* GE1/0/0 0000.0000.0002.01 Up 6s L1 64
0000.0000.0004* GE3/0/0 0000.0000.0004.01 Up 9s L1 64
Total Peer(s): 2
# 显示IS-IS路由表信息。以PE1为例。
[~PE1] display isis route
Route information for ISIS(1)
-----------------------------
ISIS(1) Level-1 Forwarding Table
--------------------------------
IPV6 Dest. ExitInterface NextHop Cost Flags
--------------------------------------------------------------------------------
2001:DB8:1::/96 GE1/0/0 Direct 10 D/-/L/-
2001:DB8:2::/96 GE1/0/0 FE80::3A5D:67FF:FE31:307 20 A/-/-/-
2001:DB8:3::/96 GE3/0/0 Direct 10 D/-/L/-
2001:DB8:4::/96 GE3/0/0 FE80::3A5D:67FF:FE41:305 20 A/-/-/-
2001:DB8:11::1/128 Loop1 Direct 0 D/-/L/-
2001:DB8:12::2/128 GE1/0/0 FE80::3A5D:67FF:FE31:307 10 A/-/-/-
2001:DB8:13::3/128 GE1/0/0 FE80::3A5D:67FF:FE31:307 20 A/-/-/-
GE3/0/0 FE80::3A5D:67FF:FE41:305
2001:DB8:14::4/128 GE3/0/0 FE80::3A5D:67FF:FE41:305 10 A/-/-/-
Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut,
U-Up/Down Bit Set, LP-Local Prefix-Sid
Protect Type: L-Link Protect, N-Node Protect
3. 配置Flex-Algo链路的时延属性
# 配置PE1。
[~PE1] te attribute enable
[*PE1] interface gigabitethernet1/0/0
[*PE1-GigabitEthernet1/0/0] te link-attribute-application flex-algo
[*PE1-GigabitEthernet1/0/0-te-link-attribute-application] delay 10
[*PE1-GigabitEthernet1/0/0-te-link-attribute-application] quit
[*PE1-GigabitEthernet1/0/0] quit
[*PE1] interface gigabitethernet3/0/0
[*PE1-GigabitEthernet3/0/0] te link-attribute-application flex-algo
[*PE1-GigabitEthernet3/0/0-te-link-attribute-application] delay 20
[*PE1-GigabitEthernet3/0/0-te-link-attribute-application] quit
[*PE1-GigabitEthernet3/0/0] quit
[*PE1] commit
# 配置P1。
[~P1] te attribute enable
[*P1] interface gigabitethernet1/0/0
[*P1-GigabitEthernet1/0/0] te link-attribute-application flex-algo
[*P1-GigabitEthernet1/0/0-te-link-attribute-application] delay 10
[*P1-GigabitEthernet1/0/0-te-link-attribute-application] quit
[*P1-GigabitEthernet1/0/0] quit
[*P1] interface gigabitethernet2/0/0
[*P1-GigabitEthernet2/0/0] te link-attribute-application flex-algo
[*P1-GigabitEthernet2/0/0-te-link-attribute-application] delay 10
[*P1-GigabitEthernet2/0/0-te-link-attribute-application] quit
[*P1-GigabitEthernet2/0/0] quit
[*P1] commit
# 配置PE2。
[~PE2] te attribute enable
[*PE2] interface gigabitethernet1/0/0
[*PE2-GigabitEthernet1/0/0] te link-attribute-application flex-algo
[*PE2-GigabitEthernet1/0/0-te-link-attribute-application] delay 10
[*PE2-GigabitEthernet1/0/0-te-link-attribute-application] quit
[*PE2-GigabitEthernet1/0/0] quit
[*PE2] interface gigabitethernet3/0/0
[*PE2-GigabitEthernet3/0/0] te link-attribute-application flex-algo
[*PE2-GigabitEthernet3/0/0-te-link-attribute-application] delay 20
[*PE2-GigabitEthernet3/0/0-te-link-attribute-application] quit
[*PE2-GigabitEthernet3/0/0] quit
[*PE2] commit
# 配置P2。
[~P2] te attribute enable
[*P2] interface gigabitethernet1/0/0
[*P2-GigabitEthernet1/0/0] te link-attribute-application flex-algo
[*P2-GigabitEthernet1/0/0-te-link-attribute-application] delay 20
[*P2-GigabitEthernet1/0/0-te-link-attribute-application] quit
[*P2-GigabitEthernet1/0/0] quit
[*P2] interface gigabitethernet2/0/0
[*P2-GigabitEthernet2/0/0] te link-attribute-application flex-algo
[*P2-GigabitEthernet2/0/0-te-link-attribute-application] delay 20
[*P2-GigabitEthernet2/0/0-te-link-attribute-application] quit
[*P2-GigabitEthernet2/0/0] quit
[*P2] commit
4. 配置Flex-Algo算法定义
同一个IGP域可以选择1~2台设备配置Flex-Algo算法定义,为了提升可靠性,推荐选择2台设备配置Flex-Algo算法定义。
# 配置PE1。
[~PE1] flex-algo identifier 128
[*PE1-flex-algo-128] priority 100
[*PE1-flex-algo-128] metric-type delay
[*PE1-flex-algo-128] quit
[*PE1] commit
# 配置PE2。
[~PE2] flex-algo identifier 128
[*PE2-flex-algo-128] priority 100
[*PE2-flex-algo-128] metric-type delay
[*PE2-flex-algo-128] quit
[*PE2] commit
5. 使能IS-IS发布灵活算法能力,使能IS-IS进程的TE特性,使能IS-IS发布IPv6链路的时延
# 配置PE1。
[~PE1] isis 1
[*PE1-isis-1] flex-algo 128 level-1
[*PE1-isis-1] ipv6 traffic-eng level-1
[*PE1-isis-1] ipv6 metric-delay advertisement enable level-1
[*PE1-isis-1] quit
[*PE1] commit
# 配置P1。
[~P1] isis 1
[*P1-isis-1] flex-algo 128 level-1
[*P1-isis-1] ipv6 traffic-eng level-1
[*P1-isis-1] ipv6 metric-delay advertisement enable level-1
[*P1-isis-1] quit
[*P1] commit
# 配置PE2。
[~PE2] isis 1
[*PE2-isis-1] flex-algo 128 level-1
[*PE2-isis-1] ipv6 traffic-eng level-1
[*PE2-isis-1] ipv6 metric-delay advertisement enable level-1
[*PE2-isis-1] quit
[*PE2] commit
# 配置P2。
[~P2] isis 1
[*P2-isis-1] flex-algo 128 level-1
[*P2-isis-1] ipv6 traffic-eng level-1
[*P2-isis-1] ipv6 metric-delay advertisement enable level-1
[*P2-isis-1] quit
[*P2] commit
6. 在PE设备上配置使能IPv4地址族的VPN实例,将CE接入PE
# 配置PE1。
[~PE1] ip vpn-instance vpn1
[*PE1-vpn-instance-vpn1] ipv4-family
[*PE1-vpn-instance-vpn1-af-ipv4] route-distinguisher 100:1
[*PE1-vpn-instance-vpn1-af-ipv4] vpn-target 111:1 both evpn
[*PE1-vpn-instance-vpn1-af-ipv4] quit
[*PE1-vpn-instance-vpn1] quit
[*PE1] interface gigabitethernet 2/0/0
[*PE1-GigabitEthernet2/0/0] ip binding vpn-instance vpn1
[*PE1-GigabitEthernet2/0/0] ip address 10.1.1.2 24
[*PE1-GigabitEthernet2/0/0] quit
[*PE1] commit
# 配置PE2。
[~PE2] ip vpn-instance vpn1
[*PE2-vpn-instance-vpn1] ipv4-family
[*PE2-vpn-instance-vpn1-af-ipv4] route-distinguisher 200:1
[*PE2-vpn-instance-vpn1-af-ipv4] vpn-target 111:1 both evpn
[*PE2-vpn-instance-vpn1-af-ipv4] quit
[*PE2-vpn-instance-vpn1] quit
[*PE2] interface gigabitethernet 2/0/0
[*PE2-GigabitEthernet2/0/0] ip binding vpn-instance vpn1
[*PE2-GigabitEthernet2/0/0] ip address 10.2.1.2 24
[*PE2-GigabitEthernet2/0/0] quit
[*PE2] commit
# 按图1配置各CE的接口IP地址,配置过程请参见后面的配置文件。
配置完成后,在PE设备上执行display ip vpn-instance verbose命令可以看到VPN实例的配置情况。各PE能ping通自己接入的CE。
7. 在PE与CE之间建立EBGP对等体关系
# 配置CE1。
[~CE1] interface loopback 1
[*CE1-LoopBack1] ip address 10.11.1.1 32
[*CE1-LoopBack1] quit
[*CE1] bgp 65410
[*CE1-bgp] peer 10.1.1.2 as-number 100
[*CE1-bgp] network 10.11.1.1 32
[*CE1-bgp] quit
[*CE1] commit
# 配置PE1。
[~PE1] bgp 100
[*PE1-bgp] router-id 1.1.1.1
[*PE1-bgp] ipv4-family vpn-instance vpn1
[*PE1-bgp-vpn1] peer 10.1.1.1 as-number 65410
[*PE1-bgp-vpn1] import-route direct
[*PE1-bgp-vpn1] commit
[~PE1-bgp-vpn1] quit
[~PE1-bgp] quit
# 配置CE2。
[~CE2] interface loopback 1
[*CE2-LoopBack1] ip address 10.22.2.2 32
[*CE2-LoopBack1] quit
[*CE2] bgp 65420
[*CE2-bgp] peer 10.2.1.2 as-number 100
[*CE2-bgp] network 10.22.2.2 32
[*CE2-bgp] quit
[*CE2] commit
# 配置PE2。
[~PE2] bgp 100
[*PE2-bgp] router-id 2.2.2.2
[*PE2-bgp] ipv4-family vpn-instance vpn1
[*PE2-bgp-vpn1] peer 10.2.1.1 as-number 65420
[*PE2-bgp-vpn1] import-route direct
[*PE2-bgp-vpn1] commit
[~PE2-bgp-vpn1] quit
[~PE2-bgp] quit
配置完成后,在PE设备上执行display bgp vpnv4 vpn-instance peer命令,可以看到PE与CE之间的BGP对等体关系已建立,并达到Established状态。
以PE1与CE1的对等体关系为例:
[~PE1] display bgp vpnv4 vpn-instance vpn1 peer
BGP local router ID : 1.1.1.1
Local AS number : 100
VPN-Instance vpn1, Router ID 1.1.1.1:
Total number of peers : 1 Peers in established state : 1
Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv
10.1.1.1 4 65410 310 318 0 04:26:42 Established 1
8. 在PE之间建立BGP EVPN对等体关系
# 配置PE1。
[~PE1] bgp 100
[~PE1-bgp] peer 2001:db8:13::3 as-number 100
[*PE1-bgp] peer 2001:db8:13::3 connect-interface loopback 1
[*PE1-bgp] l2vpn-family evpn
[*PE1-bgp-af-evpn] peer 2001:db8:13::3 enable
[*PE1-bgp-af-evpn] commit
[~PE1-bgp-af-evpn] quit
[~PE1-bgp] quit
# 配置PE2。
[~PE2] bgp 100
[~PE2-bgp] peer 2001:db8:11::1 as-number 100
[*PE2-bgp] peer 2001:db8:11::1 connect-interface loopback 1
[*PE2-bgp] l2vpn-family evpn
[*PE2-bgp-af-evpn] peer 2001:db8:11::1 enable
[*PE2-bgp-af-evpn] commit
[~PE2-bgp-af-evpn] quit
[~PE2-bgp] quit
配置完成后,在PE设备上执行display bgp evpn peer命令,可以看到PE之间的BGP对等体关系已建立,并达到Established状态。以PE1的显示为例:
[~PE1] display bgp evpn peer
BGP local router ID : 1.1.1.1
Local AS number : 100
Total number of peers : 1 Peers in established state : 1
Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv
2001:DB8:13::3 4 100 314 311 0 04:27:06 Established 2
9. 在PE之间建立基于Flex-Algo的SRv6 BE路径
# 配置PE1。
[~PE1] segment-routing ipv6
[*PE1-segment-routing-ipv6] encapsulation source-address 2001:db8:11::1
[*PE1-segment-routing-ipv6] locator PE1 ipv6-prefix 2001:db8:100:: 64 static 32 flex-algo 128
[*PE1-segment-routing-ipv6-locator] quit
[*PE1-segment-routing-ipv6] quit
[*PE1] bgp 100
[*PE1-bgp] l2vpn-family evpn
[*PE1-bgp-af-evpn] peer 2001:db8:13::3 advertise encap-type srv6
[*PE1-bgp-af-evpn] quit
[*PE1-bgp] ipv4-family vpn-instance vpn1
[*PE1-bgp-vpn1] advertise l2vpn evpn
[*PE1-bgp-vpn1] segment-routing ipv6 best-effort evpn
[*PE1-bgp-vpn1] segment-routing ipv6 locator PE1 evpn
[*PE1-bgp-vpn1] quit
[*PE1-bgp] quit
[*PE1] isis 1
[*PE1-isis-1] segment-routing ipv6 locator PE1
[*PE1-isis-1] commit
[~PE1-isis-1] quit
# 配置PE2。
[~PE2] segment-routing ipv6
[*PE2-segment-routing-ipv6] encapsulation source-address 2001:db8:13::3
[*PE2-segment-routing-ipv6] locator PE2 ipv6-prefix 2001:db8:300:: 64 static 32 flex-algo 128
[*PE2-segment-routing-ipv6-locator] quit
[*PE2-segment-routing-ipv6] quit
[*PE2] bgp 100
[*PE2-bgp] l2vpn-family evpn
[*PE2-bgp-af-evpn] peer 2001:db8:11::1 advertise encap-type srv6
[*PE2-bgp-af-evpn] quit
[*PE2-bgp] ipv4-family vpn-instance vpn1
[*PE2-bgp-vpn1] advertise l2vpn evpn
[*PE2-bgp-vpn1] segment-routing ipv6 best-effort evpn
[*PE2-bgp-vpn1] segment-routing ipv6 locator PE2 evpn
[*PE2-bgp-vpn1] quit
[*PE2-bgp] quit
[*PE2] isis 1
[*PE2-isis-1] segment-routing ipv6 locator PE2
[*PE2-isis-1] commit
[~PE2-isis-1] quit
# 配置P1。
[~P1] segment-routing ipv6
[*P1-segment-routing-ipv6] locator P1 ipv6-prefix 2001:db8:200:: 64 static 32 flex-algo 128
[*P1-segment-routing-ipv6-locator] quit
[*P1-segment-routing-ipv6] quit
[*P1] isis 1
[*P1-isis-1] segment-routing ipv6 locator P1
[*P1-isis-1] commit
[~P1-isis-1] quit
# 配置P2。
[~P2] segment-routing ipv6
[*P2-segment-routing-ipv6] locator P2 ipv6-prefix 2001:db8:400:: 64 static 32 flex-algo 128
[*P2-segment-routing-ipv6-locator] quit
[*P2-segment-routing-ipv6] quit
[*P2] isis 1
[*P2-isis-1] segment-routing ipv6 locator P2
[*P2-isis-1] commit
[~P2-isis-1] quit
10. 检查配置结果
执行命令display segment-routing ipv6 locator [ locator-name ] verbose查看SRv6的Locator信息。以PE1为例:
[~PE1] display segment-routing ipv6 locator verbose
Locator Configuration Table
---------------------------
LocatorName : PE1 LocatorID : 3
IPv6Prefix : 2001:DB8:100:: PrefixLength : 64
Block : -- BlockLength : 0
NodeID : -- NodeIdLength : 0
ComprStaticLen: 0 StaticLength : 32
ArgsLength : 0 Reference : 0
AutoCSIDPoolID: 0 ComprDynLength: 0
Algorithm : 128
AutoCSIDBegin : --
AutoCSIDEnd : --
StaticCSIDBegin: --
StaticCSIDEnd : --
AutoSIDPoolID : 8194 DynLength : 32
AutoSIDBegin : 2001:DB8:100::1:0:0
AutoSIDEnd : 2001:DB8:100:0:FFFF:FFFF:FFFF:FFFF
StaticSIDBegin: 2001:DB8:100::1
StaticSIDEnd : 2001:DB8:100::FFFF:FFFF
Total Locator(s): 1
执行命令display segment-routing ipv6 local-sid end-dt4 forwarding查看SRv6的Local SID表信息。以PE1为例:
[~PE1] display segment-routing ipv6 local-sid end-dt4 forwarding
My Local-SID End.DT4 Forwarding Table
-------------------------------------
SID : 2001:DB8:100::1:0:3C/128 FuncType : End.DT4
VPN Name : vpn1 VPN ID : 3
LocatorName: PE1 LocatorID: 1
Total SID(s): 1
在PE设备上执行display isis route ipv6 flex-algo 128命令,可以看到IS-IS Flex-Algo 128的路由信息。以PE1的显示为例:
[~PE1] display isis route ipv6 flex-algo 128
Route information for ISIS(1)
-----------------------------
ISIS(1) Level-1 Flex-Algo Forwarding Table
------------------------------------------
IPV6 Dest. ExitInterface NextHop Cost Flags
--------------------------------------------------------------------------------
2001:DB8:100::/64 NULL0 - 0 A/-/-/-
2001:DB8:200::/64 GE1/0/0 FE80::3A5D:67FF:FE31:307 10 A/-/-/-
2001:DB8:300::/64 GE1/0/0 FE80::3A5D:67FF:FE31:307 20 A/-/-/-
2001:DB8:400::/64 GE3/0/0 FE80::3A5D:67FF:FE41:305 20 A/-/-/-
Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut,
U-Up/Down Bit Set, LP-Local Prefix-Sid
Protect Type: L-Link Protect, N-Node Protect
可以看到Locator路由2001:DB8:300::/64的出接口是GE1/0/0,说明数据流量会在时延较低的链路PE1-P1-PE2上进行转发。
在PE设备上执行display bgp evpn all routing-table命令,可以看到BGP EVPN路由信息。以PE1的显示为例:
[~PE1] display bgp evpn all routing-table
Local AS number : 100
BGP Local router ID is 1.1.1.1
Status codes: * - valid, > - best, d - damped, x - best external, a - add path,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
EVPN address family:
Number of Ip Prefix Routes: 4
Route Distinguisher: 100:1
Network(EthTagId/IpPrefix/IpPrefixLen) NextHop
*> 0:10.1.1.0:24 0.0.0.0
*> 0:10.11.1.1:32 10.1.1.1
Route Distinguisher: 200:1
Network(EthTagId/IpPrefix/IpPrefixLen) NextHop
*>i 0:10.2.1.0:24 2001:DB8:13::3
*>i 0:10.22.2.2:32 2001:DB8:13::3
[~PE1] display bgp evpn all routing-table prefix-route 0:10.22.2.2:32
BGP local router ID : 1.1.1.1
Local AS number : 100
Total routes of Route Distinguisher(200:1): 1
BGP routing table entry information of 0:10.22.2.2:32:
Label information (Received/Applied): 3/NULL
From: 2001:DB8:13::3 (2.2.2.2)
Route Duration: 0d04h42m41s
Relay IP Nexthop: FE80::3A5D:67FF:FE31:307
Relay IP Out-Interface: GigabitEthernet1/0/0
Relay Tunnel Out-Interface:
Original nexthop: 2001:DB8:13::3
Qos information : 0x0
Ext-Community: RT <111 : 1>
Prefix-sid: 2001:DB8:300::1:0:3E
AS-path 65420, origin igp, MED 0, localpref 100, pref-val 0, valid, internal, best, select, pre 255, IGP cost 20
Route Type: 5 (Ip Prefix Route)
Ethernet Tag ID: 0, IP Prefix/Len: 10.22.2.2/32, ESI: 0000.0000.0000.0000.0000, GW IP Address: 0.0.0.0
Not advertised to any peer yet
在PE设备上执行display ip routing-table vpn-instance vpn1命令,可以看到VPN实例路由表信息。以PE1的显示为例:
[~PE1] display ip routing-table vpn-instance vpn1
Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route
------------------------------------------------------------------------------
Routing Table : vpn1
Destinations : 8 Routes : 8
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.1.1.0/24 Direct 0 0 D 10.1.1.2 GigabitEthernet2/0/0
10.1.1.2/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0
10.1.1.255/32 Direct 0 0 D 127.0.0.1 GigabitEthernet2/0/0
10.2.1.0/24 IBGP 255 0 RD 2001:DB8:300::1:0:3E SRv6 BE
10.11.1.1/32 EBGP 255 0 RD 10.1.1.1 GigabitEthernet2/0/0
10.22.2.2/32 IBGP 255 0 RD 2001:DB8:300::1:0:3E SRv6 BE
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
在PE设备上执行display ip routing-table vpn-instance vpn1 ip-address verbose命令,可以看到VPN实例路由的详细信息。以PE1的显示为例:
[~PE1] display ip routing-table vpn-instance vpn1 10.22.2.2 verbose
Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route
------------------------------------------------------------------------------
Routing Table : vpn1
Summary Count : 1
Destination: 10.22.2.2/32
Protocol: IBGP Process ID: 0
Preference: 255 Cost: 0
NextHop: 2001:DB8:300::1:0:3E Neighbour: 2001:DB8:13::3
State: Active Adv Relied Age: 03h36m34s
Tag: 0 Priority: low
Label: NULL QoSInfo: 0x0
IndirectID: 0x10000E3 Instance:
RelayNextHop: 2001:DB8:300::1:0:3E Interface: SRv6 BE
TunnelID: 0x0 Flags: RD
同一VPN的CE能够相互Ping通,例如:
[~CE1] ping -a 10.11.1.1 10.22.2.2
PING 10.22.2.2: 56 data bytes, press CTRL_C to break
Reply from 10.22.2.2: bytes=56 Sequence=1 ttl=253 time=3 ms
Reply from 10.22.2.2: bytes=56 Sequence=2 ttl=253 time=3 ms
Reply from 10.22.2.2: bytes=56 Sequence=3 ttl=253 time=3 ms
Reply from 10.22.2.2: bytes=56 Sequence=4 ttl=253 time=3 ms
Reply from 10.22.2.2: bytes=56 Sequence=5 ttl=253 time=3 ms
--- 10.22.2.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 3/3/3 ms
华为ne40e路由器实验配置示例|配置非标签公网bgp路由迭代sr-mplsbe隧道(代码片段)
组网需求当用户通过运营商网络访问互联网时,如果报文采用IP转发的话,则从用户到互联网路径上的运营商核心设备都需要学习到大量的互联网路由,这给运营商的核心设备带来了很大的负担,影响核心设备的... 查看详情
华为ne40e路由器实验配置示例|配置evdpdndl3vdpdndv6oversrv6be(代码片段)
组网需求如图1所示:PE1、P和PE2属于同一自治系统,要求它们之间通过IS-IS协议达到IPv6网络互连的目的。在PE1和PE2之间通过建立双向SRv6BE承载EVPNL3VPNv6业务。图1 配置EVPNL3VPNv6overSRv6BE组网图配置思路使能PE1、P和PE2各接口的... 查看详情
华为ne40e路由器实验配置示例|配置evdpdndl3vdpdndv4oversrv6beflex-algo(代码片段)
组网需求如图1所示:路由器PE1、P和PE2属于同一自治系统,要求它们之间通过IS-IS协议达到IPv6网络互连的目的。PE1、P和PE2属于IS-IS进程1,都是Level-1设备。要求在PE1和PE2之间建立双向SRv6BE路径,承载EVPNL3VPNv4业务。... 查看详情
华为ne40e路由器实验配置示例|配置evdpdndl3vdpdndv4oversrv6be网络切片(代码片段)
组网需求如图1所示:PE1、P和PE2属于同一自治系统,要求它们之间通过IS-IS协议达到IPv6网络互连的目的。在PE1和PE2之间通过建立双向SRv6BE承载EVPNL3VPNv4业务。此外,为了满足保障CE1和CE2之间VPN实例vpn1的业务SLA,可... 查看详情
华为ne16ex路由器清除密码步骤
在BootLoader下配置跳过Console口密码启动后,修改Console口密码设备的BootLoader提供了配置跳过Console口密码启动的功能,可以在用户使用Console口登录的时候跳过密码检查。这样系统启动后除了不需要输入Console密码外,与正常启动相... 查看详情
简单的单臂路由的配置实验(华为)(代码片段)
实验名称:简单的单臂路由的配置实验(华为)实验拓扑:实验需要:1、按图中所示配置设网络备vlan,IP地址2、能够使各pc互相ping通。实验步骤:1、配置终端设备:pc1-pc5按照拓扑图中所示配置各个pc的ip地址。网关配置为192.168... 查看详情
华为配置rip实现全网互通
...置RIP实现全网互通实验拓扑:实验需求:两台PC机,四台路由器实验步骤:配置pc机配置路由器接口IPR1:<Huawei>sysEntersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR1[R1]interfaceGigabitEthernet0/0/0[R1-GigabitEthe 查看详情
华为---单臂路由配置
...260)实验步骤:首先,来了解一下,单臂路由:性质:在路由器的一个接口上配置子接口目的:实现原来不同VLAN之间的互联互通优点:实现不同vlan之间的通信缺点:容易成为网络单点故障作用:单臂路由(router-on-a-stick)是指... 查看详情
微型企业默认路由使用及配置实验—华为
...环境软件eNSP1.2.00.500虚拟设备PC:PC1–PC2交换机:SW1、SW2路由器:R1–R3三、实验拓扑四、实验步骤手动配置PC1、PC2的IP、子网掩码、网关,过程不进行叙述和展示。R1:<Huawei>sys#进入视图模式[Huawei]sysR1#修改设备名称为R1[R1]intg... 查看详情
华为交换机rip配置实验
给上图四台路由器分别配置接口IP地址;分别用版本2,开启summary,配置自己的两个直连网段给其他路由器学习。 水平分割机制:在一个端口上收到的路由不会再从这个端口发出去。验证命令查看当前路由协议R1#showiproute ... 查看详情
简单的三层交换配置路由实验(华为)(代码片段)
实验名称:简单的三层交换配置路由实验拓扑:实验需要:1、按图中所示配置设网络备vlan,IP地址2、能够使各pc互相ping通。实验步骤:1、配置终端设备:pc1-pc5按照拓扑图中所示配置各个pc的ip地址。网关配置为192.168.x.254pc6配置... 查看详情
华为网络设备介绍及基础配置命令(代码片段)
一、华为产品分类:.目前华为网络产品有路由器、交换机、防火墙。.1、路由器路由器主要分为AR系列和NE系列:AR系列路由器:AR系列是华为推出的新一代网络产品,主要面向企业及分支机构。AR系列集成路由、交换、3G、语音和... 查看详情
小型企业默认路由使用及配置实验—华为
目的:通过静态路由和默认路由来实现全网互通。拓扑图:步骤及配置:手动配置PC1,PC2的ip地址,子网掩码和网关。AR1:[Huawei]sysR1#修改设备名称为R1[R1]intgi0/0/0#进入0端口[R1-GigabitEthernet0/0/0]undoshutdown#启用端口[R1-GigabitEthernet0/0/0]ipa... 查看详情
默认路由配置实现全网互通。(华为)
...互通。实验步骤:1.先给PC配置不同网段的IP地址;2.配置路由器实现全网互通;配置命令:路由器AR1:<Huawei>system-view进入特权[Huawei]interfaceGigabitEthernet0/0/0进入端口[Huawei-GigabitEthernet0/0/0]ipaddress192.168.1 查看详情
华为路由器ospf虚链路配置(代码片段)
...OSPF虚链路配置命令。实验配置如下图:实验说明如下:1.路由器R1、R2在0区域,路由器R2、R3、R4在234区域,路由器R4、R5在45区域。2.45区域没有与骨干区域直接相连,因此在不引入外部路由的情况下,需要在路由R2、R4上配置虚链... 查看详情
华为设备-配置默认路由
...通。方案使用eNSP搭建实验环境,如图所示。分别为PC机和路由器1-2-3的各接口配置好IP地址,方便做实验。PC1:ip地址:192.168.1.1255.255.255.0PC2:ip地址:192.168.4.1255.255.255.0R1:GE0/0/0192.168.1.254255.255.255.0R1:GE0/0 查看详情
玩转华为ensp模拟器系列|配置lldp基本功能示例(代码片段)
素材来源:华为路由器配置指南一边学习一边整理试验笔记,并与大家分享,侵权即删,谢谢支持!附上汇总贴:玩转华为ENSP模拟器系列|合集_COCOgsta的博客-CSDN博客_华为模拟器实验目标本举例介绍通过配... 查看详情
玩转华为ensp模拟器系列|配置igmp基本功能示例(代码片段)
素材来源:华为路由器配置指南一边学习一边整理试验笔记,并与大家分享,侵权即删,谢谢支持!附上汇总贴:玩转华为ENSP模拟器系列|合集_COCOgsta的博客-CSDN博客_华为模拟器实验目标在组播网络中部署I... 查看详情