华为运营商级路由器配置示例 | 跨域L3VdPdNdv4 over SRv6 TE Policy

Posted 一个热爱编程的通信人

tags:

篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了华为运营商级路由器配置示例 | 跨域L3VdPdNdv4 over SRv6 TE Policy相关的知识,希望对你有一定的参考价值。

组网需求

如图1所示:

  • PE1和ASBR1属于AS 100,PE2和ASBR2属于AS 200,要求AS 100和AS 200内通过IS-IS协议达到IPv6网络互连的目的。
  • PE1和ASBR1的IS-IS进程是1,都是Level-1设备;PE2和ASBR2的IS-IS进程是10,都是Level-1设备。

要求在PE1和PE2之间建立双向跨域SRv6 TE Policy路径,承载L3VPNv4业务。

图1 配置跨域L3VPNv4 over SRv6 TE Policy组网图

配置思路

  1. 使能PE1、PE2、ASBR1和ASBR2各接口的IPv6转发能力,配置各接口的IPv6地址。
  2. 在PE1、PE2、ASBR1和ASBR2上使能IS-IS,配置Level级别,指定网络实体。
  3. 在PE1和PE2上配置VPN实例。
  4. 在PE和CE之间建立EBGP对等体关系。
  5. 在PE上配置IS-IS发布SRv6 Locator路由,并且配置域内的静态End.X SID
  6. 在ASBR1和ASBR2上配置BGP EPEv6,配置ASBR之间的静态End.X SID。
  7. 在PE之间建立MP-EBGP对等体关系,利用对等体关系相互发送携带SID的BGP VPNv4路由。
  8. 在PE1和PE2上配置SRv6 TE Policy。
  9. 在PE1和PE2上配置隧道策略,引入私网流量。

操作步骤

1.使能各接口的IPv6转发能力,配置各接口的IPv6地址

# 配置PE1。PE2、ASBR1和ASBR2的配置过程与PE1类似,不再赘述,详情可参考配置文件。

<HUAWEI> system-view
[~HUAWEI] sysname PE1
[*HUAWEI] commit
[~PE1] interface gigabitethernet 1/0/0
[~PE1-GigabitEthernet1/0/0] ipv6 enable
[*PE1-GigabitEthernet1/0/0] ipv6 address 2001::1 96
[*PE1-GigabitEthernet1/0/0] quit
[*PE1] interface LoopBack 1
[*PE1-LoopBack1] ipv6 enable
[*PE1-LoopBack1] ipv6 address 1::1 128
[*PE1-LoopBack1] quit
[*PE1] commit

2.配置IS-IS

# 配置PE1。

[~PE1] isis 1
[*PE1-isis-1] is-level level-1
[*PE1-isis-1] cost-style wide
[*PE1-isis-1] network-entity 10.0000.0000.0001.00
[*PE1-isis-1] ipv6 enable topology ipv6
[*PE1-isis-1] quit
[*PE1] interface gigabitethernet 1/0/0
[*PE1-GigabitEthernet1/0/0] isis ipv6 enable 1
[*PE1-GigabitEthernet1/0/0] quit
[*PE1] interface loopback1
[*PE1-LoopBack1] isis ipv6 enable 1
[*PE1-LoopBack1] commit
[~PE1-LoopBack1] quit

# 配置ASBR1。

[~ASBR1] isis 1 
[*ASBR1-isis-1] is-level level-1
[*ASBR1-isis-1] cost-style wide
[*ASBR1-isis-1] network-entity 10.0000.0000.0002.00
[*ASBR1-isis-1] ipv6 enable topology ipv6
[*ASBR1-isis-1] quit
[*ASBR1] interface gigabitethernet 1/0/0
[*ASBR1-GigabitEthernet1/0/0] isis ipv6 enable 1
[*ASBR1-GigabitEthernet1/0/0] quit
[*ASBR1] interface loopback1
[*ASBR1-LoopBack1] isis ipv6 enable 1
[*ASBR1-LoopBack1] commit
[~ASBR1-LoopBack1] quit

# 配置ASBR2。

[~ASBR2] isis 10 
[*ASBR2-isis-10] is-level level-1
[*ASBR2-isis-10] cost-style wide
[*ASBR2-isis-10] network-entity 10.0000.0000.0003.00
[*ASBR2-isis-10] ipv6 enable topology ipv6
[*ASBR2-isis-10] quit
[*ASBR2] interface gigabitethernet 1/0/0
[*ASBR2-GigabitEthernet1/0/0] isis ipv6 enable 10
[*ASBR2-GigabitEthernet1/0/0] quit
[*ASBR2] interface loopback1
[*ASBR2-LoopBack1] isis ipv6 enable 10
[*ASBR2-LoopBack1] commit
[~ASBR2-LoopBack1] quit

# 配置PE2。

[~PE2] isis 10
[*PE2-isis-10] is-level level-1
[*PE2-isis-10] cost-style wide
[*PE2-isis-10] network-entity 10.0000.0000.0004.00
[*PE2-isis-10] ipv6 enable topology ipv6
[*PE2-isis-10] quit
[*PE2] interface gigabitethernet 1/0/0
[*PE2-GigabitEthernet1/0/0] isis ipv6 enable 10
[*PE2-GigabitEthernet1/0/0] quit
[*PE2] interface loopback1
[*PE2-LoopBack1] isis ipv6 enable 10
[*PE2-LoopBack1] commit
[~PE2-LoopBack1] quit

配置完成后,可按如下指导检查IS-IS是否配置成功。

# 显示IS-IS邻居信息。以PE1为例。

[~PE1] display isis peer

                          Peer information for ISIS(1)
                         
  System Id     Interface          Circuit Id        State HoldTime Type     PRI
--------------------------------------------------------------------------------
0000.0000.0002* GE1/0/0            0000.0000.0002.01  Up   8s       L1       64 

Total Peer(s): 1

3.在PE设备上配置使能IPv4地址族的VPN实例,将CE接入PE

# 配置PE1。

[~PE1] ip vpn-instance vpna
[*PE1-vpn-instance-vpna] ipv4-family
[*PE1-vpn-instance-vpna-af-ipv4] route-distinguisher 100:1
[*PE1-vpn-instance-vpna-af-ipv4] vpn-target 111:1 both
[*PE1-vpn-instance-vpna-af-ipv4] quit
[*PE1-vpn-instance-vpna] quit
[*PE1] interface gigabitethernet 2/0/0
[*PE1-GigabitEthernet2/0/0] ip binding vpn-instance vpna
[*PE1-GigabitEthernet2/0/0] ip address 10.1.1.1 24
[*PE1-GigabitEthernet2/0/0] quit
[*PE1] commit

# 配置PE2。

[~PE2] ip vpn-instance vpna
[*PE2-vpn-instance-vpna] ipv4-family
[*PE2-vpn-instance-vpna-af-ipv4] route-distinguisher 200:1
[*PE2-vpn-instance-vpna-af-ipv4] vpn-target 111:1 both
[*PE2-vpn-instance-vpna-af-ipv4] quit
[*PE2-vpn-instance-vpna] quit
[*PE2] interface gigabitethernet 2/0/0
[*PE2-GigabitEthernet2/0/0] ip binding vpn-instance vpna
[*PE2-GigabitEthernet2/0/0] ip address 10.2.1.1 24
[*PE2-GigabitEthernet2/0/0] quit
[*PE2] commit

# 按图1配置各CE的接口IP地址,配置过程请参见后面的配置文件。

配置完成后,在PE设备上执行display ip vpn-instance verbose命令可以看到VPN实例的配置情况。各PE能ping通自己接入的CE。

4.在PE与CE之间建立EBGP对等体关系

# 配置CE1。

[~CE1] interface loopback 1
[*CE1-LoopBack1] ip address 11.11.11.11 32
[*CE1-LoopBack1] quit
[*CE1] bgp 65410
[*CE1-bgp] peer 10.1.1.1 as-number 100
[*CE1-bgp] network 11.11.11.11 32
[*CE1-bgp] quit
[*CE1] commit

# 配置PE1。

[~PE1] bgp 100
[*PE1-bgp] router-id 1.1.1.1
[*PE1-bgp] ipv4-family vpn-instance vpna
[*PE1-bgp-vpna] peer 10.1.1.2 as-number 65410
[*PE1-bgp-vpna] import-route direct
[*PE1-bgp-vpna] commit
[~PE1-bgp-vpna] quit
[~PE1-bgp] quit

# 配置CE2。

[~CE2] interface loopback 1
[*CE2-LoopBack1] ip address 22.22.22.22 32
[*CE2-LoopBack1] quit
[*CE2] bgp 65420
[*CE2-bgp] peer 10.2.1.1 as-number 100
[*CE2-bgp] network 22.22.22.22 32
[*CE2-bgp] quit
[*CE2] commit

# 配置PE2。

[~PE2] bgp 200
[*PE2-bgp] router-id 4.4.4.4
[*PE2-bgp] ipv4-family vpn-instance vpna
[*PE2-bgp-vpna] peer 10.2.1.2 as-number 65420
[*PE2-bgp-vpna] import-route direct
[*PE2-bgp-vpna] commit
[~PE2-bgp-vpna] quit
[~PE2-bgp] quit

配置完成后,在PE设备上执行display bgp vpnv4 vpn-instance peer命令,可以看到PE与CE之间的BGP对等体关系已建立,并达到Established状态。

以PE1与CE1的对等体关系为例:

[~PE1] display bgp vpnv4 vpn-instance vpna peer
 BGP local router ID : 1.1.1.1
 Local AS number : 100

 VPN-Instance vpna, Router ID 1.1.1.1:
 Total number of peers : 1            Peers in established state : 1

  Peer            V    AS  MsgRcvd  MsgSent    OutQ  Up/Down    State        PrefRcv
  10.1.1.2        4   65410  11     9          0     00:06:37   Established  1

5.在PE上配置IS-IS发布SRv6 Locator路由,并且配置域内的静态End.X SID

# 配置PE1。

[~PE1] segment-routing ipv6
[*PE1-segment-routing-ipv6] encapsulation source-address 1::1
[*PE1-segment-routing-ipv6] locator as1 ipv6-prefix 10:: 64 static 32
[*PE1-segment-routing-ipv6-locator] opcode ::100 end-x interface GigabitEthernet1/0/0 nexthop 2001::2 no-flavor 
[*PE1-segment-routing-ipv6-locator] quit
[*PE1-segment-routing-ipv6] quit
[*PE1] isis 1
[*PE1-isis-1] ipv6 enable topology ipv6 
[*PE1-isis-1] segment-routing ipv6 locator as1 auto-sid-disable
[*PE1-isis-1] commit
[~PE1-isis-1] quit

# 配置PE2。

[~PE2] segment-routing ipv6
[*PE2-segment-routing-ipv6] encapsulation source-address 4::4
[*PE2-segment-routing-ipv6] locator as1 ipv6-prefix 40:: 64 static 32
[*PE2-segment-routing-ipv6-locator] opcode ::200 end-x interface GigabitEthernet1/0/0 nexthop 2002::1 no-flavor
[*PE2-segment-routing-ipv6-locator] quit
[*PE2-segment-routing-ipv6] quit
[*PE2] isis 10
[*PE2-isis-10] ipv6 enable topology ipv6 
[*PE2-isis-10] segment-routing ipv6 locator as1 auto-sid-disable
[*PE2-isis-10] commit
[~PE2-isis-10] quit

执行命令display segment-routing ipv6 local-sid end-x forwarding查看SRv6的Local SID表信息。以PE1的显示为例:

[~PE1] display segment-routing ipv6 local-sid end-x forwarding

                            My Local-SID End.X Forwarding Table       
                            -----------------------------------                 

SID         : 10::100/128                                                     FuncType : End.X                   
Flavor      : --                                         
LocatorName : as1                                                             LocatorID: 1 
ProtocolType: STATIC                                                          ProcessID: --
UpdateTime  : 2021-08-30 01:49:44.292
NextHop     :                              Interface :                        ExitIndex:                        
2001::2                                   GigabitEthernet1/0/0                0x0000000e                        

Total SID(s): 1

6.在ASBR1和ASBR2上配置BGP EPEv6,配置ASBR之间的静态End.X SID

# 配置ASBR1。

[~ASBR1] segment-routing ipv6
[*ASBR1-segment-routing-ipv6] encapsulation source-address 2::2
[*ASBR1-segment-routing-ipv6] locator as1 ipv6-prefix 20:: 64 static 32
[*ASBR1-segment-routing-ipv6-locator] opcode ::200 end-x interface GigabitEthernet1/0/0 nexthop 2001::1 no-flavor
[*ASBR1-segment-routing-ipv6-locator] quit
[*ASBR1-segment-routing-ipv6] quit
[*ASBR1] isis 1
[*ASBR1-isis-1] segment-routing ipv6 locator as1 auto-sid-disable
[*ASBR1-isis-1] ipv6 import-route bgp level-1
[*ASBR1-isis-1] commit
[~ASBR1-isis-1] quit
[~ASBR1] bgp 100 
[*ASBR1-bgp] router-id 2.2.2.2
[*ASBR1-bgp] segment-routing ipv6 egress-engineering locator as1 
[*ASBR1-bgp] peer 2020::2 as-number 200 
[*ASBR1-bgp] peer 2020::2 ebgp-max-hop 255
[*ASBR1-bgp] peer 2020::2 egress-engineering srv6 static-sid no-flavor 20::100
[*ASBR1-bgp] ipv6-family unicast
[*ASBR1-bgp-af-ipv6] peer 2020::2 enable
[*ASBR1-bgp-af-ipv6] network 1:: 64 
[*ASBR1-bgp-af-ipv6] network 10:: 64 
[*ASBR1-bgp-af-ipv6] import-route direct
[*ASBR1-bgp-af-ipv6] quit 
[*ASBR1-bgp] link-state-family unicast 
[*ASBR1-bgp-af-ls] peer 2020::2 enable 
[*ASBR1-bgp-af-ls] quit 
[*ASBR1-bgp] quit
[*ASBR1] commit

# 配置ASBR2。

[~ASBR2] segment-routing ipv6
[*ASBR2-segment-routing-ipv6] encapsulation source-address 3::3
[*ASBR2-segment-routing-ipv6] locator as1 ipv6-prefix 30:: 64 static 32
[*ASBR2-segment-routing-ipv6-locator] opcode ::100 end-x interface GigabitEthernet1/0/0 nexthop 2002::2 no-flavor
[*ASBR2-segment-routing-ipv6-locator] quit
[*ASBR2-segment-routing-ipv6] quit
[*ASBR2] isis 10
[*ASBR2-isis-10] segment-routing ipv6 locator as1 auto-sid-disable
[*ASBR2-isis-10] ipv6 import-route bgp level-1
[*ASBR2-isis-10] commit
[~ASBR2-isis-10] quit
[~ASBR2] bgp 200 
[*ASBR2-bgp] router-id 3.3.3.3
[*ASBR2-bgp] segment-routing ipv6 egress-engineering locator as1 
[*ASBR2-bgp] peer 2020::1 as-number 100
[*ASBR2-bgp] peer 2020::1 ebgp-max-hop 255
[*ASBR2-bgp] peer 2020::1 egress-engineering srv6 static-sid no-flavor 30::200  
[*ASBR2-bgp] ipv6-family unicast
[*ASBR2-bgp-af-ipv6] peer 2020::1 enable 
[*ASBR2-bgp-af-ipv6] network 4:: 64 
[*ASBR2-bgp-af-ipv6] network 40:: 64 
[*ASBR2-bgp-af-ipv6] import-route direct
[*ASBR2-bgp-af-ipv6] quit 
[*ASBR2-bgp] link-state-family unicast 
[*ASBR2-bgp-af-ls] peer 2020::1 enable 
[*ASBR2-bgp-af-ls] quit 
[*ASBR2-bgp] quit
[*ASBR2] commit

配置完成后,执行display bgp egress-engineering命令查看BGP EPE信息,可以看到SRv6 SID。以ASBR1的显示为例:

[~ASBR1] display bgp egress-engineering                  

 Peer Node                : 2020::2                     
 Peer Adj Num             : 0                           
 Local ASN                : 100                         
 Remote ASN               : 200                         
 Local Router Id          : 2.2.2.2                     
 Remote Router Id         : 3.3.3.3                     
 Local Interface Address  : 2020::1                     
 Remote Interface Address : 2020::2                     
 SRv6 SID                 : 20::100                     
 SRv6 SID (PSP)           : 20::1:0:1E                  
 Nexthop                  : 2020::2                     
 Out Interface            : GigabitEthernet2/0/0 

7.在PE之间建立MP-EBGP对等体关系,并且配置利用对等体关系相互发送携带SID的BGP VPNv4路由

# 配置PE1。

[~PE1] bgp 100
[~PE1-bgp] peer 4::4 as-number 200
[*PE1-bgp] peer 4::4 ebgp-max-hop 255
[*PE1-bgp] peer 4::4 connect-interface loopback 1
[*PE1-bgp] ipv4-family vpnv4
[*PE1-bgp-af-vpnv4] peer 4::4 enable
[*PE1-bgp-af-vpnv4] peer 4::4 prefix-sid
[*PE1-bgp-af-vpnv4] quit
[*PE1-bgp] ipv4-family vpn-instance vpna
[*PE1-bgp-vpna] segment-routing ipv6 traffic-engineer
[*PE1-bgp-vpna] segment-routing ipv6 locator as1
[*PE1-bgp-vpna] commit
[~PE1-bgp-vpna] quit
[~PE1-bgp] quit

# 配置PE2。

[~PE2] bgp 200
[~PE2-bgp] peer 1::1 as-number 100
[*PE2-bgp] peer 1::1 ebgp-max-hop 255
[*PE2-bgp] peer 1::1 connect-interface loopback 1
[*PE2-bgp] ipv4-family vpnv4
[*PE2-bgp-af-vpnv4] peer 1::1 enable
[*PE2-bgp-af-vpnv4] peer 1::1 prefix-sid
[*PE2-bgp-af-vpnv4] quit
[*PE2-bgp] ipv4-family vpn-instance vpna
[*PE2-bgp-vpna] segment-routing ipv6 traffic-engineer
[*PE2-bgp-vpna] segment-routing ipv6 locator as1
[*PE2-bgp-vpna] commit
[~PE2-bgp-vpna] quit
[~PE2-bgp] quit

配置完成后,在PE设备上执行display bgp vpnv4 all peer命令,可以看到PE之间的BGP对等体关系已建立,并达到Established状态。以PE1的显示为例:

[~PE1] display bgp vpnv4 all peer                        

 BGP local router ID : 1.1.1.1                          
 Local AS number : 100                                  
 Total number of peers : 2                 Peers in established state : 2       

  Peer            V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State  PrefRcv                                               
  4::4            4         200     1032     1037     0 14:58:13 Established        2                                               

  Peer of IPv4-family for vpn instance :                

  VPN-Instance vpna, Router ID 1.1.1.1:                 
  Peer            V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State  PrefRcv                                               
  10.1.1.2        4       65410     1313     1330     0 19:06:22 Established        1  

8.配置SRv6 TE Policy

# 配置PE1。

[~PE1] segment-routing ipv6 
[~PE1-segment-routing-ipv6] segment-list list1 
[*PE1-segment-routing-ipv6-segment-list-list1] index 5 sid ipv6 10::100
[*PE1-segment-routing-ipv6-segment-list-list1] index 10 sid ipv6 20::100
[*PE1-segment-routing-ipv6-segment-list-list1] index 15 sid ipv6 30::100 
[*PE1-segment-routing-ipv6-segment-list-list1] commit
[~PE1-segment-routing-ipv6-segment-list-list1] quit
[~PE1-segment-routing-ipv6] srv6-te-policy locator as1 
[*PE1-segment-routing-ipv6] srv6-te policy policy1 endpoint 4::4 color 101
[*PE1-segment-routing-ipv6-policy-policy1] binding-sid 10::1000
[*PE1-segment-routing-ipv6-policy-policy1] candidate-path preference 100
[*PE1-segment-routing-ipv6-policy-policy1-path] segment-list list1 
[*PE1-segment-routing-ipv6-policy-policy1-path] commit
[~PE1-segment-routing-ipv6-policy-policy1-path] quit
[~PE1-segment-routing-ipv6-policy-policy1] quit
[~PE1-segment-routing-ipv6] quit

# 配置PE2。

[~PE2] segment-routing ipv6 
[~PE2-segment-routing-ipv6] segment-list list1 
[*PE2-segment-routing-ipv6-segment-list-list1] index 5 sid ipv6 40::200          
[*PE2-segment-routing-ipv6-segment-list-list1] index 10 sid ipv6 30::200         
[*PE2-segment-routing-ipv6-segment-list-list1] index 15 sid ipv6 20::200 
[*PE2-segment-routing-ipv6-segment-list-list1] commit
[~PE2-segment-routing-ipv6-segment-list-list1] quit
[~PE2-segment-routing-ipv6] srv6-te-policy locator as1 
[*PE2-segment-routing-ipv6] srv6-te policy policy1 endpoint 1::1 color 101
[*PE2-segment-routing-ipv6-policy-policy1] binding-sid 40::1000
[*PE2-segment-routing-ipv6-policy-policy1] candidate-path preference 100
[*PE2-segment-routing-ipv6-policy-policy1-path] segment-list list1 
[*PE2-segment-routing-ipv6-policy-policy1-path] commit
[~PE2-segment-routing-ipv6-policy-policy1-path] quit
[~PE2-segment-routing-ipv6-policy-policy1] quit
[~PE2-segment-routing-ipv6] quit

配置完成后,执行命令display srv6-te policy查看SRv6 TE Policy信息。

以PE1的显示为例:

[~PE1] display srv6-te policy 
PolicyName : policy1                                    
Color                   : 101                            Endpoint             : 4::4         
TunnelId                : 1                              Binding SID          : 10::1000     
TunnelType              : SRv6-TE Policy                 DelayTimerRemain     : -            
Policy State            : Up                             State Change Time    : 2020-02-17 11:16:30
Admin State             : Up                             Traffic Statistics   : Disable   
Backup Hot-Standby      : Disable                        BFD                  : Disable   
Interface Index         : -                              Interface Name       : - 
Interface State         : -                              Encapsulation Mode   : Insert
Candidate-path Count    : 1                                

 Candidate-path Preference : 100                        
 Path State             : Active                         Path Type            : Primary      
 Protocol-Origin        : Configuration(30)              Originator           : 0, 0.0.0.0   
 Discriminator          : 100                            Binding SID          : 10::1000     
 GroupId                : 1                              Policy Name          : policy1      
 Template ID            : 0                              Path Verification    : Disable
 DelayTimerRemain       : -                              Segment-List Count   : 1            
  Segment-List          : list1                            
   Segment-List ID      : 1                              XcIndex              : 1            
   List State           : Up                             DelayTimerRemain     : -   
   Verification State   : -                              SuppressTimeRemain   : -
   PMTU                 : 9600                           Active PMTU          : 9600    
   Weight               : 1                              BFD State            : -
   SID :        
         10::100                                        
         20::100                                        
         30::100

9.配置隧道策略,引入私网流量

# 配置PE1。

[~PE1] route-policy p1 permit node 10
[*PE1-route-policy] apply extcommunity color 0:101
[*PE1-route-policy] quit
[*PE1] bgp 100
[*PE1-bgp] ipv4-family vpnv4
[*PE1-bgp-af-vpnv4] peer 4::4 route-policy p1 import 
[*PE1-bgp-af-vpnv4] quit
[*PE1-bgp] quit
[*PE1] tunnel-policy p1
[*PE1-tunnel-policy-p1] tunnel select-seq ipv6 srv6-te-policy load-balance-number 1
[*PE1-tunnel-policy-p1] quit
[*PE1] ip vpn-instance vpna
[*PE1-vpn-instance-vpna] ipv4-family
[*PE1-vpn-instance-vpna-af-ipv4] tnl-policy p1
[*PE1-vpn-instance-vpna-af-ipv4] commit
[~PE1-vpn-instance-vpna-af-ipv4] quit
[~PE1-vpn-instance-vpna] quit

# 配置PE2。

[~PE2] route-policy p1 permit node 10
[*PE2-route-policy] apply extcommunity color 0:101
[*PE2-route-policy] quit
[*PE2] bgp 200
[*PE2-bgp] ipv4-family vpnv4
[*PE2-bgp-af-vpnv4] peer 1::1 route-policy p1 import 
[*PE2-bgp-af-vpnv4] quit
[*PE2-bgp] quit
[*PE2] tunnel-policy p1
[*PE2-tunnel-policy-p1] tunnel select-seq ipv6 srv6-te-policy load-balance-number 1
[*PE2-tunnel-policy-p1] quit
[*PE2] ip vpn-instance vpna
[*PE2-vpn-instance-vpna] ipv4-family
[*PE2-vpn-instance-vpna-af-ipv4] tnl-policy p1
[*PE2-vpn-instance-vpna-af-ipv4] commit
[~PE2-vpn-instance-vpna-af-ipv4] quit
[~PE2-vpn-instance-vpna] quit

配置完成后,执行命令display ip routing-table vpn-instance vpna查看VPN实例路由表信息,可以看到私网路由已经成功迭代到SRv6 TE Policy。

以PE1的显示为例:

[~PE1] display ip routing-table vpn-instance vpna 
Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route                                              
------------------------------------------------------------------------------  
Routing Table : vpna                                    
         Destinations : 8        Routes : 8             

Destination/Mask    Proto   Pre  Cost        Flags NextHop         Interface    

       10.1.1.0/24  Direct  0    0             D   10.1.1.1        GigabitEthernet1/0/0
       10.1.1.1/32  Direct  0    0             D   127.0.0.1       GigabitEthernet1/0/0 
     10.1.1.255/32  Direct  0    0             D   127.0.0.1       GigabitEthernet1/0/0  
       10.2.1.0/24  EBGP    255  0             RD  4::4            policy1   
    11.11.11.11/32  EBGP    255  0             RD  10.1.1.2        GigabitEthernet1/0/0  
    22.22.22.22/32  EBGP    255  0             RD  4::4            policy1                    
      127.0.0.0/8   Direct  0    0             D   127.0.0.1       InLoopBack0                       
255.255.255.255/32  Direct  0    0             D   127.0.0.1       InLoopBack0 
[~PE1] display ip routing-table vpn-instance vpna 22.22.22.22 verbose 
Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route                                              
------------------------------------------------------------------------------                                                      
Routing Table : vpna                                    
Summary Count : 1                                       

Destination: 22.22.22.22/32                             
     Protocol: EBGP               Process ID: 0         
   Preference: 255                      Cost: 0         
      NextHop: 4::4                Neighbour: 4::4      
        State: Active Adv Relied         Age: 00h00m01s 
          Tag: 0                    Priority: low       
        Label: 3                     QoSInfo: 0x0       
   IndirectID: 0x10000E5            Instance:           
 RelayNextHop: ::                  Interface: policy1   
     TunnelID: 0x000000003400000001    Flags: RD  

10.检查配置结果

同一VPN的CE能够相互Ping通,例如:

[~CE1] ping -a 11.11.11.11 22.22.22.22
  PING 22.22.22.22: 56  data bytes, press CTRL_C to break              
    Reply from 22.22.22.22: bytes=56 Sequence=1 ttl=253 time=1030 ms         
    Reply from 22.22.22.22: bytes=56 Sequence=2 ttl=253 time=37 ms           
    Reply from 22.22.22.22: bytes=56 Sequence=3 ttl=253 time=30 ms           
    Reply from 22.22.22.22: bytes=56 Sequence=4 ttl=253 time=35 ms           
    Reply from 22.22.22.22: bytes=56 Sequence=5 ttl=253 time=34 ms           

  --- 22.22.22.22 ping statistics ---                   
    5 packet(s) transmitted                             
    5 packet(s) received                                
    0.00% packet loss                                   
    round-trip min/avg/max = 30/233/1030 ms 

以上是关于华为运营商级路由器配置示例 | 跨域L3VdPdNdv4 over SRv6 TE Policy的主要内容,如果未能解决你的问题,请参考以下文章

华为运营商级路由器配置示例 | 配置OptionC方式跨域LDP VPLS示例

华为运营商级路由器配置示例 | 配置OptionC方式跨域BGP VPLS示例

华为运营商级路由器配置示例 | 配置OptionB方式跨域BGP VPLS示例

华为运营商级路由器配置示例 | 配置OptionA方式跨域BGP VPLS示例

华为运营商级路由器配置示例 | 配置OptionA方式跨域LDP VPLS示例

华为运营商级路由器配置示例 | 配置OptionC方式跨域BGP AD VPLS示例