华为运营商级路由器配置示例 | 配置OptionC方式跨域LDP VPLS示例
Posted 一个热爱编程的通信人
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了华为运营商级路由器配置示例 | 配置OptionC方式跨域LDP VPLS示例相关的知识，希望对你有一定的参考价值。
组网需求
如图1，CE1和CE2属于同一个VPLS，分别通过AS100内的PE1和AS200内的PE2接入骨干网。
当每个AS内有大量的跨域VPLS时，可以配置采用OptionC方式跨域LDP VPLS。在OptionC方式跨域LDP VPLS中，ASBR上不再维护VPLS标签块信息，而是PE之间直接交换VPLS标签块信息。
配置思路
-
在骨干网上运行IGP协议，使同一个AS域内的各设备能互通。
-
在骨干网上使能MPLS，在PE与ASBR之间建立动态LSP隧道，并且在ASBR之间的接口上也要使能MPLS。
-
同一AS的PE和ASBR之间建立IBGP。
-
在各ASBR之间配置EBGP，在ASBR上需配置路由策略，使能标签路由功能。
-
在PE1和PE2之间建立MPLS LDP远端对等体关系。
-
在PE1和PE2之间创建VPLS连接。
-
在PE1和PE2之间创建VSI实例，接入CE。
操作步骤
1,配置各设备接口的IP地址
# 配置CE1。
<HUAWEI> system-view
[~HUAWEI] sysname CE1
[*HUAWEI] commit
[~CE1] interface gigabitethernet 1/0/0
[*CE1-GigabitEthernet1/0/0] undo shutdown
[*CE1-GigabitEthernet1/0/0] quit
[*CE1] interface gigabitethernet 1/0/0.1
[*CE1-GigabitEthernet1/0/0.1] ip address 10.1.1.1 24
[*CE1-GigabitEthernet1/0/0.1] quit
[*CE1] commit# 配置PE1。
<HUAWEI> system-view
[~HUAWEI] sysname PE1
[*HUAWEI] commit
[~PE1] interface loopback1
[*PE1-Loopback1] ip address 1.1.1.1 32
[*PE1-Loopback1] quit
[*PE1] interface gigabitethernet 1/0/0
[*PE1-GigabitEthernet1/0/0] undo shutdown
[*PE1-GigabitEthernet1/0/0] quit
[*PE1] interface gigabitethernet 1/0/0.1
[*PE1-GigabitEthernet1/0/0.1] quit
[*PE1] interface gigabitethernet 2/0/0
[*PE1-GigabitEthernet2/0/0] undo shutdown
[*PE1-GigabitEthernet2/0/0] ip address 10.10.1.1 24
[*PE1-GigabitEthernet2/0/0] quit
[*PE1] commit# 配置ASBR1。
<HUAWEI> system-view
[~HUAWEI] sysname ASBR1
[*HUAWEI] commit
[~ASBR1] interface loopback1
[*ASBR1-Loopback1] ip address 2.2.2.2 32
[*ASBR1-Loopback1] quit
[*ASBR1] interface gigabitethernet 1/0/0
[*ASBR1-GigabitEthernet1/0/0] undo shutdown
[*ASBR1-GigabitEthernet1/0/0] ip address 10.10.1.2 24
[*ASBR1-GigabitEthernet1/0/0] quit
[*ASBR1] interface gigabitethernet 2/0/0
[*ASBR1-GigabitEthernet2/0/0] undo shutdown
[*ASBR1-GigabitEthernet2/0/0] ip address 10.20.1.1 24
[*ASBR1-GigabitEthernet2/0/0] quit
[*ASBR1] commit# 配置ASBR2。
<HUAWEI> system-view
[~HUAWEI] sysname ASBR2
[*HUAWEI] commit
[~ASBR2] interface loopback1
[*ASBR2-Loopback1] ip address 3.3.3.3 32
[*ASBR2-Loopback1] quit
[*ASBR2] interface gigabitethernet 1/0/0
[*ASBR2-GigabitEthernet1/0/0] undo shutdown
[*ASBR2-GigabitEthernet1/0/0] ip address 10.20.1.2 24
[*ASBR2-GigabitEthernet1/0/0] quit
[*ASBR2] interface gigabitethernet 2/0/0
[*ASBR2-GigabitEthernet2/0/0] undo shutdown
[*ASBR2-GigabitEthernet2/0/0] ip address 10.30.1.1 24
[*ASBR2-GigabitEthernet2/0/0] quit
[*ASBR2] commit# 配置PE2。
<HUAWEI> system-view
[~HUAWEI] sysname PE2
[*HUAWEI] commit
[~PE2] interface loopback1
[*PE2-Loopback1] ip address 4.4.4.4 32
[*PE2-Loopback1] quit
[*PE2] interface gigabitethernet 1/0/0
[*PE2-GigabitEthernet1/0/0] undo shutdown
[*PE2-GigabitEthernet1/0/0] ip address 10.30.1.1 24
[*PE2-GigabitEthernet1/0/0] quit
[*PE2] interface gigabitethernet 2/0/0
[*PE2-GigabitEthernet2/0/0] undo shutdown
[*PE2-GigabitEthernet2/0/0] quit
[*PE2] interface gigabitethernet 2/0/0.1
[*PE2-GigabitEthernet2/0/0.1] quit
[*PE2] commit# 配置CE2。
<HUAWEI> system-view
[~HUAWEI] sysname CE2
[*HUAWEI] commit
[~CE2] interface gigabitethernet 1/0/0
[*CE2-GigabitEthernet1/0/0] undo shutdown
[*CE2-GigabitEthernet1/0/0] quit
[*CE2] interface gigabitethernet 1/0/0.1
[*CE2-GigabitEthernet1/0/0.1] ip address 10.1.1.2 24
[*CE2-GigabitEthernet1/0/0.1] quit
[*CE2] commit2.配置骨干网的IGP协议
# 配置PE1。
[~PE1] ospf 1
[*PE1-ospf-1] area 0.0.0.0
[*PE1-ospf-1-area-0.0.0.0] network 1.1.1.1 0.0.0.0
[*PE1-ospf-1-area-0.0.0.0] network 10.10.1.0 0.0.0.255
[*PE1-ospf-1-area-0.0.0.0] quit
[*PE1-ospf-1] quit
[*PE1] commit# 配置ASBR1。
[~ASBR1] ospf 1
[*ASBR1-ospf-1] area 0.0.0.0
[*ASBR1-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0
[*ASBR1-ospf-1-area-0.0.0.0] network 10.10.1.0 0.0.0.255
[*ASBR1-ospf-1-area-0.0.0.0] quit
[*ASBR1-ospf-1] quit
[*ASBR1] commit# 配置ASBR2。
[*ASBR2] ospf 1
[*ASBR2-ospf-1] area 0.0.0.0
[*ASBR2-ospf-1-area-0.0.0.0] network 3.3.3.3 0.0.0.0
[*ASBR2-ospf-1-area-0.0.0.0] network 10.30.1.0 0.0.0.255
[*ASBR2-ospf-1-area-0.0.0.0] quit
[*ASBR2-ospf-1] quit
[*ASBR2] commit# 配置PE2。
[~PE2] ospf 1
[*PE2-ospf-1] area 0.0.0.0
[*PE2-ospf-1-area-0.0.0.0] network 4.4.4.4 0.0.0.0
[*PE2-ospf-1-area-0.0.0.0] network 10.30.1.0 0.0.0.255
[*PE2-ospf-1-area-0.0.0.0] quit
[*PE2-ospf-1] quit
[*PE2] commit3.使能MPLS，建立LSP隧道
# 配置PE1。
[~PE1] mpls lsr-id 1.1.1.1
[*PE1] mpls
[*PE1-mpls] quit
[*PE1] mpls ldp
[*PE1-mpls-ldp] quit
[*PE1] interface gigabitethernet 2/0/0
[*PE1-GigabitEthernet2/0/0] mpls
[*PE1-GigabitEthernet2/0/0] mpls ldp
[*PE1-GigabitEthernet2/0/0] quit
[*PE1] commit# 配置ASBR1。
[*ASBR1] mpls lsr-id 2.2.2.2
[*ASBR1] mpls
[*ASBR1-mpls] quit
[*ASBR1] mpls ldp
[*ASBR1-mpls-ldp] quit
[*ASBR1] interface gigabitethernet 1/0/0
[*ASBR1-GigabitEthernet1/0/0] mpls
[*ASBR1-GigabitEthernet1/0/0] mpls ldp
[*ASBR1-GigabitEthernet1/0/0] quit
[*ASBR1] commit# 配置ASBR2。
[~ASBR2] mpls lsr-id 3.3.3.3
[*ASBR2] mpls
[*ASBR2-mpls] quit
[*ASBR2] mpls ldp
[*ASBR2-mpls-ldp] quit
[*ASBR2] interface gigabitethernet 2/0/0
[*ASBR2-GigabitEthernet2/0/0] mpls
[*ASBR2-GigabitEthernet2/0/0] mpls ldp
[*ASBR2-GigabitEthernet2/0/0] quit
[*ASBR2] commit# 配置PE2。
[~PE2] mpls lsr-id 4.4.4.4
[*PE2] mpls
[*PE2-mpls] quit
[*PE2] mpls ldp
[*PE2-mpls-ldp] quit
[*PE2] interface gigabitethernet 1/0/0
[*PE2-GigabitEthernet1/0/0] mpls
[*PE2-GigabitEthernet1/0/0] mpls ldp
[*PE2-GigabitEthernet1/0/0] quit
[*PE2] commit4.在ASBR上使能域间的MPLS功能
# 配置ASBR1。
[~ASBR1] interface gigabitethernet 2/0/0
[*ASBR1-GigabitEthernet2/0/0] mpls
[*ASBR1-GigabitEthernet2/0/0] quit
[*ASBR1] commit# 配置ASBR2。
[~ASBR2] interface gigabitethernet 1/0/0
[*ASBR2-GigabitEthernet1/0/0] mpls
[*ASBR2-GigabitEthernet1/0/0] quit
[*ASBR2] commit5.在PE1与ASBR1之间、PE2与ASBR2之间配置MP-IBGP对等体，在ASBR1与ASBR2之间配置MP-EBGP对等体，并在ASBR上配置路由策略，对于从本AS的PE接收的路由，在向对端ASBR发布时，分配MPLS标签。对于向本AS的PE发布的路由，如果是带标签的IPv4路由，为其重新分配MPLS标签。
# 配置PE1。
[~PE1] bgp 100
[*PE1-bgp] peer 2.2.2.2 as-number 100
[*PE1-bgp] peer 2.2.2.2 label-route-capability
[*PE1-bgp] peer 2.2.2.2 connect-interface LoopBack 1
[*PE1-bgp] quit
[*PE1] commit# 配置ASBR1。
[*ASBR1] route-policy policy1 permit node 1
[*ASBR1-route-policy] if-match mpls-label
[*ASBR1-route-policy] apply mpls-label
[*ASBR1-route-policy] quit
[*ASBR1] route-policy policy2 permit node 1
[*ASBR1-route-policy] apply mpls-label
[*ASBR1-route-policy] quit
[*ASBR1] bgp 100
[*ASBR1-bgp] network 1.1.1.1 255.255.255.255
[*ASBR1-bgp] peer 1.1.1.1 as-number 100
[*ASBR1-bgp] peer 1.1.1.1 route-policy policy1 export
[*ASBR1-bgp] peer 1.1.1.1 label-route-capability
[*ASBR1-bgp] peer 1.1.1.1 connect-interface loopback 1
[*ASBR1-bgp] peer 10.20.1.2 as-number 200
[*ASBR1-bgp] peer 10.20.1.2 route-policy policy2 export
[*ASBR1-bgp] peer 10.20.1.2 label-route-capability
[*ASBR1-bgp] peer 10.20.1.2 connect-interface gigabitethernet 2/0/0
[*ASBR1-bgp]quit
[*ASBR1]commit# 配置ASBR2。
[*ASBR2] route-policy policy1 permit node 1
[*ASBR2-route-policy] if-match mpls-label
[*ASBR2-route-policy] apply mpls-label
[*ASBR2-route-policy] quit
[*ASBR2] route-policy policy2 permit node 1
[*ASBR2-route-policy] apply mpls-label
[*ASBR2-route-policy] quit
[*ASBR2] bgp 200
[*ASBR2-bgp] network 4.4.4.4 255.255.255.255
[*ASBR2-bgp] peer 4.4.4.4 as-number 200
[*ASBR2-bgp] peer 4.4.4.4 route-policy policy1 export
[*ASBR2-bgp] peer 4.4.4.4 label-route-capability
[*ASBR2-bgp] peer 4.4.4.4 connect-interface loopback 1
[*ASBR2-bgp] peer 10.20.1.1 as-number 100
[*ASBR2-bgp] peer 10.20.1.1 route-policy policy2 export
[*ASBR2-bgp] peer 10.20.1.1 label-route-capability
[*ASBR2-bgp] peer 10.20.1.1 connect-interface gigabitethernet 1/0/0
[*ASBR2-bgp] quit
[*ASBR2] commit# 配置PE2。
[~PE2] bgp 200
[*PE2-bgp] peer 3.3.3.3 as-number 200
[*PE2-bgp] peer 3.3.3.3 label-route-capability
[*PE2-bgp] peer 3.3.3.3 connect-interface loopback 1
[*PE2-bgp] quit
[*PE2] commit完成此步配置，在ASBR上执行命令display bgp peer，可以看见PE与相同AS的ASBR之间建立的IBGP会话状态为“Established”，ASBR之间的EBGP会话状态也为“Established”。以ASBR1的显示为例：
[~ASBR1] display bgp peer
BGP local router ID : 2.2.2.2
Local AS number : 100
Total number of peers : 2 Peers in established state : 2
Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv
1.1.1.1 4 100 111 128 0 00:34:24 Established 0
10.20.1.2 4 200 75 89 0 00:38:40 Established 1在ASBR上执行display tunnel-info all命令，可发现创建了“mpls local ifnet”类型的隧道。以ASBR1的显示为例：
[~ASBR1] display tunnel-info all
Tunnel ID Type Destination Status
-----------------------------------------------------------------------------
0x0000000001004c4b42 ldp 1.1.1.1 UP
0x000000000201040001 bgp 4.4.4.4 UP
0x000000000c00030000 mpls local ifnet 10.20.1.2 UP 6.在PE1和PE2之间建立LDP远端对等体会话
# 配置PE1。
[~PE1] mpls ldp remote-peer 4.4.4.4
[*PE1-mpls-ldp-remote-4.4.4.4] remote-ip 4.4.4.4
[*PE1-mpls-ldp-remote-4.4.4.4] quit
[*PE1] commit# 配置PE2。
[~PE2] mpls ldp remote-peer 1.1.1.1
[*PE2-mpls-ldp-remote-1.1.1.1] remote-ip 1.1.1.1
[*PE2-mpls-ldp-remote-1.1.1.1] quit
[*PE2] commit配置完成后，不同AS域内的PE之间应该建立起LDP邻居，在PE上执行display mpls ldp session命令可以看到显示结果中Session State项为“Operational”。
[~PE1] display mpls ldp session
LDP Session(s) in Public Network
Codes: LAM(Label Advertisement Mode), SsnAge Unit(DDDD:HH:MM)
An asterisk (*) before a session means the session is being deleted.
------------------------------------------------------------------------------
PeerID Status LAM SsnRole SsnAge KASent/Rcv
------------------------------------------------------------------------------
2.2.2.2:0 Operational DU Passive 000:00:31 125/125
4.4.4.4:0 Operational DU Passive 000:00:05 21/21
------------------------------------------------------------------------------
TOTAL: 2 session(s) Found.在PE上执行display tunnel-info all命令，可发现跨域隧道建立成功。以PE1的显示为例：
[~PE1] display tunnel-info all
Tunnel ID Type Destination Status
-----------------------------------------------------------------------------
0x0000000001004c4b42 ldp 2.2.2.2 UP
0x000000000201040000 bgp 4.4.4.4 UP 7.PE上配置VSI实例，并将VSI实例与AC接口绑定。
# 配置PE1。
[~PE1] mpls l2vpn
[*PE1-l2vpn] quit
[*PE1] vsi v1
[*PE1-vsi-v1] pwsignal ldp
[*PE1-vsi-v1-ldp] vsi-id 2
[*PE1-vsi-v1-ldp] peer 4.4.4.4
[*PE1-vsi-v1-ldp] quit
[*PE1-vsi-v1] quit
[*PE1] interface gigabitethernet 1/0/0.1
[*PE1-GigabitEthernet1/0/0.1] vlan-type dot1q 10
[*PE1-GigabitEthernet1/0/0.1] l2 binding vsi v1
[*PE1-GigabitEthernet1/0/0.1] quit
[*PE1] commit# 配置PE2。
[~PE2] mpls l2vpn
[*PE2-l2vpn] quit
[*PE2] vsi v1
[*PE2-vsi-v1] pwsignal ldp
[*PE2-vsi-v1-ldp] vsi-id 2
[*PE2-vsi-v1-ldp] peer 1.1.1.1
[*PE2-vsi-v1-ldp] quit
[*PE2-vsi-v1] quit
[*PE2] interface gigabitethernet 2/0/0.1
[*PE2-GigabitEthernet2/0/0.1] vlan-type dot1q 10
[*PE2-GigabitEthernet2/0/0.1] l2 binding vsi v1
[*PE2-GigabitEthernet2/0/0.1] quit
[*PE2] commit# 配置CE1。
[~CE1] interface gigabitethernet 1/0/0.1
[*CE1-GigabitEthernet1/0/0.1] vlan-type dot1q 10
[*CE1-GigabitEthernet1/0/0.1] quit
[*CE1] commit# 配置CE2。
[~CE2] interface gigabitethernet 1/0/0.1
[*CE2-GigabitEthernet1/0/0.1] vlan-type dot1q 10
[*CE2-GigabitEthernet1/0/0.1] quit
[*CE2] commit8.验证配置结果
在PE上查看VSI信息，可以看到VSI State和PW State都是Up。使用的隧道为之前建立的跨域LSP。以PE1显示为例：
[~PE1] display vsi name v1 verbose
***VSI Name : v1
Administrator VSI : no
Isolate Spoken : disable
VSI Index : 1
PW Signaling : ldp
Member Discovery Style : --
Bridge-domain Mode : disable
PW MAC Learn Style : unqualify
Encapsulation Type : vlan
MTU : 1500
Diffserv Mode : uniform
Service Class : --
Color : --
DomainId : 255
Domain Name :
Ignore AcState : disable
P2P VSI : disable
Multicast Fast Swicth : disable
Create Time : 0 days, 0 hours, 7 minutes, 10 seconds
VSI State :up
Resource Status : --
VSI ID : 2
*Peer Router ID : 4.4.4.4
primary or secondary : primary
ignore-standby-state : no
VC Label : 18
Peer Type : dynamic
Session : up
Tunnel ID : 0x0000000001004c4b44
Broadcast Tunnel ID : --
Broad BackupTunnel ID : --
CKey : 1
NKey : 1610612838
Stp Enable : 0
PwIndex : 0
Control Word : disable
Interface Name : GigabitEthernet1/0/0.1
State : up
Access Port : false
Last Up Time : 2014/09/30 10:14:46
Total Up Time : 0 days, 0 hours, 2 minutes, 14 seconds
**PW Information:
*Peer Ip Address : 4.4.4.4
PW State : up
Local VC Label : 18
Remote VC Label : 18
Remote Control Word : disable
PW Type : label
Tunnel ID : 0x0000000001004c4b44
Broadcast Tunnel ID : --
Broad BackupTunnel ID : --
Ckey : 1
Nkey : 1610612838
Main PW Token : 0x0
Slave PW Token : 0x0
Tnl Type : ldp
OutInterface : GigabitEthernet2/0/0
Backup OutInterface : --
Stp Enable : 0
Mac Flapping : 0
PW Last Up Time : 2012/09/10 10:16:03
PW Total Up Time : 0 days, 0 hours, 1 minutes, 19 seconds CE1与CE2能互相ping通。以CE1显示为例：
[~CE1] ping 10.1.1.2
PING 10.1.1.2: 56 data bytes, press CTRL_C to break
Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=90 ms
Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=77 ms
Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=34 ms
Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=46 ms
Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=94 ms
--- 10.1.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 34/68/94 ms以上是关于华为运营商级路由器配置示例 | 配置OptionC方式跨域LDP VPLS示例的主要内容，如果未能解决你的问题，请参考以下文章
华为运营商级路由器配置示例 | 配置OptionC方式跨域BGP AD VPLS示例
华为运营商级路由器配置示例 | 配置动态VPWS接入VPLS示例