Skip to main content

 路由器设置 > 新闻资讯 > 华为 >

华为MPLS VPV配置

2013-11-12 01:07 浏览:

155156109.jpg

配置步骤

一、在PE路由器上配置VRF(虚拟路由转发),VRF将路由器的2个实例分割,实例之间不能直接通信。

二、在PE和P路由器上配置路由协议,互联网的内部路由器可以互通

三、在PE设备之间配置BGP协议,BGP协议支持标签转发

四、在PE和P路由器上配置MPLS协议,将端口设置允许MPLS协议

五、配置VPN

六、配置VRF路由注入,让PE间设备能够学习到对方的路由协议

PE1配置

[PE1]displaycurrent-configuration
[V200R003C00]
#
sysnamePE1
#
snmp-agentlocal-engineid800007DB03000000000000
snmp-agent
#
clocktimezoneIndianStandardTimeminus05:13:20
clockdaylight-saving-timeDayLightSavingTimerepeating12:329-112:3211-2300:0020052005
#
dropillegal-macalarm
#
setcpu-usagethreshold80restore75
#
ipvpn-instancevpna
ipv4-family
route-distinguisher100:1
vpn-target100:3export-extcommunity
vpn-target100:3import-extcommunity
#
ipvpn-instancevpnb
ipv4-family
route-distinguisher100:2
vpn-target100:4export-extcommunity
vpn-target100:4import-extcommunity
#
mplslsr-id3.3.3.3
mpls
lsp-triggerall
#
mplsldp
#
#
aaa
authentication-schemedefault
authorization-schemedefault
accounting-schemedefault
domaindefault
domaindefault_admin
local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-useradminservice-typehttp
#
firewallzoneLocal
priority15
#
interfaceGigabitEthernet0/0/0
ipaddress34.1.1.3255.255.255.0
mpls
mplsldp
#
interfaceGigabitEthernet0/0/1
ipbindingvpn-instancevpnb
ipaddress23.1.1.3255.255.255.0
#
interfaceGigabitEthernet0/0/2
ipbindingvpn-instancevpna
ipaddress13.1.1.3255.255.255.0
#
interfaceNULL0
#
interfaceLoopBack0
ipaddress3.3.3.3255.255.255.0
#
bgp100
peer5.5.5.5as-number100
peer5.5.5.5connect-interfaceLoopBack0
#
ipv4-familyunicast
undosynchronization
peer5.5.5.5enable
peer5.5.5.5next-hop-local
#
ipv4-familyvpnv4
policyvpn-target
peer5.5.5.5enable
#
ipv4-familyvpn-instancevpna
import-routerip1
#
ipv4-familyvpn-instancevpnb
import-routerip2
#
ospf1
area0.0.0.0
network3.3.3.00.0.0.255
network34.1.1.00.0.0.255
#
rip1vpn-instancevpna
undosummary
version2
network13.0.0.0
import-routebgp
#
rip2vpn-instancevpnb
undosummary
version2
network23.0.0.0
network2.0.0.0
import-routebgp
#
user-interfacecon0
authentication-modepassword
user-interfacevty04
user-interfacevty1620
#
wlanac
#
return