ASBR间建立EBGP的session-实现MPLS-VPN.doc

《ASBR间建立EBGP的session-实现MPLS-VPN.doc》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、实现跨域MPLSVPN方案二、ASBR间建立EBGP的session1、拓扑2、说明：此方案有两个AS之间不是通过TUNNEL子接口建立邻接关系，而是使用用VPNV4通过物理直连接口建立邻接关系，所以在ASBR收到对端ASBR发来的VPNV4路由时，由于都是通过VPNV4学习过来的，所以下一跳不改变，所以要在在本AS内部邻居建立邻接关系时要next-hop-self。这样才能实现路BGP路由的优化特点ASBR需要处理VPN信息，但不需要配置VRF实例ASBR之间一条链路传递所有VPN信息根据不同的情况，ASBR

2、之间构建单层或双层LSP隧道当VPN业务发展到一定阶段，ASBR之间的链路受限时，可以考虑OPTIONB跨域方法3、配置R1:一般用户配置enconfigthostnamece1enablesecretciscousernameciscopasswordcisconoservicepadservicetimestampsdebugdatetimelocaltimeshow-timezoneservicetimestampslogdatetimelocaltimeshow-timezoneservicepassw

3、ord-encryptionclocktimezoneBJT8noipsource-routenoiphttpservernoiphttpsecure-servernoipdomain-lookuplineconsol0loginlocalloggingsynchronousstopbit1exec-timeout00linevty04loginlocalloggingsynchronousstopbit1exec-timeout50exitipclasslessipcefinterfaceLoopback0n

4、oshipaddress192.168.3.1255.255.255.0interfaceSerial1/1noshipaddress172.16.1.2255.255.255.252serialrestart-delay0exitiproute0.0.0.00.0.0.0172.16.1.1endR2:enconfigthostnamePE-Lenablesecretciscousernameciscopasswordcisconoservicepadservicetimestampsdebugdatetim

5、elocaltimeshow-timezoneservicetimestampslogdatetimelocaltimeshow-timezoneservicepassword-encryptionclocktimezoneBJT8noipsource-routenoiphttpservernoiphttpsecure-servernoipdomain-lookuplineconsol0loginlocalloggingsynchronousstopbit1exec-timeout00linevty04logi

6、nlocalloggingsynchronousstopbit1exec-timeout50exitipclasslessipcefipvrfvpnard32:1route-targetexport32:1route-targetimport32:1route-targetimport31:1//导入收到的其它VPNV4标记（其它域）的路由exitinterfaceLoopback0noshipaddress202.98.32.2255.255.255.255interfaceSerial1/0noshipvr

7、fforwardingvpnaipaddress172.16.1.1255.255.255.252interfaceSerial1/1noshipaddress10.1.1.2255.255.255.252mplsiprouterospf1log-adjacency-changesnetwork10.1.1.00.0.0.3area0network202.98.32.20.0.0.0area0exitrouterbgp32nosynchronizationbgplog-neighbor-changesneigh

8、bor202.98.32.3remote-as32neighbor202.98.32.3update-sourceLoopback0noauto-summaryaddress-familyvpnv4neighbor202.98.32.3activateneighbor202.98.32.3send-communitybothexit-address-familyaddress-fami