华为mpls vpn跨域B方案配置案例

在这里插入图片描述
R!:
dis current-configuration
[V200R003C00]

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

ip vpn-instance vpn1
ipv4-family
route-distinguisher 1:1
vpn-target 100:1 export-extcommunity
vpn-target 100:1 import-extcommunity

mpls lsr-id 1.1.1.1
mpls

mpls ldp

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %K8m.Nt84DZ}e#<0`8bmE3Uw}%
local-user admin service-type http

isis 1
network-entity 49.0000.0000.0000.0001.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip binding vpn-instance vpn1
ip address 17.1.1.1 255.255.255.0

interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/2
ip address 13.1.1.1 255.255.255.0
isis enable 1
mpls
mpls ldp

interface NULL0

interface LoopBack0
ip address 1.1.1.1 255.255.255.255
isis enable 1

bgp 100
peer 2.2.2.2 as-number 100
peer 2.2.2.2 connect-interface LoopBack0

ipv4-family unicast
undo synchronization
peer 2.2.2.2 enable

ipv4-family vpnv4
policy vpn-target
peer 2.2.2.2 enable

ipv4-family vpn-instance vpn1
peer 17.1.1.7 as-number 1

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

wlan ac

return

R2:
dis current-configuration
[V200R003C00]

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

mpls lsr-id 2.2.2.2
mpls

mpls ldp

isis 1
network-entity 49.0000.0000.0000.0002.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 12.1.1.2 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip address 23.1.1.2 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 2.2.2.2 255.255.255.255
isis enable 1

bgp 100
peer 1.1.1.1 as-number 100
peer 1.1.1.1 connect-interface LoopBack0
peer 3.3.3.3 as-number 100
peer 3.3.3.3 connect-interface LoopBack0

ipv4-family unicast
undo synchronization
peer 1.1.1.1 enable
peer 3.3.3.3 enable

ipv4-family vpnv4
undo policy vpn-target
peer 1.1.1.1 enable
peer 1.1.1.1 reflect-client
peer 3.3.3.3 enable
peer 3.3.3.3 reflect-client

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

wlan ac

return

R3:
dis current-configuration
[V200R003C00]

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

mpls lsr-id 3.3.3.3
mpls

mpls ldp

isis 1
network-entity 49.0000.0000.0000.0003.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 23.1.1.3 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip address 34.1.1.3 255.255.255.0
mpls

interface GigabitEthernet0/0/2
ip address 13.1.1.3 255.255.255.0
isis enable 1
mpls
mpls ldp

interface NULL0

interface LoopBack0
ip address 3.3.3.3 255.255.255.255
isis enable 1

bgp 100
peer 2.2.2.2 as-number 100
peer 2.2.2.2 connect-interface LoopBack0
peer 34.1.1.4 as-number 200

ipv4-family unicast
undo synchronization
peer 2.2.2.2 enable
peer 34.1.1.4 enable

ipv4-family vpnv4
undo policy vpn-target
peer 2.2.2.2 enable
peer 34.1.1.4 enable

user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20

wlan ac

return

R4:
dis current-configuration
[V200R003C00]

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

mpls lsr-id 4.4.4.4
mpls

mpls ldp

isis 1
network-entity 49.0000.0000.0000.0004.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 34.1.1.4 255.255.255.0
mpls

interface GigabitEthernet0/0/1
ip address 45.1.1.4 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/2
ip address 46.1.1.4 255.255.255.0
isis enable 1
mpls
mpls ldp

interface NULL0

interface LoopBack0
ip address 4.4.4.4 255.255.255.255
isis enable 1

bgp 200
peer 5.5.5.5 as-number 200
peer 5.5.5.5 connect-interface LoopBack0
peer 34.1.1.3 as-number 100

ipv4-family unicast
undo synchronization
peer 5.5.5.5 enable
peer 34.1.1.3 enable

ipv4-family vpnv4
undo policy vpn-target
peer 5.5.5.5 enable
peer 34.1.1.3 enable

R5：
dis current-configuration
[V200R003C00]

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

mpls lsr-id 5.5.5.5
mpls

mpls ldp

isis 1
network-entity 49.0000.0000.0000.0005.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 45.1.1.5 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip address 56.1.1.5 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 5.5.5.5 255.255.255.255
isis enable 1

bgp 200
peer 4.4.4.4 as-number 200
peer 4.4.4.4 connect-interface LoopBack0
peer 6.6.6.6 as-number 200
peer 6.6.6.6 connect-interface LoopBack0

ipv4-family unicast
undo synchronization
peer 4.4.4.4 enable
peer 6.6.6.6 enable

ipv4-family vpnv4
undo policy vpn-target
peer 4.4.4.4 enable
peer 4.4.4.4 reflect-client
peer 6.6.6.6 enable
peer 6.6.6.6 reflect-client

R6：
dis cu
dis current-configuration
[V200R003C00]

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

ip vpn-instance vpn1
ipv4-family
route-distinguisher 1:1
vpn-target 100:1 export-extcommunity
vpn-target 100:1 import-extcommunity

mpls lsr-id 6.6.6.6
mpls

mpls ldp

isis 1
network-entity 49.0000.0000.0000.0006.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 56.1.1.6 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip binding vpn-instance vpn1
ip address 68.1.1.6 255.255.255.0

interface GigabitEthernet0/0/2
ip address 46.1.1.6 255.255.255.0
isis enable 1
mpls
mpls ldp

interface NULL0

interface LoopBack0
ip address 6.6.6.6 255.255.255.255
isis enable 1

bgp 200
peer 5.5.5.5 as-number 200
peer 5.5.5.5 connect-interface LoopBack0

ipv4-family unicast
undo synchronization
peer 5.5.5.5 enable

ipv4-family vpnv4
policy vpn-target
peer 5.5.5.5 enable

ipv4-family vpn-instance vpn1
peer 68.1.1.8 as-number 2

R7：
dis current-configuration
[V200R003C00]

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 17.1.1.7 255.255.255.0

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 7.7.7.7 255.255.255.255

bgp 1
peer 17.1.1.1 as-number 100

ipv4-family unicast
undo synchronization
network 7.7.7.7 255.255.255.255
peer 17.1.1.1 enable

R8：
dis current-configuration
[V200R003C00]

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 68.1.1.8 255.255.255.0

interface GigabitEthernet0/0/1

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 8.8.8.8 255.255.255.255

bgp 2
peer 68.1.1.6 as-number 200

ipv4-family unicast
undo synchronization
network 8.8.8.8 255.255.255.255
peer 68.1.1.6 enable