实验组网介绍
验规划
如上图所示,某企业在不同的数据中心中都拥有自己的VM,PC1模拟服务器1上的VM1属于 VLAN10,PC2模拟服务器2上的VM1属于VLAN20,PC3模拟服务器3上的VM1属于VLAN30,3个VM且位于不同网段。现需要通过VXLAN三层网关实现不同数据中心相同VM的互通。详细IP地址请看拓扑。
配置思路
1.配置CE1-NVE1、CE2、CE3-NVE2之间互联接口IP地址及loopback接口地址
2.配置CE1-NVE1、CE2、CE3-NVE2之间使用OSPF动态路由协议,保证三层网络互通
3.分别在CE1-NVE1、CE3-NVE2上配置业务接入点实现区分业务流量
a)创建广播域BD,在BD视图下,创建VXLAN网络标识VNI
b)创建二层子接口,并进入二层子接口视图,将二层子接口加入BD,允许报文通过广播域BD转发,且配置流封装类型实现不同的接口接入不同的数据报文
4.分别在CE1-NVE1、CE2、CE3-NVE2上配置VXLAN隧道转发业务流量
a)创建NVE接口,并进入NVE接口视图下,配置源端VTEP的IP地址,配置头端复制列表
5.在CE2上配置VXLAN三层网关,实现不同网段用户通过VXLAN三层网关互通
a)创建VBDIF接口,并进入VBDIF接口视图下配置VBDIF接口IP地址实现三层互通
6.S1和S2按正常的VLAN配置来配置
检查配置结果
#执行命令display bridge-domain [ binding-info | bd-id [ brief | verbose | binding[1]info ] ],查看广播域BD的配置信息。
#执行命令display interface nve [ nve-number | main ],查看NVE接口的状态信息
#执行命令display vxlan tunnel [ tunnel-id ] [ verbose ],查看VXLAN隧道的信息
执行命令display vxlan vni [ vni-id [ verbose ] ],查看VXLAN的配置信息及VNI状态。
配置参考命令
CE1的配置
#
bridge-domain 10
vxlan vni 10
#
bridge-domain 20
vxlan vni 20
#
interface GE1/0/0
undo portswitch
undo shutdown
ip address 10.0.12.1 255.255.255.0
#
interface GE1/0/1.10 mode l2
encapsulation dot1q vid 10
bridge-domain 10
#
interface GE1/0/1.20 mode l2
encapsulation dot1q vid 20
bridge-domain 20
#
interface LoopBack0
ip address 1.1.1.1 255.255.255.255
#
interface Nve1
source 1.1.1.1
vni 10 head-end peer-list 2.2.2.2
vni 20 head-end peer-list 2.2.2.2
#
interface NULL0
#
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 10.0.12.0 0.0.0.255
#
CE2的配置
#
bridge-domain 10
vxlan vni 10
#
bridge-domain 20
vxlan vni 20
#
bridge-domain 30
vxlan vni 30
#
interface Vbdif10
ip address 192.168.10.254 255.255.255.0
#
interface Vbdif20
ip address 192.168.20.254 255.255.255.0
#
interface Vbdif30
ip address 192.168.30.254 255.255.255.0
#
interface MEth0/0/0
undo shutdown
#
interface GE1/0/0
undo portswitch
undo shutdown
ip address 10.0.12.2 255.255.255.0
#
interface GE1/0/1
undo portswitch
undo shutdown
ip address 10.0.23.2 255.255.255.0
#
interface LoopBack0
ip address 2.2.2.2 255.255.255.255
#
interface Nve1
source 2.2.2.2
vni 10 head-end peer-list 1.1.1.1
vni 20 head-end peer-list 1.1.1.1
vni 30 head-end peer-list 3.3.3.3
#
interface NULL0
#
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 10.0.12.0 0.0.0.255
network 10.0.23.0 0.0.0.255
#
CE3的配置
#
bridge-domain 30
vxlan vni 30
#
interface GE1/0/0
undo portswitch
undo shutdown
ip address 10.0.23.3 255.255.255.0
#
interface GE1/0/1
undo shutdown
#
interface GE1/0/1.30 mode l2
encapsulation dot1q vid 30
bridge-domain 30
#
interface LoopBack0
ip address 3.3.3.3 255.255.255.255
#
interface Nve1
source 3.3.3.3
vni 30 head-end peer-list 2.2.2.2
#
interface NULL0
#
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 3.3.3.3 0.0.0.0
network 10.0.23.0 0.0.0.255
#
S1的配置
#
vlan batch 10 20
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 20
#
S2的配置
vlan batch 30
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 30
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 30
#