Huawei MPLS Virtual Private Network Option B configuration experiment

Huawei MPLS Option B configuration experiment

The topology diagram and IP address planning are shown in the figure: The

main idea of ​​configuration is:

1. The IGP protocol is configured on the MPLS backbone network in each AS to realize the intercommunication between the ASBR-PE and PE in the respective backbone network.
2. Configure MPLS basic capabilities and MPLS LDP on the MPLS backbone network in each AS to establish LDP LSP.
3. In each AS, an MP-IBGP peer relationship is established between PE and ASBR-PE to exchange VPN routing information.
4. In each AS, a VPN instance must be configured on the PE connected to the CE, and the interface connected to the CE must be bound to the corresponding VPN instance.
5. Between ASs, PEs and CEs establish EBGP peer relationships to exchange VPN routing information.
6. Enable MPLS on the interface connected to another ASBR on the ASBR, and establish MP-EBGP peer relationships between ASBRs, and do not perform VPN-target filtering on received VPNv4 routes.
   Note: MPLS and ISIS configuration is relatively simple, so it will not be listed in the configuration

CE1 configuration (CE2 configuration is similar)

bgp 100
 peer 201.0.0.2 as-number 300 //与对端PE设备建立邻居
 #
 import-route direct  //引入直连路由
#

PE1 (the configuration of PE2 is similar)

ip vpn-instance A //配置实例
 ipv4-family
  route-distinguisher 1:1  //配置RD值
  vpn-target 1:100 export-extcommunity  //与PE2的入方向的RT值匹配
  vpn-target 100:1 import-extcommunity  //与PE2的出方向的RT值匹配
#
interface GigabitEthernet0/0/1
 ip binding vpn-instance A  //端口下绑定实例
#
bgp 300
 peer 2.2.2.2 as-number 300  //与ASBR设备建立MP-EBGP邻居
 peer 2.2.2.2 connect-interface LoopBack0
 #
 ipv4-family unicast
  undo synchronization
  peer 2.2.2.2 enable
 # 
 ipv4-family vpnv4
  policy vpn-target
  peer 2.2.2.2 enable   //激活MP-EBG邻居
 #
 ipv4-family vpn-instance A   //在VPN实例中与对端CE设备建立邻居
  peer 201.0.0.1 as-number 100 
#

ASBR1 (ASBR2 configuration is similar)

bgp 300
 peer 1.1.1.1 as-number 300  //与PE设备建立邻居
 peer 1.1.1.1 connect-interface LoopBack0
 peer 10.0.23.2 as-number 400  //与对端ASBR设备建立邻居
 #
 ipv4-family unicast
  undo synchronization
  peer 1.1.1.1 enable
  peer 10.0.23.2 enable
 # 
 ipv4-family vpnv4
  undo policy vpn-target   //关闭RT过滤
  apply-label per-nexthop  //按照下一跳分配标签
  peer 1.1.1.1 enable    //激活PE邻居
  peer 10.0.23.2 enable  //激活ASBR邻居
#
interface GigabitEthernet0/0/1
 mpls  //与ASBR-PE2相连的端口启用MPLS转发
#

Verification:
CE can learn each other's interface route, CE1 and CE2 can ping each other