Huawei mpls vpn cross-domain solution c-1 without RR

Insert image description here
Some important points to note:
1. There is no need to run bgp on r2 and r5. Only mpls ldp is used to transmit labels. 2.
There is no need to run vpnv4 routing on r3 and r4. Only labels are transmitted. Therefore, do not establish vpnv4 routing with the peer in your AS to reduce stress.
3. R1 and r6 use vpnv4 routing. The characteristic of vpnv4 routing is that it will automatically enter the mpls vpn tunnel, so there is no mpls blackhole routing on r2 and r5.
4. Only ordinary ebgp neighbors are established between ASBRs, and only mpls is enabled on the interface. 5. The ibgp
between two ASBRs and within each pair must enable the ability to send labels, and use policy routing to add labels.

The following key configurations

R1:

ip vpn-instance a
ipv4-family
route-distinguisher 1:1
vpn-target 100:100 export-extcommunity
vpn-target 100:100 import-extcommunity

mpls lsr-id 1.1.1.1
mpls

mpls ldp

isis 1
network-entity 49.0000.0000.0000.0001.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 10.0.12.1 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip binding vpn-instance a
ip address 10.0.17.1 255.255.255.0

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 1.1.1.1 255.255.255.255
isis enable 1

bgp 100
peer 3.3.3.3 as-number 100
peer 3.3.3.3 connect-interface LoopBack0
peer 6.6.6.6 as-number 200
peer 6.6.6.6 ebgp-max-hop 255
peer 6.6.6.6 connect-interface LoopBack0

ipv4-family unicast
undo synchronization
peer 3.3.3.3 enable
peer 3.3.3.3 label-route-capability
peer 6.6.6.6 enable

ipv4-family vpnv4
policy vpn-target
peer 6.6.6.6 enable

ipv4-family vpn-instance a
peer 10.0.17.7 as-number 60000

R2:

mpls lsr-id 2.2.2.2
mpls

mpls ldp

isis 1
network-entity 49.0000.0000.0002.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 10.0.12.2 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip address 10.0.23.2 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 2.2.2.2 255.255.255.255
isis enable 1

R3

mpls lsr-id 3.3.3.3
mpls

mpls ldp

isis 1
network-entity 49.0000.0000.0003.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 10.0.23.3 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip address 10.0.34.3 255.255.255.0
mpls

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 3.3.3.3 255.255.255.255
isis enable 1

bgp 100
peer 1.1.1.1 as-number 100
peer 1.1.1.1 connect-interface LoopBack0
peer 10.0.34.4 as-number 200

ipv4-family unicast
undo synchronization
network 1.1.1.1 255.255.255.255
peer 1.1.1.1 enable
peer 1.1.1.1 route-policy labe1 export
peer 1.1.1.1 label-route-capability
peer 10.0.34.4 enable
peer 10.0.34.4 route-policy labe2 export
peer 10.0.34.4 label-route-capability

route-policy labe1 permit node 10
if-match mpls-label //Only add labels to data with labels, and do not add
apply mpls- label to data without labels.

route-policy labe2 permit node 10
apply mpls-label

R4

mpls lsr-id 4.4.4.4
mpls

mpls ldp

isis 1
network-entity 49.0001.0000.0000.0004.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 10.0.34.4 255.255.255.0
mpls

interface GigabitEthernet0/0/1
ip address 10.0.45.4 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 4.4.4.4 255.255.255.255
isis enable 1

bgp 200
peer 6.6.6.6 as-number 200
peer 6.6.6.6 connect-interface LoopBack0
peer 10.0.34.3 as-number 100

ipv4-family unicast
undo synchronization
network 6.6.6.6 255.255.255.255
peer 6.6.6.6 enable
peer 6.6.6.6 route-policy ibgp export
peer 6.6.6.6 label-route-capability
peer 10.0.34.3 enable
peer 10.0.34.3 route-policy asbr export
peer 10.0.34.3 label-route-capability

route-policy ibgp permit node 10
if-match mpls-label
apply mpls-label

route-policy asbr permit node 10
apply mpls-label

R5

mpls lsr-id 5.5.5.5
mpls

mpls ldp

isis 1
network-entity 49.0001.0000.0000.0005.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 10.0.45.5 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip address 10.0.56.5 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 5.5.5.5 255.255.255.255
isis enable 1

R6:

ip vpn-instance a
ipv4-family
route-distinguisher 1:1
vpn-target 100:100 export-extcommunity
vpn-target 100:100 import-extcommunity

mpls lsr-id 6.6.6.6
mpls

mpls ldp

isis 1
network-entity 49.0001.0000.0000.0006.00

firewall zone Local
priority 15

interface GigabitEthernet0/0/0
ip address 10.0.56.6 255.255.255.0
isis enable 1
mpls
mpls ldp

interface GigabitEthernet0/0/1
ip binding vpn-instance a
ip address 10.0.68.6 255.255.255.0

interface GigabitEthernet0/0/2

interface NULL0

interface LoopBack0
ip address 6.6.6.6 255.255.255.255
isis enable 1

bgp 200
peer 1.1.1.1 as-number 100
peer 1.1.1.1 ebgp-max-hop 255
peer 1.1.1.1 connect-interface LoopBack0
peer 4.4.4.4 as-number 200
peer 4.4.4.4 connect-interface LoopBack0

ipv4-family unicast
undo synchronization
peer 1.1.1.1 enable
peer 4.4.4.4 enable
peer 4.4.4.4 label-route-capability

ipv4-family vpnv4
policy vpn-target
peer 1.1.1.1 enable

ipv4-family vpn-instance a
peer 10.0.68.8 as-number 60001

Guess you like

Origin blog.csdn.net/ydaxia110/article/details/135129405