用eNSP做的MPLS ×××簡單實驗
簡單的拓撲
×××1/×××2<---->PE1<---->P<---->PE2<---->×××1/×××2
×××1/×××2直連PE1/PE2
涉及到ISIS,MP-BGP和MPLS ×××等配置
PE1配置如下：
[PE1]dis current-configuration
[V200R003C00]
#配置主機名
sysname PE1
#
board add 0/1 2E1-F
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone Indian Standard Time minus 05:13:20
clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23
00:00 2005 2005
#
portal local-server load portalpage.zip
#
drop illegal-mac alarm
#
set cpu-usage threshold 80 restore 75
#配置×××實例
ip ***-instance ×××1
ipv4-family
route-distinguisher 23221:1
***-target 23221:100 export-extcommunity
***-target 23221:100 import-extcommunity
#配置×××實例
ip ***-instance ×××2
ipv4-family
route-distinguisher 23221:2
***-target 23221:200 export-extcommunity
***-target 23221:200 import-extcommunity
#配置MPLS
mpls lsr-id 1.1.1.1
mpls
#
mpls ldp
#
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#配置isis路由協議
isis 1
is-level level-1
cost-style wide
network-entity 47.2112.0320.0212.4220.00
#
firewall zone Local
priority 15
#
interface Ethernet0/0/0
#
interface Ethernet0/0/1
#
interface Ethernet0/0/2
#
interface Ethernet0/0/3
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#模擬鏈路1-至匯聚路由器
interface Serial1/0/0
link-protocol ppp
ip address 12.12.12.1 255.255.255.252
isis enable 1
isis circuit-level level-1
mpls
mpls ldp
#
interface Serial1/0/1
link-protocol ppp
#模擬鏈路2-至實時加密裝置
interface GigabitEthernet0/0/0
ip binding ***-instance ×××1
ip address 172.16.1.1 255.255.255.0
#模擬鏈路2-至非實時加密裝置
interface GigabitEthernet0/0/1
ip binding ***-instance ×××2
ip address 172.16.2.1 255.255.255.0
#
interface NULL0
#迴環口
interface LoopBack0
ip address 1.1.1.1 255.255.255.255
isis enable 1
isis circuit-level level-1
#配置MP-BGP
bgp 23221
peer 3.3.3.3 as-number 23221
peer 3.3.3.3 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
peer 3.3.3.3 enable
#
ipv4-family ***v4
policy ***-target
peer 3.3.3.3 enable
#
ipv4-family ***-instance ×××1
import-route direct
#
ipv4-family ***-instance ×××2
import-route direct
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return
[PE1]
PE2參考PE1的配置，P路由器配置ISIS即可！
經驗證符合實驗結果。