news 2026/7/9 1:54:24

小实验-MPLS VPN Option A(锐捷设备)

作者头像

张小明

前端开发工程师

1.2k 24
文章封面图
小实验-MPLS VPN Option A(锐捷设备)

拓扑图:

CE1配置:

CE1#sh run

Building configuration...
Current configuration: 1099 bytes

version RG-NSE-Route(V1.06)
hostname CE1
interface GigabitEthernet 0/0
ip address 12.1.1.1 255.255.255.0
!

interface Loopback 0
ip address 1.1.1.1 255.255.255.255
!
router bgp 100
bgp router-id 1.1.1.1
bgp log-neighbor-changes
bgp graceful-restart restart-time 120
bgp graceful-restart stalepath-time 360
bgp graceful-restart
neighbor 12.1.1.2 remote-as 200
address-family ipv4
network 1.1.1.1 mask 255.255.255.255
neighbor 12.1.1.2 activate
exit-address-family
!

PE1配置:

PE1#sh run

Building configuration...
Current configuration: 1660 bytes

version RG-NSE-Route(V1.06)
hostname PE1
!
ip vrf aaa
rd 1:1
route-target both 100:1
!
no cwmp
!
install 0 X86
!
sysmac 5049.3b00.4301
!
webmaster level 0 username admin password 7 0121474e3e16
!
mpls ip
!
no service password-encryption
!
redundancy
!
vpdn limit_rate 15
!
vlan 1
!
interface GigabitEthernet 0/0
ip vrf forwarding aaa
ip address 12.1.1.2 255.255.255.0
!
interface GigabitEthernet 0/1
ip address 23.1.1.2 255.255.255.0
mpls ip
label-switching
!
interface GigabitEthernet 0/2
!
interface GigabitEthernet 0/3
!
interface GigabitEthernet 0/4
!
interface GigabitEthernet 0/5
!
interface GigabitEthernet 0/6
!
interface GigabitEthernet 0/7
!
interface GigabitEthernet 0/8
!
interface GigabitEthernet 0/9
!
interface Loopback 0
ip address 2.2.2.2 255.255.255.255
!
router bgp 200
no bgp default ipv4-unicast
bgp log-neighbor-changes
bgp graceful-restart restart-time 120
bgp graceful-restart stalepath-time 360
bgp graceful-restart
neighbor 4.4.4.4 remote-as 200
neighbor 4.4.4.4 update-source Loopback 0
address-family ipv4
exit-address-family
address-family vpnv4 unicast
neighbor 4.4.4.4 activate
neighbor 4.4.4.4 send-community extended
exit-address-family
!
address-family ipv4 vrf aaa
neighbor 12.1.1.1 remote-as 100
neighbor 12.1.1.1 activate
exit-address-family
!
router ospf 100
graceful-restart
network 2.2.2.2 0.0.0.0 area 0
network 23.1.1.2 0.0.0.0 area 0
!
mpls router ldp
ldp router-id interface Loopback 0
graceful-restart
!
line console 0
logging synchronous
line vty 0 4
logging synchronous
login
!
end
PE1#

锐捷MPLS的配置

1)全局开启MPLS转发功能

Ruijie(config)#mpls ip

2)全局开启LDP标签分发协议

Ruijie(config)#mpls router ldp
Ruijie(config-mpls-router)#ldp router-id interfaceloopback 0 force

//建议此处指定LDP的router-id的时候,使用loopback接口且使用force的强制属性, force说明立即生效

3)开启接口的标签交换能力

Ruijie(config)#int gigabitEthernet 0/0
Ruijie(config-GigabitEthernet 0/0)#label-switching
//缺省情况下,三层接口只能识别IP数据包,如果不开启标签交换能力的话,是不能识别MPLS标签包。

4)接口下开启LDP协议

Ruijie(config)#int gigabitEthernet 0/0
Ruijie(config-GigabitEthernet 0/0)#mpls ip


Ruijie(config)#show mpls ldp parameters /查看LDP详细信息

Ruijie(config)#show mpls ldp discovery detail /查看LDP发现情况

Ruijie(config)#show mpls ldp neighbor /查看LDP邻居关系

Ruijie(config)#sh mpls ldp bindings /查看LIB表

Ruijie(config)#sh mpls forwarding-table /查看LFIB表


mpls ip/全局开启MPLS功能
mpls router ldp/开启LDP标签分发功能
Idp router-id interface Loopback 0 force/强制指定LDP的route-id为loopbacko
label-switching/接口开启MPLS标签交换功能
mpls ip接口开启LDP协议
recursive-route lookup Isp/让流量跌带到LSP隧道

P1配置:

P1#sh run

Building configuration...
Current configuration: 1094 bytes

version RG-NSE-Route(V1.06)
hostname P1
!
no cwmp
!
install 0 X86
!
sysmac 5063.0400.4101
!
webmaster level 0 username admin password 7 073f07221c1c
!
mpls ip
!
no service password-encryption
!
redundancy
!
vpdn limit_rate 15
!
vlan 1
!
interface GigabitEthernet 0/0
ip address 23.1.1.3 255.255.255.0
mpls ip
label-switching
!
interface GigabitEthernet 0/1
ip address 34.1.1.3 255.255.255.0
mpls ip
label-switching
!
interface GigabitEthernet 0/2
!
interface GigabitEthernet 0/3
!
interface GigabitEthernet 0/4
!
interface GigabitEthernet 0/5
!
interface GigabitEthernet 0/6
!
interface GigabitEthernet 0/7
!
interface GigabitEthernet 0/8
!
interface GigabitEthernet 0/9
!
interface Loopback 0
ip address 3.3.3.3 255.255.255.255
!
router ospf 100
graceful-restart
network 3.3.3.3 0.0.0.0 area 0
network 23.1.1.3 0.0.0.0 area 0
network 34.1.1.3 0.0.0.0 area 0
!
mpls router ldp
ldp router-id interface Loopback 0
graceful-restart
!
line console 0
logging synchronous
line vty 0 4
logging synchronous
login
!
end
P1#

ASBR1配置:

ASBR1#sh run

Building configuration...
Current configuration: 1662 bytes

version RG-NSE-Route(V1.06)
hostname ASBR1
!
ip vrf bbb
rd 1:2
route-target both 100:1
!
no cwmp
!
install 0 X86
!
sysmac 5048.1700.4001
!
webmaster level 0 username admin password 7 073f07221c1c
!
mpls ip
!
no service password-encryption
!
redundancy
!
vpdn limit_rate 15
!
vlan 1
!
interface GigabitEthernet 0/0
ip address 34.1.1.4 255.255.255.0
mpls ip
label-switching
!
interface GigabitEthernet 0/1
ip vrf forwarding bbb
ip address 45.1.1.4 255.255.255.0
!
interface GigabitEthernet 0/2
!
interface GigabitEthernet 0/3
!
interface GigabitEthernet 0/4
!
interface GigabitEthernet 0/5
!
interface GigabitEthernet 0/6
!
interface GigabitEthernet 0/7
!
interface GigabitEthernet 0/8
!
interface GigabitEthernet 0/9
!
interface Loopback 0
ip address 4.4.4.4 255.255.255.255
!
router bgp 200
no bgp default ipv4-unicast
bgp log-neighbor-changes
bgp graceful-restart restart-time 120
bgp graceful-restart stalepath-time 360
bgp graceful-restart
neighbor 2.2.2.2 remote-as 200
neighbor 2.2.2.2 update-source Loopback 0
address-family ipv4
exit-address-family
address-family vpnv4 unicast
neighbor 2.2.2.2 activate
neighbor 2.2.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf bbb
neighbor 45.1.1.5 remote-as 300
neighbor 45.1.1.5 activate
exit-address-family
!
router ospf 100
graceful-restart
network 4.4.4.4 0.0.0.0 area 0
network 34.1.1.4 0.0.0.0 area 0
!
mpls router ldp
ldp router-id interface Loopback 0
graceful-restart
!
line console 0
logging synchronous
line vty 0 4
logging synchronous
login
!
end
ASBR1#

注意ABBR1和ASBR2之间不相互起OSPF

两者是都把对方当成了CE


ASBR2配置:

ASBR2#sh run

Building configuration...
Current configuration: 1662 bytes

version RG-NSE-Route(V1.06)
hostname ASBR2
!
ip vrf ccc
rd 1:3
route-target both 200:1
!
no cwmp
!
install 0 X86
!
sysmac 505e.2300.2501
!
webmaster level 0 username admin password 7 08022b181b29
!
mpls ip
!
no service password-encryption
!
redundancy
!
vpdn limit_rate 15
!
vlan 1
!
interface GigabitEthernet 0/0
ip vrf forwarding ccc
ip address 45.1.1.5 255.255.255.0
!
interface GigabitEthernet 0/1
ip address 56.1.1.5 255.255.255.0
mpls ip
label-switching
!
interface GigabitEthernet 0/2
!
interface GigabitEthernet 0/3
!
interface GigabitEthernet 0/4
!
interface GigabitEthernet 0/5
!
interface GigabitEthernet 0/6
!
interface GigabitEthernet 0/7
!
interface GigabitEthernet 0/8
!
interface GigabitEthernet 0/9
!
interface Loopback 0
ip address 5.5.5.5 255.255.255.255
!
router bgp 300
no bgp default ipv4-unicast
bgp log-neighbor-changes
bgp graceful-restart restart-time 120
bgp graceful-restart stalepath-time 360
bgp graceful-restart
neighbor 7.7.7.7 remote-as 300
neighbor 7.7.7.7 update-source Loopback 0
address-family ipv4
exit-address-family
address-family vpnv4 unicast
neighbor 7.7.7.7 activate
neighbor 7.7.7.7 send-community extended
exit-address-family
!
address-family ipv4 vrf ccc
neighbor 45.1.1.4 remote-as 200
neighbor 45.1.1.4 activate
exit-address-family
!
router ospf 100
graceful-restart
network 5.5.5.5 0.0.0.0 area 0
network 56.1.1.5 0.0.0.0 area 0
!
mpls router ldp
ldp router-id interface Loopback 0
graceful-restart
!
line console 0
logging synchronous
line vty 0 4
logging synchronous
login
!
end
ASBR2#

P2配置:

P2#sh run

Building configuration...
Current configuration: 1094 bytes

version RG-NSE-Route(V1.06)
hostname P2
!
no cwmp
!
install 0 X86
!
sysmac 50b5.fb00.2601
!
webmaster level 0 username admin password 7 08022b181b29
!
mpls ip
!
no service password-encryption
!
redundancy
!
vpdn limit_rate 15
!
vlan 1
!
interface GigabitEthernet 0/0
ip address 56.1.1.6 255.255.255.0
mpls ip
label-switching
!
interface GigabitEthernet 0/1
ip address 67.1.1.6 255.255.255.0
mpls ip
label-switching
!
interface GigabitEthernet 0/2
!
interface GigabitEthernet 0/3
!
interface GigabitEthernet 0/4
!
interface GigabitEthernet 0/5
!
interface GigabitEthernet 0/6
!
interface GigabitEthernet 0/7
!
interface GigabitEthernet 0/8
!
interface GigabitEthernet 0/9
!
interface Loopback 0
ip address 6.6.6.6 255.255.255.255
!
router ospf 100
graceful-restart
network 6.6.6.6 0.0.0.0 area 0
network 56.1.1.6 0.0.0.0 area 0
network 67.1.1.6 0.0.0.0 area 0
!
mpls router ldp
ldp router-id interface Loopback 0
graceful-restart
!
line console 0
logging synchronous
line vty 0 4
logging synchronous
login
!
end
P2#

PE2配置:

PE2#sh run

Building configuration...
Current configuration: 1660 bytes

version RG-NSE-Route(V1.06)
hostname PE2
!
ip vrf ddd
rd 1:4
route-target both 200:1
!
no cwmp
!
install 0 X86
!
sysmac 50a2.e700.2701
!
webmaster level 0 username admin password 7 111323081b44
!
mpls ip
!
no service password-encryption
!
redundancy
!
vpdn limit_rate 15
!
vlan 1
!
interface GigabitEthernet 0/0
ip address 67.1.1.7 255.255.255.0
mpls ip
label-switching
!
interface GigabitEthernet 0/1
ip vrf forwarding ddd
ip address 78.1.1.7 255.255.255.0
!
interface GigabitEthernet 0/2
!
interface GigabitEthernet 0/3
!
interface GigabitEthernet 0/4
!
interface GigabitEthernet 0/5
!
interface GigabitEthernet 0/6
!
interface GigabitEthernet 0/7
!
interface GigabitEthernet 0/8
!
interface GigabitEthernet 0/9
!
interface Loopback 0
ip address 7.7.7.7 255.255.255.255
!
router bgp 300
no bgp default ipv4-unicast
bgp log-neighbor-changes
bgp graceful-restart restart-time 120
bgp graceful-restart stalepath-time 360
bgp graceful-restart
neighbor 5.5.5.5 remote-as 300
neighbor 5.5.5.5 update-source Loopback 0
address-family ipv4
exit-address-family
address-family vpnv4 unicast
neighbor 5.5.5.5 activate
neighbor 5.5.5.5 send-community extended
exit-address-family
!
address-family ipv4 vrf ddd
neighbor 78.1.1.8 remote-as 400
neighbor 78.1.1.8 activate
exit-address-family
!
router ospf 100
graceful-restart
network 7.7.7.7 0.0.0.0 area 0
network 67.1.1.7 0.0.0.0 area 0
!
mpls router ldp
ldp router-id interface Loopback 0
graceful-restart
!
line console 0
logging synchronous
line vty 0 4
logging synchronous
login
!
end
PE2#

CE2配置:



CE2(config)#sh run

Building configuration...
Current configuration: 1099 bytes

version RG-NSE-Route(V1.06)
hostname CE2
!
no cwmp
!
install 0 X86
!
sysmac 5045.c400.2b01
!
webmaster level 0 username admin password 7 111323081b44
!
no service password-encryption
!
redundancy
!
vpdn limit_rate 15
!
vlan 1
!
interface GigabitEthernet 0/0
ip address 78.1.1.8 255.255.255.0
!
interface GigabitEthernet 0/1
!
interface GigabitEthernet 0/2
!
interface GigabitEthernet 0/3
!
interface GigabitEthernet 0/4
!
interface GigabitEthernet 0/5
!
interface GigabitEthernet 0/6
!
interface GigabitEthernet 0/7
!
interface GigabitEthernet 0/8
!
interface GigabitEthernet 0/9
!
interface Loopback 0
ip address 8.8.8.8 255.255.255.255
!
router bgp 400
bgp router-id 8.8.8.8
bgp log-neighbor-changes
bgp graceful-restart restart-time 120
bgp graceful-restart stalepath-time 360
bgp graceful-restart
neighbor 78.1.1.7 remote-as 300
address-family ipv4
network 8.8.8.8 mask 255.255.255.255
neighbor 78.1.1.7 activate
exit-address-family
!
line console 0
logging synchronous
line vty 0 4
logging synchronous
login
!
end
CE2(config)#

最终实现:8.8.8.8 ping通 1.1.1.1.1

希望对你有所帮助,那样我会很开心!!!!!

版权声明: 本文来自互联网用户投稿,该文观点仅代表作者本人,不代表本站立场。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如若内容造成侵权/违法违规/事实不符,请联系邮箱:809451989@qq.com进行投诉反馈,一经查实,立即删除!
网站建设 2026/7/9 1:53:26

清华与蚂蚁集团联手破解AI训练难题:让大模型“吃什么“不再靠猜

这项由清华大学与蚂蚁集团、中国人民大学合作完成的研究,于2026年7月1日以预印本形式发布,论文编号为arXiv:2607.01104,感兴趣的读者可通过该编号查询完整论文。训练一个强大的大语言模型,本质上和培养一个全能型学生没什么两样。…

作者头像 李华
网站建设 2026/7/9 1:51:12

CUDA的显存模型与显存分层模型

GPU的核心结构:它是是围绕一个流式多处理器(SM)的扩展阵列搭建的 图中包含以下的几个核心部件:LD/ST(Load/Store)单元:负责内存加载和存储操作,用于在寄存器和全局内存、共享内存之间…

作者头像 李华
网站建设 2026/7/9 1:50:43

图德宾根大学与KE:SAI研究机构:让AI在驾驶模拟中学会“想象未来“

这项由德国图宾根大学与KE:SAI(Kyutai ELLIS可扩展自主智能研究机构)联合开展的研究,以arXiv预印本形式于2026年7月1日发布,编号为arXiv:2607.00917。有兴趣深入了解的读者可通过该编号查询完整论文。**当机器需要为未来做计划**假…

作者头像 李华
网站建设 2026/7/9 1:46:19

变化检测—BIT

BIT(Bitemporal Image Transformer)是 2021 年提出的双时态图像 Transformer 变化检测模型,用CNN 提取局部特征 Transformer 捕捉全局时序依赖,专门用于遥感二值变化检测。 输入:T1 影像 T2 影像(同一地…

作者头像 李华