一 组网说明
①运营商为某客户提供MV专线,实现总部和分支三层互通；
②客户总部和分支通过运营商MV专线建立IPSEC隧道
③总部内网、分支内网全部配置的静态路由；
二 设备配置
2.1 运营商MV专线配置
2.1.1 PE1设备配置
sysname PE1
#
ip vpn-instance 1
route-distinguisher 1:1
vpn-target 1:1 import-extcommunity
vpn-target 1:1 export-extcommunity
#
ospf 1 router-id 9.9.9.1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 9.9.9.1 0.0.0.0
#
ip unreachables enable
ip ttl-expires enable
#
lldp global enable
#
mpls lsr-id 9.9.9.1
#
mpls ldp
#
interface LoopBack0
ip address 9.9.9.1 255.255.255.255
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 1.1.1.1 255.255.255.0
mpls enable
mpls ldp enable
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip binding vpn-instance 1
ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet0/2
port link-mode route
combo enable copper
#
bgp 100
peer 9.9.9.3 as-number 100
peer 9.9.9.3 connect-interface LoopBack0
#
address-family vpnv4
peer 9.9.9.3 enable
#
ip vpn-instance 1
#
address-family ipv4 unicast
import-route direct
#
2.1.2 P设备配置
sysname P
#
ospf 1 router-id 9.9.9.2
area 0.0.0.0
network 1.1.1.2 0.0.0.0
network 2.2.2.1 0.0.0.0
network 9.9.9.2 0.0.0.0
#
ip unreachables enable
ip ttl-expires enable
#
lldp global enable
#
mpls lsr-id 9.9.9.2
#
mpls ldp
#
interface LoopBack0
ip address 9.9.9.2 255.255.255.255
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 1.1.1.2 255.255.255.0
mpls enable
mpls ldp enable
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 2.2.2.1 255.255.255.0
mpls enable
mpls ldp enable
#
2.1.3 PE2设备配置
sysname PE2
#
ip vpn-instance 1
route-distinguisher 1:1
vpn-target 1:1 import-extcommunity
vpn-target 1:1 export-extcommunity
#
ospf 1 router-id 9.9.9.3
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 9.9.9.3 0.0.0.0
#
ip unreachables enable
ip ttl-expires enable
#
lldp global enable
#
mpls lsr-id 9.9.9.3
#
mpls ldp
#
interface LoopBack0
ip address 9.9.9.3 255.255.255.255
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 2.2.2.2 255.255.255.0
mpls enable
mpls ldp enable
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip binding vpn-instance 1
ip address 192.168.2.1 255.255.255.0
#
interface GigabitEthernet0/2
port link-mode route
combo enable copper
#
bgp 100
peer 9.9.9.1 as-number 100
peer 9.9.9.1 connect-interface LoopBack0
#
address-family vpnv4
peer 9.9.9.1 enable
#
ip vpn-instance 1
#
address-family ipv4 unicast
import-route direct
#
2.2 总部和分支出口R配置地址和默认路由可测试地址可达
2.2.1 ZB-R地址和默认路由配置
sysname ZB-R
#
ip unreachables enable
ip ttl-expires enable
#
lldp global enable
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 192.168.1.2 255.255.255.0
#
ip route-static 0.0.0.0 0 192.168.1.1
#
2.2.2 FZ-R地址和默认路由配置
sysname FZ-R
#
ip unreachables enable
ip ttl-expires enable
#
lldp global enable
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 192.168.2.2 255.255.255.0
#
ip route-static 0.0.0.0 0 192.168.2.1
#
