示例:在 IS-IS 网络中配置 SRv6 网络编程
此示例说明如何在 IS-IS 网络中配置 SRv6 网络编程。此功能对于网络主要采用 IPv6 且尚未部署 MPLS 的服务提供商很有用。此类网络仅依靠 IPv6 报头和报头扩展来传输数据。SRv6 网络编程提供了利用分段路由的灵活性,而无需部署 MPLS。
要求
此示例使用以下硬件和软件组件:
8 个带有 MPC7E、MPC8E 或 MPC9E 线卡的 MX 系列路由器
Junos OS 20.3R1 或更高版本
概述
从 Junos OS 20.3R1 版开始,您可以在核心 IPv6 网络中配置不带 MPLS 的 SRv6。SRv6 网络编程是指网络将网络程序编码为单个网络指令,然后插入到 IPv6 数据包标头中的能力。携带网络指令的 IPv6 数据包会明确告知网络可用于数据包处理的精确 SRv6 节点。网络指令是由 128 位 IPv6 地址表示的 SRv6 分段标识符 (SID)。这些指令通过网络以 IPv6 数据包标头的形式进行分布。除了寻址,网络指令还为 SRv6 网络中每个支持 SRv6 的节点定义特定任务或功能。此功能有利于需要通过尚不具备分段路由功能的中转路由器来部署 SR 流量的网络。
拓扑学
在图 1 中,路由器 R0 和路由器 R7 是仅支持 IPv4 设备 CE1 和 CE2 的入口和出口路由器。路由器 R1、R2、R3、R4、R5 和 R6 构成了一个仅支持 IPv6 的提供商核心网络。所有路由器都属于同一个自治系统。IS-IS 是 IPv6 核心中的内部网关协议,配置为支持 SRv6。在此示例中,路由器 R2 配置为 IPv6 路由反射器,其 IBGP 对等会话到 R0 和 R7。在此示例中,没有其他路由器使用 BGP。
为了更好地演示 SRv6 隧道,此示例基于纯 IPv6 提供商核心。SRv6 由双堆栈核心提供支持,其中同时部署了 IPv6 和 IPv4。
支持 IPv4 设备的边缘路由器需要使用 IPv6 隧道封装传输 IPv4 流量。封装隧道派生自在启用了 SRv6 的路由器上配置的 SRv6 SID。IS-IS 协议处理这些 SRv6 SID,并使用可用隧道端点的下一跃点地址更新 inet6.3 表。当通过 BGP 学习 IPv4 路由时,路由器会尝试通过 inet6.3 表解析关联的下一跃点。找到匹配条目后,将自动 IPv6 隧道通向播发 BGP 路由的端点。
在此示例中,R0 和 R7 路由器都使用 BGP 播发其连接的 IPv4 子网。这会导致边缘路由器之间出现 IPv6 隧道。隧道用于通过 IPv6 提供商核心传输 IPv4 流量。在出口处,边缘路由器解封装外部 IPv6 标头并执行 IPv4 路由查找,以将数据包转发到其目的地。

配置
CLI 快速配置
要快速配置此示例,请复制以下命令,将其粘贴到文本文件中,删除所有换行符,更改详细信息,以便与网络配置匹配,将命令复制并粘贴到层 [edit]
级的 CLI 中,然后从配置模式进入提交。
路由器 R0
set interfaces xe-0/0/0:0 description To_R1 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:1::1/64 set interfaces xe-0/0/0:2 description To_R4 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:4::1/64 set interfaces xe-0/0/1:0 description To_CE1 set interfaces xe-0/0/1:0 unit 0 family inet address 172.16.10.2/24 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces lo0 unit 0 family iso address 49.0001.000a.0a0a.0a00 set interfaces lo0 unit 0 family inet6 address 2001:db8:10:255::10/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a0::/64 set routing-options forwarding-table export pplb set routing-options router-id 172.16.255.10 set policy-options policy-statement CE1_v4 term 1 from protocol direct set policy-options policy-statement CE1_v4 term 1 from route-filter 172.16.10.0/24 exact set policy-options policy-statement CE1_v4 term 1 then next-hop 2001:db8:0:a0:d01:: set policy-options policy-statement CE1_v4 term 1 then accept set routing-options autonomous-system 65550 set protocols bgp group to-R2RRv6 type internal set protocols bgp group to-R2RRv6 export CE1_v4 set protocols bgp group to-R2RRv6 local-address 2001:db8:10:255::10 set protocols bgp group to-R2RRv6 neighbor 2001:db8:2:255::2 family inet unicast extended-nexthop set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a0:1a01:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a0:1a04:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a0:d01:: flavor usd set protocols isis level 1 disable
路由器 R1
set interfaces xe-0/0/0:0 description To_R0 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:1::2/64 set interfaces xe-0/0/0:2 description To_R2 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:12:1/64 set interfaces xe-0/0/0:3 description to-R4 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:14::1/64 set interfaces xe-0/0/1:0 description to-R5 set interfaces xe-0/0/1:0 mtu 4000 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces xe-0/0/1:0 unit 0 family inet6 address 2001:db8:15::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0001.0101.0100 set interfaces lo0 unit 0 family inet6 address 2001:db8:1:255::1/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a1::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.1 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a1:1a10:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a1:1a12:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:2.1 node-link-protection set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a1:1a14:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface xe-0/0/1:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a1:1a15:: flavor psp set protocols isis interface xe-0/0/1:0.0 node-link-protection set protocols isis interface xe-0/0/1:0.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a1:d11:: flavor usd set protocols isis level 1 disable
路由器 R2
set interfaces xe-0/0/0:0 description To_R1 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:12::2/64 set interfaces xe-0/0/0:1 description To_R3 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:23::1/64 set interfaces xe-0/0/0:2 description To_R4 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2011:db8:24::1/64 set interfaces xe-0/0/0:3 description To_R5 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:25::1/64 set interfaces xe-0/0/1:0 description To_R6 set interfaces xe-0/0/1:0 mtu 4000 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces xe-0/0/1:0 unit 0 family inet6 address 2001:db8:26::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0002.0202.0200 set interfaces lo0 unit 0 family inet6 address 2001:db8:2:255::2/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a2::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.2 set routing-options autonomous-system 65550 set protocols bgp group RRv6 type internal set protocols bgp group RRv6 local-address 2001:db8:2:255::2 set protocols bgp group RRv6 neighbor 2001:db8:10:255::10 family inet unicast extended-nexthop set protocols bgp group RRv6 neighbor 2001:db8:20:255::20 family inet unicast extended-nexthop set protocols bgp group RRv6 cluster 192.168.255.2 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a21:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a23:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a24:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a25:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface xe-0/0/1:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a26:: flavor psp set protocols isis interface xe-0/0/1:0.0 node-link-protection set protocols isis interface xe-0/0/1:0.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a2:d21:: flavor usd set protocols isis level 1 disable
路由器 R3
set interfaces xe-0/0/0:0 description To_R2 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:23::2/64 set interfaces xe-0/0/0:1 description To_R5 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:35::1/64 set interfaces xe-0/0/0:2 description To_R6 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 36::1/64 set interfaces xe-0/0/0:3 description To_R7 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:37::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0003.0303.0300 set interfaces lo0 unit 0 family inet6 address 2001:db8:3:255::3/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a3::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.3 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a3:1a32:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a3:1a35:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a3:1a36:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a3:1a37:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a3:d31:: flavor usd set protocols isis level 1 disable
路由器 R4
set interfaces xe-0/0/0:0 description To_R0 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:4::2/64 set interfaces xe-0/0/0:2 description To_R1 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:14::2/64 set interfaces xe-0/0/0:3 description To_R2 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:24::2/64 set interfaces xe-0/0/1:0 description To_R5 set interfaces xe-0/0/1:0 mtu 4000 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces xe-0/0/1:0 unit 0 family inet6 address 2001:db8:25::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0004.0404.0400 set interfaces lo0 unit 0 family inet6 address 2001:db8:4:255::4/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a4::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.4 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a4:1a40:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a4:1a41:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a4:1a42:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface xe-0/0/1:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a4:1a45:: flavor psp set protocols isis interface xe-0/0/1:0.0 node-link-protection set protocols isis interface xe-0/0/1:0.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a4:d41:: flavor usd set protocols isis level 1 disable
路由器 R5
set interfaces xe-0/0/0:0 description To_R1 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:15::2/64 set interfaces xe-0/0/0:1 description To_R2 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:25::2/64 set interfaces xe-0/0/0:2 description To_R3 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:35::2/64 set interfaces xe-0/0/0:3 description To_R4 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:45::2/64 set interfaces xe-0/0/1:0 description To_R6 set interfaces xe-0/0/1:0 mtu 4000 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces xe-0/0/1:0 unit 0 family inet6 address 2001:db8:56::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0005.0505.0500 set interfaces lo0 unit 0 family inet6 address 2001:db8:5:255::5/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a5::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.5 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a51:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a52:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a53:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a54:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface xe-0/0/1:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a56:: flavor psp set protocols isis interface xe-0/0/1:0.0 node-link-protection set protocols isis interface xe-0/0/1:0.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a5:d51:: flavor usd set protocols isis level 1 disable
路由器 R6
set interfaces xe-0/0/0:0 description To_R2 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:26::2/64 set interfaces xe-0/0/0:1 description To_R3 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:36::2/128 set interfaces xe-0/0/0:2 description To_R5 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:56::2/128 set interfaces xe-0/0/0:3 description To_R7 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:67::1/128 set interfaces lo0 unit 0 family iso address 49.0001.0006.0606.0600 set interfaces lo0 unit 0 family inet6 address 2001:db8:6:255::6/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a6::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.6 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a6:1a62:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a6:1a63:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a6:1a65:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a6:1a67:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a6:d61:: flavor usd set protocols isis level 1 disable
路由器 R7
set interfaces xe-0/0/0:0 description To_R3 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:37::2/64 set interfaces xe-0/0/0:1 description To_R6 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:67::2/128 set interfaces xe-0/0/0:2 description To_CE2 set interfaces xe-0/0/0:2 unit 0 family inet address 172.16.20.2/24 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces lo0 unit 0 family iso address 49.0001.0007.0707.0700 set interfaces lo0 unit 0 family inet6 address 2001:db8:20:255::20/32 set policy-options policy-statement pplb then load-balance per-packet set policy-options policy-statement CE2_v4 term 1 from protocol direct set policy-options policy-statement CE2_v4 term 1 from route-filter 172.16.20.0/24 exact set policy-options policy-statement CE2_v4 term 1 then next-hop 2001:db8:0:a7:d71:: set policy-options policy-statement CE2_v4 term 1 then accept set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a7::/64 set routing-options forwarding-table export pplb set routing-options router-id 172.16.255.20 set routing-options autonomous-system 65550 set protocols bgp group to-R2RRv6 type internal set protocols bgp group to-R2RRv6 local-address 2001:db8:20:255::20 set protocols bgp group to-R2RRv6 neighbor 2001:db8:2:255::2 family inet unicast extended-nexthop set protocols bgp group to-R2RRv6 export CE2_v4 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a7:1a73:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a7:1a76:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a7:d71:: flavor usd set protocols isis level 1 disable
配置路由器 R0
下面的示例要求您在各个配置层级中进行导航。有关 CLI 导航的信息,请参阅 CLI 用户指南中的在配置模式下使用 CLI 编辑器。
要将 SRv6 网络编程配置为支持通过 IPv6 核心的 IPv4 隧道,请在 R0 路由器上执行以下步骤:
分步过程
-
配置设备接口以启用 IP 传输。
[edit] user@R0# set interfaces xe-0/0/0:0 description To_R1_1 user@R0# set interfaces xe-0/0/0:0 vlan-tagging user@R0# set interfaces xe-0/0/0:0 unit 0 vlan-id 1 user@R0# set interfaces xe-0/0/0:0 unit 0 family inet address 10.11.1.1/24 user@R0# set interfaces xe-0/0/0:0 unit 0 family iso user@R0# set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:1001::1/32 user@R0# set interfaces xe-0/0/0:2 description To_R4_1 user@R0# set interfaces xe-0/0/0:2 vlan-tagging user@R0# set interfaces xe-0/0/0:2 unit 0 vlan-id 1 user@R0# set interfaces xe-0/0/0:2 unit 0 family inet address 10.21.1.1/24 user@R0# set interfaces xe-0/0/0:2 unit 0 family iso user@R0# set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:2021::1/32 user@R0# set interfaces xe-0/0/1:0 description to_RT user@R0# set interfaces xe-0/0/1:0 vlan-tagging user@R0# set interfaces xe-0/0/1:0 unit 1 vlan-id 1 user@R0# set interfaces xe-0/0/1:0 unit 1 family inet address 172.20.1.1/24 user@R0# set interfaces xe-0/0/1:0 unit 1 family iso user@R0# set interfaces xe-0/0/1:0 unit 1 family inet6 address 2001:db8::20:1:1:1/120 user@R0# set interfaces xe-0/0/1:0 unit 4 vlan-id 4 user@R0# set interfaces xe-0/0/1:0 unit 4 family inet address 172.20.2.1/24 user@R0# set interfaces xe-0/0/1:0 unit 4 family iso user@R0# set interfaces xe-0/0/1:0 unit 4 family inet6 address 2001:db8::20:2:1:1/120
-
使用 IPv4 和 IPv6 地址配置环路接口,用作 BGP 会话的路由器 ID。
[edit] user@R0# set interfaces lo0 unit 0 family inet address 192.168.0.10/32 user@R0# set interfaces lo0 unit 0 family iso address 49.0001.000a.0a0a.0a00 user@R0# set interfaces lo0 unit 0 family inet6 address 2001:db8::10:10:10:10/32
-
配置路由器 ID 和自治系统 (AS) 编号,以便在属于同一 AS 的一组路由设备中传播路由信息。
[edit] user@R0# set routing-options router-id 10.10.10.10 user@R0# set routing-options autonomous-system 65550
-
全局启用 SRv6 和定位器地址,以指示路由器的 SRv6 功能。SRv6 SID 是由定位符和函数组成的 IPv6 地址。路由协议播发定位器地址。
[edit] user@R0# set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a0::/64
-
为前缀分段配置 End-Sid 功能。指定一种情形,即根据网络要求的 End-SID 函数的行为。倒数第二个段弹出 (PSP)、终极段弹出 (USP) 和终极段解封装 (USP) 是 SRv6 功能的三种可用类型。
注意:确保定位符和终端 SID 位于同一子网中,以避免提交错误。
[edit] user@R0# set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a0:d01:: flavor usd user@R0# set protocols isis source-packet-routing srv6 locator myloc1 end-sid 2001:db8:0:a10:d01:: flavor usd user@R0# set protocols isis source-packet-routing srv6 locator myloc2 end-sid 2001:db8:0:a20:d01:: flavor usd user@R0# set protocols isis source-packet-routing srv6 locator myloc3 end-sid 2001:db8:0:a30:d01:: flavor usd user@R0# set protocols isis source-packet-routing srv6 locator myloc4 end-sid 2001:db8:0:a40:d01:: flavor usp user@R0# set protocols isis source-packet-routing srv6 locator myloc4 end-sid 2001:db8:0:a40:d01:: flavor usd user@R0# set protocols isis level 1 disable
-
在邻接分段的点对点 (P2P) 接口上配置 End-X-SID 功能。为 End-X-SID 指定一个或多个样式。
注意:确保 Locator 和 End-X-SID 位于同一子网中,以避免提交错误。在将定位器映射到接口之前,必须启用 SRv6 并在 中
每当配置时,[edit routing-options]
配置定位器。srv6-adjacency-segment
还必须在层次结构下protocols isis source-packet-routing srv6 locator
配置相关定位器,如步骤 5 中所示。[edit] user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a0:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc1 end-x-sid 2001:db8:0:a10:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc2 end-x-sid 2001:db8:0:a20:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc3 end-x-sid 2001:db8:0:a30:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc4 end-x-sid 2001:db8:0:a40:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 node-link-protection user@R0# set protocols isis interface xe-0/0/0:0.0 point-to-point
-
为 LAN 接口 xe-0/0/0:2.0 的邻接分段配置 SRv6 选项。根据您的网络要求指定一种情形。倒数第二个分段弹出 (PSP)、终极分段弹出 (USP) 和终极分段解封装 (USP) 是 SRv6 邻接分段的三种可用类型。
注意:确保 Locator 和 End-X-Sid 位于同一子网中,以避免提交错误。在将定位器映射到接口之前,必须启用 SRv6 并在 中
[edit routing-options]
配置定位器。[edit] user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc end-x-sid 2001:db8:0:a0:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc1 end-x-sid 2001:db8:0:a10:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc2 end-x-sid 2001:db8:0:a20:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc3 end-x-sid 2001:db8:0:a30:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc4 end-x-sid 2001:db8:0:a40:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 node-link-protection user@R0# set protocols isis interface xe-0/0/1:0.1 user@R0# set protocols isis interface fxp0.0 disable user@R0# set protocols isis interface lo0.0 passive
-
在面向核心的接口上配置 BGP 以建立内部对等会话。
[edit] user@R0# set protocols bgp group to-PEv6 type internal user@R0# set protocols bgp group to-PEv6 local-address abcd::10:10:10:10 user@R0# set protocols bgp group to-PEv6 neighbor abcd::2:2:2:2 family inet unicast extended-nexthop user@R0# set protocols bgp group to-PE2 type internal user@R0# set protocols bgp group to-PE2 local-address 10.10.10.10 user@R0# set protocols bgp group to-PE2 neighbor 2.2.2.2 family inet6 unicast user@R0# set protocols bgp group to-PE2 neighbor 2.2.2.2 family inet6-vpn unicast
-
定义对数据包进行负载均衡的策略。
[edit] user@R0# set policy-options policy-statement pplb then load-balance per-packet
-
应用按数据包的策略以启用流量负载平衡。
[edit] user@R0# set routing-options forwarding-table export pplb
结果
在配置模式下,输入show interfaces
、show protocols
show policy-options
、和show routing-options
命令,以确认您的配置。如果输出未显示预期的配置,请重复此示例中的说明以更正配置。
[edit] user@R0# show interfaces xe-0/0/0:0 { description To_R1; mtu 4000; unit 0 { family iso; family inet6 { address 2001:db8:1::1/64; } } } xe-0/0/0:2 { description To_R4; mtu 4000; unit 0 { family iso; family inet6 { address 2001:db8:4::1/64; } } } xe-0/0/1:0 { description To_CE1; unit 0 { family inet { address 172.16.10.2/24; } family iso; } } lo0 { unit 0 { family iso { address 49.0001.000a.0a0a.0a00; } family inet6 { address 2001:db8:10:255::10/128; } } }
[edit] user@R0# show protocols bgp { group to-R2RRv6 { type internal; local-address 2001:db8:10:255::10; export CE1_v4; neighbor 2001:db8:2:255::2 { family inet { unicast { extended-nexthop; } } } } } isis { interface xe-0/0/0:0.0 { level 2 { srv6-adjacency-segment { protected { locator myloc { end-x-sid 2001:db8:0:a0:1a01:: { flavor psp; } } } } } node-link-protection; point-to-point; } interface xe-0/0/0:2.0 { level 2 { srv6-adjacency-segment { protected { locator myloc { end-x-sid 2001:db8:0:a0:1a04:: { flavor psp; } } } } } node-link-protection; point-to-point; } interface lo0.0 { passive; } source-packet-routing { srv6 { locator myloc { end-sid 2001:db8:0:a0:d01:: { flavor { usd; } } } } } level 1 disable; }
[edit] user@R0# show policy-options policy-statement CE1_v4 { term 1 { from { protocol direct; route-filter 172.16.10.0/24 exact; } then { next-hop 2001:db8:0:a0:d01::; accept; } } } policy-statement pplb { then { load-balance per-packet; } }
[edit] user@R0# show routing-options source-packet-routing { srv6 { locator myloc 2001:db8:0:a0::/64; } } forwarding-table { export pplb; } router-id 172.16.255.10; autonomous-system 65550;
完成设备配置后,从配置模式输入 commit
。
验证
确认配置工作正常。
- 验证 IS-IS 邻接和 IBGP 会话
- 验证 SRv6 是否已启用
- 验证 SRv6 End-X-SID 配置
- 验证定位器路由是否已安装
- 验证 End-X-SID 路由是否已安装
- 验证已安装终端 SID 路由
- 验证 IS-IS 数据库中的 SRv6 配置
- 验证到 CE2 的路由是否使用 SRv6 隧道
- 测试 CE1 和 CE2 之间的 IPv4 连接
验证 IS-IS 邻接和 IBGP 会话
目的
验证 R2 上的 IS-IS 邻接和 IBGP 会话。之所以选择 R2 来执行此任务,是因为它有 5 个邻接,并且还用作 BGP 控制平面的路由器反射器。
在继续执行其余验证步骤之前,最好先确认所有路由器上的 IS-IS 邻接。成功的 SRv6 部署要求内部网关协议在所有节点上都可运行。
行动
在作模式下,在路由器 R2 上运行 show isis adjacency 命令。
user@R2> show isis adjacency Interface System L State Hold (secs) SNPA xe-0/0/0:0.0 R1 2 Up 26 xe-0/0/0:1.0 R3 2 Up 25 xe-0/0/0:2.0 R4 2 Up 25 xe-0/0/0:3.0 R5 2 Up 24 xe-0/0/1:0.0 R6 2 Up 18
在作模式下,在路由器 R2 上运行 show bgp summary 命令。
user@R2> show bgp summary Threading mode: BGP I/O Default eBGP mode: advertise - accept, receive - accept Groups: 1 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending inet.0 2 2 0 0 0 0 inet6.0 0 0 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... 2001:db8:10:255::10 65550 3101 3092 0 0 23:14:18 Establ inet.0: 1/1/1/0 2001:db8:20:255::20 65550 3091 3080 0 0 23:10:10 Establ inet.0: 1/1/1/0
意义
输出确认 R2 路由器的预期 IS-IS 邻接计数。它还确认 R2 已与 R0 和 R7 路由器建立基于 IPv6 的 BGP 会话。
验证 SRv6 是否已启用
目的
验证是否在路由器 R0 上启用了定位符、End-SID 和 Flavor SRv6。
行动
在作模式下,对路由器 R0 运行 show isis overview 命令。
user@R0> show isis overview Instance: master Router ID: 172.16.255.10 IPv6 Router ID: 2001:db8:1::1 Hostname: R0 Sysid: 0100.0a0a.0a0a Areaid: 49.00 Adjacency holddown: enabled Maximum Areas: 3 LSP life time: 1200 Attached bit evaluation: enabled SPF delay: 200 msec, SPF holddown: 5000 msec, SPF rapid runs: 3 IPv4 is enabled, IPv6 is enabled Traffic engineering: enabled Restart: Disabled Helper mode: Enabled Layer2-map: Disabled Source Packet Routing (SPRING): Enabled Node Segments: Disabled SRv6: Enabled Locator: 2001:db8:0:a0::/64, Algorithm: 0 END-SID: 2001:db8:0:a0:d01::, Flavor: USD Post Convergence Backup: Disabled Level 1 Internal route preference: 15 External route preference: 160 Prefix export count: 0 Wide metrics are enabled, Narrow metrics are enabled Source Packet Routing is enabled Level 2 Internal route preference: 18 External route preference: 165 Prefix export count: 0 Wide metrics are enabled, Narrow metrics are enabled Source Packet Routing is enabled
意义
配置的 SRv6 定位符 SRv6: Enabled Locator: 2001:db8:0:a0::/64, Algorithm: 0
、、End-SID 和变种 END-SID: 2001:db8:0:a0:d01::, Flavor: USD
将显示在输出中。
验证 SRv6 End-X-SID 配置
目的
验证是否在 R0 上配置了 End-X-SID 功能和变种。
行动
在作模式下,对路由器 R0 运行 show isis adjacency detail 命令。
user@R0> show isis adjacency detail R1 Interface: xe-0/0/0:0.0, Level: 2, State: Up, Expires in 19 secs Priority: 0, Up/Down transitions: 1, Last transition: 03:51:48 ago Circuit type: 2, Speaks: IP, IPv6 Topologies: Unicast Restart capable: Yes, Adjacency advertisement: Advertise IP addresses: 192.168.255.1 IPv6 addresses: fe80::2e6b:f5ff:fedb:e800 IPv6 Global Interface Address: 2001:db8:1::2 Level 2 SRv6 protected END-X-SID: 2001:db8:0:a0:1a01:: Flavor: PSP, Flags: B-P, Algorithm: 0 R4 Interface: xe-0/0/0:2.0, Level: 2, State: Up, Expires in 20 secs Priority: 0, Up/Down transitions: 1, Last transition: 03:48:04 ago Circuit type: 2, Speaks: IP, IPv6 Topologies: Unicast Restart capable: Yes, Adjacency advertisement: Advertise IP addresses: 192.168.255.4 IPv6 addresses: fe80::2e6b:f5ff:feb4:4000 IPv6 Global Interface Address: 2001:db8:4::2 Level 2 SRv6 protected END-X-SID: 2001:db8:0:a0:1a04:: Flavor: PSP, Flags: B-P, Algorithm: 0
意义
该字段 SRv6 protected END-X-SID: 2001:db8:0:a0:1a01::
表示已在路由器 R0 上为用于连接到 R1 的接口配置了 End-X-SID 功能 Flavor PSP
。连接到 R4 的接口也确认了类似的输出,R4 使用不同的 End-X-SID。
验证定位器路由是否已安装
目的
验证定位器路由是否已安装。
行动
在作模式下,在路由器 R0 上运行 show route 2001:db8:0:a0::/64 detail 命令。
user@R0> show route 2001:db8:0:a0::/64 detail inet6.0: 75 destinations, 75 routes (75 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 2001:db8:0:a0::/64*[IS-IS/18] 3d 19:03:16, metric 0 Reject user@R0> show route 2001:db8:0:a0::/64 detail inet6.0: 45 destinations, 45 routes (45 active, 0 holddown, 0 hidden) 2001:db8:0:a0::/64 (1 entry, 1 announced) *IS-IS Preference: 18 Level: 2 Next hop type: Reject, Next hop index: 0 Address: 0xc54526c Next-hop reference count: 2 State: <Active Int OpaqueData> Local AS: 65550 Age: 22:15:32 Metric: 0 Validation State: unverified ORR Generation-ID: 0 Task: IS-IS Announcement bits (2): 0-KRT 5-Resolve tree 5 AS path: I . . .
意义
输出确认定位器路径 2001:db8:0:a0::/64*[IS-IS/18]
已安装在表中 inet6.0
。
验证 End-X-SID 路由是否已安装
目的
显示在接口上应用的已配置的 End-X-SID 路由信息。
行动
在作模式下,对路由器 R0 运行 show route 2001:db8:0:a0:1a01:: 命令。
user@R0> show route 2001:db8:0:a0:1a01:: inet6.0: 45 destinations, 45 routes (45 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 2001:db8:0:a0::1a01/128 *[IS-IS/18] 04:33:42, metric 0 > to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0
意义
输出确认 End-X-SID 路由 2001:db8:0:a0::1a01/128
已安装在路由表中 inet.6.0
。
验证已安装终端 SID 路由
目的
验证 SRv6 域中所有路由器的 End-SID 路由是否已安装在路由器 R0 的表中 inet6.3
。
行动
在作模式下,在路由器 R0 上运行 show route table inet6.3 protocol isis 命令,以查看路由器已学习的所有终端 SID。然后显示有关与 R7 路由器关联的 End-SID 的详细信息。
user@R0> show route table inet6.3 protocol isis inet6.3: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 2001:db8:0:a1::d11/128 *[SRV6-ISIS/14] 04:39:22, metric 10 > to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a1:d11:: 2001:db8:0:a2::d21/128 *[SRV6-ISIS/14] 04:35:38, metric 20 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a2:d21:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a2:d21:: 2001:db8:0:a3::d31/128 *[SRV6-ISIS/14] 04:35:38, metric 30 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a3:d31:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a3:d31:: 2001:db8:0:a4::d41/128 *[SRV6-ISIS/14] 04:35:38, metric 10 > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a4:d41:: 2001:db8:0:a5::d51/128 *[SRV6-ISIS/14] 04:35:01, metric 20 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a5:d51:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a5:d51:: 2001:db8:0:a6::d61/128 *[SRV6-ISIS/14] 04:34:32, metric 30 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a6:d61:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a6:d61:: 2001:db8:0:a7::d71/128 *[SRV6-ISIS/14] 04:33:00, metric 40 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a7:d71:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a7:d71:: user@R0> show route 2001:db8:0:a7::d71/128 detail inet6.3: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden) 2001:db8:0:a7::d71/128 (1 entry, 1 announced) *SRV6-ISIS Preference: 14 Level: 2 Next hop type: List, Next hop index: 1048577 Address: 0xdb8deb4 Next-hop reference count: 6 Next hop: ELNH Address 0xc5462d4 weight 0x1 Next hop type: Chain, Next hop index: 582 Address: 0xc5462d4 Next-hop reference count: 1 Next hop: ELNH Address 0xc545bcc SRV6-Tunnel: Reduced-SRH Encap-mode Src: 2001:db8:1::1 Dest: 2001:db8:0:a7:d71:: Segment-list[0] 2001:db8:0:a7:d71:: Next hop type: Router, Next hop index: 580 Address: 0xc545bcc Next-hop reference count: 9 Next hop: fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0 weight 0x1 Next hop: ELNH Address 0xc546338 weight 0x1, selected Next hop type: Chain, Next hop index: 583 Address: 0xc546338 Next-hop reference count: 1 Next hop: ELNH Address 0xc545f50 SRV6-Tunnel: Reduced-SRH Encap-mode Src: 2001:db8:1::1 Dest: 2001:db8:0:a7:d71:: Segment-list[0] 2001:db8:0:a7:d71:: Next hop type: Router, Next hop index: 581 Address: 0xc545f50 Next-hop reference count: 9 Next hop: fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0 weight 0x1 State: <Active NoReadvrt Int OpaqueData> Local AS: 65550 Age: 4:35:43 Metric: 40 Validation State: unverified ORR Generation-ID: 0 Task: IS-IS Announcement bits (3): 0-Resolve tree 2 1-Resolve tree 5 2-Resolve_IGP_FRR task AS path: I Session-IDs associated: Session-id: 322 Version: 0
意义
输出确认路由器 R0 已从拓扑中的所有其他路由器获知终端 SID,即 2001:db8:0:a1::d11/128
和 2001:db8:0:a2::d21/128
。请注意,表中已安装 inet6.3
End-SID。R7 2001:db8:0:a7:d71::
播发的 End-SID 的详细输出确认已在路由器 R0 和路由器 R7 之间建立 SRv6 隧道。
请注意,分段列表中填充了路由器 R7 上配置的 End-SID 值。回想一下,此示例中的所有 End-SID 都配置了终极分段解封装 (USD) 样式。这是本地 End-SID 和关联的 USD 风格的组合,告诉 R7 它是 IPv6 隧道的出口。收到 R7 后,对 IPv4 数据包进行解封装,并根据 IPv4 目标地址对其进行路由。
验证 IS-IS 数据库中的 SRv6 配置
目的
显示 IS-IS 数据库以验证在路由器 R7 上配置的 End-SID 和配置。在此示例中,命令在路由器 R0 上执行。由于 IS-IS 数据库将复制到所有节点,因此所有路由器上都有类似的输出。
行动
在作模式下,对路由器 R0 运行 show isis database R7.00-00 extensive 命令。
user@R0> show isis database R.00-00 extensive IS-IS level 1 link-state database: IS-IS level 2 link-state database: R7.00-00 Sequence: 0x31f, Checksum: 0x2ce6, Lifetime: 904 secs IS neighbor: R3.00 Metric: 10 Two-way fragment: R3.00-00, Two-way first fragment: R3.00-00 IS neighbor: R6.00 Metric: 10 Two-way fragment: R6.00-00, Two-way first fragment: R6.00-00 V6 prefix: 2001:db8::/32 Metric: 0 Internal Up V6 prefix: 2001:db8:0:a7::/64 Metric: 0 Internal Up V6 prefix: 2001:db8:20:255::20/128 Metric: 0 Internal Up V6 prefix: 2001:db8:37::/64 Metric: 10 Internal Up V6 prefix: 2001:db8:67::2/128 Metric: 10 Internal Up Header: LSP ID: R7.00-00, Length: 445 bytes Allocated length: 746 bytes, Router ID: 172.16.255.20 Remaining lifetime: 904 secs, Level: 2, Interface: 360 Estimated free bytes: 0, Actual free bytes: 301 Aging timer expires in: 904 secs Protocols: IP, IPv6 Packet: LSP ID: R7.00-00, Length: 445 bytes, Lifetime : 1192 secs Checksum: 0x2ce6, Sequence: 0x31f, Attributes: 0x3 <L1 L2> NLPID: 0x83, Fixed length: 27 bytes, Version: 1, Sysid length: 0 bytes Packet type: 20, Packet version: 1, Max area: 0 TLVs: Area address: 49.00 (2) LSP Buffer Size: 1492 Speaks: IP Speaks: IPV6 IP router id: 172.16.255.20 IP address: 172.16.255.20 IPv6 TE Router ID: 2001:db8:20:255::20 Hostname: R7 SRv6 Locator: 2001:db8:0:a7::/64, Metric: 0, MTID: 0, Flags: 0x0, Algorithm: 0 SRv6 SID: 2001:db8:0:a7:d71::, Flavor: USD IPv6 prefix: 2001:db8:20:255::20/128 Metric 0 Up IPv6 prefix: 2001:db8::/32 Metric 0 Up IPv6 prefix: 2001:db8:0:a7::/64 Metric 0 Up IPv6 prefix: 2001:db8:37::/64 Metric 10 Up IPv6 prefix: 2001:db8:67::2/128 Metric 10 Up Router Capability: Router ID 172.16.255.20, Flags: 0x00 SPRING Algorithm - Algo: 0 SRv6 Capability - Flags: 0 Node MSD Advertisement Sub-TLV:Type: 23, Length: 10 SRv6 Maximum Segments Left MSD:Type: 41, Value: 6 SRv6 Maximum Pop MSD:Type: 42, Value: 7 SRv6 Maximum Insert MSD:Type: 43, Value: 5 SRv6 Maximum Encap MSD:Type: 44, Value: 6 SRv6 Maximum End D MSD:Type: 45, Value: 6 IPv6 TE Router Id: 2001:db8:20:255::20 IS neighbor: R6.00, Internal, Metric: default 10 IS neighbor: R3.00, Internal, Metric: default 10 Extended IS Reachability TLV, Type: 22, Length: 174 IS extended neighbor: R6.00, Metric: default 10 SubTLV len: 76 IPv6 address: 2001:db8:67::2 Neighbor's IP address: 192.168.255.6 Neighbor's IPv6 address: 2001:db8:67::1 Local interface index: 361, Remote interface index: 364 P2P SRV6 END-X-SID:2001:db8:0:a7:1a76:: , Flags:B-P, Weight:0, Algorithm:0 Flags:0xa0(B:1,S:0,P:1), Flavor: PSP IS extended neighbor: R3.00, Metric: default 10 SubTLV len: 76 IPv6 address: 2001:db8:37::2 Neighbor's IP address: 192.168.255.3 Neighbor's IPv6 address: 2001:db8:37::1 Local interface index: 360, Remote interface index: 336 P2P SRV6 END-X-SID:2001:db8:0:a7:1a73:: , Flags:B-P, Weight:0, Algorithm:0 Flags:0xa0(B:1,S:0,P:1), Flavor: PSP No queued transmissions
意义
SRv6 SID: 2001:db8:0:a7:d71::
的存在Flavor: USD
确认 SRv6 已在 R7 路由器上启用了 SID 解封装风格。输出还显示,R7 上的接口已配置为使用 PSP 风格的 TI-LFA 保护。
验证到 CE2 的路由是否使用 SRv6 隧道
目的
显示到 R7 处的 IPv4 子网的路由,以确认到 SRv6 隧道的下一跳点。
行动
在作模式下,在路由器 R0 上运行 show route 172.16.20.0/24 命令。
user@R0> show route 172.16.20.0/24 inet.0: 36 destinations, 36 routes (36 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 172.16.20.0/24 *[BGP/170] 05:20:58, localpref 100, from 2001:db8:2:255::2 AS path: I, validation-state: unverified to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a7:d71:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a7:d71::
意义
输出确认 R0 已通过其到 R2 的 BGP 会话学习了到 172.16.20.0/24
子网的路由,在本例中,该调用配置为路由反射器。下一跃点确认已为此路由安装到 R7 路由器的 SRv6 隧道。接下来的两个跃点可用,与示例拓扑中 R0 和 R7 路由器之间的两条等价路径保持一致。
测试 CE1 和 CE2 之间的 IPv4 连接
目的
生成 ping 以验证 CE 设备之间通过 IPv6 提供商核心的 IPv4 连接。
行动
在作模式下,在路由器 R0 上运行 ping 172.16.20.2 source 172.16.10.2 count 2 命令。
user@R0> ping 172.16.20.2 source 172.16.10.2 count 2 PING 172.16.20.2 (172.16.20.2): 56 data bytes 64 bytes from 172.16.20.2: icmp_seq=0 ttl=64 time=114.922 ms 64 bytes from 172.16.20.2: icmp_seq=1 ttl=64 time=89.558 ms --- 172.16.20.2 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 89.558/102.240/114.922/12.682 ms
意义
输出确认 CE 设备网络之间的 IPv4 连接正常工作。在此示例中,这将验证通过 IPv6 提供商核心的 SRv6 隧道是否工作正常。