VPN 和 VPLS
VPN 是一种从设备到网络的加密连接，可防止未经授权访问窃听流量，并允许用户远程工作。有关详细信息，请参阅以下主题：
VPLS 简介
VPLS 是一种基于以太网的点对多点第 2 层 VPN。它允许您通过一个网络中枢将地理位置分散的以太网局域网 （LAN） 站点相互MPLS连接。对于实施 VPLS 的客户，即使流量跨服务提供商的网络传输，所有站点似乎都在同一以太网 LAN 中。
VPLS 在实施和配置中与 2 层 VPN 具有共通之处。在 VPLS 中，源自服务提供商客户网络的数据包会先发送至客户边缘 （客户边缘） 设备（例如路由器或以太网交换机）。然后发送至服务提供商网络内的提供商边缘 （PE） 路由器。数据包通过一条标签交换路径 （LSP） MPLS服务提供商的网络。它到达出口 PE 路由器，然后将流量转发客户边缘目标客户站点的路由器设备。
注意：
在 VPLS 文档中 ，术语如 PE 路由器的单词路由器用于指用于提供路由功能的任何设备。
不同之处在于，对于 VPLS，数据包可以点对多点方式遍历服务提供商的网络，也就是说，源自 客户边缘 设备的数据包可以广播至 VPLS 路由实例参与的所有 PE 路由器。相比之下，第 2 层 VPN 仅以点到点的方式转发数据包。
参与路由实例的每个 PE 路由器之间承载 VPLS 信息流的路径称为伪线。伪线使用虚拟或 LDP BGP信号。
示例：使用逻辑系统在 3 层 VPN 和 VPLS 场景中配置提供商边缘和提供商路由器
此示例提供使用逻辑系统在 VPN 和 VPLS 情景中配置提供商边缘 （PE） 和提供商 （P） 路由器的逐步过程。
要求
此示例不需要除设备初始化之外的特殊配置。
概述
此示例中，VPN 用于通过提供商中枢分隔客户流量。
拓扑
图 1显示了通过一个客户边缘连接的四对MPLS路由器：
路由器 CE1 和 CE5 是红色 VPN 的一部分。
路由器 CE2 和 CE6 在蓝色 VPN 中。
路由器 CE3 和 CE7 属于 VPLS 域。
路由器 CE4 和 CE8 连接到标准协议。
PE 路由器 PE1 和 PE2 和提供商核心路由器 P0 上配置了两个逻辑系统。这三个路由器各有两个逻辑系统：LS1 和 LS2。为了说明逻辑系统的概念，两个 VPN 都是逻辑系统 LS1 的一部分，VPLS 实例属于逻辑系统 LS2，其余路由器使用路由器 PE1、P0 和 PE2 的主要路由器部分。
图 1：提供商边缘和提供商逻辑系统拓扑图
在路由器 PE1 上，在逻辑系统 LS1 中创建两个 VPN 路由和转发 （VRF） 路由实例。路由实例称为红色和蓝色。此示例配置了面向客户边缘 （客户边缘） 的逻辑接口，以便来自路由器 CE1 的流量放置在红色 VPN 中，而来自路由器 CE2 的信息流置于蓝色 VPN 中。 fe-0/0/1.1 上的逻辑接口 连接到路由器 P0 上的逻辑系统 LS1。VPLS 路由实例位于逻辑系统 LS2 中。逻辑接口的配置使来自路由器 CE3 的信息流发送至 VPLS 域。此逻辑接口连接到路由器 P0 上的逻辑系统 LS2。此示例还包含逻辑系统 LS1 的管理员。逻辑系统管理员负责维护此逻辑系统。最后，示例说明了如何配置一个逻辑接口，以将路由器 CE4 与路由器 PE1 的主路由器部分互连。
路由器 PE2 在逻辑系统 LS1 中具有两个 VRF 路由实例：红色和蓝色。面向客户边缘接口使路由器 CE5 的信息流可放置在红色 VPN 中，而路由器 CE6 的信息流置于蓝色 VPN 中。 so-1/2/0.1 上的一个逻辑接口 连接到路由器 P0 上的逻辑系统 LS1。VPLS 路由实例在逻辑系统 LS2 中配置。逻辑接口允许将路由器 CE7 的信息流发送至 VPLS 域并连接到路由器 P0 上的逻辑系统 LS2。示例显示了如何配置一个逻辑接口，以将路由器 CE8 与路由器 P0 的主路由器部分互连。最后，您也可选择具有逻辑系统 LS1 配置权限和逻辑系统 LS2 查看权限的逻辑系统管理员。
在路由器 P0 上，示例显示如何配置逻辑系统 LS1、LS2 和主路由器。您必须在主路由器层次结构级别配置物理 [edit interfaces] 接口属性。接下来，该示例将展示如何为逻辑系统配置协议（例如 RSVP、MPLS、BGP 和 IS-IS）、路由选项和策略选项。最后，示例显示如何为在路由器 PE1 上配置的逻辑系统 LS1 配置相同的管理员。此逻辑系统 LS2 系统管理员有权查看 LS2 配置，但是不能更改逻辑系统 LS2 的配置。
逻辑系统 LS1 传输路由器 CE1 和 CE5 之间的红色 VPN 的信息流。逻辑系统 LS1 还会连接路由器 CE2 和 CE6 之间的蓝色 VPN。逻辑系统 LS2 在路由器 CE3 和 CE7 之间传输 VPLS 流量。对于路由器 P0 上的主路由器，您可按常规配置路由器。主路由器在路由器 CE4 和 CE8 之间传输流量。示例显示如何配置接口和路由协议（OSPF、BGP）以连接到路由器 PE1 和 PE2 的主路由器部分。
配置
要配置逻辑系统中 PE 和 P 路由器，需要执行以下任务：
在客户边缘设备上配置接口
逐步过程
以下示例要求您在配置层次结构中导航各个级别。有关导航指南CLI，请参阅 CLI 用户 指南 中的 在配置模式下CLI 编辑器。
在路由器 CE1 上OSPF，以连接到路由器 PE1 的逻辑系统 LS1 中的红色 VPN。
user@CE1# set interfaces fe-1/0/1 vlan-tagging user@CE1# set interfaces fe-1/0/1 unit 0 description "routing-instance red CE" user@CE1# set interfaces fe-1/0/1 unit 0 vlan-id 101 user@CE1# set interfaces fe-1/0/1 unit 0 family inet address 10.11.1.1/24 user@CE1# set interfaces lo0 unit 0 family inet address 10.11.1.100/32 user@CE1# set protocols ospf area 0.0.0.0 interface fe-1/0/1.0 user@CE1# set protocols ospf area 0.0.0.0 interface lo0.0
在路由器 CE2 上BGP，以连接到路由器 PE1 的逻辑系统 LS1 中的蓝色 VPN。
user@CE2# set interfaces fe-1/0/2 vlan-tagging user@CE2# set interfaces fe-1/0/2 unit 0 description "routing-instance blue CE" user@CE2# set interfaces fe-1/0/2 unit 0 vlan-id 102 user@CE2# set interfaces fe-1/0/2 unit 0 family inet address 10.21.1.1/24 user@CE2# set interfaces lo0 unit 0 family inet address 10.21.1.100/32 user@CE2# set policy-options policy-statement export_loopback from route-filter 10.21.1.100/32 exact user@CE2# set policy-options policy-statement export_loopback then accept user@CE2# set protocols bgp export export_loopback user@CE2# set protocols bgp group to_PE type external user@CE2# set protocols bgp group to_PE local-address 10.21.1.1 user@CE2# set protocols bgp group to_PE peer-as 100 user@CE2# set protocols bgp group to_PE neighbor 10.21.1.2 user@CE2# set routing-options autonomous-system 200
在路由器 CE3 上，将 VLAN 600 中的快速以太网接口配置为与路由器 PE1 的逻辑系统 LS2 中的 VPLS 路由实例连接。
user@CE3# set interfaces fe-1/0/0 vlan-tagging user@CE3# set interfaces fe-1/0/0 unit 0 description "vpls interface" user@CE3# set interfaces fe-1/0/0 unit 0 vlan-id 600 user@CE3# set interfaces fe-1/0/0 unit 0 family inet address 10.1.1.1/24
在路由器 CE4 上，将快速以太网接口配置为与路由器 PE1 上的主路由器连接。
user@CE4# set interfaces fe-1/0/3 vlan-tagging user@CE4# set interfaces fe-1/0/3 unit 0 description "main router interface" user@CE4# set interfaces fe-1/0/3 unit 0 vlan-id 103 user@CE4# set interfaces fe-1/0/3 unit 0 family inet address 10.31.1.1/24 user@CE4# set interfaces lo0 unit 0 family inet address 10.255.41.177/32
在路由器 CE5 上OSPF，以连接到路由器 PE2 的逻辑系统 LS1 中的红色 VPN。
user@CE5# set interfaces fe-0/3/1 vlan-tagging user@CE5# set interfaces fe-0/3/1 unit 0 description "routing-instance red CE" user@CE5# set interfaces fe-0/3/1 unit 0 vlan-id 101 user@CE5# set interfaces fe-0/3/1 unit 0 family inet address 10.11.4.2/24 user@CE5# set interfaces lo0 unit 0 family inet address 10.11.4.100/32 user@CE5# set protocols ospf area 0.0.0.0 interface fe-0/3/1.0 user@CE5# set protocols ospf area 0.0.0.0 interface lo0.0 user@CE5# set system login class LS1admin logical-system LS1 user@CE5# set system login class LS1admin permissions all user@CE5# set system login class LS1onlooker logical-system LS2 user@CE5# set system login class LS1onlooker permissions view user@CE5# set system login user LS1admin class LS1admin
在路由器 CE6 上BGP，以连接到路由器 PE2 的逻辑系统 LS1 中的蓝色 VPN。
user@CE6# set interfaces fe-0/3/2 vlan-tagging user@CE6# set interfaces fe-0/3/2 unit 0 description "routing-instance blue CE" user@CE6# set interfaces fe-0/3/2 unit 0 vlan-id 102 user@CE6# set interfaces fe-0/3/2 unit 0 family inet address 10.21.4.2/24 user@CE6# set interfaces lo0 unit 0 family inet address 10.21.4.100/32 user@CE6# set routing-options autonomous-system 300 user@CE6# set protocols bgp export export_loopback user@CE6# set protocols bgp group to_PE type external user@CE6# set protocols bgp group to_PE local-address 10.21.4.2 user@CE6# set protocols bgp group to_PE peer-as 100 user@CE6# set protocols bgp group to_PE neighbor 10.21.4.1 user@CE6# set policy-options policy-statement export_loopback from route-filter 10.21.4.100/32 exact user@CE6# set policy-options policy-statement export_loopback then accept
在路由器 CE7 上，将 VLAN 600 中的快速以太网接口配置为与路由器 PE2 的逻辑系统 LS2 中的 VPLS 路由实例连接。
user@CE7# set interfaces fe-0/3/0 vlan-tagging user@CE7# set interfaces fe-0/3/0 unit 0 description "vpls interface" user@CE7# set interfaces fe-0/3/0 unit 0 vlan-id 600 user@CE7# set interfaces fe-0/3/0 unit 0 family inet address 10.1.1.2/24
在路由器 CE8 上，将快速以太网接口配置为与路由器 PE2 上的主路由器连接。
user@CE8# set interfaces fe-0/3/3 vlan-tagging user@CE8# set interfaces fe-0/3/3 unit 0 description "main router interface" user@CE8# set interfaces fe-0/3/3 unit 0 vlan-id 103 user@CE8# set interfaces fe-0/3/3 unit 0 family inet address 10.31.4.2/24 user@CE8# set interfaces lo0 unit 0 family inet address 10.255.41.180/32
配置路由器 PE1
逐步过程
在路由器 PE1 上配置主路由器。
user@PE1# set interfaces fe-0/0/1 vlan-tagging user@PE1# set interfaces fe-0/0/1 unit 3 description "main router to P0" user@PE1# set interfaces fe-0/0/1 unit 3 vlan-id 103 user@PE1# set interfaces fe-0/0/1 unit 3 family inet address 10.31.2.1/24 user@PE1# set interfaces fe-0/0/1 unit 3 family iso user@PE1# set interfaces fe-0/0/1 unit 3 family mpls user@PE1# set interfaces fe-0/1/0 vlan-tagging user@PE1# set interfaces fe-0/1/0 encapsulation vlan-vpls user@PE1# set interfaces fe-0/1/1 vlan-tagging user@PE1# set interfaces fe-0/1/2 vlan-tagging user@PE1# set interfaces fe-0/1/3 vlan-tagging user@PE1# set interfaces fe-0/1/3 unit 0 description "main router to CE4" user@PE1# set interfaces fe-0/1/3 unit 0 vlan-id 103 user@PE1# set interfaces fe-0/1/3 unit 0 family inet address 10.31.1.2/24 user@PE1# set interfaces lo0 unit 0 description "main router loopback" user@PE1# set interfaces lo0 unit 0 family inet address 10.255.41.173/32 user@PE1# set protocols bgp group to_main_ls type internal user@PE1# set protocols bgp group to_main_ls local-address 10.255.41.173 user@PE1# set protocols bgp group to_main_ls export export_address user@PE1# set protocols bgp group to_main_ls neighbor 10.255.41.179 user@PE1# set protocols bgp group to_main_ls neighbor 10.255.41.175 user@PE1# set protocols ospf area 0.0.0.0 interface lo0.0 user@PE1# set protocols ospf area 0.0.0.0 interface fe-0/0/1.3 user@PE1# set routing-options static route 10.255.41.177/32 next-hop 10.31.1.1 user@PE1# set routing-options autonomous-system 500 user@PE1# set policy-options policy-statement export_address from route-filter 10.255.41.177/32 exact user@PE1# set policy-options policy-statement export_address then accept user@PE1# set system login class LS1-admin logical-system LS1 user@PE1# set system login class LS1-admin permissions all user@PE1# set system login user LS1-admin class LS1-admin user@PE1# set system login user LS1-admin authentication plain-text-password New password: Retype new password:
在路由器 PE1 上配置逻辑系统 LS1。
user@PE1# set logical-systems LS1 interfaces fe-0/0/1 unit 1 description "LS1 interface" user@PE1# set logical-systems LS1 interfaces fe-0/0/1 unit 1 vlan-id 101 user@PE1# set logical-systems LS1 interfaces fe-0/0/1 unit 1 family inet address 10.11.2.1/24 user@PE1# set logical-systems LS1 interfaces fe-0/0/1 unit 1 family iso user@PE1# set logical-systems LS1 interfaces fe-0/0/1 unit 1 family mpls user@PE1# set logical-systems LS1 interfaces fe-0/1/1 unit 0 description "routing-instance red interface" user@PE1# set logical-systems LS1 interfaces fe-0/1/1 unit 0 vlan-id 101 user@PE1# set logical-systems LS1 interfaces fe-0/1/1 unit 0 family inet address 10.11.1.2/24 user@PE1# set logical-systems LS1 interfaces fe-0/1/2 unit 0 description "routing-instance blue interface" user@PE1# set logical-systems LS1 interfaces fe-0/1/2 unit 0 vlan-id 102 user@PE1# set logical-systems LS1 interfaces fe-0/1/2 unit 0 family inet address 10.21.1.2/24 user@PE1# set logical-systems LS1 interfaces lo0 unit 1 description "LS1 loopback" user@PE1# set logical-systems LS1 interfaces lo0 unit 1 family inet address 10.10.10.10/32 user@PE1# set logical-systems LS1 interfaces lo0 unit 1 family iso address 47.1111.1111.1111.1111.00 user@PE1# set logical-systems LS1 protocols rsvp interface all user@PE1# set logical-systems LS1 protocols mpls label-switched-path to_10.10.10.12 to 10.10.10.12 user@PE1# set logical-systems LS1 protocols mpls interface all user@PE1# set logical-systems LS1 protocols bgp group to_other_PE type internal user@PE1# set logical-systems LS1 protocols bgp group to_other_PE local-address 10.10.10.10 user@PE1# set logical-systems LS1 protocols bgp group to_other_PE family inet-vpn any user@PE1# set logical-systems LS1 protocols bgp group to_other_PE neighbor 10.10.10.12 user@PE1# set logical-systems LS1 protocols isis interface all user@PE1# set logical-systems LS1 policy-options policy-statement from_bgp_to_ospf then accept user@PE1# set logical-systems LS1 routing-instances blue instance-type vrf user@PE1# set logical-systems LS1 routing-instances blue interface fe-0/1/2.0 user@PE1# set logical-systems LS1 routing-instances blue route-distinguisher 10.10.10.10:200 user@PE1# set logical-systems LS1 routing-instances blue vrf-target target:20:20 user@PE1# set logical-systems LS1 routing-instances blue protocols bgp group to_CE type external user@PE1# set logical-systems LS1 routing-instances blue protocols bgp group to_CE local-address 10.21.1.2 user@PE1# set logical-systems LS1 routing-instances blue protocols bgp group to_CE peer-as 200 user@PE1# set logical-systems LS1 routing-instances blue protocols bgp group to_CE neighbor 10.21.1.1 user@PE1# set logical-systems LS1 routing-instances red instance-type vrf user@PE1# set logical-systems LS1 routing-instances red interface fe-0/1/1.0 user@PE1# set logical-systems LS1 routing-instances red route-distinguisher 10.10.10.10:100 user@PE1# set logical-systems LS1 routing-instances red vrf-target target:10:10 user@PE1# set logical-systems LS1 routing-instances red protocols ospf export from_bgp_to_ospf user@PE1# set logical-systems LS1 routing-instances red protocols ospf area 0.0.0.0 interface all user@PE1# set logical-systems LS1 routing-options autonomous-system 100
在路由器 PE1 上配置逻辑系统 LS2。
user@PE1# set logical-systems LS2 interfaces fe-0/0/1 unit 0 description "core-facing LS2 interface" user@PE1# set logical-systems LS2 interfaces fe-0/0/1 unit 0 vlan-id 100 user@PE1# set logical-systems LS2 interfaces fe-0/0/1 unit 0 family inet address 10.1.2.1/24 user@PE1# set logical-systems LS2 interfaces fe-0/0/1 unit 0 family iso user@PE1# set logical-systems LS2 interfaces fe-0/0/1 unit 0 family mpls user@PE1# set logical-systems LS2 interfaces fe-0/1/0 unit 0 description "vpls interface to ce3" user@PE1# set logical-systems LS2 interfaces fe-0/1/0 unit 0 encapsulation vlan-vpls user@PE1# set logical-systems LS2 interfaces fe-0/1/0 unit 0 vlan-id 600 user@PE1# set logical-systems LS2 interfaces fe-0/1/0 unit 0 family vpls user@PE1# set logical-systems LS2 interfaces lo0 unit 2 description "LS2 loopback" user@PE1# set logical-systems LS2 interfaces lo0 unit 2 family inet address 10.20.20.20/32 user@PE1# set logical-systems LS2 interfaces lo0 unit 2 family iso address 47.2222.2222.2222.2222.00 user@PE1# set logical-systems LS2 protocols rsvp interface all user@PE1# set logical-systems LS2 protocols mpls label-switched-path to_10.20.20.22 to 10.20.20.22 user@PE1# set logical-systems LS2 protocols mpls interface all user@PE1# set logical-systems LS2 protocols bgp group to_VPLS_PE type internal user@PE1# set logical-systems LS2 protocols bgp group to_VPLS_PE local-address 10.20.20.20 user@PE1# set logical-systems LS2 protocols bgp group to_VPLS_PE family l2vpn signaling user@PE1# set logical-systems LS2 protocols bgp group to_VPLS_PE neighbor 10.20.20.22 user@PE1# set logical-systems LS2 protocols isis interface fe-0/0/1.0 user@PE1# set logical-systems LS2 protocols isis interface lo0.2 user@PE1# set logical-systems LS2 routing-instances new instance-type vpls user@PE1# set logical-systems LS2 routing-instances new interface fe-0/1/0.0 user@PE1# set logical-systems LS2 routing-instances new route-distinguisher 10.20.20.20:100 user@PE1# set logical-systems LS2 routing-instances new vrf-target target:30:30 user@PE1# set logical-systems LS2 routing-instances new protocols vpls site-range 10 user@PE1# set logical-systems LS2 routing-instances new protocols vpls site newPE site-identifier 1 user@PE1# set logical-systems LS2 routing-options autonomous-system 400
配置路由器 PE2
逐步过程
在路由器 PE2 上配置主路由器。
user@PE2# set interfaces fe-0/2/0 vlan-tagging user@PE2# set interfaces fe-0/2/0 encapsulation vlan-vpls user@PE2# set interfaces fe-0/2/1 vlan-tagging user@PE2# set interfaces fe-0/2/2 vlan-tagging user@PE2# set interfaces fe-0/2/3 vlan-tagging user@PE2# set interfaces fe-0/2/3 unit 0 description "main router to CE8" user@PE2# set interfaces fe-0/2/3 unit 0 vlan-id 103 user@PE2# set interfaces fe-0/2/3 unit 0 family inet address 10.31.4.1/24 user@PE2# set interfaces so-1/2/0 encapsulation frame-relay user@PE2# set interfaces so-1/2/0 unit 3 description "main router to P0" user@PE2# set interfaces so-1/2/0 unit 3 dlci 103 user@PE2# set interfaces so-1/2/0 unit 3 family inet address 10.31.3.2/24 user@PE2# set interfaces so-1/2/0 unit 3 family iso user@PE2# set interfaces so-1/2/0 unit 3 family mpls user@PE2# set interfaces lo0 unit 0 description "main router loopback" user@PE2# set interfaces lo0 unit 0 family inet address 10.155.41.179/32 user@PE2# set protocols bgp group to_main_ls type internal user@PE2# set protocols bgp group to_main_ls local-address 10.255.41.179 user@PE2# set protocols bgp group to_main_ls export export_address user@PE2# set protocols bgp group to_main_ls neighbor 10.255.41.173 user@PE2# set protocols bgp group to_main_ls neighbor 10.255.41.175 user@PE2# set protocols ospf area 0.0.0.0 interface so-1/2/0.3 user@PE2# set protocols ospf area 0.0.0.0 interface fe-0/2/3.0 user@PE2# set protocols ospf area 0.0.0.0 interface lo0.0 user@PE2# set routing-options static route 10.255.41.180/32 next-hop 10.31.4.2 user@PE2# set routing-options autonomous-system 500 user@PE2# set policy-options policy-statement export_address from route-filter 10.255.41.180/32 exact user@PE2# set policy-options policy-statement export_address then accept user@PE2# set system login class LS1-admin logical-system LS1 user@PE2# set system login class LS1-admin permissions all user@PE2# set system login class LS1-onlooker logical-system LS2 user@PE2# set system login class LS1-onlooker permissions view user@PE2# set system login user LS1-admin class LS1-admin
在路由器 PE2 上配置逻辑系统 LS1。
user@PE2# set logical-systems LS1 interfaces fe-0/2/0 unit 1 description "routing-instance red interface connects to Router CE5" user@PE2# set logical-systems LS1 interfaces fe-0/2/0 unit 1 vlan-id 101 user@PE2# set logical-systems LS1 interfaces fe-0/2/0 unit 1 family inet address 10.11.4.1/24 user@PE2# set logical-systems LS1 interfaces fe-0/2/0 unit 2 description "routing-instance blue interface connects to Router CE6" user@PE2# set logical-systems LS1 interfaces fe-0/2/0 unit 2 vlan-id 102 user@PE2# set logical-systems LS1 interfaces fe-0/2/0 unit 2 family inet address 10.21.4.1/24 user@PE2# set logical-systems LS1 interfaces so-1/2/0 unit 1 description "core-facing LS1 interface" user@PE2# set logical-systems LS1 interfaces so-1/2/0 unit 1 dlci 101 user@PE2# set logical-systems LS1 interfaces so-1/2/0 unit 1 family inet address 10.11.3.2/24 user@PE2# set logical-systems LS1 interfaces so-1/2/0 unit 1 family iso user@PE2# set logical-systems LS1 interfaces so-1/2/0 unit 1 family mpls user@PE2# set logical-systems LS1 interfaces lo0 unit 1 description "LS1 loopback" user@PE2# set logical-systems LS1 interfaces lo0 unit 1 family inet address 10.10.10.12/32 user@PE2# set logical-systems LS1 interfaces lo0 unit 1 family iso address 47.1111.1111.1111.1113.00 user@PE2# set logical-systems LS1 protocols rsvp interface all user@PE2# set logical-systems LS1 protocols mpls label-switched-path to_10.10.10.10 to 10.10.10.10 user@PE2# set logical-systems LS1 protocols mpls interface all user@PE2# set logical-systems LS1 protocols bgp group to_other_PE type internal user@PE2# set logical-systems LS1 protocols bgp group to_other_PE local-address 10.10.10.12 user@PE2# set logical-systems LS1 protocols bgp group to_other_PE family inet any user@PE2# set logical-systems LS1 protocols bgp group to_other_PE family inet-vpn any user@PE2# set logical-systems LS1 protocols bgp group to_other_PE neighbor 10.10.10.10 user@PE2# set logical-systems LS1 protocols isis interface all user@PE2# set logical-systems LS1 policy-options policy-statement from_bgp_to_ospf then accept user@PE2# set logical-systems LS1 routing-instances blue instance-type vrf user@PE2# set logical-systems LS1 routing-instances blue interface fe-0/2/2.0 user@PE2# set logical-systems LS1 routing-instances blue route-distinguisher 10.10.10.12:200 user@PE2# set logical-systems LS1 routing-instances blue vrf-target target:20:20 user@PE2# set logical-systems LS1 routing-instances blue protocols bgp group to_CE local-address 10.21.4.1 user@PE2# set logical-systems LS1 routing-instances blue protocols bgp group to_CE peer-as 300 user@PE2# set logical-systems LS1 routing-instances blue protocols bgp group to_CE neighbor 10.21.4.2 user@PE2# set logical-systems LS1 routing-instances red instance-type vrf user@PE2# set logical-systems LS1 routing-instances red interface fe-0/2/1.0 user@PE2# set logical-systems LS1 routing-instances red route-distinguisher 10.10.10.12:100 user@PE2# set logical-systems LS1 routing-instances red vrf-target target:10:10 user@PE2# set logical-systems LS1 routing-instances red protocols ospf export from_bgp_to_ospf user@PE2# set logical-systems LS1 routing-instances red protocols ospf area 0.0.0.0 interface all user@PE2# set logical-systems LS1 routing-options autonomous-system 100
在路由器 PE2 上配置逻辑系统 LS2。
user@PE2# set logical-systems LS2 interfaces fe-0/2/0 unit 0 description "vpls interface connects to Router CE7" user@PE2# set logical-systems LS2 interfaces fe-0/2/0 unit 0 encapsulation vlan-vpls user@PE2# set logical-systems LS2 interfaces fe-0/2/0 unit 0 vlan-id 600 user@PE2# set logical-systems LS2 interfaces fe-0/2/0 unit 0 family vpls user@PE2# set logical-systems LS2 interfaces so-1/2/0 unit 0 description "core-facing LS2 interface" user@PE2# set logical-systems LS2 interfaces so-1/2/0 unit 0 dlci 100 user@PE2# set logical-systems LS2 interfaces so-1/2/0 unit 0 family inet address 10.1.3.2/24 user@PE2# set logical-systems LS2 interfaces so-1/2/0 unit 0 family iso user@PE2# set logical-systems LS2 interfaces so-1/2/0 unit 0 family mpls user@PE2# set logical-systems LS2 interfaces lo0 unit 2 description "LS2 loopback" user@PE2# set logical-systems LS2 interfaces lo0 unit 2 family inet address 10.20.20.22/32 user@PE2# set logical-systems LS2 interfaces lo0 unit 2 family iso address 47.2222.2222.2222.2224.00 user@PE2# set logical-systems LS2 protocols rsvp interface all user@PE2# set logical-systems LS2 protocols mpls label-switched-path to_10.20.20.20 to 10.20.20.20 user@PE2# set logical-systems LS2 protocols mpls interface all user@PE2# set logical-systems LS2 protocols bgp group to_VPLS_PE type internal user@PE2# set logical-systems LS2 protocols bgp group to_VPLS_PE local-address 10.20.20.22 user@PE2# set logical-systems LS2 protocols bgp group to_VPLS_PE family l2vpn signaling user@PE2# set logical-systems LS2 protocols bgp group to_VPLS_PE neighbor 10.20.20.20 user@PE2# set logical-systems LS2 protocols isis interface so-1/2/0.0 user@PE2# set logical-systems LS2 protocols isis interface lo0.2 user@PE2# set logical-systems LS2 routing-instances new instance-type vpls user@PE2# set logical-systems LS2 routing-instances new interface fe-0/2/0.0 user@PE2# set logical-systems LS2 routing-instances new route-distinguisher 10.20.20.22:100 user@PE2# set logical-systems LS2 routing-instances new vrf-target target:30:30 user@PE2# set logical-systems LS2 routing-instances new protocols vpls site-range 10 user@PE2# set logical-systems LS2 routing-instances new protocols vpls site newPE site-identifier 2 user@PE2# set logical-systems LS2 routing-options autonomous-system 400
配置路由器 P0
逐步过程
在路由器 P0 上配置主路由器。
user@P0# set interfaces fe-1/1/3 vlan-tagging user@P0# set interfaces fe-1/1/3 unit 3 description "connects to the main router on pe1" user@P0# set interfaces fe-1/1/3 unit 3 vlan-id 103 user@P0# set interfaces fe-1/1/3 unit 3 family inet address 10.31.2.2/24 user@P0# set interfaces fe-1/1/3 unit 3 family iso user@P0# set interfaces fe-1/1/3 unit 3 family mpls user@P0# set interfaces so-1/2/0 dce user@P0# set interfaces so-1/2/0 encapsulation frame-relay user@P0# set interfaces so-1/2/0 unit 3 description "connects to the main router on pe2" user@P0# set interfaces so-1/2/0 unit 3 dlci 103 user@P0# set interfaces so-1/2/0 unit 3 family inet address 10.31.3.1/24 user@P0# set interfaces so-1/2/0 unit 3 family iso user@P0# set interfaces so-1/2/0 unit 3 family mpls user@P0# set interfaces lo0 unit 0 description "main router loopback" user@P0# set interfaces lo0 unit 0 family inet address 10.255.41.175/32 user@P0# set routing-options autonomous-system 500 user@P0# set protocols bgp group to_main_ls type internal user@P0# set protocols bgp group to_main_ls local-address 10.255.41.175 user@P0# set protocols bgp group to_main_ls neighbor 10.255.41.179 user@P0# set protocols bgp group to_main_ls neighbor 10.255.41.173 user@P0# set protocols ospf area 0.0.0.0 interface lo0.0 user@P0# set protocols ospf area 0.0.0.0 interface fe-1/1/3.3 user@P0# set protocols ospf area 0.0.0.0 interface so-1/2/0.3 user@P0# set system login class LS1-admin logical-system LS1 user@P0# set system login class LS1-admin permissions all user@P0# set system login class LS1-onlooker logical-system LS2 user@P0# set system login class LS1-onlooker permissions view user@P0# set system login user LS1-admin class LS1-admin
在路由器 P0 上配置逻辑系统 LS1。
user@P0# set logical-systems LS1 interfaces fe-1/1/3 unit 1 description "LS1 interface connects to LS1 on pe1" user@P0# set logical-systems LS1 interfaces fe-1/1/3 unit 1 vlan-id 101 user@P0# set logical-systems LS1 interfaces fe-1/1/3 unit 1 family inet address 10.11.2.2/24 user@P0# set logical-systems LS1 interfaces fe-1/1/3 unit 1 family iso user@P0# set logical-systems LS1 interfaces fe-1/1/3 unit 1 family mpls user@P0# set logical-systems LS1 interfaces so-1/2/0 unit 1 description "LS1 interface connects to LS1 on pe2" user@P0# set logical-systems LS1 interfaces so-1/2/0 unit 1 dlci 101 user@P0# set logical-systems LS1 interfaces so-1/2/0 unit 1 family inet address 10.11.3.1/24 user@P0# set logical-systems LS1 interfaces so-1/2/0 unit 1 family iso user@P0# set logical-systems LS1 interfaces so-1/2/0 unit 1 family mpls user@P0# set logical-systems LS1 interfaces lo0 unit 1 description "LS1 loopback" user@P0# set logical-systems LS1 interfaces lo0 unit 1 family inet address 10.10.10.11/32 user@P0# set logical-systems LS1 interfaces lo0 unit 1 family iso address 47.1111.1111.1111.1112.00 user@P0# set logical-systems LS1 protocols rsvp interface all user@P0# set logical-systems LS1 protocols mpls interface all user@P0# set logical-systems LS1 protocols isis interface all
在路由器 P0 上配置逻辑系统 LS2。
user@P0# set logical-systems LS2 interfaces fe-1/1/3 unit 0 description "LS2 interface connects to LS2 on pe1" user@P0# set logical-systems LS2 interfaces fe-1/1/3 unit 0 vlan-id 100 user@P0# set logical-systems LS2 interfaces fe-1/1/3 unit 0 family inet address 10.1.2.2/24 user@P0# set logical-systems LS2 interfaces fe-1/1/3 unit 0 family iso user@P0# set logical-systems LS2 interfaces fe-1/1/3 unit 0 family mpls user@P0# set logical-systems LS2 interfaces so-1/2/0 unit 0 description "LS2 interface connects to LS2 on pe2" user@P0# set logical-systems LS2 interfaces so-1/2/0 unit 0 dlci 100 user@P0# set logical-systems LS2 interfaces so-1/2/0 unit 0 family inet address 10.1.3.1/24 user@P0# set logical-systems LS2 interfaces so-1/2/0 unit 0 family iso user@P0# set logical-systems LS2 interfaces so-1/2/0 unit 0 family mpls user@P0# set logical-systems LS2 interfaces lo0 unit 2 description "LS2 loopback" user@P0# set logical-systems LS2 interfaces lo0 unit 2 family inet address 10.20.20.21/32 user@P0# set logical-systems LS2 interfaces lo0 unit 2 family iso address 47.2222.2222.2222.2223.00 user@P0# set logical-systems LS2 protocols rsvp interface all user@P0# set logical-systems LS2 protocols mpls interface all user@P0# set logical-systems LS2 protocols isis interface fe-1/1/3.0 user@P0# set logical-systems LS2 protocols isis interface so-1/2/0.0 user@P0# set logical-systems LS2 protocols isis interface lo0.2
结果
在路由器 CE1 上，OSPF PE1 上的逻辑系统 LS1 中的红色 VPN：
路由器 CE1
[edit]
interfaces {
fe-1/0/1 {
vlan-tagging;
unit 0 {
description "routing-instance red CE";
vlan-id 101;
family inet {
address 10.11.1.1/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.11.1.100/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface fe-1/0/1.0;
interface lo0.0;
}
}
}
在路由器 CE2 上BGP，以连接到路由器 PE1 上逻辑系统 LS1 中的蓝色 VPN：
路由器 CE2
[edit]
interfaces {
fe-1/0/2 {
vlan-tagging;
unit 0 {
description "routing-instance blue CE";
vlan-id 102;
family inet {
address 10.21.1.1/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.21.1.100/32;
}
}
}
}
routing-options {
autonomous-system 200;
}
protocols {
bgp {
export export_loopback;
group to_PE {
type external;
local-address 10.21.1.1;
peer-as 100;
neighbor 10.21.1.2;
}
}
}
policy-options {
policy-statement export_loopback {
from {
route-filter 10.21.1.100/32 exact;
}
then accept;
}
}
在路由器 CE3 上，将 VLAN 600 中的快速以太网接口配置为与路由器 PE1 的逻辑系统 LS2 中的 VPLS 路由实例连接：
路由器 CE3
[edit]
interfaces {
fe-1/0/0 {
vlan-tagging;
unit 0 {
description "vpls interface";
vlan-id 600;
family inet {
address 10.1.1.1/24;
}
}
}
}
在路由器 CE4 上，将快速以太网接口配置为与路由器 PE1 上的主路由器连接：
路由器 CE4
[edit]
interfaces {
fe-1/0/3 {
vlan-tagging;
unit 0 {
description "main router interface";
vlan-id 103;
family inet {
address 10.31.1.1/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.255.41.177/32;
}
}
}
}
在路由器 PE1 上，在逻辑系统 LS1 中创建两个 VPN 路由和转发 （VRF） 路由实例：红色和蓝色。配置客户边缘向逻辑接口，使来自路由器 CE1 的信息流放置在红色 VPN 中，而来自路由器 CE2 的信息流置于蓝色 VPN 中。接下来，在 fe-0/0/1.1 创建一个逻辑接口，以连接到路由器 P0 上的逻辑系统 LS1。
同时还在路由器 PE1 上，在逻辑系统 LS2 中创建 VPLS 路由实例。配置逻辑接口，以便来自路由器 CE3 的信息流发送至 VPLS 域并连接到路由器 P0 上的逻辑系统 LS2。
为逻辑系统 LS1 创建管理员。逻辑系统管理员可负责此逻辑系统的维护。
最后，配置一个逻辑接口，以将路由器 CE4 与路由器 P0 的主路由器部分互连。
路由器 PE1
[edit]
logical-systems {
LS1 { # The configuration for the first logical system begins here.
interfaces {
fe-0/0/1 {
unit 1 { # This is the core-facing interface for Logical System LS1.
description "LS1 interface";
vlan-id 101;
family inet {
address 10.11.2.1/24;
}
family iso;
family mpls;
}
}
fe-0/1/1 {
unit 0 { # This logical interface connects to Router CE1.
description "routing-instance red interface";
vlan-id 101;
family inet {
address 10.11.1.2/24;
}
}
}
fe-0/1/2 {
unit 0 { # This logical interface connects to Router CE2.
description "routing-instance blue interface";
vlan-id 102;
family inet {
address 10.21.1.2/24;
}
}
}
lo0 {
unit 1 {
description "LS1 loopback";
family inet {
address 10.10.10.10/32;
}
family iso {
address 47.1111.1111.1111.1111.00;
}
}
}
}
protocols { # You configure RSVP, MPLS, IS-IS, and BGP for Logical System LS1.
rsvp {
interface all;
}
mpls {
label-switched-path to_10.10.10.12 {
to 10.10.10.12;
}
interface all;
}
bgp {
group to_other_PE {
type internal;
local-address 10.10.10.10;
family inet-vpn {
any;
}
neighbor 10.10.10.12;
}
}
isis {
interface all;
}
}
policy-options {
policy-statement from_bgp_to_ospf {
then accept;
}
}
routing-instances {
blue {
instance-type vrf; # You configure instance blue within Logical System LS1.
interface fe-0/1/2.0;
route-distinguisher 10.10.10.10:200;
vrf-target target:20:20;
protocols {
bgp { #BGP connects the blue instance with Router CE2.
group to_CE {
type external;
local-address 10.21.1.2;
peer-as 200;
neighbor 10.21.1.1;
}
}
}
}
red {
instance-type vrf; # You configure instance red within Logical System LS1.
interface fe-0/1/1.0;
route-distinguisher 10.10.10.10:100;
vrf-target target:10:10;
protocols {
ospf {#OSPF connects the red instance with Router CE1.
export from_bgp_to_ospf;
area 0.0.0.0 {
interface all;
}
}
}
}
}
routing-options {
autonomous-system 100;
}
}
LS2 { # The configuration for the second logical system begins here.
interfaces {
fe-0/0/1 {
unit 0 { # This is the core-facing interface for Logical System LS2.
description "LS2 interface";
vlan-id 100;
family inet {
address 10.1.2.1/24;
}
family iso;
family mpls;
}
}
fe-0/1/0 {
unit 0 { # This logical interface connects to Router CE3.
description "vpls interface";
encapsulation vlan-vpls;
vlan-id 600;
family vpls;
}
}
lo0 {
unit 2 {
description "LS2 loopback";
family inet {
address 10.20.20.20/32;
}
family iso {
address 47.2222.2222.2222.2222.00;
}
}
}
}
protocols { # You configure RSVP, MPLS, IS-IS, and BGP for Logical System LS2.
rsvp {
interface all;
}
mpls {
label-switched-path to_10.20.20.22 {
to 10.20.20.22;
}
interface all;
}
bgp {
group to_VPLS_PE {
type internal;
local-address 10.20.20.20;
family l2vpn {
signaling;
}
neighbor 10.20.20.22;
}
}
isis {
interface fe-0/0/1.0;
interface lo0.2;
}
}
routing-instances {
new {
instance-type vpls; # You configure VPLS within Logical System LS2.
interface fe-0/1/0.0;
route-distinguisher 10.20.20.20:100;
vrf-target target:30:30;
protocols {
vpls {
site-range 10;
site newPE {
site-identifier 1;
}
}
}
}
}
routing-options {
autonomous-system 400;
}
}
}
interfaces {
fe-0/0/1 {
vlan-tagging;
unit 3 { # This is the core-facing interface for the main router of PE1.
description "main router to P0";
vlan-id 103;
family inet {
address 10.31.2.1/24;
}
family iso;
family mpls;
}
}
fe-0/1/3 {
vlan-tagging;
unit 0 { # This logical interface in the main router of PE1 connects to CE4.
description "main router to CE4";
vlan-id 103;
family inet {
address 10.31.1.2/24;
}
}
}
fe-0/1/0 { # You must always configure physical interface statements for
vlan-tagging; # logical system interfaces at the [edit interfaces] hierarchy level.
encapsulation vlan-vpls;
}
fe-0/1/1 {
vlan-tagging;
}
fe-0/1/2 {
vlan-tagging;
}
lo0 {
unit 0 {
description "main router loopback";
family inet {
address 10.255.41.173/32;
}
}
}
}
routing-options {
static {
route 10.255.41.177/32 next-hop 10.31.1.1;
}
autonomous-system 500;
}
protocols {
bgp { # The main router uses BGP as the exterior gateway protocol.
group to_main_ls {
type internal;
local-address 10.255.41.173;
export export_address;
neighbor 10.255.41.179;
neighbor 10.255.41.175;
}
}
ospf { # The main router uses OSPF as the interior gateway protocol.
area 0.0.0.0 {
interface lo0.0;
interface fe-0/0/1.3;
}
}
}
policy-options {
policy-statement export_address {
from {
route-filter 10.255.41.177/32 exact;
}
then accept;
}
}
system {
login {
class LS1–admin {
permissions all;
logical-system LS1;
}
user LS1–admin {
class LS1–admin;
authentication plain-text password;
New password: password
Retype new password: password
}
}
}
在路由器 P0 上，配置逻辑系统 LS1、LS2 和主路由器。对于逻辑系统，您必须在主路由器层次结构级别配置物理接口属性，并将 [edit interfaces] 逻辑接口分配给逻辑系统。接下来，您必须为逻辑系统配置协议（例如 RSVP、MPLS、BGP 和 IS-IS）、路由选项和策略选项。最后，为在路由器 PE1 上配置的逻辑系统 LS1 配置相同的管理员。为逻辑系统 LS2 配置此管理员以允许查看 LS2 配置，但不更改 LS2 的配置。
此示例中，逻辑系统 LS1 传输路由器 CE1 和 CE5 之间存在的红色 VPN 的信息流。逻辑系统 LS1 还会连接路由器 CE2 和 CE6 之间的蓝色 VPN。逻辑系统 LS2 在路由器 CE3 和 CE7 之间传输 VPLS 流量。
对于路由器 P0 上的主路由器，您可按常规配置路由器。此示例中，主路由器在路由器 CE4 和 CE8 之间传输流量。因此，配置接口和路由协议（OSPF、BGP）以连接到路由器 PE1 和 PE2 的主路由器部分。
路由器 P0
[edit]
logical-systems {
LS1 { # The configuration for the first logical system begins here.
interfaces {
fe-1/1/3 {
unit 1 { # This logical interface connects to LS1 on Router PE1.
description "LS1 interface";
vlan-id 101;
family inet {
address 10.11.2.2/24;
}
family iso;
family mpls;
}
}
so-1/2/0 {
unit 1 { # This logical interface connects to LS1 on Router PE2.
description "LS1 interface";
dlci 101;
family inet {
address 10.11.3.1/24;
}
family iso;
family mpls;
}
}
lo0 {
unit 1 {
description "LS1 loopback";
family inet {
address 10.10.10.11/32;
}
family iso {
address 47.1111.1111.1111.1112.00;
}
}
}
}
protocols { # You configure RSVP, MPLS, and IS-IS for Logical System LS1.
rsvp {
interface all;
}
mpls {
interface all;
}
isis {
interface all;
}
}
}
LS2 { # The configuration for the second logical system begins here.
interfaces {
fe-1/1/3 {
unit 0 { # This logical interface connects to LS2 on Router PE1.
description "LS2 interface";
vlan-id 100;
family inet {
address 10.1.2.2/24;
}
family iso;
family mpls;
}
}
so-1/2/0 {
unit 0 { # This logical interface connects to LS2 on Router PE2.
description "LS2 interface";
dlci 100;
family inet {
address 10.1.3.1/24;
}
family iso;
family mpls;
}
}
lo0 {
unit 2 {
description "LS2 loopback";
family inet {
address 10.20.20.21/32;
}
family iso {
address 47.2222.2222.2222.2223.00;
}
}
}
}
protocols { # You configure RSVP, MPLS, and IS-IS for Logical System LS2.
rsvp {
interface all;
}
mpls {
interface all;
}
isis {
interface fe-1/1/3.0;
interface so-1/2/0.0;
interface lo0.2;
}
}
}
}
interfaces {
fe-1/1/3 {
vlan-tagging;
unit 3 { # This logical interface connects to the main router on Router PE1.
description "main router interface";
vlan-id 103;
family inet {
address 10.31.2.2/24;
}
family iso;
family mpls;
}
}
so-1/2/0 {
dce; # You must configure all physical interface statements for logical
encapsulation frame-relay; # routers at the [edit interfaces] hierarchy level.
unit 3 { # This logical interface connects to the main router on Router PE2.
description "main router interface";
dlci 103;
family inet {
address 10.31.3.1/24;
}
family iso;
family mpls;
}
}
lo0 {
unit 0 {
description "main router loopback";
family inet {
address 10.255.41.175/32;
}
}
}
}
routing-options {
autonomous-system 500;
}
protocols { # You configure BGP and OSPF for the main router.
bgp {
group to_main_ls {
type internal;
local-address 10.255.41.175
neighbor 10.255.41.179;
neighbor 10.255.41.173;
}
}
ospf {
area 0.0.0.0 {
interface lo0.0;
interface fe-1/1/3.3;
interface so-1/2/0.3;
}
}
}
system {
login {
class LS1–admin {
permissions all;
logical-system LS1;
}
class LS1–onlooker {
permissions view;
logical-system LS2;
}
user LS1–admin {
class LS1–admin;
}
}
}
在路由器 PE2 上，在逻辑系统 LS1 中创建两个 VRF 路由实例：红色和蓝色。配置面向客户边缘逻辑接口，使来自路由器 CE5 的信息流放置在红色 VPN 中，而来自路由器 CE6 的信息流置于蓝色 VPN 中。接下来，在so-1/2/0 .1上创建一个逻辑接口，以连接到路由器 P0 上的逻辑系统 LS1。
同时还在路由器 PE2 上，在逻辑系统 LS2 中创建 VPLS 路由实例。配置逻辑接口，以便来自路由器 CE7 的信息流发送至 VPLS 域并连接到路由器 P0 上的逻辑系统 LS2。
配置逻辑接口，以将路由器 CE8 与路由器 P0 的主路由器部分互连。
最后，您也可选择具有逻辑系统 LS1 配置权限和逻辑系统 LS2 查看权限的逻辑系统管理员。
路由器 PE2
[edit]
logical-systems {
LS1 { # The configuration for the first logical system begins here.
interfaces {
fe-0/2/0 {
unit 1 { # This logical interface connects to Router CE5.
description "routing-instance red interface";
vlan-id 101;
family inet {
address 10.11.4.1/24;
}
}
unit 2 { # This logical interface connects to Router CE6.
description "routing-instance blue interface";
vlan-id 102;
family inet {
address 10.21.4.1/24;
}
}
}
so-1/2/0 {
unit 1 {# This is the core-facing interface for Logical System LS1.
description "LS1 interface";
dlci 101;
family inet {
address 10.11.3.2/24;
}
family iso;
family mpls;
}
}
lo0 {
unit 1 {
description "LS1 loopback";
family inet {
address 10.10.10.12/32;
}
family iso {
address 47.1111.1111.1111.1113.00;
}
}
}
}
protocols {
rsvp {# You configure RSVP, MPLS, IS-IS, and BGP for Logical System LS1.
interface all;
}
mpls {
label-switched-path to_10.10.10.10 {
to 10.10.10.10;
}
interface all;
}
bgp {
group to_other_PE {
type internal;
local-address 10.10.10.12;
family inet {
any;
}
family inet-vpn {
any;
}
neighbor 10.10.10.10;
}
}
isis {
interface all;
}
}
policy-options {
policy-statement from_bgp_to_ospf {
then accept;
}
}
routing-instances {
blue {
instance-type vrf; # You configure instance blue within Logical System LS1.
interface fe-0/2/2.0;
route-distinguisher 10.10.10.12:200;
vrf-target target:20:20;
protocols {
bgp { # BGP connects the blue instance with Router CE6.
group to_CE {
local-address 10.21.4.1;
peer-as 300;
neighbor 10.21.4.2;
}
}
}
}
red {
instance-type vrf; # You configure instance red within Logical System LS1.
interface fe-0/2/1.0;
route-distinguisher 10.10.10.12:100;
vrf-target target:10:10;
protocols {
ospf { # OSPF connects the red instance with Router CE5.
export from_bgp_to_ospf;
area 0.0.0.0 {
interface all;
}
}
}
}
}
routing-options {
autonomous-system 100;
}
}
logical-systems {
LS2 { # The configuration for the second logical system begins here.
interfaces {
fe-0/2/0 {
unit 0 { # This logical interface connects to Router CE7.
description "vpls interface";
encapsulation vlan-vpls;
vlan-id 600;
family vpls;
}
}
so-1/2/0 {
unit 0 { # This is the core-facing interface for Logical System LS2.
description "LS2 interface";
dlci 100;
family inet {
address 10.1.3.2/24;
}
family iso;
family mpls;
}
}
lo0 {
unit 2 {
description "LS2 loopback";
family inet {
address 10.20.20.22/32;
}
family iso {
address 47.2222.2222.2222.2224.00;
}
}
}
}
protocols { # You configure RSVP, MPLS, IS-IS, and BGP for Logical System LS2.
rsvp {
interface all;
}
mpls {
label-switched-path to_10.20.20.20 {
to 10.20.20.20;
}
interface all;
}
bgp {
group to_VPLS_PE {
type internal;
local-address 10.20.20.22;
family l2vpn {
signaling;
}
neighbor 10.20.20.20;
}
}
isis {
interface so-1/2/0.0;
interface lo0.2;
}
}
routing-instances {
new {
instance-type vpls; # You configure VPLS within Logical System LS2.
interface fe-0/2/0.0;
route-distinguisher 10.20.20.22:100;
vrf-target target:30:30;
protocols {
vpls {
site-range 10;
site newPE {
site-identifier 2;
}
}
}
}
}
routing-options {
autonomous-system 400;
}
}
interfaces {
fe-0/2/0 { # You must always configure physical interface statements for the
vlan-tagging; # logical system interfaces at the [edit interfaces] hierarchy level.
encapsulation vlan-vpls;
}
fe-0/2/1 {
vlan-tagging;
}
fe-0/2/2 {
vlan-tagging;
}
fe-0/2/3 {
vlan-tagging;
unit 0 { # This logical interface in the main router of PE2 connects to CE8.
description "main router to CE8";
vlan-id 103;
family inet {
address 10.31.4.1/24;
}
}
}
so-1/2/0 {
encapsulation frame-relay;
unit 3 { # This is the core-facing interface for the main router of PE2.
description "main router to P0";
dlci 103;
family inet {
address 10.31.3.2/24;
}
family iso;
family mpls;
}
}
lo0 {
unit 0 {
description "main router loopback";
family inet {
address 10.155.41.179/32;
}
}
}
}
routing-options {
static {
route 10.255.41.180/32 next-hop 10.31.4.2;
}
autonomous-system 500;
}
protocols {
bgp {# The main router uses BGP as the exterior gateway protocol.
group to_main_ls {
type internal;
local-address 10.255.41.179;
export export_address;
neighbor 10.255.41.173;
neighbor 10.255.41.175;
}
}
ospf {# The main router uses OSPF as the interior gateway protocol.
area 0.0.0.0 {
interface so-1/2/0.3;
interface fe-0/2/3.0;
interface lo0.0;
}
}
}
policy-options {
policy-statement export_address {
from {
route-filter 10.255.41.180/32 exact;
}
then accept;
}
}
}
system {
login {
class LS1–admin {
permissions all;
logical-system LS1;
}
class LS1–onlooker {
permissions view;
logical-system LS2;
}
user LS1–admin {
class LS1–admin;
}
}
}
在路由器 CE5 上，OSPF PE2 上的逻辑系统 LS1 中的红色 VPN：
路由器 CE5
[edit]
interfaces {
fe-0/3/1 {
vlan-tagging;
unit 0 {
description "routing-instance red CE";
vlan-id 101;
family inet {
address 10.11.4.2/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.11.4.100/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface fe-0/3/1.0;
interface lo0.0;
}
}
}
system {
login {
class LS1–admin {
permissions all;
logical-system LS1;
}
class LS1–onlooker {
permissions view;
logical-system LS2;
}
user LS1–admin {
class LS1–admin;
}
}
}
在路由器 CE6 上BGP，以连接到路由器 PE2 上逻辑系统 LS1 中的蓝色 VPN：
路由器 CE6
[edit]
interfaces {
fe-0/3/2 {
vlan-tagging;
unit 0 {
description "routing-instance blue CE";
vlan-id 102;
family inet {
address 10.21.4.2/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.21.4.100/32;
}
}
}
}
routing-options {
autonomous-system 300;
}
protocols {
bgp {
export export_loopback;
group to_PE {
type external;
local-address 10.21.4.2;
peer-as 100;
neighbor 10.21.4.1;
}
}
}
policy-options {
policy-statement export_loopback {
from {
route-filter 10.21.4.100/32 exact;
}
then accept;
}
}
在路由器 CE7 上，将 VLAN 600 中的快速以太网接口配置为与路由器 PE2 的逻辑系统 LS2 中的 VPLS 路由实例连接：
路由器 CE7
[edit]
interfaces {
fe-0/3/0 {
vlan-tagging;
unit 0 {
description "vpls interface";
vlan-id 600;
family inet {
address 10.1.1.2/24;
}
}
}
}
在路由器 CE8 上，将快速以太网接口配置为与路由器 PE2 上的主路由器连接：
路由器 CE8
[edit]
interfaces {
fe-0/3/3 {
vlan-tagging;
unit 0 {
description "main router interface";
vlan-id 103;
family inet {
address 10.31.4.2/24;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 10.255.41.180/32;
}
}
}
验证
运行以下命令，以确认配置工作正常：
show bgp summary （逻辑系统 logical-system-name ）
show isis 邻接（逻辑系统 logical-system-name ）
show mpls lsp （逻辑系统 logical-system-name ）
show （ospf | ospf3） 邻接（逻辑 logical-system-name 系统）
show route（ 逻辑 logical-system-name 系统）
show route protocol（ logical-system-name 逻辑系统）
show rsvp session（ 逻辑系统 logical-system-name ）
以下各节显示与配置示例一起使用的命令的输出：
- 路由器 CE1 状态
- 路由器 CE2 状态
- 路由器 CE3 状态
- 路由器 PE1 状态：主路由器
- 路由器 PE1 状态：逻辑系统 LS1
- 路由器 PE1 状态：逻辑系统 LS2
- 路由器 P0 状态：主路由器
- 路由器 P0 状态：主路由器
- 路由器 P0 状态：逻辑系统 LS1
- 路由器 P0 状态：逻辑系统 LS2
- 路由器 PE2 状态：主路由器
- 路由器 PE2 状态：逻辑系统 LS1
- 路由器 PE2 状态：逻辑系统 LS2
- 路由器 CE5 状态
- 路由器 CE6 状态
- 路由器 CE7 状态
- 逻辑系统管理员验证输出
路由器 CE1 状态
目的
验证连接性。
行动
user@CE1> show route table
inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.11.1.0/24 *[Direct/0] 00:20:20
> via fe-1/0/1.0
10.11.1.1/32 *[Local/0] 00:20:24
Local via fe-1/0/1.0
10.11.1.100/32 *[Direct/0] 00:21:53
> via lo0.0
10.11.4.0/24 *[OSPF/150] 00:18:30, metric 0, tag 3489661028
> to 10.11.1.2 via fe-1/0/1.0
10.11.4.100/32 *[OSPF/10] 00:18:30, metric 2
> to 10.11.1.2 via fe-1/0/1.0
224.0.0.5/32 *[OSPF/10] 00:21:58, metric 1
MultiRecv
路由器 CE2 状态
目的
验证连接性。
行动
user@CE2> show route table
inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.21.1.0/24 *[Direct/0] 00:20:30
> via fe-1/0/2.0
10.21.1.1/32 *[Local/0] 00:20:34
Local via fe-1/0/2.0
10.21.1.100/32 *[Direct/0] 00:22:03
> via lo0.0
10.21.4.0/24 *[BGP/170] 00:18:43, localpref 100
AS path: 100 I
> to 10.21.1.2 via fe-1/0/2.0
10.21.4.100/32 *[BGP/170] 00:18:43, localpref 100
AS path: 100 300 I
> to 10.21.1.2 via fe-1/0/2.0
路由器 CE3 状态
目的
验证连接性。
行动
user@CE3> show route table
inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.1.1.0/24 *[Direct/0] 00:20:13
> via fe-1/0/0.0
10.1.1.1/32 *[Local/0] 00:20:17
Local via fe-1/0/0.0
路由器 PE1 状态：主路由器
目的
验证BGP操作。
行动
user@PE1> show bgp summary Groups: 1 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending inet.0 1 0 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/DwnState|#Active/Received/Damped... 10.255.41.175 500 5 8 0 0 2:31 0/0/0 0/0/0 10.255.41.179 500 6 9 0 0 2:35 0/1/0 0/0/0
user@PE1> show route protocol bgp
inet.0: 20 destinations, 21 routes (20 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.255.41.180/32 [BGP/170] 00:02:48, localpref 100, from 10.255.41.179
AS path: I
> to 10.31.2.2 via fe-0/0/1.3
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
inet6.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
user@PE1> show ospf neighbor
Address Interface State ID Pri Dead
10.31.2.2 fe-0/0/1.3 Full 10.255.41.175 128 32
user@PE1> show isis adjacency
IS-IS instance is not running
路由器 PE1 状态：逻辑系统 LS1
目的
验证BGP操作。
行动
user@PE1> show bgp summary logical-system LS1 Groups: 2 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending bgp.l3vpn.0 4 4 0 0 0 0 bgp.l3vpn.2 0 0 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/DwnState|#Active/Received/Damped... 10.10.10.12 100 13 14 0 0 2:50 Establ bgp.l3vpn.0: 4/4/0 bgp.l3vpn.2: 0/0/0 blue.inet.0: 2/2/0 red.inet.0: 2/2/0 10.21.1.1 200 13 14 0 0 4:33 Establ blue.inet.0: 1/1/0
红色 VPN
主管理员或逻辑系统管理员可发出以下命令来查看特定逻辑系统的输出。
user@PE1> show route logical-system LS1 table red
red.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.11.1.0/24 *[Direct/0] 00:04:51
> via fe-0/1/1.0
10.11.1.2/32 *[Local/0] 00:05:45
Local via fe-0/1/1.0
10.11.1.100/32 *[OSPF/10] 00:04:02, metric 1
> to 10.11.1.1 via fe-0/1/1.0
10.11.4.0/24 *[BGP/170] 00:03:05, localpref 100, from 10.10.10.12
AS path: I
> to 10.11.2.2 via fe-0/0/1.1, label-switched-path to_10.10.10.12
10.11.4.100/32 *[BGP/170] 00:03:05, MED 1, localpref 100, from 10.10.10.12
AS path: I
> to 10.11.2.2 via fe-0/0/1.1, label-switched-path to_10.10.10.12
224.0.0.5/32 *[OSPF/10] 00:07:02, metric 1
MultiRecv
蓝色 VPN
主管理员或逻辑系统管理员可发出以下命令来查看特定逻辑系统的输出。
user@PE1> show route logical-system LS1 table blue
blue.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.21.1.0/24 *[Direct/0] 00:05:29
> via fe-0/1/2.0
10.21.1.2/32 *[Local/0] 00:06:23
Local via fe-0/1/2.0
10.21.1.100/32 *[BGP/170] 00:05:26, localpref 100
AS path: 200 I
> to 10.21.1.1 via fe-0/1/2.0
10.21.4.0/24 *[BGP/170] 00:03:43, localpref 100, from 10.10.10.12
AS path: I
> to 10.11.2.2 via fe-0/0/1.1, label-switched-path to_10.10.10.12
10.21.4.100/32 *[BGP/170] 00:03:43, localpref 100, from 10.10.10.12
AS path: 300 I
> to 10.11.2.2 via fe-0/0/1.1, label-switched-path to_10.10.10.12
user@PE1> show route logical-system LS1 table inet.0
inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.10.10.10/32 *[Direct/0] 00:08:05
> via lo0.1
10.10.10.11/32 *[IS-IS/15] 00:05:07, metric 10
> to 10.11.2.2 via fe-0/0/1.1
10.10.10.12/32 *[IS-IS/15] 00:04:58, metric 20
> to 10.11.2.2 via fe-0/0/1.1
10.11.2.0/24 *[Direct/0] 00:05:38
> via fe-0/0/1.1
10.11.2.1/32 *[Local/0] 00:06:51
Local via fe-0/0/1.1
10.11.3.0/24 *[IS-IS/15] 00:05:07, metric 20
> to 10.11.2.2 via fe-0/0/1.1
user@PE1> ping logical-system LS1 routing-instance red 10.11.4.100
PING 10.11.4.100 (10.11.4.100): 56 data bytes
64 bytes from 10.11.4.100: icmp_seq=0 ttl=251 time=1.055 ms
^C
--- 10.11.4.100 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.055/1.055/1.055/0.000 ms
路由器 PE1 状态：逻辑系统 LS2
目的
验证 VPLS 操作。
行动
user@PE1> show vpls connections logical-system LS2
Layer-2 VPN Connections:
Legend for connection status (St)
OR -- out of range WE -- intf encaps != instance encaps
EI -- encapsulation invalid Dn -- down
EM -- encapsulation mismatch VC-Dn -- Virtual circuit down
CM -- control-word mismatch -> -- only outbound conn is up
CN -- circuit not provisioned <- -- only inbound conn is up
OL -- no outgoing label Up -- operational
NC -- intf encaps not CCC/TCC XX -- unknown
NP -- intf h/w not present
Legend for interface status
Up -- operational
Dn -- down
Instance: new
Local site: newPE (1)
connection-site Type St Time last up # Up trans
2 rmt Up Jul 16 14:05:25 2003 1
Local interface: vt-1/2/0.49152, Status: Up, Encapsulation: VPLS
Remote PE: 10.20.20.22, Negotiated control-word: No
Incoming label: 800001, Outgoing label: 800000
路由器 P0 状态：主路由器
目的
验证连接性。
行动
user@P0> show interfaces terse lo0
Interface Admin Link Proto Local Remote
lo0 up up
lo0.0 up up inet 10.255.41.175 --> 0/0
127.0.0.1 --> 0/0
iso 47.0005.80ff.f800.0000.0108.0003.0102.5501.4175.00
inet6 fe80::2a0:a5ff:fe12:2b09
feee::10:255:14:175
lo0.1 up up inet 10.10.10.11 --> 0/0
iso 47.1111.1111.1111.1112.00
lo0.2 up up inet 10.20.20.21 --> 0/0
iso 47.2222.2222.2222.2223.00
lo0.16383 up up inet
user@P0> show ospf neighbor
Address Interface State ID Pri Dead
10.31.2.1 fe-1/1/3.3 Full 10.255.41.173 128 34
10.31.3.2 so-1/2/0.3 Full 10.255.41.179 128 37
路由器 P0 状态：主路由器
目的
验证路由协议操作。
行动
user@P0> show interfaces terse lo0
Interface Admin Link Proto Local Remote
lo0 up up
lo0.0 up up inet 10.255.41.175 --> 0/0
127.0.0.1 --> 0/0
iso 47.0005.80ff.f800.0000.0108.0003.0102.5501.4175.00
inet6 fe80::2a0:a5ff:fe12:2b09
feee::10:255:14:175
lo0.1 up up inet 10.10.10.11 --> 0/0
iso 47.1111.1111.1111.1112.00
lo0.2 up up inet 10.20.20.21 --> 0/0
iso 47.2222.2222.2222.2223.00
lo0.16383 up up inet
user@P0> show ospf neighbor
Address Interface State ID Pri Dead
10.31.2.1 fe-1/1/3.3 Full 10.255.41.173 128 34
10.31.3.2 so-1/2/0.3 Full 10.255.41.179 128 37
路由器 P0 状态：逻辑系统 LS1
目的
验证路由协议操作。
行动
user@P0> show isis adjacency logical-system LS1
Interface System L State Hold (secs) SNPA
fe-1/1/3.1 PE1 2 Up 21 0:90:69:9:4:1
fe-1/1/3.1 PE1 1 Up 24 0:90:69:9:4:1
so-1/2/0.1 PE2 3 Up 25
user@P0> show bgp summary logical-system LS1
BGP is not running
user@P0> show route protocol isis logical-system LS1
inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.10.10.10/32 *[IS-IS/15] 00:09:15, metric 10
> to 10.11.2.1 via fe-1/1/3.1
10.10.10.12/32 *[IS-IS/15] 00:09:39, metric 10
> to 10.11.3.2 via so-1/2/0.1
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
mpls.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
路由器 P0 状态：逻辑系统 LS2
目的
验证路由协议操作。
行动
user@P0> show bgp summary logical-system LS2
BGP is not running
user@P0> show isis adjacency logical-system LS2
Interface System L State Hold (secs) SNPA
fe-1/1/3.0 PE1 2 Up 24 0:90:69:9:4:1
fe-1/1/3.0 PE1 1 Up 23 0:90:69:9:4:1
so-1/2/0.0 PE2 3 Up 24
user@P0> show route protocol isis logical-system LS2
inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.20.20.20/32 *[IS-IS/15] 00:09:44, metric 10
> to 10.1.2.1 via fe-1/1/3.0
10.20.20.22/32 *[IS-IS/15] 00:09:45, metric 10
> to 10.1.3.2 via so-1/2/0.0
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
mpls.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
路由器 PE2 状态：主路由器
目的
验证路由协议操作。
行动
user@PE2> show ospf neighbor Address Interface State ID Pri Dead 10.31.4.2 fe-0/2/3.0 Full 10.255.41.180 128 38 10.31.3.1 so-1/2/0.3 Full 10.255.41.175 128 36
user@PE2> show interfaces terse lo0
Interface Admin Link Proto Local Remote
lo0 up up
lo0.0 up up inet 10.255.41.179 --> 0/0
127.0.0.1 --> 0/0
iso 47.0005.80ff.f800.0000.0108.0003.0102.5501.4179.00
inet6 fe80::2a0:a5ff:fe12:29ff
feee::10:255:14:179
lo0.1 up up inet 10.10.10.12 --> 0/0
iso 47.1111.1111.1111.1113.00
lo0.2 up up inet 10.20.20.22 --> 0/0
iso 47.2222.2222.2222.2224.00
lo0.16383 up up inet
user@PE2> show bgp summary
Groups: 1 Peers: 2 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0 1 1 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/DwnState|#Active/Received/Damped...
10.255.41.175 500 24 27 0 0 11:46 0/0/0 0/0/0
10.255.41.173 500 25 25 0 0 11:11 1/1/0 0/0/0
user@PE2> show route protocol ospf
inet.0: 20 destinations, 22 routes (19 active, 0 holddown, 1 hidden)
+ = Active Route, - = Last Active, * = Both
10.255.41.175/32 *[OSPF/10] 00:00:20, metric 1
> via so-1/2/0.3
10.255.41.180/32 [OSPF/10] 00:00:20, metric 1
> to 10.31.4.2 via fe-0/2/3.0
10.255.41.173/32 *[OSPF/10] 00:00:20, metric 2
> via so-1/2/0.3
10.31.2.0/24 *[OSPF/10] 00:00:20, metric 2
> via so-1/2/0.3
10.31.3.0/24 [OSPF/10] 00:00:20, metric 1
> via so-1/2/0.3
224.0.0.5/32 *[OSPF/10] 00:13:46, metric 1
MultiRecv
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
inet6.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
user@PE2> show route protocol bgp
inet.0: 20 destinations, 22 routes (19 active, 0 holddown, 1 hidden)
+ = Active Route, - = Last Active, * = Both
10.255.41.177/32 *[BGP/170] 00:11:23, localpref 100, from 10.255.41.173
AS path: I
> via so-1/2/0.3
iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
inet6.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
路由器 PE2 状态：逻辑系统 LS1
目的
验证路由协议操作。
行动
user@PE2> show bgp summary logical-system LS1 Groups: 2 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending inet.0 0 0 0 0 0 0 inet.2 0 0 0 0 0 0 bgp.l3vpn.0 4 4 0 0 0 0 bgp.l3vpn.2 0 0 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Damped... 10.10.10.10 100 29 31 0 0 11:25 Establ bgp.l3vpn.0: 4/4/0 bgp.l3vpn.2: 0/0/0 blue.inet.0: 2/2/0 red.inet.0: 2/2/0 10.21.4.2 300 27 28 0 0 11:40 Establ blue.inet.0: 1/1/0
红色 VPN
user@PE2> show route logical-system LS1 table red
red.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.11.1.0/24 *[BGP/170] 00:12:02, localpref 100, from 10.10.10.10
AS path: I
> via so-1/2/0.1, label-switched-path to_10.10.10.10
10.11.1.100/32 *[BGP/170] 00:12:02, MED 1, localpref 100, from 10.10.10.10
AS path: I
> via so-1/2/0.1, label-switched-path to_10.10.10.10
10.11.4.0/24 *[Direct/0] 00:13:22
> via fe-0/2/1.0
10.11.4.1/32 *[Local/0] 00:13:29
Local via fe-0/2/1.0
10.11.4.100/32 *[OSPF/10] 00:12:35, metric 1
> to 10.11.4.2 via fe-0/2/1.0
224.0.0.5/32 *[OSPF/10] 00:15:02, metric 1
MultiRecv
蓝色 VPN
user@PE2> show route logical-system LS1 table blue
blue.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.21.1.0/24 *[BGP/170] 00:13:12, localpref 100, from 10.10.10.10
AS path: I
> via so-1/2/0.1, label-switched-path to_10.10.10.10
10.21.1.100/32 *[BGP/170] 00:13:12, localpref 100, from 10.10.10.10
AS path: 200 I
> via so-1/2/0.1, label-switched-path to_10.10.10.10
10.21.4.0/24 *[Direct/0] 00:14:32
> via fe-0/2/2.0
10.21.4.1/32 *[Local/0] 00:14:39
Local via fe-0/2/2.0
10.21.4.100/32 *[BGP/170] 00:13:27, localpref 100
AS path: 300 I
> to 10.21.4.2 via fe-0/2/2.0
user@PE2> show mpls lsp logical-system LS1
Ingress LSP: 1 sessions
To From State Rt ActivePath P LSPname
10.10.10.10 10.10.10.12 Up 0 * to_10.10.10.10
Total 1 displayed, Up 1, Down 0
Egress LSP: 1 sessions
To From State Rt Style Labelin Labelout LSPname
10.10.10.12 10.10.10.10 Up 0 1 FF 3 - to_10.10.10.12
Total 1 displayed, Up 1, Down 0
Transit LSP: 0 sessions
Total 0 displayed, Up 0, Down 0
user@PE2> show rsvp session logical-system LS1
Ingress RSVP: 1 sessions
To From State Rt Style Labelin Labelout LSPname
10.10.10.10 10.10.10.12 Up 0 1 FF - 100000 to_10.10.10.10
Total 1 displayed, Up 1, Down 0
Egress RSVP: 1 sessions
To From State Rt Style Labelin Labelout LSPname
10.10.10.12 10.10.10.10 Up 0 1 FF 3 - to_10.10.10.12
Total 1 displayed, Up 1, Down 0
Transit RSVP: 0 sessions
Total 0 displayed, Up 0, Down 0
路由器 PE2 状态：逻辑系统 LS2
目的
验证路由协议操作。
行动
user@PE2> show vpls connections logical-system LS2
Layer-2 VPN Connections:
Legend for connection status (St)
OR -- out of range WE -- intf encaps != instance encaps
EI -- encapsulation invalid Dn -- down
EM -- encapsulation mismatch VC-Dn -- Virtual circuit down
CM -- control-word mismatch -> -- only outbound conn is up
CN -- circuit not provisioned <- -- only inbound conn is up
OL -- no outgoing label Up -- operational
NC -- intf encaps not CCC/TCC XX -- unknown
NP -- intf h/w not present
Legend for interface status
Up -- operational
Dn -- down
Instance: new
Local site: newPE (2)
connection-site Type St Time last up # Up trans
1 rmt Up Jul 16 14:05:25 2003 1
Local interface: vt-1/1/0.40960, Status: Up, Encapsulation: VPLS
Remote PE: 10.20.20.20, Negotiated control-word: No
Incoming label: 800000, Outgoing label: 800001
user@PE2> show bgp summary logical-system LS2 Groups: 1 Peers: 1 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending bgp.l2vpn.0 1 1 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/DwnState|#Active/Received/Damped... 10.20.20.20 400 29 31 0 0 13:29 Establ bgp.l2vpn.0: 1/1/0 new.l2vpn.0: 1/1/0
user@PE2> show mpls lsp logical-system LS2 Ingress LSP: 1 sessions To From State Rt ActivePath P LSPname 10.20.20.20 10.20.20.22 Up 0 * to_10.20.20.20 Total 1 displayed, Up 1, Down 0 Egress LSP: 1 sessions To From State Rt Style Labelin Labelout LSPname 10.20.20.22 10.20.20.20 Up 0 1 FF 3 - to_10.20.20.22 Total 1 displayed, Up 1, Down 0 Transit LSP: 0 sessions Total 0 displayed, Up 0, Down 0 user@PE2> show rsvp session logical-system LS2 Ingress RSVP: 1 sessions To From State Rt Style Labelin Labelout LSPname 10.20.20.20 10.20.20.22 Up 0 1 FF - 100016 to_10.20.20.20 Total 1 displayed, Up 1, Down 0 Egress RSVP: 1 sessions To From State Rt Style Labelin Labelout LSPname 10.20.20.22 10.20.20.20 Up 0 1 FF 3 - to_10.20.20.22 Total 1 displayed, Up 1, Down 0 Transit RSVP: 0 sessions Total 0 displayed, Up 0, Down 0
路由器 CE5 状态
目的
验证连接性。
行动
user@CE5> show route table
inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.11.1.0/24 *[OSPF/150] 00:19:47, metric 0, tag 3489661028
> to 10.11.4.1 via fe-0/3/1.0
10.11.1.100/32 *[OSPF/10] 00:19:47, metric 2
> to 10.11.4.1 via fe-0/3/1.0
10.11.4.0/24 *[Direct/0] 00:21:12
> via fe-0/3/1.0
10.11.4.2/32 *[Local/0] 00:21:24
Local via fe-0/3/1.0
10.11.4.100/32 *[Direct/0] 00:22:37
> via lo0.0
224.0.0.5/32 *[OSPF/10] 00:22:44, metric 1
MultiRecv
路由器 CE6 状态
目的
验证连接性。
行动
user@CE6> show route table
inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.21.1.0/24 *[BGP/170] 00:19:53, localpref 100
AS path: 100 I
> to 10.21.4.1 via fe-0/3/2.0
10.21.1.100/32 *[BGP/170] 00:19:53, localpref 100
AS path: 100 200 I
> to 10.21.4.1 via fe-0/3/2.0
10.21.4.0/24 *[Direct/0] 00:21:16
> via fe-0/3/2.0
10.21.4.2/32 *[Local/0] 00:21:28
Local via fe-0/3/2.0
10.21.4.100/32 *[Direct/0] 00:22:41
> via lo0.0
路由器 CE7 状态
目的
验证连接性。
行动
user@CE7> show route table
inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.1.1.0/24 *[Direct/0] 00:21:03
> via fe-0/3/0.0
10.1.1.2/32 *[Local/0] 00:21:15
Local via fe-0/3/0.0
逻辑系统管理员验证输出
目的
由于逻辑系统管理员只能访问其分配到的逻辑系统的配置信息，因此验证输出也仅限于这些逻辑系统。以下输出显示此配置中逻辑系统管理员 LS1-admin 看到的结果。
要验证每对 客户边缘 路由器是否具有端到端连接，请发出有关路由器 ping CE1、CE2 和 CE3 的命令：
行动
从 CE1 ping CE5（红色 VPN）。
从 CE2 ping CE6（蓝色 VPN）。
从 CE3 ping CE7 （VPLS）。
user@CE1> ping 10.11.4.100 PING 10.11.4.100 (10.11.4.100): 56 data bytes 64 bytes from 10.11.4.100: icmp_seq=0 ttl=252 time=1.216 ms 64 bytes from 10.11.4.100: icmp_seq=1 ttl=252 time=1.052 ms ^C --- 10.11.4.100 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.052/1.134/1.216/0.082 ms
user@CE2> ping 10.21.4.100 PING 10.21.4.100 (10.21.4.100): 56 data bytes 64 bytes from 10.21.4.100: icmp_seq=0 ttl=252 time=1.205 ms 64 bytes from 10.21.4.100: icmp_seq=1 ttl=252 time=1.021 ms ^C --- 10.21.4.100 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.021/1.113/1.205/0.092 ms
user@CE3> ping 10.1.1.2 PING 10.1.1.2 (10.1.1.2): 56 data bytes 64 bytes from 10.1.1.2: icmp_seq=0 ttl=255 time=1.186 ms 64 bytes from 10.1.1.2: icmp_seq=1 ttl=255 time=1.091 ms 64 bytes from 10.1.1.2: icmp_seq=2 ttl=255 time=1.081 ms ^C --- 10.1.1.2 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.081/1.119/1.186/0.047 ms