EN ESTA PÁGINA
Ejemplo: Configuración de FEC recursivo de LDP multipunto
Nota:
Nuestro equipo de pruebas de contenido ha validado y actualizado este ejemplo.
Utilice este ejemplo de configuración para configurar y comprobar la clase de equivalencia de reenvío recursivo (FEC) del Protocolo de distribución de etiquetas multipunto (LDP) en una red OSPF. Esto permite formar túneles MLDP punto a multipunto (P2MP) entre dos sistemas autónomos (AS) cuando la red troncal no tiene una ruta directa al nodo raíz.
Consejo:
|
Tiempo de lectura |
45 minutos |
|
Tiempo de configuración |
1 hora |
Ejemplo de requisitos previos
|
Requisitos de hardware |
Enrutadores serie MX como CE, PE e intermedios. |
|
Requisitos de software |
Junos OS versión 23.4R1 o posterior ejecutándose en todos los dispositivos. |
Antes de empezar
|
Ventajas |
La clase de equivalencia de reenvío recursivo (FEC) LDP multipunto (MLDP) es útil en una implementación en la que los enrutadores intermedios no tienen la ruta para llegar al nodo raíz. |
|
Saber más |
Descripción general funcional
|
Tecnologías utilizadas |
|
|
Tareas de verificación primarias |
|
Información general sobre la topología
En este ejemplo de configuración se muestra un sistema host capaz de enviar tráfico de multidifusión y un sistema host capaz de recibir tráfico de multidifusión. Muestra dos sistemas autónomos (AS); AS65010 que consta de enrutadores PE1, P1 y ASBR1 y AS65020 que consta de enrutadores PE2, P2 y ASBR2. Todos los enrutadores de un AS ejecutan OSPF como IGP. Todos los routers pertenecen al área 0. Los dispositivos perimetrales del cliente (CE) usan el emparejamiento EBGP para intercambiar rutas con su dispositivo perimetral de proveedor como parte de un servicio VPN de capa 3. Los dispositivos PE utilizan IBGP para intercambiar rutas IPv4 con el PE remoto.
Los enrutadores perimetral del proveedor (PE2) y enrutador de borde AS (ASBR2) tienen enrutamiento al PE1 raíz. Sin embargo, los enrutadores P (P1 y P2) no tienen una ruta hacia la raíz. El túnel MLDP P2MP se forma a partir de los enrutadores de salida (PE2) y entrada (PE1) para pasar el elemento FEC a través de mLDP.
|
Nombre de host |
Función |
Función |
|---|---|---|
|
Dispositivo CE remoto. |
Emparejamiento EBGP con enrutador PE1 para anunciar y aprender direcciones de bucle invertido de dispositivos CE. |
|
|
Dispositivo de PE local. |
El nodo raíz al que intentan llegar los enrutadores intermedios de otro AS en un escenario en el que no hay una ruta directa a PE1. |
|
|
Dispositivo intermedio P1. |
Enrutador intermedio que no tiene ruta al enrutador PE2. Recibe PE1-FEC de ASBR1 y lo procesa como un FEC LDP P2MP normal. |
|
|
Enrutador de borde AS ASBR1 |
EBGP par al enrutador ASBR2 para anunciar y aprender rutas IGP. El ASBR1 encuentra la ruta a la raíz (que es una ruta IGP) y reemplaza ASBR1-FEC con el contenido del valor opaco recursivo (PE1-FEC) antes de realizar cualquier procesamiento adicional. |
|
|
Enrutador de borde AS ASBR2 |
EBGP par al enrutador ASBR1 para anunciar y aprender rutas IGP. Actúa como nodo raíz para P2 y realiza una búsqueda para encontrar la ruta a la raíz real (PE1). Determina que la ruta a PE1 es una ruta BGP y forma un FEC recursivo LDP con ASBR1 a PE1. |
|
|
Dispositivo intermedio P2. |
Enrutador intermedio que no tiene ruta al enrutador PE1. Recibe el elemento FEC de PE2 a través de mLDP. Sin embargo, no puede utilizar el mismo elemento FEC, porque no tiene ruta a PE1. |
|
|
Dispositivo de PE local. |
PE2 crea un elemento FEC de MP con la dirección de PE1 como dirección de nodo raíz para formar un túnel P2MP de PE2 a PE1 raíz. |
|
|
Dispositivo CE remoto. |
Emparejamiento EBGP con enrutador PE2 para anunciar y aprender direcciones de bucle invertido de dispositivos CE. |
Ilustración de topología
Figura 1: FEC de MLDP para interAS con valor opaco recursivo en el escenario de la opción C de MVPN
Pasos de configuración de PE1
Nota:
Para obtener ejemplos completos de configuraciones en PE1, consulte:
En esta sección se destacan las principales tareas de configuración necesarias para configurar el dispositivo PE1 en este ejemplo. El primer paso es común a la configuración de un servicio VPN básico de capa 3. El siguiente conjunto de pasos es específico para configurar la FEC recursiva. Ambos dispositivos PE tienen una configuración similar, aquí nos centramos en PE1.
Primero, aprovisione la VPN general de capa 3:
-
Configure y numere las interfaces de circuito cerrado, núcleo y CE para IPv4. Asegúrese de habilitar la familia en las interfaces orientadas al núcleo que se conectan a los dispositivos P para admitir la
mplsconmutación MPLS. -
Configure un número de sistema autónomo.
-
Configure OSPF de área única en las interfaces de circuito cerrado y núcleo.
-
Configure LDP, MPLS en todas las interfaces.
-
Configure la sesión de emparejamiento del IBGP para que incluya la familia de direcciones que admita VPN
inet-vpnde capa 3 de IPv4. Configure una instancia de enrutamiento basada en VRF para el dispositivo CE1. Utilice EBGP como protocolo de enrutamiento PE-CE.
[edit] set interfaces ge-0/0/0 description "CONNECTED TO CE1" set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.2/30 set interfaces ge-0/0/1 unit 0 family inet address 10.1.23.1/24 set interfaces ge-0/0/1 unit 0 family mpls set interfaces lo0 unit 0 family inet address 192.168.100.2/32 set interfaces lo0 unit 1 family inet address 192.168.102.1/32
[edit] set chassis network-services enhanced-ip
[edit] set routing-instances VPN1 instance-type vrf set routing-instances VPN1 protocols bgp group CE1-PE1 type external set routing-instances VPN1 protocols bgp group CE1-PE1 family inet unicast set routing-instances VPN1 protocols bgp group CE1-PE1 export EXPORT-LOCAL-ROUTES set routing-instances VPN1 protocols bgp group CE1-PE1 peer-as 65101 set routing-instances VPN1 protocols bgp group CE1-PE1 local-as 65100 set routing-instances VPN1 protocols bgp group CE1-PE1 neighbor 172.16.1.1 set routing-instances VPN1 interface ge-0/0/0.0 set routing-instances VPN1 interface lo0.1 set routing-instances VPN1 route-distinguisher 192.168.100.2:1 set routing-instances VPN1 vrf-table-label
[edit] set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.100.2 set protocols bgp group INT family inet labeled-unicast resolve-vpn set protocols bgp group INT family inet-vpn any set protocols bgp group INT family inet-mvpn signaling set protocols bgp group INT peer-as 65100 set protocols bgp group INT local-as 65100 set protocols bgp group INT neighbor 192.168.100.3 set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf area 0.0.0.0 interface all set protocols ospf area 0.0.0.0 interface fxp0.0 disable set protocols ldp interface all set protocols ldp interface fxp0.0 disable set protocols mpls interface all set protocols mpls interface fxp0.0 disable
[edit] set routing-options router-id 192.168.100.2 set routing-options autonomous-system 65100
-
Configure el modo para que los mensajes de unión de C-PIM usen árboles de puntos de encuentro y cambie al árbol de ruta más corta después de conocer el origen.
[edit] set routing-instances VPN1 protocols mvpn mvpn-mode rpt-spt set routing-instances VPN1 provider-tunnel ldp-p2mp set routing-instances VPN1 vrf-target target:1:1
Configure PIM para habilitar el enrutamiento de multidifusión de PE a CE.
[edit] set routing-instances VPN1 protocols pim rp static address 192.168.100.1
Habilite PIM en las interfaces conectadas al enrutador CE.
[edit] set routing-instances VPN1 protocols pim interface lo0.1 set routing-instances VPN1 protocols pim interface ge-0/0/0.0
Configure el LSP dinámico selectivo de punto a multipunto y especifique el umbral de datos necesario antes de crear el nuevo túnel.
[edit] set routing-instances VPN1 provider-tunnel selective group 225.1.1.1/32 source 172.16.12.1/32 ldp-p2mp set routing-instances VPN1 provider-tunnel selective group 225.1.1.1/32 source 172.16.12.1/32 threshold-rate 1
Configure la FEC de LDP recursiva punto a multipunto.
[edit] set protocols ldp p2mp recursive fec
Configure las directivas de enrutamiento.
[edit] set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 from protocol direct set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 then accept
Verificación
| Comando | Tarea de verificación |
|---|---|
| Mostrar descripción general de LDP | Compruebe Recursive fec que está habilitado en la información general de LDP. |
| Mostrar base de datos LDP | Compruebe las etiquetas anunciadas como información de enlace punto a multipunto en la base de datos LDP. |
| mostrar ruta p2mp de ldp | Verifique la información de LDP P2MP FEC. |
| Mostrar LDP P2MP FEC | Compruebe los LSP de LDP P2MP. |
- Verifique el FEC recursivo en la información general de LDP.
- Verificar la etiqueta anunciada
- Verificar la información de FEC P2MP
- Verificar la información de la ruta P2MP
Verifique el FEC recursivo en la información general de LDP.
Propósito
Para confirmar recursive FEC está habilitado y se muestra en la información general de PE1 LDP.
Acción
Desde el modo operativo, ingrese el comando show ldp overview.
user@PE1 show ldp overview
Instance: master
Reference count: 3
Router ID: 192.168.100.2
LDP inet: enabled
Transport preference: IPv4
Message id: 33
Configuration sequence: 12
Deaggregate: disabled
Explicit null: disabled
IPv6 tunneling: disabled
Strict targeted hellos: disabled
Loopback if added: yes
Route preference: 9
P2MP max branches: 4096
Unicast transit LSP chaining: disabled
P2MP transit LSP chaining: disabled
Transit LSP statistics based on route statistics: disabled
LDP route acknowledgement: enabled
BGP export: enabled
No TTL propagate: disabled
LDP mtu discovery: disabled
LDP SR Mapping Client: disabled
Capabilities enabled: p2mp, make-before-break
Egress FEC capabilities enabled: entropy-label-capability
Downstream unsolicited Sessions:
Operational: 1
Retention: liberal
Control: ordered
Auto targeted sessions:
Auto targeted: disabled
Dynamic tunnel session count: 0
P2MP:
Recursive route: disabled
Recursive fec: enabled
No rsvp tunneling: disabled
Timers:
Keepalive interval: 10, Keepalive timeout: 30
Link hello interval: 5, Link hello hold time: 15
Targeted hello interval: 15, Targeted hello hold time: 45
Label withdraw delay: 60, Make before break timeout: 30
Make before break switchover delay: 3
Link protection timeout: 120
Graceful restart:
Restart: disabled, Helper: enabled, Restart in process: false
Reconnect time: 60000, Max neighbor reconnect time: 120000
Recovery time: 160000, Max neighbor recovery time: 240000
Traffic Engineering:
Bgp igp: disabled
Both ribs: disabled
Mpls forwarding: disabled
IGP:
Tracking igp metric: disabled
Sync session up delay: 10
Session protection:
Session protection: disabled
Session protection timeout: 0
Interface addresses advertising:
10.1.23.1
192.168.100.2
LDP Job:
Read job time quantum: 1000, Write job time quantum: 1000
Read job loop quantum: 100, Write job loop quantum: 100
Backup inbound read job time quantum: 1000, Backup outbound read job time quantum: 1000
Backup inbound read job loop quantum: 100, Backup outbound read job loop quantum: 100
Label allocation:
Current number of LDP labels allocated: 2
Total number of LDP labels allocated: 51
Total number of LDP labels freed: 49
Total number of LDP label allocation failure: 0
Current number of labels allocated by all protocols: 0Significado
La salida confirma que el efecto recursivo está habilitado en PE1.
Verificar la etiqueta anunciada
Propósito
Verifique las etiquetas anunciadas de ASBR1 y recibidas por PE1.
Acción
Desde el modo operativo, ingrese el comando show ldp database.
En ASBR1
user@ASBR1 show ldp database
Input label database, 192.168.100.4:0--192.168.100.5:0
Labels received: 5
Label Prefix
145 192.168.100.4/32
3 192.168.100.5/32
139 192.168.100.6/32
140 192.168.100.7/32
144 P2MP root-addr 192.168.100.2, lsp-id 16777220 next-root:192.168.100.4
Output label database, 192.168.100.4:0--192.168.100.5:0
Labels advertised: 4
Label Prefix
3 192.168.100.4/32
164 192.168.100.5/32
159 192.168.100.2/32
158 192.168.100.3/32
Input label database, 192.168.100.4:0--192.168.100.3:0
Labels received: 3
Label Prefix
125 192.168.100.4/32
88 192.168.100.2/32
3 192.168.100.3/32
Output label database, 192.168.100.4:0--192.168.100.3:0
Labels advertised: 5
Label Prefix
3 192.168.100.4/32
164 192.168.100.5/32
159 192.168.100.2/32
158 192.168.100.3/32
163 P2MP root-addr 192.168.100.2, lsp-id 16777220En PE1
user@PE1 show ldp database
Input label database, 192.168.100.2:0--192.168.100.3:0
Labels received: 4
Label Prefix
125 192.168.100.4/32
88 192.168.100.2/32
3 192.168.100.3/32
129 P2MP root-addr 192.168.100.2, lsp-id 16777220
Output label database, 192.168.100.2:0--192.168.100.3:0
Labels advertised: 3
Label Prefix
107 192.168.100.4/32
3 192.168.100.2/32
104 192.168.100.3/32Significado
Puede ver la etiqueta 3 anunciada de ASBR1 y la etiqueta 3 recibida por PE1.
Verificar la información de FEC P2MP
Propósito
Verifique la información de FEC de LDP P2MP de ASBR2.
Acción
Desde el modo operativo, ingrese el comando show ldp p2mp fec extensive.
user@PE2 show ldp p2mp fec extensive LDP P2MP FECs: P2MP root-addr 192.168.100.2, lsp-id 16777220 next-root: 192.168.100.5 Fec type: Egress (Active) Label: 52, Reference count: 1
user@ASBR2 show ldp p2mp fec extensive LDP P2MP FECs: P2MP root-addr 192.168.100.2, lsp-id 16777220 Fec type: Transit (Active) Label: 144, Reference count: 1
Significado
El resultado muestra que PE2 forma un FEC recursivo LDP para encontrar la ruta a la raíz real (PE1).
Verificar la información de la ruta P2MP
Propósito
Compruebe la información de la ruta de acceso P2MP de LDP de PE2.
Acción
Desde el modo operativo, ingrese el comando show ldp p2mp path extensive.
user@PE2 show ldp p2mp path extensive P2MP path type: Transit/Egress Output Session (label): 192.168.100.6:0 (52) (Primary) Egress label: 52 Attached FECs: P2MP root-addr 192.168.100.2, lsp-id 16777220 next-root:192.168.100.5 (Active) Address: 0x76f69e0, Reference count: 2
Significado
El resultado muestra PE2 con el elemento FEC, en el que la dirección del nodo raíz es la dirección del protocolo del próximo salto ASBR2.
Apéndice 1: Establecer comandos en todos los dispositivos
Para configurar rápidamente este ejemplo, copie los siguientes comandos, péguelos en un archivo de texto, elimine los saltos de línea, cambie los detalles necesarios para que coincidan con su configuración de red y, luego, copie y pegue los comandos en la CLI en el nivel de jerarquía [edit].
Nota:
Usamos sistemas lógicos para representar la fuente y el receptor para este ejemplo.
CE1
set system host-name CE1-source set logical-systems source interfaces lt-0/0/0 unit 12 encapsulation ethernet set logical-systems source interfaces lt-0/0/0 unit 12 peer-unit 11 set logical-systems source interfaces lt-0/0/0 unit 12 family inet address 172.16.12.1/30 set logical-systems source interfaces lo0 unit 12 family inet address 192.168.12.12/32 set logical-systems source protocols ospf area 0.0.0.0 interface all set logical-systems source protocols ospf area 0.0.0.0 interface lo0.12 passive set logical-systems source protocols pim rp static address 192.168.100.1 set logical-systems source protocols pim interface lt-0/0/0.12 set chassis fpc 0 pic 0 tunnel-services set chassis network-services enhanced-ip set interfaces lt-0/0/0 description "CONNECTED TO source" set interfaces lt-0/0/0 unit 11 encapsulation ethernet set interfaces lt-0/0/0 unit 11 peer-unit 12 set interfaces lt-0/0/0 unit 11 family inet address 172.16.12.2/30 set interfaces ge-0/0/1 description "CONNECTED TO PE1" set interfaces ge-0/0/1 unit 0 family inet address 172.16.1.1/30 set interfaces lo0 unit 0 family inet address 192.168.100.1/32 set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 from protocol direct set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 then accept set routing-options router-id 192.168.100.1 set routing-options autonomous-system 65101 set protocols bgp group CE1-PE1 type external set protocols bgp group CE1-PE1 family inet unicast set protocols bgp group CE1-PE1 export EXPORT-LOCAL-ROUTES set protocols bgp group CE1-PE1 peer-as 65100 set protocols bgp group CE1-PE1 local-as 65101 set protocols bgp group CE1-PE1 neighbor 172.16.1.2 set protocols ospf area 0.0.0.0 interface all set protocols ospf area 0.0.0.0 interface fxp0.0 disable set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols pim rp local family inet address 192.168.100.1 set protocols pim interface lo0.0 set protocols pim interface ge-0/0/1.0 set protocols pim interface lt-0/0/0.11
PE1
set system host-name PE1 set chassis network-services enhanced-ip set interfaces ge-0/0/0 description "CONNECTED TO CE1" set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.2/30 set interfaces ge-0/0/1 description "CONNECTED TO P1" set interfaces ge-0/0/1 unit 0 family inet address 10.1.23.1/24 set interfaces ge-0/0/1 unit 0 family mpls set interfaces lo0 unit 0 family inet address 192.168.100.2/32 set interfaces lo0 unit 1 family inet address 192.168.102.1/32 set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 from protocol direct set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 then accept set routing-instances VPN1 instance-type vrf set routing-instances VPN1 protocols bgp group CE1-PE1 type external set routing-instances VPN1 protocols bgp group CE1-PE1 family inet unicast set routing-instances VPN1 protocols bgp group CE1-PE1 export EXPORT-LOCAL-ROUTES set routing-instances VPN1 protocols bgp group CE1-PE1 peer-as 65101 set routing-instances VPN1 protocols bgp group CE1-PE1 local-as 65100 set routing-instances VPN1 protocols bgp group CE1-PE1 neighbor 172.16.1.1 set routing-instances VPN1 protocols mvpn mvpn-mode rpt-spt set routing-instances VPN1 protocols pim rp static address 192.168.100.1 set routing-instances VPN1 protocols pim interface lo0.1 mode sparse set routing-instances VPN1 protocols pim interface ge-0/0/0.0 mode sparse set routing-instances VPN1 interface ge-0/0/0.0 set routing-instances VPN1 interface lo0.1 set routing-instances VPN1 route-distinguisher 192.168.100.2:1 set routing-instances VPN1 vrf-target target:1:1 set routing-instances VPN1 vrf-table-label set routing-instances VPN1 provider-tunnel ldp-p2mp set routing-instances VPN1 provider-tunnel selective group 225.1.1.1/32 source 172.16.12.1/32 ldp-p2mp set routing-instances VPN1 provider-tunnel selective group 225.1.1.1/32 source 172.16.12.1/32 threshold-rate 51 set routing-options router-id 192.168.100.2 set routing-options autonomous-system 65100 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.100.2 set protocols bgp group INT family inet labeled-unicast resolve-vpn set protocols bgp group INT family inet-vpn any set protocols bgp group INT family inet-mvpn signaling set protocols bgp group INT peer-as 65100 set protocols bgp group INT local-as 65100 set protocols bgp group INT neighbor 192.168.100.3 set protocols ldp interface all set protocols ldp interface fxp0.0 disable set protocols ldp p2mp recursive fec set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive
P1
set system host-name P1 set chassis network-services enhanced-ip set interfaces ge-0/0/0 unit 0 family inet address 10.1.23.2/24 set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 unit 0 family inet address 10.1.34.1/24 set interfaces ge-0/0/1 unit 0 family mpls set interfaces lo0 unit 0 family inet address 192.168.100.3/32 set routing-options router-id 192.168.100.3 set routing-options autonomous-system 65100 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.100.3 set protocols bgp group INT family inet labeled-unicast resolve-vpn set protocols bgp group INT family inet-vpn any set protocols bgp group INT family inet-mvpn signaling set protocols bgp group INT cluster 192.168.100.3 set protocols bgp group INT local-as 65100 set protocols bgp group INT neighbor 192.168.100.2 set protocols bgp group INT neighbor 192.168.100.4 set protocols bgp group eBGP_PE_PE type external set protocols bgp group eBGP_PE_PE multihop ttl 25 set protocols bgp group eBGP_PE_PE local-address 192.168.100.3 set protocols bgp group eBGP_PE_PE family inet-vpn any set protocols bgp group eBGP_PE_PE family inet-mvpn signaling set protocols bgp group eBGP_PE_PE neighbor 192.168.100.6 peer-as 65200 set protocols ldp interface all set protocols ldp interface fxp0.0 disable set protocols ldp p2mp recursive route set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive
ASBR1
set system host-name ASBR1 set chassis network-services enhanced-ip set interfaces ge-0/0/0 unit 0 family inet address 10.1.34.2/24 set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 unit 0 family inet address 10.1.45.1/24 set interfaces ge-0/0/1 unit 0 family iso set interfaces ge-0/0/1 unit 0 family mpls set interfaces lo0 unit 0 family inet address 192.168.100.4/32 set interfaces lo0 unit 0 family iso address 49.0001.0040.0400.4004.00 set policy-options policy-statement To-ASBR2 term 1 from route-filter 192.168.100.2/32 exact set policy-options policy-statement To-ASBR2 term 1 from route-filter 192.168.100.3/32 exact set policy-options policy-statement To-ASBR2 term 1 then accept set policy-options policy-statement To-ASBR2 term 2 then reject set policy-options policy-statement from-direct term 1 from interface lo0.0 set policy-options policy-statement from-direct term 1 then accept set policy-options policy-statement from-ospf term 1 from protocol ospf set policy-options policy-statement from-ospf term 1 then accept set routing-options router-id 192.168.100.4 set routing-options autonomous-system 65100 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.100.4 set protocols bgp group INT family inet labeled-unicast resolve-vpn set protocols bgp group INT peer-as 65100 set protocols bgp group INT local-as 65100 set protocols bgp group INT neighbor 192.168.100.3 set protocols bgp group eBGP_ASBR type external set protocols bgp group eBGP_ASBR multihop ttl 2 set protocols bgp group eBGP_ASBR local-address 192.168.100.4 set protocols bgp group eBGP_ASBR family inet labeled-unicast resolve-vpn set protocols bgp group eBGP_ASBR export from-ospf set protocols bgp group eBGP_ASBR export from-direct set protocols bgp group eBGP_ASBR export To-ASBR2 set protocols bgp group eBGP_ASBR neighbor 192.168.100.5 peer-as 65200 set protocols isis interface ge-0/0/1.0 level 2 disable set protocols isis interface lo0.0 set protocols isis level 2 disable set protocols ldp interface all set protocols ldp interface fxp0.0 disable set protocols ldp p2mp recursive fec set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive
ASBR2
set system host-name ASBR2 set chassis network-services enhanced-ip set interfaces ge-0/0/0 unit 0 family inet address 10.1.45.2/24 set interfaces ge-0/0/0 unit 0 family iso set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 unit 0 family inet address 10.1.56.1/24 set interfaces ge-0/0/1 unit 0 family mpls set interfaces lo0 unit 0 family inet address 192.168.100.5/32 set interfaces lo0 unit 0 family iso address 49.0001.0050.0500.5005.00 set policy-options policy-statement To-ASBR1 term 1 from route-filter 192.168.100.7/32 exact set policy-options policy-statement To-ASBR1 term 1 from route-filter 192.168.100.6/32 exact set policy-options policy-statement To-ASBR1 term 1 then accept set policy-options policy-statement To-ASBR1 term 2 then reject set policy-options policy-statement from-direct term 1 from interface lo0.0 set policy-options policy-statement from-direct term 1 then accept set policy-options policy-statement from-ospf term 1 from protocol ospf set policy-options policy-statement from-ospf term 1 then accept set routing-options router-id 192.168.100.5 set routing-options autonomous-system 65200 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.100.5 set protocols bgp group INT family inet labeled-unicast resolve-vpn set protocols bgp group INT peer-as 65200 set protocols bgp group INT local-as 65200 set protocols bgp group INT neighbor 192.168.100.6 set protocols bgp group eBGP_ASBR type external set protocols bgp group eBGP_ASBR multihop ttl 2 set protocols bgp group eBGP_ASBR local-address 192.168.100.5 set protocols bgp group eBGP_ASBR family inet labeled-unicast resolve-vpn set protocols bgp group eBGP_ASBR export from-ospf set protocols bgp group eBGP_ASBR export from-direct set protocols bgp group eBGP_ASBR export To-ASBR1 set protocols bgp group eBGP_ASBR neighbor 192.168.100.4 peer-as 65100 set protocols isis interface ge-0/0/0.0 level 2 disable set protocols isis interface lo0.0 set protocols isis level 2 disable set protocols ldp interface all set protocols ldp interface fxp0.0 disable set protocols ldp p2mp recursive fec set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive
P2
set system host-name P2 set chassis network-services enhanced-ip set interfaces ge-0/0/0 unit 0 family inet address 10.1.56.2/24 set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 unit 0 family inet address 10.1.67.1/24 set interfaces ge-0/0/1 unit 0 family mpls set interfaces lo0 unit 0 family inet address 192.168.100.6/32 set routing-options router-id 192.168.100.6 set routing-options autonomous-system 65200 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.100.6 set protocols bgp group INT family inet labeled-unicast resolve-vpn set protocols bgp group INT family inet-vpn any set protocols bgp group INT family inet-mvpn signaling set protocols bgp group INT cluster 192.168.100.6 set protocols bgp group INT local-as 65200 set protocols bgp group INT neighbor 192.168.100.5 set protocols bgp group INT neighbor 192.168.100.7 set protocols bgp group eBGP_PE_PE type external set protocols bgp group eBGP_PE_PE multihop ttl 25 set protocols bgp group eBGP_PE_PE local-address 192.168.100.6 set protocols bgp group eBGP_PE_PE family inet-vpn any set protocols bgp group eBGP_PE_PE family inet-mvpn signaling set protocols bgp group eBGP_PE_PE neighbor 192.168.100.3 peer-as 65100 set protocols ldp interface all set protocols ldp interface fxp0.0 disable set protocols ldp p2mp recursive route set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive
PE2
set system host-name PE2 set chassis network-services enhanced-ip set interfaces ge-0/0/0 unit 0 family inet address 10.1.67.2/24 set interfaces ge-0/0/0 unit 0 family mpls set interfaces ge-0/0/1 description "CONNECTED TO CE2" set interfaces ge-0/0/1 unit 0 family inet address 172.16.2.2/30 set interfaces lo0 unit 0 family inet address 192.168.100.7/32 set interfaces lo0 unit 1 family inet address 192.168.100.17/32 set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 from protocol direct set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 then accept set routing-instances VPN2 instance-type vrf set routing-instances VPN2 protocols bgp group PE2-CE2 type external set routing-instances VPN2 protocols bgp group PE2-CE2 family inet unicast set routing-instances VPN2 protocols bgp group PE2-CE2 export EXPORT-LOCAL-ROUTES set routing-instances VPN2 protocols bgp group PE2-CE2 peer-as 65201 set routing-instances VPN2 protocols bgp group PE2-CE2 local-as 65200 set routing-instances VPN2 protocols bgp group PE2-CE2 neighbor 172.16.2.1 set routing-instances VPN2 protocols mvpn mvpn-mode rpt-spt set routing-instances VPN2 protocols pim rp static address 192.168.100.1 set routing-instances VPN2 protocols pim interface lo0.1 mode sparse set routing-instances VPN2 protocols pim interface ge-0/0/1.0 mode sparse set routing-instances VPN2 protocols pim interface all set routing-instances VPN2 interface ge-0/0/1.0 set routing-instances VPN2 interface lo0.1 set routing-instances VPN2 route-distinguisher 192.168.100.17:1 set routing-instances VPN2 vrf-target target:1:1 set routing-instances VPN2 vrf-table-label set routing-options router-id 192.168.100.7 set routing-options autonomous-system 65200 set protocols bgp group INT type internal set protocols bgp group INT local-address 192.168.100.7 set protocols bgp group INT family inet labeled-unicast resolve-vpn set protocols bgp group INT family inet-vpn any set protocols bgp group INT family inet-mvpn signaling set protocols bgp group INT peer-as 65200 set protocols bgp group INT local-as 65200 set protocols bgp group INT neighbor 192.168.100.6 set protocols ldp interface all set protocols ldp interface fxp0.0 disable set protocols ldp p2mp recursive fec set protocols mpls interface all set protocols mpls interface fxp0.0 disable set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive
CE2
set system host-name CE2-receiver set logical-systems receiver interfaces lt-0/0/0 unit 22 encapsulation ethernet set logical-systems receiver interfaces lt-0/0/0 unit 22 peer-unit 21 set logical-systems receiver interfaces lt-0/0/0 unit 22 family inet address 172.16.22.22/30 set logical-systems receiver interfaces lo0 unit 22 family inet address 192.168.22.22/32 set logical-systems receiver protocols ospf area 0.0.0.0 interface all set chassis fpc 0 pic 0 tunnel-services set chassis network-services enhanced-ip set interfaces ge-0/0/0 description "CONNECTED TO PE2" set interfaces ge-0/0/0 unit 0 family inet address 172.16.2.1/30 set interfaces lt-0/0/0 description "CONNECTED FROM CE2 TO receiver" set interfaces lt-0/0/0 unit 21 encapsulation ethernet set interfaces lt-0/0/0 unit 21 peer-unit 22 set interfaces lt-0/0/0 unit 21 family inet address 172.16.22.21/30 set interfaces lo0 unit 0 family inet address 192.168.100.8/32 set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 from protocol direct set policy-options policy-statement EXPORT-LOCAL-ROUTES term 1 then accept set routing-options router-id 192.168.100.8 set routing-options autonomous-system 65201 set protocols bgp group CE2-PE2 type external set protocols bgp group CE2-PE2 family inet unicast set protocols bgp group CE2-PE2 export EXPORT-LOCAL-ROUTES set protocols bgp group CE2-PE2 peer-as 65200 set protocols bgp group CE2-PE2 local-as 65201 set protocols bgp group CE2-PE2 neighbor 172.16.2.2 set protocols igmp interface lt-0/0/0.21 static group 225.1.1.1 set protocols ospf area 0.0.0.0 interface all set protocols ospf area 0.0.0.0 interface fxp0.0 disable set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols pim rp static address 192.168.100.1 set protocols pim interface all set protocols pim interface fxp0.0 disable set protocols sap listen 225.1.1.1 port 5000
Apéndice 2: Mostrar salida de configuración en PE1 y ASBR2
- La configuración completa de PE1 en formato de llave
- La configuración completa de ASBR2 en formato de llave
La configuración completa de PE1 en formato de llave
user@PE1# show | no-more
system {
host-name PE1;
}
interfaces {
ge-0/0/0 {
description "CONNECTED TO CE1";
unit 0 {
family inet {
address 172.16.1.2/30;
}
}
}
ge-0/0/1 {
description "CONNECTED TO P1";
unit 0 {
family inet {
address 10.1.23.1/24;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 192.168.100.2/32;
}
}
unit 1 {
family inet {
address 192.168.102.1/32;
}
}
}
}
policy-options {
policy-statement EXPORT-LOCAL-ROUTES {
term 1 {
from protocol direct;
then accept;
}
}
}
routing-instances {
VPN1 {
instance-type vrf;
protocols {
bgp {
group CE11-PE1 {
type external;
family inet {
unicast;
}
export EXPORT-LOCAL-ROUTES;
peer-as 65101;
local-as 65100;
neighbor 172.16.1.1;
}
}
mvpn {
mvpn-mode {
rpt-spt;
}
}
pim {
rp {
static {
address 192.168.100.1;
}
}
interface lo0.1;
interface ge-0/0/0.0;
}
}
interface ge-0/0/0.0;
interface lo0.1;
route-distinguisher 192.168.100.2:1;
vrf-target target:1:1;
vrf-table-label;
provider-tunnel {
ldp-p2mp;
selective {
group 225.1.1.1/32 {
source 172.16.12.1/32 {
ldp-p2mp;
threshold-rate 1;
}
}
}
}
}
}
routing-options {
router-id 192.168.100.2;
autonomous-system 65100;
nonstop-routing;
}
protocols {
bgp {
group INT {
type internal;
local-address 192.168.100.2;
family inet {
labeled-unicast {
resolve-vpn;
}
}
family inet-vpn {
any;
}
family inet-mvpn {
signaling;
}
export from-direct;
peer-as 65100;
local-as 65100;
neighbor 192.168.100.3;
}
}
ldp {
interface all;
interface fxp0.0 {
disable;
}
p2mp {
recursive {
fec;
}
}
}
mpls {
interface all;
interface fxp0.0 {
disable;
}
}
ospf {
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface all;
interface fxp0.0 {
disable;
}
}
}
}
La configuración completa de ASBR2 en formato de llave
user@ASBR2# show | no-more
system {
host-name ASBR2;
}
interfaces {
ge-0/0/0 {
unit 0 {
family inet {
address 10.1.45.2/24;
}
family iso;
family mpls;
}
}
ge-0/0/1 {
unit 0 {
family inet {
address 10.1.56.1/24;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 192.168.100.5/32;
}
family iso {
address 49.0001.0060.0600.6006.00;
}
}
}
}
policy-options {
policy-statement NHP {
term 1 {
from protocol bgp;
then {
next-hop self;
accept;
}
}
}
policy-statement To-ASBR1 {
term 1 {
from {
route-filter 192.168.100.7/32 exact;
route-filter 192.168.100.6/32 exact;
}
then accept;
}
term 2 {
then reject;
}
}
policy-statement from-direct {
term 1 {
from interface lo0.0;
then accept;
}
}
policy-statement from-ospf {
term 1 {
from protocol ospf;
then accept;
}
}
}
routing-options {
router-id 192.168.100.5;
autonomous-system 65200;
nonstop-routing;
}
protocols {
bgp {
group INT {
type internal;
local-address 192.168.100.5;
family inet {
labeled-unicast {
resolve-vpn;
}
}
peer-as 65200;
local-as 65200;
neighbor 192.168.100.6 {
export NHP;
}
}
group eBGP_ASBR1-ASBR2 {
type external;
local-address 192.168.100.5;
family inet {
labeled-unicast {
resolve-vpn;
}
}
export [ from-ospf from-direct To-ASBR1 ];
neighbor 192.168.100.4 {
multihop;
peer-as 65100;
}
}
}
isis {
interface ge-0/0/0.0 {
level 2 disable;
}
interface lo0.0 {
level 1 {
passive;
}
}
}
ldp {
interface all;
interface fxp0.0 {
disable;
}
p2mp {
recursive {
fec;
}
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface ge-0/0/1.0;
interface lo0.0 {
passive;
}
}
}
}