cisco路由器mplsvpn配置思路

由5臺CISCO7204&成的網(wǎng)絡(luò)，一臺為P路由器，兩臺PE路由器，兩臺CE路由器；二、網(wǎng)絡(luò)描述在P和兩臺PE路由器這間通過OSP呦態(tài)路由協(xié)＜完成MPLS^J絡(luò)的建立，兩臺PE路由器這間啟用BGP各由協(xié)議，在PE路由器上向所屬的CE路由器指VPN各由，在CE路由器中向PE路由器配置靜態(tài)路由。配置思路：1、在P和兩臺PE路由器這間通過OSP呦態(tài)路由協(xié)、議,在P和PE路由器兩兩互連的端口上啟用MPLS兩臺PE之間的路為備份路由，這屬公網(wǎng)路由。2、兩臺PE路由器這間啟用BGP各由協(xié)議，這使得屬于VPN的IP地址能在兩個網(wǎng)絡(luò)（兩臺CE所屬的網(wǎng)絡(luò)）互相發(fā)布，這屬私網(wǎng)（VPN路由。3、在PE路由器上向所屬的CE路由器指VPN各由，這打通了兩個網(wǎng)絡(luò)（兩臺CE所屬的網(wǎng)絡(luò)）之間的路由。三、網(wǎng)絡(luò)拓?fù)鋱DF0/0:172J6.L2/30P路由器(rl)LOOPO:202t98,4.3/32CE1路由器(r5)LOOPO:192.16831/24F1/0:10J,1.5/30F0/0:l0,1.1.9/30PEI路由器(r3)IOOPO:202.98.4J/32F0/0:172.164,1/30PE2路由器(r2)/30FI/0:10,LL6/30F0/0:10.1JJ0/30F1/0:172J62.2/30CE2路由器Mil弛lLOOPOI92.16841/24四、P路由器配置p#SHOWRUNBuildingconfiguration...Currentconfiguration:1172bytesservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnamep!boot-start-markerboot-end-marker!!noaaanew-modelipsubnet-zeroipcefipauditpomax-events100!!interfaceLoopback0ipaddressFastEthernet0/0descriptionto_r2ipaddressipospfcost20duplexfulltag-switchingmtu1508tag-switchingipdescriptionto_r3ipaddressipospfcost20duplexfulltag-switchingmtu1508tag-switchingip!interfaceFastEthernet2/0noipaddressshutdownduplexhalf!interfaceFastEthernet3/0noipaddressshutdownduplexhalf!routerospf100log-adjacency-changesredistributeconnectedsubnetsredistributestaticsubnetsnetworkarea0networkarea0!ipclasslessnoiphttpservernoiphttpsecure-servergatekeepershutdown!!linecon0exec-timeout00loggingsynchronousstopbits1lineaux0stopbits1linevty04login!!endp#五、PE1路由器配置pe1#showrunBuildingconfiguration...Currentconfiguration:1813bytesservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnamepe1!boot-start-markerboot-end-marker!!noaaanew-modelipsubnet-zeroipvrfvpnard1:100route-targetexport200:1route-targetimport200:1!ipcefipauditpomax-events100!!interfaceLoopback0ipaddressdescriptionto_r5ipvrfforwardingvpnaipaddressduplexfulltag-switchingip!interfaceFastEthernet1/0descriptionto_r1ipaddressipospfcost20duplexfulltag-switchingmtu1508tag-switchingip!interfaceFastEthernet2/0ipaddressipospfcost100duplexfulltag-switchingmtu1508tag-switchingip!interfaceFastEthernet3/0noipaddressshutdownduplexhalf!routerospf100log-adjacency-changesredistributeconnectedmetric-type1subnetsnetworkarea0networkarea0routerbgp100nobgpdefaultipv4-unicastbgplog-neighbor-changesneighborremote-as100neighborupdate-sourceLoopback0neighborversion4!address-familyvpnv4neighboractivateneighborsend-communityextendedexit-address-family!address-familyipv4vrfvpnaredistributeconnectedredistributestaticnoauto-summarynosynchronizationexit-address-family!ipclasslessiproutevrfvpnaiphttpservernoiphttpsecure-serveripospfname-lookupgatekeepershutdown!!linecon0exec-timeout00loggingsynchronousstopbits1lineaux0stopbits1linevty04login!!endpe1#六、PE2路由器配置pe2#showrunBuildingconfiguration...Currentconfiguration:1725bytesservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnamepe2!boot-start-markerboot-end-marker!!noaaanew-modelipsubnet-zeroipvrfvpnard1:100route-targetexport200:1route-targetimport200:1!ipcefipauditpomax-events100!!interfaceLoopback0ipaddressdescriptionto_r1ipaddressipospfcost20duplexfulltag-switchingip!interfaceFastEthernet1/0ipvrfforwardingvpnaipaddressduplexfulltag-switchingip!interfaceFastEthernet2/0ipaddressipospfcost100duplexfulltag-switchingip!interfaceFastEthernet3/0noipaddressshutdownduplexhalf!routerospf100log-adjacency-changesredistributeconnectedmetric1subnetsredistributestaticmetric-type1subnetsnetworkarea0routerbgp100nobgpdefaultipv4-unicastbgplog-neighbor-changesneighborremote-as100neighborupdate-sourceLoopback0neighborversion4!address-familyvpnv4neighboractivateneighborsend-communityextendedexit-address-family!address-familyipv4vrfvpnaredistributeconnectedredistributestaticnoauto-summarynosynchronizationexit-address-family!ipclasslessiproutevrfvpnaiphttpservernoiphttpsecure-server!gatekeepershutdownlinecon0exec-timeout00loggingsynchronousstopbits1lineaux0stopbits1linevty04login!!End七、CE1路由器配置ce1#showrunBuildingconfiguration...Currentconfiguration:892bytes!versionservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnamece1!boot-start-markerboot-end-markernoaaanew-modelipsubnet-zeroipcefipauditpomax-events100!!interfaceLoopback0ipaddressFastEthernet0/0descriptionto_r3ipaddressduplexfull!interfaceFastEthernet1/0noipaddressshutdownduplexhalf!interfaceFastEthernet2/0noipaddressshutdownduplexhalfnoipaddressshutdownduplexhalf!ipclasslessiprouteiphttpservernoiphttpsecure-servergatekeepershutdown!!linecon0exec-timeout00loggingsynchronousstopbits1lineaux0stopbits1linevty04login!!end八、CE2路由器配置Ce2#showrunBuildingconfiguration...*Sep313:53::%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleCurrentconfiguration:888bytes!versionservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnamece2!boot-start-markerboot-end-marker!!noaaanew-modelipsubnet-zeroipcefipauditpomax-events100interfaceLoopback0ipaddressFastEthernet0/0noipaddressshutdownduplexhalf!interfaceFastEthernet1/0descriptionto_r2ipaddressduplexfull!interfaceFastEthernet2/0