華為設備中MPLS-VPN配置實例

MPLSVPN典型配置案例日期：杭州華三通信技術有限公司版權所有，未經(jīng)授權不得使用與傳播MPLS基本配置-靜態(tài)建立LSP組網(wǎng)需求RouterA、RouterB和RouterC均支持MPLS，運行OSPF作為MPLS骨干網(wǎng)上的IGP。在RouterA和RouterC之間建立雙向靜態(tài)LSP，并檢測LSP的有效性和可達性。(1)

配置各接口的IP地址配置各接口的IP地址和掩碼，包括Loopback接口，具體配置過程略。(2)

配置OSPF，以保證各路由器之間路由可達#配置RouterA。<RouterA>system-view[RouterA]ospf[RouterA-ospf-1]area0[RouterA-ospf-1-area-0.0.0.0]network1.1.1.90.0.0.0[RouterA-ospf-1-area-0.0.0.0]network10.1.1.00.0.0.255[RouterA-ospf-1-area-0.0.0.0]quit[RouterA-ospf-1]quit#配置RouterB。<RouterB>system-view[RouterB]ospf[RouterB-ospf-1]area0[RouterB-ospf-1-area-0.0.0.0]network2.2.2.90.0.0.0[RouterB-ospf-1-area-0.0.0.0]network10.1.1.00.0.0.255[RouterB-ospf-1-area-0.0.0.0]network20.1.1.00.0.0.255[RouterB-ospf-1-area-0.0.0.0]quit[RouterB-ospf-1]quit#配置RouterC。<RouterC>system-view[RouterC]ospf[RouterC-ospf-1]area0[RouterC-ospf-1-area-0.0.0.0]network3.3.3.90.0.0.0[RouterC-ospf-1-area-0.0.0.0]network20.1.1.00.0.0.255[RouterC-ospf-1-area-0.0.0.0]quit[RouterC-ospf-1]quit#配置完成后，在各路由器上執(zhí)行displayiprouting-table命令，可以看到相互之間都學到了到對方的主機路由。以RouterA為例：[RouterA]displayiprouting-tableRoutingTables:Public

Destinations:9

Routes:9

Destination/Mask

Proto

Pre

Cost

NextHop

Interface

1.1.1.9/32

Direct0

0

127.0.0.1

InLoop02.2.2.9/32

OSPF

10

1562

10.1.1.2

S2/03.3.3.9/32

OSPF

10

3124

10.1.1.2

S2/010.1.1.0/24

Direct0

0

10.1.1.1

S2/010.1.1.1/32

Direct0

0

127.0.0.1

InLoop010.1.1.2/32

Direct0

0

10.1.1.2

S2/020.1.1.0/24

OSPF

10

3124

10.1.1.2

S2/0127.0.0.0/8

Direct0

0

127.0.0.1

InLoop0127.0.0.1/32

Direct0

0

127.0.0.1

InLoop0(3)

使能MPLS功能#配置RouterA。[RouterA]mplslsr-id1.1.1.9[RouterA]mpls[RouterA-mpls]quit[RouterA]interfaceserial2/0[RouterA-Serial2/0]mpls[RouterA-Serial2/0]quit#配置RouterB。[RouterB]mplslsr-id2.2.2.9[RouterB]mpls[RouterB-mpls]quit[RouterB]interfaceserial2/0[RouterB-Serial2/0]mpls[RouterB-Serial2/0]quit[RouterB]interfaceserial2/1[RouterB-Serial2/1]mpls[RouterB-Serial2/1]quit#配置RouterC。[RouterC]mplslsr-id3.3.3.9[RouterC]mpls[RouterC-mpls]quit[RouterC]interfaceserial2/0[RouterC-Serial2/0]mpls[RouterC-Serial2/0]quit(4)

創(chuàng)建從RouterA到RouterC的靜態(tài)LSP#配置IngressRouterA。[RouterA]static-lspingressAtoCdestination3.3.3.932nexthop10.1.1.2out-label30#配置TransitRouterB[RouterB]static-lsptransitAtoCincoming-interfaceserial2/0in-label30nexthop20.1.1.2out-label50#配置EgressRouterC。[RouterC]static-lspegressAtoCincoming-interfaceserial2/0in-label50(5)

創(chuàng)建從RouterC到RouterA的靜態(tài)LSP#配置IngressRouterC。[RouterC]static-lspingressCtoAdestination1.1.1.932nexthop20.1.1.1out-label40#配置TransitRouterB。[RouterB]static-lsptransitCtoAincoming-interfaceserial2/1in-label40nexthop10.1.1.1out-label70#配置EgressRouterA。[RouterA]static-lspegressCtoAincoming-interfaceserial2/0in-label70(6)

檢查配置結(jié)果#配置完成后，可以在各路由器上通過displaymplsstatic-lsp命令查看靜態(tài)LSP的信息。以RouterA的顯示信息為例：[RouterA]displaymplsstatic-lsptotalstatics-lsp:2Name

FEC

I/OLabel

I/OIf

StateAtoC

3.3.3.9/32

NULL/30

-/S2/0

UpCtoA

-/-

70/NULL

S2/0/-

Up#在RouterA上檢測RouterA到RouterC靜態(tài)LSP的可達性。[RouterA]pinglspipv43.3.3.932

LSPPingFEC:LDPIPV4PREFIX3.3.3.9/32:100

databytes,pressCTRL_Ctobreak

Replyfrom20.1.1.2:bytes=100Sequence=1time=76ms

Replyfrom20.1.1.2:bytes=100Sequence=2time=75ms

Replyfrom20.1.1.2:bytes=100Sequence=3time=75ms

Replyfrom20.1.1.2:bytes=100Sequence=4time=75ms

Replyfrom20.1.1.2:bytes=100Sequence=5time=75ms

---FEC:LDPIPV4PREFIX3.3.3.9/32pingstatistics---

5packet(s)transmitted

5packet(s)received

0.00%packetloss

round-tripmin/avg/max=75/75/76ms#在RouterC上檢測RouterC到RouterA靜態(tài)LSP的可達性。[RouterC]pinglspipv41.1.1.932

LSPPingFEC:LDPIPV4PREFIX1.1.1.9/32:100

databytes,pressCTRL_Ctobreak

Replyfrom10.1.1.1:bytes=100Sequence=1time=75ms

Replyfrom10.1.1.1:bytes=100Sequence=2time=75ms

Replyfrom10.1.1.1:bytes=100Sequence=3time=75ms

Replyfrom10.1.1.1:bytes=100Sequence=4time=74ms

Replyfrom10.1.1.1:bytes=100Sequence=5time=75ms

---FEC:LDPIPV4PREFIX1.1.1.9/32pingstatistics---

5packet(s)transmitted

5packet(s)received

0.00%packetloss

round-tripmin/avg/max=74/74/75msMPLS基本配置-LDP動態(tài)建立LSP組網(wǎng)需求RouterA、RouterB和RouterC均支持MPLS，運行OSPF作為MPLS骨干網(wǎng)上的IGP。

在RouterA到RouterC之間使用LDP動態(tài)建立LSP，并檢測LSP的有效性和可達性。(1)

配置各接口的IP地址配置各接口IP地址和掩碼，包括Loopback接口，具體配置過程略。(2)

配置OSPF，以保證各路由器之間路由可達

#配置RouterA。<RouterA>system-view[RouterA]ospf[RouterA-ospf-1]area0[RouterA-ospf-1-area-0.0.0.0]network1.1.1.90.0.0.0[RouterA-ospf-1-area-0.0.0.0]network10.1.1.00.0.0.255[RouterA-ospf-1-area-0.0.0.0]quit[RouterA-ospf-1]quit#配置RouterB。<RouterB>system-view[RouterB]ospf[RouterB-ospf-1]area0[RouterB-ospf-1-area-0.0.0.0]network2.2.2.90.0.0.0[RouterB-ospf-1-area-0.0.0.0]network10.1.1.00.0.0.255[RouterB-ospf-1-area-0.0.0.0]network20.1.1.00.0.0.255[RouterB-ospf-1-area-0.0.0.0]quit[RouterB-ospf-1]quit#配置RouterC。<RouterC>system-view[RouterC]ospf[RouterC-ospf-1]area0[RouterC-ospf-1-area-0.0.0.0]network3.3.3.90.0.0.0[RouterC-ospf-1-area-0.0.0.0]network20.1.1.00.0.0.255[RouterC-ospf-1-area-0.0.0.0]quit[RouterC-ospf-1]quit#配置完成后，在各路由器上執(zhí)行displayiprouting-table命令，可以看到相互之間都學到了到對方的主機路由。以RouterA為例：[RouterA]displayiprouting-tableRoutingTables:Public

Destinations:9

Routes:9

Destination/Mask

Proto

Pre

Cost

NextHop

Interface

1.1.1.9/32

Direct0

0

127.0.0.1

InLoop02.2.2.9/32

OSPF

10

1562

10.1.1.2

S2/03.3.3.9/32

OSPF

10

3124

10.1.1.2

S2/010.1.1.0/24

Direct0

0

10.1.1.1

S2/010.1.1.1/32

Direct0

0

127.0.0.1

InLoop010.1.1.2/32

Direct0

0

10.1.1.2

S2/020.1.1.0/24

OSPF

10

3124

10.1.1.2

S2/0127.0.0.0/8

Direct0

0

127.0.0.1

InLoop0127.0.0.1/32

Direct0

0

127.0.0.1

InLoop0(3)

使能MPLS和MPLSLDP功能#配置RouterA。[RouterA]mplslsr-id1.1.1.9[RouterA]mpls[RouterA-mpls]quit[RouterA]mplsldp[RouterA-mpls-ldp]quit[RouterA]interfaceserial2/0[RouterA-Serial2/0]mpls[RouterA-Serial2/0]mplsldp[RouterA-Serial2/0]quit#配置RouterB。[RouterB]mplslsr-id2.2.2.9[RouterB]mpls[RouterB-mpls]quit[RouterB]mplsldp[RouterB-mpls-ldp]quit[RouterB]interfaceserial2/0[RouterB-Serial2/0]mpls[RouterB-Serial2/0]mplsldp[RouterB-Serial2/0]quit[RouterB]interfaceserial2/1[RouterB-Serial2/1]mpls[RouterB-Serial2/1]mplsldp[RouterB-Serial2/1]quit#配置RouterC。[RouterC]mplslsr-id3.3.3.9[RouterC]mpls[RouterC-mpls]quit[RouterC]mplsldp[RouterC-mpls-ldp]quit[RouterC]interfaceserial2/0[RouterC-Serial2/0]mpls[RouterC-Serial2/0]mplsldp[RouterC-Serial2/0]quit#完成上述配置后，RouterA和RouterB、RouterB和RouterC之間的本地LDP會話建立成功。在各路由器上執(zhí)行displaymplsldpsession命令，可以看到LDP會話的建立情況；執(zhí)行displaymplsldppeer命令，可以看到LDP的對等體情況。以RouterA為例：[RouterA]displaymplsldpsession

LDPSession(s)inPublicNetwork

Totalnumberofsessions:1

----------------------------------------------------------------

Peer-ID

Status

LAM

SsnRole

FT

MD5

KA-Sent/Rcv

----------------------------------------------------------------

2.2.2.9:0

Operational

DU

Passive

Off

Off

5/5

----------------------------------------------------------------

LAM:LabelAdvertisementMode

FT

:FaultTolerance

[RouterA]displaymplsldppeer

LDPPeerInformationinPublicnetwork

Totalnumberofpeers:1-----------------------------------------------------------------

Peer-ID

Transport-Address

Discovery-Source

----------------------------------------------------------------

2.2.2.9:0

2.2.2.9

Serial2/0

----------------------------------------------------------------(4)

配置LSP的觸發(fā)建立策略為所有靜態(tài)路由和IGP路由項都觸發(fā)LDP建立LSP#配置RouterA。[RouterA]mpls[RouterA-mpls]lsp-triggerall[RouterA-mpls]quit#配置RouterB。[RouterB]mpls[RouterB-mpls]lsp-triggerall[RouterB-mpls]quit#配置RouterC。[RouterC]mpls[RouterC-mpls]lsp-triggerall[RouterC-mpls]quit#配置完成后，在各設備上執(zhí)行displaymplsldplsp命令，可以看到LDPLSP的建立情況。以RouterA為例。[RouterA]displaymplsldplsp

LDPLSPInformation

-------------------------------------------------------------------

SN

DestAddress/Mask

In/OutLabel

Next-Hop

In/Out-Interface

------------------------------------------------------------------

1

1.1.1.9/32

3/NULL

127.0.0.1

-------/InLoop0

2

2.2.2.9/32

NULL/3

10.1.1.2

-------/S2/0

3

3.3.3.9/32

NULL/1024

10.1.1.2

-------/S2/0

4

20.1.1.0/24

NULL/3

10.1.1.2

-------/S2/0

-------------------------------------------------------------------

A'*'beforeanLSPmeanstheLSPisnotestablished

A'*'beforeaLabelmeanstheUSCBorDSCBisstale#在RouterA上檢測RouterA到RouterC的LDPLSP的有效性和可達性。[RouterA]pinglspipv43.3.3.932LSPPingFEC:LDPIPV4PREFIX3.3.3.9/32:100

databytes,pressCTRL_Ctobreak

Replyfrom20.1.1.2:bytes=100Sequence=1time=75ms

Replyfrom20.1.1.2:bytes=100Sequence=2time=75ms

Replyfrom20.1.1.2:bytes=100Sequence=3time=74ms

Replyfrom20.1.1.2:bytes=100Sequence=4time=75ms

Replyfrom20.1.1.2:bytes=100Sequence=5time=74ms

---FEC:LDPIPV4PREFIX3.3.3.9/32pingstatistics---

5packet(s)transmitted

5packet(s)received

0.00%packetloss

round-tripmin/avg/max=74/74/75ms#在RouterC上檢測RouterA到RouterC的LDPLSP的有效性和可達性。[RouterC]pinglspipv41.1.1.932

LSPPingFEC:LDPIPV4PREFIX1.1.1.9/32:100

databytes,pressCTRL_Ctobreak

Replyfrom10.1.1.1:bytes=100Sequence=1time=75ms

Replyfrom10.1.1.1:bytes=100Sequence=2time=75ms

Replyfrom10.1.1.1:bytes=100Sequence=3time=74ms

Replyfrom10.1.1.1:bytes=100Sequence=4time=74ms

Replyfrom10.1.1.1:bytes=100Sequence=5time=74ms

---FEC:LDPIPV4PREFIX1.1.1.9/32pingstatistics---

5packet(s)transmitted

5packet(s)received

0.00%packetloss

round-tripmin/avg/max=74/74/75msMPLSVPN典型配置舉例組網(wǎng)需求CE1、CE3屬于VPN1，CE2、CE4屬于VPN2；VPN1使用的VPNTarget屬性為111:1，VPN2使用的VPNTarget屬性為222:2。不同VPN用戶之間不能互相訪問；CE與PE之間配置EBGP交換VPN路由信息；PE與PE之間配置OSPF實現(xiàn)PE內(nèi)部的互通、配置MP-IBGP交換VPN路由信息。(1)

在MPLS骨干網(wǎng)上配置IGP協(xié)議，實現(xiàn)骨干網(wǎng)PE和P的互通#配置PE1。<PE1>system-view[PE1]interfaceloopback0[PE1-LoopBack0]ipaddress1.1.1.932[PE1-LoopBack0]quit[PE1]interfacepos5/0[PE1-POS5/0]ipaddress172.1.1.124[PE1-POS5/0]quit[PE1]ospf[PE1-ospf-1]area0[PE1-ospf-1-area-0.0.0.0]network172.1.1.00.0.0.255[PE1-ospf-1-area-0.0.0.0]network1.1.1.90.0.0.0[PE1-ospf-1-area-0.0.0.0]quit[PE1-ospf-1]quit#配置P。<P>system-view[P]interfaceloopback0[P-LoopBack0]ipaddress2.2.2.932[P-LoopBack0]quit[P]interfacepos5/0[P-POS5/0]ipaddress172.1.1.224[P-POS5/0]quit[P]interfacepos5/1[P-POS5/1]ipaddress172.2.1.124[P-POS5/1]quit[P]ospf[P-ospf-1]area0[P-ospf-1-area-0.0.0.0]network172.1.1.00.0.0.255[P-ospf-1-area-0.0.0.0]network172.2.1.00.0.0.255[P-ospf-1-area-0.0.0.0]network2.2.2.90.0.0.0[P-ospf-1-area-0.0.0.0]quit[P-ospf-1]quit#配置PE2。<PE2>system-view[PE2]interfaceloopback0[PE2-LoopBack0]ipaddress3.3.3.932[PE2-LoopBack0]quit[PE2]interfacepos5/0[PE2-POS5/0]ipaddress172.2.1.224[PE2-POS5/0]quit[PE2]ospf[PE2-ospf-1]area0[PE2-ospf-1-area-0.0.0.0]network172.2.1.00.0.0.255[PE2-ospf-1-area-0.0.0.0]network3.3.3.90.0.0.0[PE2-ospf-1-area-0.0.0.0]quit[PE2-ospf-1]quit配置完成后，PE1、P、PE2之間應能建立OSPF鄰居，執(zhí)行displayospfpeer命令可以看到鄰居達到FULL狀態(tài)。執(zhí)行displayiprouting-table命令可以看到PE之間學習到對方的Loopback路由。以PE1為例：[PE1]displayiprouting-tableRoutingTables:Public

Destinations:9

Routes:9Destination/Mask

Proto

Pre

Cost

NextHop

Interface1.1.1.9/32

Direct0

0

127.0.0.1

InLoop02.2.2.9/32

OSPF

10

1

172.1.1.2

POS5/03.3.3.9/32

OSPF

10

2

172.1.1.2

POS5/0127.0.0.0/8

Direct0

0

127.0.0.1

InLoop0127.0.0.1/32

Direct0

0

127.0.0.1

InLoop0172.1.1.0/24

Direct0

0

172.1.1.1

POS5/0172.1.1.1/32

Direct0

0

127.0.0.1

InLoop0172.1.1.2/32

Direct0

0

172.1.1.2

POS5/0172.2.1.0/24

OSPF

10

1

172.1.1.2

POS5/0[PE1]displayospfpeerverbose

OSPFProcess1withRouterID1.1.1.9

Neighbors

Area0.0.0.0interface172.1.1.1(POS5/0)'sneighbors

RouterID:172.1.1.2

Address:172.1.1.2

GRState:Normal

State:Full

Mode:Nbris

Master

Priority:1

DR:None

BDR:None

MTU:1500

Deadtimerduein38

sec

Neighborisupfor00:02:44

AuthenticationSequence:[0]

Neighborstatechangecount:5(2)

在MPLS骨干網(wǎng)上配置MPLS基本能力和MPLSLDP，建立LDPLSP#配置PE1。[PE1]mplslsr-id1.1.1.9[PE1]mpls[PE1-mpls]quit[PE1]mplsldp[PE1-mpls-ldp]quit[PE1]interfacepos5/0[PE1-POS5/0]mpls[PE1-POS5/0]mplsldp[PE1-POS5/0]quit#配置P。[P]mplslsr-id2.2.2.9[P]mpls[P-mpls]quit[P]mplsldp[P-mpls-ldp]quit[P]interfacepos5/0[P-POS5/0]mpls[P-POS5/0]mplsldp[P-POS5/0]quit[P]interfacepos5/1[P-POS5/1]mpls[P-POS5/1]mplsldp[P-POS5/1]quit#配置PE2。[PE2]mplslsr-id3.3.3.9[PE2]mpls[PE2-mpls]quit[PE2]mplsldp[PE2-mpls-ldp]quit[PE2]interfacepos5/0[PE2-POS5/0]mpls[PE2-POS5/0]mplsldp[PE2-POS5/0]quit上述配置完成后，PE1、P、PE2之間應能建立LDP會話，執(zhí)行displaymplsldpsession命令可以看到顯示結(jié)果中SessionState項為Operational。執(zhí)行displaymplsldplsp命令，可以看到LDPLSP的建立情況。以PE1為例：[PE1]displaymplsldpsession

LDPSession(s)inPublicNetwork----------------------------------------------------------------

Peer-ID

Status

LAM

SsnRole

FT

MD5

KA-Sent/Rcv

---------------------------------------------------------------

2.2.2.9:0

Operational

DU

Passive

Off

Off

5/5

---------------------------------------------------------------

LAM:LabelAdvertisementMode

FT

:FaultTolerance[PE1]displaymplsldplsp

LDPLSPInformation

------------------------------------------------------------------

SN

DestAddress/Mask

In/OutLabel

Next-Hop

In/Out-Interface

------------------------------------------------------------------

1

1.1.1.9/32

3/NULL

127.0.0.1

POS5/0/InLoop0

2

2.2.2.9/32

NULL/3

172.1.1.2

-------/POS5/0

3

3.3.3.9/32

NULL/1024

172.1.1.2

-------/POS5/0------------------------------------------------------------------

A'*'beforeanLSPmeanstheLSPisnotestablished

A'*'beforeaLabelmeanstheUSCBorDSCBisstale(3)

在PE設備上配置VPN實例，將CE接入PE#配置PE1。[PE1]ipvpn-instancevpn1[PE1-vpn-instance-vpn1]route-distinguisher100:1[PE1-vpn-instance-vpn1]vpn-target111:1[PE1-vpn-instance-vpn1]quit[PE1]ipvpn-instancevpn2[PE1-vpn-instance-vpn2]route-distinguisher100:2[PE1-vpn-instance-vpn2]vpn-target222:2[PE1-vpn-instance-vpn2]quit[PE1]interfaceethernet1/1[PE1-Ethernet1/1]ipbindingvpn-instancevpn1[PE1-Ethernet1/1]ipaddress10.1.1.224[PE1-Ethernet1/1]quit[PE1]interfaceethernet1/2[PE1-Ethernet1/2]ipbindingvpn-instancevpn2[PE1-Ethernet1/2]ipaddress10.2.1.224[PE1-Ethernet1/2]quit#配置PE2。[PE2]ipvpn-instancevpn1[PE2-vpn-instance-vpn1]route-distinguisher200:1[PE2-vpn-instance-vpn1]vpn-target111:1[PE2-vpn-instance-vpn1]quit[PE2]ipvpn-instancevpn2[PE2-vpn-instance-vpn2]route-distinguisher200:2[PE2-vpn-instance-vpn2]vpn-target222:2[PE2-vpn-instance-vpn2]quit[PE2]interfaceethernet1/1[PE2-Ethernet1/1]ipbindingvpn-instancevpn1[PE2-Ethernet1/1]ipaddress10.3.1.224[PE2-Ethernet1/1]quit[PE2]interfaceethernet1/2[PE2-Ethernet1/2]ipbindingvpn-instancevpn2[PE2-Ethernet1/2]ipaddress10.4.1.224[PE2-Ethernet1/2]quit#按圖配置各CE的接口IP地址，配置過程略。配置完成后，在PE設備上執(zhí)行displayipvpn-instance命令可以看到VPN實例的配置情況。各PE能ping通自己接入的CE。以PE1和CE1為例：[PE1]displayipvpn-instance

TotalVPN-Instancesconfigured:2

VPN-InstanceName

RD

CreateTime

vpn1

100:1

2006/08/1309:32:45

vpn2

100:2

2006/08/1309:42:59[PE1]ping-vpn-instancevpn110.1.1.1

PING10.1.1.1:56

databytes,pressCTRL_Ctobreak

Replyfrom10.1.1.1:bytes=56Sequence=1ttl=255time=56ms

Replyfrom10.1.1.1:bytes=56Sequence=2ttl=255time=4ms

Replyfrom10.1.1.1:bytes=56Sequence=3ttl=255time=4ms

Replyfrom10.1.1.1:bytes=56Sequence=4ttl=255time=52ms

Replyfrom10.1.1.1:bytes=56Sequence=5ttl=255time=3ms

---10.1.1.1pingstatistics---

5packet(s)transmitted

5packet(s)received

0.00%packetloss

round-tripmin/avg/max=3/23/56ms(4)

在PE與CE之間建立EBGP對等體，引入VPN路由#配置CE1。<CE1>system-view[CE1]bgp65410[CE1-bgp]peer10.1.1.2as-number100[CE1-bgp]import-routedirect[CE1-bgp]quit另外3個CE設備（CE2～CE4）配置與CE1設備配置類似，配置過程省略。#配置PE1。[PE1]bgp100[PE1-bgp]ipv4-familyvpn-instancevpn1[PE1-bgp-vpn1]peer10.1.1.1as-number65410[PE1-bgp-vpn1]import-routedirect[PE1-bgp-vpn1]quit[PE1-bgp]ipv4-familyvpn-instancevpn2[PE1-bgp-vpn2]peer10.2.1.1as-number65420[PE1-bgp-vpn2]import-routedirect[PE1-bgp-vpn2]quit[PE1-bgp]quitPE2的配置與PE1類似，配置過程省略。配置完成后，在PE設備上執(zhí)行displaybgpvpnv4vpn-instancepeer命令，可以看到PE與CE之間的BGP對等體關系已建立，并達到Established狀態(tài)。以PE1與CE1的對等體關系為例：[PE1]displaybgpvpnv4vpn-instancevpn1peer

BGPlocalrouterID:1.1.1.9

LocalASnumber:100

Totalnumberofpeers:1

Peersinestablishedstate:1

Peer

AS

MsgRcvdMsgSentOutQ

PrefRcv

Up/Down

State

10.1.1.1

6541011

9

0

1

00:06:37

Established(5)

在PE之間建立MP-IBGP對等體#配置PE1。[PE1]bgp100[PE1-bgp]peer3.3.3.9as-number100[PE1-bgp]peer3.3.3.9connect-interfaceloopback0[PE1-bgp]ipv4-familyvpnv4[PE1-bgp-af-vpnv4]peer3.3.3.9enable[PE1-bgp-af-vpnv4]quit[PE1-bgp]quit#配置PE2。[PE2]bgp100[PE2-bgp]peer1.1.1.9as-number100[PE2-bgp]peer1.1.1.9connect-interfaceloopback0[PE2-bgp]ipv4-familyvpnv4[PE2-bgp-af-vpnv4]peer1.1.1.9enable[PE2-bgp-af-vpnv4]quit[PE2-bgp]quit配置完成后，在PE設備上執(zhí)行