無(wú)錫廣電ATM采用雙星型的拓?fù)浣Y(jié)構(gòu),骨干交換速率為622Mbps。為了開(kāi)通MPLS VPN,對(duì)骨干線路的速率進(jìn)行了劃分:400Mbps用于專(zhuān)線聯(lián)網(wǎng),200Mbps用于IP業(yè)務(wù)。
BGP/MPLS VPN的實(shí)現(xiàn)
1.LSC的設(shè)置:
LSCgd(廣電機(jī)房)配置……
interface XTagATM41
description to 機(jī)房1
ip address 10.10.4.17 255.255.255.252
no ip directed-broadcast
no ip route-cache cef
extended-port ATM1/0 bpx 4.1
tag-switching ip!
router ospf 1
network 10.10.0.0 0.0.255.255 area 0
通過(guò)以上配置,每一個(gè)LSC通過(guò)OSPF協(xié)議,可以學(xué)習(xí)到PE路由器之間的路由,如:
LSCgd#sh ip route | include XTagATM41
O 10.10.5.5/32 [110/2] via 10.10.4.18, 00:08:42, XTagATM41
O 10.10.3.0/24 [110/2] via 10.10.4.18, 00:08:42, XTagATM41
O 10.10.3.16/30 [110/3] via 10.10.4.18, 00:08:42, XTagATM41
C 10.10.4.16/30 is directly connected, XTagATM41
O 10.10.5.69/32 [110/3] via 10.10.4.18, 00:08:42, XTagATM41 |
2.RPM的設(shè)置
RPMgd(機(jī)房1)設(shè)置
interface Loopback0
ip address 10.10.5.65 255.255.255.255 ;廣電中心的環(huán)回IP地址
!
ip vrf VPN1
;定義運(yùn)營(yíng)商VPN
rd 100:1
;定義VPN號(hào)
route-target export 100:1
;允許輸出路由交換的VPN號(hào)
route-target import 100:1
;允許輸入路由交換的VPN號(hào)
ip cef!
interface FastEthernet1/1.201
description to 江陰分公司
encapsulation isl 201
ip vrf forwarding VPN1
ip address 172.16.9.17 255.255.255.252
;與分公司的互連IP地址
no ip redirects
no ip mroute-cache!
router bgp 65000
address-family ipv4 vrf VPN1
redistribute connected metric 88
;重分配互連地址172.16.9.16/30
no auto-summary
;取消自動(dòng)匯總
no synchronization
;采用全I(xiàn)BGP,所以可以取消同步
exit-address-family !
address-family vpnv4
neighbor 10.10.5.69 activate
neighbor 10.10.5.69 route-reflector-client
;定義廣電中心RPM為路由反射器
neighbor 10.10.5.69 send-community extended
no auto-summary
exit-address-family |
通過(guò)以上配置,實(shí)現(xiàn)了江陰分公司與該公司總部的通訊。