測試VPN路由
1.RPMgd(機房1)的VPN路由
#sh ip route vrf VPN1
Codes: C - connected, B - BGP,* - candidate default……
Gateway of last resort is 10.10.5.69 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 21 subnets, 3 masks
C172.16.9.16/30 is directly connected, FastEthernet1/1.201
B*0.0.0.0/0[200/888]via10.10.5.69, w6d;
默認路由是10.10.5.69,即機房2的RPM……
2.RPM1(機房1) 的VPN1路由:
#sh ip route vrf VPN1
Gateway of last resort is 172.16.2.2 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 21 subnets, 3 masks
B 172.16.9.16/30 [200/888] via 10.10.5.65, 1w6d
C172.16.2.0/28 is directly connected, FastEthernet1/1.200
S* 0.0.0.0/0 [1/0] via 172.16.2.2 ;默認路由。 |
從以上路由,可以看到每個VPN的虛擬路由表中只有該VPN本身的路由,接入點之間已經可以通訊了。
Ping測試
RPMgd#ping vrf VPN1
Protocol [ip]:
Target IP address: 172.16.2.2
Repeat count [5]: 100
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 100,100-byte ICMP Echos to 172.16.2.2,timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100),round-trip min/avg/max = 1/3/4 ms< |
BR>我們成功Ping到了目的地址172.16.2.2,平均時延為3ms,低于10ms的測試要求,而且沒有丟包現象。通過以上測試,該VPN測試通過。