H3C交换机MPLS配置

1、简介：

MPLS L2是基于MPLS的二层技术，将用户的二层数据封装成可以在IP或MPLS网络中传送的分组，通过IP路径或MPLS隧道转发，接收端解封装分组后恢复原来的二层数据，从而实现用户二层数据跨越MPLS或IP网络在不同站点间透明地传送。

2、基本概念：

CE（Customer Edge，用户网络边缘）设备是直接与服务提供商网络相连的用户网络侧设备。

PE（Provider Edge，服务提供商网络边缘）设备是与CE相连的服务提供商网络侧设备。PE主要负责VPN业务的接入，完成报文从用户网络到公网隧道、从公网隧道到用户网络的映射与转发。

AC（Attachment Circuit，接入电路）是连接CE和PE的物理电路或虚拟电路，例如ATM的VPI/VCI、Ethernet接口、VLAN、物理接口上的PPP连接。

PW（Pseudowire，伪线）是两个PE之间的虚拟双向连接。MPLS PW由一对方向相反的单向LSP构成。

3、网络拓扑：

实现CE1与CE2互通

4、配置：

4.1、将MPLS网络中设备配置ip和ospf协议：

[PE1]interface LoopBack 0

[PE1-LoopBack0]ip address 1.1.1.9 32

[PE1-LoopBack0]quit

[PE1]interface GigabitEthernet 0/2

[PE1-GigabitEthernet0/2]ip address 220.178.251.1 24

[PE1-GigabitEthernet0/2]quit

[PE1]ospf 1 router-id 1.1.1.9

[PE1-ospf-1]area 0

[PE1-ospf-1-area-0.0.0.0]network 1.1.1.9 0.0.0.0

[PE1-ospf-1-area-0.0.0.0]network 220.178.251.1 0.0.0.0

[PE1-ospf-1-area-0.0.0.0]quit

[PE1-ospf-1]quit

[P]interface LoopBack 0

[P-LoopBack0]ip address 2.2.2.9 32

[P-LoopBack0]quit

[P]interface GigabitEthernet 0/1

[P-GigabitEthernet0/1]ip address 220.178.251.2 24

[P-GigabitEthernet0/1]interface GigabitEthernet 0/2

[P-GigabitEthernet0/2]ip address 110.64.89.1 24

[P-GigabitEthernet0/2]quit

[P]ospf 1 router-id 2.2.2.9

[P-ospf-1]area 0

[P-ospf-1-area-0.0.0.0]network 2.2.2.9 0.0.0.0

[P-ospf-1-area-0.0.0.0]network 220.178.251.2 0.0.0.0

[P-ospf-1-area-0.0.0.0]network 110.64.89.1 0.0.0.0

[P-ospf-1-area-0.0.0.0]quit

[P-ospf-1]quit

[PE2]interface LoopBack 0

[PE2-LoopBack0]ip address 3.3.3.9 32

[PE2-LoopBack0]quit

[PE2]interface GigabitEthernet 0/2

[PE2-GigabitEthernet0/2]ip address 110.64.89.2 24

[PE2-GigabitEthernet0/2]quit

[PE2]ospf 1 router-id 3.3.3.9

[PE2-ospf-1]area 0

[PE2-ospf-1-area-0.0.0.0]network 3.3.3.9 0.0.0.0

[PE2-ospf-1-area-0.0.0.0]network 110.64.89.2 0.0.0.0

[PE2-ospf-1-area-0.0.0.0]quit

[PE2-ospf-1]quit

4.2、将MPLS网络中设备启动l2vpn、mpls和mpls ldp协议：

[PE1]l2vpn enable

[PE1]mpls lsr-id 1.1.1.9

[PE1]mpls ldp

[PE1-ldp]quit

[PE1]interface GigabitEthernet 0/2

[PE1-GigabitEthernet0/2]mpls enable

[PE1-GigabitEthernet0/2]mpls ldp enable

[PE1-GigabitEthernet0/2]quit

[P]l2vpn enable

[P]mpls lsr-id 2.2.2.9

[P]mpls ldp

[P-ldp]quit

[P]interface range GigabitEthernet 0/1 to GigabitEthernet 0/2

[P-if-range]mpls enable

[P-if-range]mpls ldp enable

[P-if-range]quit

[PE2]l2vpn enable

[PE2]mpls lsr-id 3.3.3.9

[PE2]mpls ldp

[PE2-ldp]quit

[PE2]interface GigabitEthernet 0/2

[PE2-GigabitEthernet0/2]mpls enable

[PE2-GigabitEthernet0/2]mpls ldp enable

[PE2-GigabitEthernet0/2]quit

[PE1]display mpls ldp lsp

Status Flags: * - stale, L - liberal, B - backup

FECs: 3 Ingress: 2 Transit: 2 Egress: 1

FEC In/Out Label Nexthop OutInterface

1.1.1.9/32 3/-

-/1151(L)

2.2.2.9/32 -/3 220.178.251.2 GE0/2

1151/3 220.178.251.2 GE0/2

3.3.3.9/32 -/1150 220.178.251.2 GE0/2

1150/1150 220.178.251.2 GE0/2

测试PE1与PE2是否可达：

[PE1]ping mpls -a 1.1.1.9 ipv4 3.3.3.9 32

MPLS ping FEC 3.3.3.9/32 with 100 bytes of data:

100 bytes from 110.64.89.2: Sequence=1 time=1 ms

100 bytes from 110.64.89.2: Sequence=2 time=2 ms

100 bytes from 110.64.89.2: Sequence=3 time=1 ms

100 bytes from 110.64.89.2: Sequence=4 time=1 ms

100 bytes from 110.64.89.2: Sequence=5 time=2 ms

--------------------------------------------------------------------------------

5、配置静态PW：

5.1、PE1与PE2创建交叉连接组l2vpn，在该交叉连接组内创建名称为vpnac的交叉连接，将接口GigabitEthernet0/1与此交叉连接关联，并在交叉连接内创建静态PW，以便将AC和PW关联。

[PE1]xconnect-group l2vpn

[PE1-xcg-l2vpn]connection vpnac

[PE1-xcg-l2vpn-vpnac]ac interface GigabitEthernet 0/1           #ac与接口关联

[PE1-xcg-l2vpn-vpnac]peer 3.3.3.9 pw-id 100 in-label 100 out-label 200           #出标签200，入标签100

[PE1-xcg-l2vpn-vpnac-3.3.3.9-100]quit

[PE1-xcg-l2vpn-vpnac]quit

[PE1-xcg-l2vpn]quit

[PE2]xconnect-group l2vpn

[PE2-xcg-l2vpn]connection vpnca

[PE2-xcg-l2vpn-vpnca]ac interface GigabitEthernet 0/1           #ac与接口关联

[PE2-xcg-l2vpn-vpnca]peer 1.1.1.9 pw-id 100 in-label 200 out-label 100           #出标签100，入标签200

[PE2-xcg-l2vpn-vpnca-1.1.1.9-100]quit

[PE2-xcg-l2vpn-vpnca]quit

[PE2-xcg-l2vpn]quit

[PE1]display l2vpn pw           #查看静态PW信息

Flags: M - main, B - backup, BY - bypass, H - hub link, S - spoke link, N - no split horizon

Total number of PWs: 1

1 up, 0 blocked, 0 down, 0 defect, 0 idle, 0 duplicate

Xconnect-group Name: l2vpn

Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State

3.3.3.9 100 100/200 Static M 0 Up

[PE2]display l2vpn pw           #查看静态PW信息

Flags: M - main, B - backup, BY - bypass, H - hub link, S - spoke link, N - no split horizon

Total number of PWs: 1

1 up, 0 blocked, 0 down, 0 defect, 0 idle, 0 duplicate

Xconnect-group Name: l2vpn

Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State

1.1.1.9 100 200/100 Static M 0 Up

完成以上步骤CE1与CE2配置好IP地址可互通。

6、配置LDP PW：

6.1、修改5.1配置的静态PW,配置LDP PW：

[PE1]xconnect-group l2vpn

[PE1-xcg-l2vpn]connection vpnac

[PE1-xcg-l2vpn-vpnac]undo peer 3.3.3.9 pw-id 100           #删除之前的静态PW

[PE1-xcg-l2vpn-vpnac]peer 3.3.3.9 pw-id 100

[PE1-xcg-l2vpn-vpnac]dis this

#

connection vpnac

ac interface GigabitEthernet0/1

peer 3.3.3.9 pw-id 100

#

return

[PE1-xcg-l2vpn-vpnac-3.3.3.9-100]quit

[PE1-xcg-l2vpn-vpnac]quit

[PE1-xcg-l2vpn]quit

[PE2]xconnect-group l2vpn

[PE2-xcg-l2vpn]connection vpnca

[PE2-xcg-l2vpn-vpnca]undo peer 1.1.1.9 pw-id 100           #删除之前的静态PW

[PE2-xcg-l2vpn-vpnca]peer 1.1.1.9 pw-id 100

[PE2-xcg-l2vpn-vpnca]dis this

#

connection vpnca

ac interface GigabitEthernet0/1

peer 1.1.1.9 pw-id 100

#

return

[PE2-xcg-l2vpn-vpnca-1.1.1.9-100]quit

[PE2-xcg-l2vpn-vpnca]quit

[PE2-xcg-l2vpn]quit

[PE1]display l2vpn pw           #查看PW信息

Flags: M - main, B - backup, BY - bypass, H - hub link, S - spoke link, N - no split horizon

Total number of PWs: 1

1 up, 0 blocked, 0 down, 0 defect, 0 idle, 0 duplicate

Xconnect-group Name: l2vpn

Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State

3.3.3.9 100 917631/917631 LDP M 0 Up

[PE2]display l2vpn pw           #查看PW信息

Flags: M - main, B - backup, BY - bypass, H - hub link, S - spoke link, N - no split horizon

Total number of PWs: 1

1 up, 0 blocked, 0 down, 0 defect, 0 idle, 0 duplicate

Xconnect-group Name: l2vpn

Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State

1.1.1.9 100 917631/917631 LDP M 0 Up

完成以上步骤CE1与CE2配置好IP地址可互通。