OSPF 默认路由下发实验和MPLS TE实验.docx

实验手册实验一 各种ospf 下发默认路由 20011-06-09R1R2R3 自治域为AS100 RIP2R4R5R6 自治域为AS200 OSPF链路配置IGP协议配置由R4和R5的ospf下发默认路由R4#show run | se ospf router ospf 10 router-id 4.4.4.4 log-adjacency-changes network 4.4.4.4 0.0.0.0 area 0 network 199.99.45.0 0.0.0.255 area 0 network 199.99.46.0 0.0.0.255 area 0 default-information originate alwaysR5#show run | se ospf router ospf 10 router-id 5.5.5.5 log-adjacency-changes network 5.5.5.5 0.0.0.0 area 0 network 199.99.45.0 0.0.0.255 area 0 network 199.99.56.0 0.0.0.255 area 0 default-information originate always现象是在R6上R6#show ip route C 199.99.56.0/24 is directly connected, Serial1/2 4.0.0.0/32 is subnetted, 1 subnetsO 4.4.4.4 110/65 via 199.99.46.1, 00:15:05, Serial1/1O 199.99.45.0/24 110/128 via 199.99.56.1, 00:15:05, Serial1/2 110/128 via 199.99.46.1, 00:15:05, Serial1/1 5.0.0.0/32 is subnetted, 1 subnetsO 5.5.5.5 110/65 via 199.99.56.1, 00:15:05, Serial1/2 6.0.0.0/32 is subnetted, 1 subnetsC 6.6.6.6 is directly connected, Loopback0C 199.99.46.0/24 is directly connected, Serial1/1O*E2 0.0.0.0/0 110/1 via 199.99.56.1, 00:15:05, Serial1/2 110/1 via 199.99.46.1, 00:15:05, Serial1/1产生了2条默认路由。如果不加always默认路由发不下去。原因是在本身没有默认路由时，不能像邻居下发默认路由。现在将R4和R5之前default-information original always删掉。在R4上写一条指向R3的默认路由，在到ospf 中公布default-information original此时在R6和R5上都有一条指向R5的默认路由。MPLS TE 实验（实现资源隔离TE）2011年8月22日星期一端口配置R5-8-9-10-11-12 起isis 协议 level-2 router isis net 49.0001.0000.0005.00 is-type level-2-only metric-style wide MPLS-TE必须启动ISIS的宽度量值支持（TLV类型135） mpls traffic-eng router-id Loopback0 指定TE的ID 如果不配置，isis不会承载TE mpls traffic-eng level-2 指定TE在那一层里传播。建议路由器为LEV-2 ,TE也为2! R5678 与R1112 起BGP AS 38351bgp log-neighbor-changes 只与反射器R11R12建立邻居 redistribute static neighbor 11.11.11.11 remote-as 38351 neighbor 11.11.11.11 update-source Loopback0 neighbor 12.12.12.12 remote-as 38351 neighbor 12.12.12.12 update-source Loopback0 no auto-summaryR1112是5、6、7、8的路由反射器。router bgp 38351 no synchronization bgp log-neighbor-changes neighbor 5.5.5.5 remote-as 38351 neighbor 5.5.5.5 update-source Loopback0 neighbor 5.5.5.5 route-reflector-clientR5678 与R1112 起MP-BGP 打开VPNV4 neighborR5配置address-family vpnv4 neighbor 11.11.11.11 activate neighbor 11.11.11.11 send-community extended neighbor 12.12.12.12 activate neighbor 12.12.12.12 send-community extended exit-address-familyR11配置address-family vpnv4 neighbor 5.5.5.5 activate neighbor 5.5.5.5 send-community extended neighbor 5.5.5.5 route-reflector-client VPNV4路由也要反射在全局下开启MPLS TE mpls traffic-eng tunnelsmpls traffic-eng reoptimize timers frequency 10 TE重新计算的时间，默认3600CRBRAR 的接口（除了与CE相连的接口）都开启MPLS TEinterface FastEthernet0/1 ip address 199.99.56.1 255.255.255.252 ip router isis mpls traffic-eng tunnels ip rsvp bandwidth此时可以SHOW R5#show mpls traffic-eng tunnels summary Signalling Summary: LSP Tunnels Process: running RSVP Process: running Forwarding: enabled Head: 2 interfaces, 2 active signalling attempts, 2 established 3 activations, 1 deactivations Midpoints: 0, Tails: 2 Periodic reoptimization: every 10 seconds, next in 0 seconds (重新计算路由的时间，可以配置) Periodic auto-bw collection: disabledR5#show mpls traffic-eng topology brief My_System_id: 0001.0000.0005.00, Globl Link Generation 21Signalling error holddown: 10 secIGP Id: 0001.0000.0005.00, MPLS TE Id:5.5.5.5 Router Node link0 :Nbr IGP Id: 0001.0000.0009.00, gen:1 frag_id 0, Intf Address:199.99.5.1, Nbr Intf Address:199.99.5.2 TE metric:10, IGP metric:10, attribute_flags:0x0IGP Id: 0001.0000.0008.00, MPLS TE Id:8.8.8.8 Router Node link0 :Nbr IGP Id: 0001.0000.0010.00, gen:15 frag_id 0, Intf Address:199.99.8.1, Nbr Intf Address:199.99.8.2 TE metric:10, IGP metric:10, attribute_flags:0x0IGP Id: 0001.0000.0009.00, MPLS TE Id:9.9.9.9 Router Node link0 :Nbr IGP Id: 0001.0000.0009.03, gen:20 frag_id 0, Intf Address:199.99.19.1 TE metric:10, IGP metric:10, attribute_flags:0x0 link1 :Nbr IGP Id: 0001.0000.0009.02, gen:20 frag_id 0, Intf Address:199.99.9.1 TE metric:10, IGP metric:10, attribute_flags:0x0 link2 :Nbr IGP Id: 0001.0000.0005.00, gen:20 frag_id 0, Intf Address:199.99.5.2, Nbr Intf Address:199.99.5.1 TE metric:10, IGP metric:10, attribute_flags:0x0IGP Id: 0001.0000.0010.00, MPLS TE Id:10.10.10.10 Router Node link0 :Nbr IGP Id: 0001.0000.0010.02, gen:21 frag_id 0, Intf Address:199.99.10.1 TE metric:10, IGP metric:10, attribute_flags:0x0 link1 :Nbr IGP Id: 0001.0000.0009.03, gen:21 frag_id 0, Intf Address:199.99.19.2 TE metric:10, IGP metric:10, attribute_flags:0x0 link2 :Nbr IGP Id: 0001.0000.0008.00, gen:21 frag_id 0, Intf Address:199.99.8.2, Nbr Intf Address:199.99.8.1 TE metric:10, IGP metric:10, attribute_flags:0x0IGP Id: 0001.0000.0011.00, MPLS TE Id:11.11.11.11 Router Node link0 :Nbr IGP Id: 0001.0000.0011.03, gen:11 frag_id 0, Intf Address:199.99.11.1 TE metric:10, IGP metric:10, attribute_flags:0x0 link1 :Nbr IGP Id: 0001.0000.0009.02, gen:11 frag_id 0, Intf Address:199.99.9.2 TE metric:10, IGP metric:10, attribute_flags:0x0IGP Id: 0001.0000.0012.00, MPLS TE Id:12.12.12.12 Router Node link0 :Nbr IGP Id: 0001.0000.0010.02, gen:13 frag_id 0, Intf Address:199.99.10.2 TE metric:10, IGP metric:10, attribute_flags:0x0 link1 :Nbr IGP Id: 0001.0000.0011.03, gen:13 frag_id 0, Intf Address:199.99.11.2 TE metric:10, IGP metric:10, attribute_flags:0x0IGP Id: 0001.0000.0009.02, Network Node link0 :Nbr IGP Id: 0001.0000.0009.00, gen:5 link1 :Nbr IGP Id: 0001.0000.0011.00, gen:5IGP Id: 0001.0000.0009.03, Network Node link0 :Nbr IGP Id: 0001.0000.0009.00, gen:19 link1 :Nbr IGP Id: 0001.0000.0010.00, gen:19IGP Id: 0001.0000.0010.02, Network Node link0 :Nbr IGP Id: 0001.0000.0010.00, gen:9 link1 :Nbr IGP Id: 0001.0000.0012.00, gen:9IGP Id: 0001.0000.0011.03, Network Node link0 :Nbr IGP Id: 0001.0000.0011.00, gen:10 link1 :Nbr IGP Id: 0001.0000.0012.00, gen:10路由器之间的TE 已经建立好了。建立R5到R8的tunnelinterface Tunnel0 description 8.8.8.8 ip unnumbered Loopback0 tunnel destination 8.8.8.8 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce公布到IGP里 tunnel mpls traffic-eng autoroute metric absolute 10宣布到IGP的METRIC 这里有3种方式。 tunnel mpls traffic-eng path-option 10 explicit name R5R8-A严格路径 no routing dynamic!interface Tunnel1 ip unnumbered Loopback0 tunnel destination 8.8.8.8 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng autoroute metric absolute 10 tunnel mpls traffic-eng path-option 20 explicit name R5R8-B no routing dynamicip explicit-path name R5R8-A enable next-address 9.9.9.9 next-address 11.11.11.11 next-address 12.12.12.12 next-address 10.10.10.10 next-address 8.8.8.8 ! ip explicit-path name R5R8-B enable next-address 9.9.9.9 next-address 10.10.10.10 next-address 8.8.8.8在配置完后会显示tunnel protocol up现在R5到R8可以走2条tunnelR5#show ip route 8.8.8.8Routing entry for 8.8.8.8/32 Known via isis, distance 115, metric 10, type level-2 Redistributing via isis Last update from 8.8.8.8 on Tunnel1, 00:50:49 ago Routing Descriptor Blocks: * 8.8.8.8, from 8.8.8.8, via Tunnel0 Route metric is 10, traffic share count is 1 8.8.8.8, from 8.8.8.8, via Tunnel1 Route metric is 10, traffic share count is 1 负载均衡可以通过配置2条tunnel的带宽，实现不均衡负载，也可以用traffic-share命令进行调整。R5# traceroute 8.8.8.8Type escape sequence to abort.Tracing the route to 8.8.8.8 1 199.99.5.2 MPLS: Label 17 Exp 0 152 msec 172 msec 180 msec 2 199.99.19.2 MPLS: Label 16 Exp 0 212 msec 199.99.9.2 MPLS: Label 27 Exp 0 220 msec 199.99.19.2 MPLS: Label 16 Exp 0 140 msec 3 199.99.11.2 MPLS: Label 27 Exp 0 164 msec 199.99.8.1 216 msec 199.99.11.2 MPLS: Label 27 Exp 0 212 msec 配置MCE由于是MCE所以要建立相应VPN的vrfip vrf signal rd 38351:100 route-target export 100:100 route-target import 100:100!ip vrf wcdma rd 38351:200 route-target export 100:200 route-target import 100:200为了便于测试建立两个LOOPBACK 放入2个VPNinterface Loopback1 ip vrf forwarding signal ip address 192.168.1.1 255.255.255.255!interface Loopback2 ip vrf forwarding wcdma ip address 10.60.1.1 255.255.255.255在AR上配置VRF ip vrf forwarding!ip vrf signal rd 38351:100 route-target export 100:100 route-target import 100:100!ip vrf wcdma rd 38351:200 route-target export 100:200 route-target import 100:200用子接口连接AR和MCE 并绑定vrfR5配置interface FastEthernet0/0.1 encapsulation dot1Q 10 ip vrf forwarding signal ip address 192.168.5.2 255.255.255.252interface FastEthernet0/0.2 encapsulation dot1Q 20 ip vrf forwarding wcdma ip address 10.60.5.2 255.255.255.252AR与MCE 之间起BGP R5配置address-family ipv4 vrf wcdma neighbor 10.60.5.1 remote-as 100 neighbor 10.60.5.1 activate no synchronization exit-address-family ! address-family ipv4 vrf signal neighbor 192.168.5.1 remote-as 100 neighbor 192.168.5.1 activate no synchronization exit-address-familyR1配置router bgp 100 no synchronization bgp log-neighbor-changes no auto-summary ! address-family ipv4 vrf wcdma redistribute connected redistribute static neighbor 10.60.5.2 remote-as 38351 neighbor 10.60.5.2 activate no synchronization exit-address-family ! address-family ipv4 vrf signal redistribute connected redistribute static neighbor 192.168.5.2 remote-as 38351 neighbor 192.168.5.2 activate no synchronization exit-address-family在R5上写路由策略将不同子接口上来的流量指定到不同的tunnel中。R5上做route-maproute-map signal permit 10set interface Tunnel0!route-map wcdma permit 10 set interface Tunnel1在子接口中应用route-mapinterface FastEthernet0/0.1 encapsulation dot1Q 10 ip vrf forwarding signal ip address 192.168.5.2 255.255