一个基本的MPLSBGPVPN配置

第第页一个基本的MPLSBGPVPN配置一个基本的MPLSBGPVPN配置

发表于：2023-06-23来源：：点击数：标签：

ipvrfvrf00001rd888:1route-targetboth888:1ipvrfvrf00002rd888:2route-targetboth888:2route-targetimport888:1importmapvrf00002-import-maproute-mapvrf00002-import-mappermit10match...Itisimportanttonotethatthe

ipvrfvrf00001

rd888:1

route-targetboth888:1

ipvrfvrf00002

rd888:2

route-targetboth888:2

route-targetimport888:1

importmapvrf00002-import-map

route-mapvrf00002-import-mappermit10

match...

Itisimportanttonotethattheroutemapisonlyneededforfinetuning.Normalimport/exportwithVRFscanjustextendedcommunities.Thethoughtofsecuritydependingongettingroutemapsbuiltrightratherscaresme.Luckily,basicsecurityisprovidedattheextendedcommunitylevel,makingroutehidingthenormalsituation.Thenroutemapscanbeusedtolimitconnectivitytoextranetpartnersites,ifthecustomersdon'twishtodothatforthemselvesbyspeakingBGPtothePErouters.

TheseVRFswouldtypicallythenbeassociatedwithinterfaces:

interfaceFastethernet0/2

ipvrfforwardingvrf00001

ipaddress...

interfaceFastethernet0/3

ipvrfforwardingvrf00002

ipaddress...

interfaceFastethernet0/4

ipvrfforwardingvrf00002

ipaddress...

VRFvrf00002isassociatedwithtwointerfacesthatconnecttotwositesforCustomerB.I'mdeliberatelyshowingFastEthernet,sincesomepeoplenowthinkthat'showwe'llbeconnectingtoSPsinmetropolitansettings.(ThinkBLEC:BuildingLocalExchangeCarrier,providingVPN,Internet,andVoiceconnectivity).

WeneedtobespeakingMBGPtocarryVPN-IPv4routesandattributestopeerPErouters.Wedon'tneedordinaryBGProutestoPEpeershowever.(Onalargerscale,wemightuseroutereflectorsviceiMBGPfull-meshpeering):

routerbgp888

nosynchronization!don'tdoIGPsynchronization(since

!theIGPwon'tcarrytherightroutesanyway)

nobgpdefaultipv4-activate!don'tdoordinaryBGP

neighbor10.60.0.5remote-as888!identifyaniBGPneighborandAS

neighbor10.61.0.1remote-as888!identifyanother

address-familyvpnv4unicast

neighbor10.60.0.5activate!activatesessiontosomeMBGPpeer

neighbor10.61.0.1activate!someotherMBGPpeer

exit-address-family

OurdesignmightuseeBGPtocommunicateroutestoCEroutersinacontrolledway,togetroutesintoeachVRF.Oritmightusestaticrouting,orsomeothermix.Wecanalsodefineper-VRFstaticroutesasshownbelow.

address-familyipv4unicastvrfvrf00001

redistributestatic

redistributeconnected

neighbor10.20.1.1remote-as65535!privateASnumber

neighbor10.20.1.1activate

noauto-summary

exit-address-family

address-familyipv4unicastvrfvrf00002

redistributestatic

redistributeconnected

neighbor10.20.2.2remote-as65535

neighbor10.20.2.2activ