本產品的文件集力求使用無偏見用語。針對本文件集的目的,無偏見係定義為未根據年齡、身心障礙、性別、種族身分、民族身分、性別傾向、社會經濟地位及交織性表示歧視的用語。由於本產品軟體使用者介面中硬式編碼的語言、根據 RFP 文件使用的語言,或引用第三方產品的語言,因此本文件中可能會出現例外狀況。深入瞭解思科如何使用包容性用語。
思科已使用電腦和人工技術翻譯本文件,讓全世界的使用者能夠以自己的語言理解支援內容。請注意,即使是最佳機器翻譯,也不如專業譯者翻譯的內容準確。Cisco Systems, Inc. 對這些翻譯的準確度概不負責,並建議一律查看原始英文文件(提供連結)。
本檔案介紹如何在Cisco IOS®中設定每個多點傳送VPN(mVPN)設定檔。
附註:本文所述的配置適用於提供商邊緣(PE)路由器。
繼續進行本檔案所述的設定之前,請確認執行Cisco IOS的特定平台上是否支援mVPN設定檔。
本檔案中的資訊是根據Cisco IOS的所有版本。
本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除(預設)的組態來啟動。如果您的網路正在作用,請確保您已瞭解任何指令可能造成的影響。
本節介紹如何在Cisco IOS中配置mVPN配置檔案。
附註:使用命令查詢工具(僅供已註冊客戶使用)可獲取本節中使用的命令的更多資訊。
附註:Cisco IOS目前不支援所有設定檔。
附註:本文檔中使用的虛擬路由/轉發(VRF)是VRF one。Rosen MLDP已重新命名為Default MDT。
為全域性上下文或每個VRF配置mVPN配置檔案。在Cisco IOS中配置mVPN配置檔案時,可以使用舊方法或新方法來定義VRF。
以下是舊方法的範例:
ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
以下是新方法的範例:
vrf definition one
rd 1:1
!
address-family ipv4
route-target export 1:1
route-target import 1:1
exit-address-family
對於全域性環境中的配置檔案,必須啟用multicast-routing:
ip multicast-routing
對於VRF上下文中的配置檔案,必須為VRF啟用multicast-routing:
ip multicast-routing vrf one
您可以使用以下全域性命令為使用MLDP的配置檔案啟用多點標籤分發協定(MLDP)的日誌記錄:
mpls mldp logging notifications
對於兩種情況(全域性或VRF情景),都必須為提供商邊緣 — 客戶邊緣(PE-CE)鏈路上的提供商邊緣(PE)路由器啟用協定無關組播(PIM):
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
Cisco IOS提供適用於MLDP的快速重新路由(FRR)。MLDP為控制平面協定的組播流量必須使用主流量工程(TE)隧道,才能使流量受FRR保護。主TE隧道可以是手動TE隧道或主自動隧道。鏈路必須由TE FRR保護,手動備份隧道或備份自動隧道。
此示例使用手動主和手動備份隧道。
必須配置此全域性命令,MLDP才能使用多協定標籤交換(MPLS)TE隧道:
mpls mldp path traffic-eng
此配置用於主一跳隧道使用的受保護介面:
interface Ethernet3/0
ip address 10.1.6.6 255.255.255.0
load-interval 30
mpls ip
mpls traffic-eng tunnels
mpls traffic-eng backup-path Tunnel0
ip rsvp bandwidth 10000
end
此組態用於備份通道:
interface Tunnel0
ip unnumbered Loopback0
load-interval 30
tunnel source Loopback0
tunnel mode mpls traffic-eng
tunnel destination 10.100.1.3
tunnel mpls traffic-eng path-option 1 explicit name P6-to-P3
此組態用於主要的一躍點通道:
interface Tunnel1
ip unnumbered Loopback0
load-interval 30
mpls ip
tunnel source Loopback0
tunnel mode mpls traffic-eng
tunnel destination 10.100.1.3
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng path-option 1 explicit name P6-to-P3-direct
tunnel mpls traffic-eng fast-reroute
附註:在主通道上需要mpls ip配置,因為必須在受保護的通道上啟用MLDP。需要使用autoroute announce配置來確保TE隧道用於轉發流量。
Cisco IOS支援Make Before Break(MBB)功能,但只有在新路徑可用後使用固定延遲的方法。Cisco IOS中沒有查詢/確認機制。
這是用於配置MBB固定延遲的全域性命令:
P1(config)#mpls mldp make-before-break delay ?
<0-60000> Delay in milliseconds
預設值為0,因此預設情況下沒有MBB。
本節介紹每個mVPN配置檔案所需的配置。
將以下配置用於配置檔案0:
vrf definition one
rd 1:1
!
address-family ipv4
mdt default 232.1.1.1
route-target export 1:1
route-target import 1:1
exit-address-family
!
ip multicast-routing
ip multicast-routing vrf one
interface Loopback0
ip address 10.100.1.1 255.255.255.255
ip pim sparse-mode
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
neighbor 10.100.1.7 route-reflector-client
exit-address-family
!
address-family ipv4 mdt
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
!
附註:對於此配置檔案,必須在全域性環回介面上啟用PIM。地址系列(AF)IPv4組播分佈樹(MDT)必須用於核心中所有型別的PIM信令(不僅用於PIM源特定多播(SSM))。
將以下配置用於配置檔案1:
vrf definition one
rd 1:2
vpn id 1000:2000
!
address-family ipv4
mdt default mpls mldp 10.100.1.1
route-target export 1:1
route-target import 1:1
exit-address-family
!
ip multicast-routing vrf one
mpls mldp logging notifications
router bgp 1
bgp log-neighbor-changes
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.2.9 remote-as 65002
neighbor 10.2.2.9 activate
exit-address-family
Cisco IOS目前不支援設定檔2,而MLDP不支援使用多點對多點(MP2MP)的分割槽MDT。
將以下配置用於配置檔案3:
vrf definition one
rd 1:1
!
address-family ipv4
mdt auto-discovery pim
mdt default 232.1.1.1
route-target export 1:1
route-target import 1:1
exit-address-family
!
ip multicast-routing vrf one
!
interface Loopback0
ip address 10.100.1.1 255.255.255.255
ip pim sparse-mode
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
附註:對於此配置檔案,必須在全域性環回介面上啟用PIM。由於使用了PIM的邊界網關協定 — 自動發現(BGP-AD),因此不再需要AF IPv4 MDT,這是配置檔案0所必需的。
Cisco IOS目前不支援設定檔4,且MLDP不支援使用MP2MP的分割槽MDT。
Cisco IOS目前不支援設定檔5,且分割槽MDT上不支援PIM訊號。
將以下配置用於配置檔案6:
vrf definition one
rd 1:1
!
address-family ipv4
route-target export 1:1
route-target import 1:1
exit-address-family
!
ip multicast-routing vrf one
ip multicast vrf one mpls mldp
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.1.8 remote-as 65001
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
!
ip pim vrf one mpls source Loopback0
將以下配置用於配置檔案7:
ip multicast-routing
ip multicast mpls mldp
interface Loopback0
ip address 10.100.1.1 255.255.255.255
ip pim sparse-mode
!
interface Ethernet2/0
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.1.8 remote-as 65001
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4
redistribute connected
neighbor 10.2.1.8 activate
neighbor 10.100.1.7 activate
exit-address-family
ip pim ssm default
ip pim mpls source Loopback0
本節介紹TE頭端路由器和TE尾端路由器上的配置檔案8所需的配置。
對TE頭端路由器上的配置檔案8使用以下配置:
ip multicast-routing
ip multicast mpls traffic-eng
mpls traffic-eng tunnels
mpls traffic-eng destination list name from-PE3
ip 10.100.1.1 path-option 1 dynamic
ip 10.100.1.2 path-option 1 dynamic
ip 10.100.1.4 path-option 1 explicit name to-PE4
interface Tunnel0
ip unnumbered Loopback0
ip pim passive
ip igmp static-group 232.1.1.1 source 10.2.3.10
tunnel mode mpls traffic-eng point-to-multipoint
tunnel destination list mpls traffic-eng name from-PE3
!
interface Ethernet1/0
ip address 10.1.10.3 255.255.255.0
mpls traffic-eng tunnels
ip rsvp bandwidth 10000
!
router ospf 1
network 10.1.7.0 0.0.0.255 area 0
network 10.1.10.0 0.0.0.255 area 0
network 10.100.0.0 0.0.255.255 area 0
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4
redistribute connected
neighbor 10.100.1.7 activate
exit-address-family
ip pim ssm default
附註:點對多點(P2MP)TE通道的末端路由器需要目的地清單。通往末端路由器的路徑選項可以是顯式選項,也可以是動態選項。
在TE末端路由器上的配置檔案8使用以下配置:
ip multicast-routing
ip multicast mpls traffic-eng
mpls traffic-eng tunnels
interface Ethernet0/0
ip address 10.1.1.1 255.255.255.0
mpls traffic-eng tunnels
ip rsvp bandwidth 10000
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.1.8 remote-as 65001
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4
redistribute connected
neighbor 10.2.1.8 activate
neighbor 10.100.1.7 activate
exit-address-family
ip pim ssm default
ip mroute 10.2.3.0 255.255.255.0 10.100.1.3
附註:在全域性環境中,指向TE頭端路由器的源需要靜態mroute。
對設定檔9使用以下設定:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv4
mdt auto-discovery mldp
mdt default mpls mldp 10.100.1.3
route-target export 1:1
route-target import 1:1
exit-address-family
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
router bgp 1
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
Cisco IOS目前不支援設定檔10,P2MP TE不支援BGP-AD。
對設定檔11使用以下設定:
vrf definition one
rd 1:1
!
address-family ipv4
mdt auto-discovery pim
mdt default 232.1.1.1
mdt overlay use-bgp
route-target export 1:1
route-target import 1:1
exit-address-family
!
ip multicast-routing vrf one
!
interface Loopback0
ip address 10.100.1.1 255.255.255.255
ip pim sparse-mode
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
附註:對於此配置檔案,必須在全域性環回介面上啟用PIM。由於使用了PIM的BGP-AD,因此不再需要配置檔案0所需的AF IPv4 MDT。
對設定檔12使用以下設定:
vrf definition one
rd 1:1
!
address-family ipv4
mdt auto-discovery mldp
mdt default mpls mldp p2mp
mdt overlay use-bgp
route-target export 1:1
route-target import 1:1
exit-address-family
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
!
對設定檔13使用以下設定:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv4
mdt auto-discovery mldp
mdt default mpls mldp 10.100.1.3
mdt overlay use-bgp
route-target export 1:1
route-target import 1:1
exit-address-family
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
router bgp 1
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
對設定檔14使用以下設定:
vrf definition one
rd 1:1
!
address-family ipv4
mdt auto-discovery mldp
mdt strict-rpf interface
mdt partitioned mldp p2mp
mdt overlay use-bgp
route-target export 1:1
route-target import 1:1
exit-address-family
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
!
Cisco IOS目前不支援設定檔15,且MLDP不支援使用MP2MP的分割槽MDT。
Cisco IOS目前不支援設定檔16。
對設定檔17使用以下設定:
vrf definition one
rd 1:1
!
address-family ipv4
mdt auto-discovery mldp
mdt default mpls mldp p2mp
route-target export 1:1
route-target import 1:1
exit-address-family
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
!
Cisco IOS目前不支援設定檔18。
vrf definition one
rd 1:1
!
address-family ipv4
mdt auto-discovery ingress-replication
mdt default ingress-replication
route-target export 1:1
route-target import 1:1
exit-address-family
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
!
Cisco IOS目前不支援設定檔20和P2MP自動通道TE。
vrf definition one
rd 1:1
!
address-family ipv4
mdt auto-discovery ingress-replication
mdt default ingress-replication
mdt overlay use-bgp
route-target export 1:1
route-target import 1:1
exit-address-family
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
!
Cisco IOS目前不支援設定檔22和P2MP自動通道TE。
Cisco IOS目前不支援設定檔23和IR。
Cisco IOS目前不支援設定檔24和P2MP自動通道TE。
vrf definition one
rd 1:1
!
address-family ipv4
mdt auto-discovery ingress-replication
mdt default ingress-replication
mdt overlay use-bgp
route-target export 1:1
route-target import 1:1
exit-address-family
!
!
interface Ethernet2/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
!
router bgp 1
neighbor 10.100.1.7 remote-as 1
neighbor 10.100.1.7 update-source Loopback0
!
address-family ipv4 mvpn
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.7 activate
neighbor 10.100.1.7 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute connected
neighbor 10.2.1.8 remote-as 65001
neighbor 10.2.1.8 activate
exit-address-family
!
Cisco IOS目前不支援設定檔26和P2MP自動通道TE。
本節中的資訊假設路由器上實施了正確的配置,以使單播AS MPLS VPN可操作。
mVPN不支援選項D。
選項A需要常規mVPN配置。您可以在自治系統中擁有任何配置檔案,並且配置檔案不必在不同自治系統中匹配。
對於選項B和C,如果將回送介面IP位址從邊界閘道通訊協定(BGP)重新分配到其他自治系統(AS)的內部閘道通訊協定(IGP),則不需要使用PIM向量。
配置檔案0(使用非分段隧道)僅支援自治系統(AS間)mVPN。
選項B需要常規mVPN配置。只能使用AF IPv4 MDT;不支援AF IPv4 MVPN。
在PE路由器上需要使用具有路由區分器(RD)的PIM向量源,並使用以下額外配置:
ip multicast vrf one rpf proxy rd vector
自治系統邊界路由器(ASBR)必須在ASBR到ASBR的鏈路上啟用PIM。ASBR還必須為內部邊界網關協定(iBGP)鄰居和ASBR外部邊界網關協定(eBGP)鄰居配置AF IPv4 MDT。
ASBR上需要以下附加配置:
interface Ethernet0/0
description inter-as link
ip address 10.3.1.3 255.255.255.0
ip pim sparse-mode
mpls bgp forwarding
router bgp 1
bgp log-neighbor-changes
no bgp default route-target filter
neighbor 10.3.1.4 remote-as 2
neighbor 10.100.1.6 remote-as 1
neighbor 10.100.1.6 update-source Loopback0
!
address-family vpnv4
neighbor 10.3.1.4 activate
neighbor 10.3.1.4 send-community extended
neighbor 10.100.1.6 activate
neighbor 10.100.1.6 send-community extended
exit-address-family
!
address-family ipv4 mdt
neighbor 10.3.1.4 activate
neighbor 10.3.1.4 send-community extended
neighbor 10.100.1.6 activate
neighbor 10.100.1.6 send-community extended
exit-address-family
配置檔案0(使用非分段隧道)僅支援自治系統(AS間)mVPN。
選項C需要常規mVPN配置。其他AS的PE環回字首由AF IPv4中的BGP通告。
PE路由器上還需要不帶RD的PIM向量源,並具有以下附加配置:
ip multicast rpf proxy vector
ASBR必須在ASBR到ASBR的鏈路上啟用PIM。ASBR還必須為iBGP鄰居和ASBR eBGP鄰居配置AF IPv4 MDT。
ASBR上需要以下附加配置:
interface Ethernet0/0
description inter-as link
ip address 10.3.1.3 255.255.255.0
ip pim sparse-mode
mpls bgp forwarding
router bgp 1
bgp log-neighbor-changes
neighbor 10.3.1.4 remote-as 2
neighbor 10.100.1.6 remote-as 1
neighbor 10.100.1.6 update-source Loopback0
!
address-family ipv4
redistribute ospf 1 metric 100 route-map loopbacks-into-BGP
neighbor 10.3.1.4 activate
neighbor 10.3.1.4 send-community extended
neighbor 10.3.1.4 send-label
neighbor 10.100.1.6 activate
neighbor 10.100.1.6 send-community extended
neighbor 10.100.1.6 send-label
exit-address-family
!
address-family ipv4 mdt
neighbor 10.3.1.4 activate
neighbor 10.3.1.4 send-community extended
neighbor 10.100.1.6 activate
neighbor 10.100.1.6 send-community extended
exit-address-family
!
附註:自治系統之間的AF IPv4 MDT還可以在eBGP多躍點會話而不是ASBR上的路由反射器(RR)上配置。
目前不支援選項B。
Cisco IOS不支援遞迴轉送對等類別(FEC)。因此,由iBGP將PE環回重新分配到其他AS是不夠的,因為P(提供商)路由器缺少對其他AS中PE路由器的瞭解。
如果IGP將PE環回重新分發到其他AS,則支援。在這種情況下,支援分割槽式MDT和全網狀P2MP MLDP的配置檔案。此處不能使用AF IPv4 MDT;必須使用AF IPv4 MVPN。BGP mVPN會話可在PE和RR之間運行。在RR之間,已經存在針對AF VPNv4/6運行的eBGP多躍點會話。
必須啟用MLDP BGP-AD。PE路由器上需要inter-as關鍵字,以確保BGP-AD型別1路由沒有no-export社群。
本節介紹配置檔案12和17的配置。
以下是配置檔案17的PE路由器配置:
vrf definition one
rd 1:2
!
address-family ipv4
mdt auto-discovery mldp inter-as
mdt default mpls mldp p2mp
mdt data mpls mldp 100
route-target export 1:1
route-target import 1:1
exit-address-family
以下是設定檔17的ASBR上的組態:
interface Ethernet0/0
ip address 10.3.1.3 255.255.255.0
ip pim sparse-mode
mpls ip
mpls bgp forwarding
end
附註:在ASBR之間的鏈路上需要mpls ip配置,以便在它們之間具有MLDP鄰居關係。
以下是設定檔17的RR上的組態:
router bgp 1
bgp log-neighbor-changes
neighbor 10.100.1.1 remote-as 1
neighbor 10.100.1.1 update-source Loopback0
neighbor 10.100.1.3 remote-as 1
neighbor 10.100.1.3 update-source Loopback0
neighbor 10.100.1.8 remote-as 2
neighbor 10.100.1.8 ebgp-multihop 244
neighbor 10.100.1.8 update-source Loopback0
!
address-family ipv4
neighbor 10.100.1.1 activate
neighbor 10.100.1.1 route-reflector-client
neighbor 10.100.1.1 send-label
neighbor 10.100.1.3 activate
neighbor 10.100.1.3 route-reflector-client
neighbor 10.100.1.3 send-label
no neighbor 10.100.1.8 activate
exit-address-family
!
address-family ipv4 mvpn
neighbor 10.100.1.1 activate
neighbor 10.100.1.1 send-community extended
neighbor 10.100.1.1 route-reflector-client
neighbor 10.100.1.8 activate
neighbor 10.100.1.8 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.1 activate
neighbor 10.100.1.1 send-community extended
neighbor 10.100.1.1 route-reflector-client
neighbor 10.100.1.3 activate
neighbor 10.100.1.3 send-community extended
neighbor 10.100.1.3 route-reflector-client
neighbor 10.100.1.8 activate
neighbor 10.100.1.8 send-community extended
neighbor 10.100.1.8 next-hop-unchanged
exit-address-family
!
此組態與設定檔17使用的組態相同,但BGP有額外的C — 多點傳送訊號傳送。
下面是配置檔案12的PE路由器上的配置:
vrf definition one
rd 1:2
!
address-family ipv4
mdt auto-discovery mldp inter-as
mdt default mpls mldp p2mp
mdt data mpls mldp 100
mdt overlay use-bgp
route-target export 1:1
route-target import 1:1
exit-address-family
本節介紹配置檔案14的配置。
以下是配置檔案14的PE路由器配置:
vrf definition one
rd 1:2
!
address-family ipv4
mdt auto-discovery mldp inter-as
mdt default mpls mldp p2mp
mdt data mpls mldp 100
mdt overlay use-bgp
route-target export 1:1
route-target import 1:1
exit-address-family
以下是設定檔14的ASBR上的組態:
interface Ethernet0/0
ip address 10.3.1.3 255.255.255.0
ip pim sparse-mode
mpls ip
mpls bgp forwarding
附註:在ASBR之間的鏈路上需要mpls ip,以便在它們之間具有MLDP鄰居關係。
以下是設定檔14的RR上的組態:
router bgp 1
bgp log-neighbor-changes
neighbor 10.100.1.1 remote-as 1
neighbor 10.100.1.1 update-source Loopback0
neighbor 10.100.1.3 remote-as 1
neighbor 10.100.1.3 update-source Loopback0
neighbor 10.100.1.8 remote-as 2
neighbor 10.100.1.8 ebgp-multihop 244
neighbor 10.100.1.8 update-source Loopback0
!
address-family ipv4
neighbor 10.100.1.1 activate
neighbor 10.100.1.1 route-reflector-client
neighbor 10.100.1.1 send-label
neighbor 10.100.1.3 activate
neighbor 10.100.1.3 route-reflector-client
neighbor 10.100.1.3 send-label
no neighbor 10.100.1.8 activate
exit-address-family
!
address-family ipv4 mvpn
neighbor 10.100.1.1 activate
neighbor 10.100.1.1 send-community extended
neighbor 10.100.1.1 route-reflector-client
neighbor 10.100.1.8 activate
neighbor 10.100.1.8 send-community extended
exit-address-family
!
address-family vpnv4
neighbor 10.100.1.1 activate
neighbor 10.100.1.1 send-community extended
neighbor 10.100.1.1 route-reflector-client
neighbor 10.100.1.3 activate
neighbor 10.100.1.3 send-community extended
neighbor 10.100.1.3 route-reflector-client
neighbor 10.100.1.8 activate
neighbor 10.100.1.8 send-community extended
neighbor 10.100.1.8 next-hop-unchanged
exit-address-family
!
提供此資訊的前提假設是在路由器上實施正確的配置,以使運營商的運營商(CsC)MPLS VPN能夠運行單播。
CsC僅支援配置檔案0。這意味著可以使用支援組播的VPN實現分層CsC。CsC的VPN已配置mVPN配置檔案0。運營商的網路也配置了mVPN配置檔案0。這意味著在CsC的CsC-PE路由器和運營商的PE路由器上有常規的mVPN配置,因此組播不需要其他配置。
目前沒有適用於此組態的驗證程序。
目前尚無適用於此組態的具體疑難排解資訊。