华为BGP-MPLS-VPN多实例VPN配置实例
sysname R1 #
ip vpn-instance TMIS ipv4-family
route-distinguisher 65107:300001
vpn-target 300:300 export-extcommunity vpn-target 300:300 import-extcommunity #
mpls lsr-id 1.1.1.1 mpls #
mpls ldp
# # aaa
authentication-scheme default authorization-scheme default accounting-scheme default domain default
domain default_admin
local-user admin password cipher ^HqTM5!W[YjKUGU-KkpB=u/# local-user admin service-type http #
isis 1
is-level level-2 cost-style wide
network-entity 10.0000.0000.0000.0001.00 #
firewall zone Local priority 16 #
interface Ethernet0/0/0 #
interface Ethernet0/0/1 #
interface Serial0/0/0 link-protocol ppp #
interface Serial0/0/1 link-protocol ppp #
interface Serial0/0/2 link-protocol ppp #
interface Serial0/0/3 link-protocol ppp #
interface GigabitEthernet0/0/0
ip address 10.220.12.1 255.255.255.0 isis enable 1 mpls mpls ldp #
interface GigabitEthernet0/0/1
ip address 10.220.14.1 255.255.255.0 isis enable 1
mpls mpls ldp #
interface GigabitEthernet0/0/2
ip address 10.220.19.1 255.255.255.0 isis enable 1 mpls mpls ldp #
interface GigabitEthernet0/0/3 ip binding vpn-instance TMIS
ip address 10.220.101.1 255.255.255.0 # wlan #
interface NULL0 #
interface LoopBack0
ip address 1.1.1.1 255.255.255.255 isis enable 1 #
interface LoopBack1
ip binding vpn-instance TMIS
ip address 192.168.1.1 255.255.255.0 #
bgp 65107
group VPN internal
peer VPN connect-interface LoopBack0 peer 2.2.2.2 as-number 65107 peer 2.2.2.2 group VPN
peer 3.3.3.3 as-number 65107 peer 3.3.3.3 group VPN
peer 4.4.4.4 as-number 65107 peer 4.4.4.4 group VPN
peer 6.6.6.6 as-number 65107 peer 6.6.6.6 group VPN
peer 7.7.7.7 as-number 65107 peer 7.7.7.7 group VPN
peer 9.9.9.9 as-number 65107 peer 9.9.9.9 group VPN #
ipv4-family unicast undo synchronization peer VPN enable
peer VPN reflect-client peer 2.2.2.2 enable peer 2.2.2.2 group VPN peer 3.3.3.3 enable peer 3.3.3.3 group VPN peer 4.4.4.4 enable peer 4.4.4.4 group VPN peer 6.6.6.6 enable peer 6.6.6.6 group VPN peer 7.7.7.7 enable peer 7.7.7.7 group VPN peer 9.9.9.9 enable peer 9.9.9.9 group VPN #
ipv4-family vpnv4
undo policy vpn-target peer VPN enable
peer VPN reflect-client peer 2.2.2.2 enable peer 2.2.2.2 group VPN peer 3.3.3.3 enable peer 3.3.3.3 group VPN peer 4.4.4.4 enable peer 4.4.4.4 group VPN peer 6.6.6.6 enable peer 6.6.6.6 group VPN peer 7.7.7.7 enable peer 7.7.7.7 group VPN #
ipv4-family vpn-instance TMIS import-route direct import-route static
peer 10.220.101.9 as-number 100 #
user-interface con 0 user-interface vty 0 4 user-interface vty 16 20 #
return
sysname R9
#
ip vpn-instance IVMS ipv4-family
route-distinguisher 65107:102
vpn-target 102:102 export-extcommunity vpn-target 102:102 import-extcommunity #
ip vpn-instance TMIS ipv4-family
route-distinguisher 65107:300009
vpn-target 300:300 export-extcommunity vpn-target 300:300 import-extcommunity #
mpls lsr-id 9.9.9.9 mpls #
mpls ldp # # aaa
authentication-scheme default authorization-scheme default accounting-scheme default domain default
domain default_admin
local-user admin password cipher ^HqTM5!W[Y+/Y@:Y>Lw(Yu^# local-user admin service-type http #
isis 1
is-level level-2 cost-style wide
network-entity 10.0000.0000.0000.0009.00 #
firewall zone Local priority 16 #
interface Ethernet0/0/0
ip binding vpn-instance IVMS
ip address 192.168.8.1 255.255.255.0 #
interface Ethernet0/0/1 #
interface Serial0/0/0 link-protocol ppp