Lab Mpls VPN

TRUNG TM TIN HC VNPRO
149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, Tp.HCM

Tel: 08 35124257 Fax: 08 35124314
Website: www.vnpro.vn Forum: http://www.vnpro.org
Livechat: www.vnpro,vn/support Email: vnpro@vnpro.org

GV: L c Phng Lab MPLS VPN

Yu cu:
- To MPLS core.
- Thc hin cc MPLS VPN cho cc khch hng A v B.
- Thc hin bi lab ny trong hai trng hp:
+ Customer A s dng static route. Customer B chy RIPv2 vi nh cung cp.
+ Customer A chy OSPF vi nh cung cp. Customer B chy EIGRP vi nh
cung cp.
Thc hin:
To MPLS core:
Bc 1: Chy mt giao thc nh tuyn IGP trong Core, m bo mi a ch trong Core
thy nhau. Trong bi lab ny ta chn IGP l OSPF.
R2( conf i g) #r out er ospf 1
R2( conf i g- r out er ) #net wor k 2. 2. 2. 0 0. 0. 0. 255 ar ea 0
R3( conf i g- r out er ) # net wor k 192. 168. 23. 0 0. 0. 0. 255 ar ea 0
R3( conf i g- r out er ) # net wor k 192. 168. 34. 0 0. 0. 0. 255 ar ea 0
Tel: 08 35124257 Fax: 08 35124314

Bc 2: Bt MPLS trn tt c cc router PE v P.
R2( conf i g) #i nt er f ace Fast Et her net 0/ 1
R2( conf i g- i f ) # mpl s i p
R3( conf i g- i f ) #i nt er f ace Fast Et her net 0/ 1
Show kim tra vic thit lp quan h LDP:
R3#show mpl s l dp nei ghbor
Peer LDP I dent : 2. 2. 2. 2: 0; Local LDP I dent 3. 3. 3. 3: 0
TCP connect i on: 2. 2. 2. 2. 646 - 3. 3. 3. 3. 48539
St at e: Oper ; Msgs sent / r cvd: 26/ 26; Downst r eam
Up t i me: 00: 16: 44
LDP di scover y sour ces:
Fast Et her net 0/ 0, Sr c I P addr : 192. 168. 23. 2
Addr esses bound t o peer LDP I dent :
192. 168. 23. 2 2. 2. 2. 2
Peer LDP I dent : 4. 4. 4. 4: 0; Local LDP I dent 3. 3. 3. 3: 0
TCP connect i on: 4. 4. 4. 4. 48088 - 3. 3. 3. 3. 646
St at e: Oper ; Msgs sent / r cvd: 26/ 27; Downst r eam
Up t i me: 00: 16: 43
LDP di scover y sour ces:
Fast Et her net 0/ 1, Sr c I P addr : 192. 168. 34. 4
Addr esses bound t o peer LDP I dent :
192. 168. 34. 4 4. 4. 4. 4
Ch : cc interface loopback sau ny nu c dng lm a ch i din trong mi
quan h BGP phi c qung b i ng subnet mask ca n. iu ny nhm m bo
h thng chuyn mch nhn hot ng ng n. Mun vy, ngay t u t a ch cho
cc loopback vi prefix length /32 hoc chn kiu network type l point to point
cho cc loopback ny.
R2( conf i g) #i nt er f ace Loopback0
R2( conf i g- i f ) #i p ospf net wor k poi nt - t o- poi nt
Tel: 08 35124257 Fax: 08 35124314

Bc 3: Bt BGP trn cc PE router.
R2( conf i g) #r out er bgp 234
R2( conf i g- r out er ) #nei ghbor 4. 4. 4. 4 r emot e- as 234
R2( conf i g- r out er ) #nei ghbor 4. 4. 4. 4 updat e- sour ce Loopback0
R4( conf i g- r out er ) #nei ghbor 2. 2. 2. 2 r emot e- as 234
R4( conf i g- r out er ) #nei ghbor 2. 2. 2. 2 updat e- sour ce Loopback0
Bc 4: Bt tnh nng VPNv4 cho BGP.
R2( conf i g- r out er ) #addr ess- f ami l y vpnv4
R2( conf i g- r out er - af ) #nei ghbor 4. 4. 4. 4 act i vat e
R4( conf i g- r out er ) #addr ess- f ami l y vpnv4
R4( conf i g- r out er - af ) #nei ghbor 2. 2. 2. 2 act i vat e

To MPLS VPN cho cc khch hng theo yu cu 1: khch hng A chy static
route, khch hng B chy RIPv2.
Vi khch hng A (chy static route).
Bc 1: To VRF cho khch hng A trn cc router PE ( y l cc router R2 v R4):
R2( conf i g) #i p vr f A
R2( conf i g- vr f ) # r d 15: 15
R2( conf i g- vr f ) #r out e- t ar get expor t 1: 1
R2( conf i g- vr f ) #r out e- t ar get i mpor t 5: 5
R4( conf i g) #i p vr f A
R4( conf i g- vr f ) #r d 15: 15
Bc 2: Gn cc VRF ny vo cc cng tng ng v tin hnh t a ch IP:
R2( conf i g) #i nt er f ace s2/ 1
R2( conf i g- i f ) #i p vr f f or war di ng A
R2( conf i g- i f ) #i p addr ess 192. 168. 12. 2 255. 255. 255. 0
R4( conf i g- i f ) #i p vr f f or war di ng A
Bc 3: Thc hin t a ch IP nh ch ra trn s cho khch hng A. Ping kim
tra gia PE v CE:
Tel: 08 35124257 Fax: 08 35124314

Trn R2:
R2#pi ng vrf A 192. 168. 12. 1

Type escape sequence t o abor t .
Sendi ng 5, 100- byt e I CMP Echos t o 192. 168. 12. 1, t i meout i s 2 seconds:
! ! ! ! !
Success r at e i s 100 per cent ( 5/ 5) , r ound- t r i p mi n/ avg/ max = 32/ 69/ 156
ms
R2#
Trn R4:
R4#pi ng vrf A 192. 168. 45. 5

! ! ! ! !
Success r at e i s 100 per cent ( 5/ 5) , r ound- t r i p mi n/ avg/ max = 28/ 46/ 68 ms
R4#
Bc 4: Chy static route vi khch hng A:
R2( conf i g) #i p r out e vr f A 1. 1. 1. 0 255. 255. 255. 0 192. 168. 12. 1
R4( conf i g) #i p r out e vr f A 5. 5. 5. 0 255. 255. 255. 0 192. 168. 45. 5
Bc 5: Trn cc router ca khch hng A, thc hin cc static route ch n cc mng
1.1.1.0/24 v 5.5.5.0/24:
R1A( conf i g) #i p r out e 5. 5. 5. 0 255. 255. 255. 0 192. 168. 12. 2
R5A( conf i g) #i p r out e 1. 1. 1. 0 255. 255. 255. 0 192. 168. 45. 4
Bc 6: Trn cc router PE, thc hin redistribute cc route static vo MP BGP cc
route ny c th i c ti u kia ca khch hng:
R2( conf i g- r out er ) #addr ess- f ami l y i pv4 vr f A
R2( conf i g- r out er - af ) #r edi st r i but e st at i c
R4( conf i g- r out er - af ) #r edi st r i but e st at i c
Bc 7: Kim tra trn cc router PE rng nhn c cc route static t u kia:
R2#show ip bgp vpnv4 vrf A
BGP t abl e ver si on i s 9, l ocal r out er I D i s 2. 2. 2. 2
St at us codes: s suppr essed, d damped, h hi st or y, * val i d, > best , i -
i nt er nal ,
r RI B- f ai l ur e, S St al e
Or i gi n codes: i - I GP, e - EGP, ? - i ncompl et e

Net wor k Next Hop Met r i c LocPr f Wei ght Pat h
Rout e Di st i ngui sher : 15: 15 ( def aul t f or vr f A)
*> 1. 1. 1. 0/ 24 192. 168. 12. 1 0 32768 ?
*>i 5. 5. 5. 0/ 24 4. 4. 4. 4 0 100 0 ?
Tel: 08 35124257 Fax: 08 35124314

i nt er nal ,

*>i 1. 1. 1. 0/ 24 2. 2. 2. 2 0 100 0 ?
*> 5. 5. 5. 0/ 24 192. 168. 45. 5 0 32768 ?
Bc 8: Kim tra rng cc a ch 1.1.1.1 v 5.5.5.5 thy c nhau:
Trn R1A:
R1A#pi ng 5. 5. 5. 5 sour ce 1. 1. 1. 1

Packet sent wi t h a sour ce addr ess of 1. 1. 1. 1
! ! ! ! !
ms
R1A#
Trn R5A:
R5A#pi ng 1. 1. 1. 1 sour ce 5. 5. 5. 5

Packet sent wi t h a sour ce addr ess of 5. 5. 5. 5
! ! ! ! !
ms
R5A#
Nh vy hai a ch 1.1.1.1 v 5.5.5.5 ti hai site ca khch hng A i n nhau c
thng qua ng hm MPLS VPN v bng static route. Mun cc a ch khc cng c
th i n c, ta phi thc hin thm vo cc route static thch hp.
Vi khch hng B (chy RIPv2):
Bc 1: To VRF cho khch hng B trn cc router PE ( y l cc router R2 v R4):
R2( conf i g) #i p vr f B
R2( conf i g- vr f ) # r d 67: 67
R4( conf i g) #i p vr f B
R4( conf i g- vr f ) #r d 67: 67
Tel: 08 35124257 Fax: 08 35124314

Bc 2: Gn cc VRF ny vo cc cng tng ng v tin hnh t a ch IP:
R2( conf i g- i f ) #i p vr f f or war di ng B
R4( conf i g- i f ) #i p vr f f or war di ng B
Bc 3: Thc hin t a ch IP nh ch ra trn s cho khch hng B. rng
bi lab ny c tnh a ch hai khch hng A v B hon ton ging nhau. Ping kim tra
gia PE v CE:
Trn R2:
R2#pi ng vrf B 192. 168. 12. 1

! ! ! ! !
ms
R2#
Trn R4:
R4#pi ng vrf B 192. 168. 45. 5

! ! ! ! !
Success r at e i s 100 per cent ( 5/ 5) , r ound- t r i p mi n/ avg/ max = 28/ 46/ 68 ms
R4#
Bc 4: Chy nh tuyn RIPv2 vi khch hng B.
R2( conf i g) #r out er r i p
R2( conf i g- r out er ) #addr ess- f ami l y i pv4 vr f B
R2( conf i g- r out er - af ) #ver si on 2
R2( conf i g- r out er - af ) #net wor k 192. 168. 12. 0
R2( conf i g- r out er - af ) #no aut o- summar y
R4( conf i g- r out er - af ) #ver si on 2
Tel: 08 35124257 Fax: 08 35124314

Bc 5: Trn cc router ca khch hng B cng thc hin chy RIPv2
R1B( conf i g) #r out er r i p
R1B( conf i g- r out er ) #ver si on 2
R1B( conf i g- r out er ) #net wor k 1. 0. 0. 0
R1B( conf i g- r out er ) #no aut o- summar y
R5B( conf i g) #r out er r i p
R5B( conf i g- r out er ) #ver si on 2
Bc 6: Kim tra bng nh tuyn VRF B trn cc router PE:
R2#show ip route vrf B
Gat eway of l ast r esor t i s not set
C 192. 168. 12. 0/ 24 i s di r ect l y connect ed, Ser i al 2/ 2
1. 0. 0. 0/ 24 i s subnet t ed, 1 subnet s
R 1. 1. 1. 0 [ 120/ 1] vi a 192. 168. 12. 1, 00: 00: 17, Ser i al 2/ 2
Gat eway of l ast r esor t i s not set
R 5. 5. 5. 0 [ 120/ 1] vi a 192. 168. 45. 5, 00: 00: 13, Ser i al 2/ 2
Bc 7: Trn cc router PE, thc hin redistribute cc route RIP vo MP BGP cc
route ny c th i c ti u kia ca khch hng:
R2( conf i g- r out er - af ) #r edi st r i but e r i p
R4( conf i g- r out er - af ) #r edi st r i but e r i p
Bc 8: Kim tra trn cc router PE rng nhn c cc route RIP t u kia:
R2#show ip bgp vpnv4 vrf B
i nt er nal ,

Rout e Di st i ngui sher : 67: 67 ( def aul t f or vr f B)
*> 1. 1. 1. 0/ 24 192. 168. 12. 1 1 32768 ?
*>i 5. 5. 5. 0/ 24 4. 4. 4. 4 1 100 0 ?
*> 192. 168. 12. 0 0. 0. 0. 0 0 32768 ?
*>i 192. 168. 45. 0 4. 4. 4. 4 0 100 0 ?
Tel: 08 35124257 Fax: 08 35124314


i nt er nal ,

*>i 1. 1. 1. 0/ 24 2. 2. 2. 2 1 100 0 ?
*> 5. 5. 5. 0/ 24 192. 168. 45. 5 1 32768 ?
*>i 192. 168. 12. 0 2. 2. 2. 2 0 100 0 ?
*> 192. 168. 45. 0 0. 0. 0. 0 0 32768 ?
Bc 9: Trn cc router PE phi thc hin redistribute cc route BGP nhn c vo
RIP:
R2( conf i g- r out er - af ) #r edi st r i but e bgp 234 met r i c 5
R4( conf i g- r out er - af ) #r edi st r i but e bgp 234 met r i c 5
Bc 10: Lc ny hai u khch hng thy c nhau. Ta thc hin mt s thao tc
kim tra trn cc router khch hng:
Xem bng nh tuyn:
R1B#show ip route rip
R 192. 168. 45. 0/ 24 [ 120/ 5] vi a 192. 168. 12. 2, 00: 00: 00, Ser i al 2/ 0
R 5. 5. 5. 0 [ 120/ 5] vi a 192. 168. 12. 2, 00: 00: 00, Ser i al 2/ 0
R5B#show ip route rip
R 192. 168. 12. 0/ 24 [ 120/ 5] vi a 192. 168. 45. 4, 00: 00: 07, Ser i al 2/ 0
R 1. 1. 1. 0 [ 120/ 5] vi a 192. 168. 45. 4, 00: 00: 07, Ser i al 2/ 0
Thc hin ping kim tra:
R1B#pi ng 5. 5. 5. 5
! ! ! ! !
ms
R5B#pi ng 1. 1. 1. 1
! ! ! ! !

Tel: 08 35124257 Fax: 08 35124314

To MPLS VPN cho cc khch hng theo yu cu 2: khch hng A chy OSPF
route, khch hng B chy EIGRP.
Vi khch hng A (chy OSPF):
Cc bc to VRF, gn VRF, t a ch IP trn cng cho khch hng A ging nh thc
hin cho yu cu 1. Ta thc hin cc bc tip theo chy OSPF gia khch hng v nh
cung cp dch v:
Bc1: Chy OSPF trn cc router khch hng.
R1A( conf i g) #r out er ospf 1
R1A( conf i g- r out er ) #net wor k 0. 0. 0. 0 255. 255. 255. 255 ar ea 0
R5A( conf i g) #r out er ospf 1
R5A( conf i g- r out er ) #net wor k 0. 0. 0. 0 255. 255. 255. 255 ar ea 0
Bc 2: Trn cc router PE chy giao thc OSPF cho VRF A.
R2( conf i g) #r out er ospf 11 vr f A
Bc 3: Kim tra bng nh tuyn tng ng vi VRF A trn cc router PE, ta thy cc
route t khch hng c hc:
R2#sh ip route vrf A
O 1. 1. 1. 1 [ 110/ 65] vi a 192. 168. 12. 1, 00: 13: 26, Ser i al 2/ 1
R4#show ip route vrf A
O 5. 5. 5. 5 [ 110/ 65] vi a 192. 168. 45. 5, 00: 13: 03, Ser i al 2/ 1
Kim tra mi quan h lng ging t cc router bin ca khch hng:
R1A#show ip ospf neighbor
Nei ghbor I D Pr i St at e Dead Ti me Addr ess I nt er f ace
192. 168. 12. 2 0 FULL/ - 00: 00: 38 192. 168. 12. 2 Ser i al 2/ 0
R5A#show ip ospf neighbor
Nei ghbor I D Pr i St at e Dead Ti me Addr ess I nt er f ace
192. 168. 45. 4 0 FULL/ - 00: 00: 36 192. 168. 45. 4 Ser i al 2/ 0
Bc 4: Trn cc router PE, thc hin redistribute cc route OSPF ca khch hng A vo
MP BGP:
Trn R2:
R2( conf i g- r out er - af ) #r edi st r i but e ospf 11 vr f A
Tel: 08 35124257 Fax: 08 35124314

Trn R4:
R4( conf i g- r out er - af ) #r edi st r i but e ospf 11 vr f A
Bc 5: Kim tra trn cc router PE rng nhn c cc route OSPF t u kia:
i nt er nal ,

*> 1. 1. 1. 1/ 32 192. 168. 12. 1 65 32768 ?
*>i 5. 5. 5. 5/ 32 4. 4. 4. 4 65 100 0 ?
*> 192. 168. 12. 0 0. 0. 0. 0 0 32768 ?
*>i 192. 168. 45. 0 4. 4. 4. 4 0 100 0 ?
i nt er nal ,

*>i 1. 1. 1. 1/ 32 2. 2. 2. 2 65 100 0 ?
*> 5. 5. 5. 5/ 32 192. 168. 45. 5 65 32768 ?
*>i 192. 168. 12. 0 2. 2. 2. 2 0 100 0 ?
*> 192. 168. 45. 0 0. 0. 0. 0 0 32768 ?
Bc 6: Trn cc router PE, ti VRF A, thc hin redistribute cc route BGP vo OSPF.
R2( conf i g- r out er ) #r edi st r i but e bgp 234 subnet s
R4( conf i g- r out er ) #r edi st r i but e bgp 234 subnet s
kim tra trn cc router khch hng.
Tel: 08 35124257 Fax: 08 35124314

Xem bng nh tuyn:
R1A#show ip route ospf
O I A 192. 168. 45. 0/ 24 [ 110/ 65] vi a 192. 168. 12. 2, 00: 31: 17, Ser i al 2/ 0
O I A 5. 5. 5. 5 [ 110/ 129] vi a 192. 168. 12. 2, 00: 31: 17, Ser i al 2/ 0
R5A#show ip route ospf
O I A 192. 168. 12. 0/ 24 [ 110/ 65] vi a 192. 168. 45. 4, 00: 31: 50, Ser i al 2/ 0
O I A 1. 1. 1. 1 [ 110/ 129] vi a 192. 168. 45. 4, 00: 31: 50, Ser i al 2/ 0
Ping kim tra:
R1A#pi ng 5. 5. 5. 5
! ! ! ! !
ms
R5A#pi ng 1. 1. 1. 1
! ! ! ! !
ms
Vi khch hng B (chy EIGRP):
Cc bc to VRF, gn VRF, t a ch IP trn cng cho khch hng B ging nh thc
hin cho yu cu 1. Ta thc hin cc bc tip theo chy EIGRP gia khch hng v nh
cung cp dch v:
Bc1: Chy EIGRP trn cc router khch hng.
R1B( conf i g) # r out er ei gr p 100
R5B( conf i g) # r out er ei gr p 100
Bc 2: Trn cc router PE chy giao thc EIGRP cho VRF B.
R2( conf i g) #r out er ei gr p 1
R2( conf i g- r out er - af ) #aut onomous- syst em100
R4( conf i g- r out er - af ) #aut onomous- syst em100
Tel: 08 35124257 Fax: 08 35124314

Ch : Trong cc tin trnh EIGRP chy cho VRF B, chng ta phi khai bo s
autonomous system (AS) cho khp vi s AS ca cc tin trnh EIGRP ang chy trn
cc router ca khch hng. iu ny c thc hin bng cu lnh aut onomous-
syst em.
Bc 3: Kim tra bng nh tuyn tng ng vi VRF B trn cc router PE, ta thy cc
route t khch hng c hc:
D 1. 1. 1. 0 [ 90/ 2297856] vi a 192. 168. 12. 1, 00: 11: 45, Ser i al 2/ 2
D 5. 5. 5. 0 [ 90/ 2297856] vi a 192. 168. 45. 5, 00: 12: 20, Ser i al 2/ 2
Kim tra mi quan h lng ging t cc router bin ca khch hng:
R1B#show ip eigrp neighbors
I P- EI GRP nei ghbor s f or pr ocess 100
H Addr ess I nt er f ace Hol d Upt i me SRTT RTO Q Seq
( sec) ( ms) Cnt Num
0 192. 168. 12. 2 Se2/ 0 11 00: 14: 14 200 2700 0 5
R5B#show ip eigrp neighbors
I P- EI GRP nei ghbor s f or pr ocess 100
H Addr ess I nt er f ace Hol d Upt i me SRTT RTO Q Seq
( sec) ( ms) Cnt Num
0 192. 168. 45. 4 Se2/ 0 11 00: 14: 41 396 2376 0 3
Bc 4: Trn cc router PE, thc hin redistribute cc route EIGRP ca khch hng B
vo MP BGP:
R2( conf i g- r out er - af ) #r edi st r i but e ei gr p 100
R4( conf i g- r out er - af ) #r edi st r i but e ei gr p 100
Bc 5: Kim tra trn cc router PE rng nhn c cc route EIGRP t u kia:
i nt er nal ,

*> 1. 1. 1. 0/ 24 192. 168. 12. 1 2297856 32768 ?
*>i 5. 5. 5. 0/ 24 4. 4. 4. 4 2297856 100 0 ?
Tel: 08 35124257 Fax: 08 35124314

*> 192. 168. 12. 0 0. 0. 0. 0 0 32768 ?
*>i 192. 168. 45. 0 4. 4. 4. 4 0 100 0 ?
i nt er nal ,

*>i 1. 1. 1. 0/ 24 2. 2. 2. 2 2297856 100 0 ?
*> 5. 5. 5. 0/ 24 192. 168. 45. 5 2297856 32768 ?
*>i 192. 168. 12. 0 2. 2. 2. 2 0 100 0 ?
*> 192. 168. 45. 0 0. 0. 0. 0 0 32768 ?
Bc 6: Trn cc router PE, ti VRF B, thc hin redistribute cc route BGP vo EIGRP.
R2( conf i g- r out er - af ) #r edi st r i but e bgp 234 met r i c 10000 100 255 1 1500
R4( conf i g- r out er - af ) #r edi st r i but e bgp 234 met r i c 10000 100 255 1 1500
kim tra trn cc router khch hng.
Xem bng nh tuyn:
R1B#show ip route eigrp
D 192. 168. 45. 0/ 24 [ 90/ 2681856] vi a 192. 168. 12. 2, 00: 25: 08, Ser i al 2/ 0
D 5. 5. 5. 0 [ 90/ 2809856] vi a 192. 168. 12. 2, 00: 25: 08, Ser i al 2/ 0
R5B#show ip route eigrp
D 192. 168. 12. 0/ 24 [ 90/ 2681856] vi a 192. 168. 45. 4, 00: 25: 40, Ser i al 2/ 0
D 1. 1. 1. 0 [ 90/ 2809856] vi a 192. 168. 45. 4, 00: 25: 40, Ser i al 2/ 0
Thc hin ping kim tra:
R1B#pi ng 5. 5. 5. 5
! ! ! ! !
ms
Tel: 08 35124257 Fax: 08 35124314

R5B#pi ng 1. 1. 1. 1
! ! ! ! !
ms

Lab Mpls VPN

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Lab Mpls VPN

Uploaded by

Copyright:

Available Formats

TRUNG TM TIN HC VNPRO

149/1D Ung Vn Khim, Phng 25, Qun Bnh Thnh, Tp.HCM

You might also like