Cu hnh MPLS-VPN c bn

M t:
Cu hnh cho router CE
- Cu hnh trao i tuyn gia PE v CE bao gm vic thc thi mt giao thc nh tuyn
(hay tuyn tnh (static)/ngm nh (default)) trn cc router CE. Cu hnh theo cch ca
mt giao thc nh tuyn thng thng. Trn PE, bi cnh nh tuyn (routing context)
VRF (hay cc bi cnh h a ch (address family context)) c yu cu trao i
tuyn gia PE v CE. Cc tuyn ny sau c phn phi ln nhau nh co tin trnh
MP-BGP trn VRF.
Cu hnh chuyn tip MPLS v nh danh VRF trn PE:
- Cu hnh chuyn tip MPLS l bc u tin xy dng MPLS VPN backbone ca nh
cung cp. Cc bc ti thiu cu hnh chuyn tip MPLS trn PE nh sau:
1. Cho php CEF.
2. Cu hnh giao thc nh tuyn IGP trn PE.
3. Cu hnh MPLS hay chuyn tip nhn trn giao tip PE kt ni vi P.
- Cc bc ny c gii quyt nhng chng trc nn y ta ch quan tm n
cu hnh nh danh VRF.
Cu hnh VRF trn PE

- Cu hnh VRF CustomerA trn PE1-AS1 v PE2-AS1 to bng nh tuyn VRF v

bng CEF cho CustomerA.
RouterPE(config)#ip vrf CustomerA
- Xa mt VRF :
RouterPE(config-vrf)#no ip vrf CustomerA
Ch : khi to hoc xa mt VRF s lm mt i a ch ip trn giao tip. Khi xut
hin thng ip :
% IP addresses from all interfaces in VRF CustomerA have been removed
Cu hnh RD

- RD to bng chuyn tip v nh tuyn. RD c thm vo u a ch Ipv4 ca khch

hng chuyn chng thnh a ch VPNv4 duy nht. Cu hnh thng s RD ca VRF:
RouterPE(config-vrf)#rd route-distinguisher
- RD c th c dng theo cc dng sau:
Ch s AS-16 bit : ch s 32 bit (v d: 1:100)
a ch IP 32 bit : ch s 16 bit (v d: 10.10.10.101:1)
- RD ch thay i khi xa VRF i. RD l duy nht cho mt VRF c th. Khng c hai
VRF trn mt router m cng gi tr RD. Nu thit lp cng RD cho nhiu VRF trn mt
router s c thng ip cnh bo sau:
% Cannot set RD, check if it's unique
Cu hnh chnh sch nhp (import) v xut (export)

- Cu hnh chnh sch nhp v xut cho cc community m rng ca MP-BGP. Chnh
sch ny dng lc tuyn cho RT c th.
Router(config-vrf)#route-target {import | export | both}

route-target-ext-community
- Kt hp VRF vi giao tip.
Nu trn giao tip cu hnh sn a ch IP th vic kt hp ny s lm mt a ch IP trn
giao tip nn phi cu hnh li.
V d:
PE1-AS1(config)#interface serial4/0
PE1-AS1(config-if)#ip add 172.16.1.1 255.255.255.252
PE1-AS1(config-if)# ip vrf forwarding CustomerA
% Interface Serial4/0 IP address 172.16.1.1 removed due to
enabling VRF CustomerA
PE1-AS1(config-if)#ip add 172.16.1.1 255.255.255.252
Kim chng cu hnh VRF trn PE:

- Kim tra s tn ti ca VRF trn giao tip

Router#show ip vrf
- Lit k cc giao tip hot ng trong mt VRF c th
Router#show ip vrf interfaces

Cu hnh MPLS-VPN c bn
M t:
Cu hnh cho router CE
- Cu hnh trao i tuyn gia PE v CE bao gm vic thc thi mt giao thc nh tuyn
(hay tuyn tnh (static)/ngm nh (default)) trn cc router CE. Cu hnh theo cch ca
mt giao thc nh tuyn thng thng. Trn PE, bi cnh nh tuyn (routing context)
VRF (hay cc bi cnh h a ch (address family context)) c yu cu trao i
tuyn gia PE v CE. Cc tuyn ny sau c phn phi ln nhau nh co tin trnh
MP-BGP trn VRF.
Cu hnh chuyn tip MPLS v nh danh VRF trn PE:
- Cu hnh chuyn tip MPLS l bc u tin xy dng MPLS VPN backbone ca nh
cung cp. Cc bc ti thiu cu hnh chuyn tip MPLS trn PE nh sau:
1. Cho php CEF.
2. Cu hnh giao thc nh tuyn IGP trn PE.
3. Cu hnh MPLS hay chuyn tip nhn trn giao tip PE kt ni vi P.
- Cc bc ny c gii quyt nhng chng trc nn y ta ch quan tm n
cu hnh nh danh VRF.
Cu hnh VRF trn PE

- Cu hnh VRF CustomerA trn PE1-AS1 v PE2-AS1 to bng nh tuyn VRF v

bng CEF cho CustomerA.
RouterPE(config)#ip vrf CustomerA
- Xa mt VRF :
RouterPE(config-vrf)#no ip vrf CustomerA

Ch : khi to hoc xa mt VRF s lm mt i a ch ip trn giao tip. Khi xut

hin thng ip :
% IP addresses from all interfaces in VRF CustomerA have been removed
Cu hnh RD

- RD to bng chuyn tip v nh tuyn. RD c thm vo u a ch Ipv4 ca khch

hng chuyn chng thnh a ch VPNv4 duy nht. Cu hnh thng s RD ca VRF:
RouterPE(config-vrf)#rd route-distinguisher
- RD c th c dng theo cc dng sau:
Ch s AS-16 bit : ch s 32 bit (v d: 1:100)
a ch IP 32 bit : ch s 16 bit (v d: 10.10.10.101:1)
- RD ch thay i khi xa VRF i. RD l duy nht cho mt VRF c th. Khng c hai
VRF trn mt router m cng gi tr RD. Nu thit lp cng RD cho nhiu VRF trn mt
router s c thng ip cnh bo sau:
% Cannot set RD, check if it's unique
Cu hnh chnh sch nhp (import) v xut (export)

- Cu hnh chnh sch nhp v xut cho cc community m rng ca MP-BGP. Chnh
sch ny dng lc tuyn cho RT c th.
Router(config-vrf)#route-target {import | export | both}
route-target-ext-community
- Kt hp VRF vi giao tip.
Nu trn giao tip cu hnh sn a ch IP th vic kt hp ny s lm mt a ch IP trn
giao tip nn phi cu hnh li.
V d:
PE1-AS1(config)#interface serial4/0
PE1-AS1(config-if)#ip add 172.16.1.1 255.255.255.252
PE1-AS1(config-if)# ip vrf forwarding CustomerA
% Interface Serial4/0 IP address 172.16.1.1 removed due to
enabling VRF CustomerA
PE1-AS1(config-if)#ip add 172.16.1.1 255.255.255.252
Kim chng cu hnh VRF trn PE:

- Kim tra s tn ti ca VRF trn giao tip

Router#show ip vrf
- Lit k cc giao tip hot ng trong mt VRF c th
Router#show ip vrf interfaces