跨国公司MPLS VPN经典架构图-低调大师

跨国公司MPLS VPN经典架构图

2017-11-07 1042

跨国公司MPLS经典架构图

要求：CNPO和 GZPO internet 流量都走总部SEBO Hub site出去

PE 配置如下：

R1#sh run

Building configuration...

Current configuration : 2051 bytes

!

version 12.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R1

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip source-route

no ip icmp rate-limit unreachable

ip cef

!

ip vrf yeslab

rd 123:4

route-target export 123:4

route-target import 123:5

route-target import 123:6

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

mpls label range 100 199

!

ip tcp synwait-time 5

!

interface Loopback0

ip address 11.1.1.1 255.255.255.255

ip ospf 110 area 0

!

interface FastEthernet0/0

no ip address

shutdown

speed auto

duplex auto

!

interface FastEthernet0/1

ip vrf forwarding yeslab

ip address 14.1.1.1 255.255.255.0

speed auto

duplex auto

!

interface Serial1/0

ip address 17.1.1.1 255.255.255.0

ip ospf 110 area 0

mpls ip

serial restart-delay 0

!

interface Serial1/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/3

description line for internet

ip address 41.1.1.1 255.255.255.0

serial restart-delay 0

!

router ospf 110

log-adjacency-changes

default-information originate

!

router bgp 123

no bgp default ipv4-unicast

bgp log-neighbor-changes

neighbor 11.1.1.7 remote-as 123

neighbor 11.1.1.7 update-source Loopback0

!

address-family ipv4

no synchronization

no auto-summary

exit-address-family

!

address-family vpnv4

neighbor 11.1.1.7 activate

neighbor 11.1.1.7 send-community extended

exit-address-family

!

address-family ipv4 vrf yeslab

no synchronization

neighbor 14.1.1.4 remote-as 4

neighbor 14.1.1.4 ebgp-multihop 255

neighbor 14.1.1.4 activate

exit-address-family

!

no ip http server

no ip http secure-server

!

ip route 0.0.0.0 0.0.0.0 Serial1/3 41.1.1.4

!

mpls ldp router-id Loopback0 force

!

control-plane

R2#sh run

Building configuration...

Current configuration : 1908 bytes

!

version 12.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R2

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip source-route

no ip icmp rate-limit unreachable

ip cef

!

ip vrf yeslab

rd 123:5

route-target export 123:5

route-target import 123:4

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

mpls label range 200 299

!

ip tcp synwait-time 5

!

interface Loopback0

ip address 11.1.1.2 255.255.255.255

ip ospf 110 area 0

!

interface FastEthernet0/0

no ip address

shutdown

speed auto

duplex auto

!

interface FastEthernet0/1

ip vrf forwarding yeslab

ip address 25.1.1.2 255.255.255.0

speed auto

duplex auto

!

interface Serial1/0

ip address 27.1.1.2 255.255.255.0

ip ospf 110 area 0

mpls ip

serial restart-delay 0

!

interface Serial1/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/3

no ip address

shutdown

serial restart-delay 0

!

router ospf 110

log-adjacency-changes

!

router bgp 123

no bgp default ipv4-unicast

bgp log-neighbor-changes

neighbor 11.1.1.7 remote-as 123

neighbor 11.1.1.7 update-source Loopback0

!

address-family ipv4

no synchronization

no auto-summary

exit-address-family

!

address-family vpnv4

neighbor 11.1.1.7 activate

neighbor 11.1.1.7 send-community extended

exit-address-family

!

address-family ipv4 vrf yeslab

no synchronization

neighbor 25.1.1.5 remote-as 5

neighbor 25.1.1.5 ebgp-multihop 255

neighbor 25.1.1.5 activate

exit-address-family

!

no ip http server

no ip http secure-server

!

mpls ldp router-id Loopback0 force

!

control-plane

R3#sh run

Building configuration...

Current configuration : 1908 bytes

!

version 12.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R3

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip source-route

no ip icmp rate-limit unreachable

ip cef

!

ip vrf yeslab

rd 123:6

route-target export 123:6

route-target import 123:4

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

mpls label range 300 399

!

ip tcp synwait-time 5

!

interface Loopback0

ip address 11.1.1.3 255.255.255.255

ip ospf 110 area 0

!

interface FastEthernet0/0

no ip address

shutdown

speed auto

duplex auto

!

interface FastEthernet0/1

ip vrf forwarding yeslab

ip address 36.1.1.3 255.255.255.0

speed auto

duplex auto

!

interface Serial1/0

ip address 37.1.1.3 255.255.255.0

ip ospf 110 area 0

mpls ip

serial restart-delay 0

!

interface Serial1/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/3

no ip address

shutdown

serial restart-delay 0

!

router ospf 110

log-adjacency-changes

!

router bgp 123

no bgp default ipv4-unicast

bgp log-neighbor-changes

neighbor 11.1.1.7 remote-as 123

neighbor 11.1.1.7 update-source Loopback0

!

address-family ipv4

no synchronization

no auto-summary

exit-address-family

!

address-family vpnv4

neighbor 11.1.1.7 activate

neighbor 11.1.1.7 send-community extended

exit-address-family

!

address-family ipv4 vrf yeslab

no synchronization

neighbor 36.1.1.6 remote-as 6

neighbor 36.1.1.6 ebgp-multihop 255

neighbor 36.1.1.6 activate

exit-address-family

!

no ip http server

no ip http secure-server

!

mpls ldp router-id Loopback0 force

!

control-plane

P配置如下：

R7#sh run

Building configuration...

Current configuration : 2151 bytes

!

version 12.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R7

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip source-route

no ip icmp rate-limit unreachable

ip cef

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

mpls label range 700 799

!

ip tcp synwait-time 5

!

interface Loopback0

ip address 11.1.1.7 255.255.255.255

ip ospf 110 area 0

!

interface FastEthernet0/0

ip address 78.1.1.7 255.255.255.0

ip ospf 110 area 0

speed auto

duplex auto

!

interface FastEthernet0/1

no ip address

shutdown

speed auto

duplex auto

!

interface Serial1/0

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/1

ip address 17.1.1.7 255.255.255.0

ip ospf 110 area 0

mpls ip

serial restart-delay 0

!

interface Serial1/2

ip address 27.1.1.7 255.255.255.0

ip ospf 110 area 0

mpls ip

serial restart-delay 0

!

interface Serial1/3

ip address 37.1.1.7 255.255.255.0

ip ospf 110 area 0

mpls ip

serial restart-delay 0

!

router ospf 110

log-adjacency-changes

!

router bgp 123

no bgp default ipv4-unicast

bgp log-neighbor-changes

neighbor 11.1.1.1 remote-as 123

neighbor 11.1.1.1 update-source Loopback0

neighbor 11.1.1.2 remote-as 123

neighbor 11.1.1.2 update-source Loopback0

neighbor 11.1.1.3 remote-as 123

neighbor 11.1.1.3 update-source Loopback0

!

address-family ipv4

no synchronization

no auto-summary

exit-address-family

!

address-family vpnv4

neighbor 11.1.1.1 activate

neighbor 11.1.1.1 send-community extended

neighbor 11.1.1.1 route-reflector-client

neighbor 11.1.1.2 activate

neighbor 11.1.1.2 send-community extended

neighbor 11.1.1.2 route-reflector-client

neighbor 11.1.1.3 activate

neighbor 11.1.1.3 send-community extended

neighbor 11.1.1.3 route-reflector-client

exit-address-family

!

no ip http server

no ip http secure-server

!

mpls ldp router-id Loopback0 force

!

control-plane

CE配置如下：

R4#sh run

Building configuration...

Current configuration : 1658 bytes

!

version 12.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R4

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip source-route

no ip icmp rate-limit unreachable

ip cef

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

!

ip tcp synwait-time 5

!

interface Loopback0

ip address 11.1.1.4 255.255.255.255

!

interface Loopback1

ip address 192.168.4.1 255.255.255.255

ip nat inside

!

interface FastEthernet0/0

ip address 14.1.1.4 255.255.255.0

ip nat inside

speed auto

duplex auto

!

interface FastEthernet0/1

no ip address

shutdown

speed auto

duplex auto

!

interface Serial1/0

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/3

description for internet

ip address 41.1.1.4 255.255.255.0

ip nat outside

serial restart-delay 0

!

router bgp 4

no synchronization

bgp log-neighbor-changes

network 192.168.4.1 mask 255.255.255.255

neighbor 14.1.1.1 remote-as 123

neighbor 14.1.1.1 ebgp-multihop 255

neighbor 14.1.1.1 default-originate

no auto-summary

!

ip nat inside source list ALL interface Serial1/3 overload

no ip http server

no ip http secure-server

!

ip route 0.0.0.0 0.0.0.0 Serial1/3 41.1.1.1

!

ip access-list extended ALL

permit ip 192.168.0.0 0.0.255.255 any

!

control-plane

R5#sh run

Building configuration...

Current configuration : 1367 bytes

!

version 12.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R5

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip source-route

no ip icmp rate-limit unreachable

ip cef

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

!

ip tcp synwait-time 5

!

interface Loopback0

ip address 11.1.1.5 255.255.255.255

!

interface Loopback1

ip address 192.168.5.1 255.255.255.255

!

interface FastEthernet0/0

ip address 25.1.1.5 255.255.255.0

speed auto

duplex auto

!

interface FastEthernet0/1

no ip address

shutdown

speed auto

duplex auto

!

interface Serial1/0

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/3

no ip address

shutdown

serial restart-delay 0

!

router bgp 5

no synchronization

bgp log-neighbor-changes

network 192.168.5.1 mask 255.255.255.255

neighbor 25.1.1.2 remote-as 123

neighbor 25.1.1.2 ebgp-multihop 255

no auto-summary

!

no ip http server

no ip http secure-server

!

control-plane

R6#sh run

Building configuration...

Current configuration : 1367 bytes

!

version 12.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R6

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip source-route

no ip icmp rate-limit unreachable

ip cef

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

!

ip tcp synwait-time 5

!

interface Loopback0

ip address 11.1.1.6 255.255.255.255

!

interface Loopback1

ip address 192.168.6.1 255.255.255.255

!

interface FastEthernet0/0

ip address 36.1.1.6 255.255.255.0

speed auto

duplex auto

!

interface FastEthernet0/1

no ip address

shutdown

speed auto

duplex auto

!

interface Serial1/0

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial1/3

no ip address

shutdown

serial restart-delay 0

!

router bgp 6

no synchronization

bgp log-neighbor-changes

network 192.168.6.1 mask 255.255.255.255

neighbor 36.1.1.3 remote-as 123

neighbor 36.1.1.3 ebgp-multihop 255

no auto-summary

!

no ip http server

no ip http secure-server

!

control-plane

Internet 配置如下：

R8#sh run

Building configuration...

Current configuration : 948 bytes

!

version 12.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R8

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip source-route

no ip icmp rate-limit unreachable

ip cef

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

!

ip tcp synwait-time 5

!

interface Loopback0

ip address 8.8.8.8 255.255.255.255

ip ospf 110 area 0

!

interface Loopback1

no ip address

!

interface FastEthernet0/0

ip address 78.1.1.8 255.255.255.0

ip ospf 110 area 0

speed auto

duplex auto

!

interface FastEthernet0/1

no ip address

shutdown

speed auto

duplex auto

!

router ospf 110

log-adjacency-changes

!

no ip http server

no ip http secure-server

!

control-plane

本文转自 bilinyee博客，原文链接： http://blog.51cto.com/ericfu/1698320 如需转载请自行联系原作者

微信关注我们

原文链接：https://yq.aliyun.com/articles/536514

转载内容版权归作者及来源网站所有！

低调大师中文资讯倾力打造互联网数据资讯、行业资源、电子商务、移动互联网、网络营销平台。持续更新报道IT业界、互联网、市场资讯、驱动更新,是最及时权威的产业资讯及硬件资讯报道平台。

kubernetes要实现的目标——随机关掉一台机器，看你的服务能否正常；减少的应用实例能否自动迁移并恢复到其他节点；服务能否随着流量进行自...

Kubernetes 是来自 Google 云平台的开源容器集群管理系统。基于Docker构建一个容器的调度服务。该系统可以自动在一个容器集群中选择一个工作容器供使用。其核心概念是 Container Pod。首先，为什么要用Kubernetes? 使用一个工具先要梳理下使用这个工具的目标，我们不是为了工具而用工具。 Kubernetes的目标用一张被很多人引用过的图来说明最好： Kubernetes 的目标是让你可以像管理牲畜一样管理你的服务，而不是像宠物一样，同时提高资源的利用率，让码农关注在应用开发本身，高可用的事情就交给 Kubernetes吧。这个图本来是openstack提出的，但纯粹IaaS层的解决方案实现不了这个目标，于是有了Kubernetes。 Kubernetes和Borg系出同门，基本是Borg的开源改进版本，引用Google Borg论文里的说法： it (1) hides the details of resource management and failure handling so its users can focus on applicat...

2017-11-08

673

Exchange Server 2013 系列三：部署规划杜飞通过对客户的需求进行调研分析之后就需要进行整体规划，才能保证项目的可用性、可靠性和可扩展性。在Exchange Server2013的规划涉及内容很广，在此只能是将一些常用的、基本的内容提到。活动目录规划： Exchange 2013 向 Active Directory 域服务架构中添加了新的属性，并对现有的类和属性进行了其他修改，以满足邮件处理的基本需求。Microsoft Exchange Server 2013 将所有配置和收件人信息存储在 Active Directory 目录服务数据库中。如果运行 Exchange 2013 的计算机需要有关收件人的信息以及 Exchange 组织的配置信息，则其必须查询 Active Directory 才能访问所需信息。 Active Directory 数据库将信息存储在三种类型的逻辑分区中，分别是架构分区、配置分区和域分区。架构分区存储以下两种类型的信息：架构类定义可在 Active Directory 中创建和存储的对象的所有类型。架构属性定义可用于描述存...

2017-11-08

546

资源下载

更多资源

Mario

马里奥是站在游戏界顶峰的超人气多面角色。马里奥靠吃蘑菇成长，特征是大鼻子、头戴帽子、身穿背带裤，还留着胡子。与他的双胞胎兄弟路易基一起，长年担任任天堂的招牌角色。

腾讯云软件源

为解决软件依赖安装时官方源访问速度慢的问题，腾讯云为一些软件搭建了缓存服务。您可以通过使用腾讯云软件源站来提升依赖包的安装速度。为了方便用户自由搭建服务架构，目前腾讯云软件源站支持公网访问和内网访问。

Spring

Spring框架（Spring Framework）是由Rod Johnson于2002年提出的开源Java企业级应用框架，旨在通过使用JavaBean替代传统EJB实现方式降低企业级编程开发的复杂性。该框架基于简单性、可测试性和松耦合性设计理念，提供核心容器、应用上下文、数据访问集成等模块，支持整合Hibernate、Struts等第三方框架，其适用范围不仅限于服务器端开发，绝大多数Java应用均可从中受益。

Sublime Text

Sublime Text具有漂亮的用户界面和强大的功能，例如代码缩略图，Python的插件，代码段等。还可自定义键绑定，菜单和工具栏。Sublime Text 的主要功能包括：拼写检查，书签，完整的 Python API ， Goto 功能，即时项目切换，多选择，多窗口等等。Sublime Text 是一个跨平台的编辑器，同时支持Windows、Linux、Mac OS X等操作系统。