首页 文章 精选 留言 我的

精选列表

搜索[vpn],共457篇文章
优秀的个人博客,低调大师

跨国公司MPLS VPN经典架构图

跨国公司MPLS经典架构图 要求:CNPO和 GZPO internet 流量都走总部SEBO Hub site出去 PE 配置如下: R1#sh run Building configuration... Current configuration : 2051 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec ! hostname R1 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip source-route no ip icmp rate-limit unreachable ip cef ! ! ip vrf yeslab rd 123:4 route-target export 123:4 route-target import 123:5 route-target import 123:6 ! ! ! no ip domain lookup no ipv6 cef ! ! multilink bundle-name authenticated mpls label range 100 199 ! ! ! ! ip tcp synwait-time 5 ! ! ! ! ! ! interface Loopback0 ip address 11.1.1.1 255.255.255.255 ip ospf 110 area 0 ! interface FastEthernet0/0 no ip address shutdown speed auto duplex auto ! interface FastEthernet0/1 ip vrf forwarding yeslab ip address 14.1.1.1 255.255.255.0 speed auto duplex auto ! interface Serial1/0 ip address 17.1.1.1 255.255.255.0 ip ospf 110 area 0 mpls ip serial restart-delay 0 ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 description line for internet ip address 41.1.1.1 255.255.255.0 serial restart-delay 0 ! router ospf 110 log-adjacency-changes default-information originate ! router bgp 123 no bgp default ipv4-unicast bgp log-neighbor-changes neighbor 11.1.1.7 remote-as 123 neighbor 11.1.1.7 update-source Loopback0 ! address-family ipv4 no synchronization no auto-summary exit-address-family ! address-family vpnv4 neighbor 11.1.1.7 activate neighbor 11.1.1.7 send-community extended exit-address-family ! address-family ipv4 vrf yeslab no synchronization neighbor 14.1.1.4 remote-as 4 neighbor 14.1.1.4 ebgp-multihop 255 neighbor 14.1.1.4 activate exit-address-family ! no ip http server no ip http secure-server ! ! ip route 0.0.0.0 0.0.0.0 Serial1/3 41.1.1.4 ! ! mpls ldp router-id Loopback0 force ! ! control-plane R2#sh run Building configuration... Current configuration : 1908 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec ! hostname R2 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip source-route no ip icmp rate-limit unreachable ip cef ! ! ip vrf yeslab rd 123:5 route-target export 123:5 route-target import 123:4 ! ! ! no ip domain lookup no ipv6 cef ! ! multilink bundle-name authenticated mpls label range 200 299 ! ! ! ! ip tcp synwait-time 5 ! ! ! ! ! ! interface Loopback0 ip address 11.1.1.2 255.255.255.255 ip ospf 110 area 0 ! interface FastEthernet0/0 no ip address shutdown speed auto duplex auto ! interface FastEthernet0/1 ip vrf forwarding yeslab ip address 25.1.1.2 255.255.255.0 speed auto duplex auto ! interface Serial1/0 ip address 27.1.1.2 255.255.255.0 ip ospf 110 area 0 mpls ip serial restart-delay 0 ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! router ospf 110 log-adjacency-changes ! router bgp 123 no bgp default ipv4-unicast bgp log-neighbor-changes neighbor 11.1.1.7 remote-as 123 neighbor 11.1.1.7 update-source Loopback0 ! address-family ipv4 no synchronization no auto-summary exit-address-family ! address-family vpnv4 neighbor 11.1.1.7 activate neighbor 11.1.1.7 send-community extended exit-address-family ! address-family ipv4 vrf yeslab no synchronization neighbor 25.1.1.5 remote-as 5 neighbor 25.1.1.5 ebgp-multihop 255 neighbor 25.1.1.5 activate exit-address-family ! no ip http server no ip http secure-server ! ! ! ! mpls ldp router-id Loopback0 force ! ! control-plane R3#sh run Building configuration... Current configuration : 1908 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec ! hostname R3 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip source-route no ip icmp rate-limit unreachable ip cef ! ! ip vrf yeslab rd 123:6 route-target export 123:6 route-target import 123:4 ! ! ! no ip domain lookup no ipv6 cef ! ! multilink bundle-name authenticated mpls label range 300 399 ! ! ! ! ip tcp synwait-time 5 ! ! ! ! ! ! interface Loopback0 ip address 11.1.1.3 255.255.255.255 ip ospf 110 area 0 ! interface FastEthernet0/0 no ip address shutdown speed auto duplex auto ! interface FastEthernet0/1 ip vrf forwarding yeslab ip address 36.1.1.3 255.255.255.0 speed auto duplex auto ! interface Serial1/0 ip address 37.1.1.3 255.255.255.0 ip ospf 110 area 0 mpls ip serial restart-delay 0 ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! router ospf 110 log-adjacency-changes ! router bgp 123 no bgp default ipv4-unicast bgp log-neighbor-changes neighbor 11.1.1.7 remote-as 123 neighbor 11.1.1.7 update-source Loopback0 ! address-family ipv4 no synchronization no auto-summary exit-address-family ! address-family vpnv4 neighbor 11.1.1.7 activate neighbor 11.1.1.7 send-community extended exit-address-family ! address-family ipv4 vrf yeslab no synchronization neighbor 36.1.1.6 remote-as 6 neighbor 36.1.1.6 ebgp-multihop 255 neighbor 36.1.1.6 activate exit-address-family ! no ip http server no ip http secure-server ! ! ! ! mpls ldp router-id Loopback0 force ! ! control-plane P配置如下: R7#sh run Building configuration... Current configuration : 2151 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec ! hostname R7 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip source-route no ip icmp rate-limit unreachable ip cef ! ! ! ! no ip domain lookup no ipv6 cef ! ! multilink bundle-name authenticated mpls label range 700 799 ! ! ! ! ip tcp synwait-time 5 ! ! ! ! ! ! interface Loopback0 ip address 11.1.1.7 255.255.255.255 ip ospf 110 area 0 ! interface FastEthernet0/0 ip address 78.1.1.7 255.255.255.0 ip ospf 110 area 0 speed auto duplex auto ! interface FastEthernet0/1 no ip address shutdown speed auto duplex auto ! interface Serial1/0 no ip address shutdown serial restart-delay 0 ! interface Serial1/1 ip address 17.1.1.7 255.255.255.0 ip ospf 110 area 0 mpls ip serial restart-delay 0 ! interface Serial1/2 ip address 27.1.1.7 255.255.255.0 ip ospf 110 area 0 mpls ip serial restart-delay 0 ! interface Serial1/3 ip address 37.1.1.7 255.255.255.0 ip ospf 110 area 0 mpls ip serial restart-delay 0 ! router ospf 110 log-adjacency-changes ! router bgp 123 no bgp default ipv4-unicast bgp log-neighbor-changes neighbor 11.1.1.1 remote-as 123 neighbor 11.1.1.1 update-source Loopback0 neighbor 11.1.1.2 remote-as 123 neighbor 11.1.1.2 update-source Loopback0 neighbor 11.1.1.3 remote-as 123 neighbor 11.1.1.3 update-source Loopback0 ! address-family ipv4 no synchronization no auto-summary exit-address-family ! address-family vpnv4 neighbor 11.1.1.1 activate neighbor 11.1.1.1 send-community extended neighbor 11.1.1.1 route-reflector-client neighbor 11.1.1.2 activate neighbor 11.1.1.2 send-community extended neighbor 11.1.1.2 route-reflector-client neighbor 11.1.1.3 activate neighbor 11.1.1.3 send-community extended neighbor 11.1.1.3 route-reflector-client exit-address-family ! no ip http server no ip http secure-server ! ! ! ! mpls ldp router-id Loopback0 force ! ! control-plane CE配置如下: R4#sh run Building configuration... Current configuration : 1658 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec ! hostname R4 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip source-route no ip icmp rate-limit unreachable ip cef ! ! ! ! no ip domain lookup no ipv6 cef ! ! multilink bundle-name authenticated ! ! ! ! ip tcp synwait-time 5 ! ! ! ! ! ! interface Loopback0 ip address 11.1.1.4 255.255.255.255 ! interface Loopback1 ip address 192.168.4.1 255.255.255.255 ip nat inside ! interface FastEthernet0/0 ip address 14.1.1.4 255.255.255.0 ip nat inside speed auto duplex auto ! interface FastEthernet0/1 no ip address shutdown speed auto duplex auto ! interface Serial1/0 no ip address shutdown serial restart-delay 0 ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 description for internet ip address 41.1.1.4 255.255.255.0 ip nat outside serial restart-delay 0 ! router bgp 4 no synchronization bgp log-neighbor-changes network 192.168.4.1 mask 255.255.255.255 neighbor 14.1.1.1 remote-as 123 neighbor 14.1.1.1 ebgp-multihop 255 neighbor 14.1.1.1 default-originate no auto-summary ! ip nat inside source list ALL interface Serial1/3 overload no ip http server no ip http secure-server ! ! ip route 0.0.0.0 0.0.0.0 Serial1/3 41.1.1.1 ! ip access-list extended ALL permit ip 192.168.0.0 0.0.255.255 any ! ! ! ! control-plane R5#sh run Building configuration... Current configuration : 1367 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec ! hostname R5 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip source-route no ip icmp rate-limit unreachable ip cef ! ! ! ! no ip domain lookup no ipv6 cef ! ! multilink bundle-name authenticated ! ! ! ! ip tcp synwait-time 5 ! ! ! ! ! ! interface Loopback0 ip address 11.1.1.5 255.255.255.255 ! interface Loopback1 ip address 192.168.5.1 255.255.255.255 ! interface FastEthernet0/0 ip address 25.1.1.5 255.255.255.0 speed auto duplex auto ! interface FastEthernet0/1 no ip address shutdown speed auto duplex auto ! interface Serial1/0 no ip address shutdown serial restart-delay 0 ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! router bgp 5 no synchronization bgp log-neighbor-changes network 192.168.5.1 mask 255.255.255.255 neighbor 25.1.1.2 remote-as 123 neighbor 25.1.1.2 ebgp-multihop 255 no auto-summary ! no ip http server no ip http secure-server ! ! ! ! ! ! control-plane R6#sh run Building configuration... Current configuration : 1367 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec ! hostname R6 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip source-route no ip icmp rate-limit unreachable ip cef ! ! ! ! no ip domain lookup no ipv6 cef ! ! multilink bundle-name authenticated ! ! ! ! ip tcp synwait-time 5 ! ! ! ! ! ! interface Loopback0 ip address 11.1.1.6 255.255.255.255 ! interface Loopback1 ip address 192.168.6.1 255.255.255.255 ! interface FastEthernet0/0 ip address 36.1.1.6 255.255.255.0 speed auto duplex auto ! interface FastEthernet0/1 no ip address shutdown speed auto duplex auto ! interface Serial1/0 no ip address shutdown serial restart-delay 0 ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! router bgp 6 no synchronization bgp log-neighbor-changes network 192.168.6.1 mask 255.255.255.255 neighbor 36.1.1.3 remote-as 123 neighbor 36.1.1.3 ebgp-multihop 255 no auto-summary ! no ip http server no ip http secure-server ! ! ! ! ! ! control-plane Internet 配置如下: R8#sh run Building configuration... Current configuration : 948 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec ! hostname R8 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip source-route no ip icmp rate-limit unreachable ip cef ! ! ! ! no ip domain lookup no ipv6 cef ! ! multilink bundle-name authenticated ! ! ! ! ip tcp synwait-time 5 ! ! ! ! ! ! interface Loopback0 ip address 8.8.8.8 255.255.255.255 ip ospf 110 area 0 ! interface Loopback1 no ip address ! interface FastEthernet0/0 ip address 78.1.1.8 255.255.255.0 ip ospf 110 area 0 speed auto duplex auto ! interface FastEthernet0/1 no ip address shutdown speed auto duplex auto ! router ospf 110 log-adjacency-changes ! no ip http server no ip http secure-server ! ! ! ! ! ! control-plane 本文转自 bilinyee博客,原文链接: http://blog.51cto.com/ericfu/1698320 如需转载请自行联系原作者

优秀的个人博客,低调大师

如何使用 Istio 进行多集群部署管理:单控制平面 VPN 连接拓扑

作者 | 王夕宁 阿里云高级技术专家 参与阿里巴巴云原生公众号文末留言互动,即有机会获得赠书福利! 导读:本文摘自于由阿里云高级技术专家王夕宁撰写的《Istio服务网格技术解析与实践》一书,在展望服务网格未来的同时,讲述了如何使用 Istio 进行多集群部署管理,来阐述服务网格对多云环境、多集群即混合部署的支持能力。你只需开心参与阿里巴巴云原生公众号文末互动,我们负责买单!技术人必备书籍《Istio 服务网格技术解析与实践》免费领~ 服务网格作为一个改善服务到服务通信的专用基础设施层,是云原生范畴中最热门的话题。随着容器愈加流行,服务拓扑也频繁变动,这就需要更好的网络性能。服务网格能够通过服务发现、路由、负载均衡、心跳检测和支持可观测性,帮助我们管理网络流量。服务网格试图为无规则的复杂的容器问题提供规范化的解决方案。 服务网格也可以用

优秀的个人博客,低调大师

如何使用 Istio 进行多集群部署管理(1): 单控制平面 VPN 连接拓扑

服务网格作为一个改善服务到服务通信的专用基础设施层,是云原生范畴中最热门的话题。随着容器愈加流行,服务拓扑也频繁变动,这就需要更好的网络性能。服务网格能够通过服务发现、路由、负载均衡、心跳检测和支持可观测性,帮助我们管理网络流量。服务网格试图为无规则的复杂的容器问题提供规范化的解决方案。 服务网格也可以用于混沌工程 —— “一门在分布式系统上进行实验的学科,目的是构建能够应对极端条件的可靠系统”。服务网格能够将延迟和错误注入到环境中,而不需要在每个主机上安装一个守护进程。 容器是云原生应用的基石,通过应用容器化,使得应用开发部署更加敏捷、迁移更加灵活,并且这些实现都是基于标准化的。而容器编排则是更近一步,能够更加有效地编排资源、更加高效地调度利用这些资源。而到了云原生时代,在 Kubernetes 基础架构之上,结合 Istio 服务

资源下载

更多资源
Mario

Mario

马里奥是站在游戏界顶峰的超人气多面角色。马里奥靠吃蘑菇成长,特征是大鼻子、头戴帽子、身穿背带裤,还留着胡子。与他的双胞胎兄弟路易基一起,长年担任任天堂的招牌角色。

腾讯云软件源

腾讯云软件源

为解决软件依赖安装时官方源访问速度慢的问题,腾讯云为一些软件搭建了缓存服务。您可以通过使用腾讯云软件源站来提升依赖包的安装速度。为了方便用户自由搭建服务架构,目前腾讯云软件源站支持公网访问和内网访问。

Nacos

Nacos

Nacos /nɑ:kəʊs/ 是 Dynamic Naming and Configuration Service 的首字母简称,一个易于构建 AI Agent 应用的动态服务发现、配置管理和AI智能体管理平台。Nacos 致力于帮助您发现、配置和管理微服务及AI智能体应用。Nacos 提供了一组简单易用的特性集,帮助您快速实现动态服务发现、服务配置、服务元数据、流量管理。Nacos 帮助您更敏捷和容易地构建、交付和管理微服务平台。

Rocky Linux

Rocky Linux

Rocky Linux(中文名:洛基)是由Gregory Kurtzer于2020年12月发起的企业级Linux发行版,作为CentOS稳定版停止维护后与RHEL(Red Hat Enterprise Linux)完全兼容的开源替代方案,由社区拥有并管理,支持x86_64、aarch64等架构。其通过重新编译RHEL源代码提供长期稳定性,采用模块化包装和SELinux安全架构,默认包含GNOME桌面环境及XFS文件系统,支持十年生命周期更新。

用户登录
用户注册