华为跨域虚拟专用网络-OptionC2方案

╰+攻爆jí腚メ 2023-01-09 15:38 224阅读 0赞

哈喽，大家好！我是[艺博东][Link 1] ，是一个思科出身、专注于华为的网工；好了，话不多说，我们直接进入正题。

### 文章目录 ###

*   *   *  一、无 RR 的拓扑
         *  二、无 RR 的简单配置与测试
         *  三、有 RR 的拓扑
         *  四、配置与分析
         *  五、特点

> 由于特殊原因，所以把“N”字母替换为“\#”符号。

### 一、无 RR 的拓扑 ###

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70]

### 二、无 RR 的简单配置与测试 ###

**2.1 底层配置**

AR1

[Huawei]sysname AR1
    [AR1]int g0/0/0
    [AR1-GigabitEthernet0/0/0]ip address 10.1.13.1 24
    [AR1-GigabitEthernet0/0/0]int l0
    [AR1-LoopBack0]ip address 1.1.1.1 32

AR2

[Huawei]sysname AR2
    [AR2]int g0/0/0
    [AR2-GigabitEthernet0/0/0]ip address 10.1.23.2 24
    [AR2-GigabitEthernet0/0/0]int l0
    [AR2-LoopBack0]ip address 2.2.2.2 32

AR3

[Huawei]sysname AR3
    [AR3]int g0/0/0	
    [AR3-GigabitEthernet0/0/0]ip address 10.1.13.3 24
    [AR3-GigabitEthernet0/0/0]int g0/0/1
    [AR3-GigabitEthernet0/0/1]ip address 10.1.23.3 24
    [AR3-GigabitEthernet0/0/1]int g0/0/2	
    [AR3-GigabitEthernet0/0/2]ip address 10.1.34.3 24
    [AR3-GigabitEthernet0/0/2]int l0
    [AR3-LoopBack0]ip address  3.3.3.3 32
    [AR3-LoopBack0]q
    [AR3]rip 
    [AR3-rip-1]v 2
    [AR3-rip-1]network 10.0.0.0
    [AR3-rip-1]network 3.0.0.0

AR4

[Huawei]sysname AR4
    [AR4]int g0/0/0
    [AR4-GigabitEthernet0/0/0]ip address 10.1.34.4 24
    [AR4-GigabitEthernet0/0/0]int g0/0/1
    [AR4-GigabitEthernet0/0/1]ip address 10.1.45.4 24
    [AR4-GigabitEthernet0/0/1]int l0
    [AR4-LoopBack0]ip address 4.4.4.4 32
    [AR4-LoopBack0]q
    [AR4]rip 
    [AR4-rip-1]v 2
    [AR4-rip-1]network 10.0.0.0 
    [AR4-rip-1]network 4.0.0.0

AR5

[Huawei]sysname AR5
    [AR5]int g0/0/0
    [AR5-GigabitEthernet0/0/0]ip address 10.1.45.5 24
    [AR5-GigabitEthernet0/0/0]int g0/0/1
    [AR5-GigabitEthernet0/0/1]ip address 10.1.56.5 24
    [AR5-GigabitEthernet0/0/1]int l0
    [AR5-LoopBack0]ip address 5.5.5.5 32
    [AR5-LoopBack0]q
    [AR5]rip
    [AR5-rip-1]v 2
    [AR5-rip-1]undo summary 
    [AR5-rip-1]network 10.0.0.0
    [AR5-rip-1]network 5.0.0.0
    [AR5-rip-1]q
    [AR5]int g0/0/1
    [AR5-GigabitEthernet0/0/1]undo rip output 
    [AR5-GigabitEthernet0/0/1]undo rip input

AR6、AR7、AR8、AR9、AR10底层配置类似

**2.2 MPLS LDP**

AR3

[AR3]mpls lsr-id 3.3.3.3
    [AR3]mpls
    [AR3-mpls]mpls ldp
    [AR3-mpls-ldp]int g0/0/2
    [AR3-GigabitEthernet0/0/2]mpls
    [AR3-GigabitEthernet0/0/2]mpls ldp

AR4

[AR4]mpls lsr-id 4.4.4.4
    [AR4]mpls 
    [AR4-mpls]mpls ldp
    [AR4-mpls-ldp]int g0/0/0
    [AR4-GigabitEthernet0/0/0]mpls 
    [AR4-GigabitEthernet0/0/0]mpls ldp
    [AR4-GigabitEthernet0/0/0]int g0/0/1
    [AR4-GigabitEthernet0/0/1]mpls 
    [AR4-GigabitEthernet0/0/1]mpls ldp

AR5

[AR5]mpls lsr-id 5.5.5.5
    [AR5]mpls 
    [AR5-mpls]mpls ldp
    [AR5-mpls-ldp]int g0/0/0
    [AR5-GigabitEthernet0/0/0]mpls 
    [AR5-GigabitEthernet0/0/0]mpls ldp
    [AR5-GigabitEthernet0/0/0]int g0/0/1
    [AR5-GigabitEthernet0/0/1]mpls

**2.4 AR3和AR5建立MP-IBGP，AR6和AR8建立MP-IBGP；AR5和AR6建立MP-EBGP；AR3和AR8EBGP VP\#v4 邻居关系；配置标签能力。**

AR3

[AR3]bgp 10
    [AR3-bgp]peer 5.5.5.5 as-number 10 
    [AR3-bgp]peer 5.5.5.5 connect-interface LoopBack0
    [AR3-bgp]peer 8.8.8.8 as-number 20 
    [AR3-bgp]peer 8.8.8.8 ebgp-max-hop 66 
    [AR3-bgp]peer 8.8.8.8 connect-interface LoopBack0
    [AR3-bgp]ipv4-family vpnv4 
    [AR3-bgp-af-vpnv4]peer 8.8.8.8 enable

AR5

[AR5]route-policy asbr permit node 10
    [AR5-route-policy]apply mpls-label
    [AR5-route-policy]q
    [AR5]bgp 10
    [AR5-bgp]peer 3.3.3.3 as-number 10 
    [AR5-bgp]peer 3.3.3.3 connect-interface LoopBack0
    [AR5-bgp]peer 10.1.56.6 as-number 20 
    [AR5-bgp]network 3.3.3.3 255.255.255.255
    [AR5-bgp]peer 10.1.56.6 route-policy asbr export
    [AR5-bgp]peer 10.1.56.6 label-route-capability
    [AR5-bgp]q
    [AR5]mpls 
    [AR5-mpls]lsp-trigger bgp-label-route //用来配置LDP为带标签的公网BGP路由分标签的能力
    [AR5-mpls]quit
    [AR5]rip
    [AR5-rip-1]import-route bgp

AR6

[AR6]route-policy asbr permit node 10
    [AR6-route-policy]apply mpls-label
    [AR6-route-policy]q
    [AR6]bgp 20
    [AR6-bgp]peer 8.8.8.8 as-number 20 
    [AR6-bgp]peer 8.8.8.8 connect-interface LoopBack0
    [AR6-bgp]peer 10.1.56.5 as-number 10 
    [AR6-bgp]network 8.8.8.8 255.255.255.255 
    [AR6-bgp]peer 10.1.56.5 route-policy asbr export
    [AR6-bgp]peer 10.1.56.5 label-route-capability
    [AR6-bgp]q
    [AR6]mpls 
    [AR6-mpls]lsp-trigger bgp-label-route
    [AR6-mpls]quit
    [AR6]rip
    [AR6-rip-1]import-route bgp

AR8

[AR8]bgp 20
    [AR8-bgp]peer 3.3.3.3 as-number 10 
    [AR8-bgp]peer 3.3.3.3 ebgp-max-hop 66 
    [AR8-bgp]peer 3.3.3.3 connect-interface LoopBack0
    [AR8-bgp]peer 6.6.6.6 as-number 20 
    [AR8-bgp]peer 6.6.6.6 connect-interface LoopBack0
    [AR8-bgp]ipv4-family vpnv4
    [AR8-bgp-af-vpnv4]peer 3.3.3.3 enable

**2.5 测试**

\[AR3\]display bgp peer  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 1]  
\[AR6\]display bgp peer  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 2]  
\[AR8\]display mpls lsp  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 3]  
AR8已经有AR3的3.3.3.3的标签了。

\[AR8\]ping -a 8.8.8.8 3.3.3.3  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 4]  
**2.6 MPLS VP\#业务接入**

配置好公网之后，接下来是配置公司B和公司D，让他们可以互访；

AR3

[AR3]ip vpn-instance ybd2
    [AR3-vpn-instance-ybd2]route-distinguisher 10:1
    [AR3-vpn-instance-ybd2-af-ipv4]vpn-target 10:1 both 
    [AR3-vpn-instance-ybd2-af-ipv4]int g0/0/1
    [AR3-GigabitEthernet0/0/1]ip binding vpn-instance ybd2
    [AR3-GigabitEthernet0/0/1]ip address 10.1.23.3 24
    [AR3-GigabitEthernet0/0/1]bgp 10	
    [AR3-bgp]peer 10.1.23.2 as 1
    [AR3-bgp]ipv4-family vpn-instance ybd2
    [AR3-bgp-ybd2]peer 10.1.23.2 as 1
    [AR3-bgp-ybd2]peer 10.1.23.2 substitute-as //做AS号的伪装

AR2

[AR2]bgp 1
    [AR2-bgp]peer 10.1.23.3 as 10
    [AR2-bgp]network 2.2.2.2 32

AR8

[AR8]ip vpn-instance ybd6
    [AR8-vpn-instance-ybd10]route-distinguisher 10:1
    [AR8-vpn-instance-ybd10-af-ipv4]vpn-target 10:1 both 
    [AR8-vpn-instance-ybd10-af-ipv4]int g0/0/2
    [AR8-GigabitEthernet0/0/2]ip binding vpn-instance ybd10
    [AR8-GigabitEthernet0/0/2]ip address 10.1.81.8 24
    [AR8-GigabitEthernet0/0/2]bgp 20
    [AR8-bgp]ipv4-family vpn-instance ybd6
    [AR8-bgp-ybd10]peer 10.1.81.10 as 1
    [AR8-bgp-ybd10]peer 10.1.81.10 substitute-as

AR10

[AR10]bgp 1
    [AR10-bgp]peer 10.1.81.8 as 20
    [AR10-bgp]network 10.10.10.10 32

\[AR10\]display ip routing-table protocol bgp  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 5]  
\[AR2\]ping -a 2.2.2.2 10.10.10.10  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 6]

公司 B 2.2.2.2 访问公司 AD10.10.10.10

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 7]  
AR2 上的 IPv4 路由传递到 AR3

\[AR2\]dis ip routing-table 10.10.10.10  
![在这里插入图片描述][2021012200264062.png]  
封装为：![在这里插入图片描述][20210122002838197.png]

查看10.10.10.10路由，下一跳是10.1.23.3；

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 8]  
然后根据AR3的接口下G0/0/0绑定的实例ybd2的路由表，去查相关路由。

[AR3]display ip routing-table vpn-instance ybd2 10.10.10.10

![在这里插入图片描述][20210122003008453.png]  
下一跳是 8.8.8.8

[AR3]display bgp vpnv4 vpn-instance ybd2 routing-table 10.10.10.10

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 9]  
私网标签1027 打上标签封装成：![在这里插入图片描述][20210122003152951.png]

接着是查看公网标签

\[AR3\]display mpls lsp  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 10]  
公网标签1026 打上标签封装成：![在这里插入图片描述][20210122003718999.png]

从G0/0/2接口出发

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 11]  
\[AR4\]dis mpls lsp  
![在这里插入图片描述][20210122003838114.png]  
进来标签是1026，出标签为1027，从G0/0/1接口发出

打上标签封装成：![在这里插入图片描述][20210122004020492.png]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 12]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 13]  
\[AR5\]dis mpls lsp  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 14]  
进来标签是1027，出标签为1026，

封装为：![在这里插入图片描述][20210122004213511.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 15]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 16]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 17]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 18]  
\[AR7\]display mpls lsp  
![在这里插入图片描述][20210122004710192.png]

8.8.8.8出标签是3，然后进行弹出顶部标签，从G0/0/1接口发送出去。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 19]  
\[AR8\]dis mpls lsp  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 20]

[AR8]dis bgp vpnv4 vpn-instance ybd6 routing-table

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 21]  
下一跳是10.1.81.10

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 22]

### 三、有 RR 的拓扑 ###

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 23]

### 四、配置与分析 ###

**4.1 概括**

（1）AS内IGP和LDP配置好  
（2）ASBR之间建立EBGP邻居，并启动传递标签ipv4路由能力，互联接口启动mpls（3）在ASBR向对端ASBR发布本端PE/RR的标签ipv4路由，通过产生标签策略完成  
（4）在ASBR上开启LSP触发策略，为BGP路由产生LDP的LSP  
（5）在ASBR上引入PE/RR的BGP路由到IGP协议中  
（6）PE和RR之间建立mp-ibgp邻居关系，传递vp\#v4路由，并保证路由传递到对端PE下一跳不变  
（7）RR之间建立MP-EBGP邻居关系，传递vp\#v4路由，并保证路由传递到对端下一跳不变  
目的：是建立一条PE到PE之间的LSP，方便PE之间建立MP-EBGP传递vp\#v4路由。

**4.2 删除**

删除掉 AR3和AR5的MP-IBGP邻居、AR6和AR8的MP-IBGP邻居、AR3和AR8的EBGP VP\#v4 邻居关系；

**4.3 然后建立AR4(RR)与AR3、AR7(RR)与AR8建立邻居关系并且下一跳不变，AR4与AR7建立EBGP VP\#4的邻居关系。**

AR3

[AR3]bgp 10
    [AR3-bgp]peer 4.4.4.4 as 10	
    [AR3-bgp]peer 4.4.4.4 connect-interface LoopBack 0
    [AR3-bgp]ipv4-family vpnv4
    [AR3-bgp-af-vpnv4]peer 4.4.4.4 enable 
    [AR3-bgp-af-vpnv4]peer 4.4.4.4 next-hop-invariable

AR4

[AR4]bgp 10
    [AR4-bgp]peer 3.3.3.3 as 10
    [AR4-bgp]peer 3.3.3.3 connect-interface LoopBack  0
    [AR4-bgp]ipv4-family vpnv4
    [AR4-bgp-af-vpnv4]peer 3.3.3.3 enable 
    [AR4-bgp-af-vpnv4]peer 3.3.3.3 reflect-client
    [AR4-bgp-af-vpnv4]peer 3.3.3.3 next-hop-invariable
    [AR4-bgp-af-vpnv4]undo policy vpn-target 
    [AR4-bgp-af-vpnv4]q
    [AR4-bgp]peer 7.7.7.7 as 20
    [AR4-bgp]peer 7.7.7.7 connect-interface LoopBack 0
    [AR4-bgp]peer 7.7.7.7 ebgp-max-hop 66
    [AR4-bgp]ipv4-family vpnv4
    [AR4-bgp-af-vpnv4]peer 7.7.7.7 enable 
    [AR4-bgp-af-vpnv4]peer 7.7.7.7 next-hop-invariable

AR7

[AR7]bgp 20	
    [AR7-bgp]peer 8.8.8.8 as 20
    [AR7-bgp]peer 8.8.8.8 connect-interface LoopBack  0
    [AR7-bgp]ipv4-family vpnv4
    [AR7-bgp-af-vpnv4]peer 8.8.8.8 enable 
    [AR7-bgp-af-vpnv4]peer 8.8.8.8 reflect-client 
    [AR7-bgp-af-vpnv4]peer 8.8.8.8 next-hop-invariable
    [AR7-bgp-af-vpnv4]undo policy vpn-target 
    [AR7-bgp-af-vpnv4]q
    [AR7-bgp]peer 4.4.4.4 as 10
    [AR7-bgp]peer 4.4.4.4 connect-interface LoopBack  0
    [AR7-bgp]peer 4.4.4.4 ebgp-max-hop 66
    [AR7-bgp]ipv4-family vpnv4
    [AR7-bgp-af-vpnv4]peer 4.4.4.4 enable 
    [AR7-bgp-af-vpnv4]peer 4.4.4.4 next-hop-invariable

AR8

[AR8]bgp 20	
    [AR8-bgp]peer 7.7.7.7 as 20
    [AR8-bgp]peer 7.7.7.7 connect-interface  LoopBack  0
    [AR8-bgp]ipv4-family vpnv4
    [AR8-bgp-af-vpnv4]peer 7.7.7.7 enable 
    [AR8-bgp-af-vpnv4]peer 7.7.7.7 next-hop-invariable

**4.4 宣告RR的网段LOOPBACK 0**

AR5

[AR5]bgp 10
    [AR5-bgp]network 4.4.4.4 32

AR6

[AR6]bgp 20
    [AR6-bgp]network 7.7.7.7 32

**4.5 测试**

\[AR4\]dis bgp peer  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 24]  
\[AR7\]dis bgp peer  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 25]  
**4.6 MPLS VP\#业务接入，公司A访问公司C**

AR3

[AR3]ip vpn-instance ybd66
    [AR3-vpn-instance-ybd1]route-distinguisher 20:1 
    [AR3-vpn-instance-ybd1-af-ipv4]vpn-target 20:1 both 
    [AR3-vpn-instance-ybd1-af-ipv4]int g0/0/0
    [AR3-GigabitEthernet0/0/0]ip binding vpn-instance  ybd66
    [AR3-GigabitEthernet0/0/0]ip address 10.1.13.3 24
    [AR3-GigabitEthernet0/0/0]q
    [AR3]ospf 1 router-id 3.3.3.3 vpn-instance ybd66
    [AR3-ospf-1]a 0
    [AR3-ospf-1-area-0.0.0.0]network 10.1.13.3 0.0.0.0
    [AR3-ospf-1-area-0.0.0.0]q
    [AR3-ospf-1]import-route bgp
    [AR3-ospf-1]bgp 10
    [AR3-bgp]ip	
    [AR3-bgp]ipv4-family vpn-instance ybd66
    [AR3-bgp-ybd1]import-route ospf 1

AR1

[AR1]ospf 1 
    [AR1-ospf-1]a 0
    [AR1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
    [AR1-ospf-1-area-0.0.0.0]network 10.1.13.1 0.0.0.0

AR8

[AR8]ip vpn-instance ybd99
    [AR8-vpn-instance-ybd9]route-distinguisher 20:1
    [AR8-vpn-instance-ybd9-af-ipv4]vpn-target 20:1 both 
    [AR8-vpn-instance-ybd9-af-ipv4]int g0/0/1
    [AR8-GigabitEthernet0/0/1]ip binding vpn-instance ybd99
    [AR8-GigabitEthernet0/0/1]ip address 10.1.89.8 24
    [AR8-GigabitEthernet0/0/1]q
    [AR8]isis 1 vpn-instance ybd99
    [AR8-isis-1]import-route bgp
    [AR8-isis-1]network-entity 12.0001.0000.0000.0008.00
    [AR8-isis-1]is-level level-2
    [AR8-isis-1]int g0/0/1
    [AR8-GigabitEthernet0/0/1]isis enable 1
    [AR8-GigabitEthernet0/0/1]bgp 20
    [AR8-bgp]ipv4-family vpn-instance ybd99
    [AR8-bgp-ybd9]import-route  isis 1

AR9

[AR9]isis
    [AR9-isis-1]network-entity 12.0001.0000.0000.0009.00
    [AR9-isis-1]is-level level-2
    [AR9-isis-1]int g0/0/0
    [AR9-GigabitEthernet0/0/0]isis enable 1
    [AR9]int l0
    [AR9-LoopBack0]isis enable

\[AR1\]dis ip routing-table protocol ospf  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 26]  
\[AR9\]ping -a 9.9.9.9 1.1.1.1  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 27]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 28]  
1031是私网标签，1026是公网标签。

[AR3]display bgp vpnv4 vpn-instance ybd66 routing-table 9.9.9.9

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 29]  
OK

### 五、特点 ###

跨域VP\#-OptionC2的优缺点和跨域VP\#-OptionC1一样，只是在配置方面稍微有些不一样。

特点：公网形成了一个架构，后面如果有公司接入进来的话，只需要在PE设备上配置接入MPLS VP\#业务即可，公网不需要配置。

重要并且特别的配置，在ASBR上的MPLS视图下需要配置lsp-trigger bgp-label-route命令，把BGP协议引入到RIP（从逻辑的角度来看，多个AS域形成了一个AS域）；AR4(RR)与AR3建立MP-IBGP邻居关系，AR(RR)与AR7建立EBGP VP\#V4邻居，把PE和RR的Looback 0网段宣告进BGP进程。

> 名言：  
> 勤学如春起之苗，不见其增，日有所长；—陶渊明

--------------------

![在这里插入图片描述][20210119015806569.gif_pic_center]

好了这期就到这里了，如果你喜欢这篇文章的话，请点赞评论分享收藏，如果你还能点击关注，那真的是对我最大的鼓励。谢谢大家，下期见！

[Link 1]: https://ybd99.blog.csdn.net/
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70]: /images/20221119/a3f4eeff5b6f440ba7b6ce9f77cea1c0.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 1]: /images/20221119/55c29ebceb8a4017a788b6d36f1c09e3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 2]: /images/20221119/853a506f9d394e8a849e495c089fb4db.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 3]: /images/20221119/7079d10244af4bfc8f0faca580727dc1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 4]: /images/20221119/f910d23f248945cc948963e21f143fdd.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 5]: /images/20221119/a8e4bc5e0c9e488eb99a0b562a64f529.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 6]: /images/20221119/77f172e5d2544b0797a5f8228e589201.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 7]: /images/20221119/4c4c0c47b5d84abbaf739ac25dbd1807.png
[2021012200264062.png]: /images/20221119/024a07ca237248f68a05dacba86a9d6a.png
[20210122002838197.png]: /images/20221119/69d41343db754a558377f05587bb7ca4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 8]: /images/20221119/3fb60742dbce43719da31cff4a326ef2.png
[20210122003008453.png]: /images/20221119/eeac9c7aeb0f43a081731622d8eda754.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 9]: /images/20221119/dbfe0cb7ec854a35b8e49f788ddff255.png
[20210122003152951.png]: /images/20221119/1f16e9b5b1044d6bb320694751baf75e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 10]: /images/20221119/40ba712621ac44d0ab5a2bc6ea458a27.png
[20210122003718999.png]: /images/20221119/6e35d74462c840719596500ba5644331.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 11]: /images/20221119/30fda11cba7e473a8e711762a6e5738e.png
[20210122003838114.png]: /images/20221119/92a9631a6b404116b92652c2c813c2c7.png
[20210122004020492.png]: /images/20221119/551a418a13a245efa68bcad11ce1741d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 12]: /images/20221119/df91999bfa7448759a6ed46b11a0ff7d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 13]: /images/20221119/1ed3b51886654a9881fc6f3ba7b5ef71.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 14]: /images/20221119/66d9ac2403834a1893475b00562c6ad6.png
[20210122004213511.png]: /images/20221119/b32fd0c18f2d4d2798933cc9eb984b07.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 15]: /images/20221119/0b3c91705b564e69a9c6ec9363ca1865.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 16]: /images/20221119/2a11b695e4084df38e6ec390c43c475f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 17]: /images/20221119/a082a65bd7c44611b4aae5b83b1325c9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 18]: /images/20221119/5ff083b38c2447f8a174bd24b14cbd95.png
[20210122004710192.png]: /images/20221119/09c8cbeeeda141fba62467cec321b823.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 19]: /images/20221119/60724d3deabd4bb48a2af7926d87f393.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 20]: /images/20221119/0bc812fab756464aaa7388ba8a474cbc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 21]: /images/20221119/7302da056e3b4e78bc1a91fc65399650.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 22]: /images/20221119/93bf421df34b4ab79150ab2d1df70e61.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 23]: /images/20221119/3eccf61cb3cc4f2aa301acd489372b99.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 24]: /images/20221119/bdf835a7230140129991e2fd84516324.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 25]: /images/20221119/e763593d9ab54b4c944ed615e8871415.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 26]: /images/20221119/4cabad22312c430f944728e1c48ff8ed.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 27]: /images/20221119/7080195ece6a4a918f7a72648b96ef76.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 28]: /images/20221119/d1af86dbea0f4e69ab56d36747a827d9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70 29]: /images/20221119/2f50978852774614a97a9142391a1239.png
[20210119015806569.gif_pic_center]: /images/20221119/dd685e2d43374324991d4c828c3999b5.png