網(wǎng)絡(luò)技術(shù)培訓(xùn)系列課程：MPLS技術(shù)-4.L2 MPLS-VPN原理與應(yīng)用

L2MPLS/VPN原理與應(yīng)用學(xué)習(xí)目標(biāo)掌握L2MPLS/VPN基本概念掌握VPWS、VPLS的原理及相關(guān)配置課程內(nèi)容第一章L2MPLS/VPN概述第二章VPWS原理及相關(guān)配置第三章VPLS原理及相關(guān)配置3第一章L2MPLS/VPN概述L3MPLS/VPN模型特點(diǎn)隧道承建:客戶設(shè)備透明\運(yùn)營(yíng)商設(shè)備維護(hù)路由維護(hù):客戶設(shè)備維護(hù)\運(yùn)營(yíng)商設(shè)備維護(hù)VPN數(shù)據(jù)封裝:MPLS標(biāo)簽報(bào)頭第一章L2MPLS/VPN概述L3MPLS/VPN模型特點(diǎn)對(duì)于用戶而言，L3MPLS/VPN所呈現(xiàn)的形式R2R1MPLS/VPNPPEPER1RouterR4PER3PER2R3RouterR4第一章L2MPLS/VPN概述傳統(tǒng)L2VPN模型特點(diǎn)隧道承建:客戶設(shè)備維護(hù)\運(yùn)營(yíng)商設(shè)備透明路由維護(hù):客戶設(shè)備維護(hù)\運(yùn)營(yíng)商設(shè)備透明VPN數(shù)據(jù)封裝:IP報(bào)頭PPTP、L2TP等技術(shù)L2MPLS/VPN模型特點(diǎn)隧道承建:客戶設(shè)備透明\運(yùn)營(yíng)商設(shè)備維護(hù)路由維護(hù):客戶設(shè)備維護(hù)\運(yùn)營(yíng)商設(shè)備透明VPN數(shù)據(jù)封裝:MPLS標(biāo)簽報(bào)頭第一章L2MPLS/VPN概述L2MPLS/VPN模型特點(diǎn)對(duì)于用戶而言，L2MPLS/VPN(VPWS)所呈現(xiàn)的形式R2R1MPLS/VPNPPEPER1R4PER3PER2R3R4第一章L2MPLS/VPN概述L2MPLS/VPN模型特點(diǎn)對(duì)于用戶而言，L2MPLS/VPN(VPLS)所呈現(xiàn)的形式R2R1MPLS/VPNPPEPER1R4PER3PER2R3R4第一章L2MPLS/VPN概述L2MPLS/VPN的相關(guān)概念R2R1MPLS/VPNPPEPEPW:偽線AC:接入電路AC:接入電路第一章L2MPLS/VPN概述PW的作用“透?jìng)鳌眱蓚€(gè)CE間的所有二層報(bào)文二層廣播報(bào)文:ARP、路由協(xié)議報(bào)文等二層單播報(bào)文:用戶數(shù)據(jù)、路由協(xié)議報(bào)文等R2R1MPLS/VPNPPEPEL2FrameL2Frame第一章L2MPLS/VPN概述PW的原理使用PW標(biāo)簽來(lái)“透?jìng)鳌彼袌?bào)文PW標(biāo)簽由頂層標(biāo)簽（tunnel標(biāo)簽）和底層標(biāo)簽（VC標(biāo)簽）組成TunnelLabelEXPS=0TTLVCLabelEXPS=1TTL二層數(shù)據(jù)幀由LDP產(chǎn)生，通過(guò)標(biāo)簽交換沿LSP從源PE到達(dá)目的PE由LDP或BGP產(chǎn)生，標(biāo)識(shí)目的PE上的不同ACLDP產(chǎn)生VC標(biāo)簽：Martini方式

BGP產(chǎn)生VC標(biāo)簽：Kompella方式控制字(可選)第一章L2MPLS/VPN概述L2MPLS/VPN中客戶數(shù)據(jù)傳輸?shù)倪^(guò)程數(shù)據(jù)傳輸前的準(zhǔn)備工作1.PE之間交換VC標(biāo)簽，形成“偽線”2.R1\R2相互學(xué)習(xí)路由R2R1PPEPER4R3路由信息路由信息第一章L2MPLS/VPN概述L2MPLS/VPN中客戶數(shù)據(jù)傳輸?shù)倪^(guò)程1.R1訪問(wèn)R2,進(jìn)行二層幀封裝2.源PE通過(guò)“偽線標(biāo)簽（兩層標(biāo)簽）”封裝二層幀，形成標(biāo)簽報(bào)文3.經(jīng)過(guò)替換、POP等動(dòng)作后，最后僅有底層VC標(biāo)簽的標(biāo)簽報(bào)文達(dá)到目的PE4.目的PE根據(jù)VC標(biāo)簽，按照MPLS轉(zhuǎn)發(fā)表將VC標(biāo)簽去掉，將原始的二層幀轉(zhuǎn)發(fā)到相應(yīng)的AC上課程內(nèi)容第一章L2MPLS/VPN概述第二章VPWS原理及相關(guān)配置第三章VPLS原理及相關(guān)配置14第二章VPWS原理及相關(guān)配置VPWS相關(guān)概念VPWS上的Ethernet接入配置VPWS上的PPP接入配置VPWS上的異類二層協(xié)議接入配置域間VPWS技術(shù)第二章VPWS原理及相關(guān)配置VPWS相關(guān)概念VPWS:VirtualPrivateWireService,虛擬私有線路服務(wù)為用戶提供點(diǎn)到點(diǎn)的“二層鏈路”服務(wù)Ethernet、PPP、HDLC、FR等提供異類二層協(xié)議互聯(lián)使用單播LDP作為信令協(xié)議以通告VC標(biāo)簽第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置1.在兩端PE之間建立單播LDP會(huì)話2.在標(biāo)簽映射消息中交互標(biāo)識(shí)同一“偽線”的FEC元素R5R1MPLSR3R2R4單播LDP會(huì)話interfaceFastEthernet0/0.12encapsulationdot1Q12xconnect4.4.4.4100encapsulationmplsinterfaceFastEthernet0/0.45encapsulationdot1Q45xconnect2.2.2.2100encapsulationmplsVCID：用于標(biāo)識(shí)AC，只有兩端的VCID一致時(shí)，兩端AC才會(huì)通過(guò)“偽線”連接起來(lái)interfaceFastEthernet0/0.12encapsulationdot1Q12ipaddress10.0.15.1255.255.255.0interfaceFastEthernet0/0.45encapsulationdot1Q45ipaddress10.0.15.5255.255.255.0第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置查看單播LDP鄰居的建立情況r2#shmplslddiscoveryLocalLDPIdentifier:2.2.2.2:0DiscoverySources:

Interfaces:FastEthernet0/0.23(ldp):xmit/recvLDPId:3.3.3.3:0

TargetedHellos:2.2.2.2->4.4.4.4(ldp):active/passive,xmit/recvLDPId:4.4.4.4:0第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置查看單播LDP鄰居的建立情況r2#showmplsldpneighborPeerLDPIdent:4.4.4.4:0;LocalLDPIdent2.2.2.2:0TCPconnection:4.4.4.4.39011-2.2.2.2.646State:Oper;Msgssent/rcvd:27/16;DownstreamUptime:00:15:58LDPdiscoverysources:TargetedHello2.2.2.2->4.4.4.4,active,passiveAddressesboundtopeerLDPIdent:9.0.34.44.4.4.4PeerLDPIdent:3.3.3.3:0;LocalLDPIdent2.2.2.2:0TCPconnection:3.3.3.3.53403-2.2.2.2.646State:Oper;Msgssent/rcvd:25/15;DownstreamUptime:00:15:32LDPdiscoverysources:FastEthernet0/0.23,SrcIPaddr:9.0.23.3AddressesboundtopeerLDPIdent:9.0.23.33.3.3.39.0.34.3第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置LDPHello的單播與組播的區(qū)別第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置查看偽線建立情況r2#shmplsl2transportvcLocalintfLocalcircuitDestaddressVCIDStatus--------------------------------------------------------------------Fa0/0.12EthVLAN124.4.4.4100UPr4#shmplsl2transportvcLocalintfLocalcircuitDestaddressVCIDStatus--------------------------------------------------------------------Fa0/0.45EthVLAN452.2.2.2100UP第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置查看MPLS轉(zhuǎn)發(fā)表r2#shmplsforwarding-tableLocalOutgoingPrefixBytestagOutgoingNextHoptagtagorVCorTunnelIdswitchedinterface200Untaggedl2ckt(100)23600Fa0/0.12point2point201Poptag3.3.3.3/320Fa0/0.239.0.23.3202Poptag9.0.34.0/240Fa0/0.239.0.23.32033014.4.4.4/320Fa0/0.239.0.23.3r4#shmplsforwarding-tableLocalOutgoingPrefixBytestagOutgoingNextHoptagtagorVCorTunnelIdswitchedinterface400Untaggedl2ckt(100)24490Fa0/0.45point2point401Poptag3.3.3.3/320Fa0/0.349.0.34.3402Poptag9.0.23.0/240Fa0/0.349.0.34.34033002.2.2.2/320Fa0/0.349.0.34.3第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置查看偽線的兩層標(biāo)簽r2#shmplsl2transportvcdetailLocalinterface:Fa0/0.12up,lineprotocolup,EthVLAN12upDestinationaddress:4.4.4.4,VCID:100,VCstatus:upNexthop:9.0.23.3Outputinterface:Fa0/0.23,imposedlabelstack{301400}Createtime:00:43:22,laststatuschangetime:00:42:09Signalingprotocol:LDP,peer4.4.4.4:0upMPLSVClabels:local200,remote400GroupID:local0,remote0MTU:local1500,remote1500Remoteinterfacedescription:Sequencing:receivedisabled,senddisabledVCstatistics:packettotals:receive222,send223bytetotals:receive23522,send23588packetdrops:receive0,send0第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置查看偽線的兩層標(biāo)簽r4#showmplsl2transportvcdetailLocalinterface:Fa0/0.45up,lineprotocolup,EthVLAN45upDestinationaddress:2.2.2.2,VCID:100,VCstatus:upNexthop:9.0.34.3Outputinterface:Fa0/0.34,imposedlabelstack{300200}Createtime:00:20:07,laststatuschangetime:00:19:26Signalingprotocol:LDP,peer2.2.2.2:0upMPLSVClabels:local400,remote200GroupID:local0,remote0MTU:local1500,remote1500Remoteinterfacedescription:Sequencing:receivedisabled,senddisabledVCstatistics:packettotals:receive260,send259bytetotals:receive27550,send27436packetdrops:receive0,send0第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置CE設(shè)備端測(cè)試1.R1和R5直接建立OSPF鄰居2.R1\R5的路由表r1#shipospfneighborNeighborIDPriStateDeadTimeAddressInterface5.5.5.51FULL/DR00:00:3210.0.15.5FastEthernet0/0.12r1#shiproute…1.0.0.0/32issubnetted,1subnetsC1.1.1.1isdirectlyconnected,Loopback05.0.0.0/32issubnetted,1subnetsO5.5.5.5[110/2]via10.0.15.5,00:20:43,FastEthernet0/0.1210.0.0.0/24issubnetted,1subnetsC10.0.15.0isdirectlyconnected,FastEthernet0/0.12第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置CE設(shè)備端測(cè)試3.測(cè)試R1\R5的連通性r1#ping5.5.5.5Typeescapesequencetoabort.Sending5,100-byteICMPEchosto5.5.5.5,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=28/72/228msr1#traceroute5.5.5.5Typeescapesequencetoabort.Tracingtherouteto5.5.5.5110.0.15.532msec24msec*第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置CE設(shè)備端測(cè)試4.查看R1\R5的ARP表r1#showarpProtocolAddressAge(min)HardwareAddrTypeInterfaceInternet10.0.15.59ca05.009c.0000ARPAFastEthernet0/0.12Internet10.0.15.1-ca00.08cc.0000ARPAFastEthernet0/0.12r5#sharpProtocolAddressAge(min)HardwareAddrTypeInterfaceInternet10.0.15.5-ca05.009c.0000ARPAFastEthernet0/0.45Internet10.0.15.111ca00.08cc.0000ARPAFastEthernet0/0.45第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置標(biāo)簽映射消息路由前綴的FEC元素內(nèi)容第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置標(biāo)簽映射消息偽線的FEC元素內(nèi)容第二章VPWS原理及相關(guān)配置VPWS上的Ethernet接入配置標(biāo)簽映射消息偽線的FEC元素內(nèi)容第二章VPWS原理及相關(guān)配置VPWS上的PPP接入配置R5R1MPLSR3R2R4單播LDP會(huì)話interfaceSerial1/0encapsulationpppxconnect4.4.4.4100encapsulationmplsinterfaceSerial1/0ipaddress10.0.15.1255.255.255.0encapsulationpppinterfaceSerial1/0encapsulationpppxconnect2.2.2.2100encapsulationmplsinterfaceSerial1/0ipaddress10.0.15.5255.255.255.0encapsulationpppPPP協(xié)商VCID：用于標(biāo)識(shí)AC，只有兩端的VCID一致時(shí)，兩端AC才會(huì)通過(guò)“偽線”連接起來(lái)第二章VPWS原理及相關(guān)配置VPWS上的PPP接入配置查看偽線建立情況r2#shmplsl2transportvcLocalintfLocalcircuitDestaddressVCIDStatus--------------------------------------------------------------------Se1/0PPP4.4.4.4100UPr4#shmplsl2transportvcLocalintfLocalcircuitDestaddressVCIDStatus--------------------------------------------------------------------Se1/0PPP2.2.2.2100UP第二章VPWS原理及相關(guān)配置VPWS上的PPP接入配置CE設(shè)備端測(cè)試1.R1\R5的PPP協(xié)商結(jié)果r1#shinterfacesserial1/0Serial1/0isup,lineprotocolisup

HardwareisM8T-X.21Internetaddressis10.0.15.1/24MTU1500bytes,BW1544Kbit,DLY20000usec,reliability255/255,txload1/255,rxload1/255EncapsulationPPP,LCPOpenOpen:IPCP,CDPCP,crc16,loopbacknotsetKeepaliveset(10sec)Restart-Delayis0secsLastinput00:00:07,output00:00:02,outputhangneverLastclearingof"showinterface"counters01:05:47Inputqueue:0/75/0/0(size/max/drops/flushes);Totaloutputdrops:0Queueingstrategy:weightedfair…第二章VPWS原理及相關(guān)配置VPWS上的PPP接入配置CE設(shè)備端測(cè)試1.R1\R5的PPP協(xié)商結(jié)果r2#shinterfacesserial1/0Serial1/0isup,lineprotocolisupHardwareisM4TMTU1500bytes,BW1544Kbit,DLY20000usec,reliability255/255,txload1/255,rxload1/255EncapsulationPPP,crc16,loopbacknotsetKeepaliveset(10sec)Restart-Delayis0secsLastinput00:02:49,output00:00:10,outputhangneverLastclearingof"showinterface"counters00:02:57…第二章VPWS原理及相關(guān)配置VPWS上的PPP接入配置CE設(shè)備端測(cè)試2.R1\R5的連通性測(cè)試r1#ping10.0.15.5Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.0.15.5,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=452/648/1000msr1#traceroute10.0.15.5Typeescapesequencetoabort.Tracingtherouteto10.0.15.5110.0.15.552msec140msec*第二章VPWS原理及相關(guān)配置VPWS上的異類二層協(xié)議接入配置IP互通:interworkingipR5R1MPLSR3R2R4單播LDP會(huì)話interfaceSerial1/0ipaddress10.0.15.5255.255.255.0encapsulationpppinterfaceFastEthernet0/0.12encapsulationdot1Q12ipaddress10.0.15.1255.255.255.0ipospfnetworkpoint-to-pointinterfaceFastEthernet0/0.12encapsulationdot1Q12xconnect4.4.4.4100pw-classEthernet_PPPinterfaceSerial1/0encapsulationpppxconnect2.2.2.2100pw-classEthernet_PPPpseudowire-classEthernet_PPPencapsulationmplsinterworkingipPPP協(xié)商ARP代理第二章VPWS原理及相關(guān)配置VPWS上的異類二層協(xié)議接入配置查看偽線建立情況r2#shmplsl2transportvcLocalintfLocalcircuitDestaddressVCIDStatus--------------------------------------------------------------------Fa0/0.12EthVLAN124.4.4.4100UPr4#shmplsl2transportvcLocalintfLocalcircuitDestaddressVCIDStatus--------------------------------------------------------------------Se1/0PPP2.2.2.2100UP第二章VPWS原理及相關(guān)配置VPWS上的異類二層協(xié)議接入配置查看偽線建立情況r2#shmplsl2transportvcdetailLocalinterface:Fa0/0.12up,lineprotocolup,EthVLAN12upMPLSVCtypeisIP,interworkingtypeisIPDestinationaddress:4.4.4.4,VCID:100,VCstatus:upOutputinterface:Fa0/0.23,imposedlabelstack{400300}Preferredpath:notconfiguredDefaultpath:activeTunnellabel:300,nexthop9.0.23.3Createtime:01:26:17,laststatuschangetime:00:21:28Signalingprotocol:LDP,peer4.4.4.4:0upMPLSVClabels:local203,remote400GroupID:local0,remote0MTU:local1500,remote1500Remoteinterfacedescription:Sequencing:receivedisabled,senddisabledVCstatistics:packettotals:receive457,send444bytetotals:receive36748,send39120packetdrops:receive0,send0第二章VPWS原理及相關(guān)配置VPWS上的異類二層協(xié)議接入配置查看R1的ARP信息r1#sharpProtocolAddressAge(min)HardwareAddrTypeInterfaceInternet10.0.15.579ca01.13b4.0000ARPAFastEthernet0/0.12Internet10.0.15.1-ca00.1608.0000ARPAFastEthernet0/0.12r2#shintf0/0.12FastEthernet0/0.12isup,lineprotocolisupHardwareisDEC21140,addressisca01.13b4.0000(biaca01.13b4.0000)MTU1500bytes,BW100000Kbit,DLY100usec,reliability255/255,txload1/255,rxload1/255Encapsulation802.1QVirtualLAN,VlanID12.ARPtype:ARPA,ARPTimeout04:00:00第二章VPWS原理及相關(guān)配置VPWS上的異類二層協(xié)議接入配置查看R5的PPP協(xié)商信息r5#shinterfacesse1/0Serial1/0isup,lineprotocolisupInternetaddressis10.0.15.5/24MTU1500bytes,BW1544Kbit,DLY20000usec,reliability255/255,txload1/255,rxload1/255EncapsulationPPP,LCPOpenListen:CDPCPOpen:IPCP,crc16,loopbacknotsetKeepaliveset(10sec)…r4#shinterfacesserial1/0Serial1/0isup,lineprotocolisupMTU1500bytes,BW1544Kbit,DLY20000usec,reliability255/255,txload1/255,rxload1/255EncapsulationPPP,crc16,loopbacknotsetKeepaliveset(10sec)Restart-Delayis0secsLCPOpenListen:MPLSCPOpen:IPCP…第二章VPWS原理及相關(guān)配置VPWS上的異類二層協(xié)議接入配置測(cè)試R1\R5的連通性r1#ping10.0.15.5Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.0.15.5,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=312/628/1264msr1#traceroute10.0.15.5Typeescapesequencetoabort.Tracingtherouteto10.0.15.5110.0.15.5432msec*32msec第二章VPWS原理及相關(guān)配置域間VPWS技術(shù)OptionA模型PW(偽線)建立在AS內(nèi)部的PE和ASBR之間ASBRAS1AS2……ASBRPEPEMPLS/VPNMPLS/VPNR1R3R2R4ACACACACACACPWPWPWPW第二章VPWS原理及相關(guān)配置域間VPWS技術(shù)OptionA模型特點(diǎn)1.原理簡(jiǎn)單,配置容易2.ASBR需要維護(hù)PW及AC信息,擴(kuò)展性較差3.適用于域間PW數(shù)量較少的場(chǎng)景第二章VPWS原理及相關(guān)配置域間VPWS技術(shù)OptionC模型PW(偽線)建立在不同AS的PE之間ASBRAS1AS2……ASBRPEPEMPLS/VPNMPLS/VPNR1R3R2R4ACACACACPWPWEBGPsend-label第二章VPWS原理及相關(guān)配置域間VPWS技術(shù)OptionC模型特點(diǎn)1.配置比OptionA較為復(fù)雜2.ASBR不需要維護(hù)PE及AC信息,僅做MPLS標(biāo)簽交換3.適用于域間PW較多的場(chǎng)景,擴(kuò)展性好本章內(nèi)容回顧VPWS相關(guān)概念VPWS上的Ethernet接入配置VPWS上的PPP接入配置VPWS上的異類二層協(xié)議接入配置域間VPWS技術(shù)課程內(nèi)容第一章L2MPLS/VPN概述第二章VPWS原理及相關(guān)配置第三章VPLS原理及相關(guān)配置47第三章VPLS原理及相關(guān)配置VPLS相關(guān)概念VPLS轉(zhuǎn)發(fā)與泛洪的工作原理VPLS相關(guān)配置VPLS的部署模型第三章VPLS原理及相關(guān)配置VPLS相關(guān)概念VPLS:VirtualPrivateLANService,虛擬專用局域網(wǎng)服務(wù)為用戶提供點(diǎn)到多點(diǎn)的“二層虛擬交換機(jī)”服務(wù)僅支持Ethernet二層協(xié)議使用單播LDP或者M(jìn)P-BGP作為信令協(xié)議以通告VC標(biāo)簽第三章VPLS原理及相關(guān)配置VPLS轉(zhuǎn)發(fā)與泛洪的工作原理1.PW(偽線)的建立PE之間會(huì)為屬于同一VPN的AC建立全連接的PWPEPEPEPR2R3R1MPLSACPWACACPWPW第三章VPLS原理及相關(guān)配置VPLS轉(zhuǎn)發(fā)與泛洪的工作原理1.PW(偽線)的建立PE之間會(huì)為屬于同一VPN的AC建立全連接的PWR2R3R1MPLSACPWACACPWPWPEPEPE第三章VPLS原理及相關(guān)配置VPLS轉(zhuǎn)發(fā)與泛洪的工作原理2.PE從AC接收到CE的二層數(shù)據(jù)幀(1)如果源MAC不存在，則更新MAC地址表L2FrameR2R3R1MPLSACPWACACPWPWPEPEPE第三章VPLS原理及相關(guān)配置VPLS轉(zhuǎn)發(fā)與泛洪的工作原理2.PE從AC接收到CE的二層數(shù)