CCIE SP—MPLS L2VPN EoMPLS

6月 25th, 2008,由 frank撰写

EOMPLS

以下是实例拓扑：

SW3——R2——R1——R3——SW1

R1、R2和R3已经建立好LDP邻居，并且之间OSPF路由已通。

以下是基础配置模型：

ip cef
!
mpls ldp router-id Loopback0
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface Serial2/2
ip address 150.1.12.2 255.255.255.0
mpls ip
!
router ospf 1
router-id 150.1.2.2
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.0 0.0.0.255 area 0
!

1、基于端口

以下是PE的配置：

Rack1R2#sh run int f0/0
Building configuration…

Current configuration : 177 bytes
!
interface FastEthernet0/0
description link-to-SW1-vlan12-F1/2
no ip address
duplex full
xconnect 150.1.3.3 100 encapsulation mpls
end

————————————

Rack1R3#sh run int f0/0
Building configuration…

Current configuration : 140 bytes
!
interface FastEthernet0/0
no ip address
duplex half
xconnect 150.1.2.2 100 encapsulation mpls
end

以下是结果：
Rack1R2#sh mpls l2transport vc

Local intf Local circuit Dest address VC ID Status
————- ——————– ————— ———- ———-
Fa0/0 Ethernet 150.1.3.3 100 UP

Rack1R3#sh mpls l2transport vc

Local intf Local circuit Dest address VC ID Status
————- ——————– ————— ———- ———-
Fa0/0 Ethernet 150.1.2.2 100 UP

Rack1R2#sh mpls l2transport vc 100 de
Local interface: Fa0/0 up, line protocol up, Ethernet up
Destination address: 150.1.3.3, VC ID: 100, VC status: up
Output interface: Se2/2, imposed label stack {19 16} >>>19是远端的VC标签，这个16的标签是根据下一跳（R1环回口）分配的标签，这个标签可以在“show mpls for”中找到。
Preferred path: not configured
Default path: active
Tunnel label: 16, next hop point2point
Create time: 00:13:37, last status change time: 00:08:53
Signaling protocol: LDP, peer 150.1.3.3:0 up
MPLS VC labels: local 16, remote 19 >>>16是本地的VC标签，19是对端PE的VC标签。
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 19, send 27
byte totals: receive 3955, send 4764
packet drops: receive 0, send 0

Rack1R3#sh mpls l2transport vc 100 de
Local interface: Fa0/0 up, line protocol up, Ethernet up
Destination address: 150.1.2.2, VC ID: 100, VC status: up
Output interface: Se1/2, imposed label stack {16 17}
Preferred path: not configured
Default path: active
Tunnel label: 17, next hop point2point
Create time: 00:29:44, last status change time: 00:25:21
Signaling protocol: LDP, peer 150.1.2.2:0 up
MPLS VC labels: local 19, remote 16
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description: link-to-SW1-vlan12-F1/2
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 66, send 41
byte totals: receive 11364, send 11167
packet drops: receive 0, send 0

Rack1R2#sh mpls for
Local  Outgoing      Prefix          Bytes Label   Outgoing    Next Hop
Label  Label or VC   or Tunnel Id    Switched      interface
16     No Label      l2ckt(100)      4653          none        point2point
17     Pop Label     150.1.1.1/32    0             Se2/2       point2point
18     16            150.1.3.3/32    0             Se2/2       point2point
19     Pop Label     150.1.13.0/24   0             Se2/2       point2point

Rack1R3#sh mpls for
Local  Outgoing       Prefix         Bytes Label   Outgoing    Next Hop
Label  Label or VC    or Tunnel Id   Switched      interface
16     Pop Label      150.1.1.1/32   0             Se1/2       point2point
17     Pop Label      150.1.12.0/24  0             Se1/2       point2point
18     17             150.1.2.2/32   0             Se1/2       point2point
19     No Label       l2ckt(100)     11836         none        point2point

Rack1R2#sh mpls ldp nei
Peer LDP Ident: 150.1.3.3:0; Local LDP Ident 150.1.2.2:0
TCP connection: 150.1.3.3.11013 – 150.1.2.2.646
State: Oper; Msgs sent/rcvd: 23/22; Downstream
Up time: 00:12:02
LDP discovery sources:
Targeted Hello 150.1.2.2 -> 150.1.3.3, active, passive
Addresses bound to peer LDP Ident:
150.1.13.3 150.1.3.3
Peer LDP Ident: 150.1.1.1:0; Local LDP Ident 150.1.2.2:0
TCP connection: 150.1.1.1.646 – 150.1.2.2.11010
State: Oper; Msgs sent/rcvd: 21/21; Downstream
Up time: 00:11:42
LDP discovery sources:
Serial2/2, Src IP addr: 150.1.12.1
Addresses bound to peer LDP Ident:
150.1.13.1 150.1.1.1 150.1.12.1

Rack1SW3# sh arp >>>在CE端进行测试
Protocol Address          Age (min) Hardware Addr   Type   Interface
Internet 192.168.100.2           –   cc07.155c.f103 ARPA   FastEthernet1/3
Rack1SW3#
Rack1SW3#ping 192.168.100.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.100.1, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 104/160/196 ms
Rack1SW3#
Rack1SW3#sh arp
Protocol Address          Age (min) Hardware Addr   Type   Interface
Internet 192.168.100.1           0   cc06.1524.f103 ARPA   FastEthernet1/3
Internet 192.168.100.2           –   cc07.155c.f103 ARPA   FastEthernet1/3

2、基于VLAN

由于模拟器的原因，两端CE与PE的互联端口变更为E0/0。

以下是PE的配置：
Rack1R2#sh run | b 0/0
interface FastEthernet0/0
no ip address
duplex full
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
xconnect 150.1.3.3 100 encapsulation mpls
————————————
Rack1R3#sh run | b 0/0
interface FastEthernet0/0
no ip address
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
xconnect 150.1.2.2 100 encapsulation mpls

以下是CE的配置：
Rack1SW3#sh run | b 0/0
interface Ethernet0/0
no ip address
!
interface Ethernet0/0.100
encapsulation dot1Q 100
ip address 192.168.100.1 255.255.255.0
————————————
Rack1SW1#sh run | b 0/0
interface Ethernet0/0
no ip address
!
interface Ethernet0/0.100
encapsulation dot1Q 100
ip address 192.168.100.2 255.255.255.0

以下是结果：

Rack1R2#sh mpls l2transport vc
Local intf     Local circuit        Dest address    VC ID      Status
-------------  -------------------- --------------- ---------- ----------
Fa0/0.100      Eth VLAN 100         150.1.3.3       100        UP

Rack1R3#sh mpls l2transport vc
Local intf     Local circuit        Dest address    VC ID      Status
-------------  -------------------- --------------- ---------- ----------
Fa0/0.100      Eth VLAN 100         150.1.2.2       100        UP

Rack1R2#sh mpls for
Local  Outgoing      Prefix         Bytes Label   Outgoing     Next Hop
Label  Label or VC   or Tunnel Id   Switched      interface
16     Pop Label     150.1.1.1/32   0             Se2/2        point2point
17     No Label      l2ckt(100)     536           none         point2point
18     16            150.1.3.3/32   0             Se2/2        point2point
19     Pop Label     150.1.13.0/24  0             Se2/2        point2point

Rack1R2#sh mpls l2transport vc 100 detail
Local interface: Fa0/0.100 up, line protocol up, Eth VLAN 100 up
Destination address: 150.1.3.3, VC ID: 100, VC status: up
Output interface: Se2/2, imposed label stack {19 16}
Preferred path: not configured
Default path: active
Tunnel label: 16, next hop point2point
Create time: 00:16:40, last status change time: 00:11:39
Signaling protocol: LDP, peer 150.1.3.3:0 up
MPLS VC labels: local 17, remote 19
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 5, send 5
byte totals: receive 536, send 616
packet drops: receive 0, send 0

本文出自 Frank's Blog

本文链接：CCIE SP—MPLS L2VPN EoMPLS
版权声明：本文为原创文章，仅代表个人观点，版权归 Frank Zhao 所有，转载时请注明本文出处及文章链接

CCIE SP MPLS

你可以留言,或者trackback 从你的网站

CCIE SP—MPLS L2VPN«

»BGP 地址族分析 – Address-family

No Responses to “CCIE SP—MPLS L2VPN EoMPLS”

wujunfeng说道：

8月 18, 2008 10:01

您的文章真好，我仔细拜读，收获不小。但文章中有三处我有疑问，希望能与您探讨。

（１）Rack1R2#sh mpls l2transport vc 100 de
Local interface: Fa0/0 up, line protocol up, Ethernet up
Destination address: 150.1.3.3, VC ID: 100, VC status: up
Output interface: Se2/2, imposed label stack {19 16} >>>我认为imposed label stack应该为 {16 19} 。
19是远端的VC标签，这个16的标签是根据下一跳（R1环回口，注：我认为应为R3环回口）分配的标签，另外这个标签可以在“show mpls for”中找到。

（２）Rack1R3#sh mpls l2transport vc 100 de
Local interface: Fa0/0 up, line protocol up, Ethernet up
Destination address: 150.1.2.2, VC ID: 100, VC status: up
Output interface: Se1/2, imposed label stack {16 17}>>>认为imposed label stack应该为 {17 16}

（３）Rack1R2#sh mpls l2transport vc 100 detail
Local interface: Fa0/0.100 up, line protocol up, Eth VLAN 100 up
Destination address: 150.1.3.3, VC ID: 100, VC status: up
Output interface: Se2/2, imposed label stack {19 16}　//我认为imposed label stack应该为 {16 19}
Preferred path: not configured

以下是我对于Eompls两层label的理解,不知你是否赞同?
外层Tunnel标签用于普通的路径label交换，通过正常的LDP过程分配的LSP标签
　内层VC标签标识用户Vlan,通过PE间扩展的LDP会话分配

希望能与您邮件交流wujunfeng@jsnetcom.com
frank说道：

8月 20, 2008 10:56

Output interface: Se2/2, imposed label stack {19 16}
19这个标签就是内层的out标签，也就是远端PE发给他的标签（在R3上，19是vpn的in标签，你可以用sh mpls for看到）。
16是外层的out标签，由于他的下一跳是R3，所以走R3的标签。要看R3环回口的标签是怎么来的，你可以通过”show mpls ldp bin”可以看出，他是R1分配给他的。

其实之所以你没有弄明白，就是标签的号码很相似，把你弄糊涂了，你可以用”mpls label rang”命令，控制标签的标签号，这样就可以一目了然了。如下所示：
R2：mpls label range 200 299
R3：mpls label range 300 399
R1：mpls label range 100 199

Rack1R2#sh mpls l2transport vc de
Local interface: Fa0/0 up, line protocol up, Ethernet up
Destination address: 150.1.3.3, VC ID: 100, VC status: up
Output interface: Se2/2, imposed label stack {300 101}
Preferred path: not configured
Default path: active
Tunnel label: 101, next hop point2point
Create time: 00:01:19, last status change time: 00:00:34
Signaling protocol: LDP, peer 150.1.3.3:0 up
MPLS VC labels: local 200, remote 300

Rack1R2#sh mpls for
Local Outgoing Prefix Bytes Label Outgoing Next Hop
Label Label or VC or Tunnel Id Switched interface
200 No Label l2ckt(100) 180 none point2point

lib entry: 150.1.3.3/32, rev 8
local binding: label: 202
remote binding: lsr: 150.1.1.1:0, label: 101

Rack1R3#sh mpls l2transport vc de
Local interface: Fa0/0 up, line protocol up, Ethernet up
Destination address: 150.1.2.2, VC ID: 100, VC status: up
Output interface: Se1/2, imposed label stack {200 100}
Preferred path: not configured
Default path: active
Tunnel label: 100, next hop point2point
Create time: 00:02:38, last status change time: 00:01:43
Signaling protocol: LDP, peer 150.1.2.2:0 up
MPLS VC labels: local 300, remote 200

Rack1R3#sh mpls for
Local Outgoing Prefix Bytes Label Outgoing Next Hop
Label Label or VC or Tunnel Id Switched interface
300 No Label l2ckt(100) 1935 none point2point

你的理解没有问题，起始Eompls跟普通的MPLS VPN是一样的，只不过稍微扩展些吧了。
wujunfeng说道：

8月 21, 2008 09:15

我们对于Eompls内外层标签的理解是一致的。

我的意思是，对于imposed label stack {19 16} 中前一个应该是外层标签，后一个是内层标签。而你的案例好像写反了，你写的是前一个是内层标签，后一个是外层标签。

对于MPLS VPN，我可以确定tags imposed: {a b} 中a是ldp分配的外层公网标签，b是MBGP分配内层私网标签。

对于Eompls，我觉得格式也应该是一致的。网上也有例子证实了我的想法。可以参考《c7609 OSM板卡的Eompls配置案例》http://www.cnblogs.com/cunshen/articles/738214.html中有如下

osr1#show mpls l2transport vc detail

Local interface: Vl2 up, line protocol up, Eth VLAN 2 up
Destination address: 11.11.11.11, VC ID: 2, VC status: up
Tunnel label: 17, next hop 34.0.0.2
Output interface: GE3/3, imposed label stack {17 18}//前一个标签17是Tunnel label，后一个标签是18是MPLS VC labels remote
Create time: 01:24:44, last status change time: 00:10:55
Signaling protocol: LDP, peer 11.11.11.11:0 up
MPLS VC labels: local 20, remote 18
Group ID: local 71, remote 89
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 1009, send 1019
byte totals: receive 133093, send 138089
packet drops: receive 0, send 0

不知你是否可以再查一下tags imposed: {a b}的顺序含义？
frank说道：

8月 27, 2008 14:49

你理解错了，在此文中“imposed label stack”跟tags imposed不一样，tags imposed中的标签是一个in标签，一个out标签，它都是LDP分发的，包经过时，会发生标签互换；
但对于你说的底层标签，也就vpn标签，这个标签出去后不会发生标签替换，而是把外层标签加进去。也就是嵌入第二层标签，这就是一种机制。

在实践中如果你想看vpn标签，用“show ip bgp vpn all”；
如果你想看LDP的标签，就得用“show mpls for”；
2层标签不是一个概念，所以不要弄混！
frank说道：

8月 27, 2008 14:59

你理解错了，在此文中“imposed label stack”跟tags imposed不一样：
tags imposed中的标签是一个in标签，一个out标签，它都是LDP分发的，包经过时，会发生标签互换；
但对于你说的底层标签，也就vpn标签，这个标签出去后不会发生标签替换，而是把外层标签加进去。也就是嵌入第二层标签，这就是一种机制。

在实践中如果你想看vpn标签，用“show ip bgp vpn all”；
如果你想看LDP的标签，就得用“show mpls for”；
2层标签不是一个概念，所以不要弄混！

关于你说的前一个和后一个标签具体指什么的问题，我没有看到哪里具体说明，我发的数据都是实际数据！看标签来判断吧！
wujunfeng说道：

8月 28, 2008 11:14

你对于tags imposed的理解不正确,tags imposed中的两个标签并不是一个in标签，一个out标签，而是在tags imposed: {a b}格式中，a为外层标签，b为内层标签义

NJ-A-DFJ-SR7609-1#show ip cef vrf wangba 221.224.0.0 255.240.0.0 detail
221.224.0.0/12, version 2830, epoch 0, cached adjacency 221.6.0.141
0 packets, 0 bytes
tag information set, all rewrites owned
local tag: VPN-route-head
fast tag rewrite with GE3/1, 221.6.0.141, tags imposed: {577 900} ／/577是外层公网标签，900是MBGP内层私网标签
via 221.6.63.254, 0 dependencies, recursive　注221.6.63.254是公网路由
next hop 221.6.0.141, GE-WAN3/1 via 221.6.63.254/32 (Default)
valid cached adjacency
tag rewrite with GE3/1, 221.6.0.141, tags imposed: {577 900}

NJ-A-DFJ-SR7609-1#show tag forwarding-table 221.6.63.254 是公网路由
Local Outgoing Prefix Bytes tag Outgoing Next Hop
tag tag or VC or Tunnel Id switched interface
459 577 221.6.63.254/32 0 GE3/1 221.6.0.141

NJ-A-DFJ-SR7609-1#show mpls forwarding-table vrf wangba 221.224.0.0 255.240.0.0
Local Outgoing Prefix Bytes tag Outgoing Next Hop
tag tag or VC or Tunnel Id switched interface
None 577 221.224.0.0/12 0 GE3/1 221.6.0.141
只有vrf wangba中才有221.224.0.0 255.240.0.0的路由，即577应是外层标签

如下显示MBGP私网标签900
NJ-A-DFJ-SR7609-1#show bgp vpnv4 unicast all labels | in 221.224.0.0
221.224.0.0/12 221.6.63.254 vpn-route/900
wujunfeng说道：

8月 28, 2008 11:30

我有空找个模拟器按你的环境还测试一下，看看数据是否与你的一致
s0trcwd7说道：

3月 24, 2014 17:14

你们都没错，显示的问题与IOS 版本有关吧,我12.2的版本,imposed label stack {106 288}
106是到对端loopback口外层标签由LDP领居分布的,288是VC内层标签,由对端PE分配的

PE1#sh ver | in c7600
Cisco IOS Software, c7600rsp72043_rp Software (c7600rsp72043_rp-ADVIPSERVICESK9-M), Version 12.2(33)SRD4, RELEASE SOFTWARE (fc2)
BOOTLDR: Cisco IOS Software, c7600rsp72043_rp Software (c7600rsp72043_rp-ADVIPSERVICESK9-M), Version 12.2(33)SRD4, RELEASE SOFTWARE (fc2)

PE1#sh mpls l2transport vc 3537 detail
Local interface: Te1/4.3537 up, line protocol up, Eth VLAN 3537 up
Interworking type is Ethernet
Destination address: x, VC ID: 3537, VC status: up
Output interface: Te7/1, imposed label stack {106 288}
Preferred path: not configured
Default path: active
Next hop: x
Create time: 3w0d, last status change time: 3w0d
Signaling protocol: LDP, peer x:0 up
Targeted Hello: x(LDP Id) -> x Status TLV support (local/remote) : enabled/supported
Label/status state machine : established, LruRru
Last local dataplane status rcvd: no fault
Last local SSS circuit status rcvd: no fault
Last local SSS circuit status sent: no fault
Last local LDP TLV status sent: no fault
Last remote LDP TLV status rcvd: no fault
MPLS VC labels: local 503, remote 288

留言哦

返回顶端

『无题』

I persist, therefore I am!!!

Memo

Perseverance sometimes equals genius!

There are only two creatures in the world who can surmount the pyramid:

—–the eagle and the snail.
Useful Link

1. IANA - AFI
2. IANA - SAFI
3. IANA - BGP Ex Comm
4. RPM pbone.net
5. Linux Packages Search
Useful Toots

Linux/http server:

python -m SimpleHTTPServer <port>

python -m http.server <port>

PS: only one thread, if require more threads, can replace by “caddy”.

Win10/http server:

http://www.rejetto.com/hfs/

Win10/md5:

certutil -hashfile .\xxxx MD5
TAG Cloud

7600 AAA ASR9k BGP BGP Design BLOG DYNAMIPS EEM ESXI EVPN HSRP IOX IP SLA IPV6 ISDN IXIA JAVA k8s L2TP L2VPN Linux Macos MPLS Multicast NCS5500 NSO OSPF PHONE Python QOS RHEL S-CRT SDN SRTE STP TCL TRex UBUNTU Upgrade VLAN VPLS WINDOWS WIRESHARK XR Yang
WP Cumulus Flash tag cloud by Roy Tanck requires Flash Player 9 or better.
分类
- CCDE (16)
- CCIE SEC (4)
- CCIE SP (55)
- CCIE VOICE (3)
- Classical CASE (26)
- Linux (72)
- Mobile Phone (4)
- Programmer (44)
- Solution (2)
- Uncategorized (6)
- Windows常用技术 (10)
- 似水流年 (16)
- 学习笔记 (184)
- 常用资料 (44)
- 网络技术 (35)
Recent Comments
- 正在加载...
近期文章
其他操作

CCIE SP—MPLS L2VPN EoMPLS

EOMPLS

1、基于端口

2、基于VLAN

No Responses to “CCIE SP—MPLS L2VPN EoMPLS”

留言哦

『无题』

Memo

Useful Link

Useful Toots

TAG Cloud

分类

Recent Comments

近期文章

其他操作