multi-vrf用来隔离ce路由,不需要rd值和rt值.

如果multi-vrf ce路由器运行ospf话,需要在ospf vrf进程下配置capability vrf-lite命令来确保ospf正常实施,不要检查客户端vrf情况.运行了vrf才会有这条命令.

vrf-list实验:

1.pe封装子接口放入vrf a和vrf b

2.r3为multi-vrf ce路由器,连接pe封装两个子接口并划入vrf c和vrf d(无需rd)

3.同时r3的e0/1划入vrf c,环回口放入vrf d用来隔离路由

4.vrf c中用ospf协议,vrf d中运行eigrp

5.针对ospf,运行capability vrf-lite访客接受路由

r2:

int lo0

ip add 22.1.1.1 255.255.255.255

int e0/3

ip add 24.1.1.2 255.255.255.0

r4:

int lo0

ip add 44.1.1.1 255.255.255.255

int e0/3

ip add 24.1.1.4 255.255.255.0

router eigrp 90

no auto

network 24.1.1.0 0.0.0.255

network 44.1.1.1 0.0.0.0

r2:

router eigrp 90

no auto

network 22.1.1.1 0.0.0.0

network 24.1.1.2 0.0.0.0

int e0/3

mpls ip

r4:

int e0/3

mpls ip

r2:

ip vrf a

rd 100:10

route-target 100:10

int e0/0

no sh

int e0/0.10

encapsulation dot1q 10

ip vrf forwarding a

ip add 10.1.1.2 255.255.255.0

show ip vrf detail a

r3:

int e0/0

no sh

int e0/0.10

encapsulation dot1q 10

ip add 10.1.1.3 255.255.255.0

sw1:

vlan 10

vlan 20

int range f1/0 - 1

switchport trunk encapsulation dot1q

switchport mode trunk

no cdp run

r3:

ping 10.1.1.2

int lo0

ip add 33.1.1.1 255.255.255.255

int e0/1

ip add 35.1.1.3 255.255.255.0

show ip route

ip vrf c

int e0/0.10

ip vrf forwarding c

ip add 10.1.1.3 255.255.255.0

int e0/1

ip vrf forwarding c

ip add 35.1.1.3 255.255.255.0

ip vrf d

int lo0

ip vrf d

ip add 33.1.1.1 255.255.255.255

do show ip route vrf d

int e0/0.20

encapsulation dot1q 20

ip vrf forwarding d

ip add 23.1.1.3 255.255.255.0

r2:

ip vrf b

rd 100:2

route-target 100:2

int e0/0.20

encapsulation dot1q 20

ip vrf forwarding b

ip add 23.1.1.2 255.255.255.0

show ip route vrf d

ping vrf d 23.1.1.2

show ip route vrf c

r2:

router bgp 100

no bgp default ipv4

neighbor 44.1.1.1 remote-as 100

neighbor 44.1.1.1 up lo0

address-family vpnv4

neighbor 44.1.1.1 activate

address-family ipv4 vrf a

redistribute ospf 1 match internal external

int e0/0.10

ip ospf 1 area 0

router ospf 1

redistribute bgp 100 subnets

r4:

ip vrf a

rd 100:10

route-target export 100:10

route-target import 100:10

int lo1

ip vrfforwarding a

ip add 4.4.4.4 255.255.255.0

router bgp 100

no bgp default ipv4

neighbor 22.1.1.1 remote-as 100

address-family vpnv4

neighbor 22.1.1.1 acitvate

r2:

show ip bgp vpnv4 all

r4:

int lo1

ip ospf 1 area 0

router bgp 100

address-family ipv4 vrf a

redistibute ospf 1 match internal external

r3:

int e0/0.10

ip ospf 1 area 0

int e0/1

ip ospf 1 area 0

r5:

int e0/1

ip add 35.1.1.5 255.255.255.0

ip ospf 1 area 0

r2:

router eigrp 100

no auto-summary

address-family ipv4 vrf b

autponomous-system 90

network 23.1.1.2 0.0.0.0

r3:

router eigrp 100

address-family ipv4 vrf d

autonomous-system 90

network 23.1.1.3 0.0.0.0

network 33.1.1.1 0.0.0.0

r2:

show ip vpnv4 all

show ip ospf data

r3:

show ip route vrf c(发现r3没有任何路由)

r4:

show ip route vrf a

r3:

router ospf 1

capability vrf-lite(不要对pe的vrf特殊的检测)

show ip route vrf c