multi-vrf用来隔离ce路由,不需要rd值和rt值.
如果multi-vrf ce路由器运行ospf话,需要在ospf vrf进程下配置capability vrf-lite命令来确保ospf正常实施,不要检查客户端vrf情况.运行了vrf才会有这条命令.
vrf-list实验:
1.pe封装子接口放入vrf a和vrf b
2.r3为multi-vrf ce路由器,连接pe封装两个子接口并划入vrf c和vrf d(无需rd)
3.同时r3的e0/1划入vrf c,环回口放入vrf d用来隔离路由
4.vrf c中用ospf协议,vrf d中运行eigrp
5.针对ospf,运行capability vrf-lite访客接受路由
r2:
int lo0
ip add 22.1.1.1 255.255.255.255
int e0/3
ip add 24.1.1.2 255.255.255.0
r4:
int lo0
ip add 44.1.1.1 255.255.255.255
int e0/3
ip add 24.1.1.4 255.255.255.0
router eigrp 90
no auto
network 24.1.1.0 0.0.0.255
network 44.1.1.1 0.0.0.0
r2:
router eigrp 90
no auto
network 22.1.1.1 0.0.0.0
network 24.1.1.2 0.0.0.0
int e0/3
mpls ip
r4:
int e0/3
mpls ip
r2:
ip vrf a
rd 100:10
route-target 100:10
int e0/0
no sh
int e0/0.10
encapsulation dot1q 10
ip vrf forwarding a
ip add 10.1.1.2 255.255.255.0
show ip vrf detail a
r3:
int e0/0
no sh
int e0/0.10
encapsulation dot1q 10
ip add 10.1.1.3 255.255.255.0
sw1:
vlan 10
vlan 20
int range f1/0 - 1
switchport trunk encapsulation dot1q
switchport mode trunk
no cdp run
r3:
ping 10.1.1.2
int lo0
ip add 33.1.1.1 255.255.255.255
int e0/1
ip add 35.1.1.3 255.255.255.0
show ip route
ip vrf c
int e0/0.10
ip vrf forwarding c
ip add 10.1.1.3 255.255.255.0
int e0/1
ip vrf forwarding c
ip add 35.1.1.3 255.255.255.0
ip vrf d
int lo0
ip vrf d
ip add 33.1.1.1 255.255.255.255
do show ip route vrf d
int e0/0.20
encapsulation dot1q 20
ip vrf forwarding d
ip add 23.1.1.3 255.255.255.0
r2:
ip vrf b
rd 100:2
route-target 100:2
int e0/0.20
encapsulation dot1q 20
ip vrf forwarding b
ip add 23.1.1.2 255.255.255.0
show ip route vrf d
ping vrf d 23.1.1.2
show ip route vrf c
r2:
router bgp 100
no bgp default ipv4
neighbor 44.1.1.1 remote-as 100
neighbor 44.1.1.1 up lo0
address-family vpnv4
neighbor 44.1.1.1 activate
address-family ipv4 vrf a
redistribute ospf 1 match internal external
int e0/0.10
ip ospf 1 area 0
router ospf 1
redistribute bgp 100 subnets
r4:
ip vrf a
rd 100:10
route-target export 100:10
route-target import 100:10
int lo1
ip vrfforwarding a
ip add 4.4.4.4 255.255.255.0
router bgp 100
no bgp default ipv4
neighbor 22.1.1.1 remote-as 100
address-family vpnv4
neighbor 22.1.1.1 acitvate
r2:
show ip bgp vpnv4 all
r4:
int lo1
ip ospf 1 area 0
router bgp 100
address-family ipv4 vrf a
redistibute ospf 1 match internal external
r3:
int e0/0.10
ip ospf 1 area 0
int e0/1
ip ospf 1 area 0
r5:
int e0/1
ip add 35.1.1.5 255.255.255.0
ip ospf 1 area 0
r2:
router eigrp 100
no auto-summary
address-family ipv4 vrf b
autponomous-system 90
network 23.1.1.2 0.0.0.0
r3:
router eigrp 100
address-family ipv4 vrf d
autonomous-system 90
network 23.1.1.3 0.0.0.0
network 33.1.1.1 0.0.0.0
r2:
show ip vpnv4 all
show ip ospf data
r3:
show ip route vrf c(发现r3没有任何路由)
r4:
show ip route vrf a
r3:
router ospf 1
capability vrf-lite(不要对pe的vrf特殊的检测)
show ip route vrf c