尧图网站建设 
一 组网说明①运营商为某客户提供MV专线,实现总部和分支三层互通；②客户总部和分支通过运营商MV专线建立IPSEC隧道③总部内网、分支内网全部配置的静态路由；二 设备配置2.1运营商MV专线配置2.1.1 PE1设备配置sysname PE1#ip vpn-instance 1route-distinguisher 1:1vpn-target 1:1 import-extcommunityvpn-target 1:1 export-extcommunity#ospf 1 router-id 9.9.9.1area 0.0.0.0network 1.1.1.1 0.0.0.0network 9.9.9.1 0.0.0.0#ip unreachables enableip ttl-expires enable#lldp global enable#mpls lsr-id 9.9.9.1#mpls ldp#interface LoopBack0ip address 9.9.9.1 255.255.255.255#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 1.1.1.1 255.255.255.0mpls enablempls ldp enable#interface GigabitEthernet0/1port link-mode routecombo enable copperip binding vpn-instance 1ip address 192.168.1.1 255.255.255.0#interface GigabitEthernet0/2port link-mode routecombo enable copper#bgp 100peer 9.9.9.3 as-number 100peer 9.9.9.3 connect-interface LoopBack0#address-family vpnv4peer 9.9.9.3 enable#ip vpn-instance 1#address-family ipv4 unicastimport-route direct#2.1.2 P设备配置sysname P#ospf 1 router-id 9.9.9.2area 0.0.0.0network 1.1.1.2 0.0.0.0network 2.2.2.1 0.0.0.0network 9.9.9.2 0.0.0.0#ip unreachables enableip ttl-expires enable#lldp global enable#mpls lsr-id 9.9.9.2#mpls ldp#interface LoopBack0ip address 9.9.9.2 255.255.255.255#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 1.1.1.2 255.255.255.0mpls enablempls ldp enable#interface GigabitEthernet0/1port link-mode routecombo enable copperip address 2.2.2.1 255.255.255.0mpls enablempls ldp enable#2.1.3 PE2设备配置sysname PE2#ip vpn-instance 1route-distinguisher 1:1vpn-target 1:1 import-extcommunityvpn-target 1:1 export-extcommunity#ospf 1 router-id 9.9.9.3area 0.0.0.0network 2.2.2.2 0.0.0.0network 9.9.9.3 0.0.0.0#ip unreachables enableip ttl-expires enable#lldp global enable#mpls lsr-id 9.9.9.3#mpls ldp#interface LoopBack0ip address 9.9.9.3 255.255.255.255#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 2.2.2.2 255.255.255.0mpls enablempls ldp enable#interface GigabitEthernet0/1port link-mode routecombo enable copperip binding vpn-instance 1ip address 192.168.2.1 255.255.255.0#interface GigabitEthernet0/2port link-mode routecombo enable copper#bgp 100peer 9.9.9.1 as-number 100peer 9.9.9.1 connect-interface LoopBack0#address-family vpnv4peer 9.9.9.1 enable#ip vpn-instance 1#address-family ipv4 unicastimport-route direct#2.2总部和分支出口R配置地址和默认路由可测试地址可达2.2.1 ZB-R地址和默认路由配置sysname ZB-R#ip unreachables enableip ttl-expires enable#lldp global enable#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 192.168.1.2 255.255.255.0#ip route-static 0.0.0.0 0 192.168.1.1#2.2.2 FZ-R地址和默认路由配置sysname FZ-R#ip unreachables enableip ttl-expires enable#lldp global enable#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 192.168.2.2 255.255.255.0#ip route-static 0.0.0.0 0 192.168.2.1#2.2.3 MV专线-客户两端运行IPSEC隧道打通
一 组网说明①运营商为某客户提供MV专线,实现总部和分支三层互通；②客户总部和分支通过运营商MV专线建立IPSEC隧道③总部内网、分支内网全部配置的静态路由；二 设备配置2.1运营商MV专线配置2.1.1 PE1设备配置sysname PE1#ip vpn-instance 1route-distinguisher 1:1vpn-target 1:1 import-extcommunityvpn-target 1:1 export-extcommunity#ospf 1 router-id 9.9.9.1area 0.0.0.0network 1.1.1.1 0.0.0.0network 9.9.9.1 0.0.0.0#ip unreachables enableip ttl-expires enable#lldp global enable#mpls lsr-id 9.9.9.1#mpls ldp#interface LoopBack0ip address 9.9.9.1 255.255.255.255#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 1.1.1.1 255.255.255.0mpls enablempls ldp enable#interface GigabitEthernet0/1port link-mode routecombo enable copperip binding vpn-instance 1ip address 192.168.1.1 255.255.255.0#interface GigabitEthernet0/2port link-mode routecombo enable copper#bgp 100peer 9.9.9.3 as-number 100peer 9.9.9.3 connect-interface LoopBack0#address-family vpnv4peer 9.9.9.3 enable#ip vpn-instance 1#address-family ipv4 unicastimport-route direct#2.1.2 P设备配置sysname P#ospf 1 router-id 9.9.9.2area 0.0.0.0network 1.1.1.2 0.0.0.0network 2.2.2.1 0.0.0.0network 9.9.9.2 0.0.0.0#ip unreachables enableip ttl-expires enable#lldp global enable#mpls lsr-id 9.9.9.2#mpls ldp#interface LoopBack0ip address 9.9.9.2 255.255.255.255#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 1.1.1.2 255.255.255.0mpls enablempls ldp enable#interface GigabitEthernet0/1port link-mode routecombo enable copperip address 2.2.2.1 255.255.255.0mpls enablempls ldp enable#2.1.3 PE2设备配置sysname PE2#ip vpn-instance 1route-distinguisher 1:1vpn-target 1:1 import-extcommunityvpn-target 1:1 export-extcommunity#ospf 1 router-id 9.9.9.3area 0.0.0.0network 2.2.2.2 0.0.0.0network 9.9.9.3 0.0.0.0#ip unreachables enableip ttl-expires enable#lldp global enable#mpls lsr-id 9.9.9.3#mpls ldp#interface LoopBack0ip address 9.9.9.3 255.255.255.255#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 2.2.2.2 255.255.255.0mpls enablempls ldp enable#interface GigabitEthernet0/1port link-mode routecombo enable copperip binding vpn-instance 1ip address 192.168.2.1 255.255.255.0#interface GigabitEthernet0/2port link-mode routecombo enable copper#bgp 100peer 9.9.9.1 as-number 100peer 9.9.9.1 connect-interface LoopBack0#address-family vpnv4peer 9.9.9.1 enable#ip vpn-instance 1#address-family ipv4 unicastimport-route direct#2.2总部和分支出口R配置地址和默认路由可测试地址可达2.2.1 ZB-R地址和默认路由配置sysname ZB-R#ip unreachables enableip ttl-expires enable#lldp global enable#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 192.168.1.2 255.255.255.0#ip route-static 0.0.0.0 0 192.168.1.1#2.2.2 FZ-R地址和默认路由配置sysname FZ-R#ip unreachables enableip ttl-expires enable#lldp global enable#interface GigabitEthernet0/0port link-mode routecombo enable copperip address 192.168.2.2 255.255.255.0#ip route-static 0.0.0.0 0 192.168.2.1#2.2.3