H3C交换机MPLS配置
1、简介：
MPLS L2是基于MPLS的二层技术，将用户的二层数据封装成可以在IP或MPLS网络中传送的分组，通过IP路径或MPLS隧道转发，接收端解封装分组后恢复原来的二层数据，从而实现用户二层数据跨越MPLS或IP网络在不同站点间透明地传送。
2、基本概念：
CE（Customer Edge，用户网络边缘）设备是直接与服务提供商网络相连的用户网络侧设备。
PE（Provider Edge，服务提供商网络边缘）设备是与CE相连的服务提供商网络侧设备。PE主要负责VPN业务的接入，完成报文从用户网络到公网隧道、从公网隧道到用户网络的映射与转发。
AC（Attachment Circuit，接入电路）是连接CE和PE的物理电路或虚拟电路，例如ATM的VPI/VCI、Ethernet接口、VLAN、物理接口上的PPP连接。
PW（Pseudowire，伪线）是两个PE之间的虚拟双向连接。MPLS PW由一对方向相反的单向LSP构成。
3、网络拓扑：
实现CE1与CE2互通
4、配置：
4.1、将MPLS网络中设备配置ip和ospf协议：
[PE1]interface LoopBack 0
[PE1-LoopBack0]ip address 1.1.1.9 32
[PE1-LoopBack0]quit
[PE1]interface GigabitEthernet 0/2
[PE1-GigabitEthernet0/2]ip address 220.178.251.1 24
[PE1-GigabitEthernet0/2]quit
[PE1]ospf 1 router-id 1.1.1.9
[PE1-ospf-1]area 0
[PE1-ospf-1-area-0.0.0.0]network 1.1.1.9 0.0.0.0
[PE1-ospf-1-area-0.0.0.0]network 220.178.251.1 0.0.0.0
[PE1-ospf-1-area-0.0.0.0]quit
[PE1-ospf-1]quit
[P]interface LoopBack 0
[P-LoopBack0]ip address 2.2.2.9 32
[P-LoopBack0]quit
[P]interface GigabitEthernet 0/1
[P-GigabitEthernet0/1]ip address 220.178.251.2 24
[P-GigabitEthernet0/1]interface GigabitEthernet 0/2
[P-GigabitEthernet0/2]ip address 110.64.89.1 24
[P-GigabitEthernet0/2]quit
[P]ospf 1 router-id 2.2.2.9
[P-ospf-1]area 0
[P-ospf-1-area-0.0.0.0]network 2.2.2.9 0.0.0.0
[P-ospf-1-area-0.0.0.0]network 220.178.251.2 0.0.0.0
[P-ospf-1-area-0.0.0.0]network 110.64.89.1 0.0.0.0
[P-ospf-1-area-0.0.0.0]quit
[P-ospf-1]quit
[PE2]interface LoopBack 0
[PE2-LoopBack0]ip address 3.3.3.9 32
[PE2-LoopBack0]quit
[PE2]interface GigabitEthernet 0/2
[PE2-GigabitEthernet0/2]ip address 110.64.89.2 24
[PE2-GigabitEthernet0/2]quit
[PE2]ospf 1 router-id 3.3.3.9
[PE2-ospf-1]area 0
[PE2-ospf-1-area-0.0.0.0]network 3.3.3.9 0.0.0.0
[PE2-ospf-1-area-0.0.0.0]network 110.64.89.2 0.0.0.0
[PE2-ospf-1-area-0.0.0.0]quit
[PE2-ospf-1]quit
4.2、将MPLS网络中设备启动l2vpn、mpls和mpls ldp协议：
[PE1]l2vpn enable
[PE1]mpls lsr-id 1.1.1.9
[PE1]mpls ldp
[PE1-ldp]quit
[PE1]interface GigabitEthernet 0/2
[PE1-GigabitEthernet0/2]mpls enable
[PE1-GigabitEthernet0/2]mpls ldp enable
[PE1-GigabitEthernet0/2]quit
[P]l2vpn enable
[P]mpls lsr-id 2.2.2.9
[P]mpls ldp
[P-ldp]quit
[P]interface range GigabitEthernet 0/1 to GigabitEthernet 0/2
[P-if-range]mpls enable
[P-if-range]mpls ldp enable
[P-if-range]quit
[PE2]l2vpn enable
[PE2]mpls lsr-id 3.3.3.9
[PE2]mpls ldp
[PE2-ldp]quit
[PE2]interface GigabitEthernet 0/2
[PE2-GigabitEthernet0/2]mpls enable
[PE2-GigabitEthernet0/2]mpls ldp enable
[PE2-GigabitEthernet0/2]quit
[PE1]display mpls ldp lsp
Status Flags: * - stale, L - liberal, B - backup
FECs: 3 Ingress: 2 Transit: 2 Egress: 1
FEC In/Out Label Nexthop OutInterface
1.1.1.9/32 3/-
-/1151(L)
2.2.2.9/32 -/3 220.178.251.2 GE0/2
1151/3 220.178.251.2 GE0/2
3.3.3.9/32 -/1150 220.178.251.2 GE0/2
1150/1150 220.178.251.2 GE0/2
测试PE1与PE2是否可达：
[PE1]ping mpls -a 1.1.1.9 ipv4 3.3.3.9 32
MPLS ping FEC 3.3.3.9/32 with 100 bytes of data:
100 bytes from 110.64.89.2: Sequence=1 time=1 ms
100 bytes from 110.64.89.2: Sequence=2 time=2 ms
100 bytes from 110.64.89.2: Sequence=3 time=1 ms
100 bytes from 110.64.89.2: Sequence=4 time=1 ms
100 bytes from 110.64.89.2: Sequence=5 time=2 ms
--------------------------------------------------------------------------------
5、配置静态PW：
5.1、PE1与PE2创建交叉连接组l2vpn，在该交叉连接组内创建名称为vpnac的交叉连接，将接口GigabitEthernet0/1与此交叉连接关联，并在交叉连接内创建静态PW，以便将AC和PW关联。
[PE1]xconnect-group l2vpn
[PE1-xcg-l2vpn]connection vpnac
[PE1-xcg-l2vpn-vpnac]ac interface GigabitEthernet 0/1 #ac与接口关联
[PE1-xcg-l2vpn-vpnac]peer 3.3.3.9 pw-id 100 in-label 100 out-label 200 #出标签200，入标签100
[PE1-xcg-l2vpn-vpnac-3.3.3.9-100]quit
[PE1-xcg-l2vpn-vpnac]quit
[PE1-xcg-l2vpn]quit
[PE2]xconnect-group l2vpn
[PE2-xcg-l2vpn]connection vpnca
[PE2-xcg-l2vpn-vpnca]ac interface GigabitEthernet 0/1 #ac与接口关联
[PE2-xcg-l2vpn-vpnca]peer 1.1.1.9 pw-id 100 in-label 200 out-label 100 #出标签100，入标签200
[PE2-xcg-l2vpn-vpnca-1.1.1.9-100]quit
[PE2-xcg-l2vpn-vpnca]quit
[PE2-xcg-l2vpn]quit
[PE1]display l2vpn pw #查看静态PW信息
Flags: M - main, B - backup, BY - bypass, H - hub link, S - spoke link, N - no split horizon
Total number of PWs: 1
1 up, 0 blocked, 0 down, 0 defect, 0 idle, 0 duplicate
Xconnect-group Name: l2vpn
Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State
3.3.3.9 100 100/200 Static M 0 Up
[PE2]display l2vpn pw #查看静态PW信息
Flags: M - main, B - backup, BY - bypass, H - hub link, S - spoke link, N - no split horizon
Total number of PWs: 1
1 up, 0 blocked, 0 down, 0 defect, 0 idle, 0 duplicate
Xconnect-group Name: l2vpn
Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State
1.1.1.9 100 200/100 Static M 0 Up
完成以上步骤CE1与CE2配置好IP地址可互通。
6、配置LDP PW：
6.1、修改5.1配置的静态PW,配置LDP PW：
[PE1]xconnect-group l2vpn
[PE1-xcg-l2vpn]connection vpnac
[PE1-xcg-l2vpn-vpnac]undo peer 3.3.3.9 pw-id 100 #删除之前的静态PW
[PE1-xcg-l2vpn-vpnac]peer 3.3.3.9 pw-id 100
[PE1-xcg-l2vpn-vpnac]dis this
#
connection vpnac
ac interface GigabitEthernet0/1
peer 3.3.3.9 pw-id 100
#
return
[PE1-xcg-l2vpn-vpnac-3.3.3.9-100]quit
[PE1-xcg-l2vpn-vpnac]quit
[PE1-xcg-l2vpn]quit
[PE2]xconnect-group l2vpn
[PE2-xcg-l2vpn]connection vpnca
[PE2-xcg-l2vpn-vpnca]undo peer 1.1.1.9 pw-id 100 #删除之前的静态PW
[PE2-xcg-l2vpn-vpnca]peer 1.1.1.9 pw-id 100
[PE2-xcg-l2vpn-vpnca]dis this
#
connection vpnca
ac interface GigabitEthernet0/1
peer 1.1.1.9 pw-id 100
#
return
[PE2-xcg-l2vpn-vpnca-1.1.1.9-100]quit
[PE2-xcg-l2vpn-vpnca]quit
[PE2-xcg-l2vpn]quit
[PE1]display l2vpn pw #查看PW信息
Flags: M - main, B - backup, BY - bypass, H - hub link, S - spoke link, N - no split horizon
Total number of PWs: 1
1 up, 0 blocked, 0 down, 0 defect, 0 idle, 0 duplicate
Xconnect-group Name: l2vpn
Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State
3.3.3.9 100 917631/917631 LDP M 0 Up
[PE2]display l2vpn pw #查看PW信息
Flags: M - main, B - backup, BY - bypass, H - hub link, S - spoke link, N - no split horizon
Total number of PWs: 1
1 up, 0 blocked, 0 down, 0 defect, 0 idle, 0 duplicate
Xconnect-group Name: l2vpn
Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State
1.1.1.9 100 917631/917631 LDP M 0 Up
完成以上步骤CE1与CE2配置好IP地址可互通。
