实践gobgp作为mpls l3vpn的vpnv4反射器

Linux-PE-RR

os:ubuntu-17.10

zebra的ospfd用于Lo(5.5.5.5)和其他PE的Lo可达

gobgp用于Lo和其他PE的Lo建立MP-IBGP邻居

root@ubuntu:~# cat /etc/apt/sources.list

deb http://mirrors.163.com/ubuntu/ artful main restricted universe multiverse

deb http://mirrors.163.com/ubuntu/ artful-security main restricted universe multiverse

deb http://mirrors.163.com/ubuntu/ artful-updates main restricted universe multiverse

deb http://mirrors.163.com/ubuntu/ artful-proposed main restricted universe multiverse

deb http://mirrors.163.com/ubuntu/ artful-backports main restricted universe multiverse

root@ubuntu:~# apt update

root@ubuntu:~# apt install gobgpd  -y

root@ubuntu:~# apt install quagga -y

root@ubuntu:~# touch /etc/quagga/ospfd.conf

root@ubuntu:~# touch /etc/quagga/zebra.conf

root@ubuntu:~# chown quagga.quagga /etc/quagga/*.conf

root@ubuntu:~# cat /etc/quagga/ospfd.conf

router ospf

ospf router-id 5.5.5.5

network 5.5.5.5/32 area 0.0.0.0

network 10.0.5.0/24 area 0.0.0.0

root@ubuntu:~# ip add li ens4 | grep inet

inet 10.0.5.1/24 scope global ens4

root@ubuntu:~# ip add li lo | grep inet

inet 127.0.0.1/8 scope host lo

inet 5.5.5.5/32 scope global lo

编辑gobgpd.conf配置文件

root@ubuntu:~# cat /etc/gobgp/gobgpd.conf

[global]

[global.config]

as = 65000

router-id = "5.5.5.5"

[[neighbors]]

[neighbors.config]

neighbor-address = "1.1.1.1"

peer-as = 65000

[neighbors.route-reflector.config]

route-reflector-client = true

route-reflector-cluster-id = "5.5.5.5"

[[neighbors.afi-safis]]

[neighbors.afi-safis.config]

afi-safi-name = "l3vpn-ipv4-unicast"

[[neighbors]]

[neighbors.config]

neighbor-address = "2.2.2.2"

peer-as = 65000

[neighbors.route-reflector.config]

route-reflector-client = true

route-reflector-cluster-id = "5.5.5.5"

[[neighbors.afi-safis]]

[neighbors.afi-safis.config]

afi-safi-name = "l3vpn-ipv4-unicast"

[[neighbors]]

[neighbors.config]

neighbor-address = "3.3.3.3"

peer-as = 65000

[neighbors.route-reflector.config]

route-reflector-client = true

route-reflector-cluster-id = "5.5.5.5"

[[neighbors.afi-safis]]

[neighbors.afi-safis.config]

afi-safi-name = "l3vpn-ipv4-unicast"

[[neighbors]]

[neighbors.config]

neighbor-address = "4.4.4.4"

peer-as = 65000

[neighbors.route-reflector.config]

route-reflector-client = true

route-reflector-cluster-id = "5.5.5.5"

[[neighbors.afi-safis]]

[neighbors.afi-safis.config]

afi-safi-name = "l3vpn-ipv4-unicast"

启动ospfd和gobgpd

root@ubuntu:~# gobgpd -f /etc/gobgp/gobgpd.conf &

root@ubuntu:~# systemctl start ospfd

root@ubuntu:~# systemctl  start zebra

#########VMX-P的配置###############

set version 14.1R4.8

set system root-authentication encrypted-password "$1$gQsE5emV$YKl79HDHgraX5dofhGZj8."

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 10.0.1.254/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/1 unit 0 family inet address 10.0.2.254/24

set interfaces ge-0/0/1 unit 0 family mpls

set interfaces ge-0/0/2 unit 0 family inet address 10.0.3.254/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 10.0.4.254/24

set interfaces ge-0/0/3 unit 0 family mpls

set interfaces ge-0/0/4 unit 0 family inet address 10.0.5.254/24

set interfaces ge-0/0/4 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 10.10.10.10/32

set routing-options router-id 10.10.10.10

set protocols mpls interface ge-0/0/0.0

set protocols mpls interface ge-0/0/1.0

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface ge-0/0/3.0

set protocols mpls interface ge-0/0/4.0

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface ge-0/0/1.0

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface ge-0/0/3.0

set protocols ospf area 0.0.0.0 interface ge-0/0/4.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ldp interface ge-0/0/0.0

set protocols ldp interface ge-0/0/1.0

set protocols ldp interface ge-0/0/2.0

set protocols ldp interface ge-0/0/3.0

set protocols ldp interface ge-0/0/4.0

#######VMX-PE1的配置######################

set version 14.1R4.8

set system host-name VMX-PE1

set system root-authentication encrypted-password "$1$PDALzLQM$7sa4xnKY/CG9Z4gGDRooI0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 10.0.1.1/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/1 unit 0 family inet address 192.168.1.254/24

set interfaces lo0 unit 0 family inet address 1.1.1.1/32

set routing-options router-id 1.1.1.1

set routing-options autonomous-system 65000

set protocols mpls interface ge-0/0/0.0

set protocols bgp group PE-PE type internal

set protocols bgp group PE-PE local-address 1.1.1.1

set protocols bgp group PE-PE family inet-vpn unicast

set protocols bgp group PE-PE neighbor 5.5.5.5

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ldp interface ge-0/0/0.0

set routing-instances VRF1 instance-type vrf

set routing-instances VRF1 interface ge-0/0/1.0

set routing-instances VRF1 route-distinguisher 1.1.1.1:1

set routing-instances VRF1 vrf-target target:65000:1

set routing-instances VRF1 protocols bgp group PE-CE type external

set routing-instances VRF1 protocols bgp group PE-CE local-address 192.168.1.254

set routing-instances VRF1 protocols bgp group PE-CE neighbor 192.168.1.1 peer-as 65001

########VMX-PE2的配置#####################

set version 14.1R4.8

set system host-name VMX-PE2

set system root-authentication encrypted-password "$1$CT8eKT4/$6KoQkGBVblWjaXduDGCTO0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 10.0.2.1/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/1 unit 0 family inet address 192.168.2.254/24

set interfaces lo0 unit 0 family inet address 2.2.2.2/32

set routing-options router-id 2.2.2.2

set routing-options autonomous-system 65000

set protocols mpls interface ge-0/0/0.0

set protocols bgp group PE-PE type internal

set protocols bgp group PE-PE local-address 2.2.2.2

set protocols bgp group PE-PE family inet-vpn unicast

set protocols bgp group PE-PE neighbor 5.5.5.5

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ldp interface ge-0/0/0.0

set routing-instances VRF1 instance-type vrf

set routing-instances VRF1 interface ge-0/0/1.0

set routing-instances VRF1 route-distinguisher 2.2.2.2:1

set routing-instances VRF1 vrf-target target:65000:1

set routing-instances VRF1 protocols bgp group PE-CE type external

set routing-instances VRF1 protocols bgp group PE-CE local-address 192.168.2.254

set routing-instances VRF1 protocols bgp group PE-CE neighbor 192.168.2.1 peer-as 65002

##############VMX-PE3的配置################

set version 14.1R4.8

set system host-name VMX-PE3

set system root-authentication encrypted-password "$1$ci.Wd2VV$Mi.R0/P7Sa3JcJkrm2Vuv0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 10.0.3.1/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/1 unit 0 family inet address 192.168.3.254/24

set interfaces lo0 unit 0 family inet address 3.3.3.3/32

set routing-options router-id 3.3.3.3

set routing-options autonomous-system 65000

set protocols mpls interface ge-0/0/0.0

set protocols bgp group PE-PE type internal

set protocols bgp group PE-PE local-address 3.3.3.3

set protocols bgp group PE-PE family inet-vpn unicast

set protocols bgp group PE-PE neighbor 5.5.5.5

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ldp interface ge-0/0/0.0

set routing-instances VRF1 instance-type vrf

set routing-instances VRF1 interface ge-0/0/1.0

set routing-instances VRF1 route-distinguisher 3.3.3.3:1

set routing-instances VRF1 vrf-target target:65000:1

set routing-instances VRF1 protocols bgp group PE-CE type external

set routing-instances VRF1 protocols bgp group PE-CE local-address 192.168.3.254

set routing-instances VRF1 protocols bgp group PE-CE neighbor 192.168.3.1 peer-as 65003

#############VMX-PE4的配置#################

set version 14.1R4.8

set system host-name VMX-PE4

set system root-authentication encrypted-password "$1$TuNrotp/$/3NLB7HAPp2qTksnJAHTy0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 10.0.4.1/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/1 unit 0 family inet address 192.168.4.254/24

set interfaces lo0 unit 0 family inet address 4.4.4.4/32

set routing-options router-id 4.4.4.4

set routing-options autonomous-system 65000

set protocols mpls interface ge-0/0/0.0

set protocols bgp group PE-PE type internal

set protocols bgp group PE-PE local-address 4.4.4.4

set protocols bgp group PE-PE family inet-vpn unicast

set protocols bgp group PE-PE neighbor 5.5.5.5

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ldp interface ge-0/0/0.0

set routing-instances VRF1 instance-type vrf

set routing-instances VRF1 interface ge-0/0/1.0

set routing-instances VRF1 route-distinguisher 4.4.4.4:1

set routing-instances VRF1 vrf-target target:65000:1

set routing-instances VRF1 protocols bgp group PE-CE type external

set routing-instances VRF1 protocols bgp group PE-CE local-address 192.168.4.254

set routing-instances VRF1 protocols bgp group PE-CE neighbor 192.168.4.1 peer-as 65004

###########VMX-CE1####################

set version 14.1R4.8

set system host-name VMX-CE1

set system root-authentication encrypted-password "$1$1006jy5.$8/66Q0JBoXlGtAktmGNka1"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/1 unit 0 family inet address 192.168.1.1/24

set interfaces lo0 unit 0 family inet address 11.11.11.11/32

set routing-options router-id 11.11.11.11

set routing-options autonomous-system 65001

set protocols bgp group CE-PE type external

set protocols bgp group CE-PE local-address 192.168.1.1

set protocols bgp group CE-PE export POLICY_EXPORT_LO0

set protocols bgp group CE-PE neighbor 192.168.1.254 peer-as 65000

set policy-options policy-statement POLICY_EXPORT_LO0 from family inet

set policy-options policy-statement POLICY_EXPORT_LO0 from protocol direct

set policy-options policy-statement POLICY_EXPORT_LO0 from route-filter 0.0.0.0/0 prefix-length-range /32-/32

set policy-options policy-statement POLICY_EXPORT_LO0 then accept

##########VMX-CE2###########################

set version 14.1R4.8

set system host-name VMX-CE2

set system root-authentication encrypted-password "$1$0qSqG.Fl$qU3qxR7eosVTyj65jNxVV1"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/1 unit 0 family inet address 192.168.2.1/24

set interfaces lo0 unit 0 family inet address 22.22.22.22/32

set routing-options router-id 22.22.22.22

set routing-options autonomous-system 65002

set protocols bgp group CE-PE type external

set protocols bgp group CE-PE local-address 192.168.2.1

set protocols bgp group CE-PE export POLICY_EXPORT_LO0

set protocols bgp group CE-PE neighbor 192.168.2.254 peer-as 65000

set policy-options policy-statement POLICY_EXPORT_LO0 from family inet

set policy-options policy-statement POLICY_EXPORT_LO0 from protocol direct

set policy-options policy-statement POLICY_EXPORT_LO0 from route-filter 0.0.0.0/0 prefix-length-range /32-/32

set policy-options policy-statement POLICY_EXPORT_LO0 then accept

###########VMX-CE3#################

set version 14.1R4.8

set system host-name VMX-CE3

set system root-authentication encrypted-password "$1$X1Ybl/Jd$eC4M5uKC6Num6F2vb/EP1."

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/1 unit 0 family inet address 192.168.3.1/24

set interfaces lo0 unit 0 family inet address 33.33.33.33/32

set routing-options router-id 33.33.33.33

set routing-options autonomous-system 65003

set protocols bgp group CE-PE type external

set protocols bgp group CE-PE local-address 192.168.3.1

set protocols bgp group CE-PE export POLICY_EXPORT_LO0

set protocols bgp group CE-PE neighbor 192.168.3.254 peer-as 65000

set policy-options policy-statement POLICY_EXPORT_LO0 from family inet

set policy-options policy-statement POLICY_EXPORT_LO0 from protocol direct

set policy-options policy-statement POLICY_EXPORT_LO0 from route-filter 0.0.0.0/0 prefix-length-range /32-/32

set policy-options policy-statement POLICY_EXPORT_LO0 then accept

################VMX-CE4############################

set version 14.1R4.8

set system host-name VMX-CE4

set system root-authentication encrypted-password "$1$l/p/KeA6$CQ6qWqkWaM7P2MbUGN4RI0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/1 unit 0 family inet address 192.168.4.1/24

set interfaces lo0 unit 0 family inet address 44.44.44.44/32

set routing-options router-id 44.44.44.44

set routing-options autonomous-system 65004

set protocols bgp group CE-PE type external

set protocols bgp group CE-PE local-address 192.168.4.1

set protocols bgp group CE-PE export POLICY_EXPORT_LO0

set protocols bgp group CE-PE neighbor 192.168.4.254 peer-as 65000

set policy-options policy-statement POLICY_EXPORT_LO0 from family inet

set policy-options policy-statement POLICY_EXPORT_LO0 from protocol direct

set policy-options policy-statement POLICY_EXPORT_LO0 from route-filter 0.0.0.0/0 prefix-length-range /32-/32

set policy-options policy-statement POLICY_EXPORT_LO0 then accept

验证

root@VMX-CE1> show bgp neighbor 192.168.1.254 | match State

Type: External    State: Established    Flags:

Last State: OpenConfirm  Last Event: RecvKeepAlive

RIB State: BGP restart is complete

Send state: in sync

学习到了22.22.22.22,33.33.33.33,44.44.44.44路由

root@VMX-CE1> show route protocol bgp

inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

22.22.22.22/32    *[BGP/170] 00:20:12, localpref 100

AS path: 65000 65002 I, validation-state: unverified

> to 192.168.1.254 via ge-0/0/1.0

33.33.33.33/32    *[BGP/170] 00:23:56, localpref 100

AS path: 65000 65003 I, validation-state: unverified

> to 192.168.1.254 via ge-0/0/1.0

44.44.44.44/32    *[BGP/170] 00:23:43, localpref 100

AS path: 65000 65004 I, validation-state: unverified

> to 192.168.1.254 via ge-0/0/1.0

192.168.2.0/24    *[BGP/170] 00:20:12, localpref 100

AS path: 65000 I, validation-state: unverified

> to 192.168.1.254 via ge-0/0/1.0

192.168.3.0/24    *[BGP/170] 00:23:56, localpref 100

AS path: 65000 I, validation-state: unverified

> to 192.168.1.254 via ge-0/0/1.0

192.168.4.0/24    *[BGP/170] 00:23:43, localpref 100

AS path: 65000 I, validation-state: unverified

> to 192.168.1.254 via ge-0/0/1.0

root@ubuntu:~# gobgp nei

Peer      AS  Up/Down State      |#Received  Accepted

1.1.1.1 65000 00:26:29 Establ      |        2        2

2.2.2.2 65000 00:22:45 Establ      |        2        2

3.3.3.3 65000 00:26:54 Establ      |        2        2

4.4.4.4 65000 00:26:15 Establ      |        2        2

root@VMX-CE1> ping source 11.11.11.11 22.22.22.22

PING 22.22.22.22 (22.22.22.22): 56 data bytes

64 bytes from 22.22.22.22: icmp_seq=0 ttl=61 time=7.720 ms

64 bytes from 22.22.22.22: icmp_seq=1 ttl=61 time=5.759 ms

64 bytes from 22.22.22.22: icmp_seq=2 ttl=61 time=8.294 ms

双层标签截获的包

VPNV4的基础学习请参考

http://blog.sina.com.cn/s/blog_3e15c5360101bovk.html