MPLS L3VPN inter-AS option C wit

root@VMX1-PE1> show configuration | display set

set version 14.1R4.8

set system host-name VMX1-PE1

set system root-authentication encrypted-password "$1$araVeM1z$wOOT8EVR5OmIJz2Lma56g/"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 192.168.12.1/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 192.168.100.254/24

set interfaces lo0 unit 0 family inet address 10.0.255.1/32

set routing-options router-id 10.0.255.1

set routing-options autonomous-system 64512

set protocols mpls interface ge-0/0/0.0

set protocols bgp group TO-RR1 type internal

set protocols bgp group TO-RR1 local-address 10.0.255.1

set protocols bgp group TO-RR1 family inet labeled-unicast rib inet.3

set protocols bgp group TO-RR1 family inet-vpn unicast

set protocols bgp group TO-RR1 neighbor 11.11.11.11

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ldp interface ge-0/0/0.0

set policy-options policy-statement VPN-export term 1 then community add L3-VPN

set policy-options policy-statement VPN-export term 1 then accept

set policy-options policy-statement VPN-export term last then reject

set policy-options policy-statement VPN-import term 1 from protocol bgp

set policy-options policy-statement VPN-import term 1 from community L3-VPN

set policy-options policy-statement VPN-import term 1 then accept

set policy-options policy-statement VPN-import term last then reject

set policy-options community L3-VPN members target:1000:2000

set routing-instances CE-1 instance-type vrf

set routing-instances CE-1 interface ge-0/0/3.0

set routing-instances CE-1 route-distinguisher  64512:1

set routing-instances CE-1 vrf-import VPN-import

set routing-instances CE-1 vrf-export VPN-export

set routing-instances CE-1 vrf-table-label

set routing-instances CE-1 routing-options auto-export

set routing-instances CE-1 protocols bgp group TO-CE type external

set routing-instances CE-1 protocols bgp group TO-CE neighbor 192.168.100.1 peer-as 65001

root@VMX2> show configuration | display set

set version 14.1R4.8

set system host-name VMX2

set system root-authentication encrypted-password "$1$3OPgI4b1$4SWnhgUtGjKNivLzHaKhR0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 192.168.12.2/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/1 unit 0 family inet address 192.168.23.2/24

set interfaces ge-0/0/1 unit 0 family mpls

set interfaces ge-0/0/2 unit 0 family inet address 192.168.29.2/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 10.0.255.2/32

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface ge-0/0/1.0

set protocols mpls interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ospf area 0.0.0.0 interface ge-0/0/1.0

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ldp interface ge-0/0/0.0

set protocols ldp interface ge-0/0/1.0

set protocols ldp interface ge-0/0/2.0

root@VMX3> show configuration | display set

set version 14.1R4.8

set system host-name VMX3

set system root-authentication encrypted-password "$1$NbiKpA./$KlCKUSdMTUpliVBWBvEUW0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/1 unit 0 family inet address 192.168.23.3/24

set interfaces ge-0/0/1 unit 0 family mpls

set interfaces ge-0/0/2 unit 0 family inet address 192.168.34.3/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 192.168.39.3/24

set interfaces ge-0/0/3 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 10.0.255.3/32

set protocols mpls interface ge-0/0/1.0

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface ge-0/0/3.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/1.0

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface ge-0/0/3.0

set protocols ldp interface ge-0/0/1.0

set protocols ldp interface ge-0/0/2.0

set protocols ldp interface ge-0/0/3.0

root@VMX4> show configuration | display set

set version 14.1R4.8

set system host-name VMX4

set system root-authentication encrypted-password "$1$5Pj3s4A5$Tf6CzcIWHbBDkTiHOqf.P0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 192.168.45.4/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/2 unit 0 family inet address 192.168.34.4/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 10.0.255.4/32

set routing-options router-id 10.0.255.4

set routing-options autonomous-system 64512

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface ge-0/0/0.0

set protocols bgp group ASBR type external

set protocols bgp group ASBR family inet labeled-unicast rib inet.3

set protocols bgp group ASBR export export-pe1-rr1-lo0

set protocols bgp group ASBR neighbor 192.168.45.5 peer-as 64513

set protocols bgp group TO-RR1 type internal

set protocols bgp group TO-RR1 local-address 10.0.255.4

set protocols bgp group TO-RR1 family inet labeled-unicast rib inet.3

set protocols bgp group TO-RR1 export nhs

set protocols bgp group TO-RR1 neighbor 11.11.11.11

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ldp interface ge-0/0/2.0

set policy-options policy-statement export-pe1-rr1-lo0 term 1 from route-filter 10.0.255.1/32 exact

set policy-options policy-statement export-pe1-rr1-lo0 term 1 from route-filter 11.11.11.11/32 exact

set policy-options policy-statement export-pe1-rr1-lo0 term 1 then accept

set policy-options policy-statement export-pe1-rr1-lo0 term last then reject

set policy-options policy-statement nhs then next-hop self

root@VMX9-RR1> show configuration | display set

set version 14.1R4.8

set system host-name VMX9-RR1

set system root-authentication encrypted-password "$1$06zzpXHt$jBtfalrLy64HgQN84Y62Y0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/2 unit 0 family inet address 192.168.29.9/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 192.168.39.9/24

set interfaces ge-0/0/3 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 11.11.11.11/32

set routing-options rib-groups RR2-INTO-INET0 import-rib inet.3

set routing-options rib-groups RR2-INTO-INET0 import-rib inet.0

set routing-options rib-groups RR2-INTO-INET0 import-policy RR2-lo0

set routing-options router-id 11.11.11.11

set routing-options autonomous-system 64512

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface ge-0/0/3.0

set protocols bgp group IBGP type internal

set protocols bgp group IBGP local-address 11.11.11.11

set protocols bgp group IBGP family inet labeled-unicast rib-group RR2-INTO-INET0

set protocols bgp group IBGP family inet labeled-unicast rib inet.3

set protocols bgp group IBGP family inet-vpn unicast

set protocols bgp group IBGP cluster 11.11.11.11

set protocols bgp group IBGP neighbor 10.0.255.1

set protocols bgp group IBGP neighbor 10.0.255.4

set protocols bgp group TO-ASBR type external

set protocols bgp group TO-ASBR multihop ttl 32

set protocols bgp group TO-ASBR multihop no-nexthop-change

set protocols bgp group TO-ASBR local-address 11.11.11.11

set protocols bgp group TO-ASBR family inet-vpn unicast

set protocols bgp group TO-ASBR peer-as 64513

set protocols bgp group TO-ASBR neighbor 22.22.22.22

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface ge-0/0/3.0

set protocols ldp interface ge-0/0/2.0

set protocols ldp interface ge-0/0/3.0

set policy-options policy-statement RR2-lo0 term 1 from route-filter 22.22.22.22/32 exact

set policy-options policy-statement RR2-lo0 term 1 then accept

set policy-options policy-statement RR2-lo0 term last then reject

root@VMX5> show configuration | display set

set version 14.1R4.8

set system host-name VMX5

set system root-authentication encrypted-password "$1$24xEGnd0$4ag5jjmjC/T70rwkYtu8u0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 192.168.45.5/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/2 unit 0 family inet address 192.168.56.5/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 10.0.255.5/32

set routing-options router-id 10.0.255.5

set routing-options autonomous-system 64513

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface ge-0/0/0.0

set protocols bgp group ASBR type external

set protocols bgp group ASBR family inet labeled-unicast rib inet.3

set protocols bgp group ASBR export export-pe2-rr2-lo0

set protocols bgp group ASBR neighbor 192.168.45.4 peer-as 64512

set protocols bgp group TO-RR2 type internal

set protocols bgp group TO-RR2 local-address 10.0.255.5

set protocols bgp group TO-RR2 family inet labeled-unicast rib inet.3

set protocols bgp group TO-RR2 export nhs

set protocols bgp group TO-RR2 neighbor 22.22.22.22

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ldp interface ge-0/0/2.0

set policy-options policy-statement export-pe2-rr2-lo0 term 1 from route-filter 10.0.255.8/32 exact

set policy-options policy-statement export-pe2-rr2-lo0 term 1 from route-filter 22.22.22.22/32 exact

set policy-options policy-statement export-pe2-rr2-lo0 term 1 then accept

set policy-options policy-statement export-pe2-rr2-lo0 term last then reject

set policy-options policy-statement nhs then next-hop self

root@VMX6> show configuration | display set

set version 14.1R4.8

set system host-name VMX6

set system root-authentication encrypted-password "$1$ghWiBpr3$UrqEIjNBbvYy7LY6MFqr3/"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/1 unit 0 family inet address 192.168.67.6/24

set interfaces ge-0/0/1 unit 0 family mpls

set interfaces ge-0/0/2 unit 0 family inet address 192.168.56.6/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 172.16.26.6/24

set interfaces ge-0/0/3 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 10.0.255.6/32

set routing-options router-id 10.0.255.6

set protocols mpls interface ge-0/0/1.0

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface ge-0/0/3.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/1.0

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface ge-0/0/3.0

set protocols ldp interface ge-0/0/1.0

set protocols ldp interface ge-0/0/2.0

set protocols ldp interface ge-0/0/3.0

root@VMX7> show configuration | display set

set version 14.1R4.8

set system host-name VMX7

set system root-authentication encrypted-password "$1$uopjp8De$uNz8phlpDEczPicfEga7j1"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 192.168.78.7/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/1 unit 0 family inet address 192.168.67.7/24

set interfaces ge-0/0/1 unit 0 family mpls

set interfaces ge-0/0/2 unit 0 family inet address 172.16.27.7/24

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces lo0 unit 0 family inet address 10.0.255.7/32

set routing-options router-id 10.0.255.7

set protocols mpls interface ge-0/0/0.0

set protocols mpls interface ge-0/0/1.0

set protocols mpls interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/1.0

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ldp interface ge-0/0/0.0

set protocols ldp interface ge-0/0/1.0

set protocols ldp interface ge-0/0/2.0

root@VMX8-PE2> show configuration | display set

set version 14.1R4.8

set system host-name VMX8-PE2

set system root-authentication encrypted-password "$1$Rk4ApGRF$3sCZlOGvHJ79GyJN/1SzJ0"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/0 unit 0 family inet address 192.168.78.8/24

set interfaces ge-0/0/0 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 192.168.200.254/24

set interfaces lo0 unit 0 family inet address 10.0.255.8/32

set routing-options router-id 10.0.255.8

set routing-options autonomous-system 64513

set protocols mpls interface ge-0/0/0.0

set protocols bgp group TO-RR2 type internal

set protocols bgp group TO-RR2 local-address 10.0.255.8

set protocols bgp group TO-RR2 family inet labeled-unicast rib inet.3

set protocols bgp group TO-RR2 family inet-vpn unicast

set protocols bgp group TO-RR2 neighbor 22.22.22.22

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

set protocols ldp interface ge-0/0/0.0

set policy-options policy-statement VPN-export term 1 then community add L3-VPN

set policy-options policy-statement VPN-export term 1 then accept

set policy-options policy-statement VPN-export term last then reject

set policy-options policy-statement VPN-import term 1 from protocol bgp

set policy-options policy-statement VPN-import term 1 from community L3-VPN

set policy-options policy-statement VPN-import term 1 then accept

set policy-options policy-statement VPN-import term last then reject

set policy-options community L3-VPN members target:1000:2000

set routing-instances CE-2 instance-type vrf

set routing-instances CE-2 interface ge-0/0/3.0

set routing-instances CE-2 route-distinguisher 64513:1

set routing-instances CE-2 vrf-import VPN-import

set routing-instances CE-2 vrf-export VPN-export

set routing-instances CE-2 vrf-table-label

set routing-instances CE-2 routing-options auto-export

set routing-instances CE-2 protocols bgp group TO-CE type external

set routing-instances CE-2 protocols bgp group TO-CE neighbor 192.168.200.1 peer-as 65002

root@VMX11-CE1> show configuration | display set

set version 14.1R4.8

set system host-name VMX11-CE1

set system root-authentication encrypted-password "$1$xImI/dJx$hCUa5BI5bIruv15W.uLol."

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/3 unit 0 family inet address 192.168.100.1/24

set interfaces lo0 unit 0 family inet address 10.1.255.1/32

set routing-options router-id 10.1.255.1

set routing-options autonomous-system 65001

set protocols bgp group TO-PE1 type external

set protocols bgp group TO-PE1 export export-lo0

set protocols bgp group TO-PE1 neighbor 192.168.100.254 peer-as 64512

set policy-options policy-statement export-lo0 term 1 from interface lo0.0

set policy-options policy-statement export-lo0 term 1 then accept

set policy-options policy-statement export-lo0 term last then reject

root@VMX12-CE2> show configuration | display set

set version 14.1R4.8

set system host-name VMX12-CE2

set system root-authentication encrypted-password "$1$/ZQdD.Cy$r5m8cQuvmiUZrnCavtGon."

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set interfaces ge-0/0/3 unit 0 family inet address 192.168.200.1/24

set interfaces lo0 unit 0 family inet address 10.1.255.2/32

set routing-options router-id 10.1.255.2

set routing-options autonomous-system 65002

set protocols bgp group TO-PE2 type external

set protocols bgp group TO-PE2 export export-lo0

set protocols bgp group TO-PE2 neighbor 192.168.200.254 peer-as 64513

set protocols ospf area 0.0.0.0 interface lo0.0 passive

set protocols ospf area 0.0.0.0 interface ge-0/0/3.0

set policy-options policy-statement export-lo0 term 1 from interface lo0.0

set policy-options policy-statement export-lo0 term 1 then accept

set policy-options policy-statement export-lo0 term last then reject

验证:

root@VMX11-CE1> ping source 10.1.255.1 10.1.255.2 rapid count 4

PING 10.1.255.2 (10.1.255.2): 56 data bytes

!!!!

--- 10.1.255.2 ping statistics ---

4 packets transmitted, 4 packets received, 0% packet loss

round-trip min/avg/max/stddev = 13.530/14.883/17.789/1.721 ms

root@VMX1-PE1> show route table CE-1.inet.0 10.1.255.2 extensive

(注意Label operation: Push 16, Push 299872, Push 299808(top)，分别为VPN标签,BGP-LU标签,LDP标签)

CE-1.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)

10.1.255.2/32 (1 entry, 1 announced)

TSI:

Page 0 idx 1, (group TO-CE type External) Type 1 val 0x95c2a54 (adv_entry)

  Advertised metrics:

    Nexthop: Self

    AS path: [64512] 64513 65002 I

    Communities: target:1000:2000

Path 10.1.255.2 from 11.11.11.11 Vector len 4.  Val: 1

KRT in-kernel 10.1.255.2/32 -> {indirect(1048574)}

        *BGP    Preference: 170/-101

                Route Distinguisher: 1000:2000

                Next hop type: Indirect

                Address: 0x969535c

                Next-hop reference count: 6

                Source: 11.11.11.11

                Next hop type: Router, Next hop index: 557

                Next hop: 192.168.12.2 via ge-0/0/0.0, selected

                Label operation: Push 16, Push 299872, Push 299808(top)

                Label TTL action: prop-ttl, prop-ttl, prop-ttl(top)

                Load balance label: Label 16: None; Label 299872: None; Label 299808: None;

                Session Id: 0x140

                Protocol next hop: 10.0.255.8

                Label operation: Push 16

                Label TTL action: prop-ttl

                Load balance label: Label 16: None;

                Indirect next hop: 0x964c440 1048574 INH Session ID: 0x142

                State: <Secondary Active Int Ext ProtectionCand>

                Local AS: 64512 Peer AS: 64512

                Age: 16:40      Metric2: 1

                Validation State: unverified

                Task: BGP_64512.11.11.11.11+179

                Announcement bits (2): 0-BGP_RT_Background 1-KRT

                AS path: 64513 65002 I

                Communities: target:1000:2000

                Import Accepted

                VPN Label: 16

                Localpref: 100

                Router ID: 11.11.11.11

                Primary Routing Table bgp.l3vpn.0

                Indirect next hops: 1

                        Protocol next hop: 10.0.255.8 Metric: 1

                        Label operation: Push 16

                        Label TTL action: prop-ttl

                        Load balance label: Label 16: None;

                        Indirect next hop: 0x964c440 1048574 INH Session ID: 0x142

                        Indirect path forwarding next hops: 1

                                Next hop type: Router

                                Next hop: 192.168.12.2 via ge-0/0/0.0

                                Session Id: 0x140

                        10.0.255.8/32 Originating RIB: inet.3

                          Metric: 1                      Node path count: 1

                          Indirect nexthops: 1

                                Protocol Nexthop: 10.0.255.4 Metric: 1 Push 299872

                                Indirect nexthop: 0x964c220 - INH Session ID: 0x0                              Indirect path forwarding nexthops: 1

                                        Nexthop: 192.168.12.2 via ge-0/0/0.0

root@VMX1-PE1>show route receive-protocol bgp 11.11.11.11 10.1.255.2 extensive

CE-1.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)

* 10.1.255.2/32 (1 entry, 1 announced)

    Import Accepted

    Route Distinguisher: 1000:2000

    VPN Label: 16

    Nexthop: 10.0.255.8

    Localpref: 100

    AS path: 64513 65002 I

    Communities: target:1000:2000

root@VMX1-PE1> show route receive-protocol bgp 11.11.11.11 10.0.255.8 extensive

inet.3: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)

* 10.0.255.8/32 (1 entry, 1 announced)

    Accepted

    Route Label: 299872

    Nexthop: 10.0.255.4

    MED: 1

    Localpref: 100

    AS path: 64513 I (Originator)

    Cluster list:  11.11.11.11

    Originator ID: 10.0.255.4

root@VMX1-PE1> show ldp database

Input label database, 10.0.255.1:0--10.0.255.2:0

  Label    Prefix

299776      10.0.255.1/32

      3      10.0.255.2/32

299792      10.0.255.3/32

299808      10.0.255.4/32

299824      11.11.11.11/32

Output label database, 10.0.255.1:0--10.0.255.2:0

  Label    Prefix

      3      10.0.255.1/32

299776      10.0.255.2/32

299792      10.0.255.3/32

299808      10.0.255.4/32

299824      11.11.11.11/32