Waddo maqan oo VRF ku jirta: maxalli, VPNv4 mise shaxda gudbinta?
Horgale ka maqan VRF, ka maqan VPNv4 oo aan CEF lagu rakibin waa saddex ciladood oo kala duwan. Akhri shaxaha si taxane ah ka hor intaadan beddelin bartilmaameedyada waddada.
Macmiil wuxuu leeyahay horgale ayaa lumay ka dib isbeddel ku yimid bartilmaameedka waddada, sawirka shaashadda ugu horeeya ee ay diraanna waa shaxda khaldan. Saddex shax oo kala duwan ayaa ka jawaabaya saddex su'aalood oo kala duwan: horgalahu VRF gudaheedii ma ku jiraa, ma lagu dhawaaqay oo loo soo dhoofiyay sidii waddo VPNv4, iyo in si dhab ah loo rakibay gelinta gudbinta. Si ka baxsan taxanaha loo akhriyo waxay keenaysaa go'aanno kalsooni leh oo khaldan. Buuggan hagidda wuxuu hal horgale maxalli ah iyo mid fog ka sii marayaa saddexda shax si taxane ah, wuxuuna ku dhammaanayaa qorshe dib-u-celin ah isbeddelka RT ee bilaabay.
Magaca horgalaha iyo shaxda uu ka tirsan yahay
Qor laba horgale ka hor intaadan wax qorin. Mid waa maxalli goobta macmiilka, laga bartay is-dhexgal ku xiran ama ogeysiis CE. Kan kalena waa fog, waxaana la filayaa inuu ka yimaado laf-dhabarta bixiyaha. Waxay ku galaan isla VRF waddooyin kala duwan, cilad ku jirta midna wax kama sheegto kan kale.
| Table | Question it answers | Command |
|---|---|---|
show ip vrf CUST-A | Which RTs are attached for import and export | Read the RT lists before anything else |
show ip route vrf CUST-A | Is the prefix present in this VRF at all | Local and imported routes both appear |
show ip bgp vpnv4 all | Was the NLRI advertised and retained | Keyed by route distinguisher |
show ip cef vrf CUST-A | Was a forwarding entry installed | Proves a usable path, not just a BGP entry |
Kala soocidda labada aqoonsi si cad u hay, waayo inta badan jahwareerka tigidhadan ayaa halkaas ka yimaada. Kala-soocaha waddadu waa qayb ka mid ah NLRI ee VPNv4 wuxuuna u jiraa in horgalada macmiilka ee haddii kale isku mid ah ay u gaar noqdaan laf-dhabarta oo dhan. Bartilmaameedka waddadu waa bulsho la fidiyay oo loo qaado sifo ahaan, waana isaga ay siyaasadda soo-dhoofinta iyo dhoofintu la jaanqaaddo. Ma aha magac labaad oo kala-soocaha lamana qaado baakadaha macmiilka.
Tallaabo 1: caddee in horgalahu VRF ku jiro
Ka bilow aragtida maxalliga ah, ka dibna RT-yada xakameeya soo-dhoofinta. Haddii horgalaha maxalliga ah halkan ka maqan yahay, wax ka sarreeya ma noqon karo eedeed:
show ip route vrf CUST-A 172.21.4.0 255.255.255.0
show ip route vrf CUST-A | include 172.21.4.0
show ip vrf CUST-AHorgale u muuqda mid ku xiran ama taagan waa mid maxalli ahaan la bartay, jiritaankiisuna wax kama sheegto haddii la dhoofiyay iyo haddii kale. Tani waa akhris-qaladka ugu badan ee hawshan: shax VRF caafimaad qabta waa caddayn ku saabsan barashada maxalliga oo keliya. Dhinaca dhoofintu waa su'aal gooni ah, oo ay ka jawaabaan aragtida deriska iyo bartilmaameedka dhoofinta ee ku lifaaqan.
Hubi liisaska RT ee VRF intaad halkan joogto. Haddii bartilmaameedka soo-dhoofinta ee loogu talagalay aanu ku jirin liiska, waxa hoose oo dhan waa mid aan khusayn. Haddii uu ku jiro laakiinse ka duwan yahay waxa PE fog dhoofiyo, waxaad heshay ciladda adigoon furin hal qabasho baakad.
Tallaabo 2: akhri shaxda VPNv4 iyo bartilmaameedyadeeda
Shaxda VPNv4 waxay tusinaysaa waxa goobta xakamaynta si dhab ah isweydaarsatay. Raadi horgalaha fog hoosta kala-soocaha saxda ah, ka dibna eeg bulshooyinka ku xiran:
show ip bgp vpnv4 all 10.60.9.0/24
show ip bgp vpnv4 all | include 10.60.9.0
show ip bgp vpnv4 vrf CUST-A neighbors 192.0.2.17 advertised-routesGelinta leh bartilmaameedka waddada saxda ah laakiin aan lahayn rakibid maxalli ah waxay tilmaamaysaa siyaasadda soo-dhoofinta ama xulashada waddada, ma aha gaarista. Gelinta aan marnaba ka muuqan shaxda VPNv4 waxay tilmaamaysaa kor: laga yaabaa in PE asalka ahi aanu dhoofin, ama kulanku ma qaado qoyska ciwaannada.
Waxaa jira xaalad saddexaad oo dadka khiyaanaysa inta lagu jiro isbeddellada. Qaar ka mid ah madaladu waxay xaddidaan waddooyinka VPN ee ay codsadaan ama hayaan, iyagoo isticmaalaya macluumaadka xubinnimada bartilmaameedyada waddada, sidaas darteed maqnaanshaha NLRI fog ee hal aragti la shaandheeyay ma aha caddayn in ogeysiisku meelna ka maqan yahay. Hubi shaxda aan la shaandhayn iyo waddooyinka lagu dhawaaqay ee deriska ka hor intaadan soo gabagabeyn in waddo si caalami ah loo laalay.
Tallaabo 3: xaqiiji in wax la rakibay oo sumad la saaray
Gelinta BGP waa go'aan, ma aha waddo. Shaxaha gudbintu waxay sheegaan in baakaduhu leeyihiin meel ay aadaan:
show ip cef vrf CUST-A 10.60.9.0/24
show mpls forwarding-table vrf CUST-A | include 10.60.9.0
show ip bgp vpnv4 vrf CUST-AGelinta CEF oo leh derisnimo la xalliyay iyo sumad baxaysa waxay ka dhigan tahay in taraafikada goobta xogtu ay tahay inay shaqeyso, calaamad kasta oo hadhana waxay ka tirsan tahay barnaamijka ama shaandhaynta gudaha VRF. Gelinta CEF oo muujinaysa tallaabo xigta oo aan la xallin waxay ka dhigan tahay in waddada sumaddu aanay buuxnaan inkastoo BGP uu caafimaad qabo, waana isla xaaladdaas markii sawirka shaxda BGP uu khiyaaneeyay dib-u-eegista isbeddelka.
Isbarbardhig sumadda PE maxalligu soo rogo tan PE foggu filayo inuu helo. Isku-dhacsanaan la'aanta labada aragti waa dhibaato qoondaynta sumadaha ama kulan, mana lagu hagaajin doono beddelka bartilmaameedyada waddada, inta jeer ee aad sameyso.
Dib u celi isbeddelka RT oo leh baaxad la caddeeyay
Haddii ciladdu ka bilowday tafatir bartilmaameedka waddada, ka noqo tallaabo keliya oo ula kac ah oo sheeg baaxadda aad beddelayso. Ka saarista bartilmaameedka soo-dhoofinta waxay dib u celinaysaa xaq u-lahaanshaha gudaha VRF taas. Ma tirtirto ogeysiiska VPNv4 ee laf-dhabarta, madallo qaarna waddadu waxay ku sii haraan shaxda. Kuwani waa natiijooyin kala duwan iyo saamaynta isticmaalaha uu arko waxay ku xiran tahay midka aad ula jeedo.
configure terminal
vrf definition CUST-A
address-family ipv4
no route-target import 65000:410
end
clear ip bgp vpnv4 vrf CUST-A soft inDib-u-habayn jilicsan oo soo-gelinta ah waa ku filan tahay marka kulanku hore u kaydiyo horgalada; dib-u-dejin adag oo kulan u jeedda bixiyaha inta lagu jiro saacadaha shaqada waa go'aan qof kale ay tahay inuu qaato. Junos dhexdiisa hubinta u dhiganta waxay si toos ah u akhriyaan shaxda VRF kasta iyo shaxda VPN, dib-u-celintuna waa soo-noqosho waqtiga commit ee ma aha tirtirid amar kasta, sidaas darteed qor faraqa qaabeynta ka hor intaadan bilaabin.
Ku dhammee isla saddexda amar ee aad ku bilowday, isla taxanahaas, oo diiwaangeli wax soo saarkooda shaabad waqti. Tigidh sheegaya in RT-du khaldanaa oo hadda saxan yahay dib looma isticmaali karo; mid muujinaya in horgalahu VRF, VPNv4 iyo CEF ku rakiban yahay waa caddayn qofka xiga uu isbarbardhigi karo. Haddii labada hore oo keliya isbeddeleen, ma aadan dhammaystirin isbeddelka.