Ilebhu ye-MPLS L3VPN ayiphingi? Hlola lezi zindawo ezinhlanu

Amaroutha amabili amakhasimende, ipheya lamabhokisi asemaphethelweni omhlinzeki, kanye ne-ping efa ngaphandle komlayezo wephutha. Elebhu elincane le-MPLS L3VPN, iphutha licishe lihlale kwenye yezindawo ezinhlanu zokuhlola, futhi ngayinye inomyalo obonisa ukuthi ukuncika kuyasebenza noma akukho. Iphutha ukuqala kabusha i-BGP njalo lapho i-ping ihluleka esikhundleni sokuhlola ukuncika ngokulandelana. Uma weqa ngqo kukulungiselelwa kwe-VRF, ungachitha ihora enhluphekweni eyaqala nge-next hop engaxazululwanga emadivayisi amabili ngaphesheya.

Sebenza ngohlu kusuka phansi kuye phezulu. Indawo yokuhlola edlulile ihlala idlulile, futhi ukwehluleka kokuqala yikho okufanele kulungiswe.

Indawo yokuqala: ama-PE ayakwazi ukufinyelelana

I-PE ngayinye idinga umzila oya ku-loopback ye-PE enye, futhi lowo mzila kufanele uxazululwe ngokuthile kwangempela. Iphrothokholi yesango langaphakathi iyindlela ejwayelekile, kodwa umzila oqinile nawo uyasebenza inqobo nje uma ukusesha okuphindaphindayo kuhla esixhumaneni esiphilayo. Emadivayisi esitayela se-IOS, show ip route 10.0.0.2 bese kuthi show ip cef 10.0.0.2 kukutshela ukuthi isiqalo sikhona yini noma sinaso isixhumaniso esixazululiwe. Umzila osethebuleni ongenasixhumaniso ngemuva kwawo akukona ukufinyeleleka.

Hlola izinhlangothi zombili. Izindleko ze-IGP ezingalingani, i-interface epasive ohlangothini olungalungile, noma uhlu lokusabalalisa oluhlunga i-loopback, ngakunye kwazo kwephula uhlangothi olulodwa, futhi uhlangothi olulodwa lwanele ukubulala isikhathi somhlangano. Uma ama-loopback ephendula i-ping kodwa umhlangano we-BGP uhlezi ku-Active, bheka umthombo wokubuyekeza ngaphambi kokuthinta enye into.

Indawo yesibili: umzila wamalebula ukhona

Umzila we-IP oya ku-loopback ekude awufakazeli ukuthi ezokuthutha kuzofaka ilebula. Kusungulo lwe-LDP, qinisekisa ukuthi i-loopback ekude inokuxhumana kwasekhaya nokwakude, nokuthi ilebula ephumayo ivela kuthebula lokudlulisa. show mpls ldp bindings 10.0.0.2 32 ikhombisa amapheya amalebula, kanti show mpls forwarding-table 10.0.0.2 ikhombisa lokho ikhadi lomugqa elizokufaka ngempela. Uma umyalo wesibili ukhombisa „no label“ noma ugxumela ku-IP, ezokuthutha akuthwali ithrafikhi ye-VPN ngendlela umklamo ocabanga ngayo.

Umehluko uvela endleleni i-MPLS ehlukanisa ngayo isimo sokudlulisa kumaprefiksi ayindawo, futhi lokho yisibonelo esichazwe ku-RFC 3031. Uma ilebhu yakho isebenzisa i-RSVP-TE noma amalebula aseduze ne-BGP esikhundleni se-LDP, hlola isimo salowo mshini ngokwawo; ukucabanga ukuthi i-LDP isabalalisa wonke amalebula e-underlay kuyindlela evamile yokuxosha iphutha eliyisipoki. Umzila wamalebula ophukile uvame ukuvela kamuva njengomzila we-VPN okhona kodwa ongasetshenziswa.

Indawo yesithathu: umzila we-VPN ufike uphelele

Bheka umzila we-VPNv4 noma we-VPNv6 wesiqu saphrefiksi sekhasimende esiqondile, hhayi isifinyezo sesikhathi somhlangano. show bgp vpnv4 unicast all 10.10.1.0/24 kufanele ikhombise isihlukanisi somzila, i-next hop ebekwe ku-loopback ye-PE ekude, kanye nelebula. Uma isiqalo singekho, inqubomgomo yokuthumela ngaphandle ku-PE yomsuka noma inqubomgomo yokungenisa ku-PE eyamukelayo iyisola sokuqala, futhi i-route target iyisigilamkhuba esijwayelekile.

Funda ukuhlolwa kwe-route target ngokwehlukile ekwamukelweni kwe-BGP. Umzila ungafika nge-next hop elungile futhi uhluleke ukungena ku-VRF ngoba i-import target ayihambisani. Ku-PE eyamukelayo, show ip route vrf CUSTOMER 10.10.1.0 ukuhlolwa okubalulekile; ithebula le-BGP lifakazela kuphela ukuthi umzila weqa indiza yokulawula.

Indawo yesine: i-interface ise-VRF

Incazelo ye-VRF enesihlukanisi somzila nama-route target ayifudusi noma iyiphi i-interface ingene kuyo. I-interface ebheke ku-CE idinga ukwabiwa kwe-VRF, futhi show ip vrf interfaces noma show ip interface brief kufanele ikufake ohlwini ngaphansi kwesibonelo esifanele. Le yindawo yokuhlola lapho ukulungiselelwa okukopishiwe kuvame ukungahambi kahle khona, ngoba ibhloko le-VRF libukeka liphelele kanti i-interface isahlezi kuthebula lomhlaba wonke.

Bese uqinisekisa ukuthi i-PE ifunde isiqalo sekhasimende sasendaweni kuleyo VRF, nokuthi i-CE inomzila wokubuyela emuva ngokuxhumana. Umzila oqinile wokuzenzakalela ku-CE obheke ku-PE wanele elebhu, inqobo nje uma i-VRF ye-PE inomzila oya ku-LAN ye-CE. Uma ingxenye eyodwa ingekho, i-ping iyahluleka ngaphambi kokufakwa kwanoma yiliphi ilebula.

Indawo yesihlanu: impendulo ithola indlela yokuya ekhaya

Landelela iphakethe eliya phambili bese ulandelela iphakethe elibuyayo, ngoba zisebenzisa amathebula ahlukene. Ku-PE engenayo, umthombo wekhasimende kufanele uxazululwe ngaphakathi kwe-VRF kusiya kwiprefiksi ekude enelebula elikude. Ku-PE ephumayo, indawo ekuyiwa kuyo kufanele ixazululwe ngaphakathi kwe-VRF efanayo kuyi-interface ebheke ku-CE. I-ping ethunyelwe isuka kuyi-PE uqobo ayisibo ubufakazi: ingaphuma ngethebula lomhlaba wonke noma ngekheli lomthombo elihlukile, yingakho ping vrf CUSTOMER 10.10.2.10 source 10.10.1.1 ukuhlolwa okufanele kwenziwe.

Izicishamlilo zomsingathi, ukuhlungwa komzila obuyayo, kanye nohlu lokufinyelela lwe-CE kusasebenza. Uma umzila wokuya phambili usebenza kanti impendulo iyafa, inkinga ingumzila noma isihlungi ohlangothini lokubuya, hhayi ezokuthutha ze-MPLS.

Gcina irekhodi lomugqa owodwa endaweni ngayinye yokuhlola elisho ukuncika kokuqala okwehlulekile. Lelo rekhodi liguqula „ikhasimende alikwazi uku-ping“ libe umbuzo oqondile mayelana nokufinyeleleka, isimo samalebula, ukungeniswa komzila, ubulungu be-interface, noma umzila wokubuya, futhi livimbela isikhathi sokulungisa esilandelayo ukuba singaphindi imiyalo emihlanu efanayo ngokulandelana okufanayo.