Indlela elahlekile ku-VRF: yasendaweni, i-VPNv4 noma ithebula lokudlulisa?

Isiqalo esingekho ku-VRF, esingekho ku-VPNv4 futhi esingafakiwe ku-CEF yizinkinga ezintathu ezihlukene. Funda amathebula ngokulandelana ngaphambi kokuhlela izinhloso zendlela.

Ikhasimende lithi isiqalo sanyamalala ngemva koshintsho lwenhloso yendlela, futhi isithombe-skrini sokuqala abasithumayo ngokuvamile yithebula elingalungile. Amathebula amathathu ahlukene aphendula imibuzo emithathu ehlukene: ukuthi isiqalo sikhona ngaphakathi ku-VRF, ukuthi sakhulunywa futhi sanganiswa njengendlela ye-VPNv4, nokuthi ingabe kwafakwa ngempela umugqa wokudlulisa. Ukuwafunda ngokungalandelani kuveza iziphetho eziqinile kodwa ezingalungile. Le ncwadi iqondisa isiqalo sasendaweni nesisodwa esikude kuwo womathathu amathebula ngokulandelana, futhi iphetha ngecebo lokuhlehlisa ushintsho lwe-RT olwaqala lokhu.

Shono isiqalo kanye nethebula elikuso

Bhala phansi iziqalo ezimbili ngaphambi kokuthayipha noma yini. Esisodwa sasendaweni endaweni yekhasimende, sifundwe kusixhumi esixhunyiwe noma esimemezelweni se-CE. Esinye sikude futhi kulindeleke ukuthi sifike ngomhlandla womhlinzeki. Zingena ku-VRF eyodwa ngezindlela ezihlukene, futhi ukungasebenzi kahle kwesinye akusho lutho ngokunye.

TableQuestion it answersCommand
show ip vrf CUST-AWhich RTs are attached for import and exportRead the RT lists before anything else
show ip route vrf CUST-AIs the prefix present in this VRF at allLocal and imported routes both appear
show ip bgp vpnv4 allWas the NLRI advertised and retainedKeyed by route distinguisher
show ip cef vrf CUST-AWas a forwarding entry installedProves a usable path, not just a BGP entry

Gcina umehluko phakathi kwezihlonzi ezimbili ucacile, ngoba ingxenye enkulu yokudideka kula mathikithi ivela lapho. Isihlukanisi sendlela siyingxenye ye-NLRI ye-VPNv4 futhi sikhona ukuze iziqalo zekhasimende eziyefana noma kunjalo zibe ngokukhethekile kulo lonke umhlandla. Inhloso yendlela iwumphakathi onwetshiwe othwalwa njengesici, futhi inqubomgomo yokungenisa nokukhipha iqondana nayo. Akulona igama lesibili lesihlukanisi futhi akuthwalwa kumaphakethe ekhasimende.

Isinyathelo 1: fakazela ukuthi isiqalo siku-VRF

Qala ngokubuka kwasendaweni, bese udlulela kuma-RT alawula ukungenisa. Uma isiqalo sasendaweni singekho lapha, akukho lutho olungenhla olungaba yimbangela:

show ip route vrf CUST-A 172.21.4.0 255.255.255.0
show ip route vrf CUST-A | include 172.21.4.0
show ip vrf CUST-A

Isiqalo esibonakala sixhunyiwe noma simile sifundwe endaweni, futhi ukuba khona kwaso akusho lutho ngokuthi sakhishwa yini. Lona ukufunda okungalungile okuvame kakhulu kule nqubo yomsebenzi: ithebula le-VRF eliphilile liwubufakazi bokufunda kwasendaweni kuphela. Uhlangothi lokukhipha lungumbuzo ohlukile, ophendulwa umbono womakhelwane kanye nenhloso yokukhipha exhunyiwe.

Hlola izinhlu zama-RT ku-VRF ngesikhathi usuke ulapha. Uma inhloso yokungenisa ehlosiwe ingekho ohlwini, konke okungezansi akubalulekile. Uma ikhona kodwa ihlukile kulokho okukhipha i-PE ekude, uthole ukungasebenzi kahle ngaphandle kokuvula ngisho ukubanjwa kwephakethe elilodwa.

Isinyathelo 2: funda ithebula le-VPNv4 kanye nezinhloso zalo

Ithebula le-VPNv4 likhombisa lokho indiza yokulawula eyakushintshana ngempela. Fakela isiqalo esikude ngaphansi kwesihlukanisi esifanele, bese ubheka imiphakathi exhunywe kuso:

show ip bgp vpnv4 all 10.60.9.0/24
show ip bgp vpnv4 all | include 10.60.9.0
show ip bgp vpnv4 vrf CUST-A neighbors 192.0.2.17 advertised-routes

Umugqa onenhloso yendlela efanele kodwa ongenakho ukufakwa kwasendaweni ukhomba kunqubomgomo yokungenisa noma ekukhethweni kwendlela, hhayi ekufinyelelekeni. Umugqa ongabonakali nhlobo kuthebula le-VPNv4 ukhomba phezulu: mhlawumbe i-PE yomthombo ayikukhiphanga, noma isikhathi asithwali umndeni wamakheli.

Kunesimo sesithathu esidida abantu ngesikhathi soshintsho. Amanye amapulatifomu akhawulela ukuthi yimaphi amathrekhi e-VPN ewacelayo noma awagcinayo, kusetshenziswa imininingwane yobulungu benhloso yendlela, ngakho-ke ukungabikho kwe-NLRI ekude embonweni oyedwa ohlungiwe akubona ubufakazi bokuthi isimemezelo asikho ndawo. Hlola ithebula elingahlungiwe kanye namathrekhi amemezelwe umakhelwane ngaphambi kokuphetha ngokuthi indlela yahoxiswa emhlabeni wonke.

Isinyathelo 3: qinisekisa ukuthi kukhona okufakiwe nokwafakwa ilebuli

Umugqa we-BGP yisinqumo, akulona indlela. Amathebula okudlulisa asho ukuthi amaphakethe anendawo yokuya yini:

show ip cef vrf CUST-A 10.60.9.0/24
show mpls forwarding-table vrf CUST-A | include 10.60.9.0
show ip bgp vpnv4 vrf CUST-A

Umugqa we-CEF onobumakhelwane obuxazululiwe kanye nelebuli ephumayo kusho ukuthi ithrafikhi yendiza yedatha kufanele isebenze, futhi noma yiluphi uphawu olusele lungolohlelo noma lokuhlunga ngaphakathi ku-VRF. Umugqa we-CEF okhombisa isinyathelo esilandelayo esingaxazululiwe kusho ukuthi indlela yelebuli ayiphelele yize i-BGP ibukeka iphilile, futhi yiso leso simo lapho isithombe-skrini sethebula le-BGP sadukisa ukubuyekezwa koshintsho.

Qhathanisa ilebuli efakwa i-PE yasendaweni nalebuli i-PE ekude elindele ukuyithola. Ukungafani phakathi kwemibono emibili kuyinkinga yokwabiwa kwelebuli noma yesikhathi, futhi ngeke kulungiswe ngokuhlela izinhloso zendlela, noma ngabe wenza kangaki.

Buyisela ushintsho lwe-RT ngobubanzi obushiwo

Uma ukungasebenzi kahle kwaqala ngokuhlelwa kwenhloso yendlela, kukhansele njengesinyathelo esisodwa esenziwe ngamabomu futhi usho ukuthi yibuphi ububanzi oshitshayo. Ukususa inhloso yokungenisa kuhoxisa ukufaneleka ngaphakathi kwaleyo VRF. Akususi isimemezelo se-VPNv4 emhlandleni, futhi kwamanye amapulatifomu indlela ihlala igciniwe ethebuleni. Lezi yimiphumela ehlukene futhi umphumela obonakala kumsebenzisi uncike ekutheni yikuphi okuqondile.

configure terminal
vrf definition CUST-A
 address-family ipv4
  no route-target import 65000:410
 end
clear ip bgp vpnv4 vrf CUST-A soft in

Ukuhlelwa kabusha okuthambile kokungenayo kwanele uma isikhathi sesivele sigcina iziqalo; ukusethwa kabusha okuqinile kwesikhathi esibheke kumhlinzeki ngesikhathi sokusebenza kuyisinqumo okufanele sithathwe omunye umuntu. Ku-Junos ukuhlola okulinganayo kufunda ithebula le-VRF ngayinye kanye nethebula le-VPN ngqo, futhi ukubuyisela emuva ukubuyela ngesikhathi se-commit hhayi ukukhansela umyalo ngamunye, ngakho-ke qopha umehluko wokucushwa ngaphambi kokuqala.

Qeda ngemiyalo emithathu efanayo oqale ngayo, ngokulandelana okufanayo, futhi urekhode umphumela wayo ngesigxivizo sesikhathi. Ithikithi elithi i-RT yayingalungile futhi manje isilungile alinakusetshenziswa futhi; elikhombisa ukuthi isiqalo siku-VRF, siku-VPNv4 futhi sifakiwe ku-CEF liwubufakazi umuntu olandelayo angaziqhathanisa nabo. Uma kushintshe okubili kokuqala kuphela, awukayiqedi inguquko.

Izihloko ezihlobene