
出现了错误 简单的就3台路由器 2台PE 一台P路由器
9 J) p( X& b' S1 {2 j/ M1 P' ]) Q) x B7 k" H; ^9 _
我AAA跟BBB的两个VPN都能收到同VPN对端的地址,但是PING不通4 {' p) }* I; i
2 _* g8 [6 O1 _! P配置如下:
; Y- N4 p* M; V' o6 \6 U: v
U/ w. H; G- V" }+ Q8 N5 `- [PE1:
1 f2 w4 p) `* _1 D4 g( M c* n: o/ j7 A5 O
Router#sh run) h) _2 M$ ^* j& U
Building configuration...4 _% _+ [: ^- ~ t6 J* U
" N: H0 d' a0 |8 q' }: ]Current configuration : 1744 bytes1 X( T3 O1 `0 p7 p, `0 J4 a% A1 Z
!. D8 o. l3 Y% `& r
version 12.3' k2 {" k5 O- N. t, I% H; ?# M
service timestamps debug datetime msec9 }7 O4 \- n- h V/ |$ f) E
service timestamps log datetime msec
: s4 K, ^( w4 N) F/ a2 pno service password-encryption
" J9 O- \/ A$ I$ U: Y5 |!
: b' r0 w6 Q6 \% d3 N) U, _# W9 Ghostname Router
' |2 }6 ~) g# E7 T!
9 p$ i# s- a- ~% d: o4 ?7 V# X+ }3 oboot-start-marker9 Q0 N: L1 {& E# H
boot-end-marker2 \4 i3 Z1 d! G( r) Q4 l5 c
!
6 Z! }1 W' ]$ N5 Q( z% _. h!
% R" z( c( A. Vno aaa new-model
- S2 k, i7 [* fip subnet-zero7 E( {$ [4 |- G9 y
!- S) w Z& l2 z3 o$ x
!0 | _( Z9 D' y
no ip domain lookup4 v9 N6 E3 F, y. U- y! O$ i
!) g: ]( y2 f# ]: C* U$ J! _) a
ip vrf AAA
3 I- n o# H# Mrd 100:1007 d5 X! D' W# E$ O5 X
route-target export 100:100
+ ?4 ~/ L" F# [0 {route-target import 100:100
$ s% p4 F- B6 a* y) @8 v!& x4 a( w- Q; o
ip vrf BBB
4 Z3 ^; G {5 K/ A, Nrd 200:2008 Q1 I4 H3 c( E
route-target export 200:2002 e( ?& u- \7 [4 J% L8 Z8 |
route-target import 200:200
2 u, D& l$ l4 D9 o!1 s v, f6 N1 _8 B& T+ i
ip cef
- h4 T0 {1 p1 e6 J S" J!, A) }: g; m( k' J7 S, F4 q9 R
!, w! Z+ e2 k' l! J2 R
!
, R( n1 R$ f! q/ D!
/ q1 J7 t2 @8 i% y2 k: f!3 D: t, U) f% I3 r
!
( N2 N& j; C2 y0 \" @" s' B!* C, G$ Y7 Z8 \$ ^8 [
!% ]4 p' U/ z0 \5 x! r3 u+ [* S; ?
!0 a# T- k4 s) L: J( u0 X
!
, s- J0 V, L+ U, H, M& R; r' ~9 w, j!
8 t' Z) R( d& e# q!! L# R$ ?3 }$ o/ a& [1 B, ^
!; i. p0 R0 r+ C/ F1 o
!& N! f1 M# l+ d" P( a
!
0 D! p0 Z1 p$ Z2 ainterface Loopback0
! f. B: i; d+ g# aip vrf forwarding AAA+ X5 R0 H. B/ R3 C
ip address 1.1.1.1 255.255.255.255' o: e( q& n3 ^# ~- s9 u) A' I
!
% g/ a# q6 [, m7 G& Y; ainterface Loopback1, X4 ?8 w6 p f
ip vrf forwarding BBB
: [& r5 w3 K4 e8 R8 aip address 3.3.3.3 255.255.255.255
0 [8 L# e: h6 y( @4 }5 s# a!
8 W' z/ g) x9 X8 q5 c! F/ T. |interface FastEthernet0/07 t- H6 D4 Y8 s& g: T
no ip address
- T( l1 U: Q6 r" E2 @, \( ashutdown
9 {/ c( x. t4 G3 m! F6 E2 aduplex half/ P) i# j' N9 G" q: H6 `
!2 T: N0 W5 B/ n: m
interface Ethernet1/0, Z n: V2 B0 t' }( i( G) t C
ip address 10.10.10.1 255.255.255.0
; e' m' S7 g; }( l) Pduplex half
! j3 M/ X, A& m* m8 ktag-switching ip: d% f& d9 B" N$ p0 Y* E, @
!# r3 y6 w" e) s+ J3 K
interface Ethernet1/1
. f% |3 P- `" a8 b3 ono ip address
" u+ z8 F5 `+ F3 E0 Jshutdown
2 K, [/ u: @$ Oduplex half0 y) U+ T) S) I- W9 ]$ N
!5 e6 _ a) G0 v; d0 ~4 Q
interface Ethernet1/28 `8 ~' Z2 y& x5 }
no ip address& {3 |1 B- T8 A+ [7 Z8 `
shutdown# s# Y; C4 l3 V4 `& `/ O
duplex half
) w3 }) } P8 d! i; X!
) q, N1 H5 V/ }; J0 G6 tinterface Ethernet1/3
: K0 f4 a5 R) z7 }no ip address
( D1 ?5 ?. @2 V- [shutdown3 `0 m1 Y- U. @) R1 k) I
duplex half( A! h8 k+ M2 O0 A4 Z
!
( Z# B$ X! U' M0 y4 [0 h8 H8 c% Lrouter ospf 100
1 S m7 E9 b9 s3 g6 t; Zlog-adjacency-changes" M( e) E$ Y) c5 y( c
network 10.10.10.0 0.0.0.255 area 0
j' G4 t9 c; r. r!7 V" l2 L- j% C9 A# a; f- @
router bgp 1008 x7 f* S! B6 s- f
bgp log-neighbor-changes
% ]# v2 w" T! P# X* mneighbor 2.2.2.2 remote-as 100# X) ~5 T5 O1 |
!
" s! o9 u* J4 T4 w1 y; E9 |! oaddress-family ipv43 j' X! L. b) V! q7 ?
no neighbor 2.2.2.2 activate
: ~/ V' h& Y6 A! z7 F" ^no auto-summary) K1 o+ N# L. D) f
no synchronization" Z& \. R/ {# a. k/ R1 L
exit-address-family
9 } @" F' D- x( g: d8 q. ]! ( [+ m: p9 h* |
address-family vpnv4: j, J1 C: L( |5 W
neighbor 2.2.2.2 activate. T- U6 w& u( ^& y+ `
neighbor 2.2.2.2 send-community both8 i( P0 I' l0 A/ s( F7 o* U
exit-address-family1 r. }5 x7 r" a
!
5 R& G! t) h7 O& n4 @ kaddress-family ipv4 vrf BBB" Y4 z- Y% q: T5 a8 G
redistribute connected
0 T6 [+ j2 `( [ J$ Aredistribute static
( Q5 h/ I& i. Q1 _; c0 L" @no auto-summary/ q h% P* F: l% v0 l% x. `
no synchronization( D2 n9 R0 [1 t1 w- r, {4 W
exit-address-family
$ j2 T1 D. w, |0 h: g!! X/ H. y0 m5 U
address-family ipv4 vrf AAA
" W! e2 p# g$ T, b' Y- N- rredistribute connected. @) P5 x; K3 X9 [4 N8 e( L
redistribute static3 {. k- Q, v. n8 o+ B5 u$ i* s- j* s, W
no auto-summary
) e+ t' D7 k. D8 E Bno synchronization
1 q. l* Y' a; P# Y" V% d: Z; k- V* Fexit-address-family% Q& D; s+ g; e
!
( {% r+ y$ e5 a3 \ip classless
& ?- E9 F1 d5 Q- E% c Ano ip http server" }0 V& D0 S4 X3 [0 C8 d
!
' }0 o; d9 X) k. L X9 O!
i- y" m" }! k2 `. s!/ j( z7 l" m4 j: O+ G# |0 ~/ c0 q$ Q
!
( x. n* \: a% A+ @5 h( O _9 ]3 `!: {, u% R6 j0 Y
!
o& D& [7 i& Y% g! f& c4 i1 ~( }!
0 ?) P/ \6 F6 m' V1 W) f F!
3 |# b. \! q6 u1 I+ P6 w. H!# ?) d, I: N% F; T
gatekeeper
2 |; F& y3 x* P- _' R+ ` j1 e4 Gshutdown% T9 d/ u) F; e2 G' ^; r
!. G4 W4 v6 m% M# w- ~# R$ C; e$ }
!
' D* _, p/ }. D$ o7 r* ~line con 0
" G! P4 m- q8 ]) |: sstopbits 1; w3 p t) s$ v7 K
line aux 0
# B z2 }$ O4 d }; z7 G8 m6 Jstopbits 1
9 _0 u4 f) s2 h: L0 `, P. Fline vty 0 4+ e/ U$ N' e }6 F$ J6 ]
login( s3 ~& z' o. P. _" L
!
. f6 U% j V1 b2 v$ z8 e" p& u!) C! \& `3 ?. k& w& O3 i# c
!0 ^4 K! T, m y* V# l
end |
|