MPLS VPN Labor

Author: xcke
Filed under: MPLS, Uncategorized, VPN

Friday
Dec 28,2007

Sikerült leadnom végre az önlab doksit, és el is fogadták. A labor-t Dual Xeon 3.1 Ghz, 2GB ram-on raktam össze, és így nézett ki:

A dynamips konfiguráció:

autostart = False
[localhost:7200]
workingdir = /root/dynamips/work_mpls
[[3660]]
#
# Specify 3640 IOS image on Windows here:
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
#
# Specify 3640 IOS image on Linux here:
# image = /ios/c3640-jk9o3s-mz.123-14.T7.extracted.bin
#
ram = 160
disk0 = 0
disk1 = 0
# Choose an idlepc value from the below
mmap = True
#ghostios = True
[[Router P1]]
model = 3640
console = 2001
autostart = False
slot0 = NM-1FE-TX
slot1 = NM-4T
S1/0 = PE1 S1/0
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
[[Router P2]]
model = 3640
console = 2002
autostart = False
slot0 = NM-1FE-TX
slot1 = NM-4T
F0/0 = P1 F0/0
S1/0 = PE2 S1/0
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
[[Router PE1]]
model = 3640
console = 2003
autostart = False
slot0 = NM-1FE-TX
slot1 = NM-4T
S1/1 = CEA1 S1/1
S1/2 = CEB1 S1/2
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
[[Router PE2]]
model = 3640
console = 2004
autostart = False
slot0 = NM-4E
slot1 = NM-4T
S1/1 = CEA2 S1/1
S1/2 = CEB2 S1/2
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
[[Router CEA1]]
model = 3640
console = 2005
autostart = False
slot0 = NM-4E
slot1 = NM-4T
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
[[Router CEB1]]
model = 3640
console = 2006
autostart = False
slot0 = NM-4E
slot1 = NM-4T
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
[[Router CEA2]]
model = 3640
console = 2007
autostart = False
slot0 = NM-4E
slot1 = NM-4T
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
[[Router CEB2]]
model = 3640
console = 2008
autostart = False
slot0 = NM-4E
slot1 = NM-4T
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image
[[Router TermServ]]
model = 3640
console = 2000
autostart = False
#
# Specify your local host’s loopback here from the network device list
# Too add a loopback in windows:
# http://support.microsoft.com/kb/839013
#
F0/0 = NIO_tap:tap0
cnfg = /root/dynamips/init_conf/MplsTerm.initial.config.txt
image = /root/dynamips/images/c3640-jk9s-mz.124-16.image

A router konfigok:

P1 router:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname P1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
interface Loopback0
ip address 10.10.10.1 255.255.255.255
!
interface FastEthernet0/0
description To P2
ip address 10.1.1.1 255.255.255.252
duplex auto
speed auto
mpls ip
!
interface Serial1/0
description To PE1
ip address 10.2.2.1 255.255.255.252
mpls ip
serial restart-delay 0
no fair-queue
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 1
router-id 10.10.10.1
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
ip http server
no ip http secure-server
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end
P2 router:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname P2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
interface Loopback0
ip address 10.10.10.2 255.255.255.255
!
interface FastEthernet0/0
description To P1
ip address 10.1.1.2 255.255.255.252
duplex auto
speed auto
mpls ip
!
interface Serial1/0
description To PE2
ip address 10.3.3.1 255.255.255.252
mpls ip
serial restart-delay 0
no fair-queue
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 1
router-id 10.10.10.2
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
ip http server
no ip http secure-server
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
!
!
PE1 router:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ip vrf NetworkA
rd 100:1
route-target export 100:1
route-target import 100:1
!
ip vrf NetworkB
rd 100:2
route-target export 100:2
route-target import 100:2
!
!
interface Loopback0
ip address 10.10.10.3 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
description To P1
ip address 10.2.2.2 255.255.255.252
mpls ip
serial restart-delay 0
no fair-queue
!
interface Serial1/1
description To CEA1
ip vrf forwarding NetworkA
ip address 192.168.1.1 255.255.255.252
serial restart-delay 0
!
interface Serial1/2
ip vrf forwarding NetworkB
ip address 192.168.10.1 255.255.255.252
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 1
router-id 10.10.10.3
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
router rip
version 2
no auto-summary
!
address-family ipv4 vrf NetworkB
redistribute bgp 100 metric 4
network 192.168.10.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf NetworkA
redistribute bgp 100 metric 4
network 192.168.1.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.10.10.4 remote-as 100
neighbor 10.10.10.4 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.10.10.4 activate
neighbor 10.10.10.4 send-community extended
exit-address-family
!
address-family ipv4 vrf NetworkB
redistribute rip metric 4
no synchronization
exit-address-family
!
address-family ipv4 vrf NetworkA
redistribute rip metric 4
no synchronization
exit-address-family
!
ip http server
no ip http secure-server
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
end
PE2 router:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ip vrf NetworkA
rd 100:1
route-target export 100:1
route-target import 100:1
!
ip vrf NetworkB
rd 100:2
route-target export 100:2
route-target import 100:2
!
interface Loopback0
ip address 10.10.10.4 255.255.255.255
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface Ethernet0/1
no ip address
shutdown
half-duplex
!
interface Ethernet0/2
no ip address
shutdown
half-duplex
!
interface Ethernet0/3
no ip address
shutdown
half-duplex
!
interface Serial1/0
ip address 10.3.3.2 255.255.255.252
mpls ip
serial restart-delay 0
no fair-queue
!
interface Serial1/1
description CEA2
ip vrf forwarding NetworkA
ip address 192.168.2.1 255.255.255.252
serial restart-delay 0
!
interface Serial1/2
description To CEB2
ip vrf forwarding NetworkB
ip address 192.168.20.1 255.255.255.252
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 1
router-id 10.10.10.4
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
router rip
version 2
no auto-summary
!
address-family ipv4 vrf NetworkB
redistribute bgp 100 metric 4
network 192.168.20.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf NetworkA
redistribute bgp 100 metric 4
network 192.168.2.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.10.10.3 remote-as 100
neighbor 10.10.10.3 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.10.10.3 activate
neighbor 10.10.10.3 send-community extended
exit-address-family
!
address-family ipv4 vrf NetworkB
redistribute rip metric 4
no synchronization
exit-address-family
!
address-family ipv4 vrf NetworkA
redistribute rip metric 4
no synchronization
exit-address-family
!
ip http server
no ip http secure-server
!
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
!
!
CEA1 router:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CEA1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
interface Loopback0
ip address 192.168.100.1 255.255.255.255
!
interface Loopback1
ip address 192.168.100.100 255.255.255.255
!
interface Loopback2
ip address 192.168.5.1 255.255.255.0
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface Ethernet0/1
no ip address
shutdown
half-duplex
!
interface Ethernet0/2
no ip address
shutdown
half-duplex
!
interface Ethernet0/3
no ip address
shutdown
half-duplex
!
interface Serial1/0
no ip address
shutdown
serial restart-delay 0
no fair-queue
!
interface Serial1/1
ip address 192.168.1.2 255.255.255.252
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router rip
version 2
network 192.168.1.0
network 192.168.5.0
network 192.168.100.0
!
ip http server
no ip http secure-server
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
!
!
CEB1 router:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CEB1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
interface Loopback0
ip address 192.168.100.1 255.255.255.255
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface Ethernet0/1
no ip address
shutdown
half-duplex
!
interface Ethernet0/2
no ip address
shutdown
half-duplex
!
interface Ethernet0/3
no ip address
shutdown
half-duplex
!
interface Serial1/0
no ip address
shutdown
serial restart-delay 0
no fair-queue
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/2
ip address 192.168.10.2 255.255.255.252
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router rip
version 2
network 192.168.10.0
network 192.168.100.0
no auto-summary
!
ip http server
no ip http secure-server
!
control-plane
!
line con 0
line aux 0
line vty 0 4
!
!
CEA2 router:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CEA2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
interface Loopback0
ip address 192.168.100.2 255.255.255.255
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface Ethernet0/1
no ip address
shutdown
half-duplex
!
interface Ethernet0/2
no ip address
shutdown
half-duplex
!
interface Ethernet0/3
no ip address
shutdown
half-duplex
!
interface Serial1/0
no ip address
shutdown
serial restart-delay 0
no fair-queue
!
interface Serial1/1
ip address 192.168.2.2 255.255.255.252
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router rip
version 2
network 192.168.2.0
network 192.168.100.0
no auto-summary
!
ip http server
no ip http secure-server
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
CEB2 router:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CEB2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
interface Loopback0
ip address 192.168.100.2 255.255.255.255
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface Ethernet0/1
no ip address
shutdown
half-duplex
!
interface Ethernet0/2
no ip address
shutdown
half-duplex
!
interface Ethernet0/3
no ip address
shutdown
half-duplex
!
interface Serial1/0
no ip address
shutdown
serial restart-delay 0
no fair-queue
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/2
ip address 192.168.20.2 255.255.255.252
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router rip
version 2
network 192.168.20.0
network 192.168.100.0
no auto-summary
!
ip http server
no ip http secure-server
!
control-plane
!
line con 0
line aux 0
line vty 0 4
!
!
end

Akit érdekel az MPLS VPN-ről egy 20-30 oldalas doksi magyarul, írjon email-t nekem.

Popularity: 100% [?]

SLARP Ma egy új feature-t fedeztem fel az MPLS VPN konfigurálása...
DynConfig This page is a GNS3/Dynamips startup-config generator. You can upload...
IPsec VPN Cisco PIX-el Először egy egyszerűbb kisvállalati topológiával kezdeném,...
BGP load-balancing serial linken Csináltam egy gyors tesztet a BGP működésével kapcsolatban. Két router...
Voice2: SIP Voice Gateway Úgy néz ki mostanában csak Voice-al kell foglalkoznom. Sajnos ez...

6 Responses for "MPLS VPN Labor"

Melinda February 23rd, 2008 at 3:50 pm
Szia!

Érdekelne ez a VPN-ről szóló doksi. Éppen szakdolgozatot írok egy hasonló témáról.

Előre is köszönöm! )
vigyu March 3rd, 2008 at 1:57 pm
Szia!

Engem is édrekelne a leírás az MPLS VPN-ről.
Légyszi küld el a mail címemre.
Köszi.
Juampe October 9th, 2008 at 3:00 pm
I have no idea about your native language, but this post was really usefull.
Thanks
crok October 6th, 2009 at 10:50 am
Hello,

engem is érdekelne az MPLS VPN dokumentum, kérlek küldd el az email címemre.
Szabó Zoltán December 20th, 2009 at 9:24 pm
Szia,

Én is hasonló szakdolgozat témát válaszottam magamnak, szeretnélek kérni, ha még él, küldd el a leírást az e-mail címemre.
Köszönöm szépen előre is.
Szabó Zoltán December 20th, 2009 at 9:24 pm
Szia,
Én is hasonló szakdolgozat témát válaszottam magamnak, szeretnélek kérni, ha még él, küldd el a leírást az e-mail címemre.
Köszönöm szépen előre is.

Cisco blogs

Support

Events

Feeds

Highest Rated

Now Reading

Planned books:

Inside Cisco IOS Software Architecture (CCIE Professional Development) (CCIE Professional Developmen by Vijay Bollapragada
CCNA Security Official Exam Certification Guide (Exam 640-553) (Exam Certification Guide) by Michael Watkins
Designing Cisco Network Service Architectures (ARCH) (Authorized Self-Study Guide) (2nd Edition) (Se by Keith Hutton
Deploying Cisco Wide Area Application Services (Networking Technology) by Zach Seils

Current books:

CCIE Routing and Switching Exam Quick Reference Sheets: Exam 350-001 v3.0 by Anthony Sequeira

Recent books:

None

View full Library

xcke’s blog

MPLS VPN Labor

6 Responses for "MPLS VPN Labor"

Leave a reply

Menu

Recent Posts

Recent Comments

Blogroll

Cisco blogs

Tags

CCIE Pursuit

Tools

Categories

stat