通过BGP EV**方式动态建立VXLAN隧道实现

刘銮奕

发布于 2019-08-06 17:15:04

1.9K0

发布于 2019-08-06 17:15:04

组网需求

如下图的组网图所示，Router1为企业分支网关，Router2为企业总部网关，由于分支与总部之间用户的业务需求不同，则将其规划为不同网段。企业分支的PC_1与总部的PC_2终端用户所属VLAN ID分别为VLAN 10、VLAN 20。现企业希望通过分支与总部之间通过BGP EV**方式动态建立VXLAN隧道实现用户间互通

通过VXLAN三层网关通信组网图

配置思路

采用如下思路配置不同网段用户通过BGP EV**方式动态建立VXLAN隧道实现互通：

分别在Router1、Router2、Router3上配置路由协议，保证网络三层互通。
分别在Router1、Router2上配置VXLAN接入业务选择部署方式。
配置BGP EV**对等体关系。
在Router1和Router2上配置源端VTEP的IP地址。
在Router1和Router2上配置V**实例。
在Router1和Router2上配置三层网关。
在Router1与Router2之间配置BGP对邻居发布IP前缀类型的路由。

操作步骤

配置路由协议。

配置Router1。Router2和Router3的配置与Router1类似，这里不再赘述。配置OSPF时，需要发布设备上的32位Loopback接口地址。

<Huawei> system-view
[Huawei] sysname Router1
[Router1] interface loopback 1
[Router1-LoopBack1] ip address 10.1.1.2 32
[Router1-LoopBack1] quit
[Router1] interface ethernet 2/0/0
[Router1-Ethernet2/0/0] undo portswitch
[Router1-Ethernet2/0/0] ip address 192.168.2.1 24
[Router1-Ethernet2/0/0] quit
[Router1] ospf
[Router1-ospf-1] area 0
[Router1-ospf-1-area-0.0.0.0] network 10.1.1.2 0.0.0.0
[Router1-ospf-1-area-0.0.0.0] network 192.168.2.0 0.0.0.255
[Router1-ospf-1-area-0.0.0.0] quit
[Router1-ospf-1] quit

OSPF成功配置后，Router之间可通过OSPF协议发现对方的Loopback接口的IP地址，并能互相ping通。以Router1 ping Router2的显示为例。

[Router1] ping 10.2.2.2
  PING 10.2.2.2: 56  data bytes, press CTRL_C to break
    Reply from 10.2.2.2: bytes=56 Sequence=1 ttl=255 time=1 ms
    Reply from 10.2.2.2: bytes=56 Sequence=2 ttl=255 time=5 ms
    Reply from 10.2.2.2: bytes=56 Sequence=3 ttl=255 time=5 ms
    Reply from 10.2.2.2: bytes=56 Sequence=4 ttl=255 time=2 ms
    Reply from 10.2.2.2: bytes=56 Sequence=5 ttl=255 time=2 ms
                                                                                
  --- 10.2.2.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 1/3/5 ms

分别在Router1、Router2上配置业务接入点。

配置Router1。Router2的配置与Router1类似，这里不再赘述。

[Router1] bridge-domain 10
[Router1-bd10] quit
[Router1] interface ethernet 2/0/1.1 mode l2
[Router1-Ethernet2/0/1.1] encapsulation dot1q vid 10
[Router1-Ethernet2/0/1.1] bridge-domain 10
[Router1-Ethernet2/0/1.1] quit

配置BGP EV**对等体关系。

在Router1配置BGP EV**对等体关系。Router2的配置与Router1类似，这里不再赘述。

[Router1] bgp 100
[Router1-bgp] peer 10.3.3.2 as-number 100
[Router1-bgp] peer 10.3.3.2 connect-interface LoopBack1
[Router1-bgp] l2V**-family eV**
[Router1-bgp-af-eV**] peer 10.3.3.2 enable
[Router1-bgp-af-eV**] quit
[Router1-bgp] quit
[Router1] interface nve 1
[Router1-Nve1] source 10.1.1.2
[Router1-Nve1] quit

在Router1和Router2上配置V**实例。

配置Router1。Router2的配置与Router1类似，这里不再赘述。

[Router1] ip V**-instance V**1
[Router1-V**-instance-V**1] ipv4-family
[Router1-V**-instance-V**1-af-ipv4] route-distinguisher 100:1
[Router1-V**-instance-V**1-af-ipv4] V**-target 1:1 eV**
[Router1-V**-instance-V**1-af-ipv4] quit
[Router1-V**-instance-V**1] vxlan vni 5010
[Router1-V**-instance-V**1] quit
[Router1] bridge-domain 10
[Router1-bd10] vxlan vni 2010
[Router1-bd10] quit

在Router1和Router2上配置VXLAN三层网关并绑定V**实例。

配置Router1。Router2的配置与Router1类似，这里不再赘述。

[Router1] interface vbdif 10
[Router1-Vbdif10] ip binding V**-instance V**1
[Router1-Vbdif10] ip address 192.168.10.10 24
[Router1-Vbdif10] quit

在Router1与Router2之间配置BGP对邻居发布IP前缀类型的路由。

配置Router1。Router2的配置与Router1类似，这里不再赘述。

[Router1] bgp 100
[Router1-bgp] ipv4-family V**-instance V**1
[Router1-bgp-V**1] import-route direct
[Router1-bgp-V**1] advertise l2V** eV**
[Router1-bgp-V**1] quit
[Router1-bgp] quit

验证配置结果。

上述配置成功后，在Router1、Router2上执行命令display vxlan tunnel可查看到VXLAN隧道的信息。以Router1的显示为例。

[Router3] display vxlan tunnel
 Tunnel ID       Source              Destination         State     Type
 ----------------------------------------------------------------------------
 4026531842      10.1.1.2            10.2.2.2            up        dynamic
  ----------------------------------------------------------------------------
 Number of vxlan tunnel : 2

配置文件

Router1的配置文件

#
sysname Router1
#
ip V**-instance V**1
 ipv4-family
  route-distinguisher 100:1
  V**-target 1:1 export-extcommunity eV**
  V**-target 1:1 import-extcommunity eV**
 vxlan vni 5010
#
bridge-domain 10
 vxlan vni 2010
#
interface Ethernet2/0/0
 undo portswitch
 ip address 192.168.2.1 255.255.255.0
#
interface Ethernet2/0/1.1 mode l2
 encapsulation dot1q vid 10
 bridge-domain 10
#
interface LoopBack1
 ip address 10.1.1.2 255.255.255.255
#
interface Vbdif10
 ip binding V**-instance V**1
 ip address 192.168.10.10 255.255.255.0
#
interface Nve1
 source 10.1.1.2
#
bgp 100
 peer 10.2.2.2 as-number 100
 peer 10.2.2.2 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 10.2.2.2 enable
 #
 l2V**-family eV**
  policy V**-target
  peer 10.2.2.2 enable
 #
 ipv4-family V**-instance V**1
  import-route direct
  advertise l2V** eV**
#
ospf 1
 area 0.0.0.0
  network 10.1.1.2 0.0.0.0
  network 192.168.2.0 0.0.0.255
#
return

Router2的配置文件

#
sysname Router2
#
ip V**-instance V**1
 ipv4-family
  route-distinguisher 100:1
  V**-target 1:1 export-extcommunity eV**
  V**-target 1:1 import-extcommunity eV**
 vxlan vni 5020
#
bridge-domain 20
 vxlan vni 2020
#
interface Ethernet2/0/0
 undo portswitch
 ip address 192.168.3.1 255.255.255.0
#
interface Ethernet2/0/1.1 mode l2
 encapsulation dot1q vid 20
 bridge-domain 20
#
interface LoopBack1
 ip address 10.2.2.2 255.255.255.255
#
interface Vbdif20
 ip binding V**-instance V**1
 ip address 192.168.20.10 255.255.255.0
#
interface Nve1
 source 10.2.2.2
#
bgp 100
 peer 10.1.1.2 as-number 100
 peer 10.1.1.2 connect-interface LoopBack1
 #
 ipv4-family unicast
  undo synchronization
  peer 10.1.1.2 enable
 #
 l2V**-family eV**
  policy V**-target
  peer 10.1.1.2 enable
 #
 ipv4-family V**-instance V**1
  import-route direct
  advertise l2V** eV**
#
ospf 1
 area 0.0.0.0
  network 10.2.2.2 0.0.0.0
  network 192.168.3.0 0.0.0.255
#
return
Router3的配置文件

#
sysname Router3
#
interface Ethernet2/0/1
 undo portswitch
 ip address 192.168.2.2 255.255.255.0
#
interface Ethernet2/0/2
 undo portswitch
 ip address 192.168.3.2 255.255.255.0
#
interface LoopBack1
 ip address 10.3.3.2 255.255.255.255
#
ospf 1
 area 0.0.0.0
  network 10.3.3.2 0.0.0.0
  network 192.168.2.0 0.0.0.255
  network 192.168.3.0 0.0.0.255
#
return

本文参与腾讯云自媒体分享计划，分享自微信公众号。

原始发表：2019-08-01，如有侵权请联系 cloudcommunity@tencent.com 删除

VPN 连接