• 产品与解决方案
  • 行业解决方案
  • 服务
  • 支持
  • 合作伙伴
  • 关于我们

08-IP组播配置指导

目录

13-BIER模式MVPN配置

本章节下载 13-BIER模式MVPN配置  (2.72 MB)

13-BIER模式MVPN配置

  录

1 BIER模式MVPN

1.1 BIER模式MVPN简介

1.1.1 基本概念

1.1.2 运行机制

1.1.3 工作过程

1.1.4 创建相容性隧道

1.1.5 创建选择性隧道并进行隧道切换

1.1.6 控制平面

1.1.7 MVPN扩展团体属性

1.1.8 跨AS的BIER模式MVPN

1.1.9 协议规范

1.2 BIER模式MVPN配置限制和指导

1.3 BIER模式MVPN配置任务简介

1.4 配置准备

1.5 使能VPN实例中的IP组播路由

1.6 配置BGP MVPN路由交互

1.6.1 配置BGP IPv4 MVPN路由交互

1.6.2 配置BGP IPv6 MVPN路由交互

1.7 配置BGP路由扩展团体属性

1.8 允许向发送给BGP对等体的路由增加特定的扩展团体属性

1.9 开启IPv6地址类型的扩展团体属性兼容功能

1.10 创建BIER模式MVPN实例

1.11 创建MVPN地址族

1.12 指定MVPN源接口

1.13 配置MVPN支持IPv6 Underlay功能

1.14 配置封装的IPv6源地址

1.14.1 配置G-BIER组播服务前缀信息

1.14.2 配置G-BIER隧道头端节点的组播服务源地址

1.14.3 配置BIERv6或MSR6隧道头端节点的源地址

1.15 配置相容性隧道和选择性隧道

1.15.1 创建相容性隧道

1.15.2 创建选择性隧道

1.15.3 配置隧道切换的延迟时间

1.16 配置跨AS域自动发现功能

1.17 配置BIER FRR功能

1.18 配置组播温备功能

1.18.1 开启组播温备功能

1.18.2 配置基于(S,G)表项选择主用IDF

1.19 BIER模式MVPN显示和维护

1.20 BIER模式MVPN典型配置举例‌

1.20.1 单AS内BIER模式MVPN配置举例(G-BIER封装类型)

1.20.2 单AS内BIER模式MVPN配置举例(BIERv6封装类型)

1.20.3 单AS内BIER模式MVPN配置举例(MSR6封装类型)

1.20.4 公网实例BIER模式MVPN配置举例(G-BIER封装类型)

1.20.5 公网实例BIER模式MVPN配置举例(BIERv6封装类型)

1.20.6 公网实例BIER模式MVPN配置举例(MSR6封装类型)

1.20.7 A类跨AS的BIER模式MVPN配置举例(G-BIER封装类型)

1.20.8 C类跨AS的BIER模式MVPN配置举例(G-BIER封装类型)

1.20.9 BIER静态C类跨域穿越的BIER模式MVPN配置举例(BIERv6封装类型)

1.20.10 单AS内BIER温备本地保护配置举例(MSR6封装类型)

1.20.11 跨AS域BIER温备本地保护配置举例(MSR6封装类型)

1.20.12 跨AS域BIER前缀保留ISIS-EBGP-ISIS组网配置举例(MSR6封装类型)

1.20.13 跨AS域BIER前缀保留IBGP(Proxy)-EBGP-ISIS组网配置举例(MSR6封装类型)

1.20.14 跨AS域BIER前缀保留IBGP(Proxy)-EBGP- IBGP(Proxy)组网配置举例(MSR6封装类型)

1.20.15 跨AS域BIER前缀保留IBGP ISIS混合-EBGP-ISIS组网配置举例(MSR6封装类型)

1.20.16 跨AS域BIER前缀不保留ISIS-EBGP-ISIS组网配置举例(G-BIER封装类型)

1.20.17 跨AS域BIER前缀不保留IBGP(Proxy)-EBGP-ISIS组网配置举例(G-BIER封装类型)

1.20.18 跨AS域BIER前缀不保留IBGP(Proxy)-EBGP- IBGP组网配置举例(G-BIER封装类型)

 


1 BIER模式MVPN

1.1  BIER模式MVPN简介

1.1.1  基本概念

·     BIER域和BIER子域:网络中所有BFR的集合称为BIER域(Domain)。一个BIER域可以划分为一个或者多个BIER子域(Sub-domain)。通过Sub-domain ID来区分不同的BIER子域。

·     BFR ID:用来在一个BIER子域中唯一标识一台BIER边缘设备,Transit BFR无需配置BFR ID。

·     BFR prefix:相当于路由协议中的Router ID,用来标识BIER节点。在同一个BIER子域中,每个BFR必须配置唯一的BFR前缀,且该前缀必须是BIER子域内路由可达的。目前只支持配置为Loopback口的地址。

·     Bit String(Bit String,比特串):BIER用一个特定长度的BS来表示BIER边缘设备。Bit String从最右边开始,每一个比特位对应一个BFR ID。比特串的长度用BSL(Bit String Length)来表示。比如,使用一个BSL为3的比特串来最多标识一个BIER子域内三个BIER边缘设备,那么“001”就表示BFR ID为1的BIER边缘设备。

·     SI(Set Identifier,集标识):在BIER中,当使用的BSL长度不足以表示一个BIER子域内配置的BFR ID的最大值时,需要将Bit String分成不同的集合,每个集合通过SI来标识。

·     BIRT(Bit Index Routing Table,位索引路由表):BIRT是通过IGP协议携带BIER信息(Sub-domain、BSL、BFR ID)在网络上进行泛洪,并根据IGP传递的BIER信息和路由信息生成。

·     F-BM(Forwarding-Bit Mask,转发位串掩码):F-BM用来表示往下一跳邻居复制发送组播报文时,通过该邻居能到达的BIER子域边缘节点集合。通过将该邻居所能到达的所有BIER子域边缘节点的Bit String进行“或”操作后得到。

·     BIFT(Bit Index Forwarding Table,位索引转发表):BIER子域内的组播流量通过查询BIFT来实现逐跳转发。每张BIFT都由三元组(BSL,SD,SI)唯一确定。BIFT是通过将BIRT表项中到达相同邻居不同表项进行合并生成,生成F-BM与该邻居对应的表项。

1.1.2  运行机制

(1)     组播源侧PE首先通过与接收者PE交互BGP MVPN路由,获知组播流量需要发送给哪些接收者侧PE。

(2)     组播源侧PE和接收者侧PE之间通过BGP报文中携带的Intra-AS I-PMSI A-D Route、S-PMSI A-D Route和Leaf A-D Route三大路由信息传递BIER信息(BFR ID、Sub domain ID、BFR prefix)。

(3)     组播数据根据PIM路由表由CE传输到PE上的相容性隧道时完成了私网到公网的无缝连接,组播源侧PE将收到私网组播数据封装BIER头后,通过相容性隧道传输给远端PE,远端PE收到该报文后通过剥离标签信息将其还原成私网组播报文。

(4)     当组播源侧PE上有满足切换选择性隧道条件的组播流量时,建立选择性隧道,并通过选择性隧道传输封装了BIER头的私网组播数据。

1.1.3  工作过程

BIER模式的MVPN中,使用BIER作为公网承载隧道,将组播私网流量通过BIER封装,发送给BIER子域内的其他各节点。

组播源侧PE首先通过与接收者PE交互BGP MVPN路由,获知组播流量需要发送给哪些接收者侧PE,此过程与RSVP-TE和mLDP模式的MVPN类似,区别在于Intra-AS I-PMSI A-D Route、S-PMSI A-D Route和Leaf A-D Route中将会携带BIER信息(BFR ID、Sub domain ID、BFR prefix)。关于RSVP-TE和mLDP模式MVPN的详细介绍,请分别参见“IP组播配置指导”中的“RSVP-TE模式MVPN”和“mLDP模式MVPN”。

组播源侧PE将收到的私网组播流量封装Bit String后,在公网内进行BIER转发。有关BIER转发的详细介绍,请参见“BIER配置指导”中的“BIER”。

与RSVP-TE和mLDP类似,组播数据根据PIM路由表由CE传输到PE上的相容性隧道时完成了私网到公网的无缝连接,私网组播数据通过相容性隧道传输给远端PE,远端PE收到该报文后通过剥离标签信息将其还原成私网组播报文。当组播源侧PE上有满足切换选择性隧道条件的组播流量时,建立选择性隧道。

说明

BIER支持多种封装类型,不同封装类型的BIER模式MVPN工作过程相似,但封装时使用的BIER报文头格式略有不同。关于BIER不同封装类型的详细介绍,请参见“BIER配置指导”中的“BIER”。

 

1.1.4  创建相容性隧道

图1-1所示,私网侧采用PIM协议,公网为BIER网络。在PE 1、PE 2和PE 3上均部署了BGP和MVPN之后,相容性隧道的创建过程如下:

(1)     PE 1向PE 2和PE 3发送1类路由Intra-AS I-PMSI A-D Route,该路由携带以下信息:

¡     Route Target:用于控制路由的发布和接收,配置为PE 1的Export Target。

¡     PMSI Tunnel attribute,用于传递隧道信息。其中,Tunnel Type字段取值为BIER隧道,并携带PE 1的BIER信息(Sub domain ID、BFR ID、BFR prefix)。

(2)     PE 2和PE 3接收到PE 1发送的1类路由后,检查此路由中的Route Target属性与本地VPN实例配置的Import Target是否匹配。如果匹配,则接收此路由。同时向PE 1回复4类路由Leaf A-D route,该路由携带以下信息:

¡     Route Target:用于控制路由的发布和接收,配置为PE 2或者PE 3的Export Target。

¡     PMSI Tunnel attribute,用于传递隧道信息。其中,Tunnel Type字段取值为BIER隧道,并携带各自与PE 1处于相同BIER子域的BIER信息(通过PE 1发送的1类路由中获取到的Sub domain ID查找到本地相同的子域中,配置的BFR ID和BFR prefix)。

(3)     PE 1收到PE 2和PE 3发送的4类路由后,检查此路由中的Route Target属性与本地VPN实例配置的Import Target是否匹配。如果匹配,则接收此路由。将PE 2和PE 3记录为MVPN的成员。同时,根据收到的4类路由中携带的BFR ID和对应BIER子域内配置的BSL的值,计算得到SI。PE1将所有叶子的信息合并,就生成了对应的Bit String,即BIER类型的相容性隧道。

图1-1 在公网中创建相容性隧道

 

1.1.5  创建选择性隧道并进行隧道切换

当相容性隧道接收到指定(S,G)表项的组播流量时,进行选择性隧道切换,实现了不同组播流量传输的隧道分离。一个VPN实例内允许存在多个选择性隧道。

图1-2所示,创建选择性隧道并进行隧道切换的具体过程如下:

(1)     PE 1向PE 2和PE 3发送3类路由S-PMSI A-D Route,该路由携带以下信息:

¡     Route Target:用于控制路由的发布和接收,配置为PE 1的Export Target。

¡     PMSI Tunnel attribute,用于传递隧道信息。其中,Tunnel Type字段取值为BIER隧道,并携带PE 1的BIER信息(Sub domain ID、BFR ID、BFR prefix)。

(2)     PE 2和PE 3接收到PE 1发送的3类路由后,检查此路由中的Route Target属性与本地VPN实例配置的Import Target是否匹配。如果匹配,则接收此路由。如果下游存在接收者,则向PE 1回复4类路由Leaf A-D route,否则丢弃该路由。回复的4类路由携带以下信息:

¡     Route Target:用于控制路由的发布和接收,配置为PE 2或者PE 3的Export Target。

¡     PMSI Tunnel attribute,用于传递隧道信息。其中,Tunnel Type字段取值为BIER隧道,并携带各自与PE 1处于相同BIER子域的BIER信息(通过PE 1发送的1类路由中获取到的Sub domain ID查找到本地相同的子域中,配置的BFR ID和BFR prefix)。

(3)     PE 1收到PE 2和PE 3发送的4类路由后,检查此路由中的Route Target属性与本地VPN实例配置的Import Target是否匹配。如果匹配,则接收此路由。将PE 2和PE 3记录为MVPN的成员。同时,根据收到的4类路由中携带的BFR ID和对应BIER子域内配置的BSL的值,计算得到SI。PE1将所有叶子的信息合并,就生成了指定(S,G)对应的Bit String,即BIER类型的选择性隧道。

图1-2 创建选择性隧道并进行隧道切换

 

1.1.6  控制平面

NG MVPN over BIER场景下,使用BIER建立承载隧道,组播私网流量经过BIER封装后穿越公网发送到BIER子域其他各节点。

NG MVPN over BIER的控制平面包括以下特有的技术实现:

·     接收者PE信息收集

该场景中,组播源侧PE首先获知组播流量要发送给哪些接收者侧PE,然后组播源侧PE根据收到的私网组播流量封装Bit String。其中,MVPN中各PE成员的收集机制与RSVP-TE和mLDP模式下的MVPN过程类似。

·     新增BIER类型隧道属性

为了支持NG MVPN over BIER,RFC8556定义了在BGP MVPN业务中使用BIER隧道时所需要的信息,即一个BIER类型的PTA(PMSI Tunnel attribute,PMSI隧道属性)。在BGP MVPN业务使用BIER隧道时,使用上述BIER类型的PTA。其中,PTA的MPLS Label字段原本用于标识MVPN实例的上游分配标签,在基于BIER隧道的MVPN中不再使用该字段,而是使用一个新的BGP属性携带用于标识MVPN实例的IPv6源地址(组播服务源地址、src-dt4或src-dt6)。对于G-BIER,该BGP属性称为MSID(Multicast Service Identifier,组播服务ID);对于BIERv6或MSR6,该BGP属性则称为Prefix-SID 。相应的,PTA中MPLS Label字段值则被设置为0。

1. MSID属性

在MVPN over G-BIER中,新增的BGP属性MSID用来标识MVPN实例,MSID中的组播服务源地址通过组播源侧PE在1类路由Intra-AS I-PMSI A-D route中携带,通告给接收者侧PE。接收者侧PE记录该源地址与MVPN实例的对应关系。当接收侧PE收到G-BIER封装的组播报文时,会通过报文中的组播服务源地址找到相应的MVPN实例,在对应的MVPN实例中找到对应的组播转发表项,并转发组播报文。

BGP MSID属性及其内容遵循BGP属性定义的格式要求,格式如图1-3所示。

图1-3 MSID Attribute格式

 

MSID Attribute各字段的含义如下:

·     Attribute Flags:8bits,属性标识。

·     Attribute Type:8bits,属性类别字段,属性名为MSID。

·     Attribute Length:16bits,属性长度。

·     Attribute Data:可变长度,属性数据。采用无固定字段的Sub-TLV表示。

Attribute Data为无固定字段的Sub-TLV,具体格式如图1-4所示。

图1-4 Sub-TLV格式

 

Sub-TLV各字段的含义如下:

·     Sub-TLV Type:8bits,Sub-TLV类型。

·     Sub-TLV Length:16bits,Sub-TLV长度。

·     Reserved:8bits,保留字段。

·     IPv6 address:IPv6源地址。

·     sub-sub-TLV:可变长度,表示本Sub-TLV携带的sub-sub-TLV,目前仅支持Structure sub-sub-TLV。

Structure sub-sub-TLV的格式如图1-5所示。

图1-5 Structure sub-sub-TLV格式

 

Structure sub-sub-TLV各字段的含义如下:

·     sub-sub-TLV Type:8bits,sub-sub-TLV类型,取值为1,表示Structure sub-sub-TLV。

·     sub-sub-TLV Length:16bits,sub-sub--TLV长度,取值为5。

·     Flags:8bits,标志字段用于后续扩展,目前要求为0。

·     Prefix Length:8bits,前缀长度。

·     MSID Length:8bits,组播服务ID的长度。

·     Must Be Zero:16bits,保留字段。

2. Prefix-SID属性

在MVPN over BIERv6中,BGP属性Prefix-SID用来携带BIERv6隧道封装的IPv6源地址,BIERv6组播源侧PE通过在1类路由Intra-AS I-PMSI A-D route和3类路由S-PMSI A-D route中携带Prefix-SID,将隧道源地址通告给接收者侧PE。接收者侧PE收到1类和3类路由后,根据路由携带的Route Target属性匹配本地的VPN实例或公网实例,并记录路由携带的Prefix-SID与VPN实例或公网实例的对应关系。接收侧PE收到BIERv6封装的组播报文时,会根据报文中的BIERv6隧道源地址找到对应的VPN实例或公网实例,在VPN实例或公网实例对应的MVPN实例中建立组播转发表项,并转发组播报文。

BGP Prefix-SID属性及其内容遵循RFC标准定义的格式要求,格式如图1-6所示。

图1-6 BGP Prefix-SID格式

 

BGP Prefix-SID各字段的含义如下:

·     TLV Type:TLV的类型。取值为5,表示SRv6承载的是三层业务;取值为6,表示SRv6承载的是二层业务。

·     TLV Length:TLV的长度。

·     Reserved:保留字段。

·     SRv6 Service Sub-TLVs:Prefix-SID的相关业务信息,为可变长度。

SRv6 Service Sub-TLV包含如下字段:

·     SRv6 Service Sub-TLV Type:Prefix-SID业务信息的类型,固定取值为1,表示SRv6 SID Information Sub-TLV。

·     SRv6 Service Sub-TLV Length:SRv6 Service Sub-TLV的长度。

·     SRv6 Service Sub-TLV Value:SRv6 Service Sub-TLV的取值,长度可变。

类型为SRv6 SID Information Sub-TLV时,SRv6 Service Sub-TLV包含如下字段:

·     SRv6 Service Sub-TLV Type:SRv6 Service Sub-TLV的类型,固定取值为1。

·     SRv6 Service Sub-TLV Length:SRv6 SID Information Sub-TLV的长度。

·     Reserverd1:保留字段。

·     SRv6 SID Value:Prefix-SID的值。表示BIERv6隧道源地址的Src.DT4 SID和Src.DT6 SID由此字段携带。

·     SRv6 SID Flags:Prefix-SID的标记,固定取值为0。

·     SRv6 Endpoint Behavior:Prefix-SID的类型。取值0x45表示Src.DT4 SID,取值0x44表示Src.DT6 SID。

·     Reserverd2:保留字段。

1.1.7  MVPN扩展团体属性

1. MVPN扩展团体属性介绍

MVPN的扩展团体属性主要用于C-multicast路由的发布和接收,包括以下两种类型:

·     Source AS Extended Community:该属性用于标识组播源所在的AS号,用于跨域场景。

·     VRF Route Import Extended Community:该属性用于标识组播源侧PE的IP地址以及组播源所在的VPN实例。

Source AS Extended Community以及VRF Route Import Extended Community在扩展团体属性中的格式分别如图1-7图1-8所示。

图1-7 Source AS Extended Community的格式

 

Source AS Extended Community包含如下字段:

·     Type:扩展团体属性的类型,取值为0x00(表示2字节AS号类型的扩展团体属性)或0x02(表示4字节AS号类型的扩展团体属性)。

·     Sub-Type:扩展团体属性的子类型,取值为0x09,表示该扩展团体属性为Source AS Extended Communit。

·     Global Administrator:组播源所在的AS号,可以是2字节形式的AS号,也可以是4字节形式的AS号。

·     Local Administrator:取值为0,暂无特殊含义。

图1-8 VRF Route Import Extended Community的格式

 

VRF Route Import Extended Community包含如下字段:

·     Type:扩展团体属性的类型,取值为0x01(表示IPv4地址类型的扩展团体属性)或无取值(表示IPv6地址类型的扩展团体属性)。

·     Sub-Type:扩展团体属性的子类型,取值为0x0b(IPv4地址类型的扩展团体属性时的取值)或0x000b(IPv6地址类型的扩展团体属性时的取值),表示该扩展团体属性为VRF Route Import Extended Community。

·     IPv4/IPv6 address:组播源侧PE的IP地址。

·     Local Administrator:组播源所处的VPN实例。

2. MVPN扩展团体属性的工作机制

图1-9所示,PE 1和PE 2都是组播源测PE,PE 3为接收侧PE。PE 1和PE 2都与VPN 1以及公网实例的站点相连,PE 1上VPN 1的VRF Route Import Extended Community值为1.1.1.1:1;PE 1上公网实例的VRF Route Import Extended Community值为1.1.1.1:0(公网实例的VRF Route Import Extended Community中Local Administrator的值必须为0);PE 1上Source AS Extended Community的值为10:0。PE 2上VPN 1的VRF Route Import Extended Community值为2.2.2.2:1;PE 2上公网实例的VRF Route Import Extended Community值为2.2.2.2:0(公网实例的VRF Route Import Extended Community中Local Administrator的值必须为0);PE 1上Source AS Extended Community的值为10:0。

图1-9 MVPN扩展团体属性工作机制

 

PE 1和PE 2都与PE 3建立BGP MVPN地址族的BGP会话后,PE 1和PE 2都会向PE 3发布到组播源的单播路由信息,其中VPN实例的组播源单播路由信息通过BGP VPNv4或VPNv6路由携带,公网实例的组播源单播路由信息通过BGP IPv4/IPv6单播路由或BGP IPv4/IPv6组播路由携带。所有通告到组播源的单播路由信息的BGP路由均会携带Source AS Extended Community和VRF Route Import Extended Community。

PE 3接收到通告到组播源的单播路由信息的BGP路由后,会对BGP路由进行优选,然后将路由携带的Source AS Extended Community和VRF Route Import Extended Community存储下来,用于后续构造C-multicast路由。在本例中假设PE 3优选了来自PE 1的通告到VPN 1组播源的单播路由信息的BGP路由,以及优选了来自PE 2的通告到公网实例组播源的单播路由信息的BGP路由。

VPN实例VPN 1以及公网实例的C-multicast路由构造过程如下:

·     当PE 3收到来自CE 3的组播加入消息后,会构造C-multicast路由,然后向PE 1和PE 2发送,这个路由的Source AS字段为收到的Source AS Extended Community中的AS号,路由携带的Route Target属性为BGP优选路由的VRF Route Import Extended Community,即1.1.1.1:1。

¡     PE 1收到C-multicast路由后,对比C-multicast路由RT属性中携带的IP地址,发现是1.1.1.1,即本地的源接口地址,接收C-multicast路由。随即PE 1根据RT属性中的Local Administrator确定C-multicast路由属于VPN实例VPN 1,将C-multicast路由添加到VPN 1的组播路由表中。

¡     PE 2收到C-multicast路由后,对比C-multicast路由RT属性中携带的IP地址,发现是1.1.1.1,不是本地的源接口地址,丢弃C-multicast路由。

后续处于VPN 1的组播源发送组播报文时,由于仅PE 1形成了组播表项,组播报文会在PE 1进行BIER封装后通过BIER公网隧道发送到PE 3,在PE 3上进行解封装后转发到CE 3。

·     当PE 3收到来自CE 4的组播加入消息后,会构造C-multicast路由,然后向PE 1和PE 2发送,这个路由的Source AS字段为收到的Source AS Extended Community中的AS号,路由携带的Route Target属性为BGP优选路由的VRF Route Import Extended Community,即2.2.2.2:0。

¡     PE 2收到C-multicast路由后,对比C-multicast路由RT属性中携带的IP地址,发现是2.2.2.2,即本地的源接口地址,接收C-multicast路由。随即PE 2根据RT属性中的Local Administrator确定C-multicast路由属于公网实例,将C-multicast路由添加到公网实例的组播路由表中。

¡     PE 1收到C-multicast路由后,对比C-multicast路由RT属性中携带的IP地址,发现是2.2.2.2,不是本地的源接口地址,丢弃C-multicast路由。

后续处于公网实例的组播源发送组播报文时,由于仅PE 2形成了组播表项,组播报文会在PE 2进行BIER封装后通过BIER公网隧道发送到PE 3,在PE 3上进行解封装后转发到CE 4。

1.1.8  跨AS的BIER模式MVPN

在实际组网应用中,当一个VPN跨越多个AS(Autonomous System,自治系统)时,需要连通其分布在不同AS内的Site,这种VPN跨越多个AS的应用方式被称为跨域VPN。跨域VPN的解决方案包括(详细介绍请参见“MPLS配置指导”中的“MPLS L3VPN”):

·     ASBR之间建立VRF-to-VRF连接,也称为A类跨AS。

·     ASBR之间通过MP-EBGP发布VPN-IPv4路由,也称为B类跨AS。

·     PE之间通过MP-EBGP发布VPN-IPv4路由,也称为C类跨AS。

1. A类跨AS的BIER模式MVPN

图1-10所示,VPN跨越了AS 100和AS 200两个自治系统,PE 3和PE 4分别是AS 100和AS 200的ASBR。PE 3和PE 4通过各自的VPN实例相连,并互把对方视为CE设备。

图1-10 A类跨AS的BIER模式MVPN示意图

 

采用本方式时,需在每个AS内各建立一个独立的MVPN,在各MVPN之间实现私网组播数据跨AS的传输。跨AS传输私网组播数据的过程如下:

(1)     ‍由于PE 3与PE 4互把对方视为自己的CE,因此:在AS 100中,CE 1与PE 4(相当于PE 3的CE)之间可以互通组播业务;在AS 200中,CE 2与PE 3(相当于PE 4的CE)之间也可以互通组播业务。

(2)     CE 1发出VPN 1的私网组播协议和数据报文在PE 1上经过MPLS封装后通过BIER Tunnel1到达PE 3,PE 3解封装后通过普通三层组播转发到达PE 4,该报文被PE 4视为与自己私网接口相连的VPN 2的私网报文,于是将其通过BIER Tunnel2转发给CE 2;CE 2发出的VPN 2的报文也同理到达CE 1。这样,就实现了私网组播数据在CE 1与CE 2之间的互通。

说明

A类跨域域间无法互相学习通告激活组播源的自动发现路由(Source Active A-D route),所以必须在RP间配置MSDP或anycast-RP用于域间传递组播源信息。

 

2. C类跨AS的BIER模式MVPN

当前仅G-BIER与MSR6支持C类跨AS的BIER模式MVPN。

图1-11所示,VPN跨越了AS 100和AS 200两个自治系统,PE 3和PE 4分别是AS 100和AS 200的ASBR。PE 3和PE 4通过MP-EBGP相连,并互把对方视为P设备。在此组网中,不同AS的PE之间建立多跳MP-EBGP会话,并通过该会话直接在PE之间发布VPN-IPv4路由。

图1-11 C类跨AS的BIER模式MVPN示意图

 

采用本方式时,只需在所有AS内统一建立一个MVPN即可,在该MVPN内实现私网组播数据跨AS的传输。跨AS传输私网组播数据的过程如下:

(1)     ‍CE 1收到组播流量后,如果域内RP为PE 1,则发送注册报文到PE 1;如果RP为CE 1或者CE 2,需要通过建立MSDP或者Anycast-RP将组播源信息发送到PE 1。不管哪种方式,当PE 1发现组播源信息后,发送source-active A-D route通告组播源,该路由可以通过BGP直接发送给PE 2。

(2)     PE 2上收到source-active A-D route后,检查本AS域内是否存在组播接收者信息,如果存在接收者,向上游发送C-Multicast Route加入,该路由可以通过BGP直接传递到PE 1。

(3)     PE 1收到C-Multicast Route后,将组播流量封装MPLS标签后通过BIER Tunnel发送到PE 2,在PE 2上进行解封装后转发到私网侧。

1.1.9  协议规范

·     RFC8279 Multicast Using Bit Index Explicit Replication (BIER)

·     RFC8296 Encapsulation for Bit Index Explicit Replication (BIER) in MPLS and Non-MPLS Networks

·     RFC8401 Bit Index Explicit Replication (BIER) Support via IS-IS

·     RFC8444 OSPFv2 Extensions for Bit Index Explicit Replication (BIER)

·     RFC8556 Multicast VPN Using Bit Index Explicit Replication (BIER)

·     RFC9272 Underlay Path Calculation Algorithm and Constraints for Bit Index Explicit Replication (BIER)

·     draft-xie-bier-ipv6-encapsulation

·     draft-cheng-msr6-design-consideration

·     draft-lx-msr6-rgb-segment

1.2  BIER模式MVPN配置限制和指导

本功能仅在下表所列单板上配置生效。

表1-1 单板信息一览表

单板类型

单板丝印

CEPC单板

CEPC-CQ8L、CEPC-CQ8LA、CEPC-CQ8L1A、CEPC-CQ8L3A、CEPC-CQ16L1、CEPC-DQ2L1-G

CSPEX单板

CSPEX-1502XA、CSPEX-1802X、CSPEX-1802XA、CSPEX-1812X-E、CSPEX-2304X-G、CSPEX-2304X-LG、CSPEX-2612XA、CSPEX-2612X3A

SPE单板

RX-SPE200-E

 

1.3  BIER模式MVPN配置任务简介

BIER模式MVPN功能均在PE上配置。配置BIER模式MVPN任务如下:

(1)     使能VPN实例中的IP组播路由

(2)     配置BGP MVPN路由交互

¡     配置BGP IPv4 MVPN路由交互

¡     配置BGP IPv6 MVPN路由交互

(3)     配置BGP路由扩展团体属性

¡     允许向发送给BGP对等体的路由增加特定的扩展团体属性

¡     开启IPv6地址类型的扩展团体属性兼容功能

(4)     创建BIER模式MVPN实例

(5)     创建MVPN地址族

(6)     指定MVPN源接口

(7)     配置MVPN支持IPv6 Underlay功能

(8)     配置封装的IPv6源地址

¡     配置G-BIER组播服务前缀信息

¡     配置G-BIER隧道头端节点的组播服务源地址

¡     配置BIERv6或MSR6隧道头端节点的源地址

(9)     配置相容性隧道和选择性隧道

¡     创建相容性隧道

¡     (可选)创建选择性隧道

¡     (可选)配置隧道切换的延迟时间

(10)     (可选)配置跨AS域自动发现功能

(11)     (可选)配置BIER FRR功能

(12)     (可选)配置组播温备功能

¡     开启组播温备功能

¡     (可选)配置基于(S,G)表项选择主用IDF

1.4  配置准备

在配置BIER模式MVPN之前,需完成以下任务:

·     在公网中配置任一单播路由协议。

·     在公网中配置MPLS LDP或SRv6。

·     在公网中完成BIER功能相关配置。

·     配置BGP协议,使得PE与PE之间两两建立邻居关系。

1.5  使能VPN实例中的IP组播路由

(1)     进入系统视图。

system-view

(2)     进入VPN实例视图。

ip vpn-instance vpn-instance-name

本命令的具体介绍请参见“MPLS命令参考”中的“MPLS L3VPN”。

(3)     配置VPN实例的RD。

route-distinguisher route-distinguisher

本命令的具体介绍请参见“MPLS命令参考”中的“MPLS L3VPN”。

(4)     退回系统视图。

quit

(5)     进入接口视图。

interface interface-type interface-number

(6)     配置接口与指定的VPN实例关联。

ip binding vpn-instance vpn-instance-name

缺省情况下,接口未关联VPN实例,接口属于公网。

本命令请参见“MPLS命令参考”中的“MPLS L3VPN”。

(7)     退回系统视图。

quit

(8)     使能VPN实例中的组播路由,并进入该VPN实例的MRIB视图。

(IPv4网络)

multicast routing vpn-instance vpn-instance-name

缺省情况下,IP组播路由处于关闭状态。

本命令的具体介绍请参见“IP组播命令参考”中的“组播路由与转发”。

 

1.6  配置BGP MVPN路由交互

1.6.1  配置BGP IPv4 MVPN路由交互

(1)     进入系统视图。

system-view

(2)     启动指定的BGP实例,并进入BGP实例视图。

bgp as-number [ instance instance-name ]

(3)     创建BGP MVPN对等体,并指定对等体的AS号。

peer ipv6-address as-number as-number

(4)     创建并进入BGP IPv4 MVPN地址族视图。

address-family ipv4 mvpn

(5)     允许本地路由器与指定对等体交换BGP IPv4 MVPN路由信息。

peer ipv6-address enable

缺省情况下,本地路由器不能与对等体交换BGP IPv4 MVPN路由信息。

本命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

(6)     (可选)设置允许从指定对等体/对等体组收到的路由数量。

peer { group-name | ipv6-address [ prefix-length ] } route-limit prefix-number [ { alert-only | discard | reconnect reconnect-time } | percentage-value ] *

缺省情况下,不限制从对等体/对等体组接收的路由数量。

(7)     (可选)配置BGP Add-Path功能。

a.     配置Add-Path功能。

peer { group-name | ipv6-address [ prefix-length ] } additional-paths { receive | send } *

缺省情况下,未配置Add-Path功能。

b.     配置向指定对等体/对等体组发送的Add-Path优选路由的最大条数。

peer { group-name | ipv6-address [ prefix-length ] } advertise additional-paths best number

缺省情况下,向指定对等体/对等体组发送的Add-Path优选路由的最大条数为1。

c.     配置Add-Path优选路由的最大条数。

additional-paths select-best best-number

缺省情况下,Add-Path优选路由的最大条数为1。

本步骤相关命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

(8)     (可选)配置向对等体/对等体组发布团体属性或Large团体属性。

¡     配置向对等体/对等体组发布团体属性。

peer { group-name | ipv6-address [ prefix-length ] } advertise-community

缺省情况下,不向对等体/对等体组发布团体属性。

¡     配置向对等体/对等体组发布Large团体属性。

peer { group-name | ipv6-address [ prefix-length ] } advertise-large-community

缺省情况下,不向对等体/对等体组发布Large团体属性。

本步骤相关命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

(9)     (可选)关闭BGP IPv4 MVPN路由的VPN-Target过滤功能。

undo policy vpn-target

缺省情况下,PE对接收到的BGP IPv4 MVPN路由进行VPN-Target过滤。

(10)     (可选)配置BGP路由延迟优选。

route-select delay delay-value

缺省情况下,延迟时间为0秒,即路由优选不延迟。

本命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

(11)     (可选)为指定对等体/对等体组设置高优先级,路由选路时优选从该对等体/对等体组学习到的路由。

peer { group-name | ipv6-address [ prefix-length ] } high-priority [ preferred ]

缺省情况下,BGP不为指定对等体/对等体组设置高优先级,选路规则不发生变化。

关于本命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

1.6.2  配置BGP IPv6 MVPN路由交互

(1)     进入系统视图。

system-view

(2)     启动指定的BGP实例,并进入BGP实例视图。

bgp as-number [ instance instance-name ]

(3)     创建BGP MVPN对等体,并指定对等体的AS号。

peer ipv6-address as-number as-number

(4)     创建并进入BGP IPv6 MVPN地址族视图。

address-family ipv6 mvpn

(5)     允许本地路由器与指定对等体交换BGP IPv6 MVPN路由信息。

peer ipv6-address enable

缺省情况下,本地路由器不能与对等体交换BGP IPv6 MVPN路由信息。

(6)     (可选)设置允许从指定对等体/对等体组收到的路由数量。

peer { group-name | ipv6-address [ prefix-length ] } route-limit prefix-number [ { alert-only | discard | reconnect reconnect-time } | percentage-value ] *

缺省情况下,不限制从对等体/对等体组接收的路由数量。

(7)     (可选)配置BGP Add-Path功能。

a.     配置Add-Path功能。

peer { group-name | ipv6-address [ prefix-length ] } additional-paths { receive | send } *

缺省情况下,未配置Add-Path功能。

b.     配置向指定对等体/对等体组发送的Add-Path优选路由的最大条数。

peer { group-name | ipv6-address [ prefix-length ] } advertise additional-paths best number

缺省情况下,向指定对等体/对等体组发送的Add-Path优选路由的最大条数为1。

c.     配置Add-Path优选路由的最大条数。

additional-paths select-best best-number

缺省情况下,Add-Path优选路由的最大条数为1。

本步骤相关命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

(8)     (可选)配置向对等体/对等体组发布团体属性或Large团体属性。

¡     配置向对等体/对等体组发布团体属性。

peer { group-name | ipv6-address [ prefix-length ] } advertise-community

缺省情况下,不向对等体/对等体组发布团体属性。

¡     配置向对等体/对等体组发布Large团体属性。

peer { group-name | ipv6-address [ prefix-length ] } advertise-large-community

缺省情况下,不向对等体/对等体组发布Large团体属性。

本步骤相关命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

(9)     (可选)关闭BGP IPv6 MVPN路由的VPN-Target过滤功能。

undo policy vpn-target

缺省情况下,PE对接收到的BGP IPv6 MVPN路由进行VPN-Target过滤。

(10)     (可选)配置BGP路由延迟优选。

route-select delay delay-value

缺省情况下,延迟时间为0秒,即路由优选不延迟。

本命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

(11)     (可选)为指定对等体/对等体组设置高优先级,路由选路时优选从该对等体/对等体组学习到的路由。

peer { group-name | ipv6-address [ prefix-length ] } high-priority [ preferred ]

缺省情况下,BGP不为指定对等体/对等体组设置高优先级,选路规则不发生变化。

关于本命令的详细介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

1.7  配置BGP路由扩展团体属性

1.8  允许向发送给BGP对等体的路由增加特定的扩展团体属性

1. 功能简介

执行本配置后,本设备向发送给对等体的BGP路由增加Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性:

·     Source AS Extended Community属性携带本地BGP自治系统号信息,取值为MVPN组播源的AS号,格式为32位自治系统号:0,例如:100:0。

·     VRF Route Import Extended Community属性携带本地源地址标识和BGP 路由所属的VPN实例信息,格式为32位或128位源地址标识:VPN实例索引,例如:192.168.122.15:1。

·     IDF Negotiation Community属性为IDF协商属性,如果建立起BGP会话的对等体双方都收到了来自对方的携带IDF Negotiation Community属性的路由,则这两台设备开始协商选举出主用IDF和备用IDF。IDF Negotiation Community属性的取值为0x0000ffff。需要注意的是,只有通过warm-root-standby命令开启了组播温备功能时,设备才能为路由添加IDF Negotiation Community属性,否则只能为路由添加Source AS Extended Community和VRF Route Import Extended Community属性。

在组播VPN网络中,组播源侧PE需要向其他PE发布本地产生的Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性,发布方式为将这些属性携带在来自私网CE的路由中,发布给骨干公网中的其他PE,以协助组播表项顺利建立以及IDF的选举。但当PE创建的MVPN属于公网实例时,PE和CE都位于公网,组播源侧PE无法自动区分要为哪些路由携带Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性。

因此,需要通过本功能在组播源侧PE上手动指定CE,以帮助组播源侧PE识别需要为哪些路由携带Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性的路由。

在纯公网场景中,执行peer mvpn-rt-import命令和mvpn-advertise-rt-import命令后,设备将为从指定对等体/对等体组接收到的BGP路由添加Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性。并且设备可以将添加属性后的路由发布给对等体。

2. 配置限制和指导

·     组播源和组播接收者位于公网时,如果MVPN支持IPv6 Underlay功能处于开启状态,请在BGP IPv6单播地址族视图或BGP IPv6组播地址族视图下配置本功能;如果MVPN支持IPv6 Underlay功能处于关闭状态,请在BGP IPv4单播地址族视图或BGP IPv4组播地址族视图下配置本功能。

·     组播源和组播接收者位于私网时,请在BGP VPNv4地址族视图、BGP VPNv6地址族视图或BGP EVPN地址族视图下配置本功能。

·     在BGP IPv4单播地址族视图和BGP IPv4组播地址族视图下配置本功能的效果一致,在BGP IPv6单播地址族视图和BGP IPv6组播地址族视图下配置本功能的效果一致。

·     建立了BGP IPv4 MVPN对等体后,BGP IPv4单播地址族视图、BGP IPv4组播地址族视图以及BGP VPNv4地址族视图下配置的本功能才能生效。

·     建立了BGP IPv6 MVPN对等体后,BGP IPv6单播地址族视图、BGP IPv6组播地址族视图以及BGP VPNv6地址族视图下配置的本功能才能生效。

·     在BGP IPv4单播地址族视图、BGP IPv4组播地址族视图、BGP IPv6单播地址族视图以及BGP IPv6组播地址族视图下配置本命令后,发布的BGP路由中携带的VPN实例索引为0。若通过source命令配置了MVPN源接口,则源地址使用MPVN源接口地址,否则使用本地BGP实例的Router ID。这两个属性用来标识生成这条路由的设备。

·     执行peer mvpn-rt-import命令后,如果设备从指定对等体/对等体组收到的路由中,原本就携带了Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性,则设备不会为路由重复添加这三个属性,也不会修改这三个属性。

·     执行undo peer mvpn-rt-import命令后,设备不会再为从指定对等体/对等体组收到的路由添加Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性,并且会删除本地已经为路由添加的这些属性。

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     启动指定的BGP实例,并进入BGP实例视图。

bgp as-number [ instance instance-name ]

(3)     进入BGP VPNv4地址族视图、BGP VPNv6地址族视图、BGP EVPN地址族视图、BGP IPv4单播地址族视图、BGP IPv4组播地址族视图、BGP IPv6单播地址族视图或BGP IPv6组播地址族视图。

¡     进入BGP VPNv4地址族视图。

address-family vpnv4

¡     进入BGP VPNv6地址族视图。

address-family vpnv6

¡     进入BGP EVPN地址族视图。

address-family l2vpn evpn

¡     进入BGP IPv4单播地址族视图。

address-family ipv4 [ unicast ]

¡     进入BGP IPv4组播地址族视图。

address-family ipv4 multicast

¡     进入BGP IPv6单播地址族视图。

address-family ipv6 [ unicast ]

¡     进入BGP IPv6组播地址族视图。

address-family ipv6 multicast

(4)     允许向BGP对等体发送的路由增加Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性。

mvpn-advertise-rt-import

缺省情况下,禁止向 BGP对等体发送的路由携带Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性。

(5)     (可选)为从对等体/对等体组接收到的路由添加Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Community属性。

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } mvpn-rt-import

缺省情况下,不为从等体/对等体组接收到的路由添加Source AS Extended Community、VRF Route Import Extended Community和IDF Negotiation Communit属性。

仅BGP IPv4单播地址族视图、BGP IPv4组播地址族视图、BGP IPv6单播地址族视图以及BGP IPv6组播地址族视图支持本命令。

1.9  开启IPv6地址类型的扩展团体属性兼容功能

1. 功能简介

目前,IANA为IPv6地址类型的VRF Route Import Extended Community和Route Target扩展团体属性规定的类型值分别为0x000b和0x0002,H3C设备按照该标准为BGP路由携带扩展团体属性。一些厂商对VRF Route Import Extended Community和Route Target扩展团体属性的发送、识别类型值定义为0x010b和0x0102,无法与H3C设备互通。

开启IPv6地址类型的扩展团体属性兼容功能后,BGP将修改发送路由携带的VRF Route Import Extended Community和Route Target扩展团体属性的类型值,将其修改为0x010b和0x0102;BGP还会将修改接收路由携带的VRF Route Import Extended Community和Route Target扩展团体属性的类型值,将其修改为0x000b和0x0002,以实现同其他厂商设备的互通。

2. 配置限制和指导

配置了ipv6 underlay enable命令后,设备才会发送IPv6地址类型的扩展团体属性,本功能才能生效。

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     启动指定的BGP实例,并进入BGP实例视图。

bgp as-number [ instance instance-name ]

(3)     进入BGP VPNv4地址族视图、BGP VPNv6地址族视图、BGP IPv4单播地址族视图、BGP IPv4组播地址族视图、BGP IPv6单播地址族视图、BGP IPv6组播地址族视图、BGP IPv4 MVPN地址族视图或BGP IPv6 MVPN地址族视图。

¡     进入BGP VPNv4地址族视图。

address-family vpnv4

¡     进入BGP VPNv6地址族视图。

address-family vpnv6

¡     进入BGP IPv4单播地址族视图。

address-family ipv4 [ unicast ]

¡     进入BGP IPv4组播地址族视图。

address-family ipv4 multicast

¡     进入BGP IPv6单播地址族视图。

address-family ipv6 [ unicast ]

¡     进入BGP IPv6组播地址族视图。

address-family ipv6 multicast

¡     进入BGP IPv4 MVPN地址族视图。

address-family ipv4 mvpn

¡     进入BGP IPv6 MVPN地址族视图。

address-family ipv6 mvpn

(4)     开启IPv6地址类型的扩展团体属性兼容功能。

peer { group-name | ipv4-address [ mask-length ] | ipv6-address [ prefix-length ] } mvpn-ipv6-rt-compatible

缺省情况下,IPv6地址类型的扩展团体属性兼容功能处于关闭状态。

1.10  创建BIER模式MVPN实例

1. 功能简介

可以在PE上创建一个或多个BIER模式MVPN实例,来为不同的VPN或者公网提供服务。

公网实例可以看作是特殊的VPN实例,通过公网实例在BIER模式的MVPN中,实现PE转发公网的三层组播流量。即公网组播流量可以通过BIER隧道进行转发。

2. 配置步骤

(1)     进入系统视图。

system-view

(2)     创建BIER模式MVPN实例并进入MVPN视图。

¡     创建VPN实例的MVPN,并进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

缺省情况下,VPN实例不存在对应的MVPN。

¡     创建公网实例的MVPN,并进入MVPN视图。

multicast-vpn public-instance mode bier

缺省情况下,公网实例不存在对应的MVPN。

1.11  创建MVPN地址族

1. 配置限制和指导

MVPN IPv4地址族视图下配置的命令,都是只针对IPv4组播有效。

MVPN IPv6地址族视图下配置的命令,都是只针对IPv6组播有效。

2. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

1.12  指定MVPN源接口

1. 功能简介

组播源侧PE和接收者侧PE之间通过BGP报文中携带的1类路由Intra-AS I-PMSI A-D Route和4类路由Leaf A-D Route传递MVPN源接口信息,用于标识本节点。

2. 配置限制和指导

MVPN IPv4地址族视图和MVPN IPv6地址族视图下面指定的源接口需要保持一致。

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     指定MVPN源接口。

source interface-type interface-number

缺省情况下,未指定MVPN源接口。

1.13  配置MVPN支持IPv6 Underlay功能

1. 功能简介

缺省情况下,BGP MVPN路由中携带的Originating router's IP address(发送BGP MVPN路由的源设备的IP地址)和VRF Route Import Extended Community属性携带的Router ID均为IPv4地址。在与其他厂商设备互通时,若其他厂商设备发送的BGP MVPN路由中,这两个地址为IPv6地址,则会导致BGP MVPN路由交互失败。开启本功能后,设备发送的BGP MVPN路由中这两个地址将为MVPN源接口的IPv6地址,可以识别和接受IPv6地址的BGP MVPN路由。

2. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(3)     配置MVPN支持IPv6 Underlay功能。

ipv6 underlay enable

缺省情况下,MVPN支持IPv6 Underlay功能处于关闭状态。

1.14  配置封装的IPv6源地址

1.14.1  配置G-BIER组播服务前缀信息

1. 功能简介

在BIER模式MVPN中,需要为每一个组播源侧PE规划一个组播服务前缀,组播源侧PE根据组播服务前缀地址和长度、组播服务ID值(通过tunnel-source命令进行配置)和ID的长度计算出一个组播服务源地址,该地址可以用来标识不同的MVPN实例。组播源侧PE在对组播报文进行G-BIER封装时,采用组播服务源地址作为封装的IPv6源地址。在公网组播报文转发过程中,该源地址保持不变。

2. 配置限制和指导

不同的PE配置的组播服务前缀地址不能重复,且不能与设备上已存在的IPv6地址相同。配置完成后,请通过display multicast-service-prefix configuration命令确认组播服务前缀是否下发成功。

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     配置组播服务前缀信息。

multicast-service-prefix prefix-name ipv6-prefix ipv6-address prefix-length service-id-length id-length

缺省情况下,不存在组播服务前缀信息

1.14.2  配置G-BIER隧道头端节点的组播服务源地址

1. 功能简介

组播源侧PE在对组播报文进行G-BIER封装时,采用组播服务源地址作为封装的IPv6源地址。在公网组播报文转发过程中,该源地址保持不变。

组播服务源地址根据组播服务前缀地址和长度、组播服务ID值和ID的长度计算得出,其中组播服务前缀地址和长度、组播服务ID的长度通过multicast-service-prefix命令配置。

2. 配置限制和指导

同一个MVPN地址族下,只能配置一个组播服务源地址。以便实现组播服务源地址与MVPN实例一一绑定。

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     配置BIER隧道头端节点的组播服务源地址。

tunnel-source multicast-service-prefix prefix-name service-id id-number

缺省情况下,不存在组播服务源地址

1.14.3  配置BIERv6或MSR6隧道头端节点的源地址

1. 功能简介

组播源侧PE在对组播报文进行BIERv6或MSR6封装时,采用BIERv6或MSR6隧道源地址作为封装的IPv6源地址。在公网组播报文转发过程中,该源地址保持不变。

组播源侧PE可以在1类路由(Intra-AS I-PMSI A-D route)和3类路由(S-PMSI A-D route)中携带SID,该SID即为隧道源地址,可用于BIERv6或MSR6封装类型的BIER模式MVPN。

接收者侧PE收到1类和3类路由后,根据路由携带的Route Targe属性匹配本地的VPN实例或公网实例,并记录路由携带的SID与VPN实例或公网实例的对应关系。接收侧PE收到BIERv6或MSR6封装的组播报文时,会根据报文中的BIERv6或MSR6隧道源地址找到对应的VPN实例或公网实例,在VPN实例或公网实例对应的MVPN实例中建立组播转发表项,并转发组播报文。

2. 配置限制和指导

指定的Locator段的配置中必须指定静态段长度(即static static-length参数),否则sid ipv6-address指定的地址配置不生效。

指定的组播服务源地址,必须在指定的Locator的静态SRv6 SID起始值和静态SRv6 SID结束值之间,否则配置不生效。Locator的静态SRv6 SID起始值和静态SRv6 SID结束值可以通过display segment-routing ipv6 locator命令中的“Static SID start”和“Static SID end”字段查看。有关display segment-routing ipv6 locator命令的详细介绍,请参见“Segment Routing命令参考”中的“SRv6”。

同一个MVPN地址族下,只能配置一个BIERv6或MSR6隧道源地址,以便实现隧道源地址与MVPN实例一一绑定。

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     配置BIERv6隧道的源地址。

¡     配置IPv4组播VPN中BIERv6隧道的源地址。

src-dt4 locator locator-name sid ipv6-address

缺省情况下,未配置IPv4组播VPN中BIERv6隧道的源地址。

本命令仅在MVPN IPv4地址族视图下支持。

¡     配置IPv6组播VPN中BIERv6隧道的源地址。

src-dt6 locator locator-name sid ipv6-address

缺省情况下,未配置IPv6组播VPN中BIERv6隧道的源地址。

本命令仅在MVPN IPv6地址族视图下支持。

(5)     退回系统视图。

quit

quit

(6)     进入BGP实例视图。

bgp as-number [ instance instance-name ]

(7)     进入BGP IPv4 MVPN地址族视图或BGP IPv6 MVPN地址族视图。

¡     进入BGP IPv4 MVPN地址族视图。

address-family ipv4 mvpn

¡     进入BGP IPv6 MVPN地址族视图。

address-family ipv6 mvpn

(8)     配置设备可以向指定IPv6对等体发送携带SID信息的路由。

peer { group-name | ipv6-address [ prefix-length ] } prefix-sid

缺省情况下,设备不能向IPv6对等体发送携带SID信息的路由。

1.15  配置相容性隧道和选择性隧道

1.15.1  创建相容性隧道

1. 配置限制和指导

创建相容性隧道后,无论是否有组播流量,相容性隧道会一直存在。

一个VPN实例对应一个相容性隧道,不同VPN实例之间的相容性隧道相互独立且不能相同。

2. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     创建相容性隧道并配置为动态模式。

inclusive-tunnel dynamic [ sub-domain sub-domain-id ] [ bsl bsl-value ]

缺省情况下,不存在相容性隧道。

1.15.2  创建选择性隧道

1. 功能简介

组播流量首先通过相容性隧道传输,在指定VPN实例下创建选择性隧道后,符合条件的组播流量切换到选择性隧道传输。

2. 配置限制和指导

有组播流量且组播流量已经通过相容性隧道传送后,才会创建选择性隧道。

多条组播流量可以共用一条选择性隧道。

一个VPN实例内会创建多条选择性隧道,选择性隧道之间相互独立。

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     创建选择性隧道并设置为动态模式。

¡     MVPN IPv4地址族视图:

selective-tunnel dynamic [ acl { ipv4-acl-number | name ipv4-acl-name } ] [ threshold threshold-value ] [ sub-domain sub-domain-id ] [ bsl bsl-value ] [ tunnel-limit number ]

¡     MVPN IPv6地址族视图:

selective-tunnel dynamic [ acl { ipv6-acl-number | name ipv6-acl-name } ] [ threshold threshold-value ] [ sub-domain sub-domain-id ] [ bsl bsl-value ] [ tunnel-limit number ]

缺省情况下,不存在选择性隧道。

1.15.3  配置隧道切换的延迟时间

1. 功能简介

当选择性隧道创建成功后,为了避免特定的组播流量在切换隧道过程中的丢失,可以配置延迟一段时间后才将组播流量从相容性隧道切换到选择性隧道。

2. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     设置由相容性隧道向选择性隧道切换的延迟时间。

selective-tunnel delay delay

缺省情况下,由相容性隧道向选择性隧道切换的延迟时间为3秒。

1.16  配置跨AS域自动发现功能

1. 功能简介

在跨AS域的使用场景下,可以使用该功能在组播源侧PE上开启跨AS的自动发现功能。

配置该命令后,组播发送给BGP模块的Intra-AS AD路由和S-PMSI AD路由不再携带No-Export属性,从而使路由可以被发送到跨AS域的设备上进行自动发现。

2. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     使能跨AS域的自动发现功能。

auto-discovery inter-as

缺省情况下,跨AS域自动发现功能处于关闭状态。

1.17  配置BIER FRR功能

1. 功能简介

在组播VPN中,当组播源侧PE发生故障时,用户组播业务将出现中断。只有在单播路由收敛后,组播业务才能恢复。但是,单播路由收敛时间长,远远不能满足实时性要求高的组播业务的需求。组播FRR功能可以用来解决上述问题。

组播源通过两个PE(PE 1和PE 2)接入公网,分别形成以PE 1和PE 2为根、接收者侧PE为叶子的两条BIER隧道。接收者侧PE根据路由优选策略选择主备隧道。在链路正常的情况下,组播数据流量沿主备隧道同时转发。接收者侧PE会选择接收主隧道的组播数据流量,丢弃备隧道的组播数据流量。在接收者侧PE上配置组播FRR功能后,接收者侧PE将为同一个(S,G)表项保存主备两个入接口,并周期性检测主备入接口的组播流量。如果检测到组播流量未从主入接口到达,则表示主隧道存在故障,此时接收者侧PE将选择接收从备份隧道发来的组播流量,从而大幅提高组播业务收敛速度,提高可靠性。

2. 配置限制和指导

本功能可以在MVPN地址族视图下或BGP地址族视图下配置。如果组播源以及接收者位于公网,请在BGP地址族视图下配置本功能;如果组播源以及接收者位于私网,请在MVPN地址族视图下配置本功能。

3. 配置步骤(在MVPN地址族视图下配置)

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     配置私网FRR功能。

c-multicast frr [ acl-number | name acl-name ]

缺省情况下,私网组播FRR功能处于关闭状态。

4. 配置步骤(在BGP地址族视图下配置)

(1)     进入系统视图。

system-view

(2)     进入BGP实例视图。

bgp as-number [ instance instance-name ]

(3)     进入BGP IPv4组播地址族或BGP IPv6组播地址族。

¡     进入BGP IPv4组播地址族。

address-family ipv4 multicast

¡     进入BGP IPv6组播地址族。

address-family ipv6 multicast

(4)     配置公网FRR功能。

pic

缺省情况下,BGP快速重路由功能处于关闭状态。

1.18  配置组播温备功能

1.18.1  开启组播温备功能

1. 功能简介

在组播VPN中,当组播源侧PE发生故障时,组播业务将出现中断。只有在单播路由收敛后,组播业务才能恢复。但是,单播路由收敛时间长,远远不能满足实时性要求高的组播业务的需求。

在组网中部署两台组播源侧PE,并通过本命令在两台组播源侧PE及对应接收者侧PE上开启组播温备功能可以解决上述问题。

图1-12所示,组播源通过两个PE(PE 1和PE 2)接入公网,接收者侧PE同时向PE 1和PE 2发送组播加入请求,分别形成以PE 1和PE 2为根、接收者侧PE(PE 3)为叶子的两条BIER隧道。

在任一时刻仅有一个组播源侧PE负责向接收者侧PE发送组播流量。在链路正常的情况下,负责向接收者侧发送组播流量的组播源侧PE称为主用IDF(Ingress Designated Forwarder,入口指定转发器),另一组播源侧PE设备称为备用IDF。当主用IDF故障之后,备用IDF接替主用IDF角色负责向接收者侧PE发送组播流量。

图1-12 组播温备示意图

 

2. 配置限制和指导

·     仅BIER模式的组播VPN支持本命令。

·     组播温备功能和FRR功能互斥,同一MVPN不能同时配置。

·     组播温备功能和组播流量负载分担功能互斥,同一MVPN不能同时配置。关于组播流量负载分担功能的详细介绍,请参见“IP组播命令参考”中的load-splitting命令。

·     由于温备功能通过周期性检测流量的方式判断链路故障,此功能仅适用于持续、大速率转发组播流量的场景。否则可能会因为没有检测到流量,导致备用IDF无法接替主用IDF转发流量。

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     进入MVPN视图。

multicast-vpn vpn-instance vpn-instance-name mode bier

(3)     进入MVPN地址族视图。

(IPv4网络)

address-family ipv4

(IPv6网络)

address-family ipv6

(4)     开启组播温备功能。

warm-root-standby [ acl-number | name acl-name ]

缺省情况下,组播温备功能处于关闭状态。

1.18.2  配置基于(S,G)表项选择主用IDF

1. 功能简介

组播源通过两个PE(PE 1和PE 2)接入公网,分别形成以PE 1和PE 2为根、接收者侧PE为叶子的两条BIER隧道。开启组播温备功能后,可以通过本命令设置选择主用IDF的方法。

IDF选举规则分为两类:

·     基于MVPN实例选择主用IDF:系统将选择源地址更小的BIER隧道作为主用隧道,即选择该隧道的根为主用IDF。

·     基于(S,G)表项选择主用IDF:系统将通过特定哈希函数,对BIER隧道源地址、组播源的地址S、组播组的地址G进行哈希计算,并选择哈希计算结果更小的BIER隧道作为主用隧道,即选择该隧道的根为主用IDF。

2. 配置限制和指导

·     在配置本功能前,请先通过warm-root-standby命令开启组播温备功能。

·     可通过以下命令配置BIER隧道的源地址:

¡     G-BIER隧道头端节点的组播服务源地址:tunnel-source

¡     IPv4组播VPN中BIERv6或MSR6隧道的源地址:src-dt4 locator

¡     IPv6组播VPN中BIERv6或MSR6隧道的源地址:src-dt6 locator

3. 配置步骤

(1)     进入系统视图。

system-view

(2)     配置基于(S,G)表项选择主用IDF。

multicast-vpn idf-selection source-group

缺省情况下,基于MVPN实例选择主用IDF。

 

1.19  BIER模式MVPN显示和维护

在完成上述配置后,在任意视图下执行display命令可以显示配置后组播VPN的运行情况,通过查看显示信息验证配置的效果。

在用户视图下执行reset命令可以复位MVPN地址族下的BGP会话。

表1-2 BIER模式MVPN显示和维护

操作

命令

显示BGP MVPN对等体组的信息

display bgp [ instance instance-name ] group ipv4 mvpn [ group-name group-name ]

display bgp [ instance instance-name ] group ipv6 mvpn [ group-name group-name ]

显示BGP MVPN对等体或对等体组的信息

display bgp [ instance instance-name ] peer ipv4 mvpn [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ ip-address ] verbose ]

display bgp [ instance instance-name ] peer ipv6 mvpn [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ ip-address ] verbose ]

显示BGP IPv4 MVPN路由信息

display bgp [ instance instance-name ] routing-table ipv4 mvpn [ { public | route-distinguisher route-distinguisher } [ route-type { intra-as I inter-as | s-pmsi | leaf | source-active | shared-tree | source-tree } ] [ mvpn-prefix ] | statistics ]

display bgp [ instance instance-name ] routing-table ipv4 mvpn [ public | route-distinguisher route-distinguisher ] [ mvpn-prefix [ advertise-info ] ]

display bgp [ instance instance-name ] routing-table ipv4 mvpn [ route-type { intra-as I inter-as | s-pmsi | leaf | source-active | shared-tree | source-tree } [ statistics ] ]

display bgp [ instance instance-name ] routing-table ipv4 mvpn peer ip-address { advertised-routes | received-routes } [ mvpn-prefix [ verbose ] | statistics ]

display bgp [ instance instance-name ] routing-table ipv4 mvpn { as-path-acl { as-path-acl-number | as-path-acl-name } | as-path-regular-expression regular-expression }

display bgp [ instance instance-name ] routing-table ipv4 mvpn { public | route-distinguisher route-distinguisher } route-type { inter-as | intra-as | leaf | s-pmsi | shared-tree | source-active | source-tree } time-range min-time max-time

显示BGP IPv6 MVPN路由信息

display bgp [ instance instance-name ] routing-table ipv6 mvpn [ { public | route-distinguisher route-distinguisher } [ route-type { inter-as |intra-as | leaf | s-pmsi | shared-tree | source-active | source-tree } ] [ mvpn-prefix ] | statistics ]

display bgp [ instance instance-name ] routing-table ipv6 mvpn [ public | route-distinguisher route-distinguisher ] [ mvpn-prefix [ advertise-info ] ]

display bgp [ instance instance-name ] routing-table ipv6 mvpn [ route-type { inter-as |intra-as | leaf | s-pmsi | shared-tree | source-active | source-tree } [ statistics ] ]

display bgp [ instance instance-name ] routing-table ipv6 mvpn peer { ipv4-address | ipv6-address } { advertised-routes | received-routes } [ mvpn-prefix [ verbose ] | statistics ]

display bgp [ instance instance-name ] routing-table ipv6 mvpn { as-path-acl { as-path-acl-number | as-path-acl-name } | as-path-regular-expression regular-expression }

display bgp [ instance instance-name ] routing-table ipv6 mvpn { public | route-distinguisher route-distinguisher } route-type { inter-as | intra-as | leaf | s-pmsi | shared-tree | source-active | source-tree } time-range min-time max-time

显示BGP为路由添加的Source AS Extended Community和VRF Route Import Extended Community属性的内容

display bgp [ instance instance-name ] { ipv4 | ipv6 } route-target  mvpn

显示MVPN中的C-multicast A-D路由信息

display multicast-vpn { vpn-instance vpn-instance-name| public-instance } [ ipv6 ] c-multicast routing-table [ group-address [ mask { mask-length | mask } ] | source-address [ mask { mask-length | mask } ] | outgoing-interface { exclude | include | match } interface-type interface-number ]

显示MVPN中的RSVP-TE、BIER隧道邻居信息

display multicast-vpn { vpn-instance vpn-instance-name | public-instance } neighbor [ interface tunnel number ]

显示MVPN中的相容性隧道信息

display multicast-vpn { vpn-instance vpn-instance-name | public-instance } [ ipv6 ] inclusive-tunnel { local | remote }

显示MVPN中的选择性隧道信息

display multicast-vpn { vpn-instance vpn-instance-name | public-instance } [ ipv6 ] selective-tunnel { local [ interface interface-type interface-number ] | remote }

显示组播服务前缀的配置信息

display multicast-service-prefix configuration

显示BIERv6隧道源地址的配置信息

display multicast-src-dt configuration [ locator locator-name ]

复位IPv4 MVPN地址族下的BGP会话

reset bgp [ instance instance-name ] { as-number | ipv4-address [ mask-length ] | all | external | group group-name | internal } ipv4 mvpn

reset bgp [ instance instance-name ] ipv6-address [ prefix-length ] ipv4 mvpn

复位IPv6 MVPN地址族下的BGP会话

reset bgp [ instance instance-name ] { as-number | ipv6-address [ prefix-length ] | all | external | group group-name | internal } ipv6 mvpn

reset bgp [ instance instance-name ] ipv4-address [ mask-length ] ipv6 mvpn

说明

有关display bgp groupdisplay bgp peerdisplay bgp update-groupreset bgp命令的具体介绍,请参见“三层技术-IP路由命令参考”中的“BGP”。

 

1.20  BIER模式MVPN典型配置举例‌

1.20.1  单AS内BIER模式MVPN配置举例(G-BIER封装类型)

1. 组网需求

组网需求如表1-3所示。

表1-3 单AS内BIER模式MVPN配置(G-BIER封装类型)组网需求

项目

组网需求

组播源和接收者

VPN a中的组播源为S 1,接收者为R 1

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

单播路由协议和BIER

·     在公网中配置IS-IS,在各PE与CE之间配置RIP

·     在PE 1和PE 2各自的LoopBack1接口两两之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、PE 2和P上配置BFR prefix为各自LoopBack1接口的IPv6地址,并各自配置组播策略预留地址

IP组播路由功能

·     在PE 1和PE 2的VPN实例a中均使能IP组播路由

·     在CE 1和CE 2上均使能IP组播路由

IGMP功能

在CE 2Ten-GigabitEthernet3/1/1接口上均使能IGMPv2

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     在CE 1和CE 2所有不连接接收者的接口上均使能PIM-SM

·     PE 1的LoopBack2接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-13 单AS内BIER模式MVPN配置(G-BIER封装类型)组网图

 

设备

接口

IP地址

设备

接口

IP地址

S 1

-

10.110.7.2/24

R 1

-

10.110.9.2/24

P

XGE3/1/1

9000:6::2/64

CE 1

XGE3/1/1

10.110.7.1/24

 

XGE3/1/2

9000:7::2/64

 

XGE3/1/2

10.110.2.2/24

 

Loop1

2.2.2.2/32

2222::2222/128

CE 2

XGE3/1/1

10.110.9.1/24

PE 1

XGE3/1/1

9000:6::1/64

 

XGE3/1/2

10.110.4.2/24

 

XGE3/1/2

10.110.2.1/24

PE 2

XGE3/1/1

9000:7::1/64

 

Loop1

1.1.1.1/32

1111::1111/128

 

XGE3/1/2

10.110.4.1/24

 

Loop2

3.3.3.3/32

 

Loop1

1.1.1.2/32

1112::1112/128

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5001::1。

[PE1-bier-sub-domain-0-ipv6] g-bier mpra 5001::1

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:1:: 64 service-id-length 10

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-vpn-instance-a] address-family ipv4

[PE1-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 12

[PE1-mvpn-vpn-instance-a-ipv4] quit

[PE1-mvpn-vpn-instance-a] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack2接口的IP地址。

[PE1] interface loopback 2

[PE1-LoopBack2] ip binding vpn-instance a

[PE1-LoopBack2] ip address 3.3.3.3 32

[PE1-LoopBack2] pim sm

[PE1-LoopBack2] quit

# 配置LoopBack2接口为VPN a的C-BSR和C-RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 3.3.3.3

[PE1-pim-a] c-rp 3.3.3.3

[PE1-pim-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 1112::1112 as-number 100

[PE1-bgp-default] peer 1112::1112 connect-interface loopback 1

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 1112::1112 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 1112::1112 enable

[PE1-bgp-default-vpnv4] peer 1112::1112 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] import-route rip 2

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置RIP协议。

[PE1] rip 2 vpn-instance a

[PE1-rip-2] undo summary

[PE1-rip-2] version 2

[PE1-rip-2] network 3.3.3.3 0.0.0.0

[PE1-rip-2] network 10.110.2.0 0.0.0.255

[PE1-rip-2] import-route bgp

[PE1-rip-2] quit

 

(2)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 1.1.1.2

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 1.1.1.2 32

[PE2-LoopBack1] ipv6 address 1112::1112 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置PE2加入BIER子域0、BFR ID为2、BFR prefix为LoopBack口1的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5002::1。

[PE2-bier-sub-domain-0-ipv6] g-bier mpra 5002::1

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 1112::1112

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 2:2:: 96 static 8

[PE2-segment-routing-ipv6-locator-aaa] quit

[PE2-segment-routing-ipv6] quit

# 配置组播服务前缀。

[PE2] multicast-service-prefix ms1 ipv6-prefix 1234:2:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:1

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-vpn-instance-a] address-family ipv4

[PE2-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE2-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 12

[PE2-mvpn-vpn-instance-a-ipv4] quit

[PE2-mvpn-vpn-instance-a] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 9000:7::1 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 10.110.4.1 24

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1111::1111 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1111::1111 enable

[PE2-bgp-default-vpnv4] peer 1111::1111 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] import-route rip 2

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置RIP协议。

[PE2] rip 2 vpn-instance a

[PE2-rip-2] undo summary

[PE2-rip-2] version 2

[PE2-rip-2] network 10.110.4.0 0.0.0.255

[PE2-rip-2] import-route bgp

[PE2-rip-2] quit

 

 

(3)     配置P

# 配置IPv6 IS-IS协议。

<P> system-view

[P] isis 1

[P-isis-1] is-level level-1

[P-isis-1] cost-style wide

[P-isis-1] network-entity 10.0000.0000.0004.00

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] quit

[P-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P] interface loopback 1

[P-LoopBack1] ip address 2.2.2.2 32

[P-LoopBack1] ipv6 address 2222::2222 128

[P-LoopBack1] isis ipv6 enable 1

[P-LoopBack1] quit

# 配置P加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口1的IPv6地址。

[P] bier

[P-bier] sub-domain 0 ipv6

[P-bier-sub-domain-0-ipv6] bfr-id 4

[P-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[P-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5004::1。

[P-bier-sub-domain-0-ipv6] g-bier mpra 5004::1

# 配置SRv6。

[P] segment-routing ipv6

[P-segment-routing-ipv6] encapsulation source-address 2222::2222

[P-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[P-segment-routing-ipv6-locator-aaa] quit

[P-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/1

[P-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::2 64

[P-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/2

[P-Ten-GigabitEthernet3/1/2] ipv6 address 9000:7::2 64

[P-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P] isis 1

[P-isis-1] bier enable

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] segment-routing ipv6 locator aaa

[P-isis-1-ipv6] quit

[P-isis-1] quit

 

(4)     配置CE 1

# 使能IP组播路由。

<CE1> system-view

[CE1] multicast routing

[CE1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/1

[CE1-Ten-GigabitEthernet3/1/1] ip address 10.110.7.1 24

[CE1-Ten-GigabitEthernet3/1/1] pim sm

[CE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/2

[CE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.2 24

[CE1-Ten-GigabitEthernet3/1/2] pim sm

[CE1-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE1] rip 2

[CE1-rip-2] undo summary

[CE1-rip-2] version 2

[CE1-rip-2] network 10.110.2.0 0.0.0.255

[CE1-rip-2] network 10.110.7.0 0.0.0.255

[CE1-rip-2] quit

 

 

(5)     配置CE 2

# 使能IP组播路由。

<CE2> system-view

[CE2] multicast routing

[CE2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CE2] interface ten-gigabitethernet 3/1/1

[CE2-Ten-GigabitEthernet3/1/1] ip address 10.110.9.1 24

[CE2-Ten-GigabitEthernet3/1/1] igmp enable

[CE2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] ip address 10.110.4.2 24

[CE2-Ten-GigabitEthernet3/1/2] pim sm

[CE2-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE2] rip 2

[CE2-rip-2] undo summary

[CE2-rip-2] version 2

[CE2-rip-2] network 10.110.4.0 0.0.0.255

[CE2-rip-2] network 10.110.9.0 0.0.0.255

[CE2-rip-2] quit

 

 

 

4. 验证配置

# 查看PE 1上VPN实例a中的BIER相容性隧道信息。

[PE1] display multicast-vpn vpn-instance a inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x30

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64                 10            0            0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 2           BFR prefix: 1112::1112

     Uptime: 00:10:05   Originating router: 1.1.1.2

# 查看PE 1上VPN实例a中的BIER选择性隧道信息。

[PE1] display multicast-vpn vpn-instance a selective-tunnel local

Total 1 selective tunnel in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif1

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64                 10            0            0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 2            BFR prefix: 1112::1112

     Uptime: 00:00:23    Originating router: 1.1.1.2

# 查看PE 1上VPN实例a中的C-multicast A-D路由信息。

[PE1] display multicast-vpn vpn-instance a c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 

 

 (10.110.7.2, 225.0.0.1)

     CreateTime: 00:02:20

     Tunnel Information: BIERVOif1

# 查看PE 2上VPN实例a中的BIER相容性隧道信息。

[PE2] display multicast-vpn vpn-instance a inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 2            BFR prefix: 1112::1112

     Uptime: --            Originating router: 1.1.1.2

# 查看PE 2上VPN实例a中的BIER选择性隧道信息。

[PE2] display multicast-vpn vpn-instance a selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 2           BFR prefix: 1112::1112

     Uptime: --          Originating router: 1.1.1.2

1.20.2  单AS内BIER模式MVPN配置举例(BIERv6封装类型)

1. 组网需求

组网需求如表1-4所示。

表1-4 单AS内BIER模式MVPN配置(BIERv6封装类型)组网需求

项目

组网需求

组播源和接收者

VPN a中的组播源为S 1,接收者为R 1

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

单播路由协议和BIER

·     在公网中配置IS-IS,在各PE与CE之间配置RIP

·     在PE 1和PE 2各自的LoopBack1接口两两之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、PE 2和P上配置BFR prefix为各自LoopBack1接口的IPv6地址,并各自配置End.BIER SID

IP组播路由功能

·     在PE 1和PE 2的VPN实例a中均使能IP组播路由

·     在CE 1和CE 2上均使能IP组播路由

IGMP功能

在CE 2的Ten-GigabitEthernet3/1/1接口上均使能IGMPv2

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     在CE 1和CE 2所有不连接接收者的接口上均使能PIM-SM

·     PE 1的LoopBack2接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-14 单AS内BIER模式MVPN配置(BIERv6封装类型)组网图

 

设备

接口

IP地址

设备

接口

IP地址

S 1

-

10.110.7.2/24

R 1

-

10.110.9.2/24

P

XGE3/1/1

9000:6::2/64

CE 1

XGE3/1/1

10.110.7.1/24

 

XGE3/1/2

9000:7::2/64

 

XGE3/1/2

10.110.2.2/24

 

Loop1

2.2.2.2/32

2222::2222/128

CE 2

XGE3/1/1

10.110.9.1/24

PE 1

XGE3/1/1

9000:6::1/64

 

XGE3/1/2

10.110.4.2/24

 

XGE3/1/2

10.110.2.1/24

PE 2

XGE3/1/1

9000:7::1/64

 

Loop1

1.1.1.1/32

1111::1111/128

 

XGE3/1/2

10.110.4.1/24

 

Loop2

3.3.3.3/32

 

Loop1

1.1.1.2/32

1112::1112/128

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为1:2::1。

[PE1-bier-sub-domain-0-ipv6] end-bier locator aaa sid 1:2::1

[PE1-bier-sub-domain-0-ipv6] quit

[PE1-bier] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-vpn-instance-a] address-family ipv4

[PE1-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:2::2

[PE1-mvpn-vpn-instance-a-ipv4] quit

[PE1-mvpn-vpn-instance-a] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack2接口的IP地址。

[PE1] interface loopback 2

[PE1-LoopBack2] ip binding vpn-instance a

[PE1-LoopBack2] ip address 3.3.3.3 32

[PE1-LoopBack2] pim sm

[PE1-LoopBack2] quit

# 配置LoopBack2接口为VPN a的C-BSR和C-RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 3.3.3.3

[PE1-pim-a] c-rp 3.3.3.3

[PE1-pim-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 1112::1112 as-number 100

[PE1-bgp-default] peer 1112::1112 connect-interface loopback 1

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 1112::1112 enable

[PE1-bgp-default-mvpn] peer 1112::1112 prefix-sid

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 1112::1112 enable

[PE1-bgp-default-vpnv4] peer 1112::1112 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] import-route rip 2

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置RIP协议。

[PE1] rip 2 vpn-instance a

[PE1-rip-2] undo summary

[PE1-rip-2] version 2

[PE1-rip-2] network 3.3.3.3 0.0.0.0

[PE1-rip-2] network 10.110.2.0 0.0.0.255

[PE1-rip-2] import-route bgp

[PE1-rip-2] quit

 

 

(2)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 1.1.1.2

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 1.1.1.2 32

[PE2-LoopBack1] ipv6 address 1112::1112 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 1112::1112

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 2:2:: 96 static 8

[PE2-segment-routing-ipv6-locator-aaa] quit

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为2、BFR prefix为LoopBack口1的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为2:2::1。

[PE2-bier-sub-domain-0-ipv6] end-bier locator aaa sid 2:2::1

[PE2-bier-sub-domain-0-ipv6] quit

[PE2-bier] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:1

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-vpn-instance-a] address-family ipv4

[PE2-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE2-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 2:2::2

[PE2-mvpn-vpn-instance-a-ipv4] quit

[PE2-mvpn-vpn-instance-a] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 9000:7::1 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 10.110.4.1 24

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1111::1111 enable

[PE2-bgp-default-mvpn] peer 1111::1111 prefix-sid

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1111::1111 enable

[PE2-bgp-default-vpnv4] peer 1111::1111 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] import-route rip 2

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置RIP协议。

[PE2] rip 2 vpn-instance a

[PE2-rip-2] undo summary

[PE2-rip-2] version 2

[PE2-rip-2] network 10.110.4.0 0.0.0.255

[PE2-rip-2] import-route bgp

[PE2-rip-2] quit

 

 

 

 

(3)     配置P

# 配置IPv6 IS-IS协议。

<P> system-view

[P] isis 1

[P-isis-1] is-level level-1

[P-isis-1] cost-style wide

[P-isis-1] network-entity 10.0000.0000.0004.00

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] quit

[P-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P] interface loopback 1

[P-LoopBack1] ip address 2.2.2.2 32

[P-LoopBack1] ipv6 address 2222::2222 128

[P-LoopBack1] isis ipv6 enable 1

[P-LoopBack1] quit

# 配置SRv6。

[P] segment-routing ipv6

[P-segment-routing-ipv6] encapsulation source-address 2222::2222

[P-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[P-segment-routing-ipv6-locator-aaa] quit

[P-segment-routing-ipv6] quit

# 配置P加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口1的IPv6地址。

[P] bier

[P-bier] sub-domain 0 ipv6

[P-bier-sub-domain-0-ipv6] bfr-id 4

[P-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[P-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为4:2::1。

[P-bier-sub-domain-0-ipv6] end-bier locator aaa sid 4:2::1

[P-bier-sub-domain-0-ipv6] quit

[P-bier] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/1

[P-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::2 64

[P-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/2

[P-Ten-GigabitEthernet3/1/2] ipv6 address 9000:7::2 64

[P-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P] isis 1

[P-isis-1] bier enable

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] segment-routing ipv6 locator aaa

[P-isis-1-ipv6] quit

[P-isis-1] quit

 

 

(4)     配置CE 1

# 使能IP组播路由。

<CE1> system-view

[CE1] multicast routing

[CE1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/1

[CE1-Ten-GigabitEthernet3/1/1] ip address 10.110.7.1 24

[CE1-Ten-GigabitEthernet3/1/1] pim sm

[CE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/2

[CE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.2 24

[CE1-Ten-GigabitEthernet3/1/2] pim sm

[CE1-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE1] rip 2

[CE1-rip-2] undo summary

[CE1-rip-2] version 2

[CE1-rip-2] network 10.110.2.0 0.0.0.255

[CE1-rip-2] network 10.110.7.0 0.0.0.255

[CE1-rip-2] quit

 

 

 

 

(5)     配置CE 2

# 使能IP组播路由。

<CE2> system-view

[CE2] multicast routing

[CE2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CE2] interface ten-gigabitethernet 3/1/1

[CE2-Ten-GigabitEthernet3/1/1] ip address 10.110.9.1 24

[CE2-Ten-GigabitEthernet3/1/1] igmp enable

[CE2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] ip address 10.110.4.2 24

[CE2-Ten-GigabitEthernet3/1/2] pim sm

[CE2-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE2] rip 2

[CE2-rip-2] undo summary

[CE2-rip-2] version 2

[CE2-rip-2] network 10.110.4.0 0.0.0.255

[CE2-rip-2] network 10.110.9.0 0.0.0.255

[CE2-rip-2] quit

 

 

 

 

 

 

4. 验证配置

# 查看PE 1上VPN实例a中的BIER相容性隧道信息。

[PE1] display multicast-vpn vpn-instance a inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x30

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 2            BFR prefix: 1112::1112

     Uptime: 00:10:05    Originating router: 1.1.1.2

# 查看PE 1上VPN实例a中的BIER选择性隧道信息。

[PE1] display multicast-vpn vpn-instance a selective-tunnel local

Total 1 selective tunnel in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif1

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 2            BFR prefix: 1112::1112

     Uptime: 00:00:23    Originating router: 1.1.1.2

# 查看PE 1上VPN实例a中的C-multicast A-D路由信息。

[PE1] display multicast-vpn vpn-instance a c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 

 

 (10.110.7.2, 225.0.0.1)

     CreateTime: 00:02:20

     Tunnel Information: BIERVOif1

# 查看PE 2上VPN实例a中的BIER相容性隧道信息。

[PE2] display multicast-vpn vpn-instance a inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 2            BFR prefix: 1112::1112

     Uptime: --            Originating router: 1.1.1.2

# 查看PE 2上VPN实例a中的BIER选择性隧道信息。

[PE2] display multicast-vpn vpn-instance a selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 2            BFR prefix: 1112::1112

     Uptime: --           Originating router: 1.1.1.2

1.20.3  单AS内BIER模式MVPN配置举例(MSR6封装类型)

1. 组网需求

组网需求如表1-5所示。

表1-5 单AS内BIER模式MVPN配置(MSR6封装类型)组网需求

项目

组网需求

组播源和接收者

VPN a中的组播源为S 1,接收者为R 1

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

单播路由协议和BIER

·     在公网中配置IS-IS,在各PE与CE之间配置RIP

·     在PE 1和PE 2各自的LoopBack1接口两两之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、PE 2和P上配置BFR prefix为各自LoopBack1接口的IPv6地址,并各自配置End.RGB SID

IP组播路由功能

·     在PE 1和PE 2的VPN实例a中均使能IP组播路由

·     在CE 1和CE 2上均使能IP组播路由

IGMP功能

在CE 2的Ten-GigabitEthernet3/1/1接口上均使能IGMPv2

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     在CE 1和CE 2所有不连接接收者的接口上均使能PIM-SM

·     PE 1的LoopBack2接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-15 单AS内BIER模式MVPN配置(MSR6封装类型)组网图

 

设备

接口

IP地址

设备

接口

IP地址

S 1

-

10.110.7.2/24

R 1

-

10.110.9.2/24

P

XGE3/1/1

9000:6::2/64

CE 1

XGE3/1/1

10.110.7.1/24

 

XGE3/1/2

9000:7::2/64

 

XGE3/1/2

10.110.2.2/24

 

Loop1

2.2.2.2/32

2222::2222/128

CE 2

XGE3/1/1

10.110.9.1/24

PE 1

XGE3/1/1

9000:6::1/64

 

XGE3/1/2

10.110.4.2/24

 

XGE3/1/2

10.110.2.1/24

PE 2

XGE3/1/1

9000:7::1/64

 

Loop1

1.1.1.1/32

1111::1111/128

 

XGE3/1/2

10.110.4.1/24

 

Loop2

3.3.3.3/32

 

Loop1

1.1.1.2/32

1112::1112/128

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:2::1。

[PE1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-vpn-instance-a] address-family ipv4

[PE1-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:2::2

[PE1-mvpn-vpn-instance-a-ipv4] quit

[PE1-mvpn-vpn-instance-a] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack2接口的IP地址。

[PE1] interface loopback 2

[PE1-LoopBack2] ip binding vpn-instance a

[PE1-LoopBack2] ip address 3.3.3.3 32

[PE1-LoopBack2] pim sm

[PE1-LoopBack2] quit

# 配置LoopBack2接口为VPN a的C-BSR和C-RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 3.3.3.3

[PE1-pim-a] c-rp 3.3.3.3

[PE1-pim-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 1112::1112 as-number 100

[PE1-bgp-default] peer 1112::1112 connect-interface loopback 1

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 1112::1112 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 1112::1112 enable

[PE1-bgp-default-vpnv4] peer 1112::1112 prefix-sid

[PE1-bgp-default-vpnv4] quit 

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route rip 2

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置RIP协议。

[PE1] rip 2 vpn-instance a

[PE1-rip-2] undo summary

[PE1-rip-2] version 2

[PE1-rip-2] network 3.3.3.3 0.0.0.0

[PE1-rip-2] network 10.110.2.0 0.0.0.255

[PE1-rip-2] import-route bgp

[PE1-rip-2] quit

 

 

(2)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 1.1.1.2

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 1.1.1.2 32

[PE2-LoopBack1] ipv6 address 1112::1112 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 1112::1112

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 2:2:: 96 static 8

[PE2-segment-routing-ipv6-locator-aaa] quit

[PE2-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为2、BFR prefix为LoopBack口1的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为2:2::1。

[PE2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 2:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:1

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-vpn-instance-a] address-family ipv4

[PE2-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE2-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 2:2::2

[PE2-mvpn-vpn-instance-a-ipv4] quit

[PE2-mvpn-vpn-instance-a] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 9000:7::1 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 10.110.4.1 24

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1111::1111 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1111::1111 enable

[PE2-bgp-default-vpnv4] peer 1111::1111 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route rip 2

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置RIP协议。

[PE2] rip 2 vpn-instance a

[PE2-rip-2] undo summary

[PE2-rip-2] version 2

[PE2-rip-2] network 10.110.4.0 0.0.0.255

[PE2-rip-2] import-route bgp

[PE2-rip-2] quit

 

 

 

 

(3)     配置P

# 配置IPv6 IS-IS协议。

<P> system-view

[P] isis 1

[P-isis-1] is-level level-1

[P-isis-1] cost-style wide

[P-isis-1] network-entity 10.0000.0000.0004.00

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] quit

[P-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P] interface loopback 1

[P-LoopBack1] ip address 2.2.2.2 32

[P-LoopBack1] ipv6 address 2222::2222 128

[P-LoopBack1] isis ipv6 enable 1

[P-LoopBack1] quit

# 配置SRv6。

[P] segment-routing ipv6

[P-segment-routing-ipv6] encapsulation source-address 2222::2222

[P-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[P-segment-routing-ipv6-locator-aaa] quit

[P-segment-routing-ipv6] quit

# 配置P加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口1的IPv6地址。

[P] bier

[P-bier] sub-domain 0 ipv6

[P-bier-sub-domain-0-ipv6] bfr-id 4

[P-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为4:2::1。

[P-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 4:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/1

[P-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::2 64

[P-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/2

[P-Ten-GigabitEthernet3/1/2] ipv6 address 9000:7::2 64

[P-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P] isis 1

[P-isis-1] bier enable

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] segment-routing ipv6 locator aaa

[P-isis-1-ipv6] quit

[P-isis-1] quit

 

 

(4)     配置CE 1

# 使能IP组播路由。

<CE1> system-view

[CE1] multicast routing

[CE1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/1

[CE1-Ten-GigabitEthernet3/1/1] ip address 10.110.7.1 24

[CE1-Ten-GigabitEthernet3/1/1] pim sm

[CE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/2

[CE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.2 24

[CE1-Ten-GigabitEthernet3/1/2] pim sm

[CE1-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE1] rip 2

[CE1-rip-2] undo summary

[CE1-rip-2] version 2

[CE1-rip-2] network 10.110.2.0 0.0.0.255

[CE1-rip-2] network 10.110.7.0 0.0.0.255

[CE1-rip-2] quit

 

 

 

(5)     配置CE 2

# 使能IP组播路由。

<CE2> system-view

[CE2] multicast routing

[CE2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CE2] interface ten-gigabitethernet 3/1/1

[CE2-Ten-GigabitEthernet3/1/1] ip address 10.110.9.1 24

[CE2-Ten-GigabitEthernet3/1/1] igmp enable

[CE2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] ip address 10.110.4.2 24

[CE2-Ten-GigabitEthernet3/1/2] pim sm

[CE2-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE2] rip 2

[CE2-rip-2] undo summary

[CE2-rip-2] version 2

[CE2-rip-2] network 10.110.4.0 0.0.0.255

[CE2-rip-2] network 10.110.9.0 0.0.0.255

[CE2-rip-2] quit

 

 

 

 

 

 

4. 验证配置

# 查看PE 1上VPN实例a中的BIER相容性隧道信息。

[PE1] display multicast-vpn vpn-instance a inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x30

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 2           BFR prefix: 1112::1112

     Uptime: 00:10:05   Originating router: 1.1.1.2

# 查看PE 1上VPN实例a中的BIER选择性隧道信息。

[PE1] display multicast-vpn vpn-instance a selective-tunnel local

Total 1 selective tunnel in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif1

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 2           BFR prefix: 1112::1112

     Uptime: 00:00:23    Originating router: 1.1.1.2

# 查看PE 1上VPN实例a中的C-multicast A-D路由信息。

[PE1] display multicast-vpn vpn-instance a c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 

 

 (10.110.7.2, 225.0.0.1)

     CreateTime: 00:02:20

     Tunnel Information: BIERVOif1

# 查看PE 2上VPN实例a中的BIER相容性隧道信息。

[PE2] display multicast-vpn vpn-instance a inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 2            BFR prefix: 1112::1112

     Uptime: --           Originating router: 1.1.1.2

# 查看PE 2上VPN实例a中的BIER选择性隧道信息。

[PE2] display multicast-vpn vpn-instance a selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 2           BFR prefix: 1112::1112

     Uptime: --          Originating router: 1.1.1.2

1.20.4  公网实例BIER模式MVPN配置举例(G-BIER封装类型)

1. 组网需求

组网需求如表1-6所示。

表1-6 公网实例BIER模式MVPN配置组网(G-BIER封装类型)需求

项目

组网需求

组播源和接收者

公网实例中的组播源为S 1,接收者为R 1

PE各接口所属实例

组网中的所有接口均属于公网实例

单播路由协议和BIER

·     在公网中配置IS-IS,在各PE与CE之间配置RIP

·     PE 1和PE 2使用LoopBack1接口建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、PE 2和P上配置BFR prefix为各自LoopBack1接口的IPv6地址,并各自配置组播策略预留地址

IP组播路由功能

·     在PE 1和PE 2的公网实例中使能IP组播路由

·     在CE 1和CE 2上均使能IP组播路由

IGMP功能

在CE 2的Ten-GigabitEthernet3/1/1接口上使能IGMPv2

PIM功能

运行PIM-SM:

·     在PE 1和PE 2的Ten-GigabitEthernet3/1/1的接口上均使能PIM-SM

·     在CE 1和CE 2所有不连接接收者的接口上均使能PIM-SM

·     PE 2的LoopBack2接口为公网实例的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-16 公网实例BIER模式MVPN配置(G-BIER封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S 1

-

10.110.7.2/24

R 1

-

10.110.1.2/24

PE 1

XGE3/1/1

9000:6::1/64

P

XGE3/1/1

9000:6::2/64

 

XGE3/1/2

10.110.2.1/24

 

XGE3/1/3

9000:8::2/64

 

Loop1

1.1.1.1/32

1111::1111/128

 

Loop1

2.2.2.2/32

2222::2222/128

PE 2

XGE3/1/1

9000:8::1/64

CE 1

XGE3/1/1

10.110.7.1/24

 

XGE3/1/2

10.110.5.1/24

 

XGE3/1/2

10.110.2.2/24

 

Loop1

1.1.1.3/32

1113::1113/128

CE 2

XGE3/1/1

10.110.10.1/24

 

Loop2

33.33.33.33/32

 

XGE3/1/2

10.110.5.2/24

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5001::1。

[PE1-bier-sub-domain-0-ipv6] g-bier mpra 5001::1

[PE1-bier-sub-domain-0-ipv6] quit

[PE1-bier] quit

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:1:: 64 service-id-length 10

# 配置公网实例的Route Target。

[PE1] ip public-instance

[PE1-public-instance] vpn-target 100:1 export-extcommunity

[PE1-public-instance] vpn-target 100:1 import-extcommunity

[PE1-public-instance] quit

# 使能公网的IP组播路由。

[PE1] multicast routing

[PE1-mrib] quit

# 创建公网实例的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn public-instance mode bier

[PE1-mvpn-public-instance] address-family ipv4

[PE1-mvpn-public-instance-ipv4] source loopback 1

[PE1-mvpn-public-instance-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-public-instance-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-public-instance-ipv4] tunnel-source multicast-service-prefix ms1 service-id 12

[PE1-mvpn-public-instance-ipv4] quit

[PE1-mvpn-public-instance] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 1113::1113 as-number 100

[PE1-bgp-default] peer 1113::1113 connect-interface loopback 1

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 1113::1113 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv4 unicast

[PE1-bgp-default-ipv4] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4] mvpn-advertise-rt-import

[PE1-bgp-default-ipv4] peer 1113::1113 enable

[PE1-bgp-default-ipv4] peer 1113::1113 prefix-sid

[PE1-bgp-default-ipv4] peer 1113::1113 advertise-ext-community

[PE1-bgp-default-ipv4] import-route rip 2

[PE1-bgp-default-ipv4] import-route direct

[PE1-bgp-default-ipv4] quit

[PE1-bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置RIP协议。

[PE1] rip 2

[PE1-rip-2] undo summary

[PE1-rip-2] version 2

[PE1-rip-2] network 10.110.2.0 0.0.0.255

[PE1-rip-2] import-route bgp allow-ibgp

[PE1-rip-2] quit

 

 

(2)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 1.1.1.3

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0003.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 1.1.1.3 32

[PE2-LoopBack1] ipv6 address 1113::1113 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 1113::1113

[PE2-segment-routing-ipv6] locator bbb ipv6-prefix 2:2:: 96 static 8

[PE2-segment-routing-ipv6-locator-bbb] quit

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口1的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 3

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5003::1。

[PE2-bier-sub-domain-0-ipv6] g-bier mpra 5003::1

[PE2-bier-sub-domain-0-ipv6] quit

[PE2-bier] quit

# 配置组播服务前缀。

[PE2] multicast-service-prefix ms1 ipv6-prefix 1232:3:: 64 service-id-length 10

# 配置公网实例的Route Target。

[PE2] ip public-instance

[PE2-public-instance] vpn-target 100:1 export-extcommunity

[PE2-public-instance] vpn-target 100:1 import-extcommunity

[PE2-public-instance] quit

# 使能公网的IP组播路由。

[PE2] multicast routing

[PE2-mrib] quit

# 创建公网实例的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn public-instance mode bier

[PE2-mvpn-public-instance] address-family ipv4

[PE2-mvpn-public-instance-ipv4] source loopback 1

[PE2-mvpn-public-instance-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-public-instance-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-public-instance-ipv4] tunnel-source multicast-service-prefix ms1 service-id 12

[PE2-mvpn-public-instance-ipv4] quit

[PE2-mvpn-public-instance] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 9000:8::1 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ip address 10.110.5.1 24

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置接口LoopBack2的IP地址,并使能PIM-SM。

[PE2] interface loopback 2

[PE2-LoopBack2] ip address 33.33.33.33 32

[PE2-LoopBack2] pim sm

[PE2-LoopBack2] quit

# 配置LoopBack2接口为公网的C-BSR和C-RP。

[PE2] pim

[PE2-pim] c-bsr 33.33.33.33

[PE2-pim] c-rp 33.33.33.33

[PE2-pim] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1111::1111 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv4 unicast

[PE2-bgp-default-ipv4] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4] segment-routing ipv6 locator bbb

[PE2-bgp-default-ipv4] mvpn-advertise-rt-import

[PE2-bgp-default-ipv4] peer 1111::1111 enable

[PE2-bgp-default-ipv4] peer 1111::1111 prefix-sid

[PE2-bgp-default-ipv4] peer 1111::1111 advertise-ext-community

[PE2-bgp-default-ipv4] import-route rip 2

[PE2-bgp-default-ipv4] import-route direct

[PE2-bgp-default-ipv4] quit

[PE2-bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator bbb。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator bbb

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置RIP协议。

[PE2] rip 2

[PE2-rip-2] undo summary

[PE2-rip-2] version 2

[PE2-rip-2] network 10.110.5.0 0.0.0.255

[PE2-rip-2] network 33.33.33.33 0.0.0.0

[PE2-rip-2] import-route bgp allow-ibgp

[PE2-rip-2] quit

 

(3)     配置P

# 配置IPv6 IS-IS协议。

<P> system-view

[P] isis 1

[P-isis-1] is-level level-1

[P-isis-1] cost-style wide

[P-isis-1] network-entity 10.0000.0000.0004.00

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] quit

[P-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P] interface loopback 1

[P-LoopBack1] ip address 2.2.2.2 32

[P-LoopBack1] ipv6 address 2222::2222 128

[P-LoopBack1] isis ipv6 enable 1

[P-LoopBack1] quit

# 配置P加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口1的IPv6地址。

[P] bier

[P-bier] sub-domain 0 ipv6

[P-bier-sub-domain-0-ipv6] bfr-id 4

[P-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[P-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5004::1。

[P-bier-sub-domain-0-ipv6] g-bier mpra 5004::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/1

[P-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::2 64

[P-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/2

[P-Ten-GigabitEthernet3/1/2] ipv6 address 9000:8::2 64

[P-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力。

[P] isis 1

[P-isis-1] bier enable

[P-isis-1] quit

 

(4)     配置CE 1

# 使能IP组播路由。

<CE1> system-view

[CE1] multicast routing

[CE1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/1

[CE1-Ten-GigabitEthernet3/1/1] ip address 10.110.7.1 24

[CE1-Ten-GigabitEthernet3/1/1] pim sm

[CE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/2

[CE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.2 24

[CE1-Ten-GigabitEthernet3/1/2] pim sm

[CE1-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE1] rip 2

[CE1-rip-2] undo summary

[CE1-rip-2] version 2

[CE1-rip-2] network 10.110.2.0 0.0.0.255

[CE1-rip-2] network 10.110.7.0 0.0.0.255

[CE1-rip-2] quit

 

 

(5)     配置CE 2

# 使能IP组播路由。

<CE2> system-view

[CE2] multicast routing

[CE2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CE2] interface ten-gigabitethernet 3/1/1

[CE2-Ten-GigabitEthernet3/1/1] ip address 10.110.10.1 24

[CE2-Ten-GigabitEthernet3/1/1] igmp enable

[CE2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] ip address 10.110.5.2 24

[CE2-Ten-GigabitEthernet3/1/2] pim sm

[CE2-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE2] rip 2

[CE2-rip-2] undo summary

[CE2-rip-2] version 2

[CE2-rip-2] network 10.110.5.0 0.0.0.255

[CE2-rip-2] network 10.110.10.0 0.0.0.255

[CE2-rip-2] quit

 

 

4. 验证配置

# 查看PE 1上公网实例的BIER相容性隧道信息。

[PE1] display multicast-vpn public-instance inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x30

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64                 10            0            0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 3           BFR prefix: 1113::1113

     Uptime: 00:09:50   Originating router: 1.1.1.3

# 查看PE 1上公网实例的BIER选择性隧道信息。

[PE1] display multicast-vpn public-instance selective-tunnel local

Total 1 selective tunnel in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif1

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64                 10            0            0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 3           BFR prefix: 1113::1113

     Uptime: 00:00:23    Originating router: 1.1.1.3

# 查看PE 1上公网实例的C-multicast A-D路由信息。

[PE1] display multicast-vpn public-instance c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 

 

 (10.110.7.2, 225.0.0.1)

     CreateTime: 00:02:20

     Tunnel Information: BIERVOif1

# 查看PE 2上公网实例的BIER相容性隧道信息。

[PE2] display multicast-vpn public-instance inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 3            BFR prefix: 1113::1113

     Uptime: --            Originating router: 1.1.1.3

1.20.5  公网实例BIER模式MVPN配置举例(BIERv6封装类型)

1. 组网需求

组网需求如表1-7所示。

表1-7 公网实例BIER模式MVPN配置(BIERv6封装类型)组网需求

项目

组网需求

组播源和接收者

公网实例中的组播源为S 1,接收者为R 1

PE各接口所属实例

组网中的所有接口均属于公网实例

单播路由协议和BIER

·     在公网中配置IS-IS,在各PE与CE之间配置RIP

·     PE 1和PE 2使用LoopBack1接口建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、PE 2和P上配置BFR prefix为各自LoopBack1接口的IPv6地址,并各自配置End.BIER SID

IP组播路由功能

·     在PE 1和PE 2的公网实例中使能IP组播路由

·     在CE 1和CE 2上均使能IP组播路由

IGMP功能

在CE 2的Ten-GigabitEthernet3/1/1接口上使能IGMPv2

PIM功能

运行PIM-SM:

·     在PE 1和PE 2的Ten-GigabitEthernet3/1/1的接口上均使能PIM-SM

·     在CE 1和CE 2所有不连接接收者的接口上均使能PIM-SM

·     PE 2的LoopBack2接口为公网实例的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-17 公网实例BIER模式MVPN配置(BIERv6封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S 1

-

10.110.7.2/24

R 1

-

10.110.1.2/24

PE 1

XGE3/1/1

9000:6::1/64

P

XGE3/1/1

9000:6::2/64

 

XGE3/1/2

10.110.2.1/24

 

XGE3/1/3

9000:8::2/64

 

Loop1

1.1.1.1/32

1111::1111/128

 

Loop1

2.2.2.2/32

2222::2222/128

PE 2

XGE3/1/1

9000:8::1/64

CE 1

XGE3/1/1

10.110.7.1/24

 

XGE3/1/2

10.110.5.1/24

 

XGE3/1/2

10.110.2.2/24

 

Loop1

1.1.1.3/32

1113::1113/128

CE 2

XGE3/1/1

10.110.10.1/24

 

Loop2

33.33.33.33/32

 

XGE3/1/2

10.110.5.2/24

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:1:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为1:1::1。

[PE1-bier-sub-domain-0-ipv6] end-bier locator aaa sid 1:1::1

[PE1-bier-sub-domain-0-ipv6] quit

[PE1-bier] quit

# 配置公网实例的Route Target。

[PE1] ip public-instance

[PE1-public-instance] vpn-target 100:1 export-extcommunity

[PE1-public-instance] vpn-target 100:1 import-extcommunity

[PE1-public-instance] quit

# 使能公网的IP组播路由。

[PE1] multicast routing

[PE1-mrib] quit

# 创建公网实例的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn public-instance mode bier

[PE1-mvpn-public-instance] address-family ipv4

[PE1-mvpn-public-instance-ipv4] source loopback 1

[PE1-mvpn-public-instance-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-public-instance-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-public-instance-ipv4] src-dt4 locator aaa sid 1:1::2

[PE1-mvpn-public-instance-ipv4] quit

[PE1-mvpn-public-instance] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 1113::1113 as-number 100

[PE1-bgp-default] peer 1113::1113 connect-interface loopback 1

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 1113::1113 enable

[PE1-bgp-default-mvpn] peer 1113::1113 prefix-sid

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv4 unicast

[PE1-bgp-default-ipv4] mvpn-advertise-rt-import

[PE1-bgp-default-ipv4] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4] peer 1113::1113 enable

[PE1-bgp-default-ipv4] peer 1113::1113 prefix-sid

[PE1-bgp-default-ipv4] peer 1113::1113 advertise-ext-community

[PE1-bgp-default-ipv4] import-route rip 2

[PE1-bgp-default-ipv4] import-route direct

[PE1-bgp-default-ipv4] quit

[PE1-bgp-default] quit

# 配置RIP协议。

[PE1] rip 2

[PE1-rip-2] undo summary

[PE1-rip-2] version 2

[PE1-rip-2] network 10.110.2.0 0.0.0.255

[PE1-rip-2] import-route bgp allow-ibgp

[PE1-rip-2] quit

 

 

 

(2)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 1.1.1.3

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 1.1.1.3 32

[PE2-LoopBack1] ipv6 address 1113::1113 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 1113::1113

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 2:2:: 96 static 8

[PE2-segment-routing-ipv6-locator-aaa] quit

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口1的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 3

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为2:2::1。

[PE2-bier-sub-domain-0-ipv6] end-bier locator aaa sid 2:2::1

[PE2-bier-sub-domain-0-ipv6] quit

[PE2-bier] quit

# 配置公网实例的Route Target。

[PE2] ip public-instance

[PE2-public-instance] vpn-target 100:1 export-extcommunity

[PE2-public-instance] vpn-target 100:1 import-extcommunity

[PE2-public-instance] quit

# 使能公网的IP组播路由。

[PE2] multicast routing

[PE2-mrib] quit

# 创建公网实例的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn public-instance mode bier

[PE2-mvpn-public-instance] address-family ipv4

[PE2-mvpn-public-instance-ipv4] source loopback 1

[PE2-mvpn-public-instance-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-public-instance-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-public-instance-ipv4] src-dt4 locator aaa sid 2:2::2

[PE2-mvpn-public-instance-ipv4] quit

[PE2-mvpn-public-instance] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 9000:8::1 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ip address 10.110.5.1 24

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置接口LoopBack2的IP地址,并使能PIM-SM。

[PE2] interface loopback 2

[PE2-LoopBack2] ip address 33.33.33.33 32

[PE2-LoopBack2] pim sm

[PE2-LoopBack2] quit

# 配置LoopBack2接口为公网的C-BSR和C-RP。

[PE2] pim

[PE2-pim] c-bsr 33.33.33.33

[PE2-pim] c-rp 33.33.33.33

[PE2-pim] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1111::1111 enable

[PE2-bgp-default-mvpn] peer 1111::1111 prefix-sid

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv4 unicast

[PE2-bgp-default-ipv4] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4] mvpn-advertise-rt-import

[PE2-bgp-default-ipv4] peer 1111::1111 enable

[PE2-bgp-default-ipv4] peer 1111::1111 prefix-sid

[PE2-bgp-default-ipv4] peer 1111::1111 advertise-ext-community

[PE2-bgp-default-ipv4] import-route rip 2

[PE2-bgp-default-ipv4] import-route direct

[PE2-bgp-default-ipv4] quit

[PE2-bgp-default] quit

# 配置RIP协议。

[PE2] rip 2

[PE2-rip-2] undo summary

[PE2-rip-2] version 2

[PE2-rip-2] network 10.110.5.0 0.0.0.255

[PE2-rip-2] network 33.33.33.33 0.0.0.0

[PE2-rip-2] import-route bgp allow-ibgp

[PE2-rip-2] quit

 

 

(3)     配置P

# 配置IPv6 IS-IS协议。

<P> system-view

[P] isis 1

[P-isis-1] is-level level-1

[P-isis-1] cost-style wide

[P-isis-1] network-entity 10.0000.0000.0004.00

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] quit

[P-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P] interface loopback 1

[P-LoopBack1] ip address 2.2.2.2 32

[P-LoopBack1] ipv6 address 2222::2222 128

[P-LoopBack1] isis ipv6 enable 1

[P-LoopBack1] quit

# 配置SRv6。

[P] segment-routing ipv6

[P-segment-routing-ipv6] encapsulation source-address 2222::2222

[P-segment-routing-ipv6] locator a ipv6-prefix 4:1:: 64 static 32

[P-segment-routing-ipv6-locator-a] quit

[P-segment-routing-ipv6] quit

# 配置P加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口1的IPv6地址。

[P] bier

[P-bier] sub-domain 0 ipv6

[P-bier-sub-domain-0-ipv6] bfr-id 4

[P-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[P-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为4:1::1。

[PE2-bier-sub-domain-0-ipv6] end-bier locator a sid 4:1::1

[PE2-bier-sub-domain-0-ipv6] quit

[PE2-bier] quit

# 配置IS-IS使能BIER能力并通告locator a。

[P] isis 1

[P-isis-1] bier enable

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] segment-routing ipv6 locator a

[P-isis-1-ipv6] quit

[P-isis-1] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/1

[P-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::2 64

[P-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/2

[P-Ten-GigabitEthernet3/1/2] ipv6 address 9000:8::2 64

[P-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/2] quit

 

 

(4)     配置CE 1

# 使能IP组播路由。

<CE1> system-view

[CE1] multicast routing

[CE1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/1

[CE1-Ten-GigabitEthernet3/1/1] ip address 10.110.7.1 24

[CE1-Ten-GigabitEthernet3/1/1] pim sm

[CE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/2

[CE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.2 24

[CE1-Ten-GigabitEthernet3/1/2] pim sm

[CE1-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE1] rip 2

[CE1-rip-2] undo summary

[CE1-rip-2] version 2

[CE1-rip-2] network 10.110.2.0 0.0.0.255

[CE1-rip-2] network 10.110.7.0 0.0.0.255

[CE1-rip-2] quit

 

 

 

(5)     配置CE 2

# 使能IP组播路由。

<CE2> system-view

[CE2] multicast routing

[CE2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CE2] interface ten-gigabitethernet 3/1/1

[CE2-Ten-GigabitEthernet3/1/1] ip address 10.110.10.1 24

[CE2-Ten-GigabitEthernet3/1/1] igmp enable

[CE2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] ip address 10.110.5.2 24

[CE2-Ten-GigabitEthernet3/1/2] pim sm

[CE2-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE2] rip 2

[CE2-rip-2] undo summary

[CE2-rip-2] version 2

[CE2-rip-2] network 10.110.5.0 0.0.0.255

[CE2-rip-2] network 10.110.10.0 0.0.0.255

[CE2-rip-2] quit

 

 

 

4. 验证配置

# 查看PE 1上公网实例的BIER相容性隧道信息。

[PE1] display multicast-vpn public-instance inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x30

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 3           BFR prefix: 1113::1113

     Uptime: 00:09:50   Originating router: 1.1.1.3

# 查看PE 1上公网实例的BIER选择性隧道信息。

[PE1] display multicast-vpn public-instance selective-tunnel local

Total 1 selective tunnel in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif1

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 3           BFR prefix: 1113::1113

     Uptime: 00:00:23    Originating router: 1.1.1.3

# 查看PE 1上公网实例的C-multicast A-D路由信息。

[PE1] display multicast-vpn public-instance c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 

 

 (10.110.7.2, 225.0.0.1)

     CreateTime: 00:02:20

     Tunnel Information: BIERVOif1

# 查看PE 2上公网实例的BIER相容性隧道信息。

[PE2] display multicast-vpn public-instance inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 3            BFR prefix: 1113::1113

     Uptime: --            Originating router: 1.1.1.3

1.20.6  公网实例BIER模式MVPN配置举例(MSR6封装类型)

1. 组网需求

组网需求如表1-8所示。

表1-8 公网实例BIER模式MVPN配置(MSR6封装类型)组网需求

项目

组网需求

组播源和接收者

公网实例中的组播源为S 1,接收者为R 1

PE各接口所属实例

组网中的所有接口均属于公网实例

单播路由协议和BIER

·     在公网中配置IS-IS,在各PE与CE之间配置RIP

·     PE 1和PE 2使用LoopBack1接口建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、PE 2和P上配置BFR prefix为各自LoopBack1接口的IPv6地址,并各自配置End.RGB SID

IP组播路由功能

·     在PE 1和PE 2的公网实例中使能IP组播路由

·     在CE 1和CE 2上均使能IP组播路由

IGMP功能

在CE 2的Ten-GigabitEthernet3/1/1接口上使能IGMPv2

PIM功能

运行PIM-SM:

·     在PE 1和PE 2的Ten-GigabitEthernet3/1/1的接口上均使能PIM-SM

·     在CE 1和CE 2所有不连接接收者的接口上均使能PIM-SM

·     PE 2的LoopBack2接口为公网实例的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-18 公网实例BIER模式MVPN配置(MSR6封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S 1

-

10.110.7.2/24

R 1

-

10.110.1.2/24

PE 1

XGE3/1/1

9000:6::1/64

P

XGE3/1/1

9000:6::2/64

 

XGE3/1/2

10.110.2.1/24

 

XGE3/1/3

9000:8::2/64

 

Loop1

1.1.1.1/32

1111::1111/128

 

Loop1

2.2.2.2/32

2222::2222/128

PE 2

XGE3/1/1

9000:8::1/64

CE 1

XGE3/1/1

10.110.7.1/24

 

XGE3/1/2

10.110.5.1/24

 

XGE3/1/2

10.110.2.2/24

 

Loop1

1.1.1.3/32

1113::1113/128

CE 2

XGE3/1/1

10.110.10.1/24

 

Loop2

33.33.33.33/32

 

XGE3/1/2

10.110.5.2/24

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:1:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:1::1。

[PE1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:1::1

[PE1-bier-sub-domain-0-ipv6] quit

[PE1-bier] quit

# 配置公网实例的Route Target。

[PE1] ip public-instance

[PE1-public-instance] vpn-target 100:1 export-extcommunity

[PE1-public-instance] vpn-target 100:1 import-extcommunity

[PE1-public-instance] quit

# 使能公网的IP组播路由。

[PE1] multicast routing

[PE1-mrib] quit

# 创建公网实例的BIER模式MVPN,进入MVPN IPv4地址族视图,配置MVPN源接口,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn public-instance mode bier

[PE1-mvpn-public-instance] address-family ipv4

[PE1-mvpn-public-instance-ipv4] source loopback 1

[PE1-mvpn-public-instance-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-public-instance-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-public-instance-ipv4] src-dt4 locator aaa sid 1:1::2

[PE1-mvpn-public-instance-ipv4] quit

[PE1-mvpn-public-instance] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 1113::1113 as-number 100

[PE1-bgp-default] peer 1113::1113 connect-interface loopback 1

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 1113::1113 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv4 unicast

[PE1-bgp-default-ipv4] mvpn-advertise-rt-import

[PE1-bgp-default-ipv4] peer 1113::1113 enable

[PE1-bgp-default-ipv4] peer 1113::1113 advertise-ext-community

[PE1-bgp-default-ipv4] peer 1113::1113 prefix-sid

[PE1-bgp-default-ipv4] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4] import-route rip 2

[PE1-bgp-default-ipv4] import-route direct

[PE1-bgp-default-ipv4] quit

[PE1-bgp-default] quit

# 配置RIP协议。

[PE1] rip 2

[PE1-rip-2] undo summary

[PE1-rip-2] version 2

[PE1-rip-2] network 10.110.2.0 0.0.0.255

[PE1-rip-2] import-route bgp allow-ibgp

[PE1-rip-2] quit

 

 

 

(2)     配置PE 2

# 配置全局Router ID

<PE2> system-view

[PE2] router id 1.1.1.3

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 1.1.1.3 32

[PE2-LoopBack1] ipv6 address 1113::1113 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 1113::1113

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 3:1:: 64 static 32

[PE2-segment-routing-ipv6-locator-aaa] quit

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为2、BFR prefix为LoopBack口1的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为3:1::1。

[PE2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 3:1::1

[PE2-bier-sub-domain-0-ipv6] quit

[PE2-bier] quit

# 配置公网实例的Route Target。

[PE2] ip public-instance

[PE2-public-instance] vpn-target 100:1 export-extcommunity

[PE2-public-instance] vpn-target 100:1 import-extcommunity

[PE2-public-instance] quit

# 使能公网的IP组播路由。

[PE2] multicast routing

[PE2-mrib] quit

# 创建公网实例的BIER模式MVPN,进入MVPN IPv4地址族视图,配置MVPN源接口,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn public-instance mode bier

[PE2-mvpn-public-instance] address-family ipv4

[PE2-mvpn-public-instance-ipv4] source loopback 1

[PE2-mvpn-public-instance-ipv4]inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-public-instance-ipv4]selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-public-instance-ipv4]src-dt4 locator aaa sid 3:1::2

[PE2-mvpn-public-instance-ipv4] quit

[PE2-mvpn-public-instance] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 9000:8::1 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ip address 10.110.5.1 24

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置接口LoopBack2的IP地址,并使能PIM-SM。

[PE2] interface loopback 2

[PE2-LoopBack2] ip address 33.33.33.33 32

[PE2-LoopBack2] pim sm

[PE2-LoopBack2] quit

# 配置LoopBack2接口为公网的C-BSR和C-RP。

[PE2] pim

[PE2-pim] c-bsr 33.33.33.33

[PE2-pim] c-rp 33.33.33.33

[PE2-pim] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1111::1111 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv4 unicast

[PE2-bgp-default-ipv4] mvpn-advertise-rt-import

[PE2-bgp-default-ipv4] peer 1111::1111 enable

[PE2-bgp-default-ipv4] peer 1111::1111 advertise-ext-community

[PE2-bgp-default-ipv4] peer 1111::1111 prefix-sid

[PE2-bgp-default-ipv4] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4] import-route rip 2

[PE2-bgp-default-ipv4] import-route direct

[PE2-bgp-default-ipv4] quit

[PE2-bgp-default] quit

# 配置RIP协议。

[PE2] rip 2

[PE2-rip-2] undo summary

[PE2-rip-2] version 2

[PE2-rip-2] network 10.110.5.0 0.0.0.255

[PE2-rip-2] network 33.33.33.33 0.0.0.0

[PE2-rip-2] import-route bgp allow-ibgp

[PE2-rip-2] quit

 

 

(3)     配置P

# 配置IPv6 IS-IS协议。

<P> system-view

[P] isis 1

[P-isis-1] is-level level-1

[P-isis-1] cost-style wide

[P-isis-1] network-entity 10.0000.0000.0004.00

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] quit

[P-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P] interface loopback 1

[P-LoopBack1] ip address 2.2.2.2 32

[P-LoopBack1] ipv6 address 2222::2222 128

[P-LoopBack1] isis ipv6 enable 1

[P-LoopBack1] quit

# 配置SRv6。

[P] segment-routing ipv6

[P-segment-routing-ipv6] encapsulation source-address 2222::2222

[P-segment-routing-ipv6] locator aaa ipv6-prefix 4:1:: 64 static 32

[P-segment-routing-ipv6-locator-aaa] quit

[P-segment-routing-ipv6] quit

# 配置P加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口1的IPv6地址。

[P] bier

[P-bier] sub-domain 0 ipv6

[P-bier-sub-domain-0-ipv6] bfr-id 4

[P-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为4:1::1。

[P-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 4:1::1

[P-bier-sub-domain-0-ipv6] quit

[P-bier] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P] isis 1

[P-isis-1] bier enable

[P-isis-1] address-family ipv6 unicast

[P-isis-1-ipv6] segment-routing ipv6 locator aaa

[P-isis-1-ipv6] quit

[P-isis-1] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/1

[P-Ten-GigabitEthernet3/1/1] ipv6 address 9000:6::2 64

[P-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P] interface ten-gigabitethernet 3/1/2

[P-Ten-GigabitEthernet3/1/2] ipv6 address 9000:8::2 64

[P-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P-Ten-GigabitEthernet3/1/2] quit

 

 

(4)     配置CE 1

# 使能IP组播路由。

<CE1> system-view

[CE1] multicast routing

[CE1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/1

[CE1-Ten-GigabitEthernet3/1/1] ip address 10.110.7.1 24

[CE1-Ten-GigabitEthernet3/1/1] pim sm

[CE1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/2

[CE1-Ten-GigabitEthernet3/1/2] ip address 10.110.2.2 24

[CE1-Ten-GigabitEthernet3/1/2] pim sm

[CE1-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE1] rip 2

[CE1-rip-2] undo summary

[CE1-rip-2] version 2

[CE1-rip-2] network 10.110.2.0 0.0.0.255

[CE1-rip-2] network 10.110.7.0 0.0.0.255

[CE1-rip-2] quit

 

 

 

(5)     配置CE 2

# 使能IP组播路由。

<CE2> system-view

[CE2] multicast routing

[CE2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CE2] interface ten-gigabitethernet 3/1/1

[CE2-Ten-GigabitEthernet3/1/1] ip address 10.110.10.1 24

[CE2-Ten-GigabitEthernet3/1/1] igmp enable

[CE2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] ip address 10.110.5.2 24

[CE2-Ten-GigabitEthernet3/1/2] pim sm

[CE2-Ten-GigabitEthernet3/1/2] quit

# 配置RIP协议。

[CE2] rip 2

[CE2-rip-2] undo summary

[CE2-rip-2] version 2

[CE2-rip-2] network 10.110.5.0 0.0.0.255

[CE2-rip-2] network 10.110.10.0 0.0.0.255

[CE2-rip-2] quit

 

 

4. 验证配置

# 查看PE 1上公网实例的BIER相容性隧道信息。

[PE1] display multicast-vpn public-instance inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x30

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 3           BFR prefix: 1113::1113

     Uptime: 00:09:50   Originating router: 1.1.1.3

# 查看PE 1上公网实例的BIER选择性隧道信息。

[PE1] display multicast-vpn public-instance selective-tunnel local

Total 1 selective tunnel in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif1

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 3           BFR prefix: 1113::1113

     Uptime: 00:00:23    Originating router: 1.1.1.3

# 查看PE 1上公网实例的C-multicast A-D路由信息。

[PE1] display multicast-vpn public-instance c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 

 

 (10.110.7.2, 225.0.0.1)

     CreateTime: 00:02:20

     Tunnel Information: BIERVOif1

# 查看PE 2上公网实例的BIER相容性隧道信息。

[PE3] display multicast-vpn public-instance inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 3            BFR prefix: 1113::1113

     Uptime: --            Originating router: 1.1.1.3

1.20.7  A类跨AS的BIER模式MVPN配置举例(G-BIER封装类型)

1. 组网需求

组网需求如表1-9所示。

表1-9 A类跨AS的BIER模式MVPN配置组网需求

项目

组网需求

组播源和接收者

·     VPN a的组播源为S 1,接收者为R 2

·     VPN b的组播源为S 2,接收者为R 1

·     VPN a中使用PIM-SM模式

·     VPN b中使用PIM-SSM模式

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3接口属于VPN实例b,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例,Ten-GigabitEthernet3/1/2属于VPN实例a,Ten-GigabitEthernet3/1/3接口属于VPN实例b

·     PE 3:Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例,Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3接口属于VPN实例b

·     PE 4:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3接口属于VPN实例b,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

单播路由协议和BIER

·     在AS 100和AS 200中分别配置IS-IS,在各PE与CE之间也配置OSPF

·     在PE 1与PE 2、PE 3与PE 4各自的LoopBack1接口之间建立IBGP对等体,PE 2与PE 3各自的Ten-GigabitEthernet3/1/2接口之间建立EBGP对等体

·     在PE 1与PE 2、PE 3与PE 4各自的LoopBack1接口之间建立BGP IPv4 MVPN对等体

·     在AS 100和AS 200中分别配置BIER

·     在P 1和P 2上使能BIER

IP组播路由功能

·     在PE 1和PE 4的VPN实例a中均使能IP组播路由

·     在PE 1和PE 4的VPN实例b中均使能IP组播路由

·     在CE a1、CE a2、CE b1、CE b2上均使能IP组播路由

IGMP功能

·     在CE a2的Ten-GigabitEthernet3/1/1接口上使能IGMPv2

·     在CE b2的Ten-GigabitEthernet3/1/1接口上使能IGMPv3

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 4的所有私网接口上均使能PIM-SM

·     在CE a1、CE a2、CE b1和CE b2所有不连接接收者的接口上均使能PIM-SM

·     PE 1的Ten-GigabitEthernet3/1/2接口为AS100域内VPN a的C-BSR和C-RP(服务于所有组播组)

·     PE 4的Ten-GigabitEthernet3/1/2接口为AS200域内VPN a的C-BSR和C-RP(服务于所有组播)

 

2. 组网图

图1-19 A类跨AS的BIER模式MVPN配置组网图

设备

接口

IP地址

设备

接口

IP地址

S 1

-

12.1.1.100/24

R 1

-

12.4.1.100/24

S 2

-

12.2.1.100/24

R 2

-

12.3.1.100/24

PE 1

XGE3/1/1

10.1.1.1/24

1011::1/80

PE 3

XGE3/1/1

10.4.1.1/24

1041::1/80

 

XGE3/1/2

11.1.1.1/24

 

XGE3/1/2

10.3.1.2/24

 

-

 

 

XGE3/1/3

10.6.1.2/24

 

XGE3/1/3

11.2.1.1/24

 

Loop1

3.3.3.3/32

3333::3333/128

 

Loop1

1.1.1.1/32

1111::1111/128

PE 4

XGE3/1/1

10.5.1.2/24

1051::2/80

PE 2

XGE3/1/1

10.2.1.2/24

1021::2/80

 

XGE3/1/2

11.3.1.1/24

 

XGE3/1/2

10.3.1.1/24

 

XGE3/1/3

11.4.1.1/24

 

XGE3/1/3

10.6.1.1/24

 

-

 

 

Loop1

2.2.2.2/32

2222::2222/128

 

Loop1

4.4.4.4/24

4444::4444/128

P 1

XGE3/1/1

10.1.1.2/24

1011::2/80

P 2

XGE3/1/1

10.5.1.1/24

1051::1/80

 

XGE3/1/2

10.2.1.1/24

1021::1/80

 

XGE3/1/2

10.4.1.2/24

1041::2/80

 

Loop1

5.5.5.5/32

5555::5555/128

 

Loop1

6.6.6.6/32

6666::6666/128

CE a1

XGE3/1/1

12.1.1.1/24

CE b1

XGE3/1/1

12.2.1.1/24

 

XGE3/1/2

11.1.1.2/24

 

XGE3/1/2

11.2.1.2/24

CE a2

XGE3/1/1

12.3.1.1/24

CE b2

XGE3/1/1

12.4.1.1/24

 

XGE3/1/2

11.3.1.2/24

 

XGE3/1/2

11.4.1.2/24

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置BIER。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[PE1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[PE1-bier-sub-domain-0-ipv6] g-bier mpra 5001::1

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:1:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-vpn-instance-a] address-family ipv4

[PE1-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 1

[PE1-mvpn-vpn-instance-a-ipv4] quit

[PE1-mvpn-vpn-instance-a] quit

# 创建VPN实例b,并为其配置RD和Route Target。

[PE1] ip vpn-instance b

[PE1-vpn-instance-b] route-distinguisher 200:1

[PE1-vpn-instance-b] vpn-target 200:1 export-extcommunity

[PE1-vpn-instance-b] vpn-target 200:1 import-extcommunity

[PE1-vpn-instance-b] quit

# 使能VPN实例b中的IP组播路由。

[PE1] multicast routing vpn-instance b

[PE1-mrib-b] quit

# 创建VPN实例b的BIER模式MVPN并进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance b mode bier

[PE1-mvpn-vpn-instance-b] address-family ipv4

[PE1-mvpn-vpn-instance-b-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-b-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-b-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-b-ipv4] tunnel-source multicast-service-prefix ms1 service-id 2

[PE1-mvpn-vpn-instance-b-ipv4] quit

[PE1-mvpn-vpn-instance-b] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 1011::1 80

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 11.1.1.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 将接口Ten-GigabitEthernet3/1/3与VPN实例b进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/3

[PE1-Ten-GigabitEthernet3/1/3] ip binding vpn-instance b

[PE1-Ten-GigabitEthernet3/1/3] ip address 11.2.1.1 24

[PE1-Ten-GigabitEthernet3/1/3] pim sm

[PE1-Ten-GigabitEthernet3/1/3] quit

# 配置Ten-GigabitEthernet3/1/2的地址为VPN实例a的C-BSR和C-RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.1.1.1

[PE1-pim-a] c-rp 11.1.1.1

[PE1-pim-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 2222::2222 as-number 100

[PE1-bgp-default] peer 2222::2222 connect-interface loopback 1

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 2222::2222 enable

[PE1-bgp-default-mvpn] quit

[PE1–bgp-default] address-family vpnv4

[PE1–bgp-default-vpnv4] peer 2222::2222 enable

[PE1–bgp-default-vpnv4] peer 2222::2222 next-hop-local

[PE1–bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1–bgp-default-vpnv4] peer 2222::2222 prefix-sid

[PE1–bgp-default-vpnv4] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] import-route ospf 2

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] ip vpn-instance b

[PE1-bgp-default-b] address-family ipv4

[PE1-bgp-default-ipv4-b] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-b] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-b] import-route ospf 3

[PE1-bgp-default-ipv4-b] import-route direct

[PE1-bgp-default-ipv4-b] quit

[PE1-bgp-default-b] quit

[PE1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置OSPF协议。

[PE1] ospf 2 vpn-instance a

[PE1-ospf-2] import-route bgp

[PE1-ospf-2] area 0.0.0.0

[PE1-ospf-2-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[PE1-ospf-2-area-0.0.0.0] quit

[PE1-ospf-2] quit

[PE1] ospf 3 vpn-instance b

[PE1-ospf-3] import-route bgp

[PE1-ospf-3] area 0.0.0.0

[PE1-ospf-3-area-0.0.0.0] network 11.2.1.0 0.0.0.255

[PE1-ospf-3-area-0.0.0.0] quit

[PE1-ospf-3] quit

 

(2)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 2.2.2.2 32

[PE2-LoopBack1] ipv6 address 2222::2222 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置BIER。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[PE2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[PE2-bier-sub-domain-0-ipv6] g-bier mpra 5002::1

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 2222::2222

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 2:2:: 96 static 8

[PE2-segment-routing-ipv6-locator-aaa] quit

[PE2-segment-routing-ipv6] quit

# 配置组播服务前缀。

[PE2] multicast-service-prefix ms1 ipv6-prefix 1234:2:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:1

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-vpn-instance-a] address-family ipv4

[PE2-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE2-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 1

[PE2-mvpn-vpn-instance-a-ipv4] quit

[PE2-mvpn-vpn-instance-a] quit

# 创建VPN实例b,并为其配置RD和Route Target。

[PE2] ip vpn-instance b

[PE2-vpn-instance-b] route-distinguisher 200:1

[PE2-vpn-instance-b] vpn-target 200:1 export-extcommunity

[PE2-vpn-instance-b] vpn-target 200:1 import-extcommunity

[PE2-vpn-instance-b] quit

# 使能VPN实例b中的IP组播路由。

[PE2] multicast routing vpn-instance b

[PE2-mrib-b] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance b mode bier

[PE2-mvpn-vpn-instance-b] address-family ipv4

[PE2-mvpn-vpn-instance-b-ipv4] source loopback 1

[PE2-mvpn-vpn-instance-b-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-b-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-b-ipv4] tunnel-source multicast-service-prefix ms1 service-id 2

[PE2-mvpn-vpn-instance-b-ipv4] quit

[PE2-mvpn-vpn-instance-b] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 1021::2 80

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2绑定VPN实例a,配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 10.3.1.1 24

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] quit

# 将接口Ten-GigabitEthernet3/1/3绑定VPN实例b,配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/3

[PE2-Ten-GigabitEthernet3/1/3] ip binding vpn-instance b

[PE2-Ten-GigabitEthernet3/1/3] ip address 10.6.1.1 24

[PE2-Ten-GigabitEthernet3/1/3] pim sm

[PE2-Ten-GigabitEthernet3/1/3] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1111::1111 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1111::1111 enable

[PE2-bgp-default-vpnv4] peer 1111::1111 next-hop-local

[PE2-bgp-default-vpnv4] peer 1111::1111 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2-bgp-default] ip vpn-instance a

[PE2-bgp-default-a] peer 10.3.1.2 as-number 200

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] peer 10.3.1.2 enable

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] quit

[PE2-bgp-default] ip vpn-instance b

[PE2-bgp-default-b] peer 10.6.1.2 as-number 200

[PE2-bgp-default-b] address-family ipv4 unicast

[PE2-bgp-default-ipv4-b] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-b] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-b] import-route direct

[PE2-bgp-default-ipv4-b] peer 10.6.1.2 enable

[PE2-bgp-default-ipv4-b] quit

[PE2-bgp-default-b] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

 

(3)     配置PE 3

# 配置全局Router ID。

<PE3> system-view

[PE3] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[PE3] isis 1

[PE3-isis-1] is-level level-1

[PE3-isis-1] cost-style wide

[PE3-isis-1] network-entity 10.0000.0000.0003.00

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE3] interface loopback 1

[PE3-LoopBack1] ip address 3.3.3.3 32

[PE3-LoopBack1] ipv6 address 3333::3333 128

[PE3-LoopBack1] isis ipv6 enable 1

[PE3-LoopBack1] quit

# 配置BIER。

[PE3] bier

[PE3-bier] sub-domain 0 ipv6

[PE3-bier-sub-domain-0-ipv6] bfr-id 3

[PE3-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[PE3-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[PE3-bier-sub-domain-0-ipv6] g-bier mpra 5003::1

# 配置SRv6。

[PE3] segment-routing ipv6

[PE3-segment-routing-ipv6] encapsulation source-address 3333::3333

[PE3-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[PE3-segment-routing-ipv6-locator-aaa] quit

[PE3-segment-routing-ipv6] quit

# 配置组播服务前缀。

[PE3] multicast-service-prefix ms1 ipv6-prefix 1234:3:: 64 service-id-length 10

# 创建VPN实例a。

[PE3] ip vpn-instance a

[PE3-vpn-instance-a] route-distinguisher 300:1

[PE3-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE3-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE3-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE3] multicast routing vpn-instance a

[PE3-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE3] multicast-vpn vpn-instance a mode bier

[PE3-mvpn-vpn-instance-a] address-family ipv4

[PE3-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE3-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 1

[PE3-mvpn-vpn-instance-a-ipv4] quit

[PE3-mvpn-vpn-instance-a] quit

# 创建VPN实例b,并为其配置RD和Route Target。

[PE3] ip vpn-instance b

[PE3-vpn-instance-b] route-distinguisher 400:1

[PE3-vpn-instance-b] vpn-target 200:1 export-extcommunity

[PE3-vpn-instance-b] vpn-target 200:1 import-extcommunity

[PE3-vpn-instance-b] quit

# 使能VPN实例b中的IP组播路由。

[PE3] multicast routing vpn-instance b

[PE3-mrib-b] quit

# 创建VPN实例b的BIER模式MVPN并进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE3] multicast-vpn vpn-instance b mode bier

[PE3-mvpn-vpn-instance-b] address-family ipv4

[PE3-mvpn-vpn-instance-b-ipv4] source loopback 1

[PE3-mvpn-vpn-instance-b-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-b-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-b-ipv4] tunnel-source multicast-service-prefix ms1 service-id 2

[PE3-mvpn-vpn-instance-b-ipv4] quit

[PE3-mvpn-vpn-instance-b] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE3] interface ten-gigabitethernet 3/1/1

[PE3-Ten-GigabitEthernet3/1/1] ipv6 address 1041::1 80

[PE3-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE3-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2绑定VPN实例a,配置IP地址,并使能PIM-SM。

[PE3] interface ten-gigabitethernet 3/1/2

[PE3-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE3-Ten-GigabitEthernet3/1/2] ip address 10.3.1.2 24

[PE3-Ten-GigabitEthernet3/1/2] pim sm

[PE3-Ten-GigabitEthernet3/1/2] quit

# 将接口Ten-GigabitEthernet3/1/3绑定VPN实例b,配置IP地址,并使能PIM-SM。

[PE3] interface ten-gigabitethernet 3/1/3

[PE3-Ten-GigabitEthernet3/1/3] ip binding vpn-instance b

[PE3-Ten-GigabitEthernet3/1/3] ip address 10.6.1.2 24

[PE3-Ten-GigabitEthernet3/1/3] pim sm

[PE3-Ten-GigabitEthernet3/1/3] quit

# 配置BGP协议。

[PE3] bgp 200

[PE3-bgp-default] peer 4444::4444 as-number 200

[PE3-bgp-default] peer 4444::4444 connect-interface loopback 1

[PE3-bgp-default] address-family ipv4 mvpn

[PE3-bgp-default-mvpn] peer 4444::4444 enable

[PE3-bgp-default-mvpn] quit

[PE3-bgp-default] address-family vpnv4

[PE3-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE3-bgp-default-vpnv4] peer 4444::4444 enable

[PE3-bgp-default-vpnv4] peer 4444::4444 next-hop-local

[PE3-bgp-default-vpnv4] peer 4444::4444 prefix-sid

[PE3-bgp-default-vpnv4] quit

[PE3-bgp-default] ip vpn-instance a

[PE3-bgp-default-a] peer 10.3.1.1 as-number 100

[PE3-bgp-default-a] address-family ipv4 unicast

[PE3-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE3-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE3-bgp-default-ipv4-a] import-route direct

[PE3-bgp-default-ipv4-a] peer 10.3.1.1 enable

[PE3-bgp-default-ipv4-a] quit

[PE3-bgp-default-a] quit

[PE3-bgp-default] ip vpn-instance b

[PE3-bgp-default-b] peer 10.6.1.1 as-number 100

[PE3-bgp-default-b] address-family ipv4 unicast

[PE3-bgp-default-ipv4-b] segment-routing ipv6 best-effort

[PE3-bgp-default-ipv4-b] segment-routing ipv6 locator aaa

[PE3-bgp-default-ipv4-b] import-route direct

[PE3-bgp-default-ipv4-b] peer 10.6.1.1 enable

[PE3-bgp-default-ipv4-b] quit

[PE3-bgp-default-b] quit

[PE3–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE3] isis 1

[PE3-isis-1] bier enable

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

 

(4)     配置PE 4

# 配置全局Router ID。

<PE4> system-view

[PE4] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[PE4] isis 1

[PE4-isis-1] is-level level-1

[PE4-isis-1] cost-style wide

[PE4-isis-1] network-entity 10.0000.0000.0004.00

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE4] interface loopback 1

[PE4-LoopBack1] ip address 4.4.4.4 32

[PE4-LoopBack1] ipv6 address 4444::4444 128

[PE4-LoopBack1] isis ipv6 enable 1

[PE4-LoopBack1] quit

# 配置BIER。

[PE4] bier

[PE4-bier] sub-domain 0 ipv6

[PE4-bier-sub-domain-0-ipv6] bfr-id 4

[PE4-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[PE4-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[PE4-bier-sub-domain-0-ipv6] g-bier mpra 5004::1

# 配置SRv6。

[PE4] segment-routing ipv6

[PE4-segment-routing-ipv6] encapsulation source-address 4444::4444

[PE4-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[PE4-segment-routing-ipv6-locator-aaa] quit

[PE4-segment-routing-ipv6] quit

# 配置组播服务前缀。

[PE4] multicast-service-prefix ms1 ipv6-prefix 1234:4:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE4] ip vpn-instance a

[PE4-vpn-instance-a] route-distinguisher 300:1

[PE4-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE4-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE4-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE4] multicast routing vpn-instance a

[PE4-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE4] multicast-vpn vpn-instance a mode bier

[PE4-mvpn-vpn-instance-a] address-family ipv4

[PE4-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE4-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 1

[PE4-mvpn-vpn-instance-a-ipv4] quit

[PE4-mvpn-vpn-instance-a] quit

# 创建VPN实例b,并为其配置RD和Route Target。

[PE4] ip vpn-instance b

[PE4-vpn-instance-b] route-distinguisher 400:1

[PE4-vpn-instance-b] vpn-target 200:1 export-extcommunity

[PE4-vpn-instance-b] vpn-target 200:1 import-extcommunity

[PE4-vpn-instance-b] quit

# 使能VPN实例b中的IP组播路由。

[PE4] multicast routing vpn-instance b

[PE4-mrib-b] quit

# 创建VPN实例b的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE4] multicast-vpn vpn-instance b mode bier

[PE4-mvpn-vpn-instance-b] address-family ipv4

[PE4-mvpn-vpn-instance-b-ipv4] source loopback 1

[PE4-mvpn-vpn-instance-b-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-b-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-b-ipv4] tunnel-source multicast-service-prefix ms1 service-id 2

[PE4-mvpn-vpn-instance-b-ipv4] quit

[PE4-mvpn-vpn-instance-b] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[PE4] interface ten-gigabitethernet 3/1/1

[PE4-Ten-GigabitEthernet3/1/1] ipv6 address 1051::2 80

[PE4-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE4-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE4] interface ten-gigabitethernet 3/1/2

[PE4-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE4-Ten-GigabitEthernet3/1/2] ip address 11.3.1.1 24

[PE4-Ten-GigabitEthernet3/1/2] pim sm

[PE4-Ten-GigabitEthernet3/1/2] quit

# 将接口Ten-GigabitEthernet3/1/3与VPN实例b进行关联,配置IP地址,并使能PIM-SM。

[PE4] interface ten-gigabitethernet 3/1/3

[PE4-Ten-GigabitEthernet3/1/3] ip binding vpn-instance b

[PE4-Ten-GigabitEthernet3/1/3] ip address 11.4.1.1 24

[PE4-Ten-GigabitEthernet3/1/3] pim sm

[PE4-Ten-GigabitEthernet3/1/3] quit

# 配置Ten-GigabitEthernet3/1/2的地址为VPN实例a的C-BSR和C-RP。

[PE4] pim vpn-instance a

[PE4-pim-a] c-bsr 11.3.1.1

[PE4-pim-a] c-rp 11.3.1.1

[PE4-pim-a] quit

# 配置BGP协议。

[PE4] bgp 200

[PE4-bgp-default] peer 3333::3333 as-number 200

[PE4-bgp-default] peer 3333::3333 connect-interface loopback 1

[PE4-bgp-default] address-family ipv4 mvpn

[PE4-bgp-default-mvpn] peer 3333::3333 enable

[PE4-bgp-default-mvpn] quit

[PE4–bgp-default] address-family vpnv4

[PE4–bgp-default-vpnv4] peer 3333::3333 enable

[PE4–bgp-default-vpnv4] peer 3333::3333 next-hop-local

[PE4–bgp-default-vpnv4] mvpn-advertise-rt-import

[PE4–bgp-default-vpnv4] peer 3333::3333 prefix-sid

[PE4–bgp-default -vpnv4] quit

[PE4–bgp-default] ip vpn-instance a

[PE4-bgp-default-a] address-family ipv4

[PE4-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv4-a] import-route ospf 2

[PE4-bgp-default-ipv4-a] import-route direct

[PE4-bgp-default-ipv4-a] quit

[PE4-bgp-default-a] quit

[PE4–bgp-default] ip vpn-instance b

[PE4-bgp-default-b] address-family ipv4

[PE4-bgp-default-ipv4-b] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv4-b] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv4-b] import-route ospf 3

[PE4-bgp-default-ipv4-b] import-route direct

[PE4-bgp-default-ipv4-b] quit

[PE4-bgp-default-b] quit

[PE4–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE4] isis 1

[PE4-isis-1] bier enable

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

# 配置OSPF协议。

[PE4] ospf 2 vpn-instance a

[PE4-ospf-2] import-route bgp

[PE4-ospf-2] area 0.0.0.0

[PE4-ospf-2-area-0.0.0.0] network 11.3.1.0 0.0.0.255

[PE4-ospf-2-area-0.0.0.0] quit

[PE4-ospf-2] quit

[PE4] ospf 3 vpn-instance b

[PE4-ospf-3] import-route bgp

[PE4-ospf-3] area 0.0.0.0

[PE4-ospf-3-area-0.0.0.0] network 11.4.1.0 0.0.0.255

[PE4-ospf-3-area-0.0.0.0] quit

[PE4-ospf-3] quit

 

(5)     配置P1

# 配置IPv6 IS-IS协议。

<P1> system-view

[P1] isis 1

[P1-isis-1] is-level level-1

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0005.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P1] interface loopback 1

[P1-LoopBack1] ip address 5.5.5.5 32

[P1-LoopBack1] ipv6 address 5555::5555 128

[P1-LoopBack1] isis ipv6 enable 1

[P1-LoopBack1] quit

# 配置BIER。

[P1] bier

[P1-bier] sub-domain 0 ipv6

[P1-bier-sub-domain-0-ipv6] bfr-id 5

[P1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[P1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[P1-bier-sub-domain-0-ipv6] g-bier mpra 5005::1

# 配置SRv6

[P1] segment-routing ipv6

[P1-segment-routing-ipv6] encapsulation source-address 5555::5555

[P1-segment-routing-ipv6] locator aaa ipv6-prefix 5:2:: 96 static 8

[P1-segment-routing-ipv6-locator-aaa] quit

[P1-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/1

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 1011::2 80

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/2

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 1021::1 80

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P1] isis 1

[P1-isis-1] bier enable

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] segment-routing ipv6 locator aaa

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

 

(6)     配置P2

# 配置IPv6 IS-IS协议。

<P2> system-view

[P2] isis 1

[P2-isis-1] is-level level-1

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0006.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P2] interface loopback 1

[P2-LoopBack1] ip address 6.6.6.6 32

[P2-LoopBack1] ipv6 address 6666::6666 128

[P2-LoopBack1] isis ipv6 enable 1

[P2-LoopBack1] quit

# 配置BIER。

[P2] bier

[P2-bier] sub-domain 0 ipv6

[P2-bier-sub-domain-0-ipv6] bfr-id 6

[P2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[P2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[P2-bier-sub-domain-0-ipv6] g-bier mpra 5006::1

# 配置SRv6

[P2] segment-routing ipv6

[P2-segment-routing-ipv6] encapsulation source-address 6666::6666

[P2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[P2-segment-routing-ipv6-locator-aaa] quit

[P2-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/1

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 1051::1 80

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/2

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 1041::2 80

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P2] isis 1

[P2-isis-1] bier enable

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] segment-routing ipv6 locator aaa

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

 

(7)     配置CE a1

# 使能IP组播路由。

<CEa1> system-view

[CEa1] multicast routing

[CEa1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CEa1] interface ten-gigabitethernet 3/1/1

[CEa1-Ten-GigabitEthernet3/1/1] ip address 12.1.1.1 24

[CEa1-Ten-GigabitEthernet3/1/1] pim sm

[CEa1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEa1] interface ten-gigabitethernet 3/1/2

[CEa1-Ten-GigabitEthernet3/1/2] ip address 11.1.1.2 24

[CEa1-Ten-GigabitEthernet3/1/2] pim sm

[CEa1-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEa1] ospf 1

[CEa1-ospf-1] area 0.0.0.0

[CEa1-ospf-1-area-0.0.0.0] network 12.1.1.0 0.0.0.255

[CEa1-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[CEa1-ospf-1-area-0.0.0.0] quit

[CEa1-ospf-1] quit

 

(8)     配置CE b1

# 使能IP组播路由。

<CEb1> system-view

[CEb1] multicast routing

[CEb1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CEb1] interface ten-gigabitethernet 3/1/1

[CEb1-Ten-GigabitEthernet3/1/1] ip address 12.2.1.1 24

[CEb1-Ten-GigabitEthernet3/1/1] pim sm

[CEb1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEb1] interface ten-gigabitethernet 3/1/2

[CEb1-Ten-GigabitEthernet3/1/2] ip address 11.2.1.2 24

[CEb1-Ten-GigabitEthernet3/1/2] pim sm

[CEb1-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEb1] ospf 1

[CEb1-ospf-1] area 0.0.0.0

[CEb1-ospf-1-area-0.0.0.0] network 12.2.1.0 0.0.0.255

[CEb1-ospf-1-area-0.0.0.0] network 11.2.1.0 0.0.0.255

[CEb1-ospf-1-area-0.0.0.0] quit

[CEb1-ospf-1] quit

 

(9)     配置CE a2

# 使能IP组播路由。

<CEa2> system-view

[CEa2] multicast routing

[CEa2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CEa2] interface ten-gigabitethernet 3/1/1

[CEa2-Ten-GigabitEthernet3/1/1] ip address 12.3.1.1 24

[CEa2-Ten-GigabitEthernet3/1/1] igmp enable

[CEa2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEa2] interface ten-gigabitethernet 3/1/2

[CEa2-Ten-GigabitEthernet3/1/2] ip address 11.3.1.2 24

[CEa2-Ten-GigabitEthernet3/1/2] pim sm

[CEa2-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEa2] ospf 1

[CEa2-ospf-1] area 0.0.0.0

[CEa2-ospf-1-area-0.0.0.0] network 12.3.1.0 0.0.0.255

[CEa2-ospf-1-area-0.0.0.0] network 11.3.1.0 0.0.0.255

[CEa2-ospf-1-area-0.0.0.0] quit

[CEa2-ospf-1] quit

 

(10)     配置CE b2

# 使能IP组播路由。

<CEb2> system-view

[CEb2] multicast routing

[CEb2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CEb2] interface ten-gigabitethernet 3/1/1

[CEb2-Ten-GigabitEthernet3/1/1] ip address 12.4.1.1 24

[CEb2-Ten-GigabitEthernet3/1/1] igmp enable

[CEb2-Ten-GigabitEthernet3/1/1] igmp version 3

[CEb2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEb2] interface ten-gigabitethernet 3/1/2

[CEb2-Ten-GigabitEthernet3/1/2] ip address 11.4.1.2 24

[CEb2-Ten-GigabitEthernet3/1/2] pim sm

[CEb2-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEb2] ospf 1

[CEb2-ospf-1] area 0.0.0.0

[CEb2-ospf-1-area-0.0.0.0] network 12.4.1.0 0.0.0.255

[CEb2-ospf-1-area-0.0.0.0] network 11.4.1.0 0.0.0.255

[CEb2-ospf-1-area-0.0.0.0] quit

[CEb2-ospf-1] quit

 

4. 验证配置

# 查看PE 1上VPN实例a中的BIER相容性隧道信息。

[PE1] display multicast-vpn vpn-instance a inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64               10          0           0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 2          BFR prefix: 2222::2222

     Uptime: 00:01:00   Originating router: 2.2.2.2

# 查看PE 1上VPN实例a中的BIER选择性隧道信息。

[PE1] display multicast-vpn vpn-instance a selective-tunnel local

Total 1 selective tunnels in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif2

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64               10          0           0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 2          BFR prefix: 2222::2222

     Uptime: 00:10:01   Originating router: 2.2.2.2

# 查看PE 1上VPN实例a中的C-multicast A-D路由信息。

[PE1] display multicast-vpn vpn-instance a c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 (12.1.1.100, 225.0.0.1)

   CreateTime: 02:54:43

   Tunnel Information: BIERVOif1

# 查看PE 2上VPN实例a中的BIER相容性隧道信息。

[PE2] display multicast-vpn vpn-instance a inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 2          BFR prefix: 2222::2222

     Uptime: --         Originating router: 2.2.2.2

# 查看PE 2上VPN实例a中的BIER选择性隧道信息。

[PE2] display multicast-vpn vpn-instance a selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 2          BFR prefix: 2222::2222

     Uptime: --         Originating router: 2.2.2.2

# 查看PE2上VPN实例a中的PIM路由表项。

[PE2] display pim vpn-instance a routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

(12.1.1.100, 225.0.0.1)

     RP: 11.1.1.1

     Protocol: pim-sm, Flag: SPT ACT SRC-ACT SC

     UpTime: 00:56:25

     Upstream interface: BIERVIif0(1.1.1.1)

         Upstream neighbor: 1.1.1.1

         RPF prime neighbor: 1.1.1.1

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: Ten-GigabitEthernet3/1/2

             Protocol: pim-sm, UpTime: 00:56:25, Expires: 00:03:17

# 查看PE 3上VPN实例a中的BIER相容性隧道信息。

[PE3] display multicast-vpn vpn-instance a inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 3333::3333>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 3

BFR prefix: 3333::3333

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64               10          0           0

Root: 3.3.3.3 (local)

Leafs:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: 00:01:00   Originating router: 4.4.4.4

# 查看PE 3上VPN实例a中的BIER选择性隧道信息。

[PE3] display multicast-vpn vpn-instance a selective-tunnel local

Total 1 selective tunnel in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif1

Tunnel identifier: BIER <0x0, 0x1, 3333::3333>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 3

BFR prefix: 3333::3333

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64               10          0           0

Root: 3.3.3.3 (local)

Leafs:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: 00:10:01   Originating router: 4.4.4.4

# 查看PE 3上VPN实例a中的C-multicast A-D路由信息。

[PE3] display multicast-vpn vpn-instance a c-multicast routing-table

Total 0 (*, G) entry; 1 (S, G) entry

(12.1.1.100, 225.0.0.1)

   CreateTime: 02:54:43

   Tunnel Information: BIERVOif1

# 查看PE3上VPN实例a中的PIM路由表项。

[PE3] display pim vpn-instance a routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

(12.1.1.100, 225.0.0.1)

     RP: 11.1.1.1

     Protocol: pim-sm, Flag: SPT ACT RC

     UpTime: 00:54:22

     Upstream interface: Ten-GigabitEthernet3/1/2

         Upstream neighbor: 10.3.1.1

         RPF prime neighbor: 10.3.1.1

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif1

             Protocol: MD, UpTime: 00:54:18, Expires: -

# 查看PE 4上VPN实例b中的BIER相容性隧道信息。

[PE4] display multicast-vpn vpn-instance b inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 3

BFR prefix: 3333::3333

Root: 3.3.3.3

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

# 查看PE 4上VPN实例a中的BIER选择性隧道信息。

[PE4] display multicast-vpn vpn-instance a selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 3

BFR prefix: 3333::3333

Root: 3.3.3.3

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

1.20.8  C类跨AS的BIER模式MVPN配置举例(G-BIER封装类型)

1. 组网需求

组网需求如表1-10所示。

表1-10 C类跨AS的BIER模式MVPN配置组网需求

项目

组网需求

组播源和接收者

·     VPN a的组播源为S 1,接收者为R 2

·     VPN b的组播源为S 2,接收者为R 1

·     VPN a中使用PIM-SM组播组

·     VPN b中使用PIM-SSM组播组

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3接口属于VPN实例b,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/1、Ten-GigabitEthernet3/1/2、LoopBack1接口属于公网实例

·     PE 3:Ten-GigabitEthernet3/1/1、Ten-GigabitEthernet3/1/2、LoopBack1接口属于公网实例

·     PE 4:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3接口属于VPN实例b,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

单播路由协议和BIER

·     在AS 100和AS 200中分别配置OSPF,在各PE与CE之间也配置OSPF

·     在PE 1与PE 2、PE 2与PE 3、PE 3与PE 4、PE 4与PE 1各自的LoopBack1接口之间建立BGP对等体,PE 2与PE 3各自的Ten-GigabitEthernet3/1/2接口之间建立EBGP对等体

·     在AS 100和AS 200中分别配置BIER

·     P1和P2上配置BIER

IP组播路由功能

·     在PE 1、PE 2、PE 3和PE 4的公网实例中均使能IP组播路由

·     在PE 1和PE 4的VPN实例a中均使能IP组播路由

·     在PE 1和PE 4的VPN实例b中均使能IP组播路由

·     在CE a1、CE a2、CE b1、CE b2上均使能IP组播路由

IGMP功能

·     在CE a2的Ten-GigabitEthernet3/1/1接口上使能IGMPv2

·     在CE b2的Ten-GigabitEthernet3/1/1接口上使能IGMPv3

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 4的所有私网接口上均使能PIM-SM

·     在CE a1、CE a2、CE b1和CE b2所有不连接接收者的接口上均使能PIM-SM

·     PE1的Ten-GigabitEthernet3/1/2接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-20 C类跨AS的BIER模式MVPN配置组网图

 

 

设备

接口

IP地址

设备

接口

IP地址

S 1

-

12.1.1.100/24

R 1

-

12.4.1.100/24

S 2

-

12.2.1.100/24

R 2

-

12.3.1.100/24

PE 1

XGE3/1/1

1011::1/80

PE 3

XGE3/1/1

1041::1/80

 

XGE3/1/2

11.1.1.1/24

 

XGE3/1/2

1031::2/80

 

XGE3/1/3

11.2.1.1/24

 

Loop1

3.3.3.3/32

3333::3333/128

 

Loop1

1.1.1.1/32

1111::1111/128

PE 4

XGE3/1/1

1051::2/80

PE 2

XGE3/1/1

1021::2/80

 

XGE3/1/2

11.3.1.1/24

 

XGE3/1/2

1031::1/80

 

XGE3/1/3

11.4.1.1/24

 

Loop1

2.2.2.2/32

2222::2222/128

 

Loop1

4.4.4.4/32

4444::4444/128

P 1

XGE3/1/1

1011::2/80

P 2

XGE3/1/1

1051::1/80

 

XGE3/1/2

1021::1/80

 

XGE3/1/2

1041::2/80

 

Loop1

5.5.5.5/32

5555::5555/128

 

Loop1

6.6.6.6/32

6666::6666/128

CE a1

XGE3/1/1

12.1.1.1/24

CE b1

XGE3/1/1

12.2.1.1/24

 

XGE3/1/2

11.1.1.2/24

 

XGE3/1/2

11.2.1.2/24

CE a2

XGE3/1/1

12.3.1.1/24

CE b2

XGE3/1/1

12.4.1.1/24

 

XGE3/1/2

11.3.1.2/24

 

XGE3/1/2

11.4.1.2/24

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置BIER。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[PE1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[PE1-bier-sub-domain-0-ipv6] g-bier mpra 5001::1

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:1:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-vpn-instance-a] address-family ipv4

[PE1-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] auto-discovery inter-as

[PE1-mvpn-vpn-instance-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 1

[PE1-mvpn-vpn-instance-a-ipv4] quit

[PE1-mvpn-vpn-instance-a] quit

# 创建VPN实例b,并为其配置RD和Route Target。

[PE1] ip vpn-instance b

[PE1-vpn-instance-b] route-distinguisher 200:1

[PE1-vpn-instance-b] vpn-target 200:1 export-extcommunity

[PE1-vpn-instance-b] vpn-target 200:1 import-extcommunity

[PE1-vpn-instance-b] quit

# 使能VPN实例b中的IP组播路由。

[PE1] multicast routing vpn-instance b

[PE1-mrib-b] quit

# 创建VPN实例b的BIER模式MVPN并进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance b mode bier

[PE1-mvpn-vpn-instance-b] address-family ipv4

[PE1-mvpn-vpn-instance-b-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-b-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-b-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-b-ipv4] auto-discovery inter-as

[PE1-mvpn-vpn-instance-b-ipv4] tunnel-source multicast-service-prefix ms1 service-id 2

[PE1-mvpn-vpn-instance-b-ipv4] quit

[PE1-mvpn-vpn-instance-b] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 1011::1 80

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 11.1.1.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 将接口Ten-GigabitEthernet3/1/3与VPN实例b进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/3

[PE1-Ten-GigabitEthernet3/1/3] ip binding vpn-instance b

[PE1-Ten-GigabitEthernet3/1/3] ip address 11.2.1.1 24

[PE1-Ten-GigabitEthernet3/1/3] pim sm

[PE1-Ten-GigabitEthernet3/1/3] quit

# 配置Ten-GigabitEthernet3/1/2的地址为VPN实例a的C-BSR和C-RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.1.1.1

[PE1-pim-a] c-rp 11.1.1.1

[PE1-pim-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 2222::2222 as-number 100

[PE1-bgp-default] peer 2222::2222 connect-interface loopback 1

[PE1-bgp-default] peer 4444::4444 as-number 200

[PE1-bgp-default] peer 4444::4444 connect-interface loopback 1

[PE1-bgp-default] peer 4444::4444 ebgp-max-hop 10

[PE1–bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] peer 2222::2222 enable

[PE1-bgp-default-ipv6] import-route direct

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 4444::4444 enable

[PE1-bgp-default-mvpn] quit

[PE1–bgp-default] address-family vpnv4

[PE1–bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1–bgp-default-vpnv4] peer 4444::4444 enable

[PE1–bgp-default-vpnv4] peer 4444::4444 prefix-sid

[PE1–bgp-default-vpnv4] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] import-route ospf 2

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] ip vpn-instance b

[PE1-bgp-default-b] address-family ipv4

[PE1-bgp-default-ipv4-b] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-b] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-b] import-route ospf 3

[PE1-bgp-default-ipv4-b] import-route direct

[PE1-bgp-default-ipv4-b] quit

[PE1-bgp-default-b] quit

[PE1-bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置OSPF协议。

[PE1] ospf 2 vpn-instance a

[PE1-ospf-2] import-route bgp

[PE1-ospf-2] area 0.0.0.0

[PE1-ospf-2-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[PE1-ospf-2-area-0.0.0.0] quit

[PE1-ospf-2] quit

[PE1] ospf 3 vpn-instance b

[PE1-ospf-3] import-route bgp

[PE1-ospf-3] area 0.0.0.0

[PE1-ospf-3-area-0.0.0.0] network 11.2.1.0 0.0.0.255

[PE1-ospf-3-area-0.0.0.0] quit

[PE1-ospf-3] quit

 

(2)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 2.2.2.2 32

[PE2-LoopBack1] ipv6 address 2222::2222 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置BIER。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[PE2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[PE2-bier-sub-domain-0-ipv6] g-bier mpra 5002::1

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 2222::2222

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 2:2:: 96 static 8

[PE2-segment-routing-ipv6-locator-aaa] quit

[PE2-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 1021::2 80

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 1031::1 80

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] peer 1031::2 as-number 200

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] bier enable

[PE2-bgp-default-ipv6] import-bier isisv6 1

[PE2-bgp-default-ipv6] peer 1111::1111 enable

[PE2-bgp-default-ipv6] peer 1111::1111 next-hop-local

[PE2-bgp-default-ipv6] peer 1031::2 enable

[PE2-bgp-default-ipv6] peer 1031::2 capability bier

[PE2-bgp-default-ipv6] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] import-bier bgp4+

# 配置IS-IS发布域外代理路由。

[PE2-isis-1-ipv6] import-route bgp4+ level-1

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

 

(3)     配置PE 3

# 配置全局Router ID。

<PE3> system-view

[PE3] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[PE3] isis 1

[PE3-isis-1] is-level level-1

[PE3-isis-1] cost-style wide

[PE3-isis-1] network-entity 10.0000.0000.0003.00

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE3] interface loopback 1

[PE3-LoopBack1] ip address 3.3.3.3 32

[PE3-LoopBack1] ipv6 address 3333::3333 128

[PE3-LoopBack1] isis ipv6 enable 1

[PE3-LoopBack1] quit

# 配置BIER。

[PE3] bier

[PE3-bier] sub-domain 0 ipv6

[PE3-bier-sub-domain-0-ipv6] bfr-id 3

[PE3-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[PE3-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[PE3-bier-sub-domain-0-ipv6] g-bier mpra 5003::1

# 配置SRv6。

[PE3] segment-routing ipv6

[PE3-segment-routing-ipv6] encapsulation source-address 3333::3333

[PE3-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[PE3-segment-routing-ipv6-locator-aaa] quit

[PE3-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址、并使能IS-IS。

[PE3] interface ten-gigabitethernet 3/1/1

[PE3-Ten-GigabitEthernet3/1/1] ipv6 address 1041::1 80

[PE3-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE3-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址。

[PE3] interface ten-gigabitethernet 3/1/2

[PE3-Ten-GigabitEthernet3/1/2] ipv6 address 1031::2 80

[PE3-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE3] bgp 200

[PE3-bgp-default] peer 4444::4444 as-number 200

[PE3-bgp-default] peer 4444::4444 connect-interface loopback 1

[PE3-bgp-default] peer 1031::1 as-number 100

[PE3-bgp-default] address-family ipv6

[PE3-bgp-default-ipv6] bier enable

[PE3-bgp-default-ipv6] import-bier isisv6 1

[PE3-bgp-default-ipv6] peer 4444::4444 enable

[PE3-bgp-default-ipv6] peer 4444::4444 next-hop-local

[PE3-bgp-default-ipv6] peer 1031::1 enable

[PE3-bgp-default-ipv6] peer 1031::1 capability bier

[PE3-bgp-default-ipv6] quit

[PE3–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE3] isis 1

[PE3-isis-1] bier enable

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE3-isis-1-ipv6] import-bier bgp4+

# 配置IS-IS发布域外代理路由。

[PE3-isis-1-ipv6] import-route bgp4+ level-1

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

 

(4)     配置PE 4

# 配置全局Router ID,并使能公网实例中的IP组播路由。

<PE4> system-view

[PE4] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[PE4] isis 1

[PE4-isis-1] is-level level-1

[PE4-isis-1] cost-style wide

[PE4-isis-1] network-entity 10.0000.0000.0004.00

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

# 配置LoopBack1接口的IP地址。

[PE4] interface loopback 1

[PE4-LoopBack1] ip address 4.4.4.4 32

[PE4-LoopBack1] ipv6 address 4444::4444 128

[PE4-LoopBack1] isis ipv6 enable 1

[PE4-LoopBack1] quit

# 配置BIER。

[PE4] bier

[PE4-bier] sub-domain 0 ipv6

[PE4-bier-sub-domain-0-ipv6] bfr-id 4

[PE4-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[PE4-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[PE4-bier-sub-domain-0-ipv6] g-bier mpra 5004::1

# 配置SRv6。

[PE4] segment-routing ipv6

[PE4-segment-routing-ipv6] encapsulation source-address 4444::4444

[PE4-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[PE4-segment-routing-ipv6-locator-aaa] quit

[PE4-segment-routing-ipv6] quit

# 配置组播服务前缀。

[PE4] multicast-service-prefix ms1 ipv6-prefix 1234:4:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE4] ip vpn-instance a

[PE4-vpn-instance-a] route-distinguisher 300:1

[PE4-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE4-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE4-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE4] multicast routing vpn-instance a

[PE4-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE4] multicast-vpn vpn-instance a mode bier

[PE4-mvpn-vpn-instance-a] address-family ipv4

[PE4-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE4-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 1

[PE4-mvpn-vpn-instance-a-ipv4] auto-discovery inter-as

[PE4-mvpn-vpn-instance-a-ipv4] quit

[PE4-mvpn-vpn-instance-a] quit

# 创建VPN实例b,并为其配置RD和Route Target。

[PE4] ip vpn-instance b

[PE4-vpn-instance-b] route-distinguisher 400:1

[PE4-vpn-instance-b] vpn-target 200:1 export-extcommunity

[PE4-vpn-instance-b] vpn-target 200:1 import-extcommunity

[PE4-vpn-instance-b] quit

# 使能VPN实例b中的IP组播路由。

[PE4] multicast routing vpn-instance b

[PE4-mrib-b] quit

# 创建VPN实例b的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE4] multicast-vpn vpn-instance b mode bier

[PE4-mvpn-vpn-instance-b] address-family ipv4

[PE4-mvpn-vpn-instance-b-ipv4] source loopback 1

[PE4-mvpn-vpn-instance-b-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-b-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-b-ipv4] tunnel-source multicast-service-prefix ms1 service-id 2

[PE4-mvpn-vpn-instance-b-ipv4] auto-discovery inter-as

[PE4-mvpn-vpn-instance-b-ipv4] quit

[PE4-mvpn-vpn-instance-b] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,使能IS-IS。

[PE4] interface ten-gigabitethernet 3/1/1

[PE4-Ten-GigabitEthernet3/1/1] ipv6 address 1051::2 80

[PE4-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE4-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE4] interface ten-gigabitethernet 3/1/2

[PE4-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE4-Ten-GigabitEthernet3/1/2] ip address 11.3.1.1 24

[PE4-Ten-GigabitEthernet3/1/2] pim sm

[PE4-Ten-GigabitEthernet3/1/2] quit

# 将接口Ten-GigabitEthernet3/1/3与VPN实例b进行关联,配置IP地址,并使能PIM-SM。

[PE4] interface ten-gigabitethernet 3/1/3

[PE4-Ten-GigabitEthernet3/1/3] ip binding vpn-instance b

[PE4-Ten-GigabitEthernet3/1/3] ip address 11.4.1.1 24

[PE4-Ten-GigabitEthernet3/1/3] pim sm

[PE4-Ten-GigabitEthernet3/1/3] quit

# 配置BGP协议。

[PE4] bgp 200

[PE4-bgp-default] peer 3333::3333 as-number 200

[PE4-bgp-default] peer 3333::3333 connect-interface loopback 1

[PE4-bgp-default] peer 1111::1111 as-number 100

[PE4-bgp-default] peer 1111::1111 ebgp-max-hop 10

[PE4-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE4-bgp-default] address-family ipv6

[PE4-bgp-default-ipv6] peer 3333::3333 enable

[PE4-bgp-default-ipv6] import-route direct

[PE4-bgp-default-ipv6] advertise srv6 locator aaa

[PE4-bgp-default-ipv6] quit

[PE4–bgp-default] address-family ipv4 mvpn

[PE4–bgp-default-mvpn] peer 1111::1111 enable

[PE4–bgp-default-mvpn] quit

[PE4–bgp-default] address-family vpnv4

[PE4–bgp-default-vpnv4] mvpn-advertise-rt-import

[PE4–bgp-default-vpnv4] peer 1111::1111 enable

[PE4–bgp-default-vpnv4] peer 1111::1111 prefix-sid

[PE4–bgp-default-vpnv4] quit

[PE4–bgp-default] ip vpn-instance a

[PE4-bgp-default-a] address-family ipv4

[PE4-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv4-a] import-route ospf 2

[PE4-bgp-default-ipv4-a] import-route direct

[PE4-bgp-default-ipv4-a] quit

[PE4-bgp-default-a] quit

[PE4–bgp-default] ip vpn-instance b

[PE4-bgp-default-b] address-family ipv4

[PE4-bgp-default-ipv4-b] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv4-b] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv4-b] import-route ospf 3

[PE4-bgp-default-ipv4-b] import-route direct

[PE4-bgp-default-ipv4-b] quit

[PE4-bgp-default-b] quit

[PE4–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE4] isis 1

[PE4-isis-1] bier enable

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

# 配置OSPF协议。

[PE4] ospf 2 vpn-instance a

[PE4-ospf-2] import-route bgp 200

[PE4-ospf-2] area 0.0.0.0

[PE4-ospf-2-area-0.0.0.0] network 11.3.1.0 0.0.0.255

[PE4-ospf-2-area-0.0.0.0] quit

[PE4-ospf-2] quit

[PE4] ospf 3 vpn-instance b

[PE4-ospf-3] import-route bgp 200

[PE4-ospf-3] area 0.0.0.0

[PE4-ospf-3-area-0.0.0.0] network 11.4.1.0 0.0.0.255

[PE4-ospf-3-area-0.0.0.0] quit

[PE4-ospf-3] quit

 

(5)     配置P1

# 配置IPv6 IS-IS协议。

<P1> system-view

[P1] isis 1

[P1-isis-1] is-level level-1

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0005.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P1] interface loopback 1

[P1-LoopBack1] ip address 5.5.5.5 32

[P1-LoopBack1] ipv6 address 5555::5555 128

[P1-LoopBack1] isis ipv6 enable 1

[P1-LoopBack1] quit

# 配置BIER。

[P1] bier

[P1-bier] sub-domain 0 ipv6

[P1-bier-sub-domain-0-ipv6] bfr-id 5

[P1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[P1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[P1-bier-sub-domain-0-ipv6] g-bier mpra 5005::1

# 配置SRv6。

[P1] segment-routing ipv6

[P1-segment-routing-ipv6] encapsulation source-address 5555::5555

[P1-segment-routing-ipv6] locator aaa ipv6-prefix 5:2:: 96 static 8

[P1-segment-routing-ipv6-locator-aaa] quit

[P1-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/1

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 1011::2 80

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/2

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 1021::1 80

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P1] isis 1

[P1-isis-1] bier enable

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] segment-routing ipv6 locator aaa

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

 

(6)     配置P2

# 配置IPv6 IS-IS协议。

<P2> system-view

[P2] isis 1

[P2-isis-1] is-level level-1

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0006.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P2] interface loopback 1

[P2-LoopBack1] ip address 6.6.6.6 32

[P2-LoopBack1] ipv6 address 6666::6666 128

[P2-LoopBack1] isis ipv6 enable 1

[P2-LoopBack1] quit

# 配置BIER。

[P2] bier

[P2-bier] sub-domain 0 ipv6

[P2-bier-sub-domain-0-ipv6] bfr-id 6

[P2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[P2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

[P2-bier-sub-domain-0-ipv6] g-bier mpra 5006::1

# 配置SRv6

[P2] segment-routing ipv6

[P2-segment-routing-ipv6] encapsulation source-address 6666::6666

[P2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[P2-segment-routing-ipv6-locator-aaa] quit

[P2-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/1

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 1051::1 80

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/2

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 1041::2 80

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P2] isis 1

[P2-isis-1] bier enable

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] segment-routing ipv6 locator aaa

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

 

(7)     配置CE a1

# 使能IP组播路由。

<CEa1> system-view

[CEa1] multicast routing

[CEa1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CEa1] interface ten-gigabitethernet 3/1/1

[CEa1-Ten-GigabitEthernet3/1/1] ip address 12.1.1.1 24

[CEa1-Ten-GigabitEthernet3/1/1] pim sm

[CEa1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEa1] interface ten-gigabitethernet 3/1/2

[CEa1-Ten-GigabitEthernet3/1/2] ip address 11.1.1.2 24

[CEa1-Ten-GigabitEthernet3/1/2] pim sm

[CEa1-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEa1] ospf 1

[CEa1-ospf-1] area 0.0.0.0

[CEa1-ospf-1-area-0.0.0.0] network 12.1.1.0 0.0.0.255

[CEa1-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[CEa1-ospf-1-area-0.0.0.0] quit

[CEa1-ospf-1] quit

 

(8)     配置CE b1

# 使能IP组播路由。

<CEb1> system-view

[CEb1] multicast routing

[CEb1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CEb1] interface ten-gigabitethernet 3/1/1

[CEb1-Ten-GigabitEthernet3/1/1] ip address 12.2.1.1 24

[CEb1-Ten-GigabitEthernet3/1/1] pim sm

[CEb1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEb1] interface ten-gigabitethernet 3/1/2

[CEb1-Ten-GigabitEthernet3/1/2] ip address 11.2.1.2 24

[CEb1-Ten-GigabitEthernet3/1/2] pim sm

[CEb1-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEb1] ospf 1

[CEb1-ospf-1] area 0.0.0.0

[CEb1-ospf-1-area-0.0.0.0] network 12.2.1.0 0.0.0.255

[CEb1-ospf-1-area-0.0.0.0] network 11.2.1.0 0.0.0.255

[CEb1-ospf-1-area-0.0.0.0] quit

[CEb1-ospf-1] quit

 

(9)     配置CE a2

# 使能IP组播路由。

<CEa2> system-view

[CEa2] multicast routing

[CEa2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CEa2] interface ten-gigabitethernet 3/1/1

[CEa2-Ten-GigabitEthernet3/1/1] ip address 12.3.1.1 24

[CEa2-Ten-GigabitEthernet3/1/1] igmp enable

[CEa2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEa2] interface ten-gigabitethernet 3/1/2

[CEa2-Ten-GigabitEthernet3/1/2] ip address 11.3.1.2 24

[CEa2-Ten-GigabitEthernet3/1/2] pim sm

[CEa2-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEa2] ospf 1

[CEa2-ospf-1] area 0.0.0.0

[CEa2-ospf-1-area-0.0.0.0] network 12.3.1.0 0.0.0.255

[CEa2-ospf-1-area-0.0.0.0] network 11.3.1.0 0.0.0.255

[CEa2-ospf-1-area-0.0.0.0] quit

[CEa2-ospf-1] quit

 

(10)     配置CE b2

# 使能IP组播路由。

<CEb2> system-view

[CEb2] multicast routing

[CEb2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMPv3。

[CEb2] interface ten-gigabitethernet 3/1/1

[CEb2-Ten-GigabitEthernet3/1/1] ip address 12.4.1.1 24

[CEb2-Ten-GigabitEthernet3/1/1] igmp enable

[CEb2-Ten-GigabitEthernet3/1/1] igmp version 3

[CEb2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEb2] interface ten-gigabitethernet 3/1/2

[CEb2-Ten-GigabitEthernet3/1/2] ip address 11.4.1.2 24

[CEb2-Ten-GigabitEthernet3/1/2] pim sm

[CEb2-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEb2] ospf 1

[CEb2-ospf-1] area 0.0.0.0

[CEb2-ospf-1-area-0.0.0.0] network 12.4.1.0 0.0.0.255

[CEb2-ospf-1-area-0.0.0.0] network 11.4.1.0 0.0.0.255

[CEb2-ospf-1-area-0.0.0.0] quit

[CEb2-ospf-1] quit

 

4. 验证配置

# 查看PE 1上VPN实例a中的BIER相容性隧道信息。

[PE1] display multicast-vpn vpn-instance a inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64               10          0           0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 4           BFR prefix: 4444::4444

     Uptime: 00:01:00   Originating router: 4.4.4.4

# 查看PE 1上VPN实例a中的BIER选择性隧道信息。

[PE1] display multicast-vpn vpn-instance a selective-tunnel local

Total 1 selective tunnels in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif2

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64               10          0           0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: 00:10:01   Originating router: 4.4.4.4

# 查看PE 1上VPN实例a中的C-multicast A-D路由信息。

[PE1] display multicast-vpn vpn-instance a c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 (12.1.1.100, 225.0.0.1)

   CreateTime: 02:54:43

   Tunnel Information: BIERVOif2

# 查看PE 1上VPN实例a中的pim-sm表项。

[PE1] display pim vpn-instance a routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

 (12.1.1.100, 225.0.0.1)

     RP: 11.1.1.1 (local)

     Protocol: pim-sm, Flag: SPT 2MSDP ACT RC SRC-ACT 2MVPN

     UpTime: 00:00:43

     Upstream interface: Ten-GigabitEthernet3/1/2

         Upstream neighbor: 11.1.1.2

         RPF prime neighbor: 11.1.1.2

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif2

             Protocol: MD, UpTime: 00:00:30, Expires: -

# 查看PE 1上VPN实例b中的BIER相容性隧道信息。

[PE1] display multicast-vpn vpn-instance b inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif3

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64               10          0           0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 4           BFR prefix: 4444::4444

     Uptime: 00:01:00   Originating router: 4.4.4.4

# 查看PE 1上VPN实例b中的BIER选择性隧道信息。

[PE1] display multicast-vpn vpn-instance b selective-tunnel local

Total 1 selective tunnels in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif4

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Multicast service prefix:

  Prefix length    ID length   ID offset   MS Flags

  64               10          0           0

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: 00:10:01   Originating router: 4.4.4.4

# 查看PE 1上VPN实例b中的pim-ssm表项。

[PE1] display pim vpn-instance b  routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

 (12.2.1.100, 232.0.0.0)

     Protocol: pim-ssm, Flag: RC

     UpTime: 00:26:06

     Upstream interface: Ten-GigabitEthernet3/1/3

         Upstream neighbor: 11.2.1.2

         RPF prime neighbor: 11.2.1.2

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif4

             Protocol: MD, UpTime: 00:25:56, Expires: -

# 查看PE 2上BIER子域下的BIER跨域信息。

[PE2] display bier inter-as bfr-info sub-domain 0

  Sub-domain 0

    BFR prefix: 3333::3333

     BFR-ID: 3

     AS number: 200

     Protocol: BGP

     Sub protocol: EBGP

     BFR ID range: 4,6

# 查看PE 4上VPN实例a中的BIER相容性隧道信息。

[PE4] display multicast-vpn vpn-instance a inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

# 查看PE 4上VPN实例a中的BIER选择性隧道信息。

[PE4] display multicast-vpn vpn-instance a selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

# 查看PE 4上VPN实例b中的BIER相容性隧道信息。

[PE4] display multicast-vpn vpn-instance b inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

# 查看PE 4上VPN实例b中的BIER选择性隧道信息。

[PE4] display multicast-vpn vpn-instance b selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

1.20.9  BIER静态C类跨域穿越的BIER模式MVPN配置举例(BIERv6封装类型)

1. 组网需求

组网需求如表1-11所示。

表1-11 BIER静态C类跨域穿越的BIER模式MVPN配置组网需求

项目

组网需求

组播源和接收者

·     VPN a的组播源为S 1,接收者为R 2

·     VPN b的组播源为S 2,接收者为R 1

·     VPN a中使用PIM-SM组播组

·     VPN b中使用PIM-SSM组播组

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3接口属于VPN实例b,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/1、Ten-GigabitEthernet3/1/2、LoopBack1接口属于公网实例

·     PE 3:Ten-GigabitEthernet3/1/1、Ten-GigabitEthernet3/1/2、LoopBack1接口属于公网实例

·     PE 4:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3接口属于VPN实例b,Ten-GigabitEthernet3/1/1和LoopBack1接口属于公网实例

单播路由协议和BIER

·     在AS 100和AS 200中分别配置OSPF,在各PE与CE之间也配置OSPF

·     在PE 1与PE 2、PE 2与PE 3、PE 3与PE 4、PE 4与PE 1各自的LoopBack1接口之间建立BGP对等体,PE 2与PE 3各自的Ten-GigabitEthernet3/1/2接口之间建立EBGP对等体

·     在AS 100和AS 200中分别配置BIER

·     P1和P2上配置BIER

IP组播路由功能

·     在PE 1、PE 2、PE 3和PE 4的公网实例中均使能IP组播路由

·     在PE 1和PE 4的VPN实例a中均使能IP组播路由

·     在PE 1和PE 4的VPN实例b中均使能IP组播路由

·     在CE a1、CE a2、CE b1、CE b2上均使能IP组播路由

IGMP功能

·     在CE a2的Ten-GigabitEthernet3/1/1接口上使能IGMPv2

·     在CE b2的Ten-GigabitEthernet3/1/1接口上使能IGMPv3

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 4的所有私网接口上均使能PIM-SM

·     在CE a1、CE a2、CE b1和CE b2所有不连接接收者的接口上均使能PIM-SM

·     PE1的Ten-GigabitEthernet3/1/2接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-21 BIER静态C类跨域穿越的BIER模式MVPN配置组网图

设备

接口

IP地址

设备

接口

IP地址

S 1

-

12.1.1.100/24

R 1

-

12.4.1.100/24

S 2

-

12.2.1.100/24

R 2

-

12.3.1.100/24

PE 1

XGE3/1/1

1011::1/80

PE 3

XGE3/1/1

1041::1/80

 

XGE3/1/2

11.1.1.1/24

 

XGE3/1/2

1031::2/80

 

XGE3/1/3

11.2.1.1/24

 

Loop1

3.3.3.3/32

3333::3333/128

 

Loop1

1.1.1.1/32

1111::1111/128

PE 4

XGE3/1/1

1051::2/80

PE 2

XGE3/1/1

1021::2/80

 

XGE3/1/2

11.3.1.1/24

 

XGE3/1/2

1031::1/80

 

XGE3/1/3

11.4.1.1/24

 

Loop1

2.2.2.2/32

2222::2222/128

 

Loop1

4.4.4.4/32

4444::4444/128

P 1

XGE3/1/1

1011::2/80

P 2

XGE3/1/1

1051::1/80

 

XGE3/1/2

1021::1/80

 

XGE3/1/2

1041::2/80

 

Loop1

5.5.5.5/32

5555::5555/128

 

Loop1

6.6.6.6/32

6666::6666/128

CE a1

XGE3/1/1

12.1.1.1/24

CE b1

XGE3/1/1

12.2.1.1/24

 

XGE3/1/2

11.1.1.2/24

 

XGE3/1/2

11.2.1.2/24

CE a2

XGE3/1/1

12.3.1.1/24

CE b2

XGE3/1/1

12.4.1.1/24

 

XGE3/1/2

11.3.1.2/24

 

XGE3/1/2

11.4.1.2/24

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-1

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE1] interface loopback 1

[PE1-LoopBack1] ip address 1.1.1.1 32

[PE1-LoopBack1] ipv6 address 1111::1111 128

[PE1-LoopBack1] isis ipv6 enable 1

[PE1-LoopBack1] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 1111::1111

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6-locator-aaa] quit

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为1:2::1。

[PE1-bier-sub-domain-0-ipv6] end-bier locator aaa sid 1:2::1

# 配置跨域静态穿越。

[PE1-bier-sub-domain-0-ipv6] bfr-neighbor end-bier 3:2::1 bfr-id 3 to 4

[PE1-bier-sub-domain-0-ipv6] bfr-neighbor end-bier 3:2::1 bfr-id 6

[PE1-bier-sub-domain-0-ipv6] quit

[PE1-bier] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-vpn-instance-a] address-family ipv4

[PE1-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] auto-discovery inter-as

[PE1-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:2::2

[PE1-mvpn-vpn-instance-a-ipv4] quit

[PE1-mvpn-vpn-instance-a] quit

# 创建VPN实例b,并为其配置RD和Route Target。

[PE1] ip vpn-instance b

[PE1-vpn-instance-b] route-distinguisher 200:1

[PE1-vpn-instance-b] vpn-target 200:1 export-extcommunity

[PE1-vpn-instance-b] vpn-target 200:1 import-extcommunity

[PE1-vpn-instance-b] quit

# 使能VPN实例b中的IP组播路由。

[PE1] multicast routing vpn-instance b

[PE1-mrib-b] quit

# 创建VPN实例b的BIER模式MVPN并进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance b mode bier

[PE1-mvpn-vpn-instance-b] address-family ipv4

[PE1-mvpn-vpn-instance-b-ipv4] source loopback 1

[PE1-mvpn-vpn-instance-b-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-b-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-b-ipv4] auto-discovery inter-as

[PE1-mvpn-vpn-instance-b-ipv4] src-dt4 locator aaa sid 1:2::3

[PE1-mvpn-vpn-instance-b-ipv4] quit

[PE1-mvpn-vpn-instance-b] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 1011::1 24

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 11.1.1.1 24

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 将接口Ten-GigabitEthernet3/1/3与VPN实例b进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/3

[PE1-Ten-GigabitEthernet3/1/3] ip binding vpn-instance b

[PE1-Ten-GigabitEthernet3/1/3] ip address 11.2.1.1 24

[PE1-Ten-GigabitEthernet3/1/3] pim sm

[PE1-Ten-GigabitEthernet3/1/3] quit

# 配置Ten-GigabitEthernet3/1/2的地址为VPN实例a的C-BSR和C-RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.1.1.1

[PE1-pim-a] c-rp 11.1.1.1

[PE1-pim-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] peer 2222::2222 as-number 100

[PE1-bgp-default] peer 2222::2222 connect-interface loopback 1

[PE1-bgp-default] peer 4444::4444 as-number 200

[PE1-bgp-default] peer 4444::4444 connect-interface loopback 1

[PE1-bgp-default] peer 4444::4444 ebgp-max-hop 10

[PE1–bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] peer 2222::2222 enable

[PE1-bgp-default-ipv6] import-route direct

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 4444::4444 enable

[PE1-bgp-default-mvpn] peer 4444::4444 prefix-sid

[PE1-bgp-default-mvpn] quit

[PE1–bgp-default] address-family vpnv4

[PE1–bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1–bgp-default-vpnv4] peer 4444::4444 enable

[PE1–bgp-default-vpnv4] peer 4444::4444 prefix-sid

[PE1–bgp-default-vpnv4] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] import-route ospf 2

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] ip vpn-instance b

[PE1-bgp-default-b] address-family ipv4

[PE1-bgp-default-ipv4-b] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-b] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-b] import-route ospf 3

[PE1-bgp-default-ipv4-b] import-route direct

[PE1-bgp-default-ipv4-b] quit

[PE1-bgp-default-b] quit

[PE1-bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置OSPF协议。

[PE1] ospf 2 vpn-instance a

[PE1-ospf-2] import-route bgp

[PE1-ospf-2] area 0.0.0.0

[PE1-ospf-2-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[PE1-ospf-2-area-0.0.0.0] quit

[PE1-ospf-2] quit

[PE1] ospf 3 vpn-instance b

[PE1-ospf-3] import-route bgp

[PE1-ospf-3] area 0.0.0.0

[PE1-ospf-3-area-0.0.0.0] network 11.2.1.0 0.0.0.255

[PE1-ospf-3-area-0.0.0.0] quit

[PE1-ospf-3] quit

 

 

(2)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-1

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE2] interface loopback 1

[PE2-LoopBack1] ip address 2.2.2.2 32

[PE2-LoopBack1] ipv6 address 2222::2222 128

[PE2-LoopBack1] isis ipv6 enable 1

[PE2-LoopBack1] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 2222::2222

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 2:2:: 96 static 8

[PE2-segment-routing-ipv6-locator-aaa] quit

[PE2-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为2:2::1。

[PE2-bier-sub-domain-0-ipv6] end-bier locator aaa sid 2:2::1

[PE2-bier-sub-domain-0-ipv6] quit

[PE2-bier] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 1021::2 80

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 1031::1 80

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] peer 1111::1111 as-number 100

[PE2-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE2-bgp-default] peer 1031::2 as-number 200

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] peer 1111::1111 enable

[PE2-bgp-default-ipv6] peer 1111::1111 next-hop-local

[PE2-bgp-default-ipv6] peer 1031::2 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default-ipv6] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

# 配置IS-IS发布域外代理路由。

[PE2-isis-1-ipv6] import-route bgp4+ level-1

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

 

 

(3)     配置PE 3

# 配置全局Router ID。

<PE3> system-view

[PE3] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[PE3] isis 1

[PE3-isis-1] is-level level-1

[PE3-isis-1] cost-style wide

[PE3-isis-1] network-entity 10.0000.0000.0003.00

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[PE3] interface loopback 1

[PE3-LoopBack1] ip address 3.3.3.3 32

[PE3-LoopBack1] ipv6 address 3333::3333 128

[PE3-LoopBack1] isis ipv6 enable 1

[PE3-LoopBack1] quit

# 配置SRv6。

[PE3] segment-routing ipv6

[PE3-segment-routing-ipv6] encapsulation source-address 3333::3333

[PE3-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[PE3-segment-routing-ipv6-locator-aaa] quit

[PE3-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE3] bier

[PE3-bier] sub-domain 0 ipv6

[PE3-bier-sub-domain-0-ipv6] bfr-id 3

[PE3-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[PE3-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为3:2::1。

[PE3-bier-sub-domain-0-ipv6] end-bier locator aaa sid 3:2::1

[PE3-bier-sub-domain-0-ipv6] quit

[PE3-bier] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址、并使能IS-IS。

[PE3] interface ten-gigabitethernet 3/1/1

[PE3-Ten-GigabitEthernet3/1/1] ipv6 address 1041::1 80

[PE3-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE3-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址。

[PE3] interface ten-gigabitethernet 3/1/2

[PE3-Ten-GigabitEthernet3/1/2] ipv6 address 1031::2 80

[PE3-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[PE3] bgp 200

[PE3-bgp-default] peer 4444::4444 as-number 200

[PE3-bgp-default] peer 4444::4444 connect-interface loopback 1

[PE3-bgp-default] peer 1031::1 as-number 100

[PE3-bgp-default] address-family ipv6

[PE3-bgp-default-ipv6] peer 4444::4444 enable

[PE3-bgp-default-ipv6] peer 4444::4444 next-hop-local

[PE3-bgp-default-ipv6] peer 1031::1 enable

[PE3-bgp-default-ipv6] advertise srv6 locator aaa

[PE3-bgp-default-ipv6] quit

[PE3–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE3] isis 1

[PE3-isis-1] bier enable

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] segment-routing ipv6 locator aaa

# 配置IS-IS发布域外代理路由。

[PE3-isis-1-ipv6] import-route bgp4+ level-1

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

 

 

(4)     配置PE 4

# 配置全局Router ID,并使能公网实例中的IP组播路由。

<PE4> system-view

[PE4] router id 4.4.4.4

[PE4] multicast routing

[PE4-mrib] quit

# 配置IPv6 IS-IS协议。

[PE4] isis 1

[PE4-isis-1] is-level level-1

[PE4-isis-1] cost-style wide

[PE4-isis-1] network-entity 10.0000.0000.0004.00

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

# 配置LoopBack1接口的IP地址。

[PE4] interface loopback 1

[PE4-LoopBack1] ip address 4.4.4.4 32

[PE4-LoopBack1] ipv6 address 4444::4444 128

[PE4-LoopBack1] isis ipv6 enable 1

[PE4-LoopBack1] quit

# 配置SRv6。

[PE4] segment-routing ipv6

[PE4-segment-routing-ipv6] encapsulation source-address 4444::4444

[PE4-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[PE4-segment-routing-ipv6-locator-aaa] quit

[PE4-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口1的IPv6地址。

[PE4] bier

[PE4-bier] sub-domain 0 ipv6

[PE4-bier-sub-domain-0-ipv6] bfr-id 4

[PE4-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

# 配置BIER封装类型为BIERv6,封装的BSL为128、Max-SI为32。

[PE4-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

# 配置End.BIER SID为4:2::1。

[PE4-bier-sub-domain-0-ipv6] end-bier locator aaa sid 4:2::1

# 配置跨域静态穿越。

[PE4-bier-sub-domain-0-ipv6] bfr-neighbor end-bier 2:2::1 bfr-id 1 to 2

[PE4-bier-sub-domain-0-ipv6] bfr-neighbor end-bier 2:2::1 bfr-id 5

[PE4-bier-sub-domain-0-ipv6] quit

[PE4-bier] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE4] ip vpn-instance a

[PE4-vpn-instance-a] route-distinguisher 300:1

[PE4-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE4-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE4-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE4] multicast routing vpn-instance a

[PE4-mrib-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE4] multicast-vpn vpn-instance a mode bier

[PE4-mvpn-vpn-instance-a] address-family ipv4

[PE4-mvpn-vpn-instance-a-ipv4] source loopback 1

[PE4-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 4:2::2

[PE4-mvpn-vpn-instance-a-ipv4] auto-discovery inter-as

[PE4-mvpn-vpn-instance-a-ipv4] quit

[PE4-mvpn-vpn-instance-a] quit

# 创建VPN实例b,并为其配置RD和Route Target。

[PE4] ip vpn-instance b

[PE4-vpn-instance-b] route-distinguisher 400:1

[PE4-vpn-instance-b] vpn-target 200:1 export-extcommunity

[PE4-vpn-instance-b] vpn-target 200:1 import-extcommunity

[PE4-vpn-instance-b] quit

# 使能VPN实例b中的IP组播路由。

[PE4] multicast routing vpn-instance b

[PE4-mrib-b] quit

# 创建VPN实例b的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE4] multicast-vpn vpn-instance b mode bier

[PE4-mvpn-vpn-instance-b] address-family ipv4

[PE4-mvpn-vpn-instance-b-ipv4] source loopback 1

[PE4-mvpn-vpn-instance-b-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-b-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-b-ipv4] src-dt4 locator aaa sid 4:2::3

[PE4-mvpn-vpn-instance-a-ipv4] auto-discovery inter-as

[PE4-mvpn-vpn-instance-b-ipv4] quit

[PE4-mvpn-vpn-instance-b] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,使能IS-IS。

[PE4] interface ten-gigabitethernet 3/1/1

[PE4-Ten-GigabitEthernet3/1/1] ipv6 address 1051::2 80

[PE4-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE4-Ten-GigabitEthernet3/1/1] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE4] interface ten-gigabitethernet 3/1/2

[PE4-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE4-Ten-GigabitEthernet3/1/2] ip address 11.3.1.1 24

[PE4-Ten-GigabitEthernet3/1/2] pim sm

[PE4-Ten-GigabitEthernet3/1/2] quit

# 将接口Ten-GigabitEthernet3/1/3与VPN实例b进行关联,配置IP地址,并使能PIM-SM。

[PE4] interface ten-gigabitethernet 3/1/3

[PE4-Ten-GigabitEthernet3/1/3] ip binding vpn-instance b

[PE4-Ten-GigabitEthernet3/1/3] ip address 11.4.1.1 24

[PE4-Ten-GigabitEthernet3/1/3] pim sm

[PE4-Ten-GigabitEthernet3/1/3] quit

# 配置BGP协议。

[PE4] bgp 200

[PE4-bgp-default] peer 3333::3333 as-number 200

[PE4-bgp-default] peer 3333::3333 connect-interface loopback 1

[PE4-bgp-default] peer 1111::1111 as-number 100

[PE4-bgp-default] peer 1111::1111 ebgp-max-hop 10

[PE4-bgp-default] peer 1111::1111 connect-interface loopback 1

[PE4-bgp-default] address-family ipv6

[PE4-bgp-default-ipv6] peer 3333::3333 enable

[PE4-bgp-default-ipv6] import-route direct

[PE4-bgp-default-ipv6] advertise srv6 locator aaa

[PE4-bgp-default-ipv6] quit

[PE4–bgp-default] address-family ipv4 mvpn

[PE4–bgp-default-mvpn] peer 1111::1111 enable

[PE4-bgp-default-mvpn] peer 1111::1111 prefix-sid

[PE4–bgp-default-mvpn] quit

[PE4–bgp-default] address-family vpnv4

[PE4–bgp-default-vpnv4] mvpn-advertise-rt-import

[PE4–bgp-default-vpnv4] peer 1111::1111 enable

[PE4–bgp-default-vpnv4] peer 1111::1111 prefix-sid

[PE4–bgp-default-vpnv4] quit

[PE4–bgp-default] ip vpn-instance a

[PE4-bgp-default-a] address-family ipv4

[PE4-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv4-a] import-route ospf 2

[PE4-bgp-default-ipv4-a] import-route direct

[PE4-bgp-default-ipv4-a] quit

[PE4-bgp-default-a] quit

[PE4–bgp-default] ip vpn-instance b

[PE4-bgp-default-b] address-family ipv4

[PE4-bgp-default-ipv4-b] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv4-b] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv4-b] import-route ospf 3

[PE4-bgp-default-ipv4-b] import-route direct

[PE4-bgp-default-ipv4-b] quit

[PE4-bgp-default-b] quit

[PE4–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE4] isis 1

[PE4-isis-1] bier enable

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

# 配置OSPF协议。

[PE4] ospf 2 vpn-instance a

[PE4-ospf-2] import-route bgp

[PE4-ospf-2] area 0.0.0.0

[PE4-ospf-2-area-0.0.0.0] network 11.3.1.0 0.0.0.255

[PE4-ospf-2-area-0.0.0.0] quit

[PE4-ospf-2] quit

[PE4] ospf 3 vpn-instance b

[PE4-ospf-3] import-route bgp

[PE4-ospf-3] area 0.0.0.0

[PE4-ospf-3-area-0.0.0.0] network 11.4.1.0 0.0.0.255

[PE4-ospf-3-area-0.0.0.0] quit

[PE4-ospf-3] quit

 

 

(5)     配置P1

# 配置IPv6 IS-IS协议。

<P1> system-view

[P1] isis 1

[P1-isis-1] is-level level-1

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0005.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P1] interface loopback 1

[P1-LoopBack1] ip address 5.5.5.5 32

[P1-LoopBack1] ipv6 address 5555::5555 128

[P1-LoopBack1] isis ipv6 enable 1

[P1-LoopBack1] quit

# 配置BIER。

[P1] bier

[P1-bier] sub-domain 0 ipv6

[P1-bier-sub-domain-0-ipv6] bfr-id 5

[P1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[P1-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

[P1-bier-sub-domain-0-ipv6] end-bier locator aaa sid 5:2::1

# 配置SRv6。

[P1] segment-routing ipv6

[P1-segment-routing-ipv6] encapsulation source-address 5555::5555

[P1-segment-routing-ipv6] locator aaa ipv6-prefix 5:2:: 96 static 8

[P1-segment-routing-ipv6-locator-aaa] quit

[P1-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/1

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 1011::2 80

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/2

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 1021::1 80

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P1] isis 1

[P1-isis-1] bier enable

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] segment-routing ipv6 locator aaa

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

 

 

(6)     配置P2

# 配置IPv6 IS-IS协议。

<P2> system-view

[P2] isis 1

[P2-isis-1] is-level level-1

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0006.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 配置LoopBack1接口的IP地址,并使能IS-IS。

[P2] interface loopback 1

[P2-LoopBack1] ip address 6.6.6.6 32

[P2-LoopBack1] ipv6 address 6666::6666 128

[P2-LoopBack1] isis ipv6 enable 1

[P2-LoopBack1] quit

# 配置BIER。

[P2] bier

[P2-bier] sub-domain 0 ipv6

[P2-bier-sub-domain-0-ipv6] bfr-id 6

[P2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack1

[P2-bier-sub-domain-0-ipv6] encapsulation-type bierv6 bsl 128 max-si 32

[P2-bier-sub-domain-0-ipv6] end-bier locator aaa sid 6:2::1

# 配置SRv6

[P2] segment-routing ipv6

[P2-segment-routing-ipv6] encapsulation source-address 6666::6666

[P2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[P2-segment-routing-ipv6-locator-aaa] quit

[P2-segment-routing-ipv6] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IPv6地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/1

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 1051::1 80

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IPv6地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/2

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 1041::2 80

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P2] isis 1

[P2-isis-1] bier enable

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] segment-routing ipv6 locator aaa

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

 

 

(7)     配置CE a1

# 使能IP组播路由。

<CEa1> system-view

[CEa1] multicast routing

[CEa1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CEa1] interface ten-gigabitethernet 3/1/1

[CEa1-Ten-GigabitEthernet3/1/1] ip address 12.1.1.1 24

[CEa1-Ten-GigabitEthernet3/1/1] pim sm

[CEa1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEa1] interface ten-gigabitethernet 3/1/2

[CEa1-Ten-GigabitEthernet3/1/2] ip address 11.1.1.2 24

[CEa1-Ten-GigabitEthernet3/1/2] pim sm

[CEa1-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEa1] ospf 1

[CEa1-ospf-1] area 0.0.0.0

[CEa1-ospf-1-area-0.0.0.0] network 12.1.1.0 0.0.0.255

[CEa1-ospf-1-area-0.0.0.0] network 11.1.1.0 0.0.0.255

[CEa1-ospf-1-area-0.0.0.0] quit

[CEa1-ospf-1] quit

 

 

(8)     配置CE b1

# 使能IP组播路由。

<CEb1> system-view

[CEb1] multicast routing

[CEb1-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能PIM-SM。

[CEb1] interface ten-gigabitethernet 3/1/1

[CEb1-Ten-GigabitEthernet3/1/1] ip address 12.2.1.1 24

[CEb1-Ten-GigabitEthernet3/1/1] pim sm

[CEb1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEb1] interface ten-gigabitethernet 3/1/2

[CEb1-Ten-GigabitEthernet3/1/2] ip address 11.2.1.2 24

[CEb1-Ten-GigabitEthernet3/1/2] pim sm

[CEb1-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEb1] ospf 1

[CEb1-ospf-1] area 0.0.0.0

[CEb1-ospf-1-area-0.0.0.0] network 12.2.1.0 0.0.0.255

[CEb1-ospf-1-area-0.0.0.0] network 11.2.1.0 0.0.0.255

[CEb1-ospf-1-area-0.0.0.0] quit

[CEb1-ospf-1] quit

 

 

(9)     配置CE a2

# 使能IP组播路由。

<CEa2> system-view

[CEa2] multicast routing

[CEa2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMP。

[CEa2] interface ten-gigabitethernet 3/1/1

[CEa2-Ten-GigabitEthernet3/1/1] ip address 12.3.1.1 24

[CEa2-Ten-GigabitEthernet3/1/1] igmp enable

[CEa2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEa2] interface ten-gigabitethernet 3/1/2

[CEa2-Ten-GigabitEthernet3/1/2] ip address 11.3.1.2 24

[CEa2-Ten-GigabitEthernet3/1/2] pim sm

[CEa2-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEa2] ospf 1

[CEa2-ospf-1] area 0.0.0.0

[CEa2-ospf-1-area-0.0.0.0] network 12.3.1.0 0.0.0.255

[CEa2-ospf-1-area-0.0.0.0] network 11.3.1.0 0.0.0.255

[CEa2-ospf-1-area-0.0.0.0] quit

[CE2-ospf-1] quit

 

 

(10)     配置CE b2

# 使能IP组播路由。

<CEb2> system-view

[CEb2] multicast routing

[CEb2-mrib] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IGMPv3。

[CEb2] interface ten-gigabitethernet 3/1/1

[CEb2-Ten-GigabitEthernet3/1/1] ip address 12.4.1.1 24

[CEb2-Ten-GigabitEthernet3/1/1] igmp enable

[CEb2-Ten-GigabitEthernet3/1/1] igmp version 3

[CEb2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CEb2] interface ten-gigabitethernet 3/1/2

[CEb2-Ten-GigabitEthernet3/1/2] ip address 11.4.1.2 24

[CEb2-Ten-GigabitEthernet3/1/2] pim sm

[CEb2-Ten-GigabitEthernet3/1/2] quit

# 配置OSPF协议。

[CEb2] ospf 1

[CEb2-ospf-1] area 0.0.0.0

[CEb2-ospf-1-area-0.0.0.0] network 12.4.1.0 0.0.0.255

[CEb2-ospf-1-area-0.0.0.0] network 11.4.1.0 0.0.0.255

[CEb2-ospf-1-area-0.0.0.0] quit

[CEb2-ospf-1] quit

 

 

4. 验证配置

# 查看PE 1上VPN实例a中的BIER相容性隧道信息。

[PE1] display multicast-vpn vpn-instance a inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif0

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: 00:01:00   Originating router: 4.4.4.4

# 查看PE 1上VPN实例a中的BIER选择性隧道信息。

[PE1] display multicast-vpn vpn-instance a selective-tunnel local

Total 1 selective tunnels in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif2

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: 00:10:01   Originating router: 4.4.4.4

# 查看PE 1上VPN实例a中的C-multicast A-D路由信息。

[PE1] display multicast-vpn vpn-instance a c-multicast routing-table

 Total 0 (*, G) entry; 1 (S, G) entry

 (12.1.1.100, 225.0.0.1)

   CreateTime: 02:54:43

   Tunnel Information: BIERVOif2

# 查看PE 1上VPN实例a中的pim-sm表项。

[PE1] display pim vpn-instance a routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

 (12.1.1.100, 225.0.0.1)

     RP: 11.1.1.1 (local)

     Protocol: pim-sm, Flag: SPT 2MSDP ACT RC SRC-ACT 2MVPN

     UpTime: 00:00:43

     Upstream interface: Ten-GigabitEthernet3/1/2

         Upstream neighbor: 11.1.1.2

         RPF prime neighbor: 11.1.1.2

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif2

             Protocol: MD, UpTime: 00:00:30, Expires: -

# 查看PE 1上VPN实例b中的BIER相容性隧道信息。

[PE1] display multicast-vpn vpn-instance b inclusive-tunnel local

Tunnel type: BIER

Tunnel interface: BIERVOif3

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: 00:01:00   Originating router: 4.4.4.4

# 查看PE 1上VPN实例b中的BIER选择性隧道信息。

[PE1] display multicast-vpn vpn-instance b selective-tunnel local

Total 1 selective tunnels in using

Total 0 selective tunnel in creating

 

Tunnel type: BIER

Tunnel interface: BIERVOif4

Tunnel identifier: BIER <0x0, 0x1, 1111::1111>

Tunnel state: Up

Flags: 0x10

Sub-domain ID/BSL: 0/128

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1 (local)

Leafs:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: 00:10:01   Originating router: 4.4.4.4

# 查看PE 1上VPN实例b中的pim-ssm表项。

[PE1] display pim vpn-instance b  routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

 (12.2.1.100, 232.0.0.0)

     Protocol: pim-ssm, Flag: RC

     UpTime: 00:26:06

     Upstream interface: Ten-GigabitEthernet3/1/3

         Upstream neighbor: 11.2.1.2

         RPF prime neighbor: 11.2.1.2

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif4

             Protocol: MD, UpTime: 00:25:56, Expires: -

# 查看PE 4上VPN实例a中的BIER相容性隧道信息。

[PE4] display multicast-vpn vpn-instance a inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

# 查看PE 4上VPN实例a中的BIER选择性隧道信息。

[PE4] display multicast-vpn vpn-instance a selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

# 查看PE 4上VPN实例b中的BIER相容性隧道信息。

[PE4] display multicast-vpn vpn-instance b inclusive-tunnel remote

Total 1 inclusive tunnel

 

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

# 查看PE 4上VPN实例b中的BIER选择性隧道信息。

[PE4] display multicast-vpn vpn-instance b selective-tunnel remote

Tunnel type: BIER

Tunnel state: --

Flags: 0x0

Sub-domain ID: 0

BFR-ID: 1

BFR prefix: 1111::1111

Root: 1.1.1.1

Leaf:

  1: BFR-ID: 4          BFR prefix: 4444::4444

     Uptime: --         Originating router: 4.4.4.4

1.20.10  单AS内BIER温备本地保护配置举例(MSR6封装类型)

1. 组网需求

组网需求如表1-12所示。

表1-12 单AS内BIER温备本地保护配置(MSR6封装类型)组网需求

项目

组网需求

功能描述

·     组播源侧PE实现组播温备功能:当主用IDF故障之后,备用IDF接替主用IDF角色负责向接收者侧PE发送组播流量

·     公网配置本地保护:当公网的中间节点或主路径故障时,数据流量在其他设备单播路由收敛之前,快速切换到备份路径继续转发

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/1和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/3、Ten-GigabitEthernet3/1/4和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/4接口属于VPN实例a,Ten-GigabitEthernet3/1/2、Ten-GigabitEthernet3/1/3和LoopBack0接口属于公网实例

·     PE 3:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3、Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 4:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3、Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网中配置IS-IS,在各PSR与SW之间配置EBGP对等体

·     在PE 1、PE 2和PE 3、PE 4各自的LoopBack0接口两两之间建立IBGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、PE 2、P 1、P 2、P 3、P 4和PE 3、PE 4上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置End.RGB SID

IP组播路由功能

·     在PE 1、PE 2和PE 3、PE 4的VPN实例a中均使能IP组播路由

·     在CE 1和CE 2上均使能IP组播路由

IGMP功能

在PE 3和PE 4的Ten-GigabitEthernet3/1/2接口上使能IGMPv3

PIM功能

私网中运行PIM-SM:

·     在PE 1、PE 2和PE 3、PE 4的所有不与接收者直连的私网接口上均使能PIM-SM

·     在CE 1和CE 2所有不连接接收者的接口上均使能PIM-SM

·     PE 1和PE 2的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-22 单AS内BIER温备本地保护配置(MSR6封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S 1

-

7.12.1.10/24

P 2

XGE3/1/3

10:7::4/64

R 1

-

7.13.1.10/24

 

XGE3/1/2

10:8::4/64

CE 1

Vlan-int100

7.12.1.11/24

7:12:1::11/64

 

XGE3/1/1

10:10::4/64

XGE3/1/2

10.2.0.11/24

10:2::11/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/3

10.3.0.11/24

10:3::11/64

P 3

XGE3/1/1

10:9::5/64

CE 2

Vlan-int100

7.12.1.12/24

7:12:1::12/64

 

XGE3/1/2

10:11::5/64

 

XGE3/1/2

10.2.0.22/24

10:2::22/64

 

XGE3/1/3

10:12::5/64

 

XGE3/1/4

10.4.0.22/24

10:4::22/64

 

Loop0

5.5.5.5/32

5::5/128

PE 1

XGE3/1/1

10.3.0.1/24

10:3::1/64

P 4

XGE3/1/1

10:10::6/64

 

XGE3/1/3

10:5::1/64

 

XGE3/1/2

10:11::6/64

 

XGE3/1/4

10:6::1/64

 

XGE3/1/3

10:13::6/64

 

Loop0

1.1.1.1/32

1::1/128

Loop0

6.6.6.6/32

6::6/128

 

Loop1

1.2.3.4/32

1:2:3::4/128

PE 3

XGE3/1/3

10:12::7/64

PE 2

XGE3/1/4

10.4.0.2/24

10:4::2/64

 

XGE3/1/1

10.14.0.7/24

10:14::7/64

 

XGE3/1/2

10:5::2/64

 

XGE3/1/2

7.13.1.11/24

7:13:1::11/64

 

XGE3/1/3

10:7::2/64

 

Loop0

7.7.7.7/32

7::7/128

 

Loop0

2.2.2.2/32

2::2/128

XGE3/1/2

10.110.6.2/24

 

Loop1

1.2.3.3/32

1:2:3::3/128

PE 4

XGE3/1/3

10:13::8/64

P 1

XGE3/1/3

10:6::3/64

 

XGE3/1/1

10.14.0.8/24

10:14::8/64

 

XGE3/1/2

10:8::3/64

 

XGE3/1/2

7.13.1.12/24

7:13:1::12/64

 

XGE3/1/1

10:9::3/64

 

Loop0

8.8.8.8/32

8::8/128

 

Loop0

3.3.3.3/32

3::3/128

 

 

 

 

3. 配置步骤

(1)     配置CE 1

# 配置全局Router ID。

<CE1> system-view

[CE1] router id 11.11.11.11

# 使能IP组播路由。

[CE1] multicast routing

[CE1-mrib] quit

# 使能IPv6组播路由。

[CE1] ipv6 multicast routing

[CE1-mrib6] quit

# 配置创建VLAN 100,并将端口Ten-GigabitEthernet3/1/1加入该VLAN。

[CE1] vlan 100

[CE1-vlan100] port ten-gigabitethernet 3/1/1

[CE1] quit

# 在接口Vlan-interface100上配置IP地址,并使能PIM-SM。

[CE1] interface vlan-interface 100

[CE1-Vlan-interface100] ip address 7.12.1.11 24

[CE1-Vlan-interface100] ipv6 address 7:12:1::11 64

[CE1-Vlan-interface100] pim sm

[CE1-Vlan-interface100] ipv6 pim sm

[CE1-Vlan-interface100] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/2

[CE1-Ten-GigabitEthernet3/1/2] port link-mode route

[CE1-Ten-GigabitEthernet3/1/2] ip address 10.2.0.11 24

[CE1-Ten-GigabitEthernet3/1/2] pim sm

[CE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[CE1-Ten-GigabitEthernet3/1/2] ipv6 address 10:2::11 64

[CE1-Ten-GigabitEthernet3/1/2] ospf cost 1000

[CE1-Ten-GigabitEthernet3/1/2] ospfv3 cost 1000

[CE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/3

[CE1-Ten-GigabitEthernet3/1/3] port link-mode route

[CE1-Ten-GigabitEthernet3/1/3] ip address 10.3.0.11 24

[CE1-Ten-GigabitEthernet3/1/3] pim sm

[CE1-Ten-GigabitEthernet3/1/3] ipv6 pim sm

[CE1-Ten-GigabitEthernet3/1/3] ipv6 address 10:3::11 64

[CE1-Ten-GigabitEthernet3/1/3] quit

# 配置BGP协议。

[CE1] bgp 65022

[CE1-bgp-default] peer 10.2.0.22 as-number 65022

[CE1-bgp-default] peer 10.3.0.1 as-number 100

[CE1-bgp-default] peer 10:2::22 as-number 65022

[CE1-bgp-default] peer 10:3::1 as-number 100

[CE1-bgp-default] address-family ipv4 unicast

[CE1-bgp-default-ipv4] peer 10.2.0.22 enable

[CE1-bgp-default-ipv4] peer 10.3.0.1 enable

[CE1-bgp-default-ipv4] import-route direct

[CE1-bgp-default-ipv4] address-family ipv6 unicast

[CE1-bgp-default-ipv6] peer 10:2::22 enable

[CE1-bgp-default-ipv6] peer 10:3::1 enable

[CE1-bgp-default-ipv6] import-route direct

[CE1-bgp-default-ipv6] quit

[CE1-bgp-default] quit

(2)     配置CE 2

# 配置全局Router ID。

<CE2> system-view

[CE2] router id 22.22.22.22

# 使能IP组播路由。

[CE2] multicast routing

[CE2-mrib] quit

# 使能IPv6组播路由。

[CE2] ipv6 multicast routing

[CE2-mrib6] quit

# 配置创建VLAN 100,并将端口Ten-GigabitEthernet3/1/1加入该VLAN。

[CE2] vlan 100

[CE2-vlan100] port ten-gigabitethernet 3/1/1

[CE2] quit

# 在接口Vlan-interface100上配置IP地址,并使能PIM-SM。

[CE2] interface vlan-interface 100

[CE2-Vlan-interface100] ip address 7.12.1.12 24

[CE2-Vlan-interface100] ipv6 address 7:12:1::12 64

[CE2-Vlan-interface100] pim sm

[CE2-Vlan-interface100] ipv6 pim sm

[CE2-Vlan-interface100] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] port link-mode route

[CE2-Ten-GigabitEthernet3/1/2] ip address 10.2.0.22 24

[CE2-Ten-GigabitEthernet3/1/2] pim sm

[CE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[CE2-Ten-GigabitEthernet3/1/2] ipv6 address 10:2::22 64

[CE2-Ten-GigabitEthernet3/1/2] ospf cost 1000

[CE2-Ten-GigabitEthernet3/1/2] ospfv3 cost 1000

[CE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/4上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/4

[CE2-Ten-GigabitEthernet3/1/4] port link-mode route

[CE2-Ten-GigabitEthernet3/1/4] ip address 10.4.0.22 24

[CE2-Ten-GigabitEthernet3/1/4] pim sm

[CE2-Ten-GigabitEthernet3/1/4] ipv6 pim sm

[CE2-Ten-GigabitEthernet3/1/4] ipv6 address 10:4::22 64

[CE2-Ten-GigabitEthernet3/1/4] quit

# 配置BGP协议。

[CE2] bgp 65022

[CE2-bgp-default] peer 10.2.0.11 as-number 65022

[CE2-bgp-default] peer 10.4.0.2 as-number 100

[CE2-bgp-default] peer 10:2::11 as-number 65022

[CE2-bgp-default] peer 10:4::2 as-number 100

[CE2-bgp-default] address-family ipv4 unicast

[CE2-bgp-default-ipv4] peer 10.2.0.11 enable

[CE2-bgp-default-ipv4] peer 10.4.0.2 enable

[CE2-bgp-default-ipv4] import-route direct

[CE2-bgp-default-ipv4] address-family ipv6 unicast

[CE2-bgp-default-ipv6] peer 10:2::11 enable

[CE2-bgp-default-ipv6] peer 10:4::2 enable

[CE2-bgp-default-ipv6] import-route direct

[CE2-bgp-default-ipv6] quit

[CE2-bgp-default] quit

(3)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis enable 1

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE 1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:2::5。

[PE1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:2::5

# 配置BFD故障检测模式为echo。

[PE1-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

[PE1-bier-sub-domain-0-ipv6] quit

[PE1-bier] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-vpn-instance-a] address-family ipv4

[PE1-mvpn-vpn-instance-a-ipv4] source loopback 0

[PE1-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:2::34

[PE1-mvpn-vpn-instance-a-ipv4] warm-root-standby

[PE1-mvpn-vpn-instance-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE1-mvpn-vpn-instance-a] address-family ipv6

[PE1-mvpn-vpn-instance-a-ipv6] source loopback 0

[PE1-mvpn-vpn-instance-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv6] src-dt6 locator aaa sid 1:2::35

[PE1-mvpn-vpn-instance-a-ipv6] warm-root-standby

[PE1-mvpn-vpn-instance-a-ipv6] quit

[PE1-mvpn-vpn-instance-a] quit

# 将接口Ten-GigabitEthernet3/1/1与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/1] ip address 10.3.0.1 24

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 10:3::1 64

[PE1-Ten-GigabitEthernet3/1/1] pim sm

[PE1-Ten-GigabitEthernet3/1/1] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/3

[PE1-Ten-GigabitEthernet3/1/3] port link-mode route

[PE1-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/3] isis cost 1200

[PE1-Ten-GigabitEthernet3/1/3] ipv6 address 10:5::1 64

[PE1-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/4上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/4

[PE1-Ten-GigabitEthernet3/1/4] port link-mode route

[PE1-Ten-GigabitEthernet3/1/4] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/4] isis cost 100

[PE1-Ten-GigabitEthernet3/1/4] ipv6 address 10:6::1 64

[PE1-Ten-GigabitEthernet3/1/4] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 1.2.3.4 32

[PE1-LoopBack1] ipv6 address 1:2:3::4 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 1.2.3.4

[PE1-pim-a] c-rp 1.2.3.4

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 1:2:3::4

[PE1-pim6-a] c-rp 1:2:3::4

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 2::2 as-number 100

[PE1-bgp-default] peer 2::2 connect-interface loopback 0

[PE1-bgp-default] peer 7::7 as-number 100

[PE1-bgp-default] peer 7::7 connect-interface loopback 0

[PE1-bgp-default] peer 8::8 as-number 100

[PE1-bgp-default] peer 8::8 connect-interface loopback 0

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 2::2 enable

[PE1-bgp-default-mvpn] peer 7::7 enable

[PE1-bgp-default-mvpn] peer 8::8 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 2::2 enable

[PE1-bgp-default-mvpn-ipv6] peer 7::7 enable

[PE1-bgp-default-mvpn-ipv6] peer 8::8 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] pic

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 2::2 enable

[PE1-bgp-default-vpnv4] peer 2::2 prefix-sid

[PE1-bgp-default-vpnv4] peer 2::2 advertise-community

[PE1-bgp-default-vpnv4] peer 7::7 enable

[PE1-bgp-default-vpnv4] peer 7::7 prefix-sid

[PE1-bgp-default-vpnv4] peer 8::8 enable

[PE1-bgp-default-vpnv4] peer 8::8 prefix-sid

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] pic

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 2::2 enable

[PE1-bgp-default-vpnv6] peer 2::2 prefix-sid

[PE1-bgp-default-vpnv6] peer 2::2 advertise-community

[PE1-bgp-default-vpnv6] peer 7::7 enable

[PE1-bgp-default-vpnv6] peer 7::7 prefix-sid

[PE1-bgp-default-vpnv6] peer 8::8 enable

[PE1-bgp-default-vpnv6] peer 8::8 prefix-sid

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] peer 10.3.0.11 as-number 65022

[PE1-bgp-default-a] peer 10:3::11 as-number 65022

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] pic

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] peer 10.3.0.11 enable

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] pic

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] peer 10:3::11 enable

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] bier fast-reroute enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] fast-reroute lfa

[PE1-isis-1-ipv6] fast-reroute ti-lfa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(4)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 2.2.2.2 32

[PE2-LoopBack0] ipv6 address 2::2 128

[PE2-LoopBack0] isis enable 1

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 22::22

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 1:3:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE 2加入BIER子域0、BFR ID为2、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:3::5。

[PE2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:3::5

# 配置BFD故障检测模式为echo。

[PE2-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

[PE2-bier-sub-domain-0-ipv6] quit

[PE2-bier] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:2

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-vpn-instance-a] address-family ipv4

[PE2-mvpn-vpn-instance-a-ipv4] source loopback 0

[PE2-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:3::34

[PE2-mvpn-vpn-instance-a-ipv4] warm-root-standby

[PE2-mvpn-vpn-instance-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE2-mvpn-vpn-instance-a] address-family ipv6

[PE2-mvpn-vpn-instance-a-ipv6] source loopback 0

[PE2-mvpn-vpn-instance-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv6] src-dt6 locator aaa sid 1:3::35

[PE2-mvpn-vpn-instance-a-ipv6] warm-root-standby

[PE2-mvpn-vpn-instance-a-ipv6] quit

[PE2-mvpn-vpn-instance-a] quit

# 将接口Ten-GigabitEthernet3/1/4与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/4

[PE2-Ten-GigabitEthernet3/1/4] port link-mode route

[PE2-Ten-GigabitEthernet3/1/4] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/4] ip address 10.4.0.2 24

[PE2-Ten-GigabitEthernet3/1/4] ipv6 address 10:4::2 64

[PE2-Ten-GigabitEthernet3/1/4] pim sm

[PE2-Ten-GigabitEthernet3/1/4] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/4] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/2] isis cost 1200

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 10:5::2 64

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/3

[PE2-Ten-GigabitEthernet3/1/3] port link-mode route

[PE2-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/3] isis cost 100

[PE2-Ten-GigabitEthernet3/1/3] ipv6 address 10:7::2 64

[PE2-Ten-GigabitEthernet3/1/3] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE2] interface loopback 1

[PE2-LoopBack1] ip binding vpn-instance a

[PE2-LoopBack1] ip address 1.2.3.3 32

[PE2-LoopBack1] ipv6 address 1:2:3::3 128

[PE2-LoopBack1] pim sm

[PE2-LoopBack1] ipv6 pim sm

[PE2-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE2] pim vpn-instance a

[PE2-pim-a] c-bsr 1.2.3.3

[PE2-pim-a] c-rp 1.2.3.3

[PE2-pim-a] quit

[PE2] ipv6 pim vpn-instance a

[PE2-pim6-a] c-bsr 1:2:3::3

[PE2-pim6-a] c-rp 1:2:3::3

[PE2-pim6-a] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] router-id 2.2.2.2

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 7::7 as-number 100

[PE2-bgp-default] peer 7::7 connect-interface loopback 0

[PE2-bgp-default] peer 8::8 as-number 100

[PE2-bgp-default] peer 8::8 connect-interface loopback 0

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] peer 7::7 enable

[PE2-bgp-default-mvpn] peer 8::8 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] peer 7::7 enable

[PE2-bgp-default-mvpn-ipv6] peer 8::8 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] pic

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] peer 1::1 advertise-community

[PE2-bgp-default-vpnv4] peer 7::7 enable

[PE2-bgp-default-vpnv4] peer 7::7 prefix-sid

[PE2-bgp-default-vpnv4] peer 8::8 enable

[PE2-bgp-default-vpnv4] peer 8::8 prefix-sid

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] pic

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] peer 1::1 advertise-community

[PE2-bgp-default-vpnv6] peer 7::7 enable

[PE2-bgp-default-vpnv6] peer 7::7 prefix-sid

[PE2-bgp-default-vpnv6] peer 8::8 enable

[PE2-bgp-default-vpnv6] peer 8::8 prefix-sid

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] peer 10.4.0.22 as-number 65022

[PE2-bgp-default-a] peer 10:4::22 as-number 65022

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] pic

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] peer 10.4.0.22 enable

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] pic

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] peer 10:4::22 enable

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] bier fast-reroute enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] fast-reroute lfa

[PE2-isis-1-ipv6] fast-reroute ti-lfa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

(5)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0003.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 3.3.3.3 32

[P1-LoopBack0] ipv6 address 3::3 128

[P1-LoopBack0] isis enable 1

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

# 配置SRv6。

[P1] segment-routing ipv6

[P1-segment-routing-ipv6] encapsulation source-address 33::33

[P1-segment-routing-ipv6] locator aaa ipv6-prefix 1:4:: 96 static 8

[P1-segment-routing-ipv6] quit

# 配置P 1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[P1] bier

[P1-bier] sub-domain 0 ipv6

[P1-bier-sub-domain-0-ipv6] bfr-id 3

[P1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:4::5。

[P1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:4::5

# 配置BFD故障检测模式为echo。

[P1-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

[P1-bier-sub-domain-0-ipv6] quit

[P1-bier] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/3

[P1-Ten-GigabitEthernet3/1/3] port link-mode route

[P1-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/3] isis cost 100

[P1-Ten-GigabitEthernet3/1/3] ipv6 address 10:6::3 64

[P1-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] isis cost 1300

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 10:8::3 64

[P1-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] isis cost 100

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 10:9::3 64

[P1-Ten-GigabitEthernet3/1/1] quit

# 开启IS-IS进程的BIER快速重路由能力。

[P1] isis 1

[P1-isis-1] bier enable

[P1-isis-1] bier fast-reroute enable

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] segment-routing ipv6 locator aaa

[P1-isis-1-ipv6] fast-reroute lfa

[P1-isis-1-ipv6] fast-reroute ti-lfa

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

(6)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0004.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 4.4.4.4 32

[P2-LoopBack0] ipv6 address 4::4 128

[P2-LoopBack0] isis enable 1

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

# 配置SRv6。

[P2] segment-routing ipv6

[P2-segment-routing-ipv6] encapsulation source-address 44::44

[P2-segment-routing-ipv6] locator aaa ipv6-prefix 1:5:: 96 static 8

[P2-segment-routing-ipv6] quit

# 配置P 2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[P2] bier

[P2-bier] sub-domain 0 ipv6

[P2-bier-sub-domain-0-ipv6] bfr-id 4

[P2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置组End.RGB SID为1:5::5。

[P2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:5::5

# 配置BFD故障检测模式为echo。

[P2-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

[P2-bier-sub-domain-0-ipv6] quit

[P2-bier] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/3

[P2-Ten-GigabitEthernet3/1/3] port link-mode route

[P2-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/3] isis cost 100

[P2-Ten-GigabitEthernet3/1/3] ipv6 address 10:7::4 64

[P2-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] isis cost 1300

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 10:8::4 64

[P2-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] isis cost 100

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 10:10::4 64

[P2-Ten-GigabitEthernet3/1/1] quit

# 开启IS-IS进程的BIER快速重路由能力。

[P2] isis 1

[P2-isis-1] bier enable

[P2-isis-1] bier fast-reroute enable

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] segment-routing ipv6 locator aaa

[P2-isis-1-ipv6] fast-reroute lfa

[P2-isis-1-ipv6] fast-reroute ti-lfa

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

(7)     配置P 3

# 配置全局Router ID。

<P3> system-view

[P3] router id 5.5.5.5

# 配置IPv6 IS-IS协议。

[P3] isis 1

[P3-isis-1] is-level level-2

[P3-isis-1] cost-style wide

[P3-isis-1] network-entity 10.0000.0000.0005.00

[P3-isis-1] address-family ipv6 unicast

[P3-isis-1-ipv6] quit

[P3-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P3] interface loopback 0

[P3-LoopBack0] ip address 5.5.5.5 32

[P3-LoopBack0] ipv6 address 5::5 128

[P3-LoopBack0] isis enable 1

[P3-LoopBack0] isis ipv6 enable 1

[P3-LoopBack0] quit

# 配置SRv6。

[P3] segment-routing ipv6

[P3-segment-routing-ipv6] encapsulation source-address 55::55

[P3-segment-routing-ipv6] locator aaa ipv6-prefix 1:6:: 96 static 8

[P3-segment-routing-ipv6] quit

# 配置P 3加入BIER子域0、BFR ID为5、BFR prefix为LoopBack口0的IPv6地址。

[P3] bier

[P3-bier] sub-domain 0 ipv6

[P3-bier-sub-domain-0-ipv6] bfr-id 5

[P3-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P3-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:6::5。

[P3-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:6::5

# 配置BFD故障检测模式为echo。

[P3-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

[P3-bier-sub-domain-0-ipv6] quit

[P3-bier] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P3] interface ten-gigabitethernet 3/1/1

[P3-Ten-GigabitEthernet3/1/1] port link-mode route

[P3-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P3-Ten-GigabitEthernet3/1/1] isis cost 100

[P3-Ten-GigabitEthernet3/1/1] ipv6 address 10:9::5 64

[P3-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P3] interface ten-gigabitethernet 3/1/2

[P3-Ten-GigabitEthernet3/1/2] port link-mode route

[P3-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P3-Ten-GigabitEthernet3/1/2] isis cost 1400

[P3-Ten-GigabitEthernet3/1/2] ipv6 address 10:11::5 64

[P3-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[P3] interface ten-gigabitethernet 3/1/3

[P3-Ten-GigabitEthernet3/1/3] port link-mode route

[P3-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[P3-Ten-GigabitEthernet3/1/3] isis cost 100

[P3-Ten-GigabitEthernet3/1/3] ipv6 address 10:12::5 64

[P3-Ten-GigabitEthernet3/1/3] quit

# 开启IS-IS进程的BIER快速重路由能力。

[P3] isis 1

[P3-isis-1] bier enable

[P3-isis-1] bier fast-reroute enable

[P3-isis-1] address-family ipv6 unicast

[P3-isis-1-ipv6] segment-routing ipv6 locator aaa

[P3-isis-1-ipv6]fast-reroute lfa

[P3-isis-1-ipv6] fast-reroute ti-lfa

[P3-isis-1-ipv6] quit

[P3-isis-1] quit

(8)     配置P 4

# 配置全局Router ID。

<P4> system-view

[P4] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[P4] isis 1

[P4-isis-1] is-level level-2

[P4-isis-1] cost-style wide

[P4-isis-1] network-entity 10.0000.0000.0006.00

[P4-isis-1] address-family ipv6 unicast

[P4-isis-1-ipv6] quit

[P4-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P4] interface loopback 0

[P4-LoopBack0] ip address 6.6.6.6 32

[P4-LoopBack0] ipv6 address 6::6 128

[P4-LoopBack0] isis enable 1

[P4-LoopBack0] isis ipv6 enable 1

[P4-LoopBack0] quit

# 配置SRv6。

[P4] segment-routing ipv6

[P4-segment-routing-ipv6] encapsulation source-address 66::66

[P4-segment-routing-ipv6] locator aaa ipv6-prefix 1:7:: 96 static 8

[P4-segment-routing-ipv6] quit

# 配置P 4加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[P4] bier

[P4-bier] sub-domain 0 ipv6

[P4-bier-sub-domain-0-ipv6] bfr-id 6

[P4-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P4-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:7::5。

[P4-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:7::5

# 配置BFD故障检测模式为echo。

[P4-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

[P4-bier-sub-domain-0-ipv6] quit

[P4-bier] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P4] interface ten-gigabitethernet 3/1/1

[P4-Ten-GigabitEthernet3/1/1] port link-mode route

[P4-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P4-Ten-GigabitEthernet3/1/1] isis cost 100

[P4-Ten-GigabitEthernet3/1/1] ipv6 address 10:10::6 64

[P4-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P4] interface ten-gigabitethernet 3/1/2

[P4-Ten-GigabitEthernet3/1/2] port link-mode route

[P4-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P4-Ten-GigabitEthernet3/1/2] isis cost 1400

[P4-Ten-GigabitEthernet3/1/2] ipv6 address 10:11::6 64

[P4-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[P4] interface ten-gigabitethernet 3/1/3

[P4-Ten-GigabitEthernet3/1/3] port link-mode route

[P4-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[P4-Ten-GigabitEthernet3/1/3] isis cost 100

[P4-Ten-GigabitEthernet3/1/3] ipv6 address 10:13::6 64

[P4-Ten-GigabitEthernet3/1/3] quit

# 开启IS-IS进程的BIER快速重路由能力。

[P4] isis 1

[P4-isis-1] bier enable

[P4-isis-1] bier fast-reroute enable

[P4-isis-1] address-family ipv6 unicast

[P4-isis-1-ipv6] segment-routing ipv6 locator aaa

[P4-isis-1-ipv6] fast-reroute lfa

[P4-isis-1-ipv6] fast-reroute ti-lfa

[P4-isis-1-ipv6] quit

[P4-isis-1] quit

(9)     配置PE 3

# 配置全局Router ID。

<PE3> system-view

[PE3] router id 7.7.7.7

# 配置IPv6 IS-IS协议。

[PE3] isis 1

[PE3-isis-1] is-level level-2

[PE3-isis-1] cost-style wide

[PE3-isis-1] network-entity 10.0000.0000.0007.00

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE3] interface loopback 0

[PE3-LoopBack0] ip address 7.7.7.7 32

[PE3-LoopBack0] ipv6 address 7::7 128

[PE3-LoopBack0] isis enable 1

[PE3-LoopBack0] isis ipv6 enable 1

[PE3-LoopBack0] quit

# 配置SRv6。

[PE3] segment-routing ipv6

[PE3-segment-routing-ipv6] encapsulation source-address 77::77

[PE3-segment-routing-ipv6] locator aaa ipv6-prefix 1:8:: 96 static 8

[PE3-segment-routing-ipv6] quit

# 配置PE 3加入BIER子域0、BFR ID为7、BFR prefix为LoopBack口0的IPv6地址。

[PE3] bier

[PE3-bier] sub-domain 0 ipv6

[PE3-bier-sub-domain-0-ipv6] bfr-id 7

[PE3-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE3-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:8::5。

[PE3-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:8::5

# 配置BFD故障检测模式为echo。

[PE3-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

[PE3-bier-sub-domain-0-ipv6] quit

[PE3-bier] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE3] ip vpn-instance a

[PE3-vpn-instance-a] route-distinguisher 100:7

[PE3-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE3-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE3-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE3] multicast routing vpn-instance a

[PE3-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE3] ipv6 multicast routing vpn-instance a

[PE3-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE3] multicast-vpn vpn-instance a mode bier

[PE3-mvpn-vpn-instance-a] address-family ipv4

[PE3-mvpn-vpn-instance-a-ipv4] source loopback 0

[PE3-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:8::34

[PE3-mvpn-vpn-instance-a-ipv4] warm-root-standby

[PE3-mvpn-vpn-instance-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE3-mvpn-vpn-instance-a] address-family ipv6

[PE3-mvpn-vpn-instance-a-ipv6] source loopback 0

[PE3-mvpn-vpn-instance-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv6] src-dt6 locator aaa sid 1:8::35

[PE3-mvpn-vpn-instance-a-ipv6] warm-root-standby

[PE3-mvpn-vpn-instance-a-ipv6] quit

[PE3-mvpn-vpn-instance-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM和IGMP/MLD。

[PE3] interface ten-gigabitethernet 3/1/2

[PE3-Ten-GigabitEthernet3/1/2] port link-mode route

[PE3-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE3-Ten-GigabitEthernet3/1/2] ip address 7.13.1.11 24

[PE3-Ten-GigabitEthernet3/1/2] ipv6 address 7:13:1::11 64

[PE3-Ten-GigabitEthernet3/1/2] pim sm

[PE3-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE3-Ten-GigabitEthernet3/1/2] igmp enable

[PE3-Ten-GigabitEthernet3/1/2] igmp version 3

[PE3-Ten-GigabitEthernet3/1/2] mld enable

[PE3-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[PE3] interface ten-gigabitethernet 3/1/3

[PE3-Ten-GigabitEthernet3/1/3] port link-mode route

[PE3-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[PE3-Ten-GigabitEthernet3/1/3] isis cost 100

[PE3-Ten-GigabitEthernet3/1/3] ipv6 address 10:12::7 64

[PE3-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE3] interface ten-gigabitethernet 3/1/1

[PE3-Ten-GigabitEthernet3/1/1] port link-mode route

[PE3-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE3-Ten-GigabitEthernet3/1/1] isis cost 1500

[PE3-Ten-GigabitEthernet3/1/1] ipv6 address 10:14::7 64

[PE3-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE3] bgp 100

[PE3-bgp-default] router-id 7.7.7.7

[PE3-bgp-default] peer 1::1 as-number 100

[PE3-bgp-default] peer 1::1 connect-interface loopback 0

[PE3-bgp-default] peer 2::2 as-number 100

[PE3-bgp-default] peer 2::2 connect-interface loopback 0

[PE3-bgp-default] peer 8::8 as-number 100

[PE3-bgp-default] peer 8::8 connect-interface loopback 0

[PE3-bgp-default] address-family ipv4 mvpn

[PE3-bgp-default-mvpn] peer 1::1 enable

[PE3-bgp-default-mvpn] peer 2::2 enable

[PE3-bgp-default-mvpn] peer 8::8 enable

[PE3-bgp-default-mvpn] quit

[PE3-bgp-default] address-family ipv6 mvpn

[PE3-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE3-bgp-default-mvpn-ipv6] peer 2::2 enable

[PE3-bgp-default-mvpn-ipv6] peer 8::8 enable

[PE3-bgp-default-mvpn-ipv6] quit

[PE3-bgp-default] address-family vpnv4

[PE3-bgp-default-vpnv4] pic

[PE3-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE3-bgp-default-vpnv4] peer 1::1 enable

[PE3-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE3-bgp-default-vpnv4] peer 2::2 enable

[PE3-bgp-default-vpnv4] peer 2::2 prefix-sid

[PE3-bgp-default-vpnv4] peer 8::8 enable

[PE3-bgp-default-vpnv4] peer 8::8 prefix-sid

[PE3-bgp-default] address-family vpnv6

[PE3-bgp-default-vpnv6] pic

[PE3-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE3-bgp-default-vpnv6] peer 1::1 enable

[PE3-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE3-bgp-default-vpnv6] peer 2::2 enable

[PE3-bgp-default-vpnv6] peer 2::2 prefix-sid

[PE3-bgp-default-vpnv6] peer 8::8 enable

[PE3-bgp-default-vpnv6] peer 8::8 prefix-sid

[PE3–bgp-default] ip vpn-instance a

[PE3-bgp-default-a] address-family ipv4 unicast

[PE3-bgp-default-ipv4-a] pic

[PE3-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE3-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE3-bgp-default-ipv4-a] import-route direct

[PE3-bgp-default-ipv4-a] quit

[PE3-bgp-default-a] address-family ipv6 unicast

[PE3-bgp-default-ipv6-a] pic

[PE3-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE3-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE3-bgp-default-ipv6-a] import-route direct

[PE3-bgp-default-ipv6-a] quit

[PE3-bgp-default-a] quit

[PE3–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[PE3] isis 1

[PE3-isis-1] bier enable

[PE3-isis-1] bier fast-reroute enable

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE3-isis-1-ipv6] fast-reroute lfa

[PE3-isis-1-ipv6] fast-reroute ti-lfa

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

(10)     配置PE 4

# 配置全局Router ID。

<PE4> system-view

[PE4] router id 8.8.8.8

# 配置IPv6 IS-IS协议。

[PE4] isis 1

[PE4-isis-1] is-level level-2

[PE4-isis-1] cost-style wide

[PE4-isis-1] network-entity 10.0000.0000.0008.00

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE4] interface loopback 0

[PE4-LoopBack0] ip address 8.8.8.8 32

[PE4-LoopBack0] ipv6 address 8::8 128

[PE4-LoopBack0] isis enable 1

[PE4-LoopBack0] isis ipv6 enable 1

[PE4-LoopBack0] quit

# 配置SRv6。

[PE4] segment-routing ipv6

[PE4-segment-routing-ipv6] encapsulation source-address 88::88

[PE4-segment-routing-ipv6] locator aaa ipv6-prefix 1:9:: 96 static 8

[PE4-segment-routing-ipv6] quit

# 配置PE 4加入BIER子域0、BFR ID为8、BFR prefix为LoopBack口0的IPv6地址。

[PE4] bier

[PE4-bier] sub-domain 0 ipv6

[PE4-bier-sub-domain-0-ipv6] bfr-id 8

[PE4-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE4-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:9::5。

[PE4-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:9::5

# 配置BFD故障检测模式为echo。

[PE4-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

[PE4-bier-sub-domain-0-ipv6] quit

[PE4-bier] quit

# 创建VPN实例a,并为其配置RD和Route Target。

[PE4] ip vpn-instance a

[PE4-vpn-instance-a] route-distinguisher 100:8

[PE4-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE4-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE4-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE4] multicast routing vpn-instance a

[PE4-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE4] ipv6 multicast routing vpn-instance a

[PE4-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE4] multicast-vpn vpn-instance a mode bier

[PE4-mvpn-vpn-instance-a] address-family ipv4

[PE4-mvpn-vpn-instance-a-ipv4] source loopback 0

[PE4-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:9::34

[PE4-mvpn-vpn-instance-a-ipv4] warm-root-standby

[PE4-mvpn-vpn-instance-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE4-mvpn-vpn-instance-a] address-family ipv6

[PE4-mvpn-vpn-instance-a-ipv6] source loopback 0

[PE4-mvpn-vpn-instance-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv6] src-dt6 locator aaa sid 1:9::35

[PE4-mvpn-vpn-instance-a-ipv6] warm-root-standby

[PE4-mvpn-vpn-instance-a-ipv6] quit

[PE4-mvpn-vpn-instance-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM和IGMP/MLD。

[PE4] interface ten-gigabitethernet 3/1/2

[PE4-Ten-GigabitEthernet3/1/2] port link-mode route

[PE4-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE4-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 24

[PE4-Ten-GigabitEthernet3/1/2] ipv6 address 7:13:1::12 64

[PE4-Ten-GigabitEthernet3/1/2] pim sm

[PE4-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE4-Ten-GigabitEthernet3/1/2] igmp enable

[PE4-Ten-GigabitEthernet3/1/2] igmp version 3

[PE4-Ten-GigabitEthernet3/1/2] mld enable

[PE4-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[PE4] interface ten-gigabitethernet 3/1/3

[PE4-Ten-GigabitEthernet3/1/3] port link-mode route

[PE4-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[PE4-Ten-GigabitEthernet3/1/3] isis cost 100

[PE4-Ten-GigabitEthernet3/1/3] ipv6 address 10:13::8 64

[PE4-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE4] interface ten-gigabitethernet 3/1/1

[PE4-Ten-GigabitEthernet3/1/1] port link-mode route

[PE4-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE4-Ten-GigabitEthernet3/1/1] isis cost 1500

[PE4-Ten-GigabitEthernet3/1/1] ipv6 address 10:14::8 64

[PE4-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE4] bgp 100

[PE4-bgp-default] flush suboptimal-route

[PE4-bgp-default] router-id 8.8.8.8

[PE4-bgp-default] peer 1::1 as-number 100

[PE4-bgp-default] peer 1::1 connect-interface loopback 0

[PE4-bgp-default] peer 2::2 as-number 100

[PE4-bgp-default] peer 2::2 connect-interface loopback 0

[PE4-bgp-default] peer 7::7 as-number 100

[PE4-bgp-default] peer 7::7 connect-interface loopback 0

[PE4-bgp-default] address-family ipv4 mvpn

[PE4-bgp-default-mvpn] peer 1::1 enable

[PE4-bgp-default-mvpn] peer 2::2 enable

[PE4-bgp-default-mvpn] peer 7::7 enable

[PE4-bgp-default-mvpn] quit

[PE4-bgp-default] address-family ipv6 mvpn

[PE4-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE4-bgp-default-mvpn-ipv6] peer 2::2 enable

[PE4-bgp-default-mvpn-ipv6] peer 7::7 enable

[PE4-bgp-default-mvpn-ipv6] quit

[PE4-bgp-default] address-family vpnv4

[PE4-bgp-default-vpnv4] pic

[PE4-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE4-bgp-default-vpnv4] peer 1::1 enable

[PE4-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE4-bgp-default-vpnv4] peer 2::2 enable

[PE4-bgp-default-vpnv4] peer 2::2 prefix-sid

[PE4-bgp-default-vpnv4] peer 7::7 enable

[PE4-bgp-default-vpnv4] peer 7::7 prefix-sid

[PE4-bgp-default] address-family vpnv6

[PE4-bgp-default-vpnv6] pic

[PE4-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE4-bgp-default-vpnv6] peer 1::1 enable

[PE4-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE4-bgp-default-vpnv6] peer 2::2 enable

[PE4-bgp-default-vpnv6] peer 2::2 prefix-sid

[PE4-bgp-default-vpnv6] peer 7::7 enable

[PE4-bgp-default-vpnv6] peer 7::7 prefix-sid

[PE4–bgp-default] ip vpn-instance a

[PE4-bgp-default-a] address-family ipv4 unicast

[PE4-bgp-default-ipv4-a] pic

[PE4-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv4-a] import-route direct

[PE4-bgp-default-ipv4-a] quit

[PE4-bgp-default-a] address-family ipv6 unicast

[PE4-bgp-default-ipv6-a] pic

[PE4-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv6-a] import-route direct

[PE4-bgp-default-ipv6-a] quit

[PE4-bgp-default-a] quit

[PE4–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[PE4] isis 1

[PE4-isis-1] bier enable

[PE4-isis-1] bier fast-reroute enable

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE4-isis-1-ipv6] fast-reroute lfa

[PE4-isis-1-ipv6] fast-reroute ti-lfa

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

4. 验证配置

# 查看PIM表项。

[PE1] display pim vpn-instance a routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

 (7.12.1.10, 225.0.0.1)

     RP: 1.2.3.4 (local)

     Protocol: pim-sm, Flag: SPT 2MSDP ACT RC SRC-ACT 2MVPN SC IDF-BU

     UpTime: 00:00:16

     Upstream interface: Ten-GigabitEthernet3/1/1

         Upstream neighbor: 10.3.0.11

         RPF prime neighbor: 10.3.0.11

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif3

             Protocol: MD, UpTime: 00:00:06, Expires: -

 

[PE2] display pim vpn-instance a routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

 (7.12.1.10, 225.0.0.1)

     RP: 1.2.3.4

     Protocol: pim-sm, Flag: SPT ACT RC SRC-ACT IDF-MN

     UpTime: 00:00:37

     Upstream interface: Ten-GigabitEthernet3/1/4

         Upstream neighbor: 10.4.0.22

         RPF prime neighbor: 10.4.0.22

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif3 (Inactive)

             Protocol: MD, UpTime: 00:00:27, Expires: -

# 查看BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 8

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 2

    BFR prefix: 2::2

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A Invalid

 

      BFR prefix: 4::4

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 2147483653

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 Invalid

 

      BFR prefix: 4::4

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  2147483654

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  Invalid

 

      BFR prefix: 4::4

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 Invalid

 

  BFR ID: 5

    BFR prefix: 5::5

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::7C75:17FF:FE29:508                                  Invalid

 

      BFR prefix: 6::6

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::7C74:E8FF:FEAC:407                                  2147483654

 

    BFR ID: 6

    BFR prefix: 6::6

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::7C74:E8FF:FEAC:407                                  Invalid

 

      BFR prefix: 6::6

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::7C75:17FF:FE29:508                                  Invalid

 

    BFR ID: 7

    BFR prefix: 7::7

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 Invalid

 

      BFR prefix: 8::8

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  2147483652

 

    BFR ID: 8

    BFR prefix: 8::8

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  Invalid

 

      BFR prefix: 8::8

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 Invalid

1.20.11  跨AS域BIER温备本地保护配置举例(MSR6封装类型)

1. 组网需求

组网需求如表1-13所示。

表1-13 跨AS域 BIER温备本地保护配置(MSR6封装类型)组网需求

项目

组网需求

功能描述

·     组播源侧PE实现组播温备功能:当主用IDF故障之后,备用IDF接替主用IDF角色负责向接收者侧PE发送组播流量

·     公网配置本地保护:当公网的中间节点或主路径故障时,数据流量在其他设备单播路由收敛之前,快速切换到备份路径继续转发

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/1和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/3、Ten-GigabitEthernet3/1/4和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/4接口属于VPN实例a,Ten-GigabitEthernet3/1/2、Ten-GigabitEthernet3/1/3和LoopBack0接口属于公网实例

·     PE 3:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3、Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 4:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/3、Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网AS 100和AS 200中配置IS-IS,在P 1与P 3、P 2与P 4之间配置EBGP对等体

·     在PE 1与PE 2、PE 3、PE 4的LoopBack0接口之间建立BGP对等体

·     在PE 2与PE 1、PE 3、PE 4的LoopBack0接口之间建立BGP对等体

·     在PE 3 与PE 1、PE 2、PE 4的LoopBack0接口之间建立BGP对等体

·     在PE 4 与PE 1、PE 2、PE 3的LoopBack0接口之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、PE 2、P 1、P 2、P 3、P 4和PE 3、PE 4上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置End.RGB SID

IP组播路由功能

·     在PE 1、PE 2和PE 3、PE 4的VPN实例a中均使能IP组播路由

·     在CE 1和CE 2上均使能IP组播路由

IGMP功能

在PE 3和PE 4的Ten-GigabitEthernet3/1/2接口上使能IGMPv2

PIM功能

私网中运行PIM-SM:

·     在PE 1、PE 2和PE 3、PE 4的所有不与接收者直连的私网接口上均使能PIM-SM

·     在CE 1和CE 2所有不连接接收者的接口上均使能PIM-SM

·     PE 1和PE 2的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-23 跨AS域BIER温备本地保护配置(MSR6封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S 1

-

7.12.1.10/24

P 2

XGE3/1/3

10:7::4/64

R 1

-

7.13.1.10/24

 

XGE3/1/2

10:8::4/64

CE 1

Vlan-int100

7.12.1.11/24

7:12:1::11/64

 

XGE3/1/1

10:10::4/64

XGE3/1/2

10.2.0.11/24

10:2::11/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/3

10.3.0.11/24

10:3::11/64

P 3

XGE3/1/1

10:9::5/64

CE 2

Vlan-int100

7.12.1.12/24

7:12:1::12/64

 

XGE3/1/2

10:11::5/64

 

XGE3/1/2

10.2.0.22/24

10:2::22/64

 

XGE3/1/3

10:12::5/64

 

XGE3/1/4

10.4.0.22/24

10:4::22/64

 

Loop0

5.5.5.5/32

5::5/128

PE 1

XGE3/1/1

10.3.0.1/24

10:3::1/64

P 4

XGE3/1/1

10:10::6/64

 

XGE3/1/3

10:5::1/64

 

XGE3/1/2

10:11::6/64

 

XGE3/1/4

10:6::1/64

 

XGE3/1/3

10:13::6/64

 

Loop0

1.1.1.1/32

1::1/128

Loop0

6.6.6.6/32

6::6/128

 

Loop1

1.2.3.4/32

1:2:3::4/128

PE 3

XGE3/1/3

10:12::7/64

PE 2

XGE3/1/4

10.4.0.2/24

10:4::2/64

 

XGE3/1/1

10.14.0.7/24

10:14::7/64

 

XGE3/1/2

10:5::2/64

 

XGE3/1/2

7.13.1.11/24

7:13:1::11/64

 

XGE3/1/3

10:7::2/64

 

Loop0

7.7.7.7/32

7::7/128

 

Loop0

2.2.2.2/32

2::2/128

XGE3/1/2

10.110.6.2/24

 

Loop1

1.2.3.3/32

1:2:3::3/128

PE 4

XGE3/1/3

10:13::8/64

P 1

XGE3/1/3

10:6::3/64

 

XGE3/1/1

10.14.0.8/24

10:14::8/64

 

XGE3/1/2

10:8::3/64

 

XGE3/1/2

7.13.1.12/24

7:13:1::12/64

 

XGE3/1/1

10:9::3/64

 

Loop0

8.8.8.8/32

8::8/128

 

Loop0

3.3.3.3/32

3::3/128

 

 

 

 

3. 配置步骤

(1)     配置CE 1

# 配置全局Router ID。

<CE1> system-view

[CE1] router id 11.11.11.11

# 使能IP组播路由。

[CE1] multicast routing

[CE1-mrib] quit

# 使能IPv6组播路由。

[CE1] ipv6 multicast routing

[CE1-mrib6] quit

# 配置创建VLAN 100,并将端口Ten-GigabitEthernet3/1/1加入该VLAN。

[CE1] vlan 100

[CE1-vlan100] port ten-gigabitethernet 3/1/1

[CE1] quit

# 在接口Vlan-interface100上配置IP地址,并使能PIM-SM。

[CE1] interface vlan-interface 100

[CE1-Vlan-interface100] ip address 7.12.1.11 24

[CE1-Vlan-interface100] ipv6 address 7:12:1::11 64

[CE1-Vlan-interface100] pim sm

[CE1-Vlan-interface100] ipv6 pim sm

[CE1-Vlan-interface100] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/2

[CE1-Ten-GigabitEthernet3/1/2] port link-mode route

[CE1-Ten-GigabitEthernet3/1/2] ip address 10.2.0.11 24

[CE1-Ten-GigabitEthernet3/1/2] ospf cost 1000

[CE1-Ten-GigabitEthernet3/1/2] ospfv3 cost 1000

[CE1-Ten-GigabitEthernet3/1/2] pim sm

[CE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[CE1-Ten-GigabitEthernet3/1/2] ipv6 address 10:2::11 64

[CE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能PIM-SM。

[CE1] interface ten-gigabitethernet 3/1/3

[CE1-Ten-GigabitEthernet3/1/3] port link-mode route

[CE1-Ten-GigabitEthernet3/1/3] ip address 10.3.0.11 24

[CE1-Ten-GigabitEthernet3/1/3] pim sm

[CE1-Ten-GigabitEthernet3/1/3] ipv6 pim sm

[CE1-Ten-GigabitEthernet3/1/3] ipv6 address 10:3::11 64

[CE1-Ten-GigabitEthernet3/1/3] quit

# 配置BGP协议。

[CE1] bgp 65022

[CE1-bgp-default] peer 10.2.0.22 as-number 65022

[CE1-bgp-default] peer 10.3.0.1 as-number 100

[CE1-bgp-default] peer 10:2::22 as-number 65022

[CE1-bgp-default] peer 10:3::1 as-number 100

[CE1-bgp-default] address-family ipv4 unicast

[CE1-bgp-default-ipv4] peer 10.2.0.22 enable

[CE1-bgp-default-ipv4] peer 10.3.0.1 enable

[CE1-bgp-default-ipv4] import-route direct

[CE1-bgp-default-ipv4] address-family ipv6 unicast

[CE1-bgp-default-ipv6] peer 10:2::22 enable

[CE1-bgp-default-ipv6] peer 10:3::1 enable

[CE1-bgp-default-ipv6] import-route direct

[CE1-bgp-default-ipv6] quit

[CE1-bgp-default] quit

(2)     配置CE 2

# 配置全局Router ID。

<CE2> system-view

[CE2] router id 22.22.22.22

# 使能IP组播路由。

[CE2] multicast routing

[CE2-mrib] quit

# 使能IPv6组播路由。

[CE2] ipv6 multicast routing

[CE2-mrib6] quit

# 配置创建VLAN 100,并将端口Ten-GigabitEthernet3/1/1加入该VLAN。

[CE2] vlan 100

[CE2-vlan100] port ten-gigabitethernet 3/1/1

[CE2] quit

# 在接口Vlan-interface100上配置IP地址,并使能PIM-SM。

[CE2] interface vlan-interface 100

[CE2-Vlan-interface100] ip address 7.12.1.12 24

[CE2-Vlan-interface100] ipv6 address 7:12:1::12 64

[CE2-Vlan-interface100] pim sm

[CE2-Vlan-interface100] ipv6 pim sm

[CE2-Vlan-interface100] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] port link-mode route

[CE2-Ten-GigabitEthernet3/1/2] ip address 10.2.0.22 24

[CE2-Ten-GigabitEthernet3/1/2] pim sm

[CE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[CE2-Ten-GigabitEthernet3/1/2] ospf cost 1000

[CE2-Ten-GigabitEthernet3/1/2] ospfv3 cost 1000

[CE2-Ten-GigabitEthernet3/1/2] ipv6 address 10:2::22 64

[CE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/4上配置IP地址,并使能PIM-SM。

[CE2] interface ten-gigabitethernet 3/1/4

[CE2-Ten-GigabitEthernet3/1/4] port link-mode route

[CE2-Ten-GigabitEthernet3/1/4] ip address 10.4.0.22 24

[CE2-Ten-GigabitEthernet3/1/4] pim sm

[CE2-Ten-GigabitEthernet3/1/4] ipv6 pim sm

[CE2-Ten-GigabitEthernet3/1/4] ipv6 address 10:4::22 64

[CE2-Ten-GigabitEthernet3/1/4] quit

# 配置BGP协议。

[CE2] bgp 65022

[CE2-bgp-default] peer 10.2.0.11 as-number 65022

[CE2-bgp-default] peer 10.4.0.2 as-number 100

[CE2-bgp-default] peer 10:2::11 as-number 65022

[CE2-bgp-default] peer 10:4::2 as-number 100

[CE2-bgp-default] address-family ipv4 unicast

[CE2-bgp-default-ipv4] peer 10.2.0.11 enable

[CE2-bgp-default-ipv4] peer 10.4.0.2 enable

[CE2-bgp-default-ipv4] import-route direct

[CE2-bgp-default-ipv4] address-family ipv6 unicast

[CE2-bgp-default-ipv6] peer 10:2::11 enable

[CE2-bgp-default-ipv6] peer 10:4::2 enable

[CE2-bgp-default-ipv6] import-route direct

[CE2-bgp-default-ipv6] quit

[CE2-bgp-default] quit

(3)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis enable 1

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE 1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:2::5。

[PE1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:2::5

# 配置BFD故障检测模式为echo。

[PE1-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-vpn-instance-a] address-family ipv4

[PE1-mvpn-vpn-instance-a-ipv4] source loopback 0

[PE1-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv4] auto-discovery inter-as

[PE1-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:2::34

[PE1-mvpn-vpn-instance-a-ipv4] warm-root-standby

[PE1-mvpn-vpn-instance-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE1-mvpn-vpn-instance-a] address-family ipv6

[PE1-mvpn-vpn-instance-a-ipv6] source loopback 0

[PE1-mvpn-vpn-instance-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-vpn-instance-a-ipv6] auto-discovery inter-as

[PE1-mvpn-vpn-instance-a-ipv6] src-dt6 locator aaa sid 1:2::35

[PE1-mvpn-vpn-instance-a-ipv6] warm-root-standby

[PE1-mvpn-vpn-instance-a-ipv6] quit

[PE1-mvpn-vpn-instance-a] quit

# 将接口Ten-GigabitEthernet3/1/1与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/1] ip address 10.3.0.1 24

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 10:3::1 64

[PE1-Ten-GigabitEthernet3/1/1] pim sm

[PE1-Ten-GigabitEthernet3/1/1] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/3

[PE1-Ten-GigabitEthernet3/1/3] port link-mode route

[PE1-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/3] isis cost 1200

[PE1-Ten-GigabitEthernet3/1/3] ipv6 address 10:5::1 64

[PE1-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/4上配置IP地址,并使能IS-IS。

[PE1] interface ten-gigabitethernet 3/1/4

[PE1-Ten-GigabitEthernet3/1/4] port link-mode route

[PE1-Ten-GigabitEthernet3/1/4] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/4] isis cost 100

[PE1-Ten-GigabitEthernet3/1/4] ipv6 address 10:6::1 64

[PE1-Ten-GigabitEthernet3/1/4] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 1.2.3.4 32

[PE1-LoopBack1] ipv6 address 1:2:3::4 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 1.2.3.4

[PE1-pim-a] c-rp 1.2.3.4

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 1:2:3::4

[PE1-pim6-a] c-rp 1:2:3::4

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 2::2 as-number 100

[PE1-bgp-default] peer 2::2 connect-interface loopback 0

[PE1-bgp-default] peer 3::3 as-number 100

[PE1-bgp-default] peer 3::3 connect-interface LoopBack 0

[PE1-bgp-default] peer 4::4 as-number 100

[PE1-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE1-bgp-default] peer 7::7 as-number 200

[PE1-bgp-default] peer 7::7 connect-interface loopback 0

[PE1-bgp-default] peer 7::7 ebgp-max-hop 10

[PE1-bgp-default] peer 8::8 as-number 200

[PE1-bgp-default] peer 8::8 connect-interface loopback 0

[PE1-bgp-default] peer 8::8 ebgp-max-hop 10

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 2::2 enable

[PE1-bgp-default-mvpn] peer 7::7 enable

[PE1-bgp-default-mvpn] peer 8::8 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 2::2 enable

[PE1-bgp-default-mvpn-ipv6] peer 7::7 enable

[PE1-bgp-default-mvpn-ipv6] peer 8::8 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] pic

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 2::2 enable

[PE1-bgp-default-vpnv4] peer 2::2 prefix-sid

[PE1-bgp-default-vpnv4] peer 2::2 advertise-community

[PE1-bgp-default-vpnv4] peer 7::7 enable

[PE1-bgp-default-vpnv4] peer 7::7 prefix-sid

[PE1-bgp-default-vpnv4] peer 8::8 enable

[PE1-bgp-default-vpnv4] peer 8::8 prefix-sid

[PE1-bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] import-route direct

[PE1-bgp-default-ipv6] peer 3::3 enable

[PE1-bgp-default-ipv6] peer 4::4 enable

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] pic

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 2::2 enable

[PE1-bgp-default-vpnv6] peer 2::2 prefix-sid

[PE1-bgp-default-vpnv6] peer 2::2 advertise-community

[PE1-bgp-default-vpnv6] peer 7::7 enable

[PE1-bgp-default-vpnv6] peer 7::7 prefix-sid

[PE1-bgp-default-vpnv6] peer 8::8 enable

[PE1-bgp-default-vpnv6] peer 8::8 prefix-sid

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] peer 10.3.0.11 as-number 65022

[PE1-bgp-default-a] peer 10:3::11 as-number 65022

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] pic

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] peer 10.3.0.11 enable

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] pic

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] peer 10:3::11 enable

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] bier fast-reroute enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] fast-reroute lfa

[PE1-isis-1-ipv6] fast-reroute ti-lfa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(4)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0002.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 2.2.2.2 32

[PE2-LoopBack0] ipv6 address 2::2 128

[PE2-LoopBack0] isis enable 1

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 22::22

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 1:3:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE 2加入BIER子域0、BFR ID为2、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 2

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:3::5。

[PE2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:3::5

# 配置BFD故障检测模式为echo。

[PE2-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:2

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-vpn-instance-a] address-family ipv4

[PE2-mvpn-vpn-instance-a-ipv4] source loopback 0

[PE2-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv4] auto-discovery inter-as

[PE2-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:3::34

[PE2-mvpn-vpn-instance-a-ipv4] warm-root-standby

[PE2-mvpn-vpn-instance-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE2-mvpn-vpn-instance-a] address-family ipv6

[PE2-mvpn-vpn-instance-a-ipv6] source loopback 0

[PE2-mvpn-vpn-instance-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-vpn-instance-a-ipv6] auto-discovery inter-as

[PE2-mvpn-vpn-instance-a-ipv6] src-dt6 locator aaa sid 1:3::35

[PE2-mvpn-vpn-instance-a-ipv6] warm-root-standby

[PE2-mvpn-vpn-instance-a-ipv6] quit

[PE2-mvpn-vpn-instance-a] quit

# 将接口Ten-GigabitEthernet3/1/4与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE2] interface ten-gigabitethernet 3/1/4

[PE2-Ten-GigabitEthernet3/1/4] port link-mode route

[PE2-Ten-GigabitEthernet3/1/4] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/4] ip address 10.4.0.2 24

[PE2-Ten-GigabitEthernet3/1/4] ipv6 address 10:4::2 64

[PE2-Ten-GigabitEthernet3/1/4] pim sm

[PE2-Ten-GigabitEthernet3/1/4] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/4] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/2] isis cost 1200

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 10:5::2 64

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[PE2] interface ten-gigabitethernet 3/1/3

[PE2-Ten-GigabitEthernet3/1/3] port link-mode route

[PE2-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/3] isis cost 100

[PE2-Ten-GigabitEthernet3/1/3] ipv6 address 10:7::2 64

[PE2-Ten-GigabitEthernet3/1/3] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE2] interface loopback 1

[PE2-LoopBack1] ip binding vpn-instance a

[PE2-LoopBack1] ip address 1.2.3.3 32

[PE2-LoopBack1] ipv6 address 1:2:3::3 128

[PE2-LoopBack1] pim sm

[PE2-LoopBack1] ipv6 pim sm

[PE2-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE2] pim vpn-instance a

[PE2-pim-a] c-bsr 1.2.3.3

[PE2-pim-a] c-rp 1.2.3.3

[PE2-pim-a] quit

[PE2] ipv6 pim vpn-instance a

[PE2-pim6-a] c-bsr 1:2:3::3

[PE2-pim6-a] c-rp 1:2:3::3

[PE2-pim6-a] quit

# 配置BGP协议。

[PE2] bgp 100

[PE2-bgp-default] router-id 2.2.2.2

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 3::3 as-number 100

[PE2-bgp-default] peer 3::3 connect-interface LoopBack 0

[PE2-bgp-default] peer 4::4 as-number 100

[PE2-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE2-bgp-default] peer 7::7 as-number 200

[PE2-bgp-default] peer 7::7 connect-interface loopback 0

[PE2-bgp-default] peer 7::7 ebgp-max-hop 10

[PE2-bgp-default] peer 8::8 as-number 200

[PE2-bgp-default] peer 8::8 connect-interface loopback 0

[PE2-bgp-default] peer 8::8 ebgp-max-hop 10

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] peer 7::7 enable

[PE2-bgp-default-mvpn] peer 8::8 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] peer 7::7 enable

[PE2-bgp-default-mvpn-ipv6] peer 8::8 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] pic

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] peer 1::1 advertise-community

[PE2-bgp-default-vpnv4] peer 7::7 enable

[PE2-bgp-default-vpnv4] peer 7::7 prefix-sid

[PE2-bgp-default-vpnv4] peer 8::8 enable

[PE2-bgp-default-vpnv4] peer 8::8 prefix-sid

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] import-route direct

[PE2-bgp-default-ipv6] peer 3::3 enable

[PE2-bgp-default-ipv6] peer 4::4 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] pic

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] peer 1::1 advertise-community

[PE2-bgp-default-vpnv6] peer 7::7 enable

[PE2-bgp-default-vpnv6] peer 7::7 prefix-sid

[PE2-bgp-default-vpnv6] peer 8::8 enable

[PE2-bgp-default-vpnv6] peer 8::8 prefix-sid

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] peer 10.4.0.22 as-number 65022

[PE2-bgp-default-a] peer 10:4::22 as-number 65022

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] pic

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] peer 10.4.0.22 enable

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] pic

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] peer 10:4::22 enable

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] bier fast-reroute enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] fast-reroute lfa

[PE2-isis-1-ipv6] fast-reroute ti-lfa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

(5)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0003.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 3.3.3.3 32

[P1-LoopBack0] ipv6 address 3::3 128

[P1-LoopBack0] isis enable 1

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

# 配置SRv6。

[P1] segment-routing ipv6

[P1-segment-routing-ipv6] encapsulation source-address 33::33

[P1-segment-routing-ipv6] locator aaa ipv6-prefix 1:4:: 96 static 8

[P1-segment-routing-ipv6] quit

# 配置P 1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[P1] bier

[P1-bier] sub-domain 0 ipv6

[P1-bier-sub-domain-0-ipv6] bfr-id 3

[P1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:4::5。

[P1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:4::5

# 配置BFD故障检测模式为echo。

[P1-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/3

[P1-Ten-GigabitEthernet3/1/3] port link-mode route

[P1-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/3] isis cost 100

[P1-Ten-GigabitEthernet3/1/3] ipv6 address 10:6::3 64

[P1-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface ten-gigabitethernet 3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] isis cost 1300

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 10:8::3 64

[P1-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[P1] interface ten-gigabitethernet 3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 10:9::3 64

[P1-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[P1] bgp 100

[P1-bgp-default] router-id 3.3.3.3

[P1-bgp-default] peer 1::1 as-number 100

[P1-bgp-default] peer 1::1 connect-interface LoopBack 0

[P1-bgp-default] peer 2::2 as-number 100

[P1-bgp-default] peer 2::2 connect-interface LoopBack 0

[P1-bgp-default] peer 10:9::5 as-number 200

[P1-bgp-default] peer 10:9::5 ebgp-max-hop 10

[P1-bgp-default] address-family ipv6 unicast

[P1-bgp-default-ipv6] bier enable

[P1-bgp-default-ipv6] import-bier isisv6 1

[P1-bgp-default-ipv6] peer 10:9::5 enable

[P1-bgp-default-ipv6] peer 10:9::5 capability bier

[P1-bgp-default-ipv6] peer 1::1 enable

[P1-bgp-default-ipv6] peer 1::1 next-hop-local

[P1-bgp-default-ipv6] peer 2::2 enable

[P1-bgp-default-ipv6] peer 2::2 next-hop-local

[P1-bgp-default-ipv6] quit

[P1–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[P1] isis 1

[P1-isis-1] bier enable

[P1-isis-1] bier fast-reroute enable

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] segment-routing ipv6 locator aaa

[P1-isis-1-ipv6] import-bier bgp4+

[P1-isis-1-ipv6] import-route bgp4+

[P1-isis-1-ipv6] fast-reroute lfa

[P1-isis-1-ipv6] fast-reroute ti-lfa

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

(6)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0004.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 4.4.4.4 32

[P2-LoopBack0] ipv6 address 4::4 128

[P2-LoopBack0] isis enable 1

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

# 配置SRv6。

[P2] segment-routing ipv6

[P2-segment-routing-ipv6] encapsulation source-address 44::44

[P2-segment-routing-ipv6] locator aaa ipv6-prefix 1:5:: 96 static 8

[P2-segment-routing-ipv6] quit

# 配置P 2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[P2] bier

[P2-bier] sub-domain 0 ipv6

[P2-bier-sub-domain-0-ipv6] bfr-id 4

[P2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:5::5。

[P2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:5::5

# 配置BFD故障检测模式为echo。

[P2-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/3

[P2-Ten-GigabitEthernet3/1/3] port link-mode route

[P2-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/3] isis cost 100

[P2-Ten-GigabitEthernet3/1/3] ipv6 address 10:7::4 64

[P2-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface ten-gigabitethernet 3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] isis cost 1300

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 10:8::4 64

[P2-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[P2] interface ten-gigabitethernet 3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 10:10::4 64

[P2-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[P2] bgp 100

[P2-bgp-default] router-id 4.4.4.4

[P2-bgp-default] peer 1::1 as-number 100

[P2-bgp-default] peer 1::1 connect-interface LoopBack 0

[P2-bgp-default] peer 2::2 as-number 100

[P2-bgp-default] peer 2::2 connect-interface LoopBack 0

[P2-bgp-default] peer 10:10::6 as-number 200

[P2-bgp-default] peer 10:10::6 ebgp-max-hop 10

[P2-bgp-default] address-family ipv6 unicast

[P2-bgp-default-ipv6] bier enable

[P2-bgp-default-ipv6] import-bier isisv6 1

[P2-bgp-default-ipv6] peer 1::1 enable

[P2-bgp-default-ipv6] peer 1::1 next-hop-local

[P2-bgp-default-ipv6] peer 2::2 enable

[P2-bgp-default-ipv6] peer 2::2 next-hop-local

[P2-bgp-default-ipv6] peer 10:10::6 enable

[P2-bgp-default-ipv6] peer 10:10::6 capability bier

[P2-bgp-default-ipv6] quit

[P2–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[P2] isis 1

[P2-isis-1] bier enable

[P2-isis-1] bier fast-reroute enable

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] segment-routing ipv6 locator aaa

[P2-isis-1-ipv6] import-bier bgp4+

[P2-isis-1-ipv6] import-route bgp4+

[P2-isis-1-ipv6] fast-reroute lfa

[P2-isis-1-ipv6] fast-reroute ti-lfa

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

(7)     配置P 3

# 配置全局Router ID。

<P3> system-view

[P3] router id 5.5.5.5

# 配置IPv6 IS-IS协议。

[P3] isis 1

[P3-isis-1] is-level level-2

[P3-isis-1] cost-style wide

[P3-isis-1] network-entity 10.0000.0000.0005.00

[P3-isis-1] address-family ipv6 unicast

[P3-isis-1-ipv6] quit

[P3-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P3] interface loopback 0

[P3-LoopBack0] ip address 5.5.5.5 32

[P3-LoopBack0] ipv6 address 5::5 128

[P3-LoopBack0] isis enable 1

[P3-LoopBack0] isis ipv6 enable 1

[P3-LoopBack0] quit

# 配置SRv6。

[P3] segment-routing ipv6

[P3-segment-routing-ipv6] encapsulation source-address 55::55

[P3-segment-routing-ipv6] locator aaa ipv6-prefix 1:6:: 96 static 8

[P3-segment-routing-ipv6] quit

# 配置P 3加入BIER子域0、BFR ID为5、BFR prefix为LoopBack口0的IPv6地址。

[P3] bier

[P3-bier] sub-domain 0 ipv6

[P3-bier-sub-domain-0-ipv6] bfr-id 5

[P3-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P3-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:6::5。

[P3-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:6::5

# 配置BFD故障检测模式为echo。

[P3-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[P3] interface ten-gigabitethernet 3/1/1

[P3-Ten-GigabitEthernet3/1/1] port link-mode route

[P3-Ten-GigabitEthernet3/1/1] ipv6 address 10:9::5 64

[P3-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P3] interface ten-gigabitethernet 3/1/2

[P3-Ten-GigabitEthernet3/1/2] port link-mode route

[P3-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P3-Ten-GigabitEthernet3/1/2] isis cost 1400

[P3-Ten-GigabitEthernet3/1/2] ipv6 address 10:11::5 64

[P3-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[P3] interface ten-gigabitethernet 3/1/3

[P3-Ten-GigabitEthernet3/1/3] port link-mode route

[P3-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[P3-Ten-GigabitEthernet3/1/3] isis cost 100

[P3-Ten-GigabitEthernet3/1/3] ipv6 address 10:12::5 64

[P3-Ten-GigabitEthernet3/1/3] quit

# 配置BGP协议。

[P3] bgp 200

[P3-bgp-default] router-id 5.5.5.5

[P3-bgp-default] peer 7::7 as-number 200

[P3-bgp-default] peer 7::7 connect-interface LoopBack 0

[P3-bgp-default] peer 8::8 as-number 200

[P3-bgp-default] peer 8::8 connect-interface LoopBack 0

[P3-bgp-default] peer 10:9::3 as-number 100

[P3-bgp-default] peer 10:9::3 ebgp-max-hop 10

[P3-bgp-default] address-family ipv6 unicast

[P3-bgp-default-ipv6] bier enable

[P3-bgp-default-ipv6] import-bier isisv6 1

[P3-bgp-default-ipv6] peer 7::7 enable

[P3-bgp-default-ipv6] peer 7::7 next-hop-local

[P3-bgp-default-ipv6] peer 8::8 enable

[P3-bgp-default-ipv6] peer 8::8 next-hop-local

[P3-bgp-default-ipv6] peer 10:9::3 enable

[P3-bgp-default-ipv6] peer 10:9::3 capability bier

[P3-bgp-default-ipv6] quit

[P3–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[P3] isis 1

[P3-isis-1] bier enable

[P3-isis-1] bier fast-reroute enable

[P3-isis-1] address-family ipv6 unicast

[P3-isis-1-ipv6] segment-routing ipv6 locator aaa

[P3-isis-1-ipv6] import-bier bgp4+

[P3-isis-1-ipv6] import-route bgp4+

[P3-isis-1-ipv6] fast-reroute lfa

[P3-isis-1-ipv6] fast-reroute ti-lfa

[P3-isis-1-ipv6] quit

[P3-isis-1] quit

(8)     配置P 4

# 配置全局Router ID。

<P4> system-view

[P4] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[P4] isis 1

[P4-isis-1] is-level level-2

[P4-isis-1] cost-style wide

[P4-isis-1] network-entity 10.0000.0000.0006.00

[P4-isis-1] address-family ipv6 unicast

[P4-isis-1-ipv6] quit

[P4-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P4] interface loopback 0

[P4-LoopBack0] ip address 6.6.6.6 32

[P4-LoopBack0] ipv6 address 6::6 128

[P4-LoopBack0] isis enable 1

[P4-LoopBack0] isis ipv6 enable 1

[P4-LoopBack0] quit

# 配置SRv6。

[P4] segment-routing ipv6

[P4-segment-routing-ipv6] encapsulation source-address 66::66

[P4-segment-routing-ipv6] locator aaa ipv6-prefix 1:7:: 96 static 8

[P4-segment-routing-ipv6] quit

# 配置P 4加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[P4] bier

[P4-bier] sub-domain 0 ipv6

[P4-bier-sub-domain-0-ipv6] bfr-id 6

[P4-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P4-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:7::5。

[P4-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:7::5

# 配置BFD故障检测模式为echo。

[P4-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[P4] interface ten-gigabitethernet 3/1/1

[P4-Ten-GigabitEthernet3/1/1] port link-mode route

[P4-Ten-GigabitEthernet3/1/1] ipv6 address 10:10::6 64

[P4-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P4] interface ten-gigabitethernet 3/1/2

[P4-Ten-GigabitEthernet3/1/2] port link-mode route

[P4-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P4-Ten-GigabitEthernet3/1/2] isis cost 1400

[P4-Ten-GigabitEthernet3/1/2] ipv6 address 10:11::6 64

[P4-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[P4] interface ten-gigabitethernet 3/1/3

[P4-Ten-GigabitEthernet3/1/3] port link-mode route

[P4-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[P4-Ten-GigabitEthernet3/1/3] isis cost 100

[P4-Ten-GigabitEthernet3/1/3] ipv6 address 10:13::6 64

[P4-Ten-GigabitEthernet3/1/3] quit

# 配置BGP协议。

[P4] bgp 200

[P4-bgp-default] router-id 6.6.6.6

[P4-bgp-default] peer 7::7 as-number 200

[P4-bgp-default] peer 7::7 connect-interface LoopBack 0

[P4-bgp-default] peer 8::8 as-number 200

[P4-bgp-default] peer 8::8 connect-interface LoopBack 0

[P4-bgp-default] peer 10:10::4 as-number 100

[P4-bgp-default] peer 10:10::4 ebgp-max-hop 10

[P4-bgp-default] address-family ipv6 unicast

[P4-bgp-default-ipv6] bier enable

[P4-bgp-default-ipv6] import-bier isisv6 1

[P4-bgp-default-ipv6] peer 7::7 enable

[P4-bgp-default-ipv6] peer 7::7 next-hop-local

[P4-bgp-default-ipv6] peer 8::8 enable

[P4-bgp-default-ipv6] peer 8::8 next-hop-local

[P4-bgp-default-ipv6] peer 10:10::4 enable

[P4-bgp-default-ipv6] peer 10:10::4 capability bier

[P4-bgp-default-ipv6] quit

[P4–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[P4] isis 1

[P4-isis-1] bier enable

[P4-isis-1] bier fast-reroute enable

[P4-isis-1] address-family ipv6 unicast

[P4-isis-1-ipv6] segment-routing ipv6 locator aaa

[P4-isis-1-ipv6] import-bier bgp4+

[P4-isis-1-ipv6] import-route bgp4+

[P4-isis-1-ipv6] fast-reroute lfa

[P4-isis-1-ipv6] fast-reroute ti-lfa

[P4-isis-1-ipv6] quit

[P4-isis-1] quit

(9)     配置PE 3

# 配置全局Router ID。

<PE3> system-view

[PE3] router id 7.7.7.7

# 配置IPv6 IS-IS协议。

[PE3] isis 1

[PE3-isis-1] is-level level-2

[PE3-isis-1] cost-style wide

[PE3-isis-1] network-entity 10.0000.0000.0007.00

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE3] interface loopback 0

[PE3-LoopBack0] ip address 7.7.7.7 32

[PE3-LoopBack0] ipv6 address 7::7 128

[PE3-LoopBack0] isis enable 1

[PE3-LoopBack0] isis ipv6 enable 1

[PE3-LoopBack0] quit

# 配置SRv6。

[PE3] segment-routing ipv6

[PE3-segment-routing-ipv6] encapsulation source-address 77::77

[PE3-segment-routing-ipv6] locator aaa ipv6-prefix 1:8:: 96 static 8

[PE3-segment-routing-ipv6] quit

# 配置PE 3加入BIER子域0、BFR ID为7、BFR prefix为LoopBack口0的IPv6地址。

[PE3] bier

[PE3-bier] sub-domain 0 ipv6

[PE3-bier-sub-domain-0-ipv6] bfr-id 7

[PE3-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE3-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:8::5。

[PE3-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:8::5

# 配置BFD故障检测模式为echo。

[PE3-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

# 创建VPN实例a,并为其配置RD和Route Target。

[PE3] ip vpn-instance a

[PE3-vpn-instance-a] route-distinguisher 100:7

[PE3-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE3-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE3-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE3] multicast routing vpn-instance a

[PE3-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE3] ipv6 multicast routing vpn-instance a

[PE3-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE3] multicast-vpn vpn-instance a mode bier

[PE3-mvpn-vpn-instance-a] address-family ipv4

[PE3-mvpn-vpn-instance-a-ipv4] source loopback 0

[PE3-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:8::34

[PE3-mvpn-vpn-instance-a-ipv4] auto-discovery inter-as

[PE3-mvpn-vpn-instance-a-ipv4] warm-root-standby

[PE3-mvpn-vpn-instance-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE3-mvpn-vpn-instance-a] address-family ipv6

[PE3-mvpn-vpn-instance-a-ipv6] source loopback 0

[PE3-mvpn-vpn-instance-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE3-mvpn-vpn-instance-a-ipv6] src-dt6 locator aaa sid 1:8::35

[PE3-mvpn-vpn-instance-a-ipv6] auto-discovery inter-as

[PE3-mvpn-vpn-instance-a-ipv6] warm-root-standby

[PE3-mvpn-vpn-instance-a-ipv6] quit

[PE3-mvpn-vpn-instance-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM和IGMP/MLD。

[PE3] interface ten-gigabitethernet 3/1/2

[PE3-Ten-GigabitEthernet3/1/2] port link-mode route

[PE3-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE3-Ten-GigabitEthernet3/1/2] ip address 7.13.1.11 24

[PE3-Ten-GigabitEthernet3/1/2] ipv6 address 7:13:1::11 64

[PE3-Ten-GigabitEthernet3/1/2] pim sm

[PE3-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE3-Ten-GigabitEthernet3/1/2] igmp enable

[PE3-Ten-GigabitEthernet3/1/2] mld enable

[PE3-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[PE3] interface ten-gigabitethernet 3/1/3

[PE3-Ten-GigabitEthernet3/1/3] port link-mode route

[PE3-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[PE3-Ten-GigabitEthernet3/1/3] isis cost 100

[PE3-Ten-GigabitEthernet3/1/3] ipv6 address 10:12::7 64

[PE3-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE3] interface ten-gigabitethernet 3/1/1

[PE3-Ten-GigabitEthernet3/1/1] port link-mode route

[PE3-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE3-Ten-GigabitEthernet3/1/1] isis cost 1500

[PE3-Ten-GigabitEthernet3/1/1] ipv6 address 10:14::7 64

[PE3-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE3] bgp 200

[PE3-bgp-default] router-id 7.7.7.7

[PE3-bgp-default] peer 1::1 as-number 100

[PE3-bgp-default] peer 1::1 connect-interface loopback 0

[PE3-bgp-default] peer 1::1 ebgp-max-hop 10

[PE3-bgp-default] peer 2::2 as-number 100

[PE3-bgp-default] peer 2::2 connect-interface loopback 0

[PE3-bgp-default] peer 2::2 ebgp-max-hop 10

[PE3-bgp-default] peer 5::5 as-number 200

[PE3-bgp-default] peer 5::5 connect-interface LoopBack 0

[PE3-bgp-default] peer 6::6 as-number 200

[PE3-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE3-bgp-default] address-family ipv4 mvpn

[PE3-bgp-default-mvpn] peer 1::1 enable

[PE3-bgp-default-mvpn] peer 2::2 enable

[PE3-bgp-default-mvpn] quit

[PE3-bgp-default] address-family ipv6 mvpn

[PE3-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE3-bgp-default-mvpn-ipv6] peer 2::2 enable

[PE3-bgp-default-mvpn-ipv6] quit

[PE3-bgp-default] address-family vpnv4

[PE3-bgp-default-vpnv4] pic

[PE3-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE3-bgp-default-vpnv4] peer 1::1 enable

[PE3-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE3-bgp-default-vpnv4] peer 2::2 enable

[PE3-bgp-default-vpnv4] peer 2::2 prefix-sid

[PE3-bgp-default] address-family ipv6

[PE3-bgp-default-ipv6] import-route direct

[PE3-bgp-default-ipv6] peer 5::5 enable

[PE3-bgp-default-ipv6] peer 6::6 enable

[PE3-bgp-default-ipv6] advertise srv6 locator aaa

[PE3-bgp-default] address-family vpnv6

[PE3-bgp-default-vpnv6] pic

[PE3-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE3-bgp-default-vpnv6] peer 1::1 enable

[PE3-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE3-bgp-default-vpnv6] peer 2::2 enable

[PE3-bgp-default-vpnv6] peer 2::2 prefix-sid

[PE3–bgp-default] ip vpn-instance a

[PE3-bgp-default-a] address-family ipv4 unicast

[PE3-bgp-default-ipv4-a] pic

[PE3-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE3-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE3-bgp-default-ipv4-a] import-route direct

[PE3-bgp-default-ipv4-a] quit

[PE3-bgp-default-a] address-family ipv6 unicast

[PE3-bgp-default-ipv6-a] pic

[PE3-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE3-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE3-bgp-default-ipv6-a] import-route direct

[PE3-bgp-default-ipv6-a] quit

[PE3-bgp-default-a] quit

[PE3–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[PE3] isis 1

[PE3-isis-1] bier enable

[PE3-isis-1] bier fast-reroute enable

[PE3-isis-1] address-family ipv6 unicast

[PE3-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE3-isis-1-ipv6] fast-reroute lfa

[PE3-isis-1-ipv6] fast-reroute ti-lfa

[PE3-isis-1-ipv6] quit

[PE3-isis-1] quit

(10)     配置PE 4

# 配置全局Router ID。

<PE4> system-view

[PE4] router id 8.8.8.8

# 配置IPv6 IS-IS协议。

[PE4] isis 1

[PE4-isis-1] is-level level-2

[PE4-isis-1] cost-style wide

[PE4-isis-1] network-entity 10.0000.0000.0008.00

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE4] interface loopback 0

[PE4-LoopBack0] ip address 8.8.8.8 32

[PE4-LoopBack0] ipv6 address 8::8 128

[PE4-LoopBack0] isis enable 1

[PE4-LoopBack0] isis ipv6 enable 1

[PE4-LoopBack0] quit

# 配置SRv6。

[PE4] segment-routing ipv6

[PE4-segment-routing-ipv6] encapsulation source-address 88::88

[PE4-segment-routing-ipv6] locator aaa ipv6-prefix 1:9:: 96 static 8

[PE4-segment-routing-ipv6] quit

# 配置PE 4加入BIER子域0、BFR ID为8、BFR prefix为LoopBack口0的IPv6地址。

[PE4] bier

[PE4-bier] sub-domain 0 ipv6

[PE4-bier-sub-domain-0-ipv6] bfr-id 8

[PE4-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE4-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:9::5。

[PE4-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:9::5

# 配置BFD故障检测模式为echo。

[PE4-bier-sub-domain-0-ipv6] primary-path-detect bfd echo

# 创建VPN实例a,并为其配置RD和Route Target。

[PE4] ip vpn-instance a

[PE4-vpn-instance-a] route-distinguisher 100:8

[PE4-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE4-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE4-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE4] multicast routing vpn-instance a

[PE4-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE4] ipv6 multicast routing vpn-instance a

[PE4-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE4] multicast-vpn vpn-instance a mode bier

[PE4-mvpn-vpn-instance-a] address-family ipv4

[PE4-mvpn-vpn-instance-a-ipv4] source loopback 0

[PE4-mvpn-vpn-instance-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv4] src-dt4 locator aaa sid 1:9::34

[PE4-mvpn-vpn-instance-a-ipv4] warm-root-standby

[PE4-mvpn-vpn-instance-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道,并开启组播温备功能。

[PE4-mvpn-vpn-instance-a] address-family ipv6

[PE4-mvpn-vpn-instance-a-ipv6] source loopback 0

[PE4-mvpn-vpn-instance-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE4-mvpn-vpn-instance-a-ipv6] src-dt6 locator aaa sid 1:9::35

[PE4-mvpn-vpn-instance-a-ipv6] warm-root-standby

[PE4-mvpn-vpn-instance-a-ipv6] quit

[PE4-mvpn-vpn-instance-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM和IGMP/MLD。

[PE4] interface ten-gigabitethernet 3/1/2

[PE4-Ten-GigabitEthernet3/1/2] port link-mode route

[PE4-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE4-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 24

[PE4-Ten-GigabitEthernet3/1/2] ipv6 address 7:13:1::12 64

[PE4-Ten-GigabitEthernet3/1/2] pim sm

[PE4-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE4-Ten-GigabitEthernet3/1/2] igmp enable

[PE4-Ten-GigabitEthernet3/1/2] mld enable

[PE4-Ten-GigabitEthernet3/1/2] quit

# 在公网接口Ten-GigabitEthernet3/1/3上配置IP地址,并使能IS-IS。

[PE4] interface ten-gigabitethernet 3/1/3

[PE4-Ten-GigabitEthernet3/1/3] port link-mode route

[PE4-Ten-GigabitEthernet3/1/3] isis ipv6 enable 1

[PE4-Ten-GigabitEthernet3/1/3] isis cost 100

[PE4-Ten-GigabitEthernet3/1/3] ipv6 address 10:13::8 64

[PE4-Ten-GigabitEthernet3/1/3] quit

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE4] interface ten-gigabitethernet 3/1/1

[PE4-Ten-GigabitEthernet3/1/1] port link-mode route

[PE4-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE4-Ten-GigabitEthernet3/1/1] isis cost 1500

[PE4-Ten-GigabitEthernet3/1/1] ipv6 address 10:14::8 64

[PE4-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE4] bgp 200

[PE4-bgp-default] router-id 8.8.8.8

[PE4-bgp-default] peer 1::1 as-number 100

[PE4-bgp-default] peer 1::1 connect-interface loopback 0

[PE4-bgp-default] peer 1::1 ebgp-max-hop 10

[PE4-bgp-default] peer 2::2 as-number 100

[PE4-bgp-default] peer 2::2 connect-interface loopback 0

[PE4-bgp-default] peer 2::2 ebgp-max-hop 10

[PE4-bgp-default] peer 5::5 as-number 200

[PE4-bgp-default] peer 5::5 connect-interface LoopBack 0

[PE4-bgp-default] peer 6::6 as-number 200

[PE4-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE4-bgp-default] address-family ipv4 mvpn

[PE4-bgp-default-mvpn] peer 1::1 enable

[PE4-bgp-default-mvpn] peer 2::2 enable

[PE4-bgp-default-mvpn] quit

[PE4-bgp-default] address-family ipv6 mvpn

[PE4-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE4-bgp-default-mvpn-ipv6] peer 2::2 enable

[PE4-bgp-default-mvpn-ipv6] quit

[PE4-bgp-default] address-family vpnv4

[PE4-bgp-default-vpnv4] pic

[PE4-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE4-bgp-default-vpnv4] peer 1::1 enable

[PE4-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE4-bgp-default-vpnv4] peer 2::2 enable

[PE4-bgp-default-vpnv4] peer 2::2 prefix-sid

[PE4-bgp-default] address-family ipv6

[PE4-bgp-default-ipv6] import-route direct

[PE4-bgp-default-ipv6] peer 5::5 enable

[PE4-bgp-default-ipv6] peer 6::6 enable

[PE4-bgp-default-ipv6] advertise srv6 locator aaa

[PE4-bgp-default] address-family vpnv6

[PE4-bgp-default-vpnv6] pic

[PE4-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE4-bgp-default-vpnv6] peer 1::1 enable

[PE4-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE4-bgp-default-vpnv6] peer 2::2 enable

[PE4-bgp-default-vpnv6] peer 2::2 prefix-sid

[PE4–bgp-default] ip vpn-instance a

[PE4-bgp-default-a] address-family ipv4 unicast

[PE4-bgp-default-ipv4-a] pic

[PE4-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv4-a] import-route direct

[PE4-bgp-default-ipv4-a] quit

[PE4-bgp-default-a] address-family ipv6 unicast

[PE4-bgp-default-ipv6-a] pic

[PE4-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE4-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE4-bgp-default-ipv6-a] import-route direct

[PE4-bgp-default-ipv6-a] quit

[PE4-bgp-default-a] quit

[PE4–bgp-default] quit

# 开启IS-IS进程的BIER快速重路由能力。

[PE4] isis 1

[PE4-isis-1] bier enable

[PE4-isis-1] bier fast-reroute enable

[PE4-isis-1] address-family ipv6 unicast

[PE4-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE4-isis-1-ipv6] fast-reroute lfa

[PE4-isis-1-ipv6] fast-reroute ti-lfa

[PE4-isis-1-ipv6] quit

[PE4-isis-1] quit

4. 验证配置

# 查看PIM表项。

[PE1] display pim vpn-instance a routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

 (7.12.1.10, 225.0.0.1)

     RP: 1.2.3.3

     Protocol: pim-sm, Flag: SPT ACT RC SRC-ACT IDF-MN

     UpTime: 00:02:49

     Upstream interface: Ten-GigabitEthernet3/1/1

         Upstream neighbor: 10.3.0.11

         RPF prime neighbor: 10.3.0.11

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif2

             Protocol: MD, UpTime: 00:02:40, Expires: -

 

 

[PE2] display pim vpn-instance  a routing-table

 Total 0 (*, G) entries; 1 (S, G) entries

 

 (7.12.1.10, 225.0.0.1)

     RP: 1.2.3.3 (local)

     Protocol: pim-sm, Flag: SPT 2MSDP ACT RC SRC-ACT 2MVPN SC IDF-BU

     UpTime: 00:05:55

     Upstream interface: Ten-GigabitEthernet3/1/4

         Upstream neighbor: 10.4.0.22

         RPF prime neighbor: 10.4.0.22

     Downstream interface information:

     Total number of downstream interfaces: 1

         1: BIERVOif2 (Inactive)

             Protocol: MD, UpTime: 00:05:46, Expires: -

# 查看域内BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 6

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 2

    BFR prefix: 2::2

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  Invalid

 

      BFR prefix: 4::4

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 2147483651

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 Invalid

 

      BFR prefix: 4::4

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  2147483652

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  Invalid

 

      BFR prefix: 4::4

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                FE80::280E:9DFF:FE8C:100B                                 Invalid

 

    BFR ID: 5

    BFR prefix: 5::5

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 Invalid

 

      BFR prefix: 4::4

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  2147483652

 

    BFR ID: 6

    BFR prefix: 6::6

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 2

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/3                 FE80::280E:94FF:FE96:F0A                                  Invalid

 

      BFR prefix: 4::4

      NBRFlag: B

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/4                 FE80::280E:9DFF:FE8C:100B                                 Invalid

# 查看域外BIRT表项。

[PE1] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 7

      BFR prefix: 5::5

        AS: --

        Protocol: IS-IS

        Preference: --

 

    BFR ID: 8

      BFR prefix: 5::5

        AS: --

        Protocol: IS-IS

        Preference: --

1.20.12  跨AS域BIER前缀保留ISIS-EBGP-ISIS组网配置举例(MSR6封装类型)

1. 组网需求

组网需求如表1-14所示。

表1-14 跨AS域BIER前缀保留ISIS-EBGP-ISIS(MSR6封装类型)组网需求

项目

组网需求

功能描述

·     对于MSR6封装类型,ASBR设备对域外的BIER前缀信息进行保留,域内进行域外信息发布的时候,使用原有前缀信息发布

·     AS 100内通过IS-IS报文携带BIER信息,AS 200通过IS-IS报文携带BIER信息

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网AS 100和AS 200中配置IS-IS,在ASBR 1与ASBR 2之间配置EBGP对等体

·     在PE 1与ASBR 1的LoopBack0接口之间建立BGP对等体

·     在ASBR 2与PE 2的LoopBack0接口之间建立BGP对等体

·     在PE 1与PE 2的LoopBack0接口之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、ASBR 1、ASBR 2、PE 2上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置End.RGB SID

IP组播路由功能

在PE 1和PE 2的VPN实例a中均使能IP组播路由

IGMP功能

PE 2的Ten-GigabitEthernet3/1/2接口上使能IGMP

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     PE1的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-24 跨AS域BIER前缀保留ISIS-EBGP-ISIS(MSR6封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S1

-

7.12.1.10/24

ASBR2

XGE3/1/1

113.1.1.4/24

113::4/64

R1

-

7.13.1.10/24

 

XGE3/1/2

14.1.1.4/24

14.1.1.4/64

PE1

XGE3/1/2

7.12.1.12/24

100:2:2::2/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/1

11.1.1.1/24

11::1/64

P2

XGE3/1/1

15.1.1.5/24

15::5/64

Loop0

1.1.1.1/32

1::1/128

 

XGE3/1/2

14.1.1.5/24

14::5/64

 

Loop1

11.11.11.11/32

11::11/128

 

Loop0

5.5.5.5/32

5::5/128

P1

XGE3/1/1

11.1.1.2/24

11::2/64

PE2

XGE3/1/1

15.1.1.6/24

15::6/64

XGE3/1/2

12.1.1.2/24

12::2/64

 

XGE3/1/2

7.13.1.12/24

100:3:3::2/64

Loop0

2.2.2.2/32

2::2/128

 

Loop0

6.6.6.6/32

6::6/128

ASBR1

XGE3/1/1

113.1.1.3/24

113::3/64

 

XGE3/1/2

12.1.1.3/24

12::3/64

 

 

Loop0

3.3.3.3/32

3::3/128

 

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:2::1。

[PE1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv4

[PE1-mvpn-a-ipv4] source loopback 0

[PE1-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] auto-discovery inter-as

[PE1-mvpn-a-ipv4] src-dt4 locator aaa sid 1:2::2

[PE1-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1-mvpn-a] address-family ipv6

[PE1-mvpn-a-ipv6] source loopback 0

[PE1-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] auto-discovery inter-as

[PE1-mvpn-a-ipv6] src-dt6 locator aaa sid 1:2::3

[PE1-mvpn-a-ipv6] quit

[PE1-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface Ten-GigabitEthernet3/1/2

[PE1-Ten-GigabitEthernet3/1/2] port link-mode route

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 7.12.1.12 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address 100:2:2::2 64

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface Ten-GigabitEthernet3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.1 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 11::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 11.11.11.11 255.255.255.255

[PE1-LoopBack1] ipv6 address 11::11 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.11.11.11

[PE1-pim-a] c-rp 11.11.11.11

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 11::11

[PE1-pim6-a] c-rp 11::11

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 3::3 as-number 100

[PE1-bgp-default] peer 3::3 connect-interface loopback 0

[PE1-bgp-default] peer 6::6 as-number 200

[PE1-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE1-bgp-default] peer 6::6 ebgp-max-hop 10

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 6::6 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 6::6 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 6::6 enable

[PE1-bgp-default-vpnv4] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1-bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] import-route direct

[PE1-bgp-default-ipv6] peer 3::3 enable

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 6::6 enable

[PE1-bgp-default-vpnv6] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv6] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(2)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0002.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 11::2 64

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 12::2 64

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 2.2.2.2 255.255.255.255

[P1-LoopBack0] ipv6 address 2::2 128

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

(3)     配置ASBR 1

# 配置全局Router ID。

<ASBR1> system-view

[ASBR1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[ASBR1] isis 1

[ASBR1-isis-1] is-level level-2

[ASBR1-isis-1] cost-style wide

[ASBR1-isis-1] network-entity 10.0000.0000.0003.00

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR1] interface loopback 0

[ASBR1-LoopBack0] ip address 3.3.3.3 32

[ASBR1-LoopBack0] ipv6 address 3::3 128

[ASBR1-LoopBack0] isis ipv6 enable 1

[ASBR1-LoopBack0] quit

# 配置SRv6。

[ASBR1] segment-routing ipv6

[ASBR1-segment-routing-ipv6] encapsulation source-address 33::33

[ASBR1-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[ASBR1-segment-routing-ipv6] quit

# 配置ASBR1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[ASBR1] bier

[ASBR1-bier] sub-domain 0 ipv6

[ASBR1-bier-sub-domain-0-ipv6] bfr-id 3

[ASBR1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[ASBR1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为3:2::1。

[ASBR1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 3:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR1] interface ten-gigabitethernet 3/1/1

[ASBR1-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/1] ip address 113.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/1] ipv6 address 113::3 64

[ASBR1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR1] interface ten-gigabitethernet 3/1/2

[ASBR1-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/2] ipv6 address 12::3 64

[ASBR1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR1] bgp 100

[ASBR1-bgp-default] router-id 3.3.3.3

[ASBR1-bgp-default] peer 1::1 as-number 100

[ASBR1-bgp-default] peer 1::1 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 113::4 as-number 200

[ASBR1-bgp-default] peer 113::4 ebgp-max-hop 10

[ASBR1-bgp-default] address-family ipv6 unicast

[ASBR1-bgp-default-ipv6] bier enable

[ASBR1-bgp-default-ipv6] import-bier isisv6 1

[ASBR1-bgp-default-ipv6] peer 1::1 enable

[ASBR1-bgp-default-ipv6] peer 1::1 next-hop-local

[ASBR1-bgp-default-ipv6] peer 113::4 enable

[ASBR1-bgp-default-ipv6] peer 113::4 capability bier

[ASBR1-bgp-default-ipv6] quit

[ASBR1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[ASBR1] isis 1

[ASBR1-isis-1] bier enable

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR1-isis-1-ipv6] import-bier bgp4+

# 配置IS-IS发布域外代理路由。

[ASBR1-isis-1-ipv6] import-route bgp4+

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

(4)     配置ASBR 2

# 配置全局Router ID。

<ASBR2> system-view

[ASBR2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[ASBR2] isis 1

[ASBR2-isis-1] is-level level-2

[ASBR2-isis-1] cost-style wide

[ASBR2-isis-1] network-entity 10.0000.0000.0004.00

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR2] interface loopback 0

[ASBR2-LoopBack0] ip address 4.4.4.4 32

[ASBR2-LoopBack0] ipv6 address 4::4 128

[ASBR2-LoopBack0] isis ipv6 enable 1

[ASBR2-LoopBack0] quit

# 配置SRv6。

[ASBR2] segment-routing ipv6

[ASBR2-segment-routing-ipv6] encapsulation source-address 44::44

[ASBR2-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[ASBR2-segment-routing-ipv6] quit

# 配置ASBR2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[ASBR2] bier

[ASBR2-bier] sub-domain 0 ipv6

[ASBR2-bier-sub-domain-0-ipv6] bfr-id 4

[ASBR2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[ASBR2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为4:2::1。

[ASBR2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 4:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR2] interface ten-gigabitethernet 3/1/1

[ASBR2-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/1] ip address 113.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/1] ipv6 address 113::4 64

[ASBR2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR2] interface ten-gigabitethernet 3/1/2

[ASBR2-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/2] ipv6 address 14::4 64

[ASBR2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR2] bgp 200

[ASBR2-bgp-default] router-id 4.4.4.4

[ASBR2-bgp-default] peer 6::6 as-number 200

[ASBR2-bgp-default] peer 6::6 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 113::3 as-number 100

[ASBR2-bgp-default] peer 113::3 ebgp-max-hop 10

[ASBR2-bgp-default] address-family ipv6 unicast

[ASBR2-bgp-default-ipv6] bier enable

[ASBR2-bgp-default-ipv6] import-bier isisv6 1

[ASBR2-bgp-default-ipv6] peer 6::6 enable

[ASBR2-bgp-default-ipv6] peer 6::6 next-hop-local

[ASBR2-bgp-default-ipv6] peer 113::3 enable

[ASBR2-bgp-default-ipv6] peer 113::3 capability bier

[ASBR2-bgp-default-ipv6] quit

[ASBR2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[ASBR2] isis 1

[ASBR2-isis-1] bier enable

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR2-isis-1-ipv6] import-bier bgp4+

# 配置IS-IS发布域外代理路由。

[ASBR2-isis-1-ipv6] import-route bgp4+

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

(5)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 5.5.5.5

# 配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0005.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 15::5 64

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 14::5 64

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 5.5.5.5 255.255.255.255

[P2-LoopBack0] ipv6 address 5::5 128

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

(6)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0006.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 6.6.6.6 32

[PE2-LoopBack0] ipv6 address 6::6 128

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 66::66

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 6

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为6:2::1。

[PE2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 6:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:6

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-a] address-family ipv4

[PE2-mvpn-a-ipv4] source loopback 0

[PE2-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] auto-discovery inter-as

[PE2-mvpn-a-ipv4] src-dt4 locator aaa sid 6:2::2

[PE2-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2-mvpn-a] address-family ipv6

[PE2-mvpn-a-ipv6] source loopback 0

[PE2-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] auto-discovery inter-as

[PE2-mvpn-a-ipv6] src-dt6 locator aaa sid 6:2::3

[PE2-mvpn-a-ipv6] quit

[PE2-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM/IGMP/MLD。

[PE2] interface Ten-GigabitEthernet3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 100:3:3::2 64

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/2] igmp enable

[PE2-Ten-GigabitEthernet3/1/2] mld enable

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface Ten-GigabitEthernet3/1/1

[PE2-Ten-GigabitEthernet3/1/1] port link-mode route

[PE2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.6 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 15::6 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE2] bgp 200

[PE2-bgp-default] router-id 6.6.6.6

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 1::1 ebgp-max-hop 10

[PE2-bgp-default] peer 4::4 as-number 200

[PE2-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] import-route direct

[PE2-bgp-default-ipv6] peer 4::4 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default-ipv6] quit

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

4. 验证配置

# 查看BGP路由表下携带正确的BIER BFR-ID-Range信息。

[ASBR1] display bgp routing-table ipv6 4::4 128

 

 BGP local router ID: 3.3.3.3

 Local AS number: 100

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 4::4/128:

 From            : 113::4 (4.4.4.4)

 Rely nexthop    : 113::4

 Original nexthop: 113::4

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h00m08s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 4, MSR6 encap><BSL info: [128,32]><

                   END.RGB SID 4:2::1><BFR-ID [start,range], range count 1, [6,

                    1]>

 AS-path         : 200

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

[ASBR2] display bgp routing-table ipv6 3::3 128

 

 BGP local router ID: 4.4.4.4

 Local AS number: 200

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 3::3/128:

 From            : 113::3 (3.3.3.3)

 Rely nexthop    : 113::3

 Original nexthop: 113::3

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h01m47s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 3, MSR6 encap><BSL info: [128,32]><

                   END.RGB SID 3:2::1><BFR-ID [start,range], range count 1, [1,

                    1]>

 AS-path         : 100

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

# 查看PE 1的域内BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 3

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

# 查看PE 1的域外BIRT表项。

[PE1] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 6

      BFR prefix: 4::4

        AS: --

        Protocol: IS-IS

        Preference: --

# 查看PE 2的域内BIRT表项。

[PE2] display bier routing-table

  Sub-domain 0

  Total BFERs: 3

    BFR ID: 6

    BFR prefix: 6::6(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

# 查看PE 2的域外BIRT表项。

[PE2] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 1

      BFR prefix: 3::3

        AS: --

        Protocol: IS-IS

        Preference: --

1.20.13  跨AS域BIER前缀保留IBGP(Proxy)-EBGP-ISIS组网配置举例(MSR6封装类型)

1. 组网需求

组网需求如表1-15所示。

表1-15 跨AS域BIER前缀保留IBGP(Proxy)-EBGP-ISIS(MSR6封装类型)组网需求

项目

组网需求

功能描述

·     对于MSR6封装类型,ASBR设备对域外的BIER前缀信息进行保留,域内进行域外信息发布的时候,使用原有前缀信息发布

·     AS 100内通过BGP报文携带BIER信息,AS 200通过IS-IS报文携带BIER信息

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网AS 100中配置IBGP,在AS 200中配置IS-IS,在ASBR 1与ASBR 2之间配置EBGP对等体

·     在PE 1与P 1、P 1与ASBR 1和PE 1与ASBR 1的LoopBack0接口之间建立BGP对等体

·     在ASBR 2 与PE 2的LoopBack0接口之间建立BGP对等体

·     在PE 1与PE 2的LoopBack0接口之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、ASBR 1、ASBR 2、PE 2上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置End.RGB SID

IP组播路由功能

在PE 1和PE 2的VPN实例a中均使能IP组播路由

IGMP功能

PE 2的Ten-GigabitEthernet3/1/2接口上使能IGMP

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     PE1的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-25 跨AS域BIER前缀保留IBGP(Proxy)-EBGP-ISIS(MSR6封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S1

-

7.12.1.10/24

ASBR2

XGE3/1/1

113.1.1.4/24

113::4/64

R1

-

7.13.1.10/24

 

XGE3/1/2

14.1.1.4/24

14.1.1.4/64

PE1

XGE3/1/2

7.12.1.12/24

100:2:2::2/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/1

11.1.1.1/24

11::1/64

P2

XGE3/1/1

15.1.1.5/24

15::5/64

Loop0

1.1.1.1/32

1::1/128

 

XGE3/1/2

14.1.1.5/24

14::5/64

 

Loop1

11.11.11.11/32

11::11/128

 

Loop0

5.5.5.5/32

5::5/128

P1

XGE3/1/1

11.1.1.2/24

11::2/64

PE2

XGE3/1/1

15.1.1.6/24

15::6/64

XGE3/1/2

12.1.1.2/24

12::2/64

 

XGE3/1/2

7.13.1.12/24

100:3:3::2/64

Loop0

2.2.2.2/32

2::2/128

 

Loop0

6.6.6.6/32

6::6/128

ASBR1

XGE3/1/1

113.1.1.3/24

113::3/64

 

XGE3/1/2

12.1.1.3/24

12::3/64

 

 

Loop0

3.3.3.3/32

3::3/128

 

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:2::1。

[PE1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv4

[PE1-mvpn-a-ipv4] source loopback 0

[PE1-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] auto-discovery inter-as

[PE1-mvpn-a-ipv4] src-dt4 locator aaa sid 1:2::2

[PE1-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv6

[PE1-mvpn-a-ipv6] source loopback 0

[PE1-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] auto-discovery inter-as

[PE1-mvpn-a-ipv6] src-dt6 locator aaa sid 1:2::3

[PE1-mvpn-a-ipv6] quit

[PE1-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface Ten-GigabitEthernet3/1/2

[PE1-Ten-GigabitEthernet3/1/2] port link-mode route

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 7.12.1.12 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address 100:2:2::2 64

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface Ten-GigabitEthernet3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.1 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 11::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 11.11.11.11 255.255.255.255

[PE1-LoopBack1] ipv6 address 11::11 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.11.11.11

[PE1-pim-a] c-rp 11.11.11.11

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 11::11

[PE1-pim6-a] c-rp 11::11

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 2::2 as-number 100

[PE1-bgp-default] peer 2::2 connect-interface loopback 0

[PE1-bgp-default] peer 3::3 as-number 100

[PE1-bgp-default] peer 3::3 connect-interface loopback 0

[PE1-bgp-default] peer 6::6 as-number 200

[PE1-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE1-bgp-default] peer 6::6 ebgp-max-hop 10

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 6::6 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 6::6 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 6::6 enable

[PE1-bgp-default-vpnv4] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1-bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] bier enable

[PE1-bgp-default-ipv6] peer 2::2 enable

[PE1-bgp-default-ipv6] peer 3::3 enable

[PE1-bgp-default-ipv6] peer 3::3 capability bier

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 6::6 enable

[PE1-bgp-default-vpnv6] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv6] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS通告locator aaa。

[PE1] isis 1

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(2)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0002.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 11::2 64

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 12::2 64

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 2.2.2.2 255.255.255.255

[P1-LoopBack0] ipv6 address 2::2 128

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

# 配置BGP协议。

[P1] bgp 100

[P1-bgp-default] router-id 2.2.2.2

[P1-bgp-default] peer 1::1 as-number 100

[P1-bgp-default] peer 1::1 connect-interface LoopBack 0

[P1-bgp-default] peer 3::3 as-number 100

[P1-bgp-default] peer 3::3 connect-interface LoopBack 0

[P1-bgp-default] address-family ipv6

[P1-bgp-default-ipv6] peer 1::1 enable

[P1-bgp-default-ipv6] peer 3::3 enable

[P1-bgp-default-ipv6] quit

[P1–bgp-default] quit

(3)     配置ASBR 1

# 配置全局Router ID。

<ASBR1> system-view

[ASBR1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[ASBR1] isis 1

[ASBR1-isis-1] is-level level-2

[ASBR1-isis-1] cost-style wide

[ASBR1-isis-1] network-entity 10.0000.0000.0003.00

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR1] interface loopback 0

[ASBR1-LoopBack0] ip address 3.3.3.3 32

[ASBR1-LoopBack0] ipv6 address 3::3 128

[ASBR1-LoopBack0] isis ipv6 enable 1

[ASBR1-LoopBack0] quit

# 配置SRv6。

[ASBR1] segment-routing ipv6

[ASBR1-segment-routing-ipv6] encapsulation source-address 33::33

[ASBR1-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[ASBR1-segment-routing-ipv6] quit

# 配置ASBR1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[ASBR1] bier

[ASBR1-bier] sub-domain 0 ipv6

[ASBR1-bier-sub-domain-0-ipv6] bfr-id 3

[ASBR1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[ASBR1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为3:2::1。

[ASBR1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 3:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR1] interface ten-gigabitethernet 3/1/1

[ASBR1-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/1] ip address 113.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/1] ipv6 address 113::3 64

[ASBR1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR1] interface ten-gigabitethernet 3/1/2

[ASBR1-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/2] ipv6 address 12::3 64

[ASBR1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR1] bgp 100

[ASBR1-bgp-default] router-id 3.3.3.3

[ASBR1-bgp-default] peer 1::1 as-number 100

[ASBR1-bgp-default] peer 1::1 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 2::2 as-number 100

[ASBR1-bgp-default] peer 2::2 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 113::4 as-number 200

[ASBR1-bgp-default] peer 113::4 ebgp-max-hop 10

[ASBR1-bgp-default] address-family ipv6 unicast

[ASBR1-bgp-default-ipv6] bier enable

[ASBR1-bgp-default-ipv6] peer 1::1 enable

[ASBR1-bgp-default-ipv6] peer 1::1 next-hop-local

[ASBR1-bgp-default-ipv6] peer 1::1 capability bier

[ASBR1-bgp-default-ipv6] peer 2::2 enable

[ASBR1-bgp-default-ipv6] peer 2::2 next-hop-local

[ASBR1-bgp-default-ipv6] peer 113::4 enable

[ASBR1-bgp-default-ipv6] peer 113::4 capability bier

# 配置开启BIER前缀代理功能。

[ASBR1-bgp-default-ipv6] bier bfr-prefix proxy

[ASBR1-bgp-default-ipv6] quit

[ASBR1–bgp-default] quit

# 配置IS-IS通告locator aaa。

[ASBR1] isis 1

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

(4)     配置ASBR 2

# 配置全局Router ID。

<ASBR2> system-view

[ASBR2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[ASBR2] isis 1

[ASBR2-isis-1] is-level level-2

[ASBR2-isis-1] cost-style wide

[ASBR2-isis-1] network-entity 10.0000.0000.0004.00

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR2] interface loopback 0

[ASBR2-LoopBack0] ip address 4.4.4.4 32

[ASBR2-LoopBack0] ipv6 address 4::4 128

[ASBR2-LoopBack0] isis ipv6 enable 1

[ASBR2-LoopBack0] quit

# 配置SRv6。

[ASBR2] segment-routing ipv6

[ASBR2-segment-routing-ipv6] encapsulation source-address 44::44

[ASBR2-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[ASBR2-segment-routing-ipv6] quit

# 配置ASBR2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[ASBR2] bier

[ASBR2-bier] sub-domain 0 ipv6

[ASBR2-bier-sub-domain-0-ipv6] bfr-id 4

[ASBR2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[ASBR2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为4:2::1。

[ASBR2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 4:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR2] interface ten-gigabitethernet 3/1/1

[ASBR2-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/1] ip address 113.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/1] ipv6 address 113::4 64

[ASBR2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR2] interface ten-gigabitethernet 3/1/2

[ASBR2-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/2] ipv6 address 14::4 64

[ASBR2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR2] bgp 200

[ASBR2-bgp-default] router-id 4.4.4.4

[ASBR2-bgp-default] peer 6::6 as-number 200

[ASBR2-bgp-default] peer 6::6 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 113::3 as-number 100

[ASBR2-bgp-default] peer 113::3 ebgp-max-hop 10

[ASBR2-bgp-default] address-family ipv6 unicast

[ASBR2-bgp-default-ipv6] bier enable

[ASBR2-bgp-default-ipv6] import-bier isisv6 1

[ASBR2-bgp-default-ipv6] peer 6::6 enable

[ASBR2-bgp-default-ipv6] peer 6::6 next-hop-local

[ASBR2-bgp-default-ipv6] peer 113::3 enable

[ASBR2-bgp-default-ipv6] peer 113::3 capability bier

[ASBR2-bgp-default-ipv6] quit

[ASBR2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[ASBR2] isis 1

[ASBR2-isis-1] bier enable

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR2-isis-1-ipv6] import-bier bgp4+

# 配置IS-IS发布域外代理路由。

[ASBR2-isis-1-ipv6] import-route bgp4+

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

(5)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 5.5.5.5

# 配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0005.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 15::5 64

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 14::5 64

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 5.5.5.5 255.255.255.255

[P2-LoopBack0] ipv6 address 5::5 128

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

(6)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0006.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 6.6.6.6 32

[PE2-LoopBack0] ipv6 address 6::6 128

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 66::66

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 6

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为6:2::1。

[PE2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 6:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:6

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-a] address-family ipv4

[PE2-mvpn-a-ipv4] source loopback 0

[PE2-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] auto-discovery inter-as

[PE2-mvpn-a-ipv4] src-dt4 locator aaa sid 6:2::2

[PE2-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2-mvpn-a] address-family ipv6

[PE2-mvpn-a-ipv6] source loopback 0

[PE2-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] auto-discovery inter-as

[PE2-mvpn-a-ipv6] src-dt6 locator aaa sid 6:2::3

[PE2-mvpn-a-ipv6] quit

[PE2-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM/IGMP/MLD。

[PE2] interface Ten-GigabitEthernet3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 100:3:3::2 64

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/2] igmp enable

[PE2-Ten-GigabitEthernet3/1/2] mld enable

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface Ten-GigabitEthernet3/1/1

[PE2-Ten-GigabitEthernet3/1/1] port link-mode route

[PE2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.6 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 15::6 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE2] bgp 200

[PE2-bgp-default] router-id 6.6.6.6

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 1::1 ebgp-max-hop 10

[PE2-bgp-default] peer 4::4 as-number 200

[PE2-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] import-route direct

[PE2-bgp-default-ipv6] peer 4::4 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default-ipv6] quit

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

4. 验证配置

# 查看BGP路由表下携带正确的BIER BFR-ID-Range信息。

[ASBR1] display bgp routing-table ipv6 4::4 128

 

 BGP local router ID: 3.3.3.3

 Local AS number: 100

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 4::4/128:

 From            : 113::4 (4.4.4.4)

 Rely nexthop    : 113::4

 Original nexthop: 113::4

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h08m09s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 4, MSR6 encap><BSL info: [128,32]><

                   END.RGB SID 3:2::1><BFR-ID [start,range], range count 1, [6,

                    1]>

 AS-path         : 200

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

[ASBR2] display bgp routing-table ipv6 3::3 128

 

 BGP local router ID: 4.4.4.4

 Local AS number: 200

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 3::3/128:

 From            : 113::3 (3.3.3.3)

 Rely nexthop    : 113::3

 Original nexthop: 113::3

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h01m37s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 3, MSR6 encap><BSL info: [128,32]><

                   END.RGB SID 3:2::1><BFR-ID [start,range], range count 1, [1,

                    1]>

 AS-path         : 100

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

# 查看PE 1的域内BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

# 查看PE 1的域外BIRT表项。

[PE1] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 4

      BFR prefix: 4::4

        AS: 200

        Protocol: IBGP

        Preference: --

 

    BFR ID: 6

      BFR prefix: 4::4

        AS: 200

        Protocol: IBGP

        Preference: --

# 查看PE 2的域内BIRT表项。

[PE2] display bier routing-table

  Sub-domain 0

  Total BFERs: 3

    BFR ID: 6

    BFR prefix: 6::6(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

# 查看PE 2的域外BIRT表项。

[PE2] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 1

      BFR prefix: 3::3

        AS: --

        Protocol: IS-IS

        Preference: --

1.20.14  跨AS域BIER前缀保留IBGP(Proxy)-EBGP- IBGP(Proxy)组网配置举例(MSR6封装类型)

1. 组网需求

组网需求如表1-16所示。

表1-16 跨AS域BIER前缀保留IBGP(Proxy)-EBGP- IBGP(Proxy)(MSR6封装类型)组网需求

项目

组网需求

功能描述

·     对于MSR6封装类型,ASBR设备对域外的BIER前缀信息进行保留,域内进行域外信息发布的时候,使用原有前缀信息发布

·     AS 100内通过BGP报文携带BIER信息,AS 200通过BGP报文携带BIER信息

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网AS 100和 AS 200中均配置IBGP,在ASBR 1与ASBR 2之间配置EBGP对等体

·     在PE 1与P 1、P 1与ASBR 1和PE 1与ASBR 1的LoopBack0接口之间建立BGP对等体

·     在PE 2与P 2、P 2与ASBR 2和PE 2与ASBR 2的LoopBack0接口之间建立BGP对等体

·     在PE 1 与PE 2的LoopBack0接口之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、ASBR 1、ASBR 2、PE 2上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置End.RGB SID

IP组播路由功能

在PE 1和PE 2的VPN实例a中均使能IP组播路由

IGMP功能

PE 2的Ten-GigabitEthernet3/1/2接口上使能IGMP

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     PE1的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-26 跨AS域BIER前缀保留IBGP(Proxy)-EBGP- IBGP(Proxy)(MSR6封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S1

-

7.12.1.10/24

ASBR2

XGE3/1/1

113.1.1.4/24

113::4/64

R1

-

7.13.1.10/24

 

XGE3/1/2

14.1.1.4/24

14.1.1.4/64

PE1

XGE3/1/2

7.12.1.12/24

100:2:2::2/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/1

11.1.1.1/24

11::1/64

P2

XGE3/1/1

15.1.1.5/24

15::5/64

Loop0

1.1.1.1/32

1::1/128

 

XGE3/1/2

14.1.1.5/24

14::5/64

 

Loop1

11.11.11.11/32

11::11/128

 

Loop0

5.5.5.5/32

5::5/128

P1

XGE3/1/1

11.1.1.2/24

11::2/64

PE2

XGE3/1/1

15.1.1.6/24

15::6/64

XGE3/1/2

12.1.1.2/24

12::2/64

 

XGE3/1/2

7.13.1.12/24

100:3:3::2/64

Loop0

2.2.2.2/32

2::2/128

 

Loop0

6.6.6.6/32

6::6/128

ASBR1

XGE3/1/1

113.1.1.3/24

113::3/64

 

XGE3/1/2

12.1.1.3/24

12::3/64

 

 

Loop0

3.3.3.3/32

3::3/128

 

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:2::1。

[PE1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv4

[PE1-mvpn-a-ipv4] source loopback 0

[PE1-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] auto-discovery inter-as

[PE1-mvpn-a-ipv4] src-dt4 locator aaa sid 1:2::2

[PE1-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1-mvpn-a] address-family ipv6

[PE1-mvpn-a-ipv6] source loopback 0

[PE1-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] auto-discovery inter-as

[PE1-mvpn-a-ipv6] src-dt6 locator aaa sid 1:2::3

[PE1-mvpn-a-ipv6] quit

[PE1-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM/IGMP/MLD。

[PE1] interface Ten-GigabitEthernet3/1/2

[PE1-Ten-GigabitEthernet3/1/2] port link-mode route

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 7.12.1.12 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address 100:2:2::2 64

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/2] igmp enable

[PE1-Ten-GigabitEthernet3/1/2] mld enable

[PE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface Ten-GigabitEthernet3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.1 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 11::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 11.11.11.11 255.255.255.255

[PE1-LoopBack1] ipv6 address 11::11 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.11.11.11

[PE1-pim-a] c-rp 11.11.11.11

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 11::11

[PE1-pim6-a] c-rp 11::11

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 2::2 as-number 100

[PE1-bgp-default] peer 2::2 connect-interface loopback 0

[PE1-bgp-default] peer 3::3 as-number 100

[PE1-bgp-default] peer 3::3 connect-interface loopback 0

[PE1-bgp-default] peer 6::6 as-number 200

[PE1-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE1-bgp-default] peer 6::6 ebgp-max-hop 10

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 6::6 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 6::6 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 6::6 enable

[PE1-bgp-default-vpnv4] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1-bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] bier enable

[PE1-bgp-default-ipv6] peer 2::2 enable

[PE1-bgp-default-ipv6] peer 3::3 enable

[PE1-bgp-default-ipv6] peer 3::3 capability bier

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 6::6 enable

[PE1-bgp-default-vpnv6] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv6] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS通告locator aaa。

[PE1] isis 1

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(2)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0002.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 11::2 64

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 12::2 64

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 2.2.2.2 255.255.255.255

[P1-LoopBack0] ipv6 address 2::2 128

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

# 配置BGP协议。

[P1] bgp 100

[P1-bgp-default] router-id 2.2.2.2

[P1-bgp-default] peer 1::1 as-number 100

[P1-bgp-default] peer 1::1 connect-interface LoopBack 0

[P1-bgp-default] peer 3::3 as-number 100

[P1-bgp-default] peer 3::3 connect-interface LoopBack 0

[P1-bgp-default] address-family ipv6

[P1-bgp-default-ipv6] peer 1::1 enable

[P1-bgp-default-ipv6] peer 3::3 enable

[P1-bgp-default-ipv6] quit

[P1–bgp-default] quit

(3)     配置ASBR 1

# 配置全局Router ID。

<ASBR1> system-view

[ASBR1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[ASBR1] isis 1

[ASBR1-isis-1] is-level level-2

[ASBR1-isis-1] cost-style wide

[ASBR1-isis-1] network-entity 10.0000.0000.0003.00

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR1] interface loopback 0

[ASBR1-LoopBack0] ip address 3.3.3.3 32

[ASBR1-LoopBack0] ipv6 address 3::3 128

[ASBR1-LoopBack0] isis ipv6 enable 1

[ASBR1-LoopBack0] quit

# 配置SRv6。

[ASBR1] segment-routing ipv6

[ASBR1-segment-routing-ipv6] encapsulation source-address 33::33

[ASBR1-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[ASBR1-segment-routing-ipv6] quit

# 配置ASBR1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[ASBR1] bier

[ASBR1-bier] sub-domain 0 ipv6

[ASBR1-bier-sub-domain-0-ipv6] bfr-id 3

[ASBR1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[ASBR1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为3:2::1。

[ASBR1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 3:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR1] interface ten-gigabitethernet 3/1/1

[ASBR1-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/1] ip address 113.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/1] ipv6 address 113::3 64

[ASBR1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR1] interface ten-gigabitethernet 3/1/2

[ASBR1-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/2] ipv6 address 12::3 64

[ASBR1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR1] bgp 100

[ASBR1-bgp-default] router-id 3.3.3.3

[ASBR1-bgp-default] peer 1::1 as-number 100

[ASBR1-bgp-default] peer 1::1 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 2::2 as-number 100

[ASBR1-bgp-default] peer 2::2 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 113::4 as-number 200

[ASBR1-bgp-default] peer 113::4 ebgp-max-hop 10

[ASBR1-bgp-default] address-family ipv6 unicast

[ASBR1-bgp-default-ipv6] bier enable

[ASBR1-bgp-default-ipv6] peer 1::1 enable

[ASBR1-bgp-default-ipv6] peer 1::1 next-hop-local

[ASBR1-bgp-default-ipv6] peer 1::1 capability bier

[ASBR1-bgp-default-ipv6] peer 2::2 enable

[ASBR1-bgp-default-ipv6] peer 2::2 next-hop-local

[ASBR1-bgp-default-ipv6] peer 113::4 enable

[ASBR1-bgp-default-ipv6] peer 113::4 capability bier

# 配置开启BIER前缀代理功能。

[ASBR1-bgp-default-ipv6] bier bfr-prefix proxy

[ASBR1-bgp-default-ipv6] quit

[ASBR1–bgp-default] quit

# 配置IS-IS通告locator aaa。

[ASBR1] isis 1

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

(4)     配置ASBR 2

# 配置全局Router ID。

<ASBR2> system-view

[ASBR2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[ASBR2] isis 1

[ASBR2-isis-1] is-level level-2

[ASBR2-isis-1] cost-style wide

[ASBR2-isis-1] network-entity 10.0000.0000.0004.00

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR2] interface loopback 0

[ASBR2-LoopBack0] ip address 4.4.4.4 32

[ASBR2-LoopBack0] ipv6 address 4::4 128

[ASBR2-LoopBack0] isis ipv6 enable 1

[ASBR2-LoopBack0] quit

# 配置SRv6。

[ASBR2] segment-routing ipv6

[ASBR2-segment-routing-ipv6] encapsulation source-address 44::44

[ASBR2-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[ASBR2-segment-routing-ipv6] quit

# 配置ASBR2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[ASBR2] bier

[ASBR2-bier] sub-domain 0 ipv6

[ASBR2-bier-sub-domain-0-ipv6] bfr-id 4

[ASBR2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[ASBR2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为4:2::1。

[ASBR2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 4:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR2] interface ten-gigabitethernet 3/1/1

[ASBR2-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/1] ip address 113.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/1] ipv6 address 113::4 64

[ASBR2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR2] interface ten-gigabitethernet 3/1/2

[ASBR2-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/2] ipv6 address 14::4 64

[ASBR2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR2] bgp 200

[ASBR2-bgp-default] router-id 4.4.4.4

[ASBR2-bgp-default] peer 5::5 as-number 200

[ASBR2-bgp-default] peer 5::5 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 6::6 as-number 200

[ASBR2-bgp-default] peer 6::6 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 113::3 as-number 100

[ASBR2-bgp-default] peer 113::3 ebgp-max-hop 10

[ASBR2-bgp-default] address-family ipv6 unicast

[ASBR2-bgp-default-ipv6] peer 5::5 enable

[ASBR2-bgp-default-ipv6] peer 5::5 next-hop-local

[ASBR2-bgp-default-ipv6] peer 6::6 enable

[ASBR2-bgp-default-ipv6] peer 6::6 next-hop-local

[ASBR2-bgp-default-ipv6] peer 6::6 capability bier

[ASBR2-bgp-default-ipv6] peer 113::3 enable

[ASBR2-bgp-default-ipv6] peer 113::3 capability bier

[ASBR2-bgp-default-ipv6] bier enable

# 配置开启BIER前缀代理功能。

[ASBR2-bgp-default-ipv6] bier bfr-prefix proxy

[ASBR2-bgp-default-ipv6] quit

[ASBR2–bgp-default] quit

# 配置IS-IS通告locator aaa。

[ASBR2] isis 1

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

(5)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 5.5.5.5

配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0005.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 15::5 64

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 14::5 64

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 5.5.5.5 255.255.255.255

[P2-LoopBack0] ipv6 address 5::5 128

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

# 配置BGP协议。

[P2] bgp 200

[P2-bgp-default] router-id 5.5.5.5

[P2-bgp-default] peer 4::4 as-number 200

[P2-bgp-default] peer 4::4 connect-interface LoopBack 0

[P2-bgp-default] peer 6::6 as-number 200

[P2-bgp-default] peer 6::6 connect-interface LoopBack 0

[P2-bgp-default] address-family ipv6

[P2-bgp-default-ipv6] peer 4::4 enable

[P2-bgp-default-ipv6] peer 6::6 enable

[P2-bgp-default-ipv6] quit

[P2–bgp-default] quit

(6)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0006.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 6.6.6.6 32

[PE2-LoopBack0] ipv6 address 6::6 128

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 66::66

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 6

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为6:2::1。

[PE2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 6:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:6

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-a] address-family ipv4

[PE2-mvpn-a-ipv4] source loopback 0

[PE2-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] auto-discovery inter-as

[PE2-mvpn-a-ipv4] src-dt4 locator aaa sid 6:2::2

[PE2-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2-mvpn-a] address-family ipv6

[PE2-mvpn-a-ipv6] source loopback 0

[PE2-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] auto-discovery inter-as

[PE2-mvpn-a-ipv6] src-dt6 locator aaa sid 6:2::3

[PE2-mvpn-a-ipv6] quit

[PE2-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM/IGMP/MLD。

[PE2] interface Ten-GigabitEthernet3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 100:3:3::2 64

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/2] igmp enable

[PE2-Ten-GigabitEthernet3/1/2] mld enable

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface Ten-GigabitEthernet3/1/1

[PE2-Ten-GigabitEthernet3/1/1] port link-mode route

[PE2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.6 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 15::6 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE2] bgp 200

[PE2-bgp-default] router-id 6.6.6.6

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 1::1 ebgp-max-hop 10

[PE2-bgp-default] peer 4::4 as-number 200

[PE2-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE2-bgp-default] peer 5::5 as-number 200

[PE2-bgp-default] peer 5::5 connect-interface LoopBack 0

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] bier enable

[PE2-bgp-default-ipv6] peer 4::4 enable

[PE2-bgp-default-ipv6] peer 4::4 capability bier

[PE2-bgp-default-ipv6] peer 5::5 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default-ipv6] quit

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS通告locator aaa。

[PE2] isis 1

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

4. 验证配置

# 查看BGP路由表下携带正确的BIER BFR-ID-Range信息。

[ASBR1] display bgp routing-table ipv6 4::4 128

 

 BGP local router ID: 3.3.3.3

 Local AS number: 100

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 4::4/128:

 From            : 113::4 (4.4.4.4)

 Rely nexthop    : 113::4

 Original nexthop: 113::4

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h00m40s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 4, MSR6 encap><BSL info: [128,32]><

                   END.RGB SID 3:2::1><BFR-ID [start,range], range count 1, [6,

                    1]>

 AS-path         : 200

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

[ASBR2] display bgp routing-table ipv6 3::3 128

 

 BGP local router ID: 4.4.4.4

 Local AS number: 200

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 3::3/128:

 From            : 113::3 (3.3.3.3)

 Rely nexthop    : 113::3

 Original nexthop: 113::3

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h12m39s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 3, MSR6 encap><BSL info: [128,32]><

                   END.RGB SID 4:2::1><BFR-ID [start,range], range count 1, [1,

                    1]>

 AS-path         : 100

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

# 查看PE 1的域内BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

# 查看PE 1的域外BIRT表项。

[PE1] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 4

      BFR prefix: 4::4

        AS: 200

        Protocol: IBGP

        Preference: --

 

    BFR ID: 6

      BFR prefix: 4::4

        AS: 200

        Protocol: IBGP

        Preference: --

# 查看PE 2的域内BIRT表项。

[PE2] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 6

    BFR prefix: 6::6(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

# 查看PE 2的域外BIRT表项。

[PE2] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 1

      BFR prefix: 3::3

        AS: 100

        Protocol: IBGP

        Preference: --

 

    BFR ID: 3

      BFR prefix: 3::3

        AS: 100

        Protocol: IBGP

        Preference: --

1.20.15  跨AS域BIER前缀保留IBGP ISIS混合-EBGP-ISIS组网配置举例(MSR6封装类型)

1. 组网需求

组网需求如表1-17所示。

表1-17 跨AS域BIER前缀保留IBGP ISIS混合-EBGP-ISIS(MSR6封装类型)组网需求

项目

组网需求

功能描述

·     对于MSR6封装类型,ASBR设备对域外的BIER前缀信息进行保留,域内进行域外信息发布的时候,使用原有前缀信息发布

·     AS 100内通过BGP或IS-IS报文携带BIER信息,AS 200通过IS-IS报文携带BIER信息

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网AS 100和AS 200中配置IS-IS,在ASBR 1与ASBR 2之间配置EBGP对等体

·     在PE 1与ASBR 1的LoopBack0接口之间建立BGP对等体

·     在ASBR 2 与PE 2的LoopBack0接口之间建立BGP对等体

·     在PE 1与PE 2的LoopBack0接口之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、ASBR 1、ASBR 2、PE 2上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置End.RGB SID

IP组播路由功能

在PE 1和PE 2的VPN实例a中均使能IP组播路由

IGMP功能

PE 2的Ten-GigabitEthernet3/1/2接口上使能IGMP

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     PE 1的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-27 跨AS域BIER前缀保留IBGP ISIS混合-EBGP-ISIS(MSR6封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S1

-

7.12.1.10/24

ASBR2

XGE3/1/1

113.1.1.4/24

113::4/64

R1

-

7.13.1.10/24

 

XGE3/1/2

14.1.1.4/24

14.1.1.4/64

PE1

XGE3/1/2

7.12.1.12/24

100:2:2::2/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/1

11.1.1.1/24

11::1/64

P2

XGE3/1/1

15.1.1.5/24

15::5/64

Loop0

1.1.1.1/32

1::1/128

 

XGE3/1/2

14.1.1.5/24

14::5/64

 

Loop1

11.11.11.11/32

11::11/128

 

Loop0

5.5.5.5/32

5::5/128

P1

XGE3/1/1

11.1.1.2/24

11::2/64

PE2

XGE3/1/1

15.1.1.6/24

15::6/64

XGE3/1/2

12.1.1.2/24

12::2/64

 

XGE3/1/2

7.13.1.12/24

100:3:3::2/64

Loop0

2.2.2.2/32

2::2/128

 

Loop0

6.6.6.6/32

6::6/128

ASBR1

XGE3/1/1

113.1.1.3/24

113::3/64

 

XGE3/1/2

12.1.1.3/24

12::3/64

 

 

Loop0

3.3.3.3/32

3::3/128

 

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为1:2::1。

[PE1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 1:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv4

[PE1-mvpn-a-ipv4] source loopback 0

[PE1-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] auto-discovery inter-as

[PE1-mvpn-a-ipv4] src-dt4 locator aaa sid 1:2::2

[PE1-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1-mvpn-a] address-family ipv6

[PE1-mvpn-a-ipv6] source loopback 0

[PE1-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] auto-discovery inter-as

[PE1-mvpn-a-ipv6] src-dt6 locator aaa sid 1:2::3

[PE1-mvpn-a-ipv6] quit

[PE1-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface Ten-GigabitEthernet3/1/2

[PE1-Ten-GigabitEthernet3/1/2] port link-mode route

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 7.12.1.12 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address 100:2:2::2 64

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface Ten-GigabitEthernet3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.1 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 11::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 11.11.11.11 255.255.255.255

[PE1-LoopBack1] ipv6 address 11::11 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.11.11.11

[PE1-pim-a] c-rp 11.11.11.11

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 11::11

[PE1-pim6-a] c-rp 11::11

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 3::3 as-number 100

[PE1-bgp-default] peer 3::3 connect-interface loopback 0

[PE1-bgp-default] peer 6::6 as-number 200

[PE1-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE1-bgp-default] peer 6::6 ebgp-max-hop 10

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 6::6 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 6::6 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 6::6 enable

[PE1-bgp-default-vpnv4] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1-bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] bier enable

[PE1-bgp-default-ipv6] peer 3::3 enable

[PE1-bgp-default-ipv6] peer 3::3 capability bier

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 6::6 enable

[PE1-bgp-default-vpnv6] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv6] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(2)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0002.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 2.2.2.2 255.255.255.255

[P1-LoopBack0] ipv6 address 2::2 128

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

# 配置SRv6。

[P1] segment-routing ipv6

[P1-segment-routing-ipv6] encapsulation source-address 22::22

[P1-segment-routing-ipv6] locator aaa ipv6-prefix 2:2:: 96 static 8

[P1-segment-routing-ipv6] quit

# 配置P1加入BIER子域0、BFR ID为2、BFR prefix为LoopBack口0的IPv6地址。

[P1] bier

[P1-bier] sub-domain 0 ipv6

[P1-bier-sub-domain-0-ipv6] bfr-id 2

[P1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[P1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为2:2::1。

[P1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 2:2::1

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 11::2 64

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 12::2 64

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[P1] isis 1

[P1-isis-1] bier enable

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1] segment-routing ipv6 locator aaa

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

(3)     配置ASBR 1

# 配置全局Router ID。

<ASBR1> system-view

[ASBR1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[ASBR1] isis 1

[ASBR1-isis-1] is-level level-2

[ASBR1-isis-1] cost-style wide

[ASBR1-isis-1] network-entity 10.0000.0000.0003.00

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR1] interface loopback 0

[ASBR1-LoopBack0] ip address 3.3.3.3 32

[ASBR1-LoopBack0] ipv6 address 3::3 128

[ASBR1-LoopBack0] isis ipv6 enable 1

[ASBR1-LoopBack0] quit

# 配置SRv6。

[ASBR1] segment-routing ipv6

[ASBR1-segment-routing-ipv6] encapsulation source-address 33::33

[ASBR1-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[ASBR1-segment-routing-ipv6] quit

# 配置ASBR1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[ASBR1] bier

[ASBR1-bier] sub-domain 0 ipv6

[ASBR1-bier-sub-domain-0-ipv6] bfr-id 3

[ASBR1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[ASBR1-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为3:2::1。

[ASBR1-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 3:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR1] interface ten-gigabitethernet 3/1/1

[ASBR1-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/1] ip address 113.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/1] ipv6 address 113::3 64

[ASBR1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR1] interface ten-gigabitethernet 3/1/2

[ASBR1-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/2] ipv6 address 12::3 64

[ASBR1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR1] bgp 100

[ASBR1-bgp-default] router-id 3.3.3.3

[ASBR1-bgp-default] peer 1::1 as-number 100

[ASBR1-bgp-default] peer 1::1 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 113::4 as-number 200

[ASBR1-bgp-default] peer 113::4 ebgp-max-hop 10

[ASBR1-bgp-default] address-family ipv6 unicast

[ASBR1-bgp-default-ipv6] bier enable

[ASBR1-bgp-default-ipv6] import-bier isisv6 1

[ASBR1-bgp-default-ipv6] peer 1::1 enable

[ASBR1-bgp-default-ipv6] peer 1::1 next-hop-local

[ASBR1-bgp-default-ipv6] peer 1::1 capability bier

[ASBR1-bgp-default-ipv6] peer 113::4 enable

[ASBR1-bgp-default-ipv6] peer 113::4 capability bier

[ASBR1-bgp-default-ipv6] quit

[ASBR1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[ASBR1] isis 1

[ASBR1-isis-1] bier enable

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR1-isis-1-ipv6] import-bier bgp4+

# 配置ISIS发布域外代理路由。

[ASBR1-isis-1-ipv6] import-route bgp4+

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

(4)     配置ASBR 2

# 配置全局Router ID。

<ASBR2> system-view

[ASBR2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[ASBR2] isis 1

[ASBR2-isis-1] is-level level-2

[ASBR2-isis-1] cost-style wide

[ASBR2-isis-1] network-entity 10.0000.0000.0004.00

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR2] interface loopback 0

[ASBR2-LoopBack0] ip address 4.4.4.4 32

[ASBR2-LoopBack0] ipv6 address 4::4 128

[ASBR2-LoopBack0] isis ipv6 enable 1

[ASBR2-LoopBack0] quit

# 配置SRv6。

[ASBR2] segment-routing ipv6

[ASBR2-segment-routing-ipv6] encapsulation source-address 44::44

[ASBR2-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[ASBR2-segment-routing-ipv6] quit

# 配置ASBR2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[ASBR2] bier

[ASBR2-bier] sub-domain 0 ipv6

[ASBR2-bier-sub-domain-0-ipv6] bfr-id 4

[ASBR2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[ASBR2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为4:2::1。

[ASBR2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 4:2::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR2] interface ten-gigabitethernet 3/1/1

[ASBR2-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/1] ip address 113.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/1] ipv6 address 113::4 64

[ASBR2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR2] interface ten-gigabitethernet 3/1/2

[ASBR2-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/2] ipv6 address 14::4 64

[ASBR2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR2] bgp 200

[ASBR2-bgp-default] router-id 4.4.4.4

[ASBR2-bgp-default] peer 6::6 as-number 200

[ASBR2-bgp-default] peer 6::6 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 113::3 as-number 100

[ASBR2-bgp-default] peer 113::3 ebgp-max-hop 10

[ASBR2-bgp-default] address-family ipv6 unicast

[ASBR2-bgp-default-ipv6] bier enable

[ASBR2-bgp-default-ipv6] import-bier isisv6 1

[ASBR2-bgp-default-ipv6] peer 6::6 enable

[ASBR2-bgp-default-ipv6] peer 6::6 next-hop-local

[ASBR2-bgp-default-ipv6] peer 113::3 enable

[ASBR2-bgp-default-ipv6] peer 113::3 capability bier

[ASBR2-bgp-default-ipv6] quit

[ASBR2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[ASBR2] isis 1

[ASBR2-isis-1] bier enable

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR2-isis-1-ipv6] import-bier bgp4+

# 配置ISIS发布域外代理路由。

[ASBR2-isis-1-ipv6] import-route bgp4+

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

(5)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 5.5.5.5

# 配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0005.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 15::5 64

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 14::5 64

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 5.5.5.5 255.255.255.255

[P2-LoopBack0] ipv6 address 5::5 128

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

(6)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0006.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 6.6.6.6 32

[PE2-LoopBack0] ipv6 address 6::6 128

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 66::66

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 6

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type msr6 bsl 128 max-si 32

# 配置End.RGB SID为6:2::1。

[PE2-bier-sub-domain-0-ipv6] end-rgb locator aaa sid 6:2::1

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:6

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-a] address-family ipv4

[PE2-mvpn-a-ipv4] source loopback 0

[PE2-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] auto-discovery inter-as

[PE2-mvpn-a-ipv4] src-dt4 locator aaa sid 6:2::2

[PE2-mvpn-a-ipv4] quit

[PE2-mvpn-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-a] address-family ipv6

[PE2-mvpn-a-ipv6] source loopback 0

[PE2-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] auto-discovery inter-as

[PE2-mvpn-a-ipv6] src-dt6 locator aaa sid 6:2::3

[PE2-mvpn-a-ipv6] quit

[PE2-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM/IGMP/MLD。

[PE2] interface Ten-GigabitEthernet3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 100:3:3::2 64

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/2] igmp enable

[PE2-Ten-GigabitEthernet3/1/2] mld enable

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface Ten-GigabitEthernet3/1/1

[PE2-Ten-GigabitEthernet3/1/1] port link-mode route

[PE2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.6 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 15::6 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE2] bgp 200

[PE2-bgp-default] router-id 6.6.6.6

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 1::1 ebgp-max-hop 10

[PE2-bgp-default] peer 4::4 as-number 200

[PE2-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] import-route direct

[PE2-bgp-default-ipv6] peer 4::4 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default-ipv6] quit

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

4. 验证配置

# 查看BGP路由表下携带正确的BIER BFR-ID-Range信息。

[ASBR1] display bgp routing-table ipv6 4::4 128

 

 BGP local router ID: 3.3.3.3

 Local AS number: 100

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 4::4/128:

 From            : 113::4 (4.4.4.4)

 Rely nexthop    : 113::4

 Original nexthop: 113::4

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h00m40s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 4, MSR6 encap><BSL info: [128,32]><

                   END.RGB SID 4:2::1><BFR-ID [start,range], range count 1, [6,

                    1]>

 AS-path         : 200

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

[ASBR2] display bgp routing-table ipv6 3::3 128

 

 BGP local router ID: 4.4.4.4

 Local AS number: 200

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 3::3/128:

 From            : 113::3 (3.3.3.3)

 Rely nexthop    : 113::3

 Original nexthop: 113::3

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h02m34s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 3, MSR6 encap><BSL info: [128,32]><

                   END.RGB SID 3:2::1><BFR-ID [start,range], range count 1, [1,

                    2]>

 AS-path         : 100

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

# 查看PE 1的域内BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 4

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 2

    BFR prefix: 2::2

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 2::2

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

# 查看PE 1的域外BIRT表项。

[PE1] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 6

      BFR prefix: 4::4

        AS: --

        Protocol: IS-IS

        Preference: --

# 查看PE 2的域内BIRT表项。

[PE2] display bier routing-table

  Sub-domain 0

  Total BFERs: 4

    BFR ID: 6

    BFR prefix: 6::6(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 1

    BFR prefix: 1::1

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

# 查看PE 2的域外BIRT表项。

[PE2] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 2

      BFR prefix: 3::3

        AS: --

        Protocol: IS-IS

        Preference: --

1.20.16  跨AS域BIER前缀不保留ISIS-EBGP-ISIS组网配置举例(G-BIER封装类型)

1. 组网需求

组网需求如表1-18所示。

表1-18 跨AS域BIER前缀不保留ISIS-EBGP-ISIS(G-BIER封装类型)组网需求

项目

组网需求

功能描述

·     对于G-BIER封装类型,ASBR设备对域外的BIER前缀信息进行替换,不保留原有前缀,域内进行域外信息发布的时候,使用ASBR的前缀信息发布

·     AS 100内通过IS-IS报文携带BIER信息,AS 200通过IS-IS报文携带BIER信息

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网AS 100和AS 200中配置IS-IS,在ASBR 1与ASBR 2之间配置EBGP对等体

·     在PE 1与ASBR 1的LoopBack0接口之间建立BGP对等体

·     在ASBR 2 与PE 2的LoopBack0接口之间建立BGP对等体

·     在PE 1与PE 2的LoopBack0接口之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、ASBR 1、ASBR 2、PE 2上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置组播策略预留地址

IP组播路由功能

在PE 1和PE 2的VPN实例a中均使能IP组播路由

IGMP功能

PE 2的Ten-GigabitEthernet3/1/2接口上使能IGMP

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     PE 1的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-28 跨AS域BIER前缀不保留ISIS-EBGP-ISIS(G-BIER封装类型)组网图

   

设备

接口

IP地址

设备

接口

IP地址

S1

-

7.12.1.10/24

ASBR2

XGE3/1/1

113.1.1.4/24

113::4/64

R1

-

7.13.1.10/24

 

XGE3/1/2

14.1.1.4/24

14.1.1.4/64

PE1

XGE3/1/2

7.12.1.12/24

100:2:2::2/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/1

11.1.1.1/24

11::1/64

P2

XGE3/1/1

15.1.1.5/24

15::5/64

Loop0

1.1.1.1/32

1::1/128

 

XGE3/1/2

14.1.1.5/24

14::5/64

 

Loop1

11.11.11.11/32

11::11/128

 

Loop0

5.5.5.5/32

5::5/128

P1

XGE3/1/1

11.1.1.2/24

11::2/64

PE2

XGE3/1/1

15.1.1.6/24

15::6/64

XGE3/1/2

12.1.1.2/24

12::2/64

 

XGE3/1/2

7.13.1.12/24

100:3:3::2/64

Loop0

2.2.2.2/32

2::2/128

 

Loop0

6.6.6.6/32

6::6/128

ASBR1

XGE3/1/1

113.1.1.3/24

113::3/64

 

XGE3/1/2

12.1.1.3/24

12::3/64

 

 

Loop0

3.3.3.3/32

3::3/128

 

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5001::1。

[PE1-bier-sub-domain-0-ipv6] g-bier mpra 5001::1

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:1:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv4

[PE1-mvpn-a-ipv4] source loopback 0

[PE1-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] auto-discovery inter-as

[PE1-mvpn-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 12

[PE1-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1-mvpn-a] address-family ipv6

[PE1-mvpn-a-ipv6] source loopback 0

[PE1-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] auto-discovery inter-as

[PE1-mvpn-a-ipv6] tunnel-source multicast-service-prefix ms1 service-id 14

[PE1-mvpn-a-ipv6] quit

[PE1-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface Ten-GigabitEthernet3/1/2

[PE1-Ten-GigabitEthernet3/1/2] port link-mode route

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 7.12.1.12 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address 100:2:2::2 64

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface Ten-GigabitEthernet3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.1 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 11::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 11.11.11.11 255.255.255.255

[PE1-LoopBack1] ipv6 address 11::11 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.11.11.11

[PE1-pim-a] c-rp 11.11.11.11

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 11::11

[PE1-pim6-a] c-rp 11::11

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 3::3 as-number 100

[PE1-bgp-default] peer 3::3 connect-interface loopback 0

[PE1-bgp-default] peer 6::6 as-number 200

[PE1-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE1-bgp-default] peer 6::6 ebgp-max-hop 10

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 6::6 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 6::6 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 6::6 enable

[PE1-bgp-default-vpnv4] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1-bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] import-route direct

[PE1-bgp-default-ipv6] peer 3::3 enable

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 6::6 enable

[PE1-bgp-default-vpnv6] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv6] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE1] isis 1

[PE1-isis-1] bier enable

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(2)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0002.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 11::2 64

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 12::2 64

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 2.2.2.2 255.255.255.255

[P1-LoopBack0] ipv6 address 2::2 128

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

(3)     配置ASBR 1

# 配置全局Router ID。

<ASBR1> system-view

[ASBR1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[ASBR1] isis 1

[ASBR1-isis-1] is-level level-2

[ASBR1-isis-1] cost-style wide

[ASBR1-isis-1] network-entity 10.0000.0000.0003.00

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR1] interface loopback 0

[ASBR1-LoopBack0] ip address 3.3.3.3 32

[ASBR1-LoopBack0] ipv6 address 3::3 128

[ASBR1-LoopBack0] isis ipv6 enable 1

[ASBR1-LoopBack0] quit

# 配置SRv6。

[ASBR1] segment-routing ipv6

[ASBR1-segment-routing-ipv6] encapsulation source-address 33::33

[ASBR1-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[ASBR1-segment-routing-ipv6] quit

# 配置ASBR1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[ASBR1] bier

[ASBR1-bier] sub-domain 0 ipv6

[ASBR1-bier-sub-domain-0-ipv6] bfr-id 3

[ASBR1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[ASBR1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5003::1。

[ASBR1-bier-sub-domain-0-ipv6] g-bier mpra 5003::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR1] interface ten-gigabitethernet 3/1/1

[ASBR1-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/1] ip address 113.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/1] ipv6 address 113::3 64

[ASBR1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR1] interface ten-gigabitethernet 3/1/2

[ASBR1-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/2] ipv6 address 12::3 64

[ASBR1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR1] bgp 100

[ASBR1-bgp-default] router-id 3.3.3.3

[ASBR1-bgp-default] peer 1::1 as-number 100

[ASBR1-bgp-default] peer 1::1 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 113::4 as-number 200

[ASBR1-bgp-default] peer 113::4 ebgp-max-hop 10

[ASBR1-bgp-default] address-family ipv6 unicast

[ASBR1-bgp-default-ipv6] bier enable

[ASBR1-bgp-default-ipv6] import-bier isisv6 1

[ASBR1-bgp-default-ipv6] peer 1::1 enable

[ASBR1-bgp-default-ipv6] peer 1::1 next-hop-local

[ASBR1-bgp-default-ipv6] peer 113::4 enable

[ASBR1-bgp-default-ipv6] peer 113::4 capability bier

[ASBR1-bgp-default-ipv6] quit

[ASBR1–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[ASBR1] isis 1

[ASBR1-isis-1] bier enable

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR1-isis-1-ipv6] import-bier bgp4+

# 配置IS-IS发布域外代理路由。

[ASBR1-isis-1-ipv6] import-route bgp4+

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

(4)     配置ASBR 2

# 配置全局Router ID。

<ASBR2> system-view

[ASBR2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[ASBR2] isis 1

[ASBR2-isis-1] is-level level-2

[ASBR2-isis-1] cost-style wide

[ASBR2-isis-1] network-entity 10.0000.0000.0004.00

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR2] interface loopback 0

[ASBR2-LoopBack0] ip address 4.4.4.4 32

[ASBR2-LoopBack0] ipv6 address 4::4 128

[ASBR2-LoopBack0] isis ipv6 enable 1

[ASBR2-LoopBack0] quit

# 配置SRv6。

[ASBR2] segment-routing ipv6

[ASBR2-segment-routing-ipv6] encapsulation source-address 44::44

[ASBR2-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[ASBR2-segment-routing-ipv6] quit

# 配置ASBR2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[ASBR2] bier

[ASBR2-bier] sub-domain 0 ipv6

[ASBR2-bier-sub-domain-0-ipv6] bfr-id 4

[ASBR2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[ASBR2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5004::1。

[ASBR2-bier-sub-domain-0-ipv6] g-bier mpra 5004::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR2] interface ten-gigabitethernet 3/1/1

[ASBR2-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/1] ip address 113.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/1] ipv6 address 113::4 64

[ASBR2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR2] interface ten-gigabitethernet 3/1/2

[ASBR2-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/2] ipv6 address 14::4 64

[ASBR2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR2] bgp 200

[ASBR2-bgp-default] router-id 4.4.4.4

[ASBR2-bgp-default] peer 6::6 as-number 200

[ASBR2-bgp-default] peer 6::6 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 113::3 as-number 100

[ASBR2-bgp-default] peer 113::3 ebgp-max-hop 10

[ASBR2-bgp-default] address-family ipv6 unicast

[ASBR2-bgp-default-ipv6] bier enable

[ASBR2-bgp-default-ipv6] import-bier isisv6 1

[ASBR2-bgp-default-ipv6] peer 6::6 enable

[ASBR2-bgp-default-ipv6] peer 6::6 next-hop-local

[ASBR2-bgp-default-ipv6] peer 113::3 enable

[ASBR2-bgp-default-ipv6] peer 113::3 capability bier

[ASBR2-bgp-default-ipv6] quit

[ASBR2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[ASBR2] isis 1

[ASBR2-isis-1] bier enable

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR2-isis-1-ipv6] import-bier bgp4+

# 配置iIS-IS发布域外代理路由。

[ASBR2-isis-1-ipv6] import-route bgp4+

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

(5)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 5.5.5.5

# 配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0005.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 15::5 64

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 14::5 64

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 5.5.5.5 255.255.255.255

[P2-LoopBack0] ipv6 address 5::5 128

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

(6)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0006.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 6.6.6.6 32

[PE2-LoopBack0] ipv6 address 6::6 128

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 66::66

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 6

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5006::1。

[PE2-bier-sub-domain-0-ipv6] g-bier mpra 5006::1

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:6:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:6

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-a] address-family ipv4

[PE2-mvpn-a-ipv4] source loopback 0

[PE2-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] auto-discovery inter-as

[PE2-mvpn-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 13

[PE2-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2-mvpn-a] address-family ipv6

[PE2-mvpn-a-ipv6] source loopback 0

[PE2-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] auto-discovery inter-as

[PE2-mvpn-a-ipv6] tunnel-source multicast-service-prefix ms1 service-id 15

[PE2-mvpn-a-ipv6] quit

[PE2-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM/IGMP/MLD。

[PE2] interface Ten-GigabitEthernet3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 100:3:3::2 64

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/2] igmp enable

[PE2-Ten-GigabitEthernet3/1/2] mld enable

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface Ten-GigabitEthernet3/1/1

[PE2-Ten-GigabitEthernet3/1/1] port link-mode route

[PE2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.6 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 15::6 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE2] bgp 200

[PE2-bgp-default] router-id 6.6.6.6

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 1::1 ebgp-max-hop 10

[PE2-bgp-default] peer 4::4 as-number 200

[PE2-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] import-route direct

[PE2-bgp-default-ipv6] peer 4::4 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default-ipv6] quit

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

4. 验证配置

# 查看BGP路由表下携带正确的BIER BFR-ID-Range信息。

[ASBR1] display bgp routing-table ipv6 4::4 128

 

 BGP local router ID: 3.3.3.3

 Local AS number: 100

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 4::4/128:

 From            : 113::4 (4.4.4.4)

 Rely nexthop    : 113::4

 Original nexthop: 113::4

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h00m19s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 4, G-BIER encap><BSL info: [128,32]

                   ><MPRA 5004::1><BFR-ID range, count 1, [6, 6]>

 AS-path         : 200

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

[ASBR2] display bgp routing-table ipv6 3::3 128

 

 BGP local router ID: 4.4.4.4

 Local AS number: 200

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 3::3/128:

 From            : 113::3 (3.3.3.3)

 Rely nexthop    : 113::3

 Original nexthop: 113::3

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h02m42s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 3, G-BIER encap><BSL info: [128,32]

                   ><MPRA 5003::1><BFR-ID range, count 1, [1, 1]>

 AS-path         : 100

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

# 查看PE 1的域内BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

# 查看PE 1的域外BIRT表项。

[PE1] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 4

      BFR prefix: 3::3

        AS: --

        Protocol: IS-IS

        Preference: --

 

    BFR ID: 6

      BFR prefix: 3::3

        AS: --

        Protocol: IS-IS

        Preference: --

# 查看PE 2的域内BIRT表项。

[PE2] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 6

    BFR prefix: 6::6(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

# 查看PE 2的域外BIRT表项。

[PE2] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 1

      BFR prefix: 4::4

        AS: --

        Protocol: IS-IS

        Preference: --

 

    BFR ID: 3

      BFR prefix: 4::4

        AS: --

        Protocol: IS-IS

        Preference: --

1.20.17  跨AS域BIER前缀不保留IBGP(Proxy)-EBGP-ISIS组网配置举例(G-BIER封装类型)

1. 组网需求

组网需求如表1-19所示。

表1-19 跨AS域BIER前缀不保留IBGP(Proxy)-EBGP-ISIS(G-BIER封装类型)组网需求

项目

组网需求

功能描述

·     对于G-BIER封装类型,ASBR设备对域外的BIER前缀信息进行替换,不保留原有前缀,域内进行域外信息发布的时候,使用ASBR的前缀信息发布

·     AS 100内通过BGP报文携带BIER信息,AS 200通过IS-IS报文携带BIER信息

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网AS 100中配置IBGP,在AS 200中配置IS-IS,在ASBR 1与ASBR 2之间配置EBGP对等体

·     在PE 1与P 1、P 1与ASBR 1和PE 1与ASBR 1的LoopBack0接口之间建立BGP对等体

·     在ASBR 2与PE 2的LoopBack0接口之间建立BGP对等体

·     在PE 1与PE 2的LoopBack0接口之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、ASBR 1、ASBR 2、PE 2上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置组播策略预留地址

IP组播路由功能

在PE 1和PE 2的VPN实例a中均使能IP组播路由

IGMP功能

在PE 1的Ten-GigabitEthernet3/1/2和PE 2的 Ten-GigabitEthernet3/1/2接口上使能IGMP

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     PE 1的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-29 跨AS域BIER前缀不保留IBGP(Proxy)-EBGP-ISIS(G-BIER封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S1

-

7.12.1.10/24

ASBR2

XGE3/1/1

113.1.1.4/24

113::4/64

R1

-

7.13.1.10/24

 

XGE3/1/2

14.1.1.4/24

14.1.1.4/64

PE1

XGE3/1/2

7.12.1.12/24

100:2:2::2/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/1

11.1.1.1/24

11::1/64

P2

XGE3/1/1

15.1.1.5/24

15::5/64

Loop0

1.1.1.1/32

1::1/128

 

XGE3/1/2

14.1.1.5/24

14::5/64

 

Loop1

11.11.11.11/32

11::11/128

 

Loop0

5.5.5.5/32

5::5/128

P1

XGE3/1/1

11.1.1.2/24

11::2/64

PE2

XGE3/1/1

15.1.1.6/24

15::6/64

XGE3/1/2

12.1.1.2/24

12::2/64

 

XGE3/1/2

7.13.1.12/24

100:3:3::2/64

Loop0

2.2.2.2/32

2::2/128

 

Loop0

6.6.6.6/32

6::6/128

ASBR1

XGE3/1/1

113.1.1.3/24

113::3/64

 

XGE3/1/2

12.1.1.3/24

12::3/64

 

 

Loop0

3.3.3.3/32

3::3/128

 

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置静态路由。

[PE1] ipv6 route-static 6::6 128 11::2

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5001::1。

[PE1-bier-sub-domain-0-ipv6] g-bier mpra 5001::1

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:1:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv4

[PE1-mvpn-a-ipv4] source loopback 0

[PE1-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] auto-discovery inter-as

[PE1-mvpn-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 12

[PE1-mvpn-a-ipv4] quit

[PE1-mvpn-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv6

[PE1-mvpn-a-ipv6] source loopback 0

[PE1-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] auto-discovery inter-as

[PE1-mvpn-a-ipv6] tunnel-source multicast-service-prefix ms1 service-id 14

[PE1-mvpn-a-ipv6] quit

[PE1-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface Ten-GigabitEthernet3/1/2

[PE1-Ten-GigabitEthernet3/1/2] port link-mode route

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 7.12.1.12 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address 100:2:2::2 64

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface Ten-GigabitEthernet3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.1 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 11::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 11.11.11.11 255.255.255.255

[PE1-LoopBack1] ipv6 address 11::11 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.11.11.11

[PE1-pim-a] c-rp 11.11.11.11

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 11::11

[PE1-pim6-a] c-rp 11::11

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 2::2 as-number 100

[PE1-bgp-default] peer 2::2 connect-interface loopback 0

[PE1-bgp-default] peer 3::3 as-number 100

[PE1-bgp-default] peer 3::3 connect-interface loopback 0

[PE1-bgp-default] peer 6::6 as-number 200

[PE1-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE1-bgp-default] peer 6::6 ebgp-max-hop 10

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 6::6 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 6::6 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 6::6 enable

[PE1-bgp-default-vpnv4] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1-bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] bier enable

[PE1-bgp-default-ipv6] peer 2::2 enable

[PE1-bgp-default-ipv6] peer 3::3 enable

[PE1-bgp-default-ipv6] peer 3::3 capability bier

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 6::6 enable

[PE1-bgp-default-vpnv6] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv6] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS通告locator aaa。

[PE1] isis 1

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(2)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0002.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 配置静态路由。

[P1] ipv6 route-static 6::6 128 12::3

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 11::2 64

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 12::2 64

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 2.2.2.2 255.255.255.255

[P1-LoopBack0] ipv6 address 2::2 128

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

# 配置BGP协议。

[P1] bgp 100

[P1-bgp-default] router-id 2.2.2.2

[P1-bgp-default] peer 1::1 as-number 100

[P1-bgp-default] peer 1::1 connect-interface LoopBack 0

[P1-bgp-default] peer 3::3 as-number 100

[P1-bgp-default] peer 3::3 connect-interface LoopBack 0

[P1-bgp-default] address-family ipv6

[P1-bgp-default-ipv6] peer 1::1 enable

[P1-bgp-default-ipv6] peer 3::3 enable

[P1-bgp-default-ipv6] quit

[P1–bgp-default] quit

(3)     配置ASBR 1

# 配置全局Router ID。

<ASBR1> system-view

[ASBR1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[ASBR1] isis 1

[ASBR1-isis-1] is-level level-2

[ASBR1-isis-1] cost-style wide

[ASBR1-isis-1] network-entity 10.0000.0000.0003.00

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR1] interface loopback 0

[ASBR1-LoopBack0] ip address 3.3.3.3 32

[ASBR1-LoopBack0] ipv6 address 3::3 128

[ASBR1-LoopBack0] isis ipv6 enable 1

[ASBR1-LoopBack0] quit

# 配置SRv6。

[ASBR1] segment-routing ipv6

[ASBR1-segment-routing-ipv6] encapsulation source-address 33::33

[ASBR1-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[ASBR1-segment-routing-ipv6] quit

# 配置ASBR1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[ASBR1] bier

[ASBR1-bier] sub-domain 0 ipv6

[ASBR1-bier-sub-domain-0-ipv6] bfr-id 3

[ASBR1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[ASBR1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5003::1。

[ASBR1-bier-sub-domain-0-ipv6] g-bier mpra 5003::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR1] interface ten-gigabitethernet 3/1/1

[ASBR1-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/1] ip address 113.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/1] ipv6 address 113::3 64

[ASBR1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR1] interface ten-gigabitethernet 3/1/2

[ASBR1-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/2] ipv6 address 12::3 64

[ASBR1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR1] interface loopback 0

[ASBR1-LoopBack0] ip address 3.3.3.3 32

[ASBR1-LoopBack0] ipv6 address 3::3 128

[ASBR1-LoopBack0] isis ipv6 enable 1

[ASBR1-LoopBack0] quit

# 配置BGP协议。

[ASBR1] bgp 100

[ASBR1-bgp-default] router-id 3.3.3.3

[ASBR1-bgp-default] peer 1::1 as-number 100

[ASBR1-bgp-default] peer 1::1 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 2::2 as-number 100

[ASBR1-bgp-default] peer 2::2 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 113::4 as-number 200

[ASBR1-bgp-default] peer 113::4 ebgp-max-hop 10

[ASBR1-bgp-default] address-family ipv6 unicast

[ASBR1-bgp-default-ipv6] bier enable

[ASBR1-bgp-default-ipv6] peer 1::1 enable

[ASBR1-bgp-default-ipv6] peer 1::1 next-hop-local

[ASBR1-bgp-default-ipv6] peer 1::1 capability bier

[ASBR1-bgp-default-ipv6] peer 2::2 enable

[ASBR1-bgp-default-ipv6] peer 2::2 next-hop-local

[ASBR1-bgp-default-ipv6] peer 113::4 enable

[ASBR1-bgp-default-ipv6] peer 113::4 capability bier

# 配置开启BIER前缀代理功能。

[ASBR1-bgp-default-ipv6] bier bfr-prefix proxy

[ASBR1-bgp-default-ipv6] quit

[ASBR1–bgp-default] quit

# 配置IS-IS通告locator aaa。

[ASBR1] isis 1

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

(4)     配置ASBR 2

# 配置全局Router ID。

<ASBR2> system-view

[ASBR2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[ASBR2] isis 1

[ASBR2-isis-1] is-level level-2

[ASBR2-isis-1] cost-style wide

[ASBR2-isis-1] network-entity 10.0000.0000.0004.00

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR2] interface loopback 0

[ASBR2-LoopBack0] ip address 4.4.4.4 32

[ASBR2-LoopBack0] ipv6 address 4::4 128

[ASBR2-LoopBack0] isis ipv6 enable 1

[ASBR2-LoopBack0] quit

# 配置静态路由。

[ASBR2] ipv6 route-static 1::1 128 113::3

# 配置SRv6。

[ASBR2] segment-routing ipv6

[ASBR2-segment-routing-ipv6] encapsulation source-address 44::44

[ASBR2-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[ASBR2-segment-routing-ipv6] quit

# 配置ASBR2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[ASBR2] bier

[ASBR2-bier] sub-domain 0 ipv6

[ASBR2-bier-sub-domain-0-ipv6] bfr-id 4

[ASBR2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[ASBR2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5004::1。

[ASBR2-bier-sub-domain-0-ipv6] g-bier mpra 5004::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR2] interface ten-gigabitethernet 3/1/1

[ASBR2-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/1] ip address 113.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/1] ipv6 address 113::4 64

[ASBR2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR2] interface ten-gigabitethernet 3/1/2

[ASBR2-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/2] ipv6 address 14::4 64

[ASBR2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR2] bgp 200

[ASBR2-bgp-default] router-id 4.4.4.4

[ASBR2-bgp-default] peer 6::6 as-number 200

[ASBR2-bgp-default] peer 6::6 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 113::3 as-number 100

[ASBR2-bgp-default] peer 113::3 ebgp-max-hop 10

[ASBR2-bgp-default] address-family ipv6 unicast

[ASBR2-bgp-default-ipv6] bier enable

[ASBR2-bgp-default-ipv6] import-bier isisv6 1

[ASBR2-bgp-default-ipv6] peer 6::6 enable

[ASBR2-bgp-default-ipv6] peer 6::6 next-hop-local

[ASBR2-bgp-default-ipv6] peer 113::3 enable

[ASBR2-bgp-default-ipv6] peer 113::3 capability bier

[ASBR2-bgp-default-ipv6] quit

[ASBR2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[ASBR2] isis 1

[ASBR2-isis-1] bier enable

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR2-isis-1-ipv6] import-bier bgp4+

# 配置ISIS发布域外代理路由。

[ASBR2-isis-1-ipv6] import-route bgp4+

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

(5)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 5.5.5.5

# 配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0005.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 配置静态路由。

[P2] ipv6 route-static 1::1 128 14::4

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 15::5 64

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 14::5 64

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 5.5.5.5 255.255.255.255

[P2-LoopBack0] ipv6 address 5::5 128

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

(6)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0006.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 6.6.6.6 32

[PE2-LoopBack0] ipv6 address 6::6 128

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置静态路由。

[PE2] ipv6 route-static 1::1 128 15::5

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 66::66

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 6

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为MSR6,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5006::1。

[PE2-bier-sub-domain-0-ipv6] g-bier mpra 5006::1

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:6:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:6

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-a] address-family ipv4

[PE2-mvpn-a-ipv4] source loopback 0

[PE2-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] auto-discovery inter-as

[PE2-mvpn-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 13

[PE2-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2-mvpn-a] address-family ipv6

[PE2-mvpn-a-ipv6] source loopback 0

[PE2-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] auto-discovery inter-as

[PE2-mvpn-a-ipv6] tunnel-source multicast-service-prefix ms1 service-id 15

[PE2-mvpn-a-ipv6] quit

[PE2-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM/IGMP/MLD。

[PE2] interface Ten-GigabitEthernet3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 100:3:3::2 64

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/2] igmp enable

[PE2-Ten-GigabitEthernet3/1/2] mld enable

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface Ten-GigabitEthernet3/1/1

[PE2-Ten-GigabitEthernet3/1/1] port link-mode route

[PE2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.6 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 15::6 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE2] bgp 200

[PE2-bgp-default] router-id 6.6.6.6

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 1::1 ebgp-max-hop 10

[PE2-bgp-default] peer 4::4 as-number 200

[PE2-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] import-route direct

[PE2-bgp-default-ipv6] peer 4::4 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default-ipv6] quit

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS使能BIER能力并通告locator aaa。

[PE2] isis 1

[PE2-isis-1] bier enable

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

4. 验证配置

# 查看BGP路由表下携带正确的BIER BFR-ID-Range信息。

[ASBR1] display bgp routing-table ipv6 4::4 128

 

 BGP local router ID: 3.3.3.3

 Local AS number: 100

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 4::4/128:

 From            : 113::4 (4.4.4.4)

 Rely nexthop    : 113::4

 Original nexthop: 113::4

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h09m18s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 4, G-BIER encap><BSL info: [128,32]

                   ><MPRA 5004::1><BFR-ID range, count 1, [6, 6]>

 AS-path         : 200

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

[ASBR2] display bgp routing-table ipv6 3::3 128

 

 BGP local router ID: 4.4.4.4

 Local AS number: 200

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 3::3/128:

 From            : 113::3 (3.3.3.3)

 Rely nexthop    : 113::3

 Original nexthop: 113::3

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h00m29s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 3, G-BIER encap><BSL info: [128,32]

                   ><MPRA 5003::1><BFR-ID range, count 3, [1, 1],[4, 4],[6, 6]>

 AS-path         : 100

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

# 查看PE 1的域内BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

# 查看PE 1的域外BIRT表项。

[PE1] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 4

      BFR prefix: 3::3

        AS: 100

        Protocol: IBGP

        Preference: --

 

    BFR ID: 6

      BFR prefix: 3::3

        AS: 100

        Protocol: IBGP

        Preference: --

# 查看PE 2的域内BIRT表项。

[PE2] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 6

    BFR prefix: 6::6(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

# 查看PE 2的域外BIRT表项。

[PE2] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 1

      BFR prefix: 4::4

        AS: --

        Protocol: IS-IS

        Preference: --

 

    BFR ID: 3

      BFR prefix: 4::4

        AS: --

        Protocol: IS-IS

        Preference: --

1.20.18  跨AS域BIER前缀不保留IBGP(Proxy)-EBGP- IBGP组网配置举例(G-BIER封装类型)

1. 组网需求

组网需求如表1-20所示。

表1-20 跨AS域BIER前缀不保留IBGP(Proxy)-EBGP- IBGP(G-BIER封装类型)组网需求

项目

组网需求

功能描述

·     对于G-BIER封装类型,ASBR设备对域外的BIER前缀信息进行替换,不保留原有前缀,域内进行域外信息发布的时候,使用ASBR的前缀信息发布

·     AS 100内通过BGP报文携带BIER信息,AS 200通过BGP报文携带BIER信息

组播源和接收者

VPN实例a中的组播源为S,接收者为R

PE各接口所属实例

·     PE 1:Ten-GigabitEthernet3/1/2和LoopBack1接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

·     PE 2:Ten-GigabitEthernet3/1/2接口属于VPN实例a,Ten-GigabitEthernet3/1/1和LoopBack0接口属于公网实例

单播路由协议和BIER

·     在公网AS 100和 AS 200中均配置IBGP,在ASBR 1与ASBR 2之间配置EBGP对等体

·     在PE 1与P 1、P 1与ASBR 1和PE 1与ASBR 1的LoopBack0接口之间建立BGP对等体

·     在PE 2与P 2、P 2与ASBR 2和PE 2与ASBR 2的LoopBack0接口之间建立BGP对等体

·     在PE 1 与PE 2的LoopBack0接口之间建立BGP对等体

·     在公网中配置BIER子域0、BSL为128、Max-SI为32

·     在PE 1、ASBR 1、ASBR 2、PE 2上配置BFR prefix为各自LoopBack0接口的IPv6地址,并各自配置组播策略预留地址

IP组播路由功能

在PE 1和PE 2的VPN实例a中均使能IP组播路由

IGMP功能

PE 2的Ten-GigabitEthernet3/1/2接口上使能IGMP

PIM功能

私网中运行PIM-SM:

·     在PE 1和PE 2的所有不与接收者直连的私网接口上均使能PIM-SM

·     PE 1的LoopBack1接口为VPN a的C-BSR和C-RP(服务于所有组播组)

 

2. 组网图

图1-30 跨AS域BIER前缀不保留IBGP(Proxy)-EBGP- IBGP(G-BIER封装类型)组网图

设备

接口

IP地址

设备

接口

IP地址

S1

-

7.12.1.10/24

ASBR2

XGE3/1/1

113.1.1.4/24

113::4/64

R1

-

7.13.1.10/24

 

XGE3/1/2

14.1.1.4/24

14.1.1.4/64

PE1

XGE3/1/2

7.12.1.12/24

100:2:2::2/64

 

Loop0

4.4.4.4/32

4::4/128

XGE3/1/1

11.1.1.1/24

11::1/64

P2

XGE3/1/1

15.1.1.5/24

15::5/64

Loop0

1.1.1.1/32

1::1/128

 

XGE3/1/2

14.1.1.5/24

14::5/64

 

Loop1

11.11.11.11/32

11::11/128

 

Loop0

5.5.5.5/32

5::5/128

P1

XGE3/1/1

11.1.1.2/24

11::2/64

PE2

XGE3/1/1

15.1.1.6/24

15::6/64

XGE3/1/2

12.1.1.2/24

12::2/64

 

XGE3/1/2

7.13.1.12/24

100:3:3::2/64

Loop0

2.2.2.2/32

2::2/128

 

Loop0

6.6.6.6/32

6::6/128

ASBR1

XGE3/1/1

113.1.1.3/24

113::3/64

 

XGE3/1/2

12.1.1.3/24

12::3/64

 

 

Loop0

3.3.3.3/32

3::3/128

 

 

3. 配置步骤

(1)     配置PE 1

# 配置全局Router ID。

<PE1> system-view

[PE1] router id 1.1.1.1

# 配置IPv6 IS-IS协议。

[PE1] isis 1

[PE1-isis-1] is-level level-2

[PE1-isis-1] cost-style wide

[PE1-isis-1] network-entity 10.0000.0000.0001.00

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.1 32

[PE1-LoopBack0] ipv6 address 1::1 128

[PE1-LoopBack0] isis ipv6 enable 1

[PE1-LoopBack0] quit

# 配置静态路由。

[PE1] ipv6 route-static 6::6 128 11::2

# 配置SRv6。

[PE1] segment-routing ipv6

[PE1-segment-routing-ipv6] encapsulation source-address 11::11

[PE1-segment-routing-ipv6] locator aaa ipv6-prefix 1:2:: 96 static 8

[PE1-segment-routing-ipv6] quit

# 配置PE1加入BIER子域0、BFR ID为1、BFR prefix为LoopBack口0的IPv6地址。

[PE1] bier

[PE1-bier] sub-domain 0 ipv6

[PE1-bier-sub-domain-0-ipv6] bfr-id 1

[PE1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[PE1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5001::1。

[PE1-bier-sub-domain-0-ipv6] g-bier mpra 5001::1

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:1:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE1] ip vpn-instance a

[PE1-vpn-instance-a] route-distinguisher 100:1

[PE1-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE1-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE1-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE1] multicast routing vpn-instance a

[PE1-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE1] ipv6 multicast routing vpn-instance a

[PE1-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1] multicast-vpn vpn-instance a mode bier

[PE1-mvpn-a] address-family ipv4

[PE1-mvpn-a-ipv4] source loopback 0

[PE1-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv4] auto-discovery inter-as

[PE1-mvpn-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 12

[PE1-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE1-mvpn-a] address-family ipv6

[PE1-mvpn-a-ipv6] source loopback 0

[PE1-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE1-mvpn-a-ipv6] auto-discovery inter-as

[PE1-mvpn-a-ipv6] tunnel-source multicast-service-prefix ms1 service-id 14

[PE1-mvpn-a-ipv6] quit

[PE1-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM。

[PE1] interface Ten-GigabitEthernet3/1/2

[PE1-Ten-GigabitEthernet3/1/2] port link-mode route

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE1-Ten-GigabitEthernet3/1/2] ip address 7.12.1.12 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address 100:2:2::2 64

[PE1-Ten-GigabitEthernet3/1/2] pim sm

[PE1-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE1-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE1] interface Ten-GigabitEthernet3/1/1

[PE1-Ten-GigabitEthernet3/1/1] port link-mode route

[PE1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.1 255.255.255.0

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 11::1 64

[PE1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE1-Ten-GigabitEthernet3/1/1] quit

# 配置LoopBack1接口的IP地址,与VPN实例a进行关联,并使能PIM-SM。

[PE1] interface loopback 1

[PE1-LoopBack1] ip binding vpn-instance a

[PE1-LoopBack1] ip address 11.11.11.11 255.255.255.255

[PE1-LoopBack1] ipv6 address 11::11 128

[PE1-LoopBack1] pim sm

[PE1-LoopBack1] ipv6 pim sm

[PE1-LoopBack1] quit

# 配置LoopBack1接口为BSR和RP。

[PE1] pim vpn-instance a

[PE1-pim-a] c-bsr 11.11.11.11

[PE1-pim-a] c-rp 11.11.11.11

[PE1-pim-a] quit

[PE1] ipv6 pim vpn-instance a

[PE1-pim6-a] c-bsr 11::11

[PE1-pim6-a] c-rp 11::11

[PE1-pim6-a] quit

# 配置BGP协议。

[PE1] bgp 100

[PE1-bgp-default] router-id 1.1.1.1

[PE1-bgp-default] peer 2::2 as-number 100

[PE1-bgp-default] peer 2::2 connect-interface loopback 0

[PE1-bgp-default] peer 3::3 as-number 100

[PE1-bgp-default] peer 3::3 connect-interface loopback 0

[PE1-bgp-default] peer 6::6 as-number 200

[PE1-bgp-default] peer 6::6 connect-interface LoopBack 0

[PE1-bgp-default] peer 6::6 ebgp-max-hop 10

[PE1-bgp-default] address-family ipv4 mvpn

[PE1-bgp-default-mvpn] peer 6::6 enable

[PE1-bgp-default-mvpn] quit

[PE1-bgp-default] address-family ipv6 mvpn

[PE1-bgp-default-mvpn-ipv6] peer 6::6 enable

[PE1-bgp-default-mvpn-ipv6] quit

[PE1-bgp-default] address-family vpnv4

[PE1-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv4] peer 6::6 enable

[PE1-bgp-default-vpnv4] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv4] quit

[PE1-bgp-default] address-family ipv6

[PE1-bgp-default-ipv6] bier enable

[PE1-bgp-default-ipv6] peer 2::2 enable

[PE1-bgp-default-ipv6] peer 3::3 enable

[PE1-bgp-default-ipv6] peer 3::3 capability bier

[PE1-bgp-default-ipv6] advertise srv6 locator aaa

[PE1-bgp-default-ipv6] quit

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE1-bgp-default-vpnv6] peer 6::6 enable

[PE1-bgp-default-vpnv6] peer 6::6 prefix-sid

[PE1-bgp-default-vpnv6] quit

[PE1–bgp-default] ip vpn-instance a

[PE1-bgp-default-a] address-family ipv4 unicast

[PE1-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv4-a] import-route direct

[PE1-bgp-default-ipv4-a] quit

[PE1-bgp-default-a] address-family ipv6 unicast

[PE1-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE1-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE1-bgp-default-ipv6-a] import-route direct

[PE1-bgp-default-ipv6-a] quit

[PE1-bgp-default-a] quit

[PE1–bgp-default] quit

# 配置IS-IS通告locator aaa。

[PE1] isis 1

[PE1-isis-1] address-family ipv6 unicast

[PE1-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE1-isis-1-ipv6] quit

[PE1-isis-1] quit

(2)     配置P 1

# 配置全局Router ID。

<P1> system-view

[P1] router id 2.2.2.2

# 配置IPv6 IS-IS协议。

[P1] isis 1

[P1-isis-1] is-level level-2

[P1-isis-1] cost-style wide

[P1-isis-1] network-entity 10.0000.0000.0002.00

[P1-isis-1] address-family ipv6 unicast

[P1-isis-1-ipv6] quit

[P1-isis-1] quit

# 配置静态路由。

[P1] ipv6 route-static 6::6 128 12::3

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/1

[P1-Ten-GigabitEthernet3/1/1] port link-mode route

[P1-Ten-GigabitEthernet3/1/1] ip address 11.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/1] ipv6 address 11::2 64

[P1-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P1] interface Ten-GigabitEthernet3/1/2

[P1-Ten-GigabitEthernet3/1/2] port link-mode route

[P1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.2 255.255.255.0

[P1-Ten-GigabitEthernet3/1/2] ipv6 address 12::2 64

[P1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P1-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P1] interface loopback 0

[P1-LoopBack0] ip address 2.2.2.2 255.255.255.255

[P1-LoopBack0] ipv6 address 2::2 128

[P1-LoopBack0] isis ipv6 enable 1

[P1-LoopBack0] quit

# 配置BGP协议。

[P1] bgp 100

[P1-bgp-default] router-id 2.2.2.2

[P1-bgp-default] peer 1::1 as-number 100

[P1-bgp-default] peer 1::1 connect-interface LoopBack 0

[P1-bgp-default] peer 3::3 as-number 100

[P1-bgp-default] peer 3::3 connect-interface LoopBack 0

[P1-bgp-default] address-family ipv6

[P1-bgp-default-ipv6] peer 1::1 enable

[P1-bgp-default-ipv6] peer 3::3 enable

[P1-bgp-default-ipv6] quit

[P1–bgp-default] quit

(3)     配置ASBR 1

# 配置全局Router ID。

<ASBR1> system-view

[ASBR1] router id 3.3.3.3

# 配置IPv6 IS-IS协议。

[ASBR1] isis 1

[ASBR1-isis-1] is-level level-2

[ASBR1-isis-1] cost-style wide

[ASBR1-isis-1] network-entity 10.0000.0000.0003.00

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR1] interface loopback 0

[ASBR1-LoopBack0] ip address 3.3.3.3 32

[ASBR1-LoopBack0] ipv6 address 3::3 128

[ASBR1-LoopBack0] isis ipv6 enable 1

[ASBR1-LoopBack0] quit

# 配置SRv6。

[ASBR1] segment-routing ipv6

[ASBR1-segment-routing-ipv6] encapsulation source-address 33::33

[ASBR1-segment-routing-ipv6] locator aaa ipv6-prefix 3:2:: 96 static 8

[ASBR1-segment-routing-ipv6] quit

# 配置ASBR1加入BIER子域0、BFR ID为3、BFR prefix为LoopBack口0的IPv6地址。

[ASBR1] bier

[ASBR1-bier] sub-domain 0 ipv6

[ASBR1-bier-sub-domain-0-ipv6] bfr-id 3

[ASBR1-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[ASBR1-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5003::1。

[ASBR1-bier-sub-domain-0-ipv6] g-bier mpra 5003::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR1] interface ten-gigabitethernet 3/1/1

[ASBR1-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/1] ip address 113.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/1] ipv6 address 113::3 64

[ASBR1-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR1] interface ten-gigabitethernet 3/1/2

[ASBR1-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR1-Ten-GigabitEthernet3/1/2] ip address 12.1.1.3 255.255.255.0

[ASBR1-Ten-GigabitEthernet3/1/2] ipv6 address 12::3 64

[ASBR1-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR1-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR1] bgp 100

[ASBR1-bgp-default] router-id 3.3.3.3

[ASBR1-bgp-default] peer 1::1 as-number 100

[ASBR1-bgp-default] peer 1::1 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 2::2 as-number 100

[ASBR1-bgp-default] peer 2::2 connect-interface LoopBack 0

[ASBR1-bgp-default] peer 113::4 as-number 200

[ASBR1-bgp-default] peer 113::4 ebgp-max-hop 10

[ASBR1-bgp-default] address-family ipv6 unicast

[ASBR1-bgp-default-ipv6] bier enable

[ASBR1-bgp-default-ipv6] peer 1::1 enable

[ASBR1-bgp-default-ipv6] peer 1::1 next-hop-local

[ASBR1-bgp-default-ipv6] peer 1::1 capability bier

[ASBR1-bgp-default-ipv6] peer 2::2 enable

[ASBR1-bgp-default-ipv6] peer 2::2 next-hop-local

[ASBR1-bgp-default-ipv6] peer 113::4 enable

[ASBR1-bgp-default-ipv6] peer 113::4 capability bier

# 配置开启BIER前缀代理功能。

[ASBR1-bgp-default-ipv6] bier bfr-prefix proxy

[ASBR1-bgp-default-ipv6] quit

[ASBR1–bgp-default] quit

# 配置IS-IS通告locator aaa。

[ASBR1] isis 1

[ASBR1-isis-1] address-family ipv6 unicast

[ASBR1-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR1-isis-1-ipv6] quit

[ASBR1-isis-1] quit

(4)     配置ASBR 2

# 配置全局Router ID。

<ASBR2> system-view

[ASBR2] router id 4.4.4.4

# 配置IPv6 IS-IS协议。

[ASBR2] isis 1

[ASBR2-isis-1] is-level level-2

[ASBR2-isis-1] cost-style wide

[ASBR2-isis-1] network-entity 10.0000.0000.0004.00

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[ASBR2] interface loopback 0

[ASBR2-LoopBack0] ip address 4.4.4.4 32

[ASBR2-LoopBack0] ipv6 address 4::4 128

[ASBR2-LoopBack0] isis ipv6 enable 1

[ASBR2-LoopBack0] quit

# 配置静态路由。

[ASBR2] ipv6 route-static 1::1 128 113::3

# 配置SRv6。

[ASBR2] segment-routing ipv6

[ASBR2-segment-routing-ipv6] encapsulation source-address 44::44

[ASBR2-segment-routing-ipv6] locator aaa ipv6-prefix 4:2:: 96 static 8

[ASBR2-segment-routing-ipv6] quit

# 配置ASBR2加入BIER子域0、BFR ID为4、BFR prefix为LoopBack口0的IPv6地址。

[ASBR2] bier

[ASBR2-bier] sub-domain 0 ipv6

[ASBR2-bier-sub-domain-0-ipv6] bfr-id 4

[ASBR2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[ASBR2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5004::1。

[ASBR2-bier-sub-domain-0-ipv6] g-bier mpra 5004::1

# 在公网接口Ten-GigabitEthernet3/1/1上配置IP地址。

[ASBR2] interface ten-gigabitethernet 3/1/1

[ASBR2-Ten-GigabitEthernet3/1/1] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/1] ip address 113.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/1] ipv6 address 113::4 64

[ASBR2-Ten-GigabitEthernet3/1/1] quit

# 在公网接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[ASBR2] interface ten-gigabitethernet 3/1/2

[ASBR2-Ten-GigabitEthernet3/1/2] port link-mode route

[ASBR2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.4 255.255.255.0

[ASBR2-Ten-GigabitEthernet3/1/2] ipv6 address 14::4 64

[ASBR2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[ASBR2-Ten-GigabitEthernet3/1/2] quit

# 配置BGP协议。

[ASBR2] bgp 200

[ASBR2-bgp-default] router-id 4.4.4.4

[ASBR2-bgp-default] peer 5::5 as-number 200

[ASBR2-bgp-default] peer 5::5 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 6::6 as-number 200

[ASBR2-bgp-default] peer 6::6 connect-interface LoopBack 0

[ASBR2-bgp-default] peer 113::3 as-number 100

[ASBR2-bgp-default] peer 113::3 ebgp-max-hop 10

[ASBR2-bgp-default] address-family ipv6 unicast

[ASBR2-bgp-default-ipv6] bier enable

[ASBR2-bgp-default-ipv6] peer 5::5 enable

[ASBR2-bgp-default-ipv6] peer 5::5 next-hop-local

[ASBR2-bgp-default-ipv6] peer 6::6 enable

[ASBR2-bgp-default-ipv6] peer 6::6 next-hop-local

[ASBR2-bgp-default-ipv6] peer 6::6 capability bier

[ASBR2-bgp-default-ipv6] peer 113::3 enable

[ASBR2-bgp-default-ipv6] peer 113::3 capability bier

[ASBR2-bgp-default-ipv6] quit

[ASBR2–bgp-default] quit

# 配置IS-IS通告locator aaa。

[ASBR2] isis 1

[ASBR2-isis-1] address-family ipv6 unicast

[ASBR2-isis-1-ipv6] segment-routing ipv6 locator aaa

[ASBR2-isis-1-ipv6] quit

[ASBR2-isis-1] quit

(5)     配置P 2

# 配置全局Router ID。

<P2> system-view

[P2] router id 5.5.5.5

# 配置IPv6 IS-IS协议。

[P2] isis 1

[P2-isis-1] is-level level-2

[P2-isis-1] cost-style wide

[P2-isis-1] network-entity 10.0000.0000.0005.00

[P2-isis-1] address-family ipv6 unicast

[P2-isis-1-ipv6] quit

[P2-isis-1] quit

# 配置静态路由。

[P2] ipv6 route-static 1::1 128 14::4

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/1

[P2-Ten-GigabitEthernet3/1/1] port link-mode route

[P2-Ten-GigabitEthernet3/1/1] undo shutdown

[P2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/1] ipv6 address 15::5 64

[P2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/1] quit

# 在接口Ten-GigabitEthernet3/1/2上配置IP地址,并使能IS-IS。

[P2] interface Ten-GigabitEthernet3/1/2

[P2-Ten-GigabitEthernet3/1/2] port link-mode route

[P2-Ten-GigabitEthernet3/1/2] undo shutdown

[P2-Ten-GigabitEthernet3/1/2] ip address 14.1.1.5 255.255.255.0

[P2-Ten-GigabitEthernet3/1/2] ipv6 address 14::5 64

[P2-Ten-GigabitEthernet3/1/2] isis ipv6 enable 1

[P2-Ten-GigabitEthernet3/1/2] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[P2] interface loopback 0

[P2-LoopBack0] ip address 5.5.5.5 255.255.255.255

[P2-LoopBack0] ipv6 address 5::5 128

[P2-LoopBack0] isis ipv6 enable 1

[P2-LoopBack0] quit

# 配置BGP协议。

[P2] bgp 200

[P2-bgp-default] router-id 5.5.5.5

[P2-bgp-default] peer 4::4 as-number 200

[P2-bgp-default] peer 4::4 connect-interface LoopBack 0

[P2-bgp-default] peer 6::6 as-number 200

[P2-bgp-default] peer 6::6 connect-interface LoopBack 0

[P2-bgp-default] address-family ipv6

[P2-bgp-default-ipv6] peer 4::4 enable

[P2-bgp-default-ipv6] peer 6::6 enable

[P2-bgp-default-ipv6] quit

[P2–bgp-default] quit

(6)     配置PE 2

# 配置全局Router ID。

<PE2> system-view

[PE2] router id 6.6.6.6

# 配置IPv6 IS-IS协议。

[PE2] isis 1

[PE2-isis-1] is-level level-2

[PE2-isis-1] cost-style wide

[PE2-isis-1] network-entity 10.0000.0000.0006.00

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

# 配置LoopBack0接口的IP地址,并使能IS-IS。

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 6.6.6.6 32

[PE2-LoopBack0] ipv6 address 6::6 128

[PE2-LoopBack0] isis ipv6 enable 1

[PE2-LoopBack0] quit

# 配置静态路由。

[PE2] ipv6 route-static 1::1 128 15::5

# 配置SRv6。

[PE2] segment-routing ipv6

[PE2-segment-routing-ipv6] encapsulation source-address 66::66

[PE2-segment-routing-ipv6] locator aaa ipv6-prefix 6:2:: 96 static 8

[PE2-segment-routing-ipv6] quit

# 配置PE2加入BIER子域0、BFR ID为6、BFR prefix为LoopBack口0的IPv6地址。

[PE2] bier

[PE2-bier] sub-domain 0 ipv6

[PE2-bier-sub-domain-0-ipv6] bfr-id 6

[PE2-bier-sub-domain-0-ipv6] bfr-prefix interface LoopBack 0

# 配置BIER封装类型为G-BIER,封装的BSL为128、Max-SI为32。

[PE2-bier-sub-domain-0-ipv6] encapsulation-type g-bier bsl 128 max-si 32

# 配置组播策略预留地址为5006::1。

[PE2-bier-sub-domain-0-ipv6] g-bier mpra 5006::1

# 配置组播服务前缀。

[PE1] multicast-service-prefix ms1 ipv6-prefix 1234:6:: 64 service-id-length 10

# 创建VPN实例a,并为其配置RD和Route Target。

[PE2] ip vpn-instance a

[PE2-vpn-instance-a] route-distinguisher 100:6

[PE2-vpn-instance-a] vpn-target 100:1 export-extcommunity

[PE2-vpn-instance-a] vpn-target 100:1 import-extcommunity

[PE2-vpn-instance-a] quit

# 使能VPN实例a中的IP组播路由。

[PE2] multicast routing vpn-instance a

[PE2-mrib-a] quit

# 使能VPN实例a中的IPv6组播路由。

[PE2] ipv6 multicast routing vpn-instance a

[PE2-mrib6-a] quit

# 创建VPN实例a的BIER模式MVPN,进入MVPN IPv4地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2] multicast-vpn vpn-instance a mode bier

[PE2-mvpn-a] address-family ipv4

[PE2-mvpn-a-ipv4] source loopback 0

[PE2-mvpn-a-ipv4] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv4] auto-discovery inter-as

[PE2-mvpn-a-ipv4] tunnel-source multicast-service-prefix ms1 service-id 13

[PE2-mvpn-a-ipv4] quit

# 进入MVPN IPv6地址族视图,依次创建动态模式的相容性隧道和选择性隧道。

[PE2-mvpn-a] address-family ipv6

[PE2-mvpn-a-ipv6] source loopback 0

[PE2-mvpn-a-ipv6] inclusive-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] selective-tunnel dynamic sub-domain 0 bsl 128

[PE2-mvpn-a-ipv6] auto-discovery inter-as

[PE2-mvpn-a-ipv6] tunnel-source multicast-service-prefix ms1 service-id 15

[PE2-mvpn-a-ipv6] quit

[PE2-mvpn-a] quit

# 将接口Ten-GigabitEthernet3/1/2与VPN实例a进行关联,配置IP地址,并使能PIM-SM/IGMP/MLD。

[PE2] interface Ten-GigabitEthernet3/1/2

[PE2-Ten-GigabitEthernet3/1/2] port link-mode route

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance a

[PE2-Ten-GigabitEthernet3/1/2] ip address 7.13.1.12 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 100:3:3::2 64

[PE2-Ten-GigabitEthernet3/1/2] pim sm

[PE2-Ten-GigabitEthernet3/1/2] ipv6 pim sm

[PE2-Ten-GigabitEthernet3/1/2] igmp enable

[PE2-Ten-GigabitEthernet3/1/2] mld enable

[PE2-Ten-GigabitEthernet3/1/2] quit

# 在接口Ten-GigabitEthernet3/1/1上配置IP地址,并使能IS-IS。

[PE2] interface Ten-GigabitEthernet3/1/1

[PE2-Ten-GigabitEthernet3/1/1] port link-mode route

[PE2-Ten-GigabitEthernet3/1/1] ip address 15.1.1.6 255.255.255.0

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 15::6 64

[PE2-Ten-GigabitEthernet3/1/1] isis ipv6 enable 1

[PE2-Ten-GigabitEthernet3/1/1] quit

# 配置BGP协议。

[PE2] bgp 200

[PE2-bgp-default] router-id 6.6.6.6

[PE2-bgp-default] peer 1::1 as-number 100

[PE2-bgp-default] peer 1::1 connect-interface loopback 0

[PE2-bgp-default] peer 1::1 ebgp-max-hop 10

[PE2-bgp-default] peer 4::4 as-number 200

[PE2-bgp-default] peer 4::4 connect-interface LoopBack 0

[PE2-bgp-default] peer 5::5 as-number 200

[PE2-bgp-default] peer 5::5 connect-interface LoopBack 0

[PE2-bgp-default] address-family ipv4 mvpn

[PE2-bgp-default-mvpn] peer 1::1 enable

[PE2-bgp-default-mvpn] quit

[PE2-bgp-default] address-family ipv6 mvpn

[PE2-bgp-default-mvpn-ipv6] peer 1::1 enable

[PE2-bgp-default-mvpn-ipv6] quit

[PE2-bgp-default] address-family vpnv4

[PE2-bgp-default-vpnv4] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv4] peer 1::1 enable

[PE2-bgp-default-vpnv4] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv4] quit

[PE2-bgp-default] address-family ipv6

[PE2-bgp-default-ipv6] bier enable

[PE2-bgp-default-ipv6] peer 4::4 enable

[PE2-bgp-default-ipv6] peer 4::4 capability bier

[PE2-bgp-default-ipv6] peer 5::5 enable

[PE2-bgp-default-ipv6] advertise srv6 locator aaa

[PE2-bgp-default-ipv6] quit

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] mvpn-advertise-rt-import

[PE2-bgp-default-vpnv6] peer 1::1 enable

[PE2-bgp-default-vpnv6] peer 1::1 prefix-sid

[PE2-bgp-default-vpnv6] quit

[PE2–bgp-default] ip vpn-instance a

[PE2-bgp-default-a] address-family ipv4 unicast

[PE2-bgp-default-ipv4-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv4-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv4-a] import-route direct

[PE2-bgp-default-ipv4-a] quit

[PE2-bgp-default-a] address-family ipv6 unicast

[PE2-bgp-default-ipv6-a] segment-routing ipv6 locator aaa

[PE2-bgp-default-ipv6-a] segment-routing ipv6 best-effort

[PE2-bgp-default-ipv6-a] import-route direct

[PE2-bgp-default-ipv6-a] quit

[PE2-bgp-default-a] quit

[PE2–bgp-default] quit

# 配置IS-IS通告locator aaa。

[PE2] isis 1

[PE2-isis-1] address-family ipv6 unicast

[PE2-isis-1-ipv6] segment-routing ipv6 locator aaa

[PE2-isis-1-ipv6] quit

[PE2-isis-1] quit

4. 验证配置

# 查看BGP路由表下携带正确的BIER BFR-ID-Range信息。

[ASBR1] display bgp routing-table ipv6 4::4 128

 

 BGP local router ID: 3.3.3.3

 Local AS number: 100

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 4::4/128:

 From            : 113::4 (4.4.4.4)

 Rely nexthop    : 113::4

 Original nexthop: 113::4

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h01m14s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 4, G-BIER encap><BSL info: [128,32]

                   ><MPRA 5004::1>

 AS-path         : 200

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

[ASBR2] display bgp routing-table ipv6 3::3 128

 

 BGP local router ID: 4.4.4.4

 Local AS number: 200

 

 Paths:   1 available, 1 best

 

 BGP routing table information of 3::3/128:

 From            : 113::3 (3.3.3.3)

 Rely nexthop    : 113::3

 Original nexthop: 113::3

 Out interface   : Ten-GigabitEthernet3/1/1

 Route age       : 00h00m04s

 OutLabel        : NULL

 RxPathID        : 0x0

 TxPathID        : 0x0

 BIER Path       : <Sub-domain ID 0, BFR-ID 3, G-BIER encap><BSL info: [128,32]

                   ><MPRA 5003::1><BFR-ID range, count 3, [1, 1],[4, 4],[6, 6]>

 AS-path         : 100

 Origin          : incomplete

 Attribute value : MED 0, pref-val 0

 State           : valid, external, best

 IP precedence   : N/A

 QoS local ID    : N/A

 Traffic index   : N/A

 Tunnel policy   : NULL

 Rely tunnel IDs : N/A

# 查看PE 1的域内BIRT表项。

[PE1] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 1

    BFR prefix: 1::1(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 3

    BFR prefix: 3::3

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 3::3

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::424B:FF:FECA:1C06                                   Invalid

# 查看PE 1的域外BIRT表项。

[PE1] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 4

      BFR prefix: 3::3

        AS: 100

        Protocol: IBGP

        Preference: --

 

    BFR ID: 6

      BFR prefix: 3::3

        AS: 100

        Protocol: IBGP

        Preference: --

# 查看PE 2的域内BIRT表项。

[PE2] display bier routing-table

  Sub-domain 0

  Total BFERs: 2

    BFR ID: 6

    BFR prefix: 6::6(Local)

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: N/A

 

    BFR ID: 4

    BFR prefix: 4::4

    PHP: Disabled

    Flag: Active

    BFR-conflicted nodes: N/A

    BFR neighbors: 1

      BFR prefix: 4::4

      NBRFlag:

      Next hop list:

      Out interface            Next hop                                       NhFlag     Token

      XGE3/1/1                 FE80::4255:82FF:FEF0:608                                  Invalid

# 查看PE 2的域外BIRT表项。

[PE2] display bier inter-as routing-table

 

  Sub-domain 0

    BFR ID: 1

      BFR prefix: 3::3

        AS: 100

        Protocol: IBGP

        Preference: --

 

    BFR ID: 3

      BFR prefix: 3::3

        AS: 100

        Protocol: IBGP

        Preference: --

 

 

不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!

新华三官网
联系我们