6vPE场景下IPv6用户采用PPPoE接入典型配置

6vPE即IPv6 MPLS L3VPN,其典型组网环境如图-1所示。6vPE组网中,服务提供商骨干网为IPv4网络。VPN内部及CE和PE之间运行IPv6协议,骨干网中PE和P设备之间运行IPv4协议。PE需要同时支持IPv4和IPv6协议,连接CE的接口上使用IPv6协议,连接骨干网的接口上使用IPv4协议。

PE从CE接收到IPv6路由后,为其分配私网标签,并通过VPNv6路由将私网标签和IPv6路由信息发布给远端PE。PE通过IPv4骨干网转发IPv6报文时,为IPv6报文封装私网标签,以实现在IPv4网络上透明传输IPv6报文,达到IPv6网络通过IPv4网络互通的目的。

图-1 6vPE应用组网图

组网需求

图-2所示:

IPv6用户终端Host通过CE 2连接到PE 1设备,CE 2作为PPPoE client发起PPPoE连接后,PE 1作为PPPoE server通过DHCPv6协议给CE 1分配代理前缀,CE 1再通过代理前缀给下面的主机分配IPv6地址,接入并通过认证后,可以访问属于同一站点的VPN设备。

图-2 6vPE场景下IPv6用户采用PPPoE接入配置组网图

设备

接口

IP地址

设备

接口

IP地址

CE 1

XGE3/1/1

2001:1::1/64

P

Loop0

2.2.2.9/32

PE 1

Loop0

1.1.1.9/32

XGE3/1/4

10.1.1.2/24

XGE3/1/1

2001:1::2/64

XGE3/1/5

10.2.1.1/24

XGE3/1/2

2001:2::2/64

PE 2

Loop0

3.3.3.9/32

XGE3/1/4

10.1.1.1/24

XGE3/1/1

2001:3::2/64

CE 2

XGE3/1/1

2001:2::1/64

XGE3/1/2

2001:4::2/64

CE 3

XGE3/1/1

2001:3::1/64

XGE3/1/4

10.2.1.2/24

CE 4

XGE3/1/1

2001:4::1/64

配置思路

采用如下的思路进行配置:

配置准备

配置各接口的IPv6地址及IPv4地址。

配置步骤

MPLS骨干网上配置IGP协议,实现骨干网PE和P的互通

# 配置PE 1。

<PE1> system-view

[PE1] interface loopback 0

[PE1-LoopBack0] ip address 1.1.1.9 32

[PE1-LoopBack0] quit

[PE1] interface ten-gigabitethernet 3/1/4

[PE1-Ten-GigabitEthernet3/1/4] ip address 10.1.1.1 24

[PE1-Ten-GigabitEthernet3/1/4] quit

[PE1] ospf

[PE1-ospf-1] area 0

[PE1-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255

[PE1-ospf-1-area-0.0.0.0] network 1.1.1.9 0.0.0.0

[PE1-ospf-1-area-0.0.0.0] quit

[PE1-ospf-1] quit

# 配置P。

<P> system-view

[P] interface loopback 0

[P-LoopBack0] ip address 2.2.2.9 32

[P-LoopBack0] quit

[P] interface ten-gigabitethernet 3/1/4

[P-Ten-GigabitEthernet3/1/4] ip address 10.1.1.2 24

[P-Ten-GigabitEthernet3/1/4] quit

[P] interface ten-gigabitethernet 3/1/5

[P-Ten-GigabitEthernet3/1/5] ip address 10.2.1.1 24

[P-Ten-GigabitEthernet3/1/5] quit

[P] ospf

[P-ospf-1] area 0

[P-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255

[P-ospf-1-area-0.0.0.0] network 10.2.1.0 0.0.0.255

[P-ospf-1-area-0.0.0.0] network 2.2.2.9 0.0.0.0

[P-ospf-1-area-0.0.0.0] quit

[P-ospf-1] quit

# 配置PE 2。

<PE2> system-view

[PE2] interface loopback 0

[PE2-LoopBack0] ip address 3.3.3.9 32

[PE2-LoopBack0] quit

[PE2] interface ten-gigabitethernet 3/1/4

[PE2-Ten-GigabitEthernet3/1/4] ip address 10.2.1.2 24

[PE2-Ten-GigabitEthernet3/1/4] quit

[PE2] ospf

[PE2-ospf-1] area 0

[PE2-ospf-1-area-0.0.0.0] network 10.2.1.0 0.0.0.255

[PE2-ospf-1-area-0.0.0.0] network 3.3.3.9 0.0.0.0

[PE2-ospf-1-area-0.0.0.0] quit

[PE2-ospf-1] quit

MPLS骨干网上配置MPLS基本能力和MPLS LDP,建立LDP LSP

# 配置PE 1。

[PE1] mpls lsr-id 1.1.1.9

[PE1] mpls ldp

[PE1-ldp] quit

[PE1] interface ten-gigabitethernet 3/1/4

[PE1-Ten-GigabitEthernet3/1/4] mpls enable

[PE1-Ten-GigabitEthernet3/1/4] mpls ldp enable

[PE1-Ten-GigabitEthernet3/1/4] quit

# 配置P。

[P] mpls lsr-id 2.2.2.9

[P] mpls ldp

[P-ldp] quit

[P] interface ten-gigabitethernet 3/1/4

[P-Ten-GigabitEthernet3/1/4] mpls enable

[P-Ten-GigabitEthernet3/1/4] mpls ldp enable

[P-Ten-GigabitEthernet3/1/4] quit

[P] interface ten-gigabitethernet 3/1/5

[P-Ten-GigabitEthernet3/1/5] mpls enable

[P-Ten-GigabitEthernet3/1/5] mpls ldp enable

[P-Ten-GigabitEthernet3/1/5] quit

# 配置PE 2。

[PE2] mpls lsr-id 3.3.3.9

[PE2] mpls ldp

[PE2-ldp] quit

[PE2] interface ten-gigabitethernet 3/1/4

[PE2-Ten-GigabitEthernet3/1/4] mpls enable

[PE2-Ten-GigabitEthernet3/1/4] mpls ldp enable

[PE2-Ten-GigabitEthernet3/1/4] quit

PE设备上配置IPv6 VPN实例,将CE接入PE,并配置CE的接口IP地址

# 配置PE 1。

[PE1] ip vpn-instance vpn1

[PE1-vpn-instance-vpn1] route-distinguisher 100:1

[PE1-vpn-instance-vpn1] vpn-target 111:1

[PE1-vpn-instance-vpn1] quit

[PE1] ip vpn-instance vpn2

[PE1-vpn-instance-vpn2] route-distinguisher 100:2

[PE1-vpn-instance-vpn2] vpn-target 222:2

[PE1-vpn-instance-vpn2] quit

[PE1] interface ten-gigabitethernet 3/1/1

[PE1-Ten-GigabitEthernet3/1/1] ip binding vpn-instance vpn1

[PE1-Ten-GigabitEthernet3/1/1] ipv6 address 2001:1::2 64

[PE1-Ten-GigabitEthernet3/1/1] quit

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ip binding vpn-instance vpn2

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address 2001:2::2 64

[PE1-Ten-GigabitEthernet3/1/2] quit

# 配置PE 2。

[PE2] ip vpn-instance vpn1

[PE2-vpn-instance-vpn1] route-distinguisher 200:1

[PE2-vpn-instance-vpn1] vpn-target 111:1

[PE2-vpn-instance-vpn1] quit

[PE2] ip vpn-instance vpn2

[PE2-vpn-instance-vpn2] route-distinguisher 200:2

[PE2-vpn-instance-vpn2] vpn-target 222:2

[PE2-vpn-instance-vpn2] quit

[PE2] interface ten-gigabitethernet 3/1/1

[PE2-Ten-GigabitEthernet3/1/1] ip binding vpn-instance vpn1

[PE2-Ten-GigabitEthernet3/1/1] ipv6 address 2001:3::2 64

[PE2-Ten-GigabitEthernet3/1/1] quit

[PE2] interface ten-gigabitethernet 3/1/2

[PE2-Ten-GigabitEthernet3/1/2] ip binding vpn-instance vpn2

[PE2-Ten-GigabitEthernet3/1/2] ipv6 address 2001:4::2 64

[PE2-Ten-GigabitEthernet3/1/2] quit

# 配置CE 1的接口IP地址。

<CE1> system

[CE1] interface ten-gigabitethernet 3/1/1

[CE1-Ten-GigabitEthernet3/1/1] ipv6 address 2001:1::1 64

[CE1-Ten-GigabitEthernet3/1/1] quit

# 配置CE 2的接口IP地址。

<CE2> system

[CE2] interface ten-gigabitethernet 3/1/1

[CE2-Ten-GigabitEthernet3/1/1] ipv6 address 2001:2::1 64

[CE2-Ten-GigabitEthernet3/1/1] quit

# 配置CE 3的接口IP地址。

<CE3> system

[CE3] interface ten-gigabitethernet 3/1/1

[CE3-Ten-GigabitEthernet3/1/1] ipv6 address 2001:3::1 64

[CE3-Ten-GigabitEthernet3/1/1] quit

# 配置CE 4的接口IP地址。

<CE4> system

[CE4] interface ten-gigabitethernet 3/1/1

[CE4-Ten-GigabitEthernet3/1/1] ipv6 address 2001:4::1 64

[CE4-Ten-GigabitEthernet3/1/1] quit

在PE与CE之间建立EBGP对等体,引入VPN路由

# 配置CE 1。

[CE1] bgp 65410

[CE1-bgp-default] peer 2001:1::2 as-number 100

[CE1-bgp-default] address-family ipv6 unicast

[CE1-bgp-default-ipv6] peer 2001:1::2 enable

[CE1-bgp-default-ipv6] import-route direct

[CE1-bgp-default-ipv6] quit

[CE1-bgp-default] quit

# 配置CE 2。

[CE1] bgp 65420

[CE1-bgp-default] peer 2001:2::2 as-number 100

[CE1-bgp-default] address-family ipv6 unicast

[CE1-bgp-default-ipv6] peer 2001:2::2 enable

[CE1-bgp-default-ipv6] import-route direct

[CE1-bgp-default-ipv6] quit

[CE1-bgp-default] quit

# 配置CE 3。

[CE1] bgp 65430

[CE1-bgp-default] peer 2001:3::2 as-number 100

[CE1-bgp-default] address-family ipv6 unicast

[CE1-bgp-default-ipv6] peer 2001:3::2 enable

[CE1-bgp-default-ipv6] import-route direct

[CE1-bgp-default-ipv6] quit

[CE1-bgp-default] quit

# 配置CE 4。

[CE1] bgp 65440

[CE1-bgp-default] peer 2001:4::2 as-number 100

[CE1-bgp-default] address-family ipv6 unicast

[CE1-bgp-default-ipv6] peer 2001:4::2 enable

[CE1-bgp-default-ipv6] import-route direct

[CE1-bgp-default-ipv6] quit

[CE1-bgp-default] quit

# 配置PE 1。

[PE1] bgp 100

[PE1-bgp-default] ip vpn-instance vpn1

[PE1-bgp-default-vpn1] peer 2001:1::1 as-number 65410

[PE1-bgp-default-vpn1] address-family ipv6 unicast

[PE1-bgp-default-ipv6-vpn1] peer 2001:1::1 enable

[PE1-bgp-default-ipv6-vpn1] quit

[PE1-bgp-default-vpn1] quit

[PE1-bgp-default] ip vpn-instance vpn2

[PE1-bgp-default-vpn2] peer 2001:2::1 as-number 65420

[PE1-bgp-default-vpn2] address-family ipv6 unicast

[PE1-bgp-default-ipv6-vpn2] peer 2001:2::1 enable

[PE1-bgp-default-ipv6-vpn2] quit

[PE1-bgp-default-vpn2] quit

[PE1-bgp-default] quit

# 配置PE 2。

[PE1] bgp 100

[PE1-bgp-default] ip vpn-instance vpn1

[PE1-bgp-default-vpn1] peer 2001:3::1 as-number 65430

[PE1-bgp-default-vpn1] address-family ipv6 unicast

[PE1-bgp-default-ipv6-vpn1] peer 2001:3::1 enable

[PE1-bgp-default-ipv6-vpn1] quit

[PE1-bgp-default-vpn1] quit

[PE1-bgp-default] ip vpn-instance vpn2

[PE1-bgp-default-vpn2] peer 2001:4::1 as-number 65440

[PE1-bgp-default-vpn2] address-family ipv6 unicast

[PE1-bgp-default-ipv6-vpn2] peer 2001:4::1 enable

[PE1-bgp-default-ipv6-vpn2] quit

[PE1-bgp-default-vpn2] quit

[PE1-bgp-default] quit

在PE之间建立MP-IBGP对等体

# 配置PE 1。

[PE1] bgp 100

[PE1-bgp-default] peer 3.3.3.9 as-number 100

[PE1-bgp-default] peer 3.3.3.9 connect-interface loopback 0

[PE1-bgp-default] address-family vpnv6

[PE1-bgp-default-vpnv6] peer 3.3.3.9 enable

[PE1-bgp-default-vpnv6] quit

[PE1-bgp-default] quit

# 配置PE 2。

[PE2] bgp 100

[PE2-bgp-default] peer 1.1.1.9 as-number 100

[PE2-bgp-default] peer 1.1.1.9 connect-interface loopback 0

[PE2-bgp-default] address-family vpnv6

[PE2-bgp-default-vpnv6] peer 1.1.1.9 enable

[PE2-bgp-default-vpnv6] quit

[PE2-bgp-default] quit

在PE 1上配置PPPoE server

# 配置虚拟模板接口1的参数,采用CHAP认证对端。

<PE1> system-view

[PE1] interface virtual-template 1

[PE1-Virtual-Template1] ppp authentication-mode chap domain default enable dm1

# 取消对RA消息发布的抑制。

[PE1-Virtual-Template1] undo ipv6 nd ra halt

[PE1-Virtual-Template1] quit

# 在Ten-GigabitEthernet3/1/2接口上配置本端自动生成IPv6链路本地地址。

[PE1] interface ten-gigabitethernet 3/1/2

[PE1-Ten-GigabitEthernet3/1/2] ipv6 address auto link-local

# 取消对RA消息发布的抑制。

[PE1-Ten-GigabitEthernet3/1/2] undo ipv6 nd ra halt

# 配置接口工作在DHCPv6服务器模式。

[PE1-Ten-GigabitEthernet3/1/2] ipv6 dhcp select server

# 在Ten-GigabitEthernet3/1/2接口上启用PPPoE server协议,将该以太网接口与虚拟模板接口1绑定。

[PE1-Ten-GigabitEthernet3/1/2] pppoe-server bind virtual-template 1

# 在Ten-GigabitEthernet3/1/1接口上指定漫游域dm1,如果从接口上线的用户需要使用用户名中携带的ISP域进行认证,但该域在设备上不存在,则可以通过接口上指定的漫游域作为用户的归属域进行认证。

[PE1-Ten-GigabitEthernet3/1/2] aaa roam-domain dm1

[PE1-Ten-GigabitEthernet3/1/2] quit

# 配置DHCPv6前缀池6,包含的前缀为2003::/32,分配的前缀长度为42。

[PE1] ipv6 dhcp prefix-pool 6 prefix 2003::/32 assign-len 42

# 创建名称为pool1的IPv6地址池,在地址池下引用前缀池6。

[PE1] ipv6 pool pool1

[PE1-ipv6-pool-pool1] prefix-pool 6 export-route

[PE1-ipv6-pool-pool1] quit

# 配置PPPoE用户。

[PE1] local-user user1 class network

[PE1-luser-network-user1] password simple 123456TESTplat&!

[PE1-luser-network-user1] service-type ppp

[PE1-luser-network-user1] quit

# 在ISP域下配置使用本地AAA方案,并为用户授权地址池属性。

[PE1] domain name dm1

[PE1-isp-dm1] authentication ppp local

[PE1-isp-dm1] accounting ppp local

[PE1-isp-dm1] authorization ppp local

[PE1-isp-dm1] authorization-attribute ipv6-pool pool1

[PE1-isp-dm1] quit

在CE 2上配置PPPoE client

  • 本设备(本例中为PE1)仅支持作为PPPoE Server,不支持作为PPPoE Client。

  • 担任PPPoE Client角色的产品的不同版本的配置命令可能存在差异,本节配置仅供参考,有关PPPoE Client上配置的详细介绍,请参见担任PPPoE Client角色的设备的产品手册。

# 在Dialer1接口上开启共享DDR。

[CE2] interface dialer 1

[CE2-Dialer1] dialer bundle enable

# 配置CE2被PE1以CHAP方式认证时CE2发送的CHAP用户名和密码。

[CE2-Dialer1] ppp chap user user1

[CE2-Dialer1] ppp chap password simple 123456TESTplat&!

# 配置PPPoE client工作在永久在线模式。

[CE2-Dialer1] dialer timer idle 0

# 配置DDR自动拨号的间隔时间为60秒。

[CE2-Dialer1] dialer timer autodial 60

# 配置Dialer1接口作为DHCPv6客户端,通过DHCPv6方式获取IPv6地址和其他网络配置参数。

[CE2-Dialer1] ipv6 address dhcp-alloc

# 配置Dialer1接口作为DHCPv6客户端,通过DHCPv6方式获取IPv6前缀和其他网络配置参数;指定获取到IPv6前缀后,创建编号为1的IPv6前缀,该前缀编号1对应的IPv6前缀为DHCPv6客户端获取到的前缀。

[CE2-Dialer1] ipv6 dhcp client pd 1

[CE2-Dialer1] quit

# 配置一个PPPoE会话,该会话对应Dialer bundle 1(Dialer bundle 1对应Dialer1接口)。

[CE2] interface ten-gigabitethernet 3/1/1

[CE2-Ten-GigabitEthernet3/1/1] pppoe-client dial-bundle-number 1

[CE2-Ten-GigabitEthernet3/1/1] quit

# 配置缺省路由。

[CE2] ipv6 route-static :: 0 dialer 1

# 接口Ten-GigabitEthernet3/1/2上取消对RA消息发布的抑制。

[CE2] interface ten-gigabitethernet 3/1/2

[CE2-Ten-GigabitEthernet3/1/2] undo ipv6 nd ra halt

# 在接口Ten-GigabitEthernet3/1/2上配置动态获取IPv6前缀的编号为1,即该接口将使用编号为1的前缀生成自己的IPv6地址2003::123:1:1(CE2下连用户需要将该地址设置为自己的网关地址),并将编号为1的IPv6前缀通过RA报文分配给终端设备。

[CE2-Ten-GigabitEthernet3/1/2] ipv6 address 1 123::123:1:1/64

[CE2-Ten-GigabitEthernet3/1/2] quit

验证配置

# 在PE设备上执行display ipv6 routing-table vpn-instance命令,可以看到去往对端CE的路由。

以PE 1为例:

[PE1] display ipv6 routing-table vpn-instance vpn1

Destinations : 5 Routes : 5

Destination: ::1/128 Protocol : Direct

NextHop : ::1 Preference: 0

Interface : InLoop0 Cost : 0

Destination: 2001:1::/64 Protocol : Direct

NextHop : :: Preference: 0

Interface : XGE3/1/1 Cost : 0

Destination: 2001:1::2/128 Protocol : Direct

NextHop : ::1 Preference: 0

Interface : InLoop0 Cost : 0

Destination: 2001:3::/64 Protocol : BGP4+

NextHop : ::FFFF:3.3.3.9 Preference: 255

Interface : XGE3/1/4 Cost : 0

Destination: FE80::/10 Protocol : Direct

NextHop : :: Preference: 0

Interface : NULL0 Cost : 0

[PE1] display ipv6 routing-table vpn-instance vpn2

Destinations : 5 Routes : 5

Destination: ::1/128 Protocol : Direct

NextHop : ::1 Preference: 0

Interface : InLoop0 Cost : 0

Destination: 2001:2::/64 Protocol : Direct

NextHop : :: Preference: 0

Interface : XGE3/1/2 Cost : 0

Destination: 2001:2::2/128 Protocol : Direct

NextHop : ::1 Preference: 0

Interface : InLoop0 Cost : 0

Destination: 2001:4::/64 Protocol : BGP4+

NextHop : ::FFFF:3.3.3.9 Preference: 255

Interface : XGE3/1/4 Cost : 0

Destination: FE80::/10 Protocol : Direct

NextHop : :: Preference: 0

Interface : NULL0 Cost : 0

同一VPNCE能够相互Ping通,不同VPNCE不能相互Ping通。例如:CE 1能够PingCE 32001:3::1),但不能PingCE 42001:4::1

配置完成后,当CE2使用用户名user1、密码123456TESTplat&!,通过PPPoE接入PE1后,PE1通过DHCPv6协议为CE2分配一个代理前缀。

# 显示DHCPv6前缀绑定信息。

[PE1] display ipv6 dhcp server pd-in-use

Pool: pool1

IPv6 prefix Type Lease expiration

2003::/42 Auto(C) Jul 10 19:45:01 2019

以上信息表示,PE1通过DHCPv6协议为CE2分配一个代理前缀。

# 显示CE2上创建的IPv6前缀信息。

[CE1] display ipv6 prefix

Number Prefix Type

1 2003::/42 Dynamic

以上信息表示,CE2从PE1获取到代理前缀后,已根据ipv6 dhcp client pd 1配置创建了编号为1的IPv6前缀。

CE2把分配到的代理前缀2003::/42再分配给Host,Host用来生成IPv6全球单播地址。

配置文件

#

sysname CE1

#

interface Ten-GigabitEthernet3/1/1

ipv6 address 2001:1::1/64

#

bgp 65410

peer 2001:1::2 as-number 100

#

address-family ipv6 unicast

import-route direct

peer 2001:1::2 enable

#

#

sysname CE2

#

interface Dialer1

ppp chap password cipher $c$3$VITzjOQfYsmmIo5b+Fw9ta24zEmKC6PM2hL7X5RpWJixbQg=

ppp chap user user1

dialer bundle enable

dialer timer idle 0

dialer timer autodial 60

ipv6 address dhcp-alloc

ipv6 dhcp client pd 1

#

interface Ten-GigabitEthernet3/1/1

ipv6 address 2001:2::1/64

pppoe-client dial-bundle-number 1

#

interface Ten-GigabitEthernet3/1/2

ipv6 address 1 123::123:1:1/64

undo ipv6 nd ra halt

#

bgp 65420

peer 2001:2::2 as-number 100

#

address-family ipv6 unicast

import-route direct

peer 2001:2::2 enable

#

ipv6 route-static :: 0 Dialer1

#

#

sysname CE3

#

interface Ten-GigabitEthernet3/1/1

ipv6 address 2001:3::1/64

#

bgp 65430

peer 2001:3::2 as-number 100

#

address-family ipv6 unicast

import-route direct

peer 2001:3::2 enable

#

#

sysname CE4

#

system-working-mode standard

xbar load-single

password-recovery enable

lpu-type f-series

#

interface Ten-GigabitEthernet3/1/1

ipv6 address 2001:4::1/64

#

bgp 65440

peer 2001:4::2 as-number 100

#

address-family ipv6 unicast

import-route direct

peer 2001:4::2 enable

#

#

sysname PE1

#

ip vpn-instance vpn1

route-distinguisher 100:1

vpn-target 111:1 import-extcommunity

vpn-target 111:1 export-extcommunity

#

ip vpn-instance vpn2

route-distinguisher 100:2

vpn-target 222:2 import-extcommunity

vpn-target 222:2 export-extcommunity

#

ospf 1

area 0.0.0.0

network 1.1.1.9 0.0.0.0

network 10.1.1.0 0.0.0.255

#

mpls lsr-id 1.1.1.9

#

ipv6 dhcp prefix-pool 6 prefix 2003::/32 assign-len 42

#

ipv6 pool pool1

prefix-pool 6 export-route

#

mpls ldp

#

interface Virtual-Template1

ppp authentication-mode chap domain default enable dm1

undo ipv6 nd ra halt

#

interface LoopBack0

ip address 1.1.1.9 255.255.255.255

#

interface Ten-GigabitEthernet3/1/1

ip binding vpn-instance vpn1

ipv6 address 2001:1::2/64

#

interface Ten-GigabitEthernet3/1/2

aaa roam-domain dm1

ip binding vpn-instance vpn2

ipv6 dhcp select server

ipv6 address 2001:2::2/64

ipv6 address auto link-local

undo ipv6 nd ra halt

pppoe-server bind virtual-template 1

#

interface Ten-GigabitEthernet3/1/4

ip address 10.1.1.1 255.255.255.0

mpls enable

mpls ldp enable

#

bgp 100

peer 3.3.3.9 as-number 100

peer 3.3.3.9 connect-interface LoopBack0

#

address-family vpnv6

peer 3.3.3.9 enable

#

ip vpn-instance vpn1

peer 2001:1::1 as-number 65410

#

address-family ipv6 unicast

peer 2001:1::1 enable

#

ip vpn-instance vpn2

peer 2001:2::1 as-number 65420

#

address-family ipv6 unicast

peer 2001:2::1 enable

#

domain name dm1

authorization-attribute ipv6-pool pool1

authentication ppp local

authorization ppp local

accounting ppp local

#

local-user user1 class network

password cipher $c$3$nFfy12Sn41nTawPtSdpUMOwx0kjvzW7r1XzvKgVXqodMz+s=

service-type ppp

#

#

sysname PE2

#

ip vpn-instance vpn1

route-distinguisher 200:1

vpn-target 111:1 import-extcommunity

vpn-target 111:1 export-extcommunity

#

ip vpn-instance vpn2

route-distinguisher 200:2

vpn-target 222:2 import-extcommunity

vpn-target 222:2 export-extcommunity

#

ospf 1

area 0.0.0.0

network 3.3.3.9 0.0.0.0

network 10.2.1.0 0.0.0.255

#

mpls lsr-id 3.3.3.9

#

mpls ldp

#

interface LoopBack0

ip address 3.3.3.9 255.255.255.255

#

interface Ten-GigabitEthernet3/1/1

ip binding vpn-instance vpn1

ipv6 address 2001:3::2/64

#

interface Ten-GigabitEthernet3/1/2

ip binding vpn-instance vpn2

ipv6 address 2001:4::2/64

#

interface Ten-GigabitEthernet3/1/4

ip address 10.2.1.2 255.255.255.0

mpls enable

mpls ldp enable

#

bgp 100

peer 1.1.1.9 as-number 100

peer 1.1.1.9 connect-interface LoopBack0

#

address-family vpnv6

peer 1.1.1.9 enable

#

ip vpn-instance vpn1

peer 2001:3::1 as-number 65430

#

address-family ipv6 unicast

peer 2001:3::1 enable

#

ip vpn-instance vpn2

peer 2001:4::1 as-number 65440

#

#

sysname P

#

ospf 1

area 0.0.0.0

network 2.2.2.9 0.0.0.0

network 10.1.1.0 0.0.0.255

network 10.2.1.0 0.0.0.255

#

mpls lsr-id 2.2.2.9

#

mpls ldp

#

interface LoopBack0

ip address 2.2.2.9 255.255.255.255

#

interface Ten-GigabitEthernet3/1/4

ip address 10.1.1.2 255.255.255.0

mpls enable

mpls ldp enable

#

interface Ten-GigabitEthernet3/1/5

ip address 10.2.1.1 255.255.255.0

mpls enable

mpls ldp enable

#