vrf 穿越小实验
1 物理拓扑图
2 逻辑拓扑图
step 1：
配置vrf，ip 地址，vlan，测试互通
r1，和s2 部分配置，其他接口类似
#R1 ,R3,S2 ip vpn-instance a ipv4-family route-distinguisher 1:1 # ip vpn-instance b ipv4-family route-distinguisher 2:2 # R1: interface GigabitEthernet0/0/0.10 dot1q termination vid 112 ip binding vpn-instance a ip address 10.0.12.1 255.255.255.0 arp broadcast enable # S2: interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 2 to 4094 interface Vlanif112 ip binding vpn-instance a ip address 10.0.12.2 255.255.255.0 # test： <r1>ping -vpn-instance a 10.0.12.2 PING 10.0.12.2: 56 data bytes, press CTRL_C to break Reply from 10.0.12.2: bytes=56 Sequence=1 ttl=255 time=50 ms Reply from 10.0.12.2: bytes=56 Sequence=2 ttl=255 time=30 ms
step 2：
r1 vrouter1 lo1 配置ip 10.0.0.1
r1 vrouter2 lo2 配置ip 20.0.0.1
r3 vrouter1 lo1 配置ip 10.0.0.3
r3 vrouter2 lo2 配置ip 20.0.0.3
# r1 vrouter1 lo1 配置ip 10.0.0.1 interface LoopBack1 ip binding vpn-instance a ip address 10.0.0.1 255.255.255.255
step 3：
静态路由实现 流量如下：
<r1>disp cu | in ip route-s ip route-static vpn-instance a 10.0.0.3 255.255.255.255 10.0.12.2 ip route-static vpn-instance a 10.0.23.0 255.255.255.0 10.0.12.2 [s2]disp cu | in ip rou ip route-static vpn-instance a 10.0.0.1 255.255.255.255 10.0.12.1 ip route-static vpn-instance a 10.0.0.3 255.255.255.255 10.0.23.3 <r3>disp cu | in ip rou ip route-static vpn-instance a 10.0.0.1 255.255.255.255 10.0.23.2 ip route-static vpn-instance a 10.0.12.0 255.255.255.0 10.0.23.2
[r1]ping -vpn-instance a -a 10.0.0.1 10.0.0.3
PING 10.0.0.3: 56 data bytes, press CTRL_C to break
Reply from 10.0.0.3: bytes=56 Sequence=1 ttl=254 time=40 ms
Reply from 10.0.0.3: bytes=56 Sequence=2 ttl=254 time=60 ms
step 4：不同vrf之间穿越
静态路由实现 流量如下：
[r1]disp cu | include ip route-s ip route-static vpn-instance a 20.0.0.3 255.255.255.255 10.0.12.2 ip route-static vpn-instance a 20.0.23.0 255.255.255.0 10.0.12.2 [s2]disp cu | in ip route-s ip route-static vpn-instance a 10.0.0.1 255.255.255.255 10.0.12.1 ip route-static vpn-instance a 20.0.0.3 255.255.255.255 vpn-instance b 20.0.23.3 ip route-static vpn-instance a 20.0.23.0 255.255.255.0 vpn-instance b 20.0.23.3 ip route-static vpn-instance b 10.0.0.1 255.255.255.255 vpn-instance a 10.0.12.1 [r3]disp cu | in ip route-s ip route-static vpn-instance b 10.0.0.1 255.255.255.255 20.0.23.2 ip route-static vpn-instance b 10.0.12.0 255.255.255.0 20.0.23.2
[r1]ping -vpn-instance a -a 10.0.0.1 20.0.0.3
PING 20.0.0.3: 56 data bytes, press CTRL_C to break
Reply from 20.0.0.3: bytes=56 Sequence=1 ttl=254 time=70 ms
Reply from 20.0.0.3: bytes=56 Sequence=2 ttl=254 time=60 ms
下面是全局表和vrf之间的穿越
R3 路由表如下：
ip route-static 4.4.4.4 255.255.255.255 vpn-instance a 10.0.34.4 ip route-static vpn-instance a 5.5.5.5 255.255.255.255 GigabitEthernet0/0/2 10.0.35.5
<r4>PING -A 4.4.4.4 5.5.5.5
PING 5.5.5.5: 56 data bytes, press CTRL_C to break
Reply from 5.5.5.5: bytes=56 Sequence=1 ttl=254 time=20 ms
Reply from 5.5.5.5: bytes=56 Sequence=2 ttl=254 time=30 ms
