VRF static route 与VRF ospf

 

要求：

1、PC1 能与sales 网络通讯；

2、PC2 能与production 网络通讯；

3、PC1 不能访问producton,PC2 不能访问sales;

使用vrf 功能实现；

实际：

PC1 的192.168.1.10能访问10.1.1.1 但是不能访问10.2.2.2；

PC2 的192.168.1.10能访问10.2.2.2 但是不能访问10.1.1.1；

 

组网图：

 

配置命令：

LSW1:

vlan batch 10 20

interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 10
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 20
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 10 20
#

R1:

interface GigabitEthernet0/0/0
 ip address 10.0.13.1 255.255.255.0 

#
interface LoopBack0
 ip address 10.1.1.1 255.255.255.255 

#
ip route-static 192.168.1.0 255.255.255.0 10.0.13.3

 

R2:

interface GigabitEthernet0/0/0
 ip address 10.0.23.2 255.255.255.0 
#
interface GigabitEthernet0/0/1
#
interface NULL0
#
interface LoopBack0
 ip address 10.2.2.2 255.255.255.255 
#
ospf 1 
 area 0.0.0.0 
  network 10.0.23.0 0.0.0.255 
  network 10.2.2.2 0.0.0.0 

R4:

interface GigabitEthernet0/0/0
 ip binding vpn-instance sales
 ip address 10.0.13.3 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip binding vpn-instance production
 ip address 10.0.23.3 255.255.255.0 

#
interface GigabitEthernet0/0/2.10
 dot1q termination vid 10
 ip binding vpn-instance sales
 ip address 192.168.1.254 255.255.255.0 
 arp broadcast enable
#
interface GigabitEthernet0/0/2.20
 dot1q termination vid 20
 ip binding vpn-instance production
 ip address 192.168.1.254 255.255.255.0 
 arp broadcast enable

# 
ospf 1 router-id 10.3.3.3 vpn-instance production
 area 0.0.0.0 
  network 10.0.23.0 0.0.0.255 
  network 10.3.3.3 0.0.0.0 
  network 192.168.1.0 0.0.0.255 
#
ip route-static vpn-instance sales 10.0.13.0 255.255.255.0 10.0.13.1
ip route-static vpn-instance sales 10.1.1.1 255.255.255.255 10.0.13.1

 

测试结果：

1、PC1 ping 10.1.1.1

 PC1 ping 10.2.2.2

3、PC2 ping 10.1.1.1

 

4、PC2 ping 10.2.2.2

 

VRF 设备R4 的路由表：