Configuração de um mini backbone, utilizando multivendors cisco huawei com MPLS+OSPF+MP-BGP

Configuração base

No core do backbone é feito a configuração do igp usando ospfv2, após a configuração do ospf e feito a ativação do MPLS com o LDP (Label discovery protocol), ele é responsável por estabelecer um sessão e propagar as label do mpls.

Apos o estabelecimento das sessões ldp, o protocolo bgp junto com o vpnv4 (MP-BGP), ira entrar em cena propagando as rotas pertencentes as vrf dos PE'S

ROTA-PR-01#sh ip int brInterface IP-Address OK? Method Status ProtocolFastEthernet0/0 10.0.0.1 YES NVRAM up upFastEthernet1/0 10.0.0.5 YES NVRAM up upFastEthernet2/0 unassigned YES NVRAM administratively down downFastEthernet3/0 unassigned YES NVRAM administratively down downFastEthernet4/0 unassigned YES NVRAM administratively down downLoopback1 1.1.1.1 YES NVRAM up up

interface Loopback1ip address 1.1.1.1 255.255.255.255ip ospf 1 area 0!interface FastEthernet0/0ip address 10.0.0.1 255.255.255.252ip ospf 1 area 0duplex full!interface FastEthernet1/0ip address 10.0.0.5 255.255.255.252ip ospf 1 area 0duplex full
router ospf 1router-id 1.1.1.1mpls ldp autoconfig >>> configuraação global do mpls

[~ROTA-SP-NE40-PE]display current-configuration

!Software Version V800R011C00SPC607B607

!Last configuration was updated at 2021-06-07 01:31:28+00:00

#

sysname ROTA-SP-NE40-PE

#

ip vpn-instance CLIENTE_02

ipv4-family

route-distinguisher 111:111

vpn-target 111:111 export-extcommunity

vpn-target 111:111 import-extcommunity

ipv6-family

#

ip dcn vpn-instance __dcn_vpn__

ipv4-family

#

mpls lsr-id 4.4.4.4

#

mpls

#

mpls ldp

#

ipv4-family

#

interface Ethernet1/0/1

undo shutdown

ip address 10.0.0.13 255.255.255.252

ospf enable 1 area 0.0.0.0

mpls

mpls ldp

dcn

dcn mode vlan

interface Ethernet1/0/3

undo shutdown

ip address 10.0.0.9 255.255.255.252

ospf enable 1 area 0.0.0.0

mpls

mpls ldp >>> ativação do mpls na interface

dcn mode vlan

#

interface GigabitEthernet0/0/0

undo shutdown

#

interface LoopBack1

ip address 4.4.4.4 255.255.255.255

ospf enable 1 area 0.0.0.0

#

interface NULL0

#

bgp 4000

peer 1.1.1.1 as-number 1000

peer 1.1.1.1 ebgp-max-hop 3

peer 1.1.1.1 connect-interface LoopBack1

peer 192.168.50.2 as-number 65000

#

ipv4-family unicast

undo synchronization

peer 1.1.1.1 enable

peer 192.168.50.2 enable

#

ipv4-family vpnv4

policy vpn-target

peer 1.1.1.1 enable

#

ipv4-family vpn-instance CLIENTE_02

peer 192.168.50.2 as-number 65000

#

ospf 1 router-id 4.4.4.4

area 0.0.0.0

#

return

[~ROTA-SP-NE40-PE]

Configuração Firewall

FortiGate-VM64-KVM login: admin

Password:

Welcome !

FortiGate-VM64-KVM # config system interface

FortiGate-VM64-KVM (interface) # show

config system interface

edit "port1"

set vdom "root"

set allowaccess ping https ssh http fgfm

set type physical

set snmp-index 1

FortiGate-VM64-KVM (port1) # set ip 192.168.1.85 255.255.255.0

FortiGate-VM64-KVM (port1) # end

FortiGate-VM64-KVM # config router static

FortiGate-VM64-KVM (1) # set device port1

FortiGate-VM64-KVM (1) # set dst 0.0.0.0/0

FortiGate-VM64-KVM (1) # set gateway 192.168.1.254

FortiGate-VM64-KVM (1) # end

FortiGate-VM64-KVM # config system interface

FortiGate-VM64-KVM (interface) # show

config system interface

edit "port1"

set vdom "root"

set ip 192.168.1.85 255.255.255.0

set allowaccess ping https ssh http fgfm

set type physical

set snmp-index 1

CPE-SWITCH-01#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

99.99.99.99 1 FULL/BDR 00:00:39 10.12.12.2 Ethernet0/2

99.99.99.99 1 FULL/BDR 00:00:39 10.11.11.2 Ethernet0/1

CPE-SWITCH-01#

CPE-SWITCH-01#SH IP ROUte 0.0.0.0

Routing entry for 0.0.0.0/0, supernet

Known via "ospf 1", distance 110, metric 10, candidate default path, type exte rn 2, forward metric 11

Last update from 10.11.11.2 on Ethernet0/1, 00:00:05 ago

Routing Descriptor Blocks:

* 10.12.12.2, from 99.99.99.99, 00:00:05 ago, via Ethernet0/2

Route metric is 10, traffic share count is 1

10.11.11.2, from 99.99.99.99, 00:00:05 ago, via Ethernet0/1

Route metric is 10, traffic share count is 1

CPE-SWITCH-01#sh ip int br

Interface IP-Address OK? Method Status Protocol

Ethernet0/0 unassigned YES unset up up

Ethernet0/0.100 172.16.1.2 YES NVRAM up up

Ethernet0/0.200 172.16.1.6 YES NVRAM up up

Ethernet0/1 10.11.11.1 YES NVRAM up up

Ethernet0/2 10.12.12.1 YES manual up up

Ethernet0/3 unassigned YES manual up up

interface Ethernet0/0.100

encapsulation dot1Q 100

ip address 172.16.1.2 255.255.255.252

!

interface Ethernet0/0.200

encapsulation dot1Q 200

ip address 172.16.1.6 255.255.255.252

!

interface Ethernet0/1

no switchport

ip address 10.11.11.1 255.255.255.252

ip ospf 1 area 0

duplex auto

!

interface Ethernet0/2

no switchport

ip address 10.12.12.1 255.255.255.252

standby 1 ip 177.0.0.10

ip ospf 1 area 0

duplex auto

router ospf 1

redistribute bgp 65000 subnets

default-information originate

!

router bgp 65000

bgp log-neighbor-changes

redistribute ospf 1 match internal external 1 external 2

neighbor 192.168.50.1 remote-as 4000

default-information originate

[~ROTA-SP-NE40-PE]display ip routing-table vpn-instance CLIENTE_02

Route Flags: R - relay, D - download to fib, T - to vpn-instance, B - black hole route

------------------------------------------------------------------------------

Routing Table : CLIENTE_02

Destinations : 9 Routes : 9

Destination/Mask Proto Pre Cost Flags NextHop Interface

0.0.0.0/0 EBGP 255 10 RD 192.168.50.2 Ethernet1/0/0

10.11.11.0/30 EBGP 255 0 RD 192.168.50.2 Ethernet1/0/0

10.12.12.0/30 EBGP 255 0 RD 192.168.50.2 Ethernet1/0/0

127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0

192.168.1.0/24 EBGP 255 11 RD 192.168.50.2 Ethernet1/0/0

192.168.50.0/30 Direct 0 0 D 192.168.50.1 Ethernet1/0/0

192.168.50.1/32 Direct 0 0 D 127.0.0.1 Ethernet1/0/0

192.168.50.3/32 Direct 0 0 D 127.0.0.1 Ethernet1/0/0

255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0