mpls配置实例_ci

<r1>display current-configuration  

[V200R003C00]

#

sysname r1

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

drop illegal-mac alarm

#

wlan ac-global carrier id other ac id 0

#

set cpu-usage threshold 80 restore 75

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 10.1.1.2 255.255.255.0  

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

interface LoopBack0

ip address 1.1.1.1 255.255.255.255  

#

ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0/0 10.1.1.1

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

<r1>

<r2>display current-configuration  

[V200R003C00]

#

sysname r2

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

drop illegal-mac alarm

#

wlan ac-global carrier id other ac id 0

#

set cpu-usage threshold 80 restore 75

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 20.1.1.2 255.255.255.0  

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

interface LoopBack0

ip address 2.2.2.2 255.255.255.255  

#

ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0/0 20.1.1.1

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

<r2>

[r3]display current-configuration  

[V200R003C00]

#

sysname r3

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

drop illegal-mac alarm

#

wlan ac-global carrier id other ac id 0

#

set cpu-usage threshold 80 restore 75

#

ip vpn-instance VPN1

ipv4-family

 route-distinguisher 1:3

 vpn-target 1:3 export-extcommunity

 vpn-target 1:3 6:5 import-extcommunity

#

ip vpn-instance VPN2

ipv4-family

 route-distinguisher 2:3

 vpn-target 2:3 export-extcommunity

 vpn-target 2:3 7:5 import-extcommunity

#

mpls lsr-id 3.3.3.3

mpls

#

mpls ldp

#

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

isis 100

is-level level-2

network-entity 49.0001.0030.0300.3003.00

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip binding vpn-instance VPN1

ip address 10.1.1.1 255.255.255.0  

#

interface GigabitEthernet0/0/1

ip binding vpn-instance VPN2

ip address 20.1.1.1 255.255.255.0  

#

interface GigabitEthernet0/0/2

ip address 30.1.1.2 255.255.255.0  

isis enable 100

isis dis-priority 127

mpls

mpls ldp

#

interface NULL0

#

interface LoopBack0

ip address 3.3.3.3 255.255.255.255  

isis enable 100

#

bgp 200

router-id 3.3.3.3

undo default ipv4-unicast

peer 5.5.5.5 as-number 200  

peer 5.5.5.5 connect-interface LoopBack0

#

ipv4-family unicast

 undo synchronization

 undo peer 5.5.5.5 enable

#  

ipv4-family vpnv4

 policy vpn-target

 peer 5.5.5.5 enable

#

ipv4-family vpn-instance VPN1  

 import-route static

#

ipv4-family vpn-instance VPN2  

 import-route static

#

ip route-static vpn-instance VPN1 1.1.1.1 255.255.255.255 GigabitEthernet0/0/0 1

0.1.1.2

ip route-static vpn-instance VPN2 2.2.2.2 255.255.255.255 GigabitEthernet0/0/1 2

0.1.1.2

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[r3]

<r4>display current-configuration  

[V200R003C00]

#

sysname r4

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

drop illegal-mac alarm

#

wlan ac-global carrier id other ac id 0

#

set cpu-usage threshold 80 restore 75

#

mpls lsr-id 4.4.4.4

mpls

#

mpls ldp

#

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

isis 100

is-level level-2

network-entity 49.0001.0040.0400.4004.00

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 30.1.1.1 255.255.255.0  

isis enable 100

mpls

mpls ldp

#

interface GigabitEthernet0/0/1

ip address 40.1.1.2 255.255.255.0  

isis enable 100

isis dis-priority 127

mpls

mpls ldp

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

interface LoopBack0

ip address 4.4.4.4 255.255.255.255  

isis enable 100

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

<r4>

[r5]display current-configuration  

[V200R003C00]

#

sysname r5

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

drop illegal-mac alarm

#

wlan ac-global carrier id other ac id 0

#

set cpu-usage threshold 80 restore 75

#

ip vpn-instance VPN3

ipv4-family

 route-distinguisher 6:5

 vpn-target 6:5 export-extcommunity

 vpn-target 6:5 1:3 import-extcommunity

#

ip vpn-instance VPN4

ipv4-family

 route-distinguisher 7:5

 vpn-target 7:5 export-extcommunity

 vpn-target 7:5 2:3 import-extcommunity

#

mpls lsr-id 5.5.5.5

mpls

#

mpls ldp

#

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

isis 100

is-level level-2

network-entity 49.0001.0050.0500.5005.00

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 40.1.1.1 255.255.255.0  

isis enable 100

mpls

mpls ldp

#

interface GigabitEthernet0/0/1

ip binding vpn-instance VPN3

ip address 50.1.1.1 255.255.255.0  

#

interface GigabitEthernet0/0/2

ip binding vpn-instance VPN4

ip address 60.1.1.1 255.255.255.0  

#

interface NULL0

#

interface LoopBack0

ip address 5.5.5.5 255.255.255.255  

isis enable 100

#

bgp 200

router-id 5.5.5.5

undo default ipv4-unicast

peer 3.3.3.3 as-number 200  

peer 3.3.3.3 connect-interface LoopBack0

#

ipv4-family unicast

 undo synchronization

 undo peer 3.3.3.3 enable

#  

ipv4-family vpnv4

 policy vpn-target

 peer 3.3.3.3 enable

#

ipv4-family vpn-instance VPN3  

 import-route static

#

ipv4-family vpn-instance VPN4  

 import-route static

#

ip route-static vpn-instance VPN3 6.6.6.6 255.255.255.255 GigabitEthernet0/0/1 5

0.1.1.2

ip route-static vpn-instance VPN4 7.7.7.7 255.255.255.255 GigabitEthernet0/0/2 6

0.1.1.2

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[r5]

[r6]display current-configuration  

[V200R003C00]

#

sysname r6

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

drop illegal-mac alarm

#

wlan ac-global carrier id other ac id 0

#

set cpu-usage threshold 80 restore 75

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 50.1.1.2 255.255.255.0  

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

interface LoopBack0

ip address 6.6.6.6 255.255.255.255  

#

ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0/0 50.1.1.1

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[r6]

[r7]display current-configuration  

[V200R003C00]

#

sysname r7

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load flash:/portalpage.zip

#

drop illegal-mac alarm

#

wlan ac-global carrier id other ac id 0

#

set cpu-usage threshold 80 restore 75

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 60.1.1.2 255.255.255.0  

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

interface LoopBack0

ip address 7.7.7.7 255.255.255.255  

#

ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0/0 60.1.1.1

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[r7]