1. 實驗目的：
驗證MPLS/VPN的可實施性、及在MPLS/VPN基礎上的可實時業務的應用。
本實驗驗證以下技術點：
a. VPN
b. MPLS
c. 多種環境下的MPLS/VPN
d. VOIP的應用
2. 實驗方法：
a. 驗證基于IS-IS的MPLS/VPN
b. 驗證基于Inter AS 的 MPLS/VPN
c. 驗證基于Inter AS 的 MPLS/VPN中VOIP的應用
2．基于IS-IS的MPLS/VPN
1．實驗方案：
實驗環境如圖：
骨干IGP為IS-IS，其中包括三個獨立的L2域、每一個骨干路由器為一個獨立的域，與骨干網的設計相符。
MPLS/VPN 中，三臺骨干路由器為PE、其它設備為CE。
MPLS/VPN上建立三個VPN ：
a. VPN1的CE分別在兩個不同的AS、采用EBGP和骨干路由器互聯，AS號碼為65505和65506。
b. VPN2的兩個CE采用不同的IGP路由協議互聯、S3采用OSPF和R3連接、S2采用RIP和R2連接。
c. VPN3的兩個CE采用靜態路由和PE連接。
2． 方案技術要點：
a. 網絡協議IS-IS、EBGP、IBGP、OSPF、RIP、靜態路由。
b. 完全相同IP地址的VPN（ VPN1與 VPN2 ）。
c. VPN中采用不同協議：VPN1 （EBGP-EBGP），VPN2 （RIP-OSPF）, VPN3 ( 靜態路由-靜態路由)。
3． 配置命令：
version 12.0
!
hostname R2
!
boot system disk0:rsp-pv-mz.120-22.S.bin
ip cef
no ip domain-lookup
!
ip vrf vpn1
rd 100:1
route-target export 100:1
route-target import 100:1
!
ip vrf vpn2
rd 100:2
route-target export 100:2
route-target import 100:2
!
ip vrf vpn3
rd 100:3
route-target export 100:3
route-target import 100:3
clns routing
??！
interface Loopback0
ip address 10.10.20.2 255.255.255.255
no ip directed-broadcast
ip router isis
isis circuit-type level-2-only
!
interface Multilink1
ip address 10.10.12.2 255.255.255.0
no ip directed-broadcast
ip router isis
tag-switching ip
ppp multilink
multilink-group 1
isis circuit-type level-2-only
！
router isis
net 00.1111.0000.0000.1112.00
is-type level-2-only
!
router rip
version 2
!
address-family ipv4 vrf vpn2
version 2
redistribute bgp 100 metric transparent
network 10.0.0.0
no auto-summary
exit-address-family
!
router bgp 100
bgp log-neighbor-changes
bgp graceful-restart restart-time 120
bgp graceful-restart stalepath-time 360
bgp graceful-restart
neighbor 10.10.10.1 remote-as 100
neighbor 10.10.10.1 update-source Loopback0
neighbor 10.10.30.3 remote-as 100
neighbor 10.10.30.3 update-source Loopback0
no auto-summary
!
address-family ipv4 multicast
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 10.10.10.1 activate
neighbor 10.10.10.1 next-hop-self
neighbor 10.10.10.1 send-community extended
neighbor 10.10.30.3 activate
neighbor 10.10.30.3 next-hop-self
neighbor 10.10.30.3 send-community extended
no auto-summary
exit-address-family
!
address-family ipv4
neighbor 10.10.10.1 activate
neighbor 10.10.30.3 activate
no auto-summary
no synchronization
exit-address-family
!
address-family ipv4 vrf vpn3
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!
address-family ipv4 vrf vpn2
redistribute connected
redistribute static
redistribute rip
no auto-summary
no synchronization
exit-address-family
!
address-family ipv4 vrf vpn1
neighbor 10.10.26.6 remote-as 65506
neighbor 10.10.26.6 activate
no auto-summary
no synchronization
exit-address-family
!
ip classless
ip route vrf vpn3 10.10.60.0 255.255.255.0 10.10.26.6
4． 確認命令：
R1# sh ip rou
10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
C 10.10.10.1/32 is directly connected, Loopback0
C 10.10.12.0/24 is directly connected, Multilink1
C 10.10.13.0/24 is directly connected, POS4/0/0
C 10.10.12.2/32 is directly connected, Multilink1
i L2 10.10.20.2/32 [115/17] via 10.10.13.2, POS4/0/0
i L2 10.10.23.0/24 [115/7] via 10.10.13.2, POS4/0/0
i L2 10.10.30.3/32 [115/15] via 10.10.13.2, POS4/0/0
R1#sh ip router vrf vpn2
10.0.0.0/24 is subnetted, 4 subnets
C 10.10.15.0 is directly connected, FastEthernet2/0/1
B 10.10.26.0 [200/0] via 10.10.20.2, 00:01:48
B 10.10.50.0 [20/0] via 10.10.15.5, 00:01:54
B 10.10.60.0 [200/0] via 10.10.20.2, 00:01:48
R1#sh ip router vrf vpn3
10.0.0.0/24 is subnetted, 3 subnets
C 10.10.15.0 is directly connected, FastEthernet2/0/0
B 10.10.26.0 [200/0] via 10.10.20.2, 00:01:57
B 10.10.60.0 [200/0] via 10.10.20.2, 00:01:57
R5-3640#sh ip rou
10.0.0.0/24 is subnetted, 4 subnets
C 10.10.15.0 is directly connected, FastEthernet0/0
B 10.10.26.0 [20/0] via 10.10.15.1, 00:02:24
C 10.10.50.0 is directly connected, Loopback0
B 10.10.60.0 [20/0] via 10.10.15.1, 00:02:24
R5-3640#ping 10.10.60.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.60.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/12/12 ms
R5-3640#trace 10.10.60.6
Type escape sequence to abort.
Tracing the route to 10.10.60.6
1 10.10.15.1 0 msec 0 msec 4 msec
2 10.10.13.2 [MPLS: Labels 17/18 Exp 0] 12 msec 12 msec 12 msec
3 10.10.26.2 [AS 65506] [MPLS: Label 18 Exp 1] 4 msec 4 msec 4 msec
4 10.10.26.6 [AS 65506] 12 msec 12 msec *
S1-4006> (enable) trace 10.10.60.6
traceroute to 10.10.60.6 (10.10.60.6), 30 hops max, 40 byte packets
1 10.10.15.1 (10.10.15.1) 8 ms 24 ms 7 ms
2 10.10.13.2 (10.10.13.2) 10 ms 9 ms 10 ms
3 10.10.26.2 (10.10.26.2) 10 ms 7 ms 7 ms
4 10.10.26.6 (10.10.26.6) 8 ms * 9 ms
S1-4006> (enable) exit
R2#sh ip rou
10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
i L2 10.10.10.1/32 [115/17] via 10.10.23.3, GigabitEthernet10/0/0
C 10.10.12.0/24 is directly connected, Multilink1
i L2 10.10.13.0/24 [115/7] via 10.10.23.3, GigabitEthernet10/0/0
C 10.10.12.1/32 is directly connected, Multilink1
C 10.10.20.2/32 is directly connected, Loopback0
C 10.10.23.0/24 is directly connected, GigabitEthernet10/0/0
i L2 10.10.30.3/32 [115/12] via 10.10.23.3, GigabitEthernet10/0/0
R2#sh ip router vrf vpn1
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
B 10.10.15.0/24 [200/0] via 10.10.10.1, 00:05:48
C 10.10.26.0/24 is directly connected, Multilink2
C 10.10.26.6/32 is directly connected, Multilink2
B 10.10.50.0/24 [200/0] via 10.10.10.1, 00:05:48
B 10.10.60.0/24 [20/0] via 10.10.26.6, 00:07:21
R2#sh ip route vrf vpn2
10.0.0.0/24 is subnetted, 3 subnets
C 10.10.22.0 is directly connected, FastEthernet9/0/0
