丽江市网站建设_网站建设公司_SQL Server_seo优化
2025/12/22 5:16:28 网站建设 项目流程

网络规划设计

打通总部、分支、数据中心两种业务,并且做到业务隔离,骨干网使用srv6 BE进行互联互通,ne2做为RR
locator规划看拓扑图上,已标出,保证所有设备唯一,其它sid全部用动态自动生成

1、使能各接口的IPv6转发能力,配置各接口的IPv6地址。
2、在各接口上使能IS-IS,配置Level级别,指定网络实体。
3、在ne1、ne4、ne3上配置VPN实例。
4、在ne1和AR1之间建立ospf关系,另一边ne3和AR2采用静态联接配置,ne4与ar3用bgp联接
5、在ne2为ne1、ne3、ne4的RR
6、在ne1、ne4、ne3上配置SRv6。配置IS-IS的SRv6能力。
7、最终实现企业总部-分支-数据中心两种业务OA、RD相互隔离,OA业务只可以和OA业务互联互通,RD业务只能和RD业务互通。

更多细节来全球计算机技术群讨论!!!

ne1配置

[ne1]dis current-configuration
!Software Version V800R011C00SPC607B607
!Last configuration was updated at 2025-12-21 22:40:36+00:00
!Last configuration was saved at 2025-12-21 21:30:00+00:00

sysname ne1

set neid 18a8b

vsm on-board-mode enable

snmp-agent trap type base-trap

icmp rate-limit disable

router id 1.1.1.1

ip vpn-instance OA
ipv4-family
route-distinguisher 11:1
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity

ip vpn-instance RD
ipv4-family
route-distinguisher 11:2
vpn-target 2:2 export-extcommunity
vpn-target 2:2 import-extcommunity

segment-routing ipv6
encapsulation source-address 2001:1::1 //用loopback口封装
locator 1 ipv6-prefix 2002:1:: 64 static 32

isis 1
is-level level-2
cost-style wide
network-entity 49.0001.0000.0000.0001.00

ipv6 enable topology ipv6
segment-routing ipv6 locator 1

interface Ethernet1/0/0
undo shutdown
ipv6 enable
ipv6 address 2001:DB8:12::1/64
isis ipv6 enable 1
undo dcn
undo dcn mode vlan

interface Ethernet1/0/1
undo shutdown
undo dcn
undo dcn mode vlan

interface Ethernet1/0/1.11
ip binding vpn-instance OA
ip address 10.0.11.2 255.255.255.0
encapsulation dot1q-termination
dot1q termination vid 11
arp broadcast enable

interface Ethernet1/0/1.21
ip binding vpn-instance RD
ip address 10.0.21.2 255.255.255.0
encapsulation dot1q-termination
dot1q termination vid 21
arp broadcast enable

interface LoopBack0
ipv6 enable
ipv6 address 2001:1::1/128
isis ipv6 enable 1

interface LoopBack1
ip address 1.1.1.1 255.255.255.255

interface NULL0

bgp 100
router-id 1.1.1.1
peer 2001:1::2 as-number 100
peer 2001:1::2 connect-interface LoopBack0

ipv4-family unicast
undo synchronization

ipv4-family vpnv4
policy vpn-target
peer 2001:1::2 enable
peer 2001:1::2 prefix-sid

ipv4-family vpn-instance OA
import-route ospf 1
segment-routing ipv6 locator 1 //添加SID属性
segment-routing ipv6 best-effort //使能根据路由携带的SID属性进行隧道迭代的功能

ipv4-family vpn-instance RD
import-route ospf 2
segment-routing ipv6 locator 1
segment-routing ipv6 best-effort

ospf 1 vpn-instance OA
import-route bgp
area 0.0.0.0
network 10.0.11.2 0.0.0.0

ospf 2 vpn-instance RD
import-route bgp
area 0.0.0.0
network 10.0.21.2 0.0.0.0

ne2配置

[ne2]dis current-configuration
!Software Version V800R011C00SPC607B607
!Last configuration was updated at 2025-12-21 22:28:01+00:00
!Last configuration was saved at 2025-12-21 21:30:00+00:00

sysname ne2

set neid 18a89

vsm on-board-mode enable

snmp-agent trap type base-trap

icmp rate-limit disable

router id 2.2.2.2

isis 1
is-level level-2
cost-style wide
network-entity 49.0001.0000.0000.0002.00

ipv6 enable topology ipv6

interface Ethernet1/0/0
undo shutdown
ipv6 enable
ipv6 address 2001:DB8:12::2/64
isis ipv6 enable 1
undo dcn
undo dcn mode vlan

interface Ethernet1/0/1
undo shutdown
ipv6 enable
ipv6 address 2001:DB8:23::2/64
isis ipv6 enable 1
undo dcn
undo dcn mode vlan

interface Ethernet1/0/2
undo shutdown
ipv6 enable
ipv6 address 2001:DB8:24::2/64
isis ipv6 enable 1
undo dcn mode vlan

interface LoopBack0
ipv6 enable
ipv6 address 2001:1::2/128
isis ipv6 enable 1

interface LoopBack1
ip address 2.2.2.2 255.255.255.255

interface NULL0

bgp 100
router-id 2.2.2.2
peer 2001:1::1 as-number 100
peer 2001:1::1 connect-interface LoopBack0
peer 2001:1::3 as-number 100
peer 2001:1::3 connect-interface LoopBack0
peer 2001:1::4 as-number 100
peer 2001:1::4 connect-interface LoopBack0

ipv4-family unicast
undo synchronization

ipv4-family vpnv4
undo policy vpn-target
peer 2001:1::1 enable
peer 2001:1::1 reflect-client
peer 2001:1::1 prefix-sid
peer 2001:1::3 enable
peer 2001:1::3 reflect-client
peer 2001:1::3 prefix-sid
peer 2001:1::4 enable
peer 2001:1::4 reflect-client
peer 2001:1::4 prefix-sid

ne3配置

[ne3]dis current-configuration
!Software Version V800R011C00SPC607B607
!Last configuration was updated at 2025-12-21 22:37:21+00:00
!Last configuration was saved at 2025-12-21 21:30:00+00:00

sysname ne3

set neid 18a8c

vsm on-board-mode enable

snmp-agent trap type base-trap

icmp rate-limit disable

router id 3.3.3.3

ip vpn-instance OA
ipv4-family
route-distinguisher 3:3
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity

segment-routing ipv6
encapsulation source-address 2001:1::3
locator 1 ipv6-prefix 2002:3:: 64 static 32

isis 1
is-level level-2
cost-style wide
network-entity 49.0001.0000.0000.0003.00

ipv6 enable topology ipv6
segment-routing ipv6 locator 1

interface Ethernet1/0/0
undo shutdown
ipv6 enable
ipv6 address 2001:DB8:23::3/64
isis ipv6 enable 1
undo dcn
undo dcn mode vlan

interface Ethernet1/0/1
undo shutdown
ip binding vpn-instance OA
ip address 10.0.32.3 255.255.255.0
undo dcn
undo dcn mode vlan

interface LoopBack0
ipv6 enable
ipv6 address 2001:1::3/128
isis ipv6 enable 1

interface LoopBack1
ip address 3.3.3.3 255.255.255.255

interface NULL0

bgp 100
router-id 3.3.3.3
peer 2001:1::2 as-number 100
peer 2001:1::2 connect-interface LoopBack0

ipv4-family unicast
undo synchronization

ipv4-family vpnv4
policy vpn-target
peer 2001:1::2 enable
peer 2001:1::2 prefix-sid

ipv4-family vpn-instance OA
default-route imported
import-route static
segment-routing ipv6 locator 1
segment-routing ipv6 best-effort

ne4配置

[ne4-bgp]dis current-configuration
!Software Version V800R011C00SPC607B607
!Last configuration was updated at 2025-12-21 22:17:47+00:00
!Last configuration was saved at 2025-12-21 21:30:00+00:00

sysname ne4

set neid 18a8a

vsm on-board-mode enable

snmp-agent trap type base-trap

icmp rate-limit disable

router id 4.4.4.4

ip vpn-instance OA
ipv4-family
route-distinguisher 4:4
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity

ip vpn-instance RD
ipv4-family
route-distinguisher 4:5
vpn-target 2:2 export-extcommunity
vpn-target 2:2 import-extcommunity

segment-routing ipv6
encapsulation source-address 2001:1::4
locator 1 ipv6-prefix 2002:4:: 64 static 32

isis 1
is-level level-2
cost-style wide
network-entity 49.0001.0000.0000.0004.00

ipv6 enable topology ipv6
segment-routing ipv6 locator 1

interface Ethernet1/0/0
undo shutdown
ipv6 enable
ipv6 address 2001:DB8:24::4/64
isis ipv6 enable 1
undo dcn
undo dcn mode vlan

interface Ethernet1/0/1
undo shutdown
undo dcn
undo dcn mode vlan

interface Ethernet1/0/1.31
ip binding vpn-instance OA
ip address 10.0.31.4 255.255.255.0
encapsulation dot1q-termination
dot1q termination vid 31
arp broadcast enable

interface Ethernet1/0/1.41
ip binding vpn-instance RD
ip address 10.0.41.4 255.255.255.0
encapsulation dot1q-termination
dot1q termination vid 41
arp broadcast enable

interface LoopBack0
ipv6 enable
ipv6 address 2001:1::4/128
isis ipv6 enable 1

interface LoopBack1
ip address 4.4.4.4 255.255.255.255

interface NULL0

bgp 100
router-id 4.4.4.4
peer 2001:1::2 as-number 100
peer 2001:1::2 connect-interface LoopBack0

ipv4-family unicast
undo synchronization

ipv4-family vpnv4
policy vpn-target
peer 2001:1::2 enable
peer 2001:1::2 prefix-sid

ipv4-family vpn-instance OA
advertise l2vpn evpn
peer 10.0.31.3 as-number 65100
segment-routing ipv6 locator 1
segment-routing ipv6 best-effort

ipv4-family vpn-instance RD
advertise l2vpn evpn
peer 10.0.41.3 as-number 65100
segment-routing ipv6 locator 1
segment-routing ipv6 best-effort

AR1配置

dis current-configuration
[V200R003C00]

sysname r1

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

router id 1.1.1.1

set cpu-usage threshold 80 restore 75

ip vpn-instance OA
ipv4-family
route-distinguisher 1:1

ip vpn-instance RD
ipv4-family
route-distinguisher 1:2

interface GigabitEthernet0/0/0.11
dot1q termination vid 11
ip binding vpn-instance OA
ip address 10.0.11.1 255.255.255.0
arp broadcast enable

interface GigabitEthernet0/0/0.21
dot1q termination vid 21
ip binding vpn-instance RD
ip address 10.0.21.1 255.255.255.0
arp broadcast enable

interface LoopBack0
ip binding vpn-instance OA
ip address 11.1.1.1 255.255.255.255

interface LoopBack1
ip binding vpn-instance RD
ip address 21.1.1.1 255.255.255.255

ospf 1 vpn-instance OA
vpn-instance-capability simple
area 0.0.0.0
network 10.0.11.1 0.0.0.0
network 11.1.1.1 0.0.0.0

ospf 2 vpn-instance RD
vpn-instance-capability simple //禁止路由环路检测,直接进行路由计算
area 0.0.0.0
network 10.0.21.1 0.0.0.0
network 21.1.1.1 0.0.0.0

AR2配置

dis current-configuration
[V200R003C00]

sysname r2

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

interface GigabitEthernet0/0/0
ip address 10.0.32.2 255.255.255.0

interface LoopBack0
ip address 51.1.1.1 255.255.255.255

ip route-static 0.0.0.0 0.0.0.0 10.0.32.3

AR3配置

dis current-configuration
[V200R003C00]

sysname r3

snmp-agent local-engineid 800007DB03000000000000
snmp-agent

clock timezone China-Standard-Time minus 08:00:00

portal local-server load portalpage.zip

drop illegal-mac alarm

set cpu-usage threshold 80 restore 75

ip vpn-instance OA
ipv4-family
route-distinguisher 3:1

ip vpn-instance RD
ipv4-family
route-distinguisher 3:2

interface GigabitEthernet0/0/0

interface GigabitEthernet0/0/0.11
dot1q termination vid 31
ip binding vpn-instance OA
ip address 10.0.31.3 255.255.255.0
arp broadcast enable

interface GigabitEthernet0/0/0.12
dot1q termination vid 41
ip binding vpn-instance RD
ip address 10.0.41.3 255.255.255.0
arp broadcast enable

interface LoopBack0
ip binding vpn-instance OA
ip address 31.1.1.1 255.255.255.255

interface LoopBack1
ip binding vpn-instance RD
ip address 41.1.1.1 255.255.255.255

bgp 65100
router-id 31.3.3.3

ipv4-family unicast
undo synchronization

ipv4-family vpn-instance OA
network 31.1.1.1 255.255.255.255
peer 10.0.31.4 as-number 100

ipv4-family vpn-instance RD
network 41.1.1.1 255.255.255.255
peer 10.0.41.4 as-number 100

结果验证

sid信息查看

路由查看





各业务联通性测试


需要专业的网站建设服务?

联系我们获取免费的网站建设咨询和方案报价,让我们帮助您实现业务目标

立即咨询