1 ¸ÅÊö

 

1.1 MPLS VPNÊÖÒÕÅä¾°

 

    VPN£¨Virtual Private Network£©µÄ¿´·¨×îÔçÊÇ´ÓרÏßÒý·¢µÄ¡£¡£¡£¡£¡£¡£¡£¡£ÏȾÙÒ»¸öÀý×Ó˵Ã÷ΪʲôÐèÒªVPN£¬£¬£¬£¬£¬£¬ÀýÈçÒ»¸ö¹«Ë¾ÔÚÌìϸ÷µØ¶¼Óзֹ«Ë¾£¬£¬£¬£¬£¬£¬ÄÇôͨ³£Ëü±ØÐè×âÓÃרÏßʵÏÖÆóÒµÄÚ²¿µÄ»¥ÁªÍøÂ磬£¬£¬£¬£¬£¬ÕâÖÖ·½·¨ÐèÒªÔÚÁ½µØ»ò¶à¸öËùÔÚÖ®¼ä×âÓÃÔ¶³ÌÏß·£¬£¬£¬£¬£¬£¬ÆñÂÛÊÇ·ñÓÐÊý¾Ý´«ÊäÕâÌõÔ¶³ÌÏß·¶¼Àο¿·ÖÅÉ£¬£¬£¬£¬£¬£¬Óû§Ö§¸¶µÄ¼ÛÇ®ºÜ¸ß¡£¡£¡£¡£¡£¡£¡£¡£×¨ÏßÍøÂç¾ßÓÐÒÔÏÂÌص㣺

 

    1. Çå¾²ÐԸߣ¬£¬£¬£¬£¬£¬Ïß·ΪÓû§×¨Ó㬣¬£¬£¬£¬£¬²î±ðÓû§¼äÊÇÎïÀí¸ôÀëµÄ£»£»£»£»£»
 

    2. ¼ÛÇ®Ìڹ󣻣»£»£»£»
 

    3. ´ø¿íÆÌÕÅÑÏÖØ£»£»£»£»£»

 

    ÓÉÓÚרÏßÍøÂç¾ßÓеÄһЩ¹ÌÓÐȱÏÝ£¬£¬£¬£¬£¬£¬VPNµÄÄ¿µÄ¾ÍÊÇͨ¹ý¹«ÓÃÍøÂ罫ÒìµØµÄÍøµã»¥ÁªÊµÏÖÒ»¸ö˽ÓÐÍø¾ÍÏñÓÃרÏßÁª½ÓÆðÀ´µÄÒ»Ñù¡£¡£¡£¡£¡£¡£¡£¡£×ÅʵÏֵķ½·¨¾ÍÊÇÔÚ¹«ÍøÉϽ¨ÉèijÖÖÐÎʽµÄÁ´Â·×÷ΪIPµÄËíµÀ¾ÙÐÐÒìµØÍøµã»¥Áª¡£¡£¡£¡£¡£¡£¡£¡£ÔÚ¹«ÍøÉÏʵÏÖVPN £¬£¬£¬£¬£¬£¬Óû§Ö»ÐèÒªÖ§¸¶µ½ÍøÂç·þÎñÌṩÉ̵ÄÍâµØÏß·Óöȣ¬£¬£¬£¬£¬£¬²¢ÇÒÔÚûÓÐÊý¾Ý´«Êäʱ¿ÉÒԶϿªÅþÁ¬½øÒ»²½½ÚÔ¼ÁË¿ªÏú¡£¡£¡£¡£¡£¡£¡£¡£

 

1.2 VPN½ç˵

 

    ¹ËÃû˼Ò壬£¬£¬£¬£¬£¬ÐéÄâרÓÃÍø£¨Virtual Private Network£©²»ÊÇÕæµÄרÓÃÍøÂ磬£¬£¬£¬£¬£¬µ«È´Äܹ»ÊµÏÖרÓÃÍøÂçµÄ¹¦Ð§¡£¡£¡£¡£¡£¡£¡£¡£ËùνÐéÄ⣬£¬£¬£¬£¬£¬ÊÇÖ¸Óû§²»ÔÙÐèÒªÓµÓÐÏÖʵµÄÔ¶³ÌÊý¾ÝÏß·£¬£¬£¬£¬£¬£¬¶øÊÇʹÓ÷þÎñÌṩÉÌÏÖ³ÉÍøÂçµÄÊý¾ÝÏß·£¨Í¨¹ýʹÓÃËíµÀÊÖÒÕ£©¡£¡£¡£¡£¡£¡£¡£¡£ËùνרÓÃÍøÂ磬£¬£¬£¬£¬£¬ÊÇÖ¸Óû§¿ÉÒÔΪ×Ô¼ºÖƶ©Ò»¸ö×îÇкÏ×Ô¼ºÐèÇóµÄÍøÂ磬£¬£¬£¬£¬£¬¾ÍÏñÊÇ˽ÓеÄÍøÂçÒ»Ñù¡£¡£¡£¡£¡£¡£¡£¡£

 

1.3 BGP/MPLS VPN

 

    ÎÒÃÇÖªµÀʵÏÖVPNµÄ·½·¨ÓÐÐí¶àÖÖ£¬£¬£¬£¬£¬£¬ÀýÈôÓлùÓÚµÚ¶þ²ãËíµÀЭÒ飨L2TP£©µÄVPN£¬£¬£¬£¬£¬£¬Ò²ÓлùÓÚµÚÈý²ãËíµÀЭÒ飨ÈçIPSec£©µÄVPN¡£¡£¡£¡£¡£¡£¡£¡£¶øBGP/MPLS IP VPNÊÇÁíÍâÒ»ÖÖʵÏÖVPNµÄ·½·¨£¬£¬£¬£¬£¬£¬¿ÉÒÔ˵ËüÊÇÒ»ÖÖ½éÓÚµÚ¶þ²ãºÍµÚÈý²ãËíµÀЭÒéµÄVPN£¬£¬£¬£¬£¬£¬ÕâÖ÷ÒªÊÇÓÉMPLS¾öÒéµÄ¡£¡£¡£¡£¡£¡£¡£¡£

 

    ¼ÈÈ»ÊÇVPNÆäËùÍê³ÉµÄ¹¦Ð§ÒÔ¼°µÖ´ïµÄÄ¿µÄºÍ¹Å°åµÄVPNÊÇÒ»ÑùµÄ£¬£¬£¬£¬£¬£¬Ö»ÊÇ»ùÓÚMPLSµÄIP VPNºÍ¹Å°åµÄIP VPNÏà±ÈÓÐÐí¶àÓÅÊÆ¡£¡£¡£¡£¡£¡£¡£¡£Èç¹ØÓÚVPNÓû§¶øÑÔ£¬£¬£¬£¬£¬£¬Ëü¿ÉÒÔ´ó´ó¼ò»¯Óû§µÄÖÎÀíÊÂÇéÁ¿£¬£¬£¬£¬£¬£¬²»ÔÙÐèҪʹÓÃרÃŵÄVPN×°±¸£¨ÈçVPN²¦Èë·þÎñÆ÷£©Ö»ÐèҪʹÓùŰåµÄ·ÓÉÆ÷¾Í¿ÉÒÔ¹¹½¨VPN¡£¡£¡£¡£¡£¡£¡£¡£

 

    ¹ØÓÚÔËÓªÉ̶øÑÔ£¬£¬£¬£¬£¬£¬½ÓÄÉMPLS VPNºÜÈÝÒ×ʵÏÖVPNµÄÀ©Õ¹£¬£¬£¬£¬£¬£¬Í¬Ê±¸øÔËÓªÉÌ´øÀ´¸ü´óµÄÉÌ»ú¡£¡£¡£¡£¡£¡£¡£¡£
 

 

    ÕâÀïÚ¹ÊÍÒ»ÏÂΪʲôÊǽÐBGP/MPLS VPNÄØ£¿£¿£¿£¿£¿ÕâÊÇÓÉÓÚMPLSÓ¦ÓÃÓÚLayer 3µÄVPNÖÐҪʹÓÃBGP×÷ΪMPLSµÄ±êÇ©·Ö·¢Ð­Ò飬£¬£¬£¬£¬£¬¾ÍºÃ±ÈMPLSÓ¦ÓÃÓÚIPµ¥²¥×ª·¢ÖбØÐèʹÓÃLDP×÷ΪÆä±êÇ©·Ö·¢Ð­Ò飬£¬£¬£¬£¬£¬Ê¹ÓÃBGPЭÒéÔÚ·þÎñÌṩÉÌÍøÂçµÄPEÖ®¼ä½»Á÷VPN·ÓÉÒÔ¼°°ó¶¨µÄ±êÇ©¡£¡£¡£¡£¡£¡£¡£¡£

 

2 BGP/MPLS VPN¼Ü¹¹

 

 

                                  ͼ2-1

 

    ÔÚMPLS VPNµÄÅþÁ¬Ä£×ÓÖУ¬£¬£¬£¬£¬£¬ÍøÂçÓÉÔËÓªÉ̵ÄÖ÷¸ÉÍøÓëÓû§µÄ¸÷¸öSite×é³É£¬£¬£¬£¬£¬£¬ËùνVPN¾ÍÊǶÔsiteÜöÝ͵Ļ®·Ö£¬£¬£¬£¬£¬£¬Ò»¸öVPN¾Í¶ÔÓ¦Ò»¸öÓÉÈô¸Ésite×é³ÉµÄÜöÝÍ¡£¡£¡£¡£¡£¡£¡£¡£

 

2.1 ÊõÓï

 

ÏÈÒýÈ뼸¸ö¿´·¨£º

 

    CE£¨Custom Edge£©£ºÓû§SiteÖÐÖ±½ÓÓë·þÎñÌṩÉÌÏàÁ¬µÄ±ßÑØ×°±¸£¬£¬£¬£¬£¬£¬Ò»Ñùƽ³£ÊÇ·ÓÉÆ÷
 

 

    PE£¨Provider Edge£©£ºÖ÷¸ÉÍøÖеıßÑØ×°±¸£¬£¬£¬£¬£¬£¬ËüÖ±½ÓÓëÓû§µÄCEÏàÁ¬

 

    P ·ÓÉÆ÷£¨Provider Router£©£ºÖ÷¸ÉÍøÖв»ÓëCEÖ±½ÓÏàÁ¬µÄ×°±¸

 

    VPN Site£ºVPNÓû§µÄÕ¾µã£¬£¬£¬£¬£¬£¬ÊÇVPNÖеÄÒ»¸öÁæØêµÄIPÍøÂ磬£¬£¬£¬£¬£¬¸ÃÍøÂçÄÚ²¿×Ô¼ºÊÇIP»¥ÁªµÄ£¬£¬£¬£¬£¬£¬¿ÉÊǺÍÆäËüÕ¾µã£¨»òÕßÊÇ×ÓÍø£©Ò»Ñùƽ³£À´ËµÇ·ºà¹ýÖ÷¸ÉÍø²»¾ßÓÐÁ¬Í¨ÐÔ¡£¡£¡£¡£¡£¡£¡£¡£¹«Ë¾×ܲ¿£¬£¬£¬£¬£¬£¬·ÖÖ§»ú¹¹¶¼ÊÇsiteµÄÏêϸÀý×Ó¡£¡£¡£¡£¡£¡£¡£¡£CEͨ³£ÊÇVPN SiteÖеÄÒ»¸ö·ÓÉÆ÷»òÈý²ã½»Á÷×°±¸ÉõÖÁÊÇÒ»¸öÖ÷»ú¡£¡£¡£¡£¡£¡£¡£¡£Ò»¸öCE×°±¸×ÜÊDZ»ÒÔΪ´¦ÓÚÒ»¸öµ¥¶ÀµÄÕ¾µã£¬£¬£¬£¬£¬£¬¿ÉÊÇÒ»¸öÕ¾µã¿ÉÒÔͬʱÊôÓÚ¶à¸öVPN¡£¡£¡£¡£¡£¡£¡£¡£

 

    VRF£ºÃ¿¸öPE¶¼Î¬»¤ºÍÖÎÀíһϵÁеÄת½ÒÏþ£¬£¬£¬£¬£¬£¬ ÆäÖÐÒ»¸öת½ÒÏþ½Ð×ö“ȱʡµÄת½ÒÏþ”»òÕ߽Гȫ¾Öת½ÒÏþ”£»£»£»£»£»ÆäËüµÄת½ÒÏþ½Ð“VPN ·ÓÉת½ÒÏþ£¨VPN Routing and Forwarding tables£©”¡£¡£¡£¡£¡£¡£¡£¡£ÈôÊÇÒ»¸ö±¨ÎÄͨ¹ýACµÖ´ïPE£¬£¬£¬£¬£¬£¬¸ÃACûÓÐͬÈκÎVRF¹ØÁªµÄ»°£¬£¬£¬£¬£¬£¬ÄÇô½«Ê¹ÓÃÈ«¾ÖµÄ·ÓɱíΪ¸Ã±¨ÎĵÄÄ¿µÄµØµã²éÕÒ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£¿£¿£¿£¿£¿ÉÒÔ¼òÆÓµÄÃ÷ȷΪ£¬£¬£¬£¬£¬£¬È«¾ÖµÄת½ÒÏþ´æ·ÅµÄÊǹ«ÍøµÄ·ÓÉ£¨°ü¹ÜSPÍøÂçÖÐ×Ô¼ºPEºÍPE£¬£¬£¬£¬£¬£¬PEºÍPÖ®¼äÄܹ»»¥Í¨£©£¬£¬£¬£¬£¬£¬VRF´æ´¢µÄÊÇVPNÕ¾µãµÄ˽ÓзÓÉ¡£¡£¡£¡£¡£¡£¡£¡£

 

2.2 ×é³ÉÔ­Àí

 

    1. MPLS VPNµÄÍøÂç½á¹¹ÓÉ·þÎñÌṩÉÌÀ´Íê³É¡£¡£¡£¡£¡£¡£¡£¡£ÔÚÕâÖÖÍøÂç½á¹¹ÖУ¬£¬£¬£¬£¬£¬ÓÉ·þÎñÌṩÉÌÏòÓû§ÌṩVPN·þÎñ£¬£¬£¬£¬£¬£¬Óû§¸ÐÊܲ»µ½¹«¹²ÍøÂçµÄ±£´æ£¬£¬£¬£¬£¬£¬¾ÍËƺõÓµÓÐ×ÔÁ¦µÄÍøÂç×ÊÔ´Ò»Ñù¡£¡£¡£¡£¡£¡£¡£¡£

 

    2. ͬÑù¹ØÓÚ·þÎñÌṩÉÌÖ÷¸ÉÍøÂçÄÚ²¿µÄ P ·ÓÉÆ÷£¬£¬£¬£¬£¬£¬Ò²¾ÍÊDz»ÓëCE Ö±½ÓÏàÁ¬µÄ·ÓÉÆ÷¶øÑÔ£¬£¬£¬£¬£¬£¬Ò²²»ÖªµÀÓÐVPNµÄ±£´æ£¬£¬£¬£¬£¬£¬½ö½öÈÏÕæÖ÷¸ÉÍøÄÚ²¿µÄÊý¾Ý´«Êä¡£¡£¡£¡£¡£¡£¡£¡£µ«Æä±ØÐèÄܹ»Ö§³ÖMPLSЭÒ飬£¬£¬£¬£¬£¬²¢Ê¹ÄܸÃЭÒé¡£¡£¡£¡£¡£¡£¡£¡£

 

    3. ËùÓеÄVPNµÄ¹¹½¨¡¢ÅþÁ¬ºÍÖÎÀíÊÂÇ鶼ÊÇÔÚPEÉϾÙÐеÄ¡£¡£¡£¡£¡£¡£¡£¡£PEλÓÚ·þÎñÌṩÉÌÍøÂçµÄ±ßÑØ£¬£¬£¬£¬£¬£¬´ÓPEµÄ½Ç¶ÈÀ´¿´£¬£¬£¬£¬£¬£¬Óû§µÄÒ»¸öÁ¬Í¨µÄIP ϵͳ±»ÊÓΪһ¸ösite £¬£¬£¬£¬£¬£¬Ã¿Ò»¸ösiteͨ¹ýCEÓëPEÏàÁ¬£¬£¬£¬£¬£¬£¬site ÊÇ×é³ÉVPNµÄ»ù±¾µ¥Î»¡£¡£¡£¡£¡£¡£¡£¡£

 

    4. Ò»¸öVPNÊÇÓɶà¸ösite×é³ÉµÄ£¬£¬£¬£¬£¬£¬Ò»¸ösite Ò²¿ÉÒÔͬʱÊôÓÚ²î±ðµÄVPN¡£¡£¡£¡£¡£¡£¡£¡£ ÊôÓÚͳһ¸öVPNµÄÁ½¸ösiteͨ¹ý·þÎñÌṩÉ̵Ĺ«¹²ÍøÂçÏàÁ¬£¬£¬£¬£¬£¬£¬VPNÊý¾ÝÔÚ¹«¹²ÍøÂçÉÏÈö²¥£¬£¬£¬£¬£¬£¬±ØÐèÒª°ü¹ÜÊý¾Ý´«ÊäµÄ˽ÓÐÐÔºÍÇå¾²ÐÔ¡£¡£¡£¡£¡£¡£¡£¡£ Ò²¾ÍÊÇ˵£¬£¬£¬£¬£¬£¬Á¥ÊôÓÚij¸öVPNµÄsite·¢ËͳöÀ´µÄ±¨ÎÄÖ»ÄÜת·¢µ½Í¬ÑùÊôÓÚÕâ¸öVPNµÄsite ÀïÈ¥£¬£¬£¬£¬£¬£¬¶ø²»¿É±»×ª·¢µ½ÆäËûsite ÖÐÈ¥¡£¡£¡£¡£¡£¡£¡£¡£

 

    5. ͬʱ£¬£¬£¬£¬£¬£¬ÈκÎÁ½¸öûÓÐÅäºÏµÄsite µÄVPN¶¼¿ÉÒÔʹÓÃÖصþµÄµØµã¿Õ¼ä£¬£¬£¬£¬£¬£¬¼´ÔÚÓû§µÄ˽ÓÐÍøÂçÖÐʹÓÃ×Ô¼º×ÔÁ¦µÄµØµã¿Õ¼ä£¬£¬£¬£¬£¬£¬¶ø²»±Ø˼Á¿ÊÇ·ñÓëÆäËûVPN»ò¹«ÍøµÄµØµã¿Õ¼ä³åÍ»¡£¡£¡£¡£¡£¡£¡£¡£ËùÓÐÕâЩ¾Í¶¼ÐèÒªÒÀÀµÓÚVRF£¨VPN Routing & Forwarding Instance£©¡£¡£¡£¡£¡£¡£¡£¡£

 

3 BGP MPLS/VPNÔ­Àí

 

ÔÚÒ»¸öMPLS VPNÍøÂçÖУ¬£¬£¬£¬£¬£¬ÐèÒª½â¾öÒÔÏÂÈý¸öÎÊÌ⣺

 

    1. ÍâµØ·ÓɳåÍ»ÎÊÌ⣬£¬£¬£¬£¬£¬¼´£ºÔÚͳһ̨PEÉÏÔõÑùÇø·Ö²î±ðVPNµÄÏàͬ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£

 

    2. ·ÓÉÔÚÍøÂçÖеÄÈö²¥ÎÊÌ⣬£¬£¬£¬£¬£¬Á½ÌõÏàͬµÄ·ÓÉ£¬£¬£¬£¬£¬£¬¶¼ÔÚÍøÂçÖÐÈö²¥£¬£¬£¬£¬£¬£¬¹ØÓÚÎüÊÕÕßÔõÑùÇø·ÖÏ໥£¿£¿£¿£¿£¿

 

    3. ±¨ÎĵÄת·¢ÎÊÌ⣬£¬£¬£¬£¬£¬×ÝÈ»ÀֳɵĽâ¾öÁË·ÓɱíµÄ³åÍ»£¬£¬£¬£¬£¬£¬¿ÉÊǵ±PEÎüÊÕµ½Ò»¸öIP±¨ÎÄʱ£¬£¬£¬£¬£¬£¬ËûÓÖÔõÑùÄܹ»ÖªµÀ¸Ã·¢¸øË­ÈËVPN£¿£¿£¿£¿£¿ÓÉÓÚIP±¨ÎÄÍ·ÖÐΨһ¿ÉÓõÄÐÅÏ¢¾ÍÊÇÄ¿µÄµØµã¡£¡£¡£¡£¡£¡£¡£¡£¶øÐí¶àVPNÖж¼¿ÉÄܱ£´æÕâ¸öµØµã¡£¡£¡£¡£¡£¡£¡£¡£

 

3.1 VRF-VPN·ÓÉת·¢ÊµÀý£¨VPN Routing & Forwarding Instance£©

 

    ×Åʵ½â¾öµØµã³åÍ»µÄÎÊÌ⣬£¬£¬£¬£¬£¬Ò²±£´æһЩҪÁ죺ʹÓÃACL¡¢IP unnumber¡¢NAT¡£¡£¡£¡£¡£¡£¡£¡£µ«ÕâЩ²½·¥¶¼ÊÇ»ùÓÚ“´ò²¹¶¡”µÄÍ·ÄÔ£¬£¬£¬£¬£¬£¬Ã»ÄÜ´ÓʵÖÊÉϽâ¾öÎÊÌâ¡£¡£¡£¡£¡£¡£¡£¡£

 

    ÒªÏë³¹µ×½â¾ö£¬£¬£¬£¬£¬£¬±ØÐèÔÚÀíÂÛÉÏÓÐËùÍ»ÆÆ¡£¡£¡£¡£¡£¡£¡£¡£¿£¿£¿£¿£¿ÉÒÔ´ÓרÓÃPEÉÏ»ñµÃÆôʾ¡£¡£¡£¡£¡£¡£¡£¡£×¨Ó÷ÓÉÆ÷·½·¨·Ö¹¤Ã÷È·£¬£¬£¬£¬£¬£¬Ã¿¸öPEÖ»±£´æ×Ô¼ºVPNµÄ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£PÖ»±£´æ¹«Íø·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£¶øÏÖÔÚµÄ˼Ð÷ÊÇ£º½«ÕâЩËùÓÐ×°±¸µÄ¹¦Ð§£¬£¬£¬£¬£¬£¬ºÍÔÚһ̨PEÉÏÍê³É¡£¡£¡£¡£¡£¡£¡£¡£
 

 

                                     Í¼3-1

 

    ÿһ¸öVRF¿ÉÒÔ¿´×÷ÐéÄâµÄ·ÓÉÆ÷£¬£¬£¬£¬£¬£¬ËƺõÊÇһ̨רÓõÄPE×°±¸¡£¡£¡£¡£¡£¡£¡£¡£¸ÃÐéÄâ·ÓÉÆ÷°üÀ¨ÈçÏÂÔªËØ£º

    Ò»ÕÅ×ÔÁ¦µÄ·ÓÉ±í£¬£¬£¬£¬£¬£¬ËäȻҲ°üÀ¨ÁË×ÔÁ¦µÄµØµã¿Õ¼ä¡£¡£¡£¡£¡£¡£¡£¡£

 

    Ò»×é¹éÊôÓÚÕâ¸öVRFµÄ½Ó¿ÚµÄÜöÝÍ¡£¡£¡£¡£¡£¡£¡£¡£

 

    Ò»×éÖ»ÓÃÓÚ±¾VRFµÄ·ÓÉЭÒé¡£¡£¡£¡£¡£¡£¡£¡£

 

    ¹ØÓÚÿ¸öPE£¬£¬£¬£¬£¬£¬¿ÉÒÔά»¤Ò»¸ö»ò¶à¸öVRF£¬£¬£¬£¬£¬£¬Í¬Ê±Î¬»¤Ò»¸ö¹«ÍøµÄ·ÓÉ±í£¨Ò²½ÐÈ«¾Ö·ÓÉ±í£©£¬£¬£¬£¬£¬£¬¶à¸öVRFʵÀýÏ໥ÊèÉ¢×ÔÁ¦¡£¡£¡£¡£¡£¡£¡£¡£

 

    ×ÅʵʵÏÖVRF²¢²»ÄÑÌ⣬£¬£¬£¬£¬£¬Òªº¦ÔÚÓÚÔõÑùÔÚPEÉÏʹÓÃÌض¨µÄÕ½ÂÔ¹æÔòÀ´Ð­µ÷¸÷VRFºÍÈ«¾Ö·ÓɱíÖ®¼äµÄ¹Øϵ¡£¡£¡£¡£¡£¡£¡£¡£

 

3.2 VRFµÄ·ÓÉ·Ö·¢

 

 

                                   ͼ3-2

 

    ÈçͼÖÐËùʾ£¬£¬£¬£¬£¬£¬ÊôÓÚÒ»¸öVPNµÄsite¿ÉÄÜ»®·ÖÅþÁ¬µ½²î±ðµÄPEÉÏ¡£¡£¡£¡£¡£¡£¡£¡£ ΪÁË°ü¹ÜVPNµÄÁ¬Í¨ÐÔ£¬£¬£¬£¬£¬£¬ÎÒÃDZØÐèÔÚPEÖ®¼ä½»Á÷VPN·ÓÉÐÅÏ¢¡£¡£¡£¡£¡£¡£¡£¡£ VPN·ÓÉÓµÓÐ×Ô¼º×ÔÁ¦µÄµØµã¿Õ¼ä£¬£¬£¬£¬£¬£¬ÕâÖÖ·ÓÉÔÚ·þÎñÌṩÉ̵Ĺ«¹²ÍøÂçÖÐת´ï²»¿É½ÓÄÉͨË׵صã½á¹¹£¬£¬£¬£¬£¬£¬²»È»»áÓÉÓڵصã¿Õ¼äµÄÖصþµ¼Ö·ÓɱíµÄÔÓÂÒ£¬£¬£¬£¬£¬£¬¶øÊÇͨ¹ýRDÓëIPµØµãÒ»Æð×é³ÉΨһµÄVPN-IPV4µØµã½á¹¹À´×ª´ï¡£¡£¡£¡£¡£¡£¡£¡£Í¬Ê±ÔÚPEÖ®¼äÒ²²»¿É½ÓÄÉͨË׵ķÓÉЭÒ飬£¬£¬£¬£¬£¬¶øÊÇͨ¹ý¶ÔBGP×÷Ò»¶¨µÄÀ©Õ¹£¬£¬£¬£¬£¬£¬Ê¹ÓöàЭÒéBGP£¨MultiProtocol BGP£©À´½»Á÷VPNÐÅÏ¢¡£¡£¡£¡£¡£¡£¡£¡£ÕâЩÔÚÏÂÒ»²¿·Ý½«»á½²µ½¡£¡£¡£¡£¡£¡£¡£¡£

 

3.3 RD--·Óɱêʶ£¨Route Distinguisher£©ÓëVPN-IPv4µØµã

 

    ÔÚÇ°ÃæÌáµ½¹ý£¬£¬£¬£¬£¬£¬PEÖ®¼äͨ¹ý¹«¹²ÍøÂç½»Á÷VPN·ÓÉ£¬£¬£¬£¬£¬£¬²»¿É½ÓÄÉͨË׵ĵصã½á¹¹ºÍ·ÓÉЭÒé¡£¡£¡£¡£¡£¡£¡£¡£Òò´Ë£¬£¬£¬£¬£¬£¬Ê×ÏÈÒýÈëRD£¨Route Distinguisher£©µÄ¿´·¨¡£¡£¡£¡£¡£¡£¡£¡£

 

    RDÀ´±êʾÿ¸öVRF¡£¡£¡£¡£¡£¡£¡£¡£ RDÓëVRFÊÇÖðÒ»¶ÔÓ¦µÄ£¬£¬£¬£¬£¬£¬Ã¿Ò»¸öVRF¶¼ÓÐ×Ô¼ºµÄRD£¬£¬£¬£¬£¬£¬RDÔÚÖ÷¸ÉÍøÖмá³ÖΨһÐÔ£¬£¬£¬£¬£¬£¬ÊÇSiteµÄ±êʶ¡£¡£¡£¡£¡£¡£¡£¡£

 

    PE·ÓÉÆ÷Ö®¼äʹÓÃBGPÀ´Ðû²¼VPN·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£±ê×¼BGP¶Ôÿ¸öIPǰ׺ֻÄÜ×°ÖúÍÐû²¼Ò»¸ö·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£ÓÉÓÚÿ¸öVPNÓÐ×Ô¼ºµÄµØµã¿Õ¼ä£¬£¬£¬£¬£¬£¬Òâζ×ÅͬÑùµÄIPµØµã»á±»í§ÒâÊýÄ¿µÄVPNËùʹÓ㬣¬£¬£¬£¬£¬ÔÚÿ¸öVPNÖÐÕâ¸öµØµãÌåÏÖÒ»¸ö²î±ðµÄϵͳ¡£¡£¡£¡£¡£¡£¡£¡£ ÕâÑù¾ÍÐèÒªÔÊÐíBGP¶Ôÿ¸öVPNµÄÏàͬµÄIPǰ׺¿ÉÒÔ×°ÖúÍÐû²¼¶à¸ö·ÓÉ£¬£¬£¬£¬£¬£¬Í¬Ê±£¬£¬£¬£¬£¬£¬ÒªÊ¹ÓÃÌض¨µÄÕ½ÂÔÀ´¾öÒéÄÄÒ»Ìõ·Óɱ»ÄĸösiteËùʹÓᣡ£¡£¡£¡£¡£¡£¡£Îª´Ë£¬£¬£¬£¬£¬£¬¶àЭÒéBGP ʹÓÃÁËеĵصã×å--VPN-v4µØµã¡£¡£¡£¡£¡£¡£¡£¡£

 

                              ͼ3-3

 

    Ò»¸öVPN-v4µØµãÓÐ12¸ö×Ö½Ú£¬£¬£¬£¬£¬£¬×îÏÈÊÇ8×Ö½ÚµÄRD£¬£¬£¬£¬£¬£¬½ÓÏÂÈ¥ÊÇ4×Ö½ÚµÄIPµØµã¡£¡£¡£¡£¡£¡£¡£¡£ÈôÊÇÁ½¸öVPNʹÓÃÏàͬµÄIPµØµã£¬£¬£¬£¬£¬£¬PE·ÓÉÆ÷ΪËüÃÇÌí¼Ó²î±ðµÄRD£¬£¬£¬£¬£¬£¬×ª»»³ÉΨһµÄVPN-v4µØµã£¬£¬£¬£¬£¬£¬²»»áÔì³ÉµØµã¿Õ¼äµÄ³åÍ»¡£¡£¡£¡£¡£¡£¡£¡£

 

    ʹÓÃVPN-v4µØµã½â¾öÁËVPN·ÓÉÔÚ¹«¹²ÍøÂçÖÐת´ïʱµÄµØµã¿Õ¼ä³åÍ»ÎÊÌ⣬£¬£¬£¬£¬£¬µ«ÓÉÓÚÕâÒѾ­²»ÔÙÊÇÔ­ÓеÄIPµØµã×åµÄµØµã½á¹¹£¬£¬£¬£¬£¬£¬²»¿É±»Í¨Ë׵ķÓÉЭÒéËù³ÐÔØ£¬£¬£¬£¬£¬£¬Í¬Ê±£¬£¬£¬£¬£¬£¬Ã¿Ò»¸öÓû§ÍøÂ綼ÊÇ×ÔÁ¦µÄϵͳ£¬£¬£¬£¬£¬£¬ËüÃÇÖ®¼ä¾­ÓÉ·þÎñÌṩÉ̵Ä·ÓÉÐÅϢת´ïʹÓÃIGPЭÒéÏÔÈ»ÊDz»Êʺϵģ¬£¬£¬£¬£¬£¬ÓÚÊÇÎÒÃÇÐèÒª½«BGPЭÒé×÷Ò»¶¨µÄÀ©Õ¹£¬£¬£¬£¬£¬£¬ÓÃËüÀ´³ÐÔØеÄVPN-v4µØµã×å·ÓÉ£¬£¬£¬£¬£¬£¬Í¬Ê±×ª´ï¸½¼ÓÔÚ·ÓÉÉϵÄRoute TargetÊôÐÔ¡£¡£¡£¡£¡£¡£¡£¡£

 

    ͨ¹ýRDÓëVPN-IPv4µØµã£¬£¬£¬£¬£¬£¬½â¾öÁË·ÓÉÔÚÍøÂçÖеÄÈö²¥£¬£¬£¬£¬£¬£¬Á½ÌõÏàͬµÄ·ÓÉ£¬£¬£¬£¬£¬£¬¶¼ÔÚÍøÂçÖÐÈö²¥£¬£¬£¬£¬£¬£¬¹ØÓÚÎüÊÕÕßÔõÑùÇø·ÖÏ໥ÎÊÌâ¡£¡£¡£¡£¡£¡£¡£¡£

 

3.4 BGPÀ©Õ¹ÓëRoute TargetÊôÐÔ

 

    PEÖ®¼ä½»Á÷VPNÐÅÏ¢£¬£¬£¬£¬£¬£¬ÔÚBGPµÄUPDATE±¨ÎÄÖгÐÔØVPN-v4µØµã×å·ÓÉ£¬£¬£¬£¬£¬£¬Õâ¾ÍÊǶÔBGP¾ÙÐÐÁËÀ©Õ¹µÄMBGP£¨¶àЭÒéBGP£©¡£¡£¡£¡£¡£¡£¡£¡£MBGP²»µ«ÄܳÐÔØIPv4·ÓÉ£¬£¬£¬£¬£¬£¬²¢ÇÒÄܳÐÔØVPN£¬£¬£¬£¬£¬£¬IPv6£¬£¬£¬£¬£¬£¬¶à²¥µÈ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£ MBGPÓÐÁ½¸öÖ÷ÒªµÄÊÂÇ飬£¬£¬£¬£¬£¬ÎªÂ·ÓÉÖ¸¶¨Ìض¨ÍøÂç²ãЭÒéµÄÏÂÒ»ÌøºÍNLRI£¨ÍøÂç²ã¿É´ïÐÅÏ¢£©¡£¡£¡£¡£¡£¡£¡£¡£

 

                                  ͼ3-4

 

    BGPÀ©Õ¹ÕûÌåÊôÐÔÊǶÔÕûÌåÊôÐÔ×öÁËÀ©Õ¹£¬£¬£¬£¬£¬£¬Ôö´óÁËÖµÓò£¬£¬£¬£¬£¬£¬²¢»®¶¨ÁËÄÚ²¿½á¹¹¡£¡£¡£¡£¡£¡£¡£¡£À©Õ¹ÕûÌåÊôÐÔÊÇÒ»¸ö¹ý¶É¿ÉÑ¡ÊôÐÔ£¬£¬£¬£¬£¬£¬ËüÓÉÒ»¸öÀ©Õ¹ÕûÌåµÄÜöÝÍ×é³É£¬£¬£¬£¬£¬£¬Ã¿¸öÀ©Õ¹ÕûÌåÊÇ8×Ö½ÚµÄÊý¡£¡£¡£¡£¡£¡£¡£¡£Route TargetÊôÐÔÊÇÓÉBGPµÄÀ©Õ¹ÕûÌåÊôÐÔÀ´ÌåÏֵġ£¡£¡£¡£¡£¡£¡£¡£

 

Route Target ÊôÐÔ

 

    VPNµÄ³ÉÔ±¹ØϵÊÇͨ¹ý·ÓÉËùЯ´øµÄroute targetÊôÐÔÀ´»ñµÃµÄ¡£¡£¡£¡£¡£¡£¡£¡£ PEÖÐÿ¸öSiteµÄ·ÓɱíÖеÄ·ÓÉÏî¿ÉÒÔÓÐÒ»»ò¶à¸öRoute TargetÊôÐÔ¡£¡£¡£¡£¡£¡£¡£¡£ ËüÌåÏÖÁ˸÷ÓÉ¿ÉÒÔ±»ÄÄЩsiteËùÎüÊÕ£¬£¬£¬£¬£¬£¬ÎüÊÕÄÄЩsiteµÄ´«ËÍÀ´µÄ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£

 

    Ò»¸ö¾ßÓÐÕâÖÖÊôÐԵķÓɱØÐè·¢Ë͸øËùÓÐÔÚRoute TargetÖÐÖ¸Ã÷µÄsiteËùÅþÁ¬µÄPE·ÓÉÆ÷£¬£¬£¬£¬£¬£¬PEÎüÊÕµ½°üÀ¨´ËÊôÐԵķÓɺ󣬣¬£¬£¬£¬£¬Èô´ËÊôÐÔÖ¸Ã÷µÄsiteͬ¼ºÒ»Ö£¬£¬£¬£¬£¬£¬Ôò¼ÓÈëµ½ÏìÓ¦µÄ·ÓɱíÖС£¡£¡£¡£¡£¡£¡£¡£

 

    RTµÄʵÖÊÊÇÿ¸öVRF±í´ï×Ô¼ºµÄ·ÓÉÈ¡Éἰϲ»¶µÄ·½·¨¡£¡£¡£¡£¡£¡£¡£¡£¿£¿£¿£¿£¿ÉÒÔ·ÖΪÁ½²¿·Ö£ºExport TargetÓëimport Target£»£»£»£»£»Ç°ÕßÌåÏÖÁËÎÒ·¢³öµÄ·ÓɵÄÊôÐÔ£¬£¬£¬£¬£¬£¬´ËºóÕßÌåÏÖÁËÎÒ¶ÔÄÇЩ·ÓɸÐÐËȤ¡£¡£¡£¡£¡£¡£¡£¡£ÀýÈ磺

 

    SITE-A£ºÎÒ·¢µÄ·ÓÉÊǺìÉ«µÄ£¬£¬£¬£¬£¬£¬ÎÒÒ²Ö»ÎüÊÕºìÉ«µÄ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£

 

    SITE-B£ºÎÒ·¢µÄ·ÓÉÊǺìÉ«µÄ£¬£¬£¬£¬£¬£¬ÎÒÒ²Ö»ÎüÊÕºìÉ«µÄ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£

 

    SITE-C£ºÎÒ·¢µÄ·ÓÉÊÇÐþÉ«µÄ£¬£¬£¬£¬£¬£¬ÎÒÒ²Ö»ÎüÊÕÐþÉ«µÄ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£

 

    SITE-D£ºÎÒ·¢µÄ·ÓÉÊÇÐþÉ«µÄ£¬£¬£¬£¬£¬£¬ÎÒÒ²Ö»ÎüÊÕÐþÉ«µÄ·ÓÉ¡£¡£¡£¡£¡£¡£¡£¡£

 

    ÕâÑù£¬£¬£¬£¬£¬£¬SITE£­AÓëSITE-BÖоÍÖ»ÓÐ×Ô¼ººÍ¶Ô·½µÄ·ÓÉ£¬£¬£¬£¬£¬£¬Á½ÕßʵÏÖÁË»¥·Ã¡£¡£¡£¡£¡£¡£¡£¡£Í¬ÀíSITE£­CÓëSITE-DÒ²Ò»Ñù¡£¡£¡£¡£¡£¡£¡£¡£ÕâʱÎÒÃǾͿÉÒÔ°ÑSITE-AÓëSITE£­B³ÆΪVPN-A£¬£¬£¬£¬£¬£¬¶ø°ÑSITE-CÓëSITE-D³ÆΪVPN-B£¬£¬£¬£¬£¬£¬ÈçÏÂͼ£º
 

 

 

                                   Í¼3-5

 

    ¶ÔÒ»¸öPE£¬£¬£¬£¬£¬£¬ÓÐÒ»¸öRoute TargetÊôÐԵļ¯ÊÊÓÃÓÚ¸½¼Óµ½´Óij¸ösiteÎüÊյķÓÉÉÏ£¬£¬£¬£¬£¬£¬³ÆΪExport Route Target£¬£¬£¬£¬£¬£¬ÁíÒ»¸öRoute TargetÊôÐԵļ¯ÊÊÓÃÓÚ¾öÒéÄÄЩ·ÓÉ¿ÉÒÔÒýÈëµ½´ËsiteµÄ·ÓɱíÖУ¬£¬£¬£¬£¬£¬³ÆΪImport Route Target¡£¡£¡£¡£¡£¡£¡£¡£ËüÃÇÊDzî±ðµÄÜöÝÍ¡£¡£¡£¡£¡£¡£¡£¡£ÕâÁ½¸öÜöÝ͵Ä×éºÏ¿ÉÒԽṹÈκÎÍØÆËÀàÐ͵ÄVPN¡£¡£¡£¡£¡£¡£¡£¡£

 

    ÔÚPEÉÏ£¬£¬£¬£¬£¬£¬Ã¿¸öVRF¶¼ÓÐÒ»¸öImport Route TargetÁÐ±í£¬£¬£¬£¬£¬£¬Ö»Óе±Â·ÓɵÄExport¡¡Route TargetÓëVRFµÄImport Route TargetÁбíÏàÆ¥Å䣬£¬£¬£¬£¬£¬Â·ÓɲŻᱻÒýÈëµ½¸ÃVRFµÄ·ÓɱíÖС£¡£¡£¡£¡£¡£¡£¡£

 

RTµÄÎÞаӦÓÃ

 

    ÓÉÓÚÿ¸öRT Export TargetÓëimport Target¶¼¿ÉÒÔÉèÖöà¸öÊôÐÔ£¬£¬£¬£¬£¬£¬ÀýÈ磺ÎÒ¶ÔºìÉ«»òÕßÀ¶É«µÄ·Óɶ¼¸ÐÐËȤ¡£¡£¡£¡£¡£¡£¡£¡£ÎüÊÕʱÊÇ“»ò”²Ù×÷£¬£¬£¬£¬£¬£¬ºìÉ«µÄ¡¢À¶É«µÄÒÔ¼°Í¬Ê±¾ß±¸Á½ÖÖÑÕÉ«µÄ·Óɶ¼»á±»½ÓÊÜ¡£¡£¡£¡£¡£¡£¡£¡£ÒÔÊǾͿÉÒÔʵÏÖºÜÊÇÎÞаµÄVPN»á¼û¿ØÖÆ¡£¡£¡£¡£¡£¡£¡£¡£

 

 

 

                                  ͼ3-6

 

3.5 ˽Íø±êÇ©

 

    ÖÁ´Ë£¬£¬£¬£¬£¬£¬Ç°Á½¸öÎÊÌ⣺ÔÚPEÍâµØµÄ·ÓɳåÍ»ºÍÍøÂçÈö²¥Àú³ÌµÄ³åÍ»¶¼Òѽâ¾ö¡£¡£¡£¡£¡£¡£¡£¡£¿ÉÊÇÈôÊÇÒ»¸öPEµÄÁ½¸öÍâµØVRFͬʱ±£´æ10.0.0.0/24µÄ·ÓÉ£¬£¬£¬£¬£¬£¬µ±ËûÎüÊÕµ½Ò»¸öÄ¿µÄµØµãΪ10.0.0.1µÄ±¨ÎÄʱ£¬£¬£¬£¬£¬£¬ËûÔõÑùÖªµÀ¸Ã°ÑÕâ¸ö±¨ÎÄ·¢¸øÓëÄĸöVRFÏàÁ¬µÄCE£¿£¿£¿£¿£¿Ò»¶¨»¹ÐèÒªÔÚ±»×ª·¢µÄ±¨ÎÄÖÐÔöÌíһЩÐÅÏ¢¡£¡£¡£¡£¡£¡£¡£¡£

 

    ·ÓÉÐû²¼Ê±ÒѾ­Ð¯´øÁËRD£¬£¬£¬£¬£¬£¬ÀíÂÛÉÏ¿ÉÒÔʹÓÃRD×÷Ϊ±êʶÄØ£¬£¬£¬£¬£¬£¬¿ÉÊÇRDÒ»¹²ÓÐ64¸öbit£¬£¬£¬£¬£¬£¬Ì«´óÁË¡£¡£¡£¡£¡£¡£¡£¡£Õâ»áµ¼ÖÂת·¢Ð§ÂʵĽµµÍ¡£¡£¡£¡£¡£¡£¡£¡£ÒÔÊÇÖ»ÐèÒªÒ»¸ö¶ÌС¡¢¶¨³¤µÄ±ê¼Ç¼´¿É¡£¡£¡£¡£¡£¡£¡£¡£ÓÉÓÚ¹«ÍøµÄËíµÀÒѾ­ÓÉMPLSÀ´Ìṩ£¬£¬£¬£¬£¬£¬²¢ÇÒMPLSÖ§³Ö¶à²ã±êÇ©µÄǶÌ×£¬£¬£¬£¬£¬£¬Õâ¸ö±ê¼Ç½ç˵³ÉMPLS±êÇ©µÄÃûÌᣡ£¡£¡£¡£¡£¡£¡£Õâ¸ö˽ÍøµÄ±êÇ©¾ÍÓÉMP-BGPÀ´·ÖÅÉ£¬£¬£¬£¬£¬£¬Óë˽ÍøµÄ·ÓÉһͬÐû²¼³öÈ¥¡£¡£¡£¡£¡£¡£¡£¡£

 

3.6 BGPÐû²¼Â·ÓÉʱÐèҪЯ´øµÄÐÅÏ¢

 

    Ò»¸öÀ©Õ¹Ö®ºóµÄNLRI£¨Network Layer Reachability Information£©£¬£¬£¬£¬£¬£¬ÔöÌíÁ˵صã×åµÄÐÎò£¬£¬£¬£¬£¬£¬ÒÔ¼°Ë½ÍølabelºÍRD¡£¡£¡£¡£¡£¡£¡£¡£
 

 

    ×·ËæÖ®ºóµÄÊÇRTµÄÁбí

 

    ¹ØÓÚʹÓÃÁËÀ©Õ¹ÊôÐÔMP_REACH_NLRIµÄBGP£¬£¬£¬£¬£¬£¬ÎÒÃdzÆ֮ΪMP-BGP¡£¡£¡£¡£¡£¡£¡£¡£

 

4 BGP MPLS/VPN·ÓÉ·Ö·¢¡¢±¨ÎÄת·¢»úÖÆ

 

    ÔÚMPLS VPNÖУ¬£¬£¬£¬£¬£¬ÓÉÓÚ½ÓÄÉÁËÁ½²ã±êÇ©Õ»½á¹¹£¬£¬£¬£¬£¬£¬ÒÔÊÇP²¢²»¼ÓÈëVPN·ÓÉÐÅÏ¢µÄ½»»¥£¬£¬£¬£¬£¬£¬VPNÕ¾µãÄÚ²¿ÊÇͨ¹ýCEÓëPE¡¢PEÓëPEÖ®¼äµÄ·Óɽ»»¥ÖªµÀÊôÓÚij¸öVPNµÄÍøÂçÍØÆËÐÅÏ¢¡£¡£¡£¡£¡£¡£¡£¡£
 

Ïêϸ¿ÉÒÔ¹éÄÉΪÈçÏÂ3¸ö°ì·¨£º
 

    1. CEÓëPEÖ®¼äµÄ·Óɽ»Á÷
 

    2. PEÓëPEÖ®¼äµÄ·Óɽ»Á÷
 

    3. PEÓëCEÖ®¼äµÄ·Óɽ»Á÷

 

4.1 CEÓëPEÖ®¼äµÄ·Óɽ»Á÷

 

    ÔÚPEÉÏΪ²î±ðµÄVPNÕ¾µãÉèÖÃVRF¡£¡£¡£¡£¡£¡£¡£¡£PEÉÏά»¤¶à¸ö×ÔÁ¦µÄ·ÓÉ±í£¬£¬£¬£¬£¬£¬°üÀ¨¹«ÍøºÍ˽Íø·ÓÉ±í£¨VRF£©£¬£¬£¬£¬£¬£¬ÆäÖУº
 

    1. ¹«Íø·ÓÉ±í£º°üÀ¨µÖ´ïÆäËûPEºÍPµÄ·ÓÉ£¬£¬£¬£¬£¬£¬ÓÉÖ÷¸ÉÍøµÄIGP±¬·¢¡£¡£¡£¡£¡£¡£¡£¡£
 

    2. ˽Íø·ÓÉ±í£º°üÀ¨±¾VPN¿ÉµÖ´ïµÄ·ÓÉ£¨¼´ÊôÓÚ¸ÃVPNµÄ²î±ðÕ¾µãÖ®¼äµÄ·ÓÉ£©¡£¡£¡£¡£¡£¡£¡£¡£

 

                              ͼ4-1

 

    CEÓëPEÖ®¼äͨ¹ý½ÓÄɾ²Ì¬Â·ÓÉ¡¢¶¯Ì¬Â·ÓÉЭÒ飨ÈçOSPF,RIP…£©¾ÙÐзÓÉÐÅÏ¢µÄ½»»¥¡£¡£¡£¡£¡£¡£¡£¡£ µ±Ingress PE´Óij¸ö½Ó¿ÚÎüÊÕµ½À´×ÔCEµÄ·ÓÉÐÅϢʱ£¬£¬£¬£¬£¬£¬½«¸Ã·Óɵ¼Èë¶ÔÓ¦µÄVRF¡£¡£¡£¡£¡£¡£¡£¡£

 

4.2 PEÓëPEÖ®¼äµÄ·Óɽ»Á÷

 

    PEÓëPEÖ®¼äµÄ·Óɽ»Á÷ʵÖÊÉϾÍÊǽ«PEÉϵÃVRF·ÓÉ×¢Èëµ½MP-IBGP²¢Í¨¹ýMP-IBGPÔÚPE¼ä½»Á÷µÄÀú³Ì¡£¡£¡£¡£¡£¡£¡£¡£

 

 

                              ͼ4-2

 

    PEͨ¹ýά³ÖIBGPÈ·±£Â·ÓÉÐÅÏ¢±»·Ö·¢¸øËùÓÐÆäËüµÄPE¡£¡£¡£¡£¡£¡£¡£¡£µ±Ingress PE·Ö·¢Â·ÓÉÐÅϢʱ£¬£¬£¬£¬£¬£¬½«Í¬Ê±Ð¯Áì·ÓÉËùÔÚVRFµÄRD£¬£¬£¬£¬£¬£¬¼´½«Â·ÓɵÄIPv4µØµãǰ׺ת»¯ÎªVPN-IPv4µØµã¡£¡£¡£¡£¡£¡£¡£¡£

 

    ·Ö·¢µÄÏêϸ·ÓÉÐÅÏ¢£¨VPN-IPv4·ÓÉÐÅÏ¢£©°üÀ¨£º
 

    ¸Ã·ÓɵÄVPN-IPv4µØµãǰ׺
 

    ÏÂÒ»ÌøµØµã¼´Ingress PEµÄVPN-IPv4µØµã£¨Í¨³£ÊÇPEÉϵÄLoopback½Ó¿ÚµØµã£¬£¬£¬£¬£¬£¬ÆäRD=0£©
 

    ·ÖÅɸø¸Ã·ÓɵÄVPN±êÇ©£¨ÓÃÀ´±êʶÊôÓÚÄĸöVPN»òÕß˵ÊÇÄĸöVRF£©
 

    ¸Ã·ÓÉËùÔÚVRFµÄExport RT
 

 

4.3 PEÓëCEÖ®¼äµÄ·Óɽ»Á÷

 

    PEÓëCEÖ®¼äµÄ·Óɽ»Á÷¼´ÎªMP-IBGP°Ñ·ÓÉ×¢Èëµ½PEÉϵÄVRFÈ»ºóͨ¹ýPEÓëCEÉÏÔËÐеÄ·ÓÉЭÒéÔÙ·Ö·¢¸øCEµÄÀú³Ì¡£¡£¡£¡£¡£¡£¡£¡£

 

 

                                 ͼ4-3

 

    µ±Egress PEÊÕµ½Â·ÓÉÐÅϢʱ£¬£¬£¬£¬£¬£¬½«Éó²é¸Ã·ÓɵÄRT£¬£¬£¬£¬£¬£¬ÈôÊÇRTºÍÆäí§ÒâVRFÖÐí§ÒâÒ»¸öImport RTÏà·ûʱ£¬£¬£¬£¬£¬£¬¾Í½«¸Ã·ÓÉ´æÈëVPN-IPv4µÄ·Óɱí¡£¡£¡£¡£¡£¡£¡£¡£

 

    ÔÚ¾ÙÐзÓÉÑ¡ÔñÖ®ºó£¬£¬£¬£¬£¬£¬½«×îÓÅ·ÓÉÖеÄVPN-IPv4µØµãת»¯³ÉIPv4µØµã£¨¼´È¥µôµØµãÖеÄRD£©µ¼Èëµ½ÏìÓ¦µÄVRF£¬£¬£¬£¬£¬£¬Ë½Íø±êÇ©±£´æ£¬£¬£¬£¬£¬£¬¼Í¼µ½×ª½ÒÏþÖУ¬£¬£¬£¬£¬£¬Áô×öת·¢Ê±Ê¹Óᣡ£¡£¡£¡£¡£¡£¡£
ÔÙÓɱ¾VRFµÄ·ÓÉЭÒéÒýÈ벢ת´ï¸øÏìÓ¦µÄCE¡£¡£¡£¡£¡£¡£¡£¡£·¢¸øCEʱÏÂÒ»ÌøΪÎüÊÕ¶ËPE×Ô¼ºµÄ½Ó¿ÚµØµã¡£¡£¡£¡£¡£¡£¡£¡£ÕâÑù¾ÍÍê³ÉÁË´ÓMP-IBGP·ÓÉ×¢Èëµ½VRFµÄÀú³Ì¡£¡£¡£¡£¡£¡£¡£¡£

 

4.4 MPLS/VPN ±¨ÎÄת·¢

 

 

                                    Í¼4-4

    ÔÚMPLS VPNÖУ¬£¬£¬£¬£¬£¬ÊôÓÚͳһµÄVPNµÄÁ½¸öSite Ö®¼äת·¢±¨ÎÄʹÓÃÁ½²ã±êÇ©À´½â¾ö£¬£¬£¬£¬£¬£¬ÔÚÈë¿ÚPEÉÏΪ±¨ÎÄ´òÉÏÁ½²ã±êÇ©£¬£¬£¬£¬£¬£¬µÚÒ»²ã£¨Íâ²ã£©±êÇ©ÔÚÖ÷¸ÉÍøÄÚ²¿¾ÙÐн»Á÷£¬£¬£¬£¬£¬£¬´ú±íÁË´ÓPEµ½¶Ô¶ËPEµÄÒ»ÌõËíµÀ£¬£¬£¬£¬£¬£¬VPN±¨ÎÄ´òÉÏÕâ²ã±êÇ©£¬£¬£¬£¬£¬£¬¾Í¿ÉÒÔÑØ×ÅLSPµÖ´ï¶Ô¶ËPE£¬£¬£¬£¬£¬£¬Õâʱ¼ä¾ÍÐèҪʹÓõڶþ²ã£¨Äڲ㣩±êÇ©£¬£¬£¬£¬£¬£¬Õâ²ã±êǩָʾÁ˱¨ÎÄÓ¦¸ÃµÖ´ïÄĸösite£¬£¬£¬£¬£¬£¬»òÕ߸üÏêϸһЩ£¬£¬£¬£¬£¬£¬µÖ´ïÄÄÒ»¸öCE£¬£¬£¬£¬£¬£¬ÕâÑù£¬£¬£¬£¬£¬£¬Æ¾Ö¤ÄÚ²ã±êÇ©£¬£¬£¬£¬£¬£¬¾Í¿ÉÒÔÕÒµ½×ª·¢µÄ½Ó¿Ú¡£¡£¡£¡£¡£¡£¡£¡£¿£¿£¿£¿£¿ÉÒÔÒÔΪ£¬£¬£¬£¬£¬£¬ÄÚ²ã±êÇ©´ú±íÁËͨ¹ýÖ÷¸ÉÍøÏàÁ¬µÄÁ½¸öCEÖ®¼äµÄÒ»¸öËíµÀ¡£¡£¡£¡£¡£¡£¡£¡£

 

5 aggame¹ÙÍøÍøÂçBGP MPLS VPNʵÏÖ

 

5.1 ×éÍøÐèÇó

 

    ÒªÇó£ºÓÐÁ½¸öVPNÓû§£¬£¬£¬£¬£¬£¬VPNAºÍVPNB¡£¡£¡£¡£¡£¡£¡£¡£VPNAÔÚ¸£ÖݺÍÉϺ£ÓÐ×Ô¼ºµÄÕ¾µã£¬£¬£¬£¬£¬£¬VPNB ÔÚ±±¾©ºÍÉϺ£ÓÐ×Ô¼ºµÄÕ¾µã£¬£¬£¬£¬£¬£¬ÏÖÔÚÒªVPNA ÄÚµÄÓû§¿ÉÒÔ»á¼û×Ô¼º¸£ÖݺÍÉϺ£µÄ×ÊÔ´£¬£¬£¬£¬£¬£¬VPNB ÄÚµÄÓû§¿ÉÒÔ»á¼û×Ô¼º±±¾©ºÍÉϺ£µÄ×ÊÔ´£¬£¬£¬£¬£¬£¬Á½¸öVPN Ö®¼ä²»¿ÉÏ໥»á¼û¡£¡£¡£¡£¡£¡£¡£¡£

 

5.2 ×éÍøÍØÆË

 

 

                                    ͼ5-1

 

5.3 ÉèÖð취

 

1. ÉèÖÃPE

 

    ÒÔPE_SH ΪÀý£º
 

    ÉèÖÃVRF
 

    ÔÚPE_SHÉϽç˵Á½¸öVRF£¬£¬£¬£¬£¬£¬VRFA_SHºÍVRFB_SH£¬£¬£¬£¬£¬£¬»®·ÖΪÕâÁ½¸öVRF½ç˵RÖµºÍRTÖµ£¬£¬£¬£¬£¬£¬²¢°ÑVRFºÍ¶ÔÓ¦µÄ½Ó¿Ú¹ØÁªÆðÀ´¡£¡£¡£¡£¡£¡£¡£¡£
 

ÉèÖÃBGP ЭÒé

 

ÔÚPE_FZºÍPE_BJÉèÖÃÀú³ÌºÍÉÏÃæÀàËÆ¡£¡£¡£¡£¡£¡£¡£¡£

 

2. ÉèÖÃCE

 

    ÒÔVPNB_SH ΪÀý:
 

    ÉèÖÃBGP
 

VPNA_SH¡¢VPNA_FZºÍVPNB_BJµÄÉÏCEµÄÉèÖúÍVPNB_SHÀàËÆ¡£¡£¡£¡£¡£¡£¡£¡£

 

3. ÉèÖÃP

 

ÒÔP1ΪÀý£º
 

P2ÉϵÄÉèÖúÍP1ÀàËÆ¡£¡£¡£¡£¡£¡£¡£¡£

6 BGP/MPLS IP VPN±ê׼ϵͳÉú³¤

 

    IETFÒѾ­ÔÚ2004Ä꽨ÉèÁËL3VPNµÄÊÂÇé×éרÃÅÑо¿L3VPNµÄÊÖÒÕºÍÓ¦Ó㬣¬£¬£¬£¬£¬ÕâÀïÖ÷Òª½²ÓëBGP/MPLS VPN×îÖ±½ÓÏà¹ØµÄRFC£¬£¬£¬£¬£¬£¬ BGP/MPLS IP VPNµÄÊÖÒÕ×îÔçÓÉIETFÔÚ1999ÄêÔÚRFC 2547Ìá³ö£¬£¬£¬£¬£¬£¬Øʺó³öÁËÒ»¸öÐÞ¶©°æ½ÐRFC2547bis£¬£¬£¬£¬£¬£¬ÏÖÓеÄÍøÂç×°±¸ÌṩÉÌʵÏÖµÄBGP/MPLS VPN¶¼ÊÇƾ֤RFC2547bisʵÏֵġ£¡£¡£¡£¡£¡£¡£¡£ËæןÃÊÖÒÕ±»¸÷¸öÍøÂç×°±¸³§ÉÌÖ§³Ö²¢Ó¦Ó㬣¬£¬£¬£¬£¬¸ÃÊÖÒÕÒѾ­±»Êµ¼ù֤ʵ½ÏÁ¿³ÉÊì¡£¡£¡£¡£¡£¡£¡£¡£2006ÄêIETFƾ֤ÕâЩÄêÔÚÓ¦ÓÃÀú³ÌÖеÄʵ¼ù×ܽá½øÒ»²½ÍêÉÆÁ˸ÃÊÖÒÕ£¬£¬£¬£¬£¬£¬ÖØÐÂÐû²¼ÁËRFC4364²¢ÉùÃ÷·ÅÆúÁËRFC2547¡£¡£¡£¡£¡£¡£¡£¡£RFC4364ÄÚÀïÏêϸÐðÊöÁËBGP/MPLS IP VPNsµÄ¼Ü¹¹¡¢ÊÖÒÕʵÏֺͰ²ÅÅ¡£¡£¡£¡£¡£¡£¡£¡£ÁíÍâÓÉÓÚBGP/MPLS IP VPNsµÄÊÖÒÕʵÏÖÐèÇ󣬣¬£¬£¬£¬£¬¶ÔBGPЭÒéµÄÌØÕ÷¾ÙÐÐÁË´ó×ÚµÄÀ©Õ¹£¬£¬£¬£¬£¬£¬Ö÷Òª°üÀ¨£º
 

    RFC2858 Multiprotocol Extensions for BGP-4 Ö§³Ö¶àЭÒéÀ©Õ¹µÄBGP
 

    draft-ietf-idr-as4bytes ASºÅÓÉÔ­À´µÄ2×Ö½Ú±äΪ4×ֽڵĴ¦Öóͷ£
 

    RFC1997 BGP Communities Attribute BGPµÄÕûÌåÊôÐÔ
 

    RFC2918 Route Refresh Capability for BGP-4 BGPµÄˢлúÖÆ
 

    draft-ietf-idr-route-filter Cooperative Route Filtering Capability for BGP-4 BGPµÄORF»úÖÆ
 

    RFC2796 BGP Route Reflection BGPµÄ·ÓÉ·´ÉäÆ÷ʵÏÖ
 

    RFC3107 Carrying Label Information in BGP-4 ÔõÑùÔÚBGPÖÐЯ´øMPLS±êÇ©
 

    RFC4360 BGP Extended Communities Attribute BGPµÄÀ©Õ¹ÕûÌåÊôÐÔ

 

ʹÓÃBGP/MPLSʵÏÖµÄLayer3 VPNÖ÷ÒªÓÐÈçÏÂÌص㣺

 

    VPNµÄËíµÀÊÇÔÚÍøÂç·þÎñÌṩÉ̵ÄPEÉϽ¨ÉèµÄ£¬£¬£¬£¬£¬£¬¶ø²»ÊÇÔÚÓû§µÄCEÖ®¼ä½¨ÉèµÄ¡£¡£¡£¡£¡£¡£¡£¡£VPNµÄ·ÓÉÒ²ÊÇÔÚPEºÍPEÖ®¼äת´ï£¬£¬£¬£¬£¬£¬¶ø²»ÔÚCEÖ®¼äת´ï¡£¡£¡£¡£¡£¡£¡£¡£ÕâÑùÓû§¾Í²»ÐèÒª·¢Ê²Ã´¾«Éñά»¤×Ô¼ºµÄVPN¡£¡£¡£¡£¡£¡£¡£¡£BGP/MPLS IP VPNÒ²ÊôÓÚ·þ ÎñÉÌÌṩµÄVPNÊÖÒÕ£¬£¬£¬£¬£¬£¬¹ØÓÚ·þÎñÉÌÌṩµÄVPN£¬£¬£¬£¬£¬£¬IETF¸øÆäÁËÒ»¸öÊõÓï½ÐProvider Provisioned VPN£¬£¬£¬£¬£¬£¬¼ò³ÆΪPPVPN

 

    °ÑVPNËíµÀµÄ°²Åż°Â·ÓÉÐû²¼±äΪ¶¯Ì¬ÊµÏÖ£¬£¬£¬£¬£¬£¬ÕâÑùÓÐÀûÓÚVPNµÄ¹æÄ£À©´ó£¬£¬£¬£¬£¬£¬¿ÉÒÔºÜÈÝÒ×ʵÏÖÌí¼ÓÒ»¸öеÄVPN»òÕßÊÇеÄÕ¾µã¼ÓÈëµ½Ò»¸öÏÖÓеÄVPNÖС£¡£¡£¡£¡£¡£¡£¡£

 

    Ö§³ÖµØµãÖصþ£¨²î±ðVPN¿ÉÒÔʹÓÃÏàͬµÄµØµã¿Õ¼ä£©¡£¡£¡£¡£¡£¡£¡£¡£

 

    ÔÚ·þÎñÌṩÉ̵ÄÍøÂçÖУ¬£¬£¬£¬£¬£¬VPNµÄÓªÒµÁ÷ʹÓñêÇ©½»Á÷ת·¢¶ø²»ÊǹŰåµÄ·ÓÉת·¢¡£¡£¡£¡£¡£¡£¡£¡£

 

    Äܹ»ÎªÆóÒµÌṩ¾ß±¸×¨Ïß¼¶Çå¾²°ü¹ÜµÄ»¥Áª¼Æ»®¡£¡£¡£¡£¡£¡£¡£¡£

 

    ¿ÉÒÔʹÓÃMPLSÊÖÒÕʵÏÖÁ÷Á¿¹¤³Ì£¬£¬£¬£¬£¬£¬Ö§³ÖÓû§µÄÖÖÖÖQosÐèÇ󡣡£¡£¡£¡£¡£¡£¡£

 

    Ïà½ÏÓڹŰ巽·¨£¬£¬£¬£¬£¬£¬»ùÓÚMPLSµÄVPNÔÚ¿ÉÀ©Õ¹ÐÔ¡¢·þÎñÖÊÁ¿ºÍÇå¾²ÐԵȷ½ÃæÕ¹ÏÖ³öÏÔÖøÌصã¡£¡£¡£¡£¡£¡£¡£¡£Òò´ËMPLS VPNÊÖÒÕÊÇδÀ´¹¹½¨VPNµÄÉú³¤Æ«Ïò£¬£¬£¬£¬£¬£¬»áÔ½À´Ô½Êܵ½¿Í»§ºÍÔËÓªÉ̵ĹØ×¢¡£¡£¡£¡£¡£¡£¡£¡£