Ambos clientes tienen las mismas redes a fin de demostrar que las VRF hacen posible el escenario entre clientes; por lo que utilizaremos loopback interfaces diferentes en cada router y las asignaremos a diferentes protocolos de ruteo, probando así que existe la separación.
Desde del lado del cliente no hay nada especial:
blue1#sh runn | beg router
router eigrp 10
network 10.11.0.0 0.0.0.7
network 11.0.0.1 0.0.0.0
!
router ospf 10
network 10.11.0.0 0.0.0.7 area 0
network 11.0.0.2 0.0.0.0 area 1
!
router rip
version 2
passive-interface default
no passive-interface Ethernet0/0
no passive-interface Loopback103
network 10.0.0.0
network 11.0.0.0
no auto-summary
blue1(config-if)#do show ip interface brief | exclude unassigned
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 10.11.0.2 YES NVRAM up up
Loopback100 10.10.10.1 YES NVRAM up up
Loopback101 11.0.0.1 YES manual up up
Loopback102 11.0.0.2 YES manual up up
Loopback103 11.0.0.3 YES manual up up
router_1#sh runn | b router ei
router eigrp 10
!
address-family ipv4 vrf blue autonomous-system 10
redistribute bgp 99 metric 1000000 100 255 100 1500
network 10.11.0.0 0.0.0.7
exit-address-family
!
router ospf 10 vrf blue
network 10.11.0.0 0.0.0.7 area 0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
router rip
passive-interface default
no passive-interface Ethernet1/0
!
address-family ipv4 vrf blue
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 99
bgp log-neighbor-changes
neighbor 5.5.5.5 remote-as 99
neighbor 5.5.5.5 update-source Loopback1
!
address-family vpnv4
neighbor 5.5.5.5 activate
neighbor 5.5.5.5 send-community extended
neighbor 5.5.5.5 next-hop-self
exit-address-family
!
address-family ipv4 vrf blue
network 10.11.0.0 mask 255.255.255.248
redistribute connected
redistribute ospf 10
redistribute eigrp 10
redistribute rip
exit-address-family
!
address-family ipv4 vrf green
redistribute connected
exit-address-family
Aquí podemos ver que cada interface loopback se aprendió por un protocolo distinto (D, O, R) y tiene distancias administrativas distintas, pero también vemos en verde las redes que provienen del sitio 2 con BGP:
router_1#show ip route vrf blue | exclude Connected|Local
Routing Table: blue
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 10.10.10.1/32 [120/1] via 10.11.0.2, 00:00:23, Ethernet1/0
B 10.10.10.2/32 [200/0] via 5.5.5.5, 00:30:57
C 10.11.0.0/29 is directly connected, Ethernet1/0
L 10.11.0.1/32 is directly connected, Ethernet1/0
B 10.12.0.0/29 [200/0] via 5.5.5.5, 00:30:57
11.0.0.0/32 is subnetted, 3 subnets
D 11.0.0.1 [90/409600] via 10.11.0.2, 00:12:46, Ethernet1/0
O IA 11.0.0.2 [110/11] via 10.11.0.2, 00:10:43, Ethernet1/0
R 11.0.0.3 [120/1] via 10.11.0.2, 00:00:23, Ethernet1/0
Para el sitio 2 es una configuración similar, y podemos hacer las pruebas con un ping del cliente blue1 a una int del blue2, y lo mismo de green1 a green2 (en el ejemplo el cliente green sólo corre OSPF entre sus sitios):
green2#traceroute 12.0.0.1 source loopback 100
Type escape sequence to abort.
Tracing the route to 12.0.0.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.12.0.1 5 msec 8 msec 8 msec
2 10.0.45.4 [MPLS: Labels 1407/1114 Exp 0] 8 msec 8 msec 8 msec
3 10.0.34.3 [MPLS: Labels 1307/1114 Exp 0] 8 msec 8 msec 8 msec
4 10.0.23.2 [MPLS: Labels 1206/1114 Exp 0] 9 msec 10 msec 7 msec
5 10.11.0.1 [MPLS: Label 1114 Exp 0] 7 msec 8 msec 8 msec
6 10.11.0.2 8 msec 8 msec 8 msec
blue2#traceroute 11.0.0.1 source Loopback100
Type escape sequence to abort.
Tracing the route to 11.0.0.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.12.0.1 [AS 99] 10 msec 12 msec 12 msec
2 10.0.45.4 [MPLS: Labels 1407/1100 Exp 0] 13 msec 13 msec 11 msec
3 10.0.34.3 [MPLS: Labels 1307/1100 Exp 0] 2 msec 12 msec 12 msec
4 10.0.23.2 [MPLS: Labels 1206/1100 Exp 0] 12 msec 12 msec 12 msec
5 10.11.0.1 [AS 99] [MPLS: Label 1100 Exp 0] 12 msec 12 msec 12 msec
6 10.11.0.2 [AS 99] 4 msec 12 msec 12 msec
No hay comentarios. :
Publicar un comentario