本文档介绍如何在Cisco IOS®内配置每个组播VPN(mVPN)配置文件,仅用于IPv6。
在继续执行本文档中描述的配置之前,请验证运行Cisco IOS的特定平台上是否支持mVPN配置文件。
本文档中的信息基于所有Cisco IOS版本。
本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始(默认)配置。如果您使用的是真实网络,请确保您已经了解所有命令的潜在影响。
为全局情景或每个虚拟路由/转发(VRF)配置mVPN配置文件。 只能使用定义VRF(VRF定义)的较新方法来为mVPN配置文件启用IPv6。示例如下:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv4
mdt auto-discovery mldp
mdt default mpls mldp 10.100.1.3
route-target export 123:456
route-target import 123:456
exit-address-family
!
address-family ipv6
mdt default mpls mldp 10.100.1.3
route-target export 123:456
route-target import 123:456
exit-address-family
必须为全局情景中的配置文件启用IPv6的组播路由。此外,必须在全局环回接口上启用协议独立组播版本6(PIMv6)。如果启用了ipv6 multicast-routing命令,并且环回接口具有IPv6地址或在环回接口上配置了ipv6 enable命令,则这是正确的。
ipv6 multicast-routing
必须在VRF上为VRF情景中的配置文件启用IPv6的组播路由。
ipv6 multicast-routing vrf one
为具有MLDP的配置文件启用多点标签分发协议(MLDP)的日志记录是一种好的做法:
mpls mldp logging notifications
如果配置了相应的ipv6 multicast-routing或ipv6 multicast-routing vrf one命令,则默认情况下,在全局或VRF环境中的接口上启用IPv6的PIM。
interface Ethernet0/0
vrf forwarding one
ip address 10.2.1.1 255.255.255.0
ip pim sparse-mode
ipv6 address 2001:DB8:1::1/64
这意味着默认在接口上启用ipv6 pim命令。对于带VRF的配置文件,6个虚拟提供商边缘(6VPE)必须对单播流量完全运行。对于配置文件7,6提供商边缘(6PE)必须对单播流量完全运行。
本节介绍如何在Cisco IOS中配置mVPN配置文件。
仅使用MLDP作为核心树协议和默认组播分布树(MDT)的配置文件需要为VRF配置的VPN-ID。
vrf definition one
rd 1:1
vpn id 1000:2000
â¦
对于具有默认MDT和通用路由封装(GRE)的配置文件,如果为IPv4和IPv6启用了mVPN,则必须为两个地址系列(AF)使用相同的默认MDT。
不能为不同的AF混合不同的配置文件。
对于带有MLDP的分区MDT的配置文件,如果为IPv4和IPv6启用mVPN,则为同一根PE路由器的每个AF发出不同的分区MDT信号。MLDP树的Opaque值中将有不同的全局标识符(GID)。两个AF使用相同的标签交换路径虚拟接口(LSPVIF)接口。
以下是配置文件14用于AF IPv4和IPv6的示例:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv4
mdt auto-discovery mldp
mdt partitioned mldp p2mp
mdt overlay use-bgp
route-target export 123:456
route-target import 123:456
exit-address-family
!
address-family ipv6
mdt auto-discovery mldp
mdt partitioned mldp p2mp
mdt overlay use-bgp
route-target export 123:456
route-target import 123:456
exit-address-family
源10.100.1.6和2001:DB8:2::6位于同一源PE路由器PE2的后面。IPv4组播组和IPv的组播路由信息数据库(MRIB)条目6组播组在入口PE路由器的数据库中使用不同的标签交换组播(LSM)条目或MLDP条目,因此两个组都在不同的MLDP树上转发。
PE2#show mpls mldp database opaque_type gid
LSM ID : 5 Type: P2MP Uptime : 02:18:54
FEC Root : 10.100.1.2 (we are the root)
Opaque decoded : [gid 65536 (0x00010000)]
Opaque length : 4 bytes
Opaque value : 01 0004 00010000
Upstream client(s) :
None
Expires : N/A Path Set ID : 5
Replication client(s):
MDT (VRF one)
Uptime : 02:18:54 Path Set ID : None
Interface : Lspvif1
10.100.1.4:0
Uptime : 00:32:50 Path Set ID : None
Out label (D) : 20 Interface : Ethernet2/0*
Local label (U): None Next Hop : 10.1.2.4
LSM ID : 6 Type: P2MP Uptime : 00:37:06
FEC Root : 10.100.1.2 (we are the root)
Opaque decoded : [gid 131072 (0x00020000)]
Opaque length : 4 bytes
Opaque value : 01 0004 00020000
Upstream client(s) :
None
Expires : N/A Path Set ID : 6
Replication client(s):
MDT (VRF one)
Uptime : 00:37:06 Path Set ID : None
Interface : Lspvif1
10.100.1.4:0
Uptime : 00:18:38 Path Set ID : None
Out label (D) : 22 Interface : Ethernet2/0*
Local label (U): None Next Hop : 10.1.2.4
PE2#show ip mfib vrf one 232.1.1.1
Entry Flags: C - Directly Connected, S - Signal, IA - Inherit A flag,
ET - Data Rate Exceeds Threshold, K - Keepalive
DDE - Data Driven Event, HW - Hardware Installed
ME - MoFRR ECMP entry, MNE - MoFRR Non-ECMP entry, MP - MFIB
MoFRR Primary, RP - MRIB MoFRR Primary, P - MoFRR Primary
MS - MoFRR Entry in Sync, MC - MoFRR entry in MoFRR Client.
I/O Item Flags: IC - Internal Copy, NP - Not platform switched,
NS - Negate Signalling, SP - Signal Present,
A - Accept, F - Forward, RA - MRIB Accept, RF - MRIB Forward,
MA - MFIB Accept, A2 - Accept backup,
RA2 - MRIB Accept backup, MA2 - MFIB Accept backup
Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kbits per second
Other counts: Total/RPF failed/Other drops
I/O Item Counts: FS Pkt Count/PS Pkt Count
VRF one
(10.100.1.6,232.1.1.1) Flags:
SW Forwarding: 374/0/100/0, Other: 122/0/122
Ethernet0/0 Flags: A
Lspvif1, LSM/6 Flags: F
Pkts: 374/0
PE2#show ipv6 mfib vrf one route FF3E::4000:1
Entry Flags: C - Directly Connected, S - Signal, IA - Inherit A flag,
ET - Data Rate Exceeds Threshold, K - Keepalive
DDE - Data Driven Event, HW - Hardware Installed
ME - MoFRR ECMP entry, MNE - MoFRR Non-ECMP entry, MP - MFIB
MoFRR Primary, RP - MRIB MoFRR Primary, P - MoFRR Primary
MS - MoFRR Entry in Sync, MC - MoFRR entry in MoFRR Client.
I/O Item Flags: IC - Internal Copy, NP - Not platform switched,
NS - Negate Signalling, SP - Signal Present,
A - Accept, F - Forward, RA - MRIB Accept, RF - MRIB Forward,
MA - MFIB Accept, A2 - Accept backup,
RA2 - MRIB Accept backup, MA2 - MFIB Accept backup
Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kbits per second
Other counts: Total/RPF failed/Other drops
I/O Item Counts: FS Pkt Count/PS Pkt Count
VRF one
(2001:DB8:2::6,FF3E::4000:1)
Ethernet0/0 A
Lspvif1, LSM/5 F
本节介绍每个配置文件所需的配置。
将此配置用于配置文件0:
interface Loopback0
ipv6 address 2001:DB8:100::2/128
!
vrf definition one
rd 1:1
!
address-family ipv6
mdt default 232.1.1.1
route-target export 123:456
route-target import 123:456
exit-address-family
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 10.100.1.4 next-hop-self
!
!
address-family ipv4 mdt
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
!
将此配置用于配置文件1:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv6
mdt default mpls mldp 10.100.1.3
route-target export 123:456
route-target import 123:456
exit-address-family
ipv6 multicast-routing vrf one
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 10.100.1.4 next-hop-self
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
!
Cisco IOS当前不支持配置文件2,并且MLDP不支持采用多点对多点(MP2MP)的分区MDT。
将此配置用于配置文件3:
interface Loopback0
ipv6 address 2001:DB8:100::2/128
!
vrf definition one
rd 1:1
!
address-family ipv6
mdt auto-discovery pim
mdt default 232.1.1.1
route-target export 123:456
route-target import 123:456
exit-address-family
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 10.100.1.4 next-hop-self
!
!
address-family ipv6 mvpn
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
!
Cisco IOS当前不支持配置文件4,并且MLDP不支持带MP2MP的分区MDT。
Cisco IOS当前不支持配置文件5,分区MDT不支持PIM信令。
将此配置用于配置文件6:
vrf definition one
rd 1:1
!
address-family ipv6
route-target export 123:456
route-target import 123:456
exit-address-family
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
ipv6 multicast-routing vrf one
ipv6 multicast vrf one mpls source Loopback0
ipv6 multicast vrf one mpls mldp
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
!
将此配置用于配置文件7:
ipv6 multicast-routing
ipv6 multicast mpls source Loopback0
ipv6 multicast mpls mldp
interface Ethernet0/0
ip address 10.2.2.2 255.255.255.0
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 2001:DB8:2::6 remote-as 65002
!
!
address-family ipv6
redistribute connected
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-label
neighbor 2001:DB8:2::6 activate
exit-address-family
!
Cisco IOS当前不支持配置文件8。
将此配置用于配置文件9:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv6
mdt auto-discovery mldp
mdt default mpls mldp 10.100.1.3
route-target export 123:456
route-target import 123:456
exit-address-family
ipv6 multicast-routing vrf one
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 10.100.1.4 next-hop-self
!
address-family ipv6 mvpn
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
!
Cisco IOS当前不支持配置文件10,点对多点流量工程(P2MP TE)不支持BGP-AD。
将此配置用于配置文件11:
interface Loopback0
ipv6 address 2001:DB8:100::2/128
!
vrf definition one
rd 1:1
!
address-family ipv6
mdt auto-discovery pim
mdt default 232.1.1.1
mdt overlay use-bgp
route-target export 123:456
route-target import 123:456
exit-address-family
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 10.100.1.4 next-hop-self
!
!
address-family ipv6 mvpn
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
!
将此配置用于配置文件12:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv6
mdt auto-discovery mldp
mdt default mpls mldp p2mp
mdt overlay use-bgp
route-target export 123:456
route-target import 123:456
exit-address-family
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 10.100.1.4 next-hop-self
!
address-family ipv6 mvpn
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
将此配置用于配置文件13:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv6
mdt auto-discovery mldp
mdt default mpls mldp 10.100.1.3
mdt overlay use-bgp
route-target export 123:456
route-target import 123:456
exit-address-family
ipv6 multicast-routing vrf one
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 10.100.1.4 next-hop-self
!
address-family ipv6 mvpn
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
!
将此配置用于配置文件14:
vrf definition one
rd 1:1
!
address-family ipv6
mdt auto-discovery mldp
mdt strict-rpf interface
mdt partitioned mldp p2mp
mdt overlay use-bgp
route-target export 123:456
route-target import 123:456
exit-address-family
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 2001:DB8:2::6 remote-as 65002
!
!
address-family ipv6 mvpn
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate exit-address-family
配置文件15当前在Cisco IOS中不受支持,并且MLDP不支持使用MP2MP的分区MDT。
Cisco IOS当前不支持配置文件16。
将此配置用于配置文件17:
vrf definition one
rd 1:1
vpn id 1000:2000
!
address-family ipv6
mdt auto-discovery mldp
mdt default mpls mldp p2mp
route-target export 123:456
route-target import 123:456
exit-address-family
!
interface Ethernet0/0
vrf forwarding one
ipv6 address 2001:DB8:2::2/64
!
router bgp 1
bgp log-neighbor-changes
neighbor 10.2.2.6 remote-as 65002
neighbor 10.100.1.4 remote-as 1
neighbor 10.100.1.4 update-source Loopback0
neighbor 10.100.1.4 next-hop-self
!
address-family ipv6 mvpn
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family vpnv6
neighbor 10.100.1.4 activate
neighbor 10.100.1.4 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute connected
neighbor 2001:DB8:2::6 remote-as 65002
neighbor 2001:DB8:2::6 activate
exit-address-family
Cisco IOS当前不支持配置文件18。
Cisco IOS当前不支持配置文件19和入口复制(IR)。
Cisco IOS当前不支持Profile 20和P2MP Auto-Tunnels TE。
Cisco IOS当前不支持配置文件21和IR。
Cisco IOS当前不支持Profile 22和P2MP Auto-Tunnels TE。
Cisco IOS当前不支持配置文件23和IR。
Cisco IOS当前不支持Profile 24和P2MP Auto-Tunnels TE。
Cisco IOS当前不支持配置文件25和IR。
Cisco IOS当前不支持Profile 26和P2MP Auto-Tunnels TE。
当前没有可用于这些配置的验证过程。
目前没有可用于这些配置的特定故障排除信息。
版本 | 发布日期 | 备注 |
---|---|---|
1.0 |
15-Jun-2015 |
初始版本 |