VRF--虚拟路由表

删除回忆录丶 提交于 2019-11-30 14:31:32

VRF

Virtual routing forwarding,虚拟路由转发表,简称VPN。他能在两个site之间建立两个不用的路由表,相互隔离,把每台交换机逻辑上分成多台虚拟交换机,即多VPN路由转发实力。一般用于区分不同业务流量,不同的业务走不同的路由表,从而互相独立,达到控制设备全局路由流量走向的目的。

 

 

 

 

Vlan1960:10.130.229.X

实例:5560做管理网段网关(全局,254),7510将VPN流量转全局;厂商设备管理地址为该网段任意地址(全局.X)

 

厂商:

Vlan 1960

#

interface Vlan-interface1960

 ip address 10.130.229.1 255.255.255.0

#

ip route-static 10.130.229.0 24 10.130.229.254

#

interface GigabitEthernet1/0/1

port access vlan 1960

#

 

 

7510

#

#

interface Vlan-interface1960

 ip binding vpn-instance DMZ

 ip address 10.130.229.253 255.255.255.0

#

ip vpn-instance DMZ

 route-distinguisher 100:1

#

interface Vlan-interface1960

 ip binding vpn-instance DMZ

 ip address 10.130.229.253 255.255.255.0

#

 ip route-static vpn-instance DMZ 10.130.229.0 24 10.130.229.254

#

interface range GigabitEthernet1/0/1 GigabitEthernet1/0/3

port access vlan 1960

#

 

 

5560:

#

interface Vlan-interface1960

 ip address 10.130.229.254 255.255.255.0

#

interface GigabitEthernet1/0/1

port access vlan 1960

#

 

 

 

验证:

7510:

 

<H3C>dis arp vpn-instance DMZ

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address       MAC address    SVLAN/VSI Interface/Link ID        Aging Type

10.130.229.1     a230-20b1-0302 1960      GE1/0/3                  20    D

10.130.229.254   a22e-6fd3-0202 1960      GE1/0/1                  3     D

 

<H3C>dis arp

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address       MAC address    SVLAN/VSI Interface/Link ID        Aging Type

10.130.229.1     a230-20b1-0302 1960      GE1/0/3                  20    D

10.130.229.254   a22e-6fd3-0202 1960      GE1/0/1                  3     D

 

<H3C>ping -vpn-instance DMZ 10.130.229.254

Ping 10.130.229.254 (10.130.229.254): 56 data bytes, press CTRL_C to break

56 bytes from 10.130.229.254: icmp_seq=0 ttl=255 time=1.000 ms

56 bytes from 10.130.229.254: icmp_seq=1 ttl=255 time=1.000 ms

56 bytes from 10.130.229.254: icmp_seq=2 ttl=255 time=1.000 ms

56 bytes from 10.130.229.254: icmp_seq=3 ttl=255 time=0.000 ms

56 bytes from 10.130.229.254: icmp_seq=4 ttl=255 time=0.000 ms

 

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!