华为SR-MPLS TE跨域(E2E)配置案例
网络规划设计
1、在AS 100和AS 200内分别配置域内SR-MPLS TE隧道。同时为SR-MPLS TE隧道配置Binding SID。
2、在ASBR1和ASBR2之间配置EBGP邻居，使能BGP EPE和BGP-LS，生成BGP Peer SID。注意BGP-LS仅需使能地址族，无须在该地址族下使能BGP邻居。
3、在PE1和PE2节点创建E2E SR-MPLS TE隧道接口，指定隧道的IP地址、隧道协议、以及目的地址等，路径计算采用显式路径。
4、当前BGP EPE仅支持EBGP邻居场景，对于多跳EBGP邻居，也必须是通过物理链路直连，因为如果存在中间节点，则中间节点上没有BGP Peer SID信息，会造成转发失败
更多细节来全球计算机技术群讨论！！！
pe1配置
[pe1]dis current-configuration
sysname pe1
ip vpn-instance a
ipv4-family
route-distinguisher 1:1
tnl-policy p1 //调用隧道策略
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity
mpls lsr-id 1.1.1.1
mpls
mpls te
explicit-path pe1-asbr-pe1
next sid label 16002 type prefix
next sid label 16003 type prefix
explicit-path pe1-pe6
next sid label 1000 type binding-sid //自己隧道口binding-sid
next sid label 48060 type adjacency //asbr-pe1的peer sid
next sid label 2000 type binding-sid //asbr-pe2的binding-sid
segment-routing
interface Ethernet1/0/0
undo shutdown
ip address 10.0.12.1 255.255.255.0
ospf enable 1 area 0.0.0.0
mpls
mpls te
undo dcn
undo dcn mode vlan
interface Ethernet1/0/1
undo shutdown
ip binding vpn-instance a
ip address 10.0.11.1 255.255.255.0
undo dcn
undo dcn mode vlan
interface LoopBack0
ip address 1.1.1.1 255.255.255.255
ospf enable 1 area 0.0.0.0
ospf prefix-sid index 1
interface Tunnel1
ip address unnumbered interface LoopBack0
tunnel-protocol mpls te
destination 3.3.3.3
mpls te signal-protocol segment-routing
mpls te tunnel-id 1 //本地有效
mpls te path explicit-path pe1-asbr-pe1
mpls te binding-sid label 1000 //定义binding-sid
interface Tunnel2
ip address unnumbered interface LoopBack0
tunnel-protocol mpls te
destination 6.6.6.6
mpls te signal-protocol segment-routing
mpls te tunnel-id 100
mpls te path explicit-path pe1-pe6
interface NULL0
bgp 100
peer 6.6.6.6 as-number 200
peer 6.6.6.6 ebgp-max-hop 255
peer 6.6.6.6 connect-interface LoopBack0
ipv4-family unicast
undo synchronization
dampening
peer 6.6.6.6 enable
ipv4-family vpnv4
policy vpn-target
peer 6.6.6.6 enable //建立vpnv4邻居
ipv4-family vpn-instance a
peer 10.0.11.2 as-number 65100
ospf 1
opaque-capability enable
segment-routing mpls
segment-routing global-block 16000 23999 //SRGB范围
area 0.0.0.0
mpls-te enable
undo dcn
lldp enable
tunnel-policy p1 //定义sr-te隧道
tunnel select-seq sr-te load-balance-number 1
p1配置
[p1]dis current-configuration
sysname p1
mpls lsr-id 2.2.2.2
mpls
mpls te
segment-routing
interface Ethernet1/0/0
undo shutdown
ip address 10.0.12.2 255.255.255.0
ospf enable 1 area 0.0.0.0
mpls
mpls te
undo dcn
undo dcn mode vlan
interface Ethernet1/0/1
undo shutdown
ip address 10.0.23.2 255.255.255.0
ospf enable 1 area 0.0.0.0
mpls
mpls te
undo dcn
undo dcn mode vlan
interface LoopBack0
ip address 2.2.2.2 255.255.255.255
ospf enable 1 area 0.0.0.0
ospf prefix-sid index 2
interface NULL0
ospf 1
opaque-capability enable
segment-routing mpls
segment-routing global-block 16000 23999
area 0.0.0.0
mpls-te enable
asbr-pe1配置
[asbr-pe1]dis current-configuration
sysname asbr-pe1
mpls lsr-id 3.3.3.3
mpls
mpls te
explicit-path asbr-pe1-pe1
next sid label 16002 type prefix
next sid label 16001 type prefix
segment-routing
interface Ethernet1/0/0
undo shutdown
ip address 10.0.23.3 255.255.255.0
ospf enable 1 area 0.0.0.0
mpls
mpls te
undo dcn
undo dcn mode vlan
interface Ethernet1/0/1
undo shutdown
ip address 10.0.34.3 255.255.255.0
mpls
mpls te
undo dcn
undo dcn mode vlan
interface LoopBack0
ip address 3.3.3.3 255.255.255.255
ospf enable 1 area 0.0.0.0
ospf prefix-sid index 3
interface Tunnel2
ip address unnumbered interface LoopBack0
tunnel-protocol mpls te
destination 1.1.1.1
mpls te signal-protocol segment-routing
mpls te tunnel-id 1
mpls te path explicit-path asbr-pe1-pe1 //路径调用
mpls te binding-sid label 4000 //设置binding sid
interface NULL0
bgp 100
peer 10.0.34.4 as-number 200
peer 10.0.34.4 egress-engineering //使能BGP EPE
ipv4-family unicast
undo synchronization
network 1.1.1.1 255.255.255.255
peer 10.0.34.4 enable
link-state-family unicast //使能BGP-LS能力
ospf 1
import-route bgp
opaque-capability enable
segment-routing mpls
segment-routing global-block 16000 23999
area 0.0.0.0
mpls-te enable
asbr-pe2配置
[asbr-pe2]dis current-configuration
sysname asbr-pe2
set neid 18a8d
vsm on-board-mode enable
snmp-agent trap type base-trap
icmp rate-limit disable
mpls lsr-id 4.4.4.4
mpls
mpls te
explicit-path asbr-pe2-pe6
next sid label 16005 type prefix
next sid label 16006 type prefix
segment-routing
isis 1
is-level level-2
cost-style wide
network-entity 49.0001.0000.0000.0001.00
import-route bgp
traffic-eng level-2
segment-routing mpls
segment-routing global-block 16000 23999
interface Ethernet1/0/0
undo shutdown
ip address 10.0.34.4 255.255.255.0
mpls
mpls te
undo dcn
undo dcn mode vlan
interface Ethernet1/0/1
undo shutdown
ip address 10.0.45.4 255.255.255.0
isis enable 1
mpls
mpls te
undo dcn
undo dcn mode vlan
interface LoopBack0
ip address 4.4.4.4 255.255.255.255
isis enable 1
isis prefix-sid index 4
interface Tunnel2
ip address unnumbered interface LoopBack0
tunnel-protocol mpls te
destination 6.6.6.6
mpls te signal-protocol segment-routing
mpls te tunnel-id 1
mpls te path explicit-path asbr-pe2-pe6
mpls te binding-sid label 2000 //设置binding-sid
interface NULL0
bgp 200
peer 10.0.34.3 as-number 100
peer 10.0.34.3 egress-engineering //命令用来使能BGP EPE（Egress Peer Engineering）功能
ipv4-family unicast
undo synchronization
network 6.6.6.6 255.255.255.255
peer 10.0.34.3 enable
link-state-family unicast
p2配置
dis current-configuration
sysname p2
mpls lsr-id 5.5.5.5
mpls
mpls te
segment-routing
isis 1
is-level level-2
cost-style wide
network-entity 49.0001.0000.0000.0002.00
traffic-eng level-2
segment-routing mpls
segment-routing global-block 16000 23999
interface Ethernet1/0/0
undo shutdown
ip address 10.0.45.5 255.255.255.0
isis enable 1
mpls
mpls te
undo dcn
undo dcn mode vlan
interface Ethernet1/0/1
undo shutdown
ip address 10.0.56.5 255.255.255.0
isis enable 1
mpls
mpls te
undo dcn
undo dcn mode vlan
interface LoopBack0
ip address 5.5.5.5 255.255.255.255
isis enable 1
isis prefix-sid index 5
pe6配置
[pe6]dis current-configuration
sysname pe6
set neid 18a8e
ip vpn-instance a
ipv4-family
route-distinguisher 2:2
tnl-policy p1
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunity
mpls lsr-id 6.6.6.6
mpls
mpls te
explicit-path pe6-asbr-pe2
next sid label 16005 type prefix
next sid label 16004 type prefix
explicit-path pe6-pe1
next sid label 3000 type binding-sid
next sid label 48180 type adjacency
next sid label 4000 type binding-sid
segment-routing
isis 1
is-level level-2
cost-style wide
network-entity 49.0001.0000.0000.0003.00
traffic-eng level-2
segment-routing mpls
segment-routing global-block 16000 23999
interface Ethernet1/0/0
undo shutdown
ip address 10.0.56.6 255.255.255.0
isis enable 1
mpls
mpls te
undo dcn
undo dcn mode vlan
interface Ethernet1/0/1
undo shutdown
ip binding vpn-instance a
ip address 10.0.62.6 255.255.255.0
undo dcn
undo dcn mode vlan
interface LoopBack0
ip address 6.6.6.6 255.255.255.255
isis enable 1
isis prefix-sid index 6
interface Tunnel1
ip address unnumbered interface LoopBack0
tunnel-protocol mpls te
destination 4.4.4.4
mpls te signal-protocol segment-routing
mpls te tunnel-id 1
mpls te path explicit-path pe6-asbr-pe2
mpls te binding-sid label 3000
interface Tunnel2
ip address unnumbered interface LoopBack0
tunnel-protocol mpls te
destination 1.1.1.1
mpls te signal-protocol segment-routing
mpls te tunnel-id 100
mpls te path explicit-path pe6-pe1
interface NULL0
bgp 200
peer 1.1.1.1 as-number 100
peer 1.1.1.1 ebgp-max-hop 255
peer 1.1.1.1 connect-interface LoopBack0
ipv4-family unicast
undo synchronization
peer 1.1.1.1 enable
ipv4-family vpnv4
policy vpn-target
peer 1.1.1.1 enable
ipv4-family vpn-instance a
peer 10.0.62.2 as-number 65101
undo dcn
lldp enable
tunnel-policy p1
tunnel select-seq sr-te load-balance-number 1
结果验证
sid label查看48060，路径编排使用
隧道路由查看
联通性测试