设为首页收藏本站language 语言切换
查看: 3620|回复: 6
收起左侧

[求助] mpls vpn有路由ping不通.求高手解答

[复制链接]
发表于 2015-8-17 01:05:48 | 显示全部楼层 |阅读模式
50鸿鹄币
mpls vpn有路由ping不通.求高手解答

R4 和 R5是客户端路由器.
R4和 R2的fa0/0运行rip
R5和 R3的fa0/0运行eigrp
在R2和R3都做了单点双向重分发,客户段路由器R4 R5都有对方路由,但是都不通.为什么....  配置如下,求高手赐教





R1#show running-config
Building configuration...

Current configuration : 1084 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
no ip icmp rate-limit unreachable
ip tcp synwait-time 5
!
!
no ip domain lookup
!
!
ip cef   
ip ssh break-string
!
!
no crypto isakmp enable
!
!
interface Loopback0
ip address 1.1.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 12.1.1.1 255.255.255.0
duplex auto
speed auto
tag-switching ip
!
interface FastEthernet0/1
ip address 13.1.1.1 255.255.255.0
duplex auto
speed auto
tag-switching ip
!
!
router ospf 110
router-id 1.1.1.1
log-adjacency-changes
network 1.1.1.1 0.0.0.0 area 0
network 12.1.1.1 0.0.0.0 area 0
network 13.1.1.1 0.0.0.0 area 0
!
no ip http server
no ip http secure-server
ip classless
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end









----------------------------------------------------------------------------------
R2#sh running-config
Building configuration...

Current configuration : 1730 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
no ip icmp rate-limit unreachable
ip tcp synwait-time 5
!
!
no ip domain lookup
!
!
ip vrf a  
rd 10:10
route-target export 10:10
route-target import 10:10
!
ip cef
ip ssh break-string
!
!
no crypto isakmp enable
!         
!
interface Loopback0
ip address 2.2.2.2 255.255.255.0
!
interface FastEthernet0/0
ip vrf forwarding a
ip address 24.1.1.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 12.1.1.2 255.255.255.0
duplex auto
speed auto
tag-switching ip
!
!
router ospf 110
router-id 2.2.2.2
log-adjacency-changes
network 2.2.2.2 0.0.0.0 area 0
network 12.1.1.2 0.0.0.0 area 0
!
router rip
version 2
no auto-summary
!
address-family ipv4 vrf a
version 2
redistribute bgp 64512 metric 3
network 24.0.0.0
no auto-summary
exit-address-family
!
router bgp 64512
no synchronization
bgp router-id 2.2.2.2
bgp log-neighbor-changes
neighbor 3.3.3.3 remote-as 64512
neighbor 3.3.3.3 update-source Loopback0
neighbor 3.3.3.3 next-hop-self
no auto-summary
!        
address-family vpnv4
neighbor 3.3.3.3 activate
neighbor 3.3.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf a
redistribute rip
no auto-summary
no synchronization
exit-address-family
!
no ip http server
no ip http secure-server
ip classless
!
!
control-plane
!         
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end













-----------------------------------------------------------------------------------
R3#show running-config
Building configuration...

Current configuration : 1769 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
no ip icmp rate-limit unreachable
ip tcp synwait-time 5
!
!
no ip domain lookup
!
!
ip vrf b  
rd 10:10
route-target export 10:10
route-target import 10:10
!
ip cef
ip ssh break-string
!
!
no crypto isakmp enable
!         
!
interface Loopback0
ip address 3.3.3.3 255.255.255.0
!
interface FastEthernet0/0
ip vrf forwarding b
ip address 35.1.1.3 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 13.1.1.3 255.255.255.0
duplex auto
speed auto
tag-switching ip
!
!
router eigrp 90
no auto-summary
!        
address-family ipv4 vrf b
redistribute bgp 64512 metric 100000 1000 0 255 1500
network 35.1.1.3 0.0.0.0
no auto-summary
autonomous-system 90
exit-address-family
!
router ospf 110
router-id 3.3.3.3
log-adjacency-changes
network 3.3.3.3 0.0.0.0 area 0
network 13.1.1.3 0.0.0.0 area 0
!
router bgp 64512
no synchronization
bgp router-id 3.3.3.3
bgp log-neighbor-changes
neighbor 2.2.2.2 remote-as 64512
neighbor 2.2.2.2 update-source Loopback0
neighbor 2.2.2.2 next-hop-self
no auto-summary
!
address-family vpnv4
neighbor 2.2.2.2 activate
neighbor 2.2.2.2 send-community both
exit-address-family
!
address-family ipv4 vrf b
redistribute eigrp 90
no auto-summary
no synchronization
exit-address-family
!
no ip http server
no ip http secure-server
ip classless
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end










--------------------------------------------------------------------------------
R4#show running-config
Building configuration...

Current configuration : 956 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
no ip icmp rate-limit unreachable
ip tcp synwait-time 5
!
!
no ip domain lookup
!
!
ip cef   
ip ssh break-string
!
!
no crypto isakmp enable
!
!
interface Loopback0
ip address 4.4.4.4 255.255.255.0
!
interface FastEthernet0/0
ip address 24.1.1.4 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
!
router rip
version 2
network 4.0.0.0
network 24.0.0.0
no auto-summary
!
no ip http server
no ip http secure-server
ip classless
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end

















-------------------------------------------------------------------------------------------------
R5#show running-config
Building configuration...

Current configuration : 966 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
no ip icmp rate-limit unreachable
ip tcp synwait-time 5
!
!
no ip domain lookup
!
!
ip cef   
ip ssh break-string
!
!
no crypto isakmp enable
!
!
interface Loopback0
ip address 5.5.5.5 255.255.255.0
!
interface FastEthernet0/0
ip address 35.1.1.5 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
!
router eigrp 90
network 5.5.5.5 0.0.0.0
network 35.1.1.5 0.0.0.0
no auto-summary
!
no ip http server
no ip http secure-server
ip classless
!         
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end

aaaaaaa.jpg
bbbbbb.jpg

最佳答案

查看完整内容

MPLS域内的设备上要敲上: mpls label range 100 199 mpls label protocol ldp mpls ldp router-id Loopback0 接口下敲上: mpls ip 要建立起LDP邻居,其次再考虑有没有路由黑洞之类的,你试试吧。。。
发表于 2015-8-17 01:05:49 | 显示全部楼层
MPLS域内的设备上要敲上:
mpls label range 100 199
mpls label protocol ldp
mpls ldp router-id Loopback0
接口下敲上:
mpls ip
要建立起LDP邻居,其次再考虑有没有路由黑洞之类的,你试试吧。。。
沙发 2015-8-17 01:05:49 回复 收起回复
回复

使用道具 举报

 楼主| 发表于 2015-8-17 01:20:43 | 显示全部楼层
R4 ping不通R5的任何接口.在R5上debug ip icmp 没有收到R4的ping包
R5 ping不通R4的任何接口.在R4上debug ip icmp 没有收到R5的ping包
板凳 2015-8-17 01:20:43 回复 收起回复
回复

使用道具 举报

 楼主| 发表于 2015-8-17 01:22:10 | 显示全部楼层
R4ping不通R5的任何接口.在R5上debug ip icmp 没有收到R4的ping包
R5ping不通R4的任何接口.在R4上debug ip icmp 没有收到R5的ping包
地板 2015-8-17 01:22:10 回复 收起回复
回复

使用道具 举报

发表于 2015-8-19 18:13:25 | 显示全部楼层
你可以一段段抓包看一下,看现象,还有虽然说tag-switching ip和mpls ip 效果一样,你试下换成mpls ip
5# 2015-8-19 18:13:25 回复 收起回复
回复

使用道具 举报

 楼主| 发表于 2015-8-20 20:15:58 | 显示全部楼层
好的  我等下试试  如果能找到原因再告诉你们是什么问题
6# 2015-8-20 20:15:58 回复 收起回复
回复

使用道具 举报

 楼主| 发表于 2015-8-21 14:46:06 | 显示全部楼层
多谢朋友   最好百度一下  结果是 p路由器和pe路由器的lookback口要设置成32位...
现在可以ping同了
我好辛苦......开始ping不通 心都碎了{:soso_e118:}
7# 2015-8-21 14:46:06 回复 收起回复
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 论坛注册

本版积分规则

QQ|Archiver|手机版|小黑屋|sitemap|鸿鹄论坛 ( 京ICP备14027439号 )  

GMT+8, 2025-4-29 05:58 , Processed in 0.107134 second(s), 24 queries , Redis On.  

  Powered by Discuz!

  © 2001-2025 HH010.COM

快速回复 返回顶部 返回列表