Difference between revisions of "Cisco MPLS"
From HackerNet
Helikopter (talk | contribs) (Created page with "Multiprotocol Label Switching =IOS= =Nexus= Förutsättningar install feature-set mpls feature-set mpls feature mpls ldp Interface interface e1/1 mpls ip ID interface...") |
Helikopter (talk | contribs) |
||
Line 2: | Line 2: | ||
=IOS= | =IOS= | ||
+ | mpls ldp session protection | ||
+ | mpls ldp router-id loopback0 | ||
+ | interface gi1/1 | ||
+ | mpls ip | ||
+ | Synk med routing protokoll | ||
+ | router isis 1 | ||
+ | mpls ldp sync | ||
− | = | + | =NX-OS= |
Förutsättningar | Förutsättningar | ||
install feature-set mpls | install feature-set mpls | ||
feature-set mpls | feature-set mpls | ||
feature mpls ldp | feature mpls ldp | ||
− | + | Aktivera på interface | |
interface e1/1 | interface e1/1 | ||
mpls ip | mpls ip | ||
ID | ID | ||
interface loopback 1 | interface loopback 1 | ||
− | + | ip address 10.0.0.1/24 | |
mpls ldp configuration | mpls ldp configuration | ||
− | + | session protection | |
+ | router-id loopback 1 | ||
Synk med routing protokoll | Synk med routing protokoll | ||
router isis P1 | router isis P1 | ||
Line 27: | Line 35: | ||
address-family vpnv4 unicast | address-family vpnv4 unicast | ||
send-community extended | send-community extended | ||
+ | |||
+ | =Autentisering= | ||
+ | Med autentisering kan man säkra LDP-kommunikationen | ||
+ | ===IOS=== | ||
+ | ip access-list standard <namn> | ||
+ | permit <granne1> | ||
+ | |||
+ | mpls ldp password required for <access-list> | ||
+ | mpls ldp neighbor <granne1> password <password> | ||
+ | |||
+ | ===NX-OS=== | ||
+ | ip prefix-list <namn> permit <granne1>/32 | ||
+ | mpls ldp configuration | ||
+ | password required for <prefix-list> | ||
+ | password option 1 for <prefix-list> key-chain <key-chain-name> | ||
[[Category:Cisco]] | [[Category:Cisco]] |
Revision as of 20:19, 12 October 2015
Multiprotocol Label Switching
IOS
mpls ldp session protection mpls ldp router-id loopback0 interface gi1/1 mpls ip
Synk med routing protokoll
router isis 1 mpls ldp sync
NX-OS
Förutsättningar
install feature-set mpls feature-set mpls feature mpls ldp
Aktivera på interface
interface e1/1 mpls ip
ID
interface loopback 1 ip address 10.0.0.1/24 mpls ldp configuration session protection router-id loopback 1
Synk med routing protokoll
router isis P1 mpls ldp sync
L3VPN
feature mpls l3vpn
Add IBGP neighbor
router bgp 1.1 neighbor 10.0.0.10 remote-as 1.1 address-family vpnv4 unicast send-community extended
Autentisering
Med autentisering kan man säkra LDP-kommunikationen
IOS
ip access-list standard <namn> permit <granne1>
mpls ldp password required for <access-list> mpls ldp neighbor <granne1> password <password>
NX-OS
ip prefix-list <namn> permit <granne1>/32 mpls ldp configuration password required for <prefix-list> password option 1 for <prefix-list> key-chain <key-chain-name>