Difference between revisions of "Cisco MPLS"

From HackerNet
Jump to: navigation, search
(Created page with "Multiprotocol Label Switching =IOS= =Nexus= Förutsättningar install feature-set mpls feature-set mpls feature mpls ldp Interface interface e1/1 mpls ip ID interface...")
 
Line 2: Line 2:
  
 
=IOS=
 
=IOS=
 +
mpls ldp session protection
 +
mpls ldp router-id loopback0
 +
interface gi1/1
 +
mpls ip
 +
Synk med routing protokoll
 +
router isis 1
 +
mpls ldp sync
  
=Nexus=
+
=NX-OS=
 
Förutsättningar
 
Förutsättningar
 
  install feature-set mpls
 
  install feature-set mpls
 
  feature-set mpls
 
  feature-set mpls
 
  feature mpls ldp
 
  feature mpls ldp
Interface
+
Aktivera på interface
 
  interface e1/1
 
  interface e1/1
 
  mpls ip
 
  mpls ip
 
ID
 
ID
 
  interface loopback 1
 
  interface loopback 1
ip address 10.0.0.1/24
+
  ip address 10.0.0.1/24
 
  mpls ldp configuration
 
  mpls ldp configuration
router-id loopback 1
+
  session protection
 +
  router-id loopback 1
 
Synk med routing protokoll
 
Synk med routing protokoll
 
  router isis P1
 
  router isis P1
Line 27: Line 35:
 
  address-family vpnv4 unicast
 
  address-family vpnv4 unicast
 
  send-community extended
 
  send-community extended
 +
 +
=Autentisering=
 +
Med autentisering kan man säkra LDP-kommunikationen
 +
===IOS===
 +
ip access-list standard <namn>
 +
permit <granne1>
 +
 +
mpls ldp password required for <access-list>
 +
mpls ldp neighbor <granne1> password <password>
 +
 +
===NX-OS===
 +
ip prefix-list <namn> permit <granne1>/32
 +
mpls ldp configuration
 +
password required for <prefix-list>
 +
password option 1 for <prefix-list> key-chain <key-chain-name>
  
 
[[Category:Cisco]]
 
[[Category:Cisco]]

Revision as of 20:19, 12 October 2015

Multiprotocol Label Switching

IOS

mpls ldp session protection
mpls ldp router-id loopback0
interface gi1/1
mpls ip

Synk med routing protokoll

router isis 1
mpls ldp sync

NX-OS

Förutsättningar

install feature-set mpls
feature-set mpls
feature mpls ldp

Aktivera på interface

interface e1/1
mpls ip

ID

interface loopback 1
 ip address 10.0.0.1/24
mpls ldp configuration
 session protection
 router-id loopback 1

Synk med routing protokoll

router isis P1
mpls ldp sync

L3VPN

feature mpls l3vpn

Add IBGP neighbor

router bgp 1.1
neighbor 10.0.0.10 remote-as 1.1
address-family vpnv4 unicast
send-community extended

Autentisering

Med autentisering kan man säkra LDP-kommunikationen

IOS

ip access-list standard <namn>
permit <granne1>
mpls ldp password required for <access-list>
mpls ldp neighbor <granne1> password <password>

NX-OS

ip prefix-list <namn> permit <granne1>/32
mpls ldp configuration
password required for <prefix-list>
password option 1 for <prefix-list> key-chain <key-chain-name>