a. VPN1的CE分別在兩個不同的AS、采用EBGP和骨干路由器互聯(lián)，AS號碼為65505和65506
b. VPN2的兩個CE采用不同的IGP路由協(xié)議互聯(lián)、S3采用OSPF和R3連接、S2采用Rip和R2連接
c. VPN3的兩個CE采用靜態(tài)路由和PE連接
2．方案技術要點：
a. Inter_AS 的MPLS/VPN，R1為AS200 PE、R2為 AS100PE。CE R5、R6通過不同的AS連通。 b. Inter_AS的MPLS/VPN可以實現夸骨干網、省網之間的VPN，也就是說可以在國調、省調甚至地調實現VPN。
3. 配置命令：
version 12.0
hostname R3 ! ip vrf vpn2 rd 100:2 route-target eXPort 100:2 route-target import 100:2 clns routing no mpls traffic-eng auto-bw timers frequency 0 ! interface Loopback0 ip address 10.10.30.3 255.255.255.255 no ip directed-broadcast ip router isis isis circuit-type level-2-only ??！ interface GigabitEthernet1/0/0 ip address 10.10.23.3 255.255.255.0 no ip directed-broadcast ip router isis load-interval 30 negotiation auto isis circuit-type level-2-only isis metric 2 level-2 ! interface POS5/0/0 ip address 10.10.13.3 255.255.255.0 no ip directed-broadcast ip router isis encapsulation ppp tag-switching ip isis circuit-type level-2-only isis metric 5 level-2 ! router ospf 33 vrf vpn2 log-adjacency-changes network 10.10.33.0 0.0.0.255 area 0 ! router isis net 00.1111.0000.0000.1113.00 is-type level-2-only nsf cisco ! router bgp 200 no bgp default ipv4-unicast no bgp default route-target filter bgp log-neighbor-changes bgp graceful-restart restart-time 120 bgp graceful-restart stalepath-time 360 bgp graceful-restart neighbor 10.10.10.1 remote-as 200 neighbor 10.10.10.1 update-source Loopback0 neighbor 10.10.23.2 remote-as 100 no auto-summary ! address-family ipv4 multicast no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor 10.10.10.1 activate neighbor 10.10.10.1 next-hop-self neighbor 10.10.10.1 send-community extended neighbor 10.10.23.2 activate neighbor 10.10.23.2 next-hop-self neighbor 10.10.23.2 send-community extended no auto-summary exit-address-family ! address-family ipv4 redistribute isis level-1-2 no auto-summary no synchronization exit-address-family ! address-family ipv4 vrf vpn2 redistribute connected redistribute static redistribute ospf 33 no auto-summary no synchronization exit-address-family
4. 確認命令：
R1#sh ip rou
100.0.0.0/24 is subnetted, 2 subnets C 100.100.100.0 is directly connected, FastEthernet10/0/0 C 100.100.200.0 is directly connected, FastEthernet10/0/1 10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks C 10.10.10.1/32 is directly connected, Loopback0 C 10.10.12.0/24 is directly connected, Serial4/1/0 C 10.10.13.0/24 is directly connected, POS4/0/0 C 10.10.13.3/32 is directly connected, POS4/0/0 C 10.10.12.2/32 is directly connected, Serial4/1/0 i L2 10.10.23.0/24 [115/7] via 10.10.13.3, POS4/0/0 i L2 10.10.30.3/32 [115/15] via 10.10.13.3, POS4/0/0
R1#sh ip router vrf vpn1
10.0.0.0/24 is subnetted, 4 subnets C 10.10.15.0 is directly connected, FastEthernet2/0/1 B 10.10.26.0 [20/0] via 10.10.12.2, 00:01:41 B 10.10.50.0 [20/0] via 10.10.15.5, 00:05:31 B 10.10.60.0 [20/0] via 10.10.12.2, 00:01:41
R5-3640#sh ip rou
10.0.0.0/24 is subnetted, 4 subnets C 10.10.15.0 is directly connected, FastEthernet0/0 B 10.10.26.0 [20/0] via 10.10.15.1, 00:05:45 C 10.10.50.0 is directly connected, Loopback0 B 10.10.60.0 [20/0] via 10.10.15.1, 00:05:45
R5-3640#ping 10.10.60.6
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.60.6, timeout is 2 seconds: !!!!! SUCcess rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms
R5-3640#trace 10.10.60.6
Type escape sequence to abort. Tracing the route to 10.10.60.6
