作者:熊茂祥
时间:2015-05-03 13:38
分类:ROS
标签:ros, vpls, bgp, 桥接, bridge
内容:
假设某总公司R1的LAN1需要和分公司R2的LAN3进行L2桥接，并且LAN1和LAN3在同一个网段，要求LAN1和LAN3里的终端机器可以互相访问，支持MAC通讯，支持IPX通讯。（当然前提是LAN1和LAN3里的终端和终端之间IP不能冲突。）如果ISP禁止R1和R2之间进行BGP通讯需要先嵌套一个加密隧道，PPTP，L2TP，SSTP...等等都行。
按照如下配置关键内容即可实现需求，效果如图。
R1配置(部分关键配置示例):
/interface bridge
add auto-mac=yes disabled=no forward-delay=15s name=LAN1-LAN3 priority=0x8000 protocol-mode=none transmit-hold-count=6
/interface bridge port
add bridge=LAN1-LAN3 interface=LAN1
/routing bgp instance
add as=65510 client-to-client-reflection=yes disabled=no ignore-as-path-len=no \
name=65510 out-filter="" redistribute-connected=no redistribute-ospf=no \
redistribute-other-bgp=no redistribute-rip=no redistribute-static=yes \
router-id=1.1.1.1 routing-table=""
/routing bgp peer
add address-families=ip,l2vpn as-override=no default-originate=never disabled=\
no hold-time=3m in-filter="" instance=65510 multihop=no name=65511 \
nexthop-choice=default out-filter="" passive=no remote-address=1.1.1.2 \
remote-as=65511 remove-private-as=no route-reflect=no tcp-md5-key="" ttl=\
default use-bfd=no
/interface vpls bgp-vpls add bridge=LAN1-LAN3 bridge-cost=20 export-route-targets=1:1 import-route-targets=1:1 name=1 route-distinguisher=1:1 site-id=1
R2配置(部分关键配置示例):
/interface bridge
add auto-mac=yes disabled=no forward-delay=15s name=LAN3-LAN1 priority=0x8000 protocol-mode=none transmit-hold-count=6
/interface bridge port
add bridge=LAN3-LAN1 interface=LAN3
/routing bgp instance
add as=65511 client-to-client-reflection=yes disabled=no ignore-as-path-len=no \
name=65511 out-filter="" redistribute-connected=no redistribute-ospf=no \
redistribute-other-bgp=no redistribute-rip=no redistribute-static=yes \
router-id=1.1.1.2 routing-table=""
/routing bgp peer
add address-families=ip,l2vpn as-override=no default-originate=never disabled=\
no hold-time=3m in-filter="" instance=65511 multihop=no name=65510 \
nexthop-choice=default out-filter="" passive=no remote-address=1.1.1.1 \
remote-as=65510 remove-private-as=no route-reflect=no tcp-md5-key="" ttl=\
default use-bfd=no
/interface vpls bgp-vpls add bridge=LAN3-LAN1 bridge-cost=20 export-route-targets=1:1 import-route-targets=1:1 name=1 route-distinguisher=1:1 site-id=2