vrf建立dmvpn邻居.note

noteId: WEB0a5bbd09dfddc70c91706c8294ebd381 · 原始路径:/ALL/网络 - C模块/VRF/vrf建立dmvpn邻居.note · 图片:1 · 附件待处理:0

 
 
1、DMVPN建立邻居:
# 要求:DMVPN使用VRF建立连接
## 关键命令:tunnel vrf EXTERNAL
 
# R5:
## 定义VRF、接口关联:
vrf definition EXTERNAL
 rd 5:1
 address-family ipv4
 address-family ipv6
 
interface GigabitEthernet0/0
 vrf forwarding EXTERNAL
 
## 配置 DMVPN:
interface Tunnel0
 tunnel vrf EXTERNAL
 tunnel mode gre multipoint
 tunnel source GigabitEthernet0/0
 ip address 100.0.1.5 255.255.255.0
 ipv6 enable
 ipv6 address 2001:100:0:1::5/64
 ip nhrp network-id 1
 ip nhrp authentication DMVPN
 ip nhrp redirect
 
# R1~R4:
## 定义VRF、接口关联:
vrf definition EXTERNAL
 rd 1:1
 # rd 2:1
 # rd ...
 address-family ipv4
 address-family ipv6
 
interface GigabitEthernet0/0
 vrf forwarding EXTERNAL
 
## 配置 DMVPN:
interface Tunnel0
 tunnel vrf EXTERNAL
 tunnel mode gre multipoint
 tunnel source GigabitEthernet0/0
 ip address 100.0.1.1 255.255.255.0
 ipv6 enable
 ipv6 address 2001:100:0:1::1/64
 ip nhrp network-id 1
 ip nhrp authentication DMVPN
 ip nhrp nhs 100.0.1.5 nbma 4.4.4.5 multicast
 ipv6 nhrp authentication DMVPN
 ipv6 nhrp network-id 1
 ipv6 nhrp nhs 2001:100:0:1::5 nbma 4.4.4.5 multicast
 
·ping 测试:
此时就能够直接在全局ping通tunnel接口地址了(不需要加 vrf 来ping)
第一次ping出现一个丢包是正常的,因为再建立动态nhrp映射