serveriproute
iproute 时间:2021-04-14 阅读:()
ConfiguringScalableHub-and-SpokeMPLSVPNsLastUpdated:December15,2011Thismoduleexplainshowtoensurethatvirtualprivatenetwork(VPN)clientsthatconnecttothesameprovideredge(PE)routerattheedgeoftheMutliprotocol(MPLS)VirtualPrivateNetwork(VPN)usethehubsite.
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
HostYun（22元/月）全场88折优惠香港原生IP大带宽
在之前的一些文章中有提到HostYun商家的信息，这个商家源头是比较老的，这两年有更换新的品牌域名。在陆续的有新增机房，价格上还是走的低价格路线，所以平时的折扣力度已经是比较低的。在前面我也有介绍到提供九折优惠，这个品牌商家就是走的低价量大为主。中秋节即将到，商家也有推出稍微更低的88折。全场88折优惠码：moon88这里，整理部分HostYun商家的套餐。所有的价格目前都是原价，我们需要用折扣码...
cloudcone：特价便宜VPS补货通知贴,SAS或SSD低价有磁盘阵列，SAS或SSD raid10 硬盘
cloudcone经常性有特价促销VPS放出来，每次的数量都是相当有限的，为了方便、及时帮助大家，主机测评这里就做这个cloudcone特价VPS补货专题吧，以后每次放货我会在这里更新一下日期，方便大家秒杀！官方网站：https://cloudcone.com/预交费模式，需要充值之后方可使用，系统自动扣费！信用卡、PayPal、支付宝，均可付款购买！为什么说cloudcone值得买？cloudc...
盘点AoYoZhuJi傲游主机商8个数据中心常见方案及八折优惠
傲游主机商我们可能很多人并不陌生，实际上这个商家早年也就是个人主机商，传说是有几个个人投资创办的，不过能坚持到现在也算不错，毕竟有早年的用户积累正常情况上还是能延续的。如果是新服务商这几年确实不是特别容易，问到几个老牌的个人服务商很多都是早年的用户积累客户群。傲游主机目前有提供XEN和KVM架构的云服务器，不少还是亚洲CN2优化节点，目前数据中心包括中国香港、韩国、德国、荷兰和美国等多个地区的CN...
iproute为你推荐
-
点击googleasp.net空间哪里可以申请asp空间的？163yeah网易yeah邮箱登陆internetexplorer无法打开电脑的Internet Explorer打不开？360arp防火墙在哪360ARP防火墙哪里下载？支持http平阴县教育和体育局下属锦东小学教学设备采购项目竞争性磋商文件piaonimai这位主播叫什么传奇域名谁能帮忙查查传奇的IP和域名12306.com12306身份信息待核验要多久？审核要多久