serveriproute
iproute 时间:2021-04-14 阅读:()
ConfiguringScalableHub-and-SpokeMPLSVPNsLastUpdated:December15,2011Thismoduleexplainshowtoensurethatvirtualprivatenetwork(VPN)clientsthatconnecttothesameprovideredge(PE)routerattheedgeoftheMutliprotocol(MPLS)VirtualPrivateNetwork(VPN)usethehubsite.
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
618云上Go：腾讯云秒杀云服务器95元/年起,1C2G5M三年仅288元起
进入6月，各大网络平台都开启了618促销，腾讯云目前也正在开展618云上Go活动，上海/北京/广州/成都/香港/新加坡/硅谷等多个地区云服务器及轻量服务器秒杀，最低年付95元起，参与活动的产品还包括短信包、CDN流量包、MySQL数据库、云存储(标准存储)、直播/点播流量包等等，本轮秒杀活动每天5场，一直持续到7月中旬，感兴趣的朋友可以关注本页。活动页面：https://cloud.tencent...
RackNerd 黑色星期五5款年付套餐
RackNerd 商家从2019年上线以来争议也是比较大的，一直低价促销很多网友都认为坚持时间不长可能会跑路。不过，目前看到RackNerd还是在坚持且这次黑五活动也有发布，且活动促销也是比较多的，不过对于我们用户来说选择这些低价服务商尽量的不要将长远项目放在上面，低价年付套餐服务商一般都是用来临时业务的。RackNerd商家这次发布黑五促销活动，一共有五款年付套餐，涉及到多个机房。最低年付的套餐...
cyun29元/月,香港CN2 GIA云服务器低至起;香港多ip站群云服务器4核4G
cyun怎么样?cyun蓝米数据是一家(香港)藍米數據有限公司旗下品牌，蓝米云、蓝米主机等同属于该公司品牌。CYUN全系列云产品采用KVM架构，SSD磁盘阵列，优化线路，低延迟，高稳定。目前，cyun推出的香港云服务器性价比超高，香港cn2 gia云服务器,1核1G1M/系统盘+20G数据盘,低至29元/月起;香港多ip站群云服务器,16个ip/4核4G仅220元/月起，希望买香港站群服务器的站长...
iproute为你推荐
-
华师京城虚拟仿真实验室软件点击mediaaccess数据库修复求救，ACCESS数据库破坏了，怎么修复？开启javascript如何启用JavaScript?开启javascript电脑怎样开启javascript？？？？？？？？？要步骤！！！！！！？！中国企业信息网哪个查询企业信息的网站收录的企业信息最多dell服务器bios设置戴尔服务器主板怎么设置U盘启动人人视频总部基地落户重庆迁户口入重庆ldapserver怎样打开DWA文件？请说详细点？期刊eset