serveriproute
iproute 时间:2021-04-14 阅读:()
ConfiguringScalableHub-and-SpokeMPLSVPNsLastUpdated:December15,2011Thismoduleexplainshowtoensurethatvirtualprivatenetwork(VPN)clientsthatconnecttothesameprovideredge(PE)routerattheedgeoftheMutliprotocol(MPLS)VirtualPrivateNetwork(VPN)usethehubsite.
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
特网云57元，香港云主机 1核 1G 10M宽带1G(防御)
特网云官網特网云服务器在硬件级别上实现云主机之间的完全隔离；采用高端服务器进行部署，同时采用集中的管理与监控，确保业务稳定可靠，搭建纯SSD架构的高性能企业级云服务器，同时采用Intel Haswell CPU、高频DDR4内存、高速Sas3 SSD闪存作为底层硬件配置，分钟级响应速度，特网云采用自带硬防节点，部分节点享免费20G防御，可实现300G防御峰值，有效防御DDoS、CC等恶意攻击，保障...
百纵科技,美国独立服务器 E52670*1 32G 50M 200G防御 899元/月
百纵科技:美国高防服务器,洛杉矶C3机房 独家接入zenlayer清洗 带金盾硬防,CPU全系列E52670、E52680v3 DDR4内存 三星固态盘阵列！带宽接入了cn2/bgp线路，速度快，无需备案，非常适合国内外用户群体的外贸、搭建网站等用途。C3机房，双程CN2线路，默认200G高防，3+1（高防IP），不限流量，季付送带宽美国洛杉矶C3机房套餐处理器内存硬盘IP数带宽线路防御价格/月套...
hostkey俄罗斯、荷兰GPU显卡服务器/免费Windows Server
Hostkey.com成立于2007年的荷兰公司，主要运营服务器出租与托管，其次是VPS、域名、域名证书，各种软件授权等。hostkey当前运作荷兰阿姆斯特丹、俄罗斯莫斯科、美国纽约等数据中心。支持Paypal，信用卡，Webmoney，以及支付宝等付款方式。禁止VPN,代理，Tor,网络诈骗,儿童色情，Spam，网络扫描，俄罗斯色情，俄罗斯电影,俄罗斯MP3，俄罗斯Trackers，以及俄罗斯法...
iproute为你推荐
-
河南大学2020年高层次人才需求信息表dell服务器bios设置如何进入DELL电脑BIOS设置重庆400年老树穿楼生长重庆吊脚楼internetexplorer无法打开Internet Explorer无法打开站点怎么解决sns网站有哪些有哪些好的SNS商务社交类网站?滴滴估值500亿滴滴拉屎 App 为何能估值 100 亿美金？是怎么计算出来的滴滴估值500亿滴滴流水每天280元一个月下来能赚 多少三五互联股票三五互联是干什么的？武林官网欢go客户端一般在哪里下载是官方的？metinfometinfo是免费的吗？可以永久免费使用吗？