serveriproute
iproute 时间:2021-04-14 阅读:()
ConfiguringScalableHub-and-SpokeMPLSVPNsLastUpdated:December15,2011Thismoduleexplainshowtoensurethatvirtualprivatenetwork(VPN)clientsthatconnecttothesameprovideredge(PE)routerattheedgeoftheMutliprotocol(MPLS)VirtualPrivateNetwork(VPN)usethehubsite.
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
Budgetvm12核心 16G 500 GB SSD 或者 2 TB SATA 10GB 20 TB 99美金
Budgetvm(原EZ机房)，2005年成立的美国老品牌机房，主打美国4个机房（洛杉矶、芝加哥、达拉斯、迈阿密）和日本东京机房的独立服务器和VPS业务，而且不限制流量，默认提供免费的1800G DDoS防御服务，支持IPv6和IPMI，多种免费中文操作系统可供选择，独立服务器主打大硬盘，多硬盘，大内存，用户可以在后台自行安装系统等管理操作！内存可定制升级到1536G，多块硬盘随时加，14TBSA...
Central美国65折优惠，美国达拉斯机房VPS季付赠送双倍内存
Central美国独立日活动正在进行中，旗下美国达拉斯机房VPS 65折优惠，季付赠送双倍内存（需要发工单），Central租用的Hivelocity的机房，只支持信用卡和加密货币付款，不支持paypal，需要美国独服的可以谨慎入手试试。Central怎么样？Central便宜服务器，Central自称成立于2019年，主营美国达拉斯机房Linux vps、Windows vps、专用服务器和托管...
随风云25元/月 ，德阳高防云服务器 2核2G 10M 75元/月 内蒙古三线BGP服务器 2核2G 5M
公司介绍成都随风云科技有限公司成立于2021年，是国内领先的互联网业务平台服务提供商。公司专注为用户提供低价高性能云计算产品，致力于云计算应用的易用性开发，并引导云计算在国内普及。目前公司研发以及运营云服务基础设施服务平台（IaaS），面向全球客户提供基于云计算的IT解决方案与客户服务，拥有丰富的国内BGP、双线高防、香港等优质的IDC资源。公司一直秉承”以人为本、客户为尊、永续创新&...
iproute为你推荐
-
波音737起飞爆胎为什么客机每次起飞都要先跑一段距离本公司www瑞东集团海澜集团有限公司怎么样？三五互联股票三五互联是干什么的？财务单据出纳要用什么单据？discuz 代码谁能帮我把本地设置好的DISCUZ x2.5论坛放上服务器？或者怎么弄？能详细说下嘛？highlighter这双鞋的名字叫什么？广告管理系统怎么阻止安卓手机老是弹出广告？系统错误电脑开机或重启都显示 加载操作系统错误 该怎么办？论坛头像图片论坛头像宽度必须是 1 -- 160 之间的一个整数。头像高度必须是 1 -- 160 之间的一个整数。