serveriproute
iproute 时间:2021-04-14 阅读:()
ConfiguringScalableHub-and-SpokeMPLSVPNsLastUpdated:December15,2011Thismoduleexplainshowtoensurethatvirtualprivatenetwork(VPN)clientsthatconnecttothesameprovideredge(PE)routerattheedgeoftheMutliprotocol(MPLS)VirtualPrivateNetwork(VPN)usethehubsite.
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
ThisfeaturepreventstheVPNclientsfromcommunicatingdirectlywitheachother,bypassingthehubsite.
Thisfeaturealsoprovidesscalablehub-and-spokeconnectivityforsubscribersofanMPLSVPNservicebyremovingtherequirementofoneVRFperspoke.
FindingFeatureInformation,page1PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNs,page1RestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs,page2InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNs,page2HowtoEnsurethatMPLSVPNClientsUsetheHubPERouter,page3ConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs,page9AdditionalReferences,page12FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs,page13FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestfeatureinformationandcaveats,seethereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seetheFeatureInformationTableattheendofthisdocument.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforConfiguringScalableHub-and-SpokeMPLSVPNsYoumusthaveaworkingMPLScorenetwork.
AmericasHeadquarters:CiscoSystems,Inc.
,170WestTasmanDrive,SanJose,CA95134-1706USARestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNsInboththeupstreamanddownstreamVRFs,routingprotocolsarenotsupportedoninterfacesconfiguredwiththisfeature.
Interfacesthatarenotconfiguredwiththisfeature,however,donothavethisrestrictionfortheupstreamordownstreamVRFs.
Youcanconfigurethisfeatureonlyonvirtualaccessinterfaces(VAIs)andvirtualtemplateinterfaces(VTIs).
Onlyunnumberedinterfacesaresupported.
Multicastisnotsupportedoninterfacesconfiguredforhub-and-spokeMPLSVPNs.
InformationaboutConfiguringScalableHub-and-SpokeMPLSVPNsOverview,page2UpstreamandDownstreamVRFs,page3ReversePathForwardingCheck,page3OverviewThisfeaturepreventslocalconnectivitybetweensubscribersatthespokeprovideredge(PE)routerandensuresthatahubsiteprovidessubscriberconnectivity.
AnysitesthatconnecttothesamePEroutermustforwardintersitetrafficusingthehubsite.
Thisensuresthattheroutingdoneatthespokesitemovesfromtheaccess-sideinterfacetothenetwork-sideinterfaceorfromthenetwork-sideinterfacetotheaccess-sideinterface,butneverfromtheaccess-sideinterfacetotheaccess-sideinterface.
ThisfeaturepreventssituationswherethePErouterlocallyswitchesthespokeswithoutpassingthetrafficthroughthehubsite.
Thispreventssubscribersfromdirectlyconnectingtoeachother.
ThisfeatureeasesconfigurationbyremovingtherequirementofoneVRFperspoke.
Inpriorreleases,whenspokesconnectedtothesamePErouter,eachspokewasconfiguredinaseparateVRFtoensurethatthetrafficbetweenthespokestraversedthecentrallinkbetweenthewholesaleserviceproviderandtheISP.
However,thissolutionwasnotscalable.
WhenmanyspokesconnectedtothesamePErouter,configurationofVRFsforeachspokebecamequitecomplexandgreatlyincreasedmemoryusage.
Thiswasespeciallytrueinlarge-scaleenvironmentsthatsupportedhigh-densityremoteaccesstoLayer3VPNs.
Thefigurebelowshowsasamplehub-and-spoketopology.
Figure1Hub-and-SpokeTopologyOverviewRestrictionsforConfiguringScalableHub-and-SpokeMPLSVPNs2UpstreamandDownstreamVRFsThisfeatureusestwounidirectionalVRFstoforwardIPtrafficbetweenthespokesandthehubPErouter:TheupstreamVRFforwardstheIPtrafficfromthespokestowardthehubPErouter.
ThisVRFtypicallycontainsonlyadefaultroutebutmightalsocontainsummaryroutesandmultipledefaultroutes.
ThedefaultroutepointstotheinterfaceonthehubPErouterthatconnectstotheupstreamISP.
TherouterdynamicallylearnsaboutthedefaultroutefromtheroutingupdatesthatthehubPErouterorhomegatewaysends.
TheupstreamVRFalsocontainstheVAIsthatconnectthespokes,butitcontainsnootherlocalinterfaces.
ThedownstreamVRFforwardstrafficfromthehubPErouterbacktothespokes.
ThisVRFcontainsPoint-to-PointProtocol(PPP)peerroutesforthespokesandper-userstaticroutesreceivedfromtheAuthentication,Authorization,andAccounting(AAA)server.
ItalsocontainstheroutesimportedfromthehubPErouter.
TherouterredistributesroutesfromthedownstreamVRFintoMultiprotocolBorderGatewayProtocol(MP-BGP).
ThespokePEroutertypicallyadvertisesasummaryrouteacrosstheMPLScorefortheconnectedspokes.
TheVRFconfiguredonthehubPErouterimportstheadvertisedsummaryroute.
ReversePathForwardingCheckTheunicastReversePathForwarding(RPF)checkensuresthatanIPpacketthatentersarouterusesthecorrectinboundinterface.
ThisfeaturesupportsunicastRPFcheckonthespoke-sideinterfaces.
BecausedifferentVRFsareusedfordownstreamandupstreamforwarding,theRPFmechanismensuresthatsourceaddresschecksoccurinthedownstreamVRF.
HowtoEnsurethatMPLSVPNClientsUsetheHubPERouterConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouter,page3AssociatingVRFs,page5ConfiguringtheDownstreamVRFforanAAAServer,page6VerifyingtheConfiguration,page6ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterToconfiguretheupstreamanddownstreamVRFsonthePErouteroronthespokePErouter,usethefollowingprocedure.
UpstreamandDownstreamVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter3SUMMARYSTEPS1.
enable2.
configureterminal3.
ipvrfvrf-name4.
rdroute-distinguisher5.
route-target{import|export|both}route-target-ext-community6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
Step3ipvrfvrf-nameExample:Router(config)#ipvrfUEntersVRFconfigurationmodeanddefinestheVRFinstancebyassigningaVRFname.
Step4rdroute-distinguisherExample:Router(config-vrf)#rd1:0Createsroutingandforwardingtables.
Step5route-target{import|export|both}route-target-ext-communityExample:Router(config-vrf)#route-targetimport1:0CreatesalistofimportandexportroutetargetcommunitiesforthespecifiedVRF.
TheimportkeywordisrequiredtocreateanupstreamVRF.
TheupstreamVRFisusedtoimportthedefaultroutefromthehubPErouter.
TheexportkeywordisrequiredtocreateadownstreamVRF.
ThedownstreamVRFisusedtoexporttheroutesofallsubscribersofagivenservicethattheVRFserves.
ConfiguringtheUpstreamandDownstreamVRFsonthePERouterortheSpokePERouterHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter4CommandorActionPurposeStep6exitExample:Router(config-vrf)#exitReturnstoglobalconfigurationmode.
AssociatingVRFsThevirtualtemplateinterfaceisusedtocreateandconfigureavirtualaccessinterface(VAI).
AfteryoudefineandconfiguretheVRFsonthePErouters,associateeachVRFwiththefollowing:InterfaceorsubinterfaceVirtualtemplateinterfaceToassociateaVRF,enterthefollowingcommandsonthePErouter.
SUMMARYSTEPS1.
enable2.
configureterminal3.
interfacevirtual-templatenumber4.
ipvrfforwardingvrf-name1[downstreamvrf-name2]5.
ipunnumberedtypenumber6.
exitDETAILEDSTEPSCommandorActionPurposeStep1enableExample:Router>enableEnablesprivilegedEXECmode.
Enteryourpasswordifprompted.
Step2configureterminalExample:Router#configureterminalEntersglobalconfigurationmode.
AssociatingVRFsHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter5CommandorActionPurposeStep3interfacevirtual-templatenumberExample:Router(config)#interfacevirtual-template1Createsavirtualtemplateinterfacethatcanbeconfiguredandapplieddynamicallyincreatingvirtualaccessinterfaces.
Entersinterfaceconfigurationmode.
Step4ipvrfforwardingvrf-name1[downstreamvrf-name2]Example:Router(config-if)#ipvrfforwardingvpn1downstreamDAssociatesavirtualtemplateinterfacewiththeVRFyouspecify.
Thevrf-name1argumentisthenameoftheVRFassociatedwiththevirtualtemplateinterface.
Thevrf-name2argumentisthenameofthedownstreamVRFintowhichthePPPpeerrouteandalloftheper-userroutesfromtheAAAserverareinstalled.
IfanAAAserverisused,itprovidestheVRFmembership;youdonotneedtoconfiguretheVRFmembersonthevirtualtemplates.
Step5ipunnumberedtypenumberExample:Router(config-if)#ipunnumberedLoopback1EnablesIPprocessingonaninterfacewithoutassigninganexplicitIPaddresstotheinterface.
ThetypeandnumberargumentsarethetypeandnumberofanotherinterfaceonwhichtherouterhasanassignedIPaddress.
Itcannotbeanotherunnumberedinterface.
Step6exitExample:Router(config-if)#exitReturnstoglobalconfigurationmode.
ConfiguringtheDownstreamVRFforanAAAServerToconfigurethedownstreamVRFforanAAAserver,enterthefollowingCiscoattributevalue:lcp:interface-config=ipvrfforwardingUdownstreamDFormoreinformationaboutconfiguringaRADIUSserver,seeConfiguringVirtualTemplateInterfaces.
VerifyingtheConfigurationToverifytheconfiguration,performthefollowingsteps.
SUMMARYSTEPS1.
showipvrf[brief|detail|interfaces|id][vrf-name]2.
showiproutevrfvrf-name3.
showrunning-config[interfacetypenumber]ConfiguringtheDownstreamVRFforanAAAServerHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter6DETAILEDSTEPSStep1showipvrf[brief|detail|interfaces|id][vrf-name]UsethiscommandtodisplayinformationaboutalloftheVRFsconfiguredontherouter,includingthedownstreamVRFforeachassociatedVAI.
Example:Router#showipvrfNameDefaultRDInterfaceD2:0Loopback2Virtual-Access3[D]Virtual-Access4[D]U2:1Virtual-Access3Virtual-Access4showipvrfdetailvrf-nameUsethiscommandtodisplaydetailedinformationabouttheVRFyouspecify,includingalloftheVAIsassociatedwiththeVRF.
Ifyoudonotspecifyavalueforvrf-name,detailedinformationaboutalloftheVRFsconfiguredontherouterappears,includingalloftheVAIsassociatedwitheachVRF.
ThefollowingexampleshowshowtodisplaydetailedinformationfortheVRFcalledvrf1.
Example:Router#showipvrfdetailvrf1VRFD;defaultRD2:0;defaultVPNIDInterfaces:Loopback2Virtual-Access3[D]Virtual-Access4[D]ConnectedaddressesarenotinglobalroutingtableExportVPNroute-targetcommunitiesRT:2:0ImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapVRFU;defaultRD2:1;defaultVPNIDInterfaces:Virtual-Access3Virtual-Access4ConnectedaddressesarenotinglobalroutingtableNoExportVPNroute-targetcommunitiesImportVPNroute-targetcommunitiesRT:2:1Noimportroute-mapNoexportroute-mapStep2showiproutevrfvrf-nameUsethiscommandtodisplaytheIProutingtablefortheVRFyouspecify,andinformationabouttheper-userstaticroutesinstalledinthedownstreamVRF.
ThefollowingexampleshowshowtodisplaytheroutingtableforthedownstreamVRFnamedD.
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter7Example:Router#showiproutevrfDRoutingTable:DCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortisnotset2.
0.
0.
0/8isvariablysubnetted,5subnets,2masksU2.
0.
0.
2/32[1/0]via2.
8.
1.
1S2.
0.
0.
0/8isdirectlyconnected,Null0U2.
0.
0.
5/32[1/0]via2.
8.
1.
2C2.
8.
1.
2/32isdirectlyconnected,Virtual-Access4C2.
8.
1.
1/32isdirectlyconnected,Virtual-Access3ThefollowingexampleshowshowtodisplaytheroutingtablefortheupstreamVRFnamedU.
Example:Router#showiproutevrfURoutingTable:UCodes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterareaN1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,L1-IS-ISlevel-1,L2-IS-ISlevel-2,ia-IS-ISinterarea*-candidatedefault,U-per-userstaticroute,o-ODRP-periodicdownloadedstaticrouteGatewayoflastresortis100.
0.
0.
20tonetwork0.
0.
0.
02.
0.
0.
0/32issubnetted,1subnetsC2.
0.
0.
8isdirectlyconnected,Loopback2B*0.
0.
0.
0/0[200/0]via100.
0.
0.
20,1w5dStep3showrunning-config[interfacetypenumber]Usethiscommandtodisplayinformationaboutthevirtualaccessinterfaceyouspecify,includinginformationabouttheupstreamanddownstreamVRFs.
Thefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access3.
Example:Router#showrunning-configinterfacevirtual-access3Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
interfaceVirtual-Access3ipvrfforwardingUdownstreamDipunnumberedLoopback2endThefollowingexampleshowshowtodisplayinformationabouttheinterfacenamedvirtual-access4.
Example:Router#showrunning-configinterfacevirtual-access4Buildingconfiguration.
.
.
Currentconfiguration:92bytes!
VerifyingtheConfigurationHowtoEnsurethatMPLSVPNClientsUsetheHubPERouter8interfaceVirtual-Access4ipvrfforwardingUdownstreamDipunnumberedLoopback2endConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNsConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExample,page9AssociatingVRFsExample,page9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExample,page10Example,page11ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleThefollowingexampleconfiguresanupstreamVRFnamedU:Router>enableRouter#configureterminalRouter(config)#ipvrfURouter(config-vrf)#rd1:0Router(config-vrf)#route-targetimport1:0ThefollowingexampleconfiguresadownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#ipvrfDRouter(config-vrf)#rd1:8Router(config-vrf)#route-targetexport1:100AssociatingVRFsExampleThefollowingexampleassociatestheVRFnamedUwiththevirtual-template1interfaceandspecifiesthedownstreamVRFnamedD:Router>enableRouter#configureterminalRouter(config)#interfacevirtual-template1Router(config-if)#ipvrfforwardingUdownstreamDRouter(config-if)#ipunnumberedLoopback1ConfiguringtheUpstreamandDownstreamVRFsonthePERouterandtheSpokePERouterExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs9ConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleInthisexample,localauthenticationisused;thatis,theRADIUSserverisnotused.
Thisexampleusesthehub-and-spoketopologyshowninthefigurebelow.
Figure2SampleTopologyipvrfDrd1:8route-targetexport1:100!
ipvrfUrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0descriptionMzeATM3/1/2noipaddressnoatmilmi-keepalivepvc0/16ilmi!
pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfaceVirtual-Template1ipvrfforwardingUdownstreamDipunnumberedLoopback2peerdefaultipaddresspoolU-poolpppauthenticationchapConfiguringScalableHub-and-SpokeMPLSVPNs--BasicConfigurationExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs10ExampleThefollowingexampleshowshowtoconnecttwoPoint-to-PointProtocoloverEthernet(PPPoE)clientstoasingleVRFpaironthespokePErouternamedLipno.
AlthoughbothPPPoEclientsareconfiguredinthesameVRF,allcommunicationoccursusingthehubPErouter.
Half-duplexVRFsareconfiguredonthespokePE.
TheclientconfigurationisdownloadedtothespokePEfromtheRADIUSserver.
Thisexampleusesthehub-and-spoketopologyshowninthefigureabove.
NoteThewholesaleprovidercanforwardtheuserauthenticationrequesttothecorrespondingISP.
IftheISPauthenticatestheuser,thewholesaleproviderappendstheVRFinformationtotherequestthatgoesbacktothePErouter.
aaanew-model!
aaagroupserverradiusRserver22.
0.
20.
26auth-port1812acct-port1813!
aaaauthenticationpppdefaultgroupradiusaaaauthorizationnetworkdefaultgroupradius!
ipvrfDdescriptionDownstreamVRF-tospokesrd1:8route-targetexport1:100!
ipvrfUdescriptionUpstreamVRF-tohubrd1:0route-targetimport1:0!
ipcefvpdnenable!
vpdn-groupUaccept-dialinprotocolpppoevirtual-template1!
interfaceLoopback2ipvrfforwardingUipaddress2.
0.
0.
8255.
255.
255.
255!
interfaceATM2/0pvc3/100protocolpppoe!
pvc3/101protocolpppoe!
interfacevirtual-template1noipaddresspppauthenticationchap!
routerbgp1nosynchronizationneighbor100.
0.
0.
34remote-as1neighbor100.
0.
0.
34update-sourceLoopback0noauto-summary!
address-familyvpnv4neighbor100.
0.
0.
34activateneighbor100.
0.
0.
34send-communityextendedauto-summaryexit-address-familyExampleConfigurationExamplesforConfiguringScalableHub-and-SpokeMPLSVPNs11!
address-familyipv4vrfUnoauto-summarynosynchronizationexit-address-family!
address-familyipv4vrfDredistributestaticnoauto-summarynosynchronizationexit-address-family!
iplocalpoolU-pool2.
8.
1.
12.
8.
1.
100iproutevrfD2.
0.
0.
0255.
0.
0.
0Null0!
radius-serverhost22.
0.
20.
26auth-port1812acct-port1813radius-serverkeyciscoAdditionalReferencesRelatedDocumentsRelatedTopicDocumentTitleBasicMPLSVPNsConfiguringMPLSLayer3VPNsMPLSVPNCarrierSupportingCarrierMPLSVPNCarrierSupportingCarrierUsingLDPandanIGPMPLSVPNCarrierSupportingCarrierwithBGPMPLSVPNInterAutonomousSystemsMPLSVPNInter-ASwithASBRsExchangingIPv4RoutesandMPLSLabelsMPLSVPNInter-ASwithASBRsExchangingVPN-IPv4AddressesStandardsStandardTitleNonewormodifiedstandardsaresupportedbythisfeature,andsupportforexistingstandardshasnotbeenmodifiedbythisfeature.
—MIBsMIBMIBsLinkNonewormodifiedMIBsaresupportedbythisfeature,andsupportforexistingMIBshasnotbeenmodifiedbythisfeature.
TolocateanddownloadMIBsforselectedplatforms,CiscoIOSreleases,andfeaturesets,useCiscoMIBLocatorfoundatthefollowingURL:http://www.
cisco.
com/go/mibsExampleAdditionalReferences12RFCsRFCTitleRFC2547BGP/MPLSVPNsTechnicalAssistanceDescriptionLinkTheCiscoTechnicalSupportwebsitecontainsthousandsofpagesofsearchabletechnicalcontent,includinglinkstoproducts,technologies,solutions,technicaltips,andtools.
RegisteredCisco.
comuserscanloginfromthispagetoaccessevenmorecontent.
TheCiscoSupportwebsiteprovidesextensiveonlineresources,includingdocumentationandtoolsfortroubleshootingandresolvingtechnicalissueswithCiscoproductsandtechnologies.
Toreceivesecurityandtechnicalinformationaboutyourproducts,youcansubscribetovariousservices,suchastheProductAlertTool(accessedfromFieldNotices),theCiscoTechnicalServicesNewsletter,andReallySimpleSyndication(RSS)Feeds.
AccesstomosttoolsontheCiscoSupportwebsiterequiresaCisco.
comuserIDandpassword.
http://www.
cisco.
com/techsupportFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
ExampleFeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNs13Table1FeatureInformationforConfiguringScalableHub-and-SpokeMPLSVPNsFeatureNameReleasesFeatureConfigurationInformationMPLSVPN:HalfDuplexVRFSupport12.
3(6)12.
3(11)TThisfeatureensuresthatVPNclientsthatconnecttothesamePErouterattheedgeoftheMPLSVPNusethehubsitetocommunicate.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.
S.
andothercountries.
ToviewalistofCiscotrademarks,gotothisURL:www.
cisco.
com/go/trademarks.
Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.
TheuseofthewordpartnerdoesnotimplyapartnershiprelationshipbetweenCiscoandanyothercompany.
(1110R)AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.
Anyexamples,commanddisplayoutput,networktopologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.
AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentionalandcoincidental.
2011CiscoSystems,Inc.
Allrightsreserved.
Example14
BuyVM($5/月）不限流量流媒体优化VPS主机 1GB内存
BuyVM商家属于比较老牌的服务商，早年有提供低价年付便宜VPS主机还记得曾经半夜的时候抢购的。但是由于这个商家风控非常严格，即便是有些是正常的操作也会导致被封账户，所以后来陆续无人去理睬，估计被我们风控的抢购低价VPS主机已经手足无措。这两年商家重新调整，而且风控也比较规范，比如才入手他们新上线的流媒体优化VPS主机也没有不适的提示。目前，BuyVM商家有提供新泽西、迈阿密等四个机房的VPS主机...
华纳云E5处理器16G内存100Mbps688元/月
近日华纳云商家正式上线了美国服务器产品，这次美国机房上线的产品包括美国云服务器、美国独立服务器、美国高防御服务器以及美国高防云服务器等产品，新产品上线华纳云推出了史上优惠力度最高的特价优惠活动，美国云服务器低至3折，1核心1G内存5Mbps带宽低至24元/月，20G ddos高防御服务器低至688元/月，年付周期再送2个月、两年送4个月、三年送6个月，终身续费同价，有需要的朋友可以关注一下。华纳云...
稳爱云(26元),香港云服务器 1核 1G 10M带宽
稳爱云（www.wenaiyun.com）是创建于2021年的国人IDC商家，主要目前要出售香港VPS、香港独立服务器、美国高防VPS、美国CERA VPS 等目前在售VPS线路有三网CN2、CN2 GIA，该公司旗下产品均采用KVM虚拟化架构。机房采用业内口碑最好香港沙田机房，稳定，好用，数据安全。线路采用三网（电信，联通，移动）回程电信cn2、cn2 gia优质网络，延迟低，速度快。自行封装的...
iproute为你推荐
-
非洲bit美要求解锁iPhone怎么用爱思手机助手解锁苹果手机?重庆网站制作重庆网站制作哪家好，重庆做网站制作的公司有谁比较了解的，应该去哪里做好些？netshwinsockreset在cmd中输入netsh winsock reset显示系统找不到指定文件怎么办宜人贷官网宜人贷是不是骗局,借了五万,每月还2030元,还十个月了,想一次性还完,他们说我三友网怎么是“三友”瑞东集团请问富源集团到底是一个怎么样的集团？管理员密码请输入管理员密码什么意思邮件管理系统邮件管理软件哪种最好？dedecmsdedecms是做什么的