kFIJS,S7506E 本地VRF之间,VRF与全局路由表互通
需求:
实现本地VRF之间互通,实现本地VRF与全局路由表互通上网
组网:
pc1/pc2----vrf)S75
1、LAN侧:pc1和2分别属于不同vlan与s75
2、上联口:与防火墙通过vlan interface直连,并配置默认路由下一跳指向防火墙接口地址
pc1 1
pc2 1
fw 1
配置:
interface Vlan-interface1118
ip binding vpn-instance v1118
ip address 1
interface Vlan-interface1119
ip binding vpn-instance v1119
ip address 1
[BJTNIDC-R
Vlan1118 up up 1interface Vlan-interface1
description to_FW
ip address 1
ip route-static
ip route-static 1
ip route-static 1
ip route-static vpn-instance v1119
ip route-static vpn-instance v1118
检查路由表信息
[BJTNIDC-R
Destinations : 14 Routes : 14
Destination/Mask Proto Pre Cost NextHop Interface
1
1
1
1
1
127.
127.
127.
127.255.255.255/32 Direct
224.
224.
255.255.255.255/32 Direct
------------------------
[BJTNIDC-R
Destinations : 14 Routes : 14
Destination/Mask Proto Pre Cost NextHop Interface
1
1
1
1
1
127.
127.
127.
127.255.255.255/32 Direct
224.
224.
255.255.255.255/32 Direct
----------------------------------------------
[BJTNIDC-R
Destinations : 1
Destination/Mask Proto Pre Cost NextHop Interface
1
1
1
1
1
1
1
1
1
1
验证:
[BJTNIDC-R[BJTNIDC-R
大家看我的静态路由指的对吗?现在还是不通,先实现能上网就行,求指教
2
出去的路由是对的,但是在全局路由表指向vpn实例里面的路由配置错误
ip route-static 1
ip route-static 1
如果每个实例下面有25
这么繁琐,还不如把vpn去掉呢
2
为了实现内网租户隔离,想要三层绑定vrf实现,所以要用vpn实例啊
kFIJS 发表时间:2 ,S7506E 本地VRF之间,VRF与全局路由表互通