---
title: AS 5 de la SAÉ ROM 401 Déploiement d’un réseau d’opérateur
tags: SAÉ, réseau opérateur, compte-rendu, AS 5
---
## SAE 401 Déploiement d’un réseau d’opérateur - AS5
---
## AS 5
#### Nous avons réorganiser les routeurs et nous avons déterminer les adresses avec la norme que nous avons rédiger avec la promotion.
*Tableau des adresses pour la configuration des routeurs CR*
*Tableau des adresses pour la configuration des routeurs CE*
*Schéma de la topologie de l'AS 5*
## Organisation
:::warning
***Séance 1 (7 MARS - 4H) :***
Pendant cette séance, nous avons configuré **l’adressage IP des routeurs CE, CR et ER**. Nous nous sommes rendus compte qu'il y avait une erreur dans l’adressage sur une interface, c'est pour cela que nous avons réagonisé les **routeurs CR et ER** pour que soit plus simple pour nous. Par la suite, nous avons rédigé un **tableau** pour avoir une meilleure visualisation de l’adressage. Sur l’ensemble des routeurs, nous avons **configuré les interfaces de loopbacks** ainsi que les routeur-ID en respectant la Convention. Nous avons aussi identifié les routeurs dans la backbone pour pouvoir **activer MPLS** sur ceux-ci. Nous avons continué sur cette séance en réfléchissant au **plan OSPF** à mettre en place dans la **backbone**.
:::
:::danger
***Séance 2 (14 MARS - 3H) :***
Pendant cette séance nous avons commencé le **routage OSPF** pour les routeurs à l'**intérieur de la zone de backbone**. Nous avons aussi effectué la configuration du **routage OSPF** sur les **routeurs ER et CE** avec les différents processus en fonction des différents VPN à metre en place entre les CE et les routeurs bordurent de la backbone (ER)
:::
:::info
***Séance 3 (15 MARS - 7H) :***
Nous avons commencé la configuration des **VRF** et la configuration du routage **BGP**.
:::
:::success
***Séance 4 (16 MARS - 4H) :***
Nous avons continué la configuration des **VRF** et la configuration du routage **BGP**.
:::
:::warning
***Séance 5 (17 MARS - 3H) :***
Nous avons **testé les VPN** et nous avonc commencer la configuration BGP des routeurs de bordure pour la connexion entre les AS.
:::
:::danger
***Séance 6 (21 MARS - 3H) :***
Nous avons rencontré des **problèmes** sur la connexion BGP entre les AS. Nous nous sommes donc **concertés avec les autres AS** pour trouver des solutions.
:::
:::info
***Séance 7 (22 MARS - 5,5H) :***
Durant cette séance, nous avons commencé la **configuration des tunnels statiques** à une destination simple.
:::
:::success
***Séance 8 (24 MARS - 3H) :***
Nous avons commencé la **configuration des tunnels a destination multiples**.
:::
:::warning
***Séance 9 (27 MARS - 3H) :***
Nous avons essayé de **régler les erreurs** que nous rencontrions sur les **tunnels a destination multiples**. Nous avons analysé les **configurations BGP Community**.
:::
:::danger
***Séance 10 (28 MARS - 3H) :***
Nous avons rencontré des **problèmes sur les CR**. Nous avons eu une erreur intitulée : **cant use link** .
:::
:::info
***Séance 11 (29 MARS - 3H) :***
Nous avons continué à essayer de **résoudre les problèmes** liés aux tunnels sur les CR. Nous avons commencé en parallèle la **configuration des VM**.
:::
:::success
***Séance 12 (30 MARS - 3H) :***
Nous avons fini de **configurer les VM**. Nous avons **installé Pack Sender** sur ceux-ci. Nous avons étudié les **commandes packetsender** sans aucune réussite et nous avons donc basculé sur **Netcat** et nous avons essayer une connexion TCP entre les deux VM. Ce test n'a **pas aboutit**.
:::
|| **Adressage** | **Loopback** | **MPLS** | **OSPF** | **VRF** | **OSPF VPN** | **BGP** | **HackMD** |**Tunnels** | **Tests de Flux**
| - | - | - | - | - | - | - | - | - | - | - |
| **Baptiste** | **X** || **X** || **X** || **X** ||**X** | |
| **Valentin** | **X** | **X** || **X** | | **X** || **X** ||**X**||
---
---
## Tests & Explications
::::::warning
::::::spoiler OSPF
> Sur les routeurs connectant notre AS à un autre AS, nous redistribuons les routes apprises en BGP dans l'OSPF pour que le nuage MPLS apprenne ces routes et nous avons annoncé les réseaux directement connectés, tandis que sur les routeurs dans le nuage MPLS, nous avons seulement annoncé les réseaux directement connectés. Sur l'OSPF du nuage MPLS, nous avons spécifié le routeur id pour le protocole MPLS ainsi que l'aire utilisée pour que le protocole MPLS utilise les routes OSPF.
:::::::: spoiler Voir les captures
:::::danger
*Configuration de OSPF sur le routeur bordure de l'AS*
:::::
:::::danger
*Configuration de OSPF sur le routeur dans le nuage MPLS*
:::::
:::::danger
*Route OSPF*
:::::
:::::danger
*Route vers d'autres AS sur un routeur CR*
:::::
:::::::::
::::::info
::::::spoiler BGP
> Pour envoyer une seule route, une route résumée de notre réseau à d'autres AS, nous avons dû créer une route statique vers une interface null0. Cette interface null0 permet d'éviter le bouclage. Ensuite dans BGP nous avons partagé la route résumée. Nous avons en voisins BGP, les routeurs de bordure de notre AS ainsi que les routeurs connectant aux autres AS.
:::::::: spoiler Voir les captures
:::::danger
*Configuration bgp bordure vers as6*
:::::
:::::danger
*Route appris bgp de l'AS 6*
:::::
Si la configuration bgp est opérationnelle entre deux AS, alors on reçoit la route bgp de l'autre AS
:::::danger
*Ping vers un AS*
:::::
:::::danger
*Ping vers un AS en passant par l'AS 1*
:::::
:::::::::
::::::danger
::::::spoiler VPN
> Les VPN ont chacun un processus OSPF propre. Afin d'utiliser les VPN nous devions créer une table de routage dédiés à cela. Sur les routeurs ER reliant les VPN, nous avons spécifié au processus ospf de partager ses routes dans la table de routage du VPN concerné. Nous avons mis les interfaces des réseaux VPN, en forwarding du VPN concerné. nous avons ensuite redistribué les routes des VPN dans les familles de VPN. Nous avons aussi partagé le réseau des vm afin qu'ils utilisent le VPN.
:::::::: spoiler Voir les captures
:::::info
*Configuration des routes envoyés de routage des vpn
:::::
:::::info
*Table de routage*
:::::
:::::::::
::::::success
::::::spoiler Tunnels
> Pour fonctionner, les tunnels statiques ont besoin que les liens utilisés par le tunnel, aient mpls ip pour activer le protocole MPLS ainsi que mpls traffic-eng tunnels pour spécifier l'utilisation de tunnel MPLS et de mettre une bande passante supérieure à la bande passante du tunnel. On a utilisé des police-map pour marquer les flux en destination d'autres AS. Nous avons créé des routes statiques pour que les flux à destination de l'AS concerné utilise le tunnel.
:::::::: spoiler Voir les captures
:::::info
*Configuration du tunnel 3*
:::::
:::::info
*Propriété pour entré dans tunnels*
:::::
:::::info
*Interface d'entré du tunnel*
:::::
:::::info
*Interface de sortie du tunnel*
:::::
:::::info
*Interface de sortie du tunnel*
:::::
:::::info
*Flux à destinations d'autres passant par le tunnel*
:::::
:::::::::
::::::warning
::::::spoiler VM
> Nous avons configuration les routeurs CE pour que les flux des VM à destination d'Internet soit translaté sur l'adresse publique du routeur CE. À l'inverse, si ces flux sont à destination des VPN ou des VM, ce flux utilisera le lien VPN.
:::::::: spoiler Voir les captures
:::::info
*Configuration d'une des deux VM*
:::::
:::::info
*Configuration pour la VM vers une autre VM et Internet*
:::::
:::::info
*Ping d'une vm vers une autre as*
:::::
:::::info
*Ping entre les VM*
:::::
:::::::::
## Configuration des routeurs
:::::warning
::::spoiler CR
:::spoiler CR1
````=1
conf t
hostname CR5-1
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.1 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.18 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.65 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.61 255.255.255.252
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.69 255.255.255.252
no shut
router ospf 1
router-id 5.1.1.1
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.60 0.0.0.3 area 0
network 113.0.115.1 0.0.0.0 area 0
network 113.0.0.16 0.0.0.3 area 0
network 113.0.0.68 0.0.0.3 area 0
network 113.0.0.64 0.0.0.3 area 0
````
:::
:::spoiler CR2
````=1
conf t
hostname CR5-2
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.2 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.14 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.53 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.57 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.49 255.255.255.252
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.37 255.255.255.252
no shut
int p6/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.158 255.255.255.252
no shut
router ospf 1
router-id 5.1.1.2
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.12 0.0.0.3 area 0
network 113.0.115.2 0.0.0.0 area 0
network 113.0.0.156 0.0.0.3 area 0
network 113.0.0.52 0.0.0.3 area 0
network 113.0.0.36 0.0.0.3 area 0
network 113.0.0.56 0.0.0.3 area 0
network 113.0.0.48 0.0.0.3 area 0
````
:::
:::spoiler CR3
````=1
conf t
hostname CR5-3
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.3 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.6 255.255.255.252
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.45 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.41 255.255.255.252
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.33 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
router ospf 1
router-id 5.1.1.3
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.4 0.0.0.3 area 0
network 113.0.115.3 0.0.0.0 area 0
network 113.0.0.32 0.0.0.3 area 0
network 113.0.0.40 0.0.0.3 area 0
network 113.0.0.44 0.0.0.3 area 0
````
:::
:::spoiler CR4
````=1
conf t
hostname CR5-4
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.4 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.10 255.255.255.252
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.29 255.255.255.252
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.25 255.255.255.252
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.21 255.255.255.252
no shut
router ospf 1
router-id 5.1.1.4
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.8 0.0.0.3 area 0
network 113.0.115.4 0.0.0.0 area 0
network 113.0.0.20 0.0.0.3 area 0
network 113.0.0.24 0.0.0.3 area 0
network 113.0.0.28 0.0.0.3 area 0
````
:::
:::spoiler CR5
````=1
conf t
hostname CR5-5
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.5 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.38 255.255.255.252
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.34 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.26 255.255.255.252
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.105 255.255.255.252
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.97 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p6/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.101 255.255.255.252
no shut
router ospf 1
router-id 5.1.1.5
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.24 0.0.0.3 area 0
network 113.0.115.5 0.0.0.0 area 0
network 113.0.0.104 0.0.0.3 area 0
network 113.0.0.100 0.0.0.3 area 0
network 113.0.0.96 0.0.0.3 area 0
network 113.0.0.36 0.0.0.3 area 0
network 113.0.0.32 0.0.0.3 area 0
````
:::
:::spoiler CR6
````=1
conf t
hostname CR5-6
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.6 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.50 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.42 255.255.255.252
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.30 255.255.255.252
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.93 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
router ospf 1
router-id 5.1.1.6
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.28 0.0.0.3 area 0
network 113.0.115.6 0.0.0.0 area 0
network 113.0.0.40 0.0.0.3 area 0
network 113.0.0.48 0.0.0.3 area 0
network 113.0.0.92 0.0.0.3 area 0
````
:::
:::spoiler CR7
````=1
conf t
hostname CR5-7
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.7 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.62 255.255.255.252
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.54 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.46 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.85 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.89 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
router ospf 1
router-id 5.1.1.7
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.44 0.0.0.3 area 0
network 113.0.115.7 0.0.0.0 area 0
network 113.0.0.52 0.0.0.3 area 0
network 113.0.0.60 0.0.0.3 area 0
network 113.0.0.84 0.0.0.3 area 0
network 113.0.0.88 0.0.0.3 area 0
````
:::
:::spoiler CR8
````=1
conf t
hostname CR5-8
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.8 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.66 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.58 255.255.255.252
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.81 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.77 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
router ospf 1
router-id 5.1.1.8
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.56 0.0.0.3 area 0
network 113.0.115.8 0.0.0.0 area 0
network 113.0.0.64 0.0.0.3 area 0
network 113.0.0.80 0.0.0.3 area 0
network 113.0.0.76 0.0.0.3 area 0
````
:::
:::spoiler CR9
````=1
conf t
hostname CR5-9
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.9 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.86 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.82 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.133 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.129 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.125 255.255.255.252
no shut
router ospf 1
router-id 5.1.1.9
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.132 0.0.0.3 area 0
network 113.0.115.9 0.0.0.0 area 0
network 113.0.0.80 0.0.0.3 area 0
network 113.0.0.84 0.0.0.3 area 0
network 113.0.0.128 0.0.0.3 area 0
network 113.0.0.124 0.0.0.3 area 0
````
:::
:::spoiler CR10
````=1
conf t
hostname CR5-10
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.10 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.98 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.94 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.90 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.121 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.117 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p6/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.113 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
router ospf 1
router-id 5.1.1.10
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.88 0.0.0.3 area 0
network 113.0.115.10 0.0.0.0 area 0
network 113.0.0.92 0.0.0.3 area 0
network 113.0.0.96 0.0.0.3 area 0
network 113.0.0.120 0.0.0.3 area 0
network 113.0.0.116 0.0.0.3 area 0
network 113.0.0.112 0.0.0.3 area 0
````
:::
:::spoiler CR11
````=1
conf t
hostname CR5-11
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.11 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.110 255.255.255.252
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.114 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.153 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
router ospf 1
router-id 5.1.1.11
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.152 0.0.0.3 area 0
network 113.0.115.11 0.0.0.0 area 0
network 113.0.0.112 0.0.0.3 area 0
network 113.0.0.108 0.0.0.3 area 0
````
:::
:::spoiler CR12
````=1
conf t
hostname CR5-12
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.12 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.118 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.149 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.102 255.255.255.252
no shut
router ospf 1
router-id 5.1.1.12
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.100 0.0.0.3 area 0
network 113.0.115.12 0.0.0.0 area 0
network 113.0.0.116 0.0.0.3 area 0
network 113.0.0.148 0.0.0.3 area 0
````
:::
:::spoiler CR13
````=1
conf t
hostname CR5-13
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.13 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.126 255.255.255.252
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.122 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.145 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
router ospf 1
router-id 5.1.1.13
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.120 0.0.0.3 area 0
network 113.0.115.13 0.0.0.0 area 0
network 113.0.0.124 0.0.0.3 area 0
network 113.0.0.144 0.0.0.3 area 0
````
:::
:::spoiler CR14
````=1
conf t
hostname CR5-14
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.115.14 255.255.255.255
no shut
int p1/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.138 255.255.255.252
no shut
int p2/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.130 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.141 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
router ospf 1
router-id 5.1.1.14
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.128 0.0.0.3 area 0
network 113.0.115.14 0.0.0.0 area 0
network 113.0.0.136 0.0.0.3 area 0
network 113.0.0.140 0.0.0.3 area 0
````
::::
:::::
:::::info
::::spoiler ER
:::spoiler ER1
````=1
conf t
hostname ER5-1
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.105.1 255.255.255.255
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.17 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
service-policy output core-out-policy
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.13 255.255.255.252
service-policy input sla-1-input-policy
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int fa0/0
ip addr 30.0.1.26 255.255.255.248
service-policy input sla-1-input-policy
no shut
int tunnel 1
bandwidth 50000
ip unnumbered lo1
tunnel destination 113.0.105.3
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng priority 0 0
tunnel mpls traffic-eng bandwidth sub-pool 30000
tunnel mpls traffic-eng path-option 1 explicit name tun1
ex
ip explicit-path name tun1
next-address 113.0.0.18
next-address 113.0.0.66
next-address 113.0.0.78
ex
class-map match-all exp5-class
match access-group 105
access-list 105 permit ip any 93.0.0.0 0.0.255.255
policy-map sla-1-input-policy
class exp5-class
police 30000000 1000000 2000000 conform-action set-mpls-exp-imposition-transmit 5 exceed-action drop
class class-default
set mpls experimental 0
class-map match-all exp5-traffic-class
match mpls experimental 5
policy-map core-out-policy
class exp5-traffic-class
priority 32
ip route 93.0.0.0 255.255.0.0 tunnel 1
router ospf 1
router-id 5.1.0.1
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
redistribute bgp 5 subnets
network 113.0.0.16 0.0.0.3 area 0
network 113.0.105.1 0.0.0.0 area 0
network 113.0.0.12 0.0.0.3 area 0
router bgp 5
network 113.0.0.0 mask 255.255.0.0
neighbor 30.0.1.25 remote-as 1
network 30.0.1.24 mask 255.255.255.248
neighbor 113.0.105.2 remote-as 5
neighbor 113.0.105.2 update-source lo1
neighbor 113.0.105.3 remote-as 5
neighbor 113.0.105.3 update-source lo1
neighbor 113.0.105.4 remote-as 5
neighbor 113.0.105.4 update-source lo1
neighbor 113.0.105.5 remote-as 5
neighbor 113.0.105.5 update-source lo1
neighbor 113.0.105.6 remote-as 5
neighbor 113.0.105.6 update-source lo1
ip route 113.0.0.0 255.255.0.0 null0
````
:::
:::spoiler ER2
````=1
conf t
hostname ER5-2
int lo1
ip addr 113.0.105.2 255.255.255.255
no shut
ip cef
mpls traffic-eng tunnels
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.70 255.255.255.252
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.73 255.255.255.252
no shut
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.1 255.255.255.252
no shut
int fa 1/0.100
encapsulation dot1Q 2
ip address 192.168.5.1 255.255.255.252
no shut
int fa 1/1.100
encapsulation dot1Q 2
ip address 192.168.5.1 255.255.255.252
no shut
int fa 2/0.100
encapsulation dot1Q 2
ip address 192.168.5.1 255.255.255.252
no shut
int fa 2/1.100
encapsulation dot1Q 2
ip address 192.168.5.1 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.1 255.255.255.252
no shut
int fa 1/0.200
encapsulation dot1Q 3
ip address 113.0.3.5 255.255.255.252
no shut
int fa 1/1.200
encapsulation dot1Q 3
ip address 113.0.3.9 255.255.255.252
no shut
int fa 2/0.200
encapsulation dot1Q 3
ip address 113.0.3.13 255.255.255.252
no shut
int fa 2/1.200
encapsulation dot1Q 3
ip address 113.0.3.17 255.255.255.252
no shut
router ospf 1
router-id 5.1.0.2
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.72 0.0.0.3 area 0
network 113.0.105.2 0.0.0.0 area 0
network 113.0.0.68 0.0.0.3 area 0
network 113.0.3.0 0.0.0.3 area 0
network 113.0.3.4 0.0.0.3 area 0
network 113.0.3.8 0.0.0.3 area 0
network 113.0.3.12 0.0.0.3 area 0
network 113.0.3.16 0.0.0.3 area 0
router ospf 2 vrf vpna
router-id 5.2.0.2
network 192.168.5.0 0.0.0.3 area 2
redistribute bgp 5 subnets
ex
router ospf 3 vrf vpnb
router-id 5.3.0.2
network 192.168.5.0 0.0.0.3 area 3
redistribute bgp 5 subnets
ex
router ospf 4 vrf vpnc
router-id 5.4.0.2
network 192.168.5.0 0.0.0.3 area 4
redistribute bgp 5 subnets
ex
router ospf 5 vrf vpnd
router-id 5.5.0.2
network 192.168.5.0 0.0.0.3 area 5
redistribute bgp 5 subnets
ex
router ospf 6 vrf vpne
router-id 5.6.0.2
network 192.168.5.0 0.0.0.3 area 6
redistribute bgp 5 subnets
ex
ip vrf vpna
rd 5:1
route-target export 5:2
route-target import 5:6
route-target import 5:5
ip vrf vpnb
rd 5:2
route-target export 5:2
route-target import 5:6
route-target import 5:5
ip vrf vpnc
rd 5:3
route-target export 5:2
route-target import 5:6
route-target import 5:5
ip vrf vpnd
rd 5:4
route-target export 5:2
route-target import 5:6
route-target import 5:5
ip vrf vpne
rd 5:5
route-target export 5:2
route-target import 5:6
router bgp 5
neighbor 113.0.105.1 remote-as 5
neighbor 113.0.105.1 update-source lo1
neighbor 113.0.105.3 remote-as 5
neighbor 113.0.105.3 update-source lo1
neighbor 113.0.105.4 remote-as 5
neighbor 113.0.105.4 update-source lo1
neighbor 113.0.105.5 remote-as 5
neighbor 113.0.105.5 update-source lo1
neighbor 113.0.105.6 remote-as 5
neighbor 113.0.105.6 update-source lo1
no neighbor 113.0.105.5 activate
no neighbor 113.0.105.6 activate
address-family vpnv4
neighbor 113.0.105.5 activate
neighbor 113.0.105.5 send-community extended
neighbor 113.0.105.6 activate
neighbor 113.0.105.6 send-community extended
address-family ipv4 vrf vpna
redistribute connect
redistribute ospf 2
ex
address-family ipv4 vrf vpnb
redistribute connect
redistribute ospf 3
ex
address-family ipv4 vrf vpnc
redistribute connect
redistribute ospf 4
ex
address-family ipv4 vrf vpnd
redistribute connect
redistribute ospf 5
ex
address-family ipv4 vrf vpne
redistribute connect
redistribute ospf 6
ex
int f0/0.100
ip vrf forwarding vpna
ip addr 192.168.5.1 255.255.255.252
int f1/0.100
ip vrf forwarding vpnb
ip addr 192.168.5.1 255.255.255.252
int f1/1.100
ip vrf forwarding vpnc
ip addr 192.168.5.1 255.255.255.252
int f2/0.100
ip vrf forwarding vpnd
ip addr 192.168.5.1 255.255.255.252
int f2/1.100
ip vrf forwarding vpne
ip addr 192.168.5.1 255.255.255.252
````
:::
:::spoiler ER3
````=1
conf t
hostname ER5-3
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.105.3 255.255.255.255
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.78 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.134 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
service-policy output core-out-policy
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.137 255.255.255.252
no shut
int p6/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.74 255.255.255.252
no shut
int fa0/0
ip addr 93.0.1.1 255.255.255.248
service-policy input sla-1-input-policy
no shut
int tunnel 2
bandwidth 50000
ip unnumbered lo1
tunnel destination 113.0.105.4
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng priority 0 0
tunnel mpls traffic-eng bandwidth sub-pool 30000
tunnel mpls traffic-eng path-option 1 explicit name tun2
ex
ip explicit-path name tun2
next-address 113.0.0.133
next-address 113.0.0.85
next-address 113.0.0.90
next-address 113.0.0.118
next-address 113.0.0.150
ex
class-map match-all exp5-class
match access-group 106
access-list 106 permit ip any 80.0.0.0 0.0.255.255
policy-map sla-1-input-policy
class exp5-class
police 30000000 1000000 2000000 conform-action set-mpls-exp-imposition-transmit 5 exceed-action drop
class class-default
set mpls experimental 0
class-map match-all exp5-traffic-class
match mpls experimental 5
policy-map core-out-policy
class exp5-traffic-class
priority 100000
ip route 80.0.0.0 255.255.0.0 tunnel 2
router ospf 1
router-id 5.1.0.3
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
redistribute bgp 5 subnets
network 113.0.0.72 0.0.0.3 area 0
network 113.0.105.3 0.0.0.0 area 0
network 113.0.0.76 0.0.0.3 area 0
network 113.0.0.132 0.0.0.3 area 0
network 113.0.0.136 0.0.0.3 area 0
router bgp 5
network 113.0.0.0 mask 255.255.0.0
neighbor 93.0.1.2 remote-as 4
neighbor 113.0.105.1 remote-as 5
neighbor 113.0.105.1 update-source lo1
neighbor 113.0.105.2 remote-as 5
neighbor 113.0.105.2 update-source lo1
neighbor 113.0.105.4 remote-as 5
neighbor 113.0.105.4 update-source lo1
neighbor 113.0.105.5 remote-as 5
neighbor 113.0.105.5 update-source lo1
neighbor 113.0.105.6 remote-as 5
neighbor 113.0.105.6 update-source lo1
ip route 113.0.0.0 255.255.0.0 null0
````
:::
:::spoiler ER4
````=1
conf t
hostname ER5-4
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.105.4 255.255.255.255
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.142 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
service-policy output core-out-policy2
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.146 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
service-policy output core-out-policy3
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.150 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
no shut
int p6/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.154 255.255.255.252
ip rsvp bandwidth 300000 300000 sub-pool 40000
service-policy output core-out-policy
no shut
int fa0/0
ip addr 113.0.1.1 255.255.255.248
service-policy input sla-1-input-policy
rate-limit input qos-group 5 30000000 1000000 2000000 conform-action set-mpls-exp-imposition-transmit 5 exceed-action drop
bgp-policy destination ip-qos-map
no shut
ip bgp-community new-format
router bgp 5
table-map set-qos-group
ex
int tunnel 3
bandwidth 50000
ip unnumbered lo1
tunnel destination 113.0.105.1
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng priority 0 0
tunnel mpls traffic-eng bandwidth sub-pool 30000
tunnel mpls traffic-eng path-option 1 explicit name tun3
ex
ip explicit-path name tun3
next-address 113.0.0.153
next-address 113.0.0.113
next-address 113.0.0.97
next-address 113.0.0.33
next-address 113.0.0.46
next-address 113.0.0.53
next-address 113.0.0.13
ex
int tunnel 4
bandwidth 50000
ip unnumbered lo1
tunnel destination 113.0.105.1
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng priority 0 0
tunnel mpls traffic-eng bandwidth sub-pool 30000
tunnel mpls traffic-eng path-option 1 explicit name tun4
ex
ip explicit-path name tun4
next-address 113.0.0.145
next-address 113.0.0.121
next-address 113.0.0.93
next-address 113.0.0.49
next-address 113.0.0.13
ex
int tunnel 5
bandwidth 50000
ip unnumbered lo1
tunnel destination 113.0.105.3
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng priority 0 0
tunnel mpls traffic-eng bandwidth sub-pool 30000
tunnel mpls traffic-eng path-option 1 explicit name tun5
ex
ip explicit-path name tun5
next-address 113.0.0.141
next-address 113.0.0.129
next-address 113.0.0.81
next-address 113.0.0.78
ex
class-map match-all dscpef-class
match access-group 107
ip access-list 107 permit ip any 30.0.0.0 0.0.255.255
class-map match-all dscpaf32-class
match access-group 108
access-list 108 permit ip any 93.0.0.0 0.0.255.255
policy-map sla-1-input-policy
class dscpef-class
police 30000000 1000000 2000000 conform-action set-dscp-transmit ef exceed-action drop
class class-default
set dscp default
class dscpaf32-class
police 30000000 1000000 2000000 conform-action set-dscp-transmit af32 exceed-action drop
class-map match-all dscpef-class-traffic
match dscp ef
class-map match-all dscpaf32-class-traffic
match dscp af32
policy-map core-out-policy
class dscpef-class-traffic
priority 32
policy-map core-out-policy2
class dscpaf32-class-traffic
priority 32
class-map match-all exp5-class
match mpls experimental topmost 5
policy-map core-out-policy3
class exp5-class
priority 32
route-map set-qos-group permit 10
match as-path 109
set ip qos-group 5
set ip next-hop 113.0.105.1
ip as-path access-list 109 permit _1_
ip as-path access-list 109 permit ^2$
ip as-path access-list 109 permit ^3$
ip route 30.0.0.0 255.255.0.0 tunnel 3
ip route 113.0.105.1 255.255.255.255 tunnel 4
ip route 93.0.0.0 255.255.0.0 tunnel 5
router ospf 1
router-id 5.1.0.4
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
redistribute bgp 5 subnets
network 113.0.0.140 0.0.0.3 area 0
network 113.0.105.4 0.0.0.0 area 0
network 113.0.0.144 0.0.0.3 area 0
network 113.0.0.148 0.0.0.3 area 0
network 113.0.0.152 0.0.0.3 area 0
router bgp 5
network 113.0.0.0 mask 255.255.0.0
neighbor 113.0.1.2 remote-as 6
neighbor 113.0.105.1 remote-as 5
neighbor 113.0.105.1 update-source lo1
neighbor 113.0.105.2 remote-as 5
neighbor 113.0.105.2 update-source lo1
neighbor 113.0.105.3 remote-as 5
neighbor 113.0.105.3 update-source lo1
neighbor 113.0.105.5 remote-as 5
neighbor 113.0.105.5 update-source lo1
neighbor 113.0.105.6 remote-as 5
neighbor 113.0.105.6 update-source lo1
ip route 113.0.0.0 255.255.0.0 null0
````
:::
:::spoiler ER5
````=1
conf t
hostname ER5-5
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.105.5 255.255.255.255
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.22 255.255.255.252
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.106 255.255.255.252
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.109 255.255.255.252
no shut
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.5 255.255.255.252
no shut
int fa 1/0.100
encapsulation dot1Q 2
ip address 192.168.5.5 255.255.255.252
no shut
int fa 1/1.100
encapsulation dot1Q 2
ip address 192.168.5.5 255.255.255.252
no shut
int fa 2/0.100
encapsulation dot1Q 2
ip address 192.168.5.5 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.21 255.255.255.252
no shut
int fa 1/0.200
encapsulation dot1Q 3
ip address 113.0.3.25 255.255.255.252
no shut
int fa 1/1.200
encapsulation dot1Q 3
ip address 113.0.3.29 255.255.255.252
no shut
int fa 2/0.200
encapsulation dot1Q 3
ip address 113.0.3.33 255.255.255.252
no shut
router ospf 1
router-id 5.1.0.5
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.108 0.0.0.3 area 0
network 113.0.105.5 0.0.0.0 area 0
network 113.0.0.20 0.0.0.3 area 0
network 113.0.0.104 0.0.0.3 area 0
network 113.0.3.20 0.0.0.3 area 0
network 113.0.3.24 0.0.0.3 area 0
network 113.0.3.28 0.0.0.3 area 0
network 113.0.3.32 0.0.0.3 area 0
router ospf 2 vrf vpna
router-id 5.2.0.5
network 192.168.5.4 0.0.0.3 area 2
redistribute bgp 5 subnets
ex
router ospf 3 vrf vpnb
router-id 5.3.0.5
network 192.168.5.4 0.0.0.3 area 3
redistribute bgp 5 subnets
ex
router ospf 4 vrf vpnc
router-id 5.4.0.5
network 192.168.5.4 0.0.0.3 area 4
redistribute bgp 5 subnets
ex
router ospf 5 vrf vpnd
router-id 5.5.0.5
network 192.168.5.4 0.0.0.3 area 5
redistribute bgp 5 subnets
ex
ip vrf vpna
rd 5:1
route-target export 5:5
route-target import 5:6
route-target import 5:2
ip vrf vpnb
rd 5:2
route-target export 5:5
route-target import 5:6
route-target import 5:2
ip vrf vpnc
rd 5:3
route-target export 5:5
route-target import 5:6
route-target import 5:2
ip vrf vpnd
rd 5:4
route-target export 5:5
route-target import 5:6
route-target import 5:2
router bgp 5
neighbor 113.0.105.1 remote-as 5
neighbor 113.0.105.1 update-source lo1
neighbor 113.0.105.2 remote-as 5
neighbor 113.0.105.2 update-source lo1
neighbor 113.0.105.3 remote-as 5
neighbor 113.0.105.3 update-source lo1
neighbor 113.0.105.4 remote-as 5
neighbor 113.0.105.4 update-source lo1
neighbor 113.0.105.6 remote-as 5
neighbor 113.0.105.6 update-source lo1
no neighbor 113.0.105.2 activate
no neighbor 113.0.105.6 activate
address-family vpnv4
neighbor 113.0.105.2 activate
neighbor 113.0.105.2 send-community extended
neighbor 113.0.105.6 activate
neighbor 113.0.105.6 send-community extended
address-family ipv4 vrf vpna
redistribute connect
redistribute ospf 2
ex
address-family ipv4 vrf vpnb
redistribute connect
redistribute ospf 3
ex
address-family ipv4 vrf vpnc
redistribute connect
redistribute ospf 4
ex
address-family ipv4 vrf vpnd
redistribute connect
redistribute ospf 5
ex
int f0/0.100
ip vrf forwarding vpna
ip addr 192.168.5.5 255.255.255.252
int f1/0.100
ip vrf forwarding vpnb
ip addr 192.168.5.5 255.255.255.252
int f1/1.100
ip vrf forwarding vpnc
ip addr 192.168.5.5 255.255.255.252
int f2/0.100
ip vrf forwarding vpnd
ip addr 192.168.5.5 255.255.255.252
````
:::
:::spoiler ER6
````=1
conf t
hostname ER5-6
ip cef
mpls traffic-eng tunnels
int lo1
ip addr 113.0.105.6 255.255.255.255
no shut
int p3/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.5 255.255.255.252
no shut
int p4/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.9 255.255.255.252
no shut
int p5/0
mpls ip
mpls traffic-eng tunnels
ip addr 113.0.0.157 255.255.255.252
no shut
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.9 255.255.255.252
no shut
int fa 1/0.100
encapsulation dot1Q 2
ip address 192.168.5.9 255.255.255.252
no shut
int fa 1/1.100
encapsulation dot1Q 2
ip address 192.168.5.9 255.255.255.252
no shut
int fa 2/0.100
encapsulation dot1Q 2
ip address 192.168.5.9 255.255.255.252
no shut
int fa 2/1.100
encapsulation dot1Q 2
ip address 192.168.5.9 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.37 255.255.255.252
no shut
int fa 1/0.200
encapsulation dot1Q 3
ip address 113.0.3.41 255.255.255.252
no shut
int fa 1/1.200
encapsulation dot1Q 3
ip address 113.0.3.45 255.255.255.252
no shut
int fa 2/0.200
encapsulation dot1Q 3
ip address 113.0.3.49 255.255.255.252
no shut
int fa 2/1.200
encapsulation dot1Q 3
ip address 113.0.3.53 255.255.255.252
no shut
router ospf 1
router-id 5.1.0.6
mpls traffic-eng area 0
mpls traffic-eng router-id lo1
network 113.0.0.156 0.0.0.3 area 0
network 113.0.105.6 0.0.0.0 area 0
network 113.0.0.4 0.0.0.3 area 0
network 113.0.0.8 0.0.0.3 area 0
network 113.0.3.36 0.0.0.3 area 0
network 113.0.3.40 0.0.0.3 area 0
network 113.0.3.44 0.0.0.3 area 0
network 113.0.3.48 0.0.0.3 area 0
network 113.0.3.52 0.0.0.3 area 0
router ospf 2 vrf vpna
router-id 5.2.0.6
network 192.168.5.8 0.0.0.3 area 2
redistribute bgp 5 subnets
ex
router ospf 3 vrf vpnb
router-id 5.3.0.6
network 192.168.5.8 0.0.0.3 area 3
redistribute bgp 5 subnets
ex
router ospf 4 vrf vpnc
router-id 5.4.0.6
network 192.168.5.8 0.0.0.3 area 4
redistribute bgp 5 subnets
ex
router ospf 5 vrf vpnd
router-id 5.5.0.6
network 192.168.5.8 0.0.0.3 area 5
redistribute bgp 5 subnets
ex
router ospf 6 vrf vpne
router-id 5.6.0.6
network 192.168.5.8 0.0.0.3 area 6
redistribute bgp 5 subnets
ex
ip vrf vpna
rd 5:1
route-target export 5:6
route-target import 5:2
route-target import 5:5
ip vrf vpnb
rd 5:2
route-target export 5:6
route-target import 5:2
route-target import 5:5
ip vrf vpnc
rd 5:3
route-target export 5:6
route-target import 5:2
route-target import 5:5
ip vrf vpnd
rd 5:4
route-target export 5:6
route-target import 5:2
route-target import 5:5
ip vrf vpne
rd 5:5
route-target export 5:6
route-target import 5:2
router bgp 5
neighbor 113.0.105.1 remote-as 5
neighbor 113.0.105.1 update-source lo1
neighbor 113.0.105.2 remote-as 5
neighbor 113.0.105.2 update-source lo1
neighbor 113.0.105.3 remote-as 5
neighbor 113.0.105.3 update-source lo1
neighbor 113.0.105.4 remote-as 5
neighbor 113.0.105.4 update-source lo1
neighbor 113.0.105.5 remote-as 5
neighbor 113.0.105.5 update-source lo1
no neighbor 113.0.105.2 activate
no neighbor 113.0.105.5 activate
address-family vpnv4
neighbor 113.0.105.2 activate
neighbor 113.0.105.2 send-community extended
neighbor 113.0.105.5 activate
neighbor 113.0.105.5 send-community extended
address-family ipv4 vrf vpna
redistribute connect
redistribute ospf 2
ex
address-family ipv4 vrf vpnb
redistribute connect
redistribute ospf 3
ex
address-family ipv4 vrf vpnc
redistribute connect
redistribute ospf 4
ex
address-family ipv4 vrf vpnd
redistribute connect
redistribute ospf 5
ex
address-family ipv4 vrf vpne
redistribute connect
redistribute ospf 6
ex
int f0/0.100
ip vrf forwarding vpna
ip addr 192.168.5.9 255.255.255.252
int f1/0.100
ip vrf forwarding vpnb
ip addr 192.168.5.9 255.255.255.252
int f1/1.100
ip vrf forwarding vpnc
ip addr 192.168.5.9 255.255.255.252
int f2/0.100
ip vrf forwarding vpnd
ip addr 192.168.5.9 255.255.255.252
int f2/1.100
ip vrf forwarding vpne
ip addr 192.168.5.9 255.255.255.252
````
::::
:::::
:::::danger
::::spoiler CE
:::spoiler CE1
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.10 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.38 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.37
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.37
router ospf 2
router-id 5.2.2.1
network 192.168.5.8 0.0.0.3 area 2
````
:::
:::spoiler CE2
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.10 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.42 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 172.16.51.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 172.16.51.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.41
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.41
router ospf 3
router-id 5.3.2.2
network 192.168.5.8 0.0.0.3 area 3
````
:::
:::spoiler CE3
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.10 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.46 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.45
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.45
router ospf 4
router-id 5.4.2.3
network 192.168.5.8 0.0.0.3 area 4
````
:::
:::spoiler CE4
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.10 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.50 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.49
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.49
router ospf 5
router-id 5.5.2.4
network 192.168.5.8 0.0.0.3 area 5
````
:::
:::spoiler CE5
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.6 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.22 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 172.16.50.254 255.255.255.0
ip policy route-map access
ip nat inside
no shut
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 172.16.50.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.21
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.21
router ospf 2
router-id 5.2.2.5
network 192.168.5.4 0.0.0.3 area 2
network 172.16.50.0 0.0.0.255 area 2
````
:::
:::spoiler CE6
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.6 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.26 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.25
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.25
router ospf 3
router-id 5.3.2.6
network 192.168.5.4 0.0.0.3 area 3
````
:::
:::spoiler CE7
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.6 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.30 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.29
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.29
router ospf 4
router-id 5.4.2.7
network 192.168.5.4 0.0.0.3 area 4
````
:::
:::spoiler CE8
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.6 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.34 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.33
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.33
router ospf 5
router-id 5.5.2.8
network 192.168.5.4 0.0.0.3 area 5
````
:::
:::spoiler CE9
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.10 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.54 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.53
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.53
router ospf 6
router-id 5.6.2.9
network 192.168.5.8 0.0.0.3 area 6
````
:::
:::spoiler CE10
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.2 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.2 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 172.16.51.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 172.16.51.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.1
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.1
router ospf 2
router-id 5.2.2.10
network 192.168.5.0 0.0.0.3 area 2
network 172.16.51.0 0.0.0.255 area 2
````
:::
:::spoiler CE11
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.2 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.6 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.5
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.5
router ospf 3
router-id 5.3.2.11
network 192.168.5.0 0.0.0.3 area 3
````
:::
:::spoiler CE12
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.2 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.10 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.9
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.9
router ospf 4
router-id 5.4.2.12
network 192.168.5.0 0.0.0.3 area 4
````
:::
:::spoiler CE13
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.2 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.14 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.13
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.13
router ospf 5
router-id 5.5.2.13
network 192.168.5.0 0.0.0.3 area 5
````
:::
:::spoiler CE14
````=1
int fa 0/0.100
encapsulation dot1Q 2
ip address 192.168.5.2 255.255.255.252
no shut
int fa 0/0.200
encapsulation dot1Q 3
ip address 113.0.3.18 255.255.255.252
ip nat outside
no shut
int f0/1
ip addr 192.168.0.254 255.255.255.0
ip policy route-map access
ip nat inside
ex
ip nat inside source list 101 interface fa 0/0.200 overload
access-list 100 deny ip any 192.168.5.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 113.0.3.17
route-map access permit 10
match ip address 100
set ip next-hop 113.0.3.17
router ospf 6
router-id 5.6.2.14
network 192.168.5.0 0.0.0.3 area 6
````
:::::
### Credits
> Valentin Carrion et Baptiste Etiembre
Sign in with Wallet
Connect another wallet