[系统运维]华为设备配置RSVP认证

1. 配置IP地址
   [LSR1-GigabitEthernet0/0/0]ip add 20.1.1.1 24
   [LSR1-LoopBack0]ip add 1.1.1.1 32
   [LSR2-GigabitEthernet0/0/0]ip add 20.1.1.2 24
   [LSR2-GigabitEthernet0/0/1]ip add 20.2.1.2 24
   [LSR2-LoopBack0]ip add 2.2.2.2 32
   [LSR3-GigabitEthernet0/0/0]ip add 20.2.1.3 24
   [LSR3-LoopBack0]ip add 3.3.3.3 32

2. 配置OSPF
   [LSR1]ospf 1
   [LSR1-ospf-1]area 0
   [LSR1-ospf-1-area-0.0.0.0]network 20.1.1.0 0.0.0.255
   [LSR1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
   [LSR2]ospf 1
   [LSR2-ospf-1]area 0
   [LSR2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
   [LSR2-ospf-1-area-0.0.0.0]network 20.1.1.0 0.0.0.255
   [LSR2-ospf-1-area-0.0.0.0]network 20.2.1.0 0.0.0.255
   [LSR3]ospf 1
   [LSR3-ospf-1]area 0
   [LSR3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
   [LSR3-ospf-1-area-0.0.0.0]network 20.2.1.0 0.0.0.255

3. 配置MPLS基本能力，使能MPLS TE、MPLS RSVP-TE, 在主隧道的入节点上使能CSPF
   [LSR1]mpls lsr-id 1.1.1.1
   [LSR1]mpls
   [LSR1-mpls]mpls te
   [LSR1-mpls]mpls te cspf
   [LSR1-mpls]mpls rsvp-te
   [LSR1-mpls]q
   [LSR1-GigabitEthernet0/0/0]mpls
   [LSR1-GigabitEthernet0/0/0]mpls te
   [LSR1-GigabitEthernet0/0/0]mpls rsvp-te
   [LSR2]mpls lsr-id 2.2.2.2
   [LSR2]mpls
   [LSR2-mpls]mpls te
   [LSR2-mpls]mpls rsvp-te
   [LSR2-GigabitEthernet0/0/0]mpls
   [LSR2-GigabitEthernet0/0/0]mpls te
   [LSR2-GigabitEthernet0/0/0]mpls rsvp-te
   [LSR2-GigabitEthernet0/0/1]mpls
   [LSR2-GigabitEthernet0/0/1]mpls te
   [LSR2-GigabitEthernet0/0/1]mpls rsvp-te
   [LSR3]mpls lsr-id 3.3.3.3
   [LSR3]mpls
   [LSR3-mpls]mpls te
   [LSR3-mpls]mpls rsvp-te
   [LSR3-GigabitEthernet0/0/0]mpls
   [LSR3-GigabitEthernet0/0/0]mpls te
   [LSR3-GigabitEthernet0/0/0]mpls rsvp-te

4. 配置OSPF TE
   [LSR1]ospf 1
   [LSR1-ospf-1]opaque-capability enable
   [LSR1-ospf-1]area 0
   [LSR1-ospf-1-area-0.0.0.0]mpls-te enable
   [LSR2]ospf 1
   [LSR2-ospf-1]opaque-capability enable
   [LSR2-ospf-1]area 0
   [LSR2-ospf-1-area-0.0.0.0]mpls-te enable
   [LSR3]ospf 1
   [LSR3-ospf-1]opaque-capability enable
   [LSR3-ospf-1]area 0
   [LSR3-ospf-1-area-0.0.0.0]mpls-te enable

5. 在入节点创建MPLS TE Tunnel
   [LSR1]interface Tunnel 0/0/1
   [LSR1-Tunnel0/0/1]ip address unnumbered interface LoopBack 0
   [LSR1-Tunnel0/0/1]tunnel-protocol mpls te
   [LSR1-Tunnel0/0/1]destination 3.3.3.3
   [LSR1-Tunnel0/0/1]mpls te tunnel-id 101
   [LSR1-Tunnel0/0/1]mpls te commit
   

6. 在LSR1、LSR2的MPLS TE链路的接口上配置RSVP验证
   [LSR1-GigabitEthernet0/0/0]mpls rsvp-te authentication cipher abc@1234
   [LSR1-GigabitEthernet0/0/0]mpls rsvp-te authentication handshake abc@1234
   [LSR1-GigabitEthernet0/0/0]mpls rsvp-te authentication window-size 32
   [LSR2-GigabitEthernet0/0/0]mpls rsvp-te authentication cipher abc@1234
   [LSR2-GigabitEthernet0/0/0]mpls rsvp-te authentication handshake abc@1234
   [LSR2-GigabitEthernet0/0/0]mpls rsvp-te authentication window-size 32

7. 验证配置

开发者涨薪指南

48位大咖的思考法则、工作方式、逻辑体系