예: IS-IS 네트워크에서 SRv6 네트워크 프로그래밍 구성
이 예는 IS-IS 네트워크에서 SRv6 네트워크 프로그래밍을 구성하는 방법을 보여줍니다. 이 기능은 네트워크가 IPv6이고 MPLS를 구축하지 않은 서비스 프로바이더에 유용합니다. 이러한 네트워크는 데이터 전송을 위한 IPv6 헤더 및 헤더 확장에만 의존합니다. SRv6 네트워크 프로그래밍은 MPLS를 구축하지 않고도 세그먼트 라우팅을 활용할 수 있는 유연성을 제공합니다.
요구 사항
이 예에서 사용되는 하드웨어 및 소프트웨어 구성 요소는 다음과 같습니다.
MPC7E, MPC8E 또는 MPC9E 라인 카드가 있는 8개의 MX 시리즈 라우터
Junos OS 릴리스 20.3R1 이상
개요
Junos OS 릴리스 20.3R1부터 코어 IPv6 네트워크에서 MPLS 없이 SRv6를 구성할 수 있습니다. SRv6 네트워크 프로그래밍은 네트워크 프로그램을 개별 네트워크 명령어로 인코딩한 다음 IPv6 패킷 헤더에 삽입하는 네트워크의 기능입니다. 네트워크 명령을 전달하는 IPv6 패킷은 패킷 처리에 사용할 수 있는 정확한 SRv6 노드에 대해 네트워크에 명시적으로 알려줍니다. 네트워크 명령은 128비트 IPv6 주소로 표시되는 SRv6 세그먼트 식별자(SID)입니다. 이러한 지침은 IPv6 패킷 헤더의 네트워크를 통해 배포됩니다. 주소 지정과 함께 네트워크 지침은 SRv6 네트워크의 각 SRv6 지원 노드에 대한 특정 작업 또는 기능을 정의합니다. 이 기능은 아직 세그먼트 라우팅 기능이 없는 전송 라우터를 통해 SR 트래픽을 구축해야 하는 네트워크에 유용합니다.
토폴로지
그림 1에서 라우터 R0 및 라우터 R7은 IPv4 전용 디바이스 CE1 및 CE2를 지원하는 수신 및 송신 라우터입니다. 라우터 R1, R2, R3, R4, R5 및 R6은 IPv6 전용 프로바이더 코어 네트워크를 구성합니다. 모든 라우터는 동일한 AS(Autonomous System)에 속합니다. IS-IS는 IPv6 코어의 내부 게이트웨이 프로토콜이며 SRv6를 지원하도록 구성됩니다. 이 예에서 라우터 R2는 R0 및 R7 모두에 대한 IBGP 피어링 세션이 있는 IPv6 경로 리플렉터로 구성됩니다. 이 예에서 BGP를 말하는 다른 라우터는 없습니다.
SRv6 터널링을 더 잘 보여주기 위해 이 예는 순수 IPv6 공급자 코어를 기반으로 합니다. SRv6는 IPv6 및 IPv4가 모두 배포되는 이중 스택 코어에서 지원됩니다.
IPv4 디바이스를 지원하는 에지 라우터는 IPv6 터널 캡슐화를 사용하여 IPv4 트래픽을 전송해야 합니다. 캡슐화 터널은 SRv6 지원 라우터에서 구성된 SRv6 SID에서 파생됩니다. IS-IS 프로토콜은 이러한 SRv6 SID를 처리하고 inet6.3 테이블을 사용 가능한 터널 엔드포인트의 다음 홉 주소로 업데이트합니다. IPv4 경로가 BGP를 통해 학습되면 라우터는 inet6.3 테이블을 통해 연결된 다음 홉을 확인하려고 시도합니다. 일치하는 항목이 발견되면 BGP 경로를 보급한 엔드포인트에 대한 자동 IPv6 터널이 생성됩니다.
이 예에서 R0 및 R7 라우터는 모두 BGP를 사용하여 연결된 IPv4 서브넷을 보급합니다. 이로 인해 에지 라우터 간에 IPv6 터널이 생성됩니다. 터널은 IPv6 공급자 코어를 통해 IPv4 트래픽을 전송하는 데 사용됩니다. 송신 시 에지 라우터는 외부 IPv6 헤더의 캡슐화를 해제하고 IPv4 경로 조회를 수행하여 패킷을 대상으로 전달합니다.
구성
CLI 빠른 구성
이 예를 빠르게 구성하려면, 아래 명령을 복사하여 텍스트 파일로 붙여 넣은 다음 모든 라인브레이크를 제거하고, 네트워크 구성을 일치하는 데 필요한 세부 사항을 변경하고, 계층 수준에서 명령을 CLI로 [edit]
복사해 붙여 넣은 다음, 구성 모드에서 commit을 입력합니다.
라우터 R0
set interfaces xe-0/0/0:0 description To_R1 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:1::1/64 set interfaces xe-0/0/0:2 description To_R4 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:4::1/64 set interfaces xe-0/0/1:0 description To_CE1 set interfaces xe-0/0/1:0 unit 0 family inet address 172.16.10.2/24 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces lo0 unit 0 family iso address 49.0001.000a.0a0a.0a00 set interfaces lo0 unit 0 family inet6 address 2001:db8:10:255::10/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a0::/64 set routing-options forwarding-table export pplb set routing-options router-id 172.16.255.10 set policy-options policy-statement CE1_v4 term 1 from protocol direct set policy-options policy-statement CE1_v4 term 1 from route-filter 172.16.10.0/24 exact set policy-options policy-statement CE1_v4 term 1 then next-hop 2001:db8:0:a0:d01:: set policy-options policy-statement CE1_v4 term 1 then accept set routing-options autonomous-system 65550 set protocols bgp group to-R2RRv6 type internal set protocols bgp group to-R2RRv6 export CE1_v4 set protocols bgp group to-R2RRv6 local-address 2001:db8:10:255::10 set protocols bgp group to-R2RRv6 neighbor 2001:db8:2:255::2 family inet unicast extended-nexthop set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a0:1a01:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a0:1a04:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a0:d01:: flavor usd set protocols isis level 1 disable
라우터 R1
set interfaces xe-0/0/0:0 description To_R0 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:1::2/64 set interfaces xe-0/0/0:2 description To_R2 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:12:1/64 set interfaces xe-0/0/0:3 description to-R4 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:14::1/64 set interfaces xe-0/0/1:0 description to-R5 set interfaces xe-0/0/1:0 mtu 4000 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces xe-0/0/1:0 unit 0 family inet6 address 2001:db8:15::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0001.0101.0100 set interfaces lo0 unit 0 family inet6 address 2001:db8:1:255::1/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a1::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.1 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a1:1a10:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a1:1a12:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:2.1 node-link-protection set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a1:1a14:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface xe-0/0/1:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a1:1a15:: flavor psp set protocols isis interface xe-0/0/1:0.0 node-link-protection set protocols isis interface xe-0/0/1:0.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a1:d11:: flavor usd set protocols isis level 1 disable
라우터 R2
set interfaces xe-0/0/0:0 description To_R1 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:12::2/64 set interfaces xe-0/0/0:1 description To_R3 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:23::1/64 set interfaces xe-0/0/0:2 description To_R4 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2011:db8:24::1/64 set interfaces xe-0/0/0:3 description To_R5 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:25::1/64 set interfaces xe-0/0/1:0 description To_R6 set interfaces xe-0/0/1:0 mtu 4000 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces xe-0/0/1:0 unit 0 family inet6 address 2001:db8:26::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0002.0202.0200 set interfaces lo0 unit 0 family inet6 address 2001:db8:2:255::2/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a2::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.2 set routing-options autonomous-system 65550 set protocols bgp group RRv6 type internal set protocols bgp group RRv6 local-address 2001:db8:2:255::2 set protocols bgp group RRv6 neighbor 2001:db8:10:255::10 family inet unicast extended-nexthop set protocols bgp group RRv6 neighbor 2001:db8:20:255::20 family inet unicast extended-nexthop set protocols bgp group RRv6 cluster 192.168.255.2 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a21:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a23:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a24:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a25:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface xe-0/0/1:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a2:1a26:: flavor psp set protocols isis interface xe-0/0/1:0.0 node-link-protection set protocols isis interface xe-0/0/1:0.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a2:d21:: flavor usd set protocols isis level 1 disable
라우터 R3
set interfaces xe-0/0/0:0 description To_R2 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:23::2/64 set interfaces xe-0/0/0:1 description To_R5 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:35::1/64 set interfaces xe-0/0/0:2 description To_R6 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 36::1/64 set interfaces xe-0/0/0:3 description To_R7 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:37::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0003.0303.0300 set interfaces lo0 unit 0 family inet6 address 2001:db8:3:255::3/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a3::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.3 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a3:1a32:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a3:1a35:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a3:1a36:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a3:1a37:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a3:d31:: flavor usd set protocols isis level 1 disable
라우터 R4
set interfaces xe-0/0/0:0 description To_R0 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:4::2/64 set interfaces xe-0/0/0:2 description To_R1 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:14::2/64 set interfaces xe-0/0/0:3 description To_R2 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:24::2/64 set interfaces xe-0/0/1:0 description To_R5 set interfaces xe-0/0/1:0 mtu 4000 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces xe-0/0/1:0 unit 0 family inet6 address 2001:db8:25::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0004.0404.0400 set interfaces lo0 unit 0 family inet6 address 2001:db8:4:255::4/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a4::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.4 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a4:1a40:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a4:1a41:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a4:1a42:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface xe-0/0/1:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a4:1a45:: flavor psp set protocols isis interface xe-0/0/1:0.0 node-link-protection set protocols isis interface xe-0/0/1:0.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a4:d41:: flavor usd set protocols isis level 1 disable
라우터 R5
set interfaces xe-0/0/0:0 description To_R1 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:15::2/64 set interfaces xe-0/0/0:1 description To_R2 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:25::2/64 set interfaces xe-0/0/0:2 description To_R3 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:35::2/64 set interfaces xe-0/0/0:3 description To_R4 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:45::2/64 set interfaces xe-0/0/1:0 description To_R6 set interfaces xe-0/0/1:0 mtu 4000 set interfaces xe-0/0/1:0 unit 0 family iso set interfaces xe-0/0/1:0 unit 0 family inet6 address 2001:db8:56::1/64 set interfaces lo0 unit 0 family iso address 49.0001.0005.0505.0500 set interfaces lo0 unit 0 family inet6 address 2001:db8:5:255::5/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a5::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.5 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a51:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a52:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a53:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a54:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface xe-0/0/1:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a5:1a56:: flavor psp set protocols isis interface xe-0/0/1:0.0 node-link-protection set protocols isis interface xe-0/0/1:0.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a5:d51:: flavor usd set protocols isis level 1 disable
라우터 R6
set interfaces xe-0/0/0:0 description To_R2 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:26::2/64 set interfaces xe-0/0/0:1 description To_R3 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:36::2/128 set interfaces xe-0/0/0:2 description To_R5 set interfaces xe-0/0/0:2 mtu 4000 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:56::2/128 set interfaces xe-0/0/0:3 description To_R7 set interfaces xe-0/0/0:3 mtu 4000 set interfaces xe-0/0/0:3 unit 0 family iso set interfaces xe-0/0/0:3 unit 0 family inet6 address 2001:db8:67::1/128 set interfaces lo0 unit 0 family iso address 49.0001.0006.0606.0600 set interfaces lo0 unit 0 family inet6 address 2001:db8:6:255::6/128 set policy-options policy-statement pplb then load-balance per-packet set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a6::/64 set routing-options forwarding-table export pplb set routing-options router-id 192.168.255.6 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a6:1a62:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a6:1a63:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface xe-0/0/0:2.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a6:1a65:: flavor psp set protocols isis interface xe-0/0/0:2.0 node-link-protection set protocols isis interface xe-0/0/0:2.0 point-to-point set protocols isis interface xe-0/0/0:3.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a6:1a67:: flavor psp set protocols isis interface xe-0/0/0:3.0 node-link-protection set protocols isis interface xe-0/0/0:3.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a6:d61:: flavor usd set protocols isis level 1 disable
라우터 R7
set interfaces xe-0/0/0:0 description To_R3 set interfaces xe-0/0/0:0 mtu 4000 set interfaces xe-0/0/0:0 unit 0 family iso set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:37::2/64 set interfaces xe-0/0/0:1 description To_R6 set interfaces xe-0/0/0:1 mtu 4000 set interfaces xe-0/0/0:1 unit 0 family iso set interfaces xe-0/0/0:1 unit 0 family inet6 address 2001:db8:67::2/128 set interfaces xe-0/0/0:2 description To_CE2 set interfaces xe-0/0/0:2 unit 0 family inet address 172.16.20.2/24 set interfaces xe-0/0/0:2 unit 0 family iso set interfaces lo0 unit 0 family iso address 49.0001.0007.0707.0700 set interfaces lo0 unit 0 family inet6 address 2001:db8:20:255::20/32 set policy-options policy-statement pplb then load-balance per-packet set policy-options policy-statement CE2_v4 term 1 from protocol direct set policy-options policy-statement CE2_v4 term 1 from route-filter 172.16.20.0/24 exact set policy-options policy-statement CE2_v4 term 1 then next-hop 2001:db8:0:a7::d71 set policy-options policy-statement CE2_v4 term 1 then accept set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a7::/64 set routing-options forwarding-table export pplb set routing-options router-id 172.16.255.20 set routing-options autonomous-system 65550 set protocols bgp group to-R2RRv6 type internal set protocols bgp group to-R2RRv6 local-address 2001:db8:20:255::20 set protocols bgp group to-R2RRv6 neighbor 2001:db8:2:255::2 family inet unicast extended-nexthop set protocols bgp group to-R2RRv6 export CE2_v4 set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a7:1a73:: flavor psp set protocols isis interface xe-0/0/0:0.0 node-link-protection set protocols isis interface xe-0/0/0:0.0 point-to-point set protocols isis interface xe-0/0/0:1.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a7:1a76:: flavor psp set protocols isis interface xe-0/0/0:1.0 node-link-protection set protocols isis interface xe-0/0/0:1.0 point-to-point set protocols isis interface lo0.0 passive set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a7:d71:: flavor usd set protocols isis level 1 disable
라우터 R0 구성
다음 예제에서는 구성 계층의 다양한 수준을 탐색해야 합니다. CLI 탐색에 대한 정보는 CLI 사용자 가이드의 구성 모드에서 CLI 편집기 사용을 참조하십시오.
IPv6 코어를 통해 IPv4 터널을 지원하도록 SRv6 네트워크 프로그래밍을 구성하려면 R0 라우터에서 다음 단계를 수행합니다.
단계별 절차
-
IP 전송을 활성화하도록 디바이스 인터페이스를 구성합니다.
[edit] user@R0# set interfaces xe-0/0/0:0 description To_R1_1 user@R0# set interfaces xe-0/0/0:0 vlan-tagging user@R0# set interfaces xe-0/0/0:0 unit 0 vlan-id 1 user@R0# set interfaces xe-0/0/0:0 unit 0 family inet address 10.11.1.1/24 user@R0# set interfaces xe-0/0/0:0 unit 0 family iso user@R0# set interfaces xe-0/0/0:0 unit 0 family inet6 address 2001:db8:1001::1/32 user@R0# set interfaces xe-0/0/0:2 description To_R4_1 user@R0# set interfaces xe-0/0/0:2 vlan-tagging user@R0# set interfaces xe-0/0/0:2 unit 0 vlan-id 1 user@R0# set interfaces xe-0/0/0:2 unit 0 family inet address 10.21.1.1/24 user@R0# set interfaces xe-0/0/0:2 unit 0 family iso user@R0# set interfaces xe-0/0/0:2 unit 0 family inet6 address 2001:db8:2021::1/32 user@R0# set interfaces xe-0/0/1:0 description to_RT user@R0# set interfaces xe-0/0/1:0 vlan-tagging user@R0# set interfaces xe-0/0/1:0 unit 1 vlan-id 1 user@R0# set interfaces xe-0/0/1:0 unit 1 family inet address 172.20.1.1/24 user@R0# set interfaces xe-0/0/1:0 unit 1 family iso user@R0# set interfaces xe-0/0/1:0 unit 1 family inet6 address 2001:db8::20:1:1:1/120 user@R0# set interfaces xe-0/0/1:0 unit 4 vlan-id 4 user@R0# set interfaces xe-0/0/1:0 unit 4 family inet address 172.20.2.1/24 user@R0# set interfaces xe-0/0/1:0 unit 4 family iso user@R0# set interfaces xe-0/0/1:0 unit 4 family inet6 address 2001:db8::20:2:1:1/120
-
BGP 세션의 라우터 ID로 사용되는 IPv4 및 IPv6 주소로 루프백 인터페이스를 구성합니다.
[edit] user@R0# set interfaces lo0 unit 0 family inet address 192.168.0.10/32 user@R0# set interfaces lo0 unit 0 family iso address 49.0001.000a.0a0a.0a00 user@R0# set interfaces lo0 unit 0 family inet6 address 2001:db8::10:10:10:10/32
-
라우터 ID와 AS(Autonomous System) 번호를 구성하여 동일한 AS에 속하는 라우팅 디바이스 집합 내에서 라우팅 정보를 전파합니다.
[edit] user@R0# set routing-options router-id 10.10.10.10 user@R0# set routing-options autonomous-system 65550
-
전역적으로 SRv6를 활성화하고 라우터의 SRv6 기능을 나타내는 로케이터 주소를 활성화합니다. SRv6 SID는 로케이터와 함수로 구성된 IPv6 주소입니다. 라우팅 프로토콜은 로케이터 주소를 보급합니다.
[edit] user@R0# set routing-options source-packet-routing srv6 locator myloc 2001:db8:0:a0::/64
-
접두사 세그먼트에 대한 End-Sid 기능을 구성합니다. 네트워크 요구 사항에 따라 End-SID 함수의 동작인 플레이버를 지정합니다. PSP(Penultimate Segment Pop), USP(Ultimate Segment Pop) 및 USD(Ultimate Segment Decapsulation)는 SRv6 기능에 사용할 수 있는 세 가지 버전입니다.
참고:커밋 오류를 방지하기 위해 로케이터와 End-SID가 동일한 서브넷에 있는지 확인합니다.
[edit] user@R0# set protocols isis source-packet-routing srv6 locator myloc end-sid 2001:db8:0:a0:d01:: flavor usd user@R0# set protocols isis source-packet-routing srv6 locator myloc1 end-sid 2001:db8:0:a10:d01:: flavor usd user@R0# set protocols isis source-packet-routing srv6 locator myloc2 end-sid 2001:db8:0:a20:d01:: flavor usd user@R0# set protocols isis source-packet-routing srv6 locator myloc3 end-sid 2001:db8:0:a30:d01:: flavor usd user@R0# set protocols isis source-packet-routing srv6 locator myloc4 end-sid 2001:db8:0:a40:d01:: flavor usp user@R0# set protocols isis source-packet-routing srv6 locator myloc4 end-sid 2001:db8:0:a40:d01:: flavor usd user@R0# set protocols isis level 1 disable
-
인접 세그먼트의 P2P(Point-to-Point) 인터페이스에서 End-X-SID 기능을 구성합니다. End-X-SID에 대해 하나 이상의 플레이버를 지정합니다.
참고:커밋 오류를 방지하기 위해 로케이터와 End-X-SID가 동일한 서브넷에 있는지 확인합니다. SRv6를 사용하도록 설정하고 로케이터를 인터페이스에 매핑하기 전에 에서
를 구성할[edit routing-options]
로케이터를 구성해야 합니다.srv6-adjacency-segment
때마다 5단계와 같이 계층 아래에protocols isis source-packet-routing srv6 locator
관련 로케이터도 구성해야 합니다.[edit] user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc end-x-sid 2001:db8:0:a0:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc1 end-x-sid 2001:db8:0:a10:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc2 end-x-sid 2001:db8:0:a20:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc3 end-x-sid 2001:db8:0:a30:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 level 2 srv6-adjacency-segment protected locator myloc4 end-x-sid 2001:db8:0:a40:1a01:: flavor usd user@R0# set protocols isis interface xe-0/0/0:0.0 node-link-protection user@R0# set protocols isis interface xe-0/0/0:0.0 point-to-point
-
LAN 인터페이스 xe-0/0/0:2.0의 인접 세그먼트에 대한 SRv6 옵션을 구성합니다. 네트워크 요구 사항에 따라 플레이버를 지정합니다. PSP(Penultimate Segment Pop), USP(Ultimate Segment Pop) 및 USP(Ultimate Segment Decapsulation)는 SRv6 인접 세그먼트에 사용할 수 있는 세 가지 버전입니다.
참고:커밋 오류를 방지하기 위해 로케이터와 End-X-Sid가 동일한 서브넷에 있는지 확인합니다. SRv6를 사용하도록 설정하고 로케이터를 인터페이스에 매핑하기 전에 에서
[edit routing-options]
로케이터를 구성해야 합니다.[edit] user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc end-x-sid 2001:db8:0:a0:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc1 end-x-sid 2001:db8:0:a10:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc2 end-x-sid 2001:db8:0:a20:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc3 end-x-sid 2001:db8:0:a30:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 level 2 lan-neighbor 0100.0404.0404 srv6-adjacency-segment unprotected locator myloc4 end-x-sid 2001:db8:0:a40:1a04:: flavor usd user@R0# set protocols isis interface xe-0/0/0:2.0 node-link-protection user@R0# set protocols isis interface xe-0/0/1:0.1 user@R0# set protocols isis interface fxp0.0 disable user@R0# set protocols isis interface lo0.0 passive
-
코어 대면 인터페이스에 BGP를 구성하여 내부 피어링 세션을 설정합니다.
[edit] user@R0# set protocols bgp group to-PEv6 type internal user@R0# set protocols bgp group to-PEv6 local-address abcd::10:10:10:10 user@R0# set protocols bgp group to-PEv6 neighbor abcd::2:2:2:2 family inet unicast extended-nexthop user@R0# set protocols bgp group to-PE2 type internal user@R0# set protocols bgp group to-PE2 local-address 10.10.10.10 user@R0# set protocols bgp group to-PE2 neighbor 2.2.2.2 family inet6 unicast user@R0# set protocols bgp group to-PE2 neighbor 2.2.2.2 family inet6-vpn unicast
-
패킷을 로드 밸런싱하는 정책을 정의합니다.
[edit] user@R0# set policy-options policy-statement pplb then load-balance per-packet
-
패킷별 정책을 적용하여 트래픽 로드 밸런싱을 활성화합니다.
[edit] user@R0# set routing-options forwarding-table export pplb
결과
구성 모드에서 , show protocols
, show policy-options
및 show routing-options
명령을 입력하여 show interfaces
구성을 확인합니다. 출력에 의도한 구성이 표시되지 않으면 이 예의 지침을 반복하여 구성을 수정하십시오.
[edit] user@R0# show interfaces xe-0/0/0:0 { description To_R1; mtu 4000; unit 0 { family iso; family inet6 { address 2001:db8:1::1/64; } } } xe-0/0/0:2 { description To_R4; mtu 4000; unit 0 { family iso; family inet6 { address 2001:db8:4::1/64; } } } xe-0/0/1:0 { description To_CE1; unit 0 { family inet { address 172.16.10.2/24; } family iso; } } lo0 { unit 0 { family iso { address 49.0001.000a.0a0a.0a00; } family inet6 { address 2001:db8:10:255::10/128; } } }
[edit] user@R0# show protocols bgp { group to-R2RRv6 { type internal; local-address 2001:db8:10:255::10; export CE1_v4; neighbor 2001:db8:2:255::2 { family inet { unicast { extended-nexthop; } } } } } isis { interface xe-0/0/0:0.0 { level 2 { srv6-adjacency-segment { protected { locator myloc { end-x-sid 2001:db8:0:a0:1a01:: { flavor psp; } } } } } node-link-protection; point-to-point; } interface xe-0/0/0:2.0 { level 2 { srv6-adjacency-segment { protected { locator myloc { end-x-sid 2001:db8:0:a0:1a04:: { flavor psp; } } } } } node-link-protection; point-to-point; } interface lo0.0 { passive; } source-packet-routing { srv6 { locator myloc { end-sid 2001:db8:0:a0:d01:: { flavor { usd; } } } } } level 1 disable; }
[edit] user@R0# show policy-options policy-statement CE1_v4 { term 1 { from { protocol direct; route-filter 172.16.10.0/24 exact; } then { next-hop 2001:db8:0:a0:d01::; accept; } } } policy-statement pplb { then { load-balance per-packet; } }
[edit] user@R0# show routing-options source-packet-routing { srv6 { locator myloc 2001:db8:0:a0::/64; } } forwarding-table { export pplb; } router-id 172.16.255.10; autonomous-system 65550;
디바이스 구성이 완료되면 구성 모드에서 을 입력합니다 commit
.
확인
구성이 올바르게 작동하고 있는지 확인합니다.
- IS-IS 인접성 및 IBGP 세션 확인
- SRv6이 사용하도록 설정되었는지 확인
- SRv6 End-X-SID 구성 확인
- 로케이터 경로가 설치되었는지 확인
- End-X-SID 경로가 설치되었는지 확인
- End-SID 경로가 설치되었는지 확인
- IS-IS 데이터베이스에서 SRv6 구성 확인
- SRv6 터널을 사용하는 CE2 경로 확인
- CE1과 CE2 간의 IPv4 연결 테스트
IS-IS 인접성 및 IBGP 세션 확인
목적
R2에서 IS-IS 인접성 및 IBGP 세션을 확인합니다. R2는 5개의 인접성을 가지며 BGP 컨트롤 플레인의 라우터 리플렉터 역할도 하기 때문에 이 작업을 위해 선택됩니다.
나머지 확인 단계를 진행하기 전에 모든 라우터에서 IS-IS 인접성을 확인하는 것이 좋습니다. SRv6를 성공적으로 구축하려면 내부 게이트웨이 프로토콜이 모든 노드에서 작동해야 합니다.
작업
운영 모드의 라우터 R2에서 명령을 실행합니다 show isis adjacency .
user@R2> show isis adjacency Interface System L State Hold (secs) SNPA xe-0/0/0:0.0 R1 2 Up 26 xe-0/0/0:1.0 R3 2 Up 25 xe-0/0/0:2.0 R4 2 Up 25 xe-0/0/0:3.0 R5 2 Up 24 xe-0/0/1:0.0 R6 2 Up 18
운영 모드의 라우터 R2에서 명령을 실행합니다 show bgp summary .
user@R2> show bgp summary Threading mode: BGP I/O Default eBGP mode: advertise - accept, receive - accept Groups: 1 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending inet.0 2 2 0 0 0 0 inet6.0 0 0 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... 2001:db8:10:255::10 65550 3101 3092 0 0 23:14:18 Establ inet.0: 1/1/1/0 2001:db8:20:255::20 65550 3091 3080 0 0 23:10:10 Establ inet.0: 1/1/1/0
의미
출력은 R2 라우터에 대한 예상 IS-IS 인접 횟수를 확인합니다. 또한 R2가 R0 및 R7 라우터 모두에 IPv6 기반 BGP 세션을 설정했음을 확인합니다.
SRv6이 사용하도록 설정되었는지 확인
목적
라우터 R0에서 SRv6가 로케이터, End-SID 및 플레이버와 함께 사용하도록 설정되어 있는지 확인합니다.
작업
운영 모드의 라우터 R0에서 show isis overview 명령을 실행합니다.
user@R0> show isis overview Instance: master Router ID: 172.16.255.10 IPv6 Router ID: 2001:db8:1::1 Hostname: R0 Sysid: 0100.0a0a.0a0a Areaid: 49.00 Adjacency holddown: enabled Maximum Areas: 3 LSP life time: 1200 Attached bit evaluation: enabled SPF delay: 200 msec, SPF holddown: 5000 msec, SPF rapid runs: 3 IPv4 is enabled, IPv6 is enabled Traffic engineering: enabled Restart: Disabled Helper mode: Enabled Layer2-map: Disabled Source Packet Routing (SPRING): Enabled Node Segments: Disabled SRv6: Enabled Locator: 2001:db8:0:a0::/64, Algorithm: 0 END-SID: 2001:db8:0:a0:d01::, Flavor: USD Post Convergence Backup: Disabled Level 1 Internal route preference: 15 External route preference: 160 Prefix export count: 0 Wide metrics are enabled, Narrow metrics are enabled Source Packet Routing is enabled Level 2 Internal route preference: 18 External route preference: 165 Prefix export count: 0 Wide metrics are enabled, Narrow metrics are enabled Source Packet Routing is enabled
의미
구성된 SRv6 로케이터 SRv6: Enabled Locator: 2001:db8:0:a0::/64, Algorithm: 0
와 , End-SID 및 플레이버 END-SID: 2001:db8:0:a0:d01::, Flavor: USD
가 출력에 표시됩니다.
SRv6 End-X-SID 구성 확인
목적
End-X-SID 기능 및 플레이버가 R0에 구성되어 있는지 확인합니다.
작업
운영 모드의 라우터 R0에서 show isis adjacency detail 명령을 실행합니다.
user@R0> show isis adjacency detail R1 Interface: xe-0/0/0:0.0, Level: 2, State: Up, Expires in 19 secs Priority: 0, Up/Down transitions: 1, Last transition: 03:51:48 ago Circuit type: 2, Speaks: IP, IPv6 Topologies: Unicast Restart capable: Yes, Adjacency advertisement: Advertise IP addresses: 192.168.255.1 IPv6 addresses: fe80::2e6b:f5ff:fedb:e800 IPv6 Global Interface Address: 2001:db8:1::2 Level 2 SRv6 protected END-X-SID: 2001:db8:0:a0:1a01:: Flavor: PSP, Flags: B-P, Algorithm: 0 R4 Interface: xe-0/0/0:2.0, Level: 2, State: Up, Expires in 20 secs Priority: 0, Up/Down transitions: 1, Last transition: 03:48:04 ago Circuit type: 2, Speaks: IP, IPv6 Topologies: Unicast Restart capable: Yes, Adjacency advertisement: Advertise IP addresses: 192.168.255.4 IPv6 addresses: fe80::2e6b:f5ff:feb4:4000 IPv6 Global Interface Address: 2001:db8:4::2 Level 2 SRv6 protected END-X-SID: 2001:db8:0:a0:1a04:: Flavor: PSP, Flags: B-P, Algorithm: 0
의미
필드는 SRv6 protected END-X-SID: 2001:db8:0:a0:1a01::
R1에 연결하는 데 사용되는 인터페이스에 대해 라우터 R0에서 와의 End-X-SID 기능이 Flavor PSP
구성되었음을 나타냅니다. 다른 End-X-SID를 사용하는 R4에 연결된 인터페이스에 대해서도 유사한 출력이 확인됩니다.
로케이터 경로가 설치되었는지 확인
목적
로케이터 경로가 설치되었는지 확인합니다.
작업
운영 모드의 라우터 R0에서 명령을 실행합니다 show route 2001:db8:0:a0::/64 detail .
user@R0> show route 2001:db8:0:a0::/64 detail inet6.0: 75 destinations, 75 routes (75 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 2001:db8:0:a0::/64*[IS-IS/18] 3d 19:03:16, metric 0 Reject user@R0> show route 2001:db8:0:a0::/64 detail inet6.0: 45 destinations, 45 routes (45 active, 0 holddown, 0 hidden) 2001:db8:0:a0::/64 (1 entry, 1 announced) *IS-IS Preference: 18 Level: 2 Next hop type: Reject, Next hop index: 0 Address: 0xc54526c Next-hop reference count: 2 State: <Active Int OpaqueData> Local AS: 65550 Age: 22:15:32 Metric: 0 Validation State: unverified ORR Generation-ID: 0 Task: IS-IS Announcement bits (2): 0-KRT 5-Resolve tree 5 AS path: I . . .
의미
출력은 로케이터 경로가 2001:db8:0:a0::/64*[IS-IS/18]
테이블에 설치 inet6.0
되었음을 확인합니다.
End-X-SID 경로가 설치되었는지 확인
목적
인터페이스에 적용되는 구성된 End-X-SID 경로 정보를 표시합니다.
작업
운영 모드의 라우터 R0에서 show route 2001:db8:0:a0:1a01:: 명령을 실행합니다.
user@R0> show route 2001:db8:0:a0:1a01:: inet6.0: 45 destinations, 45 routes (45 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 2001:db8:0:a0::1a01/128 *[IS-IS/18] 04:33:42, metric 0 > to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0
의미
출력은 End-X-SID 경로가 2001:db8:0:a0::1a01/128
라우팅 테이블에 설치 inet.6.0
되었음을 확인합니다.
End-SID 경로가 설치되었는지 확인
목적
SRv6 도메인의 모든 라우터에 대한 End-SID 경로가 라우터 R0의 inet6.3
테이블에 설치되어 있는지 확인합니다.
작업
운영 모드에서 라우터 R0에 show route table inet6.3 protocol isis 명령을 실행하여 라우터가 학습한 모든 End-SID를 확인합니다. 그런 다음 R7 라우터와 연결된 End-SID에 대한 자세한 정보를 표시합니다.
user@R0> show route table inet6.3 protocol isis inet6.3: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 2001:db8:0:a1::d11/128 *[SRV6-ISIS/14] 04:39:22, metric 10 > to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a1:d11:: 2001:db8:0:a2::d21/128 *[SRV6-ISIS/14] 04:35:38, metric 20 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a2:d21:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a2:d21:: 2001:db8:0:a3::d31/128 *[SRV6-ISIS/14] 04:35:38, metric 30 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a3:d31:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a3:d31:: 2001:db8:0:a4::d41/128 *[SRV6-ISIS/14] 04:35:38, metric 10 > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a4:d41:: 2001:db8:0:a5::d51/128 *[SRV6-ISIS/14] 04:35:01, metric 20 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a5:d51:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a5:d51:: 2001:db8:0:a6::d61/128 *[SRV6-ISIS/14] 04:34:32, metric 30 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a6:d61:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a6:d61:: 2001:db8:0:a7::d71/128 *[SRV6-ISIS/14] 04:33:00, metric 40 to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a7:d71:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a7:d71:: user@R0> show route 2001:db8:0:a7::d71/128 detail inet6.3: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden) 2001:db8:0:a7::d71/128 (1 entry, 1 announced) *SRV6-ISIS Preference: 14 Level: 2 Next hop type: List, Next hop index: 1048577 Address: 0xdb8deb4 Next-hop reference count: 6 Next hop: ELNH Address 0xc5462d4 weight 0x1 Next hop type: Chain, Next hop index: 582 Address: 0xc5462d4 Next-hop reference count: 1 Next hop: ELNH Address 0xc545bcc SRV6-Tunnel: Reduced-SRH Encap-mode Src: 2001:db8:1::1 Dest: 2001:db8:0:a7::d71 Segment-list[0] 2001:db8:0:a7:d71:: Next hop type: Router, Next hop index: 580 Address: 0xc545bcc Next-hop reference count: 9 Next hop: fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0 weight 0x1 Next hop: ELNH Address 0xc546338 weight 0x1, selected Next hop type: Chain, Next hop index: 583 Address: 0xc546338 Next-hop reference count: 1 Next hop: ELNH Address 0xc545f50 SRV6-Tunnel: Reduced-SRH Encap-mode Src: 2001:db8:1::1 Dest: 2001:db8:0:a7:d71:: Segment-list[0] 2001:db8:0:a7:d71:: Next hop type: Router, Next hop index: 581 Address: 0xc545f50 Next-hop reference count: 9 Next hop: fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0 weight 0x1 State: <Active NoReadvrt Int OpaqueData> Local AS: 65550 Age: 4:35:43 Metric: 40 Validation State: unverified ORR Generation-ID: 0 Task: IS-IS Announcement bits (3): 0-Resolve tree 2 1-Resolve tree 5 2-Resolve_IGP_FRR task AS path: I Session-IDs associated: Session-id: 322 Version: 0
의미
출력은 라우터 R0이 토폴로지의 다른 모든 라우터에서 End-SID, 2001:db8:0:a1::d11/128
즉 및 2001:db8:0:a2::d21/128
을(를) 학습했음을 확인합니다. 참고 End-SID는 테이블에 설치 inet6.3
되었습니다. R7 2001:db8:0:a7:d71::
에서 광고하는 End-SID에 대한 자세한 출력은 라우터 R0과 라우터 R7 사이에 SRv6 터널이 설정되었음을 확인합니다.
세그먼트 목록은 라우터 R7에 구성된 End-SID 값으로 채워집니다. 이 예제의 모든 End-SID는 USD(Ultimate Segment Decapsulate) 플레이버로 구성됩니다. 로컬 End-SID와 연결된 USD 플레이버의 조합으로 R7에 IPv6 터널의 송신임을 알려줍니다. 수신 시 R7은 IPv4 패킷의 캡슐화를 해제하고 IPv4 대상 주소에 따라 라우팅합니다.
IS-IS 데이터베이스에서 SRv6 구성 확인
목적
IS-IS 데이터베이스를 표시하여 라우터 R7에서 구성된 End-SID 및 플레이버를 확인합니다. 이 예에서는 라우터 R0에서 명령이 실행됩니다. IS-IS 데이터베이스가 모든 노드에 복제되기 때문에 모든 라우터에서 유사한 출력이 예상됩니다.
작업
운영 모드의 라우터 R0에서 show isis database R7.00-00 extensive 명령을 실행합니다.
user@R0> show isis database R.00-00 extensive IS-IS level 1 link-state database: IS-IS level 2 link-state database: R7.00-00 Sequence: 0x31f, Checksum: 0x2ce6, Lifetime: 904 secs IS neighbor: R3.00 Metric: 10 Two-way fragment: R3.00-00, Two-way first fragment: R3.00-00 IS neighbor: R6.00 Metric: 10 Two-way fragment: R6.00-00, Two-way first fragment: R6.00-00 V6 prefix: 2001:db8::/32 Metric: 0 Internal Up V6 prefix: 2001:db8:0:a7::/64 Metric: 0 Internal Up V6 prefix: 2001:db8:20:255::20/128 Metric: 0 Internal Up V6 prefix: 2001:db8:37::/64 Metric: 10 Internal Up V6 prefix: 2001:db8:67::2/128 Metric: 10 Internal Up Header: LSP ID: R7.00-00, Length: 445 bytes Allocated length: 746 bytes, Router ID: 172.16.255.20 Remaining lifetime: 904 secs, Level: 2, Interface: 360 Estimated free bytes: 0, Actual free bytes: 301 Aging timer expires in: 904 secs Protocols: IP, IPv6 Packet: LSP ID: R7.00-00, Length: 445 bytes, Lifetime : 1192 secs Checksum: 0x2ce6, Sequence: 0x31f, Attributes: 0x3 <L1 L2> NLPID: 0x83, Fixed length: 27 bytes, Version: 1, Sysid length: 0 bytes Packet type: 20, Packet version: 1, Max area: 0 TLVs: Area address: 49.00 (2) LSP Buffer Size: 1492 Speaks: IP Speaks: IPV6 IP router id: 172.16.255.20 IP address: 172.16.255.20 IPv6 TE Router ID: 2001:db8:20:255::20 Hostname: R7 SRv6 Locator: 2001:db8:0:a7::/64, Metric: 0, MTID: 0, Flags: 0x0, Algorithm: 0 SRv6 SID: 2001:db8:0:a7:d71::, Flavor: USD IPv6 prefix: 2001:db8:20:255::20/128 Metric 0 Up IPv6 prefix: 2001:db8::/32 Metric 0 Up IPv6 prefix: 2001:db8:0:a7::/64 Metric 0 Up IPv6 prefix: 2001:db8:37::/64 Metric 10 Up IPv6 prefix: 2001:db8:67::2/128 Metric 10 Up Router Capability: Router ID 172.16.255.20, Flags: 0x00 SPRING Algorithm - Algo: 0 SRv6 Capability - Flags: 0 Node MSD Advertisement Sub-TLV:Type: 23, Length: 10 SRv6 Maximum Segments Left MSD:Type: 41, Value: 6 SRv6 Maximum Pop MSD:Type: 42, Value: 7 SRv6 Maximum Insert MSD:Type: 43, Value: 5 SRv6 Maximum Encap MSD:Type: 44, Value: 6 SRv6 Maximum End D MSD:Type: 45, Value: 6 IPv6 TE Router Id: 2001:db8:20:255::20 IS neighbor: R6.00, Internal, Metric: default 10 IS neighbor: R3.00, Internal, Metric: default 10 Extended IS Reachability TLV, Type: 22, Length: 174 IS extended neighbor: R6.00, Metric: default 10 SubTLV len: 76 IPv6 address: 2001:db8:67::2 Neighbor's IP address: 192.168.255.6 Neighbor's IPv6 address: 2001:db8:67::1 Local interface index: 361, Remote interface index: 364 P2P SRV6 END-X-SID:2001:db8:0:a7:1a76:: , Flags:B-P, Weight:0, Algorithm:0 Flags:0xa0(B:1,S:0,P:1), Flavor: PSP IS extended neighbor: R3.00, Metric: default 10 SubTLV len: 76 IPv6 address: 2001:db8:37::2 Neighbor's IP address: 192.168.255.3 Neighbor's IPv6 address: 2001:db8:37::1 Local interface index: 360, Remote interface index: 336 P2P SRV6 END-X-SID:2001:db8:0:a7:1a73:: , Flags:B-P, Weight:0, Algorithm:0 Flags:0xa0(B:1,S:0,P:1), Flavor: PSP No queued transmissions
의미
with Flavor: USD
가 SRv6 SID: 2001:db8:0:a7:d71::
있으면 SRv6가 R7 라우터에서 SID 캡슐화 해제 플레이버로 활성화되었음을 확인할 수 있습니다. 또한 출력은 R7의 인터페이스가 PSP 플레이버를 사용하여 TI-LFA 보호를 위해 구성되었음을 보여줍니다.
SRv6 터널을 사용하는 CE2 경로 확인
목적
R7에서 IPv4 서브넷에 대한 경로를 표시하여 SRv6 터널에 대한 다음 홉 지점을 확인합니다.
작업
운영 모드의 라우터 R0에서 명령을 실행합니다 show route 172.16.20.0/24 .
user@R0> show route 172.16.20.0/24 inet.0: 36 destinations, 36 routes (36 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 172.16.20.0/24 *[BGP/170] 05:20:58, localpref 100, from 2001:db8:2:255::2 AS path: I, validation-state: unverified to fe80::2e6b:f5ff:fedb:e800 via xe-0/0/0:0.0, SRV6-Tunnel, Dest: 2001:db8:0:a7:d71:: > to fe80::2e6b:f5ff:feb4:4000 via xe-0/0/0:2.0, SRV6-Tunnel, Dest: 2001:db8:0:a7:d71::
의미
출력은 R0이 R2에 대한 BGP 세션을 통해 서브넷에 대한 172.16.20.0/24
경로를 학습했음을 확인하며, 이 예에서 리콜은 경로 리플렉터로 구성됩니다. 다음 홉은 이 경로에 대해 R7 라우터에 대한 SRv6 터널이 설치되었음을 확인합니다. 예제 토폴로지에서 R0과 R7 라우터 사이에 동일한 비용의 경로가 두 개인 것에 따라 두 개의 다음 홉을 사용할 수 있습니다.
CE1과 CE2 간의 IPv4 연결 테스트
목적
IPv6 프로바이더 코어를 통해 CE 디바이스 간의 IPv4 연결을 검증하기 위한 ping을 생성합니다.
작업
운영 모드의 라우터 R0에서 명령을 실행합니다 ping 172.16.20.2 source 172.16.10.2 count 2 .
user@R0> ping 172.16.20.2 source 172.16.10.2 count 2 PING 172.16.20.2 (172.16.20.2): 56 data bytes 64 bytes from 172.16.20.2: icmp_seq=0 ttl=64 time=114.922 ms 64 bytes from 172.16.20.2: icmp_seq=1 ttl=64 time=89.558 ms --- 172.16.20.2 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 89.558/102.240/114.922/12.682 ms
의미
출력은 IPv4 연결이 CE 디바이스 네트워크 간에 작동하는지 확인합니다. 이를 통해 IPv6 공급자 코어를 통한 SRv6 터널링이 이 예에서 제대로 작동하는지 확인할 수 있습니다.