05_08_MPLS VPN故障排除

2019年7月27日 07:15 作者：金淼淋分类：MPLS  638

MPLS VPN Implementation
YES LAB
Troubleshooting MPLS VPNs
MPLS
YES LAB Preliminary Steps in MPLS VPN
Troubleshooting
YES LAB
•Perform basic MPLS troubleshooting:
- Is CEFenabled?
— Are labels for IGP routes generated and propagated?Æ
— Are large labeled packets propagated across the MPLS
backbone (maximum transmission unit issues)? Validating CE-to-PE Routing
Information Flow
P-Network
CE-Spoke
PE-I
CE-Spoke
YES LAB
CE-Spoke
PE-2
CE-Spoke
•Are CE routes received by the PE router?
— Verify with the show ip route vrf vrf-name command on PE-I.ZE
PE-1_EftÆshow ip route vrf vrf-narneifr4j±fj-iJ$ilÆ
— Perform traditional routing protocoltroubleshootingif needed. Validating PE-to-PE Routing
Information Flow
P-Network
CE-Spoke
PE-I
CE-Spoke
YES LAB
CE-Spoke
PE-2
CE-Spoke
•Are routes redistributed into MP-BGP with proper extended
communities?
— Verify with the show ip bgp vpnv4vrf vrf-name ip-prefix
command on PE-I. CEPE-1±fLihdshow ip bgp vpnv4 vrf vrf-name ip-prefixffi4i±8i4G
— Troubleshoot with debugipbgpcommands.
flihddebug ip Validating PE-to-PE Routing
Information Flow (Cont.)
P-Network
CE-Spoke
PE-I
CE-Spoke
YES LAB
CE-Spoke
CE-Spoke
•Are VPNv4 routes propagated to other PE routers? VPNv4%E11Æ
— Verify with the show ip bgp vpnv4 all ip-prefix/length command.
ip bgp vpnv4 all ip-prefix /
— Troubleshoot PE-to-PE connectivity with traditional BGP
troubleshooting Validating PE-to-PE Routing
Information Flow (Cont.)
P-Network
CE-Spoke
PE-I
CE-Spoke
YES LAB
CE-Spoke
CE-Spoke
•Are VPNv4 routes redistributed from BGP into the
PE-CE routing protocol?
APE-CE%Efi
— Verify redistribution configuration—is the IGP metric
specified?
— Perform traditional routing protocol troubleshooting. $Validating PE-to-CE Routing Information Flow P-Network CE-Spoke PE-I CE-Spoke YES LAB CE-Spoke CE-Spoke •Are VPNv4 routes propagated to other CE routers? — Verify with the show ip route command on CE-Spoke. CE-Spoke_E fi{Jshow ip route6j4i.±fj4frilT1, — Alternatively, do CE-Spokes haveadefault route toward CE- — Perform traditional routing protocol troubleshootingifneeded.$ Verifying the Data Flow
YES LAB
•Verify proper data flow:
— Is CEF enabled on the ingress PE router interface?fEA
— Is the CEF entry correct on the ingress PE router?
ALIPE
— Is there an end-to-end label switched path tunnel (LSP
tunnel) between PE routers?
— Is the LFIB entry on the egress PE router correct?
HI LIPE Validating CEF Status
P-Network
CE-Spoke
PE-I
CE-Spoke
YES LAB
CE-Spoke
CE-Spoke
•Is CEF enabled on the ingress PE router interface?
— Verify with the show cef interfacecommand.
Show cef interfacetfr 0
— MPLS VPN needs CEF enabled on the ingress PE router interface for
proper operation. MPLS _Ehii 0
— CEF might become disabled because of additional features deployed on
the interface Validating CEF Status
P-Network
CE-Spoke
PE-I
CE-Spoke
YES LAB
CE-Spoke
CE-Spoke
•Is the CEF entry correct on the ingress PE router?
— Display the CEF entry with the show ip cefvrf vrf-name ip-
prefix/length detail command.
flihdshow ip cef vrfvrf-name ip-prefix /
length detailtfij4WisCEFkJJi 0
— Verify the label stack in the CEF entry.4$i1TcEF%El