مقالات

یادداشت های DMVPN – فاز 1 نقشه برداری پویا

adminجولای 1, 2024

0 188 خواندن این مطلب 5 دقیقه زمان میبرد

یادداشت های DMVPN – فاز 1 نقشه برداری پویا

روتر هاب باید با چند نقطه پیکربندی شود.
پره ها باید نقطه به نقطه پیکربندی شوند.
روتر هاب باید برای انجام نگاشت پویا پیکربندی شود.

نگاشت پویا امکان پیکربندی بسیار مقیاس پذیرتر را فراهم می کند.

این چطوری کار میکنه؟

هنگامی که یک اسپیکر در ابتدا به شبکه DMVPN متصل می شود، آدرس IP تونل خود را در نقشه NBMA-IP (IP PUBLIC) با روتر هاب ثبت می کند.
هاب با ارسال پیام ثبت نام آغاز شده توسط بلندگو با یک کد موفقیت، ثبت نام را تأیید می کند.
ثبت به رابط mGRE روتر هاب اجازه می دهد تا یک تونل پویا GRE را به روتر(هایی) که در تلاش برای ثبت نام هستند، بسازد.
روترهای اسپیکی باید با آدرس IP تونل هاب پیکربندی شوند. در غیر این صورت آنها نمی دانند که IP تونل خود را برای نقشه برداری عمومی کجا ثبت کنند.

R5 HUB

R5(config-if)#do show run int t0

interface Tunnel0
 ip address 172.16.0.5 255.255.255.0
 no ip redirects
 ip nhrp network-id 5
 tunnel source 169.1.100.5
 tunnel mode gre multipoint
end

R1 صحبت کرد

R1(config-if)#do show run int t0

interface Tunnel2023
 ip mtu 1476
 ip tcp adjust-mss 1436
 ip address 172.16.0.1 255.255.255.0
 ip nhrp network-id 1
 ip nhrp nhs 172.16.0.5
 tunnel source 169.1.100.1
 tunnel destination 169.1.100.5

R2 صحبت کرد

R2#show run int t0

interface Tunnel0
 ip address 172.16.0.2 255.255.255.0
 ip mtu 1476
 ip nhrp network-id 1
 ip nhrp nhs 172.16.0.5
 ip tcp adjust-mss 1436
 tunnel source 169.1.100.2
 tunnel destination 169.1.100.5
end

R3 صحبت کرد

R3#show run int t0


interface Tunnel0
 ip address 172.16.0.3 255.255.255.0
 ip mtu 1476
 ip nhrp network-id 1
 ip nhrp nhs 172.16.0.5
 ip tcp adjust-mss 1436
 tunnel source 169.1.100.3
 tunnel destination 169.1.100.5
end

R4 صحبت کرد

R4#show run int t0

interface Tunnel0
 ip address 172.16.0.4 255.255.255.0
 ip mtu 1476
 ip nhrp network-id 1
 ip nhrp nhs 172.16.0.5
 ip tcp adjust-mss 1436
 tunnel source 169.1.100.4
 tunnel destination 169.1.100.5
end

بررسی هاب R5

R5#show dmvpn 
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
        N - NATed, L - Local, X - No Socket
        T1 - Route Installed, T2 - Nexthop-override
        C - CTS Capable
        # Ent --> Number of NHRP entries with same NBMA peer
        NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
        UpDn Time --> Up or Down Time for a Tunnel
==========================================================================

Interface: Tunnel0, IPv4 NHRP Details 
Type:Hub, NHRP Peers:4, 

 # Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb
 ----- --------------- --------------- ----- -------- -----
     1 169.1.100.1          172.16.0.1    UP 00:14:56     D
     1 169.1.100.2          172.16.0.2    UP 00:10:24     D
     1 169.1.100.3          172.16.0.3    UP 00:08:48     D
     1 169.1.100.4          172.16.0.4    UP 00:07:09     D


R5#show ip nhrp 
172.16.0.1/32 via 172.16.0.1
   Tunnel0 created 00:14:58, expire 01:47:15
   Type: dynamic, Flags: unique registered used nhop 
   NBMA address: 169.1.100.1 
172.16.0.2/32 via 172.16.0.2
   Tunnel0 created 00:10:26, expire 01:49:33
   Type: dynamic, Flags: unique registered used nhop 
   NBMA address: 169.1.100.2 
172.16.0.3/32 via 172.16.0.3
   Tunnel0 created 00:08:50, expire 01:51:09
   Type: dynamic, Flags: unique registered used nhop 
   NBMA address: 169.1.100.3 
172.16.0.4/32 via 172.16.0.4
   Tunnel0 created 00:07:11, expire 01:52:48
   Type: dynamic, Flags: unique registered used nhop 
   NBMA address: 169.1.100.4 
R5#

بررسی Wireshark

اسپیکرها به R5 Hub

R1 – R4 اتصال IP به IP تونل را بررسی کنید

R1#tclsh
R1(tcl)#foreach VAR {
+>(tcl)# 172.16.0.1 
+>(tcl)# 172.16.0.2 
+>(tcl)# 172.16.0.3 
+>(tcl)# 172.16.0.4 
+>(tcl)#} { puts [exec "ping  $VAR"] }

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/3 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 3/6/11 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 3/3/4 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/6/10 ms

R1(tcl)#
R1(tcl)#tclquit
R1#

R2#tclsh
R2(tcl)#foreach VAR {
+>(tcl)# 172.16.0.1 
+>(tcl)# 172.16.0.2 
+>(tcl)# 172.16.0.3 
+>(tcl)# 172.16.0.4 
+>(tcl)#} { puts [exec "ping  $VAR"] }

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/11 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/5 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/6/10 ms

R2(tcl)#
R2(tcl)#tclquit

R3#tclsh
R3(tcl)#foreach VAR {
+>(tcl)# 172.16.0.1 
+>(tcl)# 172.16.0.2 
+>(tcl)# 172.16.0.3 
+>(tcl)# 172.16.0.4 
+>(tcl)#} { puts [exec "ping  $VAR"] }

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 3/5/8 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 3/6/11 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/5 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/11 ms

R3(tcl)#
R3(tcl)#tclquit
R3#

R4#tclsh
R4(tcl)#foreach VAR {
+>(tcl)# 172.16.0.1 
+>(tcl)# 172.16.0.2 
+>(tcl)# 172.16.0.3 
+>(tcl)# 172.16.0.4 
+>(tcl)#} { puts [exec "ping  $VAR"] }

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/6/12 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 5/6/10 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/5 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.0.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 3/4/5 ms

R4(tcl)#
R4(tcl)#tclquit
R4#

Tracerout از R1 به R2

ترافیک از هر اسپیکر همچنان از طریق هاب خواهد رفت.

R1#traceroute 172.16.0.2 numeric 
Type escape sequence to abort.
Tracing the route to 172.16.0.2
VRF info: (vrf in name/id, vrf out name/id)
  1 172.16.0.5 7 msec 2 msec 2 msec
  2 172.16.0.2 4 msec *  4 msec
R1#traceroute 172.16.0.2 numeric 
Type escape sequence to abort.
Tracing the route to 172.16.0.2
VRF info: (vrf in name/id, vrf out name/id)
  1 172.16.0.5 4 msec 3 msec 2 msec
  2 172.16.0.2 4 msec *  4 msec
R1#traceroute 172.16.0.2 numeric 
Type escape sequence to abort.
Tracing the route to 172.16.0.2
VRF info: (vrf in name/id, vrf out name/id)
  1 172.16.0.5 2 msec 2 msec 2 msec
  2 172.16.0.2 4 msec *  4 msec

Source link

adminجولای 1, 2024

0 188 خواندن این مطلب 5 دقیقه زمان میبرد