WOW !! MUCH LOVE ! SO WORLD PEACE !
Fond bitcoin pour l'amélioration du site: 1memzGeKS7CB3ECNkzSn2qHwxU6NZoJ8o
  Dogecoin (tips/pourboires): DCLoo9Dd4qECqpMLurdgGnaoqbftj16Nvp


Home | Publier un mémoire | Une page au hasard

 > 

Conception et mise en place d'une architecture VPN/MPLS avec gestion de la GOS. Cas de Matrix Télecoms.

( Télécharger le fichier original )
par Ghislain SOH TCHENDJOU
Université de Maroua Institut Supérieur du Sahel - Ingénieur en conception Réseau 2015
  

précédent sommaire

Bitcoin is a swarm of cyber hornets serving the goddess of wisdom, feeding on the fire of truth, exponentially growing ever smarter, faster, and stronger behind a wall of encrypted energy

ANNEXES

s Configuration du routeur LERMatrix1

hostname LERMatrix1

logging queue-limit 100

ip subnet-zero

no ip icmp rate-limit unreachable

ip tcp synwait-time 5

no ip domain lookup

ip vrf Client1

rd 1:1

route-target export 5:5

route-target import 1:1

ip cef

mpls label protocol ldp

mpls ldp logging neighbor-changes

mpls traffic-eng tunnel

s Configuration de la QOS

class-map match-all VOIP match access-group 101 class-map match-all ftp match access-group 102 class-map match-all hpriorite match ip dscp ef

class-map match-all bpriorite match ip dscp af23

policy-map dscp

class VOIP

set dscp ef

class ftp

set dscp af23

58

policy-map QOS

class hpriorite

priority percent 40

class ftp

bandwidth percent 30

s Création du Tunnel 1

interface Loopback0

ip address 171.16.1.1 255.255.255.255

interface Tunnel1

ip unnumbered Loopback0

tunnel destination 172.16.1.2

tunnel mode mpls traffic-eng

tunnel mpls traffic-eng autoroute announce

tunnel mpls traffic-eng priority 1 1

tunnel mpls traffic-eng bandwidth 512

tunnel mpls traffic-eng path-option 1 explicit

identifier 1

s Configuration des interfaces

interface Serial3/0

ip address 192.168.2.1 255.255.255.252

mpls traffic-eng tunnels

tag-switching ip

serial restart_delay 0

ip rsvp bandwidth 1000

interface Serial3/1

ip vrf forwarding Client1

ip address 192.168.25.1 255.255.255.252

s Le routage EIGRP

exit-address-family

s La création du chemin LSP

router eigrp 1

address-family ipv4 vrf Client1

redistribute bgp 1 metric 1024 1 255 1 1500

network 192.168.25.0 0 0.0.0.3

no auto-summary

autonomous-system 1

exit-address-family

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 log-adjacency-changes

network 171.16.1.1 0.0.0.0 area 0 network 192.168.2.0 0.0.0.3 area 0

s Le routage BGP

bgp log-neighbor-changes

neighbor 171.16.1.2 remote-as 1

neighbor 171.16.1.2 update-source

Loopback0

no auto-summary

address-family vpnv4

neighbor 171.16.1.2 activate

neighbor 171.16.1.2 send-community

extended

no auto-summary

exit-address-family

address-family ipv4 vrf Client1

redistribute eigrp 1 metric 1

no auto-summary

no synchronization

ip explicit-path identifier 1 enable next-address 171.16.2.1 next-address 171.16.5.1 next-address 171.16.3.1 next-address 171.16.1.2

59

s Création des ACL

access-list 101 permit tcp any any eq 16383 access-list 101 permit tcp any any eq 16384 access-list 102 permit tcp any any eq ftp-data access-list 102 permit tcp any any eq ftp no cdp log mismatch duplex

s Configuration du routeur

LERMatrix2

hostname LERMatrix2

logging queue-limit 100

ip subnet-zero

no ip icmp rate-limit unreachable

ip tcp synwait-time 5

no ip domain lookup

ip vrf Client2

rd 1:1

route-target export 1:1

route-target import 5:5

ip cef

mpls label protocol ldp

mpls ldp logging neighbor-changes

mpls traffic-eng tunnels

s Configuration de la QOS

class-map match-all VOIP

match access-group 101

class-map match-all ftp

match access-group 102

class-map match-all hpriorite

match ip dscp ef

class-map match-all bpriorite

match ip dscp af23

policy-map dscp

class VOIP

set dscp ef

class ftp

set dscp af23

policy-map QOS

class hpriorite

priority percent 40

class ftp

bandwidth percent 30

interface Loopback0

s Création du Tunnel 2

ip address 171.16.1.2 255.255.255.255

interface Tunnel2

ip unnumbered Loopback0

tunnel destination 171.16.1.1

tunnel mode mpls traffic-eng

tunnel mpls traffic-eng autoroute announce

tunnel mpls traffic-eng priority 1 1

tunnel mpls traffic-eng bandwidth 512

tunnel mpls traffic-eng path-option 1 explicit identifier 1

60

s Configuration des interfaces

interface Serial3/0 ip address 192.168.5.2 255.255.255.252 mpls traffic-eng tunnels

tag-switching ip serial restart_delay 0

ip rsvp bandwidth 1000

interface Serial3/1

ip vrf forwarding Client2 ip address 192.168.8.1

255.255.255.252

s Le routage EIGRP

router eigrp 1

auto-summary

address-family ipv4 vrf Client2 redistribute bgp 1 metric 1024 1 255 1 1500

network 192.168.8.0 0.0.0.3 no auto-summary autonomous-system 1 exit-address-family

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 log-adjacency-changes

network 171.16.1.2 0.0.0.0 area 0 network 192.168.5.0 0.0.0.3 area 0

s Le routage BGP

router bgp 1

bgp log-neighbor-changes

neighbor 171.16.1.1 remote-as 1

neighbor 171.16.1.1 update-source

Loopback0

no auto-summary

address-family vpnv4

neighbor 171.16.1.1 activate

neighbor 171.16.1.1 send-community

extended

no auto-summary

exit-address-family

address-family ipv4 vrf Client2

redistribute eigrp 1 metric 1

no auto-summary

exit-address-family

s Création du chemin LSP

ip explicit-path identifier 1 enable next-address 171.16.3.1 next-address 171.16.5.1 next-address 171.16.2.1 next-address 171.16.1.1

s Creation des ACL

access-list 101 permit tcp any any eq 16383 access-list 101 permit tcp any any eq 16384 access-list 102 permit tcp any any eq ftp-data

access-list 102 permit tcp any any eq ftp

Configuration du routeur LSR1 s Configuration des interfaces

61

interface Loopback0

ip address 171.16.2.1 255.255.255.255

interface Serial3/0

ip address 195.168.2.2 255.255.255.252

mpls traffic-eng tunnels

ip rsvp bandwidth 1000

interface Serial3/1

ip address 195.168.1.1 255.255.255.252

mpls traffic-eng tunnels

ip rsvp bandwidth 1000

interface Serial3/2

ip address 195.168.3.1 255.255.255.252

mpls traffic-eng tunnels

ip rsvp bandwidth 1000

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0

mpls traffic-eng area 0

log-adjacency-changes

network 171.16.2.1 0.0.0.0 area 0

network 195.168.1.0 0.0.0.3 area 0

network 195.168.2.0 0.0.0.3 area 0

network 195.168.3.0 0.0.0.3 area 0

Configuration du routeur LSR2

s Configuration des interfaces interface Loopback0

ip address 171.16.5.1 255.255.255.255 interface Serial3/0

ip address 195.168.1.2 255.255.255.252

mpls traffic-eng tunnels serial restart_delay 0

ip rsvp bandwidth 1000 interface Serial3/1

ip address 195.168.4.1 255.255.255.252 mpls traffic-eng tunnels

serial restart_delay 0 ip rsvp bandwidth 1000

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0

mpls traffic-eng area 0 log-adjacency-changes

network 171.16.5.1 0.0.0.0 area 0 network 195.168.1.0 0.0.0.3 area 0 network 195.168.4.0 0.0.0.3 area 0 Configuration du routeur LSR3 ip cef

mpls label protocol ldp

mpls ldp logging neighbor-changes mpls traffic-eng tunnels

s Configuration des interfaces

interface Loopback0

ip address 171.16.1.1 255.255.255.255 interface Serial3/0

ip address 195.168.4.2 255.255.255.252 mpls traffic-eng tunnels

tag-switching ip

62

serial restart_delay 0

ip rsvp bandwidth 1000

interface Serial3/1

ip address 195.168.3.2 255.255.255.252

mpls traffic-eng tunnels

serial restart_delay 0

ip rsvp bandwidth 1000

interface Serial3/2

ip address 195.168.5.1 255.255.255.252

mpls traffic-eng tunnels

serial restart_delay 0

ip rsvp bandwidth 1000

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 log-adjacency-changes

network 171.16.3.1 0.0.0.0 area 0 network 195.168.3.0 0.0.0.3 area 0 network 195.168.4.0 0.0.0.3 area 0 Configuration du routeur Client1

s Configuration des interfaces

interface FastEthernet2/0

ip address 192.168.10.1 255.255.255.0 interface Serial3/1

ip address 192.168.25.2 255.255.255.252

63

? Le routage EIGRP

router eigrp 1

network 192.168.25.0 0.0.0.3

network 192.168.10.0

no auto-summary

Configuration du routeur Client2 ? Configuration des interfaces

Interface FastEthernet2/1

ip address 192.168.20.1 255.255.255.0 Interface Serial3/0

ip address 192.168.8.2 255.255.255.252 ? Le routage EIGRP

router eigrp 1

network 192.168.8.0 0.0.0.3 network 192.168.20.0 no auto-summary

Quelques commandes de vérifications

Show ip vrf : vérifies l'existence de la table VRF.

Show ip vrf `interfaces' : Vérifie les interfaces actives qui ont une VRF assigné Show ip route vrf emsi : Vérifies les informations de routage au niveau du routeur LER.

Traceroute vrf emsi `adresse IP' : Vérifies les informations de routage au niveau du routeur.

Show ip bgp vpnv4 tag : Vérifie le protocole de routage BGP.

Show ip cef vrf emsi `adresse ip' détail : Vérifie les informations de routage au niveau du routeur LER.

précédent sommaire






Bitcoin is a swarm of cyber hornets serving the goddess of wisdom, feeding on the fire of truth, exponentially growing ever smarter, faster, and stronger behind a wall of encrypted energy








"La première panacée d'une nation mal gouvernée est l'inflation monétaire, la seconde, c'est la guerre. Tous deux apportent une prospérité temporaire, tous deux apportent une ruine permanente. Mais tous deux sont le refuge des opportunistes politiques et économiques"   Hemingway