WOW !! MUCH LOVE ! SO WORLD PEACE !
Fond bitcoin pour l'amélioration du site: 1memzGeKS7CB3ECNkzSn2qHwxU6NZoJ8o
  Dogecoin (tips/pourboires): DCLoo9Dd4qECqpMLurdgGnaoqbftj16Nvp


Home | Publier un mémoire | Une page au hasard

 > 

Conception et mise en place d'une architecture VPN/MPLS avec gestion de la GOS. Cas de Matrix Télecoms.

( Télécharger le fichier original )
par Ghislain SOH TCHENDJOU
Université de Maroua Institut Supérieur du Sahel - Ingénieur en conception Réseau 2015
  

précédent sommaire

Bitcoin is a swarm of cyber hornets serving the goddess of wisdom, feeding on the fire of truth, exponentially growing ever smarter, faster, and stronger behind a wall of encrypted energy

ANNEXES

s Configuration du routeur LERMatrix1

hostname LERMatrix1

logging queue-limit 100

ip subnet-zero

no ip icmp rate-limit unreachable

ip tcp synwait-time 5

no ip domain lookup

ip vrf Client1

rd 1:1

route-target export 5:5

route-target import 1:1

ip cef

mpls label protocol ldp

mpls ldp logging neighbor-changes

mpls traffic-eng tunnel

s Configuration de la QOS

class-map match-all VOIP match access-group 101 class-map match-all ftp match access-group 102 class-map match-all hpriorite match ip dscp ef

class-map match-all bpriorite match ip dscp af23

policy-map dscp

class VOIP

set dscp ef

class ftp

set dscp af23

58

policy-map QOS

class hpriorite

priority percent 40

class ftp

bandwidth percent 30

s Création du Tunnel 1

interface Loopback0

ip address 171.16.1.1 255.255.255.255

interface Tunnel1

ip unnumbered Loopback0

tunnel destination 172.16.1.2

tunnel mode mpls traffic-eng

tunnel mpls traffic-eng autoroute announce

tunnel mpls traffic-eng priority 1 1

tunnel mpls traffic-eng bandwidth 512

tunnel mpls traffic-eng path-option 1 explicit

identifier 1

s Configuration des interfaces

interface Serial3/0

ip address 192.168.2.1 255.255.255.252

mpls traffic-eng tunnels

tag-switching ip

serial restart_delay 0

ip rsvp bandwidth 1000

interface Serial3/1

ip vrf forwarding Client1

ip address 192.168.25.1 255.255.255.252

s Le routage EIGRP

exit-address-family

s La création du chemin LSP

router eigrp 1

address-family ipv4 vrf Client1

redistribute bgp 1 metric 1024 1 255 1 1500

network 192.168.25.0 0 0.0.0.3

no auto-summary

autonomous-system 1

exit-address-family

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 log-adjacency-changes

network 171.16.1.1 0.0.0.0 area 0 network 192.168.2.0 0.0.0.3 area 0

s Le routage BGP

bgp log-neighbor-changes

neighbor 171.16.1.2 remote-as 1

neighbor 171.16.1.2 update-source

Loopback0

no auto-summary

address-family vpnv4

neighbor 171.16.1.2 activate

neighbor 171.16.1.2 send-community

extended

no auto-summary

exit-address-family

address-family ipv4 vrf Client1

redistribute eigrp 1 metric 1

no auto-summary

no synchronization

ip explicit-path identifier 1 enable next-address 171.16.2.1 next-address 171.16.5.1 next-address 171.16.3.1 next-address 171.16.1.2

59

s Création des ACL

access-list 101 permit tcp any any eq 16383 access-list 101 permit tcp any any eq 16384 access-list 102 permit tcp any any eq ftp-data access-list 102 permit tcp any any eq ftp no cdp log mismatch duplex

s Configuration du routeur

LERMatrix2

hostname LERMatrix2

logging queue-limit 100

ip subnet-zero

no ip icmp rate-limit unreachable

ip tcp synwait-time 5

no ip domain lookup

ip vrf Client2

rd 1:1

route-target export 1:1

route-target import 5:5

ip cef

mpls label protocol ldp

mpls ldp logging neighbor-changes

mpls traffic-eng tunnels

s Configuration de la QOS

class-map match-all VOIP

match access-group 101

class-map match-all ftp

match access-group 102

class-map match-all hpriorite

match ip dscp ef

class-map match-all bpriorite

match ip dscp af23

policy-map dscp

class VOIP

set dscp ef

class ftp

set dscp af23

policy-map QOS

class hpriorite

priority percent 40

class ftp

bandwidth percent 30

interface Loopback0

s Création du Tunnel 2

ip address 171.16.1.2 255.255.255.255

interface Tunnel2

ip unnumbered Loopback0

tunnel destination 171.16.1.1

tunnel mode mpls traffic-eng

tunnel mpls traffic-eng autoroute announce

tunnel mpls traffic-eng priority 1 1

tunnel mpls traffic-eng bandwidth 512

tunnel mpls traffic-eng path-option 1 explicit identifier 1

60

s Configuration des interfaces

interface Serial3/0 ip address 192.168.5.2 255.255.255.252 mpls traffic-eng tunnels

tag-switching ip serial restart_delay 0

ip rsvp bandwidth 1000

interface Serial3/1

ip vrf forwarding Client2 ip address 192.168.8.1

255.255.255.252

s Le routage EIGRP

router eigrp 1

auto-summary

address-family ipv4 vrf Client2 redistribute bgp 1 metric 1024 1 255 1 1500

network 192.168.8.0 0.0.0.3 no auto-summary autonomous-system 1 exit-address-family

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 log-adjacency-changes

network 171.16.1.2 0.0.0.0 area 0 network 192.168.5.0 0.0.0.3 area 0

s Le routage BGP

router bgp 1

bgp log-neighbor-changes

neighbor 171.16.1.1 remote-as 1

neighbor 171.16.1.1 update-source

Loopback0

no auto-summary

address-family vpnv4

neighbor 171.16.1.1 activate

neighbor 171.16.1.1 send-community

extended

no auto-summary

exit-address-family

address-family ipv4 vrf Client2

redistribute eigrp 1 metric 1

no auto-summary

exit-address-family

s Création du chemin LSP

ip explicit-path identifier 1 enable next-address 171.16.3.1 next-address 171.16.5.1 next-address 171.16.2.1 next-address 171.16.1.1

s Creation des ACL

access-list 101 permit tcp any any eq 16383 access-list 101 permit tcp any any eq 16384 access-list 102 permit tcp any any eq ftp-data

access-list 102 permit tcp any any eq ftp

Configuration du routeur LSR1 s Configuration des interfaces

61

interface Loopback0

ip address 171.16.2.1 255.255.255.255

interface Serial3/0

ip address 195.168.2.2 255.255.255.252

mpls traffic-eng tunnels

ip rsvp bandwidth 1000

interface Serial3/1

ip address 195.168.1.1 255.255.255.252

mpls traffic-eng tunnels

ip rsvp bandwidth 1000

interface Serial3/2

ip address 195.168.3.1 255.255.255.252

mpls traffic-eng tunnels

ip rsvp bandwidth 1000

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0

mpls traffic-eng area 0

log-adjacency-changes

network 171.16.2.1 0.0.0.0 area 0

network 195.168.1.0 0.0.0.3 area 0

network 195.168.2.0 0.0.0.3 area 0

network 195.168.3.0 0.0.0.3 area 0

Configuration du routeur LSR2

s Configuration des interfaces interface Loopback0

ip address 171.16.5.1 255.255.255.255 interface Serial3/0

ip address 195.168.1.2 255.255.255.252

mpls traffic-eng tunnels serial restart_delay 0

ip rsvp bandwidth 1000 interface Serial3/1

ip address 195.168.4.1 255.255.255.252 mpls traffic-eng tunnels

serial restart_delay 0 ip rsvp bandwidth 1000

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0

mpls traffic-eng area 0 log-adjacency-changes

network 171.16.5.1 0.0.0.0 area 0 network 195.168.1.0 0.0.0.3 area 0 network 195.168.4.0 0.0.0.3 area 0 Configuration du routeur LSR3 ip cef

mpls label protocol ldp

mpls ldp logging neighbor-changes mpls traffic-eng tunnels

s Configuration des interfaces

interface Loopback0

ip address 171.16.1.1 255.255.255.255 interface Serial3/0

ip address 195.168.4.2 255.255.255.252 mpls traffic-eng tunnels

tag-switching ip

62

serial restart_delay 0

ip rsvp bandwidth 1000

interface Serial3/1

ip address 195.168.3.2 255.255.255.252

mpls traffic-eng tunnels

serial restart_delay 0

ip rsvp bandwidth 1000

interface Serial3/2

ip address 195.168.5.1 255.255.255.252

mpls traffic-eng tunnels

serial restart_delay 0

ip rsvp bandwidth 1000

s Le routage OSPF

router ospf 1

mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 log-adjacency-changes

network 171.16.3.1 0.0.0.0 area 0 network 195.168.3.0 0.0.0.3 area 0 network 195.168.4.0 0.0.0.3 area 0 Configuration du routeur Client1

s Configuration des interfaces

interface FastEthernet2/0

ip address 192.168.10.1 255.255.255.0 interface Serial3/1

ip address 192.168.25.2 255.255.255.252

63

? Le routage EIGRP

router eigrp 1

network 192.168.25.0 0.0.0.3

network 192.168.10.0

no auto-summary

Configuration du routeur Client2 ? Configuration des interfaces

Interface FastEthernet2/1

ip address 192.168.20.1 255.255.255.0 Interface Serial3/0

ip address 192.168.8.2 255.255.255.252 ? Le routage EIGRP

router eigrp 1

network 192.168.8.0 0.0.0.3 network 192.168.20.0 no auto-summary

Quelques commandes de vérifications

Show ip vrf : vérifies l'existence de la table VRF.

Show ip vrf `interfaces' : Vérifie les interfaces actives qui ont une VRF assigné Show ip route vrf emsi : Vérifies les informations de routage au niveau du routeur LER.

Traceroute vrf emsi `adresse IP' : Vérifies les informations de routage au niveau du routeur.

Show ip bgp vpnv4 tag : Vérifie le protocole de routage BGP.

Show ip cef vrf emsi `adresse ip' détail : Vérifie les informations de routage au niveau du routeur LER.

précédent sommaire






Bitcoin is a swarm of cyber hornets serving the goddess of wisdom, feeding on the fire of truth, exponentially growing ever smarter, faster, and stronger behind a wall of encrypted energy








"Nous devons apprendre à vivre ensemble comme des frères sinon nous allons mourir tous ensemble comme des idiots"   Martin Luther King