思科SRv6 实现 VPN+流量工程测试
加入技术交流群
本文分享自天翼云开发者社区《思科SRv6 实现 VPN+流量工程测试》.作者：y****n
### 创建网络命名空间
ip netns add r1
ip netns add r2
ip netns add r3
ip netns add r4
ip netns add host-a
ip netns add host-b
ip netns add host-c
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv4.ip_forward=1
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv4.conf.all.rp_filter=0
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv6.conf.all.forwarding=1
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv6.conf.all.seg6_enabled=1
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv4.conf.default.rp_filter=0
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv6.conf.default.forwarding=1
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv6.conf.default.seg6_enabled=1
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv4.conf.lo.rp_filter=0
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv6.conf.lo.forwarding=1
ip netns list | awk '{print$1}' | xargs -I {} ip netns exec {} sysctl -w net.ipv6.conf.lo.seg6_enabled=1
### 创建虚拟网卡设备
ip link add dev-a-r1 netns host-a type veth peer name dev-r1-a netns r1
ip link add dev-r1-r2 netns r1 type veth peer name dev-r2-r1 netns r2
ip link add dev-r2-r3 netns r2 type veth peer name dev-r3-r2 netns r3
ip link add dev-r3-c netns r3 type veth peer name dev-c-r3 netns host-c
ip netns exec r1 ip link set dev-r1-a up
ip netns exec host-a ip link set dev-a-r1 up
ip netns exec r1 ip link set dev-r1-r2 up
ip netns exec r2 ip link set dev-r2-r1 up
ip netns exec r2 ip link set dev-r2-r3 up
ip netns exec r3 ip link set dev-r3-r2 up
ip netns exec r3 ip link set dev-r3-c up
ip netns exec host-c ip link set dev-c-r3 up
ip link add dev-r1-r4 netns r1 type veth peer name dev-r4-r1 netns r4
ip link add dev-r2-r4 netns r2 type veth peer name dev-r4-r2 netns r4
ip link add dev-r3-r4 netns r3 type veth peer name dev-r4-r3 netns r4
ip link add dev-r4-b netns r4 type veth peer name dev-b-r4 netns host-b
ip netns exec r1 ip link set dev-r1-r4 up
ip netns exec r4 ip link set dev-r4-r1 up
ip netns exec r2 ip link set dev-r2-r4 up
ip netns exec r4 ip link set dev-r4-r2 up
ip netns exec r3 ip link set dev-r3-r4 up
ip netns exec r4 ip link set dev-r4-r3 up
ip netns exec host-b ip link set dev-b-r4 up
ip netns exec r4 ip link set dev-r4-b up
ip netns exec r1 ip link set lo up
ip netns exec r2 ip link set lo up
ip netns exec r3 ip link set lo up
ip netns exec r4 ip link set lo up
### 配置地址、路由
ip netns exec r1 ip addr add 10.0.0.2/24 dev dev-r1-a
ip netns exec r1 ip addr add 2001:1a::1/64 dev dev-r1-a
ip netns exec r1 ip addr add 2001:12::1/64 dev dev-r1-r2
ip netns exec r1 ip addr add 2001:14::1/64 dev dev-r1-r4
ip netns exec r1 ip addr add fc00:1::1/64 dev lo
ip netns exec r2 ip addr add 2001:12::2/64 dev dev-r2-r1
ip netns exec r2 ip addr add 2001:23::1/64 dev dev-r2-r3
ip netns exec r2 ip addr add 2001:24::1/64 dev dev-r2-r4
ip netns exec r2 ip addr add fc00:2::2/64 dev lo
ip netns exec r3 ip addr add 10.0.1.2/24 dev dev-r3-c
ip netns exec r3 ip addr add 2001:23::2/64 dev dev-r3-r2
ip netns exec r3 ip addr add 2001:3c::1/64 dev dev-r3-c
ip netns exec r3 ip addr add 2001:34::1/64 dev dev-r3-r4
ip netns exec r3 ip addr add fc00:3::3/64 dev lo
ip netns exec r4 ip addr add 10.0.2.2/24 dev dev-r4-b
ip netns exec r4 ip addr add 2001:14::2/64 dev dev-r4-r1
ip netns exec r4 ip addr add 2001:24::2/64 dev dev-r4-r2
ip netns exec r4 ip addr add 2001:34::2/64 dev dev-r4-r3
ip netns exec r4 ip addr add 2001:4b::1/64 dev dev-r4-b
ip netns exec r4 ip addr add fc00:4::4/64 dev lo
ip netns exec host-a ip addr add 2001:1a::2/64 dev dev-a-r1
ip netns exec host-c ip addr add 2001:3c::2/64 dev dev-c-r3
ip netns exec host-b ip addr add 2001:4b::2/64 dev dev-b-r4
ip netns exec host-a ip addr add 10.0.0.1/24 dev dev-a-r1
ip netns exec host-c ip addr add 10.0.1.1/24 dev dev-c-r3
ip netns exec host-b ip addr add 10.0.2.1/24 dev dev-b-r4
ip netns exec host-a ip route add 10.0.1.0/24 via 10.0.0.2
ip netns exec host-a ip route add 10.0.2.0/24 via 10.0.0.2
ip netns exec host-c ip route add 10.0.0.0/24 via 10.0.1.2
ip netns exec host-b ip route add 10.0.0.0/24 via 10.0.2.2
#ip netns exec host-b ip route add 10.0.0.0/24 dev dev-b-r4
ip netns exec r1 ip sr tunsrc set fc00:1::1
ip netns exec r2 ip sr tunsrc set fc00:2::2
ip netns exec r3 ip sr tunsrc set fc00:3::3
ip netns exec r4 ip sr tunsrc set fc00:4::4
ip netns exec r1 ip -6 route add default via 2001:12::2
ip netns exec r2 ip -6 route add fc00:1::/64 via 2001:12::1
ip netns exec r2 ip -6 route add fc00:3::/64 via 2001:23::2
ip netns exec r3 ip -6 route add default via 2001:23::1
ip netns exec r3 ip -6 route add fc00:4::/64 via 2001:34::2
#ip netns exec r3 ip -6 route add fc00:1::bb/128 via 2001:23::1
ip netns exec r4 ip -6 route add default via 2001:4b::2
ip netns exec r4 ip route add default via 10.0.2.1
ip netns exec r4 ip -6 route add fc00:1::bb/128 via 2001:14::1
### 配置SRv6指令
ip netns exec r1 ip -6 route add fc00:1::bb/128 encap seg6local action End.DX4 nh4 10.0.0.1 dev dev-r1-a
ip netns exec r1 ip route add 10.0.2.0/24 encap seg6 mode encap segs fc00:3::bb,fc00:4::bb dev dev-r1-r2
ip netns exec r3 ip -6 route add fc00:3::bb/128 encap seg6local action End dev dev-r3-r4
ip netns exec r4 ip -6 route add fc00:4::bb/128 encap seg6local action End.DX4 nh4 10.0.2.1 dev dev-r4-b
ip netns exec r4 ip route add 10.0.0.0/24 encap seg6 mode encap segs fc00:1::bb dev dev-r4-r1
#ip netns exec r1 ip route add 10.0.1.0/24 encap seg6 mode encap segs fc00:3::bb dev dev-r1-a
#ip netns exec r3 ip -6 route add fc00:3::bb/128 encap seg6local action End.DX4 nh4 10.0.1.1 dev dev-r3-c
#ip netns exec r3 ip route add 10.0.0.0/24 encap seg6 mode encap segs fc00:1::bb dev dev-r3-c
### 测试网络连通
ip netns exec host-a ping 10.0.2.1
专栏文章内容及配图由作者撰写发布，仅供工程师学习之用，如有侵权或者其他违规问题，请联系本站处理。 联系我们
关键词：
网络
相关推荐
Addison.Wesley.Advanced.Linux.Networking.part1.rar
: 影响未来的20项数字技术
INA217的输入稳定网络电路
教程：设置内置逻辑的 IO-Link 网络
[转帖]IBM可编程网络处理器
安捷伦(Agilent)科技公司的网络优化测试仪
Addison.Wesley.Advanced.Linux.Networking.part2.rar
Coherent推出全系列InP技术组合
帮个忙：一个网络接口是否能拥有两个IP地址？
Addison.Wesley.Advanced.Linux.Networking.part3.rar
Addison.Wesley.Advanced.Linux.Networking.part4.rar
8、16位MCU接入TCPIP网络方案
中国首例！我国对美国相关光纤产品发起反规避调查
超高速光纤创下全球速度纪录：在欧式距离上达到1.02拍比特每秒
网络爬虫开发常用框架Scrapy
SDN可编程交换芯片架构核心：RMT，一个可编程的网络DSA
AI网络架构或将进入“无交换机”时代
采用TDA4290的音量调节网络
INA166的输入稳定网络电路
怎么样才能让一个网络接口同时有两个ip address？
GSMA：全球 43% 的人口仍未使用移动互联网
HTML 解析之 BeautifulSoup
我国西部首个，重庆算力互联互通平台在两江新区上线
IGBT无损吸收网络
INA103构成的使放大器稳定工作的输入网络