mpls vpn：pe-ce通，pe-pe不通

bylijinnan

R2、R3为PE，运行的IGP是RIP。
PE-CE之间是静态路由。

配置是参考这里的： http://hi.baidu.com/skygogogo/blog/item/9ec2ee3bd111f6fa14cecb6b.html

现在的问题是PE-CE之间是通的，但是PE-PE之间不通，不知道问题出在哪了，请指教！：
R2#ping vrf A-company 4.4.4.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 44/107/144 ms


R3#ping vrf A-company 5.5.5.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 5.5.5.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 48/115/208 ms
R3#ping vrf B 6.6.6.6        
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/64/116 ms

R2#ping vrf A-company 35.1.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 35.1.1.3, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)



R1的配置：
!         
interface Loopback0
ip address 1.1.1.1 255.255.255.0
!         
interface Loopback1
ip address 202.96.134.133 255.255.255.0
!         

interface Serial1/0
ip address 12.1.1.1 255.255.255.0
mpls ip  
serial restart-delay 0
clock rate 1008000
!         
interface Serial1/1
ip address 13.1.1.1 255.255.255.0
mpls ip  
serial restart-delay 0
clock rate 1008000

!         
router rip
version 2
network 1.0.0.0
network 12.0.0.0
network 13.0.0.0
no auto-summary

=======================================================================================
R2的配置：

!
no aaa new-model
ip source-route
ip cef
!
!
!
!
no ip domain lookup
ip vrf A-company
rd 2:2   
route-target export 42:42
route-target import 24:24
!         

!         
interface Loopback0
ip address 2.2.2.2 255.255.255.0
!         
interface Loopback1
no ip address
!         
interface FastEthernet0/0
ip address 24.24.24.2 255.255.255.0
shutdown
duplex full
!         
interface Serial1/0
ip address 12.1.1.2 255.255.255.0
mpls ip  
serial restart-delay 0
!         
interface Serial1/1
ip vrf forwarding A-company
ip address 24.1.1.2 255.255.255.0
serial restart-delay 0
!         

!         
router rip
version 2
network 2.0.0.0
network 12.0.0.0
network 223.0.0.0
no auto-summary
!         
router bgp 1
no synchronization
bgp router-id 2.2.2.2
bgp log-neighbor-changes
redistribute rip
neighbor 3.3.3.3 remote-as 1
neighbor 3.3.3.3 **-source Loopback0
no auto-summary
!        
address-family vpnv4
  neighbor 3.3.3.3 activate
  neighbor 3.3.3.3 send-community both
exit-address-family
!        
address-family ipv4 vrf A-company
  redistribute connected
  redistribute static
  no synchronization
  network 0.0.0.0
exit-address-family
!         
ip forward-protocol nd
ip route vrf A-company 0.0.0.0 0.0.0.0 24.1.1.4
no ip http server
no ip http secure-server
!         

===========================================================================================

R3的配置：

!
!
!
!
no ip domain lookup
ip vrf A-company
rd 3:3   
route-target export 24:24
route-target import 42:42
!         
ip vrf B  
description branch-of-companyA
rd 3366:3366
route-target export 24:24
route-target import 42:42
!         
no ipv6 cef
!         

!         
!         
interface Loopback0
ip address 3.3.3.3 255.255.255.0
!         
interface FastEthernet0/0
no ip address
shutdown
duplex half
!         
interface Serial1/0
ip address 13.1.1.3 255.255.255.0
mpls ip  
serial restart-delay 0
!         
interface Serial1/1
ip vrf forwarding A-company
ip address 35.1.1.3 255.255.255.0
serial restart-delay 0
!         
interface Serial1/2
ip vrf forwarding B
ip address 36.1.1.3 255.255.255.0
serial restart-delay 0
!         

router rip
version 2
network 3.0.0.0
network 13.0.0.0
network 222.0.0.0
no auto-summary
!        
address-family ipv4 vrf A-company
  redistribute bgp 1 metric transparent
  network 35.0.0.0
  no auto-summary
exit-address-family
!         
router bgp 1
no synchronization
bgp log-neighbor-changes
neighbor 2.2.2.2 remote-as 1
neighbor 2.2.2.2 **-source Loopback0
no auto-summary
!        
address-family vpnv4
  neighbor 2.2.2.2 activate
  neighbor 2.2.2.2 send-community both
exit-address-family
!        
address-family ipv4 vrf B
  redistribute connected
  redistribute static
  no synchronization
exit-address-family
!        
address-family ipv4 vrf A-company
  redistribute connected
  redistribute static
  no synchronization
exit-address-family
!         
ip forward-protocol nd
ip route vrf A-company 5.5.5.0 255.255.255.0 35.1.1.5
ip route vrf B 6.6.6.0 255.255.255.0 36.1.1.6
no ip http server
no ip http secure-server
===========================================================================================
R4、R5、R6这三个CE都是一条默认路由指向PE：
例如R4上是ip route 0.0.0.0 0.0.0.0 24.1.1.2

===========================================================================================

林原静羽

你这边提到说PE-CE可以通，PE-PE无法通信，可能是由于PE之间无法传递VPN路由。
可试着检查几个方向
1）PE-PE之间的MBGP邻居，vpnv4邻居是否正常
2）邻居正常的情况下，查看本地VPN内部路由是否成功重分发进MP-BGP，是否可正常传递给邻居
3）接着查看邻居是否正常学习到传递过来VPN路由。
4）若有学习到路由，还是ping不通，可查看标签转发表等，跟踪标签。
若上述都没有问题的话，还是无法ping通，可继续跟帖求助。

亮晶晶

冰se零下