温馨提示×

温馨提示×

您好,登录后才能下订单哦!

密码登录×
登录注册×
其他方式登录
点击 登录注册 即表示同意《亿速云用户服务条款》

Microsoft Azure Express Route

发布时间:2020-06-12 21:53:24 来源:网络 阅读:897 作者:jeffcsc 栏目:数据安全

有关客户侧的BGP路由器的配置参考:

有关VLANID: VLANID是客户自定义的internalVLAN,不同的客户可以使用相同的VLANID,对于IXP来说,会有一个唯一的S-tag进行标记,不需要客户配置网络底层的S-tag。详见下文配置示例(仅供参考):

Specify C-tags (VLAN ID)

Customerneed tospecify 2 C-tags to identify the P2P subinterface traffics. C-tag isgenerally aVLAN ID, you can specify it from 1 to4094. Any number is ok. Differentcustomers can use same C-tags, allowoverlap. C-tag is inner VLAN,when packetspassed to IXP, IXP will add an S-tagto the packets, as outer VLANID. S-taguniquely identified a customer’s trafficthrough IXP network.

 

Terminology

Circuit:     Alogical representation of connection between the customer and Azure

MSEEMicrosoftServiceEnterprise Edge

VNETVirtualNetwork

APPSAzurePublicPeering Services e.g. Storage, SQL,…

IXP    InternetExchange Point

VRF  Virtualrouting and forwarding

Servicekey     An ID(typically a GUID) used to uniquely identify acustomer circuit

BGP  BorderGateway Protocol

S-tag  A VLANtagunique identify a customer’s traffic on a physical port

C-tag1      Uniquelyidentify public peering traffic

C-tag2      Uniquelyidentify private peering traffic

 

2.       有关路由器的配置参考:https://azure.microsoft.com/en-us/documentation/articles/expre***oute-config-samples-routing/

该链接提供Cisco IOS-XE 和JuniperMX系列路由器的接口和路由配置示例。这些示例仅供参考,请不要完全按其配置。请联系您路由器方的技术支持为您的网络设备提供适合的配置。

请注意:本邮件下文及文档中的配置示例仅用于参考,您需要联系您的路由器技术支持团队和您的网络团队,来进行满足您需求的配置。本邮件及链接文档中涉及的路由器配置条目,Windows Azure不提供技术支持。请联系您的设备厂商获取类似问题的技术支持。

 

1.       P2Pinterface configuration

StandardTemplate(cisco):

interfaceEthernet<Interface_Number>.<Number> //createsub-interface,sub number use  C-tag

description<Followstandarddescription>  //configure interface description

ipaddress<IPv4_Address> <Mask>  //configure interface IP,use thefirst IP

encapsulationdot1Q<C-tag>   //configure dot1q encapsulation, addc-tag.

 

  

2.       BGPconfiguration

StandardTemplate(cisco device):

routerbgp<Private_AS_Number> //configure BGP

bgp router-id<loopback>  //configureBGP router-id, use loopback IP

bgplog-neighbor-changes  //configurelog neighbor changes

neighbor<MSEE_Interface_IP>  //configurebgp neighbor

 remote-as12076                         //specifyneighbor’sas number

 descriptionPrimary_line_public_peer //describe neighbor

 ebgp-multihop2                           //configureebgpmultihop

 address-familyipv4unicast  

neighbor <MSEE_Interface_IP>

  remote-as 12076

 descriptionPrimary_line_private_peer

  ebgp-multihop 2

  address-family ipv4 unicast

 

address-family ipv4 unicast

 network<Customer_server_subnet>mask <Subnet_Mask>  //announcesubnetsthat need to talk to Azure 

 

A customer setup acircuit:

IP subnets andVLAN IDs:

Router     IPPrefix      PeeringVLANID(C-tag)

Primary    192.168.1.0/30  Public   500

Secondary     192.168.2.0/30  Public   500

Primary    192.168.1.4/30  Private  510

Secondary     192.168.2.4/30  Private  510

 

IPaddressassignment:

    Customerrouter      MicrosoftMSEE

Primary    192.168.1.1       192.168.1.2

Secondary     192.168.2.1       192.168.2.2

Primary    192.168.1.5       192.168.1.6

Secondary     192.168.2.5       192.168.2.6

AS number:65001

 

P2P interface configuration:

interface Ethernet1/1

descriptionCT_B17547793_10M_primary_link

  no switchport

  speed 1000

  no negotiate auto

interface Ethernet1/1.500

  descriptionCT_primary_public_peer

  encapsulation dot1q 500

  ip address 192.168.1.1/30

interface Ethernet1/1.510

 descriptionCT_primary_private_peer

  encapsulation dot1q 510

  ip address 192.168.1.5/30

interface Ethernet1/2

DescriptionCT_B17547794_10M_secondary_link

  no switchport

  speed 1000

  no negotiate auto

 

interface Ethernet1/2.500

 descriptioncustomer1_secondary_public_peer

  encapsulation dot1q 500

  ip address 192.168.2.1/30

 

interface Ethernet1/2.510

 descriptioncustomer1_secondary_private_peer

  encapsulation dot1q 510

  ip address 192.168.2.5/30

BGP configuration:

router bgp 65001

  router-id 192.168.3.1

  bgp log-neighbor-changes

  address-family ipv4 unicast

   network192.168.4.0/24

  neighbor 192.168.1.2

remote-as 12076

    descriptionCT_primary_public_peer

    ebgp-multihop 2

    address-familyipv4unicast

  neighbor 192.168.1.6

    remote-as 12076

   descriptionCT_primary_private_peer

    ebgp-multihop 2

    address-familyipv4unicast

  neighbor 192.168.2.2

    remote-as 12076

   descriptionCT_secondary_public_peer

    address-familyipv4unicast

  neighbor 192.168.2.6

    remote-as 12076

   descriptionCT_secondary_private_peer

    address-familyipv4unicast

 

 

 


向AI问一下细节

免责声明:本站发布的内容(图片、视频和文字)以原创、转载和分享为主,文章观点不代表本网站立场,如果涉及侵权请联系站长邮箱:is@yisu.com进行举报,并提供相关证据,一经查实,将立刻删除涉嫌侵权内容。

AI