2.

25 SRv6-TE
2025年2月25日 19:21

知识回顾：
SRv6：
SRv6 BE
目的ip变成locator+function形式的ipv6目的地址，进行转发
SRv6 TE（SRv6-te policy方式）
IPv6固定头部+SRH（指定路径end sid写入）===控路

SRv6-TE（SRv6-te policy方式）
拓扑：

配置思路：
1、Core Ipv6 IGP
Ospfv3 ,IS-IS ipv6
2、使能SRv6, 配置locator和function
1）全局使能SRv6
2）配置locator和function
配置end psp--------node sid
配置end-x ----------adjacency sid
3）IGP使能SRv6，通告locator
NE1：
segment-routing ipv6

locator NE1 ipv6-prefix 2001:1:: 96 static 16

opcode ::1 end psp
opcode ::102 end-x interface Ethernet3/0/0 nexthop FE80::2 no-flavor
#
Isis
Segment-routing ipv6 locator NE1

NE2：
segment-routing ipv6
locator NE2 ipv6-prefix 2001:2:: 96 static 16
opcode ::2 end psp
opcode ::201 end-x interface Ethernet3/0/0 nexthop FE80::1 no-flavor
opcode ::204 end-x interface Ethernet3/0/2 nexthop FE80::4 no-flavor
#
Isis
Segment-routing ipv6 locator NE2

NE4：
segment-routing ipv6
locator NE4 ipv6-prefix 2001:4:: 96 static 16
opcode ::4 end psp
分区 Datacom IE 20241104 的第 1 页
 opcode ::4 end psp
opcode ::402 end-x interface Ethernet3/0/2 nexthop FE80::2 no-flavor
opcode ::406 end-x interface Ethernet3/0/3 nexthop FE80::6 no-flavor
#
Isis
Segment-routing ipv6 locator NE4

NE6：
segment-routing ipv6
locator NE6 ipv6-prefix 2001:6:: 96 static 16
opcode ::6 end psp
opcode ::604 end-x interface Ethernet3/0/3 nexthop FE80::4 no-flavor
opcode ::605 end-x interface Ethernet3/0/0 nexthop FE80::5 no-flavor
#
Isis
Segment-routing ipv6 locator NE6

NE5：
segment-routing ipv6
locator NE5 ipv6-prefix 2001:5:: 96 static 16
opcode ::5 end psp
opcode ::506 end-x interface Ethernet3/0/0 nexthop FE80::6 no-flavor
#
Isis
Segment-routing ipv6 locator NE5
================SRv6 BE配置完毕==================
3、配置SRv6-te policy
配置1：严格控路
segment-list 12465
index 10 sid ipv6 2001:1::102
index 20 sid ipv6 2001:2::204
index 30 sid ipv6 2001:4::406
index 40 sid ipv6 2001:6::605
srv6-te policy toNE5 endpoint 2001::5 color 100
candidate-path preference 100
segment-list 12465
配置2：松散控路
segment-list 5
index 40 sid ipv6 2001:5::5------目的ipv6地址-----走ipv6 igp路径
srv6-te policy toNE5 endpoint 2001::5 color 100
candidate-path preference 100
segment-list 5
配置3：混合控路
segment-list 124-5
index 10 sid ipv6 2001:1::102
index 20 sid ipv6 2001:2::204-------严格控路
index 30 sid ipv6 2001:5::5---------松散控路
srv6-te policy toNE5 endpoint 2001::5 color 100
candidate-path preference 100
segment-list 12465
===============SRv6-TE policy配置完毕===================
SRv6-TE 应用配置
场景1：L3vpnv4
4、配置vpnv4 邻居关系（通过ipv6地址）

分区 Datacom IE 20241104 的第 2 页
4、配置vpnv4 邻居关系（通过ipv6地址）
5、配置VRF，接口划入
6、配置PE-CE路由协议
7、双向注入
场景2：L3vpnv6
4、配置vpnv6 邻居关系（通过ipv6地址）
5、配置VRF，接口划入
6、配置PE-CE ipv6 路由协议
7、双向注入

===============SRv6-TE应用部署======================
8、SRv6-TE应用流量导入SRv6 TE隧道中（color）
场景1：L3vpnv4
NE1：
Bgp 15
Ipv4-family vpn-instance A
Network 172.16.1.0 24 route-policy color

NE5：
Bgp 15
Ipv4-family vpn-instance A
Network 172.16.5.0 24 route-policy color
场景2：L3vpnv6
NE1：
Bgp 15
Ipv6-family vpn-instance A
Network fc00::1 128 route-policy color

NE5：
Bgp 15
Ipv6-family vpn-instance A
Network fc00::5 128 route-policy color

场景3： bgp ipv4 unicast

NE1：
Bgp 15
Ipv4-family unicast
Network 11.11.1.0 24 route-policy color

NE5：
Bgp 15
Ipv4-family unicast
Network 11.11.5.0 24 route-policy color

9、SRv6-TE应用使能SRv6-TE，调用locator，向peer发送prefix-sid
场景1：L3vpnv4
NE1：
Bgp 15
Ipv4-family vpn-instance A
segment-routing ipv6 locator NE1-----------调用locator
segment-routing ipv6 traffic-engineer-------使能SRv6-TE
#
Ipv4-family vpnv4
Peer 2001::5 prefix-sid---------向peer发送prefix-sid（end.dt4）

NE5：
Bgp 15
Ipv4-family vpn-instance A

分区 Datacom IE 20241104 的第 3 页
 Ipv4-family vpn-instance A
segment-routing ipv6 locator NE5
segment-routing ipv6 traffic-engineer
#
Ipv4-family vpnv4
Peer 2001::1 prefix-sid
场景2：L3vpnv6
NE1：
Bgp 15
Ipv6-family vpn-instance A
segment-routing ipv6 locator NE1-----------调用locator
segment-routing ipv6 traffic-engineer-------使能SRv6-TE
#
Ipv4-family vpnv6
Peer 2001::5 prefix-sid---------向peer发送prefix-sid（end.dt4）

NE5：
Bgp 15
Ipv6-family vpn-instance A
segment-routing ipv6 locator NE5
segment-routing ipv6 traffic-engineer
#
Ipv6-family vpnv4
Peer 2001::1 prefix-sid

场景3： bgp ipv4 unicast

NE1：
Bgp 15
Ipv4-family unicast
segment-routing ipv6 locator NE1-----------调用locator
segment-routing ipv6 traffic-engineer-------使能SRv6-TE
Peer 2001::5 prefix-sid---------向peer发送prefix-sid（end.dt4）
Peer 2001::1 advertise-ext-community
NE5：
Bgp 15
Ipv4-family unicast
segment-routing ipv6 locator NE1-----------调用locator
segment-routing ipv6 traffic-engineer-------使能SRv6-TE
Peer 2001::1 prefix-sid---------向peer发送prefix-sid（end.dt4）
peer 2001::1 advertise-ext-community

10、配置隧道策略，调用策略
场景1：L3vpnv4
NE1：
tunnel-policy srv6-te
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1
#
Ip vpn-instance A
Ipv4-family
Tnl-policy srv6-te

场景2：L3vpnv6

分区 Datacom IE 20241104 的第 4 页
场景2：L3vpnv6
NE1：
tunnel-policy srv6-te
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1
#
Ip vpn-instance A
Ipv6-family
Tnl-policy srv6-te

场景3：bgp ipv4 unciast

NE1：
tunnel-policy srv6-te
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1
#
route recursive-lookup tunnel tunnel-policy srv6-te
tunnel-selector srv6-te permit node 10
apply tunnel-policy srv6-te
#
Bgp 15
Ipv4-family unciast
Unicast-route recursive-lookup tunnel-v6 tunnel-selector srv6-te

总结配置思路：
1、SRv6-BE
2、SRv6-TE
3、SRv6-TE 应用，流量导入（color）
4、SRv6-TE应用使能SRv6 通告locator
5、隧道策略，根据场景进行调用

问题1：srv6-te policy，通过ipv6 “soure routing”（SRH）来实现控路，如果拓扑太大，end

sid太多，SRH放不下，该如何解决：
解决方案：粘黏SID（binding sid）
NE1：
Segment-routing ipv6
segment-list 124
index 10 sid ipv6 2001:1::102
index 20 sid ipv6 2001:2::204
index 30 sid ipv6 2001:4::4444---设置的粘黏SID
srv6-te policy toNE5 endpoint 2001::5 color 100
candidate-path preference 100
segment-list 124

NE4：
Segment-routing ipv6
srv6-te-policy locator NE4
segment-list 465
index 10 sid ipv6 2001:4::406
index 20 sid ipv6 2001:6::605

分区 Datacom IE 20241104 的第 5 页
 index 20 sid ipv6 2001:6::605
srv6-te policy toNE5 endpoint 2001::5 color 100
binding-sid 2001:4::4444
candidate-path preference 100
segment-list 465

问题2：srv6-te policy支持SBFD和hotstandy
发起端：
NE1
Bfd
#
sbfd
destination ipv6 2001::5 remote-discriminator 10.1.5.5
#
Segment-routing ipv6
全局配置：影响所有SRv6-te-policy
srv6-te-policy backup hot-standby enable
srv6-te-policy bfd seamless enable
个体配置：影响指定srv6-te-policy
Srv6-te policy toNE5 endpoint 2001::5 color 100
backup hot-standby enable
bfd seamless enable

反射端：
NE5：
Bfd
#
Sbfd
Reflector discriminator 10.1.5.5

EVPN over SRv6-te policy 配置

1、core ipv6 igp
2、使能SRv6, 配置locator和function
1）全局使能SRv6
2）配置locator和function
配置end psp--------node sid
配置end-x ----------adjacency sid
3）IGP使能SRv6，通告locator
===========SRv6 BE配置完毕======
3、配置SRv6-te policy
配置1：严格控路
segment-list 12465
index 10 sid ipv6 2001:1::102
index 20 sid ipv6 2001:2::204
index 30 sid ipv6 2001:4::406
index 40 sid ipv6 2001:6::605
srv6-te policy toNE5 endpoint 2001::5 color 100
candidate-path preference 100
segment-list 12465
==========SRv6-TE policy配置完毕======
SRv6-TE应用配置
场景4： EVPN
4、建立evpn peer，修改封装类型为SRv6
NE1：

分区 Datacom IE 20241104 的第 6 页
 NE1：
Bgp 15
l2vpn-family evpn
policy vpn-target
peer 2001::5 enable
peer 2001::5 advertise encap-type srv6----需要指定evpn的封装类型为srv6

NE5：
Bgp 15
l2vpn-family evpn
policy vpn-target
peer 2001::1 enable
peer 2001::1 advertise encap-type srv6

5、配置VRF B，接口划入
NE1：
ip vpn-instance B
ipv4-family
route-distinguisher 15:2
apply-label per-instance
vpn-target 15:15 export-extcommunity evpn
vpn-target 15:15 import-extcommunity evpn

NE5
ip vpn-instance B
ipv4-family
route-distinguisher 15:6
apply-label per-instance
vpn-target 15:15 export-extcommunity evpn
vpn-target 15:15 import-extcommunity evpn

6、PE-CE路由协议：流量通过color引入SRv6
NE1：
Bgp 15
#
ipv4-family vpn-instance B
network 192.168.1.0 255.255.255.0 route-policy color
advertise l2vpn evpn----把VRF B中路由引入evpn中，通过type 5 路由发布

NE5：
Bgp 15
#
ipv4-family vpn-instance B
network 192.168.5.0 255.255.255.0 route-policy color
advertise l2vpn evpn
=================SRV6-TE应用配置============
7、SRv6-TE应用使能SRv6-TE，调用locator
NE1：
Bgp 15
#
ipv4-family vpn-instance B
Segment-routing ipv6 traffic-engineer best-effort evpn
Segment-routing ipv6 locator NE1 evpn

NE5：

分区 Datacom IE 20241104 的第 7 页
 NE5：
Bgp 15
#
ipv4-family vpn-instance B
Segment-routing ipv6 traffic-engineer best-effort evpn
Segment-routing ipv6 locator NE1 evpn

8、隧道策略，在VRF B中调用
tunnel-policy srv6-te
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1
#
Ip vpn-instance B
Ipv4-family
Tnl-policy srv6-te evpn

总结evpn over SRv6-TE policy

1、SRv6 BE
1）core igp
2）使能SRv6
配置locator 和function
End psp
End-x
2、SRv6 TE（SRv6-te policy实现）
1）配置segment-list
2）配置srv6-te policy name endpoint color
3、EVPN配置
1）evpn 邻居建立，通过封装模式srv6
2）配置VRF，接口划入（evpn）
3）pe-ce路由协议，流量携带color属性（evpn）
配置方案1：始发路由
Bgp 15
Ipv4-family vpn-instance B
Network 172.16.1.0 24 route-policy color
Advertise l2vpn evpn

配置方法2：通过bgp学习到
Bgp 15
Ipv4-family vpn-instance B
Peer 172.16.12.1 as-number 100
Peer 172.16.12.1 route-policy color import
Advertise l2vpn evpn

4、evpn使能SRv6，调用locator（evpn）
NE1:
Bgp 15
Ipv4-family vpn-instance B
Segment-routing ipv6 traffic-enginer best-effort evpn---TE主路径，BE是逃生通道
Segment-routing ipv6 locator NE1 evpn

5、隧道策略（evpn）

分区 Datacom IE 20241104 的第 8 页
5、隧道策略（evpn）
tunnel-policy srv6-te
tunnel select-seq ipv6 srv6-te-policy load-balance-number 1
#
Ip vpn-instance B
Ipv4-family
Tnl-policy srv6-te evpn

分区 Datacom IE 20241104 的第 9 页