从ibgp邻居学过来一条vpnv4路由,但是在路由表看到该条路由是无效的
有什么命令可以查看到该条路由无效的原因吗?
avg.163.com/topic/detail/8786507
avg.163.com/topic/detail/8786522
avg.163.com/topic/detail/8786547
avg.163.com/topic/detail/8786564
avg.163.com/topic/detail/8786580
avg.163.com/topic/detail/8786506
avg.163.com/topic/detail/8786520
avg.163.com/topic/detail/8786544
avg.163.com/topic/detail/8786563
avg.163.com/topic/detail/8786582
avg.163.com/topic/detail/8786504
avg.163.com/topic/detail/8786517
avg.163.com/topic/detail/8786542
avg.163.com/topic/detail/8786562
avg.163.com/topic/detail/8786581
avg.163.com/topic/detail/8786502
avg.163.com/topic/detail/8786519
avg.163.com/topic/detail/8786546
avg.163.com/topic/detail/8786559
avg.163.com/topic/detail/8786577
avg.163.com/topic/detail/8786500
avg.163.com/topic/detail/8786516
avg.163.com/topic/detail/8786543
avg.163.com/topic/detail/8786556
avg.163.com/topic/detail/8786574
avg.163.com/topic/detail/8786498
avg.163.com/topic/detail/8786514
avg.163.com/topic/detail/8786540
avg.163.com/topic/detail/8786557
avg.163.com/topic/detail/8786578
avg.163.com/topic/detail/8786505
avg.163.com/topic/detail/8786526
avg.163.com/topic/detail/8786539
avg.163.com/topic/detail/8786554
avg.163.com/topic/detail/8786575
avg.163.com/topic/detail/8786503
avg.163.com/topic/detail/8786525
avg.163.com/topic/detail/8786537
avg.163.com/topic/detail/8786552
avg.163.com/topic/detail/8786572
avg.163.com/topic/detail/8786501
avg.163.com/topic/detail/8786524
avg.163.com/topic/detail/8786535
avg.163.com/topic/detail/8786561
avg.163.com/topic/detail/8786576
avg.163.com/topic/detail/8786499
avg.163.com/topic/detail/8786523
avg.163.com/topic/detail/8786545
avg.163.com/topic/detail/8786560
avg.163.com/topic/detail/8786579
avg.163.com/topic/detail/8786497
avg.163.com/topic/detail/8786521
avg.163.com/topic/detail/8786541
avg.163.com/topic/detail/8786558
avg.163.com/topic/detail/8786573
avg.163.com/topic/detail/8786496
avg.163.com/topic/detail/8786518
avg.163.com/topic/detail/8786538
avg.163.com/topic/detail/8786555
avg.163.com/topic/detail/8786571
avg.163.com/topic/detail/8786495
avg.163.com/topic/detail/8786515
avg.163.com/topic/detail/8786536
avg.163.com/topic/detail/8786553
avg.163.com/topic/detail/8786570
avg.163.com/topic/detail/8786493
avg.163.com/topic/detail/8786512
avg.163.com/topic/detail/8786533
avg.163.com/topic/detail/8786551
avg.163.com/topic/detail/8786569
avg.163.com/topic/detail/8786494
avg.163.com/topic/detail/8786513
avg.163.com/topic/detail/8786534
avg.163.com/topic/detail/8786550
avg.163.com/topic/detail/8786568
avg.163.com/topic/detail/8786492
avg.163.com/topic/detail/8786511
avg.163.com/topic/detail/8786532
avg.163.com/topic/detail/8786549
avg.163.com/topic/detail/8786567
avg.163.com/topic/detail/8786491
avg.163.com/topic/detail/8786510
avg.163.com/topic/detail/8786530
avg.163.com/topic/detail/8786548
avg.163.com/topic/detail/8786566
avg.163.com/topic/detail/8786480
avg.163.com/topic/detail/8786482
avg.163.com/topic/detail/8786485
avg.163.com/topic/detail/8786486
avg.163.com/topic/detail/8786488
从ibgp邻居学过来一条vpnv4路由,但是在路由表看到该条路由是无效的
有什么命令可以查看到该条路由无效的原因吗?
avg.163.com/topic/detail/8786507
avg.163.com/topic/detail/8786522
avg.163.com/topic/detail/8786547
avg.163.com/topic/detail/8786564
avg.163.com/topic/detail/8786580
avg.163.com/topic/detail/8786506
avg.163.com/topic/detail/8786520
avg.163.com/topic/detail/8786544
avg.163.com/topic/detail/8786563
avg.163.com/topic/detail/8786582
avg.163.com/topic/detail/8786504
avg.163.com/topic/detail/8786517
avg.163.com/topic/detail/8786542
avg.163.com/topic/detail/8786562
avg.163.com/topic/detail/8786581
avg.163.com/topic/detail/8786502
avg.163.com/topic/detail/8786519
avg.163.com/topic/detail/8786546
avg.163.com/topic/detail/8786559
avg.163.com/topic/detail/8786577
avg.163.com/topic/detail/8786500
avg.163.com/topic/detail/8786516
avg.163.com/topic/detail/8786543
avg.163.com/topic/detail/8786556
avg.163.com/topic/detail/8786574
avg.163.com/topic/detail/8786498
avg.163.com/topic/detail/8786514
avg.163.com/topic/detail/8786540
avg.163.com/topic/detail/8786557
avg.163.com/topic/detail/8786578
avg.163.com/topic/detail/8786505
avg.163.com/topic/detail/8786526
avg.163.com/topic/detail/8786539
avg.163.com/topic/detail/8786554
avg.163.com/topic/detail/8786575
avg.163.com/topic/detail/8786503
avg.163.com/topic/detail/8786525
avg.163.com/topic/detail/8786537
avg.163.com/topic/detail/8786552
avg.163.com/topic/detail/8786572
avg.163.com/topic/detail/8786501
avg.163.com/topic/detail/8786524
avg.163.com/topic/detail/8786535
avg.163.com/topic/detail/8786561
avg.163.com/topic/detail/8786576
avg.163.com/topic/detail/8786499
avg.163.com/topic/detail/8786523
avg.163.com/topic/detail/8786545
avg.163.com/topic/detail/8786560
avg.163.com/topic/detail/8786579
avg.163.com/topic/detail/8786497
avg.163.com/topic/detail/8786521
avg.163.com/topic/detail/8786541
avg.163.com/topic/detail/8786558
avg.163.com/topic/detail/8786573
avg.163.com/topic/detail/8786496
avg.163.com/topic/detail/8786518
avg.163.com/topic/detail/8786538
avg.163.com/topic/detail/8786555
avg.163.com/topic/detail/8786571
avg.163.com/topic/detail/8786495
avg.163.com/topic/detail/8786515
avg.163.com/topic/detail/8786536
avg.163.com/topic/detail/8786553
avg.163.com/topic/detail/8786570
avg.163.com/topic/detail/8786493
avg.163.com/topic/detail/8786512
avg.163.com/topic/detail/8786533
avg.163.com/topic/detail/8786551
avg.163.com/topic/detail/8786569
avg.163.com/topic/detail/8786494
avg.163.com/topic/detail/8786513
avg.163.com/topic/detail/8786534
avg.163.com/topic/detail/8786550
avg.163.com/topic/detail/8786568
avg.163.com/topic/detail/8786492
avg.163.com/topic/detail/8786511
avg.163.com/topic/detail/8786532
avg.163.com/topic/detail/8786549
avg.163.com/topic/detail/8786567
avg.163.com/topic/detail/8786491
avg.163.com/topic/detail/8786510
avg.163.com/topic/detail/8786530
avg.163.com/topic/detail/8786548
avg.163.com/topic/detail/8786566
avg.163.com/topic/detail/8786480
avg.163.com/topic/detail/8786482
avg.163.com/topic/detail/8786485
avg.163.com/topic/detail/8786486
avg.163.com/topic/detail/8786488
通过以下步骤检查:
1. 检查路由属性匹配性
路由目标(RT)检查
使用命令查看VPNv4路由的RT属性是否与本地VPN实例的import-extcommunity匹配:
display bgp vpnv4 routing-table <route>
若RT不匹配,路由不会被导入本地VPN实例路由表,显示为无效。
AS_PATH环路防护
若路由的AS_PATH中包含本地AS号(防环机制触发),需确认是否需要特殊处理:
在BGP-VPN实例视图下允许AS号重复(慎用)
peer <ip-address> allow-as-loop [<times>]
或使用AS替换(推荐)
peer <ip-address> substitute-as
2. 验证路由下一跳可达性
检查下一跳地址是否在全局路由表中可达:
display ip routing-table <next-hop-ip>
若下一跳为Null0
常见于跨域VPN或路由迭代失败(如案例中MSR路由器问题),需确保下一跳地址通过IGP/静态路由可达。
3. 检查路由策略过滤
确认是否配置了过滤策略(如filter-policy、route-policy)阻断路由:
display current-configuration | include "filter-policy|route-policy"
查看策略是否丢弃路由或修改关键属性(如Local-Preference、MED)。
4. BGP路由优选状态
使用命令查看路由是否未被优选(非best标志):
display bgp vpnv4 routing-table
状态码含义:表示合法,>表示最优。若仅有无>,说明路由因优先级、路径属性等未当选最优。
5. 隧道与标签分配
SRv6场景:确认Locator配置一致且SID分配正常:
display segment-routing ipv6 locator <name>
MPLS场景:检查标签分配状态:
display mpls lsp vpn-instance <vpn-name>
6. 跨域配置问题
Option B跨域:确认ASBR是否正确传递VPNv4路由,且下一跳未被重置(需peer next-hop-invariable)。
Option C跨域:检查多跳BGP(MP-EBGP)的下一跳是否可达。
7. 查看详细无效原因
使用命令明确标识无效原因:
display bgp vpnv4 routing-table <route> inactive
输出会显示具体原因(如RT mismatch、Next-hop unreachable)。
快速定位步骤:
1. 确认路由是否收到:
display bgp vpnv4 routing-table peer <peer-ip> received-routes
2. 检查本地VPN实例导入结果:
display ip routing-table vpn-instance <vpn-name> protocol bgp
3. 查看无效原因:
display bgp vpnv4 routing-table <route> inactive
注:案例中多次出现因RT不匹配、下一跳不可达、AS_PATH环路防护导致的路由无效问题,优先排查这些关键点。特殊场景(如Hub-Spoke)需结合allow-as-loop或substitute-as配置。
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论