測(cè)試VPN路由
1.RPMgd(機(jī)房1)的VPN路由
#sh ip route vrf VPN1
Codes: C - connected, B - BGP,* - candidate default……
Gateway of last resort is 10.10.5.69 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 21 subnets, 3 masks
C172.16.9.16/30 is directly connected, FastEthernet1/1.201
B*0.0.0.0/0[200/888]via10.10.5.69, w6d;
默認(rèn)路由是10.10.5.69,即機(jī)房2的RPM……
2.RPM1(機(jī)房1) 的VPN1路由:
#sh ip route vrf VPN1
Gateway of last resort is 172.16.2.2 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 21 subnets, 3 masks
B 172.16.9.16/30 [200/888] via 10.10.5.65, 1w6d
C172.16.2.0/28 is directly connected, FastEthernet1/1.200
S* 0.0.0.0/0 [1/0] via 172.16.2.2 ;默認(rèn)路由。 |
從以上路由,可以看到每個(gè)VPN的虛擬路由表中只有該VPN本身的路由,接入點(diǎn)之間已經(jīng)可以通訊了。
Ping測(cè)試
RPMgd#ping vrf VPN1
Protocol [ip]:
Target IP address: 172.16.2.2
Repeat count [5]: 100
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 100,100-byte ICMP Echos to 172.16.2.2,timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100),round-trip min/avg/max = 1/3/4 ms< |
BR>我們成功Ping到了目的地址172.16.2.2,平均時(shí)延為3ms,低于10ms的測(cè)試要求,而且沒有丟包現(xiàn)象。通過以上測(cè)試,該VPN測(cè)試通過。