测试VPN路由
1.RPMgd(机房1)的VPN路由
#sh ip route vrf VPN1
Codes: C - connected, B - BGP,* - candidate default……
Gateway of last resort is 10.10.5.69 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 21 subnets, 3 masks
C172.16.9.16/30 is directly connected, FastEthernet1/1.201
B*0.0.0.0/0[200/888]via10.10.5.69, w6d;
默认路由是10.10.5.69,即机房2的RPM……
2.RPM1(机房1) 的VPN1路由:
#sh ip route vrf VPN1
Gateway of last resort is 172.16.2.2 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 21 subnets, 3 masks
B 172.16.9.16/30 [200/888] via 10.10.5.65, 1w6d
C172.16.2.0/28 is directly connected, FastEthernet1/1.200
S* 0.0.0.0/0 [1/0] via 172.16.2.2 ;默认路由。 |
从以上路由,可以看到每个VPN的虚拟路由表中只有该VPN本身的路由,接入点之间已经可以通讯了。
Ping测试
RPMgd#ping vrf VPN1
Protocol [ip]:
Target IP address: 172.16.2.2
Repeat count [5]: 100
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 100,100-byte ICMP Echos to 172.16.2.2,timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100),round-trip min/avg/max = 1/3/4 ms< |
BR>我们成功Ping到了目的地址172.16.2.2,平均时延为3ms,低于10ms的测试要求,而且没有丢包现象。通过以上测试,该VPN测试通过。