We’re going to start with a very simple topology:
Instead of using one of our standard routing protocols to advertise the host networks between the SITE1 and SITE2 routers, we’ll rely on LISP. OSPF will be used to advertise the loopback on the MS/MR router within the Core network. We’ll start configuring LISP assuming the basic network is ready to go.
First, lets setup LISP the SITE1 router:
router lisp
locator-set SITE1
192.168.100.1 priority 10 weight 50
exit
!
database-mapping 192.168.5.0/24 locator-set SITE1
!
ipv4 itr map-resolver 192.168.255.3
ipv4 itr
ipv4 etr map-server 192.168.255.3 key secretkey
ipv4 etr
!
Now we’ll configure LISP on the SITE2 router:
router lisp
locator-set SITE2
192.168.100.2 priority 10 weight 50
exit
!
database-mapping 172.16.30.0/24 locator-set SITE2
!
ipv4 itr map-resolver 192.168.255.3
ipv4 itr
ipv4 etr map-server 192.168.255.3 key secretkey
ipv4 etr
!
Finally, we’ll configure the Mapping Server and Mapping resolver functionality on the MS/MR router:
router lisp
site SITE1
authentication-key secretkey
eid-prefix 192.168.5.0/24
exit
!
site SITE2
authentication-key secretkey
eid-prefix 172.16.30.0/24
exit
!
ipv4 map-server
ipv4 map-resolver
exit
Once this is configured, our LISP infrastructure should be complete. Let’s check:
SITE1#sh ip lisp
Instance ID: 0
Router-lisp ID: 0
Locator table: default
EID table: default
Ingress Tunnel Router (ITR): enabled
Egress Tunnel Router (ETR): enabled
Proxy-ITR Router (PITR): disabled
Proxy-ETR Router (PETR): disabled
Map Server (MS): disabled
Map Resolver (MR): disabled
Delegated Database Tree (DDT): disabled
Map-Request source: 192.168.5.1
ITR Map-Resolver(s): 192.168.255.3
ETR Map-Server(s): 192.168.255.3 (00:00:55)
xTR-ID: 0x3D4C0900-0x95932BE0-0x2F5AF1F6-0x4C919E94
...
And over on SITE2:
SITE2#sh ip lisp
Instance ID: 0
Router-lisp ID: 0
Locator table: default
EID table: default
Ingress Tunnel Router (ITR): enabled
Egress Tunnel Router (ETR): enabled
Proxy-ITR Router (PITR): disabled
Proxy-ETR Router (PETR): disabled
Map Server (MS): disabled
Map Resolver (MR): disabled
Delegated Database Tree (DDT): disabled
Map-Request source: 172.16.30.1
ITR Map-Resolver(s): 192.168.255.3
ETR Map-Server(s): 192.168.255.3 (00:00:16)
xTR-ID: 0xDC4A8044-0x87093251-0x602669CB-0x5B720F12
...
On the MS/MR Router, we can see that the ETR’s have registered with the LISP mapping system. Without this, LISP wouldn’t know the EID-to-RLOC mapping for each EID.
OTV-RTR3#sh lisp site
LISP Site Registration Information
Site Name Last Up Who Last Inst EID Prefix
Register Registered ID
SITE1 00:00:14 yes 192.168.100.1 192.168.5.0/24
SITE2 00:00:17 yes 192.168.100.2 172.16.30.0/24
Now, to show that LISP is working correctly, lets first show that we don’t have a route to the opposite site:
SITE1#sh ip route 172.16.30.101
% Network not in table
SITE1#ping 172.16.30.101
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.30.101, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
SITE2# sh ip route 192.168.5.101
% Network not in table
SITE2#ping 192.168.5.101
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.5.101, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
And since we didn’t configure a default route, there isn’t anything to fall back on.
Let’s test by pinging the SITE2 host:
[root@SITE1 ~]# ping 172.16.30.101
PING 172.16.30.101 (172.16.30.101) 56(84) bytes of data.
64 bytes from 172.16.30.101: icmp_seq=3 ttl=255 time=1.26 ms
64 bytes from 172.16.30.101: icmp_seq=4 ttl=255 time=4.57 ms
64 bytes from 172.16.30.101: icmp_seq=5 ttl=255 time=1.31 ms
^C
--- 172.16.30.101 ping statistics ---
5 packets transmitted, 3 received, 40% packet loss, time 4421ms
rtt min/avg/max/mdev = 1.268/1.374/1.466/0.086 ms
Looks good except for the two we lost at the beginning. Let’s try the reverse ping now:
[root@SITE2 ~]# ping 192.168.5.101
PING 192.168.5.101 (192.168.5.101) 56(84) bytes of data.
64 bytes from 192.168.5.101: icmp_seq=1 ttl=255 time=1.49 ms
64 bytes from 192.168.5.101: icmp_seq=2 ttl=255 time=1.31 ms
64 bytes from 192.168.5.101: icmp_seq=3 ttl=255 time=1.26 ms
64 bytes from 192.168.5.101: icmp_seq=4 ttl=255 time=4.57 ms
64 bytes from 192.168.5.101: icmp_seq=5 ttl=255 time=1.31 ms
^C
--- 192.168.5.101 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4001ms
rtt min/avg/max/mdev = 1.178/1.278/1.398/0.090 ms
So we have two way communication across our network, using LISP to locate and reach the opposite site. Next time we’ll dig a little deeper on what’s happening behind the scenes.
Very Good。 Thanks sharing.