要使路由在 Tier-0 路由器的上行链路上正常工作,必须建立到架顶式设备的连接。

前提条件

过程

  1. 登录到 NSX Edge CLI。
  2. NSX Edge 上,运行 get logical-routers 命令以查找 Tier-0 服务路由器的 VRF 编号。
    nsx-edge-1> get logical-routers
    Logical Router
    UUID        : 736a80e3-23f6-5a2d-81d6-bbefb2786666
    vrf         : 0
    type        : TUNNEL
    
    Logical Router
    UUID        : 421a2d0d-f423-46f1-93a1-2f9e366176c8
    vrf         : 5
    type        : SERVICE_ROUTER_TIER0
    
    Logical Router
    UUID        : f3ce9d7d-7123-47d6-aba6-45cf1388ca7b
    vrf         : 6
    type        : DISTRIBUTED_ROUTER
    
    Logical Router
    UUID        : c8e64eff-02b2-4462-94ff-89f3788f1a61
    vrf         : 7
    type        : SERVICE_ROUTER_TIER1
    
    Logical Router
    UUID        : fb6c3f1f-599f-4421-af8a-99692dff3dd4
    vrf         : 8
    type        : DISTRIBUTED_ROUTER
    
    
  3. 运行 vrf <number> 命令以进入 Tier-0 服务路由器上下文。
    nsx-edge-1> vrf 5
    nsx-edge1(tier0_sr)> 
    
  4. 在 Tier-0 服务路由器上,运行 get route 命令并确保在路由表中显示预期的路由。
    请注意,到 TOR 的路由显示为 connected (c)。
    nsx-edge1(tier0_sr)> get route
    Flags: t0c - Tier0-Connected, t0s - Tier0-Static, b - BGP,
    t0n - Tier0-NAT, t1s - Tier1-Static, t1c - Tier1-Connected,
    t1n: Tier1-NAT, t1l: Tier1-LB VIP, t1ls: Tier1-LB SNAT,
    t1d: Tier1-DNS FORWARDER, t1ipsec: Tier1-IPSec, isr: Inter-SR,
    > - selected route, * - FIB route
    
    Total number of routes: 11
    
    t1c> * 1.1.1.0/25 [3/0] via 100.64.1.1, downlink-282, 08w4d03h
    t1c> * 1.1.2.0/24 [3/0] via 100.64.1.1, downlink-282, 08w4d03h
    t0c> * 1.1.3.0/24 is directly connected, downlink-275, 08w4d03h
    b  > * 2.1.4.0/24 [20/0] via 40.40.40.10, uplink-273, 01w0d02h
    b  > * 10.182.48.0/20 [20/0] via 40.40.40.10, uplink-273, 01w0d02h
    t0c> * 40.40.40.0/24 is directly connected, uplink-273, 08w4d03h
    t0c> * 100.64.1.0/31 is directly connected, downlink-282, 08w4d03h
    t0c> * 169.254.0.0/24 is directly connected, downlink-277, 01w0d02h
    b  > * 172.17.0.0/16 [20/0] via 40.40.40.10, uplink-273, 01w0d02h
    t0c> * fc36:a750:db0d:7800::/64 is directly connected, downlink-282, 08w4d03h
    t0c> * fe80::/64 is directly connected, downlink-282, 08w4d03h
    
  5. 对 TOR 执行 ping 操作。
    nsx-edge1(tier0_sr)> ping	192.168.100.254
    PING 192.168.100.254 (192.168.100.254): 56 data bytes
    64 bytes from 192.168.100.254: icmp_seq=0 ttl=64 time=2.822 ms
    64 bytes from 192.168.100.254: icmp_seq=1 ttl=64 time=1.393 ms
    ^C
    nsx-edge1>
    --- 192.168.100.254 ping statistics ---
    3 packets transmitted, 2 packets received, 33.3% packet loss
    round-trip min/avg/max/stddev = 1.393/2.107/2.822/0.715 ms
    

结果

将在 Tier-0 逻辑路由器和物理路由器之间发送数据包以验证连接。

下一步做什么

根据您的网络要求,您可以配置静态路由或 BGP。请参见在管理器模式下配置静态路由使用管理器模式在 Tier-0 逻辑路由器上配置 BGP