為(Huawei)作為全球領先的信息與通信技術(ICT)解決方案供應商,其網絡設備廣泛應用于企業網絡和運營商網絡中。邊界網關協議(Border Gateway Protocol,BGP)是互聯網的主要路由協議,用于在不同自治系統(AS)之間交換路由信息。掌握華為設備的BGP命令對于網絡工程師至關重要,因為這不僅涉及日常的網絡運維,還影響到網絡的整體性能和安全性。本文將詳細介紹華為設備中的BGP命令,包括其功能、使用方法和配置示例。
BGP是一個路徑矢量協議,主要用于在不同自治系統之間交換路由信息。BGP有以下幾個關鍵特性:
在華為設備上,BGP的配置命令主要分為全局配置命令和接口配置命令。
[Huawei] bgp <as-number>
例:
[Huawei] bgp 65001
[Huawei-bgp] router-id <ip-address>
例:
[Huawei-bgp] router-id 1.1.1.1
[Huawei-bgp] peer <peer-ip> as-number <as-number>
例:
[Huawei-bgp] peer 192.168.1.2 as-number 65002
[Huawei-bgp] peer <peer-ip> connect-interface <interface-type> <interface-number>
例:
[Huawei-bgp] peer 192.168.1.2 connect-interface GigabitEthernet 0/0/1
[Huawei-bgp] peer <peer-ip> description <description>
例:
[Huawei-bgp] peer 192.168.1.2 description "Peer with ISP"
[Huawei-bgp] import-route static
[Huawei-bgp] peer <peer-ip> preferred-value <value>
例:
[Huawei-bgp] peer 192.168.1.2 preferred-value 200
[Huawei-bgp] peer <peer-ip> route-policy <route-policy-name> import
[Huawei-bgp] peer <peer-ip> route-policy <route-policy-name> export
例:
[Huawei-bgp] peer 192.168.1.2 route-policy MED_IN import
[Huawei-bgp] peer 192.168.1.2 route-policy MED_OUT export
[Huawei] interface <interface-type> <interface-number>
[Huawei-<interface-name>] ip address <ip-address> <subnet-mask>
例:
[Huawei] interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1] ip address 192.168.1.1 255.255.255.0
[Huawei] ip community-list <list-number> permit <community>
例:
[Huawei] ip community-list 1 permit 100:1
[Huawei-bgp] peer <peer-ip> route-policy <route-policy-name> export
例:
[Huawei-bgp] peer 192.168.1.2 route-policy SET_COMMUNITY export
[Huawei-bgp] aggregate <network> mask <mask> summary-only
例:
[Huawei-bgp] aggregate 10.0.0.0 255.255.0.0 summary-only
[Huawei-bgp] aggregate <network> mask <mask> as-set
例:
[Huawei-bgp] aggregate 10.0.0.0 255.255.0.0 as-set
[Huawei-bgp] peer <peer-ip> reflect-client
例:
[Huawei-bgp] peer 192.168.1.2 reflect-client
[Huawei-bgp] peer <peer-ip> route-reflector-client
例:
[Huawei-bgp] peer 192.168.1.2 route-reflector-client
[Huawei] ip ip-prefix <prefix-name> index <index> permit <ip-address> <mask-length>
例:
[Huawei] ip ip-prefix PREFIX1 index 10 permit 192.168.0.0 16
[Huawei-bgp] peer <peer-ip> route-policy <route-policy-name> import
[Huawei-bgp] peer <peer-ip> route-policy <route-policy-name> export
例:
[Huawei-bgp] peer 192.168.1.2 route-policy POLICY_IN import
[Huawei-bgp] peer 192.168.1.2 route-policy POLICY_OUT export
[Huawei] ip as-path-filter <filter-number> permit <as-path>
例:
[Huawei] ip as-path-filter 1 permit ^100$
[Huawei-bgp] peer <peer-ip> filter-policy <filter-number> import
例:
[Huawei-bgp] peer 192.168.1.2 filter-policy 1 import
[Huawei] display bgp
[Huawei] display bgp peer
[Huawei] display bgp routing-table
[Huawei] display bgp summary
[Huawei] debugging bgp all
[Huawei] undo debugging bgp all
一個大型企業或運營商網絡遍布幾個地域,不同地域間的不同部門不能進行互訪,相同部門可以通過骨干網絡進行互訪。可依此建立BGP/MPLS IP VPN網絡。
組網需求
如圖1所示,某企業網絡遍布省、地市和縣三個地域,組網如下:
省、地市、縣級的路由設備(使用USG)劃分在骨干網上,彼此路由可達。
骨干網設備中,包含核心設備P和邊界設備PE。企業包含兩個一級部門,即部門1和部門2。骨干網的每臺PE都連接著兩個邊緣設備(即CE),這兩個CE劃分到不同的部門。如,PE1設備連接著CE1和CE2,其中CE1屬于部門1,CE2屬于部門2。
使用USG作為其PE設備和CE設備。
該公司網絡需實現以下需求:
省、地市、縣級的骨干網設備之間可以相互通信。
相同部門間可以通過骨干網進行通信,不同部門之間不能通信。
圖1 BGP/MPLS IP VPN組網圖
網絡規劃
根據企業網絡情況和需求,網絡規劃如下:
省、地市、縣級的骨干網設備需要進行通信,可將在PE之間運行OSPF協議,并配置MP-IBGP對等體關系。
省、地市、縣級PE連接的CE劃分在不同的VPN中,并在PE與CE之間建立EBGP對等體關系,引入VPN路由。這樣,劃分在同一個VPN中的CE可以通過各自連接的PE進行通信,不同VPN中的CE不能通信。
由于PE1~PE6的配置基本相同,以PE1、PE2、PE3為例進行配置。
操作步驟
1 配置相關接口加入安全域,并配置域間包過濾規則。具體配置過程略。
2 在MPLS骨干網上配置IGP協議,實現骨干網PE和P的互通。這里使用OSPF協議。
# 配置PE1。
<USG> system-view
[USG] sysname PE1
[PE1] interface loopback 1
[PE1-LoopBack1] ip address 1.1.1.9 32
[PE1-LoopBack1] quit
[PE1] interface GigabitEthernet 0/0/1
[PE1-GigabitEthernet0/0/1] ip address 172.1.1.1 24
[PE1-GigabitEthernet0/0/1] quit
[PE1] ospf 1 router-id 1.1.1.9
[PE1-ospf-1] area 0
[PE1-ospf-1-area-0.0.0.0] network 172.1.1.0 0.0.0.255
[PE1-ospf-1-area-0.0.0.0] network 1.1.1.9 0.0.0.0
[PE1-ospf-1-area-0.0.0.0] quit
[PE1-ospf-1] quit
# 配置PE2。
<USG> system-view
[USG] sysname PE2
[PE2] interface loopback 1
[PE2-LoopBack1] ip address 2.2.2.9 32
[PE2-LoopBack1] quit
[PE2] interface GigabitEthernet 0/0/1
[PE2-GigabitEthernet0/0/1] ip address 172.1.1.2 24
[PE2-GigabitEthernet0/0/1] quit
[PE2] interface GigabitEthernet 0/0/3
[PE2-GigabitEthernet0/0/3] ip address 172.2.1.1 24
[PE2-GigabitEthernet0/0/3] quit
[PE2] ospf 1 router-id 2.2.2.9
[PE2-ospf-1] area 0
[PE2-ospf-1-area-0.0.0.0] network 172.1.1.0 0.0.0.255
[PE2-ospf-1-area-0.0.0.0] network 172.2.1.0 0.0.0.255
[PE2-ospf-1-area-0.0.0.0] network 2.2.2.9 0.0.0.0
[PE2-ospf-1-area-0.0.0.0] quit
[PE2-ospf-1] quit
# 配置PE3。
<USG> system-view
[USG] sysname PE3
[PE3] interface loopback 1
[PE3-LoopBack1] ip address 3.3.3.9 32
[PE3-LoopBack1] quit
[PE3] interface GigabitEthernet0/0/1
[PE3-GigabitEthernet0/0/1] ip address 172.2.1.2 24
[PE3-GigabitEthernet0/0/1] quit
[PE3] ospf 1 router-id 3.3.3.9
[PE3-ospf-1] area 0
[PE3-ospf-1-area-0.0.0.0] network 172.2.1.0 0.0.0.255
[PE3-ospf-1-area-0.0.0.0] network 3.3.3.9 0.0.0.0
[PE3-ospf-1-area-0.0.0.0] quit
[PE3-ospf-1] quit
配置完成后,PE1、PE2、PE3之間應能建立OSPF鄰居關系,執行display ospf peer命令可以看到鄰居狀態為Full。執行display ip routing-table命令可以看到PE之間學習到對方的Loopback1路由。
以PE1的顯示為例:
[PE1] display ospf peer
OSPF Process 1 with Router ID 1.1.1.9
Neighbors
Area 0.0.0.0 interface 172.1.1.1(GigabitEthernet0/0/1)'s neighbors
Router ID: 2.2.2.9 Address: 172.1.1.2 GR State: Normal
State: Full Mode:Nbr is Master Priority: 1
DR: 172.1.1.1 BDR: 172.1.1.2 MTU: 1500
Dead timer due in 38 sec
Neighbor is up for 00:02:44
Authentication Sequence: [ 0 ]
[PE1] display ip routing-table
Route Flags: R - relied, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 9 Routes : 9
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.1.1.9/32 Direct 0 0 D 127.0.0.1 InLoopBack0
2.2.2.9/32 OSPF 10 2 D 172.1.1.2 GigabitEthernet0/0/1
3.3.3.9/32 OSPF 10 3 D 172.1.1.2 GigabitEthernet0/0/1
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
172.1.1.0/24 Direct 0 0 D 172.1.1.1 GigabitEthernet0/0/1
172.1.1.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
172.1.1.2/32 Direct 0 0 D 172.1.1.2 GigabitEthernet0/0/1
172.2.1.0/24 OSPF 10 2 D 172.1.1.2 GigabitEthernet0/0/1
3 在MPLS骨干網上配置MPLS基本功能和MPLS LDP,建立LDP LSP。
# 配置PE1。
[PE1] mpls lsr-id 1.1.1.9
[PE1] mpls
[PE1-mpls] lsp-trigger all
[PE1-mpls] quit
[PE1] mpls ldp
[PE1-mpls-ldp] quit
[PE1] interface GigabitEthernet 0/0/1
[PE1-GigabitEthernet0/0/1] mpls
[PE1-GigabitEthernet0/0/1] mpls ldp
[PE1-GigabitEthernet0/0/1] quit
# 配置PE2。
[PE2] mpls lsr-id 2.2.2.9
[PE2] mpls
[PE2-mpls] lsp-trigger all
[PE2-mpls] quit
[PE2] mpls ldp
[PE2-mpls-ldp] quit
[PE2] interface GigabitEthernet 0/0/1
[PE2-GigabitEthernet0/0/1] mpls
[PE2-GigabitEthernet0/0/1] mpls ldp
[PE2-GigabitEthernet0/0/1] quit
[PE2] interface GigabitEthernet 0/0/3
[PE2-GigabitEthernet0/0/3] mpls
[PE2-GigabitEthernet0/0/3] mpls ldp
[PE2-GigabitEthernet0/0/3] quit
# 配置PE3。
[PE3] mpls lsr-id 3.3.3.9
[PE3] mpls
[PE3-mpls] lsp-trigger all
[PE3-mpls] quit
[PE3] mpls ldp
[PE3-mpls-ldp] quit
[PE3] interface GigabitEthernet 0/0/1
[PE3-GigabitEthernet0/0/1] mpls
[PE3-GigabitEthernet0/0/1] mpls ldp
[PE3-GigabitEthernet0/0/1] quit
上述配置完成后,PE1與PE2、PE2與PE3之間應能建立LDP會話,執行display mpls ldp session命令可以看到顯示結果中Status項為“Operational”,即會話已經建立。執行display mpls ldp lsp命令,可以看到LDP LSP的建立情況。
以PE1的顯示為例:
[PE1] display mpls ldp session
LDP Session(s) in Public Network
-------------------------------------------------------------------------
Peer-ID Status LAM SsnRole SsnAge KA-Sent/Rcv
-------------------------------------------------------------------------
2.2.2.9:0 Operational DU Passive 000:00:01 5/5
-------------------------------------------------------------------------
TOTAL: 1 session(s) Found.
LAM : Label Advertisement Mode SsnAge Unit : DDD:HH:MM
[PE1] display mpls ldp lsp
LDP LSP Information
------------------------------------------------------------------
SN DestAddress/Mask In/OutLabel Next-Hop In/Out-Interface
------------------------------------------------------------------
1 1.1.1.9/32 3/NULL 127.0.0.1 GE0/0/1/InLoop0
2 2.2.2.9/32 NULL/3 172.1.1.2 -------/GE0/0/1
3 3.3.3.9/32 NULL/1024 172.1.1.2 -------/GE0/0/1
------------------------------------------------------------------
TOTAL: 3 Normal LSP(s) Found.
TOTAL: 0 Liberal LSP(s) Found.
A '*' before an LSP means the LSP is not established
A '*' before a Label means the USCB or DSCB is stale
4 在PE設備上配置VPN實例,將CE接入PE。
# 配置PE1。
[PE1] ip vpn-instance vpna
[PE1-vpn-instance-vpna] route-distinguisher 100:1
[PE1-vpn-instance-vpna] vpn-target 111:1 both
[PE1-vpn-instance-vpna] quit
[PE1] ip vpn-instance vpnb
[PE1-vpn-instance-vpnb] route-distinguisher 100:2
[PE1-vpn-instance-vpnb] vpn-target 222:2 both
[PE1-vpn-instance-vpnb] quit
[PE1] interface GigabitEthernet 0/0/2
[PE1-GigabitEthernet0/0/2] ip binding vpn-instance vpna
[PE1-GigabitEthernet0/0/2] ip address 10.1.1.2 24
[PE1-GigabitEthernet0/0/2] quit
[PE1] interface GigabitEthernet 2/0/0
[PE1-GigabitEthernet2/0/0] ip binding vpn-instance vpnb
[PE1-GigabitEthernet2/0/0] ip address 10.2.1.2 24
[PE1-GigabitEthernet2/0/0] quit
# 配置PE2。
[PE2] ip vpn-instance vpna
[PE2-vpn-instance-vpna] route-distinguisher 200:1
[PE2-vpn-instance-vpna] vpn-target 111:1 both
[PE2-vpn-instance-vpna] quit
[PE2] ip vpn-instance vpnb
[PE2-vpn-instance-vpnb] route-distinguisher 200:2
[PE2-vpn-instance-vpnb] vpn-target 222:2 both
[PE2-vpn-instance-vpnb] quit
[PE2] interface GigabitEthernet 0/0/2
[PE2-GigabitEthernet0/0/2] ip binding vpn-instance vpna
[PE2-GigabitEthernet0/0/2] ip address 10.3.1.2 24
[PE2-GigabitEthernet0/0/2] quit
[PE2] interface GigabitEthernet 2/0/0
[PE2-GigabitEthernet2/0/0] ip binding vpn-instance vpnb
[PE2-GigabitEthernet2/0/0] ip address 10.4.1.2 24
[PE2-GigabitEthernet2/0/0] quit
# 配置PE3。
[PE3] ip vpn-instance vpna
[PE3-vpn-instance-vpna] route-distinguisher 300:1
[PE3-vpn-instance-vpna] vpn-target 111:1 both
[PE3-vpn-instance-vpna] quit
[PE3] ip vpn-instance vpnb
[PE3-vpn-instance-vpnb] route-distinguisher 300:2
[PE3-vpn-instance-vpnb] vpn-target 222:2 both
[PE3-vpn-instance-vpnb] quit
[PE3] interface GigabitEthernet 0/0/2
[PE3-GigabitEthernet0/0/2] ip binding vpn-instance vpna
[PE3-GigabitEthernet0/0/2] ip address 10.5.1.2 24
[PE3-GigabitEthernet0/0/2] quit
[PE3] interface GigabitEthernet 2/0/0
[PE3-GigabitEthernet2/0/0] ip binding vpn-instance vpnb
[PE3-GigabitEthernet2/0/0] ip address 10.6.1.2 24
[PE3-GigabitEthernet2/0/0] quit
# 按圖1配置各CE的接口IP地址,配置過程略。
配置完成后,在PE設備上執行display ip vpn-instance verbose命令可以看到VPN實例的配置情況。各PE能ping通自己接入的CE。
說明:
當PE上有多個綁定了同一個VPN的接口,則使用ping -vpn-instance命令ping對端PE接入的CE時,要指定源IP地址,即要指定ping -vpn-instance vpn-instance-name -a source-ip-address dest-ip-address命令中的參數-a source-ip-address,否則可能ping不通。
以PE1和CE1為例:
[PE1] display ip vpn-instance verbose
Total VPN-Instances configured : 2
VPN-Instance Name and ID : vpna, 1
Create date : 2010/03/21 11:30:35
Up time : 0 days, 00 hours, 05 minutes and 19 seconds
Route Distinguisher : 100:1
Export VPN Targets : 111:1
Import VPN Targets : 111:1
Label policy: label per route
Interfaces : GigabitEthernet0/0/2
VPN-Instance Name and ID : vpnb, 2
Create date : 2010/03/21 11:31:18
Up time : 0 days, 00 hours, 04 minutes and 36 seconds
Route Distinguisher : 100:2
Export VPN Targets : 222:2
Import VPN Targets : 222:2
Interfaces : GigabitEthernet2/0/0
[PE1] ping -vpn-instance vpna 10.1.1.1
PING 10.1.1.1: 56 data bytes, press CTRL_C to break
Reply from 10.1.1.1: bytes=56 Sequence=1 ttl=255 time=56 ms
Reply from 10.1.1.1: bytes=56 Sequence=2 ttl=255 time=4 ms
Reply from 10.1.1.1: bytes=56 Sequence=3 ttl=255 time=4 ms
Reply from 10.1.1.1: bytes=56 Sequence=4 ttl=255 time=52 ms
Reply from 10.1.1.1: bytes=56 Sequence=5 ttl=255 time=3 ms
--- 10.1.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max=3/23/56 ms
5 在PE與CE之間建立EBGP對等體關系,引入VPN路由。以PE1和CE1為例。PE2、CE2以及PE3、CE3的配置與此相同,不再重復。
# 配置CE1。
[CE1] bgp 65410
[CE1-bgp] peer 10.1.1.2 as-number 100
[CE1-bgp] import-route direct
[CE1-bgp] quit
# 配置PE1。
[PE1] bgp 100
[PE1-bgp] ipv4-family vpn-instance vpna
[PE1-bgp-vpna] peer 10.1.1.1 as-number 65410
[PE1-bgp-vpna] import-route direct
[PE1-bgp-vpna] quit
[PE1-bgp] ipv4-family vpn-instance vpnb
[PE1-bgp-vpnb] peer 10.2.1.1 as-number 65420
[PE1-bgp-vpnb] import-route direct
[PE1-bgp-vpnb] quit
配置完成后,在PE設備上執行display bgp vpnv4 vpn-instance peer命令,可以看到PE與CE之間的BGP對等體關系已建立,并達到Established狀態,即BGP對等體間可以交換報文信息。
以PE1與CE1的對等體關系為例:
[PE1] display bgp vpnv4 vpn-instance vpna peer
BGP local router ID : 1.1.1.9
Local AS number : 100
Total number of peers : 1 Peers in established state : 1
Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv
10.1.1.1 4 65410 11 9 0 00:06:37 Established 1
6 在PE之間建立MP-IBGP對等體關系。
# 配置PE1。
[PE1] bgp 100
[PE1-bgp] peer 2.2.2.9 as-number 100
[PE1-bgp] peer 2.2.2.9 connect-interface loopback 1
[PE1-bgp] ipv4-family vpnv4
[PE1-bgp-af-vpnv4] peer 2.2.2.9 enable
[PE1-bgp-af-vpnv4] quit
[PE1-bgp] peer 3.3.3.9 as-number 100
[PE1-bgp] peer 3.3.3.9 connect-interface loopback 1
[PE1-bgp] ipv4-family vpnv4
[PE1-bgp-af-vpnv4] peer 3.3.3.9 enable
[PE1-bgp] quit
# 配置PE2。
[PE2] bgp 100
[PE2-bgp] peer 1.1.1.9 as-number 100
[PE2-bgp] peer 1.1.1.9 connect-interface loopback 1
[PE2-bgp] ipv4-family vpnv4
[PE2-bgp-af-vpnv4] peer 1.1.1.9 enable
[PE2-bgp-af-vpnv4] quit
[PE2-bgp] peer 3.3.3.9 as-number 100
[PE2-bgp] peer 3.3.3.9 connect-interface loopback 1
[PE2-bgp] ipv4-family vpnv4
[PE2-bgp-af-vpnv4] peer 3.3.3.9 enable
[PE2-bgp-af-vpnv4] quit
[PE2-bgp] quit
# 配置PE3。
[PE3] bgp 100
[PE3-bgp] peer 1.1.1.9 as-number 100
[PE3-bgp] peer 1.1.1.9 connect-interface loopback 1
[PE3-bgp] ipv4-family vpnv4
[PE3-bgp-af-vpnv4] peer 1.1.1.9 enable
[PE3-bgp] peer 2.2.2.9 as-number 100
[PE3-bgp] peer 2.2.2.9 connect-interface loopback 1
[PE3-bgp] ipv4-family vpnv4
[PE3-bgp-af-vpnv4] peer 2.2.2.9 enable
[PE3-bgp-af-vpnv4] quit
[PE3-bgp] quit
配置完成后,在PE設備上執行display bgp peer或display bgp vpnv4 all peer命令,可以看到PE之間的BGP對等體關系已建立,并達到Established狀態,即BGP對等體間可以交換報文信息。
[PE1] display bgp peer
BGP local router ID : 1.1.1.9
Local AS number : 100
Total number of peers : 1 Peers in established state : 1
Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv
3.3.3.9 4 100 2 6 0 00:00:12 Established 0
2.2.2.9 4 100 14 29 0 00:00:32 Established 0
[PE1] display bgp vpnv4 all peer
BGP local router ID : 1.1.1.9
Local AS number : 100
Total number of peers : 3 Peers in established state : 3
Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv
3.3.3.9 4 100 12 18 0 00:09:38 Established 0
Peer of vpn instance:
vpn instance vpna :
10.1.1.1 4 65410 25 25 0 00:17:57 Established 1
vpn instance vpnb :
10.2.1.1 4 65420 21 22 0 00:17:10 Established 1
7 檢查配置結果。
在PE設備上執行display ip routing-table vpn-instance命令,可以看到去往對端CE的路由。
以PE1的顯示為例:
[PE1] display ip routing-table vpn-instance vpna
Route Flags: R - relied, D - download to fib
------------------------------------------------------------------------------
Routing Tables: vpna
Destinations : 3 Routes : 3
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.1.1.0/24 Direct 0 0 D 10.1.1.2 GigabitEthernet0/0/2
10.1.1.2/32 Direct 0 0 D 127.0.0.1 InLoopBack0
10.3.1.0/24 BGP 255 0 RD 3.3.3.9 GigabitEthernet0/0/1
[PE1] display ip routing-table vpn-instance vpnb
Route Flags: R - relied, D - download to fib
------------------------------------------------------------------------------
Routing Tables: vpnb
Destinations : 3 Routes : 3
Destination/Mask Proto Pre Cost Flags NextHop Interface
10.2.1.0/24 Direct 0 0 D 10.2.1.2 GigabitEthernet2/0/0
10.2.1.2/32 Direct 0 0 D 127.0.0.1 InLoopBack0
10.4.1.0/24 BGP 255 0 RD 3.3.3.9 GigabitEthernet0/0/1
同一VPN的CE能夠相互Ping通,不同VPN的CE不能相互Ping通。
例如:CE1能夠Ping通CE3(10.3.1.1),但不能Ping通CE4(10.4.1.1)。
[CE1] ping 10.3.1.1
PING 10.3.1.1: 56 data bytes, press CTRL_C to break
Reply from 10.3.1.1: bytes=56 Sequence=1 ttl=253 time=72 ms
Reply from 10.3.1.1: bytes=56 Sequence=2 ttl=253 time=34 ms
Reply from 10.3.1.1: bytes=56 Sequence=3 ttl=253 time=50 ms
Reply from 10.3.1.1: bytes=56 Sequence=4 ttl=253 time=50 ms
Reply from 10.3.1.1: bytes=56 Sequence=5 ttl=253 time=34 ms
--- 10.3.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max=34/48/72 ms
[CE1] ping 10.4.1.1
PING 10.4.1.1: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- 10.4.1.1 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss