Tuesday 28 August 2012

L3VPN over Multipoint L2TPv3 Tunnel






P Router
R1 Config

interface FastEthernet0/0
 ip address 10.10.10.6 255.255.255.252
interface FastEthernet0/1
 ip address 10.10.10.10 255.255.255.252
interface FastEthernet1/0
 ip address 10.10.10.2 255.255.255.252
router ospf 1
 network 0.0.0.0 255.255.255.255 area 0

PE Routers
R2 Config

ip vrf cusA
 rd 100:1
 route-target export 100:1
 route-target import 100:1
!
ip vrf l3vpn-l2tpv3
 rd 100:100
!
interface Loopback0
 ip address 10.10.10.102 255.255.255.255
!
interface Tunnel0
 ip vrf forwarding l3vpn-l2tpv3
 ip address 172.16.1.102 255.255.255.255
 tunnel source Loopback0
 tunnel mode l3vpn l2tpv3 multipoint
!
interface FastEthernet1/0
 ip address 10.10.10.5 255.255.255.252
!
interface FastEthernet1/1
 ip vrf forwarding cusA
 ip address 172.16.24.2 255.255.255.0
!
router ospf 1
 network 10.0.0.0 0.255.255.255 area 0
!
router bgp 1
 no synchronization
 bgp log-neighbor-changes
 neighbor 10.10.10.103 remote-as 1
 neighbor 10.10.10.103 update-source Loopback0
 neighbor 10.10.10.106 remote-as 1
 neighbor 10.10.10.106 update-source Loopback0
 no auto-summary
 !
 address-family ipv4 tunnel
 neighbor 10.10.10.103 activate
 neighbor 10.10.10.106 activate
 exit-address-family
 !
 address-family vpnv4
 neighbor 10.10.10.103 activate
 neighbor 10.10.10.103 send-community extended
 neighbor 10.10.10.103 route-map vpn-l2tpv3 in
 neighbor 10.10.10.106 activate
 neighbor 10.10.10.106 send-community both
 neighbor 10.10.10.106 route-map vpn-l2tpv3 in
 exit-address-family
 !
 address-family ipv4 vrf l3vpn-l2tpv3
 no synchronization
 exit-address-family
 !
 address-family ipv4 vrf cusA
 redistribute connected
 redistribute static
 no synchronization
 exit-address-family
!
ip route vrf cusA 4.4.4.4 255.255.255.255 172.16.24.4
ip route vrf l3vpn-l2tpv3 0.0.0.0 0.0.0.0 Tunnel0
!
route-map vpn-l2tpv3 permit 10
 set ip next-hop in-vrf l3vpn-l2tpv3

R3 Config

ip vrf cusA
 rd 100:1
 route-target export 100:1
 route-target import 100:1
!
ip vrf l3vpn-l2tpv3
 rd 100:100
!
interface Loopback0
 ip address 10.10.10.103 255.255.255.255
!
interface Tunnel0
 ip vrf forwarding l3vpn-l2tpv3
 ip address 172.16.1.103 255.255.255.255
 tunnel source Loopback0
 tunnel mode l3vpn l2tpv3 multipoint
!
interface FastEthernet1/0
 ip address 10.10.10.9 255.255.255.252
!
interface FastEthernet1/1
 ip vrf forwarding cusA
 ip address 172.16.35.3 255.255.255.0
!
router ospf 1
 network 10.0.0.0 0.255.255.255 area 0
!
router bgp 1
 no synchronization
 bgp log-neighbor-changes
 neighbor 10.10.10.102 remote-as 1
 neighbor 10.10.10.102 update-source Loopback0
 neighbor 10.10.10.106 remote-as 1
 neighbor 10.10.10.106 update-source Loopback0
 no auto-summary
 !
 address-family ipv4 tunnel
 neighbor 10.10.10.102 activate
 neighbor 10.10.10.106 activate
 exit-address-family
 !
 address-family vpnv4
 neighbor 10.10.10.102 activate
 neighbor 10.10.10.102 send-community extended
 neighbor 10.10.10.102 route-map vpn-l2tpv3 in
 neighbor 10.10.10.106 activate
 neighbor 10.10.10.106 send-community both
 neighbor 10.10.10.106 route-map vpn-l2tpv3 in
 exit-address-family
 !
 address-family ipv4 vrf l3vpn-l2tpv3
 no synchronization
 exit-address-family
 !
 address-family ipv4 vrf cusA
 redistribute connected
 redistribute static
 no synchronization
 exit-address-family
!
ip route vrf cusA 5.5.5.5 255.255.255.255 172.16.35.5
ip route vrf l3vpn-l2tpv3 0.0.0.0 0.0.0.0 Tunnel0
!
route-map vpn-l2tpv3 permit 10
 set ip next-hop in-vrf l3vpn-l2tpv3

R6 Config

ip vrf cusA
 rd 100:1
 route-target export 100:1
 route-target import 100:1
!
ip vrf l3vpn-l2tpv3
 rd 100:100
!
interface Loopback0
 ip address 10.10.10.106 255.255.255.255
!
interface Tunnel0
 ip vrf forwarding l3vpn-l2tpv3
 ip address 172.16.1.106 255.255.255.255
 tunnel source Loopback0
 tunnel mode l3vpn l2tpv3 multipoint
!
interface FastEthernet1/0
 ip address 10.10.10.1 255.255.255.252
!
interface FastEthernet1/1
 ip vrf forwarding cusA
 ip address 172.16.67.6 255.255.255.0
!
router ospf 1
 network 10.0.0.0 0.255.255.255 area 0
!
router bgp 1
 no synchronization
 bgp log-neighbor-changes
 neighbor 10.10.10.102 remote-as 1
 neighbor 10.10.10.102 update-source Loopback0
 neighbor 10.10.10.103 remote-as 1
 neighbor 10.10.10.103 update-source Loopback0
 no auto-summary
 !
 address-family ipv4 tunnel
 neighbor 10.10.10.102 activate
 neighbor 10.10.10.103 activate
 exit-address-family
 !
 address-family vpnv4
 neighbor 10.10.10.102 activate
 neighbor 10.10.10.102 send-community both
 neighbor 10.10.10.102 route-map vpn-l2tpv3 in
 neighbor 10.10.10.103 activate
 neighbor 10.10.10.103 send-community both
 neighbor 10.10.10.103 route-map vpn-l2tpv3 in
 exit-address-family
 !
 address-family ipv4 vrf l3vpn-l2tpv3
 no synchronization
 exit-address-family
 !
 address-family ipv4 vrf cusA
 redistribute connected
 redistribute static
 no synchronization
 exit-address-family
!
ip route vrf cusA 7.7.7.7 255.255.255.255 172.16.67.7
ip route vrf l3vpn-l2tpv3 0.0.0.0 0.0.0.0 Tunnel0
!
route-map vpn-l2tpv3 permit 10
 set ip next-hop in-vrf l3vpn-l2tpv3

CE Routers
R4 Config

interface Loopback0
 ip address 4.4.4.4 255.255.255.255
!
interface FastEthernet0/0
 ip address 172.16.24.4 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 172.16.24.2

R5 Config

interface Loopback0
 ip address 5.5.5.5 255.255.255.255
!
interface FastEthernet0/0
 ip address 172.16.35.5 255.255.255.0
ip route 0.0.0.0 0.0.0.0 172.16.35.3

R7 Config

interface Loopback0
 ip address 7.7.7.7 255.255.255.255
!
interface FastEthernet0/0
 ip address 172.16.67.7 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 172.16.67.6

Verification

R2#show ip bgp ipv4 tunnel

   Network          Next Hop            Metric LocPrf Weight Path
*> 10.10.10.102/32  0.0.0.0                  0         32768 ?
*>i10.10.10.103/32  10.10.10.103             0    100      0 ?
*>i10.10.10.106/32  10.10.10.106             0    100      0 ?

R2#show ip bgp vpnv4 all

   Network          Next Hop            Metric LocPrf Weight Path
Route Distinguisher: 100:1 (default for vrf cusA)
*> 4.4.4.4/32       172.16.24.4              0         32768 ?
*>i5.5.5.5/32       10.10.10.103             0    100      0 ?
*>i7.7.7.7/32       10.10.10.106             0    100      0 ?
*> 172.16.24.0/24   0.0.0.0                  0         32768 ?
*>i172.16.35.0/24   10.10.10.103             0    100      0 ?
*>i172.16.67.0/24   10.10.10.106             0    100      0 ?

R4#ping 5.5.5.5 source loopback 0
!!!!!

R4#ping 7.7.7.7 source loopback 0
!!!!!

No comments:

Post a Comment