Studying the Routing Bits: mpls

Showing posts with label mpls. Show all posts

Thursday, 21 February 2013

6VPE_Inter-AS-6VPE

Task

To get the full connectivity between site 1,2 and 3.

Configuration

R1

vrf definition one
rd 12:12
!
address-family ipv6
route-target import 3:3
route-target import 12:12
route-target export 12:12
exit-address-family
!
ipv6 unicast-routing
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
ip address 192.168.12.1 255.255.255.0
speed auto
duplex auto
mpls ip
!
interface FastEthernet1/1
vrf forwarding one
no ip address
speed auto
duplex auto
ipv6 address 2001:1:4::1/64
!
router ospf 1
log-adjacency-changes
network 1.1.1.1 0.0.0.0 area 0
network 192.168.12.1 0.0.0.0 area 0
!
router bgp 12
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 2.2.2.2 remote-as 12
neighbor 2.2.2.2 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv6
neighbor 2.2.2.2 activate
neighbor 2.2.2.2 send-community both
exit-address-family
!
address-family ipv6 vrf one
no synchronization
neighbor 2001:1:4::4 remote-as 4
neighbor 2001:1:4::4 activate
exit-address-family
!
mpls ldp router-id Loopback0 force

R2

vrf definition one
rd 12:12
!
address-family ipv6
route-target export 12:12
route-target import 12:12
route-target import 3:3
exit-address-family
!
ipv6 unicast-routing
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
ip address 192.168.12.2 255.255.255.0
speed auto
duplex auto
mpls ip
!
interface FastEthernet1/1
ip address 192.168.23.2 255.255.255.0
speed auto
duplex auto
mpls bgp forwarding
!
interface FastEthernet2/0
vrf forwarding one
no ip address
duplex full
ipv6 address 2001:2:5::2/64
!
router ospf 1
log-adjacency-changes
network 2.2.2.2 0.0.0.0 area 0
network 192.168.12.2 0.0.0.0 area 0
!
router bgp 12
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 1.1.1.1 remote-as 12
neighbor 1.1.1.1 update-source Loopback0
neighbor 192.168.23.3 remote-as 3
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv6
neighbor 1.1.1.1 activate
neighbor 1.1.1.1 send-community both
neighbor 1.1.1.1 next-hop-self
neighbor 192.168.23.3 activate
neighbor 192.168.23.3 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute static
no synchronization
exit-address-family
!
ipv6 route vrf one 2001::5/128 2001:2:5::5
!
mpls ldp router-id Loopback0 force

R3

vrf definition one
rd 3:3
!
address-family ipv6
route-target export 3:3
route-target import 3:3
route-target import 12:12
exit-address-family
!
ipv6 unicast-routing
!
interface FastEthernet1/0
ip address 192.168.23.3 255.255.255.0
speed auto
duplex auto
mpls bgp forwarding
!
interface FastEthernet1/1
vrf forwarding one
no ip address
speed auto
duplex auto
ipv6 address 2001:3:6::3/64
!
router bgp 3
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 192.168.23.2 remote-as 12
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv6
neighbor 192.168.23.2 activate
neighbor 192.168.23.2 send-community both
exit-address-family
!
address-family ipv6 vrf one
redistribute static
no synchronization
exit-address-family
!
ipv6 route vrf one 2001::6/128 2001:3:6::6

R4

ipv6 unicast-routing
!
interface Loopback0
no ip address
ipv6 address 2001::4/128
!
interface FastEthernet1/0
no ip address
speed auto
duplex auto
ipv6 address 2001:1:4::4/64
!
router bgp 4
bgp router-id 4.4.4.4
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 2001:1:4::1 remote-as 12
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family ipv6
no synchronization
network 2001::4/128
neighbor 2001:1:4::1 activate
exit-address-family

R5

ipv6 unicast-routing
!
interface Loopback0
no ip address
ipv6 address 2001::5/128
!
interface FastEthernet1/0
no ip address
speed auto
duplex auto
ipv6 address 2001:2:5::5/64
!
ipv6 route ::/0 2001:2:5::2

R6

ipv6 unicast-routing
!
interface Loopback0
no ip address
ipv6 address 2001::6/128
!
interface FastEthernet1/0
no ip address
speed auto
duplex auto
ipv6 address 2001:3:6::6/64
!
ipv6 route ::/0 2001:3:6::3

Verification

R4#ping 2001::5 source loopback 0
Packet sent with a source address of 2001::4
!!!!!

R4#ping 2001::6 source loopback 0
Packet sent with a source address of 2001::4
!!!!!

GNS FILE : http://www.4shared.com/rar/Kg5avCct/6VPE_Inter-AS-6VPE.html

Saturday, 16 February 2013

MPLS VPN PE-CE Protocol(OSPF) Part 1

In this topic, provider will use OSPF as a PE-CE protocol. R5 Lo 0 is in area 0, Lo 1 is in area 1, Lo 2 is redistributed into OSPF.

In this section, provider will run OSPF without running OSPF super-backbone, but same domain-id for the OSPF process used for adjacent with customer.

Configuration

R1

ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.1 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
ip vrf forwarding one
ip address 192.168.14.1 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
log-adjacency-changes
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.14.1 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0001.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 2.2.2.2 remote-as 1
neighbor 2.2.2.2 update-source Loopback0
!
address-family ipv4
neighbor 2.2.2.2 activate
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 2.2.2.2 activate
neighbor 2.2.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R2

ip vrf one
rd 1:2
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.2 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet1/0
ip vrf forwarding one
ip address 192.168.25.2 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
log-adjacency-changes
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.25.2 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0002.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor IBGP peer-group
neighbor IBGP remote-as 1
neighbor IBGP update-source Loopback0
neighbor 1.1.1.1 peer-group IBGP
!
address-family vpnv4
neighbor IBGP send-community extended
neighbor IBGP route-reflector-client
neighbor 1.1.1.1 activate
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R4

interface FastEthernet0/0
ip address 192.168.14.4 255.255.255.0
duplex auto
speed auto
!
router ospf 1
log-adjacency-changes
network 4.4.4.4 0.0.0.0 area 0

R5

interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface Loopback1
ip address 5.5.5.1 255.255.255.255
!
interface Loopback2
ip address 5.5.5.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.25.5 255.255.255.0
speed 100
full-duplex
!
router ospf 1
log-adjacency-changes
redistribute connected subnets route-map CONN
network 5.5.5.1 0.0.0.0 area 1
network 5.5.5.5 0.0.0.0 area 0
network 192.168.25.5 0.0.0.0 area 0
!
ip prefix-list LO2 seq 5 permit 5.5.5.2/32
!
route-map CONN permit 10
match ip address prefix-list LO2

Verification

Due to without running super backbone and running same domain-id, R5 Lo0 and Lo1 will appeared as inter area routes on R4.

R4#show ip route ospf
O IA 192.168.25.0/24 [110/11] via 192.168.14.1, 00:08:06, FastEthernet0/0
     5.0.0.0/32 is subnetted, 3 subnets
O IA    5.5.5.5 [110/12] via 192.168.14.1, 00:08:06, FastEthernet0/0
O IA    5.5.5.1 [110/12] via 192.168.14.1, 00:08:06, FastEthernet0/0
O E2    5.5.5.2 [110/20] via 192.168.14.1, 00:08:06, FastEthernet0/0
GNS File : http://www.4shared.com/rar/9hHAdS2o/mpls_vpn_pe-ce_with_ospf__no_s.html

MPLS VPN PE-CE Protocol(OSPF) Part 2

In this topic, provider will use OSPF as a PE-CE protocol. R5 Lo 0 is in area 0, Lo 1 is in area 1, Lo 2 is redistributed into OSPF.

In this section, provider will run OSPF without running OSPF super-backbone, different domain-id for the OSPF process used for adjacent with customer.

Configuration

R1

ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.1 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
ip vrf forwarding one
ip address 192.168.14.1 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
log-adjacency-changes
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.14.1 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0001.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 2.2.2.2 remote-as 1
neighbor 2.2.2.2 update-source Loopback0
!
address-family ipv4
neighbor 2.2.2.2 activate
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 2.2.2.2 activate
neighbor 2.2.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R2

ip vrf one
rd 1:2
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.2 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet1/0
ip vrf forwarding one
ip address 192.168.25.2 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
domain-id type 0005 value 000000020200
log-adjacency-changes
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.25.2 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0002.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor IBGP peer-group
neighbor IBGP remote-as 1
neighbor IBGP update-source Loopback0
neighbor 1.1.1.1 peer-group IBGP
!
address-family vpnv4
neighbor IBGP send-community extended
neighbor IBGP route-reflector-client
neighbor 1.1.1.1 activate
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R4

interface FastEthernet0/0
ip address 192.168.14.4 255.255.255.0
duplex auto
speed auto
!
router ospf 1
log-adjacency-changes
network 4.4.4.4 0.0.0.0 area 0

R5

interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface Loopback1
ip address 5.5.5.1 255.255.255.255
!
interface Loopback2
ip address 5.5.5.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.25.5 255.255.255.0
speed 100
full-duplex
!
router ospf 1
log-adjacency-changes
redistribute connected subnets route-map CONN
network 5.5.5.1 0.0.0.0 area 1
network 5.5.5.5 0.0.0.0 area 0
network 192.168.25.5 0.0.0.0 area 0
!
ip prefix-list LO2 seq 5 permit 5.5.5.2/32
!
route-map CONN permit 10
match ip address prefix-list LO2

Verification

Due to without running super backbone and running different domain-id, all prefixes will appeared as external routes on R4.

R4#show ip route ospf
O E2 192.168.25.0/24 [110/1] via 192.168.14.1, 00:00:49, FastEthernet0/0
     5.0.0.0/32 is subnetted, 3 subnets
O E2    5.5.5.5 [110/2] via 192.168.14.1, 00:00:49, FastEthernet0/0
O E2    5.5.5.1 [110/2] via 192.168.14.1, 00:00:49, FastEthernet0/0
O E2    5.5.5.2 [110/20] via 192.168.14.1, 00:49:12, FastEthernet0/0

GNS File : http://www.4shared.com/rar/7AuMIJzg/mpls_vpn_pe-ce_with_ospf__no_s.html

MPLS VPN PE-CE Protocol(OSPF) Part 3

In this topic, provider will use OSPF as a PE-CE protocol. R5 Lo 0 is in area 0, Lo 1 is in area 1, Lo 2 is redistributed into OSPF.

In this section, provider will run OSPF super-backbone for the OSPF process used for adjacent with customer. On R5, I add another loopback network which is Lo 10 and put into area 1.

Configuration

R1

ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface Loopback1
ip vrf forwarding one
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.1 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
ip vrf forwarding one
ip address 192.168.14.1 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
log-adjacency-changes
area 0 sham-link 1.1.1.1 2.2.2.2
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.14.1 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0001.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 2.2.2.2 remote-as 1
neighbor 2.2.2.2 update-source Loopback0
!
address-family ipv4
neighbor 2.2.2.2 activate
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 2.2.2.2 activate
neighbor 2.2.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
network 1.1.1.1 mask 255.255.255.255
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R2

ip vrf one
rd 1:2
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface Loopback1
ip vrf forwarding one
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.2 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet1/0
ip vrf forwarding one
ip address 192.168.25.2 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
log-adjacency-changes
area 0 sham-link 2.2.2.2 1.1.1.1
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.25.2 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0002.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor IBGP peer-group
neighbor IBGP remote-as 1
neighbor IBGP update-source Loopback0
neighbor 1.1.1.1 peer-group IBGP
!
address-family vpnv4
neighbor IBGP send-community extended
neighbor IBGP route-reflector-client
neighbor 1.1.1.1 activate
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
network 2.2.2.2 mask 255.255.255.255
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R4

interface FastEthernet0/0
ip address 192.168.14.4 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
router ospf 1
log-adjacency-changes
network 192.168.14.4 0.0.0.0 area 0

R5

interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface Loopback1
ip address 5.5.5.1 255.255.255.255
!
interface Loopback2
ip address 5.5.5.2 255.255.255.255
!
interface Loopback10
ip address 5.5.5.10 255.255.255.255
ip ospf 1 area 1
!
interface FastEthernet0/0
ip address 192.168.25.5 255.255.255.0
speed 100
full-duplex
!
router ospf 1
log-adjacency-changes
redistribute connected subnets route-map CONN
network 5.5.5.1 0.0.0.0 area 1
network 5.5.5.5 0.0.0.0 area 0
network 192.168.25.5 0.0.0.0 area 0
!
ip prefix-list LO2 seq 5 permit 5.5.5.2/32
!
route-map CONN permit 10
match ip address prefix-list LO2

Verification

Due to running super backbone area on Provider routers, provider networks is considered virtual area 0 from the customer routers point of view. So R5 Lo 0 is appeared as intra area routes, Lo1 and Lo10 appeared as inter area routes. In other words, other side of the customer router can see the correct OSPF route type.

R4#show ip route ospf
O    192.168.25.0/24 [110/12] via 192.168.14.1, 00:17:19, FastEthernet0/0
     5.0.0.0/32 is subnetted, 4 subnets
O       5.5.5.5 [110/13] via 192.168.14.1, 00:17:19, FastEthernet0/0
O IA    5.5.5.1 [110/13] via 192.168.14.1, 00:17:19, FastEthernet0/0
O E2    5.5.5.2 [110/20] via 192.168.14.1, 00:13:15, FastEthernet0/0
O IA    5.5.5.10 [110/13] via 192.168.14.1, 00:13:20, FastEthernet0/0

Note

Due to super backbone emulated, from R1 perspective, prefixes from R5 are learnt through OSPF, not via MP BGP anymore.

R1#show ip route vrf one

Gateway of last resort is not set
     1.0.0.0/32 is subnetted, 1 subnets
C       1.1.1.1 is directly connected, Loopback1
     2.0.0.0/32 is subnetted, 1 subnets
B       2.2.2.2 [200/0] via 2.2.2.2, 00:27:32
C    192.168.14.0/24 is directly connected, FastEthernet0/1
O    192.168.25.0/24 [110/2] via 2.2.2.2, 00:27:17
     5.0.0.0/32 is subnetted, 4 subnets
O       5.5.5.5 [110/3] via 2.2.2.2, 00:27:17
O IA    5.5.5.1 [110/3] via 2.2.2.2, 00:27:17
O E2    5.5.5.2 [110/20] via 2.2.2.2, 00:23:02
O IA    5.5.5.10 [110/3] via 2.2.2.2, 00:23:08

R1#show bgp vpnv4 unicast vrf one

Route Distinguisher: 1:1 (default for vrf one)
*> 1.1.1.1/32       0.0.0.0                  0         32768 i
*>i2.2.2.2/32       2.2.2.2                  0    100      0 i
r>i5.5.5.1/32       2.2.2.2                  2    100      0 ?
r>i5.5.5.2/32       2.2.2.2                 20    100      0 ?
r>i5.5.5.5/32       2.2.2.2                  2    100      0 ?
r>i5.5.5.10/32      2.2.2.2                  2    100      0 ?
*> 192.168.14.0     0.0.0.0                  0         32768 ?
r>i192.168.25.0     2.2.2.2                  0    100      0 ?

So consequently, if R1 wants to filter out some prefixes when advertising to R4, it cannot be filtered at the BGP > OSPF level. For testing this, I will add 5.5.5.10/32 under "SHAM" prefix, which prefix is denied when redistributing from BGP to OSPF. But it doesn't work.

R1(config)#ip prefix-list SHAM seq 20 permit 5.5.5.10/32

R4#show ip route ospf
O    192.168.25.0/24 [110/12] via 192.168.14.1, 00:32:38, FastEthernet0/0
     5.0.0.0/32 is subnetted, 4 subnets
O       5.5.5.5 [110/13] via 192.168.14.1, 00:32:38, FastEthernet0/0
O IA    5.5.5.1 [110/13] via 192.168.14.1, 00:32:38, FastEthernet0/0
O E2    5.5.5.2 [110/20] via 192.168.14.1, 00:28:33, FastEthernet0/0
O IA    5.5.5.10 [110/13] via 192.168.14.1, 00:28:38, FastEthernet0/0

GNS File : http://www.4shared.com/rar/4ERKR8Oy/mpls_vpn_pe-ce_with_ospf__supr.html

MPLS VPN PE-CE Protocol(OSPF) Part 4

In this topic, provider will use OSPF as a PE-CE protocol. R5 Lo 0 is in area 0, Lo 1 is in area 1, Lo 2 is redistributed into OSPF.
In this lab, I bring up another PE router R3. R1, R2, and R3 are NOT emulating OSPF super backbone area 0. We will focus more on 5.5.5.2/32 prefix.

Configuration

R1

ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.1 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
ip vrf forwarding one
ip address 192.168.14.1 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
log-adjacency-changes
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.14.1 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0001.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 2.2.2.2 remote-as 1
neighbor 2.2.2.2 update-source Loopback0
!
address-family ipv4
neighbor 2.2.2.2 activate
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 2.2.2.2 activate
neighbor 2.2.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R2

ip vrf one
rd 1:2
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.2 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
ip address 192.168.23.2 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet1/0
ip vrf forwarding one
ip address 192.168.25.2 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
log-adjacency-changes
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.25.2 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0002.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor IBGP peer-group
neighbor IBGP remote-as 1
neighbor IBGP update-source Loopback0
neighbor 1.1.1.1 peer-group IBGP
neighbor 3.3.3.3 peer-group IBGP
!
address-family vpnv4
neighbor IBGP send-community extended
neighbor IBGP route-reflector-client
neighbor 1.1.1.1 activate
neighbor 3.3.3.3 activate
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R3

ip vrf one
rd 1:3
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.23.3 255.255.255.0
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
ip vrf forwarding one
ip address 192.168.34.3 255.255.255.0
duplex auto
speed auto
!
router ospf 1 vrf one
log-adjacency-changes
redistribute bgp 1 subnets route-map BLK_SHAM
network 192.168.34.3 0.0.0.0 area 0
!
router isis
net 49.0000.0000.0003.00
metric-style wide transition
passive-interface Loopback0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 2.2.2.2 remote-as 1
neighbor 2.2.2.2 update-source Loopback0
!
address-family vpnv4
neighbor 2.2.2.2 activate
neighbor 2.2.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf one
redistribute ospf 1 vrf one match internal external 1 external 2
no synchronization
exit-address-family
!
ip prefix-list SHAM seq 5 permit 1.1.1.1/32
ip prefix-list SHAM seq 10 permit 2.2.2.2/32
ip prefix-list SHAM seq 15 permit 3.3.3.3/32
!
route-map BLK_SHAM deny 10
match ip address prefix-list SHAM
!
route-map BLK_SHAM permit 100
!
mpls ldp router-id Loopback0 force

R4

interface FastEthernet0/0
ip address 192.168.14.4 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.34.4 255.255.255.0
duplex auto
speed auto
!
router ospf 1
log-adjacency-changes
network 192.168.14.4 0.0.0.0 area 0
network 192.168.34.4 0.0.0.0 area 0

R5

interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface Loopback1
ip address 5.5.5.1 255.255.255.255
!
interface Loopback2
ip address 5.5.5.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.25.5 255.255.255.0
speed 100
full-duplex
!
router ospf 1
log-adjacency-changes
redistribute connected subnets route-map CONN
network 5.5.5.1 0.0.0.0 area 1
network 5.5.5.5 0.0.0.0 area 0
network 192.168.25.5 0.0.0.0 area 0
!
ip prefix-list LO2 seq 5 permit 5.5.5.2/32
!
route-map CONN permit 10
match ip address prefix-list LO2

Verification

So far everything looks fine. As I mentioned previously, we will focus only on 5.5.5.5/32

R4#show ip route ospf
O IA 192.168.25.0/24 [110/11] via 192.168.34.3, 00:11:20, FastEthernet0/1
                     [110/11] via 192.168.14.1, 00:11:20, FastEthernet0/0
     5.0.0.0/32 is subnetted, 3 subnets
O IA    5.5.5.5 [110/12] via 192.168.34.3, 00:11:20, FastEthernet0/1
                [110/12] via 192.168.14.1, 00:11:20, FastEthernet0/0
O IA    5.5.5.1 [110/12] via 192.168.34.3, 00:11:20, FastEthernet0/1
                [110/12] via 192.168.14.1, 00:11:20, FastEthernet0/0
O E2    5.5.5.2 [110/20] via 192.168.34.3, 00:11:10, FastEthernet0/1
                [110/20] via 192.168.14.1, 00:11:10, FastEthernet0/0

R1#show bgp vpnv4 unicast vrf one
   Network          Next Hop            Metric LocPrf Weight Path
Route Distinguisher: 1:1 (default for vrf one)
*>i5.5.5.1/32       2.2.2.2                  2    100      0 ?
*>i5.5.5.2/32       2.2.2.2                 20    100      0 ?
*>i5.5.5.5/32       2.2.2.2                  2    100      0 ?
* i192.168.14.0     3.3.3.3                 20    100      0 ?
*>                  0.0.0.0                  0         32768 ?
*>i192.168.25.0     2.2.2.2                  0    100      0 ?
*> 192.168.34.0     192.168.14.4            20         32768 ?
* i                 3.3.3.3                  0    100      0 ?

R3# show bgp vpnv4 unicast vrf one

Route Distinguisher: 1:3 (default for vrf one)
*>i5.5.5.1/32       2.2.2.2                  2    100      0 ?
*>i5.5.5.2/32       2.2.2.2                 20    100      0 ?
*>i5.5.5.5/32       2.2.2.2                  2    100      0 ?
*> 192.168.14.0     192.168.34.4            20         32768 ?
* i                 1.1.1.1                  0    100      0 ?
*>i192.168.25.0     2.2.2.2                  0    100      0 ?
* i192.168.34.0     1.1.1.1                 20    100      0 ?
*>                  0.0.0.0                  0         32768 ?

R4#show ip ospf database external 5.5.5.2
            OSPF Router with ID (4.4.4.4) (Process ID 1)
                Type-5 AS External Link States
LS age: 12 (DoNotAge)
Options: (No TOS-capability, DC)
LS Type: AS External Link
Link State ID: 5.5.5.2 (External Network Number )
Advertising Router: 5.5.5.1
LS Seq Number: 80000007
Checksum: 0x94E4
Length: 36
Network Mask: /32
        Metric Type: 2 (Larger than any link state path)
        TOS: 0
        Metric: 20
        Forward Address: 0.0.0.0
        External Route Tag: 0
Routing Bit Set on this LSA
LS age: 1144
Options: (No TOS-capability, DC)
LS Type: AS External Link
Link State ID: 5.5.5.2 (External Network Number )
Advertising Router: 192.168.14.1
LS Seq Number: 80000001
Checksum: 0xF84C
Length: 36
Network Mask: /32
        Metric Type: 2 (Larger than any link state path)
        TOS: 0
        Metric: 20
        Forward Address: 0.0.0.0
        External Route Tag: 3489660929
Routing Bit Set on this LSA
LS age: 1145
Options: (No TOS-capability, DC)
LS Type: AS External Link
Link State ID: 5.5.5.2 (External Network Number )
Advertising Router: 192.168.34.3
LS Seq Number: 80000001
Checksum: 0x60CE
Length: 36
Network Mask: /32
        Metric Type: 2 (Larger than any link state path)
        TOS: 0
        Metric: 20
        Forward Address: 0.0.0.0
        External Route Tag: 3489660929

http://internetworklabs.blogspot.sg/2011/08/cisco-mpls-vpn-ospf-down-bit-domain-tag.html
GNS File : http://www.4shared.com/rar/Zwd8_TUT/mpls_vpn_pe-ce_with_ospf__inje.html

Note

Now I will try to inject routing loop by configuring different domain-tag on either R1 or R3.

R3#show run | b router ospf
router ospf 1 vrf one
domain-tag 3

Depending on the timing, different outputs can be generated. The output below is by the time I was testing,

R1#show bgp vpnv4 unicast vrf one

Route Distinguisher: 1:1 (default for vrf one)
*>i5.5.5.1/32       2.2.2.2                  2    100      0 ?
*> 5.5.5.2/32       192.168.14.4            20         32768 ?
* i                 2.2.2.2                 20    100      0 ?
*>i5.5.5.5/32       2.2.2.2                  2    100      0 ?
* i192.168.14.0     3.3.3.3                 20    100      0 ?
*>                  0.0.0.0                  0         32768 ?
*>i192.168.25.0     2.2.2.2                  0    100      0 ?
*> 192.168.34.0     192.168.14.4            20         32768 ?
* i                 3.3.3.3                  0    100      0 ?

R3#show bgp vpnv4 unicast vrf one

Route Distinguisher: 1:3 (default for vrf one)
*>i5.5.5.1/32       2.2.2.2                  2    100      0 ?
* i5.5.5.2/32       1.1.1.1                 20    100      0 ?
*>i                 2.2.2.2                 20    100      0 ?
*>i5.5.5.5/32       2.2.2.2                  2    100      0 ?
*> 192.168.14.0     192.168.34.4            20         32768 ?
* i                 1.1.1.1                  0    100      0 ?
*>i192.168.25.0     2.2.2.2                  0    100      0 ?
* i192.168.34.0     1.1.1.1                 20    100      0 ?
*>                  0.0.0.0                  0         32768 ?

R4#traceroute 5.5.5.2
Type escape sequence to abort.
Tracing the route to 5.5.5.2
1 192.168.34.3 48 msec 72 msec 36 msec
2 192.168.25.2 [MPLS: Label 25 Exp 0] 32 msec 60 msec 36 msec
3 192.168.25.5 80 msec * 84 msec

It looks no problem. But actually, there is a loop. In order to test this, I will shutdown R5 Lo2 network, and check the outcome.

interface Loopback2
ip address 5.5.5.2 255.255.255.255
shutdown

R4#traceroute 5.5.5.2
Type escape sequence to abort.
Tracing the route to 5.5.5.2
1 192.168.34.3 68 msec 80 msec 28 msec
2 192.168.23.2 [MPLS: Labels 16/22 Exp 0] 44 msec 28 msec 20 msec
3 192.168.14.1 [MPLS: Label 22 Exp 0] 52 msec 60 msec 40 msec
4 192.168.14.4 24 msec 60 msec 20 msec
5 192.168.34.3 48 msec 112 msec 92 msec
6 192.168.23.2 [MPLS: Labels 16/22 Exp 0] 104 msec 104 msec 68 msec
7 192.168.14.1 [MPLS: Label 22 Exp 0] 104 msec 108 msec 44 msec
8 192.168.14.4 64 msec 88 msec 40 msec
9 192.168.34.3 88 msec 108 msec 128 msec
10 192.168.23.2 [MPLS: Labels 16/22 Exp 0] 108 msec 168 msec 120 msec
11 192.168.14.1 [MPLS: Label 22 Exp 0] 120 msec 100 msec 84 msec
12 192.168.14.4 116 msec 124 msec 124 msec
13 192.168.34.3 144 msec 228 msec 132 msec
14 192.168.23.2 [MPLS: Labels 16/22 Exp 0] 148 msec 188 msec 164 msec
15 192.168.14.1 [MPLS: Label 22 Exp 0] 196 msec 216 msec 92 msec
16 192.168.14.4 128 msec 184 msec 176 msec
R1#show bgp vpnv4 unicast vrf one

Route Distinguisher: 1:1 (default for vrf one)
*>i5.5.5.1/32       2.2.2.2                  2    100      0 ?
*> 5.5.5.2/32       192.168.14.4            20         32768 ?
*>i5.5.5.5/32       2.2.2.2                  2    100      0 ?
* i192.168.14.0     3.3.3.3                 20    100      0 ?
*>                  0.0.0.0                  0         32768 ?
*>i192.168.25.0     2.2.2.2                  0    100      0 ?
*> 192.168.34.0     192.168.14.4            20         32768 ?
* i                 3.3.3.3                  0    100      0 ?

R2#show bgp vpnv4 unicast vrf one

Route Distinguisher: 1:2 (default for vrf one)
*> 5.5.5.1/32       192.168.25.5             2         32768 ?
*>i5.5.5.2/32       1.1.1.1                 20    100      0 ?
*> 5.5.5.5/32       192.168.25.5             2         32768 ?
* i192.168.14.0     3.3.3.3                 20    100      0 ?
*>i                 1.1.1.1                  0    100      0 ?
*> 192.168.25.0     0.0.0.0                  0         32768 ?
* i192.168.34.0     1.1.1.1                 20    100      0 ?
*>i                 3.3.3.3                  0    100      0 ?

R3#show bgp vpnv4 unicast vrf one

Route Distinguisher: 1:3 (default for vrf one)
*>i5.5.5.1/32       2.2.2.2                  2    100      0 ?
*>i5.5.5.2/32       1.1.1.1                 20    100      0 ?
*>i5.5.5.5/32       2.2.2.2                  2    100      0 ?
*> 192.168.14.0     192.168.34.4            20         32768 ?
* i                 1.1.1.1                  0    100      0 ?
*>i192.168.25.0     2.2.2.2                  0    100      0 ?
* i192.168.34.0     1.1.1.1                 20    100      0 ?
*>                  0.0.0.0                  0         32768 ?

Tuesday, 5 February 2013

AToM_Interworking(Ethernet to Frame-Relay)

Ethernet - R1>R4

Frame-Relay - R3>R5

Configuration

pseudowire-class R4R5

encapsulation mpls
interworking ip
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet1/0
ip address 192.168.12.1 255.255.255.0
speed auto
duplex auto
mpls ip
!
interface FastEthernet1/1
no ip address
speed auto
duplex auto
no keepalive
xconnect 3.3.3.3 1435 pw-class R4R5
!
router ospf 1
log-adjacency-changes
network 1.1.1.1 0.0.0.0 area 0
network 192.168.12.1 0.0.0.0 area 0

interface FastEthernet0/0

ip address 192.168.12.2 255.255.255.0
speed 100
full-duplex
mpls ip
!
interface FastEthernet0/1
ip address 192.168.23.2 255.255.255.0
speed 100
full-duplex
mpls ip
!
router ospf 1
log-adjacency-changes
network 192.168.12.2 0.0.0.0 area 0
network 192.168.23.2 0.0.0.0 area 0

frame-relay switching

!
pseudowire-class R4R5
encapsulation mpls
interworking ip
!
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface POS1/0
mtu 1500
no ip address
encapsulation frame-relay
frame-relay intf-type dce
!
interface FastEthernet2/0
ip address 192.168.23.3 255.255.255.0
speed auto
duplex auto
mpls ip
!
router ospf 1
log-adjacency-changes
network 3.3.3.3 0.0.0.0 area 0
network 192.168.23.3 0.0.0.0 area 0
!
connect FR POS1/0 45 l2transport
xconnect 1.1.1.1 1435 pw-class R4R5

interface Loopback0

ip address 4.4.4.4 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.45.4 255.255.255.0
ip ospf network point-to-point
!
router ospf 1
log-adjacency-changes
network 4.4.4.4 0.0.0.0 area 0
network 192.168.45.4 0.0.0.0 area 0

interface Loopback0

ip address 5.5.5.5 255.255.255.255
!
interface POS1/0
mtu 1500
ip address 192.168.45.5 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-point
frame-relay map ip 192.168.45.4 45 broadcast
!
router ospf 1
log-adjacency-changes
network 5.5.5.5 0.0.0.0 area 0
network 192.168.45.5 0.0.0.0 area 0

Verification

R1#show mpls l2transport vc

Local intf Local circuit Dest address VC ID Status

------------- -------------------------- --------------- ---------- ----------
Fa1/1 Ethernet 3.3.3.3 1435 UP

R4#ping 192.168.45.5

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.45.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 48/86/144 ms

GNS File : http://www.4shared.com/rar/QXFOwL5J/atom_interworking.html

Thursday, 13 September 2012

ISP Connectioin Overview and Configuration of all Nodes

R1 Config

ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet1/0
ip address 192.168.12.1 255.255.255.0
mpls ip
!
interface FastEthernet2/0
ip vrf forwarding one
ip address 192.168.14.1 255.255.255.0
mpls ip
!
router ospf 2 vrf one
log-adjacency-changes
redistribute bgp 1 subnets
network 192.168.14.1 0.0.0.0 area 0
!
router ospf 1
log-adjacency-changes
network 1.1.1.1 0.0.0.0 area 0
network 192.168.12.1 0.0.0.0 area 0
network 192.168.13.1 0.0.0.0 area 0
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 3.3.3.3 remote-as 1
neighbor 3.3.3.3 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 3.3.3.3 activate
neighbor 3.3.3.3 send-community extended
exit-address-family
!
address-family ipv4 vrf one
no synchronization
redistribute ospf 2 vrf one
exit-address-family

R2 Config

interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.2 255.255.255.0
mpls ip
!
interface FastEthernet0/1
ip address 192.168.23.2 255.255.255.0
mpls ip
!
router ospf 1
log-adjacency-changes
network 2.2.2.2 0.0.0.0 area 0
network 192.168.12.2 0.0.0.0 area 0
network 192.168.23.2 0.0.0.0 area 0

R3 Config

ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet1/1
ip address 192.168.23.3 255.255.255.0
speed auto
duplex auto
mpls ip
!
interface FastEthernet2/0
ip vrf forwarding one
ip address 192.168.36.3 255.255.255.0
mpls bgp forwarding
!
router ospf 1
log-adjacency-changes
network 3.3.3.3 0.0.0.0 area 0
network 192.168.13.3 0.0.0.0 area 0
network 192.168.23.3 0.0.0.0 area 0
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 1.1.1.1 remote-as 1
neighbor 1.1.1.1 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 1.1.1.1 activate
neighbor 1.1.1.1 send-community extended
exit-address-family
!
address-family ipv4 vrf one
no synchronization
neighbor 192.168.36.6 remote-as 2
neighbor 192.168.36.6 activate
neighbor 192.168.36.6 send-label
exit-address-family

R4 Config

interface Loopback0
ip address 4.4.4.4 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.14.4 255.255.255.0
mpls ip
!
interface FastEthernet0/1
ip address 192.168.45.4 255.255.255.0
mpls ip
!
router ospf 1
log-adjacency-changes
network 4.4.4.4 0.0.0.0 area 0
network 192.168.14.4 0.0.0.0 area 0
network 192.168.45.4 0.0.0.0 area 0

R5 Config

ip vrf two
rd 2:2
route-target export 2:2
route-target import 2:2
!
pseudowire-class AS3-AS4
encapsulation mpls
!
interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface FastEthernet1/0
ip address 192.168.45.5 255.255.255.0
mpls ip
!
interface FastEthernet1/1
xconnect 7.7.7.7 34 pw-class AS3-AS4
!
interface FastEthernet2/0
ip vrf forwarding two
ip address 192.168.155.5 255.255.255.0
!
router ospf 1
log-adjacency-changes
network 5.5.5.5 0.0.0.0 area 0
network 192.168.45.5 0.0.0.0 area 0
!
router bgp 2
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 7.7.7.7 remote-as 2
neighbor 7.7.7.7 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 7.7.7.7 activate
neighbor 7.7.7.7 send-community extended
exit-address-family
!
address-family ipv4 vrf two
no synchronization
redistribute connected
redistribute static
exit-address-family
!
ip route vrf two 15.15.15.15 255.255.255.255 192.168.155.15

R6 Config

interface Loopback0
ip address 6.6.6.6 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.36.6 255.255.255.0
!
interface FastEthernet0/1
ip address 192.168.67.6 255.255.255.0
mpls ip
!
router ospf 1
log-adjacency-changes
redistribute bgp 2 subnets route-map AS2LOOPBACKS
network 6.6.6.6 0.0.0.0 area 0
network 192.168.67.6 0.0.0.0 area 0
!
router bgp 2
bgp log-neighbor-changes
neighbor 192.168.36.3 remote-as 1
!
address-family ipv4
redistribute ospf 1 route-map AS2LOOPBACKS
neighbor 192.168.36.3 activate
neighbor 192.168.36.3 send-label
no auto-summary
no synchronization
exit-address-family
!
ip prefix-list AS2LOOPBACKS seq 5 permit 4.4.4.4/32
ip prefix-list AS2LOOPBACKS seq 10 permit 5.5.5.5/32
ip prefix-list AS2LOOPBACKS seq 15 permit 6.6.6.6/32
ip prefix-list AS2LOOPBACKS seq 20 permit 7.7.7.7/32
!
route-map AS2LOOPBACKS permit 10
match ip address prefix-list AS2LOOPBACKS

R7 Config

ip vrf two
rd 2:2
route-target export 2:2
route-target import 2:2
!
pseudowire-class AS3-AS4
encapsulation mpls
!
interface Loopback0
ip address 7.7.7.7 255.255.255.255
!
interface FastEthernet1/0
ip address 192.168.67.7 255.255.255.0
mpls ip
!
interface FastEthernet1/1
xconnect 5.5.5.5 34 pw-class AS3-AS4
!
interface FastEthernet2/0
ip vrf forwarding two
ip address 192.168.167.7 255.255.255.0
!
router ospf 1
log-adjacency-changes
network 7.7.7.7 0.0.0.0 area 0
network 192.168.67.7 0.0.0.0 area 0
!
router bgp 2
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 5.5.5.5 remote-as 2
neighbor 5.5.5.5 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 5.5.5.5 activate
neighbor 5.5.5.5 send-community extended
exit-address-family
!
address-family ipv4 vrf two
no synchronization
redistribute connected
redistribute static
exit-address-family
!
ip route vrf two 16.16.16.16 255.255.255.255 192.168.167.16

R8 Config

ip vrf 34
rd 34:34
route-target export 34:34
route-target import 34:34
!
interface Loopback0
ip address 8.8.8.8 255.255.255.255
!
interface Loopback1
ip address 8.8.8.81 255.255.255.255
!
interface Tunnel0
ip address 3.4.34.8 255.255.255.0
mpls bgp forwarding
tunnel source Loopback1
tunnel destination 10.10.10.11
!
interface FastEthernet1/0
ip address 192.168.89.8 255.255.255.0
mpls ip
!
interface FastEthernet1/1
ip address 192.168.128.8 255.255.255.0
!
interface FastEthernet2/0
ip vrf forwarding 34
ip address 192.168.138.8 255.255.255.0
!
router ospf 1
log-adjacency-changes
network 8.8.8.8 0.0.0.0 area 0
network 192.168.89.8 0.0.0.0 area 0
!
router bgp 3
bgp log-neighbor-changes
neighbor 3.4.34.10 remote-as 4
neighbor 10.10.10.10 remote-as 4
neighbor 10.10.10.10 ebgp-multihop 4
neighbor 10.10.10.10 update-source Loopback0
neighbor 192.168.128.12 remote-as 12
!
address-family ipv4
no synchronization
network 8.8.8.81 mask 255.255.255.255
no neighbor 3.4.34.10 activate
no neighbor 10.10.10.10 activate
neighbor 192.168.128.12 activate
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 3.4.34.10 activate
neighbor 3.4.34.10 send-community extended
neighbor 10.10.10.10 activate
neighbor 10.10.10.10 send-community extended
neighbor 10.10.10.10 route-map LOCAL-PREFERENCE-200 in
exit-address-family
!
address-family ipv4 vrf 34
no synchronization
redistribute connected
redistribute static
exit-address-family
!
ip route vrf 34 13.13.13.13 255.255.255.255 192.168.138.13
!
route-map LOCAL-PREFERENCE-200 permit 10
set local-preference 200
!
mpls ldp router-id Loopback0 force

R9 Config

interface Loopback0
ip address 9.9.9.9 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.119.9 255.255.255.0
!
interface FastEthernet0/1
ip address 192.168.89.9 255.255.255.0
mpls ip
!
router ospf 1
log-adjacency-changes
redistribute bgp 3 subnets route-map AS4-LOOPBACKS
network 9.9.9.9 0.0.0.0 area 0
network 192.168.89.9 0.0.0.0 area 0
!
router bgp 3
no synchronization
bgp log-neighbor-changes
redistribute ospf 1 route-map AS3-LOOPBACKS
neighbor 192.168.119.11 remote-as 4
neighbor 192.168.119.11 send-label
no auto-summary
!
ip prefix-list AS3-LOOPBACKS seq 5 permit 8.8.8.8/32
!
ip prefix-list AS4-LOOPBACKS seq 5 permit 10.10.10.10/32
!
route-map AS3-LOOPBACKS permit 10
match ip address prefix-list AS3-LOOPBACKS
!
route-map AS4-LOOPBACKS permit 10
match ip address prefix-list AS4-LOOPBACKS
!
mpls ldp router-id Loopback0 force

R10 Config

ip vrf 34
rd 34:34
route-target export 34:34
route-target import 34:34
!
interface Loopback0
ip address 10.10.10.10 255.255.255.255
!
interface Loopback1
ip address 10.10.10.11 255.255.255.255
!
interface Tunnel0
ip address 3.4.34.10 255.255.255.0
mpls bgp forwarding
tunnel source Loopback1
tunnel destination 8.8.8.81
!
interface FastEthernet1/0
ip address 192.168.110.10 255.255.255.0
mpls ip
!
interface FastEthernet1/1
ip address 192.168.112.10 255.255.255.0
!
interface FastEthernet2/0
ip vrf forwarding 34
ip address 192.168.114.10 255.255.255.0
!
router ospf 1
log-adjacency-changes
network 10.10.10.10 0.0.0.0 area 0
network 192.168.110.10 0.0.0.0 area 0
!
router bgp 4
bgp log-neighbor-changes
neighbor 3.4.34.8 remote-as 3
neighbor 8.8.8.8 remote-as 3
neighbor 8.8.8.8 ebgp-multihop 4
neighbor 8.8.8.8 update-source Loopback0
neighbor 192.168.112.12 remote-as 12
!
address-family ipv4
no synchronization
network 10.10.10.11 mask 255.255.255.255
no neighbor 3.4.34.8 activate
no neighbor 8.8.8.8 activate
neighbor 192.168.112.12 activate
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 3.4.34.8 activate
neighbor 3.4.34.8 send-community extended
neighbor 8.8.8.8 activate
neighbor 8.8.8.8 send-community extended
neighbor 8.8.8.8 route-map LOCAL-PREFERENCE-200 in
exit-address-family
!
address-family ipv4 vrf 34
no synchronization
redistribute connected
redistribute static
exit-address-family
!
ip route vrf 34 14.14.14.14 255.255.255.255 192.168.114.14
!
route-map LOCAL-PREFERENCE-200 permit 10
set local-preference 200
!
mpls ldp router-id Loopback0 force

R11 Config

interface Loopback0
ip address 11.11.11.11 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.119.11 255.255.255.0
!
interface FastEthernet0/1
ip address 192.168.110.11 255.255.255.0
mpls ip
!
router ospf 1
log-adjacency-changes
redistribute bgp 4 subnets route-map AS3LOOPBACKS
network 11.11.11.11 0.0.0.0 area 0
network 192.168.110.11 0.0.0.0 area 0
!
router bgp 4
no synchronization
bgp log-neighbor-changes
redistribute ospf 1 route-map AS4LOOPBACKS
neighbor 192.168.119.9 remote-as 3
neighbor 192.168.119.9 send-label
no auto-summary
!
ip prefix-list AS3LOOPBACKS seq 5 permit 8.8.8.8/32
!
ip prefix-list AS4LOOPBACKS seq 5 permit 10.10.10.10/32
!
route-map AS4LOOPBACKS permit 10
match ip address prefix-list AS4LOOPBACKS
!
route-map AS3LOOPBACKS permit 10
match ip address prefix-list AS3LOOPBACKS
!
mpls ldp router-id Loopback0 force

R12 Config

interface FastEthernet0/0
ip address 192.168.112.12 255.255.255.0
!
interface FastEthernet0/1
ip address 192.168.128.12 255.255.255.0
!
router bgp 12
no synchronization
bgp log-neighbor-changes
neighbor 192.168.112.10 remote-as 4
neighbor 192.168.128.8 remote-as 3
no auto-summary

R13 Config

interface Loopback0
ip address 13.13.13.13 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.138.13 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 192.168.138.8

R14 Config

interface Loopback0
ip address 14.14.14.14 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.114.14 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 192.168.114.10

R15 Config

interface Loopback0
ip address 15.15.15.15 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.155.15 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 192.168.155.5

R16 Config

interface Loopback0
ip address 16.16.16.16 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.167.16 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 192.168.167.7

Carrier-Supporting-Carrier Section

In this lab, AS1 is the carrier AS.
Fe2/0 of R1 and R3 is configured under vrf one and connected to R4 and R6 respectively.
Between R1 and R4, ldp is used for label binding, between R3 and R6, bgp is used for label binding with the command "neighbor x.x.x.x send-label"
In AS2, R5 and R7 are vpnv4 peers and provide l3vpn service to R15 and R16.

R1 Config

ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet1/0
ip address 192.168.12.1 255.255.255.0
mpls ip
!
interface FastEthernet2/0
ip vrf forwarding one
ip address 192.168.14.1 255.255.255.0
mpls ip
!
router ospf 2 vrf one
log-adjacency-changes
redistribute bgp 1 subnets
network 192.168.14.1 0.0.0.0 area 0
!
router ospf 1
network 1.1.1.1 0.0.0.0 area 0
network 192.168.12.1 0.0.0.0 area 0
network 192.168.13.1 0.0.0.0 area 0
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 3.3.3.3 remote-as 1
neighbor 3.3.3.3 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 3.3.3.3 activate
neighbor 3.3.3.3 send-community extended
exit-address-family
!
address-family ipv4 vrf one
no synchronization
redistribute ospf 2 vrf one
exit-address-family

R2 Config

interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.12.2 255.255.255.0
mpls ip
!
interface FastEthernet0/1
ip address 192.168.23.2 255.255.255.0
mpls ip
!
router ospf 1
log-adjacency-changes
network 2.2.2.2 0.0.0.0 area 0
network 192.168.12.2 0.0.0.0 area 0
network 192.168.23.2 0.0.0.0 area 0
!

R3 Config

ip vrf one
rd 1:1
route-target export 1:1
route-target import 1:1
!
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet1/1
ip address 192.168.23.3 255.255.255.0
mpls ip
mpls traffic-eng tunnels
ip rsvp bandwidth
!
interface FastEthernet2/0
ip vrf forwarding one
ip address 192.168.36.3 255.255.255.0
mpls bgp forwarding
!
router ospf 1
log-adjacency-changes
network 3.3.3.3 0.0.0.0 area 0
network 192.168.13.3 0.0.0.0 area 0
network 192.168.23.3 0.0.0.0 area 0
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
!
router bgp 1
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 1.1.1.1 remote-as 1
neighbor 1.1.1.1 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 1.1.1.1 activate
neighbor 1.1.1.1 send-community extended
exit-address-family
!
address-family ipv4 vrf one
no synchronization
neighbor 192.168.36.6 remote-as 2
neighbor 192.168.36.6 activate
neighbor 192.168.36.6 send-label
exit-address-family

R4 Config

interface Loopback0
ip address 4.4.4.4 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.14.4 255.255.255.0
mpls ip
!
interface FastEthernet0/1
ip address 192.168.45.4 255.255.255.0
mpls ip
!
router ospf 1
network 4.4.4.4 0.0.0.0 area 0
network 192.168.14.4 0.0.0.0 area 0
network 192.168.45.4 0.0.0.0 area 0

R5 Config

ip vrf two
rd 2:2
route-target export 2:2
route-target import 2:2
!
interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface FastEthernet1/0
ip address 192.168.45.5 255.255.255.0
mpls ip
!
interface FastEthernet2/0
ip vrf forwarding two
ip address 192.168.155.5 255.255.255.0
!
router ospf 1
network 5.5.5.5 0.0.0.0 area 0
network 192.168.45.5 0.0.0.0 area 0
!
router bgp 2
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 7.7.7.7 remote-as 2
neighbor 7.7.7.7 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 7.7.7.7 activate
neighbor 7.7.7.7 send-community extended
exit-address-family
!
address-family ipv4 vrf two
no synchronization
redistribute connected
redistribute static
exit-address-family
!
ip route vrf two 15.15.15.15 255.255.255.255 192.168.155.15

R6 Config

interface Loopback0
ip address 6.6.6.6 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.36.6 255.255.255.0
!
interface FastEthernet0/1
ip address 192.168.67.6 255.255.255.0
mpls ip
!
router ospf 1
redistribute bgp 2 subnets route-map AS2LOOPBACKS
network 6.6.6.6 0.0.0.0 area 0
network 192.168.67.6 0.0.0.0 area 0
!
router bgp 2
bgp log-neighbor-changes
neighbor 192.168.36.3 remote-as 1
!
address-family ipv4
redistribute ospf 1 route-map AS2LOOPBACKS
neighbor 192.168.36.3 activate
neighbor 192.168.36.3 send-label
no auto-summary
no synchronization
!
ip prefix-list AS2LOOPBACKS seq 5 permit 4.4.4.4/32
ip prefix-list AS2LOOPBACKS seq 10 permit 5.5.5.5/32
ip prefix-list AS2LOOPBACKS seq 15 permit 6.6.6.6/32
ip prefix-list AS2LOOPBACKS seq 20 permit 7.7.7.7/32
!
route-map AS2LOOPBACKS permit 10
match ip address prefix-list AS2LOOPBACKS

R7 Config

ip vrf two
rd 2:2
route-target export 2:2
route-target import 2:2
!
interface Loopback0
ip address 7.7.7.7 255.255.255.255
!
interface FastEthernet1/0
ip address 192.168.67.7 255.255.255.0
mpls ip
!
interface FastEthernet2/0
ip vrf forwarding two
ip address 192.168.167.7 255.255.255.0
!
router ospf 1
network 7.7.7.7 0.0.0.0 area 0
network 192.168.67.7 0.0.0.0 area 0
!
router bgp 2
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 5.5.5.5 remote-as 2
neighbor 5.5.5.5 update-source Loopback0
!
address-family ipv4
no synchronization
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 5.5.5.5 activate
neighbor 5.5.5.5 send-community extended
exit-address-family
!
address-family ipv4 vrf two
no synchronization
redistribute connected
redistribute static
exit-address-family
!
ip route vrf two 16.16.16.16 255.255.255.255 192.168.167.16

R15 Config

interface Loopback0
ip address 15.15.15.15 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.155.15 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 192.168.155.5

R16 Config

interface Loopback0
ip address 16.16.16.16 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.167.16 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 192.168.167.7

Verification

AS2 loopback networks used to peer vpnv4 session

R5#show ip route ospf

      4.0.0.0/32 is subnetted, 1 subnets
O        4.4.4.4 [110/2] via 192.168.45.4, 03:36:16, FastEthernet1/0
      6.0.0.0/32 is subnetted, 1 subnets
O E2     6.6.6.6 [110/1] via 192.168.45.4, 03:21:56, FastEthernet1/0
      7.0.0.0/32 is subnetted, 1 subnets
O E2     7.7.7.7 [110/1] via 192.168.45.4, 03:21:56, FastEthernet1/0
O     192.168.14.0/24 [110/2] via 192.168.45.4, 03:36:06, FastEthernet1/0

R5#traceroute 7.7.7.7 source loopback 0

Type escape sequence to abort.
Tracing the route to 7.7.7.7

1 192.168.45.4 [MPLS: Label 18 Exp 0] 120 msec 104 msec 92 msec
2 192.168.14.1 [MPLS: Label 24 Exp 0] 136 msec 132 msec 100 msec
3 192.168.12.2 [MPLS: Labels 17/25 Exp 0] 112 msec 108 msec 100 msec
4 192.168.36.3 [MPLS: Label 25 Exp 0] 148 msec 140 msec 136 msec
5 192.168.36.6 [MPLS: Label 16 Exp 0] 132 msec 112 msec 128 msec
6 192.168.67.7 176 msec * 188 msec

R5#show mpls forwarding-table
20         18         7.7.7.7/32       0             Fa1/0      192.168.45.4

R4#show mpls forwarding-table
18     24          7.7.7.7/32        33425      Fa0/0      192.168.14.1

R1#show mpls forwarding-table
21         17         3.3.3.3/32       0             Fa1/0      192.168.12.2
R1#show bgp vpnv4 unicast all labels
    7.7.7.7/32       3.3.3.3         nolabel/25

R3#show mpls forwarding-table
25         16         7.7.7.7/32[V]    41978         Fa2/0      192.168.36.6

l3vpn clients reachability

R15#ping 16.16.16.16 source loopback 0
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 96/108/144 ms

R15#traceroute 16.16.16.16 source loopback 0

1 192.168.155.5 12 msec 40 msec 20 msec
2 192.168.45.4 [MPLS: Labels 18/20 Exp 0] 120 msec 120 msec 68 msec
3 192.168.14.1 [MPLS: Labels 24/20 Exp 0] 112 msec 124 msec 136 msec
4 192.168.12.2 [MPLS: Labels 17/25/20 Exp 0] 104 msec 84 msec 60 msec
5 192.168.23.3 [MPLS: Labels 25/20 Exp 0] 120 msec 120 msec 88 msec
6 192.168.36.6 [MPLS: Labels 16/20 Exp 0] 104 msec 124 msec 96 msec
7 192.168.167.7 [MPLS: Label 20 Exp 0] 76 msec 108 msec 92 msec
8 192.168.167.16 112 msec * 124 msec

MPLS AToM Section

In this lab, we will configure MPLS AToM on R5 and R7 to provide layer 2 connectivity to R9 and R11 as if they were directly connected.

R5 Config

pseudowire-class AS3-AS4
encapsulation mpls
!
interface FastEthernet1/1
xconnect 7.7.7.7 34 pw-class AS3-AS4

R7 Config

pseudowire-class AS3-AS4
encapsulation mpls
!
interface FastEthernet1/1
xconnect 5.5.5.5 34 pw-class AS3-AS4

R9 Config

interface FastEthernet0/0
ip address 192.168.119.9 255.255.255.0

R11 Config

interface FastEthernet0/0
ip address 192.168.119.11 255.255.255.0

Verification

R5#show mpls l2transport vc

Local intf     Local circuit              Dest address    VC ID      Status
------------- -------------------------- --------------- ---------- ----------
Fa1/1          Ethernet                   7.7.7.7         34         UP

R5#show mpls ldp neighbor
       Peer LDP Ident: 7.7.7.7:0; Local LDP Ident 5.5.5.5:0
        TCP connection: 7.7.7.7.59029 - 5.5.5.5.646
        State: Oper; Msgs sent/rcvd: 34/32; Downstream
        Up time: 00:21:13
        LDP discovery sources:
          Targeted Hello 5.5.5.5 -> 7.7.7.7, active, passive
        Addresses bound to peer LDP Ident:
          192.168.67.7    7.7.7.7

R7#show mpls l2transport vc

Local intf     Local circuit              Dest address    VC ID      Status
------------- -------------------------- --------------- ---------- ----------
Fa1/1          Ethernet                   5.5.5.5         34         UP

R9#ping 192.168.119.11
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 88/112/156 ms