Showing posts with label Frame-Mode MPLS VPN. Show all posts
Showing posts with label Frame-Mode MPLS VPN. Show all posts

Wednesday, November 25, 2009

MPLS L3 VPN with PE-CE as ISIS and OSPF LAB


Configuration Guidelines::VRF Used "CEA"RD Used "64513:1"RT Used "64513:100"AS Used "64513"PE-CE Routing Used "ISIS" between CE1A-PE1 & “OSPF” between CE2A-PE2IGP Used "ISIS" Level 2 between PE1 & PE2 .Loopbacks in Level 1
********************************************************************************

CE2A#sh running-config
Building configuration...

Current configuration : 1187 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE2A
!
boot-start-marker
boot-end-marker
!
no logging console
!
memory-size iomem 5
no network-clock-participate aim 0
no network-clock-participate aim 1
no aaa new-model
ip subnet-zero
ip cef
!
!
!
!
no ftp-server write-enable
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.5.1 255.255.255.255
!
interface FastEthernet0/0
description <>
ip address 172.16.40.1 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
description <>
ip address 172.16.20.2 255.255.255.252
clockrate 2000000
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
clockrate 2000000
!
router ospf 10
log-adjacency-changes
redistribute connected subnets route-map Local
network 172.16.20.0 0.0.0.3 area 0
!
ip classless
!
ip http server
no ip http secure-server
!
!
route-map Local permit 10
match interface Loopback0 FastEthernet0/0
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
end

CE2A#

CE1A#sh running-config
Building configuration...

Current configuration : 1201 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE1A
!
boot-start-marker
boot-end-marker
!
no logging console
!
memory-size iomem 5
no network-clock-participate aim 0
no network-clock-participate aim 1
no aaa new-model
ip subnet-zero
ip cef
!
!
!
!
no ftp-server write-enable
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.1.1 255.255.255.255
!
interface FastEthernet0/0
description <>
ip address 172.16.30.1 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
description <>
ip address 172.16.10.2 255.255.255.252
ip router isis
clockrate 2000000
isis circuit-type level-1
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
clockrate 2000000
!
router isis
net 49.0002.6666.5555.4444.00
redistribute connected route-map Local level-1
!
ip classless
!
ip http server
no ip http secure-server
!
!
route-map Local permit 10
match interface Loopback0 FastEthernet0/0
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
end

CE1A#
CE1A#

PE1#sh running-config
Building configuration...

Current configuration : 2322 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE1
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.2.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
description <>
ip vrf forwarding CEA
ip address 172.16.10.1 255.255.255.252
ip router isis CEA
serial restart-delay 0
isis circuit-type level-1
!
interface Serial1/1
description <>
ip address 192.168.1.1 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router isis
net 49.0001.1111.2222.3333.00
!
router isis CEA
vrf CEA
net 49.0002.1111.2222.3333.00
redistribute bgp 64513 level-1
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.4.1 remote-as 64513
neighbor 10.0.4.1 description <>
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.4.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
no synchronization
redistribute connected
redistribute isis CEA level-1-2
exit-address-family
!
ip classless
!
!
no ip http server
no ip http secure-server
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
!
end

PE1#

P#sh running-config
Building configuration...

Current configuration : 1623 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname P
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.3.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
description <>
ip address 192.168.1.2 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/1
description <>
ip address 192.168.1.5 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router isis
net 49.0001.2222.3333.1111.00
!
ip classless
!
!
no ip http server
no ip http secure-server
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
!
end

P#

PE2#sh running-config
Building configuration...

Current configuration : 2312 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE2
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.4.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
description <>
ip address 192.168.1.6 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/1
description <>
ip vrf forwarding CEA
ip address 172.16.20.1 255.255.255.252
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router ospf 10 vrf CEA
log-adjacency-changes
redistribute bgp 64513 subnets
network 172.16.20.0 0.0.0.3 area 0
!
router isis
net 49.0001.3333.1111.2222.00
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 description <>
neighbor 10.0.2.1 update-source Loopback0
neighbor 10.0.2.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
no synchronization
redistribute connected
redistribute ospf 10 vrf CEA match internal external 1 external 2
exit-address-family
!
ip classless
!
!
no ip http server
no ip http secure-server
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
!
end

PE2#

OUPUT
********************************************************************
PE1#show ip route vrf CEA

Routing Table: CEA
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

10.0.0.0/32 is subnetted, 2 subnets
i L1 10.0.1.1 [115/10] via 172.16.10.2, Serial1/0
B 10.0.5.1 [200/20] via 10.0.4.1, 00:03:37
172.16.0.0/16 is variably subnetted, 5 subnets, 3 masks
C 172.16.10.0/30 is directly connected, Serial1/0
L 172.16.10.1/32 is directly connected, Serial1/0
B 172.16.20.0/30 [200/0] via 10.0.4.1, 00:06:37
i L1 172.16.30.0/24 [115/10] via 172.16.10.2, Serial1/0
B 172.16.40.0/24 [200/20] via 10.0.4.1, 00:03:37
PE1#sho
PE1#show is
PE1#show isis CEA nei
PE1#show isis CEA neighbors

Tag CEA:
System Id Type Interface IP Address State Holdtime Circuit Id
CE1A L1 Se1/0 172.16.10.2 UP 21 00
PE1#

PE2#show ip route vrf CEA

Routing Table: CEA
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

10.0.0.0/32 is subnetted, 2 subnets
B 10.0.1.1 [200/10] via 10.0.2.1, 00:09:18
O E2 10.0.5.1 [110/20] via 172.16.20.2, 00:08:51, Serial1/1
172.16.0.0/16 is variably subnetted, 5 subnets, 3 masks
B 172.16.10.0/30 [200/0] via 10.0.2.1, 00:09:18
C 172.16.20.0/30 is directly connected, Serial1/1
L 172.16.20.1/32 is directly connected, Serial1/1
B 172.16.30.0/24 [200/10] via 10.0.2.1, 00:09:18
O E2 172.16.40.0/24 [110/20] via 172.16.20.2, 00:08:51, Serial1/1
PE2#sho
PE2#show ip os
PE2#show ip ospf nei
PE2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
10.0.5.1 0 FULL/ - 00:00:30 172.16.20.2 Serial1/1
PE2#

CE2A#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks
C 172.16.40.0/24 is directly connected, FastEthernet0/0
O E2 172.16.30.0/24 [110/10] via 172.16.20.1, 00:09:04, Serial0/0
C 172.16.20.0/30 is directly connected, Serial0/0
O E2 172.16.10.0/30 [110/1] via 172.16.20.1, 00:09:04, Serial0/0
10.0.0.0/32 is subnetted, 2 subnets
O E2 10.0.1.1 [110/10] via 172.16.20.1, 00:09:04, Serial0/0
C 10.0.5.1 is directly connected, Loopback0
CE2A#sho
CE2A#show ip os
CE2A#show ip ospf nei
CE2A#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
172.16.20.1 0 FULL/ - 00:00:34 172.16.20.1 Serial0/0
CE2A#ping 10.0.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/74/136 ms
CE2A#ping 172.16.30.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.30.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/89/140 ms
CE2A#

CE1A#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks
i L1 172.16.40.0/24 [115/10] via 172.16.10.1, Serial0/0
C 172.16.30.0/24 is directly connected, FastEthernet0/0
i L1 172.16.20.0/30 [115/10] via 172.16.10.1, Serial0/0
C 172.16.10.0/30 is directly connected, Serial0/0
10.0.0.0/32 is subnetted, 2 subnets
C 10.0.1.1 is directly connected, Loopback0
i L1 10.0.5.1 [115/10] via 172.16.10.1, Serial0/0
CE1A#sho
CE1A#show isi
CE1A#show isis nei
CE1A#show isis neighbors

System Id Type Interface IP Address State Holdtime Circuit Id
PE1 L1 Se0/0 172.16.10.1 UP 20 00
CE1A#ping 10.0.5.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.5.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/66/140 ms
CE1A#ping 172.16.40.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.40.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 36/90/152 ms
CE1A#

MPLS L3 VPN with PE-CE as ISIS LAB


Configuration Guidelines::VRF Used "CEA"RD Used "64513:1"RT Used "64513:100"AS Used "64513"PE-CE Routing Used "ISIS"IGP Used "ISIS" Level 2 between PE1 & PE2 .Loopbacks in Level 1
********************************************************************************
CE1A#sh running-config
Building configuration...

Current configuration : 1201 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE1A
!
boot-start-marker
boot-end-marker
!
no logging console
!
memory-size iomem 5
no network-clock-participate aim 0
no network-clock-participate aim 1
no aaa new-model
ip subnet-zero
ip cef
!
!
!
!
no ftp-server write-enable
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.1.1 255.255.255.255
!
interface FastEthernet0/0
description <>
ip address 172.16.30.1 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
description <>
ip address 172.16.10.2 255.255.255.252
ip router isis
clockrate 2000000
isis circuit-type level-1
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
clockrate 2000000
!
router isis
net 49.0002.6666.5555.4444.00
redistribute connected route-map Local level-1
!
ip classless
!
ip http server
no ip http secure-server
!
!
route-map Local permit 10
match interface Loopback0 FastEthernet0/0
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
End
CEA#

PE1#sh running-config
Building configuration...

Current configuration : 2322 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE1
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.2.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
description <>
ip vrf forwarding CEA
ip address 172.16.10.1 255.255.255.252
ip router isis CEA
serial restart-delay 0
isis circuit-type level-1
!
interface Serial1/1
description <>
ip address 192.168.1.1 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router isis
net 49.0001.1111.2222.3333.00
!
router isis CEA
vrf CEA
net 49.0002.1111.2222.3333.00
redistribute bgp 64513 level-1
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.4.1 remote-as 64513
neighbor 10.0.4.1 description <>
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.4.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
no synchronization
redistribute connected
redistribute isis CEA level-1-2
exit-address-family
!
ip classless
!
!
no ip http server
no ip http secure-server
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
!
end

PE1#

P#sh running-config
Building configuration...

Current configuration : 1623 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname P
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.3.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
description <>
ip address 192.168.1.2 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/1
description <>
ip address 192.168.1.5 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router isis
net 49.0001.2222.3333.1111.00
!
ip classless
!
!
no ip http server
no ip http secure-server
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
!
end

P#

PE2#sh running-config
Building configuration...

Current configuration : 2323 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE2
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.4.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
description <>
ip address 192.168.1.6 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/1
description <>
ip vrf forwarding CEA
ip address 172.16.20.1 255.255.255.252
ip router isis CEA
serial restart-delay 0
isis circuit-type level-1
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router isis
net 49.0001.3333.1111.2222.00
!
router isis CEA
vrf CEA
net 49.0003.3333.1111.2222.00
redistribute bgp 64513 level-1
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 description <>
neighbor 10.0.2.1 update-source Loopback0
neighbor 10.0.2.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
no synchronization
redistribute connected
redistribute isis CEA level-1-2
exit-address-family
!
ip classless
!
!
no ip http server
no ip http secure-server
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
!
End
PE2#

CE2A#sh running-config
Building configuration...

Current configuration : 1201 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE2A
!
boot-start-marker
boot-end-marker
!
no logging console
!
memory-size iomem 5
no network-clock-participate aim 0
no network-clock-participate aim 1
no aaa new-model
ip subnet-zero
ip cef
!
!
!
!
no ftp-server write-enable
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
description <>
ip address 10.0.5.1 255.255.255.255
!
interface FastEthernet0/0
description <>
ip address 172.16.40.1 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
description <>
ip address 172.16.20.2 255.255.255.252
ip router isis
clockrate 2000000
isis circuit-type level-1
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
clockrate 2000000
!
router isis
net 49.0003.9999.8888.7777.00
redistribute connected route-map Local level-1
!
ip classless
!
ip http server
no ip http secure-server
!
!
route-map Local permit 10
match interface Loopback0 FastEthernet0/0
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
end

CE2A#

OUTPUT
************************************************************************
PE1#sh ip route vrf CEA

Routing Table: CEA
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

10.0.0.0/32 is subnetted, 2 subnets
i L1 10.0.1.1 [115/10] via 172.16.10.2, Serial1/0
B 10.0.5.1 [200/10] via 10.0.4.1, 00:14:04
172.16.0.0/16 is variably subnetted, 5 subnets, 3 masks
C 172.16.10.0/30 is directly connected, Serial1/0
L 172.16.10.1/32 is directly connected, Serial1/0
B 172.16.20.0/30 [200/0] via 10.0.4.1, 00:14:04
i L1 172.16.30.0/24 [115/10] via 172.16.10.2, Serial1/0
B 172.16.40.0/24 [200/10] via 10.0.4.1, 00:14:04
PE1#sh is
PE1#sh isis CEA nei
PE1#sh isis CEA neighbors

Tag CEA:
System Id Type Interface IP Address State Holdtime Circuit Id
CE1A L1 Se1/0 172.16.10.2 UP 23 00
PE1#

PE2#sh ip route vrf CEA

Routing Table: CEA
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

10.0.0.0/32 is subnetted, 2 subnets
B 10.0.1.1 [200/10] via 10.0.2.1, 00:14:45
i L1 10.0.5.1 [115/10] via 172.16.20.2, Serial1/1
172.16.0.0/16 is variably subnetted, 5 subnets, 3 masks
B 172.16.10.0/30 [200/0] via 10.0.2.1, 00:14:45
C 172.16.20.0/30 is directly connected, Serial1/1
L 172.16.20.1/32 is directly connected, Serial1/1
B 172.16.30.0/24 [200/10] via 10.0.2.1, 00:14:45
i L1 172.16.40.0/24 [115/10] via 172.16.20.2, Serial1/1
PE2#sho
PE2#show isi
PE2#show isis CEA nei
PE2#show isis CEA neighbors

Tag CEA:
System Id Type Interface IP Address State Holdtime Circuit Id
CE2A L1 Se1/1 172.16.20.2 UP 28 00
PE2#

CE2A#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks
C 172.16.40.0/24 is directly connected, FastEthernet0/0
i L1 172.16.30.0/24 [115/10] via 172.16.20.1, Serial0/0
C 172.16.20.0/30 is directly connected, Serial0/0
i L1 172.16.10.0/30 [115/10] via 172.16.20.1, Serial0/0
10.0.0.0/32 is subnetted, 2 subnets
i L1 10.0.1.1 [115/10] via 172.16.20.1, Serial0/0
C 10.0.5.1 is directly connected, Loopback0
CE2A#ping 10.0.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/68/104 ms
CE2A#ping 172.16.30.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.30.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/97/148 ms
CE2A#show is
CE2A#show isi
CE2A#show isis nei
CE2A#show isis neighbors

System Id Type Interface IP Address State Holdtime Circuit Id
PE2 L1 Se0/0 172.16.20.1 UP 27 00
CE2A#

CE1A#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks
i L1 172.16.40.0/24 [115/10] via 172.16.10.1, Serial0/0
C 172.16.30.0/24 is directly connected, FastEthernet0/0
i L1 172.16.20.0/30 [115/10] via 172.16.10.1, Serial0/0
C 172.16.10.0/30 is directly connected, Serial0/0
10.0.0.0/32 is subnetted, 2 subnets
C 10.0.1.1 is directly connected, Loopback0
i L1 10.0.5.1 [115/10] via 172.16.10.1, Serial0/0
CE1A#ping 10.0.5.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.5.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/55/108 ms
CE1A#ping 172.16.40.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.40.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/80/140 ms
CE1A#show is
CE1A#show isis nei
CE1A#show isis neighbors

System Id Type Interface IP Address State Holdtime Circuit Id
PE1 L1 Se0/0 172.16.10.1 UP 28 00
CE1A#

Tuesday, July 14, 2009

Implementing OSPF Domain-ID in MPLS L3 VPN LAB


Configuration Guidelines::

VRF Used "CEA"
RD Used "64513:1"
RT Used "64513:100"
AS Used "64513"
PE-CE Routing Used "OSPF"
IGP Used "ISIS" Level 2 between PE1 & PE2 .Loopbacks in Level 1 and PE1 & PE2 in different area.
OSPF Domain-id ::
Before”PE1 -172.16.10.1 & PE2 – 172.16.20.1”
After “PE1 -172.16.10.1 PE2- 172.16.10.1”
***********************************************************************************

CE1A#sh running-config
ip cef
!
interface Loopback0
description <>
ip address 172.16.1.1 255.255.255.0
ip ospf network point-to-point
!
interface Loopback1
description <>
ip address 172.16.15.1 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet1/0
description <<>>
ip address 192.168.1.1 255.255.255.252
duplex auto
speed auto
!
router ospf 10
log-adjacency-changes
redistribute connected subnets route-map Only_Local
network 172.16.15.0 0.0.0.255 area 1
network 192.168.1.0 0.0.0.3 area 0
!
route-map Only_Local permit 10
match interface Loopback0
!

CE1A#







PE1#show running-config
ip cef
!
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
mpls label protocol ldp
no mpls ip propagate-ttl forwarded
mpls ldp explicit-null for 10 to 20
!
!
interface Loopback0
description <>
ip address 10.0.2.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
!
interface Loopback1
description <>
ip vrf forwarding CEA
ip address 10.0.5.1 255.255.255.255
!

!
interface FastEthernet1/0
description <>
ip vrf forwarding CEA
ip address 192.168.1.2 255.255.255.252

duplex auto
speed auto
!
interface FastEthernet1/1
description <>
ip address 192.168.1.5 255.255.255.252
ip router isis

duplex auto
speed auto
mpls label protocol ldp
mpls ip
isis circuit-type level-2-only
!
router ospf 10 vrf CEA
domain-id 172.16.10.1
log-adjacency-changes
redistribute bgp 64513 subnets
network 192.168.1.0 0.0.0.3 area 0
!
router isis
net 49.0002.8888.2222.1111.00
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.4.1 remote-as 64513
neighbor 10.0.4.1 description <>
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.4.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute ospf 10 vrf CEA metric 2 match internal external 1 external 2
no synchronization
exit-address-family
!

!
access-list 10 permit 192.168.1.0 0.0.0.3
access-list 20 permit 10.0.3.1
access-list 20 permit 10.0.4.1
!
mpls ldp router-id Loopback0
!

PE1#








P1#show running-config
ip cef
!

!
mpls label protocol ldp
no mpls ip propagate-ttl forwarded
!
!
interface Loopback0
description <

>
ip address 10.0.3.1 255.255.255.255
ip router isis

isis circuit-type level-1
!
interface FastEthernet1/0
description <>
ip address 192.168.1.6 255.255.255.252
ip router isis

duplex auto
speed auto
mpls label protocol ldp
mpls ip
isis circuit-type level-2-only
!
interface FastEthernet1/1
description <>
ip address 192.168.1.9 255.255.255.252
ip router isis

duplex auto
speed auto
mpls label protocol ldp
mpls ip
isis circuit-type level-2-only
!
router isis
net 49.0002.9999.7777.6666.00
!
mpls ldp router-id Loopback0
!
P1#



PE2#show running-config

ip cef
!
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!

mpls label protocol ldp
no mpls ip propagate-ttl forwarded
mpls ldp explicit-null for 10 to 20
!
!
interface Loopback0
description <>
ip address 10.0.4.1 255.255.255.255
ip router isis

isis circuit-type level-1
!
!
interface Loopback1
description <>
ip vrf forwarding CEA
ip address 10.0.1.1 255.255.255.255
!

!
interface FastEthernet1/0
description <>
ip address 192.168.1.10 255.255.255.252
ip router isis

duplex auto
speed auto
mpls label protocol ldp
mpls ip
isis circuit-type level-2-only
!
interface FastEthernet1/1
description <>
ip vrf forwarding CEA
ip address 192.168.1.13 255.255.255.252

duplex auto
speed auto
!
router ospf 10 vrf CEA
domain-id 172.16.10.1
log-adjacency-changes
redistribute bgp 64513 subnets
network 192.168.1.12 0.0.0.3 area 0
!
router isis
net 49.0002.5555.2222.1111.00
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 description <>
neighbor 10.0.2.1 update-source Loopback0
neighbor 10.0.2.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute ospf 10 vrf CEA metric 2 match internal external 1 external 2
no synchronization
exit-address-family
!

!
access-list 10 permit 192.168.1.12 0.0.0.3
access-list 20 permit 10.0.3.1
access-list 20 permit 10.0.2.1
!
mpls ldp router-id Loopback0

PE2#













CE2A#show running-config
ip cef
!
interface Loopback0
description <>
ip address 172.16.2.1 255.255.255.0
ip ospf network point-to-point
!
interface Loopback1
description <>
ip address 172.16.25.1 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet1/0
description <<>>
ip address 192.168.1.14 255.255.255.252

ip igmp join-group 224.2.2.2
duplex auto
speed auto
!

router ospf 10
log-adjacency-changes
redistribute connected subnets route-map Only_Local
network 172.16.25.0 0.0.0.255 area 2
network 192.168.1.12 0.0.0.3 area 0
!
route-map Only_Local permit 10
match interface Loopback0
!

CE2A#












OUTPUT VERIFICATION
BEFORE WHEN DOMAIN_ID DIFFERENT FOR PE1 & PE2
CE1A#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 4 subnets
O E2 172.16.25.0 [110/2] via 192.168.1.2, 00:01:04, FastEthernet1/0
C 172.16.15.0 is directly connected, Loopback1
C 172.16.1.0 is directly connected, Loopback0
O E2 172.16.2.0 [110/2] via 192.168.1.2, 00:01:04, FastEthernet1/0
10.0.0.0/32 is subnetted, 1 subnets
O E2 10.0.4.1 [110/1] via 192.168.1.2, 00:01:04, FastEthernet1/0
192.168.1.0/30 is subnetted, 2 subnets
O E2 192.168.1.12 [110/1] via 192.168.1.2, 00:01:04, FastEthernet1/0
C 192.168.1.0 is directly connected, FastEthernet1/0
CE1A#ping 172.16.25.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.25.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 224/343/484 ms
CE1A#


CE2A#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 4 subnets
C 172.16.25.0 is directly connected, Loopback1
O E2 172.16.15.0 [110/2] via 192.168.1.13, 00:00:09, FastEthernet1/0
O E2 172.16.1.0 [110/2] via 192.168.1.13, 00:00:09, FastEthernet1/0
C 172.16.2.0 is directly connected, Loopback0
10.0.0.0/32 is subnetted, 1 subnets
O E2 10.0.1.1 [110/1] via 192.168.1.13, 00:00:09, FastEthernet1/0
192.168.1.0/30 is subnetted, 2 subnets
C 192.168.1.12 is directly connected, FastEthernet1/0
O E2 192.168.1.0 [110/1] via 192.168.1.13, 00:00:09, FastEthernet1/0
CE2A#ping 172.16.15.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.15.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 440/527/616 ms
CE2A#

PE2#show ip route vrf CEA

Routing Table: CEA
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 4 subnets
O IA 172.16.25.0 [110/2] via 192.168.1.14, 00:09:36, FastEthernet1/1
B 172.16.15.0 [200/2] via 10.0.2.1, 00:02:11
B 172.16.1.0 [200/2] via 10.0.2.1, 00:02:11
O E2 172.16.2.0 [110/20] via 192.168.1.14, 00:09:16, FastEthernet1/1
10.0.0.0/32 is subnetted, 2 subnets
B 10.0.1.1 [200/0] via 10.0.2.1, 00:02:11
C 10.0.4.1 is directly connected, Loopback1
192.168.1.0/30 is subnetted, 2 subnets
C 192.168.1.12 is directly connected, FastEthernet1/1
B 192.168.1.0 [200/0] via 10.0.2.1, 00:02:11
PE2#

PE2#show ip bgp vpnv4 vrf CEA 172.16.15.0
BGP routing table entry for 64513:1:172.16.15.0/24, version 19
Paths: (1 available, best #1, table CEA)
Flag: 0x820
Not advertised to any peer
Local
10.0.2.1 (metric 30) from 10.0.2.1 (10.0.2.1)
Origin incomplete, metric 2, localpref 100, valid, internal, best
Extended Community: RT:64513:100 OSPF DOMAIN ID:0x0005:0xAC100A010200
OSPF RT:0.0.0.0:3:0 OSPF ROUTER ID:10.0.1.1:768
mpls labels in/out nolabel/20
PE2#

PE1#show ip route vrf CEA

Routing Table: CEA
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 4 subnets
B 172.16.25.0 [200/2] via 10.0.4.1, 00:00:52
O IA 172.16.15.0 [110/2] via 192.168.1.1, 00:05:38, FastEthernet1/0
O E2 172.16.1.0 [110/20] via 192.168.1.1, 00:05:38, FastEthernet1/0
B 172.16.2.0 [200/2] via 10.0.4.1, 00:00:52
10.0.0.0/32 is subnetted, 2 subnets
C 10.0.1.1 is directly connected, Loopback1
B 10.0.4.1 [200/0] via 10.0.4.1, 00:00:52
192.168.1.0/30 is subnetted, 2 subnets
B 192.168.1.12 [200/0] via 10.0.4.1, 00:00:52
C 192.168.1.0 is directly connected, FastEthernet1/0
PE1#

PE1#show ip bgp vpnv4 vrf CEA 172.16.25.0
BGP routing table entry for 64513:1:172.16.25.0/24, version 21
Paths: (1 available, best #1, table CEA)
Flag: 0x820
Not advertised to any peer
Local
10.0.4.1 (metric 30) from 10.0.4.1 (10.0.4.1)
Origin incomplete, metric 2, localpref 100, valid, internal, best
Extended Community: RT:64513:100 OSPF DOMAIN ID:0x0005:0xAC1014020200
OSPF RT:0.0.0.0:3:0 OSPF ROUTER ID:10.0.4.1:768
mpls labels in/out nolabel/20
PE1#













AFTER WHEN DOMAIN ID SAME FOR PE1 & PE2



CE1A#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 4 subnets
O IA 172.16.25.0 [110/3] via 192.168.1.2, 00:00:13, FastEthernet1/0
C 172.16.15.0 is directly connected, Loopback1
C 172.16.1.0 is directly connected, Loopback0
O E2 172.16.2.0 [110/2] via 192.168.1.2, 00:07:03, FastEthernet1/0
10.0.0.0/32 is subnetted, 1 subnets
O E2 10.0.4.1 [110/1] via 192.168.1.2, 00:07:03, FastEthernet1/0
192.168.1.0/30 is subnetted, 2 subnets
O IA 192.168.1.12 [110/2] via 192.168.1.2, 00:00:13, FastEthernet1/0
C 192.168.1.0 is directly connected, FastEthernet1/0
CE1A#

PE2#show ip bgp vpnv4 vrf CEA 172.16.15.0
BGP routing table entry for 64513:1:172.16.15.0/24, version 19
Paths: (1 available, best #1, table CEA)
Not advertised to any peer
Local
10.0.2.1 (metric 30) from 10.0.2.1 (10.0.2.1)
Origin incomplete, metric 2, localpref 100, valid, internal, best
Extended Community: RT:64513:100 OSPF DOMAIN ID:0x0005:0xAC100A010200
OSPF RT:0.0.0.0:3:0 OSPF ROUTER ID:10.0.1.1:768
mpls labels in/out nolabel/20
PE2#show ip bgp vpnv4 vrf CEA 172.16.15.0
BGP routing table entry for 64513:1:172.16.15.0/24, version 19
Paths: (1 available, best #1, table CEA)
Not advertised to any peer
Local
10.0.2.1 (metric 30) from 10.0.2.1 (10.0.2.1)
Origin incomplete, metric 2, localpref 100, valid, internal, best
Extended Community: RT:64513:100 OSPF DOMAIN ID:0x0005:0xAC100A010200
OSPF RT:0.0.0.0:3:0 OSPF ROUTER ID:10.0.1.1:768
mpls labels in/out nolabel/20
PE2#

PE1#show ip bgp vpnv4 vrf CEA 172.16.25.0
BGP routing table entry for 64513:1:172.16.25.0/24, version 23
Paths: (1 available, best #1, table CEA)
Not advertised to any peer
Local
10.0.4.1 (metric 30) from 10.0.4.1 (10.0.4.1)
Origin incomplete, metric 2, localpref 100, valid, internal, best
Extended Community: RT:64513:100 OSPF DOMAIN ID:0x0005:0xAC100A010200
OSPF RT:0.0.0.0:3:0 OSPF ROUTER ID:10.0.4.1:768
mpls labels in/out nolabel/20
PE1#

CE2A#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 4 subnets
C 172.16.25.0 is directly connected, Loopback1
O IA 172.16.15.0 [110/3] via 192.168.1.13, 00:00:58, FastEthernet1/0
O E2 172.16.1.0 [110/2] via 192.168.1.13, 00:07:32, FastEthernet1/0
C 172.16.2.0 is directly connected, Loopback0
10.0.0.0/32 is subnetted, 1 subnets
O E2 10.0.1.1 [110/1] via 192.168.1.13, 00:07:33, FastEthernet1/0
192.168.1.0/30 is subnetted, 2 subnets
C 192.168.1.12 is directly connected, FastEthernet1/0
O IA 192.168.1.0 [110/2] via 192.168.1.13, 00:00:58, FastEthernet1/0
CE2A#

Sunday, July 5, 2009

Implementing MPLS L3 VPN with Different PE-CE Routing Protocol OSPF & EIGRP





Configuration Guidelines::

VRF Used "CEA"
RD Used "64513:1"
RT Used "64513:1"
AS Used "64513"
PE-CE Routing Used "OSPF" for CE1A & PE1 & "EIGRP" for CE2A & PE2
IGP Used "ISIS" Level 2 between PE1 & PE2 .Loopbacks in Level 1 and PE1 & PE2 in different area.
*********************************************************************************
CE1A#sh running-config
!
interface Loopback0
description <>
ip address 10.0.1.1 255.255.255.0
ip ospf network point-to-point
!
interface Loopback1
description <>
ip address 172.168.15.1 255.255.255.0
ip ospf network point-to-point
!
interface Serial0/0
description <<>>
ip address 192.168.1.1 255.255.255.252
!
router ospf 10
log-adjacency-changes
redistribute connected route-map Only_Local
network 10.0.1.0 0.0.0.255 area 0
network 172.168.22.0 0.0.0.3 area 0
network 172.168.15.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.3 area 0
!
route-map Only_Local permit 10
match interface Loopback1 Loopback0
!
CE1A#









PE1#sh running-config
ip cef
!
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:1
route-target import 64513:1
!
mpls label protocol ldp
mpls ldp explicit-null for 10 to 20
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <>
ip address 10.0.2.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface Loopback101
description <>
ip vrf forwarding CEA
ip address 10.11.12.1 255.255.255.255
shutdown
!

interface Serial0/0
description <<>>
ip vrf forwarding CEA
ip address 192.168.1.2 255.255.255.252
clockrate 2000000
!
interface Serial0/1
description <>
ip address 192.168.1.5 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
router ospf 10 vrf CEA
domain-id 1.1.1.1
log-adjacency-changes
area 0 sham-link 10.11.12.1 10.11.13.1
redistribute bgp 64513 subnets
network 192.168.1.0 0.0.0.3 area 0
!
router isis
net 49.0001.1111.2222.3333.00
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.4.1 remote-as 64513
neighbor 10.0.4.1 description <>
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.4.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute ospf 10 vrf CEA
no auto-summary
no synchronization
exit-address-family
!
ip route 10.0.1.0 255.255.255.0 192.168.1.1
ip route 172.168.15.0 255.255.255.0 192.168.1.1
!
!
access-list 10 permit 192.168.1.0 0.0.0.3
access-list 20 permit 10.0.4.0 0.0.0.255
access-list 20 permit 10.0.3.0 0.0.0.255
!
route-map Only_Customer permit 10
match interface Serial0/0
!

PE1#




P#sh running-config
ip cef
!
mpls label protocol ldp
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <

>
ip address 10.0.3.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface Serial0/0
description <>
ip address 192.168.1.6 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
interface Serial0/1
description <>
ip address 192.168.1.9 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
router isis
net 49.0002.9999.7777.6666.00

PE2#show running-config.
!
ip cef
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:1
route-target import 64513:1
!
mpls label protocol ldp
mpls ldp explicit-null for 10 to 20
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
no ftp-server write-enable
!
!
interface Loopback0
description <>
ip address 10.0.4.1 255.255.255.255
ip router isis
isis circuit-type level-1
!

interface Loopback101
description <>
ip vrf forwarding CEA
ip address 10.11.13.1 255.255.255.255
shutdown
!
interface Serial0/0
description <>
ip address 192.168.1.10 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
interface Serial0/1
description <>
ip vrf forwarding CEA
ip address 192.168.1.13 255.255.255.252
fair-queue 64 256 16
clockrate 2000000
!
router eigrp 1
auto-summary
!
address-family ipv4 vrf CEA
redistribute bgp 64513 metric 2 100 255 100 1500
network 192.168.1.12 0.0.0.3
auto-summary
autonomous-system 100
exit-address-family
!
router eigrp 100
auto-summary
!
router isis
net 49.0002.8888.2222.1111.00
redistribute connected route-map Only_Customer
redistribute static ip
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 description <>
neighbor 10.0.2.1 update-source Loopback0
neighbor 10.0.2.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute eigrp 100
no auto-summary
no synchronization
exit-address-family
!
ip route 10.0.5.0 255.255.255.0 192.168.1.14
ip route 172.168.25.0 255.255.255.0 192.168.1.14
!
!
access-list 10 permit 192.168.1.12 0.0.0.3
access-list 20 permit 10.0.3.0 0.0.0.255
access-list 20 permit 10.0.2.0 0.0.0.255
!
route-map Only_Customer permit 10
match interface Serial0/1
!
PE2#






CE2A#sh running-config
!
interface Loopback0
description <>
ip address 10.0.5.1 255.255.255.0
!
interface Loopback1
description <>
ip address 172.168.25.1255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
description <>
ip address 192.168.1.14 255.255.255.252
!
router eigrp 100
redistribute connected route-map Only_Local
passive-interface Loopback0
passive-interface Loopback1
network 10.0.0.0
network 192.168.1.12 0.0.0.3
network 172.168.25.0
no auto-summary
no eigrp log-neighbor-changes
!
route-map Only_Local permit 10
match interface Loopback0 Loopback1
!
CE2A#









CE2A#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

172.168.15.0/24 is subnetted, 1 subnets
D EX 172.168.15.0 [170/1280537600] via 192.168.1.13, 00:03:27, Serial0/0
C 172.168.25.0/24 is directly connected, Loopback1
10.0.0.0/24 is subnetted, 2 subnets
D EX 10.0.1.0 [170/1280537600] via 192.168.1.13, 00:03:27, Serial0/0
C 10.0.5.0 is directly connected, Loopback0
192.168.1.0/30 is subnetted, 2 subnets
C 192.168.1.12 is directly connected, Serial0/0
D EX 192.168.1.0 [170/1280537600] via 192.168.1.13, 00:03:27, Serial0/0
CE2A#





CE1A#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

172.168.15.0/24 is subnetted, 1 subnets
C 172.168.15.0 is directly connected, Loopback1
O E2 172.168.25.0/24 [110/2297856] via 192.168.1.2, 00:07:05, Serial0/0
10.0.0.0/24 is subnetted, 2 subnets
C 10.0.1.0 is directly connected, Loopback0
O E2 10.0.5.0 [110/2297856] via 192.168.1.2, 00:07:05, Serial0/0
192.168.1.0/30 is subnetted, 2 subnets
O E2 192.168.1.12 [110/1] via 192.168.1.2, 00:07:05, Serial0/0
C 192.168.1.0 is directly connected, Serial0/0
CE1A#

Implementing MPLS L3 VPN with Different PE-CE Routing Protocol RIP & EIGRP LAB




Configuration Guidelines::

VRF Used "CEA"
RD Used "64513:1"
RT Used "64513:100"
AS Used "64513"
PE-CE Routing Used "RIP" for CE1A & PE1 & "EIGRP" for CE2A & PE2
IGP Used "ISIS" Level 2 between PE1 & PE2 .Loopbacks in Level 1 and PE1 & PE2 in different area.
*********************************************************************************


CE1A#sh running-config
!
interface Loopback0
description <>
ip address 10.0.1.1 255.255.255.0
!
interface Loopback1
description <>
ip address 172.168.15.1 255.255.255.0
!
!
interface Serial0/0
description <<>>
ip address 192.168.1.1 255.255.255.252
!
!
router rip
version 2
network 10.0.0.0
network 192.168.1.0
network 172.168.15.0
no auto-summary
!
CE1A#



PE1#sh running-config

ip cef
!
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
mpls label protocol ldp
mpls ldp explicit-null for 10 to 20
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <>
ip address 10.0.2.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface Serial0/0
description <<>>
ip vrf forwarding CEA
ip address 192.168.1.2 255.255.255.252
clockrate 2000000
!
interface Serial0/1
description <>
ip address 192.168.1.5 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
router isis
net 49.0001.1111.2222.3333.00
!
router rip
version 2
no auto-summary
!
address-family ipv4 vrf CEA
redistribute bgp 64513 metric 10
network 192.168.1.0
no auto-summary
version 2
exit-address-family
!
router bgp 64513
no synchronization
bgp log-neighbor-changes
neighbor 10.0.4.1 remote-as 64513
neighbor 10.0.4.1 description <>
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.4.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute rip
no auto-summary
no synchronization
exit-address-family
!
!
access-list 10 permit 192.168.1.0 0.0.0.3
access-list 20 permit 10.0.4.0 0.0.0.255
access-list 20 permit 10.0.3.0 0.0.0.255
!
route-map Only_Customer permit 10
match interface Serial0/0
!
PE1#










P#sh running-config
ip cef
mpls label protocol ldp
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <

>
ip address 10.0.3.1 255.255.255.0
ip router isis
isis circuit-type level-1
!
interface Serial0/0
description <>
ip address 192.168.1.6 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
interface Serial0/1
description <>
ip address 192.168.1.9 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
router isis
net 49.0002.9999.7777.6666.00
!
P#


PE2#sh running-config
ip cef
!
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
mpls label protocol ldp
mpls ldp explicit-null for 10 to 20
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <>
ip address 10.0.4.1 255.255.255.0
ip router isis
isis circuit-type level-1
!
interface Serial0/0
description <>
ip address 192.168.1.10 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
interface Serial0/1
description <>
ip vrf forwarding CEA
ip address 192.168.1.13 255.255.255.252
clockrate 2000000
!
router eigrp 1
no auto-summary
!
address-family ipv4 vrf CEA
redistribute bgp 64513 metric 1544 100 255 200 1500
network 192.168.1.12 0.0.0.3
no auto-summary
autonomous-system 10
exit-address-family
!
router isis
net 49.0002.8888.2222.1111.00
!
router bgp 64513
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 description <>
neighbor 10.0.2.1 update-source Loopback0
!
address-family ipv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 soft-reconfiguration inbound
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute eigrp 10
no auto-summary
no synchronization
exit-address-family
!
access-list 10 permit 192.168.1.12 0.0.0.3
access-list 20 permit 10.0.3.0 0.0.0.255
access-list 20 permit 10.0.2.0 0.0.0.255
!
route-map Only_Customer permit 10
match interface Serial0/1
!

PE2#








CE2A#sh running-config
!
interface Loopback0
description <>
ip address 10.0.5.1 255.255.255.0
!
interface Loopback1
description <>
ip address 172.168.25.1 255.255.255.0
!
interface Serial0/0
description <>
ip address 192.168.1.14 255.255.255.252
!
router eigrp 10
network 10.0.5.0 0.0.0.255
network 192.168.1.0
network 172.168.25.0
no auto-summary
no eigrp log-neighbor-changes
!

CE2A#

CE2A#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

D EX 172.168.15.0/24 [170/2195456] via 192.168.1.13, 00:06:14, Serial0/0
C 172.168.25.0/24 is directly connected, Loopback1
10.0.0.0/24 is subnetted, 2 subnets
D EX 10.0.1.0 [170/2195456] via 192.168.1.13, 00:06:14, Serial0/0
C 10.0.5.0 is directly connected, Loopback0
192.168.1.0/30 is subnetted, 2 subnets
C 192.168.1.12 is directly connected, Serial0/0
D EX 192.168.1.0 [170/2195456] via 192.168.1.13, 00:06:14, Serial0/0





CE2A#ping 10.0.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 92/163/228 ms
CE2A#


CE1A#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

C 172.168.15.0/24 is directly connected, Loopback1
R 172.168.25.0/24 [120/10] via 192.168.1.2, 00:00:13, Serial0/0
10.0.0.0/24 is subnetted, 2 subnets
C 10.0.1.0 is directly connected, Loopback0
R 10.0.5.0 [120/10] via 192.168.1.2, 00:00:13, Serial0/0
192.168.1.0/30 is subnetted, 2 subnets
R 192.168.1.12 [120/10] via 192.168.1.2, 00:00:13, Serial0/0
C 192.168.1.0 is directly connected, Serial0/0


CE1A#ping 10.0.5.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.5.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/69/116 ms
CE1A#

Implemeting MPLS L3 VPN with Different PE-CE Routing Protocol OSPF & BGP LAB


Configuration Guidelines::


IGP Used "ISIS" Level 2 between PE1 & PE2. Loopbacks in Level 1 and
PE1 & PE2 in different area.


OSPF Routing Protocol used between CE1A & PE1 and BGP used between CE2A & PE2

VRF used CEA with rd "64513:1" & rt "64513:100"

********************************************************************

CE2A#sh running-config
!
interface Loopback0
description <>
ip address 10.0.5.1 255.255.255.0
!
interface Loopback1
description <>
ip address 172.168.25.1 255.255.255.0
!
interface Serial0/0
description <>
ip address 192.168.1.14 255.255.255.252
!
!
router bgp 64514
bgp log-neighbor-changes
network 10.0.5.0 mask 255.255.255.0
network 172.168.25.0
neighbor 192.168.1.13 remote-as 64513
neighbor 192.168.1.13 local-as 64515
neighbor 192.168.1.13 description <>
neighbor 192.168.1.13 soft-reconfiguration inbound
!

CE2A#


PE2#sh running-config
ip cef
!
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
mpls label protocol ldp
mpls ldp explicit-null for 10 to 20
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <>
ip address 10.0.4.1 255.255.255.0
ip router isis
isis circuit-type level-1
!
interface Serial0/0
description <>
ip address 192.168.1.10 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
interface Serial0/1
description <>
ip vrf forwarding CEA
ip address 192.168.1.13 255.255.255.252
clockrate 2000000
!

router isis
net 49.0002.8888.2222.1111.00
!
router bgp 64513
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 description <>
neighbor 10.0.2.1 update-source Loopback0
!
address-family ipv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 soft-reconfiguration inbound
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
neighbor 192.168.1.14 remote-as 64515
neighbor 192.168.1.14 description <>
neighbor 192.168.1.14 activate
neighbor 192.168.1.14 soft-reconfiguration inbound
no auto-summary
no synchronization
exit-address-family
!
access-list 10 permit 192.168.1.12 0.0.0.3
access-list 20 permit 10.0.3.0 0.0.0.255
access-list 20 permit 10.0.2.0 0.0.0.255
!
route-map Only_Customer permit 10
match interface Serial0/1
!

PE2#



P#sh running-config

ip cef
!
mpls label protocol ldp
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <

>
ip address 10.0.3.1 255.255.255.0
ip router isis
isis circuit-type level-1
!
interface Serial0/0
description <>
ip address 192.168.1.6 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
interface Serial0/1
description <>
ip address 192.168.1.9 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
router isis
net 49.0002.9999.7777.6666.00


PE1#sh running-config
ip cef
!
ip vrf CEA
description <>
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
mpls label protocol ldp
mpls ldp explicit-null for 10 to 20
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <>
ip address 10.0.2.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface Serial0/0
description <<>>
ip vrf forwarding CEA
ip address 192.168.1.2 255.255.255.252
clockrate 2000000
!
interface Serial0/1
description <>
ip address 192.168.1.5 255.255.255.252
ip router isis
mpls label protocol ldp
tag-switching ip
clockrate 2000000
isis circuit-type level-2-only
!
router ospf 10 vrf CEA
log-adjacency-changes
redistribute bgp 64513 subnets
network 192.168.1.0 0.0.0.3 area 0
!
router isis
net 49.0001.1111.2222.3333.00
!
router bgp 64513
no synchronization
neighbor 10.0.4.1 remote-as 64513
neighbor 10.0.4.1 description <>
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.4.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute ospf 10 vrf CEA metric 2 match internal external 1 external 2
no auto-summary
no synchronization
exit-address-family
!
access-list 10 permit 192.168.1.0 0.0.0.3
access-list 20 permit 10.0.4.0 0.0.0.255
access-list 20 permit 10.0.3.0 0.0.0.255
!
route-map Only_Customer permit 10
match interface Serial0/0

PE1#






CE1A#sh running-config
!
interface Loopback0
description <>
ip address 10.0.1.1 255.255.255.0
ip ospf network point-to-point
!
interface Loopback1
description <>
ip address 172.168.15.1 255.255.255.0
ip ospf network point-to-point
!
interface Serial0/0
description <<>>
ip address 192.168.1.1 255.255.255.252
!
router ospf 10
network 10.0.1.0 0.0.0.255 area 0
network 64.65.66.0 0.0.0.255 area 1
network 192.168.1.0 0.0.0.3 area 0
network 172.168.15.0 0.0.0.3 area 1
!
CE1A#
OUTPUT VERIFICATION
CE1A#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

C 172.168.15.0/24 is directly connected, Loopback1
O E2 172.168.25.0/24 [110/1] via 192.168.1.2, 00:03:29, Serial0/0
10.0.0.0/24 is subnetted, 2 subnets
C 10.0.1.0 is directly connected, Loopback0
O E2 10.0.5.0 [110/1] via 192.168.1.2, 00:03:29, Serial0/0
192.168.1.0/30 is subnetted, 2 subnets
O E2 192.168.1.12 [110/1] via 192.168.1.2, 00:10:37, Serial0/0
C 192.168.1.0 is directly connected, Serial0/0
CE1A#




CE2A#sh ip bgp
BGP table version is 7, local router ID is 210.211.212.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path
*> 10.0.1.0/24 192.168.1.13 0 64515 64513 ?
*> 10.0.5.0/24 0.0.0.0 0 32768 i
*> 192.168.1.0/30 192.168.1.13 0 64515 64513 ?
*> 192.168.1.12/30 192.168.1.13 0 0 64515 64513 ?
*> 172.168.15.0 192.168.1.13 0 64515 64513 ?
*> 172.168.25.0 0.0.0.0 0 32768 i
CE2A#ping 10.0.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 92/160/236 ms
CE2A#sh ip rou







CE2A#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

B 172.168.15.0/24 [20/0] via 192.168.1.13, 00:01:36
C 172.168.25.0/24 is directly connected, Loopback1
10.0.0.0/24 is subnetted, 2 subnets
B 10.0.1.0 [20/0] via 192.168.1.13, 00:01:36
C 10.0.5.0 is directly connected, Loopback0
192.168.1.0/30 is subnetted, 2 subnets
C 192.168.1.12 is directly connected, Serial0/0
B 192.168.1.0 [20/0] via 192.168.1.13, 00:01:36
CE2A#





CE1A#ping 210.211.212.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 210.211.212.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 56/113/176 ms
CE1A#
CE2A#ping 201.202.203.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 201.202.203.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 48/124/256 ms
CE2A#


PE2#sh ip bgp vpnv4 vrf CEA 210.211.212.1
BGP routing table entry for 64513:1:172.168.25.0/24, version 49
Paths: (2 available, best #1, table CEA)
Advertised to update-groups:
1
64515 64514
192.168.1.14 from 192.168.1.14 (210.211.212.1)
Origin IGP, metric 0, localpref 100, valid, external, best
Extended Community: RT:64513:100
64515 64514, (received-only)
192.168.1.14 from 192.168.1.14 (210.211.212.1)
Origin IGP, metric 0, localpref 100, valid, external
PE2#

Implementing MPLS L3 VPN with PE-CE Routing Protocol Static LAB



Configuration Guidelines::

VRF Used "CEA"
RD Used "64513:1"
RT Used "64513:1"
AS Used "64513"
PE-CE Routing Used "Static"
IGP Used OSPF

***********************************************************************************
CE1A#sh running-config
!
interface Loopback0
ip address 10.0.1.1 255.255.255.0
description <>
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
description <>
ip address 192.168.1.1 255.255.255.252
!
ip route 0.0.0.0 0.0.0.0 192.168.1.2

CE1A#

PE1#sh running-config

ip cef
!
ip vrf CEA
rd 64513:1
route-target export 64513:1
route-target import 64513:1
!
mpls label protocol ldp
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <>
ip address 10.0.2.1 255.255.255.0
ip ospf network point-to-point
!

interface Serial0/0
ip vrf forwarding CEA
description <>
ip address 192.168.1.2 255.255.255.252
clockrate 2000000
!

interface Serial0/1
description <>
ip address 192.168.1.5 255.255.255.252
mpls label protocol ldp
tag-switching ip
clockrate 2000000
!
router ospf 10
log-adjacency-changes
network 10.0.2.0 0.0.0.255 area 0
network 192.168.1.4 0.0.0.3 area 0
!
router bgp 5000
no synchronization
bgp log-neighbor-changes
neighbor 10.0.4.1 remote-as 5000
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.4.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!
ip classless
ip route vrf CEA 10.0.1.0 255.255.255.0 Serial0/0
!

PE1#













P#sh running-config
ip cef
!
mpls label protocol ldp
tag-switching tdp router-id Loopback0
!
interface Loopback0
description <>
ip address 10.0.3.1 255.255.255.0
ip ospf network point-to-point
!
interface Serial0/0
description <>
ip address 192.168.1.6 255.255.255.252
mpls label protocol ldp
tag-switching ip
clockrate 2000000
!

interface Serial0/1
description <>
ip address 192.168.1.9 255.255.255.252
mpls label protocol ldp
tag-switching ip
clockrate 2000000
!
router ospf 10
log-adjacency-changes
network 10.0.3.0 0.0.0.255 area 0
network 192.168.1.4 0.0.0.3 area 0
network 192.168.1.8 0.0.0.3 area 0
!

P#



PE2#sh running-config
ip cef
!
mpls label protocol ldp
tag-switching tdp router-id Loopback0
!
ip vrf CEA
rd 64513:1
route-target export 64513:1
route-target import 64513:1
!
!
interface Loopback0
description <>

ip address 10.0.4.1 255.255.255.0
ip ospf network point-to-point
!

interface Serial0/0
description <>
ip address 192.168.1.10 255.255.255.252
mpls label protocol ldp
tag-switching ip
clockrate 2000000
!
interface Serial0/1
description <>
ip vrf forwarding CEA
ip address 192.168.1.13 255.255.255.252
clockrate 2000000
!
!
router ospf 10
log-adjacency-changes
network 10.0.4.0 0.0.0.255 area 0
network 192.168.1.8 0.0.0.3 area 0
!
router bgp 5000
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 5000
neighbor 10.0.2.1 update-source Loopback0
neighbor 10.0.2.1 soft-reconfiguration inbound
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!
ip route vrf CEA 10.0.5.0 255.255.255.0 Serial0/1
!
PE2#




CE2A#sh running-config
!
interface Loopback0
description <>
ip address 10.0.5.1 255.255.255.0
!
interface Serial0/0
description <>
ip address 192.168.1.14 255.255.255.252
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.13
CE2A#










CE2A#ping 10.0.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/124/204 ms
CE2A#tra
CE2A#traceroute 10.0.1.1

Type escape sequence to abort.
Tracing the route to 10.0.1.1

1 192.168.1.13 84 msec 32 msec 8 msec
2 192.168.1.9 192 msec 184 msec 188 msec
3 192.168.1.2 128 msec 156 msec 96 msec
4 192.168.1.1 204 msec 188 msec *
CE2A#