MPLS L3 VPN Traffic Optimization for Multihomed CEs for Internet Access via Global Route Leaking

Confgiguration Guidelines
*************************************************************************

Scenario - A Multihomed MPLS VPN Customer wants to do Split Routing for Internet
Access with the /24 Public IP Block Provided by One of the ISP. He wants to use 2 /25s
on his LAN for his two departments and have one department using ISPA for Forward/Reverse
Traffic and other department using ISPB for Forward/Reverse Traffic


Design Considerations and Soultions:

Both the ISPs can only announce the /24 to Internet Peerings as /24 is the Lowest Prefix
allowed over Public Internet.

To Provide this Kind of Service a must is for
both of the ISPs to have a Peering between them accepting More Specific Prefixes than /24
so that Internally they can accept the /25s and manipulate Local Pref higher on one of the
/25s to direct the return traffic via another ISP.


For Forward traffic diversion on each ISP Links we need to use Policy Based Routing on the
LAN Side and set the Next Hop for each /25 towards each ISP.

In case of PBR when the Next Hop is unavailable the routing is automatically switched over to
the best available path in the routing table for the destination in Question.

For WAN Redundancy between ISPs both the ISPs share Internet Traffic on their Peering Links.

Also since this MPLS VPN Services Both ISPs are providing Internet Access over the Public
IP Block via Global Route Leaking.

Caveats: This design will suffer from having a Dedicated peering between ISPs to achieve the
desired traffic optimization. Also they both should agree to accept >/24 Prefixes.


ISP A AS used 64514-
VRF USed CEA
rd 64514:1
rt 64514:100

ISP B AS used 64513-
VRF USed CEA
rd 64513:1
rt 64513:100

Customer AS used 64514
PE-CE ROuting Protocol is EBGP
IGP is OSPF

Traffic Optimized as:
Normal Condition- CE1A SendS Forward Traffic via ISPA
and Recives Return via ISPA

CE2A SendS Forward Traffic via ISPB
and Recives Return via ISPA-ISPB


Problem Condition 1- ISP A WAN Connection to CEA Down.
CE1A SendS Forward Traffic via ISPB through PBR Failing and
automatic Switchover to ISPB WAN Link and Recives Return via ISPB.
This Switchover will cause Traffic Disruption for ~30 Seconds for CE1A Users

CE2A SendS Forward Traffic via ISPB
and Recives Return via ISPB Normally as Before


Problem Condition3- ISP A WAN Connection to Internet Down.
CE1A SendS Forward Traffic via ISPA-ISPB through BGP Failover Redundancy in ISP Core
and automatic Switchover to ISPB WAN Link and Recives Return via ISPB.
This Switchover will cause Traffic Disruption for ~30 Seconds for CE1A Users

CE2A SendS Forward Traffic via ISPB
and Recives Return via ISPB Normally as Before

Problem Condition3- ISP A WAN Connection to Internet Down.
CE1A SendS Forward Traffic via ISPA-ISPB through BGP Failover Redundancy in ISP Core
and automatic Switchover to ISPB WAN Link and Recives Return via ISPB.
This Switchover will cause Traffic Disruption for ~30 Seconds for CE1A Users

CE2A SendS Forward Traffic via ISPB
and Recives Return via ISPB Normally as Before


Problem Condition4- ISP B WAN Connection to Internet Down.
CE2A SendS Forward Traffic via ISPB-ISPA through BGP Failover Redundancy in ISP Core
and automatic Switchover to ISPA WAN Link and Recives Return via ISPA-ISPB.
This Switchover will cause Traffic Disruption for ~30 Seconds for CE2A Users

CE1A SendS Forward Traffic via ISPA
and Recives Return via ISPA Normally as Before
*********************************************************
****************************************************************************
CE1A#sh running-config
Building configuration...

Current configuration : 685 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE1A
!
boot-start-marker
boot-end-marker
!
no logging console
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
!
no ip domain lookup
no ftp-server write-enable
!
!
!
!
interface FastEthernet0/0
ip address 10.0.100.2 255.255.255.128
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
router ospf 1
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip http server
!
!
line con 0
line aux 0
line vty 0 4
!
!
!
end

CE1A#

CE2A#sh running-config
Building configuration...

Current configuration : 687 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE2A
!
boot-start-marker
boot-end-marker
!
no logging console
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
!
no ip domain lookup
no ftp-server write-enable
!
!
!
!
interface FastEthernet0/0
ip address 10.0.100.130 255.255.255.128
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
router ospf 1
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip http server
!
!
line con 0
line aux 0
line vty 0 4
!
!
!
end

CE2A#
CE2A#
CEA#sh running-config
Building configuration...

Current configuration : 1949 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CEA
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
description CE1A
ip address 10.0.100.1 255.255.255.128
ip policy route-map ISPA
duplex auto
speed auto
!
interface FastEthernet0/1
description CE2A
ip address 10.0.100.129 255.255.255.128
ip policy route-map ISPB
duplex auto
speed auto
!
interface Serial1/0
description ISPA
ip address 10.0.2.1 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
no fair-queue
!
interface Serial1/1
description <>
ip address 10.0.1.1 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router ospf 1
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
router bgp 64515
no synchronization
bgp log-neighbor-changes
network 10.0.100.0 mask 255.255.255.0
network 10.0.100.0 mask 255.255.255.128
network 10.0.100.128 mask 255.255.255.128
neighbor 10.0.1.2 remote-as 64513
neighbor 10.0.1.2 soft-reconfiguration inbound
neighbor 10.0.2.2 remote-as 64514
neighbor 10.0.2.2 soft-reconfiguration inbound
no auto-summary
!
ip http server
ip route 10.0.100.0 255.255.255.0 Null0
!
!
!
access-list 113 permit ip 10.0.100.128 0.0.0.127 any
access-list 114 permit ip 10.0.100.0 0.0.0.127 any
!
route-map ISPB permit 10
match ip address 113
set ip next-hop 10.0.1.2
!
route-map ISPA permit 10
match ip address 114
set ip next-hop 10.0.2.2
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
!
!
end

CEA#

ISPB#sh running-config
Building configuration...

Current configuration : 3394 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISPB
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
ip vrf CEA
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
mpls label protocol ldp
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.1.254 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
description <>
ip address 192.168.1.1 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
no fair-queue
!
interface Serial1/1
ip address 192.168.1.5 255.255.255.252
no dce-terminal-timing-enable
!
interface Serial1/2
ip vrf forwarding CEA
ip address 10.0.1.2 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router bgp 64513
no bgp default ipv4-unicast
no bgp default route-target filter
bgp log-neighbor-changes
neighbor 192.168.1.2 remote-as 64516
neighbor 192.168.1.6 remote-as 64514
!
address-family ipv4
neighbor 192.168.1.2 activate
neighbor 192.168.1.2 soft-reconfiguration inbound
neighbor 192.168.1.2 route-map From_Internet in
neighbor 192.168.1.2 route-map Internet out
neighbor 192.168.1.6 activate
neighbor 192.168.1.6 soft-reconfiguration inbound
neighbor 192.168.1.6 route-map From_ISPA in
neighbor 192.168.1.6 route-map To_ISPA out
no auto-summary
no synchronization
network 10.0.100.0 mask 255.255.255.0
network 10.0.100.0 mask 255.255.255.128
network 10.0.100.128 mask 255.255.255.128
network 192.168.1.0
exit-address-family
!
address-family ipv4 vrf CEA
neighbor 10.0.1.1 remote-as 64515
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 default-originate
neighbor 10.0.1.1 soft-reconfiguration inbound
no synchronization
exit-address-family
!
ip http server
ip route 10.0.100.0 255.255.255.0 Null0
ip route 10.0.100.0 255.255.255.128 Serial1/2
ip route 10.0.100.128 255.255.255.128 Serial1/2
ip route 192.168.1.0 255.255.255.0 Null0
ip route vrf CEA 0.0.0.0 0.0.0.0 Serial1/0 192.168.1.2 global
ip route vrf CEA 0.0.0.0 0.0.0.0 192.168.1.5 global 14
!
!
ip bgp-community new-format
ip community-list 113 permit 64513:999
!
!
ip prefix-list Aggregates seq 5 permit 192.168.1.0/24
!
ip prefix-list Internet seq 5 deny 10.0.100.0/25
ip prefix-list Internet seq 10 deny 10.0.100.128/25
ip prefix-list Internet seq 15 permit 10.0.100.0/24
!
ip prefix-list To_ISPA seq 5 permit 10.0.100.128/25
ip prefix-list To_ISPA seq 10 permit 10.0.100.0/25
ip prefix-list To_ISPA seq 15 permit 192.168.1.0/24
!
route-map Internet permit 10
match ip address prefix-list Internet
set as-path prepend 64513 64513
!
route-map Internet permit 20
match ip address prefix-list Aggregates
!
route-map Internet permit 30
match community 113 64513:999
!
route-map From_Internet permit 10
set community 64513:999
!
route-map From_ISPA permit 10
set community 64513:999
!
route-map To_ISPA permit 10
match ip address prefix-list To_ISPA
!
route-map To_ISPA permit 20
match community 113
!
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end

ISPB#
ISPB#


ISPA#sh running-config
Building configuration...

% MPLS not supported on interface Loopback0
Current configuration : 2858 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISPA
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
ip vrf CEA
rd 64514:1
route-target export 64514:100
route-target import 64514:100
!
mpls label protocol ldp
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 172.16.1.254 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip vrf forwarding CEA
ip address 10.0.2.2 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
no fair-queue
!
interface Serial1/1
ip address 172.16.1.1 255.255.255.252
no dce-terminal-timing-enable
!
interface Serial1/2
ip address 192.168.1.6 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router bgp 64514
bgp router-id 172.16.1.254
no bgp default ipv4-unicast
no bgp default route-target filter
bgp log-neighbor-changes
neighbor 172.16.1.2 remote-as 64516
neighbor 192.168.1.5 remote-as 64513
!
address-family ipv4
neighbor 172.16.1.2 activate
neighbor 172.16.1.2 soft-reconfiguration inbound
neighbor 172.16.1.2 route-map Internet out
neighbor 192.168.1.5 activate
neighbor 192.168.1.5 soft-reconfiguration inbound
neighbor 192.168.1.5 route-map From_ISPB in
no auto-summary
no synchronization
network 10.0.100.0 mask 255.255.255.0
network 10.0.100.0 mask 255.255.255.128
network 10.0.100.128 mask 255.255.255.128
network 172.16.1.0 mask 255.255.255.0
exit-address-family
!
address-family ipv4 vrf CEA
neighbor 10.0.2.1 remote-as 64515
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 default-originate
neighbor 10.0.2.1 soft-reconfiguration inbound
no synchronization
exit-address-family
!
ip http server
ip route 10.0.100.0 255.255.255.0 Null0
ip route 10.0.100.0 255.255.255.128 Serial1/0
ip route 10.0.100.128 255.255.255.128 Serial1/0 254
ip route 172.16.1.0 255.255.255.0 Null0
ip route vrf CEA 0.0.0.0 0.0.0.0 Serial1/1 172.16.1.2 global
ip route vrf CEA 0.0.0.0 0.0.0.0 192.168.1.6 global 13
!
!
!
!
ip prefix-list From_ISPB seq 5 permit 10.0.100.128/25
!
ip prefix-list Internet seq 5 permit 10.0.100.0/24
ip prefix-list Internet seq 10 permit 172.16.1.0/24
ip prefix-list Internet seq 15 permit 192.168.1.0/24
!
route-map Internet permit 10
match ip address prefix-list Internet
!
route-map From_ISPB permit 10
match ip address prefix-list From_ISPB
set local-preference 160
set weight 32769
!
route-map From_ISPB permit 20
!
!
mpls ldp router-id Loopback0
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
!
!
end

ISPA#
ISPA#


Internet#sh running-config
Building configuration...

Current configuration : 1596 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Internet
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.254.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
description <>
ip address 172.16.1.2 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
no fair-queue
!
interface Serial1/1
description <>
ip address 192.168.1.2 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router bgp 64516
bgp router-id 10.0.254.1
bgp log-neighbor-changes
neighbor 172.16.1.1 remote-as 64514
neighbor 192.168.1.1 remote-as 64513
!
address-family ipv4
neighbor 172.16.1.1 activate
neighbor 172.16.1.1 soft-reconfiguration inbound
neighbor 192.168.1.1 activate
neighbor 192.168.1.1 soft-reconfiguration inbound
no auto-summary
no synchronization
network 10.0.254.0 mask 255.255.255.0
exit-address-family
!
ip http server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
!
!
end

Internet#

*************************************************
OUTPUT
*************************************************
SHOW COMMANDS
*************************************************
PBR
****************************************************
CEA#show route-map
route-map ISPB, permit, sequence 10
Match clauses:
ip address (access-lists): 113
Set clauses:
ip next-hop 10.0.1.2
Policy routing matches: 313 packets, 25144 bytes
route-map ISPA, permit, sequence 10
Match clauses:
ip address (access-lists): 114
Set clauses:
ip next-hop 10.0.2.2
Policy routing matches: 315 packets, 24494 bytes
CEA#

CEA#show access-lists
Extended IP access list 113
10 permit ip 10.0.100.128 0.0.0.127 any (862 matches)
Extended IP access list 114
10 permit ip 10.0.100.0 0.0.0.127 any (831 matches)
CEA#

CEA#sh ip int bri
Interface IP-Address OK? Method Status Prot
ocol
FastEthernet0/0 10.0.100.1 YES manual up up

FastEthernet0/1 10.0.100.129 YES manual up up

Serial1/0 10.0.2.1 YES manual up up

Serial1/1 10.0.1.1 YES manual up up

Serial1/2 unassigned YES unset administratively down down

Serial1/3 unassigned YES unset administratively down down

CEA#sh int des
Interface Status Protocol Description
Fa0/0 up up CE1A
Fa0/1 up up CE2A
Se1/0 up up ISPA
Se1/1 up up <>
Se1/2 admin down down
Se1/3 admin down down
CEA#
****************************************************************

CE1A#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
10.0.100.129 1 FULL/DR 00:00:35 10.0.100.1 FastEthernet0/
0
CE1A#

CE1A#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O 10.0.2.0/30 [110/65] via 10.0.100.1, 00:06:04, FastEthernet0/0
O 10.0.1.0/30 [110/65] via 10.0.100.1, 00:06:04, FastEthernet0/0
C 10.0.100.0/25 is directly connected, FastEthernet0/0
O 10.0.100.128/25 [110/2] via 10.0.100.1, 00:06:04, FastEthernet0/0
S* 0.0.0.0/0 is directly connected, FastEthernet0/0
CE1A#

CE2A#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
10.0.100.129 1 FULL/BDR 00:00:30 10.0.100.129 FastEthernet0/
0
CE2A#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O 10.0.2.0/30 [110/65] via 10.0.100.129, 00:06:37, FastEthernet0/0
O 10.0.1.0/30 [110/65] via 10.0.100.129, 00:06:37, FastEthernet0/0
O 10.0.100.0/25 [110/2] via 10.0.100.129, 00:06:37, FastEthernet0/0
C 10.0.100.128/25 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 is directly connected, FastEthernet0/0
CE2A#

CEA#sh ip ospf nei

Neighbor ID Pri State Dead Time Address Interface
10.0.100.130 1 FULL/DR 00:00:33 10.0.100.130 FastEthernet0/
1
10.0.100.2 1 FULL/BDR 00:00:32 10.0.100.2 FastEthernet0/
0
CEA#sh ip bgp sum
BGP router identifier 10.0.1.1, local AS number 64515
BGP table version is 11, main routing table version 11
4 network entries using 468 bytes of memory
5 path entries using 260 bytes of memory
4/2 BGP path/bestpath attribute entries using 496 bytes of memory
2 BGP AS-PATH entries using 48 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 1272 total bytes of memory
BGP activity 5/1 prefixes, 12/7 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.0.1.2 4 64513 99 106 11 0 0 00:06:49 1
10.0.2.2 4 64514 92 101 11 0 0 00:09:45 1
CEA#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.0.2.2 to network 0.0.0.0

10.0.0.0/8 is variably subnetted, 5 subnets, 3 masks
C 10.0.2.0/30 is directly connected, Serial1/0
C 10.0.1.0/30 is directly connected, Serial1/1
C 10.0.100.0/25 is directly connected, FastEthernet0/0
S 10.0.100.0/24 is directly connected, Null0
C 10.0.100.128/25 is directly connected, FastEthernet0/1
B* 0.0.0.0/0 [20/0] via 10.0.2.2, 00:09:02
CEA#


ISPB#sh ip route vrf CEA

Routing Table: CEA
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 192.168.1.2 to network 0.0.0.0

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
C 10.0.1.0/30 is directly connected, Serial1/2
B 10.0.100.0/25 [20/0] via 10.0.1.1, 00:10:14
B 10.0.100.0/24 [20/0] via 10.0.1.1, 00:10:14
B 10.0.100.128/25 [20/0] via 10.0.1.1, 00:10:14
S* 0.0.0.0/0 [1/0] via 192.168.1.2

ISPB#show route-map
route-map Internet, permit, sequence 10
Match clauses:
ip address prefix-lists: Internet
Set clauses:
as-path prepend 64513 64513
Policy routing matches: 0 packets, 0 bytes
route-map Internet, permit, sequence 20
Match clauses:
ip address prefix-lists: Aggregates
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map Internet, permit, sequence 30
Match clauses:
community (community-list filter): 113 64513:999
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map From_Internet, permit, sequence 10
Match clauses:
Set clauses:
community 64513:999
Policy routing matches: 0 packets, 0 bytes
route-map From_ISPA, permit, sequence 10
Match clauses:
Set clauses:
community 64513:999
Policy routing matches: 0 packets, 0 bytes
route-map To_ISPA, permit, sequence 10
Match clauses:
ip address prefix-lists: To_ISPA
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map To_ISPA, permit, sequence 20
Match clauses:
community (community-list filter): 113
Set clauses:
Policy routing matches: 0 packets, 0 bytes
ISPB#
ISPB#
ISPB#

ISPB#sh ip bgp summary
BGP router identifier 192.168.1.1, local AS number 64513
BGP table version is 45, main routing table version 45
6 network entries using 702 bytes of memory
18 path entries using 936 bytes of memory
14/3 BGP path/bestpath attribute entries using 1736 bytes of memory
6 BGP AS-PATH entries using 144 bytes of memory
1 BGP community entries using 24 bytes of memory
1 BGP extended community entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 3566 total bytes of memory
7 received paths for inbound soft reconfiguration
BGP activity 28/18 prefixes, 97/71 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
192.168.1.2 4 64516 205 204 45 0 0 00:03:27 3
192.168.1.6 4 64514 130 112 45 0 0 01:37:15 4
ISPB#sh ip bgp
BGP table version is 45, local router ID is 192.168.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path
*> 10.0.100.0/25 0.0.0.0 0 32768 i
* 192.168.1.6 0 0 64514 i
* 10.0.100.0/24 192.168.1.2 0 64516 64514 i
* 192.168.1.6 0 0 64514 i
*> 0.0.0.0 0 32768 i
*> 10.0.100.128/25 0.0.0.0 0 32768 i
*> 10.0.254.0/24 192.168.1.2 0 0 64516 i
* 192.168.1.6 0 64514 64516 i
* 172.16.1.0/24 192.168.1.2 0 64516 64514 i
*> 192.168.1.6 0 0 64514 i
*> 192.168.1.0 0.0.0.0 0 32768 i
ISPB#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 1 subnets
B 172.16.1.0 [20/0] via 192.168.1.6, 00:36:04
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
S 10.0.100.0/25 is directly connected, Serial1/2
S 10.0.100.0/24 is directly connected, Null0
S 10.0.100.128/25 is directly connected, Serial1/2
B 10.0.254.0/24 [20/0] via 192.168.1.2, 00:02:16
192.168.1.0/24 is variably subnetted, 4 subnets, 3 masks
C 192.168.1.0/30 is directly connected, Serial1/0
S 192.168.1.0/24 is directly connected, Null0
C 192.168.1.4/30 is directly connected, Serial1/1
C 192.168.1.254/32 is directly connected, Loopback0
ISPB#
ISPA#sh ip route vrf CEA

Routing Table: CEA
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 172.16.1.2 to network 0.0.0.0

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
C 10.0.2.0/30 is directly connected, Serial1/0
B 10.0.100.0/25 [20/0] via 10.0.2.1, 00:14:14
B 10.0.100.0/24 [20/0] via 10.0.2.1, 00:14:14
B 10.0.100.128/25 [20/0] via 10.0.2.1, 00:14:14
S* 0.0.0.0/0 [1/0] via 172.16.1.2
ISPA#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/16 is variably subnetted, 3 subnets, 3 masks
C 172.16.1.254/32 is directly connected, Loopback0
C 172.16.1.0/30 is directly connected, Serial1/1
S 172.16.1.0/24 is directly connected, Null0
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
S 10.0.100.0/25 is directly connected, Serial1/0
S 10.0.100.0/24 is directly connected, Null0
B 10.0.100.128/25 [20/0] via 192.168.1.5, 00:14:06
B 10.0.254.0/24 [20/0] via 172.16.1.2, 00:04:24
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
B 192.168.1.0/24 [20/0] via 192.168.1.5, 00:52:13
C 192.168.1.4/30 is directly connected, Serial1/2
ISPA#sh ip bgp
BGP table version is 45, local router ID is 172.16.1.254
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path
* 10.0.100.0/25 192.168.1.5 0 0 64513 i
*> 0.0.0.0 0 32768 i
*> 10.0.100.0/24 0.0.0.0 0 32768 i
*> 10.0.100.128/25 192.168.1.5 0 160 32769 64513 i
* 10.0.254.0/24 192.168.1.5 0 64513 64516 i
*> 172.16.1.2 0 0 64516 i
*> 172.16.1.0/24 0.0.0.0 0 32768 i
* 192.168.1.0 172.16.1.2 0 64516 64513 i
*> 192.168.1.5 0 0 64513 i
ISPA#sh ip bgp sum
BGP router identifier 172.16.1.254, local AS number 64514
BGP table version is 45, main routing table version 45
6 network entries using 702 bytes of memory
10 path entries using 520 bytes of memory
9/4 BGP path/bestpath attribute entries using 1116 bytes of memory
5 BGP AS-PATH entries using 120 bytes of memory
1 BGP extended community entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 2482 total bytes of memory
1 received paths for inbound soft reconfiguration
BGP activity 31/22 prefixes, 79/63 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
172.16.1.2 4 64516 175 165 45 0 0 00:04:30 2
192.168.1.5 4 64513 113 131 45 0 0 01:38:13 4
ISPA#

ISPA#show route-map
route-map Internet, permit, sequence 10
Match clauses:
ip address prefix-lists: Internet
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map From_ISPB, permit, sequence 10
Match clauses:
ip address prefix-lists: From_ISPB
Set clauses:
local-preference 160
weight 32769
Policy routing matches: 0 packets, 0 bytes
route-map From_ISPB, permit, sequence 20
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes
ISPA#sh ip prefix-list
ip prefix-list From_ISPB: 1 entries
seq 5 permit 10.0.100.128/25
ip prefix-list Internet: 3 entries
seq 5 permit 10.0.100.0/24
seq 10 permit 172.16.1.0/24
seq 15 permit 192.168.1.0/24
ISPA#

Internet#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks
C 172.16.1.0/30 is directly connected, Serial1/0
B 172.16.1.0/24 [20/0] via 172.16.1.1, 00:12:59
10.0.0.0/24 is subnetted, 2 subnets
B 10.0.100.0 [20/0] via 172.16.1.1, 00:42:31
C 10.0.254.0 is directly connected, Loopback0
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/30 is directly connected, Serial1/1
B 192.168.1.0/24 [20/0] via 192.168.1.1, 00:15:34
Internet#sh ip bgp sum
BGP router identifier 10.0.254.1, local AS number 64516
BGP table version is 31, main routing table version 31
4 network entries using 468 bytes of memory
7 path entries using 364 bytes of memory
7/3 BGP path/bestpath attribute entries using 868 bytes of memory
5 BGP AS-PATH entries using 120 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 1820 total bytes of memory
BGP activity 13/9 prefixes, 19/12 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
172.16.1.1 4 64514 129 135 31 0 0 01:14:28 3
192.168.1.1 4 64513 152 156 31 0 0 02:11:18 3
Internet#sh ip bgp
BGP table version is 31, local router ID is 10.0.254.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path
*> 10.0.100.0/24 172.16.1.1 0 0 64514 i
* 192.168.1.1 0 0 64513 64513 64513 i
*> 10.0.254.0/24 0.0.0.0 0 32768 i
* 172.16.1.0/24 192.168.1.1 0 64513 64514 i
*> 172.16.1.1 0 0 64514 i
* 192.168.1.0 172.16.1.1 0 64514 64513 i
*> 192.168.1.1 0 0 64513 i
Internet#

**************************************************
TRACE OUTPUT
**************************************************

Normal Condition- CE1A SendS Forward Traffic via ISPA
and Recives Return via ISPA

CE1A#traceroute 10.0.254.1

Type escape sequence to abort.
Tracing the route to 10.0.254.1

1 10.0.100.1 292 msec 28 msec 120 msec
2 10.0.2.2 240 msec 72 msec 100 msec
3 172.16.1.2 456 msec * 392 msec
CE1A#

Internet#traceroute 10.0.100.2

Type escape sequence to abort.
Tracing the route to 10.0.100.2

1 172.16.1.1 [AS 64514] 72 msec 184 msec 48 msec
2 10.0.2.1 168 msec 136 msec 160 msec
3 10.0.100.2 [AS 64514] 216 msec * 136 msec
Internet#

Normal Condition- CE2A SendS Forward Traffic via ISPB
and Recives Return via ISPA-ISPB

CE2A#traceroute 10.0.254.1

Type escape sequence to abort.
Tracing the route to 10.0.254.1

1 10.0.100.129 320 msec 240 msec 136 msec
2 10.0.1.2 156 msec 88 msec 156 msec
3 192.168.1.2 248 msec * 388 msec
CE2A#


Internet#traceroute 10.0.100.130

Type escape sequence to abort.
Tracing the route to 10.0.100.130

1 172.16.1.1 [AS 64514] 88 msec 100 msec 48 msec
2 192.168.1.5 [AS 64513] 156 msec 60 msec 176 msec
3 10.0.1.1 168 msec 128 msec 128 msec
4 10.0.100.130 [AS 64514] 176 msec * 176 msec
Internet#

**********************************************************

Problem Condition 1- ISP A WAN Connection to CEA Down.
CE1A SendS Forward Traffic via ISPB through PBR Failing and
automatic Switchover to ISPB WAN Link and Recives Return via ISPB.
This Switchover will cause Traffic Disruption for ~30 Seconds for CE1A Users

CE2A SendS Forward Traffic via ISPB
and Recives Return via ISPB Normally as Before

ISPA#sh ip int brief
Interface IP-Address OK? Method Status Prot
ocol
FastEthernet0/0 unassigned YES unset administratively down down

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 10.0.2.2 YES manual administratively down down

Serial1/1 172.16.1.1 YES manual up up

Serial1/2 192.168.1.6 YES manual up up

Serial1/3 unassigned YES unset administratively down down

Loopback0 172.16.1.254 YES manual up up

ISPA#


CE1A#traceroute 10.0.254.1

Type escape sequence to abort.
Tracing the route to 10.0.254.1

1 10.0.100.1 200 msec 64 msec 84 msec
2 10.0.1.2 156 msec 200 msec 168 msec
3 192.168.1.2 264 msec * 556 msec
CE1A#

Internet#traceroute 10.0.100.2

Type escape sequence to abort.
Tracing the route to 10.0.100.2

1 172.16.1.1 [AS 64514] 112 msec 152 msec 48 msec
2 172.16.1.1 [AS 64514] !H * !H

Internet#traceroute 10.0.100.2

Type escape sequence to abort.
Tracing the route to 10.0.100.2

1 172.16.1.1 [AS 64514] 120 msec 120 msec 72 msec
2 192.168.1.5 [AS 64513] 336 msec 96 msec 288 msec
3 10.0.1.1 120 msec 672 msec 120 msec
4 10.0.100.2 [AS 64514] 264 msec * 168 msec
Internet#



CE2A#traceroute 10.0.254.1

Type escape sequence to abort.
Tracing the route to 10.0.254.1

1 10.0.100.129 200 msec 288 msec 136 msec
2 10.0.1.2 144 msec 288 msec 124 msec
3 192.168.1.2 528 msec * 488 msec
CE2A#

Internet#traceroute 10.0.100.130

Type escape sequence to abort.
Tracing the route to 10.0.100.130

1 172.16.1.1 [AS 64514] 124 msec 68 msec 48 msec
2 192.168.1.5 [AS 64513] 264 msec 236 msec 88 msec
3 10.0.1.1 140 msec 216 msec 208 msec
4 10.0.100.130 [AS 64514] 160 msec * 208 msec
Internet#

******************************************************************


Problem Condition 2- ISB WAN Connection to CEA Down.
CE2A SendS Forward Traffic via ISPA through PBR Failing and
automatic Switchover to ISPA WAN Link and Recives Return via ISPA.
This Switchover will cause Traffic Disruption for ~30 Seconds for CE2A Users

CE1A SendS Forward Traffic via ISPA
and Recives Return via ISPA Normally as Before



ISPB#sh ip int brief
Interface IP-Address OK? Method Status Prot
ocol
FastEthernet0/0 unassigned YES unset administratively down down

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 192.168.1.1 YES SLARP up up

Serial1/1 192.168.1.5 YES manual up up

Serial1/2 10.0.1.2 YES manual administratively down down

Serial1/3 unassigned YES unset administratively down down

Loopback0 192.168.1.254 YES manual up up

ISPB#

CE2A#traceroute 10.0.254.1

Type escape sequence to abort.
Tracing the route to 10.0.254.1

1 10.0.100.129 140 msec 108 msec 120 msec
2 10.0.2.2 220 msec 72 msec 172 msec
3 172.16.1.2 308 msec * 364 msec
CE2A#

Internet#traceroute 10.0.100.130

Type escape sequence to abort.
Tracing the route to 10.0.100.130

1 172.16.1.1 [AS 64514] 124 msec 52 msec 48 msec
2 192.168.1.5 [AS 64513] 200 msec 220 msec 208 msec
3 192.168.1.5 [AS 64513] !H * !H
Internet#traceroute 10.0.100.130

Type escape sequence to abort.
Tracing the route to 10.0.100.130

1 172.16.1.1 [AS 64514] 72 msec 168 msec 216 msec
2 10.0.2.1 120 msec 104 msec 160 msec
3 10.0.100.130 [AS 64514] 176 msec * 132 msec
Internet#


CE1A#traceroute 10.0.254.1

Type escape sequence to abort.
Tracing the route to 10.0.254.1

1 10.0.100.1 64 msec 44 msec 88 msec
2 10.0.2.2 228 msec 132 msec 244 msec
3 172.16.1.2 320 msec * 380 msec
CE1A#

Internet#traceroute 10.0.100.2

Type escape sequence to abort.
Tracing the route to 10.0.100.2

1 192.168.1.1 [AS 64513] 92 msec 200 msec 48 msec
2 192.168.1.6 [AS 64513] 128 msec 152 msec 96 msec
3 10.0.2.1 152 msec 152 msec 172 msec
4 10.0.100.2 [AS 64514] 212 msec * 136 msec
Internet#


*************************************************************

Problem Condition3- ISP A WAN Connection to Internet Down.
CE1A SendS Forward Traffic via ISPA-ISPB through BGP Failover Redundancy in ISP Core
and automatic Switchover to ISPB WAN Link and Recives Return via ISPB.
This Switchover will cause Traffic Disruption for ~30 Seconds for CE1A Users

CE2A SendS Forward Traffic via ISPB
and Recives Return via ISPB Normally as Before


CE2A#traceroute 10.0.254.1

Type escape sequence to abort.
Tracing the route to 10.0.254.1

1 10.0.100.129 68 msec 64 msec 20 msec
2 10.0.1.2 224 msec 96 msec 272 msec
3 192.168.1.2 220 msec * 276 msec
CE2A#

Internet#traceroute 10.0.100.130

Type escape sequence to abort.
Tracing the route to 10.0.100.130

1 192.168.1.1 [AS 64513] 72 msec 120 msec 160 msec
2 * * *
3 10.0.100.130 [AS 64513] 128 msec * 144 msec
Internet#

******************************************************************

Problem Condition4- ISP B WAN Connection to Internet Down.
CE2A SendS Forward Traffic via ISPB-ISPA through BGP Failover Redundancy in ISP Core
and automatic Switchover to ISPA WAN Link and Recives Return via ISPA-ISPB.
This Switchover will cause Traffic Disruption for ~30 Seconds for CE2A Users

CE1A SendS Forward Traffic via ISPA
and Recives Return via ISPA Normally as Before
*********************************************************

Implementing Internet Access in Carrier Supporting Carrier MPLS L3 VPN LAB

Confgiguration Guidelines
*************************************************************************

Scenario - Providing Carrier Internet Access to Customer Carrier in Carrier
Supporting Carrier Multicast MPLS L3 VPN Services Both Customer Carrier
and Customer Carrier running MPLS


Design Considerations and Soultions: To Provide Internet Access in CSC MPLS VPN
Services we are considering Option Making Customer Carrier a MPLS
VPN Customer for Parent Carrier and Using Route Leaking with VRF Aware NAT at
the Internet PE in Parent Carrier and VRF Aware NAT at the Local PE in Customer Carrier



ISP A AS used 64514 - Parent carrier
ISP 2 AS used 64513 - Customer Carrier
IGP in ISPA is ISIS

****************************************************************************


CE1A#sh running-config
Building configuration...

Current configuration : 844 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE1A
!
boot-start-marker
boot-end-marker
!
no logging console
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
!
no ip domain lookup
no ftp-server write-enable
!
!
!
!
interface Loopback0
ip address 172.16.100.1 255.255.255.252
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 192.168.1.2 255.255.255.252
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 20
log-adjacency-changes
network 172.16.100.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.3 area 0
!
ip classless
ip http server
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
!
end

CE1A#


CE2A#sh running-config
Building configuration...

Current configuration : 844 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE2A
!
boot-start-marker
boot-end-marker
!
no logging console
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
ip cef
!
!
!
no ip domain lookup
no ftp-server write-enable
!
!
!
!
interface Loopback0
ip address 172.16.200.1 255.255.255.252
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 192.168.2.2 255.255.255.252
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 20
log-adjacency-changes
network 172.16.200.0 0.0.0.3 area 0
network 192.168.2.0 0.0.0.3 area 0
!
ip classless
ip http server
!
!
line con 0
line aux 0
line vty 0 4
login
!
!
!
end

CE2A#
CE2A#
CE2A#


ISPB_PE1#sh running-config
Building configuration...

Current configuration : 2217 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISPB_PE1
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
ip vrf CEA
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.1.1 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
speed auto
half-duplex
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip vrf forwarding CEA
ip address 192.168.1.1 255.255.255.252
ip nat inside
ip virtual-reassembly
mpls label protocol ldp
mpls ip
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/1
ip address 192.168.3.1 255.255.255.252
ip nat outside
ip virtual-reassembly
mpls label protocol ldp
mpls ip
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router ospf 20 vrf CEA
log-adjacency-changes
redistribute bgp 64513 subnets
network 192.168.1.0 0.0.0.3 area 0
default-information originate always
!
router bgp 64513
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 update-source Loopback0
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute static
redistribute ospf 20 vrf CEA match internal external 1 external 2
no synchronization
exit-address-family
!
no ip http server
ip route 0.0.0.0 0.0.0.0 Serial1/1
ip route vrf CEA 0.0.0.0 0.0.0.0 192.168.3.2 global
!
!
ip nat inside source list 10 interface Serial1/1 vrf CEA overload
!
access-list 10 deny 10.0.1.1
access-list 10 permit any
!
!
!
!
control-plane
!
!
!
!
!
!
dial-peer cor custom
!
!
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
!
end

ISPB_PE1#


ISPB_PE2#sh running-config
Building configuration...

Current configuration : 2012 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISPB_PE2
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
ip vrf CEA
rd 64513:1
route-target export 64513:100
route-target import 64513:100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.2.1 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
speed auto
half-duplex
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 192.168.4.1 255.255.255.252
mpls label protocol ldp
mpls ip
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/1
ip vrf forwarding CEA
ip address 192.168.2.1 255.255.255.252
mpls label protocol ldp
mpls ip
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router ospf 20 vrf CEA
log-adjacency-changes
redistribute bgp 64513 subnets
network 192.168.2.0 0.0.0.3 area 0
!
router ospf 10
log-adjacency-changes
redistribute bgp 64513 subnets
network 10.0.2.1 0.0.0.0 area 0
network 192.168.4.0 0.0.0.3 area 0
!
router bgp 64513
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 10.0.1.1 remote-as 64513
neighbor 10.0.1.1 update-source Loopback0
!
address-family vpnv4
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute ospf 20 vrf CEA match internal external 1 external 2
no synchronization
exit-address-family
!
no ip http server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
dial-peer cor custom
!
!
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
!
end

ISPB_PE2#
ISPB_PE2#
ISPB_PE2#

ISPA_PE1#sh running-config
Building configuration...

Current configuration : 2495 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISPA_PE1
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
ip vrf CEA
rd 64514:1
route-target export 64514:100
route-target import 64514:100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 172.16.10.1 255.255.255.255
ip router isis
ip nat outside
ip virtual-reassembly
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
speed auto
half-duplex
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip vrf forwarding CEA
ip address 192.168.3.2 255.255.255.252
ip nat inside
ip virtual-reassembly
mpls label protocol ldp
mpls ip
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/1
ip address 172.16.20.2 255.255.255.252
ip nat outside
ip virtual-reassembly
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
ip address 172.16.1.1 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
no dce-terminal-timing-enable
isis circuit-type level-2-only
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router eigrp 100
redistribute isis level-1-2
network 172.16.20.0 0.0.0.3
auto-summary
!
router ospf 10 vrf CEA
log-adjacency-changes
redistribute bgp 64514 subnets
network 192.168.3.0 0.0.0.3 area 0
default-information originate always
!
router isis
net 49.0001.1111.2222.3333.00
redistribute eigrp 100
!
router bgp 64514
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 172.16.20.1 remote-as 64514
neighbor 172.16.20.1 update-source Loopback0
!
address-family vpnv4
neighbor 172.16.20.1 activate
neighbor 172.16.20.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute static
redistribute ospf 10 vrf CEA match internal external 1 external 2
no synchronization
exit-address-family
!
no ip http server
ip route vrf CEA 0.0.0.0 0.0.0.0 172.16.20.1 global
!
!
ip nat inside source list 10 interface Serial1/1 vrf CEA overload
!
access-list 10 deny 172.16.10.1
access-list 10 permit any
!
!
!
!
control-plane
!
!
!
!
!
!
dial-peer cor custom
!
!
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
login
!
!
end

ISPA_PE1#
ISPA_PE1#


ISPA_PE2#sh running-config
Building configuration...

Current configuration : 2024 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISPA_PE2
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
ip vrf CEA
rd 64514:1
route-target export 64514:100
route-target import 64514:100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 172.16.20.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
speed auto
half-duplex
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 172.16.1.2 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
no dce-terminal-timing-enable
isis circuit-type level-2-only
!
interface Serial1/1
ip vrf forwarding CEA
ip address 192.168.4.2 255.255.255.252
mpls label protocol ldp
mpls ip
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router ospf 10 vrf CEA
log-adjacency-changes
redistribute bgp 64514 subnets
network 192.168.4.0 0.0.0.3 area 0
!
router isis
net 49.0002.2222.3333.4444.00
!
router bgp 64514
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 172.16.10.1 remote-as 64514
neighbor 172.16.10.1 update-source Loopback0
!
address-family vpnv4
neighbor 172.16.10.1 activate
neighbor 172.16.10.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
redistribute connected
redistribute ospf 10 vrf CEA match internal external 1 external 2
no synchronization
exit-address-family
!
no ip http server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
dial-peer cor custom
!
!
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
!
end

ISPA_PE2#


Internet#sh running-config
Building configuration...

Current configuration : 1300 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Internet
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 172.16.154.1 255.255.255.0
!
interface Loopback1
ip address 172.16.254.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 172.16.20.1 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router eigrp 100
redistribute connected route-map Local
network 172.16.20.0 0.0.0.3
auto-summary
!
ip http server
!
!
!
!
route-map Local permit 10
match interface Loopback0 Loopback1
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end

Internet#
Internet#
Internet#
Internet#

*********************************************************

OUTPUT

*********************************************************

CE1A#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 192.168.1.1 to network 0.0.0.0

172.16.0.0/30 is subnetted, 1 subnets
C 172.16.100.0 is directly connected, Loopback0
192.168.1.0/30 is subnetted, 1 subnets
C 192.168.1.0 is directly connected, Serial0/0
O*E2 0.0.0.0/0 [110/1] via 192.168.1.1, 00:07:36, Serial0/0
CE1A#

ISPB_PE1#sh ip route vrf CEA

Routing Table: CEA
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 192.168.3.2 to network 0.0.0.0

172.16.0.0/32 is subnetted, 1 subnets
O 172.16.100.1 [110/65] via 192.168.1.2, 00:23:32, Serial1/0
192.168.1.0/30 is subnetted, 1 subnets
C 192.168.1.0 is directly connected, Serial1/0
S* 0.0.0.0/0 [1/0] via 192.168.3.2
ISPB_PE1#


ISPA_PE1#sh ip route vrf CEA

Routing Table: CEA
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 172.16.20.1 to network 0.0.0.0

192.168.3.0/30 is subnetted, 1 subnets
C 192.168.3.0 is directly connected, Serial1/0
S* 0.0.0.0/0 [1/0] via 172.16.20.1
ISPA_PE1#
CE1A#ping 172.16.200.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.200.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 292/384/468 ms
CE1A#ping 172.16.154.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.154.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 72/153/260 ms
CE1A#ping 172.16.254.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.254.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 72/133/220 ms
CE1A#
CE1A#

ISPB_PE1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 192.168.3.1:4278 192.168.1.2:4278 172.16.154.1:4278 172.16.154.1:4278
icmp 192.168.3.1:4279 192.168.1.2:4279 172.16.154.1:4279 172.16.154.1:4279
icmp 192.168.3.1:4280 192.168.1.2:4280 172.16.154.1:4280 172.16.154.1:4280
icmp 192.168.3.1:4281 192.168.1.2:4281 172.16.154.1:4281 172.16.154.1:4281
icmp 192.168.3.1:4282 192.168.1.2:4282 172.16.154.1:4282 172.16.154.1:4282
icmp 192.168.3.1:8636 192.168.1.2:8636 172.16.254.1:8636 172.16.254.1:8636
icmp 192.168.3.1:8637 192.168.1.2:8637 172.16.254.1:8637 172.16.254.1:8637
icmp 192.168.3.1:8638 192.168.1.2:8638 172.16.254.1:8638 172.16.254.1:8638
icmp 192.168.3.1:8639 192.168.1.2:8639 172.16.254.1:8639 172.16.254.1:8639
icmp 192.168.3.1:8640 192.168.1.2:8640 172.16.254.1:8640 172.16.254.1:8640
udp 192.168.3.1:646 192.168.3.1:646 224.0.0.2:646 224.0.0.2:646
ISPB_PE1#
ISPB_PE1#
ISPA_PE1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 172.16.20.2:4278 192.168.3.1:4278 172.16.154.1:4278 172.16.154.1:4278
icmp 172.16.20.2:4279 192.168.3.1:4279 172.16.154.1:4279 172.16.154.1:4279
icmp 172.16.20.2:4280 192.168.3.1:4280 172.16.154.1:4280 172.16.154.1:4280
icmp 172.16.20.2:4281 192.168.3.1:4281 172.16.154.1:4281 172.16.154.1:4281
icmp 172.16.20.2:4282 192.168.3.1:4282 172.16.154.1:4282 172.16.154.1:4282
icmp 172.16.20.2:8636 192.168.3.1:8636 172.16.254.1:8636 172.16.254.1:8636
icmp 172.16.20.2:8637 192.168.3.1:8637 172.16.254.1:8637 172.16.254.1:8637
icmp 172.16.20.2:8638 192.168.3.1:8638 172.16.254.1:8638 172.16.254.1:8638
icmp 172.16.20.2:8639 192.168.3.1:8639 172.16.254.1:8639 172.16.254.1:8639
icmp 172.16.20.2:8640 192.168.3.1:8640 172.16.254.1:8640 172.16.254.1:8640
tcp 172.16.20.2:12722 192.168.3.2:12722 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:16359 192.168.3.2:16359 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:22042 192.168.3.2:22042 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:22461 192.168.3.2:22461 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:22602 192.168.3.2:22602 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:26207 192.168.3.2:26207 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:26556 192.168.3.2:26556 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:27051 192.168.3.2:27051 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:41139 192.168.3.2:41139 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:42953 192.168.3.2:42953 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:43963 192.168.3.2:43963 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:45960 192.168.3.2:45960 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:46434 192.168.3.2:46434 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:50853 192.168.3.2:50853 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:51355 192.168.3.2:51355 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:51413 192.168.3.2:51413 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:51428 192.168.3.2:51428 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:53173 192.168.3.2:53173 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:56329 192.168.3.2:56329 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:56631 192.168.3.2:56631 10.0.1.1:646 10.0.1.1:646
tcp 172.16.20.2:65300 192.168.3.2:65300 10.0.1.1:646 10.0.1.1:646
ISPA_PE1#
ISPA_PE1#

Implementing Internet Access in MPLS L3 VPN via Dedicated VRF with NAT at Internet PE via GRE Tunnel LAB

Config Guidelines
****************************************************************************************
Scenario - Providing Internet Access to MPLS VPN Cusomer using Deicated VRF along with
using NAT for the Customer's Private IP Block used for Internet at the Internet PE Router
Peering with Internet
Design Challenge: We need to do NAT for the IP Block Inside Customer VRF and Pass the Natted IPs to
Internet VRF. The Internet ROuter needs to have route to the NAT IP.
Soultion: Set up a GRE Tunnel between the PE Router peering with Internet and PE Router
peering with Customer Site and put this Tunnel in Customer VPN. This Tunnel will have Public Routable
IPs over Internet. The Traffic coming from Private IPs across Customer VPN will get Natted to this IP.
For making this GRE Tunnel reachable in Internet VRF , Import the ROute-Target for Customer VPN in
Internet Router on PE to Internet. Also we need to use a different ROute-Target for the Customers site requiring
Internet access and those will be not imported in Internet VRF but other customers Site VRF. Send a default route
to the CE rquiring Internet access via PE-CE Routing Protocol and put a static default for the VRF on the PE pointing
to GRE Tunnel.
we need to propogate the Private IP Block VRF Route till the Internet Peering Router to have reachability Locally under Customer
VRF in Provider AS
This way CEs of Customer VRF can talk same way via Private IPs and Only the Traffic for Internet Access Gets Natted to GRE
Tunnel
Caveats: We will will need to setup' n'GRE Tunnel for CEs on n" PEs. Also it will lead to usage of n+1 Public IPs assuming to use
GRE Tunnels with same /24 and Internet PE End Tunnel IP Fixed and Local PE Tunnel IP Changing.Need to define Static Routes for the
PE-CE Subnet and Intended Private LAN Blocks under the customer VRF poiting to GRT Tunnel for local VRF Reachability
ISP AS used 64513
IGP in ISP is ISIS with Loopbacks in Level-1 and Core Links in Level-2
EBGP used with Internet Router
Customer AS Used 64514
PE-CE Routing Protocol OSPF
Internet AS 64515
Lo0 and Lo1 used for Dummy Traffic
Customer VRF Used CEA
rd 64513:1
rt 6413:100
rt 64513:101 ( for site needing Internet Access)
Internet VRF Used Inet
rd 64513:2
rt 6413:200
CE1A and CE2A are VPN Sites with CE1A only having Internet Access.
Used NAT Inside on Serial1/0 at PE1-CE1A VRF Interface and NAT Outisde on GRE Tunnel 100 to P Router peering with
Internet
NAT Pool Used Inet 10.0.40.2/30
Extended ACL used 134 Denying 10.0.1.1/32 and Allowing 172.16.100.0/24 and 172.16.1.0/30
CE1A has a default Route towards PE1 via Serial1/0
ANy Non-VPN Traffic from CE1A comes to PE1 via Serial1/0 and get Natted Outbound to
10.0.40.2 and Goes to Internet Router Internet Router has Reverse Route till PE1
for 10.0.40.1 and from there Reverse NAT Happens towards CE1A
***************************************************************************************
CE1A#sh running-config
Building configuration...
Current configuration : 1294 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE1A
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 172.16.10.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 172.16.1.2 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
no fair-queue
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router ospf 10
log-adjacency-changes
redistribute connected subnets route-map Local
network 172.16.1.0 0.0.0.3 area 0
!
ip http server
!
!
!
!
route-map Local permit 10
match interface Loopback0 FastEthernet0/0
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
login
!
!
end
CE1A#
CE2A#sh running-config
Building configuration...
Current configuration : 1294 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CE2A
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 172.16.20.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.200.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 172.16.2.2 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
no fair-queue
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router ospf 10
log-adjacency-changes
redistribute connected subnets route-map Local
network 172.16.2.0 0.0.0.3 area 0
!
ip http server
!
!
!
!
route-map Local permit 10
match interface Loopback0 FastEthernet0/0
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
login
!
!
end
CE2A#
CE2A#
CE2A#
PE1#sh running-config
Building configuration...
Current configuration : 3207 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE1
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
ip vrf CEA
rd 64513:1
route-target export 64513:101
route-target import 64513:100
!
ip vrf Inet
rd 64513:2
route-target export 64513:200
route-target import 64513:200
!
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Tunnel100
ip vrf forwarding CEA
ip address 10.0.40.1 255.255.255.252
mpls ip
mpls label protocol ldp
tunnel source Serial1/1
tunnel destination 192.168.1.2
!
interface Loopback0
ip address 10.0.1.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface Loopback1
ip vrf forwarding Inet
ip address 10.0.20.1 255.255.255.252
!
interface Loopback2
ip vrf forwarding CEA
ip address 172.16.30.1 255.255.255.252
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
ip vrf forwarding CEA
ip address 172.16.1.1 255.255.255.252
no fair-queue
serial restart-delay 0
!
interface Serial1/1
ip address 192.168.1.1 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router ospf 10 vrf CEA
log-adjacency-changes
redistribute bgp 64513 subnets
network 172.16.1.0 0.0.0.3 area 0
default-information originate always
!
router isis
net 49.0001.1111.2222.3333.00
!
router bgp 64513
no synchronization
no bgp default route-target filter
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 update-source Loopback0
neighbor 10.0.3.1 remote-as 64513
neighbor 10.0.3.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
neighbor 10.0.2.1 next-hop-self
neighbor 10.0.3.1 activate
neighbor 10.0.3.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
no synchronization
redistribute connected
redistribute ospf 10 vrf CEA match internal external 1 external 2
exit-address-family
!
address-family ipv4 vrf Inet
no synchronization
redistribute connected
exit-address-family
!
ip classless
ip route vrf CEA 0.0.0.0 0.0.0.0 Tunnel100 10.0.40.2
!
!
no ip http server
no ip http secure-server
!
access-list 134 deny ip host 10.0.1.1 any
access-list 134 permit ip 172.16.100.0 0.0.0.255 any
access-list 134 permit ip 172.16.1.0 0.0.0.3 any
!
route-map Inet permit 10
match ip address 134
match extcommunity 64513:200
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
end
PE1#
PE1#
PE2#sh running-config
Building configuration...
Current configuration : 2532 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE2
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
ip vrf CEA
rd 64513:1
route-target export 64513:100
route-target import 64513:100
route-target import 64513:200
route-target import 64513:101
!
ip vrf Inet
rd 64513:2
route-target export 64513:200
route-target import 64513:200
route-target import 64513:100
!
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.2.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
ip address 192.168.1.5 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
no fair-queue
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/1
ip vrf forwarding CEA
ip address 172.16.2.1 255.255.255.252
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router ospf 10 vrf CEA
log-adjacency-changes
redistribute bgp 64513 subnets
network 172.16.2.0 0.0.0.3 area 0
!
router isis
net 49.0002.2222.1111.3333.00
!
router bgp 64513
no synchronization
no bgp default route-target filter
bgp log-neighbor-changes
neighbor 10.0.1.1 remote-as 64513
neighbor 10.0.3.1 remote-as 64513
neighbor 10.0.3.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.1.1 next-hop-self
neighbor 10.0.3.1 activate
neighbor 10.0.3.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
no synchronization
redistribute connected
redistribute ospf 10 vrf CEA match internal external 1 external 2
exit-address-family
!
ip classless
!
!
no ip http server
no ip http secure-server
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
end
PE2#
PE2#
P#sh running-config
Building configuration...
Current configuration : 3672 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname P
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
ip subnet-zero
ip vrf CEA
rd 64513:1
route-target export 64513:100
route-target import 64513:100
route-target import 64513:200
!
ip vrf Inet
rd 64513:2
route-target export 64513:200
route-target import 64513:200
route-target import 64513:100
!
!
!
!
!
ip cef
!
!
multilink bundle-name authenticated
mpls label protocol ldp
call rsvp-sync
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Tunnel100
ip vrf forwarding CEA
ip address 10.0.40.2 255.255.255.252
ip nat inside
mpls ip
mpls label protocol ldp
tunnel source Serial1/0
tunnel destination 192.168.1.1
!
interface Loopback0
ip address 10.0.3.1 255.255.255.255
ip router isis
isis circuit-type level-1
!
interface Loopback1
no ip address
!
interface Loopback2
no ip address
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Serial1/0
ip address 192.168.1.2 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
no fair-queue
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/1
ip address 192.168.1.6 255.255.255.252
ip router isis
mpls label protocol ldp
mpls ip
serial restart-delay 0
isis circuit-type level-2-only
!
interface Serial1/2
ip vrf forwarding Inet
ip address 10.0.10.1 255.255.255.252
ip nat outside
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/4
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/5
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/6
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/7
no ip address
shutdown
serial restart-delay 0
!
router isis
net 49.0002.3333.2222.1111.00
!
router bgp 64513
no synchronization
no bgp default route-target filter
bgp log-neighbor-changes
neighbor 10.0.1.1 remote-as 64513
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.2.1 remote-as 64513
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community extended
exit-address-family
!
address-family ipv4 vrf CEA
no synchronization
redistribute connected
exit-address-family
!
address-family ipv4 vrf Inet
no synchronization
redistribute connected
neighbor 10.0.10.2 remote-as 64515
neighbor 10.0.10.2 activate
neighbor 10.0.10.2 send-community extended
neighbor 10.0.10.2 soft-reconfiguration inbound
exit-address-family
!
ip nat pool Inet 10.0.40.1 10.0.40.2 netmask 255.255.255.252
ip nat inside source list 134 pool Inet vrf CEA overload
ip nat outside source list 134 pool Inet vrf CEA
ip classless
ip route vrf CEA 172.16.1.0 255.255.255.252 Tunnel100
ip route vrf CEA 172.16.100.0 255.255.255.0 Tunnel100
!
!
no ip http server
no ip http secure-server
!
access-list 101 deny ip host 10.0.2.1 any
access-list 101 deny ip host 10.0.1.1 any
access-list 101 deny ip host 10.0.3.1 any
access-list 101 permit ip 172.16.10.0 0.0.0.255 any
access-list 134 deny ip host 10.0.1.1 any
access-list 134 deny ip host 10.0.2.1 any
access-list 134 deny ip host 10.0.3.1 any
access-list 134 permit ip 172.16.1.0 0.0.0.3 any
access-list 134 permit ip 172.16.100.0 0.0.0.255 any
!
route-map Inet permit 10
match ip address 101
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
end
P#
P#
P#
Internet#sh running-config
Building configuration...
Current configuration : 1392 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Internet
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
!
!
ip cef
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.100.1 255.255.255.0
!
interface Loopback1
ip address 10.0.200.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 10.0.10.2 255.255.255.252
serial restart-delay 0
no dce-terminal-timing-enable
no fair-queue
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
!
router bgp 64515
no synchronization
bgp log-neighbor-changes
network 10.0.100.0 mask 255.255.255.0
network 10.0.200.0 mask 255.255.255.0
neighbor 10.0.10.1 remote-as 64513
neighbor 10.0.10.1 soft-reconfiguration inbound
no auto-summary
!
ip http server
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
login
!
!
end
Internet#
Internet#
Internet#
******************************************************
OUTPUT
*******************************************************
CE1A#ping 10.0.200.1 source f0/0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.200.1, timeout is 2 seconds:
Packet sent with a source address of 172.16.100.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 204/252/284 ms
CE1A#ping 172.16.200.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.200.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 256/418/804 ms
CE1A#
CE1A#traceroute 10.0.200.1 source fastEthernet 0/0
Type escape sequence to abort.
Tracing the route to 10.0.200.1
1 172.16.1.1 92 msec 40 msec 108 msec
2 10.0.40.2 136 msec 428 msec 292 msec
3 10.0.10.2 340 msec 340 msec *
CE1A#
CE1A#traceroute 172.16.200.1
Type escape sequence to abort.
Tracing the route to 172.16.200.1
1 172.16.1.1 56 msec 40 msec 88 msec
2 192.168.1.2 104 msec 124 msec 204 msec
3 172.16.2.1 200 msec 272 msec 124 msec
4 172.16.2.2 212 msec 224 msec *
CE1A#
CE2A#ping 10.0.200.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.200.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 72/127/168 ms
CE2A#ping 172.16.100.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.100.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 116/180/308 ms
CE2A#
CE2A#traceroute 172.16.100.1
Type escape sequence to abort.
Tracing the route to 172.16.100.1
1 172.16.2.1 52 msec 132 msec 124 msec
2 192.168.1.6 284 msec 192 msec 168 msec
3 172.16.1.1 200 msec 184 msec 80 msec
4 172.16.1.2 208 msec 196 msec *
CE2A#
CE2A#traceroute 10.0.200.1
Type escape sequence to abort.
Tracing the route to 10.0.200.1
1 172.16.2.1 108 msec 112 msec 44 msec
2 10.0.10.1 128 msec 56 msec 120 msec
3 10.0.10.2 184 msec 180 msec *
CE2A#
CE1A#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 172.16.1.1 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 6 subnets, 2 masks
O E2 172.16.200.0/24 [110/20] via 172.16.1.1, 01:52:11, Serial1/0
O E2 172.16.20.0/24 [110/20] via 172.16.1.1, 01:52:11, Serial1/0
C 172.16.10.0/24 is directly connected, Loopback0
C 172.16.1.0/30 is directly connected, Serial1/0
O IA 172.16.2.0/30 [110/65] via 172.16.1.1, 01:52:16, Serial1/0
C 172.16.100.0/24 is directly connected, FastEthernet0/0
O*E2 0.0.0.0/0 [110/1] via 172.16.1.1, 01:37:35, Serial1/0
CE1A#
CE2A#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
172.16.0.0/16 is variably subnetted, 7 subnets, 2 masks
C 172.16.200.0/24 is directly connected, FastEthernet0/0
O E2 172.16.30.0/30 [110/1] via 172.16.2.1, 01:52:42, Serial1/0
C 172.16.20.0/24 is directly connected, Loopback0
O E2 172.16.10.0/24 [110/20] via 172.16.2.1, 01:52:42, Serial1/0
O IA 172.16.1.0/30 [110/65] via 172.16.2.1, 01:52:47, Serial1/0
C 172.16.2.0/30 is directly connected, Serial1/0
O E2 172.16.100.0/24 [110/20] via 172.16.2.1, 01:52:42, Serial1/0
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
O E2 10.0.10.0/30 [110/1] via 172.16.2.1, 01:52:42, Serial1/0
O E2 10.0.20.0/30 [110/1] via 172.16.2.1, 01:52:42, Serial1/0
O E2 10.0.40.0/30 [110/1] via 172.16.2.1, 01:52:42, Serial1/0
O E2 10.0.100.0/24 [110/1] via 172.16.2.1, 01:52:42, Serial1/0
O E2 10.0.200.0/24 [110/1] via 172.16.2.1, 01:52:43, Serial1/0
CE2A#
CE2A#
PE1#sh ip route vrf CEA
Routing Table: CEA
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is 10.0.40.2 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 10.0.40.2, Tunnel100
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.0.40.0/30 is directly connected, Tunnel100
L 10.0.40.1/32 is directly connected, Tunnel100
172.16.0.0/16 is variably subnetted, 9 subnets, 3 masks
C 172.16.1.0/30 is directly connected, Serial1/0
L 172.16.1.1/32 is directly connected, Serial1/0
B 172.16.2.0/30 [200/0] via 10.0.2.1, 01:38:33
O E2 172.16.10.0/24 [110/20] via 172.16.1.2, 01:38:33, Serial1/0
B 172.16.20.0/24 [200/20] via 10.0.2.1, 01:38:33
C 172.16.30.0/30 is directly connected, Loopback2
L 172.16.30.1/32 is directly connected, Loopback2
O E2 172.16.100.0/24 [110/20] via 172.16.1.2, 01:38:34, Serial1/0
B 172.16.200.0/24 [200/20] via 10.0.2.1, 01:38:35
PE1#sh ip route vrf Inet
Routing Table: Inet
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 5 subnets, 3 masks
B 10.0.10.0/30 [200/0] via 10.0.3.1, 01:38:38
C 10.0.20.0/30 is directly connected, Loopback1
L 10.0.20.1/32 is directly connected, Loopback1
B 10.0.100.0/24 [200/0] via 10.0.3.1, 01:38:38
B 10.0.200.0/24 [200/0] via 10.0.3.1, 01:38:38
PE1#
PE1#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
10.0.0.0/32 is subnetted, 3 subnets
C 10.0.1.1 is directly connected, Loopback0
i L2 10.0.2.1 [115/30] via 192.168.1.2, Serial1/1
i L2 10.0.3.1 [115/20] via 192.168.1.2, Serial1/1
192.168.1.0/24 is variably subnetted, 3 subnets, 2 masks
C 192.168.1.0/30 is directly connected, Serial1/1
L 192.168.1.1/32 is directly connected, Serial1/1
i L2 192.168.1.4/30 [115/20] via 192.168.1.2, Serial1/1
PE1#
P#sh ip route vrf CEA
Routing Table: CEA
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 7 subnets, 3 masks
B 10.0.10.0/30 is directly connected, 01:39:35, Serial1/2
L 10.0.10.1/32 is directly connected, Serial1/2
B 10.0.20.0/30 [200/0] via 10.0.1.1, 01:39:35
C 10.0.40.0/30 is directly connected, Tunnel100
L 10.0.40.2/32 is directly connected, Tunnel100
B 10.0.100.0/24 [20/0] via 10.0.10.2 (Inet), 01:39:35
B 10.0.200.0/24 [20/0] via 10.0.10.2 (Inet), 01:39:35
172.16.0.0/16 is variably subnetted, 5 subnets, 2 masks
S 172.16.1.0/30 is directly connected, Tunnel100
B 172.16.2.0/30 [200/0] via 10.0.2.1, 01:39:35
B 172.16.20.0/24 [200/20] via 10.0.2.1, 01:39:36
S 172.16.100.0/24 is directly connected, Tunnel100
B 172.16.200.0/24 [200/20] via 10.0.2.1, 01:39:37
P#sh ip route vrf Inet
Routing Table: Inet
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 7 subnets, 3 masks
C 10.0.10.0/30 is directly connected, Serial1/2
L 10.0.10.1/32 is directly connected, Serial1/2
B 10.0.20.0/30 [200/0] via 10.0.1.1, 01:39:40
B 10.0.40.0/30 is directly connected, 00:52:54, Tunnel100
L 10.0.40.2/32 is directly connected, Tunnel100
B 10.0.100.0/24 [20/0] via 10.0.10.2, 01:39:40
B 10.0.200.0/24 [20/0] via 10.0.10.2, 01:39:40
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks
B 172.16.2.0/30 [200/0] via 10.0.2.1, 01:39:40
B 172.16.20.0/24 [200/20] via 10.0.2.1, 01:39:40
B 172.16.200.0/24 [200/20] via 10.0.2.1, 01:39:41
P#
P#sh ip rou
P#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
10.0.0.0/32 is subnetted, 3 subnets
i L2 10.0.1.1 [115/20] via 192.168.1.1, Serial1/0
i L2 10.0.2.1 [115/20] via 192.168.1.5, Serial1/1
C 10.0.3.1 is directly connected, Loopback0
192.168.1.0/24 is variably subnetted, 4 subnets, 2 masks
C 192.168.1.0/30 is directly connected, Serial1/0
L 192.168.1.2/32 is directly connected, Serial1/0
C 192.168.1.4/30 is directly connected, Serial1/1
L 192.168.1.6/32 is directly connected, Serial1/1
P#
PE2#sh ip route vrf CEA
Routing Table: CEA
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
B 10.0.10.0/30 [200/0] via 10.0.3.1, 01:54:11
B 10.0.20.0/30 [200/0] via 10.0.1.1, 01:54:11
B 10.0.40.0/30 [200/0] via 10.0.3.1, 00:53:37
B 10.0.100.0/24 [200/0] via 10.0.3.1, 01:54:11
B 10.0.200.0/24 [200/0] via 10.0.3.1, 01:54:11
172.16.0.0/16 is variably subnetted, 8 subnets, 3 masks
B 172.16.1.0/30 [200/0] via 10.0.1.1, 01:54:41
C 172.16.2.0/30 is directly connected, Serial1/1
L 172.16.2.1/32 is directly connected, Serial1/1
B 172.16.10.0/24 [200/20] via 10.0.1.1, 01:54:41
O E2 172.16.20.0/24 [110/20] via 172.16.2.2, 01:56:02, Serial1/1
B 172.16.30.0/30 [200/0] via 10.0.1.1, 01:54:42
B 172.16.100.0/24 [200/20] via 10.0.1.1, 01:54:42
O E2 172.16.200.0/24 [110/20] via 172.16.2.2, 01:56:03, Serial1/1
PE2#sh ip route vrf Inet
Routing Table: Inet
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
B 10.0.10.0/30 [200/0] via 10.0.3.1, 01:54:46
B 10.0.20.0/30 [200/0] via 10.0.1.1, 01:54:46
B 10.0.40.0/30 [200/0] via 10.0.3.1, 00:53:27
B 10.0.100.0/24 [200/0] via 10.0.3.1, 01:54:46
B 10.0.200.0/24 [200/0] via 10.0.3.1, 01:54:46
172.16.0.0/16 is variably subnetted, 4 subnets, 3 masks
B 172.16.2.0/30 is directly connected, 01:54:46, Serial1/1
L 172.16.2.1/32 is directly connected, Serial1/1
B 172.16.20.0/24 [20/20] via 172.16.2.2 (CEA), 01:54:16, Serial1/1
B 172.16.200.0/24 [20/20] via 172.16.2.2 (CEA), 01:54:16, Serial1/1
PE2#
PE2#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
10.0.0.0/32 is subnetted, 3 subnets
i L2 10.0.1.1 [115/30] via 192.168.1.6, Serial1/0
C 10.0.2.1 is directly connected, Loopback0
i L2 10.0.3.1 [115/20] via 192.168.1.6, Serial1/0
192.168.1.0/24 is variably subnetted, 3 subnets, 2 masks
i L2 192.168.1.0/30 [115/20] via 192.168.1.6, Serial1/0
C 192.168.1.4/30 is directly connected, Serial1/0
L 192.168.1.5/32 is directly connected, Serial1/0
PE2#
Internet#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks
B 172.16.200.0/24 [20/0] via 10.0.10.1, 01:54:20
B 172.16.20.0/24 [20/0] via 10.0.10.1, 01:54:20
B 172.16.2.0/30 [20/0] via 10.0.10.1, 01:54:20
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
C 10.0.10.0/30 is directly connected, Serial1/0
B 10.0.20.0/30 [20/0] via 10.0.10.1, 01:55:21
B 10.0.40.0/30 [20/0] via 10.0.10.1, 00:53:22
C 10.0.100.0/24 is directly connected, Loopback0
C 10.0.200.0/24 is directly connected, Loopback1
Internet#