manualshive.com logo in svg

HP HPE FlexNetwork MSR Router Series, Configuration Manual, Page: 257 / 594

Share
Download
HP HPE FlexNetwork MSR Router Series Configuration Manual Download Page 257

 

247 

Destination/Mask    Proto  Pre  Cost         NextHop         Interface 

0.0.0.0/32          Direct 0    0            127.0.0.1       InLoop0 

10.1.1.0/24         Direct 0    0            10.1.1.2        GE2/0/1 

10.1.1.0/32         Direct 0    0            10.1.1.2        GE2/0/1 

10.1.1.2/32         Direct 0    0            127.0.0.1       InLoop0 

10.1.1.255/32       Direct 0    0            10.1.1.2        GE2/0/1 

10.3.1.0/24         BGP    255  0            3.3.3.9         POS2/2/0 

127.0.0.0/8         Direct 0    0            127.0.0.1       InLoop0 

127.0.0.0/32        Direct 0    0            127.0.0.1       InLoop0 

127.0.0.1/32        Direct 0    0            127.0.0.1       InLoop0 

127.255.255.255/32  Direct 0    0            127.0.0.1       InLoop0 

224.0.0.0/4         Direct 0    0            0.0.0.0         NULL0 

224.0.0.0/24        Direct 0    0            0.0.0.0         NULL0 

255.255.255.255/32  Direct 0    0            127.0.0.1       InLoop0 

The output shows that PE 1 has a route to the remote CE. Output on PE 2 is similar. 

# Verify that CEs of the same VPN can ping each other, whereas those of different VPNs cannot. For 
example, CE 1 can ping CE 3 (10.3.1.1), but it cannot ping CE 4 (10.4.1.1). (Details not shown.) 

Configuring MPLS L3VPN over a GRE tunnel 

Network requirements 

CE 1 and CE 2 belong to VPN 1. The PEs support MPLS. The P router does not support MPLS and 
provides only IP functions. 

On the backbone, use a GRE tunnel to encapsulate and forward VPN packets to implement MPLS 
L3VPN. 

Configure tunnel policies on the PEs, and specify the tunnel type for VPN traffic as GRE.

  

Figure 71 Network diagram 

 

 

Loop0

Loop0

POS2/2/0

POS2/2/1

POS2/2/0

POS2/2/1

Tunnel0

Tunnel0

GE2/0/1

GE2/0/1

GE2/0/1

GE2/0/1

CE 1

CE 2

VPN 1

VPN 1

AS 65410

AS 65420

PE 1

PE 2

P

AS 100

GRE tunnel

Summary of Contents for HPE FlexNetwork MSR Router Series

Page 1: ...HPE FlexNetwork MSR Router Series Comware 7 MPLS Configuration Guide Part number 5998 8833 Software version CMW710 R0305 Document version 6PW106 20160308 ...

Page 2: ...nd 12 212 Commercial Computer Software Computer Software Documentation and Technical Data for Commercial Items are licensed to the U S Government under vendor s standard commercial license Links to third party websites take you outside the Hewlett Packard Enterprise website Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise ...

Page 3: ... Configuring a static LSP 13 Overview 13 Configuration prerequisites 13 Configuration procedure 13 Displaying static LSPs 14 Static LSP configuration example 14 Configuring LDP 17 Overview 17 Terminology 17 LDP messages 17 LDP operation 18 Label distribution and control 19 LDP GR 21 LDP NSR 22 LDP IGP synchronization 23 LDP FRR 23 LDP over MPLS TE 24 Protocols 25 Compatibility information 25 LDP c...

Page 4: ...th adjustment 76 CRLSP backup 77 FRR 77 DiffServ aware TE 78 Bidirectional MPLS TE tunnel 80 Protocols and standards 80 MPLS TE configuration task list 81 Enabling MPLS TE 82 Configuring a tunnel interface 83 Configuring DS TE 83 Configuring an MPLS TE tunnel to use a static CRLSP 84 Configuring an MPLS TE tunnel to use a dynamic CRLSP 85 Configuration task list 85 Configuring MPLS TE attributes f...

Page 5: ...iguration procedure 158 Displaying static CRLSPs 159 Static CRLSP configuration example 159 Configuring RSVP 165 Overview 165 RSVP messages 165 CRLSP setup procedure 166 RSVP refresh mechanism 166 RSVP authentication 167 RSVP GR 167 Protocols and standards 168 RSVP configuration task list 168 Enabling RSVP 168 Configuring RSVP refresh 168 Configuring RSVP Srefresh and reliable RSVP message deliver...

Page 6: ...iguring an OSPF sham link 227 Configuring a loopback interface 228 Redistributing the loopback interface address 228 Creating a sham link 228 Configuring routing on an MCE 229 Configuring routing between an MCE and a VPN site 229 Configuring routing between an MCE and a PE 234 Specifying the VPN label processing mode on the egress PE 237 Configuring BGP AS number substitution and SoO attribute 238...

Page 7: ...n an MCE 346 Configuring routing between an MCE and a VPN site 346 Configuring routing between an MCE and a PE 351 Configuring BGP AS number substitution and SoO attribute 355 Displaying and maintaining IPv6 MPLS L3VPN 355 IPv6 MPLS L3VPN configuration examples 356 Configuring IPv6 MPLS L3VPNs 356 Configuring an IPv6 MPLS L3VPN over a GRE tunnel 363 Configuring IPv6 MPLS L3VPN inter AS option A 36...

Page 8: ...sic VPLS architecture 453 VPLS implementation 454 H VPLS 456 Hub spoke networking 458 Compatibility information 458 VPLS configuration task list 459 Enabling L2VPN 459 Configuring an AC 460 Configuring a VSI 460 Configuring a PW 461 Configuring a PW class 461 Configuring a static PW 461 Configuring an LDP PW 462 Configuring a BGP PW 462 Configuring a BGP auto discovery LDP PW 464 Binding an AC to ...

Page 9: ... TE tunnels 517 Configuring MPLS OAM for a PW 517 Configuring MPLS ping for a PW 518 Configuring BFD for a PW 518 Displaying MPLS OAM 521 BFD for LSP configuration example 522 Configuring MPLS protection switching 525 Overview 525 Protection switching triggering modes 525 Protection switching modes 525 Path switching modes 526 Protocols and standards 526 Compatibility information 526 MPLS protecti...

Page 10: ...viii Index 540 ...

Page 11: ...s such as VPN traffic engineering and QoS Basic concepts FEC MPLS groups packets with the same characteristics such as packets with the same destination or service class into a forwarding equivalence class FEC Packets of the same FEC are handled in the same way on an MPLS network Label A label uniquely identifies an FEC and has local significance Figure 1 Format of a label A label is encapsulated ...

Page 12: ...rches the LFIB to obtain information for forwarding the packet The information includes the label operation type the outgoing label value and the next hop Control plane and forwarding plane An MPLS node consists of a control plane and a forwarding plane Control plane Assigns labels distributes FEC label mappings to neighbor LSRs creates the LFIB and establishes and removes LSPs Forwarding plane Fo...

Page 13: ...appings and establishes and maintains LSPs Label distribution protocols include protocols designed specifically for label distribution such as the Label Distribution Protocol LDP and protocols extended to support label distribution such as MP BGP and RSVP TE In this document the term label distribution protocols refers to all protocols for label distribution The term LDP refers to the RFC 5036 LDP...

Page 14: ...packet Router D the egress LSR processes the packet as follows a Identifies the LFIB entry that has an incoming label of 50 b Removes the label from the packet c Forwards the packet out of the outgoing interface GigabitEthernet 2 0 2 to the next hop LSR Router E If the LFIB entry records no outgoing interface or next hop information Router D performs the following operations a Identifies the FIB e...

Page 15: ...places the top label value with value 0 and forwards the packet to the egress node The egress node gets the TC information pops the label of the packet and forwards the packet Protocols and standards RFC 3031 Multiprotocol Label Switching Architecture RFC 3032 MPLS Label Stack Encoding RFC 5462 Multiprotocol Label Switching MPLS Label Stack Entry EXP Field Renamed to Traffic Class Field Compatibil...

Page 16: ... on the interface Setting MPLS MTU MPLS adds the label stack between the link layer header and network layer header of each packet To make sure the size of MPLS labeled packets is smaller than the MTU of an interface configure an MPLS MTU on the interface MPLS compares each MPLS packet against the interface MPLS MTU When the packet exceeds the MPLS MTU If fragmentation is allowed MPLS performs the...

Page 17: ...matching packet with the label assigned by the egress Configuration guidelines As a best practice configure the egress to advertise an implicit null label to the penultimate hop if the penultimate hop supports PHP If you want to simplify packet forwarding on the egress but keep labels to determine QoS policies configure the egress to advertise an explicit null label to the penultimate hop Use non ...

Page 18: ...led the ingress node sets the label TTL to 255 Each LSR on the LSP decreases the label TTL value by 1 The LSR that pops the label does not change the IP TTL value when popping the label Therefore the MPLS backbone nodes are invisible to user networks and the IP tracert facility cannot show the real path in the MPLS network Figure 7 Without TTL propagation Follow these guidelines when you configure...

Page 19: ...ages mpls ttl expiration enable By default this function is enabled Enabling MPLS forwarding statistics Enabling FTN forwarding statistics FEC to NHLFE map FTN entries are FIB entries that contain outgoing labels used for FTN forwarding When an LSR receives an unlabeled packet it searches for the corresponding FTN entry based on the destination IP address If a match is found the LSR adds the outgo...

Page 20: ...orms the following operations Forwards a labeled packet for the VPN instance based on its incoming label Adds a label to an unlabeled packet received by the VPN instance and forwards the labeled packet Perform this task to enable MPLS label forwarding statistics for a VPN instance and MPLS statistics reading Then you can use the display ip vpn instance mpls statistics command to view MPLS label st...

Page 21: ...bel value2 all Display LSP information display mpls lsp egress in label label value ingress outgoing interface interface type interface number protocol bgp ldp local rsvp te static static cr transit vpn instance vpn instance name ipv4 dest mask length ipv6 ipv6 dest prefix length verbose Display MPLS Nexthop Information Base NIB information display mpls nib nib id Display usage information for NID...

Page 22: ...es in IRF mode display mpls forwarding nhlfe nid chassis chassis number slot slot number Clear MPLS forwarding statistics for the specified LSPs reset mpls statistics all vpn instance vpn instance name ipv4 ipv4 destination mask length ipv6 ipv6 destination prefix length static te ingress lsr id tunnel id Clear MPLS forwarding statistics for VPN instances reset ip vpn instance mpls statistics inst...

Page 23: ... node pops the incoming label of a packet and performs label forwarding according to the inner label or IP forwarding Therefore on the egress node you only need to specify the incoming label The outgoing label specified on an LSR must be the same as the incoming label specified on the directly connected downstream LSR Configuration prerequisites Before you configure a static LSP perform the follow...

Page 24: ... C so that subnets 11 1 1 0 24 and 21 1 1 0 24 can access each other over MPLS Figure 8 Network diagram Configuration restrictions and guidelines For an LSP the outgoing label specified on an LSR must be identical with the incoming label specified on the downstream LSR LSPs are unidirectional You must configure an LSP for each direction of the data forwarding path A route to the destination addres...

Page 25: ...LSP from Router A to Router C Configure the LSP ingress node Router A RouterA static lsp ingress AtoC destination 21 1 1 0 24 nexthop 10 1 1 2 out label 30 Configure the LSP transit node Router B RouterB static lsp transit AtoC in label 30 nexthop 20 1 1 2 out label 50 Configure the LSP egress node Router C RouterC static lsp egress AtoC in label 50 5 Create a static LSP from Router C to Router A ...

Page 26: ...ng statistics 5 packets transmitted 5 packets received 0 0 packet loss round trip min avg max 1 1 4 ms Test the connectivity of the LSP from Router C to Router A RouterC ping mpls a 21 1 1 1 ipv4 11 1 1 0 24 MPLS Ping FEC 11 1 1 0 24 100 data bytes 100 bytes from 10 1 1 1 Sequence 1 time 5 ms 100 bytes from 10 1 1 1 Sequence 2 time 1 ms 100 bytes from 10 1 1 1 Sequence 3 time 1 ms 100 bytes from 1...

Page 27: ... that the label space is a per platform label space A label space number other than 0 indicates a per interface label space LDP uses the same LDP ID format on IPv4 and IPv6 networks An LDP ID must be globally unique FECs and FEC label mappings MPLS groups packets with the same characteristics such as the same destination or service class into a class called an FEC The packets of the same FEC are h...

Page 28: ...mechanism is typically used in LDP session protection LDP over MPLS TE MPLS L2VPN and VPLS For more information about MPLS L2VPN and VPLS see Configuring MPLS L2VPN and Configuring VPLS LDP can establish two hello adjacencies with a directly connected neighbor through both discovery mechanisms It sends Hello messages at the hello interval to maintain a hello adjacency If LDP receives no Hello mess...

Page 29: ... create an LFIB entry for that FEC When all LSRs from the Ingress to the Egress establish an LFIB entry for the FEC an LSP is established exclusively for the FEC Figure 9 Dynamically establishing an LSP Label distribution and control Label advertisement modes Figure 10 Label advertisement modes LDP advertises label FEC mappings in one of the following ways Downstream Unsolicited DU mode Distribute...

Page 30: ...the FEC from its downstream LSR Figure 11 Independent label distribution control mode Ordered label distribution Distributes a label mapping for an FEC to its upstream LSR only after it receives a label mapping for that FEC from its downstream LSR unless the local node is the egress node of the FEC As shown in Figure 10 in DU mode an LSR distributes a label mapping for an FEC to its upstream LSR o...

Page 31: ...he GR restarter to complete GR The device can act as a GR restarter or a GR helper Figure 13 LDP GR operation As shown in Figure 13 LDP GR operates as follows 1 LSRs establish an LDP session The L flag of the Fault Tolerance TLV in their Initialization messages is set to 1 to indicate that they support LDP GR 2 When LDP restarts the GR restarter starts the MPLS Forwarding State Holding timer and m...

Page 32: ... stale MPLS forwarding entries 7 When the LDP Recovery timer expires the GR helper deletes all stale FEC label mappings LDP NSR LDP nonstop routing NSR backs up protocol states and data including LDP session and LSP information from the active process to the standby process When the LDP primary process fails the backup process seamlessly takes over primary processing The LDP peers are not notified...

Page 33: ...n By default LDP immediately sends a notification to IGP that LDP convergence has completed However immediate notifications might cause MPLS traffic forwarding interruptions in one of the following scenarios LDP peers use the Ordered label distribution control mode The device has not received a label mapping from downstream at the time LDP notifies IGP that LDP convergence has completed A large nu...

Page 34: ... the new network topology When IGP route convergence occurs LDP establishes a new LSP according to the optimal path If a new LSP is not established after IGP route convergence traffic forwarding might be interrupted As a best practice enable LDP IGP synchronization to work with LDP FRR to reduce traffic interruption LDP over MPLS TE Figure 15 LDP over MPLS TE As shown in Figure 15 in a layered net...

Page 35: ...nterface Optional Configuring Hello parameters Optional Configuring LDP session parameters Optional Configuring LDP backoff Optional Configuring LDP MD5 authentication Optional Configuring LDP to redistribute BGP unicast routes Optional Configuring an LSP generation policy Optional Configuring the LDP label distribution control mode Optional Configuring a label advertisement policy Optional Config...

Page 36: ...system view N A 2 Enter interface view interface interface type interface number If the interface is bound to a VPN instance you must enable LDP for the VPN instance by using the vpn instance command in LDP view 3 Enable IPv4 LDP on the interface mpls ldp enable By default IPv4 LDP is disabled on an interface 4 Enable IPv6 LDP on the interface mpls ldp ipv6 enable By default IPv6 LDP is disabled o...

Page 37: ...ldp timer hello interval interval By default the Targeted Hello interval is 15 seconds Configuring LDP session parameters This task configures the following LDP session parameters Keepalive hold time and Keepalive interval LDP transport address IP address for establishing TCP connections LDP uses Basic Discovery and Extended Discovery mechanisms to discovery LDP peers and establish LDP sessions wi...

Page 38: ...eceive Targeted Hellos from any peer 4 Set the Keepalive hold time mpls ldp timer keepalive hold timeout By default the Keepalive hold time is 45 seconds 5 Set the Keepalive interval mpls ldp timer keepalive interval interval By default the Keepalive interval is 15 seconds 6 Configure the LDP transport address mpls ldp transport address ip address By default the LDP transport address is the LSR ID...

Page 39: ...DP view or enter LDP VPN instance view Enter LDP view mpls ldp Enter LDP VPN instance view a mpls ldp b vpn instance vpn instance name N A 3 Set the initial delay time and maximum delay time backoff initial initial time maximum maximum time By default the initial delay time is 15 seconds and the maximum delay time is 120 seconds Configuring LDP MD5 authentication To improve security for LDP sessio...

Page 40: ...a mpls ldp b vpn instance vpn instance name N A 3 Enable LDP to redistribute BGP IPv4 unicast routes import bgp By default LDP does not redistribute BGP IPv4 unicast routes 4 Enable LDP to redistribute BGP IPv6 unicast routes ipv6 import bgp By default LDP does not redistribute BGP IPv6 unicast routes Configuring an LSP generation policy LDP assigns labels to the routes that have been redistribute...

Page 41: ... LDP label distribution control mode Step Command Remarks 1 Enter system view system view N A 2 Enter LDP view or enter LDP VPN instance view Enter LDP view mpls ldp Enter LDP VPN instance view a mpls ldp b vpn instance vpn instance name N A 3 Configure the label distribution control mode label distribution independent ordered By default the Ordered label distribution mode is used Configuring a la...

Page 42: ...r LDP view mpls ldp Enter LDP VPN instance view a mpls ldp b vpn instance vpn instance name N A 3 Configure an IPv4 label advertisement policy advertise label prefix list prefix list name peer peer prefix list name By default LDP advertises all IPv4 FEC label mappings permitted by the LSP generation policy to all peers 4 Configure an IPv6 label advertisement policy ipv6 advertise label prefix list...

Page 43: ...ure an IPv6 label acceptance policy ipv6 accept label peer peer lsr id prefix list prefix list name By default LDP accepts all IPv6 FEC label mappings Configuring LDP loop detection LDP detects and terminates LSP loops in the following ways Maximum hop count LDP adds a hop count in a label request or label mapping message The hop count value increments by 1 on each LSR When the maximum hop count i...

Page 44: ... fails LDP establishes both a Link Hello adjacency over the direct link and a Targeted Hello adjacency over the indirect link with the peer When the direct link fails LDP deletes the Link Hello adjacency but still maintains the Targeted Hello adjacency In this way the LDP session between the two peers is kept available and the FEC label mappings based on this session are not deleted When the direc...

Page 45: ... Hardware LDP NSR compatibility MSR954 JH296A JH297A JH298A JH299A Yes MSR1002 4 1003 8S In standalone mode No In IRF mode Yes MSR2003 In standalone mode No In IRF mode Yes MSR2004 24 2004 48 In standalone mode No In IRF mode Yes MSR3012 3024 3044 3064 In standalone mode No In IRF mode Yes MSR4060 4080 Yes To configure LDP NSR Step Command Remarks 1 Enter system view system view N A 2 Enter LDP vi...

Page 46: ...dp N A 9 Optional Set the delay for LDP to notify IGP of the LDP convergence igp sync delay time By default LDP immediately notifies IGP of the LDP convergence completion 10 Optional Set the maximum delay for LDP to notify IGP of the LDP IGP synchronization status after an LDP restart or active standby switchover igp sync delay on restart time By default the maximum notification delay is 90 second...

Page 47: ...t N A 5 Enter interface view interface interface type interface number N A 6 Optional Disable LDP IGP synchronization on the interface mpls ldp igp sync disable By default LDP IGP synchronization is not disabled on an interface 7 Return to system view quit N A 8 Enter LDP view mpls ldp N A 9 Optional Set the delay for LDP to notify IGP of the LDP convergence completion igp sync delay time By defau...

Page 48: ... LDP upon LDP session changes as defined in RFC 3815 The generated SNMP notifications are sent to the SNMP module To enable SNMP notifications for LDP Step Command Remarks 1 Enter system view system view N A 2 Enable SNMP notifications for LDP snmp agent trap enable ldp By default SNMP notifications for LDP are enabled For more information about SNMP notifications see Network Management and Monito...

Page 49: ...number ipv6 Display LDP LSP information display mpls ldp lsp vpn instance vpn instance name ip address mask length ipv6 address prefix length ipv6 Display LDP running parameters display mpls ldp parameter vpn instance vpn instance name Display LDP peer and session information centralized devices in standalone mode display mpls ldp peer vpn instance vpn instance name peer lsr id verbose Display LDP...

Page 50: ...edure 1 Configure IP addresses and masks for interfaces including the loopback interfaces as shown in Figure 18 Details not shown 2 Configure OSPF on each router to ensure IP connectivity between them Configure Router A RouterA system view RouterA ospf RouterA ospf 1 area 0 RouterA ospf 1 area 0 0 0 0 network 1 1 1 9 0 0 0 0 RouterA ospf 1 area 0 0 0 0 network 10 1 1 0 0 0 0 255 RouterA ospf 1 are...

Page 51: ... 1 0 24 Direct 0 0 11 1 1 1 GE2 0 1 11 1 1 0 32 Direct 0 0 11 1 1 1 GE2 0 1 11 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 11 1 1 255 32 Direct 0 0 11 1 1 1 GE2 0 1 20 1 1 0 24 O_INTRA 10 2 10 1 1 2 Ser2 1 0 21 1 1 0 24 O_INTRA 10 3 10 1 1 2 Ser2 1 0 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 ...

Page 52: ...st routerb and configure LDP to use only the routes permitted by the prefix list to establish LSPs RouterB ip prefix list routerb index 10 permit 1 1 1 9 32 RouterB ip prefix list routerb index 20 permit 2 2 2 9 32 RouterB ip prefix list routerb index 30 permit 3 3 3 9 32 RouterB ip prefix list routerb index 40 permit 11 1 1 0 24 RouterB ip prefix list routerb index 50 permit 21 1 1 0 24 RouterB m...

Page 53: ...0 packet loss round trip min avg max 1 2 8 ms Test the connectivity of the LDP LSP from Router C to Router A RouterC ping mpls a 21 1 1 1 ipv4 11 1 1 0 24 MPLS Ping FEC 11 1 1 0 24 100 data bytes 100 bytes from 10 1 1 1 Sequence 1 time 1 ms 100 bytes from 10 1 1 1 Sequence 2 time 1 ms 100 bytes from 10 1 1 1 Sequence 3 time 1 ms 100 bytes from 10 1 1 1 Sequence 4 time 1 ms 100 bytes from 10 1 1 1 ...

Page 54: ...e label mapping for FEC 11 1 1 0 24 received from Router D Configuration procedure 1 Configure IP addresses and masks for interfaces including the loopback interfaces as shown in Figure 19 Details not shown 2 Configure OSPF on each router to ensure IP connectivity between them Details not shown 3 Enable MPLS and IPv4 LDP Configure Router A RouterA system view RouterA mpls lsr id 1 1 1 9 RouterA mp...

Page 55: ... RouterC Serial2 1 1 mpls enable RouterC Serial2 1 1 mpls ldp enable RouterC Serial2 1 1 quit Configure Router D RouterD system view RouterD mpls lsr id 4 4 4 9 RouterD mpls ldp RouterD ldp quit RouterD interface serial 2 1 0 RouterD Serial2 1 0 mpls enable RouterD Serial2 1 0 mpls ldp enable RouterD Serial2 1 0 quit RouterD interface serial 2 1 1 RouterD Serial2 1 1 mpls enable RouterD Serial2 1 ...

Page 56: ... prefix list prefix from b index 10 permit 21 1 1 0 24 On Router A create an IP prefix list prefix from d that denies subnet 21 1 1 0 24 Router A uses this list to filter FEC label mappings received from Router D RouterA ip prefix list prefix from d index 10 deny 21 1 1 0 24 On Router A configure label acceptance policies to filter FEC label mappings received from Router B and Router D RouterA mpl...

Page 57: ...istics 5 packets transmitted 5 packets received 0 0 packet loss round trip min avg max 1 2 8 ms Test the connectivity of the LDP LSP from Router C to Router A RouterC ping mpls a 21 1 1 1 ipv4 11 1 1 0 24 MPLS Ping FEC 11 1 1 0 24 100 data bytes 100 bytes from 10 1 1 1 Sequence 1 time 1 ms 100 bytes from 10 1 1 1 Sequence 2 time 1 ms 100 bytes from 10 1 1 1 Sequence 3 time 1 ms 100 bytes from 10 1...

Page 58: ...se label mapping for FEC 11 1 1 0 24 to Router C Configuration procedure 1 Configure IP addresses and masks for interfaces including the loopback interfaces as shown in Figure 20 Details not shown 2 Configure OSPF on each router to ensure IP connectivity between them Details not shown 3 Enable MPLS and IPv4 LDP Configure Router A RouterA system view RouterA mpls lsr id 1 1 1 9 RouterA mpls ldp Rou...

Page 59: ... RouterC Serial2 1 1 mpls enable RouterC Serial2 1 1 mpls ldp enable RouterC Serial2 1 1 quit Configure Router D RouterD system view RouterD mpls lsr id 4 4 4 9 RouterD mpls ldp RouterD ldp quit RouterD interface serial 2 1 0 RouterD Serial2 1 0 mpls enable RouterD Serial2 1 0 mpls ldp enable RouterD Serial2 1 0 quit RouterD interface serial 2 1 1 RouterD Serial2 1 1 mpls enable RouterD Serial2 1 ...

Page 60: ...vertised to Router B RouterA ip prefix list prefix to b index 10 permit 11 1 1 0 24 On Router A create an IP prefix list peer b that permits 2 2 2 9 32 Router A uses this list to filter peers RouterA ip prefix list peer b index 10 permit 2 2 2 9 32 On Router A configure a label advertisement policy to advertise only the label mapping for FEC 11 1 1 0 24 to Router B RouterA mpls ldp RouterA ldp adv...

Page 61: ...abel mappings for FEC 11 1 1 0 24 to Router C RouterD mpls ldp RouterD ldp advertise label prefix list prefix to a peer peer a RouterD ldp advertise label prefix list prefix to c peer peer c RouterD ldp quit Verifying the configuration Display LDP LSP information on each router RouterA display mpls ldp lsp Status Flags stale L liberal B backup FECs 2 Ingress 1 Transit 1 Egress 1 FEC In Out Label N...

Page 62: ... ping statistics 5 packets transmitted 5 packets received 0 0 packet loss round trip min avg max 1 2 8 ms Test the connectivity of the LDP LSP from Router C to Router A RouterC ping mpls a 21 1 1 1 ipv4 11 1 1 0 24 MPLS Ping FEC 11 1 1 0 24 100 data bytes 100 bytes from 10 1 1 1 Sequence 1 time 1 ms 100 bytes from 10 1 1 1 Sequence 2 time 1 ms 100 bytes from 10 1 1 1 Sequence 3 time 1 ms 100 bytes...

Page 63: ... the following methods Method 1 Enable OSPF FRR to calculate a backup next hop by using the LFA algorithm Configure Router S RouterS system view RouterS bfd echo source ip 10 10 10 10 RouterS ospf 1 RouterS ospf 1 fast reroute lfa RouterS ospf 1 quit Configure Router D RouterD system view RouterD bfd echo source ip 11 11 11 11 RouterD ospf 1 RouterD ospf 1 fast reroute lfa RouterD ospf 1 quit Meth...

Page 64: ...mpls lsr id 1 1 1 1 RouterS mpls ldp RouterS mpls ldp quit RouterS interface gigabitethernet 2 0 1 RouterS GigabitEthernet2 0 1 mpls enable RouterS GigabitEthernet2 0 1 mpls ldp enable RouterS GigabitEthernet2 0 1 quit RouterS interface gigabitethernet 2 0 2 RouterS GigabitEthernet2 0 2 mpls enable RouterS GigabitEthernet2 0 2 mpls ldp enable RouterS GigabitEthernet2 0 2 quit Configure Router D Ro...

Page 65: ... lsp trigger all RouterA ldp quit Verifying the configuration Verify that primary and backup LSPs have been established RouterS display mpls ldp lsp 21 1 1 0 24 Status Flags stale L liberal B backup FECs 1 Ingress 2 Transit 2 Egress 0 FEC In Out Label Nexthop OutInterface 21 1 1 0 24 1276 13 13 13 2 GE2 0 2 2174 1276 13 13 13 2 GE2 0 2 1276 B 12 12 12 2 GE2 0 1 2174 1276 B 12 12 12 2 GE2 0 1 IPv6 ...

Page 66: ... ospfv3 1 area 0 RouterA ospfv3 1 area 0 0 0 0 quit RouterA ospfv3 1 quit RouterA interface loopback 0 RouterA LoopBack0 ospfv3 1 area 0 0 0 0 RouterA LoopBack0 quit RouterA interface gigabitethernet 2 0 1 RouterA GigabitEthernet2 0 1 ospfv3 1 area 0 0 0 0 RouterA GigabitEthernet2 0 1 quit RouterA interface serial 2 1 0 RouterA Serial2 1 0 ospfv3 1 area 0 0 0 0 RouterA Serial2 1 0 quit Configure R...

Page 67: ...rea 0 0 0 0 RouterC GigabitEthernet2 0 1 quit RouterC interface serial 2 1 0 RouterC Serial2 1 0 ospfv3 1 area 0 0 0 0 RouterC Serial2 1 0 quit Verify that the routers have learned the routes to each other This example uses Router A RouterA display ipv6 routing table Destinations 12 Routes 12 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 10 64 Protoc...

Page 68: ...face InLoop0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 3 Enable MPLS and IPv6 LDP Configure Router A RouterA mpls lsr id 1 1 1 9 RouterA mpls ldp RouterA ldp quit RouterA interface serial 2 1 0 RouterA Serial2 1 0 mpls enable RouterA Serial2 1 0 mpls ldp ipv6 enable RouterA Serial2 1 0 mpls ldp transport address 10 1 RouterA Serial2 1 0 quit Configure Ro...

Page 69: ...e only the routes permitted by the prefix list to establish IPv6 LSPs RouterB ipv6 prefix list routerb index 10 permit 100 1 128 RouterB ipv6 prefix list routerb index 20 permit 100 2 128 RouterB ipv6 prefix list routerb index 30 permit 100 3 128 RouterB ipv6 prefix list routerb index 40 permit 11 0 64 RouterB ipv6 prefix list routerb index 50 permit 21 0 64 RouterB mpls ldp RouterB ldp ipv6 lsp t...

Page 70: ...ectivity of the IPv6 LDP LSP from Router A to Router C RouterA ping ipv6 a 11 1 21 1 Ping6 56 data bytes 11 1 21 1 press CTRL_C to break 56 bytes from 21 1 icmp_seq 0 hlim 63 time 2 000 ms 56 bytes from 21 1 icmp_seq 1 hlim 63 time 1 000 ms 56 bytes from 21 1 icmp_seq 2 hlim 63 time 3 000 ms 56 bytes from 21 1 icmp_seq 3 hlim 63 time 3 000 ms 56 bytes from 21 1 icmp_seq 4 hlim 63 time 2 000 ms Pin...

Page 71: ...ically enable IPv6 LDP on each LSR To establish IPv6 LDP LSPs configure an IPv6 routing protocol to ensure IP connectivity between the LSRs This example uses OSPFv3 To ensure that LDP establishes IPv6 LSPs only for the routes 11 0 64 and 21 0 64 configure IPv6 LSP generation policies on each LSR To ensure that LDP establishes IPv6 LSPs only over the link Router A Router B Router C configure IPv6 l...

Page 72: ... ldp RouterB ldp quit RouterB interface serial 2 1 0 RouterB Serial2 1 0 mpls enable RouterB Serial2 1 0 mpls ldp ipv6 enable RouterB Serial2 1 0 mpls ldp transport address 10 2 RouterB Serial2 1 0 quit RouterB interface serial 2 1 1 RouterB Serial2 1 1 mpls enable RouterB Serial2 1 1 mpls ldp ipv6 enable RouterB Serial2 1 1 mpls ldp transport address 20 1 RouterB Serial2 1 1 quit Configure Router...

Page 73: ...erB ipv6 prefix list routerb index 20 permit 21 0 64 RouterB mpls ldp RouterB ldp ipv6 lsp trigger prefix list routerb RouterB ldp quit On Router C create IPv6 prefix list routerc and configure LDP to use only the routes permitted by the prefix list to establish IPv6 LSPs RouterC ipv6 prefix list routerc index 10 permit 11 0 64 RouterC ipv6 prefix list routerc index 20 permit 21 0 64 RouterC mpls ...

Page 74: ...p ipv6 accept label peer 4 4 4 9 prefix list prefix from d RouterC ldp quit Verifying the configuration Display IPv6 LDP LSP information on the routers for example on Router A RouterA display mpls ldp lsp ipv6 Status Flags stale L liberal B backup FECs 2 Ingress 1 Transit 1 Egress 1 FEC 11 64 In Out Label 2417 OutInterface Nexthop FEC 21 64 In Out Label 2416 OutInterface Ser2 1 0 Nexthop FE80 20C ...

Page 75: ...0 0 490 ms IPv6 label advertisement control configuration example Network requirements Two links Router A Router B Router C and Router A Router D Router C exist between subnets 11 0 64 and 21 0 64 Configure LDP to establish LSPs only for routes to subnets 11 0 64 and 21 0 64 Configure LDP to establish LSPs only on the link Router A Router B Router C to forward traffic between subnets 11 0 64 and 2...

Page 76: ...quit RouterA interface serial 2 1 0 RouterA Serial2 1 0 mpls enable RouterA Serial2 1 0 mpls ldp ipv6 enable RouterA Serial2 1 0 mpls ldp transport address 10 1 RouterA Serial2 1 0 quit RouterA interface serial 2 1 1 RouterA Serial2 1 1 mpls enable RouterA Serial2 1 1 mpls ldp ipv6 enable RouterA Serial2 1 1 mpls ldp transport address 30 1 RouterA Serial2 1 1 quit Configure Router B RouterB system...

Page 77: ...lish IPv6 LSPs RouterA ipv6 prefix list routera index 10 permit 11 0 64 RouterA ipv6 prefix list routera index 20 permit 21 0 64 RouterA mpls ldp RouterA ldp ipv6 lsp trigger prefix list routera RouterA ldp quit On Router B create IPv6 prefix list routerb and configure LDP to use only the routes permitted by the prefix list to establish IPv6 LSPs RouterB ipv6 prefix list routerb index 10 permit 11...

Page 78: ...dvertise label prefix list prefix to b peer peer b RouterC ldp quit On Router D create an IPv6 prefix list prefix to a that denies subnet 21 0 64 Router D uses this list to filter FEC label mappings to be advertised to Router A RouterD ipv6 prefix list prefix to a index 10 deny 21 0 64 RouterD ipv6 prefix list prefix to a index 20 permit 0 0 0 less equal 128 On Router D create an IP prefix list pe...

Page 79: ...0 FEC 11 64 In Out Label 2417 OutInterface Ser2 1 0 Nexthop FE80 20C 29FF FE9D EA8E In Out Label 2418 2417 OutInterface Ser2 1 0 Nexthop FE80 20C 29FF FE9D EA8E FEC 21 64 In Out Label 1099 OutInterface Ser2 1 1 Nexthop FE80 20C 29FF FE05 1C01 In Out Label 2416 1099 OutInterface Ser2 1 1 Nexthop FE80 20C 29FF FE05 1C01 RouterC display mpls ldp lsp ipv6 Status Flags stale L liberal B backup FECs 2 I...

Page 80: ...im 63 time 4 000 ms 56 bytes from 21 1 icmp_seq 1 hlim 63 time 3 000 ms 56 bytes from 21 1 icmp_seq 2 hlim 63 time 3 000 ms 56 bytes from 21 1 icmp_seq 3 hlim 63 time 2 000 ms 56 bytes from 21 1 icmp_seq 4 hlim 63 time 1 000 ms Ping6 statistics for 21 1 5 packets transmitted 5 packets received 0 0 packet loss round trip min avg max std dev 1 000 2 600 4 000 1 020 ms Test the connectivity of the IP...

Page 81: ...a CRLSP you must configure routing and specify constrains such as the bandwidth and explicit paths MPLS TE tunnel A virtual point to point connection from the ingress node to the egress node Typically an MPLS TE tunnel consists of one CRLSP To deploy CRLSP backup or transmit traffic over multiple paths you need to establish multiple CRLSPs for one class of traffic In this case an MPLS TE tunnel co...

Page 82: ...idth constraints when the reservable bandwidth for the class type is greater than or equal to the bandwidth required by the class type Affinity Affinity determines which links a tunnel can use The affinity attribute and its mask and the link attribute are all 32 bit long A link is available for a tunnel if the link attribute meets the following requirements The link attribute bits corresponding to...

Page 83: ...stablish a CRLSP through RSVP TE Basic concepts PCE An entity that can calculate a path based on the TEDB bandwidth and other MPLS TE tunnel constraints A PCE can provide intra area or inter area path calculation A PCE can be manually specified on a PCC or automatically discovered through the PCE information advertised by OSPF TE PCC A PCC sends a request to PCEs for path calculation and uses the ...

Page 84: ...S TE tunnel interface PBR can match the traffic to be forwarded on the tunnel not only by destination IP address but also by source IP address protocol type and other criteria Compared with static routing PBR is more flexible but requires more complicated configuration For more information about policy based routing see Layer 3 IP Routing Configuration Guide Automatic route advertisement You can a...

Page 85: ...k mechanism ensures that the existing CRLSP is removed after the new CRLSP is established and the traffic is switched to the new CRLSP However this wastes bandwidth resources if some links on the old and new CRLSPs are the same This is because you need to reserve bandwidth on these links for the old and new CRLSPs separately The make before break mechanism uses the SE resource reservation style to...

Page 86: ...ate a path If the ingress node recalculates a better path it creates a new CRLSP switches traffic from the old CRLSP to the new and then deletes the old CRLSP MPLS TE uses the tunnel reoptimization function to implement dynamic CRLSP optimization For example if a link on the optimal path does not have enough reservable bandwidth MPLS TE sets up the tunnel on another path When the link has enough b...

Page 87: ... node fails on the primary CRLSP FRR reroutes the traffic to a bypass tunnel The ingress node attempts to set up a new CRLSP After the new CRLSP is set up traffic is forwarded on the new CRLSP CRLSP backup provides end to end path protection for a CRLSP without time limitation FRR provides quick but temporary protection for a link or node on a CRLSP Basic concepts Primary CRLSP Protected CRLSP Byp...

Page 88: ...e network resources allocation on a per service class basis DS TE defines different bandwidth constraints for class types It maps each traffic class type to the CRLSP that is constraint compliant for the class type The device supports these DS TE modes Prestandard mode Hewlett Packard Enterprise proprietary DS TE IETF mode Complies with RFC 4124 RFC 4125 and RFC 4127 Basic concepts CT Class Type D...

Page 89: ...andwidth is enough for the CT You can use the mpls te max reservable bandwidth command on an interface to configure the bandwidth constraints of the interface The device determines whether the bandwidth is enough to establish an MPLS TE tunnel for the CT The relation between BCs and CTs varies by BC model In RDM model a BC constrains the total bandwidth of multiple CTs as shown in Figure 30 BC 2 i...

Page 90: ...nstream LSR RSVP TE uses a Resv message to advertise the labels assigned by the downstream LSR to the upstream LSR During the delivery of the path message a CRLSP in one direction is established During the delivery of the Resv message a CRLSP in the other direction is established The CRLSPs of a bidirectional MPLS TE tunnel established in co routed mode use the same path Associated mode In this mo...

Page 91: ...ing a static CRLSP 4 On the ingress node of the MPLS TE tunnel configure the tunnel interface to reference the created static CRLSP 5 On the ingress node of the MPLS TE tunnel configure static routing PBR or automatic route advertisement to direct traffic to the MPLS TE tunnel To configure an MPLS TE tunnel to use a CRLSP dynamically established by RSVP TE perform the following tasks 1 Enable MPLS...

Page 92: ...other MPLS TE functions such as the DS TE automatic bandwidth adjustment and FRR as needed To configure MPLS TE perform the following tasks Tasks at a glance Required Enabling MPLS TE Required Configuring a tunnel interface Optional Configuring DS TE Required Perform one of the following tasks to configure an MPLS TE tunnel Configuring an MPLS TE tunnel to use a static CRLSP Configuring an MPLS TE...

Page 93: ...Command Remarks 1 Enter system view system view N A 2 Create an MPLS TE tunnel interface and enter tunnel interface view interface tunnel tunnel number mode mpls te By default no tunnel interface is created 3 Configure an IP address for the tunnel interface ip address ip address mask length mask By default a tunnel interface does not have an IP address 4 Specify the tunnel destination address dest...

Page 94: ...reference the static CRLSP Other configurations such as tunnel constraints and IGP extension are not needed To configure an MPLS TE tunnel to use a static CRLSP Step Command Remarks 1 Enter system view system view N A 2 Create a static CRLSP See Configuring a static CRLSP N A 3 Enter MPLS TE tunnel interface view interface tunnel tunnel number mode mpls te Execute this command on the ingress node ...

Page 95: ...uring MPLS TE attributes for a link Required Advertising link TE attributes by using IGP TE extension Required Configuring MPLS TE tunnel constraints Required Establishing an MPLS TE tunnel by using RSVP TE Optional Controlling CRLSP path selection Optional Controlling MPLS TE tunnel setup Configuring MPLS TE attributes for a link MPLS TE attributes for a link include the maximum link bandwidth th...

Page 96: ... attributes by using IGP TE extension Both OSPF and IS IS are extended to advertise link TE attributes The extensions are called OSPF TE and IS IS TE If both OSPF TE and IS IS TE are available OSPF TE takes precedence Configuring OSPF TE OSPF TE uses Type 10 opaque LSAs to carry the TE attributes for a link Before you configure OSPF TE you must enable opaque LSA advertisement and reception by usin...

Page 97: ...tric style packets can be received and sent For more information about this command see Layer 3 IP Routing Command Reference 4 Enable MPLS TE for the IS IS process mpls te enable Level 1 Level 2 By default an IS IS process does not support MPLS TE 5 Specify the types of the sub TLVs for carrying DS TE parameters te subtlv bw constraint value unreserved subpool bw value By default the bw constraint...

Page 98: ...between any two neighboring nodes on an explicit path can be either strict or loose Strict The two nodes must be directly connected Loose The two nodes can have devices in between When establishing an MPLS TE tunnel between areas or ASs you must do the following Use a loose explicit path Specify the ABR or ASBR as the next hop of the path Make sure the tunnel s ingress node and the ABR or ASBR can...

Page 99: ...selection Before performing the configuration tasks in this section be aware of each configuration objective and its impact on your device MPLS TE uses CSPF to calculate a path according to the TEDB and constraints and sets up the CRLSP through RSVP TE MPLS TE provides measures that affect the CSPF calculation You can use these measures to tune the path selection for CRLSP Configuring the metric t...

Page 100: ...able on every interface that the MPLS TE tunnel traverses Configuring route pinning When route pinning is enabled MPLS TE tunnel reoptimization and automatic bandwidth adjustment are not available Perform this task on the ingress node of an MPLS TE tunnel To configure route pinning Step Command Remarks 1 Enter system view system view N A 2 Enter MPLS TE tunnel interface view interface tunnel tunne...

Page 101: ...dth changes that cannot trigger immediate flooding are flooded This task can be performed on all nodes that the MPLS TE tunnel traverses To configure TE flooding thresholds and the flooding interval Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Set the up down threshold mpls te bandwidth change thresholds down up per...

Page 102: ...LS TE tunnel it waits for the retry interval and then tries to set up the tunnel again It repeats this process until the tunnel is established or until the number of attempts reaches the maximum If the tunnel cannot be established when the number of attempts reaches the maximum the ingress waits for a longer period and then repeats the previous process To configure tunnel setup retry Step Command ...

Page 103: ...ptional Reset the automatic bandwidth adjustment reset mpls te auto bandwidth adjustment timers After this command is executed the system clears the output rate sampling information and the remaining time to the next bandwidth adjustment to start a new output rate sampling and bandwidth adjustment Configuring RSVP resource reservation style Step Command Remarks 1 Enter system view system view N A ...

Page 104: ...OSPF TE Establishing a CRLSP by using the path calculated by PCEs Step Command Remarks 1 Enter system view system view N A 2 Enter MPLS TE tunnel interface view interface tunnel tunnel number mode mpls te N A 3 Establish a CRLSP by using the path calculated by PCEs mpls te path preference value dynamic pce ip address 0 8 By default the automatically calculated path is used to establish a CRLSP Aft...

Page 105: ...imer value By default the PCEP session deadtimer is 120 seconds 5 Set the keepalive interval for PCEP sessions pce keepalive interval By default the keepalive interval is 30 seconds 6 Set the minimum acceptable keepalive interval and the maximum number of allowed unknown messages received from the peer pce tolerance min keepalive value max unknown messages value By default the minimum acceptable k...

Page 106: ...ber load share value By default no member interface is configured for a tunnel bundle interface You can specify multiple member interfaces The load share keyword specifies the weight of the member interface for load sharing For example a tunnel bundle interface has three member interfaces If the weights of the member interfaces are 1 1 and 2 the proportions of traffic forwarded by them are 1 4 1 4...

Page 107: ... adjacency to implement automatic route advertisement When you use IGP shortcut you can specify a metric for the TE tunnel or the tunnel bundle If you assign an absolute metric the metric is directly used as the MPLS TE tunnel s or tunnel bundle s metric If you assign a relative metric the MPLS TE tunnel or tunnel bundle s metric is the assigned metric plus the IGP link metric Before configuring a...

Page 108: ...uals its IGP metric Configuring forwarding adjacency To use forwarding adjacency you must establish two MPLS TE tunnels or tunnel bundles in opposite directions between two nodes and configure forwarding adjacency on both the nodes To configure forwarding adjacency in tunnel interface view Step Command Remarks 1 Enter system view system view N A 2 Enter MPLS TE tunnel interface view interface tunn...

Page 109: ...the passive end of a co routed bidirectional MPLS TE tunnel Step Command Remarks 1 Enter system view system view N A 2 Enter MPLS TE tunnel interface view interface tunnel tunnel number mode mpls te N A 3 Configure a co routed bidirectional MPLS TE tunnel and specify the local end as the passive end of the tunnel mpls te bidirectional co routed passive reverse lsp lsr id ingress lsr id tunnel id t...

Page 110: ...E support FRR Enabling FRR Perform this task on the ingress node of a primary CRLSP To enable FRR Step Command Remarks 1 Enter system view system view N A 2 Enter tunnel interface view of the primary CRLSP interface tunnel tunnel number mode mpls te N A 3 Enable FRR mpls te fast reroute bandwidth By default FRR is disabled If you specify the bandwidth keyword the primary CRLSP must have bandwidth ...

Page 111: ...tection 0 Yes The primary CRLSP cannot be bound to the bypass tunnel The primary CRLSP can be bound to the bypass tunnel if CT 0 or no CT is specified for the bypass tunnel After binding the RRO message does not carry the bandwidth protection flag The bypass tunnel does not provide bandwidth protection for the primary CRLSP and performs best effort forwarding for traffic of the primary CRLSP No No...

Page 112: ... critical interfaces or links when bandwidth is insufficient Bypass tunnels are pre established and require extra bandwidth Make sure the bandwidth assigned to the bypass tunnel is no less than the total bandwidth needed by all primary CRLSPs to be protected by the bypass tunnel Otherwise some primary CRLSPs might not be protected by the bypass tunnel A bypass tunnel typically does not forward dat...

Page 113: ...the protected interface the current interface mpls te fast reroute bypass tunnel tunnel tunnel number By default no bypass tunnel is specified for an interface Automatically setting up bypass tunnels With auto FRR if the PLR is the penultimate node of a primary CRLSP the PLR does not create a node protection bypass tunnel for the primary CRLSP An automatically created bypass tunnel can protect mul...

Page 114: ...automatically created on the interface for MPLS TE auto FRR Configuring node fault detection Perform this task to configure the RSVP hello mechanism or BFD on the PLR and the protected node to detect the node faults caused by signaling protocol faults FRR does not need to use the RSVP hello mechanism or BFD to detect the node faults caused by the link faults between the PLR and the protected node ...

Page 115: ... 3812 The generated SNMP notifications are sent to the SNMP module To enable SNMP notifications for MPLS TE Step Command Remarks 1 Enter system view system view N A 2 Enable SNMP notifications for MPLS TE snmp agent trap enable te By default SNMP notifications for MPLS TE are enabled For more information about SNMP notifications see Network Management and Monitoring Configuration Guide Displaying ...

Page 116: ...in an OSPF TEDB display ospf process id area area id mpls te advertisement originate router advertising router id self originate Display network information in an OSPF TEDB display ospf process id area area id mpls te network originate router advertising router id self originate Display OSPF tunnel interface information display ospf process id area area id mpls te tunnel Display information about ...

Page 117: ...oopback 0 RouterA LoopBack0 isis enable 1 RouterA LoopBack0 quit Configure Router B RouterB system view RouterB isis 1 RouterB isis 1 network entity 00 0005 0000 0000 0002 00 RouterB isis 1 quit RouterB interface gigabitethernet 2 0 1 RouterB GigabitEthernet2 0 1 isis enable 1 RouterB GigabitEthernet2 0 1 quit RouterB interface gigabitethernet 2 0 2 RouterB GigabitEthernet2 0 2 isis enable 1 Route...

Page 118: ... te enable RouterB GigabitEthernet2 0 1 quit RouterB interface gigabitethernet 2 0 2 RouterB GigabitEthernet2 0 2 mpls enable RouterB GigabitEthernet2 0 2 mpls te enable RouterB GigabitEthernet2 0 2 quit Configure Router C RouterC mpls lsr id 3 3 3 3 RouterC mpls te RouterC te quit RouterC interface gigabitethernet 2 0 1 RouterC GigabitEthernet2 0 1 mpls enable RouterC GigabitEthernet2 0 1 mpls te...

Page 119: ...oing label as 20 and bandwidth for the tunnel as 2000 kbps RouterA static cr lsp ingress static cr lsp 1 nexthop 2 1 1 2 out label 20 bandwidth 2000 On Router A configure Tunnel 0 to reference the static CRLSP static cr lsp 1 RouterA interface tunnel0 RouterA Tunnel0 mpls te static cr lsp static cr lsp 1 RouterA Tunnel0 quit Configure Router B as the transit node of the static CRLSP and specify th...

Page 120: ...0 Tunnel State Up Main CRLSP up Tunnel Attributes LSP ID 1 Tunnel ID 0 Admin State Normal Ingress LSR ID 1 1 1 1 Egress LSR ID 3 3 3 3 Signaling Static Static CRLSP Name static cr lsp 1 Resv Style Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type Tunnel Bandwidth Reserved Bandwidth Setup Priority 0 Holding Priority 0 Affinity Attr Mask Explicit Path Backup Explicit P...

Page 121: ...pe In Out Label Out Interface State static cr lsp 1 Egress 30 Null Up Execute the display ip routing table command on Router A The output shows a static route entry with interface Tunnel 0 as the output interface Details not shown Establishing an MPLS TE tunnel with RSVP TE Network requirements Router A Router B Router C and Router D run IS IS and all of them are Level 2 routers Use RSVP TE to cre...

Page 122: ...t2 0 1 quit RouterA interface loopback 0 RouterA LoopBack0 isis enable 1 RouterA LoopBack0 isis circuit level level 2 RouterA LoopBack0 quit Configure Router B RouterB system view RouterB isis 1 RouterB isis 1 network entity 00 0005 0000 0000 0002 00 RouterB isis 1 quit RouterB interface gigabitethernet 2 0 1 RouterB GigabitEthernet2 0 1 isis enable 1 RouterB GigabitEthernet2 0 1 isis circuit leve...

Page 123: ...le 1 RouterD LoopBack0 isis circuit level level 2 RouterD LoopBack0 quit Execute the display ip routing table command on each router to verify that the routers have learned the routes to one another including the routes to the loopback interfaces Details not shown 3 Configure an LSR ID and enable MPLS MPLS TE and RSVP TE Configure Router A RouterA mpls lsr id 1 1 1 9 RouterA mpls te RouterA te qui...

Page 124: ...POS2 2 0 mpls te enable RouterC POS2 2 0 rsvp enable RouterC POS2 2 0 quit Configure Router D RouterD mpls lsr id 4 4 4 9 RouterD mpls te RouterD te quit RouterD rsvp RouterD rsvp quit RouterD interface gigabitethernet 2 0 1 RouterD GigabitEthernet2 0 1 mpls enable RouterD GigabitEthernet2 0 1 mpls te enable RouterD GigabitEthernet2 0 1 rsvp enable RouterD GigabitEthernet2 0 1 quit 4 Configure IS ...

Page 125: ...reservable bandwidth on Router C RouterC interface gigabitethernet 2 0 1 RouterC GigabitEthernet2 0 1 mpls te max link bandwidth 10000 RouterC GigabitEthernet2 0 1 mpls te max reservable bandwidth 5000 RouterC GigabitEthernet2 0 1 quit RouterC interface pos 2 2 0 RouterC POS2 2 0 mpls te max link bandwidth 10000 RouterC POS2 2 0 mpls te max reservable bandwidth 5000 RouterC POS2 2 0 quit Set the m...

Page 126: ...tput 0 bytes sec 0 packets sec 0 packets input 0 bytes 0 input error 0 packets output 0 bytes 0 output error Execute the display mpls te tunnel interface command on Router A to display detailed information about the MPLS TE tunnel RouterA display mpls te tunnel interface Tunnel Name Tunnel 1 Tunnel State Up Main CRLSP up Shared resource CRLSP down Tunnel Attributes LSP ID 23331 Tunnel ID 1 Admin S...

Page 127: ... IGP Establish an EBGP connection between ASBRs Router B and Router C Redistribute BGP routes into OSPF and OSPF routes into BGP so that AS 100 and AS 200 can reach each other Establish an MPLS TE tunnel from Router A to Router D The tunnel requires a bandwidth of 2000 kbps The maximum bandwidth of the link that the tunnel traverses is 10000 kbps and the maximum reservable bandwidth of the link is...

Page 128: ...a 0 0 0 0 network 10 1 1 0 0 0 0 255 RouterB ospf 1 area 0 0 0 0 network 2 2 2 9 0 0 0 0 RouterB ospf 1 area 0 0 0 0 quit RouterB ospf 1 quit Configure Router C RouterC system view RouterC ospf RouterC ospf 1 import route direct RouterC ospf 1 import route bgp RouterC ospf 1 area 0 RouterC ospf 1 area 0 0 0 0 network 30 1 1 0 0 0 0 255 RouterC ospf 1 area 0 0 0 0 network 3 3 3 9 0 0 0 0 RouterC os...

Page 129: ... 200 RouterC bgp peer 20 1 1 1 as number 100 RouterC bgp address family ipv4 unicast RouterC bgp ipv4 peer 20 1 1 1 enable RouterC bgp ipv4 import route ospf RouterC bgp ipv4 import route direct RouterC bgp ipv4 quit RouterC bgp quit Verify that the routers have learned the AS external routes RouterA display ip routing table Destinations 10 Routes 10 Destination Mask Proto Pre Cost NextHop Interfa...

Page 130: ...tEthernet2 0 1 quit RouterB interface pos 2 2 0 RouterB POS2 2 0 mpls enable RouterB POS2 2 0 mpls te enable RouterB POS2 2 0 rsvp enable RouterB POS2 2 0 quit Configure Router C RouterC mpls lsr id 3 3 3 9 RouterC mpls te RouterC te quit RouterC rsvp RouterC rsvp quit RouterC interface gigabitethernet 2 0 1 RouterC GigabitEthernet2 0 1 mpls enable RouterC GigabitEthernet2 0 1 mpls te enable Route...

Page 131: ...Router D RouterD ospf RouterD ospf 1 opaque capability enable RouterD ospf 1 area 0 RouterD ospf 1 area 0 0 0 0 mpls te enable RouterD ospf 1 area 0 0 0 0 quit RouterD ospf 1 quit 6 Configure an explicit route on Router A Specify Router B and Router D as loose nodes and Router C as a strict node RouterA explicit path atod RouterA explicit path atod nexthop 10 1 1 2 include loose RouterA explicit p...

Page 132: ...vable bandwidth 5000 RouterD GigabitEthernet2 0 1 quit 8 Configure an MPLS TE tunnel on Router A Configure MPLS TE tunnel interface Tunnel 1 RouterA interface tunnel 1 mode mpls te RouterA Tunnel1 ip address 7 1 1 1 255 255 255 0 Specify the tunnel destination address as the LSR ID of Router D RouterA Tunnel1 destination 4 4 4 9 Configure MPLS TE to use RSVP TE to establish the tunnel RouterA Tunn...

Page 133: ...ame Resv Style SE Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type CT0 Tunnel Bandwidth 2000 kbps Reserved Bandwidth 2000 kbps Setup Priority 7 Holding Priority 7 Affinity Attr Mask 0 0 Explicit Path atod Backup Explicit Path Metric Type TE Record Route Disabled Record Label Disabled FRR Flag Disabled Bandwidth Protection Disabled Backup Bandwidth Flag Disabled Back...

Page 134: ...127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 Establishing an inter area MPLS TE tunnel over a CRLSP calculated by PCEs Network requirements Router A Router B Router C and Router D support MPLS TE and run OSPF Configure Router A and Router B as PCEs and configure Router C as a PCC to automatically discover the PCEs Establish an MPLS TE tunnel over a CRLSP from Router C to Router D that uses the inter ...

Page 135: ...10 3 2 0 0 0 0 255 RouterB ospf 1 area 0 0 0 2 mpls te enable RouterB ospf 1 area 0 0 0 2 quit RouterB ospf 1 quit Configure Router C RouterC system view RouterC ospf RouterC ospf 1 area 1 RouterC ospf 1 area 0 0 0 1 network 10 3 1 0 0 0 0 255 RouterC ospf 1 area 0 0 0 1 network 3 3 3 3 0 0 0 0 RouterC ospf 1 area 0 0 0 1 mpls te enable RouterC ospf 1 area 0 0 0 1 quit RouterC ospf 1 quit Configur...

Page 136: ...1 quit RouterB interface gigabitethernet 2 0 2 RouterB GigabitEthernet2 0 2 mpls enable RouterB GigabitEthernet2 0 2 mpls te enable RouterB GigabitEthernet2 0 2 rsvp enable RouterB GigabitEthernet2 0 2 quit Configure Router C RouterC mpls lsr id 3 3 3 3 RouterC mpls te RouterC te quit RouterC rsvp RouterC rsvp quit RouterC interface gigabitethernet 2 0 1 RouterC GigabitEthernet2 0 1 mpls enable Ro...

Page 137: ...c pce 1 1 1 1 2 2 2 2 RouterC Tunnel1 quit Verifying the configuration Display discovered PCE information on each router This example uses Router A RouterA display mpls te pce discovery verbose PCE address 2 2 2 2 Discovery methods OSPF Path scopes Path scope Preference Compute intra area paths 7 Act as PCE for inter area TE LSP computation 6 Act as a default PCE for inter area TE LSP computation ...

Page 138: ... Keepalive interval Local 30 sec Peer 30 sec Recommended DeadTimer Local 120 sec Peer 120 sec Tolerance Min keepalive interval 10 sec Max unknown messages 5 Request timeout 10 sec Delegation timeout 30 sec Bidirectional MPLS TE tunnel configuration example Network requirements Router A Router B Router C and Router D all run IS IS and they are all level 2 routers Use RSVP TE to establish a bidirect...

Page 139: ... RouterA mpls lsr id 1 1 1 9 RouterA mpls label advertise non null RouterA mpls te RouterA te quit RouterA rsvp RouterA rsvp quit RouterA interface gigabitethernet 2 0 1 RouterA GigabitEthernet2 0 1 mpls enable RouterA GigabitEthernet2 0 1 mpls te enable RouterA GigabitEthernet2 0 1 rsvp enable RouterA GigabitEthernet2 0 1 quit Configure Router B RouterB system view RouterB mpls lsr id 2 2 2 9 Rou...

Page 140: ...uterD interface gigabitethernet 2 0 1 RouterD GigabitEthernet2 0 1 mpls enable RouterD GigabitEthernet2 0 1 mpls te enable RouterD GigabitEthernet2 0 1 rsvp enable RouterD GigabitEthernet2 0 1 quit 4 Configure IS IS TE Configure Router A RouterA isis 1 RouterA isis 1 cost style wide RouterA isis 1 mpls te enable level 2 RouterA isis 1 quit Configure Router B RouterB isis 1 RouterB isis 1 cost styl...

Page 141: ...The output shows that the tunnel interface is up RouterA display interface tunnel Tunnel1 current state UP Line protocol current state UP Description Tunnel1 Interface The Maximum Transmit Unit is 64000 Internet Address is 7 1 1 1 24 Primary Tunnel source unknown destination 4 4 4 9 Tunnel bandwidth 64 kbps Tunnel protocol transport CR_LSP Last clearing of counters Never Last 300 seconds input rat...

Page 142: ...zation Freq Backup Type None Backup LSP ID Auto Bandwidth Disabled Auto Bandwidth Freq Min Bandwidth Max Bandwidth Collected Bandwidth Execute the display mpls lsp verbose command on Router A to display detailed information about the bidirectional MPLS TE tunnel RouterA display mpls lsp verbose Destination 4 4 4 9 FEC 1 1 1 9 1 30478 Protocol RSVP LSR Type Ingress Service NHLFE ID 1027 State Activ...

Page 143: ...kets sec 0 packets input 0 bytes 0 drops 0 packets output 0 bytes 0 drops Execute the display mpls te tunnel interface command on Router D to display detailed information about the MPLS TE tunnel RouterD display mpls te tunnel interface Tunnel Name Tunnel 4 Tunnel State Up Main CRLSP up Reverse CRLSP up Tunnel Attributes LSP ID Tunnel ID 8 Admin State Normal Ingress LSR ID Egress LSR ID Signaling ...

Page 144: ...erface Destination 4 4 4 9 FEC 1 1 1 9 1 30478 Protocol RSVP LSR Type Ingress Service NHLFE ID 1025 State Active Out Label 1150 Nexthop 30 1 1 1 Out Interface GE2 0 1 Destination 30 1 1 1 FEC 30 1 1 1 Protocol Local LSR Type Ingress Service NHLFE ID 1024 State Active Nexthop 30 1 1 1 Out Interface GE2 0 1 CRLSP backup configuration example Network requirements Router A Router B Router C and Router...

Page 145: ...d masks for interfaces Details not shown 2 Configure IS IS to advertise interface addresses including the loopback interface address and configure IS IS TE Details not shown 3 Configure an LSR ID and enable MPLS MPLS TE and RSVP TE Configure Router A RouterA system view RouterA mpls lsr id 1 1 1 9 RouterA mpls te RouterA te quit RouterA rsvp RouterA rsvp quit RouterA interface gigabitethernet 2 0 ...

Page 146: ...atic 100 1 2 0 24 tunnel 3 preference 1 Verifying the configuration Execute the display interface tunnel command on Router A The output shows that the tunnel interface Tunnel 3 is up RouterA display interface tunnel Tunnel3 Current state UP Line protocol state UP Description Tunnel3 Interface Bandwidth 64kbps Maximum Transmit Unit 1496 Internet Address is 9 1 1 1 24 Primary Tunnel source unknown d...

Page 147: ...000 00 bytes Path MTU 1500 Class type CT0 RRO number 6 10 1 1 1 32 Flag 0x00 No FRR 10 1 1 2 32 Flag 0x00 No FRR In Int 2 2 2 9 32 Flag 0x20 No FRR Node ID 20 1 1 1 32 Flag 0x00 No FRR 20 1 1 2 32 Flag 0x00 No FRR In Int 3 3 3 9 32 Flag 0x20 No FRR Node ID Fast Reroute protection None Tunnel name Tunnel3 Destination 3 3 3 9 Source 1 1 1 9 Tunnel ID 3 LSP ID 30107 LSR type Ingress Direction Unidire...

Page 148: ...n the router RouterA display mpls lsp FEC Proto In Out Label Interface Out NHLFE 1 1 1 9 3 34313 RSVP 1150 POS2 2 1 30 1 1 2 Local POS2 2 1 Tunnel3 Local NHLFE1029 Execute the display ip routing table command on Router A The output shows a static route entry with interface Tunnel 3 as the output interface Details not shown Manual bypass tunnel for FRR configuration example Network requirements On ...

Page 149: ... Details not shown 2 Configure IS IS to advertise interface addresses including the loopback interface address Details not shown 3 Configure an LSR ID and enable MPLS MPLS TE and RSVP TE on each router Enable BFD for RSVP TE on Router B and Router C Configure Router A RouterA system view RouterA mpls lsr id 1 1 1 1 RouterA mpls te RouterA te quit RouterA rsvp RouterA rsvp quit RouterA interface gi...

Page 150: ...er A is configured Details not shown 4 Configure an MPLS TE tunnel on Router A the ingress node of the primary CRLSP Configure an explicit path for the primary CRLSP RouterA explicit path pri path RouterA explicit path pri path nexthop 2 1 1 2 RouterA explicit path pri path nexthop 3 1 1 2 RouterA explicit path pri path nexthop 4 1 1 2 RouterA explicit path pri path nexthop 4 4 4 4 RouterA explici...

Page 151: ...terface Tunnel Name Tunnel 4 Tunnel State Up Main CRLSP up Shared resource CRLSP down Tunnel Attributes LSP ID 48960 Tunnel ID 4 Admin State Normal Ingress LSR ID 1 1 1 1 Egress LSR ID 3 3 3 3 Signaling RSVP TE Static CRLSP Name Resv Style SE Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type CT0 Tunnel Bandwidth 0 kbps Reserved Bandwidth 0 kbps Setup Priority 7 Holdi...

Page 152: ...ce gigabitethernet 2 0 2 RouterB GigabitEthernet2 0 2 mpls te fast reroute bypass tunnel tunnel 5 RouterB GigabitEthernet2 0 2 quit Execute the display interface tunnel command on Router B The output shows that the tunnel interface Tunnel 5 is up Details not shown 6 Configure a static route on Router A to direct the traffic destined for subnet 100 1 2 0 24 to MPLS TE tunnel 4 RouterA ip route stat...

Page 153: ...TE Record Route Enabled Record Label Enabled FRR Flag Enabled Bandwidth Protection Disabled Backup Bandwidth Flag Disabled Backup Bandwidth Type Backup Bandwidth Bypass Tunnel No Auto Created No Route Pinning Disabled Retry Limit 10 Retry Interval 2 sec Reoptimization Disabled Reoptimization Freq Backup Type None Backup LSP ID Auto Bandwidth Disabled Auto Bandwidth Freq Min Bandwidth Max Bandwidth...

Page 154: ...nnel 5 is bound to interface GigabitEthernet 2 0 2 but not in use Details not shown Execute the display ip routing table command on Router A The output shows a static route entry with interface Tunnel 4 as the output interface Details not shown Auto FRR configuration example Network requirements Use RSVP TE to set up a primary CRLSP that explicitly uses path Router A Router B Router C Router D Con...

Page 155: ...k interface address Details not shown 3 Configure an LSR ID and enable MPLS MPLS TE and RSVP TE on each router Enable BFD for RSVP TE on Router B and Router C Configure Router A RouterA system view RouterA mpls lsr id 1 1 1 1 RouterA mpls te RouterA te quit RouterA rsvp RouterA rsvp quit RouterA interface gigabitethernet 2 0 1 RouterA GigabitEthernet2 0 1 mpls enable RouterA GigabitEthernet2 0 1 m...

Page 156: ...erA explicit path pri path nexthop 4 1 1 2 RouterA explicit path pri path nexthop 4 4 4 4 RouterA explicit path pri path quit Create MPLS TE tunnel interface Tunnel 1 for the primary CRLSP RouterA interface tunnel 1 mode mpls te RouterA Tunnel1 ip address 10 1 1 1 255 255 255 0 Specify the tunnel destination address as the LSR ID of Router D RouterA Tunnel1 destination 4 4 4 4 Specify the tunnel s...

Page 157: ... 0 kbps Setup Priority 7 Holding Priority 7 Affinity Attr Mask 0 0 Explicit Path exp1 Backup Explicit Path Metric Type TE Record Route Enabled Record Label Enabled FRR Flag Enabled Bandwidth Protection Disabled Backup Bandwidth Flag Disabled Backup Bandwidth Type Backup Bandwidth Bypass Tunnel No Auto Created No Route Pinning Disabled Retry Limit 3 Retry Interval 2 sec Reoptimization Disabled Reop...

Page 158: ...Tunnel ID 50 Admin State Normal Ingress LSR ID 2 2 2 2 Egress LSR ID 4 4 4 4 Signaling RSVP TE Static CRLSP Name Resv Style SE Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type CT0 Tunnel Bandwidth 0 kbps Reserved Bandwidth 0 kbps Setup Priority 7 Holding Priority 7 Affinity Attr Mask 0 0 Explicit Path Backup Explicit Path Metric Type TE Record Route Enabled Record L...

Page 159: ...idth Execute the display mpls lsp command on Router B The output shows that the current bypass tunnel that protects the primary CRLSP is Tunnel 50 RouterB display mpls lsp FEC Proto In Out Label Interface Out NHLFE 2 2 2 2 51 16802 RSVP 3 POS2 2 0 2 2 2 2 1 16802 RSVP 1151 GE2 0 2 Backup 3 Tun50 2 2 2 2 50 16802 RSVP 3 POS2 2 1 3 2 1 2 Local POS2 2 1 3 3 1 2 Local POS2 2 0 Execute the display rsvp...

Page 160: ...ts Router A Router B Router C and Router D run IS IS and all of them are Level 2 routers Use RSVP TE to create a TE tunnel from Router A to Router D Traffic of the tunnel belongs to CT 2 and the tunnel needs a bandwidth of 4000 kbps The maximum bandwidth of the link that the tunnel traverses is 10000 kbps and the maximum reservable bandwidth of the link is 10000 kbps BC 1 BC 2 and BC 3 are 8000 kb...

Page 161: ...et2 0 1 quit RouterA interface loopback 0 RouterA LoopBack0 isis enable 1 RouterA LoopBack0 isis circuit level level 2 RouterA LoopBack0 quit Configure Router B RouterB system view RouterB isis 1 RouterB isis 1 network entity 00 0005 0000 0000 0002 00 RouterB isis 1 quit RouterB interface gigabitethernet 2 0 1 RouterB GigabitEthernet2 0 1 isis enable 1 RouterB GigabitEthernet2 0 1 isis circuit lev...

Page 162: ...ircuit level level 2 RouterD LoopBack0 quit Verify that the routers have learned the routes to one another including the routes to the loopback interfaces RouterA display ip routing table Destinations 10 Routes 10 Destination Mask Proto Pre Cost NextHop Interface 1 1 1 9 32 Direct 0 0 127 0 0 1 InLoop0 2 2 2 9 32 IS_L1 15 10 10 1 1 2 GE2 0 1 3 3 3 9 32 IS_L1 15 20 10 1 1 2 GE2 0 1 4 4 4 9 32 IS_L1...

Page 163: ... RouterB POS2 2 0 rsvp enable RouterB POS2 2 0 quit Configure Router C RouterC mpls lsr id 3 3 3 9 RouterC mpls te RouterC te ds te mode ietf RouterC te quit RouterC rsvp RouterC rsvp quit RouterC interface gigabitethernet 2 0 1 RouterC GigabitEthernet2 0 1 mpls enable RouterC GigabitEthernet2 0 1 mpls te enable RouterC GigabitEthernet2 0 1 rsvp enable RouterC GigabitEthernet2 0 1 quit RouterC int...

Page 164: ...idth constraints on Router A RouterA interface gigabitethernet 2 0 1 RouterA GigabitEthernet2 0 1 mpls te max link bandwidth 10000 RouterA GigabitEthernet2 0 1 mpls te max reservable bandwidth rdm 10000 bc1 8000 bc2 5000 bc3 2000 RouterA GigabitEthernet2 0 1 quit Set the maximum bandwidth maximum reservable bandwidth and bandwidth constraints on Router B RouterB interface gigabitethernet 2 0 1 Rou...

Page 165: ...4 9 Configure MPLS TE to use RSVP TE to establish the tunnel RouterA Tunnel1 mpls te signaling rsvp te Assign 4000 kbps bandwidth to CT 2 for the tunnel RouterA Tunnel1 mpls te bandwidth ct2 4000 Set the tunnel setup priority and holding priority both to 0 RouterA Tunnel1 mpls te priority 0 RouterA Tunnel1 quit 7 Configure a static route on Router A to direct the traffic destined for subnet 100 1 ...

Page 166: ... Bandwidth Protection Disabled Backup Bandwidth Flag Disabled Backup Bandwidth Type Backup Bandwidth Bypass Tunnel No Auto Created No Route Pinning Disabled Retry Limit 10 Retry Interval 2 sec Reoptimization Disabled Reoptimization Freq Backup Type None Backup LSP ID Auto Bandwidth Disabled Auto Bandwidth Freq Min Bandwidth Max Bandwidth Collected Bandwidth Execute the display mpls te link managem...

Page 167: ... LSA generated Symptom OSPF TE is configured but no TE LSAs can be generated to describe MPLS TE attributes Analysis For TE LSAs to be generated a minimum of one OSPF neighbor must reach FULL state Solution 1 To resolve the problem a Use the display current configuration command to verify that MPLS TE is configured on involved interfaces b Use the debugging ospf mpls te command to verify that OSPF...

Page 168: ...nterface You must specify the incoming label the outgoing label the next hop or the outgoing interface and the required bandwidth on each transit node If it is not configured with the penultimate hop popping function an egress node pops the incoming label of a packet It performs label forwarding according to the inner label or IP forwarding You are only required to specify the incoming label on th...

Page 169: ... exists Do not configure the next hop address as a local public IP address when configuring the static CRLSP on the ingress node or a transit node You do not need to execute the static cr lsp egress command on the egress node if the outgoing label configured on the penultimate hop of the static CRLSP is 0 or 3 Displaying static CRLSPs Execute display commands in any view Task Command Display stati...

Page 170: ...er B RouterB system view RouterB isis 1 RouterB isis 1 network entity 00 0005 0000 0000 0002 00 RouterB isis 1 quit RouterB interface gigabitethernet 2 0 1 RouterB GigabitEthernet2 0 1 isis enable 1 RouterB GigabitEthernet2 0 1 quit RouterB interface gigabitethernet 2 0 2 RouterB GigabitEthernet2 0 2 isis enable 1 RouterB GigabitEthernet2 0 2 quit RouterB interface loopback 0 RouterB LoopBack0 isi...

Page 171: ...ernet 2 0 1 RouterB GigabitEthernet2 0 1 mpls enable RouterB GigabitEthernet2 0 1 mpls te enable RouterB GigabitEthernet2 0 1 quit RouterB interface gigabitethernet 2 0 2 RouterB GigabitEthernet2 0 2 mpls enable RouterB GigabitEthernet2 0 2 mpls te enable RouterB GigabitEthernet2 0 2 quit Configure Router C RouterC mpls lsr id 3 3 3 3 RouterC mpls te RouterC te quit RouterC interface gigabitethern...

Page 172: ... of the static CRLSP and specify the next hop address as 2 1 1 2 outgoing label as 20 and required bandwidth as 2000 kbps RouterA static cr lsp ingress static cr lsp 1 nexthop 2 1 1 2 out label 20 bandwidth 2000 On Router A configure tunnel 0 to reference the static CRLSP static cr lsp 1 RouterA interface Tunnel0 RouterA Tunnel0 mpls te static cr lsp static cr lsp 1 RouterA Tunnel0 quit Configure ...

Page 173: ...Tunnel Name Tunnel 0 Tunnel State Up Main CRLSP up Tunnel Attributes LSP ID 1 Tunnel ID 0 Admin State Normal Ingress LSR ID 1 1 1 1 Egress LSR ID 3 3 3 3 Signaling Static Static CRLSP Name static cr lsp 1 Resv Style Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type Tunnel Bandwidth Reserved Bandwidth Setup Priority 0 Holding Priority 0 Affinity Attr Mask Explicit Pat...

Page 174: ...static cr lsp 1 Egress 30 Null Up Execute the display ip routing table command on Router A The output shows a static route entry with interface Tunnel 0 as the output interface RouterA display ip routing table Destinations 12 Routes 12 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 2 1 1 0 24 Direct 0 0 2 1 1 1 GE2 ...

Page 175: ...sage processing errors to the sender They do not affect the state of the nodes along the path ResvErr messages Sent downstream by the sender or a transit node to notify the downstream nodes of an Resv message processing error or of a reservation error caused by preemption ResvConf messages Sent to the receiver to confirm Resv messages Hello messages Sent between any two directly connected RSVP nei...

Page 176: ...d the CRLSP established based on this state is also removed The Path and Resv messages for refreshing the resource reservation states are collectively referred to as refresh messages Refresh messages can also be used to recover from lost RSVP messages When multiple RSVP sessions exist on a network a short refresh interval can cause network degradation but a long refresh interval cannot meet the re...

Page 177: ...he signaling protocol or control plane fails so that LSRs can still forward packets according to forwarding entries RSVP GR defines the following roles GR restarter Router that gracefully restarts due to a manually configured command or a fault It must be GR capable GR helper Neighbor of the GR restarter A GR helper maintains the neighbor relationship with the GR restarter and helps the GR restart...

Page 178: ...ring RSVP GR Enabling BFD for RSVP Enabling RSVP Step Command Remarks 1 Enter system view system view N A 2 Enable global RSVP and enter RSVP view rsvp By default global RSVP is disabled 3 Return to system view quit N A 4 Enter interface view interface interface type interface number N A 5 Enable RSVP on the interface rsvp enable By default RSVP is disabled on the interface Configuring RSVP refres...

Page 179: ...SVP message retransmission interval is 500 milliseconds This command takes effect after reliable RSVP message delivery is enabled by using the rsvp reduction srefresh reliability command Configuring RSVP hello extension When RSVP hello extension is enabled on an interface the device receives and sends hello messages through the interface to detect the neighbor s status If the device receives a hel...

Page 180: ...urations in RSVP neighbor view interface view and RSVP view are in descending order of priority To configure RSVP authentication in RSVP neighbor view Step Command Remarks 1 Enter system view system view N A 2 Enter RSVP view rsvp N A 3 Create an RSVP authentication neighbor and enter RSVP neighbor view peer ip address By default the device does not have any RSVP authentication neighbors 4 Enable ...

Page 181: ...equence To configure RSVP authentication in RSVP view Step Command Remarks 1 Enter system view system view N A 2 Enter RSVP view rsvp N A 3 Enable RSVP authentication globally and configure the authentication key authentication key cipher plain auth key By default RSVP authentication is disabled 4 Enable challenge response handshake globally authentication challenge By default the challenge respon...

Page 182: ...ension rsvp hello enable By default RSVP hello extension is disabled Enabling BFD for RSVP If a link fails MPLS TE tunnels over the link fail to forward packets MPLS TE cannot quickly detect a link failure To address this issue you can enable BFD for RSVP so MPLS TE can quickly switch data from the primary path to the backup path upon a link failure To enable BFD for RSVP Step Command Remarks 1 En...

Page 183: ...address source ip address tunnel id tunnel id nexthop ip address verbose Display information about RSVP path states display rsvp sender destination ip address source ip address tunnel id tunnel id lsp id lsp id verbose Display RSVP statistics display rsvp statistics interface interface type interface number Clear RSVP security associations reset rsvp authentication from ip address to ip address Cl...

Page 184: ...is enable 1 RouterA GigabitEthernet2 0 1 isis circuit level level 2 RouterA GigabitEthernet2 0 1 quit RouterA interface loopback 0 RouterA LoopBack0 isis enable 1 RouterA LoopBack0 isis circuit level level 2 RouterA LoopBack0 quit Configure Router B RouterB system view RouterB isis 1 RouterB isis 1 network entity 00 0005 0000 0000 0002 00 RouterB isis 1 quit RouterB interface gigabitethernet 2 0 1...

Page 185: ...erD GigabitEthernet2 0 1 quit RouterD interface loopback 0 RouterD LoopBack0 isis enable 1 RouterD LoopBack0 isis circuit level level 2 RouterD LoopBack0 quit Execute the display ip routing table command on each router to verify that the routers have learned the routes to one another including the routes to the loopback interfaces Details not shown 3 Configure an LSR ID and enable MPLS MPLS TE and...

Page 186: ...t2 0 1 quit RouterC interface pos 2 2 0 RouterC POS2 2 0 mpls enable RouterC POS2 2 0 mpls te enable RouterC POS2 2 0 rsvp enable RouterC POS2 2 0 quit Configure Router D RouterD mpls lsr id 4 4 4 9 RouterD mpls te RouterD te quit RouterD rsvp RouterD rsvp quit RouterD interface gigabitethernet 2 0 1 RouterD GigabitEthernet2 0 1 mpls enable RouterD GigabitEthernet2 0 1 mpls te enable RouterD Gigab...

Page 187: ...t Set the maximum link bandwidth and maximum reservable bandwidth on Router C RouterC interface gigabitethernet 2 0 1 RouterC GigabitEthernet2 0 1 mpls te max link bandwidth 10000 RouterC GigabitEthernet2 0 1 mpls te max reservable bandwidth 5000 RouterC GigabitEthernet2 0 1 quit RouterC interface pos 2 2 0 RouterC POS2 2 0 mpls te max link bandwidth 10000 RouterC POS2 2 0 mpls te max reservable b...

Page 188: ...euing Size Length Discards 0 75 0 Last clearing of counters Never Last 300 seconds input rate 0 bytes sec 0 bits sec 0 packets sec Last 300 seconds output rate 0 bytes sec 0 bits sec 0 packets sec Input 0 packets 0 bytes 0 drops Output 0 packets 0 bytes 0 drops Execute the display mpls te tunnel interface command on Router A to display detailed information about the MPLS TE tunnel RouterA display ...

Page 189: ... continuous forwarding when a router reboots Figure 44 Network diagram Configuration procedure 1 Configure IP addresses and masks for interfaces Details not shown 2 Configure IS IS to advertise interface addresses including the loopback interface address Details not shown 3 Configure an LSR ID enable MPLS MPLS TE RSVP and RSVP hello extension Configure Router A RouterA system view RouterA mpls lsr...

Page 190: ...d 3 3 3 9 RouterC mpls te RouterC te quit RouterC rsvp RouterC rsvp rsvp RouterC mpls interface gigabitethernet 2 0 1 RouterC GigabitEthernet2 0 1 mpls enable RouterC GigabitEthernet2 0 1 mpls te enable RouterC GigabitEthernet2 0 1 rsvp enable RouterC GigabitEthernet2 0 1 rsvp hello enable RouterC GigabitEthernet2 0 1 quit 4 Configure IS IS TE Details not shown 5 Configure an MPLS TE tunnel Detail...

Page 191: ...tive PSB count 0 RSB count 1 Src instance 0x1f08 Dst instance 0x22 Summary refresh Disabled Graceful Restart state Ready Peer GR restart time 120000 ms Peer GR recovery time 0 ms The output shows that the neighbor s GR state is Ready ...

Page 192: ...referred tunnels that have the same destination address in a tunnel policy only the first configured tunnel takes effect If the first tunnel is not available the second tunnel is used and so forth No load balancing will be performed on these tunnels This method explicitly specifies an MPLS TE tunnel GRE tunnel or tunnel bundle for an MPLS VPN facilitating traffic planning As a best practice use th...

Page 193: ...ission delays on different tunnels can greatly vary Therefore the destination device or the upper layer application might take a great time to sequence the packets As a best practice do not use the second method Configuration procedure To configure a tunnel policy Step Command Remarks 1 Enter system view system view N A 2 Create a tunnel policy and enter tunnel policy view tunnel policy tunnel pol...

Page 194: ...PE1 tunnel policy preferredte1 quit 2 Configure MPLS VPN instances and apply the tunnel policy to the VPN instances Create MPLS VPN instance vpna and apply tunnel policy preferredte1 to it PE1 ip vpn instance vpna PE1 vpn instance vpna route distinguisher 100 1 PE1 vpn instance vpna vpn target 100 1 PE1 vpn instance vpna tnl policy preferredte1 PE1 vpn instance vpna quit Create MPLS VPN instance v...

Page 195: ...t PE1 ip vpn instance vpnb PE1 vpn instance vpnb route distinguisher 100 2 PE1 vpn instance vpnb vpn target 100 2 PE1 vpn instance vpnb tnl policy preferredgre2 Tunnel selection order configuration example Network requirements PE 1 has multiple tunnels to reach PE 2 one MPLS TE tunnel on interface Tunnel 1 one GRE tunnel on interface Tunnel 2 and one LDP LSP tunnel Only one MPLS VPN vpna exists on...

Page 196: ...red path tunnel 1 PE1 tunnel policy preferredte1 quit Create tunnel policy preferredte3 and configure tunnel 3 as the preferred tunnel PE1 tunnel policy preferredte3 PE1 tunnel policy preferredte3 preferred path tunnel 3 PE1 tunnel policy preferredte3 quit Create tunnel policy preferredgre2 and configure tunnel 2 as the preferred tunnel PE1 tunnel policy preferredgre2 PE1 tunnel policy preferredgr...

Page 197: ...icy preferredte3 PE1 vpn instance vpnd quit Create MPLS VPN instances vpne and vpnf and apply tunnel policy preferredgre2 to them PE1 ip vpn instance vpne PE1 vpn instance vpne route distinguisher 100 5 PE1 vpn instance vpne vpn target 100 5 PE1 vpn instance vpne tnl policy preferredgre2 PE1 vpn instance vpne quit PE1 ip vpn instance vpnf PE1 vpn instance vpnf route distinguisher 100 6 PE1 vpn ins...

Page 198: ...customer network and has one or more interfaces directly connected to a service provider network It does not support MPLS Provider edge device A PE device resides at the edge of a service provider network and is connected to one or more CEs All MPLS VPN services are processed on PEs Provider device A P device is a core device on a service provider network It is not directly connected to any CEs A ...

Page 199: ...nce contains the VPN membership and routing rules of associated sites VPN IPv4 address Each VPN independently manages its address space The address spaces of VPNs might overlap For example if both VPN 1 and VPN 2 use the addresses on subnet 10 110 10 0 24 address space overlapping occurs BGP cannot process overlapping VPN address spaces For example if both VPN 1 and VPN 2 use the subnet 10 110 10 ...

Page 200: ...ed number where the minimum value of the AS number is 65536 For example 65536 1 MP BGP MP BGP supports multiple address families including IPv4 multicast IPv6 unicast IPv6 multicast and VPN IPv4 address families In MPLS L3VPN MP BGP advertises VPN IPv4 routes for VPN sites between PEs MPLS L3VPN route advertisement In a basic MPLS L3VPN CEs and PEs are responsible for advertising VPN routing infor...

Page 201: ...E 1 performs the following operations a Finds the matching VPN route based on the inbound interface and destination address of the packet b Labels the packet with both the inner label and the outer tag c Forwards the packet to the public tunnel 3 P devices forward the packet to PE 2 by the outer tag If the outer tag is an MPLS label the label is removed from the packet at the penultimate hop If th...

Page 202: ... VPN 2 sites Hub and spoke networking scheme The hub and spoke networking scheme is suitable for a VPN where all users must communicate with each other through an access control device In a hub and spoke network as shown in Figure 50 configure route targets as follows On spoke PEs PEs connected to spoke sites set the export target to Spoke and the import target to Hub On the hub PE PE connected to...

Page 203: ...oute to Hub CE 4 Hub CE advertises the IPv4 route back to Hub PE 5 Hub PE adds the IPv4 route to the routing table of VPN 1 out changes it to a VPN IPv4 route and advertises the VPN IPv4 route to Spoke PE 2 through MP BGP 6 Spoke PE 2 changes the VPN IPv4 route to the original IPv4 route and advertises the IPv4 route to Site 2 After spoke sites exchange routes through the hub site they can communi...

Page 204: ...ferent ASs or to multiple ASs of an ISP Inter AS VPN provides the following solutions VRF to VRF connections between ASBRs This solution is also called inter AS option A EBGP redistribution of labeled VPN IPv4 routes between ASBRs ASBRs advertise VPN IPv4 routes to each other through MP EBGP This solution is also called inter AS option B Multihop EBGP redistribution of labeled VPN IPv4 routes betw...

Page 205: ...advertises the received routes to CE 3 Packets forwarded within an AS are VPN packets that carry two labels Packets forwarded between ASBRs are common IP packets Inter AS option A is easy to carry out because no special configuration is required on the PEs acting as the ASBRs However it has limited scalability because the PEs acting as the ASBRs must manage all the VPN routes and create VPN instan...

Page 206: ...nnel from PE 3 to ASBR 2 2 ASBR 2 removes the outer tag replaces L3 with L2 and forwards the packet to ASBR 1 Packets between ASBR 1 and ASBR 2 carry only one inner label 3 ASBR 1 replaces L2 with L1 adds the outer tag of the public tunnel from ASBR 1 to PE 1 and forwards the packet to PE 1 4 PE 1 removes the inner label and outer tag and forwards the packet to CE 1 In this solution ASBRs must rec...

Page 207: ... in this solution A public tunnel for example the one from PE 3 to PE 1 is set up by using the following process 1 Within AS 100 the public tunnel from ASBR 1 to PE 1 is set up by using a label distribution protocol for example LDP Assume that the outgoing label for the public tunnel on ASBR 1 is L1 2 ASBR 1 advertises labeled IPv4 unicast routes to ASBR 2 through EBGP The route destined for PE 1 ...

Page 208: ... according to the inner label Lx As shown in Figure 55 to improve scalability you can specify a route reflector RR in each AS to exchange VPN IPv4 routes with PEs in the same AS The RR in each AS maintains all VPN IPv4 routes The RRs in two ASs establish a multihop MP EBGP session to advertise VPN IPv4 routes Figure 55 Network diagram for inter AS option C using RRs Carrier s carrier If a customer...

Page 209: ...em You must enable MPLS on the CE of the Level 2 carrier regardless of whether the PE and CE are in the same AS A Level 2 carrier can be an ordinary ISP or an MPLS L3VPN service provider As shown in Figure 56 when the customer carrier is an ordinary ISP its PEs and CEs run IGP to communicate with each other The PEs do not need to run MPLS PE 3 and PE 4 exchange customer network routes IPv4 unicast...

Page 210: ...is a customer VPN named VPN A The customer VPN contains two sub VPNs VPN A 1 and VPN A 2 The service provider PEs consider the customer s network as a common VPN user and do not join any sub VPNs The service provider CE devices CE 1 and CE 2 exchange VPNv4 routes including sub VPN routing information with the service provider PEs which implements the propagation of the sub VPN routing information ...

Page 211: ...the VPN IPv4 routes to the import targets of its local VPNs Each local VPN accepts routes of its own and advertises them to provider CEs If a provider CE such as CE 7 and CE 8 in Figure 58 is connected to a provider PE through an IPv4 connection the PE advertises IPv4 routes to the CE If it is a VPN IPv4 connection a customer MPLS VPN network the PE advertises VPN IPv4 routes to the CE 6 After rec...

Page 212: ...ure a static route for VPN instance vpn2 to reach the multirole host Specify the next hop of the route as the IP address of CE 1 and specify the VPN instance to which the next hop belongs as VPN 1 This configuration ensures that packets from VPN 2 can be routed to the multirole host Configure static routes for all VPN instances that the multirole host needs to access except the associated VPN inst...

Page 213: ... connected through UPEs including the routes of both the local and remote sites An SPE advertises routes along with labels to UPEs including the default routes of VPN instances or summary routes and the routes permitted by the routing policy By using routing policies you can control which sites in a VPN can communicate with each other An SPE features large routing table capacity high forwarding pe...

Page 214: ...t multiple OSPF instances to create independent routing tables for VPN instances Each OSPF process is bound to a VPN instance Routes learned by an OSPF process are added into the routing table of the bound VPN instance OSPF area configuration between a PE and a CE The OSPF area between a PE and a CE can be either a non backbone area or a backbone area In the OSPF VPN extension application the MPLS...

Page 215: ...s Type 7 After domain ID configuration VPN 1 routes are advertised from CE 11 to CE 21 and CE 22 by using the following process 1 PE 1 redistributes OSPF routes into BGP adds the domain ID to the redistributed BGP VPNv4 routes as a BGP extended community attribute and advertises the routes to PE 2 2 PE 2 compares the domain ID in the received routes with the locally configured domain ID If they ar...

Page 216: ...n ID or with different domain IDs A direct route between CEs It is an intra area route that is called a backdoor link VPN traffic is always forwarded through the backdoor link because it has a higher priority than the inter area route To forward VPN traffic over the inter area route you can establish a sham link between the two PEs to change the inter area route to an intra area route Figure 64 Ne...

Page 217: ...te 2 through PE 2 and CE 2 To remove the routing loop you can configure the same SoO attribute on PE 2 for CE 2 and CE 3 PE 2 adds the SoO attribute to route updates received from CE 2 or CE 3 and checks the SoO attribute of route updates to be advertised to CE 2 or CE 3 The SoO attribute of the route updates from CE 3 is the same as the SoO attribute for CE 2 and PE 2 does not advertise route upd...

Page 218: ...itchover For more information about BFD for LSPs or MPLS TE tunnels see Configuring MPLS OAM VPNv4 route backup for an IPv4 route Figure 67 Network diagram As shown in Figure 67 configure FRR on the egress node PE 2 and specify the backup next hop for VPN 1 as PE 3 When PE 2 receives an IPv4 route from CE 2 and a VPNv4 route from PE 3 both routes are destined for VPN 1 connected to CE 2 PE 2 uses ...

Page 219: ...the IPv4 route as the backup link Configure BFD for LSPs or MPLS TE tunnels on PE 2 to detect the connectivity of the public tunnel from PE 2 to PE 3 When the tunnel operates correctly traffic from CE 1 to CE 2 goes through the path CE 1 PE 1 PE 2 PE 3 CE 2 When the tunnel fails the traffic goes through the path CE 1 PE 1 PE 2 CE 2 In this scenario PE 2 is responsible for primary link detection an...

Page 220: ... create VPN instances for VPN 1 and VPN 2 Bind GigabitEthernet 2 0 1 1 to VPN 1 and GigabitEthernet 2 0 1 2 to VPN 2 The MCE and PE add a received route to the routing table of the VPN instance that is bound to the receiving interface You can configure static routes RIP OSPF IS IS EBGP or IBGP between an MCE and a VPN site and between an MCE and a PE NOTE To implement dynamic IP assignment for DHC...

Page 221: ...tance Required Associating a VPN instance with an interface Optional Configuring route related attributes for a VPN instance Required Configuring routing between a PE and a CE Required Configuring routing between PEs Optional Configuring BGP VPNv4 route control Configuration prerequisites Before you configure basic MPLS L3VPN perform the following tasks 1 Configure an IGP on the PEs and P devices ...

Page 222: ...D is configured for a VPN instance 6 Optional Configure an SNMP context for the VPN instance snmp context name context name By default no SNMP context is configured Table 12 Maximum number of VPN instances that can be configured on the routers Hardware Number of VPN instances MSR1002 4 1003 8S 1023 MSR2003 1023 MSR2004 24 2004 48 1023 MSR3012 3024 3044 3064 2047 MSR4060 4080 4095 Associating a VPN...

Page 223: ...tive routes for a VPN instance can prevent the PE from learning too many routes 5 Apply an import routing policy import route policy route policy By default all routes matching the import target attribute are accepted The specified routing policy must have been created For information about routing policies see Layer 3 IP Routing Configuration Guide 6 Apply an export routing policy export route po...

Page 224: ...n instance vpn instance name Perform this configuration on the PE On the CE create a common RIP process 3 Enable RIP on the interface attached to the specified network network network address By default RIP is disabled on an interface Configuring OSPF between a PE and a CE An OSPF process that is bound to a VPN instance does not use the public network router ID configured in system view Therefore ...

Page 225: ...ecified network in the area network ip address wildcard mask By default an interface neither belongs to any area nor runs OSPF Configuring IS IS between a PE and a CE An IS IS process belongs to the public network or a single VPN instance If you create an IS IS process without binding it to a VPN instance the process belongs to the public network To configure IS IS between a PE and a CE Step Comma...

Page 226: ...ute protocol process id all processes allow direct med med value route policy route policy name A PE must redistribute the routes of the local CE into its VPN routing table so it can advertise them to the peer PE 8 Optional Allow the local AS number to appear in the AS_PATH attribute of a received route and set the maximum number of repetitions peer group name ip address mask length allow as loop ...

Page 227: ...pn instance vpn instance name Configuration commands in BGP VPN instance view are the same as those in BGP view For more information see Layer 3 IP Routing Configuration Guide 4 Configure the CE as the VPN IBGP peer peer group name ip address mask length as number as number By default no BGP peer is created 5 Create the BGP VPN IPv4 unicast family and enter its view address family ipv4 unicast By ...

Page 228: ...sk length enable By default BGP does not exchange IPv4 unicast routes with any peer 6 Optional Configure route redistribution import route protocol process id all processes allow direct med med value route policy route policy name A CE must redistribute its routes to the PE so the PE can advertise them to the peer CE Configuring routing between PEs Step Command Remarks 1 Enter system view system v...

Page 229: ...eived from or advertised to a peer or peer group based on an AS_PATH list peer group name ip address mask length as path acl aspath filter number import export By default no AS filtering list is applied to a peer or peer group 9 Optional Advertise a default VPN route to a peer or peer group peer group name ip address mask length default route advertise vpn instance vpn instance name By default no ...

Page 230: ...ve from a peer or peer group is not limited 19 Apply a routing policy to a peer or peer group peer group name ip address mask length route policy route policy name export import By default no routing policy is applied to a peer or peer group 20 Enable route target based filtering of received VPNv4 routes policy vpn target By default this feature is enabled 21 Enable route reflection between client...

Page 231: ...LS capability on the interface connected to the ASBR in another AS There is no need to configure a label distribution protocol for example LDP An ASBR always sets itself as the next hop of VPNv4 routes advertised to an MP IBGP peer regardless of the peer next hop local command To configure inter AS option B on an ASBR Step Command Remarks 1 Enter system view system view N A 2 Enter interface view ...

Page 232: ... routes with the ASBR ASBR configuration Configure a routing protocol and enable MPLS and LDP on the interface connected to an internal router of the AS Specify the PE in the same AS as an IBGP peer and the ASBR in a different AS as an EBGP peer Enable BGP to exchange labeled IPv4 unicast routes with the PE in the same AS and the ASBR in different AS Enable MPLS capability on the interface connect...

Page 233: ... advertised by an ASBR through BGP include the PE address as well as other routes You can configure a routing policy to filter routes Routes surviving the filtering are assigned labels and all others are advertised as common IPv4 routes To configure a routing policy use the following commands if match mpls label Matches routes carrying MPLS labels apply mpls label Sets MPLS labels for IPv4 routes ...

Page 234: ... peer 18 Enable exchange of labeled IPv4 routes with the PE in the same AS and the ASBR in another AS peer group name ip address mask length label route capability By default BGP cannot advertise labeled routes to any IPv4 peer or peer group 19 Configure the ASBR to set itself as the next hop of routes advertised to the PE in the local AS peer group name ip address mask length next hop local By de...

Page 235: ...elationship To configure nested VPN Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Enter BGP VPNv4 address family view address family vpnv4 N A 4 Enable nested VPN nesting vpn By default nested VPN is disabled 5 Return to BGP view quit N A 6 Enter BGP VPN instance view ip vpn instance vpn instance name N A 7 Specify the peer CE or the peer group of th...

Page 236: ...nce that has a matching route for that packet 5 Return to system view quit N A 6 Enter the view of the interface connected to the CE interface interface type interface number N A 7 Apply the policy to the interface ip policy based route policy name By default no policy is applied to the interface Configuring a static route Step Command Remarks 1 Enter system view system view N A 2 Configure a stat...

Page 237: ...upe By default no peer is a UPE 7 Advertise routes to the UPE Advertise a default VPN route to the UPE peer group name ip address mask length default route advertise vpn instance vpn instance name Advertise routes permitted by a routing policy to the UPE peer group name ip address mask length upe route policy route policy name export By default no route is advertised to the UPE Do not configure bo...

Page 238: ...terface address Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Enter BGP VPN instance view ip vpn instance vpn instance name N A 4 Enter BGP VPN IPv4 unicast address family view address family ipv4 unicast N A 5 Redistribute direct routes into BGP including the loopback interface route import route direct By default no direct routes are redistributed ...

Page 239: ...e static routing RIP OSPF IS IS EBGP or IBGP between an MCE and a VPN site Configuring static routing between an MCE and a VPN site An MCE can reach a VPN site through a static route Static routing on a traditional CE is globally effective and does not support address overlapping among VPNs An MCE supports binding a static route to a VPN instance so that the static routes of different VPN instance...

Page 240: ...RIP 5 Optional Configure the default cost value for the redistributed routes default cost value The default cost is 0 Configuring OSPF between an MCE and a VPN site An OSPF process belongs to the public network or a single VPN instance If you create an OSPF process without binding it to a VPN instance the process belongs to the public network Binding OSPF processes to VPN instances can isolate rou...

Page 241: ...n instance name Perform this configuration on the MCE On a VPN site configure a common IS IS process 3 Configure a network entity title network entity net By default no NET is configured 4 Create the IS IS IPv4 unicast address family and enter its view address family ipv4 unicast By default the IS IS IPv4 unicast address family is not created 5 Redistribute remote site routes advertised by the PE ...

Page 242: ...edistribute remote site routes advertised by the PE into BGP import route protocol process id all processes allow direct med med value route policy route policy name By default no routes are redistributed into BGP 9 Optional Configure filtering of advertised routes filter policy acl number prefix list prefix list name export protocol process id By default BGP does not filter advertised routes 10 O...

Page 243: ...up name ip address mask length enable By default BGP does not exchange IPv4 unicast routes with any peer 7 Optional Configure the system to be the RR and specify the peer as the client of the RR peer group name ip address mask length reflect client By default no RR or RR client is configured After you configure a VPN site as an IBGP peer the MCE does not advertise the BGP routes learned from the V...

Page 244: ...uting VPN routes into the routing protocol running between the MCE and the PE Perform the following configurations on the MCE For information about how to configure the PE see Configuring routing between a PE and a CE Configuring static routing between an MCE and a PE Step Command Remarks 1 Enter system view system view N A 2 Configure a static route for a VPN instance ip route static vpn instance...

Page 245: ...routes from the PE 4 Optional Configure the OSPF domain ID domain id domain id secondary The default domain ID is 0 5 Redistribute the VPN routes import route protocol process id all processes allow ibgp allow direct cost cost nssa only route policy route policy name tag tag type type By default no routes are redistributed into OSPF 6 Optional Configure filtering of advertised routes filter policy...

Page 246: ...filter advertised routes 7 Return to system view quit N A 8 Enter interface view interface interface type interface number N A 9 Enable the IS IS process on the interface isis enable process id By default no IS IS process is enabled on the interface Configuring EBGP between an MCE and a PE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Enter BGP VPN i...

Page 247: ...ll processes allow direct med med value route policy route policy name By default no routes are redistributed into BGP 8 Optional Configure filtering of advertised routes filter policy acl number prefix list prefix list name export protocol process id By default BGP does not filter advertised routes 9 Optional Configure filtering of received routes filter policy acl number prefix list prefix list ...

Page 248: ...oO attribute for a BGP peer or peer group peer group name ip address mask length soo site of origin By default the SoO attribute is not configured For more information about the commands in this section see Layer 3 IP Routing Command Reference Configuring MPLS L3VPN FRR There are two methods to configure MPLS L3VPN FRR Method 1 Execute the pic command in BGP VPN IPv4 unicast address family view Th...

Page 249: ...interface a interface tunnel number mode mpls te b mpls bfd discriminator local local id remote remote id template template name c quit By default BFD is not configured to test the connectivity of the LSP or MPLS TE tunnel This step is required for VPNv4 route backup for a VPNv4 route and IPv4 route backup for a VPNv4 route Use either command depending on the public tunnel type For more informatio...

Page 250: ...e effect in the referenced routing policy Other apply commands do not take effect For more information about the command see Layer 3 IP Routing Command Reference Enabling SNMP notifications for MPLS L3VPN This feature enables MPLS L3VPN to generate SNMP notifications The generated SNMP notifications are sent to the SNMP module For more information about SNMP notifications see Network Management an...

Page 251: ...r vpnv4 vpn instance vpn instance name ip address mask length ip address group name group name log info ip address verbose Display BGP VPNv4 routes display bgp routing table vpnv4 route distinguisher route distinguisher network address mask mask length longest match network address mask mask length advertise info as path acl as path acl number community list basic community list number comm list n...

Page 252: ...nterface IP address Device Interface IP address CE 1 GE2 0 1 10 1 1 1 24 P Loop0 2 2 2 9 32 PE 1 Loop0 1 1 1 9 32 POS2 2 0 172 1 1 2 24 GE2 0 1 10 1 1 2 24 POS2 2 1 172 2 1 1 24 GE2 0 2 10 2 1 2 24 PE 2 Loop0 3 3 3 9 32 POS2 2 0 172 1 1 1 24 GE2 0 1 10 3 1 2 24 CE 2 GE2 0 1 10 2 1 1 24 GE2 0 2 10 4 1 2 24 CE 3 GE2 0 1 10 3 1 1 24 POS2 2 0 172 2 1 2 24 CE 4 GE2 0 1 10 4 1 1 24 Configuration procedu...

Page 253: ...0 P ospf 1 area 0 0 0 0 network 172 1 1 0 0 0 0 255 P ospf 1 area 0 0 0 0 network 172 2 1 0 0 0 0 255 P ospf 1 area 0 0 0 0 network 2 2 2 9 0 0 0 0 P ospf 1 area 0 0 0 0 quit P ospf 1 quit Configure PE 2 PE2 system view PE2 interface loopback 0 PE2 LoopBack0 ip address 3 3 3 9 32 PE2 LoopBack0 quit PE2 interface pos 2 2 0 PE2 Pos2 2 0 ip address 172 2 1 2 24 PE2 Pos2 2 0 quit PE2 ospf PE2 ospf 1 a...

Page 254: ...xecute the display mpls ldp peer command to verify that LDP sessions in Operational state have been established between PE 1 P and PE 2 Execute the display mpls ldp lsp command to verify that the LSPs have been established by LDP Details not shown 3 Configure VPN instances on PEs to allow CE access Configure PE 1 PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 100 1 PE1 vpn inst...

Page 255: ...tion of the VPN instance for example on PE 1 PE1 display ip vpn instance Total VPN Instances configured 2 VPN Instance Name RD Create time vpn1 100 1 2012 02 13 12 49 08 vpn2 100 2 2012 02 13 12 49 20 Use the ping command on the PEs to verify that the PEs can ping their attached CEs for example on PE 1 PE1 ping vpn instance vpn1 10 1 1 1 Ping 10 1 1 1 10 1 1 1 56 data bytes press CTRL_C to break 5...

Page 256: ...to verify that a BGP peer relationship in Established state has been established between a PE and a CE Details not shown 5 Create an MP IBGP peer relationship between PEs Configure PE 1 PE1 bgp 100 PE1 bgp peer 3 3 3 9 as number 100 PE1 bgp peer 3 3 3 9 connect interface loopback 0 PE1 bgp address family vpnv4 PE1 bgp vpnv4 peer 3 3 3 9 enable PE1 bgp vpnv4 quit PE1 bgp quit Configure PE 2 PE2 bgp...

Page 257: ...hows that PE 1 has a route to the remote CE Output on PE 2 is similar Verify that CEs of the same VPN can ping each other whereas those of different VPNs cannot For example CE 1 can ping CE 3 10 3 1 1 but it cannot ping CE 4 10 4 1 1 Details not shown Configuring MPLS L3VPN over a GRE tunnel Network requirements CE 1 and CE 2 belong to VPN 1 The PEs support MPLS The P router does not support MPLS ...

Page 258: ...PE 1 PE1 system view PE1 mpls lsr id 1 1 1 9 Configure PE 2 PE2 system view PE2 mpls lsr id 2 2 2 9 3 Configure VPN instances on PEs to allow CE access and apply tunnel policies to the VPN instances using a GRE tunnel for VPN packet forwarding Configure PE 1 PE1 tunnel policy gre1 PE1 tunnel policy gre1 select seq gre load balance number 1 PE1 tunnel policy gre1 quit PE1 ip vpn instance vpn1 PE1 v...

Page 259: ...ttached CEs for example on PE 1 PE1 ping vpn instance vpn1 10 1 1 1 Ping 10 1 1 1 10 1 1 1 56 data bytes press CTRL_C to break 56 bytes from 10 1 1 1 icmp_seq 0 ttl 255 time 1 000 ms 56 bytes from 10 1 1 1 icmp_seq 1 ttl 255 time 0 000 ms 56 bytes from 10 1 1 1 icmp_seq 2 ttl 255 time 0 000 ms 56 bytes from 10 1 1 1 icmp_seq 3 ttl 255 time 0 000 ms 56 bytes from 10 1 1 1 icmp_seq 4 ttl 255 time 0 ...

Page 260: ...Details not shown Execute the display bgp peer vpnv4 command on the PEs to verify that a BGP peer relationship in Established state has been established between the PEs Details not shown 6 Configure a GRE tunnel Configure PE 1 PE1 interface tunnel 0 mode gre PE1 Tunnel0 source loopback 0 PE1 Tunnel0 destination 2 2 2 9 PE1 Tunnel0 ip address 20 1 1 1 24 PE1 Tunnel0 mpls enable PE1 Tunnel0 quit Con...

Page 261: ... CEs and Spoke PEs and between Hub CE and Hub PE to exchange VPN routing information Configure OSPF between the Spoke PEs and Hub PE to implement communication between the PEs and configure MP IBGP between them to exchange VPN routing information Figure 72 Network diagram Table 15 Interface and IP address assignment Device Interface IP address Device Interface IP address Spoke CE 1 GE2 0 1 10 1 1 ...

Page 262: ...0 0 network 1 1 1 9 0 0 0 0 Spoke PE1 ospf 1 area 0 0 0 0 quit Spoke PE1 ospf 1 quit Configure Spoke PE 2 Spoke PE2 system view Spoke PE2 interface loopback 0 Spoke PE2 LoopBack0 ip address 3 3 3 9 32 Spoke PE2 LoopBack0 quit Spoke PE2 interface pos 2 2 0 Spoke PE2 Pos2 2 0 ip address 172 2 1 1 24 Spoke PE2 Pos2 2 0 quit Spoke PE2 ospf Spoke PE2 ospf 1 area 0 Spoke PE2 ospf 1 area 0 0 0 0 network ...

Page 263: ... 2 Spoke PE2 mpls lsr id 3 3 3 9 Spoke PE2 mpls ldp Spoke PE2 ldp quit Spoke PE2 interface pos 2 2 0 Spoke PE2 Pos2 2 0 mpls enable Spoke PE2 Pos2 2 0 mpls ldp enable Spoke PE2 Pos2 2 0 quit Configure Hub PE Hub PE mpls lsr id 2 2 2 9 Hub PE mpls ldp Hub PE ldp quit Hub PE interface pos 2 2 0 Hub PE Pos2 2 0 mpls enable Hub PE Pos2 2 0 mpls ldp enable Hub PE Pos2 2 0 quit Hub PE interface pos 2 2 ...

Page 264: ...vpn target 111 1 export extcommunity Hub PE vpn instance vpn1 out quit Hub PE interface gigabitethernet 2 0 1 Hub PE GigabitEthernet2 0 1 ip binding vpn instance vpn1 in Hub PE GigabitEthernet2 0 1 ip address 10 3 1 2 24 Hub PE GigabitEthernet2 0 1 quit Hub PE interface gigabitethernet 2 0 2 Hub PE GigabitEthernet2 0 2 ip binding vpn instance vpn1 out Hub PE GigabitEthernet2 0 2 ip address 10 4 1 ...

Page 265: ...eer 10 2 1 2 as number 100 Spoke CE2 bgp address family ipv4 Spoke CE2 bgp ipv4 peer 10 2 1 2 enable Spoke CE2 bgp ipv4 import route direct Spoke CE2 bgp ipv4 quit Spoke CE2 bgp quit Configure Hub CE Hub CE system view Hub CE bgp 65430 Hub CE bgp peer 10 3 1 2 as number 100 Hub CE bgp peer 10 4 1 2 as number 100 Hub CE bgp address family ipv4 Hub CE bgp ipv4 peer 10 3 1 2 enable Hub CE bgp ipv4 pe...

Page 266: ... display bgp peer ipv4 vpn instance command on the PEs to verify that a BGP peer relationship in Established state has been established between a PE and a CE Details not shown 5 Establish an MP IBGP peer relationship between the Spoke PEs and Hub PE Configure Spoke PE 1 Spoke PE1 bgp 100 Spoke PE1 bgp peer 2 2 2 9 as number 100 Spoke PE1 bgp peer 2 2 2 9 connect interface loopback 0 Spoke PE1 bgp ...

Page 267: ...POS2 2 0 10 3 1 0 24 BGP 255 0 2 2 2 9 POS2 2 0 10 4 1 0 24 BGP 255 0 2 2 2 9 POS2 2 0 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 Verify that Spoke...

Page 268: ...4 4 9 32 GE2 0 1 10 1 1 2 24 GE2 0 1 10 2 1 2 24 POS2 2 0 172 1 1 2 24 POS2 2 0 162 1 1 2 24 ASBR PE1 Loop0 2 2 2 9 32 ASBR PE2 Loop0 3 3 3 9 32 POS2 2 0 172 1 1 1 24 POS2 2 0 162 1 1 1 24 POS2 2 1 192 1 1 1 24 POS2 2 1 192 1 1 2 24 Configuration procedure 1 Configure IGP on the MPLS backbone This example uses OSPF Details not shown Execute the display ospf peer command to verify that each ASBR PE...

Page 269: ...mpls ldp ASBR PE2 ldp quit ASBR PE2 interface pos 2 2 0 ASBR PE2 Pos2 2 0 mpls enable ASBR PE2 Pos2 2 0 mpls ldp enable ASBR PE2 Pos2 2 0 quit Configure basic MPLS on PE 2 and enable MPLS LDP on the interface connected to ASBR PE 2 PE2 system view PE2 mpls lsr id 4 4 4 9 PE2 mpls ldp PE2 ldp quit PE2 interface pos 2 2 0 PE2 Pos2 2 0 mpls enable PE2 Pos2 2 0 mpls ldp enable PE2 Pos2 2 0 quit Execut...

Page 270: ... PE2 GigabitEthernet2 0 1 quit On ASBR PE 1 create a VPN instance and bind the instance to the interface connected to ASBR PE 2 ASBR PE 1 considers ASBR PE 2 to be its CE ASBR PE1 ip vpn instance vpn1 ASBR PE1 vpn vpn1 route distinguisher 100 1 ASBR PE1 vpn vpn1 vpn target 100 1 both ASBR PE1 vpn vpn1 quit ASBR PE1 interface pos 2 2 1 ASBR PE1 Pos2 2 1 ip binding vpn instance vpn1 ASBR PE1 Pos2 2 ...

Page 271: ...number 200 CE2 bgp address family ipv4 unicast CE2 bgp ipv4 peer 10 2 1 2 enable CE2 bgp ipv4 import route direct CE2 bgp ipv4 quit CE2 bgp quit Configure PE 2 PE2 bgp 200 PE2 bgp ip vpn instance vpn1 PE2 bgp vpn1 peer 10 2 1 1 as number 65002 PE2 bgp vpn1 address family ipv4 unicast PE2 bgp ipv4 vpn1 peer 10 2 1 1 enable PE2 bgp ipv4 vpn1 quit PE2 bgp vpn1 quit PE2 bgp quit 5 Establish an MP IBGP...

Page 272: ...SBR PE2 bgp ipv4 vpn1 quit ASBR PE2 bgp vpn1 quit ASBR PE2 bgp peer 4 4 4 9 as number 200 ASBR PE2 bgp peer 4 4 4 9 connect interface loopback 0 ASBR PE2 bgp address family vpnv4 ASBR PE2 bgp vpnv4 peer 4 4 4 9 enable ASBR PE2 bgp vpnv4 peer 4 4 4 9 next hop local ASBR PE2 bgp vpnv4 quit ASBR PE2 bgp quit Configure PE 2 PE2 bgp 200 PE2 bgp peer 3 3 3 9 as number 200 PE2 bgp peer 3 3 3 9 connect in...

Page 273: ...S2 1 0 1 1 1 2 8 S2 1 0 9 1 1 2 8 ASBR PE 1 Loop0 3 3 3 9 32 ASBR PE 2 Loop0 4 4 4 9 32 S2 1 0 1 1 1 1 8 S2 1 0 9 1 1 1 8 S2 1 1 11 0 0 2 8 S2 1 1 11 0 0 1 8 Configuration procedure 1 Configure PE 1 Configure IS IS on PE 1 PE1 system view PE1 isis 1 PE1 isis 1 network entity 10 111 111 111 111 00 PE1 isis 1 quit Configure LSR ID and enable MPLS and LDP PE1 mpls lsr id 2 2 2 9 PE1 mpls ldp PE1 ldp ...

Page 274: ...nstance PE1 interface gigabitethernet 2 0 1 PE1 GigabitEthernet2 0 1 ip binding vpn instance vpn1 PE1 GigabitEthernet2 0 1 ip address 30 0 0 1 8 PE1 GigabitEthernet2 0 1 quit Enable BGP on PE 1 PE1 bgp 100 Configure IBGP peer 3 3 3 9 as a VPNv4 peer PE1 bgp peer 3 3 3 9 as number 100 PE1 bgp peer 3 3 3 9 connect interface loopback 0 PE1 bgp address family vpnv4 PE1 bgp vpnv4 peer 3 3 3 9 enable PE...

Page 275: ...nterface loopback 0 ASBR PE1 bgp peer 11 0 0 1 as number 600 ASBR PE1 bgp peer 11 0 0 1 connect interface serial 2 1 1 Disable route target based filtering of received VPNv4 routes ASBR PE1 bgp address family vpnv4 ASBR PE1 bgp vpnv4 undo policy vpn target Configure both IBGP peer 2 2 2 9 and EBGP peer 11 0 0 1 as VPNv4 peers ASBR PE1 bgp vpnv4 peer 11 0 0 1 enable ASBR PE1 bgp vpnv4 peer 2 2 2 9 ...

Page 276: ... policy vpn target Configure both IBGP peer 5 5 5 9 and EBGP peer 11 0 0 2 as VPNv4 peers ASBR PE2 bgp vpnv4 peer 11 0 0 2 enable ASBR PE2 bgp vpnv4 peer 5 5 5 9 enable ASBR PE2 bgp vpnv4 quit ASBR PE2 bgp quit 4 Configure PE 2 Enable IS IS on PE 2 PE2 system view PE2 isis 1 PE2 isis 1 network entity 10 111 111 111 111 00 PE2 isis 1 quit Configure the LSR ID and enable MPLS and LDP PE2 mpls lsr id...

Page 277: ...configuration Use the following command on PE 1 to verify its connectivity to PE 2 PE1 ping a 30 0 0 1 vpn instance vpn1 20 0 0 1 Ping 20 0 0 1 20 0 0 1 from 30 0 0 1 56 data bytes press CTRL_C to break 56 bytes from 20 0 0 1 icmp_seq 0 ttl 255 time 1 208 ms 56 bytes from 20 0 0 1 icmp_seq 1 ttl 255 time 0 867 ms 56 bytes from 20 0 0 1 icmp_seq 2 ttl 255 time 0 551 ms 56 bytes from 20 0 0 1 icmp_s...

Page 278: ...2 1 1 11 0 0 2 8 S2 1 1 11 0 0 1 8 CE 1 GE2 0 1 30 0 0 2 24 CE 2 GE2 0 1 20 0 0 2 24 Configuration procedure 1 Configure CE 1 Configure an IP address for Gigabitethernet 2 0 1 CE1 system view CE1 interface gigabitethernet 2 0 1 CE1 GigabitEthernet2 0 1 ip address 30 0 0 2 24 CE1 GigabitEthernet2 0 1 quit Establish an EBGP peer relationship with PE 1 and redistribute VPN routes CE1 bgp 65001 CE1 bg...

Page 279: ...mport extcommunity PE1 vpn instance vpn1 vpn target 3 3 export extcommunity PE1 vpn instance vpn1 quit Associate interface Gigabitethernet 2 0 1 with VPN instance vpn1 and specify the IP address for the interface PE1 interface gigabitethernet 2 0 1 PE1 GigabitEthernet2 0 1 ip binding vpn instance vpn1 PE1 GigabitEthernet2 0 1 ip address 30 0 0 1 24 PE1 GigabitEthernet2 0 1 quit Start BGP on PE 1 P...

Page 280: ... 1 0 ip address 1 1 1 1 255 0 0 0 ASBR PE1 Serial2 1 0 isis enable 1 ASBR PE1 Serial2 1 0 mpls enable ASBR PE1 Serial2 1 0 mpls ldp enable ASBR PE1 Serial2 1 0 quit Configure interface Serial 2 1 1 and enable MPLS on it ASBR PE1 interface serial 2 1 1 ASBR PE1 Serial2 1 1 ip address 11 0 0 2 255 0 0 0 ASBR PE1 Serial2 1 1 mpls enable ASBR PE1 Serial2 1 1 quit Configure interface Loopback 0 and sta...

Page 281: ...nd to receive labeled routes from the peer ASBR PE1 bgp ipv4 peer 11 0 0 1 label route capability ASBR PE1 bgp ipv4 quit ASBR PE1 bgp quit 4 Configure ASBR PE 2 Enable IS IS on ASBR PE 2 ASBR PE2 system view ASBR PE2 isis 1 ASBR PE2 isis 1 network entity 10 222 222 222 222 00 ASBR PE2 isis 1 quit Configure the LSR ID and enable MPLS and LDP ASBR PE2 mpls lsr id 4 4 4 9 ASBR PE2 mpls ldp ASBR PE2 l...

Page 282: ...oute policy policy2 export Redistribute routes from IS IS process 1 ASBR PE2 bgp ipv4 import route isis 1 ASBR PE2 bgp ipv4 quit Apply the routing policy policy1 to routes advertised to EBGP peer 11 0 0 2 ASBR PE2 bgp peer 11 0 0 2 as number 100 ASBR PE2 bgp address family ipv4 unicast ASBR PE2 bgp ipv4 peer 11 0 0 2 enable ASBR PE2 bgp ipv4 peer 11 0 0 2 route policy policy1 export Enable the cap...

Page 283: ...rtise labeled routes to IBGP peer 4 4 4 9 and to receive labeled routes from the peer PE2 bgp peer 4 4 4 9 as number 600 PE2 bgp peer 4 4 4 9 connect interface loopback 0 PE2 bgp address family ipv4 unicast PE2 bgp ipv4 peer 4 4 4 9 enable PE2 bgp ipv4 peer 4 4 4 9 label route capability PE2 bgp ipv4 quit Configure the maximum hop count from PE 2 to EBGP peer 2 2 2 9 as 10 PE2 bgp peer 2 2 2 9 as ...

Page 284: ... carrier s carrier for the scenario shown in Figure 76 In this scenario PE 1 and PE 2 are the provider carrier s PE routers They provide VPN services for the customer carrier CE 1 and CE 2 are the customer carrier s routers They are connected to the provider carrier s backbone as CE routers PE 3 and PE 4 are the customer carrier s PE routers They provide MPLS L3VPN services for the end customers C...

Page 285: ...2 2 1 11 1 1 1 24 POS2 2 1 20 1 1 1 24 PE 1 Loop0 3 3 3 9 32 PE 2 Loop0 4 4 4 9 32 POS2 2 0 11 1 1 2 24 POS2 2 0 30 1 1 2 24 POS2 2 1 30 1 1 1 24 POS2 2 1 21 1 1 1 24 Configuration procedure 1 Configure MPLS L3VPN on the provider carrier backbone Enable IS IS as the IGP enable LDP between PE 1 and PE 2 and establish an MP IBGP peer relationship between the PEs Configure PE 1 PE1 system view PE1 in...

Page 286: ...cute the display bgp peer vpnv4 command to verify that a BGP peer relationship in Established state has been established between PE 1 and PE 2 Details not shown Execute the display isis peer command to verify that the IS IS neighbor relationship has been established between PE 1 and PE 2 Details not shown 2 Configure the customer carrier network Enable IS IS as the IGP and enable LDP between PE 3 ...

Page 287: ...way that PE 3 and CE 1 are configured Details not shown 3 Allow CEs of the customer carrier to access PEs of the provider carrier and redistribute IS IS routes to BGP and BGP routes to IS IS on the PEs Configure PE 1 PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 200 1 PE1 vpn instance vpn1 vpn target 1 1 PE1 vpn instance vpn1 quit PE1 mpls ldp PE1 ldp vpn instance vpn1 PE1 ldp...

Page 288: ...ier Configure CE 3 CE3 system view CE3 interface gigabitethernet 2 0 1 CE3 GigabitEthernet2 0 1 ip address 100 1 1 1 24 CE3 GigabitEthernet2 0 1 quit CE3 bgp 65410 CE3 bgp peer 100 1 1 2 as number 100 CE3 bgp address family ipv4 unicast CE3 bgp ipv4 peer 100 1 1 2 enable CE3 bgp ipv4 import route direct CE3 bgp ipv4 quit CE3 bgp quit Configure PE 3 PE3 ip vpn instance vpn1 PE3 vpn instance vpn1 ro...

Page 289: ...ask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 3 3 3 9 32 Direct 0 0 127 0 0 1 InLoop0 4 4 4 9 32 IS_L1 15 10 30 1 1 2 POS2 2 1 30 1 1 0 24 Direct 0 0 30 1 1 1 POS2 2 1 30 1 1 0 32 Direct 0 0 30 1 1 1 POS2 2 1 30 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 30 1 1 255 32 Direct 0 0 30 1 1 1 POS2 2 1 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 I...

Page 290: ...ion Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 IS_L1 15 10 10 1 1 1 POS2 2 0 2 2 2 9 32 Direct 0 0 127 0 0 1 InLoop0 5 5 5 9 32 IS_L2 15 74 11 1 1 2 POS2 2 1 6 6 6 9 32 IS_L2 15 74 11 1 1 2 POS2 2 1 10 1 1 0 24 Direct 0 0 10 1 1 2 POS2 2 0 10 1 1 0 32 Direct 0 0 10 1 1 2 POS2 2 0 10 1 1 2 32 Direct 0 0 127 0 0 1 InLoop0 10 1 1 255 32 Direct 0 0 10 1 1 ...

Page 291: ...LL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 Verify that the VPN routing table contains the route to the remote VPN customer PE3 display ip routing table vpn instance vpn1 Destinations 13 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 100 1 1 0 24 Direct 0 0 100 1 1 2 GE2 0 1 100 1 1 0 32 Direct 0 0 1...

Page 292: ...fferent ASs The key to carrier s carrier deployment is to configure exchange of two kinds of routes Exchange of the customer carrier s internal routes on the provider carrier s backbone Exchange of the end customers VPN routes between PE 3 and PE 4 the PEs of the customer carrier In this process an MP EBGP peer relationship must be established between PE 3 and PE 4 Figure 77 Network diagram Table ...

Page 293: ... Pos2 2 1 mpls ldp enable PE1 Pos2 2 1 mpls ldp transport address interface PE1 Pos2 2 1 quit PE1 bgp 200 PE1 bgp peer 4 4 4 9 as number 200 PE1 bgp peer 4 4 4 9 connect interface loopback 0 PE1 bgp address family vpnv4 PE1 bgp vpnv4 peer 4 4 4 9 enable PE1 bgp vpnv4 quit PE1 bgp quit Configure PE 2 in the same way that PE 1 is configured Details not shown On PE 1 or PE 2 execute the following com...

Page 294: ...oopback 0 CE1 LoopBack0 ip address 2 2 2 9 32 CE1 LoopBack0 quit CE1 mpls lsr id 2 2 2 9 CE1 mpls ldp CE1 ldp import bgp CE1 ldp quit CE1 isis 2 CE1 isis 2 network entity 10 0000 0000 0000 0002 00 CE1 isis 2 address family ipv4 CE1 isis 2 ipv4 import route bgp CE1 isis 2 ipv4 quit CE1 isis 2 quit CE1 interface loopback 0 CE1 LoopBack0 isis enable 2 CE1 LoopBack0 quit CE1 interface pos 2 2 0 CE1 Po...

Page 295: ...p quit PE1 route policy csc permit node 0 PE1 route policy csc 0 apply mpls label PE1 route policy csc 0 quit Configure CE 1 CE1 interface pos 2 2 1 CE1 Pos2 2 1 ip address 11 1 1 1 24 CE1 Pos2 2 1 mpls enable CE1 Pos2 2 1 quit CE1 bgp 100 CE1 bgp peer 11 1 1 2 as number 200 CE1 bgp address family ipv4 unicast CE1 bgp ipv4 peer 11 1 1 2 enable CE1 bgp ipv4 peer 11 1 1 2 label route capability PE1 ...

Page 296: ...ddress family ipv4 unicast PE3 bgp ipv4 vpn1 peer 100 1 1 1 enable PE3 bgp ipv4 vpn1 quit PE3 bgp vpn1 quit PE3 bgp quit Configure PE 4 and CE 4 in the same way that PE 3 and CE 3 are configured Details not shown 5 Configure an MP EBGP peer relationship between the PEs of the customer carrier to exchange the VPN routes of the end customers Configure PE 3 PE3 bgp 100 PE3 bgp peer 6 6 6 9 as number ...

Page 297: ...nations 14 Routes 14 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 BGP 255 10 11 1 1 1 POS2 2 0 6 6 6 9 32 BGP 255 10 4 4 4 9 POS2 2 1 11 1 1 0 24 Direct 0 0 11 1 1 2 POS2 2 0 11 1 1 0 32 Direct 0 0 11 1 1 2 POS2 2 0 11 1 1 2 32 Direct 0 0 127 0 0 1 InLoop0 11 1 1 255 32 Direct 0 0 11 1 1 2 POS2 2 0 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127...

Page 298: ...work routing table contains the internal routes of the customer carrier network PE3 display ip routing table Destinations 15 Routes 15 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 Direct 0 0 127 0 0 1 InLoop0 2 2 2 9 32 IS_L1 15 10 10 1 1 2 POS2 2 1 6 6 6 9 32 IS_L2 15 74 10 1 1 2 POS2 2 1 10 1 1 0 24 Direct 0 0 10 1 1 1 POS2 2 1 10 1 1 0 32 ...

Page 299: ... devices on the service provider backbone Both of them support the nested VPN function CE 1 and CE 2 are provider CEs connected to the service provider backbone Both of them support VPNv4 routes PE 3 and PE 4 are PE devices of the customer VPN Both of them support MPLS L3VPN CE 3 through CE 6 are CE devices of sub VPNs in the customer VPN The key of nested VPN configuration is to understand the pr...

Page 300: ...130 1 1 2 24 POS2 2 1 10 1 1 1 24 POS2 2 1 20 1 1 2 24 Configuration procedure 1 Configure MPLS L3VPN on the service provider backbone Enable IS IS enable LDP and establish an MP IBGP peer relationship between PE 1 and PE 2 Configure PE 1 PE1 system view PE1 interface loopback 0 PE1 LoopBack0 ip address 3 3 3 9 32 PE1 LoopBack0 quit PE1 mpls lsr id 3 3 3 9 PE1 mpls ldp PE1 ldp quit PE1 isis 1 PE 1...

Page 301: ...erational state has been established between PE 1 and PE 2 Details not shown Execute the display bgp peer vpnv4 command to verify that a BGP peer relationship in Established state has been established between PE 1 and PE 2 Details not shown Execute the display isis peer command to verify that the IS IS neighbor relationship has been established between PE 1 and PE 2 Details not shown 2 Configure t...

Page 302: ... and CE 1 Configure PE 4 and CE 2 in the same way that PE 3 and CE 1 are configured Details not shown 3 Connect CE 1 and CE 2 to service provider PEs Configure PE 1 PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 200 1 PE1 vpn instance vpn1 vpn target 1 1 PE1 vpn instance vpn1 quit PE1 interface pos 2 2 0 PE1 Pos2 2 0 ip binding vpn instance vpn1 PE1 Pos2 2 0 ip address 11 1 1 2...

Page 303: ... gigabitethernet 2 0 1 CE5 GigabitEthernet2 0 1 ip address 110 1 1 1 24 CE5 GigabitEthernet2 0 1 quit CE5 bgp 65411 CE5 bgp peer 110 1 1 2 as number 200 CE5 bgp address family ipv4 unicast CE5 bgp ipv4 peer 110 1 1 2 enable CE5 bgp ipv4 import route direct CE5 bgp ipv4 quit CE5 bgp quit Configure PE 3 PE3 ip vpn instance SUB_VPN1 PE3 vpn instance SUB_VPN1 route distinguisher 100 1 PE3 vpn instance...

Page 304: ... 1 enable nested VPN and enable VPNv4 route exchange with CE 1 PE1 bgp 100 PE1 bgp address family vpnv4 PE1 bgp vpnv4 nesting vpn PE1 bgp vpnv4 quit PE1 bgp ip vpn instance vpn1 PE1 bgp vpn1 address family vpnv4 PE1 bgp vpnv4 vpn1 peer 11 1 1 1 enable PE1 bgp vpnv4 vpn1 quit PE1 bgp vpn1 quit PE1 bgp quit On CE 1 enable VPNv4 route exchange with PE 1 CE1 bgp 200 CE1 bgp address family vpnv4 CE1 bg...

Page 305: ... table contains only routes on the service provider network PE1 display ip routing table Destinations 14 Routes 14 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 3 3 3 9 32 Direct 0 0 127 0 0 1 InLoop0 4 4 4 9 32 IS_L1 15 10 30 1 1 2 POS2 2 1 30 1 1 0 24 Direct 0 0 30 1 1 1 POS2 2 1 30 1 1 0 32 Direct 0 0 30 1 1 1 POS2 2 1 30 1 1 1 32 Direct 0 0 127 0 0 1...

Page 306: ... 127 0 0 1 InLoop0 2 Display the VPNv4 routing table on the provider CEs for example on CE 1 Verify that the VPNv4 routing table on the customer VPN contains internal sub VPN routes CE1 display bgp routing table vpnv4 BGP local router ID is 2 2 2 9 Status codes valid best d dampened h history s suppressed S stale i internal e external Origin i IGP e EGP incomplete Total number of routes from all P...

Page 307: ... 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 4 Display the routing table on the CEs of sub VPNs in the customer VPN for example on CE 3 and CE 5 Verify that the routing table contains the route to the remote sub VPN on CE 3 CE3 display ip routing table Destinations 13 Rout...

Page 308: ...0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 5 Verify that CE 3 and CE 4 can ping each other Details not shown 6 Verify that CE 5 and CE 6 can ping each other Details not shown 7 Verify that CE 3 and CE 6 cannot ping each other Details not shown Configuring multirole host Network requirements Configure the multirole host feature to allow Hos...

Page 309: ... PE1 Serial2 1 1 ip binding vpn instance vpn1 PE1 Serial2 1 1 ip address 1 1 1 1 255 255 255 0 PE1 Serial2 1 1 quit Configure a static route for VPN 2 to reach Host A and redistribute the route to BGP This configuration ensures that packets from VPN 2 to Host A can be forwarded through the correct route in the routing table of VPN instance vpn1 PE1 ip route static vpn instance vpn2 100 1 1 0 24 vp...

Page 310: ...ith each other and forbidding CE 2 and CE 4 in VPN 2 from communicating with each other Figure 80 Network diagram Table 22 Interface and IP address assignment Device Interface IP address Device Interface IP address CE 1 GE2 0 1 10 2 1 1 24 CE 3 GE2 0 1 10 1 1 1 24 CE 2 GE2 0 1 10 4 1 1 24 CE 4 GE2 0 1 10 3 1 1 24 UPE 1 Loop0 1 1 1 9 32 UPE 2 Loop0 4 4 4 9 32 GE2 0 1 10 2 1 2 24 GE2 0 1 172 2 1 1 2...

Page 311: ...E 1 UPE1 ip vpn instance vpn1 UPE1 vpn instance vpn1 route distinguisher 100 1 UPE1 vpn instance vpn1 vpn target 100 1 both UPE1 vpn instance vpn1 quit UPE1 ip vpn instance vpn2 UPE1 vpn instance vpn2 route distinguisher 100 2 UPE1 vpn instance vpn2 vpn target 100 2 both UPE1 vpn instance vpn2 quit UPE1 interface gigabitethernet 2 0 1 UPE1 GigabitEthernet2 0 1 ip binding vpn instance vpn1 UPE1 Gig...

Page 312: ...er 10 2 1 2 as number 100 CE1 bgp address family ipv4 unicast CE1 bgp ipv4 peer 10 2 1 2 enable CE1 bgp ipv4 import route direct CE1 bgp ipv4 quit CE1 bgp quit 3 Configure CE 2 CE2 system view CE2 interface gigabitethernet 2 0 1 CE2 GigabitEthernet2 0 1 ip address 10 4 1 1 255 255 255 0 CE2 GigabitEthernet2 0 1 quit CE2 bgp 65420 CE2 bgp peer 10 4 1 2 as number 100 CE2 bgp address family ipv4 unic...

Page 313: ...n instance vpn1 UPE2 GigabitEthernet2 0 2 ip address 10 1 1 2 24 UPE2 GigabitEthernet2 0 2 quit UPE2 interface gigabitethernet 2 0 3 UPE2 GigabitEthernet2 0 3 ip binding vpn instance vpn2 UPE2 GigabitEthernet2 0 3 ip address 10 3 1 2 24 UPE2 GigabitEthernet2 0 3 quit Establish an MP IBGP peer relationship with SPE 2 UPE2 bgp 100 UPE2 bgp peer 3 3 3 9 as number 100 UPE2 bgp peer 3 3 3 9 connect int...

Page 314: ... 3 1 2 enable CE4 bgp ipv4 import route direct CE4 bgp ipv4 quit CE4 bgp quit 7 Configure SPE 1 Configure basic MPLS and MPLS LDP to establish LDP LSPs SPE1 system view SPE1 interface loopback 0 SPE1 LoopBack0 ip address 2 2 2 9 32 SPE1 LoopBack0 quit SPE1 mpls lsr id 2 2 2 9 SPE1 mpls ldp SPE1 ldp quit SPE1 interface gigabitethernet 2 0 1 SPE1 GigabitEthernet2 0 1 ip address 172 1 1 2 24 SPE1 Gig...

Page 315: ...er 3 3 3 9 enable SPE1 bgp vpnv4 peer 1 1 1 9 enable SPE1 bgp vpnv4 peer 1 1 1 9 upe SPE1 bgp vpnv4 peer 1 1 1 9 next hop local SPE1 bgp vpnv4 quit Create BGP VPN instances for VPN instances vpn1 and vpn2 so the VPNv4 routes learned according to the RT attributes can be added into the BGP routing tables of the corresponding VPN instances SPE1 bgp ip vpn instance vpn1 SPE1 bgp vpn1 quit SPE1 bgp ip...

Page 316: ...e distinguisher 600 1 SPE2 vpn instance vpn1 vpn target 100 1 both SPE2 vpn instance vpn1 quit SPE2 ip vpn instance vpn2 SPE2 vpn instance vpn2 route distinguisher 800 1 SPE2 vpn instance vpn2 vpn target 100 2 both SPE2 vpn instance vpn2 quit Establish MP IBGP peer relationships with SPE 1 and UPE 2 and specify UPE 2 as a UPE SPE2 bgp 100 SPE2 bgp peer 4 4 4 9 as number 100 SPE2 bgp peer 4 4 4 9 c...

Page 317: ...interface routes and cannot ping each other Details not shown Configuring an OSPF sham link Network requirements As shown in Figure 81 CE 1 and CE 2 belong to VPN 1 Configure an OSPF sham link between PE 1 and PE 2 so traffic between CE 1 and CE 2 is forwarded through the MPLS backbone instead of the backdoor link Figure 81 Network diagram Table 23 Interface and IP address assignment Device Interf...

Page 318: ... 1 1 PE1 Serial2 1 1 ip address 10 1 1 1 24 PE1 Serial2 1 1 mpls enable PE1 Serial2 1 1 mpls ldp enable PE1 Serial2 1 1 quit Configure PE 1 to take PE 2 as an MP IBGP peer PE1 bgp 100 PE1 bgp peer 2 2 2 9 as number 100 PE1 bgp peer 2 2 2 9 connect interface loopback 0 PE1 bgp address family vpnv4 PE1 bgp vpnv4 peer 2 2 2 9 enable PE1 bgp vpnv4 quit PE1 bgp quit Configure OSPF on PE 1 PE1 ospf 1 PE...

Page 319: ...1 interface gigabitethernet 2 0 1 PE1 GigabitEthernet2 0 1 ip binding vpn instance vpn1 PE1 GigabitEthernet2 0 1 ip address 100 1 1 2 24 PE1 GigabitEthernet2 0 1 quit PE1 ospf 100 vpn instance vpn1 PE1 ospf 100 domain id 10 PE1 ospf 100 area 1 PE1 ospf 100 area 0 0 0 1 network 100 1 1 0 0 0 0 255 PE1 ospf 100 area 0 0 0 1 quit PE1 ospf 100 quit PE1 bgp 100 PE1 bgp ip vpn instance vpn1 PE1 bgp vpn1...

Page 320: ...quit PE1 ospf 100 PE1 ospf 100 area 1 PE1 ospf 100 area 0 0 0 1 sham link 3 3 3 3 5 5 5 5 PE1 ospf 100 area 0 0 0 1 quit PE1 ospf 100 quit Configure PE 2 PE2 interface loopback 1 PE2 LoopBack1 ip binding vpn instance vpn1 PE2 LoopBack1 ip address 5 5 5 5 32 PE2 LoopBack1 quit PE2 ospf 100 PE2 ospf 100 area 1 PE2 ospf 100 area 0 0 0 1 sham link 5 5 5 5 3 3 3 3 PE2 ospf 100 area 0 0 0 1 quit PE2 osp...

Page 321: ... sham link area 1 OSPF Process 100 with Router ID 100 1 1 2 Sham link 3 3 3 3 5 5 5 5 Neighbor ID 120 1 1 2 State Full Area 0 0 0 1 Cost 1 State P 2 P Type Sham Timers Hello 10 Dead 40 Retransmit 5 Transmit Delay 1 Request list 0 Retransmit list 0 Configuring MCE Network requirements As shown in Figure 82 VPN 2 runs RIP Configure the MCE device to separate routes from different VPNs and to adverti...

Page 322: ...vpn1 quit MCE ip vpn instance vpn2 MCE vpn instance vpn2 route distinguisher 20 1 MCE vpn instance vpn2 vpn target 20 1 MCE vpn instance vpn2 quit Bind interface Gigabitethernet 2 0 1 to VPN instance vpn1 and configure an IP address for the interface MCE interface gigabitethernet 2 0 1 MCE GigabitEthernet2 0 1 ip binding vpn instance vpn1 MCE GigabitEthernet2 0 1 ip address 10 214 10 3 24 CE VPN 1...

Page 323: ...1 24 to the interface connected to VPN 1 Details not shown On VR 1 configure a default route with the next hop as 10 214 10 3 VR1 system view VR1 ip route static 0 0 0 0 0 0 0 0 10 214 10 3 On the MCE configure a static route to 192 168 0 0 24 specify the next hop as 10 214 10 2 and bind the static route to VPN instance vpn1 MCE ip route static vpn instance vpn1 192 168 0 0 24 10 214 10 2 Run RIP ...

Page 324: ...InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 192 168 10 0 24 RIP 100 1 10 214 20 2 GE2 0 2 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 The output shows that the MCE has learned the private route of VPN 2 through RIP MCE maintains the routes of VPN 1 and those of VPN 2...

Page 325: ...face Loopback 0 as 101 101 10 1 for the MCE and as 100 100 10 1 for PE 1 Specify the loopback interface address as the router ID for the MCE and PE 1 Details not shown Enable OSPF process 10 on the MCE and bind the process to VPN instance vpn1 MCE ospf 10 router id 101 101 10 1 vpn instance vpn1 Disable OSPF routing loop detection for the VPN instance MCE ospf 10 vpn instance capability simple Set...

Page 326: ...3 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 30 1 1 0 24 Direct 0 0 30 1 1 2 GE2 0 1 2 30 1 1 0 32 Direct 0 0 30 1 1 2 GE2 0 1 2 30 1 1 2 32 Direct 0 0 127 0 0 1 InLoop0 30 1 1 255 32 Direct 0 0 30 1 1 2 GE2 0 1 2 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 ...

Page 327: ...ure basic MPLS and MPLS LDP on the MPLS backbone to establish LDP LSPs Establish MP IBGP peer relationship between the PEs to advertise VPN IPv4 routes Configure the VPN instance of VPN 1 on PE 2 to allow CE 2 to access the network Configure the VPN instance of VPN 1 on PE 1 to allow CE 1 to access the network Configure BGP as the PE CE routing protocol and redistribute routes of CEs into PEs For ...

Page 328: ...on the PEs The output shows the route to the VPN behind the peer CE This example uses PE 2 PE2 display ip routing table vpn instance vpn1 Destinations 15 Routes 15 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 10 1 1 0 24 BGP 255 0 1 1 1 9 GE2 0 2 10 2 1 0 24 Direct 0 0 10 2 1 2 GE2 0 1 10 2 1 0 32 Direct 0 0 10 2 1 2 GE2 0 1 10 2 1 2 32 Direct 0 0 127 0...

Page 329: ...on PE 2 PE2 system view PE2 bgp 100 PE2 bgp ip vpn instance vpn1 PE2 bgp vpn1 peer 10 2 1 1 substitute as PE2 bgp vpn1 address family ipv4 unicast PE2 bgp ipv4 vpn1 peer 10 2 1 1 enable PE2 bgp ipv4 vpn1 quit PE2 bgp vpn1 quit PE2 bgp quit Verifying the configuration The output shows that among the routes advertised by PE 2 to CE 2 the AS_PATH of 100 1 1 0 24 has changed from 100 600 to 100 100 Ju...

Page 330: ...27 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 200 1 1 0 24 Direct 0 0 200 1 1 1 GE2 0 2 200 1 1 0 32 Direct 0 0 200 1 1 1 GE2 0 2 200 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 200 1 1 255 32 Direct 0 0 200 1 1 1 GE2 0 2 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 After you also configure BGP AS substitution on PE 1 verify ...

Page 331: ...tes of the loopback interfaces from each other Configure basic MPLS and MPLS LDP on the MPLS backbone to establish LDP LSPs Establish MP IBGP peer relationship between the PEs to advertise VPN IPv4 routes Configure the VPN instance of VPN 1 on PE 1 to allow CE 1 to access the network Configure the VPN instance of VPN 1 on PE 2 to allow CE 2 to access the network Configure the VPN instance of VPN 1...

Page 332: ... 2 0 100 100 e 200 1 1 1 32 10 2 1 2 0 100 100 3 Configure BGP SoO attribute On PE 1 configure the SoO attribute as 1 100 for CE 1 PE1 system view PE1 bgp 100 PE1 bgp ip vpn instance vpn1 PE1 bgp vpn1 address family ipv4 PE1 bgp ipv4 vpn1 peer 10 1 1 1 soo 1 100 On PE 2 configure the SoO attribute as 1 100 for CE 2 PE2 system view PE2 bgp 100 PE2 bgp ip vpn instance vpn1 PE2 bgp vpn1 address famil...

Page 333: ...tween CEs and PEs to exchange VPN routes Configure OSPF to ensure connectivity between PEs and configure MP IBGP to exchange VPNv4 routing information between PEs Configure MPLS L3VPN FRR on PE 1 to achieve the following purposes When the link PE 1 PE 2 operates correctly traffic from CE 1 to CE 2 goes through the path CE 1 PE 1 PE 2 CE 2 When BFD detects that the LSP between PE 1 and PE 2 fails t...

Page 334: ...y frr permit node 10 PE1 route policy if match ip address prefix list abc PE1 route policy apply fast reroute backup nexthop 3 3 3 3 PE1 route policy quit Configure FRR for VPN instance vpn1 to reference routing policy frr PE1 bgp 100 PE1 bgp ip vpn instance vpn1 PE1 bgp vpn1 address family ipv4 unicast PE1 bgp ipv4 vpn1 fast reroute route policy frr PE1 bgp ipv4 vpn1 quit PE1 bgp vpn1 quit Specif...

Page 335: ...cIndex N A Connector N A Configuring MPLS L3VPN FRR through VPNv4 route backup for an IPv4 route Network requirements CE 1 and CE 2 belong to VPN 1 Configure EBGP between CEs and PEs to exchange VPN routes Configure OSPF to ensure connectivity between PEs and configure MP IBGP to exchange VPNv4 routing information between PEs Configure MPLS L3VPN FRR on PE 2 to achieve the following purposes When ...

Page 336: ...icy frr and specify the backup next hop as 3 3 3 3 for the route to 4 4 4 4 32 PE2 ip prefix list abc index 10 permit 4 4 4 4 32 PE2 route policy frr permit node 10 PE2 route policy if match ip address prefix list abc PE2 route policy apply fast reroute backup nexthop 3 3 3 3 PE2 route policy quit Use echo mode BFD to detect the primary route connectivity PE2 bgp 100 PE2 bgp primary path detect bf...

Page 337: ...afficIndex N A Connector N A Configuring MPLS L3VPN FRR through IPv4 route backup for a VPNv4 route Network requirements CE 1 and CE 2 belong to VPN 1 Configure EBGP between CEs and PEs to exchange VPN routes Configure OSPF to ensure connectivity between PEs and configure MP IBGP to exchange VPNv4 routing information between PEs Configure MPLS L3VPN FRR on PE 2 to achieve the following purposes Wh...

Page 338: ...SP to 3 3 3 3 32 PE2 system view PE2 mpls bfd enable PE2 mpls bfd 3 3 3 3 32 Create routing policy frr and specify the backup next hop as 10 1 1 1 for the route to 4 4 4 4 32 PE2 ip prefix list abc index 10 permit 4 4 4 4 32 PE2 route policy frr permit node 10 PE2 route policy if match ip address prefix list abc PE2 route policy apply fast reroute backup nexthop 10 1 1 1 PE2 route policy quit Conf...

Page 339: ... 4 4 4 32 Protocol BGP Process ID 0 SubProtID 0x1 Age 00h00m04s Cost 0 Preference 255 IpPre N A QosLocalID N A Tag 0 State Active Adv OrigTblID 0x0 OrigVrf default vrf TableID 0x102 OrigAs 300 NibID 0x15000004 LastAs 300 AttrID 0x1 Neighbor 3 3 3 3 Flags 0x110060 OrigNextHop 3 3 3 3 Label 1275 RealNextHop 172 3 1 3 BkLabel NULL BkNextHop 10 1 1 1 Tunnel ID 0x409 Interface GE2 0 3 BkTunnel ID Inval...

Page 340: ...run IPv6 and the PE P interface of a PE runs IPv4 Figure 88 Network diagram for the IPv6 MPLS L3VPN model IPv6 MPLS L3VPN packet forwarding Figure 89 IPv6 MPLS L3VPN packet forwarding diagram As shown in Figure 89 the IPv6 MPLS L3VPN packet forwarding procedure is as follows 1 The PC at Site 1 sends an IPv6 packet destined for 2001 2 1 the PC at Site 2 CE 1 transmits the packet to PE 1 VPN 1 CE IP...

Page 341: ... the standard IPv6 routes from the CE the ingress PE performs the following operations a Adds RDs and route targets to create VPN IPv6 routes b Saves the routes to the routing table of the VPN instance created for the CE c Assigns VPN labels for the routes d Advertises the VPN IPv6 routes to the egress PE through MP BGP The egress PE performs the following operations a Compares the export target a...

Page 342: ... basic IPv6 MPLS L3VPN Tasks at a glance Configuring VPN instances 1 Required Creating a VPN instance 2 Required Associating a VPN instance with an interface 3 Optional Configuring route related attributes for a VPN instance Required Configuring routing between a PE and a CE Required Configuring routing between PEs Optional Configuring BGP VPNv6 route control Before configuring basic IPv6 MPLS L3V...

Page 343: ... instance The description should contain the VPN instance s related information such as its relationship with a certain VPN 5 Optional Configure an ID for the VPN instance vpn id vpn id By default no ID is configured for a VPN instance 6 Optional Configure an SNMP context for the VPN instance snmp context name context name By default no SNMP context is configured Table 29 Maximum number of VPN ins...

Page 344: ...rget vpn target 1 8 both export extcommunity import extcommunity By default no route targets are configured 4 Set the maximum number of active routes supported routing table limit number warn threshold simply alert The default varies by device model For the default values see MPLS Command Reference Setting the maximum number of active routes for a VPN instance can prevent the PE from storing too m...

Page 345: ...e tag tag value description description text By default no IPv6 static route is configured for a VPN instance Perform this configuration on the PE On the CE configure a common IPv6 static route For more information about IPv6 static routing see Layer 3 IP Routing Configuration Guide Configuring RIPng between a PE and a CE A RIPng process belongs to the public network or a single VPN instance If yo...

Page 346: ...iguration on the PE When you redistribute OSPFv3 routes into BGP BGP adds the primary domain ID to the redistributed BGP VPNv6 routes as a BGP extended community attribute You can configure the same domain ID for different OSPFv3 processes All OSPF processes of the same VPN must be configured with the same OSPF domain ID to ensure correct route advertisement 5 Optional Configure the type code of a...

Page 347: ...on Perform this configuration on the PE 10 Return to system view quit N A 11 Enter interface view interface interface type interface number N A 12 Enable OSPFv3 on the interface ospfv3 process id area area id instance instance id By default OSPFv3 is disabled on an interface Perform this configuration on the PE Configuring IPv6 IS IS between a PE and a CE An IPv6 IS IS process belongs to the publi...

Page 348: ...P VPN IPv6 unicast address family is not created Configuration commands in BGP VPN IPv6 unicast address family view are the same as those in BGP IPv6 unicast address family view For more information see Layer 3 IP Routing Configuration Guide 6 Enable IPv6 unicast route exchange with the specified peer or peer group peer group name ip address prefix length enable By default BGP does not exchange IP...

Page 349: ...CE Configuring IBGP between a PE and a CE Use IBGP between PE and CE only in a basic IPv6 MPLS L3VPN network In networks such as inter AS VPN and carrier s carrier you cannot configure IBGP between PE and CE 1 Configure the PE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Enter BGP VPN instance view ip vpn instance vpn instance name Configuration com...

Page 350: ... If multiple RRs exist in a cluster use this command to configure the same cluster ID for all RRs in the cluster to avoid routing loops 2 Configure the CE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Configure the PE as an IBGP peer peer group name ipv6 address prefix length as number as number By default no BGP peer is created 4 Create the BGP IPv6...

Page 351: ... Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Enter BGP VPNv6 address family view address family vpnv6 N A 4 Optional Configure filtering of advertised routes filter policy acl6 number prefix list ipv6 prefix name export protocol process id By default the PE does not filter advertised routes 5 Optional Configure filtering of received routes filter policy acl6 number prefi...

Page 352: ...he cluster ID If more than one RR exists in a cluster use this command to configure the same cluster ID for all RRs in the cluster to avoid routing loops 16 Configure filtering of reflected routes rr filter extended community number By default an RR does not filter reflected routes Only IBGP routes whose extended community attribute matches the specified community list are reflected By configuring...

Page 353: ...n PEs in different ASs The PEs and ASBRs in an AS must be able to exchange labeled routes To configure a PE for inter AS IPv6 VPN option C Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Configure the ASBR in the same AS as an IBGP peer peer group name ip address mask length as number as number By default no BGP peer is configured 4 Configure the PE in...

Page 354: ...plying IPv6 PBR Step Command Remarks 1 Enter system view system view N A 2 Create an IPv6 policy node and enter IPv6 policy node view ipv6 policy based route policy name deny permit node node number By default no IPv6 policy node is created 3 Configure match criteria for the node See Layer 3 IP Routing Configuration Guide By default no match criterion is configured All packets match the criteria f...

Page 355: ...asic IPv6 MPLS L3VPN OSPFv3 is used between PE and CE Configuring a loopback interface Step Command Remarks 1 Enter system view system view N A 2 Create a loopback interface and enter loopback interface view interface loopback interface number By default no loopback interface is created 3 Associate the loopback interface with a VPN instance ip binding vpn instance vpn instance name By default the ...

Page 356: ...the following tasks Disable routing loop detection to avoid route loss during route calculation Disable route redistribution between routing protocols to save system resources Before you configure routing on an MCE perform the following tasks On the MCE configure VPN instances and bind the VPN instances to the interfaces connected to the VPN sites and those connected to the PE Configure the link l...

Page 357: ...ut RIPng see Layer 3 IP Routing Configuration Guide To configure RIPng between an MCE and a VPN site Step Command Remarks 1 Enter system view system view N A 2 Create a RIPng process for a VPN instance and enter RIPng view ripng process id vpn instance vpn instance name Perform this configuration on the MCE On a VPN site configure normal RIPng 3 Redistribute remote site routes advertised by the PE...

Page 358: ...m view quit N A 7 Enter interface view interface interface type interface number N A 8 Enable OSPFv3 on the interface ospfv3 process id area area id instance instance id By default OSPFv3 is disabled on an interface Configuring IPv6 IS IS between an MCE and a VPN site An IPv6 IS IS process belongs to the public network or a single IPv6 VPN instance If you create an IPv6 IS IS process without bindi...

Page 359: ...u can also configure the filtering of received and advertised routes 1 Configure the MCE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Enter BGP VPN instance view ip vpn instance vpn instance name N A 4 Specify an IPv6 BGP peer in an AS peer group name ipv6 address prefix length as number as number By default no BGP peer is configured 5 Enter BGP VPN...

Page 360: ... on the MCE and redistribute the IGP routes of each VPN instance on the VPN site 1 Configure the MCE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Enter BGP VPN instance view ip vpn instance vpn instance name N A 4 Configure an IBGP peer peer group name ipv6 address prefix length as number as number By default no BGP peer or peer group is configured ...

Page 361: ... family view address family ipv6 unicast N A 5 Enable BGP to exchange IPv6 unicast routes with the peer peer group name ipv6 address prefix length enable By default BGP does not exchange IPv6 unicast routes with any peer 6 Redistribute the IGP routes of the VPN into BGP import route protocol process id all processes allow direct med med value route policy route policy name By default no routes are...

Page 362: ...allow direct cost cost route policy route policy name By default no routes are redistributed into RIPng 4 Optional Configure the default cost value for redistributed routes default cost value The default value is 0 5 Return to system view quit N A 6 Enter interface view interface interface type interface number N A 7 Enable the RIPng process on the interface ripng process id enable By default RIPn...

Page 363: ... view N A 2 Create an IS IS process for an IPv6 VPN instance and enter IS IS view isis process id vpn instance vpn instance name N A 3 Configure a network entity title network entity net By default no NET is configured 4 Create the IS IS IPv6 unicast address family and enter its view address family ipv6 unicast By default the IS IS IPv6 unicast address family is not created 5 Optional Redistribute...

Page 364: ...ised routes 9 Optional Configure filtering of received routes filter policy acl6 number prefix list ipv6 prefix name import By default BGP does not filter received routes Configuring IBGP between an MCE and a PE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP view bgp as number N A 3 Enter BGP VPN instance view ip vpn instance vpn instance name N A 4 Configure the PE as an IBG...

Page 365: ...ess prefix length substitute as By default BGP AS number substitution is disabled 5 Enter BGP VPN IPv6 unicast address family view address family ipv6 unicast N A 6 Optional Configure the SoO attribute for a BGP peer or peer group peer group name ipv6 address prefix length soo site of origin By default the SoO attribute is not configured For more information about the commands in this section see ...

Page 366: ...st basic community list number comm list name whole match adv community list number peer ip address advertised routes received routes network address prefix length statistics statistics Display incoming labels for all BGP VPNv6 routes display bgp routing table vpnv6 inlabel Display outgoing labels for all BGP VPNv6 routes display bgp routing table vpnv6 outlabel Display BGP VPNv6 address family up...

Page 367: ...n procedure 1 Configure OSPF on the MPLS backbone to ensure IP connectivity among the PEs and the P router Configure PE 1 PE1 system view PE1 interface loopback 0 PE1 LoopBack0 ip address 1 1 1 9 32 PE1 LoopBack0 quit PE1 interface pos 2 2 0 PE1 Pos2 2 0 ip address 172 1 1 1 24 PE1 Pos2 2 0 quit PE1 ospf PE1 ospf 1 area 0 PE1 ospf 1 area 0 0 0 0 network 172 1 1 0 0 0 0 255 PE1 ospf 1 area 0 0 0 0 ...

Page 368: ...e pos 2 2 0 PE2 Pos2 2 0 ip address 172 2 1 2 24 PE2 Pos2 2 0 quit PE2 ospf PE2 ospf 1 area 0 PE2 ospf 1 area 0 0 0 0 network 172 2 1 0 0 0 0 255 PE2 ospf 1 area 0 0 0 0 network 3 3 3 9 0 0 0 0 PE2 ospf 1 area 0 0 0 0 quit PE2 ospf 1 quit Execute the display ospf peer command to verify that OSPF adjacencies in Full state have been established between PE 1 P and PE 2 Execute the display ip routing ...

Page 369: ... instance vpn1 PE1 vpn instance vpn1 route distinguisher 100 1 PE1 vpn instance vpn1 vpn target 111 1 PE1 vpn instance vpn1 quit PE1 ip vpn instance vpn2 PE1 vpn instance vpn2 route distinguisher 100 2 PE1 vpn instance vpn2 vpn target 222 2 PE1 vpn instance vpn2 quit PE1 interface gigabitethernet 2 0 1 PE1 GigabitEthernet2 0 1 ip binding vpn instance vpn1 PE1 GigabitEthernet2 0 1 ipv6 address 2001...

Page 370: ... 2001 1 2 2001 1 1 press CTRL_C to break 56 bytes from 2001 1 1 icmp_seq 0 hlim 64 time 9 000 ms 56 bytes from 2001 1 1 icmp_seq 1 hlim 64 time 1 000 ms 56 bytes from 2001 1 1 icmp_seq 2 hlim 64 time 0 000 ms 56 bytes from 2001 1 1 icmp_seq 3 hlim 64 time 0 000 ms 56 bytes from 2001 1 1 icmp_seq 4 hlim 64 time 0 000 ms Ping6 statistics for 2001 1 1 5 packet s transmitted 5 packet s received 0 0 pa...

Page 371: ...ck 0 PE1 bgp address family vpnv6 PE1 bgp vpnv6 peer 3 3 3 9 enable PE1 bgp vpnv6 quit PE1 bgp quit Configure PE 2 PE2 bgp 100 PE2 bgp peer 1 1 1 9 as number 100 PE2 bgp peer 1 1 1 9 connect interface loopback 0 PE2 bgp address family vpnv6 PE2 bgp vpnv6 peer 1 1 1 9 enable PE2 bgp vpnv6 quit PE2 bgp quit Execute the display bgp peer vpnv6 command on the PEs to verify that a BGP peer relationship ...

Page 372: ...ocol Direct NextHop Preference 0 Interface GE2 0 2 Cost 0 Destination 2001 2 2 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2001 4 96 Protocol BGP4 NextHop FFFF 3 3 3 9 Preference 255 Interface POS2 2 0 Cost 0 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cos...

Page 373: ...Loop0 2 2 2 9 32 POS2 2 1 172 1 1 1 24 GE2 0 1 2001 2 2 96 Tunnel0 20 1 1 1 24 POS2 2 0 172 2 1 2 24 CE 2 GE2 0 1 2001 2 1 96 Tunnel0 20 1 1 2 24 Configuration procedure 1 Configure an IGP on the MPLS backbone to ensure IP connectivity among the PEs and the P router This example uses OSPF Details not shown Execute the display ospf peer command to verify that OSPF adjacencies in Full state have bee...

Page 374: ...cy gre1 tunnel select seq gre load balance number 1 PE2 tunnel policy gre1 quit PE2 ip vpn instance vpn1 PE2 vpn instance vpn1 route distinguisher 100 2 PE2 vpn instance vpn1 vpn target 100 1 both PE2 vpn instance vpn1 tnl policy gre1 PE2 vpn instance vpn1 quit PE2 interface gigabitethernet 2 0 1 PE2 GigabitEthernet2 0 1 ip binding vpn instance vpn1 PE2 GigabitEthernet2 0 1 ipv6 address 2001 2 2 9...

Page 375: ...bgp ipv6 import route direct CE1 bgp ipv6 quit Configure PE 1 PE1 bgp 100 PE1 bgp ip vpn instance vpn1 PE1 bgp vpn1 peer 2001 1 1 as number 65410 PE1 bgp vpn1 address family ipv6 unicast PE1 bgp ipv6 vpn1 peer 2001 1 1 enable PE1 bgp ipv6 vpn1 quit PE1 bgp vpn1 quit PE1 bgp quit Configure CE 2 and PE 2 in the same way that CE 1 and PE 1 are configured Details not shown Execute the display bgp peer...

Page 376: ...s 20 1 1 2 24 PE2 Tunnel0 mpls enable PE2 Tunnel0 quit Verifying the configuration Verify that the CEs have learned the route to each other and can ping each other Details not shown Configuring IPv6 MPLS L3VPN inter AS option A Network requirements CE 1 and CE 2 belong to the same VPN CE 1 accesses the network through PE 1 in AS 100 and CE 2 accesses the network through PE 2 in AS 200 Configure IP...

Page 377: ... and that the PEs and ASBR PEs in the same AS have learned the routes to the loopback interfaces of each other Execute the ping command to verify that the PEs and ASBR PEs in the same AS can ping each other Details not shown 2 Configure basic MPLS and enable MPLS LDP on each MPLS backbone to establish LDP LSPs Configure basic MPLS on PE 1 and enable MPLS LDP for both PE 1 and the interface connect...

Page 378: ...not required for PEs in different ASs Configure CE 1 CE1 system view CE1 interface gigabitethernet 2 0 1 CE1 GigabitEthernet2 0 1 ipv6 address 2001 1 1 96 CE1 GigabitEthernet2 0 1 quit Configure PE 1 PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 100 1 PE1 vpn instance vpn1 vpn target 100 1 both PE1 vpn instance vpn1 quit PE1 interface gigabitethernet 2 0 1 PE1 GigabitEthernet2...

Page 379: ...g vpn instance vpn1 ASBR PE2 Pos2 2 1 ipv6 address 2002 1 2 96 ASBR PE2 Pos2 2 1 quit Execute the display ip vpn instance command to display VPN instance information Verify that each PE can ping its attached CE and that ASBR PE 1 and ASBR PE 2 can ping each other Details not shown 4 Establish EBGP peer relationships between PEs and CEs to allow them to exchange VPN routes Configure CE 1 CE1 bgp 65...

Page 380: ... ASBR PE1 bgp vpn1 peer 2002 1 2 as number 200 ASBR PE1 bgp vpn1 address family ipv6 unicast ASBR PE1 bgp ipv6 vpn1 peer 2002 1 2 enable ASBR PE1 bgp ipv6 vpn1 quit ASBR PE1 bgp vpn1 quit ASBR PE1 bgp peer 1 1 1 9 as number 100 ASBR PE1 bgp peer 1 1 1 9 connect interface loopback 0 ASBR PE1 bgp address family vpnv6 ASBR PE1 bgp vpnv6 peer 1 1 1 9 enable ASBR PE1 bgp vpnv6 quit ASBR PE1 bgp quit Co...

Page 381: ... through PE 2 in AS 600 PEs in the same AS run IS IS PE 1 and ASBR PE 1 exchange labeled IPv4 routes by IBGP PE 2 and ASBR PE 2 exchange labeled IPv4 routes by IBGP PE 1 and PE 2 are MP EBGP peers to exchange VPNv6 routes ASBR PE 1 and ASBR PE 2 use their respective routing policies and label the routes received from each other ASBR PE 1 and ASBR PE 2 use EBGP to exchange labeled IPv4 routes Figur...

Page 382: ...tem view PE1 isis 1 PE1 isis 1 network entity 10 111 111 111 111 00 PE1 isis 1 quit Configure an LSR ID and enable MPLS and LDP PE1 mpls lsr id 2 2 2 9 PE1 mpls ldp PE1 ldp quit Configure interface Serial 2 1 0 and enable IS IS MPLS and LDP on the interface PE1 interface serial 2 1 0 PE1 Serial2 1 0 ip address 1 1 1 2 255 0 0 0 PE1 Serial2 1 0 isis enable 1 PE1 Serial2 1 0 mpls enable PE1 Serial2 ...

Page 383: ... 5 5 9 connect interface loopback 0 PE1 bgp peer 5 5 5 9 ebgp max hop 10 Configure peer 5 5 5 9 as a VPNv6 peer PE1 bgp address family vpnv6 PE1 bgp af vpnv6 peer 5 5 5 9 enable PE1 bgp af vpnv6 quit Establish an EBGP peer relationship with CE 1 and add the learned BGP routes to the routing table of VPN instance vpn1 PE1 bgp ip vpn instance vpn1 PE1 bgp vpn1 peer 2001 2 as number 65001 PE1 bgp vpn...

Page 384: ...to routes advertised to IBGP peer 2 2 2 9 ASBR PE1 bgp 100 ASBR PE1 bgp peer 2 2 2 9 as number 100 ASBR PE1 bgp peer 2 2 2 9 connect interface loopback 0 ASBR PE1 bgp address family ipv4 unicast ASBR PE1 bgp ipv4 peer 2 2 2 9 enable ASBR PE1 bgp ipv4 peer 2 2 2 9 route policy policy2 export Enable the capability to advertise labeled routes to and receive labeled routes from IBGP peer 2 2 2 9 ASBR ...

Page 385: ...ting policies ASBR PE2 route policy policy1 permit node 1 ASBR PE2 route policy policy1 1 apply mpls label ASBR PE2 route policy policy1 1 quit ASBR PE2 route policy policy2 permit node 1 ASBR PE2 route policy policy2 1 if match mpls label ASBR PE2 route policy policy2 1 apply mpls label ASBR PE2 route policy policy2 1 quit Start BGP on ASBR PE 2 and enable the capability to advertise labeled rout...

Page 386: ...uit Configure interface Loopback 0 and start IS IS on it PE2 interface loopback 0 PE2 LoopBack0 ip address 5 5 5 9 32 PE2 LoopBack0 isis enable 1 PE2 LoopBack0 quit Create VPN instance vpn1 and configure the RD and route target attributes for it PE2 ip vpn instance vpn1 PE2 vpn instance vpn1 route distinguisher 11 11 PE2 vpn instance vpn1 vpn target 3 3 import extcommunity PE2 vpn instance vpn1 vp...

Page 387: ...bitethernet 2 0 1 CE2 system view CE2 interface gigabitethernet 2 0 1 CE2 GigabitEthernet2 0 1 ipv6 address 2002 2 64 CE2 GigabitEthernet2 0 1 quit Establish an EBGP peer relationship with PE 2 and redistribute VPN routes CE2 bgp 65002 CE2 bgp peer 2002 1 as number 600 CE2 bgp address family ipv6 unicast CE2 bgp ipv6 peer 2002 1 enable CE2 bgp ipv6 import route direct CE2 bgp ipv6 quit CE2 bgp qui...

Page 388: ...en PE 3 and PE 4 Figure 94 Network diagram Table 34 Interface and IP address assignment Device Interface IP address Device Interface IP address CE 3 GE2 0 1 2001 1 1 96 CE 4 GE2 0 1 2001 2 1 96 PE 3 Loop0 1 1 1 9 32 PE 4 Loop0 6 6 6 9 32 GE2 0 1 2001 1 2 96 GE2 0 1 2001 2 2 96 POS2 2 1 10 1 1 1 24 POS2 2 1 20 1 1 2 24 CE 1 Loop0 2 2 2 9 32 CE 2 Loop0 5 5 5 9 32 POS2 2 0 10 1 1 2 24 POS2 2 0 21 1 1...

Page 389: ...ame way that PE 1 is configured Details not shown On PE 1 or PE 2 execute the following commands Execute the display mpls ldp peer command to verify that an LDP session in Operational state has been established between PE 1 and PE 2 Details not shown Execute the display bgp peer vpnv4 command to verify that a BGP peer relationship in Established state has been established between PE 1 and PE 2 Det...

Page 390: ...2 2 0 CE1 Pos2 2 0 ip address 10 1 1 2 24 CE1 Pos2 2 0 isis enable 2 CE1 Pos2 2 0 mpls enable CE1 Pos2 2 0 mpls ldp enable CE1 Pos2 2 0 mpls ldp transport address interface CE1 Pos2 2 0 quit PE 3 and CE 1 can establish an LDP session and IS IS neighbor relationship between them Configure PE 4 and CE 2 in the same way that PE 3 and CE 1 are configured Details not shown 3 Connect the customer carrie...

Page 391: ...transport address interface CE1 Pos2 2 1 quit PE 1 and CE 1 can establish an LDP session and IS IS neighbor relationship between them Configure PE 2 and CE 2 in the same way that PE 1 and CE 1 are configured Details not shown 4 Connect end customers and the customer carrier Configure CE 3 CE3 system view CE3 interface gigabitethernet 2 0 1 CE3 GigabitEthernet2 0 1 ipv6 address 2001 1 1 96 CE3 Giga...

Page 392: ...ying the configuration 1 Display the public network routing table and VPN routing table on the provider carrier PEs for example on PE 1 Verify that the public network routing table contains only routes of the provider carrier network PE1 display ip routing table Destinations 14 Routes 14 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 3 3 3 9 32 Direct 0 0...

Page 393: ...ect 0 0 127 0 0 1 InLoop0 2 Display the routing table on the customer carrier CEs for example on CE 1 Verify that the routing table contains the internal routes of the customer carrier network CE1 display ip routing table Destinations 21 Routes 21 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 IS_L1 15 10 10 1 1 1 POS2 2 0 2 2 2 9 32 Direct 0 0...

Page 394: ...ect 0 0 10 1 1 1 POS2 2 1 10 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 10 1 1 255 32 Direct 0 0 10 1 1 1 POS2 2 1 11 1 1 0 24 IS_L1 15 20 10 1 1 2 POS2 2 1 20 1 1 0 24 IS_L2 15 84 10 1 1 2 POS2 2 1 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 224 0 0 0 4 Direct 0 0 0 0 0 0 NU...

Page 395: ...s VPN 1 and VPN 2 and Host B to access only VPN 1 Figure 95 Network diagram Configuration procedure 1 Configure CE 1 Configure IPv6 addresses for interfaces CE1 system view CE1 interface gigabitethernet 2 0 1 CE1 GigabitEthernet2 0 1 ipv6 address 100 1 64 CE1 GigabitEthernet2 0 1 quit CE1 interface serial 2 1 0 CE1 Serial2 1 0 ipv6 address 1 2 64 CE1 Serial2 1 0 quit Configure an IPv6 default rout...

Page 396: ...t A can be forwarded through the correct route in the routing table of VPN instance vpn1 PE1 ipv6 route static vpn instance vpn2 100 64 vpn instance vpn1 1 2 PE1 bgp 100 PE1 bgp ip vpn instance vpn2 PE1 bgp vpn2 address family ipv6 PE1 bgp ipv6 vpn2 import route static PE1 bgp ipv6 vpn2 quit PE1 bgp vpn2 quit PE1 bgp quit Configure PBR to route packets from Host A according to the routing tables o...

Page 397: ...1 120 2 64 S2 1 1 10 1 1 1 24 S2 1 0 10 1 1 2 24 Router A S2 1 0 30 1 64 S2 1 1 20 2 64 Configuration procedure 1 Configure OSPFv3 on the customer networks Configure conventional OSPFv3 on CE 1 Router A and CE 2 to advertise addresses of the interfaces as shown in Figure 96 Set the cost value to 2 for both the link between CE 1 and Router A and the link between CE 2 and Router A Execute the displa...

Page 398: ...etwork 10 1 1 0 0 0 0 255 PE1 ospf 1 area 0 0 0 0 quit PE1 ospf 1 quit Configure basic MPLS and MPLS LDP on PE 2 to establish LDP LSPs PE2 system view PE2 interface loopback 0 PE2 LoopBack0 ip address 2 2 2 9 32 PE2 LoopBack0 quit PE2 mpls lsr id 2 2 2 9 PE2 mpls ldp PE2 ldp quit PE2 interface serial 2 1 1 PE2 Serial2 1 1 ip address 10 1 1 2 24 PE2 Serial2 1 1 mpls enable PE2 Serial2 1 1 mpls ldp ...

Page 399: ...p vpn1 address family ipv6 unicast PE1 bgp ipv6 vpn1 import route ospfv3 100 PE1 bgp ipv6 vpn1 import route direct PE1 bgp ipv6 vpn1 quit PE1 bgp vpn1 quit PE1 bgp quit Configure PE 2 PE2 ip vpn instance vpn1 PE2 vpn instance vpn1 route distinguisher 100 2 PE2 vpn instance vpn1 vpn target 1 1 PE2 vpn instance vpn1 quit PE2 interface gigabitethernet 2 0 1 PE2 GigabitEthernet2 0 1 ip binding vpn ins...

Page 400: ...pfv3 100 area 0 0 0 1 quit PE2 ospfv3 100 quit Verifying the configuration Execute the display ipv6 routing table vpn instance command on the PEs to verify the following results details not shown The path to the peer CE is now along the IPv6 BGP route across the backbone A route to the sham link destination address exists Execute the display ipv6 routing table command on the CEs to verify that the...

Page 401: ...at the system name of the MCE device is MCE the system names of the edge routers of VPN 1 and VPN 2 are VR1 and VR2 and the system name of PE 1 is PE1 1 Configure VPN instances on the MCE and PE 1 On MCE configure VPN instances vpn1 and vpn2 and specify an RD and route targets for each VPN instance MCE system view MCE ip vpn instance vpn1 MCE vpn instance vpn1 route distinguisher 10 1 CE VPN 1 Sit...

Page 402: ...ce vpn1 vpn target 10 1 PE1 vpn instance vpn1 quit PE1 ip vpn instance vpn2 PE1 vpn instance vpn2 route distinguisher 20 1 PE1 vpn instance vpn2 vpn target 20 1 PE1 vpn instance vpn2 quit 2 Configure routing between the MCE and VPN sites The MCE is connected to VPN 1 directly and no routing protocol is enabled in VPN 1 Therefore you can configure IPv6 static routes On VR 1 assign IPv6 address 2001...

Page 403: ... routing table vpn instance vpn1 Destinations 6 Routes 6 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2001 1 64 Protocol Direct NextHop Preference 0 Interface GE2 0 1 Cost 0 Destination 2001 1 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2012 1 64 Protocol Static NextHop 2001 1 2 Preference 60 Interface GE2 0 1 C...

Page 404: ...gabitEthernet2 0 3 1 ip binding vpn instance vpn1 Configure the subinterface to terminate VLAN 10 MCE GigabitEthernet2 0 3 1 vlan type dot1q vid 10 Configure an IPv6 address for the subinterface MCE GigabitEthernet2 0 3 1 ipv6 address 2001 2 3 64 MCE GigabitEthernet2 0 3 1 quit On the MCE bind subinterface Gigabitethernet 2 0 3 2 to the VPN instance vpn2 MCE interface gigabitethernet 2 0 3 2 MCE G...

Page 405: ...101 101 10 1 MCE ospf 10 import route static MCE ospf 10 quit Enable OSPFv3 on interface Gigabitethernet 2 0 3 1 MCE interface gigabitethernet 2 0 3 1 MCE GigabitEthernet2 0 3 1 ospfv3 10 area 0 0 0 0 MCE GigabitEthernet2 0 3 1 quit On PE 1 enable OSPFv3 process 10 and bind it to VPN instance vpn1 PE1 ospfv3 10 vpn instance vpn1 PE1 ospf 10 router id 100 100 10 1 PE1 ospf 10 quit Enable OSPFv3 on ...

Page 406: ... Preference 0 Interface GE2 0 1 2 Cost 0 Destination 2002 2 4 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2012 64 Protocol O_ASE2 NextHop FE80 200 5EFF FE01 1C06 Preference 15 Interface GE2 0 1 2 Cost 10 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 T...

Page 407: ... of the loopback interfaces from each other Configure basic MPLS and MPLS LDP on the MPLS backbone to establish LDP LSPs Establish an MP IBGP peer relationship between the PEs to advertise VPN IPv6 routes Configure the VPN instance of VPN 1 on PE 1 to allow CE 1 to access the network Configure the VPN instance of VPN 1 on PE 2 to allow CE 2 to access the network Configure BGP as the PE CE routing ...

Page 408: ...command on CE 1 to verify that CE 1 has not learned the route to the VPN behind CE 2 Details not shown Execute the display ipv6 routing table vpn instance command on the PEs The output shows the route to the VPN behind the peer CE This example uses PE 2 PE2 display ipv6 routing table vpn instance vpn1 Destinations 7 Routes 7 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop...

Page 409: ...3 16 12 53 024 2012 PE2 BGP 7 DEBUG BGP vpn1 Send UPDATE MSG to peer 10 2 2 IPv6 UNC NextHop 10 2 1 Execute the display bgp routing table ipv6 peer received routes command on CE 2 to verify that CE 2 has not received the route to 100 96 CE2 display bgp routing table ipv6 peer 10 2 1 received routes Total number of routes 0 2 Configure BGP AS number substitution Configure BGP AS number substitution...

Page 410: ...s suppressed S stale i internal e external Origin i IGP e EGP incomplete e Network 100 PrefixLen 96 NextHop 10 2 1 LocPrf PrefVal 0 OutLabel NULL MED Path Ogn 100 100 CE2 display ipv6 routing table Destinations 7 Routes 7 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 10 2 96 Protocol Direct NextHop Preference 0 Interface GE2 0 1 Cost 0 Destination 10...

Page 411: ...ng loops configure the same SoO attribute on PE 1 and PE 2 for CE 1 and CE 2 Figure 99 Network diagram Table 37 Interface and IP address assignment Device Interface IP address Device Interface IP address CE 1 Loop0 100 1 96 CE 3 Loop0 200 1 96 GE2 0 1 10 1 1 96 GE2 0 1 10 3 1 96 CE 2 GE2 0 1 10 2 1 96 PE 2 Loop0 2 2 2 9 32 PE 1 Loop0 1 1 1 9 32 GE2 0 1 10 2 2 96 GE2 0 1 10 1 2 96 GE2 0 2 40 1 1 1 ...

Page 412: ...For more information about basic MPLS L3VPN configurations see Configuring IPv6 MPLS L3VPNs 2 Configure BGP AS number substitution Configure BGP AS number substitution on PE 1 PE 2 and PE 3 For more information about the configuration see Configuring BGP AS number substitution Display routing information on CE 2 The output shows that CE 2 has learned the route 100 96 from CE 1 A routing loop has o...

Page 413: ... 2 because the same SoO attribute has been configured Display the routing table of CE 2 The output shows that the route 100 96 has been removed CE2 display ipv6 routing table Destinations 4 Routes 4 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 10 2 96 Protocol Direct NextHop Preference 0 Interface GE2 0 1 Cost 0 Destination 10 2 1 128 Protocol Direc...

Page 414: ...an LSP tunnel an MPLS TE tunnel or a GRE tunnel Cross connect A cross connect connects two physical or virtual circuits such as ACs and PWs It switches packets between the two physical or virtual circuits Cross connects include AC to AC cross connect AC to PW cross connect and PW to PW cross connect Site ID A site ID uniquely identifies a site in a VPN Sites in different VPNs can have the same sit...

Page 415: ...ssage to an export target L2VPN information includes the site ID RD and label block Import target attribute When a PE receives an update message from the peer PE it checks the route target attribute in the update message If the route target value matches an import target the PE accepts the L2VPN information in the update message Route target attributes determine from which PEs a PE can receive L2V...

Page 416: ...tatic PWs To establish BGP PWs BGP advertises label block information in an extended BGP update to PEs in the same VPN Each PE uses the received label block information to calculate outgoing labels and uses its own label block to calculate incoming labels After two PEs complete label calculation a BGP PW is established between them BGP PWs have the following features Simplified configuration There...

Page 417: ...protocols through PWs A PE encapsulates a Layer 2 packet received from an AC according to the PW type The PW type is determined by the link type of the AC as shown in Table 38 Table 38 Relationship between AC types and PW types AC type PW type Ethernet Ethernet VLAN PPP PPP HDLC HDLC Ethernet over MPLS Ethernet over MPLS uses MPLS L2VPN to connect Ethernets and delivers Ethernet packets through a ...

Page 418: ... tag before forwarding the packet Ethernet over MPLS supports the following modes Port mode A Layer 3 Ethernet interface is bound to a PW Packets received from the Layer 3 Ethernet interface are forwarded through the bound PW The default PW type for port mode is Ethernet Figure 102 Packet encapsulation in port mode VLAN mode A Layer 3 Ethernet subinterface or VLAN interface is bound to a PW Packet...

Page 419: ...carry the control word field Otherwise the packets do not carry the control word field MPLS L2VPN interworking CEs might connect to PEs through various types of links such as ATM FR HDLC Ethernet and PPP MPLS L2VPN interworking connects such CEs and allow them to communicate MPLS L2VPN supports Ethernet interworking and IP interworking modes The device only supports IP interworking Only local MPLS...

Page 420: ...PW Only static PWs and LDP PWs support PW redundancy Figure 104 PW redundancy The MPLS L2VPN determines whether the primary PW fails according to the LDP session status or the BFD result The backup PW is used when one of the following conditions exists The public tunnel of the primary PW is deleted or BFD detects that the public tunnel has failed The primary PW is deleted because the LDP session b...

Page 421: ...orm the following operations 1 Create a PW between PE 1 and PE 2 PW 1 and a PW between PE 2 and PE 4 PW 2 2 Concatenate the two PWs on PE 2 Intra domain multi segment PWs can fully use existing public tunnels to reduce end to end public tunnels Figure 106 Intra domain multi segment PW Inter domain multi segment PW An inter domain multi segment PW has concatenated PWs in different ASs and is a meth...

Page 422: ...R2003 MSR2004 24 2004 48 MSR3012 3024 3044 3064 Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers MPLS L2VPN configuration task list To establish an MPLS L2VPN you must perform the following tasks 1 Configure an IGP to achieve IP connectivity within the backbone 2 Configure basic MPLS LDP GRE or MPLS TE to set up public tunnels across the backbone 3 Configure M...

Page 423: ...s connect For multi segment PWs skip this task Optional Configuring PW redundancy Configuring static PW redundancy Configuring LDP PW redundancy Choose either task to configure PW redundancy Optional Configuring interworking for a cross connect N A Optional Enabling SNMP notifications for L2VPN PW N A Enabling L2VPN Before you enable L2VPN perform the following tasks Configure an LSR ID for the PE...

Page 424: ... mac mac address broadcast Required for MPLS L2VPN interworking By default no default next hop is specified This command is not supported on a VLAN interface Configuring the interface with PPP encapsulation Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface serial pos number N A 3 Configure the link layer protocol link protocol ppp By default the link layer p...

Page 425: ...W must have the same MTU configured for the PW Otherwise the PW cannot go up Configuring a PW Configuring a PW class You can configure PW attributes such as the PW type and enable control word in a PW class PWs with the same attributes can reference the same PW class To configure a PW class Step Command Remarks 1 Enter system view system view N A 2 Create a PW class and enter PW class view pw clas...

Page 426: ...eer ip address pw id pw id pw class class name tunnel policy tunnel policy name By default no LDP PW is configured After an LDP PW is created the PE automatically sends a targeted hello to create an LDP session to the peer PE Then the PE exchanges the PW ID FEC and PW label mapping with the peer 5 Configure the expected bandwidth for the PW bandwidth bandwidth value By default the expected bandwid...

Page 427: ... Optional Enable L2VPN information reflection between clients reflect between clients By default L2VPN information reflection is enabled between clients 11 Optional Configure the cluster ID of the route reflector reflector cluster id cluster id ip address By default a route reflector uses its own router ID as the cluster ID 12 Optional Configure the filtering of reflected L2VPN information rr filt...

Page 428: ... Configuring a remote CCC connection To configure a remote CCC connection perform the following configurations on the PE and P devices On the two PEs use the ccc command to specify the incoming and outgoing labels On each P device between the two PEs use the static lsp transit command to configure a static LSP for each direction of the CCC connection For more information about the static lsp trans...

Page 429: ... connection name N A 4 Bind the Layer 3 interface to the cross connect ac interface interface type interface number By default no Layer 3 interface is bound to the cross connect To bind a Layer 3 interface to a BGP cross connect Step Command Remarks 1 Enter system view system view N A 2 Enter cross connect group view xconnect group group name N A 3 Enter auto discovery cross connect group view aut...

Page 430: ... connect PW and enter backup cross connect PW view backup peer ip address pw id pw id in label label value out label label value pw class class name tunnel policy tunnel policy name By default no backup PW is configured 8 Return to user view return N A 9 Manually perform a PW switchover l2vpn switchover peer ip address pw id pw id N A Configuring LDP PW redundancy Step Command Remarks 1 Enter syst...

Page 431: ...onfigure the default next hop address This allows the PE to correctly encapsulate a link layer header for packets destined for the CE If you specify the unicast MAC address the MAC address of the CE or a broadcast MAC address as the default next hop the PE uses the MAC address as the destination address of the outgoing packets If you specify the IP address of the CE as the default next hop the PE ...

Page 432: ...p peer ip address pw id pw id xconnect group group name verbose Display cross connect forwarding information centralized devices in standalone mode display l2vpn forwarding ac pw xconnect group group name verbose Display cross connect forwarding information distributed devices in standalone mode centralized devices in IRF mode display l2vpn forwarding ac pw xconnect group group name slot slot numb...

Page 433: ... as number ip address mask length all external group group name internal l2vpn For more information about the display bgp group l2vpn display bgp peer l2vpn display bgp update group l2vpn and reset bgp l2vpn commands see Layer 3 IP Routing Command Reference MPLS L2VPN configuration examples Configuring local MPLS L2VPN connections Network requirements Configure local MPLS L2VPN connections between...

Page 434: ...g entries PE display l2vpn forwarding ac Total number of cross connections 1 Total number of ACs 2 AC Xconnect group Link ID GE2 0 1 vpn1 0 GE2 0 2 vpn1 1 Verify that CE 1 and CE 2 can ping each other Details not shown Configuring IP interworking over local MPLS L2VPN connections Network requirements CE 1 and PE are connected through Ethernet interfaces CE 2 and PE are connected through serial int...

Page 435: ...ace does not need an IP address PE interface serial 2 1 0 PE Serial2 1 0 link protocol ppp PE Serial2 1 0 ppp ipcp proxy 10 1 1 1 PE Serial2 1 0 quit Create a cross connect group named vpn1 create a cross connect named vpn1 in the group enable interworking for the cross connect and bind GigabitEthernet 2 0 1 and Serial 2 1 0 to the cross connect PE xconnect group vpn1 PE xcg vpn1 connection vpn1 P...

Page 436: ...2 2 32 GE2 0 1 10 1 1 2 24 GE2 0 1 GE2 0 2 10 2 2 2 24 GE2 0 2 10 1 1 1 24 PE 2 Loop0 192 3 3 3 32 CE 2 GE2 0 1 100 1 1 2 24 GE2 0 1 GE2 0 2 10 2 2 1 24 Configuration procedure 1 Configure CE 1 CE1 system view CE1 interface gigabitethernet 2 0 1 CE1 GigabitEthernet2 0 1 ip address 100 1 1 1 24 CE1 GigabitEthernet2 0 1 quit 2 Configure PE 1 Configure an LSR ID PE1 system view PE1 interface loopback...

Page 437: ...itethernet 2 0 1 Create a static PW for the cross connect to bind the AC to the PW PE1 xcg vpna svc peer 192 3 3 3 pw id 3 in label 100 out label 200 PE1 xcg vpna svc 192 3 3 3 3 quit PE1 xcg vpna svc quit PE1 xcg vpna quit 3 Configure the P device Configure an LSR ID P system view P interface loopback 0 P LoopBack0 ip address 192 4 4 4 32 P LoopBack0 quit P mpls lsr id 192 4 4 4 Enable global LDP...

Page 438: ...hernet2 0 2 ip address 10 2 2 1 24 PE2 GigabitEthernet2 0 2 mpls enable PE2 GigabitEthernet2 0 2 mpls ldp enable PE2 GigabitEthernet2 0 2 quit Configure OSPF for LDP to create LSPs PE2 ospf PE2 ospf 1 area 0 PE2 ospf 1 area 0 0 0 0 network 10 2 2 1 0 0 0 255 PE2 ospf 1 area 0 0 0 0 network 192 3 3 3 0 0 0 0 PE2 ospf 1 area 0 0 0 0 quit PE2 ospf 1 quit Create a cross connect group named vpna create...

Page 439: ...E2 display l2vpn pw Flags M main B backup H hub link S spoke link N no split horizon Total number of PWs 1 1 up 0 blocked 0 down 0 defect Xconnect group Name vpna Peer PW ID In Out Label Proto Flag Link ID State 192 2 2 2 3 200 100 Static M 0 Up Verify that CE 1 and CE 2 can ping each other Details not shown Configuring an LDP PW Network requirements Create an LDP PW between PE 1 and PE 2 over the...

Page 440: ...ace gigabitethernet 2 0 2 PE1 GigabitEthernet2 0 2 ip address 10 1 1 1 24 PE1 GigabitEthernet2 0 2 mpls enable PE1 GigabitEthernet2 0 2 mpls ldp enable PE1 GigabitEthernet2 0 2 quit Configure OSPF for LDP to create LSPs PE1 ospf PE1 ospf 1 area 0 PE1 ospf 1 area 0 0 0 0 network 10 1 1 1 0 0 0 255 PE1 ospf 1 area 0 0 0 0 network 192 2 2 2 0 0 0 0 PE1 ospf 1 area 0 0 0 0 quit PE1 ospf 1 quit Create ...

Page 441: ...10 2 2 2 24 P GigabitEthernet2 0 2 mpls enable P GigabitEthernet2 0 2 mpls ldp enable P GigabitEthernet2 0 2 quit Configure OSPF for LDP to create LSPs P ospf P ospf 1 area 0 P ospf 1 area 0 0 0 0 network 10 1 1 2 0 0 0 255 P ospf 1 area 0 0 0 0 network 10 2 2 2 0 0 0 255 P ospf 1 area 0 0 0 0 network 192 4 4 4 0 0 0 0 P ospf 1 area 0 0 0 0 quit P ospf 1 quit 4 Configure PE 2 Configure an LSR ID P...

Page 442: ...Configure CE 2 CE2 system view CE2 interface gigabitethernet 2 0 1 CE2 GigabitEthernet2 0 1 ip address 100 1 1 2 24 CE2 GigabitEthernet2 0 1 quit Verifying the configuration Display L2VPN PW information on PE 1 The output shows that an LDP PW has been established PE1 display l2vpn pw Flags M main B backup H hub link S spoke link N no split horizon Total number of PWs 1 1 up 0 blocked 0 down 0 defe...

Page 443: ...face IP address Device Interface IP address CE 1 GE2 0 1 100 1 1 1 24 P Loop0 192 4 4 4 32 PE 1 Loop0 192 2 2 2 32 GE2 0 1 10 1 1 2 24 GE2 0 1 GE2 0 2 10 2 2 2 24 GE2 0 2 10 1 1 1 24 PE 2 Loop0 192 3 3 3 32 CE 2 Ser2 1 0 100 1 1 2 24 Ser2 1 0 GE2 0 1 10 2 2 1 24 Configuration procedure 1 Configure CE 1 CE1 system view CE1 interface gigabitethernet 2 0 1 CE1 GigabitEthernet2 0 1 ip address 100 1 1 ...

Page 444: ...192 2 2 2 0 0 0 0 PE1 ospf 1 area 0 0 0 0 quit PE1 ospf 1 quit Create a cross connect group named vpna create a cross connect named ldp in the group enable interworking for the cross connect and bind GigabitEthernet 2 0 1 to the cross connect PE1 xconnect group vpna PE1 xcg vpna connection ldp PE1 xcg vpna ldp interworking ipv4 PE1 xcg vpna ldp ac interface gigabitethernet 2 0 1 Create an LDP PW f...

Page 445: ...ess 192 3 3 3 32 PE2 LoopBack0 quit PE2 mpls lsr id 192 3 3 3 Enable L2VPN PE2 l2vpn enable Enable global LDP PE2 mpls ldp PE2 ldp quit Configure GigabitEthernet 2 0 1 the interface connected to the P device and enable LDP on the interface PE2 interface gigabitethernet 2 0 1 PE2 GigabitEthernet2 0 1 ip address 10 2 2 1 24 PE2 GigabitEthernet2 0 1 mpls enable PE2 GigabitEthernet2 0 1 mpls ldp enabl...

Page 446: ...configuration Display L2VPN PW information on PE 1 The output shows that an LDP PW has been established PE1 display l2vpn pw Flags M main B backup H hub link S spoke link N no split horizon Total number of PWs 1 1 up 0 blocked 0 down 0 defect Xconnect group Name vpna Peer PW ID In Out Label Proto Flag Link ID State 192 3 3 3 3 1279 1279 LDP M 1 Up Display L2VPN PW information on PE 2 The output sh...

Page 447: ... CE1 system view CE1 interface gigabitethernet 2 0 1 CE1 GigabitEthernet2 0 1 ip address 100 1 1 1 24 CE1 GigabitEthernet2 0 1 quit 2 Configure PE 1 Configure an LSR ID PE1 system view PE1 interface loopback 0 PE1 LoopBack0 ip address 192 2 2 2 32 PE1 LoopBack0 quit PE1 mpls lsr id 192 2 2 2 Enable L2VPN PE1 l2vpn enable Enable global LDP PE1 mpls ldp PE1 ldp quit Configure GigabitEthernet 2 0 2 t...

Page 448: ... xcg vpnb auto discovery bgp PE1 xcg vpnb auto route distinguisher 2 2 PE1 xcg vpnb auto vpn target 2 2 export extcommunity PE1 xcg vpnb auto vpn target 2 2 import extcommunity PE1 xcg vpnb auto site 1 range 10 default offset 0 PE1 xcg vpnb auto 1 connection remote site id 2 PE1 xcg vpnb auto 1 2 ac interface gigabitethernet 2 0 1 PE1 xcg vpnb auto 1 2 return 3 Configure the P device Configure an ...

Page 449: ... P device and enable LDP on the interface PE2 interface gigabitethernet 2 0 2 PE2 GigabitEthernet2 0 2 ip address 10 2 2 1 24 PE2 GigabitEthernet2 0 2 mpls enable PE2 GigabitEthernet2 0 2 mpls ldp enable PE2 GigabitEthernet2 0 2 quit Configure OSPF for LDP to create LSPs PE2 ospf PE2 ospf 1 area 0 PE2 ospf 1 area 0 0 0 0 network 192 3 3 3 0 0 0 0 PE2 ospf 1 area 0 0 0 0 network 10 2 2 0 0 0 0 255 ...

Page 450: ...has been established PE1 display l2vpn pw Flags M main B backup H hub link S spoke link N no split horizon Total number of PWs 1 1 up 0 blocked 0 down 0 defect Xconnect group Name vpnb Peer PW ID Rmt Site In Out Label Proto Flag Link ID State 192 3 3 3 2 1036 1025 BGP M 1 Up Display L2VPN PW information on PE 2 The output shows that a BGP PW has been established PE2 display l2vpn pw Flags M main B...

Page 451: ...ystem view CE1 interface gigabitethernet 2 0 1 CE1 GigabitEthernet2 0 1 ip address 100 1 1 1 24 CE1 GigabitEthernet2 0 1 quit 2 Configure PE 1 Configure an LSR ID PE1 system view PE1 interface loopback 0 PE1 LoopBack0 ip address 192 2 2 2 32 PE1 LoopBack0 quit PE1 mpls lsr id 192 2 2 2 Enable L2VPN PE1 l2vpn enable Configure GigabitEthernet 2 0 2 the interface connected to the P device and enable ...

Page 452: ...ted to PE 1 and enable MPLS on the interface P interface gigabitethernet 2 0 1 P GigabitEthernet2 0 1 ip address 10 1 1 2 24 P GigabitEthernet2 0 1 mpls enable P GigabitEthernet2 0 1 quit Configure GigabitEthernet 2 0 2 the interface connected to PE 2 and enable MPLS on the interface P interface gigabitethernet 2 0 2 P GigabitEthernet2 0 2 ip address 10 2 2 2 24 P GigabitEthernet2 0 2 mpls enable ...

Page 453: ... PE2 xcg ccc connection ccc PE2 xcg ccc ccc ccc in label 202 out label 102 nexthop 10 2 2 2 PE2 xcg ccc ccc ac interface gigabitethernet 2 0 1 PE2 xcg ccc ccc quit PE2 xcg ccc quit 5 Configure CE 2 CE2 system view CE2 interface gigabitethernet 2 0 1 CE2 GigabitEthernet2 0 1 ip address 100 1 1 2 24 CE2 GigabitEthernet2 0 1 quit Verifying the configuration Display L2VPN PW information on PE 1 The ou...

Page 454: ... multi segment PW includes an LDP PW between PE 1 and P and a static PW between P and PE 2 The two PWs are concatenated on P Figure 115 Network diagram Table 44 Interface and IP address assignment Device Interface IP address Device Interface IP address CE 1 GE2 0 1 100 1 1 1 24 P Loop0 192 4 4 4 32 PE 1 Loop0 192 2 2 2 32 GE2 0 1 23 1 1 2 24 GE2 0 2 23 1 1 1 24 GE2 0 2 26 2 2 2 24 CE 2 GE2 0 1 100...

Page 455: ... Configure an LSR ID P system view P interface loopback 0 P LoopBack0 ip address 192 4 4 4 32 P LoopBack0 quit P mpls lsr id 192 4 4 4 Enable L2VPN P l2vpn enable Enable LDP globally P mpls ldp P ldp quit Create a PW class named pwa and configure the PW type as ethernet P pw class pwa P pw pwa pw type ethernet P pw pwa quit Configure MPLS TE to establish an MPLS TE tunnel between PE 1 and P and be...

Page 456: ... 5 Configure CE 2 CE2 system view CE2 interface gigabitethernet 2 0 1 CE2 GigabitEthernet2 0 1 ip address 100 1 1 2 24 CE2 GigabitEthernet2 0 1 quit Verifying the configuration Display L2VPN PW information on P The output shows that two PWs have been created to form a multi segment PW P display l2vpn pw Flags M main B backup H hub link S spoke link N no split horizon Total number of PWs 2 2 up 0 b...

Page 457: ...re the inter domain multi segment PW as follows Configure LDP PWs between PE 1 and ASBR 1 and between PE 2 and ASBR 2 and configure public tunnels through LDP to carry the PWs Configure an LDP PW between ASBR 1 and ASBR 2 Advertise labeled IPv4 routes between ASBR 1 and ASBR 2 through BGP to set up the public tunnel to carry the LDP PW Concatenate the two PWs on ASBR 1 Concatenate the two PWs on A...

Page 458: ...PE1 GigabitEthernet2 0 2 mpls ldp enable PE1 GigabitEthernet2 0 2 quit Configure OSPF for LDP to create LSPs PE1 ospf PE1 ospf 1 area 0 PE1 ospf 1 area 0 0 0 0 network 23 1 1 1 0 0 0 255 PE1 ospf 1 area 0 0 0 0 network 192 1 1 1 0 0 0 0 PE1 ospf 1 area 0 0 0 0 quit PE1 ospf 1 quit Create a cross connect group named vpn1 create a cross connect named ldp in the group and bind GigabitEthernet 2 0 1 t...

Page 459: ...etwork 23 1 1 2 0 0 0 255 ASBR1 ospf 1 area 0 0 0 0 network 192 2 2 2 0 0 0 0 ASBR1 ospf 1 area 0 0 0 0 quit ASBR1 ospf 1 quit Configure BGP to advertise labeled routes on ASBR 1 ASBR1 bgp 100 ASBR1 bgp peer 26 2 2 3 as number 200 ASBR1 bgp address family ipv4 unicast ASBR1 bgp ipv4 import route direct ASBR1 bgp ipv4 peer 26 2 2 3 enable ASBR1 bgp ipv4 peer 26 2 2 3 route policy policy1 export ASB...

Page 460: ...LS on the interface ASBR2 interface gigabitethernet 2 0 1 ASBR2 GigabitEthernet2 0 1 ip address 26 2 2 3 24 ASBR2 GigabitEthernet2 0 1 mpls enable ASBR2 GigabitEthernet2 0 1 quit Configure OSPF for LDP to create LSPs ASBR2 ospf ASBR2 ospf 1 area 0 ASBR2 ospf 1 area 0 0 0 0 network 22 2 2 3 0 0 0 255 ASBR2 ospf 1 area 0 0 0 0 network 192 3 3 3 0 0 0 0 ASBR2 ospf 1 area 0 0 0 0 quit ASBR2 ospf 1 qui...

Page 461: ...connected to ASBR 2 and enable LDP on the interface PE2 interface gigabitethernet 2 0 2 PE2 GigabitEthernet2 0 2 ip address 22 2 2 1 24 PE2 GigabitEthernet2 0 2 mpls enable PE2 GigabitEthernet2 0 2 mpls ldp enable PE2 GigabitEthernet2 0 2 quit Configure OSPF for LDP to create LSPs PE2 ospf PE2 ospf 1 area 0 PE2 ospf 1 area 0 0 0 0 network 192 4 4 4 0 0 0 0 PE2 ospf 1 area 0 0 0 0 network 22 2 2 1 ...

Page 462: ...nnect group Name vpn1 Peer PW ID In Out Label Proto Flag Link ID State 192 1 1 1 1000 1279 1151 LDP M 0 Up 192 3 3 3 1000 1278 1151 LDP M 1 Up Display L2VPN PW information on ASBR 2 The output shows that two LDP PWs have been created to form a multi segment PW ASBR2 display l2vpn pw Flags M main B backup H hub link S spoke link N no split horizon Total number of PWs 2 2 up 0 blocked 0 down 0 defec...

Page 463: ...ment circuit physical or virtual connects a CE and a PE such as an Ethernet link or a VLAN PW A pseudowire is a bidirectional virtual connection between two PEs An MPLS PW consists of two unidirectional MPLS LSPs in opposite directions Tunnel A tunnel can be an LSP tunnel an MPLS TE tunnel or a GRE tunnel It carries one or more PWs over an IP MPLS backbone If a PW is carried on an LSP or MPLS TE t...

Page 464: ...PE BGP auto discovery LDP PW To create a BGP auto discovery LDP PW configure BGP to automatically find the remote PE and use LDP to advertise the PW label binding to the remote PE After the two PEs receive the PW label binding from each other they establish a BGP auto discovery LDP PW The information advertised by BGP includes the ID for example LSR ID and VPLS ID of the advertising PE The receivi...

Page 465: ... label to the packet and adds the public tunnel header to the packet It then forwards the packet to the remote PE over the PW If the outgoing interface in the entry is a local interface the PE directly forwards the packet to the local interface If no match is found the PE floods the packet to all other ACs and PWs in the VSI After a PE receives a unicast packet from a PW the PE searches the MAC ad...

Page 466: ... static PWs and LDP PWs support H VPLS In H VPLS An edge domain provides access for a user network to the backbone domain The Network Provider Edge NPE devices are fully meshed in the backbone domain A PW between NPEs is referred to as an N PW A User facing Provider Edge UPE device only establishes a PW with the neighboring NPE A PW between a UPE and an NPE is referred to as a U PW H VPLS access m...

Page 467: ...PEs Even if a U PW fails all customer sites connected to the UPE still maintain the connectivity In the H VPLS using MPLS access as shown in Figure 121 the UPE is connected to two NPEs through primary and backup U PWs The UPE uses the primary U PW to forward traffic When the primary U PW fails the UPE uses the backup U PW to forward traffic Figure 121 UPE dual homing and redundancy in H VPLS using...

Page 468: ... site is called a spoke CE A PE connected to a spoke site is called a spoke PE A link AC or PW towards the hub site is called a hub link You must specify one and only one hub link in a VSI A link AC or PW towards a spoke site is called a spoke link In the hub spoke VPLS network a PE performs MAC address learning and forwarding as follows After receiving a packet from a spoke link the PE performs M...

Page 469: ...ing an AC N A Required Configuring a VSI N A Configuring a PW Optional Configuring a PW class Required Choose either of the following tasks to configure a PW Configuring a static PW Configuring an LDP PW Configuring a BGP PW Configuring a BGP auto discovery LDP PW Choose a PW configuration method depending on the VPLS implementation Required Binding an AC to a VSI N A Optional Configuring UPE dual...

Page 470: ...yer 3 virtual Ethernet interface and VE L2VPN interface VLAN interface or Layer 3 Ethernet subinterface For more information about Ethernet interfaces see Interface Configuration Guide For more information about Layer 3 virtual Ethernet interfaces see Layer 2 WAN Configuration Guide For more information about VE L2VPN interfaces see Configuring L2VPN access to L3VPN or IP backbone For more informa...

Page 471: ...PW signaling protocol is specified 4 Configure a static PW and enter VSI static PW view peer ip address pw id pw id in label label value out label label value hub no split horizon pw class class name tunnel policy tunnel policy name By default no static PW is configured If both a default PW ID in the default pw id command and a PW ID in the peer command are configured the PW ID in the peer command...

Page 472: ...and If a VSI is enabled with the hub spoke capability the hub spoke keyword in the vsi command PWs in the VSI are spoke links by default You can use the hub keyword in this command to specify the LDP PW as the hub link in the VSI You must specify the no split horizon keyword to disable split horizon when you configure an NPE to establish a U PW with a UPE 5 Configure the expected bandwidth of the ...

Page 473: ... client is configured 10 Optional Enable L2VPN information reflection between clients reflect between clients By default L2VPN information reflection is enabled between clients 11 Optional Configure the cluster ID of the RR reflector cluster id cluster id ip address By default an RR uses its own router ID as the cluster ID 12 Optional Configure the filtering of reflected L2VPN information rr filte...

Page 474: ...P To configure a BGP auto discovery LDP PW perform the following configurations on PEs Configure BGP to advertise VPLS PE information Use LDP to create a PW Configuring BGP to advertise VPLS PE information Step Command Remarks 1 Enter system view system view N A 2 Enable BGP and enter BGP view bgp as number By default BGP is disabled 3 Configure the remote PE as a BGP peer peer group name ip addre...

Page 475: ...VPN BGP sessions refresh bgp ip address mask length all external group group name internal export import l2vpn N A 15 Optional Reset L2VPN BGP sessions reset bgp as number ip address mask length all external group group name internal l2vpn N A For more information about the peer as number peer enable peer allow as loop peer reflect client reflect between clients reflector cluster id refresh bgp l2...

Page 476: ... interface the AC is up only when a minimum of one of the associated track entries is positive To bind a Layer 3 interface to a VSI Step Command Remarks 1 Enter system view system view N A 2 Enter Layer 3 interface view interface interface type interface number N A 3 Bind the interface to a VSI and associate Track with the interface xconnect vsi vsi name hub track track entry number 1 3 By default...

Page 477: ... a default PW ID in the default pw id command and a PW ID in the backup peer command are configured the PW ID in the backup peer command is used If only a default PW ID is configured the default PW ID is used If no default PW ID is configured you must provide a PW ID in the backup peer command 7 Return to user view return N A 8 Manually switch traffic of the specified PW to its backup PW l2vpn swi...

Page 478: ...address learning Step Command Remarks 1 Enter system view system view N A 2 Enter VSI view vsi vsi name hub spoke N A 3 Enable MAC address learning for the VSI mac learning enable By default MAC address learning is enabled for a VSI Enabling SNMP notifications for L2VPN PW This feature enables the L2VPN module to generate SNMP notifications when the PW status changes The generated SNMP notificatio...

Page 479: ...ed VPLS PEs display l2vpn auto discovery peer ip address vsi vsi name Display VPLS label block information display l2vpn bgp peer ip address local vsi vsi name verbose Display BGP L2VPN peer group information display bgp group l2vpn group name group name Display VPLS PE information discovered by BGP display bgp l2vpn auto discovery peer ip address advertised received statistics route distinguisher...

Page 480: ...ablish static PWs enable L2VPN create static PWs and specify labels 1 Configure PE 1 Configure an LSR ID PE1 system view PE1 interface loopback 0 PE1 LoopBack0 ip address 1 1 1 9 32 PE1 LoopBack0 quit PE1 mpls lsr id 1 1 1 9 Enable L2VPN PE1 l2vpn enable Enable global LDP PE1 mpls ldp PE1 ldp quit Configure GigabitEthernet 2 0 2 the interface connected to PE 2 and enable LDP on the interface PE1 i...

Page 481: ...t label 100 PE1 vsi svc static 2 2 2 9 3 quit PE1 vsi svc static peer 3 3 3 9 pw id 3 in label 200 out label 200 PE1 vsi svc static 3 3 3 9 3 quit PE1 vsi svc static quit PE1 vsi svc quit Bind the VSI to GigabitEthernet 2 0 1 the interface connected to CE 1 This interface does not need an IP address PE1 interface gigabitethernet 2 0 1 PE1 GigabitEthernet2 0 1 xconnect vsi svc PE1 GigabitEthernet2 ...

Page 482: ...t label 100 PE2 vsi svc static 1 1 1 9 3 quit PE2 vsi svc static peer 3 3 3 9 pw id 3 in label 300 out label 300 PE2 vsi svc static 3 3 3 9 3 quit PE2 vsi svc static quit PE2 vsi svc quit Bind the VSI to GigabitEthernet 2 0 1 the interface connected to CE 2 This interface does not need an IP address PE2 interface gigabitethernet 2 0 1 PE2 GigabitEthernet2 0 1 xconnect vsi svc PE2 GigabitEthernet2 ...

Page 483: ...tatic peer 1 1 1 9 pw id 3 in label 200 out label 200 PE3 vsi svc static 1 1 1 9 3 quit PE3 vsi svc static peer 2 2 2 9 pw id 3 in label 300 out label 300 PE3 vsi svc static 2 2 2 9 3 quit PE3 vsi svc static quit PE3 vsi svc quit Bind the VSI to GigabitEthernet 2 0 1 the interface connected to CE 3 This interface does not need an IP address PE3 interface gigabitethernet 2 0 1 PE3 GigabitEthernet2 ...

Page 484: ... each PE Details not shown 2 Configure PE 1 Configure basic MPLS PE1 system view PE1 interface loopback 0 PE1 LoopBack0 ip address 1 1 1 9 32 PE1 LoopBack0 quit PE1 mpls lsr id 1 1 1 9 PE1 mpls ldp PE1 ldp quit Enable L2VPN PE1 l2vpn enable Configure VSI aaa that uses LDP as the PW signaling protocol and establish PWs to PE 2 and PE 3 PE1 vsi aaa PE1 vsi aaa pwsignaling ldp PE1 vsi aaa ldp peer 2 ...

Page 485: ...aa ldp peer 1 1 1 9 pw id 500 PE2 vsi aaa ldp 1 1 1 9 500 quit PE2 vsi aaa ldp peer 3 3 3 9 pw id 500 PE2 vsi aaa ldp 3 3 3 9 500 quit PE2 vsi aaa ldp quit PE2 vsi aaa quit Bind VSI aaa to GigabitEthernet 2 0 1 the interface connected to CE 2 PE2 interface gigabitethernet 2 0 1 PE2 GigabitEthernet2 0 1 xconnect vsi aaa 4 Configure PE 3 Configure basic MPLS PE3 system view PE3 interface loopback 0 ...

Page 486: ... verbose VSI Name aaa Peer 2 2 2 9 PW ID 500 Signaling Protocol LDP Link ID 8 PW State Up In Label 1279 Out Label 1279 MTU 1500 PW Attributes Main VCCV CC VCCV BFD Tunnel Group ID 0x260000000 Tunnel NHLFE IDs 1028 Peer 3 3 3 9 PW ID 500 Signaling Protocol LDP Link ID 9 PW State Up In Label 1278 Out Label 1277 MTU 1500 PW Attributes Main VCCV CC VCCV BFD Tunnel Group ID 0x360000001 Tunnel NHLFE IDs...

Page 487: ...p 100 PE1 bgp peer 2 2 2 9 as number 100 PE1 bgp peer 2 2 2 9 connect interface loopback 0 PE1 bgp peer 3 3 3 9 as number 100 PE1 bgp peer 3 3 3 9 connect interface loopback 0 PE1 bgp address family l2vpn PE1 bgp l2vpn peer 2 2 2 9 enable PE1 bgp l2vpn peer 3 3 3 9 enable PE1 bgp l2vpn quit PE1 bgp quit Enable L2VPN PE1 l2vpn enable Configure VSI aaa to use BGP to establish BGP PWs to PE 2 and PE ...

Page 488: ... peer 3 3 3 9 as number 100 PE2 bgp peer 3 3 3 9 connect interface loopback 0 PE2 bgp address family l2vpn PE2 bgp l2vpn peer 1 1 1 9 enable PE2 bgp l2vpn peer 3 3 3 9 enable PE2 bgp l2vpn quit PE2 bgp quit Enable L2VPN PE2 l2vpn enable Configure VSI aaa to use BGP to establish BGP PWs to PE 1 and PE 3 PE2 vsi aaa PE2 vsi aaa auto discovery bgp PE2 vsi aaa auto route distinguisher 1 1 PE2 vsi aaa ...

Page 489: ...o PE 1 and PE 2 PE3 vsi aaa PE3 vsi aaa auto discovery bgp PE3 vsi aaa auto route distinguisher 1 1 PE3 vsi aaa auto vpn target 1 1 PE3 vsi aaa auto signaling protocol bgp PE3 vsi aaa auto bgp site 3 range 10 default offset 0 PE3 vsi aaa auto bgp quit PE3 vsi aaa auto quit PE3 vsi aaa quit Bind GigabitEthernet 2 0 1 to VSI aaa PE3 interface gigabitethernet 2 0 1 PE3 GigabitEthernet2 0 1 xconnect v...

Page 490: ...exthop 2 2 2 9 Local VC Label 1295 Remote VC Label 1025 Link ID 9 Local Label Block 1293 10 0 Remote Label Block 1024 10 0 Export Route Target 1 1 Remote Site ID 3 Offset 0 RD 1 1 PW State Up Encapsulation BGP VPLS MTU 1500 Nexthop 3 3 3 9 Local VC Label 1296 Remote VC Label 1025 Link ID 10 Local Label Block 1293 10 0 Remote Label Block 1024 10 0 Export Route Target 1 1 BGP auto discovery LDP PW c...

Page 491: ...E1 bgp 100 PE1 bgp peer 2 2 2 9 as number 100 PE1 bgp peer 2 2 2 9 connect interface loopback 0 PE1 bgp peer 3 3 3 9 as number 100 PE1 bgp peer 3 3 3 9 connect interface loopback 0 PE1 bgp address family l2vpn PE1 bgp l2vpn peer 2 2 2 9 enable PE1 bgp l2vpn peer 3 3 3 9 enable PE1 bgp l2vpn quit PE1 bgp quit Enable L2VPN PE1 l2vpn enable Configure VSI aaa to use BGP to discover remote PEs and use ...

Page 492: ...erface loopback 0 PE2 bgp peer 3 3 3 9 as number 100 PE2 bgp peer 3 3 3 9 connect interface loopback 0 PE2 bgp address family l2vpn PE2 bgp l2vpn peer 1 1 1 9 enable PE2 bgp l2vpn peer 3 3 3 9 enable PE2 bgp l2vpn quit PE2 bgp quit Enable L2VPN PE2 l2vpn enable Configure VSI aaa to use BGP to discover remote PEs and use LDP to establish LDP PWs to PE 1 and PE 3 PE2 vsi aaa PE2 vsi aaa auto discove...

Page 493: ...nfigure VSI aaa to use BGP to discover remote PEs and use LDP to establish LDP PWs to PE 1 and PE 2 PE3 vsi aaa PE3 vsi aaa auto discovery bgp PE3 vsi aaa auto route distinguisher 1 1 PE3 vsi aaa auto vpn target 1 1 PE3 vsi aaa auto signaling protocol ldp PE3 vsi aaa auto ldp vpls id 100 100 PE3 vsi aaa auto ldp quit PE3 vsi aaa auto quit PE3 vsi aaa quit Bind GigabitEthernet 2 0 1 to VSI aaa PE3 ...

Page 494: ...nication Notification method PW ID FEC Local Remote Local AII 1 1 1 9 2 2 2 9 Remote AII 2 2 2 9 1 1 1 9 PW Type Ethernet Ethernet Group ID 0 0 Label 1555 1555 Control Word Disabled Disabled VCCV CV Type VCCV CC Type MTU 1500 1500 PW Status PW forwarding PW forwarding Peer 3 3 3 9 VPLS ID 100 100 VSI Name aaa PW State Up PW Status Communication Notification method PW ID FEC Local Remote Local AII ...

Page 495: ... view UPE interface loopback 0 UPE LoopBack0 ip address 1 1 1 9 32 UPE LoopBack0 quit UPE mpls lsr id 1 1 1 9 UPE mpls ldp UPE ldp quit Enable L2VPN UPE l2vpn enable Configure VSI aaa to use LDP to establish a U PW to NPE 1 UPE vsi aaa UPE vsi aaa pwsignaling ldp UPE vsi aaa ldp peer 2 2 2 9 pw id 500 UPE vsi aaa ldp 2 2 2 9 500 quit UPE vsi aaa ldp quit UPE vsi aaa quit Bind VSI aaa to GigabitEth...

Page 496: ... 4 4 9 500 quit NPE1 vsi aaa ldp quit NPE1 vsi aaa quit 4 Configure NPE 2 Configure basic MPLS NPE2 system view NPE2 interface loopback 0 NPE2 LoopBack0 ip address 3 3 3 9 32 NPE2 LoopBack0 quit NPE2 mpls lsr id 3 3 3 9 NPE2 mpls ldp NPE2 ldp quit Enable L2VPN NPE2 l2vpn enable Configure VSI aaa that uses LDP as the PW signaling protocol and establish N PWs to NPE 1 and NPE 3 NPE2 vsi aaa NPE2 vsi...

Page 497: ...E3 vsi aaa quit Bind VSI aaa to GigabitEthernet 2 0 1 the interface connected to CE 3 NPE3 interface gigabitethernet 2 0 1 NPE3 GigabitEthernet2 0 1 xconnect vsi aaa NPE3 GigabitEthernet2 0 1 quit Verifying the configuration Verify that PWs in up state have been established on each PE UPE display l2vpn pw verbose VSI Name aaa Peer 2 2 2 9 PW ID 500 Signaling Protocol LDP Link ID 8 PW State Up In L...

Page 498: ... CC VCCV BFD Tunnel Group ID 0x570000001 Tunnel NHLFE IDs 1032 NPE2 display l2vpn pw verbose VSI Name aaa Peer 2 2 2 9 PW ID 500 Signaling Protocol LDP Link ID 8 PW State Up In Label 1275 Out Label 1276 MTU 1500 PW Attributes Main VCCV CC VCCV BFD Tunnel Group ID 0x660000000 Tunnel NHLFE IDs 1031 Peer 4 4 4 9 PW ID 500 Signaling Protocol LDP Link ID 9 PW State Up In Label 1277 Out Label 1277 MTU 1...

Page 499: ...VCCV CC VCCV BFD Tunnel Group ID 0x670000000 Tunnel NHLFE IDs 1032 Hub spoke VPLS configuration example Network requirements Configure a hub spoke VPLS network to centralize management of the traffic from each site The VPLS uses LDP as the PW signaling protocol Figure 128 Network diagram Configuration procedure 1 Configure an IGP and public tunnels on each PE Details not shown 2 Configure Spoke PE...

Page 500: ...E 2 Configure basic MPLS Spoke PE2 system view Spoke PE2 interface loopback 0 Spoke PE2 LoopBack0 ip address 2 2 2 9 32 Spoke PE2 LoopBack0 quit Spoke PE2 mpls lsr id 2 2 2 9 Spoke PE2 mpls ldp Spoke PE2 ldp quit Enable L2VPN Spoke PE2 l2vpn enable Create VSI aaa enable hub spoke capability for the VSI specify the PW signaling protocol as LDP establish a PW to Hub PE and specify the PW as the hub ...

Page 501: ...nnected to the Hub CE as the hub link Hub PE interface gigabitethernet 2 0 1 Hub PE GigabitEthernet2 0 1 xconnect vsi aaa hub Hub PE GigabitEthernet2 0 1 quit Verifying the configuration Verify that PWs in up state have been established on each PE Spoke PE1 display l2vpn pw verbose VSI Name aaa Peer 3 3 3 9 PW ID 500 Signaling Protocol LDP Link ID 8 PW State Up In Label 1276 Out Label 1274 MTU 150...

Page 502: ...quirements To improve reliability of the H VPLS network the UPE establishes a U PW with NPE 1 and NPE 2 The U PW between UPE and NPE 1 is the primary PW and that between UPE and NPE 2 is the backup PW The backup PW works only when the primary PW fails The H VPLS uses LDP as the PW signaling protocol Figure 129 Network diagram CE 3 NPE 3 NPE 1 CE 1 CE 2 NPE 2 UPE GE2 0 1 GE2 0 2 GE2 0 4 12 1 1 1 24...

Page 503: ... 2 2 500 quit UPE vsi aaa ldp quit UPE vsi aaa quit Bind GigabitEthernet 2 0 1 the interface connected to CE 1 to VSI aaa UPE interface gigabitethernet 2 0 1 UPE GigabitEthernet2 0 1 xconnect vsi aaa UPE GigabitEthernet2 0 1 quit Bind GigabitEthernet 2 0 2 the interface connected to CE 2 to VSI aaa UPE interface gigabitethernet 2 0 2 UPE GigabitEthernet2 0 2 xconnect vsi aaa UPE GigabitEthernet2 0...

Page 504: ...aaa pwsignaling ldp NPE2 vsi aaa ldp peer 1 1 1 1 pw id 500 no split horizon NPE2 vsi aaa ldp 1 1 1 1 500 quit NPE2 vsi aaa ldp peer 2 2 2 2 pw id 500 NPE2 vsi aaa ldp 2 2 2 2 500 quit NPE2 vsi aaa ldp peer 4 4 4 4 pw id 500 NPE2 vsi aaa ldp 4 4 4 4 500 quit NPE2 vsi aaa ldp quit NPE2 vsi aaa quit 5 Configure NPE 3 Configure basic MPLS NPE3 system view NPE3 interface loopback 0 NPE3 LoopBack0 ip a...

Page 505: ...abel 1279 Wait to Restore Time 0 sec MTU 1500 PW Attributes Main VCCV CC VCCV BFD Tunnel Group ID 0x260000002 Tunnel NHLFE IDs 1027 Peer 3 3 3 3 PW ID 500 Signaling Protocol LDP Link ID 8 PW State Blocked In Label 1150 Out Label 1279 MTU 1500 PW Attributes Backup VCCV CC VCCV BFD Tunnel Group ID 0x360000003 Tunnel NHLFE IDs 1025 NPE1 display l2vpn pw verbose VSI Name aaa Peer 1 1 1 1 PW ID 500 Sig...

Page 506: ...ling Protocol LDP Link ID 8 PW State Up In Label 1279 Out Label 1150 MTU 1500 PW Attributes Main No split horizon VCCV CC VCCV BFD Tunnel Group ID 0x60000000 Tunnel NHLFE IDs 1026 Peer 2 2 2 2 PW ID 500 Signaling Protocol LDP Link ID 9 PW State Up In Label 1290 Out Label 1280 MTU 1500 PW Attributes Main VCCV CC VCCV BFD Tunnel Group ID 0x160000008 Tunnel NHLFE IDs 1027 Peer 4 4 4 4 PW ID 500 Signa...

Page 507: ... In Label 1279 Out Label 1278 MTU 1500 PW Attributes Main VCCV CC VCCV BFD Tunnel Group ID 0x60000000 Tunnel NHLFE IDs 1026 Peer 3 3 3 3 PW ID 500 Signaling Protocol LDP Link ID 9 PW State Up In Label 1278 Out Label 1278 MTU 1500 PW Attributes Main VCCV CC VCCV BFD Tunnel Group ID 0x160000001 Tunnel NHLFE IDs 1027 ...

Page 508: ...e An MPLS L2VPN access network has the following features Transparency MPLS L2VPN is transparent to users and can be regarded as a physical link that directly connects users to the backbone Cost reduction MPLS L2VPN only requires PEs to identify users and user services and P devices only forward packets based on labels Therefore you can use low end devices as P devices to reduce your investment Fl...

Page 509: ...e improved networking mode the functions of the two devices that connect the MPLS L2VPN and the MPLS L3VPN or IP backbone can be implemented on one device Thus you can reduce the number of devices to be deployed and lower the networking cost and the network deployment complexity Figure 131 Network diagram As shown in Figure 131 the PE Aggregation PE agg device connects the MPLS L2VPN with the MPLS...

Page 510: ... must configure MPLS L2VPN interworking on the user access PE PE 1 and the L2VE interface of the PE agg Configuring conventional L2VPN access to L3VPN or IP backbone As shown in Figure 130 perform the following tasks to configure conventional L2VPN access to L3VPN or IP backbone 1 Configure the MPLS L2VPN Configure PE 1 and PE 2 as PE devices in the MPLS L2VPN Configure CE 1 and PE 3 as CE devices...

Page 511: ...e interface default N A 7 Optional Bring up the interface undo shutdown By default the interface is up Configuring an L3VE interface Step Command Remarks 1 Enter system view system view N A 2 Create an L3VE interface and enter its view interface ve l3vpn interface number By default no L3VE interface is created on the device You can create a maximum of 8192 L3VE interfaces on a device 3 Optional Co...

Page 512: ...d on MPLS labels CE 1 and CE 2 belong to VPN 1 whose route target is 111 1 and RD is 200 1 CE 1 is connected to PE 1 through interface Serial 2 1 0 which uses PPP encapsulation CE 2 is connected to the MPLS L3VPN through interface GigabitEthernet 2 0 1 Perform the following configurations to allow communication between CE 1 and CE 2 Set up an LDP PW between PE 1 and PE agg so that CE 1 can access ...

Page 513: ...0 1 100 2 1 1 24 Configuration procedure 1 Configure IP addresses for interfaces as shown in Table 46 Details not shown 2 Create interfaces VE L2VPN 1 and VE L3VPN 1 on PE agg Create interface VE L2VPN 1 PEagg system view PEagg interface ve l2vpn 1 PEagg VE L2VPN1 quit Create interface VE L3VPN 1 PEagg interface ve l3vpn 1 PEagg VE L3VPN1 quit 3 Configure MPLS L2VPN a Configure OSPF on PE 1 P and ...

Page 514: ... basic MPLS and MPLS LDP on PE 1 P and PE agg Configure PE 1 PE1 mpls lsr id 1 1 1 9 PE1 mpls ldp PE1 ldp lsp trigger all PE1 ldp quit PE1 interface pos 2 2 0 PE1 Pos2 2 0 mpls enable PE1 Pos2 2 0 mpls ldp enable PE1 Pos2 2 0 quit Configure the P device P mpls lsr id 2 2 2 9 P mpls ldp P ldp lsp trigger all P ldp quit P interface pos 2 2 0 P Pos2 2 0 mpls enable P Pos2 2 0 mpls ldp enable P Pos2 2...

Page 515: ... 101 quit On the L2VE interface of PE agg specify the default next hop as 100 1 1 2 PEagg interface ve l2vpn 1 PEagg VE L2VPN1 default nexthop ip 100 1 1 2 PEagg VE L2VPN1 quit On PE agg create a PW that supports interworking in the group and bind VE L2VPN 1 to the PW PEagg xconnect group 1 PEagg xcg 1 connection 1 PEagg xcg 1 1 ac interface ve l2vpn 1 PEagg xcg 1 1 interworking ipv4 PEagg xcg 1 1...

Page 516: ...2 0 quit c On PE agg and PE 2 create VPN instance VPN1 and bind the VPN instance to the interface connected to the CE Configure PE agg PEagg ip vpn instance VPN1 PEagg vpn instance VPN1 route distinguisher 200 1 PEagg vpn instance VPN1 vpn target 111 1 both PEagg vpn instance VPN1 quit PEagg interface ve l3vpn 1 PEagg VE L3VPN1 ip binding vpn instance VPN1 PEagg VE L3VPN1 ip address 100 1 1 2 24 C...

Page 517: ...the peer CE2 bgp 65020 CE2 bgp peer 100 2 1 1 as number 100 CE2 bgp address family ipv4 CE2 bgp ipv4 peer 100 2 1 1 enable CE2 bgp ipv4 import route direct CE2 bgp ipv4 quit CE2 bgp quit Configure PE 2 and specify CE 2 as the peer PE2 bgp 100 PE2 bgp ip vpn instance VPN1 PE2 bgp VPN1 peer 100 2 1 2 as number 65020 PE2 bgp VPN1 address family ipv4 PE2 bgp ipv4 VPN1 peer 100 2 1 2 enable PE2 bgp ipv...

Page 518: ...2 1 2 Ping 100 2 1 2 100 2 1 2 56 data bytes press CTRL_C to break 56 bytes from 100 2 1 2 icmp_seq 0 ttl 128 time 1 073 ms 56 bytes from 100 2 1 2 icmp_seq 1 ttl 128 time 1 428 ms 56 bytes from 100 2 1 2 icmp_seq 2 ttl 128 time 19 367 ms 56 bytes from 100 2 1 2 icmp_seq 3 ttl 128 time 1 013 ms 56 bytes from 100 2 1 2 icmp_seq 4 ttl 128 time 0 684 ms Ping statistics for 100 2 1 2 5 packet s transm...

Page 519: ...ure 1 Configure IP addresses for interfaces as shown in Table 47 Details not shown 2 Create interfaces VE L2VPN 1 and VE L3VPN 1 on PE agg Create interface VE L2VPN 1 PEagg system view PEagg interface ve l2vpn 1 PEagg VE L2VPN1 quit Create interface VE L3VPN 1 and configure an IP address for the interface PEagg interface ve l3vpn 1 PEagg VE L3VPN1 ip address 100 1 1 2 24 PEagg VE L3VPN1 quit 3 Con...

Page 520: ... PEagg ospf 1 quit b Configure basic MPLS and MPLS LDP on PE 1 P and PE agg Configure PE 1 PE1 mpls lsr id 1 1 1 9 PE1 mpls ldp PE1 ldp lsp trigger all PE1 ldp quit PE1 interface pos 2 2 0 PE1 Pos2 2 0 mpls enable PE1 Pos2 2 0 mpls ldp enable PE1 Pos2 2 0 quit Configure the P device P mpls lsr id 2 2 2 9 P mpls ldp P ldp lsp trigger all P ldp quit P interface pos 2 2 0 P Pos2 2 0 mpls enable P Pos...

Page 521: ... vpna ldp 1 1 1 9 500 quit PEagg vsi vpna ldp quit PEagg vsi vpna quit e Bind the AC interface to the VSI on PE 1 and PE agg On PE 1 bind GigabitEthernet 2 0 1 to VSI vpna PE1 interface gigabitethernet 2 0 1 PE1 GigabitEthernet2 0 1 xconnect vsi vpna On PE agg bind VE L2VPN 1 to VSI vpna PEagg interface ve l2vpn 1 PEagg VE L2VPN1 xconnect vsi vpna 4 Configure OSPF process 2 to advertise routing in...

Page 522: ...e to 1500 The following shows the MTU configuration on PE 1 PE1 int pos 2 2 0 PE1 Pos2 2 0 mtu 1500 PE1 Pos2 2 0 shutdown PE1 Pos2 2 0 undo shutdown Verifying the configuration Ping CE 2 from CE 1 to verify their connectivity CE1 ping 100 2 1 2 Ping 100 2 1 2 100 2 1 2 56 data bytes press CTRL_C to break 56 bytes from 100 2 1 2 icmp_seq 0 ttl 128 time 1 073 ms 56 bytes from 100 2 1 2 icmp_seq 1 tt...

Page 523: ...splays the path that an MPLS LSP tunnel or an MPLS TE tunnel travels from the ingress to the egress to locate errors on the tunnel MPLS tracert consecutively sends MPLS echo requests along the LSP tunnel with the TTL increasing from 1 to a specific value Each hop along the tunnel returns an MPLS echo reply to the ingress due to TTL timeout so the ingress can collect information about each hop alon...

Page 524: ...lane and control plane and records the detected errors in system logs You can check the logs to monitor LSP connectivity If both BFD and periodic MPLS tracert are configured for an LSP and the periodic tracert function detects a data plane and control plane inconsistency the device performs the following tasks 1 Deletes the BFD session for the LSP 2 Re establishes the BFD session based on the cont...

Page 525: ...ocal and remote discriminators configured locally are identical with the remote and local discriminators configured on the remote device respectively The source address of the BFD session is the MPLS LSR ID of the local device Before configuring BFD for the LSP tunnel perform the following tasks a Configure an MPLS LSR ID for the local device b Make sure a route is available on the remote device t...

Page 526: ...ec check By default periodic LSP tracert is disabled Configuring MPLS OAM for MPLS TE tunnels To verify MPLS TE tunnel connectivity you can use one of the following methods Use ping mpls te command or the tracert mpls te command to trigger MPLS TE tunnel connectivity verification as needed Configure BFD for the system to automatically verify MPLS TE tunnel connectivity Configuring MPLS ping for MP...

Page 527: ... in dynamic mode the egress node operates in active mode and the ingress node operates in passive mode Executing the bfd session init mode command on the ingress or egress node does not change the node s operating mode If both BFD and FRR are enabled for an MPLS TE tunnel set the BFD detection interval for tunnel connectivity verification to be longer than that for FRR Otherwise the BFD session fo...

Page 528: ...class view 2 Create the PW and reference the PW class created in the previous step for the PW Perform the following task in any view Task Command Use MPLS ping to verify the connectivity of a PW ping mpls a source ip c count exp exp value h ttl value m wait time r reply mode rtos tos value s packet size t time out v pw ip address pw id pw id Configuring BFD for a PW Follow these steps to configure...

Page 529: ...ator local local id remote remote id By default no local and remote discriminators are set Make sure the local discriminator and remote discriminator configured on the local PE are the same as the remote discriminator and local discriminator configured on the remote PE respectively 11 Optional Configure a backup PW specify the PW class for the backup PW and enter backup PW view backup peer ip addr...

Page 530: ...fault no local and remote discriminators are set Make sure the local discriminator and remote discriminator configured on the local PE are the same as the remote discriminator and local discriminator configured on the remote PE respectively 11 Optional Configure a static backup PW specify the PW class for the backup PW and enter VSI static backup PW view backup peer ip address pw id pw id in label...

Page 531: ...e id By default no local and remote discriminators are set Make sure the local discriminator and remote discriminator configured on the local PE are the same as the remote discriminator and local discriminator configured on the remote PE respectively 11 Optional Configure an LDP backup PW specify the PW class for the backup PW and enter VSI LDP backup PW view backup peer ip address pw id pw id pw ...

Page 532: ...0 0 0 0 network 10 1 1 0 0 0 0 255 RouterA ospf 1 area 0 0 0 0 quit RouterA ospf 1 quit Configure Router B RouterB system view RouterB ospf RouterB ospf 1 area 0 RouterB ospf 1 area 0 0 0 0 network 2 2 2 9 0 0 0 0 RouterB ospf 1 area 0 0 0 0 network 10 1 1 0 0 0 0 255 RouterB ospf 1 area 0 0 0 0 network 20 1 1 0 0 0 0 255 RouterB ospf 1 area 0 0 0 0 quit RouterB ospf 1 quit Configure Router C Rout...

Page 533: ...r id 3 3 3 9 RouterC mpls ldp RouterC ldp quit RouterC interface gigabitethernet 2 0 2 RouterC GigabitEthernet2 0 2 mpls enable RouterC GigabitEthernet2 0 2 mpls ldp enable RouterC GigabitEthernet2 0 2 quit 4 Enable BFD for MPLS and configure BFD to verify LSP connectivity Configure Router A RouterA mpls bfd enable RouterA mpls bfd 3 3 3 9 32 Configure Router C RouterC mpls bfd enable RouterC mpls...

Page 534: ...n IP 127 0 0 1 Session State Up Session Role Passive Template Name The output shows that two BFD sessions have been established between Router A and Router C One session verifies the connectivity of the LSP from 3 3 3 9 32 to 1 1 1 9 32 and the other session verifies the connectivity of the LSP from 1 1 1 9 32 to 3 3 3 9 32 ...

Page 535: ...s occurred on the protection tunnel traffic is not switched Signal fail switching A PS is automatically triggered by a signal fail indication The signaling can be BFD detection for MPLS TE tunnels or interface state up down detection through link layer For more information about configuring BFD for MPLS TE tunnels see Configuring MPLS OAM The following shows the protection switching triggers in th...

Page 536: ... switching command or a signal fail triggers protection switching for traffic in one direction PS switches the traffic forwarding tunnel only in this direction The traffic forwarding tunnel in the other direction does not change Bidirectional path switching When an external switching command or a signal fail triggers protection switching for traffic in one direction PS switches the traffic forward...

Page 537: ...e Configuring MPLS OAM Optional Configuring the PSC message sending interval N A Required Configuring traffic forwarding through the protection group Configuring static routing to direct traffic to a tunnel bundle interface Configuring PBR to direct traffic to a tunnel bundle interface Configuring automatic route advertisement to direct traffic to a tunnel bundle interface For more information see...

Page 538: ...default no primary member interface is specified The MPLS TE tunnel for a primary member interface is a working tunnel 4 Specify a backup member interface member interface tunnel tunnel number protection By default no backup member interface is specified The MPLS TE tunnel for a backup member interface is a protection tunnel 5 Configure an IPv4 address for the tunnel bundle interface ip address ip...

Page 539: ...ls traffic is switched to the protection tunnel when the switching holdoff timer expires Traffic is not switched to the protection tunnel if the working tunnel recovers within the holdoff time Disable reverting After the working tunnel recovers the protection group continues to use the protection tunnel as long as the protection group is operating correctly Delay reverting After the working tunnel...

Page 540: ...Configure a switching action protection switch clear force lock manual By default no switching action is configured Configuring the PSC message sending interval The two ends of a tunnel periodically send PSC messages to coordinate the protection state for bidirectional path switching You can prevent PSC messages from occupying too much bandwidth and resources by modifying the sending interval as n...

Page 541: ...umber Display the current state and related information for MPLS protection groups display mpls protection tunnel bundle number verbose Display information about tunnel bundle interfaces and their member interfaces display tunnel bundle number Clear tunnel bundle interface statistics reset counters interface tunnel bundle number MPLS protection switching configuration example Network requirements ...

Page 542: ...2 Display tunnel interface information on Router A The output shows that the tunnel interface is up This example uses Tunnel 1 RouterA display interface tunnel 1 Tunnel1 Current state UP Line protocol state UP Description Tunnel1 Interface Bandwidth 64kbps Maximum Transmit Unit 1496 Internet Address is 10 1 10 1 24 Primary Tunnel source unknown destination 4 4 4 4 Tunnel TTL 255 Tunnel protocol tr...

Page 543: ...01 1 24 Specify tunnel interface Tunnel 1 as the primary member interface and Tunnel 2 as the backup member interface RouterA Tunnel Bundle0 member interface tunnel 1 RouterA Tunnel Bundle0 member interface tunnel 2 protection RouterA Tunnel Bundle0 quit 4 Configure BFD for the protection group Enable BFD for MPLS RouterA mpls bfd enable Enable BFD for the primary member interface Tunnel 1 to test...

Page 544: ...CRLSP Tunnel Bundle0 Display information about local LSPs for the tunnel bundle interface on Router A RouterA display mpls lsp protocol local verbose Destination 4 4 4 4 FEC Tunnel B0 Protocol TE LSR Type Ingress Service NHLFE ID 536870912 State Active Out Interface Tun1 BkInterface Tun2 Display MPLS protection group information on Router A RouterA display mpls protection Total number of protectio...

Page 545: ...ast one x y Asterisk marked square brackets enclose optional syntax choices separated by vertical bars from which you select one choice multiple choices or none 1 n The argument or keyword and argument combination before the ampersand sign can be entered 1 to n times A line that starts with a pound sign is comments GUI conventions Convention Description Boldface Window names button names field nam...

Page 546: ... Represents an access controller a unified wired WLAN module or the access controller engine on a unified wired WLAN switch Represents an access point Represents a wireless terminator unit Represents a wireless terminator Represents a mesh access point Represents omnidirectional signals Represents directional signals Represents a security product such as a firewall UTM multiservice security gatewa...

Page 547: ...s provide a mechanism for accessing software updates through the product interface Review your product documentation to identify the recommended software update method To download product updates go to either of the following Hewlett Packard Enterprise Support Center Get connected with updates page www hpe com support e updates Software Depot website www hpe com support softwaredepot To view and u...

Page 548: ...r self repair CSR programs allow you to repair your product If a CSR part needs to be replaced it will be shipped directly to you so that you can install it at your convenience Some parts do not qualify for CSR Your Hewlett Packard Enterprise authorized service provider will determine whether a repair can be accomplished by CSR For more information about CSR contact your local service provider or ...

Page 549: ...number edition and publication date located on the front cover of the document For online help content include the product name product version help edition and publication date located on the legal notices page ...

Page 550: ...ype advertisement 7 MPLS L2VPN BGP label block information advertisement 416 MPLS L3VPN basics 211 MPLS L3VPN HoVPN 226 MPLS L3VPN route advertisement 190 MPLS TE attribute advertisement 72 MPLS TE CRLSP dynamic establishment 71 MPLS TE link attribute IGP TE extension 86 MPLS TE link attribute IS IS TE 87 MPLS TE link attribute OSPF TE 86 MPLS TE traffic forwarding automatic route advertisement fo...

Page 551: ... bypass tunnel on PLR automatic setup 103 MPLS L2VPN pseudowire VCCV auto mode 412 MPLS TE auto FRR configuration 144 MPLS TE automatic bandwidth adjustment 76 92 MPLS TE traffic forwarding automatic route advertisement forwarding adjacency 74 MPLS TE traffic forwarding automatic route advertisement IGP shortcut 74 MPLS TE tunnel tunnel bundle traffic direction automatic route advertisement 97 MPL...

Page 552: ... BGP PW creation 417 MPLS L2VPN BGP PW remote CCC connection 418 MPLS L2VPN remote CCC connection configuration 440 MPLS L3VPN 242 MPLS L3VPN basics 242 MPLS L3VPN BGP AS number substitution 316 MPLS L3VPN BGP AS number substitution SoO attribute 206 238 320 MPLS L3VPN BGP VPNv4 route control 219 MPLS L3VPN BGP OSPF interaction 204 MPLS L3VPN carrier s carrier different ASs 282 MPLS L3VPN carrier ...

Page 553: ...LS L3VPN OSPF sham link creation 346 IPv6 MPLS L3VPN PE CE EBGP 338 IPv6 MPLS L3VPN PE CE IBGP 339 IPv6 MPLS L3VPN PE CE IPv6 IS IS 337 IPv6 MPLS L3VPN PE CE OSPFv3 336 IPv6 MPLS L3VPN PE CE RIPng 335 IPv6 MPLS L3VPN PE CE routing 335 IPv6 MPLS L3VPN PE CE static routing 335 IPv6 MPLS L3VPN routing information advertisement 331 MPLS L2VPN AC configuration 413 MPLS L2VPN customer edge device CE 404...

Page 554: ...MPLS L3VPN loopback interface 345 IPv6 MPLS L3VPN MCE 391 IPv6 MPLS L3VPN MCE routing 346 IPv6 MPLS L3VPN MCE PE EBGP 354 IPv6 MPLS L3VPN MCE PE IBGP 354 IPv6 MPLS L3VPN MCE PE IPv6 IS IS 353 IPv6 MPLS L3VPN MCE PE IPv6 static routing 351 IPv6 MPLS L3VPN MCE PE OSPFv3 352 IPv6 MPLS L3VPN MCE PE RIPng 352 IPv6 MPLS L3VPN MCE PE routing 351 IPv6 MPLS L3VPN MCE VPN site EBGP 349 IPv6 MPLS L3VPN MCE V...

Page 555: ...N LDP PW redundancy 420 MPLS L2VPN local connection 423 MPLS L2VPN local connection IP interworking 424 MPLS L2VPN multi segment PW configuration inter domain 447 MPLS L2VPN multi segment PW configuration intra domain 444 MPLS L2VPN PW 415 MPLS L2VPN PW class 415 MPLS L2VPN PW redundancy 419 MPLS L2VPN remote CCC connection 440 MPLS L2VPN static PW 415 426 MPLS L2VPN static PW redundancy 420 MPLS ...

Page 556: ...E tunnel 516 MPLS protection switching PS 525 527 531 MPLS PS protection group attributes 529 MPLS PS protection group command switching 530 MPLS PSC message send interval 530 MPLS TE 71 81 106 MPLS TE auto FRR 144 MPLS TE automatic bandwidth adjustment 92 MPLS TE bidirectional tunnel 98 128 MPLS TE CRLSP backup 99 134 MPLS TE CRLSP flooding interval 91 MPLS TE CRLSP flooding thresholds 91 MPLS TE...

Page 557: ... redundant static PWs 466 VPLS VSI 460 connecting MPLS L2VPN BGP PW remote CCC connection 418 MPLS L2VPN cross connect configuration 415 MPLS L2VPN cross connect interworking 421 MPLS L2VPN cross connect AC binding 419 MPLS L2VPN local connection establishment 407 MPLS L2VPN remote CCC connection 440 MPLS L2VPN remote connection establishment 406 Constraint based Routed Label Switched Path See CRL...

Page 558: ... binding 419 CSPF MPLS TE CRLSP flooding 91 MPLS TE path calculation 72 customer edge device See CE D detecting LDP loop detection 33 MPLS TE FRR node fault detection 104 MPLS TE loop detection 92 device customer edge device See CE IPv6 MPLS L3VPN 332 IPv6 MPLS L3VPN basics 332 IPv6 MPLS L3VPN BGP VPNv6 route control 341 IPv6 MPLS L3VPN configuration 330 IPv6 MPLS L3VPN inter AS IPv6 VPN 342 IPv6 ...

Page 559: ... 513 MPLS TE CRLSP establishment 71 MPLS TE PCE discovery 94 MPLS TE tunnel configuration dynamic CRLSP 85 E EBGP IPv6 MPLS L3VPN MCE PE EBGP 354 IPv6 MPLS L3VPN MCE PE routing 351 IPv6 MPLS L3VPN MCE VPN site EBGP 349 IPv6 MPLS L3VPN PE CE EBGP 338 MPLS L3VPN hub spoke network 251 MPLS L3VPN inter AS VPN option B 194 195 MPLS L3VPN inter AS VPN option C 194 196 MPLS L3VPN MCE PE EBGP 236 MPLS L3V...

Page 560: ...ibutes 213 Extended Resource Reservation Protocol See RSVP TE extending MPLS L3VPN OSPF VPN extension 204 RSVP hello extension 169 extranet MPLS L3VPN networking scheme 193 F fast reroute Use FRR FEC IPv4 LDP configuration 39 IPv4 LDP label acceptance control 43 IPv4 LDP label advertisement control 47 IPv4 LDP LSP configuration 39 IPv6 LDP configuration 55 IPv6 LDP label acceptance control 61 IPv6...

Page 561: ...n VPNv4 route route backup 323 MPLS L3VPN FRR IPv4 route backup VPNv4 route 209 MPLS L3VPN FRR VPNv4 route backup IPv4 route 208 MPLS L3VPN FRR VPNv4 route backup VPNv4 route 208 MPLS TE 77 MPLS TE auto FRR configuration 144 MPLS TE FRR bypass CRLSP 77 MPLS TE FRR bypass tunnel on PLR configuration restrictions 102 MPLS TE FRR configuration 100 MPLS TE FRR configuration on PLR 100 MPLS TE FRR CRLS...

Page 562: ...ion 237 MPLS L3VPN MCE VPN site IBGP 233 MPLS L3VPN PE CE IBGP 217 ICMP MPLS TTL expired message send 9 identifier LDP 17 IETF DS TE MPLS TE DiffServ aware TE mode 78 MPLS TE IETF DS TE configuration 150 IGP LDP IGP synchronization 23 35 MPLS TE attribute advertisement 72 MPLS TE CRLSP flooding 91 MPLS TE link attribute advertisement IGP TE extension 86 MPLS TE link attribute advertisement IS IS T...

Page 563: ...cess configuration 502 LDP backoff 29 LDP configuration 17 25 LDP FRR configuration 37 LDP GR 21 LDP GR configuration 35 LDP label acceptance policy 32 LDP label advertisement policy 31 LDP label control 19 LDP label distribution 19 LDP label distribution control mode 31 LDP loop detection 33 LDP LSP generation policy 30 LDP MD5 authentication 29 LDP NSR 22 LDP NSR configuration 35 LDP operation 1...

Page 564: ... site static routing 346 multirole host configuration 344 385 multirole host static route 345 network schemes 331 OSPF sham link 345 OSPF sham link creation 346 OSPFv3 sham link 387 packet forwarding 330 PBR application 344 PBR configuration 344 PE CE EBGP 338 PE CE IBGP 339 PE CE IPv6 IS IS 337 PE CE OSPFv3 336 PE CE RIPng 335 PE CE routing 335 PE CE static routing 335 PE PE routing 340 protocols...

Page 565: ...ration 460 LDP backoff parameter configuration 29 BGP unicast route redistribution 30 compatibility information 25 configuration 17 25 display 38 enable 26 enable globally 26 enable on interface 26 FEC 17 FEC label mapping 17 FRR configuration 23 37 GR 21 GR configuration 35 GR helper 21 GR restarter 21 hello parameters 26 identifier 17 IGP synchronization 23 35 IP backbone access LDP VPLS 508 IPv...

Page 566: ...ham link 206 227 307 MPLS L3VPN OSPF sham link creation 228 MPLS TE attribute advertisement 72 MPLS TE FRR CRLSP link protection 77 MPLS TE link attribute 85 MPLS TE link attribute advertisement IGP TE extension 86 MPLS TE link attribute advertisement IS IS TE 87 MPLS TE link attribute advertisement OSPF TE 86 load sharing MPLS TE tunnel load sharing 95 local MPLS L2VPN connection 423 MPLS L2VPN c...

Page 567: ... tunnel selection order configuration 185 LSR IPv4 LDP configuration 39 IPv4 LDP label acceptance control 43 IPv4 LDP label advertisement control 47 IPv4 LDP LSP configuration 39 IPv6 LDP configuration 55 IPv6 LDP label acceptance control 61 IPv6 LDP label advertisement control 65 IPv6 LDP LSP configuration 55 LDP configuration 17 25 LDP FEC 17 LDP FEC label mapping 17 LDP GR 21 LDP identifier 17 ...

Page 568: ...ion 311 multi VPN instance 209 routing configuration 229 MD5 LDP authentication configuration 29 RSVP authentication 167 message CRLSP setup 166 LDP advertisement 17 LDP discovery 17 LDP notification 17 LDP session 17 MPLS PSC message send interval 530 MPLS TTL expired message send 9 RSVP authentication 167 RSVP refresh message 166 RSVP reliable message delivery 166 RSVP Srefresh mechanism 166 RSV...

Page 569: ... improved access 499 L2VPN improved access configuration 500 502 L3VPN See MPLS L3VPN L3VPN access LDP MPLS L2VPN 502 label forwarding statistics enable for LSPs 10 label forwarding statistics enable for VPN instance 10 LDP backoff 29 LDP BGP unicast route redistribution 30 LDP configuration 17 25 LDP display 38 LDP FRR 23 LDP FRR configuration 37 LDP GR 21 LDP GR configuration 35 LDP hello parame...

Page 570: ...P PW remote CCC connection 418 compatibility information 412 configuration 404 412 423 control word 409 cross connect configuration 415 cross connect interworking configuration 421 cross connect AC binding 419 display 422 enable 413 Ethernet over MPLS 407 H VPLS configuration MPLS access 485 H VPLS UPE dual homing configuration 492 interworking 409 IP interworking over LDP PW configuration 433 IP ...

Page 571: ...ck address redistribution 228 loopback interface 228 maintain 240 MCE 209 MCE configuration 311 MCE routing configuration 229 MCE PE EBGP 236 MCE PE IBGP 237 MCE PE IS IS 235 MCE PE OSPF 235 MCE PE RIP 234 MCE PE routing 234 MCE PE static routing 234 MCE VPN site EBGP 231 MCE VPN site IBGP 233 MCE VPN site IS IS 231 MCE VPN site OSPF 230 MCE VPN site RIP 230 MCE VPN site routing 229 MCE VPN site s...

Page 572: ...MPLS L3VPN carrier s carrier different ASs 282 MPLS L3VPN carrier s carrier same AS 274 MPLS L3VPN configuration 188 211 MPLS L3VPN HoVPN 300 MPLS L3VPN inter AS option A 258 MPLS L3VPN inter AS option B 262 MPLS L3VPN inter AS option C 267 MPLS L3VPN MCE configuration 311 MPLS L3VPN multirole host 298 MPLS L3VPN nested VPN 289 MPLS L3VPN OSPF sham link 307 MPLS L3VPN GRE tunnel 247 MPLS TE attrib...

Page 573: ...rder 186 protection switching PS configuration 525 527 531 protection switching mode 525 protocols and standards 80 PS enable 527 PS group creation 527 PS path switching mode 526 PS protection group attributes 529 PS protection group command switching 530 PS triggering mode 525 PSC message send interval 530 route pinning 76 RSVP authentication 167 170 RSVP BFD enable 172 RSVP configuration 165 168...

Page 574: ... BGP VPNv6 route control 341 IPv6 MPLS L3VPN carrier s carrier same AS 377 IPv6 MPLS L3VPN configuration 356 IPv6 MPLS L3VPN functions 331 IPv6 MPLS L3VPN inter AS IPv6 VPN 342 IPv6 MPLS L3VPN inter AS IPv6 VPN option A 343 IPv6 MPLS L3VPN inter AS IPv6 VPN option C 343 IPv6 MPLS L3VPN inter AS option A 366 IPv6 MPLS L3VPN inter AS option C 371 IPv6 MPLS L3VPN loopback interface 345 IPv6 MPLS L3VP...

Page 575: ...LDP OSPF synchronization 36 MPLS architecture 2 MPLS control plane 2 MPLS egress label type advertisement 7 MPLS FEC 1 MPLS FEC label format 1 MPLS forwarding plane 2 MPLS forwarding process 4 MPLS forwarding statistics 9 MPLS FTN forwarding statistics 9 MPLS L2VPN AC configuration 413 MPLS L2VPN BGP PW 416 436 MPLS L2VPN BGP PW remote CCC connection 418 MPLS L2VPN control word 409 MPLS L2VPN cros...

Page 576: ...P 231 MPLS L3VPN MCE VPN site IBGP 233 MPLS L3VPN MCE VPN site IS IS 231 MPLS L3VPN MCE VPN site OSPF 230 MPLS L3VPN MCE VPN site RIP 230 MPLS L3VPN MCE VPN site routing 229 MPLS L3VPN MCE VPN site static routing 229 MPLS L3VPN MP BGP 190 MPLS L3VPN multirole host 201 298 MPLS L3VPN multirole host configuration 225 MPLS L3VPN multirole host static route 226 MPLS L3VPN nested VPN 200 224 289 MPLS L...

Page 577: ...rwarding 74 96 MPLS TE tunnel automatic bandwidth adjustment 76 MPLS TE tunnel configuration dynamic CRLSP 85 MPLS TE tunnel configuration static CRLSP 84 MPLS TE tunnel establishment RSVP TE 111 MPLS TE tunnel establishment static CRLSP 106 MPLS TE tunnel interface 83 MPLS TE tunnel load sharing 95 MPLS TE tunnel reoptimization 76 MPLS TE tunnel setup 91 MPLS TE tunnel with RSVP TE 89 MPLS TTL pr...

Page 578: ...6 IPv6 MPLS L3VPN BGP AS number substitution SoO attribute 355 401 MPLS L3VPN BGP AS number substitution 316 MPLS L3VPN BGP AS number substitution SoO attribute 206 238 320 O OAM MPLS L2VPN PW VCCV 412 MPLS OAM See MPLS OAM MPLS TE bidirectional tunnel 80 object RSVP TE object types 165 optimizing MPLS TE CRLSP tunnel reoptimization 90 MPLS TE tunnel reoptimization 76 ordinary CRLSP backup MPLS TE...

Page 579: ...LS L3VPN configuration 226 MPLS L3VPN multirole host 201 225 344 PCC MPLS TE CRLSP establishment PCE path calculation 73 MPLS TE PCEP session parameters 95 MPLS TE tunnel CRLSP calculation by PCE 93 PCE MPLS TE backup CRLSP establishment PCE path calculation 94 MPLS TE CRLSP establishment PCE path calculation 73 94 MPLS TE inter area tunnel establishment CRLSP PCE calculation 124 MPLS TE PCE confi...

Page 580: ...N PE CE static routing 214 MPLS L3VPN PE PE routing 218 VPLS architecture 453 peer LDP hello parameters 26 LDP LSR 17 LDP peer maintenance 18 LDP session parameters 27 LDP session protection 34 LDP targeted hello timer 27 penultimate hop popping Use PHP per interface label space LDP 17 per platform label space LDP 17 PHP MPLS 4 ping MPLS OAM 513 MPLS OAM BFD for PW 518 MPLS OAM configuration 513 M...

Page 581: ...VPN inter AS IPv6 VPN option C ASBR 344 configuring IPv6 MPLS L3VPN inter AS IPv6 VPN option C PE 343 configuring IPv6 MPLS L3VPN inter AS IPv6 VPN option C routing policy 344 configuring IPv6 MPLS L3VPN inter AS option A 366 configuring IPv6 MPLS L3VPN inter AS option C 371 configuring IPv6 MPLS L3VPN loopback interface 345 configuring IPv6 MPLS L3VPN MCE 391 configuring IPv6 MPLS L3VPN MCE routi...

Page 582: ...et DSCP value 37 configuring LDP session parameter 27 configuring LDP session parameter Basic Discovery 27 configuring LDP session protection 34 configuring LDP IGP synchronization 35 configuring LDP IS IS synchronization 37 configuring LDP OSPF synchronization 36 configuring LSP targeted hello timer 27 configuring MPLS basics 5 configuring MPLS L2VPN 412 configuring MPLS L2VPN AC 413 configuring ...

Page 583: ...guring MPLS L3VPN MCE PE OSPF 235 configuring MPLS L3VPN MCE PE RIP 234 configuring MPLS L3VPN MCE PE routing 234 configuring MPLS L3VPN MCE PE static routing 234 configuring MPLS L3VPN MCE VPN site EBGP 231 configuring MPLS L3VPN MCE VPN site IBGP 233 configuring MPLS L3VPN MCE VPN site IS IS 231 configuring MPLS L3VPN MCE VPN site OSPF 230 configuring MPLS L3VPN MCE VPN site RIP 230 configuring ...

Page 584: ... 95 configuring MPLS TE RSVP TE RSVP resource reservation style 93 configuring MPLS TE traffic forwarding 96 configuring MPLS TE tunnel dynamic CRLSP 85 configuring MPLS TE tunnel static CRLSP 84 configuring MPLS TE tunnel affinity attribute 87 configuring MPLS TE tunnel constraints 87 configuring MPLS TE tunnel constraints bandwidth 87 configuring MPLS TE tunnel CRLSP calculation by PCE 93 config...

Page 585: ... displaying LDP 38 displaying MPLS 11 displaying MPLS L2VPN 422 displaying MPLS L3VPN 240 displaying MPLS OAM 521 displaying MPLS static CRLSP 159 displaying MPLS TE 105 displaying MPLS TE protection switching PS 530 displaying RSVP 172 displaying static LSP 14 displaying tunnel information 184 displaying VPLS 468 enabling L2VPN PW SNMP notification 422 enabling LDP 26 enabling LDP globally 26 ena...

Page 586: ...30 mode 525 path switching mode 526 protection group attributes 529 protection group command switching 530 protocols and standards 526 PSC message send interval 530 triggering mode 525 protocols and standards IPv6 MPLS L3VPN 332 LDP 25 MPLS 5 MPLS L3VPN 210 MPLS OAM 514 MPLS protection switching PS 526 MPLS TE 80 RSVP 168 provider device See P device edge device See PE PSC MPLS TE bidirectional tu...

Page 587: ...PN loopback address 228 redundancy H VPLS UPE 457 MPLS L2VPN LDP PW redundancy 420 MPLS L2VPN PW redundancy 410 419 MPLS L2VPN static PW redundancy 420 VPLS UPE dual homing redundant LDP PWs 467 VPLS UPE dual homing redundant static PWs 466 refreshing RSVP refresh 168 RSVP refresh mechanism 166 RSVP Srefresh configuration 169 RSVP Srefresh mechanism 166 reliable message delivery RSVP 166 169 remot...

Page 588: ...8 IPv6 MPLS L3VPN MCE VPN site OSPFv3 347 IPv6 MPLS L3VPN MCE VPN site RIPng 347 IPv6 MPLS L3VPN MCE VPN site routing 346 IPv6 MPLS L3VPN MCE VPN site static routing 346 IPv6 MPLS L3VPN multirole host 385 IPv6 MPLS L3VPN multirole host static route 345 IPv6 MPLS L3VPN network schemes 331 IPv6 MPLS L3VPN OSPFv3 sham link 387 IPv6 MPLS L3VPN packet forwarding 330 IPv6 MPLS L3VPN PE CE EBGP 338 IPv6 ...

Page 589: ...ment 3 MPLS LSR 1 MPLS PHP 4 MPLS TE auto FRR configuration 144 MPLS TE bidirectional tunnel 128 MPLS TE configuration 71 81 106 MPLS TE CRLSP backup 134 MPLS TE FRR 77 MPLS TE FRR manual bypass tunnel 138 MPLS TE IETF DS TE configuration 150 MPLS TE inter AS tunnel establishment RSVP TE 117 MPLS TE make before break 75 MPLS TE route pinning 76 MPLS TE traffic forwarding 74 96 MPLS TE tunnel estab...

Page 590: ...DP 17 LDP message type 17 LDP protection 34 LDP session establishment 18 LDP session maintenance 18 LDP session parameters 27 LDP session reset 38 MPLS OAM BFD dynamic mode 513 MPLS OAM BFD static mode 513 MPLS TE PCEP session parameters 95 RSVP TE SESSION_ATTRIBUTE object 165 setting LDP session reset 38 setting up MPLS E FRR bypass tunnel on PLR automatic 103 MPLS E FRR bypass tunnel on PLR manu...

Page 591: ...istics 9 MPLS label forwarding statistics for LSPs 10 MPLS label forwarding statistics for VPN instance 10 strict explicit path MPLS TE configuration 88 substituting IPv6 MPLS L3VPN BGP AS number substitution 396 IPv6 MPLS L3VPN BGP AS number substitution SoO attribute 401 IPv6 MPLS L3VPN BGP AS SoO attribute 355 MPLS L3VPN BGP AS number substitution 316 MPLS L3VPN BGP AS number substitution SoO a...

Page 592: ...2 184 information display 184 tunneling exclusive tunnel configuration 184 IPv6 MPLS L3VPN GRE tunnel 363 MPLS L2VPN public tunnel 404 MPLS L3VPN GRE tunnel 247 MPLS OAM BFD for LSP 522 MPLS OAM configuration 513 MPLS OAM for LSP tunnel configuration 514 MPLS OAM for MPLS TE tunnel 516 MPLS protection switching PS configuration 525 527 531 MPLS PSC message send interval 530 MPLS TE auto FRR config...

Page 593: ...MPLS OAM for PW 517 virtual private LAN service Use VPLS switch instance Use VSI Virtual Circuit Connectivity Verification See VCCV VLAN MPLS L2VPN AC Layer 3 interface VLAN encapsulation 414 MPLS L2VPN BGP PW 436 MPLS L2VPN LDP PW 429 MPLS L2VPN mode 407 MPLS L2VPN PW LDP PW IP interworking 433 VPLS VLAN AC interface 460 VPLS AC configuration 460 architecture 453 BGP label block information adver...

Page 594: ...nable 468 static PW configuration 461 470 unicast traffic flooding 455 unicast traffic forwarding 455 UPE dual homing redundant LDP PWs 467 UPE dual homing redundant static PWs 466 UPE dual homing configuration 466 VSI configuration 460 VSI AC binding 466 VPN exclusive tunnel configuration 184 hierarchy of VPN See HoVPN IPv6 MPLS L3VPN See IPv6 MPLS L3VPN Layer 2 MPLS VPN See MPLS L2VPN MPLS L3VPN...

Reviews:

No comments