manualshive.com logo in svg

HPE FlexFabric 5950 Series, Configuration Manual

Looking for the Installation Manual for the HP FlexFabric 5950 Series? Look no further! Download the comprehensive manual for free from our website, ensuring a seamless installation process. Get the most out of your product and find all the necessary instructions conveniently at manualshive.com.

Share
Download
background image

 

HPE FlexFabric 5950 Switch Series 

MPLS Configuration Guide 

 

 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Part number: 5200-0827 
Software version: Release 6106 and later

 

Document version: 6W100-20160513

 

 

Summary of Contents for FlexFabric 5950 Series

Page 1: ...HPE FlexFabric 5950 Switch Series MPLS Configuration Guide Part number 5200 0827 Software version Release 6106 and later Document version 6W100 20160513 ...

Page 2: ...nd 12 212 Commercial Computer Software Computer Software Documentation and Technical Data for Commercial Items are licensed to the U S Government under vendor s standard commercial license Links to third party websites take you outside the Hewlett Packard Enterprise website Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise ...

Page 3: ... example 13 Network requirements 13 Configuration restrictions and guidelines 14 Configuration procedure 14 Verifying the configuration 15 Configuring LDP 17 Overview 17 Terminology 17 LDP messages 17 LDP operation 18 Label distribution and control 19 LDP GR 20 LDP IGP synchronization 22 LDP over MPLS TE 23 Protocols 23 LDP configuration task list 23 Enabling LDP 24 Enabling LDP globally 24 Enabli...

Page 4: ...5 Enabling MPLS TE 77 Configuring a tunnel interface 77 Configuring DS TE 78 Configuring an MPLS TE tunnel to use a static CRLSP 78 Configuring an MPLS TE tunnel to use a dynamic CRLSP 79 Configuration task list 79 Configuring MPLS TE attributes for a link 79 Advertising link TE attributes by using IGP TE extension 80 Configuring MPLS TE tunnel constraints 81 Establishing an MPLS TE tunnel by usin...

Page 5: ... 158 RSVP refresh mechanism 158 RSVP authentication 159 RSVP GR 159 Protocols and standards 160 RSVP configuration task list 160 Enabling RSVP 160 Configuring RSVP refresh 160 Configuring RSVP Srefresh and reliable RSVP message delivery 161 Configuring RSVP hello extension 161 Configuring RSVP authentication 162 Setting a DSCP value for outgoing RSVP packets 163 Configuring RSVP GR 164 Enabling BF...

Page 6: ...uration examples 221 Configuring basic MPLS L3VPN 221 Configuring a hub spoke network 227 Configuring MPLS L3VPN inter AS option A 233 Configuring MPLS L3VPN inter AS option B 238 Configuring MPLS L3VPN inter AS option C 243 Configuring MPLS L3VPN carrier s carrier in the same AS 250 Configuring MPLS L3VPN carrier s carrier in different ASs 258 Configuring nested VPN 265 Configuring HoVPN 274 Conf...

Page 7: ...Configuring BFD for LSPs 361 Configuring periodic MPLS tracert for LSPs 362 Configuring MPLS OAM for MPLS TE tunnels 362 Configuring MPLS ping for MPLS TE tunnels 362 Configuring MPLS tracert for MPLS TE tunnels 362 Configuring BFD for MPLS TE tunnels 363 Displaying MPLS OAM 363 BFD for LSP configuration example 364 Network requirements 364 Configuration procedure 364 Verifying the configuration 3...

Page 8: ...E and a PE 640H397 302HDisplaying and maintaining IPv6 MCE 641H400 303HIPv6 MCE configuration example 642H400 304HNetwork requirements 643H400 305HConfiguration procedure 644H401 306HVerifying the configuration 645H405 307HDocument conventions and icons 646H407 308HConventions 647H407 309HNetwork topology icons 648H408 310HSupport and other resources 649H409 311HAccessing Hewlett Packard Enterpris...

Page 9: ...h as VPN traffic engineering and QoS 136BBasic concepts 317BFEC MPLS groups packets with the same characteristics such as packets with the same destination or service class into a forwarding equivalence class FEC Packets of the same FEC are handled in the same way on an MPLS network 318BLabel A label uniquely identifies an FEC and has local significance Figure 1 Format of a label A label is encaps...

Page 10: ... forwarding the packet The information includes the label operation type the outgoing label value and the next hop 322BControl plane and forwarding plane An MPLS node consists of a control plane and a forwarding plane Control plane Assigns labels distributes FEC label mappings to neighbor LSRs creates the LFIB and establishes and removes LSPs Forwarding plane Forwards packets according to the LFIB...

Page 11: ... and maintains LSPs Label distribution protocols include protocols designed specifically for label distribution such as the Label Distribution Protocol LDP and protocols extended to support label distribution such as MP BGP and RSVP TE In this document the term label distribution protocols refers to all protocols for label distribution The term LDP refers to the RFC 5036 LDP A dynamic LSP is estab...

Page 12: ...ollows a Identifies the LFIB entry that has an incoming label of 40 b Uses the outgoing label 50 of the entry to replace label 40 in the packet c Forwards the labeled packet out of the outgoing interface VLAN interface 3 to the next hop LSR Device D 3 When receiving the labeled packet Device D the egress LSR processes the packet as follows a Identifies the LFIB entry that has an incoming label of ...

Page 13: ... packet to the egress node The egress node directly forwards the packet Sometimes the egress node must use the TC field in the label to perform QoS To keep the TC information you can configure the egress node to send the penultimate node an explicit null label of 0 If an incoming packet matches an LFIB entry containing the explicit null label the penultimate hop replaces the top label value with v...

Page 14: ...configured An LSR ID must be unique in an MPLS network and in IP address format As a best practice use the IP address of a loopback interface as an LSR ID 3 Enter the view of the interface that needs to perform MPLS forwarding interface interface type interface number N A 4 Enable MPLS on the interface mpls enable By default MPLS is disabled on the interface 17B Setting MPLS MTU MPLS adds the labe...

Page 15: ...d packet If the egress node advertises an implicit null label the penultimate hop directly pops the top label of a matching packet If the egress node advertises an explicit null label the penultimate hop swaps the top label value of a matching packet with the explicit null label If the egress node advertises a non null label the penultimate hop swaps the top label of a matching packet with the lab...

Page 16: ...ases the label TTL value by 1 The LSR that pops the label copies the remaining label TTL value back to the IP TTL of the packet The IP TTL value can reflect how many hops the packet has traversed in the MPLS network The IP tracert facility can show the real path along which the packet has traveled Figure 6 TTL propagation When TTL propagation is disabled the ingress node sets the label TTL to 255 ...

Page 17: ...s 1 Enter system view system view N A 2 Enable sending MPLS TTL expired messages mpls ttl expiration enable By default this feature is enabled 21B Enabling MPLS forwarding statistics MPLS label forwarding for LSPs forwards a labeled packet based on its incoming label Perform this task to enable MPLS label forwarding statistics for LSPs and set the statistics collection interval Then you can use th...

Page 18: ...iew N A 2 Enable SNMP notifications for MPLS snmp agent trap enable mpls By default SNMP notifications for MPLS are enabled 24B Displaying and maintaining MPLS Execute display commands in any view and reset commands in user view Task Command Display MPLS interface information display mpls interface interface type interface number Display usage information for MPLS labels display mpls label label v...

Page 19: ...ls forwarding nhlfe nid slot slot number Clear MPLS forwarding statistics for the specified LSPs reset mpls statistics all vpn instance vpn instance name ipv4 ipv4 address mask length ipv6 ipv6 address prefix length static te ingress lsr id tunnel id ...

Page 20: ...tion address the FEC and the next hop or the outgoing interface On each transit node you must specify the incoming label the outgoing label and the next hop or the outgoing interface On the egress node you must specify the incoming label You can associate a static LSP with an LDP LSP to simplify packet processing when the following conditions are met Packets are forwarded over the static LSP and t...

Page 21: ...abel nexthop next hop ip address outgoing interface interface type interface number out label out label If you specify a next hop for the static LSP make sure the transit node has an active route to the specified next hop address 4 Configure the egress node of the static LSP static lsp egress lsp name in label in label destination ip address mask mask length You do not need to configure this comma...

Page 22: ...ddress of each LSP On Switch A configure a static route to network 21 1 1 0 24 SwitchA system view SwitchA ip route static 21 1 1 0 24 10 1 1 2 On Switch C configure a static route to network 11 1 1 0 24 SwitchC system view SwitchC ip route static 11 1 1 0 255 255 255 0 20 1 1 1 3 Configure basic MPLS on the switches Configure Switch A SwitchA mpls lsr id 1 1 1 9 SwitchA interface vlan interface 2...

Page 23: ...egress node Switch A SwitchA static lsp egress CtoA in label 70 145BVerifying the configuration Display static LSP information on switches for example on Switch A SwitchA display mpls static lsp Total 2 Name FEC In Out Label Nexthop Out Interface State AtoC 21 1 1 0 24 NULL 30 10 1 1 2 Up CtoA 70 NULL Up Test the connectivity of the LSP from Switch A to Switch C SwitchA ping mpls a 11 1 1 1 ipv4 2...

Page 24: ...equence 3 time 1 ms 100 bytes from 10 1 1 1 Sequence 4 time 1 ms 100 bytes from 10 1 1 1 Sequence 5 time 1 ms FEC 11 1 1 0 24 ping statistics 5 packets transmitted 5 packets received 0 0 packet loss round trip min avg max 1 1 5 ms ...

Page 25: ...space number of 0 indicates that the label space is a per platform label space A label space number other than 0 indicates a per interface label space LDP uses the same LDP ID format on IPv4 and IPv6 networks An LDP ID must be globally unique 328BFECs and FEC label mappings MPLS groups packets with the same characteristics such as the same destination or service class into a class called an FEC Th...

Page 26: ...discovery mechanisms It sends Hello messages at the hello interval to maintain a hello adjacency If LDP receives no Hello message from a hello adjacency before the hello hold timer expires it removes the hello adjacency 330BEstablishing and maintaining LDP sessions LDP establishes a session to a peer in the following steps 1 Establishes a TCP connection to the neighbor On a network where IPv4 and ...

Page 27: ...lowing ways Downstream Unsolicited DU mode Distributes FEC label mappings to the upstream LSR without waiting for label requests The device supports only the DU mode Downstream on Demand DoD mode Sends a label request for an FEC to the downstream LSR After receiving the label request the downstream LSR distributes the FEC label mapping for that FEC to the upstream LSR Figure 10 Label advertisement...

Page 28: ... for an FEC to its upstream LSR only if it receives a label mapping for the FEC from its downstream LSR In DoD mode when an LSR Transit receives a label request for an FEC from its upstream LSR Ingress it continues to send a label request for the FEC to its downstream LSR Egress After the transit LSR receives a label mapping for the FEC from the egress LSR it distributes a label mapping for the FE...

Page 29: ... GR helper deletes the stale FEC label mappings and the corresponding MPLS forwarding entries If the LDP session is successfully set up before the Reconnect timer expires the GR restarter sends the remaining time of the MPLS Forwarding State Holding timer to the GR helper The remaining time is sent as the LDP Recovery time 4 After the LDP session is re established the GR helper starts the LDP Reco...

Page 30: ...LDP LSP established on the optimal route LDP convergence on a link is completed when both the following situations occur The local device establishes an LDP session to a minimum of one peer and the LDP session is already in Operational state The local device has distributed the label mappings to a minimum of one peer 336BNotification delay for LDP convergence completion By default LDP immediately ...

Page 31: ...14 in a layered network MPLS TE is deployed in the core layer and the distribution layer uses LDP as the label distribution protocol To set up an LDP LSP across the core layer you can establish the LDP LSP over the existing MPLS TE tunnel to simplify configuration You only need to enable LDP on the tunnel interfaces of the ingress and egress nodes for the MPLS TE tunnel An LDP session will be esta...

Page 32: ...onfiguring LDP GR Optional 690H Configuring LDP IGP synchronization Optional 691H Setting a DSCP value for outgoing LDP packets Optional 692H Resetting LDP sessions Optional 693H Enabling SNMP notifications for LDP 33B Enabling LDP To enable LDP you must first enable LDP globally Then enable LDP on relevant interfaces or configure IGP to automatically enable LDP on those interfaces 154BEnabling LD...

Page 33: ...nter system view system view N A 2 Enter the view of the interface where you want to establish an LDP session interface interface type interface number N A 3 Set the Link Hello hold time mpls ldp timer hello hold timeout By default the Link Hello hold time is 15 seconds 4 Set the Link Hello interval mpls ldp timer hello interval interval By default the Link Hello interval is 5 seconds 339BSetting ...

Page 34: ...keepalive hold timeout By default the Keepalive hold time is 45 seconds 4 Set the Keepalive interval mpls ldp timer keepalive interval interval By default the Keepalive interval is 15 seconds 5 Configure the LDP transport address IPv4 LDP mpls ldp transport address ipv4 address interface IPv6 LDP mpls ldp transport address ipv6 address By default The LDP IPv4 transport address is the local LSR ID ...

Page 35: ... to any peers or respond to IPv6 Targeted Hellos received from any peers 4 Set the Keepalive hold time mpls ldp timer keepalive hold timeout By default the Keepalive hold time is 45 seconds 5 Set the Keepalive interval mpls ldp timer keepalive interval interval By default the Keepalive interval is 15 seconds 6 Configure the LDP transport address mpls ldp transport address ipv6 address By default t...

Page 36: ... string By default LDP MD5 authentication is disabled 38B Configuring LDP to redistribute BGP unicast routes By default LDP automatically redistributes IGP routes including the BGP routes that have been redistributed into IGP Then LDP assigns labels to the IGP routes and labeled BGP routes if these routes are permitted by an LSP generation policy LDP does not automatically redistribute BGP unicast...

Page 37: ... Configuration Guide Use only IPv4 host routes with a 32 bit mask or IPv6 host routes with a 128 bit mask to establish LSPs By default LDP uses only IPv4 host routes with a 32 bit mask or IPv6 host routes with a 128 bit mask to establish LSPs The other two methods can result in more LSPs than the default policy To change the policy make sure the system resources and bandwidth resources are suffici...

Page 38: ...ers As shown in 695HFigure 15 LSR A advertises label mappings for FECs permitted by IP prefix list B to LSR B It advertises label mappings for FECs permitted by IP prefix list C to LSR C Figure 15 Label advertisement control diagram A label advertisement policy on an LSR and a label acceptance policy on its upstream LSR can achieve the same purpose As a best practice use label advertisement polici...

Page 39: ...olicy uses an IP prefix list to control the label mappings received from a peer As shown in 696HFigure 16 LSR A uses an IP prefix list to filter label mappings from LSR B and it does not filter label mappings from LSR C Figure 16 Label acceptance control diagram A label advertisement policy on an LSR and a label acceptance policy on its upstream LSR can achieve the same purpose As a best practice ...

Page 40: ...D into the message If it is the LSR considers that a loop has occurred and terminates LSP establishment In addition when the number of LSR IDs in the message reaches the path vector limit LDP also considers that a loop has occurred and terminates LSP establishment To configure LDP loop detection Step Command Remarks 1 Enter system view system view N A 2 Enter LDP view or enter LDP VPN instance vie...

Page 41: ...pplicable only to IPv4 networks To configure LDP session protection Step Command Remarks 1 Enter system view system view N A 2 Enter LDP view mpls ldp N A 3 Enable the session protection feature session protection duration time peer peer prefix list name By default session protection is disabled 45B Configuring LDP GR Before you configure LDP GR enable LDP on the GR restarter and GR helpers The LD...

Page 42: ... LDP IGP synchronization is enabled on an interface 7 Return to system view quit N A 8 Enter LDP view mpls ldp N A 9 Optional Set the delay for LDP to notify IGP of the LDP convergence igp sync delay time By default LDP immediately notifies IGP of the LDP convergence completion 10 Optional Set the maximum delay for LDP to notify IGP of the LDP IGP synchronization status after an LDP restart or act...

Page 43: ... mpls ldp sync level 1 level 2 By default LDP ISIS synchronization is disabled 4 Return to system view quit N A 5 Enter interface view interface interface type interface number N A 6 Optional Disable LDP IGP synchronization on the interface mpls ldp igp sync disable By default LDP IGP synchronization is enabled on an interface 7 Return to system view quit N A 8 Enter LDP view mpls ldp N A 9 Option...

Page 44: ...session changes as defined in RFC 3815 For LDP event notifications to be sent correctly you must also configure SNMP on the device For more information about SNMP configuration see the network management and monitoring configuration guide for the device To enable SNMP notifications for LDP Step Command Remarks 1 Enter system view system view N A 2 Enable SNMP notifications for LDP snmp agent trap ...

Page 45: ...ach other over MPLS Configure LDP to establish LSPs only for destinations 1 1 1 9 32 2 2 2 9 32 3 3 3 9 32 11 1 1 0 24 and 21 1 1 0 24 on Switch A Switch B and Switch C Figure 17 Network diagram 344BRequirements analysis To ensure that the LSRs establish IPv4 LSPs automatically enable IPv4 LDP on each LSR To establish IPv4 LDP LSPs configure an IPv4 routing protocol to ensure IP connectivity betwe...

Page 46: ...itchC ospf 1 area 0 0 0 0 quit SwitchC ospf 1 quit Verify that the switches have learned the routes to each other This example uses Switch A SwitchA display ip routing table Destinations 21 Routes 21 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 Direct 0 0 127 0 0 1 InLoop0 2 2 2 9 32 O_INTRA 10 1 10 1 1 2 Vlan2 3 3 3 9 32 O_INTRA 10 2 10 1 1 ...

Page 47: ...SwitchC ldp quit SwitchC interface vlan interface 3 SwitchC Vlan interface3 mpls enable SwitchC Vlan interface3 mpls ldp enable SwitchC Vlan interface3 quit 4 Configure IPv4 LSP generation policies On Switch A create IP prefix list switcha and configure LDP to use only the routes permitted by the prefix list to establish LSPs SwitchA ip prefix list switcha index 10 permit 1 1 1 9 32 SwitchA ip pre...

Page 48: ...display mpls ldp lsp Status Flags stale L liberal B backup FECs 5 Ingress 3 Transit 3 Egress 2 FEC In Out Label Nexthop OutInterface 1 1 1 9 32 3 1279 L 2 2 2 9 32 3 10 1 1 2 Vlan int2 1279 3 10 1 1 2 Vlan int2 3 3 3 9 32 1278 10 1 1 2 Vlan int2 1278 1278 10 1 1 2 Vlan int2 11 1 1 0 24 1277 1277 L 21 1 1 0 24 1276 10 1 1 2 Vlan int2 1276 1276 10 1 1 2 Vlan int2 Test the connectivity of the LDP LSP...

Page 49: ... traffic between subnets 11 1 1 0 24 and 21 1 1 0 24 Figure 18 Network diagram 348BRequirements analysis To ensure that the LSRs establish IPv4 LSPs automatically enable IPv4 LDP on each LSR To establish IPv4 LDP LSPs configure an IPv4 routing protocol to ensure IP connectivity between the LSRs This example uses OSPF To ensure that LDP establishes IPv4 LSPs only for the routes 11 1 1 0 24 and 21 1...

Page 50: ... 6 SwitchA Vlan interface6 mpls enable SwitchA Vlan interface6 mpls ldp enable SwitchA Vlan interface6 quit Configure Switch B SwitchB system view SwitchB mpls lsr id 2 2 2 9 SwitchB mpls ldp SwitchB ldp quit SwitchB interface vlan interface 2 SwitchB Vlan interface2 mpls enable SwitchB Vlan interface2 mpls ldp enable SwitchB Vlan interface2 quit SwitchB interface vlan interface 3 SwitchB Vlan int...

Page 51: ...On Switch C create IP prefix list switchc and configure LDP to use only the routes permitted by the prefix list to establish LSPs SwitchC ip prefix list switchc index 10 permit 11 1 1 0 24 SwitchC ip prefix list switchc index 20 permit 21 1 1 0 24 SwitchC mpls ldp SwitchC ldp lsp trigger prefix list switchc SwitchC ldp quit On Switch D create IP prefix list switchd and configure LDP to use only th...

Page 52: ...SwitchA display mpls ldp lsp Status Flags stale L liberal B backup FECs 2 Ingress 1 Transit 1 Egress 1 FEC In Out Label Nexthop OutInterface 11 1 1 0 24 1277 1148 L 21 1 1 0 24 1149 L 1276 10 1 1 2 Vlan int2 1276 1276 10 1 1 2 Vlan int2 The output shows that the next hop of the LSP for FEC 21 1 1 0 24 is Switch B 10 1 1 2 The LSP has been established over the link Switch A Switch B Switch C not ov...

Page 53: ...24 and 21 1 1 0 24 Figure 19 Network diagram 352BRequirements analysis To ensure that the LSRs establish IPv4 LSPs automatically enable IPv4 LDP on each LSR To establish IPv4 LDP LSPs configure an IPv4 routing protocol to ensure IP connectivity between the LSRs This example uses OSPF To ensure that LDP establishes IPv4 LSPs only for the routes 11 1 1 0 24 and 21 1 1 0 24 configure IPv4 LSP generat...

Page 54: ... 6 SwitchA Vlan interface6 mpls enable SwitchA Vlan interface6 mpls ldp enable SwitchA Vlan interface6 quit Configure Switch B SwitchB system view SwitchB mpls lsr id 2 2 2 9 SwitchB mpls ldp SwitchB ldp quit SwitchB interface vlan interface 2 SwitchB Vlan interface2 mpls enable SwitchB Vlan interface2 mpls ldp enable SwitchB Vlan interface2 quit SwitchB interface vlan interface 3 SwitchB Vlan int...

Page 55: ...switchb SwitchB ldp quit On Switch C create IP prefix list switchc and configure LDP to use only the routes permitted by the prefix list to establish LSPs SwitchC ip prefix list switchc index 10 permit 11 1 1 0 24 SwitchC ip prefix list switchc index 20 permit 21 1 1 0 24 SwitchC mpls ldp SwitchC ldp lsp trigger prefix list switchc SwitchC ldp quit On Switch D create IP prefix list switchd and con...

Page 56: ...eers SwitchD ip prefix list peer a index 10 permit 1 1 1 9 32 On Switch D create IP prefix list prefix to c to deny subnet 11 1 1 0 24 Switch D uses this list to filter FEC label mappings to be advertised to Switch C SwitchD ip prefix list prefix to c index 10 deny 11 1 1 0 24 SwitchD ip prefix list prefix to c index 20 permit 0 0 0 0 0 less equal 32 On Switch D create IP prefix list peer c to per...

Page 57: ... and Switch C Switch D does not receive FEC label mappings from Switch A or Switch C LDP has established an LSP only over the link Switch A Switch B Switch C Test the connectivity of the LDP LSP from Switch A to Switch C SwitchA ping mpls a 11 1 1 1 ipv4 21 1 1 0 24 MPLS Ping FEC 21 1 1 0 24 100 data bytes 100 bytes from 20 1 1 2 Sequence 1 time 1 ms 100 bytes from 20 1 1 2 Sequence 2 time 1 ms 10...

Page 58: ...ble IPv6 LDP on each LSR To establish IPv6 LDP LSPs configure an IPv6 routing protocol to ensure IP connectivity between the LSRs This example uses OSPFv3 To control the number of IPv6 LSPs configure an IPv6 LSP generation policy on each LSR 357BConfiguration procedure 1 Configure IPv6 addresses and masks for interfaces including the loopback interfaces as shown in 700HFigure 20 Details not shown ...

Page 59: ...n interface2 quit SwitchB interface vlan interface 3 SwitchB Vlan interface3 ospfv3 1 area 0 0 0 0 SwitchB Vlan interface3 quit Configure Switch C SwitchC system view SwitchC ospfv3 SwitchC ospfv3 1 router id 3 3 3 9 SwitchC ospfv3 1 area 0 SwitchC ospfv3 1 area 0 0 0 0 quit SwitchC ospfv3 1 quit SwitchC interface loopback 0 SwitchC LoopBack0 ospfv3 1 area 0 0 0 0 SwitchC LoopBack0 quit SwitchC in...

Page 60: ... 21 64 Protocol O_INTRA NextHop FE80 20C 29FF FE9D EAC0 Preference 10 Interface Vlan2 Cost 3 Destination 100 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 100 2 128 Protocol O_INTRA NextHop FE80 20C 29FF FE9D EAC0 Preference 10 Interface Vlan2 Cost 1 Destination 100 3 128 Protocol O_INTRA NextHop FE80 20C 29FF FE9D EAC0 Preference 10 Interface Vlan2 Cost 2 Desti...

Page 61: ...pv6 enable SwitchC Vlan interface3 mpls ldp transport address 20 2 SwitchC Vlan interface3 quit 4 Configure IPv6 LSP generation policies On Switch A create IPv6 prefix list switcha and configure LDP to use only the routes permitted by the prefix list to establish IPv6 LSPs SwitchA ipv6 prefix list switcha index 10 permit 100 1 128 SwitchA ipv6 prefix list switcha index 20 permit 100 2 128 SwitchA ...

Page 62: ...s for example on Switch A SwitchA display mpls ldp lsp ipv6 Status Flags stale L liberal B backup FECs 5 Ingress 3 Transit 3 Egress 2 FEC 11 64 In Out Label 2426 OutInterface Nexthop In Out Label 2424 L OutInterface Nexthop FEC 21 64 In Out Label 2425 OutInterface Vlan2 Nexthop FE80 20C 29FF FE9D EAC0 In Out Label 2423 2425 OutInterface Vlan2 Nexthop FE80 20C 29FF FE9D EAC0 FEC 100 1 128 In Out La...

Page 63: ...s CTRL_C to break 56 bytes from 11 1 icmp_seq 0 hlim 63 time 2 000 ms 56 bytes from 11 1 icmp_seq 1 hlim 63 time 1 000 ms 56 bytes from 11 1 icmp_seq 2 hlim 63 time 1 000 ms 56 bytes from 11 1 icmp_seq 3 hlim 63 time 1 000 ms 56 bytes from 11 1 icmp_seq 4 hlim 63 time 1 000 ms Ping6 statistics for 11 1 5 packets transmitted 5 packets received 0 0 packet loss round trip min avg max std dev 1 000 1 ...

Page 64: ...ion procedure Before configuration disable the spanning tree feature globally or map each VLAN to an MSTI For more information see Layer 2 LAN Switching Configuration Guide 1 Configure IPv6 addresses and masks for interfaces including the loopback interfaces as shown in 701HFigure 21 Details not shown 2 Configure OSPFv3 on each switch to ensure IP connectivity between them Details not shown 3 Enab...

Page 65: ...ure Switch C SwitchC system view SwitchC mpls lsr id 3 3 3 9 SwitchC mpls ldp SwitchC ldp quit SwitchC interface vlan interface 3 SwitchC Vlan interface3 mpls enable SwitchC Vlan interface3 mpls ldp ipv6 enable SwitchC Vlan interface3 mpls ldp transport address 20 2 SwitchC Vlan interface3 quit SwitchC interface vlan interface 7 SwitchC Vlan interface7 mpls enable SwitchC Vlan interface7 mpls ldp ...

Page 66: ...P to use only the routes permitted by the prefix list to establish IPv6 LSPs SwitchD ipv6 prefix list switchd index 10 permit 11 0 64 SwitchD ipv6 prefix list switchd index 20 permit 21 0 64 SwitchD mpls ldp SwitchD ldp ipv6 lsp trigger prefix list switchd SwitchD ldp quit 5 Configure IPv6 label acceptance policies On Switch A create IPv6 prefix list prefix from b to permit subnet 21 0 64 Switch A...

Page 67: ...nk Switch A Switch B Switch C not over the link Switch A Switch D Switch C Test the connectivity of the IPv6 LDP LSP from Switch A to Switch C SwitchA ping ipv6 a 11 1 21 1 Ping6 56 data bytes 11 1 21 1 press CTRL_C to break 56 bytes from 21 1 icmp_seq 0 hlim 63 time 4 000 ms 56 bytes from 21 1 icmp_seq 1 hlim 63 time 3 000 ms 56 bytes from 21 1 icmp_seq 2 hlim 63 time 3 000 ms 56 bytes from 21 1 ...

Page 68: ...he link Switch A Switch B Switch C configure IPv6 label advertisement policies as follows Switch A advertises only the label mapping for FEC 11 0 64 to Switch B Switch C advertises only the label mapping for FEC 21 0 64 to Switch B Switch D does not advertise label mapping for FEC 21 0 64 to Switch A Switch D does not advertise label mapping for FEC 11 0 64 to Switch C 365BConfiguration procedure ...

Page 69: ...ace2 mpls enable SwitchB Vlan interface2 mpls ldp ipv6 enable SwitchB Vlan interface2 mpls ldp transport address 10 2 SwitchB Vlan interface2 quit SwitchB interface vlan interface 3 SwitchB Vlan interface3 mpls enable SwitchB Vlan interface3 mpls ldp ipv6 enable SwitchB Vlan interface3 mpls ldp transport address 20 1 SwitchB Vlan interface3 quit Configure Switch C SwitchC system view SwitchC mpls ...

Page 70: ...11 0 64 SwitchB ipv6 prefix list switchb index 20 permit 21 0 64 SwitchB mpls ldp SwitchB ldp ipv6 lsp trigger prefix list switchb SwitchB ldp quit On Switch C create IPv6 prefix list switchc and configure LDP to use only the routes permitted by the prefix list to establish IPv6 LSPs SwitchC ipv6 prefix list switchc index 10 permit 11 0 64 SwitchC ipv6 prefix list switchc index 20 permit 21 0 64 S...

Page 71: ...create IP prefix list peer a to permit 1 1 1 9 32 Switch D uses this list to filter peers SwitchD ip prefix list peer a index 10 permit 1 1 1 9 32 On Switch D create IPv6 prefix list prefix to c to deny subnet 11 0 64 Switch D uses this list to filter FEC label mappings to be advertised to Switch C SwitchD ipv6 prefix list prefix to c index 10 deny 11 0 64 SwitchD ipv6 prefix list prefix to c inde...

Page 72: ...lan3 Nexthop FE80 20C 29FF FE05 1C01 In Out Label 2416 1099 OutInterface Vlan3 Nexthop FE80 20C 29FF FE05 1C01 SwitchC display mpls ldp lsp ipv6 Status Flags stale L liberal B backup FECs 2 Ingress 1 Transit 1 Egress 1 FEC 11 64 In Out Label 2418 OutInterface Vlan3 Nexthop FE80 20C 29FF FE9D EAA2 In Out Label 1098 2418 OutInterface Vlan3 Nexthop FE80 20C 29FF FE9D EAA2 FEC 21 64 In Out Label 1099 ...

Page 73: ... 1 icmp_seq 2 hlim 63 time 3 000 ms 56 bytes from 21 1 icmp_seq 3 hlim 63 time 2 000 ms 56 bytes from 21 1 icmp_seq 4 hlim 63 time 1 000 ms Ping6 statistics for 21 1 5 packets transmitted 5 packets received 0 0 packet loss round trip min avg max std dev 1 000 2 600 4 000 1 020 ms Test the connectivity of the IPv6 LDP LSP from Switch C to Switch A SwitchC ping ipv6 a 21 1 11 1 Ping6 56 data bytes 2...

Page 74: ... a CRLSP you must configure routing and specify constrains such as the bandwidth and explicit paths MPLS TE tunnel A virtual point to point connection from the ingress node to the egress node Typically an MPLS TE tunnel consists of one CRLSP To deploy CRLSP backup or transmit traffic over multiple paths you need to establish multiple CRLSPs for one class of traffic In this case an MPLS TE tunnel c...

Page 75: ...andwidth constraints when the reservable bandwidth for the class type is greater than or equal to the bandwidth required by the class type Affinity Affinity determines which links a tunnel can use The affinity attribute and its mask and the link attribute are all 32 bit long A link is available for a tunnel if the link attribute meets the following requirements The link attribute bits correspondin...

Page 76: ...stablish a CRLSP through RSVP TE 370BBasic concepts PCE An entity that can calculate a path based on the TEDB bandwidth and other MPLS TE tunnel constraints A PCE can provide intra area or inter area path calculation A PCE can be manually specified on a PCC or automatically discovered through the PCE information advertised by OSPF TE PCC A PCC sends a request to PCEs for path calculation and uses ...

Page 77: ... advertisement to forward traffic through an MPLS TE tunnel Automatic route advertisement distributes the MPLS TE tunnel to the IGP OSPF or IS IS so the MPLS TE tunnel can participate in IGP routing calculation Automatic route advertisement is easy to configure and maintain Automatic route advertisement can be implemented by using the following methods IGP shortcut Also known as AutoRoute Announce...

Page 78: ...by an MPLS TE tunnel is determined by the ingress node and is advertised to other nodes through RSVP The device supports the following resource reservation styles FF Fixed filter where resources are reserved for individual senders and cannot be shared among senders on the same session SE Shared explicit where resources are reserved for senders on the same session and shared among them SE is mainly...

Page 79: ...tion feature can switch the MPLS TE tunnel to the optimal path 173BCRLSP backup CRLSP backup uses a CRLSP to back up a primary CRLSP When the ingress detects that the primary CRLSP fails it switches traffic to the backup CRLSP When the primary CRLSP recovers the ingress switches traffic back CRLSP backup has the following modes Hot standby A backup CRLSP is created immediately after a primary CRLS...

Page 80: ...protection Node protection The PLR and the MP are connected through a device and the primary CRLSP traverses this device When the device fails traffic is switched to the bypass tunnel As shown in 709HFigure 27 the primary CRLSP is Router A Router B Router C Router D Router E and the bypass tunnel is Router B Router F Router D Router C is the protected device This mode is also called next next hop ...

Page 81: ...ices from some vendors A device operating in IETF mode can communicate with devices from other vendors 377BHow DS TE operates A device takes the following steps to establish an MPLS TE tunnel for a CT 1 Determines the CT A device classifies traffic according to your configuration When configuring a dynamic MPLS TE tunnel you can use the mpls te bandwidth command on the tunnel interface to specify ...

Page 82: ...nly when the following conditions are met Every node along the tunnel has a TE class that matches the CT and the LSP setup priority Every node along the tunnel has a TE class that matches the CT and the LSP holding priority 176BBidirectional MPLS TE tunnel MPLS Transport Profile MPLS TP uses bidirectional MPLS TE tunnels to implement 1 1 and 1 1 protection switching and to support in band detectio...

Page 83: ...s RFC 4655 A Path Computation Element PCE Based Architecture RFC 5088 OSPF Protocol Extensions for Path Computation Element Discovery RFC 5440 Path Computation Element PCE Communication Protocol PCEP RFC 5441 A Backward Recursive PCE Based Computation BRPC Procedure to Compute Shortest Constrained Inter Domain Traffic Engineering LSP RFC 5455 Diffserv Aware Class Type Object for the Path Computati...

Page 84: ... the MPLS TE tunnel On the tunnel interface specify the tunnel destination address the egress node IP address and configure MPLS TE tunnel constraints such as the tunnel bandwidth constraints and affinity 4 Configure link TE attributes such as the maximum link bandwidth and link attribute on each interface that the MPLS TE tunnel traverses 5 Configure an IGP on each node that the MPLS TE tunnel tr...

Page 85: ...Enter interface view interface interface type interface number N A 5 Enable MPLS TE for the interface mpls te enable By default MPLS TE is disabled on an interface 56B Configuring a tunnel interface To configure an MPLS TE tunnel you must create an MPLS TE tunnel interface and enter tunnel interface view All MPLS TE tunnel attributes are configured in tunnel interface view For more information abo...

Page 86: ... classes for IETF mode are shown in 730H Table 1 In prestandard mode you cannot configure TE classes Table 1 Default TE classes in IETF mode TE Class CT Priority 0 0 7 1 1 7 2 2 7 3 3 7 4 0 0 5 1 0 6 2 0 7 3 0 58B Configuring an MPLS TE tunnel to use a static CRLSP To configure an MPLS TE tunnel to use a static CRLSP perform the following tasks Establish the static CRLSP Specify the MPLS TE tunnel...

Page 87: ...ish the CRLSP by using the signaling protocol RSVP TE You must configure the IGP TE extension to form a TEDB Otherwise the path is created based on IGP routing rather than computed by CSPF 178BConfiguration task list To establish an MPLS TE tunnel by using a dynamic CRLSP Tasks at a glance Required 732H Configuring MPLS TE attributes for a link Required 733H Advertising link TE attributes by using...

Page 88: ...del BC 0 is the maximum reservable bandwidth of a link 5 Set the link attribute mpls te link attribute attribute value By default the link attribute value is 0x00000000 180BAdvertising link TE attributes by using IGP TE extension Both OSPF and IS IS are extended to advertise link TE attributes The extensions are called OSPF TE and IS IS TE If both OSPF TE and IS IS TE are available OSPF TE takes p...

Page 89: ...fy a metric style cost style narrow wide wide compatible compatible narrow compatible relax spf limit By default only narrow metric style packets can be received and sent For more information about this command see Layer 3 IP Routing Command Reference 4 Enable MPLS TE for the IS IS process mpls te enable Level 1 Level 2 By default MPLS TE is disabled for an IS IS process 5 Specify the types of the...

Page 90: ...p priority hold priority By default the setup priority and the holding priority are both 7 for an MPLS TE tunnel 383BConfiguring an explicit path for an MPLS TE tunnel An explicit path is a set of nodes The relationship between any two neighboring nodes on an explicit path can be either strict or loose Strict The two nodes must be directly connected Loose The two nodes can have devices in between ...

Page 91: ...e no cspf By default MPLS TE uses the calculated path to establish a CRLSP 183BControlling CRLSP path selection Before performing the configuration tasks in this section be aware of each configuration objective and its impact on your device MPLS TE uses CSPF to calculate a path according to the TEDB and constraints and sets up the CRLSP through RSVP TE MPLS TE provides measures that affect the CSP...

Page 92: ...metric value By default the link uses its IGP metric as the TE metric This command is available on every interface that the MPLS TE tunnel traverses 385BConfiguring route pinning When route pinning is enabled MPLS TE tunnel reoptimization is not available Perform this task on the ingress node of an MPLS TE tunnel To configure route pinning Step Command Remarks 1 Enter system view system view N A 2...

Page 93: ...n You can also set the flooding interval at which bandwidth changes that cannot trigger immediate flooding are flooded This task can be performed on all nodes that the MPLS TE tunnel traverses To set TE flooding thresholds and the flooding interval Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Set the up down thresho...

Page 94: ...bled 390BSetting tunnel setup retry If the ingress node fails to establish an MPLS TE tunnel it waits for the retry interval and then tries to set up the tunnel again It repeats this process until the tunnel is established or until the number of attempts reaches the maximum If the tunnel cannot be established when the number of attempts reaches the maximum the ingress waits for a longer period and...

Page 95: ...and Remarks 1 Enter system view system view N A 2 Enter MPLS TE view mpls te N A 3 Specify the IP address of the PCE pce static ip address By default no PCE peers exist 393BDynamically discovering PCEs OSPF TE advertises PCE IP addresses for PCCs and other PCEs to dynamically discover the PCEs and establish PCEP sessions to them For OSPF TE configuration see 739HConfiguring OSPF TE 187BEstablishin...

Page 96: ... default the automatically calculated path is used to establish a backup CRLSP After this command is executed the local device acts as a PCC and establishes PCEP sessions to the specified PCEs If you do not specify a PCE the local device establishes PCEP sessions to all discovered PCEs 189BConfiguring PCEP session parameters Step Command Remarks 1 Enter system view system view N A 2 Enter MPLS TE ...

Page 97: ...e interface address to OSPF or IS IS Enable MPLS TE for an OSPF area or an IS IS process by executing the mpls te enable command in OSPF area view or IS IS view Follow these restrictions and guidelines when you configure automatic route advertisement The destination address of the MPLS TE tunnel can be the LSR ID of the egress node or the primary IP address of an interface on the egress node As a ...

Page 98: ... create an MPLS TE tunnel interface on both ends of the tunnel and enable the bidirectional tunnel feature on the tunnel interfaces For a co routed bidirectional tunnel configure one end of the tunnel as the active end and the other end as the passive end and specify the reverse CRLSP at the passive end For an associated bidirectional tunnel specify a reverse CRLSP at both ends of the tunnel To co...

Page 99: ...task on the ingress node of an MPLS TE tunnel To configure CRLSP backup Step Command Remarks 1 Enter system view system view N A 2 Enter MPLS TE tunnel interface view interface tunnel tunnel number mode mpls te N A 3 Enable tunnel backup and specify the backup mode mpls te backup hot standby ordinary By default tunnel backup is disabled 4 Specify a path for the primary CRLSP and set the preference...

Page 100: ...mode Automatically created bypass tunnels can be used to protect any type of CT but they cannot provide bandwidth protection A primary tunnel can have both manually configured and automatically created bypass tunnels The PLR will select one bypass tunnel to protect the primary CRLSP The selected bypass tunnel is bound to the primary CRLSP Manually created bypass tunnels take precedence over automa...

Page 101: ...s is met No CT is specified for the bypass tunnel The specified CT is the same as that specified for the primary CRLSP After binding the RRO message does not carry the bandwidth protection flag This bypass tunnel is selected only when no bypass tunnel that provides bandwidth protection can be bound to the primary CRLSP Non zero No The primary CRLSP can be bound to the bypass tunnel when all the fo...

Page 102: ...rotection with a bypass tunnel that provides bandwidth protection the primary CRLSP occupies the bandwidth that the bypass tunnel protects The bandwidth is protected on a first come first served basis The primary CRLSP that needs bandwidth protection cannot preempt the one that does not need bandwidth protection After an FRR the primary CRLSP will be down if you modify the bandwidth that the bypas...

Page 103: ...feature is disabled globally 4 Specify an interface number range for the automatically created bypass tunnels tunnel number min min number max max number By default no interface number range is specified and the PLR cannot set up a bypass tunnel automatically 5 Optional Configure the PLR to create only link protection bypass tunnels nhop only By default the PLR automatically creates both a link pr...

Page 104: ...the rsvp bfd enable command see 741H Configuring RSVP 195BSetting the optimal bypass tunnel selection interval If you have specified multiple bypass tunnels for a primary CRLSP MPLS TE selects an optimal bypass tunnel to protect the primary CRLSP Sometimes a bypass tunnel might become better than the current optimal bypass tunnel because for example the reservable bandwidth changes Therefore MPLS ...

Page 105: ...bandwidth allocation interface interface type interface number Display information about discovered PCEs display mpls te pce discovery ip address verbose Display PCC and PCE peer information display mpls te pce peer ip address verbose Display PCC and PCE statistics display mpls te pce statistics ip address Display MPLS TEDB information display mpls te tedb isis level 1 level 2 ospf area area id li...

Page 106: ...se interface addresses including the loopback interface address Configure Switch A SwitchA system view SwitchA isis 1 SwitchA isis 1 network entity 00 0005 0000 0000 0001 00 SwitchA isis 1 quit SwitchA interface vlan interface 1 SwitchA Vlan interface1 isis enable 1 SwitchA Vlan interface1 quit SwitchA interface loopback 0 SwitchA LoopBack0 isis enable 1 SwitchA LoopBack0 quit Configure Switch B S...

Page 107: ...ne another including the routes to the loopback interfaces Details not shown 3 Configure an LSR ID and enable MPLS and MPLS TE Configure Switch A SwitchA mpls lsr id 1 1 1 1 SwitchA mpls te SwitchA te quit SwitchA interface vlan interface 1 SwitchA Vlan interface1 mpls enable SwitchA Vlan interface1 mpls te enable SwitchA Vlan interface1 quit Configure Switch B SwitchB mpls lsr id 2 2 2 2 SwitchB ...

Page 108: ...ure an MPLS TE tunnel on Switch A Configure MPLS TE tunnel interface Tunnel 0 SwitchA interface tunnel 0 mode mpls te SwitchA Tunnel0 ip address 6 1 1 1 255 255 255 0 Specify the tunnel destination address as the LSR ID of Switch C SwitchA Tunnel0 destination 3 3 3 3 Configure MPLS TE to use a static CRLSP to establish the tunnel SwitchA Tunnel0 mpls te signaling static SwitchA Tunnel0 quit 6 Crea...

Page 109: ...ards 0 75 0 Last clearing of counters Never Last 300 seconds input rate 0 bytes sec 0 bits sec 0 packets sec Last 300 seconds output rate 0 bytes sec 0 bits sec 0 packets sec Input 0 packets 0 bytes 0 drops Output 0 packets 0 bytes 0 drops Display detailed information about the MPLS TE tunnel on Switch A SwitchA display mpls te tunnel interface Tunnel Name Tunnel 0 Tunnel State Up Main CRLSP up Tu...

Page 110: ...cr lsp 1 Ingress Null 20 Vlan1 Up SwitchB display mpls static cr lsp Name LSR Type In Out Label Out Interface State static cr lsp 1 Transit 20 30 Vlan2 Up SwitchC display mpls static cr lsp Name LSR Type In Out Label Out Interface State static cr lsp1 Egress 30 Null Up Execute the display ip routing table command on Switch A The output shows a static route entry with interface Tunnel 0 as the outp...

Page 111: ...masks for interfaces Details not shown 2 Configure IS IS to advertise interface addresses including the loopback interface address Configure Switch A SwitchA system view SwitchA isis 1 SwitchA isis 1 network entity 00 0005 0000 0000 0001 00 SwitchA isis 1 quit SwitchA interface vlan interface 1 SwitchA Vlan interface1 isis enable 1 SwitchA Vlan interface1 isis circuit level level 2 SwitchA Vlan in...

Page 112: ... SwitchC Vlan interface2 isis enable 1 SwitchC Vlan interface2 isis circuit level level 2 SwitchC Vlan interface2 quit SwitchC interface loopback 0 SwitchC LoopBack0 isis enable 1 SwitchC LoopBack0 isis circuit level level 2 SwitchC LoopBack0 quit Configure Switch D SwitchD system view SwitchD isis 1 SwitchD isis 1 network entity 00 0005 0000 0000 0004 00 SwitchD isis 1 quit SwitchD interface vlan...

Page 113: ...terface 2 SwitchB Vlan interface2 mpls enable SwitchB Vlan interface2 mpls te enable SwitchB Vlan interface2 rsvp enable SwitchB Vlan interface2 quit Configure Switch C SwitchC mpls lsr id 3 3 3 9 SwitchC mpls te SwitchC te quit SwitchC rsvp SwitchC rsvp quit SwitchC interface vlan interface 3 SwitchC Vlan interface3 mpls enable SwitchC Vlan interface3 mpls te enable SwitchC Vlan interface3 rsvp e...

Page 114: ...SwitchA interface vlan interface 1 SwitchA Vlan interface1 mpls te max link bandwidth 10000 SwitchA Vlan interface1 mpls te max reservable bandwidth 5000 SwitchA Vlan interface1 quit Set the maximum link bandwidth and maximum reservable bandwidth on Switch B SwitchB interface vlan interface 1 SwitchB Vlan interface1 mpls te max link bandwidth 10000 SwitchB Vlan interface1 mpls te max reservable ba...

Page 115: ...ic route on Switch A to direct the traffic destined for subnet 100 1 2 0 24 to MPLS TE tunnel 1 SwitchA ip route static 100 1 2 0 24 tunnel 1 preference 1 405BVerifying the configuration Verify that the tunnel interface is up on Switch A SwitchA display interface tunnel Tunnel1 Current state UP Line protocol state UP Description Tunnel1 Interface Bandwidth 64kbps Maximum transmission unit 1496 Int...

Page 116: ...q Min Bandwidth Max Bandwidth Collected Bandwidth Execute the display ip routing table command on Switch A The output shows a static route entry with interface Tunnel 1 as the output interface Details not shown 198BEstablishing an inter AS MPLS TE tunnel with RSVP TE 406BNetwork requirements Switch A and Switch B are in AS 100 Switch C and Switch D are in AS 200 AS 100 and AS 200 use OSPF as the I...

Page 117: ...resses and masks for interfaces Details not shown 2 Configure OSPF to advertise routes within the ASs and redistribute the direct and BGP routes into OSPF on Switch B and Switch C Configure Switch A SwitchA system view SwitchA ospf SwitchA ospf 1 area 0 SwitchA ospf 1 area 0 0 0 0 network 10 1 1 0 0 0 0 255 SwitchA ospf 1 area 0 0 0 0 network 1 1 1 9 0 0 0 0 SwitchA ospf 1 area 0 0 0 0 quit Switch...

Page 118: ...including the routes to the loopback interfaces This example uses Switch A SwitchA display ip routing table Destinations 6 Routes 6 Destination Mask Proto Pre Cost NextHop Interface 1 1 1 9 32 Direct 0 0 127 0 0 1 InLoop0 2 2 2 9 32 O_INTRA 10 1 10 1 1 2 Vlan1 10 1 1 0 24 Direct 0 0 10 1 1 1 Vlan1 10 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct...

Page 119: ... Vlan1 30 1 1 0 24 O_ASE 150 1 10 1 1 2 Vlan1 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 4 Configure an LSR ID and enable MPLS MPLS TE and RSVP TE Configure Switch A SwitchA mpls lsr id 1 1 1 9 SwitchA mpls te SwitchA te quit SwitchA rsvp SwitchA rsvp quit SwitchA interface vlan interface 1 SwitchA Vlan interface1 mpls enable SwitchA Vlan interface1 mpls te ...

Page 120: ...3 quit Configure Switch D SwitchD mpls lsr id 4 4 4 9 SwitchD mpls te SwitchD te quit SwitchD rsvp SwitchD rsvp quit SwitchD interface vlan interface 3 SwitchD Vlan interface3 mpls enable SwitchD Vlan interface3 mpls te enable SwitchD Vlan interface3 rsvp enable SwitchD Vlan interface3 quit 5 Configure OSPF TE Configure Switch A SwitchA ospf SwitchA ospf 1 opaque capability enable SwitchA ospf 1 a...

Page 121: ...imum link bandwidth and maximum reservable bandwidth on Switch B SwitchB interface vlan interface 1 SwitchB Vlan interface1 mpls te max link bandwidth 10000 SwitchB Vlan interface1 mpls te max reservable bandwidth 5000 SwitchB Vlan interface1 quit SwitchB interface vlan interface 2 SwitchB Vlan interface2 mpls te max link bandwidth 10000 SwitchB Vlan interface2 mpls te max reservable bandwidth 500...

Page 122: ... A SwitchA display interface tunnel 1 Tunnel1 Current state UP Line protocol state UP Description Tunnel1 Interface Bandwidth 64kbps Maximum transmission unit 1496 Internet address 7 1 1 1 24 primary Tunnel source unknown destination 4 4 4 9 Tunnel TTL 255 Tunnel protocol transport CR_LSP Last clearing of counters Never Last 300 seconds input rate 0 bytes sec 0 bits sec 0 packets sec Last 300 seco...

Page 123: ...s 14 Destination Mask Proto Pre Cost NextHop Interface 1 1 1 9 32 Direct 0 0 127 0 0 1 InLoop0 2 2 2 9 32 O_INTRA 10 1 10 1 1 2 Vlan1 3 3 3 9 32 O_ASE 150 1 10 1 1 2 Vlan1 4 4 4 9 32 O_ASE 150 1 10 1 1 2 Vlan1 7 1 1 0 24 Direct 0 0 7 1 1 1 Tun1 7 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 10 1 1 0 24 Direct 0 0 10 1 1 1 Vlan1 10 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 20 1 1 0 24 O_ASE 150 1 10 1 1 2 Vla...

Page 124: ... SwitchA ospf 1 area 1 SwitchA ospf 1 area 0 0 0 1 network 10 2 1 0 0 0 0 255 SwitchA ospf 1 area 0 0 0 1 mpls te enable SwitchA ospf 1 area 0 0 0 1 quit SwitchA ospf 1 quit Configure Switch B SwitchB system view SwitchB ospf SwitchB ospf 1 area 0 SwitchB ospf 1 area 0 0 0 0 network 10 1 1 0 0 0 0 255 SwitchB ospf 1 area 0 0 0 0 network 2 2 2 2 0 0 0 0 SwitchB ospf 1 area 0 0 0 0 mpls te enable Sw...

Page 125: ...rsvp SwitchA rsvp quit SwitchA interface vlan interface 10 SwitchA Vlan interface10 mpls enable SwitchA Vlan interface10 mpls te enable SwitchA Vlan interface10 rsvp enable SwitchA Vlan interface10 quit SwitchA interface vlan interface 11 SwitchA Vlan interface11 mpls enable SwitchA Vlan interface11 mpls te enable SwitchA Vlan interface11 rsvp enable SwitchA Vlan interface11 quit Configure Switch ...

Page 126: ... 1 Configure Switch B SwitchB mpls te SwitchB te pce address 2 2 2 2 5 Configure Switch C as a PCC to use the path calculated by PCEs Configure MPLS TE tunnel interface Tunnel 1 SwitchC interface tunnel 1 mode mpls te SwitchC Tunnel1 ip address 7 1 1 1 255 255 255 0 Specify the tunnel destination address as the LSR ID of Switch D SwitchC Tunnel1 destination 4 4 4 4 Configure MPLS TE to use RSVP TE...

Page 127: ...e Stateless Session state UP Mastership Normal Role Active Session up time 0000 days 00 hours 00 minutes Session ID Local 0 Peer 0 Keepalive interval Local 30 sec Peer 30 sec Recommended DeadTimer Local 120 sec Peer 120 sec Tolerance Min keepalive interval 10 sec Max unknown messages 5 Request timeout 10 sec Delegation timeout 30 sec Peer address 3 3 3 3 TCP connection 3 3 3 3 29507 1 1 1 1 4189 P...

Page 128: ... 1 1 1 24 Vlan int2 20 1 1 2 24 413BConfiguration procedure 1 Configure IP addresses and masks for interfaces Details not shown 2 Configure IS IS to advertise interface addresses including the loopback interface address For more information see 742HEstablishing an MPLS TE tunnel with RSVP TE 3 Configure an LSR ID and enable MPLS MPLS TE and RSVP TE on each switch Configure Switch A and Switch D to...

Page 129: ... te SwitchC te quit SwitchC rsvp SwitchC rsvp quit SwitchC interface vlan interface 3 SwitchC Vlan interface3 mpls enable SwitchC Vlan interface3 mpls te enable SwitchC Vlan interface3 rsvp enable SwitchC Vlan interface3 quit SwitchC interface vlan interface 2 SwitchC Vlan interface2 mpls enable SwitchC Vlan interface2 mpls te enable SwitchC Vlan interface2 rsvp enable SwitchC Vlan interface2 quit...

Page 130: ... Tunnel1 ip address 7 1 1 1 255 255 255 0 SwitchA Tunnel1 destination 4 4 4 9 SwitchA Tunnel1 mpls te signaling rsvp te SwitchA Tunnel1 mpls te resv style ff SwitchA Tunnel1 mpls te bidirectional co routed active SwitchA Tunnel1 quit Configure Switch D as the passive end of the co routed bidirectional tunnel SwitchD interface tunnel 4 mode mpls te SwitchD Tunnel4 ip address 8 1 1 1 255 255 255 0 S...

Page 131: ...l mode Co routed active Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type CT0 Tunnel Bandwidth 0 kbps Reserved Bandwidth 0 kbps Setup Priority 7 Holding Priority 7 Affinity Attr Mask 0 0 Explicit Path Backup Explicit Path Metric Type TE Record Route Disabled Record Label Disabled FRR Flag Disabled Bandwidth Protection Disabled Backup Bandwidth Flag Disabled Backup Bandwidth Type...

Page 132: ...e UP Description Tunnel4 Interface Bandwidth 64kbps Maximum transmission unit 1496 Internet address 8 1 1 1 24 primary Tunnel source unknown destination 1 1 1 9 Tunnel TTL 255 Tunnel protocol transport CR_LSP Last clearing of counters Never Last 300 seconds input rate 0 bytes sec 0 bits sec 0 packets sec Last 300 seconds output rate 0 bytes sec 0 bits sec 0 packets sec Input 0 packets input 0 byte...

Page 133: ...up Bandwidth Bypass Tunnel Auto Created No Route Pinning Retry Limit Retry Interval Reoptimization Reoptimization Freq Backup Type Backup LSP ID Auto Bandwidth Auto Bandwidth Freq Min Bandwidth Max Bandwidth Collected Bandwidth Display detailed information about the bidirectional MPLS TE tunnel on Switch D SwitchD display mpls lsp verbose Destination 4 4 4 9 FEC 1 1 1 9 1 30478 Protocol RSVP LSR T...

Page 134: ...ks Enable CRLSP hot backup for the tunnel to simultaneously establish a primary CRLSP and a backup CRLSP When the primary CRLSP fails traffic is switched to the backup CRLSP Figure 35 Network diagram Table 6 Interface and IP address assignment Device Interface IP address Device Interface IP address Switch A Loop0 1 1 1 9 32 Switch D Loop0 4 4 4 9 32 Vlan int1 10 1 1 1 24 Vlan int4 30 1 1 2 24 Vlan...

Page 135: ...uit SwitchA interface vlan interface 4 SwitchA Vlan interface4 mpls enable SwitchA Vlan interface4 mpls te enable SwitchA Vlan interface4 rsvp enable SwitchA Vlan interface4 quit Configure Switch B Switch C and Switch D in the same way that Switch A is configured Details not shown 4 Configure an MPLS TE tunnel on Switch A Configure MPLS TE tunnel interface Tunnel 3 SwitchA interface tunnel 3 mode ...

Page 136: ... with the output interface VLAN interface 4 SwitchA display mpls lsp FEC Proto In Out Label Interface Out NHLFE 1 1 1 9 3 34311 RSVP 1150 Vlan1 1 1 1 9 3 34312 RSVP 1151 Vlan4 10 1 1 2 Local Vlan1 30 1 1 2 Local Vlan4 Tunnel3 Local NHLFE1026 Backup NHLFE1028 Display the paths used by the two CRLSPs on Switch A SwitchA display rsvp lsp verbose Tunnel name SwitchA_t3 Destination 3 3 3 9 Source 1 1 1...

Page 137: ...ne that traverses Switch B SwitchA tracert mpls te tunnel 3 MPLS trace route TE tunnel Tunnel3 TTL Replier Time Type Downstream 0 Ingress 10 1 1 2 1147 1 10 1 1 2 1 ms Transit 20 1 1 2 3 2 20 1 1 2 2 ms Egress Shut down interface VLAN interface 2 on Switch B and then tracert tunnel 3 The output shows that packets are forwarded on the CRLSP that traverses Switch D SwitchA tracert mpls te tunnel 3 M...

Page 138: ...SVP TE of the failure so RSVP TE can switch traffic to the bypass tunnel Figure 36 Network diagram Table 7 Interface and IP address assignment Device Interface IP address Device Interface IP address Switch A Loop0 1 1 1 1 32 Switch B Loop0 2 2 2 2 32 Vlan int1 2 1 1 1 24 Vlan int1 2 1 1 2 24 Vlan int10 100 1 1 1 24 Vlan int2 3 1 1 1 24 Switch D Loop0 4 4 4 4 32 Vlan int4 3 2 1 1 24 Vlan int3 4 1 1...

Page 139: ...face 2 SwitchB Vlan interface2 mpls enable SwitchB Vlan interface2 mpls te enable SwitchB Vlan interface2 rsvp enable SwitchB Vlan interface2 rsvp bfd enable SwitchB Vlan interface2 quit SwitchB interface vlan interface 4 SwitchB Vlan interface4 mpls enable SwitchB Vlan interface4 mpls te enable SwitchB Vlan interface4 rsvp enable SwitchB Vlan interface4 quit Configure Switch C in the same way tha...

Page 140: ...rimary Tunnel source unknown destination 4 4 4 4 Tunnel TTL 255 Tunnel protocol transport CR_LSP Last clearing of counters Never Last 300 seconds input rate 0 bytes sec 0 bits sec 0 packets sec Last 300 seconds output rate 1911 bytes sec 15288 bits sec 0 packets sec Input 0 packets input 0 bytes 0 drops Output 1526 packets output 22356852 bytes 0 drops Display detailed information about the MPLS T...

Page 141: ...witchB Tunnel5 destination 3 3 3 3 Specify the tunnel signaling protocol as RSVP TE SwitchB Tunnel5 mpls te signaling rsvp te Specify the explicit path to be used as by path SwitchB Tunnel5 mpls te path preference 1 explicit path by path Set the bandwidth that the bypass tunnel can protect SwitchB Tunnel5 mpls te backup bandwidth un limited SwitchB Tunnel5 quit Bind the bypass tunnel to the protec...

Page 142: ... SwitchA display mpls te tunnel interface Tunnel Name Tunnel 4 Tunnel State Up Main CRLSP up Shared resource CRLSP being set up Tunnel Attributes LSP ID 18753 Tunnel ID 4 Admin State Normal Ingress LSR ID 1 1 1 1 Egress LSR ID 3 3 3 3 Signaling RSVP TE Static CRLSP Name Resv Style SE Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type CT0 Tunnel Bandwidth 0 kbps Reserv...

Page 143: ...te the display interface tunnel 4 command on Switch A to display information about the primary CRLSP The output shows that the tunnel interface is in up state Details not shown Wait for about 5 seconds execute the display mpls lsp verbose command on Switch B The output shows that Tunnel 5 is bound to interface VLAN interface 2 but not in use Details not shown Execute the display ip routing table c...

Page 144: ...4 32 Switch F Loop0 6 6 6 6 32 Vlan int3 4 1 1 2 24 Vlan int6 3 3 1 2 24 Vlan int7 4 2 1 2 24 Vlan int7 4 2 1 1 24 422BConfiguration procedure Before configuration disable the spanning tree feature globally or map each VLAN to an MSTI For more information see Layer 2 LAN Switching Configuration Guide 1 Configure IP addresses and masks for interfaces Details not shown 2 Configure IS IS to advertise...

Page 145: ...face2 quit SwitchB interface vlan interface 4 SwitchB Vlan interface4 mpls enable SwitchB Vlan interface4 mpls te enable SwitchB Vlan interface4 rsvp enable SwitchB Vlan interface4 quit SwitchB interface vlan interface 6 SwitchB Vlan interface6 mpls enable SwitchB Vlan interface6 mpls te enable SwitchB Vlan interface6 rsvp enable SwitchB Vlan interface6 quit Configure Switch C in the same way that...

Page 146: ...l source unknown destination 4 4 4 4 Tunnel TTL 255 Tunnel protocol transport CR_LSP Last clearing of counters Never Last 300 seconds input rate 0 bytes sec 0 bits sec 0 packets sec Last 300 seconds output rate 1911 bytes sec 15288 bits sec 0 packets sec Input 0 packets input 0 bytes 0 drops Output 1526 packets output 22356852 bytes 0 drops Display detailed information about the MPLS TE tunnel int...

Page 147: ...splay interface tunnel brief Brief information on interfaces in route mode Link ADM administratively down Stby standby Protocol s spoofing Interface Link Protocol Primary IP Description Tun50 UP DOWN Tun51 UP DOWN Display information about Tunnel 50 and Tunnel 51 on Switch B The output shows that Tunnel 50 and Tunnel 51 are automatically created bypass tunnels Tunnel 50 is a node protection bypass...

Page 148: ... Ingress LSR ID 2 2 2 2 Egress LSR ID 3 3 3 3 Signaling RSVP TE Static CRLSP Name Resv Style SE Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type CT0 Tunnel Bandwidth 0 kbps Reserved Bandwidth 0 kbps Setup Priority 7 Holding Priority 7 Affinity Attr Mask 0 0 Explicit Path Backup Explicit Path Metric Type TE Record Route Enabled Record Label Disabled FRR Flag Disabled...

Page 149: ... RRO number 12 2 1 1 1 32 Flag 0x00 No FRR 2 1 1 2 32 Flag 0x00 No FRR 1150 Flag 0x01 Global label 2 2 2 2 32 Flag 0x20 No FRR Node ID 3 1 1 1 32 Flag 0x09 FRR Avail Node Prot 3 1 1 2 32 Flag 0x00 No FRR 1151 Flag 0x01 Global label 3 3 3 3 32 Flag 0x20 No FRR Node ID 4 1 1 1 32 Flag 0x00 No FRR 4 1 1 2 32 Flag 0x00 No FRR 3 Flag 0x01 Global label 4 4 4 4 32 Flag 0x20 No FRR Node ID Fast Reroute pr...

Page 150: ...masks for interfaces Details not shown 2 Configure IS IS to advertise interface addresses including the loopback interface address Configure Switch A SwitchA system view SwitchA isis 1 SwitchA isis 1 network entity 00 0005 0000 0000 0001 00 SwitchA isis 1 quit SwitchA interface vlan interface 1 SwitchA Vlan interface1 isis enable 1 SwitchA Vlan interface1 isis circuit level level 2 SwitchA Vlan in...

Page 151: ...ace 2 SwitchC Vlan interface2 isis enable 1 SwitchC Vlan interface2 isis circuit level level 2 SwitchC Vlan interface2 quit SwitchC interface loopback 0 SwitchC LoopBack0 isis enable 1 SwitchC LoopBack0 isis circuit level level 2 SwitchC LoopBack0 quit Configure Switch D SwitchD system view SwitchD isis 1 SwitchD isis 1 network entity 00 0005 0000 0000 0004 00 SwitchD isis 1 quit SwitchD interface...

Page 152: ...interface 1 SwitchA Vlan interface1 mpls enable SwitchA Vlan interface1 mpls te enable SwitchA Vlan interface1 rsvp enable SwitchA Vlan interface1 quit Configure Switch B SwitchB mpls lsr id 2 2 2 9 SwitchB mpls te SwitchB te ds te mode ietf SwitchB te quit SwitchB rsvp SwitchB rsvp quit SwitchB interface vlan interface 1 SwitchB Vlan interface1 mpls enable SwitchB Vlan interface1 mpls te enable S...

Page 153: ...rface3 rsvp enable SwitchD Vlan interface3 quit 4 Configure IS IS TE Configure Switch A SwitchA isis 1 SwitchA isis 1 cost style wide SwitchA isis 1 mpls te enable level 2 SwitchA isis 1 quit Configure Switch B SwitchB isis 1 SwitchB isis 1 cost style wide SwitchB isis 1 mpls te enable level 2 SwitchB isis 1 quit Configure Switch C SwitchC isis 1 SwitchC isis 1 cost style wide SwitchC isis 1 mpls ...

Page 154: ...ace 2 SwitchC Vlan interface2 mpls te max link bandwidth 10000 SwitchC Vlan interface2 mpls te max reservable bandwidth rdm 10000 bc1 8000 bc2 5000 bc3 2000 SwitchC Vlan interface2 quit Set the maximum bandwidth maximum reservable bandwidth and bandwidth constraints on Switch D SwitchD interface vlan interface 3 SwitchD Vlan interface3 mpls te max link bandwidth 10000 SwitchD Vlan interface3 mpls ...

Page 155: ...n about the MPLS TE tunnel on Switch A SwitchA display mpls te tunnel interface Tunnel Name Tunnel 1 Tunnel State Up Main CRLSP up Shared resource CRLSP down Tunnel Attributes LSP ID 36882 Tunnel ID 1 Admin State Normal Ingress LSR ID 1 1 1 9 Egress LSR ID 4 4 4 9 Signaling RSVP TE Static CRLSP Name Resv Style SE Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type CT2 ...

Page 156: ... 5000 0 3 2000 0 TE Class Class Type Priority BW Reserved kbps BW Available kbps 0 0 0 0 0 1 0 1 0 0 2 0 2 0 0 3 0 3 0 0 4 0 4 0 0 5 0 5 0 0 6 0 6 0 0 7 0 7 0 0 Execute the display ip routing table command on Switch A The output shows a static route entry with interface Tunnel 1 as the output interface Details not shown 68B Troubleshooting MPLS TE 205BNo TE LSA generated 427BSymptom OSPF TE is con...

Page 157: ...149 c Use the display ospf peer command to verify that OSPF neighbors are established correctly 2 If the problem persists contact Hewlett Packard Enterprise Support ...

Page 158: ...ace You must specify the incoming label the outgoing label the next hop or the outgoing interface and the required bandwidth on each transit node If it is not configured with the penultimate hop popping function an egress node pops the incoming label of a packet It performs label forwarding according to the inner label or IP forwarding You are only required to specify the incoming label on the egr...

Page 159: ...o not configure the next hop address as a local public IP address when configuring the static CRLSP on the ingress node or a transit node You do not need to execute the static cr lsp egress command on the egress node if the outgoing label configured on the penultimate hop of the static CRLSP is 0 or 3 71B Displaying static CRLSPs Execute display commands in any view Task Command Display static CRL...

Page 160: ... LoopBack0 quit Configure Switch B SwitchB system view SwitchB isis 1 SwitchB isis 1 network entity 00 0005 0000 0000 0002 00 SwitchB isis 1 quit SwitchB interface vlan interface 1 SwitchB Vlan interface1 isis enable 1 SwitchB Vlan interface1 quit SwitchB interface vlan interface 2 SwitchB Vlan interface2 isis enable 1 SwitchB Vlan interface2 quit SwitchB interface loopback 0 SwitchB LoopBack0 isi...

Page 161: ...tchB mpls lsr id 2 2 2 2 SwitchB mpls te SwitchB te quit SwitchB interface vlan interface 1 SwitchB Vlan interface1 mpls enable SwitchB Vlan interface1 mpls te enable SwitchB Vlan interface1 quit SwitchB interface vlan interface 2 SwitchB Vlan interface2 mpls enable SwitchB Vlan interface2 mpls te enable SwitchB Vlan interface2 quit Configure Switch C SwitchC mpls lsr id 3 3 3 3 SwitchC mpls te Sw...

Page 162: ...a static CRLSP Configure Switch A as the ingress node of the static CRLSP and specify the next hop address as 2 1 1 2 outgoing label as 20 and required bandwidth as 2000 kbps SwitchA static cr lsp ingress static cr lsp 1 nexthop 2 1 1 2 out label 20 bandwidth 2000 On Switch A configure tunnel 0 to use the static CRLSP static cr lsp 1 SwitchA interface tunnel 0 SwitchA Tunnel0 mpls te static cr lsp...

Page 163: ...D 0 Admin State Normal Ingress LSR ID 1 1 1 1 Egress LSR ID 3 3 3 3 Signaling Static Static CRLSP Name static cr lsp 1 Resv Style Tunnel mode Reverse LSP name Reverse LSP LSR ID Reverse LSP Tunnel ID Class Type Tunnel Bandwidth Reserved Bandwidth Setup Priority 0 Holding Priority 0 Affinity Attr Mask Explicit Path Backup Explicit Path Metric Type TE Record Route Record Label FRR Flag Backup Bandwi...

Page 164: ... Egress 30 Null Up Verify that Switch A has a static route entry with interface Tunnel 0 as the output interface SwitchA display ip routing table Destinations 12 Routes 12 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 2 1 1 0 24 Direct 0 0 2 1 1 1 Vlan1 2 1 1 0 32 Direct 0 0 2 1 1 1 Vlan1 2 1 1 1 32 Direct 0 0 127 ...

Page 165: ...port Path message processing errors to the sender They do not affect the state of the nodes along the path ResvErr messages Sent downstream by the sender or a transit node to notify the downstream nodes of an Resv message processing error or of a reservation error caused by preemption ResvConf messages Sent to the receiver to confirm Resv messages Hello messages Sent between any two directly conne...

Page 166: ...al and the CRLSP established based on this state is also removed The Path and Resv messages for refreshing the resource reservation states are collectively referred to as refresh messages Refresh messages can also be used to recover from lost RSVP messages When multiple RSVP sessions exist on a network a short refresh interval can cause network degradation but a long refresh interval cannot meet t...

Page 167: ...the signaling protocol or control plane fails so that LSRs can still forward packets according to forwarding entries RSVP GR defines the following roles GR restarter Router that gracefully restarts due to a manually configured command or a fault It must be GR capable GR helper Neighbor of the GR restarter A GR helper maintains the neighbor relationship with the GR restarter and helps the GR restar...

Page 168: ... 753HConfiguring RSVP GR 754HEnabling BFD for RSVP 75B Enabling RSVP Step Command Remarks 1 Enter system view system view N A 2 Enable global RSVP and enter RSVP view rsvp By default global RSVP is disabled 3 Return to system view quit N A 4 Enter interface view interface interface type interface number N A 5 Enable RSVP on the interface rsvp enable By default RSVP is disabled on the interface 76B...

Page 169: ...mission interval is 500 milliseconds This command takes effect after reliable RSVP message delivery is enabled by using the rsvp reduction srefresh reliability command 78B Configuring RSVP hello extension When RSVP hello extension is enabled on an interface the device receives and sends hello messages through the interface to detect the neighbor s status If the device receives a hello request from...

Page 170: ...gurations in RSVP neighbor view interface view and RSVP view are in descending order of priority To configure RSVP authentication in RSVP neighbor view Step Command Remarks 1 Enter system view system view N A 2 Enter RSVP view rsvp N A 3 Create an RSVP authentication neighbor and enter RSVP neighbor view peer ip address By default no RSVP authentication neighbors exist 4 Enable RSVP authentication...

Page 171: ...igure RSVP authentication in RSVP view Step Command Remarks 1 Enter system view system view N A 2 Enter RSVP view rsvp N A 3 Enable RSVP authentication globally and configure the authentication key authentication key cipher plain string By default RSVP authentication is disabled 4 Enable challenge response handshake globally authentication challenge By default the challenge response handshake feat...

Page 172: ...for RSVP If a link fails MPLS TE tunnels over the link fail to forward packets MPLS TE cannot quickly detect a link failure To address this issue you can enable BFD for RSVP so MPLS TE can quickly switch data from the primary path to the backup path upon a link failure To enable BFD for RSVP Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type in...

Page 173: ...SVP path states display rsvp sender destination ip address source ip address tunnel id tunnel id lsp id lsp id verbose Display RSVP statistics display rsvp statistics interface interface type interface number Clear RSVP security associations reset rsvp authentication from ip address to ip address Clear RSVP statistics reset rsvp statistics interface interface type interface number 84B RSVP configu...

Page 174: ...nterface 1 SwitchA Vlan interface1 isis enable 1 SwitchA Vlan interface1 isis circuit level level 2 SwitchA Vlan interface1 quit SwitchA interface loopback 0 SwitchA LoopBack0 isis enable 1 SwitchA LoopBack0 isis circuit level level 2 SwitchA LoopBack0 quit Configure Switch B SwitchB system view SwitchB isis 1 SwitchB isis 1 network entity 00 0005 0000 0000 0002 00 SwitchB isis 1 quit SwitchB inte...

Page 175: ...n interface3 isis circuit level level 2 SwitchD Vlan interface3 quit SwitchD interface loopback 0 SwitchD LoopBack0 isis enable 1 SwitchD LoopBack0 isis circuit level level 2 SwitchD LoopBack0 quit Execute the display ip routing table command on each switch to verify that the switches have learned the routes to one another including the routes to the loopback interfaces Details not shown 3 Configu...

Page 176: ... SwitchC Vlan interface3 quit SwitchC interface vlan interface 2 SwitchC Vlan interface2 mpls enable SwitchC Vlan interface2 mpls te enable SwitchC Vlan interface2 rsvp enable SwitchC Vlan interface2 quit Configure Switch D SwitchD mpls lsr id 4 4 4 9 SwitchD mpls te SwitchD te quit SwitchD rsvp SwitchD rsvp quit SwitchD interface vlan interface 3 SwitchD Vlan interface3 mpls enable SwitchD Vlan i...

Page 177: ... SwitchB Vlan interface2 quit Set the maximum link bandwidth and maximum reservable bandwidth on Switch C SwitchC interface vlan interface 3 SwitchC Vlan interface3 mpls te max link bandwidth 10000 SwitchC Vlan interface3 mpls te max reservable bandwidth 5000 SwitchC Vlan interface3 quit SwitchC interface vlan interface 2 SwitchC Vlan interface2 mpls te max link bandwidth 10000 SwitchC Vlan interf...

Page 178: ...c Last 300 seconds output rate 6 bytes sec 48 bits sec 0 packets sec Input 0 packets 0 bytes 0 drops Output 177 packets 11428 bytes 0 drops Display detailed information about the MPLS TE tunnel on Switch A SwitchA display mpls te tunnel interface Tunnel Name Tunnel 1 Tunnel State Up Main CRLSP up Shared resource CRLSP down Tunnel Attributes LSP ID 23331 Tunnel ID 1 Admin State Normal Ingress LSR I...

Page 179: ...orwarding when a switch reboots Figure 42 Network diagram 437BConfiguration procedure 1 Configure IP addresses and masks for interfaces Details not shown 2 Configure IS IS to advertise interface addresses including the loopback interface address Details not shown 3 Configure an LSR ID enable MPLS MPLS TE RSVP and RSVP hello extension Configure Switch A SwitchA system view SwitchA mpls lsr id 1 1 1...

Page 180: ...erface2 mpls enable SwitchC Vlan interface2 mpls te enable SwitchC Vlan interface2 rsvp enable SwitchC Vlan interface2 rsvp hello enable SwitchC Vlan interface2 quit 4 Configure IS IS TE Details not shown 5 Configure an MPLS TE tunnel Details not shown 6 Configure RSVP GR Configure Switch A SwitchA rsvp SwitchA rsvp graceful restart enable Configure Switch B SwitchB rsvp SwitchB rsvp graceful rest...

Page 181: ...173 Peer GR restart time 120000 ms Peer GR recovery time 0 ms The output shows that the neighbor s GR state is Ready ...

Page 182: ...q keyword has a higher priority For example the select seq lsp cr lsp load balance number 3 command gives LSP higher priority over CRLSP If no LSP is available or the number of LSPs is less than 3 VPN uses MPLS TE tunnels The tunnels selected by this method are not fixed complicating traffic planning As a best practice do not use this method If you configure both methods for a tunnel policy the tu...

Page 183: ...unnel preferred path tunnel number Method 2 Configure the tunnel selection order and the number of tunnels for load balancing select seq cr lsp lsp load balance number number Configure one or both methods By default no preferred tunnels are configured By default only one tunnel is selected in LSP CRLSP order NOTE For a VPN to exclusively use a tunnel you can specify the tunnel as the preferred tun...

Page 184: ...quit 2 Configure MPLS VPN instances and apply tunnel policies to the VPN instances Create MPLS VPN instance vpna and apply tunnel policy preferredte1 to it PE1 ip vpn instance vpna PE1 vpn instance vpna route distinguisher 100 1 PE1 vpn instance vpna vpn target 100 1 PE1 vpn instance vpna tnl policy preferredte1 PE1 vpn instance vpna quit Create MPLS VPN instance vpnb and apply tunnel policy prefe...

Page 185: ...es and apply tunnel policies to the VPN instances Create MPLS VPN instances vpna and vpnb and apply tunnel policy preferredte1 to them PE1 ip vpn instance vpna PE1 vpn instance vpna route distinguisher 100 1 PE1 vpn instance vpna vpn target 100 1 PE1 vpn instance vpna tnl policy preferredte1 PE1 vpn instance vpna quit PE1 ip vpn instance vpnb PE1 vpn instance vpnb route distinguisher 100 2 PE1 vpn...

Page 186: ...178 PE1 vpn instance vpne vpn target 100 5 PE1 vpn instance vpne tnl policy select lsp ...

Page 187: ...mer network and has one or more interfaces directly connected to a service provider network It does not support MPLS Provider edge device A PE device resides at the edge of a service provider network and is connected to one or more CEs All MPLS VPN services are processed on PEs Provider device A P device is a core device on a service provider network It is not directly connected to any CEs A P dev...

Page 188: ...nce contains the VPN membership and routing rules of associated sites 445BVPN IPv4 address Each VPN independently manages its address space The address spaces of VPNs might overlap For example if both VPN 1 and VPN 2 use the addresses on subnet 10 110 10 0 24 address space overlapping occurs BGP cannot process overlapping VPN address spaces For example if both VPN 1 and VPN 2 use the subnet 10 110...

Page 189: ... number where the minimum value of the AS number is 65536 For example 65536 1 447BMP BGP MP BGP supports multiple address families including IPv4 multicast IPv6 unicast IPv6 multicast and VPN IPv4 address families In MPLS L3VPN MP BGP advertises VPN IPv4 routes for VPN sites between PEs 223BMPLS L3VPN route advertisement In a basic MPLS L3VPN CEs and PEs are responsible for advertising VPN routing...

Page 190: ... address 1 1 1 2 CE 1 transmits the packet to PE 1 2 PE 1 performs the following operations a Finds the matching VPN route based on the inbound interface and destination address of the packet b Labels the packet with both the inner label and the outer tag c Forwards the packet to the public tunnel 3 P devices forward the packet to PE 2 by the outer tag The MPLS label is removed from the packet at ...

Page 191: ...te with the VPN 2 sites 449BHub and spoke networking scheme The hub and spoke networking scheme is suitable for a VPN where all users must communicate with each other through an access control device In a hub and spoke network as shown in 763HFigure 48 configure route targets as follows On spoke PEs PEs connected to spoke sites set the export target to Spoke and the import target to Hub On the hub...

Page 192: ...te to Hub CE 4 Hub CE advertises the IPv4 route back to Hub PE 5 Hub PE adds the IPv4 route to the routing table of VPN 1 out changes it to a VPN IPv4 route and advertises the VPN IPv4 route to Spoke PE 2 through MP BGP 6 Spoke PE 2 changes the VPN IPv4 route to the original IPv4 route and advertises the IPv4 route to Site 2 After spoke sites exchange routes through the hub site they can communica...

Page 193: ...tiple ISPs in different ASs or to multiple ASs of an ISP Inter AS VPN provides the following solutions VRF to VRF connections between ASBRs This solution is also called inter AS option A EBGP redistribution of labeled VPN IPv4 routes between ASBRs ASBRs advertise VPN IPv4 routes to each other through MP EBGP This solution is also called inter AS option B Multihop EBGP redistribution of labeled VPN...

Page 194: ...to the receiving interface and advertises the routes to PE 3 through MP IBGP 4 PE 3 advertises the received routes to CE 3 Packets forwarded within an AS are VPN packets that carry two labels Packets forwarded between ASBRs are common IP packets Inter AS option A is easy to carry out because no special configuration is required on the PEs acting as the ASBRs However it has limited scalability beca...

Page 195: ...nnel from PE 3 to ASBR 2 2 ASBR 2 removes the outer tag replaces L3 with L2 and forwards the packet to ASBR 1 Packets between ASBR 1 and ASBR 2 carry only one inner label 3 ASBR 1 replaces L2 with L1 adds the outer tag of the public tunnel from ASBR 1 to PE 1 and forwards the packet to PE 1 4 PE 1 removes the inner label and outer tag and forwards the packet to CE 1 In this solution ASBRs must rec...

Page 196: ...lt in this solution A public tunnel for example the one from PE 3 to PE 1 is set up by using the following process 1 Within AS 100 the public tunnel from ASBR 1 to PE 1 is set up by using a label distribution protocol for example LDP Assume that the outgoing label for the public tunnel on ASBR 1 is L1 2 ASBR 1 advertises labeled IPv4 unicast routes to ASBR 2 through EBGP The route destined for PE ...

Page 197: ...ording to the inner label Lx As shown in 768HFigure 53 to improve scalability you can specify a route reflector RR in each AS to exchange VPN IPv4 routes with PEs in the same AS The RR in each AS maintains all VPN IPv4 routes The RRs in two ASs establish a multihop MP EBGP session to advertise VPN IPv4 routes Figure 53 Network diagram for inter AS option C using RRs 227BCarrier s carrier If a cust...

Page 198: ...ou must enable MPLS on the CE of the Level 2 carrier regardless of whether the PE and CE are in the same AS A Level 2 carrier can be an ordinary ISP or an MPLS L3VPN service provider As shown in 769HFigure 54 when the customer carrier is an ordinary ISP its PEs and CEs run IGP to communicate with each other The PEs do not need to run MPLS PE 3 and PE 4 exchange customer network routes IPv4 unicast...

Page 199: ...ere is a customer VPN named VPN A The customer VPN contains two sub VPNs VPN A 1 and VPN A 2 The service provider PEs consider the customer s network as a common VPN user and do not join any sub VPNs The service provider CE devices CE 1 and CE 2 exchange VPNv4 routes including sub VPN routing information with the service provider PEs which implements the propagation of the sub VPN routing informat...

Page 200: ... VPN IPv4 routes it matches the VPN IPv4 routes to the import targets of its local VPNs Each local VPN accepts routes of its own and advertises them to provider CEs If a provider CE such as CE 7 and CE 8 in 772HFigure 56 is connected to a provider PE through an IPv4 connection the PE advertises IPv4 routes to the CE If it is a VPN IPv4 connection a customer MPLS VPN network the PE advertises VPN I...

Page 201: ...Ns connected through UPEs including the routes of both the local and remote sites An SPE advertises routes along with labels to UPEs including the default routes of VPN instances or summary routes and the routes permitted by the routing policy By using routing policies you can control which sites in a VPN can communicate with each other An SPE features large routing table capacity high forwarding ...

Page 202: ...ort multiple OSPF instances to create independent routing tables for VPN instances Each OSPF process is bound to a VPN instance Routes learned by an OSPF process are added into the routing table of the bound VPN instance 456BOSPF area configuration between a PE and a CE The OSPF area between a PE and a CE can be either a non backbone area or a backbone area In the OSPF VPN extension application th...

Page 203: ...s Type 7 After domain ID configuration VPN 1 routes are advertised from CE 11 to CE 21 and CE 22 by using the following process 1 PE 1 redistributes OSPF routes into BGP adds the domain ID to the redistributed BGP VPNv4 routes as a BGP extended community attribute and advertises the routes to PE 2 2 PE 2 compares the domain ID in the received routes with the locally configured domain ID If they ar...

Page 204: ...domain ID or with different domain IDs A direct route between CEs It is an intra area route that is called a backdoor link VPN traffic is always forwarded through the backdoor link because it has a higher priority than the inter area route To forward VPN traffic over the inter area route you can establish a sham link between the two PEs to change the inter area route to an intra area route Figure ...

Page 205: ...2 through PE 2 and CE 2 To remove the routing loop you can configure the same SoO attribute on PE 2 for CE 2 and CE 3 PE 2 adds the SoO attribute to route updates received from CE 2 or CE 3 and checks the SoO attribute of route updates to be advertised to CE 2 or CE 3 The SoO attribute of the route updates from CE 3 is the same as the SoO attribute for CE 2 and PE 2 does not advertise route update...

Page 206: ...SPs or MPLS TE tunnels see 782HConfiguring MPLS OAM 461BVPNv4 route backup for an IPv4 route Figure 64 Network diagram As shown in 783HFigure 64 configure FRR on the egress node PE 2 and specify the backup next hop for VPN 1 as PE 3 When PE 2 receives an IPv4 route from CE 2 and a VPNv4 route from PE 3 both routes are destined for VPN 1 connected to CE 2 PE 2 uses the IPv4 route as the primary lin...

Page 207: ...ath CE 1 PE 1 PE 2 CE 2 In this scenario PE 2 is responsible for primary link detection and traffic switchover 233BProtocols and standards RFC 3107 Carrying Label Information in BGP 4 RFC 4360 BGP Extended Communities Attribute RFC 4364 BGP MPLS IP Virtual Private Networks VPNs RFC 4577 OSPF as the Provider Customer Edge Protocol for BGP MPLS IP Virtual Private Networks VPNs 90B MPLS L3VPN configu...

Page 208: ... from public network routes and routes among VPNs This feature allows VPN instances to be used in network scenarios in addition to MPLS L3VPNs All VPN instance configurations are performed on PEs or MCEs 463BCreating a VPN instance A VPN instance is a collection of the VPN membership and routing rules of its associated site A VPN instance might correspond to more than one VPN To create and configu...

Page 209: ...iew system view N A 2 Enter VPN instance view or IPv4 VPN view Enter VPN instance view ip vpn instance vpn instance name Enter IPv4 VPN view a ip vpn instance vpn instance name b address family ipv4 Configurations made in VPN instance view apply to both IPv4 VPN and IPv6 VPN IPv4 VPN prefers the configurations in IPv4 VPN view over the configurations in VPN instance view 3 Configure route targets ...

Page 210: ...ame dest address mask length mask interface type interface number next hop address next hop address public track track entry number vpn instance d vpn instance name next hop address track track entry number permanent preference preference tag tag value description text By default no static route is configured for a VPN instance Perform this configuration on the PE On the CE configure a common stat...

Page 211: ...PE The domain ID is carried in the routes of the OSPF process When redistributing routes from the OSPF process BGP adds the domain ID as an extended community attribute into BGP routes An OSPF process can be configured with only one primary domain ID Domain IDs of different OSPF processes can be the same All OSPF processes of a VPN must be configured with the same domain ID 4 Configure the type co...

Page 212: ...PN EBGP peer peer group name ip address mask length as number as number By default no BGP peers exist For more information about BGP peers and peer groups see Layer 3 IP Routing Configuration Guide 5 Create the BGP VPN IPv4 unicast family and enter its view address family ipv4 unicast By default the BGP VPN IPv4 unicast family is not created 6 Enable IPv4 unicast route exchange with the specified ...

Page 213: ...ault BGP does not exchange IPv4 unicast routes with any peer 6 Optional Configure route redistribution import route protocol process id all processes allow direct med med value route policy route policy name A CE must redistribute its routes to the PE so the PE can advertise them to the peer CE 471BConfiguring IBGP between a PE and a CE Use IBGP between PE and CE only in a basic MPLS L3VPN network...

Page 214: ...een clients is enabled by default 9 Optional Configure the cluster ID for the RR reflector cluster id cluster id ip address By default the RR uses its own router ID as the cluster ID If multiple RRs exist in a cluster use this command to configure the same cluster ID for all RRs in the cluster to avoid routing loops 2 Configure the CE Step Command Remarks 1 Enter system view system view N A 2 Ente...

Page 215: ...is configured in BGP VPNv4 address family view For more information about BGP route control see Layer 3 IP Routing Configuration Guide To configure BGP VPNv4 route control Step Command Remarks 1 Enter system view system view N A 2 Enter BGP instance view bgp as number instance instance name multi session thread N A 3 Enter BGP VPNv4 address family view address family vpnv4 N A 4 Configure filterin...

Page 216: ...igure this command on the RR so the RR does not change the next hop of routes sent to BGP peers and clients 14 Set a preferred value for routes received from a peer or peer group peer group name ipv4 address mask length preferred value value By default the preferred value is 0 15 Apply a prefix list to filter routes received from or advertised to a peer or peer group peer group name ipv4 address m...

Page 217: ...e targets configured on the PEs must match those configured on the ASBRs in the same AS to make sure VPN routes sent by the PEs or ASBRs can be received by the ASBRs or PEs Route targets configured on the PEs in different ASs do not have such requirements For more information see 803HConfiguring basic MPLS L3VPN 240BConfiguring inter AS option B To configure inter AS option B perform configuration...

Page 218: ...family view address family vpnv4 N A 12 Enable BGP to exchange VPNv4 routes with the PE in the same AS and the ASBR in different ASs peer group name ipv4 address mask length enable By default BGP cannot exchange VPNv4 routing information with a peer 13 Disable route target filtering of VPNv4 routes undo policy vpn target By default route target filtering is enabled for received VPNv4 routes Only V...

Page 219: ...o BGP peers exist 5 Create the BGP IPv4 unicast address family and enter its view address family ipv4 unicast By default the BGP IPv4 unicast address family is not created 6 Enable BGP to exchange IPv4 unicast routes with the ASBR in the same AS peer group name ipv4 address mask length enable By default BGP does not exchange IPv4 unicast routes with any peer 7 Enable BGP to exchange labeled IPv4 r...

Page 220: ...ly mpls label By default no MPLS label is set for IPv4 routes 5 Return to system view quit N A 6 Enter interface view of the interface connected to an internal router of the AS interface interface type interface number N A 7 Enable MPLS on the interface mpls enable By default MPLS is disabled on the interface 8 Enable MPLS LDP on the interface mpls ldp enable By default MPLS LDP is disabled on the...

Page 221: ...urations between customer PE and provider CE Configure BGP VPNv4 route exchange between them To make sure the provider CE can receive all VPNv4 routes configure the undo policy vpn target command on the provider CE to not filter VPNv4 routes by RTs Configurations between provider CE and provider PE Configure VPN instances and enable nested VPN on the provider PE and configure BGP VPNv4 route excha...

Page 222: ... MPLS L3VPN settings on UPE and SPE In addition configure the following settings on the SPE Specify the BGP peer or peer group as a UPE Advertise the default route of the specified VPN instance or routes matching a routing policy to the UPE Create a BGP VPN instance so the learned VPNv4 routes can be added into the BGP routing table of the corresponding VPN instance by comparing RTs Associating an...

Page 223: ... 95B Configuring an OSPF sham link When a backdoor link exists between the two sites of a VPN you can create a sham link between PEs to forward VPN traffic through the sham link on the backbone rather than the backdoor link A sham link is considered an OSPF intra area route The source and destination addresses of the sham link must be loopback interface addresses with 32 bit masks The loopback int...

Page 224: ...a best practice specify a router ID 3 Set the external route tag for imported VPN routes route tag tag value By default if BGP runs within an MPLS backbone and the BGP AS number is not greater than 65535 the first two octets of the external route tag are 0xD000 and the last two octets are the local BGP AS number If the AS number is greater than 65535 the external route tag is 0 4 Enter OSPF area v...

Page 225: ...igure the SoO attribute on the PE For more information about the BGP AS number substitution feature and the SoO attribute see 806HBGP AS number substitution and SoO attribute To configure BGP AS number substitution and SoO attribute Step Command Remarks 1 Enter system view system view N A 2 Enter BGP instance view bgp as number instance instance name multi session thread N A 3 Enter BGP VPN instan...

Page 226: ...mmand is required when echo mode BFD is used to detect primary route connectivity in VPNv4 route backup for an IPv4 route For more information about this command see High Availability Command Reference 4 Use BFD to test the connectivity of an LSP or MPLS TE tunnel Configure BFD to test the connectivity of the LSP for the specified FEC mpls bfd dest addr mask length nexthop nexthop address discrimi...

Page 227: ... 2 Use a routing policy to specify a backup next hop for the address family fast reroute route policy route policy name By default MPLS L3VPN FRR is disabled Method 1 might result in routing loops Use it with caution By default no routing policy is used The apply fast reroute backup nexthop command can take effect in the routing policy that is being used Other apply commands do not take effect For...

Page 228: ...ing for BGP route flapping is disabled 101B Displaying and maintaining MPLS L3VPN You can soft reset or reset BGP sessions to apply new BGP configurations A soft reset operation updates BGP routing information without tearing down BGP connections A reset operation updates BGP routing information by tearing down and then re establishing BGP connections Soft reset requires that BGP peers have route ...

Page 229: ... routes ipv4 address mask length mask statistics statistics Display incoming labels for BGP IPv4 unicast routes display bgp instance instance name routing table ipv4 unicast vpn instance vpn instance name inlabel Display outgoing labels for BGP IPv4 unicast routes display bgp instance instance name routing table ipv4 unicast vpn instance vpn instance name outlabel Display incoming labels for BGP V...

Page 230: ...12 10 2 1 2 24 Vlan int12 172 2 1 2 24 CE 2 Vlan int12 10 2 1 1 24 Vlan int11 10 3 1 2 24 CE 3 Vlan int11 10 3 1 1 24 Vlan int13 10 4 1 2 24 CE 4 Vlan int13 10 4 1 1 24 475BConfiguration procedure 1 Configure an IGP on the MPLS backbone to ensure IP connectivity within the backbone Configure PE 1 PE1 system view PE1 interface loopback 0 PE1 LoopBack0 ip address 1 1 1 9 32 PE1 LoopBack0 quit PE1 in...

Page 231: ...opBack0 quit PE2 interface vlan interface 12 PE2 Vlan interface12 ip address 172 2 1 2 24 PE2 Vlan interface12 quit PE2 ospf PE2 ospf 1 area 0 PE2 ospf 1 area 0 0 0 0 network 172 2 1 0 0 0 0 255 PE2 ospf 1 area 0 0 0 0 network 3 3 3 9 0 0 0 0 PE2 ospf 1 area 0 0 0 0 quit PE2 ospf 1 quit Execute the display ospf peer command to verify that OSPF adjacencies in Full state have been established betwee...

Page 232: ...Details not shown 3 Configure VPN instances on PEs Configure PE 1 PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 100 1 PE1 vpn instance vpn1 vpn target 111 1 PE1 vpn instance vpn1 quit PE1 ip vpn instance vpn2 PE1 vpn instance vpn2 route distinguisher 100 2 PE1 vpn instance vpn2 vpn target 222 2 PE1 vpn instance vpn2 quit PE1 interface vlan interface 11 PE1 Vlan interface11 ip ...

Page 233: ... break 56 bytes from 10 1 1 1 icmp_seq 0 ttl 255 time 1 000 ms 56 bytes from 10 1 1 1 icmp_seq 1 ttl 255 time 2 000 ms 56 bytes from 10 1 1 1 icmp_seq 2 ttl 255 time 0 000 ms 56 bytes from 10 1 1 1 icmp_seq 3 ttl 255 time 1 000 ms 56 bytes from 10 1 1 1 icmp_seq 4 ttl 255 time 0 000 ms Ping statistics for 10 1 1 1 5 packet s transmitted 5 packet s received 0 0 packet loss round trip min avg max st...

Page 234: ...p default vpnv4 quit PE1 bgp default quit Configure PE 2 PE2 bgp 100 PE2 bgp default peer 1 1 1 9 as number 100 PE2 bgp default peer 1 1 1 9 connect interface loopback 0 PE2 bgp default address family vpnv4 PE2 bgp default vpnv4 peer 1 1 1 9 enable PE2 bgp default vpnv4 quit PE2 bgp default quit Execute the display bgp peer vpnv4 command on the PEs to verify that a BGP peer relationship in Establi...

Page 235: ...Configure EBGP between the Spoke CEs and Spoke PEs and between Hub CE and Hub PE to exchange VPN routing information Configure OSPF between the Spoke PEs and Hub PE to implement communication between the PEs and configure MP IBGP between them to exchange VPN routing information Figure 67 Network diagram Table 13 Interface and IP address assignment Device Interface IP address Device Interface IP ad...

Page 236: ...0 quit Spoke PE2 interface vlan interface 5 Spoke PE2 Vlan interface5 ip address 172 2 1 1 24 Spoke PE2 Vlan interface5 quit Spoke PE2 ospf Spoke PE2 ospf 1 area 0 Spoke PE2 ospf 1 area 0 0 0 0 network 172 2 1 0 0 0 0 255 Spoke PE2 ospf 1 area 0 0 0 0 network 3 3 3 9 0 0 0 0 Spoke PE2 ospf 1 area 0 0 0 0 quit Spoke PE2 ospf 1 quit Configure Hub PE Hub PE system view Hub PE interface loopback 0 Hub...

Page 237: ...2 2 2 9 Hub PE mpls ldp Hub PE ldp quit Hub PE interface vlan interface 4 Hub PE Vlan interface4 mpls enable Hub PE Vlan interface4 mpls ldp enable Hub PE Vlan interface4 quit Hub PE interface vlan interface 5 Hub PE Vlan interface5 mpls enable Hub PE Vlan interface5 mpls ldp enable Hub PE Vlan interface5 quit Execute the display mpls ldp peer command on the devices to verify that LDP sessions in ...

Page 238: ...n interface6 quit Hub PE interface vlan interface 7 Hub PE Vlan interface7 ip binding vpn instance vpn1 out Hub PE Vlan interface7 ip address 10 4 1 2 24 Hub PE Vlan interface7 quit Configure IP addresses for the CEs according to 808HTable 13 Details not shown Execute the display ip vpn instance command on the PEs to display the configuration of the VPN instance for example on Spoke PE 1 Spoke PE1...

Page 239: ...65430 Hub CE bgp default peer 10 3 1 2 as number 100 Hub CE bgp default peer 10 4 1 2 as number 100 Hub CE bgp default address family ipv4 Hub CE bgp default ipv4 peer 10 3 1 2 enable Hub CE bgp default ipv4 peer 10 4 1 2 enable Hub CE bgp default ipv4 import route direct Hub CE bgp default ipv4 quit Hub CE bgp default quit Configure Spoke PE 1 Spoke PE1 bgp 100 Spoke PE1 bgp default ip vpn instan...

Page 240: ...n MP IBGP peer relationship between the Spoke PEs and Hub PE Configure Spoke PE 1 Spoke PE1 bgp 100 Spoke PE1 bgp default peer 2 2 2 9 as number 100 Spoke PE1 bgp default peer 2 2 2 9 connect interface loopback 0 Spoke PE1 bgp default address family vpnv4 Spoke PE1 bgp default vpnv4 peer 2 2 2 9 enable Spoke PE1 bgp default vpnv4 quit Spoke PE1 bgp default quit Configure Spoke PE 2 Spoke PE2 bgp 1...

Page 241: ... 0 1 InLoop0 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 Verify that Spoke CE 1 and Spoke CE 2 can ping each other The TTL value indicates that traffic from Spoke CE 1 to Spoke CE 2 passes six hops 255 250 1 and is forwarded through Hub CE This example uses Spoke CE 1 to verify their connectivity Spoke CE1 ping 10 2 1 1...

Page 242: ...t each ASBR PE has established an OSPF adjacency in Full state with the PE in the same AS and that PEs and ASBR PEs in the same AS have learned the routes to the loopback interfaces of each other Verify that each ASBR PE and the PE in the same AS can ping each other Details not shown 2 Configure basic MPLS and MPLS LDP on the MPLS backbone to establish LDP LSPs Configure basic MPLS on PE 1 and ena...

Page 243: ... ldp PE2 ldp quit PE2 interface vlan interface 11 PE2 Vlan interface11 mpls enable PE2 Vlan interface11 mpls ldp enable PE2 Vlan interface11 quit Execute the display mpls ldp peer command on the devices to verify that the session status is Operational and that each PE and the ASBR PE in the same AS have established a neighbor relationship Details not shown 3 Configure VPN instances on PEs For the ...

Page 244: ...ASBR PE1 Vlan interface12 ip address 192 1 1 1 24 ASBR PE1 Vlan interface12 quit On ASBR PE 2 create a VPN instance and bind the instance to the interface connected to ASBR PE 1 ASBR PE 2 considers ASBR PE 1 to be its CE ASBR PE2 ip vpn instance vpn1 ASBR PE2 vpn vpn vpn1 route distinguisher 200 1 ASBR PE2 vpn vpn vpn1 vpn target 200 1 both ASBR PE2 vpn vpn vpn1 quit ASBR PE2 interface vlan interf...

Page 245: ... ipv4 vpn1 quit PE2 bgp default vpn1 quit PE2 bgp default quit 5 Establish an MP IBGP peer relationship between each PE and the ASBR PE in the same AS and an EBGP peer relationship between the ASBR PEs Configure PE 1 PE1 bgp 100 PE1 bgp default peer 2 2 2 9 as number 100 PE1 bgp default peer 2 2 2 9 connect interface loopback 0 PE1 bgp default address family vpnv4 PE1 bgp default vpnv4 peer 2 2 2 ...

Page 246: ...E2 bgp default quit Configure PE 2 PE2 bgp 200 PE2 bgp default peer 3 3 3 9 as number 200 PE2 bgp default peer 3 3 3 9 connect interface loopback 0 PE2 bgp default address family vpnv4 PE2 bgp default vpnv4 peer 3 3 3 9 enable PE2 bgp default vpnv4 peer 3 3 3 9 next hop local PE2 bgp default vpnv4 quit PE2 bgp default quit 482BVerifying the configuration Verify that the CEs can learn the interface...

Page 247: ...w PE1 isis 1 PE1 isis 1 network entity 10 111 111 111 111 00 PE1 isis 1 quit Configure the LSR ID and enable MPLS and LDP PE1 mpls lsr id 2 2 2 9 PE1 mpls ldp PE1 ldp quit Configure VLAN interface 11 and enable IS IS MPLS and LDP on the interface PE1 interface vlan interface 11 PE1 Vlan interface11 ip address 1 1 1 2 255 0 0 0 PE1 Vlan interface11 isis enable 1 PE1 Vlan interface11 mpls enable PE1...

Page 248: ...peer 3 3 3 9 connect interface loopback 0 PE1 bgp default address family vpnv4 PE1 bgp default vpnv4 peer 3 3 3 9 enable PE1 bgp default vpnv4 quit Redistribute direct routes to the VPN routing table of vpn1 PE1 bgp default ip vpn instance vpn1 PE1 bgp default vpn1 address family ipv4 unicast PE1 bgp default ipv4 vpn1 import route direct PE1 bgp default ipv4 vpn1 quit PE1 bgp default vpn1 quit PE1...

Page 249: ...2 2 0 and EBGP peer 11 0 0 1 as VPNv4 peers ASBR PE1 bgp default vpnv4 peer 11 0 0 1 enable ASBR PE1 bgp default vpnv4 peer 2 2 2 9 enable ASBR PE1 bgp default vpnv4 quit 3 Configure ASBR PE 2 Enable IS IS on ASBR PE 2 ASBR PE2 system view ASBR PE2 isis 1 ASBR PE2 isis 1 network entity 10 222 222 222 222 00 ASBR PE2 isis 1 quit Configure the LSR ID and enable MPLS and LDP ASBR PE2 mpls lsr id 4 4 ...

Page 250: ...ew PE2 isis 1 PE2 isis 1 network entity 10 111 111 111 111 00 PE2 isis 1 quit Configure the LSR ID and enable MPLS and LDP PE2 mpls lsr id 5 5 5 9 PE2 mpls ldp PE2 ldp quit Configure VLAN interface 11 and enable IS IS MPLS and LDP on the interface PE2 interface vlan interface 11 PE2 Vlan interface11 ip address 9 1 1 2 255 0 0 0 PE2 Vlan interface11 isis enable 1 PE2 Vlan interface11 mpls enable PE...

Page 251: ...0 0 0 1 56 data bytes press CTRL_C to break 56 bytes from 20 0 0 1 icmp_seq 0 ttl 255 time 1 208 ms 56 bytes from 20 0 0 1 icmp_seq 1 ttl 255 time 0 867 ms 56 bytes from 20 0 0 1 icmp_seq 2 ttl 255 time 0 551 ms 56 bytes from 20 0 0 1 icmp_seq 3 ttl 255 time 0 566 ms 56 bytes from 20 0 0 1 icmp_seq 4 ttl 255 time 0 570 ms Ping statistics for 20 0 0 1 5 packet s transmitted 5 packet s received 0 0 ...

Page 252: ...nt12 30 0 0 2 24 CE 2 Vlan int12 20 0 0 2 24 487BConfiguration procedure 1 Configure CE 1 Configure an IP address for VLAN interface 12 CE1 system view CE1 interface vlan interface 12 CE1 Vlan interface12 ip address 30 0 0 2 24 CE1 Vlan interface12 quit Establish an EBGP peer relationship with PE 1 and redistribute VPN routes CE1 bgp 65001 CE1 bgp default peer 30 0 0 1 as number 100 CE1 bgp defaul...

Page 253: ...target 3 3 export extcommunity PE1 vpn instance vpn1 quit Associate VLAN interface 12 with VPN instance vpn1 and specify the IP address for the interface PE1 interface vlan interface 12 PE1 Vlan interface12 ip binding vpn instance vpn1 PE1 Vlan interface12 ip address 30 0 0 1 24 PE1 Vlan interface12 quit Enable BGP on PE 1 PE1 bgp 100 Enable the capability to advertise labeled routes to IBGP peer ...

Page 254: ... ip address 1 1 1 1 255 0 0 0 ASBR PE1 Vlan interface11 isis enable 1 ASBR PE1 Vlan interface11 mpls enable ASBR PE1 Vlan interface11 mpls ldp enable ASBR PE1 Vlan interface11 quit Configure VLAN interface 12 and enable MPLS on it ASBR PE1 interface vlan interface 12 ASBR PE1 Vlan interface12 ip address 11 0 0 2 255 0 0 0 ASBR PE1 Vlan interface12 mpls enable ASBR PE1 Vlan interface12 quit Configu...

Page 255: ...0 1 and to receive labeled routes from the peer ASBR PE1 bgp default ipv4 peer 11 0 0 1 label route capability ASBR PE1 bgp default ipv4 quit ASBR PE1 bgp default quit 4 Configure ASBR PE 2 Enable IS IS on ASBR PE 2 ASBR PE2 system view ASBR PE2 isis 1 ASBR PE2 isis 1 network entity 10 222 222 222 222 00 ASBR PE2 isis 1 quit Configure the LSR ID and enable MPLS and LDP ASBR PE2 mpls lsr id 4 4 4 9...

Page 256: ...S IS process 1 into BGP ASBR PE2 bgp default ipv4 import route isis 1 ASBR PE2 bgp default ipv4 quit Apply routing policy policy1 to routes advertised to EBGP peer 11 0 0 2 ASBR PE2 bgp default peer 11 0 0 2 as number 100 ASBR PE2 bgp default address family ipv4 unicast ASBR PE2 bgp default ipv4 peer 11 0 0 2 enable ASBR PE2 bgp default ipv4 peer 11 0 0 2 route policy policy1 export Enable the cap...

Page 257: ...er 600 PE2 bgp default peer 4 4 4 9 connect interface loopback 0 PE2 bgp default address family ipv4 unicast PE2 bgp default ipv4 peer 4 4 4 9 enable PE2 bgp default ipv4 peer 4 4 4 9 label route capability PE2 bgp default ipv4 quit Configure the maximum hop count from PE 2 to EBGP peer 2 2 2 9 as 10 PE2 bgp default peer 2 2 2 9 as number 100 PE2 bgp default peer 2 2 2 9 connect interface loopback...

Page 258: ...gure carrier s carrier for the scenario shown in 809HFigure 71 In this scenario PE 1 and PE 2 are the provider carrier s PE switches They provide VPN services for the customer carrier CE 1 and CE 2 are the customer carrier s switches They are connected to the provider carrier s backbone as CE switches PE 3 and PE 4 are the customer carrier s PE switches They provide MPLS L3VPN services for the end...

Page 259: ...1 2 24 Vlan int11 11 1 1 1 24 Vlan int12 20 1 1 1 24 PE 1 Loop0 3 3 3 9 32 PE 2 Loop0 4 4 4 9 32 Vlan int11 11 1 1 2 24 Vlan int12 30 1 1 2 24 Vlan int12 30 1 1 1 24 Vlan int11 21 1 1 1 24 490BConfiguration procedure 1 Configure MPLS L3VPN on the provider carrier backbone Enable IS IS as the IGP enable LDP between PE 1 and PE 2 and establish an MP IBGP peer relationship between the PEs Configure P...

Page 260: ...d between PE 1 and PE 2 Details not shown Execute the display bgp peer vpnv4 command to verify that a BGP peer relationship in Established state has been established between PE 1 and PE 2 Details not shown Execute the display isis peer command to verify that the IS IS neighbor relationship has been established between PE 1 and PE 2 Details not shown 2 Configure the customer carrier network Enable ...

Page 261: ... them Configure PE 4 and CE 2 in the same way that PE 3 and CE 1 are configured Details not shown 3 Allow CEs of the customer carrier to access PEs of the provider carrier and redistribute IS IS routes to BGP and BGP routes to IS IS on the PEs Configure PE 1 PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 200 1 PE1 vpn instance vpn1 vpn target 1 1 PE1 vpn instance vpn1 quit PE1 ...

Page 262: ...onnect the CEs of the end customers and the PEs of the customer carrier Configure CE 3 CE3 system view CE3 interface vlan interface11 CE3 Vlan interface11 ip address 100 1 1 1 24 CE3 Vlan interface11 quit CE3 bgp 65410 CE3 bgp default peer 100 1 1 2 as number 100 CE3 bgp default address family ipv4 unicast CE3 bgp default ipv4 peer 100 1 1 2 enable CE3 bgp default ipv4 import route direct CE3 bgp ...

Page 263: ...lay ip routing table Destinations 14 Routes 14 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 3 3 3 9 32 Direct 0 0 127 0 0 1 InLoop0 4 4 4 9 32 IS_L1 15 10 30 1 1 2 Vlan12 30 1 1 0 24 Direct 0 0 30 1 1 1 Vlan12 30 1 1 0 32 Direct 0 0 30 1 1 1 Vlan12 30 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 30 1 1 255 32 Direct 0 0 30 1 1 1 Vlan12 127 0 0 0 8 Direct 0 0 1...

Page 264: ... 21 Routes 21 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 IS_L1 15 10 10 1 1 1 Vlan12 2 2 2 9 32 Direct 0 0 127 0 0 1 InLoop0 5 5 5 9 32 IS_L2 15 74 11 1 1 2 Vlan11 6 6 6 9 32 IS_L2 15 74 11 1 1 2 Vlan11 10 1 1 0 24 Direct 0 0 10 1 1 2 Vlan12 10 1 1 0 32 Direct 0 0 10 1 1 2 Vlan12 10 1 1 2 32 Direct 0 0 127 0 0 1 InLoop0 10 1 1 255 32 Direct...

Page 265: ...4 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 Verify that the VPN routing table contains the route to the remote VPN customer PE3 display ip routing table vpn instance vpn1 Destinations 13 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 100 1 1 0 24 Direct 0 0 100 1 1 2 Vlan11 100 1 1 0 32 Direct 0 0 100 1 1 ...

Page 266: ...er s backbone Exchange of the end customers VPN routes between PE 3 and PE 4 the PEs of the customer carrier In this process an MP EBGP peer relationship must be established between PE 3 and PE 4 Figure 72 Network diagram Table 18 Interface and IP address assignment Device Interface IP address Device Interface IP address CE 3 Vlan int11 100 1 1 1 24 CE 4 Vlan int11 120 1 1 1 24 PE 3 Loop0 1 1 1 9 ...

Page 267: ...e12 mpls ldp enable PE1 Vlan interface12 mpls ldp transport address interface PE1 Vlan interface12 quit PE1 bgp 100 PE1 bgp default peer 4 4 4 9 as number 100 PE1 bgp default peer 4 4 4 9 connect interface loopback 0 PE1 bgp default address family vpnv4 PE1 bgp default vpnv4 peer 4 4 4 9 enable PE1 bgp default vpnv4 quit PE1 bgp default quit Configure PE 2 in the same way that PE 1 is configured D...

Page 268: ...oopback 0 CE1 LoopBack0 ip address 2 2 2 9 32 CE1 LoopBack0 quit CE1 mpls lsr id 2 2 2 9 CE1 mpls ldp CE1 ldp import bgp CE1 ldp quit CE1 isis 2 CE1 isis 2 network entity 10 0000 0000 0000 0002 00 CE1 isis 2 address family ipv4 CE1 isis 2 ipv4 import route bgp CE1 isis 2 ipv4 quit CE1 isis 2 quit CE1 interface loopback 0 CE1 LoopBack0 isis enable 2 CE1 LoopBack0 quit CE1 interface vlan interface 1...

Page 269: ...p default quit PE1 route policy csc permit node 0 PE1 route policy csc 0 apply mpls label PE1 route policy csc 0 quit Configure CE 1 CE1 interface vlan interface 11 CE1 Vlan interface11 ip address 11 1 1 1 24 CE1 Vlan interface11 mpls enable CE1 Vlan interface11 quit CE1 bgp 100 CE1 bgp default peer 11 1 1 2 as number 200 CE1 bgp default address family ipv4 unicast CE1 bgp default ipv4 peer 11 1 1...

Page 270: ...st PE3 bgp default ipv4 vpn1 peer 100 1 1 1 enable PE3 bgp default ipv4 vpn1 quit PE3 bgp default vpn1 quit PE3 bgp default quit Configure PE 4 and CE 4 in the same way that PE 3 and CE 3 are configured Details not shown 5 Configure an MP EBGP peer relationship between the PEs of the customer carrier to exchange the VPN routes of the end customers Configure PE 3 PE3 bgp 100 PE3 bgp default peer 6 ...

Page 271: ...tinations 14 Routes 14 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 BGP 255 10 11 1 1 1 Vlan11 6 6 6 9 32 BGP 255 10 4 4 4 9 Vlan12 11 1 1 0 24 Direct 0 0 11 1 1 2 Vlan11 11 1 1 0 32 Direct 0 0 11 1 1 2 Vlan11 11 1 1 2 32 Direct 0 0 127 0 0 1 InLoop0 11 1 1 255 32 Direct 0 0 11 1 1 2 Vlan11 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 3...

Page 272: ...rk routing table contains the internal routes of the customer carrier network PE3 display ip routing table Destinations 15 Routes 15 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 Direct 0 0 127 0 0 1 InLoop0 2 2 2 9 32 IS_L1 15 10 10 1 1 2 Vlan12 6 6 6 9 32 IS_L2 15 74 10 1 1 2 Vlan12 10 1 1 0 24 Direct 0 0 10 1 1 1 Vlan12 10 1 1 0 32 Direct 0...

Page 273: ...es on the service provider backbone Both of them support the nested VPN feature CE 1 and CE 2 are connected to the service provider backbone Both of them support VPNv4 routes PE 3 and PE 4 are PE devices of the customer VPN Both of them support MPLS L3VPN CE 3 through CE 6 are CE devices of the sub VPNs for the customer VPN The key of nested VPN configuration is to understand the processing of rou...

Page 274: ... Vlan int1 11 1 1 2 24 Vlan int1 21 1 1 1 24 Vlan int2 30 1 1 1 24 Vlan int2 30 1 1 2 24 PE 3 Loop0 1 1 1 9 32 PE 4 Loop0 6 6 6 9 32 Vlan int1 100 1 1 2 24 Vlan int1 120 1 1 2 24 Vlan int2 10 1 1 1 24 Vlan int2 20 1 1 2 24 Vlan int3 110 1 1 2 24 Vlan int3 130 1 1 2 24 496BConfiguration procedure 1 Configure MPLS L3VPN on the service provider backbone Use IS IS as the IGP protocol enable LDP and es...

Page 275: ...rational state has been established between PE 1 and PE 2 Details not shown Execute the display bgp peer vpnv4 command to verify that a BGP peer relationship in Established state has been established between PE 1 and PE 2 Details not shown Execute the display isis peer command to verify that the IS IS neighbor relationship has been established between PE 1 and PE 2 Details not shown 2 Configure th...

Page 276: ... in the same way that PE 3 and CE 1 are configured Details not shown 3 Connect CE 1 and CE 2 to service provider PEs Configure PE 1 PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 200 1 PE1 vpn instance vpn1 vpn target 1 1 PE1 vpn instance vpn1 quit PE1 interface vlan interface 1 PE1 Vlan interface1 ip binding vpn instance vpn1 PE1 Vlan interface1 ip address 11 1 1 2 24 PE1 Vlan...

Page 277: ... CE 5 CE5 system view CE5 interface vlan interface 3 CE5 Vlan interface3 ip address 110 1 1 1 24 CE5 Vlan interface3 quit CE5 bgp 65411 CE5 bgp default peer 110 1 1 2 as number 200 CE5 bgp default address family ipv4 unicast CE5 bgp default ipv4 peer 110 1 1 2 enable CE5 bgp default ipv4 import route direct CE5 bgp default ipv4 quit CE5 bgp default quit Configure PE 3 PE3 ip vpn instance SUB_VPN1 ...

Page 278: ...ted VPN and VPNv4 route exchange with CE 1 PE1 bgp 100 PE1 bgp default address family vpnv4 PE1 bgp default vpnv4 nesting vpn PE1 bgp default vpnv4 quit PE1 bgp default ip vpn instance vpn1 PE1 bgp default vpn1 address family vpnv4 PE1 bgp default vpnv4 vpn1 peer 11 1 1 1 enable PE1 bgp default vpnv4 vpn1 quit PE1 bgp default vpn1 quit PE1 bgp default quit Enable CE 1 to exchange VPNv4 routes with...

Page 279: ...vider PEs for example on PE 1 Verify that the public routing table contains only routes on the service provider network PE1 display ip routing table Destinations 14 Routes 14 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 3 3 3 9 32 Direct 0 0 127 0 0 1 InLoop0 4 4 4 9 32 IS_L1 15 10 30 1 1 2 Vlan2 30 1 1 0 24 Direct 0 0 30 1 1 1 Vlan2 30 1 1 0 32 Direct ...

Page 280: ...InLoop0 2 Display the VPNv4 routing table on the provider CEs for example on CE 1 Verify that the VPNv4 routing table on the customer VPN contains internal sub VPN routes CE1 display bgp routing table vpnv4 BGP local router ID is 2 2 2 9 Status codes valid best d dampened h history s suppressed S stale i internal e external Origin i IGP e EGP incomplete Total number of routes from all PEs 4 Route ...

Page 281: ... 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 4 Display the routing table on the CEs of sub VPNs in the customer VPN for example on CE 3 and CE 5 Verify that the routing table contains the route to the remote sub VPN on CE 3 CE3 display ip routing table Destinations 13 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0...

Page 282: ...t 0 0 127 0 0 1 InLoop0 5 Verify that CE 3 and CE 4 can ping each other Details not shown 6 Verify that CE5 and CE 6 can ping each other Details not shown 7 Verify that CE 3 and CE 6 cannot ping each other Details not shown 253BConfiguring HoVPN 498BNetwork requirements There are two levels of networks the backbone and the MPLS VPN networks as shown in 812HFigure 74 SPEs act as PEs to allow MPLS V...

Page 283: ...E1 LoopBack0 quit UPE1 mpls lsr id 1 1 1 9 UPE1 mpls ldp UPE1 ldp quit UPE1 interface vlan interface 11 UPE1 Vlan interface11 ip address 172 1 1 1 24 UPE1 Vlan interface11 mpls enable UPE1 Vlan interface11 mpls ldp enable UPE1 Vlan interface11 quit Configure the IGP protocol OSPF in this example UPE1 ospf UPE1 ospf 1 area 0 UPE1 ospf 1 area 0 0 0 0 network 172 1 1 0 0 0 0 255 UPE1 ospf 1 area 0 0 ...

Page 284: ...uit UPE1 bgp default vpn1 quit Establish an EBGP peer relationship with CE 2 UPE1 bgp default ip vpn instance vpn2 UPE1 bgp default vpn2 peer 10 4 1 1 as number 65420 UPE1 bgp default vpn2 address family ipv4 unicast UPE1 bgp default ipv4 vpn2 peer 10 4 1 1 enable UPE1 bgp default ipv4 vpn2 quit UPE1 bgp default vpn2 quit UPE1 bgp default quit 2 Configure CE 1 CE1 system view CE1 interface vlan in...

Page 285: ... UPE2 ospf 1 quit Configure VPN instances vpn1 and vpn2 allowing CE 3 and CE 4 to access UPE 2 UPE2 ip vpn instance vpn1 UPE2 vpn instance vpn1 route distinguisher 300 1 UPE2 vpn instance vpn1 vpn target 100 1 both UPE2 vpn instance vpn1 quit UPE2 ip vpn instance vpn2 UPE2 vpn instance vpn2 route distinguisher 400 2 UPE2 vpn instance vpn2 vpn target 100 2 both UPE2 vpn instance vpn2 quit UPE2 inte...

Page 286: ...2 CE3 Vlan interface12 ip address 10 1 1 1 255 255 255 0 CE3 Vlan interface12 quit CE3 bgp 65430 CE3 bgp default peer 10 1 1 2 as number 100 CE3 bgp default address family ipv4 unicast CE3 bgp default ipv4 peer 10 1 1 2 enable CE3 bgp default ipv4 import route direct CE3 bgp default ipv4 quit CE3 bgp default quit 6 Configure CE 4 CE4 system view CE4 interface vlan interface 13 CE4 Vlan interface13...

Page 287: ... SPE1 ip vpn instance vpn2 SPE1 vpn instance vpn2 route distinguisher 700 1 SPE1 vpn instance vpn2 vpn target 100 2 both SPE1 vpn instance vpn2 quit Establish MP IBGP peer relationships with SPE 2 and UPE 1 and specify UPE 1 as a UPE SPE1 bgp 100 SPE1 bgp default peer 1 1 1 9 as number 100 SPE1 bgp default peer 1 1 1 9 connect interface loopback 0 SPE1 bgp default peer 3 3 3 9 as number 100 SPE1 b...

Page 288: ...E2 interface vlan interface 11 SPE2 Vlan interface11 ip address 172 2 1 2 24 SPE2 Vlan interface11 mpls enable SPE2 Vlan interface11 mpls ldp enable SPE2 Vlan interface11 quit Configure the IGP protocol OSPF in this example SPE2 ospf SPE2 ospf 1 area 0 SPE2 ospf 1 area 0 0 0 0 network 3 3 3 9 0 0 0 0 SPE2 ospf 1 area 0 0 0 0 network 172 2 1 0 0 0 0 255 SPE2 ospf 1 area 0 0 0 0 network 180 1 1 0 0 ...

Page 289: ... bgp default quit Advertise to UPE 2 the routes permitted by a routing policy the routes of CE 1 SPE2 ip prefix list hope index 10 permit 10 2 1 1 24 SPE2 route policy hope permit node 0 SPE2 route policy hope 0 if match ip address prefix list hope SPE2 route policy hope 0 quit SPE2 bgp 100 SPE2 bgp default address family vpnv4 SPE2 bgp default vpnv4 peer 4 4 4 9 upe route policy hope export 500BV...

Page 290: ... interfaces see 814HTable 21 Details not shown Set the cost value to 2 for both the link between CE 1 and Switch A and the link between CE 2 and Switch A Details not shown Execute the display ip routing table command to verify that CE 1 and CE 2 have learned the route to each other Details not shown 2 Configure MPLS L3VPN on the backbone Configure basic MPLS and MPLS LDP on PE 1 to establish LDP L...

Page 291: ...E2 system view PE2 interface loopback 0 PE2 LoopBack0 ip address 2 2 2 9 32 PE2 LoopBack0 quit PE2 mpls lsr id 2 2 2 9 PE2 mpls ldp PE2 ldp quit PE2 interface vlan interface 12 PE2 Vlan interface12 ip address 10 1 1 2 24 PE2 Vlan interface12 mpls enable PE2 Vlan interface12 mpls ldp enable PE2 Vlan interface12 quit Configure PE 2 to take PE 1 as an MP IBGP peer PE2 bgp 100 PE2 bgp default peer 1 1...

Page 292: ...PE2 ip vpn instance vpn1 PE2 vpn instance vpn1 route distinguisher 100 2 PE2 vpn instance vpn1 vpn target 1 1 PE2 vpn instance vpn1 quit PE2 interface vlan interface 11 PE2 Vlan interface11 ip binding vpn instance vpn1 PE2 Vlan interface11 ip address 120 1 1 2 24 PE2 Vlan interface11 quit PE2 ospf 100 vpn instance vpn1 PE2 ospf 100 domain id 10 PE2 ospf 100 area 1 PE2 ospf 100 area 0 0 0 1 network...

Page 293: ... to the peer CE is now along the BGP route across the backbone A route to the sham link destination address exists Execute the display ip routing table command on the CEs Verify that the next hop of the OSPF route to the peer CE is the interface connected to the PE VLAN interface 11 This means that the VPN traffic to the peer CE is forwarded over the backbone Details not shown Verify that a sham l...

Page 294: ...1 1 2 24 Vlan int11 10 1 1 2 24 PE 2 Loop0 3 3 3 9 32 Vlan int12 20 1 1 1 24 Vlan int11 30 1 1 2 24 CE 2 Vlan int12 10 2 1 1 24 Vlan int12 10 2 1 2 24 Vlan int13 200 1 1 1 24 505BConfiguration procedure 1 Configuring basic MPLS L3VPN Configure OSPF on the MPLS backbone to allow the PEs and P device to learn the routes of the loopback interfaces from each other Configure basic MPLS and MPLS LDP on ...

Page 295: ...an13 200 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 200 1 1 255 24 Direct 0 0 200 1 1 1 Vlan13 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 Execute the display ip routing table command on CE 1 to verify that CE 1 has not learned the route to the VPN behind CE 2 Details not shown Execute the display ip routing table vpn instan...

Page 296: ...ed routes Total number of routes 2 BGP local router ID is 200 1 1 1 Status codes valid best d dampened h history s suppressed S stale i internal e external Origin i IGP e EGP incomplete Network NextHop MED LocPrf PrefVal Path Ogn e 10 1 1 0 24 10 2 1 2 0 100 e 10 2 1 0 24 10 2 1 2 0 0 100 2 Configure BGP AS number substitution on PE 2 PE2 system view PE2 bgp 100 PE2 bgp default ip vpn instance vpn...

Page 297: ...1 Vlan12 100 1 1 0 24 BGP 255 0 10 2 1 2 Vlan12 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 200 1 1 0 24 Direct 0 0 200 1 1 1 Vlan13 200 1 1 0 32 Direct 0 0 200 1 1 1 Vlan13 200 1 1 1 32 Direct 0 0 127 0 0 1 InLoop0 200 1 1 255 32 Direct 0 0 200 1 1 1 Vlan13 224 0 0 0 4 ...

Page 298: ... learn the routes of the loopback interfaces from each other Configure basic MPLS and MPLS LDP on the MPLS backbone to establish LDP LSPs Establish an MP IBGP peer relationship between the PEs to advertise VPN IPv4 routes Configure the VPN instance of VPN 1 on PE 1 to allow CE 1 to access the network Configure the VPN instance of VPN 1 on PE 2 to allow CE 2 to access the network Configure the VPN ...

Page 299: ...0 1 1 1 32 10 2 1 2 0 100 100 e 200 1 1 1 32 10 2 1 2 0 100 100 3 Configure BGP SoO attribute On PE 1 configure the SoO attribute as 1 100 for CE 1 PE1 system view PE1 bgp 100 PE1 bgp default ip vpn instance vpn1 PE1 bgp default vpn1 address family ipv4 PE1 bgp default ipv4 vpn1 peer 10 1 1 1 soo 1 100 On PE 2 configure the SoO attribute as 1 100 for CE 2 PE2 system view PE2 bgp 100 PE2 bgp defaul...

Page 300: ...ectivity between PEs and configure MP IBGP to exchange VPNv4 routing information between PEs Configure MPLS L3VPN FRR on PE 1 to achieve the following purposes When the link PE 1 PE 2 operates correctly traffic from CE 1 to CE 2 goes through the path CE 1 PE 1 PE 2 CE 2 When BFD detects that the LSP between PE 1 and PE 2 fails traffic from CE 1 to CE 2 goes through the path CE 1 PE 1 PE 3 CE 2 Fig...

Page 301: ...rr permit node 10 PE1 route policy if match ip address prefix list abc PE1 route policy apply fast reroute backup nexthop 3 3 3 3 PE1 route policy quit Configure FRR for VPN instance vpn1 to use routing policy frr PE1 bgp 100 PE1 bgp default ip vpn instance vpn1 PE1 bgp default vpn1 address family ipv4 unicast PE1 bgp default ipv4 vpn1 fast reroute route policy frr PE1 bgp default ipv4 vpn1 quit P...

Page 302: ...ments CE 1 and CE 2 belong to VPN 1 Configure EBGP between CEs and PEs to exchange VPN routes Configure OSPF to ensure connectivity between PEs and configure MP IBGP to exchange VPNv4 routing information between PEs Configure MPLS L3VPN FRR on PE 2 to achieve the following purposes When the link PE 2 CE 2 operates correctly traffic from CE 1 to CE 2 goes through the path CE 1 PE 1 PE 2 CE 2 When B...

Page 303: ... frr and specify the backup next hop as 3 3 3 3 for the route to 4 4 4 4 32 PE2 ip prefix list abc index 10 permit 4 4 4 4 32 PE2 route policy frr permit node 10 PE2 route policy if match ip address prefix list abc PE2 route policy apply fast reroute backup nexthop 3 3 3 3 PE2 route policy quit Use echo mode BFD to detect the primary route connectivity PE2 bgp 100 PE2 bgp default primary path dete...

Page 304: ...irements CE 1 and CE 2 belong to VPN 1 Configure EBGP between CEs and PEs to exchange VPN routes Configure OSPF to ensure connectivity between PEs and configure MP IBGP to exchange VPNv4 routing information between PEs Configure MPLS L3VPN FRR on PE 2 to achieve the following purposes When the link PE 2 PE 3 operates correctly traffic from CE 1 to CE 2 goes through the path CE 1 PE 1 PE 2 PE 3 CE ...

Page 305: ... 3 3 32 PE2 system view PE2 mpls bfd enable PE2 mpls bfd 3 3 3 3 32 Create routing policy frr and specify the backup next hop as 10 1 1 1 for the route to 4 4 4 4 32 PE2 ip prefix list abc index 10 permit 4 4 4 4 32 PE2 route policy frr permit node 10 PE2 route policy if match ip address prefix list abc PE2 route policy apply fast reroute backup nexthop 10 1 1 1 PE2 route policy quit Configure FRR...

Page 306: ...4 4 4 32 Protocol BGP Process ID 0 SubProtID 0x1 Age 00h00m04s Cost 0 Preference 255 IpPre N A QosLocalID N A Tag 0 State Active Adv OrigTblID 0x0 OrigVrf default vrf TableID 0x102 OrigAs 300 NibID 0x15000004 LastAs 300 AttrID 0x1 Neighbor 3 3 3 3 Flags 0x110060 OrigNextHop 3 3 3 3 Label 1275 RealNextHop 172 3 1 3 BkLabel NULL BkNextHop 10 1 1 1 Tunnel ID 0x409 Interface Vlan int15 BkTunnel ID Inv...

Page 307: ... run IPv6 and the PE P interface of a PE runs IPv4 Figure 81 Network diagram for the IPv6 MPLS L3VPN model 260BIPv6 MPLS L3VPN packet forwarding Figure 82 IPv6 MPLS L3VPN packet forwarding diagram As shown in 826HFigure 82 the IPv6 MPLS L3VPN packet forwarding procedure is as follows 1 The PC at Site 1 sends an IPv6 packet destined for 2001 2 1 the PC at Site 2 CE 1 transmits the packet to PE 1 VP...

Page 308: ...the CE the ingress PE performs the following operations a Adds RDs and route targets to create VPN IPv6 routes b Saves the routes to the routing table of the VPN instance created for the CE c Assigns VPN labels for the routes d Advertises the VPN IPv6 routes to the egress PE through MP BGP The egress PE performs the following operations a Compares the export target attributes of the VPN IPv6 route...

Page 309: ...833H Creating a VPN instance Required 834H Associating a VPN instance with an interface Optional 835H Configuring route related attributes for a VPN instance Required 836H Configuring routing between a PE and a CE Required 837H Configuring routing between PEs Optional 838H Configuring BGP VPNv6 route control 264BConfiguration prerequisites Before configuring basic IPv6 MPLS L3VPN perform the follo...

Page 310: ... snmp context name context name By default no SNMP context is configured 520BAssociating a VPN instance with an interface After creating and configuring a VPN instance associate the VPN instance with the interface connected to the CE To associate a VPN instance with an interface Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface numbe...

Page 311: ...policy export route policy route policy By default routes to be advertised are not filtered Make sure the routing policy already exists Otherwise the device does not filter routes to be advertised For information about routing policies see Layer 3 IP Routing Configuration Guide 7 Apply a tunnel policy to the VPN instance tnl policy tunnel policy name By default only one tunnel is selected no load ...

Page 312: ...Return to system view quit N A 4 Enter interface view interface interface type interface number N A 5 Enable RIPng on the interface ripng process id enable By default RIPng is disabled on an interface 524BConfiguring OSPFv3 between a PE and a CE An OSPFv3 process belongs to the public network or a single VPN instance If you create an OSPF process without binding it to a VPN instance the process be...

Page 313: ... number If the AS number is greater than 65535 the external route tag is 0 Perform this configuration on the PE 7 Optional Disable setting the DN bit in OSPFv3 LSAs disable dn bit set By default when a PE redistributes BGP routes into OSPFv3 and creates OSPFv3 LSAs it sets the DN bit for the LSAs Before using this command make sure it does not cause any routing loops Perform this configuration on ...

Page 314: ...rocess 3 Configure a network entity title for the IS IS process network entity net By default no NET is configured 4 Create the IS IS IPv6 unicast address family and enter its view address family ipv6 unicast By default the IS IS IPv6 unicast address family is not created 5 Return to system view quit N A 6 Enter interface view interface interface type interface number N A 7 Enable IPv6 for the IS ...

Page 315: ...ing between a PE and a CE the routing information the PE advertises to a CE carries the AS number of the PE Therefore the route updates that the PE receives from the CE also include the AS number of the PE This causes the PE to be unable to receive the route updates In this case you must configure this command to allow routing loops 2 Configure the CE Step Command Remarks 1 Enter system view syste...

Page 316: ...change with the specified peer peer group name ipv6 address prefix length enable By default BGP does not exchange IPv6 unicast routes with any peer 7 Configure the CE as a client of the RR peer group name ipv6 address prefix length reflect client By default no RR or RR client is configured and the PE does not advertise routes learned from the IBGP peer CE to other IBGP peers including VPNv6 IBGP p...

Page 317: ... view system view N A 2 Enter BGP instance view bgp as number instance instance name multi session thread N A 3 Configure the remote PE as the peer peer group name ipv4 address mask length as number as number By default no BGP peers exist 4 Specify the source interface for route update packets sent to the specified peer peer group name ipv4 address mask length connect interface interface type inte...

Page 318: ...re ACL based route filtering for the specified peer or peer group peer group name ipv4 address mask length filter policy ipv6 acl number export import By default no ACL based route filtering is configured 10 Configure IPv6 prefix list based route filtering for the specified peer or peer group peer group name ipv4 address mask length prefix list ipv6 prefix name export import By default no IPv6 pre...

Page 319: ...ing different filtering policies on RRs you can implement load balancing among the RRs 20 Configure the SoO attribute for a BGP peer for peer group peer group name ipv4 address mask length soo site of origin By default the SoO attribute is not configured 106B Configuring inter AS IPv6 VPN If the MPLS backbone spans multiple ASs you must configure inter AS IPv6 VPN There are three inter AS VPN solu...

Page 320: ...SBR in the same AS as an IBGP peer peer group name ipv4 address mask length as number as number By default no BGP peers exist 4 Configure the PE in another AS as an EBGP peer peer group name ipv4 address mask length as number as number By default no BGP peers exist 5 Enter BGP IPv4 unicast address family view address family ipv4 unicast N A 6 Enable BGP to exchange BGP IPv4 unicast routes with the...

Page 321: ...ace view interface loopback interface number By default no loopback interfaces exist 3 Associate the loopback interface with a VPN instance ip binding vpn instance vpn instance name By default the interface is associated with no VPN instance 4 Configure an IPv6 address for the loopback interface For configuration details see Layer 3 IP Services Configuration Guide By default no IPv6 address is con...

Page 322: ...routing loop To remove the routing loop configure the SoO attribute on the PE For more information about the BGP AS number substitution feature and the SoO attribute see 844HBGP AS number substitution and SoO attribute To configure BGP AS number substitution and SoO attribute Step Command Remarks 1 Enter system view system view N A 2 Enter BGP instance view bgp as number instance instance name mul...

Page 323: ...updates BGP routing information by tearing down and then re establishing BGP connections Soft reset requires that BGP peers have route refresh capability Execute the following commands in user view to soft reset or reset BGP connections Task Command Manually soft reset BGP sessions for VPNv6 address family refresh bgp instance instance name ipv4 address mask length all external group group name in...

Page 324: ...tes display bgp instance instance name routing table vpnv6 outlabel Display BGP VPNv6 address family update group information display bgp instance instance name update group vpnv6 ipv4 address Display OSPFv3 sham link information display ospfv3 process id area area id sham link verbose For more information about the display ipv6 routing table display bgp group vpnv6 display bgp peer vpnv6 and disp...

Page 325: ...Vlan int11 2001 3 2 96 CE 3 Vlan int11 2001 3 1 96 Vlan int13 2001 4 2 96 CE 4 Vlan int13 2001 4 1 96 532BConfiguration procedure 1 Configure OSPF on the MPLS backbone to ensure IP connectivity among the PEs and the P switch Configure PE 1 PE1 system view PE1 interface loopback 0 PE1 LoopBack0 ip address 1 1 1 9 32 PE1 LoopBack0 quit PE1 interface vlan interface 13 PE1 Vlan interface13 ip address ...

Page 326: ...an interface 12 PE2 Vlan interface12 ip address 172 2 1 2 24 PE2 Vlan interface12 quit PE2 ospf PE2 ospf 1 area 0 PE2 ospf 1 area 0 0 0 0 network 172 2 1 0 0 0 0 255 PE2 ospf 1 area 0 0 0 0 network 3 3 3 9 0 0 0 0 PE2 ospf 1 area 0 0 0 0 quit PE2 ospf 1 quit Execute the display ospf peer command to verify that OSPF adjacencies in Full state have been established between PE 1 P and PE 2 Execute the...

Page 327: ...e VPN instances on the PEs Configure PE 1 PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 100 1 PE1 vpn instance vpn1 vpn target 111 1 PE1 vpn instance vpn1 quit PE1 ip vpn instance vpn2 PE1 vpn instance vpn2 route distinguisher 100 2 PE1 vpn instance vpn2 vpn target 222 2 PE1 vpn instance vpn2 quit PE1 interface vlan interface 11 PE1 Vlan interface11 ip binding vpn instance vpn...

Page 328: ...cmp_seq 0 hlim 64 time 9 000 ms 56 bytes from 2001 1 1 icmp_seq 1 hlim 64 time 1 000 ms 56 bytes from 2001 1 1 icmp_seq 2 hlim 64 time 0 000 ms 56 bytes from 2001 1 1 icmp_seq 3 hlim 64 time 0 000 ms 56 bytes from 2001 1 1 icmp_seq 4 hlim 64 time 0 000 ms Ping6 statistics for 2001 1 1 5 packet s transmitted 5 packet s received 0 0 packet loss round trip min avg max std dev 0 000 2 000 9 000 3 521 ...

Page 329: ...ily vpnv6 PE1 bgp default af vpnv6 peer 3 3 3 9 enable PE1 bgp default af vpnv6 quit PE1 bgp default quit Configure PE 2 PE2 bgp 100 PE2 bgp default peer 1 1 1 9 as number 100 PE2 bgp default peer 1 1 1 9 connect interface loopback 0 PE2 bgp default address family vpnv6 PE2 bgp default af vpnv6 peer 1 1 1 9 enable PE2 bgp default af vpnv6 quit PE2 bgp default quit Execute the display bgp peer vpnv...

Page 330: ...l Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2001 4 96 Protocol BGP4 NextHop FFFF 3 3 3 9 Preference 255 Interface Vlan13 Cost 0 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 The output shows that PE 1 has routes to the remote CEs Output on PE 2 is similar Verify...

Page 331: ... 64 Spoke PE 1 Loop0 1 1 1 9 32 Vlan int7 14 1 64 Vlan int2 11 2 64 Hub PE Loop0 2 2 2 9 32 Vlan int4 172 1 1 1 24 Vlan int4 172 1 1 2 24 Spoke CE 2 Vlan int3 12 1 64 Vlan int5 172 2 1 2 24 Spoke PE 2 Loop0 3 3 3 9 32 Vlan int6 13 2 64 Vlan int3 12 2 64 Vlan int7 14 2 64 Vlan int5 172 2 1 1 24 535BConfiguration procedure 1 Configure an IGP on the MPLS backbone to ensure IP connectivity within the ...

Page 332: ...E interface vlan interface 4 Hub PE Vlan interface4 ip address 172 1 1 2 24 Hub PE Vlan interface4 quit Hub PE interface vlan interface 5 Hub PE Vlan interface5 ip address 172 2 1 2 24 Hub PE Vlan interface5 quit Hub PE ospf Hub PE ospf 1 area 0 Hub PE ospf 1 area 0 0 0 0 network 172 1 1 0 0 0 0 255 Hub PE ospf 1 area 0 0 0 0 network 172 2 1 0 0 0 0 255 Hub PE ospf 1 area 0 0 0 0 network 2 2 2 9 0...

Page 333: ... command on the PEs to verify that the LSPs have been established by LDP Details not shown 3 Configure VPN instances on the Spoke PEs and Hub PE Configure Spoke PE 1 Spoke PE1 ip vpn instance vpn1 Spoke PE1 vpn instance vpn1 route distinguisher 100 1 Spoke PE1 vpn instance vpn1 vpn target 111 1 import extcommunity Spoke PE1 vpn instance vpn1 vpn target 222 2 export extcommunity Spoke PE1 vpn insta...

Page 334: ... ip vpn instance Total VPN Instances configured 1 VPN Instance Name RD Create time vpn1 100 1 2009 04 08 10 55 07 Use the ping command on the PEs to verify that the PEs can ping their attached CEs This example uses Spoke PE 1 Spoke PE1 ping ipv6 vpn instance vpn1 11 1 Ping6 56 bytes 11 2 11 1 press CTRL_C to break 56 bytes from 11 1 icmp_seq 0 hlim 64 time 0 000 ms 56 bytes from 11 1 icmp_seq 1 hl...

Page 335: ...1 bgp default vpn1 peer 11 1 as number 65410 Spoke PE1 bgp default vpn1 address family ipv6 Spoke PE1 bgp default ipv6 vpn1 peer 11 1 enable Spoke PE1 bgp default ipv6 vpn1 quit Spoke PE1 bgp default vpn1 quit Spoke PE1 bgp default quit Configure Spoke PE 2 Spoke PE2 bgp 100 Spoke PE2 bgp default ip vpn instance vpn1 Spoke PE2 bgp default vpn1 peer 12 1 as number 65420 Spoke PE2 bgp default vpn1 a...

Page 336: ...ddress family vpnv6 Spoke PE2 bgp default vpnv6 peer 2 2 2 9 enable Spoke PE2 bgp default vpnv6 quit Spoke PE2 bgp default quit Configure Hub PE Hub PE bgp 100 Hub PE bgp default peer 1 1 1 9 as number 100 Hub PE bgp default peer 1 1 1 9 connect interface loopback 0 Hub PE bgp default peer 3 3 3 9 as number 100 Hub PE bgp default peer 3 3 3 9 connect interface loopback 0 Hub PE bgp default address...

Page 337: ...N routes Run OSPF on the MPLS backbone of each AS Figure 85 Network diagram Table 29 Interface and IP address assignment Device Interface IP address Device Interface IP address CE 1 Vlan int12 2001 1 1 96 CE 2 Vlan int12 2001 2 1 96 PE 1 Loop0 1 1 1 9 32 PE 2 Loop0 4 4 4 9 32 Vlan int12 2001 1 2 96 Vlan int12 2001 2 2 96 Vlan int11 172 1 1 2 24 Vlan int11 162 1 1 2 24 ASBR PE 1 Loop0 2 2 2 9 32 AS...

Page 338: ...ble PE1 Vlan interface11 mpls ldp enable PE1 Vlan interface11 quit Configure basic MPLS on ASBR PE 1 and enable MPLS LDP for the interface connected to PE 1 ASBR PE1 system view ASBR PE1 mpls lsr id 2 2 2 9 ASBR PE1 mpls ldp ASBR PE1 ldp quit ASBR PE1 interface vlan interface 11 ASBR PE1 Vlan interface11 mpls enable ASBR PE1 Vlan interface11 mpls ldp enable ASBR PE1 Vlan interface11 quit Configure...

Page 339: ...rface 12 CE2 Vlan interface12 ipv6 address 2001 2 1 96 CE2 Vlan interface12 quit Configure PE 2 PE2 ip vpn instance vpn1 PE2 vpn instance route distinguisher 200 2 PE2 vpn instance vpn target 200 1 both PE2 vpn instance quit PE2 interface vlan interface 12 PE2 Vlan interface12 ip binding vpn instance vpn1 PE2 Vlan interface12 ipv6 address 2001 2 2 96 PE2 Vlan interface12 quit On ASBR PE 1 create a...

Page 340: ... 1 PE1 bgp 100 PE1 bgp default ip vpn instance vpn1 PE1 bgp default vpn1 peer 2001 1 1 as number 65001 PE1 bgp default vpn1 address family ipv6 unicast PE1 bgp default ipv6 vpn1 peer 2001 1 1 enable PE1 bgp default ipv6 vpn1 quit PE1 bgp default vpn1 quit PE1 bgp default quit Configure CE 2 CE2 bgp 65002 CE2 bgp default peer 2001 2 2 as number 200 CE2 bgp default address family ipv6 CE2 bgp defaul...

Page 341: ...ASBR PE1 bgp default quit Configure ASBR PE 2 ASBR PE2 bgp 200 ASBR PE2 bgp default ip vpn instance vpn1 ASBR PE2 bgp default vpn1 peer 2002 1 1 as number 100 ASBR PE2 bgp default vpn1 address family ipv6 unicast ASBR PE2 bgp default ipv6 vpn1 peer 2002 1 1 enable ASBR PE2 bgp default ipv6 vpn1 quit ASBR PE2 bgp default vpn1 quit ASBR PE2 bgp default peer 4 4 4 9 as number 200 ASBR PE2 bgp default...

Page 342: ...ther ASBR PE 1 and ASBR PE 2 use EBGP to exchange labeled IPv4 routes Figure 86 Network diagram Table 30 Interface and IP address assignment Device Interface IP address Device Interface IP address PE 1 Loop0 2 2 2 9 32 PE 2 Loop0 5 5 5 9 32 Vlan int11 1 1 1 2 8 Vlan int11 9 1 1 2 8 Vlan int12 2001 1 64 Vlan int12 2002 1 64 ASBR PE 1 Loop0 3 3 3 9 32 ASBR PE 2 Loop0 4 4 4 9 32 Vlan int11 1 1 1 1 8 ...

Page 343: ...11 mpls ldp enable PE1 Vlan interface11 quit Configure Loopback 0 and start IS IS on it PE1 interface loopback 0 PE1 LoopBack0 ip address 2 2 2 9 32 PE1 LoopBack0 isis enable 1 PE1 LoopBack0 quit Create VPN instance vpn1 and configure the RD and route target attributes for it PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 11 11 PE1 vpn instance vpn1 vpn target 3 3 import extcom...

Page 344: ...p default ipv6 vpn1 quit PE1 bgp default vpn1 quit PE1 bgp default quit 3 Configure ASBR PE 1 Start IS IS on ASBR PE 1 ASBR PE1 system view ASBR PE1 isis 1 ASBR PE1 isis 1 network entity 10 222 222 222 222 00 ASBR PE1 isis 1 quit Configure an LSR ID and enable MPLS and LDP ASBR PE1 mpls lsr id 3 3 3 9 ASBR PE1 mpls ldp ASBR PE1 ldp quit Configure VLAN interface 11 and enable IS IS MPLS and LDP on ...

Page 345: ...BR PE1 bgp default ipv4 import route isis 1 ASBR PE1 bgp default ipv4 quit Apply routing policy policy1 to routes advertised to EBGP peer 11 0 0 1 ASBR PE1 bgp default peer 11 0 0 1 as number 600 ASBR PE1 bgp default address family ipv4 unicast ASBR PE1 bgp default ipv4 peer 11 0 0 1 enable ASBR PE1 bgp default ipv4 peer 11 0 0 1 route policy policy1 export Enable the capability to advertise label...

Page 346: ... 5 9 as number 600 ASBR PE2 bgp default peer 5 5 5 9 connect interface loopback 0 ASBR PE2 bgp default address family ipv4 unicast ASBR PE2 bgp default ipv4 peer 5 5 5 9 enable ASBR PE2 bgp default ipv4 peer 5 5 5 9 label route capability Apply routing policy policy2 to routes advertised to IBGP peer 5 5 5 9 ASBR PE2 bgp default ipv4 peer 5 5 5 9 route policy policy2 export Redistribute routes fro...

Page 347: ...pecify the IPv6 address for the interface PE2 interface vlan interface 12 PE2 Vlan interface12 ip binding vpn instance vpn1 PE2 Vlan interface12 ipv6 address 2002 1 64 PE2 Vlan interface12 quit Start BGP on PE 2 PE2 bgp 600 Configure the capability to advertise labeled routes to IBGP peer 4 4 4 9 and to receive labeled routes from the peer PE2 bgp default peer 4 4 4 9 as number 600 PE2 bgp default...

Page 348: ...d CE 2 have a route to each other Verify that CE 1 and CE 2 can ping each other Details not shown 278BConfiguring IPv6 MPLS L3VPN carrier s carrier in the same AS 543BNetwork requirements Configure carrier s carrier for the scenario shown in 847HFigure 87 In this scenario PE 1 and PE 2 are the provider carrier s PE switches They provide VPN services for the customer carrier CE 1 and CE 2 are the c...

Page 349: ...2 PE1 Vlan interface12 ip address 30 1 1 1 24 PE1 Vlan interface12 isis enable 1 PE1 Vlan interface12 mpls enable PE1 Vlan interface12 mpls ldp enable PE1 Vlan interface12 mpls ldp transport address interface PE1 Vlan interface12 quit PE1 bgp 100 PE1 bgp default peer 4 4 4 9 as number 100 PE1 bgp default peer 4 4 4 9 connect interface loopback 0 PE1 bgp default address family vpnv4 PE1 bgp default...

Page 350: ...3 PE3 system view PE3 interface loopback 0 PE3 LoopBack0 ip address 1 1 1 9 32 PE3 LoopBack0 quit PE3 mpls lsr id 1 1 1 9 PE3 mpls ldp PE3 ldp quit PE3 isis 2 PE3 isis 2 network entity 10 0000 0000 0000 0001 00 PE3 isis 2 quit PE3 interface loopback 0 PE3 LoopBack0 isis enable 2 PE3 LoopBack0 quit PE3 interface vlan interface 12 PE3 Vlan interface12 ip address 10 1 1 1 24 PE3 Vlan interface12 isis...

Page 351: ...PE1 isis 2 ipv4 import route bgp allow ibgp PE1 isis 2 ipv4 quit PE1 isis 2 quit PE1 interface vlan interface11 PE1 Vlan interface11 ip binding vpn instance vpn1 PE1 Vlan interface11 ip address 11 1 1 2 24 PE1 Vlan interface11 isis enable 2 PE1 Vlan interface11 mpls enable PE1 Vlan interface11 mpls ldp enable PE1 Vlan interface11 mpls ldp transport address interface PE1 Vlan interface11 quit PE1 b...

Page 352: ...nterface11 quit PE3 bgp 100 PE3 bgp default ip vpn instance vpn1 PE3 bgp default vpn1 peer 2001 1 1 as number 65410 PE3 bgp default vpn1 address family ipv6 unicast PE3 bgp default ipv6 vpn1 peer 2001 1 1 enable PE3 bgp default ipv6 vpn1 quit PE3 bgp default vpn1 quit PE3 bgp default quit Configure PE 4 and CE 4 in the same way that PE 3 and CE 3 are configured Details not shown 5 Establish an MP ...

Page 353: ... carrier network PE1 display ip routing table vpn instance vpn1 Destinations 18 Routes 18 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 1 1 1 9 32 IS_L1 15 20 11 1 1 1 Vlan11 2 2 2 9 32 IS_L1 15 10 11 1 1 1 Vlan11 5 5 5 9 32 BGP 255 10 4 4 4 9 Vlan12 6 6 6 9 32 BGP 255 20 4 4 4 9 Vlan12 10 1 1 0 24 IS_L1 15 20 11 1 1 1 Vlan11 11 1 1 0 24 Direct 0 0 11 1 ...

Page 354: ... 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 3 Display the public network routing table and VPN routing table on the customer carrier PEs for example on PE 3 Verify that the public network routing table contains the internal routes of the customer carrier network PE3 display ip routing table Destinations 18 Routes 18 Destination Mask Proto Pr...

Page 355: ...erence 0 Interface InLoop0 Cost 0 Destination 2001 2 96 Protocol BGP4 NextHop FFFF 6 6 6 9 Preference 255 Interface Vlan12 Cost 0 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface InLoop0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 4 Verify that PE 3 and PE 4 can ping each other Details not shown 5 Verify that CE 3 and CE 4 can ping each o...

Page 356: ...ble 31 Details not shown Set the cost value to 2 for both the link between CE 1 and Switch A and the link between CE 2 and Switch A Details not shown Execute the display ipv6 routing table command to verify that CE 1 and CE 2 have learned the route to each other Details not shown 2 Configure IPv6 MPLS L3VPN on the backbone Configure basic MPLS and MPLS LDP on PE 1 to establish LDP LSPs PE1 system ...

Page 357: ...E2 system view PE2 interface loopback 0 PE2 LoopBack0 ip address 2 2 2 9 32 PE2 LoopBack0 quit PE2 mpls lsr id 2 2 2 9 PE2 mpls ldp PE2 ldp quit PE2 interface vlan interface 12 PE2 Vlan interface12 ip address 10 1 1 2 24 PE2 Vlan interface12 mpls enable PE2 Vlan interface12 mpls ldp enable PE2 Vlan interface12 quit Configure PE 2 to take PE 1 as an MP IBGP peer PE2 bgp 100 PE2 bgp default peer 1 1...

Page 358: ... PE2 vpn instance vpn1 route distinguisher 100 2 PE2 vpn instance vpn1 vpn target 1 1 PE2 vpn instance vpn1 quit PE2 interface vlan interface 11 PE2 Vlan interface11 ip binding vpn instance vpn1 PE2 Vlan interface11 ipv6 address 120 2 64 PE2 Vlan interface11 ospfv3 100 area 1 PE2 Vlan interface11 quit PE2 ospfv3 100 PE2 ospfv3 100 router id 120 1 1 1 PE2 ospfv3 100 domain id 10 PE2 ospfv3 100 quit...

Page 359: ... peer CE is now along the IPv6 BGP route across the backbone A route to the sham link destination address exists Execute the display ipv6 routing table command on the CEs Verify that the next hop of the OSPFv3 route to the peer CE is the interface connected to the PE VLAN interface 11 This means that the VPN traffic to the peer CE is forwarded over the backbone Details not shown Verify that a sham...

Page 360: ... 1 96 Vlan int11 30 1 1 1 24 PE 1 Loop0 10 1 1 1 32 Vlan int12 20 1 1 2 24 Vlan int11 10 1 1 96 PE 2 Loop0 10 1 1 2 32 Vlan int12 20 1 1 1 24 Vlan int11 30 1 1 2 96 CE 2 Vlan int12 10 2 2 96 Vlan int12 10 2 1 24 Vlan int13 200 1 96 550BConfiguration procedure 1 Configuring basic IPv6 MPLS L3VPN Configure OSPF on the MPLS backbone to allow the PEs and P device to learn the routes of the loopback in...

Page 361: ...erence 0 Interface InLoop0 Cost 0 Destination 200 96 Protocol Static NextHop Preference 60 Interface NULL0 Cost 0 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Execute the display ipv6 routing table command on CE 1 to verify that CE 1 has not learned the route to the VPN behind CE 2 Det...

Page 362: ...level 7 PE2 debugging bgp update vpn instance vpn1 10 2 2 ipv6 PE2 refresh bgp all export ipv6 vpn instance vpn1 Jun 13 16 12 52 096 2012 PE2 BGP 7 DEBUG BGP_IPV6 vpn1 Send UPDATE to update group 0 for following destinations Origin Incomplete AS path 100 600 Next hop FFFF 10 1 1 1 100 96 Jun 13 16 12 53 024 2012 PE2 BGP 7 DEBUG BGP vpn1 Send UPDATE MSG to peer 10 2 2 IPv6 UNC NextHop 10 2 1 Execut...

Page 363: ... Next hop 10 2 1 100 96 Display again the routing information that CE 2 has received and the routing table The output shows that CE 2 has learned the route 100 96 CE2 display bgp routing table ipv6 peer 10 2 1 received routes Total number of routes 1 BGP local router ID is 12 1 1 3 Status codes valid best d dampened h history s suppressed S stale i internal e external Origin i IGP e EGP incomplete...

Page 364: ...ot shown 281BConfiguring BGP AS number substitution and SoO attribute 552BNetwork requirements CE 1 CE 2 and CE 3 belong to VPN 1 and are connected to PE1 PE 2 and PE 3 CE 1 and CE 2 reside in the same site CE1 CE2 and CE 3 all use AS number 600 To avoid route loss configure BGP AS number substitution on PEs To avoid routing loops configure the same SoO attribute on PE 1 and PE 2 for CE 1 and CE 2...

Page 365: ...stance of VPN 1 on PE 1 to allow CE 1 to access the network Configure the VPN instance of VPN 1 on PE 2 to allow CE 2 to access the network Configure the VPN instance of VPN 1 on PE 3 to allow CE 3 to access the network Configure BGP as the PE CE routing protocol and redistribute routes of the CEs into the PEs For more information about basic MPLS L3VPN configurations see 852HConfiguring IPv6 MPLS...

Page 366: ...ly ipv6 PE2 bgp default ipv6 vpn1 peer 10 2 1 soo 1 100 554BVerifying the configuration PE 2 does not advertise routes received from CE 1 to CE 2 because the same SoO attribute has been configured Display the routing table of CE 2 The output shows that the route 100 96 has been removed CE2 display ipv6 routing table Destinations 4 Routes 4 Destination 1 128 Protocol Direct NextHop 1 Preference 0 I...

Page 367: ...rt displays the path that an MPLS LSP tunnel or an MPLS TE tunnel travels from the ingress to the egress to locate errors on the tunnel MPLS tracert consecutively sends MPLS echo requests along the LSP tunnel with the TTL increasing from 1 to a specific value Each hop along the tunnel returns an MPLS echo reply to the ingress due to TTL timeout so the ingress can collect information about each hop...

Page 368: ... data plane and control plane and records the detected errors in system logs You can check the logs to monitor LSP connectivity If both BFD and periodic MPLS tracert are configured for an LSP and the periodic tracert feature detects a data plane and control plane inconsistency the device performs the following tasks 1 Deletes the BFD session for the LSP 2 Re establishes the BFD session based on th...

Page 369: ... configuring BFD for the LSP tunnel perform the following tasks a Configure an MPLS LSR ID for the local device b Make sure a route is available on the remote device to reach the MPLS LSR ID If multiple LSPs exist for an FEC you can perform one of the following tasks Create a BFD session for an LSP by specifying the next hop of the LSP This configuration is not available for nested LSP connectivit...

Page 370: ...check By default periodic LSP tracert is disabled 115B Configuring MPLS OAM for MPLS TE tunnels To verify MPLS TE tunnel connectivity you can use one of the following methods Use ping mpls te command or the tracert mpls te command to trigger MPLS TE tunnel connectivity verification as needed Configure BFD for the system to automatically verify MPLS TE tunnel connectivity 290BConfiguring MPLS ping ...

Page 371: ...node and egress node both operate in active mode On a BFD session established in dynamic mode the egress node operates in active mode and the ingress node operates in passive mode Executing the bfd session init mode command on the ingress or egress node does not change the node s operating mode If both BFD and FRR are enabled for an MPLS TE tunnel set the BFD detection interval for tunnel connecti...

Page 372: ... 0 network 1 1 1 9 0 0 0 0 SwitchA ospf 1 area 0 0 0 0 network 10 1 1 0 0 0 0 255 SwitchA ospf 1 area 0 0 0 0 quit SwitchA ospf 1 quit Configure Switch B SwitchB system view SwitchB ospf SwitchB ospf 1 area 0 SwitchB ospf 1 area 0 0 0 0 network 2 2 2 9 0 0 0 0 SwitchB ospf 1 area 0 0 0 0 network 10 1 1 0 0 0 0 255 SwitchB ospf 1 area 0 0 0 0 network 20 1 1 0 0 0 0 255 SwitchB ospf 1 area 0 0 0 0 q...

Page 373: ... enable SwitchB Vlan interface3 quit Configure Switch C SwitchC mpls lsr id 3 3 3 9 SwitchC mpls ldp SwitchC ldp quit SwitchC interface vlan interface 3 SwitchC Vlan interface3 mpls enable SwitchC Vlan interface3 mpls ldp enable SwitchC Vlan interface3 quit 4 Enable BFD for MPLS and configure BFD to verify LSP connectivity Configure Switch A SwitchA mpls bfd enable SwitchA mpls bfd 3 3 3 9 32 Conf...

Page 374: ...cr 513 Remote Discr 513 Source IP 1 1 1 9 Destination IP 127 0 0 1 Session State Up Session Role Passive Template Name The output shows that two BFD sessions have been established between Switch A and Switch C One session verifies the connectivity of the LSP from 3 3 3 9 32 to 1 1 1 9 32 and the other session verifies the connectivity of the LSP from 1 1 1 9 32 to 3 3 3 9 32 ...

Page 375: ...as one or more interfaces directly connected to a service provider network It does not support MPLS Provider edge device A PE device resides at the edge of a service provider network and is connected to one or more CEs All MPLS VPN services are processed on PEs Provider device A P device is a core device on a service provider network It is not directly connected to any CEs A P device has only basi...

Page 376: ...nce contains the VPN membership and routing rules of associated sites 557BVPN IPv4 address Each VPN independently manages its address space The address spaces of VPNs might overlap For example if both VPN 1 and VPN 2 use the addresses on subnet 10 110 10 0 24 address space overlapping occurs BGP cannot process overlapping VPN address spaces For example if both VPN 1 and VPN 2 use the subnet 10 110...

Page 377: ... a PE can receive routes Like RDs route target attributes can be one of the following formats 16 bit AS number 32 bit user defined number For example 100 1 32 bit IPv4 address 16 bit user defined number For example 172 1 1 1 1 32 bit AS number 16 bit user defined number where the minimum value of the AS number is 65536 For example 65536 1 119B MCE overview The Multi VPN Instance CE MCE feature all...

Page 378: ...ist Tasks at a glance 858H Configuring VPN instances Required 859H Creating a VPN instance Required 860H Associating a VPN instance with an interface Optional 861H Configuring route related attributes for a VPN instance 862H Configuring routing on an MCE Required 863H Configuring routing between an MCE and a VPN site Required 864H Configuring static routing between an MCE and a PE 121B Configuring...

Page 379: ...figuring a VPN instance associate the VPN instance with the interface connected to the CE To associate a VPN instance with an interface Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Associate a VPN instance with the interface ip binding vpn instance vpn instance name By default an interface is not associated with a V...

Page 380: ... routes to be advertised are not filtered The specified routing policy must have been created For information about routing policies see Layer 3 IP Routing Configuration Guide 7 Apply a tunnel policy to the VPN instance tnl policy tunnel policy name By default only one tunnel is selected no load balancing The LSP tunnel takes precedence over the CR LSP tunnel The specified tunnel policy must have ...

Page 381: ...iguring RIP between an MCE and a VPN site A RIP process belongs to the public network or a single VPN instance If you create a RIP process without binding it to a VPN instance the process belongs to the public network Binding RIP processes to VPN instances can isolate routes of different VPNs For more information about RIP see Layer 3 IP Routing Configuration Guide To configure RIP between an MCE ...

Page 382: ...site An IS IS process belongs to the public network or a single VPN instance If you create an IS IS process without binding it to a VPN instance the process belongs to the public network Binding IS IS processes to VPN instances can isolate routes of different VPNs For more information about IS IS see Layer 3 IP Routing Configuration Guide To configure IS IS between an MCE and a VPN site Step Comma...

Page 383: ... group name ipv4 address mask length as number as number By default no BGP peers or peer groups exist 5 Enter BGP VPN IPv4 unicast address family view address family ipv4 unicast N A 6 Enable BGP to exchange IPv4 unicast routes with the peer peer group name ipv4 address mask length enable By default BGP does not exchange IPv4 unicast routes with any peer 7 Allow the local AS number to appear in th...

Page 384: ...nce name multi session thread By default BGP is not enabled 3 Enter BGP VPN instance view ip vpn instance vpn instance name N A 4 Configure an IBGP peer peer group name ipv4 address mask length as number as number By default no BGP peers or peer groups exist 5 Enter BGP VPN IPv4 unicast address family view address family ipv4 unicast N A 6 Enable BGP to exchange IPv4 unicast routes with the peer p...

Page 385: ...includes these tasks Binding the MCE PE interfaces to VPN instances Performing route configurations Redistributing VPN routes into the routing protocol running between the MCE and the PE Perform the following configurations on the MCE Configure the PE in the same way that you configure a PE in a basic MPLS L3VPN For more information about configuring the PE see 866HConfiguring MPLS L3VPN 565BConfi...

Page 386: ...e OSPF routes from the PE 4 Redistribute the VPN routes import route protocol process id all processes allow ibgp allow direct cost cost value nssa only route policy route policy name tag tag type type By default no routes are redistributed into OSPF 5 Create an OSPF area and enter OSPF area view area area id By default no OSPF areas exist 6 Enable OSPF on the interface attached to the specified n...

Page 387: ...ist 5 Enter BGP VPN IPv4 unicast address family view address family ipv4 unicast N A 6 Enable BGP to exchange IPv4 unicast routes with the peer peer group name ipv4 address mask length enable By default BGP does not exchange IPv4 unicast routes with any peer 7 Redistribute the VPN routes of the VPN site import route protocol process id all processes allow direct med med value route policy route po...

Page 388: ...iew Task Command Display VPN instance information display ip vpn instance instance name vpn instance name For commands that display routing tables for VPN instances see Layer 3 IP Routing Command Reference 124B MCE configuration examples 303BConfiguring the MCE that uses OSPF to advertise VPN routes to the PE 571BNetwork requirements As shown in 867HFigure 95 VPN 2 runs OSPF Configure the MCE devi...

Page 389: ...pn1 MCE vpn instance vpn1 route distinguisher 10 1 MCE vpn instance vpn1 vpn target 10 1 MCE vpn instance vpn1 quit MCE ip vpn instance vpn2 MCE vpn instance vpn2 route distinguisher 20 1 MCE vpn instance vpn2 vpn target 20 1 MCE vpn instance vpn2 quit Bind VLAN interface 10 to VPN instance vpn1 and configure an IP address for the VLAN interface MCE interface vlan interface 10 MCE Vlan interface10...

Page 390: ...n the MCE configure a static route to 192 168 0 0 24 with the next hop 10 214 10 2 Bind the static route to VPN instance vpn1 MCE ip route static vpn instance vpn1 192 168 0 0 24 10 214 10 2 On the MCE display the routing information maintained for VPN instance vpn1 MCE display ip routing table vpn instance vpn1 Destinations 13 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32...

Page 391: ...irect 0 0 10 214 20 3 Vlan20 10 214 20 3 32 Direct 0 0 127 0 0 1 InLoop0 10 214 20 255 32 Direct 0 0 10 214 20 3 Vlan20 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 192 168 10 0 24 O_INTRA 10 2 10 214 20 2 Vlan20 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 ...

Page 392: ...101 101 10 1 vpn instance vpn1 Disable OSPF routing loop detection for the VPN instance MCE ospf 10 vpn instance capability simple Set the domain ID to 10 MCE ospf 10 domain id 10 On the MCE advertise subnet 30 1 1 0 in area 0 and redistribute the static route of VPN 1 MCE ospf 10 area 0 MCE ospf 10 area 0 0 0 0 network 30 1 1 0 0 0 0 255 MCE ospf 10 area 0 0 0 0 quit MCE ospf 10 import route stat...

Page 393: ...Loop0 40 1 1 0 24 Direct 0 0 40 1 1 2 Vlan40 40 1 1 0 32 Direct 0 0 40 1 1 2 Vlan40 40 1 1 2 32 Direct 0 0 127 0 0 1 InLoop0 40 1 1 255 32 Direct 0 0 40 1 1 2 Vlan40 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 192 168 10 0 24 O_ASE2 150 1 40 1 1 1 Vlan40 224 0 0 0 4 Dire...

Page 394: ...ot shown Configure OSPF on the MCE and bind OSPF process 10 to VPN instance vpn1 to learn the routes of VPN 1 MCE system view MCE ospf 10 router id 10 10 10 1 vpn instance vpn1 MCE ospf 10 area 0 MCE ospf 10 area 0 0 0 0 network 10 214 10 0 0 0 0 255 MCE ospf 10 area 0 0 0 0 quit MCE ospf 10 quit Display the routing table of VPN 1 on the MCE MCE display ip routing table vpn instance vpn1 Destinati...

Page 395: ... 0 32 Direct 0 0 10 214 20 3 Vlan20 10 214 20 3 32 Direct 0 0 127 0 0 1 InLoop0 10 214 20 255 32 Direct 0 0 10 214 20 3 Vlan20 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 192 168 10 0 24 O_INTRA 10 2 10 214 20 2 Vlan20 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Di...

Page 396: ...5 32 Direct 0 0 30 1 1 2 Vlan30 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 192 168 0 0 24 BGP 255 3 30 1 1 1 Vlan30 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 Verify that PE 1 has learned th...

Page 397: ...389 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 The MCE has redistributed the OSPF routes of the two VPN instances into the EBGP routing tables of PE 1 ...

Page 398: ...ork diagram for the IPv6 MPLS L3VPN model 126B IPv6 MCE overview In IPv6 MPLS L3VPN networks IPv6 MCE advertises IPv6 routes between internal networks and PEs and forwards IPv6 packets The fundamentals of IPv6 MCE are the same as those of MCE For more information see 872HMCE overview 127B IPv6 MCE configuration task list Tasks at a glance 873H Configuring VPN instances Required 874H Creating a VPN...

Page 399: ...stinguisher By default no RD is configured for a VPN instance 4 Optional Configure a description for the VPN instance description text By default no description is configured for a VPN instance The description should contain the VPN instance s related information such as its relationship with a certain VPN 5 Optional Set an ID for the VPN instance vpn id vpn id By default no ID is configured for a...

Page 400: ...d Setting the maximum number of active routes for a VPN instance can prevent the PE from storing too many routes 5 Apply an import routing policy import route policy route policy By default all routes matching the import target attribute are accepted Make sure the routing policy already exists Otherwise the device does not filter received routes For information about routing policies see Layer 3 I...

Page 401: ...so that the IPv6 static routes of different IPv6 VPN instances can be isolated from each other To configure IPv6 static routing between an MCE and a VPN site Step Command Remarks 1 Enter system view system view N A 2 Configure an IPv6 static route for an IPv6 VPN instance ipv6 route static vpn instance s vpn instance name ipv6 address prefix length interface type interface number next hop address ...

Page 402: ... VPN instance bindings on a MCE you allow routes of different IPv6 VPNs to be exchanged between the MCE and the sites through different OSPFv3 processes ensuring the separation and security of IPv6 VPN routes For more information about OSPFv3 see Layer 3 IP Routing Configuration Guide To configure OSPFv3 between an MCE and a VPN site Step Command Remarks 1 Enter system view system view N A 2 Creat...

Page 403: ... IS IPv6 unicast address family is not created 5 Optional Redistribute remote site routes advertised by the PE import route protocol process id allow ibgp allow direct cost cost value level 1 level 1 2 level 2 route policy route policy name tag tag By default no routes are redistributed to IPv6 IS IS If you do not specify the route level in the command redistributed routes are added to the level 2...

Page 404: ...e By default BGP does not exchange IPv6 unicast routes with any peer 6 Redistribute the IGP routes of the VPN import route protocol process id all processes allow direct med med value route policy route policy name By default no routes are redistributed into BGP A VPN site must advertise IPv6 VPN network addresses it can reach to the connected MCE 582BConfiguring IBGP between an MCE and a VPN site...

Page 405: ... BGP is not enabled 3 Configure the MCE as an IBGP peer peer group name ipv6 address prefix length as number as number By default no BGP peers or peer groups exist 4 Enter BGP VPN IPv6 unicast address family view address family ipv6 unicast N A 5 Enable BGP to exchange IPv6 unicast routes with the peer peer group name ipv6 address prefix length enable By default BGP does not exchange IPv6 unicast ...

Page 406: ...ute protocol process id allow ibgp allow direct cost cost value route policy route policy name By default no routes are redistributed into RIPng 4 Return to system view quit N A 5 Enter interface view interface interface type interface number N A 6 Enable the RIPng process on the interface ripng process id enable By default RIPng is disabled on an interface 585BConfiguring OSPFv3 between an MCE an...

Page 407: ...olicy name tag tag By default IPv6 IS IS does not redistribute routes from any other routing protocol If you do not specify the route level in the command the command redistributes routes to the level 2 routing table 6 Return to system view quit N A 7 Enter interface view interface interface type interface number N A 8 Enable the IPv6 IS IS process on the interface isis ipv6 enable process id By d...

Page 408: ...ly ipv6 unicast N A 6 Enable BGP to exchange IPv6 unicast routes with the peer peer group name ipv6 address prefix length enable By default BGP does not exchange IPv6 unicast routes with any peer 7 Redistribute the VPN routes of the VPN site import route protocol process id all processes allow direct med med value route policy route policy name By default no routes are redistributed into BGP 130B ...

Page 409: ...nstance vpn1 vpn target 10 1 MCE vpn instance vpn1 quit MCE ip vpn instance vpn2 MCE vpn instance vpn2 route distinguisher 20 1 MCE vpn instance vpn2 vpn target 20 1 MCE vpn instance vpn2 quit Bind VLAN interface 10 to VPN instance vpn1 and configure an IPv6 address for the VLAN interface MCE interface vlan interface 10 MCE Vlan interface10 ip binding vpn instance vpn1 CE VPN 1 Site 2 CE VPN 2 Sit...

Page 410: ...ed to the MCE and 2012 1 2 64 to the interface connected to VPN 1 Add ports to VLANs Details not shown On VR 1 configure a default route with the next hop being 2001 1 1 VR1 system view VR1 ipv6 route static 0 2001 1 1 On the MCE configure an IPv6 static route to 2012 1 64 with the next hop 2001 1 2 Bind the static route to VPN instance vpn1 MCE ipv6 route static vpn instance vpn1 2012 1 64 2001 1...

Page 411: ...ol Static NextHop 2001 1 2 Preference 60 Interface Vlan10 Cost 0 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 MCE display ipv6 routing table vpn instance vpn2 Destinations 6 Routes 6 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2002 1 64...

Page 412: ... interface40 quit On PE 1 bind VLAN interface 30 to VPN instance vpn1 and configure an IPv6 address for the VLAN interface PE1 interface vlan interface 30 PE1 Vlan interface30 ip binding vpn instance vpn1 PE1 Vlan interface30 ipv6 address 30 2 64 PE1 Vlan interface30 quit Bind VLAN interface 40 to VPN instance vpn2 and configure an IPv6 address for the VLAN interface PE1 interface vlan interface 4...

Page 413: ...rough OSPFv3 PE1 display ipv6 routing table vpn instance vpn1 Destinations 6 Routes 6 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 30 64 Protocol Direct NextHop Preference 0 Interface Vlan30 Cost 0 Destination 30 2 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2012 1 64 Protocol O_ASE2 NextHop FE80 202 FF FE02 2 Pre...

Page 414: ...ference 0 Interface InLoop0 Cost 0 Destination 2012 64 Protocol O_ASE2 NextHop FE80 200 FF FE0F 5 Preference 150 Interface Vlan40 Cost 1 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 The routing information for the two VPNs has been added into the routing tables on PE 1 ...

Page 415: ...t least one x y Asterisk marked square brackets enclose optional syntax choices separated by vertical bars from which you select one choice multiple choices or none 1 n The argument or keyword and argument combination before the ampersand sign can be entered 1 to n times A line that starts with a pound sign is comments 591BGUI conventions Convention Description Boldface Window names button names f...

Page 416: ...res Represents an access controller a unified wired WLAN module or the access controller engine on a unified wired WLAN switch Represents an access point Represents a wireless terminator unit Represents a wireless terminator Represents a mesh access point Represents omnidirectional signals Represents directional signals Represents a security product such as a firewall UTM multiservice security gat...

Page 417: ...oducts provide a mechanism for accessing software updates through the product interface Review your product documentation to identify the recommended software update method To download product updates go to either of the following Hewlett Packard Enterprise Support Center Get connected with updates page 320Hwww hpe com support e updates Software Depot website 321Hwww hpe com support softwaredepot ...

Page 418: ... Packard Enterprise customer self repair CSR programs allow you to repair your product If a CSR part needs to be replaced it will be shipped directly to you so that you can install it at your convenience Some parts do not qualify for CSR Your Hewlett Packard Enterprise authorized service provider will determine whether a repair can be accomplished by CSR For more information about CSR contact your...

Page 419: ...number edition and publication date located on the front cover of the document For online help content include the product name product version help edition and publication date located on the legal notices page ...

Page 420: ...a tunnel establishment CRLSP PCE path calculation 912H115 AS IPv6 MPLS L3VPN BGP AS number substitution configuration 913H352 IPv6 MPLS L3VPN BGP AS number substitution SoO attribute configuration 914H314 915H356 IPv6 MPLS L3VPN inter AS IPv6 VPN configuration 916H311 IPv6 MPLS L3VPN inter AS IPv6 VPN option A 917H311 IPv6 MPLS L3VPN inter AS IPv6 VPN option C 918H312 IPv6 MPLS L3VPN inter AS opti...

Page 421: ...y backup 977H71 MPLS TE CRLSP ordinary backup 978H71 backoff mechanism LDP 979H27 bandwidth MPLS TE CRLSP dynamic establishment 980H66 MPLS TE CRLSP flooding 981H85 MPLS TE CRLSP static implementation 982H66 MPLS TE DS TE bandwidth constraint model 983H71 MPLS TE link attribute 984H79 MPLS TE tunnel constraints 985H81 MPLS TE tunnel reoptimization 986H71 static CRLSP configuration 987H150 988H151 ...

Page 422: ...different ASs 1059H258 MPLS L3VPN configuration same AS 1060H250 MPLS L3VPN Level 1 carrier 1061H189 MPLS L3VPN Level 2 carrier 1062H189 CE IPv6 MPLS L3VPN BGP VPNv6 route control 1063H309 IPv6 MPLS L3VPN inter AS IPv6 VPN configuration 1064H311 IPv6 MPLS L3VPN inter AS IPv6 VPN option A 1065H311 IPv6 MPLS L3VPN inter AS IPv6 VPN option C 1066H312 IPv6 MPLS L3VPN OSPF sham link configuration 1067H...

Page 423: ...nk 1144H347 IPv6 MPLS L3VPN PE CE EBGP 1145H306 IPv6 MPLS L3VPN PE CE IBGP 1146H308 IPv6 MPLS L3VPN PE CE IPv6 IS IS 1147H306 IPv6 MPLS L3VPN PE CE OSPFv3 1148H304 IPv6 MPLS L3VPN PE CE RIPng 1149H304 IPv6 MPLS L3VPN PE CE routing 1150H303 IPv6 MPLS L3VPN PE CE static routing 1151H303 IPv6 MPLS L3VPN PE PE routing 1152H309 IPv6 MPLS L3VPN VPN instance 1153H301 IPv6 MPLS L3VPN VPN instance route re...

Page 424: ...9H362 MPLS OAM tracert for LSP 1250H360 MPLS OAM tracert for LSP periodic 1251H362 MPLS OAM tracert for MPLS TE tunnel 1252H362 MPLS TE 1253H66 1254H75 1255H98 MPLS TE auto FRR 1256H135 MPLS TE bidirectional tunnel 1257H90 1258H120 MPLS TE CRLSP backup 1259H91 1260H126 MPLS TE CRLSP flooding interval 1261H85 MPLS TE CRLSP flooding thresholds 1262H85 MPLS TE CRLSP path selection metric type 1263H83...

Page 425: ...E FRR bypass tunnel on PLR 1347H92 MPLS TE FRR link protection 1348H72 1349H72 MPLS TE FRR manual bypass tunnel 1350H130 MPLS TE FRR node fault detection 1351H96 MPLS TE FRR node protection 1352H72 MPLS TE FRR optimal bypass tunnel selection interval 1353H96 MPLS TE IETF DS TE configuration 1354H141 MPLS TE inter area tunnel establishment CRLSP PCE path calculation 1355H115 MPLS TE inter AS tunnel...

Page 426: ...37H367 MPLS L3VPN basic configuration 1438H221 MPLS L3VPN basics 1439H200 MPLS L3VPN BGP AS number substitution configuration 1440H286 MPLS L3VPN BGP AS number substitution SoO attribute configuration 1441H289 MPLS L3VPN carrier s carrier configuration different ASs 1442H258 MPLS L3VPN carrier s carrier configuration same AS 1443H250 MPLS L3VPN configuration 1444H179 1445H199 1446H221 MPLS L3VPN F...

Page 427: ...PE EBGP 1518H399 IPv6 MCE PE routing 1519H397 IPv6 MCE VPN site EBGP 1520H395 IPv6 MPLS L3VPN hub spoke network configuration 1521H322 IPv6 MPLS L3VPN PE CE EBGP 1522H306 MCE PE EBGP 1523H379 MCE VPN site EBGP 1524H375 MPLS L3VPN hub spoke network configuration 1525H227 MPLS L3VPN inter AS VPN option B 1526H185 1527H186 MPLS L3VPN inter AS VPN option C 1528H185 1529H187 MPLS L3VPN PE CE EBGP 1530H...

Page 428: ...98H10 MPLS forwarding statistics 1599H9 MPLS L3VPN packet forwarding 1600H182 MPLS LFIB 1601H2 MPLS LSP 1602H2 MPLS LSP establishment 1603H3 MPLS LSR 1604H1 MPLS process 1605H4 MPLS TE bidirectional tunnel 1606H74 MPLS TE DS TE 1607H72 MPLS TE make before break 1608H70 MPLS TE tunnel reoptimization 1609H71 MPLS TE tunnel traffic direction automatic route advertisement forwarding adjacency 1610H90 ...

Page 429: ...GP TE extension 1679H80 MPLS TE link attribute advertisement IS IS TE 1680H81 MPLS TE link attribute advertisement OSPF TE 1681H80 MPLS TE traffic forwarding automatic route advertisement IGP shortcut 1682H69 MPLS TE tunnel traffic direction automatic route advertisement IGP shortcut 1683H89 importing MCE VPN instance route related attributes 1684H371 MPLS L3VPN BGP import target attribute 1685H18...

Page 430: ...istribution 1766H216 MPLS L3VPN VPN IPv4 address 1767H180 1768H368 MPLS OAM BFD for LSP 1769H364 MPLS OAM configuration 1770H359 IPv6 LDP configuration 1771H50 LDP label acceptance control 1772H55 LDP label advertisement control 1773H60 LDP LSP configuration 1774H50 MPLS L3VPN See 1775HIPv6 MPLS L3VPN MPLS L3VPN loopback interface 1776H313 MPLS L3VPN loopback interface address redistribution 1777H...

Page 431: ...S 1864H378 MCE VPN site IS IS 1865H374 MPLS L3VPN PE CE IS IS configuration 1866H203 MPLS TE attribute advertisement 1867H67 MPLS TE link attribute advertisement IS IS TE 1868H81 ISP MPLS L3VPN inter AS VPN 1869H185 MPLS L3VPN inter AS VPN option A 1870H185 MPLS L3VPN nested VPN 1871H191 K keepalive LDP session parameter 1872H26 L label distribution protocol Use 1873HLDP IPv4 LDP label acceptance ...

Page 432: ...1961H189 MPLS L3VPN Level 2 carrier 1962H189 LFIB MPLS control plane 1963H2 MPLS forwarding plane 1964H2 MPLS forwarding process 1965H4 link IPv6 MPLS L3VPN OSPF sham link configuration 1966H313 IPv6 MPLS L3VPN OSPF sham link creation 1967H314 IPv6 MPLS L3VPN OSPFv3 sham link configuration 1968H347 LDP link hello parameters 1969H25 LDP session protection 1970H33 MPLS L3VPN OSPF sham link 1971H196 ...

Page 433: ... control 2039H45 IPv4 LDP LSP configuration 2040H37 IPv6 LDP configuration 2041H50 IPv6 LDP label acceptance control 2042H55 IPv6 LDP label advertisement control 2043H60 IPv6 LDP LSP configuration 2044H50 LDP configuration 2045H17 2046H23 LDP GR 2047H20 MPLS control plane 2048H2 MPLS network architecture 2049H2 MPLS TTL propagation 2050H8 MPLS TTL expired message send 2051H9 M maintaining IPv6 MPL...

Page 434: ...nfiguration 2131H227 MPLS basic concepts 2132H1 basics configuration 2133H1 2134H5 control plane 2135H2 display 2136H10 egress node label type advertisement 2137H7 enable 2138H6 exclusive tunnel configuration 2139H176 FEC 2140H1 FEC label format 2141H1 forwarding plane 2142H2 forwarding process 2143H4 forwarding split horizon enable 2144H10 forwarding statistics enable 2145H9 IPv4 LDP configuratio...

Page 435: ...4 route 2239H198 HoVPN configuration 2240H214 2241H274 HoVPN network 2242H192 hub spoke network configuration 2243H227 inter AS option A configuration 2244H233 inter AS option B configuration 2245H238 inter AS option C configuration 2246H243 inter AS VPN 2247H185 inter AS VPN configuration 2248H209 inter AS VPN option A 2249H209 inter AS VPN option B 2250H209 inter AS VPN option C 2251H210 inter A...

Page 436: ...ntrol 2355H83 CRLSP RSVP TE setup 2356H68 CSPF path calculation 2357H67 display 2358H97 DS TE 2359H71 2360H72 DS TE configuration 2361H78 enable 2362H77 exclusive tunnel configuration 2363H176 FRR 2364H71 2365H91 FRR bypass tunnel on PLR 2366H92 FRR CRLSP link protection 2367H72 FRR CRLSP node protection 2368H72 FRR manual bypass tunnel 2369H130 FRR node fault detection 2370H96 FRR optimal bypass ...

Page 437: ...tablishment static CRLSP 2448H98 tunnel interface configuration 2449H77 tunnel policy configuration 2450H174 2451H176 tunnel reoptimization 2452H71 tunnel setup 2453H85 tunnel traffic direction automatic route advertisement 2454H89 tunnel traffic direction static routing 2455H89 MPLS TP MPLS TE bidirectional tunnel 2456H74 MTU MPLS MTU set 2457H6 Multiprotocol Label Switching Use 2458HMPLS Multi V...

Page 438: ...P GR 2527H20 LDP GR configuration 2528H33 LDP hello parameters 2529H25 LDP IS IS synchronization 2530H35 LDP label acceptance policy 2531H31 LDP label advertisement policy 2532H30 LDP label distribution control mode 2533H30 LDP loop detection 2534H32 LDP LSP generation policy 2535H29 LDP MD5 authentication 2536H28 LDP message types 2537H17 LDP operation 2538H18 LDP over MPLS TE 2539H23 LDP packet ...

Page 439: ...orking scheme basic 2620H183 MPLS L3VPN networking scheme extranet 2621H184 MPLS L3VPN networking scheme hub spoke 2622H183 MPLS L3VPN OSPF area PE CE configuration 2623H194 MPLS L3VPN OSPF sham link 2624H196 2625H215 MPLS L3VPN OSPF sham link configuration 2626H281 MPLS L3VPN OSPF sham link creation 2627H216 MPLS L3VPN OSPF VPN extension 2628H194 MPLS L3VPN OSPF VPN on PE 2629H194 MPLS L3VPN pack...

Page 440: ...380 MPLS architecture 2725H2 MPLS basic concepts 2726H1 MPLS basics configuration 2727H1 2728H5 MPLS L3VPN architecture 2729H179 2730H367 MPLS L3VPN configuration 2731H179 2732H199 2733H221 MPLS OAM configuration 2734H359 MPLS TE configuration 2735H66 2736H75 2737H98 RSVP configuration 2738H157 2739H160 2740H165 static CRLSP configuration 2741H150 2742H151 static LSP configuration 2743H12 2744H13 ...

Page 441: ...ishment PCE path calculation 2818H68 MPLS TE CRLSP path selection 2819H83 MPLS TE CSPF calculation 2820H67 MPLS TE route pinning 2821H71 MPLS TE tunnel loose explicit path 2822H82 MPLS TE tunnel reoptimization 2823H71 MPLS TE tunnel strict explicit path 2824H82 RSVP TE Path message 2825H157 RSVP TE PathErr message 2826H157 RSVP TE PathTear message 2827H157 PCC MPLS TE CRLSP establishment PCE path ...

Page 442: ...3 MPLS L3VPN PE CE OSPF 2896H203 MPLS L3VPN PE CE RIP 2897H202 MPLS L3VPN PE CE routing 2898H202 MPLS L3VPN PE CE static routing 2899H202 MPLS L3VPN PE PE routing 2900H207 peer LDP hello parameters 2901H25 LDP session parameters 2902H26 LDP session protection 2903H33 penultimate hop popping Use 2904HPHP PHP MPLS 2905H5 ping MPLS OAM 2906H359 MPLS OAM configuration 2907H359 MPLS OAM ping for LSP 29...

Page 443: ...ion C routing policy 2970H313 configuring IPv6 MPLS L3VPN inter AS option A 2971H329 configuring IPv6 MPLS L3VPN inter AS option C 2972H334 configuring IPv6 MPLS L3VPN IPv6 MCE VPN site routing 2973H393 configuring IPv6 MPLS L3VPN loopback interface 2974H313 configuring IPv6 MPLS L3VPN OSPF sham link 2975H313 configuring IPv6 MPLS L3VPN OSPFv3 sham link 2976H347 configuring IPv6 MPLS L3VPN PE CE E...

Page 444: ...ng MPLS L3VPN inter AS VPN configuration 3048H209 configuring MPLS L3VPN inter AS VPN option A 3049H209 configuring MPLS L3VPN inter AS VPN option B 3050H209 configuring MPLS L3VPN inter AS VPN option C 3051H210 configuring MPLS L3VPN inter AS VPN option C ASBR 3052H211 configuring MPLS L3VPN inter AS VPN option C PE 3053H211 configuring MPLS L3VPN loopback interface 3054H215 configuring MPLS L3VP...

Page 445: ...3119H8 configuring preferred tunnel selection order 3120H176 configuring RSVP 3121H160 configuring RSVP authentication interface view 3122H162 configuring RSVP authentication RSVP neighbor view 3123H162 configuring RSVP authentication RSVP view 3124H162 configuring RSVP GR 3125H164 3126H171 configuring RSVP hello extension 3127H161 configuring RSVP refresh 3128H160 configuring RSVP Srefresh reliab...

Page 446: ...LS L3VPN egress PE VPN label processing mode 3199H216 troubleshooting MPLS TE no TE LSA generated 3200H148 propagating MPLS L3VPN nested VPN routing information 3201H192 MPLS TTL 3202H8 protocols and standards IPv6 MPLS L3VPN 3203H300 LDP 3204H23 MPLS 3205H5 MPLS L3VPN 3206H199 MPLS OAM 3207H360 MPLS TE 3208H75 RSVP 3209H160 provider device See 3210HP device edge device See 3211HPE PSC MPLS TE bid...

Page 447: ...number substitution SoO attribute configuration 3279H314 3280H356 IPv6 MPLS L3VPN carrier s carrier configuration same AS 3281H340 IPv6 MPLS L3VPN configuration 3282H299 3283H301 3284H316 3285H316 IPv6 MPLS L3VPN hub spoke network configuration 3286H322 IPv6 MPLS L3VPN inter AS IPv6 VPN configuration 3287H311 IPv6 MPLS L3VPN inter AS IPv6 VPN option A 3288H311 IPv6 MPLS L3VPN inter AS IPv6 VPN opt...

Page 448: ...ting information propagation 3355H192 MPLS L3VPN OSPF sham link 3356H196 MPLS L3VPN OSPF sham link configuration 3357H281 MPLS L3VPN OSPF VPN extension 3358H194 MPLS L3VPN OSPF VPN on PE 3359H194 MPLS L3VPN PE PE routing 3360H207 MPLS L3VPN route advertisement 3361H181 MPLS L3VPN routing loop avoidance 3362H195 MPLS L3VPN SNMP notification 3363H219 MPLS LFIB 3364H2 MPLS LSP 3365H2 MPLS LSP establi...

Page 449: ...P MD5 authentication 3448H28 RSVP authentication 3449H162 selecting preferred tunnel selection order configuration 3450H176 sending MPLS TTL expired message send 3451H9 session LDP message type 3452H17 LDP protection 3453H33 LDP session parameters 3454H26 LDP session reset 3455H36 MPLS OAM BFD mode dynamic 3456H359 MPLS OAM BFD mode static 3457H359 MPLS TE PCEP session parameters 3458H88 RSVP TE S...

Page 450: ... SoS attribute configuration 3519H289 switching MPLS basics configuration 3520H1 3521H5 MPLS TE auto FRR configuration 3522H135 MPLS TE bidirectional tunnel configuration 3523H120 MPLS TE configuration 3524H66 3525H75 3526H98 MPLS TE CRLSP backup configuration 3527H126 MPLS TE FRR 3528H71 MPLS TE FRR manual bypass tunnel 3529H130 MPLS TE IETF DS TE configuration 3530H141 MPLS TE inter AS tunnel es...

Page 451: ...nt RSVP TE 3604H108 MPLS TE make before break 3605H70 MPLS TE traffic forwarding 3606H69 3607H89 MPLS TE tunnel configuration dynamic CRLSP 3608H79 MPLS TE tunnel configuration static CRLSP 3609H78 MPLS TE tunnel CRLSP configuration PCE calculation 3610H87 MPLS TE tunnel establishment RSVP TE 3611H102 MPLS TE tunnel establishment static CRLSP 3612H98 MPLS TE tunnel interface 3613H77 MPLS TE tunnel...

Reviews:

No comments

Related manuals for FlexFabric 5950 Series

Talkswitch switch Start Manual preview
switch
Brand: Talkswitch Pages: 17
IBM E12 Quick Installation Manual preview
E12
Brand: IBM Pages: 2
I-Tech M118 User Manual preview
M118
Brand: I-Tech Pages: 27
National Instruments SCXI-1127 Getting Started Manual preview
SCXI-1127
Brand: National Instruments Pages: 32
Zektor HDA604 User Manual preview
HDA604
Brand: Zektor Pages: 84
V7 MPEGS24 User Manual preview
MPEGS24
Brand: V7 Pages: 35
ADC ICX-250 User Manual preview
ICX-250
Brand: ADC Pages: 75
Cabletron Systems SmartSTACK 100 ELS100-16TX Getting Started preview
SmartSTACK 100 ELS100-16TX
Brand: Cabletron Systems Pages: 16
UNICOM Smart-Switch/801 FEP-30109T-C User Manual preview
Smart-Switch/801 FEP-30109T-C
Brand: UNICOM Pages: 22
IBM 8265 Nways ATM Switch Product Description preview
8265 Nways ATM Switch
Brand: IBM Pages: 100
Eaton TM-1-8290/E/SVB Instruction Leaflet preview
TM-1-8290/E/SVB
Brand: Eaton Pages: 2
Emos 3402114000 Manual preview
3402114000
Brand: Emos Pages: 44
Festo SMT-8-...-B Series Manual preview
SMT-8-...-B Series
Brand: Festo Pages: 2
Edge-Core Wedge-16X-AC Quick Start Manual preview
Wedge-16X-AC
Brand: Edge-Core Pages: 2
Black Box LH8112A Installation And User Manual preview
LH8112A
Brand: Black Box Pages: 132
Mengual Hera IR-S Assembly And Operating Instructions preview
Hera IR-S
Brand: Mengual Pages: 2
TRENDnet TU2-700 - DATA SHEETS Quick Installation Manual preview
TU2-700 - DATA SHEETS
Brand: TRENDnet Pages: 9
Omron G3M Specification Sheet preview
G3M
Brand: Omron Pages: 8

Brands by name

Popular brands

Load more brands