Objective
Upon completion of this module, you will be able to:
Master MPLS Basic Configuration
Master MPLS L3VPN Configuration
Master MPLS L3VPN Extranet Configuration
Topology
ISIS Configuration- Single Area
[R2]isis
[R2-isis-1]net 49.0001.0000.0000.0002.00 [R5]isis
[R5-isis-1]net 49.0001.0000.0000.0005.00
[R3]isis
[R3-isis-1]net 49.0001.0000.0000.0003.00
[R4]isis
[R4-isis-1]net 49.0001.0000.0000.0004.00
ISIS Configuration- Single Area
[R2]interface GigabitEthernet0/0/1
[R2-GigabitEthernet0/0/1]isis enable [R5]interface GigabitEthernet0/0/1
[R2-GigabitEthernet0/0/1]interface Loopback0 [R5-GigabitEthernet0/0/1]isis enable
[R2-LoopBack0]isis enable [R5-GigabitEthernet0/0/1]interface Loopback0
[R5-LoopBack0]isis enable
[R3]interface Gig0/0
[R3-GigabitEthernet0/0/0]isis enable
[R3-GigabitEthernet0/0/0]interface Gig0/0/1
[R3-GigabitEthernet0/0/1]isis enable
[R3-GigabitEthernet0/0/1]interface Loopback0
[R3-LoopBack0]isis enable
[R4]interface Gig0/0
[R4-GigabitEthernet0/0/0]isis enable
[R4-GigabitEthernet0/0/0]interface Gig0/0/1
[R4-GigabitEthernet0/0/1]isis enable
[R4-GigabitEthernet0/0/1]interface Loopback0
[R4-LoopBack0]isis enable
MPLS Configuration-PE Router
[R2]mpls lsr-id 2.2.2.2 [R5]mpls lsr-id 5.5.5.5
[R2]mpls [R5]mpls
Info: Mpls starting, please wait... OK! Info: Mpls starting, please wait... OK!
[R2-mpls]mpls ldp [R5-mpls]mpls ldp
[R2-mpls-ldp]int GigabitEthernet0/0/1 [R5-mpls-ldp]int GigabitEthernet0/0/1
[R2-GigabitEthernet0/0/1]mpls [R5-GigabitEthernet0/0/1]mpls
[R2-GigabitEthernet0/0/1]mpls ldp [R5-GigabitEthernet0/0/1]mpls ldp
MPLS Configuration-P Router
[R3]mpls lsr-id 3.3.3.3
[R3]mpls
Info: Mpls starting, please wait... OK!
[R3-mpls]mpls ldp
[R3-mpls-ldp]int GigabitEthernet0/0/1
[R3-GigabitEthernet0/0/1]mpls
[R3-GigabitEthernet0/0/1]mpls ldp
[R3-GigabitEthernet0/0/1]int GigabitEthernet0/0/0
[R3-GigabitEthernet0/0/0]mpls
[R3-GigabitEthernet0/0/0]mpls ldp
[R4]mpls lsr-id 4.4.4.4
[R4]mpls
Info: Mpls starting, please wait... OK!
[R4-mpls]mpls ldp
[R4-mpls-ldp]int GigabitEthernet0/0/1
[R4-GigabitEthernet0/0/1]mpls
[R4-GigabitEthernet0/0/1]mpls ldp
[R4-GigabitEthernet0/0/1]int GigabitEthernet0/0/0
[R4-GigabitEthernet0/0/0]mpls
[R4-GigabitEthernet0/0/0]mpls ldp
Verify MPLS Neighbor- PE Router
[R2]display mpls ldp peer verbose
LDP Peer Information in Public network
-----------------------------------------------------------------------------
Peer LDP ID : 3.3.3.3:0
Peer Max PDU Length : 4096 Peer Transport Address : 3.3.3.3
Peer Loop Detection : Off Peer Path Vector Limit : ----
Peer FT Flag : Off Peer Keepalive Timer : 45 Sec
Recovery Timer : ---- Reconnect Timer : ----
Peer Type : Local
Peer Label Advertisement Mode : Downstream Unsolicited
Peer Discovery Source : GigabitEthernet0/0/1
Peer Deletion Status : No
Capability-Announcement : Off
Peer P2MP Capability : Off
-----------------------------------------------------------------------------
[R5]display mpls ldp peer verbose
LDP Peer Information in Public network
-----------------------------------------------------------------------------
Peer LDP ID : 4.4.4.4:0
Peer Max PDU Length : 4096 Peer Transport Address : 4.4.4.4
Peer Loop Detection : Off Peer Path Vector Limit : ----
Peer FT Flag : Off Peer Keepalive Timer : 45 Sec
Recovery Timer : ---- Reconnect Timer : ----
Peer Type : Local
Peer Label Advertisement Mode : Downstream Unsolicited
Peer Discovery Source : GigabitEthernet0/0/1
Peer Deletion Status : No
Capability-Announcement : Off
Peer P2MP Capability : Off
-----------------------------------------------------------------------------
Verify MPLS Neighbor- P Router
[R3]display mpls ldp peer verbose
LDP Peer Information in Public network
-----------------------------------------------------------------------------
Peer LDP ID : 2.2.2.2:0
Peer Max PDU Length : 4096 Peer Transport Address : 2.2.2.2
Peer Loop Detection : Off Peer Path Vector Limit : ----
Peer FT Flag : Off Peer Keepalive Timer : 45 Sec
Recovery Timer : ---- Reconnect Timer : ----
Peer Type : Local
Peer Label Advertisement Mode : Downstream Unsolicited
Peer Discovery Source : GigabitEthernet0/0/1
Peer Deletion Status : No
Capability-Announcement : Off
Peer P2MP Capability : Off
-----------------------------------------------------------------------------
Peer LDP ID : 4.4.4.4:0
Peer Max PDU Length : 4096 Peer Transport Address : 4.4.4.4
Peer Loop Detection : Off Peer Path Vector Limit : ----
Peer FT Flag : Off Peer Keepalive Timer : 45 Sec
Recovery Timer : ---- Reconnect Timer : ----
Peer Type : Local
Peer Label Advertisement Mode : Downstream Unsolicited
Peer Discovery Source : GigabitEthernet0/0/0
Peer Deletion Status : No
Capability-Announcement : Off
Peer P2MP Capability : Off
-----------------------------------------------------------------------------
Verify MPLS Label Table- PE Router
[R2]display mpls lsp
-------------------------------------------------------------------------------
LSP Information: LDP LSP
-------------------------------------------------------------------------------
FEC In/Out Label In/Out IF Vrf Name
3.3.3.3/32 NULL/3 -/GE0/0/1
3.3.3.3/32 1025/3 -/GE0/0/1
2.2.2.2/32 3/NULL -/-
4.4.4.4/32 NULL/1027 -/GE0/0/1
4.4.4.4/32 1026/1027 -/GE0/0/1
5.5.5.5/32 NULL/1028 -/GE0/0/1
5.5.5.5/32 1027/1028 -/GE0/0/1
[R5]display mpls ldp lsp
LDP LSP Information
-------------------------------------------------------------------------------
DestAddress/Mask In/OutLabel UpstreamPeer NextHop OutInterface
-------------------------------------------------------------------------------
2.2.2.2/32 NULL/1024 - 10.0.45.1 GE0/0/1
2.2.2.2/32 1024/1024 4.4.4.4 10.0.45.1 GE0/0/1
3.3.3.3/32 NULL/1025 - 10.0.45.1 GE0/0/1
3.3.3.3/32 1025/1025 4.4.4.4 10.0.45.1 GE0/0/1
4.4.4.4/32 NULL/3 - 10.0.45.1 GE0/0/1
4.4.4.4/32 1026/3 4.4.4.4 10.0.45.1 GE0/0/1
5.5.5.5/32 3/NULL 4.4.4.4 127.0.0.1 InLoop0
*5.5.5.5/32 Liberal/1026 DS/4.4.4.4
-------------------------------------------------------------------------------
TOTAL: 7 Normal LSP(s) Found.
TOTAL: 1 Liberal LSP(s) Found.
TOTAL: 0 Frr LSP(s) Found.
Verify MPLS Label Table- P Router
[R3]display mpls ldp lsp
LDP LSP Information
-------------------------------------------------------------------------------
DestAddress/Mask In/OutLabel UpstreamPeer NextHop OutInterface
-------------------------------------------------------------------------------
2.2.2.2/32 NULL/3 - 10.0.23.1 GE0/0/1
2.2.2.2/32 1026/3 2.2.2.2 10.0.23.1 GE0/0/1
2.2.2.2/32 1026/3 4.4.4.4 10.0.23.1 GE0/0/1
*2.2.2.2/32 Liberal/1024 DS/4.4.4.4
3.3.3.3/32 3/NULL 2.2.2.2 127.0.0.1 InLoop0
3.3.3.3/32 3/NULL 4.4.4.4 127.0.0.1 InLoop0
*3.3.3.3/32 Liberal/1025 DS/2.2.2.2
*3.3.3.3/32 Liberal/1025 DS/4.4.4.4
4.4.4.4/32 NULL/3 - 10.0.34.2 GE0/0/0
4.4.4.4/32 1027/3 2.2.2.2 10.0.34.2 GE0/0/0
4.4.4.4/32 1027/3 4.4.4.4 10.0.34.2 GE0/0/0
*4.4.4.4/32 Liberal/1026 DS/2.2.2.2
5.5.5.5/32 NULL/1026 - 10.0.34.2 GE0/0/0
5.5.5.5/32 1028/1026 2.2.2.2 10.0.34.2 GE0/0/0
5.5.5.5/32 1028/1026 4.4.4.4 10.0.34.2 GE0/0/0
*5.5.5.5/32 Liberal/1027 DS/2.2.2.2
-------------------------------------------------------------------------------
TOTAL: 11 Normal LSP(s) Found.
TOTAL: 5 Liberal LSP(s) Found.
TOTAL: 0 Frr LSP(s) Found.
[R4]display mpls ldp lsp
LDP LSP Information
-------------------------------------------------------------------------------
DestAddress/Mask In/OutLabel UpstreamPeer NextHop OutInterface
-------------------------------------------------------------------------------
2.2.2.2/32 NULL/1026 - 10.0.34.1 GE0/0/0
2.2.2.2/32 1024/1026 3.3.3.3 10.0.34.1 GE0/0/0
2.2.2.2/32 1024/1026 5.5.5.5 10.0.34.1 GE0/0/0
*2.2.2.2/32 Liberal/1024 DS/5.5.5.5
3.3.3.3/32 NULL/3 - 10.0.34.1 GE0/0/0
3.3.3.3/32 1025/3 3.3.3.3 10.0.34.1 GE0/0/0
3.3.3.3/32 1025/3 5.5.5.5 10.0.34.1 GE0/0/0
*3.3.3.3/32 Liberal/1025 DS/5.5.5.5
4.4.4.4/32 3/NULL 3.3.3.3 127.0.0.1 InLoop0
4.4.4.4/32 3/NULL 5.5.5.5 127.0.0.1 InLoop0
*4.4.4.4/32 Liberal/1027 DS/3.3.3.3
*4.4.4.4/32 Liberal/1026 DS/5.5.5.5
5.5.5.5/32 NULL/3 - 10.0.45.2 GE0/0/1
5.5.5.5/32 1026/3 3.3.3.3 10.0.45.2 GE0/0/1
5.5.5.5/32 1026/3 5.5.5.5 10.0.45.2 GE0/0/1
*5.5.5.5/32 Liberal/1028 DS/3.3.3.3
-------------------------------------------------------------------------------
TOTAL: 11 Normal LSP(s) Found.
TOTAL: 5 Liberal LSP(s) Found.
TOTAL: 0 Frr LSP(s) Found.
Topology
AS 200
CustB-2
CustB-1
50.50.50.50/32
20.20.20.20/32
Area 49.0001
AS 100
AS 300
CustA-1
CustA-2
CustA-1 CustA-2
CustB-1 CustB-2
MPLS VPN Configuration
[R2]interface LoopBack 1
[R2-loopback1]ip address 20.20.20.20 32
[R5]interface LoopBack 1
[R5-loopback1]ip address 50.50.50.50 32
MPLS VPN Configuration- iBGP Routing
[R2]bgp 200
[R2-bgp]peer 5.5.5.5 as-number 200
[R2-bgp]peer 5.5.5.5 connect-interface loopback0
[R5]bgp 200
[R5-bgp]peer 2.2.2.2 as-number 200
[R5-bgp]peer 2.2.2.2 connect-interface loopback0
MPLS VPN- VRF Configuration
[R2]ip vpn-instance CustA [R5]ip vpn-instance CustA
[R2-vpn-instance-CustA]route- [R5-vpn-instance-CustA]route-
distinguisher 200:1 distinguisher 200:2
[R2-vpn-instance-CustA-af-ipv4]vpn-target [R5-vpn-instance-CustA-af-ipv4]vpn-
200:10 export-extcommunity target 200:20 export-extcommunity
[R2-vpn-instance-CustA-af-ipv4]vpn-target [R5-vpn-instance-CustA-af-ipv4]vpn-
200:20 import-extcommunity target 200:10 import-extcommunity
[R2]ip vpn-instance CustB
[R2-vpn-instance-CustB]route-distinguisher
200:3
[R2-vpn-instance-CustB-af-ipv4]vpn-target
200:30 export-extcommunity
[R2-vpn-instance-CustB-af-ipv4]vpn-target
200:40 import-extcommunity
[R5]ip vpn-instance CustB
[R5-vpn-instance-CustB]route-distinguisher
200:4
[R5-vpn-instance-CustB-af-ipv4]vpn-target
200:40 export-extcommunity
[R5-vpn-instance-CustB-af-ipv4]vpn-target
200:30 import-extcommunity
MPLS VPN- Interface VRF Configuration
[R2]int loopback1
[R2-LoopBack1]ip binding vpn-instance CustB
[R2-LoopBack1]ip address 20.20.20.20 32
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip binding vpn-instance
CustA
[R2-GigabitEthernet0/0/0]ip address 10.0.12.2 24
[R5]int loopback1
[R5-LoopBack1]ip binding vpn-instance CustB
[R5-LoopBack1]ip address 50.50.50.50 32
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip binding vpn-instance
CustA
[R5-GigabitEthernet0/0/0]ip address 10.0.56.5 24
MPLS VPN- VPNv4 Configuration
[R2]bgp 200 [R5]bgp 200
[R2-bgp]ipv4-family vpnv4 [R5-bgp]ipv4-family vpnv4
[R2-bgp-af-vpnv4]peer 5.5.5.5 enable [R5-bgp-af-vpnv4]peer 2.2.2.2 enable
Verify VPNv4 Neigborship
Command Validation
[R2]display bgp vpnv4 all peer
Peer V AS MsgRcvd MsgSent OutQ Up/Down State Pre
fRcv
5.5.5.5 4 200 7 8 0 00:05:18 Established
[R5]display bgp vpnv4 all peer
Peer V AS MsgRcvd MsgSent OutQ Up/Down State Pre
fRcv
2.2.2.2 4 200 7 7 0 00:05:49 Established
MPLS VPN- CustB IPv4 Configuration
[R2]bgp 200 [R5]bgp 200
[R2-bgp]ipv4-family vpn-instance CustB [R5-bgp]ipv4-family vpn-instance CustB
[R2-bgp-CustB]network 20.20.20.20 32 [R5-bgp-CustB]network 50.50.50.50 32
Verify VPNv4 Neigborship
display ip routing-table vpn-instance vpn-instance-name [ verbose ]
[R2]dis ip routing-table vpn-instance CustB
Destination/Mask Proto Pre Cost Flags NextHop Interface
20.20.20.20/32 Direct 0 0 D 127.0.0.1 LoopBack1
50.50.50.50/32 IBGP 255 0 RD 5.5.5.5 GigabitEthernet0/0/1
[R5]dis ip routing-table vpn-instance CustB
Destination/Mask Proto Pre Cost Flags NextHop Interface
20.20.20.20/32 IBGP 255 0 RD 2.2.2.2 GigabitEthernet0/0/1
50.50.50.50/32 Direct 0 0 D 127.0.0.1 LoopBack1
Verify Connectivity CustB
[R2]tracert -vpn-instance CustB -a 20.20.20.20 -v 50.50.50.50
1 10.0.23.3[MPLS Label=1026/1029 Exp=0/0 S=0/1 TTL=1/1] 160 ms 120 ms 80 ms
2 10.0.34.4[MPLS Label=1024/1029 Exp=0/0 S=0/1 TTL=1/2] 160 ms 120 ms 110 ms
3 50.50.50.50 130 ms 120 ms 110 ms
[R5]tracert -vpn-instance CustB -a 50.50.50.50 -v 20.20.20.20
1 10.0.45.4[MPLS Label=1025/1029 Exp=0/0 S=0/1 TTL=1/1] 120 ms 130 ms 120 ms
2 10.0.34.3[MPLS Label=1024/1029 Exp=0/0 S=0/1 TTL=1/2] 110 ms 120 ms 150 ms
3 20.20.20.20 150 ms 130 ms 140 ms
MPLS VPN Configuration- PE-CE Routing
[R2]bgp 200
[R2-bgp]ipv4-family vpn-instance CustA
[R2-bgp-CustA]peer 10.0.12.1 as-number 100
[R5]bgp 200
[R5-bgp]ipv4-family vpn-instance CustA
[R5-bgp-CustA]peer 10.0.56.6 as-number 300
[R1]bgp 100 [R6]bgp 300
[R1-bgp]peer 10.0.12.2 as-number 200 [R6-bgp]peer 10.0.56.5 as-number 200
MPLS VPN Configuration- Route Advertisement
[R6]interface LoopBack 1
[R1]interface LoopBack 1 [R6-LoopBack1]ip address 60.60.60.60 32
[R1-LoopBack1]ip address 10.10.10.10 32 [R6]bgp 300
[R1]bgp 100 [R6-bgp]network 60.60.60.60 32
[R1-bgp]network 10.10.10.10 32
Verify VPNv4 Neigborship
[R2]display bgp vpnv4 all peer
[R5]display bgp vpnv4 all peer
Verify Connectivity CustA
[R1]tracert -a 10.10.10.10 -v 60.60.60.60
1 10.0.12.2 10 ms 70 ms 60 ms
2 10.0.56.5 190 ms 100 ms 160 ms
3 10.0.56.6 200 ms 220 ms 210 ms
[R6]tracert -a 60.60.60.60 -v 10.10.10.10
1 10.0.56.5 30 ms 60 ms 50 ms
2 10.0.12.2 150 ms 180 ms 150 ms
3 10.0.12.1 220 ms 200 ms 210 ms
Topology
AS 200
CustB-2
CustB-1
50.50.50.50/32
20.20.20.20/32
Area 49.0001
AS 100
AS 300
CustA-1
CustA-2
CustA-1 CustA-2
CustB-1 CustB-2
MPLS VPN- VRF Configuration
[R2]ip vpn-instance CustA [R5]ip vpn-instance CustA
[R2-vpn-instance-CustA]route- [R5-vpn-instance-CustA]route-distinguisher
distinguisher 200:1 200:2
[R2-vpn-instance-CustA-af-ipv4]vpn-target [R5-vpn-instance-CustA-af-ipv4]vpn-target
200:10 export-extcommunity 200:20 export-extcommunity
[R2-vpn-instance-CustA-af-ipv4]vpn-target [R5-vpn-instance-CustA-af-ipv4]vpn-target
200:20 import-extcommunity 200:10 import-extcommunity
R2-vpn-instance-CustA-af-ipv4]vpn-target [R5-vpn-instance-CustA-af-ipv4]vpn-target
200:40 import-extcommunity 200:30 import-extcommunity
[R2]ip vpn-instance CustB
[R2-vpn-instance-CustB]route-distinguisher
200:3
[R2-vpn-instance-CustB-af-ipv4]vpn-target
200:30 export-extcommunity
[R2-vpn-instance-CustB-af-ipv4]vpn-target [R5]ip vpn-instance CustB
200:40 import-extcommunity [R5-vpn-instance-CustB]route-distinguisher
[R2-vpn-instance-CustB-af-ipv4]vpn-target 200:4
200:20 import-extcommunity [R5-vpn-instance-CustB-af-ipv4]vpn-target
200:40 export-extcommunity
[R5-vpn-instance-CustB-af-ipv4]vpn-target
200:30 import-extcommunity
R5-vpn-instance-CustB-af-ipv4]vpn-target 200:10
import-extcommunity
Verify Connectivity CustB
[R2]tracert -vpn-instance CustB -a 20.20.20.20 -v 60.60.60.60
[R5]tracert -vpn-instance CustB -a 50.50.50.50 -v 10.10.10.10
Verify Connectivity CustA
[R1]tracert -a 10.10.10.10 -v 50.50.50.50
[R1]tracert -a 60.60.60.60 -v 20.20.20.20