KB CCIE Service Provider Workbook

CCIE Service Provider Workbook
Authored By:
Khawar Butt Comprehensive Coverage of the CCIE

Penta CCIE # 12353 Service Exam
CCDE # 20110020
Copyrights Khawar Butt 2006-2020

Website: http://www.khawarb.com; Email: khawarb@khawarb.com
Page 1 of 311
Netmetric
Solutions
Table of Contents
Module 1 - OSPF Page

Configure OSPF on Ethernet 7
Configuring Virtual Links 9
Configuring OSPF Authentication 12
Route Summarization & LSA Filtering 14
Configuring Area Types 22
Module 2 - IS-IS
Basic IS-IS Configuration - Single Area 25
IS-IS Authentication 28
IS-IS Multi Area Configuration 30
Configuring Route Leaking 34
Route Summarization 35
Route Redistribution 36
Module 3 - BGP
Configuring eBGP 42
Configuring BGP Authentication 45
Configuring iBGP 46
Route Filtering Using ACLs 50
Route Filtering Using Prefix-Lists 53
Route Filtering Using AS-Path Filters 55
Configuring Route Aggregation 59
Configuring Confederations 62
Configuring Route Manipulation using MED 65
Configuring Route Manipulation using Local 69
Preference
Configuring Route Manipulation using Cisco Weight 70
Module 4 - IPv6
Configuring IPv6 with RIPng 72
Configuring IPv6 with EIGRP 75
Configuring IPv6 with OSPFv3 78
Configuring IPv6 with IS-IS 81
Configuring IPv6 in IPv4 Tunnel 84
Configuring iBGP for IPv6 - Route-Reflector & Next- 87
Hop-Self
Page 2 of 311
Configuring eBGP for IPv6 92
Module 5 - BFD
Configuring the Base Network 95
Configuring BFD for Routing Protocols - OSPF, BGP, 98
EIGRP & IS-IS
Module 6 - Multicast Routing
Configuring Multicasting Routing using PIM – Dense 101
Mode
Configuring Multicasting Routing using PIM – Sparse 103
Mode using Static RP
Mode – Multiple RPs
Mode – Auto RP
Mode – BSR
Configuring MSDP 114
Module 7 - Configuring MPLS Unicast Routing
Configuring MPLS Unicast Routing 119
Authenticating LDP Peers 123
Module 8 - Configuring Intra-AS MPLS VPNs
Configuring MPLS VPN with Static Routes between 125
PE-CE
Configuring MPLS VPN with RIPv2 as PE-CE Routing 129
Protocol
Configuring MPLS VPN with EIGRP as PE-CE 133
Routing Protocol
Configuring MPLS VPN with BGP as PE-CE Routing 137
Protocol
Configuring MPLS VPN with OSPF as PE-CE Routing 141
Protocol
Configuring Domain-ID for OSPF PE-CE Routing 145
Configuring OSPF Sham Link 146
Configuring MPLS VPN Extranets 148
Configuring Export Maps 153
Configuring Import Maps 156

Page 3 of 311
Module 9 - Configuring Inter-AS MPLS VPNs
Configuring VRF Lite 158
Configuring Inter-AS MPLS VPN Using Option 1 – 167
VRF
Configuring Inter-AS MPLS VPN Using Option 2A – 176
MP-eBGP on ASBR using Next-Hop-Self
Configuring Inter-AS MPLS VPN Using Option 2B – 180
MP-eBGP on ASBR using Redistribute Connected
MP-eBGP between PE Routers
MP-eBGP between RR Routers
Non-VPN Transit Provider
Module 10 - Carrier Supporting Carrier (CSC)
Configuring Carrier Supporting Carriers (CSC) – 202
Customer Carrier IP Only
Customer Carrier Running MPLS
Customer Carrier Running MPLS VPN
Module 11 - Configuring IPv6 over MPLS VPN
Configuring the Core Network based on MPLS 227
Unicast Routing
Configuring an IPv6 Over MPLS VPN 231
Module 12 - Configuring Layer 2 MPLS VPNs
Implementing AToM – Ethernet VLAN over MPLS 235
Implementing AToM – HDLC over MPLS 239
Implementing AToM – PPP over MPLS 240
Implementing AToM – Frame Relay over MPLS 241
Implementing AToM – Frame-Relay-Ethernet VLAN 243
over MPLS
Implementing AToM – Frame-Relay-Ethernet VLAN 247
Using Local Switching
Configuring L2TPv3 – Hairpinning (Local Switching) 259
Configuring L2TPv3 - Remote Peers 254

Page 4 of 311
Module 13 - Configuring MPLS TE
Configuring the SP Core Network with MPLS Unicast 257
Routing
Configuring MPLS TE - Static Tunnels 261
Configuring MPLS TE - Dynamic Tunnels 266
Configuring MPLS TE - Dynamic Tunnels with Pre- 269
emption
Configuring MPLS TE with IS-IS 271
Configuring MPLS TE - Link Protection with Fast Re- 273
Route (FRR)
Module 14 - Configuring Multicast VPN
Routing
Configuring Multicast VPN (M-VPN) using Static RP 284
Configuring Multicast VPN (M-VPN) using Auto RP 289
Module 15 - Configuring MPLS on IOS-XR
Routing
Configuring Intra-AS MPLS VPN using EIGRP as PE- 297
CE Protocol
Configuring Inter-AS MPLS VPN 301

Page 5 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring OSPF

Page 6 of 311
Netmetric
Solutions
Lab 1 – Configure OSPF on Ethernet
R1 R2
L0 1.1.1.1/8 L0 2.2.2.2/8
F 0/0 (.1) F 0/0 (.2)
L0 192.1.100.0/24
F 0/0 (.4) F 0/0 (.3)

L0 3.3.3.3/8
L0 4.4.4.4/8
R3
R4
Interface IP Address Configuration
R1
Interface IP Address Subnet Mask

Loopback 0 1.1.1.1 255.0.0.0
F 0/0 192.1.100.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.100.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
F 0/0 192.1.100.3 255.255.255.0

Page 7 of 311
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.100.4 255.255.255.0
Task 1
Configure OSPF on a Broadcast Multi-Access(BMA) Ethernet network in Area 0.
Advertise all networks on all routers. Hard Code the Router-id based on the
following:
R1 – 11.11.11.11
R2 – 22.22.22.22
R3 – 33.33.33.33
R4 – 44.44.44.44
R1 R2
Router OSPF 1 Router OSPF 1

Router-id 11.11.11.11 Router-id 22.22.22.22
Network 1.1.1.1 0.0.0.0 area 0 Network 2.2.2.2 0.0.0.0 area 0
R3 R4

Task 2
Configure the routers such that R1 becomes the DR and R2 as the BDR on the
100 Network.
R1 R2
Interface E 0/0 Interface E 0/0

Ip ospf priority 100 Ip ospf priority 50
Note: Issue the Clear ip ospf process command to reset the OSPF process for
the change to take effect.

Page 8 of 311
Lab 2 – Configuring Virtual Link
R1 Area 0
192.1.12.0/24
R2
3
R3 192.1.23.0/24
Area 10
192.1.34.0/24
R4
192.1.45.0/24
Area 20
R5
R1

Loopback 0 1.1.1.1 255.0. 0.0
F 0/0 192.1.12.1 255.255.255.0
R2

F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
Loopback 0 2.2.2.2 255.0.0.0
R3

Page 9 of 311
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
Loopback 0 3.3.3.3 255.0.0.0
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.0.0.0
F 0/0 192.1.45.5 255.255.255.0
Task 1
Run OSPF as your Routing Protocol on all Routers and the Switch. Advertise
the networks in the following areas:
Area 0 – R1 Loopback 0, R1 F 0/0, R2 F 0/0, R2 Loopback 0

Area 10 – R2 F 0/1, R3 F 0/0, R3 F 0/1, R3 Loop 0, R4 F 0/0
Area 100 – R4 F 0/1, R5 F 0/0, R4 Loop 0, R5 Loop 0
Configure a Virtual Link between the appropriate devices.
R1
router ospf 1
router-id 1.1.1.1
network 1.0.0.0 0.255.255.255 area 0
network 192.1.12.0 0.0.0.255 area 0
R2
router ospf 1
router-id 2.2.2.2
network 2.0.0.0 0.255.255.255 area 0
network 192.1.12.0 0.0.0.255 area 0
network 192.1.23.0 0.0.0.255 area 10
area 10 virtual-link 4.4.4.4
R3
router ospf 1
Page 10 of 311
router-id 3.3.3.3
network 3.0.0.0 0.255.255.255 area 10
network 192.1.23.0 0.0.0.255 area 10
network 192.1.34.0 0.0.0.255 area 10
R4
router ospf 1
router-id 4.4.4.4
network 4.0.0.0 0.255.255.255 area 100
network 192.1.34.0 0.0.0.255 area 10
network 192.1.45.0 0.0.0.255 area 100
area 10 virtual-link 2.2.2.2
R5
router ospf 1
router-id 5.5.5.5
network 5.0.0.0 0.255.255.255 area 100
network 192.1.45.0 0.0.0.255 area 100

Page 11 of 311
Lab 3 – Configuring OSPF Authentication
(Builds on Lab 2)
Task 1
Configure the most secure authentication on all routers in Area's 0 and Area
100. Use a key of 1 and a key-string ccie.
R1
interface F 0/0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 ccie
R2
interface F 0/0
!
router ospf 1
area 10 virtual-link 4.4.4.4 authentication message-digest
area 10 virtual-link 4.4.4.4 message-digest-key 1 md5 ccie
R4
interface F 0/1
!
router ospf 1
area 10 virtual-link 2.2.2.2 authentication message-digest
area 10 virtual-link 2.2.2.2 message-digest-key 1 md5 ccie
R5
interface F 0/0
Task 2
Configure text authentication on all routers in 10. Use a key-string cisco.
R2
interface F 0/1
ip ospf authentication
ip ospf authentication-key cisco

Page 12 of 311
R3
interface F 0/0
!
interface F 0/1
R4
interface F 0/0

Page 13 of 311
Lab 4 – Route Summarization and LSA
Filtering
R1
EIGRP 100 192.1.12.0/24
R2
3
OSPF
Area 0 192.1.23.0/24 192.1.34.0/24
R3 R4
192.1.35.0/24
192.1.46.0/24
OSPF OSPF
R5 Area 10 Area 20
R6
192.1.67.0/24
R7
RIPv2
192.1.78.0/24
R8

Page 14 of 311
R1

Loopback 0 1.1.1.1 255.0. 0.0
Loopback 0 11.11.11.11 255.0. 0.0
S 0/0 192.1.12.1 255.255.255.0
R2

S 0/0 192.1.12.2 255.255.255.0
F 0/0 192.1.23.2 255.255.255.0
F 0/1 192.1.24.2 255.255.255.0
Loopback 0 2.2.2.2 255.0.0.0
Loopback 1 22.22.22.22 255.0.0.0
R3

F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.35.3 255.255.255.0
Loopback 0 3.3.3.3 255.0.0.0
Loopback 1 33.33.33.33 255.0.0.0
R4

F 0/0 192.1.24.4 255.255.255.0
F 0/1 192.1.46.4 255.255.255.0
Loopback 0 4.4.4.4 255.0.0.0
Loopback 1 44.44.44.44 255.0.0.0
R5

Loopback 0 5.5.5.5 255.0.0.0
Loopback 1 55.55.55.55 255.0.0.0
F 0/0 192.1.35.5 255.255.255.0

Page 15 of 311
R6

F 0/0 192.1.46.6 255.255.255.0
F 0/1 192.1.67.6 255.255.255.0
Loopback 0 6.6.6.6 255.0.0.0
Loopback 1 66.66.66.66 255.0.0.0
R7

F 0/0 192.1.67.7 255.255.255.0
F 0/1 192.1.78.7 255.255.255.0
Loopback 0 7.7.7.7 255.0.0.0
Loopback 1 77.77.77.77 255.0.0.0
R8

Loopback 0 8.8.8.8 255.0.0.0
Loopback 1 88.88.88.88 255.0.0.0
F 0/0 192.1.78.8 255.255.255.0
Task 1
Run EIGRP as your Routing Protocol on R1 & R2. Advertise all interfaces on
R1under EIGRP. Advertise the 22.0.0.0/8 and 192.1.12.0/24 networks under
EIGRP on R2.
R1
router eigrp 100

no auto-summary
network 1.0.0.0
network 11.0.0.0
network 192.1.12.0
R2
router eigrp 100

no auto-summary
network 22.0.0.0
network 192.1.12.0

Page 16 of 311
Task 2
Run OSPF as your Routing Protocol on the appropriate routers based on the
diagram. Configure the Loopbacks such that they get advertised with the
Interface mask. Advertise the networks in the following areas:
Area 0 – R2 F 0/0, R2 F 0/1, R2 Loop 0, R3 F 0/0, R3 Loop 0, R4 F 0/0, R4

Loop 0
Area 10 – R3 Loop 1, R3 F 0/1, R5 F 0/0, R5 Loop 0, R5 Loop 1
Area 20 – R4 Loop 1, R4 F 0/1, R6 F 0/0, R6 F 0/1, R6 Loop 0, R6 Loop 1,
R7 F 0/0, R7 Loop 0
R2
router ospf 1
router-id 2.2.2.2
network 2.0.0.0 0.255.255.255 area 0
network 192.1.23.0 0.0.0.255 area 0
network 192.1.24.0 0.0.0.255 area 0
!
Int Loopback 0
Ip ospf network point-to-point
R3
router ospf 1
router-id 3.3.3.3
network 3.0.0.0 0.255.255.255 area 0
network 33.0.0.0 0.255.255.255 area 10
network 192.1.23.0 0.0.0.255 area 0
network 192.1.35.0 0.0.0.255 area 10
!
!
Int Loopback 0
!
Int Loopback 1
R4
router ospf 1
router-id 4.4.4.4
network 4.0.0.0 0.255.255.255 area 0
network 44.0.0.0 0.255.255.255 area 20
network 192.1.24.0 0.0.0.255 area 0
network 192.1.46.0 0.0.0.255 area 20

Page 17 of 311
!
!
Int Loopback 0
!
Int Loopback 1
R5
router ospf 1
router-id 5.5.5.5
network 5.0.0.0 0.255.255.255 area 10
network 55.0.0.0 0.255.255.255 area 10
network 192.1.35.0 0.0.0.255 area 10
!
Int Loopback 0
!
Int Loopback 1
R6
router ospf 1
router-id 6.6.6.6
network 6.0.0.0 0.255.255.255 area 20
network 66.0.0.0 0.255.255.255 area 20
network 192.1.46.0 0.0.0.255 area 20
network 192.1.67.0 0.0.0.255 area 20
!
!
Int Loopback 0
!
Int Loopback 1
R7
router ospf 1
router-id 7.7.7.7
network 7.0.0.0 0.255.255.255 area 20
network 192.1.67.0 0.0.0.255 area 20
!
Int Loopback 0

Page 18 of 311
Task 3
Run RIPv2 as a Routing Protocol between R7 and R8. Advertise the Loopback 1
on R7 in RIP. Enable all interfaces on R8 under RIPv2.
R7 R8
router rip router rip

version 2 version 2
no auto-summary no auto-summary
network 77.0.0.0 network 192.1.78.0
network 192.1.78.0 network 8.0.0.0
network 88.0.0.0
Task 4
Configure Redistribution on the appropriate routers such that all networks are
reachable.
R2
Router EIGRP 100

Redistribute ospf 1 metric 1 1 1 1 1
!
Router ospf 1
Redistribute eigrp 100 subnets
R7
Router rip
Redistribute ospf 1 metric 1
!
Router ospf 1
Redistribute rip subnets
Task 5
Create the following Loopbacks on R5:
Loopback 101 – 205.1.4.1/24

Loopback 102 – 205.1.5.1/24
Loopback 103 – 205.1.6.1/24
Loopback 104 – 205.1.7.1/24
Advertise these newly created loopbacks in OSPF. Make sure it uses the
Interface mask in the advertisement.

Page 19 of 311
R5
interface Loopback101
ip address 205.1.4.1 255.255.255.0
ip ospf network point-to-point
!
ip address 205.1.5.1 255.255.255.0
!
ip address 205.1.6.1 255.255.255.0
!
ip address 205.1.7.1 255.255.255.0
!
router ospf 1
network 205.1.4.0 0.0.0.255 area 10
network 205.1.5.0 0.0.0.255 area 10
network 205.1.6.0 0.0.0.255 area 10
network 205.1.7.0 0.0.0.255 area 10
Task 6
Summarize the 205.1.X.0 networks such that only the summary route is sent
out of Area 10.
R3
router ospf 1
area 10 range 205.1.4.0 255.255.252.0
Task 7
Create the following Loopbacks on R1:
Loopback 101 – 201.1.4.1/24

Loopback 102 – 201.1.5.1/24
Loopback 103 – 201.1.6.1/24
Loopback 104 – 201.1.7.1/24
Advertise these newly created loopbacks in EIGRP.

Page 20 of 311
R1
ip address 201.1.4.1 255.255.255.0
!
ip address 201.1.5.1 255.255.255.0
!
ip address 201.1.6.1 255.255.255.0
!
ip address 201.1.7.1 255.255.255.0
!
router eigrp 100
network 201.1.4.0
network 201.1.5.0
network 201.1.6.0
network 201.1.7.0
Task 8
Summarize the 201.1.X.0 networks such that only the summary route is sent
into the OSPF Domain
R2
router ospf 1
summary-address 201.1.4.0 255.255.252.0
Task 9
Configure LSA Filtering such that network 66.0.0.0/8 is not allowed to leave
Area 20.
R2
Ip prefix-list FILTER1 deny 66.0.0.0/8

Ip prefix-list FILTER1 permit 0.0.0.0/0 le 32
!
Router ospf 1
Area 20 filter-list prefix FILTER1 out

Page 21 of 311
Lab 5 – Configuring Area Types
(Builds on Lab 5)
Task 1
Configure Area 10 such that it does not receive any External Routes. It should
maintain connectivity to the External Routes. (Stub Area)
R3
Router ospf 1
Area 10 stub
R5
Router ospf 1
Area 10 stub
Note: The ABR will block the External Routes from EIGRP & RIPv2
from reaching R5. Instead R3 will inject a default route instead.
This is a Stub Area. Verify it on R5 by checking the Routing table.
Task 2
This step is a continuation of Task 1. Configure Area 10 Also blocks Inter-Area
routes maintaining reachability to them. (Totally Stubby Area)
R3
Router ospf 1
Area 10 stub no-summary
Note: The ABR will block the Inter-Area Routes from getting
propagating into Area 10(R5). Instead R3 will inject a default route
instead. This is a Totally Stubby Area. Verify it on R5 by checking
the Routing table.
Task 3
Configure Area 20 such that it does not receive any external routes from the
backbone. The External routes from RIPv2 should continue to be received in
Area 20 and propagated into the Backbone. (NSSA Area)
R4
Router ospf 1
Area 20 nssa
R6

Page 22 of 311
Router ospf 1
Area 20 nssa
R7
Router ospf 1
Area 20 nssa
Note: The ABR will block the External routes from the Backbone
(EIGRP). Area 20 will continue to receive the external routes from
RIPv2 as N routes. These routes will continue to be propagated
towards the backbone. The ABR will convert the N routes into E
routes as it propagates it into the Backbone. You will receive
reachability to the External Routes from the Backbone as the ABR
does not inject a default route in this configuration.
Task 4
This step is a continuation of Task 3. Configure Area 20 such that the previous
requirement is maintained but Area 20 should have reachability to the external
routes from the backbone (EIGRP Routes). (NSSA-Stub Area)
R3
Router ospf 1
Area 10 stub default-information-originate
Note: This builds on the NSSA area by regaining reachability to the
Backbone external routes. This is done by having the ABR injecting
the default route into Area 20.
Task 5
Configure Area 20 such that the Inter-Area routes are also blocked in addition
to the external routes from the backbone. (NSSA-Totally Stubby Area)
R3
Router ospf 1
Area 10 stub no-summary

Page 23 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring IS-IS

Page 24 of 311
Netmetric
Solutions
Lab 1 – Basic IS-IS Configuration - Single
Area
R1 R2
192.1.12.0/24
192.1.23.0/24
192.1.34.0/24
R4 R3
R1

Loopback 0 1.1.1.1 255.0.0.0
Loopback 1 201.1.4.1 255.255.0.0
Loopback 2 201.1.5.1 255.255.255.0
Loopback 3 201.1.6.1 255.255.255.0
Loopback 4 201.1.7.1 255.255.255.0
F 0/0 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
S 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
S 0/0 192.1.23.3 255.255.255.0
Page 25 of 311
F 0/0 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
Loopback 1 204.1.4.1 255.255.0.0
Loopback 2 204.1.5.1 255.255.255.0
Loopback 3 204.1.6.1 255.255.255.0
Loopback 4 204.1.7.1 255.255.255.0
F 0/0 192.1.34.4 255.255.255.0
Task 1
Configure IS-IS on all 4 routers in a single Area 49.0000. User
XXXX.XXX.XXXX as the System ID. Advertise all the Loopbacks in IS-IS. Make
sure that the Routers only establish L1 Adjacencies with each other.
R1 R2
Router isis Router isis

Net 49.0000.1111.1111.1111.00 Net 49.0000.2222.2222.2222.00
Is-type level-1 Is-type level-1
! !
Int lo0 Int lo0
Ip router isis Ip router isis
Int lo1 Int F 0/0
Int lo2 Int S 0/0
Int lo3
Ip router isis
Int lo4
Ip router isis
Int F 0/0
Ip router isis
R3 R4

Net 49.0000.3333.3333.3333.00 Net 49.0000.4444.4444.4444.00
! !
Int lo0 Int lo0
Int F 0/0 Int lo1
Page 26 of 311
Int S 0/0 Int lo2
Int lo3
Ip router isis
Int lo4
Ip router isis
Int F 0/0
Ip router isis
Task 2
Make sure the R1 and R3 are the DIS for their respective Multi-Access
Segments.
R2 R4
Interface F 0/0 Interface F 0/0

Isis priority 10 Isis priority 10
Task 3
Configure the Hello between R2 and R3 to be 5 seconds with a dead timer of 15
seconds
R2 R3
Interface S 0/0 Interface S 0/0

Isis hello-interval 5 Isis hello-interval 5
isis hello-multiplier 3 isis hello-multiplier 3
Task 4
Configure all the Routers such that MPLS-TE is supported on them.
R1 R2

Metric-style wide Metric-style wide
R3 R4


Page 27 of 311
Lab 2 – IS-IS Authentication
(Builds on Lab1)
Task 1
Configure MD5 authentication for the Link between R1 & R2. Use ccie as the
key-string with a key-id of 1.
R1
Key chain AUTH

Key 1
Key-string ccie
!
Interface F 0/0
Isis authentication key-chain AUTH
Isis authentication mode MD5
R2
Key chain AUTH

Key 1
Key-string ccie
!
Interface F 0/0
Isis authentication mode MD5
Task 2
Configure Text authentication for the Link between R3 & R4. Use ccie as the
key-string with a key-id of 1.
R3
Key chain AUTH

Key 1
Key-string ccie
!
Interface F 0/0
Isis authentication mode text
R4
Key chain AUTH

Key 1
Key-string ccie

Page 28 of 311
!
Interface F 0/0
Isis authentication mode text

Page 29 of 311
Lab 3 –IS-IS Multi-Area Configuration
49.0010 R1 R2
R5
49.000
R6
49.0020 R4 R3
R1

Loopback 0 1.1.1.1 255.0.0.0
Loopback 1 201.1.4.1 255.255.0.0
Loopback 2 201.1.5.1 255.255.255.0
Loopback 3 201.1.6.1 255.255.255.0
Loopback 4 201.1.7.1 255.255.255.0
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.15.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
S 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
S 0/0 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0
Page 30 of 311
R4

Loopback 0 4.4.4.4 255.0.0.0
Loopback 1 204.1.4.1 255.255.0.0
Loopback 2 204.1.5.1 255.255.255.0
Loopback 3 204.1.6.1 255.255.255.0
Loopback 4 204.1.7.1 255.255.255.0
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.46.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.0.0.0
F 0/0 192.1.15.5 255.255.255.0
R6

Loopback 0 6.6.6.6 255.0.0.0
F 0/0 192.1.46.6 255.255.255.0
Task 1
Configure IS-IS on all 6 routers in the appropriate areas based on the Diagram.
User XXXX.XXX.XXXX as the System ID. Advertise all the Loopbacks in IS-IS.
R1 R2

Net 49.0010.1111.1111.1111.00 Net 49.0000.2222.2222.2222.00
! !
Int lo0 Int lo0
Int lo1 Int F 0/0
Int lo2 Int S 0/0
Int lo3
Ip router isis
Int lo4
Ip router isis
Int F 0/0
Page 31 of 311
Ip router isis
Int F 0/1
Ip router isis
R3 R4

Net 49.0000.3333.3333.3333.00 Net 49.0020.4444.4444.4444.00
! !
Int lo0 Int lo0
Int F 0/0 Int lo1
Int S 0/0 Int lo2
Int lo3
Ip router isis
Int lo4
Ip router isis
Int F 0/0
Ip router isis
Int F 0/1
Ip router isis
R5 R6

Net 49.0010.5555.5555.5555.00 Net 49.0020.5555.5555.5555.00
! !
Int F 0/0 Int F 0/0
Int lo0 Int lo0
Task 2
Make R5 and R6 are L1 routers only. Configure R1 & R4 to accommodate this
configuration.
R1 R4
Int F 0/1 Int F 0/1

isis circuit-type level-1 isis circuit-type level-1
R5 R6


Page 32 of 311
Task 3
R2 and R3 should be dedicated L2 routers.
R2 R3

Is-type level-2-only Is-type level-2-only

Page 33 of 311
Lab 4 – Configuring Route Leaking
(Builds on Lab 3)
Task 1
Configure Area's 49.0010 & 49.0020 to receive all routes from all areas.
R1
Access-list 101 permit ip any any

!
router isis
redistribute isis ip level-2 into level-1 distribute-list 101
R4
Access-list 101 permit ip any any

!
router isis
redistribute isis ip level-2 into level-1 distribute-list 101

Page 34 of 311
Lab 5 – Route Summarization
(Builds on Lab 4)
Task 1
Configure Area 49.0010 such that all the 201.1.X.0 routes are summarized out
of the area.
R2
router isis
summary-address 201.1.4.0 255.255.252.0
Task 2
Configure Area 49.0020 such that all the 201.1.X.0 routes are summarized out
of the area.
R2
router isis
summary-address 204.1.4.0 255.255.252.0

Page 35 of 311
Lab 6 – Route Redistribution
OSPF Area 0 R1
R5
R2
IS-IS Area 49.000

R6
R3
RIPv2 R4
R1

Loopback 0 1.1.1.1 255.0.0.0
Loopback 1 201.1.4.1 255.255.0.0
Loopback 2 201.1.5.1 255.255.255.0
Loopback 3 201.1.6.1 255.255.255.0
Loopback 4 201.1.7.1 255.255.255.0
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.15.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
S 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
S 0/0 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0
Page 36 of 311
R4

Loopback 0 4.4.4.4 255.0.0.0
Loopback 1 204.1.4.1 255.255.0.0
Loopback 2 204.1.5.1 255.255.255.0
Loopback 3 204.1.6.1 255.255.255.0
Loopback 4 204.1.7.1 255.255.255.0
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.46.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.0.0.0
F 0/0 192.1.15.5 255.255.255.0
R6

Loopback 0 6.6.6.6 255.0.0.0
F 0/0 192.1.46.6 255.255.255.0
Task 1
Configure IS-IS on the appropriate routers based on the Diagram. Use
XXXX.XXX.XXXX as the System ID. Advertise all the Loopbacks in IS-IS.
Establish a L2 Adjacency only.
R2 R3

Net 49.0000.1111.1111.1111.00 Net 49.0000.2222.2222.2222.00
! !
Int lo0 Int lo0
Int S 0/0 Int S 0/0
Task 2
Configure OSPF between R1, R2 & R5 based on the diagram. Advertise all the
networks on R1 and R5 in OSPF. Only enable the link between R1 & R2 under

Page 37 of 311
OSPF on R2. Set the Router ID's based on the X.X.X.X format (X is the Router
Number). Make sure the loopbacks are advertised with the Interface masks.
R1 R2

Network 192.1.15.0 0.0.0.255 area 0
Network 1.0.0.0 0.255.255.255 area 0
Network 201.1.0.0 0.0.255.255 area 0
!
Int loo 0
!
Int loo 1
!
Int loo 2
!
Int loo 3
!
Int loo 4
R5
Router OSPF 1
Router-id 1.1.1.1
Network 192.1.15.0 0.0.0.255 area 0
Network 5.0.0.0 0.255.255.255 area 0
!
Int loo 0
Task 3
Configure RIPv2 between R3, R4 & R6 based on the diagram. Advertise all the
networks on R4 and R6 in RIPv2. Only enable the link between R3 & R4 under
RIPv2 on R3.
R3 R4
Router RIP Router RIP

Page 38 of 311
No auto-summary No auto-summary
Version 2 Version 2
Network 192.1.34.0 Network 192.1.34.0
Network 192.1.46.0
Network 4.0.0.0
Network 204.1.4.0
Network 204.1.5.0
Network 204.1.6.0
Network 204.1.7.0
R6
Router RIP
No auto-summary
Version 2
Network 192.1.46.0
Network 6.0.0.0
Task 4
Configuring Mutual redistribution between IS-IS & OSPF.
R2
Router isis
Redistribute ospf 1
!
Router ospf 1
Redistribute isis subnets
Task 5
Configuring Mutual redistribution between IS-IS & RIPv2.
R3
Router isis
Redistribute rip
!
Router rip
Redistribute isis metric 1

Page 39 of 311
Task 6
Re-configure the redistribution between OSPF & IS-IS such that the 201.1.X.0
networks are not redistributed into IS-IS.
R2
Access-list 1 deny 201.1.4.0 0.0.3.255

Access-list 1 permit any
!
Route-map O-2-I
Match ip address 1
!
Router isis
Redistribute ospf 1 route-map O-2-I
Metric-style wide
Note : Metric-style wide required for routes with TAGS
Task 7
Re-configure the redistribution between OSPF & IS-IS such that the 204.1.4.0
networks are not injected into OSPF.
R3
Access-list 11 permit 204.1.4.0 0.0.3.255

!
Route-map R-2-I permit 10
Match ip address 11
Set tag 111
Route-map R-2-I permit 20
!
Router isis
Redistribute rip route-map R-2-I
Metric-style wide
Note : Metric-style wide required for routes with TAGS

R2
Route-map I-2-O deny 10

Set tag 111
Route-map I-2-O permit 20
!
Router ospf 1
Redistribute isis route-map I-2-O subnets

Page 40 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020
Configuring BGP

Page 41 of 311
Netmetric
Solutions
Lab 1 – Configuring eBGP
Physical Layout
Loopback 0 R1 R2
Loopback 0
F 0/0 F 0/0
Loopback 1 Loopback 1
S 0/0
Loopback 1 S 0/0 Loopback 1
F 0/0 F 0/0
R4 R3
BGP Logical Layout
AS 1 AS 2
R2
R1
R4
R3
AS 4 AS 3

Page 42 of 311
R1

Loopback 0 1.1.1.1 255.0.0.0
Loopback 1 11.1.0.1 255.255.0.0
F 0/0 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
Loopback 1 12.1.0.1 255.255.0.0
E 0/0 192.1.12.2 255.255.255.0
S 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
Loopback 1 13.1.0.1 255.255.0.0
S 0/0 192.1.23.3 255.255.255.0
E 0/0 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
Loopback 1 14.1.0.1 255.255.0.0
E 0/0 192.1.34.4 255.255.255.0
Task 1
Configure a BGP neighbor relationship between R1 and R2. R1 should be in AS
1 and R2 should be in AS 2. Advertise the loopback networks in BGP. Hard-
code the Router ID for the BGP routers as 11.11.11.11 for R1 and 22.22.22.22
for R2.
R1 R2
Router BGP 1 Router BGP 2

bgp router-id 11.11.11.11 bgp router-id 22.22.22.22
Page 43 of 311
Network 1.0.0.0 Network 2.0.0.0
Network 11.1.0.0 mask 255.255.0.0 Network 12.1.0.0 mask 255.255.0.0
Neighbor 192.1.12.2 remote-as 2 Neighbor 192.1.12.1 remote-as 1
Task 2
Configure a BGP neighbor relationship between R2 and R3. R2 should already
be configured in AS 2 and R3 should be in AS 3. Advertise the loopback
network of R3 in BGP. Hard-code the Router ID for R3 as 33.33.33.33
R2 R3

Neighbor 192.1.23.3 remote-as 3 bgp router-id 33.33.33.33
Network 3.0.0.0
Network 13.1.0.0 mask 255.255.0.0
Neighbor 192.1.23.2 remote-as 2
Task 3
Configure a BGP neighbor relationship between R3 and R4. R3 should already
be configured in AS 3 and R4 should be in AS 4. Advertise the loopback
network of R4 in BGP. Hard-code the Router ID for R4 as 44.44.44.44.
Establish the neighbor relationship based on Loopback 0 addresses. You are
allowed to create a static route on each router to accomplish this task.
R3 R4
Ip route 4.0.0.0 255.0.0.0 192.1.34.4 Ip route 3.0.0.0 255.0.0.0 192.1.34.3

! !
Neighbor 4.4.4.4 update-source loo0 Network 4.0.0.0
Neighbor 4.4.4.4 ebgp-multihop Network 14.1.0.0 mask 255.255.0.0
Neighbor 3.3.3.3 update-source loop 0
Neighbor 3.3.3.3 ebgp-mulithop

Page 44 of 311
Lab 2 – Configuring BGP Authentication
(Builds on Lab 1)
Task 1
Configure MD5 Authentication between R1 and R2 using a password of cciers.
R1 R2

Neighbor 192.1.12.2 pass cciers Neighbor 192.1.12.1 password cciers
Task 2
Configure MD5 Authentication between R2 and R3 using a password of
cciesec.
R2 R3

Neighbor 192.1.23.3 pass cciesec Neighbor 192.1.23.2 password cciesec
Task 3
Configure MD5 Authentication between R3 and R4 using a password of cciers.
R3 R4

Neighbor 4.4.4.4 password cciers Neighbor 3.3.3.3 password cciers

Page 45 of 311
Lab 3 – Configuring iBGP
Physical Layout
R1 192.1.12.0/24 R2 L0 2.2.2.2/8
L0 1.1.1.1/8 S 0/0(.1)
S 0/0
(.2)
L1 12.1.0.1/16
F 0/0 (.2)
R5 192.1.23.0/24
F 0/0 (.5) 192.1.45.0/24

F 0/0 (.3)
S 0/0(.4) 192.1.34.0/24
F 0/0 (.4) S 0/0 L0 3.3.3.3/8
(.3)
L0 4.4.4.4/8 L1 13.1.0.1/16
R4 R3
BGP Logical Layout
R3
AS 5
AS 1
AS 234
R1 R2 R4 R5

Page 46 of 311
R1

Loopback 0 1.1.1.1 255.0.0.0
S 0/0 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
Loopback 1 12.1.0.1 255.255.0.0
S 0/0 192.1.12.2 255.255.255.0
F 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
Loopback 1 13.1.0.1 255.255.0.0
F 0/0 192.1.23.3 255.255.255.0
S 0/0 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
S 0/0 192.1.34.4 255.255.255.0
F 0/0 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.0.0.0
F 0/0 192.1.45.5 255.255.255.0
Task 1
Configure a neighbor relationship between R1 and R2 based on the Logical
diagram. Advertise the Loopback networks on both Routers. Hard-code the
Router ID for the BGP routers as 11.11.11.11 for R1 and 22.22.22.22 for R2.

Page 47 of 311
R1 R2

Neighbor 192.1.12.2 remote-as 234 Network 12.1.0.0 mask 255.255.0.0
Task 2
Configure EIGRP in AS 234 as the routing protocol within AS 234. Only
advertise the internal physical link in EIGRP on R2, R3 and R4. Do not
advertise the 192.1.12.0 and the 192.1.45.0 networks in EIGRP.
R2 R3
Router EIGRP 234 Router EIGRP 234

Network 192.1.23.0 Network 192.1.23.0
Network 192.1.34.0
R4
Router EIGRP 234

no auto-summary
Network 192.1.34.0
Task 3
Configure neighbor relationships between R2 and R3 and another one between
R3 and R4. Do not configure a neighbor relationship between R2 and R4.
Advertise the Loopback networks under BGP. Make sure routes from R1 can
get propagated to R3 and R4. Do not use a Confederation to accomplish this.
R2
Router BGP 234

Network 2.0.0.0
Network 12.1.0.0 mask 255.255.0.0
Neighbor 192.1.23.3 next-hop-self
R3
Router BGP 234

Network 3.0.0.0
Network 13.1.0.0 mask 255.255.0.0

Page 48 of 311
Neighbor 192.1.23.2 route-reflector-client
R4
Router BGP 234

Network 4.0.0.0
Task 4
diagram. Advertise the Loopback network on R5 in BGP. Hard-code the Router
ID for R5 as 55.55.55.55.
R4 R5

Neighbor 192.134.3 next-hop-self Network 5.0.0.0

Page 49 of 311
Lab 4 – Route Filteriing using ACLs
(Builds on R3)
Task 1
Create the following Loopbacks on R2
Loopback 1 – 192.2.1.1/24
Loopback 2 – 192.2.2.1/24
Loopback 3 – 192.2.3.1/24
Loopback 4 – 192.2.4.1/24
Loopback 5 – 192.2.5.1/24
Loopback 6 – 192.2.6.1/24
Loopback 7 – 192.2.7.1/24
Loopback 8 – 192.2.8.1/24
R2
interface Loopback1
ip address 192.2.1.1 255.255.255.0
!
interface Loopback2
ip address 192.2.2.1 255.255.255.0
!
interface Loopback3
ip address 192.2.3.1 255.255.255.0
!
interface Loopback4
ip address 192.2.4.1 255.255.255.0
!
interface Loopback5
ip address 192.2.5.1 255.255.255.0
!
interface Loopback6
ip address 192.2.6.1 255.255.255.0
!
interface Loopback7
ip address 192.2.7.1 255.255.255.0
!
interface Loopback8
ip address 192.2.8.1 255.255.255.0

Page 50 of 311
Task 2
Advertise the newly created routes in BGP. Do not use the network command
to accomplish this. These routes should have an origin code of “igp”.
R2

!
Route-map redcon permit 10
Match address 1
Set origin igp
!
Router bgp 234
Redistribute connected route-map redcon
Task 3
Configure R2 such that it blocks all the 192.2.X.0 routes that have an odd
number in the third octet from propagating outside the local AS. Use the
distribute-list command to accomplish this task.
R2
Access-list 2 deny 192.2.1.0 0.0.254.255

!
Router bgp 234
Neighbor 192.1.12.1 distribute-list 2 out
Task 4
Configure R4 such that it blocks all the 192.2.X.0 routes that have an even
number in the third octet from coming in. Make sure that even if in the future
that a neighbor relationship is established between R2 and R4 these routes
don’t come into R4. Use the distribute-list command to accomplish this task.
R4

Page 51 of 311
Access-list 3 deny 192.2.0.0 0.0.254.255
!
Router bgp 234
distribute-list 3 in

Page 52 of 311
Lab 5 – Route Filteriing using Prefix-Lists
(Builds on R4)
Task 1
Create the following Loopbacks on R3
Loopback 1 – 150.3.16.1/20
Loopback 2 – 150.3.36.1/22
Loopback 3 – 150.3.40.1/22
Loopback 4 – 150.3.50.1/23
Loopback 5 – 150.3.65.1/24
Loopback 6 – 150.13.0.1/16
Loopback 7 – 150.14.64.1/18
R3
interface Loopback1
ip address 150.3.16.1 255.255.240.0
!
interface Loopback2
ip address 150.3.36.1 255.255.252.0
!
interface Loopback3
ip address 150.3.40.1 255.255.252.0
!
interface Loopback4
ip address 150.3.50.1 255.255.254.0
!
interface Loopback5
ip address 150.3.65.1 255.255.255.0
!
interface Loopback6
ip address 150.13.0.1 255.255.0.0
!
interface Loopback7
ip address 150.14.64.1 255.255.192.0
Task 2
Advertise the newly created routes in BGP using the Network command.
R3
Router bgp 234

Network 150.3.16.0 mask 255.255.240.0

Page 53 of 311
Network 150.3.36.0 mask 255.255.252.0
Network 150.3.40.0 mask 255.255.252.0
Network 150.3.50.0 mask 255.255.254.0
Network 150.3.65.0 mask 255.255.255.0
Network 150.13.0.0
Network 150.14.64.0 mask 255.255.192.0
Task 3
Configure R2 such that it blocks all the 150.X.X.0 routes that have a subnet
mask between 17 and 23 bits.
R2
IP Prefix-list PLIST deny 150.0.0.0/8 ge 17 le 23

IP Prefix-list PLIST permit 0.0.0.0/0 le 32
!
Router bgp 234
Neighbor 192.1.23.3 prefix-list PLIST in

Page 54 of 311
Lab 6 – Route Filteriing using AS Path-
Filter
Physical Layout
R1 192.1.12.0/24 R2 L0 2.2.2.2/8
L0 1.1.1.1/8 S 0/0(.1)
S 0/0
(.2)
L1 12.1.0.1/16
F 0/0 (.2)
R5 192.1.23.0/24
F 0/0 (.5) 192.1.45.0/24

F 0/0 (.3)
S 0/0(.4) 192.1.34.0/24
F 0/0 (.4) S 0/0 L0 3.3.3.3/8
(.3)
L0 4.4.4.4/8 L1 13.1.0.1/16
R4 R3
BGP Logical Layout
R3
AS 5
AS 1
AS 234
R1 R2 R4 R5

Page 55 of 311
R1

Loopback 0 1.1.1.1 255.0.0.0
S 0/0 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
Loopback 1 12.1.0.1 255.255.0.0
S 0/0 192.1.12.2 255.255.255.0
F 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
Loopback 1 13.1.0.1 255.255.0.0
F 0/0 192.1.23.3 255.255.255.0
S 0/0 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
S 0/0 192.1.34.4 255.255.255.0
F 0/0 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.0.0.0
F 0/0 192.1.45.5 255.255.255.0
Task 1
diagram. Advertise the Loopback networks on both Routers. Hard-code the
Router ID for the BGP routers as 11.11.11.11 for R1 and 22.22.22.22 for R2.
R1 R2
Page 56 of 311
Neighbor 192.1.12.2 remote-as 234 Network 12.1.0.0 mask 255.255.0.0
Task 2
Configure EIGRP in AS 234 as the routing protocol within AS 234. Only
advertise the internal physical link in EIGRP on R2, R3 and R4. Do not
advertise the 192.1.12.0 and the 192.1.45.0 networks in EIGRP.
R2 R3

Network 192.1.23.0 Network 192.1.23.0
Network 192.1.34.0
R4
Router EIGRP 234

no auto-summary
Network 192.1.34.0
Task 3
Configure neighbor relationships between R2 and R3 and another one between
R3 and R4. Do not configure a neighbor relationship between R2 and R4.
Advertise the Loopback networks under BGP. Make sure routes from R1 can
get propagated to R3 and R4. Do not use a Confederation to accomplish this.
R2
Router BGP 234

Network 2.0.0.0
Network 12.1.0.0 mask 255.255.0.0
R3
Router BGP 234

Network 3.0.0.0
Network 13.1.0.0 mask 255.255.0.0

Page 57 of 311
R4
Router BGP 234

Network 4.0.0.0
Network 14.1.0.0 mask 255.255.0.0
Task 4
diagram. Advertise the Loopback network on R5 in BGP. Hard-code the Router
ID for R5 as 55.55.55.55.
R4 R5

Neighbor 192.1.34.3 next-hop-self Network 5.0.0.0
Task 5
Configure BGP such that AS 5 does not use AS 234 as a transit AS.
Configuration should be done in AS 5.
R5
Ip as-path access-list 1 permit ^234$

!
Router BGP 5
Neighbor 192.1.45.4 filter-list 1 in
Task 6
Configure BGP such that AS 1 does not use AS 234 to get AS 5 routes.
Configuration should be done in AS 234. You are only allowed a single line in
the AS-path filter.
R2
Ip as-path access-list 1 permit ^$

!
Router BGP 234
Neighbor 192.1.12.1 filter-list 1 out

Page 58 of 311
Lab 7 – Configuring Route Aggregation
(Builds on Lab 6)
Task 1
Create the following Loopbacks on R3 and advertise them under BGP:
Loopback 1 – 203.1.4.1/24
Loopback 2 – 203.1.5.1/24
Loopback 3 – 203.1.6.1/24
Loopback 4 – 203.1.7.1/24
R3
interface Loopback1
ip address 203.1.4.1 255.255.255.0
!
interface Loopback2
ip address 203.1.5.1 255.255.255.0
!
interface Loopback3
ip address 203.1.6.1 255.255.255.0
!
interface Loopback4
ip address 203.1.7.1 255.255.255.0
!
Router BGP 234
Network 203.1.4.0
Network 203.1.5.0
Network 203.1.6.0
Network 203.1.7.0
Task 2
Configure Route Aggregation on R3 such that these routes are summarized as
a single route. Only the Summary route should be send to R3’s neighbors.
R3
Router bgp 234

Aggregate-address 203.1.4.0 255.255.252.0 summary-only
Task 3

Page 59 of 311
Loopback 1 – 204.1.4.1/24
Loopback 2 – 204.1.5.1/24
Loopback 3 – 204.1.6.1/24
Loopback 4 – 204.1.7.1/24
R4
interface Loopback1
ip address 204.1.4.1 255.255.255.0
!
interface Loopback2
ip address 204.1.5.1 255.255.255.0
!
interface Loopback3
ip address 204.1.6.1 255.255.255.0
!
interface Loopback4
ip address 204.1.7.1 255.255.255.0
!
Router BGP 234
Network 204.1.4.0
Network 204.1.5.0
Network 204.1.6.0
Network 204.1.7.0
Task 4
a single route. Only the Summary route should be send to R4’s neighbor. The
routes should not be seen as suppressed on R4. Use the minimum number of
lines in your filtering mechanism.
R4
IP Prefix-list PLIST deny 204.1.4.0/22 ge 24

IP Prefix-list PLIST permit 0.0.0.0/0 le 32
!
Router bgp 234
Aggregate-address 204.1.4.0 255.255.252.0
Neighbor 192.1.34.3 prefix-list PLIST out
Neighbor 192.1.45.5 prefix-list PLIST out
Task 5

Page 60 of 311
Loopback 1 – 202.1.4.1/24
Loopback 2 – 202.1.5.1/24
Loopback 3 – 202.1.6.1/24
Loopback 4 – 202.1.7.1/24
R2
interface Loopback1
ip address 202.1.4.1 255.255.255.0
!
interface Loopback2
ip address 202.1.5.1 255.255.255.0
!
interface Loopback3
ip address 202.1.6.1 255.255.255.0
!
interface Loopback4
ip address 202.1.7.1 255.255.255.0
!
Router BGP 234
Network 202.1.4.0
Network 202.1.5.0
Network 202.1.6.0
Network 202.1.7.0
Task 6
a single route. Only the Summary route and the 202.1.5.0 route should be
send to R2’s neighbor.
R2

!
Route-map SUPMAP deny 10
Match address 5
Route-map SUPMAP permit 20
!
Router bgp 234
Aggregate-address 202.1.4.0 255.255.252.0 supress-map SUPMAP

Page 61 of 311
Lab 8 – Configuring Confederations
Physical Layout
Loopback 0 R1 R2
Loopback 0
F 0/0 F 0/0
S 0/0
Loopback 1 S 0/0 Loopback 1
F 0/0 F 0/0
R4 R3
BGP Logical Layout
R2
AS 65002
AS 4
AS 123
R1 R3 R4
AS 65003
AS 65001

Page 62 of 311
R1

Loopback 0 1.1.1.1 255.0.0.0
F 0/0 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
S 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
S 0/0 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
Task 1
Configure RIP V2 as the routing protocol between R1, R2 and R3. Only
advertise the R1-R2 and R2-R3 links in RIP on the appropriate routers.
R1 R2

Version 2 Version 2
Network 192.1.12.0 Network 192.1.12.0
Network 192.1.23.0
R3
Router RIP

Page 63 of 311
No auto-summary
Version 2
Network 192.1.23.0
Task 2
Configure AS 65001, AS 65002 and AS 65003 are Sub Autonomous Systems of
a Larger AS 123 using Confederations. Advertise the Loopback 0 networks
under BGP in AS 65001, AS 65002 and AS 65003. Configure a Neighbor
relationship between AS 65001 and AS 65002 and another Neighbor
relationship between AS 65002 and AS 65003.
R1 R2

bgp confederation identifier 123 Neighbor 192.1.23.3 remote-as 3
bgp confederation peers 65002 bgp confederation identifier 123
bgp confederation peers 65001 65003
R3
Router BGP 65003

Network 3.0.0.0
bgp confederation identifier 123
bgp confederation peers 65002
Task 3
Configure a neighbor relationship between R3 and R4. R4 is in AS 4. It peers
with R3 in the confederation AS 123. Advertise the loopback 0 interface under
BGP in AS 4.
R3
Router BGP 65003

R4
Router BGP 4
Network 4.0.0.0

Page 64 of 311
Lab 9 – Configuring Route Manipulation
using MED
Physical Layout
Loopback 0 R1 R2
Loopback 0
F 0/0 F 0/0
S 0/0 S 0/0
Loopback 1 S 0/0 S 0/0 Loopback 1
F 0/0 F 0/0
R4 R3
BGP Logical Layout
R2
AS 1
AS 234
R3
R1
R4

Page 65 of 311
R1

Loopback 0 1.1.1.1 255.0.0.0
F 0/0 192.1.12.1 255.255.255.0
S 0/0 192.1.14.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
S 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
S 0/0 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
S 0/0 192.1.14.4 255.255.255.0
Task 1
Run RIP V2 as the IGP in AS 234. Advertise the directly connected links under
RIP. Do not advertise the external links (192.1.12.0, 192.1.14.0) or the
Loopbacks in RIP.
R2 R3

Version 2 Version 2
Network 192.1.23.0 Network 192.1.23.0
Network 192.1.34.0
R4
Page 66 of 311
Router RIP
Version 2
No auto-summary
Network 194.1.34.0
Task 2
Configure the routers under BGP based on the Logical diagram. Configure the
Neighbor relationships also based on the Logical diagram. Advertise Loopback
0 Networks on all routers under BGP. Make sure the 1.0.0.0 gets put into the
routing table of R3. Also make sure that Routes from R2 are getting propagated
to R4 and vice versa.
R1 R2

No sync No sync
Neighbor 192.1.12.2 remote-as Neighbor 192.1.12.1 remote-as 1
234 Neighbor 192.1.23.3 remote-as
234 Neighbor 192.1.23.3 next-hop-self
R3 R4

No sync No sync
Neighbor 192.1.23.2 remote-as Neighbor 192.1.34.3 remote-as
234 234
Neighbor 192.1.23.2 route- Neighbor 192.1.34.3 next-hop-self
reflector-client Neighbor 192.1.14.1 remote-as 1
Neighbor 192.1.34.4 remote-as
234
Neighbor 192.1.34.4 route-
reflector-client

Page 67 of 311
Task 3
All ingress (incoming) traffic to AS 234 should use the path thru R4 using the
MED attribute. Configure the MED on R2 to 100. R4’s MED is 0 by default.
Lower MED will be preferred.
R2
Route-map SETMED permit 10

Set metric 100
!
Router BGP 234
Neighbor 192.1.12.1 route-map SETMED out

Page 68 of 311
using Local Preference
(Builds on Lab 9)
Task 1
Configure AS 234 such that all traffic destined for AS 1 should go through R2
in the outbound direction.Use Local-Preference Attribute to accomplish this.
R2
Route-map SETLP permit 10

Set Local-preference 200
!
Router BGP 234
Neighbor 192.1.12.1 route-map SETLP in

Page 69 of 311
using Cisco Weight Attribute
(Builds on Lab 10)
Task 1
Configure AS 234 such that all traffic originating from R4 and destined for AS1
should go directly from R4 to R1 instead of using R2. Make sure this
configuration does not affect the traffic flow for the rest of the AS.
R4
Route-map SETWT permit 10

Set weight 5000
!
Router BGP 234
Neighbor 192.1.14.1 route-map SETWT in
Task 2
Configure AS 1 such that all traffic destined for network 3.0.0.0 should go thru
R2. It is taking the R1-R4 route because of the MED attribute set in Lab 9. Use
the Weight attribute to accomplish this task.
R1

!
Match address 3
Set weight 5000
!
Router BGP 1
Neighbor 192.1.12.2 route-map SETWT in

Page 70 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring IPv6

Page 71 of 311
Netmetric
Solutions
Lab 1 – Configuring IPv6 with RIPng
Loppback 0 R1 R2 Loppback 0
FD00:1:1:1::1/64 F 0/0 F 0/0 3 FD00:2.2.2::2/64
FD00:192:1:12::/64
S 0/0
FD00:192:1:23::/64
Loppback 0 S 0/0 Loppback 0

FD00:4:4:4::4/64 FD00:1:1:34::/64 FD00:3:3:3::3/64
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
Task 1
Enable IPv6 routing on R1,R2, R3 and R4. Assign IPv6 addresses to the F 0/0
interface of the routers as follows:
✓ R1 – FD00:192:1:12::1 /64
✓ R2 – FD00:192:1:12::2 /64
✓ R3 – FD00:192:1:34::3 /64
✓ R4 – FD00:192:1:34::4 /64
R1 R2
ipv6 unicast-routing Ipv6 unicast-routing

! !
ipv6 address FD00:192:1:12::1/64 Ipv6 address FD00:192:1:12::2/64
no shut No shut
R3 R4

! !
no shut No shut

Page 72 of 311
Task 2
Configure the Loopback0 interface on all routers as follows:
✓ R1 – Loopback0 – FD00:1:1:1::1/64
✓ R2 – Loopback0 – FD00:2:2:2::2/64
✓ R3 – Loopback0 – FD00:3:3:3::3/64
✓ R4 – Loopback0 – FD00:4:4:4::4/64
R1
Interface Loopback 0
Ipv6 address FD00:1:1:1::1/64
R2
ipv6 address FD00:2:2:2::2/64
R3
R4
Task 3
Configure the Serial Link between R2 and R3 using the folloing IPV6 addresses:
✓ R2 – FD00:192:1:23::2/64
✓ R3 – FD00:192:1:23::3/64
R2
Interface S0/0
ipv6 address FD00:192:1:23::2/64
no shut
R3
Interface S0/0
ipv6 address FD00:192:1:23::3/64
no shut
Task 4

Page 73 of 311
Configure RIPng on all routers to route all loopbacks. Enable RIPng under the
following interfaces:
✓ R1 – F 0/0, Loopback 0
✓ R2 – F 0/0, Loopback 0, S 0/0
✓ R3 – F 0/0, Loopback 0, S 0/0
R1 R2
Interface Loopback 0 Interface Loopback 0

ipv6 rip 100 enable ipv6 rip 100 enable
! !
Interface F 0/0 Interface S 0/0
!
Interface F 0/0
ipv6 rip 100 enable
R3 R4

! !
!
Interface S0/0
ipv6 rip 100 enable

Page 74 of 311
Lab 2 – Configuring IPv6 with EIGRP
FD00:1:1:1::1/64 F 0/0 F 0/0 3 FD00:2.2.2::2/64
FD00:192:1:12::/64
S 0/0
FD00:192:1:23::/64

FD00:4:4:4::4/64 FD00:1:1:34::/64 FD00:3:3:3::3/64
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
Task 1
Disable RIP NG on all routers on all interfaces.
R1 R2

No ipv6 rip 100 enable no ipv6 rip 100 enable
! !
No ipv6 rip 100 enable No ipv6 rip 100 enable
!
Interface S0/0
No ipv6 rip 100 enable
R3 R4

no ipv6 rip 100 enable No ipv6 rip 100 enable
! !
No ipv6 rip 100 enable No ipv6 rip 100 enable
!
Interface S0/0
No ipv6 rip 100 enable

Page 75 of 311
Task 2
Configure EIGRPv6 in AS 100 on all routers to route all loopbacks. Configure
the EIGRP Router-id’s as follows:
✓ R1 – 1.1.1.1
✓ R2 – 2.2.2.2
✓ R3 – 3.3.3.3
✓ R4 – 4.4.4.4
R1 R2

ipv6 eigrp 100 ipv6 eigrp 100
! !
! !
Ipv6 router eigrp 100 Interface S 0/0
Router-id 1.1.1.1 Ipv6 eigrp 100
No shut !
Ipv6 router eigrp 100
Router-id 2.2.2.2
No shut
R3 R4

!
! !
Interface S 0/0 Ipv6 router eigrp 100
Ipv6 eigrp 100 Router-id 4.4.4.4
! No shut
Ipv6 router eigrp 100
Router-id 3.3.3.3
No shut
Task 3
Authenticate the EIGRP Neighbor relationships using MD5 authentication. Use
Cisco as the Key with a key-id of 100.

Page 76 of 311
R1
Key Chain ABC

Key 1
Key-string Cisco
!
Int F 0/0
Ipv6 authentication mode eigrp 100 md5
Ipv6 authentication key-chain eigrp 100 ABC
R2
Key Chain ABC

Key 1
Key-string Cisco
!
Int F 0/0
!
Int S 0/0
R3
Key Chain ABC

Key 1
Key-string Cisco
!
Int F 0/0
!
Int S 0/0
R4
Key Chain ABC

Key 1
Key-string Cisco
!
Int F 0/0

Page 77 of 311
Lab 3 – Configuring IPv6 with OSPFv3
FD00:1:1:1::1/64 F 0/0 F 0/0 3 FD00:2.2.2::2/64
FD00:192:1:12::/64
S 0/0
FD00:192:1:23::/64

FD00:4:4:4::4/64 FD00:1:1:34::/64 FD00:3:3:3::3/64
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
Task 1
Disable EIGRP on all routers on all interfaces. Disable the protocol on the
router as well.
R1 R2

No ipv6 eigrp100 No ipv6 eigrp100
! !
! !
No ipv6 router eigrp 100 Interface S 0/0
!
No ipv6 router eigrp 100
R3 R4

! !
! !
Page 78 of 311
Interface S 0/0 No ipv6 router eigrp 100
!
No ipv6 router eigrp 100
Task 2
Configure the routers in OSPFv3 area 0 and advertise their directly connected
interfaces in this area. Configure the OSPF Router-id’s as follows:
✓ R1 – 1.1.1.1
✓ R2 – 2.2.2.2
✓ R3 – 3.3.3.3
✓ R4 – 4.4.4.4
R1 R2
ipv6 router ospf 1 ipv6 router ospf 1

router-id 1.1.1.1 router-id 2.2.2.2
! !
Interface Loopback0 Interface Loopback0
ipv6 ospf 1 area 0 ipv6 ospf 1 area 0
! !
!
Interface S 0/0
ipv6 ospf 1 area 0
R3 R4
ipv6 router ospf 1 ipv6 router ospf 1

router-id 3.3.3.3 router-id 4.4.4.4
! !
! !
!
Interface S 0/0
ipv6 ospf 1 area 0
Task 3
Ensure that the loopback interfaces are advertised with their correct mask.

Page 79 of 311
R1 R2

ipv6 ospf network point-to-point ipv6 ospf network point-to-point
R3 R4

ipv6 ospf network point-to-point ipv6 ospf network point-to-point
Task 4
Authenticate & encrypt the OSPF neighbor relationships between R1 and R2
using the following parameters:
➢ Encryption
o IPSec
o SPI : 1234
o Encryption Scheme : 3des
o Key : 123456789ABC123456789ABC123456789ABC123456789ABC
➢ Authentication
o MD5
o Key : 12345678123456781234567812345678
R1
Interface F 0/0
ipv6 ospf encryption ipsec spi 1234 esp 3des
123456789ABC123456789ABC123456789ABC123456789ABC md5
12345678123456781234567812345678
R2
Interface F 0/0
ipv6 ospf encryption ipsec spi 1234 esp 3des
123456789ABC123456789ABC123456789ABC123456789ABC md5
12345678123456781234567812345678

Page 80 of 311
Lab 4 – Configuring IPv6 with IS-IS
FD00:1:1:1::1/64 F 0/0 F 0/0 3 FD00:2.2.2::2/64
FD00:192:1:12::/64
S 0/0
FD00:192:1:23::/64

FD00:4:4:4::4/64 FD00:1:1:34::/64 FD00:3:3:3::3/64
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
Task 1
Disable OSPF on all routers on all interfaces. Disable the protocol on the router
as well.
R1 R2

No ipv6 ospf 1 area 0 No ipv6 ospf 1 area 0
! !
! !
No ipv6 router ospf 1 Interface S 0/0
No ipv6 router ospf 1
R3 R4

! !
! !
Interface S 0/0 No ipv6 router ospf 1
Page 81 of 311
No ipv6 router ospf 1
Task 2
Configure the routers in IS-IS area 49.0000 and advertise their directly
connected interfaces in this area. Use xxxx.xxxx.xxxx as the system ID. Make
sure that the neighbor establish a Level-1 adjacency only.
R1 R2

Net 49.0000.1111.11111.1111.00 Net 49.0000.2222.2222.2222.00
! !
ipv6 router isis ipv6 router isis
! !
!
Interface S 0/0
Ipv6 router isis
R3 R4

Net 49.0000.3333.3333.3333.00 Net 49.0000.4444.4444.4444.00
! !
! !
!
Interface S 0/0
Ipv6 router isis
Task 3
Authenticate the IS-IS neighbor relationships between R1 and R2 using MD5
authentication. Use a Key of 1 and a key string of cisco.

Page 82 of 311
R1
Key chain ABC

Key 1
Key-string cisco
!
Interface F 0/0
Isis authentication key-chain ABC
Isis authentication mode md5
R2
Key chain ABC

Key 1
Key-string cisco
!
Interface F 0/0
Isis authentication key-chain ABC
Isis authentication mode md5

Page 83 of 311
Lab 5 – Configuring IPv6 in IPv4 Tunnel
FD00:1:1:1::1/64 F 0/0 F 0/0 3 FD00:2.2.2::2/64
FD00:192:1:12::/64
S 0/0
192.1.23.0/24

FD00:4:4:4::4/64 FD00:1:1:34::/64 FD00:3:3:3::3/64
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
Task 1
Enable IPv6 routing on R1,R2, R3 and R4. Assign IPv6 addresses to the F 0/0
interface of the routers as follows:
✓ R1 – FD00:192:1:12::1 /64
✓ R2 – FD00:192:1:12::2 /64
✓ R3 – FD00:192:1:34::3 /64
✓ R4 – FD00:192:1:34::4 /64
R1 R2

no shut No shut
R3 R4

no shut No shut
Task 2
Page 84 of 311
Configure the Loopback0 interface on all routers as follows:
✓ R1 – Loopback0 – FD00:1:1:1::1/64
✓ R2 – Loopback0 – FD00:2:2:2::2/64
✓ R3 – Loopback0 – FD00:3:3:3::3/64
✓ R4 – Loopback0 – FD00:4:4:4::4/64
R1
R2
R3
R4
Task 3
Configure RIPng on all routers to route all loopbacks. Enable RIPng under the
following interfaces:
R1 R2

! !
R3 R4

Page 85 of 311
!
Task 4
Configure the Serial Link between R2 and R3 using the folloing IPv4 addresses:
✓ R2 – 192.1.23.2/24
✓ R3 – 192.1.23.3/24
R2
Interface S0/0
ip address 192.1.23.2 255.255.255.0
clock rate 1000000
no shut
R3
Interface S0/0
Ip address 192.1.23.3 255.255.255.0
no shut
Task 5
Create a Tunnel between R2 and R3 Assign it an IPv6 address of
FD00:192:1:23::/64. Set the Tunnel Mode to IPv6. Enable RIPng on the Tunnel
Interface to connect the 2 discontiguous RIP networks.
R2 R3
Interface Tunnel 23 Interface Tunnel 23

Tunnel source S 0/0 Tunnel source S 0/0
Tunnel destination 192.1.23.3 Tunnel destination 192.1.23.2
Ipv6 address FD00:192:1:23::2/64 Ipv6 address FD00:192:1:23::3/64
Ipv6 enable Ipv6 enable
Ipv6 rip 100 enable Ipv6 rip 100 enable
Tunnel mode IPV6IP Tunnel mode IPV6IP
No shut No shut

Page 86 of 311
Lab 6 – Configuring iBGP for IPv6 -
Route-Reflector & Next-Hop-Self
AS 100 R1
2000:192:1:12::/64
R2
AS 200
FC00:192:1:23::/64 FC00:192:1:23::/64
R3 R4
2000:192:1:35::/64 2000:192:1:46::/64
R5 R6
AS 500 AS 600
R1

Loopback 0 2000:1:1:1::1 64
S 0/0 2000:192:1:12::1 64

Page 87 of 311
R2

Loopback 0 2000:2:2:2::2 64
Loopback 10 FC00:2:2:2::2 64
F 0/0 FC00:192:1:23::2 64
F 0/1 FC00:192:1:24::2 64
S 0/0 2000:192:1:12::2 64
R3

Loopback 0 2000:3:3:3::3 64
Loopback 10 FC00: 3:3:3::3 64
F 0/0 FC00:192:1:23::3 64
S 0/0 2000:192:1:35::3 64
R4

Loopback 0 2000:4:4:4::4 64
Loopback 10 FC00: 4:4:4::4 64
F 0/0 FC00:192:1:24::4 64
S 0/0 2000:192:1:46::4 64
R5

Loopback 0 FC00: 5:5:5::5 64
S 0/0 2000:192:1:35::5 64
R6

Loopback 0 FC00: 6:6:6::6 64
S 0/0 2000:192:1:46::6 64

Page 88 of 311
Task 1
Configure the routers in AS 200 (R2, R3 & R4) IS-IS in area 49.0000 and
advertise their Internal networks in this area expect Loopback 0 interfaces. Use
xxxx.xxxx.xxxx as the system ID. Make sure that the neighbor establish a
Level-1 adjacency only.
R2 R3

Net 49.0000.2222.2222.2222.00 Net 49.0000.3333.3333.3333.00
! !
! !
!
Interface F 0/1
Ipv6 router isis
R4
Router isis
Net 49.0000.4444.4444.4444.00
Is-type level-1
!
Interface Loopback10
ipv6 router isis
!
Interface F 0/0
ipv6 router isis
Task 2
Configure iBGP in AS 200. Configure the neighbor relationships between R2 -
R3 & R2 - R4. Do not configure a neighbor relationship between R2 & R4. Set
the relationship with redundancy in mind. Advertise Loopback 0 networks
under BGP on these routers. Make sure that routes from R3 will get propagated
towards R4 and vice-versa.
R2
Router BGP 200

Page 89 of 311
Bgp router-id 2.2.2.2
Neighbor fc00:3:3:3::3 remote-as 200
Neighbor fc00:3:3:3::3 update-source loopback10
!
Address-family ipv6
Neighbor fc00:3:3:3::3 activate
Neighbor fc00:3:3:3::3 route-reflector-client
Neighbor fc00:4:4:4::4 route-reflector-client
Network 2000:2:2:2::/64
R3
Router BGP 200

!
Address-family ipv6
Network 2000:3:3:3::/64
R4
Router BGP 200

Bgp router-id 4:4:4::4
!
Address-family ipv6
Network 2000:4:4:4::/64

Page 90 of 311
Task 3
Configure MD5 authentication using a password of cisco123 between all
neighbors in AS 200.
R2
Router BGP 200

Neighbor fc00:3:3:3::3 password cisco123
R3
Router BGP 200

R4
Router BGP 200


Page 91 of 311
Lab 7 – Configuring eBGP for IPv6
(Builds on Lab 6)
Task 1
Configure a eBGP neighbor relationship between AS 100 & AS 200. Make sure
that the routes from AS 100 gets propagated towards R3 & R4. All Loopback 0
Routes from AS 100 should be reachable from AS 200 and vice-versa.
R1
Router bgp 100

Neighbor 2000:192:1:12::2 remote-as 200
!
Address-family ipv6
Neighbor 2000:192:1:12::2 activate
Network 2000:1:1:1::/64
R2
Router bgp 200

!
Address-family ipv6
Neighbor fc00:3:3:3::3 next-hop-self
Task 2
that the routes from AS 100 gets propagated towards AS 500 and vice-versa.
All Loopback 0 Routes from AS 100 should be reachable from AS 500 and vice-
versa.
R3
Router bgp 200

!
Address-family ipv6
R5

Page 92 of 311
Router bgp 500
!
Address-family ipv6
Network 2000:5:5:5::/64
Task 3
that the routes from AS 100 & AS 500 gets propagated towards AS 600 and
vice-versa. All Loopback 0 Routes from AS 100 & AS 500 should be reachable
from AS 600 and vice-versa.
R4
Router bgp 200

!
Address-family ipv6
R6
Router bgp 600

!
Address-family ipv6
Network 2000:6:6:6::/64

Page 93 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring BFD

Page 94 of 311
Netmetric
Solutions
Lab 1 – Configuring the Base Network
R1
OSPF Area 0
R2
BGP 100
R4
R5
R3
IS-IS 49,000 EIGRP 100
R1

Loopback 0 1.1.1.1 255.0.0.0
F 0/0 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
S 0/0 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
S 0/0 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0

Page 95 of 311
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.0.0.0
F 0/0 192.1.45.5 255.255.255.0
Task 1
Configure OSPF between R1 & R2 based on the diagram. Advertise all the
Loopback networks on R1 and R2 in OSPF. Set the Router ID's based on the
X.X.X.X format (X is the Router Number). Make sure the loopbacks are
advertised with the Interface masks.
R1 R2

Network 1.0.0.0 0.255.255.255 area 0 !
! Int loo 0
Int loo 0 Ip ospf network point-to-point
Task 2
Configure BGP between R2 & R3 in AS 100. Mutually redistribute OSPF & BGP
on R2. Make sure OSPF routes are reachable from R3.
R2 R3

Redistribute ospf 1
!
Router ospf 1
Redistribute bgp 100 subnets

Page 96 of 311
Task 3
Configure EIGRP between R3 & R4 based on the diagram. Advertise all the
Loopback networks on R3 and R4 in EIGRP. Mutually redistibure EIGRP &
BGP on R3.
R3 R4

Network 192.1.34.0 Network 192.1.34.0
Redistribute bgp 100 met 1 1 1 1 1
!
Router bgp 100
Redistribute eigrp 100
Bgp redisitribute-internal
Task 4
Configure IS-IS between R4 & R5 based on the diagram. Use XXXX.XXX.XXXX
as the System ID. Advertise all the Loopbacks on R5 in IS-IS. Establish a L2
Adjacency only. Mutually Redistribute EIGRP & IS-IS on R4.
R4 R5

Net 49.0000.4444.4444.4444.00 Net 49.0000.5555.5555.5555.00
! !
Int F 0/1 Int lo0
Int F 0/0
Ip router isis

Page 97 of 311
Lab 2 – Configuring BFD for Routing
Protocols - OSPF, BGP, EIGRP & IS-IS
(Builds on Lab 1)
Task 1
Configure BFD between R1 & R2. Use .5 secs for the Interval and Min_rx
parameters. Set the hold time at 1.5 secs. Enable OSPF to use BFD for
convergence & re-convergence
R1
Interface F 0/0
bfd interval 500 min_rx 500 multiplier 3
!
Router ospf 1
bfd all-interfaces
R2
Interface F 0/0
!
Router ospf 1
bfd all-interfaces
Task 2
parameters. Set the hold time at 1.5 secs. Enable BGP to use BFD for
R2
Interface S 0/0
!
router bgp 100
neighbor 192.1.23.3 fall-over bfd
R3
Interface S 0/0
!
router bgp 100

Page 98 of 311
neighbor 192.1.23.2 fall-over bfd
Task 3
parameters. Set the hold time at 1.5 secs. Enable EIGRP to use BFD for
R3
Interface F 0/0
!
Router eigrp 100
bfd interface F 0/0
R4
Interface F 0/0
!
Router eigrp 100
bfd interface F 0/0
Task 4
parameters. Set the hold time at 1.5 secs. Enable IS-IS to use BFD for
R4
Interface F 0/1
!
Router isis
bfd all-interfaces
R5
Interface F 0/1
!
Router isis
bfd all-interfaces

Page 99 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Multicast Routing

Page 100 of 311
Netmetric
Solutions
Lab 1 – Configuring Multicasting Routing
using PIM – Dense Mode
R2
R1 3
192.1.12.0/24
R1

F 0/0 192.1.12.1 255.255.255.0
Loopback0 1.1.1.1 255.0.0.0
R2

F 0/0 192.1.12.2 255.255.255.0
Loopback0 2.2.2.2 255.0.0.0
Task 1
Configure PIM dense mode on the routers.
R1 R2
Ip multicast-routing Ip multicast-routing
Int F 0/0 Int F 0/0

Ip pim dense-mode Ip pim dense-mode
Int S 0/0 Int S 0/0

Ip pim dense-mode Ip pim dense-mode
Task 2

Page 101 of 311
Configure R1 to join the multicast group 224.11.11.11 and R2 to join the
multicast group 224.22.22.22 on the Loopback interfaces.
R1 R2
Int Loopback 0 Int Loopback 0

Ip igmp join-group 224.11.11.11 Ip igmp join-group 224.22.22.22

Page 102 of 311
using PIM – Sparse Mode using Static RP
R2
R1 3
192.1.12.0/24
R1

F 0/0 192.1.12.1 255.255.255.0
Loopback0 1.1.1.1 255.0.0.0
R2

F 0/0 192.1.12.2 255.255.255.0
Loopback0 2.2.2.2 255.0.0.0
Task 1
Configure EIGRP in AS 100 on both routers and advertise your directly
connected interfaces.
R1 R2

Network 192.1.12.0 Network 192.1.12.0
Task 2
Configure R1 to be the RP for all groups. Use the most reliable interface.
R1 R2
Page 103 of 311
Interface loopback0 Ip multicast-routing
Ip pim sparse-mode
Ip pim rp-address 1.1.1.1
Ip multicast-routing
Int F 0/0
Ip pim rp-address 1.1.1.1 Ip pim sparse-mode
Int F 0/0 Int Loopback 0

Ip pim sparse-mode Ip pim sparse-mode
Int Loopback 0
Ip pim sparse-mode
Task 3
Have Loopback 0 to join the multicast group 224.12.3.53
R2
Int Loopback 0
Ip igmp join-group 224.12.3.53

Page 104 of 311
using PIM – Sparse Mode – Multiple RPs
R1 R2
Lo 0 F 0/0 F 0/0 3 Lo 0
192.1.12.0/24 F 0/1
192.1.23.0/24
F 0/1
192.1.34.0/24
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
R1

Loopback 0 1.1.1.1 255.0. 0.0
F 0/0 192.1.12.1 255.255.255.0
R2

F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
Loopback 0 2.2.2.2 255.0.0.0
R3

F 0/1 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0
Loopback 0 3.3.3.3 255.0.0.0

Page 105 of 311
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
Task 1
Configure EIGRP 100 on all routers and advertise all the directly connected
networks.
R1 R2

Network 192.1.12.0 Network 192.1.12.0
Network 192.1.23.0
R3 R4

Network 192.1.23.0 Network 192.1.34.0
Network 3.0.0.0
Task 2
Configure R1 to be the RP for Multicast groups 224.1.1.1 – 2, and R4 to be the
RP for the groups 224.4.4.1 – 2. These two RPs should use their Loopback 0
interface for this purpose.
R1 R2
! !
Ip pim rp-address 1.1.1.1 10 Ip pim rp-address 1.1.1.1 10
! !
Access-list 10 permit 224.1.1.1 Access-list 10 permit 224.1.1.1
! !
R3 R4

Page 106 of 311
! !
! !
! !
Task 3
Configure R1 Loopback 0 and R4 loopback to to join the following Multicast
groups:
R1 – 224.1.1.1, 224.1.1.2, 224.1.1.3

R4 – 224.4.4.1, 224.4.4.2, 224.4.4.3
R1 R4

Task 4
Configure PIM on the physical and loopback interfaces in such a way that all
routers have access to all the multicast groups, including the ones that are not
configured for RP’s.
R1 R2

Ip pim sparse-dense-mode Ip pim sparse-dense-mode
! !
Interface Loopback0 Interface F 0/1
R3 R4

! !
Interface F 0/1 Interface Loopback0

Page 107 of 311
using PIM – Sparse Mode – Auto RP
R1 R2
Lo 0 F 0/0 F 0/0 3 Lo 0
192.1.12.0/24 F 0/1
192.1.23.0/24
F 0/1
192.1.34.0/24
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
R1

Loopback 0 1.1.1.1 255.0. 0.0
F 0/0 192.1.12.1 255.255.255.0
R2

F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
Loopback 0 2.2.2.2 255.0.0.0
R3

F 0/1 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0
Loopback 0 3.3.3.3 255.0.0.0

Page 108 of 311
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
Task 1
networks.
R1 R2

Network 192.1.12.0 Network 192.1.12.0
Network 192.1.23.0
R3 R4

Network 192.1.23.0 Network 192.1.34.0
Network 3.0.0.0
Task 2
Configure IP Multicast Sparse Mode on all interface on all Routers. Configure
R2 Loopback0 to be the RP for multicast groups 224.3.3.1 and 224.3.3.2 only.
Ensure that is sends its RP-announcements every 10 seconds with a TTL of 5.
Do not configure any Static RP on any router. R1 should join the multicast
groups 224.3.3.1 and 224.3.3.2 on the F 0/0 interface. All multicast routers
should be able to ping all R3 multicast routes.
R2
Interface loopback 0
Ip pim sparse-mode
Ip pim autorp listener
!
access-list 1 permit 224.3.3.1
!
Page 109 of 311
Ip pim send-rp-announce loopback0 scope 5 group-list 1 interval 10
Ip pim send-rp-discovery scope 5
!
Interface F 0/1
Ip pim sparse-mode
!
Interface F 0/0
Ip pim sparse-mode
R1 R3
Ip pim autorp listener Ip pim autorp listener
! !
Interface loopback 0 Interface F 0/1
! !
Ip igmp join-group 224.3.3.1 !
Ip igmp join-group 224.3.3.2 Interface Loopback0
Ip pim sparse-mode
R4
Ip pim autorp listener
!
Ip pim sparse-mode
!
Interface F 0/0
Ip pim sparse-mode

Page 110 of 311
using PIM – Sparse Mode – BSR
R1 R2
Lo 0 F 0/0 F 0/0 3 Lo 0
192.1.12.0/24 F 0/1
192.1.23.0/24
F 0/1
192.1.34.0/24
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
R1

Loopback 0 1.1.1.1 255.0. 0.0
F 0/0 192.1.12.1 255.255.255.0
R2

F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
Loopback 0 2.2.2.2 255.0.0.0
R3

F 0/1 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0
Loopback 0 3.3.3.3 255.0.0.0

Page 111 of 311
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
Task 1
Configure EIGRP in AS 100 on all routers and advertise all the directly
connected networks.
R1 R2

Network 192.1.12.0 Network 192.1.12.0
Network 192.1.23.0
R3 R4

Network 192.1.23.0 Network 192.1.34.0
Network 3.0.0.0
Task 2
Configure IP Multicast Sparse Mode on all interfaces on all routers. Configure
R2 Loopback0 to be the RP for multicast groups 224.3.3.1 and 224.3.3.2 only
using BSR. Ensure that is sends its RP-announcements every 10 seconds.
R2
Ip pim sparse-mode
!
!
ip pim rp-candidate Loopback0 group-list 1 interval 10
!
Interface F 0/1
Ip pim sparse-mode
Page 112 of 311
!
Interface F 0/0
Ip pim sparse-mode
R1 R3
! !
! !
Interface Loopback 0 Interface F 0/0
!
Interface Loopback0
Ip pim sparse-mode
R4
!
Interface F 0/0
Ip pim sparse-mode
!
Ip pim sparse-mode
Task 3
Configure R3 as the BSR-Candidate router using Loopback 0 interface.
R3
!
ip pim bsr-candidate Loopback0
Task 4
R1 should join the multicast groups 224.3.3.1 and 224.3.3.2 on the Loopback
0 interface. All multicast routers should be able to ping all R3 multicast routes.
R1
!
Int loopback 0
Ip igmp join-group 224.3.31

Page 113 of 311
Lab 6 – Configuring MSDP
R1 R2
Lo 0 F 0/0 F 0/0 3 Lo 0
192.1.12.0/24 F 0/1
192.1.23.0/24
F 0/1
192.1.34.0/24
Lo 0 F 0/0 F 0/0 Lo 0
R4 R3
R1

Loopback 0 1.1.1.1 255.0. 0.0
F 0/0 192.1.12.1 255.255.255.0
R2

F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
Loopback 0 2.2.2.2 255.0.0.0
R3

F 0/1 192.1.23.3 255.255.255.0
F 0/0 192.1.34.3 255.255.255.0
Loopback 0 3.3.3.3 255.0.0.0
R4

Page 114 of 311
Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
Task 1
networks.
R1 R2

Network 192.1.12.0 Network 192.1.12.0
Network 192.1.23.0
R3 R4

Network 192.1.23.0 Network 192.1.34.0
Network 3.0.0.0
Task 2
Configure R1 & R2 to use R2 to be the RP. Configure R1 to join 224.55.55.55 &
224.66.66.66 on the Loopback 0 interface.
R1 R2
! !
Ip pim rp-address 2.2.2.2 Ip pim rp-address 2.2.2.2
!

Page 115 of 311
Task 3
Configure R3 & R4 to use R3 to be the. Configure R4 to join 224.55.55.55 &
224.66.66.66 on the Loopback 0 interface.
R3 R4
! !
Ip pim rp-address 3.3.3.3 Ip pim rp-address 3.3.3.3
!
Task 4
Configure PIM on the physical and loopback interfaces on all routers. If you
ping 224.55.55.55 or 224.66.66.66 from R1, you should only receive a reply
from R1.
R1 R2

! !
Interface Loopback0 Interface F 0/1
!
Ip pim sparse-mode
R3 R4

Ip pim sparse-dense-mode Ip pim sparse-mode
! !
Interface F 0/1 Interface Loopback0
!
Ip pim sparse-mode

Page 116 of 311
Task 5
Configure a MSDP peering between R2 & R3 based on the loopback interfaces.
R2
Ip msdp peer 3.3.3.3 connect-source Loopback 0

R3
Ip msdp peer 2.2.2.2 connect-source Loopback 0

Note: Ping 224.55.55.55 or 224.66.66.66 from R1 or R4. You should
receive replies from R1 & R4.

Page 117 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring MPLS Unicast Routing

Page 118 of 311
Netmetric
Solutions
Lab 1 – Configuring MPLS Unicast
Routing
R2 R3
F 0/1 F 0//0
192.1.23.0/24
F 0/0 F 0/1
192.1.12.0/24 192.1.34.0/24
SP Core
AS 12353
F 0/0
OSPF Area 0 F 0/0
R1 R4
S 0/0 S 0/1 S 0/0 S 0/1
192.1.15.0/24 192.1.16.0/24 192.1.47.0/24 192.1.48.0/24
S 0/0 S 0/0 S 0/0 S 0/0
R5 R6 R7 R8
C1-Site1 C2-Site1 C2-Site2 C1-Site2

Page 119 of 311
R1

Loopback 0 1.1.1.1 255.0.0.0
F 0/0 192.1.12.1 255.255.255.0
S 0/0 192.1.15.1 255.255.255.0
S 0/1 192.1.16.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
S 0/0 192.1.47.4 255.255.255.0
S 0/1 192.1.48.4 255.255.255.0
R5

Loopback 0 10.5.5.5 255.255.255.0
S 0/0 192.1.15.5 255.255.255.0

Page 120 of 311
R6

Loopback 0 10.6.6.6 255.255.255.0
S 0/0 192.1.16.6 255.255.255.0
R7

Loopback 0 10.7.7.7 255.255.255.0
S 0/0 192.1.47.7 255.255.255.0
R8

Loopback 0 10.8.8.8 255.255.255.0
S 0/0 192.1.48.8 255.255.255.0
Task 1
Configure OSPF between all the SP routers (R1, R2, R3, R4). Use x.x.x.x as the
router-id, where x is the Router number. Advertise all links in OSPF except for
the Serial Links on R1 & R4. Loopback 0’s should appear with a /8 mask in
the routing table.
R1 R2

Ip ospf network point-to-point Ip ospf network point-to-point
! !
Router ospf 1 Router ospf 1
Network 192.1.23.2 0.0.0.0 area 0
R3 R4

! !
Network 192.1.34.3 0.0.0.0 area 0
Page 121 of 311
Task 2
Configure BGP between R1 and R4 in AS 12353. Use the most reliable interface
to form the neighbour relationship between them.
R1 R4

Neighbor 4.4.4.4 update-source Loo0 Neighbor 1.1.1.1 update-source Loo0
Task 3
Configure MPLS on all the physical links in the SP Network. Use LDP to
distribute labels. The LDP neighbour relationships should be formed based on
the most reliable interface. The Labels should be assigned from the range X00 –
X99, where X is the router number.
R1 R2
Mpls ldp router-id Loopback0 Mpls ldp router-id Loopback0

Mpls label protocol LDP Mpls label protocol LDP
Mpls label range 100 199 Mpls label range 200 299
! !
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip
R3 R4

Mpls label range 300 399 Mpls label range 400 499
! !
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip

Page 122 of 311
Lab 2 – Authenticating LDP Peers
(Builds on Lab 1)
Task 1
All LDP neighbor relationships should be authenticated using a password of
ccie12353.
R1
Mpls ldp neighbor 2.2.2.2 password ccie12353

R2

R3

R4

Page 123 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring Intra-AS MPLS VPNs

Page 124 of 311
Netmetric
Solutions
Lab 1 – Configuring MPLS VPN with
Static Routes between PE-CE
(Builds on the previous section)
R2 R3
F 0/1 F 0//0
192.1.23.0/24
F 0/0 F 0/1
192.1.12.0/24 192.1.34.0/24
SP Core
AS 12353
F 0/0
OSPF Area 0 F 0/0
R1 R4
S 0/0 S 0/1 S 0/0 S 0/1
192.1.15.0/24 192.1.16.0/24 192.1.47.0/24 192.1.48.0/24
S 0/0 S 0/0 S 0/0 S 0/0
R5 R6 R7 R8
C1-Site1 C2-Site1 C2-Site2 C1-Site2
Note:
Save the Configs on all the routers. Don’t save the configs during the labs. At
the completion of this lab, reload the routers without saving. This will allow
you to do the next lab based on the same topology.

Page 125 of 311
Task 1
Configure a VPNv4 neighbor relationship between R1 and R4. Make sure to
send the extended community attribute.
R1
Router BGP 12353

!
Address-family vpnv4
Neighbor 4.4.4.4 activate
Neighbor 4.4.4.4 send-community extended
R4
Router BGP 12353

!
Task 2
Configure a VRF CUST-A with a RD value of 1:100 on R1 and R4. Use the same
extended community for your Route-target import and export. Assign this VRF
to the links that connect to C1 sites on R1 and R4.
R1 R4
ip vrf CUST-A ip vrf CUST-A

rd 1:100 rd 1:100
route-target both 1:100 route-target both 1:100
! !
Ip vrf forwarding CUST-A Ip vrf forwarding CUST-A
Ip address 192.1.15.1 255.255.255.0 Ip address 192.1.48.4 255.255.255.0
Task 3
Configure a static route on R1 in the CUST-A vrf to reach the 10.5.5.0 on R5.
Inject this route into BGP such that it should be reachable from CUST-A VRF
on R4. Configure a default Route on R5 towards R1.
R1
ip route vrf CUST-A 10.5.5.0 255.255.255.0 192.1.15.5

!
Router BGP 12353

Page 126 of 311
!
Address-family ipv4 vrf CUST-A
Redistribute static
R5
ip route 0.0.0.0 0.0.0.0 192.1.15.1
Task 4
Configure a static route on R4 in the CUST-A vrf to reach the 10.8.8.0 on R8.
Inject this route into BGP such that it should be reachable from CUST-A VRF
R4
ip route vrf CUST-A 10.8.8.0 255.255.255.0 192.1.48.8

!
Router BGP 12353
!
Redistribute static
R8
ip route 0.0.0.0 0.0.0.0 192.1.48.4
Task 5
Configure a VRF CUST-B with a RD value of 1:200 on R1 and R4. Use the same
R1 R4
ip vrf CUST-B ip vrf CUST-B

rd 1:200 rd 1:200
! !
Ip vrf forwarding CUST-B Ip vrf forwarding CUST-B
Task 6
Configure a static route on R1 in the CUST-B vrf to reach the 10.6.6.0 on R6.
Inject this route into BGP such that it should be reachable from CUST-B VRF

Page 127 of 311
R1
ip route vrf CUST-B 10.6.6.0 255.255.255.0 192.1.16.6

!
Router BGP 12353
!
Address-family ipv4 vrf CUST-B
Redistribute static
R6
ip route 0.0.0.0 0.0.0.0 192.1.16.1
Task 7
Configure a static route on R4 in the CUST-B vrf to reach the 10.7.7.0 on R7.
Inject this route into BGP such that it should be reachable from CUST-B VRF
R4
ip route vrf CUST-B 10.7.7.0 255.255.255.0 192.1.47.7

!
Router BGP 12353
!
Redistribute static
R7
ip route 0.0.0.0 0.0.0.0 192.1.47.4
NOTE:
Reload the Routers without saving the configs. This will setup the topology for
the next lab.

Page 128 of 311
RIPv2 as PE-CE Routing Protocol
(Builds on Lab 1)
Note:
Task 1
R1
Router BGP 12353

!
R4
Router BGP 12353

!
Task 2
R1 R4

rd 1:100 rd 1:100
! !
Interface S 0/0 Interface S0/1

Page 129 of 311
Task 3
Configure RIPv2 as the Routing Protocol between R5 and R1-vrf CUST-A.
Advertise all the routes on R5 in RIP. Advertise the VRF link in RIP on R1
under the appropriate address family. Make sure the VRF CUST-A on R4 has
reachability to routes learned from R5.
R1
Router RIP
!
Version 2
No auto-summary
Network 192.1.15.0
Redistribute BGP 12353 metric 1
!
Router BGP 12353
!
Redistribute rip
R5
Router RIP
Version 2
No auto-summary
Network 192.1.15.0
Network 10.0.0.0
Task 4
Configure RIPv2 as the Routing Protocol between R4 and R8-vrf CUST-A.
R4
Router RIP
!
Version 2
No auto-summary
Network 192.1.48.0
!

Page 130 of 311
Router BGP 12353
!
Redistribute rip
R8
Router RIP
Version 2
No auto-summary
Network 192.1.48.0
Network 10.0.0.0
Task 5
R1 R4

rd 1:200 rd 1:200
! !
Task 6
Configure RIPv2 as the Routing Protocol between R6 and R1-vrf CUST-B.
under the appropriate address family. Make sure the VRF CUST-B on R4 has
R1
Router RIP
!
Version 2
No auto-summary
Network 192.1.16.0
!
Router BGP 12353

Page 131 of 311
!
Redistribute rip
R6
Router RIP
Version 2
No auto-summary
Network 192.1.16.0
Network 10.0.0.0
Task 7
R4
Router RIP
!
Version 2
No auto-summary
Network 192.1.47.0
!
Router BGP 12353
!
Redistribute rip
R7
Router RIP
Version 2
No auto-summary
Network 192.1.47.0
Network 10.0.0.0
NOTE:
the next lab.

Page 132 of 311
EIGRP as PE-CE Routing Protocol
(Builds on Lab 2)
Note:
Task 1
send the extended
R1
Router BGP 12353

!
R4
Router BGP 12353

!
Task 2
R1 R4

rd 1:100 rd 1:100
! !

Page 133 of 311
Task 3
Configure EIGRP 100 as the Routing Protocol between R5 and R1-vrf CUST-A.
Advertise all the routes on R5 in EIGRP. Advertise the VRF link in RIP on R1
R1
Router EIGRP 12353

!
Autonomous-system 100
No auto-summary
Network 192.1.15.0
Redistribute BGP 12353 metric 1 1 1 1 1
!
Router BGP 12353
!
R5
Router EIGRP 100

No auto-summary
Network 192.1.15.0
Network 10.0.0.0
Task 4
Advertise all the routes on R8 in EIGRP. Advertise the VRF link in RIP on R4
R4
Router EIGRP 12353

!
No auto-summary
Network 192.1.48.0
!
Router BGP 12353

Page 134 of 311
!
R8
Router EIGRP 100

No auto-summary
Network 192.1.48.0
Network 10.0.0.0
Task 5
R1 R4

rd 1:200 rd 1:200
! !
Task 6
Configure EIGRP 200 as the Routing Protocol between R6 and R1-vrf CUST-B.
Advertise all the routes on R6 in EIGRP 200. Advertise the VRF link in EIGRP
on R1 under the appropriate address family. Make sure the VRF CUST-B on R4
has reachability to routes learned from R6.
R1
Router EIGRP 12353

!
No auto-summary
Network 192.1.16.0
!
Router BGP 12353
!

Page 135 of 311
R6
Router EIGRP 200

No auto-summary
Network 192.1.16.0
Network 10.0.0.0
Task 7
Advertise all the routes on R7 in RIP. Advertise the VRF link in EIGRP on R4
R4
Router EIGRP 12353

!
No auto-summary
Network 192.1.47.0
!
Router BGP 12353
!
R7
Router EIGRP 200

No auto-summary
Network 192.1.47.0
Network 10.0.0.0
NOTE:
the next lab.

Page 136 of 311
Lab 4 – Configuring MPLS VPN with BGP
as PE-CE Routing Protocol
(Builds on Lab 3)
Note:
Task 1
R1
Router BGP 12353

!
R4
Router BGP 12353

!
Task 2
R1 R4

rd 1:100 rd 1:100
! !

Page 137 of 311
Task 3
Cust-A is running BGP in AS 100. Advertise all the routes on R5 in BGP.
Configure R1-R5 neighbor relationship in the appropriate address family. Make
sure the VRF CUST-A on R4 has reachability to routes learned from R5.
R1
Router BGP 12353

!
Neighbor 192.1.15.5 as-override
Redistribute connected
R5
Router BGP 100

Network 10.5.5.0 mask 255.255.255.0
Task 4
Cust-A is running BGP in AS 100. Advertise all the routes on R8 in BGP.
R4
Router BGP 12353

!
R8
Router BGP 100

Network 10.8.8.0 mask 255.255.255.0
Task 5

Page 138 of 311
R1 R4

rd 1:200 rd 1:200
! !
Task 6
Cust-B is running BGP in AS 200. Advertise all the routes on R6 in BGP.
R1
Router BGP 12353

!
R6
Router BGP 200

Network 10.6.6.0 mask 255.255.255.0
Task 7
Cust-B is running BGP in AS 200. Advertise all the routes on R7 in BGP.
R4
Router BGP 12353

!

Page 139 of 311
R7
Router BGP 200

Network 10.7.7.0 mask 255.255.255.0
NOTE:
the next lab.

Page 140 of 311
Lab 5 – Configuring MPLS VPN with OSPF
as PE-CE Routing Protocol
(Builds on Lab 4)
Note:
Task 1
R1
Router BGP 12353

!
R4
Router BGP 12353

!
Task 2
R1 R4

rd 1:100 rd 1:100
! !

Page 141 of 311
Task 3
Configure OSPF using process ID of 2 on R1 as the Routing Protocol between
R5 and R1-vrf CUST-A. Advertise all the routes on R5 in OSPF. Advertise the
VRF link in OSPF on R1 under the appropriate address family. Make sure the
VRF CUST-A on R4 has reachability to routes learned from R5.
R1
Router ospf 2 vrf CUST-A

redistribute bgp 12353 subnets
network 192.1.15.0 0.0.0.255 area 0
!
Router BGP 12353
!
Redistribute ospf 2
R5
Router ospf 1
Network 192.1.15.0 0.0.0.255 area 0
Network 10.0.0.0 0.255.255.255 area 0
Task 4
R8 and R4-vrf CUST-A. Advertise all the routes on R8 in OSPF. Advertise the
VRF CUST-A on R1 has reachability to routes learned from R8.
R4

Network 192.1.48.0 0.0.0.255 area 0
Redistribute BGP 12353 subnets
!
Router BGP 12353
!
Redistribute ospf 8
R8
Router ospf 1
Network 192.1.48.0 0.0.0.255 area 0
Network 10.0.0.0 0.255.255.255 area 0

Page 142 of 311
Task 5
R1 R4

rd 1:200 rd 1:200
! !
Task 6
R6 and R1-vrf CUST-B. Advertise all the routes on R6 in OSPF. Advertise the
VRF CUST-B on R4 has reachability to routes learned from R6.
R1
Router ospf 3 vrf CUST-B

Network 192.1.16.0 0.0.0.255 area 0
!
Router BGP 12353
!
Redistribute ospf 3
R6
Router ospf 1
Network 192.1.16.0 0.0.0.255 area 0
Network 10.0.0.0 0.255.255.255 area 0
Task 7
R7 and R4-vrf CUST-B. Advertise all the routes on R7 in OSPF. Advertise the
VRF CUST-B on R1 has reachability to routes learned from R7.
R4

Page 143 of 311
Router ospf 3 vrf CUST-B
Network 192.1.47.0 0.0.0.255 area 0
!
Router BGP 12353
!
Redistribute ospf 3
R7
Router ospf 1
Network 192.1.47.0 0.0.0.255 area 0
Network 10.0.0.0 0.255.255.255 area 0
NOTE:
For the CUST-A VRF, the OSPF routes form the other site appears as O E2
(External) routes. This is due to the fact that PE Routers are using different
Process ID for the Address Family OSPF process.
For the CUST-B VRF, the OSPF routes form the other site appears as O IA
(Inter-Area) routes. This is due to the fact that PE Routers are using the same
process ID (3). The MPLS network is treated as the OSPF Super-Backbone.

Page 144 of 311
Lab 6 – Configuring Domain-ID for OSPF
PE-CE Routing
(Builds on Lab 5)
Task 1
Configure a Domain-id under OSPF for CUST-A VRF on R1 and R4 as 0.0.0.25
to ensure that OSPF routes are injected as O IA routes on the PE and
Customer Routers.
R1

Domain-id 0.0.0.25
R4

Domain-id 0.0.0.25
NOTE:
For the CUST-A VRF, the OSPF routes from the other site now appear as O IA
routes.

Page 145 of 311
Lab 7 – Configuring OSPF Sham Link
(Builds on Lab 6)
Task 1
Configure a Link between R6 and R7 as 192.1.67.0/24. Advertise this link in
OSPF. Use S 0/1 on both routers to connect.
R6 R4
Interface S0/1 Interface S 0/1

Encapsulation dot1q 67 Encapsulation dot1q 67
! !
Task 2
Configure a new loopback each on R1 and R4. This newly created loopback
should be part of vrf CUST-B. Advertise this loopback under BGP for the CUST-
B vrf. The Loopback information is as follows:
• R1 – Loopback 67 – 10.67.67.1/32
• R4 – Loopback 67 – 10.67.67.4/32
R1
Ip vrf forwarding CUST-B
Ip address 10.67.67.1 255.255.255.255
!
Router BGP 12353
!
Network 10.67.67.1 mask 255.255.255.255
R4
Ip address 10.67.67.4 255.255.255.255
!
Router BGP 12353
!

Page 146 of 311
Network 10.67.67.4 mask 255.255.255.255
Task 3
Traffic between C2-Site1 and C2-Site2 should be using the new link (Back
door). You would like the traffic to go thru the MPLS link instead. Configure a
Sham-Link between R1 and R4 based on the new Loopbacks created in the
previous step.
R1 R4
Router ospf 3 vrf CUST-B Router ospf 3 vrf CUST-B

area 0 sham-link 10.67.67.1 10.67.67.4 area 0 sham-link 10.67.67.4 10.67.67.1
R6 R7
Interface F 0/0.67 Interface F 0/0.67

Ip ospf cost 200 Ip ospf cost 200
NOTE:
the next lab.

Page 147 of 311
Lab 8 – Configuring MPLS VPN Extranets
(Builds on Lab 7)
Task 1
R1
Router BGP 12353

!
R4
Router BGP 12353

!
Task 2
Configure a VRF CUST-A with a RD value of 100:1 on R1. Use the same
to the links that connects to Cust A-Site1 on R1.
R1
ip vrf CUST-A
rd 100:1
route-target both 100:1
!
Interface S 0/0
Ip vrf forwarding CUST-A
Ip address 192.1.15.1 255.255.255.0
Task 3
Configure a VRF CUST-B with a RD value of 100:2 on R1. Use the same
to the links that connects to Cust B-Site1 on R1.

Page 148 of 311
R1
ip vrf CUST-B
rd 100:2
!
Interface S0/1
Ip address 192.1.16.1 255.255.255.0
Task 4
Configure a VRF CUST-C with a RD value of 100:3 on R4. Use the same
to the links that connects to Cust C-Site1 on R4.
R4
ip vrf CUST-C
rd 100:3
!
Interface S 0/0
Ip vrf forwarding CUST-C
Ip address 192.1.47.4 255.255.255.0
Task 5
Configure a VRF CUST-D with a RD value of 100:4 on R4. Use the same
to the links that connects to Cust D-Site1 on R4.
R4
ip vrf CUST-D
rd 100:4
!
Interface S 0/1
Ip vrf forwarding CUST-D
Ip address 192.1.48.4 255.255.255.0
Task 6
Configure EIGRP 100 as the PE-CE Routing Protocol between all CE’s and PE’s.
Advertise all the routes on CE’s in EIGRP. Advertise the VRF link in EIGRP on

Page 149 of 311
the PE Routers under the appropriate address family. Make sure the VRF
routes are injected into MP-BGP.
R1
Router EIGRP 12353

!
No auto-summary
Network 192.1.15.0
!
No auto-summary
Network 192.1.16.0
Router BGP 12353

!
!
R4
Router EIGRP 12353

!
Address-family ipv4 vrf CUST-C
No auto-summary
Network 192.1.47.0
!
Address-family ipv4 vrf CUST-D
No auto-summary
Network 192.1.48.0
Router BGP 12353

!

Page 150 of 311
Address-family ipv4 vrf CUST-C
!
Address-family ipv4 vrf CUST-D
R5
Router EIGRP 100

No auto-summary
Network 192.1.15.0
Network 10.0.0.0
R6
Router EIGRP 100

No auto-summary
Network 192.1.16.0
Network 10.0.0.0
R7
Router EIGRP 100

No auto-summary
Network 192.1.47.0
Network 10.0.0.0
R8
Router EIGRP 100

No auto-summary
Network 192.1.48.0
Network 10.0.0.0
Task 7
Configure an Extranet such that Cust D Site1 receives routes from all the other
Customer sites (Cust A, Cust B and Cust C). All sites should be able to connect
to CUST-D Site1.
R1
IP VRF CUST-A
Route-target import 100:4
!
IP VRF CUST-B
R4

Page 151 of 311
IP VRF CUST-C
!
IP VRF CUST-D

Page 152 of 311
Lab 9 – Configuring Export Maps
(Builds on Lab 8)
Task 1
Configure the following loopbacks on R5, R6 and R8 and advertise them into
EIGRP:
R5
➢ Loopback 11 – 192.168.51.5/24
➢ Loopback 12 – 192.168.52.5/24
➢ Loopback 13 – 192.168.53.5/24
➢ Loopback 14 – 192.168.54.5/24
R6
➢ Loopback 11 – 192.168.61.5/24
➢ Loopback 12 – 192.168.62.5/24
➢ Loopback 13 – 192.168.63.5/24
➢ Loopback 14 – 192.168.64.5/24
R7
➢ Loopback 11 – 192.168.71.5/24
➢ Loopback 12 – 192.168.72.5/24
➢ Loopback 13 – 192.168.73.5/24
➢ Loopback 14 – 192.168.74.5/24
R5 R6

! !
! !
! !
! !
Network 192.168.51.0 Network 192.168.61.0
Network 192.168.52.0 Network 192.168.62.0
Network 192.168.53.0 Network 192.168.63.0
Page 153 of 311
Network 192.168.54.0 Network 192.168.64.0
R7
Ip address 192.168.71.7 255.255.255.0
!
Ip address 192.168.72.7 255.255.255.0
!
Ip address 192.168.73.7 255.255.255.0
!
Ip address 192.168.74.7 255.255.255.0
!
Router EIGRP 100
Network 192.168.71.0
Network 192.168.72.0
Network 192.168.73.0
Network 192.168.74.0
Task 2
The newly created networks on Customer A and B should only be propagated
between Customer A, B and C. These networks should not be send to
Customer D. Use an Export-map with a Route-target of 100:123 on the PE
routers to accomplish this task.
R1

!
!
route-map CUST-A permit 10
match ip address 5
set extcommunity rt 100:123
!
route-map CUST-B permit 10

Page 154 of 311
match ip address 6
set extcommunity rt 100:123
!
ip vrf CUST-A
export map CUST-A
route-target import 100:123
!
ip vrf CUST-B
export map CUST-B
R4
ip vrf CUST-C
Task 3
The newly created networks on Customer C should be propagated between
Customer A, B and D. Use an Export-map with a Route-target of 1:123 on the
PE routers to accomplish this task. Use the additive keyword.
R4

!
route-map CUST-C permit 10
match ip address 7
set extcommunity rt 100:123 additive
!
ip vrf CUST-C
export map CUST-C

Page 155 of 311
Lab 10 – Configuring Import Maps
(Builds on Lab 9)
Task 1
Customer A is receiving all the 192.168.X.0 networks from Customer B and C
sites. Configure R1 such that CUST-A VRF only receives the routes from the
192.168.X.0 range that have an odd number in the third octet. Use an import
map to accomplish this task.
R1
Access-list 11 deny 192.168.0.0 0.0.254.255

!
route-map CUST-A-IM permit 10
match ip address 11
!
ip vrf CUST-A
import map CUST-A-IM
Task 2
Customer C is receiving all the 192.168.X.0 networks from Customer A and B
sites. Configure R4 such that CUST-C VRF only receives the routes from the
192.168.X.0 range that have an even number in the third octet. Use an import
map to accomplish this task.
R4
Access-list 12 deny 192.168.1.0 0.0.254.255

!
route-map CUST-C-IM permit 10
match ip address 12
!
ip vrf CUST-C
import map CUST-C-IM

Page 156 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring Inter-AS MPLS VPNs

Page 157 of 311
Netmetric
Solutions
Lab 1 – Configuring VRF Lite
R2
F 0/0 F 0/1
192.1.12.0/24 192.1.23.0/24
F 0/0 F 0/0
R1
SP Core R3
S 0/0 S 0/1 AS 12353 S 0/0 S 0/1
OSPF Area 0
192.1.14.0/24 192.1.114.0/24 192.1.35.0/24 192.1.135.0/24
S 0/0 S 0/1 S 0/0 S 0/1
C1-Site1 R4 C1-Site2 R5
F 0/0 F 0/1 F 0/0 F 0/1
192.1.59.0/24
192.1.46.0/24 192.1.47.0/24 192.1.58.0/24
F 0/0 F 0/0
F 0/0 F 0/0
R6 R7 R9
R8
SALES FINANCE SALES FINANCE

Page 158 of 311
R1

Loopback 0 1.1.1.1 255.0.0.0
F 0/0 192.1.12.1 255.255.255.0
S 0/0 192.1.14.1 255.255.255.0
S 0/1 192.1.114.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
F 0/0 192.1.23.3 255.255.255.0
S 0/0 192.1.35.3 255.255.255.0
S 0/1 192.1.135.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
S 0/0 192.1.14.4 255.255.255.0
S 0/1 192.1.114.4 255.255.255.0
F 0/0 192.1.46.4 255.255.255.0
F 0/1 192.1.47.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.0.0.0
S 0/0 192.1.35.5 255.255.255.0
S 0/1 192.1.135.5 255.255.255.0
F 0/0 192.1.58.5 255.255.255.0
F 0/1 192.1.59.5 255.255.255.0

Page 159 of 311
R6

Loopback 0 10.6.6.6 255.255.255.0
F 0/0 192.1.46.6 255.255.255.0
R7

Loopback 0 10.7.7.7 255.255.255.0
F 0/0 192.1.47.7 255.255.255.0
R8

Loopback 0 10.8.8.8 255.255.255.0
F 0/0 192.1.58.8 255.255.255.0
R9

Loopback 0 10.9.9.9 255.255.255.0
F 0/0 192.1.58.9 255.255.255.0
Task 1
Configure OSPF between all the SP routers (R1, R2, R3). OSPF process should
use Loopback0 on each router as the router-id. Advertise all internal SP links
in OSPF. Loopback 0’s should appear with a /8 mask in the routing table.
R1 R2

! !
Network 192.1.23.2 0.0.0.0 area 0
R3
!
Page 160 of 311
Router ospf 1
Router-id 3.3.3.3
Network 3.3.3.3 0.0.0.0 area 0
Network 192.1.23.3 0.0.0.0 area 0
Task 2
to form the neighbour relationship between them
R1 R3

Task 3
the most reliable interface.
R1 R2

! !
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip
R3
Mpls ldp router-id Loopback0

Mpls label protocol LDP
!
Interface F 0/0
Mpls ip
Task 4
Configure a VPNv4 neighbor relationship between R1 and R3. Set the next-hop-
self attribute on the IPv4 neighbor relationship.
R1 R3

Page 161 of 311
Neighbor 3.3.3.3 next-hop-self Neighbor 1.1.1.1 next-hop-self
! !
Address-family vpnv4 Address-family vpnv4
Neighbor 3.3.3.3 activate Neighbor 1.1.1.1 activate
Neighbor 3.3.3.3 send-community both Neighbor 1.1.1.1 send-community both
Task 5
Customer A has 2 Sites. Each site contains 2 Departments (Sales an Finance).
The customer wants to segregate the 2 departments by using 2 MPLS VPNs.
Configure the 2 links on the PE Routers towards the CE Routers as 2 separate
VPNs.
R1 R3
ip vrf CUST-A-SAL ip vrf CUST-A-SAL

rd 12353:1 rd 12353:1
! !
ip vrf CUST-A-FIN ip vrf CUST-A-FIN
rd 1:200 rd 1:200
! !
Ip vrf forwarding CUST-A-SAL Ip vrf forwarding CUST-A-SAL
! !
Ip vrf forwarding CUST-A-FIN Ip vrf forwarding CUST-A-FIN
Task 5
Configure CE Routers to connect the SALES Department Link to the SALES
VPN and the FINANCE department to the FINANCE VPN by using VRF on the
CE Routers. R6 and R8 are in the SALES Department. R7 and R9 are in the
FINANCE Department.
R4 R5
ip vrf CUST-A-SAL ip vrf CUST-A-SAL

rd 12353:1 rd 12353:1
! !
ip vrf CUST-A-FIN ip vrf CUST-A-FIN
rd 12353:2 rd 12353:2

Page 162 of 311
! !
! !
! !
! !
Task 6
Configure EIGRP in AS 100 as the routing protocol between the SALES
Routers. Run EIGRP in AS 100 under the VRF CUST-A-SALES on the PE
Routers. Perform Mutual redistribution between BGP and EIGRP under the
address-family to propagate the routes between the Customer Sites.
R1
Router EIGRP 12353

!
Address-family ipv4 vrf CUST-A-SAL
No auto-summary
Network 192.1.14.0
!
Router BGP 12353
!
R3
Router EIGRP 12353

!
No auto-summary

Page 163 of 311
Network 192.1.35.0
!
Router BGP 12353
!
R4
Router EIGRP 12353

!
No auto-summary
Network 192.1.14.0
Network 192.1.46.0
R5
Router EIGRP 12353

!
No auto-summary
Network 192.1.35.0
Network 192.1.58.0
R6
Router EIGRP 100

No auto-summary
Network 10.0.0.0
Network 192.1.46.0
R8
Router EIGRP 100

No auto-summary
Network 10.0.0.0
Network 192.1.58.0
Task 7
Configure EIGRP in AS 200 as the routing protocol between the FINANCE
Routers. Run EIGRP in AS 200 under the VRF CUST-A-FIN on the PE Routers.
Perform Mutual redistribution between BGP and EIGRP under the address-
family to propagate the routes between the Customer Sites.

Page 164 of 311
R1
Router EIGRP 12353

!
Address-family ipv4 vrf CUST-A-FIN
No auto-summary
Network 192.1.114.0
!
Router BGP 12353
!
R3
Router EIGRP 12353

!
No auto-summary
Network 192.1.135.0
!
Router BGP 12353
!
R4
Router EIGRP 12353

!
No auto-summary
Network 192.1.114.0
Network 192.1.47.0
R5
Router EIGRP 12353

!
No auto-summary

Page 165 of 311
Network 192.1.135.0
Network 192.1.59.0
R7
Router EIGRP 200

No auto-summary
Network 10.0.0.0
Network 192.1.47.0
R9
Router EIGRP 200

No auto-summary
Network 10.0.0.0
Network 192.1.59.0

Page 166 of 311
Lab 2 – Configuring Inter-AS MPLS VPN
Using Option 1 – VRF Between ASBRs
192.1.34.0/24
R5
R2 R3 R4
192.1.45.0/24
192.1.23.0/24
F 0/1 F 0/0 F 0/0 F 0/1
F 0/0 F 0/0
192.1.56.0/24
192.1.12.0/24
F 0/1
AS 456
F 0/0 AS 123
OSPF Area 0 R6
OSPF Area 0
R1 F 0/1
F 0/1
192.1.17.0/24 192.1.68.0/24
F 0/0
F 0/0
R8
R7
C1-Site2
C1-Site1

Page 167 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.17.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.255.255.255
F 0/0 192.1.45.5 255.255.255.0
F 0/1 192.1.56.5 255.255.255.0

Page 168 of 311
R6

Loopback 0 6.6.6.6 255.255.255.255
F 0/0 192.1.56.6 255.255.255.0
F 0/1 192.1.68.6 255.255.255.0
R7

Loopback 0 10.7.7.7 255.255.255.0
F 0/0 192.1.17.7 255.255.255.0
R8

Loopback 0 10.8.8.8 255.255.255.0
F 0/0 192.1.68.8 255.255.255.0
Task 1
Configure OSPF between all the SP routers in AS 123 (R1, R2, R3) and AS 456
(R1, R2, R3). Hard code the Router-ID’s. Advertise all links in OSPF except the
Links between CE-PE’s and the ASBR’s (R3-R4) in the respective AS’s.
R1 R2

Network 192.1.23.2 0.0.0.0 area 0
R3 R4

R5 R6

Network 192.1.56.5 0.0.0.0 area 0
Page 169 of 311
Task 2
Configure MPLS on all the physical links in the 2 SP AS Networks. Use LDP to
the most reliable interface. Do not enable MPLS between the 2 AS’s.
R1 R2

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip
R3 R4

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
R5 R6

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip
Note:
Save the Configs on all the routers. Don’t save the configs during the labs.
At the completion of this lab, reload the routers without saving. This will
allow you to do the next lab based on the same topology.

Page 170 of 311
Task 3
Configure BGP between R1 and R3 in AS 123. Configure BGP between R4 and
R6 in AS 456. Use the most reliable interface to form the neighbour
relationship between them.
R1 R3

R4 R6

Task 4
Configure a VPNv4 neighbor relationship between R1 and R3 in AS 123.
R1 R3

! !
R4 R6

! !
Task 5
Configure a VRF CUST-A with a RD value of 123:1 on R1. Configure a VRF
CUST-A with a RD value of 456:1 on R6. Use the RD values for your Import &
export Route-target. Assign this VRF to the links that connect to C1 sites on R1
and R6.
R1 R6

Page 171 of 311
rd 123:1 rd 456:1
route-target export 123:1 route-target export 456:1
route-target import 123:1 route-target import 456:1
! !
No shut No shut
Task 6
Advertise all the routes on R7 in EIGRP. Advertise the VRF link in EIGRP 100
on R1 under the appropriate address family. Inject the EIGRP routes into MP-
BGP.
R1
Router EIGRP 123

!
No auto-summary
Network 192.1.17.0
!
Router BGP 123
!
R7
Router EIGRP 100

No auto-summary
Network 192.1.17.0
Network 10.0.0.0
Task 7
Advertise all the routes on R8 in EIGRP. Advertise the VRF link in EIGRP on R6
under the appropriate address family. Inject the EIGRP routes into MP-BGP.
R6
Router EIGRP 456

!

Page 172 of 311
No auto-summary
Network 192.1.68.0
!
Router BGP 456
!
R8
Router EIGRP 100

No auto-summary
Network 192.1.68.0
Network 10.0.0.0
Task 8
Configure a VRF AS456 with a RD value of 123:1 on R3. Use the RD values for
your import & export Route-targets. Configure a VRF AS123 with a RD value of
456:1 on R4. Use the RD values for your import & export Route-targets. Assign
this VRF to the links that connects R3 & R4.
R3 R4
ip vrf AS456 ip vrf AS123

rd 123:1 rd 456:1
! !
Ip vrf forwarding AS200 Ip vrf forwarding AS100
Task 9
Configure EIGRP 100 as the Routing Protocol between R3-R4 inside the VRF.
Inject all the BGP learned routes in the VRF into EIGRP on both Routers. Inject
the EIGRP routes into MP-BGP.
R3
Router EIGRP 123

!
Address-family ipv4 vrf AS100

Page 173 of 311
No auto-summary
Network 192.1.34.0
Redistribute bgp 123 metric 1 1 1 1 1
!
Router BGP 123
!
R4
Router EIGRP 456

!
No auto-summary
Network 192.1.34.0
!
Router BGP 456
!
Task 10
You should see the routes from the Other Site in the CUST VRF’s on R1 and R6
respectively. Inject these routes towards the CE Routers.
R1
Router EIGRP 123

!
No auto-summary
Network 192.1.34.0
R6
Router EIGRP 456

!
No auto-summary
Network 192.1.34.0

Page 174 of 311

Page 175 of 311
Using Option 2A –
MP-eBGP on ASBR using Next-Hop-Self
(Builds on Lab 2)
NOTE:
the next lab.
Task 1
R1 R3

R4 R6

Task 2
R1 R3

! !
R4 R6

! !

Page 176 of 311
Task 3
CUST-A with a RD value of 456:1 on R6. Use the RD values for your export
Route-target. On R1, use 456:1 as the import route-target. On R6, use 123:1 as
the import route-target. Assign this VRF to the links that connect to C1 sites
on R1 and R6.
R1 R6

rd 123:1 rd 456:1
! !
No shut No shut
Task 4
BGP.
R1
Router EIGRP 123

!
No auto-summary
Network 192.1.17.0
!
Router BGP 123
!
R7
Router EIGRP 100

No auto-summary

Page 177 of 311
Network 192.1.17.0
Network 10.0.0.0
Task 5
R6
Router EIGRP 456

!
No auto-summary
Network 192.1.68.0
!
Router BGP 456
!
R8
Router EIGRP 100

No auto-summary
Network 192.1.68.0
Network 10.0.0.0
Task 6
Configure a MP-eBGP neighbor relationship between the ASBR’s (R3 and R4).
The ASBR’s should learn the routes from their internal PE routers and
propagate these routes to the ASBR in the other AS. Make sure that the ASBR’s
change the next-hop attribute to themselves when propagating the external
VPNv4 routes. Make sure the ASBR’s learn the routes from the internal ASBR’s
although they do not have a VRF that have route-targets defined.
R3
Router BGP 123

no bgp default route-target filter
neighbor 192.1.34.4 remote-as 456
!
neighbor 192.1.34.4 activate

Page 178 of 311
neighbor 192.1.34.4 send-community both
neighbor 1.1.1.1 next-hop-self
R4
Router BGP 456

!
neighbor 6.6.6.6 next-hop-self
Task 7
R1
Router EIGRP 123

!
R6
Router EIGRP 456

!

Page 179 of 311
Using Option 2B –
MP-eBGP on ASBR using Redistribute
Connected
NOTE:
the next lab.
Task 1
R1 R3

R4 R6

Task 2
R1 R3

! !
R4 R6

! !

Page 180 of 311
Task 3
on R1 and R6.
R1 R6

rd 123:1 rd 456:1
! !
No shut No shut
Task 4
BGP.
R1
Router EIGRP 123

!
No auto-summary
Network 192.1.17.0
!
Router BGP 123
!
R7
Router EIGRP 100

No auto-summary

Page 181 of 311
Network 192.1.17.0
Network 10.0.0.0
Task 5
R6
Router EIGRP 456

!
No auto-summary
Network 192.1.68.0
!
Router BGP 456
!
R8
Router EIGRP 100

No auto-summary
Network 192.1.68.0
Network 10.0.0.0
Task 6
Configure a MP-eBGP neighbor relationship between the ASBR’s (R3 and R4).
The ASBR’s should learn the routes from their internal PE routers and
propagate these routes to the ASBR in the other AS. ASBR’s should not change
the next-hop attribute on the route that it propagates towards it’s MP-iBGP
neighbors. Make sure the ASBR’s learn the routes from the internal ASBR’s
although they do not have a VRF that have route-targets defined.
R3
Router BGP 123

!

Page 182 of 311
!
Router ospf 1
Redistribute connected subnets
R4
Router BGP 456

!
!
Router ospf 1
Redistribute connected subnets
Task 7
R1
Router EIGRP 123

!
R6
Router EIGRP 456

!

Page 183 of 311
Using Option 3 –
MP-eBGP between PE Routers
NOTE:
the next lab.
Task 1
Configure BGP between R3 and R4 to connect AS 123 and 456.
R3 R4

Task 2
You will be configuring a MP-eBGP relationship between the PE Routers (R1
and R6). In order to establish the relationship, the loopback 0 networks of R1
and R6 have to be advertised to the other AS. Redistribute the Loopbacks into
BGP on the ASBR’s and then back from BGP into the IGP to accomplish this.
Limit the redistribution to the Loopback networks only. Also, have BGP send
labels for each eBGP route it sends to its neighbor.
R3

!
!
Route-map O-2-B permit 10
Match ip address 1
!
Route-map B-2-O permit 10
Match ip address 6
!
Router BGP 123
Neighbor 192.1.34.4 send-label
Redistribute ospf 1 route-map O-2-B match internal
!
Router ospf 1

Page 184 of 311
Redistribute bgp 123 route-map B-2-O subnets
R4

!
!
Match ip address 6
!
Match ip address 1
!
Router BGP 456
!
Router ospf 1
Task 3
Configure a MP-eBGP neighbor relationship between R1 and R6. Configure the
neighbor relationship based on Loopback 0 interface. This interface was
propagated to the other AS in the previous step.
R1 R6

Neighbor 6.6.6.6 update-source Lo 0 Neighbor 1.1.1.1 update-source Loo0
Neighbor 6.6.6.6 ebgp-multihop Neighbor 1.1.1.1 ebgp-multihop
! !
Task 4
on R1 and R6.
R1 R6

Page 185 of 311
rd 123:1 rd 456:1
! !
No shut No shut
Task 5
BGP.
R1
Router EIGRP 123

!
No auto-summary
Network 192.1.17.0
!
Router BGP 123
!
R7
Router EIGRP 100

No auto-summary
Network 192.1.17.0
Network 10.0.0.0
Task 6
R6

Page 186 of 311
Router EIGRP 456
!
No auto-summary
Network 192.1.68.0
!
Router BGP 456
!
R8
Router EIGRP 100

No auto-summary
Network 192.1.68.0
Network 10.0.0.0
Task 7
R1
Router EIGRP 123

!
R6
Router EIGRP 456

!

Page 187 of 311
Lab 6 - Configuring Inter-AS MPLS VPN
Using Option 3 –
MP-eBGP between RR Routers
NOTE:
the next lab.
Task 1
Configure BGP between R3 and R4 to connect AS 123 and 456.
R3 R4

Task 2
You will be configuring a MP-eBGP relationship between the RR Routers (R2
and R5). In order to establish the relationship, the loopback 0 networks of R2
and R5 have to be advertised to the other AS. In addition to the RR
relationship, you would like to separate the Data plane from the Control Plane
by keeping the next-hop address pointing towards the PE Routers (R1 and R6).
Redistribute the Loopbacks into BGP on the ASBR’s and then back from BGP
into the IGP to accomplish this. Limit the redistribution to the Loopback
networks only. Also, have BGP send labels for each eBGP route it sends to its
neighbor.
R3

!
!
Match ip address 12
!
Match ip address 56
!
Router BGP 123

Page 188 of 311
!
Router ospf 1
R4

!
!
Match ip address 56
!
Match ip address 12
!
Router BGP 456
!
Router ospf 1
Task 3
Configure a MP-BGP neighbor relationship between R1 and R2 in AS 123.
Configure the neighbor relationship based on Loopback 0 interface. Configure a
MP-BGP neighbor relationship between R5 and R6 in AS 456. Configure the
neighbor relationship based on Loopback 0 interface. Make sure the RR learns
the routes from the PE routers although they do not have a VRF that have
route-targets defined.
R1 R2

Neighbor 2.2.2.2 remote-as 123 no bgp default route-target filter
Neighbor 2.2.2.2 update-source Lo 0 Neighbor 1.1.1.1 remote-as 123
! Neighbor 1.1.1.1 update-source Lo 0
Address-family vpnv4 !
Neighbor 2.2.2.2 activate Address-family vpnv4
Neighbor 2.2.2.2 send-community both Neighbor 1.1.1.1 activate
Neighbor 1.1.1.1 send-community both

Page 189 of 311
R5 R6

no bgp default route-target filter Neighbor 5.5.5.5 remote-as 456
Neighbor 6.6.6.6 remote-as 456 Neighbor 5.5.5.5 update-source Lo 0
Neighbor 6.6.6.6 update-source Lo 0 !
! Address-family vpnv4
Address-family vpnv4 Neighbor 5.5.5.5 activate
Neighbor 6.6.6.6 activate Neighbor 5.5.5.5 send-community both
Task 3
Configure a MP-eBGP neighbor relationship between the RR’s, R2 and R5.
Configure the neighbor relationship based on Loopback 0 interface. This
interface was propagated to the other AS in the previous step. RR should leave
the next-hop of the routes pointing towards the PE Routers to segregate the
Control plane from the Date plane.
R2 R5

Neighbor 5.5.5.5 update-source Lo 0 Neighbor 2.2.2.2 update-source Lo 0
! !
Neighbor 5.5.5.5 next-hop-unchanged Neighbor 2.2.2.2 next-hop-unchanged
Task 4
on R1 and R6.
R1 R6

rd 123:1 rd 456:1
! !

Page 190 of 311
No shut No shut
Task 5
BGP.
R1
Router EIGRP 123

!
No auto-summary
Network 192.1.17.0
!
Router BGP 123
!
R7
Router EIGRP 100

No auto-summary
Network 192.1.17.0
Network 10.0.0.0
Task 6
R6
Router EIGRP 456

!
No auto-summary
Network 192.1.68.0

Page 191 of 311
!
Router BGP 456
!
R8
Router EIGRP 100

No auto-summary
Network 192.1.68.0
Network 10.0.0.0
Task 7
R1
Router EIGRP 123

!
R6
Router EIGRP 456

!

Page 192 of 311
Lab 7 - Configuring Inter-AS MPLS VPN
Using Option 4 –
Non-VPN Transit Provider
AS 12 AS 56
OSPF Area 0 OSPF Area 0
R3 R4
192.1.23.0/24 192.1.45.0/24
F 0/1 F 0/0 F 0/1 F 0/0
R5
R2 F 0/0 192.1.34.0/24 F 0/1
192.1.56.0/24
192.1.12.0/24 AS 34
F 0/0
Non-VPN
F 0/0 Transit AS R6
R1 F 0/1
F 0/1
192.1.17.0/24 192.1.68.0/24
F 0/0
F 0/0
R8
R7
C1-Site2
C1-Site1

Page 193 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.17.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.255.255.255
F 0/0 192.1.45.5 255.255.255.0
F 0/1 192.1.56.5 255.255.255.0

Page 194 of 311
R6

Loopback 0 6.6.6.6 255.255.255.255
F 0/0 192.1.56.6 255.255.255.0
F 0/1 192.1.68.6 255.255.255.0
R7

Loopback 0 10.7.7.7 255.255.255.0
F 0/0 192.1.17.7 255.255.255.0
R8

Loopback 0 10.8.8.8 255.255.255.0
F 0/0 192.1.68.8 255.255.255.0
Task 1
Configure OSPF as the IGP within the AS’s.. Hard code the Router-ID’s.
Advertise all links within the AS in OSPF. Do not advertise the Inter-AS links in
OSPF.
R1 R2

R3 R4

R5 R6


Page 195 of 311
Task 2
Configure MPLS on all the physical links in the 3 SP AS Networks. Use LDP to
the most reliable interface. Do not enable MPLS between the AS’s.
R1 R2

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
R3 R4

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
R5 R6

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
Task 3
Configure eBGP between the 3 AS’s. Connect AS 12 to AS 34 via the R2-R3
link. Connect AS 34 to AS 56 via the R4-R5 link. Also, configure a iBGP
neighbor relationship between R3 and R4 in AS 34. Configure the iBGP
neighbor relationship based on the Loopback 0 interfaces. Change the next-hop
to self
R2 R3


Page 196 of 311
Neighbor 4.4.4.4 update-source loop0
R4 R5

Neighbor 3.3.3.3 update-source Loo0
Task 4
You will be configuring a MP-eBGP relationship between PE Routers, R1 and
R6. In order to establish the relationship, the loopback 0 networks of R1 and
R6 need to be reachable to each other. Accomplish this by advertising the
Loopbacks to the eBGP peers. These routes should have an end-to-end LSP.
R2

!
Match ip address 1
!
Match ip address 6
!
Router BGP 12
Redistribute ospf 1 route-map O-2-B
!
Router ospf 1
R3
Router BGP 34
R4
Router BGP 34

Page 197 of 311
R5

!
Match ip address 1
!
Match ip address 6
!
Router BGP 56
Redistribute OSPF 1 route-map O-2-B
!
Router ospf 1
Task 5
Configure a MP-BGP neighbor relationship between R1 and R6. Configure the
neighbor relationship based on Loopback 0 interface.
R1 R6

Neighbor 6.6.6.6 update-source Lo 0 Neighbor 1.1.1.1 update-source Lo 0
! !
Task 6
on R1 and R6.
R1 R6

rd 123:1 rd 456:1

Page 198 of 311
! !
No shut No shut
Task 7
BGP.
R1
Router EIGRP 12
!
No auto-summary
Network 192.1.17.0
!
Router BGP 12
!
R7
Router EIGRP 17
No auto-summary
Network 192.1.17.0
Network 10.0.0.0
Task 8
R6
Router EIGRP 56
!

Page 199 of 311
No auto-summary
Network 192.1.68.0
!
Router BGP 56
!
R8
Router EIGRP 68
No auto-summary
Network 192.1.68.0
Network 10.0.0.0
Task 9
R1
Router EIGRP 12
!
R6
Router EIGRP 56
!

Page 200 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Carrier Supporting Carrier (CSC)

Page 201 of 311
Netmetric
Solutions
Lab 1 – Configuring Carrier Supporting
Carriers (CSC) –
Customer Carrier IP Only
AS 1256 AS 1256
Customer Customer
Carrier R3 R4 Carrier
192.1.23.0/24 192.1.45.0/24
F 0/1 F 0/0 F 0/1 F 0/0
R5
R2 F 0/0 F 0/1
192.1.34.0/24
192.1.56.0/24
192.1.12.0/24 AS 34
F 0/0
Backbone
F 0/0
Carrier R6
R1 F 0/1
F 0/1
192.1.17.0/24 192.1.68.0/24
F 0/0
F 0/0
CUST-A CUST-A R8
R7 AS 65001 AS 65002

Page 202 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.17.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.255.255.255
F 0/0 192.1.45.5 255.255.255.0
F 0/1 192.1.56.5 255.255.255.0

Page 203 of 311
R6

Loopback 0 6.6.6.6 255.255.255.255
F 0/0 192.1.56.6 255.255.255.0
F 0/1 192.1.68.6 255.255.255.0
R7

Loopback 0 10.7.7.7 255.255.255.0
F 0/0 192.1.17.7 255.255.255.0
R8

Loopback 0 10.8.8.8 255.255.255.0
F 0/0 192.1.68.8 255.255.255.0
Task 1
OSPF.
R1 R2

R3 R4

R5 R6

Task 2
Page 204 of 311
Configure MPLS on all the physical links in the Backbone AS, including the
links R2-R3 and R4-R5 link.
R2
Mpls ip
!
Interface F 0/1
Mpls ip
mpls ldp discovery transport-address interface
R3

!
Mpls ip
!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R4

!
Mpls ip
!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R5
Mpls ip
!
Interface F 0/1
Mpls ip
Task 3

Page 205 of 311
Configure iBGP between the BGP routers within the Backbone and the
Customer Carrier AS. Configure the neighbour relationship based on the
loopback interface. Configure it to change the next-hop parameter to self when
sending a route to its iBGP neighbour.
R1 R2

R3 R4

R5 R6

Task 4
neighbor relationship based on Loopback 0 interface. This will carry routes for
the Customer Carrier inside an MPLS VPN.
R3 R6

! !
Task 5
Configure a VRF CSC-A with a RD value of 34:1 on R3 and R4. Use the same
to the links that connect to the Backbone Carrier to the Customer Carrier on
the appropriate routers.
R3 R4

Page 206 of 311
ip vrf CSC-A ip vrf CSC-A
rd 34:1 rd 34:1
! !
Ip vrf forwarding CSC-A Ip vrf forwarding CSC-A
Task 6
Configure eBGP between the Customer Carrier CE Routers (R1,R6) and
Customer Routers (R7,R8). Advertise the Local Loopback network into BGP on
the Customer Routers.
R1
Router BGP 1256

R6
Router BGP 1256

R7
Router BGP 65001

Network 10.7.7.0 mask 255.255.255.0
R8
Router BGP 65002

Network 10.8.8.0 mask 255.255.255.0
Task 7
Configure OSPF as the PE-CE routing protocol between Backbone PE’s and
Customer Carrier PE’s. Run OSPF under the address family for the VRF CSC-A
on the Backbone PE’s. Configure the Backbone PE’s to propagate the Customer
Carrier Routers to each other thru MPLS VPN.
R2
Router ospf 1
Network 192.1.23.0 0.0.0.255 area 0
R3

Page 207 of 311
Router ospf 2 vrf CSC-A
Network 192.1.23.0 0.0.0.255 area 0
!
Router bgp 34
!
Address-family ipv4 vrf CSC-A
Redistribute ospf 2
R4

Network 192.1.45.4 0.0.0.0 area 0
!
Router bgp 34
!
Redistribute ospf 2
R5
Router ospf 1
Network 192.1.45.5 0.0.0.0 area 0
Task 8
Configure an iBGP neighbor relationship between R2 and R5 using the
Backbone Carrier to connect.
R2
Router BGP 1256

R5
Router BGP 1256


Page 208 of 311
Carriers (CSC) –
Customer Carrier Running MPLS
AS 1256 AS 1256
Customer Customer
192.1.23.0/24 192.1.45.0/24
F 0/1 F 0/0 F 0/1 F 0/0
R5
R2 F 0/0 F 0/1
192.1.34.0/24
192.1.56.0/24
192.1.12.0/24 AS 34
F 0/0
Backbone
F 0/0
Carrier R6
R1 F 0/1
F 0/1
192.1.17.0/24 192.1.68.0/24
F 0/0
F 0/0
CUST-A CUST-A R8
R7 AS 65001 AS 65002

Page 209 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.17.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.255.255.255
F 0/0 192.1.45.5 255.255.255.0
F 0/1 192.1.56.5 255.255.255.0

Page 210 of 311
R6

Loopback 0 6.6.6.6 255.255.255.255
F 0/0 192.1.56.6 255.255.255.0
F 0/1 192.1.68.6 255.255.255.0
R7

Loopback 0 10.7.7.7 255.255.255.0
F 0/0 192.1.17.7 255.255.255.0
R8

Loopback 0 10.8.8.8 255.255.255.0
F 0/0 192.1.68.8 255.255.255.0
Task 1
OSPF.
R1 R2

R3 R4

R5 R6

Task 2
Page 211 of 311
Configure MPLS on all the physical links in the Backbone and Customer
Carrier AS, including the links R2-R3 and R4-R5 link.
R1

!
Mpls ip
!
Interface F 0/0
Mpls ip
R2

!
Mpls ip
!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R3

!
Mpls ip
!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R4

!
Mpls ip

Page 212 of 311
!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R5

!
Mpls ip
!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R6

!
Mpls ip
!
Interface F 0/0
Mpls ip
Task 3
Configure iBGP between the BGP routers within the Backbone AS. Configure
the neighbour relationship based on the loopback interface.
R3 R4

Task 4

Page 213 of 311
R3 R6

! !
Task 5
R3 R4

rd 34:1 rd 34:1
! !
Task 6
Configure eBGP between the Customer Carrier CE Routers (R1,R6) and
Customer Routers (R7,R8). Advertise the Local Loopback network into BGP on
the Customer Routers.
R1
Router BGP 1256

R6
Router BGP 1256

R7
Router BGP 65001

Network 10.7.7.0 mask 255.255.255.0
R8
Page 214 of 311
Router BGP 65002
Network 10.8.8.0 mask 255.255.255.0
Task 7
R2
Router ospf 1
Network 192.1.23.2 0.0.0.0 area 0
R3

Network 192.1.23.3 0.0.0.0 area 0
!
Router bgp 34
!
Redistribute ospf 2
R4

Network 192.1.45.4 0.0.0.0 area 0
!
Router bgp 34
!
Redistribute ospf 2
R5
Router ospf 1
Network 192.1.45.5 0.0.0.0 area 0
Task 8
Configure an iBGP neighbor relationship between R1 and R6 using the
Backbone Carrier to connect. Use Loopback 0 to establish this relationship.
Change the next-hop address to self.

Page 215 of 311
R1
Router BGP 1256

Neighbor 6.6.6.6 update-sour loo0
R6
Router BGP 1256


Page 216 of 311
Carriers (CSC) –
Customer Carrier Running MPLS VPN
AS 1256 AS 1256
Customer Customer
192.1.23.0/24 192.1.45.0/24
F 0/1 F 0/0 F 0/1 F 0/0
R5
R2 F 0/0 F 0/1
192.1.34.0/24
192.1.56.0/24
192.1.12.0/24 AS 34
F 0/0
Backbone
F 0/0
Carrier R6
R1 F 0/1
F 0/1
192.1.17.0/24 192.1.68.0/24
F 0/0
F 0/0
CUST-A CUST-A R8
R7 EIGRP 100 EIGRP 100

Page 217 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.17.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.45.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.255.255.255
F 0/0 192.1.45.5 255.255.255.0
F 0/1 192.1.56.5 255.255.255.0

Page 218 of 311
R6

Loopback 0 6.6.6.6 255.255.255.255
F 0/0 192.1.56.6 255.255.255.0
F 0/1 192.1.68.6 255.255.255.0
R7

Loopback 0 10.7.7.7 255.255.255.0
F 0/0 192.1.17.7 255.255.255.0
R8

Loopback 0 10.8.8.8 255.255.255.0
F 0/0 192.1.68.8 255.255.255.0
Task 1
OSPF.
R1 R2

R3 R4

R5 R6

Task 2
Page 219 of 311
Configure MPLS on all the physical links in the Backbone and Customer
Carrier AS, including the links R2-R3 and R4-R5 link.
R1

!
Interface F 0/0
Mpls ip
R2

!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R3

!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R4

!
Interface F 0/0
Mpls ip
!
Interface F 0/1
Mpls ip
R5

!
Interface F 0/0

Page 220 of 311
Mpls ip
!
Interface F 0/1
Mpls ip
R6

!
Interface F 0/0
Mpls ip
Task 3
Configure iBGP between the BGP routers within the Backbone AS. Configure
the neighbour relationship based on the loopback interface.
R3 R4

Task 4
R3 R6

! !
Task 5
R3 R4

Page 221 of 311
rd 34:1 rd 34:1
! !
Task 6
Configure a VRF for the Customers on the Customer Carrier PE routers.
Configure the VRF as CUST-A with a RD value of 1:100 on R1 and R6. Use the
same extended community for your Route-target import and export. Assign this
VRF to the links that connect Customer Carrier PE’s to the CE routers. Run
EIGRP in AS 100 as the PE-CE routing protocol. Advertise the Loopback
interfaces on the CE routers in EIGRP 100.
R1
ip vrf CUST-A
rd 1:100
!
Interface F 0/1
Ip address 192.1.17.1 255.255.255.0
!
Router EIGRP 1256
!
No auto-summary
Network 192.1.17.0
R6
Ip vrf CUST-A
rd 1:100
!
Interface F 0/1
Ip address 192.1.68.6 255.255.255.0
!
Router EIGRP 1256
!

Page 222 of 311
No auto-summary
Network 192.1.68.0
R7
Router EIGRP 100

No auto-summary
Network 10.0.0.0
Network 192.1.17.0
R8
Router EIGRP 100

No auto-summary
Network 10.0.0.0
Network 192.1.68.0
Task 7
R2
Router ospf 1
Network 192.1.23.2 0.0.0.0 area 0
R3

Network 192.1.23.3 0.0.0.0 area 0
!
Router bgp 34
!
Redistribute ospf 2
R4

Network 192.1.45.4 0.0.0.0 area 0
!
Router bgp 34
!

Page 223 of 311
Redistribute ospf 2
R5
Router ospf 1
Network 192.1.45.5 0.0.0.0 area 0
Task 8
Configure an MP-BGP neighbor relationship between R1 and R6 using the
Backbone Carrier to connect. Use Loopback 0 to establish this relationship.
R1
Router BGP 1256

!
R6
Router BGP 1256

!
Task 9
Configure Customer Carrier PE routers such that they propagated the
Customer routes to each other by perform mutual redistribution.
R1
Router BGP 1256

!
!
Router EIGRP 1256

Page 224 of 311
!
R6
Router BGP 1256

!
!
Router EIGRP 1256
!

Page 225 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring IPv6 over MPLS VPN

Page 226 of 311
Netmetric
Solutions
Lab 1 – Configuring the Core Network
based on MPLS Unicast Routing
R2 R3
F 0/1 F 0//0
192.1.23.0/24
F 0/0 F 0/1
192.1.12.0/24 192.1.34.0/24
SP Core
AS 12353
F 0/0
OSPF Area 0 F 0/0
R1 R4
F 0/1 F 0/1
2000:192:1:15::/64 2000:192:1:46::/64
F0/0 F 0/0
R5 R6
CUST-A CUST-A

Page 227 of 311
R1

Loopback 0 1.1.1.1 255.0.0.0
F 0/0 192.1.12.1 255.255.255.0
F 0/1 2000:192:1:15::1 /64
R2

Loopback 0 2.2.2.2 255.0.0.0
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.0.0.0
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.0.0.0
F 0/0 192.1.34.4 255.255.255.0
F 0/1 2000:192:1:46::4 /64
R5

Loopback 0 FC00:10:5:5::5 /64
F 0/0 2000:192:1:15::5 /64

Page 228 of 311
R6

Loopback 0 FC00:10:6:6::6 /64
F 0/0 2000:192:1:46::6 /64
Task 1
the Serial Links on R1 & R4. Loopback 0’s should appear with a /8 mask in
the routing table.
R1 R2

! !
Network 192.1.23.2 0.0.0.0 area 0
R3 R4

! !
Network 192.1.34.3 0.0.0.0 area 0
Task 2
to form the neighbour relationship between them.
R1 R4

Task 3
Page 229 of 311
R1 R2

! !
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip
R3 R4

! !
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip

Page 230 of 311
Lab 2 – Configuring an IPv6 Over MPLS
VPN
(Builds on Lab 1)
Task 1
R1
Ipv6 unicast-routing
!
Router BGP 12353
!
R4
Ipv6 unicast-routing
!
Router BGP 12353
!
Task 2
Configure a VRF CUST-A with a RD value of 12353:1 on R1 and R4 for IPv6.
Use the same extended community for your Route-target import and export.
Assign this VRF to the links that connect to CUST-A sites on R1 and R4.
R1 R4
vrf definition CUST-A vrf definition CUST-A

rd 12353:1 rd 12353:1
! !
address-family ipv6 address-family ipv6
! !
Page 231 of 311
vrf forwarding CUST-A vrf forwarding CUST-A
ipv6 address 2000:192:1:15::1/64 ipv6 address 2000:192:1:46::4/64
no shut no shut
Task 3
CUST-A is running BGP in AS 65001. Advertise all the routes on R5 in BGP.
R1
Router BGP 12353

!
Neighbor 2000:192:1:15::5 as-override
R5
ipv6 unicast-routing
!
router bgp 65001
!
bgp router-id 5.5.5.5
!
address-family ipv6
neighbor 2000:192:1:15::1 remote-as 100
network fc00:10:5:5::/64
Task 4
CUCT-A is running BGP in AS 65001. Advertise all the routes on R6 in BGP.
R4
Router BGP 12353

!
Neighbor 2000:192:1:46::6 as-override
R6

Page 232 of 311
ipv6 unicast-routing
!
router bgp 65001
!
address-family ipv6
neighbor 2000:192:1:46::4 remote-as 100
network fc00:10:6:6::/64

Page 233 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring Layer 2 MPLS VPNs

Page 234 of 311
Netmetric
Solutions
Lab 1 – Implementing AToM – Ethernet
VLAN over MPLS
C1-Site1 C1-Site2
R4 R5
R2
F 0/0.35
F 0/0.14
F 0/0.12 (.2) F 0/0.23 (.2)
192.1.12.0/24 VLAN 12
192.1.23.0/24 VLAN 23
F 0/0.12 (.1) F 0/0.35
F 0/0.23 (.3)
F 0/0.14
R1
R3
S 0/0
S 0/0
AS 123
OSPF Area 0
S 0/0 S 0/0
R6
R7
C2-Site2
C2-Site1

Page 235 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0.12 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0.12 192.1.12.2 255.255.255.0
F 0/0.23 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0.23 192.1.23.3 255.255.255.0
Task 1
Configure OSPF between all the SP routers in AS 123 (R1, R2, R3. Hard code
the Router-ID’s. Advertise all links in OSPF except the Links between CE-PE’s.
R1 R2

Network 192.1.23.2 0.0.0.0 area 0
R3
Router ospf 1
Router-id 3.3.3.3
Network 3.3.3.3 0.0.0.0 area 0
Network 192.1.23.3 0.0.0.0 area 0
Task 2
Configure MPLS on all the physical links in the SP AS Network. Use LDP to

Page 236 of 311
R1 R2

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
!
Interface F 0/0.23
Mpls ip
R3

!
Mpls ip
!
Interface F 0/0.23
Mpls ip
Task 3
You need to connect R4 to R5 using Ethernet over MPLS. Configure R4 and R5
to be part of VLAN 45. Configure them with an IP address of 10.45.45.X/24,
where X is the 4 for R4 and 5 R5.
R4 R5

No shut No shut
! !
Encapsulation dot1q 45 Encapsulation dot1q 45
Task 4
Configure the PE Routers R1 and R3 to connect C1-Site1 and C1-Site2 to each
other. Use 145 as the PVC.
R1
Interface F 0/0.14
encapsulation dot1Q 45

Page 237 of 311
xconnect 3.3.3.3 145 encapsulation mpls
R3
Interface F 0/0.35
encapsulation dot1Q 45

Page 238 of 311
Lab 2 – Implementing AToM – HDLC over
MPLS
(Builds on Lab 1)
Task 1
You need to connect R6 to R7 using HDLC over MPLS. Configure R6 and R7
with an IP address of 10.67.67.X/24 on the S 0/0 interface, where X is the 6
for R6 and 7 R7.
R6 R7

No shut No shut
Task 2
R1
Interface S 0/0
Clock rate 128000
no shut
R3
Interface S 0/0
Clock rate 128000
no shut

Page 239 of 311
Lab 3 – Implementing AToM – PPP over
MPLS
(Builds on Lab 2)
Task 1
Reset the Serial 0/0 interface on the PE routers R1 and R3.
R1 R3
Default interface S 0/0 Default interface S 0/0
Task 2
You need to connect R6 to R7 using PPP instead of HDLC over MPLS. Change
the encapsulation on R6 and R7 to ppp.
R6 R7

Encap ppp Encap ppp
Task 3
R1
Interface S 0/0
Encap ppp
Clock rate 128000
no shut
R3
Interface S 0/0
Encap ppp
Clock rate 128000
no shut

Page 240 of 311
Lab 4 – Implementing AToM – Frame
Relay over MPLS
(Builds on Lab 3)
Task 1
Reset the Serial 0/0 interface on the PE routers R1 and R3. Also, reset the
Serial interfaces on the CE Rotuers, R6 and R7.
R1 R3

R6 R7
Task 2
You need to connect R6 to R7 using Frame-relay. You need to connect R6 to R7
using Frame-relay over MPLS. Configure R6 and R7 with an IP address of
10.67.67.X/24 on the S 0/0 interface, where X is the 6 for R6 and 7 R7.
Configure a Frame-relay map to connect R6 to R7. Use a PVC of 167 on both
routers.
R6 R7

Encap frame-relay Encap frame-relay
Frame-relay map ip 10.67.67.7 167 Frame-relay map ip 10.67.67.6 167
No shut No shut
Task 3
R1
Frame-relay switching
!
Interface S 0/0
Encap frame-relay
Clock rate 128000
Frame-relay intf-type dce
no shut

Page 241 of 311
!
connect FR67 Serial0/0 167 l2transport
R3
!
Interface S 0/0
Encap frame-relay
Clock rate 128000
Frame-relay intf-type dce
no shut
!

Page 242 of 311
Lab 5 – Implementing AToM – Frame-
Relay-Ethernet VLAN over MPLS
C1-Site1
R4
R2
F 0/0.14
F 0/0.12 (.2) F 0/0.23 (.2)
192.1.12.0/24 VLAN 12
192.1.23.0/24 VLAN 23
F 0/0.12 (.1)
F 0/0.23 (.3)
F 0/0.14
R1
R3
S 0/0
S 0/0
AS 123
OSPF Area 0
S 0/0
R7
C1-Site2

Page 243 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0.12 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0.12 192.1.12.2 255.255.255.0
F 0/0.23 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0.23 192.1.23.3 255.255.255.0
Task 1
R1 R2

Network 192.1.23.2 0.0.0.0 area 0
R3
Router ospf 1
Router-id 3.3.3.3
Network 3.3.3.3 0.0.0.0 area 0
Network 192.1.23.3 0.0.0.0 area 0
Task 2

Page 244 of 311
R1 R2

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
!
Interface F 0/0.23
Mpls ip
R3

!
Mpls ip
!
Interface F 0/0.23
Mpls ip
Task 3
You need to connect R4 to R7 using a combination of Frame-Relay and
Ethernet over MPLS. You will be configuring R4 using Frame-relay and R7
using Ethernet. Configure the pseudowire-class using a encapsulation of MPLS
for internetwork IP on R4 and R7.
R1 R3
pseudowire-class VLAN-FR pseudowire-class FR-VLAN

encapsulation mpls encapsulation mpls
interworking ip interworking ip
Task 4
Configure the R1 using Ethernet to connect R4 to R7 using the pseudowire-
class created in the previous task. Also, configure R3 using Frame-relay to
connect R4 to R7 using the pseudowire-class created in the previous task. Use
147 for the Frame-relay PVC and the MPLS PVC.
R1
interface F0/0.14
encap dot1q 14

Page 245 of 311
xconnect 3.3.3.3 147 pw-class VLAN-FR
no shut
R3
frame-relay switching
!
interface Serial0/0
no ip address
encapsulation frame-relay
clock rate 128000
frame-relay intf-type dce
no shut
!
xconnect 1.1.1.1 147 pw-class FR-VLAN
Task 5
Configure R4 F0/0.14 to be part of VLAN 14. Configure it with an IP address of
10.47.47.4/24. Configure R7 with an IP address of 10.47.47.7/24 on the S 0/0
interface. Use a PVC of 147.
R4 R7

No shut Ip address 10.47.47.7 255.255.255.0
! Encap frame-relay
Interface F 0/0.14 Frame-relay map ip 10.47.47.4 147 broad
Encapsulation dot1q 14 No shut
Ip address 10.47.47.4 255.255.255.0

Page 246 of 311
Lab 6 – Implementing AToM – Frame-
Relay-Ethernet VLAN Using Local
Switching
C1-Site1
R4
F 0/0.14
F 0/0.14
AS 123
R1 OSPF Area 0
S 0/0
S 0/0
R6
C1-Site2

Page 247 of 311
Task 1
You need to connect R4 to R6 using a combination of Frame-Relay and
Ethernet on the PE Router R1. You will be configuring R4 using Ethernet and
R6 using Frame-relay. Configure R1 F 0/0.14 to connect to R1 using VLAN 14.
R1
Interface F 0/0
No shut
!
Interface F 0/0.14
Encapsulation dot1q 14
Task 2
Configure R1 S0/0 to connect R6 using Frame-relay. Turn on Frame-relay
switching on R1.
R1
!
Interface S 0/0
encapsulation frame-relay
clock rate 128000
frame-relay intf-type dce
no shut
Task 3
Configure R1 to connect R4 to R6 using F0/0.14 and S 0/0 using interworking
ip and a VC of 46.
R1
connect VLAN-FR FastEthernet0/1.14 Serial0/0 46 interworking ip
Task 4
Configure R4 and R6. Configure R4 F0/0.14 using a VLAN of 14. Configure it
with an IP Address of 10.46.46.4/24. Configure R6 S0/0 using Frame-relay.
Configure it with an IP Address of 10.46.46.6/24. Configure a Frame-relay map
using the PVC 46 to connect to R4.
R4 R6

Page 248 of 311
No shut Ip address 10.46.46.6 255.255.255.0
! Encap frame-relay
Interface F 0/0.14 Frame-relay map ip 10.46.46.4 46 broad
Encapsulation dot1q 14 No shut
Ip address 10.46.46.4 255.255.255.0

Page 249 of 311
Lab 7 – Configuring L2TPv3 –Hairpinning
(Local Switching)
C2-Site1
R6
F 0/0
C1-Site1 C2-Site2
R4 R7
R2
F 0/0
F 0/0
S 0/0.12 (.2) S 0/0.23 (.2)
192.1.12.0/24
192.1.23.0/24
S 0/0 (.1) F 0/0

F 0/0
S 0/0 (.3)
R1
R3
F 0/1
AS 123
OSPF Area 0
F 0/0
R5
C1-Site2

Page 250 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
S 0/0 192.1.12.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
S 0/0.12 192.1.12.2 255.255.255.0
S 0/0.23 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
S 0/0 192.1.23.3 255.255.255.0
Task 1
R1 R2

Network 192.1.23.2 0.0.0.0 area 0
R3
Router ospf 1
Router-id 3.3.3.3
Network 3.3.3.3 0.0.0.0 area 0
Network 192.1.23.3 0.0.0.0 area 0
Task 2

Page 251 of 311
R1 R2

! !
Mpls ip Mpls ip
! !
Interface S 0/0 Interface S 0/0.12
Mpls ip Mpls ip
!
Interface S 0/0.23
Mpls ip
R3

!
Mpls ip
!
Interface S 0/0
Mpls ip
Task 3
You need to connect R4 to R5 using L2TPv3. Configure them with an IP
address of 10.45.45.X/24, where X is the 4 for R4 and 5 R5.
R4 R5

No shut No shut
Task 4
Configure R1 Loopback 4 with an ip address of 1.1.1.4/24. Configure Loopback
5 with an IP Address of 1.1.1.5/24. Configure 2 Pseudowire-class using L2TPv3
for encapsulation. The first Pseudowire-class should be called R4R5 and
should use Loopback 4 as the source. The second Pseudowire-class should be
called R5R4 and should use Loopback 5 as the source.
R1
Ip address 1.1.1.4 255.255.255.255
!

Page 252 of 311
Ip address 1.1.1.5 255.255.255.255
!
pseudowire-class R4R5
encapsulation l2tpv3
ip local interface Loopback4
!
Task 5
Configure R1 F 0/0 to connect to R4. Configure this interface to switch the
packets to R5 using the pesodowire-class R4R5. Use 45 as the PVC with a
destination address of 1.1.1.5
R1
int F 0/0
xconnect 1.1.1.5 45 encapsulation l2tpv3 pw-class R4R5
no shut
Task 6
destination address of 1.1.1.4
R1
int F 0/1
no shut

Page 253 of 311
Lab 8 – Configuring L2TPv3 – Remote
Peers
(Builds on Lab 7)
Task 1
You need to connect R6 to R7 using L2TPv3. Configure them with an IP
address of 10.67.67.X/24, where X is the 6 for R6 and 7 R7.
R6 R7

No shut No shut
Task 2
Configure 2 Pseudowire-class using L2TPv3 for encapsulation. The first
Pseudowire-class should be called R6R7 and should be created on R2. It
should use Loopback 0 as the source address. The second Pseudowire-class
should be called R7R6 and should be created on R3. It should use Loopback 0
as the source address.
R2
R3
Task 3
destination address of 3.3.3.3.
R2
int F 0/0
no shut

Page 254 of 311
Task 4
destination address of 2.2.2.2.
R1
int F 0/0
no shut

Page 255 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring MPLS Traffic Engineering

Page 256 of 311
Netmetric
Solutions
Lab 1 – Configuring SP Core Network
with MPLS Unicast Routing
R2 R3
F 0/1 192.1.23.0/24 F 0//0
S 0/0 S 0/0
F 0/0 F 0/1
192.1.13.0/24
192.1.12.0/24 192.1.34.0/24
192.1.24.0/24
S 0/0 S 0/0 F 0/0

F 0/0
R1 R4
F 0/1 192.1.14.0/24 F 0//0
S 0/1
S 0/1
192.1.15.0/24
192.1.46.0/24
S 0/0 S 0/0
R5 R6
Site1 Site2

Page 257 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.14.1 255.255.255.0
S 0/0 192.1.13.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
S 0/0 192.1.24.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
S 0/0 192.1.13.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.14.4 255.255.255.0
S 0/0 192.1.24.4 255.255.255.0
R5

Loopback 0 10.5.5.5 255.255.255.0
S 0/0 192.1.15.5 255.255.255.0

Page 258 of 311
R6

Loopback 0 10.6.6.6 255.255.255.0
S 0/0 192.1.46.6 255.255.255.0
Task 1
the Serial Links on R1 & R4 towards R5 & R6 respectively.
R1 R2

R3 R4

Task 3
Configure MPLS on all the physical links in the SP Network. The LDP
neighbour relationships should be formed based on the most reliable interface.
R1 R2

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
Page 259 of 311
R3 R4

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip

Page 260 of 311
Lab 2 – Configuring MPLS TE - Static
Tunnels
(Builds on Lab 1)
Task 1
Enable MPLS Traffic Engineering on all the Core Routers. OSPF Area 0 should
also be enabled for MPLS TE. Use Loopback 0 as the router-id.
R1 R2
Mpls traffic-eng tunnels Mpls traffic-eng tunnels

! !
router ospf 1 router ospf 1
Mpls traffic-eng router-id Loopback0 Mpls traffic-eng router-id Loopback0
Mpls traffic-eng area 0 Mpls traffic-eng area 0
R3 R4

! !
Task 2
Enable RSVP Bandwidth reservation & MPLS Traffic Engineering on all SP
Interfaces on all SP Routers. Configure a reservation of 512 on all Fastethernet
ports. Configure a reservation of 192 on all Serial Interfaces. This needs to be
done on all SP Core routers.
R1 R2
int F 0/0 int F 0/0

mpls traffic-eng tunnel mpls traffic-eng tunnel
ip rsvp bandwidth 512 ip rsvp bandwidth 512
int F 0/1 int F 0/1
int S 0/0 int S 0/0
R3 R4

Page 261 of 311
int F 0/0 int F 0/0
int F 0/1 int F 0/1
int S 0/0 int S 0/0
Task 3
Configure a MPLS TE Tunnel to have R1 use the R1-> R2 -> R4 path for Traffic
destined to 4.4.4.4. This tunnel should have a bandwidth reservation
requirement of 128 kbps.
R1
Interface Tunnel 1
ip unnumbered Loopback0
tunnel destination 4.4.4.4
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 4 4
tunnel mpls traffic-eng bandwidth 128
tunnel mpls traffic-eng path-option 1 explicit name R1-R4
!
ip explicit-path name R1-R4 enable
next-address 192.1.12.2
Notes: Make sure the Tunnel comes up and it is used in the routing table as the
next hop for the 4.4.4.4 network.
Task 4
Configure a MPLS TE Tunnel to have R4 use the R4-> R3 -> R1 path for Traffic
destined to 1.1.1.1. This tunnel should have a bandwidth reservation
requirement of 100 kbps.
R4
Interface Tunnel 1

Page 262 of 311
tunnel mpls traffic-eng bandwidth100
!
Task 5
Configure an IPv4 & VPNv4 neighbor relationship between R1 and R4. Make
sure to send the extended
R1
Router BGP 12353

Neighbor 4.4.4.4 update-source Loopback0
!
R4
Router BGP 12353

!
Task 6
Configure a VRF CUST-A with a RD value of 12353:1 on R1 and R4. Use the
same extended community for your Route-target import and export. Assign this
VRF to the links that connect to C1 sites on R1 and R4.
R1 R4

rd 12353:1 rd 12353:1

Page 263 of 311
! !
Task 7
Configure EIGRP 100 as the Routing Protocol between R5 and R1 in vrf CUST-
A. Advertise all the routes on R5 in EIGRP. Advertise the VRF link in EIGRP on
R1 under the appropriate address family. Make sure the VRF CUST-A on R4
R1
Router EIGRP 1
!
No auto-summary
Network 192.1.15.0
!
Router BGP 12353
!
R5
Router EIGRP 100

No auto-summary
Network 192.1.15.0
Network 10.0.0.0
Task 8
R4
Router EIGRP 1
!

Page 264 of 311
No auto-summary
Network 192.1.46.0
!
Router BGP 12353
!
R8
Router EIGRP 100

No auto-summary
Network 192.1.46.0
Network 10.0.0.0
Task 9
Use a Traceroute command from R5 and R6 to verify that the traffic between
R1 and R4 is using the appropriate paths.
R5
Traceroute 10.6.6.6 source 10.5.5.5

R6

Page 265 of 311
Lab 3 – Configuring MPLS TE - Dynamic
Tunnels
(Builds on Lab 2)
Task 1
Delete the Tunnels created in Lab 2. We will be creating tunnels dynamically
based on the available bandwidth the routing protocol metrics.
R1 R4
No Interface Tunnel 1 No Interface Tunnel 1
Task 2
Re-configure RSVP bandwidth reservations based on the following:
• R1-R2 - 150 kbps

• R1-R3 - 100 kbps
• R1-R4 - 150 kbps
• R2-R3 - 150 kbps
• R2-R4 - 100 kbps
• R3-R4 - 200 kbps
R1 R2
int F 0/0 int F 0/0

int F 0/1 int F 0/1
int S 0/0 int S 0/0
R3 R4
int F 0/0 int F 0/0

int F 0/1 int F 0/1
int S 0/0 int S 0/0

Page 266 of 311
Task 3
Configure 3 MPLS TE Tunnel on R1 to have it connect to R2, R3 & R4. Tunnels
towards R2 & R3 should have a bandwidth requirement of 128. The Tunnel
towards R4 should have a requirement of 80. Setup based on the Routing and
RSVP contraints. Create the R1-R2 Tunnel first, followed by the the R1-R3
tunnel. Create the R1-R4 tunnel last.
R1
Interface Tunnel 12
tunnel mpls traffic-eng path-option 1 dynamic
!
Interface Tunnel 13
!
Interface Tunnel 14
Task 4
Verify which tunnels were created. Also, verify the path that is being taken by
the Tunnels.
R1
show mpls traffic-eng tunnel

R4

Page 267 of 311
show mpls traffic-eng tunnel
R5
R6

Page 268 of 311
Lab 4 – Configuring MPLS TE - Dynamic
Tunnels with Pre-emption
(Builds on Lab 3)
Task 1
Configure a MPLS TE Tunnel on R4 to connect to R2. It should have a
bandwidth requirement of 128. Setup based on the Routing and RSVP
contraints.
R4
Interface Tunnel 24
Task 2
Verify if the tunnel came up by checking the routing table for reachability to
2.2.2.2.
R4
Show IP route
Note : The tunnel didn't come up as the all the bandwidth was already reserved by
the other Tunnels.
Task 3
Change the mpls traffic-eng priority for the Tunnel on R4 towards 2.2.2.2 to 2
for both Setup and Hold. Check to see if the Tunnel Came up.
R4
Interfae Tunnel24
Tunnel mpls traffic-eng priority 2 2
Show IP route

Page 269 of 311
Note : The tunnel did come up as the priority for this tunnel was better than the
previous tunnels.
Task 4
Verify Tunnel 12 on R1 towards 2.2.2.2.
R1
Show IP route
Note : Notice that R1 is not using the MPLS TE tunnel towards 2.2.2.2. This is the
tunnel that got pushed off to accomodate the higher priority tunnel.

Page 270 of 311
Lab 5 – Configuring MPLS TE with IS-IS
(Builds on Lab 4)
Task 1
Disable OSPF on all 4 Core Routers.
R1 R2
No router ospf 1 No router ospf 1

R3 R4
No router ospf 1 No router ospf 1
Task 2
Configure IS-IS on all 4 routers in a single Area 49.0000. Use XXXX.XXX.XXXX
as the System ID. Advertise all the Loopbacks in IS-IS. Make sure that the
Routers only establish L1 Adjacencies with each other. Enable Wide style
metric to accomodate MPLS TE.
R1 R2

Net 49.0000.1111.1111.1111.00 Net 49.0000.2222.2222.2222.00
! !
Int Loopback0 Int Loopback0
Int F 0/0 Int F 0/0
Int F 0/1 Int F 0/1
Int S 0/0 Int S 0/0
R3 R4

Net 49.0000.3333.3333.3333.00 Net 49.0000.4444.4444.4444.00
! !
Int Loopback0 Int Loopback0

Page 271 of 311
Int F 0/0 Int F 0/0
Int F 0/1 Int F 0/1
Int S 0/0 Int S 0/0
Task 3
Enable MPLS Traffic Engineering IS-IS for all Level-1 neighbors. Use Loopback
0 as the router-id.
R1 R2
router isis router isis

Mpls traffic-eng level-1 Mpls traffic-eng level-1
R3 R4
router isis router isis

Mpls traffic-eng level-1 Mpls traffic-eng level-1
Task 4
Verify the status of the tunnels on R1 & R4.
R1
Show IP route
!
Sh mpls traffic-eng tunnel brief

Page 272 of 311
Lab 6 – Configuring MPLS TE - Link
Protection with Fast Re-Route (FRR)
R2
S 0/0 S 0/1
192.1.23.0/24 192.1.24.0/24
S 0/0 S 0/1
R3 R4
F 0/1 192.1.34.0/24 F 0//0
F 0/0 F 0/1
192.1.13.0/24 192.1.46.0/24
F 0/0 F 0/0
R1 R5
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0 192.1.13.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
S 0/0 192.1.23.2 255.255.255.0
S 0/1 192.1.24.2 255.255.255.0

Page 273 of 311
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0 192.1.13.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
S 0/0 192.1.23.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.45.4 255.255.255.0
S 0/0 192.1.24.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.255.255.0
F 0/0 192.1.45.5 255.255.255.0
Task 1
Configure OSPF between all the SP routers (R1, R2, R3, R4,R5). Use x.x.x.x as
the router-id, where x is the Router number. Advertise all links in OSPF.
R1 R2

Network 192.1.24.2 0.0.0.0 area 0
R3 R4

R5

Page 274 of 311
Router ospf 1
Router-id 5.5.5.5
Network 5.5.5.5 0.0.0.0 area 0
Network 192.1.45.5 0.0.0.0 area 0
Task 2
R1 R2

! !
Mpls ip Mpls ip
!
Interface S 0/1
Mpls ip
R3 R4

! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
! !
Mpls ip Mpls ip
R5

!
Interface F 0/0
Mpls ip
Task 3
Enable MPLS Traffic Engineering on all the Core Routers. OSPF Area 0 should
also be enabled for MPLS TE. Use Loopback 0 as the router-id.
R1 R2

Page 275 of 311
! !
R3 R4

! !
Task 4
Enable RSVP Bandwidth reservation & MPLS Traffic Engineering on all SP
Interfaces on all SP Routers. Configure a reservation of 512 on all Fastethernet
ports. Configure a reservation of 192 on all Serial ports.
R1 R2
int F 0/0 int S 0/0

int S 0/1
mpls traffic-eng tunnel
ip rsvp bandwidth 512
R3 R4
int F 0/0 int F 0/0

int F 0/1 int F 0/1
int S 0/0 int S 0/0
R5
int F 0/0
mpls traffic-eng tunnel
ip rsvp bandwidth 512

Page 276 of 311
Task 5
Configure a MPLS TE Tunnel to have R1 use the R1-> R3 -> R4 -> R5 path for
Traffic destined to 5.5.5.5. This tunnel should have a bandwidth reservation
requirement of 128 kbps. Enable Link Protection using the Fast Re-route
feature.
R1
Interface Tunnel 1
tunnel mpls traffic-eng fast-reroute
!
Task 6
Configure a MPLS TE Tunnel on R3 to provide link protection for the R3-R4
link by using a backup path via R2 to R4. This tunnel should also have a
bandwidth reservation requirement of 128 kbps. Don't tunnel should be used
only as a backup in case of R3-R4 link going down. Configure this tunnel as
the back link on the Protected Link.
R3
Interface Tunnel 1
!

Page 277 of 311
!
Interface F 0/1
Mpls traffic-eng backup tunnel 1
Note: Use the show mpls traffic-eng fast-reroute database to check whether the
FRR interface is being used or is ready for Use. Under normal circumstances, it will
be in Ready state. When the protected link is down, it will do into Active state.

Page 278 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020 Configuring Multicast MPLS VPN

Page 279 of 311
Netmetric
Solutions
R2 R3
F 0/1 192.1.23.0/24 F 0//0
F 0/0 F 0/1
192.1.12.0/24 192.1.34.0/24
F 0/0 F 0/0
R1 R4
F 0/1 F 0/1
192.1.15.0/24
192.1.46.0/24
F 0/0 F 0/0
R5 R6
Site1 Site2

Page 280 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
F 0/0 192.1.12.1 255.255.255.0
F 0/1 192.1.15.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
F 0/0 192.1.12.2 255.255.255.0
F 0/1 192.1.23.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
F 0/0 192.1.23.3 255.255.255.0
F 0/1 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
F 0/0 192.1.34.4 255.255.255.0
F 0/1 192.1.46.4 255.255.255.0
R5

Loopback 0 10.5.5.5 255.255.255.0
S 0/0 192.1.15.5 255.255.255.0

Page 281 of 311
R6

Loopback 0 10.6.6.6 255.255.255.0
S 0/0 192.1.46.6 255.255.255.0
Task 1
the Serial Links on R1 & R4 towards R5 & R6 respectively.
R1 R2

Network 192.1.23.2 0.0.0.0 area 0
R3 R4

Network 192.1.34.3 0.0.0.0 area 0
Task 3
R1 R2

! !
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip
R3 R4

! !
Page 282 of 311
Mpls ip Mpls ip
!
Interface F 0/1
Mpls ip

Page 283 of 311
Lab 2 – Configuring Multicast VPN (M-
VPN) Using Static RP
(Builds on Lab 1)
Task 1
Configure an IPv4 & VPNv4 neighbor relationship between R1 and R4. Make
sure to send the extended
R1
Router BGP 12353

!
R4
Router BGP 12353

!
Task 2
R1 R4

rd 12353:1 rd 12353:1
! !

Page 284 of 311
Task 3
R1
Router EIGRP 1
!
No auto-summary
Network 192.1.15.0
!
Router BGP 12353
!
R5
Router EIGRP 100

No auto-summary
Network 192.1.15.0
Network 10.0.0.0
Task 4
R4
Router EIGRP 1
!
No auto-summary
Network 192.1.46.0
!
Router BGP 12353

Page 285 of 311
!
R6
Router EIGRP 100

No auto-summary
Network 192.1.46.0
Network 10.0.0.0
Task 5
Configure Multicast routing on the Customer Routers (R5 & R6) using PIM
Sparse-dense-mode. Configure 10.5.5.5 as the RP-Address. Have the loopback
interface join the 224.56.56.56 multicast group.
R5
ip multicast-routing
!
int f 0/0
ip pim sparse-dense-mode
int lo0
ip igmp join-group 224.56.56.56
!
ip pim rp-address 10.5.5.5
R6
ip multicast-routing
!
int f 0/0
int lo0
ip igmp join-group 224.56.56.56
!
ip pim rp-address 10.5.5.5
Task 6
Configure Multicast routing on all SP routers using PIM Sparse-dense-mode.
Enable Multicast routing for the CUST-A VRF on the PE routers.
R1 R2

Page 286 of 311
ip multicast-routing ip multicast-routing
ip multicast-routing vrf CUST-A !
! int F 0/0
int F 0/0 ip pim sparse-dense-mode
ip pim sparse-dense-mode int F 0/1
ip pim sparse-dense-mode int loopback 0
int loopback 0 ip pim sparse-dense-mode
R3 R4
ip multicast-routing ip multicast-routing
! ip multicast-routing vrf CUST-A
int F 0/0 !
int loopback 0 ip pim sparse-dense-mode
ip pim sparse-dense-mode int loopback 0
Task 7
Configure VRF CUST-A on the PE routers (R1 & R4) to use 239.1.1.1 as the
default control group address. It should be allowed to route the group
addresses in the 224.56.56.0/24 range. Configure 10.5.5.5 as the RP address
for this VRF.
R1
ip vrf CUST-A
mdt default 239.1.1.1
mdt data 224.56.56.0 0.0.0.255
!
ip pim vrf CUST-A rp-address 10.5.5.5
R4
ip vrf CUST-A
mdt default 239.1.1.1
mdt data 224.56.56.0 0.0.0.255
!
ip pim vrf CUST-A rp-address 10.5.5.5

Page 287 of 311
Task 8
Ping 224.56.56.56 from R5 & R6. You should receive replies from R5 & R6.
Verify the mroute Table entries
R5
Ping 224.56.56.56
R6
Ping 224.56.56.56

Page 288 of 311
Lab 3– Configuring Multicast MPLS VPN
\
(M-VPN) Using Auto-RP
(Builds on Lab 2)
Task 1
As we will be configuring Auto-RP on R5, take out the static assignment of the
RP on R1, R4, R5 & R6 Routers
R1 R4
No ip pim vrf CUST-A rp-address 10.5.5.5 No ip pim vrf CUST-A rp-address 10.5.5.5
R5 R6
No ip pim rp-address 10.5.5.5 No ip pim rp-address 10.5.5.5
Task 2
Configure R5 as the RP-Candidate and the Mapping agent. Use Loopback 0 as
the source address with a scope of 10 and an interval of 10 secs.
R5
ip pim send-rp-announce Loopback0 scope 10 interval 10

ip pim send-rp-discovery Loopback0 scope 10
Task 3
Verify that the other routers are notified of the RP Mapping using the show ip
pim rp mapping command
R1
sh ip pim vrf CUST-A rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/4
RP 10.5.5.5 (?), v2v1
Info source: 10.5.5.5 (?), elected via Auto-RP
Uptime: 00:11:06, expires: 00:02:44
R4
sh ip pim vrf CUST-A rp mapping

Page 289 of 311
Group(s) 224.0.0.0/4
RP 10.5.5.5 (?), v2v1
Uptime: 00:11:42, expires: 00:02:11
R6
sh ip pim rp mapping
Group(s) 224.0.0.0/4
RP 10.5.5.5 (?), v2v1
Uptime: 00:12:25, expires: 00:02:28

Page 290 of 311
Authored By:
Khawar Butt
Penta CCIE # 12353
CCDE # 20110020
Configuring MPLS on IOS-XR

Page 291 of 311
Netmetric
Solutions
R10 R9
CUST-A CUST-A
SITE # 2 SITE # 1
E 0/0 E 0/0
192.1.20.0/24 192.1.10.0/24
E 0/2 E 0/2
R2 R1
E 0/0
192.1.23.0/24 E 0/1 E 0/0
E 0/1
192.1.13.0/24
192.1.100.0/24
G 0/0/0/0
G 0/0/0/1
E 0/1
E 0/0 192.1.34.0/24 G 0/0/0/2
R4 R3
E 0/2
AS 100
192.1.48.0/24
E 0/2
E 0/0 192.1.78.0/24 G 0/0/0/2
R8 R7
E 0/1 G 0/0/0/1
G 0/0/0/0
192.1.67.0/24
192.1.200.0/24
192.1.57.0/24
G 0/0/0/1
E 0/0
E 0/1
G 0/0/0/0
R6 R5
G 0/0/0/2 AS 200 E 0/2
192.1.60.0/24 192.1.50.0/24
E 0/0
E 0/0
CUST-A CUST-A
SITE # 4 SITE # 3
R12 R11

Page 292 of 311
R1

Loopback 0 1.1.1.1 255.255.255.255
E 0/0 192.1.13.1 255.255.255.0
E 0/1 192.1.100.1 255.255.255.0
R2

Loopback 0 2.2.2.2 255.255.255.255
E 0/0 192.1.23.2 255.255.255.0
E 0/1 192.1.100.2 255.255.255.0
R3

Loopback 0 3.3.3.3 255.255.255.255
G 0/0/0/0 192.1.13.3 255.255.255.0
G 0/0/0/1 192.1.23.3 255.255.255.0
G 0/0/0/2 192.1.34.3 255.255.255.0
R4

Loopback 0 4.4.4.4 255.255.255.255
E 0/0 192.1.34.4 255.255.255.0
E 0/1 192.1.100.4 255.255.255.0
E 0/2 192.1.48.4 255.255.255.0
R5

Loopback 0 5.5.5.5 255.255.255.255
E 0/0 192.1.57.5 255.255.255.0
E 0/1 192.1.200.5 255.255.255.0

Page 293 of 311
R6

Loopback 0 6.6.6.6 255.255.255.0
G 0/0/0/0 192.1.67.6 255.255.255.0
G 0/0/0/1 192.1.200.6 255.255.255.0
R7

Loopback 0 7.7.7.7 255.255.255.255
G 0/0/0/0 192.1.57.7 255.255.255.0
G 0/0/0/1 192.1.67.7 255.255.255.0
G 0/0/0/2 192.1.78.7 255.255.255.0
R8

Loopback 0 8.8.8.8 255.255.255.255
E 0/0 192.1.34.4 255.255.255.0
E 0/1 192.1.200.8 255.255.255.0
E 0/2 192.1.48.8 255.255.255.0

Page 294 of 311
AS 100 – Configuring IP Address, run IGP & Enable LDP
Task 1
Configure IP Addresses on R1, R2, R3 & R4 based on the above table.
R1 R2
Interface Loo0 Interface Loo0

Ip add 1.1.1.1 255.255.255.255 Ip add 2.2.2.2 255.255.255.255
! !
Ip add 192.1.13.1 255.255.255.0 Ip add 192.1.23.2 255.255.255.0
No shut No shut
! !
Ip add 192.1.100.1 255.255.255.0 Ip add 192.1.100.2 255.255.255.0
No shut No shut
R3 R4

Ip add 3.3.3.3 255.255.255.255 Ip add 4.4.4.4 255.255.255.255
! !
Interface G0/0/0/0 Interface E 0/0
Ip add 192.1.13.2 255.255.255.0 Ip add 192.1.34.4 255.255.255.0
No shut No shut
! !
Ip add 192.1.23.3 255.255.255.0 Ip add 192.1.100.4 255.255.255.0
No shut No shut
! !
Ip add 192.1.34.4 255.255.255.0 Ip add 192.1.48.4 255.255.255.0
No shut No shut
!
Commit

Page 295 of 311
Task 2
Configure OSPF between all the SP routers in AS 100. (R1, R2, R3 & R4). Use
x.x.x.x as the router-id, where x is the Router number. Advertise all links in
OSPF except for the External Links on R1, R2, R3 & R4 respectively.
R1 R2

R3 R4
router ospf 1 Router ospf 1

router-id 3.3.3.3 Router-id 4.4.4.4
area 0 Network 4.4.4.4 0.0.0.0 area 0
interface Loopback0 Network 192.1.34.4 0.0.0.0 area 0
exit Network 192.1.100.4 0.0.0.0 area 0
interface GigabitEthernet0/0/0/0
exit
exit
exit
!
commit
Task 3
R1 R2

! !
Mpls ip Mpls ip
! !
Interafce E 0/1 Interafce E 0/1
Mpls ip Mpls ip
R3 R4

Page 296 of 311
mpls ldp Mpls ldp router-id Loopback0
router-id 3.3.3.3 !
! Interface E 0/0
interface Gig0/0/0/0 Mpls ip
interface Gig0/0/0/1 !
interface Gig0/0/0/2 Interafce E 0/1
! Mpls ip
commit

Page 297 of 311
AS 200 – Configuring IP Address, run IGP & Enable LDP
Task 1
Configure IP Addresses on R5,R6,R7 & R8 based on the above table.
R5 R6

Ip add 5.5.5.5 255.255.255.255 Ip add 6.6.6.6 255.255.255.255
! !
Interface E 0/0 Interface G0/0/0/0
Ip add 192.1.57.5 255.255.255.0 Ip add 192.1.67.6 255.255.255.0
No shut No shut
! !
Interface E 0/1 Interface G0/0/0/1
Ip add 192.1.200.5 255.255.255.0 Ip add 192.1.200.6 255.255.255.0
No shut No shut
!
Commit
R7 R4

Ip add 7.7.7.7 255.255.255.255 Ip add 8.8.8.8 255.255.255.255
! !
Ip add 192.1.57.7 255.255.255.0 Ip add 192.1.78.8 255.255.255.0
No shut No shut
! !
Ip add 192.1.67.7 255.255.255.0 Ip add 192.1.200.8 255.255.255.0
No shut No shut
!
Interface G0/0/0/2
Ip add 192.1.78.7 255.255.255.0
No shut
!
Commit

Page 298 of 311
Task 2
Configure OSPF between all the SP routers in AS 200. (R5, R6, R7 & R8). Use
x.x.x.x as the router-id, where x is the Router number. Advertise all links in
OSPF except for the External Links on R5, R6, R7 & R8 respectively.
R5 R6
Router ospf 1 router ospf 1

Router-id 5.5.5.5 router-id 6.6.6.6
Network 5.5.5.5 0.0.0.0 area 0 area 0
Network 192.1.57.5 0.0.0.0 area 0 interface Loopback0
Network 192.1.200.5 0.0.0.0 area 0 exit
exit
exit
!
commit
R7 R8
router ospf 1 Router ospf 1

router-id 7.7.7.7 Router-id 8.8.8.8
area 0 Network 8.8.8.8 0.0.0.0 area 0
interface Loopback0 Network 192.1.48.8 0.0.0.0 area 0
exit Network 192.1.200.8 0.0.0.0 area 0
exit
exit
exit
!
commit
Task 3
R5 R6
Mpls ldp router-id Loopback0 mpls ldp

! router-id 6.6.6.6
Interface E 0/0 !
Mpls ip interface Gig0/0/0/0

Page 299 of 311
! interface Gig0/0/0/1
Interafce E 0/1 !
Mpls ip commit
R7 R8
mpls ldp Mpls ldp router-id Loopback0

router-id 7.7.7.7 !
! Interface E 0/0
interface Gig0/0/0/0 Mpls ip
interface Gig0/0/0/1 !
interface Gig0/0/0/2 Interafce E 0/1
! Mpls ip
commit

Page 300 of 311
Lab 2 – Configuring Intra-AS MPLS VPN
within AS 100 & AS 200
(Builds on Lab 1)
AS 100 – Configuring Intra-AS MPLS VPN to connect Site 1 & 2
Task 1
Configure a VPNv4 neighbor relationship between R1-R3 & another one
between R2 & R3 in AS 100. These relationships should be set based on the
Loopback interfaces. R1 & R2 should be route-reflector clients for R3.
R1
Router BGP 100

!
Neighbor 3.3.3.3 update-source loopback0
!
R2
Router BGP 100

!
!
R3
router bgp 100

address-family vpnv4 unicast
!
neighbor 1.1.1.1
remote-as 100
update-source Loopback0

Page 301 of 311
route-reflector-client
!
!
neighbor 2.2.2.2
remote-as 100
!
commit
Task 2
to the links that connect to CUST-A sites on R1 and R2.
R1 R2
Vrf definition CUST-A Vrf definition CUST-A

rd 100:1 rd 100:1
! !
Address-family ipv4 Address-family ipv4
! !
vrf forwarding CUST-A vrf forwarding CUST-A
No shut No shut
Task 3
Configure BGP as the PE-CE Routing Protocol. Configure the CE routers based
on the Table below. Advertise the Loopback Interfaces on the CE routers in
BGP. Use 65009 as the AS # for Site 1 and 65010 as the AS # for Site 2.
R9

Loopback 0 10.9.9.9 255.255.255.0
E 0/0 192.1.10.9 255.255.255.0
R10

Loopback 0 10.10.10.10 255.255.255.0
Page 302 of 311
E 0/0 192.1.20.10 255.255.255.0
R1
Router bgp 100

!
Neighbour 192.1.10.9 remote-as 65009
R2
Router bgp 100

!
R9
Ip address 10.9.9.9 255.255.255.0
!
Interface E 0/0
Ip address 192.1.10.9 255.255.255.0
No shut
!
Router bgp 65009
Network 10.9.9.0 mask 255.255.255.0
R10
Ip address 10.10.10.10 255.255.255.0
!
Interface E 0/0
Ip address 192.1.20.10 255.255.255.0
No shut
!
Router bgp 65010
Network 10.10.10.0 mask 255.255.255.0

Page 303 of 311
AS 200 – Configuring Intra-AS MPLS VPN to connect Site 3 & 4
Task 1
Configure a VPNv4 neighbor relationship between R5-R7 & another one
between R6 & R7 in AS 200. These relationships should be set based on the
Loopback interfaces. R5 & R6 should be route-reflector clients for R7.
R5
Router BGP 200

!
!
R6
router bgp 200

!
neighbor 7.7.7.7
remote-as 200
!
Commit
R7
router bgp 200

!
neighbor-group IBGP
remote-as 200
!
!
neighbor 5.5.5.5
use neighbor-group IBGP
!
neighbor 6.6.6.6

Page 304 of 311
use neighbor-group IBGP
!
Commit
Task 2
to the links that connect to CUST-A sites on R5 and R6.
R5 R6
Vrf definition CUST-A vrf CUST-A

rd 200:1 address-family ipv4 unicast
! import route-target
Address-family ipv4 200:1
route-target both 200:1 export route-target
! 200:1
Interface E 0/2 !
vrf forwarding CUST-A Interface gig 0/0/0/2
Ip address 192.1.50.5 255.255.255.0 vrf CUST-A
No shut ipv4 address 192.1.60.6 255.255.255.0
no shut
Task 3
Configure BGP as the PE-CE Routing Protocol. Configure the CE routers based
on the Table below. Advertise the Loopback Interfaces on the CE routers in
BGP. Use 65011 as the AS # for Site 3 and 65012 as the AS # for Site 4.
R11

Loopback 0 10.11.11.11 255.255.255.0
E 0/0 192.1.50.11 255.255.255.0
R12

Loopback 0 10.12.12.12 255.255.255.0
E 0/0 192.1.60.12 255.255.255.0
R5
Router bgp 200

!
Page 305 of 311
R6
route-policy IN
pass
end-policy
!
route-policy OUT
pass
end-policy
!
router bgp 200
address-family ipv4 unicast
!
vrf CUST-A
rd 200:1
!
neighbor 192.1.60.12
remote-as 65012
route-policy IN in
route-policy OUT out
!
commit
R11
Ip address 10.11.11.11 255.255.255.0
!
Interface E 0/0
Ip address 192.1.50.11 255.255.255.0
No shut
!
Router bgp 65011
Network 10.11.11.0 mask 255.255.255.0
R12
Ip address 10.12.12.12 255.255.255.0
!

Page 306 of 311
Interface E 0/0
Ip address 192.1.60.12 255.255.255.0
No shut
!
Router bgp 65012
Network 10.12.12.0 mask 255.255.255.0

Page 307 of 311
(Builds on Lab 2)
Task 1
Configure BGP between the ASBRs R4 & R8. Enable BGP to send labels for
any IPv4 routes that are exchanged.
R4
Interface E 0/2
ip address 192.1.48.4 255.255.255.0
no shut
!
router bgp 100
neighbor 192.1.48.8 send-label
R8
Interface E 0/2
ip address 192.1.48.8 255.255.255.0
no shut
!
router bgp 200
neighbor 192.1.48.4 send-label
Task 2
Redistribute the Loopback interfaces of the PE and RR routers in each AS into
BGP on the ASBR. These routes are providing reachability between the PE &
RR routers in both the respective AS’s. Make sure to only redistribute the
Loopbacks from OSPF into BGP and vice versa.
R4
ip access-list standard O2B

permit host 1.1.1.1
permit host 2.2.2.2
permit host 3.3.3.3
!
ip access-list standard B2O
permit host 5.5.5.5
permit host 6.6.6.6
permit host 7.7.7.7

Page 308 of 311
!
route-map O2B
match ip address O2B
!
route-map B2O
match ip address B2O
!
router bgp 100
redistribute ospf 1 route-map B2O
!
router ospf 1
redistribute bgp 100 subnets route-map B2O
R8
ip access-list standard B2O

permit host 1.1.1.1
permit host 2.2.2.2
permit host 3.3.3.3
!
ip access-list standard O2B
permit host 5.5.5.5
permit host 6.6.6.6
permit host 7.7.7.7
!
route-map O2B
match ip address O2B
!
route-map B2O
match ip address B2O
!
router bgp 200
redistribute ospf 1 route-map O2B
!
Router ospf 1
redistribute bgp 200 subnets route-map B2O
Task 3
Configure a VPNv4 neighbor relationship between the RR’s, R3-R7, to exchange
Customer Routers with each other. Make sure to segregate the Data Plance and
Control Plance Traffic.
Add the 100:1 route-target as a import route-target on all PE Routers (R1and

R2) for VRF CUST-A in AS 100. Add the 200:1 route-target as a import route-
target on all PE Routers (R5and R6) for VRF CUST-A in AS 200.

Page 309 of 311
R3
route-policy IN
pass
end-policy
route-policy OUT
pass
end-policy
!
router bgp 100
neighbor 7.7.7.7
remote-as 200
update-source loopback0
ebgp-multihop
route-policy IN in
next-hop-unchanged
!
commit
R7
route-policy IN
pass
end-policy
route-policy OUT
pass
end-policy
!
router bgp 200
neighbor 3.3.3.3
remote-as 100
update-source loopback0
ebgp-multihop
route-policy IN in
next-hop-unchanged
!
commit

Page 310 of 311
Task 4
Add the 100:1 route-target as a import route-target on all PE Routers (R1and
R2) for VRF CUST-A in AS 100. Add the 200:1 route-target as a import route-
target on all PE Routers (R5and R6) for VRF CUST-A in AS 200.
R1
vrf definition CUST-A
address-family ipv4
R2

address-family ipv4
R5

address-family ipv4
R6
vrf CUST-A
import route-target
100:1
!
commit

Page 311 of 311

KB CCIE Service Provider Workbook

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

KB CCIE Service Provider Workbook

Uploaded by

Copyright:

Available Formats

CCIE Service Provider Workbook

Khawar Butt Comprehensive Coverage of the CCIE

Copyrights Khawar Butt 2006-2020

Module 1 - OSPF Page

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

F 0/0 (.1) F 0/0 (.2)

F 0/0 (.4) F 0/0 (.3)

Interface IP Address Configuration

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Copyrights Khawar Butt 2006-2020

Interface IP Address Subnet Mask

Router OSPF 1 Router OSPF 1

Router OSPF 1 Router OSPF 1

Interface E 0/0 Interface E 0/0

Copyrights Khawar Butt 2006-2020

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Area 0 – R1 Loopback 0, R1 F 0/0, R2 F 0/0, R2 Loopback 0

Configure a Virtual Link between the appropriate devices.

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

EIGRP 100 192.1.12.0/24

Copyrights Khawar Butt 2006-2020

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Copyrights Khawar Butt 2006-2020

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

router eigrp 100

router eigrp 100

Copyrights Khawar Butt 2006-2020

Area 0 – R2 F 0/0, R2 F 0/1, R2 Loop 0, R3 F 0/0, R3 Loop 0, R4 F 0/0, R4

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

router rip router rip

Router EIGRP 100

Loopback 101 – 205.1.4.1/24

Copyrights Khawar Butt 2006-2020

Loopback 101 – 201.1.4.1/24

Advertise these newly created loopbacks in EIGRP.

Copyrights Khawar Butt 2006-2020

Ip prefix-list FILTER1 deny 66.0.0.0/8

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

Copyrights Khawar Butt 2006-2020

Interface IP Address Configuration

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask

Interface IP Address Subnet Mask