- •Acknowledgments
- •Introduction
- •Assessment Test
- •Answers to Assessment Test
- •Service Provider Networks
- •Scalability
- •Traffic Engineering
- •Quality of Service
- •MPLS Label Stack
- •Shim Header
- •MPLS Architecture
- •Control
- •Forwarding
- •MPLS Label Switching
- •MPLS Network Components
- •Device Output
- •Label-Switched Paths
- •MPLS Applications
- •MPLS and ATM
- •Overlay
- •Quality of Service
- •Traffic Engineering
- •Summary
- •Exam Essentials
- •Key Terms
- •Review Questions
- •Answers to Review Questions
- •Routing Review
- •Frame-Mode MPLS Working Example
- •Network Routing Protocol Examples
- •MPLS Step by Step
- •Label Distribution
- •Assigning Labels
- •Troubleshooting and Verification
- •Device Configuration
- •IGP Verification
- •CEF Verification
- •MPLS Verification
- •Label Distribution and Bindings
- •Binding Verification
- •Troubleshooting the Network
- •Hiding Service Provider Devices
- •Summary
- •Exam Essentials
- •Key Terms
- •Review Questions
- •Answers to Review Questions
- •Frame-Mode MPLS and ATM
- •Frame-Mode MPLS and ATM Configuration
- •Cell-Mode MPLS
- •Label Binding with ATM
- •Cell-Mode Label Switching
- •VC Merge
- •Loop Prevention
- •Cell-Mode MPLS Configuration
- •Summary
- •Exam Essentials
- •Key Terms
- •Review Questions
- •Answers to Review Questions
- •VPNs 101
- •Point-to-Point Connections
- •Virtual Private Networks
- •Categories of VPNs
- •VPN Routing
- •Peer-to-Peer VPNs
- •Optimal Routing
- •Peer-to-Peer Security
- •Peer-to-Peer VPN Routing
- •Summary
- •Exam Essentials
- •Key Terms
- •Review Questions
- •Answers to Review Questions
- •Service Provider Configuration
- •MPLS VPNs
- •Virtual Router
- •Virtual Routing and Forwarding Tables
- •MPLS Operational Overview
- •MP-BGP Configuration
- •An MPLS VPN Example
- •Route Distinguisher
- •MP-IBGP Configuration Example
- •Initial Network Configuration
- •MP-IBGP Configuration
- •Verification
- •Summary
- •Exam Essentials
- •Key Terms
- •Review Questions
- •Answers to Review Questions
- •A Review of VPNs
- •Configuring a Simple MPLS VPN
- •Configuring VRF Interfaces
- •Running RIP in an MPLS VPN
- •Configuring RIPv2 with Address-Family ipv4
- •Configuring Redistribution
- •Route Targets
- •Configuring Route Targets
- •A Review of Simple VPN Configuration
- •Configuring MPLS in the Service Provider Network
- •Simple VPN Configuration
- •Configuring the PE-CE Routing Protocol
- •Lab: Configuring an MPLS VPN
- •Configuring POP Routers
- •VPN Configuration
- •Raleigh Running-Config
- •Atlanta Running-Config
- •Peer 1 Running-Config
- •Peer 2 Running-Config
- •Verification with Ping
- •Routing Table Isolation
- •Verifying VRF Routes
- •Summary
- •Exam Essentials
- •Key Terms
- •Review Questions
- •Answers to Review Questions
- •MP-BGP and OSPF
- •A Review of OSPF
- •OSPF Router Types
- •Link State Advertisements
- •OSPF for MPLS VPNs
- •OSPF Super-Backbone
- •Preventing Routing Loops
- •Path Selection
- •MPLS VPN OSPF Lab
- •Summary
- •Exam Essentials
- •Key Terms
- •Review Questions
- •Answers to Review Questions
- •Static Routing
- •Device Configuration
- •VPN Configuration
- •Raleigh Running-Config
- •Atlanta Running-Config
- •Peer Router Configuration
- •Verification with Ping
- •Verifying Static VRF Routes
- •E-BGP and MPLS VPNs
- •Device Configuration
- •E-BGP Operation
- •AS-Override
- •VPN Configuration
- •Raleigh Running-Config
- •Atlanta Running-Config
- •Peer Router Configuration
- •Peer 1 Running-Config
- •Peer 2 Running-Config
- •Verification with Ping
- •Advanced MPLS VPN Topologies
- •Simple VPNs
- •Central Services MPLS VPN Topology
- •Overlay MPLS VPN Topology
- •Summary
- •Exam Essentials
- •Key Terms
- •Review Questions
- •Answers to Review Questions
- •Challenge Lab 1
- •MPLS
- •MP-IBGP
- •Answer to Lab 1.1
- •Answer to Lab 1.2
- •Answer to Lab 1.3
- •Challenge Lab 2
- •Tag Switching
- •MP-IBGP
- •Answer to Lab 2.1
- •Answer to Lab 2.2
- •Answer to Lab 2.3
- •Challenge Lab 3
- •VRF Configuration
- •RIPv2
- •Redistribution
- •Answer to Lab 3.1
- •Answer to Lab 3.2
- •Answer to Lab 3.3
- •Challenge Lab 4
- •VRF Configuration
- •OSPF
- •Redistribution
- •Answer to Lab 4.1
- •Answer to Lab 4.2
- •Answer to Lab 4.3
- •Challenge Lab 5
- •VRF Configuration
- •Static Routes and Redistribution
- •Answer to Lab 5.1
- •Answer to Lab 5.2
- •Challenge Lab 6
- •VRF Configuration
- •E-BGP Configuration
- •Answer to Lab 6.1
- •Answer to Lab 6.2
- •Service Provider Network Configuration with OSPF
- •Router Configuration
- •Routing Tables
- •Tags
- •Service Provider Network Configuration with IS-IS
- •Router Configuration
- •Routing Tables
- •Tag Switching Forwarding Tables
- •Glossary
MP-IBGP Configuration Example 185
password cisco logging synchronous login
ip netmask-format decimal
!
end
MP-IBGP Configuration
There are two routers that need MP-IBGP configured between them: Atlanta and Raleigh. Under global BGP, the Atlanta and Raleigh routers are neighbors.
The activate command is used to enable MP-BGP. The configuration for
MP-IBGP on the Atlanta router is as follows:
Atlanta(config)#router bgp 65000 Atlanta(config-router)#address-family vpnv4
Atlanta(config-router-af)#neighbor 204.134.83.3 activate
Atlanta(config-router-af)#neighbor 204.134.83.3 sendcommunity both
00:44:48: %BGP-5-ADJCHANGE: neighbor 204.134.83.3 Down Address family activated
The configuration for MP-IBGP on the Raleigh router is as follows:
Raleigh#conf t
Enter configuration commands, one per line. End with CNTL/Z. Raleigh(config)#router bgp 65000 Raleigh(config-router)#address-family vpnv4
Raleigh(config-router-af)#neighbor 204.134.83.1 activate
00:46:08: %BGP-5-ADJCHANGE: neighbor 204.134.83.1 Down Address family activated
Raleigh(config-router-af)#neighbor 204.134.83.1 sendcommunity both
Raleigh Running-Config
By viewing the running-config of the Raleigh POP router, you can see that I-BGP is configured:
Raleigh#show running-config
Building configuration...
Copyright ©2002 SYBEX, Inc., Alameda, CA |
www.sybex.com |
186 Chapter 5 MPLS VPNs
Current configuration : 1997 bytes
!
version 12.1
service timestamps debug uptime service timestamps log uptime no service password-encryption
!
hostname Raleigh
!
enable password cisco
!
!
!
!
!
memory-size iomem 25 ip subnet-zero
ip tcp synwait-time 5 no ip domain-lookup
!
!
ip vrf vpn_1 rd 65000:1
route-target export 65000:1 route-target import 65000:1
ip cef
cns event-service server
!
!
!
!
!
interface Loopback0
ip address 204.134.83.3 255.255.255.255
!
interface Serial0/0 no ip address
Copyright ©2002 SYBEX, Inc., Alameda, CA |
www.sybex.com |
MP-IBGP Configuration Example 187
shutdown
no fair-queue clockrate 64000
!
interface Serial0/1
description *** Link to Peer2 ***
no ip address shutdown clockrate 64000
!
interface Serial0/2 no ip address shutdown
clockrate 64000
!
interface Serial0/3
description *** Link to Core Router ***
ip address 204.134.83.10 255.255.255.252 tag-switching ip
clockrate 64000
!
interface Ethernet1/0 no ip address shutdown
!
interface Ethernet1/1 no ip address shutdown
!
interface Ethernet1/2 no ip address shutdown
!
interface Ethernet1/3 no ip address shutdown
!
Copyright ©2002 SYBEX, Inc., Alameda, CA |
www.sybex.com |
188 Chapter 5 MPLS VPNs
router rip version 2
network 204.134.83.0
!
address-family ipv4 vrf vpn_1 version 2
redistribute bgp 65000 metric transparent network 192.168.3.0
no auto-summary exit-address-family
!
router bgp 65000
no synchronization
bgp log-neighbor-changes
neighbor 204.134.83.1 remote-as 65000 neighbor 204.134.83.1 update-source Loopback0 neighbor 204.134.83.1 next-hop-self
no auto-summary
!
address-family ipv4 vrf vpn_1 redistribute rip
no auto-summary
no synchronization exit-address-family
!
address-family vpnv4
neighbor 204.134.83.1 activate
neighbor 204.134.83.1 send-community both no auto-summary
exit-address-family
!
ip classless
no ip http server
!
!
!
Copyright ©2002 SYBEX, Inc., Alameda, CA |
www.sybex.com |
MP-IBGP Configuration Example 189
line con 0 exec-timeout 0 0 privilege level 15 logging synchronous transport input none
ip netmask-format decimal line aux 0
line vty 0 4 privilege level 15 password cisco logging synchronous login
ip netmask-format decimal
!
end
Atlanta Running-Config
By viewing the running-config of the Atlanta POP router, you can see that I-BGP is configured:
Atlanta#show running-config
Building configuration...
Current configuration : 1972 bytes
!
version 12.1
service timestamps debug uptime service timestamps log uptime no service password-encryption
!
hostname Atlanta
!
enable password cisco
!
!
!
!
!
Copyright ©2002 SYBEX, Inc., Alameda, CA |
www.sybex.com |
190 Chapter 5 MPLS VPNs
memory-size iomem 25 ip subnet-zero
ip tcp synwait-time 5 no ip domain-lookup
!
!
ip vrf vpn_1 rd 65000:1
route-target export 65000:1 route-target import 65000:1
ip cef
cns event-service server
!
!
!
!
!
interface Loopback0
ip address 204.134.83.1 255.255.255.255
!
interface Serial0/0
description *** Link to Core Router ***
ip address 204.134.83.5 255.255.255.252 tag-switching ip
no fair-queue clockrate 64000
!
interface Serial0/1
description *** Link to Peer1 ***
no ip address shutdown clockrate 64000
!
interface Serial0/2 no ip address shutdown
clockrate 64000
!
Copyright ©2002 SYBEX, Inc., Alameda, CA |
www.sybex.com |
MP-IBGP Configuration Example 191
interface Serial0/3 no ip address shutdown
clockrate 64000
!
interface Ethernet1/0 no ip address shutdown
!
interface Ethernet1/1 no ip address shutdown
!
interface Ethernet1/2 no ip address shutdown
!
interface Ethernet1/3 no ip address shutdown
!
router rip version 2
network 204.134.83.0
!
address-family ipv4 vrf vpn_1 version 2
redistribute bgp 65000 metric transparent network 192.168.3.0
no auto-summary exit-address-family
!
router bgp 65000
no synchronization
bgp log-neighbor-changes
neighbor 204.134.83.3 remote-as 65000
Copyright ©2002 SYBEX, Inc., Alameda, CA |
www.sybex.com |
192 Chapter 5 MPLS VPNs
neighbor 204.134.83.3 update-source Loopback0 neighbor 204.134.83.3 next-hop-self
no auto-summary
!
address-family ipv4 vrf vpn_1 redistribute rip
no auto-summary
no synchronization exit-address-family
!
address-family vpnv4
neighbor 204.134.83.3 activate
neighbor 204.134.83.3 send-community both no auto-summary
exit-address-family
!
ip classless
no ip http server
!
!
!
line con 0 exec-timeout 0 0 privilege level 15 logging synchronous transport input none
ip netmask-format decimal line aux 0
line vty 0 4 privilege level 15 password cisco logging synchronous login
ip netmask-format decimal
!
end
Copyright ©2002 SYBEX, Inc., Alameda, CA |
www.sybex.com |