*********************************** Intra-AS MPLS VPN *********************************** ++++++++++++++++++++++++++++++++++++++ Steps ++++++++++++++++++++++++++++++++++++++ 1. Configure the SP IGP - Underlay Routing [EIGRP,OSPF,IS-IS] 2. Configure MPLS Unicast Routing (LDP) within the SP 3. Configure a MP-BGP relationship between the PE Routers 4. Configure the PE Router [VRF Definition, Interface Configuration, Routing Protocol (PE-CE)] 5. Configure the CE Router with Normal PE-CE Routing Protocol ********************************************** Lab 1 - Configure the Underlay Routing ********************************************** ---- R1 ---- router ospf 1 router-id 0.0.0.1 network 192.1.12.0 0.0.0.255 area 0 network 1.0.0.0 0.255.255.255 area 0 ! Interface Loopback 0 ip address 1.1.1.1 255.255.255.255 ---- R2 ---- router ospf 1 router-id 0.0.0.2 network 192.1.12.0 0.0.0.255 area 0 network 192.1.23.0 0.0.0.255 area 0 network 2.0.0.0 0.255.255.255 area 0 ! Interface Loopback 0 ip address 2.2.2.2 255.255.255.255 ---- R3 ---- router ospf 1 router-id 0.0.0.3 network 192.1.34.0 0.0.0.255 area 0 network 192.1.23.0 0.0.0.255 area 0 network 3.0.0.0 0.255.255.255 area 0 ! Interface Loopback 0 ip address 3.3.3.3 255.255.255.255 ---- R4 ---- router ospf 1 router-id 0.0.0.4 network 192.1.34.0 0.0.0.255 area 0 network 4.0.0.0 0.255.255.255 area 0 ! Interface Loopback 0 ip address 4.4.4.4 255.255.255.255 ************************************************************** Lab # 2 - Configure MPLS Unicast Routing (LDP) within the SP ************************************************************** ---- R1 ---- mpls ldp router-id loopback0 ! interface E 0/0 mpls ip ---- R2 ---- mpls ldp router-id loopback0 ! interface E 0/0 mpls ip ! interface E 0/1 mpls ip ---- R3 ---- mpls ldp router-id loopback0 ! interface E 0/0 mpls ip ! interface E 0/1 mpls ip ---- R4 ---- mpls ldp router-id loopback0 ! interface E 0/0 mpls ip ****************************************************************** Lab # 3 - Configure a MP-BGP relationship between the PE Routers ****************************************************************** ---- R1 ---- router bgp 1000 neighbor 4.4.4.4 remote-as 1000 neighbor 4.4.4.4 update-source loopback0 ! address-family vpnv4 neighbor 4.4.4.4 activate ---- R4 ---- router bgp 1000 neighbor 1.1.1.1 remote-as 1000 neighbor 1.1.1.1 update-source loopback0 ! address-family vpnv4 neighbor 1.1.1.1 activate ****************************************************************** Lab # 4 - Configure the PE Router ****************************************************************** ---- R1 ---- vrf definition GREEN rd 1000:1 address-family ipv4 route-target export 1:1 route-target import 1:2 ! vrf definition ORANGE rd 1000:2 address-family ipv4 route-target both 1000:2 ! Interface E 0/1 vrf forwarding GREEN ip address 192.1.15.1 255.255.255.0 no shut ! Interface E 0/2 vrf forwarding ORANGE ip address 192.1.16.1 255.255.255.0 no shut ! router eigrp 1 address-family ipv4 vrf GREEN autonomous-system 111 network 192.1.15.0 redistribute bgp 1000 metric 10 10 10 10 10 ! router ospf 67 vrf ORANGE network 192.1.16.0 0.0.0.255 area 0 redistribute bgp 1000 ! router bgp 1000 address-family ipv4 vrf GREEN redistribute eigrp 111 address-family ipv4 vrf ORANGE redistribute ospf 67 ---- R4 ---- vrf definition GREEN rd 1000:44 address-family ipv4 route-target export 1:2 route-target import 1:1 ! vrf definition ORANGE rd 1000:2 address-family ipv4 route-target both 1000:2 ! Interface E 0/2 vrf forwarding GREEN ip address 192.1.48.4 255.255.255.0 no shut ! Interface E 0/1 vrf forwarding ORANGE ip address 192.1.47.4 255.255.255.0 no shut ! router eigrp 1 address-family ipv4 vrf GREEN autonomous-system 111 network 192.1.48.0 redistribute bgp 1000 metric 10 10 10 10 10 ! router ospf 67 vrf ORANGE network 192.1.47.0 0.0.0.255 area 0 redistribute bgp 1000 ! router bgp 1000 address-family ipv4 vrf GREEN redistribute eigrp 111 address-family ipv4 vrf ORANGE redistribute ospf 67 ********************************************************************** Lab # 5 -Configure the CE Router with Normal PE-CE Routing Protocol ********************************************************************** ---- R5 ---- Interface loopback 1 ip address 10.1.1.1 255.255.255.0 ! Interface loopback 0 ip address 10.5.5.5 255.255.255.0 ! Interface E 0/0 ip address 192.1.15.5 255.255.255.0 no shut ! router eigrp 111 network 192.1.15.0 network 10.0.0.0 ---- R8 ---- Interface loopback 1 ip address 10.2.2.2 255.255.255.0 ! Interface loopback 0 ip address 10.8.8.8 255.255.255.0 ! Interface E 0/0 ip address 192.1.48.8 255.255.255.0 no shut ! router eigrp 111 network 192.1.48.0 network 10.0.0.0 ---- R6 ---- Interface loopback 1 ip address 10.1.1.1 255.255.255.0 ! Interface loopback 0 ip address 10.6.6.6 255.255.255.0 ! Interface E 0/0 ip address 192.1.16.6 255.255.255.0 no shut ! router ospf 1 network 192.1.16.0 0.0.0.255 area 0 network 10.0.0.0 0.255.255.255 area 0 ---- R7 ---- Interface loopback 1 ip address 10.2.2.2 255.255.255.0 ! Interface loopback 0 ip address 10.7.7.7 255.255.255.0 ! Interface E 0/0 ip address 192.1.47.7 255.255.255.0 no shut ! router ospf 1 network 192.1.47.0 0.0.0.255 area 0 network 10.0.0.0 0.255.255.255 area 0 Note: If you want to conserve Lables for MPLS VPN Customer routes, use the following to assign a single label for all routes in a VRF ********************************************************************** Lab # 6 - Configuring MPLS Super backbone for OSPF - Domain-ID ********************************************************************** --------------------------------------------- 1. Change the Process ID on R4 for ORANGE --------------------------------------------- ---- R4 ---- no router ospf 67 router ospf 77 vrf ORANGE redistribute bgp 1000 subnets network 192.1.47.0 0.0.0.255 area 0 ! router bgp 1000 ! address-family ipv4 vrf ORANGE redistribute ospf 77 ------------------------------------------------- 2. Configur a common Domain-ID for the OSPF VRF ------------------------------------------------- ---- R1 ---- router ospf 67 domain-id 0.0.0.100 ---- R4 ---- router ospf 77 domain-id 0.0.0.100 ********************************************************************** Lab # 7 - Configuring a Sham Link ********************************************************************** ------------------------------------------------ 1. Configure the Backdoor Link between R6 & R7 ------------------------------------------------ ---- R6 ---- Interface E 0/1 ip address 10.67.67.6 255.255.255.0 ip ospf cost 1000 no shut ---- R7 ---- Interface E 0/1 ip address 10.67.67.7 255.255.255.0 ip ospf cost 1000 no shut ------------------------------------------------ 2. Configure a Sham Link between the PE Routers ------------------------------------------------ ---- R1 ---- Interface Loopback99 vrf forwarding ORANGE ip address 10.99.99.1 255.255.255.255 ! router bgp 1000 ! address-family ipv4 vrf ORANGE network 10.99.99.1 mask 255.255.255.255 ! router ospf 67 area 0 sham-link 10.99.99.1 10.99.99.4 ---- R4 ---- Interface Loopback99 vrf forwarding ORANGE ip address 10.99.99.4 255.255.255.255 ! router bgp 1000 ! address-family ipv4 vrf ORANGE network 10.99.99.4 mask 255.255.255.255 ! router ospf 77 area 0 sham-link 10.99.99.4 10.99.99.1 **************************************************** Lab 8 - Configure the Underlay Routing/LDP/MP-BGP **************************************************** ================================================== 1. Configure the Underlay IGP ================================================== ---- R1 ---- router ospf 1 router-id 0.0.0.1 network 192.1.12.0 0.0.0.255 area 0 network 1.0.0.0 0.255.255.255 area 0 ! Interface Loopback 0 ip address 1.1.1.1 255.255.255.255 ---- R2 ---- router ospf 1 router-id 0.0.0.2 network 192.1.12.0 0.0.0.255 area 0 network 192.1.23.0 0.0.0.255 area 0 network 2.0.0.0 0.255.255.255 area 0 ! Interface Loopback 0 ip address 2.2.2.2 255.255.255.255 ---- R3 ---- router ospf 1 router-id 0.0.0.3 network 192.1.34.0 0.0.0.255 area 0 network 192.1.23.0 0.0.0.255 area 0 network 3.0.0.0 0.255.255.255 area 0 ! Interface Loopback 0 ip address 3.3.3.3 255.255.255.255 ---- R4 ---- router ospf 1 router-id 0.0.0.4 network 192.1.34.0 0.0.0.255 area 0 network 4.0.0.0 0.255.255.255 area 0 ! Interface Loopback 0 ip address 4.4.4.4 255.255.255.255 ================================================== 2. Configure LDP ================================================== ---- R1 ---- mpls ldp router-id loopback0 ! interface E 0/0 mpls ip ---- R2 ---- mpls ldp router-id loopback0 ! interface E 0/0 mpls ip ! interface E 0/1 mpls ip ---- R3 ---- mpls ldp router-id loopback0 ! interface E 0/0 mpls ip ! interface E 0/1 mpls ip ---- R4 ---- mpls ldp router-id loopback0 ! interface E 0/0 mpls ip ================================================== 3. Configure MP-BGP ================================================== ---- R1 ---- router bgp 1000 neighbor 4.4.4.4 remote-as 1000 neighbor 4.4.4.4 update-source loopback0 ! address-family vpnv4 neighbor 4.4.4.4 activate ---- R4 ---- router bgp 1000 neighbor 1.1.1.1 remote-as 1000 neighbor 1.1.1.1 update-source loopback0 ! address-family vpnv4 neighbor 1.1.1.1 activate ****************************************************************** Lab # 9 - Configure BGP for VRF GREEN ****************************************************************** ================================================== 1. Configure the PE Routers ================================================== ---- R1 ---- vrf definition GREEN rd 1000:1 address-family ipv4 route-target both 1000:1 ! Interface E 0/1 vrf forwarding GREEN ip address 192.1.15.1 255.255.255.0 no shut ! router bgp 1000 address-family ipv4 vrf GREEN neighbor 192.1.15.5 remote-as 65001 ---- R4 ---- vrf definition GREEN rd 1000:1 address-family ipv4 route-target both 1000:1 ! Interface E 0/2 vrf forwarding GREEN ip address 192.1.48.4 255.255.255.0 no shut ! router bgp 1000 address-family ipv4 vrf GREEN neighbor 192.1.48.8 remote-as 65001 ================================================== 2. Configure the CE Routers ================================================== ---- R5 ---- Interface loopback 1 ip address 10.1.1.1 255.255.255.0 ! Interface loopback 0 ip address 10.5.5.5 255.255.255.0 ! Interface E 0/0 ip address 192.1.15.5 255.255.255.0 no shut ! router bgp 65001 neighbor 192.1.15.1 remote-as 1000 network 10.1.1.0 mask 255.255.255.0 network 10.5.5.0 mask 255.255.255.0 ---- R8 ---- Interface loopback 1 ip address 10.2.2.2 255.255.255.0 ! Interface loopback 0 ip address 10.8.8.8 255.255.255.0 ! Interface E 0/0 ip address 192.1.48.8 255.255.255.0 no shut ! router bgp 65001 neighbor 192.1.48.4 remote-as 1000 network 10.2.2.0 mask 255.255.255.0 network 10.8.8.0 mask 255.255.255.0 ===================================================== 3. Configuring the AS-Override option on the PE (R4) ===================================================== ---- R4 ---- router bgp 1000 address-family ipv4 vrf GREEN neighbor 192.1.48.8 as-override ===================================================== 4. Configuring the Allowas-in option on the CE (R5) ===================================================== ---- R5 ---- router bgp 65001 neighbor 192.1.15.1 allowas-in ****************************************************************** Lab # 10 - Configure IS-IS for VRF ORANGE ****************************************************************** ================================================== 1. Configure the PE Routers ================================================== ---- R1 ---- vrf definition ORANGE rd 1000:2 address-family ipv4 route-target both 1000:2 ! Interface E 0/2 vrf forwarding ORANGE ip address 192.1.16.1 255.255.255.0 no shut ! router isis vrf ORANGE net 49.0000.0000.0000.0001.00 is-type level-2 metric-style wide redistribute bgp 1000 ! Interface E 0/2 ip router isis ! router bgp 1000 address-family ipv4 vrf ORANGE redistribute isis ---- R4 ---- vrf definition ORANGE rd 1000:2 address-family ipv4 route-target both 1000:2 ! Interface E 0/1 vrf forwarding ORANGE ip address 192.1.47.4 255.255.255.0 no shut ! router isis vrf ORANGE net 49.0000.0000.0000.0004.00 is-type level-2 metric-style wide redistribute bgp 1000 ! Interface E 0/1 ip router isis ! router bgp 1000 address-family ipv4 vrf ORANGE redistribute isis ================================================== 2. Configure the CE Routers ================================================== ---- R6 ---- router isis net 49.0000.0000.0000.0006.00 is-type level-2 metric-style wide ! Interface loopback 1 ip address 10.1.1.1 255.255.255.0 ip router isis ! Interface loopback 0 ip address 10.6.6.6 255.255.255.0 ip router isis ! Interface E 0/0 ip address 192.1.16.6 255.255.255.0 ip router isis no shut ---- R7 ---- router isis net 49.0000.0000.0000.0007.00 is-type level-2 metric-style wide ! Interface loopback 1 ip address 10.2.2.2 255.255.255.0 ip router isis ! Interface loopback 0 ip address 10.7.7.7 255.255.255.0 ip router isis ! Interface E 0/0 ip address 192.1.47.7 255.255.255.0 ip router isis no shut