0% found this document useful (0 votes)
223 views13 pages

MPLS Lab Scenario

The document provides configuration steps for deploying MPLS and MPLS VPN on a network. It describes 4 main steps: 1. Configuring interior routing protocol connectivity between all routers to establish baseline reachability. 2. Enabling MPLS on all PE, P, and RR routers by activating CEF and configuring MPLS on interfaces. 3. Enabling MPLS VPNs by defining VRFs on PE routers for each VPN, configuring BGP to exchange routing information between PE routers for each VPN. 4. Configuring end to end VPN services by defining route targets to control distribution of routes between VPNs, and configuring trunks between PE and CE routers for customer connectivity

Uploaded by

Rasyidi Usman
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
223 views13 pages

MPLS Lab Scenario

The document provides configuration steps for deploying MPLS and MPLS VPN on a network. It describes 4 main steps: 1. Configuring interior routing protocol connectivity between all routers to establish baseline reachability. 2. Enabling MPLS on all PE, P, and RR routers by activating CEF and configuring MPLS on interfaces. 3. Enabling MPLS VPNs by defining VRFs on PE routers for each VPN, configuring BGP to exchange routing information between PE routers for each VPN. 4. Configuring end to end VPN services by defining route targets to control distribution of routes between VPNs, and configuring trunks between PE and CE routers for customer connectivity

Uploaded by

Rasyidi Usman
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 13

MPLS VPN Lab exercise Indosat

DEPLOYING MPLS - CONFIGURATION STEPS

(1) Configuring Interior Routing Protocol Connectivity

1. Configure all router with IP addresses according to the diagram


Command :
Config terminal
(config)#Interface <interface name>
(config-interface)#ip address <interface IP address> <netmask>

2. Configure OSPF routing protocol on all PE,P and RR routers (if available)
Command :
Config terminal
(config)#router ospf <process id>
(config-router)#router id <loopback address>
(config-router)#network <interface network> <wildcard> area 0

3. Inject loopback address into OSPF routing process


Command :
Config terminal
(config)#router ospf <process id>
(config-router)#network 10.0.x.y 0.0.0.0 area 0

4. Verify connectivity
Command :
Show ip route
Show cdp neighbor
Ping
Traceroute

(2) Enabling MPLS on the Network

1. Activate CEF Feature on all PE,P,and RR routers


Command :
Config terminal
(config)#ip cef

2. Configure tag-switching/MPLS on router global configuration and interfaces


facing to the core, and interface loopback
Command :
Config terminal
(config)#mpls label protocol ldp <optional>
(config)#interface <interface name>
(config-interface)#mpls ip

3. Verify MPLS configuration


Command :
Show mpls label range
MPLS VPN Lab exercise Indosat
Show mpls interface
Show mpls ldp discovery
Show mpls ldp neighbor
Show mpls ip binding

(3) Enabling MPLS VPN on the Network

1. Define VRF for each VPN on PE routers


Command (example on PE-1):
(config)#ip vrf white
(config-vrf)#rd 111:200
(config-vrf)#exit
(config)#interface <interface name> Interface to CE
(config-if)# ip vrf forwarding white
(config-if)# ip address 10.0.x.y 255.255.255.252
(config-if)#exit
(config)#
(config)#ip vrf black
(config-vrf)#rd 100:100
(config-vrf)#exit
(config)#interface <interface name> Interface to CE
(config-if)# ip vrf forwarding black
(config-if)# ip address 10.0.x.y 255.255.255.252
(config-if)#exit
(config)#

2. Configuring BGP , each PE peers to other PEs loopback address


Command (example on PE1):
(config)# router bgp 111
neighbor 10.0.2.2 remote-as 100
neighbor 10.0.2.2 update-source Loopback0
address-family ipv4 vrf white
redistribute connected
redistribute static
address-family ipv4 vrf black
redistribute connected
redistribute static
exit-address-family
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
exit-address-family

3. Verify VRF configuration


Command :
show ip route vrf <name> ..
show ip cef vrf <name>
show ip bgp vpnv4 [ vrf <name> | all
show ip vrf detail
MPLS VPN Lab exercise Indosat
show ip bgp neighbor

(4) Configuring End to End VPN Services

PE side :
1. Define the route target for every VPN on every PE routers
Command (example on PE-1):
(config)#ip vrf black
(config-vrf)# route-target export 100:2
(config-vrf)# route-target import 100:2
(config)#ip vrf white
(config-vrf)# route-target both 100:1

2. Exchange the route target with destination vrf on other PE router


Command (example on PE-2) :
(config)#ip vrf black
(config-vrf)# route-target import 100:2
(config-vrf)# route-target export 100:2
on PE-1 :
(config)#ip vrf white
(config-vrf)# route-target both 100:1

3. Verify the result


Command :
show ip route vrf <name> ..
show ip cef vrf <name>
show ip bgp vpnv4 [ vrf <name> | all
show ip vrf detail
show ip bgp neighbor
PE to CE :

1. Configuring trunk between PE and CE


a. PE configuration
(config) interface Fastethernet0/0
(config-if) no ip address
(config-if) exit
(config) interface Fastethernet0/0.1
(config-subif) encapsulation dot1q 1
(config-subif) ip address <ip address> <netmask>
b. Switch Configuration
(config) interface Fastethernet0/1
(config-if) switchport trunk encapsulation dot1q
(config-if) switchport mode trunk
(config-if) end

2. Configuring vlan on switch


(switch)# vlan database
(vlan)# vlan 1 state active
(vlan)# vlan 2 state active
(vlan)# exit
MPLS VPN Lab exercise Indosat
(switch)# show vlan
(switch)# show vlan brief

3. Verify VLAN and PE to CE connectivity


(config)# interface vlan 1
(config-if)# ip address 10.0.x.y <netmask>
(config-if)# end
(router/switch)# ping 10.0.x.y from and to PE and CE IP
address
(router/switch)# show ip interface brief

==============================================================
==============================================================

Script Configuration for R1

Setting Multi Protocol BGP full mesh


==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.3.3 activate
neighbor 10.0.3.3 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router


MPLS VPN Lab exercise Indosat
=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer


=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black


redistribute connected
!
address-family ipv4 vrf white
redistribute connected

Script Configuration for R2

Setting Multi Protocol BGP full mesh


==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
MPLS VPN Lab exercise Indosat
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.3.3 activate
neighbor 10.0.3.3 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router


=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer


=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111


MPLS VPN Lab exercise Indosat
address-family ipv4 vrf black
redistribute connected
!
address-family ipv4 vrf white
redistribute connected

Script Configuration for R3

Setting Multi Protocol BGP full mesh


==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router


=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
MPLS VPN Lab exercise Indosat
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer


=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black


redistribute connected
!
address-family ipv4 vrf white
redistribute connected

Script Configuration for R4

Setting Multi Protocol BGP full mesh


==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
MPLS VPN Lab exercise Indosat
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.3.3 activate
neighbor 10.0.3.3 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router


=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer


=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black


redistribute connected
!
address-family ipv4 vrf white
redistribute connected
MPLS VPN Lab exercise Indosat
!

Script Configuration for R5

Setting Multi Protocol BGP full mesh


==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.3.3 activate
neighbor 10.0.3.3 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router


=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!
MPLS VPN Lab exercise Indosat

Assign VPN di interface ke arah customer


=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black


redistribute connected
!
address-family ipv4 vrf white
redistribute connected

Script Configuration for R6

Setting Multi Protocol BGP full mesh


==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.3.3 activate
MPLS VPN Lab exercise Indosat
neighbor 10.0.3.3 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
exit-address-family
!

Create VPN di setiap router


=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer


=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black


redistribute connected
!
address-family ipv4 vrf white
redistribute connected

!
MPLS VPN Lab exercise Indosat

You might also like