MPLS VPN Configurations

8/8/2019 MPLS VPN Configurations
1/101
1CQFE rev17 Russ Davis 1999, Cisco Systems, Inc.
MPLS VPN Configurations
Khalid Raza
MPLS VPN Configurations
Khalid Raza

2/101
2CQFE rev14 Russ Davis 1999, Cisco Systems, Inc. www.Cisco.com
AgendaAgenda
Introduction to VPNs concepts
VPN definitions
Types of VPNs (Overlay/Peer)
Comparison between Overlay and Peermodel
Benefits for MPLS VPNs

3/101
AgendaAgenda
Idea behind VRF, RD, RT
Route propagation in MP-BGP
Routing between PE-CE
MPLS Packet Forwarding

4/101
AgendaAgenda
MPLS configuration
VRF
MP-BGP
PE-CE configuration
Advance configuration

5/101
AgendaAgenda
MPLS topologies VPN connectivity
Design considerations
Deployment strategies

6/101
VPN/MPLS ConceptsVPN/MPLS Concepts
VPN
Concept is to use the service providers sharedresources connecting multiple customer sites
Technologies such as X.25, Frame-relay which usevirtual circuits to establish end-to-end connectionusing shared service of the provider infrastructure
This statistical sharing of resources enables theservice provider to offer low cost services to theend user

7/101
VPN Terminology
Provider Network (P-Network)
The backbone under control of a Service
Provider
Customer Network (C-Network)
Network under customer control
CE routerCustomer Edge router. Part of the C-
network and interfaces to a PE router

8/101
VPN Terminology
Site
Set of (sub)networks part of the C-network and co-located
A site is connected to the VPN backbonethrough one or more PE/CE links
PE router
Provider Edge router. Part of the P-Network and interfaces to CE routers
P router
Provider (core) router, without knowledge
of VPN

9/101
Service Provider Network
Provider Edge
(PE) device
Provider Edge
(PE) device
VPN Site
VPN Site
VPN TerminologyVPN Terminology
CPE (CE)
Device
CPE (CE)
Device
Provider core
(P) device

10/101
Types of VPNsTypes of VPNs
VPN services are offered in two majorways
Overlay Model where the service providerprovides the virtual connections between sites
Peer model where the service providerparticipates in the layer routing of the customer

11/101
VPN Overlay ModelVPN Overlay Model
Service provider network is a connection
of point-to-point links Routing within the customer network is
transparent to the service providernetwork
Service provider is responsible purely fordata transport between customer sites

12/101
Layer 1 implementation (IP, HDLC,
PPP (customer) - provider gives bitpipes only
Layer 2 implementation - serviceprovider responsible for L2 VC viaATM, Frame-relay

13/101
Provider Edge
(PE) device
Provider Edge
(PE) device
VPN Site VPN Site
Virtual Circuit
CPE (CE)
Device
CPE (CE)
Device
Layer-3 Routing Adjacency

14/101
VPN Peer Model
Both provider and customer network usesame network protocol
CE and PE routers have a routing
adjacency at each site All provider routers hold the full routing
information about all customer networks
Private addresses are not allowed May use the virtual router capability
Multiple routing and forwarding tablesbased on Customer Networks

15/101
Provider Edge
(PE) Router
Provider Edge
(PE) Router
VPN Site VPN Site
CPE (CE)
Router
CPE (CE)
Router
VPN Peer-to-Peer ModelVPN Peer-to-Peer Model

16/101
VPN Peer ModelVPN Peer Model
Peer model used two types ofapproach
Shared router
Dedicated router

17/101
Shared router
Where a common router was used, extensivepacket filtering is used on the PE router toisolate customer
Service provider allocated addresses out of itsspace to the customer and managed the packetfilter to ensure same customer reachability,
and isolation between customers.High maintenance cost associated with packetfilters
Performance impact due to packet filtering

18/101
Peer-to-Peer ModelShared Router Approach
Peer-to-Peer ModelShared Router Approach
PE
CE
VPN-A
VPN-B
CEVPN-C
CE
Shared router approach with complex filters
Paris
London
Munich
interface Serial0/1
description ** interface to VPN-A customer
ip address 192.168.61.6 255.255.255.252ip access-group VPN-A inip access-group VPN-A out
!interface Serial0/2
description ** interface to VPN-B customerip address 192.168.61.9 255.255.255.252
ip access-group VPN-B inip access-group VPN-B out
!interface Serial0/3
description ** interface to VPN-C customerip address 192.168.62.6 255.255.255.252
ip access-group VPN-C inip access-group VPN-C out
PE Routing TableVPN-A routesVPN-B routes
VPN-C routes

19/101
Dedicated router
Customer isolation is achieved via dedicatedrouters connected to customer
POP edge router filter routing updates betweendifferent provider edge routers
Route filtering is achieved via BGPCommunities
Not cost effective

20/101
Peer-to-Peer ModelDedicated Router Approach
Peer-to-Peer ModelDedicated Router Approach
VPN-A PE
CE
VPN-A
VPN-B
CE
Dedicated router approach expensive to deploy
Paris
London
P Routing TableVPN-A routes (community 111:1)
VPN-B routes (community 111:2)
VPN-B PE
P Router CE VPN-A
Brussels
VPN-A routes ONLYVPN-B
router bgp 111
neighbor 10.13.1.2 remote-as 111
neighbor 10.13.1.2 route-reflector-client
neighbor 10.13.1.2 route-map VPN-A out
!
route-map VPN-A permit 10
match community-list 75
!
ip community-list 75 permit 111:1

21/101
Comparison Betweenthe Two Models
Overlay Model
Easy to implement
No knowledge ofcustomer routing
Isolation betweenthe two network
Peer Model
Optimal routing
Easy to provisionadditional VPNsthrough site
provisioning - noneed for linkprovisioning

22/101
Overlay Model
Optimal routing betweensites requires full mesh
Bandwidth provisioning
Virtual circuits have tobe manually configured
Peer Model
Customerconvergence isdepended on SProuting convergence
Lot of routes withthe providernetworks causesscalability problems

23/101
Benefits of MPLS VPNsBenefits of MPLS VPNs
Best of both worlds
PE participates in routing so y

MPLS VPN Configurations

Text of MPLS VPN Configurations

MPLS L3 vpn

MPLS and VPN Ar Press MPLS and VPN... · PDF file Migration of VPN Sites onto the MPLS/VPN Solution Summary A. Tag-switching and MPLS Command Reference About the Authors Jim Guichard

Mpls vpn toi

GRE VPN Mpls

MPLS VPN MPLS VPN - · PDF fileMPLS VPN • MPLS VPNs are enhancement to MPLS • MPLS uses a virtual circuit (VC) across a private network to lt th VPN f it V PN emulate the VPN function

MPLS VPN - · PDF fileMPLS VPN • MPLS VPNs are enhancement to MPLS • MPLS uses a virtual circuit (VC) across a private network to lt th VPN f it V PN emulate the VPN function

MPLS VPN. MPLS/BGP VPNs Goals MPLS/BGP VPN Features Implementation Conclusions

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.24-1 MPLS VPN Technology Introducing MPLS VPN Architecture

Troubleshooting MPLS VPN Networks · PDF file 2019-05-03 · MPLS VPN Control Plane—MPBGP • MPLS VPN is based on RFC2547 • The whole MPLS VPN concept revolves around MP-BGP •

MPLS VPN - HH

MPLS Protocol & Services Interoperability Event ... • VPN - Virtual Private Network • BGP/MPLS VPN - Layer 3 MPLS VPN using BGP-4 • VRF Table - VPN Routing and Forwarding Table

Interas Mpls VPN

86-MPLS VPN 4-6 - TU Wien MPLS VPN Basic VPNs • MPLS VPN Complex VPNs • MPLS VPN Configuration (Cisco) – CE-PE OSPF Routing – CE-PE Static Routing – CE-PE RIP Routing –

VPN-MPLS - OK

MPLS VPN--MIB Support - Cisco MPLS VPN--MIB Support ThisdocumentdescribestheSimpleNetworkManagementProtocol(SNMP)agentsupportinCiscosoftware forMultiprotocolLabelSwitching(MPLS

MPLS VPN - Theseus

ANIRA Customer Presentation MPLS VPN or VPN Tunnel VPN or Hybrid VPN MPLS VPN –AT&T VPN • Network-based VPN where the VPN is defined by the capability of the MPLS network • Connects

MPLS L3 VPN Workbook

VPN, Mpls, Ipsec

MPLS MPLS VPN • MPLS VPNs are enhancement to MPLS • MPLS uses a virtual circuit (VC) across a private network to lt th VPN f it V PN emulate the VPN function. P LS • MPLS alone

MPLS VPN Enterprise

Mpls10s07-Mpls VPN Technology

MPLS VPN - Product Presentation

VPN, MPLS, L2TP, IPsec - rti.etf.bg.ac.rs - VPN, MPLS... · PDF fileVPN, MPLS, L2TP, IPsec dr Pavle ... L2, L3 • Po poverljivosti podataka – Trusted VPN – Secure VPN MPLS tehnologija

RIEDEL Managed MPLS VPN - · PDF fileLeistungsbeschreibung Seite 3 von 14 Riedel Networks Managed MPLS VPN 1 Technische Realisierung des Riedel Managed MPLS VPN 1.1 MPLS MPLS – der

Standortvernetzung – MPLS VPN - rtr.at · PDF fileLeistungsbeschreibung Standortvernetzung – MPLS VPN 3/13 1 EINLEITUNG

MPLS e VPN

VPN Mpls GNS3 Libre

Mpls l3 VPN Tmpll3v001

Fundamentos MPLS VPN