Got it

Inter-AS VPN Option C (Solution 1) Highlighted

Latest reply: Jul 11, 2021 17:08:25 3591 10 5 0 1

Hey there,

The following is an eNSP experiment of Inter-AS VPN Option C (Solution 1). The eNSP project is in the attachment. If you have any questions, please feel free to comment. Thank you!


Topology

Inter-AS VPN Option C (Solution 1)


The core of the Option C solution is to enable PEs/RRs in different MPLS domains to establish EBGP peer relationships and transmit data through labels.

The key configuration of solution 1 is to create policies on the ABSR to allocate BGP labels to the PE/RR in the local domain and the peer ASBR.

The below is the Main configuration (Configurations on the left and right MPLS domains are symmetrical. The following shows only the configuration on the left. . For all the configuration, please see the attachment.):

R1(PE)

#

ip vpn-instance A

 ipv4-family

  route-distinguisher 100:1

  vpn-target 100:1 export-extcommunity

  vpn-target 100:1 import-extcommunity

#

ip vpn-instance B

 ipv4-family

  route-distinguisher 100:2

  vpn-target 100:2 export-extcommunity

  vpn-target 100:2 import-extcommunity

#

mpls lsr-id 1.1.1.1

mpls

#

mpls ldp

#

interface GigabitEthernet0/0/0

 ip address 10.1.12.1 255.255.255.0 

 mpls

 mpls ldp

#

interface GigabitEthernet0/0/1

 ip binding vpn-instance A

 ip address 10.1.17.1 255.255.255.0 

#

interface GigabitEthernet0/0/2

 ip binding vpn-instance B

 ip address 10.1.18.1 255.255.255.0 

#

interface GigabitEthernet2/0/0

 ip address 10.1.13.1 255.255.255.0 

 mpls

 mpls ldp

#

interface LoopBack0

 ip address 1.1.1.1 255.255.255.255 

#

bgp 100

 peer 2.2.2.2 as-number 100 

 peer 2.2.2.2 connect-interface LoopBack0

 #

 ipv4-family unicast

  undo synchronization

  peer 2.2.2.2 enable

  peer 2.2.2.2 label-route-capability

 # 

 ipv4-family vpnv4

  policy vpn-target

  peer 2.2.2.2 enable

 #

 ipv4-family vpn-instance A 

  peer 10.1.17.7 as-number 1 

 #

 ipv4-family vpn-instance B 

  import-route ospf 1

#

ospf 1 vpn-instance B

 import-route bgp

 area 0.0.0.0 

  network 10.1.18.1 0.0.0.0 

#

rip 1

 version 2

 network 10.0.0.0

 network 1.0.0.0

#

--------------------------------------------

RR1

#

mpls lsr-id 2.2.2.2

mpls

#

mpls ldp

#

interface GigabitEthernet0/0/0

 ip address 10.1.12.2 255.255.255.0 

 mpls

 mpls ldp

#

interface GigabitEthernet0/0/1

 ip address 10.1.23.2 255.255.255.0 

 mpls

 mpls ldp

#

interface LoopBack0

 ip address 2.2.2.2 255.255.255.255 

#

bgp 100

 peer 1.1.1.1 as-number 100 

 peer 1.1.1.1 connect-interface LoopBack0

 peer 3.3.3.3 as-number 100 

 peer 3.3.3.3 connect-interface LoopBack0

 peer 5.5.5.5 as-number 200 

 peer 5.5.5.5 ebgp-max-hop 100 

 peer 5.5.5.5 connect-interface LoopBack0

 #

 ipv4-family unicast

  undo synchronization

  peer 1.1.1.1 enable

  peer 1.1.1.1 reflect-client

  peer 1.1.1.1 label-route-capability

  peer 3.3.3.3 enable

  peer 3.3.3.3 reflect-client

  peer 3.3.3.3 label-route-capability

  peer 5.5.5.5 enable

  peer 5.5.5.5 label-route-capability

 # 

 ipv4-family vpnv4

  undo policy vpn-target

  peer 1.1.1.1 enable

  peer 1.1.1.1 reflect-client

  peer 1.1.1.1 next-hop-invariable 

  peer 5.5.5.5 enable

  peer 5.5.5.5 next-hop-invariable 

#

rip 1

 version 2

 network 10.0.0.0

 network 2.0.0.0

#

----------------------------------------------------------

R3(ASBR)

#

mpls lsr-id 3.3.3.3

mpls

#

mpls ldp

#

interface GigabitEthernet0/0/0

 ip address 34.34.34.3 255.255.255.0 

 mpls

#

interface GigabitEthernet0/0/1

 ip address 10.1.23.3 255.255.255.0 

 mpls

 mpls ldp

#

interface GigabitEthernet2/0/0

 ip address 10.1.13.3 255.255.255.0 

 mpls

 mpls ldp

#

interface LoopBack0

 ip address 3.3.3.3 255.255.255.255 

#

bgp 100

 peer 2.2.2.2 as-number 100 

 peer 2.2.2.2 connect-interface LoopBack0

 peer 34.34.34.4 as-number 200 

 #

 ipv4-family unicast

  network 1.1.1.1 255.255.255.255 

  network 2.2.2.2 255.255.255.255 

  peer 2.2.2.2 enable

  peer 2.2.2.2 route-policy rr export

  peer 2.2.2.2 label-route-capability

  peer 34.34.34.4 enable

  peer 34.34.34.4 route-policy asbr export

  peer 34.34.34.4 label-route-capability

 # 

rip 1

 version 2

 network 3.0.0.0

 network 10.0.0.0

#

route-policy asbr permit node 10 

 apply mpls-label

#

route-policy rr permit node 10 

 if-match mpls-label 

 apply mpls-label

#

This article contains more resources

You need to log in to download or view. No account? Register

x

Good post but attached file still auditing status :)
View more
  • x
  • convention:

Learned, well done
View more
  • x
  • convention:

thank you for sharing
View more
  • x
  • convention:

AliBinHussain
AliBinHussain Created Mar 13, 2021 19:01:26 (0) (0)
 
AliBinHussain
AliBinHussain Created Mar 13, 2021 19:01:32 (0) (0)
 
well done
View more
  • x
  • convention:

thanks!
View more
  • x
  • convention:

Nice info.
View more
  • x
  • convention:

Inter-AS VPN Option C (Solution 1)-3949365-1
View more
  • x
  • convention:

andersoncf1
MVE Author Created Jul 11, 2021 17:08:25

Thanks for sharing knowledge. This is fantastic for me
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.