Basic MPLS/VPN with Cisco IOS
This is a quick tutorial for basic MPLS/VPN with Cisco IOS configuration. The tutorial exemplifies basic PE to P to PE configuration on three Cisco 7200s running in GNS3 with IOS. R2 is configured as a route reflector P node and R4, R6 and R3 are PE node route reflector clients. The IGP is OSPF with R2 as the ABR. Loopback1 (Lo1) on R3 & R4 represent a customer VPN (CE) ethernet segment. The loopback 1 interfaces are pushed into the MPLS/VRF named “data” to simulate an Ethernet segment advertised into the VRF.
Basic MPLS/VPN and Multi-Protocol BGP Topology
FIgure 1. MPLS VPN Lab Topology
Cisco IOS MPLS VPN Configuration for 4 routers
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 |
R3#sho run Building configuration... Current configuration : 1297 bytes ! version 12.4 ! hostname R3 ! ip cef ! ! ip vrf data rd 65001:3 route-target export 65001:20 route-target import 65001:20 ! mpls label protocol ldp ! ! ! interface Loopback0 ip address 3.3.3.3 255.255.255.255 ! interface Loopback1 ip vrf forwarding data ip address 6.6.6.6 255.255.255.255 ! interface FastEthernet0/0 no ip address shutdown duplex half ! interface GigabitEthernet1/0 ip address 10.10.10.2 255.255.255.252 negotiation auto mpls ip ! router ospf 101 log-adjacency-changes network 0.0.0.0 255.255.255.255 area 0 ! router bgp 65001 no synchronization bgp log-neighbor-changes neighbor 2.2.2.2 remote-as 65001 neighbor 2.2.2.2 update-source Loopback0 no auto-summary ! address-family vpnv4 neighbor 2.2.2.2 activate neighbor 2.2.2.2 send-community extended exit-address-family ! address-family ipv4 vrf data redistribute connected no synchronization exit-address-family ! ! end |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 |
R4#sho run Building configuration... Current configuration : 1417 bytes ! version 12.4 ! ip cef ! ! ip vrf data rd 65001:4 route-target export 65001:20 route-target import 65001:20 ! ! interface Loopback0 ip address 4.4.4.4 255.255.255.255 ! interface Loopback1 ip vrf forwarding data ip address 8.8.8.8 255.255.255.255 ! interface FastEthernet0/0 no ip address shutdown duplex half ! interface GigabitEthernet1/0 ip address 10.10.11.2 255.255.255.252 negotiation auto mpls ip ! interface GigabitEthernet2/0 no ip address shutdown negotiation auto ! router ospf 101 log-adjacency-changes network 4.4.4.4 0.0.0.0 area 1 network 10.10.11.0 0.0.0.3 area 1 ! router bgp 65001 bgp log-neighbor-changes neighbor 2.2.2.2 remote-as 65001 neighbor 2.2.2.2 update-source Loopback0 ! address-family ipv4 neighbor 2.2.2.2 activate no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor 2.2.2.2 activate neighbor 2.2.2.2 send-community extended exit-address-family ! address-family ipv4 vrf data redistribute connected no synchronization exit-address-family ! end |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 |
R2#sho run Building configuration... Current configuration : 1811 bytes ! version 12.4 ! hostname R2 ! ip cef ! ! ip vrf data rd 65001:2 route-target export 65001:20 route-target import 65001:20 ! mpls label protocol ldp ! ! interface Loopback0 ip address 2.2.2.2 255.255.255.255 ! interface Loopback1 ip vrf forwarding data ip address 9.9.9.9 255.255.255.255 ! interface FastEthernet0/0 no ip address shutdown duplex half ! interface GigabitEthernet1/0 ip address 10.10.11.1 255.255.255.252 negotiation auto mpls ip ! interface GigabitEthernet2/0 ip address 10.10.10.1 255.255.255.252 negotiation auto mpls ip ! interface GigabitEthernet3/0 no ip address shutdown negotiation auto ! router ospf 101 log-adjacency-changes network 2.2.2.2 0.0.0.0 area 0 network 10.10.10.0 0.0.0.3 area 0 network 10.10.11.0 0.0.0.3 area 1 ! router bgp 65001 no synchronization bgp log-neighbor-changes neighbor 3.3.3.3 remote-as 65001 neighbor 3.3.3.3 update-source Loopback0 neighbor 3.3.3.3 route-reflector-client neighbor 4.4.4.4 remote-as 65001 neighbor 4.4.4.4 update-source Loopback0 neighbor 4.4.4.4 route-reflector-client no auto-summary ! address-family vpnv4 neighbor 3.3.3.3 activate neighbor 3.3.3.3 send-community extended neighbor 3.3.3.3 route-reflector-client neighbor 4.4.4.4 activate neighbor 4.4.4.4 send-community extended neighbor 4.4.4.4 route-reflector-client exit-address-family ! address-family ipv4 vrf data redistribute connected no synchronization exit-address-family ! end |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 |
! hostname R6 ! boot-start-marker boot-end-marker ! ! no aaa new-model ! ! ip cef ! ! ip vrf data rd 65001:7 route-target export 65001:20 route-target import 65001:20 ! mpls label protocol ldp ! ! interface Loopback0 ip address 7.7.7.7 255.255.255.255 ! interface Loopback1 ip vrf forwarding data ip address 1.1.1.1 255.255.255.255 ! interface FastEthernet0/0 no ip address shutdown duplex half ! interface GigabitEthernet1/0 ip address 10.10.12.2 255.255.255.252 negotiation auto mpls ip ! interface GigabitEthernet2/0 no ip address negotiation auto ! router ospf 101 log-adjacency-changes network 10.10.12.0 0.0.0.255 area 1 network 0.0.0.0 255.255.255.255 area 1 ! router bgp 65001 bgp log-neighbor-changes neighbor 4.4.4.4 remote-as 65001 neighbor 4.4.4.4 update-source Loopback0 ! address-family ipv4 redistribute connected neighbor 4.4.4.4 activate neighbor 4.4.4.4 route-reflector-client no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor 4.4.4.4 activate neighbor 4.4.4.4 send-community extended exit-address-family ! address-family ipv4 vrf data redistribute connected no synchronization exit-address-family |
R6#ping vrf data 6.6.6.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 6.6.6.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/60/80 ms
Hi Brent, just wanted to say I really enjoy your blog. each post has something to learn. Well done.
Thanks Mehdi, nice of you to say that pal. Thanks!
Hi . i was tried with same config with gns .3 but i am not get the input could you share me the config
Hi. I tried and enjoyed this page until ping is successful, thank you.
(misconfiguration on purpose?)