NCS Lab 5: Configuring Intra-AS MPLS L3VPN using Static Routing as PE-CE Protocol
Configuring Intra-AS MPLS L3VPN using Static Routing as PE-CE Protocol
In Lab 5: Configuring Intra-AS MPLS L3VPN using Static Routing as PE-CE Protocol, participants typically focus on the practical implementation of Intra-AS Multiprotocol Label Switching (MPLS) Layer 3 Virtual Private Network (L3VPN) services within a single Autonomous System (AS) using Cisco Network Convergence System (NCS) devices. This lab involves tasks such as configuring MPLS on provider edge (PE) and customer edge (CE) routers, establishing static routes for PE-CE connectivity, and ensuring the proper propagation of VPN routes across the MPLS network. Participants may explore the intricacies of VPN route distinguishers (RDs) and route targets (RTs) for effective VPN segregation. The lab aims to provide hands-on experience in deploying MPLS L3VPNs with static routing as the PE-CE protocol, offering insights into the configuration and operation of scalable and secure VPN services within a Service Provider network. Successful completion of NCS Lab 5 equips participants with practical skills in implementing MPLS L3VPNs using static routing, a fundamental aspect of Service Provider network design.
Lab:
Task 1: Configuration of IP Addresses with Service Provider
The following configuration has been pre-configred.
- IP addressing for all nodes including Physical and Software Interfaces.
Task 2: Configure OSPF within AS 3
Use the following parameters to configure OSPF within the Service Provider
PE1:
PE1#configure terminal
PE1(config)#router ospf 1
PE1(config-router)#interface loopback 1
PE1(config-if)#ip ospf 1 area 0
PE1(config)#interface Ethernet 0/2
PE1(config-if)#ip ospf 1 area 0
PE1(config-if)#end
PE1#write memory
P1:
RP/0/0/CPU0:P1#configure
RP/0/0/CPU0:P1(config)#router ospf 1
RP/0/0/CPU0:P1(config-ospf)#area 0
RP/0/0/CPU0:P1(config-ospf-ar)#interface GigabitEthernet0/0/0/1
RP/0/0/CPU0:P1(config-ospf-ar-if)#interface GigabitEthernet0/0/0/2
RP/0/0/CPU0:P1(config-ospf-ar-if)#interface loopback 1
RP/0/0/CPU0:P1(config-ospf-ar-if)#commit
RP/0/0/CPU0:P1(config-ospf-ar-if)#end
RR1:
RP/0/0/CPU0:RR1#configure
RP/0/0/CPU0:RR1(config)#router ospf 1
RP/0/0/CPU0:RR1(config-ospf)#area 0
RP/0/0/CPU0:RR1(config-ospf-ar)#interface loopback1
RP/0/0/CPU0:RR1(config-ospf-ar-if)#interface g0/0/0/2
RP/0/0/CPU0:RR1(config-ospf-ar-if)#interface g0/0/0/3
RP/0/0/CPU0:RR1(config-ospf-ar-if)#commit
RP/0/0/CPU0:RR1(config-ospf-ar-if)#end
P2:
P2#configure terminal
P2(config)#router ospf 1
P2(config)#interface loopback 1
P2(config-if)#ip ospf 1 area 0
P2(config)#interface Ethernet 0/2
P2(config-if)#ip ospf 1 area 0
P2(config-if)#interface Ethernet 0/3
P2(config-if)#ip ospf 1 area 0
P2(config-if)#end
P2#write memory
PE2:
RP/0/0/CPU0:PE2#configure
RP/0/0/CPU0:PE2(config)#router ospf 1
RP/0/0/CPU0:PE2(config-ospf)#area 0
RP/0/0/CPU0:PE2(config-ospf-ar)#interface loopback 1
RP/0/0/CPU0:PE2(config-ospf-ar)#interface GigabitEthernet 0/0/0/3
RP/0/0/CPU0:PE2(config-ospf-ar-if)#commit
RP/0/0/CPU0:PE2(config-ospf-ar-if)#end
Task 3: Verify OSPF Configuration.
Verify all routes within the routing table of all Provider devices.
PE1:
PE1#show ip route ospf
O 3.3.3.3 \[110/2\] via 10.0.23.3, 00:33:15, Ethernet 0/2
O 4.4.4.4 \[110/3\] via 10.0.23.3, 00:32:07, Ethernet 0/2
O 5.5.5.5 \[110/4\] via 10.0.23.3, 00:29:17, Ethernet 0/2
O 10.0.45.0/24 \[110/3\] via 10.0.23.3, 00:32:07, Ethernet 0/2
O 10.0.56.0/24 \[110/4\] via 10.0.23.3, 00:29:17, Ethernet 0/2
P1:
RP/0/0/CPU0:P1#show route ipv4 unicast ospf
O 2.2.2.2/32 \[110/2\] via 10.0.23.2, 00:35:52, GigabitEthernet0/0/0/2
O 4.4.4.4/32 \[110/2\] via 10.0.34.4, 00:34:45, GigabitEthernet0/0/0/3
O 5.5.5.5/32 \[110/3\] via 10.0.34.4, 00:31:50, GigabitEthernet0/0/0/3
O 6.6.6.6/32 \[110/4\] via 10.0.34.4, 00:29:12, GigabitEthernet0/0/0/3
O 10.0.45.0/24 \[110/2\] via 10.0.34.4, 00:34:45, GigabitEthernet0/0/0/3
O 10.0.56.0/24 \[110/3\] via 10.0.34.4, 00:31:50, GigabitEthernet0/0/0/3
RP/0/0/CPU0:RR1#show route ipv4 unicast ospf
O 2.2.2.2/32 \[110/3\] via 10.0.34.3, 00:35:35, GigabitEthernet0/0/0/3
O 3.3.3.3/32 \[110/2\] via 10.0.34.3, 00:35:35, GigabitEthernet0/0/0/3
O 5.5.5.5/32 \[110/2\] via 10.0.45.5, 00:32:41, GigabitEthernet0/0/0/2
O 6.6.6.6/32 \[110/3\] via 10.0.45.5, 00:30:03, GigabitEthernet0/0/0/2
O 10.0.23.0/24 \[110/2\] via 10.0.34.3, 00:35:35, GigabitEthernet0/0/0/3
O 10.0.56.0/24 \[110/2\] via 10.0.45.5, 00:32:41, GigabitEthernet0/0/0/2
P2#show ip route ospf
O 2.2.2.2 \[110/4\] via 10.0.45.4, 00:34:24, Ethernet 0/2
O 3.3.3.3 \[110/3\] via 10.0.45.4, 00:34:24, Ethernet 0/2
O 4.4.4.4 \[110/2\] via 10.0.45.4, 00:34:24, Ethernet 0/2
O 6.6.6.6 \[110/2\] via 10.0.56.6, 00:31:51, Ethernet 0/3
O 10.0.23.0/24 \[110/3\] via 10.0.45.4, 00:34:24, Ethernet 0/2
O 10.0.34.0/24 \[110/2\] via 10.0.45.4, 00:34:24, Ethernet 0/2
RP/0/0/CPU0:PE2#show route ipv4 unicast ospf
O 2.2.2.2/32 \[110/5\] via 10.0.56.5, 00:34:50, GigabitEthernet0/0/0/3
O 3.3.3.3/32 \[110/4\] via 10.0.56.5, 00:34:50, GigabitEthernet0/0/0/3
O 4.4.4.4/32 \[110/3\] via 10.0.56.5, 00:34:50, GigabitEthernet0/0/0/3
O 5.5.5.5/32 \[110/2\] via 10.0.56.5, 00:34:50, GigabitEthernet0/0/0/3
O 10.0.23.0/24 \[110/4\] via 10.0.56.5, 00:34:50, GigabitEthernet0/0/0/3
O 10.0.34.0/24 \[110/3\] via 10.0.56.5, 00:34:50, GigabitEthernet0/0/0/3
O 10.0.45.0/24 \[110/2\] via 10.0.56.5, 00:34:50, GigabitEthernet0/0/0/3
Task 4: Configure LDP within Service Provider.
PE1#configure terminal
PE1(config)#mpls label protocol ldp
PE1(config)#mpls ldp router-id lo1
PE1(config)#interface Ethernet 0/2
PE1(config-if)#mpls ip
PE1(config-if)#end
PE1#write memory
RP/0/0/CPU0:P1#configure
Fri Jun 11 06:46:09.347 UTC
RP/0/0/CPU0:P1(config)#mpls ldp
RP/0/0/CPU0:P1(config-ldp)#router-id 3.3.3.3
RP/0/0/CPU0:P1(config-ldp)#interface GigabitEthernet 0/0/0/2
RP/0/0/CPU0:P1(config-ldp-if)#interface GigabitEthernet 0/0/0/3
RP/0/0/CPU0:P1(config-ldp-if)#commit
Fri Jun 11 06:46:29.145 UTC
RP/0/0/CPU0:P1(config-ldp-if)#end
RP/0/0/CPU0:RR1#configure
Fri Jun 11 06:53:50.428 UTC
RP/0/0/CPU0:RR1(config)#mpls ldp
RP/0/0/CPU0:RR1(config-ldp)#router-id 4.4.4.4
RP/0/0/CPU0:RR1(config-ldp)#interface GigabitEthernet 0/0/0/2
RP/0/0/CPU0:RR1(config-ldp-if)#interface GigabitEthernet 0/0/0/3
RP/0/0/CPU0:RR1(config-ldp-if)#commit
Fri Jun 11 06:54:19.196 UTC
RP/0/0/CPU0:RR1(config-ldp-if)#end
P2#configure terminal
P2(config)#mpls label protocol ldp
P2(config)#mpls ldp router-id loopback 1
P2(config)#interface Ethernet 0/2
P2(config-if)#mpls ip
P2(config-if)#interface Ethernet 0/3
P2(config-if)#mpls ip
P2(config-if)#end
P2#write memory
RP/0/0/CPU0:PE2#configure
RP/0/0/CPU0:PE2(config)#mpls ldp
RP/0/0/CPU0:PE2(config-ldp)#router-id 6.6.6.6
RP/0/0/CPU0:PE2(config-ldp)#interface GigabitEthernet 0/0/0/3
RP/0/0/CPU0:PE2(config-ldp-if)#commit
RP/0/0/CPU0:PE2(config-ldp-if)#end
Task 5: Verification of MPLS LDP Configuration.
PE1#show mpls forwarding-table
Local Outgoing Prefix Bytes Label Outgoing Next Hop
Label Label or Tunnel Id Switched Interface
16 Pop Label 3.3.3.3/32 0 Eth0/2 10.0.23.3
17 24001 4.4.4.4/32 0 Eth0/2 10.0.23.3
18 24003 5.5.5.5/32 0 Eth0/2 10.0.23.3
19 24005 6.6.6.6/32 0 Eth0/2 10.0.23.3
20 Pop Label 10.0.34.0/24 0 Eth0/2 10.0.23.3
21 24002 10.0.45.0/24 0 Eth0/2 10.0.23.3
22 24004 10.0.56.0/24 0 Eth0/2 10.0.23.3
RP/0/0/CPU0:P1#show mpls forwarding
Local Outgoing Prefix Outgoing Next Hop Bytes
Label Label or ID Interface Switched
------ ----------- ------------------ ------------ --------------- ------------
24000 Pop 2.2.2.2/32 Gi0/0/0/2 10.0.23.2 10878
24001 Pop 4.4.4.4/32 Gi0/0/0/3 10.0.34.4 9898
24002 Pop 10.0.45.0/24 Gi0/0/0/3 10.0.34.4 0
24003 24003 5.5.5.5/32 Gi0/0/0/3 10.0.34.4 0
24004 24004 10.0.56.0/ Gi0/0/0/3 10.0.34.4 0
24005 24005 6.6.6.6/32 Gi0/0/0/3 10.0.34.4 0
RP/0/0/CPU0:RR1#show mpls forwarding
Local Outgoing Prefix Outgoing Next Hop Bytes
Label Label or ID Interface Switched
------ ----------- ---------------- ------------ --------------- ------------
24000 24000 2.2.2.2/32 Gi0/0/0/3 10.0.34.3 0
24001 Pop 3.3.3.3/32 Gi0/0/0/3 10.0.34.3 10192
24002 Pop 10.0.23.0/24 Gi0/0/0/3 10.0.34.3 0
24003 Pop 5.5.5.5/32 Gi0/0/0/2 10.0.45.5 10210
24004 Pop 10.0.56.0/24 Gi0/0/0/2 10.0.45.5 0
24005 19 6.6.6.6/32 Gi0/0/0/2 10.0.45.5 0
P2#show mpls forwarding-table
Local Outgoing Prefix Bytes Label Outgoing Next Hop
Label Label or Tunnel Id Switched Interface
16 24000 2.2.2.2/32 0 Eth0/2 10.0.45.4
17 24001 3.3.3.3/32 0 Eth0/2 10.0.45.4
18 Pop Label 4.4.4.4/32 0 Eth0/2 10.0.45.4
19 Pop Label 6.6.6.6/32 0 Eth0/3 10.0.56.6
20 24002 10.0.23.0/24 0 Eth0/2 10.0.45.4
21 Pop Label 10.0.34.0/24 0 Eth0/2 10.0.45.4
RP/0/0/CPU0:PE2#show mpls forwarding
Local Outgoing Prefix Outgoing Next Hop Bytes
Label Label or ID Interface Switched
------ ----------- ------------------ ------------ --------------- ------------
24000 16 2.2.2.2/32 Gi0/0/0/3 10.0.56.5 0
24001 17 3.3.3.3/32 Gi0/0/0/3 10.0.56.5 0
24002 18 4.4.4.4/32 Gi0/0/0/3 10.0.56.5 0
24003 Pop 5.5.5.5/32 Gi0/0/0/3 10.0.56.5 10366
24004 Pop 10.0.45.0/24 Gi0/0/0/3 10.0.56.5 0
24005 21 10.0.34.0/24 Gi0/0/0/3 10.0.56.5 0
24006 20 10.0.23.0/24 Gi0/0/0/3 10.0.56.5 0
Task 6: Configure BGP in AS 3
Configure BGP as per requirement mentioned below
- IBGP neighborship to be formed between PE1 and RR1 using their Loopback 1 interface.
- IBGP neighborship to be formed between PE2 and RR1 using their Loopback 1 interface.
- Advertise Loopback 0 interfaces for PE1, RR1 & PE2.
- Disable all default address-family for Ipv4 and all neighbors must be enabled manually.
PE1#configure terminal
PE1(config)#router bgp 3
PE1(config-router)# no bgp default ipv4-unicast
PE1(config-router)# neighbor 4.4.4.4 remote-as 3
PE1(config-router)# neighbor 4.4.4.4 update-source Loopback1
PE1(config-router)# address-family ipv4
PE1(config-router-af)# neighbor 4.4.4.4 activate
PE1(config-router-af)#network 2.2.2.2 mask 255.255.255.255
PE1(config-router-af)#end
PE1#write memory
RP/0/0/CPU0:RR1#configure
RP/0/0/CPU0:RR1(config)#router bgp 3
RP/0/0/CPU0:RR1(config-bgp)# address-family ipv4 unicast
RP/0/0/CPU0:RR1(config-bgp-af)# network 4.4.4.4/32
RP/0/0/CPU0:RR1(config-bgp-af)# neighbor 2.2.2.2
RP/0/0/CPU0:RR1(config-bgp-nbr)# remote-as 3
RP/0/0/CPU0:RR1(config-bgp-nbr)# update-source Loopback1
RP/0/0/CPU0:RR1(config-bgp-nbr)# address-family ipv4 unicast
RP/0/0/CPU0:RR1(config-bgp-nbr-af)# route-reflector-client
RP/0/0/CPU0:RR1(config-bgp-nbr-af)# neighbor 6.6.6.6
RP/0/0/CPU0:RR1(config-bgp-nbr)# remote-as 3
RP/0/0/CPU0:RR1(config-bgp-nbr)#update-source Loopback1
RP/0/0/CPU0:RR1(config-bgp-nbr)#address-family ipv4 unicast
RP/0/0/CPU0:RR1(config-bgp-nbr-af)# route-reflector-client
RP/0/0/CPU0:RR1(config-bgp-nbr-af)#commit
RP/0/0/CPU0:RR1(config-bgp-nbr-af)#end
RP/0/0/CPU0:PE2#configure
RP/0/0/CPU0:PE2(config)#router bgp 3
RP/0/0/CPU0:PE2(config-bgp)#address-family ipv4 unicast
RP/0/0/CPU0:PE2(config-bgp-af)#network 6.6.6.6/32
RP/0/0/CPU0:PE2(config-bgp-af)#exit
RP/0/0/CPU0:PE2(config-bgp)#neighbor 4.4.4.4
RP/0/0/CPU0:PE2(config-bgp-nbr)#remote-as 3
RP/0/0/CPU0:PE2(config-bgp-nbr)#update-source loopback 1
RP/0/0/CPU0:PE2(config-bgp-nbr)#address-family ipv4 unicast
RP/0/0/CPU0:PE2(config-bgp-nbr-af)#commit
RP/0/0/CPU0:PE2(config-bgp-nbr-af)#end
Task 7: Verify BGP Configuration
PE1#show bgp ipv4 unicast summary
BGP router identifier 2.2.2.2, local AS number 3
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
4.4.4.4 4 3 12 12 6 0 0 00:06:55 2
RP/0/0/CPU0:RR1#show bgp ipv4 unicast summary
BGP router identifier 4.4.4.4, local AS number 3
Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd
2.2.2.2 0 3 14 13 5 0 0 00:07:51 1
6.6.6.6 0 3 7 9 5 0 0 00:02:12 1
RP/0/0/CPU0:PE2#show bgp ipv4 unicast summary
BGP router identifier 6.6.6.6, local AS number 3
Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd
4.4.4.4 0 3 10 8 5 0 0 00:03:43 2
PE1#show bgp ipv4 unicast
Network Next Hop Metric LocPrf Weight Path
\*> 2.2.2.2/32 0.0.0.0 0 32768 i
r>i 4.4.4.4/32 4.4.4.4 0 100 0 i
r>i 6.6.6.6/32 6.6.6.6 0 100 0 i
RP/0/0/CPU0:RR1#show bgp ipv4 unicast
Network Next Hop Metric LocPrf Weight Path
\*>i2.2.2.2/32 2.2.2.2 0 100 0 i
\*> 4.4.4.4/32 0.0.0.0 0 32768 i
\*>i6.6.6.6/32 6.6.6.6 0 100 0 i
RP/0/0/CPU0:PE2#show bgp ipv4 unicast
Network Next Hop Metric LocPrf Weight Path
\*>i2.2.2.2/32 2.2.2.2 0 100 0 i
\*>i4.4.4.4/32 4.4.4.4 0 100 0 i
\*> 6.6.6.6/32 0.0.0.0 0 32768 i
Task 8: Configure VRF for Customer A & B
Configure Customer A & B with AS 3 as per table below.
PE1#configure terminal
PE1(config)#vrf definition VPNA
PE1(config-vrf)#rd 3:1
PE1(config-vrf)#address-family ipv4 unicast
PE1(config-vrf-af)#route-target both 3:1
PE1(config)#vrf definition VPNB
PE1(config-vrf)#rd 3:2
PE1(config-vrf)#address-family ipv4 unicast
PE1(config-vrf-af)#route-target both 3:2
PE1(config)#interface Ethernet 0/0
PE1(config-if)#vrf forwarding VPNA
% Interface GigabitEthernet1 IPv4 disabled and address(es) removed due to enabling VRF VPNA
PE1(config-if)#ip address 172.16.12.2 255.255.255.0
PE1(config-if)#interface Ethernet 0/1
PE1(config-if)#vrf forwarding VPNB
% Interface GigabitEthernet2 IPv4 disabled and address(es) removed due to enabling VRF VPNB
PE1(config-if)#ip address 172.16.27.2 255.255.255.0
PE1(config-if)#end
PE1#write memory
RP/0/0/CPU0:PE2#configure
RP/0/0/CPU0:PE2(config)#vrf VPNA
RP/0/0/CPU0:PE2(config-vrf)#address-family ipv4 unicast
RP/0/0/CPU0:PE2(config-vrf-af)#import route-target 3:1
RP/0/0/CPU0:PE2(config-vrf-af)#export route-target 3:1
RP/0/0/CPU0:PE2(config-vrf-af)#exit
RP/0/0/CPU0:PE2(config-vrf)#exit
RP/0/0/CPU0:PE2(config)#vrf VPNB
RP/0/0/CPU0:PE2(config-vrf)#address-family ipv4 unicast
RP/0/0/CPU0:PE2(config-vrf-af)#import route-target 3:2
RP/0/0/CPU0:PE2(config-vrf-af)#export route-target 3:2
RP/0/0/CPU0:PE2(config-vrf-af)#exit
RP/0/0/CPU0:PE2(config-vrf)#exit
RP/0/0/CPU0:PE2(config)#router bgp 3
RP/0/0/CPU0:PE2(config-bgp)#vrf VPNA
RP/0/0/CPU0:PE2(config-bgp-vrf)#rd 3:1
RP/0/0/CPU0:PE2(config-bgp-vrf)#exit
RP/0/0/CPU0:PE2(config-bgp)#vrf VPNB
RP/0/0/CPU0:PE2(config-bgp-vrf)#rd 3:2
RP/0/0/CPU0:PE2(config)#interface GigabitEthernet 0/0/0/0
RP/0/0/CPU0:PE2(config-if)#no ip address
RP/0/0/CPU0:PE2(config-if)#vrf VPNA
RP/0/0/CPU0:PE2(config-if)#ip address 172.16.69.6 255.255.255.0
RP/0/0/CPU0:PE2(config-if)#exit
RP/0/0/CPU0:PE2(config)#int GigabitEthernet 0/0/0/1
RP/0/0/CPU0:PE2(config-if)#no ip address
RP/0/0/CPU0:PE2(config-if)#vrf VPNB
RP/0/0/CPU0:PE2(config-if)#ip add 172.16.68.6 255.255.255.0
RP/0/0/CPU0:PE2(config-if)#commit
Sat Jun 12 02:03:19.287 UTC
RP/0/0/CPU0:PE2(config-if)#end
Task 9: Verify VRF Configuration & Connectivity
PE1#show vrf
Name Default RD Protocols Interfaces
VPNA 3:1 ipv4 Gi1
VPNB 3:2 ipv4 Gi2
RP/0/0/CPU0:PE2#show vrf all
Sat Jun 12 02:06:11.065 UTC
VRF RD RT AFI SAFI
VPNA 3:1
import 3:1 IPV4 Unicast
export 3:1 IPV4 Unicast
VPNB 3:2
import 3:2 IPV4 Unicast
export 3:2 IPV4 Unicast
RP/0/0/CPU0:PE2#show ipv4 interface brief | inc VPN
GigabitEthernet0/0/0/0 172.16.69.6 Up Up VPNA
GigabitEthernet0/0/0/1 172.16.68.6 Up Up VPNB
Let us also verify ping connectivity.
PE1#ping vrf VPNA 172.16.12.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.12.1, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 7/52/187 ms
PE1#
PE1#ping vrf VPNB 172.16.27.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.27.7, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 6/72/267 ms
RP/0/0/CPU0:PE2#ping vrf VPNA 172.16.69.9
Sat Jun 12 02:10:26.538 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.69.9, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/47/219 ms
RP/0/0/CPU0:PE2#ping vrf VPNB 172.16.68.8
Sat Jun 12 02:11:04.955 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.68.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/75/359 ms
Task 10: Configure static routing between Customer and Service Provder.
All customer locations must configure default route towards Service Provider.
All PE routers must configure specific routes towards Customer Loopback interfaces.
All PE routers must redistribute static and directly connected routes into BGP vrfs.
RP/0/0/CPU0:A1#configure
RP/0/0/CPU0:A1(config)#router static
RP/0/0/CPU0:A1(config-static)#address-family ipv4 unicast
RP/0/0/CPU0:A1(config-static-afi)#0.0.0.0/0 172.16.12.2
RP/0/0/CPU0:A1(config-static-afi)#commit
RP/0/0/CPU0:A1(config-static-afi)#end
RP/0/0/CPU0:A2#configure
RP/0/0/CPU0:A2(config)#router static
RP/0/0/CPU0:A2(config-static)#address-family ipv4 unicast
RP/0/0/CPU0:A2(config-static-afi)#0.0.0.0/0 172.16.69.6
RP/0/0/CPU0:A2(config-static-afi)#commit
RP/0/0/CPU0:A2(config-static-afi)#end
B1#configure terminal
B1(config)#ip route 0.0.0.0 0.0.0.0 172.16.27.2
B1(config)#end
B1#write memory
B2#configure terminal
B2(config)#ip route 0.0.0.0 0.0.0.0 172.16.68.6
B2(config)#end
B2#write memory
PE1#configure terminal
PE1(config)#ip route vrf VPNA 1.1.1.1 255.255.255.255 172.16.12.1
PE1(config)#ip route vrf VPNB 7.7.7.7 255.255.255.255 172.16.27.7
PE1(config)#router bgp 3
PE1(config-router)#address-family ipv4 vrf VPNA
PE1(config-router-af)#redistribute static
PE1(config-router-af)#redistribute connected
PE1(config-router)#address-family ipv4 vrf VPNB
PE1(config-router-af)#redistribute static
PE1(config-router-af)#redistribute connected
PE1(config-router-af)#end
PE1#write memory
RP/0/0/CPU0:PE2#configure
RP/0/0/CPU0:PE2(config)#router static
RP/0/0/CPU0:PE2(config-static)#vrf VPNA
RP/0/0/CPU0:PE2(config-static-vrf)#address-family ipv4 unicast
RP/0/0/CPU0:PE2(config-static-vrf-afi)#9.9.9.9/32 172.16.69.9
RP/0/0/CPU0:PE2(config-static-vrf-afi)#exit
RP/0/0/CPU0:PE2(config-static-vrf)#exit
RP/0/0/CPU0:PE2(config-static)#vrf VPNB
RP/0/0/CPU0:PE2(config-static-vrf)#address-family ipv4 unicast
RP/0/0/CPU0:PE2(config-static-vrf-afi)#8.8.8.8/32 172.16.68.8
RP/0/0/CPU0:PE2(config)#router bgp 3
RP/0/0/CPU0:PE2(config-bgp)#address-family vpnv4 unicast
RP/0/0/CPU0:PE2(config-bgp)#vrf VPNA
RP/0/0/CPU0:PE2(config-bgp-vrf)#address-family ipv4 unicast
RP/0/0/CPU0:PE2(config-bgp-vrf-af)#redistribute static
RP/0/0/CPU0:PE2(config-bgp-vrf-af)#redistribute connected
RP/0/0/CPU0:PE2(config-bgp-vrf-af)#vrf VPNB
RP/0/0/CPU0:PE2(config-bgp-vrf)#address-family ipv4 unicast
RP/0/0/CPU0:PE2(config-bgp-vrf-af)#redistribute static
RP/0/0/CPU0:PE2(config-bgp-vrf-af)#redistribute connected
RP/0/0/CPU0:PE2(config-bgp-vrf-af)#commit
RP/0/0/CPU0:PE2(config-bgp-vrf-afi)#end
Task 11: Verify Static route connectivity between directly connected Service provider and Customer.
PE1#ping vrf VPNA 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/10/29 ms
PE1#ping vrf VPNB 7.7.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 7.7.7.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 5/9/26 ms
RP/0/0/CPU0:PE2#ping vrf VPNA 9.9.9.9
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 9.9.9.9, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/9/29 ms
RP/0/0/CPU0:PE2#ping vrf VPNB 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/9/19 ms
Task 12: Configure Multi-Protoocl BGP.
Configure MP-BGP between PE1 and RR1 with RR1 being Router-reflector.
Configure MP-BGP between PE2 and RR1 with RR1 being Router-reflector.
PE1#configure terminal
PE1(config)#router bgp 3
PE1(config-router)#address-family vpnv4 unicast
PE1(config-router-af)#neighbor 4.4.4.4 activate
PE1(config-router-af)#end
PE1#write memory
RP/0/0/CPU0:RR1#configure
RP/0/0/CPU0:RR1(config)#router bgp 3
RP/0/0/CPU0:RR1(config-bgp)#address-family vpnv4 unicast
RP/0/0/CPU0:RR1(config-bgp)#neighbor 2.2.2.2
RP/0/0/CPU0:RR1(config-bgp-nbr)#address-family vpnv4 unicast
RP/0/0/CPU0:RR1(config-bgp-nbr-af)#route-reflector-client
RP/0/0/CPU0:RR1(config-bgp-nbr-af)#neighbor 6.6.6.6
RP/0/0/CPU0:RR1(config-bgp-nbr)#address-family vpnv4 unicast
RP/0/0/CPU0:RR1(config-bgp-nbr-af)#route-reflector-client
RP/0/0/CPU0:RR1(config-bgp-nbr-af)#commit
RP/0/0/CPU0:RR1(config-bgp)#address-family vpnv4 unicast
RP/0/0/CPU0:RR1(config-bgp)#end
RP/0/0/CPU0:PE2#configure
RP/0/0/CPU0:PE2(config)#router bgp 3
RP/0/0/CPU0:PE2(config-bgp)#address-family vpnv4 unicast
RP/0/0/CPU0:PE2(config-bgp-af)#exit
RP/0/0/CPU0:PE2(config-bgp)#neighbor 4.4.4.4
RP/0/0/CPU0:PE2(config-bgp-nbr)#address-family vpnv4 unicast
RP/0/0/CPU0:PE2(config-bgp-nbr-af)#commit
RP/0/0/CPU0:PE2(config-bgp-nbr-af)#end
Task 13: Verify Multi-Protoocl BGP.
PE1#show bgp ipv4 unicast neighbors | inc BGP neighbor|VPNv4
BGP neighbor is 4.4.4.4, remote AS 3, internal link
Address family VPNv4 Unicast: advertised and received
For address family: VPNv4 Unicast
RP/0/0/CPU0:RR1#show bgp ipv4 unicast neighbors | inc "BGP neighbor|VPNv4 Uni
Sat Jun 12 02:57:22.841 UTC
BGP neighbor is 2.2.2.2
Address family VPNv4 Unicast: advertised and received
BGP neighbor version 15
For Address Family: VPNv4 Unicast
BGP neighbor version 9
BGP neighbor is 6.6.6.6
Address family VPNv4 Unicast: advertised and received
BGP neighbor version 15
For Address Family: VPNv4 Unicast
BGP neighbor version 9
RP/0/0/CPU0:PE2#show bgp ipv4 unicast neighbors | inc "BGP neighbor|VPNv4 Uni"
Sat Jun 12 02:57:49.973 UTC
BGP neighbor is 4.4.4.4
Address family VPNv4 Unicast: advertised and received
BGP neighbor version 17
For Address Family: VPNv4 Unicast
BGP neighbor version 19
Task 14: Verify Multi-Protoocl BGP route exchange
PE1#show bgp vpnv4 unicast all
Route Distinguisher: 3:1 (default for vrf VPNA)
Network Next Hop Metric LocPrf Weight Path
\*> 1.1.1.1/32 172.16.12.1 0 32768 ?
\*>i 9.9.9.9/32 6.6.6.6 0 100 0 ?
\*> 172.16.12.0/24 0.0.0.0 0 32768 ?
\*>i 172.16.69.0/24 6.6.6.6 0 100 0 ?
Route Distinguisher: 3:2 (default for vrf VPNB)
Network Next Hop Metric LocPrf Weight Path
\*> 7.7.7.7/32 172.16.27.7 0 32768 ?
\*>i 8.8.8.8/32 6.6.6.6 0 100 0 ?
\*> 172.16.27.0/24 0.0.0.0 0 32768 ?
\*>i 172.16.68.0/24 6.6.6.6 0 100 0 ?
Task 15: Verify CE to CE connectivity within VRFs
RP/0/0/CPU0:A1#ping 172.16.69.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.69.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 19/47/119 ms
RP/0/0/CPU0:A1#ping 172.16.69.9
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.69.9, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 29/65/189 ms
RP/0/0/CPU0:A1#ping 9.9.9.9
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 9.9.9.9, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 29/41/79 ms
RP/0/0/CPU0:A2#ping 172.16.12.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.12.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 29/39/69 ms
RP/0/0/CPU0:A2#ping 172.16.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 19/51/129 ms
RP/0/0/CPU0:A2#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 29/49/99 ms
B1#ping 172.16.68.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.68.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 27/39/77 ms
B1#ping 172.16.68.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.68.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 31/46/63 ms
B1#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/39/64 ms
B2#ping 172.16.27.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.27.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 25/45/86 ms
B2#ping 172.16.27.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.27.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 29/37/62 ms
B2#ping 7.7.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 7.7.7.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/43/65 ms