Documente Academic
Documente Profesional
Documente Cultură
Wolfgang Riedel wriedel@cisco.com Systems Engineer ECSO Enterprise Manufacturing Cisco Systems GmbH
5. Summary
12:24
Evolution of MPLS
From tag switching Proposed in IETFLater combined with other proposals from IBM (ARIS), Toshiba (CSR)
Cisco Calls a BOF at IETF to Standardize Tag Switching MPLS Croup Formally Chartered by IETF Cisco Ships MPLS (Tag Switching) Cisco Ships Traffic Engineering Deployed MPLS TE MPLS VPN Deployed Large Scale Deployment
Time
1996
1997
1998
1999
2000
12:24
2001
3
The Challenges
Service Providers Generate new services Protect existing InfrastructureATM/FR Combine private data services with Internet services Move into rapid deployment Cost saving Enterprise Lower cost of WAN connectivity Migration path Lower cost of managing separate Data and Voice networks Campus Service Provider multiple customers Replacement of campus wide vlans
12:24
L2 VPN
IPv6
6PE
Multicast over VPN BGP LDP OSPF IS-IS PIM LDP RSVP CEF
DiffServ Multicast IP Traffic Fast aware Routing CoS Engineering Rerouting TE (PIM v2) v2 (DiffServ)
Label Forwarding Information Base (LFIB) Per-Label Forwarding, Queuing, Multicast, Restoration Mechanisms L2 protocols (PPP, POS, ATM, FR, Enet, GRE, ...)
2001, Cisco Systems, Inc. All rights reserved. 12:24
L2 VPN
IPv6
6PE
Multicast over 2547 BGP/MPLS VPNs * VPN BGP LDP OSPF IS-IS PIM
ATOM 2702 Requirements for Virtual Private Networks Any Transport over MPLS Traffic Engineering Over MPLS
IP switching DiffServ Multicast IP Traffic Fast aware Routing CoS Engineering Rerouting TE (PIM v2) v2 (DiffServ)
LDP 3031 Multiprotocol Label Switching Label Forwarding Information Base (LFIB) RSVP Architecture *
3032 MPLS Label Stack Encoding * 2474 Definition of the Differentiated Services Per Label Forwarding, Queuing, Multicast, Restoration 3034 Label Switching on Frame Field in IP Headers * CEF 2475 An Architecture for Differentiated Mechanisms Relay Networks Services 3035 MPLS using LDP and ATM VC 2597 Assured Forwarding PHB Group * Switching * L2 protocols (PPP, POS, ATM, FR, Enet, GRE, ...) 2598 An Expedited Forwarding PHB * 3036 LDP Specification * 2697 A Single Rate Three Color Marker 3037 LDP Applicability * 2698 A Two Rate Three Color Marker 6 2001, Cisco Systems, Inc. All rights reserved. 12:24
MPLS Innovation-in-Progress
[Draft Rosen] An Architecture for L2VPNs *
draft-rosen-ppvpn-l2vpn-00.txt
L2 VPN
IPv6
6PE
Multicast over VPN BGP LDP OSPF IS-IS PIM LDP RSVP CEF
DiffServ Multicast IP Traffic Fast aware Routing CoS Engineering Rerouting TE (PIM v2) v2 (DiffServ) [Martini Drafts]
Transport of Layer 2 Frames Over MPLS * Label Forwarding
draft-martini-l2circuit-transmpls-06.txt
Per-LabelMethods Forwarding, Queuing, Multicast, Restoration Encapsulation for Transport of Layer 2 Frames Mechanisms MPLS Support of Over MPLS * Differentiated Services * draft-martini-l2circuit-encapmpls-02.txt
2001, Cisco Systems, Inc. All rights reserved. 12:24
5. Summary
12:24
MPLS Concept
At Edge:
Classify packets Label them
In Core:
Forward using labels (as opposed to IP addr) Label indicates service class and destination
12:24
MPLS Operation
1a. Existing routing protocols (e.g. OSPF, IS-IS) establish reachability to destination networks 1b. Label Distribution Protocol (LDP) establishes label to destination network mappings 4. Edge LSR at egress removes label and delivers packet
2. Ingress Edge LSR receives packet, performs Layer 3 value-added services, and labels packets
2001, Cisco Systems, Inc. All rights reserved.
10
Encapsulations
GFC
VPI
VCI
PTI
CLP HEC
DATA
Label
PPP Header
Label Header
Layer 3 Header
MAC Header
Label Header
Layer 3 Header
12:24
11
Tag
COS S
TTL
Can be used over Ethernet, 802.3, or PPP links Uses two new Ethertypes/PPP PIDs Contains everything needed at forwarding time
2001, Cisco Systems, Inc. All rights reserved. 12:24
12
5. Summary
12:24
13
Neighbor discovery
Basic and extended discovery
2001, Cisco Systems, Inc. All rights reserved. 12:24
14
12:24
15
12:24
16
Used in the context of MPLS VPNs Need multi-protocol extensions to BGP Routers need to be BGP peers
Works in both RR and non-RR environment
Label mapping info carried as part of NLRI (Network Layer Reachability Information)
12:24
17
1 1 1 1 ... ...
0 0 1 1 ... ...
1 1 1 1 ... ...
4 4 5 5
4 4 5 5
0 0 1 1 ... ...
9 9 7 7
9 9
0 0 ... ...
0 128.89 1 Use Lbl 4 for 128.89 and Use Lbl 5 for 171.69 0 Use Lbl 9 for 128.89 1 171.69 Label Distribution Protocol (LDP)
(Downstream Allocation)
2001, Cisco Systems, Inc. All rights reserved.
19
1 1 1 1 ... ...
4 4 5 5
4 4 5 5
0 0 1 1 ... ...
9 9 7 7
9 9
0 0 ... ... 0
128.89
128.89.25.4 Data
20
Label Stacking
Arrange labels in a stack Inner labels can be used to designate services/FECs, etc.
E.g. VPNs, fast re-route
Outer label used to route/switch the MPLS packets in the network Allows building services such as
MPLS VPNs Traffic engineering and fast re-route VPNs over traffic engineered core Any transport over MPLS Inner Label IP Header Outer Label TE Label IGP Label VPN Label
12:24
21
5. Summary
12:24
22
Thats all nice but ... How can you make money with it?
12:24
23
Metro Solutions
Architectural flexibility, service transparency
Storage TDM PL GigE PL Wavelength Enterprise VoIP Internet Access L3 VPN L2 VPN
2001, Cisco Systems, Inc. All rights reserved.
Residential Data/Voice/Video
L3 VPN
12:24
24
12:24
25
MPLS IP-VPN
The L3 generation of core backbone
Regional Site
TDM MUX Frame-Relay ATM
Branch
Remote Sites
LL
INTERNET
INTERNET
Home
MPLS IP-VPN
Central Site PSTN ISDN ADSL/Cable
IPSec
Travel
Services
Branch
Home
12:24
26
5. Summary
12:24
28
MPLS L2-VPN
The L3 generation of core backbone
Regional Sites Regional Site
Ethernet
Ethernet
Central Site
Central Site
2001, Cisco Systems, Inc. All rights reserved.
Ethernet
Frame-Relay ATM
Regional Site
12:24
29
What Is a VPN?
VPN is a set of sites which are allowed to communicate with each other VPN is defined by a set of administrative policies
Policies determine both connectivity and QoS among sites Policies established by VPN customers Policies could be implemented completely by VPN service providers Using BGP/MPLS VPN mechanisms
12:24
30
12:24
31
A
---------
Cust A
B B
---------
Cust A
Cust B
---------
MPLS Network
Cust B
32
Multicast Hosting
Intranet
VoIP
Extranet
Overlay VPN
Pushes content outside the network Costs scale exponentially Transport dependent Groups endpoints, not groups Complex overlay with QoS, tunnels, IP
MPLS-based VPNs
Enables content hosting inside the network Flat cost curve Transport independent Easy grouping of users and services Enables QoS inside the VPNs
12:24
33
Cisco MPLS based VPNs: Equivalent to the Security of Frame Relay and ATM
Miercom, March 30, 2001
http://www.mier.com/reports/cisco/MPLS-VPNs.pdf
Security
12:24
35
OC3 POS
Si
Si
POS 2/1/0 100.200.112.2 T1 FR dlci 101 OSPF Ser 0 100.200.101.2 T1 FR dlci 102 eBGP AS72
ATM2/0/0 100.200.111.1
SER 1/0/0:0 100.200.109.1 T1 FR dlci 109 RIP v2 Ser 0 100.200.109.2 Ser 1/0 100.200.110.2
10.5.5.5
3.4.4.4
BLUE-Glascow
3640 100.200.200.105
RED-Glascow
2611 100.200.200.104
BLUE-Oxford BLUE-Dover
2611 100.200.200.110 10.3.3.3 3.5.5.5 10.3.3.3 1750 100.200.200.101
10.4.4.4
RED-Dover
1750 100.200.200.109
YELLOW-Dover
3640 100.200.200.111
YELLOW-Oxford
3640 100.200.200.102
36
12:24
38
BGP/MPLS VPNSummary
Supports large scale VPN service Increases value add by the VPN service provider Decreases service provider cost of providing VPN services Mechanisms are general enough to enable VPN service provider to support a wide range of VPN customers
2001, Cisco Systems, Inc. All rights reserved. 12:24
39
5. Summary
12:24
40
MPLS PE
Cisco 7600
MPLS PE
Cisco 7600
MPLS
10/100/Gigabit Ethernet 10/100/Gigabit Ethernet
Enterprise Campus A
Enterprise Campus B
A
2001, Cisco Systems, Inc. All rights reserved.
B
12:24
41
5. Summary
12:24
42
Point to Multipoint Service Multipoint to Multipoint Service The network will simulate a L2 switch
2001, Cisco Systems, Inc. All rights reserved. 12:24
43
5. Summary
12:24
44
L2 Transport: AToM
|<---------- ES:FR/Ether/ATM/PPP/HDLC ---------->|
|<-- FR -->| |<------ PW:Emulated VC ------>| Ethernet ATM/PPP/HDLC
PSN Tunnel: MPLS Tunnel Site1A CE 1A
Attachment VC / L2 circuit Attachment VC / L2 circuit
PE1
PE2
Site1B CE 1B
MPLS Core
Site 2B Site 2A CE 2A
Attachment VC / L2 circuit
IP Network
Attachment VC / CE 2B L2 circuit
45
46
Ethernet 802.1Q (Ethernet VLAN) Frame Relay PDU ATM AAL5 PDU ATM cells (non AAL5 mode) Cisco HDLC PPP
12:24
47
5. Summary
12:24
48
Capacity planning
TE improves aggregate availability of the network
12:24
49
R1
R6
R7
IP (Mostly) Uses Destination-Based Least-Cost Routing Flows from R8 and R1 Merge at R2 and Become Indistinguishable From R2, Traffic to R3, R4, R5 Use Upper Route Alternate Path Under-Utilized
2001, Cisco Systems, Inc. All rights reserved.
50
CE
Enterprise LAN PE
Toll Bypass
Enterprise LAN PE
GB Tunnel
Solution Requirements
QoS on CE Router
QoS on PE Router
52
VoIP Gateway
CE Enterprise LAN
Internet Service
Enterprise LAN
Enterprise LAN
12:24
53
5. Summary
12:24
55
Fast ReRoute (FRR) is a link or node protection feature, allowing for temporary bypassing of the failed link or node over a preestablished tunnel, while the head-end is rerouting the failed LSP
56
57
58
59
5. Summary
12:24
60
Backbone Carrier
Carrier A
Customer Carriers
Carrier B
12:24
61
ASBRs collect the client VPN routes through configured VRFs. Adjacent ASBR is seen as a CE through separate logical interface. Dedicated IPv4 routing session per VRF usually eBGP.
2001, Cisco Systems, Inc. All rights reserved. 12:24
62
63
64
65
IBGP
66
5. Summary
12:24
67
CE
A
New New York York
CE
B1
San San Francisco Francisco
CE
B2
Receiver 1
A B
PE PE
E
PE Default MDT
For low Bandwidth & control traffic only. Los Los Angeles Angeles
A Default MDT is created connecting all the PEs within a VPN for signaling and low bandwidth flows
CE A High-bandwidth source
Data MDT
D C
For High Bandwidth traffic only.
PE PE
Receiver 3
CE
D
Dallas Dallas
CE
for that customer starts sending traffic Interested receivers 1 & 2 join that High Bandwidth source Data-MDT is formed for this High-Bandwidth source
Receiver 2
12:24
68
5. Summary
12:24
69
Availability Subsecond Interior Gateway Protocol (IGP) convergence Sub-100 ms Fast Reroute (FRR) High availability12:24
70
An MPLS packet carries two (or more) DiffServ markings. Three modes of interaction are defined between markings: Uniform, Pipe, and Short Pipe. Modes are only relevant when a label is popped/pushed.
2001, Cisco Systems, Inc. All rights reserved.
71
12:24
72
12:24
75
12:24
78
5. Summary
12:24
81
Eliminates IP over ATM overhead and complexity One network for Internet, Business IP VPNs, and transport
IP+ATM Switch
82
12:24
83
IP+Optical Switch
Frame Relay
Frame Relay
ATM
12:24
84
Literature
12:24
85
12:24
86
Thats all nice but ... How does this help me for my datacenter ?
12:24
87
Customer Strategies
Mapping Customer Problems to Cisco Solutions Data Center Solution Set
Strategies
Server, Application and DC consolidation Migration to Web Apps Comprehensive Security Services Model Storage Consolidation Business Continuance & Disaster Recovery
12:24
88
Intranet Campus Core External protection Internal protection Primary Data Center Distributed Data Center
IP Network
Storage Networking
12:24
89
12:24
101
12:24
187