Documente Academic
Documente Profesional
Documente Cultură
Agenda
Introduction to MPLS
What is MPLS? Why it was developed?
MPLS in action
Basic MPLS L3 VPN config
Q&A
2011 Cisco Systems, Inc. All rights reserved.
Introduction to MPLS
MPLS works over most Layer 2 technologies such as ATM, FR, PPP, POS, Ethernet
2011 Cisco Systems, Inc. All rights reserved.
PE
PE
CE
2011 Cisco Systems, Inc. All rights reserved.
PE
P P CE
5
BGP session
PE
ATM/FR VC
PE
PE
routing peering
Label 20bits
EXP S
TTL-8bits
LSR Label Switch Router (eg. PE, P) LSP Label Switched Path IGP Interior Gateway Protocol LDP Label Distribution Protocol LIB, LFIB Label Information Base, Label Forwarding Information Base MP-BGP, RSVP Protocols for MPLS VPN and MPLS TE
2011 Cisco Systems, Inc. All rights reserved.
LSP P PE
CE
P P
CE
10
11
- LFIB has: to forward packet to 1.1.1.1/32, use label L and send packet using peer LDP nexthop over e0/0 interface
1.1.1.1/32
e0/0
LSR
12
- 3 labels for MPLS TE the most upper label is used to indicate Outer Label which TE tunnel to forward this packet
TE Label
LDP Label VPN Label Inner Label
2011 Cisco Systems, Inc. All rights reserved.
IP Header
13
PE
VPN RED
PE
VPN GREEN
PE
PE
PE
14
RD length is 64 bits and is in formant X:Y, where X is usually Autonomous System Number or IP address usually one RD is assigned per one customer
RT (Route Target) governs which VPN prefixes are allowed to be imported or exported out of particular VPN Using RT you create intranet or extranet - Intranet different sites of same VPN can communicate
15
PE
PE
16
PE
PE
17
PE
PE
PE
PE
ip vrf BLUE rd 100:3 route-target export 3:1 route-target import 3:1 route-target import 1:1
2011 Cisco Systems, Inc. All rights reserved.
19
PE
MPLS network
PE
20
IP
IP
PE1
P1
P2
PE2
1.) PE1 receives IP packet on VRF interface assigned to site 1 of VPN BLUE. 2.) PE1 looks up VPN and IGP label, imposes this label stack to IP packet and forwards it to MPLS network. IGP label is known based on iBGP next hop, which is IP address of PE2. 3.) P1 router swaps IGP label based on its LFIB table. 4.) P2 removes IGP label due to PHP, but does not touch VPN label. 5.) PE2 router receives IP packet with VPN label, which it uses to select correct outgoing VPN site 6.) PE2 then strips off VPN label, makes lookup in its VRF RIB for particular VPN site to get the outgoing interface to 21 send received packet to. reserved. 2011 Cisco Systems, Inc. All rights
OSPF
IS-IS eBGP
22
MPLS in action
23
Site 2 of VPN RED s2/0 s2/0 e0/0 e0/0 PE1 P1 e1/0 e1/0 P2 e0/0 e0/0 PE2 s3/0 s3/0 Site 2 of VPN BLUE
- PE1
s2/0: 10.1.1.1/30 s3/0: 10.3.1.1/30 e0/0: 10.0.12.1/24
- P1
e0/0: 10.0.12.2/24 e1/0: 10.0.23.2/24 lo0: 10.0.0.2/32
- PE2
s2/0: 10.1.2.1/30 s3/0: 10.3.2.1/30 e0/0: 10.0.34.4/24 lo0: 10.0.0.4/32
24
25
26
27
28
29
30
31
32
MPLS verification
33
P2#show ip ospf neighbor Neighbor ID 10.0.0.2 10.0.0.4 Pri 1 1 State FULL/DR FULL/DR Dead Time 00:00:38 00:00:31 Address 10.0.23.2 10.0.34.4 Interface Ethernet1/0 Ethernet0/0
34
35
36
37
P1#sh mpls forwarding-table 10.0.0.4 Local Outgoing Prefix Label Label or VC or Tunnel Id 19 16 10.0.0.4/32
P2#show mpls forwarding-table 10.0.0.4 Local Outgoing Prefix Bytes Label Label Label or VC or Tunnel Id Switched 16 Pop Label 10.0.0.4/32 583785
2011 Cisco Systems, Inc. All rights reserved.
P2#show mpls forwarding-table 10.0.0.1 Local Outgoing Prefix Bytes Label Label Label or VC or Tunnel Id Switched 18 16 10.0.0.1/32 875801
P1#show mpls forwarding-table 10.0.0.1 Local Outgoing Prefix Bytes Label Label Label or VC or Tunnel Id Switched 16 Pop Label 10.0.0.1/32 940813
2011 Cisco Systems, Inc. All rights reserved.
40
site_2_vpn_red#traceroute 192.168.1.1 source 192.168.2.1 Type escape sequence to abort. Tracing the route to 192.168.1.1 1 2 3 4 5 10.1.2.1 20 msec 10.0.34.3 [MPLS: 10.0.23.2 [MPLS: 10.1.1.1 20 msec 10.1.1.2 36 msec 20 msec 20 msec Labels 18/17 Exp 0] 40 msec 36 msec 40 msec Labels 16/17 Exp 0] 40 msec 40 msec 40 msec 20 msec 16 msec * 40 msec
41
site_2_vpn_blue#traceroute 172.16.1.1 source 172.16.2.1 Type escape sequence to abort. Tracing the route to 172.16.1.1 1 2 3 4 5 10.3.2.1 24 msec 10.0.34.3 [MPLS: 10.0.23.2 [MPLS: 10.3.1.1 20 msec 10.3.1.2 20 msec 12 msec 20 msec Labels 18/24 Exp 0] 40 msec 40 msec 40 msec Labels 16/24 Exp 0] 40 msec 40 msec 40 msec 20 msec 20 msec * 28 msec
42
Q and A MPLS
43
44