Documente Academic
Documente Profesional
Documente Cultură
Overview
MikroTik RouterOS
Training
Inter-Networking
BGP
MPLS
Introduction to MPLS
LDP
L2 and L3 VPN's
Traffic Engineering
2
Mikrotik 2012
Lab Setup
Lab Setup
X group number
AP SSID=AS100 band=2.4Ghz
192.168.x1.0/24
AS100
AP
10.20.0.1/24
192.168.x3.0/24
10.20.0.x1/24
R1 192.168.x.1/30
10.20.0.x2/24
X-group number
Y-Routers number
192.168.x.2/30
R2
R3
192.168.x.5/30
192.168.x.9/30
192.168.x.6/30
192.168.x.10/30
R4
192.168.x2.0/24
Mikrotik 2012
Mikrotik 2012
192.168.x4.0/24
Autonomous system
(BGP)
Mikrotik 2012
Internetworking
8/28/2014
BGP Basics
Mikrotik 2012
Mikrotik 2012
BGP Capabilities
Add AS100
to the path
AS100
AS200
Reject, AS100
already in
the path
Add AS200
to the path
Add AS300
to the path
Route refresh
Multi-protocol extension
4-byte AS support
AS300
Mikrotik 2012
Mikrotik 2012
BGP Transport
10
Packet format
Length (16bits)
Message body
Internetworking
11
Mikrotik 2012
12
8/28/2014
Keepalive
NLRI
Path attributes
14
Mikrotik 2012
Enable BGP
Verify BGP connectivity. Any state other than established indicates that
routers can not become neighbors (use print status for more details)
15
REMOTE-AS
3000
16
Mikrotik 2012
AS200
AS100
Passive
BGP peer
Networks
AS200
Mikrotik 2012
Private AS Removal
Single homed
Global net
AS65500
ISP
172.16.0.0/24
172.16.0.0/16
ISP
0.0.0.0/0
Stub net
Private AS cannot be
leaked to public
AS65501
AS300
172.16.1.0/24
AS65502
172.16.2.0/24
172.16.0.0/16
AS65500
Global net
AS300
Mikrotik 2012
Internetworking
172.16.0.0/24
17
Mikrotik 2012
18
8/28/2014
BGP Lab I
BGP Lab I
X group number
AP SSID=AS100 band=2.4Ghz
BGP peer
AS100
AP
192.168.x1.0/24
AS1x1
10.20.0.1/24
192.168.x3.0/24
R1 192.168.x.1/30
10.20.0.x1/24
10.20.0.x2/24
192.168.x.2/30
R2
192.168.x.6/30
192.168.x2.0/24
192.168.x.10/30
R4
AS65500
19
192.168.x4.0/24
Mikrotik 2012
Can be used:
Can be used:
As main/backup link
Load sharing
20
Non-stub Scenarios
Multihomed
AS65500
192.168.x.9/30
AS1x2
Mikrotik 2012
R3
192.168.x.5/30
ISP
Stub net
Global net
As main/backup link
Load sharing
More advanced
routing policies
AS200
AS100
R3
R1
172.16.0.0/16
AS65500
Global net
AS300
R2
172.16.0.0/24
AS300
Mikrotik 2012
21
Mikrotik 2012
BGP Lab II
Mikrotik 2012
Internetworking
22
23
Mikrotik 2012
24
8/28/2014
BGP Lab II
X group number
AP SSID=AS100 band=2.4Ghz
BGP peer
AS100
AP
BGP Lab II
192.168.x1.0/24
10.20.0.1/24
AS1x1
10.20.0.x1/24
192.168.x3.0/24
R1 192.168.x.1/30
10.20.0.x2/24
192.168.x.2/30
R2
R3
192.168.x.5/30
192.168.x.9/30
192.168.x.6/30
192.168.x.10/30
R4
AS1x2
192.168.x2.0/24
Mikrotik 2012
192.168.x4.0/24
25
26
Mikrotik 2012
BGP Lab II
AS300
eBGP
AS100
R3
R1
R4
R5
R6
BGP redistributes only best route. Since on R1 best route is one received from R3,
router R1 does not redistribute .12/024 and .14.0/24 back to R3
iBGP
eBGP
AS400
Mikrotik 2012
27
eBGP
Lo: 10.1.1.2
AS100
AS200
R1
172.16.1.1
Eth1
28
Mikrotik 2012
172.16.1.2
Eth1
R2
Eth2
Internetworking
29
Mikrotik 2012
30
8/28/2014
iBGP
8 Db dst-address=192.168.14.0/24 gateway=192.168.1.10
gateway-status=192.168.1.10 unreachable distance=200 scope=40
target-scope=30 bgp-as-path="112" bgp-local-pref=100 bgp-origin=igp
received-from=peer2
Mikrotik 2012
Loopback
AS100
R2
R1
Eth1
Eth1
Lo: 10.1.1.1
Lo: 10.1.1.2
32
Mikrotik 2012
Eth2
33
Route Distribution
Distribution Example
AS100
Internetworking
R2
R1
10.1.1.0/24
AS200
34
Mikrotik 2012
35
36
8/28/2014
Routing Filters
/routing filter
add chain=bgp-o prefix=10.1.1.0/24 action=accept \
set-bgp-communities=30:30
add chain=bgp-o action=discard
add chain=bgp-peer-o prefix=10.1.1.0/24 action=passthrough \
set-out-nexthop=192.168.99.1
Mikrotik 2012
Mikrotik 2012
Prefix filtering
38
AS Path filtering
10.1.1.0/24
AS100
AS400
R4
AS300
R1
R3
10.1.2.0/24
AS200
R2
# config on R3
/routing bgp peer set peer1 out-filter=bgp-out
# config on R3
Mikrotik 2012
39
Mikrotik 2012
BGP Lab IV
Internetworking
40
41
Mikrotik 2012
42
8/28/2014
BGP Lab IV
192.168.12.1 \
RT2
4ms
4ms
RT3
4ms
4ms
STATUS
43
Mikrotik 2012
44
Mikrotik 2012
Nexthop
Next-hop validation
Shortest AS-PATH
AS100
Dst: 172.16.0.0/24
next-hop:10.1.1.1
Dst: 172.16.0.0/24
next-hop:10.1.1.1
R1 10.1.1.1
172.16.0.0/24
10.1.1.2
10.30.1.1
45
# config on R2
/routing bgp peer set peer1 nexthop-choice=force-self
Dst: 172.16.0.0/24
next-hop:10.1.1.1
172.16.0.0/24
Weight=100
R2
172.16.0.0/24
Weight=50
10.30.1.2
AS200
Mikrotik 2012
R3
R1
R3
R2
10.30.1.1
Internetworking
AS100
Dst: 172.16.0.0/24
next-hop:10.30.1.1
172.16.0.0/24
10.1.1.2
46
Mikrotik 2012
Weight
R1 10.1.1.1
10.30.1.2
AS200
Nexthop self
AS100
R3
R2
AS300
47
Mikrotik 2012
48
8/28/2014
Local Preference
AS Path
AS200
AS300
AS100
AS200
R1
R5
R2
R3
10.1.1.0/24
AS-path:200,100
AS100
AS400
AS300
R4
R2
Local-pref = 200
AS-path:100
Local-pref = 100
R1
R4
R3
AS-path: 300,200,100
49
Mikrotik 2012
AS-Path Prepend
Origin
R2
51
MED
AS300
Mikrotik 2012
R3
R1
172.16.0.0/24
AS200
AS100
Prepend = 2
172.16.0.0/24
AS-Path: 200,300
172.16.0.0/24
AS-Path: 100,300,300
50
Mikrotik 2012
52
Mikrotik 2012
MED Example
AS300
AS100
Med=10
Med=0
R4
R1
Med=50
Med=100
R3
R2
AS200
Mikrotik 2012
Internetworking
53
Mikrotik 2012
54
8/28/2014
BGP Lab V
Community
X group number
AP SSID=AS100 band=2.4Ghz
192.168.x1.0/24
AS100
Default groups:
192.168.x1.0/24
AP
192.168.x3.0/24
AS1x1
R1
192.168.x2.0/24
192.168.x3.0/24
R2
R3
192.168.x4.0/24
R4
AS1x2
192.168.x2.0/24
Local-as do not send outside local AS (in nonconfederation network the same as no-export)
192.168.x4.0/24
Use as-path prepend to set up BGP fail-over and load sharing as illustrated
55
Mikrotik 2012
Mikrotik 2012
Community Example
Community cont.
AS300
R3
AS200
R1
R2
# config on R1
/routing filter add chain=bgp-out action=passthrough \
set-bgp-communities=no-export
57
Mikrotik 2012
AS prepending options
Geographic restrictions
Blackholing, etc.
58
AS 400
# AS100 router config
/routing bgp peer set toAS500 out-filter=bgp-out-as500
ISP
/routing filter
add bgp-communities=100:501 action=discard\
chain=bgp-out-as500
AS100
AS300
AS 500
Mikrotik 2012
Internetworking
56
59
Mikrotik 2012
60
10
8/28/2014
ISP example
Extended Communities
aut-num:
AS2588
as-name:
LatnetServiss-AS
descr:
LATNET ISP
member-of:
AS-LATVIA
remarks:
+-------------------------------------------------remarks:
|
remarks:
|
x=0 Announce as is
remarks:
|
x=1 Prepend +1
remarks:
|
x=2 Prepend +2
remarks:
|
x=3 Prepend +3
remarks:
|
x=4 Prepend +4
remarks:
|
x=5 Prepend +5
remarks:
|
remarks:
|
2588:400 Latvian Nets
remarks:
|
2588:500 Announce to LIX (Latvian Internet Exchange)
remarks:
|
2588:666 Don't announce (blackhole)
remarks:
|
2588:70x Announce to uplinks with $x prepend
remarks:
|
2588:900 Recieved from LIX (Latvian Internet Exchange)
remarks:
|
remarks:
|
For more information please use the email address
remarks:
|
iproute (at) latnet (dot) lv
remarks:
+--------------------------------------------------
Route Targets
Site of Origin
Control flags
MTU
Encapsulation flags
61
Mikrotik 2012
Aggregation
AS100
AS400
10.1.1.0/24
R1
10.0.0.0/8
R4
AS200
Mikrotik 2012
Internetworking
64
BGP Confederation
Mikrotik 2012
RR
Mikrotik 2012
R2
R2
63
R3
R1
R3
R1
# config on R3
/routing bgp aggregate add instance=default summary-only=yes \
prefix=10.0.0.0/8 action=passthrough inherit-attributes=no
AS200
AS200
10.1.2.0/24
R2
AS300
R3
62
Mikrotik 2012
65
# confederation setup
/routing bgp instance set default confederation=100 \
confederation-peers=20,30
Mikrotik 2012
66
11
8/28/2014
BGP Confederation
AS300
192.168.x1.0/24
AS100
AS200
R9
AS-Path: 100,300
R8
AP
R3
192.168.x3.0/24
Confederation
AS xx00
R4
R1
AS20
R1
AS-Path:(20,30)
AS10
R5
R2
AS400
AS1x1
R3
R2
R6
AS1x2
AS100
AS30
R4
192.168.x2.0/24
R7
Mikrotik 2012
67
Mikrotik 2012
Confederation AS-Path
68
MultiProtocol BGP
Mikrotik 2012
192.168.x4.0/24
69
IPv6
L2VPN
VPN4
70
BGP Instances
Needs:
/routing bgp instance
set <id> redistribute-other-bgp=yes
Internetworking
71
Mikrotik 2012
72
12
8/28/2014
X group number
AP SSID=AS100 band=2.4Ghz
192.168.x1.0/24
AS100
AP
10.20.0.1/24
192.168.x3.0/24
10.20.0.x1/24
R1 192.168.x.1/30
Lo:10.255.x.1
10.20.0.x2/24
Lo:10.255.x.2
192.168.x.2/30
R2
R3 Lo:10.255.x.3
192.168.x.5/30
192.168.x.9/30
192.168.x.6/30
192.168.x.10/30
R4
Lo:10.255.x.4
192.168.x2.0/24
192.168.x4.0/24
Mikrotik 2012
73
74
Mikrotik 2012
MPLS Basics
MPLS Basics
Layer3 VPNs
Guaranteed bandwidth
services
Mikrotik
2012
75
Mikrotik 2012
MPLS Basics
Label is removed at
egress LER
MPLS
Backbone
MPLS Basics
L2
MPLS
Label
Mikrotik 2012
Internetworking
76
L3
EXP S TTL
77
78
13
8/28/2014
/mpls
/mpls
/mpls
/mpls
Local:
set dynamic-label-range=100-1048575
local-bindings
remote-bindings
forwarding-table
Remote:
Fwd:
DST
1.1.1.1
2.2.2.2
3.3.3.3
Lo:2.2.2.2
LABEL
impl-null
22
23
DST
1.1.1.1
2.2.2.2
3.3.3.3
DST
1.1.1.1
2.2.2.2
3.3.3.3
LABEL
21
22
impl-null
DST
HOP LABEL
2.2.2.2 R2
impl-null
3.3.3.3 R2
23
DST
HOP LABEL
1.1.1.1 R1 impl-null
3.3.3.3 R3 impl-null
DST
HOP LABEL
2.2.2.2 R2
impl-null
1.1.1.1 R2
21
IN OUT DST
22
2.2.2.2
23 23 3.3.3.3
IN OUT DST
21
1.1.1.1
23
3.3.3.3
IN OUT DST
21 21 1.1.1.1
22
2.2.2.2
79
Mikrotik 2012
LABEL
21
impl-null
23
Lo:3.3.3.3
80
Mikrotik 2012
81
Mikrotik 2012
LDP
Label space
Remote bindings
IGP Prefix
10.1.1.0/24
10.1.1.0/24
Label 21
10.1.1.0/24
Label 22
82
Mikrotik 2012
10.1.1.0/24
Label 23
Label1
Path 1
Path 1
Path 1
Path 2
Local binding
Label 21
Local binding
Label 22
Mikrotik 2012
Internetworking
Local binding
Label 23
Label1
Path 1
Label1
Path 2
83
Mikrotik 2012
84
14
8/28/2014
Distribution Modes
Mikrotik 2012
85
Mikrotik 2012
86
LDP Lab
Mikrotik 2012
Configuring LDP
87
Mikrotik 2012
Reserved Labels
0 explicit NULL
1 router alert
3 implicit NULL
PHP
PHP
Mikrotik 2012
Internetworking
Implicit NULL
89
Mikrotik 2012
Explicit NULL
90
15
8/28/2014
Explicit NULL
Label: 23
92
Label: 12
Mikrotik 2012
MPLS Traceroute
91
Mikrotik 2012
Label: 34
Targeted LDP
R1
R2
R3
Label: 32
R4
LDP
Label: 43
Mikrotik 2012
93
94
LDP
Mikrotik 2012
LDP
Internetworking
95
Mikrotik 2012
96
16
8/28/2014
VRF
Layer3 VPN
VRF
Mikrotik 2012
98
Mikrotik 2012
/ip route
add gateway=10.3.0.1@main routing-mark=vrf1
97
Route Leaking
/ip route
add dst-address=5.5.5.0/24 gateway=10.3.0.1%ether2 \
routing-mark=main
Mikrotik 2012
99
BGP/MPLS IP VPN
100
Mikrotik 2012
L3VPN
VPN A
Site 1
RR
CE
CE
VPN B
Site 2
PE
PE
CE
VPN B
Site 1
CE
PE
VPN A
Site 2
CE
BGP
OSPF as CE-PE
Mikrotik 2012
Internetworking
101
VPN B
Site 3
Mikrotik 2012
VPN A
Site 3
102
17
8/28/2014
Route Distinguisher
Route Target
Format
IP:num
ASn:num
103
Mikrotik 2012
Route Target
VPN B
Site 1 CE
Configuring L3VPN
CE
VPN A
Site 1
Import: 100:3
100:2
Export: 100:1
Import: 100:1
Export: 100:3
CE
Import: 100:2
Export: 100:4
CE
VPN B
Site 2
Mikrotik 2012
105
VPNV4 Lab
Import: 100:1
100:4
Export: 100:2
VPN A
Site 2
Results
/routing bgp vpn vpnv4-route
print
Mikrotik 2012
AP SSID=AS100 band=2.4Ghz
Blue 192.168.x1.0/24
Site 1
AS100
106
VPNV4 Lab
BGP peers
X group number
RR
AP
104
Mikrotik 2012
192.168.x3.0/24
R1
Green
Site 2
Lo:10.255.x.1
Lo:10.255.x.2
Internetworking
107
GroupAS: X00
Green
Site 1
192.168.x2.0/24
Mikrotik 2012
R2
R3 Lo:10.255.x.3
R4
Lo:10.255.x.4
Mikrotik 2012
Blue
Site 2
192.168.x4.0/24
108
18
8/28/2014
Layer 2 VPN
AP
CE
CE-PE BGP
instance
AP
CE
BGP peer
PE
PE
MPLS Cloud
CE
CE
OSPF
Mikrotik 2012
OSPF
109
Customer's L2 frame
SN label
L2 header
Site 1
CE1
PE1
PE2
Site 3
P1
CE3
PE3
MPLS backbone
Pseudo wire
Site 2
CE2
Mikrotik 2012
111
Mikrotik 2012
Configuring VPLS
110
Mikrotik 2012
112
Configuring VPLS
/interface vpls
add remote-peer=x.x.x.x vpls-id=x:x
Internetworking
113
114
19
8/28/2014
Split Horizon
CE3
PE1
PE3
x - group number
CE2
CE4
PE2
115
Mikrotik 2012
VPLS tunnel
X group number
AP SSID=AS100 band=2.4Ghz
192.168.x0.1/24
Site 1
AS100
RR
AP
VPN network:
192.168.x0.0/24
Lo:10.255.x.2
x - group number
Mikrotik 2012
10.255.0.2:0
no
10.20.0.12
10.255.0.1:0
yes
10.20.0.11
10.255.0.1
Site 4
192.168.x0.4/24
118
119
R4
Lo:10.255.x.4
Mikrotik 2012
Internetworking
R3 Lo:10.255.x.3
R2
Site 2
192.168.x0.2/24
Mikrotik 2012
192.168.x0.3/24
Site 3
R1
Lo:10.255.x.1
116
Mikrotik 2012
Mikrotik 2012
120
20
8/28/2014
L2MTU: 1500
Eth(14) IP(20)
DATA(1480)
R1
L2MTU: 1526
IP(20)
DATA(1480)
R2
L2MTU: 1526
DATA(1480)
L2MTU: 1522
DATA(1480)
R3
DATA(1480)
IP (L3) MTU
R4
MPLS MTU
L2MTU: 1500
L2 MTU
Eth(14) IP(20)
DATA(1480)
Full Frame
Mikrotik 2012
121
Mikrotik 2012
122
Mikrotik 2012
124
Mikrotik 2012
123
No scalability issues
Internetworking
125
Mikrotik 2012
126
21
8/28/2014
127
128
Mikrotik 2012
IP Routing Limitation
Traffic Engineering
D
40Mbps traffic from A to F
B
129
Mikrotik 2012
Mikrotik 2012
D
B
130
Traffic Engineering
Traffic Engineering
TE Tunnel1 50Mbps
TE Tunnel2 50Mbps
Mikrotik 2012
Internetworking
131
Mikrotik 2012
132
22
8/28/2014
How it works
133
TE configuration
Mikrotik 2012
136
Mikrotik 2012
TE configuration
TE tunnel monitoring
[admin@R2] /interface traffic-eng> monitor 0
tunnel-id: 3
primary-path-state: established
primary-path: rt
secondary-path-state: not-necessary
active-path: rt
active-lspid: 1
active-label: 124
recorded-route: 192.168.1.1[124],192.168.1.2[0]
reserved-bandwidth: 10.0Mbps
Internetworking
135
Mikrotik 2012
TE configuration
134
Mikrotik 2012
How it works
Tunnel head end appears as interface
137
Mikrotik 2012
TE-METRIC REMAINING-BW
1
50.0Mbps
1
40.0Mbps
138
23
8/28/2014
Static Path
10.1.1.1
A
10.1.4.1
D
B
10.1.2.1
10.1.0.1
10.1.2.1:loose
Mikrotik 2012
10.1.1.1:strict,10.1.2.1:strict, 10.1.4.1:loose
10.1.1.1:strict,10.1.2.1:strict,10.1.3.1:strict,10.1.4.1:strict
139
TE Lab I
140
Mikrotik 2012
TE Lab I
VPLS tunnel
X group number
AP SSID=AS100 band=2.4Ghz
192.168.x0.1/24
Site 1
AS100
RR
AP
VPN network:
192.168.x0.0/24
192.168.x0.3/24
Lo:10.255.x.1
Lo:10.255.x.2
R3 Lo:10.255.x.3
R2
Site 2
R4
192.168.x0.2/24
Mikrotik 2012
141
Internetworking
192.168.x0.4/24
142
Mikrotik 2012
Site 4
Auto Bandwidth
Lo:10.255.x.4
Mikrotik 2012
Site 3
R1
143
144
24
8/28/2014
TE Lab II
TE Lab II
VPLS tunnel
X group number
AP SSID=AS100 band=2.4Ghz
192.168.x0.1/24
Site 1
AS100
RR
AP
VPN network:
192.168.x0.0/24
145
Site 3
Lo:10.255.x.1
Lo:10.255.x.2
R3 Lo:10.255.x.3
R2
Site 2
192.168.x0.2/24
Mikrotik 2012
192.168.x0.3/24
R1
R4
Lo:10.255.x.4
Mikrotik 2012
Site 4
192.168.x0.4/24
146
Overall Summary
Mikrotik 2012
Internetworking
147
25