The document describes a series of MPLS Layer 3 VPN labs focusing on different routing protocols between the provider edge (PE) and customer edge (CE) routers. The first lab sets up a basic MPLS L3 VPN using static routes between the PE and CE routers to establish connectivity between two remote customer sites. Subsequent labs will configure the PE-CE routing with EIGRP, OSPF and BGP to explore different routing options.

1. Supakorn Visutthicho
CCIEX2 #43646 (RS|SP) | NETPRIME TRAINING
MPLS LAB Practice Vol.1
IOS XR AND IOS XE PRACTICE LABS FOCUS ON MPLS
TECHNOLOGIES
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

2. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Content
Lab 1 : MPLS L3 VPN PE-CE (Static Route)
Lab 2 : MPLS L3 VPN PE-CE (EIGRP)
Lab 3 : MPLS L3 VPN PE-CE (OSPF) - Domain ID
Lab 4 : MPLS L3 VPN PE-CE (OSPF Sham-Link)
Lab 5 : MPLS L3 VPN PE-CE (BGP)
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

3. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Lab 1 : MPLS L3 VPN PE-CE (Static Route)
Software
IOS XRv : 6.0.1
CSR1000v : 15.5
Initial Configurations
P1
hostname P1
interface Loopback0
ip address 10.0.0.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 10.1.11.1 255.255.255.0
no shutdown
!
interface GigabitEthernet0/1
ip address 10.1.12.1 255.255.255.0
no shutdown
PE11
hostname PE11
interface Loopback0
ipv4 address 10.0.0.11 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0/0/0
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

4. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
ipv4 address 172.1.11.11 255.255.255.0
no shutdown
!
interface GigabitEthernet0/0/0/1
ipv4 address 10.1.11.11 255.255.255.0
no shutdown
PE12
hostname PE12
interface Loopback0
ip address 10.0.0.12 255.255.255.255
!
interface GigabitEthernet1
ip address 172.2.12.12 255.255.255.0
negotiation auto
!
interface GigabitEthernet2
ip address 10.1.12.12 255.255.255.0
CE1
hostname CE1
interface Loopback0
ip address 172.1.1.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.1.11.1 255.255.255.0
no shutdown
CE2
hostname CE2
interface Loopback0
ip address 172.2.2.2 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.2.12.2 255.255.255.0
no shutdown
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

5. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Solution
P1
mpls label protocol ldp
mpls ldp router-id Loopback0 force
router ospf 10
router-id 10.0.0.1
network 10.0.0.1 0.0.0.0 area 0
network 10.1.11.1 0.0.0.0 area 0
network 10.1.12.1 0.0.0.0 area 0
interface GigabitEthernet0/0
mpls ip
interface GigabitEthernet0/1
mpls ip
PE11
vrf CE1
address-family ipv4 unicast
import route-target
10:12
!
export route-target
10:12
interface GigabitEthernet0/0/0/0
no ipv4 address
vrf CE1
ipv4 address 172.1.11.11 255.255.255.0
router static
vrf CE1
address-family ipv4 unicast
172.1.1.1/32 172.1.11.1
router ospf 10
router-id 10.0.0.11
area 0
interface Loopback0
!
interface GigabitEthernet0/0/0/1
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

6. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
router bgp 10
address-family vpnv4 unicast
!
neighbor 10.0.0.12
remote-as 10
update-source Loopback0
address-family vpnv4 unicast
vrf CE1
rd 10:12
address-family ipv4 unicast
redistribute static
mpls ldp
router-id 10.0.0.11
interface GigabitEthernet0/0/0/1
PE12
vrf definition CE2
rd 10:12
!
address-family ipv4
route-target export 10:12
route-target import 10:12
mpls label protocol ldp
mpls ldp router-id Loopback0 force
interface GigabitEthernet1
vrf forwarding CE2
ip address 172.2.12.12 255.255.255.0
interface GigabitEthernet2
mpls ip
router ospf 10
router-id 10.0.0.12
network 10.0.0.12 0.0.0.0 area 0
network 10.1.12.12 0.0.0.0 area 0
router bgp 10
bgp log-neighbor-changes
no bgp default ipv4-unicast
neighbor 10.0.0.11 remote-as 10
neighbor 10.0.0.11 update-source Loopback0
!
address-family ipv4
exit-address-family
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

7. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
address-family vpnv4
neighbor 10.0.0.11 activate
neighbor 10.0.0.11 send-community both
exit-address-family
!
address-family ipv4 vrf CE2
redistribute static
ip route vrf CE2 172.2.2.2 255.255.255.255 172.2.12.2
CE1
ip route 0.0.0.0 0.0.0.0 172.1.11.11
CE2
ip route 0.0.0.0 0.0.0.0 172.2.12.12
Verification
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast summary
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 6
BGP NSR Initial initsync version 2 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
BGP is operating in STANDALONE mode.
Process RcvTblVer bRIB/RIB LabelVer ImportVer SendTblVer StandbyVer
Speaker 6 6 6 6 6 0
Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd
10.0.0.12 0 10 19 18 6 0 0 00:13:38 1
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 6
BGP NSR Initial initsync version 2 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

8. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Status codes: s suppressed, d damped, h history, * valid, > best
i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE1)
*> 172.1.1.1/32 172.1.11.1 0 32768 ?
*>i172.2.2.2/32 10.0.0.12 0 100 0 ?
Processed 2 prefixes, 2 paths
PE12#show bgp vpnv4 unicast all summary
BGP router identifier 10.0.0.12, local AS number 10
BGP table version is 5, main routing table version 5
2 network entries using 512 bytes of memory
2 path entries using 240 bytes of memory
2/2 BGP path/bestpath attribute entries using 528 bytes of memory
1 BGP extended community entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 1304 total bytes of memory
BGP activity 2/0 prefixes, 2/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.0.0.11 4 10 20 21 5 0 0 00:15:38 1
PE12#show bgp vpnv4 unicast all
BGP table version is 5, local router ID is 10.0.0.12
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-
Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE2)
*>i 172.1.1.1/32 10.0.0.11 0 100 0 ?
*> 172.2.2.2/32 172.2.12.2 0 32768 ?
CE1#show ip route
Gateway of last resort is 172.1.11.11 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 172.1.11.11
172.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C 172.1.1.1/32 is directly connected, Loopback0
C 172.1.11.0/24 is directly connected, GigabitEthernet0/0
L 172.1.11.1/32 is directly connected, GigabitEthernet0/0
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

9. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE2#show ip route
Gateway of last resort is 172.2.12.12 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 172.2.12.12
172.2.0.0/16 is variably subnetted, 3 subnets, 2 masks
C 172.2.2.2/32 is directly connected, Loopback0
C 172.2.12.0/24 is directly connected, GigabitEthernet0/0
L 172.2.12.2/32 is directly connected, GigabitEthernet0/0
CE1#ping 172.2.2.2 source loopback 0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 172.1.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 22/31/64 ms
CE1#traceroute 172.2.2.2 source loopback 0 numeric
Type escape sequence to abort.
Tracing the route to 172.2.2.2
VRF info: (vrf in name/id, vrf out name/id)
1 172.1.11.11 28 msec 8 msec 3 msec
2 10.1.11.1 [MPLS: Labels 17/19 Exp 0] 35 msec 22 msec 23 msec
3 172.2.12.12 [MPLS: Label 19 Exp 0] 21 msec 15 msec 14 msec
4 172.2.12.2 41 msec * 29 msec
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

10. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Lab 2 : MPLS L3 VPN PE-CE (EIGRP)
Initial Configurations
P1
hostname P1
interface Loopback0
ip address 10.0.0.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 10.1.11.1 255.255.255.0
no shutdown
!
interface GigabitEthernet0/1
ip address 10.1.12.1 255.255.255.0
no shutdown
PE11
hostname PE11
interface Loopback0
ipv4 address 10.0.0.11 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0/0/0
ipv4 address 172.1.11.11 255.255.255.0
no shutdown
!
interface GigabitEthernet0/0/0/1
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

11. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
ipv4 address 10.1.11.11 255.255.255.0
no shutdown
PE12
hostname PE12
interface Loopback0
ip address 10.0.0.12 255.255.255.255
!
interface GigabitEthernet1
ip address 172.2.12.12 255.255.255.0
negotiation auto
!
interface GigabitEthernet2
ip address 10.1.12.12 255.255.255.0
CE1
hostname CE1
interface Loopback0
ip address 172.1.1.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.1.11.1 255.255.255.0
no shutdown
CE2
hostname CE2
interface Loopback0
ip address 172.2.2.2 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.2.12.2 255.255.255.0
no shutdown
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

12. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Solution
P1
mpls label protocol ldp
mpls ldp router-id Loopback0 force
router ospf 10
router-id 10.0.0.1
network 10.0.0.1 0.0.0.0 area 0
network 10.1.11.1 0.0.0.0 area 0
network 10.1.12.1 0.0.0.0 area 0
interface GigabitEthernet0/0
mpls ip
interface GigabitEthernet0/1
mpls ip
PE11
vrf CE1
address-family ipv4 unicast
import route-target
10:12
!
export route-target
10:12
interface GigabitEthernet0/0/0/0
no ipv4 address
vrf CE1
ipv4 address 172.1.11.11 255.255.255.0
router eigrp 10
vrf CE1
address-family ipv4
default-metric 1000 1000 255 1 1500
autonomous-system 10
redistribute bgp 10
interface GigabitEthernet0/0/0/0
router ospf 10
router-id 10.0.0.11
area 0
interface Loopback0
!
interface GigabitEthernet0/0/0/1
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

13. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
router bgp 10
address-family vpnv4 unicast
!
neighbor 10.0.0.12
remote-as 10
update-source Loopback0
address-family vpnv4 unicast
vrf CE1
rd 10:12
address-family ipv4 unicast
redistribute eigrp 10
mpls ldp
router-id 10.0.0.11
interface GigabitEthernet0/0/0/1
PE12
vrf definition CE2
rd 10:12
!
address-family ipv4
route-target export 10:12
route-target import 10:12
mpls label protocol ldp
mpls ldp router-id Loopback0 force
interface GigabitEthernet1
vrf forwarding CE2
ip address 172.2.12.12 255.255.255.0
interface GigabitEthernet2
mpls ip
router ospf 10
router-id 10.0.0.12
network 10.0.0.12 0.0.0.0 area 0
network 10.1.12.12 0.0.0.0 area 0
router bgp 10
bgp log-neighbor-changes
no bgp default ipv4-unicast
neighbor 10.0.0.11 remote-as 10
neighbor 10.0.0.11 update-source Loopback0
!
address-family ipv4
exit-address-family
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

14. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
address-family vpnv4
neighbor 10.0.0.11 activate
neighbor 10.0.0.11 send-community both
exit-address-family
!
address-family ipv4 vrf CE2
redistribute eigrp 10
router eigrp 10
!
address-family ipv4 vrf CE2 autonomous-system 10
default-metric 1000 1000 255 1 1500
redistribute bgp 10
network 172.2.12.12 0.0.0.0
CE1
router eigrp 10
network 172.1.1.1 0.0.0.0
network 172.1.11.1 0.0.0.0
CE2
router eigrp 10
network 172.2.2.2 0.0.0.0
network 172.2.12.2 0.0.0.0
Verification
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast summary
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 6
BGP NSR Initial initsync version 2 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
BGP is operating in STANDALONE mode.
Process RcvTblVer bRIB/RIB LabelVer ImportVer SendTblVer StandbyVer
Speaker 8 8 8 8 8 0
Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd
10.0.0.12 0 10 11 11 8 0 0 00:07:14 2
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast
BGP router identifier 10.0.0.11, local AS number 10
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

15. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 8
BGP NSR Initial initsync version 2 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
Status codes: s suppressed, d damped, h history, * valid, > best
i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE1)
*> 172.1.1.1/32 172.1.11.1 2570240 32768 ?
*> 172.1.11.0/24 0.0.0.0 0 32768 ?
*>i172.2.2.2/32 10.0.0.12 130816 100 0 ?
*>i172.2.12.0/24 10.0.0.12 0 100 0 ?
Processed 4 prefixes, 4 paths
PE12#show bgp vpnv4 unicast all summary
BGP router identifier 10.0.0.12, local AS number 10
BGP table version is 9, main routing table version 9
4 network entries using 1024 bytes of memory
4 path entries using 480 bytes of memory
4/4 BGP path/bestpath attribute entries using 1056 bytes of memory
4 BGP extended community entries using 1000 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 3560 total bytes of memory
BGP activity 4/0 prefixes, 4/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.0.0.11 4 10 12 13 9 0 0 00:08:20 2
PE12#show bgp vpnv4 unicast all
BGP table version is 9, local router ID is 10.0.0.12
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-
Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE2)
*>i 172.1.1.1/32 10.0.0.11 2570240 100 0 ?
*>i 172.1.11.0/24 10.0.0.11 0 100 0 ?
*> 172.2.2.2/32 172.2.12.2 130816 32768 ?
*> 172.2.12.0/24 0.0.0.0 0 32768 ?
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

16. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE1#show ip route eigpr
Gateway of last resort is not set
172.2.0.0/16 is variably subnetted, 2 subnets, 2 masks
D 172.2.2.2/32
[90/131072] via 172.1.11.11, 00:03:15, GigabitEthernet0/0
D 172.2.12.0/24 [90/3072] via 172.1.11.11, 00:03:17, GigabitEthernet0/0
CE2#show ip route eigrp
Gateway of last resort is not set
172.1.0.0/16 is variably subnetted, 2 subnets, 2 masks
D 172.1.1.1/32
[90/131072] via 172.2.12.12, 00:04:52, GigabitEthernet0/0
D 172.1.11.0/24 [90/3072] via 172.2.12.12, 00:04:52, GigabitEthernet0/0
CE1#ping 172.2.2.2 source loopback 0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 172.1.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 14/25/56 ms
CE1#traceroute 172.2.2.2 source loopback 0 numeric
Type escape sequence to abort.
Tracing the route to 172.2.2.2
VRF info: (vrf in name/id, vrf out name/id)
1 172.1.11.11 14 msec 6 msec 5 msec
2 10.1.11.1 [MPLS: Labels 17/20 Exp 0] 19 msec 17 msec 25 msec
3 172.2.12.12 [MPLS: Label 20 Exp 0] 13 msec 11 msec 11 msec
4 172.2.12.2 16 msec * 17 msec
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

17. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Lab 3 : MPLS L3 VPN PE-CE (OSPF) - Domain ID
Initial Configurations
P1
hostname P1
interface Loopback0
ip address 10.0.0.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 10.1.11.1 255.255.255.0
no shutdown
!
interface GigabitEthernet0/1
ip address 10.1.12.1 255.255.255.0
no shutdown
PE11
hostname PE11
interface Loopback0
ipv4 address 10.0.0.11 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0/0/0
ipv4 address 172.1.11.11 255.255.255.0
no shutdown
!
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

18. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
interface GigabitEthernet0/0/0/1
ipv4 address 10.1.11.11 255.255.255.0
no shutdown
PE12
hostname PE12
interface Loopback0
ip address 10.0.0.12 255.255.255.255
!
interface GigabitEthernet1
ip address 172.2.12.12 255.255.255.0
negotiation auto
!
interface GigabitEthernet2
ip address 10.1.12.12 255.255.255.0
CE1
hostname CE1
interface Loopback0
ip address 172.1.1.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.1.11.1 255.255.255.0
no shutdown
CE2
hostname CE2
interface Loopback0
ip address 172.2.2.2 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.2.12.2 255.255.255.0
no shutdown
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

19. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Solution
P1
mpls label protocol ldp
mpls ldp router-id Loopback0 force
router ospf 10
router-id 10.0.0.1
network 10.0.0.1 0.0.0.0 area 0
network 10.1.11.1 0.0.0.0 area 0
network 10.1.12.1 0.0.0.0 area 0
interface GigabitEthernet0/0
mpls ip
interface GigabitEthernet0/1
mpls ip
PE11
vrf CE1
address-family ipv4 unicast
import route-target
10:12
!
export route-target
10:12
interface GigabitEthernet0/0/0/0
no ipv4 address
vrf CE1
ipv4 address 172.1.11.11 255.255.255.0
router ospf 101
vrf CE1
address-family ipv4
redistribute bgp 10
area 0
interface GigabitEthernet0/0/0/0
router ospf 10
router-id 10.0.0.11
area 0
interface Loopback0
!
interface GigabitEthernet0/0/0/1
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

20. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
router bgp 10
address-family vpnv4 unicast
!
neighbor 10.0.0.12
remote-as 10
update-source Loopback0
address-family vpnv4 unicast
vrf CE1
rd 10:12
address-family ipv4 unicast
redistribute ospf 101
mpls ldp
router-id 10.0.0.11
interface GigabitEthernet0/0/0/1
PE12
vrf definition CE2
rd 10:12
!
address-family ipv4
route-target export 10:12
route-target import 10:12
mpls label protocol ldp
mpls ldp router-id Loopback0 force
interface GigabitEthernet1
vrf forwarding CE2
ip address 172.2.12.12 255.255.255.0
interface GigabitEthernet2
mpls ip
router ospf 10
router-id 10.0.0.12
network 10.0.0.12 0.0.0.0 area 0
network 10.1.12.12 0.0.0.0 area 0
router bgp 10
bgp log-neighbor-changes
no bgp default ipv4-unicast
neighbor 10.0.0.11 remote-as 10
neighbor 10.0.0.11 update-source Loopback0
!
address-family ipv4
exit-address-family
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

21. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
address-family vpnv4
neighbor 10.0.0.11 activate
neighbor 10.0.0.11 send-community both
exit-address-family
!
address-family ipv4 vrf CE2
redistribute ospf 102
router ospf 102 vrf CE2
redistribute bgp 10
network 172.2.12.12 0.0.0.0 area 0
CE1
router ospf 101
network 172.1.1.1 0.0.0.0 area 0
network 172.1.11.1 0.0.0.0 area 0
CE2
router ospf 102
network 172.2.2.2 0.0.0.0 area 0
network 172.2.12.2 0.0.0.0 area 0
Verification
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast summary
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 12
BGP NSR Initial initsync version 5 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
BGP is operating in STANDALONE mode.
Process RcvTblVer bRIB/RIB LabelVer ImportVer SendTblVer
StandbyVer
Speaker 12 12 12 12 12 0
Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd
10.0.0.12 0 10 12 10 12 0 0 00:05:40 2
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

22. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 14
BGP NSR Initial initsync version 5 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
Status codes: s suppressed, d damped, h history, * valid, > best
i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE1)
*> 172.1.1.1/32 172.1.11.1 2 32768 ?
*> 172.1.11.0/24 0.0.0.0 0 32768 ?
*>i172.2.2.2/32 10.0.0.12 2 100 0 ?
*>i172.2.12.0/24 10.0.0.12 0 100 0 ?
Processed 4 prefixes, 4 paths
PE12#show bgp vpnv4 unicast all summary
BGP router identifier 10.0.0.12, local AS number 10
BGP table version is 11, main routing table version 11
4 network entries using 1024 bytes of memory
4 path entries using 480 bytes of memory
4/4 BGP path/bestpath attribute entries using 1056 bytes of memory
3 BGP extended community entries using 140 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 2700 total bytes of memory
BGP activity 4/0 prefixes, 4/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.0.0.11 4 10 11 15 11 0 0 00:07:14 2
PE12#show bgp vpnv4 unicast all
BGP table version is 11, local router ID is 10.0.0.12
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-
Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE2)
*>i 172.1.1.1/32 10.0.0.11 2 100 0 ?
*>i 172.1.11.0/24 10.0.0.11 0 100 0 ?
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

23. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
*> 172.2.2.2/32 172.2.12.2 2 32768 ?
*> 172.2.12.0/24 0.0.0.0 0 32768 ?
CE1#show ip route ospf
Gateway of last resort is not set
172.2.0.0/16 is variably subnetted, 2 subnets, 2 masks
O E2 172.2.2.2/32 [110/2] via 172.1.11.11, 00:02:43, GigabitEthernet0/0
O E2 172.2.12.0/24 [110/1] via 172.1.11.11, 00:02:43, GigabitEthernet0/0
CE2#show ip route ospf
Gateway of last resort is not set
172.1.0.0/16 is variably subnetted, 2 subnets, 2 masks
O E2 172.1.1.1/32 [110/2] via 172.2.12.12, 00:04:03, GigabitEthernet0/0
O E2 172.1.11.0/24 [110/1] via 172.2.12.12, 00:04:03, GigabitEthernet0/0
Note : เนื่องจาก PE11 เป็น IOS XR และ PE12 เป็น IOS-XE โดย Default แล้ว IOS-XR จะไม่มีการส่ง OSPF Domain ID แต่
IOS-XE จะมีการส่ง OSPF Domain ID เมื่อ Domain ID ของ OSPF ไม่ตรงกันทาให้ Route ที่ CE1 และ CE2 เห็นเป็น External
Route (O E2)
PE11 (IOS XR) ไม่มีการส่ง Domain ID
RP/0/0/CPU0:PE11# show ospf | include "ospf 101|Domain"
Wed Apr 11 08:22:18.970 UTC
Routing Process "ospf 101" with ID 0.0.0.0
PE12 (IOS XE) มีการส่ง Domain ID
PE12# show ip ospf | inc Domain|ospf 102
Routing Process "ospf 102" with ID 172.2.12.12
Domain ID type 0x0005, value 0.0.0.102
CE1#ping 172.2.2.2 source loopback 0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 172.1.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 18/25/46 ms
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

24. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE1#traceroute 172.2.2.2 source loopback 0 numeric
Type escape sequence to abort.
Tracing the route to 172.2.2.2
VRF info: (vrf in name/id, vrf out name/id)
1 172.1.11.11 12 msec 4 msec 3 msec
2 10.1.11.1 [MPLS: Labels 17/19 Exp 0] 17 msec 14 msec 24 msec
3 172.2.12.12 [MPLS: Label 19 Exp 0] 14 msec 9 msec 11 msec
4 172.2.12.2 14 msec * 12 msec
Note : สามารถตั้งค่าให้ PE12 (IOS XE) ไม่ส่ง Domain ID ได้
PE12
router ospf 102 vrf CE2
domain-id null
จะทาให้ CE1 และ CE2 เห็น OSPF Route Type เป็น Inter Route (O IA)
CE1#show ip route ospf
Gateway of last resort is not set
172.2.0.0/16 is variably subnetted, 2 subnets, 2 masks
O IA 172.2.2.2/32 [110/3] via 172.1.11.11, 00:00:07, GigabitEthernet0/0
O IA 172.2.12.0/24 [110/2] via 172.1.11.11, 00:00:07, GigabitEthernet0/0
CE2#show ip route ospf
Gateway of last resort is not set
172.1.0.0/16 is variably subnetted, 2 subnets, 2 masks
O IA 172.1.1.1/32 [110/3] via 172.2.12.12, 00:00:36, GigabitEthernet0/0
O IA 172.1.11.0/24 [110/2] via 172.2.12.12, 00:00:36, GigabitEthernet0/0
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

25. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Lab 4 : MPLS L3 VPN PE-CE (OSPF Sham-Link)
Initial Configurations
P1
hostname P1
interface Loopback0
ip address 10.0.0.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 10.1.11.1 255.255.255.0
no shutdown
!
interface GigabitEthernet0/1
ip address 10.1.12.1 255.255.255.0
no shutdown
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

26. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
PE11
hostname PE11
interface Loopback0
ipv4 address 10.0.0.11 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0/0/0
ipv4 address 172.1.11.11 255.255.255.0
no shutdown
!
interface GigabitEthernet0/0/0/1
ipv4 address 10.1.11.11 255.255.255.0
no shutdown
PE12
hostname PE12
interface Loopback0
ip address 10.0.0.12 255.255.255.255
!
interface GigabitEthernet1
ip address 172.2.12.12 255.255.255.0
negotiation auto
!
interface GigabitEthernet2
ip address 10.1.12.12 255.255.255.0
CE1
hostname CE1
interface Loopback0
ip address 172.1.1.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.1.11.1 255.255.255.0
no shutdown
interface GigabitEthernet0/1
ip address 172.1.2.1 255.255.255.0
no shutdown
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

27. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE2
hostname CE2
interface Loopback0
ip address 172.2.2.2 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.2.12.2 255.255.255.0
no shutdown
interface GigabitEthernet0/1
ip address 172.1.2.2 255.255.255.0
no shut
Solution
Before configure OSPF Sham-Link
P1
mpls label protocol ldp
mpls ldp router-id Loopback0 force
router ospf 10
router-id 10.0.0.1
network 10.0.0.1 0.0.0.0 area 0
network 10.1.11.1 0.0.0.0 area 0
network 10.1.12.1 0.0.0.0 area 0
interface GigabitEthernet0/0
mpls ip
interface GigabitEthernet0/1
mpls ip
PE11
vrf CE1
address-family ipv4 unicast
import route-target
10:12
!
export route-target
10:12
interface GigabitEthernet0/0/0/0
no ipv4 address
vrf CE1
ipv4 address 172.1.11.11 255.255.255.0
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

28. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
router ospf 101
vrf CE1
address-family ipv4
redistribute bgp 10
area 0
interface GigabitEthernet0/0/0/0
router ospf 10
router-id 10.0.0.11
area 0
interface Loopback0
!
interface GigabitEthernet0/0/0/1
router bgp 10
address-family vpnv4 unicast
!
neighbor 10.0.0.12
remote-as 10
update-source Loopback0
address-family vpnv4 unicast
vrf CE1
rd 10:12
address-family ipv4 unicast
redistribute ospf 101
mpls ldp
router-id 10.0.0.11
interface GigabitEthernet0/0/0/1
PE12
vrf definition CE2
rd 10:12
!
address-family ipv4
route-target export 10:12
route-target import 10:12
mpls label protocol ldp
mpls ldp router-id Loopback0 force
interface GigabitEthernet1
vrf forwarding CE2
ip address 172.2.12.12 255.255.255.0
interface GigabitEthernet2
mpls ip
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

29. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
router ospf 10
router-id 10.0.0.12
network 10.0.0.12 0.0.0.0 area 0
network 10.1.12.12 0.0.0.0 area 0
router bgp 10
bgp log-neighbor-changes
no bgp default ipv4-unicast
neighbor 10.0.0.11 remote-as 10
neighbor 10.0.0.11 update-source Loopback0
!
address-family ipv4
exit-address-family
address-family vpnv4
neighbor 10.0.0.11 activate
neighbor 10.0.0.11 send-community both
exit-address-family
!
address-family ipv4 vrf CE2
redistribute ospf 102
router ospf 102 vrf CE2
redistribute bgp 10
network 172.2.12.12 0.0.0.0 area 0
CE1
router ospf 101
network 172.1.1.1 0.0.0.0 area 0
network 172.1.11.1 0.0.0.0 area 0
network 172.1.2.1 0.0.0.0 area 0
CE2
router ospf 102
network 172.2.2.2 0.0.0.0 area 0
network 172.2.12.2 0.0.0.0 area 0
network 172.1.2.2 0.0.0.0 area 0
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

30. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Verification
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast summary
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 39
BGP NSR Initial initsync version 4 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
BGP is operating in STANDALONE mode.
Process RcvTblVer bRIB/RIB LabelVer ImportVer SendTblVer StandbyVer
Speaker 39 39 39 39 39 0
Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd
10.0.0.12 0 10 25 33 39 0 0 00:14:19 5
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 39
BGP NSR Initial initsync version 4 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
Status codes: s suppressed, d damped, h history, * valid, > best
i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE1)
*> 172.1.1.1/32 172.1.11.1 2 32768 ?
* i 10.0.0.12 1002 100 0 ?
*> 172.1.2.0/24 172.1.11.1 1001 32768 ?
* i 10.0.0.12 1001 100 0 ?
*> 172.1.11.0/24 0.0.0.0 0 32768 ?
* i 10.0.0.12 1002 100 0 ?
*> 172.2.2.2/32 172.1.11.1 1002 32768 ?
* i 10.0.0.12 2 100 0 ?
*> 172.2.12.0/24 172.1.11.1 1002 32768 ?
* i 10.0.0.12 0 100 0 ?
Processed 5 prefixes, 10 paths
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

31. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
PE12#show bgp vpnv4 unicast all summary
BGP router identifier 10.0.0.12, local AS number 10
BGP table version is 33, main routing table version 33
5 network entries using 1280 bytes of memory
10 path entries using 1200 bytes of memory
9/4 BGP path/bestpath attribute entries using 2376 bytes of memory
4 BGP extended community entries using 180 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 5036 total bytes of memory
BGP activity 8/3 prefixes, 19/9 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.0.0.11 4 10 35 27 33 0 0 00:15:36 5
PE12#show bgp vpnv4 unicast all
BGP table version is 33, local router ID is 10.0.0.12
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-
Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE2)
*> 172.1.1.1/32 172.2.12.2 1002 32768 ?
* i 10.0.0.11 2 100 0 ?
* i 172.1.2.0/24 10.0.0.11 1001 100 0 ?
*> 172.2.12.2 1001 32768 ?
*> 172.1.11.0/24 172.2.12.2 1002 32768 ?
* i 10.0.0.11 0 100 0 ?
* i 172.2.2.2/32 10.0.0.11 1002 100 0 ?
*> 172.2.12.2 2 32768 ?
* i 172.2.12.0/24 10.0.0.11 1002 100 0 ?
*> 0.0.0.0 0 32768 ?
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

32. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE1#show ip route ospf
Gateway of last resort is not set
172.2.0.0/16 is variably subnetted, 2 subnets, 2 masks
O 172.2.2.2/32 [110/1001] via 172.1.2.2, 00:03:03, GigabitEthernet0/1
O 172.2.12.0/24 [110/1001] via 172.1.2.2, 00:03:03, GigabitEthernet0/1
CE2#show ip route ospf
Gateway of last resort is not set
172.1.0.0/16 is variably subnetted, 4 subnets, 2 masks
O 172.1.1.1/32 [110/1001] via 172.1.2.1, 00:03:55, GigabitEthernet0/1
O 172.1.11.0/24 [110/1001] via 172.1.2.1, 00:03:55, GigabitEthernet0/1
Note : สังเกตว่า OSPF Route จาก CE1 (172.1.1.1.1) และ CE2 (172.2.2.2) จะวิ่งหากันตรงๆผ่าน Back Door Link
CE1#traceroute 172.2.2.2 source loopback 0 numeric
Type escape sequence to abort.
Tracing the route to 172.2.2.2
VRF info: (vrf in name/id, vrf out name/id)
1 172.1.2.2 12 msec * 8 msec
Configure OSPF Sham-Link
PE11
interface Loopback11
vrf CE1
ipv4 address 11.11.11.11 255.255.255.255
router bgp 10
!
vrf CE1
address-family ipv4 unicast
network 11.11.11.11/32
router ospf 101
vrf CE1
area 0
sham-link 11.11.11.11 12.12.12.12
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

33. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
PE12
interface Loopback12
vrf forwarding CE2
ip address 12.12.12.12 255.255.255.255
router bgp 10
address-family ipv4 vrf CE2
network 12.12.12.12 mask 255.255.255.255
router ospf 102 vrf CE2
area 0 sham-link 12.12.12.12 11.11.11.11
CE11
interface GigabitEthernet0/1
ip ospf cost 1000
CE12
interface GigabitEthernet0/1
ip ospf cost 1000
Verification
RP/0/0/CPU0:PE11#show ospf vrf CE1 neighbor
* Indicates MADJ interface
# Indicates Neighbor awaiting BFD session up
Neighbors for OSPF 101, VRF CE1
Neighbor ID Pri State Dead Time Address Interface
172.2.12.12 1 FULL/ - - 12.12.12.12 OSPF_SL0
Neighbor is up for 00:03:02
172.1.1.1 1 FULL/BDR 00:00:31 172.1.11.1 Gi0/0/0/0
Neighbor is up for 00:30:25
Total neighbor count: 2
PE12#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
10.0.0.1 1 FULL/DR 00:00:35 10.1.12.1 Gi2
10.0.0.11 0 FULL/ - 00:00:22 11.11.11.11 OSPF_SL1
172.2.2.2 1 FULL/BDR 00:00:38 172.2.12.2 Gi1
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

34. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 48
BGP NSR Initial initsync version 4 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
Status codes: s suppressed, d damped, h history, * valid, > best
i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE1)
*> 11.11.11.11/32 0.0.0.0 0 32768 i
*>i12.12.12.12/32 10.0.0.12 0 100 0 i
*> 172.1.1.1/32 172.1.11.1 2 32768 ?
*> 172.1.2.0/24 172.1.11.1 1001 32768 ?
* i 10.0.0.12 1001 100 0 ?
*> 172.1.11.0/24 0.0.0.0 0 32768 ?
*>i172.2.2.2/32 10.0.0.12 2 100 0 ?
*>i172.2.12.0/24 10.0.0.12 0 100 0 ?
Processed 7 prefixes, 8 paths
PE12#show bgp vpnv4 unicast all
BGP table version is 33, local router ID is 10.0.0.12
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-
Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE2)
*>i 11.11.11.11/32 10.0.0.11 0 100 0 i
*> 12.12.12.12/32 0.0.0.0 0 32768 i
r>i 172.1.1.1/32 10.0.0.11 2 100 0 ?
* i 172.1.2.0/24 10.0.0.11 1001 100 0 ?
*> 172.2.12.2 1001 32768 ?
r>i 172.1.11.0/24 10.0.0.11 0 100 0 ?
*> 172.2.2.2/32 172.2.12.2 2 32768 ?
*> 172.2.12.0/24 0.0.0.0 0 32768 ?
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

35. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE1#show ip route ospf
Gateway of last resort is not set
11.0.0.0/32 is subnetted, 1 subnets
O E2 11.11.11.11 [110/1] via 172.1.11.11, 00:07:06, GigabitEthernet0/0
12.0.0.0/32 is subnetted, 1 subnets
O E2 12.12.12.12 [110/1] via 172.1.11.11, 00:07:59, GigabitEthernet0/0
172.2.0.0/16 is variably subnetted, 2 subnets, 2 masks
O 172.2.2.2/32 [110/4] via 172.1.11.11, 00:07:06, GigabitEthernet0/0
O 172.2.12.0/24 [110/3] via 172.1.11.11, 00:07:06, GigabitEthernet0/0
CE2#show ip route ospf
Gateway of last resort is not set
11.0.0.0/32 is subnetted, 1 subnets
O E2 11.11.11.11 [110/1] via 172.2.12.12, 00:11:37, GigabitEthernet0/0
12.0.0.0/32 is subnetted, 1 subnets
O E2 12.12.12.12 [110/1] via 172.2.12.12, 00:08:58, GigabitEthernet0/0
172.1.0.0/16 is variably subnetted, 4 subnets, 2 masks
O 172.1.1.1/32 [110/4] via 172.2.12.12, 00:08:05, GigabitEthernet0/0
O 172.1.11.0/24 [110/3] via 172.2.12.12, 00:08:05, GigabitEthernet0/0
Note : สังเกตว่า OSPF Route จาก CE1 (172.1.1.1.1) และ CE2 (172.2.2.2) จะวิ่งผ่าน MPLS ลองดูผล Traceroute
ด้านล่าง
CE1#traceroute 172.2.2.2 source loopback 0 numeric
Type escape sequence to abort.
Tracing the route to 172.2.2.2
VRF info: (vrf in name/id, vrf out name/id)
1 172.1.11.11 6 msec 10 msec 4 msec
2 10.1.11.1 [MPLS: Labels 16/21 Exp 0] 22 msec 16 msec 16 msec
3 172.2.12.12 [MPLS: Label 21 Exp 0] 12 msec 11 msec 11 msec
4 172.2.12.2 21 msec * 17 msec
CE2#traceroute 172.1.1.1 source loopback 0 numeric
Type escape sequence to abort.
Tracing the route to 172.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 172.2.12.12 6 msec 6 msec 5 msec
2 10.1.12.1 [MPLS: Labels 17/24004 Exp 0] 21 msec 22 msec 18 msec
3 10.1.11.11 [MPLS: Label 24004 Exp 0] 22 msec 19 msec 17 msec
4 172.1.11.1 19 msec * 21 msec
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

36. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Lab 5 : MPLS L3 VPN PE-CE (BGP)
Software
IOS XRv : 6.0.1
CSR1000v : 15.5
Initial Configurations
P1
hostname P1
interface Loopback0
ip address 10.0.0.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 10.1.11.1 255.255.255.0
no shutdown
!
interface GigabitEthernet0/1
ip address 10.1.12.1 255.255.255.0
no shutdown
PE11
hostname PE11
interface Loopback0
ipv4 address 10.0.0.11 255.255.255.255
no shutdown
!
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

37. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
interface GigabitEthernet0/0/0/0
ipv4 address 172.1.11.11 255.255.255.0
no shutdown
!
interface GigabitEthernet0/0/0/1
ipv4 address 10.1.11.11 255.255.255.0
no shutdown
PE12
hostname PE12
interface Loopback0
ip address 10.0.0.12 255.255.255.255
!
interface GigabitEthernet1
ip address 172.2.12.12 255.255.255.0
negotiation auto
!
interface GigabitEthernet2
ip address 10.1.12.12 255.255.255.0
CE1
hostname CE1
interface Loopback0
ip address 172.1.1.1 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.1.11.1 255.255.255.0
no shutdown
CE2
hostname CE2
interface Loopback0
ip address 172.2.2.2 255.255.255.255
no shutdown
!
interface GigabitEthernet0/0
ip address 172.2.12.2 255.255.255.0
no shutdown
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

38. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Solution
P1
mpls label protocol ldp
mpls ldp router-id Loopback0 force
router ospf 10
router-id 10.0.0.1
network 10.0.0.1 0.0.0.0 area 0
network 10.1.11.1 0.0.0.0 area 0
network 10.1.12.1 0.0.0.0 area 0
interface GigabitEthernet0/0
mpls ip
interface GigabitEthernet0/1
mpls ip
PE11
vrf CE1
address-family ipv4 unicast
import route-target
10:12
!
export route-target
10:12
!
!
interface GigabitEthernet0/0/0/0
no ipv4 address
vrf CE1
ipv4 address 172.1.11.11 255.255.255.0
!
!
router ospf 10
router-id 10.0.0.11
area 0
interface Loopback0
!
interface GigabitEthernet0/0/0/1
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

39. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
router bgp 10
address-family vpnv4 unicast
!
neighbor 10.0.0.12
remote-as 10
update-source Loopback0
address-family vpnv4 unicast
!
!
vrf CE1
rd 10:12
address-family ipv4 unicast
!
neighbor 172.1.11.1
remote-as 99
address-family ipv4 unicast
route-policy EBGP in
route-policy EBGP out
as-override
!
!
!
!
route-policy EBGP
pass
end-policy
!
!
mpls ldp
router-id 10.0.0.11
interface GigabitEthernet0/0/0/1
PE12
vrf definition CE2
rd 10:12
!
address-family ipv4
route-target export 10:12
route-target import 10:12
!
!
mpls label protocol ldp
mpls ldp router-id Loopback0 force
!
!
interface GigabitEthernet1
vrf forwarding CE2
ip address 172.2.12.12 255.255.255.0
!
!
interface GigabitEthernet2
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

40. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
mpls ip
!
!
router ospf 10
router-id 10.0.0.12
network 10.0.0.12 0.0.0.0 area 0
network 10.1.12.12 0.0.0.0 area 0
router bgp 10
bgp log-neighbor-changes
no bgp default ipv4-unicast
neighbor 10.0.0.11 remote-as 10
neighbor 10.0.0.11 update-source Loopback0
neighbor 172.2.12.2 remote-as 99
!
address-family vpnv4
neighbor 10.0.0.11 activate
neighbor 10.0.0.11 send-community both
exit-address-family
!
address-family ipv4 vrf CE2
neighbor 172.2.12.2 remote-as 99
neighbor 172.2.12.2 activate
neighbor 172.2.12.2 as-override
CE1
router bgp 99
bgp log-neighbor-changes
no bgp default ipv4-unicast
neighbor 172.1.11.11 remote-as 10
!
address-family ipv4
network 172.1.1.1 mask 255.255.255.255
neighbor 172.1.11.11 activate
exit-address-family
CE2
router bgp 99
bgp log-neighbor-changes
no bgp default ipv4-unicast
neighbor 172.2.12.12 remote-as 10
!
address-family ipv4
network 172.2.2.2 mask 255.255.255.255
neighbor 172.2.12.12 activate
exit-address-family
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

41. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
Verification
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast summary
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 7
BGP NSR Initial initsync version 3 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
BGP is operating in STANDALONE mode.
Process RcvTblVer bRIB/RIB LabelVer ImportVer SendTblVer StandbyVer
Speaker 7 7 7 7 7 0
Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd
10.0.0.12 0 10 9 11 7 0 0 00:06:28 1
RP/0/0/CPU0:PE11#show bgp vpnv4 unicast
BGP router identifier 10.0.0.11, local AS number 10
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0x0 RD version: 0
BGP main routing table version 7
BGP NSR Initial initsync version 3 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs
Status codes: s suppressed, d damped, h history, * valid, > best
i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE1)
*> 172.1.1.1/32 172.1.11.1 0 0 99 i
*>i172.2.2.2/32 10.0.0.12 0 100 0 99 i
Processed 2 prefixes, 2 paths
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

42. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
RP/0/0/CPU0:PE11#show bgp vrf CE1 ipv4 unicast summary
BGP VRF CE1, state: Active
BGP Route Distinguisher: 10:12
VRF ID: 0x60000002
BGP router identifier 10.0.0.11, local AS number 10
Non-stop routing is enabled
BGP table state: Active
Table ID: 0xe0000011 RD version: 7
BGP main routing table version 7
BGP NSR Initial initsync version 3 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP is operating in STANDALONE mode.
Process RcvTblVer bRIB/RIB LabelVer ImportVer SendTblVer StandbyVer
Speaker 7 7 7 7 7 0
Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd
172.1.11.1 0 99 12 11 7 0 0 00:07:27 1
RP/0/0/CPU0:PE11#show bgp vrf CE1 ipv4 unicast
Sun Dec 2 06:29:10.716 UTC
BGP VRF CE1, state: Active
BGP Route Distinguisher: 10:12
VRF ID: 0x60000002
BGP router identifier 10.0.0.11, local AS number 10
Non-stop routing is enabled
BGP table state: Active
Table ID: 0xe0000011 RD version: 7
BGP main routing table version 7
BGP NSR Initial initsync version 3 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
Status codes: s suppressed, d damped, h history, * valid, > best
i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE1)
*> 172.1.1.1/32 172.1.11.1 0 0 99 i
*>i172.2.2.2/32 10.0.0.12 0 100 0 99 i
Processed 2 prefixes, 2 paths
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

43. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
PE12#show bgp all summary
BGP router identifier 10.0.0.12, local AS number 10
BGP table version is 5, main routing table version 5
2 network entries using 512 bytes of memory
2 path entries using 240 bytes of memory
3/2 BGP path/bestpath attribute entries using 792 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
1 BGP extended community entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 1592 total bytes of memory
BGP activity 2/0 prefixes, 2/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.0.0.11 4 10 15 14 5 0 0 00:11:12 1
172.2.12.2 4 99 13 14 5 0 0 00:07:55 1
PE12#show bgp vrf CE2 vpnv4 unicast
BGP table version is 5, local router ID is 10.0.0.12
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-
Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 10:12 (default for vrf CE2)
*>i 172.1.1.1/32 10.0.0.11 0 100 0 99 i
*> 172.2.2.2/32 172.2.12.2 0 0 99 i
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

44. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE1#show bgp ipv4 unicast summary
BGP router identifier 172.1.1.1, local AS number 99
BGP table version is 3, main routing table version 3
2 network entries using 288 bytes of memory
2 path entries using 160 bytes of memory
2/2 BGP path/bestpath attribute entries using 304 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 776 total bytes of memory
BGP activity 2/0 prefixes, 2/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
172.1.11.11 4 10 21 22 3 0 0 00:16:41 1
CE1#show bgp ipv4 unicast
BGP table version is 3, local router ID is 172.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-
Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
*> 172.1.1.1/32 0.0.0.0 0 32768 i
*> 172.2.2.2/32 172.1.11.11 0 10 10 i
CE1#show ip route
Gateway of last resort is not set
172.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C 172.1.1.1/32 is directly connected, Loopback0
C 172.1.11.0/24 is directly connected, GigabitEthernet0/0
L 172.1.11.1/32 is directly connected, GigabitEthernet0/0
172.2.0.0/32 is subnetted, 1 subnets
B 172.2.2.2 [20/0] via 172.1.11.11, 00:16:25
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

45. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE2#show bgp ipv4 unicast summary
BGP router identifier 172.2.2.2, local AS number 99
BGP table version is 3, main routing table version 3
2 network entries using 288 bytes of memory
2 path entries using 160 bytes of memory
2/2 BGP path/bestpath attribute entries using 304 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 776 total bytes of memory
BGP activity 2/0 prefixes, 2/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
172.2.12.12 4 10 25 23 3 0 0 00:17:35 1
CE2#show bgp ipv4 unicast
BGP table version is 3, local router ID is 172.2.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-
Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
*> 172.1.1.1/32 172.2.12.12 0 10 10 i
*> 172.2.2.2/32 0.0.0.0 0 32768 i
CE2#show ip route
Gateway of last resort is not set
172.1.0.0/32 is subnetted, 1 subnets
B 172.1.1.1 [20/0] via 172.2.12.12, 00:17:32
172.2.0.0/16 is variably subnetted, 3 subnets, 2 masks
C 172.2.2.2/32 is directly connected, Loopback0
C 172.2.12.0/24 is directly connected, GigabitEthernet0/0
L 172.2.12.2/32 is directly connected, GigabitEthernet0/0
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d

46. Training Department.
NetPrime Systems Co.,Ltd November, 2018 Revision 1.0
CE1#ping 172.2.2.2 source loopback 0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 172.1.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 13/14/17 ms
CE1#traceroute 172.2.2.2 source loopback 0
Type escape sequence to abort.
Tracing the route to 172.2.2.2
VRF info: (vrf in name/id, vrf out name/id)
1 172.1.11.11 3 msec 4 msec 3 msec
2 10.1.11.1 [MPLS: Labels 16/19 Exp 0] 14 msec 13 msec 13 msec
3 172.2.12.12 [MPLS: Label 19 Exp 0] 9 msec 10 msec 10 msec
4 172.2.12.2 13 msec * 13 msec
N
e
t
P
r
i
m
e
S
y
s
t
e
m
C
o
.
,
L
t
d