MPLS VPN Lab exercise Indosat

DEPLOYING MPLS - CONFIGURATION STEPS

(1) Configuring Interior Routing Protocol Connectivity

1. Configure all router with IP addresses according to the diagram

Command :
Config terminal
(config)#Interface <interface name>
(config-interface)#ip address <interface IP address> <netmask>

2. Configure OSPF routing protocol on all PE,P and RR routers (if available)
Command :
Config terminal
(config)#router ospf <process id>
(config-router)#router id <loopback address>
(config-router)#network <interface network> <wildcard> area 0

3. Inject loopback address into OSPF routing process

Command :
Config terminal
(config)#router ospf <process id>
(config-router)#network 10.0.x.y 0.0.0.0 area 0

4. Verify connectivity
Command :
Show ip route
Show cdp neighbor
Ping
Traceroute

(2) Enabling MPLS on the Network

1. Activate CEF Feature on all PE,P,and RR routers

Command :
Config terminal
(config)#ip cef

2. Configure tag-switching/MPLS on router global configuration and interfaces

facing to the core, and interface loopback
Command :
Config terminal
(config)#mpls label protocol ldp <optional>
(config)#interface <interface name>
(config-interface)#mpls ip

3. Verify MPLS configuration

Command :
Show mpls label range
MPLS VPN Lab exercise Indosat
Show mpls interface
Show mpls ldp discovery
Show mpls ldp neighbor
Show mpls ip binding

(3) Enabling MPLS VPN on the Network

1. Define VRF for each VPN on PE routers

Command (example on PE-1):
(config)#ip vrf white
(config-vrf)#rd 111:200
(config-vrf)#exit
(config)#interface <interface name> Interface to CE
(config-if)# ip vrf forwarding white
(config-if)# ip address 10.0.x.y 255.255.255.252
(config-if)#exit
(config)#
(config)#ip vrf black
(config-vrf)#rd 100:100
(config-vrf)#exit
(config)#interface <interface name> Interface to CE
(config-if)# ip vrf forwarding black
(config-if)# ip address 10.0.x.y 255.255.255.252
(config-if)#exit
(config)#

2. Configuring BGP , each PE peers to other PEs loopback address

Command (example on PE1):
(config)# router bgp 111
neighbor 10.0.2.2 remote-as 100
neighbor 10.0.2.2 update-source Loopback0
address-family ipv4 vrf white
redistribute connected
redistribute static
address-family ipv4 vrf black
redistribute connected
redistribute static
exit-address-family
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
exit-address-family

3. Verify VRF configuration

Command :
show ip route vrf <name> ..
show ip cef vrf <name>
show ip bgp vpnv4 [ vrf <name> | all
show ip vrf detail
MPLS VPN Lab exercise Indosat
show ip bgp neighbor

(4) Configuring End to End VPN Services

PE side :
1. Define the route target for every VPN on every PE routers
Command (example on PE-1):
(config)#ip vrf black
(config-vrf)# route-target export 100:2
(config-vrf)# route-target import 100:2
(config)#ip vrf white
(config-vrf)# route-target both 100:1

2. Exchange the route target with destination vrf on other PE router

Command (example on PE-2) :
(config)#ip vrf black
(config-vrf)# route-target import 100:2
(config-vrf)# route-target export 100:2
on PE-1 :
(config)#ip vrf white
(config-vrf)# route-target both 100:1

3. Verify the result

Command :
show ip route vrf <name> ..
show ip cef vrf <name>
show ip bgp vpnv4 [ vrf <name> | all
show ip vrf detail
show ip bgp neighbor
PE to CE :

1. Configuring trunk between PE and CE

a. PE configuration
(config) interface Fastethernet0/0
(config-if) no ip address
(config-if) exit
(config) interface Fastethernet0/0.1
(config-subif) encapsulation dot1q 1
(config-subif) ip address <ip address> <netmask>
b. Switch Configuration
(config) interface Fastethernet0/1
(config-if) switchport trunk encapsulation dot1q
(config-if) switchport mode trunk
(config-if) end

2. Configuring vlan on switch

(switch)# vlan database
(vlan)# vlan 1 state active
(vlan)# vlan 2 state active
(vlan)# exit
MPLS VPN Lab exercise Indosat
(switch)# show vlan
(switch)# show vlan brief

3. Verify VLAN and PE to CE connectivity

(config)# interface vlan 1
(config-if)# ip address 10.0.x.y <netmask>
(config-if)# end
(router/switch)# ping 10.0.x.y from and to PE and CE IP
address
(router/switch)# show ip interface brief

==============================================================
==============================================================

Script Configuration for R1

Setting Multi Protocol BGP full mesh

==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.3.3 activate
neighbor 10.0.3.3 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router

MPLS VPN Lab exercise Indosat
=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer

=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black

redistribute connected
!
address-family ipv4 vrf white
redistribute connected

Script Configuration for R2

Setting Multi Protocol BGP full mesh

==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
MPLS VPN Lab exercise Indosat
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.3.3 activate
neighbor 10.0.3.3 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router

=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer

=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

MPLS VPN Lab exercise Indosat
address-family ipv4 vrf black
redistribute connected
!
address-family ipv4 vrf white
redistribute connected

Script Configuration for R3

Setting Multi Protocol BGP full mesh

==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router

=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
MPLS VPN Lab exercise Indosat
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer

=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black

redistribute connected
!
address-family ipv4 vrf white
redistribute connected

Script Configuration for R4

Setting Multi Protocol BGP full mesh

==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
MPLS VPN Lab exercise Indosat
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.3.3 activate
neighbor 10.0.3.3 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router

=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer

=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black

redistribute connected
!
address-family ipv4 vrf white
redistribute connected
MPLS VPN Lab exercise Indosat
!

Script Configuration for R5

Setting Multi Protocol BGP full mesh

==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
neighbor 10.0.6.6 remote-as 111
neighbor 10.0.6.6 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.3.3 activate
neighbor 10.0.3.3 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.6.6 activate
neighbor 10.0.6.6 send-community extended
exit-address-family
!

Create VPN di setiap router

=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!
MPLS VPN Lab exercise Indosat

Assign VPN di interface ke arah customer

=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black

redistribute connected
!
address-family ipv4 vrf white
redistribute connected

Script Configuration for R6

Setting Multi Protocol BGP full mesh

==================================
router bgp 111
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.2 remote-as 111
neighbor 10.0.2.2 update-source Loopback0
neighbor 10.0.1.1 remote-as 111
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.3 remote-as 111
neighbor 10.0.3.3 update-source Loopback0
neighbor 10.0.4.4 remote-as 111
neighbor 10.0.4.4 update-source Loopback0
neighbor 10.0.5.5 remote-as 111
neighbor 10.0.5.5 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 send-community extended
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.3.3 activate
MPLS VPN Lab exercise Indosat
neighbor 10.0.3.3 send-community extended
neighbor 10.0.4.4 activate
neighbor 10.0.4.4 send-community extended
neighbor 10.0.5.5 activate
neighbor 10.0.5.5 send-community extended
exit-address-family
!

Create VPN di setiap router

=====================================

ip vrf black
rd 111:100
route-target export 111:100
route-target import 111:100
!
ip vrf white
rd 111:200
route-target export 111:200
route-target import 111:200
!

Assign VPN di interface ke arah customer

=================================
interface Loopback100
ip vrf forwarding black
ip address 100.100.100.100 255.255.255.0
!
interface Loopback200
ip vrf forwarding black
ip address 200.200.200.200 255.255.255.0
!

router bgp 111

address-family ipv4 vrf black

redistribute connected
!
address-family ipv4 vrf white
redistribute connected

!
MPLS VPN Lab exercise Indosat