Fre e Cisco La bs for CCNA, CCNP a nd CCIE R&S!

HOME
Home

STUDY MATERIAL

LABS

BLOG

FAQ

FORUM

COMMUNITY

CONTACT

search...

25
Jaime

ADVANCED MPLS VPN

WRITTEN BY RENE MOLENAAR ON 27 AUGUST 2010. POSTED IN MPLS

SCENARIO:
After winning the lottery you thought your networking days would be over...with the millions you have won you bought your own tropical island. After weeks of sipping cocktails you got bored of doing nothing and decided to start your own ISP. Soon after starting the business it didn't take long before the first customers came along, now it's up to you to configure the whole MPLS backbone and help your customers setting up their routers. Good luck!

GOAL:
Tw eet

All IP addresses have been preconfigured for you in the following format: Ethernet interfaces: 192.168.XY.X /24, for example 192.168.12.X between router 1 and 2. Loopback interfaces: L0: X.X.X.X /24, for example: 1.1.1.1 for router 1. L1: XX.XX.XX.XX /24, for example: 11.11.11.11 for router 1. You can see the router "numbers" if you click on the 'show hostnames' button in GNS3. Configure OSPF process 1 on router PE1, P and PE2. Advertise the links between PE1 P PE2. Advertise the loopback0 interfaces in OSPF as well. Ensure you never send OSPF messages for OSPF process 1 on the links outside the backbone. Configure MPLS on router PE1, P and PE2. Make sure you don't configure MPLS on the links outside the backbone. Configure authentication for MPLS, use password "cisco". Configure MP-BGP between router PE1 and PE2, use AS1 and source updates from the loopbacks. Configure the correct VPN4 address-family in BGP between router PE1 and PE2.

Your first customer "Palm Club" just signed a contract with you, they have a HQ and 1 Branch office that needs to be connected through the MPLS cloud. Create a VRF called "PALM" on router PE1 and PE2. Use a Route Distinguisher (RD) of 111:111. Use a Route Target (RT) of 111:111. Make sure the interfaces on the PE routers towards the PALM routers are put into the correct VRF. Configure RIP on router PalmHQ and PalmBRANCH, advertise the link towards the ISP and the Loopback0 interface. Configure RIP on router PE1 and PE2 and use the correct VRF. Ensure RIP updates are being exchanged between the customer and the PE routers. Configure redistribution between RIP and BGP on the PE routers, make sure you use the correct VRF. Ensure you can ping each others loopback0 interfaces from router PalmHQ and PalmBRANCH.

"Melons 'r' Us" heard great stories about you from "Palm Club" and decided to sign a contract with you as well. They have a HQ and Branch office as well and there is a link between the 2 sites. Your MPLS connection is much faster so they want to use MPLS as their main connection and the other link for backup. Create a VRF called "MELON" on router PE1 and PE2. Use a Route Distinguisher (RD) of 222:222. Use a Route Target (RT) of 222:222. Make sure the interfaces on the PE routers towards the MELON routers are put into the correct VRF. Configure OSPF process 2 on router MelonHQ and MelonBRANCH, advertise the link towards the ISP and the Loopback0 interface. Advertise the link between router MelonHQ and MelonBRANCH in OSPF as well. Configure OSPF on router PE1 and PE2 and use the correct VRF. Ensure OSPF updates are being exchanged between the customer and the PE routers. Configure redistribution between OSPF and BGP on the PE routers, make sure you use the correct VRF. Ensure you can ping each others loopback0 interfaces from router MelonHQ and MelonBRANCH. Increase the ospf cost on the E0/2 interface on both Melon routers to 100. Try a traceroute from router MelonHQ towards MelonBRANCH. As you can see all traffic is being sent through the backup link and not the MPLS cloud. Ensure all traffic is sent through the MPLS cloud, you are only allowed to make changes on the PE routers.

Your company keeps growing and the third customer "Coco Loco" signed a contract with you. They have 2 sites; a HQ and a branch with 2 routers. Their situation is slightly more complex since they use EIGRP and BGP. Create a VRF called "COCO" on router PE1 and PE2. Use a Route Distinguisher (RD) of 333:333. Use a Route Target (RT) of 333:333. Make sure the interfaces on the PE routers towards the COCO routers are put into the correct VRF. Configure EIGRP AS3 on router CocoHQ and the two CocoBRANCH routers, advertise the link towards the ISP and the Loopback0 interface. Advertise the link between router CocoBRANCH1 and CocoBRANCH2 in EIGRP as well. Configure EIGRP on router PE1 and PE2 and use the correct VRF. Ensure EIGRP updates are being exchanged between the customer and the PE routers. Configure redistribution between EIGRP and BGP on the PE routers, make sure you use the correct VRF. Ensure you can ping each others loopback0 interfaces from router CocoHQ and CocoBRANCH1 & 2. The Coco Branch site might cause problems because it's multihomed, configure the PE routers to filter any duplicate prefix advertisements. (Hint: EIGRP SOO) Configure BGP AS3 on router CocoHQ and the two CocoBRANCH routers, advertise the link towards the ISP and the Loopback1 interface. Coco Loco wants to use the same AS number on both sites. Configure router PE2 so AS3 will accept it's own AS number. Configure router CocoHQ so it will accept it's own AS number. Advertise the link between router CocoBRANCH1 and CocoBRANCH2 in BGP as well. Configure BGP on router PE1 and PE2 to connect with the Coco routers, make sure you use the correct VRF. Ensure you can ping each others loopback1 interfaces from router CocoHQ and CocoBRANCH1 & 2. The Coco Branch site might cause problems because it's multihomed, configure the PE routers to filter any duplicate prefix advertisements. (Hint: BGP SOO)

You just hired a security officer and the first thing he complained about is that your customers are able to see the IP addresses of the MPLS routers in the Cloud, you need to do something about it... Change the configuration of the MPLS Backbone so when you do a trace from router MelonHQ to MelonBRANCH you only see the PE routers.

All your customers are now connected to the MPLS cloud, and they are very satisfied with your services. Palm Club and Melons 'r' Us' decided to become business partners and they need access to each HQ's. Configure PE1 so PalmHQ and MelonHQ see each others routes. Ensure you have reachability by pinging 2.2.2.2 from PalmHQ using the loopback0 as source interface.

Palm Club and Coco Loco are complaining that you don't offer any other services except the MPLS VPN. You decide to install a central server for e-mail. The server is located in the 9.9.9.0 /24 network.

Create a VRF called "CENTRALSERVER" on router PE1. Use a Route Distinguisher (RD) of 444:444. Use a Route Target (RT) of 444:444. Make sure the interface on the PE router towards the CENTRALSERVER router is put into the correct VRF. Configure OSPF process 3 on router PE1 and CENTRALSERVER, advertise the loopback interfaces on router CENTRALSERVER. Create a Route Target (RT) to export the CENTRALSERVER networks, use RT: 123:123 Create a Route Target (RT) to export the networks of the Palm and Coco routers, use RT: 456:456 Import the Route Target with the Palm and Coco networks into the CENTRALSERVER VRF. Import the Route Target with the CENTRALSERVER network in the Palm and Coco VRF. Ensure you have connectivity between Palm and CENTRALSERVER. Ensure you have connectivity between Coco and CENTRALSERVER. Test this by pinging the 9.9.9.9 IP address from the Coco and Palm sites. Ensure Palm and Coco do NOT have connectivity between each other. Configure a selective VRF export on router PE1 so the 99.99.99.0 /24 network is not exported.

Coco Loco and Palm Club ask you if you also offer Internet services through the MPLS cloud, you think this is a good idea so you decide to add a Gateway for Internet access.

Create a VRF called INTERNET on router PE2. Use a Route Distuingisher (RD) of 555:555. Create additional route-targets to make sure the Palm Club and Coco Loco sites are able to access the Internet.

IOS:
c3640-jk9o3s-mz.124-16.bin

TOPOLOGY:

VIDEO SOLUTION:

You n eed to reg ister to d ow n load th e GNS 3 T op olog y File. (R eg istration is Free! )

Related Articles BGP Basic BGP IBGP/EBGP Local Preference MED BGP Route Reflectors BGP Advanced Site-to-Site IPSEC VPN Only registered users can write comments!

COMMENTS (72)

Lethe

2010-08-27 11:59:32 Yeah thank you so much for this topology! I wanted to put some effort in (re)learning MPLS but never took the right time to build a decent topology and here you come to save my life I follow your site almost daily and find it simply GREAT. You are doing an awesome job helping a lot of people out there to practice via GNS3 Cheer Lethe.

ReneMolenaar
2010-08-27 13:29:00 Hello Lethe, Thanks for your response You are quick...I just uploaded this article, I'm working right now to upload the GNS3 file with basic configs...

Regards, Rene

ReneMolenaar
2010-08-27 14:17:42 Hello All, This lab is huge...but I think if you are able to finish it, you'll have a very good understanding about MPLS VPN. Please let me know if you encounter any errors, typos or when you won the lottery and started your own ISP... Good luck & Have fun! Rene

mr.kd
Dear Rene

2010-09-09 07:57:31

Can you share Video TUT for the above Topology like that basic MPLS will be very helpful. Thanks KD

ReneMolenaar
2010-09-09 08:45:20 I will perhaps in the weekend, depends how much time I got left since i'm quite busy at the moment with work I'll let you know.

mr.kd
Dear Rene

2010-09-16 20:32:10

Waiting for few more labs.Please share some L2MPLS labs also if it is possible. Thanks KD

ReneMolenaar
2010-09-17 17:14:45 i'll add some more this week. L2 MPLS is easy to configure though...will do my best

cgb
Hi Rene,

2010-09-18 05:15:19

Thanks for the great resource - there might be an IP address typo in the lab. Was that intentional? Regards, Chris Bennett cgb

Chris Bennett (cgb)

2010-09-18 06:50:43 I have a question about the statement: "Ensure all traffic is sent through the MPLS cloud, you are only allowed to make changes on the PE routers." I can make this work for all but the Loopback0 subnet - I see how it's possible to make the MPLS path any more attractive without reconfigure the Melon routers to make the backdoor path a lower cost. Any ideas?

ReneMolenaar
2010-09-18 13:11:18 Hi Chris, Thanks for your message. IP typos are not intentional so please let me know if you find an error About the OSPF over MPLS part...i'm not sure how you tried to achieve this goal. Try to google for "OSPF Sham Link" and I believe you'll find the answer quickly.

Let me know if you have any other questions

cgb
Hi Rene,

2010-09-18 13:50:33

The IP address on E0/0 of R2 (MelonHQ) should be 192.168.23.2, not 192.168.12.2. It was a good typo to have as it added a little troubleshooting to the initial OSPF neighbor establishment With respect to OSPF & MPLS, I read all about Sham Links today (MPLS hands-on is new for me as of today.. same prefix via the MPLS path is 13 (10+1+1+1). At least that's the best I can do Thanks, Chris ) and got a working configuration. I just couldn't

make the Loopbacks on the customer routers more attractive since the OSPF metric for MelonHQ MelonBrench is 11 (10 + 1) and the lowest you can get the It's not a big issue for me - but I am curious if there is a way to do it...

ReneMolenaar
2010-09-20 22:47:50 I just fixed the typo in the config, should make life easier for others About the Sham Link...if you don't configure the sham-link then all traffic between MelonHQ and MelonBranch will use the direct link in between them...even if the cost is higher then through the MPLS Cloud. The reason is that they are in the same area, the MPLS backbone is kinda like the 'Super Area 0 or Super Backbone Area' to OSPF. Inter area routes are always chosen before Intra area routes. If you configure the sham-link it will take the MPLS VPN cloud, but the cost will have to be lower...to fix it, configure the sham-link and increase the cost of the direct link between the 2 Melon routers. Let me know if that works for you. If you have configured the lab, it's good to do it a few more times...you'll see that the next time it'll go a lot faster and you'll memorize the commands. Good luck! Rene

cgb

2010-09-21 04:45:46 Thanks for that - I had already configured the sham-links & had data route via the MPLS path as most preferable, but only for the non-loopback prefixes. Altering the cost on the customer equipment worked for me (the other day) - it just goes against your task description "you are only allowed to make changes on the PE routers.". Keep up the good work.

ReneMolenaar
2010-09-21 09:48:20 You are right about that. I changed the lab article so you have to increase the cost of the link before doing the "PE Only" part. I forgot about the 'higher cost' problem.

kishore r rajani
2010-10-30 22:01:46 "Configure router PE2 so AS3 will accept it's own AS number" can you please provide some more details on this action point.

ReneMolenaar
2010-10-31 23:02:07 Sure, BGP has an option which will allow an AS to accept it's own AS number. Checking your own AS number is the BGP way of loop-prevention...if you see your own AS in the AS-path you will not accept the information. There's an option to disable this...

salasccnp

2010-11-18 22:27:58 Does anyone have the soultion you tube videos?

m1h

2010-11-22 08:09:23 Hi, if this right what on PalmHQ and PalmBranch we have equal IP adresses? Lo0 and Lo1 on this routers are in one 11.11.11.0/24 subnet. Do we really have a way to ping from one loopback to another without any adress translation?

ospf

2010-11-23 19:02:35 guys please if anyone have done this lab successfully, please mail me the configuration mine didnt workout its a great help thanks

ospf

2010-11-23 19:03:25 guys please if anyone have done this lab successfully, please mail me the configuration mine didnt workout its a great help thanks krishaan.hassim@gmail.com

ReneMolenaar
2010-11-26 17:41:02 If you have equal IP addresses it's not going to work...you'll need NAT somewhere. However different customers could have the same IP addresses and it will still work with MPLS (if they don't communicate with each other) since you are making decisions on MPLS Tags instead of IP prefixes. I don't have the solution for this one yet, where are you guys stuck? Did you see the youtube video for the basic MPLS VPN one? I think it will greatly help you solve this one... http://www.youtube.com/user/gns3vault#p/search/2/EULFOF__V8c Kind Regards, Rene

said van de Klundert

2011-02-09 20:46:38 Hello, I started working for an operator a week ago and your website has been a ton of help on BGP and MPLS, really, really thanks a lot!! Extremely fun and informative. I also have a question. I quote you saying: 'Checking your own AS number is the BGP way of loop-prevention...if you see your own AS in the AS-path you will not accept the information. There's an option to disable this...' I desperately need the solution for this answer. I constructed a Lab with MPLS core running BGP and having several customers. I distribute and redistribute EIGRP, OSPF, RIP or whatever and however between customer locations through different vrfs through a route reflector. However, my pain is that when I run BGP on the client side, I cannot make the two separate customer locations talk to each other. When I check the PE router, I can see that the VRF carries all the routes that are active on both customer locations. When I check with: sh ip bgp vpnv4 vrf CUST_2 neighbors 172.3.0.2 advertised-routes I also see the correct routes are being advertised. However, they are advertised with the same AS value as the customer, so how do I make the customer ignore this and accept the route-update? Hopefully you can make sense of all this and respond because we live in the same city.

bdk907
Q u ote:

2011-03-03 13:04:24

However, they are advertised with the same AS value as the customer, so how do I make the customer ignore this and accept the route-update? Said, what you are looking for is the ability to configure a PE router to override a site's ASN with a provider's ASN. Not to through out the answer but here are some links that you will find helpful in figuring out what that command is and how to use it: Cisco's Configuring BGP Guide http://goo.gl/oZYaq Cisco's MPLS VPN Enhancements http://goo.gl/6rHcz -bdk

ReneMolenaar
2011-03-14 14:21:08 Hello Said,

Thanks for your comments

Kinda late reply from my side but i was away on holiday...and been kinda busy.

Anyway to answer your questions: BGP will check for the AS Path since this is the loop-prevention system. However sometimes this causes problems because it will refuse to accept prefixes. To fix this, you need to use the n eig h b or allow as-in com m an d . It will override the AS rule and accept any prefix. You can also play around with the n eig h b or as-overid e command. About your MPLS problem with BGP at the customer side, did you get OSPF/RIP or EIGRP running OK? Just to make sure that your problem is BGP and not at the MPLS part... Some very useful articles for you to read: http://anetworkerblog.com/2008/05/11/neighbor-ce-as-override/ http://mpls-configuration-on-cisco-ios-software.org.ua/1587051990/ch06lev1sec1.html I think it's a good idea for me to cook up a MPLS lab with PE-CE BGP...so people can learn how to use these two commands. Good luck!

said van de Klundert

2011-03-14 16:58:40 Thanks for the reply, the answer was simple, the only thing wrong was no AS override. Now allready hapily at work and redistributing routes of many different customers connected to our core I have recently finished my CCNP route, but BGP remains a focus area. The amount of rules connected to BGP are crazy, but then again, the flexibility is awesome! btw, thanks again for all your MPLS/BGP stuff on this website. Excellent stuff!!

ReneMolenaar
2011-03-14 19:45:10 Very nice You work at an ISP? If so i'm guessing Breda or Den Bosch? If you encounter some nice real life MPLS situations / scenarios let me know, i'd like to create some more labs for MPLS. Take care! Rene

acaptain
Hello Rene,

2011-03-21 21:17:06

I have a question about the Provider core section (first section) of the lab. If I enter the command "show mpls ldp neighbors detail" I see no neighbors. I know that with MPLS you have to increase the MTU size. Where I work we use a standard setting of 1546. On the 3640 you can not change the mtu size of the interface, so the maximum allowable MTU is 1500. Is there a work around for this?

acaptain
Rene,

2011-03-24 07:03:42

I still can not get MPLS neighbors. Please let me know what I am doing wrong. PE1 mpls label protocol ldp ! interface Ethernet0/0 ip address 192.168.34.3 255.255.255.0 half-duplex mpls ip ! router ospf 1 router-id 3.3.3.3 log-adjacency-changes passive-interface default no passive-interface Ethernet0/0 network 3.3.3.0 0.0.0.255 area 0 network 192.168.34.0 0.0.0.255 area 0 ! end

PE1#sh mpls ldp neigh PE1#sh mpls ldp bind tib entry: 3.3.3.0/24, rev 6 local binding: tag: imp-null tib entry: 4.4.4.4/32, rev 10 local binding: tag: 17 tib entry: 5.5.5.5/32, rev 12 local binding: tag: 18 tib entry: 33.33.33.0/24, rev 4 local binding: tag: imp-null tib entry: 192.168.13.0/24, rev 2 local binding: tag: imp-null tib entry: 192.168.23.0/24, rev 16 local binding: tag: imp-null tib entry: 192.168.34.0/24, rev 20 local binding: tag: imp-null tib entry: 192.168.36.0/24, rev 18 local binding: tag: imp-null tib entry: 192.168.39.0/24, rev 14 local binding: tag: imp-null tib entry: 192.168.45.0/24, rev 8 local binding: tag: 16

I don't think I am doing anything wrong. P and PE2 look very similar to PE1. I don't know how everyone else got it to work with an MTU of 1500. Any insight would be appreciated.

acaptain

2011-03-24 07:34:19 Just wanted to add if I default PE1, P, and PE2 and start with no config on the boxes I can then get my my mpls neighbor adjacencies.

bdk907

2011-03-24 11:18:05 Andy, can you ping from PE1 to P and PE2? What is your out put of 'show mpls ldp discovery' on both PE1 & P? This will show you which interfaces LDP is enabled on regardless if there are any neighbors answering. What does the output of 'debug mpls adjacency' show? -bdk

acaptain

2011-03-24 22:28:20 Thanks for the command 'show mpls ldp discovery'.. I'm on the right track now. I knew it had to be something simple.

ReneMolenaar
2011-03-27 14:23:56 Hi Andy, Did you get it working? I've been busy so sorry for the late reply. If you try a "debug mpls ldp transport events" do you see anything that could indicate what is going wrong? Normally I never have trouble with the 3640's...just a "mpls ip" on the interface and it'll run.

slunenborg
2011-03-31 16:58:55 Hi, I had the same problem and did a lot of troubleshooting. I am still figuring out why but when i removed the loopback 1 interfaces of the PE1 and PE2 router a LDP-neighborship was established. For some reason the PE-routers are trying to to TDP instead of LDP. I am also very new to MPLS but this worked for me. Regards Stefan

ReneMolenaar
2011-04-04 22:11:32 Hi all, I just booted up this lab to check what the problem was, it's completely normal behavior...first I took a look at the "P" router: P#show mpls ldp discovery Local LDP Identifier: 44.44.44.44 Discovery Sources: Interfaces: Ethernet0/0 (ldp): xmit/recv LDP Id: 33.33.33.33 LDP Id: 55.55.55.55 ; no route ; no route Ethernet0/1 (ldp): xmit/recv

You can see it says "no route". If you enable MPLS on the physical interfaces it will still use the IP address of the loopbacks as LDP Router ID. You need to be able to reach the router ID in order to become LDP neighbors. As soon as you configure OSPF you see this: P#show mpls ldp discovery Local LDP Identifier: 44.44.44.44 Discovery Sources: Interfaces: Ethernet0/0 (ldp): xmit/recv LDP Id: 33.33.33.33 Ethernet0/1 (ldp): xmit/recv LDP Id: 55.55.55.55 That's all there is to it. @Stefan it made sense it started working after removing the Router ID since it will take the physical IP address as Router ID. Also be careful what IP address you use on the loopback interfaces, OSPF will by default advertise a /32 even if you have another subnet mask on the loopback. Good luck guys! Rene

aqeel_abid
2011-06-25 08:09:59 Hi Rene, I download the Basic MPLS, it was Awsome. Now i am configuring the Advanced but i cannot. Can you pls. Fowared me the Configured Lab, so i can verify my my own configuration. I downloaded the Topology but it is only Ip Configuration. Thanks. Aqeel.

aqeel_abid
2011-06-25 09:40:51 Hi Rene, How to Configure MPLS Authentication. I configured like this no ip domain lookup ! ! mpls ldp neighbor 4.4.4.4 password cisco ! ! ! ! ! But it is still establishing the neighbour Aqeel

bdk907

2011-06-26 03:06:23 Aqeel, what part of the lab isn't working for you?

Anybody (nearly) can copy copy & paste commands to get networks up and running but it takes an extra skill set to methodically trouble shoot a problem to find a solution. Trouble shooting in labs that don't quite work right helps build the skill set needed to trouble shoot real life issues with these technologies when they fail. In the real world there are no answer books to look at, either you fix it and become the RockStar or you escalate the problem to someone else and they get all the glory . So instead of taking a look at the answers why not begin trouble shooting the MPLS setup?

If nothing is working right, start trouble shooting to layer 1/2, make sure that all ports are not shut down and then run a 'show cdp neighbor' on each router to see if they can all see each other. If you can see all the routers connected to each other, what happens with you run 'show mpls ldp discovery' and 'show mpls ldp neighbor'. Let us all know how things go. [/i]-bdk[/i]

aqeel_abid
2011-06-26 13:22:19 Hi Everybody, I am stuck here. 23.Configure OSPF on router PE1 and PE2 and use the correct VRF. I don't know how to configure OSPF on MPLS. Following are my Configuration of PE1 and MelonHQ. PE1 ! ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname PE1 ! boot-start-marker boot-end-marker ! ! no aaa new-model memory-size iomem 5 ! ! ip cef no ip domain lookup ! ! ip vrf MELON rd 222:222 route-target export 222:222 route-target import 222:222 ! ip vrf PALM rd 111:111 route-target export 111:111 route-target import 111:111 ! mpls ldp neighbor 4.4.4.4 password cisco ! ! ! ! ! ! ! ! ! ! ! ! ! ! !

! ! ! ! ! ! interface Loopback0 ip address 3.3.3.3 255.255.255.0 ip ospf network point-to-point ! interface Loopback1 ip address 33.33.33.33 255.255.255.0 ! interface Ethernet0/0 ip address 192.168.34.3 255.255.255.0 half-duplex mpls ip ! interface Ethernet0/1 ip address 192.168.39.3 255.255.255.0 half-duplex ! interface Ethernet0/2 ip vrf forwarding PALM ip address 192.168.13.3 255.255.255.0 half-duplex ! interface Ethernet0/3 ip vrf forwarding MELON ip address 192.168.23.3 255.255.255.0 half-duplex ! interface Ethernet1/0 ip address 192.168.36.3 255.255.255.0 half-duplex ! interface Ethernet1/1 no ip address half-duplex ! interface Ethernet1/2 no ip address shutdown half-duplex ! interface Ethernet1/3 no ip address shutdown half-duplex ! router ospf 1 router-id 3.3.3.3 log-adjacency-changes passive-interface Ethernet0/1 passive-interface Ethernet1/0 network 3.3.3.0 0.0.0.255 area 0 network 33.33.33.0 0.0.0.255 area 0 network 192.168.13.0 0.0.0.255 area 0 network 192.168.23.0 0.0.0.255 area 0 network 192.168.34.0 0.0.0.255 area 0 network 192.168.36.0 0.0.0.255 area 0 network 192.168.39.0 0.0.0.255 area 0 ! router rip ! address-family ipv4 vrf PALM redistribute bgp 1 metric 2 network 192.168.13.0 no auto-summary exit-address-family ! router bgp 1 no synchronization

bgp log-neighbor-changes neighbor 5.5.5.5 remote-as 1 neighbor 5.5.5.5 update-source Loopback0 no auto-summary ! address-family vpnv4 neighbor 5.5.5.5 activate neighbor 5.5.5.5 send-community both exit-address-family ! address-family ipv4 vrf PALM redistribute rip no synchronization exit-address-family ! address-family ipv4 vrf MELON no synchronization exit-address-family ! ip http server no ip http secure-server ! ! ! ! ! mpls ldp router-id Loopback0 ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 line aux 0 line vty 0 4 login ! ! end Melon HQ. ! ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname MelonHQ ! boot-start-marker boot-end-marker ! ! no aaa new-model memory-size iomem 5 ! ! ip cef no ip domain lookup ! ! ! ! ! !

! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 2.2.2.2 255.255.255.0 ! interface Loopback1 ip address 22.22.22.22 255.255.255.0 ! interface Ethernet0/0 ip address 192.168.23.2 255.255.255.0 half-duplex ! interface Ethernet0/1 no ip address shutdown half-duplex ! interface Ethernet0/2 ip address 192.168.122.2 255.255.255.0 half-duplex ! interface Ethernet0/3 no ip address shutdown half-duplex ! router ospf 2 log-adjacency-changes network 2.2.2.0 0.0.0.255 area 1 network 22.22.22.0 0.0.0.255 area 1 network 192.168.23.0 0.0.0.255 area 1 network 192.168.122.0 0.0.0.255 area 1 ! no ip http server no ip http secure-server ! ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 line aux 0 line vty 0 4 login

! ! end

Can anybody help to configure OSPF on MPLS VRF. Thanks Aqeel.

mpo
Hi Rene

2011-06-30 09:41:52

When do you make a tutorialvideo til Advanced MPLS.;D

mpo
Hi Rene

2011-06-30 14:18:29

I cant crack these tickets. Configure OSPF on router PE1 and PE2 and use the correct VRF. Ensure OSPF updates are being exchanged between the customer and the PE routers. Configure redistribution between OSPF and BGP on the PE routers, make sure you use the correct VRF. Could you send me conf. Thank you

ReneMolenaar
2011-07-01 09:18:07 This monday I'm working on the MPLS videos, you can expect them the upcoming week. That's final configurations + Youtube solution Videos.

hameidi
Dear

2011-07-17 17:21:12

can u make video on this lab i would be glad if you did

ReneMolenaar
2011-07-17 20:08:24 I added the video a few days ago on Youtube but forgot to put it in the article, it's here now. It took me almost 3 hours to record so i'm curious to see who is going to watch the whole thing ;D Good luck! Rene

kdineshl
Aqeel,

2011-07-17 21:18:43

You have to use the command router ospf # vrf 'name' unlike eigrp or rip where you will use the address family cmd. hope this is what you asked. cheers, Dinesh

Pako

2011-07-18 20:39:49 Hi, I think that there is an error in the lab requirements or in the solution. The requirement is: "Configure BGP AS3 on router CocoHQ and the two CocoBRANCH routers, advertise the link towards the ISP and the Loopback1 interface." But in the solution the router are advertising the lo 0 interface address. This is a good practise I am learning a lot about mpls

ReneMolenaar
2012-04-02 10:04:39 Hi Pako, I might have picked the wrong loopback Rene Good to hear it's useful for you though...

ajiteshraj
Thanks you!!

2011-08-03 08:20:40

Shamrock

2011-12-25 02:54:36 Just finished watching video along with doing the lab. Your labs have been invaluable while studying for CCIE, thanks man!

ReneMolenaar
2012-01-02 12:38:24 You are welcome, good luck studying!

shumari
Hello,

2012-03-06 10:14:06

thanks Rene for this site, is really unbelieve. I have just finished the OSPF ticket and after configuring the sham-link with success I am wathing the OSPF routes as inter-area on the CE (eth0/2 ifaces are down): MelonHQ#sh ip route ospf | i O IA O IA 192.168.122.0/24 [110/120] via 192.168.23.3, 00 O IA 192.168.125.0/24 [110/11] via 192.168.23.3, 00 O IA 12.12.12.12 [110/21] via 192.168.23.3, 00 MelonHQ#sh ip ospf database OSPF Router with ID (2.2.2.2) (Process ID 2) Router Link States (Area 0) Link ID ADV Router Age Seq# Checksum Link count 2.2.2.2 2.2.2.2 442 0x80000009 0x003A4F 3 12.12.12.12 12.12.12.12 1811 0x80000007 0x0072E5 4 192.168.23.3 192.168.23.3 448 0x80000004 0x000313 1 192.168.125.5 192.168.125.5 1004 0x80000003 0x00F479 1 Net Link States (Area 0) Link ID ADV Router Age Seq# Checksum 192.168.23.3 192.168.23.3 449 0x80000001 0x00EEB8 192.168.125.12 12.12.12.12 1848 0x80000001 0x0017E3 Summary Net Link States (Area 0) Link ID ADV Router Age Seq# Checksum 12.12.12.12 192.168.23.3 438 0x80000001 0x008677 122.122.122.122 192.168.23.3 438 0x80000001 0x00AE95 192.168.122.0 192.168.23.3 438 0x80000001 0x009D49 192.168.125.0 192.168.23.3 850 0x80000001 0x00361B 3:26, Ethernet0/0 3:26, Ethernet0/0

3:26, Ethernet0/0

MelonBRANCH#sh ip route ospf | i O IA O IA 2.2.2.2 [110/21] via 192.168.125.5, 00 3:33, Ethernet0/0 3:33, Ethernet0/0 3:47, Ethernet0/0 O IA 22.22.22.22 [110/21] via 192.168.125.5, 00

O IA 192.168.23.0/24 [110/11] via 192.168.125.5, 00 PE1#show ip ospf sham-links Sham Link OSPF_SL0 to address 55.55.55.55 is up Area 0 source address 33.33.33.33 Run as demand circuit

DoNotAge LSA allowed. Cost of using 10 State POINT_TO_POINT, Timer intervals configured, Hello 10, Dead 40, Wait 40, Hello due in 00 0 1

PE2#sh ip ospf sham-links Sham Link OSPF_SL0 to address 33.33.33.33 is up Area 0 source address 55.55.55.55 Run as demand circuit DoNotAge LSA allowed. Cost of using 10 State POINT_TO_POINT, Timer intervals configured, Hello 10, Dead 40, Wait 40, Hello due in 00 0

The routers configurations match the final-configs provide by Rene. Best regards Sebs

ReneMolenaar
2012-04-02 10:02:21 Hi Shumari, Did you get everything working? If you understand OSPF Sham link it might also be a good idea to read up a bit how EIGRP behaves in a similar situation. Rene

Behro

2012-03-11 21:05:41 I cant start your file for this scenerio, because I dont use same IOSes, can you write me names of routers with numbers or initial config which is configured at begining of the lab?? Thank you very much...

ReneMolenaar
2012-04-02 09:57:49 Hi Behro, Keep in mind you don't need 100% the exact same IOS that I'm using. I mostly use a 3640 or 3725 image and another image should do the job as well. If you download my attachment and change the IOS filename to the one you are using it normally works and you should be able to open my topology. That will save a lot of work because there's plenty of routers + interfaces in this topology Rene

digravin
Folks,

2012-04-16 17:02:28

I initially could not ping PalmBRANCH from PalmHQ and vice versa. The routes seemed to propagate, but the pings failed. One thing I did was to send only extended communities between PE's and then the pings worked. So, I changed: neighbor 5.5.5.5 send-community both to neighbor 5.5.5.5 send-community extended on both PE's. For what its worth ... Frank

ReneMolenaar
2012-04-19 09:04:17 Hi Frank, That's interesting...I thought "normally" it doesn't matter if you used both or extended. I'll try it Rene

piyush.shukla90
2012-06-19 13:45:51

Hi R en e How are you .I like th is lab very m u ch b ecau se th is lab exp lain s everyth in g ab ou t MPLS VPNs .You r lab collection is really fan tastic it h elp s m e to p rep are m y C C NP exam . Please p rovid e m e som e g u id elin es h ow to p rep are m y C C NP R ou te exam .I am w aitin g for it.

ReneMolenaar
2012-06-19 16:08:22 Hi Piyush, The best way to approach the CCNP ROUTE exam is to start reading up on all the topics. You can take a look at my "How to Master CCNP ROUTE" exam or pick another book. Once you read about a certain topic it's time to do the labs....I've got plenty of labs to work on here which labs to do and in what order. Good luck for your exam, let me know if you have any more questions! Rene In my book I'm also showing

piyush.shukla90
2012-06-19 13:52:25 Hello Rene how r u I would like to ask one question that when you configured OSPF in Melon HQ & Branch through MPLS backbone then by operating sh ip route conmand on Melon Branch or HQ it provides OSPF inter-area routes for each other although they are both configured in area 0 why ?

ReneMolenaar
2012-06-19 16:09:26 It's because of redistribution from OSPF into MP-BGP on both sides, you have to view the MPLS backbone as a "superbackbone" to OSPF.

osrajput
source interface. ----------------

2012-06-21 07:20:41 Q. Configure PE1 so PalmHQ and MelonHQ see each others routes. Ensure you have reachability by pinging 2.2.2.2 from PalmHQ using the loopback0 as

After configuring Route Target on PE site i am seeing PALMHQ Loopback ip route in MELONBRANCH , I am not able to ping it , but why i am getting PALMHQ routes in MELONBRANCH router. PALMHQ#sh ip int b Interface IP-Address OK? Method Status Protocol Ethernet0/0 192.168.13.8 YES manual up up Loopback0 8.8.8.8 YES manual up up --------MELONBRANCH#sh ip route 8.8.8.8 Routing entry for 8.8.8.0/24 Known via "ospf 2", distance 110, metric 1 Tag Complete, Path Length == 1, AS 1, , type extern 2, forward metric 11 Last update from 192.168.125.5 on Ethernet0/0, 00 Routing Descriptor Blocks: * 192.168.125.5, from 192.168.23.3, 00 Route metric is 1, traffic share count is 1 Route tag 3489660929 5:47 ago, via Ethernet0/0 5:47 ago

ReneMolenaar
2012-06-21 07:39:58 If you post the part of your config that shows the importing/exporting of the routes we can take a look to see what's wrong.

osrajput
PE1 ---------------------------ip vrf COCO rd 333:333

2012-06-21 14:06:19

route-target export 333:333 route-target import 333:333 ! ip vrf MELON rd 222:222 route-target export 222:222

route-target export 123:123 route-target import 222:222 route-target import 123:123 ! ip vrf PALM rd 111:111 route-target export 111:111 route-target export 123:123 route-target import 111:111 route-target import 123:123 ! --------------------PE2 ------------------

ip vrf COCO rd 333:333 route-target export 333:333 route-target import 333:333 ! ip vrf MELON rd 222:222 route-target export 222:222 route-target import 222:222 ! ip vrf PALM rd 111:111 route-target export 111:111 route-target import 111:111 !

ricardolainez
2012-06-22 20:33:24 Hi there, In the solution video, you encounter a problem with the BGP part where part of the AS path seems to be "lost" during the route propagation. I was wondering if you did find a reason and solution for this?

ReneMolenaar
2012-07-02 16:37:57 Hi Ricardo, It's been awhile since I recorded this video. What exactly went wrong again? Rene

ricardolainez
2012-07-02 16:48:35 Hi Rene, Well, during the part when you implement allow-as in and as-override the AS Path doesn't appear complete. You can view this in the solution video at around 1:25hrs

evolution

2012-06-30 11:25:43 scorcher of a lab mate.. loved solving this.. thanks

ReneMolenaar
2012-07-02 16:38:06 Thanks, glad you enjoyed it!

funnybaai
Hi,

2012-07-11 11:57:55

Just wanted to find out if some of you also experiencing an issue where all the routers load and start correct but you cannot console to all of them. I have checked the .net file and there are no duplicate console numbers but yet R5,R6,R7,R8 consoles are not working?

Thanks

ReneMolenaar
2012-07-18 18:32:15 First I would check if there are any applications running on your computer that are using some of the console ports. You can also try just to start the routers that are giving you issues and see if it's possible to access the console then. Most of the times it's because another application is already using the port...

slappeyb

2012-09-29 09:50:33 Route tagging breaks sham-link adjacancy. Spent hours troubleshooting why my link wasn't establishing. Almost gave up thinking it was a gns3 error. Turned out to be good troubleshooting and a great lesson learned. Very nice exercise. Thank you!

ReneMolenaar
2012-11-07 12:49:20 Glad you liked it!

sgreenan

2013-05-14 12:37:12 Watched all the youtube video Burps and all. Great lab. Still curious as to how I get a default route to the INTERNET to PALM and COCO

Copyright 2013 GNS3Vault. All Rights Reserved. Joomla! is Free Software released under the GNU General Public License.