Page 1
L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x First Published: 2018-03-30 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
Page 2
Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com trademarks.
Define VRFs on PE Routers to Enable Customer Connectivity Configure VRF Interfaces on PE Routers for Each VPN Customer Configure Routing Protocol Between the PE and CE Routers L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 6
BGP Distribution of VPN Routing Information MPLS Forwarding Automatic Route Distinguisher Assignment C H A P T E R 2 Implementing IPv6 VPN Provider Edge Transport over MPLS L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 7
Deploying IPv6 over MPLS Backbones IPv6 on the Provider Edge and Customer Edge Routers OSPFv3 6VPE Configuring 6PE/VPE Configuring OSPFv3 as the Routing Protocol Between the PE and CE Routers L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 8
Contents L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x viii...
What's New in Cisco Product Documentation. To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the . RSS feeds are a free service. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 10
Preface Obtaining Documentation and Submitting a Service Request L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
VPN, only the edge router of the service provider that provides services to the customer site needs to be updated. The following figure depicts a basic MPLS VPN topology. Figure 1: Basic MPLS VPN Topology These are the basic components of MPLS VPN: L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
VPNs. However, a site can associate with only one VRF. A customer-site VRF contains all the routes available to the site from the VPNs of which it is a member. Read more at Major Components of MPLS L3VPN—Details, on page L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Restrictions for MPLS L3VPN Restrictions for MPLS L3VPN Implementing MPLS L3VPN in Cisco NCS 540 Series Routers is subjected to these restrictions: • The Cisco NCS 540 Series router supports only 16 ECMP paths. • Fragmentation of MPLS packets that exceed egress MTU is not supported. Fragmentation is not supported for IP->MPLS imposition as well.
The peers in the different autonomous systems communicate over eBGP sessions; however, they can exchange route information as if they were iBGP peers. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
• The distributing router changes the next-hop addresses and labels and uses a next-hop-self address. • IGP-1 and IGP-2 know the addresses of CEBGP-1 and CEBGP-2. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
VPN-IPv4 routes and forward them to the PE routers results in improved scalability compared with configurations in which the ASBR holds all the VPN-IPv4 routes and forwards the routes based on VPN-IPv4 labels. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
VPN-IPv4 routes and forward them through the PE routers and ASBRs allows for a scalable configuration. Figure 3: VPNs Using eBGP and iBGP to Distribute Routes and MPLS Labels L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
• Keepalive messages—Routers exchange keepalive messages to determine if a neighboring router is still available to exchange routing information. The router sends these messages at regular intervals. (Sixty seconds is the default for Cisco routers.) The keepalive message does not contain routing data; it contains only a message header.
MPLS VPN customers. The tasks listed below helps to identify the core network topology. • Identify the size of the network: Identify the following to determine the number of routers and ports required: L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Router-PE1# show ospf neighbor Neighbors for OSPF dc-core Neighbor ID State Dead Time Address Interface 16.16.16.1 FULL/DR 00:00:34 191.22.1.2 HundredGigE0/0/1/0 Neighbor is up for 1d18h Total neighbor count: 1 L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
• How to Implement MPLS Layer 3 VPNs, on page 8 For more details on configuring the routing protocol, see Routing Configuration Guide for Cisco NCS 540 Series Routers and BGP Configuration Guide for Cisco NCS 540 Series Routers. Configure MPLS in the Core To enable MPLS on all routers in the core, you must configure a Label Distribution Protocol (LDP).
Forwarding Information Base (FIB) must be enabled on all routers in the core, including the provider edge (PE) routers. For information on how to determine if FIB is enabled, see the Implementing Cisco Express Forwarding module in the IP Addresses and Services Configuration Guide for Cisco NCS 540 Series Routers.
Page 23
Precedence: internet Non-stop routing is enabled Multi-protocol capability received Neighbor capabilities: Route refresh: advertised (old + new) and received (old + new) Graceful Restart (GR Awareness): received L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 24
Last ack version 798487, Last synced ack version 0 Outstanding version objects: current 0, max 1 Additional-paths operation: Send and Receive Send Multicast Attributes Advertise VPNv4 routes enabled with defaultReoriginate,disable Local with stitching-RT option L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Configure the Core Network, on page 9 • Define VRFs on PE Routers to Enable Customer Connectivity, on page 16 For more details on Multiprotocol BGP, see BGP Configuration Guide for Cisco NCS 540 Series Routers. Associated Commands Connect MPLS VPN Customers Connecting MPLS VPN customers involves these main tasks: •...
This VRF instance is then associated with the respective BGP instance. Running Configuration vrf vrf1601 address-family ipv4 unicast import route-target 2001:1601 export route-target 2001:1601 Verification Verify the import and export route targets. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
HundredGigE0/0/1/0.1601 is Up, ipv4 protocol is Up Vrf is vrf1601 (vrfid 0x60000001) Internet address is 192.13.26.6/30 MTU is 1518 (1500 is available to IP) Helper address is not set L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 30
Last ack version 1, Last synced ack version 0 Outstanding version objects: current 0, max 0 Additional-paths operation: None Advertise VPNv4 routes enabled with defaultReoriginate,disable Local with stitching-RT option L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 31
Maximum stalepath time is 360 seconds Route refresh request: received 0, sent 0 Policy for incoming advertisements is pass-all Policy for outgoing advertisements is pass-all 0 accepted prefixes, 0 are bestpaths L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 32
Configure Multiprotocol BGP on the PE Routers and Route Reflectors, on page 12 For more details on BGP, see BGP Configuration Guide for Cisco NCS 540 Series Routers. Configure RIPv2 as the Routing Protocol Between the PE and CE Routers...
Page 33
Router-PE1(config-static-vrf-afi)#23.13.1.1/32 TenGigE0/0/0/0.1601 192.13.3.93 Router-PE1(config-static-vrf-afi)#commit Repeat the configuration in CE1, with the respective interface values. Running Configuration PE1: router static vrf vrf1601 address-family ipv4 unicast 23.13.1.1/32 TenGigE0/0/0/0.1601 192.13.3.93 L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 34
Router-PE1(config)#router ospf pe-ce-ospf-vrf Router-PE1(config-ospf)#router-id 13.13.13.1 Router-PE1(config-ospf)#vrf vrf1601 Router-PE1(config-ospf-vrf)#redistribute connected Router-PE1(config-ospf-vrf)#redistribute bgp 2001 Router-PE1(config-ospf-vrf)#area 1 Router-PE1(config-ospf-vrf-ar)#interface TenGigE0/0/0/0.1601 Router-PE1(config-ospf-vrf-ar)# commit Repeat this configuration at PE2 node as well. CE1: L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Verify the Overlay (L3VPN), on page 28 Verify the L3VPN Traffic Flow • Verify the number of bytes switched for the label associated with the VRF (vrf1601): L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
24039 24167 20.20.20.1/32 Hu0/0/1/0 191.22.1.2 17872433 24167 20.20.20.1/32 Hu0/0/1/0 191.22.3.2 6345 24041 Aggregate vrf1601: Per-VRF Aggr[V] vrf1601 7950400999 • Verify if label is updated in the hardware: L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 37
NHINDEX STATS: pkts 0, bytes 0 (no stats) RX H/W Result on NP:0 [Adj ptr:0x40 (BE)]: Rx-Adj is NOT required on this platform TX H/W Result for NP:0 (index: 0x189a8 (BE)): Next Hop Data L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
- internal, r RIB-failure, S stale, N Nexthop-discard Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
(ASBR) to exchange VPN-IPv4 routes with another autonomous system. Procedure Step 1 configure Example: RP/0/RP0/CPU0:router# configure Enters the XR Config mode. Step 2 router bgp autonomous-system-number Example: L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 46
• Use the route-policy-name argument to define the name of the of route policy. The example shows that the route policy name is defined as pass-all. • Use the in keyword to define the policy for inbound routes. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 47
- Saves the configuration changes and remains within the configuration session. end - Prompts user to take one of these actions: • Yes - Saves configuration changes and exits the configuration session. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
- Prompts user to take one of these actions: • Yes - Saves configuration changes and exits the configuration session. • No - Exits the configuration session without committing the configuration changes. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
RP/0/RP0/CPU0:router(config-bgp)# bgp confederation peers 8 Configures the peer autonomous system number that belongs to the confederation. Step 4 bgp confederation identifier autonomous-system-number Example: RP/0/RP0/CPU0:router(config-bgp)# bgp confederation identifier 5 L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 50
Applies a routing policy to updates received from a BGP neighbor. Step 10 route-policy route-policy-name out Example: RP/0/RP0/CPU0:router(config-bgp-nbr-af)# route-policy Out-Ipv4 out Applies a routing policy to updates advertised to a BGP neighbor. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
To summarize, VRF-lite configuration involves these main tasks: • Create VRF • Configure VRF under the interface • Configure VRF under routing protocol Configuration Example • Create VRF: L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 54
Router(config-rip-vrf)#default-information originate Router(config-vrf-import-rt)#commit Similarly configure vrf2 under rip, with interface TenGigE0/0/0/0.2000 and interface TenGigE0/0/0/1.2000 Running Configuration /* VRF Configuration */ vrf vrf1 address-family ipv4 unicast import route-target 100:100 L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
• Configure protocol support on PE-CE (refer, Connect MPLS VPN Customers, on page 15 • Configure protocol support on PE-PE (refer, Configure Multiprotocol BGP on the PE Routers and Route Reflectors, on page L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Packet forwarding information is stored in the IP routing table and the FIB table for each VRF. A separate set of routing and FIB tables is maintained for each VRF. These tables prevent information from being L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
PE routers. When a PE router forwards a packet received from a CE router across the provider network, it labels the packet with the label learned L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
With thousands of routers in a network each supporting multiple VRFs, configuration and management of route distinguishers across the network can present a problem. Cisco IOS XR software simplifies this process by assigning unique route distinguisher to VRFs using the rd auto command.
IPv6 services, from the edge, in a scalable way, without any IPv6 addressing restrictions and without putting a well-controlled IPv4 backbone in jeopardy. Backbone stability is essential for service providers that have recently stabilized their IPv4 infrastructure. L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Service providers running an MPLS/IPv4 infrastructure follow similar trends because several integration scenarios that offer IPv6 services on an MPLS network are possible. Cisco Systems has specially developed Cisco 6PE or IPv6 Provider Edge Router over MPLS, to meet all those requirements.
OSPFv3 6VPE The Open Shortest Path First version 3 (OSPFv3) IPv6 VPN Provider Edge (6VPE) feature adds VPN routing and forwarding (VRF) and provider edge-to-customer edge(PE-CE) routing support to Cisco IOS XR OSPFv3 implementation. This feature allows: • Multiple VRF support per OSPFv3 routing process •...
Note For 6PE, you can use all routing protocols supported on Cisco IOS XR software such as BGP, OSPF, IS-IS, and Static to learn routes from both clouds. However, for 6VPE, you can use only the BGP, and Static routing protocols to learn routes.
Page 69
66:1:2::/64 is directly connected, 02:09:39, TenGigE0/0/0/0.2 66:1:2::1/128 is directly connected, 02:09:39, TenGigE0/0/0/0.2 66:1:3::/64isdirectlyconnected, [20/0] via fe80::200:2cff:fe64:99e2, 02:07:38, TenGigE0/0/0/0.2 2000:0:0:1c::/64 [20/0] via fe80::200:2cff:fe64:99e2, 02:07:38, TenGigE0/0/0/0.2 2000:0:0:1d::/64 Local PE : L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
This example shows how to configure provider edge (PE)-to-customer edge (CE) routing sessions that use Open Shortest Path First version 3 (OSPFv3). Router#config Router(config)#router ospfv3 7 Router(config-ospfv3)#nsr Router(config-ospfv3)#router-id 10.200.1.7 Router(config-ospfv3)#vrf vrf1 Router(config-ospfv3-vrf)#area 7 Router(config-ospfv3-vrf-ar)#interface Loopback7 Router(config-ospfv3-vrf-ar-if)#! Router(config-ospfv3-vrf-ar-if)#interface TenGigE0/0/0/3.7 Router(config-ospfv3-vrf-ar-if)# L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 71
Neighbors for OSPFv3 7, VRF vrf1 Neighbor ID State Dead Time Interface ID Interface FULL/DROTHER 10.201.7.1 00:00:36 TenGigE0/0/0/3.7 Neighbor is up for 1w0d Total neighbor count: 1 L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Page 72
Implementing IPv6 VPN Provider Edge Transport over MPLS Configuring OSPFv3 as the Routing Protocol Between the PE and CE Routers L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x...
Need help?
Do you have a question about the NCS 540 Series and is the answer not in the manual?
Questions and answers