JTO Phase II Data Network & IT Configuration:MPLS based Layer 3 VPN PDF

JTO Phase II Data Network & IT Configuration:MPLS based Layer 3 VPN 6.8 Conclusion The MPLS Layer 3 VPNs represent an alternative to IPSec VPNs when supporting complex topologies. They solve the scalability issue of conventional IPSec VPNs deployed in a full-...

JTO Phase II Data Network & IT Configuration:MPLS based Layer 3 VPN 6.8 Conclusion The MPLS Layer 3 VPNs represent an alternative to IPSec VPNs when supporting complex topologies. They solve the scalability issue of conventional IPSec VPNs deployed in a full-mesh model, reducing the configuration overhead while interconnecting many sites. Adding a new site to VPNs requires a single change on the Provider Edge (PE) device that connects the customer router. Customer Edge (CE) router peers with service provider‘s PE router using the IGP or eBGP, exchanging layer 3 routing information with the PE router. However, the CE router has no VPN awareness. A VPN is formed between PE routers that run the Multiprotocol Extension for BGP-4 (MP-BGP), RFC 4760. MP-BGP is used for distributing customer prefixes within the provider‘s network. Customer‘s data is switched in the service provider‘s Multiprotocol Label Switching (MPLS) network based on labels. Traffic follows through a predetermined label-switched path (LSP), which is an unidirectional tunnel between a pair of the PE routers. JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 84 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default 7 Configuration using MP-iBGP/eBGP, MP-iBGP/OSPF & MP-iBGP/Static/Default 7.1 Learning objectives The objective of this chapter is to understand i) MPLS VPN configuration MP-iBGP/eBGP ii) MP-iBGP/OSPF configuration iii) MP-iBGP/Static/Default sConfiguration 7.2 Introduction A Multiprotocol Label Switching (MPLS) virtual private network (VPN) consists of a set of sites that are interconnected by means of an MPLS provider core network. At each site, there are one or more customer edge (CE) devices, which attach to one or more provider edge (PE) devices. PEs use the Multiprotocol-Border Gateway Protocol (MP-BGP) to dynamically communicate with each other. MP-iBGP is used to exchange routing updates, between Autonomous Syatem Boundary router (ASBR)of an autonomous system, that they have learnt from other autonomous system connected through them. 7.3 MPLS-VPN Configuration (MPLS based L3 VPN using MP-BGP/ eBGP Lab) DELHI-P: Enabling & disabling interfaces:- DELHI-P(config)#int gi 7/1/1 DELHI-P(config-if)#no shut DELHI-P(config-if)#int gi 7/1/0 DELHI-P(config-if)#shut Re-configuring OSPF 9829:- DELHI-P#conf t Enter configuration commands, one per line. End with CNTL/Z. DELHI-P(config)#no router ospf 9829 DELHI-P(config)#router ospf 9829 DELHI-P(config-router)#auto-cost reference-bandwidth 1000 DELHI-P(config-router)#network 172.16.16.40 0.0.0.3 area 0 DELHI-P(config-router)#network 172.16.16.44 0.0.0.3 area 0 DELHI-P(config-router)#network 172.16.16.60 0.0.0.3 area 0 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 85 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default DELHI-P(config-router)#network 192.168.8.254 0.0.0.0 area 0 DELHI-P(config-router)#passive-interface loopback 0 DELHI-P(config-router)#end DELHI-P#write memory Building configuration... [OK] DELHI-P# Note: Re-configuring MPLS/Cisco Express Forwarding(cef) on all interfaces is not required for P router MUMBAI-P: Enabling & disabling interfaces:- MUMBAI-P(config-if)#int gi 7/1/0 MUMBAI-P(config-if)#shut Re-configuring OSPF 9829:- MUMBAI-P#conf t Enter configuration commands, one per line. End with CNTL/Z. MUMBAI-P(config)#no router ospf 9829 MUMBAI-P(config)#router ospf 9829 MUMBAI-P(config-router)#auto-cost reference-bandwidth 1000 MUMBAI-P(config-router)#network 172.16.16.40 0.0.0.3 area 0 MUMBAI-P(config-router)#network 172.16.16.48 0.0.0.3 area 0 MUMBAI-P(config-router)#network 192.168.9.254 0.0.0.0 area 0 MUMBAI-P(config-router)#passive-interface loopback 0 MUMBAI-P(config-router)#end MUMBAI-P#write memory Building configuration... [OK] MUMBAI-P# Note: Re-configuring MPLS/Cisco Express Forwarding(cef) on all interfaces is not required for P router JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 86 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default 7.4 KOLKATA-PE: MPLS based L3 VPN configuration using MP- BGP/eBGP:- Enabling & disabling interfaces:- KOLKATA-PE (config-if)#int pos 3/2 KOLKATA-PE (config-if)#shut Re-configuring OSPF 9829:- KOLKATA-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. KOLKATA-PE(config)#no router ospf 9829 KOLKATA-PE(config)#router ospf 9829 KOLKATA-PE(config-router)#auto-cost reference-bandwidth 1000 KOLKATA-PE(config-router)#network 172.16.16.44 0.0.0.3 area 0 KOLKATA-PE(config-router)#network 192.168.0.254 0.0.0.0 area 0 KOLKATA-PE(config-router)#passive-interface loopback 0 KOLKATA-PE(config-router)#exit KOLKATA-PE(config)# Disabling MPLS on interfaces (not in MPLS Domain):- KOLKATA-PE(config)#interface GigabitEthernet2/1 KOLKATA-PE(config-if)#no mpls ip KOLKATA-PE(config-if)# no mpls label protocol ldp KOLKATA-PE(config-if)#exit KOLKATA-PE(config)#interface POS 3/1 KOLKATA-PE(config-if)#no mpls ip KOLKATA-PE(config-if)# no mpls label protocol ldp KOLKATA-PE(config-if)#end KOLKATA-PE#write memory Building configuration... [OK] KOLKATA-PE# Creation of VPN (vrf-table) and assigning Route-distinquisher/Route-target:- KOLKATA-PE#conf t JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 87 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default Enter configuration commands, one per line. End with CNTL/Z. KOLKATA-PE(config)#ip vrf ibm KOLKATA-PE(config-vrf)#rd 9829:1 KOLKATA-PE(config-vrf)#route-target both 9829:10 KOLKATA-PE(config-vrf)#exit KOLKATA-PE(config)#ip vrf sun KOLKATA-PE(config-vrf)#rd 9829:2 KOLKATA-PE(config-vrf)#route-target both 9829:20 KOLKATA-PE(config-vrf)#exit KOLKATA-PE(config)# Assigning an interface to the VRF table:- KOLKATA-PE(config)#interface pos 3/1 KOLKATA-PE(config-if)#ip vrf forwarding ibm % Interface GigabitEthernet2/2 IP address 172.16.16.14 removed due to enabling VRF ibm KOLKATA-PE(config-if)#ip address 172.16.16.14 255.255.255.252 KOLKATA-PE(config-if)#exit KOLKATA-PE(config)#interface gigabitEthernet 2/1 KOLKATA-PE(config-if)#ip vrf forwarding sun % Interface GigabitEthernet2/1 IP address 172.16.16.17 removed due to enabling VRF sun KOLKATA-PE(config-if)#ip address 172.16.16.17 255.255.255.252 KOLKATA-PE(config-if)#end KOLKATA-PE#write memory Building configuration... [OK] KOLKATA-PE# Configuring MP-BGP KOLKATA-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. KOLKATA-PE(config)#router bgp 9829 KOLKATA-PE(config-router)#neighbor 192.168.5.254 remote-as 9829 KOLKATA-PE(config-router)#neighbor 192.168.5.254 update-source loopback 0 KOLKATA-PE(config-router)#neighbor 192.168.2.254 remote-as 9829 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 88 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default KOLKATA-PE(config-router)#neighbor 192.168.2.254 update-source loopback 0 KOLKATA-PE(config-router)#no bgp default ipv4-unicast KOLKATA-PE(config-router)#address-family ipv4 vrf ibm KOLKATA-PE(config-router-af)#neighbor 172.16.16.13 remote-as 20 KOLKATA-PE(config-router-af)#neighbor 172.16.16.13 next-hop-self KOLKATA-PE(config-router-af)#exit-address-family KOLKATA-PE(config-router)#address-family ipv4 vrf sun KOLKATA-PE(config-router-af)#neighbor 172.16.16.18 remote-as 50 KOLKATA-PE(config-router-af)#neighbor 172.16.16.18 next-hop-self KOLKATA-PE(config-router-af)#exit-address-family KOLKATA-PE(config-router)#address-family vpnv4 KOLKATA-PE(config-router-af)#neighbor 192.168.5.254 activate KOLKATA-PE(config-router-af)#neighbor 192.168.5.254 next-hop-self KOLKATA-PE(config-router-af)#neighbor 192.168.5.254 send-community both KOLKATA-PE(config-router-af)#neighbor 192.168.2.254 activate KOLKATA-PE(config-router-af)#neighbor 192.168.2.254 next-hop-self KOLKATA-PE(config-router-af)#neighbor 192.168.2.254 send-community both KOLKATA-PE(config-router-af)#exit-address-family KOLKATA-PE(config-router)#no synchronization KOLKATA-PE(config-router)#no auto-summary KOLKATA-PE(config-router)#end KOLKATA-PE#wr 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] KOLKATA-PE# 7.5 PUNE-PE: MPLS based L3 VPN configuration using MP- BGP/eBGP:- Enabling & disabling interfaces & configuring controller:- PUNE-PE (config)#controller e1 4/0/0 PUNE-PE (config-controller)#channel-group 0 time-slot 1-31 PUNE-PE (config-c0ntroller)#exit JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 89 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default PUNE-PE (config)#int pos 3/2 PUNE-PE (config-if)#shut PUNE-PE (config)#int gi 2/1 PUNE-PE (config-if)#shut Re-configuring OSPF 9829:- PUNE-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. PUNE-PE(config)#no router ospf 9829 PUNE-PE(config)#router ospf 9829 PUNE-PE(config-router)#auto-cost reference-bandwidth 1000 PUNE-PE(config-router)#network 172.16.16.48 0.0.0.3 area 0 PUNE-PE(config-router)#network 192.168.2.254 0.0.0.0 area 0 PUNE-PE(config-router)#passive-interface loopback 0 PUNE-PE(config-router)#exit PUNE-PE(config)# Disabling MPLS on interfaces (not in MPLS Domain):- PUNE-PE(config)#interface POS 3/1 PUNE-PE(config-if)#no mpls ip PUNE-PE(config-if)# no mpls label protocol ldp PUNE-PE(config-if)#end PUNE-PE#write memory Building configuration... [OK] PUNE-PE# Creation of VPN (vrf-table) and assigning Route-distinquisher/Route-target:- PUNE-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. PUNE-PE(config)#ip vrf ibm PUNE-PE(config-vrf)#rd 9829:1 PUNE-PE(config-vrf)#route-target both 9829:10 PUNE-PE(config-vrf)#exit JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 90 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default PUNE-PE(config)#ip vrf sun PUNE-PE(config-vrf)#rd 9829:2 PUNE-PE(config-vrf)#route-target both 9829:20 PUNE-PE(config-vrf)#exit PUNE-PE(config)# Assigning an interface to the VRF table:- PUNE-PE(config)#interface serial 4/0/0:0 PUNE-PE(config-if)#ip vrf forwarding ibm PUNE-PE(config-if)#ip address 172.16.16.69 255.255.255.252 PUNE-PE(config-if)#exit PUNE-PE(config)#interface pos 3/1 PUNE-PE(config-if)#ip vrf forwarding sun % Interface GigabitEthernet2/1 IP address 172.16.16.5 removed due to enabling VRF sun PUNE-PE(config-if)#ip address 172.16.16.5 255.255.255.252 PUNE-PE(config-if)#end PUNE-PE#write memory Building configuration... [OK] PUNE-PE# Configuring MP-BGP PUNE-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. PUNE-PE(config)#router bgp 9829 PUNE-PE(config-router)#neighbor 192.168.5.254 remote-as 9829 PUNE-PE(config-router)#neighbor 192.168.5.254 update-source loopback 0 PUNE-PE(config-router)#neighbor 192.168.0.254 remote-as 9829 PUNE-PE(config-router)#neighbor 192.168.0.254 update-source loopback 0 PUNE-PE(config-router)#no bgp default ipv4-unicast PUNE-PE(config-router)#address-family ipv4 vrf ibm PUNE-PE(config-router-af)#neighbor 172.16.16.70 remote-as 10 PUNE-PE(config-router-af)#neighbor 172.16.16.70 next-hop-self PUNE-PE(config-router-af)#exit-address-family PUNE-PE(config-router)#address-family ipv4 vrf sun JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 91 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default PUNE-PE(config-router-af)#neighbor 172.16.16.6 remote-as 40 PUNE-PE(config-router-af)#neighbor 172.16.16.6 next-hop-self PUNE-PE(config-router-af)#exit-address-family PUNE-PE(config-router)#address-family vpnv4 PUNE-PE(config-router-af)#neighbor 192.168.5.254 activate PUNE-PE(config-router-af)#neighbor 192.168.5.254 next-hop-self PUNE-PE(config-router-af)#neighbor 192.168.5.254 send-community both PUNE-PE(config-router-af)#neighbor 192.168.0.254 activate PUNE-PE(config-router-af)#neighbor 192.168.0.254 next-hop-self PUNE-PE(config-router-af)#neighbor 192.168.0.254 send-community both PUNE-PE(config-router-af)#exit-address-family PUNE-PE(config-router)#no synchronization PUNE-PE(config-router)#no auto-summary PUNE-PE(config-router)#end PUNE-PE#wr 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] PUNE-PE# CHENNAI-PE: Enabling & disabling interfaces:- CHENNAI-PE (config)#int gi 2/1 CHENNAI-PE (config-if)#shut Re-configuring OSPF 9829:- CHENNAI-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. CHENNAI-PE(config)#no router ospf 9829 CHENNAI-PE(config)#router ospf 9829 CHENNAI-PE(config-router)#auto-cost reference-bandwidth 1000 CHENNAI-PE(config-router)#network 172.16.16.60 0.0.0.3 area 0 CHENNAI-PE(config-router)#network 192.168.5.254 0.0.0.0 area 0 CHENNAI-PE(config-router)#passive-interface loopback 0 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 92 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default CHENNAI-PE(config-router)#exit CHENNAI-PE(config)# Disabling MPLS on interfaces (not in MPLS Domain):- CHENNAI-PE(config)#interface GigabitEthernet2/1 CHENNAI-PE(config-if)#no mpls ip CHENNAI-PE(config-if)# no mpls label protocol ldp CHENNAI-PE(config-if)#exit Creation of VPN (vrf-table) and assigning Route-distinquisher/Route-target:- CHENNAI-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. CHENNAI-PE(config)#ip vrf ibm CHENNAI-PE(config-vrf)#rd 9829:1 CHENNAI-PE(config-vrf)#route-target both 9829:10 CHENNAI-PE(config-vrf)#exit CHENNAI-PE(config)# Assigning an interface to the VRF table:- CHENNAI-PE(config)#interface serial 4/0/0:0 CHENNAI-PE(config-if)#ip vrf forwarding ibm CHENNAI-PE(config-if)#ip address 172.16.16.65 255.255.255.252 CHENNAI-PE(config-if)#end CHENNAI-PE#write memory Building configuration... [OK] CHENNAI-PE# Configuring MP-BGP CHENNAI-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. CHENNAI-PE(config)#router bgp 9829 CHENNAI-PE(config-router)#neighbor 192.168.0.254 remote-as 9829 CHENNAI-PE(config-router)#neighbor 192.168.0.254 update-source loopback 0 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 93 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default CHENNAI-PE(config-router)#neighbor 192.168.2.254 remote-as 9829 CHENNAI-PE(config-router)#neighbor 192.168.2.254 update-source loopback 0 CHENNAI-PE(config-router)#no bgp default ipv4-unicast CHENNAI-PE(config-router)#address-family ipv4 vrf ibm CHENNAI-PE(config-router-af)#neighbor 172.16.16.66 remote-as 20 CHENNAI-PE(config-router-af)#neighbor 172.16.16.66 next-hop-self CHENNAI-PE(config-router-af)#exit-address-family CHENNAI-PE(config-router)#address-family vpnv4 CHENNAI-PE(config-router-af)#neighbor 192.168.0.254 activate CHENNAI-PE(config-router-af)#neighbor 192.168.0.254 next-hop-self CHENNAI-PE(config-router-af)#neighbor 192.168.0.254 send-community both CHENNAI-PE(config-router-af)#neighbor 192.168.2.254 activate CHENNAI-PE(config-router-af)#neighbor 192.168.2.254 next-hop-self CHENNAI-PE(config-router-af)#neighbor 192.168.2.254 send-community both CHENNAI-PE(config-router-af)#exit-address-family CHENNAI-PE(config-router)#no synchronization CHENNAI-PE(config-router)#no auto-summary CHENNAI-PE(config-router)#end CHENNAI-PE#wr 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] CHENNAI-PE# 7.6 IBM-CE-1 : eBGP configuration:- Enabling & disabling interfaces:- IBM-CE-1 (config)#controller e1 4/0/0 IBM-CE-1 (config-controller)#channel-group 0 time-slot 1-31 IBM-CE-1 (config-c0ntroller)#exit IBM-CE-1 (config)#int pos 3/2 IBM-CE-1 (config-if)#shut IBM-CE-1 (config-if)#int serial 4/0/0:0 IBM-CE-1 (config-if)#ip add 172.16.16.70 255.255.255.252 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 94 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default IBM-CE-1 (config-if)#exit Removing OSPF 9829:- IBM-CE-1# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-1(config)#no router ospf 9829 IBM-CE-1(config)# Configuring BGP 10 & creating loopback 1 interface:- IBM-CE-1# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-1(config)#interface loopback 1 IBM-CE-1(config-if)#ip address 10.10.0.1 255.255.0.0 IBM-CE-1(config-if)#exit IBM-CE-1(config)#router bgp 10 IBM-CE-1(config-router)#no synchronization IBM-CE-1(config-router)#no auto-summary IBM-CE-1(config-router)#neighbour 172.16.16.33 remote-as 9829 IBM-CE-1(config-router)#network 10.10.0.0 mask 255.255.0.0 IBM-CE-1(config-router)#network 192.168.3.254 mask 255.255.255.255 IBM-CE-1(config-router)#end IBM-PE#write memory Building configuration... [OK] IBM-CE-1# 7.7 IBM-CE-2 : eBGP configuration:- Enabling & disabling interfaces:- IBM-CE-2 (config)#int pos 3/2 IBM-CE-2 (config-if)#shut Removing OSPF 9829:- JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 95 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default IBM-CE-2# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-2(config)#no router ospf 9829 IBM-CE-2(config)# Configuring BGP 20 & creating loopback 1 interface:- IBM-CE-2# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-2(config)#interface loopback 1 IBM-CE-2(config-if)#ip address 10.20.0.1 255.255.0.0 IBM-CE-2(config-if)#exit IBM-CE-2(config)#router bgp 20 IBM-CE-2(config-router)#no synchronization IBM-CE-2(config-router)#no auto-summary IBM-CE-2(config-router)#neighbour 172.16.16.14 remote-as 9829 IBM-CE-2(config-router)#network 10.20.0.0 mask 255.255.0.0 IBM-CE-2(config-router)#network 192.168.4.254 mask 255.255.255.255 IBM-CE-2(config-router)#end IBM-PE#write memory Building configuration... [OK] IBM-CE-2# 7.8 IBM-CE-3 : eBGP configuration:- Enabling & disabling interfaces:- IBM-CE-3 (config)#controller e1 4/0/0 IBM-CE-3 (config-controller)#channel-group 0 time-slot 1-31 IBM-CE-3 (config-c0ntroller)#exit IBM-CE-3 (config-if)#int serial 4/0/0:0 IBM-CE-3 (config-if)#ip add 172.16.16.66 255.255.255.252 IBM-CE-3 (config-if)#exit Removing OSPF 9829:- JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 96 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default IBM-CE-3# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-3(config)#no router ospf 9829 IBM-CE-3(config)# Configuring BGP 30 & creating loopback 1 interface:- IBM-CE-3# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-3(config)#interface loopback 1 IBM-CE-3(config-if)#ip address 10.30.0.1 255.255.0.0 IBM-CE-3(config-if)#exit IBM-CE-3(config)#router bgp 30 IBM-CE-3(config-router)#no synchronization IBM-CE-3(config-router)#no auto-summary IBM-CE-3(config-router)#neighbour 172.16.16.65 remote-as 9829 IBM-CE-3(config-router)#network 10.30.0.0 mask 255.255.0.0 IBM-CE-3(config-router)#network 192.168.7.254 mask 255.255.255.255 IBM-CE-3(config-router)#end IBM-PE#write memory Building configuration... [OK] IBM-CE-3# 7.9 SUN-CE-1 : eBGP configuration:- Removing OSPF 9829:- SUN-CE-1# conf t Enter configuration commands, one per line. End with CNTL/Z. SUN-CE-1(config)#no router ospf 9829 SUN-CE-1(config)# Disabling MPLS on interfaces (not in MPLS Domain):- SUN-CE-1(config)#no ip cef distributed SUN-CE-1(config)#no mpls ip SUN-CE-1(config)#no mpls label protocol ldp JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 97 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default SUN-CE-1(config)#no mpls ldp router-id loopback 0 SUN-CE-1(config)#interface pos 3/1 SUN-CE-1(config-if)#no mpls ip SUN-CE-1(config-if)#no mpls label protocol ldp SUN-CE-1(config-if)#end SUN-PE#write memory Building configuration... [OK] SUN-CE-1# Configuring BGP 40 & creating loopback 1 interface:- SUN-CE-1# conf t Enter configuration commands, one per line. End with CNTL/Z. SUN-CE-1(config)#interface loopback 1 SUN-CE-1(config-if)#ip address 20.40.0.1 255.255.0.0 SUN-CE-1(config-if)#no shutdown SUN-CE-1(config-if)#exit SUN-CE-1(config)#router bgp 40 SUN-CE-1(config-router)#no synchronization SUN-CE-1(config-router)#no auto-summary SUN-CE-1(config-router)#neighbour 172.16.16.5 remote-as 9829 SUN-CE-1(config-router)#network 20.40.0.0 mask 255.255.0.0 SUN-CE-1(config-router)#network 192.168.6.254 mask 255.255.255.255 SUN-CE-1(config-router)#end SUN-PE#write memory Building configuration... [OK] SUN-CE-1# 7.10 SUN-CE-2 : eBGP configuration:- Removing OSPF 9829:- SUN-CE-2# conf t Enter configuration commands, one per line. End with CNTL/Z. JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 98 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default SUN-CE-2(config)# no router ospf 9829 SUN-CE-2(config)# Configuring Controller & Disabling MPLS on interfaces (not in MPLS Domain):- SUN-CE-2(config)#controller e1 4/0/0 SUN-CE-2(config-controller)#channel-group 0 time-slot 1-31 SUN-CE-2(config-controller)#exit SUN-CE-2(config)#no ip cef distributed SUN-CE-2(config)#no mpls ip SUN-CE-2(config)#no mpls label protocol ldp SUN-CE-2(config)#no mpls ldp router-id loopback 0 SUN-CE-2(config)#interface GigabitEthernet2/1 SUN-CE-2(config-if)#no mpls ip SUN-CE-2(config-if)#no mpls label protocol ldp SUN-CE-2(config-if)#int serial 4/0/0:0 SUN-CE-2(config-if)#ip add 172.16.16.66 255.255.255.252 SUN-CE-2(config-if)#end SUN-CE-2#write memory Building configuration... [OK] SUN-CE-2# Configuring BGP 50 & creating loopback 1 interface:- SUN-CE-2# conf t Enter configuration commands, one per line. End with CNTL/Z. SUN-CE-2(config)#interface loopback 1 SUN-CE-2(config-if)#ip address 20.50.0.1 255.255.0.0 SUN-CE-2(config-if)#no shutdown SUN-CE-2(config-if)#exit SUN-CE-2(config)#router bgp 50 SUN-CE-2(config-router)#no synchronization SUN-CE-2(config-router)#no auto-summary SUN-CE-2(config-router)#neighbour 172.16.16.29 remote-as 9829 SUN-CE-2(config-router)#network 10.20.0.0 mask 255.255.0.0 SUN-CE-2(config-router)#end JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 99 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default SUN-PE#write memory Building configuration... [OK] SUN-CE-2# Verification commands:- Eg. For PUNE-PE router PUNE-PE#show ip vrf PUNE-PE#show ip vrf detail PUNE-PE#show ip vrf interfaces PUNE-PE#show ip protocols vrf ibm PUNE-PE#show ip route vrf ibm PUNE-PE#show ip bgp vpnv4 vrf ibm PUNE-PE#show ip bgp vpnv4 vrf ibm neighbors PUNE-PE#show ip bgp vpnv4 all summary PUNE-PE#show ip bgp neighbors PUNE-PE#show mpls forwarding vrf ibm PUNE-PE#show ip cef vrf ibm PUNE-PE#ping vrf ibm 10.20.0.1 PUNE-PE#trace vrf ibm 10.20.0.1 PUNE-PE#telnet 10.20.0.1 /vrf ibm JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 100 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default 7.11 MPLS-VPN Configuration (MPLS based L3 VPN using MP-BGP/ OSPF Lab) Delhi-P: Note: No configuration needed in P-router Mumbai-P: Note: No configuration needed in P-router PUNE-PE: Configuring OSPF Process 10 for CE-PE link:- PUNE-PE# conf t Enter configuration commands, one per line. End with CNTL/Z. PUNE-PE(config)#router ospf 10 vrf ibm PUNE-PE(config-router)#auto-cost reference-bandwidth 1000 PUNE-PE(config-router)#network 172.16.16.68 0.0.0.3 area 0 PUNE-PE(config-router)#redistribute bgp 9829 subnets PUNE-PE(config-router)#exit PUNE-PE(config)# Configuring OSPF Process 40 for CE-PE link:- PUNE-PE(config)#router ospf 40 vrf sun PUNE-PE(config-router)#auto-cost reference-bandwidth 1000 PUNE-PE(config-router)#network 172.16.16.4 0.0.0.3 area 0 PUNE-PE(config-router)#redistribute bgp 9829 subnets PUNE-PE(config-router)#exit PUNE-PE(config)# Modifying the MP-BGP configuration:- PUNE-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. PUNE-PE(config)#router bgp 9829 PUNE-PE(config-router)#address-family ipv4 vrf ibm PUNE-PE(config-router-af)#no neighbor 172.16.16.70 remote-as 10 PUNE-PE(config-router-af)#no neighbor 172.16.16.70 next-hop-self PUNE-PE(config-router-af)#redistribute ospf 10 match internal external 1 external 2 PUNE-PE(config-router-af)#exit-address-family PUNE-PE(config-router)#address-family ipv4 vrf sun PUNE-PE(config-router-af)#no neighbor 172.16.16.6 remote-as 40 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 101 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default PUNE-PE(config-router-af)#no neighbor 172.16.16.6 next-hop-self PUNE-PE(config-router-af)#redistribute ospf 40 match internal external 1 external 2 PUNE-PE(config-router-af)#exit-address-family PUNE-PE(config-router)#end PUNE-PE#wr 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] PUNE-PE# KOLKATA-PE: Configuring OSPF Process 20 for CE-PE link:- KOLKATA-PE# conf t Enter configuration commands, one per line. End with CNTL/Z. KOLKATA-PE(config)#router ospf 20 vrf ibm KOLKATA-PE(config-router)#auto-cost reference-bandwidth 1000 KOLKATA-PE(config-router)#network 172.16.16.12 0.0.0.3 area 0 KOLKATA-PE(config-router)#redistribute bgp 9829 subnets KOLKATA-PE(config-router)#exit KOLKATA-PE(config)# Configuring OSPF Process 50 for CE-PE link:- KOLKATA-PE(config)#router ospf 50 vrf sun KOLKATA-PE(config-router)#auto-cost reference-bandwidth 1000 KOLKATA-PE(config-router)#network 172.16.16.64 0.0.0.3 area 0 KOLKATA-PE(config-router)#redistribute bgp 9829 subnets KOLKATA-PE(config-router)#exit KOLKATA-PE(config)# Modifying the MP-BGP configuration:- KOLKATA-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. KOLKATA-PE(config)#router bgp 9829 KOLKATA-PE(config-router)#address-family ipv4 vrf ibm KOLKATA-PE(config-router-af)#no neighbor 172.16.16.13 remote-as 20 KOLKATA-PE(config-router-af)#no neighbor 172.16.16.13 next-hop-self KOLKATA-PE(config-router-af)#redistribute ospf 20 match internal external 1 external 2 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 102 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default KOLKATA-PE(config-router-af)#exit-address-family KOLKATA-PE(config-router)#address-family ipv4 vrf sun KOLKATA-PE(config-router-af)#no neighbor 172.16.16.18 remote-as 50 KOLKATA-PE(config-router-af)#no neighbor 172.16.16.18 next-hop-self KOLKATA-PE(config-router-af)#redistribute ospf 50 match internal external 1 external 2 KOLKATA-PE(config-router-af)#exit-address-family KOLKATA-PE(config-router)#end KOLKATA-PE#wr 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] KOLKATA-PE# CHENNAI-PE: Configuring OSPF Process 30 for CE-PE link:- CHENNAI-PE# conf t Enter configuration commands, one per line. End with CNTL/Z. CHENNAI-PE(config)#router ospf 30 vrf ibm CHENNAI-PE(config-router)#auto-cost reference-bandwidth 1000 CHENNAI-PE(config-router)#network 172.16.16.64 0.0.0.3 area 0 CHENNAI-PE(config-router)#redistribute bgp 9829 subnets CHENNAI-PE(config-router)#exit CHENNAI-PE(config)# Modifying the MP-BGP configuration:- CHENNAI-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. CHENNAI-PE(config)#router bgp 9829 CHENNAI-PE(config-router)#address-family ipv4 vrf ibm CHENNAI-PE(config-router-af)#no neighbor 172.16.16.66 remote-as 30 CHENNAI-PE(config-router-af)#no neighbor 172.16.16.66 next-hop-self CHENNAI-PE(config-router-af)#redistribute ospf 30 match internal external 1 external 2 CHENNAI-PE(config-router-af)#exit-address-family CHENNAI-PE(config-router)#end CHENNAI-PE#wr JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 103 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] CHENNAI-PE# 7.12 IBM-CE-1 : OSPF configuration:- Removing BGP 10 and configuring OSPF 10:- IBM-CE-1# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-1(config)#no router bgp 10 IBM-CE-1(config)#router ospf 10 IBM-CE-1(config-router)#auto-cost reference-bandwidth 1000 IBM-CE-1(config-router)#network 172.16.16.68 0.0.0.3 area 0 IBM-CE-1(config-router)#network 10.10.0.0 0.0.255.255 area 0 IBM-CE-1(config-router)#passive-interface loopback 1 IBM-CE-1(config-router)#end IBM-CE-1#write memory Building configuration... [OK] IBM-CE-1#clear ip ospf 10 process Reset OSPF process? [no]: y IBM-CE-1# 7.13 IBM-CE-2 : OSPF configuration:- Removing BGP 20 and configuring OSPF 20:- IBM-CE-2# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-2(config)#no router bgp 20 IBM-CE-2(config)#router ospf 20 IBM-CE-2(config-router)#auto-cost reference-bandwidth 1000 IBM-CE-2(config-router)#network 172.16.16.12 0.0.0.3 area 0 IBM-CE-2(config-router)#network 10.20.0.0 0.0.255.255 area 0 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 104 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default IBM-CE-2(config-router)#passive-interface loopback 1 IBM-CE-2(config-router)#end IBM-CE-2#write memory Building configuration... [OK] IBM-CE-2#clear ip ospf 20 process Reset OSPF process? [no]: y IBM-CE-2# 7.14 IBM-CE-3 : OSPF configuration:- Removing BGP 30 and configuring OSPF 30:- IBM-CE-3# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-3(config)#no router bgp 30 IBM-CE-3(config)#router ospf 30 IBM-CE-3(config-router)#auto-cost reference-bandwidth 1000 IBM-CE-3(config-router)#network 172.16.16.64 0.0.0.3 area 0 IBM-CE-3(config-router)#network 10.30.0.0 0.0.255.255 area 0 IBM-CE-3(config-router)#passive-interface loopback 1 IBM-CE-3(config-router)#end IBM-CE-3#write memory Building configuration... [OK] IBM-CE-2#clear ip ospf 30 process Reset OSPF process? [no]: y IBM-CE-2# 7.15 SUN-CE-1 : OSPF configuration:- Removing BGP 40 and configuring OSPF 40:- SUN-CE-1# conf t Enter configuration commands, one per line. End with CNTL/Z. SUN-CE-1(config)#no router bgp 40 SUN-CE-1(config)#router ospf 40 JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 105 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default SUN-CE-1(config-router)#auto-cost reference-bandwidth 1000 SUN-CE-1(config-router)#network 172.16.16.4 0.0.0.3 area 0 SUN-CE-1(config-router)#network 20.40.0.0 0.0.255.255 area 0 SUN-CE-1(config-router)#passive-interface loopback 1 SUN-CE-1(config-router)#end SUN-CE-1#write memory Building configuration... [OK] SUN-CE-1#clear ip ospf 2100 process Reset OSPF process? [no]: y SUN-CE-1# 7.16 SUN-CE-2 : OSPF configuration:- Removing BGP 50 and configuring OSPF 50:- SUN-CE-2# conf t Enter configuration commands, one per line. End with CNTL/Z. SUN-CE-2(config)#no router bgp 50 SUN-CE-2(config)#router ospf 50 SUN-CE-2(config-router)#auto-cost reference-bandwidth 1000 SUN-CE-2(config-router)#network 172.16.16.16 0.0.0.3 area 0 SUN-CE-2(config-router)#network 20.50.0.0 0.0.255.255 area 0 SUN-CE-2(config-router)#passive-interface loopback 1 SUN-CE-2(config-router)#end SUN-CE-2#write memory Building configuration... [OK] SUN-CE-2# SUN-CE-2#clear ip ospf 50 process Reset OSPF process? [no]: y SUN-CE-2# 7.17 MPLS-VPN configuration (MPLS based L3 VPN using MP-BGP/ Static Lab) Delhi-P: Note: No configuration needed in P-router JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 106 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default Mumbai-P: Note: No configuration needed in P-router PUNE-PE: Removing OSPF Process & configuring Static Route:- PUNE-PE (config)#no router ospf 10 vrf ibm PUNE-PE (config)#no router ospf 40 vrf sun PUNE-PE (config)#ip route vrf ibm 10.10.0.0 255.255.0.0 172.16.16.70 PUNE-PE (config)#ip route vrf sun 20.40.0.0 255.255.0.0 172.16.16.6 PUNE-PE (config)# Modifying the MP-BGP configuration:- PUNE-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. PUNE-PE(config)#router bgp 9829 PUNE-PE(config-router)#address-family ipv4 vrf ibm PUNE-PE(config-router-af)#network 10.10.0.0 mask 255.255.0.0 PUNE-PE(config-router-af)#network 172.16.16.68 mask 255.255.255.252 PUNE-PE(config-router-af)#no redistribute ospf 10 match internal external 1 external 2 PUNE-PE(config-router-af)#exit-address-family PUNE-PE(config-router)#address-family ipv4 vrf sun PUNE-PE(config-router-af)#network 20.40.0.0 mask 255.255.0.0 PUNE-PE(config-router-af)#network 172.16.16.4 mask 255.255.255.252 PUNE-PE(config-router-af)#no redistribute ospf 40 match internal external 1 external 2 PUNE-PE(config-router-af)#exit-address-family PUNE-PE(config-router)#end PUNE-PE#wr 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] PUNE-PE# KOLKATA-PE: JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 107 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default Removing OSPF Process & configuring Static Route:- KOLKATA-PE (config)#no router ospf 20 vrf ibm KOLKATA-PE (config)#no router ospf 50 vrf sun KOLKATA-PE (config)#ip route vrf ibm 10.20.0.0 255.255.0.0 172.16.16.13 KOLKATA-PE (config)#ip route vrf sun 20.40.0.0 255.255.0.0 172.16.16.18 KOLKATA-PE (config)# Modifying the MP-BGP configuration:- KOLKATA-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. KOLKATA-PE(config)#router bgp 9829 KOLKATA-PE(config-router)#address-family ipv4 vrf ibm KOLKATA-PE(config-router-af)#network 10.20.0.0 mask 255.255.0.0 KOLKATA-PE(config-router-af)#network 172.16.16.12 mask 255.255.255.252 KOLKATA-PE(config-router-af)#no redistribute ospf 10 match internal external 1 external 2 KOLKATA-PE(config-router-af)#exit-address-family KOLKATA-PE(config-router)#address-family ipv4 vrf sun KOLKATA-PE(config-router-af)#network 20.50.0.0 mask 255.255.0.0 KOLKATA-PE(config-router-af)#network 172.16.16.16 mask 255.255.255.252 KOLKATA-PE(config-router-af)#no redistribute ospf 40 match internal external 1 external 2 KOLKATA-PE(config-router-af)#exit-address-family KOLKATA-PE(config-router)#end KOLKATA-PE#wr 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] KOLKATA-PE# PUNE-PE: Removing OSPF Process & configuring Static Route:- PUNE-PE (config)#no router ospf 30 vrf ibm JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 108 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default PUNE-PE (config)#ip route vrf ibm 10.30.0.0 255.255.0.0 172.16.16.66 PUNE-PE (config)# Modifying the MP-BGP configuration:- PUNE-PE#conf t Enter configuration commands, one per line. End with CNTL/Z. PUNE-PE(config)#router bgp 9829 PUNE-PE(config-router)#address-family ipv4 vrf ibm PUNE-PE(config-router-af)#network 10.30.0.0 mask 255.255.0.0 PUNE-PE(config-router-af)#network 172.16.16.64 mask 255.255.255.252 PUNE-PE(config-router-af)#no redistribute ospf 30 match internal external 1 external 2 PUNE-PE(config-router-af)#exit-address-family PUNE-PE(config-router)#end PUNE-PE#wr 04:49:30: %SYS-5-CONFIG_I: Configured from console by console Building configuration... [OK] PUNE-PE# IBM-CE-1 : Removing OSPF & Configuring Default route:- IBM-CE-1# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-1(config)#no router ospf 10 IBM-CE-1(config)#ip route 0.0.0.0 0.0.0.0 se 4/0/0:0 IBM-CE-1(config)#end IBM-CE-1#write memory Building configuration... [OK] IBM-CE-1# IBM-CE-2 : Removing OSPF & Configuring Default route:- JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 109 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default IBM-CE-2# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-2(config)#no router ospf 20 IBM-CE-2(config)# ip route 0.0.0.0 0.0.0.0 pos 3/1 IBM-CE-2(config)#end IBM-CE-2#write memory Building configuration... [OK] IBM-CE-2# IBM-CE-3 : Removing OSPF & Configuring Default route:- IBM-CE-3# conf t Enter configuration commands, one per line. End with CNTL/Z. IBM-CE-3(config)#no router ospf 30 IBM-CE-3(config)# ip route 0.0.0.0 0.0.0.0 Serial 4/0/0:0 IBM-CE-3(config)#end IBM-CE-3#write memory Building configuration... [OK] IBM-CE-2# SUN-CE-1 : Removing OSPF & Configuring Default route:- SUN-CE-1# conf t Enter configuration commands, one per line. End with CNTL/Z. SUN-CE-1(config)#no router ospf 40 SUN-CE-1(config)# ip route 0.0.0.0 0.0.0.0 pos 3/1 SUN-CE-1(config)#end SUN-CE-1#write memory Building configuration... [OK] SUN-CE-1# JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 110 of 174 For Restricted Circulation JTO Phase II Data Network & IT Configuration using MP-iBGP/eBGP, MP- iBGP/OSPF & MP-iBGP/Static/Default SUN-CE-2 : Removing OSPF & Configuring Default route:- SUN-CE-2# conf t Enter configuration commands, one per line. End with CNTL/Z. SUN-CE-2(config)#no router ospf 50 SUN-CE-2(config)# ip route 0.0.0.0 0.0.0.0 pos 3/1 SUN-CE-2(config)#end SUN-CE-2#write memory Building configuration... [OK] SUN-CE-2# 7.18 Conclusion The Multi Protocol–internal Border Gateway Protocol used in configuration MPLS Layer 3 VPNs is the only protocol which can handle the huge traffic of the routing updates learnt by Autonomous System Boundary router (ASBR) from other Autonomous Systems connected with them. The ASBRs of same Autonomous System exchange global internet routing updates among themselves by running MP-iBGP directly between them without overloading other internal routers of that Autonomous System. Though OSPF is running as interior gateway routing protocol (IGP) within Autonomous System, but it cannot handle such a huge traffic, hence MP-IBGP is used instead. JTO Phase II (DNIT) Version 1.0 Sep 2021 Page 111 of 174 For Restricted Circulation