Cisco NCS 540 Series User manual

L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR
Release 6.3.x
First Published: 2018-03-30
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com
go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
other company. (1721R)
©2018 Cisco Systems, Inc. All rights reserved.

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What's New in Cisco Product
Documentation.
To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the . RSS feeds are a free service.
©2018 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface ix
PREFACE
Changes to this Document ix
Obtaining Documentation and Submitting a Service Request ix
MPLS L3VPN Overview 1
CHAPTER 1
How MPLS L3VPN Works 2
Major Components of MPLS L3VPN 2
Restrictions for MPLS L3VPN 3
Inter-AS Support for L3VPN 3
Inter-AS Support: Overview 3
Inter-AS and ASBRs 4
Confederations 5
MPLS VPN Inter-AS BGP Label Distribution 6
Exchanging IPv4 Routes with MPLS labels 7
How to Implement MPLS Layer 3 VPNs 8
Prerequisites for Implementing MPLS L3VPN 9
Configure the Core Network 9
Assess the Needs of MPLS VPN Customers 9
Configure Routing Protocols in the Core 10
Configure MPLS in the Core 11
Determine if FIB is Enabled in the Core 12
Configure Multiprotocol BGP on the PE Routers and Route Reflectors 12
Connect MPLS VPN Customers 15
Define VRFs on PE Routers to Enable Customer Connectivity 16
Configure VRF Interfaces on PE Routers for Each VPN Customer 17
Configure Routing Protocol Between the PE and CE Routers 18
L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x
v

Verify MPLS L3VPN Configuration 25
Verify the L3VPN Traffic Flow 25
Verify the Underlay (transport) 26
Verify the Overlay (L3VPN) 28
Providing VPN Connectivity Across Multiple Autonomous Systems with MPLS VPN Inter-AS with
ASBRs Exchanging IPv4 Routes and MPLS Labels 30
Concept 30
Configuring ASBRs to Exchange IPv4 Routes and MPLS Labels 30
Configuring the Route Reflectors to Exchange VPN-IPv4 Routes 32
Configure the Route Reflectors to Reflect Remote Routes in its AS 34
Providing VPN Connectivity Across Multiple Autonomous Systems with MPLS VPN Inter-AS with
ASBRs Exchanging VPN-IPv4 Addresses 35
Configuring the ASBRs to Exchange VPN-IPv4 Addresses for IP Tunnels 35
Configuring a Static Route to an ASBR Peer 38
Configuring EBGP Routing to Exchange VPN Routes Between Subautonomous Systems in a
Confederation 39
Configuring MPLS Forwarding for ASBR Confederations 41
Configuring a Static Route to an ASBR Confederation Peer 42
VRF-lite 43
Configure VRF-lite 43
MPLS L3VPN Services using Segment Routing 47
Configure MPLS L3VPN over Segment Routing 47
Configure Segment Routing in MPLS Core 48
Verify MPLS L3VPN Configuration over Segment Routing 51
Implementing MPLS L3VPNs - References 52
MPLS L3VPN Benefits 52
Major Components of MPLS L3VPN—Details 52
Virtual Routing and Forwarding Tables 52
VPN Routing Information: Distribution 53
BGP Distribution of VPN Routing Information 53
MPLS Forwarding 53
Automatic Route Distinguisher Assignment 54
Implementing IPv6 VPN Provider Edge Transport over MPLS 55
CHAPTER 2
L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x
vi
Contents

Overview of 6PE/VPE 55
Benefits of 6PE/VPE 56
Deploying IPv6 over MPLS Backbones 56
IPv6 on the Provider Edge and Customer Edge Routers 56
OSPFv3 6VPE 57
Configuring 6PE/VPE 58
Configuring OSPFv3 as the Routing Protocol Between the PE and CE Routers 60
L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x
vii
Contents

L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x
viii
Contents

Preface
This preface contains these sections:
•Changes to this Document, on page ix
•Obtaining Documentation and Submitting a Service Request, on page ix
Changes to this Document
Table 1: Changes to this Document
SummaryDate
Initial release of this document.March 2018
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service
request, and gathering additional information, see What's New in Cisco Product Documentation.
To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the . RSS
feeds are a free service.
L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x
ix

L3VPN Configuration Guide for Cisco NCS 540 Series Routers, IOS XR Release 6.3.x
x
Preface
Obtaining Documentation and Submitting a Service Request