H3C S9500 Series User manual

H3C S9500 Series Routing Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: T2-08165E-20081225-C-1.24
Product Version: S9500-CMW310-R1648

Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
Technical Support
[e-mail]
http://www.h3c.com

About This Manual
Organization
H3C S9500 Series Routing Switches Configuration Manual is organized as follows:
Part Contents
00 Product Overview includes Obtaining the Documentation, Product
Features, and Features.
01 Access Volume
includes Ethernet Port Configuration, POS Port
Configuration, Link Aggregation Configuration, Port
Isolation Configuration, VLAN Configuration, MAC
Address Table Management Configuration, GVRP
Configuration, QinQ Configuration, Ethernet Port
Loopback Detection Configuration, DLDP Configuration,
Ethernet OAM Configuration, Smart Link and Monitor
Link Configuration, MSTP Configuration, BPDU Tunnel
Configuration, HVRP Configuration, RRPP
Configuration and RPR Configuration.
02 IP Services Volume
includes ARP Configuration, IP Address Configuration,
VRRP Configuration, DHCP Configuration, DNS
Configuration, UDP Helper Configuration, NAT
Configuration, IP Performance Configuration and URPF
Configuration.
03 IP Routing Volume
includes IP Routing Protocol Overview, Static Route
Configuration, RIP Configuration, OSPF Configuration,
ISIS Configuration, BGP Configuration, IP Route Policy
Configuration, Route Capacity Configuration and
Recursive Routing Configuration.
04 IP Multicast Volume
includes Multicast Overview, Common Multicast
Configuration, IGMP Snooping Configuration, IGMP
Configuration, PIM Configuration, Multicast VLAN
Configuration, MSDP Configuration and MBGP
Configuration.
05 MPLS VPN Volume
includes MPLS Configuration, MPLS VLL Configuration,
MPLS VPLS Configuration, MPLS L3VPN Configuration,
MPLS OAM Configuration and MPLS Hybrid Insertion
Configuration.
06 QoS ACL Volume includes QoS Configuration and ACL Configuration.
07 Security Volume
includes Protocol Port Security Configuration, 802.1X
Configuration , AAA RADIUS HWTACACS
Configuration ,Password Control Configuration, SSH
Configuration, IDS Linkage Configuration, Portal
Configuration, VBAS Configuration and Traffic
Accounting Configuration.

Part Contents
08 System Volume
includes Command Line Interface Configuration, Login
and User Interface Configuration, FTP and TFTP
Configuration, HA Configuration, NQA Configuration,
NetStream Configuration, NTP Configuration, RMON
Configuration, SNMP Configuration, Packet Statistics
Accounting Configuration, Device Management
Configuration, Configuration File Management
Configuration, File System Management Configuration,
Cluster Management Configuration, System
Maintenance and Debugging Configuration, Information
Center Configuration, PoE Configuration, Clock Module
Configuration, ACSEI Server Configuration and OAP
Module Configuration.
09 Acronyms Offers the acronyms used in this manual.
Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.

II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
<OK>.
[ ] Window names, menu items, data table and field names are inside square brackets. For example, pop up the [New
User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].
III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.
Related Documentation
In addition to this manual, each H3C S9500 Series Routing Switches documentation
set includes the following:
Manual Description
H3C S9500 Series Routing Switches
Installation Manual
It introduces the installation procedure,
commissioning, maintenance and
monitoring of the S9500 series routing
switches.
H3C S9500 Series Routing Switches
Command Manual
It includes Feature List and Command
Index, Access Volume, IP Service
Volume, IP Routing Volume, IP Multicast
Volume, MPLS VPN Volume, QoS ACL
Volume, Security Volume, and System
Volume.
Obtaining Documentation
You can access the most up-to-date H3C product documentation on the World Wide
Web at this URL: http://www.h3c.com.
The following are the columns from which you can obtain different categories of product

documentation:
[Products & Solutions]: Provides information about products and technologies.
[Technical Support & Document > Technical Documents]: Provides several categories
of product documentation, such as installation and operation.
[Technical Support & Document > Product Support > Software]: Provides the
documentation released with the software version.
Documentation Feedback
You can e-mail your comments about product documentation to [email protected].
We appreciate your comments.

Operation Manual
H3C S9500 Series Routing Switches MPLS VPN Volume Organization
Manual Version
T2-08165E-20081225-C-1.24
Product Version
S9500-CMW310-R1648
Organization
The MPLS VPN Volume is organized as follows:
Features
(operation
manual) Description
MPLS
MPLS (Multiprotocol Label Switching) brings together the
advantages of the connectionless control with IP and the
connection-oriented forwarding with ATM. In addition to the
support from IP routing and control protocols, its powerful
and flexible routing functions allows it to accommodate to
various emerging applications. The volume describes:
zMPLS overview
zBasic MPLS concepts
zMPLS architecture
MPLS VLL
MPLS VLL provides transparently transmission of Layer 2
data of users over an MPLS network. The volume describes:
zMPLS VLL overview
zCCC MPLS VLL configuration
zMartini MPLS VLL configuraiton
zKompella MPLS VLL configuration
MPLS VPLS
VPLS provides the operators using point-to-point L2VPN with
a better solution. The volume describes:
zVPLS overview
zVPLS basic configuration
zVPLS characteristics configuration
MPLS L3VPN
Using the MPLS technology, service providers can
implement the IP-based L3VPN services. The volume
describes:
zMPLS L3VPN overview
zMPLS L3VPN configuration
MPLS OAM
MPLS OAM is intended for the operation, administration and
maintenance on the MPLS layer. The volume describes:
zMPLS OAM overview
zMPLS OAM configuration

Operation Manual
H3C S9500 Series Routing Switches MPLS VPN Volume Organization
Features
(operation
manual) Description
MPLS Hybrid
Insertion
The MPLS hybrid insertion feature is used to enable
deployment of MPLS VPN services on cards that do not
support MPLS. The volume describes:
zMPLS hybrid insertion overview
zRestrictions on MPLS hybrid insertion networking
zMPLS hybrid insertion configuration

Operation Manual – MPLS
H3C S9500 Series Routing Switches Table of Contents
i
Table of Contents
Chapter 1 MPLS Architecture.......................................................................................................1-1
1.1 MPLS Overview.................................................................................................................1-1
1.2 MPLS Basic Concepts.......................................................................................................1-2
1.2.1 FEC.........................................................................................................................1-2
1.2.2 Label........................................................................................................................1-2
1.2.3 LDP .........................................................................................................................1-5
1.3 MPLS Architecture.............................................................................................................1-5
1.3.1 MPLS Network Structure.........................................................................................1-5
1.3.2 Forwarding Labeled Packets...................................................................................1-5
1.3.3 Establishing LSP.....................................................................................................1-6
1.3.4 LSP Tunnel and Hierarchy......................................................................................1-8
1.3.5 MPLS and Other Protocols (Routing Protocols) .....................................................1-9
1.3.6 MPLS Application (MPLS-based VPN)...................................................................1-9
Chapter 2 MPLS Basic Capability Configuration .......................................................................2-1
2.1 MPLS Basic Capability Overview ...................................................................................... 2-1
2.2 MPLS Configuration...........................................................................................................2-1
2.2.1 Defining MPLS LSR ID............................................................................................2-2
2.2.2 Enabling MPLS and Entering MPLS View..............................................................2-2
2.2.3 Configuring the Topology-Driven LSP Setup Policy ...............................................2-2
2.2.4 Configuring an LSP Setup Policy............................................................................2-3
2.2.5 Configuring Static LSP............................................................................................2-3
2.3 LDP Configuration..............................................................................................................2-4
2.3.1 Enabling LDP protocol ............................................................................................2-4
2.3.2 Enabling LDP on a VLAN interface.........................................................................2-5
2.3.3 Configuring Remote-Peer for Extended Discovery Mode.......................................2-5
2.3.4 Configuring session parameters .............................................................................2-6
2.3.5 Configuring LDP Loop Detection Control................................................................2-8
2.3.6 Configuring LDP Authentication Mode Between Every Two Switches...................2-9
2.4 Displaying and Debugging MPLS Basic Capability.........................................................2-10
2.4.1 Displaying and Debugging MPLS ......................................................................... 2-10
2.4.2 Displaying and Debugging LDP............................................................................2-11
2.5 Typical MPLS Configuration Example.............................................................................2-12
2.6 Troubleshooting MPLS Configuration..............................................................................2-15

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-1
Chapter 1 MPLS Architecture
This chapter covers the following topics:
zMPLS Overview
zMPLS Basic Concepts
zMPLS Architecture
Note:
zThe H3C S9500 Series Routing Switches (hereinafter referred to as S9500 series)
running MPLS can serve as routers. Routers mentioned in this manual can be either
a router in common sense, or a layer 3 Ethernet switch running MPLS.
zFor S9500 switches, only the interface boards with the suffixes C, CA and CB and
VPLS service processor cards support the MPLS function. To enable MPLS
function on the S9500 switches, you must select the interface cards that support
MPLS or VPLS service processor cards. The suffix of a board can be identified
through the silkscreen on the upper right corner of the front panel of the card. For
example, the silkscreen on LSB1GP12B0 card is GP12B, so the suffix of the card is
B.
1.1 MPLS Overview
MPLS (Multiprotocol Label Switching) encapsulates network layer packets with short
and fixed-length labels.As the name implies, it supports multiple protocols, such as IP,
IPv6, and IPX. And it allows a device to make forwarding decision based on the labels
attached to the received packets without going through the complex routing table
lookup procedures with IP. MPLS brings together the advantages of the connectionless
control with IP and the connection-oriented forwarding with ATM. In addition to the
support from IP routing and control protocols, its powerful and flexible routing functions
allows it to accommodate to various emerging applications.
MPLS was initially proposed to accelerate the packet forwarding on routers, but it has
been widely used in Traffic Engineering (TE), Virtual Private Network (VPN), and other
aspects, and is becoming one of the most important standards on large scale IP
networks.

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-2
1.2 MPLS Basic Concepts
1.2.1 FEC
Forwarding Equivalence Class (FEC) is an important concept in MPLS. MPLS is
actually a kind of classify-and-forward technology. It categorizes packets with the same
forwarding strategy (same destination addresses, same forwarding routes and same
QoS levels) into one class, which is called a FEC. Generally, the FEC classification is
based on network layer address. Packets of the same FEC are processed in the same
way in MPLS network.
1.2.2 Label
I. Label definition
Alabel is a locally significant short identifier with fixed length, which is used to identify a
FEC. When reaching at MPLS network ingress, packets are divided into different FECs,
based on their FECs, different labels are encapsulated into the packets. Later
forwarding is based on these labels.
II. Label structure
The structure of the label is shown in Figure 1-1.
Label Exp S TTL
Figure 1-1 Label structure
Label is located between the link layer header and the network layer packet, with the
length of four bytes. A label contains four fields:
Label: label value, 20 bits.
Exp: three bits, reserved, used for COS.
S: one bit, MPLS supports hierarchical label structure, namely multi-layer label. Value 1
refers to the label of bottom layer.
TTL: eight bits, with the same meaning as TTL in IP packet.
III. Label operations
1) Label mapping
There are two types of label mapping: label mapping at ingress routers, and label
mapping in MPLS domain.
The first type of mapping is implemented at Ingress label switching routers (LSR). The
Ingress LSRs group the incoming packets into multiple FECs based on certain
principles, and then map corresponding labels to these FECs and record the mapping

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-3
results into the label information base (LIB). In simple words, label mapping is to assign
a label to a FEC.
The second type is also called incominglabel mapping (ILM), that is, to map each input
label to a series of next hop label forwarding entries (NHLFE). The packets are
forwarded along the paths based on the mapping results.
2) Label encapsulation
Figure 1-2 illustrates label encapsulation in different media:
以太网报头/PPP报头 标签 三层数据
ATM报头 标签 三层数据
VPE/VCI 标签 三层数据
Ethernet
/SONET
/ SDH
ATM
以太网报头/PPP报头 标签 三层数据
ATM报头 标签 三层数据
VPI/VCI 标签 三层数据
ATM packet
以太网报头/PPP报头
ATM报头 标签 三层数据
VPE/VCI 标签 三层数据
/SONET
/ SDH packet
Frame mode
packet
Cell mode
Ethernet header/ PPPheader flag Layer 3 data
ATM header flag Layer 3 data
VPI/VCI flag Layer 3 data
以太网报头/PPP报头 标签 三层数据
ATM报头 标签 三层数据
VPE/VCI 标签 三层数据
Ethernet
/SONET
/ SDH
ATM
以太网报头/PPP报头 标签 三层数据
ATM报头 标签 三层数据
VPI/VCI 标签 三层数据
ATM packet
以太网报头/PPP报头
ATM报头 标签 三层数据
VPE/VCI 标签 三层数据
/SONET
/ SDH packet
Frame mode
packet
Cell mode
Ethernet header/ PPPheader flag Layer 3 data
ATM header flag Layer 3 data
VPI/VCI flag Layer 3 data
Figure 1-2 Label position in packet
In Ethernet packets and PPPpackets, label stack lies between layer 2 header and layer
3 data, acting like a shim. In ATM cell mode packets, VPI/VCI is used as the label.
3) Label assignment and distribution
Label distribution refers to the process of creating a corresponding label switching path
(LSP) for a FEC.
In the MPLS architecture, the decision to bind a particular label to a particular FEC is
made by downstream LSR;after makingthe decision, the downstream LSR notifies the
upstream LSR. That is to say, the label is assigned by the downstream LSR, and the
assigned label is distributed from downstream to upstream.
Two label distribution modes are available in MPLS: downstream unsolicited (DU)
mode and downstream on demand (DoD) mode.
zFor a specific FEC, if LSR originates label assignment and distribution even
without receiving label request message from upstream, it is in DU mode.
zFor a specific FEC, if LSR begins label assignment and distribution only after
receiving label request message from upstream, it is in DoD mode.
The upstream and downstream which have adjacency relation in-label distribution
should reach agreement on label distribution mode.
To distribute labels to its peer, the LSR can use Label Distribution Protocol (LDP)
messages or make the labels carried on other routing protocol messages.

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-4
Note:
Upstream and downstream are just on a relative basis: For a packet forwarding process,
the transmit router serves as upstream LSR and receive router serves as downstream
LSR. Currently, the S9500 series adopt the DU label distribution mode.
4) Label assignment control mode
There are two modes to control the assignment and distribution of labels: independent
mode and ordered mode.
In independent control mode, each LSR can send label mapping messages to the
LSRs it connects to at anytime.
In ordered control mode, a LSR can send label mapping messages to upstream only
when it receives a specific label mapping messages of the next hop of a FEC or the
LSR serves as LSP (Label Switching Path) egress node.
Note:
Currently, the S9500 series adopt the ordered label control mode.
5) Label retention mode
There are two label-retention modes: liberal label retention mode and conservative
label retention mode.
Suppose there are two LSRs: Ru and Rd. For a specific FEC, if LSR Ru has received
the label binding from LSR Rd, in case Rd is not the next hop of Ru and Ru saves this
binding, then it is the liberal label retention.And if Ru discards this binding, then it is the
conservative label retention mode.
In case it is required that LSR is capable of adapting route variation rapidly, you can use
the liberal label retention mode. In case it is required that a few labels are saved in LSR,
you can use the conservative label retention mode.
Note:
Currently, the S9500 series adopt the liberal label retention mode.

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-5
1.2.3 LDP
Label distribution protocol (LDP) is the signaling control protocol in MPLS, which
controls binding labels and FECs between LSRs and coordinates a series of
procedures between LSRs.
1.3 MPLS Architecture
1.3.1 MPLS Network Structure
The basic composing unit of MPLS network is LSR (Label Switching Router). It runs
MPLS control protocol and L3 routing protocol, exchanges routing messages with other
LSRs and create the routing table, maps FECs with IP packet headers, binds FECs with
labels, distributes label binding messages, establishes and maintains label forwarding
table.
The network consisting of LSRs is called MPLS domain. The LSR that is located at the
edge of the domain is called edge LSR (LER, Labeled Edge Router). It connects an
MPLS domain with a non-MPLS domain or with another MPLS domain, classifies
packets, distributes labels (as ingress LER) and distracts labels (as egress LER). The
ingress LER is termed as ingress and egress LER as egress.
The LSR that is located inside the domain is called core LSR, which provides functions
such as label swapping and label distribution. The labeled packets are transmitted
along the LSP (Label Switched Path) composed of a series of LSRs.
Figure 1-3 MPLS basic principle
1.3.2 Forwarding Labeled Packets
At the ingress, the packets entering the network are classified into FECs according to
their characteristics. Usually, packets are classified into FECs according to the IP
address prefix or host address. Packets in the same FEC pass through the same path
(that is, LSP) in MPLS area. LSR assigns a short label of fixed length for the incoming
FEC packet, and then forwards it through the corresponding interface.

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-6
On the LSR along the LSP, the mapping table of the import/export labels has been
established (the element of this table is referred to as Next Hop Label Forwarding Entry
(NHLFE)). When the labeled packet arrives, LSR only needs to find the corresponding
NHLFE from the table according to the label and replace the original label with a new
one, and then forwards the labeled packet. This process is called Incoming Label Map
(ILM).
At the ingress, MPLS specifies a FEC for a specific packet, and the following routers
only need to forward the packet by label switching, therefore this method is much
simpler than general network layer forwarding and increases the forwarding speed.
Note:
By default, if the TTL field of the outer label of an MPLS data packet is 0, the packet is
dropped. However, you can configure the router to trap such a packet to the CPU by
using the mpls settrap bad_ttl command. For details, refer to MPLS Commands.
1.3.3 Establishing LSP
Actually, the establishment of LSP refers to the process of binding FEC with the label,
and then advertising this binding to the adjacent LSR on LSP. This process is
implemented through LDP, which regulates the message in interactive processing and
message structure between LSRs as well as routing mode.
I. LDP working process
Through sending Hello message periodically, an LSR finds its neighbor and then
establish LDP session with the newly discovered adjacent LSR. By LDP session, the
adjacent LSRs advertise such information as label switching mode, label space,
session Keepalive timer value to each other. LDP session is a TCP connection, which
needs to be maintained through LDP message. In case there is not any other LDP
message during the time period specified by the session Keepalive timer value, and
then it is necessary to send session Keepalive message to maintain the existence of
LDP session. Figure 1-4 illustrates the diagram of LDP label distribution.

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-7
Figure 1-4 Label distribution process
For the label distribution mentioned previously, there are two modes: DoD and DU. The
main difference between these two modes is that the label mapping messages are
distributed actively or passively.
In DoD mode, the label is distributed in this way: the upstream LSR sends label request
message (containing FEC descriptive information) to the downstream LSR, and the
downstream LSR distributes label for this FEC, and then it sends the bound label back
to the upstream LSR through label map message. The time when the downstream LSR
feeds back the label map message depends on whether this LSR uses independent
label control mode or sequential label control mode. When the sequential label control
mode is used by the downstream LSR, the label map message is sent back to its
upstream LSR if only it has received the label map message from its downstream LSR.
And when the independent label control mode is used by the downstream LSR, then it
will send label map message to its upstream LSR immediately, no matter whether it has
received the returned label map message from its downstream LSR. Usually, the
upstream LSR selects the downstream LSR according to the information in its routing
table. In Figure 1-4, LSRs on the way along LSP1 use the sequential label control mode,
and the LSR F on LSP2 uses independent label control mode.
In DU mode, the label is distributed in the following way: when LDP session is
established successfully, the downstream LSR will actively distribute label map
message to its upstream LSR.And the upstream LSR saves the label map information
and processes the received label map information according to the routing table.
II. LSP loop control
While establishing LSP in MPLS domain, it is also necessary to prevent the presence of
path loop. Then, such two methods as maximum hop count and path vector can be
used.
The maximum hop count method refers to that the hop-count information is contained
in the message bound with the forwardinglabel, and the value pluses one for each hop.

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-8
When the value exceeds the threshold value, it is considered that a loop presents, and
the process for establishing LSP is terminated.
The path vector method refers to that the path information is recorded in the message
bound with the forwarding label, and, for every hop, the corresponding router checks if
its ID is contained in this record. If not, the router adds its ID into the record; and if yes,
it indicates that a loop presents and the process for establishing LSP is terminated.
1.3.4 LSP Tunnel and Hierarchy
I. LSP tunnel
MPLS supports LSPtunnel technology. On an LSP path, LSR Ru and LSR Rd are both
the upstream and the downstream for each other. However, the path between LSR Ru
and LSR Rd may not be part of the path provided by routing protocol. MPLS allows
establishing a new LSPpath <Ru R1...Rn Rd> between LSR Ru and LSR Rd, and LSR
Ru and LSR Rd are respectively the starting point and ending point of this LSP. The
LSP between LSR Ru and LSR Rd is referred to as the LSP tunnel, which avoids the
traditional encapsulated tunnel on the network layer. If the route along which the tunnel
passes and the route obtained hop by hop from routing protocol is consistent, this
tunnel is called hop-by-hop routing tunnel. And if the two routes are not consistent, then
the tunnel of this type is called explicit routing tunnel.
R1 R2 R3 R4
R21 R22
Layer 1
Layer 2
R1 R2 R3 R4
R21 R22
R1 R2 R3 R4
R21 R22
Layer 1
Layer 2
Figure 1-5 LSP tunnel
As shown in Figure 1-5, LSP <R2 R21 R22 R3> is a tunnel between R2 and R3.
II. Multi-layer label stack
In MPLS, a packet may carry multiple labels which are in the form of stack. Operations
to the stack follow the “last in first out” principle and it is always the labels at the top of
the stack thatdecide how to forward packets. Pushing label indicates to add a label into
a outgoing packet, then the depth of the label stack is the former one plus 1, and the
current label of the packet changes to the newly added one;popping a label indicates to
remove a label form a packet, then the depth of the packet is the former one minus 1,
and the current label of the packet changes to the label of its underlayer.
Multiple-layer label stack is used in LSP tunnel. When a packet travels in LSP tunnel,
there will be multiple layers for the label of the packet. Then, at the ingress and egress
of each tunnel, it is necessary to implement pushingand popping operation for the label
stack. For each pushing operation, the label will be added with one layer. And there is
no depth limitation for the label stack from MPLS.

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-9
The labels are organized according to the principle of “last in first out” in the label stack,
and MPLS processes the labels beginning from the top of the stack.
If the depth of the label stack for a packet is m, it indicates that the label at the bottom of
that stack is level 1 label, and the label at the top of the stack is level m label.A packet
with no label can be regarded as a packet with empty label stack, that is, the depth of its
label stack is 0.
1.3.5 MPLS and Other Protocols (Routing Protocols)
When LDP establishes LSP in hop-by-hop mode, the next hop is determined by using
the information, which is usually collected by such routing protocols as IGP, BGP in
each LSR route forwarding table, on the way. However, LDP just uses the routing
information indirectly, rather than associates with various routing protocols directly.
On the other hand, although LDP is the special protocol for implementing label
distribution, it is not the sole protocol for label distribution. The existing protocols such
as BGP, RSVP, after being extended, can also support MPLS label distribution. For
some MPLS applications, it is also necessary to extend some routing protocols. For
example, the application of MPLS VPN requires extending the BGP protocol, thus the
BGP protocol can propagate VPN routing information.
1.3.6 MPLS Application (MPLS-based VPN)
To transmit data stream of private network on public network, traditional VPN uses
tunnel protocols like GRE, L2TP, and PPTP. LSP itself is a tunnel on public network, so
there are obvious advantages to implement VPN by MPLS. MPLS VPN connects the
geographically different branches of private network by using LSP, forming a united
network. MPLS VPN also supports the interconnection between different VPNs.
Figure 1-6 MPLS-Based VPN
The basic structure of MPLS-based VPN is shown in Figure 1-6. CE is the customer
edge device, and it may either be a router or a switch, or perhaps a host. PE is a service
provider edge router, which is located on the backbone network. PE is responsible for

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture
1-10
the management of VPN customers, establishing LSP connection between various
PEs, route allocation among different branches of the same VPN customer.
Usually the route allocation between PEs is implemented by using extended BGP.
MPLS VPN supports the IP address multiplexing between different branches and the
interconnection between different VPNs. Compared with traditional route, it is
necessary to add branch and VPN identifier information in VPN route. So, it is
necessary to extend BGP so as to carry VPN routing information.

Operation Manual – MPLS
H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration
2-1
Chapter 2 MPLS Basic Capability Configuration
This chapter covers the following topics:
zMPLS Basic Capability Overview
zMPLS Configuration
zLDP Configuration
zDisplaying and Debugging MPLS Basic Capability
zTypical MPLS Configuration Example
zTroubleshooting MPLS Configuration
2.1 MPLS Basic Capability Overview
Basic MPLS forwarding functions includes LDP session establishment and LSP path
maintenance.
The typical configuration procedure for enabling basic MPLS functions on a routing
switch is as follows:
1) Configure LSR ID
2) Enable MPLS
3) Enable LDP
4) Enter VLAN interface view and enable MPLS and LDP on the interface
Then the routing switch can provide MPLS forwarding and LDP signaling functions.
If you want to modify the default parameters or enable some special functions, for
example, manually creating LSP or explicit route, you can configure according to the
methods in configuration list. For some complicated functions, configuration
combination may be required.
Caution:
It is not recommended to enable MPLS or LDP on the default VLAN interface.
2.2 MPLS Configuration
The following sections describe the required configuration tasks for MPLS basic
capability:
zDefining MPLS LSR ID
zEnabling MPLS and Entering MPLS View