Zte ZXR10 5900E Series User manual

ZXR105900ESeries
Easy-MaintenanceMPLSRoutingSwitch
CongurationGuide(VPN)
Version:3.00.11
ZTECORPORATION
No.55,Hi-techRoadSouth,ShenZhen,P .R.China
Postcode:518057
Tel:[phone]
Fax:[phone]
URL:http://support.zte.com.cn
E-mail:[email protected]

LEGALINFORMATION
Copyright©2014ZTECORPORATION.
Thecontentsofthisdocumentareprotectedbycopyrightlawsandinternationaltreaties.Anyreproductionor
distributionofthisdocumentoranyportionofthisdocument,inanyformbyanymeans,withoutthepriorwritten
consentofZTECORPORATIONisprohibited.Additionally,thecontentsofthisdocumentareprotectedby
contractualcondentialityobligations.
Allcompany,brandandproductnamesaretradeorservicemarks,orregisteredtradeorservicemarks,ofZTE
CORPORATIONoroftheirrespectiveowners.
Thisdocumentisprovided“asis”,andallexpress,implied,orstatutorywarranties,representationsorconditions
aredisclaimed,includingwithoutlimitationanyimpliedwarrantyofmerchantability,tnessforaparticularpurpose,
titleornon-infringement.ZTECORPORATIONanditslicensorsshallnotbeliablefordamagesresultingfromthe
useoforrelianceontheinformationcontainedherein.
ZTECORPORATIONoritslicensorsmayhavecurrentorpendingintellectualpropertyrightsorapplications
coveringthesubjectmatterofthisdocument.ExceptasexpresslyprovidedinanywrittenlicensebetweenZTE
CORPORATIONanditslicensee,theuserofthisdocumentshallnotacquireanylicensetothesubjectmatter
herein.
ZTECORPORATIONreservestherighttoupgradeormaketechnicalchangetothisproductwithoutfurthernotice.
UsersmayvisittheZTEtechnicalsupportwebsitehttp://support.zte.com.cntoinquireforrelatedinformation.
TheultimaterighttointerpretthisproductresidesinZTECORPORATION.
RevisionHistory
RevisionNo.RevisionDateRevisionReason
R1.02015–03–10Firstedition
SerialNumber:SJ-20150114102049-016
PublishingDate:2015-03-10(R1.0)
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Contents
AboutThisManual.........................................................................................I
Chapter1MPLSL3VPNConguration.....................................................1-1
1.1MPLSVPNBasicFunctionConguration.............................................................1-1
1.1.1MPLSL3VPNOverview............................................................................1-1
1.1.2ConguringMPLSL3VPN.........................................................................1-5
1.1.3MaintainingMPLSVPN..........................................................................1-17
1.1.4MPLSVPNCongurationExamples........................................................1-18
1.2MPLSVPNRouteAggregationConguration.....................................................1-35
1.2.1MPLSVPNRouteAggregationOverview.................................................1-35
1.2.2ConguringMPLSVPNRouteAggregation..............................................1-36
1.2.3MaintainingMPLSVPNRouteAggregation..............................................1-36
1.2.4MPLSVPNRouteAggregationCongurationExample.............................1-37
1.3VPNRouteRestrictionandAlarm......................................................................1-41
1.3.1VPNRouteRestrictionandAlarmOverview.............................................1-41
1.3.2ConguringVPNRouteRestrictionandAlarm..........................................1-41
1.3.3MaintainingVPNRouteRestrictionandAlarm..........................................1-41
1.3.4VPNRouteAlarmCongurationExample................................................1-43
Chapter2MPLSL2VPNConguration.....................................................2-1
2.1MPLSL2VPNBasicFunctionConguration.........................................................2-1
2.1.1MPLSL2VPNOverview............................................................................2-1
2.1.2ConguringMPLSL2VPNServices...........................................................2-3
2.1.3MaintainingMPLSL2VPNInstances.........................................................2-5
2.2VPLSBasicFunctionConguration.....................................................................2-7
2.2.1VPLSOverview........................................................................................2-7
2.2.2ConguringaVPLS..................................................................................2-9
2.2.3MaintainingVPLSInstances....................................................................2-11
2.2.4VPLSCongurationExample..................................................................2-17
2.3VPWSBasicFunctionConguration.................................................................2-20
2.3.1VPWSOverview....................................................................................2-20
2.3.2ConguringaVPWS...............................................................................2-21
2.3.3MaintainingVPWSInstances..................................................................2-23
2.3.4VPWSCongurationExample.................................................................2-28
Figures.............................................................................................................I
I
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Tables............................................................................................................III
Glossary.........................................................................................................V
II
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

AboutThisManual
Purpose
ThismanualistheZXR105900ESeries(V3.00.11)Easy-MaintenanceMPLSRouting
SwitchCongurationGuide(VPN),whichisapplicabletotheZXR105900E(V3.00.11)
seriesswitches.
IntendedAudience
Thismanualisintendedfor:
lNetworkplanningengineer
lDebuggingengineer
lAttendant
WhatIsinThisManual
Thismanualcontainsthefollowingchapters:
Chapter1,MPLSL3VPN
Conguration
ProvidestheoverviewandprinciplesofMPLSL3VPNconguration,
relatedcongurationandmaintenancecommands,andconguration
examples.
Chapter2,MPLSL2VPN
Conguration
ProvidestheoverviewandprinciplesofMPLSL2VPNconguration,
relatedcongurationandmaintenancecommands,andconguration
examples.
Conventions
Thismanualusesthefollowingtypographicalconventions:
ItalicsVariablesincommands.Itmayalsorefertootherrelatedmanualsanddocuments.
BoldMenus,menuoptions,functionnames,inputelds,optionbuttonnames,checkboxes,
drop-downlists,dialogboxnames,windownames,parameters,andcommands.
Constant
width
Textthatyoutype,programcodes,lenames,directorynames,andfunctionnames.
[]Optionalparameters.
{}Mandatoryparameters.
|Separatesindividualparameterinseriesofparameters.
Note:providesadditionalinformationaboutacertaintopic.
I
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Thispageintentionallyleftblank.
II
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Chapter1
MPLSL3VPNConguration
TableofContents
MPLSVPNBasicFunctionConguration...................................................................1-1
MPLSVPNRouteAggregationConguration...........................................................1-35
VPNRouteRestrictionandAlarm.............................................................................1-41
1.1MPLSVPNBasicFunctionConguration
1.1.1MPLSL3VPNOverview
IntroductiontoMPLSL3VPN
MPLSL3VPNisakindofInternetProtocol(IP)VirtualPrivateNetwork(VPN)basedon
MultiProtocolLabelSwitching(MPLS)technology.ItisalsocalledL3VPN,whichapplies
MPLStechnologytoroutersandswitches.MPLSVPNsimpliestherouteselectionmode
ofcoreswitches,anditrealizesIPvirtualprivatenetworkbymeansofthelabelswitching
ofconventionalroutingtechnology.
MPLSVPNcanbeusedtoconstructbroadbandIntranetandExtranet,whichcansatisfy
therequirementsofmanyservicescleverly.
MPLSVPNcanutilizethepowerfultransmissioncapabilityofapublicbackbonenetwork
toreducetheconstructioncostsoftheIntranet,andgreatlyimprovetheoperationand
managementexibilityofusernetworks.Meanwhile,itmeetstheuserrequirementsfor
datatransmissionsecurity,realtimeandbroadband,convenience.
InanIP-basednetwork,MPLShasmanyadvantages,
1.Reducecost
MPLSsimpliestheintegrationtechnologyofATMandIP .Itefcientlycombinesthe
L2andL3technologies.Therefore,thecostisreducedandtheinvestmentissaved
atearlierstages.
2.Improveresourceutilizationrate
Sincelabelswitchingisusedinnetwork,theIPaddressesusedbyusersintheirLocal
AreaNetworks(LAN)canberepeated.Inthisway,IPresourceutilizationrateis
improved.
3.Improvenetworkspeed
1-1
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

ZXR105900ESeriesCongurationGuide(VPN)
Sincelabelswitchingisused,thetimeforaddresssearchineachhopprocessis
shortened.Inthisway,thetimeofdatatransmissiontimeisreducedinnetwork,and
thenetworkspeedisimproved.
4.Improveexibilityandexpansibility
SinceMPLSusesAnyToAnyconnection,thenetworkexibilityandexpansibilityare
improved.Withrespecttotheexibility,specialcontrolpolicycanbecustomizedto
meetspecialrequirementsofdifferentuserstorealizevalue-addedservices.The
expansibilitycoversthefollowingtwopoints:
lMoreVPNsarecontainedbyanetwork.
lEasyuserexpansioninthesameVPN.
5.Convenience
MPLSiswidelyusedinoperatornetworks.Itbringmoreconveniencetoenterprise
usersestablishglobalVPN.
6.Improvetransmissionsecurity
MPLSservesasachannelmechanismtoimplementtransparentpackettransmission.
MPLSLinkStatePacket(LSP)havehighreliabilityandsecurity,similaringtoframe
relayandAsynchronousTransferMode(ATM)VirtualChannelConnection(VCC).
7.Enhanceserviceintegrationcapability
Anetworkcansupporttheservicesintegratingdata,audioandvideo.
8.MPLSQoSguarantee
TherelatedstandardsanddraftsdrawnbyIETFforBorderGatewayProtocol
(BGP)/MPLSVPN:
lRFC4364,BGP/MPLSIPVirtualPrivateNetworks
lRFC4760,MultiprotocolExtensionsforBGP-4
lRFC2547,BGP/MPLSVPN
lDraftRFC2547bis,BGP/MPLSVPN
lRequestForComments(RFC)2283,multi-protocolextensionBGP4
MPLSL3VPNRelatedTerms
ABGP/MPLSVPNnetworksystemcoversthefollowingnetworkdevices.
lPE
APEreferstoarouterconnectedtoaCEinacustomersiteinanoperatornetwork.
ThePEroutersupportsVPNandlabelingfunction(thelabelingfunctioncanbe
providedbyRSVP ,LDPorConstraintbasedRoutingLabelDistributionProtocol
(CRLDP)).
InasingleVPN,PEroutersareconnectedbytunnel.ThetunnelcanbeaMPLSLSP
tunneloraLDPtunnel.
lProvider(P)
1-2
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Chapter1MPLSL3VPNConguration
Here,"P"refersarouterinthecoreofanoperatornetwork,whichdoesnotconnect
toanyrouterinanycustomersite,butisapartofMPLSL3VPNtunnel."P"supports
MPLSLSPorLDPfunction,butitdoesnotneedtosupportVPN.
lCE
CEreferstoarouterorswitchconnectedtoanoperatornetworkinacustomersite.
Normally,IProuteractasCEdevice.
VPNfunctionisprovidedbyPErouters,whilePandCEroutersdonothavespecial
requirementsforVPNconguration.
VPN-IPv4AddressandRouteDistinguisher
SinceL3VPNmaybeconnectedtoprivatenetworksthroughInternetandtheseprivate
networkscaneitherusepublicorprivateaddresses,theaddressesusedbydifferent
privatenetworksmayberepeatedwhenprivatenetworksuseprivateaddresses.
Toavoidtherepetitionofprivateaddresses,publicaddressescanbeusedbynetwork
devicestoreplaceprivateaddresses.AsolutionisprovidedinRFC2547bisthatusesan
existentprivatenetworkIDtogenerateadenitenewaddress.
ThenewaddressisapartofVPN-IPv4addressfamily,anditalsoisaBGPaddressfamily
oftheMP-BGPprotocol.InaVPN-IPv4address,thereisavalueusedtodifferentiate
differentVPNs,calledRouteDistinguisher(RD).
TheformatofaVPN-IPv4addressisaneight-byteRDplusafour-byteIPaddress.RDis
theeight-bytevalueusedforVPNdifferentiation.AnRDconsistsofthefollowingelds:
lTypeeld(twobytes):Itdeterminesthelengthoftheotherelds.
àIfthevalueofthetypeeldis0,Administrator(ADM)eldcoverstwobytesand
theAssignmentNumber(AN)eldcoversfourbytes.
àIfthevalueofthetypeeldis1,ADMeldcoversfourbytesandtheAssignment
Number(AN)domaincoverstwobytes.
àIfthevalueofthetypeeldis2,ADMeldcoversfourbytesandtheAssignment
Number(AN)domaincoverstwobytes.
lADMeld:Itidentiesanadministrationassignmentnumber
àIfthetypedomainis0,theadministratordomaincontainsanAutonomousSystem
(AS)ID.RFC2547bisrecommendsapublicASIDallocatedbyInternetAssigned
NumbersAuthority(IANA)beused(itismuchbetterthattheASIDoftheISPor
customeritselfisused).
àIfthevalueofthetypeeldis1,ADMeldcontainsanIPv4address.RFC2547bis
recommendstouseswitchIPaddress(thisaddressisnormallyconguredas
switchID).RouterIPaddressisapublicaddress.
àIfthetypedomainis2,theadministratordomaincontainfourbytesAutonomous
SystemID.
lANeld:Thenumberassignedbyanetworkoperator
1-3
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

ZXR105900ESeriesCongurationGuide(VPN)
àIfthetypeeldis0,ANeldcoversfourbytes.
àIfthetypeeldis1,ANeldcoverstwobytes.
àIfthetypeeldis2,ANeldcoverstwobytes.
TheRDisonlyusedbetweenPEsandCEstodifferentiateIPv4addressesofdifferent
VPNs.TheingressgeneratesanRDandconvertsthereceivedIPv4routeoftheCEinto
aVPN-IPv4address.BeforeadvertisingtheroutetotheCE,theegressPEconvertsthe
VPN-IPv4routeintoanIPv4route.
MPLSVPNPrinciple
MPLSVPNadoptsL3technology.EveryVPNhasitsownVPN-ID.EveryVPNusercan
onlycommunicatewiththemembersbelongingtothesameVPN,andonlyVPNmembers
canentertheVPN.
InMPLSVPN,theserviceprovider(SP)allocatesaRDtoeveryVPN.TheRDisunique
inSPnetwork.
Forwardingtablecontainsauniqueaddress,calledVPN-IPaddress,whichisformed
throughtheconnectionoftheRDanduserIPaddress.TheVPN-IPaddressisunique
inthenetwork.Theaddresstableisstoredintheforwardingtable.
BGPisaroutinginformationdistributionprotocol,whichusesmulti-protocolextension
andcommonattributestodeneVPNconnectivity.InMPLSVPN,BGPonlyadvertises
messagestothemembersinthesameVPN,andprovidesbasicsecuritybymeansof
trafcsplit.
DataisforwardedbyusingLSP .TheLSPdenesaspecialpaththatcannotbechanged,
toguaranteethesecurity.Suchalabel-basedmodecanprovidecondentialitylikeframe
relayandATM.TheSPassociatesaspecialVPNtoaninterface,andpacketforwarding
isdecidedbyingresslabels.
VPNforwardingtablecontainsalabelthatcorrespondstotheVPN-IPaddress.Thelabel
isusedtosenddatatothecorrespondingdestination.SincethelabelreplacestheIP
address,usercankeepitsownaddressstructure.Thedatacanbetransmittedwithout
NetworkAddressTranslation(NAT).Accordingtothedataingress,thecorresponding
switchwillselectaspecialVPNforwardingtablethatonlycontainsavaliddestination
addressinVPN.RouterselectsaspeciedVPNforwardingtableaccordingtotheingress.
TheVPNforwardingtablecontainsthevaliddestinationaddressesonly.
CEadvertisesroutinginformationontheuser'snetworktothePEbymeansofstaticroute,
defaultroute,routingprotocolsRIP ,OSPF ,IS-ISorBGP .
CEsendstheroutinginformationtoPEbystaticroute,defaultrouterorroutingprotocol,
suchasRoutingInformationProtocol(RIP),OpenShortestPathFirst(OSPF)and
IntermediateSystem-to-IntermediateSystem(IS-IS).
Meanwhileextendedmulti-protocolBGPisusedbetweenPEstotransmitVPN-IP
informationandthecorrespondinglabels(VPNlabel,calledinnerlabelhereinafter).
1-4
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Chapter1MPLSL3VPNConguration
TheconventionalIGPisusedbetweenPEandPtolearntheroutinginformation,andthe
LDPisusedtobindtheroutinginformationtolabel(alabelonthebackbonenetwork,
calledouterlabelhereinafter).
Inthisway,thebasicnetworktopologyandroutinginformationamongCE,PEandPare
alreadyformed.Thus,thePEhastheroutinginformationofbackbonenetworkandevery
VPN.
WhenCEuserdatabelongingtosomeVPNentersthenetwork,thesystemcanidentifyto
whichVPNtheCEbelongsontheinterfaceofCEthatconnectstoPE,andwillfurtherread
thenext-hopaddressinformationintheroutingtableoftheVPN.Inaddition,theforwarded
packetswillbemarkedwithaVPNlabel(innerlabel).Inthiscase,theobtainednext-hop
addressistheaddressofaPEthatisthepeerofthisPE.
ToreachthedestinationPE,routinginformationofbackbonenetworkisreadfromthe
sourcePE,thustoobtaintheaddressofthenextPswitch.Meanwhile,theforwarded
userpacketsaremarkedwithabackbonenetworklabel(outerlabel).
Inbackbonenetwork,alltheProuterslocatingbehindthesourcePEreadtheouterlabel
todeterminethenexthop.Therefore,thesimplelabelswitchingisperformedinbackbone
networkonly.
WhenthepacketreachesthelastPswitchbeforearrivingatthedestinationPE,theouter
labelwillberemoved.AfterthepacketreachesthedestinationPE,thePEwillreadthe
innerlabel,ndthenext-hopCEinthecorrespondingVirtualRoutingForwarding(VRF)
andsendthepackettotherelatedinterface,andthentransmitthepackettotheCEnetwork
oftheVPN.
1.1.2ConfiguringMPLSL3VPN
CreatingVRFonPE
AVRFiscreatedforeachVPNonPE.VRFonlysavestherouteinformationrelatedto
thisVPN.VPNisindependent,whichhasitsowninterface,routingandlabeltables,route
protocolandsoon.
TocreateVRFonZXR105900E,performthefollowingsteps.
StepCommandFunction
1ZXR10(config)#ipvrf<vrf-name>ThisconguresaVPNinstance.
2ZXR10(config-vrf-vrf-name)#rd<route-distinguisher>ThisdenesVRFRD.
3ZXR10(config-vrf-vrf-name)#address-family{ipv4|ipv6}ThisactivatesIPv4orIPv6
addressfamily.
4ZXR10(config-vrf-vrf-name-af-ipv4)#route-target[
import|export|both]<extended-community>
ZXR10(config-vrf-vrf-name-af-ipv6)#route-target[
import|export|both]<extended-community>
Thiscreatesroute-target
extensioncommunityattribute
relatingtoVRF.
1-5
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

ZXR105900ESeriesCongurationGuide(VPN)
StepCommandFunction
5ZXR10(config)#interface<interface-name>Thisentersinterface
congurationmode.
6ZXR10(config-if-interface-name)#ipvrfforwarding<
vrf-name>
Thisassociatesinterfaceto
VRF.
DeletetheexistentIPaddress
oftheinterfacebeforeusing
thiscommand.
7ZXR10(config-if-interface-name)#ipaddress<
ip-address><netmask>
Thisconguresinterface
address.
Descriptionsoftheparametersusedbystep1,2,3and4areshownbelow.
ParameterDescription
<vrf-name>VRFname,1-32characters.Thenameisonlyvalidlocally,which
isusedforbindinganinterfacetotheVPN.
<route-distinguisher>VRFRD,therearethreeformats,<1-65535>:<0-4294967295>or
A.B.C.D:<0-65535>or<1-65535>.<0-65535>:<0-65535>.
{ipv4|ipv6}ActivateIPv4orIPv6addressfamily.
importImporttheroutetoVRFaccordingtoroute-targetextension
communityattribute
exportExporttheVRFroutewithroute-targetextensioncommunity
attribute
bothItisequaltoenableimportandexportatthesametime.
<extended-community>Theroute-targetextensioncommunityattribute,therearethree
formats,<1-65535>:<0-4294967295>orA.B.C.D:<0-65535>or
<1-65535>.<0-65535>:<0-65535>
ConguringStaticRouteProtocolBetweenCEandPE
InordertorunstaticrouteprotocolbetweenCEandPE,astaticroutepointingtoCEneeds
tobeconguredonPE,andthestaticrouteneedstobedistributedtoBGP .
TorunstaticrouteprotocolbetweenCEandPE,performthefollowingstepsonZXR10
5900E.
StepCommandFunction
1ZXR10(config)#iproutevrf{mng|<vrf-name>}<prefix><net-
mask>{<forwarding-router's-addres>[global]|<interface-name
>[<forwarding-router's-address>]}[<distance-metric>][metric
<metric-value>][tag<tag-value>][bfdenable][track
<track-name>][name<description-name>]
Thisconguresastaticroute
pointingtoCEonPE.
ItisrequiredtospecifyaVRFto
whichthisstaticroutebelongs.
1-6
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Chapter1MPLSL3VPNConguration
StepCommandFunction
2ZXR10(config)#routerbgp<as-number>ThisentersBGProute
congurationmode.
3ZXR10(config-bgp)#address-familyipv4vrf<vrf-name>ThisentersVRFaddressfamily
congurationmode.
4ZXR10(config-bgp-af-ipv4-vrf)#redistributestaticThisredistributesthestatic
route.
CongurationExample
AsshowninFigure1-1,runstaticroutebetweenCE1andPE1.
Figure1-1RunningStaticRouteProtocolbetweenCEandPE
CongurestaticrouteonCE1andPE1respectively.
CE1conguration,
CE1(config)#interfacevlan1
CE1(config-if-vlan1)#ipaddress10.1.0.1255.255.255.252
CE1(config-if-vlan1)#exit
CE1(config)#interfacevlan2
CE1(config-if-vlan2)#ipaddress10.1.1.254255.255.255.0
CE1(config-if-vlan2)#exit
CE1(config)#iproute10.2.0.0255.255.0.010.1.0.2
PE1conguration,
PE1(config)#iproutevrfvpn_a10.1.0.0255.255.0.010.1.0.1
PE1(config)#routerbgp100
PE1(config-bgp)#address-familyipv4vrfvpn_a
1-7
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

ZXR105900ESeriesCongurationGuide(VPN)
PE1(config-bgp-af-ipv4-vrf)#redistributestatic
PE1(config-bgp-af-ipv4-vrf)#exit
ConguringRIPProtocolBetweenCEandPE
TorunRIPbetweenCEandPE,performthefollowingstepsonZXR105900E.
StepCommandFunction
1ZXR10(config)#routerripThisentersRIPcongurationmode.
2ZXR10(config)#version2ThisconguresRIPv2.
ZXR10(config-rip)#address-familyipv4vrf<
vrf-name>
ThisentersVRFaddressfamily
congurationmode.
ZXR10(config-rip-af)#noauto-summaryThisdisablesautosummaryfunction.
ZXR10(config-rip-af)#version2ThisconguresRIPv2.
ZXR10(config-rip-af)#network
<network-number><wild-card>
Thisadvertisesdirect-connectednetwork
segmenttoRIP .
ZXR10(config-rip-af)#redistributeconnectedThisredistributesdirect-connectedroute
toRIP .
3
ZXR10(config-rip-af)#redistributebgp-intThisredistributesbgp-inttoRIP .
4ZXR10(config)#routerbgp<as-number>ThisentersBGProutecongurationmode.
ZXR10(config-bgp)#address-familyipv4vrf<
vrf-name>
ThisentersVRFaddressfamily
congurationmode.
5
ZXR10(config-bgp-af-ipv4-vrf)#redistribute
rip
ThisredistributesRIProute.
CongurationExample
AsshowninFigure1-2,runRIPbetweenCE1andPE1.
1-8
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Chapter1MPLSL3VPNConguration
Figure1-2RunningRIPbetweenCEandPE
RunRIPprotocolonCE1andPE1respectively.MakesurethatPE1andCE1can
distributeroutetoeachother.
CE1conguration,
CE1(config)#routerrip
CE1(config)#noauto-summary
CE1(config-rip)#version2
CE1(config-rip)#network10.1.0.00.0.0.3
CE1(config-rip)#redistributeconnected
CE1(config-rip)#exit
PE1conguration,
PE1(config)#routerrip
PE1(config-rip)#version2
PE1(config-rip)#address-familyipv4vrfvpn_a
PE1(config-rip-af)#noauto-summary
PE1(config-rip-af)#version2
PE1(config-rip-af)#network10.1.0.00.0.0.3
PE1(config-rip-af)#redistributebgp-int
PE1(config-rip-af)#exit
PE1(config-rip)#exit
PE1(config)#routerbgp100
PE1(config-bgp)#address-familyipv4vrfvpn_a
PE1(config-bgp-af-ipv4-vrf)#redistributerip
PE1(config-bgp-af-ipv4-vrf)#redistributeconnected
PE1(config-bgp-af-ipv4-vrf)#exit
1-9
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

ZXR105900ESeriesCongurationGuide(VPN)
ConguringOSPFbetweenCEandPE
TorunOSPFbetweenCEandPE,performthefollowingstepsonZXR105900E.
StepCommandFunction
1ZXR10(config)#routerospf<process-id>[vrf<vrf-name>]ThisentersOSPFVRF
congurationmode.
2ZXR10(config-ospf-process-id)#network<network-numb
er><wild-card>area<area-id>
Thisdesignatestheinterfaces
torunOSPFanddenes
area-IDtotheseinterfaces.
3ZXR10(config-ospf-process-id)#redistributebgp-intThisredistributesbgp-introute.
4ZXR10(config)#routerbgp<as-number>ThisentersBGProute
congurationmode.
5ZXR10(config-bgp)#address-familyipv4vrf<vrf-name>ThisentersVRFaddressfamily
congurationmode.
6ZXR10(config-bgp-af-ipv4-vrf)#redistribute{ospf-int|
ospf-ext}<process-id>
ThisredistributesOSPFroute.
CongurationExample
AsshowninFigure1-3,enabletheOSPFprotocolonbothCE1andPE1todistribute
routinginformationmutually.
Figure1-3EnablingtheOSPFProtocolonCEandPEDevices
RunthefollowingcommandsonCE1:
CE1(config)#routerospf1
CE1(config-ospf-1)#network10.1.0.00.0.0.3area0.0.0.0
CE1(config-ospf-1)#network10.1.1.00.0.0.255area0.0.0.0
1-10
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Chapter1MPLSL3VPNConguration
RunthefollowingcommandsonPE1:
PE1(config)#routerospf2vrfvpn_a
PE1(config-ospf-2)#network10.1.0.00.0.0.3area0.0.0.0
PE1(config-ospf-2)#redistributebgp-int
PE1(config-ospf-2)#exit
PE1(config)#routerbgp100
PE1(config-bgp)#address-familyipv4vrfvpn_a
PE1(config-bgp-af-ipv4-vrf)#redistributeospf-int
PE1(config-bgp-af-ipv4-vrf)#redistributeconnected
UsesimilarmethodstocongurePE2andCE2andthenverifytheconguration.
CheckingtheroutinginformationonCE1:
CE1#showipforwardingrouteospf
IPv4RoutingTable:
statuscodes:*valid,>best
DestGwInterfaceOwnerPriMetric
10.2.0.0/3010.1.0.2vlan1ospf1101
10.2.1.0/2410.1.0.2vlan2ospf1101
CE1learnstherouteofCE2throughtheOSPFprotocol.
CheckingtheroutinginformationonCE2:
CE2#showipforwardingrouteospf
IPv4RoutingTable:
statuscodes:*valid,>best
DestGwInterfaceOwnerPriMetric
10.1.0.0/3010.2.0.2vlan1ospf1101
10.1.1.0/2410.2.0.2vlan2ospf1101
CE2learnstherouteofCE1throughtheOSPFprotocol.
OnCE1,pingthelocalareanetworkwheretheCE2isconnectedto:
CE1#ping10.2.1.1
sending5,100-byteICMPechosto10.2.1.1,timeoutis2seconds.
!!!!!
Successrateis100percent(5/5),round-tripmin/avg/max=0/0/10ms.
OnCE2,pingthelocalareanetworkwheretheCE1isconnectedto:
CE2#ping10.1.1.1
sending5,100-byteICMPechosto10.1.1.1,timeoutis2seconds.
!!!!!
Successrateis100percent(5/5),round-tripmin/avg/max=0/0/10ms.
ConguringEBGPbetweenCEandPE
TocongureEBGPbetweenaCEandaPE,performthefollowingstepsonZXR105900E.
1-11
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

ZXR105900ESeriesCongurationGuide(VPN)
StepCommandFunction
1ZXR10(config)#routerbgp<as-number>ThisentersintoBGProute
congurationmode.
2ZXR10(config-bgp)#address-familyipv4vrf<vrf-name>Thisentersintothe
correspondingVRFaddress
familycongurationmode.
3ZXR10(config-bgp-af-ipv4-vrf)#neighbor<ip-address>
remote-as<as-number>
ThisconguresanEBGP
neighbororASnumberofa
neighborpeers.
CongurationExample
AsshowninFigure1-4,runEBGPbetweenCE1andPE1.
Figure1-4RunningEBGPbetweenCEandPE
CongureBGPonCE1andPE1respectively.MakesurethatCE1andPE1candistribute
routetoeachother.
CE1conguration,
CE1(config)#routerbgp65001
CE1(config-bgp)#neighbor10.1.0.2remote-as100
CE1(config-bgp)#neighbor10.1.0.2ebgp-multihop
CE1(config-bgp)#neighbor10.1.0.2activate
CE1(config-bgp)#redistributeconnected
CE1(config-bgp)#exit
PE1conguration,
PE1(config)#routerbgp100
1-12
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

Chapter1MPLSL3VPNConguration
PE1(config-bgp)#address-familyipv4vrfvpn_a
PE1(config-bgp-af-ipv4-vrf)#neighbor10.1.0.1remote-as65001
PE1(config-bgp-af-ipv4-vrf)#neighbor10.1.0.1ebgp-multihop
PE1(config-bgp-af-ipv4-vrf)#neighbor10.1.0.1activate
PE1(config-bgp-af-ipv4-vrf)#redistributeconnected
PE1(config-bgp-af-ipv4-vrf)#exit
ConguringMPBGP
T ocongureMPBGP ,performthefollowingstepsonZXR105900E.
StepCommandFunction
1ZXR10(config)#routerbgp<as-number>ThisentersBGPconguration
mode
2ZXR10(config-bgp)#neighbor<ip-address>remote-as
<as-number>
ThisconguresBGPneighbor.
3ZXR10(config-bgp)#neighbor<ip-address>update-source
loopback<number>
Thisspeciesupdate-source
IPaddressasitsownloopback
addressofMPBGPsetlink.
4ZXR10(config-bgp)#address-familyvpnv4ThisentersVPNv4address
familycongurationmode.
5ZXR10(config-bgp-af-vpnv4)#neighbor<ip-address>
activate
Thisactivatesvpnv4abilityof
neighbor.
CongurationExample
AsshowninFigure1-5,runMPBGPbetweenPE1andPE2.
Figure1-5MPBGPProtocolConguration
1-13
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential

ZXR105900ESeriesCongurationGuide(VPN)
Caution!
Beforeperformthefollowingcongurations,makesurethatPE1andPE2canbeping
eachotherbyusingtheirloopbackaddresses.
PE1conguration,
PE1(config)#routerbgp100
PE1(config-bgp)#neighbor1.1.1.3remote-as100
PE1(config-bgp)#neighbor1.1.1.3activate
PE1(config-bgp)#neighbor1.1.1.3update-sourceloopback1
PE1(config-bgp)#address-familyvpnv4
PE1(config-bgp-af-vpnv4)#neighbor1.1.1.3activate
PE1(config-bgp-af-vpnv4)#exit
PE2conguration,
PE2(config)#routerbgp100
PE2(config-bgp)#neighbor1.1.1.1remote-as100
PE2(config-bgp)#neighbor1.1.1.1activate
PE2(config-bgp)#neighbor1.1.1.1update-sourceloopback1
PE2(config-bgp)#address-familyvpnv4
PE2(config-bgp-af-vpnv4)#neighbor1.1.1.1activate
PE2(config-bgp-af-vpnv4)#exit
MPLSVPNAdvancedFunctionConguration
1.ConguringASOverride
WhenBGPrunsbetweenPEandCE,userswanttoreuseASnumberindifferentsites.
ToprovidetheconnectivebetweenCE1andCE2,anewmethodcalledASoverride
isadopted.AfterASoverrideisconguredonPE,butbeforePEsendsrouteupdate
packetstoCE,PEwillreplacetheASnumberofeachdirectlyconnectdCEdevicein
theentityAS_PATHbyitsownASnumber.ThelengthofAS_PATHisstillkeptwhen
ASoverrideiscongured.
TocongureASoverride,performthefollowingstepsonZXR105900E.
StepCommandFunction
1ZXR10(config)#routerbgp<as-number>ThisentersBGProute
congurationmode.
2ZXR10(config-bgp)#address-familyipv4vrf<vrf-name>ThisentersIPv4VRFaddress
familycongurationmode.
1-14
SJ-20150114102049-016|2015-03-10(R1.0)ZTEProprietaryandCondential