Skip to content

Support

Techpubs Home
Report an Error

Short Contents

Entire manual as PDF [4225 KB]

Chapter: About This Guide
[PDF 57 KB]
Objectives
Audience
Document Organization
Part Organization
Using the Indexes
Documentation Conventions
General Conventions
Conventions for Software Commands and Statements
List of Technical Publications
Documentation Feedback
How to Request Support
Chapter: VPN Overview
[PDF 50 KB]
VPN Standards
VPN Terminology
Types of VPNs
Layer 2 VPNs
Layer 3 VPNs
VPLS
Virtual-Router Routing Instances
VPNs and Class of Service
VPNs and Logical Routers
VPN Graceful Restart
Chapter: Configure VPNs
[PDF 164 KB]
Enable a Signaling Protocol on the PE Routers
Use LDP for VPN Signaling
Use RSVP for VPN Signaling
Configure an IGP on the PE and P Routers
Configure an IBGP Session between PE Routers
Configure a VPN Routing Instance on the PE Routers
Configure the Description
Configure the Instance Type
Configure Interfaces for VPN Routing
General Configuration for VPN Routing
Configure Interfaces for Layer 3 VPNs
Configure Interfaces for Carrier-of-Carriers VPNs
Configure Unicast RPF on VPN Interfaces
Configure the Route Distinguisher
Configure Policy for the PE Router's VRF Table
Configure the Route Target
Configure the Route Origin
Configure Import Policy for the PE Router's VRF Table
Configure Export Policy for the PE Router's VRF Table
Apply Both the VRF Export and the BGP Export Policies
Configure a VRF Target
Configure BGP Route Target Filtering
BGP Route Target Filtering Overview
Configure BGP Route Target Filtering for VPNs
Configure a Virtual-Router Routing Instance
Configure a Routing Protocol between the Service Provider Routers
Configure Logical Interfaces between Participating Routers
Configure Graceful Restart
Configure Aggregate Labels for VPNs
Rewrite Markers and VPNs
Transmit Nonstandard BPDUs
Ping VPNs and Layer 2 Circuits
Chapter: Summary of VPN Configuration Statements
[PDF 58 KB]
aggregate-label
description
family route-target
graceful-restart
instance-type
interface
route-distinguisher
route-distinguisher-id
vpn-apply-export
vrf-export
vrf-import
vrf-target
Chapter: Layer 2 VPN Overview
[PDF 21 KB]
Layer 2 VPN Overview
Layer 2 VPN Standards
Chapter: Configure Layer 2 VPNs
[PDF 79 KB]
Configure the Connections to the Local Site
Configure the Site
Configure the Remote Site ID
Configure the Encapsulation Type
Trace Layer 2 VPN Traffic and Operations
Disable Normal TTL Decrementing for VPNs
Configure CCC Encapsulation on Interfaces
Configure TCC Encapsulation on Interfaces
Configure Layer 2 VPN Policing on Interfaces
Disable the Control Word for Layer 2 VPNs
Chapter: Layer 2 VPN Configuration Example
[PDF 126 KB]
Simple Full-Mesh Layer 2 VPN Overview
Enable an IGP on the PE Routers
Configure MPLS LSP Tunnels between the PE Routers
Configure IBGP on the PE Routers
Configure Routing Instances for Layer 2 VPNs on the PE Routers
Configure CCC Encapsulation on the Interfaces
Configure VPN Policy on the PE Routers
Layer 2 VPN Configuration Summarized by Router
Summary for Router A (PE Router for Sunnyvale)
Summary for Router B (PE Router for Austin)
Summary for Router C (PE Router for Portland)
Chapter: Summary of Layer 2 VPN Configuration Statements
[PDF 76 KB]
control-word
encapsulation
encapsulation (logical interface)
encapsulation (physical interface)
encapsulation (Layer 2 VPN)
no-control-word
policer
proxy
remote
remote-site-id
site
site-identifier
traceoptions
Chapter: Layer 3 VPN Overview
[PDF 155 KB]
Layer 3 VPN Overview
Layer 3 VPN Standards
Layer 3 VPN Attributes
VPN-IPv4 Addresses and Route Distinguishers
IPv6 Layer 3 VPNs
VPN Routing and Forwarding Tables
Route Distribution within a Layer 3 VPN
Distribution of Routes from CE to PE Routers
Distribution of Routes between PE Routers
Distribution of Routes from PE to CE Routers
Forwarding across the Provider's Core Network
Routing Instances for VPNs
Multicast over Layer 3 VPNs
Multicast over Layer 3 VPNs Overview
Sending PIM Hello Messages to the PE Routers
Sending PIM Join Messages to the PE Routers
Receiving the Multicast Transmission
Chapter: Configure Layer 3 VPNs
[PDF 231 KB]
Configure VPN Routing between the PE and CE Routers
Configure BGP between the PE and CE Routers
Configure OSPF between the PE and CE Routers
Configure OSPF Version 2 between the PE and CE Routers
Configure OSPF Version 3 between the PE and CE Routers
Configure OSPF Sham Links for Layer 3 VPNs
OSPF Sham Links Overview
Configure OSPF Sham Links
OSPF Sham Links Example
Configure an OSPF Domain ID
Hub-and-Spoke Layer 3 VPNs and OSPF Domain ID
Configure RIP between the PE and CE Routers
Configure Static Routes between the PE and CE Routers
Limit the Routes Accepted from a CE Router
Configure IPv6 between the PE and CE Routers
Configure IPv6 on the PE Router
Configure BGP or Static Routes on the PE Router
Configure BGP on the PE Router to Handle IPv6 Routes
Configure BGP on the PE Router for IPv4 and IPv6 Routes
Configure Static Routes on the PE Router
Configure IPv6 on the Interfaces
Configure EBGP or IBGP Multihop between PE and CE Routers
Configure Layer 3 VPNs to Carry IBGP Traffic
Filter Traffic Based on the IP Header
Egress Filtering Options
Limitations for ATM and Frame Relay
Other Limitations
Configure a VPN Tunnel for VRF Table Lookup
Configure a Logical Unit on the Loopback Interface
Configure Multicast over Layer 3 VPNs
Configure Packet Forwarding for Layer 3 VPNs
Configure a GRE Tunnel Interface for Layer 3 VPNs
Configure the GRE Tunnel Interface on the PE Router
Configure the GRE Tunnel Interface on the CE Router
Configure an ES Tunnel Interface for Layer 3 VPNs
Configure the ES Tunnel Interface on the PE Router
Configure the ES Tunnel Interface on the CE Router
Configure IPSec Instead of MPLS between PE Routers
Configure SCU and DCU for Layer 3 VPNs
Protocol-Independent Load Balancing for Layer 3 VPNs
Configure Protocol-Independent Load Balancing for Layer 3 VPNs
Configure Protocol-Independent Load Balancing and Routing Policies
Chapter: Troubleshoot Layer 3 VPNs
[PDF 112 KB]
Diagnose Common Problems
Troubleshoot Layer 3 VPNs Using ping and traceroute
Ping the CE Router from Another CE Router
Ping Router CE2 from Router CE1
Traceroute from Router CE1's Loopback Interface to Router CE2's Loopback Interface
Ping Router CE1 from Router CE2
Traceroute from Router CE2 to Router CE1
Ping the Remote PE and CE Routers from the Local CE Router
Ping Router CE2 from Router CE1
Traceroute from Router CE1 to Router CE2
Ping Router PE2 from Router CE1
Traceroute from Router CE1 to Router PE2
Pinging a CE Router from a Multiaccess Interface
Ping the Directly Connected PE Routers from the CE Routers
Ping Router PE1 from the Loopback Interface on Router CE1
Traceroute from the Loopback Interface on Router CE1 to PE1
Ping Router PE2 from the Loopback Interface on Router CE2
Traceroute from the Loopback Interface on Router CE2 to PE2
Ping the Directly Connected CE Routers from the PE Routers
Ping the VPN Interface on Router CE1 from Router PE1
Ping the Loopback Interface on Router CE1 from Router PE1
Traceroute from Router PE1 to Router CE1
Ping the VPN Interface on Router CE2 from Router PE2
Ping the Loopback Interface on Router CE2 from Router PE2
Traceroute from Router PE2 to Router CE2
Ping the Remote CE Router from the Local PE Router
Limitation on Pinging a Remote CE Router from a PE Router
Ping a Layer 3 VPN
Disable Normal TTL Decrementing for Layer 3 VPNs
Indirect Next-hop Address Space and Route Reflectors
Chapter: Layer 3 VPN Configuration Examples
[PDF 593 KB]
Configure a Simple Full-Mesh VPN Topology
Enable an IGP on the PE and P Routers
Enable RSVP and MPLS on the P Router
Configure the MPLS LSP Tunnel between the PE Routers
Configure IBGP on the PE Routers
Configure Routing Instances for VPNs on the PE Routers
Configure VPN Policy on the PE Routers
Simple VPN Configuration Summarized by Router
Router A (PE Router)
Router B (P Router)
Router C (PE Router)
Configure a Full-Mesh VPN Topology with Route Reflectors
Configure a Hub-and-Spoke VPN Topology
Enable an IGP on the Hub-and-Spoke PE Routers
Configure LDP on the Hub-and-Spoke PE Routers
Configure IBGP on the PE Routers
Configure VPN Routing Instances on the Hub-and-Spoke PE Routers
Configure VPN Policy on the PE Routers
Hub-and-Spoke VPN Configuration Summarized by Router
Router D (Hub PE Router)
Router E (Spoke PE Router)
Router F (Spoke PE Router)
Configure an LDP-over-RSVP VPN Topology
Enable an IGP on the PE and P Routers
Enable LDP on the PE and P Routers
Enable RSVP and MPLS on the P Router
Configure the MPLS LSP Tunnel between the P Routers
Configure IBGP on the PE Routers
Configure Routing Instances for VPNs on the PE Routers
Configure VPN Policy on the PE Routers
LDP-over-MPLS VPN Configuration Summarized by Router
Router PE1
Router P1
Router P2
Router P3
Router PE2
Configure an Application-Based Layer 3 VPN Topology
Configuration on Router A
Configuration on Router E
Configuration for Router F
Configure an OSPF Domain ID for a Layer 3 VPN
Configure Interfaces on Router PE1
Configure Routing Options on Router PE1
Configure Protocols on Router PE1
Configure Policy Options on Router PE1
Configure the Routing Instance on Router PE1
Configuration Summary for Router PE1
Configure Overlapping VPNs Using Routing Table Groups
Configure Routing Table Groups
Configure Static Routes between the PE and CE Routers
Configure the Routing Instance for VPN A
Configure the Routing Instance for VPN AB
Configure the Routing Instance for VPN B
Configure VPN Policy
Configure BGP between the PE and CE Routers
Configure OSPF between the PE and CE Routers
Configure Static, BGP, and OSPF Routes between PE and CE Routers
Configure Overlapping VPNs Using Automatic Route Export
Configure Overlapping VPNs with BGP and Automatic Route Export
Configure Overlapping VPNs and Additional Tables
Configure Automatic Route Export for all VRF Instances
Configure a GRE Tunnel Interface between PE Routers
Configure the Routing Instance on Router A
Configure the Routing Instance on Router D
Configure MPLS, BGP, and OSPF on Router A
Configure MPLS, BGP, and OSPF on Router D
Configure the Tunnel Interface on Router A
Configure the Tunnel Interface on Router D
Configure the Routing Options on Router A
Configure the Routing Options on Router D
Configuration Summary for Router A
Configuration Summary for Router D
Configure a GRE Tunnel Interface between a PE and CE Router
Configure the Routing Instance without the Encapsulating Interface
Configure the Routing Instance on Router PE1
Configure the GRE Tunnel Interface on Router PE1
Configure the Encapsulation Interface on Router PE1
Configure the Routing Instance with the Encapsulating Interface
Configure the Routing Instance on Router PE1
Configure the GRE Tunnel Interface on Router PE1
Configure the Encapsulation Interface on Router PE1
Configure the GRE Tunnel Interface on Router CE1
Configure an ES Tunnel Interface between a PE and CE Router
Configure IPSec on Router PE1
Configure the Routing Instance without the Encapsulating Interface
Configure the Routing Instance on Router PE1
Configure the ES Tunnel Interface on Router PE1
Configure the Encapsulating Interface for the ES Tunnel
Configure the Routing Instance with the Encapsulating Interface
Configure the Routing Instance on Router PE1
Configure the ES Tunnel Interface on Router PE1
Configure the Encapsulating Interface on Router PE1
Configure the ES Tunnel Interface on Router CE1
Configure IPSec on Router CE1
Chapter: Layer 3 VPN Internet Access Examples
[PDF 277 KB]
Non-VRF Internet Access
CE Router Accesses Internet Independently of the PE Router
PE Router Provides Layer 2 Internet Service
Distributed Internet Access
Route VPN and Internet Traffic through Different Interfaces
Configure Interfaces on Router PE1
Configure Routing Options on Router PE1
Configure BGP, IS-IS, and LDP Protocols on Router PE1
Configure a Routing Instance on Router PE1
Configure Policy Options on Router PE1
Traffic Routed by Different Interfaces Configuration Summarized by Router
Router PE1
Route VPN and Outgoing Internet Traffic through the Same Interface and Route Return Internet Traffic through a Different Interface
Configuration for Router PE1
Route VPN and Internet Traffic through the Same Interface Bidirectionally (VPN Has Public Addresses)
Configure Routing Options on Router PE1
Configure Routing Protocols on Router PE1
Configure the Routing Instance on Router PE1
Traffic Routed through the Same Interface Bidirectionally Configuration Summarized by Router
Router PE1
Route VPN and Internet Traffic through the Same Interface Bidirectionally (VPN Has Private Addresses)
Configure Routing Options for Router PE1
Configure a Routing Instance for Router PE1
Configure Policy Options for Router PE1
Traffic Routed by the Same Interface Bidirectionally (VPN Has Private Addresses) Configuration Summarized by Router
Router PE1
Route Internet Traffic through a Separate NAT Device
Configure Interfaces on Router PE1
Configure Routing Options for Router PE1
Configure Routing Protocols on Router PE1
Configure a Routing Instance for Router PE1
Traffic Routed by Separate NAT Device Configuration Summarized by Router
Router PE1
Centralized Internet Access
Route Internet Traffic through a Hub CE Router
Configure a Routing Instance on Router PE1
Configure Policy Options on Router PE1
Internet Traffic Routed by a Hub CE Router Configuration Summarized by Router
Router PE1
Route Internet Traffic through Multiple CE Routers
Configure a Routing Instance on Router PE1
Configure Policy Options on Router PE1
Configure a Routing Instance on Router PE3
Configure Policy Options on Router PE3
Route Internet Traffic through Multiple CE Routers Configuration Summarized by Router
Router PE1
Router PE2
Router PE3
Chapter: Summary of Layer 3 VPN Configuration Statements
[PDF 42 KB]
independent-domain
inet6-vpn
metric
multihop
multipath
sham-link local
sham-link-remote
vpn-group-address
vrf-table-label
Chapter: VPLS Overview
[PDF 30 KB]
VPLS Overview
VPLS Routing and Virtual Ports
VPLS Standards
Supported Platforms and PICs
Chapter: Configure VPLS
[PDF 114 KB]
Configure Interfaces for VPLS Routing
Configure the Interface Name
Configure the Interface Encapsulation
Enable VLAN Tagging
Configure the VPLS Site
Configure the Site Name and Site Identifier
Configure the Site Range
Configure the Size of the VPLS MAC Address Table
Configure an Ethernet Switch as the CE Device
Map VPLS Traffic to a Specific LSP
Configure VPLS Filters and Policers
Configure a VPLS Filter
Configure an Interface-Specific Counter for VPLS
Configure the VPLS Filter Match Conditions
Configure an Action for the VPLS Filter
Configure VPLS FTFs
Precedence for Spanning Tree BPDU Packets
Apply a VPLS Filter to an Interface
Apply a VPLS Filter to a VPLS Routing Instance
Configure a Filter for Flooded Traffic
Configure a VPLS Policer
Trace VPLS Traffic and Operations
Chapter: Summary of VPLS Configuration Statements
[PDF 50 KB]
encapsulation
mac-table-size
site
site-identifier
site-range
traceoptions
vlan-id
vlan-tagging
vpls
Chapter: Interprovider and Carrier-of-Carriers VPNs Overview
[PDF 53 KB]
Interprovider and Carrier-of-Carriers VPN Standards
Traditional VPNs, Interprovider VPNs, and Carrier-of-Carriers VPNs
Standard VPNs
Interprovider and Carrier-of-Carriers VPNs
Interprovider VPNs
Link VRFs between Autonomous Systems
Configure MP-EBGP between AS Border Routers
Configure Multihop MP-EBGP between AS Border Routers
Carrier-of-Carriers VPNs
Internet Service Provider as the Customer
VPN Service Provider as the Customer
Chapter: Configure Interprovider and Carrier-of-Carriers VPNs
[PDF 146 KB]
Configure Interprovider VPNs
Configure Interprovider VPNs Using MP-EBGP
Configure RSVP
Configure MPLS
Configure BGP
Configure OSPF
Configure Interprovider VPNs Using Multihop MP-EBGP
Configure the AS Border Routers
Configure BGP
Configure Policy Options
Configure the PE Router
Configure Carrier-of-Carriers VPNs
Configure Carrier-of-Carriers VPN—Customer Provides Internet Service
Configure the Carrier-of-Carriers VPN Service Customer's CE Router
Configure MPLS
Configure BGP
Configure OSPF
Configure Policy Options
Configure the Carrier-of-Carriers VPN Service Provider's PE Routers
Configure MPLS
Configure BGP
Configure IS-IS
Configure LDP
Configure a Routing Instance
Configure Policy Options
Configure Carrier-of-Carriers VPN—Customer Provides VPN Service
Configure the Carrier-of-Carriers Customer's PE Router
Configure MPLS
Configure BGP
Configure OSPF
Configure LDP
Configure VPN Service in the Routing Instance
Configure Policy Options
Configure the Carrier-of-Carriers Customer's CE Router
Configure MPLS
Configure BGP
Configure OSPF and LDP
Configure Policy Options
Configure the Provider's PE Router
Configure MPLS
Configure a PE-Router-to-PE-Router BGP Session
Configure IS-IS and LDP
Configure Policy Options
Configure a Routing Instance to Send Routes to the CE Router
Configure BGP to Gather Interprovider and Carrier-of-Carriers VPNs Statistics
Chapter: Configuration Examples for Interprovider and Carrier-of-Carriers VPNs
[PDF 233 KB]
Example Terminology
Interprovider VPN Examples
Interprovider VPN Example—MP-EBGP between ISP Peer Routers
Configuration for Router A
Configuration for Router B
Configuration for Router C
Configure for Router D
Configuration for Router E
Configuration for Router F
Interprovider VPN Example—Multihop MP-EBGP
Configuration for Router B
Configuration for Router C
Configuration for Router D
Configuration for Router E
Carrier-of-Carriers VPN Examples
Carrier-of-Carriers VPN Example—Customer Provides Internet Service
Configuration for Router A
Configuration for Router B
Configuration for Router C
Configuration for Router D
Configuration for Router E
Configuration for Router F
Configuration for Router G
Configuration for Router H
Configuration for Router I
Configuration for Router J
Configuration for Router K
Configuration for Router L
Carrier-of-Carriers VPN Example—Customer Provides VPN Service
Configuration for Router A
Configuration for Router B
Configuration for Router C
Configuration for Router D
Configuration for Router E
Configuration for Router F
Configuration for Router G
Configuration for Router H
Configuration for Router I
Configuration for Router J
Configuration for Router K
Configuration for Router L
Multiple Instances for LDP and Carrier-of-Carriers VPNs
Chapter: Summary of the Interprovider and Carrier-of-Carriers VPNs Configuration Statements
[PDF 24 KB]
labeled-unicast
per-group-label
traffic-statistics
Chapter: Layer 2 Circuit Overview
[PDF 40 KB]
Layer 2 Circuit Overview
Layer 2 Circuit Standards
Layer 2 Circuit Policy
Layer 2 Circuit Bandwidth Accounting and Call Admission Control
Bandwidth Accounting and Call Admission Control Overview
Selecting an LSP Based on the Bandwidth Constraint
LSP Path Protection and CAC
Secondary Paths and CAC
Fast Reroute and CAC
Link and Node Protection and CAC
Chapter: Layer 2 Circuit Configuration Guidelines
[PDF 98 KB]
Configure Interfaces for Layer 2 Circuits
Configure the Neighbor and Interface
Configure the Protect Interface
Configure the Interface Encapsulation Type for Layer 2 Circuits
Configure ATM2 Interfaces for Layer 2 Circuits
Configure the Virtual Circuit ID
Configure LDP for Layer 2 Circuits
Configure Layer 2 Circuit Policies
Configure the Layer 2 Circuit Community
Configure the Policy Statement for the Layer 2 Circuit Community
Example: Configure a Policy for a Layer 2 Circuit Community
Verify the Layer 2 Circuit Policy Configuration
Configure the Control Word for Layer 2 Circuits
Configure the Control Word for Frame Relay Interfaces
Disable the Control Word for Layer 2 Circuits
Configure ATM Trunking on Layer 2 Circuits
Configure Bandwidth Allocation and Call Admission Control
Trace Layer 2 Circuit Creation and Changes
Chapter: Layer 2 Circuits Example
[PDF 48 KB]
Configure Router PE1
Configure Router PE2
Configure Router CE1
Configure Router CE2
Chapter: Summary of Layer 2 Circuit Configuration Statements
[PDF 55 KB]
bandwidth
community
control-word
description
install-nexthop
interface
neighbor
no-control-word
protect-interface
traceoptions
virtual-circuit-id
Chapter: Index
[]
Chapter: Index of Statements and Commands
[]