This section contains configuration examples and commands you can issue to verify your VPLS configuration:
Figure 94: VPLS Topology Diagram

In Figure 94, a simple VPLS topology is enabled between routers PE1 and PE2. CE routers CE1 and CE2 use Ethernet-based interfaces to connect VLAN 600 to their local PE router. The PE routers PE1 and PE2 are connected to one another by LSPs enabled across a service provider backbone running MPLS, BGP, RSVP, and OSPF.
In a VPLS routing instance named green, PE1 has a local interface fe-0/1/0 and a virtual port of vt-0/3/0.32770 (the virtual port is created dynamically on the Tunnel Services PIC when VPLS is configured). PE2 has a local interface fe-0/1/0 and a virtual port of vt-0/3/0.32771 in the same green instance. As a result, routers CE1 and CE2 can send Ethernet traffic to one another as if they are physically connected to each other on a LAN.
On Router CE1, the only item you need to configure is the Fast Ethernet interface that connects to PE1. Be sure to write down the VLAN identifier and IP address, so you can match them later on CE2.
Router CE1
- [edit]
- interfaces {
-
- fe-0/1/0 {
- vlan-tagging;# Configure VLAN tagging for VLAN VPLS or extended VLAN VPLS.
-
- unit 0 {
- vlan-id 600;# The Ethernet interface on CE2 must use the same VLAN ID.
-
- family inet {
- address 10.11.3.1/24;
# The interface on CE2 must use the same prefix.
- }
- }
- }
- }
On Router PE1, prepare the router for VPLS by configuring BGP, MPLS, OSPF, and RSVP. (These protocols are the basis for most Layer 2 VPN-related applications, including VPLS.) Include the signaling statement at the [edit protocols bgp group group-name family l2vpn] hierarchy level, because VPLS uses the same infrastructure for internal BGP as Layer 2 VPNs.
![]() |
Note: In JUNOS Release 7.3 and later, the signaling statement replaces the unicast statement at the [edit protocols bgp group group-name family l2vpn] hierarchy level. You must use the signaling statement if you wish to configure VPLS domains and Layer 2 VPNs simultaneously. |
Next, configure VLAN tagging on the Fast Ethernet interface connected to Router CE1. Include VLAN VPLS encapsulation at both the physical and logical interface levels. Be sure to use the same VLAN ID for all Ethernet interfaces that are part of a single VPLS instance. Finally, add the Fast Ethernet interface into a VPLS routing instance and specify the site range, site ID number, and site name.
Router PE1
- [edit]
- interfaces {
-
- fe-0/1/0 {
- vlan-tagging;# Configure VLAN tagging for VLAN VPLS or extended VLAN VPLS.
- encapsulation vlan-vpls; # Configure VPLS encapsulation on both the
-
- unit 0 { # physical interface and the logical interface.
- encapsulation vlan-vpls;
- vlan-id 600;# The VLAN ID is the same one used by the CE routers.
- }
- }
-
- so-1/1/0 {
-
- unit 0 {
-
- family inet {
- address 10.11.1.5/30;
- }
- family mpls;
- }
- }
-
- lo0 {
-
- unit 0 {
-
- family inet {
- address 10.245.14.218/32;
- }
- }
- }
- }
- routing-options {
- autonomous-system 69;
-
- forwarding-table {
- export exp-to-fwd;# Applies a policy that selects an LSP for the VPLS instance.
- }
- }
- protocols {
-
- rsvp {
-
- interface all {
- aggregate;
- }
- }
-
- mpls {
-
- label-switched-path pe1-to-pe2
{ # Configure an LSP to reach other VPLS PEs.
- to 10.245.14.219;
- }
- interface all;
- }
-
- bgp {
-
- group vpls-pe {
- type internal;
- local-address 10.245.14.218;
-
- family l2vpn { # VPLS uses the same infrastructure as Layer
2 VPNs
- signaling; # for internal BGP.
- }
- neighbor 10.245.14.217;
- neighbor 10.245.14.219;
- }
- }
-
- ospf {
- traffic-engineering;
-
- area 0.0.0.0 {
-
- interface so-1/1/0.0 {
- metric 11;
- }
-
- interface lo0.0 {
- passive;
- }
- }
- }
- }
- policy-options {
-
- policy-statement exp-to-fwd {
-
- term a {
- from community grn-com; # Matches the community in the VPLS instance.
-
- then {
- install-nexthop lsp pe1-to-pe2; # If there are multiple LSPs that exist
- accept; # between VPLS PE routers, this statement sends
VPLS traffic
- }
- }
- }
- community grn-com members target:11111:1; # Adds the instance to a BGP community.
- }
- routing-instances {
-
- green {
- instance-type vpls; # Configure a VPLS routing instance.
- interface fe-0/1/0.0;
- route-distinguisher 10.245.14.218:1;
- vrf-target target:11111:1; #
This value is important to the BGP community.
-
- protocols {
-
- vpls {# Configure a VPLS site
range, site name, and site identifier.
- site-range 10;
-
- site greenPE1 {
- site-identifier 1;
- }
- }
- }
- }
- }
On Router P0, configure BGP, MPLS, OSPF, and RSVP to interconnect PE1 and PE2.
Router P0
- [edit]
- interfaces {
-
- so-0/0/0 {
-
- unit 0 {
-
- family inet {
- address 10.11.2.6/30;
- }
- family mpls;
- }
- }
-
- so-1/1/0 {
-
- unit 0 {
-
- family inet {
- address 10.11.1.6/30;
- }
- family mpls;
- }
- }
-
- lo0 {
-
- unit 0 {
-
- family inet {
- address 10.245.14.217/32;
- }
- }
- }
- }
- protocols {
-
- rsvp {
-
- interface all {
- aggregate;
- }
- }
-
- mpls {
- interface all;
- }
-
- bgp {
-
- group vpls-pe {
- type internal;
- local-address 10.245.14.217;
-
- family l2vpn { # VPLS uses the
same infrastructure as Layer 2 VPNs
- signaling; #for internal BGP.
- }
- neighbor 10.245.14.218;
- neighbor 10.245.14.219;
- }
- }
-
- ospf {
- traffic-engineering;
-
- area 0.0.0.0 {
-
- interface so-1/1/0.0 {
- metric 11;
- }
-
- interface so-0/0/0.0 {
- metric 15;
- }
-
- interface lo0.0 {
- passive;
- }
- }
- }
- }
On Router PE2, configure BGP, MPLS, OSPF, and RSVP to complement the configuration on PE1. Next, configure VLAN tagging on the Fast Ethernet interface connected to Router CE2. Include VLAN VPLS encapsulation at both the physical and logical interface levels. Be sure to use the same VLAN ID for all Ethernet interfaces that are part of a single VPLS instance. Finally, add the Fast Ethernet interface into a VPLS routing instance and specify the site range, site ID number, and site name.
Router PE2
- [edit]
- interfaces {
-
- fe-0/1/0 {
- vlan-tagging; # Configure VLAN
tagging for VLAN VPLS or extended VLAN VPLS.
- encapsulation vlan-vpls; # Configure
VPLS encapsulation on both the
-
- unit 0 { # physical interface and logical interface.
- encapsulation vlan-vpls;
- vlan-id 600;# The VLAN ID is
the same one used by the CE routers.
- }
- }
-
- so-0/0/0 {
-
- unit 0 {
-
- family inet {
- address 10.11.2.5/30;
- }
- family mpls;
- }
- }
-
- lo0 {
-
- unit 0 {
-
- family inet {
- address 10.245.14.219/32;
- }
- }
- }
- }
- routing-options {
- autonomous-system 69;
-
- forwarding-table {
- export exp-to-fwd; # Applies
a policy that selects an LSP for the VPLS instance.
- }
- }
- protocols {
-
- rsvp {
-
- interface all {
- aggregate;
- }
- }
-
- mpls {
-
- label-switched-path pe2-to-pe1
{ # Configure an LSP to other VPLS PE routers.
- to 10.245.14.218;
- }
- interface all;
- }
-
- bgp {
-
- group vpls-pe {
- type internal;
- local-address 10.245.14.219;
-
- family l2vpn { # VPLS uses the
same infrastructure as Layer 2 VPNs
- signaling; # for internal BGP.
- }
- neighbor 10.245.14.217;
- neighbor 10.245.14.218;
- }
- }
-
- ospf {
- traffic-engineering;
-
- area 0.0.0.0 {
-
- interface so-0/0/0.0 {
- metric 15;
- }
-
- interface lo0.0 {
- passive;
- }
- }
- }
- }
- policy-options {
-
- policy-statement exp-to-fwd {
-
- term a {
- from community grn-com; # Matches the community with the
VPLS instance.
-
- then {
- install-nexthop lsp pe2-to-pe1; # If there are multiple
LSPs that exist
- accept; # between VPLS PE routers, this statement sends
VPLS traffic
- }
- }
- }
- community grn-com members target:11111:1; # This adds the
instance into a BGP community.
- }
- routing-instances {
-
- green {
- instance-type vpls; # Configure
a VPLS routing instance.
- interface fe-0/1/0.0;
- route-distinguisher 10.245.14.219:1;
- vrf-target target:11111:1; #
This value is important for the BGP community.
-
- protocols {
-
- vpls { # Configure a VPLS site
range, site name, and site identifier.
- site-range 10;
-
- site greenPE2 {
- site-identifier 2;
- }
- }
- }
- }
- }
On Router CE2, complete your VPLS network by configuring the Fast Ethernet interface that connects to PE2. Use the same VLAN identifier and IP address prefix used on Router CE1.
Router CE2
- [edit]
- interfaces {
-
- fe-0/1/0 {
- vlan-tagging; # Configure VLAN tagging for VLAN VPLS or
extended VLAN VPLS.
-
- unit 0 {
- vlan-id 600; # The Ethernet interface on CE1 must use the
same VLAN ID.
-
- family inet {
- address 10.11.3.2/24; # The interface on CE1 must use the
same prefix.
- }
- }
- }
- }
To verify proper operation of VPLS, use the following commands:
The following section shows the output of these commands on Router PE1 as a result of the configuration example:
user@PE1> show interfaces terse Interface Admin Link Proto Local Remote
so-1/1/0 up up
so-1/1/0.0 up up inet 10.11.1.5/30
mpls
so-1/1/1 up up
so-1/1/2 up up
so-1/1/3 up up
fe-0/1/0 up up
fe-0/1/0.0 up up vpls # This is the local Fast Ethernet
# interface.
fe-0/1/1 up up
fe-0/1/2 up up
fe-0/1/3 up up
gr-0/3/0 up up
ip-0/3/0 up up
mt-0/3/0 up up
pd-0/3/0 up up
pe-0/3/0 up up
vt-0/3/0 up up
vt-0/3/0.32770 up up # This is the dynamically generated virtual port.
dsc up up
fxp0 up up
fxp0.0 up up inet 192.186.14.218/24
fxp1 up up
fxp1.0 up up tnp 4
gre up up
ipip up up
lo0 up up
lo0.0 up up inet 10.245.14.218 --> 0/0
127.0.0.1 --> 0/0
inet6 fe80::2a0:a5ff:fe28:13e0
feee::10:245:14:218
lsi up up
mtun up up
pimd up up
pime up up
tap up up
user@PE1> show system statistics vpls vpls:
0 total packets received
0 with size smaller than minimum
0 with incorrect version number
0 packets for this host
0 packets with no logical interface
0 packets with no family
0 packets with no route table
0 packets with no auxiliary table
0 packets with no corefacing entry
0 packets with no CE-facing entry
6 mac route learning requests # This indicates that VPLS is working.
6 mac routes learnt
0 mac routes aged
0 mac routes moved
To display VPLS source and destination MAC address accounting information, use the destination, extensive, matching, or table option with the show route forwarding-table family vpls command. When you analyze the display output, keep in mind the following:
user@PE1> show route forwarding-table
family vpls extensive Routing table: green.vpls [Index 2]
VPLS:
Destination: default
Route type: dynamic Route reference: 0
Flags: sent to PFE
Next-hop type: flood Index: 353 Reference: 1
Destination: default
Route type: permanent Route reference: 0
Flags: none
Next-hop type: discard Index: 298 Reference: 1
Destination: fe-0/1/0.0
Route type: dynamic Route reference: 0
Flags: sent to PFE
Next-hop type: flood Index: 355 Reference: 1
Destination: bb:bb:bb:bb:bb:bb/48 # This MAC address belongs to remote CE2.
Route type: dynamic Route reference: 0
Flags: sent to PFE, prefix load balance
Next-hop type: indirect Index: 351 Reference: 4
Next-hop type: Push 800000, Push 100002(top)
Next-hop interface: so-1/1/0.0
Destination: aa:aa:aa:aa:aa:aa/48 # This MAC address belongs to local CE1.
Route type: dynamic Route reference: 0
Flags: sent to PFE, prefix load balance
Next-hop type: unicast Index: 354 Reference: 2
Next-hop interface: fe-0/1/0.0
user@PE1> show route forwarding-table family
vpls Routing table: green.vpls
VPLS:
Destination Type RtRef Next hop Type Index NhRef Netif
default dynm 0 flood 353 1
default perm 0 dscd 298 1
fe-0/1/0.0 dynm 0 flood 355 1
bb:bb:bb:bb:bb:bb/48 # This MAC address belongs to remote CE2.
dynm 0 indr 351 4
Push 800000, Push 100002(top)
so-1/1/0.0
aa:aa:aa:aa:aa:aa/48 # This MAC address belongs to local CE1.
dynm 0 ucst 354 2 fe-0/1/0.0
user@PE1> show route forwarding-table family
mpls Routing table: mpls
MPLS:
Destination Type RtRef Next hop Type Index NhRef Netif
default perm 0 dscd 19 1
0 user 0 recv 18 3
1 user 0 recv 18 3
2 user 0 recv 18 3
100000 user 0 10.11.1.6 swap 100001 so-1/1/0.0
800002 user 0 Pop vt-0/3/0.32770
vt-0/3/0.32770 (VPLS)
user 0 indr 351 4
Push 800000, Push 100002(top) so-1/1/0.0
user@PE1> show route instance green detail green:
Router ID: 0.0.0.0
Type: vpls State: Active
Interfaces:
fe-0/1/0.0 # This is the local Fast Ethernet interface.
vt-0/3/0.32770 # This is the dynamically generated VPLS virtual port.
Route-distinguisher: 10.245.14.218:1
Vrf-import: [ __vrf-import-green-internal__ ]
Vrf-export: [ __vrf-export-green-internal__ ]
Vrf-import-target: [ target:11111:1 ]
Vrf-export-target: [ target:11111:1 ]
Tables:
green.l2vpn.0 : 2 routes (2 active, 0 holddown, 0 hidden)
user@PE1> show vpls connections L2VPN Connections:
Legend for connection status (St)
OR -- out of range WE -- intf encaps != instance encaps
EI -- encapsulation invalid Dn -- down
EM -- encapsulation mismatch VC-Dn -- Virtual circuit down
CM -- control-word mismatch -> -- only outbound conn is up
CN -- circuit not present <- -- only inbound conn is up
OL -- no outgoing label Up -- operational
NC -- intf encaps not CCC/TCC XX -- unknown
NP -- interface not present
Legend for interface status
Up -- operational
Dn -- down
Instance: green
Local site: greenPE1 (1)
connection-site Type St Time last up # Up trans
2 rmt Up Jan 24 06:26:49 2003 1
Local interface: vt-0/3/0.32770, Status: Up, Encapsulation: VPLS
Remote PE: 10.245.14.219, Negotiated control-word: No
Incoming label: 800002, Outgoing label: 800000
user@PE1> show system statistics vpls vpls:
0 total packets received
0 with size smaller than minimum
0 with incorrect version number
0 packets for this host
0 packets with no logical interface
0 packets with no family
0 packets with no route table
0 packets with no auxiliary table
0 packets with no corefacing entry
0 packets with no CE-facing entry
7 mac route learning requests
7 mac routes learnt
0 mac routes aged
0 mac routes moved
user@PE1> show route instance green detail green:
Router ID: 0.0.0.0
Type: vpls State: Active
Interfaces:
fe-0/1/0.0
vt-0/3/0.32770
Route-distinguisher: 10.245.14.218:1
Vrf-import: [ __vrf-import-green-internal__ ]
Vrf-export: [ __vrf-export-green-internal__ ]
Vrf-import-target: [ target:11111:1 ]
Vrf-export-target: [ target:11111:1 ]
Tables:
green.l2vpn.0 : 2 routes (2 active, 0 holddown, 0 hidden)
user@PE1> show vpls statistics Layer-2 VPN Statistics:
Instance: green
Local interface: fe-0/1/0.0, Index: 351
Remote provider edge router: 10.245.14.219
Multicast packets: 363
Multicast bytes : 30956
Flood packets : 0
Flood bytes : 0
Local interface: vt-0/3/0.32770, Index: 354
Remote provider edge router: 10.245.14.219
Multicast packets: 135
Multicast bytes : 12014
Flood packets : 135
Flood bytes : 12014
To clear all MAC address entries for a VPLS instance from the VPLS table, issue the clear vpls mac-address instance instance-name command. Add the logical-system logical-system-name option to clear entries in a VPLS instance within a logical system. Use the mac-address option to remove individual MAC addresses.
Figure 95: Topology for VPLS Configuration Example

Figure 95, shows two VPLS mesh groups: LDP-1 and the default BGP mesh group. The VPLS instance is named vi in the configuration. Table 57 shows the addresses for the router interfaces in the example topology.
Table 57: Router Interface Addresses for VPLS Configuration Example
On Router CE3, the only item you need to configure is the Gigabit Ethernet interface that connects to PE3.
Router CE3
On Router PE3, prepare the router for VPLS by configuring BGP, MPLS, OSPF, and LDP. (These protocols are the basis for most Layer 2 VPN-related applications, including VPLS.) Include the signaling statement at the [edit protocols bgp group group-name family l2vpn] hierarchy level, because VPLS uses the same infrastructure for internal BGP as Layer 2 VPNs.
![]() |
Note: In JUNOS Release 7.3 and later, the signaling statement replaces the unicast statement at the [edit protocols bgp group group-name family l2vpn] hierarchy level. You must use the signaling statement if you wish to configure VPLS domains and Layer 2 VPNs simultaneously. |
Next, configure VLAN tagging on the Gigabit Ethernet interface connected to Router CE3. Finally, add the Gigabit Ethernet interface into a VPLS routing instance and specify the site range, site ID number, and site name.
Router PE3
- [edit]
- interfaces {
-
- so-0/2/1 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.10/30;
- }
- family mpls;
- }
-
- so-0/2/2 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.21/30;
- }
- family mpls;
- }
- }
-
-
- ge-1/3/1 {
- encapsulation ethernet-vpls;
-
- unit 0 {
- family vpls;
- }
- }
- }
- }
- protocols {
-
- mpls {
- interface all;
- }
-
- bgp {
- log-updown;
-
- group int {
- type internal;
- local-address 10.255.170.96;
-
- family l2vpn {
- signaling;
- }
- neighbor 10.255.170.98;
- neighbor 10.255.170.102;
- }
- }
-
- ospf {
-
- area 0.0.0.0 {
- interface so-0/2/1.0;
- interface so-0/2/2.0;
-
- interface lo0.0 {
- passive;
- }
- }
- }
-
- ldp {
- interface so-0/2/1.0;
- interface so-0/2/2.0;
- }
- }
- routing-instances {
-
- v1 {
- instance-type vpls;
- interface ge-1/3/1.0;
- route-distinguisher 10.255.170.96:1;
- vrf-target target:1:2;
-
- protocols {
-
- vpls {
- site-range 10;
-
- site 1 {
- site-identifier 3;
- }
- }
- }
- }
On Router P0, configure BGP, MPLS, OSPF, and RSVP to interconnect PE3 and PE4.
Router P0
- [edit]
- interfaces {
-
- t1-0/1/3 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.25/30;
- }
- family mpls;
- }
-
- so-0/2/1 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.22/30;
- }
- family mpls;
- }
- }
- }
- protocols {
-
- mpls {
- interface all;
- }
-
- ospf {
-
- area 0.0.0.0 {
- interface so-0/2/1.0;
- interface t1-0/1/3.0;
-
- interface lo0.0 {
- passive;
- }
- }
- }
-
- ldp {
- interface t1-0/1/3.0;
- interface so-0/2/1.0;
- }
- }
On Router PE4, configure BGP, MPLS, OSPF, and LDP to complement the configuration on PE3. Next, configure VLAN tagging on the Fast Ethernet interface connected to Router CE4. Include VLAN VPLS encapsulation at both the physical and logical interface levels. Finally, add the Fast Ethernet interface into a VPLS routing instance and specify the site range, site ID number, and site name.
Router PE4
- [edit]
- interfaces {
-
- fe-0/0/2 {
- encapsulation ethernet-vpls;
-
- unit 0 {
- family vpls;
- }
-
- fe-0/0/3 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.14/30;
- }
- family mpls;
- }
- }
-
- t1-0/1/3 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.26/30;
- }
- family mpls;
- }
- }
- }
- protocols {
-
- mpls {
- interface all;
- }
-
- bgp {
- log-updown;
-
- group int {
- type internal;
- local-address 10.255.170.102;
-
- family l2vpn {
- signaling;
- }
- neighbor 10.255.170.96;
- neighbor 10.255.170.98;
- }
-
- }
- }
-
- ospf {
-
- area 0.0.0.0 {
- interface fe-0/0/3.0;
- interface t1-0/1/3.0;
-
- interface lo0.0 {
- passive;
- }
- }
- }
-
- ldp {
- interface fe-0/0/3.0;
- interface t1-0/1/3.0;
- interface lo0.0;
- }
- }
On Router CE4, configure the Fast Ethernet interface that connects to PE4.
Router CE4
On Router B, the area border router, configure the interfaces. Next, configure BGP, MPLS, OSPF, and LDP. Be sure to include the loopback interface in the LDP configuration by including the interface lo0.0 statement at the [edit protocols ldp] hierarchy level. For BGP, include the signaling statement at the [edit bgp group group-name family l2vpn] hierarchy level. Last, configure the vpls instance with both bgp and ldp signaling. Configure the LDP-1 mesh group by including the mesh-group ldp1 statement at the [edit routing-instances v1 protocols vpls] hierarchy level.
Router B
- [edit]
- interfaces {
-
- fe-0/0/3 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.13/30;
- }
- family mpls;
- }
- }
-
- t1-0/1/2 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.1/30;
- }
- family mpls;
- }
- }
-
- t1-0/1/3 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.5/30;
- }
- family mpls;
- }
- }
-
- so-0/2/2 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.9/30;
- }
- family mpls;
- }
- }
- }
- protocols {
-
- mpls {
- interface all;
- }
-
- bgp {
- log-updown;
-
- group int {
- type internal;
- local-address 10.255.170.98;
-
- family l2vpn {
- signaling;
- }
- neighbor 10.255.170.96;
- neighbor 10.255.170.102;
- }
- }
-
- ospf {
-
- area 0.0.0.0 {
- interface t1-0/1/2.0;
- interface t1-0/1/3.0;
- interface so-0/2/2.0;
- interface fe-0/0/3.0;
-
- interface lo0.0 {
- passive;
- }
- }
- }
-
- ldp {
- interface fe-0/0/3.0;
- interface t1-0/1/2.0;
- interface t1-0/1/3.0;
- interface so-0/2/2.0;
- interface lo0.0;
- }
- }
- routing-instances {
-
- v1 {
- instance-type vpls;
- route-distinguisher 10.255.170.98:1;
- vrf-target target:1:2;
-
- protocols {
-
- vpls {
- site-range 10;
-
- site 1 {
- site-identifier 1;
- }
- vpls-id 101;
-
- mesh-group ldp-1 {
- neighbor 10.255.170.106;
- neighbor 10.255.170.104;
- }
- }
- }
- }
- }
Finally, configure the LDP PE routers. On Router PE1, prepare the router for VPLS by configuring LDP, MPLS, and OSPF. Next, configure VPLS encapsulation on the Fast Ethernet interface connected to CE1. Finally, add the Fast Ethernet interface to the routing instance, specifying the VPLS ID and the neighboring routers’ loopback addresses.
Router PE1
- [edit]
- interfaces {
-
- fe-0/0/3 {
- encapsulation ethernet-vpls;
-
- unit 0 {
- family vpls;
- }
- }
-
- t1-0/1/0 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.2/30;
- }
- family mpls;
- }
- }
-
- t1-1/1/1 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.17/30;
- }
- family mpls;
- }
- }
- }
- protocols {
-
- mpls {
- interface all;
- }
-
- ospf {
-
- area 0.0.0.0 {
- interface t1-0/1/0.0;
- interface t1-1/1/1.0;
-
- interface lo0.0 {
- passive;
- }
- }
- }
-
- ldp {
- interface t1-0/1/0.0;
- interface t1-1/1/1.0;
- interface lo0.0;
- }
- }
- routing-instances {
-
- v1 {
- instance-type vpls;
- interface fe-0/0/3.0;
-
- protocols {
-
- vpls {
- vpls-id 101;
- neighbor 10.255.170.98;
- neighbor 10.255.170.104;
- }
- }
- }
- }
Next, configure the Fast Ethernet interface on router CE1 that connects to router PE1.
Router CE1
On Router PE2, prepare the router for VPLS by configuring LDP, MPLS, and OSPF. Next, configure VPLS encapsulation on the Fast Ethernet interface connected to router CE1. Finally, add the Fast Ethernet interface to the routing instance, specifying the VPLS ID and the neighboring routers’ loopback addresses.
Router PE2
- [edit]
- interfaces {
-
- t1-0/1/1 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.18/30;
- }
- family mpls;
- }
-
- t1-0/1/3 {
-
- unit 0 {
-
- family inet {
- address 10.12.100.6/30;
- }
- family mpls;
- }
- }
-
- fe-1/0/2 {
- encapsulation ethernet-vpls;
-
- unit 0 {
- family vpls;
- }
- }
- }
- protocols {
-
- mpls {
- interface all;
- }
-
- ospf {
-
- area 0.0.0.0 {
- interface t1-0/1/3.0;
- interface t1-0/1/1.0;
-
- interface lo0.0 {
- passive;
- }
- }
- }
-
- ldp {
- interface t1-0/1/1.0;
- interface t1-0/1/3.0;
- interface lo0.0;
- }
- }
- routing-instances {
-
- v1 {
- instance-type vpls;
- interface fe-1/0/2.0;
-
- protocols {
-
- vpls {
- vpls-id 101;
- neighbor 10.255.170.98;
- neighbor 10.255.170.106;
- }
- }
- }
- }
Finally, on Router CE2 configure the Fast Ethernet interface connected to PE2:
Router CE2
To verify proper operation of VPLS, use the following commands:
The following section shows the output of some of these commands on Router B as a result of the configuration example.
Use the show bgp summary command to verify BGP signaling for VPLS is up.
user@PB> show bgp summary Groups: 1 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending bgp.l2vpn.0 2 2 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Damped... 10.255.170.96 65000 124 125 0 0 54:26 Establ bgp.l2vpn.0: 1/1/0 v1.l2vpn.0: 1/1/0 10.255.170.102 65000 122 124 0 0 54:18 Establ bgp.l2vpn.0: 1/1/0 v1.l2vpn.0: 1/1/0
Use the show ldp neighbors command to verify ldp signaling for VPLS is up.
user@B> show ldp neighborsAddress Interface Label space ID Hold time 10.255.170.104 lo0.0 10.255.170.104:0 41 10.255.170.106 lo0.0 10.255.170.106:0 38 10.12.100.14 fe-0/0/3.0 10.255.170.102:0 12 10.12.100.10 so-0/2/2.0 10.255.170.96:0 14 10.12.100.2 t1-0/1/2.0 10.255.170.106:0 14 10.12.100.6 t1-0/1/3.0 10.255.170.104:0 13
To verify that the VPLS connections are up, use the show vpls connections command.
user@B>show vpls connectionsLayer-2 VPN connections:
Legend for connection status (St)
EI -- encapsulation invalid NC -- interface encapsulation not CCC/TCC/VPLS
EM -- encapsulation mismatch WE -- interface and instance encaps not same
VC-Dn -- Virtual circuit down NP -- interface hardware not present
CM -- control-word mismatch -> -- only outbound connection is up
CN -- circuit not provisioned <- -- only inbound connection is up
OR -- out of range Up -- operational
OL -- no outgoing label Dn -- down
LD -- local site signaled down CF -- call admission control failure
RD -- remote site signaled down SC -- local and remote site ID collision LN -- local site not designated LM -- local site ID not minimum designated RN -- remote site not designated RM -- remote site ID not minimum designated XX -- unknown connection status IL -- no incoming label
MM -- MTU mismatch MI -- Mesh-Group ID not availble
Legend for interface status
Up -- operational
Dn -- down
Instance: v1
BGP-VPLS State
Local site: 1 (1)
connection-site Type St Time last up # Up trans
3 rmt Up Jan 22 16:38:47 2008 1
Local interface: vt-0/3/0.1048834, Status: Up, Encapsulation: VPLS
Description: Intf - vpls v1 local site 1 remote site 3
Remote PE: 10.255.170.96, Negotiated control-word: No
Incoming label: 800258, Outgoing label: 800000
4 rmt Up Jan 22 16:38:54 2008 1
Local interface: vt-0/3/0.1048835, Status: Up, Encapsulation: VPLS
Description: Intf - vpls v1 local site 1 remote site 4
Remote PE: 10.255.170.102, Negotiated control-word: No
Incoming label: 800259, Outgoing label: 800000 LDP-VPLS State
VPLS-id: 101
Mesh-group connections: m1
Neighbor Type St Time last up # Up trans
10.255.170.104(vpls-id 101) rmt Up Jan 22 16:38:40 2008 1
Local interface: vt-0/3/0.1048833, Status: Up, Encapsulation: ETHERNET
Description: Intf - vpls v1 neighbor 10.255.170.104 vpls-id 101
Remote PE: 10.255.170.104, Negotiated control-word: No
Incoming label: 800001, Outgoing label: 800000
10.255.170.106(vpls-id 101) rmt Up Jan 22 16:38:39 2008 1
Local interface: vt-0/3/0.1048832, Status: Up, Encapsulation: ETHERNET
Description: Intf - vpls v1 neighbor 10.255.170.106 vpls-id 101
Remote PE: 10.255.170.106, Negotiated control-word: No
Incoming label: 800000, Outgoing label: 800000
To display VPLS routes (MAC addresses) in the vpls forwarding table, use the show route forwarding-table family vpls command.
user@B> show route forwarding-table
family vplsRouting table: v1.vpls
VPLS:
Destination Type RtRef Next hop Type Index NhRef Netif
default perm 0 rjct 540 1
vt-0/3/0.1048832 user 0 comp 587 3
vt-0/3/0.1048833 user 0 comp 587 3
vt-0/3/0.1048834 user 0 comp 589 3
vt-0/3/0.1048835 user 0 comp 589 3
00:17:cb:c2:10:01/48
dynm 0 indr 262143 4
Push 800000 580 2
t1-0/1/3.0
00:17:cb:c2:10:02/48
dynm 0 indr 262145 4
10.12.100.14 Push 800000 594 2
fe-0/0/3.0
00:17:cb:c2:10:03/48
dynm 0 indr 262142 4
Push 800000 576 2
t1-0/1/2.0
00:17:cb:c2:10:bd/48
dynm 0 indr 262144 4
Push 800000 585 2
so-0/2/2.0
To display VPLS source and destination MAC address accounting information, use the destination, extensive, matching, or table option with the show route forwarding-table family vpls command. When you analyze the display output, keep in mind the following:
To display status information about Virtual Loopback Tunnel interfaces in the VPLS instance, use the show interfaces vt* terse command.
user@B> show interfaces vt* terseInterface Admin Link Proto Local Remote vt-0/3/0 up up vt-0/3/0.1048832 up up vpls vt-0/3/0.1048833 up up vpls vt-0/3/0.1048834 up up vpls vt-0/3/0.1048835 up up vpls
To display VPLS route information related to the flood process, use the show vpls flood extensive command.
user@B> show vpls flood extensiveName: v1
CEs: 0
VEs: 4
Flood route prefix: 0x4a/32
Flood route type: IFF_FLOOD
Flood route owner: vt-0/3/0.1048834
Flood group name: __ves__
Flood group index: 0
Nexthop type: comp
Nexthop index: 589
Flooding to:
Name Type NhType Index
m1 Group comp 588
Composition: flood-to-all
Flooding to:
Name Type NhType Index
vt-0/3/0.1048832 VE indr 262142
vt-0/3/0.1048833 VE indr 262143
Flood route prefix: 0x4b/32
Flood route type: IFF_FLOOD
Flood route owner: vt-0/3/0.1048835
Flood group name: __ves__
Flood group index: 0
Nexthop type: comp
Nexthop index: 589
Flooding to:
Name Type NhType Index
m1 Group comp 588
Composition: flood-to-all
Flooding to:
Name Type NhType Index
vt-0/3/0.1048832 VE indr 262142
vt-0/3/0.1048833 VE indr 262143
Flood route prefix: 0x48/32
Flood route type: IFF_FLOOD
Flood route owner: vt-0/3/0.1048832
Flood group name: m1
Flood group index: 2
Nexthop type: comp
Nexthop index: 587
Flooding to:
Name Type NhType Index
__ves__ Group comp 586
Composition: flood-to-all
Flooding to:
Name Type NhType Index
vt-0/3/0.1048834 VE indr 262144
vt-0/3/0.1048835 VE indr 262145
Flood route prefix: 0x49/32
Flood route type: IFF_FLOOD
Flood route owner: vt-0/3/0.1048833
Flood group name: m1
Flood group index: 2
Nexthop type: comp
Nexthop index: 587
Flooding to:
Name Type NhType Index
__ves__ Group comp 586
Composition: flood-to-all
Flooding to:
Name Type NhType Index
vt-0/3/0.1048834 VE indr 262144
vt-0/3/0.1048835 VE indr 262145
To view packet flow statistics for the VPLS instance, use the show vpls statistics command:
user@B> show vpls statisticsInstance: v1
Local interface: vt-0/3/0.1048832, Index: 72
Remote PE: 10.255.170.106
Multicast packets: 6
Multicast bytes : 360
Flooded packets : 16
Flooded bytes : 1188
Current MAC count: 1
Local interface: vt-0/3/0.1048833, Index: 73
Remote PE: 10.255.170.104
Multicast packets: 4
Multicast bytes : 240
Flooded packets : 6
Flooded bytes : 398
Current MAC count: 1
Local interface: vt-0/3/0.1048834, Index: 74
Remote PE: 10.255.170.96
Multicast packets: 2
Multicast bytes : 120
Flooded packets : 4
Flooded bytes : 278
Current MAC count: 1
Local interface: vt-0/3/0.1048835, Index: 75
Remote PE: 10.255.170.102
Multicast packets: 1
Multicast bytes : 60
Flooded packets : 2
Flooded bytes : 158
Current MAC count: 1