This configuration sets up the inet-vpn IBGP session with Router H and the PE router portion of the VPN with Router D. Because Router D is required to send labels in this example, configure the BGP session with the labeled-unicast statement within the VPN routing and forwarding (VRF) table.
- [edit]
- protocols {
-
- mpls {
- interface t3-0/2/0.0;
- interface at-0/1/0.0;
- }
-
- bgp {
-
- group pe-pe {
- type internal;
- local-address 10.255.14.171;
-
- family inet-vpn {
- any;
- }
- neighbor 10.255.14.173;
- }
- }
-
- isis {
- interface at-0/1/0.0;
-
- interface lo0.0 {
- passive;
- }
- }
-
- ldp {
- interface at-0/1/0.0;
- }
- }
- routing-instances {
-
- vpn-isp1 {
- instance-type vrf;
- interface t3-0/2/0.0;
- route-distinguisher 10.255.14.171:21;
- vrf-import vpn-isp1-import;
- vrf-export vpn-isp1-export;
-
- protocols {
-
- bgp {
-
- group to-isp1 {
- peer-as 21;
-
- neighbor 192.168.197.14 {
-
- family inet {
- labeled-unicast;
- }
- }
- }
- }
- }
- }
- }
- policy-options {
-
- policy-statement vpn-isp1-import {
-
- term a {
-
- from {
- protocol bgp;
- community vpn-isp1-comm;
- }
- then accept;
- }
-
- term b {
- then reject;
- }
- }
-
- policy-statement vpn-isp1-export {
-
- term a {
- from protocol bgp;
-
- then {
- community add vpn-isp1-comm;
- accept;
- }
- }
-
- term b {
- then reject;
- }
- }
- community vpn-isp1-comm members target:69:21;
- }