Configuring a Signaling Protocol and LSPs for VPNs on EX9200 Switches
For VPNs to function, you must enable the LDP signaling protocol on the provider edge (PE) routers and on the provider (P) routers.
To enable the LDP signaling protocol, perform the steps in the following section:
Using LDP for VPN Signaling
To use LDP for VPN signaling, perform the following steps on the PE and provider (P) routers:
Configure LDP on the interfaces in the core of the network by including the
ldp
statement at the[edit protocols]
hierarchy level.You need to configure LDP only on the interfaces between PE routers or between PE and P routers. You can think of these as the “core-facing” interfaces. You do not need to configure LDP on the interface between the PE and customer edge (CE) routers.
[edit] protocols { ldp { interface type-fpc/pic/port; } }
Configure the MPLS address family on the interfaces on which you enabled LDP (the interfaces you configured in Step 1) by including the
family mpls
statement at the[edit interfaces type-fpc/pic/port unit logical-unit-number]
hierarchy level.[edit] interfaces { type-fpc/pic/port { unit logical-unit-number { family mpls; } } }
Configure OSPF or IS-IS on each PE and P router.
You configure these protocols at the master instance of the routing protocol, not within the routing instance used for the VPN.
To configure OSPF, include the
ospf
statement at the[edit protocols]
hierarchy level. At a minimum, you must configure a backbone area on at least one of the router’s interfaces.[edit] protocols { ospf { area 0.0.0.0 { interface type-fpc/pic/port; } } }
To configure IS-IS, include the
isis
statement at the[edit protocols]
hierarchy level and configure the loopback interface and International Organization for Standardization (ISO) family at the[edit interfaces]
hierarchy level. At a minimum, you must enable IS-IS on the router, configure a network entity title (NET) on one of the router’s interfaces (preferably the loopback interface, lo0), and configure the ISO family on all interfaces on which you want IS-IS to run. When you enable IS-IS, Level 1 and Level 2 are enabled by default. The following is the minimum IS-IS configuration. In theaddress
statement,address
is the NET.[edit] interfaces { lo0 { unit logical-unit-number { family iso { address address; } } } type-fpc/pic/port { unit logical-unit-number { family iso; } } } protocols { isis { interface all; } }
For more information about configuring OSPF and IS-IS, see the OSPF User Guide and IS-IS User Guide.