Iewb-Sp-Vol1 v1 00 ENTIREWORKBOOK

CCIE Service Provider Lab Workbook Volume I
Version 1.0
Copyright Information
Copyright 2003 - 2010 Internetwork Expert, Inc. All rights reserved.
The following publication, CCIE Service Provider Lab Workbook Volume I, was developed by Internetwork Expert, Inc. All rights reserved. No part of this publication may
be reproduced or distributed in any form or by any means without the prior written
permission of Internetwork Expert, Inc.
Cisco, Cisco Systems, CCIE, and Cisco Certified Internetwork Expert, are registered
trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain countries.
All other products and company names are the trademarks, registered trademarks, and service
marks of the respective owners. Throughout this manual, Internetwork Expert, Inc. has used its
best efforts to distinguish proprietary trademarks from descriptive names by following the
capitalization styles used by the manufacturer.
Copyright 2010 Internetwork Expert
www.INE.com
-i-
Version 1.0
Disclaimer
The following publication, CCIE Service Provider Lab Workbook Volume I, is designed to
assist candidates in the preparation for Cisco Systems CCIE Routing & Switching Lab exam.
While every effort has been made to ensure that all material is as complete and accurate as
possible, the enclosed material is presented on an as is basis. Neither the authors nor
Internetwork Expert, Inc. assume any liability or responsibility to any person or entity with
respect to loss or damages incurred from the information contained in this workbook.
This workbook was developed by Internetwork Expert, Inc. and is an original work of the
aforementioned authors. Any similarities between material presented in this workbook and
TM
actual CCIE lab material is completely coincidental.
www.INE.com
- ii -
Version 1.0
MPLS
Basic MPLS.......................................................................................................2
MPLS VPNs with Static Routing......................................................................10
MPLS VPNs with RIPv2 ..................................................................................18
MPLS VPNs with OSPF ..................................................................................28
MPLS VPNs with EIGRP .................................................................................38
MPLS VPNs with EBGP ..................................................................................48
Central Services MPLS VPNs .........................................................................58
MPLS VPNs with Extranets .............................................................................68
MPLS VPNs and VRF Export Map ..................................................................78
MPLS VPNs with BGP Site-Of-Origin..............................................................88
MPLS VPNs with OSPF and Sham-Links .......................................................98
MPLS VPNs with OSPF and Domain-ID .......................................................106
MPLS VPNs with VPNv4 Route Reflection ...................................................114
Inter-AS MPLS VPNs with Back-to-Back VRF...............................................130
Inter-AS MPLS VPNs with MP-eBGP for VPNv4 Exchange..........................144
Inter-AS MPLS VPNs with Multihop MP-eBGP for VPNv4 Exchange ...........158
Carrier Supporting Carrier IP Only Customer Carrier .................................170
Carrier Supporting Carrier MPLS Enabled Customer Carrier .....................180
Carrier Supporting Carrier Hierarchical MPLS VPNs .................................190
VRF-Lite ........................................................................................................204
Controlling MPLS Label Distribution..............................................................216
MPLS Traffic Engineering Dynamic PE to PE Tunnels ..............................226
MPLS Traffic Engineering Explicit PE to PE Tunnels .................................236
MPLS Traffic Engineering Unequal Cost Load Balancing ..........................246
MPLS QoS ....................................................................................................258
Multicast over MPLS VPNs ...........................................................................272
L2 VPNs: AToM.............................................................................................282
L2 VPNs: Inter-AS AToM ..............................................................................288
L2 VPNs: IP Interworking ..............................................................................296
L2 VPNs: Ethernet Interworking ....................................................................304
L2 VPNs: L2TPv3..........................................................................................312
IP Multicast
PIM Dense Mode...........................................................................................320
PIM Sparse Mode..........................................................................................330
Multicast RPF Failure ....................................................................................338
Auto-RP.........................................................................................................346
Auto-RP Multiple Candidate RPs ...............................................................354
Auto-RP Filtering Candidate RPs ...............................................................362
Auto-RP Listener ...........................................................................................368
PIM NBMA Mode...........................................................................................376
Auto-RP and Default RP Placement..............................................................384
Bootstrap Router ...........................................................................................392
Multicast Source Distribution Protocol (MSDP) .............................................398
Anycast RP....................................................................................................406
www.INE.com
- iii -
Version 1.0
Multicast BGP................................................................................................414
www.INE.com
- iv -
Version 1.0
www.INE.com
-1-
Version 1.0
Basic MPLS
Objective: Configure MPLS on R1, R2, R3, and R4 to provide transit between
AS 100 and AS 200.
Fa0/3
BGP
AS 100
BGP
AS 1
10.1.37.0/24
.7
SW1
E0/0
R3
.3
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
Fa0/0
.2
OSPF
Area 0
R2
S0/0.1
.2
204
Frame Relay
150.1.24.0/24
BGP
AS 200
.5
R5
10.1.45.0/24 VLAN 45
402
.4
S0/0.1
.4
E0/1
R4
BGP
AS 1
E0/0
www.INE.com
-2-
Version 1.0
Directions
Build the logical topology per the diagram

Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS using LDP on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R3 should peer with SW1 via EBGP
R4 should peer with R5 via EBGP
Create the Loopback 10.1.5.5/24 on R5 and advertise it into BGP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP
Final Configuration
R1#
ip cef
!
mpls label protocol ldp
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
www.INE.com
-3-
Version 1.0
R3#
ip cef
!
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.37.7 remote-as 100
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
R4#
ip cef
!
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 1
no auto-summary
www.INE.com
-4-
Version 1.0
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
router bgp 200
network 10.1.5.0 mask 255.255.255.0
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
switchport access vlan 12
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
router bgp 100
network 10.1.7.0 mask 255.255.255.0
SW2#
Verification
SW1#ping 10.1.5.5 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.5.5, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 88/88/92 ms
www.INE.com
-5-
Version 1.0
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
O
O
C
C
150.1.24.0/24 [110/65] via 150.1.12.2, 00:11:41, FastEthernet0/0
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.2, 00:11:41, FastEthernet0/0

150.1.13.3, 00:11:41, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0
R2#show ip route
<output omitted>
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 00:12:01, Serial0/0.1
O
O
150.1.12.0/24 is directly connected, FastEthernet0/0
R3#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.7.0 [20/0] via 10.1.37.7, 00:10:18
B
10.1.5.0 [200/0] via 150.1.4.4, 00:10:35
C
10.1.37.0 is directly connected, Ethernet0/0
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:12:29, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:12:29, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:12:29, Serial1/2
R4#show ip route
<output omitted>
B
10.1.7.0 [200/0] via 150.1.3.3, 00:10:36
B
10.1.5.0 [20/0] via 10.1.45.5, 00:10:58
C
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:12:49, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:12:49, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:12:49, Serial0/0.1
R5#show ip route
<output omitted>
B
10.1.7.0 [20/0] via 10.1.45.4, 00:10:49
C
10.1.5.0 is directly connected, Loopback0
C
www.INE.com
-6-
Version 1.0
SW1#show ip route
<output omitted>
C
B
10.1.5.0 [20/0] via 10.1.37.3, 00:11:14
C
10.1.37.0 is directly connected, FastEthernet0/3
R1#show mpls ldp neighbor
Peer LDP Ident: 150.1.24.2:0; Local LDP Ident 150.1.13.1:0
TCP connection: 150.1.24.2.11005 - 150.1.13.1.646
State: Oper; Msgs sent/rcvd: 12/12; Downstream
Up time: 00:03:53
LDP discovery sources:
FastEthernet0/0, Src IP addr: 150.1.12.2
Addresses bound to peer LDP Ident:
150.1.12.2
150.1.24.2
TCP connection: 150.1.3.3.646 - 150.1.13.1.11003
Up time: 00:02:43
Serial0/1, Src IP addr: 150.1.13.3
10.1.37.3
150.1.13.3
150.1.3.3
TCP connection: 150.1.13.1.646 - 150.1.24.2.11005
Up time: 00:04:09
FastEthernet0/0, Src IP addr: 150.1.12.1
150.1.12.1
150.1.13.1
TCP connection: 150.1.4.4.646 - 150.1.24.2.11007
Up time: 00:03:04
Serial0/0.1, Src IP addr: 150.1.24.4
150.1.24.4
10.1.45.4
150.1.4.4
TCP connection: 150.1.13.1.11003 - 150.1.3.3.646
Up time: 00:03:31
Serial1/2, Src IP addr: 150.1.13.1
150.1.12.1
150.1.13.1
www.INE.com
-7-
Version 1.0

TCP connection: 150.1.24.2.11007 - 150.1.4.4.646
Up time: 00:03:54
Serial0/0.1, Src IP addr: 150.1.24.2
150.1.12.2
150.1.24.2
R1#show mpls forwarding-table
Local
tag
16
17
18
Outgoing
tag or VC
Pop tag
16
Pop tag
Prefix
or Tunnel Id
150.1.24.0/24
150.1.4.4/32
150.1.3.3/32
Bytes tag
switched
0
4318
753
Outgoing
interface
Fa0/0
Fa0/0
Se0/1
Next Hop
Bytes tag
switched
797
4318
0
Outgoing
interface
Se0/0.1
Fa0/0
Fa0/0
Next Hop
Bytes tag
switched
0
0
0
Outgoing
interface
Se1/2
Se1/2
Se1/2
Next Hop
Bytes tag
switched
0
0
0
Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
150.1.12.2
150.1.12.2
point2point

Local
tag
16
17
18
Outgoing
tag or VC
Pop tag
18
Pop tag
Prefix
or Tunnel Id
150.1.4.4/32
150.1.3.3/32
150.1.13.0/24
point2point
150.1.12.1
150.1.12.1

Local
tag
16
17
18
Outgoing
tag or VC
16
17
Pop tag
Prefix
or Tunnel Id
150.1.24.0/24
150.1.4.4/32
150.1.12.0/24
point2point
point2point
point2point

Local
tag
16
17
18
Outgoing
tag or VC
17
18
Pop tag
Prefix
or Tunnel Id
150.1.3.3/32
150.1.13.0/24
150.1.12.0/24
point2point
point2point
point2point
www.INE.com
-8-
Version 1.0
www.INE.com
-9-
Version 1.0
MPLS VPNs with Static Routing

Objective: Configure MPLS VPNs between R5 & SW1 and R6 & SW2 using
static routing between the PE-CE.
Fa0/3
Fa0/3
.8
BGP
AS 1
.7
SW1
SW2
E0/1
E0/0
R3
.3
.3
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
Fa0/0
.2
OSPF
Area 0
R2
S0/0.1
.2
204
Frame Relay
150.1.24.0/24
402
.4
S0/0.1
.4
.4
E0/1
.5
R5
R4
BGP
AS 1
E0/0
.6
E0/1
G0/0
R6
www.INE.com
- 10 -
Version 1.0
Directions

Configure MPLS on the interfaces between R1, R2, R3, and R4
Configure default static routes on R5 and R6 pointing to R4
Configure default static routes on SW1 and SW2 pointing to R3
Create the Loopback 10.1.5.5/24 on R5
Create the Loopback 10.1.6.6/24 on R6
Create the Loopback 10.1.7.7/24 on SW1
Create the Loopback 10.1.8.8/24 on SW2
R5 and SW1 should be in VRF R5-SW1
Use the route distinguisher and route target 1:57 for this VRF
Configure static routes on R3 to reach the networks of SW1 and SW2
Configure static routes on R4 to reach the networks of R5 and R6
Redistribute where necessary to gain connectivity within the VPNs
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
www.INE.com
- 11 -
Version 1.0

ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip vrf forwarding R5-SW1
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute connected
redistribute static
exit-address-family
!
www.INE.com
- 12 -
Version 1.0

redistribute static
exit-address-family
!
ip route vrf R5-SW1 10.1.7.0 255.255.255.0 10.1.37.7
ip route vrf R6-SW2 10.1.8.0 255.255.255.0 10.1.38.8
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 1
!
exit-address-family
!
www.INE.com
- 13 -
Version 1.0

redistribute static
exit-address-family
!
redistribute static
exit-address-family
!
ip route vrf R5-SW1 10.1.5.0 255.255.255.0 10.1.45.5
ip route vrf R6-SW2 10.1.6.0 255.255.255.0 10.1.46.6
R5#
ip cef
!
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 10.1.45.4
R6#
ip cef
!
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 10.1.46.4
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
ip route 0.0.0.0 0.0.0.0 10.1.37.3
www.INE.com
- 14 -
Version 1.0
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
!
!
ip route 0.0.0.0 0.0.0.0 10.1.38.3
Verification
R1#show ip route
<output omitted>
O
O
O
C
C
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.12.2, 00:13:36, FastEthernet0/0

150.1.13.3, 00:13:36, Serial0/1
R2#show ip route
<output omitted>
C
O
150.1.4.4/32 [110/65] via 150.1.24.4, 00:13:57, Serial0/0.1
O
O
R3#show ip route vrf *

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:11:38, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:11:38, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:11:38, Serial1/2
Routing Table: R5-SW1
<output omitted>
S
10.1.7.0 [1/0] via 10.1.37.7
B
10.1.5.0 [200/0] via 150.1.4.4, 00:05:28
B
10.1.45.0 [200/0] via 150.1.4.4, 00:05:28
C
www.INE.com
- 15 -
Version 1.0

<output omitted>
S
10.1.8.0 [1/0] via 10.1.38.8
B
10.1.6.0 [200/0] via 150.1.4.4, 00:05:28
B
10.1.46.0 [200/0] via 150.1.4.4, 00:05:28
C
<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:11:57, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:11:57, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:11:57, Serial0/0.1
<output omitted>
B
10.1.7.0 [200/0] via 150.1.3.3, 00:06:21
S
10.1.5.0 [1/0] via 10.1.45.5
C
B
10.1.37.0 [200/0] via 150.1.3.3, 00:06:21
<output omitted>
B
10.1.8.0 [200/0] via 150.1.3.3, 00:06:07
S
10.1.6.0 [1/0] via 10.1.46.6
C
B
10.1.38.0 [200/0] via 150.1.3.3, 00:06:07
R5#show ip route
<output omitted>
Gateway of last resort is 10.1.45.4 to network 0.0.0.0
C
C
S*

0.0.0.0/0 [1/0] via 10.1.45.4
R6#show ip route
<output omitted>
C
C
S*

10.1.46.0 is directly connected, GigabitEthernet0/0
0.0.0.0/0 [1/0] via 10.1.46.4
www.INE.com
- 16 -
Version 1.0
SW1#show ip route
<output omitted>
C
C
S*

0.0.0.0/0 [1/0] via 10.1.46.4
SW2#show ip route
<output omitted>
C
C
S*

0.0.0.0/0 [1/0] via 10.1.38.3
R3#show ip bgp vpnv4 all

BGP table version is 137, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*>i10.1.5.0/24
150.1.4.4
0
100
0 ?
*> 10.1.7.0/24
10.1.37.7
0
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
*>i10.1.6.0/24
150.1.4.4
0
100
0 ?
*> 10.1.8.0/24
10.1.38.8
0
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
Network
Next Hop
*> 10.1.5.0/24
10.1.45.5
0
32768 ?
*>i10.1.7.0/24
150.1.3.3
0
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.6.0/24
10.1.46.6
0
32768 ?
*>i10.1.8.0/24
150.1.3.3
0
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?
www.INE.com
- 17 -
Version 1.0
MPLS VPNs with RIPv2

RIPv2 as the PE-CE routing protocol.
Fa0/3
Fa0/3
E0/1
E0/0
R3
.3
.3
10.1.38.0/24
RIPv2
SW2
.8
BGP
AS 1
10.1.37.0/24
.7
SW1
RIPv2
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
Fa0/0
.2
OSPF
Area 0
R2
S0/0.1
.2
204
Frame Relay
150.1.24.0/24
.5
R5
.4
S0/0.1
.4
.4
E0/1
R4
BGP
AS 1
E0/0
E0/1
10.1.46.0/24 VLAN 46
RIPv2
10.1.45.0/24 VLAN 45
402
RIPv2
.6
G0/0
R6
www.INE.com
- 18 -
Version 1.0
Directions

Configure RIPv2 on the Ethernet interfaces of R5, R6, SW1, and SW2
Create the Loopback 10.1.5.5/24 on R5 and advertise it into RIPv2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIPv2
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R4 & R5
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
log-adjacency-changes
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
www.INE.com
- 19 -
Version 1.0

ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
www.INE.com
- 20 -
Version 1.0
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
www.INE.com
- 21 -
Version 1.0
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
ip address 10.1.46.6 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
www.INE.com
- 22 -
Version 1.0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
www.INE.com
- 23 -
Version 1.0
Verification
R1#show ip route
<output omitted>
O
O
O
C
C
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.12.2, 02:27:34, FastEthernet0/0

150.1.13.3, 02:27:34, Serial0/1
R2#show ip route
<output omitted>
C
O
150.1.4.4/32 [110/65] via 150.1.24.4, 02:28:04, Serial0/0.1
O
O

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 01:19:54, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 01:19:54, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 01:19:54, Serial1/2
<output omitted>
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:03, Ethernet0/0
B
10.1.5.0 [200/1] via 150.1.4.4, 01:34:21
B
10.1.45.0 [200/0] via 150.1.4.4, 01:34:21
C
<output omitted>
R
10.1.8.0 [120/1] via 10.1.38.8, 00:00:25, Ethernet0/1
B
10.1.6.0 [200/1] via 150.1.4.4, 01:34:07
B
10.1.46.0 [200/0] via 150.1.4.4, 01:34:07
C
www.INE.com
- 24 -
Version 1.0

<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 02:28:41, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 02:28:41, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 02:28:41, Serial0/0.1
<output omitted>
B
10.1.7.0 [200/1] via 150.1.3.3, 01:35:32
R
10.1.5.0 [120/1] via 10.1.45.5, 00:00:12, Ethernet0/1
C
B
10.1.37.0 [200/0] via 150.1.3.3, 01:35:32
<output omitted>
B
10.1.8.0 [200/1] via 150.1.3.3, 00:04:46
R
10.1.6.0 [120/1] via 10.1.46.6, 00:00:21, Ethernet0/0
C
B
10.1.38.0 [200/0] via 150.1.3.3, 00:04:46
R5#show ip route
<output omitted>
R
10.1.7.0 [120/2] via 10.1.45.4, 00:00:08, Ethernet0/1
C
C
R
10.1.37.0 [120/2] via 10.1.45.4, 00:00:08, Ethernet0/1
R6#show ip route
<output omitted>
R
10.1.8.0 [120/2] via 10.1.46.4, 00:00:08, GigabitEthernet0/0
C
C
R
SW1#show ip route
<output omitted>
C
R
10.1.5.0 [120/2] via 10.1.37.3, 00:00:01, FastEthernet0/3
R
C
SW2#show ip route
<output omitted>
C
R
R
C
www.INE.com
- 25 -
Version 1.0

Network
Next Hop
*>i10.1.5.0/24
150.1.4.4
1
100
0 ?
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
*>i10.1.6.0/24
150.1.4.4
1
100
0 ?
*> 10.1.8.0/24
10.1.38.8
1
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
Network
Next Hop
*> 10.1.5.0/24
10.1.45.5
1
32768 ?
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.6.0/24
10.1.46.6
1
32768 ?
*>i10.1.8.0/24
150.1.3.3
1
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?
www.INE.com
- 26 -
Version 1.0
www.INE.com
- 27 -
Version 1.0
MPLS VPNs with OSPF

OSPF as the PE-CE routing protocol.
www.INE.com
- 28 -
Version 1.0
Directions

Enable OSPF area 0 on the Ethernet interfaces of R5, R6, SW1, and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into OSPF
Run OSPF as the PE-CE protocol between R3 & SW1 using process-id 57
Run OSPF as the PE-CE protocol between R4 & R5 using process-id 57
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
www.INE.com
- 29 -
Version 1.0
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 68 vrf R6-SW2
redistribute bgp 1 subnets
network 10.1.38.3 0.0.0.0 area 0
!
network 10.1.37.3 0.0.0.0 area 0
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
!
www.INE.com
- 30 -
Version 1.0
exit-address-family
!
redistribute ospf 68 vrf R6-SW2
exit-address-family
!
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 10.1.45.4 255.255.255.0
!
network 10.1.45.4 0.0.0.0 area 0
!
network 10.1.46.4 0.0.0.0 area 0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
www.INE.com
- 31 -
Version 1.0
!
router bgp 1
!
exit-address-family
!
exit-address-family
!
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
router ospf 1
network 10.1.5.5 0.0.0.0 area 0
network 10.1.45.5 0.0.0.0 area 0
R6#
ip cef
!
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
ip address 10.1.46.6 255.255.255.0
!
router ospf 1
network 10.1.6.6 0.0.0.0 area 0
network 10.1.46.6 0.0.0.0 area 0
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
www.INE.com
- 32 -
Version 1.0
ip address 10.1.37.7 255.255.255.0

!
!
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
!
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.38.8 0.0.0.0 area 0
Verification
R1#show ip route
<output omitted>
O
O
O
C
C
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.12.2, 00:13:36, FastEthernet0/0

150.1.13.3, 00:13:36, Serial0/1
R2#show ip route
<output omitted>
C
O
150.1.4.4/32 [110/65] via 150.1.24.4, 00:13:57, Serial0/0.1
O
O
www.INE.com
- 33 -
Version 1.0

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:21:53, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:21:53, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:21:53, Serial1/2
<output omitted>
O
10.1.7.7/32 [110/11] via 10.1.37.7, 00:11:28, Ethernet0/0
B
10.1.5.5/32 [200/11] via 150.1.4.4, 00:09:44
B
10.1.45.0/24 [200/0] via 150.1.4.4, 00:10:29
C
10.1.37.0/24 is directly connected, Ethernet0/0
<output omitted>
O
10.1.8.8/32 [110/11] via 10.1.38.8, 00:11:28, Ethernet0/1
B
10.1.6.6/32 [200/11] via 150.1.4.4, 00:09:29
B
10.1.46.0/24 [200/0] via 150.1.4.4, 00:10:33
C
<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:22:28, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:22:28, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:22:28, Serial0/0.1
<output omitted>
B
10.1.7.7/32 [200/11] via 150.1.3.3, 00:11:13
O
10.1.5.5/32 [110/11] via 10.1.45.5, 00:10:28, Ethernet0/1
C
B
10.1.37.0/24 [200/0] via 150.1.3.3, 00:11:13
<output omitted>
B
10.1.8.8/32 [200/11] via 150.1.3.3, 00:11:13
O
10.1.6.6/32 [110/11] via 10.1.46.6, 00:10:22, Ethernet0/0
C
B
10.1.38.0/24 [200/0] via 150.1.3.3, 00:11:13
R5#show ip route
<output omitted>
O IA
10.1.7.7/32 [110/21] via 10.1.45.4, 00:10:44, Ethernet0/1
C
C
www.INE.com
- 34 -

O IA
Version 1.0
10.1.37.0/24 [110/11] via 10.1.45.4, 00:10:44, Ethernet0/1
R6#show ip route
<output omitted>
O IA
C
C
O IA
10.1.8.8/32 [110/12] via 10.1.46.4, 00:12:05, GigabitEthernet0/0

10.1.46.0/24 is directly connected, GigabitEthernet0/0
SW1#show ip route
<output omitted>
O IA
C
O IA
C
SW1#show ip route
<output omitted>
O IA
C
O IA
C
Network
Next Hop
*>i10.1.5.5/32
150.1.4.4
11
100
0 ?
*> 10.1.7.7/32
10.1.37.7
11
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
*>i10.1.6.6/32
150.1.4.4
11
100
0 ?
*> 10.1.8.8/32
10.1.38.8
11
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
www.INE.com
- 35 -
Version 1.0

Network
Next Hop
*> 10.1.5.5/32
10.1.45.5
11
32768 ?
*>i10.1.7.7/32
150.1.3.3
11
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.6.6/32
10.1.46.6
11
32768 ?
*>i10.1.8.8/32
150.1.3.3
11
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?
www.INE.com
- 36 -
Version 1.0
www.INE.com
- 37 -
Version 1.0
MPLS VPNs with EIGRP

EIGRP between the PE-CE.
www.INE.com
- 38 -
Version 1.0
Directions

Enable EIGRP on R5, R6, SW1, and SW2 per the diagram
Create the Loopback 10.1.5.5/24 on R5 and advertise it into EIGRP
Create the Loopback 10.1.6.6/24 on R6 and advertise it into EIGRP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into EIGRP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into EIGRP
Run EIGRP as the PE-CE protocol between R3 & SW1 using AS 57
Run EIGRP as the PE-CE protocol between R3 & SW2 using AS 68
Run EIGRP as the PE-CE protocol between R4 & R5 using AS 57
Run EIGRP as the PE-CE protocol between R4 & R6 using AS 68
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
www.INE.com
- 39 -
Version 1.0

ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router eigrp 1
!
redistribute bgp 1 metric 1 1 1 1 1
network 10.1.38.3 0.0.0.0
no auto-summary
autonomous-system 68
exit-address-family
!
network 10.1.37.3 0.0.0.0
no auto-summary
exit-address-family
!
www.INE.com
- 40 -
Version 1.0
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
!
exit-address-family
!
redistribute eigrp 68
exit-address-family
!
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 10.1.45.4 255.255.255.0
!
www.INE.com
- 41 -
Version 1.0
router eigrp 1
!
network 10.1.46.4 0.0.0.0
no auto-summary
exit-address-family
!
network 10.1.37.3 0.0.0.0
network 10.1.45.4 0.0.0.0
no auto-summary
exit-address-family
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 1
!
exit-address-family
!
exit-address-family
!
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
router eigrp 57
network 10.0.0.0
no auto-summary
www.INE.com
- 42 -
Version 1.0
R6#
ip cef
!
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
ip address 10.1.46.6 255.255.255.0
!
router eigrp 68
network 10.0.0.0
no auto-summary
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
router eigrp 57
network 10.0.0.0
no auto-summary
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
!
!
router eigrp 68
network 10.0.0.0
no auto-summary
www.INE.com
- 43 -
Version 1.0
Verification
R1#show ip route
<output omitted>
O
O
O
C
C
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.12.2, 00:13:36, FastEthernet0/0

150.1.13.3, 00:13:36, Serial0/1
R2#show ip route
<output omitted>
C
O
150.1.4.4/32 [110/65] via 150.1.24.4, 00:13:57, Serial0/0.1
O
O

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 01:54:32, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 01:54:32, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 01:54:32, Serial1/2
D
10.1.7.0 [90/409600] via 10.1.37.7, 00:24:46, Ethernet0/0
B
10.1.5.0 [200/409600] via 150.1.4.4, 00:16:18
B
10.1.45.0 [200/0] via 150.1.4.4, 00:16:18
C
D
10.1.8.0 [90/409600] via 10.1.38.8, 00:23:51, Ethernet0/1
B
10.1.6.0 [200/409600] via 150.1.4.4, 00:16:18
B
10.1.46.0 [200/0] via 150.1.4.4, 00:16:18
C
<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 01:55:31, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 01:55:31, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 01:55:31, Serial0/0.1
www.INE.com
- 44 -
Version 1.0

B
10.1.7.0 [200/409600] via 150.1.3.3, 00:14:53
D
10.1.5.0 [90/409600] via 10.1.45.5, 00:18:45, Ethernet0/1
C
B
10.1.37.0 [200/0] via 150.1.3.3, 00:14:53
B
10.1.8.0 [200/409600] via 150.1.3.3, 00:14:53
D
10.1.6.0 [90/409600] via 10.1.46.6, 00:18:53, Ethernet0/0
C
B
10.1.38.0 [200/0] via 150.1.3.3, 00:14:53
R5#show ip route
<output omitted>
D
10.1.7.0 [90/435200] via 10.1.45.4, 00:15:14, Ethernet0/1
C
C
D
10.1.37.0 [90/307200] via 10.1.45.4, 00:15:14, Ethernet0/1
R6#show ip route
<output omitted>
D
C
C
D

SW1#show ip route
<output omitted>
C
D
D
C
SW2#show ip route
<output omitted>
C
D
D
C
www.INE.com
- 45 -
Version 1.0

Network
Next Hop
*>i10.1.5.0/24
150.1.4.4
409600
100
0 ?
*> 10.1.7.0/24
10.1.37.7
409600
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
*>i10.1.6.0/24
150.1.4.4
409600
100
0 ?
*> 10.1.8.0/24
10.1.38.8
409600
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
Network
Next Hop
*> 10.1.5.0/24
10.1.45.5
409600
32768 ?
*>i10.1.7.0/24
150.1.3.3
409600
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.6.0/24
10.1.46.6
409600
32768 ?
*>i10.1.8.0/24
150.1.3.3
409600
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?
www.INE.com
- 46 -
Version 1.0
www.INE.com
- 47 -
Version 1.0
MPLS VPNs with EBGP

EBGP between the PE-CE.
www.INE.com
- 48 -
Version 1.0
Directionsaree

Configure BGP on R5, R6, SW1, and SW2 per the diagram
R3 and SW1 should peer via EBGP
R4 and R5 should peer via EBGP
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
www.INE.com
- 49 -
Version 1.0
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router bgp 1
!
exit-address-family
!
neighbor 10.1.38.8 as-override
exit-address-family
!
www.INE.com
- 50 -
Version 1.0

exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 10.1.45.4 255.255.255.0
!
router bgp 1
!
exit-address-family
!
exit-address-family
!
www.INE.com
- 51 -
Version 1.0

exit-address-family
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
router bgp 100
network 10.1.5.0 mask 255.255.255.0
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
ip address 10.1.46.6 255.255.255.0
!
router bgp 200
network 10.1.6.0 mask 255.255.255.0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
router bgp 100
network 10.1.7.0 mask 255.255.255.0
SW2#
ip routing
www.INE.com
- 52 -
Version 1.0
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
!
!
router bgp 200
network 10.1.8.0 mask 255.255.255.0
Verification
R1#show ip route
<output omitted>
O
O
O
C
C
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.12.2, 02:27:34, FastEthernet0/0

150.1.13.3, 02:27:34, Serial0/1
R2#show ip route
<output omitted>
C
O
150.1.4.4/32 [110/65] via 150.1.24.4, 02:28:04, Serial0/0.1
O
O

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:13:25, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:13:25, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:13:25, Serial1/2
<output omitted>
B
10.1.7.0 [20/0] via 10.1.37.7, 00:06:27
B
10.1.5.0 [200/0] via 150.1.4.4, 00:10:28
B
10.1.45.0 [200/0] via 150.1.4.4, 00:10:43
C
www.INE.com
- 53 -
Version 1.0

<output omitted>
B
10.1.8.0 [20/0] via 10.1.38.8, 00:05:57
B
10.1.6.0 [200/0] via 150.1.4.4, 00:05:13
B
10.1.46.0 [200/0] via 150.1.4.4, 00:09:12
C
<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:13:58, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:13:58, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:13:58, Serial0/0.1
<output omitted>
B
10.1.7.0 [200/0] via 150.1.3.3, 00:06:41
B
10.1.5.0 [20/0] via 10.1.45.5, 00:05:25
C
B
10.1.37.0 [200/0] via 150.1.3.3, 00:08:41
<output omitted>
B
10.1.8.0 [200/0] via 150.1.3.3, 00:06:11
B
10.1.6.0 [20/0] via 10.1.46.6, 00:05:41
C
B
10.1.38.0 [200/0] via 150.1.3.3, 00:08:26
R5#show ip route
<output omitted>
B
10.1.7.0 [20/0] via 10.1.45.4, 00:05:57
C
C
B
10.1.37.0 [20/0] via 10.1.45.4, 00:05:57
R6#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.46.4, 00:06:30
C
C
B
10.1.38.0 [20/0] via 10.1.46.4, 00:06:30
www.INE.com
- 54 -
Version 1.0
SW1#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.46.4, 00:06:30
C
C
B
10.1.38.0 [20/0] via 10.1.46.4, 00:06:30
SW2#show ip route
<output omitted>
C
B
10.1.6.0 [20/0] via 10.1.38.3, 00:08:47
B
10.1.46.0 [20/0] via 10.1.38.3, 00:08:47
C
Network
Next Hop
*>i10.1.5.0/24
150.1.4.4
0
100
0 100 i
*> 10.1.7.0/24
10.1.37.7
0
0 100 i
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
*>i10.1.6.0/24
150.1.4.4
0
100
0 200 i
*> 10.1.8.0/24
10.1.38.8
0
0 200 i
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
Network
Next Hop
*> 10.1.5.0/24
10.1.45.5
0
0 100 i
*>i10.1.7.0/24
150.1.3.3
0
100
0 100 i
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.6.0/24
10.1.46.6
0
0 200 i
*>i10.1.8.0/24
150.1.3.3
0
100
0 200 i
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?
www.INE.com
- 55 -
Version 1.0
R5#show ip bgp
*>
*>
*>
r>
Network
10.1.5.0/24
10.1.7.0/24
10.1.37.0/24
10.1.45.0/24
Next Hop
0.0.0.0
10.1.45.4
10.1.45.4
10.1.45.4

0
32768 i
0 1 1 i
0 1 ?
0
0 1 ?
R6#show ip bgp
*>
*>
*>
r>
Network
10.1.6.0/24
10.1.8.0/24
10.1.38.0/24
10.1.46.0/24
Next Hop
0.0.0.0
10.1.46.4
10.1.46.4
10.1.46.4

0
32768 i
0 1 1 i
0 1 ?
0
0 1 ?
SW1#show ip bgp
*>
*>
r>
*>
Network
10.1.5.0/24
10.1.7.0/24
10.1.37.0/24
10.1.45.0/24
Next Hop
10.1.37.3
0.0.0.0
10.1.37.3
10.1.37.3
Metric LocPrf Weight

0
0
32768
0
0
0
Path
1 1 i
i
1 ?
1 ?
SW2#show ip bgp
*>
*>
r>
*>
Network
10.1.6.0/24
10.1.8.0/24
10.1.38.0/24
10.1.46.0/24
Next Hop
10.1.38.3
0.0.0.0
10.1.38.3
10.1.38.3

0
0
32768
0
0
0
Path
1 1 i
i
1 ?
1 ?
www.INE.com
- 56 -
Version 1.0
www.INE.com
- 57 -
Version 1.0
Central Services MPLS VPNs

Objective: Configure MPLS VPNs in such a way that R6, SW1, and SW2 have
access to R5s networks but do not have access to any of each
others networks.
Fa0/3
Fa0/3
E0/1
E0/0
R3
.3
.3
10.1.38.0/24
RIPv2
SW2
.8
BGP
AS 1
10.1.37.0/24
.7
SW1
RIPv2
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
Fa0/0
.2
OSPF
Area 0
R2
S0/0.1
.2
204
Frame Relay
150.1.24.0/24
.5
R5
.4
S0/0.1
.4
.4
E0/1
R4
BGP
AS 1
E0/0
E0/1
10.1.46.0/24 VLAN 46
RIPv2
10.1.45.0/24 VLAN 45
402
RIPv2
.6
G0/0
R6
www.INE.com
- 58 -
Version 1.0
Directions

R5 should be in VRF R5
Use the route distinguisher and export route target 1:5 for this VRF
SW1 should be in VRF SW1
Run RIPv2 as the PE-CE protocol on R3 and R4
Redistribute where necessary
Bidirectional connectivity should be established between the Loopback of
R5 and the Loopbacks of R6, SW1, and SW2
R6, SW1, and SW2 should not have connectivity to each other
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
www.INE.com
- 59 -
Version 1.0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf SW1
rd 1:7
!
ip vrf SW2
rd 1:8
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip vrf forwarding SW1
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
www.INE.com
- 60 -
Version 1.0
router rip
!
address-family ipv4 vrf SW2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf R5
rd 1:5
!
ip vrf R6
rd 1:6
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip vrf forwarding R6
ip address 10.1.46.4 255.255.255.0
!
www.INE.com
- 61 -
Version 1.0
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf R6
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
www.INE.com
- 62 -
Version 1.0
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
ip address 10.1.46.6 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
www.INE.com
- 63 -
Version 1.0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
Verification
R1#show ip route
<output omitted>
O
O
O
C
C
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.12.2, 19:33:36, FastEthernet0/0

150.1.13.3, 19:33:36, Serial0/1
R2#show ip route
<output omitted>
C
O
150.1.4.4/32 [110/65] via 150.1.24.4, 19:37:48, Serial0/0.1
O
O

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:21:39, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:21:39, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:21:39, Serial1/2
www.INE.com
- 64 -
Version 1.0
Routing Table: SW1

<output omitted>
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:19, Ethernet0/0
B
10.1.5.0 [200/1] via 150.1.4.4, 00:11:30
B
10.1.45.0 [200/0] via 150.1.4.4, 00:12:15
C
Routing Table: SW2
<output omitted>
R
10.1.8.0 [120/1] via 10.1.38.8, 00:00:12, Ethernet0/1
B
10.1.5.0 [200/1] via 150.1.4.4, 00:11:30
B
10.1.45.0 [200/0] via 150.1.4.4, 00:12:15
C
<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:21:58, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:21:58, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:21:58, Serial0/0.1
Routing Table: R5
<output omitted>
B
10.1.8.0 [200/1] via 150.1.3.3, 00:11:32
B
10.1.7.0 [200/1] via 150.1.3.3, 00:11:32
B
10.1.6.0 [20/1] via 10.1.46.6 (R6), 00:11:32, Ethernet0/0
R
10.1.5.0 [120/1] via 10.1.45.5, 00:00:19, Ethernet0/1
B
10.1.46.0 is directly connected, 00:10:47, Ethernet0/0
C
B
10.1.38.0 [200/0] via 150.1.3.3, 00:10:47
B
10.1.37.0 [200/0] via 150.1.3.3, 00:10:47
Routing Table: R6
<output omitted>
R
10.1.6.0 [120/1] via 10.1.46.6, 00:00:16, Ethernet0/0
B
10.1.5.0 [20/1] via 10.1.45.5 (R5), 00:10:47, Ethernet0/1
C
B
R5#show ip route
<output omitted>
R
10.1.8.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
R
10.1.7.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
R
10.1.6.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
C
R
10.1.46.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
C
R
10.1.38.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
R
10.1.37.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
www.INE.com
- 65 -
Version 1.0
R6#show ip route
<output omitted>
C
R
C
R
SW1#show ip route
<output omitted>
C
R
R
C
SW2#show ip route
<output omitted>
C
R
R
C
www.INE.com
- 66 -
Version 1.0
www.INE.com
- 67 -
Version 1.0
MPLS VPNs with Extranets

RIPv2 as the PE-CE routing protocol. R5 and R6 should have
connectivity to each other via an MPLS VPN Extranet.
Fa0/3
Fa0/3
E0/1
E0/0
R3
.3
.3
10.1.38.0/24
RIPv2
SW2
.8
BGP
AS 1
10.1.37.0/24
.7
SW1
RIPv2
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
Fa0/0
.2
OSPF
Area 0
R2
S0/0.1
.2
204
Frame Relay
150.1.24.0/24
.5
R5
.4
S0/0.1
.4
.4
E0/1
R4
BGP
AS 1
E0/0
E0/1
10.1.46.0/24 VLAN 46
RIPv2
10.1.45.0/24 VLAN 45
402
RIPv2
.6
G0/0
R6
www.INE.com
- 68 -
Version 1.0
Directions

R4 should export routes coming from R5 as both 1:5 and 1:57
R4 should export routes coming from R6 as both 1:6 and 1:68
R5 and R6 should have connectivity within their VPNs and to each other
SW1 and SW2 should not have connectivity to each other
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
www.INE.com
- 69 -
Version 1.0
!
interface Serial0/0
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
www.INE.com
- 70 -
Version 1.0
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
www.INE.com
- 71 -
Version 1.0
ip address 10.1.45.4 255.255.255.0

!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
www.INE.com
- 72 -
Version 1.0
ip address 10.1.46.6 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
www.INE.com
- 73 -
Version 1.0
Verification
R1#show ip route
<output omitted>
O
O
O
C
C
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.12.2, 02:27:34, FastEthernet0/0

150.1.13.3, 02:27:34, Serial0/1
R2#show ip route
<output omitted>
C
O
150.1.4.4/32 [110/65] via 150.1.24.4, 02:28:04, Serial0/0.1
O
O

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 01:19:54, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 01:19:54, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 01:19:54, Serial1/2
<output omitted>
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:03, Ethernet0/0
B
10.1.5.0 [200/1] via 150.1.4.4, 01:34:21
B
10.1.45.0 [200/0] via 150.1.4.4, 01:34:21
C
<output omitted>
R
10.1.8.0 [120/1] via 10.1.38.8, 00:00:25, Ethernet0/1
B
10.1.6.0 [200/1] via 150.1.4.4, 01:34:07
B
10.1.46.0 [200/0] via 150.1.4.4, 01:34:07
C
<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:16:29, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:16:29, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:16:29, Serial0/0.1
www.INE.com
- 74 -
Version 1.0

<output omitted>
B
10.1.7.0 [200/1] via 150.1.3.3, 00:12:09
B
10.1.6.0 [20/1] via 10.1.46.6 (R6-SW2), 00:12:00, Ethernet0/0
R
10.1.5.0 [120/1] via 10.1.45.5, 00:00:08, Ethernet0/1
B
C
B
10.1.37.0 [200/0] via 150.1.3.3, 00:12:09
B
10.1.8.0 [200/1] via 150.1.3.3, 00:12:09
R
10.1.6.0 [120/1] via 10.1.46.6, 00:00:17, Ethernet0/0
B
10.1.5.0 [20/1] via 10.1.45.5 (R5-SW1), 00:12:00, Ethernet0/1
C
B
B
10.1.38.0 [200/0] via 150.1.3.3, 00:12:09
R5#show ip route
<output omitted>
R
10.1.7.0 [120/2] via 10.1.45.4, 00:00:08, Ethernet0/1
C
C
R
10.1.37.0 [120/2] via 10.1.45.4, 00:00:08, Ethernet0/1
R6#show ip route
<output omitted>
R
C
C
R
SW1#show ip route
<output omitted>
C
R
R
C
SW2#show ip route
<output omitted>
C
R
R
C
www.INE.com
- 75 -
Version 1.0

Network
Next Hop
*>i10.1.5.0/24
150.1.4.4
1
100
0 ?
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
*>i10.1.6.0/24
150.1.4.4
1
100
0 ?
*> 10.1.8.0/24
10.1.38.8
1
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
Network
Next Hop
*> 10.1.5.0/24
10.1.45.5
1
32768 ?
*> 10.1.6.0/24
10.1.46.6
1
32768 ?
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?
*> 10.1.5.0/24
10.1.45.5
1
32768 ?
*> 10.1.6.0/24
10.1.46.6
1
32768 ?
*>i10.1.8.0/24
150.1.3.3
1
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?
www.INE.com
- 76 -
Version 1.0
www.INE.com
- 77 -
Version 1.0
MPLS VPNs and VRF Export Map

Objective: Configure MPLS VPNs with the export-map feature on R5 in such a
way that SW1 has connectivity to VLAN 5, but not VLAN 55, and
SW2 has connectivity to VLAN 55, but not VLAN 5.
Fa0/3
Fa0/3
E0/1
E0/0
R3
.3
.3
10.1.38.0/24
RIPv2
.8
BGP
AS 1
10.1.37.0/24
.7
SW1
SW2
RIPv2
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
Fa0/0
.2
OSPF
Area 0
R2
S0/0.1
.2
204
Frame Relay
150.1.24.0/24
402
.4
10.1.5.0/24 VLAN 5
E0/0
.5
.4
R4
S0/1 BGP
.5
10.1.45.0/24
R5
E0/1 .5
S0/0.1
AS 1
S0/1
RIPv2
10.1.55.0/24 VLAN 55
www.INE.com
- 78 -
Version 1.0
Directions

Configure RIPv2 on the Ethernet interfaces of R5, SW1, and SW2
Use the route distinguisher 1:5 for this VRF
VLAN 5 should be exported into VRF R5 with the route target 1:7
VLAN 55 should be exported into VRF R5 with the route target 1:8
Run RIPv2 as the PE-CE protocol on R3 and R4
SW1 should have reachability to VLAN 5 but not VLAN 55
SW2 should have reachability to VLAN 55 but not VLAN 5
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
www.INE.com
- 79 -
Version 1.0
interface Serial0/0
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf SW1
rd 1:7
!
ip vrf SW2
rd 1:8
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
www.INE.com
- 80 -
Version 1.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
no auto-summary
no synchronization
exit-address-family
!
redistribute rip
no auto-summary
no synchronization
exit-address-family
R4#
ip cef
!
ip vrf R5
rd 1:5
export map R5_EXPORT
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
www.INE.com
- 81 -
Version 1.0
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
ip prefix-list VLAN5 seq 5 permit 10.1.5.0/24
!
ip prefix-list VLAN55 seq 5 permit 10.1.55.0/24
!
route-map R5_EXPORT permit 10
match ip address prefix-list VLAN5
set extcommunity rt 1:7
!
route-map R5_EXPORT permit 20
match ip address prefix-list VLAN55
set extcommunity rt 1:8
R5#
ip cef
!
ip address 10.1.5.5 255.255.255.0
half-duplex
!
ip address 10.1.55.5 255.255.255.0
!
interface Serial0/1
ip address 10.1.45.5 255.255.255.0
clockrate 64000
!
router rip
version 2
network 10.0.0.0
no auto-summary
www.INE.com
- 82 -
Version 1.0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
Verification
R5#show ip route
<output omitted>
R
10.1.8.0 [120/2] via 10.1.45.4, 00:00:06, Serial0/1
R
10.1.7.0 [120/2] via 10.1.45.4, 00:00:06, Serial0/1
C
C
10.1.45.0 is directly connected, Serial0/1
R
10.1.38.0 [120/2] via 10.1.45.4, 00:00:06, Serial0/1
R
10.1.37.0 [120/2] via 10.1.45.4, 00:00:06, Serial0/1
C
www.INE.com
- 83 -
Version 1.0
SW1#show ip route
<output omitted>
C
R
C
SW1#ping 10.1.5.5 source 10.1.7.7
!!!!!
SW2#show ip route
<output omitted>
C
C
R
SW2#ping 10.1.55.5 source 10.1.8.8
!!!!!

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:06:23, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:06:23, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:06:23, Serial1/2
Routing Table: SW1
<output omitted>
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:20, Ethernet0/0
B
10.1.5.0 [200/1] via 150.1.4.4, 00:05:50
C
Routing Table: SW2
<output omitted>
R
10.1.8.0 [120/1] via 10.1.38.8, 00:00:06, Ethernet0/1
C
B
10.1.55.0 [200/1] via 150.1.4.4, 00:05:50
www.INE.com
- 84 -
Version 1.0

<output omitted>
Network
Next Hop
Route Distinguisher: 1:5
*>i10.1.5.0/24
150.1.4.4
1
100
0 ?
*>i10.1.55.0/24
150.1.4.4
1
100
0 ?
Route Distinguisher: 1:7 (default for vrf SW1)
*>i10.1.5.0/24
150.1.4.4
1
100
0 ?
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
Route Distinguisher: 1:8 (default for vrf SW2)
*> 10.1.8.0/24
10.1.38.8
1
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.55.0/24
150.1.4.4
1
100
0 ?
R3#show ip bgp vpnv4 all 10.1.5.0
BGP routing table entry for 1:5:10.1.5.0/24, version 6
Paths: (1 available, best #1, no table)
Not advertised to any peer
Local
150.1.4.4 (metric 847) from 150.1.4.4 (150.1.4.4)
Origin incomplete, metric 1, localpref 100, valid, internal, best
Extended Community: RT:1:7,
mpls labels in/out nolabel/19
Paths: (1 available, best #1, table SW1)
Local, imported path from 1:5:10.1.5.0/24
150.1.4.4 (metric 847) from 150.1.4.4 (150.1.4.4)
R3#show ip bgp vpnv4 all 10.1.55.0
Paths: (1 available, best #1, no table)
Local
150.1.4.4 (metric 847) from 150.1.4.4 (150.1.4.4)
Paths: (1 available, best #1, table SW2)
Local, imported path from 1:5:10.1.55.0/24
150.1.4.4 (metric 847) from 150.1.4.4 (150.1.4.4)
www.INE.com
- 85 -
Version 1.0

<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:08:42, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:08:42, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:08:42, Serial0/0.1
Routing Table: R5
<output omitted>
B
10.1.8.0 [200/1] via 150.1.3.3, 00:08:00
B
10.1.7.0 [200/1] via 150.1.3.3, 00:08:00
R
10.1.5.0 [120/1] via 10.1.45.5, 00:00:22, Serial0/1
C
10.1.45.0 is directly connected, Serial0/1
B
10.1.38.0 [200/0] via 150.1.3.3, 00:08:00
B
10.1.37.0 [200/0] via 150.1.3.3, 00:08:00
R
10.1.55.0 [120/1] via 10.1.45.5, 00:00:22, Serial0/1
<output omitted>
Network
Next Hop
Route Distinguisher: 1:5 (default for vrf R5)
*> 10.1.5.0/24
10.1.45.5
1
32768 ?
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.8.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.55.0/24
10.1.45.5
1
32768 ?
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*>i10.1.8.0/24
150.1.3.3
1
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
www.INE.com
- 86 -
Version 1.0
www.INE.com
- 87 -
Version 1.0
MPLS VPNs with BGP Site-Of-Origin

Objective: Configure an MPLS VPN to gain connectivity between AS 100 sites
and use BGP SOO to prevent looping between SW1 and SW2.
Fa0/13
SW1
.7
Fa0/3
.8
.7
BGP
AS 1
10.1.37.0/24
SW2
Fa0/3 .8
E0/1
E0/0
BGP
AS 100
Fa0/13
10.1.78.0/24
R3
.3
.3
.3
10.1.38.0/24
S1/2
BGP
AS 100
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
Fa0/0
.2
OSPF
Area 0
R2
S0/0.1
.2
204
Frame Relay
150.1.24.0/24
402
S0/0.1
.4
R4
BGP
AS 1
E0/0
10.1.46.0/24 VLAN 46
.4
BGP
AS 100
.6
G0/0
R6
www.INE.com
- 88 -
Version 1.0
Directions

Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Configure BGP on R6, SW1, and SW2 per the diagram
Configure R6, SW1, and SW2 to advertise all other connected interfaces
into BGP
R6, SW1, and SW2 should be in VRF AS100
Routes that R3 learns from SW1 & SW2 should be tagged with a BGP
Site of Origin of 1:100
Ensure that SW1 and SW2 do not route through R3 to reach each others
networks
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
www.INE.com
- 89 -
Version 1.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf AS100
rd 1:100
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip vrf forwarding AS100
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
!
exit-address-family
!
address-family ipv4 vrf AS100
neighbor 10.1.37.7 route-map SOO in
www.INE.com
- 90 -
Version 1.0

neighbor 10.1.38.8 route-map SOO in
exit-address-family
!
route-map SOO permit 10
set extcommunity soo 1:100
R4#
ip cef
!
ip vrf AS100
rd 1:100
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.46.4 255.255.255.0
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 1
!
exit-address-family
!
exit-address-family
www.INE.com
- 91 -
Version 1.0
R6#
ip cef
!
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
ip address 10.1.46.6 255.255.255.0
!
router bgp 100
network 10.1.6.0 mask 255.255.255.0
network 10.1.46.0 mask 255.255.255.0
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.78.7 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
router bgp 100
network 10.1.7.0 mask 255.255.255.0
network 10.1.37.0 mask 255.255.255.0
network 10.1.78.0 mask 255.255.255.0
www.INE.com
- 92 -
Version 1.0
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
no switchport
ip address 10.1.78.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
router bgp 100
network 10.1.8.0 mask 255.255.255.0
network 10.1.38.0 mask 255.255.255.0
network 10.1.78.0 mask 255.255.255.0
Verification
R1#show ip route
<output omitted>
O
O
O
C
C
150.1.4.4/32 [110/66] via

150.1.3.3/32 [110/65] via
150.1.12.2, 04:20:21, FastEthernet0/0

150.1.13.3, 04:20:21, Serial0/1
R2#show ip route
<output omitted>
C
O
150.1.4.4/32 [110/65] via 150.1.24.4, 04:25:33, Serial0/0.1
O
O

<output omitted>
O
150.1.24.0/24 [110/846] via 150.1.13.1, 01:01:58, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 01:01:58, Serial1/2
C
C
O
150.1.12.0/24 [110/782] via 150.1.13.1, 01:01:58, Serial1/2
www.INE.com
- 93 -
Version 1.0
Routing Table: AS100

<output omitted>
B
10.1.8.0 [20/0] via 10.1.38.8, 00:37:28
B
10.1.7.0 [20/0] via 10.1.37.7, 00:37:28
B
10.1.6.0 [200/0] via 150.1.4.4, 00:38:21
B
10.1.46.0 [200/0] via 150.1.4.4, 00:38:21
C
C
B
10.1.78.0 [20/0] via 10.1.37.7, 00:39:51
<output omitted>
C
C
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:45:34, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:45:34, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:45:34, Serial0/0.1
Routing Table: AS100
<output omitted>
B
10.1.8.0 [200/0] via 150.1.3.3, 00:43:57
B
10.1.7.0 [200/0] via 150.1.3.3, 00:43:57
B
10.1.6.0 [20/0] via 10.1.46.6, 00:39:12
C
B
10.1.38.0 [200/0] via 150.1.3.3, 00:39:57
B
10.1.37.0 [200/0] via 150.1.3.3, 00:40:41
B
10.1.78.0 [200/0] via 150.1.3.3, 00:40:26
R6#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.46.4, 00:39:26
B
10.1.7.0 [20/0] via 10.1.46.4, 00:39:26
C
C
B
10.1.38.0 [20/0] via 10.1.46.4, 00:39:26
B
10.1.37.0 [20/0] via 10.1.46.4, 00:39:26
B
10.1.78.0 [20/0] via 10.1.46.4, 00:39:26
SW1#show ip route
<output omitted>
R
C
B
10.1.6.0 [20/0] via 10.1.37.3, 00:39:23
B
10.1.46.0 [20/0] via 10.1.37.3, 00:39:23
R
C
C
www.INE.com
- 94 -
Version 1.0
SW2#show ip route
<output omitted>
C
R
B
10.1.6.0 [20/0] via 10.1.38.3, 00:39:41
B
10.1.46.0 [20/0] via 10.1.38.3, 00:39:41
C
R
C
Network
Next Hop
Route Distinguisher: 1:100 (default for vrf AS100)
*>i10.1.6.0/24
150.1.4.4
0
100
0 100 i
*> 10.1.7.0/24
10.1.37.7
0
0 100 i
*> 10.1.8.0/24
10.1.38.8
0
0 100 i
r> 10.1.37.0/24
10.1.37.7
0
0 100 i
r> 10.1.38.0/24
10.1.38.8
0
0 100 i
*>i10.1.46.0/24
150.1.4.4
0
100
0 100 i
* 10.1.78.0/24
10.1.38.8
0
0 100 i
*>
10.1.37.7
0
0 100 i
Network
Next Hop
*> 10.1.6.0/24
10.1.46.6
0
0 100 i
*>i10.1.7.0/24
150.1.3.3
0
100
0 100 i
*>i10.1.8.0/24
150.1.3.3
0
100
0 100 i
*>i10.1.37.0/24
150.1.3.3
0
100
0 100 i
*>i10.1.38.0/24
150.1.3.3
0
100
0 100 i
r> 10.1.46.0/24
10.1.46.6
0
0 100 i
*>i10.1.78.0/24
150.1.3.3
0
100
0 100 i
R6#show ip bgp
*>
*>
*>
*>
Network
10.1.6.0/24
10.1.7.0/24
10.1.8.0/24
10.1.37.0/24
Next Hop
0.0.0.0
10.1.46.4
10.1.46.4
10.1.46.4

0
32768 i
0 1 1 i
0 1 1 i
0 1 1 i
www.INE.com
- 95 -

*> 10.1.38.0/24
*> 10.1.46.0/24
*> 10.1.78.0/24
10.1.46.4
0.0.0.0
10.1.46.4
Version 1.0
0 1 1 i
32768 i
0 1 1 i
SW1#show ip bgp
*>
*>
*>
*>
*>
Network
10.1.6.0/24
10.1.7.0/24
10.1.37.0/24
10.1.46.0/24
10.1.78.0/24
Next Hop
10.1.37.3
0.0.0.0
0.0.0.0
10.1.37.3
0.0.0.0

0
0
32768
0
32768
0
0
32768
Path
1 1 i
i
i
1 1 i
i
SW2#show ip bgp
*>
*>
*>
*>
*>
Network
10.1.6.0/24
10.1.8.0/24
10.1.38.0/24
10.1.46.0/24
10.1.78.0/24
Next Hop
10.1.38.3
0.0.0.0
0.0.0.0
10.1.38.3
0.0.0.0

0
0
32768
0
32768
0
0
32768
Path
1 1 i
i
i
1 1 i
i
R3#show ip bgp vpnv4 vrf AS100 10.1.7.0 255.255.255.0

Paths: (1 available, best #1, table AS100)
Advertised to update-groups:
1
100
10.1.37.7 from 10.1.37.7 (10.1.7.7)
Origin IGP, metric 0, localpref 100, valid, external, best
Extended Community: SoO:1:100 RT:1:100,
mpls labels in/out 23/nolabel
R3#show ip bgp vpnv4 vrf AS100 10.1.8.0 255.255.255.0
Paths: (1 available, best #1, table AS100)
Advertised to update-groups:
1
100
10.1.38.8 from 10.1.38.8 (10.1.8.8)
Origin IGP, metric 0, localpref 100, valid, external, best
Extended Community: SoO:1:100 RT:1:100,
mpls labels in/out 24/nolabel
www.INE.com
- 96 -
Version 1.0
www.INE.com
- 97 -
Version 1.0
MPLS VPNs with OSPF and Sham-Links

Objective: Configure an MPLS VPN through AS 1 to connect R6 and SW2. The
backdoor link between R6 and SW2 should only be used if the MPLS
VPN through AS 1 is down.
BGP
AS 1
R3
S1/2
.3
.3
150.1.13.0/24
S0/1
10.1.38.0/24
E0/1
OSPF
Area 0
.8
SW2
Fa0/3
.8
Fa0/6
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
.2
OSPF
Area 0
IS-IS
Level 2
R2
S0/0.1
10.1.68.0/24
Fa0/0
.2
204
Frame Relay
150.1.24.0/24
.6
.4
S0/0.1
.4
R4
BGP
AS 1
OSPF
Area 0
10.1.46.0/24 VLAN 46
402
G0/1
.6
G0/0
R6
E0/0
www.INE.com
- 98 -
Version 1.0
Directions

Configure IS-IS Level 2 on the interfaces between R1, R2, R3, and R4
Use NET addresses in the format 00.0000.0000.000Y.00
Create the Loopback 150.1.3.3/32 on R3 and advertise it into IS-IS
Run OSPF as the PE-CE protocol between R3 & SW2 and R4 & R6
Run OSPF on the Ethernet link between R6 & SW2; this link should have
the maximum OSPF cost supported
Configure a Loopback 10.1.3.3/32 on R3 that is part of VRF R6-SW2
Configure a Loopback 10.1.4.4/32 on R4 that is part of VRF R6-SW2
Configure an OSPF Sham-Link between R3 and R4 using these new
Loopbacks so that the Ethernet link between R6 & SW2 is only used in the
case that connectivity through the MPLS provider network is down
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay IETF
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0001.00
is-type level-2-only
www.INE.com
- 99 -
Version 1.0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.24.2 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0002.00
R3#
ip cef
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.1.3.3 255.255.255.255
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip router isis
tag-switching ip
clockrate 64000
!
area 0 sham-link 10.1.3.3 10.1.4.4
network 10.1.38.3 0.0.0.0 area 0
!
router isis
net 00.0000.0000.0003.00
!

- 100 -
www.INE.com
Version 1.0
router bgp 1
!
exit-address-family
!
exit-address-family
R4#
ip cef
!
ip vrf R6-SW2
rd 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.1.4.4 255.255.255.255
!
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
ip router isis
tag-switching ip
!
area 0 sham-link 10.1.4.4 10.1.3.3
network 10.1.46.4 0.0.0.0 area 0
!
router isis
net 00.0000.0000.0004.00
!

- 101 -
www.INE.com
Version 1.0
router bgp 1
!
exit-address-family
!
exit-address-family
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
ip address 10.1.46.6 255.255.255.0
!
ip address 10.1.68.6 255.255.255.0
ip ospf cost 65535
!
router ospf 1
network 10.1.6.6 0.0.0.0 area 0
network 10.1.46.6 0.0.0.0 area 0
network 10.1.68.6 0.0.0.0 area 0
SW1#
!
!
!
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!

- 102 -
www.INE.com
Version 1.0
no switchport
ip address 10.1.68.8 255.255.255.0
ip ospf cost 65535
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.38.8 0.0.0.0 area 0
network 10.1.68.8 0.0.0.0 area 0
Verification
Without Sham-Link:
R6#show ip route ospf
O
O

With Sham-Link:
R6#show ip route
<output omitted>
O
O E2
O E2
C
C
O
C

R4#show ip ospf sham-links

Sham Link OSPF_SL0 to address 10.1.3.3 is up
Area 0 source address 10.1.4.4
Run as demand circuit
DoNotAge LSA allowed. Cost of using 1 State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40,
Hello due in 00:00:09
Adjacency State FULL (Hello suppressed)
Index 2/2, retransmission queue length 0, number of retransmission 0
First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)

Last retransmission scan length is 0, maximum is 0
Last retransmission scan time is 0 msec, maximum is 0 msec
<output omitted>
i L2
150.1.24.0/24 [115/30] via 150.1.13.1, Serial1/2
i L2
150.1.4.4/32 [115/40] via 150.1.13.1, Serial1/2
C
C
i L2
150.1.12.0/24 [115/20] via 150.1.13.1, Serial1/2

- 103 -
www.INE.com
Version 1.0

<output omitted>
O
10.1.8.8/32 [110/11] via 10.1.38.8, 00:09:14, Ethernet0/1
O
10.1.6.6/32 [110/12] via 150.1.4.4, 00:09:14
B
10.1.4.4/32 [200/0] via 150.1.4.4, 00:09:21
C
O
10.1.46.0/24 [110/11] via 150.1.4.4, 00:09:14
C
O
10.1.68.0/24 [110/65545] via 10.1.38.8, 00:09:14, Ethernet0/1
<output omitted>
C
C
i L2
150.1.3.3/32 [115/40] via 150.1.24.2, Serial0/0.1
i L2
150.1.13.0/24 [115/30] via 150.1.24.2, Serial0/0.1
i L2
150.1.12.0/24 [115/20] via 150.1.24.2, Serial0/0.1
<output omitted>
O
10.1.8.8/32 [110/12] via 150.1.3.3, 00:09:36
O
10.1.6.6/32 [110/11] via 10.1.46.6, 00:09:36, Ethernet0/0
C
B
10.1.3.3/32 [200/0] via 150.1.3.3, 00:10:22
C
O
10.1.38.0/24 [110/11] via 150.1.3.3, 00:09:36
O
10.1.68.0/24 [110/65545] via 10.1.46.6, 00:09:36, Ethernet0/0

- 104 -
www.INE.com

- 105 -
Version 1.0
www.INE.com
Version 1.0
MPLS VPNs with OSPF and Domain-ID

OSPF as the PE-CE routing protocol and a unique OSPF Process-ID
on the PE routers. OSPF routes between VPN sites should appear
as Inter-Area routes.
Fa0/3
Fa0/3
E0/1
E0/0
R3
.3
10.1.38.0/24
OSPF
Area 0
.8
BGP
AS 1
10.1.37.0/24
.7
SW1
SW2
OSPF
Area 0
.3
S1/2
.3
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
Fa0/0
.2
IS-IS
Level 2
R2
S0/0.1
.2
204
Frame Relay
150.1.24.0/24
.5
R5
.4
S0/0.1
.4
.4
E0/1
R4
BGP
AS 1
E0/0
E0/1

- 106 -
10.1.46.0/24 VLAN 46
OSPF
Area 0
10.1.45.0/24 VLAN 45
402
OSPF
Area 0
.6
G0/0
R6
www.INE.com
Version 1.0
Directions

Configure IS-IS Level 2 on the interfaces between R1, R2, R3, and R4
Enable OSPF area 0 on the Ethernet interfaces of R5, R6, SW1, and SW2
R3 should use the route distinguisher and route target 1:7 for this VRF
VRF R5-SW1 should use the OSPF Domain-ID 0.0.0.57
VRF R6-SW2 should use the OSPF Domain-ID 0.0.0.68
Final Configuration
R1#
ip cef
!
ip address 150.1.12.1 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0001.00
!

- 107 -
www.INE.com
Version 1.0
R2#
ip cef
!
ip address 150.1.12.2 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.24.2 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0002.00
R3#
ip cef
!
ip vrf R5-SW1
rd 1:7
!
ip vrf R6-SW2
rd 1:8
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
ip router isis
!
ip address 10.1.37.3 255.255.255.0
!
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip router isis
tag-switching ip
clockrate 64000
!
domain-id 0.0.0.68
network 10.1.38.3 0.0.0.0 area 0
!

- 108 -
www.INE.com
Version 1.0

domain-id 0.0.0.57
network 10.1.37.3 0.0.0.0 area 0
!
router isis
net 00.0000.0000.0003.00
!
router bgp 1
!
exit-address-family
!
exit-address-family
!
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:5
!
ip vrf R6-SW2
rd 1:6
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.24.4 255.255.255.0
ip router isis
tag-switching ip
!

- 109 -
www.INE.com
Version 1.0
ip address 10.1.45.4 255.255.255.0
!
domain-id 0.0.0.57
network 10.1.45.4 0.0.0.0 area 0
!
domain-id 0.0.0.68
network 10.1.46.4 0.0.0.0 area 0
!
router isis
net 00.0000.0000.0004.00
!
router bgp 1
!
exit-address-family
!
exit-address-family
!
exit-address-family
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
ip address 10.1.45.5 255.255.255.0
!
router ospf 1
network 10.1.5.5 0.0.0.0 area 0
network 10.1.45.5 0.0.0.0 area 0
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
ip address 10.1.46.6 255.255.255.0
!
router ospf 1
network 10.1.6.6 0.0.0.0 area 0
network 10.1.46.6 0.0.0.0 area 0

- 110 -
www.INE.com
Version 1.0
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
ip address 10.1.37.7 255.255.255.0
!
!
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.38.8 255.255.255.0
!
!
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.38.8 0.0.0.0 area 0
Verification
Without OSPF Domain-ID Configured:
SW2#show ip route
<output omitted>
C
O E2
O E2
C

- 111 -
www.INE.com
Version 1.0
With OSPF Domain-ID Configured:

R5#show ip route
<output omitted>
O IA
10.1.7.7/32 [110/21] via 10.1.45.4, 00:13:51, Ethernet0/1
C
C
O IA
10.1.37.0/24 [110/11] via 10.1.45.4, 00:13:51, Ethernet0/1
R6#show ip route
<output omitted>
O IA
C
C
O IA

SW1#show ip route
<output omitted>
O IA
C
O IA
C
SW2#show ip route
<output omitted>
C
O IA
O IA
C
<output omitted>
i L2
150.1.24.0/24 [115/30] via 150.1.13.1, Serial1/2
i L2
150.1.4.4/32 [115/40] via 150.1.13.1, Serial1/2
C
C
i L2
150.1.12.0/24 [115/20] via 150.1.13.1, Serial1/2
<output omitted>
O
10.1.7.7/32 [110/11] via 10.1.37.7, 00:14:11, Ethernet0/0
B
10.1.5.5/32 [200/11] via 150.1.4.4, 00:12:26
B
10.1.45.0/24 [200/0] via 150.1.4.4, 00:12:26
C

- 112 -
www.INE.com
Version 1.0

<output omitted>
O
10.1.8.8/32 [110/11] via 10.1.38.8, 00:14:11, Ethernet0/1
B
10.1.6.6/32 [200/11] via 150.1.4.4, 00:12:26
B
10.1.46.0/24 [200/0] via 150.1.4.4, 00:12:26
C
<output omitted>
C
C
i L2
150.1.3.3/32 [115/40] via 150.1.24.2, Serial0/0.1
i L2
150.1.13.0/24 [115/30] via 150.1.24.2, Serial0/0.1
i L2
150.1.12.0/24 [115/20] via 150.1.24.2, Serial0/0.1
<output omitted>
B
10.1.7.7/32 [200/11] via 150.1.3.3, 00:12:47
O
10.1.5.5/32 [110/11] via 10.1.45.5, 00:14:06, Ethernet0/1
C
B
10.1.37.0/24 [200/0] via 150.1.3.3, 00:12:47
<output omitted>
B
10.1.8.8/32 [200/11] via 150.1.3.3, 00:12:47
O
10.1.6.6/32 [110/11] via 10.1.46.6, 00:14:06, Ethernet0/0
C
B
10.1.38.0/24 [200/0] via 150.1.3.3, 00:12:47

- 113 -
www.INE.com
Version 1.0
MPLS VPNs with VPNv4 Route Reflection

Objective: Configure R2 as a VPNv4 route reflector to provide MPLS VPN
connectivity between SW1, SW2, & BB2, and R1 as an IPv4 route
reflector to provide connectivity from AS 100 to AS 54.
Fa0/3
10.1.37.0/24
.7
RIPv2
E0/0
R3
SW1
BGP
AS 54
.3
.3
S1/2
S0/1
150.1.13.0/24
BGP
AS 100
204.10.X.0/24 VLAN 31
.254
.1
150.1.12.0/24
OSPF
Area 0
R1
S0/0.1
Frame Relay
.1
102
201
.2
.2
.4
E0/0
R4
E0/1 .4
S0/0.1
Fa0/0
150.1.24.0/24 VLAN 24
S0/0.2
RIPv2
150.1.25.0/24
R2
Frame Relay
205
502
.2
.5
192.10.X.0/24 VLAN 42
S0/0.1
R5
E0/0 .5
BB2
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
RIPv2
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 114 -
www.INE.com
BB3
Version 1.0
Directions

Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIP
Create Loopbacks in the format 150.X.Y.Y/32 on R1 through R6.
Configure OSPF area 0 on the interfaces between R1 through R6.
Advertise the network 204.12.X.0/24 into OSPF on R1.
Configure BGP AS 100 on R1 through R6.
R1 should peer via iBGP with R2 through R6 using the Loopback
interfaces.
R1 should reflect IPv4 unicast prefixes to these neighbors.
Configure R1 to peer with BB3 via EBGP.
Configure R1 to advertise the aggregate 150.1.0.0/16 to BB3 via BGP.
Configure MPLS on the interfaces between R1 through R6.
Create VRF VPN_A on R3, R4, and R6.
Run RIPv2 as the PE-CE protocol between R3 & SW1, R4 & BB2, and R6
& SW2.
BB2 will be expecting RIPv2 packets to be MD5 authenticated with the
password CISCO
R2 should peer via iBGP with R3, R4, and R6 using the Loopback
interfaces.
R2 should reflect VPNv4 prefixes to these neighbors.
These neighbors should not exchange IPv4 unicast prefixes.
Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 204.12.1.1 255.255.255.0
!
interface Serial2/0
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!

- 115 -
www.INE.com
Version 1.0
interface Serial2/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
redistribute connected subnets
network 150.1.0.0 0.0.255.255 area 0
!
router bgp 100
network 150.1.1.1 mask 255.255.255.255
aggregate-address 150.1.0.0 255.255.0.0 summary-only
neighbor 150.1.2.2 route-reflector-client
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
interface Serial2/0
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
ip address 150.1.25.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!

- 116 -
www.INE.com
Version 1.0
router bgp 100

!
address-family ipv4
no neighbor 150.1.3.3 activate
exit-address-family
!
neighbor 150.1.3.3 send-community extended
exit-address-family
R3#
ip cef
!
ip vrf VPN_A
rd 100:1
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip vrf forwarding VPN_A
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!

- 117 -
www.INE.com
Version 1.0
router rip
!
address-family ipv4 vrf VPN_A
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
!
address-family ipv4
exit-address-family
!
exit-address-family
!
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf VPN_A
rd 100:1
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 192.10.1.4 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!

- 118 -
www.INE.com
Version 1.0
router rip
!
network 192.10.1.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
!
address-family ipv4
exit-address-family
!
exit-address-family
!
redistribute rip
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.25.5 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!
router bgp 100

- 119 -
www.INE.com
Version 1.0
R6#
ip cef
!
ip vrf VPN_A
rd 100:1
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
mpls ip
!
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
!
address-family ipv4
exit-address-family
!
exit-address-family
!
redistribute rip
exit-address-family

- 120 -
www.INE.com
Version 1.0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
!
router rip
version 2
network 10.0.0.0
no auto-summary

- 121 -
www.INE.com
Version 1.0
Verification
R2 installs the VPNv4 routes for RD 100:1 but does not associate them
with VPN_A
Network
Next Hop
*>i10.1.7.0/24
150.1.3.3
*>i10.1.8.0/24
150.1.6.6
*>i10.1.37.0/24
150.1.3.3
*>i10.1.68.0/24
150.1.6.6
*>i192.10.1.0
150.1.4.4
*>i205.90.31.0
150.1.4.4
*>i220.20.3.0
150.1.4.4
*>i222.22.2.0
150.1.4.4

1
1
0
0
0
7
7
7
100
100
100
100
100
100
100
100
0
0
0
0
0
0
0
0
?
?
?
?
?
?
?
?
R3, R4, and R6 learn VPNv4 prefixes from R2 and install them as VPN_A
routes
Network
Next Hop
Route Distinguisher: 100:1 (default for vrf VPN_A)
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*>i10.1.8.0/24
150.1.6.6
1
100
0 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.68.0/24
150.1.6.6
0
100
0 ?
*>i192.10.1.0
150.1.4.4
0
100
0 ?
*>i205.90.31.0
150.1.4.4
7
100
0 ?
*>i220.20.3.0
150.1.4.4
7
100
0 ?
*>i222.22.2.0
150.1.4.4
7
100
0 ?
Network
Next Hop
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.8.0/24
150.1.6.6
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*>i10.1.68.0/24
150.1.6.6
0
100
0 ?
*> 192.10.1.0
0.0.0.0
0
32768 ?
*> 205.90.31.0
192.10.1.254
7
32768 ?
*> 220.20.3.0
192.10.1.254
7
32768 ?

- 122 -
www.INE.com

*> 222.22.2.0
192.10.1.254
Version 1.0
7
32768 ?

Network
Next Hop
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*>i192.10.1.0
150.1.4.4
0
100
0 ?
*>i205.90.31.0
150.1.4.4
7
100
0 ?
*>i220.20.3.0
150.1.4.4
7
100
0 ?
*>i222.22.2.0
150.1.4.4
7
100
0 ?
Other BGP routers only know of IPv4 Unicast prefixes
R1#show ip bgp
*>
*>
*>
*>
*>
*>
*>
*>
*>
*>
*>
s>
Network
28.119.16.0/24
28.119.17.0/24
112.0.0.0
113.0.0.0
114.0.0.0
115.0.0.0
116.0.0.0
117.0.0.0
118.0.0.0
119.0.0.0
150.1.0.0
150.1.1.1/32
Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
0.0.0.0
0.0.0.0

0
0 54 i
0
0 54 i
0 54 50 60 i
0 54 50 60 i
0 54 i
0 54 i
0 54 i
0 54 i
0 54 i
0 54 i
32768 i
0
32768 i
R2#show ip bgp
Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254

- 123 -

0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
www.INE.com

*>i150.1.0.0
150.1.1.1
Version 1.0
0
100
0 i
R3#show ip bgp
Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
*>i150.1.0.0
Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
150.1.1.1

0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 i
R4#show ip bgp
Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
*>i150.1.0.0
Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
150.1.1.1

0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 i
R4#show ip bgp
Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
*>i150.1.0.0
Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
150.1.1.1

- 124 -

0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 i
www.INE.com
Version 1.0
R6#show ip bgp
Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
*>i150.1.0.0
Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
150.1.1.1

0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 i
R1#show ip route
<output omitted>
B
B
C
B
B
B
B
B
B
B
B
O
O
O
O
O
O
O
C
B
C
C
O
119.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20

118.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
117.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
116.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
115.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
114.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
113.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
112.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
28.119.17.0 [20/0] via 204.12.1.254, 00:28:21
28.119.16.0 [20/0] via 204.12.1.254, 00:28:21
150.1.25.0/24 [110/96] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.24.0/24 [110/49] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.6.6/32 [110/107] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.5.5/32 [110/97] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.4.4/32 [110/50] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.3.3/32 [110/49] via 150.1.13.3, 00:28:14, Serial2/1
150.1.2.2/32 [110/49] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.0.0/16 [200/0] via 0.0.0.0, 00:23:40, Null0
150.1.56.0/24 [110/106] via 150.1.12.2, 00:28:14, Serial2/0.1
R2#show ip route
<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
O E2 204.12.1.0/24 [110/20] via 150.1.12.1, 00:28:35, Serial2/0.1
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20

- 125 -
www.INE.com

B
B
B
B
C
C
O
O
O
O
C
O
B
O
C
O
Version 1.0
113.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20

112.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
28.119.17.0 [200/0] via 204.12.1.254, 00:25:21
28.119.16.0 [200/0] via 204.12.1.254, 00:25:21
150.1.6.6/32 [110/59] via 150.1.25.5, 00:28:36, Serial2/0.2
150.1.5.5/32 [110/49] via 150.1.25.5, 00:28:36, Serial2/0.2
150.1.3.3/32 [110/97] via 150.1.12.1, 00:28:36, Serial2/0.1
150.1.1.1/32 [110/49] via 150.1.12.1, 00:28:36, Serial2/0.1
150.1.0.0/16 [200/0] via 150.1.1.1, 00:24:02
150.1.13.0/24 [110/96] via 150.1.12.1, 00:28:36, Serial2/0.1
150.1.56.0/24 [110/58] via 150.1.25.5, 00:28:36, Serial2/0.2

<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
O E2 204.12.1.0/24 [110/20] via 150.1.13.1, 00:29:00, Serial1/2
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
113.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
112.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
28.119.17.0 [200/0] via 204.12.1.254, 00:25:35
B
28.119.16.0 [200/0] via 204.12.1.254, 00:25:35
O
150.1.25.0/24 [110/877] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.24.0/24 [110/830] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.6.6/32 [110/888] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.5.5/32 [110/878] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.4.4/32 [110/831] via 150.1.13.1, 00:29:01, Serial1/2
C
O
150.1.2.2/32 [110/830] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.1.1/32 [110/782] via 150.1.13.1, 00:29:01, Serial1/2
B
150.1.0.0/16 [200/0] via 150.1.1.1, 00:24:27
C
O
150.1.12.0/24 [110/829] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.56.0/24 [110/887] via 150.1.13.1, 00:29:01, Serial1/2
Routing Table: VPN_A
<output omitted>
B
222.22.2.0/24 [200/7] via 150.1.4.4, 00:07:11
B
220.20.3.0/24 [200/7] via 150.1.4.4, 00:07:11
B
10.1.8.0 [200/1] via 150.1.6.6, 00:07:11
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:01, Ethernet0/0
C
B
10.1.68.0 [200/0] via 150.1.6.6, 00:07:11
B
192.10.1.0/24 [200/0] via 150.1.4.4, 00:07:11

- 126 -
www.INE.com

B
Version 1.0
205.90.31.0/24 [200/7] via 150.1.4.4, 00:07:11

<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
O E2 204.12.1.0/24 [110/20] via 150.1.24.2, 00:29:26, Ethernet0/0
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
113.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
112.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
28.119.17.0 [200/0] via 204.12.1.254, 00:25:54
B
28.119.16.0 [200/0] via 204.12.1.254, 00:25:54
O
150.1.25.0/24 [110/58] via 150.1.24.2, 00:29:28, Ethernet0/0
C
O
150.1.6.6/32 [110/69] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.5.5/32 [110/59] via 150.1.24.2, 00:29:28, Ethernet0/0
C
O
150.1.3.3/32 [110/107] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.2.2/32 [110/11] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.1.1/32 [110/59] via 150.1.24.2, 00:29:28, Ethernet0/0
B
150.1.0.0/16 [200/0] via 150.1.1.1, 00:24:54
O
150.1.13.0/24 [110/106] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.12.0/24 [110/58] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.56.0/24 [110/68] via 150.1.24.2, 00:29:28, Ethernet0/0
<output omitted>
R
222.22.2.0/24 [120/7] via 192.10.1.254, 00:00:01, Ethernet0/1
R
220.20.3.0/24 [120/7] via 192.10.1.254, 00:00:01, Ethernet0/1
B
10.1.8.0 [200/1] via 150.1.6.6, 00:07:40
B
10.1.7.0 [200/1] via 150.1.3.3, 00:07:40
B
10.1.37.0 [200/0] via 150.1.3.3, 00:07:40
B
10.1.68.0 [200/0] via 150.1.6.6, 00:07:40
C
R
205.90.31.0/24 [120/7] via 192.10.1.254, 00:00:02, Ethernet0/1
R5#show ip route
<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
O E2 204.12.1.0/24 [110/20] via 150.1.25.2, 00:29:54, Serial0/0.1
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
113.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
112.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
28.119.17.0 [200/0] via 204.12.1.254, 00:26:13
B
28.119.16.0 [200/0] via 204.12.1.254, 00:26:13

- 127 -
www.INE.com

C
O
O
C
O
O
O
O
B
O
O
C
Version 1.0

150.1.24.0/24 [110/65] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.6.6/32 [110/11] via 150.1.56.6, 00:29:55, Ethernet0/0
150.1.4.4/32 [110/66] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.3.3/32 [110/161] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.2.2/32 [110/65] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.1.1/32 [110/113] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.0.0/16 [200/0] via 150.1.1.1, 00:25:21
150.1.13.0/24 [110/160] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.12.0/24 [110/112] via 150.1.25.2, 00:29:55, Serial0/0.1

<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
O E2 204.12.1.0/24 [110/20] via 150.1.56.5, 00:30:17, GigabitEthernet0/0
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
113.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
112.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
28.119.17.0 [200/0] via 204.12.1.254, 00:26:35
B
28.119.16.0 [200/0] via 204.12.1.254, 00:26:35
O
O
C
O
O
O
O
O
B
150.1.0.0/16 [200/0] via 150.1.1.1, 00:25:44
O
O
C

<output omitted>
B
222.22.2.0/24 [200/7] via 150.1.4.4, 00:08:26
B
220.20.3.0/24 [200/7] via 150.1.4.4, 00:08:26
R
B
10.1.7.0 [200/1] via 150.1.3.3, 00:08:26
B
10.1.37.0 [200/0] via 150.1.3.3, 00:08:26
C
B
192.10.1.0/24 [200/0] via 150.1.4.4, 00:08:27
B
205.90.31.0/24 [200/7] via 150.1.4.4, 00:08:27

- 128 -
www.INE.com
Version 1.0
SW1#show ip route
<output omitted>
R
R
R
C
C
R
R
R
SW2#show ip route
<output omitted>
R
R
C
R
R
C
R
R

- 129 -
www.INE.com
Version 1.0
Inter-AS MPLS VPNs with Back-to-Back VRF

Objective: Provide VPN transit between SW1 & BB1 and SW2 & BB2 using
back-to-back VRF exchange between AS 1 and AS 2.
Fa0/3
.254
SW1
RIPv2
RIPv2
E0/0
E0/1
R3
.3
10.1.37.0/24
.7
192.10.X.0/24 VLAN 32
BB2
.3
.3
S1/2
BGP
AS 1
S0/1
150.1.13.0/24
.1
OSPF 150.1.12.0/24
Area 0 Frame Relay
R1
.1
S0/0.1
102
201
.2
S0/0.1
R2
Fa0/0.100 Fa0/0.200
150.1.100.Y/24 VLAN 100
150.1.200.Y/24 VLAN 200
E0/0.100
E0/0.200
150.1.45.0/24
R4
S0/0.1
.4
BGP
AS 2
Frame Relay
405
504
.5
S0/0.1
IS-IS Level 2
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
RIPv2
Fa0/6
SW2
10.1.68.0/24
.6
S0/0/0.1
R6
.8
.6
54.X.1.0/24
Frame Relay
101
.254
RIPv2
BB1

- 130 -
www.INE.com
Version 1.0
Directions

The connection between R2 and R4 should use 802.1q trunking to provide
transit for VLANs 100 and 200
Configure OSPF area 0 on the interfaces between R1, R2, and R3
Configure MPLS on the interfaces between R1, R2, and R3
Configure IS-IS Level-2 routing on the interfaces between R4, R5, and R6
SW1 and BB1 should be in VRF SW1-BB1
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R6 & BB1
password CISCO
R2 and R4s interfaces in VLAN 100 should participate in VRF SW1-BB1
R2 and R4s interfaces in VLAN 200 should participate in VRF SW2-BB2
Configure BGP on R2, R3, R4, and R6 per the diagram
R2 and R4 should peer via EBGP twice, once for VRF SW1-BB1 and
once for VRF SW2-BB2

- 131 -
www.INE.com
Version 1.0
Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip vrf forwarding SW1-BB1
ip address 150.1.100.2 255.255.255.0
!
interface FastEthernet0/0.200
ip address 150.1.200.2 255.255.255.0
!
interface Serial0/0
!

- 132 -
www.INE.com
Version 1.0

ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 1
!
exit-address-family
!
address-family ipv4 vrf SW2-BB2
exit-address-family
!
exit-address-family
R3#
ip cef
!
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 192.10.8.3 255.255.255.0

- 133 -
www.INE.com
Version 1.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
network 192.10.8.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export
route-target import
!
ip vrf SW2-BB2
rd 1:200
route-target export
route-target import
!
!
1:100
1:100
1:200
1:200

- 134 -
www.INE.com
Version 1.0
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
interface Ethernet0/0.100
ip address 150.1.100.4 255.255.255.0
!
ip address 150.1.200.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0004.00
!
router bgp 2
!
exit-address-family
!
exit-address-family
!
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!
ip address 150.1.56.5 255.255.255.0
ip router isis
tag-switching ip

- 135 -
www.INE.com
Version 1.0
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0005.00
R6#
ip cef
!
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
!
ip address 150.1.56.6 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0/0
!
interface Serial0/0/0.1 point-to-point
ip address 54.8.1.6 255.255.255.0
!
ip address 10.1.68.6 255.255.255.0
!
router isis
net 00.0000.0000.0006.00
!

- 136 -
www.INE.com
Version 1.0
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 54.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 2
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
SW1#
ip routing
vlan 100,200
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
switchport trunk encapsulation dot1q
switchport mode trunk
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!

- 137 -
www.INE.com
Version 1.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
Verification
SW1#show ip route
<output omitted>
R
R
R
R
C
C
R
SW1#ping 212.18.0.1
!!!!!

- 138 -
www.INE.com
Version 1.0
SW2#show ip route
<output omitted>
R
R
R
C
C
R
SW2#ping 222.22.2.1
!!!!!

Network
Next Hop
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 54.8.1.0/24
150.1.100.4
0 2 ?
*> 212.18.0.0
150.1.100.4
0 2 ?
*> 212.18.1.0
150.1.100.4
0 2 ?
*> 212.18.2.0
150.1.100.4
0 2 ?
*> 212.18.3.0
150.1.100.4
0 2 ?
*> 10.1.8.0/24
150.1.200.4
0 2 ?
*> 10.1.68.0/24
150.1.200.4
0 2 ?
*>i192.10.8.0
150.1.3.3
0
100
0 ?
*>i205.90.31.0
150.1.3.3
7
100
0 ?
*>i220.20.3.0
150.1.3.3
7
100
0 ?
*>i222.22.2.0
150.1.3.3
7
100
0 ?
Network
Next Hop
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i54.8.1.0/24
150.1.2.2
0
100
0 2 ?
*>i212.18.0.0
150.1.2.2
0
100
0 2 ?
*>i212.18.1.0
150.1.2.2
0
100
0 2 ?
*>i212.18.2.0
150.1.2.2
0
100
0 2 ?
*>i212.18.3.0
150.1.2.2
0
100
0 2 ?

- 139 -
www.INE.com
Version 1.0

*>i10.1.8.0/24
150.1.2.2
0
100
*>i10.1.68.0/24
150.1.2.2
0
100
*> 192.10.8.0
0.0.0.0
0
*> 205.90.31.0
192.10.8.254
7
*> 220.20.3.0
192.10.8.254
7
*> 222.22.2.0
192.10.8.254
7
0
0
32768
32768
32768
32768
2 ?
2 ?
?
?
?
?

Network
Next Hop
*> 10.1.7.0/24
150.1.100.2
0 1 ?
*> 10.1.37.0/24
150.1.100.2
0 1 ?
*>i54.8.1.0/24
150.1.6.6
0
100
0 ?
*>i212.18.0.0
150.1.6.6
1
100
0 ?
*>i212.18.1.0
150.1.6.6
1
100
0 ?
*>i212.18.2.0
150.1.6.6
1
100
0 ?
*>i212.18.3.0
150.1.6.6
1
100
0 ?
*>i10.1.8.0/24
150.1.6.6
1
100
0 ?
*>i10.1.68.0/24
150.1.6.6
0
100
0 ?
*> 192.10.8.0
150.1.200.2
0 1 ?
*> 205.90.31.0
150.1.200.2
0 1 ?
*> 220.20.3.0
150.1.200.2
0 1 ?
*> 222.22.2.0
150.1.200.2
0 1 ?
Status codes: s suppressed, d damped, h history, * valid, > best, i internal,
Network
Next Hop
*>i10.1.7.0/24
150.1.4.4
0
100
0 1 ?
*>i10.1.37.0/24
150.1.4.4
0
100
0 1 ?
*> 54.8.1.0/24
0.0.0.0
0
32768 ?
*> 212.18.0.0
54.8.1.254
1
32768 ?
*> 212.18.1.0
54.8.1.254
1
32768 ?
*> 212.18.2.0
54.8.1.254
1
32768 ?
*> 212.18.3.0
54.8.1.254
1
32768 ?
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*>i192.10.8.0
150.1.4.4
0
100
0 1 ?
*>i205.90.31.0
150.1.4.4
0
100
0 1 ?
*>i220.20.3.0
150.1.4.4
0
100
0 1 ?
*>i222.22.2.0
150.1.4.4
0
100
0 1 ?

- 140 -
www.INE.com
Version 1.0

Local
tag
16
17
Outgoing
tag or VC
Pop tag
Pop tag
Prefix
or Tunnel Id
150.1.2.2/32
150.1.3.3/32
Bytes tag
switched
12038
11806
Outgoing
interface
Se0/0.1
Se0/1
Next Hop
Bytes tag
switched
0
0
0
472
0
0
0
0
0
590
Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Fa0/0.200
Fa0/0.200
Fa0/0.100
Fa0/0.100
Fa0/0.100
Fa0/0.100
Fa0/0.100
Next Hop
Bytes tag
switched
0
0
0
0
520
0
0
0
570
Outgoing
interface
Se1/2
Se1/2
Se1/2
Et0/0
Next Hop
Et0/1
Et0/1
Et0/1
192.10.8.254
192.10.8.254
192.10.8.254
Bytes tag
switched
0
0
0
0
0
590
0
0
590
Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.100
Et0/0.100
Next Hop
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
24
25
Outgoing
tag or VC
Pop tag
Pop tag
17
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Prefix
or Tunnel Id
150.1.1.1/32
150.1.13.0/24
150.1.3.3/32
10.1.68.0/24[V]
10.1.8.0/24[V]
54.8.1.0/24[V]
212.18.3.0/24[V]
212.18.2.0/24[V]
212.18.1.0/24[V]
212.18.0.0/24[V]
point2point
point2point
point2point
150.1.200.4
150.1.200.4
150.1.100.4
150.1.100.4
150.1.100.4
150.1.100.4
150.1.100.4

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
16
Pop tag
Untagged
Aggregate
Aggregate
Untagged
Untagged
Untagged
Prefix
or Tunnel Id
150.1.1.1/32
150.1.2.2/32
150.1.12.0/24
10.1.7.0/24[V]
10.1.37.0/24[V]
192.10.8.0/24[V]
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
point2point
point2point
point2point
10.1.37.7

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
16
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Prefix
or Tunnel Id
150.1.56.0/24
150.1.6.6/32
150.1.5.5/32
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
192.10.8.0/24[V]
10.1.7.0/24[V]
10.1.37.0/24[V]

- 141 -
point2point
point2point
point2point
150.1.200.2
150.1.200.2
150.1.200.2
150.1.200.2
150.1.100.2
150.1.100.2
www.INE.com
Version 1.0

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
16
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Prefix
or Tunnel Id
150.1.56.0/24
150.1.6.6/32
150.1.5.5/32
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
192.10.8.0/24[V]
10.1.7.0/24[V]
10.1.37.0/24[V]
Bytes tag
switched
0
0
0
0
0
590
0
0
590
Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.100
Et0/0.100
Next Hop
Bytes tag
switched
0
0
0
0
0
520
0
0
0
416
Outgoing
interface
Et0/0
Et0/0
Et0/0
Next Hop
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Gig0/1
point2point
point2point
point2point
point2point
10.1.68.8
point2point
point2point
point2point
150.1.200.2
150.1.200.2
150.1.200.2
150.1.200.2
150.1.100.2
150.1.100.2

Local
tag
16
17
18
19
20
21
22
23
24
25
Outgoing
tag or VC
Pop tag
Pop tag
17
Aggregate
Untagged
Untagged
Untagged
Untagged
Untagged
Aggregate
Prefix
or Tunnel Id
150.1.45.0/24
150.1.5.5/32
150.1.4.4/32
54.8.1.0/24[V]
212.18.1.0/24[V]
212.18.0.0/24[V]
212.18.3.0/24[V]
212.18.2.0/24[V]
10.1.8.0/24[V]
10.1.68.0/24[V]

- 142 -
150.1.56.5
150.1.56.5
150.1.56.5
www.INE.com

- 143 -
Version 1.0
www.INE.com
Version 1.0
Inter-AS MPLS VPNs with MP-eBGP for VPNv4 Exchange

Objective: Provide VPN transit between SW1 & BB1 and SW2 & BB2 using MPeBGP VPNv4 exchange between R2 and R4.
Fa0/3
.254
SW1
.7
RIPv2
RIPv2
E0/0
E0/1
R3
.3
10.1.37.0/24
192.10.X.0/24 VLAN 32
BB2
.3
.3
S1/2
BGP
AS 1
S0/1
150.1.13.0/24
.1
OSPF 150.1.12.0/24
Area 0 Frame Relay
R1
.1
S0/0.1
102
201
.2
S0/0.1
R2
Fa0/0
.2
E0/0
.4
150.1.24.0/24 VLAN 24
150.1.45.0/24
R4
S0/0.1
Frame Relay
.4
BGP
AS 2
405
504
.5
S0/0.1
IS-IS Level 2
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
RIPv2
Fa0/6
SW2
10.1.68.0/24
.6
S0/0/0.1
R6
.8
.6
54.X.1.0/24
Frame Relay
101
.254
RIPv2
BB1

- 144 -
www.INE.com
Version 1.0
Directions

password CISCO
R2 and R4 should peer via MP-EBGP and exchange VPNv4 routes
Perform next-hop modification where necessary so that AS 1 and AS 2 do
not need to exchange information about their internal topology

- 145 -
www.INE.com
Version 1.0
Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 1
no bgp default route-target filter
!

- 146 -
www.INE.com
Version 1.0

exit-address-family
R3#
ip cef
!
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 192.10.1.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
network 192.10.1.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2

- 147 -
www.INE.com
Version 1.0
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R4#
ip cef
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
ip address 150.1.24.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0004.00
!
router bgp 2
no bgp default route-target filter
!
exit-address-family

- 148 -
www.INE.com
Version 1.0
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!
ip address 150.1.56.5 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0005.00
R6#
ip cef
!
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
!
ip address 150.1.56.6 255.255.255.0
ip router isis
tag-switching ip
!
!
ip address 54.1.1.6 255.255.255.0
!

- 149 -
www.INE.com
Version 1.0
ip address 10.1.68.6 255.255.255.0
!
router isis
net 00.0000.0000.0006.00
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 54.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 2
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!

- 150 -
www.INE.com
Version 1.0
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
Verification
SW1#show ip route
<output omitted>
R
R
R
R
C
C
R
SW1#ping 212.18.0.1
!!!!!

- 151 -
www.INE.com
Version 1.0
SW2#show ip route
<output omitted>
R
R
R
C
C
R
SW2#ping 222.22.2.1
!!!!!

Network
Next Hop
*>i10.1.7.0/24
150.1.3.3
*>i10.1.37.0/24
150.1.3.3
*> 54.8.1.0/24
150.1.24.4
*> 212.18.0.0
150.1.24.4
*> 212.18.1.0
150.1.24.4
*> 212.18.2.0
150.1.24.4
*> 212.18.3.0
150.1.24.4
*> 10.1.8.0/24
150.1.24.4
*> 10.1.68.0/24
150.1.24.4
*>i192.10.8.0
150.1.3.3
*>i205.90.31.0
150.1.3.3
*>i220.20.3.0
150.1.3.3
*>i222.22.2.0
150.1.3.3

1
0
0
7
7
7
100
100
100
100
100
100
0
0
0
0
0
0
0
?
?
2
2
2
2
2
0
0
0
0
0
0
2 ?
2 ?
?
?
?
?
?
?
?
?
?

Network
Next Hop
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i54.8.1.0/24
150.1.2.2
0
100
0 2 ?
*>i212.18.0.0
150.1.2.2
0
100
0 2 ?
*>i212.18.1.0
150.1.2.2
0
100
0 2 ?
*>i212.18.2.0
150.1.2.2
0
100
0 2 ?
*>i212.18.3.0
150.1.2.2
0
100
0 2 ?

- 152 -
www.INE.com
Version 1.0

*>i10.1.8.0/24
150.1.2.2
0
100
*>i10.1.68.0/24
150.1.2.2
0
100
*> 192.10.8.0
0.0.0.0
0
*> 205.90.31.0
192.10.1.254
7
*> 220.20.3.0
192.10.1.254
7
*> 222.22.2.0
192.10.1.254
7
0
0
32768
32768
32768
32768
2 ?
2 ?
?
?
?
?

Network
Next Hop
*> 10.1.7.0/24
150.1.24.2
*> 10.1.37.0/24
150.1.24.2
*>i54.8.1.0/24
150.1.6.6
*>i212.18.0.0
150.1.6.6
*>i212.18.1.0
150.1.6.6
*>i212.18.2.0
150.1.6.6
*>i212.18.3.0
150.1.6.6
*>i10.1.8.0/24
150.1.6.6
*>i10.1.68.0/24
150.1.6.6
*> 192.10.8.0
150.1.24.2
*> 205.90.31.0
150.1.24.2
*> 220.20.3.0
150.1.24.2
*> 222.22.2.0
150.1.24.2
0
1
1
1
1
100
100
100
100
100
1
0
100
100
0
0
0
0
0
0
0
1 ?
1 ?
?
?
?
?
?
0
0
0
0
0
0
?
?
1
1
1
1
?
?
?
?

Network
Next Hop
*>i10.1.7.0/24
150.1.4.4
0
100
0 1 ?
*>i10.1.37.0/24
150.1.4.4
0
100
0 1 ?
*> 54.8.1.0/24
0.0.0.0
0
32768 ?
*> 212.18.0.0
54.1.1.254
1
32768 ?
*> 212.18.1.0
54.1.1.254
1
32768 ?
*> 212.18.2.0
54.1.1.254
1
32768 ?
*> 212.18.3.0
54.1.1.254
1
32768 ?
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*>i192.10.8.0
150.1.4.4
0
100
0 1 ?
*>i205.90.31.0
150.1.4.4
0
100
0 1 ?
*>i220.20.3.0
150.1.4.4
0
100
0 1 ?
*>i222.22.2.0
150.1.4.4
0
100
0 1 ?

- 153 -
www.INE.com
Version 1.0

Local
tag
16
17
Outgoing
tag or VC
Pop tag
Pop tag
Prefix
or Tunnel Id
150.1.2.2/32
150.1.3.3/32
Bytes tag
switched
12038
11806
Outgoing
interface
Se0/0.1
Se0/1
Next Hop
Prefix
Bytes tag
or Tunnel Id
switched
150.1.24.4/32
0
150.1.1.1/32
0
150.1.3.3/32
0
150.1.13.0/24
0
1:200:205.90.31.0/24
\
0
1:100:10.1.7.0/24
\
0
1:100:10.1.37.0/24
\
560
1:200:192.10.1.0/24
\
0
1:100:54.1.1.0/24
\
0
1:100:212.18.0.0/24
\
590
1:100:212.18.1.0/24
\
0
1:100:212.18.2.0/24
\
0
1:100:212.18.3.0/24
\
0
1:200:10.1.8.0/24
\
0
1:200:10.1.68.0/24
\
472
1:200:220.20.3.0/24
\
0
1:200:222.22.2.0/24
\
560
Outgoing
interface
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Se0/0.1
point2point
Se0/0.1
point2point
Se0/0.1
point2point
Se0/0.1
point2point
Fa0/0
150.1.24.4
Fa0/0
150.1.24.4
Fa0/0
150.1.24.4
Fa0/0
150.1.24.4
Fa0/0
150.1.24.4
Fa0/0
150.1.24.4
Fa0/0
150.1.24.4
Se0/0.1
point2point
Se0/0.1
point2point
Outgoing
interface
Se1/2
Se1/2
Se1/2
Et0/0
Next Hop
Et0/1
Et0/1
Et0/1
192.10.1.254
192.10.1.254
192.10.1.254
point2point
point2point

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Pop tag
Pop tag
16
Pop tag
16
21
16
22
16
23
16
24
24
25
25
26
26
27
27
28
28
29
30
30
29
31
16
32
16
150.1.24.4
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
Pop tag
17
Untagged
Aggregate
Aggregate
Untagged
Untagged
Untagged
Prefix
or Tunnel Id
150.1.1.1/32
150.1.12.0/24
150.1.2.2/32
10.1.7.0/24[V]
10.1.37.0/24[V]
192.10.1.0/24[V]
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
Bytes tag
switched
0
0
0
0
520
0
0
0
570

- 154 -
point2point
point2point
point2point
10.1.37.7
www.INE.com
Version 1.0

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
16
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Prefix
or Tunnel Id
150.1.56.0/24
150.1.6.6/32
150.1.5.5/32
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
192.10.8.0/24[V]
10.1.7.0/24[V]
10.1.37.0/24[V]
Bytes tag
switched
0
0
0
0
0
590
0
0
590
Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.100
Et0/0.100
Next Hop
Prefix
Bytes tag
or Tunnel Id
switched
150.1.24.2/32
0
150.1.5.5/32
0
150.1.6.6/32
0
150.1.56.0/24
0
1:200:222.22.2.0/24
\
590
1:100:10.1.37.0/24
\
590
1:100:10.1.7.0/24
\
0
1:200:192.10.1.0/24
\
0
1:100:54.1.1.0/24
\
0
1:100:212.18.0.0/24
\
560
1:100:212.18.1.0/24
\
0
1:100:212.18.2.0/24
\
0
1:100:212.18.3.0/24
\
0
1:200:10.1.68.0/24
\
448
1:200:10.1.8.0/24
\
0
1:200:220.20.3.0/24
\
0
1:200:205.90.31.0/24
\
0
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Et0/0
150.1.24.2
Et0/0
150.1.24.2
Et0/0
150.1.24.2
Et0/0
150.1.24.2
Se0/0.1
point2point
Se0/0.1
point2point
Se0/0.1
point2point
Se0/0.1
point2point
Se0/0.1
point2point
Se0/0.1
point2point
Se0/0.1
point2point
Et0/0
150.1.24.2
Et0/0
150.1.24.2
Outgoing
interface
Et0/0
Se0/0.1
Next Hop
point2point
point2point
point2point
150.1.200.2
150.1.200.2
150.1.200.2
150.1.200.2
150.1.100.2
150.1.100.2

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Pop tag
Pop tag
16
Pop tag
32
21
22
22
21
23
23
24
16
25
16
26
16
27
16
28
16
29
16
30
16
31
31
32
20
150.1.24.2
point2point
point2point
point2point

Local
tag
16
17
Outgoing
tag or VC
Pop tag
Pop tag
Prefix
or Tunnel Id
150.1.6.6/32
150.1.4.4/32
Bytes tag
switched
31257
2203

- 155 -
150.1.56.6
point2point
www.INE.com
Version 1.0

Local
tag
17
18
19
21
27
28
29
30
31
32
Outgoing
tag or VC
Pop tag
Aggregate
Pop tag
17
Untagged
Untagged
Untagged
Untagged
Untagged
Aggregate
Prefix
or Tunnel Id
150.1.5.5/32
54.1.1.0/24[V]
150.1.45.0/24
150.1.4.4/32
212.18.0.0/24[V]
212.18.1.0/24[V]
212.18.2.0/24[V]
212.18.3.0/24[V]
10.1.8.0/24[V]
10.1.68.0/24[V]
Bytes tag
switched
0
0
0
0
520
0
0
0
0
416

- 156 -
Outgoing
interface
Gi0/0
Next Hop
Gi0/0
Gi0/0
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Gi0/1
150.1.56.5
150.1.56.5
point2point
point2point
point2point
point2point
10.1.68.8
150.1.56.5
www.INE.com

- 157 -
Version 1.0
www.INE.com
Version 1.0
Inter-AS MPLS VPNs with Multihop MP-eBGP for VPNv4 Exchange

Objective: Provide VPN transit between SW1 & BB1 and SW2 & BB2 using
multihop MP-eBGP VPNv4 exchange between R3 and R6.
Fa0/3
.254
BB2
SW1
.7
RIPv2
RIPv2
E0/0
E0/1
R3
.3
.3
.3
S1/2
BGP
AS 1
S0/1
150.1.13.0/24
.1
OSPF 150.1.12.0/24
Area 0 Frame Relay
.1
S0/0.1
102
201
.2
R1
S0/0.1
R2
Fa0/0
.2
E0/0
.4
150.1.24.0/24 VLAN 24
150.1.45.0/24
R4
S0/0.1
.4
BGP
AS 2
Frame Relay
405
504
.5
S0/0.1
IS-IS Level 2
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
.6
S0/0/0.1
R6
RIPv2
.6
54.X.1.0/24
Frame Relay
101
Fa0/6
SW2
.8
.254
RIPv2
BB1

- 158 -
www.INE.com
Version 1.0
Directions

password CISCO
Advertise R3s Loopback into BGP on R2
Advertise R6s Loopback into BGP on R4
R2 and R4 should peer via EBGP to exchange R2 and R4s IPv4
Loopbacks and their associated MPLS labels
Configure R2 to advertise R6s Loopback into IS-IS
Configure R4 to advertise R3s Loopback into OSPF
R3 and R6 should peer via their loopbacks with MP-EBGP and exchange
VPNv4 routes

- 159 -
www.INE.com
Version 1.0
Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
router ospf 1
redistribute bgp 1 subnets route-map BGP_TO_IGP
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.24.4 send-label
network 150.1.3.3 mask 255.255.255.255
!
ip prefix-list R6_LOOPBACK seq 5 permit 150.1.6.6/32
!
route-map BGP_TO_IGP permit 10
match ip address prefix-list R6_LOOPBACK

- 160 -
www.INE.com
Version 1.0
R3#
ip cef
!
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 192.10.1.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
network 192.10.1.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!

- 161 -
www.INE.com
Version 1.0
router bgp 1
neighbor 150.1.6.6 ebgp-multihop 255
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R4#
ip cef
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
ip address 150.1.24.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0004.00
redistribute bgp 2 route-map BGP_TO_IGP
!
router bgp 2
network 150.1.6.6 mask 255.255.255.255
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!

- 162 -
www.INE.com
Version 1.0
ip address 150.1.56.5 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0005.00
R6#
ip cef
!
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
!
ip address 150.1.56.6 255.255.255.0
ip router isis
tag-switching ip
!
!
ip address 54.1.1.6 255.255.255.0
!
ip address 10.1.68.6 255.255.255.0
!
router isis
net 00.0000.0000.0006.00
!

- 163 -
www.INE.com
Version 1.0
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 54.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 2
neighbor 150.1.3.3 ebgp-multihop 255
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!

- 164 -
www.INE.com
Version 1.0
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
Verification
SW1#show ip route
<output omitted>
R
R
R
R
C
C
R
SW1#ping 212.18.0.1
!!!!!

- 165 -
www.INE.com
Version 1.0
SW2#show ip route
<output omitted>
R
R
R
C
C
R
SW2#ping 222.22.2.1
!!!!!
R2#show ip bgp
Network
*> 150.1.3.3/32
*> 150.1.6.6/32
Next Hop
150.1.12.1
150.1.24.4

129
32768 i
30
0 2 i
R4#show ip bgp
Network
*> 150.1.3.3/32
*> 150.1.6.6/32
Next Hop
150.1.24.2
150.1.45.5

129
0 1 i
30
32768 i

Network
Next Hop
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*> 54.1.1.0/24
150.1.6.6
0
0 2 ?
*> 212.18.0.0
150.1.6.6
1
0 2 ?
*> 212.18.1.0
150.1.6.6
1
0 2 ?
*> 212.18.2.0
150.1.6.6
1
0 2 ?
*> 212.18.3.0
150.1.6.6
1
0 2 ?
*> 10.1.8.0/24
150.1.6.6
1
0 2 ?
*> 10.1.68.0/24
150.1.6.6
0
0 2 ?

- 166 -
www.INE.com

*>
*>
*>
*>
192.10.1.0
205.90.31.0
220.20.3.0
222.22.2.0
0.0.0.0
192.10.1.254
192.10.1.254
192.10.1.254
Version 1.0
0
7
7
7
32768
32768
32768
32768
?
?
?
?

Network
Next Hop
*> 10.1.7.0/24
150.1.3.3
1
0 1 ?
*> 10.1.37.0/24
150.1.3.3
0
0 1 ?
*> 54.1.1.0/24
0.0.0.0
0
32768 ?
*> 212.18.0.0
54.1.1.254
1
32768 ?
*> 212.18.1.0
54.1.1.254
1
32768 ?
*> 212.18.2.0
54.1.1.254
1
32768 ?
*> 212.18.3.0
54.1.1.254
1
32768 ?
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*> 192.10.1.0
150.1.3.3
0
0 1 ?
*> 205.90.31.0
150.1.3.3
7
0 1 ?
*> 220.20.3.0
150.1.3.3
7
0 1 ?
*> 222.22.2.0
150.1.3.3
7
0 1 ?
Local
tag
16
17
18
Outgoing
tag or VC
Pop tag
Pop tag
20
Prefix
or Tunnel Id
150.1.3.3/32
150.1.2.2/32
150.1.6.6/32
Bytes tag
switched
21915
16488
1836
Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
0
2148
0
2016
Outgoing
interface
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1
Fa0/0
Next Hop
Bytes tag
switched
0
0
0
0
0
520
Outgoing
interface
Se1/2
Se1/2
Se1/2
Se1/2
Et0/0
Next Hop
point2point
point2point
point2point

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Pop tag
Pop tag
16
Pop tag
18
Prefix
or Tunnel Id
150.1.24.4/32
150.1.1.1/32
150.1.3.3/32
150.1.13.0/24
150.1.6.6/32
150.1.24.4
point2point
point2point
point2point
150.1.24.4

Local
tag
16
17
18
25
26
27
Outgoing
tag or VC
Pop tag
Pop tag
17
18
Untagged
Aggregate
Prefix
or Tunnel Id
150.1.1.1/32
150.1.12.0/24
150.1.2.2/32
150.1.6.6/32
10.1.7.0/24[V]
10.1.37.0/24[V]

- 167 -
point2point
point2point
point2point
point2point
10.1.37.7
www.INE.com

28
29
30
31
Aggregate
Untagged
Untagged
Untagged
192.10.1.0/24[V]
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
Version 1.0
0
0
0
1140
Et0/1
Et0/1
Et0/1
192.10.1.254
192.10.1.254
192.10.1.254
Bytes tag
switched
0
0
1970
0
2652
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0
Next Hop
Bytes tag
switched
27056
16240
2382
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
0
0
0
0
520
0
0
0
0
936
Outgoing
interface
Gi0/0
Gi0/0
Gi0/0
Next Hop
Gi0/0
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Gi0/1
150.1.56.5
point2point
point2point
point2point
point2point
10.1.68.8

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Pop tag
Pop tag
16
Pop tag
18
Prefix
or Tunnel Id
150.1.24.2/32
150.1.5.5/32
150.1.6.6/32
150.1.56.0/24
150.1.3.3/32
150.1.24.2
point2point
point2point
point2point
150.1.24.2

Local
tag
16
17
18
Outgoing
tag or VC
Pop tag
Pop tag
20
Prefix
or Tunnel Id
150.1.6.6/32
150.1.4.4/32
150.1.3.3/32
150.1.56.6
point2point
point2point

Local
tag
16
17
19
20
21
22
23
24
25
26
33
Outgoing
tag or VC
18
Pop tag
Pop tag
Aggregate
17
Untagged
Untagged
Untagged
Untagged
Untagged
Aggregate
Prefix
or Tunnel Id
150.1.3.3/32
150.1.5.5/32
150.1.45.0/24
54.1.1.0/24[V]
150.1.4.4/32
212.18.0.0/24[V]
212.18.1.0/24[V]
212.18.2.0/24[V]
212.18.3.0/24[V]
10.1.8.0/24[V]
10.1.68.0/24[V]

- 168 -
150.1.56.5
150.1.56.5
150.1.56.5
www.INE.com

- 169 -
Version 1.0
www.INE.com
Version 1.0
Carrier Supporting Carrier IP Only Customer Carrier

Objective: Configure an MPLS Carrier Supporting Carrier architecture with AS 2
as the backbone carrier and AS 1 as the customer carrier to provide
transit between AS 65001 and AS 65002.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
BGP AS
65001
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
BGP
AS 1
OSPF 150.1.12.0/24
Area 0 Frame Relay
R1
.1
S0/0.1
102
201
.2
S0/0.1
R2
Fa0/0
.2
BGP
AS 2 E0/0
150.1.24.0/24 VLAN 24
.4
OSPF
Area 0
R4
S0/0.1
Frame Relay
.4
405
504
.5
S0/0.1
150.1.45.0/24
OSPF
Area 0
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
G0/1
SW2
Fa0/6
10.1.68.0/24
.6
BGP AS
65002
.6
BGP
AS 1
R6
.8

- 170 -
www.INE.com
Version 1.0
Directions

Configure OSPF area 0 on the link between R2 and R4
Configure MPLS on the interfaces between R2 and R4 and their
connections to AS 1
Create VRF AS1 on R2 and R4 using the route target and distinguisher
2:1
Apply this VRF to AS 2s connections to AS 1
Run OSPF as the PE-CE routing protocol between AS 2 and AS 1
Peer with iBGP between R2 and R4 to exchange VPNv4 prefixes
Configure Loopbacks on R1, R3, R5, and R6 in the format 150.1.Y.Y/32
Enable OSPF area 0 on all interfaces in the 150.1.0.0/16 network in AS 1
Enable MPLS on R1 and R5s connections to AS 1
Configure iBGP peerings between R1 & R3, R1 & R5, and R5 & R6
R1 should be a route-reflector for R3
R5 should be a route-reflector for R6
Configure EBGP peerings between R3 & SW1 and R6 & SW2
Redistribute where necessary to gain connectivity between AS 65001 and
AS 65002
Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
!

- 171 -
www.INE.com
Version 1.0
router bgp 1
R2#
ip vrf AS1
rd 2:1
!
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
!
router ospf 2 vrf AS1
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 2
!
exit-address-family
!
redistribute ospf 2
exit-address-family

- 172 -
www.INE.com
Version 1.0
R3#
ip cef
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
R4#
ip cef
!
ip vrf AS1
rd 2:1
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
tag-switching ip
!
network 150.1.45.4 0.0.0.0 area 0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!

- 173 -
www.INE.com
Version 1.0
router bgp 2
!
exit-address-family
!
redistribute ospf 2 vrf AS1
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
!
router bgp 1
R6#
ip cef
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
!
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
!

- 174 -
www.INE.com
Version 1.0
router bgp 1
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router bgp 65001
network 10.1.7.0 mask 255.255.255.0
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router bgp 65002
network 10.1.8.0 mask 255.255.255.0
Verification
SW1#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.37.3, 00:19:27
C
C

- 175 -
www.INE.com
Version 1.0
SW2#show ip route
<output omitted>
C
B
10.1.7.0 [20/0] via 10.1.68.6, 00:19:39
C
SW1#ping 10.1.8.8 source 10.1.7.7
!!!!!
R1#show ip route
<output omitted>
B
10.1.8.0 [200/0] via 150.1.56.6, 00:10:48
B
10.1.7.0 [200/0] via 150.1.13.3, 00:11:00
O IA
150.1.6.6/32 [110/139] via 150.1.12.2, 00:13:23, Serial0/0.1
O IA
150.1.5.5/32 [110/129] via 150.1.12.2, 00:13:23, Serial0/0.1
O
150.1.3.3/32 [110/65] via 150.1.13.3, 00:13:23, Serial0/1
C
C
C
O IA
150.1.56.0/24 [110/138] via 150.1.12.2, 00:13:23, Serial0/0.1
O IA
150.1.45.0/24 [110/65] via 150.1.12.2, 00:13:23, Serial0/0.1
<output omitted>
C
O
C
Routing Table: AS1
B
150.1.6.6/32 [200/75] via 150.1.24.4, 00:36:18
B
150.1.5.5/32 [200/65] via 150.1.24.4, 00:36:18
O
150.1.3.3/32 [110/129] via 150.1.12.1, 00:35:19, Serial0/0.1
O
150.1.1.1/32 [110/65] via 150.1.12.1, 00:35:19, Serial0/0.1
O
150.1.13.0/24 [110/128] via 150.1.12.1, 00:35:19, Serial0/0.1
C
B
150.1.56.0/24 [200/74] via 150.1.24.4, 00:36:18
B
150.1.45.0/24 [200/0] via 150.1.24.4, 00:36:18
R3#show ip route
<output omitted>
B
10.1.8.0 [200/0] via 150.1.56.6, 00:11:38
B
10.1.7.0 [20/0] via 10.1.37.7, 00:14:29
C
O IA
150.1.6.6/32 [110/920] via 150.1.13.1, 00:35:47, Serial1/2

- 176 -
www.INE.com

O IA
C
O
C
O
O IA
O IA
Version 1.0
150.1.5.5/32 [110/910] via 150.1.13.1, 00:35:47, Serial1/2

150.1.1.1/32 [110/782] via 150.1.13.1, 00:35:47, Serial1/2
150.1.12.0/24 [110/845] via 150.1.13.1, 00:35:47, Serial1/2
150.1.56.0/24 [110/919] via 150.1.13.1, 00:35:47, Serial1/2
150.1.45.0/24 [110/846] via 150.1.13.1, 00:35:47, Serial1/2

<output omitted>
C
C
O
150.1.2.2/32 [110/11] via 150.1.24.2, 00:46:17, Ethernet0/0
Routing Table: AS1
<output omitted>
O
150.1.6.6/32 [110/75] via 150.1.45.5, 00:39:38, Serial0/0.1
O
150.1.5.5/32 [110/65] via 150.1.45.5, 00:39:38, Serial0/0.1
B
150.1.3.3/32 [200/129] via 150.1.24.2, 00:38:20
B
150.1.1.1/32 [200/65] via 150.1.24.2, 00:38:20
B
150.1.13.0/24 [200/128] via 150.1.24.2, 00:38:20
B
150.1.12.0/24 [200/0] via 150.1.24.2, 00:38:20
O
150.1.56.0/24 [110/74] via 150.1.45.5, 00:39:38, Serial0/0.1
C
R5#show ip route
<output omitted>
B
10.1.8.0 [200/0] via 150.1.56.6, 00:15:40
B
10.1.7.0 [200/0] via 150.1.13.3, 00:15:52
O
150.1.6.6/32 [110/11] via 150.1.56.6, 00:40:17, Ethernet0/0
C
O E2
150.1.3.3/32 [110/129] via 150.1.45.4, 00:38:59, Serial0/0.1
O E2
150.1.1.1/32 [110/65] via 150.1.45.4, 00:38:59, Serial0/0.1
O E2
150.1.13.0/24 [110/128] via 150.1.45.4, 00:38:59, Serial0/0.1
O E2
150.1.12.0/24 [110/1] via 150.1.45.4, 00:38:59, Serial0/0.1
C
C
R6#show ip route
<output omitted>
B
B
C
C
O
O
O
O
O
C
O
E2
E2
E2
E2

10.1.8.0 [20/0] via 10.1.68.8, 00:18:07
10.1.7.0 [200/0] via 150.1.13.3, 00:18:07

- 177 -
www.INE.com
Version 1.0

<output omitted>
Network
Next Hop
*> 150.1.1.1/32
150.1.12.1
65
32768 ?
*> 150.1.3.3/32
150.1.12.1
129
32768 ?
*>i150.1.5.5/32
150.1.24.4
65
100
0 ?
*>i150.1.6.6/32
150.1.24.4
75
100
0 ?
*> 150.1.12.0/24
0.0.0.0
0
32768 ?
*> 150.1.13.0/24
150.1.12.1
128
32768 ?
*>i150.1.45.0/24
150.1.24.4
0
100
0 ?
*>i150.1.56.0/24
150.1.24.4
74
100
0 ?
<output omitted>
Network
Next Hop
*>i150.1.1.1/32
150.1.24.2
65
100
0 ?
*>i150.1.3.3/32
150.1.24.2
129
100
0 ?
*> 150.1.5.5/32
150.1.45.5
65
32768 ?
*> 150.1.6.6/32
150.1.45.5
75
32768 ?
*>i150.1.12.0/24
150.1.24.2
0
100
0 ?
*>i150.1.13.0/24
150.1.24.2
128
100
0 ?
*> 150.1.45.0/24
0.0.0.0
0
32768 ?
*> 150.1.56.0/24
150.1.45.5
74
32768 ?
R1#show ip bgp
<output omitted>
Network
*>i10.1.7.0/24
*>i10.1.8.0/24
Next Hop
150.1.13.3
150.1.56.6

0
100
0 65001 i
0
100
0 65002 i
R3#show ip bgp
<output omitted>
Network
*> 10.1.7.0/24
*>i10.1.8.0/24
Next Hop
10.1.37.7
150.1.56.6

0
0 65001 i
0
100
0 65002 i
R5#show ip bgp
<output omitted>
Network
*>i10.1.7.0/24
*>i10.1.8.0/24
Next Hop
150.1.13.3
150.1.56.6

0
100
0 65001 i
0
100
0 65002 i
R6#show ip bgp
<output omitted>
Network
*>i10.1.7.0/24
*> 10.1.8.0/24
Next Hop
150.1.13.3
10.1.68.8

0
100
0 65001 i
0
0 65002 i

- 178 -
www.INE.com
Version 1.0

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Untagged
20
19
18
17
Prefix
or Tunnel Id
150.1.3.3/32
150.1.5.5/32
150.1.6.6/32
150.1.45.0/24
150.1.56.0/24
Bytes tag
switched
520
0
0
0
0
Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
2006
0
590
2679
540
2192
1768
0
Outgoing
interface
Fa0/0
Fa0/0
Fa0/0
Fa0/0
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
540
2631
1768
0
3200
590
0
2006
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Et0/0
Et0/0
Et0/0
Et0/0
150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2
Bytes tag
switched
570
0
0
0
0
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
point2point
point2point
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
19
20
17
18
16
Pop tag
Pop tag
Aggregate
Prefix
or Tunnel Id
150.1.4.4/32
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.3.3/32[V]
150.1.1.1/32[V]
150.1.13.0/24[V]
150.1.12.0/24[V]
150.1.24.4
150.1.24.4
150.1.24.4
150.1.24.4
150.1.24.4
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
16
Pop tag
Pop tag
Aggregate
22
21
24
23
Prefix
or Tunnel Id
150.1.2.2/32
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.1.1/32[V]
150.1.3.3/32[V]
150.1.12.0/24[V]
150.1.13.0/24[V]
150.1.24.2
point2point
point2point
point2point

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Untagged
21
22
23
24
Prefix
or Tunnel Id
150.1.6.6/32
150.1.1.1/32
150.1.3.3/32
150.1.12.0/24
150.1.13.0/24

- 179 -
150.1.56.6
point2point
point2point
point2point
point2point
www.INE.com
Version 1.0
Carrier Supporting Carrier MPLS Enabled Customer Carrier

as the backbone carrier and AS 1 as an MPLS enabled customer
carrier to provide transit between AS 65001 and AS 65002.
Fa0/3
SW1
.7
10.1.37.0/24
BGP
AS 1
E0/0
R3
BGP AS
65001
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
OSPF 150.1.12.0/24
Area 0 Frame Relay
R1
.1
S0/0.1
102
201
.2
S0/0.1
R2
Fa0/0
.2
BGP
AS 2 E0/0
150.1.24.0/24 VLAN 24
.4
OSPF
Area 0
R4
S0/0.1
Frame Relay
.4
405
504
.5
S0/0.1
150.1.45.0/24
OSPF
Area 0
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
SW2
Fa0/6
10.1.68.0/24
.6
BGP AS
65002
R6
BGP
AS 1
.8

- 180 -
www.INE.com
Version 1.0
Directions

connections to AS 1
2:1
Enable OSPF area 0 on all interfaces in the 150.1.0.0/16 network on R1,
R3, R5, and R6
Enable MPLS on the links between R1 & R3, R5 & R6, and on R1 & R5s
connections to AS 1
Configure an iBGP peering between R3 and R6
Configure EBGP peerings between R3 & SW1 and R6 & SW2
Redistribute where necessary to gain connectivity between AS 65001 and
AS 65002
Final Configuration
R1#
ip cef
!
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!

- 181 -
www.INE.com
Version 1.0
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip vrf AS1
rd 2:1
!
ip cef
!
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
!
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 2
!
exit-address-family
!
redistribute ospf 2
exit-address-family
R3#
ip cef
!

- 182 -
www.INE.com
Version 1.0
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
R4#
ip cef
!
!
ip vrf AS1
rd 2:1
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
tag-switching ip
!
network 150.1.45.4 0.0.0.0 area 0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!

- 183 -
www.INE.com
Version 1.0
router bgp 2
!
exit-address-family
!
exit-address-family
R5#
ip cef
!
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
R6#
ip cef
!
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
mpls ip
!
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0

- 184 -
www.INE.com
Version 1.0
!
router bgp 1
neighbor 10.1.68.8
neighbor 150.1.3.3
neighbor 150.1.3.3
neighbor 150.1.3.3
remote-as 65002
remote-as 1
update-source Loopback0
next-hop-self
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router bgp 65001
network 10.1.7.0 mask 255.255.255.0
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router bgp 65002
network 10.1.8.0 mask 255.255.255.0
Verification
SW1#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.37.3, 00:02:44
C
C

- 185 -
www.INE.com
Version 1.0
SW2#show ip route
<output omitted>
C
B
10.1.7.0 [20/0] via 10.1.68.6, 00:02:56
C
SW1#ping 10.1.8.8 source 10.1.7.7
!!!!!
R1#show ip route
<output omitted>
O IA
150.1.6.6/32 [110/139] via 150.1.12.2, 00:02:04, Serial0/0.1
O IA
150.1.5.5/32 [110/129] via 150.1.12.2, 00:02:04, Serial0/0.1
O
150.1.3.3/32 [110/65] via 150.1.13.3, 00:02:04, Serial0/1
C
C
C
O IA
150.1.56.0/24 [110/138] via 150.1.12.2, 00:02:04, Serial0/0.1
O IA
150.1.45.0/24 [110/65] via 150.1.12.2, 00:02:04, Serial0/0.1
<output omitted>
C
O
C
Routing Table: AS1
<output omitted>
B
150.1.6.6/32 [200/75] via 150.1.24.4, 03:07:36
B
150.1.5.5/32 [200/65] via 150.1.24.4, 03:07:36
O
150.1.3.3/32 [110/129] via 150.1.12.1, 03:06:37, Serial0/0.1
O
150.1.1.1/32 [110/65] via 150.1.12.1, 03:06:37, Serial0/0.1
O
150.1.13.0/24 [110/128] via 150.1.12.1, 03:06:37, Serial0/0.1
C
B
150.1.56.0/24 [200/74] via 150.1.24.4, 03:07:36
B
150.1.45.0/24 [200/0] via 150.1.24.4, 03:07:36
R3#show ip route
<output omitted>
B
10.1.8.0 [200/0] via 150.1.6.6, 00:01:31
B
10.1.7.0 [20/0] via 10.1.37.7, 02:45:41
C
O IA
150.1.6.6/32 [110/920] via 150.1.13.1, 03:06:59, Serial1/2
O IA
150.1.5.5/32 [110/910] via 150.1.13.1, 03:06:59, Serial1/2

- 186 -
www.INE.com

C
O
C
O
O IA
O IA
Version 1.0

150.1.1.1/32 [110/782] via 150.1.13.1, 03:06:59, Serial1/2
150.1.12.0/24 [110/845] via 150.1.13.1, 03:06:59, Serial1/2
150.1.56.0/24 [110/919] via 150.1.13.1, 03:06:59, Serial1/2
150.1.45.0/24 [110/846] via 150.1.13.1, 03:06:59, Serial1/2

<output omitted>
C
C
O
150.1.2.2/32 [110/11] via 150.1.24.2, 03:14:23, Ethernet0/0
Routing Table: AS1
<output omitted>
O
150.1.6.6/32 [110/75] via 150.1.45.5, 03:07:44, Serial0/0.1
O
150.1.5.5/32 [110/65] via 150.1.45.5, 03:07:44, Serial0/0.1
B
150.1.3.3/32 [200/129] via 150.1.24.2, 03:06:26
B
150.1.1.1/32 [200/65] via 150.1.24.2, 03:06:26
B
150.1.13.0/24 [200/128] via 150.1.24.2, 03:06:26
B
150.1.12.0/24 [200/0] via 150.1.24.2, 03:06:26
O
150.1.56.0/24 [110/74] via 150.1.45.5, 03:07:44, Serial0/0.1
C
R5#show ip route
<output omitted>
O
150.1.6.6/32 [110/11] via 150.1.56.6, 00:03:23, Ethernet0/0
C
O E2
150.1.3.3/32 [110/129] via 150.1.45.4, 00:03:23, Serial0/0.1
O E2
150.1.1.1/32 [110/65] via 150.1.45.4, 00:03:23, Serial0/0.1
O E2
150.1.13.0/24 [110/128] via 150.1.45.4, 00:03:23, Serial0/0.1
O E2
150.1.12.0/24 [110/1] via 150.1.45.4, 00:03:23, Serial0/0.1
C
C
R6#show ip route
<output omitted>
B
B
C
C
O
O
O
O
O
C
O
E2
E2
E2
E2

10.1.8.0 [20/0] via 10.1.68.8, 02:43:54
10.1.7.0 [200/0] via 150.1.3.3, 00:02:30

- 187 -
www.INE.com
Version 1.0

<output omitted>
Network
Next Hop
*> 150.1.1.1/32
150.1.12.1
65
32768 ?
*> 150.1.3.3/32
150.1.12.1
129
32768 ?
*>i150.1.5.5/32
150.1.24.4
65
100
0 ?
*>i150.1.6.6/32
150.1.24.4
75
100
0 ?
*> 150.1.12.0/24
0.0.0.0
0
32768 ?
*> 150.1.13.0/24
150.1.12.1
128
32768 ?
*>i150.1.45.0/24
150.1.24.4
0
100
0 ?
*>i150.1.56.0/24
150.1.24.4
74
100
0 ?
<output omitted>
Network
Next Hop
*>i150.1.1.1/32
150.1.24.2
65
100
0 ?
*>i150.1.3.3/32
150.1.24.2
129
100
0 ?
*> 150.1.5.5/32
150.1.45.5
65
32768 ?
*> 150.1.6.6/32
150.1.45.5
75
32768 ?
*>i150.1.12.0/24
150.1.24.2
0
100
0 ?
*>i150.1.13.0/24
150.1.24.2
128
100
0 ?
*> 150.1.45.0/24
0.0.0.0
0
32768 ?
*> 150.1.56.0/24
150.1.45.5
74
32768 ?
R3#show ip bgp
<output omitted>
Network
*> 10.1.7.0/24
*>i10.1.8.0/24
Next Hop
10.1.37.7
150.1.6.6

0
0 65001 i
0
100
0 65002 i
R6#show ip bgp
<output omitted>
Network
*>i10.1.7.0/24
*> 10.1.8.0/24
Next Hop
150.1.3.3
10.1.68.8

0
100
0 65001 i
0
0 65002 i

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Pop tag
20
19
18
17
Prefix
or Tunnel Id
150.1.3.3/32
150.1.5.5/32
150.1.6.6/32
150.1.45.0/24
150.1.56.0/24
Bytes tag
switched
905
0
1041
0
0
Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
3186
0
Outgoing
interface
Fa0/0
Fa0/0
Fa0/0
Next Hop
point2point
point2point
point2point
point2point
point2point

Local
tag
16
17
18
Outgoing
tag or VC
Pop tag
19
20
Prefix
or Tunnel Id
150.1.4.4/32
150.1.56.0/24[V]
150.1.45.0/24[V]

- 188 -
150.1.24.4
150.1.24.4
150.1.24.4
www.INE.com

19
20
21
22
23
24
17
18
16
Pop tag
Pop tag
Aggregate
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.3.3/32[V]
150.1.1.1/32[V]
150.1.13.0/24[V]
150.1.12.0/24[V]
Version 1.0
1828
19836
1604
17667
2808
0
Fa0/0
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1
150.1.24.4
150.1.24.4
point2point
point2point
point2point
Bytes tag
switched
0
0
0
0
0
0
Outgoing
interface
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Next Hop
Bytes tag
switched
0
1652
15902
2808
0
22153
1774
0
3186
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Et0/0
Et0/0
Et0/0
Et0/0
150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2
Bytes tag
switched
1313
0
1181
0
0
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
0
0
0
0
0
Outgoing
interface
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Next Hop

Local
tag
16
17
18
19
20
21
Outgoing
tag or VC
18
17
Pop tag
Pop tag
20
19
Prefix
or Tunnel Id
150.1.6.6/32
150.1.5.5/32
150.1.1.1/32
150.1.12.0/24
150.1.56.0/24
150.1.45.0/24
point2point
point2point
point2point
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
16
Pop tag
Pop tag
Aggregate
22
21
24
23
Prefix
or Tunnel Id
150.1.2.2/32
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.1.1/32[V]
150.1.3.3/32[V]
150.1.12.0/24[V]
150.1.13.0/24[V]
150.1.24.2
point2point
point2point
point2point

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Pop tag
21
22
23
24
Prefix
or Tunnel Id
150.1.6.6/32
150.1.1.1/32
150.1.3.3/32
150.1.12.0/24
150.1.13.0/24
150.1.56.6
point2point
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
Outgoing
tag or VC
Pop tag
18
17
20
19
Pop tag
Prefix
or Tunnel Id
150.1.5.5/32
150.1.3.3/32
150.1.1.1/32
150.1.13.0/24
150.1.12.0/24
150.1.45.0/24

- 189 -
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
www.INE.com
Version 1.0
Carrier Supporting Carrier Hierarchical MPLS VPNs

as the backbone carrier and AS 1 as the customer carrier to provide
MPLS VPN service between SW1 & BB1 and SW2 & BB2.
Fa0/3
.254
RIPv2
RIPv2
E0/0
E0/1
R3
.3
SW1
.7
BGP
AS 1
10.1.37.0/24
192.10.X.0/24 VLAN 32
BB2
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
OSPF 150.1.12.0/24
Area 0 Frame Relay
R1
.1
S0/0.1
102
201
.2
S0/0.1
R2
Fa0/0
.2
BGP
AS 2 E0/0
150.1.24.0/24 VLAN 24
.4
150.1.45.0/24
R4
S0/0.1
OSPF
Area 0
Frame Relay
.4
405
504
.5
S0/0.1
OSPF
Area 0
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
RIPv2
Fa0/6
SW2
10.1.68.0/24
.6
S0/0/0.1
R6
BGP
AS 1
.8
.6
54.X.1.0/24
Frame Relay
101
.254
RIPv2
BB1

- 190 -
www.INE.com
Version 1.0
Directions

connections to AS 1
2:1
Enable OSPF area 0 on all interfaces in the 150.1.0.0/16 network on R1,
R3, R5, and R6
Enable MPLS on the links between R1 & R3, R5 & R6, and on R1 & R5s
connections to AS 1
SW1 and BB1 should be in VRF SW1-BB1 on R3 and R6
SW2 and BB2 should be in VRF SW2-BB2 on R3 and R6
password CISCO
Configure an iBGP peering between R1 and R6 for VPNv4 exchange
Redistribute where necessary to gain connectivity between SW1 & BB1
and SW2 & BB2
Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
!

- 191 -
www.INE.com
Version 1.0

ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip vrf AS1
rd 2:1
!
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
!
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 2
!
exit-address-family
!

- 192 -
www.INE.com
Version 1.0

redistribute ospf 2
exit-address-family
R3#
ip cef
!
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
ip address 192.10.1.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
network 192.10.1.0
no auto-summary
version 2
exit-address-family
!

- 193 -
www.INE.com
Version 1.0

network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf AS1
rd 2:1
!
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
tag-switching ip
!
network 150.1.45.4 0.0.0.0 area 0
!

- 194 -
www.INE.com
Version 1.0
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 2
!
exit-address-family
!
exit-address-family
R5#
ip cef
!
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
R6#
ip cef
!
ip vrf SW1-BB1
rd 1:100
!
ip vrf SW2-BB2
rd 1:200
!
!

- 195 -
www.INE.com
Version 1.0
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
mpls ip
!
ip address 10.1.68.6 255.255.255.0
!
!
ip address 54.1.1.6 255.255.255.0
!
router ospf 1
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 54.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
no auto-summary
no synchronization
exit-address-family
!

- 196 -
www.INE.com
Version 1.0

redistribute rip
no auto-summary
no synchronization
exit-address-family
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
!
router rip
version 2
network 10.0.0.0
no auto-summary

- 197 -
www.INE.com
Version 1.0
Verification
SW1#show ip route
<output omitted>
R
R
R
R
C
C
R
SW1#ping 212.18.0.1 source 10.1.7.7
!!!!!
SW2#show ip route
<output omitted>
R
R
C
C
R
R
SW2#ping 222.22.2.1 source 10.1.8.8
!!!!!
R1#show ip route
<output omitted>
O IA
150.1.6.6/32 [110/139] via 150.1.12.2, 06:47:39, Serial0/0.1
O IA
150.1.5.5/32 [110/129] via 150.1.12.2, 06:47:39, Serial0/0.1
O
150.1.3.3/32 [110/65] via 150.1.13.3, 06:47:39, Serial0/1
C
C
C
O IA
150.1.56.0/24 [110/138] via 150.1.12.2, 06:47:39, Serial0/0.1
O IA
150.1.45.0/24 [110/65] via 150.1.12.2, 06:47:39, Serial0/0.1

- 198 -
www.INE.com
Version 1.0

<output omitted>
C
O
C
Routing Table: AS1
<output omitted>
B
150.1.6.6/32 [200/75] via 150.1.24.4, 09:53:25
B
150.1.5.5/32 [200/65] via 150.1.24.4, 09:53:25
O
150.1.3.3/32 [110/129] via 150.1.12.1, 09:52:26, Serial0/0.1
O
150.1.1.1/32 [110/65] via 150.1.12.1, 09:52:26, Serial0/0.1
O
150.1.13.0/24 [110/128] via 150.1.12.1, 09:52:26, Serial0/0.1
C
B
150.1.56.0/24 [200/74] via 150.1.24.4, 09:53:25
B
150.1.45.0/24 [200/0] via 150.1.24.4, 09:53:25
<output omitted>
O IA
150.1.6.6/32 [110/920] via 150.1.13.1, 09:57:32, Serial1/2
O IA
150.1.5.5/32 [110/910] via 150.1.13.1, 09:57:32, Serial1/2
C
O
150.1.1.1/32 [110/782] via 150.1.13.1, 09:57:32, Serial1/2
C
O
150.1.12.0/24 [110/845] via 150.1.13.1, 09:57:32, Serial1/2
O IA
150.1.56.0/24 [110/919] via 150.1.13.1, 09:57:32, Serial1/2
O IA
150.1.45.0/24 [110/846] via 150.1.13.1, 09:57:32, Serial1/2
Routing Table: SW1-BB1
<output omitted>
B
54.1.1.0 [200/0] via 150.1.6.6, 00:10:53
B
212.18.1.0/24 [200/1] via 150.1.6.6, 00:10:53
B
212.18.0.0/24 [200/1] via 150.1.6.6, 00:10:53
B
212.18.3.0/24 [200/1] via 150.1.6.6, 00:10:53
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:19, Ethernet0/0
C
B
212.18.2.0/24 [200/1] via 150.1.6.6, 00:10:53
<output omitted>
R
222.22.2.0/24 [120/7] via 192.10.1.254, 00:00:10, Ethernet0/1
R
220.20.3.0/24 [120/7] via 192.10.1.254, 00:00:10, Ethernet0/1
B
10.1.8.0 [200/1] via 150.1.6.6, 00:10:53
B
10.1.68.0 [200/0] via 150.1.6.6, 00:10:53
C
R
205.90.31.0/24 [120/7] via 192.10.1.254, 00:00:10, Ethernet0/1

- 199 -
www.INE.com
Version 1.0

<output omitted>
C
C
O
150.1.2.2/32 [110/11] via 150.1.24.2, 10:05:02, Ethernet0/0
Routing Table: AS1
<output omitted>
O
150.1.6.6/32 [110/75] via 150.1.45.5, 09:58:24, Serial0/0.1
O
150.1.5.5/32 [110/65] via 150.1.45.5, 09:58:24, Serial0/0.1
B
150.1.3.3/32 [200/129] via 150.1.24.2, 09:57:05
B
150.1.1.1/32 [200/65] via 150.1.24.2, 09:57:05
B
150.1.13.0/24 [200/128] via 150.1.24.2, 09:57:05
B
150.1.12.0/24 [200/0] via 150.1.24.2, 09:57:05
O
150.1.56.0/24 [110/74] via 150.1.45.5, 09:58:24, Serial0/0.1
C
R5#show ip route
<output omitted>
O
150.1.6.6/32 [110/11] via 150.1.56.6, 06:53:53, Ethernet0/0
C
O E2
150.1.3.3/32 [110/129] via 150.1.45.4, 06:53:53, Serial0/0.1
O E2
150.1.1.1/32 [110/65] via 150.1.45.4, 06:53:53, Serial0/0.1
O E2
150.1.13.0/24 [110/128] via 150.1.45.4, 06:53:53, Serial0/0.1
O E2
150.1.12.0/24 [110/1] via 150.1.45.4, 06:53:53, Serial0/0.1
C
C
<output omitted>
C
O
O
O
O
O
C
O
E2
E2
E2
E2


<output omitted>
C
54.1.1.0 is directly connected, Serial0/0/0.1
R
212.18.1.0/24 [120/1] via 54.1.1.254, 00:00:08, Serial0/0/0.1
R
212.18.0.0/24 [120/1] via 54.1.1.254, 00:00:08, Serial0/0/0.1
R
212.18.3.0/24 [120/1] via 54.1.1.254, 00:00:08, Serial0/0/0.1
B
10.1.7.0 [200/1] via 150.1.3.3, 00:11:45
B
10.1.37.0 [200/0] via 150.1.3.3, 00:11:45
R
212.18.2.0/24 [120/1] via 54.1.1.254, 00:00:08, Serial0/0/0.1

- 200 -
www.INE.com
Version 1.0

<output omitted>
B
222.22.2.0/24 [200/7] via 150.1.3.3, 00:09:14
B
220.20.3.0/24 [200/7] via 150.1.3.3, 00:09:14
R
C
B
192.10.1.0/24 [200/0] via 150.1.3.3, 00:11:45
B
205.90.31.0/24 [200/7] via 150.1.3.3, 00:09:14
<output omitted>
Network
Next Hop
*> 150.1.1.1/32
150.1.12.1
65
32768 ?
*> 150.1.3.3/32
150.1.12.1
129
32768 ?
*>i150.1.5.5/32
150.1.24.4
65
100
0 ?
*>i150.1.6.6/32
150.1.24.4
75
100
0 ?
*> 150.1.12.0/24
0.0.0.0
0
32768 ?
*> 150.1.13.0/24
150.1.12.1
128
32768 ?
*>i150.1.45.0/24
150.1.24.4
0
100
0 ?
*>i150.1.56.0/24
150.1.24.4
74
100
0 ?
<output omitted>
Network
Next Hop
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i54.1.1.0/24
150.1.6.6
0
100
0 ?
*>i212.18.0.0
150.1.6.6
1
100
0 ?
*>i212.18.1.0
150.1.6.6
1
100
0 ?
*>i212.18.2.0
150.1.6.6
1
100
0 ?
*>i212.18.3.0
150.1.6.6
1
100
0 ?
*>i10.1.8.0/24
150.1.6.6
1
100
0 ?
*>i10.1.68.0/24
150.1.6.6
0
100
0 ?
*> 192.10.1.0
0.0.0.0
0
32768 ?
*> 205.90.31.0
192.10.1.254
7
32768 ?
*> 220.20.3.0
192.10.1.254
7
32768 ?
*> 222.22.2.0
192.10.1.254
7
32768 ?
<output omitted>
Network
Next Hop
*>i150.1.1.1/32
150.1.24.2
65
100
0 ?
*>i150.1.3.3/32
150.1.24.2
129
100
0 ?
*> 150.1.5.5/32
150.1.45.5
65
32768 ?
*> 150.1.6.6/32
150.1.45.5
75
32768 ?
*>i150.1.12.0/24
150.1.24.2
0
100
0 ?
*>i150.1.13.0/24
150.1.24.2
128
100
0 ?
*> 150.1.45.0/24
0.0.0.0
0
32768 ?
*> 150.1.56.0/24
150.1.45.5
74
32768 ?

- 201 -
www.INE.com
Version 1.0

<output omitted>
Network
Next Hop
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 54.1.1.0/24
0.0.0.0
0
32768 ?
*> 212.18.0.0
54.1.1.254
1
32768 ?
*> 212.18.1.0
54.1.1.254
1
32768 ?
*> 212.18.2.0
54.1.1.254
1
32768 ?
*> 212.18.3.0
54.1.1.254
1
32768 ?
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*>i192.10.1.0
150.1.3.3
0
100
0 ?
*>i205.90.31.0
150.1.3.3
7
100
0 ?
*>i220.20.3.0
150.1.3.3
7
100
0 ?
*>i222.22.2.0
150.1.3.3
7
100
0 ?
Local
tag
16
17
18
19
20
Outgoing
tag or VC
Pop tag
20
19
18
17
Prefix
or Tunnel Id
150.1.3.3/32
150.1.5.5/32
150.1.6.6/32
150.1.45.0/24
150.1.56.0/24
Bytes tag
switched
44383
0
42358
0
0
Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
3186
0
49718
19836
48695
17667
2808
0
Outgoing
interface
Fa0/0
Fa0/0
Fa0/0
Fa0/0
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
0
0
0
0
0
0
0
570
Outgoing
interface
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Next Hop
Et0/0
10.1.37.7
point2point
point2point
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
19
20
17
18
16
Pop tag
Pop tag
Aggregate
Prefix
or Tunnel Id
150.1.4.4/32
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.3.3/32[V]
150.1.1.1/32[V]
150.1.13.0/24[V]
150.1.12.0/24[V]
150.1.24.4
150.1.24.4
150.1.24.4
150.1.24.4
150.1.24.4
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
18
17
Pop tag
Pop tag
20
19
Aggregate
Aggregate
Untagged
Prefix
or Tunnel Id
150.1.6.6/32
150.1.5.5/32
150.1.1.1/32
150.1.12.0/24
150.1.56.0/24
150.1.45.0/24
10.1.37.0/24[V]
192.10.1.0/24[V]
10.1.7.0/24[V]

- 202 -
point2point
point2point
point2point
point2point
point2point
point2point
www.INE.com

25
26
27
Untagged
Untagged
Untagged
Version 1.0
205.90.31.0/24[V] 0
220.20.3.0/24[V] 0
222.22.2.0/24[V] 570
Et0/1
Et0/1
Et0/1
192.10.1.254
192.10.1.254
192.10.1.254
Bytes tag
switched
0
44066
15902
2808
0
22153
57027
0
3186
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Et0/0
Et0/0
Et0/0
Et0/0
150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2
Bytes tag
switched
47182
0
48607
0
0
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
0
0
0
0
0
0
520
0
0
0
456
0
Outgoing
interface
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Next Hop
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Gi0/1
point2point
point2point
point2point
point2point
10.1.68.8

Local
tag
16
17
18
19
20
21
22
23
24
Outgoing
tag or VC
Pop tag
16
Pop tag
Pop tag
Aggregate
22
21
24
23
Prefix
or Tunnel Id
150.1.2.2/32
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.1.1/32[V]
150.1.3.3/32[V]
150.1.12.0/24[V]
150.1.13.0/24[V]
150.1.24.2
point2point
point2point
point2point

Local
tag
16
17
18
19
20
Outgoing
tag or VC
Pop tag
21
22
23
24
Prefix
or Tunnel Id
150.1.6.6/32
150.1.1.1/32
150.1.3.3/32
150.1.12.0/24
150.1.13.0/24
150.1.56.6
point2point
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
24
25
26
27
28
Outgoing
tag or VC
Pop tag
18
17
20
19
Pop tag
Aggregate
Untagged
Untagged
Untagged
Untagged
Untagged
Aggregate
Prefix
or Tunnel Id
150.1.5.5/32
150.1.3.3/32
150.1.1.1/32
150.1.13.0/24
150.1.12.0/24
150.1.45.0/24
54.1.1.0/24[V]
212.18.0.0/24[V]
212.18.1.0/24[V]
212.18.2.0/24[V]
212.18.3.0/24[V]
10.1.8.0/24[V]
10.1.68.0/24[V]

- 203 -
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
www.INE.com
Version 1.0
VRF-Lite
Objective: Configure VRF-Lite (Multi-VRF) on R3 and R6 to propagate routing
information from SW1 & BB3 and SW2 & BB1 to R1 and R5
respectively.
Fa0/3
.254
SW1
.7
RIPv2
RIPv2
E0/1
E0/0
R3
.3
10.1.37.0/24
204.10.X.0/24 VLAN 33
BB3
.3
.3
S1/2.1
S1/2.2
10.1.13.0/24
S0/1.1
10.1.31.0/24
.1
S0/1.2
150.1.12.0/24
R1
Frame Relay
.1
102
BGP
AS 100
201
.2
S0/0.1
IS-IS
Level 2
R2
Fa0/0
.2
E0/0
.4
S0/0.1
150.1.24.0/24 VLAN 24
150.1.45.0/24
R4
S0/0.1
Frame Relay
.4
405
BGP
AS 100
504
.5
S0/0.1
R5
E0/0.56 E0/0.65
10.1.56.0/24 VLAN 56
.6
.5
.5
10.1.65.0/24 VLAN 65
.6
G0/0.56 G0/0.65
G0/1
S0/0/0.1
RIPv2
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8
.6
54.X.1.0/24
Frame Relay
RIPv2 101
.254
BB1

- 204 -
www.INE.com
Version 1.0
Directions

The Ethernet links connecting R5 and R6 should be 802.1q trunks to carry
VLANs 56 and 65
The Serial link between R1 and R3 should run back-to-back Frame Relay
Create VRFs SW1 and BB3 on R3
Networks 10.1.13.0/24 and 10.1.37.0/24 should be in VRF SW1
Networks 10.1.31.0/24 and 204.12.X.0/24 should be in VRF BB3
Configure RIPv2 for VRFs SW1 and BB3 on R3
Create VRFs SW2 and BB1 on R6
Networks 10.1.56.0/24 and 10.1.68.0/24 should be in VRF SW2
Networks 10.1.65.0/24 and 54.X.1.0/24 should be in VRF BB1
Configure RIPv2 for VRFs SW2 and BB1 on R6
Configure IS-IS Level-2 on the interfaces between R1, R2, R4, and R5
Create Loopbacks on R1 and R5 in the format 150.1.Y/Y/32 and advertise
them into IS-IS
Create VRF SW1-BB1 on R1 and R5 using the route distinguisher and
target 100:1
Create VRF SW2-BB3 on R1 and R5 using the route distinguisher and
target 100:2
Networks 10.1.13.0/24 and 10.1.65.0/24 on R1 and R6 should be in VRF
SW1-BB1
Networks 10.1.31.0/24 and 10.1.56.0/24 on R1 and R6 should be in VRF
SW2-BB3
Configure RIPv2 for VRFs SW1-BB1 and SW2-BB3 on R1 and R5

- 205 -
www.INE.com
Version 1.0
Final Configuration
R1#
ip vrf SW1-BB1
rd 100:1
!
ip vrf SW2-BB3
rd 100:2
!
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/1
no keepalive
!
ip address 10.1.13.1 255.255.255.0
!
ip address 10.1.31.1 255.255.255.0
!
router isis
net 00.0000.0000.0001.00
passive-interface Loopback0
!
router rip
version 2
!
version 2
network 10.0.0.0
no auto-summary
exit-address-family

- 206 -
www.INE.com
Version 1.0
!
version 2
network 10.0.0.0
no auto-summary
exit-address-family
!
router bgp 100
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R2#
ip cef
!
ip address 150.1.24.2 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0002.00

- 207 -
www.INE.com
Version 1.0
R3#
ip cef
!
ip vrf BB3
rd 100:2
!
ip vrf SW1
rd 100:1
!
ip address 10.1.37.3 255.255.255.0
!
ip vrf forwarding BB3
ip address 204.12.1.3 255.255.255.0
!
interface Serial1/2
no keepalive
clockrate 64000
!
ip address 10.1.13.3 255.255.255.0
!
ip address 10.1.31.3 255.255.255.0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf BB3
network 10.0.0.0
network 204.12.1.0
no auto-summary
version 2
exit-address-family
R4#
ip cef
!
!
ip address 150.1.24.4 255.255.255.0
ip router isis
tag-switching ip
!

- 208 -
www.INE.com
Version 1.0
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0004.00
R5#
ip cef
!
ip vrf SW1-BB1
rd 100:1
!
ip vrf SW2-BB3
rd 100:2
!
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 10.1.56.5 255.255.255.0
!
ip address 10.1.65.5 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0005.00
passive-interface Loopback0
!

- 209 -
www.INE.com
Version 1.0
router rip
version 2
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
!
exit-address-family
!
redistribute rip
exit-address-family
!
redistribute rip
exit-address-family
R6#
ip cef
!
ip vrf BB1
rd 100:1
!
ip vrf SW2
rd 100:2
!
interface GigabitEthernet0/0.56
ip address 10.1.56.6 255.255.255.0
!
interface GigabitEthernet0/0.65
ip address 10.1.65.6 255.255.255.0
!
ip address 10.1.68.6 255.255.255.0
!

- 210 -
www.INE.com
Version 1.0
!
ip address 54.1.1.6 255.255.255.0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf BB1
network 10.0.0.0
network 54.0.0.0
no auto-summary
version 2
exit-address-family
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary

- 211 -
www.INE.com
Version 1.0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
Verification
<output omitted>
Routing Table: BB3
<output omitted>
C
R
10.1.8.0 [120/1] via 10.1.31.1, 00:00:00, Serial1/2.2
C
10.1.31.0 is directly connected, Serial1/2.2
R
10.1.56.0 [120/1] via 10.1.31.1, 00:00:00, Serial1/2.2
R
10.1.68.0 [120/1] via 10.1.31.1, 00:00:00, Serial1/2.2
R
31.3.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
31.2.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
31.1.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
31.0.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
30.2.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
30.3.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
30.0.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
30.1.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
Routing Table: SW1
<output omitted>
R
54.1.1.0 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
R
212.18.1.0/24 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
R
212.18.0.0/24 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
R
212.18.3.0/24 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
C
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:17, Ethernet0/0
C
R
10.1.65.0 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
R
212.18.2.0/24 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1

- 212 -
www.INE.com

R6#show
<output
Routing
<output
R
R
R
C
C
R
R
R
R
R
R
R
R
Version 1.0
ip route vrf *
omitted>
Table: SW2
omitted>
204.12.1.0/24 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56

10.1.31.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
10.1.56.0 is directly connected, GigabitEthernet0/0.56
Routing Table: BB1

<output omitted>
C
R
R
R
R
R
R
C
R

54.1.1.0 is directly connected, Serial0/0/0.1
212.18.1.0/24 [120/1] via 54.1.1.254, 00:00:01, Serial0/0/0.1
212.18.0.0/24 [120/1] via 54.1.1.254, 00:00:01, Serial0/0/0.1
212.18.3.0/24 [120/1] via 54.1.1.254, 00:00:01, Serial0/0/0.1
10.1.65.0 is directly connected, GigabitEthernet0/0.65
212.18.2.0/24 [120/1] via 54.1.1.254, 00:00:01, Serial0/0/0.1

<output omitted>
i L2
150.1.24.0/24 [115/20] via 150.1.12.2, Serial0/0.1
i L2
150.1.5.5/32 [115/30] via 150.1.12.2, Serial0/0.1
C
C
i L2
150.1.45.0/24 [115/30] via 150.1.12.2, Serial0/0.1
<output omitted>
B
54.1.1.0 [200/1] via 150.1.5.5, 00:05:01
B
212.18.1.0/24 [200/2] via 150.1.5.5, 00:05:01
B
212.18.0.0/24 [200/2] via 150.1.5.5, 00:05:01
B
212.18.3.0/24 [200/2] via 150.1.5.5, 00:05:01
C
R
10.1.7.0 [120/2] via 10.1.13.3, 00:00:23, Serial0/1.1
R
10.1.37.0 [120/1] via 10.1.13.3, 00:00:23, Serial0/1.1
B
10.1.65.0 [200/0] via 150.1.5.5, 00:05:02
B
212.18.2.0/24 [200/2] via 150.1.5.5, 00:05:01

- 213 -
www.INE.com
Version 1.0

<output omitted>
R
204.12.1.0/24 [120/1] via 10.1.31.3, 00:00:12, Serial0/1.2
B
10.1.8.0 [200/2] via 150.1.5.5, 00:05:02
C
B
10.1.56.0 [200/0] via 150.1.5.5, 00:05:02
B
10.1.68.0 [200/1] via 150.1.5.5, 00:05:02
R
31.3.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
31.2.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
31.1.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
31.0.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
30.2.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
30.3.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
30.0.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
30.1.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
<output omitted>
i L2
150.1.24.0/24 [115/20] via 150.1.45.4, Serial0/0.1
C
i L2
150.1.1.1/32 [115/30] via 150.1.45.4, Serial0/0.1
i L2
150.1.12.0/24 [115/30] via 150.1.45.4, Serial0/0.1
C
<output omitted>
R
54.1.1.0 [120/1] via 10.1.65.6, 00:00:05, Ethernet0/0.65
R
212.18.1.0/24 [120/2] via 10.1.65.6, 00:00:05, Ethernet0/0.65
R
212.18.0.0/24 [120/2] via 10.1.65.6, 00:00:05, Ethernet0/0.65
R
212.18.3.0/24 [120/2] via 10.1.65.6, 00:00:05, Ethernet0/0.65
B
10.1.13.0 [200/0] via 150.1.1.1, 00:09:58
B
10.1.7.0 [200/2] via 150.1.1.1, 00:08:13
B
10.1.37.0 [200/1] via 150.1.1.1, 00:09:58
C
10.1.65.0 is directly connected, Ethernet0/0.65
R
212.18.2.0/24 [120/2] via 10.1.65.6, 00:00:05, Ethernet0/0.65
<output omitted>
B
204.12.1.0/24 [200/1] via 150.1.1.1, 00:09:58
R
10.1.8.0 [120/2] via 10.1.56.6, 00:00:19, Ethernet0/0.56
B
10.1.31.0 [200/0] via 150.1.1.1, 00:09:58
C
10.1.56.0 is directly connected, Ethernet0/0.56
R
10.1.68.0 [120/1] via 10.1.56.6, 00:00:19, Ethernet0/0.56
B
31.3.0.0 [200/2] via 150.1.1.1, 00:09:58
B
31.2.0.0 [200/2] via 150.1.1.1, 00:09:58
B
31.1.0.0 [200/2] via 150.1.1.1, 00:09:58
B
31.0.0.0 [200/2] via 150.1.1.1, 00:09:58
B
30.2.0.0 [200/2] via 150.1.1.1, 00:09:58

- 214 -
www.INE.com

B
B
B
Version 1.0
30.3.0.0 [200/2] via 150.1.1.1, 00:09:58

30.0.0.0 [200/2] via 150.1.1.1, 00:09:58
30.1.0.0 [200/2] via 150.1.1.1, 00:09:58

<output omitted>
Network
Next Hop
*> 10.1.7.0/24
10.1.13.3
2
32768 ?
*> 10.1.13.0/24
0.0.0.0
0
32768 ?
*> 10.1.37.0/24
10.1.13.3
1
32768 ?
*>i10.1.65.0/24
150.1.5.5
0
100
0 ?
*>i54.1.1.0/24
150.1.5.5
1
100
0 ?
*>i212.18.0.0
150.1.5.5
2
100
0 ?
*>i212.18.1.0
150.1.5.5
2
100
0 ?
*>i212.18.2.0
150.1.5.5
2
100
0 ?
*>i212.18.3.0
150.1.5.5
2
100
0 ?
*>i10.1.8.0/24
150.1.5.5
2
100
0 ?
*> 10.1.31.0/24
0.0.0.0
0
32768 ?
*>i10.1.56.0/24
150.1.5.5
0
100
0 ?
*>i10.1.68.0/24
150.1.5.5
1
100
0 ?
*> 30.0.0.0/16
10.1.31.3
2
32768 ?
*> 30.1.0.0/16
10.1.31.3
2
32768 ?
*> 30.2.0.0/16
10.1.31.3
2
32768 ?
*> 30.3.0.0/16
10.1.31.3
2
32768 ?
*> 31.0.0.0/16
10.1.31.3
2
32768 ?
*> 31.1.0.0/16
10.1.31.3
2
32768 ?
*> 31.2.0.0/16
10.1.31.3
2
32768 ?
*> 31.3.0.0/16
10.1.31.3
2
32768 ?
*> 204.12.1.0
10.1.31.3
1
32768 ?

<output omitted>
Network
Next Hop
*>i10.1.7.0/24
150.1.1.1
2
100
0 ?
*>i10.1.13.0/24
150.1.1.1
0
100
0 ?
*>i10.1.37.0/24
150.1.1.1
1
100
0 ?
*> 10.1.65.0/24
0.0.0.0
0
32768 ?
*> 54.1.1.0/24
10.1.65.6
1
32768 ?
*> 212.18.0.0
10.1.65.6
2
32768 ?
*> 212.18.1.0
10.1.65.6
2
32768 ?
*> 212.18.2.0
10.1.65.6
2
32768 ?
*> 212.18.3.0
10.1.65.6
2
32768 ?
*> 10.1.8.0/24
10.1.56.6
2
32768 ?
*>i10.1.31.0/24
150.1.1.1
0
100
0 ?
*> 10.1.56.0/24
0.0.0.0
0
32768 ?
*> 10.1.68.0/24
10.1.56.6
1
32768 ?
*>i30.0.0.0/16
150.1.1.1
2
100
0 ?
*>i30.1.0.0/16
150.1.1.1
2
100
0 ?
*>i30.2.0.0/16
150.1.1.1
2
100
0 ?
*>i30.3.0.0/16
150.1.1.1
2
100
0 ?
*>i31.0.0.0/16
150.1.1.1
2
100
0 ?
*>i31.1.0.0/16
150.1.1.1
2
100
0 ?
*>i31.2.0.0/16
150.1.1.1
2
100
0 ?
*>i31.3.0.0/16
150.1.1.1
2
100
0 ?
*>i204.12.1.0
150.1.1.1
1
100
0 ?

- 215 -
www.INE.com
Version 1.0
Controlling MPLS Label Distribution

Objective: Configure an MPLS VPN between SW1 and SW2 over AS 100. Only
traffic between R3 and R6s loopback should be label switched
throughout AS 100.
Fa0/3
RIPv2
E0/0
R3
10.1.37.0/24
.7
BGP
AS 100
SW1
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
150.1.12.0/24
R1
Frame Relay
.1
S0/0.1
102
201
.2
S0/0.1
IS-IS
Level 2
R2
Fa0/0
.2
E0/0
.4
150.1.24.0/24 VLAN 24
150.1.45.0/24
R4
S0/0.1
Frame Relay
.4
405
504
.5
S0/0.1
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
R6
RIPv2
Fa0/6
SW2
10.1.68.0/24
.6
BGP
AS 100
.8

- 216 -
www.INE.com
Version 1.0
Directions

Configure IS-IS Level-2 on the interfaces between R1, R2, R3, R4, R5,
and R6
Create Loopbacks on R1, R2, R3, R4, R5, and R6 in the format
150.1.Y/Y/32 and advertise them into IS-IS
Configure MPLS on the interfaces between R1, R2, R3, R4, R5, and R6
SW1 and SW2 should be in VRF SW1-SW2
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R6 & SW2
Configure LDP filtering throughout the MPLS network so that only traffic
between R3 and R6s Loopback is label switched
Final Configuration
R1#
ip cef
!
no tag-switching advertise-tags
tag-switching advertise-tags for 1
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
ip router isis
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0001.00
!

- 217 -
www.INE.com
Version 1.0
access-list 1 permit 150.1.6.6

access-list 1 deny
any
R2#
ip cef
!
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
ip router isis
!
ip address 150.1.24.2 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0002.00
!
access-list 1 deny
any
R3#
ip cef
!
ip vrf SW1-SW2
rd 100:1
!
!
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
ip router isis
!
ip vrf forwarding SW1-SW2
ip address 10.1.37.3 255.255.255.0

- 218 -
www.INE.com
Version 1.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip router isis
tag-switching ip
clockrate 64000
!
router isis
net 00.0000.0000.0003.00
!
router rip
!
address-family ipv4 vrf SW1-SW2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
!
exit-address-family
!
redistribute rip
exit-address-family
!
access-list 1 deny
any
R4#
ip cef
!
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
ip address 150.1.24.4 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
!

- 219 -
www.INE.com
Version 1.0

ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0004.00
!
access-list 1 deny
any
R5#
ip cef
!
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!
ip address 150.1.56.5 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0005.00
!
access-list 1 deny
any

- 220 -
www.INE.com
Version 1.0
R6#
ip cef
!
ip vrf SW1-SW2
rd 100:1
!
!
no mpls ldp advertise-labels
mpls ldp advertise-labels for 1
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
!
ip address 150.1.56.6 255.255.255.0
ip router isis
mpls ip
!
ip address 10.1.68.6 255.255.255.0
!
router isis
net 00.0000.0000.0006.00
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
!
exit-address-family
!
redistribute rip
exit-address-family
!
access-list 1 deny
any

- 221 -
www.INE.com
Version 1.0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
ip ospf network point-to-point
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
access-list 1 deny
any

- 222 -
www.INE.com
Version 1.0
Verification
Local
tag
16
17
18
19
20
21
22
23
Outgoing
tag or VC
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
23
Prefix
or Tunnel Id
150.1.3.3/32
150.1.24.0/24
150.1.2.2/32
150.1.4.4/32
150.1.45.0/24
150.1.5.5/32
150.1.56.0/24
150.1.6.6/32
Bytes tag
switched
2605
0
0
0
0
0
0
67
Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
0
0
0
54361
0
0
154
Outgoing
interface
Fa0/0
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1
Fa0/0
Fa0/0
Fa0/0
Next Hop
Bytes tag
switched
0
0
0
0
0
0
0
0
0
0
0
Outgoing
interface
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Et0/0
Next Hop
Bytes tag
switched
0
368
0
0
0
0
0
351
Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0
Et0/0
Et0/0
Et0/0
Et0/0
Next Hop
point2point
point2point
point2point
point2point
point2point
point2point
point2point
point2point

Local
tag
16
17
18
19
20
21
22
23
Outgoing
tag or VC
Untagged
Untagged
Untagged
Untagged
16
Untagged
Untagged
17
Prefix
or Tunnel Id
150.1.4.4/32
150.1.45.0/24
150.1.1.1/32
150.1.13.0/24
150.1.3.3/32
150.1.5.5/32
150.1.56.0/24
150.1.6.6/32
150.1.24.4
150.1.24.4
point2point
point2point
point2point
150.1.24.4
150.1.24.4
150.1.24.4

Local
tag
16
17
18
19
20
21
22
23
24
27
28
Outgoing
tag or VC
Untagged
Untagged
Untagged
Untagged
Untagged
23
Untagged
Untagged
Untagged
Untagged
Aggregate
Prefix
or Tunnel Id
150.1.1.1/32
150.1.12.0/24
150.1.2.2/32
150.1.4.4/32
150.1.5.5/32
150.1.6.6/32
150.1.24.0/24
150.1.45.0/24
150.1.56.0/24
10.1.7.0/24[V]
10.1.37.0/24[V]
point2point
point2point
point2point
point2point
point2point
point2point
point2point
point2point
point2point
10.1.37.7

Local
tag
16
17
18
19
20
21
22
23
Outgoing
tag or VC
Untagged
16
Untagged
Untagged
Untagged
Untagged
Untagged
20
Prefix
or Tunnel Id
150.1.5.5/32
150.1.6.6/32
150.1.56.0/24
150.1.2.2/32
150.1.1.1/32
150.1.12.0/24
150.1.13.0/24
150.1.3.3/32

- 223 -
point2point
point2point
point2point
150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2
www.INE.com
Version 1.0

Local
tag
16
17
18
19
20
21
22
23
Outgoing
tag or VC
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
23
Prefix
or Tunnel Id
150.1.6.6/32
150.1.4.4/32
150.1.24.0/24
150.1.2.2/32
150.1.1.1/32
150.1.12.0/24
150.1.13.0/24
150.1.3.3/32
Bytes tag
switched
8532
0
0
0
0
0
0
418
Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Next Hop
Bytes tag
switched
0
0
0
0
0
0
0
0
0
0
0
Outgoing
interface
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/1
Next Hop
150.1.56.6
point2point
point2point
point2point
point2point
point2point
point2point
point2point

Local
tag
16
17
18
19
22
23
24
25
26
27
28
Outgoing
tag or VC
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
23
Untagged
Aggregate
Prefix
or Tunnel Id
150.1.5.5/32
150.1.4.4/32
150.1.45.0/24
150.1.24.0/24
150.1.2.2/32
150.1.1.1/32
150.1.12.0/24
150.1.13.0/24
150.1.3.3/32
10.1.8.0/24[V]
10.1.68.0/24[V]

- 224 -
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
10.1.68.8
www.INE.com

- 225 -
Version 1.0
www.INE.com
Version 1.0
MPLS Traffic Engineering Dynamic PE to PE Tunnels

Objective: Configure a dynamic MPLS Traffic Engineering tunnel between R3
and R4 with a 10Mbps guarantee to transport traffic between SW1
and SW2.
Fa0/3
.7
BGP
AS 1
10.1.37.0/24
SW1
BGP
AS 2
E0/0
R3
.3
.3
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
S0/0.2
Fa0/0
.2
OSPF
Area 0
.2
R2
205
Frame Relay
S0/0.1
.2
150.1.25.0/24
204
Frame Relay
502
150.1.24.0/24
402
.5
S0/0.2
S0/1
R5
.4
.5
S0/0.1
.4
S0/1
.4
R4
BGP
AS 1
E0/1
10.1.48.0/24
10.1.45.0/24
BGP
AS 3
.8
Fa0/4

- 226 -
SW2
www.INE.com
Version 1.0
Directions

The Frame Relay links between R2 & R4 and R2 & R5 have a bandwidth
of DS3 (45Mbps)
The Point-to-Point links between R1 & R3 and R4 & R5 have a bandwidth
of OC3 (155Mbps)
Configure OSPF area 0 on the interfaces between R1, R2, R3, R4, and
R5
Create Loopbacks on R1, R2, R3, R4, and R5 in the format 150.1.Y.Y/32
and advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R3, R4, and R5
Enable support for MPLS TE tunnels on all transit interfaces in the MPLS
network
Enable RSVP support on all transit interfaces in the MPLS network
Configure an MPLS TE tunnel on R3 with R4s Loopback as the
destination
The path for this tunnel should be dynamically selected and have a priority
of one
Reserve 10Mbps through the MPLS network for this tunnel
Advertise the tunnel interface into OSPF
destination
The path for this tunnel should be dynamically selected and have a priority
of one
Final Configuration
R1#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip
ip rsvp bandwidth 100000 100000

- 227 -
www.INE.com
Version 1.0
!
interface Serial0/1
bandwidth 155000
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
bandwidth 45000
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
bandwidth 45000
ip address 150.1.25.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
network 150.1.25.2 0.0.0.0 area 0

- 228 -
www.INE.com
Version 1.0
R3#
ip cef
!
interface Tunnel0
ip unnumbered Loopback0
tunnel destination 150.1.4.4
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 10000
tunnel mpls traffic-eng path-option 1 dynamic
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
bandwidth 155000
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
R4#
ip cef
!
interface Tunnel0
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.48.4 255.255.255.0

- 229 -
www.INE.com
Version 1.0
!
interface Serial0/0
!
bandwidth 45000
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.4 255.255.255.0
tag-switching ip
no dce-terminal-timing-enable
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
router bgp 1
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Serial0/0
!
bandwidth 45000
ip address 150.1.25.5 255.255.255.0
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.5 255.255.255.0
tag-switching ip
clockrate 64000

- 230 -
www.INE.com
Version 1.0

!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.25.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
router bgp 2
network 10.1.7.0 mask 255.255.255.0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.48.8 255.255.255.0
!
router bgp 3
network 10.1.8.0 mask 255.255.255.0
Verification
SW1#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.37.3, 00:21:40
C
C

- 231 -
www.INE.com
Version 1.0
SW2#show ip route
<output omitted>
C
B
10.1.7.0 [20/0] via 10.1.48.4, 00:21:49
C
SW1#ping 10.1.8.8 source 10.1.7.7
!!!!!
R3#show ip route
<output omitted>
B
10.1.8.0 [200/0] via 150.1.4.4, 00:07:48
B
10.1.7.0 [20/0] via 10.1.37.7, 01:24:43
C
O
150.1.25.0/24 [110/4] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.24.0/24 [110/4] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.5.5/32 [110/5] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.4.4/32 [110/5] via 0.0.0.0, 00:07:50, Tunnel0
C
O
150.1.2.2/32 [110/3] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.1.1/32 [110/2] via 150.1.13.1, 00:07:50, Serial1/2
C
O
150.1.12.0/24 [110/2] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.45.0/24 [110/5] via 150.1.13.1, 00:07:50, Serial1/2
[110/5] via 0.0.0.0, 00:07:50, Tunnel0
R4#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.48.8, 10:38:25
B
10.1.7.0 [200/0] via 150.1.3.3, 00:42:36
C
O
150.1.25.0/24 [110/3] via 150.1.45.5, 00:03:54, Serial0/1
C
O
150.1.5.5/32 [110/2] via 150.1.45.5, 00:03:54, Serial0/1
C
O
150.1.3.3/32 [110/5] via 0.0.0.0, 00:03:54, Tunnel0
O
150.1.2.2/32 [110/3] via 150.1.24.2, 00:03:54, Serial0/0.1
O
150.1.1.1/32 [110/4] via 150.1.24.2, 00:03:54, Serial0/0.1
O
150.1.13.0/24 [110/4] via 150.1.24.2, 00:03:54, Serial0/0.1
O
150.1.12.0/24 [110/3] via 150.1.24.2, 00:03:54, Serial0/0.1
C

- 232 -
www.INE.com
Version 1.0
R3#show mpls traffic-eng tunnels brief

Signalling Summary:
LSP Tunnels Process:
running
RSVP Process:
running
Forwarding:
enabled
Periodic reoptimization:
every 3600 seconds, next in 2579 seconds
Periodic auto-bw collection:
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R3_t0
150.1.4.4
Se1/2
up/up
R4_t0
150.1.3.3
Se1/2
up/up
R3#show mpls traffic-eng tunnels

Name: R3_t0
Status:
Admin: up
(Tunnel0) Destination: 150.1.4.4

Oper: up
Path: valid
Signalling: connected
path option 1, type dynamic (Basis for Setup, path weight 4)

Config Parameters:
Bandwidth: 10000
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 10000
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial1/2, 17
RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 0, Tun_Instance 15
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: 150.1.13.1 150.1.12.1 150.1.12.2 150.1.24.4
150.1.4.4
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
History:
Tunnel:
Time since created: 17 minutes, 1 seconds
Time since path change: 15 minutes, 14 seconds
Current LSP:
Uptime: 15 minutes, 14 seconds
LSP Tunnel R4_t0 is signalled, connection is up
InLabel : Serial1/2, implicit-null
OutLabel : RSVP Signalling Info:
RSVP Path Info:
Explicit Route: NONE
Record Route: NONE
RSVP Resv Info:
Record Route: NONE

- 233 -
www.INE.com
Version 1.0
R3#show mpls traffic-eng topology path tunnel0

Query Parameters:
Destination: 150.1.4.4
Bandwidth: 10000
Priorities: 1 (setup), 1 (hold)
Affinity: 0x0 (value), 0xFFFF (mask)
Query Results:
Min Bandwidth Along Path: 35000 (kbps)
Max Bandwidth Along Path: 145000 (kbps)
Hop 0: 150.1.13.3
: affinity 00000000, bandwidth
Hop 1: 150.1.12.1
Hop 2: 150.1.12.2
Hop 3: 150.1.24.2
Hop 4: 150.1.4.4
145000 (kbps)
90000 (kbps)
90000 (kbps)
35000 (kbps)

Signalling Summary:
running
RSVP Process:
running
Forwarding:
enabled
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R4_t0
150.1.3.3
Se0/0.1
up/up
R3_t0
150.1.4.4
Se0/0.1
up/up

Name: R4_t0
Status:
Admin: up

Oper: up
Path: valid

Config Parameters:
Bandwidth: 10000
AutoRoute: enabled
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial0/0.1, 20
RSVP Path Info:
Explicit Route: 150.1.24.2 150.1.12.2 150.1.12.1 150.1.13.3
150.1.3.3
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
History:
Tunnel:
Current LSP:

- 234 -
www.INE.com
Version 1.0

InLabel : Serial0/0.1, implicit-null
RSVP Path Info:
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
R4#show mpls traffic-eng topology path tunnel0

Query Parameters:
Destination: 150.1.3.3
Bandwidth: 10000
Priorities: 1 (setup), 1 (hold)
Affinity: 0x0 (value), 0xFFFF (mask)
Query Results:
Min Bandwidth Along Path: 35000 (kbps)
Max Bandwidth Along Path: 145000 (kbps)
Hop 0: 150.1.24.4
Hop 1: 150.1.12.2
Hop 2: 150.1.12.1
Hop 3: 150.1.13.1
Hop 4: 150.1.3.3

- 235 -
35000 (kbps)
90000 (kbps)
90000 (kbps)
145000 (kbps)
www.INE.com
Version 1.0
MPLS Traffic Engineering Explicit PE to PE Tunnels

Objective: Configure an explicit MPLS Traffic Engineering tunnel from R3 to R1,
R2, R5, R4 and back with a 10Mbps guarantee to transport traffic
between SW1 and SW2.
Fa0/3
.7
BGP
AS 1
10.1.37.0/24
SW1
BGP
AS 2
E0/0
R3
.3
.3
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
S0/0.2
Fa0/0
.2
OSPF
Area 0
.2
R2
205
Frame Relay
S0/0.1
.2
150.1.25.0/24
204
Frame Relay
502
150.1.24.0/24
402
.5
S0/0.2
S0/1
R5
.4
.5
S0/0.1
.4
S0/1
.4
R4
BGP
AS 1
E0/1
10.1.48.0/24
10.1.45.0/24
BGP
AS 3
.8
Fa0/4

- 236 -
SW2
www.INE.com
Version 1.0
Directions

of DS3 (45Mbps)
of OC3 (155Mbps)
R5
network
destination
The path for this tunnel should be explicitly defined with a path from R3 to
R1, R2, R5, and R4
destination
The path for this tunnel should be explicitly defined with a path from R4 to
R5, R2, R1, and R3
Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.12.1 255.255.255.0
tag-switching ip

- 237 -
www.INE.com
Version 1.0
!
interface Serial0/1
bandwidth 155000
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
bandwidth 45000
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
bandwidth 45000
ip address 150.1.25.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
network 150.1.25.2 0.0.0.0 area 0

- 238 -
www.INE.com
Version 1.0
R3#
ip cef
!
interface Tunnel0
tunnel mpls traffic-eng path-option 1 explicit name R1_R2_R5_R4
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
bandwidth 155000
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
!
ip explicit-path name R1_R2_R5_R4 enable
next-address 150.1.13.1
R4#
ip cef
!
interface Tunnel0

- 239 -
www.INE.com
Version 1.0

!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.48.4 255.255.255.0
!
interface Serial0/0
!
bandwidth 45000
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.4 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
router bgp 1
!
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Serial0/0
!

- 240 -
www.INE.com
Version 1.0

bandwidth 45000
ip address 150.1.25.5 255.255.255.0
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.5 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.25.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
router bgp 2
network 10.1.7.0 mask 255.255.255.0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.48.8 255.255.255.0
!
router bgp 3
network 10.1.8.0 mask 255.255.255.0

- 241 -
www.INE.com
Version 1.0
Verification
SW1#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.37.3, 00:21:40
C
C
SW2#show ip route
<output omitted>
C
B
10.1.7.0 [20/0] via 10.1.48.4, 00:21:49
C
SW1#ping 10.1.8.8 source 10.1.7.7
!!!!!
R3#show ip route
<output omitted>
B
10.1.8.0 [200/0] via 150.1.4.4, 00:07:48
B
10.1.7.0 [20/0] via 10.1.37.7, 01:24:43
C
O
150.1.25.0/24 [110/4] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.24.0/24 [110/4] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.5.5/32 [110/5] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.4.4/32 [110/5] via 0.0.0.0, 00:07:50, Tunnel0
C
O
150.1.2.2/32 [110/3] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.1.1/32 [110/2] via 150.1.13.1, 00:07:50, Serial1/2
C
O
150.1.12.0/24 [110/2] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.45.0/24 [110/5] via 150.1.13.1, 00:07:50, Serial1/2
[110/5] via 0.0.0.0, 00:07:50, Tunnel0
R4#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.48.8, 10:38:25
B
10.1.7.0 [200/0] via 150.1.3.3, 00:42:36
C
O
150.1.25.0/24 [110/3] via 150.1.45.5, 00:03:54, Serial0/1
C
O
150.1.5.5/32 [110/2] via 150.1.45.5, 00:03:54, Serial0/1
C
O
150.1.3.3/32 [110/5] via 0.0.0.0, 00:03:54, Tunnel0
O
150.1.2.2/32 [110/3] via 150.1.24.2, 00:03:54, Serial0/0.1

- 242 -
www.INE.com

O
O
O
C
Version 1.0
150.1.1.1/32 [110/4] via 150.1.24.2, 00:03:54, Serial0/0.1

150.1.13.0/24 [110/4] via 150.1.24.2, 00:03:54, Serial0/0.1
150.1.12.0/24 [110/3] via 150.1.24.2, 00:03:54, Serial0/0.1

Signalling Summary:
running
RSVP Process:
running
Forwarding:
enabled
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R3_t0
150.1.4.4
Se1/2
up/up
R4_t0
150.1.3.3
Se1/2
up/up

Name: R3_t0
Status:
Admin: up

Oper: up
Path: valid
path option 1, type explicit R1_R2_R5_R4 (Basis for Setup, path weight 5)
Config Parameters:
Bandwidth: 10000
AutoRoute: enabled
bw-based
auto-bw: disabled
RSVP Path Info:
Explicit Route: 150.1.13.1 150.1.12.1 150.1.12.2 150.1.25.5
150.1.45.4 150.1.4.4
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
History:
Tunnel:
Current LSP:
RSVP Path Info:
Record Route: NONE
RSVP Resv Info:

- 243 -
www.INE.com
Version 1.0
Record Route: NONE


Signalling Summary:
running
RSVP Process:
running
Forwarding:
enabled
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R4_t0
150.1.3.3
Se0/1
up/up
R3_t0
150.1.4.4
Se0/1
up/up
Displayed 1 (of 1) heads, 0 (of 0) midpoints, 1 (of 1) tails

Name: R4_t0
Status:
Admin: up

Oper: up
Path: valid
Config Parameters:
Bandwidth: 10000
AutoRoute: enabled
bw-based
auto-bw: disabled
RSVP Path Info:
Explicit Route: 150.1.45.5 150.1.25.2 150.1.12.2 150.1.12.1
150.1.13.3 150.1.3.3
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
History:
Tunnel:
Current LSP:
RSVP Path Info:
Record Route: NONE
RSVP Resv Info:
Record Route: NONE

- 244 -
www.INE.com

- 245 -
Version 1.0
www.INE.com
Version 1.0
MPLS Traffic Engineering Unequal Cost Load Balancing

Objective: Configure two MPLS Traffic Engineering Tunnels with a total
guarantee of 10Mbps between R3 and R4 to transport traffic between
SW1 and SW2. One-third of the traffic between these devices should
transit R5.
Fa0/3
.7
BGP
AS 1
10.1.37.0/24
SW1
BGP
AS 2
E0/0
R3
.3
.3
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
S0/0.2
Fa0/0
.2
OSPF
Area 0
.2
R2
205
Frame Relay
S0/0.1
.2
150.1.25.0/24
204
Frame Relay
502
150.1.24.0/24
402
.5
S0/0.2
S0/1
R5
.4
.5
S0/0.1
.4
S0/1
.4
R4
BGP
AS 1
E0/1
10.1.48.0/24
10.1.45.0/24
BGP
AS 3
.8
Fa0/4

- 246 -
SW2
www.INE.com
Version 1.0
Directions

of DS3 (45Mbps)
of OC3 (155Mbps)
R5
network
Configure two MPLS TE tunnels on R3 with R4s Loopback as the
destination
One tunnel should be explicitly defined with a path from R3 to R1, R2, R5,
and R4; the others path should be dynamically selected
Reserve 6667Kbps through the dynamic tunnel and 3333Kbps through the
static tunnel
Advertise both of the tunnel interfaces into OSPF
Configure two MPLS TE tunnels on R4 with R3s Loopback as the
destination
One tunnel should be explicitly defined with a path from R4 to R2, R5, R1,
and R3; the others path should be dynamically selected
Reserve 6667Kbps through the dynamic tunnel and 3333Kbps through the
static tunnel
Advertise both of the tunnel interfaces into OSPF
Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.12.1 255.255.255.0

- 247 -
www.INE.com
Version 1.0
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
!
bandwidth 45000
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
bandwidth 45000
ip address 150.1.25.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
network 150.1.25.2 0.0.0.0 area 0

- 248 -
www.INE.com
Version 1.0
R3#
ip cef
!
interface Tunnel0
!
interface Tunnel1
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
bandwidth 155000
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
!

- 249 -
www.INE.com
Version 1.0
R4#
ip cef
!
interface Tunnel0
!
interface Tunnel1
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 10.1.48.4 255.255.255.0
!
interface Serial0/0
!
bandwidth 45000
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.4 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!

- 250 -
www.INE.com
Version 1.0
router bgp 1
!
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Serial0/0
!
bandwidth 45000
ip address 150.1.25.5 255.255.255.0
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.5 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.25.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!

- 251 -
www.INE.com
Version 1.0
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
router bgp 2
network 10.1.7.0 mask 255.255.255.0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.48.8 255.255.255.0
!
router bgp 3
network 10.1.8.0 mask 255.255.255.0
Verification
SW1#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.37.3, 00:21:40
C
C
SW2#show ip route
<output omitted>
C
B
10.1.7.0 [20/0] via 10.1.48.4, 00:21:49
C
SW1#ping 10.1.8.8 source 10.1.7.7
!!!!!
R3#show ip route
<output omitted>
B
10.1.8.0 [200/0] via 150.1.4.4, 00:01:52
B
10.1.7.0 [20/0] via 10.1.37.7, 01:57:07
C
O
150.1.25.0/24 [110/4] via 150.1.13.1, 00:00:29, Serial1/2

- 252 -
www.INE.com

O
O
O
C
O
O
C
O
O
Version 1.0
150.1.24.0/24 [110/4] via 150.1.13.1, 00:00:29, Serial1/2

150.1.5.5/32 [110/5] via 150.1.13.1, 00:00:29, Serial1/2
150.1.4.4/32 [110/5] via 0.0.0.0, 00:00:29, Tunnel0
[110/5] via 0.0.0.0, 00:00:30, Tunnel1
150.1.2.2/32 [110/3] via 150.1.13.1, 00:00:30, Serial1/2
150.1.1.1/32 [110/2] via 150.1.13.1, 00:00:30, Serial1/2
150.1.12.0/24 [110/2] via 150.1.13.1, 00:00:30, Serial1/2
150.1.45.0/24 [110/5] via 150.1.13.1, 00:00:30, Serial1/2
[110/5] via 0.0.0.0, 00:00:30, Tunnel0
[110/5] via 0.0.0.0, 00:00:30, Tunnel1
R3#show ip route 150.1.4.4

Routing entry for 150.1.4.4/32
Known via "ospf 1", distance 110, metric 5, type intra area
Routing Descriptor Blocks:
* directly connected, via Tunnel0
Route metric is 5, traffic share count is 2
directly connected, via Tunnel1
R4#show ip route
<output omitted>
B
10.1.8.0 [20/0] via 10.1.48.8, 01:48:32
B
10.1.7.0 [200/0] via 150.1.3.3, 01:56:18
C
O
150.1.25.0/24 [110/3] via 150.1.45.5, 00:00:21, Serial0/1
C
O
150.1.5.5/32 [110/2] via 150.1.45.5, 00:00:21, Serial0/1
C
O
150.1.3.3/32 [110/5] via 0.0.0.0, 00:00:22, Tunnel0
[110/5] via 0.0.0.0, 00:00:22, Tunnel1
O
150.1.2.2/32 [110/3] via 150.1.24.2, 00:00:22, Serial0/0.1
O
150.1.1.1/32 [110/4] via 150.1.24.2, 00:00:22, Serial0/0.1
O
150.1.13.0/24 [110/4] via 150.1.24.2, 00:00:22, Serial0/0.1
O
150.1.12.0/24 [110/3] via 150.1.24.2, 00:00:22, Serial0/0.1
C
* directly connected, via Tunnel0
directly connected, via Tunnel1

- 253 -
www.INE.com
Version 1.0

Signalling Summary:
running
RSVP Process:
running
Forwarding:
enabled
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R3_t0
150.1.4.4
Se1/2
up/up
R3_t1
150.1.4.4
Se1/2
up/up
R4_t0
150.1.3.3
Se1/2
up/up
R4_t1
150.1.3.3
Se1/2
up/up

Name: R3_t0
Status:
Admin: up

Oper: up
Path: valid

Config Parameters:
Bandwidth: 6667
AutoRoute: enabled
bw-based
auto-bw: disabled
RSVP Path Info:
Explicit Route: 150.1.13.1 150.1.12.1 150.1.12.2 150.1.24.4
150.1.4.4
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
History:
Tunnel:
Current LSP:
Name: R3_t1
Status:
Admin: up

Oper: up
Path: valid
Config Parameters:
Bandwidth: 3333
AutoRoute: enabled
bw-based
auto-bw: disabled

- 254 -
www.INE.com
Version 1.0

RSVP Path Info:
Explicit Route: 150.1.13.1 150.1.12.1 150.1.12.2 150.1.25.5
150.1.45.4 150.1.4.4
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
History:
Tunnel:
Current LSP:
RSVP Path Info:
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
RSVP Path Info:
Record Route: NONE
RSVP Resv Info:
Record Route: NONE

Signalling Summary:
running
RSVP Process:
running
Forwarding:
enabled
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R4_t0
150.1.3.3
Se0/0.1
up/up
R4_t1
150.1.3.3
Se0/1
up/up
R3_t0
150.1.4.4
Se0/0.1
up/up
R3_t1
150.1.4.4
Se0/1
up/up

- 255 -
www.INE.com
Version 1.0

Name: R4_t0
Status:
Admin: up

Oper: up
Path: valid

Config Parameters:
Bandwidth: 6667
AutoRoute: enabled
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial0/0.1, 16
RSVP Path Info:
Explicit Route: 150.1.24.2 150.1.12.2 150.1.12.1 150.1.13.3
150.1.3.3
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
History:
Tunnel:
Time since created: 27 minutes
Current LSP:
Prior LSP:
ID: path option 1 [9]
Removal Trigger: tunnel shutdown
Name: R4_t1
Status:
Admin: up

Oper: up
Path: valid
Config Parameters:
Bandwidth: 3333
AutoRoute: enabled
bw-based
auto-bw: disabled
RSVP Path Info:
Explicit Route: 150.1.45.5 150.1.25.2 150.1.12.2 150.1.12.1
150.1.13.3 150.1.3.3
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
History:

- 256 -
www.INE.com
Version 1.0
Tunnel:
Time since created: 27 minutes
Current LSP:
Prior LSP:
ID: path option 1 [12]
Removal Trigger: tunnel shutdown
InLabel : Serial0/0.1, implicit-null
RSVP Path Info:
Record Route: NONE
RSVP Resv Info:
Record Route: NONE
RSVP Path Info:
Record Route: NONE
RSVP Resv Info:
Record Route: NONE

- 257 -
www.INE.com
Version 1.0
MPLS QoS
Objective: Configure the MPLS network so that all VoIP traffic between SW1
and SW2 is guaranteed 640Kbps of priority throughout the provider
network even if the link between R2 and R4 is down.
Fa0/3
.7
RIPv2
BGP
AS 1
10.1.37.0/24
SW1
E0/0
R3
.3
.3
.3
S1/2
150.1.13.0/24
S0/1
.1
R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
S0/0.2
Fa0/0
.2
OSPF
Area 0
.2
R2
205
Frame Relay
S0/0.1
.2
150.1.25.0/24
204
Frame Relay
502
150.1.24.0/24
402
.5
S0/0.2
S0/1
R5
S0/0.1
.4
.5
.4
S0/1
.4
R4
BGP
AS 1
E0/1
10.1.48.0/24
10.1.45.0/24
RIPv2
.8
Fa0/4
- 258 -
SW2
www.INE.com
Version 1.0
Directions

R5
Configure SW1 and SW2 to be in VRF SW1-SW2
This VRF should use the route distinguisher and target 1:100
Configure R3 and R4 so that all VoIP traffic received from SW1 and SW2
is marked with a qos-group of 5
Assume that VoIP traffic uses UDP destination ports in the range of
16384-32767 and has a DSCP value of EF
All other traffic received from SW1 and SW2 should be marked with a qosgroup of 1
Traffic from qos-group 5 on R3 and R4 should be mapped to MPLS EXP 5
throughout the provider network
This traffic should be guaranteed a maximum of 640Kbps of priority as it
transits the provider network
Traffic from qos-group 1 on R3 and R4 should be mapped to MPLS EXP 1
throughout the provider network
This traffic should be guaranteed a minimum bandwidth of 1Mbps and
should use WRED as a congestion avoidance mechanism throughout the
provider network
Assume that the Frame Relay links throughout the provider network are all
DS3 (45Mbps) and the back to back Serial links are OC3 (155Mbps)
Final Configuration
R1#
ip cef
!
class-map match-all MPLS_EXP_5
match mpls experimental topmost 5
!
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect

- 259 -
www.INE.com
Version 1.0
policy-map TO_PE
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.12.1 255.255.255.0
service-policy output TO_P
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.13.1 255.255.255.0
service-policy output TO_PE
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
!
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
policy-map TO_PE
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!

- 260 -
www.INE.com
Version 1.0
interface Serial0/0
bandwidth 45000
!
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
ip address 150.1.25.2 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
network 150.1.25.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf SW1-SW2
rd 1:100
!
class-map match-all VoIP
match access-group name VoIP
class-map match-all QOS_GROUP_1
match qos-group 1
match qos-group 5
!
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
policy-map FROM_P
class MPLS_EXP_5
set qos-group 5
class MPLS_EXP_1
set qos-group 1
policy-map TO_CE
class QOS_GROUP_5
priority 640
class QOS_GROUP_1
bandwidth 1000
random-detect

- 261 -
www.INE.com
Version 1.0
policy-map FROM_CE
class VoIP
set qos-group 5
set mpls experimental imposition 5
class class-default
set qos-group 1
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
service-policy input FROM_CE
service-policy output TO_CE
!
interface Serial1/2
bandwidth 155000
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
service-policy input FROM_P
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
ip access-list extended VoIP
permit udp any any range 16384 32767 dscp ef

- 262 -
www.INE.com
Version 1.0
R4#
ip cef
!
ip vrf SW1-SW2
rd 1:100
!
class-map match-all VoIP
match access-group name VoIP
match qos-group 1
match qos-group 5
!
!
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
policy-map FROM_P
class MPLS_EXP_5
set qos-group 5
class MPLS_EXP_1
set qos-group 1
policy-map TO_CE
class QOS_GROUP_5
priority 640
class QOS_GROUP_1
bandwidth 1000
random-detect
policy-map FROM_CE
class VoIP
set qos-group 5
class class-default
set qos-group 1
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Serial0/0
bandwidth 45000
frame-relay lmi-type cisco
!

- 263 -
www.INE.com
Version 1.0

ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
ip address 10.1.48.4 255.255.255.0
service-policy input FROM_CE
service-policy output TO_CE
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.4 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
!
exit-address-family
!
redistribute rip
exit-address-family
!
ip access-list extended VoIP
permit udp any any range 16384 32767 dscp ef
R5#
ip cef
!
!

- 264 -
www.INE.com
Version 1.0
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
policy-map TO_PE
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Serial0/0
bandwidth 45000
!
ip address 150.1.25.5 255.255.255.0
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.5 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.25.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
switchport mode dynamic desirable
!
switchport mode dynamic desirable
!
no switchport
ip address 10.1.37.7 255.255.255.0
!

- 265 -
www.INE.com
Version 1.0
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.48.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
Verification
Generate UDP traffic to simulate VoIP stream on SW1:
SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)# type udpEcho dest-ipaddr 10.1.8.8 dest-port 20000
source-ipaddr 10.1.7.7 control disable
SW1(config-rtr-udp)# tos 184
SW1(config-rtr-udp)# timeout 0
SW1(config-rtr-udp)# frequency 1
SW1(config-rtr-udp)#rtr schedule 1 life 10 start-time now
SW1(config)#end
SW1#
Generate ICMP traffic to simulate other traffic on SW1:
SW1#ping 10.1.8.8 source 10.1.7.7 repeat 20
!!!!!!!!!!!!!!!!!!!!
R4#sh policy-map int e0/1 out

Ethernet0/1
Service-policy output: TO_CE
Class-map: QOS_GROUP_5 (match-all)
10 packets, 580 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: qos-group 5
Queueing
Strict Priority

- 266 -
www.INE.com
Version 1.0
Output Queue: Conversation 264

Bandwidth 640 (kbps) Burst 16000 (Bytes)
(pkts matched/bytes matched) 0/0
(total drops/bytes drops) 0/0
Match: qos-group 1
Queueing
Bandwidth 1000 (kbps)
(depth/total drops/no-buffer drops) 0/0/0
exponential weight: 9
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp
Transmitted
pkts/bytes
20/2280
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
Class-map: class-default (match-any)

Match: any
Generate UDP traffic to simulate VoIP stream on SW2:
SW2#conf t
SW2(config)#rtr 1
SW2(config-rtr)# type udpEcho dest-ipaddr 10.1.7.7 dest-port 20000
SW2(config-rtr-udp)# tos 184
SW2(config-rtr-udp)# timeout 0
SW2(config-rtr-udp)# frequency 1
SW2(config-rtr-udp)#rtr schedule 1 life 5 start-time now
SW2(config)#end
SW2#
Generate ICMP traffic to simulate other traffic on SW2:
SW2#ping 10.1.7.7 source 10.1.8.8 repeat 15
!!!!!!!!!!!!!!!

- 267 -
www.INE.com
Version 1.0
R3#show policy-map int e0/0 out

Ethernet0/0
Service-policy output: TO_CE
Match: qos-group 5
Queueing
Strict Priority
Match: qos-group 1
Queueing
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp
Transmitted
pkts/bytes
15/1710
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Match: any
R1#show policy-map interface
FastEthernet0/0
Service-policy output: TO_P
Class-map: MPLS_EXP_5 (match-all)
Match: mpls experimental topmost 5
Queueing
Strict Priority

- 268 -
www.INE.com
Version 1.0

Queueing
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp
Transmitted
pkts/bytes
0/0
40/4660
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Match: any
Serial0/1
Service-policy output: TO_PE
Queueing
Strict Priority
Queueing
mean queue depth: 0

- 269 -
www.INE.com

class
0
1
2
3
4
5
6
7
rsvp
Transmitted
pkts/bytes
0/0
15/1620
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Version 1.0
Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Match: any
R2#show policy-map interface
FastEthernet0/0
Service-policy output: TO_P
Queueing
Strict Priority
Queueing
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp
Transmitted
pkts/bytes
0/0
15/1830
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Match: any
Serial0/0

- 270 -
www.INE.com
Version 1.0
Service-policy output: TO_PE

Queueing
Strict Priority
Queueing
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp
Transmitted
pkts/bytes
0/0
40/4100
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Match: any

- 271 -
www.INE.com
Version 1.0
Multicast over MPLS VPNs

Objective: Configure multicast support for VRF SW1-SW2 between R3 and R6
so multicast traffic sent from SW1 can be received by SW2.
Fa0/3
RIPv2
E0/0
R3
10.1.37.0/24
.7
BGP
AS 100
SW1
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
150.1.12.0/24
R1
Frame Relay
.1
S0/0.1
102
201
.2
S0/0.1
IS-IS
Level 2
R2
Fa0/0
.2
E0/0
.4
150.1.24.0/24 VLAN 24
150.1.45.0/24
R4
S0/0.1
Frame Relay
.4
405
504
.5
S0/0.1
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
RIPv2
Fa0/6
SW2
10.1.68.0/24
.6
R6
BGP
AS 100
.8

- 272 -
www.INE.com
Version 1.0
Directions

Configure IS-IS Level-2 on the interfaces between R1, R2, R3, R4, R5,
and R6
Create Loopbacks on R1, R2, R3, R4, R5, and R6 in the format
150.1.Y/Y/32 and advertise them into IS-IS
Configure MPLS on the interfaces between R1, R2, R3, R4, R5, and R6
SW1 and SW2 should be in VRF SW1-SW2
Enable multicast routing on all devices, including for VRF SW1-SW2 on
R3 and R6
Configure PIM Sparse-Mode on the transit interfaces between R1, R2, R3,
R4, R5, and R6
Configure PIM Sparse-Mode on the Loopback interfaces of R3 and R6
Enable support for Source Specific Multicast on these devices in the
232.0.0.0/8 range
Configure a default multicast distribution tree on R3 and R6 for VRF
SW1-SW2 using the group address 232.0.0.1
Configure PIM Sparse-Mode between R3 & SW1 and R6 & SW2
SW1 should be the RP for this multicast domain
Ensure that multicast traffic originated by SW1 can be received by SW2
Final Configuration
R1#
ip cef
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
ip router isis
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip

- 273 -
www.INE.com
Version 1.0

!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
router isis
net 00.0000.0000.0001.00
!
ip pim ssm default
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
ip router isis
!
ip address 150.1.24.2 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
router isis
net 00.0000.0000.0002.00
!
ip pim ssm default
R3#
ip cef
!
ip multicast-routing vrf SW1-SW2
!
ip vrf SW1-SW2
rd 100:1
mdt default 232.0.0.1

- 274 -
www.INE.com
Version 1.0
!
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
ip router isis
ip pim sparse-mode
!
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
clockrate 64000
!
router isis
net 00.0000.0000.0003.00
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
!
exit-address-family
!
redistribute rip
exit-address-family
!
ip pim ssm default
ip pim vrf SW1-SW2 rp-address 10.1.37.7
R4#
ip cef
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis

- 275 -
www.INE.com
Version 1.0
!
ip address 150.1.24.4 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
router isis
net 00.0000.0000.0004.00
!
ip pim ssm default
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!
ip address 150.1.56.5 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
router isis
net 00.0000.0000.0005.00
!
ip pim ssm default

- 276 -
www.INE.com
Version 1.0
R6#
ip cef
!
ip multicast-routing vrf SW1-SW2
!
ip vrf SW1-SW2
rd 100:1
mdt default 232.0.0.1
!
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
ip pim sparse-mode
!
ip address 150.1.56.6 255.255.255.0
ip router isis
ip pim sparse-mode
mpls ip
!
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router isis
net 00.0000.0000.0006.00
!
router rip
!
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
!
exit-address-family
!
redistribute rip
exit-address-family
!

- 277 -
www.INE.com
Version 1.0
ip pim ssm default

ip pim vrf SW1-SW2 rp-address 10.1.37.7
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
ip pim sparse-mode
!
!
!
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
ip pim rp-address 10.1.37.7
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.68.8 255.255.255.0
ip pim sparse-mode
!
router rip
version 2
network 10.0.0.0
no auto-summary
!

- 278 -
www.INE.com
Version 1.0
Verification
R3#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.13.1
Serial1/2
Uptime/Expires
Ver
DR
Prio/Mode
1 / S
04:36:04/00:01:22 v2
R3#show ip pim vrf SW1-SW2 neighbor

PIM Neighbor Table
Neighbor
Interface
Address
10.1.37.7
Ethernet0/0
150.1.6.6
Tunnel0
Uptime/Expires
Ver
DR
Prio/Mode
1 / DR S
1 / DR S
04:36:13/00:01:22 v2
00:04:00/00:01:40 v2

PIM Neighbor Table
Mode: B - Bidir Capable, DR - Designated Router, N - Default DR Priority,
S - State Refresh Capable
Neighbor
Interface
Uptime/Expires
Ver
DR
Address
Prio/Mode
150.1.56.5
GigabitEthernet0/0
04:36:57/00:01:33 v2
1 / S
R6#show ip pim vrf SW1-SW2 neighbor

PIM Neighbor Table
Mode: B - Bidir Capable, DR - Designated Router, N - Default
Neighbor
Interface
Uptime/Expires
Address
10.1.68.8
GigabitEthernet0/1
04:38:17/00:01:25
150.1.3.3
Tunnel0
00:04:58/00:01:40
DR Priority,
Ver
DR
Prio/Mode
1 / DR S
1 / S
v2
v2
R6#show ip mroute
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
L - Local, P - Pruned, R - RP-bit set, F - Register flag,
T - SPT-bit set, J - Join SPT, M - MSDP created entry,
X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
U - URD, I - Received Source Specific Host Report,
Z - Multicast Tunnel, z - MDT-data group sender,
Y - Joined MDT-data group, y - Sending to MDT-data group
Outgoing interface flags: H - Hardware switched, A - Assert winner
Timers: Uptime/Expires
Interface state: Interface, Next-Hop or VCD, State/Mode
(150.1.3.3, 232.0.0.1), 00:01:45/00:02:53, flags: sTIZ

Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
MVRF SW1-SW2, Forward/Sparse, 00:01:45/00:01:14
(150.1.6.6, 232.0.0.1), 04:35:46/00:03:23, flags: sT
Incoming interface: Loopback0, RPF nbr 0.0.0.0
GigabitEthernet0/0, Forward/Sparse, 00:01:45/00:02:42
(*, 224.0.1.40), 04:35:49/00:02:57, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0

- 279 -
www.INE.com
Version 1.0
Loopback0, Forward/Sparse, 04:35:49/00:02:57

SW1#debug ip pim
PIM debugging is on
SW2 requests traffic for 224.1.1.1:
SW2#conf t
Enter configuration commands, one per line.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1
End with CNTL/Z.
SW1#
PIM(0): Received v2 Join/Prune on FastEthernet0/3 from 10.1.37.3, to us
PIM(0): Join-list: (*, 224.1.1.1), RPT-bit set, WC-bit set, S-bit set
PIM(0): Check RP 10.1.37.7 into the (*, 224.1.1.1) entry
PIM(0): Add FastEthernet0/3/10.1.37.3 to (*, 224.1.1.1), Forward state,
by PIM *G Join
PIM(0): Building Periodic Join/Prune message for 224.1.1.1
SW1 generates traffic to 224.1.1.1:
SW1#ping 224.1.1.1 repeat 100
PIM(0): Received v2 Join/Prune on FastEthernet0/3 from 10.1.37.3, to us
PIM(0): Prune-list: (10.1.37.7/32, 224.1.1.1) RPT-bit set
Reply to request 0 from 10.1.68.8, 176 ms
<output omitted>
R3 recieves multicast feed via VRF SW1-SW2 and tunnels it as 232.0.0.1:
R3#debug ip mpacket
IP multicast packets debugging is on
R3#conf t
R3(config)#int e0/0
R3(config-if)#no ip mroute-cache
IP(1): s=10.1.37.7 (Ethernet0/0) d=224.1.1.1 (Tunnel0) id=40, ttl=254,
prot=1, len=100(100), mforward
IP(0): s=150.1.3.3 (Loopback0) d=232.0.0.1 (Serial1/2) id=912, ttl=255,
R6 decapsulates tunneled mpacket and forwards it to VRF SW1-SW2:
R6#conf t
R6(config)#int g0/0
R6(config-if)#do debug ip mpacket
IP(1): s=10.1.37.7 (Tunnel0) d=224.1.1.1 (GigabitEthernet0/1) id=76,
ttl=253, prot=1, len=100(100), mforward

- 280 -
www.INE.com

- 281 -
Version 1.0
www.INE.com
Version 1.0
L2 VPNs: AToM
Objective: Configure L2 VPN between R1 and R2 so that R4 and R6 can reach
each other as if they were directly connected.
E0/0
OSPF
Area 2
F1/0
150.1.25.0/24
S2/0.1
Frame Relay
.5
502
R2
.2
10.1.46.0/24 VLAN 24
.4
R4
205
S0/0.1
R5
E0/0
.5
150.1.35.0/24 VLAN 35
.3
E0/1
R3
.3
S0/0.1
Frame Relay
301
OSPF
Area 1
103
.1
150.1.13.0/24
F1/0
S2/0.1
R1
10.1.46.0/24 VLAN16
OSPF
Area 0
.6
E0/1

- 282 -
R6
www.INE.com
Version 1.0
Directions

Configure OSPF in the network per the diagram supplied.
Create Loopbacks on R1, R2, R3, and R5 in the format 150.1.Y/Y/32 and
advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R3, R5
Configure AToM connection linking R1s and R2s connections to VLAN
16 and VLAN 24 respectively.
Ensure R4 and R6 can ping each other successfully.
Final Configuration
R1#
hostname R1
!
interface Loopback 0
ip address 150.1.1.1 255.255.255.255
!
mpls ip
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.2.2 406 encapsulation mpls
!
interface Serial 2/0
no shutdown
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
ip address 150.1.13.1 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1
R2#
hostname R2
!
ip address 150.1.2.2 255.255.255.255
!
mpls ip
!
no shut
no ip address

- 283 -
www.INE.com
Version 1.0
!
no shutdown
!
ip address 150.1.25.2 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
R3#
hostname R3
!
mpls ip
!
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet 0/1
no shutdown
ip address 150.1.35.3 255.255.255.0
mpls ip
!
no shutdown
!
ip address 150.1.13.3 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.13.3 0.0.0.0 area 1
network 150.1.35.3 0.0.0.0 area 0
network 150.1.3.3 0.0.0.0 area 1
R4#
hostname R4
!
no shutdown
ip address 10.1.46.4 255.255.255.0
!
no ip routing
R5#
hostname R5
!
mpls ip

- 284 -
www.INE.com
Version 1.0
!
ip address 150.1.5.5 255.255.255.255
!
no shutdown
!
ip address 150.1.25.5 255.255.255.0
mpls ip
!
no shutdown
ip address 150.1.35.5 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.35.5 0.0.0.0 area 0
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
no shutdown
ip address 10.1.46.6 255.255.255.0
!
no ip routing
R7#
hostname R7
!
vtp mode transparent
vlan 24,35,16
!
switchport host
!
switchport host
!
switchport host
!
switchport host

- 285 -
www.INE.com
Version 1.0
R8#
hostname R8
!
vlan 24,35,16
!
switchport host
!
switchport host
Verification
Check for end-to-end LSPs between R1 and R2:
R1#show mpls forwarding-table 150.1.2.2
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
19
17
150.1.2.2/32
0
point2point
Outgoing
Next
interface
Se2/0.1
R1#traceroute 150.1.2.2
Tracing the route to 150.1.2.2
1 150.1.13.3 [MPLS: Label 17 Exp 0] 152 msec 152 msec 148 msec
3 150.1.25.2 56 msec * 56 msec
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
18
20
150.1.1.1/32
0
point2point

- 286 -
Outgoing
Next
interface
Se2/0.1
www.INE.com
Version 1.0
3 150.1.13.1 60 msec * 56 msec
Check the VC status. The interface type, MTU size, and VC ID should
match on both sides. You should see a label stack generated for this
connection.
R1#show mpls l2transport vc detail
Local interface: Fa1/0 up, line protocol up, Ethernet up
Destination address: 150.1.2.2, VC ID: 406, VC status: up
Output interface: Se2/0.1, imposed label stack {21 17}
Preferred path: not configured
Default path: active
Tunnel label: 17, next hop point2point
Create time: 00:13:38, last status change time: 00:13:32
Signaling protocol: LDP, peer 150.1.2.2:0 up
MPLS VC labels: local 24, remote 21
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 105, send 507
byte totals:
receive 10604, send 42799
packet drops: receive 0, send 0
Verify connectivity:
R4#ping 10.1.46.6
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/143/148
ms

- 287 -
www.INE.com
Version 1.0
L2 VPNs: Inter-AS AToM

Objective: Configure L2 VPN between R1 and R2 that below to different ASs so
that R4 and R6 can reach each other as if they were directly
connected.
E0/0
OSPF
Area 2
F1/0
150.1.25.0/24
S2/0.1
Frame Relay
502
.5
BGP
AS 200
R2
.2
10.1.46.0/24 VLAN 24
.4
R4
205
S0/0.1
R5
E0/0
.5
150.1.35.0/24 VLAN 35
E0/1
R3
.3
.3
S0/0.1
Frame Relay
301
OSPF
Area 1
103
.1
150.1.13.0/24
F1/0
S2/0.1
R1
10.1.46.0/24 VLAN16
BGP
AS 100
.6
E0/1

- 288 -
R6
www.INE.com
Version 1.0
Directions

Configure MPLS on the interfaces between R1, R2, R3, and R5. Do not
enable MPLS on the interface connecting R3 and R5.
Configure BGP AS 100 on R3 and BGP AS 200 on R5. Peer R3 and R5
over the directly connected link.
Enable MPLS label exchange between R3 and R5 over BGP and
advertise R1s and R2s Loopback0 prefixes into BGP.
Redistribute BGP into OSPF on R3 and R5.
Configure AToM connection linking R1s and R2s connections to VLAN
Final Configuration
R1#
hostname R1
!
ip address 150.1.1.1 255.255.255.255
!
mpls ip
!
no shut
no ip address
!
no shutdown
!
ip address 150.1.13.1 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1
R2#
hostname R2
!
ip address 150.1.2.2 255.255.255.255
!

- 289 -
www.INE.com
Version 1.0
mpls ip
!
no shut
no ip address
!
no shutdown
!
ip address 150.1.25.2 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
R3#
hostname R3
!
mpls ip
!
ip address 150.1.3.3 255.255.255.255
!
no shutdown
ip address 150.1.35.3 255.255.255.0
!
no shutdown
!
ip address 150.1.13.3 255.255.255.0
mpls ip
!
router bgp 100
network 150.1.1.1 mask 255.255.255.255
!
router ospf 1
network 150.1.13.3 0.0.0.0 area 1
network 150.1.3.3 0.0.0.0 area 1
!

- 290 -
www.INE.com
Version 1.0
R4#
hostname R4
!
no shutdown
ip address 10.1.46.4 255.255.255.0
!
no ip routing
R5#
hostname R5
!
mpls ip
!
ip address 150.1.5.5 255.255.255.255
!
no shutdown
!
ip address 150.1.25.5 255.255.255.0
mpls ip
!
no shutdown
ip address 150.1.35.5 255.255.255.0
!
router bgp 200
network 150.1.2.2 mask 255.255.255.255
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
no shutdown
ip address 10.1.46.6 255.255.255.0
R7#
hostname R7
!
vlan 24,35,16
!

- 291 -
www.INE.com
Version 1.0
switchport host
!
switchport host
!
switchport host
!
switchport host
R8#
hostname R8
!
vlan 24,35,16
!
switchport host
!
switchport host
Verification
R3#show ip bgp labels
Network
Next Hop
150.1.1.1/32
150.1.13.1
150.1.2.2/32
150.1.35.5
In Label/Out Label
20/nolabel
19/18
R5#show ip bgp labels

Network
Next Hop
150.1.1.1/32
150.1.35.3
150.1.2.2/32
150.1.25.2
In Label/Out Label
17/20
18/nolabel

Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
19
19
150.1.2.2/32
0
point2point

- 292 -
Outgoing
Next
interface
Se2/0.1
www.INE.com
Version 1.0

Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
18
17
150.1.1.1/32
0
point2point
Outgoing
Next
interface
Se2/0.1
R1#traceroute
Protocol [ip]:
Target IP address: 150.1.2.2
Source address: 150.1.1.1
Numeric display [n]:
Timeout in seconds [3]:
Probe count [3]:
Minimum Time to Live [1]:
Maximum Time to Live [30]:
Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]:
3 150.1.25.2 60 msec * 56 msec
Check the VC status. The interface type, MTU size, and VC ID should
match on both sides. You should see a label stack generated for this
connection.
VC statistics:
byte totals:

- 293 -
www.INE.com
Version 1.0
R4#ping 10.1.46.6
!!!!!
ms

- 294 -
www.INE.com

- 295 -
Version 1.0
www.INE.com
Version 1.0
L2 VPNs: IP Interworking
each other as if they were directly connected. R4 and R6 should use
different L2 connection technologies.
R3
10.1.36.0/24
.3
S1/3
203
203
Frame Relay
S2/1
OSPF
Area 2
150.1.25.0/24
S2/0.1
Frame Relay
.5
502
R2
.2
205
S0/0.1
R5
E0/0
.5
150.1.45.0/24 VLAN 45
.4
E0/1
R4
.4
S0/0.1
Frame Relay
401
OSPF
Area 1
104
.1
150.1.14.0/24
F1/0
S2/0.1
R1
10.1.36.0/24 VLAN16
OSPF
Area 0
.6
E0/1

- 296 -
R6
www.INE.com
Version 1.0
Directions

Configure a back-to-back Frame-Relay connection between R2 and R3
using FR switching in R2 and the DLCI value of 203
Configure AToM connection linking R3 and R6 allowing for IP-based
interworking
Final Configuration
R1#
hostname R1
!
mpls ip
!
ip address 150.1.1.1 255.255.255.255
!
pseudowire-class IP_INTERWORKING
encapsulation mpls
interworking ip
!
no shut
no ip address
xconnect 150.1.2.2 406 encapsulation mpls pw-class IP_INTERWORKING
!
no shutdown
!
ip address 150.1.14.1 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1
R2#
hostname R2
!
mpls ip
!

- 297 -
www.INE.com
Version 1.0
ip address 150.1.2.2 255.255.255.255

!
no shutdown
!
ip address 150.1.25.2 255.255.255.0
mpls ip
!
encapsulation mpls
interworking ip
!
frame-relay switching
!
no shutdown
frame-relay intf-type dce
frame-relay interface-dlci 203 switched
no ip address
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
!
encapsulation mpls
interworking ip
!
connect R4_TO_R6 Serial2/1 203 l2transport
xconnect 150.1.1.1 406 encapsulation mpls pw-class IP_INTERWORKING
R3#
hostname R3
!
no shutdown
clock rate 64000
!
ip address 10.1.36.3 255.255.255.0
R4#
hostname R4
!
mpls ip
!
ip address 150.1.4.4 255.255.255.255

- 298 -
www.INE.com
Version 1.0
!
no shutdown
ip address 150.1.45.4 255.255.255.0
mpls ip
!
no shutdown
!
ip address 150.1.14.4 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.14.4 0.0.0.0 area 1
network 150.1.45.4 0.0.0.0 area 0
network 150.1.4.4 0.0.0.0 area 1
R5#
hostname R5
!
mpls ip
!
ip address 150.1.5.5 255.255.255.255
!
no shutdown
!
ip address 150.1.25.5 255.255.255.0
mpls ip
!
no shutdown
ip address 150.1.45.5 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.45.5 0.0.0.0 area 0
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
no shutdown
ip address 10.1.36.6 255.255.255.0
!

- 299 -
www.INE.com
Version 1.0
no ip routing
R7#
hostname R7
!
vlan 45,16
!
switchport host
!
switchport host
R8#
hostname R8
!
vlan 45,16
!
switchport host
!
switchport host

- 300 -
www.INE.com
Version 1.0
Verification
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
20
19
150.1.2.2/32
0
point2point
Outgoing
Next
interface
Se2/0.1
3 150.1.25.2 60 msec * 56 msec
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
17
16
150.1.1.1/32
0
point2point
Outgoing
Next
interface
Se2/0.1
3 150.1.14.1 56 msec * 56 msec
Check the connection status between R2 and R3. Since this is an FR
link, R3 should learn the DLCI vi LMI.
R3#show frame-relay pvc | inc 203
DLCI = 203, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE =
Serial1/3.1
DLCI = 203, DLCI USAGE = SWITCHED, PVC STATUS = ACTIVE, INTERFACE =
Serial2/1
Check the L2 VPN VC status. The MTU size, interworking type and VC ID
should match on both sides. You should see a label stack generated for
this connection.

- 301 -
www.INE.com
Version 1.0
R2#show mpls l2transport vc detaile

Local interface: Se2/1 up, line protocol up, FR DLCI 203 up
MPLS VC type is IP, interworking type is IP
VC statistics:
byte totals:
receive 0, send 0
R3#ping 10.1.36.6
!!!!!
ms

- 302 -
www.INE.com

- 303 -
Version 1.0
www.INE.com
Version 1.0
L2 VPNs: Ethernet Interworking

each other as if they were directly connected. R4 and R6 should use
different L2 connection technologies.
R3
10.1.36.0/24
.3
BVI1
203
203
Frame Relay
S2/1
OSPF
Area 2
150.1.25.0/24
S2/0.1
Frame Relay
.5
502
R2
.2
205
S0/0.1
R5
E0/0
.5
150.1.45.0/24 VLAN 45
.4
E0/1
R4
.4
S0/0.1
Frame Relay
401
OSPF
Area 1
104
.1
150.1.14.0/24
F1/0
S2/0.1
R1
10.1.36.0/24 VLAN16
OSPF
Area 0
.6
E0/1

- 304 -
R6
www.INE.com
Version 1.0
Directions

Configure a back-to-back Frame-Relay connection between R2 and R3
using FR switching in R2 and the DLCI value of 203
Enable bridging over Frame-Relay on R3 and choose the Integrated
Routing and Briding mode. Create a BVI interface in R3 and assign the IP
address per the diagram.
Configure AToM connection linking R3 and R6 allowing for Bridged
interworking
Final Configuration
R1#
hostname R1
!
mpls ip
!
ip address 150.1.1.1 255.255.255.255
!
pseudowire-class ETHERNET_INTERWORKING
encapsulation mpls
interworking ethernet
!
no shut
no ip address
xconnect 150.1.2.2 406 encapsulation mpls pw-class
ETHERNET_INTERWORKING
!
no shutdown
!
ip address 150.1.14.1 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1

- 305 -
www.INE.com
Version 1.0
R2#
hostname R2
!
mpls ip
!
ip address 150.1.2.2 255.255.255.255
!
no shutdown
!
ip address 150.1.25.2 255.255.255.0
mpls ip
!
encapsulation mpls
interworking ip
!
frame-relay switching
!
no shutdown
frame-relay intf-type dce
frame-relay interface-dlci 203 switched
no ip address
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
!
pseudowire-class ETHERNET_INTERWORKING
encapsulation mpls
interworking ethernet
!
!
connect R4_TO_R6 Serial2/1 203 l2transport
xconnect 150.1.1.1 406 encapsulation mpls pw-class
ETHERNET_INTERWORKING
R3#
hostname R3
!
no shutdown
clock rate 64000
!
bridge irb
bridge 1 protocol ieee

- 306 -
www.INE.com
Version 1.0
bridge 1 route ip
!
no ip address
bridge-group 1
!
interface BVI1
no shutdown
ip address 10.1.36.3 255.255.255.0
R4#
hostname R4
!
mpls ip
!
ip address 150.1.4.4 255.255.255.255
!
no shutdown
ip address 150.1.45.4 255.255.255.0
mpls ip
!
no shutdown
!
ip address 150.1.14.4 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.14.4 0.0.0.0 area 1
network 150.1.45.4 0.0.0.0 area 0
network 150.1.4.4 0.0.0.0 area 1
R5#
hostname R5
!
mpls ip
!
ip address 150.1.5.5 255.255.255.255
!
no shutdown
!
ip address 150.1.25.5 255.255.255.0

- 307 -
www.INE.com
Version 1.0
mpls ip
!
no shutdown
ip address 150.1.45.5 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.45.5 0.0.0.0 area 0
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
no shutdown
ip address 10.1.36.6 255.255.255.0
!
no ip routing
R7#
hostname R7
!
vlan 45,16
!
switchport host
!
switchport host
R8#
hostname R8
!
vlan 45,16
!
switchport host
!
switchport host

- 308 -
www.INE.com
Version 1.0
Verification
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
20
19
150.1.2.2/32
0
point2point
Outgoing
Next
interface
Se2/0.1
3 150.1.25.2 60 msec * 56 msec
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
17
16
150.1.1.1/32
0
point2point
Outgoing
Next
interface
Se2/0.1
3 150.1.14.1 56 msec * 56 msec
Check the connection status between R2 and R3. Since this is an FR
link, R3 should learn the DLCI vi LMI.
DLCI = 203, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE =
Serial1/3.1
DLCI = 203, DLCI USAGE = SWITCHED, PVC STATUS = ACTIVE, INTERFACE =
Serial2/1
Check the L2 VPN VC status. The MTU size, interworking type and VC ID
should match on both sides. You should see a label stack generated for
this connection.

- 309 -
www.INE.com
Version 1.0

VC statistics:
byte totals:
Local interface: Se2/1 up, line protocol up, FR DLCI 203 up
MPLS VC type is Ethernet, interworking type is Ethernet
VC statistics:
byte totals:

- 310 -
www.INE.com
Version 1.0
Check the spanning tree status in R3. Since this is Ethernet

interworking, spanning tree in R3 should interwork with spanning tree
in SW1 (where R1 connects to):
R3#show spanning-tree 1
Bridge group 1 is executing the ieee compatible Spanning Tree protocol
Bridge Identifier has priority 32768, address 0000.0c20.eb40
Configured hello time 2, max age 20, forward delay 15
We are the root of the spanning tree
Topology change flag set, detected flag set
Number of topology changes 3 last change occurred 00:00:38 ago
from Serial1/3.1
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 0, topology change 27, notification 0, aging 15
Port 18 (Serial1/3.1) of Bridge group 1 is forwarding
Port path cost 7812, Port priority 128, Port Identifier 128.18.
Designated root has priority 32768, address 0000.0c20.eb40
Designated bridge has priority 32768, address 0000.0c20.eb40
Designated port id is 128.18, designated path cost 0
Timers: message age 0, forward delay 0, hold 0
Number of transitions to forwarding state: 2
BPDU: sent 48, received 2
SW1 sees the bridge in R3 to be directly connected by the virtue of L2
Verify connectivity end-to-end:
R3#ping 10.1.36.6
!!!!!
ms

- 311 -
www.INE.com
Version 1.0
L2 VPNs: L2TPv3
each other as if they were directly connected. Do not use MPLS
encapsulation to accomplish this.
E0/0
OSPF
Area 2
F1/0
150.1.25.0/24
S2/0.1
Frame Relay
.5
502
R2
.2
10.1.46.0/24 VLAN 24
.4
R4
205
S0/0.1
R5
E0/0
.5
150.1.35.0/24 VLAN 35
.3
E0/1
R3
.3
S0/0.1
Frame Relay
301
OSPF
Area 1
103
.1
150.1.13.0/24
F1/0
S2/0.1
R1
10.1.46.0/24 VLAN16
OSPF
Area 0
.6
E0/1

- 312 -
R6
www.INE.com
Version 1.0
Directions

Configure L2TPv3 connection linking R1s and R2s connections to VLAN
Configure a pseudowire-class for this connection to mark L2TPv3 packets
with DSCP value of CS3 and disable packet fragmentation in transit.
Final Configuration
R1#
hostname R1
!
ip address 150.1.1.1 255.255.255.255
!
pseudowire-class L2TPV3
encapsulation l2tpv3
ip local interface Loopback0
ip dfbit set
ip tos value 96
!
no shut
no ip address
xconnect 150.1.2.2 406 pw-class L2TPV3
!
no shutdown
!
ip address 150.1.13.1 255.255.255.0
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1
R2#
hostname R2
!
ip address 150.1.2.2 255.255.255.255
!
pseudowire-class L2TPV3
encapsulation l2tpv3
ip local interface Loopback0

- 313 -
www.INE.com
Version 1.0
ip dfbit set
ip tos value 96
!
no shut
no ip address
xconnect 150.1.1.1 406 pw-class L2TPV3
!
no shutdown
!
ip address 150.1.25.2 255.255.255.0
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
R3#
hostname R3
!
ip address 150.1.3.3 255.255.255.255
!
no shutdown
ip address 150.1.35.3 255.255.255.0
!
no shutdown
!
ip address 150.1.13.3 255.255.255.0
!
router ospf 1
network 150.1.13.3 0.0.0.0 area 1
network 150.1.35.3 0.0.0.0 area 0
network 150.1.3.3 0.0.0.0 area 1
R4#
hostname R4
!
no shutdown
ip address 10.1.46.4 255.255.255.0
!
ip routing
R5#
hostname R5
!

- 314 -
www.INE.com
Version 1.0
ip address 150.1.5.5 255.255.255.255
!
no shutdown
!
ip address 150.1.25.5 255.255.255.0
!
no shutdown
ip address 150.1.35.5 255.255.255.0
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.35.5 0.0.0.0 area 0
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
no shutdown
ip address 10.1.46.6 255.255.255.0
!
ip routing
R7#
hostname R7
!
vlan 24,35,16
!
switchport host
!
switchport host
!
switchport host
!
switchport host
R8#
hostname R8
!

- 315 -
www.INE.com
Version 1.0
vlan 24,35,16
!
switchport host
!
switchport host
Verification
Make sure R1 can reach R2s Loobpack0 interface:
R1#ping 150.1.2.2 source lo0
!!!!!
ms
Check for active L2TPv3 tunnels:
R1#show l2tun tunnel all
Tunnel Information Total tunnels 1 sessions 1
Tunnel id 39693 is up, remote id is 56, 1 active sessions
Tunnel state is established, time since change 00:04:23
Tunnel transport is IP (115)
Remote tunnel name is R2
Internet Address 150.1.2.2, port 0
Local tunnel name is R1
Internet Address 150.1.1.1, port 0
Tunnel domain is
VPDN group for tunnel is L2TP class for tunnel is
181 packets sent, 44 received
13037 bytes sent, 4169 received
Control Ns 8, Nr 6
Local RWS 10000 (default), Remote RWS 10000 (max)
Tunnel PMTU checking disabled
Retransmission time 1, max 1 seconds
Unsent queuesize 0, max 0
Resend queuesize 0, max 2
Total resends 2, ZLB ACKs sent 4
Current nosession queue check 0 of 5
Retransmit time distribution: 0 0 1 0 1 0 0 0 0
Sessions disconnected due to lack of resources 0

- 316 -
www.INE.com
Version 1.0
Check for active sessions within the tunnel:

R1#show l2tun session all
Session Information Total tunnels 1 sessions 1
Session id 65009 is up, tunnel id 39693
Call serial number is 3387600000
Remote tunnel name is R2
Internet address is 150.1.2.2
Session is L2TP signalled
Session state is established, time since change 00:05:27
221 Packets sent, 51 received
15746 Bytes sent, 4898 received
Receive packets dropped:
out-of-order:
0
total:
0
Send packets dropped:
exceeded session MTU:
0
total:
0
Session vcid is 406
Session Layer 2 circuit, type is Ethernet, name is FastEthernet1/0
Circuit state is UP
Remote session id is 50046, remote tunnel id 56
DF bit on, ToS reflect disabled, ToS value 96, TTL value 255
No session cookie information available
FS cached header information:
encap size = 24 bytes
00000000 00000000 00000000 00000000
00000000 00000000
Sequencing is off
Check the header prepended to the tunneled packets:
R1#show sss circuits
Current SSS Circuit Information: Total number of circuits 1
Common Circuit ID 0
Serial Num 1
Switch ID
1667482604
-------------------------------------------------------------------------Status Encapsulation
UP flg len dump
Y AES 0
Y AES 24 45600000 00004000 FF734C25 96010101 96010202
0000C37E

- 317 -
www.INE.com
Version 1.0
Test end-to-end connectivity:

R4#ping 10.1.46.6
!!!!!
ms

- 318 -
www.INE.com

- 319 -
Version 1.0
www.INE.com
Version 1.0
PIM Dense Mode

Objective: Configure PIM Dense Mode throughout the OSPF domain so
multicast traffic sent from SW1 can be received by SW2.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
150.1.15.0/24 VLAN 15
R2
Fa0/0
.2
OSPF
Area 0
150.1.24.0/24 VLAN 24
E0/0
.4
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
.5
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 320 -
www.INE.com
Version 1.0
Directions
Configure the logical topology per the diagram

Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Dense-Mode on all transit interfaces between R1, R2, R3,
R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.15.1 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip pim dense-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip pim dense-mode

- 321 -
www.INE.com
Version 1.0

!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim dense-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
!

- 322 -
www.INE.com
Version 1.0

ip address 150.1.45.5 255.255.255.0
ip pim dense-mode
!
ip address 150.1.15.5 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim dense-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

- 323 -
www.INE.com
Version 1.0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
PIM Neighbor Table
Neighbor
Interface
Address
150.1.15.5
FastEthernet0/0
150.1.12.2
Serial0/0.1
150.1.13.3
Serial0/1
PIM Neighbor Table
Neighbor
Interface
Address
150.1.24.4
FastEthernet0/0
150.1.12.1
Serial0/0.1
PIM Neighbor Table
Neighbor
Interface
Address
150.1.13.1
Serial1/2

PIM Neighbor Table
Neighbor
Interface
Address
150.1.24.2
Ethernet0/0
150.1.45.5
Serial0/0.1
PIM Neighbor Table
Neighbor
Interface
Address
150.1.56.6
Ethernet0/0
150.1.45.4
Serial0/0.1
150.1.15.1
Ethernet0/1
Uptime/Expires
Ver
00:11:55/00:01:38 v2
00:24:00/00:01:21 v2
00:23:55/00:01:28 v2
Uptime/Expires
Ver
00:24:20/00:01:20 v2
00:24:17/00:01:34 v2
Uptime/Expires
Ver
00:24:28/00:01:30 v2
Uptime/Expires
Ver
00:25:01/00:01:30 v2
00:24:40/00:01:43 v2
Uptime/Expires
Ver
00:25:32/00:01:21 v2
00:25:20/00:01:32 v2
00:14:10/00:01:22 v2
DR
Prio/Mode
1 / DR S
1 / S
1 / S
DR
Prio/Mode
1 / DR S
1 / S
DR
Prio/Mode
1 / S
DR
Prio/Mode
1 / S
1 / S
DR
Prio/Mode
1 / DR S
1 / S
1 / S

PIM Neighbor Table

- 324 -
www.INE.com

Neighbor
Address
150.1.56.5
Version 1.0
Interface
Uptime/Expires
Ver
GigabitEthernet0/0
00:25:57/00:01:28 v2
DR
Prio/Mode
1 / S
SW1 generates multicast feed:

SW1#conf t
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start now
SW1(config)#end
SW1#
(10.1.37.7,224.1.1.1) is flooded throughout the network to R6 and
pruned back to R3 as there are no receivers:
R6#debug ip pim
PIM(0): Insert (10.1.37.7,224.1.1.1) prune in nbr 150.1.56.5's queue
PIM(0): Building Join/Prune packet for nbr 150.1.56.5
PIM(0): Adding v2 (10.1.37.7/32, 224.1.1.1) Prune
PIM(0): Send v2 join/prune to 150.1.56.5 (GigabitEthernet0/0)
R3#debug ip pim
PIM(0): Received v2 Join/Prune on Serial1/2 from 150.1.13.1, to us
PIM(0): Prune-list: (10.1.37.7/32, 224.1.1.1)
PIM(0): Prune Serial1/2/224.1.1.1 from (10.1.37.7/32, 224.1.1.1)
R3#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:00:52/stopped, RP 0.0.0.0, flags: D
Serial1/2, Forward/Dense, 00:00:52/00:00:00
(10.1.37.7, 224.1.1.1), 00:00:52/00:02:08, flags: PT
Incoming interface: Ethernet0/0, RPF nbr 0.0.0.0
Serial1/2, Prune/Dense, 00:00:48/00:02:11
<output omitted>
FastEthernet0/0, Forward/Dense, 00:00:59/00:00:00
Serial0/0.1, Forward/Dense, 00:00:59/00:00:00
(10.1.37.7, 224.1.1.1), 00:00:59/00:02:02, flags: PT
Incoming interface: Serial0/1, RPF nbr 150.1.13.3
FastEthernet0/0, Prune/Dense, 00:00:56/00:02:03
Serial0/0.1, Prune/Dense, 00:00:56/00:02:03

- 325 -
www.INE.com
Version 1.0

<output omitted>
(10.1.37.7, 224.1.1.1), 00:01:07/00:01:55, flags: PT
Incoming interface: Serial0/0.1, RPF nbr 150.1.12.1
<output omitted>
Ethernet0/0, Forward/Dense, 00:01:13/00:00:00
(10.1.37.7, 224.1.1.1), 00:01:13/00:01:48, flags: PT
Ethernet0/0, Prune/Dense, 00:01:14/00:01:45
<output omitted>
(10.1.37.7, 224.1.1.1), 00:01:17/00:01:51, flags: PT
<output omitted>
GigabitEthernet0/0, Forward/Dense, 00:01:20/00:00:00
(10.1.37.7, 224.1.1.1), 00:01:20/00:01:39, flags: PT
Outgoing interface list: Null

- 326 -
www.INE.com
Version 1.0
SW2 requests to traffic for the group 224.1.1.1:

SW2#conf t
SW2(config-if)#end
SW2#
R6 sends PIM dense graft to add itself to the tree for 224.1.1.1:
R6#debug ip pim
PIM(0): Building Graft message for 224.1.1.1, GigabitEthernet0/0:
10.1.37.7/32
PIM(0): Send v2 Graft to 150.1.56.5 (GigabitEthernet0/0)
PIM(0): Building Graft message for 224.1.1.1, GigabitEthernet0/1: no
entries
PIM(0): Received v2 Graft-Ack on GigabitEthernet0/0 from 150.1.56.5
Group 224.1.1.1:
10.1.37.7/32
R5 receives graft request from R6 and continues forwarding request
upstream toward source:
PIM(0): Join-list: (10.1.37.7/32, 224.1.1.1)
PIM(0): Add Ethernet0/0/0.0.0.0 to (10.1.37.7, 224.1.1.1), Forward
state, by PIM Graft
PIM(0): Send v2 Graft-Ack on Ethernet0/0 to 150.1.56.6
PIM(0): Building Graft message for 224.1.1.1, Ethernet0/0: no entries
PIM(0): Building Graft message for 224.1.1.1, Serial0/0.1: no entries
PIM(0): Building Graft message for 224.1.1.1, Ethernet0/1:
10.1.37.7/32
PIM(0): Send v2 Graft to 150.1.15.1 (Ethernet0/1)
PIM(0): Received v2 Graft-Ack on Ethernet0/1 from 150.1.15.1
Group 224.1.1.1:
10.1.37.7/32
Dense tree is built back to the source and traffic begins to flow:
<output omitted>
(10.1.37.7, 224.1.1.1), 00:02:19/00:02:51, flags: T
<output omitted>

- 327 -
www.INE.com
Version 1.0
(10.1.37.7, 224.1.1.1), 00:01:59/00:02:52, flags: T

Traffic is still prunted through R2 and R4 as they are not in the SPT
from SW1 to SW2:
<output omitted>
(10.1.37.7, 224.1.1.1), 00:02:13/00:00:49, flags: PT
<output omitted>
(10.1.37.7, 224.1.1.1), 00:02:24/00:00:37, flags: PT
(10.1.37.7, 224.1.1.1), 00:02:29/00:02:59, flags: T

- 328 -
www.INE.com
Version 1.0

<output omitted>
(*, 224.1.1.1), 00:02:39/stopped, RP 0.0.0.0, flags: DC
(10.1.37.7, 224.1.1.1), 00:02:39/00:02:54, flags: T
Traffic flows end to end from SW1 to SW2:
R6#debug ip mpacket
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=251, prot=17, len=44(44), mforward

- 329 -
www.INE.com
Version 1.0
PIM Sparse Mode

Objective: Configure PIM Sparse Mode throughout the OSPF domain with R2
as the Rendevous Point so multicast traffic sent from SW1 can be
received by SW2.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
150.1.15.0/24 VLAN 15
R2
Fa0/0
.2
OSPF
Area 0
150.1.24.0/24 VLAN 24
E0/0
.4
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
.5
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 330 -
www.INE.com
Version 1.0
Directions

Configure PIM Sparse-Mode on all transit interfaces between R1, R2, R3,
Configure R2s Loopback interface as the Rendezvous Point for the
multicast network
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.15.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0

- 331 -
www.INE.com
Version 1.0
!
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!

- 332 -
www.INE.com
Version 1.0
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
!
ip address 150.1.15.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!

- 333 -
www.INE.com
Version 1.0
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
PIM Neighbor Table
Neighbor
Interface
Address
150.1.15.5
FastEthernet0/0
150.1.12.2
Serial0/0.1
150.1.13.3
Serial0/1
PIM Neighbor Table
Neighbor
Interface
Address
150.1.24.4
FastEthernet0/0
150.1.12.1
Serial0/0.1
PIM Neighbor Table
Neighbor
Interface
Address
150.1.13.1
Serial1/2
Uptime/Expires
Ver
00:11:55/00:01:38 v2
00:24:00/00:01:21 v2
00:23:55/00:01:28 v2
Uptime/Expires
Ver
00:24:20/00:01:20 v2
00:24:17/00:01:34 v2
Uptime/Expires
Ver
00:24:28/00:01:30 v2

- 334 -
DR
Prio/Mode
1 / DR S
1 / S
1 / S
DR
Prio/Mode
1 / DR S
1 / S
DR
Prio/Mode
1 / S
www.INE.com

PIM Neighbor Table
Neighbor
Interface
Address
150.1.24.2
Ethernet0/0
150.1.45.5
Serial0/0.1
PIM Neighbor Table
Neighbor
Interface
Address
150.1.56.6
Ethernet0/0
150.1.45.4
Serial0/0.1
150.1.15.1
Ethernet0/1
Version 1.0
Uptime/Expires
Ver
00:25:01/00:01:30 v2
00:24:40/00:01:43 v2
Uptime/Expires
Ver
00:25:32/00:01:21 v2
00:25:20/00:01:32 v2
00:14:10/00:01:22 v2
DR
Prio/Mode
1 / S
1 / S
DR
Prio/Mode
1 / DR S
1 / S
1 / S

PIM Neighbor Table
Neighbor
Interface
Uptime/Expires
Ver
DR
Address
Prio/Mode
150.1.56.5
GigabitEthernet0/0
00:25:57/00:01:28 v2
1 / S

SW1#conf t
SW1(config)#rtr 1
SW1(config)#end
SW1#
R3, the PIM DR, sends unicast register message to R2, the RP:
R3#debug ip pim
PIM debugging is on
PIM(0): Send v2 Register to 150.1.2.2 for 10.1.37.7, group 224.1.1.1
PIM(0): Received v2 Register-Stop on Serial1/2 from 150.1.2.2
PIM(0):
for source 10.1.37.7, group 224.1.1.1
PIM(0): Clear Registering flag to 150.1.2.2 for (10.1.37.7/32,
224.1.1.1)
R3 and R2 have the (*,G) and (S,G) entry for 224.1.1.1 installed
Other devices do not since there are no receivers:
<output omitted>
(*, 224.1.1.1), 00:00:13/stopped, RP 150.1.2.2, flags: SPF
(10.1.37.7, 224.1.1.1), 00:00:13/00:02:52, flags: PFT

- 335 -
www.INE.com
Version 1.0

<output omitted>
(*, 224.1.1.1), 00:05:02/stopped, RP 150.1.2.2, flags: SP
(10.1.37.7, 224.1.1.1), 00:05:02/00:01:57, flags: P
Group 224.1.1.1 not found
SW2 generates an IGMP join and requests delivery of 224.1.1.1:
SW2#conf t
SW2(config-if)#end
SW2#
R6 forwards the PIM join message upstream towards the RP:
R6#debug ip pim
PIM(0): Building Triggered (*,G) Join / (S,G,RP-bit) Prune message for
224.1.1.1
PIM(0): Insert (*,224.1.1.1) join in nbr 150.1.56.5's queue
PIM(0): Adding v2 (150.1.2.2/32, 224.1.1.1), WC-bit, RPT-bit, S-bit
Join
Shortest Path Tree is built from SW1 to R3, R1, R5, R6, SW2:
R3#show ip mroute
<output omitted>
(10.1.37.7, 224.1.1.1), 00:09:27/00:03:28, flags: FT
Serial1/2, Forward/Sparse, 00:03:45/00:02:44
<output omitted>

- 336 -
www.INE.com
Version 1.0
R1#show ip mroute
<output omitted>
(*, 224.1.1.1), 00:03:12/stopped, RP 150.1.2.2, flags: SP
(10.1.37.7, 224.1.1.1), 00:03:12/00:03:24, flags: T
Serial0/0.1, Forward/Sparse, 00:03:12/00:03:15
FastEthernet0/0, Forward/Sparse, 00:03:09/00:03:18
(*, 224.0.1.40), 00:10:38/00:02:44, RP 150.1.2.2, flags: SJCL
R5#show ip mroute
<output omitted>
(*, 224.1.1.1), 00:04:58/00:03:29, RP 150.1.2.2, flags: S
Ethernet0/0, Forward/Sparse, 00:04:58/00:03:29
(10.1.37.7, 224.1.1.1), 00:04:55/00:03:24, flags: T
Ethernet0/0, Forward/Sparse, 00:04:55/00:03:29
<output omitted>
R6#show ip mroute
<output omitted>
(*, 224.1.1.1), 00:05:24/stopped, RP 150.1.2.2, flags: SJC
(10.1.37.7, 224.1.1.1), 00:05:21/00:02:55, flags: JT
<output omitted>
R6 forwards multicast feed to SW2:
R6#conf t
R6(config)#int g0/0

- 337 -
www.INE.com
Version 1.0
Multicast RPF Failure

Objective: Configure PIM Dense Mode throughout the OSPF domain except on
the link between R1 and R5. Configure static multicast routes so that
multicast traffic sent from SW1 can be received by SW2.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
150.1.15.0/24 VLAN 15
R2
Fa0/0
.2
OSPF
Area 0
150.1.24.0/24 VLAN 24
E0/0
.4
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
.5
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 338 -
www.INE.com
Version 1.0
Directions

Configure PIM Dense-Mode on all transit interfaces between R1, R2, R3,
R4, R5, & R6 except the link between R1 and R5
Enable PIM Dense-Mode on R3 & R6s connections to SW1 and SW2
Configure a static multicast route on R4 so that traffic from 10.1.37.0/24
can be received via R2
Configure a static multicast route on R5 so that traffic from 10.1.37.0/24
can be received via R4
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.15.1 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip pim dense-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
ip pim dense-mode
!
interface Serial0/0

- 339 -
www.INE.com
Version 1.0
!
ip address 150.1.12.2 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim dense-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip mroute 10.1.37.0 255.255.255.0 150.1.24.2
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!

- 340 -
www.INE.com
Version 1.0
ip address 150.1.56.5 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip pim dense-mode
!
ip address 150.1.15.5 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip mroute 10.1.37.0 255.255.255.0 150.1.45.4
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim dense-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!

- 341 -
www.INE.com
Version 1.0

!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
SW1#conf t
SW1(config)#rtr 1
SW1(config)#end
SW1#
SW2 requests to traffic for the group 224.1.1.1:
SW2#conf t
SW2(config-if)#end
SW2#

- 342 -
www.INE.com
Version 1.0
Before static mroute R4 drops traffic due to RPF failure:

<output omitted>
Incoming multicast interface is Serial0/0.1:
(10.1.37.7, 224.1.1.1), 00:02:02/00:00:57, flags:
Incoming unicast interface is Ethernet0/0:
Last update from 150.1.24.2 on Ethernet0/0, 02:06:45 ago
* 150.1.45.5, from 150.1.3.3, 02:06:45 ago, via Serial0/0.1
150.1.24.2, from 150.1.3.3, 02:06:45 ago, via Ethernet0/0
R4#conf t
R4(config)#int e0/0
End with CNTL/Z.
Packets are dropped due to RPF failure:

IP(0): s=10.1.37.7 (Ethernet0/0) d=224.1.1.1 id=0, ttl=251, prot=17,
len=60(44), not RPF interface
R4(config-if)#
R4#show ip mroute count
IP Multicast Statistics
3 routes using 1988 bytes of memory
2 groups, 0.50 average sources per group
Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kilobits per second
Other counts: Total/RPF failed/Other drops(OIF-null, rate-limit etc)
Group: 224.1.1.1, Source count: 1, Packets forwarded: 0, Packets received: 32
Source: 10.1.37.7/32, Forwarding: 0/0/0/0, Other: 32/32/0

- 343 -
www.INE.com
Version 1.0
Static mroute is configured to bypass RPF check:

R4(config)#ip mroute 10.1.37.0 255.255.255.0 150.1.24.2
R4(config)#end
R4#
IP(0): s=10.1.37.7 (Ethernet0/0) d=224.1.1.1 (Serial0/0.1) id=0,
R5 expects multicast packet in E0/1 from R1 but receives it from R4:
R5#debug ip mpacket
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 id=0, ttl=250, prot=17,
Last update from 150.1.15.1 on Ethernet0/1, 02:07:45 ago
* 150.1.15.1, from 150.1.3.3, 02:07:45 ago, via Ethernet0/1
Static mroute overrides RPF check:
R5#conf t
R5(config)#ip mroute 10.1.37.0 255.255.255.0 150.1.45.4
R5(config)#end
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 (Ethernet0/0) id=0,
Traffic is now delivered to SW2:
R6#debug ip mpacket
<output omitted>
(10.1.37.7, 224.1.1.1), 00:00:22/00:02:58, flags: T

- 344 -
www.INE.com

- 345 -
Version 1.0
www.INE.com
Version 1.0
Auto-RP
Objective: Configure PIM Sparse-Dense Mode and Auto-RP throughout the
OSPF domain so multicast traffic sent from SW1 can be received by
SW2. R1 should be the RP and R5 should be the mapping agent.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
150.1.15.0/24 VLAN 15
R2
Fa0/0
.2
OSPF
Area 0
150.1.24.0/24 VLAN 24
E0/0
.4
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
.5
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 346 -
www.INE.com
Version 1.0
Directions

Configure PIM Sparse-Dense Mode on all transit interfaces between R1,
R2, R3, R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Configure R1 to advertise its Loopback interface as candidate
Rendezvous Point via Auto-RP
Configure R5 to originate Auto-RP Mapping Agent messages from its
Loopback interface
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
ip pim sparse-dense-mode
!
ip address 150.1.15.1 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-announce Loopback0 scope 16
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0

- 347 -
www.INE.com
Version 1.0
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255

- 348 -
www.INE.com
Version 1.0
!
ip address 150.1.56.5 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
!
ip address 150.1.15.5 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-discovery Loopback0 scope 16
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
!
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!

- 349 -
www.INE.com
Version 1.0
!
!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
R1 advertises itself to the mapping agent via 224.0.1.39:
<output omitted>
(*, 224.0.1.39), 00:11:24/stopped, RP 0.0.0.0, flags: DCL
Ethernet0/0, Forward/Sparse-Dense, 00:11:24/00:00:00
Serial0/0.1, Forward/Sparse-Dense, 00:11:24/00:00:00
Loopback0, Forward/Sparse-Dense, 00:11:24/00:00:00
(150.1.1.1, 224.0.1.39), 00:11:01/00:02:59, flags: LT

- 350 -
www.INE.com
Version 1.0
R5 advertises R1 as the RP to all other routers via 224.0.1.40:

<output omitted>
Serial1/2, Forward/Sparse-Dense, 00:06:34/00:00:00
(150.1.5.5, 224.0.1.40), 00:05:39/00:02:19, flags: PLTX
R1 is assigned as the RP via Auto-RP:
R3#show ip pim rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/4
RP 150.1.1.1 (?), v2v1
Info source: 150.1.5.5 (?), elected via Auto-RP
Uptime: 00:04:55, expires: 00:02:00
SW1 originates multicast feed and R3 registers the source with the RP:
SW1#conf t
SW1(config)#rtr 1
SW1(config)#rtr schedule 1 start after 00:00:05
SW1(config)#end
SW1#
R3#debug ip pim
PIM(0):
for source 10.1.37.7, group 224.1.1.1
224.1.1.1)
SW2 joins group and R6 sends PIM Join upstream towards RP:
SW2#conf t
R6#debug ip pim
PIM debugging is on
PIM(0): Insert (10.1.37.7,224.1.1.1) join in nbr 150.1.56.5's queue
PIM(0): Adding v2 (10.1.37.7/32, 224.1.1.1), S-bit Join

- 351 -
www.INE.com
Version 1.0
Multicast traffic flows from SW1 to SW2:

R6#conf t
R6(config)#int g0/0
224.0.1.39 and 224.0.1.40 are in PIM Dense mode
All other groups are Sparse:
R6#show ip mroute

GigabitEthernet0/1, Forward/Sparse-Dense, 00:02:49/00:02:49
(10.1.37.7, 224.1.1.1), 00:02:44/00:02:51, flags: JT
(150.1.1.1, 224.0.1.39), 00:00:20/00:02:39, flags: PTX
(150.1.5.5, 224.0.1.40), 00:11:18/00:02:35, flags: PLTX

- 352 -
www.INE.com

- 353 -
Version 1.0
www.INE.com
Version 1.0
Auto-RP Multiple Candidate RPs

OSPF domain with R2 as the RP for groups 224.0.0.0/5 and R4 as
the RP for groups 232.0.0.0/5. R5 should be the Mapping Agent.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
150.1.15.0/24 VLAN 15
R2
Fa0/0
.2
OSPF
Area 0
150.1.24.0/24 VLAN 24
E0/0
.4
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
.5
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 354 -
www.INE.com
Version 1.0
Directions

Rendezvous Point via Auto-RP for groups 224.0.0.0/4
Loopback interface
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.15.1 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0

- 355 -
www.INE.com
Version 1.0
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-announce Loopback0 scope 16 group-list 1
!
access-list 1 permit 224.0.0.0 7.255.255.255
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!

- 356 -
www.INE.com
Version 1.0

!
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
!
ip address 150.1.15.5 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
!
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!

- 357 -
www.INE.com
Version 1.0
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
R2 and R4 advertise themselves to the mapping agent via 224.0.1.39:
<output omitted>
(150.1.2.2, 224.0.1.39), 00:09:03/00:02:57, flags: LT

- 358 -
www.INE.com
Version 1.0
(150.1.4.4, 224.0.1.39), 00:08:27/00:02:36, flags: LT

<output omitted>
R5 advertises R1 as the RP to all other routers via 224.0.1.40:
<output omitted>
Serial1/2, Forward/Sparse-Dense, 00:06:34/00:00:00
(150.1.5.5, 224.0.1.40), 00:05:39/00:02:19, flags: PLTX
Both R2 and R4 are assigned as RPs via Auto-RP:
Group(s) 224.0.0.0/5
RP 150.1.2.2 (?), v2v1
Info source: 150.1.5.5
Uptime: 00:08:25,
Group(s) 232.0.0.0/5
RP 150.1.4.4 (?), v2v1
Uptime: 00:07:49,
(?), elected via Auto-RP

expires: 00:02:01

expires: 00:02:03
SW1 originates multicast feeds:

SW1#conf t
SW1(config)#rtr 1
SW1(config-rtr-udp)#rtr 2
SW1(config)#end
SW1#

- 359 -
www.INE.com
Version 1.0
R3 registers 224.1.1.1 with R2 and 232.1.1.1 with R4:

R3#debug ip pim
PIM(0):
for source 10.1.37.7, group 224.1.1.1
224.1.1.1)
PIM(0):
for source 10.1.37.7, group 232.1.1.1
232.1.1.1)
SW2 joins groups and R6 sends PIM
SW2#conf t
Enter configuration commands, one
SW2(config-if)#ip igmp join-group
SW2(config-if)#ip igmp join-group
Joins upstream towards RP:

per line.
End with CNTL/Z.
224.1.1.1
232.1.1.1
R6#debug ip pim
R6#
Multicast traffic flows from SW1 to SW2:
R6#conf t
R6(config)#int g0/0

- 360 -
www.INE.com
Version 1.0
224.0.1.39 and 224.0.1.40 are in PIM Dense mode

All other groups are Sparse:
R6#show ip mroute
(10.1.37.7, 232.1.1.1), 00:04:12/00:02:52, flags: JT
(10.1.37.7, 224.1.1.1), 00:04:12/00:02:52, flags: JT
(150.1.2.2, 224.0.1.39), 00:00:22/00:02:38, flags: PTX
(150.1.4.4, 224.0.1.39), 00:02:46/00:00:13, flags: PTX
(150.1.5.5, 224.0.1.40), 00:09:23/00:02:07, flags: PLTX

- 361 -
www.INE.com
Version 1.0
Auto-RP Filtering Candidate RPs

OSPF domain with R2 as the RP for groups 224.0.0.0/5 and R4 as
the RP for groups 232.0.0.0/5. R5 should be the Mapping Agent and
should prevent any additional devices from being elected RPs.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
150.1.15.0/24 VLAN 15
R2
Fa0/0
.2
OSPF
Area 0
150.1.24.0/24 VLAN 24
E0/0
.4
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
.5
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 362 -
www.INE.com
Version 1.0
Directions

Loopback interface
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.15.1 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0

- 363 -
www.INE.com
Version 1.0
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
!
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!

- 364 -
www.INE.com
Version 1.0

!
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
!
ip address 150.1.15.5 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-announce-filter rp-list R2_LOOPBACK group-list R2_GROUPS
ip pim rp-announce-filter rp-list R4_LOOPBACK group-list R4_GROUPS
ip pim rp-announce-filter rp-list ALL_OTHER_RPS group-list NO_GROUPS
!
ip access-list standard ALL_OTHER_RPS
deny
150.1.2.2
deny
150.1.4.4
permit any
!
ip access-list standard NO_GROUPS
deny
224.0.0.0 3.255.255.255
!
ip access-list standard R2_GROUPS
permit 224.0.0.0 7.255.255.255
!
ip access-list standard R2_LOOPBACK
permit 150.1.2.2
!
ip access-list standard R4_GROUPS
permit 232.0.0.0 7.255.255.255
!
ip access-list standard R4_LOOPBACK
permit 150.1.4.4

- 365 -
www.INE.com
Version 1.0
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
!
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0

- 366 -
www.INE.com
Version 1.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
R1 and R3 advertise themselves as rogue RPs but are filtered by R5:
R1(config)#int lo0
R1(config-if)#ip pim sparse-dense-mode
R1(config-if)#ip pim send-rp-announce loopback0 scope 16
R3(config)#int lo0
R3(config-if)#ip pim sparse-dense-mode
R3(config-if)#ip pim send-rp-announce loopback0 scope 16
R5#debug ip
PIM Auto-RP
Auto-RP(0):
Auto-RP(0):
Auto-RP(0):
Auto-RP(0):
pim auto-rp
debugging is on
Received RP-announce, from 150.1.1.1, RP_cnt 1, ht 181
Filtered 224.0.0.0/4 for RP 150.1.1.1
Filtered 224.0.0.0/4 for RP 150.1.3.3
R2 and R4 are accepted by the filter on R5:

R5#debug ip
PIM Auto-RP
Auto-RP(0):
Auto-RP(0):
Auto-RP(0):
Auto-RP(0):
pim auto-rp
debugging is on
Added with (224.0.0.0/5, RP:150.1.2.2), PIMv2 v1
Update (232.0.0.0/5, RP:150.1.4.4), PIMv2 v1

This system is an RP-mapping agent (Loopback0)
Group(s) 224.0.0.0/5
RP 150.1.2.2 (?), v2v1
Uptime: 00:00:04,
Group(s) 232.0.0.0/5
RP 150.1.4.4 (?), v2v1
Uptime: 00:00:28,

expires: 00:02:51

expires: 00:02:27

- 367 -
www.INE.com
Version 1.0
Auto-RP Listener
Objective: Configure PIM Sparse Mode and Auto-RP throughout the OSPF
domain with R2 as the RP for groups 224.0.0.0/5. R5 should be the
Mapping Agent. Groups outside of 224.0.0.0/5 should not fall back to
dense mode.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
150.1.15.0/24 VLAN 15
R2
Fa0/0
.2
OSPF
Area 0
150.1.24.0/24 VLAN 24
E0/0
.4
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
.5
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 368 -
www.INE.com
Version 1.0
Directions

Configure PIM Sparse Mode on all transit interfaces between R1, R2, R3,
Loopback interface
Enable Auto-RP Listener on all multicast routing devices
Ensure that multicast traffic originated by SW1 in the 224.0.0.0/4 range
can be received by SW2
Traffic outside of this range should be dropped
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
ip address 150.1.15.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim autorp listener
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
ip pim sparse-mode

- 369 -
www.INE.com
Version 1.0
!
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
!
!
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!

- 370 -
www.INE.com
Version 1.0

ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
!
ip address 150.1.15.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
!
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!

- 371 -
www.INE.com
Version 1.0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
Multicast routers only have an RP for 224.0.0.0/5:
Group(s) 224.0.0.0/5
RP 150.1.2.2 (?), v2v1
Uptime: 00:00:57, expires: 00:02:03

- 372 -
www.INE.com
Version 1.0
SW1 generates traffic to 224.1.1.1 and 232.1.1.1:

SW1#conf t
SW1(config)#rtr 1
SW1(config)#end
SW1#
R3 registers (10.1.37.7,224.1.1.1) but (10.1.37.7,232.1.1.1) is dropped
R3#debug ip pim
PIM(0):
for source 10.1.37.7, group 224.1.1.1
224.1.1.1)
Traffic for 224.1.1.1 flows but 232.1.1.1 is
R3#conf t
R3(config)#int e0/0
R3(config-if)#
IP(0): s=10.1.37.7 (Ethernet0/0) d=224.1.1.1
IP(0): s=10.1.37.7 (Ethernet0/0) d=232.1.1.1
len=60(44), mroute olist null
dropped:
End with CNTL/Z.
(Serial1/2) id=0, ttl=254,

id=0, ttl=254, prot=17,
Only 224.0.1.39 and 224.0.1.40 are allow to run in dense mode:

R3#show ip mroute
<output omitted>
(*, 232.1.1.1), 00:04:00/stopped, RP 0.0.0.0, flags: DP
(10.1.37.7, 232.1.1.1), 00:04:00/00:02:53, flags: PT

- 373 -
www.INE.com
Version 1.0
(10.1.37.7, 224.1.1.1), 00:04:00/00:03:23, flags: FT

(150.1.2.2, 224.0.1.39), 00:01:16/00:01:45, flags: PT
(150.1.5.5, 224.0.1.40), 00:05:16/00:02:43, flags: PLTX

- 374 -
www.INE.com

- 375 -
Version 1.0
www.INE.com
Version 1.0
PIM NBMA Mode

Objective: Configure PIM Sparse Mode with R1 as the RP. Multicast traffic from
SW1 going to SW2 should not be received by R2. Multicast traffic
from SW1 going to R4 should not be received by R5.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
R1
.1
S0/0
OSPF
Area 0
.2
S0/0.1
102 105
R2
Fa0/0
201
.2
150.1.125.0/24
150.1.24.0/24 VLAN 24
E0/0
Frame Relay
.4
501
R4
.5
S0/0.1
R5
E0/0 .5
OSPF
Area 0 G0/0
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 376 -
www.INE.com
Version 1.0
Directions

R1s connection to the Frame Relay cloud should use the physical
interface with static layer 3 to layer 2 resolution
R2 and R5s connections to the Frame Relay cloud should use point-topoint subinterfaces
The Frame Relay segment between R1, R2, and R5 should use OSPF
network point-to-multipoint
Enable IP Multicast-Routing on R1, R2, R3, R5, and R6
R5, & R6, and on R3 & R6s connections to SW1 and SW2 and R2s
connection to R4
Configure R1 as the Rendezvous Point
Enable PIM NBMA mode on R1s connection to the Frame Relay cloud
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
ip address 150.1.125.1 255.255.255.0
frame-relay map ip 150.1.125.2 102 broadcast
ip ospf network point-to-multipoint
ip pim sparse-mode
ip pim nbma-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!

- 377 -
www.INE.com
Version 1.0
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.125.2 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R4#
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode

- 378 -
www.INE.com
Version 1.0
!
interface Serial0/0
!
ip address 150.1.125.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!

- 379 -
www.INE.com
Version 1.0

!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
Before PIM NBMA Mode on R1s Frame Relay interface:
R4 joins 224.1.1.1:
R4(config)#int e0/0
R4(config-if)#ip igmp join
R4(config-if)#ip igmp join-group 224.1.1.1
R4(config-if)#end
SW2 joins 232.1.1.1:
SW2#conf t
SW2(config-if)#end
End with CNTL/Z.
SW1 generates traffic to 224.1.1.1 and 232.1.1.1:

SW1#conf t
SW1(config)#rtr 1
SW1(config)#end

- 380 -
www.INE.com
Version 1.0
R1 forwards 224.1.1.1 and 232.1.1.1 out to the Frame Relay cloud:

R1#show ip mroute
<output omitted>
(*, 232.1.1.1), 00:01:50/stopped, RP 150.1.1.1, flags: S
(10.1.37.7, 232.1.1.1), 00:00:01/00:02:58, flags:
(*, 224.1.1.1), 00:02:03/stopped, RP 150.1.1.1, flags: S
(10.1.37.7, 224.1.1.1), 00:00:02/00:02:57, flags:
<output omitted>
R2 and R5 receive both feeds:
R2#debug ip mpacket
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 (FastEthernet0/0) id=0,
IP(0): s=10.1.37.7 (Serial0/0.1) d=232.1.1.1 id=0, prot=17, len=48(44),
mroute olist null
R5#debug ip mpacket
len=48(44), mroute olist null
With NBMA mode on R1s Frame Relay link:
R1#conf t
R1(config)#int s0/0
R1(config-if)#ip pim nbma-mode
R1(config-if)#end
End with CNTL/Z.
R1#show ip mroute
<output omitted>
(*, 232.1.1.1), 00:01:15/00:03:18, RP 150.1.1.1, flags: S
Serial0/0, 150.1.125.5, Forward/Sparse, 00:00:11/00:03:18
(10.1.37.7, 232.1.1.1), 00:01:15/00:03:20, flags: T

- 381 -
www.INE.com
Version 1.0
(*, 224.1.1.1), 00:01:16/00:03:24, RP 150.1.1.1, flags: S

(10.1.37.7, 224.1.1.1), 00:01:16/00:03:29, flags: T
<output omitted>
R2 only receives the feed that R4 joined:
R2#debug ip mpacket
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 (FastEthernet0/0) id=0,
R5 only receives the feed that SW2 joined:
R5#debug ip mpacket

- 382 -
www.INE.com

- 383 -
Version 1.0
www.INE.com
Version 1.0
Auto-RP and Default RP Placement

Objective: Configure PIM Sparse Mode throughout the OSPF domain with R2
as an Auto-RP C-RP and MA, and as the default RP for groups
224.0.1.39 and 224.0.1.40. Ensure that multicast traffic originated by
R4 can reach both SW1 and SW2.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
R1
.1
S0/0
OSPF
Area 0
.2
S0/0.1
102 105
R2
Fa0/0
201
.2
150.1.125.0/24
150.1.24.0/24 VLAN 24
E0/0
Frame Relay
.4
501
R4
.5
S0/0.1
R5
E0/0 .5
OSPF
Area 0 G0/0
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 384 -
www.INE.com
Version 1.0
Directions

R1s connection to the Frame Relay cloud should use the physical
interface with static layer 3 to layer 2 resolution
R2 and R5s connections to the Frame Relay cloud should use point-topoint subinterfaces
The Frame Relay segment between R1, R2, and R5 should use OSPF
network point-to-multipoint
Enable IP Multicast-Routing on R1, R2, R3, R5, and R6
R5, & R6, and on R3 & R6s connections to SW1 and SW2 and R2s
connection to R4
Configure R2 as a candidate RP and mapping agent for all groups via
Auto-RP
Configure all multicast enabled routers to send PIM join messages for
groups 224.0.1.39 and 224.0.1.40 to R2
Enable PIM NBMA mode on R1s connection to the Frame Relay cloud
Ensure that multicast traffic originated by R4 can be received by both SW1
and SW2
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
ip address 150.1.125.1 255.255.255.0
ip pim sparse-mode
ip pim nbma-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2 1
!

- 385 -
www.INE.com
Version 1.0

R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.125.2 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
!
!
ip pim send-rp-announce Loopback0 scope 16
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
!

- 386 -
www.INE.com
Version 1.0
R4#
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.125.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
!
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
!

- 387 -
www.INE.com
Version 1.0

SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

- 388 -
www.INE.com
Version 1.0
Verification
R1 forwards R2s MA messages out to R5 because 224.0.1.40 is sparse and
NBMA mode is enabled:
U - URD, I - Received Source Specific Host Report, Z - Multicast Tunnel
Outgoing interface flags: H - Hardware switched
(*, 224.0.1.40), 00:55:05/stopped, RP 150.1.2.2, flags: SJCL

(150.1.2.2, 224.0.1.40), 00:48:32/00:02:38, flags: LT
All multicast routers now learn R2 as the RP via Auto-RP:
Group(s) 224.0.0.0/4
RP 150.1.2.2 (?), v2v1
Uptime: 00:55:04, expires: 00:02:24
Acl: 1, Static
RP: 150.1.2.2 (?)
Group(s) 224.0.0.0/4
RP 150.1.2.2 (?), v2v1
Uptime: 00:56:05, expires: 00:02:20
Acl: 1, Static
RP: 150.1.2.2 (?)

- 389 -
www.INE.com
Version 1.0
Configure SW1 and SW2 to request multicast traffic:

SW1:
ip igmp join-group 224.1.1.1
SW2:
ip igmp join-group 224.1.1.1
Configure R4 to generate multicast traffic:
R4(config)#ip sla monitor 1
R4(config-sla-monitor)# type udpEcho dest-ipaddr 224.1.1.1 dest-port
12345 source-ipaddr 150.1.24.4 control disable
R4(config-sla-monitor-udp)# frequency 5
R4(config-sla-monitor-udp)#ip sla monitor schedule 1 start-time now
R3 and R6 forward traffic to SW1 and SW2:
R3#conf t
R3(config)#int s1/2
IP(0): s=150.1.24.4 (Serial1/2) d=224.1.1.1 (Ethernet0/0) id=0,
R6#conf t
R6(config)#int g0/0

- 390 -
www.INE.com

- 391 -
Version 1.0
www.INE.com
Version 1.0
Bootstrap Router
Objective: Configure PIM Sparse Mode and BSR throughout the OSPF domain
so multicast traffic sent from SW1 can be received by SW2. R1
should be the RP and R5 should be the BSR.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
150.1.15.0/24 VLAN 15
R2
Fa0/0
.2
OSPF
Area 0
150.1.24.0/24 VLAN 24
E0/0
.4
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
.5
150.1.56.0/24 VLAN 56
.6
G0/1
Fa0/6
SW2
10.1.68.0/24
.6
R6
.8

- 392 -
www.INE.com
Version 1.0
Directions

Configure R1 to advertise its Loopback interface as an RP candidate.
Configure R5 to advertise its Loopback interface as a BSR candidate.
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
ip pim sparse-mode
!
ip address 150.1.15.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-candidate Loopback0
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!

- 393 -
www.INE.com
Version 1.0
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!

- 394 -
www.INE.com
Version 1.0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
!
ip address 150.1.15.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim bsr-candidate Loopback0
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!

- 395 -
www.INE.com
Version 1.0
!
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
Verification
R1 advertises itself to the BSR as an RP Candidate:
R5#show ip pim bsr-router
PIMv2 Bootstrap information
This system is the Bootstrap Router (BSR)
BSR address: 150.1.5.5 (?)
Uptime:
00:13:05, BSR Priority: 0, Hash mask length: 0
Next bootstrap message in 00:00:56
This system is the Bootstrap Router (v2)
Group(s) 224.0.0.0/4
RP 150.1.1.1 (?), v2
Info source: 150.1.15.1 (?), via bootstrap, priority 0, holdtime 210
Uptime: 00:12:19, expires: 00:03:10
Group(s) 224.0.0.0/4
RP 150.1.1.1 (?), v2
Info source: 150.1.5.5 (?), via bootstrap, priority 0, holdtime 210
Uptime: 00:06:00, expires: 00:02:36

- 396 -
www.INE.com

- 397 -
Version 1.0
www.INE.com
Version 1.0
Multicast Source Distribution Protocol (MSDP)

Objective: Configure MSDP between R2 and R4 so that multicast traffic
originated by SW1 in AS 1 can be received by SW2 in AS 2.
Fa0/3
OSPF
Area 0
10.1.37.0/24
.7
E0/0
R3
SW1
.3
.3
S1/2
BGP
AS 1
S0/1
150.1.13.0/24
.1
OSPF 150.1.12.0/24
Area 0 Frame Relay
R1
.1
S0/0.1
102
201
.2
S0/0.1
R2
Fa0/0
.2
E0/0
.4
150.1.24.0/24 VLAN 24
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
BGP
AS 2
.5
S0/0.1
OSPF
Area 0
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
Fa0/6
SW2
.6
10.1.68.0/24
OSPF
Area 0
R6
.8

- 398 -
www.INE.com
Version 1.0
Directions

Configure OSPF area 0 on the interfaces between R1, R2, R3, and SW1
Configure Loopbacks in the format 150.1.Y.Y/32 on R1, R2, and R3 and
Configure the Loopback 10.1.7.7/24 on SW1 and advertise it into OSPF
Configure R2 to originate a default route into the OSPF domain
Configure PIM Sparse-Mode on the interfaces between R1, R2, & R3, and
R3s connection to SW1
Configure R2s IP address 150.1.24.2 as the RP for AS 1
Configure OSPF area 0 on the interfaces between R4, R5, R6, and SW2
Configure Loopbacks in the format 150.1.Y.Y/32 on R4, R5, and R6 and
Configure the Loopback 10.1.8.8/24 on SW2 and advertise it into OSPF
Configure R4 to originate a default route into the OSPF domain
Configure PIM Sparse-Mode on the interfaces between R4, R5, & R6, and
R6s connection to SW2
Configure R4s IP address 150.1.24.4 as the RP for AS 2
Configure an EBGP peering between R2 and R4 using their connected
interface
Redistribute OSPF learned routes into BGP on both R2 and R4
Configure an MSDP peering between R2 and R4 using their connected
interface
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0

- 399 -
www.INE.com
Version 1.0
network 150.1.13.1 0.0.0.0 area 0

!
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
default-information originate always
!
router bgp 1
redistribute ospf 1
!
ip msdp peer 150.1.24.4 remote-as 2
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 10.1.37.3 0.0.0.0 area 0
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!

- 400 -
www.INE.com
Version 1.0
R4#show run
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
router bgp 2
redistribute ospf 1
!
ip msdp peer 150.1.24.2
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
!

- 401 -
www.INE.com
Version 1.0
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 10.1.68.6 0.0.0.0 area 0
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
!
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.68.8 255.255.255.0
!

- 402 -
www.INE.com
Version 1.0
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.68.8 0.0.0.0 area 0
Verification
Enable multicast debugging on R2 and R4:
R2#debug ip pim
PIM debugging is on
R2#debug ip msdp peer
MSDP Peer debugging is on
R2#debug ip msdp routes
MSDP Routes debugging is on
R2#debug ip msdp detail
MSDP Detail debugging is on
R4#debug ip pim
PIM debugging is on
Generate multicast traffic from SW1:
SW1#conf t
SW1(config)#rtr 1
SW1(config)#rtr schedule 1 start after 00:00:05 life forever
SW1(config)#
R3 registers source with R2 and R2 generates MSDP SA message to R4:
R2#
PIM(0): Received v2 Register on Serial0/0.1 from 150.1.13.3
for 10.1.37.7, group 224.1.1.1
PIM(0): Send v2 Register-Stop to 150.1.13.3 for 10.1.37.7, group
224.1.1.1
MSDP(0): 150.1.24.4: Send 44-byte SA encapsulated data for (10.1.37.7,
224.1.1.1), RP 150.1.24.2
R4 recieves SA message from R2:
R4#
MSDP(0): Received 64-byte TCP segment from 150.1.24.2
MSDP(0): Append 64 bytes to 0-byte msg 169 from 150.1.24.2, qs 1
MSDP(0): 150.1.24.2: Received 64-byte msg 169 from peer
MSDP(0): 150.1.24.2: SA TLV, len: 64, ec: 1, RP: 150.1.24.2, with data
MSDP(0): 150.1.24.2: Peer RPF check passed for single peer
MSDP(0): (10.1.37.7/32, 224.1.1.1), accepted

- 403 -
www.INE.com
Version 1.0
Configure SW2 to receive traffic for the multicast group:

SW2#conf t
R4 receives PIM Join from R5 for 224.1.1.1 and builds the RPF tree
R4#
PIM(0): Received v2 Join/Prune on Serial0/0.1 from 150.1.45.5, to us
PIM(0): Add Serial0/0.1/150.1.45.5 to (*, 224.1.1.1), Forward state, by
PIM *G Join
PIM(0): Update Serial0/0.1/150.1.45.5 to (10.1.37.7, 224.1.1.1),
Forward state, by PIM *G Join
PIM(0): Send v2 join/prune to 150.1.24.2 (Ethernet0/0)
PIM(0): Received v2 Join/Prune on Serial0/0.1 from 150.1.45.5, to us
R4#
PIM(0): Join-list: (10.1.37.7/32, 224.1.1.1), S-bit set
PIM(0): Update Serial0/0.1/150.1.45.5 to (10.1.37.7, 224.1.1.1),
Forward state, by PIM SG Join
R6#conf t
R6(config)#int g0/0
R6#debug ip mpacket

- 404 -
www.INE.com

- 405 -
Version 1.0
www.INE.com
Version 1.0
Anycast RP
Objective: Configure R1 and R5 with the duplicate addresses 150.1.255.255/32
for Anycast RP within the PIM Sparse-Mode domain.
Fa0/3
OSPF
Area 0
10.1.37.0/24
.7
E0/0
R3
SW1
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
OSPF 150.1.12.0/24
Area 0 Frame Relay
R1
.1
S0/0.1
102
201
.2
S0/0.1
R2
Fa0/0
.2
E0/0
.4
OSPF
Area 0
150.1.24.0/24 VLAN 24
150.1.45.0/24
R4
S0/0.1
Frame Relay
.4
405
504
.5
S0/0.1
OSPF
Area 0
R5
E0/0 .5
150.1.56.0/24 VLAN 56
G0/0
.6
G0/1
Fa0/6
SW2
.6
10.1.68.0/24
OSPF
Area 0
R6
.8

- 406 -
www.INE.com
Version 1.0
Directions

Configure Loopbacks in the format 150.1.Y.Y/32 on R1, R2, R3, R4, R5,
and R6
Configure Loopbacks in the format 10.1.Y.Y/24 on SW1 and SW2
Configure an additional Loopback 150.1.255.255/32 on R1 and R5
Configure OSPF area 0 on all interfaces in the network
Configure PIM Sparse-Mode on the interfaces between R1, R2, R3, R4,
R5, and R6
Configure PIM Sparse-Mode on R3 and R6s connections to SW1 and
SW2
Configure the anycast address 150.1.255.255 as the RP for all multicast
enabled routers
Configure an MSDP peering between R1 and R5 using their unique
loopback address
Final Configuration
R1#
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Loopback1
ip address 150.1.255.255 255.255.255.255
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
network 150.1.255.255 0.0.0.0 area 0
!
ip msdp peer 150.1.5.5 connect-source Loopback0

- 407 -
www.INE.com
Version 1.0
R2#
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
!
R3#
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 10.1.37.3 0.0.0.0 area 0
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
R4#
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!

- 408 -
www.INE.com
Version 1.0
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
R5#
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Loopback1
ip address 150.1.255.255 255.255.255.255
!
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
network 150.1.255.255 0.0.0.0 area 0
!
ip msdp peer 150.1.1.1 connect-source Loopback0
R6#
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
ip address 10.1.68.6 255.255.255.0

- 409 -
www.INE.com
Version 1.0
ip pim sparse-mode
!
router ospf 1
network 10.1.68.6 0.0.0.0 area 0
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
!
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.68.8 0.0.0.0 area 0

- 410 -
www.INE.com
Version 1.0
Verification
Enable multicast debugging on R1 and R5:
R1#debug ip pim
PIM debugging is on
R5#debug ip pim
PIM debugging is on
Generate multicast traffic from SW1:
SW1#conf t
SW1(config)#rtr 1
SW1(config)#rtr schedule 1 start after 00:00:05 life forever
SW1(config)#
R3 registers source with R1 and R1 generates MSDP SA message to R5:
R1#
PIM(0): Received v2 Register on Serial0/1 from 150.1.13.3
for 10.1.37.7, group 224.1.1.1
PIM(0): Send v2 Register-Stop to 150.1.13.3 for 10.1.37.7, group
224.1.1.1
MSDP(0): 150.1.5.5: Send 44-byte SA encapsulated data for (10.1.37.7,
224.1.1.1), RP 150.1.255.255
R5 recieves SA message from R1:
R5#
MSDP(0): Received 20-byte TCP segment from 150.1.1.1
MSDP(0): Append 20 bytes to 0-byte msg 40 from 150.1.1.1, qs 1
MSDP(0): 150.1.1.1: Received 20-byte msg 40 from peer
MSDP(0): 150.1.1.1: SA TLV, len: 20, ec: 1, RP: 150.1.255.255
MSDP(0): 150.1.1.1: Peer RPF check passed for single peer
MSDP(0): (10.1.37.7/32, 224.1.1.1), accepted

- 411 -
www.INE.com
Version 1.0
Configure SW2 to receive traffic for the multicast group:

SW2#conf t
R5 receives PIM Join from R6 for 224.1.1.1 and builds the RPF tree
R5#
PIM(0): Received v2 Join/Prune on Ethernet0/0 from 150.1.56.6, to us
PIM(0): Add Ethernet0/0/150.1.56.6 to (*, 224.1.1.1), Forward state, by
PIM *G Join
PIM(0): Update Ethernet0/0/150.1.56.6 to (10.1.37.7, 224.1.1.1),
Forward state, by PIM *G Join
PIM(0): Send v2 join/prune to 150.1.45.4 (Serial0/0.1)
R6#conf t
R6(config)#int g0/0
R6#debug ip mpacket

- 412 -
www.INE.com

- 413 -
Version 1.0
www.INE.com
Version 1.0
Multicast BGP
Objective: Configure Multicast BGP between AS 1, AS 2, and AS 3 so that R5
will accept multicast traffic from SW1 through AS 2.
Fa0/3
SW1
10.1.37.0/24
.7
E0/0
R3
BGP
AS 1
OSPF
Area 0
.3
.3
S1/2
S0/1
150.1.13.0/24
.1
Fa0/0
150.1.12.0/24
R1
Frame Relay
.1
.1
S0/0.1
102
201
.2
S0/0.1
Fa0/0
.2
E0/0
.4
150.1.15.0/24 VLAN 15
R2
BGP
AS 2
150.1.24.0/24 VLAN 24
150.1.45.0/24
R4
S0/0.1
Frame Relay
405
504
.4
.5
S0/0.1
E0/1
R5
E0/0 .5
OSPF
Area 0 G0/0
BGP
AS 3
150.1.56.0/24 VLAN 56
.6
G0/1
10.1.68.0/24
.6
Fa0/6
SW2
.5
R6
.8

- 414 -
www.INE.com
Version 1.0
Directions

Configure OSPF area 0 between R1, R3, and SW1
Configure OSPF area 0 between R5, R6, and SW2
Configure Loopbacks on SW1 and SW2 in the format 10.1.Y.Y/24 and
advertise them into OSPF with a mask of /24
Configure R1 and R5 to advertise default routes into OSPF
Configure PIM dense-mode on all interfaces of R1, R2, R3, R4, R5, and
R6 except VLAN 15 between R1 and R5
Configure BGP AS 1 on R1
Configure BGP AS 2 on R2 and R4
Configure BGP AS 3 on R5
R1 should exchange IPv4 unicast prefixes with R5 via BGP
R1 should exchange IPv4 unicast and multicast prefixes with R2 via BGP
R4 should exchange IPv4 unicast and multicast prefixes with R5 via BGP
Advertise the Loopback of SW1 into unicast and multicast BGP on R1
Advertise the Loopback of SW2 into unicast BGP on R5
Final Configuration
R1#
!
ip address 150.1.15.1 255.255.255.0
!
interface Serial0/0
!
ip address 150.1.12.1 255.255.255.0
ip pim dense-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 150.1.13.1 0.0.0.0 area 0
!
router bgp 1
!
address-family ipv4 multicast
network 10.1.7.0 mask 255.255.255.0
exit-address-family

- 415 -
www.INE.com
Version 1.0
!
address-family ipv4
network 10.1.7.0 mask 255.255.255.0
exit-address-family
R2#
!
ip address 150.1.24.2 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
!
ip address 150.1.12.2 255.255.255.0
ip pim dense-mode
!
router bgp 2
!
exit-address-family
!
address-family ipv4
exit-address-family
R3#
!
ip address 10.1.37.3 255.255.255.0
ip pim dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim dense-mode
clockrate 64000
!
router ospf 1
network 10.1.37.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0

- 416 -
www.INE.com
Version 1.0
R4#
!
ip address 150.1.24.4 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
!
ip address 150.1.45.4 255.255.255.0
ip pim dense-mode
!
router bgp 2
!
address-family ipv4
exit-address-family
!
exit-address-family
R5#
!
ip address 150.1.56.5 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
!
ip address 150.1.45.5 255.255.255.0
ip pim dense-mode
!
ip address 150.1.15.5 255.255.255.0
!
router ospf 1
network 150.1.56.5 0.0.0.0 area 0
!
router bgp 3
!

- 417 -
www.INE.com
Version 1.0
address-family ipv4
network 10.1.8.0 mask 255.255.255.0
exit-address-family
!
exit-address-family
R6#
!
ip address 150.1.56.6 255.255.255.0
ip pim dense-mode
!
ip address 10.1.68.6 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 10.1.68.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
!
!
no switchport
ip address 10.1.37.7 255.255.255.0
!
!
!
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0

- 418 -
www.INE.com
Version 1.0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
!
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.68.8 0.0.0.0 area 0
Verification
Configure SW2 to request traffic for 224.1.1.1:
SW2#conf t
SW2(config-if)#end
SW2#
Configure SW1 to generate traffic
SW1#ping
Protocol [ip]:
Target IP address: 224.1.1.1
Repeat count [1]: 1000
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Interface [All]: FastEthernet0/3
Time to live [255]:
Source address: 10.1.7.7
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp,
Sweep range of sizes [n]:
Sending 1000, 100-byte ICMP Echos
Packet sent with a source address
.....
<output omitted>
to 224.1.1.1:
Verbose[none]:
to 224.1.1.1, timeout is 2 seconds:

of 10.1.7.7

- 419 -
www.INE.com
Version 1.0
Before 10.1.7.0/24 is learned via Multicast BGP:

R5#conf t
R5(config)#int s0/0.1
R5(config-subif)#no ip route-cache
R5(config-subif)#end
R5#debug ip mpacket
R5#show ip rpf 10.1.7.0
RPF information for ? (10.1.7.0) failed, no route exists
After 10.1.7.0/24 is learned via Multicast BGP:
R5#show ip bgp ipv4 multicast
Network
*> 10.1.7.0/24
Next Hop
150.1.45.4

0 2 1 i
R5#show ip rpf 10.1.7.0

RPF information for ? (10.1.7.0)
RPF interface: Serial0/0.1
RPF neighbor: ? (150.1.45.4)
RPF route/mask: 10.1.7.0/24
RPF type: mbgp
RPF recursion count: 0
Doing distance-preferred lookups across tables
R5#debug ip mpacket
R6#conf t
R6(config)#int g0/0
R6(config-if)#end
R6#debug ip mpacket
IP(0): s=10.1.7.7 (GigabitEthernet0/0) d=224.1.1.1 (GigabitEthernet0/1)
id=129, ttl=249, prot=1, len=100(100), mforward

- 420 -
www.INE.com

Iewb-Sp-Vol1 v1 00 ENTIREWORKBOOK

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Iewb-Sp-Vol1 v1 00 ENTIREWORKBOOK

Uploaded by

Copyright:

Available Formats

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Build the logical topology per the diagram

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

150.1.24.0/24 [110/65] via 150.1.12.2, 00:11:41, FastEthernet0/0

150.1.4.4/32 [110/66] via

150.1.12.2, 00:11:41, FastEthernet0/0

150.1.13.0/24 [110/65] via 150.1.12.1, 00:12:01, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

R4#show mpls ldp neighbor

R2#show mpls forwarding-table

R3#show mpls forwarding-table

R4#show mpls forwarding-table

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

MPLS VPNs with Static Routing

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Build the logical topology per the diagram

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

interface Serial0/0.1 point-to-point

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

address-family ipv4 vrf R5-SW1

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

address-family ipv4 vrf R6-SW2

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

150.1.24.0/24 [110/65] via 150.1.12.2, 00:13:36, FastEthernet0/0

150.1.4.4/32 [110/66] via

150.1.12.2, 00:13:36, FastEthernet0/0

150.1.13.0/24 [110/65] via 150.1.12.1, 00:13:57, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route vrf *

Copyright 2010 Internetwork Expert

CCIE Service Provider Lab Workbook Volume I

Routing Table: R6-SW2

10.0.0.0/24 is subnetted, 2 subnets

10.0.0.0/24 is subnetted, 2 subnets

Copyright 2010 Internetwork Expert