Skip to content

Deploy L3VPN Services for Customer 1

Topology

Prepare for Customer 1 Layer 3 VPN Services

  1. On all PE nodes that are connected to Customer 1 CE nodes, define VRF CUSTOMER-1.

    • Ensure IPv4 Unicast Forwarding is enabled.
    • Route-Target for import and export should be 1:1.
    • Route-Distinguisher should be [NodeID].[NodeID].[NodeID].[NodeID]:1.
  2. Place the appropriate interfaces on the PE nodes into VRF CUSTOMER-1.

Configure Customer 1 CE Devices

  1. Configure EOS11, EOS12 and EOS13 to run OSPF process 100 in area 0.

  2. Advertise all connected interfaces into OSPF using a network statement.

Success

Once this task is complete; EOS11, EOS12, and EOS13 should be able to ping each other’s loopbacks and directly connected interfaces.

Establish PE-CE peering with Customer 1

  1. Configure EOS11 and EOS13 for BGP AS 123.

    • EOS11 and EOS13 should originate the following networks via BGP (any method of network origination is acceptable):

      • 11.11.11.11/32
      • 12.12.12.12/32
      • 13.13.13.13/32
  2. Configure EOS15 for BGP AS 15.

    • EOS15 should originate the following networks via BGP (any method of network origination is acceptable):

      • 15.15.15.15/32
  3. Establish eBGP IPv4 Unicast peering between Customer 1 CE and Service Provider PE devices. These peerings should be within the Customer-1 VPN (VRF).

  4. Ensure EOS12 should has the following output from a show ip route ospf command:

    O        11.11.11.11/32 [110/20] via 10.11.12.11, Ethernet2
    O        13.13.13.13/32 [110/20] via 10.12.13.13, Ethernet1
    O E2     15.15.15.15/32 [110/1] via 10.12.13.13, Ethernet1
    
  5. Ensure EOS15 has the following output from a show ip route bgp command:

    B E      11.11.11.11/32 [200/0] via 10.8.15.8, Ethernet1
    B E      12.12.12.12/32 [200/0] via 10.8.15.8, Ethernet1
    B E      13.13.13.13/32 [200/0] via 10.8.15.8, Ethernet1
    
  6. Verify reachability between all Customer-1 CE devices by pinging each other’s Loopback0 interface while sourcing the pings from their own Loopback0 interface.

Enable L3VPN Multi-Pathing

  1. Ensure that traffic from EOS15 to EOS12 uses multiple paths across the Service Provider network, distributing the load between EOS1 and EOS6.

    Tip

    It is ok to adjust the isis metric on the link between EOS6 and EOS8 in order to force multi-pathing to occur.

  2. EOS8 should have the following output from a show ip route vrf CUSTOMER-1 12.12.12.12 command:

    Note

    The specific labels may vary in your output.

    B E      12.12.12.12/32 [200/0] via 6.6.6.6/32, IS-IS SR tunnel index 3, label 105561
                                        via 10.6.8.6, Ethernet3, label imp-null (3)
                                    via 1.1.1.1/32, IS-IS SR tunnel index 5, label 121945
                                        via 10.4.8.4, Ethernet1, label 900001
    
Success

Lab Complete!