untitled

Size: px

Start display at page:

Download "untitled"

あつのままだ
5 years ago
Views:

1 IP-VPN (BGP MPLS/VPN) InternetWeek 2004 IP-VPN MPLS IP-VPN VPNL3VPN L2VPN L3VPN 1

2 IP-VPN Agenda BGP/MPLS-VPN BGP/MPLS-VPN BGP/MPLS-VPN BGPVPN BGP/MPLS-VPN BGP/MPLS-VPN BGP/MPLS-VPN BGP/MPLS-VPN RFC2547bisISP IP-VPN VPN IP MPLS-VPNMPLS() MPLSIP-VPN BGP/MPLS-VPN 2

3 BGP/MPLS-VPN IFATMHSD (FR IP) (a)ipsec-vpn (b)mpls-vpn IP-NW BGP/MPLS-VPN VPN BGP/MPLS-VPN MPLS(LDP/RSVP) VPN BGP(mpBGP:RFC2858, RFC3107) PeerLayer3 IP-VPN VPN Layer3ISP 3

4 BGP/MPLS-VPN BGP/MPLS-VPN MPLS MPLS-VPN PEVPN MPLS PA IP PB PE VPN IP IP MPLS PEA PEB PEC IP MPLS IP CE CE CE CE CE CE VPN A /24 VPN A /24 VPN B /24 VPN A /24 VPN B /24 VPN A /16 4

5 BGP/MPLS-VPN (AP) A B VPNVPN () IP (MPLSIP-Sec) FRATM IP IPv4 VPN FRATM 5

6 (ISP) IP IP-VPN VPN1 IP-VPN VPN QoS BGP/MPLS-VPN PEProvider Edge Router( MPLS) PProvider Router(MPLS) CECustomer Edge Router(PE ) VPN IP CE PE P P PE CE VPNAA MPLS VPNA:B 6

7 PE VPN1PE VRFs:VPN Routing and Forwarding tables VPN CE VRF(VPN) VRF ATM/FR PE VPN VR(Virtual Router) Serial1/0/0 ATM2/0/0.1 Ether3/0/0 Serial1/0/1 VPN-A Routing Table VPN-B Routing Table VPN-C Routing Table ISP Global Routing Table IP Backbone PE 7

8 BGP/MPLS-VPN Shim VPN IP PEPE P (LDPhop by hop) MPLS2 32bit PEPE (mpbgppe) BGP/MPLS-VPN VPN A A Route Dist. VPN PE / / / /32 42 in 42 PE out /32 32 Lo: /32 CE PE P P PE CE 26 VPNAA MPLS VPNA:B /8 8

9 BGP/MPLS-VPN(cont.) (CE) VPNAB Dst: Lo: /32 CE PE P P PE CE 26 VPNAA MPLS VPNA:B /8 BGP/MPLS-VPN(cont.) VPN A A PE Route Dist. VPN PE / / / /32 42 Dst: Lo: /32 CE PE P P PE CE 26 VPNAA MPLS VPNA:B /8 9

10 BGP/MPLS-VPN(cont.) PE PEVPNA /8VPN B (1)VPNA: /8PEBGP next-hop (2)BGP next-hopa Dst: B(26) A(42) Lo: /32 CE PE P P PE CE 26 VPNAA MPLS VPNA:B /8 BGP/MPLS-VPN(cont.) P in 42 PE out /32 32 Dst: B(26) A(42) Lo: /32 CE PE P P PE CE 26 VPNAA MPLS VPNA:B /8 10

11 BGP/MPLS-VPN(cont.) P PA Dst: B(26) A(32) Lo: /32 CE PE P P PE CE 26 VPNAA MPLS VPNA:B /8 BGP/MPLS-VPN(cont.) P (PHP:Penultimate Hop Popping) in 32 PE /32 Dst: B(26) A(32) out Lo: /32 CE PE P P PE CE 26 - VPNAA MPLS VPNA:B /8 11

12 BGP/MPLS-VPN(cont.) PE PEBVPN CE Dst: B(26) Lo: /32 26 CE PE P P PE CE VPNAA MPLS VPNA:B /8 BGP/MPLS-VPN(cont.) CE IP CE Dst: Lo: /32 CE PE P P PE CE VPNAA MPLS VPNA:B /8 12

13 BGP/MPLS-VPN PELSPVPN Redistribute(BGP4) Static BGP4 RIP OSPF PE IP mp-bgp VPN Redistribute(BGP4) LSP PELoLSP P P PE Static BGP4 RIP OSPF CE VPNAA MPLS(OSPF) CE VPNA:B BGP/MPLS-VPN PEPOSPF/ISIS (LDP/RSVP-TE) PELoopback VPN Lo: PELoLSP PE P P PE LDP() MPLS(OSPF) Lo:

14 BGP/MPLS-VPN Rd= /24 26 RT=12 NH=PE-B PE-CEVPN PE PE-A mp-bgp (VPN) P P Redistribute PE-B Static VPN-A /24 =26 CE VPNAA MPLS CE VPNA:B BGP/MPLS-VPN VPNmp- BGPPEVPN MPLSPE-P,P-P LDPRSVP-TE 14

15 BGPVPN BGPVPN RFC2858 Multiprotocol extensions for BGP-4 MP_REACH_NLRI(Type Code 14) MP_UNREACH_NLRI(Type Code 15) AFI=1 & SAFI =128 MPLS-labeled VPN-IPv4 address RFC3107 Encoding 15

16 BGPVPN mp-bgp VPN-IPv4 Address Family IPv48byteRoute Distinguisher(RD)12byte VPN-IPv4 Address(12byte) RD(8byte)+IPv4(4byte) RD IPv4 12byte BGPVPN mp-bgp RD(8byte)Format Type 2byte Value 6byte ISPValue Field Format 16

17 Extended Community Extended Community Attribute(Type Code 16) Route Target(RT) VRFBGP RT(Export Targets) PEVRF (Import Targets) VPNAS Extended Community RTVPNv4-prefix VPNRouting Table (Import) VPN-A Routing Table ISP VPN-B Global Routing Table Routing Table VPN-C Routing Table (Export) BGP RD:18084:1(VPN-A) /24 RT:18084:1(Export) /24 RT:18084:1(Export) RD:18084:2(VPN-B) /24 RT:18084:2(Export) /24 RT:18084:2(Export) RD:18084:3(VPN-C) /8 RT:18084:3(Export) 17

18 AS Override VPNAS PE-CE AS /24 AS VPN-A AS BGP-4 VPN-A BGP-4 ISP /24 AS65000 VPN-A BGP/MPLS-VPN AS AS65000ISP AS /24 AS18084 BGP-4 AS VPN-A SOO(Site Of Origin) AS Override AS RTExtend Community /24 CE-A AS65000 CE-B BGP-4 BGP-4 ISPSOO /24 AS65000 From CE-A SOO=65000: /24 AS65000 From CE-B SOO=65000:1 VPN-A BGP/MPLS-VPN AS VPN-A 18

19 VPNQoS VPNQoS VPNQoS JitterdelayVoIP VPN 19

20 VPNQoS MPLS EXP ClassP/PE PE/P EXP0 EXP3 EXP 6 EXP6 EXP3 EXP6 WRED/WFQ WRED:Weighted Random Early Detection WFQ : Weighted Fair Queuing VPNQoS SAA (Service Assurance Agent) POP-POP,END-to-END SNMPQueue SNMPIngress/Egress SNMP 20

21 BGP/MPLS VPN BGP/MPLS-VPN VPN RFC2547bis(draft-ietf-l3vpn-rfc2547bis-03.txt) AS( option ) PE MPLS-VPN ISP-A ASBR ASBR MPLS-VPN ISP-B PE CE VPN-A VPN CE VPN-A 21

22 Option A VRF to VRF :FRSerialVPN RR-A RR-B PE-A1 SP-A PE-ASBR-A 1 logical int per VPN PE-ASBR-B SP-B PE-B1 CE-1 CE-2 PE-A2 Ipv4 VPN routes: IGP/BGP/static CE-3 PE-B2 CE-4 VPN-X VPN-Y Data VPN-X VPN-Y Option B ASBR-A to ASBR-B for ipv4 & vpnv4: PE-A1 RR-A ASBR-A vpv4 SP-A/SP-B: EBGP vpnv4 ASBR-B RR-B PE-B1 SP-A SP-B NH for vpnv4 CE-1 CE-2 PE-A2 ASBRs : next hop self Redistribute connected subnets CE-3 PE-B2 CE-4 VPN-X VPN-Y VPN Label VPN-X VPN-Y Data Label Stack 22

23 Option C PE-A vpv4 SP-A/SP-B: EBGP vpnv4 next hop RR-B PE-A1 ASBR-A ASBR-B PE-B1 SP-A SP-B CE-1 CE-2 PE-A2 IGP/static + LDP EBGP ipv4 + label CE-3 PE-B2 CE-4 VPN-X VPN-Y IGP Label VPN Label Data Label Stack VPN-X VPN-Y Option Option A (VRF to VRF) NNIMPLS TCP/IPToS Option B (ASBR to ASBR) PE-ASBR-ASBR-PEMPLS Option C (RR to RR) Plus Option B 23

24 BGP/MPLS-VPN Cisco PEConfig VPN ip vrf VPN-TEST rd :1 route-target import 18084:1 route-target export 18084:1 VPN Interface Serial1/0/0 ip vrf forwarding VPN-TEST ip address

25 Cisco PEConfig(Cont.) mpbgp(cestatic) router bgp no bgp default ipv4-unicast neighbor remote-as PEPeer! address-family ipv4 vrf VPN-TEST VPN redistribute static no auto-summary no synchronization exit-address-family! address-family vpnv4 route-target neighbor send-community extended! Cisco PEConfig(Cont.) VPNStatic ip route vrf VPN-TEST Serial1/0/ ip route vrf OTHER-VPN Serial1/1/ VPN 25

26 Juniper PE Router Config VPN routing-instance{ VPN-TEST{ instance-type vrf; interface t1-0/3/0.0; route-distinguisher :1; vrf-import VPN-TEST-import; vrf-export VPN-TEST-export; routing-options { static{ route /24 next-hop ; } } } } Juniper PE Router Config (cont.) policy-options { policy-statement VPN-TEST-import { term 1 { from community VPN-TEST-import; then accept; } term 2 { then reject; } } policy-statement VPN-TEST-export { term 1 { from protocol static; then { community add VPN-TEST-export; accept; } } term 2 { from protocol direct; then { community add VPN-TEST-export; accept; } } term 3 { then reject; } } community VPN-TEST-export members target:813:1; community VPN-TEST-import members target:813:1; 26

27 BGP/MPLS-VPN MPLS-VPN Static CE / / /0 CE CE / / /24 VPN A / /0 CE CE Internet / /24 CE PE 27

28 MPLS-VPN / /24 BGP / /0 ISDN BGP /24 VPN A /24 Internet / / = BGP/MPLS-VPN () 28

29 BGP/MPLS-VPN Informational RFCdraft-ietf-l3vpnrfc2547bis-03.txt L3VPN-WGProvider Provisioned Layer3 VPN Cisco MPLSVPNVR Layer2 MPLS-VPN, EoMPLS IP-VPN BGP/MPLS-VPN ISP VPN ISP ISP 1VPN* VPN=20 PEBGP Peer 29

30 BGP/MPLS-VPN Multicast over MPLS-VPN Multicast PIM-SMVPN Multicast Multicast Join request CE PE MPLS-VPN PE Join request CE SV SV Remote Client Multicast Sender BGP/MPLS-VPN Carrier s Carrier IP-VPNISP IPMPLS-VPN CEMPLSCE MPLS-IX CE PE MPLS-VPN ibgp or ebgp PE CE Internet ISP POP-A Or ISP-A ISP POP-B Or ISP-B 30

31 BGP/MPLS-VPN MPLS-VPNTraffic Engineering,Queue VPNTE QoS,CoS(MPLS-Diffserve, Diffservaware-TE)FRR(FastReroute),LSP BGP/MPLS-VPN MPLS-VPNTraffic Engineering, Queue MPLS-VPN Highest Priority CE VPN-A PE Another Priority IP Traffic PE CE VPN-A ToS bit = 5 EXP bit = 5 EXP bit = 5 ToS bit = 5 IP QoS 31

32 Layer2 VPN IP Ether/ATM/Framerelay/SDH : VPW(Wire)S, VPLS BGP/MPLS-VPNVPN Ether Ether CE-SW PE MPLS/IP PE CE-SW 1LAN VPLS(Virtual Private LAN Services) L3VPN BGP/MPLS-VPN BGP/MPLS-VPN BGP/MPLS-VPN BGPVPN BGP/MPLS-VPNQoS BGP/MPLS-VPN BGP/MPLS-VPN BGP/MPLS-VPN 32

橡3-MPLS-VPN.PDF

橡3-MPLS-VPN.PDF MPLS-VPN NTT () MPLS IP IP 1 MPLS-VPN MPLS IP-VPN IP (IP-Sec VPN) MPLS-VPNMPLS (IP-VPN) MPLS-VPN IF ATM HSD (FR IP ) (a)ipsec-vpn ( ) (b)mpls-vpn IP-NW MPLS-VPN VPN 2 MPLS-VPN Cisco