MPLS-VPN NTT () <ikejiri@ntt.ocn.ne.jp> MPLS IP IP 1
MPLS-VPN MPLS IP-VPN IP (IP-Sec VPN) MPLS-VPNMPLS (IP-VPN) MPLS-VPN IF ATM HSD (FR IP ) (a)ipsec-vpn ( ) (b)mpls-vpn IP-NW MPLS-VPN VPN 2
MPLS-VPN Cisco RFC2547(Informational) ISP IP-VPN MPLS(LDP/TDP) VPN BGP(mpBGP:RFC2283) Peer IP-VPN VPN MPLS-VPN VPN IP MPLS-VPN VPN VPN A VPN B IP MPLS-VPN MPLS VPN A VPN A VPN B VPN A VPN A VPN B 10.0.0.xxx 10.0.1.xxx 10.0.1.xxx 10.0.2.xxx 10.0.3.xxx 10.0.2.xxx IP MPLS (IP ) 2 IP IP IP M P L S IP MPLS IP 3
MPLS-VPN (AP) A B VPN MPLS-VPN ( ) (MPLSIP-Sec ) FRATM IP VPN FRATM 4
MPLS-VPN (ISP) IP IP-VPN (Cisco ) VPN1 IP-VPN VPN QoS MPLS-VPN PE Provider Edge Router( MPLS ) P Provider Router(MPLS ) CE Customer Edge Router(PE ) VPN IP CE PE P P PE CE VPNA A MPLS VPNA: B 5
MPLS-VPN PE VPN1 PE VRFs:VPN Routing and Forwarding tables VPN CE VRF(VPN) MPLS-VPN PE Serial1/0/0 ATM2/0/0.1 Ether3/0/0 Serial1/0/1 VPN-A Routing Table VPN-B Routing Table VPN-C Routing Table ISP Global Routing Table Backbone PE 6
MPLS-VPN MPLS-VPN VPN IP PE PE P (LDPhop by hop ) (mpbgppe ) MPLS 2 MPLS-VPN VPN A A Route Dist. VPN PE 12 10.0.0.0/8 26 192.168.0.1/32 42 12 11.0.0.0/8 989 192.168.0.1/32 42 in PEout 42 192.168.0.1/32 32 Lo:192.168.0.1/32 CE PE P P PE CE 26 VPNA A MPLS VPNA: B 10.0.0.0/8 7
MPLS-VPN VPNA B10.0.0.1 Dst:10.0.0.1 Lo:192.168.0.1/32 CE PE P P PE CE 26 VPNA A MPLS VPNA: B 10.0.0.0/8 3.4.3 MPLS-VPN VPN A A Route Dist. VPN PE 12 10.0.0.0/8 26 192.168.0.1/32 42 12 11.0.0.0/8 989 192.168.0.1/32 42 Dst:10.0.0.1 Lo:192.168.0.1/32 CE PE P P PE CE 26 VPNA A MPLS VPNA: B 10.0.0.0/8 8
MPLS-VPN (1)VPNA:10.0.0.0/8 PE BGP next-hop (2) BGP next-hop A PE VPNA10.0.0.0/8 VPN B Dst:10.0.0.1 B(26) A(42) Lo:192.168.0.1/32 CE PE P P PE CE 26 VPNA A MPLS VPNA: B 10.0.0.0/8 MPLS-VPN in PEout 42 192.168.0.1/32 32 Dst:10.0.0.1 B(26) A(42) Lo:192.168.0.1/32 CE PE P P PE CE 26 VPNA A MPLS VPNA: B 10.0.0.0/8 9
MPLS-VPN P A Dst:10.0.0.1 B(26) A(32) Lo:192.168.0.1/32 CE PE P P PE CE 26 VPNA A MPLS VPNA: B 10.0.0.0/8 MPLS-VPN P in PEout 192.168.0.1/32 - Dst:10.0.0.1 B(26) A(32) Lo:192.168.0.1/32 CE PE P P PE CE 26 VPNA A MPLS VPNA: B 10.0.0.0/8 10
MPLS-VPN PE B VPN CE Dst:10.0.0.1 B(26) Lo:192.168.0.1/32 CE PE P P PE CE 26 VPNA A MPLS VPNA: B 10.0.0.0/8 MPLS-VPN IP CE Dst:10.0.0.1 Lo:192.168.0.1/32 CE PE P P PE CE VPNA A MPLS VPNA: B 10.0.0.0/8 11
MPLS-VPN Redistribute(BGP4 ) Redistribute(BGP4 ) Static BGP4 RIP OSPF CE PE mp-bgp(vpn ) (Route ReflectoriBGP ) Static BGP4 RIP P P PE OSPF LDP( ) MPLS (OSPF ) CE VPNA A VPNA: B MPLS-VPN PE P OSPF PE Loopback VPN Lo:192.168.0.1 Lo:192.168.0.2 PE Lo LSP PE P P PE LDP( ) MPLS (OSPF ) 12
MPLS-VPN PE-CE VPN PE Redistribute(BGP4 ) Redistribute(BGP4 ) Static BGP4 RIP OSPF PE mp-bgp (VPN ) Static BGP4 RIP P P PE OSPF CE VPNA A MPLS (OSPF ) CE VPNA: B MPLS-VPN PE LSPVPN Redistribute(BGP4 ) Redistribute(BGP4 ) Static BGP4 RIP OSPF PE mp-bgp LSP VPNIP PE Lo LSP P P PE Static BGP4 RIP OSPF CE VPNA A MPLS (OSPF ) CE VPNA: B 13
BGP VPN IPv6 RFC2283 Multiprotocol extensions for BGP-4 MP_REACH_NLRI(Type Code 14) MP_UNREACH_NLRI(Type Code 15) AFI=1 & SAFI =128 MPLS-labeled VPN-IPv4 address BGP VPN mp-bgp VPN-IPv4 Address Family IPv4 8byte Route Distinguisher(RD) 12byte VPN-IPv4 Address(12byte) RD(8byte)+IPv4(4byte) 14
BGP VPN mp-bgp RD(8byte)Format Type 2byte Value 6byte ISP Value Field Format Extended Community Extended Community Attribute(Type Code 16) Route Target(RT) VRF RT Export Targets:CE Import Targets:PE VPN AS 15
Extended Community BGP RT VPNv4-prefix VPNRouting Table (Import) VPN-A Routing Table ISP VPN-B Global Routing Table Routing Table VPN-C Routing Table RD:9598:1(VPN-A) 10.0.0.0/24 RT:9598:1(Export) 10.0.1.0/24 RT:9598:1(Export) RD:9598:2(VPN-B) 10.0.0.0/24 RT:9598:2(Export) 10.0.1.0/24 RT:9598:2(Export) RD:9598:3(VPN-C) 10.0.0.0/8 RT:9598:3(Export) MPLS-VPN PE Config VPN ip vrf VPN-TEST rd 9598:1 route-target import 9598:1 route-target export 9598:1 VPN Interface Serial1/0/0 ip vrf forwarding VPN-TEST ip address 10.0.0.1 255.255.255.252 16
MPLS-VPN PE Config mpbgp (CE Static) router bgp 9598 no bgp default ipv4-unicast neighbor 192.168.0.1 remote-as 9598 PE Peer! address-family ipv4 vrf VPN-TEST VPN redistribute static no auto-summary no synchronization exit-address-family! address-family vpnv4 route-target neighbor 192.168.0.1 send-community extended! MPLS-VPN PE Config VPNStatic ip route vrf VPN-TEST 10.0.0.0 255.0.0.0 Serial1/0/0 10.0.0.2 ip route vrf OTHER-VPN 10.0.0.0 255.0.0.0 Serial1/1/0 10.0.0.2 VPN 17
MPLS-VPN MPLS-VPN (Informational) VPN 1VPN*1000 200VPN=20 PE BGP Peer ibgp MPLS-VPN MPLS-VPN Inter-mpls-vpn MPLS-VPNeBGP Carrier s Carrier ISP MPLS-VPN IP MPLS-VPN MPLS-VPNTraffic Engineering VPN TE Qos(Diffserve) FRR 18
MPLS MPLS MPLS MPLS MPLS MPLS QoS (Traffic Engineering ) MPLS IP-VPN MPLS MPLS draft-ietf-mpls-arch-07.txt IETF MPLS draft-ietf-mpls-label-encaps-08.txt IETF 19
MPLS MPLS Cisco TDP(Tag Distribution Protocol) LDP(Label Distribution Protocol) draft-ietf-mpls-ldp-11.txt MPLS MPLS QoS (Traffic Engineering ) RSVP-Extension draft-ietf-mpls-rsvp-lsp-tunnel-05.txt CR(Constraint-Routing)-LDP draft-ietf-mpls-cr-ldp-04.txt RSVP-Extension 20
MPLS MPLS IP-VPN Cisco MPLS-VPNNortel VR(Virtual Router)CR-LDP RFC (Informational:MPLS-VPN) RFC (Informational:VR ) 7 IETF Network Based VPNsBOF WG MPLS-VPN Static CE 10.2.1.0/24 10.2.2.0/24 0.0.0.0/0 CE CE 0.0.0.0/0 10.2.1.0/24 10.2.2.0/24 VPN A 0.0.0.0/0 0.0.0.0/0 CE CE Internet 10.1.1.0/24 192.1.0.0/24 CE PE 21
10.2.1.0/24 10.2.2.0/24 MPLS-VPN BGP 0.0.0.0/0 0.0.0.0/0 ISDN BGP Internet 10.2.1.0/24 10.1.1.0/24 VPN 192.1.0.0/24 A 10.2.1.0 0.0.0.0 10.2.2.0 10.2.2.0/24 10.2.1.0 = IP-VPN 22