Welcome
Network Infrastructure
- CEF Table(FIB) and Routing Table
- Switched campus
  - Switch administration (MAC, MTU, Errdisable)
  - Layer 2 protocols (CDP, LLDP, UDLD)
  - VLAN technologies
  - EtherChannel
  - Spanning Tree Protocol
- Routing Concepts
  - Administrative distance
  - VRF-lite
  - Static routing
  - Policy Based Routing
  - Route filtering
  - Manual summarization
  - Redistribution
  - Routing protocol authentication
  - Bidirectional Forwarding Detection
- EIGRP
  - Concept
  - Legacy conf mode
  - Named conf mode
- OSPF
  - Concept
  - Version 2
  - Version 3
- BGP
  - Concept
  - Path selection
  - Configuration
- Multicast
  - Layer 2 multicast
  - Reverse path forwarding check
  - PIM
Transport Technologies and Solutions
- MPLS
  - MPLS Concept
  - MPLS Layer 3 VPN
- DMVPN Concept and conf
Infrastructure Security and Services
- Device Security
  - Control plane policing and protection
  - AAA
- Network Security
  - Switch security features
    - VACL, PACL
    - Storm control
    - DHCP Snooping, DHCP option 82
    - IP Source Guard
    - Dynamic ARP Inspection
    - Port Security
    - Private VLAN
  - Router security features
    - IPv4 Access Control Lists
    - IPv6 Traffic Filters
    - Unicast Reverse Path Forwarding
    - Unicast reverse path forwardin uRPF
  - IPv6 First Hop security features
  - IEEE 802.1X Port-Based Authentication
- System Management
  - Device management
    - Console and VTY
    - SSH, SCP
    - RESTCONF, NETCONF
  - SNMP
  - Logging
- Quality of Service
  - DiffServ
  - CoS and DSCP Mapping
  - Classification
  - Network Based Application Recognition (NBAR)
  - Policing, shaping
  - Congestion management and avoidance
- Network Services
  - First Hop Redundancy Protocols
    - HSRP
    - GLBP, VRRP
    - Redundancy using IPv6 RS/RA
  - Network Time Protocol
  - DHCP on Cisco IOS
    - Client, server, relay
    - Options
    - SLAAC/DHCPv6 interaction
    - Stateful, stateless DHCPv6
    - DHCPv6 Prefix Delegation
  - IPv4 Network Address Translation
    - Static NAT, PAT
    - Dynamic NAT, PAT
    - Policy-based NAT, PAT
    - VRF-aware NAT, PAT
    - DHCPv6 Prefix Delegation
- Network optimization
  - IP SLA
  - Tracking object
  - Flexible NetFlow
- Network operations
  - Traffic capture
    - SPAN
    - RSPAN
    - ERSPAN
    - Embedded Packet Capture
Cisco Firepower
- FTD Notes

MPLS Layer 3 VPN

Published

October 18, 2023

MPLS Layer 3 VPN

Provider requirement: Routing protocol PE-CE Routing internal provider VRFs iBGP between PE (Route reflector for big network) MPLS

Customer requirement: Routing protocol PE-CE

Route distinguisher: It’s purpose is to uniquely identify prefix on a single router. Each time a route is learn in a VRF, it will be pretended by the RD so that it can differentiate an identical prefix between VRF.

Route target: is an extended BGP community that is associate with a particular VRF. Route target can be Import or export via MP-BGP

###Work only with IPv4
ip vrf GUEST

###Work with IPv4 and IPv6
###PE router
vrf definition GUEST_01
rd 111:222
address-family ipv4
route-target export 111:222
route-target import 333:444

interface gig0/0
vrf forwarding GUEST_01

MPLS Layer 3 VPN implmentation

1.On the P network configure routing and MPLs to that the PE can all reach themself. 2.Create VRF for customer on PE router and assign interface to it. 3.Configure dynamic routing protocol between CE and PE in the customer VRF(any IGP work). 4.On PE router, configure IBGP neighbor with the following parameter for the : -Next-hop-self -update-source loopbak X -use vpnv4 with the neighbors -activate extended community 5.Redistribute the IGP protocol from the customer VRF into BGP. 6.Configure the route-target import/export on the VRF on the PE. 7.Redistribute the BGP route into the IGP.

show ip bgp vpnv4 all
show bgp vpnv4 unicast rd 111:222
show bgp vpnv4 unicast vrf GUEST_01
show bgp vpnv4 unicast vrf GUEST_01 labels

Source packetlife.net