28.06.2014 Views

Discussion

Discussion

Discussion

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

The third and final step is to configure the VPN itself. You do this by creating a routing<br />

instance for the VPN. The following commands configure the routing instance on<br />

RouterG:<br />

[edit routing-instances VPN2]<br />

aviva@RouterG# set instance-type vrf<br />

aviva@RouterG# set interface se-5/0/1<br />

aviva@RouterG# set route-distinguisher 65500:2<br />

aviva@RouterG# set vrf-target target:65520:100<br />

aviva@RouterG# set routing-options static route 192.168.13.1/32 next-hop se-5/0/1<br />

<strong>Discussion</strong><br />

This recipe shows how to configure a simple Layer 3 VPN for the network topology<br />

shown in Figure 15-1. In this network, a service provider connects two customer<br />

sites, Site A and Site B, with a VPN. The service provider network consists of two PE<br />

routers, RouterG and RouterF, and one internal router (the P router), RouterJ. At<br />

Site A, RouterG connects to the customer’s CE router, RouterA. At Site B, RouterF<br />

connects to the customer’s CE router, RouterD.<br />

RouterA<br />

192.168.13.1<br />

se-5/0/1<br />

10.0.16.2<br />

RouterG<br />

192.168.19.1<br />

CE Router<br />

VPN2, Site A<br />

se-0/0/3<br />

10.0.16.1<br />

PE Router<br />

Site A<br />

t1-4/0/0<br />

10.0.0.1<br />

t1-5/0/0<br />

10.0.0.2<br />

P Router<br />

fe-1/0/1<br />

10.0.8.1<br />

RouterJ<br />

192.168.17.1<br />

RouterF<br />

192.168.16.1<br />

t1-0/0/3<br />

10.0.31.1<br />

RouterD<br />

192.168.14.1<br />

fe-0/0/1<br />

10.0.8.2<br />

PE Router<br />

Site B<br />

t1-0/0/3<br />

10.0.31.2<br />

CE Router<br />

VPN2, Site B<br />

Figure 15-1. Simple Layer 3 VPN topology<br />

Let’s start by looking at what the service provider needs to do to support the customer’s<br />

VPN. For the VPN to work, you first need to configure basic routing and signaling<br />

protocols within the service provider network. An IGP must be running on the<br />

network. This recipe uses OSPF, but you can also use IS-IS (see Recipe 11.1) or RIP<br />

(see Recipe 10.1). Use the show ospf interface, show ospf neighbor, and show route<br />

table inet.0 commands to make sure that the OSPF configuration in this recipe is<br />

working as expected.<br />

Setting Up a Simple Layer 3 VPN | 557<br />

This is the Title of the Book, eMatter Edition<br />

Copyright © 2008 O’Reilly & Associates, Inc. All rights reserved.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!