Page 1 H3C S9500 Series Routing Switches Operation Manual Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Manual Version: T2-08165E-20081225-C-1.24 Product Version: S9500-CMW310-R1648...
Page 2 Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Page 3 About This Manual Organization H3C S9500 Series Routing Switches Configuration Manual is organized as follows: Part Contents includes Obtaining Documentation, Product 00 Product Overview Features, and Features. includes Ethernet Port Configuration, Port Configuration, Link Aggregation Configuration, Port Isolation Configuration, VLAN Configuration, MAC...
Page 4 Part Contents includes Command Line Interface Configuration, Login and User Interface Configuration, FTP and TFTP Configuration, HA Configuration, NQA Configuration, NetStream Configuration, NTP Configuration, RMON Configuration, SNMP Configuration, Packet Statistics Accounting Configuration, Device Management 08 System Volume Configuration, Configuration File Management Configuration, File System Management Configuration, Cluster...
Page 5 Caution data loss or damage to equipment. Note Means a complementary description. Related Documentation In addition to this manual, each H3C S9500 Series Routing Switches documentation set includes the following: Manual Description It introduces the installation procedure, H3C S9500 Series Routing Switches...
Page 6 [Technical Support & Document > Product Support > Software]: Provides the documentation released with the software version. Documentation Feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.
Page 7: Manual Version
Operation Manual H3C S9500 Series Routing Switches MPLS VPN Volume Organization Manual Version T2-08165E-20081225-C-1.24 Product Version S9500-CMW310-R1648 Organization The MPLS VPN Volume is organized as follows: Features (operation Description manual) MPLS (Multiprotocol Label Switching) brings together the advantages of the connectionless control with IP and the connection-oriented forwarding with ATM.
Page 8 Operation Manual H3C S9500 Series Routing Switches MPLS VPN Volume Organization Features (operation Description manual) The MPLS hybrid insertion feature is used to enable deployment of MPLS VPN services on cards that do not support MPLS. The volume describes: MPLS Hybrid...
Page 9: Table Of Contents
Operation Manual – MPLS H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS Architecture....................... 1-1 1.1 MPLS Overview ......................... 1-1 1.2 MPLS Basic Concepts ....................... 1-2 1.2.1 FEC ......................... 1-2 1.2.2 Label........................1-2 1.2.3 LDP ......................... 1-5 1.3 MPLS Architecture ......................
Page 10: Chapter 1 Mpls Architecture
MPLS Architecture Note: The H3C S9500 Series Routing Switches (hereinafter referred to as S9500 series) running MPLS can serve as routers. Routers mentioned in this manual can be either a router in common sense, or a layer 3 Ethernet switch running MPLS.
Page 11: Mpls Basic Concepts
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture 1.2 MPLS Basic Concepts 1.2.1 FEC Forwarding Equivalence Class (FEC) is an important concept in MPLS. MPLS is actually a kind of classify-and-forward technology. It categorizes packets with the same forwarding strategy (same destination addresses, same forwarding routes and same QoS levels) into one class, which is called a FEC.
Page 12 Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture results into the label information base (LIB). In simple words, label mapping is to assign a label to a FEC. The second type is also called incoming label mapping (ILM), that is, to map each input label to a series of next hop label forwarding entries (NHLFE).
Page 13 Upstream and downstream are just on a relative basis: For a packet forwarding process, the transmit router serves as upstream LSR and receive router serves as downstream LSR. Currently, the S9500 series adopt the DU label distribution mode. Label assignment control mode There are two modes to control the assignment and distribution of labels: independent mode and ordered mode.
Page 14: Ldp
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture 1.2.3 LDP Label distribution protocol (LDP) is the signaling control protocol in MPLS, which controls binding labels and FECs between LSRs and coordinates a series of procedures between LSRs.
Page 15: Establishing Lsp
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture On the LSR along the LSP, the mapping table of the import/export labels has been established (the element of this table is referred to as Next Hop Label Forwarding Entry (NHLFE)).
Page 16 Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture Figure 1-4 Label distribution process For the label distribution mentioned previously, there are two modes: DoD and DU. The main difference between these two modes is that the label mapping messages are distributed actively or passively.
Page 17: Lsp Tunnel And Hierarchy
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture When the value exceeds the threshold value, it is considered that a loop presents, and the process for establishing LSP is terminated. The path vector method refers to that the path information is recorded in the message bound with the forwarding label, and, for every hop, the corresponding router checks if its ID is contained in this record.
Page 18: Mpls And Other Protocols (Routing Protocols)
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture The labels are organized according to the principle of “last in first out” in the label stack, and MPLS processes the labels beginning from the top of the stack.
Page 19 Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 1 MPLS Architecture the management of VPN customers, establishing LSP connection between various PEs, route allocation among different branches of the same VPN customer. Usually the route allocation between PEs is implemented by using extended BGP.
Page 20: Chapter 2 Mpls Basic Capability Configuration
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration Chapter 2 MPLS Basic Capability Configuration This chapter covers the following topics: MPLS Basic Capability Overview MPLS Configuration LDP Configuration Displaying and Debugging MPLS Basic Capability...
Page 21: Defining Mpls Lsr Id
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration The following sections describe the optional configuration tasks for MPLS basic capability: Configuring the Topology-Driven LSP Setup Policy Configuring an LSP Setup Policy Configuring Static LSP 2.2.1 Defining MPLS LSR ID...
Page 22: Configuring An Lsp Setup Policy
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration To do... Use the command... Configure the topology-Driven LSP lsp-trigger { all | ip-prefix ip-prefix } setup policy Use the default value, which only allows...
Page 23: Ldp Configuration
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration Perform the following configuration in MPLS view to set the local LSR to a node on a specified LSP: To do... Use the command... static-lsp ingress lsp-name...
Page 24: Enabling Ldp On A Vlan Interface
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration To do... Use the command... Enable LDP protocol mpls ldp Disable LDP undo mpls ldp By default, LDP is disabled. 2.3.2 Enabling LDP on a VLAN interface To make the VLAN interface support LDP, you must enable LDP function on the interface in VLAN interface mode.
Page 25: Configuring Session Parameters
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration II. Configuring an address for the Remote-peer You can specify the address of any LDP-enabled interface on the Remote-peer or the address of the Loopback interface on the LSR that has advertised the route as the address of the Remote-peer.
Page 26 Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration To do... Use the command... mpls ldp timer { session-hold Configure session hold-time session-holdtime | hello hello-holdtime } Return to the default value undo mpls ldp timer { session-hold | hello } By default, the session-holdtime is 60 seconds and hello-holdtime is 15 seconds.
Page 27: Configuring Ldp Loop Detection Control
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration Caution: The interface with borrowed address is used on the LSR. You cannot use this interface address to set up the LDP session. You are recommended to use the LSR-ID instead.
Page 28: Configuring Ldp Authentication Mode Between Every Two Switches
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration II. Setting the maximum hop count for loop detection When maximum hop count mode is adopted for loop detection, the maximum hop-count value can be defined. And if the maximum value is exceeded, it is considered that a loop happens and the LSP establishment fails.
Page 29: Displaying And Debugging Mpls Basic Capability
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration Caution: There can be only one LDP session between any two devices. If you configure both a basic session and a remote session on a device, you need to configure the same authentication password for the two sessions.
Page 30: Displaying And Debugging Ldp
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration V. Debugging MPLS To do... Use the command... Remarks debugging mpls lspm { agent | all | Enable debugging for Available in user event | ftn | interface | packet | policy...
Page 31: Typical Mpls Configuration Example
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration To do... Use the command... Remarks Display states and display mpls ldp parameters of LDP Available in any view session sessions II. LDP debugging commands To do...
Page 32 Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration II. Network diagram Sw itchD V LA N2 01 Sw itchB V L AN 20 3 S wi tch A 16 8 .1 .1.2 16 8 .1 .1.2 1 72 .1 7.1 .1...
Page 33 Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration [H3C] vlan 201 [H3C-vlan201] port gigabitethernet 2/1/1 [H3C-vlan201] quit [H3C] interface vlan-interface 201 [H3C-Vlan-interface201] ip address 168.1.1.2 255.255.0.0 [H3C-Vlan-interface201] mpls [H3C-Vlan-interface201] mpls ldp enable [H3C-Vlan-interface201] mpls ldp transport-ip interface # Configure IP address and enable MPLS and LDP for VLAN interface 203.
Page 34: Troubleshooting Mpls Configuration
Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration [H3C-mpls] quit [H3C] mpls ldp # Configure IP address and enable LDP and MPLS for VLAN interface 202. [H3C] vlan 202 [H3C-vlan202] port gigabitethernet 2/1/1...
Page 35 Operation Manual – MPLS H3C S9500 Series Routing Switches Chapter 2 MPLS Basic Capability Configuration Cause 1: Loop detection configuration is different at the two ends. Solution: Check loop detection configuration at both ends to see if one end is configured while the other end is not (this will result in session negotiation failure).
Page 36 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS VLL ........................1-1 1.1 MPLS VLL Overview......................1-2 1.1.1 Concepts in MPLS VLL ................... 1-2 1.1.2 Introduction to MPLS VLL ..................1-2 1.1.3 Packet Forwarding ....................
Page 37: Chapter 1 Mpls Vll
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL Chapter 1 MPLS VLL When configuring MPLS VLL, go to these sections for information you are interested in: MPLS VLL Overview CCC MPLS VLL Configuration Martini MPLS VLL Configuration...
Page 38: Mpls Vll Overview
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL 1.1 MPLS VLL Overview 1.1.1 Concepts in MPLS VLL MPLS Virtual Leased Line (MPLS VLL) provides transparently transmission of Layer 2 data of users over an MPLS network. From the users’ perspective, this MPLS network is a Layer switched network through which Layer 2 connections can be set up between different sites.
Page 39: Packet Forwarding
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL Tunnel label Tunnel label VC label VC label Tunnel label Tunnel label VC label VC label L2 PDU L2 PDU L2 PDU L2 PDU Label Stack...
Page 40: Implementation
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL 1.1.4 Implementation At present, the official standard for MPLS VLL has not been established yet. However, the PPVPN (Provider-provisioned Virtual Private Network) group of IETF (Internet Engineering Task Force) defines multiple framework drafts, two of which are commonly used.
Page 41 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL VPN type Implementation Feature Uses extended LDP as the signaling to transmit the VC information. Uses VC-TYPE and VC-ID to Local switching like CCC is not identify VCs.
Page 42: Ccc Mpls Vll Configuration
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL Caution: MPLS VLL does not support NDP transparent transmission. It is not recommended to bind VLLs on the default VLAN interface. Martini VLL and Kompella VLL modes support multiport access mode, while CCC does not support this.
Page 43 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL To do... Use the command... Remarks Required. Two types of CCC connections exist: local CCC connection and ccc ccc-connection-name remote CCC connection. Establish local CCC interface vlan-interface...
Page 44: Ccc Mpls Vll Configuration Example (1)
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL 1.2.2 CCC MPLS VLL Configuration Example (1) I. Network requirements CEs and the corresponding PEs shown in Figure 1-5 are interconnected through their GigabitEthernet ports. Data is encapsulated as Ethernet packets at the data link layer. A local connection is required between CE-A and CE-B, and a remote connection between CE-A and CE-C.
Page 45 # Configure a static LSP, with the out-label of 100 and the egress interface being the interface of VLAN 214. [H3C] mpls [H3C-mpls] static-lsp ingress PEA-PEB l2vpn nexthop 5.5.5.2 out-label 100 # Configure a static LSP, with the in-label of 211 and the ingress interface being the interface of VLAN 214.
Page 46 # Configure a static LSP, with the out-label of 200 and the egress interface being the interface of VLAN 212. [H3C-mpls] static-lsp ingress PEB-PEA l2vpn nexthop 6.6.6.2 out-label 200 # Configure a static LSP, with the in-label of 101 and the ingress interface being the interface of VLAN 212.
Page 47: Ccc Mpls Vll Configuration Example (2)
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL [H3C-mpls] static-lsp transit PEB-PEA l2vpn incoming-interface vlan-interface 212 in-label 200 nexthop 5.5.5.1 out-label 211 Caution: Following must be met to make a local CCC connection to go up: The interfaces of the two CE are physically up.
Page 48 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL III. Configuration procedure Configure PE-A # Configure the LSR-ID. Enable MPLS and MPLS L2VPN. <PE-A> system-view [PE-A] mpls lsr-id 1.1.1.1 [PE-A] mpls [PE-A] mpls l2vpn # Create public network VLAN 12, configure a VLAN interface, and then enable MPLS for the VLAN interface.
Page 49: Martini Mpls Vll Configuration
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL <P> system-view [P-mpls] static-lsp transit P l2vpn incoming-interface Vlan-interface34 in-label 843 nexthop 192.168.14.1 out-label 814 1.3 Martini MPLS VLL Configuration 1.3.1 Configuring Martini MPLS VLL Follow these steps to configure Martini MPLS VLL: To do...
Page 50 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL To do... Use the command... Remarks Required To configure a Martini MPLS mpls l2vc ip-address VLL in VLAN interface view vc-id on a PE, you need to provide...
Page 51 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL To do... Use the command... Remarks display mpls l2vc [ interface { GigabitEthernet interface-number [ vlan vlan-id ] | Display the information vlan-interface Optional about Martini MPLS VLL...
Page 52: Martini Mpls Vll Configuration Example
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL configuration or an aggregation port. Other configurations, such other VLL connections, IGMP, and IGMP snooping, cannot be made on the specified VLAN interface; otherwise these configurations will not work normally. To allow normal operation of other services configured on the VLAN interface, you need to remove the Martini VLL configuration made on the port.
Page 53 [H3C-A] mpls ldp remote-peer 1 [H3C-A-remote-peer-1] remote-ip 192.1.1.2 # Configure a Martini MPLS VLL connection. [H3C-A] interface vlan-interface 212 [H3C-A-Vlan-interface212] mpls l2vc 192.1.1.2 20 encapsulation ethernet Configure PE-B. # Configure the LSR-ID. Enable MPLS, MPLS LDP, and MPLS VLL. [H3C-B] mpls lsr-id 192.1.1.2...
Page 54 [H3C-B] mpls ldp remote-peer 1 [H3C-B-mpls-remote1] remote-ip 192.1.1.1 # Configure a Martini MPLS VLL connection. [H3C-B] interface vlan-interface 212 [H3C-B-Vlan-interface212] mpls l2vc 192.1.1.1 20 encapsulation ethernet Configure P. # Configure the LSR-ID. Enable MPLS, and LDP. [H3C-P] mpls lsr-id 192.1.1.3...
Page 55: Martini Mpls Vll Primary/Backup Pw Configuration Example
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL [H3C-P-Vlan-interface21] ip address 168.1.1.2 255.255.0.0 [H3C-P-Vlan-interface21] quit [H3C-P] vlan 22 [H3C-P-vlan22 port gigabitethernet 2/1/2 [H3C-P-vlan22] quit [H3C-P] interface Vlan-interface 22 [H3C-P-Vlan-interface22] mpls [H3C-P-Vlan-interface22] mpls ldp enable [H3C-P-Vlan-interface22] ip address 169.1.1.2 255.255.0.0...
Page 56 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL In system view, enable the primary connection auto-restore function. II. Network diagram P E 1 P E 3 CE 1 1 .1 .1.1 CE 3 3.3 .3 .3...
Page 57 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL [PE1-mpls] static-lsp egress 2to1 incoming-interface Vlan-interface10 in-label 3 # Configure the peer relationship with PE2 so that the LDP remote session can be established between them.
Page 58 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL [PE2] mpls [PE2-mpls]static-lsp ingress pe2-pe3 destination 3.3.3.3 nexthop 50.50.50.1 out-label 50 [PE2-mpls]static-lsp egress pe3-pe2 incoming-interface Vlan-interface50 in-label 180 [PE2-mpls]static-lsp ingress 2to1 destination 1.1.1.1 32 nexthop 10.10.10.1...
Page 59 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL [PE3-Vlan-interface70] interface g5/1/1 [PE3-GigabitEthernet5/1/1] port link-type trunk [PE3-GigabitEthernet5/1/1] port trunk permit vlan 70 # Create a static LSP from PE3 to PE2. [PE3]mpls [PE3-mpls]static-lsp egress pe2-pe3...
Page 60 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL [P-GigabitEthernet 4/1/18]q [P]vlan 50 [P-vlan50] interface vlan 50 [P-Vlan-interface50] ip address 50.50.50.1 255.255.255.0 [P-Vlan-interface50] mpls [P-Vlan-interface50] interface g4/1/17 [P-GigabitEthernet 4/1/17] port link-type trunk [P-GigabitEthernet 4/1/17] port trunk permit vlan 50 # Configure a transit LSP from PE2 to PE3 and a transit LSP from PE3 to PE2 on the P device.
Page 61: Kompella Mpls Vll Configuration
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL [PE2-Vlan-interface101] quit # Restore the Martini MPLS VLL virtual connection to primary globally. [PE2] mpls l2vc manual-restore # In system view, enable the primary connection auto-restore function for Martini MPLS VLL virtual connections.
Page 62 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL To do... Use the command... Remarks Required By default, only the peers of BGP peer { group-name | IPv4 unicast address families are Activate the peer or peer-address } active.
Page 63 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL To do... Use the command... Remarks ce name [ id id Required Create a CE or modify [ range range ] Each CE created on a PE needs...
Page 64: Kompella Mpls Vll Configuration Example (1)
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL Caution: You can only change the CE range to a number larger than the existing one. For example, you can change a CE range from 10 to 20, rather than from 10 to 5. The only way to change a CE range to a smaller number is to remove the CE and create a new one.
Page 65 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL II. Network diagram V L AN 21 2 V LA N2 1 V L AN 22 V LA N2 1 2 CE A P E A...
Page 66 [H3C] mpls l2vpn vpn1 encapsulation ethernet [H3C-mpls-l2vpn-vpn1] route-distinguisher 100:1 [H3C-mpls-l2vpn-vpn1] vpn-target 100:1 # Create CE1 and configure the corresponding connection. [H3C-mpls-l2vpn-vpn1] ce ce1 id 1 range 200 [H3C-mpls-l2vpn-vpn1-ce1] connection ce-offset 2 interface vlan-interface 212 [H3C-mpls-l2vpn-vpn1-ce1] quit # Enable OSPF. [H3C] ospf 1 router-id 1.1.1.1 [H3C-ospf-1] area 0.0.0.0...
Page 67: Kompella Mpls Vll Configuration Example (2)
[H3C] mpls l2vpn vpn1 encapsulation ethernet [H3C-mpls-l2vpn-vpn1] route-distinguisher 100:1 [H3C-mpls-l2vpn-vpn1] vpn-target 100:1 # Create CE2 and configure the corresponding connection. [H3C-mpls-l2vpn-vpn1] ce ce2 id 2 range 200 [H3C-mpls-l2vpn-vpn1-ce2] connection ce-offset 1 interface vlan-interface 212 [H3C-mpls-l2vpn-vpn1-ce2] quit # Enable OSPF. [H3C] ospf 1 router-id 3.3.3.3 [H3C -ospf-1] area 0.0.0.0...
Page 68 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL II. Network diagram Figure 1-10 Network diagram for Kompella MPLS VLL (2) III. Configuration procedure Configure PE-A. # Configure LSR ID and enable MPLS and LDP.
Page 69 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL [PE-A-ospf-1-area-0.0.0.0] quit # Enable BGP and configure the BGP peer relationship with PE-B and PE-C, using the loopback interface as the source interface. [PE-A] bgp 100 [PE-A-bgp] group ibgp internal [PE-A-bgp] peer 1.1.1.2 group ibgp...
Page 70: Displaying And Debugging Mpls Vll
Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL Configure a Loopback interface. Its IP address is used as the Router-ID. Enable OSPF and advertise the routes of the interfaces. 1.5 Displaying and Debugging MPLS VLL To do...
Page 71 Operation Manual – MPLS VLL H3C S9500 Series Routing Switches Chapter 1 MPLS VLL VC state being down indicates the encapsulation types or VC IDs of the two ends are not the same. Make sure the interface types (Access or Trunk) of the two PE interfaces and the VC IDs of the two ends are consistent.
Page 72 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 VPLS Configuration..................... 1-1 1.1 VPLS Overview........................1-2 1.1.1 Introduction to VPLS ....................1-2 1.1.2 Basic VPLS Network Architectures ................. 1-2 1.1.3 VPLS Basic Transmission Components ..............1-5 1.2 VPLS Basic Configuration ....................
Page 73: Chapter 1 Vpls Configuration
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Chapter 1 VPLS Configuration When configuring VPLS, go to these sections for information you are interested in: VPLS Overview VPLS Basic Configuration Displaying and Debugging VPLS...
Page 74: Vpls Overview
With VPLS, users in different areas can be connected with each other through MAN/WAN just like they are in one LAN. S9500 series provide a VPLS solution. This solution uses MPLS-based virtual links as the links of Ethernet bridges and provides transparent transmission LAN services (TLS) over MPLS networks.
Page 75 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Figure 1-1 Network diagram for PW logically meshed VPLS network As shown in Figure 1-1, VPLS can provide point-to-multipoint connection service like a L3VPN. It can learn MAC addresses and exchange packets between multiple sites. In addition, it keeps the forwarding tables of the individual VPNs independent with each other and allows MAC address overlap between VPNs.
Page 76 MPLS edge network connected by LSP, or a simple Ethernet network for VLAN-VPN user access. The S9500 series routing switches support hierarchical VPLS (H-VPLS) networking. In a hierarchical VPLS network, the UPE and NPE devices can be interconnected through an MPLS edge network (by LSP connections) or through a simple Ethernet switched network (VLAN-VPN access) to provide link redundancy.
Page 77: Vpls Basic Transmission Components
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration In the case of access through VLAN-VPN, MSTP needs to run between the UPE and NPE links. The two NPE devices connected with the UPE device only transparently transmit BPDUs between each other.
Page 78 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration An attachment circuit (AC) is a virtual connection link between CE and PE. User’s Layer 2 and layer 3 data are transmitted to the peer site through AC without any modification.
Page 79: Vpls Basic Configuration
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration 1.2 VPLS Basic Configuration 1.2.1 VPLS Configuration Task List To do... Use the command... Remarks Refer to the related sections in Configure routing protocol Operation Manual – Routing...
Page 80: Configuring Routing Protocols
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Caution: L2VPN VPLS does not support NDP transparent transmission. 1.2.2 Configuring Routing Protocols You must perform some basic routing configuration on your switch such that it can exchange routing information with other P and PE devices.
Page 81: Enabling L2Vpn
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration 1.2.5 Enabling L2VPN Enable L2VPN globally before you configure VPLS and VLL; otherwise you cannot configure VPLS and VLL. Perform the following configuration in system view to enable L2VPN: To do...
Page 82: Configuring Vlan For User Access And Binding A Vlps Instance
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Perform the following configuration in VSI-LDP view to configure a VPLS instance: To do... Use the command... Specify a ID for the current VSI vsi-id vsi-id III.
Page 83: Configuring Static Mac Address
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration with that of the VLAN bound with the Trunk. If convergence UPE makes H-VPLS access by LSP, you can bind a VPLS instance to a VLAN containing no port.
Page 84: Enabling Vlan Vpn On A Port
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration To do... Use the command... Batch delete the MAC undo mac-address vsi [ vsi-name [ peer { peer-ip | addresses of VPLS dual-npe } | vlan-interface vlan-id ] ] [ static |...
Page 85: Configuring User-Defined Flow Template
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Caution: If GARP VLAN registration protocol (GVRP), spanning tree protocol (STP) or 802.1x protocol is enabled on a port, VLAN VPN on this port is not allowed to enable.
Page 86: Configuring Mpls Redirection
In an ACL rule that defines a VPLS label range, the rang-id argument refers to the VPLS label range ID. On an S9500 series switch, the entire VPLS supported label range is divided into 8 label ranges with equal space. These 8 ranges correspond to range IDs 0 through 7.
Page 87: Configuring Vpls Load Sharing
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Note: In the redirection command, the slotid specifies a VPLS service processing card, and vlanid specifies the VLAN ID that interfaces with the MPLS network. After you configure packet redirection, the ports of the public network add to the VLAN (specified join-vlan).
Page 88 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration rate limitation to be 200, then the actual is 192, three times of 64. The actually supported rate limitation ranges from 64 kbps to 2,097,152 kbps (included), and if the value you set is above 2,097,152 kbps, no rate limitation is performed.
Page 89: Displaying And Debugging Vpls
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration you can either use the CoS mapping table suggested by the protocol, or define user priority for PSN CoS mapping. Perform the following configuration in VSI view to configure the CoS level: To do...
Page 90: Vpls Configuration Examples
If this is not avoidable, be sure to use the secondary port of the RRPP master node as the VPLS private network port. I. Network requirements S9500 series switch support all kinds of VPLS architectures and networking. Figure 1-4 shows a simple back-to-back network diagram. Where, two sites of VPN1 connect to...
Page 91 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration port E6/1/48 of the two PEs (PE1 and PE2) respectively. Both PEs are configured with the private VLAN 100 and public VLAN 10 connected through G4/1/1 to implement basic VPLS service.
Page 92 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE1-vlan-interface10] ip address 10.10.10.10 24 [PE1-vlan-interface10] mpls [PE1-vlan-interface10] mpls ldp enable # Configure OSPF to set up routes. [PE1] ospf [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] network 5.6.7.8 0.0.0.0 [PE1-ospf-1-area-0.0.0.0] network 10.10.10.10 0.0.0.255...
Page 93 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration # Define user flow template in port view and configure redirection rule to redirect VPLS packets back from the public network to the VPLS service processor card and specify the VLAN ID of the redirection flow.
Page 94 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE2] ospf [PE2-ospf-1] area 0 [PE2-ospf-1-area-0.0.0.0] network 1.2.3.4 0.0.0.0 [PE2-ospf-1-area-0.0.0.0] network 10.10.10.11 0.0.0.255 [PE2-ospf-1-area-0.0.0.0] quit [PE2-ospf-1] import-route direct [PE2-ospf-1] quit # Configure a LDP remote peer (PE1) to set up LDP session.
Page 95: Vpls Basic Configuration Example (2)
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE2-GigabitEthernet4/1/1] traffic-redirect inbound link-group 4000 rule 0 slot 5 10 join vlan Note that, if a common interface card whose model is suffixed with “B” is seated in slot...
Page 96 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE-A] mpls [PE-A] mpls ldp [PE-A] mpls l2vpn # Create public network VLAN 12, configure the VLAN interface, and then enable MPLS and MPLS LDP for the VLAN interface.
Page 97: Hierarchical Vpls Configuration Example (Via Mpls)
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE-A] vsi vpls100 static [PE-A-vsi-vpls100] pwsignal ldp [PE-A-vsi-vpls100-ldp] vsi-id 100 [PE-A-vsi-vpls100-ldp] peer 1.1.1.2 encapsulation ethernet [PE-A-vsi-vpls100-ldp] peer 1.1.1.3 encapsulation vlan [PE-A-vsi-vpls100-ldp] quit # Bind the VPLS instance to the private VLAN.
Page 98 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration As an access device on the user side, UPE provides access to NPE1 and NPE2 by primary/backup PW. Users under the UPE can communicate with other users in the VPLS network through NPE1 or NPE2.
Page 99 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration # Configure the public network interface, loopback interface, and routes. [NPE1] router id 1.1.1.1 [NPE1] interface LoopBack 0 [NPE1-LoopBack0] ip address 1.1.1.1 32 [NPE1-LoopBack0] quit [NPE1] vlan 16 [NPE1-vlan16] interface vlan-interface 16 [NPE1-Vlan-interface16] ip address 16.16.16.1 24...
Page 100 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE1-GigabitEthernet5/1/1] flow-template user-defined [NPE1-GigabitEthernet5/1/1] traffic-redirect inbound link-group 4000 rule 0 slot 3 12 [NPE1-GigabitEthernet5/1/1] quit [NPE1] interface Ethernet 2/1/31 [NPE1-Ethernet2/1/31] flow-template user-defined [NPE1-Ethernet2/1/31] traffic-redirect inbound link-group 4000 rule 0 slot 3...
Page 101 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE1-vsi-Hvpls] broadcast-restrain 100 [NPE1-vsi-Hvpls] bandwidth 1024000 [NPE1-vsi-Hvpls] quit # Bind the VPLS instance to the private network interface. [NPE1] vlan 3001 [NPE1-vlan3001] interface vlan-interface 3001 [NPE1-Vlan-interface3001] l2 binding vsi Hvpls access-mode ethernet [NPE1-Vlan-interface3001] quit Configure NPE2.
Page 102 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE2-Ethernet2/1/26] quit [NPE2] vlan 12 [NPE2-vlan12] interface vlan-interface 12 [NPE2-Vlan-interface12] ip address 12.12.12.2 24 [NPE2-Vlan-interface12] quit [NPE2] interface GigabitEthernet 4/1/2 [NPE2-GigabitEthernet4/1/2] port link-type trunk [NPE2-GigabitEthernet4/1/2] port trunk permit vlan 12...
Page 103 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE2-Ethernet2/1/15] traffic-redirect inbound link-group 4000 rule 1 slot 5 [NPE2-Ethernet2/1/15] quit # Enable MPLS on public network interfaces. [NPE2] interface vlan-interface 23 [NPE2-Vlan-interface23] mpls [NPE2-Vlan-interface23] mpls ldp enable...
Page 104 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Configure NPE3. Note: In this part of the example, slot 2 holds the MPLS card. If the access card on the public network side is an MPLS card, you simply need to redirect the VPLS packets to the VPLS service card for redirection, without using the join-vlan parameter.
Page 105 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE3-ospf-1-area-0.0.0.0] network 6.6.6.6 0.0.0.0 [NPE3-ospf-1-area-0.0.0.0] network 26.26.26.0 0.0.0.255 [NPE3-ospf-1-area-0.0.0.0] network 16.16.16.0 0.0.0.255 # Configure redirection for the public network interface. [NPE3] flow-template user-defined slot 2 ethernet-protocol vlanid...
Page 106 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration # Bind the VPLS instance to the private network interface. [NPE3] vlan 3001 [NPE3-vlan3001] interface vlan-interface 3001 [NPE3-Vlan-interface3001] l2 binding vsi Hvpls access-mode ethernet [NPE3-Vlan-interface3001] quit...
Page 107 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [UPE-Ethernet3/1/15] quit [UPE] vlan 13 [UPE-vlan13] interface vlan-interface 13 [UPE-Vlan-interface13] ip address 13.13.13.3 24 [UPE-Vlan-interface13] quit [UPE] interface Ethernet 3/1/33 [UPE-Ethernet3/1/33] port link-type trunk [UPE-Ethernet3/1/33] port trunk permit vlan 13...
Page 108: Hierarchical Vpls Configuration Example (Via Qinq)
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [UPE-vsi-Hvpls] pwsignal ldp [UPE-vsi-Hvpls-ldp] vsi-id 1 [UPE-vsi-Hvpls-ldp] peer 1.1.1.1 dual-npe [UPE-vsi-Hvpls-ldp] peer 2.2.2.2 dual-npe [UPE-vsi-Hvpls-ldp] quit [UPE-vsi-Hvpls] broadcast-restrain 100 [UPE-vsi-Hvpls] bandwidth 1024000 [UPE-vsi-Hvpls] quit # Bind the VPLS instance to the private network interface.
Page 109 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration III. Configuration procedure Configure the MTU device. # Enable STP globally. <MTU> system-view System View: return to User View with Ctrl+Z. [MTU] stp enable # Configure the access port for CE1, and enable QinQ on the port.
Page 110 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE1] vlan 38 [NPE1-vlan38] interface vlan-interface 38 [NPE1-Vlan-interface38] ip address 192.168.38.3 24 [NPE1-Vlan-interface38] quit [NPE1] interface GigabitEthernet2/1/1 [NPE1-GigabitEthernet2/1/1] port link-type trunk [NPE1-GigabitEthernet2/1/1] port trunk permit vlan 38...
Page 111 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration # Configure MPLS LDP remote sessions. [NPE1] mpls ldp remote-peer 2 [NPE1-mpls-remote2] remote-ip 1.0.0.17 [NPE1-mpls-remote2] quit [NPE1] mpls ldp remote-peer 3 [NPE1-mpls-remote3] remote-ip 1.0.0.18 [NPE1-mpls-remote3] quit # Perform the configuration concerning the VPN instance.
Page 112 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE1] vsi stp static [NPE1-vsi-stp] pwsignal ldp [NPE1-vsi-stp-ldp]vsi-id 3 # Create a PW connection for transparent transmission of BPDUs between NPE1 and NPE2. [NPE1-vsi-stp-ldp] peer 1.0.0.18 vc-id 13...
Page 113: Vpls Load Sharing Configuration Example
Chapter 1 VPLS Configuration 1.4.5 VPLS Load Sharing Configuration Example The S9500 series routing switches support load sharing among multiple VPLS cards. The card level load sharing feature can distribute services evenly to multiple VPLS cards to enhance the VPLS forwarding performance of the system. When a card fails, the services running on that card is automatically switched to a normally operating card.
Page 114 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration II. Network diagram vlan 25 G 4 /1/8 G 10 /1/8 P E 1 P E2 Figure 1-8 Network diagram for VPLS load sharing configuration III. Configuration procedure Configure PE1 # Configure MPLS globally.
Page 115 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE1-acl-link-4100] rule 1 permit mpls l2label-range 1 ingress any egress any [PE1-acl-link-4100] rule 2 permit mpls l2label-range 2 ingress any egress any [PE1-acl-link-4100] rule 3 permit mpls l2label-range 3 ingress any egress any...
Page 116: Troubleshooting Vpls
Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE1-vsi-vpn1] quit [PE1] interface Vlan-interface 100 [PE1-Vlan-interface100] l2 binding vsi vpn1 [PE1-vsi-vpn1]dis this vsi vpn1 static label-range 0 encapsulation ethernet broadcast-restrain 100 cos 1 pwsignal ldp vsi-id 1 peer 20.0.0.2 vc-id 1 encapsulation vlan...
Page 117 Operation Manual – MPLS VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration The interface of the private VLAN is not bound with the corresponding VPLS instance, or is DOWN: make sure the interface is UP, or the PW to the UPE is UP.
Page 118 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS L3VPN Configuration..................1-1 1.1 MPLS L3VPN Overview..................... 1-1 1.1.1 MPLS L3VPN Model ....................1-2 1.1.2 MPLS L3VPN Implementation ................1-5 1.1.3 Nested MPLS L3VPN Implementation..............1-7 1.1.4 Hierarchical MPLS L3VPN Implementation ............
Page 119: Chapter 1 Mpls L3Vpn Configuration
VPN represents a different service, making the network able to transmit services of different types in a flexible way. The H3C S9500 series routing switches provide full MPLS L3VPN networking capabilities: Address isolation, allowing the overlap of addresses of different VPNs and public networks.
Page 120: Mpls L3Vpn Model
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.1.1 MPLS L3VPN Model I. MPLS L3VPN model Figure 1-1 MPLS L3VPN model As shown in Figure 1-1, MPLS L3VPN model contains three parts: CE, PE and P.
Page 121 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration operations when required by a user to adjust the relation between the user's internal VPNs. These disadvantages not only increase the network operating cost, but also bring relevant management and security issues.
Page 122 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration each VPN-instance on the PE has an independent set of routing table and label forwarding table, in which the forwarding information of the message is saved...
Page 123: Mpls L3Vpn Implementation
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration When matching the VPN Target attribute carried by the route to filter the routing information received by the PE router, if the export VPN target set of the received route contains identical items with the import VPN target set of the local end, the route is imported into the VPN routing table and then advertised to the connected CE .
Page 124 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Between CE and PE A PE router can learn routing information about the CE connected to it through static route, RIP (supporting multi-instance), OSPF (supporting multi-instance) or EBGP, and imports it in a vpn-instance.
Page 125: Nested Mpls L3Vpn Implementation
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Layer 1 Layer1 Layer 2 Layer2 Layer 2 Layer2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.1/24 Site 1 Site 2 1.1.1.2/24 Figure 1-4 Forwarding VPN packets Site 1 sends an IPv4 packet with the destination address 1.1.1.2 of to CE1.
Page 126: Hierarchical Mpls L3Vpn Implementation
As PE is required to aggregate multiple VPN routes on a MPLS L3VPN, it is prone to forming a bottleneck in a large-scale deployment or in the case that PE capacity is small. To solve the problem, Hangzhou H3C Technologies Co., Ltd. introduced the HoVPN (Hierarchy of VPN, Hierarchical MPLS L3VPN) solution.
Page 127: Introduction To Ospf Multi-Instance
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Figure 1-5 Hierarchical MPLS L3VPN 1.1.5 Introduction to OSPF Multi-Instance As one of the most popular IGP routing protocols, OSPF is used as an internal routing protocol in many VPNs.
Page 128: Introduction To Multi-Role Host
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration VPN- GREEN CE31 Area 2 Site2 OSPF 100 VPN - GREEN OSPFArea2 VPN-RED CE11 VPN-RED Site1 Site2 OSPF Area0 OSPF Area1 Area0 CE21 MPLS VPN Backbone...
Page 129: Mpls L3Vpn Configuration
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration different from common hosts; it is implemented by specifying an interface of another VPN as the egress interface through a static route in a VPN; and thus allowing one logical interface to access multiple VPNs.
Page 130 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do... Use the command... ip route-static [ vpn-instance vpn-instance-name-list ] ip-address { mask | mask-length } { interface-type Create a specified interface-number | vpn-instance vpn-instance-name...
Page 131: Configuring Pe Router
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.2.3 Configuring PE Router I. Configuring basic MPLS capability It includes configuring MPLS LSR ID, enable MPLS globally and enable MPLS in the corresponding VLAN interface view.
Page 132 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Perform the following configuration in VPN-instance view to configure VPN-instance description: To do... Use the command... Configure VPN-instance description description vpn-instance-description Delete VPN-instance description undo description...
Page 133 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Up to 16 VPN-targets can be configured with a command, and up to 20 vpn-targets can be configured for a VPN-instance. Limit the maximum number of routes in a VPN-instance This command is used to limit the maximum number of routes for a VPN-instance so as to avoid too many routes imported from a Site.
Page 134 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration By default, the vlan-id range of MPLS/VPN VLANs is from 0 to 1023, and the default value of vlan-id is 0. The value range of vlan-id is from 1 to 3071.
Page 135 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Set the VPN range for the ports and set the range of MPLS/VPN VLAN vlan-id on the ports to 1 to 4094. Perform the following configuration in Ethernet interface view.
Page 136 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Configure an outgoing routing policy for a VPN instance By configuring an outgoing routing policy for a VPN instance, you can set specific extended community attributes for specific routes.
Page 137 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do... Use the command... ipv4-family [ unicast ] vpn-instance Create PE-CE RIP instance vpn-instance-name undo ipv4-family [ unicast ] vpn-instance Delete PE-CE RIP instance vpn-instance-name Then configuring RIP multi-instance to import IBGP route.
Page 138 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Perform the following configuration in the OSPF view to configure Domain ID: To do... Use the command... Configure Domain ID domain-id { id-number | id-addr }...
Page 139 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Sham-links are required between two PEs when Backdoor links (that is, the OSPF links that do not pass through the MPLS backbone network) exist between the two PEs and data is expected to be transported over the MPLS backbone.
Page 140 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do... Use the command... Configure AS number for a peer { group-name | [ peer-address group specific neighbor group-name ] } as-number as-number Delete the AS number of a...
Page 141 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration By default, BGP is in asynchronous mode. Step 6: Permit route loop configuration in Hub&Spoke networking (optional) Generally speaking, PE-CE configuration is completed after you specify the AS number of neighbor;...
Page 142 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration In general, BGP uses the best local address in TCP connection. To keep TCP connection available even when the interface involved fails, you can perform the following configuration to permit BGP session over any interface through which TCP connection with the peer can be set up.
Page 143 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do... Use the command... Configure the local address as the next peer { group-name } next-hop-local hop in route advertisement undo peer { group-name }...
Page 144: Configuring P Router
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do... Use the command... Configure BGP neighbor as the UPE of MPLS peer peer-address upe L3VPN Disable the configuration undo peer peer-address upe 1.2.4 Configuring P Router P router does not maintain VPN routes, but do keep connection with public network and coordinate with PE in creating LSPs.
Page 145 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration III. Displaying VPN-instance related information After the above configuration, executing the display command in any view can display the VPN-instance related information, including its RD, description, the interfaces associated with it, and so on.
Page 146: Typical Mpls L3Vpn Configuration Examples
VPNA includes CE1 and CE3; VPNB includes CE2 and CE4. Subscribers in different VPNs cannot access each other. The VPN-target attribute for VPNA is 111:1 and that for VPNB is 222:2. The PEs and P are H3C switches supporting MPLS, and CEs are common Layer 3 switches. Note: The configuration in this example is focused on: Configure EBGP to exchange VPN routing information between CEs and PEs.
Page 147 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram AS 65430 AS 65410 VLAN201 VLAN201 VLAN201 VLAN201 168.3.1.1/16 168.3.1.1/16 168.1.1.1/16 VPN - A VPN - A VPN - A VPN - A...
Page 148 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: The configuration on the other three CE switches (CE2 to CE4) is similar to that on CE1, the details are omitted here. Configure PE1 # Configure vpn-instance for VPNA on PE1, as well as other associated attributes to control advertisement of VPN routing information.
Page 149 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1] mpls lsr-id 202.100.1.1 [PE1] mpls [PE1-mpls] quit [PE1] mpls ldp [PE1] vlan 201 [PE1-vlan201] port gigabitethernet 2/1/1 [PE1-vlan201] quit [PE1] interface Vlan-interface 201 [PE1-Vlan-interface201] ip address 172.1.1.1 255.255.0.0...
Page 150 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [P-LoopBack 0] quit [P] vlan 301 [P-vlan301] port gigabitethernet 3/1/1 [P-vlan301] quit [P] interface Vlan-interface 301 [P-Vlan-interface301] ip address 172.1.1.2 255.255.0.0 [P-Vlan-interface301] mpls [P-Vlan-interface301] mpls ldp enable...
Page 151 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [P-ospf-1] import-route direct Configure PE3 Note: The configuration on PE3 is similar to that on PE1, you should pay more attention to VPN routing attribute setting on PE3 to get information about how to control advertisement of a same VPN routing information (with same VPN-target) over MPLS network.
Page 152: Extranet Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE3] mpls lsr-id 202.100.1.3 [PE3] mpls [PE3-mpls] quit [PE3] mpls ldp [PE3] vlan 201 [PE3-vlan201] interface gigabitethernet 2/1/1 [PE3-vlan201] quit [PE3] interface Vlan-interface 201 [PE3-Vlan-interface201] ip address 172.3.1.1 255.255.0.0...
Page 153 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration In this example, VPN function is provided by MPLS. There are some shared resources at the City C for the two VPNs. All subscribers in both VPNs can access the shared resources, but VPN subscribers in City A and City B cannot access each other.
Page 154 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration III. Configuration procedure Note: This configuration procedure has omitted configurations between PE and P, and configurations on CEs. For these details refer to the former example.
Page 155 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE-A] mpls [PE-A-mpls] quit [PE-A] mpls ldp # Set up MP-IBGP adjacency between PEs to exchange inter-PE VPN routing information and activate MP-IBGP peer in VPNv4 sub-address family view.
Page 156 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE-C] interface loopback 0 [PE-C-LoopBack0] ip address 20.1.1.1 255.255.255.255 [PE-C-LoopBack0] quit # Configure MPLS basic capacity. [PE-C] mpls lsr-id 20.1.1.1 [PE-C] mpls [PE-C-mpls] quit [PE-C] mpls ldp # Set up MP-IBGP adjacency between PEs to exchange inter-PE VPN routing information and activate MP-IBGP peer in VPNv4 sub-address family view.
Page 157: Hub&Spoke Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Bind VPN-instance3 with the interface of VLAN301 which connects to CE-B. [PE-B] vlan 301 [PE-B-vlan301] port gigabitethernet 3/1/1 [PE-B-vlan301] quit [PE-B] interface Vlan-interface 301 [PE-B-Vlan-interface301] ip binding vpn-instance vpn-instance3 [PE-B-Vlan-interface301] ip address 172.17.0.1 255.255.0.0...
Page 158 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Hub&Spoke networking topology is used: CE2 and CE3 are spoke-sites, while CE1 is a hub-site in the bank data center. CE1 controls communication between CE2 and CE3.
Page 159 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram Figure 1-10 Network diagram for Hub&Spoke III. Configuration procedure Note: The following contents are omitted in this example: MPLS basic capacity configuration between PEs, configuration between PE and P, configuration between CEs.
Page 160 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Set up EBGP adjacency between PE1 and CE1, import intra-CE1 VPN routes learned into MBGP VPN-instance address family, with one routing loop permitted. [PE1] bgp 100...
Page 161 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1] bgp 100 [PE1-bgp] group 22 [PE1-bgp] peer 22.1.1.1 group 22 as-number 100 [PE1-bgp] peer 22.1.1.1 connect-interface loopback 0 [PE1-bgp] group 33 [PE1-bgp] peer 33.1.1.1 group 33 as-number 100 [PE1-bgp] peer 33.1.1.1 connect-interface loopback 0...
Page 162 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE2] interface loopback 0 [PE2-LoopBack0] ip address 22.1.1.1 255.255.255.255 [PE2-LoopBack0] quit # Set up MP-IBGP adjacency between PE2 and PE1 to exchange inter-PE VPN routing information and activate MP-IBGP peer in VPNv4 sub-address family view.
Page 163: Ce Dual-Home Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE3-Vlan-interface201] quit # Configure Loopback interface [PE3] interface loopback 0 [PE3-LoopBack0] ip address 33.1.1.1 255.255.255.255 [PE3-LoopBack0] quit # Set up MP-IBGP adjacency between PE3 and PE1 to exchange inter-PE VPN routing information and activate MP-IBGP peer in VPNv4 sub-address family view.
Page 164 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram AS:65003 AS:65004 VLAN211 VLAN211 192.168.13.2/24 192.168.13.2/24 VLAN211 VLAN211 192.168.23.2/24 192.168.23.2/24 VLAN314 VLAN314 Loopback0 Loopback0 VLAN311 VLAN311 192.168.23.1/24 192.168.23.1/24 3.3.3.3/32 192.168.13.1/24 192.168.13.1/24 VLAN312...
Page 165 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Set up EBGP adjacency between PE1 and CE1 in VPN-instance 1, import intra-CE1 VPN routes learned into VPN-instance 1.1. [PE1] bgp 100 [PE1-bgp] ipv4-family vpn-instance vpn-instance1.1...
Page 166 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure MPLS basic capacity, enable LDP on the interface connecting PE1 and PE2 and the interface connecting PE1 and PE3. [PE1] mpls lsr-id 1.1.1.1...
Page 167 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-bgp] peer 3.3.3.3 group 3 [PE1-bgp] peer 3.3.3.3 connect-interface loopback 0 [PE1-bgp] ipv4-family vpnv4 [PE1-bgp-af-vpn] peer 2 enable [PE1-bgp-af-vpn] peer 2.2.2.2 group 2 [PE1-bgp-af-vpn] peer 3 enable [PE1-bgp-af-vpn] peer 3.3.3.3 group 3...
Page 168 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE2-bgp-af-vpn-instance] peer 172.22.22.2 group 17222 as-number 65002 [PE2-bgp-af-vpn] quit [PE2-bgp] quit # Bind the interface connecting PE2 and CE1 to VPN-instance 2.1 and the interface connecting PE2 and CE2 to VPN-instance 2.2.
Page 169: Cross-Domain Mpls L3Vpn Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE3-bgp-af-vpn-instance] import-route direct [PE3-bgp-af-vpn-instance] import-route static [PE3-bgp-af-vpn-instance] group 192 external [PE3-bgp-af-vpn-instance] peer 192.168.13.2 group 192 as-number 65003 [PE3-bgp-af-vpn-instance] quit [PE3-bgp] quit # Set up EBGP adjacency between PE3 and CE4 in VPN-instance3.2, import intra-CE4 VPN routes learned into VPN-instance3.2.
Page 170 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram AS 100 AS 200 VLAN205 VLAN205 10.1.1.2/2 VLAN205 20.1.1.1/24 VLAN205 VLAN206 10.1.1.1/24 20.1.1.2/24 PE1:1.1.1.1/32 98.98.98.1/24 PE2:2.2.2.2/32 VLAN201 VLAN203 VLAN204 172.11.11.1/24 VLAN202 98.98.98.2/24 VLAN206 172.12.12.1/24...
Page 171 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1] vlan 205 [PE1-vlan205] port gigabitethernet 2/2/1 [PE1-vlan205] quit [PE1] interface Vlan-interface 205 [PE1-Vlan-interface205] mpls [PE1-Vlan-interface205] mpls ldp enable [PE1-Vlan-interface205] ip address 10.1.1.2 255.255.255.0 # Bind the VLAN interface with the VPN-instance.
Page 172 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE2] mpls lsr-id 2.2.2.2 [PE2] mpls [PE2-mpls] quit [PE2] mpls ldp # Configure the VLAN interface connecting CE. [PE2] vlan 203 [PE2-vlan203] port gigabitethernet 2/1/1...
Page 173 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE2] bgp 200 [PE2-bgp] ipv4-family vpn-instance vpna [PE2-bgp-af-vpn-instance] import-route direct [PE2-bgp-af-vpn-instance] group 172-12 external [PE2-bgp-af-vpn-instance] peer 172.12.12.2 group 172-12 as-number 65012 [PE2-bgp] ipv4-family vpn-instance vpnb...
Page 174: Cross-Domain Mpls L3Vpn Configuration Example - Option C
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [P1-Vlan-interface206] mpls [P1-Vlan-interface206] ip address 98.98.98.1 255.255.255.0 [P1-Vlan-interface206] quit # Configure IBGP neighbors and EBGP neighbors. [P1] bgp 100 [P1-bgp] group 1 internal [P1-bgp] peer 1.1.1.1 group 1 [P1-bgp] peer 1.1.1.1 connect-interface loopback0...
Page 175 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram BGP/MPLS Backbone BGP/MPLS Backbone Loopback0 AS 100 AS 200 Loopback0 202.100.1.1/32 202.200.1.1/32 VLAN 210 VLAN 210 VLAN 310 192.1.1.2/24 162.1.1.1/16 VLAN 110 192.1.1.1/24...
Page 176 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [ASBR-PE1-LoopBack 0] ip address 202.100.1.1 255.255.255.255 [ASBR-PE1-LoopBack 0] quit [ASBR-PE1] vlan 110 [ASBR-PE1-vlan110] interface vlan 110 [ASBR-PE1-Vlan-interface110] ip address 172.1.1.1 255.255.0.0 [ASBR-PE1-Vlan-interface110] quit [ASBR-PE2] vlan 210 [ASBR-PE1-vlan210] interface vlan 210 [ASBR-PE1-Vlan-interface210] ip address 192.1.1.1 255.255.255.0...
Page 177 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [ASBR-PE2] ospf [ASBR-PE2-ospf-1] area 0 [ASBR-PE2-ospf-1-area-0.0.0.0] network 162.1.0.0 0.0.255.255 [ASBR-PE2-ospf-1-area-0.0.0.0] network 202.200.1.1 0.0.0.0 [ASBR-PE2-ospf-1-area-0.0.0.0] quit [ASBR-PE2-ospf-1] quit Configure basic MPLS capability on the MPLS backbone network to enable the network to forward VPN traffic.
Page 178 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [ASBR-PE2] mpls lsr-id 162.1.1.1 [ASBR-PE2-mpls] lsp-trigger all [ASBR-PE2-mpls] quit [ASBR-PE2] mpls ldp [ASBR-PE2-mpls-ldp] quit [ASBR-PE2] interface vlan 310 [ASBR-PE2-Vlan-interface310] mpls [ASBR-PE2-Vlan-interface310] mpls ldp enable [ASBR-PE2-Vlan-interface310] quit...
Page 179 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [CE2] vlan 510 [CE2-vlan510] interface vlan 510 [CE2-Vlan-interface510] ip address 168.2.2.2 255.255.0.0 [CE2-Vlan-interface510] quit # Create a VPN instance on PE2 and bind it to the interface connected to CE2...
Page 180 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-bgp-af-vpn-instance] import-route direct [PE1-bgp-af-vpn-instance] quit [PE1-bgp] group 20 [PE1-bgp] peer 20 label-route-capability [PE1-bgp] peer 202.100.1.1 group 20 [PE1-bgp] peer 202.100.1.1 connect-interface loopback0 [PE1-bgp] group 30 external [PE1-bgp] peer 30 ebgp-max-hop [PE1-bgp] peer 202.200.1.2 group 30 as-number 200...
Page 181 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [ASBR-PE1-bgp] peer 202.100.1.2 connect-interface loopback0 [ASBR-PE1-bgp] quit # Configure CE2. [CE2] bgp 65002 [CE2-bgp] group 10 external [CE2-bgp] peer 168.2.2.1 group 10 as-number 200 [CE2-bgp] quit # Configure PE2: set up EBGP peer relation with CE2, IBGP peer relation with ASBR-PE2, and Multihop MP-EBGP peer relation with PE1.
Page 182: Hierarchical Mpls L3Vpn Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure ASBR-PE2: set up EBGP peer relation with ASBR-PE1, and IBGP peer relation with PE2. [ASBR-PE2] bgp 200 [ASBR-PE2-bgp] import-route ospf [ASBR-PE2-bgp] group 10 external...
Page 183 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram MPLS Upper layer VPN backbone Loopback0: 1.0.0.2 VLAN201 10.0.0.1/8 VLAN301 10.0.0.2/8 Loopback0:1.0.0.1 Lower layer VPN VPN 2 VPN 1 VPN 1 Site 1...
Page 184 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [SPE-vlan201] quit [SPE] interface Vlan-interface 201 [SPE-Vlan-interface201] ip address 10.0.0.1 255.0.0.0 [SPE-Vlan-interface201] mpls [SPE-Vlan-interface201] mpls ldp enable [SPE-Vlan-interface201] quit [SPE] interface loopback0 [SPE-LoopBack 0] ip address 1.0.0.2 255.255.255.255...
Page 185: Ospf Multi-Instance Sham-Link Configuration Example
I. Network requirements As shown in the following picture, a company connects to a WAN through OSPF multi-instance function of H3C router. OSPF is bind to VPN1.MPLS VPN backbone runs between PEs and OSPF runs between PE and CE. Configure a Sham-link between PE1 and PE2 to ensure the traffic between CE1 and CE2 does not pass the Backdoor link that directly connects CE1 and CE2.
Page 186 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram LoopBack 0 : 3.3.3.3 LoopBack 0 : 3.3.3.3 LoopBack 0 : 3.3.3.3 LoopBack 0 : 3.3.3.3 LoopBack 0 : 1.1.1.1 CE 1...
Page 187 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-Vlan-interface201] quit [PE1] vlan 202 [PE1-vlan202] port gigabitethernet 2/1/2 [PE1-vlan202] quit [PE1] interface Vlan-interface 202 [PE1-Vlan-interface202] ip address 168.1.13.1 255.255.255.0 [PE1-Vlan-interface202] ospf cost 1 [PE1-Vlan-interface202] mpls...
Page 188 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-ospf-100-area-0.0.0.0] network 10.1.1.0 0.0.0.255 # Configuring Sham-link [PE1-ospf-100-area-0.0.0.1] sham-link 1.1.1.1 2.2.2.2 # Configure the routes distributed to PE2 and PE3. [PE1] ospf 1000 [PE1-ospf-1000] area 0 [H3C-ospf-1000-area-0.0.0.0] network 168.12.1.0 0.0.0.255...
Page 189 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE2-Vlan-interface202] ip address 168.1.23.2 255.255.255.0 [PE2-Vlan-interface202] ospf cost 1 [PE2-Vlan-interface202] mpls [PE2-Vlan-interface202] mpls ldp enable [PE2-Vlan-interface202] quit [PE2] interface LoopBack0 [PE2-LoopBack0] ip binding vpn-instance vpn1 [PE2-LoopBack0] ip address 2.2.2.2 255.255.255.255...
Page 190 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE2] ip route-static 50.1.1.1 255.255.255.255 168.1.12.1 [PE2] ip route-static 50.1.1.3 255.255.255.255 168.1.23.3 # Configure the routes distributed to PE1 and PE3. [PE1] ospf 1000 [PE1-ospf-1000]area 0 [H3C-ospf-1000-area-0.0.0.0] network 168.12.1.0 0.0.0.255...
Page 191: Nested Mpls L3Vpn Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [CE2] interface Vlan-interface 201 [CE2-Vlan-interface201] ip address 20.1.1.1 255.255.255.0 [CE2-Vlan-interface201] ospf cost 1 # Configure OSPF. [CE2] ospf 100 router-id 20.20.20.20 [CE2-ospf-100] area 0.0.0.0 [CE2-ospf-100-area-0.0.0.0] network 12.1.1.0 0.0.0.255 [CE2-ospf-100-area-0.0.0.0] network 20.1.1.0 0.0.0.255...
Page 192 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration III. Configuration procedure Note: This procedure omits part of the configuration for CE router. Configure IGP on the service provider's backbone network. # Configure prov_pe1.
Page 193 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [prov_pe1] interface vlan 110 [prov_pe1- Vlan-interface110] mpls [prov_pe1- Vlan-interface110] mpls ldp enable [prov_pe1- Vlan-interface110] quit # Configure prov_pe2. [prov_pe2] mpls lsr-id 4.4.4.4 [prov_pe2] mpls ldp...
Page 194 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [prov_pe1-vpn-instance] quit [prov_pe1] ip vpn-instance vpn1 [prov_pe1-vpn-instance] route-distinguisher 1:1 [prov_pe1-vpn-instance] vpn-target 1:1 [prov_pe1-vpn-instance] vpn-target 3:3 [prov_pe1-vpn-instance] quit [prov_pe1] vlan 310 [prov_pe1] interface vlan 310 [prov_pe1-Vlan-interface310] ip binding vpn-instance customer_vpn [prov_pe1-Vlan-interface310] ip address 1.1.1.2 255.0.0.0...
Page 195 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [cust_pe2-LoopBack0] ip address 7.7.7.7 255.255.255.255 [cust_pe2-LoopBack0] quit [cust_pe2] mpls lsr-id 7.7.7.7 [cust_pe2] interface vlan 410 [cust_pe2-Vlan-interface410] ip address 2.1.1.1 255.0.0.0 [cust_pe2-Vlan-interface410] mpls [cust_pe2-Vlan-interface410] quit Configure EBGP between provider PE and customer PE.
Page 196 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [prov_pe2-bgp-af-vpn] peer 2.1.1.1 vpn-instance customer_vpn route-policy com2 import # Configure cust_pe1 [cust_pe1] bgp 600 [cust_pe1-bgp] group ebgp external [cust_pe1-bgp] undo peer ebgp enable [cust_pe1-bgp] peer 1.1.1.2 group ebgp as-number 100...
Page 197: Ospf Multi-Instance Ce Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [cust_pe2] interface vlan 610 [cust_pe2-Vlan-interface610] ip binding vpn-instance vpn1 [cust_pe2-Vlan-interface610] ip address 16.1.1.2 255.0.0.0 [cust_pe2-Vlan-interface510] quit [cust_pe2] bgp 500 [cust_pe2-bgp] undo peer ebgp enable [cust_pe2-bgp] ipv4-family vpn-instance vpn1 [cust_pe2-bgp-af-vpn-instance] group cegroup external [cust_pe2-bgp-af-vpn-instance] peer 16.1.1.1 group cegroup as-number 50002...
Page 198 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [CE-vpn-vpn2] vpn-target 200:1 import-extcommunity # Configure VLAN201. [CE] vlan 201 [CE-vlan201] port gigabitethernet 2/1/1 [CE-vlan201] quit [CE] interface Vlan-interface 201 [CE-Vlan-interface201] ip binding vpn-instance vpn1 [CE-Vlan-interface201] ip address 10.1.1.2 255.255.255.0...
Page 199: Multi-Role Host Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [CE-ospf-300] area 0.0.0.1 [CE-ospf-300-area-0.0.0.1] network 20.1.1.0 0.0.0.255 [CE-ospf-300-area-0.0.0.1] network 20.2.1.0 0.0.0.255 1.4.11 Multi-Role Host Configuration Example I. Network requirements CE1 and CE3 belong to VPN1, and CE2 belong to VPN2.
Page 200 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1] vlan 110 [PE1-vlan110] interface vlan-interface 110 [PE1-Vlan-interface110] ip address 192.168.1.1 24 [PE1-Vlan-interface110] quit [PE1] ospf [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] network 192.168.1.0 0.0.0.255 [PE1-ospf-1-area-0.0.0.0] network 1.1.1.9 0.0.0.0 [PE1-ospf-1-area-0.0.0.0] quit...
Page 201 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-vpn-vpn1] quit [PE1] ip vpn-instance vpn2 [PE1-vpn-vpn2] route-distinguisher 100:2 [PE1-vpn-vpn2] vpn-target 100:2 both [PE1-vpn-vpn2] quit [PE1] vlan 310 [PE1-vlan310] interface vlan-interface 310 [PE1-Vlan-interface310] ip binding vpn-instance vpn1 [PE1-Vlan-interface310] ip address 20.2.1.2 24...
Page 202 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [CE1-Vlan-interface310] ip address 20.2.1.1 24 [CE1-Vlan-interface310] quit [CE1] bgp 65410 [CE1-bgp] import-route direct [CE1-bgp] group 10 external [CE1-bgp] peer 20.2.1.2 group 10 as-number 100 [CE1-bgp] quit...
Page 203: Fib Entry Application Configuration Example
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-bgp-af-vpn-instance] import-route direct [PE1-bgp-af-vpn-instance] import-route static # Configure PE2: set up IBGP peer relation with PE1 in BGP-VPNv4 sub-address family view; set up EBGP peer relation with CE3 in BGP-VPN instance view.
Page 204 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration LSP is removed, the FIB entries generated by the dynamic routing protocol can be used for IP forwarding. II. Networking diagram 3.3.3.3 VLAN20 1.1.1.1 VLAN10 2.2.2.2...
Page 205 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] network 1.1.1.1 0.0.0.0 [PE1-ospf-1-area-0.0.0.0] network 10.1.1.1 0.0.0.255 [PE1-ospf-1-area-0.0.0.0] quit [PE1-ospf-1] quit # Configure the static LSP to PE2. [PE1] mpls [PE1-mpls] static-lsp ingress lsp1 destination 3.3.3.3 32 nexthop 10.1.1.2...
Page 206: Troubleshooting Mpls L3Vpn Configuration
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [P] interface Vlan-interface 20 [P-Vlan-interface20] ip address 20.1.1.1 255.255.255.0 [P-Vlan-interface20] ospf cost 1 [P-Vlan-interface20] mpls [P-Vlan-interface20] quit # Enable OSPF on the loopback interface and the interfaces through which the P device connects to PE1 and PE2 for intra-MPLS domain interworking.
Page 207 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Check whether the routing attributes import/export relation of each VPN-instance is correct. Check from the hub PE that whether the routing information between two VPN instances can be learnt by each other.
Page 208 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Check whether the BGP information is correct on the PE at the peer end; check whether specified the local Loopback interface as the interface to create adjacent with the peer end;...
Page 209 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS OAM Configuration................... 1-1 1.1 MPLS OAM Overview......................1-1 1.1.1 MPLS OAM Background ..................1-1 1.1.2 MPLS OAM Packet Types and Formats ..............1-2 1.1.3 MPLS OAM Capabilities..................
Page 210: Chapter 1 Mpls Oam Configuration
Typical MPLS OAM Configuration Example Troubleshooting MPLS OAM Note: Currently the H3C S9500 series routing switches do not support the FFD. 1.1 MPLS OAM Overview Operation, administration and maintenance (OAM) is a tool designed for monitoring and troubleshooting network problems. It provides an effective way of reducing network maintenance costs.
Page 211: Mpls Oam Packet Types And Formats
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration 1.1.2 MPLS OAM Packet Types and Formats MPLS OAM packets fall into four types: connectivity verification (CV), fast failure detection (FFD), forward defect indication (FDI) and backward defect indication (BDI).
Page 212 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration II. OAM FFD packets Like CV packets, you also can verify the LSP connectivity by checking the OAM FFD packets sent from the ingress node of an LSP arrive at the egress node.
Page 213 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration Function type (02Hex) Reserved (00Hex) Defect type TTSI (optional, if not used set to all 00Hex) (20 octets) Defect location (4 octets) Padding (all 00Hex)
Page 214: Mpls Oam Capabilities
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration Function type (03Hex) Reserved (00Hex) Defect type TTSI (optional, if not used set to all 00Hex) (20 octets) Defect location (4 octets) Padding (all 00Hex)
Page 215 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration immediately. If a protection group is configured properly, the corresponding protection switching would also be triggered. When configuring MPLS OAM basic capability, you need to bind a reverse channel to the LSP to be verified.
Page 216: References
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration Share mesh protection: This protection mode is designed for saving bandwidth in the mesh network topology. In short, an LSP is used as the secondary LSP for multiple LSPs.
Page 217 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration Configure MPLS basic capabilities, refer to MPLS Configuration. Configure static LSPs, refer to MPLS Configuration. Data preparation To configure MPLS OAM basic capability, prepare the following data:...
Page 218: Configuring A Protection Group
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration Note: This operation also can be used for modifying MPLS OAM parameters. The configuration of MPLS OAM parameters takes effect only after the MPLS OAM function is enabled.
Page 219: Displaying And Debugging Mpls Oam Basic Capability
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration The data flow is on the primary LSP if both the primary and secondary LSPs in one protection group fail. When the primary LSP is in the up/no-defect state and the secondary LSP is in the down, in-defect, or down/in-defect state, the data flow is on the primary LSP.
Page 220: Typical Mpls Oam Configuration Example
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration To do… Use the command... Remarks Display MPLS OAM display mpls oam egress { all | Alailable in information on the egress lsp-name lsp-name } [ slot slot-id |...
Page 221 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration node Switch A of defect verification results, and switches data flows to the secondary LSP. In this case, only Switch A and Switch C need to support MPLS OAM, Switch B, Switch D and Switch E do not.
Page 222 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration II. Networking diagram L oo pb a ck0 4.4 .4 .4/3 2 V LA N3 4 34 .1.1 .1/2 4 VL A N1 4 1 4 .1 .1.2 /24...
Page 223 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration [SwitchA] mpls oam ingress lsp-name LspAtCw lsp-id 100 [SwitchA] mpls oam ingress lsp-name LspAtCp lsp-id 200 # Configure a protection group. [SwitchA] mpls protect-switch 1 work-lsp lspAtCw protect-lsp lspAtCp holdoff...
Page 224 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration Lsp ingress lsr-id : 1.1.1.1 Auto-protocol :Disable Auto-overtime Ttsi/lsr-id : 1.1.1.1 Ttsi/lsp-id : 100 oam detect information: oam backward information: -------------------------------------------------------------------------- Type : CV Share attribute...
Page 225: Troubleshooting Mpls Oam
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration Using the display mpls protect-switch all command on Switch A, you will see that data flows are switched to the secondary LSP. [SwitchA] display mpls protect-switch all...
Page 226: Abnormal Verification Occurs On The Egress Node
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration [ private | share ] ] command on the egress node to configure OAM parameters for the LSP to be verified. Execute the display mpls oam egress [ all | lspname lsp-name ] command to display OAM parameters configured in step 1.
Page 227: The Defects Of The Ingress Node Cannot Trigger Protection Switching
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration the display mpls oam ingress [ all | lsp-name lsp-name ] verbose command on the ingress node, the defect-sate field displays No-defect. II. Solution The reason for this problem may come from: The reverse channel is not configured or down.
Page 228: The Primary Lsp Recovered From A Defect, But The Protection Group Cannot Switch Back
Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration Execute the display mpls protect-switch [ all | protect-id ] verbose command. If the Working LSP User Plane Status is No-defect, which means the primary LSP configured in the protection group is not the one for OAM defect verification.
Page 229 Operation Manual – MPLS OAM H3C S9500 Series Routing Switches Chapter 1 MPLS OAM Configuration trigger switch back after the primary LSP recovered from a defect, you should use the mpls protect-switch command to set WTR to zero. 1-20...
Page 230 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS Hybrid Insertion Configuration ............... 1-1 1.1 Overview ..........................1-1 1.1.1 Introduction to MPLS Hybrid Insertion ..............1-1 1.1.2 MPLS Hybrid Insertion Mechanism................. 1-1 1.2 Restrictions on MPLS Hybrid Insertion Networking............
Page 231: Chapter 1 Mpls Hybrid Insertion Configuration
1.1 Overview 1.1.1 Introduction to MPLS Hybrid Insertion For S9500 series routing switches, only the interface cards with suffixes C, CA and CB and VPLS service processor cards support MPLS function. If you want to enable MPLS VPN function of S9500 switches, you need MPLS-supporting interface cards or VPLS service processor cards.
Page 232: Restrictions On Mpls Hybrid Insertion Networking
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Use the port of the non-MPLS card for the access to the service private network side of the MPLS VPN ; Redirect the port of the non-MPLS card through QACL, to redirect the received packets to the specified MPLS card for processing;...
Page 233: Restrictions In Mpls Hybrid Insertion
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Only one Loopback port is allowed in the redirected VLAN that the destination port belongs to, but other MPLS card ports are allowed to join in;...
Page 234: Mpls Hybrid Insertion Configuration Task
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration 1.3 MPLS Hybrid Insertion Configuration Task 1.3.1 Introduction to MPLS hybrid insertion configuration task Table 1-1 Introduction to MPLS hybrid insertion configuration task...
Page 235 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration To do… Use the command… Remarks system-view Enter system view — acl { number acl-number | Enter name acl-name link ] } corresponding...
Page 236: Applying Flow Template And Redirection In Port Mode
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration To do… Use the command… Remarks Required Use a Layer 2 rule to rule [ rule-id ] permit configure VLAN + DMAC. ingress vlan-id egress...
Page 237: Typical Networking Example
CA is shared, and in PE2, a Layer 2 switch is shared to connect with the host directly. The PE devices (PE1 and PE2) are S9500 series switches, and the PE devices need to support the MPLS function. CE1 and CE2 are common mid-range and...
Page 238 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration The configurations of the interface cards of the two PE devices are the same. On slot3 is a non-MPLS card with 100M Ethernet ports, and on Slot 2 is an MPLS card with Gigabit Ethernet ports.
Page 239 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE1] mpls [PE1] mpls ldp # Configure public network interface and enable MPLS on the interface. [PE1] interface loopback0 [PE1-LoopBack0] ip address 1.1.1.1 32...
Page 240 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Caution: If the VRRP protocol is enabled on the VLAN port to which the source port of MPLS VPN redirection belongs, you must configure another ACL rule to redirect the packets...
Page 241 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE1-bgp] peer 2.2.2.2 connect-interface loopback0 [PE1-bgp] ipv4-family vpnv4 [PE1-bgp-af-vpn] peer 100 enable [PE1-bgp-af-vpn] peer 2.2.2.2 group 100 Configure P # Configure global MPLS.
Page 242 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE2-LoopBack0] ip address 2.2.2.2 32 [PE2-LoopBack0] quit [PE2] vlan 200 [PE2-vlan200] port GigabitEthernet 2/2/1 [PE2-vlan200] interface vlan-interface 200 [PE2-vlan-interface200] ip address 196.168.2.1 255.255.255.0...
Page 243 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE2-Ethernet3/1/1] traffic-redirect inbound ip-group 2000 rule 0 link-group 4000 rule 0 interface GigabitEthernet 2/1/1 10 l3-vpn # Bind VPN A on the VLAN interface between PE2 and CE3.
Page 244: Restrictions In Networking Of Various Mpls Cards
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration 1.4 Restrictions in Networking of Various MPLS Cards Note: MPLS cards with suffix CA support VLL and BGP/MPLS VPN, and common MPLS cards (with suffix C0) do not support VLL.
Page 245: Combination Of Multiple Mpls Cards And Multiple Non-Mpls Cards
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration II. Configuration restrictions VLL and BGP/MPLS VPN are mutually exclusive, so it is not allowed to configure the two types of services on the same VLAN interface;...

H3C S9500 Series Operation Manual

Table of Contents

Chapter 1 MPLS Architecture

Chapter 2 MPLS Basic Capability Configuration

MPLS Vll

VPLS Configuration

MPLS L3Vpn Configuration

MPLS Oam Configuration

MPLS Hybrid Insertion Configuration

Quick Links

Chapters

Troubleshooting

Need help?

Questions and answers

Related Manuals for H3C S9500 Series

Summary of Contents for H3C S9500 Series

Table of Contents