Introduction This document provides multicast VPN configuration examples. Prerequisites The configuration examples in this document were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.
Device Interface IP address Device Interface IP address PE 1 Loopback 1 1.1.1.1/32 CE a1 VLAN-interface 10 10.11.3.1/24 VLAN-interface 2 192.168.1.1/24 CE a1 VLAN-interface 11 10.11.1.2/24 VLAN-interface 3 192.168.2.1/24 CE a1 Loopback 0 2.2.2.2/32 Loopback 1 3.3.3.3/32 CE a2 VLAN-interface 20 10.11.4.1/24 —...
Page 5
[CEa1-Vlan-interface11] ip address 10.11.1.2 24 [CEa1-Vlan-interface11] quit # Configure PE 1, P, PE 2, and CE a2 in the same way CE a1 is configured. (Details not shown.) Configure a unicast routing protocol and basic MPLS VPN on all devices so that all devices are interoperable at the network layer.
Page 6
[CEa1] multicast routing [CEa1-mrib] quit [CEa1] interface vlan-interface 10 [CEa1-Vlan-interface10] pim sm [CEa1-Vlan-interface10] quit [CEa1] interface vlan-interface 11 [CEa1-Vlan-interface11] pim sm [CEa1-Vlan-interface11] quit [CEa1] interface loopback 0 [CEa1-LoopBack0] pim sm [CEa1-LoopBack0] quit # Configure Loopback 0 as a C-BSR and a C-RP. [CEa1] pim [CEa1-pim] c-bsr 2.2.2.2 [CEa1-pim] c-rp 2.2.2.2...
Page 9
multicast routing multicast routing vpn-instance customerA multicast-domain vpn-instance customerA source LoopBack1 default-group 239.1.1.1 data-group 225.1.1.0 255.255.255.240 PE 2: • ip vpn-instance customerA route-distinguisher 100:1 vpn-target 111:1 import-extcommunity vpn-target 111:1 export-extcommunity vlan 3 vlan 12 interface LoopBack1 ip address 1.1.1.2 255.255.255.255 pim sm interface Vlan-interface3 ip address 192.168.2.2 255.255.255.0...
Page 10
ip address 3.3.3.3 255.255.255.255 pim sm interface Vlan-interface2 ip address 192.168.1.1 255.255.255.0 pim sm interface Vlan-interface3 ip address 192.168.2.1 255.255.255.0 pim sm multicast routing c-bsr 3.3.3.3 c-rp 3.3.3.3 CE a1: • vlan 10 to 11 interface LoopBack0 ip address 2.2.2.2 255.255.255.255 pim sm interface Vlan-interface10 ip address 10.11.3.1 255.255.255.0...
interface Vlan-interface20 ip address 10.11.4.1 255.255.255.0 igmp enable multicast routing Example: Configuring inter-AS option A MD Network requirements As shown in Figure • Customer A has two branches that separately connect to AS 100 and AS 200. ASBR-PE 1 and ASBR-PE 2 are interconnected by using the inter-AS option A solution. •...
Device Interface IP address Device Interface IP address ASBR-PE PE 1 VLAN-interface 11 10.11.1.1/24 VLAN-interface 3 192.168.2.2/24 ASBR-PE PE 1 Loopback 1 1.1.1.1/32 Loopback 1 1.1.1.3/32 ASBR-PE ASBR-PE VLAN-interface 2 192.168.1.1/24 Loopback 2 22.22.22.22/32 ASBR-PE VLAN-interface 3 192.168.2.1/24 PE 2 VLAN-interface 4 192.168.3.1/24 ASBR-PE...
Page 13
[CEa1-Vlan-interface10] ip address 10.11.3.1 24 [CEa1-Vlan-interface10] quit [CEa1] interface loopback 0 [CEa1-LoopBack0] ip address 2.2.2.2 32 [CEa1-LoopBack0] quit [CEa1] interface vlan-interface 11 [CEa1-Vlan-interface11] ip address 10.11.1.2 24 [CEa1-Vlan-interface11] quit # Configure PE 1, ASBR-PE 1, ASBR-PE2, PE 2, and CE a2 in the same way CE a1 is configured. (Details not shown.) Configure a unicast routing protocol and MPLS L3VPN inter-AS option A on all devices so that all devices in the ASs are interoperable at the network layer.
Page 14
[PE2-Vlan-interface4] quit [PE2] interface loopback 1 [PE2-LoopBack1] pim sm [PE2-LoopBack1] quit # On ASBR-PE 2, enable IP multicast routing, and enable PIM-SM on the public network interfaces. [ASBR-PE2] multicast routing [ASBR-PE2-mrib] quit [ASBR-PE2] interface vlan-interface 4 [ASBR-PE2-Vlan-interface4] pim sm [ASBR-PE2-Vlan-interface4] quit [ASBR-PE2] interface loopback 1 [ASBR-PE2-LoopBack1] pim sm [ASBR-PE2-LoopBack1] quit...
Page 15
[CEa2] multicast routing [CEa2-mrib] quit [CEa2] interface vlan-interface 12 [CEa2-Vlan-interface12] pim sm [CEa2-Vlan-interface12] quit [CEa2] interface vlan-interface 20 [CEa2-Vlan-interface20] igmp enable [CEa2-Vlan-interface20] quit # On PE 1, create VPN instance customerA. [PE1] ip vpn-instance customerA [PE1-vpn-instance-customerA] route-distinguisher 100:1 [PE1-vpn-instance-customerA] vpn-target 100:1 both [PE1-vpn-instance-customerA] quit # Associate VLAN-interface 11 with VPN instance customerA.
Page 16
[ASBR-PE1] interface vlan-interface 3 [ASBR-PE1-Vlan-interface3] ip binding vpn-instance customerA [ASBR-PE1-Vlan-interface3] quit # Enable IP multicast routing for VPN instance customerA, and enable PIM-SM on VLAN-interface [ASBR-PE1] multicast routing vpn-instance customerA [ASBR-PE1-mrib-customerA] quit [ASBR-PE1] interface vlan-interface 3 [ASBR-PE1-Vlan-interface3] pim sm [ASBR-PE1-Vlan-interface3] quit # On ASBR-PE 2, create VPN instance customerA.
[PE2-md-customerA] quit # On ASBR-PE 2, create an MD for VPN instance customerA, and specify the default-group, MD source interface, and data-group range for the MD. [ASBR-PE2] multicast-domain vpn-instance customerA [ASBR-PE2-md-customerA] default-group 239.1.1.1 [ASBR-PE2-md-customerA] source loopback 1 [ASBR-PE2-md-customerA] data-group 225.2.2.0 28 [ASBR-PE2-md-customerA] quit Verifying the configuration # Verify that the default-MDT has been established on the public network in each AS on PEs and...
Page 18
vlan 2 vlan 11 interface LoopBack1 ip address 1.1.1.1 255.255.255.255 pim sm interface Vlan-interface2 ip address 192.168.1.2 255.255.255.0 pim sm interface Vlan-interface11 ip binding vpn-instance customerA ip address 10.11.1.1 255.255.255.0 pim sm multicast routing multicast routing vpn-instance customerA multicast-domain vpn-instance customerA source LoopBack1 default-group 239.1.1.1 data-group 225.1.1.0 255.255.255.240...
Page 19
ip address 10.11.2.1 255.255.255.0 pim sm multicast routing multicast routing vpn-instance customerA multicast-domain vpn-instance customerA source LoopBack1 default-group 239.1.1.1 data-group 225.1.1.0 255.255.255.240 ASBR-PE 1: • ip vpn-instance customerA route-distinguisher 100:1 vpn-target 100:1 import-extcommunity vpn-target 100:1 export-extcommunity vlan 2 to 3 interface LoopBack1 ip address 1.1.1.2 255.255.255.255 pim sm...
Page 20
default-group 239.1.1.1 data-group 225.1.1.0 255.255.255.240 ASBR-PE 2: • ip vpn-instance customerA route-distinguisher 200:1 vpn-target 200:1 import-extcommunity vpn-target 200:1 export-extcommunity vlan 3 to 4 interface LoopBack1 ip address 1.1.1.3 255.255.255.255 pim sm interface LoopBack2 ip address 22.22.22.22 255.255.255.255 pim sm interface Vlan-interface3 ip binding vpn-instance customerA ip address 192.168.2.2 255.255.255.0 pim sm...
Configure inter-AS option C MD VPN so that the receiver host can receive the multicast data from the source. Figure 3 Network diagram Table 3 Interface and IP address assignment Device Interface IP address Device Interface IP address — 10.11.3.2/24 —...
Software version used This configuration example was created and verified on S12500-CMW710-R7328P02. Configuration restrictions and guidelines When you configure inter-AS option C MD VPN, follow these restrictions and guidelines: By default, Ethernet interfaces, VLAN interfaces, and aggregate interfaces are shut down. You •...
Page 24
[PE1-LoopBack1] pim sm [PE1-LoopBack1] quit # On ASBR-PE 1, enable IP multicast routing, and enable PIM-SM on the public network interfaces. [ASBR-PE1] multicast routing [ASBR-PE1-mrib] quit [ASBR-PE1] interface vlan-interface 2 [ASBR-PE1-Vlan-interface2] pim sm [ASBR-PE1-Vlan-interface2] quit [ASBR-PE1] interface vlan-interface 3 [ASBR-PE1-Vlan-interface3] pim sm [ASBR-PE1-Vlan-interface3] quit [ASBR-PE1] interface loopback 1 [ASBR-PE1-LoopBack1] pim sm...
Page 25
[ASBR-PE2-LoopBack1] pim sm [ASBR-PE2-LoopBack1] quit [ASBR-PE2] interface loopback 2 [ASBR-PE2-LoopBack2] pim sm [ASBR-PE2-LoopBack2] quit # Configure Loopback 2 as a C-BSR and a C-RP. [ASBR-PE2] pim [ASBR-PE2-pim] c-bsr 22.22.22.22 [ASBR-PE2-pim] c-rp 22.22.22.22 [ASBR-PE2-pim] quit # Configure VLAN-interface 3 as a PIM-SM domain boarder. [ASBR-PE2] interface vlan-interface 3 [ASBR-PE2-Vlan-interface3] pim bsr-boundary [ASBR-PE2-Vlan-interface3] quit...
Page 26
# On CE a2, enable IP multicast routing, enable PIM-SM on VLAN-interface 12, and enable IGMP on VLAN-interface 20. [CEa2] multicast routing [CEa2-mrib] quit [CEa2] interface vlan-interface 12 [CEa2-Vlan-interface12] pim sm [CEa2-Vlan-interface12] quit [CEa2] interface vlan-interface 20 [CEa2-Vlan-interface20] igmp enable [CEa2-Vlan-interface20] quit # On PE 1, create VPN instance customerA.
# On PE 1, create an MD for the VPN instance customerA, and specify the default-group, MD source interface, and data-group. [PE1] multicast-domain vpn-instance customerA [PE1-md-customerA] default-group 239.1.1.1 [PE1-md-customerA] source loopback 1 [PE1-md-customerA] data-group 225.2.2.0 28 [PE1-md-customerA] quit # On PE 2, create an MD for VPN instance customerA, and specify the default-group, MD source interface, and data-group.
Protocol: pim-sm, Flag: SPT LOC ACT UpTime: 01:57:13 Upstream interface: Vlan-interface3 Upstream neighbor: 192.168.2.2 RPF prime neighbor: 192.168.2.2 Downstream interface(s) information: None The output shows that an RPT for (*, 239.1.1.1), an SPT for (1.1.1.1, 239.1.1.1), and an SPT for (1.1.1.4, 239.1.1.1) have been established on the public network.
Page 29
ip vpn-instance customerA route-distinguisher 12:12 vpn-target 3:3 import-extcommunity vpn-target 3:3 export-extcommunity vlan 4 vlan 12 interface LoopBack1 ip address 1.1.1.4 255.255.255.255 pim sm interface Vlan-interface4 ip address 192.168.3.1 255.255.255.0 pim sm interface Vlan-interface12 ip binding vpn-instance customerA ip address 10.11.2.1 255.255.255.0 pim sm multicast routing multicast routing vpn-instance customerA...
Page 30
ip address 192.168.2.1 255.255.255.0 pim sm pim bsr-boundary multicast routing c-bsr 11.11.11.11 c-rp 11.11.11.11 msdp encap-data-enable peer 192.168.2.2 connect-interface Vlan-interface3 • ASBR-PE 2: vlan 3 to 4 interface LoopBack1 ip address 1.1.1.3 255.255.255.255 pim sm interface LoopBack2 ip address 22.22.22.22 255.255.255.255 pim sm interface Vlan-interface3 ip address 192.168.2.2 255.255.255.0...