Hangzhou H3C Technologies Co., Ltd H3C S9500 Series Operation Manual

Routing switches
Table of Contents

Advertisement

Quick Links

H3C S9500 Series Routing Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: T2-081655-20080530-C-2.03
Product Version: S9500-CMW520-R2132

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the H3C S9500 Series and is the answer not in the manual?

Questions and answers

Summary of Contents for Hangzhou H3C Technologies Co., Ltd H3C S9500 Series

  • Page 1 H3C S9500 Series Routing Switches Operation Manual Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Manual Version: T2-081655-20080530-C-2.03 Product Version: S9500-CMW520-R2132...
  • Page 2 Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. Trademarks H3C, , Aolynk,...
  • Page 3: About This Manual

    About This Manual Related Documentation In addition to this manual, each H3C S9500 Series Routing Switches documentation set includes the following: Manual Description It introduces the installation procedure, H3C S9500 Series Routing Switches commissioning, maintenance Installation Manual monitoring of the S9500 series routing switches.
  • Page 4 Part Contents includes IP Routing Overview, BGP Configuration, IS-IS Configuration, OSPF Configuration, Configuration, Routing Policy Configuration, Static 03 IP Routing Volume Routing Configuration, IPv6 BGP Configuration, IPv6 IS-IS Configuration, IPv6 OSPFv3 Configuration, IPv6 RIPng Configuration, IPv6 Static Routing Configuration. includes Multicast Overview, Multicast Routing and Forwarding Configuration, IGMP...
  • Page 5 Conventions The manual uses the following conventions: I. Command conventions Convention Description Boldface The keywords of a command line are in Boldface. italic Command arguments are in italic. Items (keywords or arguments) in square brackets [ ] are optional. Alternative items are grouped in braces and separated by { x | y | ...
  • Page 6 III. Symbols Convention Description Means reader be extremely careful. Improper operation Warning may cause bodily injury. Means reader be careful. Improper operation may cause Caution data loss or damage to equipment. Note Means a complementary description.
  • Page 7: Manual Version

    Operation Manual H3C S9500 Series Routing Switches MPLS VPN Volume Organization Manual Version T2-081655-20080530-C-2.03 Product Version S9500-CMW520-R2132 Organization The MPLS VPN Volume is organized as follows: Features (operation Description manual) MPLS (Multiprotocol Label Switching) brings together the advantages of the connectionless control with IP and the connection-oriented forwarding with ATM.
  • Page 8 Operation Manual H3C S9500 Series Routing Switches MPLS VPN Volume Organization Features (operation Description manual) The MPLS hybrid insertion feature is used to enable deployment of MPLS VPN services on cards that do not MPLS Hybrid support MPLS. The volume describes:...
  • Page 9: Table Of Contents

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS Basics Configuration..................1-1 1.1 MPLS Overview ......................... 1-1 1.1.1 Basic Concepts of MPLS ..................1-2 1.1.2 Architecture of MPLS ....................1-5 1.1.3 MPLS and Routing Protocols ..................
  • Page 10 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Table of Contents 1.8.2 Configuration Procedure ..................1-27 1.9 Configuring MPLS IP TTL Processing................1-28 1.9.1 Configuration Prerequisites................... 1-28 1.9.2 Configuring MPLS IP TTL Propagation..............1-28 1.9.3 Specifying the Type of Path for ICMP Responses..........1-28 1.10 Setting the Interval for Reporting Statistics ..............
  • Page 11: Chapter 1 Mpls Basics Configuration

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Chapter 1 MPLS Basics Configuration When performing MPLS basics configuration, go to these sections for information you are interested in: MPLS Overview MPLS Configuration Basics...
  • Page 12: Basic Concepts Of Mpls

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Internet packet exchange (IPX), and connectionless network protocol (CLNP). That is what the term multiprotocol means. MPLS integrates both Layer 2 fast switching and Layer 3 routing and forwarding, satisfying the requirements of various new applications for network performance.
  • Page 13 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration TTL: Time to live (TTL) for the label. Eight bits in length. This field has the same meaning as that for an IP packet. Similar to the VPI/VCI in ATM and the DLCI in frame relay, an MPLS label functions as a connection identifier.
  • Page 14 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Figure 1-3 Diagram for an LSP An LSP is a unidirectional path from the ingress of the MPLS network to the egress. It functions like a virtual circuit in ATM or frame relay. Each node of an LSP is an LSR.
  • Page 15: Architecture Of Mpls

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration If the path that a tunnel traverses is exactly the hop-by-hop route established by the routing protocol, the tunnel is called a hop-by-hop routed tunnel. Otherwise, the tunnel is called an explicitly routed tunnel.
  • Page 16 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration The following describes how MPLS operates: First, the LDP protocol and the traditional routing protocol (such as OSPF and ISIS) work together on each LSR to establish the routing table and the label information base (LIB) for intended FECs.
  • Page 17: Mpls And Routing Protocols

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration An LER forwards both labeled packets and IP packets on the forwarding plane and therefore uses both the LFIB and the FIB. An ordinary LSR only needs to forward labeled packets and therefore uses only the LFIB.
  • Page 18 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration VPN 3 CE 3 PE 3 MPLS backbone VPN 2 VPN 1 CE 1 PE 1 PE 2 CE 2 Figure 1-6 MPLS-based VPN Figure 1-6 shows the basic structure of an MPLS-based VPN.
  • Page 19: Mpls Configuration Basics

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.2 MPLS Configuration Basics Note: Currently, the device supports the graceful restart (GR) feature of LDP. For details about GR, refer to GR Configuration in System Volume.
  • Page 20: Php

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Liberal: In this mode, an LSR keeps any received label to FEC binding regardless of whether the binding is from its next hop for the FEC or not.
  • Page 21 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration According to RFC 3031 “Multiprotocol Label Switching Architecture”, when an LSR labels a packet, it copies the TTL value of the original IP packet or the upper level label to the TTL field of the newly added label.
  • Page 22: Inspecting An Mpls Lsp

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration For an MPLS packet with only one level of label, the ICMP response message travels along the IP route when the TTL expires. 1.2.4 Inspecting an MPLS LSP In MPLS, the MPLS control plane is responsible for establishing an LSP.
  • Page 23 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Using LDP, LSRs can map network layer routing information to data layer switching paths directly and further establish LSPs. LSPs can be established between both neighboring LSRs and LSRs that are not directly connected, making label switching possible at all transit nodes on the network.
  • Page 24: Ldp Label Distribution

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration An LDP identifier is used to identify an LSR label space. It is a six-byte numerical value in the format of <LSR ID>:<Label space ID>, where LSR ID is four-byte long. A label space ID of 1 means per interface, a label space ID of 0 means per platform.
  • Page 25: Fundamental Operation Of Ldp

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration In independent mode, an LSR immediately responds to its upstream LSR with label binding information no matter whether it receives that of its downstream LSR or not.
  • Page 26 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration At the end of the discovery phase, Hello adjacency is established between LSRs, and LDP is ready to initiate session establishment. II. Session establishment and maintenance In this phase, LSRs pass through two steps to establish sessions between them: Establishing transport layer connections (that is, TCP connections) between them.
  • Page 27: Ldp Loop Detection

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.3.4 LDP Loop Detection LSPs established in MPLS may be looping. The LDP loop detection mechanism can detect looping LSPs and prevent LDP messages from looping forever.
  • Page 28: Configuration Procedure

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.4.2 Configuration Procedure Follow these steps to configure MPLS basic capability: To do… Use the command… Remarks Enter system view — system-view Required Configure the MPLS LSR...
  • Page 29: Configuring A Static Lsp

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration A label value of 3 represents an implicit null label and never appears in the label stack. When an LSR finds that it is assigned an implicit null label, it directly performs a pop operation, rather than substitutes the value for the original label at the stack top.
  • Page 30: Configuring Mpls Ldp

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Enter system view — system-view static-lsp ingress lsp-name destination dest-addr { mask | Configure a static LSP mask-length } { nexthop...
  • Page 31: Configuring Mpls Ldp Capability

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Task Remarks Configuring MPLS LDP Capability Required Configuring Local LDP Session Parameters Optional Configuring Remote LDP Session Parameters Optional Configuring the Policy for Triggering LSP Establishment...
  • Page 32: Configuring Local Ldp Session Parameters

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Note: Disabling LDP on an interface terminates all LDP sessions on the interface, causing all LSPs using the sessions to be deleted. Usually, the default value of the LDP LSR ID, that of the MPLS LSR ID, answers the requirement.
  • Page 33: Configuring The Policy For Triggering Lsp Establishment

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Specify the LDP remote Required remote-ip ip-address peer IP address Optional Set the targeted Hello mpls ldp timer hello-hold...
  • Page 34: Specifying The Label Processing Modes

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Enter system view — system-view Enter MPLS view — mpls Optional Configure the LSP Only local loopback lsp-trigger { all | ip-prefix...
  • Page 35: Configuring Ldp Loop Detection

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Optional liberal by default Specify the label retention label-retention { liberal | Note that you must reset mode conservative }...
  • Page 36: Configuring Ldp Md5 Authentication

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.7.9 Configuring LDP MD5 Authentication To improve the security of LDP sessions, you configure MD5 authentication for the used TCP connections. Follow these steps to configure LDP MD5 authentication: To do…...
  • Page 37: Configuration Prerequisites

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Except for the command for the LDP GR feature, all commands available in MPLS LDP view can be configured in MPLS LDP VPN instance view.
  • Page 38: Configuring Mpls Ip Ttl Processing

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.9 Configuring MPLS IP TTL Processing 1.9.1 Configuration Prerequisites Before configuring MPLS IP TTL propagation, be sure to complete this task: Configuring MPLS basic capability 1.9.2 Configuring MPLS IP TTL Propagation...
  • Page 39: Setting The Interval For Reporting Statistics

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Configure the ttl propagate vpn command on all the related PEs to allow IP TTL propagation of VPN packets. Configure the undo ttl expiration pop command on the ASBRs and SPEs to assure that ICMP responses can be transported back through the original LSPs.
  • Page 40: Inspecting An Mpls Lsp

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Required 0 seconds by default, Set the interval for statistics interval meaning that the system reporting statistics interval-time should not report any statistics.
  • Page 41: Displaying Mpls Operation

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks reset mpls ldp [ all | Optional [ vpn-instance Reset LDP sessions vpn-instance-name ] [ peer Available in user view...
  • Page 42: Displaying Mpls Ldp Operation

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.13.3 Displaying MPLS LDP Operation To do… Use the command… Remarks display mpls ldp [ all [ verbose ] [ | Display information about Available in any...
  • Page 43: Clearing Mpls Statistics

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.13.4 Clearing MPLS Statistics To do… Use the command… Remarks Clear MPLS statistics for reset mpls statistics a specified or all MPLS interface { interface-type...
  • Page 44 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration [SwitchA-ospf-1-area-0.0.0.0] network 1.1.1.9 0.0.0.0 [SwitchA-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255 [SwitchA-ospf-1-area-0.0.0.0] quit [SwitchA-ospf-1] quit # Configure Switch B. <Sysname> system-view [Sysname] sysname SwitchB [SwitchB] ospf [SwitchB-ospf-1] area 0 [SwitchB-ospf-1-area-0.0.0.0] network 2.2.2.9 0.0.0.0...
  • Page 45 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration verbose command, you will find that the interfaces are at the state of Full. The following takes Switch A as an example: [SwitchA] display ospf peer verbose OSPF Process 1 with Switch ID 1.1.1.9...
  • Page 46 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration [SwitchC] mpls ldp [SwitchC-mpls-ldp] quit [SwitchC] interface Vlan-interface 1 [SwitchC-Vlan-interface1] mpls [SwitchC-Vlan-interface1] mpls ldp [SwitchC-Vlan-interface1] quit After completing the above configurations, the local session between Switch A and Switch B and that between Switch B and Switch C should be established successfully.
  • Page 47: Configuring Ldp To Establish Lsps

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration [SwitchA] display mpls ldp session LDP Session(s) in Public Network Total number of sessions: 2 ---------------------------------------------------------------- Peer-ID Status SsnRole KA-Sent/Rcv ---------------------------------------------------------------- 2.2.2.9:0 Operational Passive 35/35 3.3.3.9:0...
  • Page 48 Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration [SwitchA] mpls [SwitchA-mpls] lsp-trigger all [SwitchA-mpls] quit # Configure Switch B. [SwitchB] mpls [SwitchB-mpls] lsp-trigger all [SwitchB-mpls] quit # Configure Switch C. [SwitchC] mpls [SwitchC-mpls] lsp-trigger all...
  • Page 49: Troubleshooting Mpls

    Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration round-trip min/avg/max = 1/1/1 ms 1.15 Troubleshooting MPLS Symptom: An interface with LDP enabled cannot establish an LDP session with its peer. Analysis: An LDP session is established in two steps: establishing the TCP connection;...
  • Page 50 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS TE Configuration....................1-1 1.1 MPLS TE Overview ......................1-1 1.1.1 Traffic Engineering and MPLS TE................1-2 1.1.2 Basic Concepts of MPLS TE................... 1-3 1.1.3 MPLS TE Implementation ..................
  • Page 51 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Table of Contents 1.11.1 Configuration Prerequisites................. 1-38 1.11.2 Configuration Procedure ..................1-39 1.12 Configuring FRR ......................1-39 1.12.1 Configuration Prerequisites................. 1-40 1.12.2 Configuration Procedure ..................1-40 1.13 Displaying and Maintaining MPLS TE ................1-43 1.14 MPLS TE Configuration Example ..................
  • Page 52: Chapter 1 Mpls Te Configuration

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Chapter 1 MPLS TE Configuration Note: A routing switch running MPLS has routing functions. The term “router” in this document refers to a router in a generic sense or a Layer 3 Ethernet switch running MPLS.
  • Page 53: Traffic Engineering And Mpls Te

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.1.1 Traffic Engineering and MPLS TE I. Traffic engineering Network congestion is one of the major problems that can degrade your network backbone performance. It may occur either when network resources are inadequate or when load distribution is unbalanced.
  • Page 54: Basic Concepts Of Mpls Te

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Reserve resources by establishing LSP tunnels to specific destinations. This allows traffic to bypass congested nodes to achieve appropriate load distribution. When network resources are insufficient, MPLS TE allows bandwidth-hungry LSPs or critical user traffic to occupy the bandwidth for lower priority LSP tunnels.
  • Page 55: Cr-Lsp

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration II. Calculating paths Link state-based routing protocols use shortest path first (SPF) to calculate the shortest path to each network node. In MPLS TE, the constraint-based shortest path first (CSPF) algorithm is used. It is...
  • Page 56 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Traffic characteristics Preemption Route pinning Administrative group and affinity attribute Reoptimization I. Strict and loose explicit routes An LSP is called a strict explicit route if all LSRs along the LSP are specified.
  • Page 57: Cr-Ldp

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration V. Administrative group and affinity attribute The affinity attribute of an MPLS TE tunnel identifies the properties of the links that the tunnel can use. Together with the link administrative group, it decides which links the MPLS TE tunnel can use.
  • Page 58 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration I. Overview Currently, two QoS models are available: integrated service (IntServ) and differentiated service (DiffServ). Resource reservation protocol (RSVP) is designed for IntServ. It reserves resources on each node along a path.
  • Page 59 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration III. Make-before-break Make-before-break is a mechanism to change MPLS TE tunnel attributes with minimum data loss and without extra bandwidth. Note: Once you change the key attributes of an MPLS TE tunnel, such as the destination,...
  • Page 60 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Resv messages: sent by each receiver upstream towards senders to request resource reservation and to create and maintain reservation state on each node along the reverse of data transmission path.
  • Page 61 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration As resources are reserved on the LSRs along the path for the LSP established using RSVP-TE, services transmitted on the LSP are guaranteed. VI. RSVP refresh mechanism RSVP maintains path and reservation state by periodically retransmitting two types of messages: Path and Resv.
  • Page 62: Traffic Forwarding

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration downstream nodes. The state stored in the PSB or RSB object times out and is removed after the number of consecutive non-refreshing times exceeds the PSB or RSB timeout keep-multiplier.
  • Page 63: Cr-Lsp Backup

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Router B Router C Router A Router D Router E Figure 1-3 IGP shortcut and forwarding adjacency As shown in Figure 1-3, a TE tunnel is present between Router D and Router C. With IGP shortcut enabled, the ingress node Router D can use this tunnel when calculating IGP routes.
  • Page 64: Fast Reroute

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.1.9 Fast Reroute This section covers these topics: Overview Basic concepts Protection Deploying FRR I. Overview Fast reroute (FRR) provides a quick per-link or per-node protection on an LSP.
  • Page 65: Protocols And Standards

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration the bypass LSP. As shown in Figure 1-5, the primary LSP is Router A → Router B → Router C → Router D → Router E, and the bypass LSP is Router B → Router F→...
  • Page 66: Configuring Mpls Te Basic Capabilities

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Remarks Configuration task Tuning MPLS TE Tunnel Setup Optional Forwarding traffic along MPLS TE tunnels using static routes Required Configuring Traffic Forwarding Use either Forwarding traffic along MPLS...
  • Page 67: Creating Mpls Te Tunnel Over Static Cr-Lsp

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use the command… Remarks Enter the interface view of interface interface-type –– an MPLS TE link interface-number Enable interface MPLS Required mpls Required...
  • Page 68: Configuration Procedure

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Configure static routing or an IGP protocol to make sure that all LSRs are reachable. Configure MPLS basic capabilities. Configure MPLS TE basic capabilities. 1.4.2 Configuration Procedure Follow these steps to create an MPLS TE tunnel over a CR-LSP: To do…...
  • Page 69: Configuring Mpls Te Tunnel With Dynamic Signaling Protocol

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: The tunnel-name argument specifies the name of the MPLS TE tunnel carried over the static CR-LSP. The tunnel-name argument in the static-cr-lsp ingress command is case sensitive.
  • Page 70: Configuration Procedure

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.5.2 Configuration Procedure Configuring an MPLS TE tunnel using a dynamic signaling protocol involves these tasks: Configuration task Remarks Configuring MPLS TE properties for a link...
  • Page 71 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Enter OSPF view ospf [ process-id ] –– Required Enable the opaque LSA opaque-capability...
  • Page 72 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks cost-style { narrow | Required wide | wide-compatible | Configure the wide metric { compatible | By default, IS-IS uses...
  • Page 73 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Create an explicit path for explicit-path path-name MPLS TE tunneling and Required [ enable | disable ]...
  • Page 74: Configuring Rsvp-Te Advanced Features

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Associate the tunnel with mpls te path Required an explicit path explicit-path path-name Submit current tunnel Required mpls te commit configuration VII.
  • Page 75: Configuration Prerequisites

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Before performing the configuration tasks in this section, be aware of each configuration objective and its impact on your network. 1.6.1 Configuration Prerequisites Before configuring RSVP-TE advanced features, do the following:...
  • Page 76 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: In current MPLS TE applications, the SE style is mainly used for make-before-break, while the FF style is rarely used. II. Configuring RSVP state timers Follow these steps to configure RSVP state timers: To do…...
  • Page 77 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enable the reliability Optional mpls rsvp-te reliability mechanism of RSVP-TE mpls rsvp-te timer retransmission Optional Configure { increment-value retransmission...
  • Page 78: Tuning Cr-Lsp Setup

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Enter MPLS view –– mpls Required Enable resource mpls rsvp-te reservation confirmation resvconfirm Disabled by default...
  • Page 79: Configuration Prerequisites

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.7.1 Configuration Prerequisites The configuration tasks described in this section are about CSPF of MPLS TE. They must be used in conjunction with CSPF and the dynamic signal protocol RSVP-TE.
  • Page 80 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: For a tunnel, the tie breaker configured in MPLS TE tunnel interface view is preferred to the one configured in MPLS view. If no tie breaker is configured in MPLS TE tunnel interface view, the one configured in MPLS view applies.
  • Page 81 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: The relationship between administrative groups and affinity attributes varies by vendor. To deploy devices from different vendors in the same network, acquaint yourself with the implementations of the vendors at first.
  • Page 82: Tuning Mpls Te Tunnel Setup

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Exit to user view –– return Perform reoptimization on all MPLS TE tunnels with Optional mpls te reoptimization reoptimization enabled 1.8 Tuning MPLS TE Tunnel Setup...
  • Page 83 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Enter MPLS TE tunnel interface tunnel –– interface view tunnel-number Enable the Record Required...
  • Page 84: Configuring Traffic Forwarding

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Enter MPLS TE tunnel interface tunnel –– interface view tunnel-number Optional mpls te priority...
  • Page 85 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: The interface-type argument in the ip route-static command must be tunnel. In addition, the preference value must be set. For more information about static routing, refer to Static Routing Commands in IP Routing Volume.
  • Page 86 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Optional mpls te igp metric The metrics of TE tunnels Assign a metric to the { absolute | relative }...
  • Page 87: Configuring Traffic Forwarding Tuning Parameters

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.10 Configuring Traffic Forwarding Tuning Parameters In MPLS TE, you may configure traffic forwarding tuning parameters such as the failed link timer and flooding thresholds to change paths that IP or MPLS traffic flows traverse or to define type of traffic that may travel down a TE tunnel.
  • Page 88 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Follow these steps to configure flooding thresholds: To do… Use command to… Remarks Enter system view –– system-view Enter MPLS TE tunnel interface interface-type ––...
  • Page 89: Configuring Cr-Lsp Backup

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Optional If no TE metric is assigned Assign a TE metric to the mpls te metric value to the link, IGP metric is...
  • Page 90: Configuration Procedure

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.11.2 Configuration Procedure Follow these steps to configure CR-LSP backup: To do… Use command to… Remarks Enter system view of the –– system-view ingress node...
  • Page 91: Configuration Prerequisites

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration A bypass tunnel cannot be used for services such as VPN at the same time. 1.12.1 Configuration Prerequisites Before configuring FRR, do the following: Configure IGP, ensuring that all LSRs are reachable...
  • Page 92 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration The protected interface is not the outgoing interface on the next hop along the route. Up to three bypass tunnels can be specified for a protected interface. The best-fit algorithm is used to determine which of them should be used in case failure occurs.
  • Page 93 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Caution: Bypass tunnels do not protect bandwidth by default. This can defeat your attempts to binding a primary LSP to a bypass LSP. Therefore, when configuring a bypass tunnel, you must configure the bandwidth that it is intended to protect with the mpls te backup bandwidth command.
  • Page 94: Displaying And Maintaining Mpls Te

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Follow these steps to configure the FRR polling timer: To do… Use command to… Remarks Enter system view of the –– system-view PLR node Enter MPLS view ––...
  • Page 95 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use the command… Remarks display mpls rsvp-te psb-content Display information about { ingress-lsr-id lspid tunnel-id Available in any RSVP-TE PSB egress-lsr-id } [ | { begin | include |...
  • Page 96: Mpls Te Configuration Example

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use the command… Remarks Display the information of the specified or all OSPF display ospf [ process-id ] Available in any processes about traffic...
  • Page 97 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration II. Network diagram Loopback1 2.2.2.2/32 Vlan-int2 Vlan-int1 2.1.1.2/24 3.2.1.1/24 Switch B Vlan-int1 Vlan-int2 2.1.1.1/24 3.2.1.2/24 Switch A Switch C Loopback1 Loopback1 3.3.3.3/32 1.1.1.1/32 Figure 1-6 Set up MPLS TE tunnels using static CR-LSPs III.
  • Page 98 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchB-Vlan-interface2] quit [SwitchB] interface loopback 1 [SwitchB-LoopBack1] isis enable 1 [SwitchB-LoopBack1] quit # Configure Switch C. <SwitchC> system-view [SwitchC] isis 1 [SwitchC-isis-1] network-entity 00.0005.0000.0000.0003.00 [SwitchC-isis-1] quit...
  • Page 99 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchB] mpls lsr-id 2.2.2.2 [SwitchB] mpls [SwitchB-mpls] mpls te [SwitchB-mpls] quit [SwitchB] interface Vlan-interface 1 [SwitchB-Vlan-interface1] mpls [SwitchB-Vlan-interface1] mpls te [SwitchB-Vlan-interface1] quit [SwitchB] interface Vlan-interface 2...
  • Page 100 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Verify the configuration Perform the display interface tunnel command on Switch A. You can find that the tunnel interface is up. [SwitchA] display interface tunnel...
  • Page 101: Mpls Te Using Rsvp-Te Configuration Example

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration In/Out Label In/Out IF Vrf Name 20/30 Vlan1/Vlan2 [SwitchC] display mpls lsp ------------------------------------------------------------------ LSP Information: STATIC CRLSP ------------------------------------------------------------------ In/Out Label In/Out IF Vrf Name 30/NULL...
  • Page 102 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration II. Network diagram Loopback1 Loopback1 Vlan-int1 Vlan-int3 Switch D Switch A Loopback1 Loopback1 Vlan-int3 Vlan-int1 Vlan-int2 Vlan-int2 Switch B Switch C Device Interface IP address...
  • Page 103 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchB] interface vlan-interface 1 [SwitchB-Vlan-interface1] isis enable 1 [SwitchB-Vlan-interface1] isis circuit-level level-2 [SwitchB-Vlan-interface1] quit [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] isis enable 1 [SwitchB-Vlan-interface2] isis circuit-level level-2...
  • Page 104 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchD-LoopBack1] quit Perform the display ip routing-table command on each switch. You can see that all nodes learnt the host routes of other nodes with LSR IDs as destinations. Take Switch...
  • Page 105 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchB-Vlan-interface1] mpls rsvp-te [SwitchB-Vlan-interface1] quit [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] mpls [SwitchB-Vlan-interface2] mpls te [SwitchB-Vlan-interface2] mpls rsvp-te [SwitchB-Vlan-interface1] quit # Configure Switch C. [SwitchC] mpls lsr-id 3.3.3.9...
  • Page 106 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchA-isis-1] quit # Configure Switch B. [SwitchB] isis 1 [SwitchB-isis-1] cost-style wide [SwitchB-isis-1] traffic-eng level-1-2 [SwitchB-isis-1] quit # Configure Switch C. [SwitchC] isis 1 [SwitchC-isis-1] cost-style wide...
  • Page 107 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchC-Vlan-interface2] quit # Configure maximum link bandwidth and maximum reservable bandwidth on Switch D. [SwitchD] interface vlan-interface 3 [SwitchD-Vlan-interface3] mpls te max-link-bandwidth 100 [SwitchD-Vlan-interface3] mpls te max-reservable-bandwidth 50...
  • Page 108 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration LSP ID 1.1.1.9:1 Session ID Admin State Oper State Ingress LSR ID 1.1.1.9 Egress LSR ID: 4.4.4.9 Signaling Prot RSVP Resv Style Class Type CLASS 0...
  • Page 109: Cr-Lsp Backup Configuration Example

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.14.3 CR-LSP Backup Configuration Example I. Network requirements Set up an MPLS TE tunnel from Switch A to Switch C. Use CR-LSP hot backup for it.
  • Page 110 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchA-mpls] mpls te cspf [SwitchA-mpls] quit [SwitchA] interface Vlan-interface 1 [SwitchA-Vlan-interface1] mpls [SwitchA-Vlan-interface1] mpls te [SwitchA-Vlan-interface1] mpls rsvp-te [SwitchA-Vlan-interface1] quit [SwitchA] interface Vlan-interface 4 [SwitchA-Vlan-interface4] mpls...
  • Page 111 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 0 packets input, 0 bytes 0 input error 0 packets output, 0 bytes 0 output error Verify the configuration Perform the display mpls te tunnel command on Switch A. You can find that two tunnels are present with the outgoing interfaces being Vlan-interface 1 and Vlan-interface 4 respectively.
  • Page 112: Frr Configuration Example

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Shut down Vlan2 on Switch B. Perform the tracert command on Switch A to draw the path to the tunnel destination. You can see that the LSP is re-routed to traverse Switch [SwitchA] tracert –a 1.1.1.9 3.3.3.9...
  • Page 113 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration II. Network diagram Switch A Switch B Switch C Switch D Loopback1 Loopback1 Loopback1 Vlan-int1 Vlan-int2 Vlan-int3 Vlan-int2 Vlan-int1 Vlan-int3 Vlan-int4 Vlan-int5 Vlan-int4 Vlan-int5 Primary LSP...
  • Page 114 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 3.3.3.3/32 ISIS 2.1.1.2 Vlan1 4.1.1.0/24 ISIS 2.1.1.2 Vlan1 4.4.4.4/32 ISIS 2.1.1.2 Vlan1 5.5.5.5/32 ISIS 2.1.1.2 Vlan1 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 Configure MPLS TE basic capabilities, and enable RSVP-TE.
  • Page 115 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: Follow the same steps to configure Switch C, Switch D, and Switch E. Create an MPLS TE tunnel on Switch A, the headend of the primary LSP # Create an explicit path for the primary LSP.
  • Page 116 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Perform the display mpls te tunnel-interface command on Switch A to verify the configuration of the tunnel interface. [SwitchA] display mpls te tunnel-interface Tunnel Name...
  • Page 117 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration # Create the bypass tunnel. [SwitchB] interface Tunnel 3/0/5 [SwitchB-Tunnel3/0/5] ip address 11.1.1.1 255.255.255.0 [SwitchB-Tunnel3/0/5] tunnel-protocol mpls te [SwitchB-Tunnel3/0/5] destination 3.3.3.3 [SwitchB-Tunnel3/0/5] mpls te path explicit-path by-path # Configure the bandwidth that the bypass tunnel protects.
  • Page 118 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration LSP Information: RSVP LSP ------------------------------------------------------------------ In/Out Label In/Out IF Vrf Name 4.4.4.4/32 3/NULL Vlan3/- [SwitchE] display mpls lsp ------------------------------------------------------------------ LSP Information: RSVP LSP ------------------------------------------------------------------ In/Out Label...
  • Page 119 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Nexthop 3.1.1.2 In-Label 1024 Out-Label 1024 In-Interface Vlan-interface1 Out-Interface Vlan-interface2 LspIndex 4097 Token 22001 LsrType Transit Bypass In Use Not Used BypassTunnel Tunnel Index[Tunnel3/0/5], InnerLabel[1024]...
  • Page 120 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Tunnel Name Tunnel3/0/4 Tunnel Desc Tunnel3/0/4 Interface Tunnel State Desc Modifying CR-LSP is setting up Tunnel Attributes LSP ID 1.1.1.1:1 Session ID Admin State Oper State Ingress LSR ID 1.1.1.1...
  • Page 121 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Reserved BW 0 kbps Setup Priority Hold Priority: Affinity Prop/Mask 0x0/0x0 Explicit Path Name pri-path Tie-Breaking Policy : None Metric Type None Loop Detection Disabled...
  • Page 122 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Nexthop 3.1.1.2 In-Label 1024 Out-Label 1024 In-Interface Vlan-interface1 Out-Interface Vlan-interface2 LspIndex 4097 Token 22001 LsrType Transit Bypass In Use In Use BypassTunnel Tunnel Index[Tunnel3/0/5], InnerLabel[1024]...
  • Page 123: Mpls Te In Mpls L3Vpn Configuration Example

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration About 5 seconds later, perform the display mpls lsp verbose command on Switch B. You can find that Tunnel 3/0/5 is still bound with interface Vlan-interface 2 and is unused.
  • Page 124 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] network 10.0.0.0 0.0.0.255 [PE1-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0 [PE1-ospf-1-area-0.0.0.0] quit [PE1-ospf-1] quit # Configure PE 2. [PE2] interface loopback 1 [PE2-LoopBack1] ip address 3.3.3.3 255.255.255.255...
  • Page 125 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Configure MPLS basic capabilities and LDP. # Configure PE 1. [PE1] mpls lsr-id 2.2.2.2 [PE1] mpls [PE1-mpls] lsp-trigger all [PE1-mpls] quit [PE1] mpls ldp [PE1-mpls-ldp] quit...
  • Page 126 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [PE1-mpls] quit [PE1] interface vlan-interface 2 [PE1-Vlan-interface2] mpls te [PE1-Vlan-interface2] quit [PE1] ospf [PE1-ospf-1] opaque-capability enable [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] mpls-te enable [PE1-ospf-1-area-0.0.0.0] quit [PE1-ospf-1] quit # Configure PE 2.
  • Page 127 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [CE1-Vlan-interface1] ip address 192.168.1.2 255.255.255.0 [CE1-Vlan-interface1] quit # Configure the VPN instance on PE 1, and use CR-LSP for VPN setup. Bind the VPN instance with the interface connected to CE 1.
  • Page 128 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Interfaces : Vlan-interface1 Ping connected CEs on PEs to test connectivity. For example, ping CE 1 on PE 1: [PE1] ping -vpn-instance vpn1 192.168.1.2 PING 192.168.1.2: 56 data bytes, press CTRL_C to break Reply from 192.168.1.2: bytes=56 Sequence=1 ttl=255 time=47 ms...
  • Page 129 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [PE2] bgp 100 [PE2-bgp] ipv4-family vpn-instance vpn1 [PE2-bgp-vpn1] peer 192.168.2.2 as-number 65002 [PE2-bgp-vpn1] import-route direct [PE2-bgp-vpn1] quit [PE2-bgp] peer 2.2.2.2 as-number 100 [PE2-bgp] peer 2.2.2.2 connect-interface loopback 1 [PE2-bgp] ipv4-family vpnv4 [PE2-bgp-af-vpnv4] peer 2.2.2.2 enable...
  • Page 130 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration PING 192.168.1.2: 56 data bytes, press CTRL_C to break Reply from 192.168.1.2: bytes=56 Sequence=1 ttl=253 time=38 ms Reply from 192.168.1.2: bytes=56 Sequence=2 ttl=253 time=61 ms Reply from 192.168.1.2: bytes=56 Sequence=3 ttl=253 time=74 ms...
  • Page 131 Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Nexthop 192.168.1.1 In-Label 1024 Out-Label NULL In-Interface ---------- Out-Interface ---------- LspIndex 8193 Token LsrType Egress Outgoing token Label Operation ------------------------------------------------------------------ LSP Information: LDP LSP ------------------------------------------------------------------ VrfIndex 2.2.2.2/32...
  • Page 132: Troubleshooting Mpls Te

    Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.15 Troubleshooting MPLS TE Symptom: OSPF TE is configured but no TE LSAs can be generated to describe MPLS TE attributes. Analysis: For TE LSAs to be generated, at least one OSPF neighbor must reach the FULL state.
  • Page 133 Operation Manual – VPLS H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 VPLS Configuration..................... 1-1 1.1 VPLS Overview........................1-1 1.1.1 Operation of VPLS ....................1-2 1.1.2 VPLS Packet Structure ................... 1-5 1.1.3 H-VPLS Implementation..................1-6 1.2 Configuration Task List ......................
  • Page 134: Chapter 1 Vpls Configuration

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Chapter 1 VPLS Configuration Note: A routing switch running MPLS also provides router functionality. The routers mentioned in this document represent general routers or Layer 3 Ethernet switches running MPLS.
  • Page 135: Operation Of Vpls

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration customers to build their LANs across the metropolitan area network (MAN) or wide area network (WAN). 1.1.1 Operation of VPLS I. Basic VPLS concepts Customer edge device that is directly connected with the service provider network.
  • Page 136 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration A tunnel, usually an MPLS tunnel, is a direct channel between a local PE and the peer PE for transparent data transmission in-between. It is used to carry PWs. A tunnel can carry multiple PWs.
  • Page 137 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Local MAC address learning of interfaces directly connected with users This refers to learning source MAC addresses from Layer 2 packets originated by CEs. This occurs on the corresponding VSI interfaces.
  • Page 138: Vpls Packet Structure

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Remote MAC addresses learned by a PE that are related to VC labels but no more in use need to be aged out by an aging mechanism. The aging mechanism used here is the aging timer corresponding to the MAC address.
  • Page 139: H-Vpls Implementation

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Ethernet access: The Ethernet header of a packet transferred between CE and PE does not contain any service delimiter. If a header contains a VLAN tag, it is the internal VLAN tag of the user and means nothing to the PE.
  • Page 140 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Figure 1-3 H-VPLS LSP access As shown in Figure 1-3, UPE functions as the convergence device MTU-s and establishes a virtual link U-PW with NPE 1 and NPE 2 respectively, where the U-PW established with NPE 2 is blocked.
  • Page 141: Configuration Task List

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration As shown in Figure 1-4, MTU is a standard bridging device and QinQ is enabled on its interfaces connected with CEs. Data forwarding is as follows: Upon receiving a packet from a CE, MTU labels the packet with VLAN tag as the multiplex distinguishing flag, and transparently sends the packet to PE 1 through the QinQ tunnel.
  • Page 142: Configuring The Routing Protocol

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration 1.3 Configuring the Routing Protocol You need to configure some basic routing protocols to make the P and PE devices to be able to exchange routing information. Currently, the available routing protocols are static routing protocol, RIP, OSPF, EBGP, and so on.
  • Page 143: Configuring Mpls L2Vpn

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration 1.7 Configuring MPLS L2VPN You must enable MPLS L2VPN before performing VPLS related configurations. For details about MPLS L2VPN configuration, refer to MPLS L2VPN Configuration. Follow these steps to configure MPLS L2VPN: To do…...
  • Page 144: Configuring A Bgp Vpls Instance

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration You can also specify the peer VC ID, which must be identical to that configured on the peer. The specified remote peer NPEs need to be fully meshed, while between UPEs and NPEs are not.
  • Page 145: Setting The Access Mode And Binding The Vpls Instance

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration In L2VPN implementation, the Kompella mode uses extended BGP as the signaling protocol for transferring VC information. Therefore, the BGP mode is also called the Kompella mode. When configuring a VPLS instance in BGP mode, you must configure BGP as the signaling protocol to be used.
  • Page 146: Configuring Vpls Attributes

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Follow these steps to set the access mode and bind the VPLS instance: To do… Use the command… Remarks Enter system view system-view — interface interface-type Enter interface view —...
  • Page 147: Displaying And Maintaining Vpls

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration To do… Use the command… Remarks Set the maximum number Optional mac-table limit of MAC addresses in the mac-limit-num 128 by default VPLS instance Optional Shut down the VPLS...
  • Page 148: Vpls Configuration Example

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration II. Resetting VPLS To do… Use the command… Remarks reset bgp vpls Reset a specified or all { as-number | ip-address | Available in user view VPLS BGP connections all | external | internal } 1.12 VPLS Configuration Example...
  • Page 149 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE1] mpls lsr-id 1.1.1.9 [PE1] mpls [PE1-mpls] quit [PE1] mpls ldp [PE1-mpls-ldp] quit # Configure to redirect VPLS traffic to the virtual service port that corresponds to the L3+ card.
  • Page 150 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE1-vsi-bbb] pwsignal bgp [PE1-vsi-bbb-bgp] route-distinguisher 100:1 [PE1-vsi-bbb-bgp] vpn-target 111:1 [PE1-vsi-bbb-bgp] site 1 [PE1-vsi-bbb-bgp] quit [PE1-vsi-bbb] quit # Bind VPLS instance aaa to the MPLS-VPLS virtual service interface.
  • Page 151 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE2] interface MPLS-VPLS 0/0/2 [PE2-MPLS-VPLS0/0/2] l2vpn-vpls service binding service-id 1 [PE2-MPLS-VPLS0/0/2] quit # Create VLAN 10 and VLAN-interface 10. [PE2] vlan 10 [PE2-vlan10] port Ethernet 4/1/1 [PE2-vlan10] quit [PE2] interface Vlan-interface 10 [PE2-Vlan-interface10] ip address 10.10.10.11 24...
  • Page 152: Configuration Example For H-Vpls Using Lsp

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE2] interface MPLS-VPLS 0/0/2 [PE2-MPLS-VPLS0/0/2] l2vpn-vpls service binding vsi aaa [PE2-MPLS-VPLS0/0/2] quit # Or, bind VPLS instance bbb to the MPLS-VPLS virtual service interface. [PE2] interface MPLS-VPLS 0/0/2...
  • Page 153 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration NPE 2 and PE are connected through ports Ethernet 4/1/4, which belong to VLAN 40 on NPE 2 and PE respectively. NPE 1 and NPE 2 are connected through ports Ethernet 4/1/5, which belong to VLAN 50 on NPE 1 and NPE 2 respectively.
  • Page 154 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [UPE-vlan10] port Ethernet 4/1/2 [UPE-vlan10] quit [UPE] interface Vlan-interface 10 [UPE-Vlan-interface10] ip address 60.41.41.4 24 [UPE-Vlan-interface10] mpls [UPE-Vlan-interface10] mpls ldp [UPE-Vlan-interface10] quit # Configure the MPLS basic capability on the interface connected with NPE 2.
  • Page 155 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration # Configure MPLS basic capability. <Sysname> system-view [Sysname] sysname NPE1 [NPE1] mpls lsr-id 60.1.1.1 [NPE1] mpls [NPE1–mpls] quit [NPE1] mpls ldp [NPE1–mpls-ldp] quit # Configure to redirect VPLS traffic to the virtual service port that corresponds to the L3+ card.
  • Page 156 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration # Configure MPLS L2VPN. [NPE1] mpls l2vpn # Configure the basic attributes of VPLS instance aaa, which uses LDP. [NPE1] vsi aaa static [NPE1-vsi-aaa] pwsignal ldp [NPE1-vsi-aaa-ldp] vsi-id 500 [NPE1-vsi-aaa-ldp] peer 60.4.4.4 upe...
  • Page 157 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE2] vlan 50 [NPE2-vlan50] port Ethernet 4/1/5 [NPE2-vlan50] quit [NPE2] interface Vlan-interface 50 [NPE2-Vlan-interface50] ip address 60.15.15.3 24 [NPE2-Vlan-interface50] mpls [NPE2-Vlan-interface50] mpls ldp [NPE2-Vlan-interface50] quit # Configure MPLS basic capability on the interface connected with PE.
  • Page 158 Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE–mpls-ldp] quit # Configure to redirect VPLS traffic to the virtual service port that corresponds to the L3+ card. [PE] interface MPLS-VPLS 0/0/2 [PE-MPLS-VPLS0/0/2] l2vpn-vpls service binding service-id 1 [PE-MPLS-VPLS0/0/2] quit # Configure MPLS basic capability on the interface connected with NPE 1.
  • Page 159: Troubleshooting Vpls

    Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE] vlan 100 [PE-vlan100] port Ethernet 4/1/6 [PE-vlan100] quit [PE] interface Vlan-interface 100 [PE-Vlan-interface100] l2 binding vsi aaa [PE-Vlan-interface100] quit After completing the above configurations, you can execute the display vpls connection command on the UPE.
  • Page 160 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS L2VPN Configuration..................1-1 1.1 MPLS L2VPN Overview..................... 1-1 1.1.1 Introduction to MPLS L2VPN .................. 1-2 1.1.2 CCC MPLS L2VPN ....................1-4 1.1.3 SVC MPLS L2VPN....................
  • Page 161: Chapter 1 Mpls L2Vpn Configuration

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Chapter 1 MPLS L2VPN Configuration When configuring MPLS L2VPN, go to these sections for information you are interested MPLS L2VPN Overview Configuring MPLS L2VPN Configuring CCC MPLS L2VPN...
  • Page 162: Introduction To Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Kompella MPLS L2VPN 1.1.1 Introduction to MPLS L2VPN I. Traditional VPN Traditional VPNs based on asynchronous transfer mode (ATM) or frame relay (FR) are quite popular. They share the network infrastructure of carriers. However, they have...
  • Page 163 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration III. Comparison with MPLS L3VPN Compared with MPLS L3VPN, MPLS L2VPN has the following advantages: High scalability: MPLS L2VPN establishes only Layer 2 connections. It does not involve the routing information of users.
  • Page 164: Ccc Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration L2PDU L2PDU PE 1 PE 2 L2PDU L2PDU CE 2 CE 1 1) L2 PDU: Layer 2 protocol data unit 2) T represents tunnel label. V represents VC label. T’ represents swapped tunnel label.
  • Page 165: Svc Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration The most significant advantage of this method is that no label signaling is required for transferring Layer 2 VPN information. As long as MPLS forwarding is supported and service provider networks are interconnected, this method works perfectly.
  • Page 166: Kompella Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Once LDP establishes an LSP between the two PEs and the label exchange and the binding to CE are finished, a VC is set up and ready to transfer Layer 2 data.
  • Page 167: Configuring Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.2 Configuring MPLS L2VPN You can select any of the implementation methods for MPLS L2VPN as needed. However, no matter what method you select, you must complete these two tasks:...
  • Page 168: Configuration Procedure

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration For a local CCC connection: the types and numbers of the incoming and outgoing interfaces For a remote CCC connection: the type and number of the incoming interface, the...
  • Page 169: Configuring Svc Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Caution: You do not need to configure two static LSPs for each remote CCC connection. Instead, you only need to configure the incoming and outgoing labels, where the incoming label must be exclusively for the CCC connection.
  • Page 170: Configuration Prerequisites

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.4.1 Configuration Prerequisites Before configuring SVC MPLS L2VPN, complete these tasks: Configuring IGP on the PEs and P devices to guarantee the IP connectivity of the...
  • Page 171: Configuration Prerequisites

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.5.1 Configuration Prerequisites Before configuring Martini MPLS L2VPN, complete these tasks: Configuring IGP on the PEs and P devices to guarantee the IP connectivity of the...
  • Page 172: Configuring Kompella Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Caution: For an LDP connection, there are two main parameters: one is the IP address of the peer PE, the other is the VC ID. The combination of the VC ID and the encapsulation type must be unique on a PE.
  • Page 173 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration To do… Use the command… Remarks Enter system view system-view — Enter BGP view bgp as-number — Establish the peer peer { group-name | ip-address }...
  • Page 174 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Caution: The mtu command is not recommended. It affects only parameter negotiation, which may occur; it does not affect data forwarding. With Kompella MPLS L2VPN, you must create on the PE an L2VPN instance for each VPN where a directly connected CE resides.
  • Page 175: Displaying And Maintaining Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration usually abundant). This can reduce the configuration modification required when CEs are added in the VPN in future. When you create a CE connection, if you set the default offset value to 1: The CE offset defaults to 1 for the first connection of the CE.
  • Page 176: Resetting Bgp L2Vpn Connections

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration To do… Use the command… Remarks display mpls l2vpn connection Display information about [ vpn-name vpn-name Available in any Kompella MPLS L2VPN [ remote-ce ce-id | down | up |...
  • Page 177 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Note: Since a local CCC connection is bidirectional, one is enough. The PE interfaces connecting the CEs require no IP addresses. II. Network diagram CE B Vlan -int1 100.1.1.2/24...
  • Page 178 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PE-Vlan-interface1] quit # Configure interface VLAN-interface 2. [PE] interface Vlan-interface 2 [PE-Vlan-interface2] quit # Create a local connection between CE A and CE B. [PE] ccc CEA-CEB interface Vlan-interface 1 out-interface Vlan-interface 2 Configure CE B <Sysname>...
  • Page 179: Example For Configuring A Remote Ccc Connection

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.8.2 Example for Configuring a Remote CCC Connection I. Network requirements The CEs are connected to the PEs through VLAN interfaces. A remote CCC connection is created between CE A and CE B.
  • Page 180 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEA] mpls lsr-id 10.0.0.1 [PEA] mpls [PEA-mpls] quit # Enable MPLS L2VPN globally. [PE1-A] mpls l2vpn # Configure interface VLAN-interface 2 and enable MPLS. [PEA] interface Vlan-interface 2 [PEA-Vlan-interface2] ip address 10.1.1.1 24...
  • Page 181: Configure Ospf

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [P-Vlan-interface2] ip address 10.2.2.2 24 [P-Vlan-interface2] mpls [P-Vlan-interface2] quit # Configure OSPF. [P] ospf [P-ospf-1] area 0 [P-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255 [P-ospf-1-area-0.0.0.0] network 10.2.2.0 0.0.0.255 [P-ospf-1-area-0.0.0.0] network 10.0.0.2 0.0.0.0...
  • Page 182 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEB] ospf [PEB-ospf-1] area 0 [PEB-ospf-1-area-0.0.0.0] network 10.2.2.0 0.0.0.255 [PEB-ospf-1-area-0.0.0.0] network 10.0.0.3 0.0.0.0 # Create a remote connection from CE B to CE A, using the interface connecting CE B as the incoming interface and that connecting the P device as the outgoing interface, setting the incoming label to 201 and the outgoing label to 101.
  • Page 183: Example For Configuring Svc Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 10/76/180 ms # On CE B, ping interface 100.1.1.1 of CE A. (Omitted) 1.8.3 Example for Configuring SVC MPLS L2VPN I.
  • Page 184 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [CEA] interface Vlan-interface 1 [CEA-Vlan-interface1] ip address 100.1.1.1 24 Configure PE A. <Sysname> system-view [Sysname] sysname PEA [PEA] interface Loopback 0 [PEA-LoopBack0] ip address 192.2.2.2 32 [PEA-LoopBack0] quit # Configure the LSR ID and enable MPLS globally.
  • Page 185 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration <Sysname> system-view [Sysname] sysname P [P] interface Loopback 0 [P-LoopBack0] ip address 192.4.4.4 32 [P-LoopBack0] quit # Configure the LSR ID and enable MPLS globally.
  • Page 186 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEB] interface Loopback 0 [PEB-LoopBack0] ip address 192.3.3.3 32 [PEB-LoopBack0] quit # Configure the LSR ID and enable MPLS globally. [PEB] mpls lsr-id 192.3.3.3 [PEB] mpls # Configure the LSP establishment triggering policy.
  • Page 187: Example For Configuring Martini Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration After completing the above configurations, you can display SVC L2VPN connection information on PE A or PE B. There should be one L2VPN connection established. CE A should be able to ping interface 100.1.1.2 of CE B and CE B should be able to ping...
  • Page 188 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration II. Network diagram Device Interface IP address Device Interface IP address CE A Vlan-int10 100.1.1.1/24 Loop0 192.4.4.4/32 PE A Loop0 192.2.2.2/32 Vlan-int12 10.1.1.2/24 Vlan-int12 10.1.1.1/24 Vlan-int23 10.2.2.2/24...
  • Page 189 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEA] mpls ldp [PEA-mpls-ldp] quit # Establish a remote session between PE A and PE B. [PEA] mpls ldp remote-peer 1 [PEA-mpls-ldp-remote-1] remote-ip 192.3.3.3 [PEA-mpls-ldp-remote-1] quit # Configure the interface connected with the P device, namely VLAN-interface 12, and enable LDP on the interface.
  • Page 190 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration # Configure the LSP establishment triggering policy. [P-mpls] lsp-trigger all [P-mpls] quit # Enable LDP globally. [P] mpls ldp [P-mpls-ldp] quit # Configure the interface connected with PE A, namely VLAN-interface 12, and enable LDP on the interface.
  • Page 191 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration # Configure the LSR ID and enable MPLS globally. [PEB] mpls lsr-id 192.3.3.3 [PEB] mpls # Configure the LSP establishment triggering policy. [PEB-mpls] lsp-trigger all [PEB-mpls] quit # Enable MPLS L2VPN and LDP globally.
  • Page 192 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Configure CE B. <Sysname> system-view [Sysname] sysname CEB [CEB] vlan 10 [CEB-vlan10] port Ethernet 4/1/2 [CEB-vlan10] quit [CEB] interface Vlan-interface 10 [CEB-Vlan-interface10] ip address 100.1.1.2 24...
  • Page 193: Example For Configuring Kompella Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration # On CE B, ping interface 100.1.1.1 of CE A. (Omitted) 1.8.5 Example for Configuring Kompella MPLS L2VPN I. Configuration prerequisites CE A and CE B are respectively connected to PE A and PE B through VLAN interfaces.
  • Page 194 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration The detailed configuration steps are omitted. After configuration, you can issue the display mpls ldp session and display mpls ldp peer commands to view the LDP sessions and peer relationship established, or the display mpls lsp command to view the LSPs established.
  • Page 195 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEA-mpls-l2vpn-vpn1] route-distinguisher 100:1 [PEA-mpls-l2vpn-vpn1] vpn-target 1:1 [PEA-mpls-l2vpn-vpn1] ce ce1 id 1 range 10 [PEA-mpls-l2vpn-ce-vpn1-ce1] connection ce-offset 2 interface vlan-interface [PEA-mpls-l2vpn-ce-vpn1-ce1] quit [PEA-mpls-l2vpn-vpn1] quit # Configure PE B.
  • Page 196: Example For Configuring A Kompella Local Connection

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration round-trip min/avg/max = 34/68/94 ms 1.8.6 Example for Configuring a Kompella Local Connection I. Network requirements A Kompella local connection is required between CE A and CE B.
  • Page 197 Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration After completing the above configurations, you can issue the display mpls l2vpn connection command on the PE. You should see that an L2VPN connection is established and is in the state of up.
  • Page 198: Troubleshooting Mpls L2Vpn

    Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.9 Troubleshooting MPLS L2VPN Symptom 1: After the L2VPN configuration, the peer PEs cannot ping each other. The output of the display mpls l2vc command shows that the VC is down and the remote VC label is invalid.
  • Page 199 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS L3VPN Configuration..................1-1 1.1 MPLS L3VPN Overview..................... 1-1 1.1.1 Introduction to MPLS L3VPN .................. 1-2 1.1.2 MPLS L3VPN Concepts..................1-3 1.1.3 MPLS L3VPN Packet Forwarding ................1-6 1.1.4 MPLS L3VPN Networking Schemes ...............
  • Page 200 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Table of Contents 1.8.1 Configuration Prerequisites................... 1-46 1.8.2 Configuration Procedure ..................1-46 1.9 Configuring BGP AS Number Substitution ..............1-47 1.9.1 Configuration Prerequisites................... 1-47 1.9.2 Configuration Procedure ..................1-47 1.10 Displaying and Maintaining MPLS L3VPN ..............1-47 1.10.1 Resetting BGP Connections ................
  • Page 201: Chapter 1 Mpls L3Vpn Configuration

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Chapter 1 MPLS L3VPN Configuration When configuring MPLS L3VPN, go to these sections for information you are interested MPLS L3VPN Overview MPLS L3VPN Configuration Task List...
  • Page 202: Introduction To Mpls L3Vpn

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.1.1 Introduction to MPLS L3VPN MPLS L3VPN is a kind of PE-based L3VPN technology for service provider VPN solutions. It uses BGP to advertise VPN routes and uses MPLS to forward VPN packets on service provider backbones.
  • Page 203: Mpls L3Vpn Concepts

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration that are directly connected, rather than all VPN routing information on the provider network. A P device maintains only routes to PEs. It does not need to know anything about VPN routing information.
  • Page 204 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration instance. The administration information of the VPN instance includes the route distinguisher (RD), route filtering policy, and member interface list. IV. VPN-IPv4 address Traditional BGP cannot process VPN routes which have overlapping address spaces. If, for example, both VPN 1 and VPN 2 use addresses on the segment 10.110.10.0/24 and...
  • Page 205 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration For the global uniqueness of an RD, you are not recommended to set the Administrator subfield to any private AS number or private IP address.
  • Page 206: Mpls L3Vpn Packet Forwarding

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration VIII. Tunneling policy A tunneling policy is used to select the tunnel for the packets of a specific VPN instance to use. After a VPN instance is created, you can optionally configure a tunneling policy. By default, LSPs are used as tunnels and no load balancing occurs (in other words, the number of tunnels for load balancing is 1).
  • Page 207: Mpls L3Vpn Networking Schemes

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration PE 2 searches VPN instance entries according to the inner label and destination address of the packet to determine the outbound interface and then forwards the packet out the interface to CE 2.
  • Page 208 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration networking scheme can be used to implement the monitoring and filtering of user communications. This networking scheme requires two VPN targets: one for the "hub" and the other for the "spoke".
  • Page 209: Mpls L3Vpn Routing Information Advertisement

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration In this kind of networking scheme, if a VPN needs to access a shared site, the export target attribute and the import target attribute of the VPN must be contained respectively in the import target attribute and the export target attribute of the VPN instance of the shared site.
  • Page 210: Carrier's Carrier

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Then, a route is available between the local CE and the remote CE, and the VPN routing information can be advertised on the backbone. The following describes these phases in detail.
  • Page 211 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Implementation of carrier’s carrier Compared to the common MPLS L3VPN, the carrier’s carrier is different mainly because a CE of a Level 2 carrier accesses a PE of the Level 1 carrier: If the PE of the Level 1 carrier and the CE of the Level 2 carrier are in a same AS, configure IGP and LDP between them.
  • Page 212: Multi-As Vpn

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Figure 1-8 Scenario where the Level 2 carrier is an MPLS L3VPN service provider Note: On an S9500 Series routing switch, an LPU with a suffix of C does not support the carrier’s carrier feature.
  • Page 213 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration The PEs acting as ASBRs are connected through multiple VLAN interfaces. Each of them treats the other as a CE of its own and advertises IPv4 routes through conventional EBGP.
  • Page 214 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration VPN 1 VPN 1 CE 1 CE 3 PE 1 PE 3 ASBR 2 ASBR 1 MPLS backbone MPLS backbone MP-EBGP (PE) (PE) AS 100...
  • Page 215: Hovpn

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Figure 1-11 Network diagram for inter-provider VPN option C To improve the scalability, you can specify an RR in each AS, making it maintain all VPN-IPv4 routes and exchange VPN-IPv4 routes with PEs in the AS.
  • Page 216 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration User access. This means that the PEs must have a large amount of interfaces. VPN route managing and advertising, and user packet processing. These require that a PE must have a large-capacity memory and high forwarding capability.
  • Page 217 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration As shown in Figure 1-13, devices directly connected to CEs are called underlayer PEs (UPEs) or user-end PEs, whereas devices that are connected with UPEs and are in the internal network are called superstratum PEs (SPE) or service provider-end PEs.
  • Page 218 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Recursion and extension of HoVPN HoVPN supports HoPE recursion: A HoPE can act as a UPE to form a new HoPE with an SPE. A HoPE can act as an SPE to form a new HoPE with multiple UPEs.
  • Page 219: Ospf Vpn Extension

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.1.9 OSPF VPN Extension Note: This section focuses on the OSPF VPN extension. For more information about OSPF, refer to the OSPF Configuration. I. OSPF multi-instance on PE OSPF is a prevalent IGP protocol.
  • Page 220 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration can exchange OSPF routing information as they are using dedicated lines. This improves the network management and makes OSPF applications more effective. As shown in...
  • Page 221 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To avoid routing loops, when creating Type 3 LSAs, the PE always sets the flag bit DN for BGP VPN routes learnt from MPLS/BGP, regardless of whether the PE and the CEs are connected through the OSPF backbone.
  • Page 222: Bgp As Number Substitution

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration A sham link can be configured in any area. You need to configure it manually. In addition, the local VPN instance must have a route to the destination of the sham link.
  • Page 223: Mpls L3Vpn Configuration Task List

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration CE 3 AS 800 AS 100 PE 1 PE 2 MPLS backbone EBGP_Update:10.1.1.1/32 EBGP_Update:10.1.1.1/32 VPNv4_Update:10.1.0.0/16 AS_PATH:100,100 AS_PATH:800 RD:10.1.1.1/32 AS_PATH:800 CE 1 CE 2 AS 800...
  • Page 224: Configuring Vpn Instances

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Task Remarks Optional Configuring BGP AS Number Substitution Configure it as needed 1.3 Configuring VPN Instances VPN instances are used to isolate VPN routes from public network routes. Configuring VPN instances is required in all MPLS L3VPN networking schemes.
  • Page 225: Configuring Route Related Attributes Of A Vpn Instance

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Follow these steps to associate a VPN instance with an interface: To do… Use the command… Remarks — Enter system view system-view interface interface-type —...
  • Page 226: Configuring A Tunneling Policy Of A Vpn Instance

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Optional By default, all routes Specify the import routing import route-policy permitted by the import policy for the current VPN...
  • Page 227: Configuring Basic Mpls L3Vpn

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: When configuring tunnel priorities using the tunnel select-seq command, the tunnel type closer to the select-seq keyword has a higher priority. II. Associating a tunneling policy with the VPN instance Follow these steps to associate a tunneling policy with the VPN instance: To do…...
  • Page 228: Configuration Prerequisites

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.4.1 Configuration Prerequisites Before configuring basic MPLS L3VPN, complete these tasks: Configure IGP for the MPLS backbone (PEs and Ps) to achieve IP connectivity Configure MPLS basic capability for the MPLS backbone (PEs and Ps)
  • Page 229 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks — Enter system view system-view ip route-static dest-address { mask | mask-length } { gateway-address | interface-type interface-number [ gateway-address ] | vpn-instance...
  • Page 230 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration III. Configuring OSPF between PE and CE An OSPF process that is bound to a VPN instance does not use the public network router ID configured in system view. Therefore, you need to specify the router ID when starting a process or to configure the IP address for at least one interface of the VPN instance.
  • Page 231 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: For description and detailed configuration about OSPF, refer to OSPF Configuration in IP Routing Volume. The configuration change made by the domain-id domain-id [ secondary ] command does not take effect immediately.
  • Page 232 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Required A PE needs to inject the routes of import-route protocol Inject the routes of the the local CEs into...
  • Page 233: Configuring Route Advertisement Between Pes

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Optional import-route protocol A CE needs to advertise Configure the route [ process-id ] [ med its routes to the connected...
  • Page 234: Configuring Routing Features For Bgp Vpnv4 Subaddress Family

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.4.5 Configuring Routing Features for BGP VPNv4 Subaddress Family With BGP VPNv4 subaddress family, there are a variety of routing features that are the same as those for BGP IPv4 unicast routing. You can select any of the features as required.
  • Page 235 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Configure the system to use the local address as peer { group-name | the next hop of a route to...
  • Page 236 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Enter BGP-VPNv4 — ipv4-family vpnv4 subaddress family view Optional Set the default value of default local-preference the local preference...
  • Page 237: Configuring Inter-Provider Vpn

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Optional Make BGP updates to be peer { group-name | By default, a BGP update sent carry no private AS...
  • Page 238: Configuring Inter-Provider Vpn Option A

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.5.2 Configuring Inter-Provider VPN Option A Inter-provider VPN option A applies to scenarios where the number of VPNs and that of VPN routes on the PEs are relatively small. It is simple to implement.
  • Page 239: Configuring Inter-Provider Vpn Option C

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Required By default, PE performs VPN target filtering of the Disable VPN target received VPNv4 routes. undo policy vpn-target...
  • Page 240 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration The PEs and ASBR PEs in an AS must be able to exchange labeled IPv4 routes. Follow these steps to configure a PE for inter-provider VPN option C: To do…...
  • Page 241 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration distribute the route itself. This capability is implemented through BGP extended attributes and requires that the BGP peers can handle labeled IPv4 routes. Follow these steps to configure an ASBR PE for inter-provider VPN option C: To do…...
  • Page 242 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Which IPv4 routes are to be assigned with MPLS labels depends on the routing policy. Only routes that satisfy the criteria are assigned with labels. All the other routes are still common IPv4 routes.
  • Page 243: Configuring Hovpn

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: When configuring a routing policy for inter-provider VPN option C, you are recommended to configure the destination IP address match criteria of the routing information to avoid possible conflicts with common IPv4 address families.
  • Page 244: Configuring Ospf Sham Link

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: The default routes of a VPN instance can be advertised to only a BGP peer or peer group that is UPE. It is not recommended for an SPE to be connected to a CE directly. If an SPE must be directly connected with a CE, the VPN instance on the SPE and that on the UPE must be configured with different RDs.
  • Page 245: Configuring A Sham Link

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks — Enter system view system-view Enter BGP view Required bgp as-number ipv4-family Enter BGP VPN instance vpn-instance Required view...
  • Page 246: Configuring Multi-Vpn-Instance Ce

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: If you start OSPF but do not configure the router ID, the system will automatically elect one. However, the same election rules produce the same router ID. Therefore, you are recommended to configure the router ID when starting an OSPF process.
  • Page 247: Configuring Bgp As Number Substitution

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks — Enter system view system-view ospf [ process-id | Enter OSPF router-id router-id | Required multi-instance view vpn-instance vpn-instance-name ] *...
  • Page 248: Displaying And Maintaining Mpls L3Vpn

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks refresh bgp vpn-instance Perform a soft reset of the vpn-instance-name { ip-address | Available in user BGP connections in a...
  • Page 249 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Display information about BGP VPNv4 display bgp vpnv4 { all | | vpn-instance Available in routes injected into vpn-instance-name } network...
  • Page 250: Mpls L3Vpn Configuration Example

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks display bgp vpnv4 vpn-instance vpn-instance-name routing-table [ network-address [ { mask-length | mask-address } [ longer-prefixes ] ] |...
  • Page 251 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration The PEs and P device are switches that support MPLS, while the CEs are common Layer 3 switches. II. Network diagram Device Interface IP address...
  • Page 252 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure the P device. [P] interface loopback 0 [P-LoopBack0] ip address 2.2.2.9 32 [P-LoopBack0] quit [P] interface vlan-interface 3 [P-Vlan-interface3] ip address 172.1.1.2 24...
  • Page 253 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 3.3.3.9/32 OSPF 172.1.1.2 Vlan3 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 172.1.1.0/24 Direct 0 172.1.1.1 Vlan3 172.1.1.1/32 Direct 0 127.0.0.1 InLoop0 172.2.1.0/24 OSPF 172.1.1.2...
  • Page 254 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE2] mpls [PE2-mpls] quit [PE2] mpls ldp [PE2-mpls-ldp] quit [PE2] interface vlan-interface 1 [PE2-Vlan-interface1] mpls [PE2-Vlan-interface1] mpls ldp [PE2-Vlan-interface1] quit After you complete the above configurations, LDP sessions should be established between PE 1, P, and PE 2.
  • Page 255 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-vpn-instance-vpnb] vpn-target 222:2 [PE1-vpn-instance-vpnb] quit [PE1] interface vlan-interface 1 [PE1-Vlan-interface1] ip binding vpn-instance vpna [PE1-Vlan-interface1] ip address 10.1.1.2 24 [PE1-Vlan-interface1] quit [PE1] interface vlan-interface 2 [PE1-Vlan-interface2] ip binding vpn-instance vpnb [PE1-Vlan-interface2] ip address 10.2.1.2 24...
  • Page 256 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Reply from 10.1.1.1: bytes=56 Sequence=2 ttl=255 time=4 ms Reply from 10.1.1.1: bytes=56 Sequence=3 ttl=255 time=4 ms Reply from 10.1.1.1: bytes=56 Sequence=4 ttl=255 time=52 ms Reply from 10.1.1.1: bytes=56 Sequence=5 ttl=255 time=3 ms --- 10.1.1.1 ping statistics ---...
  • Page 257 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration After completing the above configuration, if you issue the display bgp vpnv4 vpn-instance peer command on the PEs, you should see that BGP peer relationship has been established between PE and CE, and has reached the state of Established.
  • Page 258 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Routing Tables: vpna Destinations : 3 Routes : 3 Destination/Mask Proto Cost NextHop Interface 10.1.1.0/24 Direct 0 10.1.1.2 Vlan1 10.1.1.2/32 Direct 0 127.0.0.1 InLoop0 10.3.1.0/24 3.3.3.9...
  • Page 259: Example For Configuring Inter-Provider Vpn Option A

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.11.2 Example for Configuring Inter-Provider VPN Option A I. Network requirements CE 1 and CE 2 belong to the same VPN. CE 1 accesses the network through PE 1 in AS 100 and CE 2 accesses the network through PE 2 in AS 200.
  • Page 260 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration After you complete the above configurations, each ASBR PE and the PE in the same AS should be able to establish OSPF adjacencies. Issuing the display ospf peer command, you can see that the adjacencies reach the state of Full, and that PEs can learn the loopback addresses of each other.
  • Page 261 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure MPLS basic capability on PE 2 and enable MPLS LDP on the interface connected to ASBR PE 2. [PE2] mpls lsr-id 4.4.4.9 [PE2] mpls...
  • Page 262 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure PE 2. [PE2] ip vpn-instance vpna [PE2-vpn-instance] route-distinguisher 200:2 [PE2-vpn-instance] vpn-target 100:1 both [PE2-vpn-instance] quit [PE2] interface Vlan-interface 1 [PE2-Vlan-interface1] ip binding vpn-instance vpna [PE2-Vlan-interface1] ip address 10.2.1.2 24...
  • Page 263 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [CE1-bgp] import-route direct [CE1-bgp] import-route static [CE1-bgp] quit # Configure PE 1. [PE1] bgp 100 [PE1-bgp] ipv4-family vpn-instance vpna [PE1-bgp-vpna] peer 10.1.1.1 as-number 65001 [PE1-bgp-vpna] import-route direct...
  • Page 264: Example For Configuring Inter-Provider Vpn Option B

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [ASBR-PE1-bgp] peer 1.1.1.9 connect-interface loopback 0 [ASBR-PE1-bgp] ipv4-family vpnv4 [ASBR-PE1-bgp-af-vpnv4] peer 1.1.1.9 enable [ASBR-PE1-bgp-af-vpnv4] peer 1.1.1.9 next-hop-local [ASBR-PE1-bgp-af-vpnv4] quit [ASBR-PE1-bgp] quit # Configure ASBR PE 2.
  • Page 265 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration ASBR-PEs do not perform VPN target filtering of received VPN-IPv4 routes. II. Network diagram MPLS backbone Loop1 Loop1 MPLS backbone AS 100 AS 200 Vlan-int2...
  • Page 266 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1] interface vlan-interface 2 [PE1-Vlan-interface2] ip address 1.1.1.2 255.0.0.0 [PE1-Vlan-interface2] isis enable 1 [PE1-Vlan-interface2] mpls [PE1-Vlan-interface2] mpls ldp [PE1-Vlan-interface2] quit # Configure interface loopback1 and start IS-IS on it.
  • Page 267 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [ASBR-PE1] isis 1 [ASBR-PE1-isis-1] network-entity 10.222.222.222.222.00 [ASBR-PE1-isis-1] quit # Configure LSR ID, enable MPLS and LDP. [ASBR-PE1] mpls lsr-id 3.3.3.9 [ASBR-PE1] mpls [ASBR-PE1-mpls] quit [ASBR-PE1] mpls ldp...
  • Page 268 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [ASBR-PE1-bgp-af-vpnv4] quit Configure ASBR-PE 2 <Sysname> system-view [Sysname] sysname ASBR-PE2 # Start IS-IS on ASBR-PE 2. [ASBR-PE2] isis 1 [ASBR-PE2-isis-1] network-entity 10.222.222.222.222.00 [ASBR-PE2-isis-1] quit # Configure LSR ID, enable MPLS and LDP.
  • Page 269 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [ASBR-PE2-bgp] ipv4-family vpnv4 [ASBR-PE2-bgp-af-vpnv4] undo policy vpn-target # Configure both IBGP peer 5.5.5.9 and EBGP peer 11.0.0.2 as VPNv4 peers. [ASBR-PE2-bgp-af-vpnv4] peer 11.0.0.2 enable [ASBR-PE2-bgp-af-vpnv4] peer 5.5.5.9 enable...
  • Page 270: Example For Configuring Inter-Provider Vpn Option C

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Bind the interface connected with CE 2 to the created VPN instance. [PE2] interface vlan-interface 1 [PE2-Vlan-interface1] ip binding vpn-instance vpn1 [PE2-Vlan-interface1] ip address 20.0.0.1 8 [PE2-Vlan-interface1] quit # Start BGP on PE 2.
  • Page 271 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram Device Interface IP address Device Interface IP address PE 1 Loop1 2.2.2.9/32 PE 2 Loop1 5.5.5.9/32 Loop6 30.0.0.1/32 Loop6 20.0.0.1/32 Vlan-int1 1.1.1.2/8 Vlan-int1 9.1.1.2/8...
  • Page 272 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure interface loopback1 and start IS-IS on it. [PE1] interface loopback 1 [PE1-LoopBack1] ip address 2.2.2.9 32 [PE1-LoopBack1] isis enable 1 [PE1-LoopBack1] quit # Create VPN instance vpn1 and configure the RD and VPN target attributes.
  • Page 273 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Start IS-IS on ASBR-PE 1. <ASBR-PE1> system-view [ASBR-PE1] isis 1 [ASBR-PE1-isis-1] network-entity 10.222.222.222.222.00 [ASBR-PE1-isis-1] quit # Configure LSR ID, enable MPLS and LDP. [ASBR-PE1] mpls lsr-id 3.3.3.9...
  • Page 274 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Start BGP on ASBR-PE 1 and specify to inject routes of IS-IS process 1. [ASBR-PE1] bgp 100 [ASBR-PE1-bgp] import-route isis 1 # Configure the capability to advertise labeled routes to IBGP peer 2.2.2.9 and to receive labeled routes from the peer.
  • Page 275 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure interface loopback1 and start IS-IS on it. [ASBR-PE2] interface loopback 1 [ASBR-PE2-LoopBack1] ip address 4.4.4.9 32 [ASBR-PE2-LoopBack1] isis enable 1 [ASBR-PE2-LoopBack1] quit # Configure interface VLAN-interface 2 and enable MPLS on it.
  • Page 276 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration <Sysname> system-view [Sysname] sysname PE2 # Start IS-IS on PE 2. [PE2] isis 1 [PE2-isis-1] network-entity 10.111.111.111.111.00 [PE2-isis-1] quit # Configure LSR ID, enable MPLS and LDP.
  • Page 277: Example For Configuring Carrier's Carrier

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure the capability to advertise labeled routes to IBGP peer 4.4.4.9 and to receive labeled routes from the peer. [PE2-bgp] peer 4.4.4.9 as-number 600 [PE2-bgp] peer 4.4.4.9 connect-interface loopback 1...
  • Page 278 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration The exchange of customer VPN routes of the Level 2 carrier between PEs of the Level 2 carrier. In this process, MP-IBGP peer relationship must be established between the PEs of the Level 2 carrier (that is, between PE 3 and PE 4).
  • Page 279 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [Sysname] sysname PE1 [PE1] interface loopback 1 [PE1-LoopBack1] ip address 3.3.3.9 32 [PE1-LoopBack1] quit [PE1] mpls lsr-id 3.3.3.9 [PE1] mpls [PE1-mpls] quit [PE1] mpls ldp...
  • Page 280 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1] display mpls ldp session LDP Session(s) in Public Network Total number of sessions: 1 ---------------------------------------------------------------- Peer-ID Status SsnRole KA-Sent/Rcv ---------------------------------------------------------------- 4.4.4.9:0 Operational Active 378/378...
  • Page 281 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE3] interface loopback 1 [PE3-LoopBack1] isis enable 2 [PE3-LoopBack1] quit [PE3] interface vlan-interface 2 [PE3-Vlan-interface2] ip address 10.1.1.1 24 [PE3-Vlan-interface2] isis enable 2 [PE3-Vlan-interface2] mpls...
  • Page 282 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: The configurations for PE 4 and CE 2 are similar to those for PE 3 and CE 1. The detailed configuration steps are omitted.
  • Page 283 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: The configurations for PE 2 and CE 2 are similar to those for PE 1 and CE 1. The detailed configuration steps are omitted.
  • Page 284 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure PE 3. [PE3] bgp 100 [PE3-bgp] peer 6.6.6.9 as-number 100 [PE3-bgp] peer 6.6.6.9 connect-interface loopback 1 [PE3-bgp] ipv4-family vpnv4 [PE3-bgp-af-vpnv4] peer 6.6.6.9 enable...
  • Page 285 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 5.5.5.9/32 4.4.4.9 NULL0 6.6.6.9/32 4.4.4.9 NULL0 10.1.1.0/24 ISIS 11.1.1.1 Vlan1 11.1.1.0/24 Direct 0 11.1.1.1 Vlan1 11.1.1.1/32 Direct 0 127.0.0.1 InLoop0 11.1.1.2/32 Direct 0 11.1.1.2 Vlan1 20.1.1.0/24...
  • Page 286 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 5.5.5.9/32 ISIS 10.1.1.2 Vlan2 6.6.6.9/32 ISIS 10.1.1.2 Vlan2 10.1.1.0/24 Direct 0 10.1.1.1 Vlan2 10.1.1.1/32 Direct 0 127.0.0.1 InLoop0 10.1.1.2/32 Direct 0 10.1.1.2 Vlan2 11.1.1.0/24 ISIS 10.1.1.2...
  • Page 287: Example For Configuring Hovpn

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Reply from 120.1.1.1: bytes=56 Sequence=4 ttl=252 time=88 ms Reply from 120.1.1.1: bytes=56 Sequence=5 ttl=252 time=87 ms --- 120.1.1.1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss...
  • Page 288 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration III. Configuration procedure Configure UPE 1 <Sysname> system-view [Sysname] sysname UPE1 [UPE1] interface loopback 1 [UPE1-LoopBack1] ip address 1.1.1.9 32 [UPE1-LoopBack1] quit [UPE1] mpls lsr-id 1.1.1.9...
  • Page 289 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [UPE1-bgp] ipv4-family vpnv4 [UPE1-bgp-af-vpnv4] peer 2.2.2.9 enable [UPE1-bgp-af-vpnv4] quit [UPE1-bgp] ipv4-family vpn-instance vpn1 [UPE1-bgp-vpn1] peer 10.2.1.1 as-number 65410 [UPE1-bgp-vpn1] import-route direct [UPE1-bgp-vpn1] quit [UPE1-bgp] ipv4-family vpn-instance vpn2 [UPE1-bgp-vpn1] peer 10.4.1.1 as-number 65420...
  • Page 290 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [UPE2] interface vlan-interface 1 [UPE2-Vlan-interface1] ip address 172.2.1.1 24 [UPE2-Vlan-interface1] mpls [UPE2-Vlan-interface1] mpls ldp [UPE2-Vlan-interface1] quit [UPE2] ospf [UPE2-ospf-1] area 0 [UPE2-ospf-1-area-0.0.0.0] network 172.2.1.0 0.0.0.255 [UPE2-ospf-1-area-0.0.0.0] network 4.4.4.9 0.0.0.0...
  • Page 291 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Configure CE 3 <Sysname> system-view [Sysname] sysname CE3 [CE3] interface vlan-interface 1 [CE3-Vlan-interface1] ip address 10.1.1.1 255.255.255.0 [CE3-Vlan-interface1] quit [CE3] bgp 65430 [CE3-bgp] peer 10.1.1.2 as-number 100...
  • Page 292 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [SPE1-ospf-1-area-0.0.0.0] network 2.2.2.9 0.0.0.0 [SPE1-ospf-1-area-0.0.0.0] network 172.1.1.0 0.0.0.255 [SPE1-ospf-1-area-0.0.0.0] network 180.1.1.0 0.0.0.255 [SPE1-ospf-1-area-0.0.0.0] quit [SPE1-ospf-1] quit [SPE1] ip vpn-instance vpna [SPE1-vpn-instance-vpna] route-distinguisher 500:1 [SPE1-vpn-instance-vpna] vpn-target 100:1 both...
  • Page 293 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [SPE2-Vlan-interface2] ip address 180.1.1.2 24 [SPE2-Vlan-interface2] mpls [SPE2-Vlan-interface2] mpls ldp [SPE2-Vlan-interface2] quit [SPE2] interface vlan-interface 1 [SPE2-Vlan-interface1] ip address 172.2.1.2 24 [SPE2-Vlan-interface1] mpls [SPE2-Vlan-interface1] mpls ldp...
  • Page 294: Example For Configuring Ospf Sham Links

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [SPE2-bgp-vpnb] quit [SPE2-bgp] quit 1.11.7 Example for Configuring OSPF Sham Links I. Network requirements CE 1 and CE 2 belong to VPN 1 and are respectively connected to PE 1 and PE 2.
  • Page 295 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Destination/Mask Proto Cost NextHop Interface 20.1.1.0/24 Direct 0 20.1.1.1 Vlan2 20.1.1.1/32 Direct 0 127.0.0.1 InLoop0 20.1.1.2/32 Direct 0 20.1.1.2 Vlan2 30.1.1.0/24 OSPF 3124 20.1.1.2 Vlan2 100.1.1.0/24...
  • Page 296 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-ospf-1] quit # Configure MPLS basic capability and MPLS LDP on PE 2 to establish LDP LSPs. <Sysname> system-view [Sysname] sysname PE2 [PE2] interface loopback 1 [PE2-LoopBack1] ip address 2.2.2.9 32...
  • Page 297 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-Vlan-interface1] ip address 100.1.1.2 24 [PE1-Vlan-interface1] quit [PE1] ospf 100 vpn-instance vpn1 [PE1-ospf-100] domain-id 10 [PE1-ospf-100] area 1 [PE1-ospf-100-area-0.0.0.1] network 100.1.1.0 0.0.0.255 [PE1-ospf-100-area-0.0.0.1] quit [PE1-ospf-100] quit...
  • Page 298 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 20.1.1.0/24 OSPF 1563 100.1.1.1 Vlan1 30.1.1.0/24 OSPF 3125 100.1.1.1 Vlan1 100.1.1.0/24 Direct 0 100.1.1.2 Vlan1 100.1.1.2/32 Direct 0 127.0.0.1 InLoop0 120.1.1.0/24 OSPF 3126 100.1.1.1 Vlan1 Configure a sham link # Configure PE 1.
  • Page 299: Example For Configuring Bgp As Number Substitution

    Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Issuing the display ip routing-table command on the CEs, you should see that the cost of the OSPF route to the peer CE is now 10 (the cost configured for the sham link), and that the next hop is now the VLAN interface 1 connected to the PE.
  • Page 300 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram MPLS backbone Loop1 Vlan-int1 Vlan-int2 Loop1 Loop1 Vlan-int2 Vlan-int1 Vlan-int1 Vlan-int2 PE 1 PE 2 CE 1 CE 2 Vlan-int1 Vlan-int1 VPN 1...
  • Page 301 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [CE2] display ip routing-table Routing Tables: Public Destinations : 8 Routes : 8 Destination/Mask Proto Cost NextHop Interface 10.1.1.0/24 10.2.1.2 Vlan1 10.1.1.1/32 10.2.1.2 Vlan1 10.2.1.0/24 Direct 0 10.2.1.1...
  • Page 302 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Total Number of Routes: 4 BGP Local router ID is 10.2.1.1 Status codes: * - valid, > - best, d - damped, h - history,...
  • Page 303 Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 10.1.1.1/32 10.2.1.2 Vlan1 10.2.1.0/24 Direct 0 10.2.1.1 Vlan1 10.2.1.1/32 Direct 0 127.0.0.1 InLoop0 10.2.1.2/32 Direct 0 10.2.1.2 Vlan1 100.1.1.1/32 10.2.1.2 Vlan1 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32...
  • Page 304 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS Hybrid Insertion Configuration ............... 1-1 1.1 Overview of MPLS Hybrid Insertion................... 1-1 1.1.1 Introduction to Hybrid Insertion ................1-1 1.1.2 Classification of Hybrid Insertion................1-2 1.2 Configuring Hybrid Insertion Based on LPUs with a Suffix of C, CA, or CB......
  • Page 305: Chapter 1 Mpls Hybrid Insertion Configuration

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Chapter 1 MPLS Hybrid Insertion Configuration When configuring MPLS hybrid insertion, go to these sections for information you are interested in: Overview of MPLS Hybrid Insertion...
  • Page 306: Configuring Hybrid Insertion Based On Lpus With A Suffix Of C, Ca, Or Cb

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration without changing the original networking. To meet this requirement, LPUs supporting MPLS must be configured to redirect the MPLS service to the MPLS SPUs for service processing.
  • Page 307: Configuring Mpls Service Loopback Group

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration II. Configuring MPLS service redirection at private network side Redirect the MPLS service at the private network side to the service loopback group with the MPLS processing capability.
  • Page 308: Configuring Hybrid Insertion Based On L3+ Spus

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration To do... Use the command... Remarks redirect { cpu | interface interface-type interface-number | next-hop { ipv4-add [ ipv4-add ] | Configure the traffic...
  • Page 309: Configuring Vpls Service Redirection At Public Network Side

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Note: The MPLS service here refers to the service processed by the device that functions as a P device. It does not include the L3VPN or VLL services on the PE.
  • Page 310: Configuring Backup Interface For Virtual Service Interface

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Note: For configuration of VPLS instance, refer to VPLS Configuration. II. Binding VPLS virtual service interface with VPLS instance By binding the MPLS-VPLS virtual service interface with the VPLS instance, the load can be shared among virtual service interfaces on the L3+ board.
  • Page 311: Displaying And Maintaining Hybrid Insertion Configuration

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration 1.3.5 Displaying and Maintaining Hybrid Insertion Configuration To do... Use the command... Remarks display Display the current Available in any view current-configuration configuration...
  • Page 312 CE 1 and CE 3 constitute VPN A. CE 2 and CE 4 constitute VPN B. PE 1 and PE 2 are H3C S9500 series routing switches that support the MPLS function. CE 1 and CE 2 are common low-end or mid-range routing devices. CE 3 and CE 4 are Layer-2 switches that directly connect with users.
  • Page 313 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Configure PE 1 # Configure the global MPLS. [PE1] mpls lsr-id 1.1.1.1 [PE1] mpls [PE1] mpls ldp # Configure a public network interface and enable MPLS on it.
  • Page 314 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE1-GigabitEthernet2/2/4] port link-aggregation group 1 # Configure the port-based QoS policy. [PE1] acl number 2000 [PE1-acl-basic-2000] rule 0 permit source any [PE1] traffic classifier one...
  • Page 315 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE1-bgp-af-vpn] peer 2.2.2.2 group 100 Configure the P device # Configure the global MPLS. [P] mpls lsr-id 3.3.3.3 [P] mpls [P] mpls ldp # Configure an interface and enable MPLS on the interface.
  • Page 316: Loopback Interface

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE2-vlan200] port GigabitEthernet 2/2/1 [PE2-vlan200] interface vlan-interface 200 [PE2-vlan-interface200] ip address 196.168.2.1 255.255.255.0 [PE2-vlan-interface200] mpls [PE2-vlan-interface200] mpls ldp [PE2-vlan-interface200] quit # Start the OSPF on the interface connecting PE 2 and the P routing device and on the loopback interface.
  • Page 317: Example For Configuring L2Vpn Hybrid Insertion

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE2-Ethernet3/1/1] qos apply policy one inbound [PE2-Ethernet3/1/1] quit # Bind the VPN A to the VLAN interface that connects PE 2 and CE 3.
  • Page 318 CE 1 and CE 3 constitute VPNA. CE 2 and CE 3 constitute VPNB. PE 1 and PE 2 are H3C S9500 series routing switches that support the MPLS function. CE 1 and CE 2 are common low-end or mid-range routing devices. CE 3 and CE 4 are Layer-2 switches that directly connect with users.
  • Page 319 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration # Configure the LDP remote session. [PE1] mpls ldp remote-peer 1 [PE1-mpls-ldp-remote-1] remote-ip 2.2.2.2 # Configure the MPLS service loopback group: [PE1] link-aggregation...
  • Page 320 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [P-vlan200] interface vlan-interface 200 [P-vlan-interface200] ip address 196.168.2.2 255.255.255.0 [P-vlan-interface200] mpls [P-vlan-interface200] mpls ldp [P-vlan-interface200] quit # Configure the OSPF. [P] ospf 1 router-id 3.3.3.3 [P-ospf-1] area 0 [P-ospf-1-area-0.0.0.0] network 196.168.1.0 0.0.0.255...
  • Page 321: Example For Configuring L3+ Hybrid Insertion

    Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE2] link-aggregation group 1 service-type mpls # Add multiple ports to the MPLS service loopback group. [PE2] interface GigabitEthernet 2/2/3 [PE2-GigabitEthernet2/2/3] stp disable...
  • Page 322 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration II. Network diagram Figure 1-3 Network diagram for configuring L3+ hybrid insertion III. Configuration procedure Configure PE 1 # Configure the IGP protocol, which is OSPF in this example.
  • Page 323 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE1-Vlan-interface10] mpls [PE1-Vlan-interface10] mpls ldp [PE1-Vlan-interface10] quit # Configure MPLS L2VPN. [PE1] mpls l2vpn # Configure LDP VPLS instance aaa. [PE1] vsi aaa static...
  • Page 324 Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE1-MPLS-VPLS0/0/2] backup interface MPLS-VPLS 1/0/2 [PE2-MPLS-VPLS0/0/2] quit # Configure VLAN 10 and create VLAN-interface 10. [PE2] vlan 10 [PE2-vlan10] port Ethernet 4/1/1 [PE2-vlan10] quit [PE2] interface Vlan-interface 10 [PE2-Vlan-interface10] ip address 10.10.10.11 24...
  • Page 325 Operation Manual – GRE H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 GRE Configuration ...................... 1-1 1.1 GRE Overview ........................1-1 1.1.1 Introduction to GRE....................1-1 1.1.2 GRE Applications ....................1-3 1.2 Configuring a GRE over IPv4 Tunnel ................1-4 1.2.1 Configuration Prerequisites..................
  • Page 326: Chapter 1 Gre Configuration

    Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration Chapter 1 GRE Configuration When configuring GRE, go to these sections for information you are interested in: GRE Overview Configuring a GRE over IPv4 Tunnel Displaying and Maintaining GRE...
  • Page 327 Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration I. Encapsulation process After receiving an X protocol packet through the interface connecting Group1, Router A submits it to the X protocol for processing. The X protocol checks the destination address field in the packet header to determine how to route the packet.
  • Page 328: Gre Applications

    Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration Upon receiving an IP packet from the tunnel interface, Router B checks the destination address. If the destination is itself, Router B strips off the IP header of the packet and submits the resulting packet to the GRE protocol.
  • Page 329: Configuring A Gre Over Ipv4 Tunnel

    Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration II. Scope enlargement of the network running a hop-limited protocol Figure 1-5 Scope enlargement of the network When the hop count between two terminals exceeds 15, the terminals cannot communicate with each other.
  • Page 330: Configuration Procedure

    Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration 1.2.2 Configuration Procedure Follow these steps to configure a GRE over IPv4 tunnel: To do… Use the command… Remarks — Enter system view system-view Optional By default, the IPv6...
  • Page 331 Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration To do… Use the command… Remarks Required source { ip-address | Configure the source ipv6-address | By default, no source address for the tunnel interface-type address is configured for...
  • Page 332: Displaying And Maintaining Gre

    Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration remote end. Or, you can enable the dynamic routing protocol on both the tunnel interface and the router interface connecting the private network so that the dynamic routing protocol can establish a routing entry that allows the tunnel to forward packets through the tunnel.
  • Page 333 Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration II. Network diagram Figure 1-7 Network diagram for GRE application III. Configuration procedure Configure Switch A # Configure VLAN-interface 100. <Sysname1> system-view [Sysname1] vlan 100 [Sysname1-vlan100] port GigabitEthernet 4/1/1...
  • Page 334 Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration # Create service loop group 1, setting the configuration mode to manual and the service type to tunnel. [Sysname1] link-aggregation group 1 mode manual [Sysname1] link-aggregation group 1 service-type tunnel # Configure the tunnel to reference service loop group 1 in tunnel interface view.
  • Page 335: Gre Ipv6 Over Ipv4 Tunnel Configuration Example

    Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration [Sysname2-Tunnel4/0/1] source vlan-interface 101 # Configure the destination address for interface Tunnel 4/0/1 (IP address of the VLAN interface to which GigabitEthernet 4/1/2 of Switch A belongs). Moreover, enable the expediting function.
  • Page 336 Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration <Sysname1> system-view # Enable IPv6. [Sysname1] ipv6 # Configure VLAN-interface 100. [Sysname1] vlan 100 [Sysname1-vlan100] port GigabitEthernet 4/1/1 [Sysname1-vlan100] quit [Sysname1] interface vlan-interface 100 [Sysname1-Vlan-interface100] ipv6 address 2002::1:1 64 [Sysname1-Vlan-interface100] quit # Configure VLAN-interface 101, the physical interface for the tunnel.
  • Page 337 Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration [Sysname1] interface tunnel 4/0/1 [Sysname1-Tunnel4/0/1] aggregation-group 1 [Sysname1-Tunnel4/0/1] quit # Add GigabitEthernet 4/1/3 to service loop group 1. [Sysname1] interface GigabitEthernet 4/1/3 [Sysname1-GigabitEthernet4/1/3] stp disable [Sysname1-GigabitEthernet4/1/3] port link-aggregation group 1 # Configure a static route from Switch A through interface Tunnel 4/0/1 to Group2.
  • Page 338: Troubleshooting Gre

    Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration # Configure the destination address of interface Tunnel 4/0/1 to be the IP address of the Vlan interface to which GigabitEthernet 4/1/2 of Switch A belongs. Moreover, enable the expediting function.
  • Page 339 Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration Solution: On Switch A and Switch B, carry out the display ip routing-table command in any view respectively. On Switch A, observe whether there is a route from itself through Tunnel 1/0/0 to 10.2.0.0/16.

Table of Contents