About This Manual Related Documentation In addition to this manual, each H3C S9500 Series Routing Switches documentation set includes the following: Manual Description It introduces the installation procedure, H3C S9500 Series Routing Switches commissioning, maintenance Installation Manual monitoring of the S9500 series routing switches.
Page 4
Part Contents includes IP Routing Overview, BGP Configuration, IS-IS Configuration, OSPF Configuration, Configuration, Routing Policy Configuration, Static 03 IP Routing Volume Routing Configuration, IPv6 BGP Configuration, IPv6 IS-IS Configuration, IPv6 OSPFv3 Configuration, IPv6 RIPng Configuration, IPv6 Static Routing Configuration. includes Multicast Overview, Multicast Routing and Forwarding Configuration, IGMP...
Page 5
Conventions The manual uses the following conventions: I. Command conventions Convention Description Boldface The keywords of a command line are in Boldface. italic Command arguments are in italic. Items (keywords or arguments) in square brackets [ ] are optional. Alternative items are grouped in braces and separated by { x | y | ...
Page 6
III. Symbols Convention Description Means reader be extremely careful. Improper operation Warning may cause bodily injury. Means reader be careful. Improper operation may cause Caution data loss or damage to equipment. Note Means a complementary description.
Operation Manual H3C S9500 Series Routing Switches MPLS VPN Volume Organization Manual Version T2-081655-20080530-C-2.03 Product Version S9500-CMW520-R2132 Organization The MPLS VPN Volume is organized as follows: Features (operation Description manual) MPLS (Multiprotocol Label Switching) brings together the advantages of the connectionless control with IP and the connection-oriented forwarding with ATM.
Page 8
Operation Manual H3C S9500 Series Routing Switches MPLS VPN Volume Organization Features (operation Description manual) The MPLS hybrid insertion feature is used to enable deployment of MPLS VPN services on cards that do not MPLS Hybrid support MPLS. The volume describes:...
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Chapter 1 MPLS Basics Configuration When performing MPLS basics configuration, go to these sections for information you are interested in: MPLS Overview MPLS Configuration Basics...
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Internet packet exchange (IPX), and connectionless network protocol (CLNP). That is what the term multiprotocol means. MPLS integrates both Layer 2 fast switching and Layer 3 routing and forwarding, satisfying the requirements of various new applications for network performance.
Page 13
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration TTL: Time to live (TTL) for the label. Eight bits in length. This field has the same meaning as that for an IP packet. Similar to the VPI/VCI in ATM and the DLCI in frame relay, an MPLS label functions as a connection identifier.
Page 14
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Figure 1-3 Diagram for an LSP An LSP is a unidirectional path from the ingress of the MPLS network to the egress. It functions like a virtual circuit in ATM or frame relay. Each node of an LSP is an LSR.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration If the path that a tunnel traverses is exactly the hop-by-hop route established by the routing protocol, the tunnel is called a hop-by-hop routed tunnel. Otherwise, the tunnel is called an explicitly routed tunnel.
Page 16
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration The following describes how MPLS operates: First, the LDP protocol and the traditional routing protocol (such as OSPF and ISIS) work together on each LSR to establish the routing table and the label information base (LIB) for intended FECs.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration An LER forwards both labeled packets and IP packets on the forwarding plane and therefore uses both the LFIB and the FIB. An ordinary LSR only needs to forward labeled packets and therefore uses only the LFIB.
Page 18
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration VPN 3 CE 3 PE 3 MPLS backbone VPN 2 VPN 1 CE 1 PE 1 PE 2 CE 2 Figure 1-6 MPLS-based VPN Figure 1-6 shows the basic structure of an MPLS-based VPN.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.2 MPLS Configuration Basics Note: Currently, the device supports the graceful restart (GR) feature of LDP. For details about GR, refer to GR Configuration in System Volume.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Liberal: In this mode, an LSR keeps any received label to FEC binding regardless of whether the binding is from its next hop for the FEC or not.
Page 21
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration According to RFC 3031 “Multiprotocol Label Switching Architecture”, when an LSR labels a packet, it copies the TTL value of the original IP packet or the upper level label to the TTL field of the newly added label.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration For an MPLS packet with only one level of label, the ICMP response message travels along the IP route when the TTL expires. 1.2.4 Inspecting an MPLS LSP In MPLS, the MPLS control plane is responsible for establishing an LSP.
Page 23
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Using LDP, LSRs can map network layer routing information to data layer switching paths directly and further establish LSPs. LSPs can be established between both neighboring LSRs and LSRs that are not directly connected, making label switching possible at all transit nodes on the network.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration An LDP identifier is used to identify an LSR label space. It is a six-byte numerical value in the format of <LSR ID>:<Label space ID>, where LSR ID is four-byte long. A label space ID of 1 means per interface, a label space ID of 0 means per platform.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration In independent mode, an LSR immediately responds to its upstream LSR with label binding information no matter whether it receives that of its downstream LSR or not.
Page 26
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration At the end of the discovery phase, Hello adjacency is established between LSRs, and LDP is ready to initiate session establishment. II. Session establishment and maintenance In this phase, LSRs pass through two steps to establish sessions between them: Establishing transport layer connections (that is, TCP connections) between them.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.3.4 LDP Loop Detection LSPs established in MPLS may be looping. The LDP loop detection mechanism can detect looping LSPs and prevent LDP messages from looping forever.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.4.2 Configuration Procedure Follow these steps to configure MPLS basic capability: To do… Use the command… Remarks Enter system view — system-view Required Configure the MPLS LSR...
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration A label value of 3 represents an implicit null label and never appears in the label stack. When an LSR finds that it is assigned an implicit null label, it directly performs a pop operation, rather than substitutes the value for the original label at the stack top.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Note: Disabling LDP on an interface terminates all LDP sessions on the interface, causing all LSPs using the sessions to be deleted. Usually, the default value of the LDP LSR ID, that of the MPLS LSR ID, answers the requirement.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Specify the LDP remote Required remote-ip ip-address peer IP address Optional Set the targeted Hello mpls ldp timer hello-hold...
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Enter system view — system-view Enter MPLS view — mpls Optional Configure the LSP Only local loopback lsp-trigger { all | ip-prefix...
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Optional liberal by default Specify the label retention label-retention { liberal | Note that you must reset mode conservative }...
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.7.9 Configuring LDP MD5 Authentication To improve the security of LDP sessions, you configure MD5 authentication for the used TCP connections. Follow these steps to configure LDP MD5 authentication: To do…...
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Except for the command for the LDP GR feature, all commands available in MPLS LDP view can be configured in MPLS LDP VPN instance view.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration Configure the ttl propagate vpn command on all the related PEs to allow IP TTL propagation of VPN packets. Configure the undo ttl expiration pop command on the ASBRs and SPEs to assure that ICMP responses can be transported back through the original LSPs.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration To do… Use the command… Remarks Required 0 seconds by default, Set the interval for statistics interval meaning that the system reporting statistics interval-time should not report any statistics.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.13.3 Displaying MPLS LDP Operation To do… Use the command… Remarks display mpls ldp [ all [ verbose ] [ | Display information about Available in any...
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration 1.13.4 Clearing MPLS Statistics To do… Use the command… Remarks Clear MPLS statistics for reset mpls statistics a specified or all MPLS interface { interface-type...
Page 45
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration verbose command, you will find that the interfaces are at the state of Full. The following takes Switch A as an example: [SwitchA] display ospf peer verbose OSPF Process 1 with Switch ID 1.1.1.9...
Page 46
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration [SwitchC] mpls ldp [SwitchC-mpls-ldp] quit [SwitchC] interface Vlan-interface 1 [SwitchC-Vlan-interface1] mpls [SwitchC-Vlan-interface1] mpls ldp [SwitchC-Vlan-interface1] quit After completing the above configurations, the local session between Switch A and Switch B and that between Switch B and Switch C should be established successfully.
Operation Manual – MPLS Basics H3C S9500 Series Routing Switches Chapter 1 MPLS Basics Configuration round-trip min/avg/max = 1/1/1 ms 1.15 Troubleshooting MPLS Symptom: An interface with LDP enabled cannot establish an LDP session with its peer. Analysis: An LDP session is established in two steps: establishing the TCP connection;...
Page 50
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS TE Configuration....................1-1 1.1 MPLS TE Overview ......................1-1 1.1.1 Traffic Engineering and MPLS TE................1-2 1.1.2 Basic Concepts of MPLS TE................... 1-3 1.1.3 MPLS TE Implementation ..................
Page 51
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Table of Contents 1.11.1 Configuration Prerequisites................. 1-38 1.11.2 Configuration Procedure ..................1-39 1.12 Configuring FRR ......................1-39 1.12.1 Configuration Prerequisites................. 1-40 1.12.2 Configuration Procedure ..................1-40 1.13 Displaying and Maintaining MPLS TE ................1-43 1.14 MPLS TE Configuration Example ..................
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Chapter 1 MPLS TE Configuration Note: A routing switch running MPLS has routing functions. The term “router” in this document refers to a router in a generic sense or a Layer 3 Ethernet switch running MPLS.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.1.1 Traffic Engineering and MPLS TE I. Traffic engineering Network congestion is one of the major problems that can degrade your network backbone performance. It may occur either when network resources are inadequate or when load distribution is unbalanced.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Reserve resources by establishing LSP tunnels to specific destinations. This allows traffic to bypass congested nodes to achieve appropriate load distribution. When network resources are insufficient, MPLS TE allows bandwidth-hungry LSPs or critical user traffic to occupy the bandwidth for lower priority LSP tunnels.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration II. Calculating paths Link state-based routing protocols use shortest path first (SPF) to calculate the shortest path to each network node. In MPLS TE, the constraint-based shortest path first (CSPF) algorithm is used. It is...
Page 56
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Traffic characteristics Preemption Route pinning Administrative group and affinity attribute Reoptimization I. Strict and loose explicit routes An LSP is called a strict explicit route if all LSRs along the LSP are specified.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration V. Administrative group and affinity attribute The affinity attribute of an MPLS TE tunnel identifies the properties of the links that the tunnel can use. Together with the link administrative group, it decides which links the MPLS TE tunnel can use.
Page 58
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration I. Overview Currently, two QoS models are available: integrated service (IntServ) and differentiated service (DiffServ). Resource reservation protocol (RSVP) is designed for IntServ. It reserves resources on each node along a path.
Page 59
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration III. Make-before-break Make-before-break is a mechanism to change MPLS TE tunnel attributes with minimum data loss and without extra bandwidth. Note: Once you change the key attributes of an MPLS TE tunnel, such as the destination,...
Page 60
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Resv messages: sent by each receiver upstream towards senders to request resource reservation and to create and maintain reservation state on each node along the reverse of data transmission path.
Page 61
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration As resources are reserved on the LSRs along the path for the LSP established using RSVP-TE, services transmitted on the LSP are guaranteed. VI. RSVP refresh mechanism RSVP maintains path and reservation state by periodically retransmitting two types of messages: Path and Resv.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration downstream nodes. The state stored in the PSB or RSB object times out and is removed after the number of consecutive non-refreshing times exceeds the PSB or RSB timeout keep-multiplier.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Router B Router C Router A Router D Router E Figure 1-3 IGP shortcut and forwarding adjacency As shown in Figure 1-3, a TE tunnel is present between Router D and Router C. With IGP shortcut enabled, the ingress node Router D can use this tunnel when calculating IGP routes.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.1.9 Fast Reroute This section covers these topics: Overview Basic concepts Protection Deploying FRR I. Overview Fast reroute (FRR) provides a quick per-link or per-node protection on an LSP.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration the bypass LSP. As shown in Figure 1-5, the primary LSP is Router A → Router B → Router C → Router D → Router E, and the bypass LSP is Router B → Router F→...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Remarks Configuration task Tuning MPLS TE Tunnel Setup Optional Forwarding traffic along MPLS TE tunnels using static routes Required Configuring Traffic Forwarding Use either Forwarding traffic along MPLS...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use the command… Remarks Enter the interface view of interface interface-type –– an MPLS TE link interface-number Enable interface MPLS Required mpls Required...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Configure static routing or an IGP protocol to make sure that all LSRs are reachable. Configure MPLS basic capabilities. Configure MPLS TE basic capabilities. 1.4.2 Configuration Procedure Follow these steps to create an MPLS TE tunnel over a CR-LSP: To do…...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: The tunnel-name argument specifies the name of the MPLS TE tunnel carried over the static CR-LSP. The tunnel-name argument in the static-cr-lsp ingress command is case sensitive.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.5.2 Configuration Procedure Configuring an MPLS TE tunnel using a dynamic signaling protocol involves these tasks: Configuration task Remarks Configuring MPLS TE properties for a link...
Page 71
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Enter OSPF view ospf [ process-id ] –– Required Enable the opaque LSA opaque-capability...
Page 72
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks cost-style { narrow | Required wide | wide-compatible | Configure the wide metric { compatible | By default, IS-IS uses...
Page 73
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Create an explicit path for explicit-path path-name MPLS TE tunneling and Required [ enable | disable ]...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Associate the tunnel with mpls te path Required an explicit path explicit-path path-name Submit current tunnel Required mpls te commit configuration VII.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Before performing the configuration tasks in this section, be aware of each configuration objective and its impact on your network. 1.6.1 Configuration Prerequisites Before configuring RSVP-TE advanced features, do the following:...
Page 76
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: In current MPLS TE applications, the SE style is mainly used for make-before-break, while the FF style is rarely used. II. Configuring RSVP state timers Follow these steps to configure RSVP state timers: To do…...
Page 77
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enable the reliability Optional mpls rsvp-te reliability mechanism of RSVP-TE mpls rsvp-te timer retransmission Optional Configure { increment-value retransmission...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Enter MPLS view –– mpls Required Enable resource mpls rsvp-te reservation confirmation resvconfirm Disabled by default...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.7.1 Configuration Prerequisites The configuration tasks described in this section are about CSPF of MPLS TE. They must be used in conjunction with CSPF and the dynamic signal protocol RSVP-TE.
Page 80
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: For a tunnel, the tie breaker configured in MPLS TE tunnel interface view is preferred to the one configured in MPLS view. If no tie breaker is configured in MPLS TE tunnel interface view, the one configured in MPLS view applies.
Page 81
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: The relationship between administrative groups and affinity attributes varies by vendor. To deploy devices from different vendors in the same network, acquaint yourself with the implementations of the vendors at first.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Exit to user view –– return Perform reoptimization on all MPLS TE tunnels with Optional mpls te reoptimization reoptimization enabled 1.8 Tuning MPLS TE Tunnel Setup...
Page 83
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Enter MPLS TE tunnel interface tunnel –– interface view tunnel-number Enable the Record Required...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Enter system view –– system-view Enter MPLS TE tunnel interface tunnel –– interface view tunnel-number Optional mpls te priority...
Page 85
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: The interface-type argument in the ip route-static command must be tunnel. In addition, the preference value must be set. For more information about static routing, refer to Static Routing Commands in IP Routing Volume.
Page 86
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Optional mpls te igp metric The metrics of TE tunnels Assign a metric to the { absolute | relative }...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.10 Configuring Traffic Forwarding Tuning Parameters In MPLS TE, you may configure traffic forwarding tuning parameters such as the failed link timer and flooding thresholds to change paths that IP or MPLS traffic flows traverse or to define type of traffic that may travel down a TE tunnel.
Page 88
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Follow these steps to configure flooding thresholds: To do… Use command to… Remarks Enter system view –– system-view Enter MPLS TE tunnel interface interface-type ––...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use command to… Remarks Optional If no TE metric is assigned Assign a TE metric to the mpls te metric value to the link, IGP metric is...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.11.2 Configuration Procedure Follow these steps to configure CR-LSP backup: To do… Use command to… Remarks Enter system view of the –– system-view ingress node...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration A bypass tunnel cannot be used for services such as VPN at the same time. 1.12.1 Configuration Prerequisites Before configuring FRR, do the following: Configure IGP, ensuring that all LSRs are reachable...
Page 92
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration The protected interface is not the outgoing interface on the next hop along the route. Up to three bypass tunnels can be specified for a protected interface. The best-fit algorithm is used to determine which of them should be used in case failure occurs.
Page 93
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Caution: Bypass tunnels do not protect bandwidth by default. This can defeat your attempts to binding a primary LSP to a bypass LSP. Therefore, when configuring a bypass tunnel, you must configure the bandwidth that it is intended to protect with the mpls te backup bandwidth command.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Follow these steps to configure the FRR polling timer: To do… Use command to… Remarks Enter system view of the –– system-view PLR node Enter MPLS view ––...
Page 95
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use the command… Remarks display mpls rsvp-te psb-content Display information about { ingress-lsr-id lspid tunnel-id Available in any RSVP-TE PSB egress-lsr-id } [ | { begin | include |...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration To do… Use the command… Remarks Display the information of the specified or all OSPF display ospf [ process-id ] Available in any processes about traffic...
Page 97
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration II. Network diagram Loopback1 2.2.2.2/32 Vlan-int2 Vlan-int1 2.1.1.2/24 3.2.1.1/24 Switch B Vlan-int1 Vlan-int2 2.1.1.1/24 3.2.1.2/24 Switch A Switch C Loopback1 Loopback1 3.3.3.3/32 1.1.1.1/32 Figure 1-6 Set up MPLS TE tunnels using static CR-LSPs III.
Page 99
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchB] mpls lsr-id 2.2.2.2 [SwitchB] mpls [SwitchB-mpls] mpls te [SwitchB-mpls] quit [SwitchB] interface Vlan-interface 1 [SwitchB-Vlan-interface1] mpls [SwitchB-Vlan-interface1] mpls te [SwitchB-Vlan-interface1] quit [SwitchB] interface Vlan-interface 2...
Page 100
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Verify the configuration Perform the display interface tunnel command on Switch A. You can find that the tunnel interface is up. [SwitchA] display interface tunnel...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration In/Out Label In/Out IF Vrf Name 20/30 Vlan1/Vlan2 [SwitchC] display mpls lsp ------------------------------------------------------------------ LSP Information: STATIC CRLSP ------------------------------------------------------------------ In/Out Label In/Out IF Vrf Name 30/NULL...
Page 102
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration II. Network diagram Loopback1 Loopback1 Vlan-int1 Vlan-int3 Switch D Switch A Loopback1 Loopback1 Vlan-int3 Vlan-int1 Vlan-int2 Vlan-int2 Switch B Switch C Device Interface IP address...
Page 104
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchD-LoopBack1] quit Perform the display ip routing-table command on each switch. You can see that all nodes learnt the host routes of other nodes with LSR IDs as destinations. Take Switch...
Page 105
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchB-Vlan-interface1] mpls rsvp-te [SwitchB-Vlan-interface1] quit [SwitchB] interface vlan-interface 2 [SwitchB-Vlan-interface2] mpls [SwitchB-Vlan-interface2] mpls te [SwitchB-Vlan-interface2] mpls rsvp-te [SwitchB-Vlan-interface1] quit # Configure Switch C. [SwitchC] mpls lsr-id 3.3.3.9...
Page 106
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchA-isis-1] quit # Configure Switch B. [SwitchB] isis 1 [SwitchB-isis-1] cost-style wide [SwitchB-isis-1] traffic-eng level-1-2 [SwitchB-isis-1] quit # Configure Switch C. [SwitchC] isis 1 [SwitchC-isis-1] cost-style wide...
Page 107
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchC-Vlan-interface2] quit # Configure maximum link bandwidth and maximum reservable bandwidth on Switch D. [SwitchD] interface vlan-interface 3 [SwitchD-Vlan-interface3] mpls te max-link-bandwidth 100 [SwitchD-Vlan-interface3] mpls te max-reservable-bandwidth 50...
Page 108
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration LSP ID 1.1.1.9:1 Session ID Admin State Oper State Ingress LSR ID 1.1.1.9 Egress LSR ID: 4.4.4.9 Signaling Prot RSVP Resv Style Class Type CLASS 0...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.14.3 CR-LSP Backup Configuration Example I. Network requirements Set up an MPLS TE tunnel from Switch A to Switch C. Use CR-LSP hot backup for it.
Page 110
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [SwitchA-mpls] mpls te cspf [SwitchA-mpls] quit [SwitchA] interface Vlan-interface 1 [SwitchA-Vlan-interface1] mpls [SwitchA-Vlan-interface1] mpls te [SwitchA-Vlan-interface1] mpls rsvp-te [SwitchA-Vlan-interface1] quit [SwitchA] interface Vlan-interface 4 [SwitchA-Vlan-interface4] mpls...
Page 111
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 0 packets input, 0 bytes 0 input error 0 packets output, 0 bytes 0 output error Verify the configuration Perform the display mpls te tunnel command on Switch A. You can find that two tunnels are present with the outgoing interfaces being Vlan-interface 1 and Vlan-interface 4 respectively.
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Shut down Vlan2 on Switch B. Perform the tracert command on Switch A to draw the path to the tunnel destination. You can see that the LSP is re-routed to traverse Switch [SwitchA] tracert –a 1.1.1.9 3.3.3.9...
Page 113
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration II. Network diagram Switch A Switch B Switch C Switch D Loopback1 Loopback1 Loopback1 Vlan-int1 Vlan-int2 Vlan-int3 Vlan-int2 Vlan-int1 Vlan-int3 Vlan-int4 Vlan-int5 Vlan-int4 Vlan-int5 Primary LSP...
Page 114
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 3.3.3.3/32 ISIS 2.1.1.2 Vlan1 4.1.1.0/24 ISIS 2.1.1.2 Vlan1 4.4.4.4/32 ISIS 2.1.1.2 Vlan1 5.5.5.5/32 ISIS 2.1.1.2 Vlan1 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 Configure MPLS TE basic capabilities, and enable RSVP-TE.
Page 115
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Note: Follow the same steps to configure Switch C, Switch D, and Switch E. Create an MPLS TE tunnel on Switch A, the headend of the primary LSP # Create an explicit path for the primary LSP.
Page 116
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Perform the display mpls te tunnel-interface command on Switch A to verify the configuration of the tunnel interface. [SwitchA] display mpls te tunnel-interface Tunnel Name...
Page 117
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration # Create the bypass tunnel. [SwitchB] interface Tunnel 3/0/5 [SwitchB-Tunnel3/0/5] ip address 11.1.1.1 255.255.255.0 [SwitchB-Tunnel3/0/5] tunnel-protocol mpls te [SwitchB-Tunnel3/0/5] destination 3.3.3.3 [SwitchB-Tunnel3/0/5] mpls te path explicit-path by-path # Configure the bandwidth that the bypass tunnel protects.
Page 118
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration LSP Information: RSVP LSP ------------------------------------------------------------------ In/Out Label In/Out IF Vrf Name 4.4.4.4/32 3/NULL Vlan3/- [SwitchE] display mpls lsp ------------------------------------------------------------------ LSP Information: RSVP LSP ------------------------------------------------------------------ In/Out Label...
Page 119
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Nexthop 3.1.1.2 In-Label 1024 Out-Label 1024 In-Interface Vlan-interface1 Out-Interface Vlan-interface2 LspIndex 4097 Token 22001 LsrType Transit Bypass In Use Not Used BypassTunnel Tunnel Index[Tunnel3/0/5], InnerLabel[1024]...
Page 120
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Tunnel Name Tunnel3/0/4 Tunnel Desc Tunnel3/0/4 Interface Tunnel State Desc Modifying CR-LSP is setting up Tunnel Attributes LSP ID 1.1.1.1:1 Session ID Admin State Oper State Ingress LSR ID 1.1.1.1...
Page 121
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Reserved BW 0 kbps Setup Priority Hold Priority: Affinity Prop/Mask 0x0/0x0 Explicit Path Name pri-path Tie-Breaking Policy : None Metric Type None Loop Detection Disabled...
Page 122
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Nexthop 3.1.1.2 In-Label 1024 Out-Label 1024 In-Interface Vlan-interface1 Out-Interface Vlan-interface2 LspIndex 4097 Token 22001 LsrType Transit Bypass In Use In Use BypassTunnel Tunnel Index[Tunnel3/0/5], InnerLabel[1024]...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration About 5 seconds later, perform the display mpls lsp verbose command on Switch B. You can find that Tunnel 3/0/5 is still bound with interface Vlan-interface 2 and is unused.
Page 124
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] network 10.0.0.0 0.0.0.255 [PE1-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0 [PE1-ospf-1-area-0.0.0.0] quit [PE1-ospf-1] quit # Configure PE 2. [PE2] interface loopback 1 [PE2-LoopBack1] ip address 3.3.3.3 255.255.255.255...
Page 125
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Configure MPLS basic capabilities and LDP. # Configure PE 1. [PE1] mpls lsr-id 2.2.2.2 [PE1] mpls [PE1-mpls] lsp-trigger all [PE1-mpls] quit [PE1] mpls ldp [PE1-mpls-ldp] quit...
Page 126
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [PE1-mpls] quit [PE1] interface vlan-interface 2 [PE1-Vlan-interface2] mpls te [PE1-Vlan-interface2] quit [PE1] ospf [PE1-ospf-1] opaque-capability enable [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] mpls-te enable [PE1-ospf-1-area-0.0.0.0] quit [PE1-ospf-1] quit # Configure PE 2.
Page 127
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration [CE1-Vlan-interface1] ip address 192.168.1.2 255.255.255.0 [CE1-Vlan-interface1] quit # Configure the VPN instance on PE 1, and use CR-LSP for VPN setup. Bind the VPN instance with the interface connected to CE 1.
Page 128
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration Interfaces : Vlan-interface1 Ping connected CEs on PEs to test connectivity. For example, ping CE 1 on PE 1: [PE1] ping -vpn-instance vpn1 192.168.1.2 PING 192.168.1.2: 56 data bytes, press CTRL_C to break Reply from 192.168.1.2: bytes=56 Sequence=1 ttl=255 time=47 ms...
Page 130
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration PING 192.168.1.2: 56 data bytes, press CTRL_C to break Reply from 192.168.1.2: bytes=56 Sequence=1 ttl=253 time=38 ms Reply from 192.168.1.2: bytes=56 Sequence=2 ttl=253 time=61 ms Reply from 192.168.1.2: bytes=56 Sequence=3 ttl=253 time=74 ms...
Operation Manual – MPLS TE H3C S9500 Series Routing Switches Chapter 1 MPLS TE Configuration 1.15 Troubleshooting MPLS TE Symptom: OSPF TE is configured but no TE LSAs can be generated to describe MPLS TE attributes. Analysis: For TE LSAs to be generated, at least one OSPF neighbor must reach the FULL state.
Page 133
Operation Manual – VPLS H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 VPLS Configuration..................... 1-1 1.1 VPLS Overview........................1-1 1.1.1 Operation of VPLS ....................1-2 1.1.2 VPLS Packet Structure ................... 1-5 1.1.3 H-VPLS Implementation..................1-6 1.2 Configuration Task List ......................
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration customers to build their LANs across the metropolitan area network (MAN) or wide area network (WAN). 1.1.1 Operation of VPLS I. Basic VPLS concepts Customer edge device that is directly connected with the service provider network.
Page 136
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration A tunnel, usually an MPLS tunnel, is a direct channel between a local PE and the peer PE for transparent data transmission in-between. It is used to carry PWs. A tunnel can carry multiple PWs.
Page 137
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Local MAC address learning of interfaces directly connected with users This refers to learning source MAC addresses from Layer 2 packets originated by CEs. This occurs on the corresponding VSI interfaces.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Remote MAC addresses learned by a PE that are related to VC labels but no more in use need to be aged out by an aging mechanism. The aging mechanism used here is the aging timer corresponding to the MAC address.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Ethernet access: The Ethernet header of a packet transferred between CE and PE does not contain any service delimiter. If a header contains a VLAN tag, it is the internal VLAN tag of the user and means nothing to the PE.
Page 140
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Figure 1-3 H-VPLS LSP access As shown in Figure 1-3, UPE functions as the convergence device MTU-s and establishes a virtual link U-PW with NPE 1 and NPE 2 respectively, where the U-PW established with NPE 2 is blocked.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration As shown in Figure 1-4, MTU is a standard bridging device and QinQ is enabled on its interfaces connected with CEs. Data forwarding is as follows: Upon receiving a packet from a CE, MTU labels the packet with VLAN tag as the multiplex distinguishing flag, and transparently sends the packet to PE 1 through the QinQ tunnel.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration 1.3 Configuring the Routing Protocol You need to configure some basic routing protocols to make the P and PE devices to be able to exchange routing information. Currently, the available routing protocols are static routing protocol, RIP, OSPF, EBGP, and so on.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration 1.7 Configuring MPLS L2VPN You must enable MPLS L2VPN before performing VPLS related configurations. For details about MPLS L2VPN configuration, refer to MPLS L2VPN Configuration. Follow these steps to configure MPLS L2VPN: To do…...
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration You can also specify the peer VC ID, which must be identical to that configured on the peer. The specified remote peer NPEs need to be fully meshed, while between UPEs and NPEs are not.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration In L2VPN implementation, the Kompella mode uses extended BGP as the signaling protocol for transferring VC information. Therefore, the BGP mode is also called the Kompella mode. When configuring a VPLS instance in BGP mode, you must configure BGP as the signaling protocol to be used.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration Follow these steps to set the access mode and bind the VPLS instance: To do… Use the command… Remarks Enter system view system-view — interface interface-type Enter interface view —...
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration To do… Use the command… Remarks Set the maximum number Optional mac-table limit of MAC addresses in the mac-limit-num 128 by default VPLS instance Optional Shut down the VPLS...
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration II. Resetting VPLS To do… Use the command… Remarks reset bgp vpls Reset a specified or all { as-number | ip-address | Available in user view VPLS BGP connections all | external | internal } 1.12 VPLS Configuration Example...
Page 149
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE1] mpls lsr-id 1.1.1.9 [PE1] mpls [PE1-mpls] quit [PE1] mpls ldp [PE1-mpls-ldp] quit # Configure to redirect VPLS traffic to the virtual service port that corresponds to the L3+ card.
Page 150
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE1-vsi-bbb] pwsignal bgp [PE1-vsi-bbb-bgp] route-distinguisher 100:1 [PE1-vsi-bbb-bgp] vpn-target 111:1 [PE1-vsi-bbb-bgp] site 1 [PE1-vsi-bbb-bgp] quit [PE1-vsi-bbb] quit # Bind VPLS instance aaa to the MPLS-VPLS virtual service interface.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE2] interface MPLS-VPLS 0/0/2 [PE2-MPLS-VPLS0/0/2] l2vpn-vpls service binding vsi aaa [PE2-MPLS-VPLS0/0/2] quit # Or, bind VPLS instance bbb to the MPLS-VPLS virtual service interface. [PE2] interface MPLS-VPLS 0/0/2...
Page 153
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration NPE 2 and PE are connected through ports Ethernet 4/1/4, which belong to VLAN 40 on NPE 2 and PE respectively. NPE 1 and NPE 2 are connected through ports Ethernet 4/1/5, which belong to VLAN 50 on NPE 1 and NPE 2 respectively.
Page 154
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [UPE-vlan10] port Ethernet 4/1/2 [UPE-vlan10] quit [UPE] interface Vlan-interface 10 [UPE-Vlan-interface10] ip address 60.41.41.4 24 [UPE-Vlan-interface10] mpls [UPE-Vlan-interface10] mpls ldp [UPE-Vlan-interface10] quit # Configure the MPLS basic capability on the interface connected with NPE 2.
Page 155
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration # Configure MPLS basic capability. <Sysname> system-view [Sysname] sysname NPE1 [NPE1] mpls lsr-id 60.1.1.1 [NPE1] mpls [NPE1–mpls] quit [NPE1] mpls ldp [NPE1–mpls-ldp] quit # Configure to redirect VPLS traffic to the virtual service port that corresponds to the L3+ card.
Page 156
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration # Configure MPLS L2VPN. [NPE1] mpls l2vpn # Configure the basic attributes of VPLS instance aaa, which uses LDP. [NPE1] vsi aaa static [NPE1-vsi-aaa] pwsignal ldp [NPE1-vsi-aaa-ldp] vsi-id 500 [NPE1-vsi-aaa-ldp] peer 60.4.4.4 upe...
Page 157
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [NPE2] vlan 50 [NPE2-vlan50] port Ethernet 4/1/5 [NPE2-vlan50] quit [NPE2] interface Vlan-interface 50 [NPE2-Vlan-interface50] ip address 60.15.15.3 24 [NPE2-Vlan-interface50] mpls [NPE2-Vlan-interface50] mpls ldp [NPE2-Vlan-interface50] quit # Configure MPLS basic capability on the interface connected with PE.
Page 158
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE–mpls-ldp] quit # Configure to redirect VPLS traffic to the virtual service port that corresponds to the L3+ card. [PE] interface MPLS-VPLS 0/0/2 [PE-MPLS-VPLS0/0/2] l2vpn-vpls service binding service-id 1 [PE-MPLS-VPLS0/0/2] quit # Configure MPLS basic capability on the interface connected with NPE 1.
Operation Manual – VPLS H3C S9500 Series Routing Switches Chapter 1 VPLS Configuration [PE] vlan 100 [PE-vlan100] port Ethernet 4/1/6 [PE-vlan100] quit [PE] interface Vlan-interface 100 [PE-Vlan-interface100] l2 binding vsi aaa [PE-Vlan-interface100] quit After completing the above configurations, you can execute the display vpls connection command on the UPE.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Chapter 1 MPLS L2VPN Configuration When configuring MPLS L2VPN, go to these sections for information you are interested MPLS L2VPN Overview Configuring MPLS L2VPN Configuring CCC MPLS L2VPN...
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Kompella MPLS L2VPN 1.1.1 Introduction to MPLS L2VPN I. Traditional VPN Traditional VPNs based on asynchronous transfer mode (ATM) or frame relay (FR) are quite popular. They share the network infrastructure of carriers. However, they have...
Page 163
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration III. Comparison with MPLS L3VPN Compared with MPLS L3VPN, MPLS L2VPN has the following advantages: High scalability: MPLS L2VPN establishes only Layer 2 connections. It does not involve the routing information of users.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration The most significant advantage of this method is that no label signaling is required for transferring Layer 2 VPN information. As long as MPLS forwarding is supported and service provider networks are interconnected, this method works perfectly.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Once LDP establishes an LSP between the two PEs and the label exchange and the binding to CE are finished, a VC is set up and ready to transfer Layer 2 data.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.2 Configuring MPLS L2VPN You can select any of the implementation methods for MPLS L2VPN as needed. However, no matter what method you select, you must complete these two tasks:...
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration For a local CCC connection: the types and numbers of the incoming and outgoing interfaces For a remote CCC connection: the type and number of the incoming interface, the...
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Caution: You do not need to configure two static LSPs for each remote CCC connection. Instead, you only need to configure the incoming and outgoing labels, where the incoming label must be exclusively for the CCC connection.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.4.1 Configuration Prerequisites Before configuring SVC MPLS L2VPN, complete these tasks: Configuring IGP on the PEs and P devices to guarantee the IP connectivity of the...
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.5.1 Configuration Prerequisites Before configuring Martini MPLS L2VPN, complete these tasks: Configuring IGP on the PEs and P devices to guarantee the IP connectivity of the...
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Caution: For an LDP connection, there are two main parameters: one is the IP address of the peer PE, the other is the VC ID. The combination of the VC ID and the encapsulation type must be unique on a PE.
Page 173
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration To do… Use the command… Remarks Enter system view system-view — Enter BGP view bgp as-number — Establish the peer peer { group-name | ip-address }...
Page 174
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Caution: The mtu command is not recommended. It affects only parameter negotiation, which may occur; it does not affect data forwarding. With Kompella MPLS L2VPN, you must create on the PE an L2VPN instance for each VPN where a directly connected CE resides.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration usually abundant). This can reduce the configuration modification required when CEs are added in the VPN in future. When you create a CE connection, if you set the default offset value to 1: The CE offset defaults to 1 for the first connection of the CE.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration To do… Use the command… Remarks display mpls l2vpn connection Display information about [ vpn-name vpn-name Available in any Kompella MPLS L2VPN [ remote-ce ce-id | down | up |...
Page 177
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Note: Since a local CCC connection is bidirectional, one is enough. The PE interfaces connecting the CEs require no IP addresses. II. Network diagram CE B Vlan -int1 100.1.1.2/24...
Page 178
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PE-Vlan-interface1] quit # Configure interface VLAN-interface 2. [PE] interface Vlan-interface 2 [PE-Vlan-interface2] quit # Create a local connection between CE A and CE B. [PE] ccc CEA-CEB interface Vlan-interface 1 out-interface Vlan-interface 2 Configure CE B <Sysname>...
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.8.2 Example for Configuring a Remote CCC Connection I. Network requirements The CEs are connected to the PEs through VLAN interfaces. A remote CCC connection is created between CE A and CE B.
Page 182
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEB] ospf [PEB-ospf-1] area 0 [PEB-ospf-1-area-0.0.0.0] network 10.2.2.0 0.0.0.255 [PEB-ospf-1-area-0.0.0.0] network 10.0.0.3 0.0.0.0 # Create a remote connection from CE B to CE A, using the interface connecting CE B as the incoming interface and that connecting the P device as the outgoing interface, setting the incoming label to 201 and the outgoing label to 101.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 10/76/180 ms # On CE B, ping interface 100.1.1.1 of CE A. (Omitted) 1.8.3 Example for Configuring SVC MPLS L2VPN I.
Page 184
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [CEA] interface Vlan-interface 1 [CEA-Vlan-interface1] ip address 100.1.1.1 24 Configure PE A. <Sysname> system-view [Sysname] sysname PEA [PEA] interface Loopback 0 [PEA-LoopBack0] ip address 192.2.2.2 32 [PEA-LoopBack0] quit # Configure the LSR ID and enable MPLS globally.
Page 185
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration <Sysname> system-view [Sysname] sysname P [P] interface Loopback 0 [P-LoopBack0] ip address 192.4.4.4 32 [P-LoopBack0] quit # Configure the LSR ID and enable MPLS globally.
Page 186
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEB] interface Loopback 0 [PEB-LoopBack0] ip address 192.3.3.3 32 [PEB-LoopBack0] quit # Configure the LSR ID and enable MPLS globally. [PEB] mpls lsr-id 192.3.3.3 [PEB] mpls # Configure the LSP establishment triggering policy.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration After completing the above configurations, you can display SVC L2VPN connection information on PE A or PE B. There should be one L2VPN connection established. CE A should be able to ping interface 100.1.1.2 of CE B and CE B should be able to ping...
Page 188
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration II. Network diagram Device Interface IP address Device Interface IP address CE A Vlan-int10 100.1.1.1/24 Loop0 192.4.4.4/32 PE A Loop0 192.2.2.2/32 Vlan-int12 10.1.1.2/24 Vlan-int12 10.1.1.1/24 Vlan-int23 10.2.2.2/24...
Page 189
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEA] mpls ldp [PEA-mpls-ldp] quit # Establish a remote session between PE A and PE B. [PEA] mpls ldp remote-peer 1 [PEA-mpls-ldp-remote-1] remote-ip 192.3.3.3 [PEA-mpls-ldp-remote-1] quit # Configure the interface connected with the P device, namely VLAN-interface 12, and enable LDP on the interface.
Page 190
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration # Configure the LSP establishment triggering policy. [P-mpls] lsp-trigger all [P-mpls] quit # Enable LDP globally. [P] mpls ldp [P-mpls-ldp] quit # Configure the interface connected with PE A, namely VLAN-interface 12, and enable LDP on the interface.
Page 191
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration # Configure the LSR ID and enable MPLS globally. [PEB] mpls lsr-id 192.3.3.3 [PEB] mpls # Configure the LSP establishment triggering policy. [PEB-mpls] lsp-trigger all [PEB-mpls] quit # Enable MPLS L2VPN and LDP globally.
Page 192
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration Configure CE B. <Sysname> system-view [Sysname] sysname CEB [CEB] vlan 10 [CEB-vlan10] port Ethernet 4/1/2 [CEB-vlan10] quit [CEB] interface Vlan-interface 10 [CEB-Vlan-interface10] ip address 100.1.1.2 24...
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration # On CE B, ping interface 100.1.1.1 of CE A. (Omitted) 1.8.5 Example for Configuring Kompella MPLS L2VPN I. Configuration prerequisites CE A and CE B are respectively connected to PE A and PE B through VLAN interfaces.
Page 194
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration The detailed configuration steps are omitted. After configuration, you can issue the display mpls ldp session and display mpls ldp peer commands to view the LDP sessions and peer relationship established, or the display mpls lsp command to view the LSPs established.
Page 195
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration [PEA-mpls-l2vpn-vpn1] route-distinguisher 100:1 [PEA-mpls-l2vpn-vpn1] vpn-target 1:1 [PEA-mpls-l2vpn-vpn1] ce ce1 id 1 range 10 [PEA-mpls-l2vpn-ce-vpn1-ce1] connection ce-offset 2 interface vlan-interface [PEA-mpls-l2vpn-ce-vpn1-ce1] quit [PEA-mpls-l2vpn-vpn1] quit # Configure PE B.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration round-trip min/avg/max = 34/68/94 ms 1.8.6 Example for Configuring a Kompella Local Connection I. Network requirements A Kompella local connection is required between CE A and CE B.
Page 197
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration After completing the above configurations, you can issue the display mpls l2vpn connection command on the PE. You should see that an L2VPN connection is established and is in the state of up.
Operation Manual – MPLS L2VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L2VPN Configuration 1.9 Troubleshooting MPLS L2VPN Symptom 1: After the L2VPN configuration, the peer PEs cannot ping each other. The output of the display mpls l2vc command shows that the VC is down and the remote VC label is invalid.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Chapter 1 MPLS L3VPN Configuration When configuring MPLS L3VPN, go to these sections for information you are interested MPLS L3VPN Overview MPLS L3VPN Configuration Task List...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.1.1 Introduction to MPLS L3VPN MPLS L3VPN is a kind of PE-based L3VPN technology for service provider VPN solutions. It uses BGP to advertise VPN routes and uses MPLS to forward VPN packets on service provider backbones.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration that are directly connected, rather than all VPN routing information on the provider network. A P device maintains only routes to PEs. It does not need to know anything about VPN routing information.
Page 204
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration instance. The administration information of the VPN instance includes the route distinguisher (RD), route filtering policy, and member interface list. IV. VPN-IPv4 address Traditional BGP cannot process VPN routes which have overlapping address spaces. If, for example, both VPN 1 and VPN 2 use addresses on the segment 10.110.10.0/24 and...
Page 205
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration For the global uniqueness of an RD, you are not recommended to set the Administrator subfield to any private AS number or private IP address.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration VIII. Tunneling policy A tunneling policy is used to select the tunnel for the packets of a specific VPN instance to use. After a VPN instance is created, you can optionally configure a tunneling policy. By default, LSPs are used as tunnels and no load balancing occurs (in other words, the number of tunnels for load balancing is 1).
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration PE 2 searches VPN instance entries according to the inner label and destination address of the packet to determine the outbound interface and then forwards the packet out the interface to CE 2.
Page 208
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration networking scheme can be used to implement the monitoring and filtering of user communications. This networking scheme requires two VPN targets: one for the "hub" and the other for the "spoke".
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration In this kind of networking scheme, if a VPN needs to access a shared site, the export target attribute and the import target attribute of the VPN must be contained respectively in the import target attribute and the export target attribute of the VPN instance of the shared site.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Then, a route is available between the local CE and the remote CE, and the VPN routing information can be advertised on the backbone. The following describes these phases in detail.
Page 211
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Implementation of carrier’s carrier Compared to the common MPLS L3VPN, the carrier’s carrier is different mainly because a CE of a Level 2 carrier accesses a PE of the Level 1 carrier: If the PE of the Level 1 carrier and the CE of the Level 2 carrier are in a same AS, configure IGP and LDP between them.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Figure 1-8 Scenario where the Level 2 carrier is an MPLS L3VPN service provider Note: On an S9500 Series routing switch, an LPU with a suffix of C does not support the carrier’s carrier feature.
Page 213
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration The PEs acting as ASBRs are connected through multiple VLAN interfaces. Each of them treats the other as a CE of its own and advertises IPv4 routes through conventional EBGP.
Page 214
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration VPN 1 VPN 1 CE 1 CE 3 PE 1 PE 3 ASBR 2 ASBR 1 MPLS backbone MPLS backbone MP-EBGP (PE) (PE) AS 100...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Figure 1-11 Network diagram for inter-provider VPN option C To improve the scalability, you can specify an RR in each AS, making it maintain all VPN-IPv4 routes and exchange VPN-IPv4 routes with PEs in the AS.
Page 216
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration User access. This means that the PEs must have a large amount of interfaces. VPN route managing and advertising, and user packet processing. These require that a PE must have a large-capacity memory and high forwarding capability.
Page 217
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration As shown in Figure 1-13, devices directly connected to CEs are called underlayer PEs (UPEs) or user-end PEs, whereas devices that are connected with UPEs and are in the internal network are called superstratum PEs (SPE) or service provider-end PEs.
Page 218
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Recursion and extension of HoVPN HoVPN supports HoPE recursion: A HoPE can act as a UPE to form a new HoPE with an SPE. A HoPE can act as an SPE to form a new HoPE with multiple UPEs.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.1.9 OSPF VPN Extension Note: This section focuses on the OSPF VPN extension. For more information about OSPF, refer to the OSPF Configuration. I. OSPF multi-instance on PE OSPF is a prevalent IGP protocol.
Page 220
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration can exchange OSPF routing information as they are using dedicated lines. This improves the network management and makes OSPF applications more effective. As shown in...
Page 221
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To avoid routing loops, when creating Type 3 LSAs, the PE always sets the flag bit DN for BGP VPN routes learnt from MPLS/BGP, regardless of whether the PE and the CEs are connected through the OSPF backbone.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration A sham link can be configured in any area. You need to configure it manually. In addition, the local VPN instance must have a route to the destination of the sham link.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration CE 3 AS 800 AS 100 PE 1 PE 2 MPLS backbone EBGP_Update:10.1.1.1/32 EBGP_Update:10.1.1.1/32 VPNv4_Update:10.1.0.0/16 AS_PATH:100,100 AS_PATH:800 RD:10.1.1.1/32 AS_PATH:800 CE 1 CE 2 AS 800...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Task Remarks Optional Configuring BGP AS Number Substitution Configure it as needed 1.3 Configuring VPN Instances VPN instances are used to isolate VPN routes from public network routes. Configuring VPN instances is required in all MPLS L3VPN networking schemes.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Follow these steps to associate a VPN instance with an interface: To do… Use the command… Remarks — Enter system view system-view interface interface-type —...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Optional By default, all routes Specify the import routing import route-policy permitted by the import policy for the current VPN...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: When configuring tunnel priorities using the tunnel select-seq command, the tunnel type closer to the select-seq keyword has a higher priority. II. Associating a tunneling policy with the VPN instance Follow these steps to associate a tunneling policy with the VPN instance: To do…...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.4.1 Configuration Prerequisites Before configuring basic MPLS L3VPN, complete these tasks: Configure IGP for the MPLS backbone (PEs and Ps) to achieve IP connectivity Configure MPLS basic capability for the MPLS backbone (PEs and Ps)
Page 229
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks — Enter system view system-view ip route-static dest-address { mask | mask-length } { gateway-address | interface-type interface-number [ gateway-address ] | vpn-instance...
Page 230
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration III. Configuring OSPF between PE and CE An OSPF process that is bound to a VPN instance does not use the public network router ID configured in system view. Therefore, you need to specify the router ID when starting a process or to configure the IP address for at least one interface of the VPN instance.
Page 231
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: For description and detailed configuration about OSPF, refer to OSPF Configuration in IP Routing Volume. The configuration change made by the domain-id domain-id [ secondary ] command does not take effect immediately.
Page 232
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Required A PE needs to inject the routes of import-route protocol Inject the routes of the the local CEs into...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Optional import-route protocol A CE needs to advertise Configure the route [ process-id ] [ med its routes to the connected...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.4.5 Configuring Routing Features for BGP VPNv4 Subaddress Family With BGP VPNv4 subaddress family, there are a variety of routing features that are the same as those for BGP IPv4 unicast routing. You can select any of the features as required.
Page 235
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Configure the system to use the local address as peer { group-name | the next hop of a route to...
Page 236
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Enter BGP-VPNv4 — ipv4-family vpnv4 subaddress family view Optional Set the default value of default local-preference the local preference...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Optional Make BGP updates to be peer { group-name | By default, a BGP update sent carry no private AS...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.5.2 Configuring Inter-Provider VPN Option A Inter-provider VPN option A applies to scenarios where the number of VPNs and that of VPN routes on the PEs are relatively small. It is simple to implement.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Required By default, PE performs VPN target filtering of the Disable VPN target received VPNv4 routes. undo policy vpn-target...
Page 240
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration The PEs and ASBR PEs in an AS must be able to exchange labeled IPv4 routes. Follow these steps to configure a PE for inter-provider VPN option C: To do…...
Page 241
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration distribute the route itself. This capability is implemented through BGP extended attributes and requires that the BGP peers can handle labeled IPv4 routes. Follow these steps to configure an ASBR PE for inter-provider VPN option C: To do…...
Page 242
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Which IPv4 routes are to be assigned with MPLS labels depends on the routing policy. Only routes that satisfy the criteria are assigned with labels. All the other routes are still common IPv4 routes.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: When configuring a routing policy for inter-provider VPN option C, you are recommended to configure the destination IP address match criteria of the routing information to avoid possible conflicts with common IPv4 address families.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: The default routes of a VPN instance can be advertised to only a BGP peer or peer group that is UPE. It is not recommended for an SPE to be connected to a CE directly. If an SPE must be directly connected with a CE, the VPN instance on the SPE and that on the UPE must be configured with different RDs.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks — Enter system view system-view Enter BGP view Required bgp as-number ipv4-family Enter BGP VPN instance vpn-instance Required view...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: If you start OSPF but do not configure the router ID, the system will automatically elect one. However, the same election rules produce the same router ID. Therefore, you are recommended to configure the router ID when starting an OSPF process.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks refresh bgp vpn-instance Perform a soft reset of the vpn-instance-name { ip-address | Available in user BGP connections in a...
Page 249
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks Display information about BGP VPNv4 display bgp vpnv4 { all | | vpn-instance Available in routes injected into vpn-instance-name } network...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration To do… Use the command… Remarks display bgp vpnv4 vpn-instance vpn-instance-name routing-table [ network-address [ { mask-length | mask-address } [ longer-prefixes ] ] |...
Page 251
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration The PEs and P device are switches that support MPLS, while the CEs are common Layer 3 switches. II. Network diagram Device Interface IP address...
Page 252
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure the P device. [P] interface loopback 0 [P-LoopBack0] ip address 2.2.2.9 32 [P-LoopBack0] quit [P] interface vlan-interface 3 [P-Vlan-interface3] ip address 172.1.1.2 24...
Page 253
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 3.3.3.9/32 OSPF 172.1.1.2 Vlan3 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 172.1.1.0/24 Direct 0 172.1.1.1 Vlan3 172.1.1.1/32 Direct 0 127.0.0.1 InLoop0 172.2.1.0/24 OSPF 172.1.1.2...
Page 254
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE2] mpls [PE2-mpls] quit [PE2] mpls ldp [PE2-mpls-ldp] quit [PE2] interface vlan-interface 1 [PE2-Vlan-interface1] mpls [PE2-Vlan-interface1] mpls ldp [PE2-Vlan-interface1] quit After you complete the above configurations, LDP sessions should be established between PE 1, P, and PE 2.
Page 256
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Reply from 10.1.1.1: bytes=56 Sequence=2 ttl=255 time=4 ms Reply from 10.1.1.1: bytes=56 Sequence=3 ttl=255 time=4 ms Reply from 10.1.1.1: bytes=56 Sequence=4 ttl=255 time=52 ms Reply from 10.1.1.1: bytes=56 Sequence=5 ttl=255 time=3 ms --- 10.1.1.1 ping statistics ---...
Page 257
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration After completing the above configuration, if you issue the display bgp vpnv4 vpn-instance peer command on the PEs, you should see that BGP peer relationship has been established between PE and CE, and has reached the state of Established.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 1.11.2 Example for Configuring Inter-Provider VPN Option A I. Network requirements CE 1 and CE 2 belong to the same VPN. CE 1 accesses the network through PE 1 in AS 100 and CE 2 accesses the network through PE 2 in AS 200.
Page 260
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration After you complete the above configurations, each ASBR PE and the PE in the same AS should be able to establish OSPF adjacencies. Issuing the display ospf peer command, you can see that the adjacencies reach the state of Full, and that PEs can learn the loopback addresses of each other.
Page 261
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure MPLS basic capability on PE 2 and enable MPLS LDP on the interface connected to ASBR PE 2. [PE2] mpls lsr-id 4.4.4.9 [PE2] mpls...
Page 262
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure PE 2. [PE2] ip vpn-instance vpna [PE2-vpn-instance] route-distinguisher 200:2 [PE2-vpn-instance] vpn-target 100:1 both [PE2-vpn-instance] quit [PE2] interface Vlan-interface 1 [PE2-Vlan-interface1] ip binding vpn-instance vpna [PE2-Vlan-interface1] ip address 10.2.1.2 24...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Bind the interface connected with CE 2 to the created VPN instance. [PE2] interface vlan-interface 1 [PE2-Vlan-interface1] ip binding vpn-instance vpn1 [PE2-Vlan-interface1] ip address 20.0.0.1 8 [PE2-Vlan-interface1] quit # Start BGP on PE 2.
Page 271
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram Device Interface IP address Device Interface IP address PE 1 Loop1 2.2.2.9/32 PE 2 Loop1 5.5.5.9/32 Loop6 30.0.0.1/32 Loop6 20.0.0.1/32 Vlan-int1 1.1.1.2/8 Vlan-int1 9.1.1.2/8...
Page 272
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure interface loopback1 and start IS-IS on it. [PE1] interface loopback 1 [PE1-LoopBack1] ip address 2.2.2.9 32 [PE1-LoopBack1] isis enable 1 [PE1-LoopBack1] quit # Create VPN instance vpn1 and configure the RD and VPN target attributes.
Page 274
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Start BGP on ASBR-PE 1 and specify to inject routes of IS-IS process 1. [ASBR-PE1] bgp 100 [ASBR-PE1-bgp] import-route isis 1 # Configure the capability to advertise labeled routes to IBGP peer 2.2.2.9 and to receive labeled routes from the peer.
Page 275
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure interface loopback1 and start IS-IS on it. [ASBR-PE2] interface loopback 1 [ASBR-PE2-LoopBack1] ip address 4.4.4.9 32 [ASBR-PE2-LoopBack1] isis enable 1 [ASBR-PE2-LoopBack1] quit # Configure interface VLAN-interface 2 and enable MPLS on it.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration # Configure the capability to advertise labeled routes to IBGP peer 4.4.4.9 and to receive labeled routes from the peer. [PE2-bgp] peer 4.4.4.9 as-number 600 [PE2-bgp] peer 4.4.4.9 connect-interface loopback 1...
Page 278
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration The exchange of customer VPN routes of the Level 2 carrier between PEs of the Level 2 carrier. In this process, MP-IBGP peer relationship must be established between the PEs of the Level 2 carrier (that is, between PE 3 and PE 4).
Page 282
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: The configurations for PE 4 and CE 2 are similar to those for PE 3 and CE 1. The detailed configuration steps are omitted.
Page 283
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Note: The configurations for PE 2 and CE 2 are similar to those for PE 1 and CE 1. The detailed configuration steps are omitted.
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [SPE2-bgp-vpnb] quit [SPE2-bgp] quit 1.11.7 Example for Configuring OSPF Sham Links I. Network requirements CE 1 and CE 2 belong to VPN 1 and are respectively connected to PE 1 and PE 2.
Page 295
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Destination/Mask Proto Cost NextHop Interface 20.1.1.0/24 Direct 0 20.1.1.1 Vlan2 20.1.1.1/32 Direct 0 127.0.0.1 InLoop0 20.1.1.2/32 Direct 0 20.1.1.2 Vlan2 30.1.1.0/24 OSPF 3124 20.1.1.2 Vlan2 100.1.1.0/24...
Page 296
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [PE1-ospf-1] quit # Configure MPLS basic capability and MPLS LDP on PE 2 to establish LDP LSPs. <Sysname> system-view [Sysname] sysname PE2 [PE2] interface loopback 1 [PE2-LoopBack1] ip address 2.2.2.9 32...
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Issuing the display ip routing-table command on the CEs, you should see that the cost of the OSPF route to the peer CE is now 10 (the cost configured for the sham link), and that the next hop is now the VLAN interface 1 connected to the PE.
Page 300
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration II. Network diagram MPLS backbone Loop1 Vlan-int1 Vlan-int2 Loop1 Loop1 Vlan-int2 Vlan-int1 Vlan-int1 Vlan-int2 PE 1 PE 2 CE 1 CE 2 Vlan-int1 Vlan-int1 VPN 1...
Page 301
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration [CE2] display ip routing-table Routing Tables: Public Destinations : 8 Routes : 8 Destination/Mask Proto Cost NextHop Interface 10.1.1.0/24 10.2.1.2 Vlan1 10.1.1.1/32 10.2.1.2 Vlan1 10.2.1.0/24 Direct 0 10.2.1.1...
Page 302
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration Total Number of Routes: 4 BGP Local router ID is 10.2.1.1 Status codes: * - valid, > - best, d - damped, h - history,...
Page 303
Operation Manual – MPLS L3VPN H3C S9500 Series Routing Switches Chapter 1 MPLS L3VPN Configuration 10.1.1.1/32 10.2.1.2 Vlan1 10.2.1.0/24 Direct 0 10.2.1.1 Vlan1 10.2.1.1/32 Direct 0 127.0.0.1 InLoop0 10.2.1.2/32 Direct 0 10.2.1.2 Vlan1 100.1.1.1/32 10.2.1.2 Vlan1 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32...
Page 304
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MPLS Hybrid Insertion Configuration ............... 1-1 1.1 Overview of MPLS Hybrid Insertion................... 1-1 1.1.1 Introduction to Hybrid Insertion ................1-1 1.1.2 Classification of Hybrid Insertion................1-2 1.2 Configuring Hybrid Insertion Based on LPUs with a Suffix of C, CA, or CB......
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Chapter 1 MPLS Hybrid Insertion Configuration When configuring MPLS hybrid insertion, go to these sections for information you are interested in: Overview of MPLS Hybrid Insertion...
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration without changing the original networking. To meet this requirement, LPUs supporting MPLS must be configured to redirect the MPLS service to the MPLS SPUs for service processing.
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration II. Configuring MPLS service redirection at private network side Redirect the MPLS service at the private network side to the service loopback group with the MPLS processing capability.
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Note: The MPLS service here refers to the service processed by the device that functions as a P device. It does not include the L3VPN or VLL services on the PE.
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Note: For configuration of VPLS instance, refer to VPLS Configuration. II. Binding VPLS virtual service interface with VPLS instance By binding the MPLS-VPLS virtual service interface with the VPLS instance, the load can be shared among virtual service interfaces on the L3+ board.
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration 1.3.5 Displaying and Maintaining Hybrid Insertion Configuration To do... Use the command... Remarks display Display the current Available in any view current-configuration configuration...
Page 312
CE 1 and CE 3 constitute VPN A. CE 2 and CE 4 constitute VPN B. PE 1 and PE 2 are H3C S9500 series routing switches that support the MPLS function. CE 1 and CE 2 are common low-end or mid-range routing devices. CE 3 and CE 4 are Layer-2 switches that directly connect with users.
Page 313
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration Configure PE 1 # Configure the global MPLS. [PE1] mpls lsr-id 1.1.1.1 [PE1] mpls [PE1] mpls ldp # Configure a public network interface and enable MPLS on it.
Page 314
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE1-GigabitEthernet2/2/4] port link-aggregation group 1 # Configure the port-based QoS policy. [PE1] acl number 2000 [PE1-acl-basic-2000] rule 0 permit source any [PE1] traffic classifier one...
Page 315
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE1-bgp-af-vpn] peer 2.2.2.2 group 100 Configure the P device # Configure the global MPLS. [P] mpls lsr-id 3.3.3.3 [P] mpls [P] mpls ldp # Configure an interface and enable MPLS on the interface.
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE2-vlan200] port GigabitEthernet 2/2/1 [PE2-vlan200] interface vlan-interface 200 [PE2-vlan-interface200] ip address 196.168.2.1 255.255.255.0 [PE2-vlan-interface200] mpls [PE2-vlan-interface200] mpls ldp [PE2-vlan-interface200] quit # Start the OSPF on the interface connecting PE 2 and the P routing device and on the loopback interface.
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE2-Ethernet3/1/1] qos apply policy one inbound [PE2-Ethernet3/1/1] quit # Bind the VPN A to the VLAN interface that connects PE 2 and CE 3.
Page 318
CE 1 and CE 3 constitute VPNA. CE 2 and CE 3 constitute VPNB. PE 1 and PE 2 are H3C S9500 series routing switches that support the MPLS function. CE 1 and CE 2 are common low-end or mid-range routing devices. CE 3 and CE 4 are Layer-2 switches that directly connect with users.
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration [PE2] link-aggregation group 1 service-type mpls # Add multiple ports to the MPLS service loopback group. [PE2] interface GigabitEthernet 2/2/3 [PE2-GigabitEthernet2/2/3] stp disable...
Page 322
Operation Manual – MPLS Hybrid Insertion H3C S9500 Series Routing Switches Chapter 1 MPLS Hybrid Insertion Configuration II. Network diagram Figure 1-3 Network diagram for configuring L3+ hybrid insertion III. Configuration procedure Configure PE 1 # Configure the IGP protocol, which is OSPF in this example.
Page 325
Operation Manual – GRE H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 GRE Configuration ...................... 1-1 1.1 GRE Overview ........................1-1 1.1.1 Introduction to GRE....................1-1 1.1.2 GRE Applications ....................1-3 1.2 Configuring a GRE over IPv4 Tunnel ................1-4 1.2.1 Configuration Prerequisites..................
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration Chapter 1 GRE Configuration When configuring GRE, go to these sections for information you are interested in: GRE Overview Configuring a GRE over IPv4 Tunnel Displaying and Maintaining GRE...
Page 327
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration I. Encapsulation process After receiving an X protocol packet through the interface connecting Group1, Router A submits it to the X protocol for processing. The X protocol checks the destination address field in the packet header to determine how to route the packet.
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration Upon receiving an IP packet from the tunnel interface, Router B checks the destination address. If the destination is itself, Router B strips off the IP header of the packet and submits the resulting packet to the GRE protocol.
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration II. Scope enlargement of the network running a hop-limited protocol Figure 1-5 Scope enlargement of the network When the hop count between two terminals exceeds 15, the terminals cannot communicate with each other.
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration 1.2.2 Configuration Procedure Follow these steps to configure a GRE over IPv4 tunnel: To do… Use the command… Remarks — Enter system view system-view Optional By default, the IPv6...
Page 331
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration To do… Use the command… Remarks Required source { ip-address | Configure the source ipv6-address | By default, no source address for the tunnel interface-type address is configured for...
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration remote end. Or, you can enable the dynamic routing protocol on both the tunnel interface and the router interface connecting the private network so that the dynamic routing protocol can establish a routing entry that allows the tunnel to forward packets through the tunnel.
Page 333
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration II. Network diagram Figure 1-7 Network diagram for GRE application III. Configuration procedure Configure Switch A # Configure VLAN-interface 100. <Sysname1> system-view [Sysname1] vlan 100 [Sysname1-vlan100] port GigabitEthernet 4/1/1...
Page 334
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration # Create service loop group 1, setting the configuration mode to manual and the service type to tunnel. [Sysname1] link-aggregation group 1 mode manual [Sysname1] link-aggregation group 1 service-type tunnel # Configure the tunnel to reference service loop group 1 in tunnel interface view.
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration [Sysname2-Tunnel4/0/1] source vlan-interface 101 # Configure the destination address for interface Tunnel 4/0/1 (IP address of the VLAN interface to which GigabitEthernet 4/1/2 of Switch A belongs). Moreover, enable the expediting function.
Page 336
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration <Sysname1> system-view # Enable IPv6. [Sysname1] ipv6 # Configure VLAN-interface 100. [Sysname1] vlan 100 [Sysname1-vlan100] port GigabitEthernet 4/1/1 [Sysname1-vlan100] quit [Sysname1] interface vlan-interface 100 [Sysname1-Vlan-interface100] ipv6 address 2002::1:1 64 [Sysname1-Vlan-interface100] quit # Configure VLAN-interface 101, the physical interface for the tunnel.
Page 337
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration [Sysname1] interface tunnel 4/0/1 [Sysname1-Tunnel4/0/1] aggregation-group 1 [Sysname1-Tunnel4/0/1] quit # Add GigabitEthernet 4/1/3 to service loop group 1. [Sysname1] interface GigabitEthernet 4/1/3 [Sysname1-GigabitEthernet4/1/3] stp disable [Sysname1-GigabitEthernet4/1/3] port link-aggregation group 1 # Configure a static route from Switch A through interface Tunnel 4/0/1 to Group2.
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration # Configure the destination address of interface Tunnel 4/0/1 to be the IP address of the Vlan interface to which GigabitEthernet 4/1/2 of Switch A belongs. Moreover, enable the expediting function.
Page 339
Operation Manual – GRE H3C S9500 Series Routing Switches Chapter 1 GRE Configuration Solution: On Switch A and Switch B, carry out the display ip routing-table command in any view respectively. On Switch A, observe whether there is a route from itself through Tunnel 1/0/0 to 10.2.0.0/16.
Need help?
Do you have a question about the H3C S9500 Series and is the answer not in the manual?
Questions and answers