Multi-Vrp Ce - Zte ZXR10 5900E Product Description

ZXR10 5900E Product Description

3.2.29 Multi-VRP CE

MVCE provides a kind of function similar to hierarchical PE, which transfer part of PE
functions to CE. But MVCE doesn't need to support MPLS, thus it has low requirements
on access and aggregation equipment. The corresponding device should not be called
as hierarchical PE. The corresponding device to MVCE is still CE.
User data flows are terminated at CE, which avoids bad impact of broadcast traffic on PE.
Complete isolation of different service transmission is implemented at CE, which solves
traditional LAN security problem with low cost. User isolation and security guarantee that
need to be implemented by PE are currently implemented by CE, which conforms to the
development trend of marginalized network security and current requirements of carrier
on bearer network.
A comparison between MVCE and hierarchical PE:

Interfaces between two layers are at least as much as VPN quantity;

The upper layer PE needs to reconfigure VRF that is already configured on MVCE;

Run a IGP/BGP counterpart or configure static routing for each VPN;

Lower layer device doesn't support MPLS.
MVCE requires the device to support VPN access with IP address overlapping. With the
development of technology, MVCE can be implemented on medium-end switch.
Configure multiple VRF on MVCE corresponding to multiple VPN sites. Each VFR needs
an uplink interface to connect to PE. Configure the same VRF at the corresponding
interface on PE.
Since MVCE doesn't need to support MPLS, there are still ordinary data packets
between MVCE and PE instead of MPLS labels. Differently, there is a layer of MPLS
labels between hierarchical PE. Thus VPN traffic can only be differentiated by interface
on PE, which means PE shall has exactly the same VPN interfaces as much as the VPN
MVCE supports.(which is the same as ordinary PE supports L3 VPN configuration.)
62 ZTE Confidential Proprietary