Full Lab

for
end to end
data delivery
Through service provider
(transit)
automous system
VPN – L2 & 3 Lab
Prepared by:
> Hazem Ali Farag: Enterprise Network Engineer – Egypt.
> Samar Hesham: IP core networking Engineer – Egypt.
Table of Contents:
===============
Network Topolgy.

Configuration:
- Transit (Service Provider) Autonomus system configuration.
*P – P router configuration.
* PE – P router configuration.
* PE – PE router configuration.
* CE – PE router configuration.

Troubleshooting.
Network Topology
 P – P router configuration (Interfaces and MPLS):
P1 P2 P3 P4
interface Loopback0 interface Loopback0 interface Loopback0 interface Loopback0
ip address 101.101.101.101 ip address 102.102.102.102 ip address 103.103.103.103 ip address 104.104.104.104
255.255.255.255 255.255.255.255 255.255.255.255 255.255.255.255
! ! ! !
interface Loopback1 interface Loopback1 interface Loopback1 interface Loopback1
ip address 201.201.201.201 ip address 202.202.202.202 ip address 203.203.203.203 ip address 204.204.204.204
255.255.255.255 255.255.255.255 255.255.255.255 255.255.255.255
! ! ! !
interface Loopback10 interface Loopback10 interface Loopback10 interface Loopback10
ip address 10.45.1.1 255.255.255.0 ip address 10.45.1.2 255.255.255.0 ip address 10.45.1.3 255.255.255.0 ip address 10.45.1.4 255.255.255.0
! ! ! !
interface Ethernet0/0 interface Ethernet0/0 interface Ethernet0/0 interface Ethernet0/0
ip address 10.10.0.1 255.255.255.252 ip address 10.20.0.1 255.255.255.252 ip address 10.10.0.2 255.255.255.252 ip address 10.20.0.2 255.255.255.252
ip ospf network point-to-point ip ospf network point-to-point ip ospf network point-to-point ip ospf network point-to-point
mpls label protocol ldp mpls label protocol ldp mpls label protocol ldp mpls label protocol ldp
mpls ip mpls ip mpls ip mpls ip
! ! ! !
interface Ethernet0/1 interface Ethernet0/1 interface Ethernet0/1 interface Ethernet0/1
ip address 10.10.1.1 255.255.255.252 ip address 10.10.1.2 255.255.255.252 ip address 10.30.1.1 255.255.255.252 ip address 10.30.1.2 255.255.255.252
ip ospf network point-to-point ip ospf network point-to-point ip ospf network point-to-point ip ospf network point-to-point
mpls label protocol ldp mpls label protocol ldp mpls label protocol ldp mpls label protocol ldp
mpls ip mpls ip mpls ip mpls ip
! ! ! !
interface Ethernet0/2 interface Ethernet0/2 interface Ethernet0/2 interface Ethernet0/2
ip address 10.10.2.1 255.255.255.252 ip address 10.20.2.1 255.255.255.252 ip address 10.20.2.2 255.255.255.252 ip address 10.10.2.2 255.255.255.252
ip ospf network point-to-point ip ospf network point-to-point ip ospf network point-to-point ip ospf network point-to-point
mpls label protocol ldp mpls label protocol ldp mpls label protocol ldp mpls label protocol ldp
mpls ip mpls ip mpls ip mpls ip
! ! ! !
interface Ethernet0/3 interface Ethernet0/3 interface Ethernet0/3 interface Ethernet0/3
ip address 10.10.3.1 255.255.255.252 ip address 10.20.3.1 255.255.255.252 ip address 10.30.3.1 255.255.255.252 ip address 10.40.3.1 255.255.255.252
ip ospf mtu-ignore ip ospf network point-to-point ip ospf network point-to-point ip ospf network point-to-point
mpls label protocol ldp mpls label protocol ldp mpls label protocol ldp ip ospf mtu-ignore
mpls ip mpls ip mpls ip mpls label protocol ldp
! ! ! mpls ip
interface Ethernet1/0 interface Ethernet1/0 interface Ethernet1/0 !
ip address 10.10.11.1 ip address 10.20.11.1 ip address 10.30.11.1 interface Ethernet1/0
255.255.255.252 255.255.255.252 255.255.255.252 ip address 10.40.11.1
ip ospf network point-to-point ip ospf network point-to-point ip ospf network point-to-point 255.255.255.252
mpls label protocol ldp mpls label protocol ldp mpls label protocol ldp ip ospf network point-to-point
mpls ip mpls ip mpls ip mpls label protocol ldp
mpls ip
 P – P router OSPF (IGP) configuration:
P1 P2 P3 P4
router ospf 1 router ospf 1 router ospf 1 router ospf 1
network 10.10.0.0 0.0.0.3 area 0 network 10.10.1.0 0.0.0.3 area 0 network 10.10.0.0 0.0.0.3 area 0 network 10.10.2.0 0.0.0.3 area 0
network 10.10.1.0 0.0.0.3 area 0 network 10.20.0.0 0.0.0.3 area 0 network 10.20.2.0 0.0.0.3 area 0 network 10.20.0.0 0.0.0.3 area 0
network 10.10.2.0 0.0.0.3 area 0 network 10.20.2.0 0.0.0.3 area 0 network 10.30.1.0 0.0.0.3 area 0 network 10.30.1.0 0.0.0.3 area 0
network 10.10.3.0 0.0.0.3 area 0 network 10.20.3.0 0.0.0.3 area 0 network 10.30.3.0 0.0.0.3 area 0 network 10.40.3.0 0.0.0.3 area 0
network 10.10.11.0 0.0.0.3 area 0 network 10.20.11.0 0.0.0.3 area 0 network 10.30.11.0 0.0.0.3 area 0 network 10.40.11.0 0.0.0.3 area 0
network 10.45.1.0 0.0.0.255 area 0 network 10.45.1.0 0.0.0.255 area 0 network 10.45.1.0 0.0.0.255 area 0 network 10.45.1.0 0.0.0.255 area 0
network 101.101.101.101 0.0.0.0 network 102.102.102.102 0.0.0.0 network 103.103.103.103 0.0.0.0 network 104.104.104.104 0.0.0.0
area 0 area 0 area 0 area 0
 P – P router BGP configuration:
P1 P2 P3 P4
router bgp 65035 router bgp 65035 router bgp 65035 router bgp 65035
bgp cluster-id 100 bgp cluster-id 100 bgp cluster-id 200 bgp cluster-id 200
bgp log-neighbor-changes bgp log-neighbor-changes bgp log-neighbor-changes bgp log-neighbor-changes
redistribute connected redistribute connected redistribute connected redistribute connected
neighbor PS peer-group neighbor PS peer-group neighbor PS peer-group neighbor PS peer-group
neighbor PS remote-as 65035 neighbor PS remote-as 65035 neighbor PS remote-as 65035 neighbor PS remote-as 65035
neighbor PS update-source Loopback10 neighbor PS update-source Loopback10 neighbor PS update-source Loopback10 neighbor PS update-source Loopback10
neighbor PS soft-reconfiguration inbound neighbor PS soft-reconfiguration inbound neighbor PS soft-reconfiguration inbound neighbor PS soft-reconfiguration inbound
neighbor PES peer-group neighbor PES peer-group neighbor PES peer-group neighbor PES peer-group
neighbor PES remote-as 65035 neighbor PES remote-as 65035 neighbor PES remote-as 65035 neighbor PES remote-as 65035
neighbor PES update-source Loopback10 neighbor PES update-source Loopback10 neighbor PES update-source Loopback10 neighbor PES update-source Loopback10
neighbor PES route-reflector-client neighbor PES route-reflector-client neighbor PES route-reflector-client neighbor PES route-reflector-client
neighbor PES soft-reconfiguration inbound neighbor PES soft-reconfiguration inbound neighbor PES soft-reconfiguration inbound neighbor PES soft-reconfiguration inbound
neighbor 10.45.1.2 peer-group PS neighbor 10.45.1.1 peer-group PS neighbor 10.45.1.1 peer-group PS neighbor 10.45.1.1 peer-group PS
neighbor 10.45.1.3 peer-group PS neighbor 10.45.1.3 peer-group PS neighbor 10.45.1.2 peer-group PS neighbor 10.45.1.2 peer-group PS
neighbor 10.45.1.4 peer-group PS neighbor 10.45.1.4 peer-group PS neighbor 10.45.1.4 peer-group PS neighbor 10.45.1.3 peer-group PS
neighbor 10.45.2.1 peer-group PES neighbor 10.45.2.1 peer-group PES neighbor 10.45.2.3 peer-group PES neighbor 10.45.2.3 peer-group PES
neighbor 10.45.2.2 peer-group PES neighbor 10.45.2.2 peer-group PES neighbor 10.45.2.4 peer-group PES neighbor 10.45.2.4 peer-group PES
 PE – PE router configuration:
PE1 PE2 PE3 PE4
interface Loopback0 interface Loopback0 interface Loopback0 interface Loopback0
ip address 110.110.110.110 ip address 120.120.120.120 ip vrf forwarding Cust1 ip address 140.140.140.140
255.255.255.255 255.255.255.255 ip address 130.130.130.130 255.255.255.255
! ! 255.255.255.255 !
interface Loopback1 interface Loopback10 ! interface Loopback1
ip address 210.210.210.210 ip address 10.45.2.2 255.255.255.0 interface Loopback1 ip vrf forwarding Cust2
255.255.255.255 ! ip address 213.213.213.213 ip address 80.80.80.80 255.255.255.255
! interface Ethernet0/0 255.255.255.255 shutdown
interface Loopback2 ip address 10.10.11.2 255.255.255.252 ! !
ip vrf forwarding Cust2 ip ospf network point-to-point interface Loopback10 interface Loopback10
ip address 33.33.33.33 255.255.255.255 mpls label protocol ldp ip address 10.45.2.3 255.255.255.255 ip address 10.45.2.4 255.255.255.0
! mpls ip ! !
interface Loopback3 ! interface Ethernet0/0 interface Ethernet0/0
ip vrf forwarding Cust1 interface Ethernet0/1 ip address 10.30.3.2 255.255.255.252 ip address 10.30.11.2 255.255.255.252
ip address 15.15.15.15 255.255.255.255 ip address 10.20.11.2 255.255.255.252 ip ospf network point-to-point ip ospf network point-to-point
! ip ospf network point-to-point mpls label protocol ldp mpls label protocol ldp
interface Loopback10 mpls label protocol ldp mpls ip mpls ip
ip address 10.45.2.1 255.255.255.255 mpls ip ! !
! ! interface Ethernet0/1 interface Ethernet0/1
interface Ethernet0/0 interface Ethernet0/2 ip address 10.40.3.2 255.255.255.252 ip address 10.40.11.2 255.255.255.252
ip address 10.10.3.2 255.255.255.252 ip vrf forwarding Cust2 ip ospf network point-to-point ip ospf network point-to-point
ip ospf network point-to-point ip address 192.168.1.2 255.255.255.252 ip ospf mtu-ignore mpls label protocol ldp
mpls label protocol ldp ! mpls label protocol ldp mpls ip
mpls ip interface Ethernet0/3 mpls ip !
! ip vrf forwarding Cust2 ! interface Ethernet0/2
interface Ethernet0/1 ip address 192.168.2.2 255.255.255.252 interface Ethernet0/2 ip vrf forwarding Cust2
ip address 10.20.3.2 255.255.255.252 ! no ip address ip address 192.168.3.2 255.255.255.252
ip ospf network point-to-point interface Ethernet0/2.30 ! !
mpls label protocol ldp encapsulation dot1Q 30 interface Ethernet0/2.30 interface Ethernet0/3
mpls ip ip vrf forwarding Cust1 encapsulation dot1Q 30 ip vrf forwarding Cust2
! ip address 10.30.3.2 255.255.255.252 ip vrf forwarding Cust1 ip address 192.168.4.2 255.255.255.252
interface Ethernet0/2 ! ip address 10.30.3.2 255.255.255.252
no ip address interface Ethernet0/2.40 !
! encapsulation dot1Q 40 interface Ethernet0/2.40
interface Ethernet0/2.10 ip vrf forwarding Cust1 encapsulation dot1Q 40
encapsulation dot1Q 10 ip address 10.40.3.2 255.255.255.252 ip vrf forwarding Cust1
ip vrf forwarding Cust1 ip address 10.40.3.2 255.255.255.252
ip address 10.10.3.2 255.255.255.252
!
interface Ethernet0/2.20
encapsulation dot1Q 20
ip vrf forwarding Cust1
ip address 10.20.3.2 255.255.255.252
!
interface Ethernet0/3
ip vrf forwarding Cust1
no ip address
shutdown
!
 PE – PE router OSPF configuration:
PE1 PE2 PE3 PE4
router ospf 1 router ospf 1 router ospf 1 router ospf 1
network 10.10.3.0 0.0.0.3 area 0 network 10.10.11.0 0.0.0.3 area 0 network 10.30.3.0 0.0.0.3 area 0 network 10.30.11.0 0.0.0.3 area 0
network 10.20.3.0 0.0.0.3 area 0 network 10.20.11.0 0.0.0.3 area 0 network 10.40.3.0 0.0.0.3 area 0 network 10.40.11.0 0.0.0.3 area 0
network 10.45.2.0 0.0.0.255 area 0 network 10.45.2.0 0.0.0.255 area 0 network 10.45.2.0 0.0.0.255 area 0 network 10.45.2.0 0.0.0.255 area 0
network 110.110.110.110 0.0.0.0 area 0! network 120.120.120.120 0.0.0.0 area 0 network 130.130.130.130 0.0.0.0 area 0 network 140.140.140.140 0.0.0.0 area 0
 PE – PE router BGP configuration:
PE1 PE2 PE3 PE4
ip vrf Cust2 ip vrf Cust2 ip vrf Cust1 ip vrf Cust2
rd 2:2 rd 2:2 rd 2:3 rd 2:2
route-target export 2:2 route-target export 2:2 route-target export 2:1 route-target export 2:2
route-target export 3:3 route-target import 2:2 route-target export 4:4 route-target import 2:2
route-target import 2:2 ! route-target import 2:1 !
route-target import 4:4 router bgp 65035 route-target import 3:3 router bgp 65035
! bgp log-neighbor-changes ! bgp log-neighbor-changes
ip vrf Cust1 redistribute connected router bgp 65035 redistribute connected
rd 2:1 neighbor RR peer-group bgp log-neighbor-changes neighbor RR peer-group
route-target export 2:1 neighbor RR remote-as 65035 redistribute connected neighbor RR remote-as 65035
route-target export 4:4 neighbor RR update-source Loopback10 neighbor RR peer-group neighbor RR update-source Loopback10
route-target import 2:1 neighbor RR soft-reconfiguration inbound neighbor RR remote-as 65035 neighbor RR soft-reconfiguration inbound
route-target import 3:3 neighbor 10.45.1.1 peer-group RR neighbor RR update-source Loopback10 neighbor 10.45.1.3 peer-group RR
! neighbor 10.45.1.2 peer-group RR neighbor RR soft-reconfiguration inbound neighbor 10.45.1.4 peer-group RR
router bgp 65035 neighbor 110.110.110.110 remote-as 65035 neighbor 10.45.1.3 peer-group RR neighbor 120.120.120.120 remote-as 65035
bgp log-neighbor-changes neighbor 110.110.110.110 update-source Loopback0 neighbor 10.45.1.4 peer-group RR neighbor 120.120.120.120 update-source Loopback0
redistribute connected neighbor 140.140.140.140 remote-as 65035 neighbor 10.45.2.1 remote-as 65035 !
neighbor RR peer-group neighbor 140.140.140.140 update-source Loopback0 neighbor 10.45.2.1 update-source Loopback10 address-family vpnv4
neighbor RR remote-as 65035 neighbor 140.140.140.140 soft-reconfiguration ! neighbor 120.120.120.120 activate
neighbor RR update-source Loopback10 inbound address-family vpnv4 neighbor 120.120.120.120 send-community
neighbor RR soft-reconfiguration inbound ! neighbor 10.45.2.1 activate extended
neighbor 10.45.1.1 peer-group RR address-family vpnv4 neighbor 10.45.2.1 send-community extended exit-address-family
neighbor 10.45.1.2 peer-group RR neighbor 140.140.140.140 activate exit-address-family !
neighbor 10.45.2.3 remote-as 65035 neighbor 140.140.140.140 send-community ! address-family ipv4 vrf Cust2
neighbor 10.45.2.3 update-source Loopback10 extended address-family ipv4 vrf Cust1 redistribute connected
neighbor 120.120.120.120 remote-as 65035 exit-address-family redistribute connected redistribute static
neighbor 120.120.120.120 update-source Loopback0 ! neighbor 77.77.77.77 remote-as 65520 neighbor 7.7.7.7 remote-as 65510
! address-family ipv4 vrf Cust2 neighbor 77.77.77.77 disable-connected-check neighbor 7.7.7.7 disable-connected-check
address-family vpnv4 redistribute connected neighbor 77.77.77.77 update-source Loopback0 neighbor 7.7.7.7 update-source Loopback1
neighbor 10.45.2.3 activate redistribute static neighbor 77.77.77.77 activate neighbor 7.7.7.7 activate
neighbor 10.45.2.3 send-community extended exit-address-family neighbor 77.77.77.77 send-community both neighbor 8.8.8.8 remote-as 65510
neighbor 120.120.120.120 activate ! neighbor 77.77.77.77 next-hop-self neighbor 8.8.8.8 ebgp-multihop 255
neighbor 120.120.120.120 send-community ip route vrf Cust2 3.3.3.0 255.255.255.252 neighbor 88.88.88.88 remote-as 65520 neighbor 8.8.8.8 disable-connected-check
extended 192.168.1.1 neighbor 88.88.88.88 disable-connected-check neighbor 8.8.8.8 update-source Loopback1
exit-address-family ip route vrf Cust2 3.3.4.0 255.255.255.252 neighbor 88.88.88.88 update-source Loopback0 neighbor 8.8.8.8 activate
! 192.168.2.1 neighbor 88.88.88.88 activate exit-address-family
address-family ipv4 vrf Cust2 ip route vrf Cust2 5.5.5.5 255.255.255.255 neighbor 88.88.88.88 send-community both !
network 33.33.33.33 mask 255.255.255.255 192.168.2.1 neighbor 88.88.88.88 next-hop-self ip route vrf Cust2 7.7.7.7 255.255.255.255
exit-address-family ip route vrf Cust2 6.6.6.6 255.255.255.255 exit-address-family 192.168.3.1
! 192.168.1.1 ! ip route vrf Cust2 8.8.8.8 255.255.255.255
address-family ipv4 vrf Cust1 ip route vrf Cust2 19.19.19.19 255.255.255.255 ip route vrf Cust1 77.77.77.77 255.255.255.255 192.168.4.1
redistribute connected 192.168.1.1 10.30.3.1
redistribute static ip route vrf Cust2 19.19.19.19 255.255.255.255 ip route vrf Cust1 88.88.88.88 255.255.255.255
exit-address-family 192.168.2.1 10.40.3.1
! ip route vrf Cust2 70.70.70.70 255.255.255.255
ip route vrf Cust1 110.110.110.110 255.255.255.255 192.168.1.1
10.10.3.1 ip route vrf Cust2 80.80.80.80 255.255.255.255
ip route vrf Cust1 210.210.210.210 255.255.255.255 192.168.1.1
10.20.3.1 ip route vrf Cust2 192.168.50.0 255.255.255.0
! 192.168.1.1
!
route-map samar permit 10
match ip address 1
set extcommunity rt 3:3 additive
!
!
access-list 2 permit 33.33.33.33
 CE routers for L3 VPN & failover configuration:
CE2_Br1 (Cust1-HQ CE) CE2_Br3(Cust1-Br CE2) CE_Br3(Cust1-Br CE1) R_Br(Cust1-Br)

interface Loopback0 interface Loopback0 interface Loopback0 interface Loopback0

ip address 210.210.210.210 255.255.255.255 ip address 77.77.77.77 255.255.255.255 ip address 88.88.88.88 255.255.255.255 ip address 60.60.60.1 255.255.255.255
! ! ! !
interface Ethernet0/0.20 interface Ethernet0/0.30 interface Ethernet0/0 interface Loopback1
encapsulation dot1Q 20 encapsulation dot1Q 30 ip address 3.3.3.2 255.255.255.252 ip address 60.60.60.2 255.255.255.255
ip address 10.20.3.1 255.255.255.252 ip address 10.30.3.1 255.255.255.252 ! !
interface Ethernet0/1.30 interface Loopback2
Routing configuration: Routing configuration: encapsulation dot1Q 30 ip address 60.60.60.3 255.255.255.255
-------------------------------- -------------------------------- ip address 10.30.1.2 255.255.255.252 !
ip route 0.0.0.0 0.0.0.0 10.20.3.2 router bgp 65520 ! interface Loopback3
ip route 10.10.3.0 255.255.255.252 10.20.3.2 bgp log-neighbor-changes interface Ethernet0/1.40 ip address 60.60.60.4 255.255.255.255
ip route 110.110.110.110 255.255.255.255 10.20.3.2 bgp default local-preference 200 encapsulation dot1Q 40 !
redistribute connected ip address 10.40.3.1 255.255.255.252 interface Loopback4
neighbor 99.99.99.99 remote-as 65520 ! ip address 60.60.60.5 255.255.255.255
neighbor 99.99.99.99 update-source Loopback0 interface Ethernet0/1.50 !
neighbor 99.99.99.99 next-hop-self encapsulation dot1Q 50 interface Loopback5
neighbor 130.130.130.130 remote-as 65035 ip address 10.50.1.2 255.255.255.252 ip address 60.60.60.6 255.255.255.255
neighbor 130.130.130.130 ebgp-multihop 255 ! !
neighbor 130.130.130.130 update-source Loopback0 interface Ethernet0/2 interface Loopback6
neighbor 130.130.130.130 next-hop-self ip address 3.3.3.10 255.255.255.252 ip address 99.99.99.99 255.255.255.255
shutdown !
ip route 99.99.99.99 255.255.255.255 3.3.3.5 interface Ethernet0/0
ip route 130.130.130.130 255.255.255.255 10.30.3.2 Routing configuration: ip address 3.3.3.1 255.255.255.252
-------------------------------- !
router bgp 65520 interface Ethernet0/1
bgp log-neighbor-changes ip address 3.3.3.5 255.255.255.252
redistribute connected
neighbor 99.99.99.99 remote-as 65520 Routing configuration:
neighbor 99.99.99.99 update-source Loopback0 --------------------------------
neighbor 99.99.99.99 next-hop-self router bgp 65520
neighbor 130.130.130.130 remote-as 65035 bgp log-neighbor-changes
neighbor 130.130.130.130 ebgp-multihop 255 network 60.60.60.0 mask 255.255.255.248
neighbor 130.130.130.130 update-source Loopback0 redistribute connected
neighbor 130.130.130.130 next-hop-self neighbor 77.77.77.77 remote-as 65520
neighbor 130.130.130.130 route-map samar out neighbor 77.77.77.77 update-source Loopback6
neighbor 88.88.88.88 remote-as 65520
ip route 99.99.99.99 255.255.255.255 3.3.3.1 neighbor 88.88.88.88 update-source Loopback6
ip route 130.130.130.130 255.255.255.255 10.40.3.2
ip route 60.60.60.0 255.255.255.248 Null0
ip route 77.77.77.77 255.255.255.255 3.3.3.6
ip route 88.88.88.88 255.255.255.255 3.3.3.2
 L3 VPN Troubleshooting:
CE2_Br1 R_Br
CE2_Br1#ping 99.99.99.99 R_Br#ping 210.210.210.210
Type escape sequence to abort. Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 99.99.99.99, timeout is 2 seconds: Sending 5, 100-byte ICMP Echos to 210.210.210.210, timeout is 2 seconds:
.!!!! !!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 2/3/4 ms Success rate is 100 percent (5/5), round-trip min/avg/max = 2/2/4 ms

CE2_Br1>traceroute 99.99.99.99 R_Br#traceroute 210.210.210.210

Type escape sequence to abort. Type escape sequence to abort.
Tracing the route to 99.99.99.99 Tracing the route to 210.210.210.210
VRF info: (vrf in name/id, vrf out name/id) VRF info: (vrf in name/id, vrf out name/id)
1 10.20.3.2 1 msec 1 msec 1 msec 1 3.3.3.6 1 msec 1 msec 0 msec <<<<< CE2_Br3 (Main path)
2 10.10.3.1 [MPLS: Labels 27/61 Exp 0] 3 msec 4 msec 2 msec 2 10.30.3.2 2 msec 1 msec 2 msec
3 10.10.2.2 [MPLS: Labels 24/61 Exp 0] 3 msec 4 msec 2 msec 3 10.40.3.1 [AS 65035] [MPLS: Labels 41/48 Exp 0] 3 msec 3 msec 2 msec
4 10.30.3.2 [MPLS: Label 61 Exp 0] 2 msec 3 msec 1 msec 4 10.10.2.1 [MPLS: Labels 29/48 Exp 0] 3 msec 4 msec 2 msec
5 10.30.3.1 3 msec 3 msec 3 msec 5 10.20.3.2 [AS 65035] [MPLS: Label 48 Exp 0] 2 msec 3 msec 2 msec
6 3.3.3.5 3 msec 4 msec * 6 10.20.3.1 [AS 65035] 3 msec 4 msec *

Testing failover between CE and CE2 in branch 3:

Action : let CE2 WAN link go down or let its BGP neighborship go down by shut its Lo0

R_Br#traceroute 210.210.210.210
Type escape sequence to abort.
Tracing the route to 210.210.210.210
VRF info: (vrf in name/id, vrf out name/id)
1 3.3.3.2 1 msec 1 msec 0 msec <<<<<<< CE_Br3 (Backup path)
2 10.40.3.2 1 msec 1 msec 1 msec
3 10.30.3.1 [AS 65035] [MPLS: Labels 41/48 Exp 0] 4 msec 4 msec 2 msec
4 10.10.0.1 [MPLS: Labels 29/48 Exp 0] 3 msec 3 msec 2 msec
5 10.20.3.2 [AS 65035] [MPLS: Label 48 Exp 0] 2 msec 3 msec 2 msec
6 10.20.3.1 [AS 65035] 3 msec 4 msec *
 PE – CE router L2 VPN configuration:
CE_Br1 PE1 PE3 CE_Br3
interface Ethernet0/1.50 interface Ethernet0/2.50 interface Ethernet0/2.50 interface Ethernet0/1.50
encapsulation dot1Q 50 encapsulation dot1Q 50 encapsulation dot1Q 50 encapsulation dot1Q 50
ip address 10.50.1.1 255.255.255.252 xconnect 213.213.213.213 50 encapsulation mpls xconnect 210.210.210.210 50 encapsulation mpls ip address 10.50.1.2 255.255.255.252
pw-class samar pw-class hazem
!
pseudowire-class samar pseudowire-class hazem
encapsulation mpls encapsulation mpls
interworking vlan interworking vlan

 Troubleshooting:
CE_Br1 PE1 PE3 CE_Br3
CE_Br1#ping 10.50.1.2 PE3#ping mpls ipv4 210.210.210.210/32 CE_Br3#ping 10.50.1.1
Type escape sequence to abort. PE1#ping mpls ipv4 213.213.213.213/32 Sending 5, 100-byte MPLS Echos to 210.210.210.210/32, Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to Sending 5, 100-byte MPLS Echos to 213.213.213.213/32, timeout is 2 seconds, send interval is 0 msec: Sending 5, 100-byte ICMP Echos to
10.50.1.2, timeout is 2 seconds: timeout is 2 seconds, send interval is 0 msec: 10.50.1.1, timeout is 2 seconds:
.!!!! Codes: '!' - success, 'Q' - request not sent, '.' - timeout, !!!!!
Success rate is 80 percent (4/5), round-trip Codes: '!' - success, 'Q' - request not sent, '.' - timeout, 'L' - labeled output interface, 'B' - unlabeled output interface, Success rate is 100 percent (5/5), round-trip
min/avg/max = 2/2/3 ms 'L' - labeled output interface, 'B' - unlabeled output interface, 'D' - DS Map mismatch, 'F' - no FEC mapping, 'f' - FEC min/avg/max = 2/2/3 ms
CE_Br1# 'D' - DS Map mismatch, 'F' - no FEC mapping, 'f' - FEC mismatch,
mismatch, 'M' - malformed request, 'm' - unsupported tlvs, 'N' - no label
'M' - malformed request, 'm' - unsupported tlvs, 'N' - no label entry,
entry, 'P' - no rx intf label prot, 'p' - premature termination of LSP,
'P' - no rx intf label prot, 'p' - premature termination of LSP, 'R' - transit router, 'I' - unknown upstream index,
'R' - transit router, 'I' - unknown upstream index, 'X' - unknown return code, 'x' - return code 0
'X' - unknown return code, 'x' - return code 0
Type escape sequence to abort.
Type escape sequence to abort. !!!!!
!!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =
Success rate is 100 percent (5/5), round-trip min/avg/max = 104/117/153 ms
48/95/109 ms

PE1#show mpls l2transport vc 50 PE3#show mpls l2transport vc 50

Local intf Local circuit Dest address VC ID Status Local intf Local circuit Dest address VC ID Status
------------- -------------------------- --------------- ---------- ---------- ------------- -------------------------- --------------- ---------- ----------
Et0/2.50 Eth VLAN 50 213.213.213.213 50 UP Et0/2.50 Eth VLAN 50 210.210.210.210 50 UP
 On Next Lab:
Complex L3 VPN
by
Route leakage between
Cust1 and Cust2.
Thanks
for
your
time.