MPLS NA PLATFORMIE HUAWEI

KACPER WOJSZKO

System engineer
 AGENDA

 Wstęp do MPLS
 Podstawowe pojęcia
 VPN
 Zrealizowane rozwiązania
 LAB
 DLACZEGO?

 Routing oparty na IP – longest prefix matching (CIDR)

 Niska wydajność sprzętu
 ATM – złożoność, wysokie koszty wdrażania
 WPROWADZENIE

 MPLS – Multi-Protocol Label Switching

 Przełączanie w możliwie
najprostszy sposób

 LER = PE
 LSR = P
 LSP – Label Switch Path
 ETYKIETA MPLS

 Warstwa 2.5

 Zalety z L2 i L3
 LDP

 Label Distribution Protocol

 Prostota konfiguracji

 FEC
 DLACZEGO MPLS?

 TE

 QoS

 VPN
VPN
VPN
 VPN

 Martini VLL (Virtual Leased Line)

 Kompella VLL (Virtual Leased Line)
 Martini VPLS (Virtual Private LAN Service)
 Kompella VPLS (Virtual Private LAN Service)
MARTINI L2 VLL
MARTINI VPLS L2VPN
 interface GigabitEthernet0/0/0 ospf 1
ip address 10.1.1.2 255.255.255.0 area 0.0.0.0
mpls lsr-id 1.1.1.9 mpls network 2.2.2.9 0.0.0.0 mpls lsr-id 3.3.3.9
mpls mpls ldp network 10.1.1.0 0.0.0.255 mpls
# network 10.2.2.0 0.0.0.255
# #
interface GigabitEthernet0/0/1
mpls l2vpn ip address 10.2.2.2 255.255.255.0 interface LoopBack1 mpls l2vpn
# mpls ip address 2.2.2.9 255.255.255.255 #
vsi vpna static mpls ldp vsi vpna static
pwsignal ldp pwsignal ldp
vsi-id 100 vsi-id 100
peer 3.3.3.9 peer 1.1.1.9
# #
mpls ldp mpls ldp
# #
# #
mpls ldp remote-peer 3.3.3.9 mpls ldp remote-peer 1.1.1.9
remote-ip 3.3.3.9 remote-ip 1.1.1.9

interface Ethernet0/0/1 interface Ethernet0/0/1

l2 binding vsi vpna l2 binding vsi vpna

interface GigabitEthernet0/0/0 interface GigabitEthernet0/0/1

ip address 10.1.1.1 255.255.255.0 ip address 10.2.2.1 255.255.255.0
mpls mpls
mpls ldp mpls ldp

ospf 1 ospf 1
area 0.0.0.0 area 0.0.0.0
network 1.1.1.9 0.0.0.0 network 10.2.2.0 0.0.0.255
network 1.1.1.0 0.0.0.255 network 3.3.3.9 0.0.0.0
L3VPN
ip vpn-instance VPN1
ipv4-family
route-distinguisher 100:1
vpn-target 100:1 export-extcommunity
vpn-target 100:1 import-extcommunity

bgp 100
peer 2.2.2.2 as-number 100
peer 2.2.2.2 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
peer 2.2.2.2 enable
#
ipv4-family vpnv4
policy vpn-target
peer 2.2.2.2 enable
#
ipv4-family vpn-instance VPN1
import-route direct
import-route static
#
interface GigabitEthernet0/0/0
ip binding vpn-instance VPN1
ip address 10.12.1.1 255.255.255.0
LAB
 KONFIGURACJA VLL

 Martini
 SINGLE TAG

[PE2] mpls l2vpn

[PE2-l2vpn] quit
[PE2] vcmp role silent
[PE2] interface gigabitethernet0/0/2
[PE2-GigabitEthernet0/0/2] port link-type hybrid
[PE2-GigabitEthernet0/0/2] quit [PE2] interface gigabitethernet0/0/2.1
[PE2-GigabitEthernet0/0/2.1] dot1q termination vid 20
[PE2-GigabitEthernet0/0/2.1] mpls l2vc 1.1.1.1 101
[PE2-GigabitEthernet0/0/2.1] quit

[PE1] mpls l2vpn

[PE1-l2vpn] quit
[PE1] vcmp role silent
[PE1] interface gigabitethernet0/0/1
[PE1-GigabitEthernet0/0/1] port link-type hybrid
[PE1-GigabitEthernet0/0/1] quit
[PE1] interface gigabitethernet0/0/1.1
[PE1-GigabitEthernet0/0/1.1] qinq mapping vid 10 map-vlan vid 20
[PE1-GigabitEthernet0/0/1.1] mpls l2vc 3.3.3.3 101
[PE1-GigabitEthernet0/0/1.1] quit
 VLAN STACKING

[PE1] mpls l2vpn

[PE1-l2vpn] quit
[PE1] vcmp role silent
[PE1] interface gigabitethernet0/0/1
[PE1-GigabitEthernet0/0/1] port link-type hybrid
[PE1-GigabitEthernet0/0/1] quit
[PE1] interface gigabitethernet0/0/1.1
[PE1-GigabitEthernet0/0/1.1] qinq stacking vid 10 pe-vid 100
[PE1-GigabitEthernet0/0/1.1] mpls l2vc 3.3.3.3 101
[PE1-GigabitEthernet0/0/1.1] quit

PE2] mpls l2vpn

[PE2-l2vpn] quit
[PE2] vcmp role silent
[PE2] interface gigabitethernet0/0/2
[PE2-GigabitEthernet0/0/2] port link-type hybrid
[PE2-GigabitEthernet0/0/2] quit
[PE2] interface gigabitethernet0/0/2.1
[PE2-GigabitEthernet0/0/2.1] qinq termination pe-vid 100 ce-vid 10
[PE2-GigabitEthernet0/0/2.1] mpls l2vc 1.1.1.1 101
[PE2-GigabitEthernet0/0/2.1] quit
 PROJEKT

 45 switchy S6720-54C-EI-48S-AC
 6 routerów NE20E-S2F

 L2VPN (VLL, VPLS)

 L3VPN
 NG MVPN