MPLS Layer 3 VPNs

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-1
 Describe the various methods that are used to deploy IPv6 over MPLS

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-2
Support for IPv6 in MPLS

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-3
There are several methods to provision IPv6 over an MPLS
network:
IPv6 tunnels configured on the CE
Layer 2 MPLS VPN
Cisco 6PE

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-4
 IPv6 IPv6-in-IPv4 IPv6
Tunnels

IPv6 P P Dual-Stack
IPv4-IPv6
IPv4 PE CE Routers
PE

IPv4 IPv6
Dual-Stack
IPv4-IPv6
CE Routers
IPv6 P P
PE

IPv6
IPv6
IPv4 PE

IPv4

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-5
 IPv6 IPv6 IPv6

Circuit
P P
IPv6 IPv6

IPv4 IPv4
AToM AToM

P P

IPv4 IPv4 IPv6

AToM AToM

Circuit over MPLS (for

IPv6 example, ATM VC, IPv6
Frame Relay PVC,
Ethernet)

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-6
 IPv6 MP-IBGP IPv6
2001:DB8:0002:: Sessions 2001:DB8:0004::

CE P P CE
IPv6 6PE 6PE

IPv4

CE CE
192.0.2.0 IPv4 IPv6 2001:DB8:0005::

2001:DB8:0003:: IPv6

CE P P
IPv6
IPv4 6PE 6PE

CE CE
192.0.2.65 IPv4 IPv4 192.0.2.30

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-7
 IPv6 MP-IBGP IPv6
2001:DB8:0002:: Sessions 2001:DB8:0004::

CE P P CE
IPv6 6PE 6PE

IPv4

CE CE
192.0.2.0 IPv4 IPv6 2001:DB8:0005::

2001:DB8:0003:: IPv6

CE P P
IPv6
IPv4 6PE 6PE

CE IPv6-Unaware CE
192.0.2.65 IPv4 IPv4 192.0.2.30
No Core Upgrade

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-8
 2001:DB8:0002:: 2001:DB8:4::
1
CE1 CE2

3
Loopback 0:
192.0.2.1 Loopback 0:
6PE1 192.0.2.133
2 6PE2
Translation of IPv6 BGP
Next Hop into IPv4 Addresses
P1 P2
Recursion of this Address
4
via IGPv4

1. IGPv4 advertises the reachability of 192.0.2.133.

2. LDPv4 binds a label to 192.0.2.133.

3. MP-BGP advertises 2001:DB8:4:: and binds a (second-level) label. The

IPv6 next hop is an IPv4-mapped IPv6 address built from 192.0.2.133.

4. The BGP next hop for the destination IPv6 prefix is set to an
IPv4-compatible address, which is built from the 6PE2 router.

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-9
 MPLS label POP and IPv6 forwarding:
6PE2 receives an MPLS packet.
Lookup is done on label.
The result is POP label and IPv6 lookup on the
IPv6 destination.
2001:DB8:0002:: 2001:DB8:4::
IPv6 Packet to
2001:DB8:4:: IPv6 Packet to
CE1 2001:DB8:4:: CE2
1 5
Loopback0:
192.0.2.1 Loopback0:
6PE1 192.0.2.133
6PE2
2 4
P1 3 P2

LDP/IGPv4 MP-BGP Label IPv6 Packet MP-BGP Label IPv6 Packet

Label1 to 6PE2 to 2001:DB8:4:: 2001:DB8:4:: to 2001:DB8:4:: 2001:DB8:4::

LDP/IGPv4 MP-BGP Label IPv6 Packet

Label1 to 6PE2 to 2001:DB8:4:: 2001:DB8:4::

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-10
 Full Mesh of
IPv6 MP-IBGP IPv6
Sessions
P P
IPv6 6PE 6PE

IPv4

CE
IPv4 IPv6

IPv6

P P
IPv6
IPv4 6PE 6PE

IPv4 IPv6 IGP MP-BGP IPv4

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-11
 interface GigabitEthernet 0/0/0/0
description Customer
ipv6 enable
ipv6 address 2001:0db8::14/96
!
interface GigabitEthernet 0/0/0/1
description CORE
ipv4 address 192.168.2.2 255.255.255.252
!
mpls ldp
interface GigabitEthernet 0/0/0/1
router bgp 64500
neighbor 192.168.2.1
remote-as 64500
address-family ipv4 unicast
address-family ipv6 labeled-unicast
!

2001:DB8:0620:: 2001:DB8:0421::
CE1 6PE1 6PE2 CE2
P1

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-12
 Can be compared to a regular IPv4 MPLS VPN PE, with the additon of
IPv6 support within a VRF
Provides logically separate routing table entries for VPN member
devices
Can be deployed over an existing IPv4 backbone
Does not require modification of the MPLS core routers

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-13
 Customer A Full Mesh of Customer A
2001:DB8:422:: MP-IBGP 2001:DB8:420::
Sessions
CE1 P P CE
6VPE 6VPE

2001:DB8:821::

CE

Customer B
Customer A
2001:DB8:429::

CE P P

6VPE 6VPE
2001:DB8:824:: 2001:DB8:823::

CE CE
Customer B Customer B

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-14
 Customer A Full Mesh of Customer A
2001:DB8:422:: MP-IBGP 2001:DB8:420::
Sessions
CE1 P P CE
6VPE1 6VPE2

2001:DB8:821::

CE

Customer B
Customer A
2001:DB8:429::

CE P P

6VPE 6VPE
2001:DB8:824:: 2001:DB8:823::

CE CE
Customer B Customer B
interface Ethernet0
ip vrf forwarding CustomerA
ipv6 address 2001:db8:101::1/64

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-15
The configuration steps for 6VPE on PE routers are as follows:
Enable IPv6 routing and IPv6 Cisco Express Forwarding.
Configure MP-BGP for VPN route exchange.
Configure the customer IPv6 VRF tables.
Configure the customer VRF interfaces.
Configure the customer VRF (PE-CE) IPv6 routing protocols or static
IPv6 routes.
Redistribute the CE-PE routing protocol VRF routes into MP-BGP.

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-16
 Cisco IOS and Cisco IOS
IOS XE XR
vrf Customer_A
address-family ipv6 unicast
CE1 6PE1 CE2
import route-target
P1 6PE2
64500:1
!
export route-target
vrf Customer_A 64500:1
rd 64500:1 !
route-target export 64500:1 router bgp 64500
route-target import 64500:1 address-family vpnv6 unicast
! !
router bgp 64512 neighbor 10.1.1.1
neighbor 10.1.1.4 remote-as 64500 remote-as 64500
neighbor 10.1.1.4 update-source Loopback0 update-source Loopback0
! !
address-family vpnv6 address-family vpnv6 unicast
neighbor 10.1.1.4 activate !
neighbor 10.1.1.4 send-community both vrf Customer_A
! rd 64500:1
address-family ipv6 vrf Customer_A address-family ipv6 unicast
redistribute connected redistribute connected
! !
ipv6 route vrf Customer_A router static
2003:430:210:1::/64 GigabitEthernet0/0 vrf Customer_A
address-family ipv6 unicast
2b11::2f01:4c GigabitEthernet0/0/0/0

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-17
 router#
show ipv6 route vrf vrf-name

Displays the IPv6 routing table associated with a VPN VRF instance

router#
show bgp vpnv6 unicast vrf vrf-name

Displays VPN entries in a BGP table

router#
show running-config vrf vrf-name
Displays VPN VRF configuration

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-18
 IPv6 and IPv6 VPNs are treated as another service that can be added
on the edge over the stable multiservice IPv4 MPLS core.

2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-19
 2012 Cisco and/or its affiliates. All rights reserved. SPEDGE v1.02-20