l2vpn Tutorial
l2vpn Tutorial
l2vpn Tutorial
Path to Convergence
Muhammad Waris Sagheer ([email protected]) P aresh Shah (p [email protected])
SANOG2006
L 2V P N
S A N O G
20 0 6
Agenda
1 . I n t r o d u c t i o n t o L 2V P Ns 2. Si g n a l i n g C o n c e p t s 3 . V P W ST r a n s p o r ts
4 . V P W S Se r v i c e I n t e r w o r k i n g 5 . V i r t u a l P r i v a t e L AN Se r v i c e 6. P s e u d o W i r e St i t c h i n g 7 . Q u a l i t y o f Se r v i c e 8 . D e m o n s tr a tio n 9 . Q & A
L 2V P N S A N O G 20 0 6
Introduction to L2VPNs
L 2V P N
S A N O G
20 0 6
What is L2VPN?
L 2V P N p rov ides an e n d -t o -e n d l a y e r 2 c o n n e c t i o n t o an en t erp rise of f ice in Mumb ai an d H y derab ad ov er a SP s MP L S or I P core
It can be Ethernet, Frame Relay, ATM, HDLC, PPP, etc It i s f o r layer 2 connectivity only, layer 3 i s trans p arent to MPLS L2VPN co re: layer 3 can be IPX , IPv 4 , IPv 6 , etc and no rou ting is involved w i th MPLS co re
Frame Relay A T M
CE1
Frame Relay CE2 MPLS / IP A T M MPLS / IP E Co re It i s d ep t h loernet o v er MPLS coCorere t IP co re ( L2 TPvE t 3h ernetep lo yments yed bu ) d ex i s t Mu mbai - PE Hyd erabad - PE
L 2V P N
S A N O G
20 0 6
Why is L2VPN n e e d e d ?
Allows SP to have a si ng le i nf r astr uc tur e f or b oth I P and leg ac y ser vi c es
Migrate legacy ATM and Frame Relay services to MPLS/IP core withou t interru p tion to ex isting services Provisioning new L2 V PN core services is incremental (not from scratch) in ex isting MPLS/IP
C u stomer can have their own rou ting, q os p olicies, secu rity mechanisms, etc
L 2V P N
S A N O G
20 0 6
3 V P NS
L AY E R
S P d ev i ces f o rw ard cu s to mer f rames bas ed o n Layer 2 i nf o rmati o n ( e. g . DLCI, V PI/ V CI, MAC, V LAN ID) N o S P i nv o lv ement i n cu s to mer IP ro u ti ng Enterp ri s e s tays i n co ntro l o f L3 p o li ci es ( Ro u ti ng , Q o S ) Mu lti p ro to co l s u p p o rt Ex amp le: FRATMEthernet
2 V P NS
T he C hoice of L 2V P N ov er L 3 V P N Wil l D ep en d on H ow Much C on t rol t he E n t erp rise Wan t s t o R et ain . L 2 V P N Serv ices A re C omp l emen t ary t o L 3 V P N Serv ices
L 2V P N S A N O G 20 0 6 6
L2VPN M o d e l s
L2-V PN M odels M PLS C or e V PW S Li k e-to-li k e -or Any -to-Any . P2P V PLS P2M P/ M P2M P I P c or e V PW S Li k e-to-li k e -or Any -to-Any . P2P
PPP/ HD LC
F R
PPP/ HD LC
7
L 2V P N
S A N O G
E ther net
E ther net
M PL S o r I P c o re Ps eud o W i res A C 2
PE 1
C us t o mer S ite A C 3
PE 2
A C 4 C us t o mer S ite
A p seudo-wi r e ( PW ) i s a c onnec ti on b etween two p r ovi der edg e ( PE ) devi c es whi c h c onnec ts two attac hm ent c i r c ui ts ( AC s).
ATM V C o r V P
L 2V P N S A N O G
( V LAN )
Pseudo Wire
C ontr ol C onnec ti on
B as i c B u i l d i ng B l ock s
Ad d s s cale thru : S es s i o n Manag ement, Erro r N o ti f i cati o n, L2 Acces s manag ement i nterw o rk i ng , etc. Req u i red Co mp o nents
Tr ansp or t C om p onent
Thi s i s the d eli v ery head er o f the encap s u lated p ack et. Thi s can be a Label ( MPLS ) o r an IP Head er. ( Typ i cally the IP ad d res s o f the Lo o p back i nterf ace o n Pro v i d er Ed g e ( PE) ro u ters . A U ni q u e i d enti f i er u s ed to i d enti f y a p arti cu lar ci rcu i t / p o rt o n a g i v en PE. ( V C Label o r V C ID) The Layer 2 PDU that i s the s u bj ect o f trans p o rt ( I. e. traf f i c recei v ed f ro m the Cu s to mer Ed g e ro u ter, typ i cally Ethernet, Frame Relay, HDLC f rames ,. . etc. )
9
Tunneli ng C om p onent
L2 PD U
L 2V P N
B uil din g B l oc k s f or L 2 V PN s
Nat i v e S erv i c e ( i . e. , Frame Relay) D L C I 2 0 0
D L C I 2 0 1
1 . S et up L o c al A c c es s C i rc ui t Pro p ert i es
PE 1 ( SF O )
PE 2( N Y C )
MPLS / IP
3 . L D P S i g nali ng D L C I 2 0 1
L 2V P N
Req u i res S i g nali ng and Interw o rk w i th nati v e s erv i ces ( i . e. , Frame Relay LMI)
10
B uil din g B l oc k s f or L 2 V PN s
Nat i v e S erv i c e ( FR, E t h , H D L C , et c . ) D L C I 2 0 0 A c c es s C i rc ui t s ( A C ) D L C I 2 0 8
PE 1 ( SF O )
PE 2( N Y C )
IP
C W (o p t) L 2 T Pv 3 E nc ap S es s I D + C o o k ie I Pv 4 L o c al H ead er
A c c es s C i rc ui t s ( A C )
D L C I 2 0 8
D elivery H eader ( IPv4 H eader) = Transp ort an L2 PD U f rom ingress to egress PE ; comp rised of IPv4 loop b ack addresses ( D A, SA) 4 b yte Session ID + O p tional 8 b yte C ook ie = Signalled or Statically conf igu red
B uil din g B l oc k s f or L 2 V PN s
Nat i v e S erv i c e ( FR, E t h , H D L C , et c . ) V L A N3 3 0 A c c es s C i rc ui t s ( A C ) V L A N2 1 0
PE 1 ( SF O )
PE 2( N Y C )
MPLS
C W M art i ni / PW E 3 E nc ap V C L ab el M PL S L ab els T unnel L ab el L o c al H ead er
A c c es s C i rc ui t s ( A C )
V L A N2 1 0
Tu nnel Lab el ( MPLS Lab el) ( 4 B yte) = E stab lished thru LD P link estab lishment or RSPV -TE signalling. Forms a u ni-directional p ath to the destination PE V C Lab el ( MPLS Lab el) ( 4 B yte) = Signalled thru E x tended LD P session estab lished b etween PE p airs ( Martini ; PW E 3 b ased draf ts) C ontrol W ord ( op t. ) ( 4 B yte) + C u stomer Payload ( may not transp ort entire L2 header)
12
L 2V P N
S A N O G
20 0 6
S erv ic e O f f erin g s
L 2 V PN
ATM
VPWS
AAL5 over Pseudowire
Muxed UNI
VPL S
FR over Pseudowire Ethernet Relay Service (ERS) Ethernet Multipoint Service (EMS)
Muxed UNI
Muxed UNI
Unmuxed UNI
Muxed UNI
Other variants
Unmuxed UNI
Unmuxed UNI
PPP/ HDLC
L 2V P N S A N O G 20 0 6 13
I E T F S t a n da rdiz a t ion A c t iv it y
I E T F work in g group P WE 3
R eq u irem ents d etailed in
D ev el op st an dards f or t he en cap sul at ion & serv ice emul at ion of p seudo wires F ocused on P oin t -t o-P oin t circuit emul at ion
P S N S ervice -> E th ernet, A T M , P P P , F R , H D L C tu nnel -> G R E , M P L S , L 2T P and s o on . .
14
L 2V P N
S A N O G
20 0 6
Pseudo Wire
Ci s co I E T F T echnol ogy A d op ti on
M PLS ( P2P, f o r m e r l y dr a f t -m a r t i n i ) d r a f t -i e t f -p w e 3 -c o n t r o l -p r o t o c o l -x x d r a f t -i e t f -p w e 3 -[ a t m , f r a m e -r e l a y , e t h e r n e t , e t c . ] d r a f t -i e t f -l 2 v p n -v p l s -l d p -x x ( L D P B a s e d S i g n a l l i n g ) d r a f t -i e t f -p p v p n -b g p v p n -a u t o -x x ( B G P a u t o -d i s c o v e r y )
15
L ay er 2 V P N
(V P L S)
L 2V P N
S A N O G
20 0 6
S ig na l ing C once p ts
L 2V P N
S A N O G
20 0 6
16
UNI S i g nali ng
PE 1
PE 2
UNI S i g nali ng
MPLS / IP
PW
S i g nali ng
E st ab l ishmen t of a con t rol con n ect ion (L C C E Sign al in g or L D P ) P rov ide an in t erf ace t o l ocal U N I t o (act iv at e, deact iv at e, del et e) at t achmen t circuit s (A C s)
S A N O G 20 0 6
A n y T ra n sp ort ov er M PL S
Provi s i oni ng
Ps eud o w i re PE 2 rep eat s s t ep s 1 -5 s o t h at b i -d i rec t i o nal lab el/ V C I D map p i ng s are es t ab li s h ed 4 . PE 1 s end s lab el map p i ng mes s ag e c o nt ai ni ng V C FE C T L V & V C lab el T L V
PE 2
MPLS / IP
L 2V P N
O n e L D P session can sign al mul t ip l e p seudowires P rov ides a dy n amic mechan ism t o in t erf ace wit h U N I sign al in g R eq uires a common V C I D t o successf ul l y b in d A C s t oget her. P seudowire (V C ) l ab el s are assign ed b y t he remot e p eer an d don t reqN O G uire gl ob al un iq uen ess b et ween P E s. S A 20 0 6
18
PE 2
MPLS
1 7 2 . 1 8 . 2 5 5 . 3 /2 5 5
Tu nnel LSP
FE C 1 7 2 . 1 8 . 2 5 5 . 3 / 2 5 5 = L ab el 1 1 0
FE C 1 7 2 . 1 8 . 2 5 5 . 3 / 2 5 5 = L ab el 1 2 0
FE C 1 7 2 . 1 8 . 2 5 5 . 3 / 2 5 5 = L ab el 1 3 0
F E C = F orwardin g E q uiv al en ce C l ass : a set of p ack et s f orwarded in t he same man n er b y an MP L S L SR U sed t o MU X cust omer dat a on t o a giv en T un n el
L 2V P N S A N O G 20 0 6
L3 V PN s FE C is u sed to b ind a V PN
L2 V PN s FE C is u sed to b ind a PW
19
I f a PE rout er det ec t s a c on dit ion t h a t a f f ec t s n orm a l serv ic e it M U S T w it h dra w t h e c orresp on din g V C l a b el A PE rout er m a y p rov ide c irc uit st a t us sig n a l l in g
F R M U S T through the use of LM I p roc ed ures; A TM PE through the use of I LM I p roc ed ures
L D P L ab el W i t h d raw V C I D 3 2 0 V C L ab el 1 6 C i rc ui t S t at us S i g nalli ng
S H O U LD
C E Port / V C Failu re Triggers Lab el W ithdrawal Msg
PE 1
MPLS
PE 2
L ayer-2 C i rc ui t
L 2V P N
S A N O G
20 0 6
20
L a y er 2 T un n el in g Prot oc ol v ersion 3
/73Y
I P C or e
D esign ed f or Serv ice P rov iders wit h N at iv e I P n et work s B ased on L 2T P (used in R emot e A ccess) & U n iv ersal T ran sp ort I n t erf ace (U T I )
C isco in n ov at ion
F ix ed header al l ows f or high p erf orman ce / H W accel erat ed decap sul at ion
Wit h I G P reachab il it y , simp l e edge con f igurat ion is t he on l y t hin g req uired!
L 2V P N S A N O G 20 0 6 21
L a y er 2 T un n el in g Prot oc ol v ersion 3
D ata M es s ages F orm at
IPv4 H eader ( 2 0 B ytes) L2 TPv3 H eader L2 PW C ntrl E ncap Layer 2 PD U ( variab le)
Session ID ( 4 B ytes)
I Pv4 Header - T h e d e l i v e r y h e a d e r f o r t h e T u n n e l . A l w a y s d e s t i n e d f o r a n L C C E .
L 2V P N
22
MP L S P W & L 2T P v 3 are p oin t -t o p oin t t echn ol ogies f or t he t ran sp ort of L ay er 2 P D U s across an d n at iv e or MP L S en ab l ed I P cores.
MP L S P W uses D irect ed L D P session s t o ex chan ge P W L ab el s b et ween p art icip at in g p eers whil e L 2T P v 3 uses C on t rol messages t o n egot iat e Session I D s MP L S P W & L 2T P v 3 can use an op t ion al C on t rol Word t o p reserv e in f ormat ion in t ran sp ort ed P D U s MP L S P W & L 2T P v 3 p rov ides in t erwork in g wit h access circuit man agemen t p rot ocol s t o main t ain V C st at us con sist en cy ( i . e . l a b e l
w i t h dr a w a l o r c a l l di s c o n n e c t n o t i f i c a t i o n i n t h e e ve n t o f e dg e s e r vi c e l o s s , e t c . )
L 2V P N
S A N O G
20 0 6
23
L 2V P N
S A N O G
20 0 6
24
VPWS T r an sp o r ts
E o M PLS
FRoMPLS
E o M PLS T r an sp o r t F o r m ats
Ethernet II Encapsulation
<7 octets> Preamble <1 octet> SFD <6 octets> DA <6 octets> SA <2 octets> TPID <2 octets> TCI <2 octets> Ethertype <46-1500> Data <4 octets> FCS
Preamble
SFD
DA
SA
TPID
TCI
Length
Data
FCS
<7 octets>
<1 octet> <6 octets> <6 octets> <2 octets> <2 octets> <2 octets>
802.3/802.2/SNAP Encapsulation
L 2V P N S A N O G 20 0 6 26
E o M PLS E n c ap su l atio n
PE r o u t e r e n c a p s u l a t e s V LA N Tw o l e ve l s o f l a b e l s ( 8 b y t e s ) b a c k b o n e p a c k e t a n d r o u t e i t a c r o s s M PLS
Tu n n e l l a b e l , o u t e r l a b e l , t o f o r w a r d t h e p a c k e t a c r o s s t h e n e t w o r k
V C V C V C V C
( vi r t u a l c i r c u i t ) , 32 b i t i de n t i f i e r u s e d u n i q u e l y t o i de n t i f y t h e V C p e r t u n n e l t y p e -0 x 0 0 0 4 i s u s e d f o r V LA N t y p e -0 x 0 0 0 5 i s u s e d f o r E t h e r n e t p o r t t u n n e l i n g a p p l i c a t i o n ( p o r t t r a n s p a r e n c y ) i s a n l a b e l s w i t c h p a t h ( LS P) t u n n e l
L2 header Tunnel Lab el
V C -b a s e d l a b e l , t o b i n d L2 i n t e r f a c e w h e r e p a c k e t s m u s t b e f o r w a r de d o ve r M PLS a p p l i c a t i o n
27
If th e c o n tr o l w o r d is u s e d th e n th e fla g s m u s t b e s e t to z e ro
The V LA N tag is transm itted unc hanged b ut m ay b e ov erw ritten b y the egress PE router
1
R s v d
0 0
1 0
2 0
3 0
1 O p tional
0 0 0 0 0 0
Seq u enc e nu m b er
L 2V P N
S A N O G
20 0 6
28
VPWS T r an sp o r ts
E oMPLS
F Ro M PLS
R F C
1 4 9 0 E n c ap su l atio n
RFC 1490 Frame Relay Encapsulation
<2 octets> Frame-relay FrameHeader <1 octet> <1 octet> <1 octet> Control UI 0x03 Optional Pad 0x00 NLPID (SNAP) <variable> <2 octets> <1 octet> Data Payload FCS 7E Flag
Ethertype
V C La b el ( V C) R s v d B F D C 0 0 Length
E X P
T T L
Co ntr o l U I 0x 03
PDU
O p ti o na l P a d 0x 00 O U I D a ta P a y l o a d
L 2V P N
S A N O G
20 0 6
30
V C La b el ( V C) R s v d B F D C 0 0 E ther ty p e Length
E X P
T T L
Seq u enc e nu m b er D a ta P a y l o a d
PDU
D a ta P a y l o a d ( c o nt)
L 2V P N
S A N O G
20 0 6
31
C us t o mer S ite
DLCI 219
N N I S2 /0
DLCI 141
S1 /0
PE 1 1 .0 .0 .4
MPLS
PE 2 1 .0 .0 .8
DLCI 120
C us t o mer S ite
C us t o mer S ite
F r a m e -r e l a y D L C I t o D L C I T r a n s p o r t
L 2V P N S A N O G 20 0 6 32
VPWS T r an sp o r ts
E oMPLS
FRoMPLS
ATM o M PLS
PPPoMPLS H D LC oMPLS
L 2V P N S A N O G 20 0 6 33
C e l l R e l ay O v e r M PLS
Si n g l e C e l l p e r M P L S p a c k e t
D o n ot dist in guish b et ween p ay l oad cel l s an d sign al in g A p p l y in g l ab el s p er cel l
C o n tr o l W o r d is o p tio n a l H E C
O A M an d R M al so t ran sp ort ed
Id le c e lls a r e n o t c a r r ie d o v e r M P L Sn e tw o r k
is n o t c a r r ie d in s id e M P L Sn e tw o r k
L 2V P N
S A N O G
20 0 6
34
C e l l R e l ay E n c ap su l atio n D e tail s
0 0
C o nt ro l W o rd
1 0
2 0
3 0
R s v d
0 0 0 0 0 0 V P I
Length
Seq u enc e nu m b er V CI P T I C
A T M
Cel l P a y l o a d
Single cell is encapsulated C o ntr o l w o r d is o ptio nal C o ntr o l w o r d f lags sh o uld b e set to z er o and igno r ed
L 2V P N
S A N O G
20 0 6
35
A T M
Ov e r v i e w :
C on cat en at ed A T M C el l (5 2 B y t es); N o H E C
C o m p o n e n ts :
Max imum C el l P ack in g T imeout (MC P T ) P E wil l sen d p ack ed cel l s b ased on t he min imum con f igured p ack in g charact erist ics b et ween t he t wo P E s. E ach P E hon ors t he MN C P con f igured on t he ot her.
L 2V P N S A N O G 20 0 6 36
1 0
2 0
3 0
R s v d
0 0 0 0 0 0 V P I
Length
Seq u enc e nu m b er V CI P T I C
A T M V P I A T M
Cel l P a y l o a d V CI Cel l P a y l o a d P T I C
Multiple cells are packed per MPLS packet A ll cells m ust b elo n g to th e sam e V C / V P C o n tro l w o rd is o ptio n al Packin g co n tro lled b y m ax n um b er o f cells an d tim er
L 2V P N
S A N O G
20 0 6
37
C e l l Pac k in g E n c ap su l atio n
A T M C el l
<4 bits> <8 bits> <16 bits> <3 bits> <1 bit> <8 bits> G FC V PI V C I PT C L P H E C 48 Bytes Paylo ad
Sin gl e C el l R el ay
T unnel L ab el 4 Bytes V C L ab el 4 Bytes
A T M w /o H E C H E A DE R
Paylo ad 48 Bytes
4 Bytes
P ack ed C el l R el ay
T unnel L ab el 4 Bytes V C L ab el 4 Bytes
ATM H E AD E R w/o
H E C
Paylo ad 48 Bytes
C ells x N
ATM H E AD E R w/o
H E C
Paylo ad 48 Bytes
4 Bytes
52xN Bytes
P A CK E D CE LLS M A X 28
4 Bytes
L 2V P N
S A N O G
20 0 6
28 * 5 2= 14 5 6 b y t e s
38
A A L5 E n c ap su l atio n D e tail s
0 0
C o nt ro l W o rd
4
T
5
E
7
C U
9
0 0
1 0
2 0
3 0
R s v d
Seq u enc e nu m b er
A A L 5 SD U s ar e encapsulated C o ntr o l w o r d is r eq uir ed C o ntr o l w o r d f lags encapsulate tr anspo r t ty pe, E F C I , C L P , C / R b it Ser v ice allo w s tr anspo r t o f O A M and R M cells
L 2V P N
S A N O G
20 0 6
39
VPWS T r an sp o r ts
E oMPLS
FRoMPLS
A T MoMPLS
H D LC o M PLS
L 2V P N
S A N O G
20 0 6
40
C isc o HD LC
&
Cisco HDLC & PPP PDUs are transported without f l ag s or F CS T he control word is optional
C PPP fram es also d o not c arry H DLC inform ation ad d ress & c ontrol
1 O p tional
0 0 0 0 0 0
Length H D LC o r P P P P D U
Seq u enc e nu m b er
L 2V P N
S A N O G
20 0 6
41
D E M O
L 2V P N
S A N O G
20 0 6
42
interf ace G igab itE thernet8 /2 . 1 encap su lation dot1 Q 1 x connect 2 2 . 2 2 . 2 2 . 2 2 1 encap su lation mp ls
C E 2
i nt erf ac i p v 4 ad 2 5 5 .2 5 5 d o t1 q v
C E 1 C onf i g
C E 2 C onf i g
M PL S Net w o rk i nt erf ac e G i g ab i t E t h ernet 1 / 2 . 1 enc ap s ulat i o n d o t 1 Q 1 i p ad d res s 1 9 2 . 1 6 8 . 1 . 2 2 5 5 .2 5 5 .2 5 5 .0
C E 1
PE 1 PE 2 C onf i g
interf ace G igab itE thernet2 /2 . 1 encap su lation dot1 Q 1 x connect 5 . 5 . 5 . 5 1 encap su lation mp ls
L 2V P N
S A N O G
20 0 6
43
interf ace ATM2 /2 p vc 0 /3 2 l2 transp ort encap su lation aal0 x connect 2 2 . 2 2 . 2 2 . 2 2 2 encap su lation mp ls
C E 2
interface ATM0/2/0/2.1 point-to-point pv c 0/3 2 ipv 4 ad d res s 19 2.16 8 .2.1 25 5 .25 5 .25 5 .0
C E 1 C onf i g
C E 2 C onf i g
M PL S Net w o rk interface ATM3 /0.1 point-to-point ip ad d res s 19 2.16 8 .2.2 25 5 .25 5 .25 5 .0 pv c 0/3 2
C E 1
PE 1
PE 2 C onf i g
interf ace ATM3 /0 p vc 0 /3 2 l2 transp ort encap su lation aal0 x connect 5 . 5 . 5 . 5 2 encap su lation mp ls
L 2V P N
S A N O G
20 0 6
44
L 2V P P r e N s e S n A t a N t i O o n G _ I 20 0 6 D
2 0 0 3 , C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
45
L2 V PN
Overview W h a t is it s p u rp o s e?
L2 V PN
F l ex ib il it y f or t he Serv ice P rov ider in of f erin g access circuit s t hat b est meet t he cust omers n eeds (i.e. mul t ip l e serv ices on a common p ort ) E x p an ded t ran sp ort op t ion s f rom L ik e-t o-L ik e A l l ows dif f eren t L ay er 2 en cap sul at ion s t o con n ect at op p osit e en ds of t he n et work . (i.e. A T M P V C E t hern et 8 0 2.1 Q V L A N ) P rov ide circuit b ased serv ices in addit ion t o p ack et b ased serv ices T ran sp aren t t run k in g of cust omer I G P in dep en den t of access media A n y -t o-A n y
L 2V P N
S A N O G
20 0 6
46
I P I n te r w o r k in g
A RP, I PC P S p o o f ed
IP-PD U
C W
V C -L
T-L
M PLS or I P C or e
PE 1
I P Ps eud o w i re
C E 1
PE 2
C E 2
No n-I P d at a p ac k et s d ro p p ed at PE
F ra m e R el a y P P P / HD L C A T M
Ethernet
Any -2Any
F ra m e R el a y P P P / HD L C A T M
Ethernet
L 2V P N
S A N O G
20 0 6
47
E the r n e t to A A L5 : I P in te r w o r k in g
C E 1
ATM
I PoM PLS
A T M
h e a d e r
T u n n e l la b e l V Cla b e l Co n t r o l w o r d M A Ch e a d e r P r o t o c o l t y p e ( x x -x x )
IP P DU
IP P DU
IP P DU
CP CS -U U CP I LE N G T H CR C
E t h e r n e t F CS
L 2V P N
S A N O G
20 0 6
48
E the r n e t to F R
C E 1 Runni ng RB E / I RB ( RFC 2 4 2 7 )
b r id g e d in te r w o r k in g
E oF R
Q . 9 22 a d d r e s s Cr t l ( 03 ) P a d ( 00) N LP ID( 8 0) O U I( 00) O U I ( 8 0C2) P ID ( 0007 ) M A Ch e a d e r
E oM PLS
T u n n e l la b e l V Cla b e l Co n t r o l w o r d M A Ch e a d e r
M A Ch e a d e r
L3 P DU
L3 P DU
L3 P DU
F CS
E t h e r n e t F CS
L 2V P N
S A N O G
20 0 6
49
D E M O
L 2V P N
S A N O G
20 0 6
50
C E 2
Net w o rk
PE 2 C onf i g
p seu dowire-class sanog encap su lation mp ls interwork ing ip interf ace ATM3 /0 mtu 1 5 0 0 p vc 0 /3 3 l2 transp ort encap su lation aal5 snap x connect 5 . 5 . 5 . 5 3 p w-class sanog
51
C E 1
PE 1
L 2V P N
S A N O G
20 0 6
Service
L 2V P N
S A N O G
20 0 6
52
Vir tu al Pr iv ate LA N S e r v ic e
VPLS Overview
VPLS Architectures
L 2V P N
S A N O G
20 0 6
53
VPLS O v e r v ie w
A rchit ect ure
I t i s an end-to-end ar c hi tec tur e that allows I P/ M PLS networ k s to p r ovi de Lay er 2 m ulti p oi nt E ther net ser vi c es whi le usi ng LD P as si g nali ng p r otoc ol E m ulates an E ther net b r i dg e O p er ati on i s the sam e as f or an E ther net b r i dg e, i e f or war ds usi ng the desti nati on M AC addr ess, lear ns sour c e addr esses and f loods b r oad/ m ulti c ast and unk nown f r am es dr af t-i etf -l2vp n-vp ls-ldp -x x . tx t
B ridge f un ct ion s
L 2V P N
S A N O G
20 0 6
54
VPLS O v e r v ie w
M et ro A u-PE G E Ri ng PE -A G G
Si
f o r M e tr o E the r n e t
M et ro C H ub & S p o k e 10/100/ 1000 Mpb s
n-PE
C7 6 00
n-PE
C7 6 00
u-PE
M et ro B D W D M / C D W M u-PE
V PLS N etwork
P n-PE P
C7 6 00
ser vi c e
M et ro D
no. of c ustom er s)
O n tr ac k f or I E TF standar di z ati on: D r af t Lasser r e-K om p ella U ses f am i li ar E ther net user networ k i nter f ac e
55
L 2V P N
S A N O G
20 0 6
VPLS : R e q u ir e m e n ts
A V irt u a l S wit c h M U S T o p era t e l ik e a c o n ven t io n a l L 2 s wit c h ! F lo o d in g / F o r w a r d in g :
M A C ta b l e i ns ta nc es p er c u s to m er a nd p er c u s to m er V L A N V R F i d ea ) f o r ea c h P E V SI w i l l p a rti c i p a te i n l ea rni ng , f o rw a rd i ng p ro c es s (L 2 -
Ad d r e s s L e a r n i n g / Ag i n g :
Sel f L ea rn So u rc e M A C R ef res h M A C N ew a d d i ti o na l M A C T L V to L D P
ti m ers w i th i nc o m i ng f ra m es
to p o rt a s s o c i a ti o ns
L o o p P r e v e n tio n :
tu nnel s
56
Si g n a l i n g o f c o n n e c t i o n s b e t w e e n P E d e v i c e s a s s o c ia te d w ith a V P N F o r w a r d in g o f fr a m e s
A T o M u s es I nterf a c e b a s ed f o rw a rd i ng
L o o p p r e v e n tio n
L 2V P N
S A N O G
20 0 6
57
VPLS O v e r v ie w : VS I F u n c tio n s
1 . 2 . 3 . 4 . M A C A d d res s M a na g em ent A d d res s o n P hy s i c a l P o rts a nd V C
F l o o d i ng o f M u l ti c a s t, U ni c a s t, U nk no w n D a ta F o rw a rd i ng
C u s to m er ST P B P D U
tu nnel ed a c ro s s SP C l o u d .
L 2V P N
S A N O G
20 0 6
58
VPLS O v e r v ie w : VPLS Le ar n in g
U n q u a lifie d
Si ng le M AC Si ng le p or t assi g ned f or all c ustom er V LAN s addr ess sp ac e ( no over lap ! )
Q u a lifie d
A V LAN
E ac h V LAN has i ts own V PLS i nstanc e C ustom er M AC addr esses M AY over lap
addr ess sp ac e
O ne F I B p er c ustom er V LAN
sc op e
L 2V P N
S A N O G
20 0 6
59
Vir tu al Pr iv ate LA N S e r v ic e
VPLS A rc h it ec t u res
L 2V P N
S A N O G
20 0 6
60
VPLS A r c hite c tu r e s
V P L S d e f i n e s t w o Ar c h i t e c t u r e s
N on -H ierarchical (Sin gl e P E ) H ierarchical (D ist rib ut ed P E ) MP L S A ccess
E a c h Ar c h i t e c t u r e h a s d i f f e r e n t s c a l i n g c h a r a c te r is tic s
L 2V P N
S A N O G
20 0 6
61
Way to B u il d a L2 C o r e :
C us t o mer E q ui p ment N-PE 1
PW N-PE 2
E t h ernet UNI
C E C E
N-PE 1
N-PE 3
8 0 2 . 1 ad
U-PE B N-PE 2 N-PE 1
PW
8 0 2 . 1 ad
N-PE 4 N-PE 3 PW
U-PE C
C E
C E C E
U-PE A
U-PE B
PW N-PE 2 N-PE 4
U-PE C
C E
PW Attac hm ent C i r c ui t
62
D ra w b a c k s :
a nd P o rt l ev el s u p p o rt ( no Q i nQ )
N o hi era rc hi c a l s c a l a b i l i ty Sc a l i ng i s s u es : P E p a c k et rep l i c a ti o n
F u l l m es h c a u s es c l a s s i c - N * ( N -1 ) / 2 c o nc erns
L 2V P N
S A N O G
20 0 6
63
G SR Q i nQ n-PE
1 20 0 0 n-PE
u-PE
F ull M esh LD P
C E 4
MPLS N etwork
4 0 0 4 0 1
n-PE
D ata 4 0 1
L 2V P N S A N O G 20 0 6
E th e r T y p e
SA
D A
1 0 2
D ot1 q Tunneli ng
E th e r T y p e
SA
D A
64
D E M O
L 2V P N
S A N O G
20 0 6
66
VPLS w ith D o t1 q A C s
l 2 v fi s anog m anu al v pn id 100 b rid g e-d om ain 100 neig h b or 21.21.21.21 encaps u l ation m pl s neig h b or 22.22.22.22 encaps u l ation m pl s interface G ig ab itE th ernet8 /2.3 encaps u l ation d ot1Q 3 b rid g e-d om ain 100 PE 1 C o nf i g l 2 v fi s anog m anu al v pn id 100 b rid g e-d om ain 100 neig h b or 21.21.21.21 encaps u l ation m pl s neig h b or 5 .5 .5 .5 encaps u l ation m pl s interface G ig ab itE th ernet2/2.2 encaps u l ation d ot1Q 3 b rid g e-d om ain 100 PE 2 C o nf i g
P
M PL S
Net w o rk
l2 v f i s a n v p n id 1 b r i d g e -d n e ig h b o n e ig h b o in te r f a c e e n c a p s u n o ip d ir b r i d g e -d
PE 3 C o nf i g
L 2V P N
S A N O G
20 0 6
67
L 2V P N
S A N O G
20 0 6
68
C E1
MPLS/IP MPLS/IP C C o o r er e A A S 1 1 S
C E2
N Y C
P E1
Sa n J o s e P E2
L 2V P N s are creat ed b y in t er-con n ect in g 2 at t achmen t circuit s usin g a P seudo Wire (A T oM an d L 2T P v 3 ) t o p rov ide an en d t o en d L 2 con n ect ion b ut in 1 B GP AS E n d t o en d L 2V P N dep l oy men t n ot p ossib l e across mul t ip l e A Ses
L 2V P N
S A N O G
C han ges in t he con t rol an d dat a p l an e code are req uired f or in t er-work in g t hem across mul t ip l e A Ses
20 0 6
69
S titc h Po in t
Pseu dowire
T un n el st it chin g sol v es t his p rob l em b y in t er-con n ect in g p seudo wires b el on gin g t o dif f eren t aut on omous sy st ems an d t hus p rov idin g an en d-2-en d p at h T un n el st it ch p oin t ref ers t o t he A SB R where t un n el st it chin g is p erf ormed A chiev ed t hrough in t er-work in g of dat a an d con t rol p l an es at t he st it ch p oin t
L 2V P N S A N O G 20 0 6 70
a t t a c h e d -c i r c u i t 4
P E -2
P w v c 112
a t t a c h e d -c i r c u i t 6
a t t a c h e d -c i r c u i t L 2s ig n a llin g (U N I)
P s e u d o w ir e L D P / L 2T P v 3 V P W S Au t o -d i s c o v e r y ( M P -i B G P )
P s e u d o w ir e L D P / L 2T P v 3 V P W S Au t o -d i s c o v e r y ( M P -e B G P )
P s e u d o w ir e L D P / L 2T P v 3 V P W S Au t o -d i s c o v e r y ( M P -i B G P )
a t t a c h e d -c i r c u i t L 2s ig n a llin g (U N I)
L 2V P N
E ach p seudo wire segmen t can in dep en den t l y emp l oy draf t mart in i or L 2T P v 3 sign al in g an d en cap sul at ion s T he A SB R s are resp on sib l e f or " cross-con n ect in g" t he p seudowire con t rol chan n el s an d p seudowire dat a p l an es E asy p rov ision in g an d Scal ab l e I n t he en d-2-en d L 2V P N p at h, y ou can hav e 1 or mul t ip l e st it ch p oin t
S A N O G 20 0 6
71
Q u a l ity of Service
L 2V P N
S A N O G
20 0 6
72
L2VPN D e p l o y m e n t
P oin t t o p oin t guaran t ees are t he b asis f or t he SL A
D el a y V a ri a ti o n D el a y
L o s s
P E
P E
C E Si te 2
P ay -as-y ou-grow serv ices can b e imp l emen t ed f or man y serv ice en cap s
Serv ice P rov ider E q uip men t is t ran sp aren t t o t he C ust omer
L 2V P N S A N O G 20 0 6 73
L2VPN D e p l o y m e n t
H o w
G F C V PI V C I
d o es an S P p ri o ri t i z e t raf f i c ?
PT C LP HE C
C omb ination of V C ID s & / or D iscard indication can b e u sed to classif y traf f ic correctly.
D LC I
C /R
E A
D LC I
BE CN D E
CN FE
D A
SA Typ e TAG
L3 D ata
C RC
P rov ide Serv ice on P ort , L ay er 2 or L ay er 3 I n f o E n f orcin g sub -rat e l eased l in e access L 2P V C
L 2V P N S A N O G
L 2 P D U s p rov ide op t ion s f or set t in g f rame p riorit y (ex : C L P , D E , 8 0 2.1 p ) or I n n er L 3 P receden ce (e.g. A T M V P 1 0 = C B R V C s)
20 0 6
74
L2VPN D e p l o y m e n t
O uter D eli ver y Header
P rec ed en c e E q u i v al en c e: M P LS / I P
I P P a c k et
ToS
M P L S L a b el
D at a
L a b el
E X P S
T T L
I nner I P Header
X
C la s s
X
D SC P
I P Prec ed en c e is the most of ten u sed in d etermin in g d if f eren t traf f ic p riorities ( 0 7 ) ( C u stomer set, S P op tion ally en f orc es) M ost S Ps imp lemen t 3 5 traf f ic c lasses ( B est E f f ort M ission C ritic al) E n f orc e p olic ies throu g h shap in g , mark in g , p olic in g
L 2V P N S A N O G 20 0 6
75
L2VPN Q o S D e p l o y m e n t
L 2 Q oS F u nctions :
L2 T u n n e l S e l e c tio n
T un n el def in ed as p ref erred p at h in p seudo-wire cl ass
L2 Ser vi c e Tr ansp or ted over a TE Tunnel ( Poi nt-to-Poi nt Ti g ht SLA) M PLS
PE
P seudo-wire cl ass ap p l ied t o at t achmen t circuit x con n ect F al l b ack can b e disab l ed if T E t un n el un reachab l e
PE
C PE
C PE C PE C PE
L 2V P N
S A N O G
20 0 6
77
T he C o m p l e te Pic tu r e
- W RE D - LLQ IP/MPLS b ased IP/MPLS b ased - Per Interf ace level shap ing - D iscard-C lass W RE D - Q oS-G rou p LLQ
- D e-b it mark ing - Per V C and D E -b it C lassif ication Policing and MPLS-E X P or IPD SC P mark ing
T ra f f i c f l o w
L 2V P N S A N O G 20 0 6 78
D E M O
L 2V P N
S A N O G
20 0 6
79
interf ace G igab itE thernet8 /2 . 1 encap su lation dot1 Q 1 service-p olicy inp u t ex p 1 x connect 2 2 . 2 2 . 2 2 . 2 2 1 encap su lation mp ls
C E 2
C E 1 C onf i g
C E 2 C onf i g
M PL S Net w o rk i nt erf ac e G i g ab i t E t h ernet 1 / 2 . 1 enc ap s ulat i o n d o t 1 Q 1 i p ad d res s 1 9 2 . 1 6 8 . 1 . 2 2 5 5 . 2 5 5 . 2 5 5 . 0
C E 1
PE 1 PE 2 C onf i g
interf ace G igab itE thernet2 /2 . 1 encap su lation dot1 Q 1 x connect 5 . 5 . 5 . 5 1 encap su lation mp ls
L 2V P N
S A N O G
20 0 6
80
Q u e s tio n s &
An s w e r s
L 2V P N
S A N O G
20 0 6
81
B a c k u p
L 2V P N
S A N O G
20 0 6
82
D E M O
L 2V P N
S A N O G
20 0 6
83
interf ace G igab itE thernet8 /2 . 1 encap su lation dot1 Q 1 x connect 2 2 . 2 2 . 2 2 . 2 2 1 encap su lation mp ls
C E 2
i nt erf ac i p v 4 ad 2 5 5 .2 5 5 d o t1 q v
C E 1 C onf i g
C E 2 C onf i g
M PL S Net w o rk i nt erf ac e G i g ab i t E t h ernet 1 / 2 . 1 enc ap s ulat i o n d o t 1 Q 1 i p ad d res s 1 9 2 . 1 6 8 . 1 . 2 2 5 5 .2 5 5 .2 5 5 .0
C E 1
PE 1 PE 2 C onf i g
interf ace G igab itE thernet2 /2 . 1 encap su lation dot1 Q 1 x connect 5 . 5 . 5 . 5 1 encap su lation mp ls
L 2V P N
S A N O G
20 0 6
84
interf ace ATM2 /2 p vc 0 /3 2 l2 transp ort encap su lation aal0 x connect 2 2 . 2 2 . 2 2 . 2 2 2 encap su lation mp ls
C E 2
interface ATM0/2/0/2.1 point-to-point pv c 0/3 2 ipv 4 ad d res s 19 2.16 8 .2.1 25 5 .25 5 .25 5 .0
C E 1 C onf i g
C E 2 C onf i g
M PL S Net w o rk interface ATM3 /0.1 point-to-point ip ad d res s 19 2.16 8 .2.2 25 5 .25 5 .25 5 .0 pv c 0/3 2
C E 1
PE 1
PE 2 C onf i g
interf ace ATM3 /0 p vc 0 /3 2 l2 transp ort encap su lation aal0 x connect 5 . 5 . 5 . 5 2 encap su lation mp ls
L 2V P N
S A N O G
20 0 6
85
C E 2
Net w o rk
PE 2 C onf i g
p seu dowire-class sanog encap su lation mp ls interwork ing ip interf ace ATM3 /0 mtu 1 5 0 0 p vc 0 /3 3 l2 transp ort encap su lation aal5 snap x connect 5 . 5 . 5 . 5 3 p w-class sanog
86
C E 1
PE 1
L 2V P N
S A N O G
20 0 6
VPLS w ith D o t1 q A C s
l 2 v fi s anog m anu al v pn id 100 b rid g e-d om ain 100 neig h b or 21.21.21.21 encaps u l ation m pl s neig h b or 22.22.22.22 encaps u l ation m pl s interface G ig ab itE th ernet8 /2.3 encaps u l ation d ot1Q 3 b rid g e-d om ain 100 PE 1 C o nf i g l 2 v fi s anog m anu al v pn id 100 b rid g e-d om ain 100 neig h b or 21.21.21.21 encaps u l ation m pl s neig h b or 5 .5 .5 .5 encaps u l ation m pl s interface G ig ab itE th ernet2/2.2 encaps u l ation d ot1Q 3 b rid g e-d om ain 100 PE 2 C o nf i g
P
M PL S
Net w o rk
l2 v f i s a n v p n id 1 b r i d g e -d n e ig h b o n e ig h b o in te r f a c e e n c a p s u n o ip d ir b r i d g e -d
PE 3 C o nf i g
L 2V P N
S A N O G
20 0 6
87
interf ace G igab itE thernet8 /2 . 1 encap su lation dot1 Q 1 service-p olicy inp u t ex p 1 x connect 2 2 . 2 2 . 2 2 . 2 2 1 encap su lation mp ls
C E 2
C E 1 C onf i g
C E 2 C onf i g
M PL S Net w o rk i nt erf ac e G i g ab i t E t h ernet 1 / 2 . 1 enc ap s ulat i o n d o t 1 Q 1 i p ad d res s 1 9 2 . 1 6 8 . 1 . 2 2 5 5 . 2 5 5 . 2 5 5 . 0
C E 1
PE 1 PE 2 C onf i g
interf ace G igab itE thernet2 /2 . 1 encap su lation dot1 Q 1 x connect 5 . 5 . 5 . 5 1 encap su lation mp ls
L 2V P N
S A N O G
20 0 6
88