You are on page 1of 424

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Copyright Information
Copyright 2003 - 2010 Internetwork Expert, Inc. All rights reserved.
The following publication, CCIE Service Provider Lab Workbook Volume I, was developed by Internetwork Expert, Inc. All rights reserved. No part of this publication may
be reproduced or distributed in any form or by any means without the prior written
permission of Internetwork Expert, Inc.
Cisco, Cisco Systems, CCIE, and Cisco Certified Internetwork Expert, are registered
trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain countries.
All other products and company names are the trademarks, registered trademarks, and service
marks of the respective owners. Throughout this manual, Internetwork Expert, Inc. has used its
best efforts to distinguish proprietary trademarks from descriptive names by following the
capitalization styles used by the manufacturer.

Copyright 2010 Internetwork Expert

www.INE.com
-i-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Disclaimer
The following publication, CCIE Service Provider Lab Workbook Volume I, is designed to
assist candidates in the preparation for Cisco Systems CCIE Routing & Switching Lab exam.
While every effort has been made to ensure that all material is as complete and accurate as
possible, the enclosed material is presented on an as is basis. Neither the authors nor
Internetwork Expert, Inc. assume any liability or responsibility to any person or entity with
respect to loss or damages incurred from the information contained in this workbook.
This workbook was developed by Internetwork Expert, Inc. and is an original work of the
aforementioned authors. Any similarities between material presented in this workbook and
TM
actual CCIE lab material is completely coincidental.

Copyright 2010 Internetwork Expert

www.INE.com
- ii -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS
Basic MPLS.......................................................................................................2
MPLS VPNs with Static Routing......................................................................10
MPLS VPNs with RIPv2 ..................................................................................18
MPLS VPNs with OSPF ..................................................................................28
MPLS VPNs with EIGRP .................................................................................38
MPLS VPNs with EBGP ..................................................................................48
Central Services MPLS VPNs .........................................................................58
MPLS VPNs with Extranets .............................................................................68
MPLS VPNs and VRF Export Map ..................................................................78
MPLS VPNs with BGP Site-Of-Origin..............................................................88
MPLS VPNs with OSPF and Sham-Links .......................................................98
MPLS VPNs with OSPF and Domain-ID .......................................................106
MPLS VPNs with VPNv4 Route Reflection ...................................................114
Inter-AS MPLS VPNs with Back-to-Back VRF...............................................130
Inter-AS MPLS VPNs with MP-eBGP for VPNv4 Exchange..........................144
Inter-AS MPLS VPNs with Multihop MP-eBGP for VPNv4 Exchange ...........158
Carrier Supporting Carrier IP Only Customer Carrier .................................170
Carrier Supporting Carrier MPLS Enabled Customer Carrier .....................180
Carrier Supporting Carrier Hierarchical MPLS VPNs .................................190
VRF-Lite ........................................................................................................204
Controlling MPLS Label Distribution..............................................................216
MPLS Traffic Engineering Dynamic PE to PE Tunnels ..............................226
MPLS Traffic Engineering Explicit PE to PE Tunnels .................................236
MPLS Traffic Engineering Unequal Cost Load Balancing ..........................246
MPLS QoS ....................................................................................................258
Multicast over MPLS VPNs ...........................................................................272
L2 VPNs: AToM.............................................................................................282
L2 VPNs: Inter-AS AToM ..............................................................................288
L2 VPNs: IP Interworking ..............................................................................296
L2 VPNs: Ethernet Interworking ....................................................................304
L2 VPNs: L2TPv3..........................................................................................312

IP Multicast
PIM Dense Mode...........................................................................................320
PIM Sparse Mode..........................................................................................330
Multicast RPF Failure ....................................................................................338
Auto-RP.........................................................................................................346
Auto-RP Multiple Candidate RPs ...............................................................354
Auto-RP Filtering Candidate RPs ...............................................................362
Auto-RP Listener ...........................................................................................368
PIM NBMA Mode...........................................................................................376
Auto-RP and Default RP Placement..............................................................384
Bootstrap Router ...........................................................................................392
Multicast Source Distribution Protocol (MSDP) .............................................398
Anycast RP....................................................................................................406
Copyright 2010 Internetwork Expert

www.INE.com
- iii -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Multicast BGP................................................................................................414

Copyright 2010 Internetwork Expert

www.INE.com
- iv -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
-1-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Basic MPLS
Objective: Configure MPLS on R1, R2, R3, and R4 to provide transit between
AS 100 and AS 200.

Fa0/3

BGP
AS 100

BGP
AS 1

10.1.37.0/24

.7

SW1

E0/0
R3

.3
.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

Fa0/0

.2

OSPF
Area 0

R2
S0/0.1

.2

204
Frame Relay
150.1.24.0/24

BGP
AS 200
.5

R5

10.1.45.0/24 VLAN 45

402

.4

S0/0.1

.4

E0/1

R4

BGP
AS 1

E0/0

Copyright 2010 Internetwork Expert

www.INE.com
-2-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS using LDP on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R3 should peer with SW1 via EBGP
R4 should peer with R5 via EBGP
Create the Loopback 10.1.5.5/24 on R5 and advertise it into BGP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP

Final Configuration
R1#
ip cef
!
mpls label protocol ldp
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
mpls label protocol ldp
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0

Copyright 2010 Internetwork Expert

www.INE.com
-3-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#
ip cef
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.37.7 remote-as 100
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
R4#
ip cef
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.45.5 remote-as 200
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
no auto-summary

Copyright 2010 Internetwork Expert

www.INE.com
-4-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/0
ip address 10.1.45.5 255.255.255.0
!
router bgp 200
network 10.1.5.0 mask 255.255.255.0
neighbor 10.1.45.4 remote-as 1
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/5
switchport access vlan 45
!
router bgp 100
network 10.1.7.0 mask 255.255.255.0
neighbor 10.1.37.3 remote-as 1
SW2#
interface FastEthernet0/4
switchport access vlan 45

Verification
SW1#ping 10.1.5.5 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.5.5, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 88/88/92 ms

Copyright 2010 Internetwork Expert

www.INE.com
-5-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 00:11:41, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 00:11:41, FastEthernet0/0


150.1.13.3, 00:11:41, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 00:12:01, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 00:12:01, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 00:12:01, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.7.0 [20/0] via 10.1.37.7, 00:10:18
B
10.1.5.0 [200/0] via 150.1.4.4, 00:10:35
C
10.1.37.0 is directly connected, Ethernet0/0
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:12:29, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:12:29, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:12:29, Serial1/2
R4#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.7.0 [200/0] via 150.1.3.3, 00:10:36
B
10.1.5.0 [20/0] via 10.1.45.5, 00:10:58
C
10.1.45.0 is directly connected, Ethernet0/1
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:12:49, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:12:49, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:12:49, Serial0/0.1
R5#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.7.0 [20/0] via 10.1.45.4, 00:10:49
C
10.1.5.0 is directly connected, Loopback0
C
10.1.45.0 is directly connected, Ethernet0/0

Copyright 2010 Internetwork Expert

www.INE.com
-6-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
C
10.1.7.0 is directly connected, Loopback0
B
10.1.5.0 [20/0] via 10.1.37.3, 00:11:14
C
10.1.37.0 is directly connected, FastEthernet0/3
R1#show mpls ldp neighbor
Peer LDP Ident: 150.1.24.2:0; Local LDP Ident 150.1.13.1:0
TCP connection: 150.1.24.2.11005 - 150.1.13.1.646
State: Oper; Msgs sent/rcvd: 12/12; Downstream
Up time: 00:03:53
LDP discovery sources:
FastEthernet0/0, Src IP addr: 150.1.12.2
Addresses bound to peer LDP Ident:
150.1.12.2
150.1.24.2
Peer LDP Ident: 150.1.3.3:0; Local LDP Ident 150.1.13.1:0
TCP connection: 150.1.3.3.646 - 150.1.13.1.11003
State: Oper; Msgs sent/rcvd: 10/11; Downstream
Up time: 00:02:43
LDP discovery sources:
Serial0/1, Src IP addr: 150.1.13.3
Addresses bound to peer LDP Ident:
10.1.37.3
150.1.13.3
150.1.3.3
R2#show mpls ldp neighbor
Peer LDP Ident: 150.1.13.1:0; Local LDP Ident 150.1.24.2:0
TCP connection: 150.1.13.1.646 - 150.1.24.2.11005
State: Oper; Msgs sent/rcvd: 12/12; Downstream
Up time: 00:04:09
LDP discovery sources:
FastEthernet0/0, Src IP addr: 150.1.12.1
Addresses bound to peer LDP Ident:
150.1.12.1
150.1.13.1
Peer LDP Ident: 150.1.4.4:0; Local LDP Ident 150.1.24.2:0
TCP connection: 150.1.4.4.646 - 150.1.24.2.11007
State: Oper; Msgs sent/rcvd: 11/12; Downstream
Up time: 00:03:04
LDP discovery sources:
Serial0/0.1, Src IP addr: 150.1.24.4
Addresses bound to peer LDP Ident:
150.1.24.4
10.1.45.4
150.1.4.4
R3#show mpls ldp neighbor
Peer LDP Ident: 150.1.13.1:0; Local LDP Ident 150.1.3.3:0
TCP connection: 150.1.13.1.11003 - 150.1.3.3.646
State: Oper; Msgs sent/rcvd: 12/11; Downstream
Up time: 00:03:31
LDP discovery sources:
Serial1/2, Src IP addr: 150.1.13.1
Addresses bound to peer LDP Ident:
150.1.12.1
150.1.13.1

Copyright 2010 Internetwork Expert

www.INE.com
-7-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show mpls ldp neighbor


Peer LDP Ident: 150.1.24.2:0; Local LDP Ident 150.1.4.4:0
TCP connection: 150.1.24.2.11007 - 150.1.4.4.646
State: Oper; Msgs sent/rcvd: 13/12; Downstream
Up time: 00:03:54
LDP discovery sources:
Serial0/0.1, Src IP addr: 150.1.24.2
Addresses bound to peer LDP Ident:
150.1.12.2
150.1.24.2
R1#show mpls forwarding-table
Local
tag
16
17
18

Outgoing
tag or VC
Pop tag
16
Pop tag

Prefix
or Tunnel Id
150.1.24.0/24
150.1.4.4/32
150.1.3.3/32

Bytes tag
switched
0
4318
753

Outgoing
interface
Fa0/0
Fa0/0
Se0/1

Next Hop

Bytes tag
switched
797
4318
0

Outgoing
interface
Se0/0.1
Fa0/0
Fa0/0

Next Hop

Bytes tag
switched
0
0
0

Outgoing
interface
Se1/2
Se1/2
Se1/2

Next Hop

Bytes tag
switched
0
0
0

Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

150.1.12.2
150.1.12.2
point2point

R2#show mpls forwarding-table


Local
tag
16
17
18

Outgoing
tag or VC
Pop tag
18
Pop tag

Prefix
or Tunnel Id
150.1.4.4/32
150.1.3.3/32
150.1.13.0/24

point2point
150.1.12.1
150.1.12.1

R3#show mpls forwarding-table


Local
tag
16
17
18

Outgoing
tag or VC
16
17
Pop tag

Prefix
or Tunnel Id
150.1.24.0/24
150.1.4.4/32
150.1.12.0/24

point2point
point2point
point2point

R4#show mpls forwarding-table


Local
tag
16
17
18

Outgoing
tag or VC
17
18
Pop tag

Prefix
or Tunnel Id
150.1.3.3/32
150.1.13.0/24
150.1.12.0/24

Copyright 2010 Internetwork Expert

point2point
point2point
point2point

www.INE.com
-8-

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
-9-

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with Static Routing


Objective: Configure MPLS VPNs between R5 & SW1 and R6 & SW2 using
static routing between the PE-CE.
Fa0/3

Fa0/3

.8

BGP
AS 1

.7

SW1

SW2

E0/1

E0/0
R3

.3
.3

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

Fa0/0

.2

OSPF
Area 0

R2
S0/0.1

.2

204
Frame Relay
150.1.24.0/24

402

.4

S0/0.1
.4

.4

E0/1
.5

R5

R4

BGP
AS 1

E0/0
.6

E0/1

G0/0

Copyright 2010 Internetwork Expert

R6

www.INE.com
- 10 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure default static routes on R5 and R6 pointing to R4
Configure default static routes on SW1 and SW2 pointing to R3
Create the Loopback 10.1.5.5/24 on R5
Create the Loopback 10.1.6.6/24 on R6
Create the Loopback 10.1.7.7/24 on SW1
Create the Loopback 10.1.8.8/24 on SW2
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R5 and SW1 should be in VRF R5-SW1
Use the route distinguisher and route target 1:57 for this VRF
R6 and SW2 should be in VRF R6-SW2
Use the route distinguisher and route target 1:68 for this VRF
Configure static routes on R3 to reach the networks of SW1 and SW2
Configure static routes on R4 to reach the networks of R5 and R6
Redistribute where necessary to gain connectivity within the VPNs

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert

www.INE.com
- 11 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R5-SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding R6-SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute connected
redistribute static
exit-address-family
!

Copyright 2010 Internetwork Expert

www.INE.com
- 12 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family ipv4 vrf R5-SW1


redistribute connected
redistribute static
exit-address-family
!
ip route vrf R5-SW1 10.1.7.0 255.255.255.0 10.1.37.7
ip route vrf R6-SW2 10.1.8.0 255.255.255.0 10.1.38.8
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R6-SW2
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip vrf forwarding R5-SW1
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!

Copyright 2010 Internetwork Expert

www.INE.com
- 13 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family ipv4 vrf R6-SW2


redistribute connected
redistribute static
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute connected
redistribute static
exit-address-family
!
ip route vrf R5-SW1 10.1.5.0 255.255.255.0 10.1.45.5
ip route vrf R6-SW2 10.1.6.0 255.255.255.0 10.1.46.6
R5#
ip cef
!
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/1
ip address 10.1.45.5 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 10.1.45.4
R6#
ip cef
!
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 10.1.46.4
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
ip route 0.0.0.0 0.0.0.0 10.1.37.3

Copyright 2010 Internetwork Expert

www.INE.com
- 14 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 45
!
interface FastEthernet0/5
switchport access vlan 45
!
ip route 0.0.0.0 0.0.0.0 10.1.38.3

Verification
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 00:13:36, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 00:13:36, FastEthernet0/0


150.1.13.3, 00:13:36, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 00:13:57, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 00:13:57, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 00:13:57, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:11:38, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:11:38, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:11:38, Serial1/2
Routing Table: R5-SW1
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
S
10.1.7.0 [1/0] via 10.1.37.7
B
10.1.5.0 [200/0] via 150.1.4.4, 00:05:28
B
10.1.45.0 [200/0] via 150.1.4.4, 00:05:28
C
10.1.37.0 is directly connected, Ethernet0/0

Copyright 2010 Internetwork Expert

www.INE.com
- 15 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: R6-SW2


<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
S
10.1.8.0 [1/0] via 10.1.38.8
B
10.1.6.0 [200/0] via 150.1.4.4, 00:05:28
B
10.1.46.0 [200/0] via 150.1.4.4, 00:05:28
C
10.1.38.0 is directly connected, Ethernet0/1
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:11:57, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:11:57, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:11:57, Serial0/0.1
Routing Table: R5-SW1
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.7.0 [200/0] via 150.1.3.3, 00:06:21
S
10.1.5.0 [1/0] via 10.1.45.5
C
10.1.45.0 is directly connected, Ethernet0/1
B
10.1.37.0 [200/0] via 150.1.3.3, 00:06:21
Routing Table: R6-SW2
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [200/0] via 150.1.3.3, 00:06:07
S
10.1.6.0 [1/0] via 10.1.46.6
C
10.1.46.0 is directly connected, Ethernet0/0
B
10.1.38.0 [200/0] via 150.1.3.3, 00:06:07
R5#show ip route
<output omitted>
Gateway of last resort is 10.1.45.4 to network 0.0.0.0

C
C
S*

10.0.0.0/24 is subnetted, 2 subnets


10.1.5.0 is directly connected, Loopback0
10.1.45.0 is directly connected, Ethernet0/1
0.0.0.0/0 [1/0] via 10.1.45.4

R6#show ip route
<output omitted>
Gateway of last resort is 10.1.46.4 to network 0.0.0.0

C
C
S*

10.0.0.0/24 is subnetted, 2 subnets


10.1.6.0 is directly connected, Loopback0
10.1.46.0 is directly connected, GigabitEthernet0/0
0.0.0.0/0 [1/0] via 10.1.46.4

Copyright 2010 Internetwork Expert

www.INE.com
- 16 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#show ip route
<output omitted>
Gateway of last resort is 10.1.46.4 to network 0.0.0.0

C
C
S*

10.0.0.0/24 is subnetted, 2 subnets


10.1.6.0 is directly connected, Loopback0
10.1.46.0 is directly connected, GigabitEthernet0/0
0.0.0.0/0 [1/0] via 10.1.46.4

SW2#show ip route
<output omitted>
Gateway of last resort is 10.1.38.3 to network 0.0.0.0

C
C
S*

10.0.0.0/24 is subnetted, 2 subnets


10.1.8.0 is directly connected, Loopback0
10.1.38.0 is directly connected, FastEthernet0/3
0.0.0.0/0 [1/0] via 10.1.38.3

R3#show ip bgp vpnv4 all


BGP table version is 137, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*>i10.1.5.0/24
150.1.4.4
0
100
0 ?
*> 10.1.7.0/24
10.1.37.7
0
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*>i10.1.6.0/24
150.1.4.4
0
100
0 ?
*> 10.1.8.0/24
10.1.38.8
0
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
R4#show ip bgp vpnv4 all
BGP table version is 142, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*> 10.1.5.0/24
10.1.45.5
0
32768 ?
*>i10.1.7.0/24
150.1.3.3
0
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*> 10.1.6.0/24
10.1.46.6
0
32768 ?
*>i10.1.8.0/24
150.1.3.3
0
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?

Copyright 2010 Internetwork Expert

www.INE.com
- 17 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with RIPv2


Objective: Configure MPLS VPNs between R5 & SW1 and R6 & SW2 using
RIPv2 as the PE-CE routing protocol.
Fa0/3

Fa0/3

E0/1

E0/0
R3

.3
.3

10.1.38.0/24

RIPv2

SW2

.8

BGP
AS 1

10.1.37.0/24

.7

SW1

RIPv2

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

Fa0/0

.2

OSPF
Area 0

R2
S0/0.1

.2

204
Frame Relay
150.1.24.0/24

.5

R5

.4

S0/0.1
.4

.4

E0/1

R4

BGP
AS 1

E0/0

E0/1

10.1.46.0/24 VLAN 46

RIPv2

10.1.45.0/24 VLAN 45

402

RIPv2
.6

G0/0

Copyright 2010 Internetwork Expert

R6

www.INE.com
- 18 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure RIPv2 on the Ethernet interfaces of R5, R6, SW1, and SW2
Create the Loopback 10.1.5.5/24 on R5 and advertise it into RIPv2
Create the Loopback 10.1.6.6/24 on R6 and advertise it into RIPv2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIPv2
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIPv2
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R5 and SW1 should be in VRF R5-SW1
Use the route distinguisher and route target 1:57 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R4 & R5
R6 and SW2 should be in VRF R6-SW2
Use the route distinguisher and route target 1:68 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW2 and R4 & R6
Redistribute where necessary to gain connectivity within the VPNs

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
log-adjacency-changes
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert

www.INE.com
- 19 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R5-SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding R6-SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf R6-SW2
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family

Copyright 2010 Internetwork Expert

www.INE.com
- 20 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute rip
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R6-SW2
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip vrf forwarding R5-SW1
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
log-adjacency-changes
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert

www.INE.com
- 21 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
!
address-family ipv4 vrf R6-SW2
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute rip
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute rip
exit-address-family
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/1
ip address 10.1.45.5 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert

www.INE.com
- 22 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 45
!
interface FastEthernet0/5
switchport access vlan 45
!
router rip
version 2
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert

www.INE.com
- 23 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 02:27:34, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 02:27:34, FastEthernet0/0


150.1.13.3, 02:27:34, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 02:28:04, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 02:28:04, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 02:28:04, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 01:19:54, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 01:19:54, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 01:19:54, Serial1/2
Routing Table: R5-SW1
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:03, Ethernet0/0
B
10.1.5.0 [200/1] via 150.1.4.4, 01:34:21
B
10.1.45.0 [200/0] via 150.1.4.4, 01:34:21
C
10.1.37.0 is directly connected, Ethernet0/0
Routing Table: R6-SW2
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/1] via 10.1.38.8, 00:00:25, Ethernet0/1
B
10.1.6.0 [200/1] via 150.1.4.4, 01:34:07
B
10.1.46.0 [200/0] via 150.1.4.4, 01:34:07
C
10.1.38.0 is directly connected, Ethernet0/1

Copyright 2010 Internetwork Expert

www.INE.com
- 24 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 02:28:41, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 02:28:41, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 02:28:41, Serial0/0.1
Routing Table: R5-SW1
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.7.0 [200/1] via 150.1.3.3, 01:35:32
R
10.1.5.0 [120/1] via 10.1.45.5, 00:00:12, Ethernet0/1
C
10.1.45.0 is directly connected, Ethernet0/1
B
10.1.37.0 [200/0] via 150.1.3.3, 01:35:32
Routing Table: R6-SW2
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [200/1] via 150.1.3.3, 00:04:46
R
10.1.6.0 [120/1] via 10.1.46.6, 00:00:21, Ethernet0/0
C
10.1.46.0 is directly connected, Ethernet0/0
B
10.1.38.0 [200/0] via 150.1.3.3, 00:04:46
R5#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.7.0 [120/2] via 10.1.45.4, 00:00:08, Ethernet0/1
C
10.1.5.0 is directly connected, Loopback0
C
10.1.45.0 is directly connected, Ethernet0/1
R
10.1.37.0 [120/2] via 10.1.45.4, 00:00:08, Ethernet0/1
R6#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/2] via 10.1.46.4, 00:00:08, GigabitEthernet0/0
C
10.1.6.0 is directly connected, Loopback0
C
10.1.46.0 is directly connected, GigabitEthernet0/0
R
10.1.38.0 [120/2] via 10.1.46.4, 00:00:08, GigabitEthernet0/0
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.7.0 is directly connected, Loopback0
R
10.1.5.0 [120/2] via 10.1.37.3, 00:00:01, FastEthernet0/3
R
10.1.45.0 [120/2] via 10.1.37.3, 00:00:01, FastEthernet0/3
C
10.1.37.0 is directly connected, FastEthernet0/3
SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.8.0 is directly connected, Loopback0
R
10.1.6.0 [120/2] via 10.1.38.3, 00:00:13, FastEthernet0/3
R
10.1.46.0 [120/2] via 10.1.38.3, 00:00:13, FastEthernet0/3
C
10.1.38.0 is directly connected, FastEthernet0/3

Copyright 2010 Internetwork Expert

www.INE.com
- 25 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show ip bgp vpnv4 all


BGP table version is 17, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*>i10.1.5.0/24
150.1.4.4
1
100
0 ?
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*>i10.1.6.0/24
150.1.4.4
1
100
0 ?
*> 10.1.8.0/24
10.1.38.8
1
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
R4#show ip bgp vpnv4 all
BGP table version is 17, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*> 10.1.5.0/24
10.1.45.5
1
32768 ?
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*> 10.1.6.0/24
10.1.46.6
1
32768 ?
*>i10.1.8.0/24
150.1.3.3
1
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?

Copyright 2010 Internetwork Expert

www.INE.com
- 26 -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
- 27 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with OSPF


Objective: Configure MPLS VPNs between R5 & SW1 and R6 & SW2 using
OSPF as the PE-CE routing protocol.

Copyright 2010 Internetwork Expert

www.INE.com
- 28 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Enable OSPF area 0 on the Ethernet interfaces of R5, R6, SW1, and SW2
Create the Loopback 10.1.5.5/24 on R5 and advertise it into OSPF
Create the Loopback 10.1.6.6/24 on R6 and advertise it into OSPF
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into OSPF
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into OSPF
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R5 and SW1 should be in VRF R5-SW1
Use the route distinguisher and route target 1:57 for this VRF
R6 and SW2 should be in VRF R6-SW2
Use the route distinguisher and route target 1:68 for this VRF
Run OSPF as the PE-CE protocol between R3 & SW1 using process-id 57
Run OSPF as the PE-CE protocol between R3 & SW2 using process-id 68
Run OSPF as the PE-CE protocol between R4 & R5 using process-id 57
Run OSPF as the PE-CE protocol between R4 & R6 using process-id 68
Redistribute where necessary to gain connectivity within the VPNs

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0

R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay

Copyright 2010 Internetwork Expert

www.INE.com
- 29 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R5-SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding R6-SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 68 vrf R6-SW2
redistribute bgp 1 subnets
network 10.1.38.3 0.0.0.0 area 0
!
router ospf 57 vrf R5-SW1
redistribute bgp 1 subnets
network 10.1.37.3 0.0.0.0 area 0
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!

Copyright 2010 Internetwork Expert

www.INE.com
- 30 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute ospf 68 vrf R6-SW2
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute ospf 57 vrf R5-SW1
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R6-SW2
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip vrf forwarding R5-SW1
ip address 10.1.45.4 255.255.255.0
!
router ospf 57 vrf R5-SW1
redistribute bgp 1 subnets
network 10.1.45.4 0.0.0.0 area 0
!
router ospf 68 vrf R6-SW2
redistribute bgp 1 subnets
network 10.1.46.4 0.0.0.0 area 0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0

Copyright 2010 Internetwork Expert

www.INE.com
- 31 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute ospf 68 vrf R6-SW2
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute ospf 57 vrf R5-SW1
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/1
ip address 10.1.45.5 255.255.255.0
!
router ospf 1
network 10.1.5.5 0.0.0.0 area 0
network 10.1.45.5 0.0.0.0 area 0
R6#
ip cef
!
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
router ospf 1
network 10.1.6.6 0.0.0.0 area 0
network 10.1.46.6 0.0.0.0 area 0
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport

Copyright 2010 Internetwork Expert

www.INE.com
- 32 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip address 10.1.37.7 255.255.255.0


!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 45
!
interface FastEthernet0/5
switchport access vlan 45
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.38.8 0.0.0.0 area 0

Verification
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 00:13:36, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 00:13:36, FastEthernet0/0


150.1.13.3, 00:13:36, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 00:13:57, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 00:13:57, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 00:13:57, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

Copyright 2010 Internetwork Expert

www.INE.com
- 33 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:21:53, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:21:53, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:21:53, Serial1/2
Routing Table: R5-SW1
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O
10.1.7.7/32 [110/11] via 10.1.37.7, 00:11:28, Ethernet0/0
B
10.1.5.5/32 [200/11] via 150.1.4.4, 00:09:44
B
10.1.45.0/24 [200/0] via 150.1.4.4, 00:10:29
C
10.1.37.0/24 is directly connected, Ethernet0/0
Routing Table: R6-SW2
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O
10.1.8.8/32 [110/11] via 10.1.38.8, 00:11:28, Ethernet0/1
B
10.1.6.6/32 [200/11] via 150.1.4.4, 00:09:29
B
10.1.46.0/24 [200/0] via 150.1.4.4, 00:10:33
C
10.1.38.0/24 is directly connected, Ethernet0/1
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:22:28, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:22:28, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:22:28, Serial0/0.1
Routing Table: R5-SW1
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
B
10.1.7.7/32 [200/11] via 150.1.3.3, 00:11:13
O
10.1.5.5/32 [110/11] via 10.1.45.5, 00:10:28, Ethernet0/1
C
10.1.45.0/24 is directly connected, Ethernet0/1
B
10.1.37.0/24 [200/0] via 150.1.3.3, 00:11:13
Routing Table: R6-SW2
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
B
10.1.8.8/32 [200/11] via 150.1.3.3, 00:11:13
O
10.1.6.6/32 [110/11] via 10.1.46.6, 00:10:22, Ethernet0/0
C
10.1.46.0/24 is directly connected, Ethernet0/0
B
10.1.38.0/24 [200/0] via 150.1.3.3, 00:11:13
R5#show ip route
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O IA
10.1.7.7/32 [110/21] via 10.1.45.4, 00:10:44, Ethernet0/1
C
10.1.5.0/24 is directly connected, Loopback0
C
10.1.45.0/24 is directly connected, Ethernet0/1

Copyright 2010 Internetwork Expert

www.INE.com
- 34 -

CCIE Service Provider Lab Workbook Volume I


O IA

Version 1.0

10.1.37.0/24 [110/11] via 10.1.45.4, 00:10:44, Ethernet0/1

R6#show ip route
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O IA

C
C
O IA

10.1.8.8/32 [110/12] via 10.1.46.4, 00:12:05, GigabitEthernet0/0

10.1.6.0/24 is directly connected, Loopback0


10.1.46.0/24 is directly connected, GigabitEthernet0/0
10.1.38.0/24 [110/2] via 10.1.46.4, 00:12:05, GigabitEthernet0/0

SW1#show ip route
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O IA
10.1.5.5/32 [110/21] via 10.1.37.3, 00:13:42, FastEthernet0/3
C
10.1.7.0/24 is directly connected, Loopback0
O IA
10.1.45.0/24 [110/11] via 10.1.37.3, 00:14:31, FastEthernet0/3
C
10.1.37.0/24 is directly connected, FastEthernet0/3
SW1#show ip route
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O IA
10.1.5.5/32 [110/21] via 10.1.37.3, 00:13:42, FastEthernet0/3
C
10.1.7.0/24 is directly connected, Loopback0
O IA
10.1.45.0/24 [110/11] via 10.1.37.3, 00:14:31, FastEthernet0/3
C
10.1.37.0/24 is directly connected, FastEthernet0/3
R3#show ip bgp vpnv4 all
BGP table version is 97, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*>i10.1.5.5/32
150.1.4.4
11
100
0 ?
*> 10.1.7.7/32
10.1.37.7
11
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*>i10.1.6.6/32
150.1.4.4
11
100
0 ?
*> 10.1.8.8/32
10.1.38.8
11
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?

Copyright 2010 Internetwork Expert

www.INE.com
- 35 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show ip bgp vpnv4 all


BGP table version is 97, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*> 10.1.5.5/32
10.1.45.5
11
32768 ?
*>i10.1.7.7/32
150.1.3.3
11
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*> 10.1.6.6/32
10.1.46.6
11
32768 ?
*>i10.1.8.8/32
150.1.3.3
11
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?

Copyright 2010 Internetwork Expert

www.INE.com
- 36 -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
- 37 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with EIGRP


Objective: Configure MPLS VPNs between R5 & SW1 and R6 & SW2 using
EIGRP between the PE-CE.

Copyright 2010 Internetwork Expert

www.INE.com
- 38 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Enable EIGRP on R5, R6, SW1, and SW2 per the diagram
Create the Loopback 10.1.5.5/24 on R5 and advertise it into EIGRP
Create the Loopback 10.1.6.6/24 on R6 and advertise it into EIGRP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into EIGRP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into EIGRP
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R5 and SW1 should be in VRF R5-SW1
Use the route distinguisher and route target 1:57 for this VRF
R6 and SW2 should be in VRF R6-SW2
Use the route distinguisher and route target 1:68 for this VRF
Run EIGRP as the PE-CE protocol between R3 & SW1 using AS 57
Run EIGRP as the PE-CE protocol between R3 & SW2 using AS 68
Run EIGRP as the PE-CE protocol between R4 & R5 using AS 57
Run EIGRP as the PE-CE protocol between R4 & R6 using AS 68
Redistribute where necessary to gain connectivity within the VPNs

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert

www.INE.com
- 39 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R5-SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding R6-SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router eigrp 1
!
address-family ipv4 vrf R6-SW2
redistribute bgp 1 metric 1 1 1 1 1
network 10.1.38.3 0.0.0.0
no auto-summary
autonomous-system 68
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute bgp 1 metric 1 1 1 1 1
network 10.1.37.3 0.0.0.0
no auto-summary
autonomous-system 57
exit-address-family
!

Copyright 2010 Internetwork Expert

www.INE.com
- 40 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router ospf 1
log-adjacency-changes
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute eigrp 68
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute eigrp 57
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R6-SW2
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip vrf forwarding R5-SW1
ip address 10.1.45.4 255.255.255.0
!

Copyright 2010 Internetwork Expert

www.INE.com
- 41 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router eigrp 1
!
address-family ipv4 vrf R6-SW2
redistribute bgp 1 metric 1 1 1 1 1
network 10.1.46.4 0.0.0.0
no auto-summary
autonomous-system 68
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute bgp 1 metric 1 1 1 1 1
network 10.1.37.3 0.0.0.0
network 10.1.45.4 0.0.0.0
no auto-summary
autonomous-system 57
exit-address-family
!
router ospf 1
log-adjacency-changes
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute eigrp 68
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute eigrp 57
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/1
ip address 10.1.45.5 255.255.255.0
!
router eigrp 57
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert

www.INE.com
- 42 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#
ip cef
!
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
router eigrp 68
network 10.0.0.0
no auto-summary
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
router eigrp 57
network 10.0.0.0
no auto-summary
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 45
!
interface FastEthernet0/5
switchport access vlan 45
!
router eigrp 68
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert

www.INE.com
- 43 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 00:13:36, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 00:13:36, FastEthernet0/0


150.1.13.3, 00:13:36, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 00:13:57, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 00:13:57, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 00:13:57, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 01:54:32, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 01:54:32, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 01:54:32, Serial1/2
Routing Table: R5-SW1
10.0.0.0/24 is subnetted, 4 subnets
D
10.1.7.0 [90/409600] via 10.1.37.7, 00:24:46, Ethernet0/0
B
10.1.5.0 [200/409600] via 150.1.4.4, 00:16:18
B
10.1.45.0 [200/0] via 150.1.4.4, 00:16:18
C
10.1.37.0 is directly connected, Ethernet0/0
Routing Table: R6-SW2
10.0.0.0/24 is subnetted, 4 subnets
D
10.1.8.0 [90/409600] via 10.1.38.8, 00:23:51, Ethernet0/1
B
10.1.6.0 [200/409600] via 150.1.4.4, 00:16:18
B
10.1.46.0 [200/0] via 150.1.4.4, 00:16:18
C
10.1.38.0 is directly connected, Ethernet0/1
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 01:55:31, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 01:55:31, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 01:55:31, Serial0/0.1

Copyright 2010 Internetwork Expert

www.INE.com
- 44 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: R5-SW1


10.0.0.0/24 is subnetted, 4 subnets
B
10.1.7.0 [200/409600] via 150.1.3.3, 00:14:53
D
10.1.5.0 [90/409600] via 10.1.45.5, 00:18:45, Ethernet0/1
C
10.1.45.0 is directly connected, Ethernet0/1
B
10.1.37.0 [200/0] via 150.1.3.3, 00:14:53
Routing Table: R6-SW2
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [200/409600] via 150.1.3.3, 00:14:53
D
10.1.6.0 [90/409600] via 10.1.46.6, 00:18:53, Ethernet0/0
C
10.1.46.0 is directly connected, Ethernet0/0
B
10.1.38.0 [200/0] via 150.1.3.3, 00:14:53
R5#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
D
10.1.7.0 [90/435200] via 10.1.45.4, 00:15:14, Ethernet0/1
C
10.1.5.0 is directly connected, Loopback0
C
10.1.45.0 is directly connected, Ethernet0/1
D
10.1.37.0 [90/307200] via 10.1.45.4, 00:15:14, Ethernet0/1
R6#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
D

C
C
D

10.1.8.0 [90/412160] via 10.1.46.4, 00:15:27, GigabitEthernet0/0

10.1.6.0 is directly connected, Loopback0


10.1.46.0 is directly connected, GigabitEthernet0/0
10.1.38.0 [90/284160] via 10.1.46.4, 00:15:27, GigabitEthernet0/0

SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.7.0 is directly connected, Loopback0
D
10.1.5.0 [90/435200] via 10.1.37.3, 00:15:55, FastEthernet0/3
D
10.1.45.0 [90/307200] via 10.1.37.3, 00:15:55, FastEthernet0/3
C
10.1.37.0 is directly connected, FastEthernet0/3
SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.8.0 is directly connected, Loopback0
D
10.1.6.0 [90/435200] via 10.1.38.3, 00:16:26, FastEthernet0/3
D
10.1.46.0 [90/307200] via 10.1.38.3, 00:16:26, FastEthernet0/3
C
10.1.38.0 is directly connected, FastEthernet0/3

Copyright 2010 Internetwork Expert

www.INE.com
- 45 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show ip bgp vpnv4 all


BGP table version is 163, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*>i10.1.5.0/24
150.1.4.4
409600
100
0 ?
*> 10.1.7.0/24
10.1.37.7
409600
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*>i10.1.6.0/24
150.1.4.4
409600
100
0 ?
*> 10.1.8.0/24
10.1.38.8
409600
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
R4#show ip bgp vpnv4 all
BGP table version is 168, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*> 10.1.5.0/24
10.1.45.5
409600
32768 ?
*>i10.1.7.0/24
150.1.3.3
409600
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*> 10.1.6.0/24
10.1.46.6
409600
32768 ?
*>i10.1.8.0/24
150.1.3.3
409600
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?

Copyright 2010 Internetwork Expert

www.INE.com
- 46 -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
- 47 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with EBGP


Objective: Configure MPLS VPNs between R5 & SW1 and R6 & SW2 using
EBGP between the PE-CE.

Copyright 2010 Internetwork Expert

www.INE.com
- 48 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directionsaree

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure BGP on R5, R6, SW1, and SW2 per the diagram
Create the Loopback 10.1.5.5/24 on R5 and advertise it into BGP
Create the Loopback 10.1.6.6/24 on R6 and advertise it into BGP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into BGP
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R5 and SW1 should be in VRF R5-SW1
Use the route distinguisher and route target 1:57 for this VRF
R3 and SW1 should peer via EBGP
R3 and SW2 should peer via EBGP
R6 and SW2 should be in VRF R6-SW2
Use the route distinguisher and route target 1:68 for this VRF
R4 and R5 should peer via EBGP
R4 and R6 should peer via EBGP
Redistribute where necessary to gain connectivity within the VPNs

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
log-adjacency-changes
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay

Copyright 2010 Internetwork Expert

www.INE.com
- 49 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R5-SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding R6-SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute connected
neighbor 10.1.38.8 remote-as 200
neighbor 10.1.38.8 activate
neighbor 10.1.38.8 as-override
exit-address-family
!

Copyright 2010 Internetwork Expert

www.INE.com
- 50 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family ipv4 vrf R5-SW1


redistribute connected
neighbor 10.1.37.7 remote-as 100
neighbor 10.1.37.7 activate
neighbor 10.1.37.7 as-override
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R6-SW2
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip vrf forwarding R5-SW1
ip address 10.1.45.4 255.255.255.0
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute connected
neighbor 10.1.46.6 remote-as 200
neighbor 10.1.46.6 activate
neighbor 10.1.46.6 as-override
exit-address-family
!

Copyright 2010 Internetwork Expert

www.INE.com
- 51 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family ipv4 vrf R5-SW1


redistribute connected
neighbor 10.1.45.5 remote-as 100
neighbor 10.1.45.5 activate
neighbor 10.1.45.5 as-override
exit-address-family
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/1
ip address 10.1.45.5 255.255.255.0
!
router bgp 100
network 10.1.5.0 mask 255.255.255.0
neighbor 10.1.45.4 remote-as 1
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
router bgp 200
network 10.1.6.0 mask 255.255.255.0
neighbor 10.1.46.4 remote-as 1
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
router bgp 100
network 10.1.7.0 mask 255.255.255.0
neighbor 10.1.37.3 remote-as 1
SW2#
ip routing

Copyright 2010 Internetwork Expert

www.INE.com
- 52 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 45
!
interface FastEthernet0/5
switchport access vlan 45
!
router bgp 200
network 10.1.8.0 mask 255.255.255.0
neighbor 10.1.38.3 remote-as 1

Verification
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 02:27:34, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 02:27:34, FastEthernet0/0


150.1.13.3, 02:27:34, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 02:28:04, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 02:28:04, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 02:28:04, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:13:25, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:13:25, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:13:25, Serial1/2
Routing Table: R5-SW1
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.7.0 [20/0] via 10.1.37.7, 00:06:27
B
10.1.5.0 [200/0] via 150.1.4.4, 00:10:28
B
10.1.45.0 [200/0] via 150.1.4.4, 00:10:43
C
10.1.37.0 is directly connected, Ethernet0/0

Copyright 2010 Internetwork Expert

www.INE.com
- 53 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: R6-SW2


<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [20/0] via 10.1.38.8, 00:05:57
B
10.1.6.0 [200/0] via 150.1.4.4, 00:05:13
B
10.1.46.0 [200/0] via 150.1.4.4, 00:09:12
C
10.1.38.0 is directly connected, Ethernet0/1
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:13:58, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:13:58, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:13:58, Serial0/0.1
Routing Table: R5-SW1
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.7.0 [200/0] via 150.1.3.3, 00:06:41
B
10.1.5.0 [20/0] via 10.1.45.5, 00:05:25
C
10.1.45.0 is directly connected, Ethernet0/1
B
10.1.37.0 [200/0] via 150.1.3.3, 00:08:41
Routing Table: R6-SW2
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [200/0] via 150.1.3.3, 00:06:11
B
10.1.6.0 [20/0] via 10.1.46.6, 00:05:41
C
10.1.46.0 is directly connected, Ethernet0/0
B
10.1.38.0 [200/0] via 150.1.3.3, 00:08:26
R5#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.7.0 [20/0] via 10.1.45.4, 00:05:57
C
10.1.5.0 is directly connected, Loopback0
C
10.1.45.0 is directly connected, Ethernet0/1
B
10.1.37.0 [20/0] via 10.1.45.4, 00:05:57
R6#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [20/0] via 10.1.46.4, 00:06:30
C
10.1.6.0 is directly connected, Loopback0
C
10.1.46.0 is directly connected, GigabitEthernet0/0
B
10.1.38.0 [20/0] via 10.1.46.4, 00:06:30

Copyright 2010 Internetwork Expert

www.INE.com
- 54 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [20/0] via 10.1.46.4, 00:06:30
C
10.1.6.0 is directly connected, Loopback0
C
10.1.46.0 is directly connected, GigabitEthernet0/0
B
10.1.38.0 [20/0] via 10.1.46.4, 00:06:30
SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.8.0 is directly connected, Loopback0
B
10.1.6.0 [20/0] via 10.1.38.3, 00:08:47
B
10.1.46.0 [20/0] via 10.1.38.3, 00:08:47
C
10.1.38.0 is directly connected, FastEthernet0/3
R3#show ip bgp vpnv4 all
BGP table version is 17, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*>i10.1.5.0/24
150.1.4.4
0
100
0 100 i
*> 10.1.7.0/24
10.1.37.7
0
0 100 i
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*>i10.1.6.0/24
150.1.4.4
0
100
0 200 i
*> 10.1.8.0/24
10.1.38.8
0
0 200 i
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
R4#show ip bgp vpnv4 all
BGP table version is 17, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*> 10.1.5.0/24
10.1.45.5
0
0 100 i
*>i10.1.7.0/24
150.1.3.3
0
100
0 100 i
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*> 10.1.6.0/24
10.1.46.6
0
0 200 i
*>i10.1.8.0/24
150.1.3.3
0
100
0 200 i
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?

Copyright 2010 Internetwork Expert

www.INE.com
- 55 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R5#show ip bgp
BGP table version is 11, local router ID is 10.1.5.5
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

*>
*>
*>
r>

Network
10.1.5.0/24
10.1.7.0/24
10.1.37.0/24
10.1.45.0/24

Next Hop
0.0.0.0
10.1.45.4
10.1.45.4
10.1.45.4

Metric LocPrf Weight Path


0
32768 i
0 1 1 i
0 1 ?
0
0 1 ?

R6#show ip bgp
BGP table version is 11, local router ID is 10.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

*>
*>
*>
r>

Network
10.1.6.0/24
10.1.8.0/24
10.1.38.0/24
10.1.46.0/24

Next Hop
0.0.0.0
10.1.46.4
10.1.46.4
10.1.46.4

Metric LocPrf Weight Path


0
32768 i
0 1 1 i
0 1 ?
0
0 1 ?

SW1#show ip bgp
BGP table version is 11, local router ID is 10.1.7.7
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

*>
*>
r>
*>

Network
10.1.5.0/24
10.1.7.0/24
10.1.37.0/24
10.1.45.0/24

Next Hop
10.1.37.3
0.0.0.0
10.1.37.3
10.1.37.3

Metric LocPrf Weight


0
0
32768
0
0
0

Path
1 1 i
i
1 ?
1 ?

SW2#show ip bgp
BGP table version is 6, local router ID is 10.1.8.8
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

*>
*>
r>
*>

Network
10.1.6.0/24
10.1.8.0/24
10.1.38.0/24
10.1.46.0/24

Next Hop
10.1.38.3
0.0.0.0
10.1.38.3
10.1.38.3

Metric LocPrf Weight


0
0
32768
0
0
0

Copyright 2010 Internetwork Expert

Path
1 1 i
i
1 ?
1 ?

www.INE.com
- 56 -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
- 57 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Central Services MPLS VPNs


Objective: Configure MPLS VPNs in such a way that R6, SW1, and SW2 have
access to R5s networks but do not have access to any of each
others networks.
Fa0/3

Fa0/3

E0/1

E0/0
R3

.3
.3

10.1.38.0/24

RIPv2

SW2

.8

BGP
AS 1

10.1.37.0/24

.7

SW1

RIPv2

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

Fa0/0

.2

OSPF
Area 0

R2
S0/0.1

.2

204
Frame Relay
150.1.24.0/24

.5

R5

.4

S0/0.1
.4

.4

E0/1

R4

BGP
AS 1

E0/0

E0/1

10.1.46.0/24 VLAN 46

RIPv2

10.1.45.0/24 VLAN 45

402

RIPv2
.6

G0/0

Copyright 2010 Internetwork Expert

R6

www.INE.com
- 58 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure RIPv2 on the Ethernet interfaces of R5, R6, SW1, and SW2
Create the Loopback 10.1.5.5/24 on R5 and advertise it into RIPv2
Create the Loopback 10.1.6.6/24 on R6 and advertise it into RIPv2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIPv2
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIPv2
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R5 should be in VRF R5
Use the route distinguisher and export route target 1:5 for this VRF
R6 should be in VRF R6
Use the route distinguisher and export route target 1:6 for this VRF
SW1 should be in VRF SW1
Use the route distinguisher and export route target 1:7 for this VRF
SW2 should be in VRF SW2
Use the route distinguisher and export route target 1:8 for this VRF
Run RIPv2 as the PE-CE protocol on R3 and R4
Redistribute where necessary
Bidirectional connectivity should be established between the Loopback of
R5 and the Loopbacks of R6, SW1, and SW2
R6, SW1, and SW2 should not have connectivity to each other

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
log-adjacency-changes
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0

Copyright 2010 Internetwork Expert

www.INE.com
- 59 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf SW1
rd 1:7
route-target export 1:7
route-target import 1:5
!
ip vrf SW2
rd 1:8
route-target export 1:8
route-target import 1:5
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert

www.INE.com
- 60 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
!
address-family ipv4 vrf SW2
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf SW2
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf R5
rd 1:5
route-target export 1:5
route-target import 1:6
route-target import 1:7
route-target import 1:8
!
ip vrf R6
rd 1:6
route-target export 1:6
route-target import 1:5
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R6
ip address 10.1.46.4 255.255.255.0
!

Copyright 2010 Internetwork Expert

www.INE.com
- 61 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip vrf forwarding R5
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
log-adjacency-changes
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf R6
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf R5
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R6
redistribute rip
exit-address-family
!
address-family ipv4 vrf R5
redistribute rip
exit-address-family

Copyright 2010 Internetwork Expert

www.INE.com
- 62 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/1
ip address 10.1.45.5 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
router rip
version 2
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert

www.INE.com
- 63 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 45
!
interface FastEthernet0/5
switchport access vlan 45
!
router rip
version 2
network 10.0.0.0
no auto-summary

Verification
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 19:33:36, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 19:33:36, FastEthernet0/0


150.1.13.3, 19:33:36, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 19:37:48, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 19:37:48, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 19:37:48, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:21:39, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:21:39, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:21:39, Serial1/2

Copyright 2010 Internetwork Expert

www.INE.com
- 64 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: SW1


<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:19, Ethernet0/0
B
10.1.5.0 [200/1] via 150.1.4.4, 00:11:30
B
10.1.45.0 [200/0] via 150.1.4.4, 00:12:15
C
10.1.37.0 is directly connected, Ethernet0/0
Routing Table: SW2
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/1] via 10.1.38.8, 00:00:12, Ethernet0/1
B
10.1.5.0 [200/1] via 150.1.4.4, 00:11:30
B
10.1.45.0 [200/0] via 150.1.4.4, 00:12:15
C
10.1.38.0 is directly connected, Ethernet0/1
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:21:58, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:21:58, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:21:58, Serial0/0.1
Routing Table: R5
<output omitted>
10.0.0.0/24 is subnetted, 8 subnets
B
10.1.8.0 [200/1] via 150.1.3.3, 00:11:32
B
10.1.7.0 [200/1] via 150.1.3.3, 00:11:32
B
10.1.6.0 [20/1] via 10.1.46.6 (R6), 00:11:32, Ethernet0/0
R
10.1.5.0 [120/1] via 10.1.45.5, 00:00:19, Ethernet0/1
B
10.1.46.0 is directly connected, 00:10:47, Ethernet0/0
C
10.1.45.0 is directly connected, Ethernet0/1
B
10.1.38.0 [200/0] via 150.1.3.3, 00:10:47
B
10.1.37.0 [200/0] via 150.1.3.3, 00:10:47
Routing Table: R6
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.6.0 [120/1] via 10.1.46.6, 00:00:16, Ethernet0/0
B
10.1.5.0 [20/1] via 10.1.45.5 (R5), 00:10:47, Ethernet0/1
C
10.1.46.0 is directly connected, Ethernet0/0
B
10.1.45.0 is directly connected, 00:10:47, Ethernet0/1
R5#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 8 subnets
R
10.1.8.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
R
10.1.7.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
R
10.1.6.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
C
10.1.5.0 is directly connected, Loopback0
R
10.1.46.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
C
10.1.45.0 is directly connected, Ethernet0/1
R
10.1.38.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1
R
10.1.37.0 [120/2] via 10.1.45.4, 00:00:24, Ethernet0/1

Copyright 2010 Internetwork Expert

www.INE.com
- 65 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.6.0 is directly connected, Loopback0
R
10.1.5.0 [120/2] via 10.1.46.4, 00:00:23, GigabitEthernet0/0
C
10.1.46.0 is directly connected, GigabitEthernet0/0
R
10.1.45.0 [120/2] via 10.1.46.4, 00:00:23, GigabitEthernet0/0
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.7.0 is directly connected, Loopback0
R
10.1.5.0 [120/2] via 10.1.37.3, 00:00:16, FastEthernet0/3
R
10.1.45.0 [120/2] via 10.1.37.3, 00:00:16, FastEthernet0/3
C
10.1.37.0 is directly connected, FastEthernet0/3
SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.8.0 is directly connected, Loopback0
R
10.1.5.0 [120/2] via 10.1.38.3, 00:00:27, FastEthernet0/3
R
10.1.45.0 [120/2] via 10.1.38.3, 00:00:27, FastEthernet0/3
C
10.1.38.0 is directly connected, FastEthernet0/3

Copyright 2010 Internetwork Expert

www.INE.com
- 66 -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
- 67 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with Extranets


Objective: Configure MPLS VPNs between R5 & SW1 and R6 & SW2 using
RIPv2 as the PE-CE routing protocol. R5 and R6 should have
connectivity to each other via an MPLS VPN Extranet.
Fa0/3

Fa0/3

E0/1

E0/0
R3

.3
.3

10.1.38.0/24

RIPv2

SW2

.8

BGP
AS 1

10.1.37.0/24

.7

SW1

RIPv2

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

Fa0/0

.2

OSPF
Area 0

R2
S0/0.1

.2

204
Frame Relay
150.1.24.0/24

.5

R5

.4

S0/0.1
.4

.4

E0/1

R4

BGP
AS 1

E0/0

E0/1

10.1.46.0/24 VLAN 46

RIPv2

10.1.45.0/24 VLAN 45

402

RIPv2
.6

G0/0

Copyright 2010 Internetwork Expert

R6

www.INE.com
- 68 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure RIPv2 on the Ethernet interfaces of R5, R6, SW1, and SW2
Create the Loopback 10.1.5.5/24 on R5 and advertise it into RIPv2
Create the Loopback 10.1.6.6/24 on R6 and advertise it into RIPv2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIPv2
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIPv2
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R5 and SW1 should be in VRF R5-SW1
Use the route distinguisher and route target 1:57 for this VRF
R4 should export routes coming from R5 as both 1:5 and 1:57
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R4 & R5
R6 and SW2 should be in VRF R6-SW2
Use the route distinguisher and route target 1:68 for this VRF
R4 should export routes coming from R6 as both 1:6 and 1:68
Run RIPv2 as the PE-CE protocol between R3 & SW2 and R4 & R6
Redistribute where necessary to gain connectivity within the VPNs
R5 and R6 should have connectivity within their VPNs and to each other
SW1 and SW2 should not have connectivity to each other

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
log-adjacency-changes
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip

Copyright 2010 Internetwork Expert

www.INE.com
- 69 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target import 1:57
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R5-SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding R6-SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf R6-SW2
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute bgp 1 metric 2

Copyright 2010 Internetwork Expert

www.INE.com
- 70 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute rip
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:57
route-target export 1:57
route-target export 1:5
route-target import 1:57
route-target import 1:6
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target export 1:6
route-target import 1:68
route-target import 1:5
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R6-SW2
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip vrf forwarding R5-SW1

Copyright 2010 Internetwork Expert

www.INE.com
- 71 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip address 10.1.45.4 255.255.255.0


!
router ospf 1
log-adjacency-changes
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf R6-SW2
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute rip
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute rip
exit-address-family
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/1
ip address 10.1.45.5 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!

Copyright 2010 Internetwork Expert

www.INE.com
- 72 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 45
!
interface FastEthernet0/5
switchport access vlan 45
!
router rip
version 2
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert

www.INE.com
- 73 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 02:27:34, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 02:27:34, FastEthernet0/0


150.1.13.3, 02:27:34, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 02:28:04, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 02:28:04, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 02:28:04, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 01:19:54, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 01:19:54, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 01:19:54, Serial1/2
Routing Table: R5-SW1
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:03, Ethernet0/0
B
10.1.5.0 [200/1] via 150.1.4.4, 01:34:21
B
10.1.45.0 [200/0] via 150.1.4.4, 01:34:21
C
10.1.37.0 is directly connected, Ethernet0/0
Routing Table: R6-SW2
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/1] via 10.1.38.8, 00:00:25, Ethernet0/1
B
10.1.6.0 [200/1] via 150.1.4.4, 01:34:07
B
10.1.46.0 [200/0] via 150.1.4.4, 01:34:07
C
10.1.38.0 is directly connected, Ethernet0/1
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:16:29, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:16:29, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:16:29, Serial0/0.1

Copyright 2010 Internetwork Expert

www.INE.com
- 74 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: R5-SW1


<output omitted>
10.0.0.0/24 is subnetted, 6 subnets
B
10.1.7.0 [200/1] via 150.1.3.3, 00:12:09
B
10.1.6.0 [20/1] via 10.1.46.6 (R6-SW2), 00:12:00, Ethernet0/0
R
10.1.5.0 [120/1] via 10.1.45.5, 00:00:08, Ethernet0/1
B
10.1.46.0 is directly connected, 00:12:00, Ethernet0/0
C
10.1.45.0 is directly connected, Ethernet0/1
B
10.1.37.0 [200/0] via 150.1.3.3, 00:12:09
Routing Table: R6-SW2
10.0.0.0/24 is subnetted, 6 subnets
B
10.1.8.0 [200/1] via 150.1.3.3, 00:12:09
R
10.1.6.0 [120/1] via 10.1.46.6, 00:00:17, Ethernet0/0
B
10.1.5.0 [20/1] via 10.1.45.5 (R5-SW1), 00:12:00, Ethernet0/1
C
10.1.46.0 is directly connected, Ethernet0/0
B
10.1.45.0 is directly connected, 00:12:00, Ethernet0/1
B
10.1.38.0 [200/0] via 150.1.3.3, 00:12:09
R5#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.7.0 [120/2] via 10.1.45.4, 00:00:08, Ethernet0/1
C
10.1.5.0 is directly connected, Loopback0
C
10.1.45.0 is directly connected, Ethernet0/1
R
10.1.37.0 [120/2] via 10.1.45.4, 00:00:08, Ethernet0/1
R6#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/2] via 10.1.46.4, 00:00:08, GigabitEthernet0/0
C
10.1.6.0 is directly connected, Loopback0
C
10.1.46.0 is directly connected, GigabitEthernet0/0
R
10.1.38.0 [120/2] via 10.1.46.4, 00:00:08, GigabitEthernet0/0
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.7.0 is directly connected, Loopback0
R
10.1.5.0 [120/2] via 10.1.37.3, 00:00:01, FastEthernet0/3
R
10.1.45.0 [120/2] via 10.1.37.3, 00:00:01, FastEthernet0/3
C
10.1.37.0 is directly connected, FastEthernet0/3
SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.8.0 is directly connected, Loopback0
R
10.1.6.0 [120/2] via 10.1.38.3, 00:00:13, FastEthernet0/3
R
10.1.46.0 [120/2] via 10.1.38.3, 00:00:13, FastEthernet0/3
C
10.1.38.0 is directly connected, FastEthernet0/3

Copyright 2010 Internetwork Expert

www.INE.com
- 75 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show ip bgp vpnv4 all


BGP table version is 17, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*>i10.1.5.0/24
150.1.4.4
1
100
0 ?
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.45.0/24
150.1.4.4
0
100
0 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*>i10.1.6.0/24
150.1.4.4
1
100
0 ?
*> 10.1.8.0/24
10.1.38.8
1
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.46.0/24
150.1.4.4
0
100
0 ?
R4#show ip bgp vpnv4 all
BGP table version is 17, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:57 (default for vrf R5-SW1)
*> 10.1.5.0/24
10.1.45.5
1
32768 ?
*> 10.1.6.0/24
10.1.46.6
1
32768 ?
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?
Route Distinguisher: 1:68 (default for vrf R6-SW2)
*> 10.1.5.0/24
10.1.45.5
1
32768 ?
*> 10.1.6.0/24
10.1.46.6
1
32768 ?
*>i10.1.8.0/24
150.1.3.3
1
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.46.0/24
0.0.0.0
0
32768 ?

Copyright 2010 Internetwork Expert

www.INE.com
- 76 -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
- 77 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs and VRF Export Map


Objective: Configure MPLS VPNs with the export-map feature on R5 in such a
way that SW1 has connectivity to VLAN 5, but not VLAN 55, and
SW2 has connectivity to VLAN 55, but not VLAN 5.
Fa0/3

Fa0/3

E0/1

E0/0
R3

.3
.3

10.1.38.0/24

RIPv2

.8

BGP
AS 1

10.1.37.0/24

.7

SW1

SW2

RIPv2

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

Fa0/0

.2

OSPF
Area 0

R2
S0/0.1

.2

204
Frame Relay
150.1.24.0/24

402

.4
10.1.5.0/24 VLAN 5

E0/0

.5

.4

R4
S0/1 BGP
.5
10.1.45.0/24

R5
E0/1 .5

S0/0.1

AS 1

S0/1

RIPv2

10.1.55.0/24 VLAN 55

Copyright 2010 Internetwork Expert

www.INE.com
- 78 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure RIPv2 on the Ethernet interfaces of R5, SW1, and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIPv2
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIPv2
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
SW1 should be in VRF SW1
Use the route distinguisher and route target 1:7 for this VRF
SW2 should be in VRF SW2
Use the route distinguisher and route target 1:8 for this VRF
R5 should be in VRF R5
Use the route distinguisher 1:5 for this VRF
VLAN 5 should be exported into VRF R5 with the route target 1:7
VLAN 55 should be exported into VRF R5 with the route target 1:8
Run RIPv2 as the PE-CE protocol on R3 and R4
Redistribute where necessary
SW1 should have reachability to VLAN 5 but not VLAN 55
SW2 should have reachability to VLAN 55 but not VLAN 5

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
tag-switching ip
!

Copyright 2010 Internetwork Expert

www.INE.com
- 79 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf SW1
rd 1:7
route-target export 1:7
route-target import 1:7
!
ip vrf SW2
rd 1:8
route-target export 1:8
route-target import 1:8
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf SW2
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1
redistribute bgp 1 metric 2
network 10.0.0.0

Copyright 2010 Internetwork Expert

www.INE.com
- 80 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf SW2
redistribute rip
no auto-summary
no synchronization
exit-address-family
!
address-family ipv4 vrf SW1
redistribute rip
no auto-summary
no synchronization
exit-address-family
R4#
ip cef
!
ip vrf R5
rd 1:5
export map R5_EXPORT
route-target import 1:7
route-target import 1:8
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Serial0/1
ip vrf forwarding R5
ip address 10.1.45.4 255.255.255.0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert

www.INE.com
- 81 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
!
address-family ipv4 vrf R5
redistribute bgp 1 metric 2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R5
redistribute rip
exit-address-family
!
ip prefix-list VLAN5 seq 5 permit 10.1.5.0/24
!
ip prefix-list VLAN55 seq 5 permit 10.1.55.0/24
!
route-map R5_EXPORT permit 10
match ip address prefix-list VLAN5
set extcommunity rt 1:7
!
route-map R5_EXPORT permit 20
match ip address prefix-list VLAN55
set extcommunity rt 1:8
R5#
ip cef
!
interface Ethernet0/0
ip address 10.1.5.5 255.255.255.0
half-duplex
!
interface Ethernet0/1
ip address 10.1.55.5 255.255.255.0
!
interface Serial0/1
ip address 10.1.45.5 255.255.255.0
clockrate 64000
!
router rip
version 2
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert

www.INE.com
- 82 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary

Verification
R5#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 7 subnets
R
10.1.8.0 [120/2] via 10.1.45.4, 00:00:06, Serial0/1
R
10.1.7.0 [120/2] via 10.1.45.4, 00:00:06, Serial0/1
C
10.1.5.0 is directly connected, Ethernet0/0
C
10.1.45.0 is directly connected, Serial0/1
R
10.1.38.0 [120/2] via 10.1.45.4, 00:00:06, Serial0/1
R
10.1.37.0 [120/2] via 10.1.45.4, 00:00:06, Serial0/1
C
10.1.55.0 is directly connected, Ethernet0/1

Copyright 2010 Internetwork Expert

www.INE.com
- 83 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
C
10.1.7.0 is directly connected, Loopback0
R
10.1.5.0 [120/2] via 10.1.37.3, 00:00:22, FastEthernet0/3
C
10.1.37.0 is directly connected, FastEthernet0/3
SW1#ping 10.1.5.5 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.5.5, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 116/119/120 ms

SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
C
10.1.8.0 is directly connected, Loopback0
C
10.1.38.0 is directly connected, FastEthernet0/3
R
10.1.55.0 [120/2] via 10.1.38.3, 00:00:21, FastEthernet0/3
SW2#ping 10.1.55.5 source 10.1.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.55.5, timeout is 2 seconds:
Packet sent with a source address of 10.1.8.8
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 116/118/120 ms

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 00:06:23, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 00:06:23, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 00:06:23, Serial1/2
Routing Table: SW1
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:20, Ethernet0/0
B
10.1.5.0 [200/1] via 150.1.4.4, 00:05:50
C
10.1.37.0 is directly connected, Ethernet0/0
Routing Table: SW2
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
R
10.1.8.0 [120/1] via 10.1.38.8, 00:00:06, Ethernet0/1
C
10.1.38.0 is directly connected, Ethernet0/1
B
10.1.55.0 [200/1] via 150.1.4.4, 00:05:50

Copyright 2010 Internetwork Expert

www.INE.com
- 84 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show ip bgp vpnv4 all


<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:5
*>i10.1.5.0/24
150.1.4.4
1
100
0 ?
*>i10.1.55.0/24
150.1.4.4
1
100
0 ?
Route Distinguisher: 1:7 (default for vrf SW1)
*>i10.1.5.0/24
150.1.4.4
1
100
0 ?
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
Route Distinguisher: 1:8 (default for vrf SW2)
*> 10.1.8.0/24
10.1.38.8
1
32768 ?
*> 10.1.38.0/24
0.0.0.0
0
32768 ?
*>i10.1.55.0/24
150.1.4.4
1
100
0 ?
R3#show ip bgp vpnv4 all 10.1.5.0
BGP routing table entry for 1:5:10.1.5.0/24, version 6
Paths: (1 available, best #1, no table)
Not advertised to any peer
Local
150.1.4.4 (metric 847) from 150.1.4.4 (150.1.4.4)
Origin incomplete, metric 1, localpref 100, valid, internal, best
Extended Community: RT:1:7,
mpls labels in/out nolabel/19
BGP routing table entry for 1:7:10.1.5.0/24, version 8
Paths: (1 available, best #1, table SW1)
Not advertised to any peer
Local, imported path from 1:5:10.1.5.0/24
150.1.4.4 (metric 847) from 150.1.4.4 (150.1.4.4)
Origin incomplete, metric 1, localpref 100, valid, internal, best
Extended Community: RT:1:7,
mpls labels in/out nolabel/19
R3#show ip bgp vpnv4 all 10.1.55.0
BGP routing table entry for 1:5:10.1.55.0/24, version 7
Paths: (1 available, best #1, no table)
Not advertised to any peer
Local
150.1.4.4 (metric 847) from 150.1.4.4 (150.1.4.4)
Origin incomplete, metric 1, localpref 100, valid, internal, best
Extended Community: RT:1:8,
mpls labels in/out nolabel/21
BGP routing table entry for 1:8:10.1.55.0/24, version 9
Paths: (1 available, best #1, table SW2)
Not advertised to any peer
Local, imported path from 1:5:10.1.55.0/24
150.1.4.4 (metric 847) from 150.1.4.4 (150.1.4.4)
Origin incomplete, metric 1, localpref 100, valid, internal, best
Extended Community: RT:1:8,
mpls labels in/out nolabel/21

Copyright 2010 Internetwork Expert

www.INE.com
- 85 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:08:42, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:08:42, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:08:42, Serial0/0.1
Routing Table: R5
<output omitted>
10.0.0.0/24 is subnetted, 7 subnets
B
10.1.8.0 [200/1] via 150.1.3.3, 00:08:00
B
10.1.7.0 [200/1] via 150.1.3.3, 00:08:00
R
10.1.5.0 [120/1] via 10.1.45.5, 00:00:22, Serial0/1
C
10.1.45.0 is directly connected, Serial0/1
B
10.1.38.0 [200/0] via 150.1.3.3, 00:08:00
B
10.1.37.0 [200/0] via 150.1.3.3, 00:08:00
R
10.1.55.0 [120/1] via 10.1.45.5, 00:00:22, Serial0/1
R4#show ip bgp vpnv4 all
<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:5 (default for vrf R5)
*> 10.1.5.0/24
10.1.45.5
1
32768 ?
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.8.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?
*> 10.1.45.0/24
0.0.0.0
0
32768 ?
*> 10.1.55.0/24
10.1.45.5
1
32768 ?
Route Distinguisher: 1:7
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
Route Distinguisher: 1:8
*>i10.1.8.0/24
150.1.3.3
1
100
0 ?
*>i10.1.38.0/24
150.1.3.3
0
100
0 ?

Copyright 2010 Internetwork Expert

www.INE.com
- 86 -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
- 87 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with BGP Site-Of-Origin


Objective: Configure an MPLS VPN to gain connectivity between AS 100 sites
and use BGP SOO to prevent looping between SW1 and SW2.
Fa0/13
SW1
.7
Fa0/3

.8

.7

BGP
AS 1

10.1.37.0/24

SW2
Fa0/3 .8

E0/1

E0/0

BGP
AS 100

Fa0/13

10.1.78.0/24

R3

.3
.3

.3

10.1.38.0/24

S1/2

BGP
AS 100

150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

Fa0/0

.2

OSPF
Area 0

R2
S0/0.1

.2

204
Frame Relay
150.1.24.0/24

402

S0/0.1
.4

R4

BGP
AS 1

E0/0

10.1.46.0/24 VLAN 46

.4

BGP
AS 100
.6

G0/0

Copyright 2010 Internetwork Expert

R6

www.INE.com
- 88 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Configure OSPF area 0 on the interfaces between R1, R2, R3, and R4
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure BGP on R6, SW1, and SW2 per the diagram
Create the Loopback 10.1.6.6/24 on R6 and advertise it into BGP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into BGP
Configure R6, SW1, and SW2 to advertise all other connected interfaces
into BGP
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R6, SW1, and SW2 should be in VRF AS100
Use the route distinguisher and route target 1:100 for this VRF
R3 and SW1 should peer via EBGP
R3 and SW2 should peer via EBGP
R4 and R6 should peer via EBGP
Routes that R3 learns from SW1 & SW2 should be tagged with a BGP
Site of Origin of 1:100
Redistribute where necessary to gain connectivity within the VPNs
Ensure that SW1 and SW2 do not route through R3 to reach each others
networks

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
log-adjacency-changes
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0

Copyright 2010 Internetwork Expert

www.INE.com
- 89 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
router ospf 1
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf AS100
rd 1:100
route-target export 1:100
route-target import 1:100
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding AS100
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding AS100
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf AS100
neighbor 10.1.37.7 remote-as 100
neighbor 10.1.37.7 activate
neighbor 10.1.37.7 as-override
neighbor 10.1.37.7 route-map SOO in

Copyright 2010 Internetwork Expert

www.INE.com
- 90 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

neighbor 10.1.38.8 remote-as 100


neighbor 10.1.38.8 activate
neighbor 10.1.38.8 as-override
neighbor 10.1.38.8 route-map SOO in
exit-address-family
!
route-map SOO permit 10
set extcommunity soo 1:100
R4#
ip cef
!
ip vrf AS100
rd 1:100
route-target export 1:100
route-target import 1:100
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding AS100
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
router ospf 1
log-adjacency-changes
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf AS100
neighbor 10.1.46.6 remote-as 100
neighbor 10.1.46.6 activate
neighbor 10.1.46.6 as-override
exit-address-family

Copyright 2010 Internetwork Expert

www.INE.com
- 91 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#
ip cef
!
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
router bgp 100
network 10.1.6.0 mask 255.255.255.0
network 10.1.46.0 mask 255.255.255.0
neighbor 10.1.46.4 remote-as 1
SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
interface FastEthernet0/13
no switchport
ip address 10.1.78.7 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
router bgp 100
network 10.1.7.0 mask 255.255.255.0
network 10.1.37.0 mask 255.255.255.0
network 10.1.78.0 mask 255.255.255.0
neighbor 10.1.37.3 remote-as 1

Copyright 2010 Internetwork Expert

www.INE.com
- 92 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/13
no switchport
ip address 10.1.78.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
router bgp 100
network 10.1.8.0 mask 255.255.255.0
network 10.1.38.0 mask 255.255.255.0
network 10.1.78.0 mask 255.255.255.0
neighbor 10.1.38.3 remote-as 1
neighbor 10.1.78.7 remote-as 100

Verification
R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O

O
O
C
C

150.1.24.0/24 [110/65] via 150.1.12.2, 04:20:21, FastEthernet0/0

150.1.4.4/32 [110/66] via


150.1.3.3/32 [110/65] via
150.1.13.0/24 is directly
150.1.12.0/24 is directly

150.1.12.2, 04:20:21, FastEthernet0/0


150.1.13.3, 04:20:21, Serial0/1
connected, Serial0/1
connected, FastEthernet0/0

R2#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.4.4/32 [110/65] via 150.1.24.4, 04:25:33, Serial0/0.1
O
150.1.3.3/32 [110/66] via 150.1.12.1, 04:25:33, FastEthernet0/0
O

150.1.13.0/24 [110/65] via 150.1.12.1, 04:25:33, FastEthernet0/0

150.1.12.0/24 is directly connected, FastEthernet0/0

R3#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
O
150.1.24.0/24 [110/846] via 150.1.13.1, 01:01:58, Serial1/2
O
150.1.4.4/32 [110/847] via 150.1.13.1, 01:01:58, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/782] via 150.1.13.1, 01:01:58, Serial1/2

Copyright 2010 Internetwork Expert

www.INE.com
- 93 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: AS100


<output omitted>
10.0.0.0/24 is subnetted, 7 subnets
B
10.1.8.0 [20/0] via 10.1.38.8, 00:37:28
B
10.1.7.0 [20/0] via 10.1.37.7, 00:37:28
B
10.1.6.0 [200/0] via 150.1.4.4, 00:38:21
B
10.1.46.0 [200/0] via 150.1.4.4, 00:38:21
C
10.1.38.0 is directly connected, Ethernet0/1
C
10.1.37.0 is directly connected, Ethernet0/0
B
10.1.78.0 [20/0] via 10.1.37.7, 00:39:51
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/130] via 150.1.24.2, 00:45:34, Serial0/0.1
O
150.1.13.0/24 [110/129] via 150.1.24.2, 00:45:34, Serial0/0.1
O
150.1.12.0/24 [110/65] via 150.1.24.2, 00:45:34, Serial0/0.1
Routing Table: AS100
<output omitted>
10.0.0.0/24 is subnetted, 7 subnets
B
10.1.8.0 [200/0] via 150.1.3.3, 00:43:57
B
10.1.7.0 [200/0] via 150.1.3.3, 00:43:57
B
10.1.6.0 [20/0] via 10.1.46.6, 00:39:12
C
10.1.46.0 is directly connected, Ethernet0/0
B
10.1.38.0 [200/0] via 150.1.3.3, 00:39:57
B
10.1.37.0 [200/0] via 150.1.3.3, 00:40:41
B
10.1.78.0 [200/0] via 150.1.3.3, 00:40:26
R6#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 7 subnets
B
10.1.8.0 [20/0] via 10.1.46.4, 00:39:26
B
10.1.7.0 [20/0] via 10.1.46.4, 00:39:26
C
10.1.6.0 is directly connected, Loopback0
C
10.1.46.0 is directly connected, GigabitEthernet0/0
B
10.1.38.0 [20/0] via 10.1.46.4, 00:39:26
B
10.1.37.0 [20/0] via 10.1.46.4, 00:39:26
B
10.1.78.0 [20/0] via 10.1.46.4, 00:39:26
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 7 subnets
R
10.1.8.0 [120/1] via 10.1.78.8, 00:00:04, FastEthernet0/13
C
10.1.7.0 is directly connected, Loopback0
B
10.1.6.0 [20/0] via 10.1.37.3, 00:39:23
B
10.1.46.0 [20/0] via 10.1.37.3, 00:39:23
R
10.1.38.0 [120/1] via 10.1.78.8, 00:00:04, FastEthernet0/13
C
10.1.37.0 is directly connected, FastEthernet0/3
C
10.1.78.0 is directly connected, FastEthernet0/1

Copyright 2010 Internetwork Expert

www.INE.com
- 94 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 7 subnets
C
10.1.8.0 is directly connected, Loopback0
R
10.1.7.0 [120/1] via 10.1.78.7, 00:00:18, FastEthernet0/13
B
10.1.6.0 [20/0] via 10.1.38.3, 00:39:41
B
10.1.46.0 [20/0] via 10.1.38.3, 00:39:41
C
10.1.38.0 is directly connected, FastEthernet0/3
R
10.1.37.0 [120/1] via 10.1.78.7, 00:00:18, FastEthernet0/13
C
10.1.78.0 is directly connected, FastEthernet0/13
R3#show ip bgp vpnv4 all
BGP table version is 66, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf AS100)
*>i10.1.6.0/24
150.1.4.4
0
100
0 100 i
*> 10.1.7.0/24
10.1.37.7
0
0 100 i
*> 10.1.8.0/24
10.1.38.8
0
0 100 i
r> 10.1.37.0/24
10.1.37.7
0
0 100 i
r> 10.1.38.0/24
10.1.38.8
0
0 100 i
*>i10.1.46.0/24
150.1.4.4
0
100
0 100 i
* 10.1.78.0/24
10.1.38.8
0
0 100 i
*>
10.1.37.7
0
0 100 i
R4#show ip bgp vpnv4 all
BGP table version is 67, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf AS100)
*> 10.1.6.0/24
10.1.46.6
0
0 100 i
*>i10.1.7.0/24
150.1.3.3
0
100
0 100 i
*>i10.1.8.0/24
150.1.3.3
0
100
0 100 i
*>i10.1.37.0/24
150.1.3.3
0
100
0 100 i
*>i10.1.38.0/24
150.1.3.3
0
100
0 100 i
r> 10.1.46.0/24
10.1.46.6
0
0 100 i
*>i10.1.78.0/24
150.1.3.3
0
100
0 100 i
R6#show ip bgp
BGP table version is 12, local router ID is 10.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

*>
*>
*>
*>

Network
10.1.6.0/24
10.1.7.0/24
10.1.8.0/24
10.1.37.0/24

Next Hop
0.0.0.0
10.1.46.4
10.1.46.4
10.1.46.4

Metric LocPrf Weight Path


0
32768 i
0 1 1 i
0 1 1 i
0 1 1 i

Copyright 2010 Internetwork Expert

www.INE.com
- 95 -

CCIE Service Provider Lab Workbook Volume I


*> 10.1.38.0/24
*> 10.1.46.0/24
*> 10.1.78.0/24

10.1.46.4
0.0.0.0
10.1.46.4

Version 1.0

0 1 1 i
32768 i
0 1 1 i

SW1#show ip bgp
BGP table version is 19, local router ID is 10.1.7.7
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

*>
*>
*>
*>
*>

Network
10.1.6.0/24
10.1.7.0/24
10.1.37.0/24
10.1.46.0/24
10.1.78.0/24

Next Hop
10.1.37.3
0.0.0.0
0.0.0.0
10.1.37.3
0.0.0.0

Metric LocPrf Weight


0
0
32768
0
32768
0
0
32768

Path
1 1 i
i
i
1 1 i
i

SW2#show ip bgp
BGP table version is 19, local router ID is 10.1.8.8
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

*>
*>
*>
*>
*>

Network
10.1.6.0/24
10.1.8.0/24
10.1.38.0/24
10.1.46.0/24
10.1.78.0/24

Next Hop
10.1.38.3
0.0.0.0
0.0.0.0
10.1.38.3
0.0.0.0

Metric LocPrf Weight


0
0
32768
0
32768
0
0
32768

Path
1 1 i
i
i
1 1 i
i

R3#show ip bgp vpnv4 vrf AS100 10.1.7.0 255.255.255.0


BGP routing table entry for 1:100:10.1.7.0/24, version 64
Paths: (1 available, best #1, table AS100)
Advertised to update-groups:
1
100
10.1.37.7 from 10.1.37.7 (10.1.7.7)
Origin IGP, metric 0, localpref 100, valid, external, best
Extended Community: SoO:1:100 RT:1:100,
mpls labels in/out 23/nolabel
R3#show ip bgp vpnv4 vrf AS100 10.1.8.0 255.255.255.0
BGP routing table entry for 1:100:10.1.8.0/24, version 66
Paths: (1 available, best #1, table AS100)
Advertised to update-groups:
1
100
10.1.38.8 from 10.1.38.8 (10.1.8.8)
Origin IGP, metric 0, localpref 100, valid, external, best
Extended Community: SoO:1:100 RT:1:100,
mpls labels in/out 24/nolabel

Copyright 2010 Internetwork Expert

www.INE.com
- 96 -

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert

Version 1.0

www.INE.com
- 97 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with OSPF and Sham-Links


Objective: Configure an MPLS VPN through AS 1 to connect R6 and SW2. The
backdoor link between R6 and SW2 should only be used if the MPLS
VPN through AS 1 is down.

BGP
AS 1
R3
S1/2

.3

.3
150.1.13.0/24

S0/1

10.1.38.0/24

E0/1

OSPF
Area 0
.8

SW2
Fa0/3
.8
Fa0/6

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12
.2

OSPF
Area 0

IS-IS
Level 2

R2
S0/0.1

10.1.68.0/24

Fa0/0

.2

204
Frame Relay
150.1.24.0/24

.6

.4

S0/0.1
.4

R4

BGP
AS 1

OSPF
Area 0

10.1.46.0/24 VLAN 46

402

G0/1

.6

G0/0

R6

E0/0

Copyright 2010 Internetwork Expert

www.INE.com
- 98 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure IS-IS Level 2 on the interfaces between R1, R2, R3, and R4
Use NET addresses in the format 00.0000.0000.000Y.00
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into IS-IS
Create the Loopback 150.1.4.4/32 on R4 and advertise it into IS-IS
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R6 and SW2 should be in VRF R6-SW2
Use the route distinguisher and route target 1:68 for this VRF
Run OSPF as the PE-CE protocol between R3 & SW2 and R4 & R6
Run OSPF on the Ethernet link between R6 & SW2; this link should have
the maximum OSPF cost supported
Create the Loopback 10.1.6.6/24 on R6 and advertise it into OSPF
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into OSPF
Configure a Loopback 10.1.3.3/32 on R3 that is part of VRF R6-SW2
Configure a Loopback 10.1.4.4/32 on R4 that is part of VRF R6-SW2
Redistribute where necessary
Configure an OSPF Sham-Link between R3 and R4 using these new
Loopbacks so that the Ethernet link between R6 & SW2 is only used in the
case that connectivity through the MPLS provider network is down

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay IETF
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0001.00
is-type level-2-only

Copyright 2010 Internetwork Expert

www.INE.com
- 99 -

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 204
!
router isis
net 00.0000.0000.0002.00
is-type level-2-only
R3#
ip cef
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
ip router isis
!
interface Loopback1
ip vrf forwarding R6-SW2
ip address 10.1.3.3 255.255.255.255
!
interface Ethernet0/1
ip vrf forwarding R6-SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip router isis
tag-switching ip
clockrate 64000
!
router ospf 1 vrf R6-SW2
log-adjacency-changes
area 0 sham-link 10.1.3.3 10.1.4.4
redistribute bgp 1 subnets
network 10.1.38.3 0.0.0.0 area 0
!
router isis
net 00.0000.0000.0003.00
is-type level-2-only
!

Copyright 2010 Internetwork Expert


- 100 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute connected
redistribute ospf 1 vrf R6-SW2
exit-address-family
R4#
ip cef
!
ip vrf R6-SW2
rd 1:68
route-target export 1:68
route-target import 1:68
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
interface Loopback1
ip vrf forwarding R6-SW2
ip address 10.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding R6-SW2
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 402
!
router ospf 1 vrf R6-SW2
log-adjacency-changes
area 0 sham-link 10.1.4.4 10.1.3.3
redistribute bgp 1 subnets
network 10.1.46.4 0.0.0.0 area 0
!
router isis
net 00.0000.0000.0004.00
is-type level-2-only
!

Copyright 2010 Internetwork Expert


- 101 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute connected
redistribute ospf 1 vrf R6-SW2
exit-address-family
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip ospf cost 65535
!
router ospf 1
log-adjacency-changes
network 10.1.6.6 0.0.0.0 area 0
network 10.1.46.6 0.0.0.0 area 0
network 10.1.68.6 0.0.0.0 area 0
SW1#
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!

Copyright 2010 Internetwork Expert


- 102 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
ip ospf cost 65535
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.38.8 0.0.0.0 area 0
network 10.1.68.8 0.0.0.0 area 0

Verification
Without Sham-Link:
R6#show ip route ospf
O
O

10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks


10.1.8.8/32 [110/65536] via 10.1.68.8, 00:00:01, GigabitEthernet0/1
10.1.38.0/24 [110/65545] via 10.1.68.8, 00:00:01, GigabitEthernet0/1

With Sham-Link:
R6#show ip route
<output omitted>
O
O E2
O E2
C
C
O
C

10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks


10.1.8.8/32 [110/13] via 10.1.46.4, 00:10:46, GigabitEthernet0/0
10.1.4.4/32 [110/1] via 10.1.46.4, 00:10:46, GigabitEthernet0/0
10.1.3.3/32 [110/1] via 10.1.46.4, 00:10:46, GigabitEthernet0/0
10.1.6.0/24 is directly connected, Loopback0
10.1.46.0/24 is directly connected, GigabitEthernet0/0
10.1.38.0/24 [110/12] via 10.1.46.4, 00:10:46, GigabitEthernet0/0
10.1.68.0/24 is directly connected, GigabitEthernet0/1

R4#show ip ospf sham-links


Sham Link OSPF_SL0 to address 10.1.3.3 is up
Area 0 source address 10.1.4.4
Run as demand circuit
DoNotAge LSA allowed. Cost of using 1 State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40,
Hello due in 00:00:09
Adjacency State FULL (Hello suppressed)
Index 2/2, retransmission queue length 0, number of retransmission 0

First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)


Last retransmission scan length is 0, maximum is 0
Last retransmission scan time is 0 msec, maximum is 0 msec
R3#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
i L2
150.1.24.0/24 [115/30] via 150.1.13.1, Serial1/2
i L2
150.1.4.4/32 [115/40] via 150.1.13.1, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
i L2
150.1.12.0/24 [115/20] via 150.1.13.1, Serial1/2

Copyright 2010 Internetwork Expert


- 103 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: R6-SW2


<output omitted>
10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
O
10.1.8.8/32 [110/11] via 10.1.38.8, 00:09:14, Ethernet0/1
O
10.1.6.6/32 [110/12] via 150.1.4.4, 00:09:14
B
10.1.4.4/32 [200/0] via 150.1.4.4, 00:09:21
C
10.1.3.3/32 is directly connected, Loopback1
O
10.1.46.0/24 [110/11] via 150.1.4.4, 00:09:14
C
10.1.38.0/24 is directly connected, Ethernet0/1
O
10.1.68.0/24 [110/65545] via 10.1.38.8, 00:09:14, Ethernet0/1
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
i L2
150.1.3.3/32 [115/40] via 150.1.24.2, Serial0/0.1
i L2
150.1.13.0/24 [115/30] via 150.1.24.2, Serial0/0.1
i L2
150.1.12.0/24 [115/20] via 150.1.24.2, Serial0/0.1
Routing Table: R6-SW2
<output omitted>
10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
O
10.1.8.8/32 [110/12] via 150.1.3.3, 00:09:36
O
10.1.6.6/32 [110/11] via 10.1.46.6, 00:09:36, Ethernet0/0
C
10.1.4.4/32 is directly connected, Loopback1
B
10.1.3.3/32 [200/0] via 150.1.3.3, 00:10:22
C
10.1.46.0/24 is directly connected, Ethernet0/0
O
10.1.38.0/24 [110/11] via 150.1.3.3, 00:09:36
O
10.1.68.0/24 [110/65545] via 10.1.46.6, 00:09:36, Ethernet0/0

Copyright 2010 Internetwork Expert


- 104 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 105 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with OSPF and Domain-ID


Objective: Configure MPLS VPNs between R5 & SW1 and R6 & SW2 using
OSPF as the PE-CE routing protocol and a unique OSPF Process-ID
on the PE routers. OSPF routes between VPN sites should appear
as Inter-Area routes.
Fa0/3

Fa0/3

E0/1

E0/0
R3

.3

10.1.38.0/24

OSPF
Area 0

.8

BGP
AS 1

10.1.37.0/24

.7

SW1

SW2

OSPF
Area 0

.3

S1/2

.3

150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

Fa0/0

.2

IS-IS
Level 2

R2
S0/0.1

.2

204
Frame Relay
150.1.24.0/24

.5

R5

.4

S0/0.1
.4

.4

E0/1

R4

BGP
AS 1

E0/0

E0/1

Copyright 2010 Internetwork Expert


- 106 -

10.1.46.0/24 VLAN 46

OSPF
Area 0

10.1.45.0/24 VLAN 45

402

OSPF
Area 0
.6

G0/0

R6

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure IS-IS Level 2 on the interfaces between R1, R2, R3, and R4
Use NET addresses in the format 00.0000.0000.000Y.00
Configure MPLS on the interfaces between R1, R2, R3, and R4
Create the Loopback 150.1.3.3/32 on R3 and advertise it into IS-IS
Create the Loopback 150.1.4.4/32 on R4 and advertise it into IS-IS
Enable OSPF area 0 on the Ethernet interfaces of R5, R6, SW1, and SW2
Create the Loopback 10.1.5.5/24 on R5 and advertise it into OSPF
Create the Loopback 10.1.6.6/24 on R6 and advertise it into OSPF
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into OSPF
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into OSPF
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R5 and SW1 should be in VRF R5-SW1
R3 should use the route distinguisher and route target 1:7 for this VRF
R4 should use the route distinguisher and route target 1:5 for this VRF
R6 and SW2 should be in VRF R6-SW2
Use the route distinguisher and route target 1:68 for this VRF
R3 should use the route distinguisher and route target 1:8 for this VRF
R4 should use the route distinguisher and route target 1:6 for this VRF
Run OSPF as the PE-CE protocol between R3 & SW1 using process-id 7
Run OSPF as the PE-CE protocol between R3 & SW2 using process-id 8
Run OSPF as the PE-CE protocol between R4 & R5 using process-id 5
Run OSPF as the PE-CE protocol between R4 & R6 using process-id 6
VRF R5-SW1 should use the OSPF Domain-ID 0.0.0.57
VRF R6-SW2 should use the OSPF Domain-ID 0.0.0.68
Redistribute where necessary to gain connectivity within the VPNs

Final Configuration
R1#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0001.00
is-type level-2-only
!

Copyright 2010 Internetwork Expert


- 107 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#
ip cef
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 204
!
router isis
net 00.0000.0000.0002.00
is-type level-2-only
R3#
ip cef
!
ip vrf R5-SW1
rd 1:7
route-target export 1:7
route-target import 1:5
!
ip vrf R6-SW2
rd 1:8
route-target export 1:8
route-target import 1:6
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip vrf forwarding R5-SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding R6-SW2
ip address 10.1.38.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip router isis
tag-switching ip
clockrate 64000
!
router ospf 8 vrf R6-SW2
domain-id 0.0.0.68
redistribute bgp 1 subnets
network 10.1.38.3 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert


- 108 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router ospf 7 vrf R5-SW1


domain-id 0.0.0.57
redistribute bgp 1 subnets
network 10.1.37.3 0.0.0.0 area 0
!
router isis
net 00.0000.0000.0003.00
is-type level-2-only
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute ospf 8 vrf R6-SW2
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute ospf 7 vrf R5-SW1
exit-address-family
R4#
ip cef
!
ip vrf R5-SW1
rd 1:5
route-target export 1:5
route-target import 1:7
!
ip vrf R6-SW2
rd 1:6
route-target export 1:6
route-target import 1:8
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip vrf forwarding R6-SW2
ip address 10.1.46.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.4 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 402
!

Copyright 2010 Internetwork Expert


- 109 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Ethernet0/1
ip vrf forwarding R5-SW1
ip address 10.1.45.4 255.255.255.0
!
router ospf 5 vrf R5-SW1
domain-id 0.0.0.57
redistribute bgp 1 subnets
network 10.1.45.4 0.0.0.0 area 0
!
router ospf 6 vrf R6-SW2
domain-id 0.0.0.68
redistribute bgp 1 subnets
network 10.1.46.4 0.0.0.0 area 0
!
router isis
net 00.0000.0000.0004.00
is-type level-2-only
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf R6-SW2
redistribute ospf 6 vrf R6-SW2
exit-address-family
!
address-family ipv4 vrf R5-SW1
redistribute ospf 5 vrf R5-SW1
exit-address-family
R5#
interface Loopback0
ip address 10.1.5.5 255.255.255.0
!
interface Ethernet0/1
ip address 10.1.45.5 255.255.255.0
!
router ospf 1
network 10.1.5.5 0.0.0.0 area 0
network 10.1.45.5 0.0.0.0 area 0
R6#
interface Loopback0
ip address 10.1.6.6 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.46.6 255.255.255.0
!
router ospf 1
network 10.1.6.6 0.0.0.0 area 0
network 10.1.46.6 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 110 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 46
!
interface FastEthernet0/6
switchport access vlan 46
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
no switchport
ip address 10.1.38.8 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 45
!
interface FastEthernet0/5
switchport access vlan 45
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.38.8 0.0.0.0 area 0

Verification
Without OSPF Domain-ID Configured:
SW2#show ip route
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
C
10.1.8.0/24 is directly connected, Loopback0
O E2
10.1.6.6/32 [110/11] via 10.1.38.3, 00:02:30, FastEthernet0/3
O E2
10.1.46.0/24 [110/1] via 10.1.38.3, 00:02:30, FastEthernet0/3
C
10.1.38.0/24 is directly connected, FastEthernet0/3

Copyright 2010 Internetwork Expert


- 111 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

With OSPF Domain-ID Configured:


R5#show ip route
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O IA
10.1.7.7/32 [110/21] via 10.1.45.4, 00:13:51, Ethernet0/1
C
10.1.5.0/24 is directly connected, Loopback0
C
10.1.45.0/24 is directly connected, Ethernet0/1
O IA
10.1.37.0/24 [110/11] via 10.1.45.4, 00:13:51, Ethernet0/1
R6#show ip route
<output omitted>
O IA
C
C
O IA

10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks


10.1.8.8/32 [110/12] via 10.1.46.4, 00:14:18, GigabitEthernet0/0
10.1.6.0/24 is directly connected, Loopback0
10.1.46.0/24 is directly connected, GigabitEthernet0/0
10.1.38.0/24 [110/2] via 10.1.46.4, 00:14:18, GigabitEthernet0/0

SW1#show ip route
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O IA
10.1.5.5/32 [110/21] via 10.1.37.3, 00:14:40, FastEthernet0/3
C
10.1.7.0/24 is directly connected, Loopback0
O IA
10.1.45.0/24 [110/11] via 10.1.37.3, 00:14:40, FastEthernet0/3
C
10.1.37.0/24 is directly connected, FastEthernet0/3
SW2#show ip route
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
C
10.1.8.0/24 is directly connected, Loopback0
O IA
10.1.6.6/32 [110/21] via 10.1.38.3, 00:14:49, FastEthernet0/3
O IA
10.1.46.0/24 [110/11] via 10.1.38.3, 00:14:49, FastEthernet0/3
C
10.1.38.0/24 is directly connected, FastEthernet0/3
R3#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
i L2
150.1.24.0/24 [115/30] via 150.1.13.1, Serial1/2
i L2
150.1.4.4/32 [115/40] via 150.1.13.1, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial1/2
i L2
150.1.12.0/24 [115/20] via 150.1.13.1, Serial1/2
Routing Table: R5-SW1
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O
10.1.7.7/32 [110/11] via 10.1.37.7, 00:14:11, Ethernet0/0
B
10.1.5.5/32 [200/11] via 150.1.4.4, 00:12:26
B
10.1.45.0/24 [200/0] via 150.1.4.4, 00:12:26
C
10.1.37.0/24 is directly connected, Ethernet0/0

Copyright 2010 Internetwork Expert


- 112 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: R6-SW2


<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O
10.1.8.8/32 [110/11] via 10.1.38.8, 00:14:11, Ethernet0/1
B
10.1.6.6/32 [200/11] via 150.1.4.4, 00:12:26
B
10.1.46.0/24 [200/0] via 150.1.4.4, 00:12:26
C
10.1.38.0/24 is directly connected, Ethernet0/1
R4#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Serial0/0.1
C
150.1.4.4/32 is directly connected, Loopback0
i L2
150.1.3.3/32 [115/40] via 150.1.24.2, Serial0/0.1
i L2
150.1.13.0/24 [115/30] via 150.1.24.2, Serial0/0.1
i L2
150.1.12.0/24 [115/20] via 150.1.24.2, Serial0/0.1
Routing Table: R5-SW1
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
B
10.1.7.7/32 [200/11] via 150.1.3.3, 00:12:47
O
10.1.5.5/32 [110/11] via 10.1.45.5, 00:14:06, Ethernet0/1
C
10.1.45.0/24 is directly connected, Ethernet0/1
B
10.1.37.0/24 [200/0] via 150.1.3.3, 00:12:47
Routing Table: R6-SW2
<output omitted>
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
B
10.1.8.8/32 [200/11] via 150.1.3.3, 00:12:47
O
10.1.6.6/32 [110/11] via 10.1.46.6, 00:14:06, Ethernet0/0
C
10.1.46.0/24 is directly connected, Ethernet0/0
B
10.1.38.0/24 [200/0] via 150.1.3.3, 00:12:47

Copyright 2010 Internetwork Expert


- 113 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS VPNs with VPNv4 Route Reflection


Objective: Configure R2 as a VPNv4 route reflector to provide MPLS VPN
connectivity between SW1, SW2, & BB2, and R1 as an IPv4 route
reflector to provide connectivity from AS 100 to AS 54.

Fa0/3
10.1.37.0/24

.7

RIPv2
E0/0
R3

SW1

BGP
AS 54

.3

.3

S1/2
S0/1

150.1.13.0/24

BGP
AS 100

204.10.X.0/24 VLAN 31

.254

.1

150.1.12.0/24

OSPF
Area 0

R1
S0/0.1

Frame Relay

.1

102
201

.2
.2

.4

E0/0
R4
E0/1 .4

S0/0.1

Fa0/0

150.1.24.0/24 VLAN 24

S0/0.2

RIPv2

150.1.25.0/24

R2

Frame Relay
205
502

.2

.5

192.10.X.0/24 VLAN 42

S0/0.1
R5
E0/0 .5

BB2

150.1.56.0/24 VLAN 56

G0/0

.6

G0/1

RIPv2
Fa0/6

SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 114 -

www.INE.com

BB3

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIP
Create Loopbacks in the format 150.X.Y.Y/32 on R1 through R6.
Configure OSPF area 0 on the interfaces between R1 through R6.
Advertise the network 204.12.X.0/24 into OSPF on R1.
Configure BGP AS 100 on R1 through R6.
R1 should peer via iBGP with R2 through R6 using the Loopback
interfaces.
R1 should reflect IPv4 unicast prefixes to these neighbors.
Configure R1 to peer with BB3 via EBGP.
Configure R1 to advertise the aggregate 150.1.0.0/16 to BB3 via BGP.
Configure MPLS on the interfaces between R1 through R6.
Create VRF VPN_A on R3, R4, and R6.
Use the route distinguisher and route target 100:1 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW1, R4 & BB2, and R6
& SW2.
BB2 will be expecting RIPv2 packets to be MD5 authenticated with the
password CISCO
R2 should peer via iBGP with R3, R4, and R6 using the Loopback
interfaces.
R2 should reflect VPNv4 prefixes to these neighbors.
These neighbors should not exchange IPv4 unicast prefixes.
Redistribute where necessary to gain connectivity within the VPNs

Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet1/0
ip address 204.12.1.1 255.255.255.0
!
interface Serial2/0
encapsulation frame-relay
!
interface Serial2/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
tag-switching ip
frame-relay interface-dlci 102
!

Copyright 2010 Internetwork Expert


- 115 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial2/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
redistribute connected subnets
network 150.1.0.0 0.0.255.255 area 0
!
router bgp 100
network 150.1.1.1 mask 255.255.255.255
aggregate-address 150.1.0.0 255.255.0.0 summary-only
neighbor 150.1.2.2 remote-as 100
neighbor 150.1.2.2 update-source Loopback0
neighbor 150.1.2.2 route-reflector-client
neighbor 150.1.3.3 remote-as 100
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 route-reflector-client
neighbor 150.1.4.4 remote-as 100
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 route-reflector-client
neighbor 150.1.5.5 remote-as 100
neighbor 150.1.5.5 update-source Loopback0
neighbor 150.1.5.5 route-reflector-client
neighbor 150.1.6.6 remote-as 100
neighbor 150.1.6.6 update-source Loopback0
neighbor 150.1.6.6 route-reflector-client
neighbor 204.12.1.254 remote-as 54
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet1/0
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
interface Serial2/0
encapsulation frame-relay
!
interface Serial2/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 201
!
interface Serial2/0.2 point-to-point
ip address 150.1.25.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 205
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!

Copyright 2010 Internetwork Expert


- 116 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 100


neighbor 150.1.1.1 remote-as 100
neighbor 150.1.1.1 update-source Loopback0
neighbor 150.1.3.3 remote-as 100
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.4.4 remote-as 100
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.6.6 remote-as 100
neighbor 150.1.6.6 update-source Loopback0
!
address-family ipv4
neighbor 150.1.1.1 activate
no neighbor 150.1.3.3 activate
no neighbor 150.1.4.4 activate
no neighbor 150.1.6.6 activate
exit-address-family
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community extended
neighbor 150.1.3.3 route-reflector-client
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community extended
neighbor 150.1.4.4 route-reflector-client
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 send-community extended
neighbor 150.1.6.6 route-reflector-client
exit-address-family
R3#
ip cef
!
ip vrf VPN_A
rd 100:1
route-target export 100:1
route-target import 100:1
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding VPN_A
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!

Copyright 2010 Internetwork Expert


- 117 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
!
address-family ipv4 vrf VPN_A
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
neighbor 150.1.1.1 remote-as 100
neighbor 150.1.1.1 update-source Loopback0
neighbor 150.1.2.2 remote-as 100
neighbor 150.1.2.2 update-source Loopback0
!
address-family ipv4
neighbor 150.1.1.1 activate
no neighbor 150.1.2.2 activate
exit-address-family
!
address-family vpnv4
neighbor 150.1.2.2 activate
neighbor 150.1.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf VPN_A
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf VPN_A
rd 100:1
route-target export 100:1
route-target import 100:1
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Ethernet0/1
ip vrf forwarding VPN_A
ip address 192.10.1.4 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!

Copyright 2010 Internetwork Expert


- 118 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
!
address-family ipv4 vrf VPN_A
redistribute bgp 100 metric 1
network 192.10.1.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
neighbor 150.1.1.1 remote-as 100
neighbor 150.1.1.1 update-source Loopback0
neighbor 150.1.2.2 remote-as 100
neighbor 150.1.2.2 update-source Loopback0
!
address-family ipv4
neighbor 150.1.1.1 activate
no neighbor 150.1.2.2 activate
exit-address-family
!
address-family vpnv4
neighbor 150.1.2.2 activate
neighbor 150.1.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf VPN_A
redistribute rip
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.25.5 255.255.255.0
tag-switching ip
frame-relay interface-dlci 502
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!
router bgp 100
neighbor 150.1.1.1 remote-as 100
neighbor 150.1.1.1 update-source Loopback0

Copyright 2010 Internetwork Expert


- 119 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#
ip cef
!
ip vrf VPN_A
rd 100:1
route-target export 100:1
route-target import 100:1
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
mpls ip
!
interface GigabitEthernet0/1
ip vrf forwarding VPN_A
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 150.1.0.0 0.0.255.255 area 0
!
router rip
!
address-family ipv4 vrf VPN_A
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
neighbor 150.1.1.1 remote-as 100
neighbor 150.1.1.1 update-source Loopback0
neighbor 150.1.2.2 remote-as 100
neighbor 150.1.2.2 update-source Loopback0
!
address-family ipv4
neighbor 150.1.1.1 activate
no neighbor 150.1.2.2 activate
exit-address-family
!
address-family vpnv4
neighbor 150.1.2.2 activate
neighbor 150.1.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf VPN_A
redistribute rip
exit-address-family

Copyright 2010 Internetwork Expert


- 120 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 31
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
interface FastEthernet0/24
switchport access vlan 31
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
switchport access vlan 32
!
interface FastEthernet0/4
switchport access vlan 42
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
interface FastEthernet0/24
switchport access vlan 42
!
router rip
version 2
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert


- 121 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
R2 installs the VPNv4 routes for RD 100:1 but does not associate them
with VPN_A
R2#show ip bgp vpnv4 all
BGP table version is 9, local router ID is 150.1.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Route Distinguisher: 100:1
*>i10.1.7.0/24
150.1.3.3
*>i10.1.8.0/24
150.1.6.6
*>i10.1.37.0/24
150.1.3.3
*>i10.1.68.0/24
150.1.6.6
*>i192.10.1.0
150.1.4.4
*>i205.90.31.0
150.1.4.4
*>i220.20.3.0
150.1.4.4
*>i222.22.2.0
150.1.4.4

Metric LocPrf Weight Path


1
1
0
0
0
7
7
7

100
100
100
100
100
100
100
100

0
0
0
0
0
0
0
0

?
?
?
?
?
?
?
?

R3, R4, and R6 learn VPNv4 prefixes from R2 and install them as VPN_A
routes
R3#show ip bgp vpnv4 all
BGP table version is 17, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 100:1 (default for vrf VPN_A)
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*>i10.1.8.0/24
150.1.6.6
1
100
0 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i10.1.68.0/24
150.1.6.6
0
100
0 ?
*>i192.10.1.0
150.1.4.4
0
100
0 ?
*>i205.90.31.0
150.1.4.4
7
100
0 ?
*>i220.20.3.0
150.1.4.4
7
100
0 ?
*>i222.22.2.0
150.1.4.4
7
100
0 ?
R4#show ip bgp vpnv4 all
BGP table version is 17, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 100:1 (default for vrf VPN_A)
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.8.0/24
150.1.6.6
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*>i10.1.68.0/24
150.1.6.6
0
100
0 ?
*> 192.10.1.0
0.0.0.0
0
32768 ?
*> 205.90.31.0
192.10.1.254
7
32768 ?
*> 220.20.3.0
192.10.1.254
7
32768 ?

Copyright 2010 Internetwork Expert


- 122 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


*> 222.22.2.0

192.10.1.254

Version 1.0
7

32768 ?

R6#show ip bgp vpnv4 all


BGP table version is 17, local router ID is 150.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 100:1 (default for vrf VPN_A)
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*>i192.10.1.0
150.1.4.4
0
100
0 ?
*>i205.90.31.0
150.1.4.4
7
100
0 ?
*>i220.20.3.0
150.1.4.4
7
100
0 ?
*>i222.22.2.0
150.1.4.4
7
100
0 ?
Other BGP routers only know of IPv4 Unicast prefixes
R1#show ip bgp
BGP table version is 14, local router ID is 150.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

*>
*>
*>
*>
*>
*>
*>
*>
*>
*>
*>
s>

Network
28.119.16.0/24
28.119.17.0/24
112.0.0.0
113.0.0.0
114.0.0.0
115.0.0.0
116.0.0.0
117.0.0.0
118.0.0.0
119.0.0.0
150.1.0.0
150.1.1.1/32

Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
0.0.0.0
0.0.0.0

Metric LocPrf Weight Path


0
0 54 i
0
0 54 i
0 54 50 60 i
0 54 50 60 i
0 54 i
0 54 i
0 54 i
0 54 i
0 54 i
0 54 i
32768 i
0
32768 i

R2#show ip bgp
BGP table version is 12, local router ID is 150.1.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0

Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254

Copyright 2010 Internetwork Expert


- 123 -

Metric LocPrf Weight Path


0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i

www.INE.com

CCIE Service Provider Lab Workbook Volume I


*>i150.1.0.0

150.1.1.1

Version 1.0
0

100

0 i

R3#show ip bgp
BGP table version is 12, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
*>i150.1.0.0

Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
150.1.1.1

Metric LocPrf Weight Path


0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 i

R4#show ip bgp
BGP table version is 12, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
*>i150.1.0.0

Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
150.1.1.1

Metric LocPrf Weight Path


0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 i

R4#show ip bgp
BGP table version is 12, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
*>i150.1.0.0

Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
150.1.1.1

Copyright 2010 Internetwork Expert


- 124 -

Metric LocPrf Weight Path


0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 i

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#show ip bgp
BGP table version is 12, local router ID is 150.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
*>i28.119.16.0/24
*>i28.119.17.0/24
*>i112.0.0.0
*>i113.0.0.0
*>i114.0.0.0
*>i115.0.0.0
*>i116.0.0.0
*>i117.0.0.0
*>i118.0.0.0
*>i119.0.0.0
*>i150.1.0.0

Next Hop
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
204.12.1.254
150.1.1.1

Metric LocPrf Weight Path


0
100
0 54 i
0
100
0 54 i
0
100
0 54 50 60 i
0
100
0 54 50 60 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 54 i
0
100
0 i

R1#show ip route
<output omitted>
B
B
C
B
B
B
B
B
B
B
B
O
O
O
O
O
O
O
C
B
C
C
O

119.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20


118.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
204.12.1.0/24 is directly connected, FastEthernet1/0
117.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
116.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
115.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
114.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
113.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
112.0.0.0/8 [20/0] via 204.12.1.254, 00:28:20
28.0.0.0/24 is subnetted, 2 subnets
28.119.17.0 [20/0] via 204.12.1.254, 00:28:21
28.119.16.0 [20/0] via 204.12.1.254, 00:28:21
150.1.0.0/16 is variably subnetted, 12 subnets, 3 masks
150.1.25.0/24 [110/96] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.24.0/24 [110/49] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.6.6/32 [110/107] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.5.5/32 [110/97] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.4.4/32 [110/50] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.3.3/32 [110/49] via 150.1.13.3, 00:28:14, Serial2/1
150.1.2.2/32 [110/49] via 150.1.12.2, 00:28:14, Serial2/0.1
150.1.1.1/32 is directly connected, Loopback0
150.1.0.0/16 [200/0] via 0.0.0.0, 00:23:40, Null0
150.1.13.0/24 is directly connected, Serial2/1
150.1.12.0/24 is directly connected, Serial2/0.1
150.1.56.0/24 [110/106] via 150.1.12.2, 00:28:14, Serial2/0.1

R2#show ip route
<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
O E2 204.12.1.0/24 [110/20] via 150.1.12.1, 00:28:35, Serial2/0.1
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20

Copyright 2010 Internetwork Expert


- 125 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


B
B
B
B
C
C
O
O
O
O
C
O
B
O
C
O

Version 1.0

113.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20


112.0.0.0/8 [200/0] via 204.12.1.254, 00:25:20
28.0.0.0/24 is subnetted, 2 subnets
28.119.17.0 [200/0] via 204.12.1.254, 00:25:21
28.119.16.0 [200/0] via 204.12.1.254, 00:25:21
150.1.0.0/16 is variably subnetted, 12 subnets, 3 masks
150.1.25.0/24 is directly connected, Serial2/0.2
150.1.24.0/24 is directly connected, FastEthernet1/0
150.1.6.6/32 [110/59] via 150.1.25.5, 00:28:36, Serial2/0.2
150.1.5.5/32 [110/49] via 150.1.25.5, 00:28:36, Serial2/0.2
150.1.4.4/32 [110/2] via 150.1.24.4, 00:28:36, FastEthernet1/0
150.1.3.3/32 [110/97] via 150.1.12.1, 00:28:36, Serial2/0.1
150.1.2.2/32 is directly connected, Loopback0
150.1.1.1/32 [110/49] via 150.1.12.1, 00:28:36, Serial2/0.1
150.1.0.0/16 [200/0] via 150.1.1.1, 00:24:02
150.1.13.0/24 [110/96] via 150.1.12.1, 00:28:36, Serial2/0.1
150.1.12.0/24 is directly connected, Serial2/0.1
150.1.56.0/24 [110/58] via 150.1.25.5, 00:28:36, Serial2/0.2

R3#show ip route vrf *


<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
O E2 204.12.1.0/24 [110/20] via 150.1.13.1, 00:29:00, Serial1/2
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
113.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
B
112.0.0.0/8 [200/0] via 204.12.1.254, 00:25:34
28.0.0.0/24 is subnetted, 2 subnets
B
28.119.17.0 [200/0] via 204.12.1.254, 00:25:35
B
28.119.16.0 [200/0] via 204.12.1.254, 00:25:35
150.1.0.0/16 is variably subnetted, 12 subnets, 3 masks
O
150.1.25.0/24 [110/877] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.24.0/24 [110/830] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.6.6/32 [110/888] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.5.5/32 [110/878] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.4.4/32 [110/831] via 150.1.13.1, 00:29:01, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
O
150.1.2.2/32 [110/830] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.1.1/32 [110/782] via 150.1.13.1, 00:29:01, Serial1/2
B
150.1.0.0/16 [200/0] via 150.1.1.1, 00:24:27
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/829] via 150.1.13.1, 00:29:01, Serial1/2
O
150.1.56.0/24 [110/887] via 150.1.13.1, 00:29:01, Serial1/2
Routing Table: VPN_A
<output omitted>
B
222.22.2.0/24 [200/7] via 150.1.4.4, 00:07:11
B
220.20.3.0/24 [200/7] via 150.1.4.4, 00:07:11
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [200/1] via 150.1.6.6, 00:07:11
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:01, Ethernet0/0
C
10.1.37.0 is directly connected, Ethernet0/0
B
10.1.68.0 [200/0] via 150.1.6.6, 00:07:11
B
192.10.1.0/24 [200/0] via 150.1.4.4, 00:07:11

Copyright 2010 Internetwork Expert


- 126 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


B

Version 1.0

205.90.31.0/24 [200/7] via 150.1.4.4, 00:07:11

R4#show ip route vrf *


<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
O E2 204.12.1.0/24 [110/20] via 150.1.24.2, 00:29:26, Ethernet0/0
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
113.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
B
112.0.0.0/8 [200/0] via 204.12.1.254, 00:25:53
28.0.0.0/24 is subnetted, 2 subnets
B
28.119.17.0 [200/0] via 204.12.1.254, 00:25:54
B
28.119.16.0 [200/0] via 204.12.1.254, 00:25:54
150.1.0.0/16 is variably subnetted, 12 subnets, 3 masks
O
150.1.25.0/24 [110/58] via 150.1.24.2, 00:29:28, Ethernet0/0
C
150.1.24.0/24 is directly connected, Ethernet0/0
O
150.1.6.6/32 [110/69] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.5.5/32 [110/59] via 150.1.24.2, 00:29:28, Ethernet0/0
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/107] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.2.2/32 [110/11] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.1.1/32 [110/59] via 150.1.24.2, 00:29:28, Ethernet0/0
B
150.1.0.0/16 [200/0] via 150.1.1.1, 00:24:54
O
150.1.13.0/24 [110/106] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.12.0/24 [110/58] via 150.1.24.2, 00:29:28, Ethernet0/0
O
150.1.56.0/24 [110/68] via 150.1.24.2, 00:29:28, Ethernet0/0
Routing Table: VPN_A
<output omitted>
R
222.22.2.0/24 [120/7] via 192.10.1.254, 00:00:01, Ethernet0/1
R
220.20.3.0/24 [120/7] via 192.10.1.254, 00:00:01, Ethernet0/1
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [200/1] via 150.1.6.6, 00:07:40
B
10.1.7.0 [200/1] via 150.1.3.3, 00:07:40
B
10.1.37.0 [200/0] via 150.1.3.3, 00:07:40
B
10.1.68.0 [200/0] via 150.1.6.6, 00:07:40
C
192.10.1.0/24 is directly connected, Ethernet0/1
R
205.90.31.0/24 [120/7] via 192.10.1.254, 00:00:02, Ethernet0/1
R5#show ip route
<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
O E2 204.12.1.0/24 [110/20] via 150.1.25.2, 00:29:54, Serial0/0.1
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
113.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
B
112.0.0.0/8 [200/0] via 204.12.1.254, 00:26:12
28.0.0.0/24 is subnetted, 2 subnets
B
28.119.17.0 [200/0] via 204.12.1.254, 00:26:13
B
28.119.16.0 [200/0] via 204.12.1.254, 00:26:13
150.1.0.0/16 is variably subnetted, 12 subnets, 3 masks

Copyright 2010 Internetwork Expert


- 127 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


C
O
O
C
O
O
O
O
B
O
O
C

Version 1.0

150.1.25.0/24 is directly connected, Serial0/0.1


150.1.24.0/24 [110/65] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.6.6/32 [110/11] via 150.1.56.6, 00:29:55, Ethernet0/0
150.1.5.5/32 is directly connected, Loopback0
150.1.4.4/32 [110/66] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.3.3/32 [110/161] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.2.2/32 [110/65] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.1.1/32 [110/113] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.0.0/16 [200/0] via 150.1.1.1, 00:25:21
150.1.13.0/24 [110/160] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.12.0/24 [110/112] via 150.1.25.2, 00:29:55, Serial0/0.1
150.1.56.0/24 is directly connected, Ethernet0/0

R6#show ip route vrf *


<output omitted>
B
119.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
118.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
O E2 204.12.1.0/24 [110/20] via 150.1.56.5, 00:30:17, GigabitEthernet0/0
B
117.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
116.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
115.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
114.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
113.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
B
112.0.0.0/8 [200/0] via 204.12.1.254, 00:26:34
28.0.0.0/24 is subnetted, 2 subnets
B
28.119.17.0 [200/0] via 204.12.1.254, 00:26:35
B
28.119.16.0 [200/0] via 204.12.1.254, 00:26:35
150.1.0.0/16 is variably subnetted, 12 subnets, 3 masks
O
150.1.25.0/24 [110/65] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
O
150.1.24.0/24 [110/66] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
C
150.1.6.6/32 is directly connected, Loopback0
O
150.1.5.5/32 [110/2] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
O
150.1.4.4/32 [110/67] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
O
150.1.3.3/32 [110/162] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
O
150.1.2.2/32 [110/66] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
O
150.1.1.1/32 [110/114] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
B
150.1.0.0/16 [200/0] via 150.1.1.1, 00:25:44
O
150.1.13.0/24 [110/161] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
O
150.1.12.0/24 [110/113] via 150.1.56.5, 00:30:18, GigabitEthernet0/0
C
150.1.56.0/24 is directly connected, GigabitEthernet0/0

Routing Table: VPN_A


<output omitted>
B
222.22.2.0/24 [200/7] via 150.1.4.4, 00:08:26
B
220.20.3.0/24 [200/7] via 150.1.4.4, 00:08:26
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/1] via 10.1.68.8, 00:00:15, GigabitEthernet0/1
B
10.1.7.0 [200/1] via 150.1.3.3, 00:08:26
B
10.1.37.0 [200/0] via 150.1.3.3, 00:08:26
C
10.1.68.0 is directly connected, GigabitEthernet0/1
B
192.10.1.0/24 [200/0] via 150.1.4.4, 00:08:27
B
205.90.31.0/24 [200/7] via 150.1.4.4, 00:08:27

Copyright 2010 Internetwork Expert


- 128 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#show ip route
<output omitted>
R
222.22.2.0/24 [120/1] via 10.1.37.3, 00:00:22, FastEthernet0/3
R
220.20.3.0/24 [120/1] via 10.1.37.3, 00:00:22, FastEthernet0/3
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/1] via 10.1.37.3, 00:00:22, FastEthernet0/3
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3
R
10.1.68.0 [120/1] via 10.1.37.3, 00:00:22, FastEthernet0/3
R
192.10.1.0/24 [120/1] via 10.1.37.3, 00:00:22, FastEthernet0/3
R
205.90.31.0/24 [120/1] via 10.1.37.3, 00:00:23, FastEthernet0/3
SW2#show ip route
<output omitted>
R
222.22.2.0/24 [120/1] via 10.1.68.6, 00:00:08, FastEthernet0/6
R
220.20.3.0/24 [120/1] via 10.1.68.6, 00:00:08, FastEthernet0/6
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.8.0 is directly connected, Loopback0
R
10.1.7.0 [120/1] via 10.1.68.6, 00:00:08, FastEthernet0/6
R
10.1.37.0 [120/1] via 10.1.68.6, 00:00:08, FastEthernet0/6
C
10.1.68.0 is directly connected, FastEthernet0/6
R
192.10.1.0/24 [120/1] via 10.1.68.6, 00:00:08, FastEthernet0/6
R
205.90.31.0/24 [120/1] via 10.1.68.6, 00:00:08, FastEthernet0/6

Copyright 2010 Internetwork Expert


- 129 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Inter-AS MPLS VPNs with Back-to-Back VRF


Objective: Provide VPN transit between SW1 & BB1 and SW2 & BB2 using
back-to-back VRF exchange between AS 1 and AS 2.
Fa0/3

.254

SW1

RIPv2

RIPv2

E0/0

E0/1
R3

.3

10.1.37.0/24

.7

192.10.X.0/24 VLAN 32

BB2

.3

.3

S1/2

BGP
AS 1

S0/1

150.1.13.0/24

.1

OSPF 150.1.12.0/24
Area 0 Frame Relay

R1
.1

S0/0.1

102
201

.2

S0/0.1
R2
Fa0/0.100 Fa0/0.200
150.1.100.Y/24 VLAN 100

150.1.200.Y/24 VLAN 200

E0/0.100

E0/0.200
150.1.45.0/24

R4
S0/0.1

.4

BGP
AS 2

Frame Relay
405
504

.5

S0/0.1

IS-IS Level 2

R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1

RIPv2
Fa0/6

SW2

10.1.68.0/24

.6

S0/0/0.1
R6

.8

.6

54.X.1.0/24

Frame Relay
101
.254

RIPv2
BB1

Copyright 2010 Internetwork Expert


- 130 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


The connection between R2 and R4 should use 802.1q trunking to provide
transit for VLANs 100 and 200
Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIP
Configure OSPF area 0 on the interfaces between R1, R2, and R3
Configure MPLS on the interfaces between R1, R2, and R3
Create the Loopback 150.1.1.1/32 on R1 and advertise it into OSPF
Create the Loopback 150.1.2.2/32 on R2 and advertise it into OSPF
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Configure IS-IS Level-2 routing on the interfaces between R4, R5, and R6
Use NET addresses in the format 00.0000.0000.000Y.00
Configure MPLS on the interfaces between R4, R5, and R6
Create the Loopback 150.1.4.4/32 on R4 and advertise it into IS-IS
Create the Loopback 150.1.5.5/32 on R5 and advertise it into IS-IS
Create the Loopback 150.1.6.6/32 on R6 and advertise it into IS-IS
SW1 and BB1 should be in VRF SW1-BB1
Use the route distinguisher and route target 1:100 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R6 & BB1
SW2 and BB2 should be in VRF SW2-BB2
Use the route distinguisher and route target 1:200 for this VRF
Run RIPv2 as the PE-CE protocol between R6 & SW2 and R3 & BB2
BB2 will be expecting RIPv2 packets to be MD5 authenticated with the
password CISCO
R2 and R4s interfaces in VLAN 100 should participate in VRF SW1-BB1
R2 and R4s interfaces in VLAN 200 should participate in VRF SW2-BB2
Configure BGP on R2, R3, R4, and R6 per the diagram
R2 and R3 should peer via iBGP in AS 1 using their Loopback interfaces
R4 and R6 should peer via iBGP in AS 2 using their Loopback interfaces
R2 and R4 should peer via EBGP twice, once for VRF SW1-BB1 and
once for VRF SW2-BB2
Redistribute where necessary to gain connectivity within the VPNs

Copyright 2010 Internetwork Expert


- 131 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
tag-switching ip
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip vrf forwarding SW1-BB1
ip address 150.1.100.2 255.255.255.0
!
interface FastEthernet0/0.200
encapsulation dot1Q 200
ip vrf forwarding SW2-BB2
ip address 150.1.200.2 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert


- 132 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.12.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 201
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
neighbor 150.1.200.4 remote-as 2
neighbor 150.1.200.4 activate
exit-address-family
!
address-family ipv4 vrf SW1-BB1
neighbor 150.1.100.4 remote-as 2
neighbor 150.1.100.4 activate
exit-address-family
R3#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding SW1-BB1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding SW2-BB2
ip address 192.10.8.3 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP

Copyright 2010 Internetwork Expert


- 133 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf SW2-BB2
redistribute bgp 1 metric 1
network 192.10.8.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute bgp 1 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.2.2 remote-as 1
neighbor 150.1.2.2 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.2.2 activate
neighbor 150.1.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export
route-target import
!
ip vrf SW2-BB2
rd 1:200
route-target export
route-target import
!
!

1:100
1:100

1:200
1:200

Copyright 2010 Internetwork Expert


- 134 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
interface Ethernet0/0.100
encapsulation dot1Q 100
ip vrf forwarding SW1-BB1
ip address 150.1.100.4 255.255.255.0
!
interface Ethernet0/0.200
encapsulation dot1Q 200
ip vrf forwarding SW2-BB2
ip address 150.1.200.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 405
!
router isis
net 00.0000.0000.0004.00
is-type level-2-only
!
router bgp 2
neighbor 150.1.6.6 remote-as 2
neighbor 150.1.6.6 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
neighbor 150.1.200.2 remote-as 1
neighbor 150.1.200.2 activate
exit-address-family
!
address-family ipv4 vrf SW1-BB1
neighbor 150.1.100.2 remote-as 1
neighbor 150.1.100.2 activate
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip router isis
tag-switching ip

Copyright 2010 Internetwork Expert


- 135 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 504
!
router isis
net 00.0000.0000.0005.00
is-type level-2-only
R6#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0/0
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip vrf forwarding SW1-BB1
ip address 54.8.1.6 255.255.255.0
frame-relay interface-dlci 101
!
interface GigabitEthernet0/1
ip vrf forwarding SW2-BB2
ip address 10.1.68.6 255.255.255.0
!
router isis
net 00.0000.0000.0006.00
is-type level-2-only
!

Copyright 2010 Internetwork Expert


- 136 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
!
address-family ipv4 vrf SW2-BB2
redistribute bgp 2 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute bgp 2 metric 1
network 54.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 2
neighbor 150.1.4.4 remote-as 2
neighbor 150.1.4.4 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
SW1#
ip routing
vlan 100,200
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56

Copyright 2010 Internetwork Expert


- 137 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
switchport access vlan 32
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
interface FastEthernet0/24
switchport access vlan 32
!
router rip
version 2
network 10.0.0.0
no auto-summary

Verification
SW1#show ip route
<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
R
54.8.1.0 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.1.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.0.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.3.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
10.0.0.0/24 is subnetted, 2 subnets
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3
R
212.18.2.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
SW1#ping 212.18.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 212.18.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 116/116/116 ms

Copyright 2010 Internetwork Expert


- 138 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#show ip route
<output omitted>
R
222.22.2.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
R
220.20.3.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
R
192.10.8.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
10.0.0.0/24 is subnetted, 2 subnets
C
10.1.8.0 is directly connected, Loopback0
C
10.1.68.0 is directly connected, FastEthernet0/6
R
205.90.31.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
SW2#ping 222.22.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 222.22.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 96/99/100 ms

R2#show ip bgp vpnv4 all


BGP table version is 35, local router ID is 150.1.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 54.8.1.0/24
150.1.100.4
0 2 ?
*> 212.18.0.0
150.1.100.4
0 2 ?
*> 212.18.1.0
150.1.100.4
0 2 ?
*> 212.18.2.0
150.1.100.4
0 2 ?
*> 212.18.3.0
150.1.100.4
0 2 ?
Route Distinguisher: 1:200 (default for vrf SW2-BB2)
*> 10.1.8.0/24
150.1.200.4
0 2 ?
*> 10.1.68.0/24
150.1.200.4
0 2 ?
*>i192.10.8.0
150.1.3.3
0
100
0 ?
*>i205.90.31.0
150.1.3.3
7
100
0 ?
*>i220.20.3.0
150.1.3.3
7
100
0 ?
*>i222.22.2.0
150.1.3.3
7
100
0 ?
R3#show ip bgp vpnv4 all
BGP table version is 27, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i54.8.1.0/24
150.1.2.2
0
100
0 2 ?
*>i212.18.0.0
150.1.2.2
0
100
0 2 ?
*>i212.18.1.0
150.1.2.2
0
100
0 2 ?
*>i212.18.2.0
150.1.2.2
0
100
0 2 ?
*>i212.18.3.0
150.1.2.2
0
100
0 2 ?

Copyright 2010 Internetwork Expert


- 139 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Route Distinguisher: 1:200 (default for vrf SW2-BB2)


*>i10.1.8.0/24
150.1.2.2
0
100
*>i10.1.68.0/24
150.1.2.2
0
100
*> 192.10.8.0
0.0.0.0
0
*> 205.90.31.0
192.10.8.254
7
*> 220.20.3.0
192.10.8.254
7
*> 222.22.2.0
192.10.8.254
7

0
0
32768
32768
32768
32768

2 ?
2 ?
?
?
?
?

R4#show ip bgp vpnv4 all


BGP table version is 27, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*> 10.1.7.0/24
150.1.100.2
0 1 ?
*> 10.1.37.0/24
150.1.100.2
0 1 ?
*>i54.8.1.0/24
150.1.6.6
0
100
0 ?
*>i212.18.0.0
150.1.6.6
1
100
0 ?
*>i212.18.1.0
150.1.6.6
1
100
0 ?
*>i212.18.2.0
150.1.6.6
1
100
0 ?
*>i212.18.3.0
150.1.6.6
1
100
0 ?
Route Distinguisher: 1:200 (default for vrf SW2-BB2)
*>i10.1.8.0/24
150.1.6.6
1
100
0 ?
*>i10.1.68.0/24
150.1.6.6
0
100
0 ?
*> 192.10.8.0
150.1.200.2
0 1 ?
*> 205.90.31.0
150.1.200.2
0 1 ?
*> 220.20.3.0
150.1.200.2
0 1 ?
*> 222.22.2.0
150.1.200.2
0 1 ?
R6#show ip bgp vpnv4 all
BGP table version is 27, local router ID is 150.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*>i10.1.7.0/24
150.1.4.4
0
100
0 1 ?
*>i10.1.37.0/24
150.1.4.4
0
100
0 1 ?
*> 54.8.1.0/24
0.0.0.0
0
32768 ?
*> 212.18.0.0
54.8.1.254
1
32768 ?
*> 212.18.1.0
54.8.1.254
1
32768 ?
*> 212.18.2.0
54.8.1.254
1
32768 ?
*> 212.18.3.0
54.8.1.254
1
32768 ?
Route Distinguisher: 1:200 (default for vrf SW2-BB2)
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*>i192.10.8.0
150.1.4.4
0
100
0 1 ?
*>i205.90.31.0
150.1.4.4
0
100
0 1 ?
*>i220.20.3.0
150.1.4.4
0
100
0 1 ?
*>i222.22.2.0
150.1.4.4
0
100
0 1 ?

Copyright 2010 Internetwork Expert


- 140 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R1#show mpls forwarding-table


Local
tag
16
17

Outgoing
tag or VC
Pop tag
Pop tag

Prefix
or Tunnel Id
150.1.2.2/32
150.1.3.3/32

Bytes tag
switched
12038
11806

Outgoing
interface
Se0/0.1
Se0/1

Next Hop

Bytes tag
switched
0
0
0
472
0
0
0
0
0
590

Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Fa0/0.200
Fa0/0.200
Fa0/0.100
Fa0/0.100
Fa0/0.100
Fa0/0.100
Fa0/0.100

Next Hop

Bytes tag
switched
0
0
0
0
520
0
0
0
570

Outgoing
interface
Se1/2
Se1/2
Se1/2
Et0/0

Next Hop

Et0/1
Et0/1
Et0/1

192.10.8.254
192.10.8.254
192.10.8.254

Bytes tag
switched
0
0
0
0
0
590
0
0
590

Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.100
Et0/0.100

Next Hop

point2point
point2point

R2#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24
25

Outgoing
tag or VC
Pop tag
Pop tag
17
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged

Prefix
or Tunnel Id
150.1.1.1/32
150.1.13.0/24
150.1.3.3/32
10.1.68.0/24[V]
10.1.8.0/24[V]
54.8.1.0/24[V]
212.18.3.0/24[V]
212.18.2.0/24[V]
212.18.1.0/24[V]
212.18.0.0/24[V]

point2point
point2point
point2point
150.1.200.4
150.1.200.4
150.1.100.4
150.1.100.4
150.1.100.4
150.1.100.4
150.1.100.4

R3#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
16
Pop tag
Untagged
Aggregate
Aggregate
Untagged
Untagged
Untagged

Prefix
or Tunnel Id
150.1.1.1/32
150.1.2.2/32
150.1.12.0/24
10.1.7.0/24[V]
10.1.37.0/24[V]
192.10.8.0/24[V]
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]

point2point
point2point
point2point
10.1.37.7

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
16
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged

Prefix
or Tunnel Id
150.1.56.0/24
150.1.6.6/32
150.1.5.5/32
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
192.10.8.0/24[V]
10.1.7.0/24[V]
10.1.37.0/24[V]

Copyright 2010 Internetwork Expert


- 141 -

point2point
point2point
point2point
150.1.200.2
150.1.200.2
150.1.200.2
150.1.200.2
150.1.100.2
150.1.100.2

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
16
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged

Prefix
or Tunnel Id
150.1.56.0/24
150.1.6.6/32
150.1.5.5/32
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
192.10.8.0/24[V]
10.1.7.0/24[V]
10.1.37.0/24[V]

Bytes tag
switched
0
0
0
0
0
590
0
0
590

Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.100
Et0/0.100

Next Hop

Bytes tag
switched
0
0
0
0
0
520
0
0
0
416

Outgoing
interface
Et0/0
Et0/0
Et0/0

Next Hop

Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Gig0/1

point2point
point2point
point2point
point2point
10.1.68.8

point2point
point2point
point2point
150.1.200.2
150.1.200.2
150.1.200.2
150.1.200.2
150.1.100.2
150.1.100.2

R6#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24
25

Outgoing
tag or VC
Pop tag
Pop tag
17
Aggregate
Untagged
Untagged
Untagged
Untagged
Untagged
Aggregate

Prefix
or Tunnel Id
150.1.45.0/24
150.1.5.5/32
150.1.4.4/32
54.8.1.0/24[V]
212.18.1.0/24[V]
212.18.0.0/24[V]
212.18.3.0/24[V]
212.18.2.0/24[V]
10.1.8.0/24[V]
10.1.68.0/24[V]

Copyright 2010 Internetwork Expert


- 142 -

150.1.56.5
150.1.56.5
150.1.56.5

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 143 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Inter-AS MPLS VPNs with MP-eBGP for VPNv4 Exchange


Objective: Provide VPN transit between SW1 & BB1 and SW2 & BB2 using MPeBGP VPNv4 exchange between R2 and R4.
Fa0/3

.254

SW1

.7

RIPv2

RIPv2

E0/0

E0/1
R3

.3

10.1.37.0/24

192.10.X.0/24 VLAN 32

BB2

.3

.3

S1/2

BGP
AS 1

S0/1

150.1.13.0/24

.1

OSPF 150.1.12.0/24
Area 0 Frame Relay

R1
.1

S0/0.1

102
201

.2

S0/0.1
R2
Fa0/0

.2

E0/0

.4

150.1.24.0/24 VLAN 24

150.1.45.0/24

R4
S0/0.1

Frame Relay

.4

BGP
AS 2

405

504

.5

S0/0.1

IS-IS Level 2

R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1

RIPv2
Fa0/6

SW2

10.1.68.0/24

.6

S0/0/0.1
R6

.8

.6

54.X.1.0/24

Frame Relay
101
.254

RIPv2
BB1

Copyright 2010 Internetwork Expert


- 144 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIP
Configure OSPF area 0 on the interfaces between R1, R2, and R3
Configure MPLS on the interfaces between R1, R2, and R3
Create the Loopback 150.1.1.1/32 on R1 and advertise it into OSPF
Create the Loopback 150.1.2.2/32 on R2 and advertise it into OSPF
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Configure IS-IS Level-2 routing on the interfaces between R4, R5, and R6
Use NET addresses in the format 00.0000.0000.000Y.00
Configure MPLS on the interfaces between R4, R5, and R6
Create the Loopback 150.1.4.4/32 on R4 and advertise it into IS-IS
Create the Loopback 150.1.5.5/32 on R5 and advertise it into IS-IS
Create the Loopback 150.1.6.6/32 on R6 and advertise it into IS-IS
SW1 and BB1 should be in VRF SW1-BB1
Use the route distinguisher and route target 1:100 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R6 & BB1
SW2 and BB2 should be in VRF SW2-BB2
Use the route distinguisher and route target 1:200 for this VRF
Run RIPv2 as the PE-CE protocol between R6 & SW2 and R3 & BB2
BB2 will be expecting RIPv2 packets to be MD5 authenticated with the
password CISCO
Configure BGP on R2, R3, R4, and R6 per the diagram
R2 and R3 should peer via iBGP in AS 1 using their Loopback interfaces
R4 and R6 should peer via iBGP in AS 2 using their Loopback interfaces
R2 and R4 should peer via MP-EBGP and exchange VPNv4 routes
Perform next-hop modification where necessary so that AS 1 and AS 2 do
not need to exchange information about their internal topology
Redistribute where necessary to gain connectivity within the VPNs

Copyright 2010 Internetwork Expert


- 145 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
tag-switching ip
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 201
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 1
no bgp default route-target filter
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.24.4 remote-as 2
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 next-hop-self
neighbor 150.1.3.3 send-community extended

Copyright 2010 Internetwork Expert


- 146 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

neighbor 150.1.24.4 activate


neighbor 150.1.24.4 send-community extended
exit-address-family
R3#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding SW1-BB1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding SW2-BB2
ip address 192.10.1.3 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf SW2-BB2
redistribute bgp 1 metric 1
network 192.10.1.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute bgp 1 metric 1
network 10.0.0.0
no auto-summary
version 2

Copyright 2010 Internetwork Expert


- 147 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

exit-address-family
!
router bgp 1
neighbor 150.1.2.2 remote-as 1
neighbor 150.1.2.2 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.2.2 activate
neighbor 150.1.2.2 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
R4#
ip cef
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 405
!
router isis
net 00.0000.0000.0004.00
is-type level-2-only
!
router bgp 2
no bgp default route-target filter
neighbor 150.1.6.6 remote-as 2
neighbor 150.1.6.6 update-source Loopback0
neighbor 150.1.24.2 remote-as 1
!
address-family vpnv4
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 send-community extended
neighbor 150.1.6.6 next-hop-self
neighbor 150.1.24.2 activate
neighbor 150.1.24.2 send-community extended
exit-address-family

Copyright 2010 Internetwork Expert


- 148 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 504
!
router isis
net 00.0000.0000.0005.00
is-type level-2-only
R6#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0/0
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip vrf forwarding SW1-BB1
ip address 54.1.1.6 255.255.255.0
frame-relay interface-dlci 101
!

Copyright 2010 Internetwork Expert


- 149 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface GigabitEthernet0/1
ip vrf forwarding SW2-BB2
ip address 10.1.68.6 255.255.255.0
!
router isis
net 00.0000.0000.0006.00
is-type level-2-only
!
router rip
!
address-family ipv4 vrf SW2-BB2
redistribute bgp 2 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute bgp 2 metric 1
network 54.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 2
neighbor 150.1.4.4 remote-as 2
neighbor 150.1.4.4 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!

Copyright 2010 Internetwork Expert


- 150 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
switchport access vlan 32
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
interface FastEthernet0/24
switchport access vlan 32
!
router rip
version 2
network 10.0.0.0
no auto-summary

Verification
SW1#show ip route
<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
R
54.8.1.0 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.1.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.0.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.3.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
10.0.0.0/24 is subnetted, 2 subnets
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3
R
212.18.2.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
SW1#ping 212.18.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 212.18.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 116/116/116 ms

Copyright 2010 Internetwork Expert


- 151 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#show ip route
<output omitted>
R
222.22.2.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
R
220.20.3.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
R
192.10.8.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
10.0.0.0/24 is subnetted, 2 subnets
C
10.1.8.0 is directly connected, Loopback0
C
10.1.68.0 is directly connected, FastEthernet0/6
R
205.90.31.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
SW2#ping 222.22.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 222.22.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 96/99/100 ms

R2#show ip bgp vpnv4 all


BGP table version is 53, local router ID is 150.1.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Route Distinguisher: 1:100
*>i10.1.7.0/24
150.1.3.3
*>i10.1.37.0/24
150.1.3.3
*> 54.8.1.0/24
150.1.24.4
*> 212.18.0.0
150.1.24.4
*> 212.18.1.0
150.1.24.4
*> 212.18.2.0
150.1.24.4
*> 212.18.3.0
150.1.24.4
Route Distinguisher: 1:200
*> 10.1.8.0/24
150.1.24.4
*> 10.1.68.0/24
150.1.24.4
*>i192.10.8.0
150.1.3.3
*>i205.90.31.0
150.1.3.3
*>i220.20.3.0
150.1.3.3
*>i222.22.2.0
150.1.3.3

Metric LocPrf Weight Path


1
0

0
7
7
7

100
100

100
100
100
100

0
0
0
0
0
0
0

?
?
2
2
2
2
2

0
0
0
0
0
0

2 ?
2 ?
?
?
?
?

?
?
?
?
?

R3#show ip bgp vpnv4 all


BGP table version is 27, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i54.8.1.0/24
150.1.2.2
0
100
0 2 ?
*>i212.18.0.0
150.1.2.2
0
100
0 2 ?
*>i212.18.1.0
150.1.2.2
0
100
0 2 ?
*>i212.18.2.0
150.1.2.2
0
100
0 2 ?
*>i212.18.3.0
150.1.2.2
0
100
0 2 ?

Copyright 2010 Internetwork Expert


- 152 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Route Distinguisher: 1:200 (default for vrf SW2-BB2)


*>i10.1.8.0/24
150.1.2.2
0
100
*>i10.1.68.0/24
150.1.2.2
0
100
*> 192.10.8.0
0.0.0.0
0
*> 205.90.31.0
192.10.1.254
7
*> 220.20.3.0
192.10.1.254
7
*> 222.22.2.0
192.10.1.254
7

0
0
32768
32768
32768
32768

2 ?
2 ?
?
?
?
?

R4#show ip bgp vpnv4 all


BGP table version is 27, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Route Distinguisher: 1:100
*> 10.1.7.0/24
150.1.24.2
*> 10.1.37.0/24
150.1.24.2
*>i54.8.1.0/24
150.1.6.6
*>i212.18.0.0
150.1.6.6
*>i212.18.1.0
150.1.6.6
*>i212.18.2.0
150.1.6.6
*>i212.18.3.0
150.1.6.6
Route Distinguisher: 1:200
*>i10.1.8.0/24
150.1.6.6
*>i10.1.68.0/24
150.1.6.6
*> 192.10.8.0
150.1.24.2
*> 205.90.31.0
150.1.24.2
*> 220.20.3.0
150.1.24.2
*> 222.22.2.0
150.1.24.2

Metric LocPrf Weight Path

0
1
1
1
1

100
100
100
100
100

1
0

100
100

0
0
0
0
0
0
0

1 ?
1 ?
?
?
?
?
?

0
0
0
0
0
0

?
?
1
1
1
1

?
?
?
?

R6#show ip bgp vpnv4 all


BGP table version is 27, local router ID is 150.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*>i10.1.7.0/24
150.1.4.4
0
100
0 1 ?
*>i10.1.37.0/24
150.1.4.4
0
100
0 1 ?
*> 54.8.1.0/24
0.0.0.0
0
32768 ?
*> 212.18.0.0
54.1.1.254
1
32768 ?
*> 212.18.1.0
54.1.1.254
1
32768 ?
*> 212.18.2.0
54.1.1.254
1
32768 ?
*> 212.18.3.0
54.1.1.254
1
32768 ?
Route Distinguisher: 1:200 (default for vrf SW2-BB2)
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*>i192.10.8.0
150.1.4.4
0
100
0 1 ?
*>i205.90.31.0
150.1.4.4
0
100
0 1 ?
*>i220.20.3.0
150.1.4.4
0
100
0 1 ?
*>i222.22.2.0
150.1.4.4
0
100
0 1 ?

Copyright 2010 Internetwork Expert


- 153 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R1#show mpls forwarding-table


Local
tag
16
17

Outgoing
tag or VC
Pop tag
Pop tag

Prefix
or Tunnel Id
150.1.2.2/32
150.1.3.3/32

Bytes tag
switched
12038
11806

Outgoing
interface
Se0/0.1
Se0/1

Next Hop

Prefix
Bytes tag
or Tunnel Id
switched
150.1.24.4/32
0
150.1.1.1/32
0
150.1.3.3/32
0
150.1.13.0/24
0
1:200:205.90.31.0/24
\
0
1:100:10.1.7.0/24
\
0
1:100:10.1.37.0/24
\
560
1:200:192.10.1.0/24
\
0
1:100:54.1.1.0/24
\
0
1:100:212.18.0.0/24
\
590
1:100:212.18.1.0/24
\
0
1:100:212.18.2.0/24
\
0
1:100:212.18.3.0/24
\
0
1:200:10.1.8.0/24
\
0
1:200:10.1.68.0/24
\
472
1:200:220.20.3.0/24
\
0
1:200:222.22.2.0/24
\
560

Outgoing
interface
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Se0/0.1

point2point

Se0/0.1

point2point

Se0/0.1

point2point

Se0/0.1

point2point

Fa0/0

150.1.24.4

Fa0/0

150.1.24.4

Fa0/0

150.1.24.4

Fa0/0

150.1.24.4

Fa0/0

150.1.24.4

Fa0/0

150.1.24.4

Fa0/0

150.1.24.4

Se0/0.1

point2point

Se0/0.1

point2point

Outgoing
interface
Se1/2
Se1/2
Se1/2
Et0/0

Next Hop

Et0/1
Et0/1
Et0/1

192.10.1.254
192.10.1.254
192.10.1.254

point2point
point2point

R2#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Pop tag
Pop tag
16
Pop tag
16

21

16

22

16

23

16

24

24

25

25

26

26

27

27

28

28

29

30

30

29

31

16

32

16

150.1.24.4
point2point
point2point
point2point

R3#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
Pop tag
17
Untagged
Aggregate
Aggregate
Untagged
Untagged
Untagged

Prefix
or Tunnel Id
150.1.1.1/32
150.1.12.0/24
150.1.2.2/32
10.1.7.0/24[V]
10.1.37.0/24[V]
192.10.1.0/24[V]
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]

Bytes tag
switched
0
0
0
0
520
0
0
0
570

Copyright 2010 Internetwork Expert


- 154 -

point2point
point2point
point2point
10.1.37.7

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
16
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged

Prefix
or Tunnel Id
150.1.56.0/24
150.1.6.6/32
150.1.5.5/32
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]
192.10.8.0/24[V]
10.1.7.0/24[V]
10.1.37.0/24[V]

Bytes tag
switched
0
0
0
0
0
590
0
0
590

Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.200
Et0/0.100
Et0/0.100

Next Hop

Prefix
Bytes tag
or Tunnel Id
switched
150.1.24.2/32
0
150.1.5.5/32
0
150.1.6.6/32
0
150.1.56.0/24
0
1:200:222.22.2.0/24
\
590
1:100:10.1.37.0/24
\
590
1:100:10.1.7.0/24
\
0
1:200:192.10.1.0/24
\
0
1:100:54.1.1.0/24
\
0
1:100:212.18.0.0/24
\
560
1:100:212.18.1.0/24
\
0
1:100:212.18.2.0/24
\
0
1:100:212.18.3.0/24
\
0
1:200:10.1.68.0/24
\
448
1:200:10.1.8.0/24
\
0
1:200:220.20.3.0/24
\
0
1:200:205.90.31.0/24
\
0

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Et0/0

150.1.24.2

Et0/0

150.1.24.2

Et0/0

150.1.24.2

Et0/0

150.1.24.2

Se0/0.1

point2point

Se0/0.1

point2point

Se0/0.1

point2point

Se0/0.1

point2point

Se0/0.1

point2point

Se0/0.1

point2point

Se0/0.1

point2point

Et0/0

150.1.24.2

Et0/0

150.1.24.2

Outgoing
interface
Et0/0
Se0/0.1

Next Hop

point2point
point2point
point2point
150.1.200.2
150.1.200.2
150.1.200.2
150.1.200.2
150.1.100.2
150.1.100.2

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Pop tag
Pop tag
16
Pop tag
32

21

22

22

21

23

23

24

16

25

16

26

16

27

16

28

16

29

16

30

16

31

31

32

20

150.1.24.2
point2point
point2point
point2point

R5#show mpls forwarding-table


Local
tag
16
17

Outgoing
tag or VC
Pop tag
Pop tag

Prefix
or Tunnel Id
150.1.6.6/32
150.1.4.4/32

Bytes tag
switched
31257
2203

Copyright 2010 Internetwork Expert


- 155 -

150.1.56.6
point2point

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#show mpls forwarding-table


Local
tag
17
18
19
21
27
28
29
30
31
32

Outgoing
tag or VC
Pop tag
Aggregate
Pop tag
17
Untagged
Untagged
Untagged
Untagged
Untagged
Aggregate

Prefix
or Tunnel Id
150.1.5.5/32
54.1.1.0/24[V]
150.1.45.0/24
150.1.4.4/32
212.18.0.0/24[V]
212.18.1.0/24[V]
212.18.2.0/24[V]
212.18.3.0/24[V]
10.1.8.0/24[V]
10.1.68.0/24[V]

Bytes tag
switched
0
0
0
0
520
0
0
0
0
416

Copyright 2010 Internetwork Expert


- 156 -

Outgoing
interface
Gi0/0

Next Hop

Gi0/0
Gi0/0
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Gi0/1

150.1.56.5
150.1.56.5
point2point
point2point
point2point
point2point
10.1.68.8

150.1.56.5

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 157 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Inter-AS MPLS VPNs with Multihop MP-eBGP for VPNv4 Exchange


Objective: Provide VPN transit between SW1 & BB1 and SW2 & BB2 using
multihop MP-eBGP VPNv4 exchange between R3 and R6.

Fa0/3

.254

BB2

SW1

.7

RIPv2

RIPv2

E0/0

E0/1
R3

.3

.3

.3

S1/2

BGP
AS 1

S0/1

150.1.13.0/24

.1

OSPF 150.1.12.0/24
Area 0 Frame Relay

.1

S0/0.1

102

201

.2

R1

S0/0.1
R2
Fa0/0

.2

E0/0

.4

150.1.24.0/24 VLAN 24

150.1.45.0/24

R4
S0/0.1

.4

BGP
AS 2

Frame Relay
405
504

.5

S0/0.1

IS-IS Level 2

R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1
.6

S0/0/0.1
R6

RIPv2

.6

54.X.1.0/24

Frame Relay
101

Fa0/6
SW2

.8

.254

RIPv2
BB1

Copyright 2010 Internetwork Expert


- 158 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIP
Configure OSPF area 0 on the interfaces between R1, R2, and R3
Configure MPLS on the interfaces between R1, R2, and R3
Create the Loopback 150.1.1.1/32 on R1 and advertise it into OSPF
Create the Loopback 150.1.2.2/32 on R2 and advertise it into OSPF
Create the Loopback 150.1.3.3/32 on R3 and advertise it into OSPF
Configure IS-IS Level-2 routing on the interfaces between R4, R5, and R6
Use NET addresses in the format 00.0000.0000.000Y.00
Configure MPLS on the interfaces between R4, R5, and R6
Create the Loopback 150.1.4.4/32 on R4 and advertise it into IS-IS
Create the Loopback 150.1.5.5/32 on R5 and advertise it into IS-IS
Create the Loopback 150.1.6.6/32 on R6 and advertise it into IS-IS
SW1 and BB1 should be in VRF SW1-BB1
Use the route distinguisher and route target 1:100 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R6 & BB1
SW2 and BB2 should be in VRF SW2-BB2
Use the route distinguisher and route target 1:200 for this VRF
Run RIPv2 as the PE-CE protocol between R6 & SW2 and R3 & BB2
BB2 will be expecting RIPv2 packets to be MD5 authenticated with the
password CISCO
Configure BGP on R2, R3, R4, and R6 per the diagram
Advertise R3s Loopback into BGP on R2
Advertise R6s Loopback into BGP on R4
R2 and R4 should peer via EBGP to exchange R2 and R4s IPv4
Loopbacks and their associated MPLS labels
Configure R2 to advertise R6s Loopback into IS-IS
Configure R4 to advertise R3s Loopback into OSPF
R3 and R6 should peer via their loopbacks with MP-EBGP and exchange
VPNv4 routes
Redistribute where necessary to gain connectivity within the VPNs

Copyright 2010 Internetwork Expert


- 159 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
tag-switching ip
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 201
!
router ospf 1
redistribute bgp 1 subnets route-map BGP_TO_IGP
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.24.4 remote-as 2
neighbor 150.1.24.4 send-label
network 150.1.3.3 mask 255.255.255.255
!
ip prefix-list R6_LOOPBACK seq 5 permit 150.1.6.6/32
!
route-map BGP_TO_IGP permit 10
match ip address prefix-list R6_LOOPBACK

Copyright 2010 Internetwork Expert


- 160 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding SW1-BB1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding SW2-BB2
ip address 192.10.1.3 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf SW2-BB2
redistribute bgp 1 metric 1
network 192.10.1.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute bgp 1 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!

Copyright 2010 Internetwork Expert


- 161 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 1
neighbor 150.1.6.6 remote-as 2
neighbor 150.1.6.6 ebgp-multihop 255
neighbor 150.1.6.6 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
R4#
ip cef
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 405
!
router isis
net 00.0000.0000.0004.00
is-type level-2-only
redistribute bgp 2 route-map BGP_TO_IGP
!
router bgp 2
network 150.1.6.6 mask 255.255.255.255
neighbor 150.1.24.2 remote-as 1
neighbor 150.1.24.2 send-label
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!

Copyright 2010 Internetwork Expert


- 162 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 504
!
router isis
net 00.0000.0000.0005.00
is-type level-2-only
R6#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0/0
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip vrf forwarding SW1-BB1
ip address 54.1.1.6 255.255.255.0
frame-relay interface-dlci 101
!
interface GigabitEthernet0/1
ip vrf forwarding SW2-BB2
ip address 10.1.68.6 255.255.255.0
!
router isis
net 00.0000.0000.0006.00
is-type level-2-only
!

Copyright 2010 Internetwork Expert


- 163 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
!
address-family ipv4 vrf SW2-BB2
redistribute bgp 2 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute bgp 2 metric 1
network 54.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 2
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 ebgp-multihop 255
neighbor 150.1.3.3 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!

Copyright 2010 Internetwork Expert


- 164 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
switchport access vlan 32
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
interface FastEthernet0/24
switchport access vlan 32
!
router rip
version 2
network 10.0.0.0
no auto-summary

Verification
SW1#show ip route
<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
R
54.8.1.0 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.1.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.0.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
R
212.18.3.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
10.0.0.0/24 is subnetted, 2 subnets
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3
R
212.18.2.0/24 [120/1] via 10.1.37.3, 00:00:04, FastEthernet0/3
SW1#ping 212.18.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 212.18.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 116/116/116 ms

Copyright 2010 Internetwork Expert


- 165 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#show ip route
<output omitted>
R
222.22.2.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
R
220.20.3.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
R
192.10.8.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
10.0.0.0/24 is subnetted, 2 subnets
C
10.1.8.0 is directly connected, Loopback0
C
10.1.68.0 is directly connected, FastEthernet0/6
R
205.90.31.0/24 [120/1] via 10.1.68.6, 00:00:10, FastEthernet0/6
SW2#ping 222.22.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 222.22.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 96/99/100 ms

R2#show ip bgp
BGP table version is 8, local router ID is 150.1.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
*> 150.1.3.3/32
*> 150.1.6.6/32

Next Hop
150.1.12.1
150.1.24.4

Metric LocPrf Weight Path


129
32768 i
30
0 2 i

R4#show ip bgp
BGP table version is 10, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
*> 150.1.3.3/32
*> 150.1.6.6/32

Next Hop
150.1.24.2
150.1.45.5

Metric LocPrf Weight Path


129
0 1 i
30
32768 i

R3#show ip bgp vpnv4 all


BGP table version is 41, local router ID is 150.1.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*> 54.1.1.0/24
150.1.6.6
0
0 2 ?
*> 212.18.0.0
150.1.6.6
1
0 2 ?
*> 212.18.1.0
150.1.6.6
1
0 2 ?
*> 212.18.2.0
150.1.6.6
1
0 2 ?
*> 212.18.3.0
150.1.6.6
1
0 2 ?
Route Distinguisher: 1:200 (default for vrf SW2-BB2)
*> 10.1.8.0/24
150.1.6.6
1
0 2 ?
*> 10.1.68.0/24
150.1.6.6
0
0 2 ?

Copyright 2010 Internetwork Expert


- 166 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


*>
*>
*>
*>

192.10.1.0
205.90.31.0
220.20.3.0
222.22.2.0

0.0.0.0
192.10.1.254
192.10.1.254
192.10.1.254

Version 1.0
0
7
7
7

32768
32768
32768
32768

?
?
?
?

R6#show ip bgp vpnv4 all


BGP table version is 27, local router ID is 150.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*> 10.1.7.0/24
150.1.3.3
1
0 1 ?
*> 10.1.37.0/24
150.1.3.3
0
0 1 ?
*> 54.1.1.0/24
0.0.0.0
0
32768 ?
*> 212.18.0.0
54.1.1.254
1
32768 ?
*> 212.18.1.0
54.1.1.254
1
32768 ?
*> 212.18.2.0
54.1.1.254
1
32768 ?
*> 212.18.3.0
54.1.1.254
1
32768 ?
Route Distinguisher: 1:200 (default for vrf SW2-BB2)
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*> 192.10.1.0
150.1.3.3
0
0 1 ?
*> 205.90.31.0
150.1.3.3
7
0 1 ?
*> 220.20.3.0
150.1.3.3
7
0 1 ?
*> 222.22.2.0
150.1.3.3
7
0 1 ?
R1#show mpls forwarding-table
Local
tag
16
17
18

Outgoing
tag or VC
Pop tag
Pop tag
20

Prefix
or Tunnel Id
150.1.3.3/32
150.1.2.2/32
150.1.6.6/32

Bytes tag
switched
21915
16488
1836

Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
0
2148
0
2016

Outgoing
interface
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1
Fa0/0

Next Hop

Bytes tag
switched
0
0
0
0
0
520

Outgoing
interface
Se1/2
Se1/2
Se1/2
Se1/2
Et0/0

Next Hop

point2point
point2point
point2point

R2#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Pop tag
Pop tag
16
Pop tag
18

Prefix
or Tunnel Id
150.1.24.4/32
150.1.1.1/32
150.1.3.3/32
150.1.13.0/24
150.1.6.6/32

150.1.24.4
point2point
point2point
point2point
150.1.24.4

R3#show mpls forwarding-table


Local
tag
16
17
18
25
26
27

Outgoing
tag or VC
Pop tag
Pop tag
17
18
Untagged
Aggregate

Prefix
or Tunnel Id
150.1.1.1/32
150.1.12.0/24
150.1.2.2/32
150.1.6.6/32
10.1.7.0/24[V]
10.1.37.0/24[V]

Copyright 2010 Internetwork Expert


- 167 -

point2point
point2point
point2point
point2point
10.1.37.7

www.INE.com

CCIE Service Provider Lab Workbook Volume I


28
29
30
31

Aggregate
Untagged
Untagged
Untagged

192.10.1.0/24[V]
205.90.31.0/24[V]
220.20.3.0/24[V]
222.22.2.0/24[V]

Version 1.0

0
0
0
1140

Et0/1
Et0/1
Et0/1

192.10.1.254
192.10.1.254
192.10.1.254

Bytes tag
switched
0
0
1970
0
2652

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0

Next Hop

Bytes tag
switched
27056
16240
2382

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
0
0
0
0
520
0
0
0
0
936

Outgoing
interface
Gi0/0
Gi0/0
Gi0/0

Next Hop

Gi0/0
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Gi0/1

150.1.56.5
point2point
point2point
point2point
point2point
10.1.68.8

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Pop tag
Pop tag
16
Pop tag
18

Prefix
or Tunnel Id
150.1.24.2/32
150.1.5.5/32
150.1.6.6/32
150.1.56.0/24
150.1.3.3/32

150.1.24.2
point2point
point2point
point2point
150.1.24.2

R5#show mpls forwarding-table


Local
tag
16
17
18

Outgoing
tag or VC
Pop tag
Pop tag
20

Prefix
or Tunnel Id
150.1.6.6/32
150.1.4.4/32
150.1.3.3/32

150.1.56.6
point2point
point2point

R6#show mpls forwarding-table


Local
tag
16
17
19
20
21
22
23
24
25
26
33

Outgoing
tag or VC
18
Pop tag
Pop tag
Aggregate
17
Untagged
Untagged
Untagged
Untagged
Untagged
Aggregate

Prefix
or Tunnel Id
150.1.3.3/32
150.1.5.5/32
150.1.45.0/24
54.1.1.0/24[V]
150.1.4.4/32
212.18.0.0/24[V]
212.18.1.0/24[V]
212.18.2.0/24[V]
212.18.3.0/24[V]
10.1.8.0/24[V]
10.1.68.0/24[V]

Copyright 2010 Internetwork Expert


- 168 -

150.1.56.5
150.1.56.5
150.1.56.5

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 169 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Carrier Supporting Carrier IP Only Customer Carrier


Objective: Configure an MPLS Carrier Supporting Carrier architecture with AS 2
as the backbone carrier and AS 1 as the customer carrier to provide
transit between AS 65001 and AS 65002.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

BGP AS
65001

.3

.3

S1/2
S0/1

150.1.13.0/24

.1

BGP
AS 1
OSPF 150.1.12.0/24
Area 0 Frame Relay

R1
.1

S0/0.1

102
201

.2

S0/0.1
R2
Fa0/0

.2

BGP
AS 2 E0/0

150.1.24.0/24 VLAN 24
.4

OSPF
Area 0

R4
S0/0.1

Frame Relay

.4

405

504

.5

S0/0.1
150.1.45.0/24

OSPF
Area 0

R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0
G0/1

SW2

Fa0/6

10.1.68.0/24

.6

BGP AS
65002

.6

BGP
AS 1

R6

.8

Copyright 2010 Internetwork Expert


- 170 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the link between R2 and R4
Create the Loopback 150.1.2.2/32 on R2 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure MPLS on the interfaces between R2 and R4 and their
connections to AS 1
Create VRF AS1 on R2 and R4 using the route target and distinguisher
2:1
Apply this VRF to AS 2s connections to AS 1
Run OSPF as the PE-CE routing protocol between AS 2 and AS 1
Peer with iBGP between R2 and R4 to exchange VPNv4 prefixes
Configure Loopbacks on R1, R3, R5, and R6 in the format 150.1.Y.Y/32
Enable OSPF area 0 on all interfaces in the 150.1.0.0/16 network in AS 1
Enable MPLS on R1 and R5s connections to AS 1
Configure iBGP peerings between R1 & R3, R1 & R5, and R5 & R6
R1 should be a route-reflector for R3
R5 should be a route-reflector for R6
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into BGP
Configure EBGP peerings between R3 & SW1 and R6 & SW2
Redistribute where necessary to gain connectivity between AS 65001 and
AS 65002

Final Configuration
R1#
ip cef
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
tag-switching ip
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert


- 171 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 1
neighbor 150.1.5.5 remote-as 1
neighbor 150.1.5.5 update-source Loopback0
neighbor 150.1.13.3 remote-as 1
neighbor 150.1.13.3 route-reflector-client
R2#
ip vrf AS1
rd 2:1
route-target export 2:1
route-target import 2:1
!
ip cef
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip vrf forwarding AS1
ip address 150.1.12.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 201
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
!
router ospf 2 vrf AS1
redistribute bgp 2 subnets
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 2
neighbor 150.1.24.4 remote-as 2
!
address-family vpnv4
neighbor 150.1.24.4 activate
neighbor 150.1.24.4 send-community both
exit-address-family
!
address-family ipv4 vrf AS1
redistribute ospf 2
exit-address-family

Copyright 2010 Internetwork Expert


- 172 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#
ip cef
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.37.7 remote-as 65001
neighbor 150.1.13.1 remote-as 1
neighbor 150.1.13.1 next-hop-self
R4#
ip cef
!
ip vrf AS1
rd 2:1
route-target export 2:1
route-target import 2:1
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip vrf forwarding AS1
ip address 150.1.45.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 405
!
router ospf 2 vrf AS1
redistribute bgp 2 subnets
network 150.1.45.4 0.0.0.0 area 0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert


- 173 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 2
neighbor 150.1.24.2 remote-as 2
!
address-family vpnv4
neighbor 150.1.24.2 activate
neighbor 150.1.24.2 send-community both
exit-address-family
!
address-family ipv4 vrf AS1
redistribute ospf 2 vrf AS1
exit-address-family
R5#
ip cef
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
tag-switching ip
frame-relay interface-dlci 504
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
!
router bgp 1
neighbor 150.1.1.1 remote-as 1
neighbor 150.1.1.1 update-source Loopback0
neighbor 150.1.56.6 remote-as 1
neighbor 150.1.56.6 route-reflector-client
R6#
ip cef
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert


- 174 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 1
neighbor 10.1.68.8 remote-as 65002
neighbor 150.1.56.5 remote-as 1
neighbor 150.1.56.5 next-hop-self
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router bgp 65001
network 10.1.7.0 mask 255.255.255.0
neighbor 10.1.37.3 remote-as 1
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router bgp 65002
network 10.1.8.0 mask 255.255.255.0
neighbor 10.1.68.6 remote-as 1

Verification
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [20/0] via 10.1.37.3, 00:19:27
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3

Copyright 2010 Internetwork Expert


- 175 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
C
10.1.8.0 is directly connected, Loopback0
B
10.1.7.0 [20/0] via 10.1.68.6, 00:19:39
C
10.1.68.0 is directly connected, FastEthernet0/6
SW1#ping 10.1.8.8 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 144/144/144 ms

R1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 2 subnets
B
10.1.8.0 [200/0] via 150.1.56.6, 00:10:48
B
10.1.7.0 [200/0] via 150.1.13.3, 00:11:00
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O IA
150.1.6.6/32 [110/139] via 150.1.12.2, 00:13:23, Serial0/0.1
O IA
150.1.5.5/32 [110/129] via 150.1.12.2, 00:13:23, Serial0/0.1
O
150.1.3.3/32 [110/65] via 150.1.13.3, 00:13:23, Serial0/1
C
150.1.1.1/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial0/1
C
150.1.12.0/24 is directly connected, Serial0/0.1
O IA
150.1.56.0/24 [110/138] via 150.1.12.2, 00:13:23, Serial0/0.1
O IA
150.1.45.0/24 [110/65] via 150.1.12.2, 00:13:23, Serial0/0.1
R2#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C
150.1.24.0/24 is directly connected, FastEthernet0/0
O
150.1.4.4/32 [110/2] via 150.1.24.4, 00:42:18, FastEthernet0/0
C
150.1.2.2/32 is directly connected, Loopback0
Routing Table: AS1
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
B
150.1.6.6/32 [200/75] via 150.1.24.4, 00:36:18
B
150.1.5.5/32 [200/65] via 150.1.24.4, 00:36:18
O
150.1.3.3/32 [110/129] via 150.1.12.1, 00:35:19, Serial0/0.1
O
150.1.1.1/32 [110/65] via 150.1.12.1, 00:35:19, Serial0/0.1
O
150.1.13.0/24 [110/128] via 150.1.12.1, 00:35:19, Serial0/0.1
C
150.1.12.0/24 is directly connected, Serial0/0.1
B
150.1.56.0/24 [200/74] via 150.1.24.4, 00:36:18
B
150.1.45.0/24 [200/0] via 150.1.24.4, 00:36:18
R3#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [200/0] via 150.1.56.6, 00:11:38
B
10.1.7.0 [20/0] via 10.1.37.7, 00:14:29
C
10.1.37.0 is directly connected, Ethernet0/0
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O IA
150.1.6.6/32 [110/920] via 150.1.13.1, 00:35:47, Serial1/2

Copyright 2010 Internetwork Expert


- 176 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


O IA
C
O
C
O
O IA
O IA

Version 1.0

150.1.5.5/32 [110/910] via 150.1.13.1, 00:35:47, Serial1/2


150.1.3.3/32 is directly connected, Loopback0
150.1.1.1/32 [110/782] via 150.1.13.1, 00:35:47, Serial1/2
150.1.13.0/24 is directly connected, Serial1/2
150.1.12.0/24 [110/845] via 150.1.13.1, 00:35:47, Serial1/2
150.1.56.0/24 [110/919] via 150.1.13.1, 00:35:47, Serial1/2
150.1.45.0/24 [110/846] via 150.1.13.1, 00:35:47, Serial1/2

R4#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Ethernet0/0
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.2.2/32 [110/11] via 150.1.24.2, 00:46:17, Ethernet0/0
Routing Table: AS1
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O
150.1.6.6/32 [110/75] via 150.1.45.5, 00:39:38, Serial0/0.1
O
150.1.5.5/32 [110/65] via 150.1.45.5, 00:39:38, Serial0/0.1
B
150.1.3.3/32 [200/129] via 150.1.24.2, 00:38:20
B
150.1.1.1/32 [200/65] via 150.1.24.2, 00:38:20
B
150.1.13.0/24 [200/128] via 150.1.24.2, 00:38:20
B
150.1.12.0/24 [200/0] via 150.1.24.2, 00:38:20
O
150.1.56.0/24 [110/74] via 150.1.45.5, 00:39:38, Serial0/0.1
C
150.1.45.0/24 is directly connected, Serial0/0.1
R5#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 2 subnets
B
10.1.8.0 [200/0] via 150.1.56.6, 00:15:40
B
10.1.7.0 [200/0] via 150.1.13.3, 00:15:52
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O
150.1.6.6/32 [110/11] via 150.1.56.6, 00:40:17, Ethernet0/0
C
150.1.5.5/32 is directly connected, Loopback0
O E2
150.1.3.3/32 [110/129] via 150.1.45.4, 00:38:59, Serial0/0.1
O E2
150.1.1.1/32 [110/65] via 150.1.45.4, 00:38:59, Serial0/0.1
O E2
150.1.13.0/24 [110/128] via 150.1.45.4, 00:38:59, Serial0/0.1
O E2
150.1.12.0/24 [110/1] via 150.1.45.4, 00:38:59, Serial0/0.1
C
150.1.56.0/24 is directly connected, Ethernet0/0
C
150.1.45.0/24 is directly connected, Serial0/0.1
R6#show ip route
<output omitted>
B
B
C
C
O
O
O
O
O
C
O

E2
E2
E2
E2

10.0.0.0/24 is subnetted, 3 subnets


10.1.8.0 [20/0] via 10.1.68.8, 00:18:07
10.1.7.0 [200/0] via 150.1.13.3, 00:18:07
10.1.68.0 is directly connected, GigabitEthernet0/1
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
150.1.6.6/32 is directly connected, Loopback0
150.1.5.5/32 [110/2] via 150.1.56.5, 00:42:40, GigabitEthernet0/0
150.1.3.3/32 [110/129] via 150.1.56.5, 00:41:21, GigabitEthernet0/0
150.1.1.1/32 [110/65] via 150.1.56.5, 00:41:22, GigabitEthernet0/0
150.1.13.0/24 [110/128] via 150.1.56.5, 00:41:21, GigabitEthernet0/0
150.1.12.0/24 [110/1] via 150.1.56.5, 00:41:21, GigabitEthernet0/0
150.1.56.0/24 is directly connected, GigabitEthernet0/0
150.1.45.0/24 [110/65] via 150.1.56.5, 00:42:40, GigabitEthernet0/0

Copyright 2010 Internetwork Expert


- 177 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#show ip bgp vpnv4 all


<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 2:1 (default for vrf AS1)
*> 150.1.1.1/32
150.1.12.1
65
32768 ?
*> 150.1.3.3/32
150.1.12.1
129
32768 ?
*>i150.1.5.5/32
150.1.24.4
65
100
0 ?
*>i150.1.6.6/32
150.1.24.4
75
100
0 ?
*> 150.1.12.0/24
0.0.0.0
0
32768 ?
*> 150.1.13.0/24
150.1.12.1
128
32768 ?
*>i150.1.45.0/24
150.1.24.4
0
100
0 ?
*>i150.1.56.0/24
150.1.24.4
74
100
0 ?
R4#show ip bgp vpnv4 all
<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 2:1 (default for vrf AS1)
*>i150.1.1.1/32
150.1.24.2
65
100
0 ?
*>i150.1.3.3/32
150.1.24.2
129
100
0 ?
*> 150.1.5.5/32
150.1.45.5
65
32768 ?
*> 150.1.6.6/32
150.1.45.5
75
32768 ?
*>i150.1.12.0/24
150.1.24.2
0
100
0 ?
*>i150.1.13.0/24
150.1.24.2
128
100
0 ?
*> 150.1.45.0/24
0.0.0.0
0
32768 ?
*> 150.1.56.0/24
150.1.45.5
74
32768 ?
R1#show ip bgp
<output omitted>
Network
*>i10.1.7.0/24
*>i10.1.8.0/24

Next Hop
150.1.13.3
150.1.56.6

Metric LocPrf Weight Path


0
100
0 65001 i
0
100
0 65002 i

R3#show ip bgp
<output omitted>
Network
*> 10.1.7.0/24
*>i10.1.8.0/24

Next Hop
10.1.37.7
150.1.56.6

Metric LocPrf Weight Path


0
0 65001 i
0
100
0 65002 i

R5#show ip bgp
<output omitted>
Network
*>i10.1.7.0/24
*>i10.1.8.0/24

Next Hop
150.1.13.3
150.1.56.6

Metric LocPrf Weight Path


0
100
0 65001 i
0
100
0 65002 i

R6#show ip bgp
<output omitted>
Network
*>i10.1.7.0/24
*> 10.1.8.0/24

Next Hop
150.1.13.3
10.1.68.8

Metric LocPrf Weight Path


0
100
0 65001 i
0
0 65002 i

Copyright 2010 Internetwork Expert


- 178 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R1#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Untagged
20
19
18
17

Prefix
or Tunnel Id
150.1.3.3/32
150.1.5.5/32
150.1.6.6/32
150.1.45.0/24
150.1.56.0/24

Bytes tag
switched
520
0
0
0
0

Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
2006
0
590
2679
540
2192
1768
0

Outgoing
interface
Fa0/0
Fa0/0
Fa0/0
Fa0/0
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
540
2631
1768
0
3200
590
0
2006

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Et0/0
Et0/0
Et0/0
Et0/0

150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2

Bytes tag
switched
570
0
0
0
0

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

point2point
point2point
point2point
point2point
point2point

R2#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
19
20
17
18
16
Pop tag
Pop tag
Aggregate

Prefix
or Tunnel Id
150.1.4.4/32
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.3.3/32[V]
150.1.1.1/32[V]
150.1.13.0/24[V]
150.1.12.0/24[V]

150.1.24.4
150.1.24.4
150.1.24.4
150.1.24.4
150.1.24.4
point2point
point2point
point2point

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
16
Pop tag
Pop tag
Aggregate
22
21
24
23

Prefix
or Tunnel Id
150.1.2.2/32
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.1.1/32[V]
150.1.3.3/32[V]
150.1.12.0/24[V]
150.1.13.0/24[V]

150.1.24.2
point2point
point2point
point2point

R5#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Untagged
21
22
23
24

Prefix
or Tunnel Id
150.1.6.6/32
150.1.1.1/32
150.1.3.3/32
150.1.12.0/24
150.1.13.0/24

Copyright 2010 Internetwork Expert


- 179 -

150.1.56.6
point2point
point2point
point2point
point2point

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Carrier Supporting Carrier MPLS Enabled Customer Carrier


Objective: Configure an MPLS Carrier Supporting Carrier architecture with AS 2
as the backbone carrier and AS 1 as an MPLS enabled customer
carrier to provide transit between AS 65001 and AS 65002.
Fa0/3
SW1

.7
10.1.37.0/24

BGP
AS 1
E0/0
R3

BGP AS
65001

.3

.3

S1/2
S0/1

150.1.13.0/24

.1

OSPF 150.1.12.0/24
Area 0 Frame Relay

R1
.1

S0/0.1

102
201

.2

S0/0.1
R2
Fa0/0

.2

BGP
AS 2 E0/0

150.1.24.0/24 VLAN 24
.4

OSPF
Area 0

R4
S0/0.1

Frame Relay

.4

405

504

.5

S0/0.1
150.1.45.0/24

OSPF
Area 0

R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1

SW2

Fa0/6

10.1.68.0/24

.6

BGP AS
65002

R6

BGP
AS 1

.8

Copyright 2010 Internetwork Expert


- 180 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the link between R2 and R4
Create the Loopback 150.1.2.2/32 on R2 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure MPLS on the interfaces between R2 and R4 and their
connections to AS 1
Create VRF AS1 on R2 and R4 using the route target and distinguisher
2:1
Apply this VRF to AS 2s connections to AS 1
Run OSPF as the PE-CE routing protocol between AS 2 and AS 1
Peer with iBGP between R2 and R4 to exchange VPNv4 prefixes
Configure Loopbacks on R1, R3, R5, and R6 in the format 150.1.Y.Y/32
Enable OSPF area 0 on all interfaces in the 150.1.0.0/16 network on R1,
R3, R5, and R6
Enable MPLS on the links between R1 & R3, R5 & R6, and on R1 & R5s
connections to AS 1
Configure an iBGP peering between R3 and R6
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into BGP
Configure EBGP peerings between R3 & SW1 and R6 & SW2
Redistribute where necessary to gain connectivity between AS 65001 and
AS 65002

Final Configuration
R1#
ip cef
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
tag-switching ip
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!

Copyright 2010 Internetwork Expert


- 181 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip vrf AS1
rd 2:1
route-target export 2:1
route-target import 2:1
!
ip cef
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip vrf forwarding AS1
ip address 150.1.12.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 201
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
!
router ospf 2 vrf AS1
redistribute bgp 2 subnets
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 2
neighbor 150.1.24.4 remote-as 2
!
address-family vpnv4
neighbor 150.1.24.4 activate
neighbor 150.1.24.4 send-community both
exit-address-family
!
address-family ipv4 vrf AS1
redistribute ospf 2
exit-address-family
R3#
ip cef
!
mpls label protocol ldp

Copyright 2010 Internetwork Expert


- 182 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.37.7 remote-as 65001
neighbor 150.1.6.6 remote-as 1
neighbor 150.1.6.6 update-source Loopback0
neighbor 150.1.6.6 next-hop-self
R4#
ip cef
!
mpls label protocol ldp
!
ip vrf AS1
rd 2:1
route-target export 2:1
route-target import 2:1
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip vrf forwarding AS1
ip address 150.1.45.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 405
!
router ospf 2 vrf AS1
redistribute bgp 2 subnets
network 150.1.45.4 0.0.0.0 area 0
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert


- 183 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 2
neighbor 150.1.24.2 remote-as 2
!
address-family vpnv4
neighbor 150.1.24.2 activate
neighbor 150.1.24.2 send-community both
exit-address-family
!
address-family ipv4 vrf AS1
redistribute ospf 2 vrf AS1
exit-address-family
R5#
ip cef
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
tag-switching ip
frame-relay interface-dlci 504
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
R6#
ip cef
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
mpls ip
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
!
router ospf 1
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 184 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
router bgp 1
neighbor 10.1.68.8
neighbor 150.1.3.3
neighbor 150.1.3.3
neighbor 150.1.3.3

remote-as 65002
remote-as 1
update-source Loopback0
next-hop-self

SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router bgp 65001
network 10.1.7.0 mask 255.255.255.0
neighbor 10.1.37.3 remote-as 1
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router bgp 65002
network 10.1.8.0 mask 255.255.255.0
neighbor 10.1.68.6 remote-as 1

Verification
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [20/0] via 10.1.37.3, 00:02:44
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3

Copyright 2010 Internetwork Expert


- 185 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
C
10.1.8.0 is directly connected, Loopback0
B
10.1.7.0 [20/0] via 10.1.68.6, 00:02:56
C
10.1.68.0 is directly connected, FastEthernet0/6
SW1#ping 10.1.8.8 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 144/147/148 ms

R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O IA
150.1.6.6/32 [110/139] via 150.1.12.2, 00:02:04, Serial0/0.1
O IA
150.1.5.5/32 [110/129] via 150.1.12.2, 00:02:04, Serial0/0.1
O
150.1.3.3/32 [110/65] via 150.1.13.3, 00:02:04, Serial0/1
C
150.1.1.1/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial0/1
C
150.1.12.0/24 is directly connected, Serial0/0.1
O IA
150.1.56.0/24 [110/138] via 150.1.12.2, 00:02:04, Serial0/0.1
O IA
150.1.45.0/24 [110/65] via 150.1.12.2, 00:02:04, Serial0/0.1
R2#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C
150.1.24.0/24 is directly connected, FastEthernet0/0
O
150.1.4.4/32 [110/2] via 150.1.24.4, 03:13:36, FastEthernet0/0
C
150.1.2.2/32 is directly connected, Loopback0
Routing Table: AS1
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
B
150.1.6.6/32 [200/75] via 150.1.24.4, 03:07:36
B
150.1.5.5/32 [200/65] via 150.1.24.4, 03:07:36
O
150.1.3.3/32 [110/129] via 150.1.12.1, 03:06:37, Serial0/0.1
O
150.1.1.1/32 [110/65] via 150.1.12.1, 03:06:37, Serial0/0.1
O
150.1.13.0/24 [110/128] via 150.1.12.1, 03:06:37, Serial0/0.1
C
150.1.12.0/24 is directly connected, Serial0/0.1
B
150.1.56.0/24 [200/74] via 150.1.24.4, 03:07:36
B
150.1.45.0/24 [200/0] via 150.1.24.4, 03:07:36
R3#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [200/0] via 150.1.6.6, 00:01:31
B
10.1.7.0 [20/0] via 10.1.37.7, 02:45:41
C
10.1.37.0 is directly connected, Ethernet0/0
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O IA
150.1.6.6/32 [110/920] via 150.1.13.1, 03:06:59, Serial1/2
O IA
150.1.5.5/32 [110/910] via 150.1.13.1, 03:06:59, Serial1/2

Copyright 2010 Internetwork Expert


- 186 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


C
O
C
O
O IA
O IA

Version 1.0

150.1.3.3/32 is directly connected, Loopback0


150.1.1.1/32 [110/782] via 150.1.13.1, 03:06:59, Serial1/2
150.1.13.0/24 is directly connected, Serial1/2
150.1.12.0/24 [110/845] via 150.1.13.1, 03:06:59, Serial1/2
150.1.56.0/24 [110/919] via 150.1.13.1, 03:06:59, Serial1/2
150.1.45.0/24 [110/846] via 150.1.13.1, 03:06:59, Serial1/2

R4#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Ethernet0/0
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.2.2/32 [110/11] via 150.1.24.2, 03:14:23, Ethernet0/0
Routing Table: AS1
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O
150.1.6.6/32 [110/75] via 150.1.45.5, 03:07:44, Serial0/0.1
O
150.1.5.5/32 [110/65] via 150.1.45.5, 03:07:44, Serial0/0.1
B
150.1.3.3/32 [200/129] via 150.1.24.2, 03:06:26
B
150.1.1.1/32 [200/65] via 150.1.24.2, 03:06:26
B
150.1.13.0/24 [200/128] via 150.1.24.2, 03:06:26
B
150.1.12.0/24 [200/0] via 150.1.24.2, 03:06:26
O
150.1.56.0/24 [110/74] via 150.1.45.5, 03:07:44, Serial0/0.1
C
150.1.45.0/24 is directly connected, Serial0/0.1
R5#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O
150.1.6.6/32 [110/11] via 150.1.56.6, 00:03:23, Ethernet0/0
C
150.1.5.5/32 is directly connected, Loopback0
O E2
150.1.3.3/32 [110/129] via 150.1.45.4, 00:03:23, Serial0/0.1
O E2
150.1.1.1/32 [110/65] via 150.1.45.4, 00:03:23, Serial0/0.1
O E2
150.1.13.0/24 [110/128] via 150.1.45.4, 00:03:23, Serial0/0.1
O E2
150.1.12.0/24 [110/1] via 150.1.45.4, 00:03:23, Serial0/0.1
C
150.1.56.0/24 is directly connected, Ethernet0/0
C
150.1.45.0/24 is directly connected, Serial0/0.1
R6#show ip route
<output omitted>
B
B
C
C
O
O
O
O
O
C
O

E2
E2
E2
E2

10.0.0.0/24 is subnetted, 3 subnets


10.1.8.0 [20/0] via 10.1.68.8, 02:43:54
10.1.7.0 [200/0] via 150.1.3.3, 00:02:30
10.1.68.0 is directly connected, GigabitEthernet0/1
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
150.1.6.6/32 is directly connected, Loopback0
150.1.5.5/32 [110/2] via 150.1.56.5, 03:08:27, GigabitEthernet0/0
150.1.3.3/32 [110/129] via 150.1.56.5, 03:07:09, GigabitEthernet0/0
150.1.1.1/32 [110/65] via 150.1.56.5, 03:07:09, GigabitEthernet0/0
150.1.13.0/24 [110/128] via 150.1.56.5, 03:07:08, GigabitEthernet0/0
150.1.12.0/24 [110/1] via 150.1.56.5, 03:07:08, GigabitEthernet0/0
150.1.56.0/24 is directly connected, GigabitEthernet0/0
150.1.45.0/24 [110/65] via 150.1.56.5, 03:08:27, GigabitEthernet0/0

Copyright 2010 Internetwork Expert


- 187 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#show ip bgp vpnv4 all


<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 2:1 (default for vrf AS1)
*> 150.1.1.1/32
150.1.12.1
65
32768 ?
*> 150.1.3.3/32
150.1.12.1
129
32768 ?
*>i150.1.5.5/32
150.1.24.4
65
100
0 ?
*>i150.1.6.6/32
150.1.24.4
75
100
0 ?
*> 150.1.12.0/24
0.0.0.0
0
32768 ?
*> 150.1.13.0/24
150.1.12.1
128
32768 ?
*>i150.1.45.0/24
150.1.24.4
0
100
0 ?
*>i150.1.56.0/24
150.1.24.4
74
100
0 ?
R4#show ip bgp vpnv4 all
<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 2:1 (default for vrf AS1)
*>i150.1.1.1/32
150.1.24.2
65
100
0 ?
*>i150.1.3.3/32
150.1.24.2
129
100
0 ?
*> 150.1.5.5/32
150.1.45.5
65
32768 ?
*> 150.1.6.6/32
150.1.45.5
75
32768 ?
*>i150.1.12.0/24
150.1.24.2
0
100
0 ?
*>i150.1.13.0/24
150.1.24.2
128
100
0 ?
*> 150.1.45.0/24
0.0.0.0
0
32768 ?
*> 150.1.56.0/24
150.1.45.5
74
32768 ?
R3#show ip bgp
<output omitted>
Network
*> 10.1.7.0/24
*>i10.1.8.0/24

Next Hop
10.1.37.7
150.1.6.6

Metric LocPrf Weight Path


0
0 65001 i
0
100
0 65002 i

R6#show ip bgp
<output omitted>
Network
*>i10.1.7.0/24
*> 10.1.8.0/24

Next Hop
150.1.3.3
10.1.68.8

Metric LocPrf Weight Path


0
100
0 65001 i
0
0 65002 i

R1#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Pop tag
20
19
18
17

Prefix
or Tunnel Id
150.1.3.3/32
150.1.5.5/32
150.1.6.6/32
150.1.45.0/24
150.1.56.0/24

Bytes tag
switched
905
0
1041
0
0

Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
3186
0

Outgoing
interface
Fa0/0
Fa0/0
Fa0/0

Next Hop

point2point
point2point
point2point
point2point
point2point

R2#show mpls forwarding-table


Local
tag
16
17
18

Outgoing
tag or VC
Pop tag
19
20

Prefix
or Tunnel Id
150.1.4.4/32
150.1.56.0/24[V]
150.1.45.0/24[V]

Copyright 2010 Internetwork Expert


- 188 -

150.1.24.4
150.1.24.4
150.1.24.4

www.INE.com

CCIE Service Provider Lab Workbook Volume I


19
20
21
22
23
24

17
18
16
Pop tag
Pop tag
Aggregate

150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.3.3/32[V]
150.1.1.1/32[V]
150.1.13.0/24[V]
150.1.12.0/24[V]

Version 1.0

1828
19836
1604
17667
2808
0

Fa0/0
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1

150.1.24.4
150.1.24.4
point2point
point2point
point2point

Bytes tag
switched
0
0
0
0
0
0

Outgoing
interface
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2

Next Hop

Bytes tag
switched
0
1652
15902
2808
0
22153
1774
0
3186

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Et0/0
Et0/0
Et0/0
Et0/0

150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2

Bytes tag
switched
1313
0
1181
0
0

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
0
0
0
0
0

Outgoing
interface
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0

Next Hop

R3#show mpls forwarding-table


Local
tag
16
17
18
19
20
21

Outgoing
tag or VC
18
17
Pop tag
Pop tag
20
19

Prefix
or Tunnel Id
150.1.6.6/32
150.1.5.5/32
150.1.1.1/32
150.1.12.0/24
150.1.56.0/24
150.1.45.0/24

point2point
point2point
point2point
point2point
point2point
point2point

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
16
Pop tag
Pop tag
Aggregate
22
21
24
23

Prefix
or Tunnel Id
150.1.2.2/32
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.1.1/32[V]
150.1.3.3/32[V]
150.1.12.0/24[V]
150.1.13.0/24[V]

150.1.24.2
point2point
point2point
point2point

R5#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Pop tag
21
22
23
24

Prefix
or Tunnel Id
150.1.6.6/32
150.1.1.1/32
150.1.3.3/32
150.1.12.0/24
150.1.13.0/24

150.1.56.6
point2point
point2point
point2point
point2point

R6#show mpls forwarding-table


Local
tag
16
17
18
19
20
21

Outgoing
tag or VC
Pop tag
18
17
20
19
Pop tag

Prefix
or Tunnel Id
150.1.5.5/32
150.1.3.3/32
150.1.1.1/32
150.1.13.0/24
150.1.12.0/24
150.1.45.0/24

Copyright 2010 Internetwork Expert


- 189 -

150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Carrier Supporting Carrier Hierarchical MPLS VPNs


Objective: Configure an MPLS Carrier Supporting Carrier architecture with AS 2
as the backbone carrier and AS 1 as the customer carrier to provide
MPLS VPN service between SW1 & BB1 and SW2 & BB2.
Fa0/3

.254

RIPv2

RIPv2
E0/0

E0/1
R3

.3

SW1

.7

BGP
AS 1

10.1.37.0/24

192.10.X.0/24 VLAN 32

BB2

.3

.3

S1/2
S0/1

150.1.13.0/24

.1

OSPF 150.1.12.0/24
Area 0 Frame Relay

R1
.1

S0/0.1

102
201

.2

S0/0.1
R2
Fa0/0

.2

BGP
AS 2 E0/0

150.1.24.0/24 VLAN 24
.4

150.1.45.0/24

R4
S0/0.1

OSPF
Area 0

Frame Relay

.4

405

504

.5

S0/0.1

OSPF
Area 0

R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1

RIPv2
Fa0/6

SW2

10.1.68.0/24

.6

S0/0/0.1
R6

BGP
AS 1

.8

.6

54.X.1.0/24

Frame Relay
101
.254

RIPv2
BB1

Copyright 2010 Internetwork Expert


- 190 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the link between R2 and R4
Create the Loopback 150.1.2.2/32 on R2 and advertise it into OSPF
Create the Loopback 150.1.4.4/32 on R4 and advertise it into OSPF
Configure MPLS on the interfaces between R2 and R4 and their
connections to AS 1
Create VRF AS1 on R2 and R4 using the route target and distinguisher
2:1
Apply this VRF to AS 2s connections to AS 1
Run OSPF as the PE-CE routing protocol between AS 2 and AS 1
Peer with iBGP between R2 and R4 to exchange VPNv4 prefixes
Configure Loopbacks on R1, R3, R5, and R6 in the format 150.1.Y.Y/32
Enable OSPF area 0 on all interfaces in the 150.1.0.0/16 network on R1,
R3, R5, and R6
Enable MPLS on the links between R1 & R3, R5 & R6, and on R1 & R5s
connections to AS 1
SW1 and BB1 should be in VRF SW1-BB1 on R3 and R6
Use the route distinguisher and route target 1:100 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R6 & BB1
SW2 and BB2 should be in VRF SW2-BB2 on R3 and R6
Use the route distinguisher and route target 1:200 for this VRF
Run RIPv2 as the PE-CE protocol between R6 & SW2 and R3 & BB2
BB2 will be expecting RIPv2 packets to be MD5 authenticated with the
password CISCO
Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIP
Configure an iBGP peering between R1 and R6 for VPNv4 exchange
Redistribute where necessary to gain connectivity between SW1 & BB1
and SW2 & BB2

Final Configuration
R1#
ip cef
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert


- 191 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.12.1 255.255.255.0
tag-switching ip
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip vrf AS1
rd 2:1
route-target export 2:1
route-target import 2:1
!
ip cef
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip vrf forwarding AS1
ip address 150.1.12.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 201
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
!
router ospf 2 vrf AS1
redistribute bgp 2 subnets
network 150.1.12.2 0.0.0.0 area 0
!
router bgp 2
neighbor 150.1.24.4 remote-as 2
!
address-family vpnv4
neighbor 150.1.24.4 activate
neighbor 150.1.24.4 send-community both
exit-address-family
!

Copyright 2010 Internetwork Expert


- 192 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family ipv4 vrf AS1


redistribute ospf 2
exit-address-family
R3#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
mpls label protocol ldp
!
key chain RIP
key 1
key-string CISCO
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding SW1-BB1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding SW2-BB2
ip address 192.10.1.3 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf SW2-BB2
redistribute bgp 1 metric 1
network 192.10.1.0
no auto-summary
version 2
exit-address-family
!

Copyright 2010 Internetwork Expert


- 193 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family ipv4 vrf SW1-BB1


redistribute bgp 1 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.6.6 remote-as 1
neighbor 150.1.6.6 update-source Loopback0
neighbor 150.1.6.6 next-hop-self
!
address-family vpnv4
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
R4#
ip cef
!
ip vrf AS1
rd 2:1
route-target export 2:1
route-target import 2:1
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip vrf forwarding AS1
ip address 150.1.45.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 405
!
router ospf 2 vrf AS1
redistribute bgp 2 subnets
network 150.1.45.4 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert


- 194 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
!
router bgp 2
neighbor 150.1.24.2 remote-as 2
!
address-family vpnv4
neighbor 150.1.24.2 activate
neighbor 150.1.24.2 send-community both
exit-address-family
!
address-family ipv4 vrf AS1
redistribute ospf 2 vrf AS1
exit-address-family
R5#
ip cef
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
tag-switching ip
frame-relay interface-dlci 504
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
R6#
ip cef
!
ip vrf SW1-BB1
rd 1:100
route-target export 1:100
route-target import 1:100
!
ip vrf SW2-BB2
rd 1:200
route-target export 1:200
route-target import 1:200
!
mpls label protocol ldp
!

Copyright 2010 Internetwork Expert


- 195 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
mpls ip
!
interface GigabitEthernet0/1
ip vrf forwarding SW2-BB2
ip address 10.1.68.6 255.255.255.0
!
interface Serial0/0/0
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip vrf forwarding SW1-BB1
ip address 54.1.1.6 255.255.255.0
frame-relay interface-dlci 101
!
router ospf 1
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf SW2-BB2
redistribute bgp 1 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute bgp 1 metric 1
network 54.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community extended
exit-address-family
!
address-family ipv4 vrf SW2-BB2
redistribute rip
no auto-summary
no synchronization
exit-address-family
!

Copyright 2010 Internetwork Expert


- 196 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family ipv4 vrf SW1-BB1


redistribute rip
no auto-summary
no synchronization
exit-address-family
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
switchport access vlan 32
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
interface FastEthernet0/24
switchport access vlan 32
!
router rip
version 2
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert


- 197 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
SW1#show ip route
<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
R
54.1.1.0 [120/1] via 10.1.37.3, 00:00:00, FastEthernet0/3
R
212.18.1.0/24 [120/1] via 10.1.37.3, 00:00:00, FastEthernet0/3
R
212.18.0.0/24 [120/1] via 10.1.37.3, 00:00:00, FastEthernet0/3
R
212.18.3.0/24 [120/1] via 10.1.37.3, 00:00:00, FastEthernet0/3
10.0.0.0/24 is subnetted, 2 subnets
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3
R
212.18.2.0/24 [120/1] via 10.1.37.3, 00:00:00, FastEthernet0/3
SW1#ping 212.18.0.1 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 212.18.0.1, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 184/185/188 ms

SW2#show ip route
<output omitted>
R
222.22.2.0/24 [120/1] via 10.1.68.6, 00:00:20, FastEthernet0/6
R
220.20.3.0/24 [120/1] via 10.1.68.6, 00:00:20, FastEthernet0/6
10.0.0.0/24 is subnetted, 2 subnets
C
10.1.8.0 is directly connected, Loopback0
C
10.1.68.0 is directly connected, FastEthernet0/6
R
192.10.1.0/24 [120/1] via 10.1.68.6, 00:00:20, FastEthernet0/6
R
205.90.31.0/24 [120/1] via 10.1.68.6, 00:00:20, FastEthernet0/6
SW2#ping 222.22.2.1 source 10.1.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 222.22.2.1, timeout is 2 seconds:
Packet sent with a source address of 10.1.8.8
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 152/155/156 ms

R1#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O IA
150.1.6.6/32 [110/139] via 150.1.12.2, 06:47:39, Serial0/0.1
O IA
150.1.5.5/32 [110/129] via 150.1.12.2, 06:47:39, Serial0/0.1
O
150.1.3.3/32 [110/65] via 150.1.13.3, 06:47:39, Serial0/1
C
150.1.1.1/32 is directly connected, Loopback0
C
150.1.13.0/24 is directly connected, Serial0/1
C
150.1.12.0/24 is directly connected, Serial0/0.1
O IA
150.1.56.0/24 [110/138] via 150.1.12.2, 06:47:39, Serial0/0.1
O IA
150.1.45.0/24 [110/65] via 150.1.12.2, 06:47:39, Serial0/0.1

Copyright 2010 Internetwork Expert


- 198 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C
150.1.24.0/24 is directly connected, FastEthernet0/0
O
150.1.4.4/32 [110/2] via 150.1.24.4, 09:59:25, FastEthernet0/0
C
150.1.2.2/32 is directly connected, Loopback0
Routing Table: AS1
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
B
150.1.6.6/32 [200/75] via 150.1.24.4, 09:53:25
B
150.1.5.5/32 [200/65] via 150.1.24.4, 09:53:25
O
150.1.3.3/32 [110/129] via 150.1.12.1, 09:52:26, Serial0/0.1
O
150.1.1.1/32 [110/65] via 150.1.12.1, 09:52:26, Serial0/0.1
O
150.1.13.0/24 [110/128] via 150.1.12.1, 09:52:26, Serial0/0.1
C
150.1.12.0/24 is directly connected, Serial0/0.1
B
150.1.56.0/24 [200/74] via 150.1.24.4, 09:53:25
B
150.1.45.0/24 [200/0] via 150.1.24.4, 09:53:25
R3#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O IA
150.1.6.6/32 [110/920] via 150.1.13.1, 09:57:32, Serial1/2
O IA
150.1.5.5/32 [110/910] via 150.1.13.1, 09:57:32, Serial1/2
C
150.1.3.3/32 is directly connected, Loopback0
O
150.1.1.1/32 [110/782] via 150.1.13.1, 09:57:32, Serial1/2
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/845] via 150.1.13.1, 09:57:32, Serial1/2
O IA
150.1.56.0/24 [110/919] via 150.1.13.1, 09:57:32, Serial1/2
O IA
150.1.45.0/24 [110/846] via 150.1.13.1, 09:57:32, Serial1/2
Routing Table: SW1-BB1
<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
B
54.1.1.0 [200/0] via 150.1.6.6, 00:10:53
B
212.18.1.0/24 [200/1] via 150.1.6.6, 00:10:53
B
212.18.0.0/24 [200/1] via 150.1.6.6, 00:10:53
B
212.18.3.0/24 [200/1] via 150.1.6.6, 00:10:53
10.0.0.0/24 is subnetted, 2 subnets
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:19, Ethernet0/0
C
10.1.37.0 is directly connected, Ethernet0/0
B
212.18.2.0/24 [200/1] via 150.1.6.6, 00:10:53
Routing Table: SW2-BB2
<output omitted>
R
222.22.2.0/24 [120/7] via 192.10.1.254, 00:00:10, Ethernet0/1
R
220.20.3.0/24 [120/7] via 192.10.1.254, 00:00:10, Ethernet0/1
10.0.0.0/24 is subnetted, 2 subnets
B
10.1.8.0 [200/1] via 150.1.6.6, 00:10:53
B
10.1.68.0 [200/0] via 150.1.6.6, 00:10:53
C
192.10.1.0/24 is directly connected, Ethernet0/1
R
205.90.31.0/24 [120/7] via 192.10.1.254, 00:00:10, Ethernet0/1

Copyright 2010 Internetwork Expert


- 199 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 3 subnets, 2 masks
C
150.1.24.0/24 is directly connected, Ethernet0/0
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.2.2/32 [110/11] via 150.1.24.2, 10:05:02, Ethernet0/0
Routing Table: AS1
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O
150.1.6.6/32 [110/75] via 150.1.45.5, 09:58:24, Serial0/0.1
O
150.1.5.5/32 [110/65] via 150.1.45.5, 09:58:24, Serial0/0.1
B
150.1.3.3/32 [200/129] via 150.1.24.2, 09:57:05
B
150.1.1.1/32 [200/65] via 150.1.24.2, 09:57:05
B
150.1.13.0/24 [200/128] via 150.1.24.2, 09:57:05
B
150.1.12.0/24 [200/0] via 150.1.24.2, 09:57:05
O
150.1.56.0/24 [110/74] via 150.1.45.5, 09:58:24, Serial0/0.1
C
150.1.45.0/24 is directly connected, Serial0/0.1
R5#show ip route
<output omitted>
150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks
O
150.1.6.6/32 [110/11] via 150.1.56.6, 06:53:53, Ethernet0/0
C
150.1.5.5/32 is directly connected, Loopback0
O E2
150.1.3.3/32 [110/129] via 150.1.45.4, 06:53:53, Serial0/0.1
O E2
150.1.1.1/32 [110/65] via 150.1.45.4, 06:53:53, Serial0/0.1
O E2
150.1.13.0/24 [110/128] via 150.1.45.4, 06:53:53, Serial0/0.1
O E2
150.1.12.0/24 [110/1] via 150.1.45.4, 06:53:53, Serial0/0.1
C
150.1.56.0/24 is directly connected, Ethernet0/0
C
150.1.45.0/24 is directly connected, Serial0/0.1
R6#show ip route vrf *
<output omitted>
C
O
O
O
O
O
C
O

E2
E2
E2
E2

150.1.0.0/16 is variably subnetted, 8 subnets, 2 masks


150.1.6.6/32 is directly connected, Loopback0
150.1.5.5/32 [110/2] via 150.1.56.5, 09:58:58, GigabitEthernet0/0
150.1.3.3/32 [110/129] via 150.1.56.5, 09:57:40, GigabitEthernet0/0
150.1.1.1/32 [110/65] via 150.1.56.5, 09:57:40, GigabitEthernet0/0
150.1.13.0/24 [110/128] via 150.1.56.5, 09:57:40, GigabitEthernet0/0
150.1.12.0/24 [110/1] via 150.1.56.5, 09:57:40, GigabitEthernet0/0
150.1.56.0/24 is directly connected, GigabitEthernet0/0
150.1.45.0/24 [110/65] via 150.1.56.5, 09:58:58, GigabitEthernet0/0

Routing Table: SW1-BB1


<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
C
54.1.1.0 is directly connected, Serial0/0/0.1
R
212.18.1.0/24 [120/1] via 54.1.1.254, 00:00:08, Serial0/0/0.1
R
212.18.0.0/24 [120/1] via 54.1.1.254, 00:00:08, Serial0/0/0.1
R
212.18.3.0/24 [120/1] via 54.1.1.254, 00:00:08, Serial0/0/0.1
10.0.0.0/24 is subnetted, 2 subnets
B
10.1.7.0 [200/1] via 150.1.3.3, 00:11:45
B
10.1.37.0 [200/0] via 150.1.3.3, 00:11:45
R
212.18.2.0/24 [120/1] via 54.1.1.254, 00:00:08, Serial0/0/0.1

Copyright 2010 Internetwork Expert


- 200 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: SW2-BB2


<output omitted>
B
222.22.2.0/24 [200/7] via 150.1.3.3, 00:09:14
B
220.20.3.0/24 [200/7] via 150.1.3.3, 00:09:14
10.0.0.0/24 is subnetted, 2 subnets
R
10.1.8.0 [120/1] via 10.1.68.8, 00:00:24, GigabitEthernet0/1
C
10.1.68.0 is directly connected, GigabitEthernet0/1
B
192.10.1.0/24 [200/0] via 150.1.3.3, 00:11:45
B
205.90.31.0/24 [200/7] via 150.1.3.3, 00:09:14
R2#show ip bgp vpnv4 all
<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 2:1 (default for vrf AS1)
*> 150.1.1.1/32
150.1.12.1
65
32768 ?
*> 150.1.3.3/32
150.1.12.1
129
32768 ?
*>i150.1.5.5/32
150.1.24.4
65
100
0 ?
*>i150.1.6.6/32
150.1.24.4
75
100
0 ?
*> 150.1.12.0/24
0.0.0.0
0
32768 ?
*> 150.1.13.0/24
150.1.12.1
128
32768 ?
*>i150.1.45.0/24
150.1.24.4
0
100
0 ?
*>i150.1.56.0/24
150.1.24.4
74
100
0 ?
R3#show ip bgp vpnv4 all
<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*> 10.1.7.0/24
10.1.37.7
1
32768 ?
*> 10.1.37.0/24
0.0.0.0
0
32768 ?
*>i54.1.1.0/24
150.1.6.6
0
100
0 ?
*>i212.18.0.0
150.1.6.6
1
100
0 ?
*>i212.18.1.0
150.1.6.6
1
100
0 ?
*>i212.18.2.0
150.1.6.6
1
100
0 ?
*>i212.18.3.0
150.1.6.6
1
100
0 ?
Route Distinguisher: 1:200 (default for vrf SW2-BB2)
*>i10.1.8.0/24
150.1.6.6
1
100
0 ?
*>i10.1.68.0/24
150.1.6.6
0
100
0 ?
*> 192.10.1.0
0.0.0.0
0
32768 ?
*> 205.90.31.0
192.10.1.254
7
32768 ?
*> 220.20.3.0
192.10.1.254
7
32768 ?
*> 222.22.2.0
192.10.1.254
7
32768 ?
R4#show ip bgp vpnv4 all
<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 2:1 (default for vrf AS1)
*>i150.1.1.1/32
150.1.24.2
65
100
0 ?
*>i150.1.3.3/32
150.1.24.2
129
100
0 ?
*> 150.1.5.5/32
150.1.45.5
65
32768 ?
*> 150.1.6.6/32
150.1.45.5
75
32768 ?
*>i150.1.12.0/24
150.1.24.2
0
100
0 ?
*>i150.1.13.0/24
150.1.24.2
128
100
0 ?
*> 150.1.45.0/24
0.0.0.0
0
32768 ?
*> 150.1.56.0/24
150.1.45.5
74
32768 ?

Copyright 2010 Internetwork Expert


- 201 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#show ip bgp vpnv4 all


<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 1:100 (default for vrf SW1-BB1)
*>i10.1.7.0/24
150.1.3.3
1
100
0 ?
*>i10.1.37.0/24
150.1.3.3
0
100
0 ?
*> 54.1.1.0/24
0.0.0.0
0
32768 ?
*> 212.18.0.0
54.1.1.254
1
32768 ?
*> 212.18.1.0
54.1.1.254
1
32768 ?
*> 212.18.2.0
54.1.1.254
1
32768 ?
*> 212.18.3.0
54.1.1.254
1
32768 ?
Route Distinguisher: 1:200 (default for vrf SW2-BB2)
*> 10.1.8.0/24
10.1.68.8
1
32768 ?
*> 10.1.68.0/24
0.0.0.0
0
32768 ?
*>i192.10.1.0
150.1.3.3
0
100
0 ?
*>i205.90.31.0
150.1.3.3
7
100
0 ?
*>i220.20.3.0
150.1.3.3
7
100
0 ?
*>i222.22.2.0
150.1.3.3
7
100
0 ?
R1#show mpls forwarding-table
Local
tag
16
17
18
19
20

Outgoing
tag or VC
Pop tag
20
19
18
17

Prefix
or Tunnel Id
150.1.3.3/32
150.1.5.5/32
150.1.6.6/32
150.1.45.0/24
150.1.56.0/24

Bytes tag
switched
44383
0
42358
0
0

Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
3186
0
49718
19836
48695
17667
2808
0

Outgoing
interface
Fa0/0
Fa0/0
Fa0/0
Fa0/0
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
0
0
0
0
0
0
0
570

Outgoing
interface
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2

Next Hop

Et0/0

10.1.37.7

point2point
point2point
point2point
point2point
point2point

R2#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
19
20
17
18
16
Pop tag
Pop tag
Aggregate

Prefix
or Tunnel Id
150.1.4.4/32
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.3.3/32[V]
150.1.1.1/32[V]
150.1.13.0/24[V]
150.1.12.0/24[V]

150.1.24.4
150.1.24.4
150.1.24.4
150.1.24.4
150.1.24.4
point2point
point2point
point2point

R3#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
18
17
Pop tag
Pop tag
20
19
Aggregate
Aggregate
Untagged

Prefix
or Tunnel Id
150.1.6.6/32
150.1.5.5/32
150.1.1.1/32
150.1.12.0/24
150.1.56.0/24
150.1.45.0/24
10.1.37.0/24[V]
192.10.1.0/24[V]
10.1.7.0/24[V]

Copyright 2010 Internetwork Expert


- 202 -

point2point
point2point
point2point
point2point
point2point
point2point

www.INE.com

CCIE Service Provider Lab Workbook Volume I


25
26
27

Untagged
Untagged
Untagged

Version 1.0

205.90.31.0/24[V] 0
220.20.3.0/24[V] 0
222.22.2.0/24[V] 570

Et0/1
Et0/1
Et0/1

192.10.1.254
192.10.1.254
192.10.1.254

Bytes tag
switched
0
44066
15902
2808
0
22153
57027
0
3186

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Et0/0
Et0/0
Et0/0
Et0/0

150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2

Bytes tag
switched
47182
0
48607
0
0

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
0
0
0
0
0
0
520
0
0
0
456
0

Outgoing
interface
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0

Next Hop

Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Se0/0/0.1
Gi0/1

point2point
point2point
point2point
point2point
10.1.68.8

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24

Outgoing
tag or VC
Pop tag
16
Pop tag
Pop tag
Aggregate
22
21
24
23

Prefix
or Tunnel Id
150.1.2.2/32
150.1.6.6/32[V]
150.1.5.5/32[V]
150.1.56.0/24[V]
150.1.45.0/24[V]
150.1.1.1/32[V]
150.1.3.3/32[V]
150.1.12.0/24[V]
150.1.13.0/24[V]

150.1.24.2
point2point
point2point
point2point

R5#show mpls forwarding-table


Local
tag
16
17
18
19
20

Outgoing
tag or VC
Pop tag
21
22
23
24

Prefix
or Tunnel Id
150.1.6.6/32
150.1.1.1/32
150.1.3.3/32
150.1.12.0/24
150.1.13.0/24

150.1.56.6
point2point
point2point
point2point
point2point

R6#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24
25
26
27
28

Outgoing
tag or VC
Pop tag
18
17
20
19
Pop tag
Aggregate
Untagged
Untagged
Untagged
Untagged
Untagged
Aggregate

Prefix
or Tunnel Id
150.1.5.5/32
150.1.3.3/32
150.1.1.1/32
150.1.13.0/24
150.1.12.0/24
150.1.45.0/24
54.1.1.0/24[V]
212.18.0.0/24[V]
212.18.1.0/24[V]
212.18.2.0/24[V]
212.18.3.0/24[V]
10.1.8.0/24[V]
10.1.68.0/24[V]

Copyright 2010 Internetwork Expert


- 203 -

150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

VRF-Lite
Objective: Configure VRF-Lite (Multi-VRF) on R3 and R6 to propagate routing
information from SW1 & BB3 and SW2 & BB1 to R1 and R5
respectively.

Fa0/3

.254

SW1

.7

RIPv2

RIPv2

E0/1

E0/0
R3

.3

10.1.37.0/24

204.10.X.0/24 VLAN 33

BB3

.3

.3

S1/2.1

S1/2.2

10.1.13.0/24

S0/1.1

10.1.31.0/24

.1

S0/1.2
150.1.12.0/24

R1

Frame Relay

.1

102

BGP
AS 100

201

.2

S0/0.1

IS-IS
Level 2

R2
Fa0/0

.2

E0/0

.4

S0/0.1

150.1.24.0/24 VLAN 24

150.1.45.0/24

R4
S0/0.1

Frame Relay

.4

405

BGP
AS 100

504

.5

S0/0.1
R5
E0/0.56 E0/0.65
10.1.56.0/24 VLAN 56
.6

.5

.5

10.1.65.0/24 VLAN 65

.6

G0/0.56 G0/0.65
G0/1
S0/0/0.1

RIPv2
Fa0/6

SW2

10.1.68.0/24

.6

R6

.8

.6

54.X.1.0/24

Frame Relay

RIPv2 101
.254

BB1

Copyright 2010 Internetwork Expert


- 204 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


The Ethernet links connecting R5 and R6 should be 802.1q trunks to carry
VLANs 56 and 65
The Serial link between R1 and R3 should run back-to-back Frame Relay
Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIPv2
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIPv2
Create VRFs SW1 and BB3 on R3
Networks 10.1.13.0/24 and 10.1.37.0/24 should be in VRF SW1
Networks 10.1.31.0/24 and 204.12.X.0/24 should be in VRF BB3
Configure RIPv2 for VRFs SW1 and BB3 on R3
Create VRFs SW2 and BB1 on R6
Networks 10.1.56.0/24 and 10.1.68.0/24 should be in VRF SW2
Networks 10.1.65.0/24 and 54.X.1.0/24 should be in VRF BB1
Configure RIPv2 for VRFs SW2 and BB1 on R6
Configure IS-IS Level-2 on the interfaces between R1, R2, R4, and R5
Create Loopbacks on R1 and R5 in the format 150.1.Y/Y/32 and advertise
them into IS-IS
Configure MPLS on the interfaces between R1, R2, R4, and R5
R1 and R5 should peer via iBGP in AS 1 using their Loopback interfaces
Create VRF SW1-BB1 on R1 and R5 using the route distinguisher and
target 100:1
Create VRF SW2-BB3 on R1 and R5 using the route distinguisher and
target 100:2
Networks 10.1.13.0/24 and 10.1.65.0/24 on R1 and R6 should be in VRF
SW1-BB1
Networks 10.1.31.0/24 and 10.1.56.0/24 on R1 and R6 should be in VRF
SW2-BB3
Configure RIPv2 for VRFs SW1-BB1 and SW2-BB3 on R1 and R5
Redistribute where necessary to gain connectivity within the VPNs

Copyright 2010 Internetwork Expert


- 205 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Final Configuration
R1#
ip vrf SW1-BB1
rd 100:1
route-target export 100:1
route-target import 100:1
!
ip vrf SW2-BB3
rd 100:2
route-target export 100:2
route-target import 100:2
!
ip cef
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 102
!
interface Serial0/1
encapsulation frame-relay
no keepalive
!
interface Serial0/1.1 point-to-point
ip vrf forwarding SW1-BB1
ip address 10.1.13.1 255.255.255.0
frame-relay interface-dlci 100
!
interface Serial0/1.2 point-to-point
ip vrf forwarding SW2-BB3
ip address 10.1.31.1 255.255.255.0
frame-relay interface-dlci 200
!
router isis
net 00.0000.0000.0001.00
is-type level-2-only
passive-interface Loopback0
!
router rip
version 2
!
address-family ipv4 vrf SW2-BB3
version 2
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
exit-address-family

Copyright 2010 Internetwork Expert


- 206 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
address-family ipv4 vrf SW1-BB1
version 2
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
exit-address-family
!
router bgp 100
neighbor 150.1.5.5 remote-as 100
neighbor 150.1.5.5 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.5.5 activate
neighbor 150.1.5.5 send-community both
exit-address-family
!
address-family ipv4 vrf SW2-BB3
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
R2#
ip cef
mpls label protocol ldp
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 201
!
router isis
net 00.0000.0000.0002.00
is-type level-2-only

Copyright 2010 Internetwork Expert


- 207 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#
ip cef
!
ip vrf BB3
rd 100:2
!
ip vrf SW1
rd 100:1
!
interface Ethernet0/0
ip vrf forwarding SW1
ip address 10.1.37.3 255.255.255.0
!
interface Ethernet0/1
ip vrf forwarding BB3
ip address 204.12.1.3 255.255.255.0
!
interface Serial1/2
encapsulation frame-relay
no keepalive
clockrate 64000
!
interface Serial1/2.1 point-to-point
ip vrf forwarding SW1
ip address 10.1.13.3 255.255.255.0
frame-relay interface-dlci 100
!
interface Serial1/2.2 point-to-point
ip vrf forwarding BB3
ip address 10.1.31.3 255.255.255.0
frame-relay interface-dlci 200
!
router rip
!
address-family ipv4 vrf SW1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf BB3
network 10.0.0.0
network 204.12.1.0
no auto-summary
version 2
exit-address-family
R4#
ip cef
!
mpls label protocol ldp
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip router isis
tag-switching ip
!

Copyright 2010 Internetwork Expert


- 208 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 405
!
router isis
net 00.0000.0000.0004.00
is-type level-2-only
R5#
ip cef
!
ip vrf SW1-BB1
rd 100:1
route-target export 100:1
route-target import 100:1
!
ip vrf SW2-BB3
rd 100:2
route-target export 100:2
route-target import 100:2
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0.56
encapsulation dot1Q 56
ip vrf forwarding SW2-BB3
ip address 10.1.56.5 255.255.255.0
!
interface Ethernet0/0.65
encapsulation dot1Q 65
ip vrf forwarding SW1-BB1
ip address 10.1.65.5 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 504
!
router isis
net 00.0000.0000.0005.00
is-type level-2-only
passive-interface Loopback0
!

Copyright 2010 Internetwork Expert


- 209 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
version 2
!
address-family ipv4 vrf SW2-BB3
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
neighbor 150.1.1.1 remote-as 100
neighbor 150.1.1.1 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.1.1 activate
neighbor 150.1.1.1 send-community both
exit-address-family
!
address-family ipv4 vrf SW2-BB3
redistribute rip
exit-address-family
!
address-family ipv4 vrf SW1-BB1
redistribute rip
exit-address-family
R6#
ip cef
!
ip vrf BB1
rd 100:1
!
ip vrf SW2
rd 100:2
!
interface GigabitEthernet0/0.56
encapsulation dot1Q 56
ip vrf forwarding SW2
ip address 10.1.56.6 255.255.255.0
!
interface GigabitEthernet0/0.65
encapsulation dot1Q 65
ip vrf forwarding BB1
ip address 10.1.65.6 255.255.255.0
!
interface GigabitEthernet0/1
ip vrf forwarding SW2
ip address 10.1.68.6 255.255.255.0
!

Copyright 2010 Internetwork Expert


- 210 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0/0
encapsulation frame-relay
!
interface Serial0/0/0.1 point-to-point
ip vrf forwarding BB1
ip address 54.1.1.6 255.255.255.0
frame-relay interface-dlci 101
!
router rip
!
address-family ipv4 vrf SW2
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf BB1
network 10.0.0.0
network 54.0.0.0
no auto-summary
version 2
exit-address-family
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport access vlan 33
!
router rip
version 2
network 10.0.0.0
no auto-summary

Copyright 2010 Internetwork Expert


- 211 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/3
switchport access vlan 33
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary

Verification
R3#show ip route vrf *
<output omitted>
Routing Table: BB3
<output omitted>
C
204.12.1.0/24 is directly connected, Ethernet0/1
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/1] via 10.1.31.1, 00:00:00, Serial1/2.2
C
10.1.31.0 is directly connected, Serial1/2.2
R
10.1.56.0 [120/1] via 10.1.31.1, 00:00:00, Serial1/2.2
R
10.1.68.0 [120/1] via 10.1.31.1, 00:00:00, Serial1/2.2
31.0.0.0/16 is subnetted, 4 subnets
R
31.3.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
31.2.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
31.1.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
31.0.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
30.0.0.0/16 is subnetted, 4 subnets
R
30.2.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
30.3.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
30.0.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
R
30.1.0.0 [120/1] via 204.12.1.254, 00:00:14, Ethernet0/1
Routing Table: SW1
<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
R
54.1.1.0 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
R
212.18.1.0/24 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
R
212.18.0.0/24 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
R
212.18.3.0/24 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.13.0 is directly connected, Serial1/2.1
R
10.1.7.0 [120/1] via 10.1.37.7, 00:00:17, Ethernet0/0
C
10.1.37.0 is directly connected, Ethernet0/0
R
10.1.65.0 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1
R
212.18.2.0/24 [120/1] via 10.1.13.1, 00:00:00, Serial1/2.1

Copyright 2010 Internetwork Expert


- 212 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


R6#show
<output
Routing
<output
R
R
R
C
C
R
R
R
R
R
R
R
R

Version 1.0

ip route vrf *
omitted>
Table: SW2
omitted>

204.12.1.0/24 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56


10.0.0.0/24 is subnetted, 4 subnets
10.1.8.0 [120/1] via 10.1.68.8, 00:00:17, GigabitEthernet0/1
10.1.31.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
10.1.56.0 is directly connected, GigabitEthernet0/0.56
10.1.68.0 is directly connected, GigabitEthernet0/1
31.0.0.0/16 is subnetted, 4 subnets
31.3.0.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
31.2.0.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
31.1.0.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
31.0.0.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
30.0.0.0/16 is subnetted, 4 subnets
30.2.0.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
30.3.0.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
30.0.0.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56
30.1.0.0 [120/1] via 10.1.56.5, 00:00:26, GigabitEthernet0/0.56

Routing Table: BB1


<output omitted>
C
R
R
R
R
R
R
C
R

54.0.0.0/24 is subnetted, 1 subnets


54.1.1.0 is directly connected, Serial0/0/0.1
212.18.1.0/24 [120/1] via 54.1.1.254, 00:00:01, Serial0/0/0.1
212.18.0.0/24 [120/1] via 54.1.1.254, 00:00:01, Serial0/0/0.1
212.18.3.0/24 [120/1] via 54.1.1.254, 00:00:01, Serial0/0/0.1
10.0.0.0/24 is subnetted, 4 subnets
10.1.13.0 [120/1] via 10.1.65.5, 00:00:18, GigabitEthernet0/0.65
10.1.7.0 [120/1] via 10.1.65.5, 00:00:18, GigabitEthernet0/0.65
10.1.37.0 [120/1] via 10.1.65.5, 00:00:18, GigabitEthernet0/0.65
10.1.65.0 is directly connected, GigabitEthernet0/0.65
212.18.2.0/24 [120/1] via 54.1.1.254, 00:00:01, Serial0/0/0.1

R1#show ip route vrf *


<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
i L2
150.1.24.0/24 [115/20] via 150.1.12.2, Serial0/0.1
i L2
150.1.5.5/32 [115/30] via 150.1.12.2, Serial0/0.1
C
150.1.1.1/32 is directly connected, Loopback0
C
150.1.12.0/24 is directly connected, Serial0/0.1
i L2
150.1.45.0/24 [115/30] via 150.1.12.2, Serial0/0.1
Routing Table: SW1-BB1
<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
B
54.1.1.0 [200/1] via 150.1.5.5, 00:05:01
B
212.18.1.0/24 [200/2] via 150.1.5.5, 00:05:01
B
212.18.0.0/24 [200/2] via 150.1.5.5, 00:05:01
B
212.18.3.0/24 [200/2] via 150.1.5.5, 00:05:01
10.0.0.0/24 is subnetted, 4 subnets
C
10.1.13.0 is directly connected, Serial0/1.1
R
10.1.7.0 [120/2] via 10.1.13.3, 00:00:23, Serial0/1.1
R
10.1.37.0 [120/1] via 10.1.13.3, 00:00:23, Serial0/1.1
B
10.1.65.0 [200/0] via 150.1.5.5, 00:05:02
B
212.18.2.0/24 [200/2] via 150.1.5.5, 00:05:01

Copyright 2010 Internetwork Expert


- 213 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Routing Table: SW2-BB3


<output omitted>
R
204.12.1.0/24 [120/1] via 10.1.31.3, 00:00:12, Serial0/1.2
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.8.0 [200/2] via 150.1.5.5, 00:05:02
C
10.1.31.0 is directly connected, Serial0/1.2
B
10.1.56.0 [200/0] via 150.1.5.5, 00:05:02
B
10.1.68.0 [200/1] via 150.1.5.5, 00:05:02
31.0.0.0/16 is subnetted, 4 subnets
R
31.3.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
31.2.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
31.1.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
31.0.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
30.0.0.0/16 is subnetted, 4 subnets
R
30.2.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
30.3.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
30.0.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R
30.1.0.0 [120/2] via 10.1.31.3, 00:00:12, Serial0/1.2
R5#show ip route vrf *
<output omitted>
150.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
i L2
150.1.24.0/24 [115/20] via 150.1.45.4, Serial0/0.1
C
150.1.5.5/32 is directly connected, Loopback0
i L2
150.1.1.1/32 [115/30] via 150.1.45.4, Serial0/0.1
i L2
150.1.12.0/24 [115/30] via 150.1.45.4, Serial0/0.1
C
150.1.45.0/24 is directly connected, Serial0/0.1
Routing Table: SW1-BB1
<output omitted>
54.0.0.0/24 is subnetted, 1 subnets
R
54.1.1.0 [120/1] via 10.1.65.6, 00:00:05, Ethernet0/0.65
R
212.18.1.0/24 [120/2] via 10.1.65.6, 00:00:05, Ethernet0/0.65
R
212.18.0.0/24 [120/2] via 10.1.65.6, 00:00:05, Ethernet0/0.65
R
212.18.3.0/24 [120/2] via 10.1.65.6, 00:00:05, Ethernet0/0.65
10.0.0.0/24 is subnetted, 4 subnets
B
10.1.13.0 [200/0] via 150.1.1.1, 00:09:58
B
10.1.7.0 [200/2] via 150.1.1.1, 00:08:13
B
10.1.37.0 [200/1] via 150.1.1.1, 00:09:58
C
10.1.65.0 is directly connected, Ethernet0/0.65
R
212.18.2.0/24 [120/2] via 10.1.65.6, 00:00:05, Ethernet0/0.65
Routing Table: SW2-BB3
<output omitted>
B
204.12.1.0/24 [200/1] via 150.1.1.1, 00:09:58
10.0.0.0/24 is subnetted, 4 subnets
R
10.1.8.0 [120/2] via 10.1.56.6, 00:00:19, Ethernet0/0.56
B
10.1.31.0 [200/0] via 150.1.1.1, 00:09:58
C
10.1.56.0 is directly connected, Ethernet0/0.56
R
10.1.68.0 [120/1] via 10.1.56.6, 00:00:19, Ethernet0/0.56
31.0.0.0/16 is subnetted, 4 subnets
B
31.3.0.0 [200/2] via 150.1.1.1, 00:09:58
B
31.2.0.0 [200/2] via 150.1.1.1, 00:09:58
B
31.1.0.0 [200/2] via 150.1.1.1, 00:09:58
B
31.0.0.0 [200/2] via 150.1.1.1, 00:09:58
30.0.0.0/16 is subnetted, 4 subnets
B
30.2.0.0 [200/2] via 150.1.1.1, 00:09:58

Copyright 2010 Internetwork Expert


- 214 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


B
B
B

Version 1.0

30.3.0.0 [200/2] via 150.1.1.1, 00:09:58


30.0.0.0 [200/2] via 150.1.1.1, 00:09:58
30.1.0.0 [200/2] via 150.1.1.1, 00:09:58

R1#show ip bgp vpnv4 all


<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 100:1 (default for vrf SW1-BB1)
*> 10.1.7.0/24
10.1.13.3
2
32768 ?
*> 10.1.13.0/24
0.0.0.0
0
32768 ?
*> 10.1.37.0/24
10.1.13.3
1
32768 ?
*>i10.1.65.0/24
150.1.5.5
0
100
0 ?
*>i54.1.1.0/24
150.1.5.5
1
100
0 ?
*>i212.18.0.0
150.1.5.5
2
100
0 ?
*>i212.18.1.0
150.1.5.5
2
100
0 ?
*>i212.18.2.0
150.1.5.5
2
100
0 ?
*>i212.18.3.0
150.1.5.5
2
100
0 ?
Route Distinguisher: 100:2 (default for vrf SW2-BB3)
*>i10.1.8.0/24
150.1.5.5
2
100
0 ?
*> 10.1.31.0/24
0.0.0.0
0
32768 ?
*>i10.1.56.0/24
150.1.5.5
0
100
0 ?
*>i10.1.68.0/24
150.1.5.5
1
100
0 ?
*> 30.0.0.0/16
10.1.31.3
2
32768 ?
*> 30.1.0.0/16
10.1.31.3
2
32768 ?
*> 30.2.0.0/16
10.1.31.3
2
32768 ?
*> 30.3.0.0/16
10.1.31.3
2
32768 ?
*> 31.0.0.0/16
10.1.31.3
2
32768 ?
*> 31.1.0.0/16
10.1.31.3
2
32768 ?
*> 31.2.0.0/16
10.1.31.3
2
32768 ?
*> 31.3.0.0/16
10.1.31.3
2
32768 ?
*> 204.12.1.0
10.1.31.3
1
32768 ?

R5#show ip bgp vpnv4 all


<output omitted>
Network
Next Hop
Metric LocPrf Weight Path
Route Distinguisher: 100:1 (default for vrf SW1-BB1)
*>i10.1.7.0/24
150.1.1.1
2
100
0 ?
*>i10.1.13.0/24
150.1.1.1
0
100
0 ?
*>i10.1.37.0/24
150.1.1.1
1
100
0 ?
*> 10.1.65.0/24
0.0.0.0
0
32768 ?
*> 54.1.1.0/24
10.1.65.6
1
32768 ?
*> 212.18.0.0
10.1.65.6
2
32768 ?
*> 212.18.1.0
10.1.65.6
2
32768 ?
*> 212.18.2.0
10.1.65.6
2
32768 ?
*> 212.18.3.0
10.1.65.6
2
32768 ?
Route Distinguisher: 100:2 (default for vrf SW2-BB3)
*> 10.1.8.0/24
10.1.56.6
2
32768 ?
*>i10.1.31.0/24
150.1.1.1
0
100
0 ?
*> 10.1.56.0/24
0.0.0.0
0
32768 ?
*> 10.1.68.0/24
10.1.56.6
1
32768 ?
*>i30.0.0.0/16
150.1.1.1
2
100
0 ?
*>i30.1.0.0/16
150.1.1.1
2
100
0 ?
*>i30.2.0.0/16
150.1.1.1
2
100
0 ?
*>i30.3.0.0/16
150.1.1.1
2
100
0 ?
*>i31.0.0.0/16
150.1.1.1
2
100
0 ?
*>i31.1.0.0/16
150.1.1.1
2
100
0 ?
*>i31.2.0.0/16
150.1.1.1
2
100
0 ?
*>i31.3.0.0/16
150.1.1.1
2
100
0 ?
*>i204.12.1.0
150.1.1.1
1
100
0 ?

Copyright 2010 Internetwork Expert


- 215 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Controlling MPLS Label Distribution


Objective: Configure an MPLS VPN between SW1 and SW2 over AS 100. Only
traffic between R3 and R6s loopback should be label switched
throughout AS 100.

Fa0/3

RIPv2
E0/0

R3

10.1.37.0/24

.7

BGP
AS 100

SW1

.3

.3

S1/2
S0/1

150.1.13.0/24

.1

150.1.12.0/24

R1

Frame Relay

.1

S0/0.1

102
201

.2

S0/0.1

IS-IS
Level 2

R2
Fa0/0

.2

E0/0

.4

150.1.24.0/24 VLAN 24

150.1.45.0/24

R4
S0/0.1

Frame Relay

.4

405

504

.5

S0/0.1
R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1
R6

RIPv2
Fa0/6

SW2

10.1.68.0/24

.6

BGP
AS 100

.8

Copyright 2010 Internetwork Expert


- 216 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure IS-IS Level-2 on the interfaces between R1, R2, R3, R4, R5,
and R6
Create Loopbacks on R1, R2, R3, R4, R5, and R6 in the format
150.1.Y/Y/32 and advertise them into IS-IS
Configure MPLS on the interfaces between R1, R2, R3, R4, R5, and R6
Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIPv2
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIPv2
R3 and R6 should peer via iBGP in AS 1 using their Loopback interfaces
SW1 and SW2 should be in VRF SW1-SW2
Use the route distinguisher and route target 100:1 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R6 & SW2
Redistribute where necessary to gain connectivity within the VPNs
Configure LDP filtering throughout the MPLS network so that only traffic
between R3 and R6s Loopback is label switched

Final Configuration
R1#
ip cef
mpls label protocol ldp
!
no tag-switching advertise-tags
tag-switching advertise-tags for 1
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
ip router isis
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip router isis
tag-switching ip
!
router isis
net 00.0000.0000.0001.00
is-type level-2-only
!

Copyright 2010 Internetwork Expert


- 217 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

access-list 1 permit 150.1.6.6


access-list 1 permit 150.1.3.3
access-list 1 deny
any
R2#
ip cef
mpls label protocol ldp
!
no tag-switching advertise-tags
tag-switching advertise-tags for 1
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
ip router isis
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 201
!
router isis
net 00.0000.0000.0002.00
is-type level-2-only
!
access-list 1 permit 150.1.6.6
access-list 1 permit 150.1.3.3
access-list 1 deny
any
R3#
ip cef
!
ip vrf SW1-SW2
rd 100:1
route-target export 100:1
route-target import 100:1
!
mpls label protocol ldp
!
no tag-switching advertise-tags
tag-switching advertise-tags for 1
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip vrf forwarding SW1-SW2
ip address 10.1.37.3 255.255.255.0

Copyright 2010 Internetwork Expert


- 218 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip router isis
tag-switching ip
clockrate 64000
!
router isis
net 00.0000.0000.0003.00
is-type level-2-only
!
router rip
!
address-family ipv4 vrf SW1-SW2
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
neighbor 150.1.6.6 remote-as 100
neighbor 150.1.6.6 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 send-community extended
exit-address-family
!
address-family ipv4 vrf SW1-SW2
redistribute rip
exit-address-family
!
access-list 1 permit 150.1.6.6
access-list 1 permit 150.1.3.3
access-list 1 deny
any
R4#
ip cef
mpls label protocol ldp
!
no tag-switching advertise-tags
tag-switching advertise-tags for 1
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert


- 219 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.45.4 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 405
!
router isis
net 00.0000.0000.0004.00
is-type level-2-only
!
access-list 1 permit 150.1.6.6
access-list 1 permit 150.1.3.3
access-list 1 deny
any
R5#
ip cef
mpls label protocol ldp
!
no tag-switching advertise-tags
tag-switching advertise-tags for 1
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip router isis
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip router isis
tag-switching ip
frame-relay interface-dlci 504
!
router isis
net 00.0000.0000.0005.00
is-type level-2-only
!
access-list 1 permit 150.1.6.6
access-list 1 permit 150.1.3.3
access-list 1 deny
any

Copyright 2010 Internetwork Expert


- 220 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#
ip cef
!
ip vrf SW1-SW2
rd 100:1
route-target export 100:1
route-target import 100:1
!
mpls label protocol ldp
!
no mpls ldp advertise-labels
mpls ldp advertise-labels for 1
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip router isis
mpls ip
!
interface GigabitEthernet0/1
ip vrf forwarding SW1-SW2
ip address 10.1.68.6 255.255.255.0
!
router isis
net 00.0000.0000.0006.00
is-type level-2-only
!
router rip
!
address-family ipv4 vrf SW1-SW2
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
neighbor 150.1.3.3 remote-as 100
neighbor 150.1.3.3 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community extended
exit-address-family
!
address-family ipv4 vrf SW1-SW2
redistribute rip
exit-address-family
!
access-list 1 permit 150.1.6.6
access-list 1 permit 150.1.3.3
access-list 1 deny
any

Copyright 2010 Internetwork Expert


- 221 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
access-list 1 permit 150.1.6.6
access-list 1 permit 150.1.3.3
access-list 1 deny
any

Copyright 2010 Internetwork Expert


- 222 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
R1#show mpls forwarding-table
Local
tag
16
17
18
19
20
21
22
23

Outgoing
tag or VC
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
23

Prefix
or Tunnel Id
150.1.3.3/32
150.1.24.0/24
150.1.2.2/32
150.1.4.4/32
150.1.45.0/24
150.1.5.5/32
150.1.56.0/24
150.1.6.6/32

Bytes tag
switched
2605
0
0
0
0
0
0
67

Outgoing
interface
Se0/1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
0
0
0
54361
0
0
154

Outgoing
interface
Fa0/0
Fa0/0
Se0/0.1
Se0/0.1
Se0/0.1
Fa0/0
Fa0/0
Fa0/0

Next Hop

Bytes tag
switched
0
0
0
0
0
0
0
0
0
0
0

Outgoing
interface
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Se1/2
Et0/0

Next Hop

Bytes tag
switched
0
368
0
0
0
0
0
351

Outgoing
interface
Se0/0.1
Se0/0.1
Se0/0.1
Et0/0
Et0/0
Et0/0
Et0/0
Et0/0

Next Hop

point2point
point2point
point2point
point2point
point2point
point2point
point2point
point2point

R2#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23

Outgoing
tag or VC
Untagged
Untagged
Untagged
Untagged
16
Untagged
Untagged
17

Prefix
or Tunnel Id
150.1.4.4/32
150.1.45.0/24
150.1.1.1/32
150.1.13.0/24
150.1.3.3/32
150.1.5.5/32
150.1.56.0/24
150.1.6.6/32

150.1.24.4
150.1.24.4
point2point
point2point
point2point
150.1.24.4
150.1.24.4
150.1.24.4

R3#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23
24
27
28

Outgoing
tag or VC
Untagged
Untagged
Untagged
Untagged
Untagged
23
Untagged
Untagged
Untagged
Untagged
Aggregate

Prefix
or Tunnel Id
150.1.1.1/32
150.1.12.0/24
150.1.2.2/32
150.1.4.4/32
150.1.5.5/32
150.1.6.6/32
150.1.24.0/24
150.1.45.0/24
150.1.56.0/24
10.1.7.0/24[V]
10.1.37.0/24[V]

point2point
point2point
point2point
point2point
point2point
point2point
point2point
point2point
point2point
10.1.37.7

R4#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23

Outgoing
tag or VC
Untagged
16
Untagged
Untagged
Untagged
Untagged
Untagged
20

Prefix
or Tunnel Id
150.1.5.5/32
150.1.6.6/32
150.1.56.0/24
150.1.2.2/32
150.1.1.1/32
150.1.12.0/24
150.1.13.0/24
150.1.3.3/32

Copyright 2010 Internetwork Expert


- 223 -

point2point
point2point
point2point
150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2
150.1.24.2

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R5#show mpls forwarding-table


Local
tag
16
17
18
19
20
21
22
23

Outgoing
tag or VC
Pop tag
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
23

Prefix
or Tunnel Id
150.1.6.6/32
150.1.4.4/32
150.1.24.0/24
150.1.2.2/32
150.1.1.1/32
150.1.12.0/24
150.1.13.0/24
150.1.3.3/32

Bytes tag
switched
8532
0
0
0
0
0
0
418

Outgoing
interface
Et0/0
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1
Se0/0.1

Next Hop

Bytes tag
switched
0
0
0
0
0
0
0
0
0
0
0

Outgoing
interface
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/0
Gi0/1

Next Hop

150.1.56.6
point2point
point2point
point2point
point2point
point2point
point2point
point2point

R6#show mpls forwarding-table


Local
tag
16
17
18
19
22
23
24
25
26
27
28

Outgoing
tag or VC
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
Untagged
23
Untagged
Aggregate

Prefix
or Tunnel Id
150.1.5.5/32
150.1.4.4/32
150.1.45.0/24
150.1.24.0/24
150.1.2.2/32
150.1.1.1/32
150.1.12.0/24
150.1.13.0/24
150.1.3.3/32
10.1.8.0/24[V]
10.1.68.0/24[V]

Copyright 2010 Internetwork Expert


- 224 -

150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
150.1.56.5
10.1.68.8

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 225 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS Traffic Engineering Dynamic PE to PE Tunnels


Objective: Configure a dynamic MPLS Traffic Engineering tunnel between R3
and R4 with a 10Mbps guarantee to transport traffic between SW1
and SW2.
Fa0/3
.7

BGP
AS 1

10.1.37.0/24

SW1

BGP
AS 2

E0/0
R3

.3
.3

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

S0/0.2

Fa0/0

.2

OSPF
Area 0

.2

R2
205
Frame Relay

S0/0.1

.2

150.1.25.0/24

204
Frame Relay

502

150.1.24.0/24

402

.5

S0/0.2
S0/1
R5

.4

.5

S0/0.1

.4

S0/1

.4

R4

BGP
AS 1

E0/1

10.1.48.0/24

10.1.45.0/24

BGP
AS 3
.8

Fa0/4

Copyright 2010 Internetwork Expert


- 226 -

SW2

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


The Frame Relay links between R2 & R4 and R2 & R5 have a bandwidth
of DS3 (45Mbps)
The Point-to-Point links between R1 & R3 and R4 & R5 have a bandwidth
of OC3 (155Mbps)
Configure OSPF area 0 on the interfaces between R1, R2, R3, R4, and
R5
Create Loopbacks on R1, R2, R3, R4, and R5 in the format 150.1.Y.Y/32
and advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R3, R4, and R5
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R3 and SW1 should peer via EBGP
R4 and SW2 should peer via EBGP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into BGP
Enable support for MPLS TE tunnels on all transit interfaces in the MPLS
network
Enable RSVP support on all transit interfaces in the MPLS network
Configure an MPLS TE tunnel on R3 with R4s Loopback as the
destination
The path for this tunnel should be dynamically selected and have a priority
of one
Reserve 10Mbps through the MPLS network for this tunnel
Advertise the tunnel interface into OSPF
Configure an MPLS TE tunnel on R4 with R3s Loopback as the
destination
The path for this tunnel should be dynamically selected and have a priority
of one
Reserve 10Mbps through the MPLS network for this tunnel
Advertise the tunnel interface into OSPF

Final Configuration
R1#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
ip rsvp bandwidth 100000 100000

Copyright 2010 Internetwork Expert


- 227 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/1
bandwidth 155000
ip address 150.1.13.1 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
ip rsvp bandwidth 100000 100000
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
bandwidth 45000
ip address 150.1.24.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 204
ip rsvp bandwidth 45000 45000
!
interface Serial0/0.2 point-to-point
bandwidth 45000
ip address 150.1.25.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 205
ip rsvp bandwidth 45000 45000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
network 150.1.25.2 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 228 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#
ip cef
mpls traffic-eng tunnels
!
interface Tunnel0
ip unnumbered Loopback0
tunnel destination 150.1.4.4
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 10000
tunnel mpls traffic-eng path-option 1 dynamic
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
bandwidth 155000
ip address 150.1.13.3 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
clockrate 64000
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.37.7 remote-as 2
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
R4#
ip cef
mpls traffic-eng tunnels
!
interface Tunnel0
ip unnumbered Loopback0
tunnel destination 150.1.3.3
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 10000
tunnel mpls traffic-eng path-option 1 dynamic
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/1
ip address 10.1.48.4 255.255.255.0

Copyright 2010 Internetwork Expert


- 229 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
bandwidth 45000
ip address 150.1.24.4 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 402
ip rsvp bandwidth 45000 45000
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.4 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
no dce-terminal-timing-enable
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.48.8 remote-as 3
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
R5#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.2 point-to-point
bandwidth 45000
ip address 150.1.25.5 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 502
ip rsvp bandwidth 45000 45000
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.5 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
clockrate 64000

Copyright 2010 Internetwork Expert


- 230 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip rsvp bandwidth 155000 155000


!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.5.5 0.0.0.0 area 0
network 150.1.25.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 24
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
router bgp 2
network 10.1.7.0 mask 255.255.255.0
neighbor 10.1.37.3 remote-as 1
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/4
no switchport
ip address 10.1.48.8 255.255.255.0
!
router bgp 3
network 10.1.8.0 mask 255.255.255.0
neighbor 10.1.48.4 remote-as 1

Verification
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [20/0] via 10.1.37.3, 00:21:40
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3

Copyright 2010 Internetwork Expert


- 231 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
C
10.1.8.0 is directly connected, Loopback0
B
10.1.7.0 [20/0] via 10.1.48.4, 00:21:49
C
10.1.48.0 is directly connected, FastEthernet0/4
SW1#ping 10.1.8.8 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 88/88/88 ms
R3#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [200/0] via 150.1.4.4, 00:07:48
B
10.1.7.0 [20/0] via 10.1.37.7, 01:24:43
C
10.1.37.0 is directly connected, Ethernet0/0
150.1.0.0/16 is variably subnetted, 10 subnets, 2 masks
O
150.1.25.0/24 [110/4] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.24.0/24 [110/4] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.5.5/32 [110/5] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.4.4/32 [110/5] via 0.0.0.0, 00:07:50, Tunnel0
C
150.1.3.3/32 is directly connected, Loopback0
O
150.1.2.2/32 [110/3] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.1.1/32 [110/2] via 150.1.13.1, 00:07:50, Serial1/2
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/2] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.45.0/24 [110/5] via 150.1.13.1, 00:07:50, Serial1/2
[110/5] via 0.0.0.0, 00:07:50, Tunnel0
R4#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [20/0] via 10.1.48.8, 10:38:25
B
10.1.7.0 [200/0] via 150.1.3.3, 00:42:36
C
10.1.48.0 is directly connected, Ethernet0/1
150.1.0.0/16 is variably subnetted, 10 subnets, 2 masks
O
150.1.25.0/24 [110/3] via 150.1.45.5, 00:03:54, Serial0/1
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.5.5/32 [110/2] via 150.1.45.5, 00:03:54, Serial0/1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/5] via 0.0.0.0, 00:03:54, Tunnel0
O
150.1.2.2/32 [110/3] via 150.1.24.2, 00:03:54, Serial0/0.1
O
150.1.1.1/32 [110/4] via 150.1.24.2, 00:03:54, Serial0/0.1
O
150.1.13.0/24 [110/4] via 150.1.24.2, 00:03:54, Serial0/0.1
O
150.1.12.0/24 [110/3] via 150.1.24.2, 00:03:54, Serial0/0.1
C
150.1.45.0/24 is directly connected, Serial0/1

Copyright 2010 Internetwork Expert


- 232 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show mpls traffic-eng tunnels brief


Signalling Summary:
LSP Tunnels Process:
running
RSVP Process:
running
Forwarding:
enabled
Periodic reoptimization:
every 3600 seconds, next in 2579 seconds
Periodic auto-bw collection:
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R3_t0
150.1.4.4
Se1/2
up/up
R4_t0
150.1.3.3
Se1/2
up/up

R3#show mpls traffic-eng tunnels


Name: R3_t0
Status:
Admin: up

(Tunnel0) Destination: 150.1.4.4


Oper: up

Path: valid

Signalling: connected

path option 1, type dynamic (Basis for Setup, path weight 4)


Config Parameters:
Bandwidth: 10000
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 10000
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial1/2, 17
RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 0, Tun_Instance 15
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: 150.1.13.1 150.1.12.1 150.1.12.2 150.1.24.4
150.1.4.4
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
History:
Tunnel:
Time since created: 17 minutes, 1 seconds
Time since path change: 15 minutes, 14 seconds
Current LSP:
Uptime: 15 minutes, 14 seconds
LSP Tunnel R4_t0 is signalled, connection is up
InLabel : Serial1/2, implicit-null
OutLabel : RSVP Signalling Info:
Src 150.1.4.4, Dst 150.1.3.3, Tun_Id 0, Tun_Instance 16
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: NONE
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits

Copyright 2010 Internetwork Expert


- 233 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show mpls traffic-eng topology path tunnel0


Query Parameters:
Destination: 150.1.4.4
Bandwidth: 10000
Priorities: 1 (setup), 1 (hold)
Affinity: 0x0 (value), 0xFFFF (mask)
Query Results:
Min Bandwidth Along Path: 35000 (kbps)
Max Bandwidth Along Path: 145000 (kbps)
Hop 0: 150.1.13.3
: affinity 00000000, bandwidth
Hop 1: 150.1.12.1
: affinity 00000000, bandwidth
Hop 2: 150.1.12.2
: affinity 00000000, bandwidth
Hop 3: 150.1.24.2
: affinity 00000000, bandwidth
Hop 4: 150.1.4.4

145000 (kbps)
90000 (kbps)
90000 (kbps)
35000 (kbps)

R4#show mpls traffic-eng tunnels brief


Signalling Summary:
LSP Tunnels Process:
running
RSVP Process:
running
Forwarding:
enabled
Periodic reoptimization:
every 3600 seconds, next in 2514 seconds
Periodic auto-bw collection:
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R4_t0
150.1.3.3
Se0/0.1
up/up
R3_t0
150.1.4.4
Se0/0.1
up/up

R4#show mpls traffic-eng tunnels


Name: R4_t0
Status:
Admin: up

(Tunnel0) Destination: 150.1.3.3


Oper: up

Path: valid

Signalling: connected

path option 1, type dynamic (Basis for Setup, path weight 4)


Config Parameters:
Bandwidth: 10000
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 10000
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial0/0.1, 20
RSVP Signalling Info:
Src 150.1.4.4, Dst 150.1.3.3, Tun_Id 0, Tun_Instance 16
RSVP Path Info:
My Address: 150.1.4.4
Explicit Route: 150.1.24.2 150.1.12.2 150.1.12.1 150.1.13.3
150.1.3.3
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
History:
Tunnel:
Time since created: 18 minutes, 6 seconds
Time since path change: 15 minutes, 59 seconds
Current LSP:
Uptime: 15 minutes, 59 seconds

Copyright 2010 Internetwork Expert


- 234 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

LSP Tunnel R3_t0 is signalled, connection is up


InLabel : Serial0/0.1, implicit-null
OutLabel : RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 0, Tun_Instance 15
RSVP Path Info:
My Address: 150.1.4.4
Explicit Route: NONE
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits

R4#show mpls traffic-eng topology path tunnel0


Query Parameters:
Destination: 150.1.3.3
Bandwidth: 10000
Priorities: 1 (setup), 1 (hold)
Affinity: 0x0 (value), 0xFFFF (mask)
Query Results:
Min Bandwidth Along Path: 35000 (kbps)
Max Bandwidth Along Path: 145000 (kbps)
Hop 0: 150.1.24.4
: affinity 00000000, bandwidth
Hop 1: 150.1.12.2
: affinity 00000000, bandwidth
Hop 2: 150.1.12.1
: affinity 00000000, bandwidth
Hop 3: 150.1.13.1
: affinity 00000000, bandwidth
Hop 4: 150.1.3.3

Copyright 2010 Internetwork Expert


- 235 -

35000 (kbps)
90000 (kbps)
90000 (kbps)
145000 (kbps)

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS Traffic Engineering Explicit PE to PE Tunnels


Objective: Configure an explicit MPLS Traffic Engineering tunnel from R3 to R1,
R2, R5, R4 and back with a 10Mbps guarantee to transport traffic
between SW1 and SW2.
Fa0/3
.7

BGP
AS 1

10.1.37.0/24

SW1

BGP
AS 2

E0/0
R3

.3
.3

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

S0/0.2

Fa0/0

.2

OSPF
Area 0

.2

R2
205
Frame Relay

S0/0.1

.2

150.1.25.0/24

204
Frame Relay

502

150.1.24.0/24

402

.5

S0/0.2
S0/1
R5

.4

.5

S0/0.1

.4

S0/1

.4

R4

BGP
AS 1

E0/1

10.1.48.0/24

10.1.45.0/24

BGP
AS 3
.8

Fa0/4

Copyright 2010 Internetwork Expert


- 236 -

SW2

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


The Frame Relay links between R2 & R4 and R2 & R5 have a bandwidth
of DS3 (45Mbps)
The Point-to-Point links between R1 & R3 and R4 & R5 have a bandwidth
of OC3 (155Mbps)
Configure OSPF area 0 on the interfaces between R1, R2, R3, R4, and
R5
Create Loopbacks on R1, R2, R3, R4, and R5 in the format 150.1.Y.Y/32
and advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R3, R4, and R5
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R3 and SW1 should peer via EBGP
R4 and SW2 should peer via EBGP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into BGP
Enable support for MPLS TE tunnels on all transit interfaces in the MPLS
network
Enable RSVP support on all transit interfaces in the MPLS network
Configure an MPLS TE tunnel on R3 with R4s Loopback as the
destination
The path for this tunnel should be explicitly defined with a path from R3 to
R1, R2, R5, and R4
Reserve 10Mbps through the MPLS network for this tunnel
Advertise the tunnel interface into OSPF
Configure an MPLS TE tunnel on R4 with R3s Loopback as the
destination
The path for this tunnel should be explicitly defined with a path from R4 to
R5, R2, R1, and R3
Reserve 10Mbps through the MPLS network for this tunnel
Advertise the tunnel interface into OSPF

Final Configuration
R1#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
ip rsvp bandwidth 100000 100000

Copyright 2010 Internetwork Expert


- 237 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/1
bandwidth 155000
ip address 150.1.13.1 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
ip rsvp bandwidth 100000 100000
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
bandwidth 45000
ip address 150.1.24.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 204
ip rsvp bandwidth 45000 45000
!
interface Serial0/0.2 point-to-point
bandwidth 45000
ip address 150.1.25.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 205
ip rsvp bandwidth 45000 45000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
network 150.1.25.2 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 238 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#
ip cef
mpls traffic-eng tunnels
!
interface Tunnel0
ip unnumbered Loopback0
tunnel destination 150.1.4.4
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 10000
tunnel mpls traffic-eng path-option 1 explicit name R1_R2_R5_R4
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
bandwidth 155000
ip address 150.1.13.3 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
clockrate 64000
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.37.7 remote-as 2
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
ip explicit-path name R1_R2_R5_R4 enable
next-address 150.1.13.1
next-address 150.1.12.2
next-address 150.1.25.5
next-address 150.1.45.4
next-address 150.1.4.4
R4#
ip cef
mpls traffic-eng tunnels
!
interface Tunnel0
ip unnumbered Loopback0
tunnel destination 150.1.3.3
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 10000

Copyright 2010 Internetwork Expert


- 239 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

tunnel mpls traffic-eng path-option 1 explicit name R5_R2_R1_R3


!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/1
ip address 10.1.48.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
bandwidth 45000
ip address 150.1.24.4 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 402
ip rsvp bandwidth 45000 45000
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.4 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
no dce-terminal-timing-enable
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.48.8 remote-as 3
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
ip explicit-path name R5_R2_R1_R3 enable
next-address 150.1.45.5
next-address 150.1.25.2
next-address 150.1.12.1
next-address 150.1.13.3
next-address 150.1.3.3
R5#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert


- 240 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.2 point-to-point


bandwidth 45000
ip address 150.1.25.5 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 502
ip rsvp bandwidth 45000 45000
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.5 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
clockrate 64000
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.5.5 0.0.0.0 area 0
network 150.1.25.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
!
interface FastEthernet0/2
switchport access vlan 12
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
router bgp 2
network 10.1.7.0 mask 255.255.255.0
neighbor 10.1.37.3 remote-as 1
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/4
no switchport
ip address 10.1.48.8 255.255.255.0
!
router bgp 3
network 10.1.8.0 mask 255.255.255.0
neighbor 10.1.48.4 remote-as 1

Copyright 2010 Internetwork Expert


- 241 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [20/0] via 10.1.37.3, 00:21:40
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3
SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
C
10.1.8.0 is directly connected, Loopback0
B
10.1.7.0 [20/0] via 10.1.48.4, 00:21:49
C
10.1.48.0 is directly connected, FastEthernet0/4
SW1#ping 10.1.8.8 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 88/88/88 ms
R3#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [200/0] via 150.1.4.4, 00:07:48
B
10.1.7.0 [20/0] via 10.1.37.7, 01:24:43
C
10.1.37.0 is directly connected, Ethernet0/0
150.1.0.0/16 is variably subnetted, 10 subnets, 2 masks
O
150.1.25.0/24 [110/4] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.24.0/24 [110/4] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.5.5/32 [110/5] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.4.4/32 [110/5] via 0.0.0.0, 00:07:50, Tunnel0
C
150.1.3.3/32 is directly connected, Loopback0
O
150.1.2.2/32 [110/3] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.1.1/32 [110/2] via 150.1.13.1, 00:07:50, Serial1/2
C
150.1.13.0/24 is directly connected, Serial1/2
O
150.1.12.0/24 [110/2] via 150.1.13.1, 00:07:50, Serial1/2
O
150.1.45.0/24 [110/5] via 150.1.13.1, 00:07:50, Serial1/2
[110/5] via 0.0.0.0, 00:07:50, Tunnel0
R4#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [20/0] via 10.1.48.8, 10:38:25
B
10.1.7.0 [200/0] via 150.1.3.3, 00:42:36
C
10.1.48.0 is directly connected, Ethernet0/1
150.1.0.0/16 is variably subnetted, 10 subnets, 2 masks
O
150.1.25.0/24 [110/3] via 150.1.45.5, 00:03:54, Serial0/1
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.5.5/32 [110/2] via 150.1.45.5, 00:03:54, Serial0/1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/5] via 0.0.0.0, 00:03:54, Tunnel0
O
150.1.2.2/32 [110/3] via 150.1.24.2, 00:03:54, Serial0/0.1

Copyright 2010 Internetwork Expert


- 242 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


O
O
O
C

Version 1.0

150.1.1.1/32 [110/4] via 150.1.24.2, 00:03:54, Serial0/0.1


150.1.13.0/24 [110/4] via 150.1.24.2, 00:03:54, Serial0/0.1
150.1.12.0/24 [110/3] via 150.1.24.2, 00:03:54, Serial0/0.1
150.1.45.0/24 is directly connected, Serial0/1

R3#show mpls traffic-eng tunnels brief


Signalling Summary:
LSP Tunnels Process:
running
RSVP Process:
running
Forwarding:
enabled
Periodic reoptimization:
every 3600 seconds, next in 2089 seconds
Periodic auto-bw collection:
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R3_t0
150.1.4.4
Se1/2
up/up
R4_t0
150.1.3.3
Se1/2
up/up

R3#show mpls traffic-eng tunnels


Name: R3_t0
Status:
Admin: up

(Tunnel0) Destination: 150.1.4.4


Oper: up

Path: valid

Signalling: connected

path option 1, type explicit R1_R2_R5_R4 (Basis for Setup, path weight 5)
Config Parameters:
Bandwidth: 10000
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 10000
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial1/2, 23
RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 0, Tun_Instance 1
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: 150.1.13.1 150.1.12.1 150.1.12.2 150.1.25.5
150.1.45.4 150.1.4.4
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
History:
Tunnel:
Time since created: 7 minutes, 52 seconds
Time since path change: 7 minutes, 51 seconds
Current LSP:
Uptime: 7 minutes, 51 seconds
LSP Tunnel R4_t0 is signalled, connection is up
InLabel : Serial1/2, implicit-null
OutLabel : RSVP Signalling Info:
Src 150.1.4.4, Dst 150.1.3.3, Tun_Id 0, Tun_Instance 1
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: NONE
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:

Copyright 2010 Internetwork Expert


- 243 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Record Route: NONE


Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits

R4#show mpls traffic-eng tunnels brief


Signalling Summary:
LSP Tunnels Process:
running
RSVP Process:
running
Forwarding:
enabled
Periodic reoptimization:
every 3600 seconds, next in 402 seconds
Periodic auto-bw collection:
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R4_t0
150.1.3.3
Se0/1
up/up
R3_t0
150.1.4.4
Se0/1
up/up
Displayed 1 (of 1) heads, 0 (of 0) midpoints, 1 (of 1) tails

R4#show mpls traffic-eng tunnels


Name: R4_t0
Status:
Admin: up

(Tunnel0) Destination: 150.1.3.3


Oper: up

Path: valid

Signalling: connected

path option 1, type explicit R5_R2_R1_R3 (Basis for Setup, path weight 5)
Config Parameters:
Bandwidth: 10000
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 10000
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial0/1, 24
RSVP Signalling Info:
Src 150.1.4.4, Dst 150.1.3.3, Tun_Id 0, Tun_Instance 1
RSVP Path Info:
My Address: 150.1.4.4
Explicit Route: 150.1.45.5 150.1.25.2 150.1.12.2 150.1.12.1
150.1.13.3 150.1.3.3
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
History:
Tunnel:
Time since created: 3 minutes, 56 seconds
Time since path change: 3 minutes, 55 seconds
Current LSP:
Uptime: 3 minutes, 55 seconds
LSP Tunnel R3_t0 is signalled, connection is up
InLabel : Serial0/1, implicit-null
OutLabel : RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 0, Tun_Instance 1
RSVP Path Info:
My Address: 150.1.4.4
Explicit Route: NONE
Record Route: NONE
Tspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=10000 kbits, burst=1000 bytes, peak rate=10000 kbits

Copyright 2010 Internetwork Expert


- 244 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 245 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS Traffic Engineering Unequal Cost Load Balancing


Objective: Configure two MPLS Traffic Engineering Tunnels with a total
guarantee of 10Mbps between R3 and R4 to transport traffic between
SW1 and SW2. One-third of the traffic between these devices should
transit R5.
Fa0/3
.7

BGP
AS 1

10.1.37.0/24

SW1

BGP
AS 2

E0/0
R3

.3
.3

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

S0/0.2

Fa0/0

.2

OSPF
Area 0

.2

R2
205
Frame Relay

S0/0.1

.2

150.1.25.0/24

204
Frame Relay

502

150.1.24.0/24

402

.5

S0/0.2
S0/1
R5

.4

.5

S0/0.1

.4

S0/1

.4

R4

BGP
AS 1

E0/1

10.1.48.0/24

10.1.45.0/24

BGP
AS 3
.8

Fa0/4

Copyright 2010 Internetwork Expert


- 246 -

SW2

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


The Frame Relay links between R2 & R4 and R2 & R5 have a bandwidth
of DS3 (45Mbps)
The Point-to-Point links between R1 & R3 and R4 & R5 have a bandwidth
of OC3 (155Mbps)
Configure OSPF area 0 on the interfaces between R1, R2, R3, R4, and
R5
Create Loopbacks on R1, R2, R3, R4, and R5 in the format 150.1.Y.Y/32
and advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R3, R4, and R5
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
R3 and SW1 should peer via EBGP
R4 and SW2 should peer via EBGP
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into BGP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into BGP
Enable support for MPLS TE tunnels on all transit interfaces in the MPLS
network
Enable RSVP support on all transit interfaces in the MPLS network
Configure two MPLS TE tunnels on R3 with R4s Loopback as the
destination
One tunnel should be explicitly defined with a path from R3 to R1, R2, R5,
and R4; the others path should be dynamically selected
Reserve 6667Kbps through the dynamic tunnel and 3333Kbps through the
static tunnel
Advertise both of the tunnel interfaces into OSPF
Configure two MPLS TE tunnels on R4 with R3s Loopback as the
destination
One tunnel should be explicitly defined with a path from R4 to R2, R5, R1,
and R3; the others path should be dynamically selected
Reserve 6667Kbps through the dynamic tunnel and 3333Kbps through the
static tunnel
Advertise both of the tunnel interfaces into OSPF

Final Configuration
R1#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
mpls traffic-eng tunnels

Copyright 2010 Internetwork Expert


- 247 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

tag-switching ip
ip rsvp bandwidth 100000 100000
!
interface Serial0/1
bandwidth 155000
ip address 150.1.13.1 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
ip rsvp bandwidth 100000 100000
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
bandwidth 45000
ip address 150.1.24.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 204
ip rsvp bandwidth 45000 45000
!
interface Serial0/0.2 point-to-point
bandwidth 45000
ip address 150.1.25.2 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 205
ip rsvp bandwidth 45000 45000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
network 150.1.25.2 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 248 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#
ip cef
mpls traffic-eng tunnels
!
interface Tunnel0
ip unnumbered Loopback0
tunnel destination 150.1.4.4
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 6667
tunnel mpls traffic-eng path-option 1 dynamic
!
interface Tunnel1
ip unnumbered Loopback0
tunnel destination 150.1.4.4
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 3333
tunnel mpls traffic-eng path-option 1 explicit name R1_R2_R5_R4
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
!
interface Serial1/2
bandwidth 155000
ip address 150.1.13.3 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
clockrate 64000
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router bgp 1
neighbor 10.1.37.7 remote-as 2
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
ip explicit-path name R1_R2_R5_R4 enable
next-address 150.1.13.1
next-address 150.1.12.2
next-address 150.1.25.5
next-address 150.1.45.4
next-address 150.1.4.4

Copyright 2010 Internetwork Expert


- 249 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#
ip cef
mpls traffic-eng tunnels
!
interface Tunnel0
ip unnumbered Loopback0
tunnel destination 150.1.3.3
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 6667
tunnel mpls traffic-eng path-option 1 dynamic
!
interface Tunnel1
ip unnumbered Loopback0
tunnel destination 150.1.3.3
tunnel mode mpls traffic-eng
tunnel mpls traffic-eng autoroute announce
tunnel mpls traffic-eng priority 1 1
tunnel mpls traffic-eng bandwidth 3333
tunnel mpls traffic-eng path-option 1 explicit name R5_R2_R1_R3
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/1
ip address 10.1.48.4 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
bandwidth 45000
ip address 150.1.24.4 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 402
ip rsvp bandwidth 45000 45000
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.4 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
no dce-terminal-timing-enable
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!

Copyright 2010 Internetwork Expert


- 250 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router bgp 1
neighbor 10.1.48.8 remote-as 3
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
ip explicit-path name R5_R2_R1_R3 enable
next-address 150.1.45.5
next-address 150.1.25.2
next-address 150.1.12.1
next-address 150.1.13.3
next-address 150.1.3.3
R5#
ip cef
mpls traffic-eng tunnels
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.2 point-to-point
bandwidth 45000
ip address 150.1.25.5 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
frame-relay interface-dlci 502
ip rsvp bandwidth 45000 45000
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.5 255.255.255.0
mpls traffic-eng tunnels
tag-switching ip
clockrate 64000
ip rsvp bandwidth 155000 155000
!
router ospf 1
mpls traffic-eng router-id Loopback0
mpls traffic-eng area 0
network 150.1.5.5 0.0.0.0 area 0
network 150.1.25.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 24
!
interface FastEthernet0/2
switchport access vlan 24

Copyright 2010 Internetwork Expert


- 251 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
router bgp 2
network 10.1.7.0 mask 255.255.255.0
neighbor 10.1.37.3 remote-as 1
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/4
no switchport
ip address 10.1.48.8 255.255.255.0
!
router bgp 3
network 10.1.8.0 mask 255.255.255.0
neighbor 10.1.48.4 remote-as 1

Verification
SW1#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [20/0] via 10.1.37.3, 00:21:40
C
10.1.7.0 is directly connected, Loopback0
C
10.1.37.0 is directly connected, FastEthernet0/3
SW2#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
C
10.1.8.0 is directly connected, Loopback0
B
10.1.7.0 [20/0] via 10.1.48.4, 00:21:49
C
10.1.48.0 is directly connected, FastEthernet0/4
SW1#ping 10.1.8.8 source 10.1.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 88/88/88 ms
R3#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [200/0] via 150.1.4.4, 00:01:52
B
10.1.7.0 [20/0] via 10.1.37.7, 01:57:07
C
10.1.37.0 is directly connected, Ethernet0/0
150.1.0.0/16 is variably subnetted, 10 subnets, 2 masks
O
150.1.25.0/24 [110/4] via 150.1.13.1, 00:00:29, Serial1/2

Copyright 2010 Internetwork Expert


- 252 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


O
O
O
C
O
O
C
O
O

Version 1.0

150.1.24.0/24 [110/4] via 150.1.13.1, 00:00:29, Serial1/2


150.1.5.5/32 [110/5] via 150.1.13.1, 00:00:29, Serial1/2
150.1.4.4/32 [110/5] via 0.0.0.0, 00:00:29, Tunnel0
[110/5] via 0.0.0.0, 00:00:30, Tunnel1
150.1.3.3/32 is directly connected, Loopback0
150.1.2.2/32 [110/3] via 150.1.13.1, 00:00:30, Serial1/2
150.1.1.1/32 [110/2] via 150.1.13.1, 00:00:30, Serial1/2
150.1.13.0/24 is directly connected, Serial1/2
150.1.12.0/24 [110/2] via 150.1.13.1, 00:00:30, Serial1/2
150.1.45.0/24 [110/5] via 150.1.13.1, 00:00:30, Serial1/2
[110/5] via 0.0.0.0, 00:00:30, Tunnel0
[110/5] via 0.0.0.0, 00:00:30, Tunnel1

R3#show ip route 150.1.4.4


Routing entry for 150.1.4.4/32
Known via "ospf 1", distance 110, metric 5, type intra area
Routing Descriptor Blocks:
* directly connected, via Tunnel0
Route metric is 5, traffic share count is 2
directly connected, via Tunnel1
Route metric is 5, traffic share count is 1
R4#show ip route
<output omitted>
10.0.0.0/24 is subnetted, 3 subnets
B
10.1.8.0 [20/0] via 10.1.48.8, 01:48:32
B
10.1.7.0 [200/0] via 150.1.3.3, 01:56:18
C
10.1.48.0 is directly connected, Ethernet0/1
150.1.0.0/16 is variably subnetted, 10 subnets, 2 masks
O
150.1.25.0/24 [110/3] via 150.1.45.5, 00:00:21, Serial0/1
C
150.1.24.0/24 is directly connected, Serial0/0.1
O
150.1.5.5/32 [110/2] via 150.1.45.5, 00:00:21, Serial0/1
C
150.1.4.4/32 is directly connected, Loopback0
O
150.1.3.3/32 [110/5] via 0.0.0.0, 00:00:22, Tunnel0
[110/5] via 0.0.0.0, 00:00:22, Tunnel1
O
150.1.2.2/32 [110/3] via 150.1.24.2, 00:00:22, Serial0/0.1
O
150.1.1.1/32 [110/4] via 150.1.24.2, 00:00:22, Serial0/0.1
O
150.1.13.0/24 [110/4] via 150.1.24.2, 00:00:22, Serial0/0.1
O
150.1.12.0/24 [110/3] via 150.1.24.2, 00:00:22, Serial0/0.1
C
150.1.45.0/24 is directly connected, Serial0/1
R4#show ip route 150.1.3.3
Routing entry for 150.1.3.3/32
Known via "ospf 1", distance 110, metric 5, type intra area
Routing Descriptor Blocks:
* directly connected, via Tunnel0
Route metric is 5, traffic share count is 2
directly connected, via Tunnel1
Route metric is 5, traffic share count is 1

Copyright 2010 Internetwork Expert


- 253 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show mpls traffic-eng tunnels brief


Signalling Summary:
LSP Tunnels Process:
running
RSVP Process:
running
Forwarding:
enabled
Periodic reoptimization:
every 3600 seconds, next in 1955 seconds
Periodic auto-bw collection:
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R3_t0
150.1.4.4
Se1/2
up/up
R3_t1
150.1.4.4
Se1/2
up/up
R4_t0
150.1.3.3
Se1/2
up/up
R4_t1
150.1.3.3
Se1/2
up/up
Displayed 2 (of 2) heads, 0 (of 0) midpoints, 2 (of 2) tails

R3#show mpls traffic-eng tunnels


Name: R3_t0
Status:
Admin: up

(Tunnel0) Destination: 150.1.4.4


Oper: up

Path: valid

Signalling: connected

path option 1, type dynamic (Basis for Setup, path weight 4)


Config Parameters:
Bandwidth: 6667
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 6667
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial1/2, 20
RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 0, Tun_Instance 5
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: 150.1.13.1 150.1.12.1 150.1.12.2 150.1.24.4
150.1.4.4
Record Route: NONE
Tspec: ave rate=6667 kbits, burst=1000 bytes, peak rate=6667 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=6667 kbits, burst=1000 bytes, peak rate=6667 kbits
History:
Tunnel:
Time since created: 27 minutes, 24 seconds
Time since path change: 25 minutes, 39 seconds
Current LSP:
Uptime: 25 minutes, 39 seconds
Name: R3_t1
Status:
Admin: up

(Tunnel1) Destination: 150.1.4.4


Oper: up

Path: valid

Signalling: connected

path option 1, type explicit R1_R2_R5_R4 (Basis for Setup, path weight 5)
Config Parameters:
Bandwidth: 3333
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 3333
bw-based
auto-bw: disabled

Copyright 2010 Internetwork Expert


- 254 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

InLabel : OutLabel : Serial1/2, 25


RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 1, Tun_Instance 16
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: 150.1.13.1 150.1.12.1 150.1.12.2 150.1.25.5
150.1.45.4 150.1.4.4
Record Route: NONE
Tspec: ave rate=3333 kbits, burst=1000 bytes, peak rate=3333 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=3333 kbits, burst=1000 bytes, peak rate=3333 kbits
History:
Tunnel:
Time since created: 27 minutes, 24 seconds
Time since path change: 25 minutes, 3 seconds
Current LSP:
Uptime: 25 minutes, 3 seconds
LSP Tunnel R4_t0 is signalled, connection is up
InLabel : Serial1/2, implicit-null
OutLabel : RSVP Signalling Info:
Src 150.1.4.4, Dst 150.1.3.3, Tun_Id 0, Tun_Instance 10
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: NONE
Record Route: NONE
Tspec: ave rate=6667 kbits, burst=1000 bytes, peak rate=6667 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=6667 kbits, burst=1000 bytes, peak rate=6667 kbits
LSP Tunnel R4_t1 is signalled, connection is up
InLabel : Serial1/2, implicit-null
OutLabel : RSVP Signalling Info:
Src 150.1.4.4, Dst 150.1.3.3, Tun_Id 1, Tun_Instance 13
RSVP Path Info:
My Address: 150.1.3.3
Explicit Route: NONE
Record Route: NONE
Tspec: ave rate=3333 kbits, burst=1000 bytes, peak rate=3333 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=3333 kbits, burst=1000 bytes, peak rate=3333 kbits

R4#show mpls traffic-eng tunnels brief


Signalling Summary:
LSP Tunnels Process:
running
RSVP Process:
running
Forwarding:
enabled
Periodic reoptimization:
every 3600 seconds, next in 1978 seconds
Periodic auto-bw collection:
disabled
TUNNEL NAME
DESTINATION
UP IF
DOWN IF
STATE/PROT
R4_t0
150.1.3.3
Se0/0.1
up/up
R4_t1
150.1.3.3
Se0/1
up/up
R3_t0
150.1.4.4
Se0/0.1
up/up
R3_t1
150.1.4.4
Se0/1
up/up
Displayed 2 (of 2) heads, 0 (of 0) midpoints, 2 (of 2) tails

Copyright 2010 Internetwork Expert


- 255 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show mpls traffic-eng tunnels


Name: R4_t0
Status:
Admin: up

(Tunnel0) Destination: 150.1.3.3


Oper: up

Path: valid

Signalling: connected

path option 1, type dynamic (Basis for Setup, path weight 4)


Config Parameters:
Bandwidth: 6667
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 6667
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial0/0.1, 16
RSVP Signalling Info:
Src 150.1.4.4, Dst 150.1.3.3, Tun_Id 0, Tun_Instance 10
RSVP Path Info:
My Address: 150.1.4.4
Explicit Route: 150.1.24.2 150.1.12.2 150.1.12.1 150.1.13.3
150.1.3.3
Record Route: NONE
Tspec: ave rate=6667 kbits, burst=1000 bytes, peak rate=6667 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=6667 kbits, burst=1000 bytes, peak rate=6667 kbits
History:
Tunnel:
Time since created: 27 minutes
Time since path change: 9 minutes, 21 seconds
Current LSP:
Uptime: 9 minutes, 21 seconds
Prior LSP:
ID: path option 1 [9]
Removal Trigger: tunnel shutdown
Name: R4_t1
Status:
Admin: up

(Tunnel1) Destination: 150.1.3.3


Oper: up

Path: valid

Signalling: connected

path option 1, type explicit R5_R2_R1_R3 (Basis for Setup, path weight 5)
Config Parameters:
Bandwidth: 3333
kbps (Global) Priority: 1 1
Affinity: 0x0/0xFFFF
Metric Type: TE (default)
AutoRoute: enabled
LockDown: disabled Loadshare: 3333
bw-based
auto-bw: disabled
InLabel : OutLabel : Serial0/1, 24
RSVP Signalling Info:
Src 150.1.4.4, Dst 150.1.3.3, Tun_Id 1, Tun_Instance 13
RSVP Path Info:
My Address: 150.1.4.4
Explicit Route: 150.1.45.5 150.1.25.2 150.1.12.2 150.1.12.1
150.1.13.3 150.1.3.3
Record Route: NONE
Tspec: ave rate=3333 kbits, burst=1000 bytes, peak rate=3333 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=3333 kbits, burst=1000 bytes, peak rate=3333 kbits
History:

Copyright 2010 Internetwork Expert


- 256 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Tunnel:
Time since created: 27 minutes
Time since path change: 9 minutes, 18 seconds
Current LSP:
Uptime: 9 minutes, 18 seconds
Prior LSP:
ID: path option 1 [12]
Removal Trigger: tunnel shutdown
LSP Tunnel R3_t0 is signalled, connection is up
InLabel : Serial0/0.1, implicit-null
OutLabel : RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 0, Tun_Instance 5
RSVP Path Info:
My Address: 150.1.4.4
Explicit Route: NONE
Record Route: NONE
Tspec: ave rate=6667 kbits, burst=1000 bytes, peak rate=6667 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=6667 kbits, burst=1000 bytes, peak rate=6667 kbits
LSP Tunnel R3_t1 is signalled, connection is up
InLabel : Serial0/1, implicit-null
OutLabel : RSVP Signalling Info:
Src 150.1.3.3, Dst 150.1.4.4, Tun_Id 1, Tun_Instance 16
RSVP Path Info:
My Address: 150.1.4.4
Explicit Route: NONE
Record Route: NONE
Tspec: ave rate=3333 kbits, burst=1000 bytes, peak rate=3333 kbits
RSVP Resv Info:
Record Route: NONE
Fspec: ave rate=3333 kbits, burst=1000 bytes, peak rate=3333 kbits

Copyright 2010 Internetwork Expert


- 257 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

MPLS QoS
Objective: Configure the MPLS network so that all VoIP traffic between SW1
and SW2 is guaranteed 640Kbps of priority throughout the provider
network even if the link between R2 and R4 is down.
Fa0/3
.7

RIPv2

BGP
AS 1

10.1.37.0/24

SW1

E0/0
R3

.3
.3

.3

S1/2
150.1.13.0/24

S0/1

.1

R1
Fa0/0 .1
150.1.12.0/24 VLAN 12

S0/0.2

Fa0/0

.2

OSPF
Area 0

.2

R2
205
Frame Relay

S0/0.1

.2

150.1.25.0/24

204
Frame Relay

502

150.1.24.0/24

402

.5

S0/0.2
S0/1
R5

S0/0.1

.4

.5
.4

S0/1

.4

R4

BGP
AS 1

E0/1

10.1.48.0/24

10.1.45.0/24

RIPv2
.8

Fa0/4
Copyright 2010 Internetwork Expert
- 258 -

SW2
www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, R4, and
R5
Create Loopbacks on R1, R2, R3, R4, and R5 in the format 150.1.Y.Y/32
and advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R3, R4, and R5
R3 and R4 should peer via iBGP in AS 1 using their Loopback interfaces
Configure SW1 and SW2 to be in VRF SW1-SW2
This VRF should use the route distinguisher and target 1:100
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R4 & SW4
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIP
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIP
Configure R3 and R4 so that all VoIP traffic received from SW1 and SW2
is marked with a qos-group of 5
Assume that VoIP traffic uses UDP destination ports in the range of
16384-32767 and has a DSCP value of EF
All other traffic received from SW1 and SW2 should be marked with a qosgroup of 1
Traffic from qos-group 5 on R3 and R4 should be mapped to MPLS EXP 5
throughout the provider network
This traffic should be guaranteed a maximum of 640Kbps of priority as it
transits the provider network
Traffic from qos-group 1 on R3 and R4 should be mapped to MPLS EXP 1
throughout the provider network
This traffic should be guaranteed a minimum bandwidth of 1Mbps and
should use WRED as a congestion avoidance mechanism throughout the
provider network
Assume that the Frame Relay links throughout the provider network are all
DS3 (45Mbps) and the back to back Serial links are OC3 (155Mbps)

Final Configuration
R1#
ip cef
!
class-map match-all MPLS_EXP_5
match mpls experimental topmost 5
class-map match-all MPLS_EXP_1
match mpls experimental topmost 1
!
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect

Copyright 2010 Internetwork Expert


- 259 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

policy-map TO_PE
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.12.1 255.255.255.0
service-policy output TO_P
tag-switching ip
!
interface Serial0/1
bandwidth 155000
ip address 150.1.13.1 255.255.255.0
service-policy output TO_PE
tag-switching ip
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
R2#
ip cef
!
class-map match-all MPLS_EXP_5
match mpls experimental topmost 5
class-map match-all MPLS_EXP_1
match mpls experimental topmost 1
!
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
policy-map TO_PE
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.12.2 255.255.255.0
service-policy output TO_P
tag-switching ip
!

Copyright 2010 Internetwork Expert


- 260 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0
bandwidth 45000
service-policy output TO_PE
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.24.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 204
!
interface Serial0/0.2 point-to-point
ip address 150.1.25.2 255.255.255.0
tag-switching ip
frame-relay interface-dlci 205
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
network 150.1.25.2 0.0.0.0 area 0
R3#
ip cef
!
ip vrf SW1-SW2
rd 1:100
route-target export 1:100
route-target import 1:100
!
class-map match-all VoIP
match access-group name VoIP
class-map match-all QOS_GROUP_1
match qos-group 1
class-map match-all QOS_GROUP_5
match qos-group 5
class-map match-all MPLS_EXP_5
match mpls experimental topmost 5
class-map match-all MPLS_EXP_1
match mpls experimental topmost 1
!
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
policy-map FROM_P
class MPLS_EXP_5
set qos-group 5
class MPLS_EXP_1
set qos-group 1
policy-map TO_CE
class QOS_GROUP_5
priority 640
class QOS_GROUP_1
bandwidth 1000
random-detect

Copyright 2010 Internetwork Expert


- 261 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

policy-map FROM_CE
class VoIP
set qos-group 5
set mpls experimental imposition 5
class class-default
set qos-group 1
set mpls experimental imposition 1
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip vrf forwarding SW1-SW2
ip address 10.1.37.3 255.255.255.0
service-policy input FROM_CE
service-policy output TO_CE
!
interface Serial1/2
bandwidth 155000
ip address 150.1.13.3 255.255.255.0
tag-switching ip
clockrate 64000
service-policy input FROM_P
service-policy output TO_P
!
router ospf 1
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf SW1-SW2
redistribute bgp 1 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.4.4 remote-as 1
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 next-hop-self
!
address-family vpnv4
neighbor 150.1.4.4 activate
neighbor 150.1.4.4 send-community both
exit-address-family
!
address-family ipv4 vrf SW1-SW2
redistribute rip
exit-address-family
!
ip access-list extended VoIP
permit udp any any range 16384 32767 dscp ef

Copyright 2010 Internetwork Expert


- 262 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#
ip cef
!
ip vrf SW1-SW2
rd 1:100
route-target export 1:100
route-target import 1:100
!
class-map match-all VoIP
match access-group name VoIP
class-map match-all QOS_GROUP_1
match qos-group 1
class-map match-all QOS_GROUP_5
match qos-group 5
class-map match-all MPLS_EXP_5
match mpls experimental topmost 5
class-map match-all MPLS_EXP_1
match mpls experimental topmost 1
!
!
policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
policy-map FROM_P
class MPLS_EXP_5
set qos-group 5
class MPLS_EXP_1
set qos-group 1
policy-map TO_CE
class QOS_GROUP_5
priority 640
class QOS_GROUP_1
bandwidth 1000
random-detect
policy-map FROM_CE
class VoIP
set qos-group 5
set mpls experimental imposition 5
class class-default
set qos-group 1
set mpls experimental imposition 1
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Serial0/0
bandwidth 45000
encapsulation frame-relay
frame-relay lmi-type cisco
service-policy input FROM_P
service-policy output TO_P
!

Copyright 2010 Internetwork Expert


- 263 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.24.4 255.255.255.0
tag-switching ip
frame-relay interface-dlci 402
!
interface Ethernet0/1
ip vrf forwarding SW1-SW2
ip address 10.1.48.4 255.255.255.0
service-policy input FROM_CE
service-policy output TO_CE
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.4 255.255.255.0
tag-switching ip
service-policy input FROM_P
service-policy output TO_P
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
router rip
!
address-family ipv4 vrf SW1-SW2
redistribute bgp 1 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 1
neighbor 150.1.3.3 remote-as 1
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 next-hop-self
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community both
exit-address-family
!
address-family ipv4 vrf SW1-SW2
redistribute rip
exit-address-family
!
ip access-list extended VoIP
permit udp any any range 16384 32767 dscp ef
R5#
ip cef
!
class-map match-all MPLS_EXP_5
match mpls experimental topmost 5
class-map match-all MPLS_EXP_1
match mpls experimental topmost 1
!

Copyright 2010 Internetwork Expert


- 264 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

policy-map TO_P
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
policy-map TO_PE
class MPLS_EXP_5
priority 640
class MPLS_EXP_1
bandwidth 1000
random-detect
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Serial0/0
bandwidth 45000
encapsulation frame-relay
service-policy output TO_P
!
interface Serial0/0.2 point-to-point
ip address 150.1.25.5 255.255.255.0
tag-switching ip
frame-relay interface-dlci 502
!
interface Serial0/1
bandwidth 155000
ip address 150.1.45.5 255.255.255.0
tag-switching ip
clockrate 64000
service-policy output TO_PE
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.25.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/1
switchport access vlan 12
switchport mode dynamic desirable
!
interface FastEthernet0/2
switchport access vlan 12
switchport mode dynamic desirable
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!

Copyright 2010 Internetwork Expert


- 265 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router rip
version 2
network 10.0.0.0
no auto-summary
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/4
no switchport
ip address 10.1.48.8 255.255.255.0
!
router rip
version 2
network 10.0.0.0
no auto-summary

Verification
Generate UDP traffic to simulate VoIP stream on SW1:
SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)# type udpEcho dest-ipaddr 10.1.8.8 dest-port 20000
source-ipaddr 10.1.7.7 control disable
SW1(config-rtr-udp)# tos 184
SW1(config-rtr-udp)# timeout 0
SW1(config-rtr-udp)# frequency 1
SW1(config-rtr-udp)#rtr schedule 1 life 10 start-time now
SW1(config)#end
SW1#
Generate ICMP traffic to simulate other traffic on SW1:
SW1#ping 10.1.8.8 source 10.1.7.7 repeat 20
Type escape sequence to abort.
Sending 20, 100-byte ICMP Echos to 10.1.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.1.7.7
!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (20/20), round-trip min/avg/max = 88/91/92 ms

R4#sh policy-map int e0/1 out


Ethernet0/1
Service-policy output: TO_CE
Class-map: QOS_GROUP_5 (match-all)
10 packets, 580 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: qos-group 5
Queueing
Strict Priority

Copyright 2010 Internetwork Expert


- 266 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Output Queue: Conversation 264


Bandwidth 640 (kbps) Burst 16000 (Bytes)
(pkts matched/bytes matched) 0/0
(total drops/bytes drops) 0/0
Class-map: QOS_GROUP_1 (match-all)
20 packets, 2280 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: qos-group 1
Queueing
Output Queue: Conversation 265
Bandwidth 1000 (kbps)
(pkts matched/bytes matched) 0/0
(depth/total drops/no-buffer drops) 0/0/0
exponential weight: 9
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp

Transmitted
pkts/bytes
20/2280
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40

Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Class-map: class-default (match-any)


7 packets, 716 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
Generate UDP traffic to simulate VoIP stream on SW2:
SW2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#rtr 1
SW2(config-rtr)# type udpEcho dest-ipaddr 10.1.7.7 dest-port 20000
source-ipaddr 10.1.8.8 control disable
SW2(config-rtr-udp)# tos 184
SW2(config-rtr-udp)# timeout 0
SW2(config-rtr-udp)# frequency 1
SW2(config-rtr-udp)#rtr schedule 1 life 5 start-time now
SW2(config)#end
SW2#
Generate ICMP traffic to simulate other traffic on SW2:
SW2#ping 10.1.7.7 source 10.1.8.8 repeat 15
Type escape sequence to abort.
Sending 15, 100-byte ICMP Echos to 10.1.7.7, timeout is 2 seconds:
Packet sent with a source address of 10.1.8.8
!!!!!!!!!!!!!!!
Success rate is 100 percent (15/15), round-trip min/avg/max = 92/92/92 ms

Copyright 2010 Internetwork Expert


- 267 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3#show policy-map int e0/0 out


Ethernet0/0
Service-policy output: TO_CE
Class-map: QOS_GROUP_5 (match-all)
5 packets, 290 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: qos-group 5
Queueing
Strict Priority
Output Queue: Conversation 264
Bandwidth 640 (kbps) Burst 16000 (Bytes)
(pkts matched/bytes matched) 0/0
(total drops/bytes drops) 0/0
Class-map: QOS_GROUP_1 (match-all)
15 packets, 1710 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: qos-group 1
Queueing
Output Queue: Conversation 265
Bandwidth 1000 (kbps)
(pkts matched/bytes matched) 0/0
(depth/total drops/no-buffer drops) 0/0/0
exponential weight: 9
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp

Transmitted
pkts/bytes
15/1710
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40

Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Class-map: class-default (match-any)


15 packets, 1518 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
R1#show policy-map interface
FastEthernet0/0
Service-policy output: TO_P
Class-map: MPLS_EXP_5 (match-all)
10 packets, 660 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: mpls experimental topmost 5
Queueing
Strict Priority
Output Queue: Conversation 264
Bandwidth 640 (kbps) Burst 16000 (Bytes)

Copyright 2010 Internetwork Expert


- 268 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

(pkts matched/bytes matched) 0/0


(total drops/bytes drops) 0/0
Class-map: MPLS_EXP_1 (match-all)
40 packets, 4660 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: mpls experimental topmost 1
Queueing
Output Queue: Conversation 265
Bandwidth 1000 (kbps)
(pkts matched/bytes matched) 0/0
(depth/total drops/no-buffer drops) 0/0/0
exponential weight: 9
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp

Transmitted
pkts/bytes
0/0
40/4660
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40

Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Class-map: class-default (match-any)


489 packets, 38615 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
Serial0/1
Service-policy output: TO_PE
Class-map: MPLS_EXP_5 (match-all)
5 packets, 260 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: mpls experimental topmost 5
Queueing
Strict Priority
Output Queue: Conversation 264
Bandwidth 640 (kbps) Burst 16000 (Bytes)
(pkts matched/bytes matched) 0/0
(total drops/bytes drops) 0/0
Class-map: MPLS_EXP_1 (match-all)
15 packets, 1620 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: mpls experimental topmost 1
Queueing
Output Queue: Conversation 265
Bandwidth 1000 (kbps)
(pkts matched/bytes matched) 0/0
(depth/total drops/no-buffer drops) 0/0/0
exponential weight: 9
mean queue depth: 0

Copyright 2010 Internetwork Expert


- 269 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


class
0
1
2
3
4
5
6
7
rsvp

Transmitted
pkts/bytes
0/0
15/1620
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Version 1.0

Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40

Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40

Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Class-map: class-default (match-any)


529 packets, 34080 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
R2#show policy-map interface
FastEthernet0/0
Service-policy output: TO_P
Class-map: MPLS_EXP_5 (match-all)
5 packets, 330 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: mpls experimental topmost 5
Queueing
Strict Priority
Output Queue: Conversation 264
Bandwidth 640 (kbps) Burst 16000 (Bytes)
(pkts matched/bytes matched) 0/0
(total drops/bytes drops) 0/0
Class-map: MPLS_EXP_1 (match-all)
15 packets, 1830 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: mpls experimental topmost 1
Queueing
Output Queue: Conversation 265
Bandwidth 1000 (kbps)
(pkts matched/bytes matched) 0/0
(depth/total drops/no-buffer drops) 0/0/0
exponential weight: 9
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp

Transmitted
pkts/bytes
0/0
15/1830
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Class-map: class-default (match-any)


537 packets, 43019 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
Serial0/0

Copyright 2010 Internetwork Expert


- 270 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Service-policy output: TO_PE


Class-map: MPLS_EXP_5 (match-all)
10 packets, 520 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: mpls experimental topmost 5
Queueing
Strict Priority
Output Queue: Conversation 264
Bandwidth 640 (kbps) Burst 16000 (Bytes)
(pkts matched/bytes matched) 0/0
(total drops/bytes drops) 0/0
Class-map: MPLS_EXP_1 (match-all)
40 packets, 4100 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: mpls experimental topmost 1
Queueing
Output Queue: Conversation 265
Bandwidth 1000 (kbps)
(pkts matched/bytes matched) 0/0
(depth/total drops/no-buffer drops) 0/0/0
exponential weight: 9
mean queue depth: 0
class
0
1
2
3
4
5
6
7
rsvp

Transmitted
pkts/bytes
0/0
40/4100
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0

Minimum Maximum
thresh thresh
20
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40

Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10

Class-map: class-default (match-any)


872 packets, 57752 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any

Copyright 2010 Internetwork Expert


- 271 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Multicast over MPLS VPNs


Objective: Configure multicast support for VRF SW1-SW2 between R3 and R6
so multicast traffic sent from SW1 can be received by SW2.
Fa0/3

RIPv2
E0/0

R3

10.1.37.0/24

.7

BGP
AS 100

SW1

.3

.3

S1/2
S0/1

150.1.13.0/24

.1

150.1.12.0/24

R1

Frame Relay

.1

S0/0.1

102
201

.2

S0/0.1

IS-IS
Level 2

R2
Fa0/0

.2

E0/0

.4

150.1.24.0/24 VLAN 24

150.1.45.0/24

R4
S0/0.1

Frame Relay

.4

405

504

.5

S0/0.1
R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1

RIPv2
Fa0/6

SW2

10.1.68.0/24

.6

R6

BGP
AS 100

.8

Copyright 2010 Internetwork Expert


- 272 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure IS-IS Level-2 on the interfaces between R1, R2, R3, R4, R5,
and R6
Create Loopbacks on R1, R2, R3, R4, R5, and R6 in the format
150.1.Y/Y/32 and advertise them into IS-IS
Configure MPLS on the interfaces between R1, R2, R3, R4, R5, and R6
Configure RIPv2 on the Ethernet interfaces of SW1 and SW2
Create the Loopback 10.1.7.7/24 on SW1 and advertise it into RIPv2
Create the Loopback 10.1.8.8/24 on SW2 and advertise it into RIPv2
R3 and R6 should peer via iBGP in AS 1 using their Loopback interfaces
SW1 and SW2 should be in VRF SW1-SW2
Use the route distinguisher and route target 100:1 for this VRF
Run RIPv2 as the PE-CE protocol between R3 & SW1 and R6 & SW2
Redistribute where necessary to gain connectivity within the VPNs
Enable multicast routing on all devices, including for VRF SW1-SW2 on
R3 and R6
Configure PIM Sparse-Mode on the transit interfaces between R1, R2, R3,
R4, R5, and R6
Configure PIM Sparse-Mode on the Loopback interfaces of R3 and R6
Enable support for Source Specific Multicast on these devices in the
232.0.0.0/8 range
Configure a default multicast distribution tree on R3 and R6 for VRF
SW1-SW2 using the group address 232.0.0.1
Configure PIM Sparse-Mode between R3 & SW1 and R6 & SW2
SW1 should be the RP for this multicast domain
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip cef
ip multicast-routing
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
ip router isis
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip

Copyright 2010 Internetwork Expert


- 273 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

frame-relay interface-dlci 102


!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
router isis
net 00.0000.0000.0001.00
is-type level-2-only
!
ip pim ssm default
R2#
ip cef
ip multicast-routing
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
ip router isis
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
frame-relay interface-dlci 201
!
router isis
net 00.0000.0000.0002.00
is-type level-2-only
!
ip pim ssm default
R3#
ip cef
ip multicast-routing
!
ip multicast-routing
ip multicast-routing vrf SW1-SW2
!
ip vrf SW1-SW2
rd 100:1
route-target export 100:1
route-target import 100:1
mdt default 232.0.0.1

Copyright 2010 Internetwork Expert


- 274 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
ip router isis
ip pim sparse-mode
!
interface Ethernet0/0
ip vrf forwarding SW1-SW2
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
clockrate 64000
!
router isis
net 00.0000.0000.0003.00
is-type level-2-only
!
router rip
!
address-family ipv4 vrf SW1-SW2
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
neighbor 150.1.6.6 remote-as 100
neighbor 150.1.6.6 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.6.6 activate
neighbor 150.1.6.6 send-community extended
exit-address-family
!
address-family ipv4 vrf SW1-SW2
redistribute rip
exit-address-family
!
ip pim ssm default
ip pim vrf SW1-SW2 rp-address 10.1.37.7
R4#
ip cef
ip multicast-routing
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip router isis

Copyright 2010 Internetwork Expert


- 275 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
frame-relay interface-dlci 405
!
router isis
net 00.0000.0000.0004.00
is-type level-2-only
!
ip pim ssm default
R5#
ip cef
ip multicast-routing
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
ip router isis
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip router isis
ip pim sparse-mode
tag-switching ip
frame-relay interface-dlci 504
!
router isis
net 00.0000.0000.0005.00
is-type level-2-only
!
ip pim ssm default

Copyright 2010 Internetwork Expert


- 276 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#
ip cef
!
ip multicast-routing
ip multicast-routing vrf SW1-SW2
!
ip vrf SW1-SW2
rd 100:1
route-target export 100:1
route-target import 100:1
mdt default 232.0.0.1
!
mpls label protocol ldp
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
ip router isis
ip pim sparse-mode
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip router isis
ip pim sparse-mode
mpls ip
!
interface GigabitEthernet0/1
ip vrf forwarding SW1-SW2
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router isis
net 00.0000.0000.0006.00
is-type level-2-only
!
router rip
!
address-family ipv4 vrf SW1-SW2
redistribute bgp 100 metric 1
network 10.0.0.0
no auto-summary
version 2
exit-address-family
!
router bgp 100
neighbor 150.1.3.3 remote-as 100
neighbor 150.1.3.3 update-source Loopback0
!
address-family vpnv4
neighbor 150.1.3.3 activate
neighbor 150.1.3.3 send-community extended
exit-address-family
!
address-family ipv4 vrf SW1-SW2
redistribute rip
exit-address-family
!

Copyright 2010 Internetwork Expert


- 277 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip pim ssm default


ip pim vrf SW1-SW2 rp-address 10.1.37.7
SW1#
ip routing
ip multicast-routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
ip pim sparse-mode
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
ip pim rp-address 10.1.37.7
SW2#
ip routing
ip multicast-routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
ip pim sparse-mode
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
ip pim rp-address 10.1.37.7

Copyright 2010 Internetwork Expert


- 278 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
R3#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.13.1
Serial1/2

Uptime/Expires

Ver

DR
Prio/Mode
1 / S

04:36:04/00:01:22 v2

R3#show ip pim vrf SW1-SW2 neighbor


PIM Neighbor Table
Neighbor
Interface
Address
10.1.37.7
Ethernet0/0
150.1.6.6
Tunnel0

Uptime/Expires

Ver

DR
Prio/Mode
1 / DR S
1 / DR S

04:36:13/00:01:22 v2
00:04:00/00:01:40 v2

R6#show ip pim neighbor


PIM Neighbor Table
Mode: B - Bidir Capable, DR - Designated Router, N - Default DR Priority,
S - State Refresh Capable
Neighbor
Interface
Uptime/Expires
Ver
DR
Address
Prio/Mode
150.1.56.5
GigabitEthernet0/0
04:36:57/00:01:33 v2
1 / S

R6#show ip pim vrf SW1-SW2 neighbor


PIM Neighbor Table
Mode: B - Bidir Capable, DR - Designated Router, N - Default
S - State Refresh Capable
Neighbor
Interface
Uptime/Expires
Address
10.1.68.8
GigabitEthernet0/1
04:38:17/00:01:25
150.1.3.3
Tunnel0
00:04:58/00:01:40

DR Priority,
Ver

DR
Prio/Mode
1 / DR S
1 / S

v2
v2

R6#show ip mroute
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
L - Local, P - Pruned, R - RP-bit set, F - Register flag,
T - SPT-bit set, J - Join SPT, M - MSDP created entry,
X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
U - URD, I - Received Source Specific Host Report,
Z - Multicast Tunnel, z - MDT-data group sender,
Y - Joined MDT-data group, y - Sending to MDT-data group
Outgoing interface flags: H - Hardware switched, A - Assert winner
Timers: Uptime/Expires
Interface state: Interface, Next-Hop or VCD, State/Mode

(150.1.3.3, 232.0.0.1), 00:01:45/00:02:53, flags: sTIZ


Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
MVRF SW1-SW2, Forward/Sparse, 00:01:45/00:01:14
(150.1.6.6, 232.0.0.1), 04:35:46/00:03:23, flags: sT
Incoming interface: Loopback0, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Sparse, 00:01:45/00:02:42
(*, 224.0.1.40), 04:35:49/00:02:57, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Sparse, 04:33:56/00:02:27

Copyright 2010 Internetwork Expert


- 279 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Loopback0, Forward/Sparse, 04:35:49/00:02:57


SW1#debug ip pim
PIM debugging is on
SW2 requests traffic for 224.1.1.1:
SW2#conf t
Enter configuration commands, one per line.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1

End with CNTL/Z.

SW1#
PIM(0): Received v2 Join/Prune on FastEthernet0/3 from 10.1.37.3, to us
PIM(0): Join-list: (*, 224.1.1.1), RPT-bit set, WC-bit set, S-bit set
PIM(0): Check RP 10.1.37.7 into the (*, 224.1.1.1) entry
PIM(0): Add FastEthernet0/3/10.1.37.3 to (*, 224.1.1.1), Forward state,
by PIM *G Join
PIM(0): Building Periodic Join/Prune message for 224.1.1.1
SW1 generates traffic to 224.1.1.1:
SW1#ping 224.1.1.1 repeat 100
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 224.1.1.1, timeout is 2 seconds:
PIM(0): Received v2 Join/Prune on FastEthernet0/3 from 10.1.37.3, to us
PIM(0): Prune-list: (10.1.37.7/32, 224.1.1.1) RPT-bit set
Reply to request 0 from 10.1.68.8, 176 ms
Reply to request 1 from 10.1.68.8, 160 ms
Reply to request 2 from 10.1.68.8, 160 ms
<output omitted>
R3 recieves multicast feed via VRF SW1-SW2 and tunnels it as 232.0.0.1:
R3#debug ip mpacket
IP multicast packets debugging is on
R3#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R3(config)#int e0/0
R3(config-if)#no ip mroute-cache
IP(1): s=10.1.37.7 (Ethernet0/0) d=224.1.1.1 (Tunnel0) id=40, ttl=254,
prot=1, len=100(100), mforward
IP(0): s=150.1.3.3 (Loopback0) d=232.0.0.1 (Serial1/2) id=912, ttl=255,
prot=47, len=124(124), mforward
R6 decapsulates tunneled mpacket and forwards it to VRF SW1-SW2:
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int g0/0
R6(config-if)#no ip mroute-cache
R6(config-if)#do debug ip mpacket
IP multicast packets debugging is on
IP(1): s=10.1.37.7 (Tunnel0) d=224.1.1.1 (GigabitEthernet0/1) id=76,
ttl=253, prot=1, len=100(100), mforward

Copyright 2010 Internetwork Expert


- 280 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 281 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

L2 VPNs: AToM
Objective: Configure L2 VPN between R1 and R2 so that R4 and R6 can reach
each other as if they were directly connected.
E0/0

OSPF
Area 2

F1/0
150.1.25.0/24

S2/0.1
Frame Relay

.5

502

R2
.2

10.1.46.0/24 VLAN 24

.4

R4

205

S0/0.1
R5
E0/0

.5
150.1.35.0/24 VLAN 35
.3

E0/1
R3
.3

S0/0.1
Frame Relay
301

OSPF
Area 1

103
.1

150.1.13.0/24

F1/0

S2/0.1
R1

10.1.46.0/24 VLAN16

OSPF
Area 0

.6

E0/1

Copyright 2010 Internetwork Expert


- 282 -

R6

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF in the network per the diagram supplied.
Create Loopbacks on R1, R2, R3, and R5 in the format 150.1.Y/Y/32 and
advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R3, R5
Configure AToM connection linking R1s and R2s connections to VLAN
16 and VLAN 24 respectively.
Ensure R4 and R6 can ping each other successfully.

Final Configuration
R1#
hostname R1
!
interface Loopback 0
ip address 150.1.1.1 255.255.255.255
!
mpls ip
mpls label protocol ldp
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.2.2 406 encapsulation mpls
!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 103
ip address 150.1.13.1 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1
R2#
hostname R2
!
interface Loopback 0
ip address 150.1.2.2 255.255.255.255
!
mpls ip
mpls label protocol ldp
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.1.1 406 encapsulation mpls

Copyright 2010 Internetwork Expert


- 283 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 205
ip address 150.1.25.2 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
R3#
hostname R3
!
mpls ip
mpls label protocol ldp
!
interface Loopback 0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet 0/1
no shutdown
ip address 150.1.35.3 255.255.255.0
mpls ip
!
interface Serial 1/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 1/0.1 point-to-point
frame-relay interface-dlci 301
ip address 150.1.13.3 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.13.3 0.0.0.0 area 1
network 150.1.35.3 0.0.0.0 area 0
network 150.1.3.3 0.0.0.0 area 1
R4#
hostname R4
!
interface Ethernet 0/0
no shutdown
ip address 10.1.46.4 255.255.255.0
!
no ip routing
R5#
hostname R5
mpls label protocol ldp
!
mpls ip

Copyright 2010 Internetwork Expert


- 284 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Loopback 0
ip address 150.1.5.5 255.255.255.255
!
interface Serial 0/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 0/0.1 point-to-point
frame-relay interface-dlci 502
ip address 150.1.25.5 255.255.255.0
mpls ip
!
interface Ethernet 0/0
no shutdown
ip address 150.1.35.5 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.35.5 0.0.0.0 area 0
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
interface Ethernet 0/1
no shutdown
ip address 10.1.46.6 255.255.255.0
!
no ip routing
R7#
hostname R7
!
vtp mode transparent
vlan 24,35,16
!
interface FastEthernet 0/1
switchport host
switchport access vlan 16
!
interface FastEthernet 0/2
switchport host
switchport access vlan 24
!
interface FastEthernet 0/4
switchport host
switchport access vlan 24
!
interface FastEthernet 0/5
switchport host
switchport access vlan 35

Copyright 2010 Internetwork Expert


- 285 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R8#
hostname R8
!
vtp mode transparent
vlan 24,35,16
!
interface FastEthernet 0/3
switchport host
switchport access vlan 35
!
interface FastEthernet 0/6
switchport host
switchport access vlan 16

Verification
Check for end-to-end LSPs between R1 and R2:
R1#show mpls forwarding-table 150.1.2.2
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
19
17
150.1.2.2/32
0
point2point

Outgoing

Next

interface
Se2/0.1

R1#traceroute 150.1.2.2
Type escape sequence to abort.
Tracing the route to 150.1.2.2
1 150.1.13.3 [MPLS: Label 17 Exp 0] 152 msec 152 msec 148 msec
2 150.1.35.5 [MPLS: Label 18 Exp 0] 152 msec 152 msec 152 msec
3 150.1.25.2 56 msec * 56 msec
R2#show mpls forwarding-table 150.1.1.1
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
18
20
150.1.1.1/32
0
point2point

Copyright 2010 Internetwork Expert


- 286 -

Outgoing

Next

interface
Se2/0.1

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#traceroute 150.1.1.1
Type escape sequence to abort.
Tracing the route to 150.1.1.1
1 150.1.25.5 [MPLS: Label 20 Exp 0] 148 msec 152 msec 152 msec
2 150.1.35.3 [MPLS: Label 20 Exp 0] 152 msec 148 msec 156 msec
3 150.1.13.1 60 msec * 56 msec
Check the VC status. The interface type, MTU size, and VC ID should
match on both sides. You should see a label stack generated for this
connection.
R1#show mpls l2transport vc detail
Local interface: Fa1/0 up, line protocol up, Ethernet up
Destination address: 150.1.2.2, VC ID: 406, VC status: up
Output interface: Se2/0.1, imposed label stack {21 17}
Preferred path: not configured
Default path: active
Tunnel label: 17, next hop point2point
Create time: 00:13:38, last status change time: 00:13:32
Signaling protocol: LDP, peer 150.1.2.2:0 up
MPLS VC labels: local 24, remote 21
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 105, send 507
byte totals:
receive 10604, send 42799
packet drops: receive 0, send 0
Verify connectivity:
R4#ping 10.1.46.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.46.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/143/148
ms

Copyright 2010 Internetwork Expert


- 287 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

L2 VPNs: Inter-AS AToM


Objective: Configure L2 VPN between R1 and R2 that below to different ASs so
that R4 and R6 can reach each other as if they were directly
connected.
E0/0

OSPF
Area 2

F1/0
150.1.25.0/24

S2/0.1
Frame Relay
502

.5

BGP
AS 200

R2
.2

10.1.46.0/24 VLAN 24

.4

R4

205

S0/0.1
R5
E0/0

.5

150.1.35.0/24 VLAN 35

E0/1
R3
.3

.3

S0/0.1
Frame Relay
301

OSPF
Area 1

103
.1

150.1.13.0/24

F1/0

S2/0.1
R1

10.1.46.0/24 VLAN16

BGP
AS 100

.6

E0/1

Copyright 2010 Internetwork Expert


- 288 -

R6

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF in the network per the diagram supplied.
Create Loopbacks on R1, R2, R3, and R5 in the format 150.1.Y/Y/32 and
advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R3, and R5. Do not
enable MPLS on the interface connecting R3 and R5.
Configure BGP AS 100 on R3 and BGP AS 200 on R5. Peer R3 and R5
over the directly connected link.
Enable MPLS label exchange between R3 and R5 over BGP and
advertise R1s and R2s Loopback0 prefixes into BGP.
Redistribute BGP into OSPF on R3 and R5.
Configure AToM connection linking R1s and R2s connections to VLAN
16 and VLAN 24 respectively.
Ensure R4 and R6 can ping each other successfully.

Final Configuration
R1#
hostname R1
!
interface Loopback 0
ip address 150.1.1.1 255.255.255.255
!
mpls ip
mpls label protocol ldp
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.2.2 406 encapsulation mpls
!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 103
ip address 150.1.13.1 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1
R2#
hostname R2
!
interface Loopback 0
ip address 150.1.2.2 255.255.255.255
!

Copyright 2010 Internetwork Expert


- 289 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

mpls ip
mpls label protocol ldp
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.1.1 406 encapsulation mpls
!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 205
ip address 150.1.25.2 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
R3#
hostname R3
!
mpls ip
mpls label protocol ldp
!
interface Loopback 0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet 0/1
no shutdown
ip address 150.1.35.3 255.255.255.0
!
interface Serial 1/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 1/0.1 point-to-point
frame-relay interface-dlci 301
ip address 150.1.13.3 255.255.255.0
mpls ip
!
router bgp 100
neighbor 150.1.35.5 remote-as 200
neighbor 150.1.35.5 send-label
network 150.1.1.1 mask 255.255.255.255
!
router ospf 1
network 150.1.13.3 0.0.0.0 area 1
network 150.1.3.3 0.0.0.0 area 1
redistribute bgp 100 subnets
!

Copyright 2010 Internetwork Expert


- 290 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#
hostname R4
!
interface Ethernet 0/0
no shutdown
ip address 10.1.46.4 255.255.255.0
!
no ip routing
R5#
hostname R5
mpls label protocol ldp
!
mpls ip
!
interface Loopback 0
ip address 150.1.5.5 255.255.255.255
!
interface Serial 0/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 0/0.1 point-to-point
frame-relay interface-dlci 502
ip address 150.1.25.5 255.255.255.0
mpls ip
!
interface Ethernet 0/0
no shutdown
ip address 150.1.35.5 255.255.255.0
!
router bgp 200
neighbor 150.1.35.3 remote-as 100
neighbor 150.1.35.3 send-label
network 150.1.2.2 mask 255.255.255.255
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.5.5 0.0.0.0 area 2
redistribute bgp 200 subnets
R6#
hostname R6
!
interface Ethernet 0/1
no shutdown
ip address 10.1.46.6 255.255.255.0
R7#
hostname R7
!
vtp mode transparent
vlan 24,35,16
!
interface FastEthernet 0/1

Copyright 2010 Internetwork Expert


- 291 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

switchport host
switchport access vlan 16
!
interface FastEthernet 0/2
switchport host
switchport access vlan 24
!
interface FastEthernet 0/4
switchport host
switchport access vlan 24
!
interface FastEthernet 0/5
switchport host
switchport access vlan 35
R8#
hostname R8
!
vtp mode transparent
vlan 24,35,16
!
interface FastEthernet 0/3
switchport host
switchport access vlan 35
!
interface FastEthernet 0/6
switchport host
switchport access vlan 16

Verification
Check for end-to-end LSPs between R1 and R2:
R3#show ip bgp labels
Network
Next Hop
150.1.1.1/32
150.1.13.1
150.1.2.2/32
150.1.35.5

In Label/Out Label
20/nolabel
19/18

R5#show ip bgp labels


Network
Next Hop
150.1.1.1/32
150.1.35.3
150.1.2.2/32
150.1.25.2

In Label/Out Label
17/20
18/nolabel

R1#show mpls forwarding-table 150.1.2.2


Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
19
19
150.1.2.2/32
0
point2point

Copyright 2010 Internetwork Expert


- 292 -

Outgoing

Next

interface
Se2/0.1

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#show mpls forwarding-table 150.1.1.1


Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
18
17
150.1.1.1/32
0
point2point

Outgoing

Next

interface
Se2/0.1

R1#traceroute
Protocol [ip]:
Target IP address: 150.1.2.2
Source address: 150.1.1.1
Numeric display [n]:
Timeout in seconds [3]:
Probe count [3]:
Minimum Time to Live [1]:
Maximum Time to Live [30]:
Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Type escape sequence to abort.
Tracing the route to 150.1.2.2
1 150.1.13.3 [MPLS: Label 19 Exp 0] 148 msec 152 msec 152 msec
2 150.1.35.5 [MPLS: Label 18 Exp 0] 148 msec 148 msec 152 msec
3 150.1.25.2 60 msec * 56 msec
Check the VC status. The interface type, MTU size, and VC ID should
match on both sides. You should see a label stack generated for this
connection.
R1#show mpls l2transport vc detail
Local interface: Fa1/0 up, line protocol up, Ethernet up
Destination address: 150.1.2.2, VC ID: 406, VC status: up
Output interface: Se2/0.1, imposed label stack {21 19}
Preferred path: not configured
Default path: active
Tunnel label: 19, next hop point2point
Create time: 00:48:57, last status change time: 00:11:36
Signaling protocol: LDP, peer 150.1.2.2:0 up
MPLS VC labels: local 24, remote 21
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 340, send 428
byte totals:
receive 34913, send 35944
packet drops: receive 0, send 0

Copyright 2010 Internetwork Expert


- 293 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verify connectivity:
R4#ping 10.1.46.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.46.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/143/148
ms

Copyright 2010 Internetwork Expert


- 294 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 295 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

L2 VPNs: IP Interworking
Objective: Configure L2 VPN between R1 and R2 so that R4 and R6 can reach
each other as if they were directly connected. R4 and R6 should use
different L2 connection technologies.
R3

10.1.36.0/24

.3

S1/3

203
203

Frame Relay

S2/1

OSPF
Area 2

150.1.25.0/24

S2/0.1
Frame Relay

.5

502

R2
.2

205

S0/0.1
R5
E0/0

.5
150.1.45.0/24 VLAN 45
.4

E0/1
R4
.4

S0/0.1
Frame Relay
401

OSPF
Area 1

104
.1

150.1.14.0/24

F1/0

S2/0.1
R1

10.1.36.0/24 VLAN16

OSPF
Area 0

.6

E0/1

Copyright 2010 Internetwork Expert


- 296 -

R6

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure a back-to-back Frame-Relay connection between R2 and R3
using FR switching in R2 and the DLCI value of 203
Configure OSPF in the network per the diagram supplied.
Create Loopbacks on R1, R2, R4, and R5 in the format 150.1.Y/Y/32 and
advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R4, and R5
Configure AToM connection linking R3 and R6 allowing for IP-based
interworking
Ensure R3 and R6 can ping each other successfully.

Final Configuration
R1#
hostname R1
!
mpls ip
mpls label protocol ldp
!
interface Loopback 0
ip address 150.1.1.1 255.255.255.255
!
pseudowire-class IP_INTERWORKING
encapsulation mpls
interworking ip
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.2.2 406 encapsulation mpls pw-class IP_INTERWORKING
!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 104
ip address 150.1.14.1 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1
R2#
hostname R2
!
mpls ip
mpls label protocol ldp
!
interface Loopback 0

Copyright 2010 Internetwork Expert


- 297 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip address 150.1.2.2 255.255.255.255


!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 205
ip address 150.1.25.2 255.255.255.0
mpls ip
!
pseudowire-class IP_INTERWORKING
encapsulation mpls
interworking ip
!
frame-relay switching
!
interface Serial 2/1
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
frame-relay intf-type dce
frame-relay interface-dlci 203 switched
no ip address
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
!
pseudowire-class IP_INTERWORKING
encapsulation mpls
interworking ip
!
connect R4_TO_R6 Serial2/1 203 l2transport
xconnect 150.1.1.1 406 encapsulation mpls pw-class IP_INTERWORKING
R3#
hostname R3
!
interface Serial 1/3
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
clock rate 64000
!
interface Serial 1/3.1 point-to-point
frame-relay interface-dlci 203
ip address 10.1.36.3 255.255.255.0
R4#
hostname R4
!
mpls ip
mpls label protocol ldp
!
interface Loopback 0
ip address 150.1.4.4 255.255.255.255

Copyright 2010 Internetwork Expert


- 298 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Ethernet 0/1
no shutdown
ip address 150.1.45.4 255.255.255.0
mpls ip
!
interface Serial 0/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 0/0.1 point-to-point
frame-relay interface-dlci 401
ip address 150.1.14.4 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.14.4 0.0.0.0 area 1
network 150.1.45.4 0.0.0.0 area 0
network 150.1.4.4 0.0.0.0 area 1
R5#
hostname R5
!
mpls label protocol ldp
mpls ip
!
interface Loopback 0
ip address 150.1.5.5 255.255.255.255
!
interface Serial 0/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 0/0.1 point-to-point
frame-relay interface-dlci 502
ip address 150.1.25.5 255.255.255.0
mpls ip
!
interface Ethernet 0/0
no shutdown
ip address 150.1.45.5 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.45.5 0.0.0.0 area 0
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
interface Ethernet 0/1
no shutdown
ip address 10.1.36.6 255.255.255.0
!

Copyright 2010 Internetwork Expert


- 299 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

no ip routing
R7#
hostname R7
!
vtp mode transparent
vlan 45,16
!
interface FastEthernet 0/1
switchport host
switchport access vlan 16
!
interface FastEthernet 0/5
switchport host
switchport access vlan 45
R8#
hostname R8
!
vtp mode transparent
vlan 45,16
!
interface FastEthernet 0/4
switchport host
switchport access vlan 45
!
interface FastEthernet 0/6
switchport host
switchport access vlan 16

Copyright 2010 Internetwork Expert


- 300 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
Check for end-to-end LSPs between R1 and R2:
R1#show mpls forwarding-table 150.1.2.2
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
20
19
150.1.2.2/32
0
point2point

Outgoing

Next

interface
Se2/0.1

R1#traceroute 150.1.2.2
Type escape sequence to abort.
Tracing the route to 150.1.2.2
1 150.1.14.4 [MPLS: Label 19 Exp 0] 152 msec 148 msec 152 msec
2 150.1.45.5 [MPLS: Label 19 Exp 0] 148 msec 152 msec 148 msec
3 150.1.25.2 60 msec * 56 msec
R2#show mpls forwarding-table 150.1.1.1
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
17
16
150.1.1.1/32
0
point2point

Outgoing

Next

interface
Se2/0.1

R2#traceroute 150.1.1.1
Type escape sequence to abort.
Tracing the route to 150.1.1.1
1 150.1.25.5 [MPLS: Label 16 Exp 0] 148 msec 164 msec 152 msec
2 150.1.45.4 [MPLS: Label 16 Exp 0] 148 msec 152 msec 148 msec
3 150.1.14.1 56 msec * 56 msec
Check the connection status between R2 and R3. Since this is an FR
link, R3 should learn the DLCI vi LMI.
R3#show frame-relay pvc | inc 203
DLCI = 203, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE =
Serial1/3.1
R2#show frame-relay pvc | inc 203
DLCI = 203, DLCI USAGE = SWITCHED, PVC STATUS = ACTIVE, INTERFACE =
Serial2/1
Check the L2 VPN VC status. The MTU size, interworking type and VC ID
should match on both sides. You should see a label stack generated for
this connection.

Copyright 2010 Internetwork Expert


- 301 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#show mpls l2transport vc detaile


Local interface: Se2/1 up, line protocol up, FR DLCI 203 up
MPLS VC type is IP, interworking type is IP
Destination address: 150.1.1.1, VC ID: 406, VC status: up
Output interface: Se2/0.1, imposed label stack {21 16}
Preferred path: not configured
Default path: active
Tunnel label: 16, next hop point2point
Create time: 00:15:19, last status change time: 00:09:02
Signaling protocol: LDP, peer 150.1.1.1:0 up
MPLS VC labels: local 21, remote 21
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 0, send 0
byte totals:
receive 0, send 0
packet drops: receive 0, send 0
Verify connectivity:
R3#ping 10.1.36.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.36.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 156/156/156
ms

Copyright 2010 Internetwork Expert


- 302 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 303 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

L2 VPNs: Ethernet Interworking


Objective: Configure L2 VPN between R1 and R2 so that R4 and R6 can reach
each other as if they were directly connected. R4 and R6 should use
different L2 connection technologies.
R3

10.1.36.0/24

.3

BVI1

203
203

Frame Relay

S2/1

OSPF
Area 2

150.1.25.0/24

S2/0.1
Frame Relay

.5

502

R2
.2

205

S0/0.1
R5
E0/0

.5
150.1.45.0/24 VLAN 45
.4

E0/1
R4
.4

S0/0.1
Frame Relay
401

OSPF
Area 1

104
.1

150.1.14.0/24

F1/0

S2/0.1
R1

10.1.36.0/24 VLAN16

OSPF
Area 0

.6

E0/1

Copyright 2010 Internetwork Expert


- 304 -

R6

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure a back-to-back Frame-Relay connection between R2 and R3
using FR switching in R2 and the DLCI value of 203
Enable bridging over Frame-Relay on R3 and choose the Integrated
Routing and Briding mode. Create a BVI interface in R3 and assign the IP
address per the diagram.
Configure OSPF in the network per the diagram supplied.
Create Loopbacks on R1, R2, R4, and R5 in the format 150.1.Y/Y/32 and
advertise them into OSPF
Configure MPLS on the interfaces between R1, R2, R4, and R5
Configure AToM connection linking R3 and R6 allowing for Bridged
interworking
Ensure R3 and R6 can ping each other successfully.

Final Configuration
R1#
hostname R1
!
mpls ip
mpls label protocol ldp
!
interface Loopback 0
ip address 150.1.1.1 255.255.255.255
!
pseudowire-class ETHERNET_INTERWORKING
encapsulation mpls
interworking ethernet
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.2.2 406 encapsulation mpls pw-class
ETHERNET_INTERWORKING
!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 104
ip address 150.1.14.1 255.255.255.0
mpls ip
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1

Copyright 2010 Internetwork Expert


- 305 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#
hostname R2
!
mpls ip
mpls label protocol ldp
!
interface Loopback 0
ip address 150.1.2.2 255.255.255.255
!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 205
ip address 150.1.25.2 255.255.255.0
mpls ip
!
pseudowire-class IP_INTERWORKING
encapsulation mpls
interworking ip
!
frame-relay switching
!
interface Serial 2/1
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
frame-relay intf-type dce
frame-relay interface-dlci 203 switched
no ip address
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
!
pseudowire-class ETHERNET_INTERWORKING
encapsulation mpls
interworking ethernet
!
!
connect R4_TO_R6 Serial2/1 203 l2transport
xconnect 150.1.1.1 406 encapsulation mpls pw-class
ETHERNET_INTERWORKING
R3#
hostname R3
!
interface Serial 1/3
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
clock rate 64000
!
bridge irb
bridge 1 protocol ieee

Copyright 2010 Internetwork Expert


- 306 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

bridge 1 route ip
!
interface Serial 1/3.1 point-to-point
frame-relay interface-dlci 203
no ip address
bridge-group 1
!
interface BVI1
no shutdown
ip address 10.1.36.3 255.255.255.0
R4#
hostname R4
!
mpls ip
mpls label protocol ldp
!
interface Loopback 0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet 0/1
no shutdown
ip address 150.1.45.4 255.255.255.0
mpls ip
!
interface Serial 0/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 0/0.1 point-to-point
frame-relay interface-dlci 401
ip address 150.1.14.4 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.14.4 0.0.0.0 area 1
network 150.1.45.4 0.0.0.0 area 0
network 150.1.4.4 0.0.0.0 area 1
R5#
hostname R5
!
mpls label protocol ldp
mpls ip
!
interface Loopback 0
ip address 150.1.5.5 255.255.255.255
!
interface Serial 0/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 0/0.1 point-to-point
frame-relay interface-dlci 502
ip address 150.1.25.5 255.255.255.0

Copyright 2010 Internetwork Expert


- 307 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

mpls ip
!
interface Ethernet 0/0
no shutdown
ip address 150.1.45.5 255.255.255.0
mpls ip
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.45.5 0.0.0.0 area 0
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
interface Ethernet 0/1
no shutdown
ip address 10.1.36.6 255.255.255.0
!
no ip routing
R7#
hostname R7
!
vtp mode transparent
vlan 45,16
!
interface FastEthernet 0/1
switchport host
switchport access vlan 16
!
interface FastEthernet 0/5
switchport host
switchport access vlan 45
R8#
hostname R8
!
vtp mode transparent
vlan 45,16
!
interface FastEthernet 0/4
switchport host
switchport access vlan 45
!
interface FastEthernet 0/6
switchport host
switchport access vlan 16

Copyright 2010 Internetwork Expert


- 308 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
Check for end-to-end LSPs between R1 and R2:
R1#show mpls forwarding-table 150.1.2.2
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
20
19
150.1.2.2/32
0
point2point

Outgoing

Next

interface
Se2/0.1

R1#traceroute 150.1.2.2
Type escape sequence to abort.
Tracing the route to 150.1.2.2
1 150.1.14.4 [MPLS: Label 19 Exp 0] 152 msec 148 msec 152 msec
2 150.1.45.5 [MPLS: Label 19 Exp 0] 148 msec 152 msec 148 msec
3 150.1.25.2 60 msec * 56 msec
R2#show mpls forwarding-table 150.1.1.1
Local Outgoing
Prefix
Bytes Label
Hop
Label Label or VC
or Tunnel Id
Switched
17
16
150.1.1.1/32
0
point2point

Outgoing

Next

interface
Se2/0.1

R2#traceroute 150.1.1.1
Type escape sequence to abort.
Tracing the route to 150.1.1.1
1 150.1.25.5 [MPLS: Label 16 Exp 0] 148 msec 164 msec 152 msec
2 150.1.45.4 [MPLS: Label 16 Exp 0] 148 msec 152 msec 148 msec
3 150.1.14.1 56 msec * 56 msec
Check the connection status between R2 and R3. Since this is an FR
link, R3 should learn the DLCI vi LMI.
R3#show frame-relay pvc | inc 203
DLCI = 203, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE =
Serial1/3.1
R2#show frame-relay pvc | inc 203
DLCI = 203, DLCI USAGE = SWITCHED, PVC STATUS = ACTIVE, INTERFACE =
Serial2/1
Check the L2 VPN VC status. The MTU size, interworking type and VC ID
should match on both sides. You should see a label stack generated for
this connection.

Copyright 2010 Internetwork Expert


- 309 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R1#show mpls l2transport vc detail


Local interface: Fa1/0 up, line protocol up, Ethernet up
Destination address: 150.1.2.2, VC ID: 406, VC status: up
Output interface: Se2/0.1, imposed label stack {22 19}
Preferred path: not configured
Default path: active
Tunnel label: 19, next hop point2point
Create time: 00:06:47, last status change time: 00:06:42
Signaling protocol: LDP, peer 150.1.2.2:0 up
MPLS VC labels: local 22, remote 22
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 200, send 62
byte totals:
receive 10656, send 6799
packet drops: receive 0, send 0
R2#show mpls l2transport vc detail
Local interface: Se2/1 up, line protocol up, FR DLCI 203 up
MPLS VC type is Ethernet, interworking type is Ethernet
Destination address: 150.1.1.1, VC ID: 406, VC status: up
Output interface: Se2/0.1, imposed label stack {22 16}
Preferred path: not configured
Default path: active
Tunnel label: 16, next hop point2point
Create time: 00:09:12, last status change time: 00:07:34
Signaling protocol: LDP, peer 150.1.1.1:0 up
MPLS VC labels: local 22, remote 22
Group ID: local 0, remote 0
MTU: local 1500, remote 1500
Remote interface description:
Sequencing: receive disabled, send disabled
VC statistics:
packet totals: receive 68, send 225
byte totals:
receive 6476, send 15556
packet drops: receive 0, send 0

Copyright 2010 Internetwork Expert


- 310 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Check the spanning tree status in R3. Since this is Ethernet


interworking, spanning tree in R3 should interwork with spanning tree
in SW1 (where R1 connects to):
R3#show spanning-tree 1
Bridge group 1 is executing the ieee compatible Spanning Tree protocol
Bridge Identifier has priority 32768, address 0000.0c20.eb40
Configured hello time 2, max age 20, forward delay 15
We are the root of the spanning tree
Topology change flag set, detected flag set
Number of topology changes 3 last change occurred 00:00:38 ago
from Serial1/3.1
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 0, topology change 27, notification 0, aging 15
Port 18 (Serial1/3.1) of Bridge group 1 is forwarding
Port path cost 7812, Port priority 128, Port Identifier 128.18.
Designated root has priority 32768, address 0000.0c20.eb40
Designated bridge has priority 32768, address 0000.0c20.eb40
Designated port id is 128.18, designated path cost 0
Timers: message age 0, forward delay 0, hold 0
Number of transitions to forwarding state: 2
BPDU: sent 48, received 2
SW1 sees the bridge in R3 to be directly connected by the virtue of L2
Verify connectivity end-to-end:
R3#ping 10.1.36.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.36.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 156/156/156
ms

Copyright 2010 Internetwork Expert


- 311 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

L2 VPNs: L2TPv3
Objective: Configure L2 VPN between R1 and R2 so that R4 and R6 can reach
each other as if they were directly connected. Do not use MPLS
encapsulation to accomplish this.
E0/0

OSPF
Area 2

F1/0
150.1.25.0/24

S2/0.1
Frame Relay

.5

502

R2
.2

10.1.46.0/24 VLAN 24

.4

R4

205

S0/0.1
R5
E0/0

.5
150.1.35.0/24 VLAN 35
.3

E0/1
R3
.3

S0/0.1
Frame Relay
301

OSPF
Area 1

103
.1

150.1.13.0/24

F1/0

S2/0.1
R1

10.1.46.0/24 VLAN16

OSPF
Area 0

.6

E0/1

Copyright 2010 Internetwork Expert


- 312 -

R6

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF in the network per the diagram supplied.
Create Loopbacks on R1, R2, R3, and R5 in the format 150.1.Y/Y/32 and
advertise them into OSPF
Configure L2TPv3 connection linking R1s and R2s connections to VLAN
16 and VLAN 24 respectively.
Configure a pseudowire-class for this connection to mark L2TPv3 packets
with DSCP value of CS3 and disable packet fragmentation in transit.
Ensure R4 and R6 can ping each other successfully.

Final Configuration
R1#
hostname R1
!
interface Loopback 0
ip address 150.1.1.1 255.255.255.255
!
pseudowire-class L2TPV3
encapsulation l2tpv3
ip local interface Loopback0
ip dfbit set
ip tos value 96
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.2.2 406 pw-class L2TPV3
!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 103
ip address 150.1.13.1 255.255.255.0
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 1
R2#
hostname R2
!
interface Loopback 0
ip address 150.1.2.2 255.255.255.255
!
pseudowire-class L2TPV3
encapsulation l2tpv3
ip local interface Loopback0

Copyright 2010 Internetwork Expert


- 313 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip dfbit set
ip tos value 96
!
interface FastEthernet 1/0
no shut
no ip address
xconnect 150.1.1.1 406 pw-class L2TPV3
!
interface Serial 2/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 2/0.1 point-to-point
frame-relay interface-dlci 205
ip address 150.1.25.2 255.255.255.0
!
router ospf 1
network 0.0.0.0 0.0.0.0 area 2
R3#
hostname R3
!
interface Loopback 0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet 0/1
no shutdown
ip address 150.1.35.3 255.255.255.0
!
interface Serial 1/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 1/0.1 point-to-point
frame-relay interface-dlci 301
ip address 150.1.13.3 255.255.255.0
!
router ospf 1
network 150.1.13.3 0.0.0.0 area 1
network 150.1.35.3 0.0.0.0 area 0
network 150.1.3.3 0.0.0.0 area 1
R4#
hostname R4
!
interface Ethernet 0/0
no shutdown
ip address 10.1.46.4 255.255.255.0
!
ip routing
R5#
hostname R5
!

Copyright 2010 Internetwork Expert


- 314 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Loopback 0
ip address 150.1.5.5 255.255.255.255
!
interface Serial 0/0
no shutdown
encapsulation frame-relay
no frame-relay inverse-arp
!
interface Serial 0/0.1 point-to-point
frame-relay interface-dlci 502
ip address 150.1.25.5 255.255.255.0
!
interface Ethernet 0/0
no shutdown
ip address 150.1.35.5 255.255.255.0
!
router ospf 1
network 150.1.25.5 0.0.0.0 area 2
network 150.1.35.5 0.0.0.0 area 0
network 150.1.5.5 0.0.0.0 area 2
R6#
hostname R6
!
interface Ethernet 0/1
no shutdown
ip address 10.1.46.6 255.255.255.0
!
ip routing
R7#
hostname R7
!
vtp mode transparent
vlan 24,35,16
!
interface FastEthernet 0/1
switchport host
switchport access vlan 16
!
interface FastEthernet 0/2
switchport host
switchport access vlan 24
!
interface FastEthernet 0/4
switchport host
switchport access vlan 24
!
interface FastEthernet 0/5
switchport host
switchport access vlan 35

R8#
hostname R8
!
vtp mode transparent

Copyright 2010 Internetwork Expert


- 315 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

vlan 24,35,16
!
interface FastEthernet 0/3
switchport host
switchport access vlan 35
!
interface FastEthernet 0/6
switchport host
switchport access vlan 16

Verification
Make sure R1 can reach R2s Loobpack0 interface:
R1#ping 150.1.2.2 source lo0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 150.1.2.2, timeout is 2 seconds:
Packet sent with a source address of 150.1.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 112/114/116
ms
Check for active L2TPv3 tunnels:
R1#show l2tun tunnel all
Tunnel Information Total tunnels 1 sessions 1
Tunnel id 39693 is up, remote id is 56, 1 active sessions
Tunnel state is established, time since change 00:04:23
Tunnel transport is IP (115)
Remote tunnel name is R2
Internet Address 150.1.2.2, port 0
Local tunnel name is R1
Internet Address 150.1.1.1, port 0
Tunnel domain is
VPDN group for tunnel is L2TP class for tunnel is
181 packets sent, 44 received
13037 bytes sent, 4169 received
Control Ns 8, Nr 6
Local RWS 10000 (default), Remote RWS 10000 (max)
Tunnel PMTU checking disabled
Retransmission time 1, max 1 seconds
Unsent queuesize 0, max 0
Resend queuesize 0, max 2
Total resends 2, ZLB ACKs sent 4
Current nosession queue check 0 of 5
Retransmit time distribution: 0 0 1 0 1 0 0 0 0
Sessions disconnected due to lack of resources 0

Copyright 2010 Internetwork Expert


- 316 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Check for active sessions within the tunnel:


R1#show l2tun session all
Session Information Total tunnels 1 sessions 1
Session id 65009 is up, tunnel id 39693
Call serial number is 3387600000
Remote tunnel name is R2
Internet address is 150.1.2.2
Session is L2TP signalled
Session state is established, time since change 00:05:27
221 Packets sent, 51 received
15746 Bytes sent, 4898 received
Receive packets dropped:
out-of-order:
0
total:
0
Send packets dropped:
exceeded session MTU:
0
total:
0
Session vcid is 406
Session Layer 2 circuit, type is Ethernet, name is FastEthernet1/0
Circuit state is UP
Remote session id is 50046, remote tunnel id 56
DF bit on, ToS reflect disabled, ToS value 96, TTL value 255
No session cookie information available
FS cached header information:
encap size = 24 bytes
00000000 00000000 00000000 00000000
00000000 00000000
Sequencing is off
Check the header prepended to the tunneled packets:
R1#show sss circuits
Current SSS Circuit Information: Total number of circuits 1
Common Circuit ID 0
Serial Num 1
Switch ID
1667482604
-------------------------------------------------------------------------Status Encapsulation
UP flg len dump
Y AES 0
Y AES 24 45600000 00004000 FF734C25 96010101 96010202
0000C37E

Copyright 2010 Internetwork Expert


- 317 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Test end-to-end connectivity:


R4#ping 10.1.46.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.46.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 156/156/156
ms

Copyright 2010 Internetwork Expert


- 318 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 319 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

PIM Dense Mode


Objective: Configure PIM Dense Mode throughout the OSPF domain so
multicast traffic sent from SW1 can be received by SW2.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1
150.1.15.0/24 VLAN 15

R2
Fa0/0

.2

OSPF
Area 0

150.1.24.0/24 VLAN 24

E0/0

.4

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

.5

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 320 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Dense-Mode on all transit interfaces between R1, R2, R3,
R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim dense-mode

Copyright 2010 Internetwork Expert


- 321 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

frame-relay interface-dlci 201


!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim dense-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 405
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert


- 322 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.45.5 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim dense-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Copyright 2010 Internetwork Expert


- 323 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
R1#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.15.5
FastEthernet0/0
150.1.12.2
Serial0/0.1
150.1.13.3
Serial0/1
R2#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.24.4
FastEthernet0/0
150.1.12.1
Serial0/0.1
R3#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.13.1
Serial1/2

R4#show ip pim neighbor


PIM Neighbor Table
Neighbor
Interface
Address
150.1.24.2
Ethernet0/0
150.1.45.5
Serial0/0.1
R5#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.56.6
Ethernet0/0
150.1.45.4
Serial0/0.1
150.1.15.1
Ethernet0/1

Uptime/Expires

Ver

00:11:55/00:01:38 v2
00:24:00/00:01:21 v2
00:23:55/00:01:28 v2

Uptime/Expires

Ver

00:24:20/00:01:20 v2
00:24:17/00:01:34 v2

Uptime/Expires

Ver

00:24:28/00:01:30 v2

Uptime/Expires

Ver

00:25:01/00:01:30 v2
00:24:40/00:01:43 v2

Uptime/Expires

Ver

00:25:32/00:01:21 v2
00:25:20/00:01:32 v2
00:14:10/00:01:22 v2

DR
Prio/Mode
1 / DR S
1 / S
1 / S

DR
Prio/Mode
1 / DR S
1 / S

DR
Prio/Mode
1 / S

DR
Prio/Mode
1 / S
1 / S

DR
Prio/Mode
1 / DR S
1 / S
1 / S

R6#show ip pim neighbor


PIM Neighbor Table
Mode: B - Bidir Capable, DR - Designated Router, N - Default DR Priority,
S - State Refresh Capable

Copyright 2010 Internetwork Expert


- 324 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I


Neighbor
Address
150.1.56.5

Version 1.0

Interface

Uptime/Expires

Ver

GigabitEthernet0/0

00:25:57/00:01:28 v2

DR
Prio/Mode
1 / S

SW1 generates multicast feed:


SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start now
SW1(config)#end
SW1#
(10.1.37.7,224.1.1.1) is flooded throughout the network to R6 and
pruned back to R3 as there are no receivers:
R6#debug ip pim
PIM(0): Insert (10.1.37.7,224.1.1.1) prune in nbr 150.1.56.5's queue
PIM(0): Building Join/Prune packet for nbr 150.1.56.5
PIM(0): Adding v2 (10.1.37.7/32, 224.1.1.1) Prune
PIM(0): Send v2 join/prune to 150.1.56.5 (GigabitEthernet0/0)
R3#debug ip pim
PIM(0): Received v2 Join/Prune on Serial1/2 from 150.1.13.1, to us
PIM(0): Prune-list: (10.1.37.7/32, 224.1.1.1)
PIM(0): Prune Serial1/2/224.1.1.1 from (10.1.37.7/32, 224.1.1.1)
R3#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:00:52/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Dense, 00:00:52/00:00:00
(10.1.37.7, 224.1.1.1), 00:00:52/00:02:08, flags: PT
Incoming interface: Ethernet0/0, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Prune/Dense, 00:00:48/00:02:11
R1#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:00:59/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
FastEthernet0/0, Forward/Dense, 00:00:59/00:00:00
Serial0/0.1, Forward/Dense, 00:00:59/00:00:00
Serial0/1, Forward/Dense, 00:00:59/00:00:00
(10.1.37.7, 224.1.1.1), 00:00:59/00:02:02, flags: PT
Incoming interface: Serial0/1, RPF nbr 150.1.13.3
Outgoing interface list:
FastEthernet0/0, Prune/Dense, 00:00:56/00:02:03
Serial0/0.1, Prune/Dense, 00:00:56/00:02:03

Copyright 2010 Internetwork Expert


- 325 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#show ip mroute 224.1.1.1


<output omitted>
(*, 224.1.1.1), 00:01:07/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
FastEthernet0/0, Forward/Dense, 00:01:07/00:00:00
Serial0/0.1, Forward/Dense, 00:01:07/00:00:00
(10.1.37.7, 224.1.1.1), 00:01:07/00:01:55, flags: PT
Incoming interface: Serial0/0.1, RPF nbr 150.1.12.1
Outgoing interface list:
FastEthernet0/0, Prune/Dense, 00:01:02/00:01:57
R4#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:01:13/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Ethernet0/0, Forward/Dense, 00:01:13/00:00:00
Serial0/0.1, Forward/Dense, 00:01:13/00:00:00
(10.1.37.7, 224.1.1.1), 00:01:13/00:01:48, flags: PT
Incoming interface: Serial0/0.1, RPF nbr 150.1.45.5
Outgoing interface list:
Ethernet0/0, Prune/Dense, 00:01:14/00:01:45
R5#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:01:17/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Ethernet0/0, Forward/Dense, 00:01:17/00:00:00
Serial0/0.1, Forward/Dense, 00:01:17/00:00:00
Ethernet0/1, Forward/Dense, 00:01:17/00:00:00
(10.1.37.7, 224.1.1.1), 00:01:17/00:01:51, flags: PT
Incoming interface: Ethernet0/1, RPF nbr 150.1.15.1
Outgoing interface list:
Ethernet0/0, Prune/Dense, 00:01:18/00:01:41
Serial0/0.1, Prune/Dense, 00:01:18/00:01:41
R6#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:01:20/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Dense, 00:01:20/00:00:00
(10.1.37.7, 224.1.1.1), 00:01:20/00:01:39, flags: PT
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list: Null

Copyright 2010 Internetwork Expert


- 326 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2 requests to traffic for the group 224.1.1.1:


SW2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1
SW2(config-if)#end
SW2#
R6 sends PIM dense graft to add itself to the tree for 224.1.1.1:
R6#debug ip pim
PIM(0): Building Graft message for 224.1.1.1, GigabitEthernet0/0:
10.1.37.7/32
PIM(0): Send v2 Graft to 150.1.56.5 (GigabitEthernet0/0)
PIM(0): Building Graft message for 224.1.1.1, GigabitEthernet0/1: no
entries
PIM(0): Received v2 Graft-Ack on GigabitEthernet0/0 from 150.1.56.5
Group 224.1.1.1:
10.1.37.7/32
R5 receives graft request from R6 and continues forwarding request
upstream toward source:
PIM(0): Join-list: (10.1.37.7/32, 224.1.1.1)
PIM(0): Add Ethernet0/0/0.0.0.0 to (10.1.37.7, 224.1.1.1), Forward
state, by PIM Graft
PIM(0): Send v2 Graft-Ack on Ethernet0/0 to 150.1.56.6
PIM(0): Building Graft message for 224.1.1.1, Ethernet0/0: no entries
PIM(0): Building Graft message for 224.1.1.1, Serial0/0.1: no entries
PIM(0): Building Graft message for 224.1.1.1, Ethernet0/1:
10.1.37.7/32
PIM(0): Send v2 Graft to 150.1.15.1 (Ethernet0/1)
PIM(0): Received v2 Graft-Ack on Ethernet0/1 from 150.1.15.1
Group 224.1.1.1:
10.1.37.7/32
Dense tree is built back to the source and traffic begins to flow:
R3#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:02:19/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Dense, 00:02:19/00:00:00
(10.1.37.7, 224.1.1.1), 00:02:19/00:02:51, flags: T
Incoming interface: Ethernet0/0, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Dense, 00:00:42/00:00:00
R1#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:01:59/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
FastEthernet0/0, Forward/Dense, 00:01:59/00:00:00
Serial0/0.1, Forward/Dense, 00:01:59/00:00:00
Serial0/1, Forward/Dense, 00:01:59/00:00:00

Copyright 2010 Internetwork Expert


- 327 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

(10.1.37.7, 224.1.1.1), 00:01:59/00:02:52, flags: T


Incoming interface: Serial0/1, RPF nbr 150.1.13.3
Outgoing interface list:
FastEthernet0/0, Forward/Dense, 00:00:23/00:00:00
Serial0/0.1, Prune/Dense, 00:01:56/00:01:03
Traffic is still prunted through R2 and R4 as they are not in the SPT
from SW1 to SW2:
R2#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:02:13/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
FastEthernet0/0, Forward/Dense, 00:02:13/00:00:00
Serial0/0.1, Forward/Dense, 00:02:13/00:00:00
(10.1.37.7, 224.1.1.1), 00:02:13/00:00:49, flags: PT
Incoming interface: Serial0/0.1, RPF nbr 150.1.12.1
Outgoing interface list:
FastEthernet0/0, Prune/Dense, 00:02:09/00:00:50
R4#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:02:24/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Ethernet0/0, Forward/Dense, 00:02:24/00:00:00
Serial0/0.1, Forward/Dense, 00:02:24/00:00:00
(10.1.37.7, 224.1.1.1), 00:02:24/00:00:37, flags: PT
Incoming interface: Serial0/0.1, RPF nbr 150.1.45.5
Outgoing interface list:
Ethernet0/0, Prune/Dense, 00:02:25/00:00:34
R5#show ip mroute 224.1.1.1
(*, 224.1.1.1), 00:02:29/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Ethernet0/0, Forward/Dense, 00:02:29/00:00:00
Serial0/0.1, Forward/Dense, 00:02:29/00:00:00
Ethernet0/1, Forward/Dense, 00:02:29/00:00:00
(10.1.37.7, 224.1.1.1), 00:02:29/00:02:59, flags: T
Incoming interface: Ethernet0/1, RPF nbr 150.1.15.1
Outgoing interface list:
Ethernet0/0, Forward/Dense, 00:00:53/00:00:00
Serial0/0.1, Prune/Dense, 00:02:30/00:00:29

Copyright 2010 Internetwork Expert


- 328 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#show ip mroute 224.1.1.1


<output omitted>
(*, 224.1.1.1), 00:02:39/stopped, RP 0.0.0.0, flags: DC
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Dense, 00:02:39/00:00:00
GigabitEthernet0/1, Forward/Dense, 00:01:02/00:00:00
(10.1.37.7, 224.1.1.1), 00:02:39/00:02:54, flags: T
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Dense, 00:01:03/00:00:00
Traffic flows end to end from SW1 to SW2:
R6#debug ip mpacket
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=251, prot=17, len=44(44), mforward

Copyright 2010 Internetwork Expert


- 329 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

PIM Sparse Mode


Objective: Configure PIM Sparse Mode throughout the OSPF domain with R2
as the Rendevous Point so multicast traffic sent from SW1 can be
received by SW2.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1
150.1.15.0/24 VLAN 15

R2
Fa0/0

.2

OSPF
Area 0

150.1.24.0/24 VLAN 24

E0/0

.4

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

.5

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 330 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Sparse-Mode on all transit interfaces between R1, R2, R3,
R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Configure R2s Loopback interface as the Rendezvous Point for the
multicast network
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay

Copyright 2010 Internetwork Expert


- 331 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 201
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 405
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2

Copyright 2010 Internetwork Expert


- 332 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24

Copyright 2010 Internetwork Expert


- 333 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
R1#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.15.5
FastEthernet0/0
150.1.12.2
Serial0/0.1
150.1.13.3
Serial0/1
R2#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.24.4
FastEthernet0/0
150.1.12.1
Serial0/0.1
R3#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.13.1
Serial1/2

Uptime/Expires

Ver

00:11:55/00:01:38 v2
00:24:00/00:01:21 v2
00:23:55/00:01:28 v2

Uptime/Expires

Ver

00:24:20/00:01:20 v2
00:24:17/00:01:34 v2

Uptime/Expires

Ver

00:24:28/00:01:30 v2

Copyright 2010 Internetwork Expert


- 334 -

DR
Prio/Mode
1 / DR S
1 / S
1 / S

DR
Prio/Mode
1 / DR S
1 / S

DR
Prio/Mode
1 / S

www.INE.com

CCIE Service Provider Lab Workbook Volume I


R4#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.24.2
Ethernet0/0
150.1.45.5
Serial0/0.1
R5#show ip pim neighbor
PIM Neighbor Table
Neighbor
Interface
Address
150.1.56.6
Ethernet0/0
150.1.45.4
Serial0/0.1
150.1.15.1
Ethernet0/1

Version 1.0

Uptime/Expires

Ver

00:25:01/00:01:30 v2
00:24:40/00:01:43 v2

Uptime/Expires

Ver

00:25:32/00:01:21 v2
00:25:20/00:01:32 v2
00:14:10/00:01:22 v2

DR
Prio/Mode
1 / S
1 / S

DR
Prio/Mode
1 / DR S
1 / S
1 / S

R6#show ip pim neighbor


PIM Neighbor Table
Mode: B - Bidir Capable, DR - Designated Router, N - Default DR Priority,
S - State Refresh Capable
Neighbor
Interface
Uptime/Expires
Ver
DR
Address
Prio/Mode
150.1.56.5
GigabitEthernet0/0
00:25:57/00:01:28 v2
1 / S

SW1 generates multicast feed:


SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start now
SW1(config)#end
SW1#
R3, the PIM DR, sends unicast register message to R2, the RP:
R3#debug ip pim
PIM debugging is on
PIM(0): Send v2 Register to 150.1.2.2 for 10.1.37.7, group 224.1.1.1
PIM(0): Received v2 Register-Stop on Serial1/2 from 150.1.2.2
PIM(0):
for source 10.1.37.7, group 224.1.1.1
PIM(0): Clear Registering flag to 150.1.2.2 for (10.1.37.7/32,
224.1.1.1)
R3 and R2 have the (*,G) and (S,G) entry for 224.1.1.1 installed
Other devices do not since there are no receivers:
R3#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:00:13/stopped, RP 150.1.2.2, flags: SPF
Incoming interface: Serial1/2, RPF nbr 150.1.13.1
Outgoing interface list: Null
(10.1.37.7, 224.1.1.1), 00:00:13/00:02:52, flags: PFT
Incoming interface: Ethernet0/0, RPF nbr 0.0.0.0
Outgoing interface list: Null

Copyright 2010 Internetwork Expert


- 335 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#show ip mroute 224.1.1.1


<output omitted>
(*, 224.1.1.1), 00:05:02/stopped, RP 150.1.2.2, flags: SP
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list: Null
(10.1.37.7, 224.1.1.1), 00:05:02/00:01:57, flags: P
Incoming interface: Serial0/0.1, RPF nbr 150.1.12.1
Outgoing interface list: Null
R1#show ip mroute 224.1.1.1
Group 224.1.1.1 not found
R4#show ip mroute 224.1.1.1
Group 224.1.1.1 not found
R5#show ip mroute 224.1.1.1
Group 224.1.1.1 not found
R6#show ip mroute 224.1.1.1
Group 224.1.1.1 not found
SW2 generates an IGMP join and requests delivery of 224.1.1.1:
SW2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1
SW2(config-if)#end
SW2#
R6 forwards the PIM join message upstream towards the RP:
R6#debug ip pim
PIM(0): Check RP 150.1.2.2 into the (*, 224.1.1.1) entry
PIM(0): Building Triggered (*,G) Join / (S,G,RP-bit) Prune message for
224.1.1.1
PIM(0): Insert (*,224.1.1.1) join in nbr 150.1.56.5's queue
PIM(0): Building Join/Prune packet for nbr 150.1.56.5
PIM(0): Adding v2 (150.1.2.2/32, 224.1.1.1), WC-bit, RPT-bit, S-bit
Join
PIM(0): Send v2 join/prune to 150.1.56.5 (GigabitEthernet0/0)
Shortest Path Tree is built from SW1 to R3, R1, R5, R6, SW2:
R3#show ip mroute
<output omitted>
(*, 224.1.1.1), 00:09:27/stopped, RP 150.1.2.2, flags: SPF
Incoming interface: Serial1/2, RPF nbr 150.1.13.1
Outgoing interface list: Null
(10.1.37.7, 224.1.1.1), 00:09:27/00:03:28, flags: FT
Incoming interface: Ethernet0/0, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Sparse, 00:03:45/00:02:44
<output omitted>

Copyright 2010 Internetwork Expert


- 336 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R1#show ip mroute
<output omitted>
(*, 224.1.1.1), 00:03:12/stopped, RP 150.1.2.2, flags: SP
Incoming interface: Serial0/0.1, RPF nbr 150.1.12.2
Outgoing interface list: Null
(10.1.37.7, 224.1.1.1), 00:03:12/00:03:24, flags: T
Incoming interface: Serial0/1, RPF nbr 150.1.13.3
Outgoing interface list:
Serial0/0.1, Forward/Sparse, 00:03:12/00:03:15
FastEthernet0/0, Forward/Sparse, 00:03:09/00:03:18
(*, 224.0.1.40), 00:10:38/00:02:44, RP 150.1.2.2, flags: SJCL
Incoming interface: Serial0/0.1, RPF nbr 150.1.12.2
Outgoing interface list:
R5#show ip mroute
<output omitted>
(*, 224.1.1.1), 00:04:58/00:03:29, RP 150.1.2.2, flags: S
Incoming interface: Serial0/0.1, RPF nbr 150.1.45.4
Outgoing interface list:
Ethernet0/0, Forward/Sparse, 00:04:58/00:03:29
(10.1.37.7, 224.1.1.1), 00:04:55/00:03:24, flags: T
Incoming interface: Ethernet0/1, RPF nbr 150.1.15.1
Outgoing interface list:
Ethernet0/0, Forward/Sparse, 00:04:55/00:03:29
<output omitted>
R6#show ip mroute
<output omitted>
(*, 224.1.1.1), 00:05:24/stopped, RP 150.1.2.2, flags: SJC
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Sparse, 00:05:24/00:02:51
(10.1.37.7, 224.1.1.1), 00:05:21/00:02:55, flags: JT
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Sparse, 00:05:21/00:02:51
<output omitted>
R6 forwards multicast feed to SW2:
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int g0/0
R6(config-if)#no ip mroute-cache
R6(config-if)#do debug ip mpacket
IP multicast packets debugging is on
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=251, prot=17, len=44(44), mforward

Copyright 2010 Internetwork Expert


- 337 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Multicast RPF Failure


Objective: Configure PIM Dense Mode throughout the OSPF domain except on
the link between R1 and R5. Configure static multicast routes so that
multicast traffic sent from SW1 can be received by SW2.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1
150.1.15.0/24 VLAN 15

R2
Fa0/0

.2

OSPF
Area 0

150.1.24.0/24 VLAN 24

E0/0

.4

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

.5

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 338 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Dense-Mode on all transit interfaces between R1, R2, R3,
R4, R5, & R6 except the link between R1 and R5
Enable PIM Dense-Mode on R3 & R6s connections to SW1 and SW2
Configure a static multicast route on R4 so that traffic from 10.1.37.0/24
can be received via R2
Configure a static multicast route on R5 so that traffic from 10.1.37.0/24
can be received via R4

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay

Copyright 2010 Internetwork Expert


- 339 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 201
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim dense-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 405
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip mroute 10.1.37.0 255.255.255.0 150.1.24.2
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!

Copyright 2010 Internetwork Expert


- 340 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip mroute 10.1.37.0 255.255.255.0 150.1.45.4
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim dense-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5

Copyright 2010 Internetwork Expert


- 341 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

switchport access vlan 56


!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
SW1 generates multicast feed:
SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start now
SW1(config)#end
SW1#
SW2 requests to traffic for the group 224.1.1.1:
SW2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1
SW2(config-if)#end
SW2#

Copyright 2010 Internetwork Expert


- 342 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Before static mroute R4 drops traffic due to RPF failure:


R4#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:05:07/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Ethernet0/0, Forward/Dense, 00:05:07/00:00:00
Serial0/0.1, Forward/Dense, 00:05:07/00:00:00
Incoming multicast interface is Serial0/0.1:
(10.1.37.7, 224.1.1.1), 00:02:02/00:00:57, flags:
Incoming interface: Serial0/0.1, RPF nbr 150.1.45.5
Outgoing interface list:
Ethernet0/0, Forward/Dense, 00:02:03/00:00:00
Incoming unicast interface is Ethernet0/0:
R4#show ip route 10.1.37.7
Routing entry for 10.1.37.0/24
Known via "ospf 1", distance 110, metric 148, type intra area
Last update from 150.1.24.2 on Ethernet0/0, 02:06:45 ago
Routing Descriptor Blocks:
* 150.1.45.5, from 150.1.3.3, 02:06:45 ago, via Serial0/0.1
Route metric is 148, traffic share count is 1
150.1.24.2, from 150.1.3.3, 02:06:45 ago, via Ethernet0/0
Route metric is 148, traffic share count is 1
R4#conf t
Enter configuration commands, one per line.
R4(config)#int e0/0
R4(config-if)#no ip mroute-cache
R4(config-if)#do debug ip mpacket
IP multicast packets debugging is on

End with CNTL/Z.

Packets are dropped due to RPF failure:


IP(0): s=10.1.37.7 (Ethernet0/0) d=224.1.1.1 id=0, ttl=251, prot=17,
len=60(44), not RPF interface
R4(config-if)#
R4#show ip mroute count
IP Multicast Statistics
3 routes using 1988 bytes of memory
2 groups, 0.50 average sources per group
Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kilobits per second
Other counts: Total/RPF failed/Other drops(OIF-null, rate-limit etc)
Group: 224.1.1.1, Source count: 1, Packets forwarded: 0, Packets received: 32
Source: 10.1.37.7/32, Forwarding: 0/0/0/0, Other: 32/32/0

Copyright 2010 Internetwork Expert


- 343 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Static mroute is configured to bypass RPF check:


R4(config)#ip mroute 10.1.37.0 255.255.255.0 150.1.24.2
R4(config)#end
R4#
IP(0): s=10.1.37.7 (Ethernet0/0) d=224.1.1.1 (Serial0/0.1) id=0,
ttl=251, prot=17, len=44(44), mforward
R5 expects multicast packet in E0/1 from R1 but receives it from R4:
R5#debug ip mpacket
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 id=0, ttl=250, prot=17,
len=48(44), not RPF interface
R5#show ip route 10.1.37.7
Routing entry for 10.1.37.0/24
Known via "ospf 1", distance 110, metric 84, type intra area
Last update from 150.1.15.1 on Ethernet0/1, 02:07:45 ago
Routing Descriptor Blocks:
* 150.1.15.1, from 150.1.3.3, 02:07:45 ago, via Ethernet0/1
Route metric is 84, traffic share count is 1
Static mroute overrides RPF check:
R5#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R5(config)#ip mroute 10.1.37.0 255.255.255.0 150.1.45.4
R5(config)#end
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 (Ethernet0/0) id=0,
ttl=250, prot=17, len=44(44), mforward
Traffic is now delivered to SW2:
R6#debug ip mpacket
IP multicast packets debugging is on
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=249, prot=17, len=44(44), mforward
R6#show ip mroute 224.1.1.1
<output omitted>
(*, 224.1.1.1), 00:07:37/stopped, RP 0.0.0.0, flags: DC
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Dense, 00:07:37/00:00:00
GigabitEthernet0/1, Forward/Dense, 00:07:37/00:00:00
(10.1.37.7, 224.1.1.1), 00:00:22/00:02:58, flags: T
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Dense, 00:00:23/00:00:00

Copyright 2010 Internetwork Expert


- 344 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 345 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Auto-RP
Objective: Configure PIM Sparse-Dense Mode and Auto-RP throughout the
OSPF domain so multicast traffic sent from SW1 can be received by
SW2. R1 should be the RP and R5 should be the mapping agent.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1
150.1.15.0/24 VLAN 15

R2
Fa0/0

.2

OSPF
Area 0

150.1.24.0/24 VLAN 24

E0/0

.4

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

.5

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 346 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Sparse-Dense Mode on all transit interfaces between R1,
R2, R3, R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Configure R1 to advertise its Loopback interface as candidate
Rendezvous Point via Auto-RP
Configure R5 to originate Auto-RP Mapping Agent messages from its
Loopback interface
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
ip pim sparse-dense-mode
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-announce Loopback0 scope 16
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0

Copyright 2010 Internetwork Expert


- 347 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 201
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-dense-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 405
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255

Copyright 2010 Internetwork Expert


- 348 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-discovery Loopback0 scope 16
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-dense-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24

Copyright 2010 Internetwork Expert


- 349 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
R1 advertises itself to the mapping agent via 224.0.1.39:
R5#show ip mroute 224.0.1.39
<output omitted>
(*, 224.0.1.39), 00:11:24/stopped, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Ethernet0/0, Forward/Sparse-Dense, 00:11:24/00:00:00
Ethernet0/1, Forward/Sparse-Dense, 00:11:24/00:00:00
Serial0/0.1, Forward/Sparse-Dense, 00:11:24/00:00:00
Loopback0, Forward/Sparse-Dense, 00:11:24/00:00:00
(150.1.1.1, 224.0.1.39), 00:11:01/00:02:59, flags: LT
Incoming interface: Ethernet0/1, RPF nbr 150.1.15.1
Outgoing interface list:
Serial0/0.1, Forward/Sparse-Dense, 00:09:45/00:00:00
Loopback0, Forward/Sparse-Dense, 00:11:01/00:00:00
Ethernet0/0, Forward/Sparse-Dense, 00:07:58/00:00:00

Copyright 2010 Internetwork Expert


- 350 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R5 advertises R1 as the RP to all other routers via 224.0.1.40:


R3#show ip mroute 224.0.1.40
<output omitted>
(*, 224.0.1.40), 00:06:48/stopped, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Sparse-Dense, 00:06:34/00:00:00
(150.1.5.5, 224.0.1.40), 00:05:39/00:02:19, flags: PLTX
Incoming interface: Serial1/2, RPF nbr 150.1.13.1
Outgoing interface list: Null
R1 is assigned as the RP via Auto-RP:
R3#show ip pim rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/4
RP 150.1.1.1 (?), v2v1
Info source: 150.1.5.5 (?), elected via Auto-RP
Uptime: 00:04:55, expires: 00:02:00
SW1 originates multicast feed and R3 registers the source with the RP:
SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start after 00:00:05
SW1(config)#end
SW1#
R3#debug ip pim
PIM(0): Check RP 150.1.1.1 into the (*, 224.1.1.1) entry
PIM(0): Send v2 Register to 150.1.1.1 for 10.1.37.7, group 224.1.1.1
PIM(0): Received v2 Register-Stop on Serial1/2 from 150.1.1.1
PIM(0):
for source 10.1.37.7, group 224.1.1.1
PIM(0): Clear Registering flag to 150.1.1.1 for (10.1.37.7/32,
224.1.1.1)
SW2 joins group and R6 sends PIM Join upstream towards RP:
SW2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1
R6#debug ip pim
PIM debugging is on
PIM(0): Insert (10.1.37.7,224.1.1.1) join in nbr 150.1.56.5's queue
PIM(0): Building Join/Prune packet for nbr 150.1.56.5
PIM(0): Adding v2 (10.1.37.7/32, 224.1.1.1), S-bit Join
PIM(0): Send v2 join/prune to 150.1.56.5 (GigabitEthernet0/0)

Copyright 2010 Internetwork Expert


- 351 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Multicast traffic flows from SW1 to SW2:


R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int g0/0
R6(config-if)#no ip mroute-cache
R6(config-if)#do debug ip mpacket
IP multicast packets debugging is on
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=251, prot=17, len=44(44), mforward
224.0.1.39 and 224.0.1.40 are in PIM Dense mode
All other groups are Sparse:
R6#show ip mroute
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
L - Local, P - Pruned, R - RP-bit set, F - Register flag,
T - SPT-bit set, J - Join SPT, M - MSDP created entry,
X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
U - URD, I - Received Source Specific Host Report,
Z - Multicast Tunnel, z - MDT-data group sender,
Y - Joined MDT-data group, y - Sending to MDT-data group
Outgoing interface flags: H - Hardware switched, A - Assert winner
Timers: Uptime/Expires
Interface state: Interface, Next-Hop or VCD, State/Mode

(*, 224.1.1.1), 00:02:49/stopped, RP 150.1.1.1, flags: SJC


Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Sparse-Dense, 00:02:49/00:02:49
(10.1.37.7, 224.1.1.1), 00:02:44/00:02:51, flags: JT
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Sparse-Dense, 00:02:44/00:02:49
(*, 224.0.1.39), 00:11:19/stopped, RP 0.0.0.0, flags: DC
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Sparse-Dense, 00:11:19/00:00:00
(150.1.1.1, 224.0.1.39), 00:00:20/00:02:39, flags: PTX
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list: Null
(*, 224.0.1.40), 00:11:20/stopped, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Sparse-Dense, 00:11:20/00:00:00
(150.1.5.5, 224.0.1.40), 00:11:18/00:02:35, flags: PLTX
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list: Null

Copyright 2010 Internetwork Expert


- 352 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 353 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Auto-RP Multiple Candidate RPs


Objective: Configure PIM Sparse-Dense Mode and Auto-RP throughout the
OSPF domain with R2 as the RP for groups 224.0.0.0/5 and R4 as
the RP for groups 232.0.0.0/5. R5 should be the Mapping Agent.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1
150.1.15.0/24 VLAN 15

R2
Fa0/0

.2

OSPF
Area 0

150.1.24.0/24 VLAN 24

E0/0

.4

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

.5

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 354 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Sparse-Dense Mode on all transit interfaces between R1,
R2, R3, R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Configure R2 to advertise its Loopback interface as candidate
Rendezvous Point via Auto-RP for groups 224.0.0.0/4
Configure R4 to advertise its Loopback interface as candidate
Rendezvous Point via Auto-RP for groups 232.0.0.0/4
Configure R5 to originate Auto-RP Mapping Agent messages from its
Loopback interface
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
ip pim sparse-dense-mode
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0

Copyright 2010 Internetwork Expert


- 355 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 201
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-announce Loopback0 scope 16 group-list 1
!
access-list 1 permit 224.0.0.0 7.255.255.255
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-dense-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip pim sparse-dense-mode
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 405
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!

Copyright 2010 Internetwork Expert


- 356 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip pim send-rp-announce Loopback0 scope 16 group-list 1


!
access-list 1 permit 232.0.0.0 7.255.255.255
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-discovery Loopback0 scope 16
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-dense-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!

Copyright 2010 Internetwork Expert


- 357 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
R2 and R4 advertise themselves to the mapping agent via 224.0.1.39:
R5#show ip mroute 224.0.1.39
<output omitted>
(*, 224.0.1.39), 00:09:23/stopped, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Ethernet0/0, Forward/Sparse-Dense, 00:09:23/00:00:00
Ethernet0/1, Forward/Sparse-Dense, 00:09:23/00:00:00
Serial0/0.1, Forward/Sparse-Dense, 00:09:23/00:00:00
Loopback0, Forward/Sparse-Dense, 00:09:23/00:00:00
(150.1.2.2, 224.0.1.39), 00:09:03/00:02:57, flags: LT
Incoming interface: Serial0/0.1, RPF nbr 150.1.45.4
Outgoing interface list:
Loopback0, Forward/Sparse-Dense, 00:09:03/00:00:00
Ethernet0/1, Forward/Sparse-Dense, 00:00:01/00:00:00
Ethernet0/0, Forward/Sparse-Dense, 00:09:03/00:00:00

Copyright 2010 Internetwork Expert


- 358 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

(150.1.4.4, 224.0.1.39), 00:08:27/00:02:36, flags: LT


Incoming interface: Serial0/0.1, RPF nbr 150.1.45.4
Outgoing interface list:
Loopback0, Forward/Sparse-Dense, 00:08:27/00:00:00
Ethernet0/1, Forward/Sparse-Dense, 00:08:27/00:00:00
Ethernet0/0, Forward/Sparse-Dense, 00:08:27/00:00:00
<output omitted>
R5 advertises R1 as the RP to all other routers via 224.0.1.40:
R3#show ip mroute 224.0.1.40
<output omitted>
(*, 224.0.1.40), 00:06:48/stopped, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Sparse-Dense, 00:06:34/00:00:00
(150.1.5.5, 224.0.1.40), 00:05:39/00:02:19, flags: PLTX
Incoming interface: Serial1/2, RPF nbr 150.1.13.1
Outgoing interface list: Null
Both R2 and R4 are assigned as RPs via Auto-RP:
R3#show ip pim rp mapping
R3#show ip pim rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/5
RP 150.1.2.2 (?), v2v1
Info source: 150.1.5.5
Uptime: 00:08:25,
Group(s) 232.0.0.0/5
RP 150.1.4.4 (?), v2v1
Info source: 150.1.5.5
Uptime: 00:07:49,

(?), elected via Auto-RP


expires: 00:02:01

(?), elected via Auto-RP


expires: 00:02:03

SW1 originates multicast feeds:


SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#rtr 2
SW1(config-rtr)#type udpEcho dest-ipaddr 232.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start after 00:00:05
SW1(config)#rtr schedule 2 start after 00:00:05
SW1(config)#end
SW1#

Copyright 2010 Internetwork Expert


- 359 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R3 registers 224.1.1.1 with R2 and 232.1.1.1 with R4:


R3#debug ip pim
PIM(0): Check RP 150.1.2.2 into the (*, 224.1.1.1) entry
PIM(0): Send v2 Register to 150.1.2.2 for 10.1.37.7, group 224.1.1.1
PIM(0): Check RP 150.1.4.4 into the (*, 232.1.1.1) entry
PIM(0): Send v2 Register to 150.1.4.4 for 10.1.37.7, group 232.1.1.1
PIM(0): Received v2 Register-Stop on Serial1/2 from 150.1.2.2
PIM(0):
for source 10.1.37.7, group 224.1.1.1
PIM(0): Clear Registering flag to 150.1.2.2 for (10.1.37.7/32,
224.1.1.1)
PIM(0): Received v2 Register-Stop on Serial1/2 from 150.1.4.4
PIM(0):
for source 10.1.37.7, group 232.1.1.1
PIM(0): Clear Registering flag to 150.1.4.4 for (10.1.37.7/32,
232.1.1.1)
SW2 joins groups and R6 sends PIM
SW2#conf t
Enter configuration commands, one
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group
SW2(config-if)#ip igmp join-group

Joins upstream towards RP:


per line.

End with CNTL/Z.

224.1.1.1
232.1.1.1

R6#debug ip pim
PIM(0): Adding v2 (10.1.37.7/32, 224.1.1.1), S-bit Join
PIM(0): Send v2 join/prune to 150.1.56.5 (GigabitEthernet0/0)
PIM(0): Insert (10.1.37.7,232.1.1.1) join in nbr 150.1.56.5's queue
PIM(0): Building Join/Prune packet for nbr 150.1.56.5
PIM(0): Adding v2 (10.1.37.7/32, 232.1.1.1), S-bit Join
PIM(0): Send v2 join/prune to 150.1.56.5 (GigabitEthernet0/0)
R6#
Multicast traffic flows from SW1 to SW2:
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int g0/0
R6(config-if)#no ip mroute-cache
R6(config-if)#do debug ip mpacket
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=251, prot=17, len=44(44), mforward
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=232.1.1.1
(GigabitEthernet0/1) id=0, ttl=251, prot=17, len=44(44), mforward

Copyright 2010 Internetwork Expert


- 360 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

224.0.1.39 and 224.0.1.40 are in PIM Dense mode


All other groups are Sparse:
R6#show ip mroute
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
L - Local, P - Pruned, R - RP-bit set, F - Register flag,
T - SPT-bit set, J - Join SPT, M - MSDP created entry,
X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
U - URD, I - Received Source Specific Host Report,
Z - Multicast Tunnel, z - MDT-data group sender,
Y - Joined MDT-data group, y - Sending to MDT-data group
Outgoing interface flags: H - Hardware switched, A - Assert winner
Timers: Uptime/Expires
Interface state: Interface, Next-Hop or VCD, State/Mode
(*, 232.1.1.1), 00:04:13/stopped, RP 150.1.4.4, flags: SJC
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Sparse-Dense, 00:04:13/00:02:23
(10.1.37.7, 232.1.1.1), 00:04:12/00:02:52, flags: JT
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Sparse-Dense, 00:04:12/00:02:23
(*, 224.1.1.1), 00:04:13/stopped, RP 150.1.2.2, flags: SJC
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Sparse-Dense, 00:04:13/00:02:30
(10.1.37.7, 224.1.1.1), 00:04:12/00:02:52, flags: JT
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list:
GigabitEthernet0/1, Forward/Sparse-Dense, 00:04:12/00:02:30
(*, 224.0.1.39), 00:09:42/stopped, RP 0.0.0.0, flags: DC
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Sparse-Dense, 00:09:42/00:00:00
(150.1.2.2, 224.0.1.39), 00:00:22/00:02:38, flags: PTX
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list: Null
(150.1.4.4, 224.0.1.39), 00:02:46/00:00:13, flags: PTX
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list: Null
(*, 224.0.1.40), 00:09:42/stopped, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
GigabitEthernet0/0, Forward/Sparse-Dense, 00:09:42/00:00:00
(150.1.5.5, 224.0.1.40), 00:09:23/00:02:07, flags: PLTX
Incoming interface: GigabitEthernet0/0, RPF nbr 150.1.56.5
Outgoing interface list: Null

Copyright 2010 Internetwork Expert


- 361 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Auto-RP Filtering Candidate RPs


Objective: Configure PIM Sparse-Dense Mode and Auto-RP throughout the
OSPF domain with R2 as the RP for groups 224.0.0.0/5 and R4 as
the RP for groups 232.0.0.0/5. R5 should be the Mapping Agent and
should prevent any additional devices from being elected RPs.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1
150.1.15.0/24 VLAN 15

R2
Fa0/0

.2

OSPF
Area 0

150.1.24.0/24 VLAN 24

E0/0

.4

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

.5

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 362 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Sparse-Dense Mode on all transit interfaces between R1,
R2, R3, R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Configure R2 to advertise its Loopback interface as candidate
Rendezvous Point via Auto-RP for groups 224.0.0.0/4
Configure R4 to advertise its Loopback interface as candidate
Rendezvous Point via Auto-RP for groups 232.0.0.0/4
Configure R5 to originate Auto-RP Mapping Agent messages from its
Loopback interface
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
ip pim sparse-dense-mode
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0

Copyright 2010 Internetwork Expert


- 363 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 201
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-announce Loopback0 scope 16 group-list 1
!
access-list 1 permit 224.0.0.0 7.255.255.255
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-dense-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
ip pim sparse-dense-mode
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 405
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!

Copyright 2010 Internetwork Expert


- 364 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip pim send-rp-announce Loopback0 scope 16 group-list 1


!
access-list 1 permit 232.0.0.0 7.255.255.255
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim sparse-dense-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-discovery Loopback0 scope 16
ip pim rp-announce-filter rp-list R2_LOOPBACK group-list R2_GROUPS
ip pim rp-announce-filter rp-list R4_LOOPBACK group-list R4_GROUPS
ip pim rp-announce-filter rp-list ALL_OTHER_RPS group-list NO_GROUPS
!
ip access-list standard ALL_OTHER_RPS
deny
150.1.2.2
deny
150.1.4.4
permit any
!
ip access-list standard NO_GROUPS
deny
224.0.0.0 3.255.255.255
!
ip access-list standard R2_GROUPS
permit 224.0.0.0 7.255.255.255
!
ip access-list standard R2_LOOPBACK
permit 150.1.2.2
!
ip access-list standard R4_GROUPS
permit 232.0.0.0 7.255.255.255
!
ip access-list standard R4_LOOPBACK
permit 150.1.4.4

Copyright 2010 Internetwork Expert


- 365 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-dense-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-dense-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0

Copyright 2010 Internetwork Expert


- 366 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
R1 and R3 advertise themselves as rogue RPs but are filtered by R5:
R1(config)#int lo0
R1(config-if)#ip pim sparse-dense-mode
R1(config-if)#ip pim send-rp-announce loopback0 scope 16
R3(config)#int lo0
R3(config-if)#ip pim sparse-dense-mode
R3(config-if)#ip pim send-rp-announce loopback0 scope 16
R5#debug ip
PIM Auto-RP
Auto-RP(0):
Auto-RP(0):
Auto-RP(0):
Auto-RP(0):

pim auto-rp
debugging is on
Received RP-announce, from 150.1.1.1, RP_cnt 1, ht 181
Filtered 224.0.0.0/4 for RP 150.1.1.1
Received RP-announce, from 150.1.3.3, RP_cnt 1, ht 181
Filtered 224.0.0.0/4 for RP 150.1.3.3

R2 and R4 are accepted by the filter on R5:


R5#debug ip
PIM Auto-RP
Auto-RP(0):
Auto-RP(0):
Auto-RP(0):
Auto-RP(0):

pim auto-rp
debugging is on
Received RP-announce, from 150.1.2.2, RP_cnt 1, ht 181
Added with (224.0.0.0/5, RP:150.1.2.2), PIMv2 v1
Received RP-announce, from 150.1.4.4, RP_cnt 1, ht 181
Update (232.0.0.0/5, RP:150.1.4.4), PIMv2 v1

R5#show ip pim rp mapping


PIM Group-to-RP Mappings
This system is an RP-mapping agent (Loopback0)
Group(s) 224.0.0.0/5
RP 150.1.2.2 (?), v2v1
Info source: 150.1.2.2
Uptime: 00:00:04,
Group(s) 232.0.0.0/5
RP 150.1.4.4 (?), v2v1
Info source: 150.1.4.4
Uptime: 00:00:28,

(?), elected via Auto-RP


expires: 00:02:51

(?), elected via Auto-RP


expires: 00:02:27

Copyright 2010 Internetwork Expert


- 367 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Auto-RP Listener
Objective: Configure PIM Sparse Mode and Auto-RP throughout the OSPF
domain with R2 as the RP for groups 224.0.0.0/5. R5 should be the
Mapping Agent. Groups outside of 224.0.0.0/5 should not fall back to
dense mode.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1
150.1.15.0/24 VLAN 15

R2
Fa0/0

.2

OSPF
Area 0

150.1.24.0/24 VLAN 24

E0/0

.4

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

.5

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 368 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Sparse Mode on all transit interfaces between R1, R2, R3,
R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Configure R2 to advertise its Loopback interface as candidate
Rendezvous Point via Auto-RP for groups 224.0.0.0/4
Configure R5 to originate Auto-RP Mapping Agent messages from its
Loopback interface
Enable Auto-RP Listener on all multicast routing devices
Ensure that multicast traffic originated by SW1 in the 224.0.0.0/4 range
can be received by SW2
Traffic outside of this range should be dropped

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim autorp listener
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
ip pim sparse-mode

Copyright 2010 Internetwork Expert


- 369 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 201
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-announce Loopback0 scope 16 group-list 1
!
access-list 1 permit 224.0.0.0 7.255.255.255
!
ip pim autorp listener
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim autorp listener
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!

Copyright 2010 Internetwork Expert


- 370 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0.1 point-to-point


ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 405
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim autorp listener
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim send-rp-discovery Loopback0 scope 16
!
ip pim autorp listener
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim autorp listener

Copyright 2010 Internetwork Expert


- 371 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
Multicast routers only have an RP for 224.0.0.0/5:
R3#show ip pim rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/5
RP 150.1.2.2 (?), v2v1
Info source: 150.1.5.5 (?), elected via Auto-RP
Uptime: 00:00:57, expires: 00:02:03

Copyright 2010 Internetwork Expert


- 372 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW1 generates traffic to 224.1.1.1 and 232.1.1.1:


SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#rtr 2
SW1(config-rtr)#type udpEcho dest-ipaddr 232.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start after 00:00:05
SW1(config)#rtr schedule 2 start after 00:00:05
SW1(config)#end
SW1#
R3 registers (10.1.37.7,224.1.1.1) but (10.1.37.7,232.1.1.1) is dropped
R3#debug ip pim
PIM(0): Check RP 150.1.2.2 into the (*, 224.1.1.1) entry
PIM(0): Send v2 Register to 150.1.2.2 for 10.1.37.7, group 224.1.1.1
PIM(0): Received v2 Register-Stop on Serial1/2 from 150.1.2.2
PIM(0):
for source 10.1.37.7, group 224.1.1.1
PIM(0): Clear Registering flag to 150.1.2.2 for (10.1.37.7/32,
224.1.1.1)
Traffic for 224.1.1.1 flows but 232.1.1.1 is
R3#conf t
Enter configuration commands, one per line.
R3(config)#int e0/0
R3(config-if)#no ip mroute-cache
R3(config-if)#do debug ip mpacket
IP multicast packets debugging is on
R3(config-if)#
IP(0): s=10.1.37.7 (Ethernet0/0) d=224.1.1.1
prot=17, len=44(44), mforward
IP(0): s=10.1.37.7 (Ethernet0/0) d=232.1.1.1
len=60(44), mroute olist null

dropped:
End with CNTL/Z.

(Serial1/2) id=0, ttl=254,


id=0, ttl=254, prot=17,

Only 224.0.1.39 and 224.0.1.40 are allow to run in dense mode:


R3#show ip mroute
<output omitted>
(*, 232.1.1.1), 00:04:00/stopped, RP 0.0.0.0, flags: DP
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list: Null
(10.1.37.7, 232.1.1.1), 00:04:00/00:02:53, flags: PT
Incoming interface: Ethernet0/0, RPF nbr 0.0.0.0
Outgoing interface list: Null
(*, 224.1.1.1), 00:04:00/stopped, RP 150.1.2.2, flags: SPF
Incoming interface: Serial1/2, RPF nbr 150.1.13.1
Outgoing interface list: Null

Copyright 2010 Internetwork Expert


- 373 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

(10.1.37.7, 224.1.1.1), 00:04:00/00:03:23, flags: FT


Incoming interface: Ethernet0/0, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Sparse, 00:03:12/00:03:20
(*, 224.0.1.39), 00:05:16/stopped, RP 0.0.0.0, flags: D
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Sparse, 00:05:16/00:00:00
(150.1.2.2, 224.0.1.39), 00:01:16/00:01:45, flags: PT
Incoming interface: Serial1/2, RPF nbr 150.1.13.1
Outgoing interface list: Null
(*, 224.0.1.40), 00:06:16/stopped, RP 0.0.0.0, flags: DCL
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial1/2, Forward/Sparse, 00:06:16/00:00:00
(150.1.5.5, 224.0.1.40), 00:05:16/00:02:43, flags: PLTX
Incoming interface: Serial1/2, RPF nbr 150.1.13.1
Outgoing interface list: Null

Copyright 2010 Internetwork Expert


- 374 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 375 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

PIM NBMA Mode


Objective: Configure PIM Sparse Mode with R1 as the RP. Multicast traffic from
SW1 going to SW2 should not be received by R2. Multicast traffic
from SW1 going to R4 should not be received by R5.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

R1
.1

S0/0

OSPF
Area 0

.2

S0/0.1

102 105
R2
Fa0/0

201

.2

150.1.125.0/24

150.1.24.0/24 VLAN 24

E0/0

Frame Relay

.4

501
R4

.5

S0/0.1

R5
E0/0 .5

OSPF
Area 0 G0/0

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 376 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


R1s connection to the Frame Relay cloud should use the physical
interface with static layer 3 to layer 2 resolution
R2 and R5s connections to the Frame Relay cloud should use point-topoint subinterfaces
Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
The Frame Relay segment between R1, R2, and R5 should use OSPF
network point-to-multipoint
Enable IP Multicast-Routing on R1, R2, R3, R5, and R6
Configure PIM Sparse Mode on all transit interfaces between R1, R2, R3,
R5, & R6, and on R3 & R6s connections to SW1 and SW2 and R2s
connection to R4
Configure R1 as the Rendezvous Point
Enable PIM NBMA mode on R1s connection to the Frame Relay cloud

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
ip address 150.1.125.1 255.255.255.0
encapsulation frame-relay
no frame-relay inverse-arp
frame-relay map ip 150.1.125.2 102 broadcast
frame-relay map ip 150.1.125.5 105 broadcast
ip ospf network point-to-multipoint
ip pim sparse-mode
ip pim nbma-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.1.1
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!

Copyright 2010 Internetwork Expert


- 377 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.125.2 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 201
ip ospf network point-to-multipoint
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.1.1
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.1.1
R4#
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode

Copyright 2010 Internetwork Expert


- 378 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.125.5 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 501
ip ospf network point-to-multipoint
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.1.1
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.1.1
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6

Copyright 2010 Internetwork Expert


- 379 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

switchport access vlan 56


!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
Before PIM NBMA Mode on R1s Frame Relay interface:
R4 joins 224.1.1.1:
R4(config)#int e0/0
R4(config-if)#ip igmp join
R4(config-if)#ip igmp join-group 224.1.1.1
R4(config-if)#end
SW2 joins 232.1.1.1:
SW2#conf t
Enter configuration commands, one per line.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 232.1.1.1
SW2(config-if)#end

End with CNTL/Z.

SW1 generates traffic to 224.1.1.1 and 232.1.1.1:


SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#rtr 2
SW1(config-rtr)#type udpEcho dest-ipaddr 232.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start after 00:00:05
SW1(config)#rtr schedule 2 start after 00:00:05
SW1(config)#end

Copyright 2010 Internetwork Expert


- 380 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R1 forwards 224.1.1.1 and 232.1.1.1 out to the Frame Relay cloud:


R1#show ip mroute
<output omitted>
(*, 232.1.1.1), 00:01:50/stopped, RP 150.1.1.1, flags: S
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial0/0, Forward/Sparse, 00:01:50/00:02:39
(10.1.37.7, 232.1.1.1), 00:00:01/00:02:58, flags:
Incoming interface: Serial0/1, RPF nbr 150.1.13.3
Outgoing interface list:
Serial0/0, Forward/Sparse, 00:00:01/00:03:28
(*, 224.1.1.1), 00:02:03/stopped, RP 150.1.1.1, flags: S
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial0/0, Forward/Sparse, 00:02:04/00:03:23
(10.1.37.7, 224.1.1.1), 00:00:02/00:02:57, flags:
Incoming interface: Serial0/1, RPF nbr 150.1.13.3
Outgoing interface list:
Serial0/0, Forward/Sparse, 00:00:02/00:03:27
<output omitted>
R2 and R5 receive both feeds:
R2#debug ip mpacket
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 (FastEthernet0/0) id=0,
prot=17, len=44(44), mforward
IP(0): s=10.1.37.7 (Serial0/0.1) d=232.1.1.1 id=0, prot=17, len=48(44),
mroute olist null
R5#debug ip mpacket
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 id=0, ttl=252, prot=17,
len=48(44), mroute olist null
IP(0): s=10.1.37.7 (Serial0/0.1) d=232.1.1.1 (Ethernet0/0) id=0,
ttl=252, prot=17, len=44(44), mforward
With NBMA mode on R1s Frame Relay link:
R1#conf t
Enter configuration commands, one per line.
R1(config)#int s0/0
R1(config-if)#ip pim nbma-mode
R1(config-if)#end

End with CNTL/Z.

R1#show ip mroute
<output omitted>
(*, 232.1.1.1), 00:01:15/00:03:18, RP 150.1.1.1, flags: S
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial0/0, 150.1.125.5, Forward/Sparse, 00:00:11/00:03:18
(10.1.37.7, 232.1.1.1), 00:01:15/00:03:20, flags: T
Incoming interface: Serial0/1, RPF nbr 150.1.13.3
Outgoing interface list:
Serial0/0, 150.1.125.5, Forward/Sparse, 00:00:11/00:03:18

Copyright 2010 Internetwork Expert


- 381 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

(*, 224.1.1.1), 00:01:16/00:03:24, RP 150.1.1.1, flags: S


Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Serial0/0, 150.1.125.2, Forward/Sparse, 00:00:05/00:03:24
(10.1.37.7, 224.1.1.1), 00:01:16/00:03:29, flags: T
Incoming interface: Serial0/1, RPF nbr 150.1.13.3
Outgoing interface list:
Serial0/0, 150.1.125.2, Forward/Sparse, 00:00:05/00:03:24
<output omitted>
R2 only receives the feed that R4 joined:
R2#debug ip mpacket
IP(0): s=10.1.37.7 (Serial0/0.1) d=224.1.1.1 (FastEthernet0/0) id=0,
prot=17, len=44(44), mforward
R5 only receives the feed that SW2 joined:
R5#debug ip mpacket
IP(0): s=10.1.37.7 (Serial0/0.1) d=232.1.1.1 (Ethernet0/0) id=0,
ttl=252, prot=17, len=44(44), mforward

Copyright 2010 Internetwork Expert


- 382 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 383 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Auto-RP and Default RP Placement


Objective: Configure PIM Sparse Mode throughout the OSPF domain with R2
as an Auto-RP C-RP and MA, and as the default RP for groups
224.0.1.39 and 224.0.1.40. Ensure that multicast traffic originated by
R4 can reach both SW1 and SW2.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

R1
.1

S0/0

OSPF
Area 0

.2

S0/0.1

102 105
R2
Fa0/0

201

.2

150.1.125.0/24

150.1.24.0/24 VLAN 24

E0/0

Frame Relay

.4

501
R4

.5

S0/0.1

R5
E0/0 .5

OSPF
Area 0 G0/0

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 384 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


R1s connection to the Frame Relay cloud should use the physical
interface with static layer 3 to layer 2 resolution
R2 and R5s connections to the Frame Relay cloud should use point-topoint subinterfaces
Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
The Frame Relay segment between R1, R2, and R5 should use OSPF
network point-to-multipoint
Enable IP Multicast-Routing on R1, R2, R3, R5, and R6
Configure PIM Sparse Mode on all transit interfaces between R1, R2, R3,
R5, & R6, and on R3 & R6s connections to SW1 and SW2 and R2s
connection to R4
Configure R2 as a candidate RP and mapping agent for all groups via
Auto-RP
Configure all multicast enabled routers to send PIM join messages for
groups 224.0.1.39 and 224.0.1.40 to R2
Enable PIM NBMA mode on R1s connection to the Frame Relay cloud
Ensure that multicast traffic originated by R4 can be received by both SW1
and SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
ip address 150.1.125.1 255.255.255.0
encapsulation frame-relay
no frame-relay inverse-arp
frame-relay map ip 150.1.125.2 102 broadcast
frame-relay map ip 150.1.125.5 105 broadcast
ip ospf network point-to-multipoint
ip pim sparse-mode
ip pim nbma-mode
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2 1
!

Copyright 2010 Internetwork Expert


- 385 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

access-list 1 permit 224.0.1.39


access-list 1 permit 224.0.1.40
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.125.2 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 201
ip ospf network point-to-multipoint
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2 1
!
access-list 1 permit 224.0.1.39
access-list 1 permit 224.0.1.40
!
ip pim send-rp-announce Loopback0 scope 16
ip pim send-rp-discovery Loopback0 scope 16
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2 1
!
access-list 1 permit 224.0.1.39
access-list 1 permit 224.0.1.40

Copyright 2010 Internetwork Expert


- 386 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.125.5 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 501
ip ospf network point-to-multipoint
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2 1
!
access-list 1 permit 224.0.1.39
access-list 1 permit 224.0.1.40
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-address 150.1.2.2 1
!

Copyright 2010 Internetwork Expert


- 387 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

access-list 1 permit 224.0.1.39


access-list 1 permit 224.0.1.40
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Copyright 2010 Internetwork Expert


- 388 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
R1 forwards R2s MA messages out to R5 because 224.0.1.40 is sparse and
NBMA mode is enabled:
R1#show ip mroute 224.0.1.40
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
L - Local, P - Pruned, R - RP-bit set, F - Register flag,
T - SPT-bit set, J - Join SPT, M - MSDP created entry,
X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
U - URD, I - Received Source Specific Host Report, Z - Multicast Tunnel
Y - Joined MDT-data group, y - Sending to MDT-data group
Outgoing interface flags: H - Hardware switched
Timers: Uptime/Expires
Interface state: Interface, Next-Hop or VCD, State/Mode

(*, 224.0.1.40), 00:55:05/stopped, RP 150.1.2.2, flags: SJCL


Incoming interface: Serial0/0, RPF nbr 150.1.125.2
Outgoing interface list:
Serial0/0, 150.1.125.5, Forward/Sparse, 00:46:13/00:02:39
Serial0/1, Forward/Sparse, 00:48:13/00:02:32
(150.1.2.2, 224.0.1.40), 00:48:32/00:02:38, flags: LT
Incoming interface: Serial0/0, RPF nbr 150.1.125.2
Outgoing interface list:
Serial0/1, Forward/Sparse, 00:48:13/00:03:13
Serial0/0, 150.1.125.5, Forward/Sparse, 00:46:14/00:03:22
All multicast routers now learn R2 as the RP via Auto-RP:
R6#show ip pim rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/4
RP 150.1.2.2 (?), v2v1
Info source: 150.1.2.2 (?), elected via Auto-RP
Uptime: 00:55:04, expires: 00:02:24
Acl: 1, Static
RP: 150.1.2.2 (?)
R3#show ip pim rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/4
RP 150.1.2.2 (?), v2v1
Info source: 150.1.2.2 (?), elected via Auto-RP
Uptime: 00:56:05, expires: 00:02:20
Acl: 1, Static
RP: 150.1.2.2 (?)

Copyright 2010 Internetwork Expert


- 389 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Configure SW1 and SW2 to request multicast traffic:


SW1:
interface FastEthernet0/3
ip igmp join-group 224.1.1.1
SW2:
interface FastEthernet0/6
ip igmp join-group 224.1.1.1
Configure R4 to generate multicast traffic:
R4(config)#ip sla monitor 1
R4(config-sla-monitor)# type udpEcho dest-ipaddr 224.1.1.1 dest-port
12345 source-ipaddr 150.1.24.4 control disable
R4(config-sla-monitor-udp)# frequency 5
R4(config-sla-monitor-udp)#ip sla monitor schedule 1 start-time now
R3 and R6 forward traffic to SW1 and SW2:
R3#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R3(config)#int s1/2
R3(config-if)#no ip mroute-cache
R3(config-if)#do debug ip mpacket
IP multicast packets debugging is on
IP(0): s=150.1.24.4 (Serial1/2) d=224.1.1.1 (Ethernet0/0) id=0,
ttl=252, prot=17, len=44(44), mforward
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int g0/0
R6(config-if)#no ip mroute-cache
R6(config-if)#do debug ip mpacket
IP multicast packets debugging is on
IP(0): s=150.1.24.4 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=251, prot=17, len=44(44), mforward

Copyright 2010 Internetwork Expert


- 390 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 391 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Bootstrap Router
Objective: Configure PIM Sparse Mode and BSR throughout the OSPF domain
so multicast traffic sent from SW1 can be received by SW2. R1
should be the RP and R5 should be the BSR.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1
150.1.15.0/24 VLAN 15

R2
Fa0/0

.2

OSPF
Area 0

150.1.24.0/24 VLAN 24

E0/0

.4

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

.5

150.1.56.0/24 VLAN 56
.6

G0/1

Fa0/6
SW2

10.1.68.0/24

.6

R6

.8

Copyright 2010 Internetwork Expert


- 392 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Configure the logical topology per the diagram


Configure Loopback interfaces on all devices in the format 150.1.Y.Y/32
Configure OSPF area 0 on all interfaces throughout the network
Enable IP Multicast-Routing on R1, R2, R3, R4, R5, and R6
Configure PIM Sparse Mode on all transit interfaces between R1, R2, R3,
R4, R5, & R6, and on R3 & R6s connections to SW1 and SW2
Configure R1 to advertise its Loopback interface as an RP candidate.
Configure R5 to advertise its Loopback interface as a BSR candidate.
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
ip pim sparse-mode
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim rp-candidate Loopback0
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!

Copyright 2010 Internetwork Expert


- 393 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 201
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 405
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!

Copyright 2010 Internetwork Expert


- 394 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
!
ip pim bsr-candidate Loopback0
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW1#
ip routing
!
interface Loopback0
ip address 150.1.7.7 255.255.255.255
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!

Copyright 2010 Internetwork Expert


- 395 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0
SW2#
ip routing
!
interface Loopback0
ip address 150.1.8.8 255.255.255.255
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

Verification
R1 advertises itself to the BSR as an RP Candidate:
R5#show ip pim bsr-router
PIMv2 Bootstrap information
This system is the Bootstrap Router (BSR)
BSR address: 150.1.5.5 (?)
Uptime:
00:13:05, BSR Priority: 0, Hash mask length: 0
Next bootstrap message in 00:00:56
R5#show ip pim rp mapping
PIM Group-to-RP Mappings
This system is the Bootstrap Router (v2)
Group(s) 224.0.0.0/4
RP 150.1.1.1 (?), v2
Info source: 150.1.15.1 (?), via bootstrap, priority 0, holdtime 210
Uptime: 00:12:19, expires: 00:03:10
R6#show ip pim rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/4
RP 150.1.1.1 (?), v2
Info source: 150.1.5.5 (?), via bootstrap, priority 0, holdtime 210
Uptime: 00:06:00, expires: 00:02:36

Copyright 2010 Internetwork Expert


- 396 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 397 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Multicast Source Distribution Protocol (MSDP)


Objective: Configure MSDP between R2 and R4 so that multicast traffic
originated by SW1 in AS 1 can be received by SW2 in AS 2.

Fa0/3

OSPF
Area 0

10.1.37.0/24

.7

E0/0
R3

SW1

.3

.3

S1/2

BGP
AS 1

S0/1

150.1.13.0/24

.1

OSPF 150.1.12.0/24
Area 0 Frame Relay

R1
.1

S0/0.1

102
201

.2

S0/0.1
R2
Fa0/0

.2

E0/0

.4

150.1.24.0/24 VLAN 24

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

BGP
AS 2

.5

S0/0.1

OSPF
Area 0

R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1

Fa0/6
SW2

.6
10.1.68.0/24

OSPF
Area 0

R6

.8

Copyright 2010 Internetwork Expert


- 398 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 on the interfaces between R1, R2, R3, and SW1
Configure Loopbacks in the format 150.1.Y.Y/32 on R1, R2, and R3 and
advertise them into OSPF
Configure the Loopback 10.1.7.7/24 on SW1 and advertise it into OSPF
Configure R2 to originate a default route into the OSPF domain
Configure PIM Sparse-Mode on the interfaces between R1, R2, & R3, and
R3s connection to SW1
Configure R2s IP address 150.1.24.2 as the RP for AS 1
Configure OSPF area 0 on the interfaces between R4, R5, R6, and SW2
Configure Loopbacks in the format 150.1.Y.Y/32 on R4, R5, and R6 and
advertise them into OSPF
Configure the Loopback 10.1.8.8/24 on SW2 and advertise it into OSPF
Configure R4 to originate a default route into the OSPF domain
Configure PIM Sparse-Mode on the interfaces between R4, R5, & R6, and
R6s connection to SW2
Configure R4s IP address 150.1.24.4 as the RP for AS 2
Configure an EBGP peering between R2 and R4 using their connected
interface
Redistribute OSPF learned routes into BGP on both R2 and R4
Configure an MSDP peering between R2 and R4 using their connected
interface
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 399 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

network 150.1.13.1 0.0.0.0 area 0


!
ip pim rp-address 150.1.24.2
R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 201
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
default-information originate always
!
router bgp 1
redistribute ospf 1
neighbor 150.1.24.4 remote-as 2
!
ip pim rp-address 150.1.24.2
ip msdp peer 150.1.24.4 remote-as 2
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 10.1.37.3 0.0.0.0 area 0
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
ip pim rp-address 150.1.24.2

Copyright 2010 Internetwork Expert


- 400 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#show run
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 405
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
default-information originate always
!
router bgp 2
redistribute ospf 1
neighbor 150.1.24.2 remote-as 1
!
ip pim rp-address 150.1.24.4
ip msdp peer 150.1.24.2
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 504
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
!
ip pim rp-address 150.1.24.4

Copyright 2010 Internetwork Expert


- 401 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 10.1.68.6 0.0.0.0 area 0
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
!
ip pim rp-address 150.1.24.4
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!

Copyright 2010 Internetwork Expert


- 402 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.68.8 0.0.0.0 area 0

Verification
Enable multicast debugging on R2 and R4:
R2#debug ip pim
PIM debugging is on
R2#debug ip msdp peer
MSDP Peer debugging is on
R2#debug ip msdp routes
MSDP Routes debugging is on
R2#debug ip msdp detail
MSDP Detail debugging is on
R4#debug ip pim
PIM debugging is on
R4#debug ip msdp peer
MSDP Peer debugging is on
R4#debug ip msdp routes
MSDP Routes debugging is on
R4#debug ip msdp detail
MSDP Detail debugging is on
Generate multicast traffic from SW1:
SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start after 00:00:05 life forever
SW1(config)#
R3 registers source with R2 and R2 generates MSDP SA message to R4:
R2#
PIM(0): Received v2 Register on Serial0/0.1 from 150.1.13.3
for 10.1.37.7, group 224.1.1.1
PIM(0): Check RP 150.1.24.2 into the (*, 224.1.1.1) entry
PIM(0): Send v2 Register-Stop to 150.1.13.3 for 10.1.37.7, group
224.1.1.1
MSDP(0): 150.1.24.4: Send 44-byte SA encapsulated data for (10.1.37.7,
224.1.1.1), RP 150.1.24.2
R4 recieves SA message from R2:
R4#
MSDP(0): Received 64-byte TCP segment from 150.1.24.2
MSDP(0): Append 64 bytes to 0-byte msg 169 from 150.1.24.2, qs 1
MSDP(0): 150.1.24.2: Received 64-byte msg 169 from peer
MSDP(0): 150.1.24.2: SA TLV, len: 64, ec: 1, RP: 150.1.24.2, with data
MSDP(0): 150.1.24.2: Peer RPF check passed for single peer
MSDP(0): (10.1.37.7/32, 224.1.1.1), accepted

Copyright 2010 Internetwork Expert


- 403 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Configure SW2 to receive traffic for the multicast group:


SW2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1
R4 receives PIM Join from R5 for 224.1.1.1 and builds the RPF tree
R4#
PIM(0): Received v2 Join/Prune on Serial0/0.1 from 150.1.45.5, to us
PIM(0): Join-list: (*, 224.1.1.1), RPT-bit set, WC-bit set, S-bit set
PIM(0): Check RP 150.1.24.4 into the (*, 224.1.1.1) entry
PIM(0): Add Serial0/0.1/150.1.45.5 to (*, 224.1.1.1), Forward state, by
PIM *G Join
PIM(0): Insert (10.1.37.7,224.1.1.1) join in nbr 150.1.24.2's queue
PIM(0): Update Serial0/0.1/150.1.45.5 to (10.1.37.7, 224.1.1.1),
Forward state, by PIM *G Join
PIM(0): Building Join/Prune packet for nbr 150.1.24.2
PIM(0): Adding v2 (10.1.37.7/32, 224.1.1.1), S-bit Join
PIM(0): Send v2 join/prune to 150.1.24.2 (Ethernet0/0)
PIM(0): Received v2 Join/Prune on Serial0/0.1 from 150.1.45.5, to us
R4#
PIM(0): Join-list: (10.1.37.7/32, 224.1.1.1), S-bit set
PIM(0): Update Serial0/0.1/150.1.45.5 to (10.1.37.7, 224.1.1.1),
Forward state, by PIM SG Join
R6 forwards multicast feed to SW2:
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int g0/0
R6(config-if)#no ip mroute-cache
R6#debug ip mpacket
IP multicast packets debugging is on
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=249, prot=17, len=44(44), mforward

Copyright 2010 Internetwork Expert


- 404 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 405 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Anycast RP
Objective: Configure R1 and R5 with the duplicate addresses 150.1.255.255/32
for Anycast RP within the PIM Sparse-Mode domain.

Fa0/3

OSPF
Area 0

10.1.37.0/24

.7

E0/0
R3

SW1

.3

.3

S1/2
S0/1

150.1.13.0/24

.1

OSPF 150.1.12.0/24
Area 0 Frame Relay

R1
.1

S0/0.1

102
201

.2

S0/0.1
R2
Fa0/0

.2

E0/0

.4

OSPF
Area 0

150.1.24.0/24 VLAN 24

150.1.45.0/24

R4
S0/0.1

Frame Relay

.4

405

504

.5

S0/0.1

OSPF
Area 0

R5
E0/0 .5
150.1.56.0/24 VLAN 56

G0/0

.6

G0/1

Fa0/6
SW2

.6
10.1.68.0/24

OSPF
Area 0

R6

.8

Copyright 2010 Internetwork Expert


- 406 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure Loopbacks in the format 150.1.Y.Y/32 on R1, R2, R3, R4, R5,
and R6
Configure Loopbacks in the format 10.1.Y.Y/24 on SW1 and SW2
Configure an additional Loopback 150.1.255.255/32 on R1 and R5
Configure OSPF area 0 on all interfaces in the network
Configure PIM Sparse-Mode on the interfaces between R1, R2, R3, R4,
R5, and R6
Configure PIM Sparse-Mode on R3 and R6s connections to SW1 and
SW2
Configure the anycast address 150.1.255.255 as the RP for all multicast
enabled routers
Configure an MSDP peering between R1 and R5 using their unique
loopback address
Ensure that multicast traffic originated by SW1 can be received by SW2

Final Configuration
R1#
ip multicast-routing
!
interface Loopback0
ip address 150.1.1.1 255.255.255.255
!
interface Loopback1
ip address 150.1.255.255 255.255.255.255
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim sparse-mode
!
router ospf 1
network 150.1.1.1 0.0.0.0 area 0
network 150.1.12.1 0.0.0.0 area 0
network 150.1.13.1 0.0.0.0 area 0
network 150.1.255.255 0.0.0.0 area 0
!
ip pim rp-address 150.1.255.255
ip msdp peer 150.1.5.5 connect-source Loopback0

Copyright 2010 Internetwork Expert


- 407 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R2#
ip multicast-routing
!
interface Loopback0
ip address 150.1.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 201
!
router ospf 1
network 150.1.2.2 0.0.0.0 area 0
network 150.1.12.2 0.0.0.0 area 0
network 150.1.24.2 0.0.0.0 area 0
!
ip pim rp-address 150.1.255.255
R3#
ip multicast-routing
!
interface Loopback0
ip address 150.1.3.3 255.255.255.255
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim sparse-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim sparse-mode
clockrate 64000
!
router ospf 1
network 10.1.37.3 0.0.0.0 area 0
network 150.1.3.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0
!
ip pim rp-address 150.1.255.255
R4#
ip multicast-routing
!
interface Loopback0
ip address 150.1.4.4 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim sparse-mode
!

Copyright 2010 Internetwork Expert


- 408 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 405
!
router ospf 1
network 150.1.4.4 0.0.0.0 area 0
network 150.1.24.4 0.0.0.0 area 0
network 150.1.45.4 0.0.0.0 area 0
!
ip pim rp-address 150.1.255.255
R5#
ip multicast-routing
!
interface Loopback0
ip address 150.1.5.5 255.255.255.255
!
interface Loopback1
ip address 150.1.255.255 255.255.255.255
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim sparse-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim sparse-mode
frame-relay interface-dlci 504
!
router ospf 1
network 150.1.5.5 0.0.0.0 area 0
network 150.1.45.5 0.0.0.0 area 0
network 150.1.56.5 0.0.0.0 area 0
network 150.1.255.255 0.0.0.0 area 0
!
ip pim rp-address 150.1.255.255
ip msdp peer 150.1.1.1 connect-source Loopback0
R6#
ip multicast-routing
!
interface Loopback0
ip address 150.1.6.6 255.255.255.255
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim sparse-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0

Copyright 2010 Internetwork Expert


- 409 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

ip pim sparse-mode
!
router ospf 1
network 10.1.68.6 0.0.0.0 area 0
network 150.1.6.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
!
ip pim rp-address 150.1.255.255
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0
SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.68.8 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 410 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Verification
Enable multicast debugging on R1 and R5:
R1#debug ip pim
PIM debugging is on
R1#debug ip msdp peer
MSDP Peer debugging is on
R1#debug ip msdp routes
MSDP Routes debugging is on
R1#debug ip msdp detail
MSDP Detail debugging is on
R5#debug ip pim
PIM debugging is on
R5#debug ip msdp peer
MSDP Peer debugging is on
R5#debug ip msdp routes
MSDP Routes debugging is on
R5#debug ip msdp detail
MSDP Detail debugging is on
Generate multicast traffic from SW1:
SW1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#rtr 1
SW1(config-rtr)#type udpEcho dest-ipaddr 224.1.1.1 dest-port 12345
source-ipaddr 10.1.37.7 control disable
SW1(config-rtr-udp)#frequency 5
SW1(config-rtr-udp)#timeout 0
SW1(config-rtr-udp)#exit
SW1(config)#rtr schedule 1 start after 00:00:05 life forever
SW1(config)#
R3 registers source with R1 and R1 generates MSDP SA message to R5:
R1#
PIM(0): Received v2 Register on Serial0/1 from 150.1.13.3
for 10.1.37.7, group 224.1.1.1
PIM(0): Check RP 150.1.255.255 into the (*, 224.1.1.1) entry
PIM(0): Send v2 Register-Stop to 150.1.13.3 for 10.1.37.7, group
224.1.1.1
MSDP(0): 150.1.5.5: Send 44-byte SA encapsulated data for (10.1.37.7,
224.1.1.1), RP 150.1.255.255
R5 recieves SA message from R1:
R5#
MSDP(0): Received 20-byte TCP segment from 150.1.1.1
MSDP(0): Append 20 bytes to 0-byte msg 40 from 150.1.1.1, qs 1
MSDP(0): 150.1.1.1: Received 20-byte msg 40 from peer
MSDP(0): 150.1.1.1: SA TLV, len: 20, ec: 1, RP: 150.1.255.255
MSDP(0): 150.1.1.1: Peer RPF check passed for single peer
MSDP(0): (10.1.37.7/32, 224.1.1.1), accepted

Copyright 2010 Internetwork Expert


- 411 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Configure SW2 to receive traffic for the multicast group:


SW2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1
R5 receives PIM Join from R6 for 224.1.1.1 and builds the RPF tree
R5#
PIM(0): Received v2 Join/Prune on Ethernet0/0 from 150.1.56.6, to us
PIM(0): Join-list: (*, 224.1.1.1), RPT-bit set, WC-bit set, S-bit set
PIM(0): Check RP 150.1.255.255 into the (*, 224.1.1.1) entry
PIM(0): Add Ethernet0/0/150.1.56.6 to (*, 224.1.1.1), Forward state, by
PIM *G Join
PIM(0): Insert (10.1.37.7,224.1.1.1) join in nbr 150.1.45.4's queue
PIM(0): Update Ethernet0/0/150.1.56.6 to (10.1.37.7, 224.1.1.1),
Forward state, by PIM *G Join
PIM(0): Building Join/Prune packet for nbr 150.1.45.4
PIM(0): Adding v2 (10.1.37.7/32, 224.1.1.1), S-bit Join
PIM(0): Send v2 join/prune to 150.1.45.4 (Serial0/0.1)
R6 forwards multicast feed to SW2:
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int g0/0
R6(config-if)#no ip mroute-cache
R6#debug ip mpacket
IP multicast packets debugging is on
IP(0): s=10.1.37.7 (GigabitEthernet0/0) d=224.1.1.1
(GigabitEthernet0/1) id=0, ttl=249, prot=17, len=44(44), mforward

Copyright 2010 Internetwork Expert


- 412 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Copyright 2010 Internetwork Expert


- 413 -

Version 1.0

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Multicast BGP
Objective: Configure Multicast BGP between AS 1, AS 2, and AS 3 so that R5
will accept multicast traffic from SW1 through AS 2.
Fa0/3
SW1

10.1.37.0/24

.7

E0/0
R3

BGP
AS 1

OSPF
Area 0

.3

.3

S1/2

S0/1

150.1.13.0/24

.1

Fa0/0
150.1.12.0/24

R1

Frame Relay

.1

.1

S0/0.1

102
201

.2

S0/0.1

Fa0/0

.2

E0/0

.4

150.1.15.0/24 VLAN 15

R2

BGP
AS 2

150.1.24.0/24 VLAN 24

150.1.45.0/24

R4
S0/0.1

Frame Relay
405
504

.4

.5

S0/0.1
E0/1
R5
E0/0 .5

OSPF
Area 0 G0/0

BGP
AS 3

150.1.56.0/24 VLAN 56
.6

G0/1
10.1.68.0/24

.6

Fa0/6
SW2

.5

R6

.8

Copyright 2010 Internetwork Expert


- 414 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Directions

Build the logical topology per the diagram


Configure OSPF area 0 between R1, R3, and SW1
Configure OSPF area 0 between R5, R6, and SW2
Configure Loopbacks on SW1 and SW2 in the format 10.1.Y.Y/24 and
advertise them into OSPF with a mask of /24
Configure R1 and R5 to advertise default routes into OSPF
Configure PIM dense-mode on all interfaces of R1, R2, R3, R4, R5, and
R6 except VLAN 15 between R1 and R5
Configure BGP AS 1 on R1
Configure BGP AS 2 on R2 and R4
Configure BGP AS 3 on R5
R1 should exchange IPv4 unicast prefixes with R5 via BGP
R1 should exchange IPv4 unicast and multicast prefixes with R2 via BGP
R4 should exchange IPv4 unicast and multicast prefixes with R5 via BGP
Advertise the Loopback of SW1 into unicast and multicast BGP on R1
Advertise the Loopback of SW2 into unicast BGP on R5

Final Configuration
R1#
ip multicast-routing
!
interface FastEthernet0/0
ip address 150.1.15.1 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.1 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 102
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 150.1.13.1 0.0.0.0 area 0
default-information originate always
!
router bgp 1
neighbor 150.1.12.2 remote-as 2
neighbor 150.1.15.5 remote-as 3
!
address-family ipv4 multicast
neighbor 150.1.12.2 activate
network 10.1.7.0 mask 255.255.255.0
exit-address-family

Copyright 2010 Internetwork Expert


- 415 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

!
address-family ipv4
neighbor 150.1.12.2 activate
neighbor 150.1.15.5 activate
network 10.1.7.0 mask 255.255.255.0
exit-address-family
R2#
ip multicast-routing
!
interface FastEthernet0/0
ip address 150.1.24.2 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.12.2 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 201
!
router bgp 2
neighbor 150.1.12.1 remote-as 1
neighbor 150.1.24.4 remote-as 2
!
address-family ipv4 multicast
neighbor 150.1.12.1 activate
neighbor 150.1.24.4 activate
neighbor 150.1.24.4 next-hop-self
exit-address-family
!
address-family ipv4
neighbor 150.1.12.1 activate
neighbor 150.1.24.4 activate
neighbor 150.1.24.4 next-hop-self
exit-address-family
R3#
ip multicast-routing
!
interface Ethernet0/0
ip address 10.1.37.3 255.255.255.0
ip pim dense-mode
!
interface Serial1/2
ip address 150.1.13.3 255.255.255.0
ip pim dense-mode
clockrate 64000
!
router ospf 1
network 10.1.37.3 0.0.0.0 area 0
network 150.1.13.3 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 416 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

R4#
ip multicast-routing
!
interface Ethernet0/0
ip address 150.1.24.4 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.4 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 405
!
router bgp 2
neighbor 150.1.24.2 remote-as 2
neighbor 150.1.45.5 remote-as 3
!
address-family ipv4
neighbor 150.1.24.2 activate
neighbor 150.1.24.2 next-hop-self
neighbor 150.1.45.5 activate
exit-address-family
!
address-family ipv4 multicast
neighbor 150.1.24.2 activate
neighbor 150.1.45.5 activate
exit-address-family
R5#
ip multicast-routing
!
interface Ethernet0/0
ip address 150.1.56.5 255.255.255.0
ip pim dense-mode
!
interface Serial0/0
encapsulation frame-relay
!
interface Serial0/0.1 point-to-point
ip address 150.1.45.5 255.255.255.0
ip pim dense-mode
frame-relay interface-dlci 504
!
interface Ethernet0/1
ip address 150.1.15.5 255.255.255.0
!
router ospf 1
network 150.1.56.5 0.0.0.0 area 0
default-information originate always
!
router bgp 3
neighbor 150.1.15.1 remote-as 1
neighbor 150.1.45.4 remote-as 2
!

Copyright 2010 Internetwork Expert


- 417 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

address-family ipv4
neighbor 150.1.15.1 activate
neighbor 150.1.45.4 activate
network 10.1.8.0 mask 255.255.255.0
exit-address-family
!
address-family ipv4 multicast
neighbor 150.1.45.4 activate
exit-address-family
R6#
ip multicast-routing
!
interface GigabitEthernet0/0
ip address 150.1.56.6 255.255.255.0
ip pim dense-mode
!
interface GigabitEthernet0/1
ip address 10.1.68.6 255.255.255.0
ip pim dense-mode
!
router ospf 1
network 10.1.68.6 0.0.0.0 area 0
network 150.1.56.6 0.0.0.0 area 0
SW1#
ip routing
!
interface Loopback0
ip address 10.1.7.7 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet0/1
switchport access vlan 15
!
interface FastEthernet0/2
switchport access vlan 24
!
interface FastEthernet0/3
no switchport
ip address 10.1.37.7 255.255.255.0
!
interface FastEthernet0/4
switchport access vlan 24
!
interface FastEthernet0/5
switchport access vlan 56
!
interface FastEthernet0/6
switchport access vlan 56
!
router ospf 1
network 10.1.7.7 0.0.0.0 area 0
network 10.1.37.7 0.0.0.0 area 0

Copyright 2010 Internetwork Expert


- 418 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

SW2#
ip routing
!
interface Loopback0
ip address 10.1.8.8 255.255.255.0
ip ospf network point-to-point
!
interface FastEthernet0/5
switchport access vlan 15
!
interface FastEthernet0/6
no switchport
ip address 10.1.68.8 255.255.255.0
!
router ospf 1
network 10.1.8.8 0.0.0.0 area 0
network 10.1.68.8 0.0.0.0 area 0

Verification
Configure SW2 to request traffic for 224.1.1.1:
SW2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#int fa0/6
SW2(config-if)#ip igmp join-group 224.1.1.1
SW2(config-if)#end
SW2#
Configure SW1 to generate traffic
SW1#ping
Protocol [ip]:
Target IP address: 224.1.1.1
Repeat count [1]: 1000
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Interface [All]: FastEthernet0/3
Time to live [255]:
Source address: 10.1.7.7
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp,
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 1000, 100-byte ICMP Echos
Packet sent with a source address
.....
<output omitted>

to 224.1.1.1:

Verbose[none]:

to 224.1.1.1, timeout is 2 seconds:


of 10.1.7.7

Copyright 2010 Internetwork Expert


- 419 -

www.INE.com

CCIE Service Provider Lab Workbook Volume I

Version 1.0

Before 10.1.7.0/24 is learned via Multicast BGP:


R5#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R5(config)#int s0/0.1
R5(config-subif)#no ip route-cache
R5(config-subif)#end
R5#debug ip mpacket
IP multicast packets debugging is on
IP(0): s=10.1.7.7 (Serial0/0.1) d=224.1.1.1 id=63, ttl=250, prot=1,
len=104(100), not RPF interface
R5#show ip rpf 10.1.7.0
RPF information for ? (10.1.7.0) failed, no route exists
After 10.1.7.0/24 is learned via Multicast BGP:
R5#show ip bgp ipv4 multicast
BGP table version is 2, local router ID is 150.1.56.5
Status codes: s suppressed, d damped, h history, * valid, > best, i internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
*> 10.1.7.0/24

Next Hop
150.1.45.4

Metric LocPrf Weight Path


0 2 1 i

R5#show ip rpf 10.1.7.0


RPF information for ? (10.1.7.0)
RPF interface: Serial0/0.1
RPF neighbor: ? (150.1.45.4)
RPF route/mask: 10.1.7.0/24
RPF type: mbgp
RPF recursion count: 0
Doing distance-preferred lookups across tables
R5#debug ip mpacket
IP multicast packets debugging is on
IP(0): s=10.1.7.7 (Serial0/0.1) d=224.1.1.1 (Ethernet0/0) id=122,
ttl=250, prot=1, len=100(100), mforward
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int g0/0
R6(config-if)#no ip mroute-cache
R6(config-if)#end
R6#debug ip mpacket
IP multicast packets debugging is on
IP(0): s=10.1.7.7 (GigabitEthernet0/0) d=224.1.1.1 (GigabitEthernet0/1)
id=129, ttl=249, prot=1, len=100(100), mforward

Copyright 2010 Internetwork Expert


- 420 -

www.INE.com