ApplicationNotesMPLS

Outubro/2010
 ApplicationNotesMPLS

DocumentoProprietrio28/10/10

Glossrio...............................................................................................................................................3
1Cenrioseservios...........................................................................................................................4
2ConfiguraesBsicas......................................................................................................................6
2.1ConfiguraoBsicadosSwitchesDM4000............................................................................6
2.1.1ConfiguraoemDM4001PE1........................................................................................6
2.1.2ConfiguraoemDM4001PE2........................................................................................7
2.1.3ConfiguraoemDM4001PE3........................................................................................8
2.1.4ConfiguraoemDM4004PE4........................................................................................9
2.2ConfiguraoBsicadoSwitchesDM3000...........................................................................10
2.2.1ConfiguraoemDM3000CE1......................................................................................10
2.2.2ConfiguraoemDM3000CE2.....................................................................................11
2.2.3ConfiguraoemDM3000CE3.....................................................................................11
2.2.4ConfiguraoemDM3000CE4.....................................................................................12
3ConfiguraesdeRoteamento........................................................................................................13
3.1ExemplodeconfiguraodoprotocoloOSPF........................................................................13
3.1.1ConfiguraoemDM4001PE1.......................................................................................13
3.1.2ConfiguraoemDM4001PE2......................................................................................13
3.1.3ConfiguraoemDM4001PE3......................................................................................13
3.1.4ConfiguraoemDM4004PE4......................................................................................14
4ConfiguraesdaInfraestruturaMPLS.........................................................................................15
4.1InfraestruturaMPLS:ProtocoloLDP.....................................................................................15
4.1.1ExemplodeConfiguraodoprotocoloLDP..................................................................18
4.1.2VerificaoLDP...............................................................................................................19
4.2InfraestruturaMPLS:ProtocoloRSVPTE..............................................................................20
4.2.1ExemplodeConfiguraodoprotocoloRSVPTE..........................................................22
4.2.2VerificaodosTneisRSVP..........................................................................................24
4.3TunelamentodeLDPsobreRSVPTE.....................................................................................25
4.3.1ExemplodeConfiguraodoLDPoRSVP.......................................................................25
4.3.2VerificaodoLDPoRSVP..............................................................................................26
5ServiosMPLS..............................................................................................................................28
5.1Layer2VirtualPrivateNetworkL2VPN.............................................................................28
5.1.1ExemplodeCenrioL2VPNVPWS..............................................................................28
5.1.2ExemplodeCenrioL2VPNVPLS...............................................................................30
5.1.3ExemplodeCenrioL2VPNHVPLS............................................................................32
5.2Layer3VirtualPrivateNetworkL3VPN.............................................................................33
5.2.1ExemplodeCenrioL3VPNMPLSIPVPN...............................................................33
6ExemplodeconfiguraodeQoS...................................................................................................36

2
Glossrio
ABR AreaBorderRouter
AS AutonomousSystem
ASBR AutonomousSystemBoundaryRouter
BGP BorderGatewayProtocol
CSPF ConstraintShortestPathFirst
CE CustomerEdge
CoS ClassofService
EBGP ExternalBorderGatewayProtocol
EVC EthernetVirtualConnection
FEC ForwardingEquivalenceClasses
FRR FastReroute
HVPLS HierarchicalVirtualPrivateLANService
IBGP InternalBorderGatewayProtocol
IGP InteriorGatewayProtocol
L2VPN Layer2VirtualPrivateNetwork
L3VPN Layer3VirtualPrivateNetwork
LAG LinkAggregation
LDP LabelDistributionProtocol
LER LabelEdgeRouter
LSP LabelSwitchedPath
LSR LabelSwitchRouter
MP2MP MultiPointtoMultiPoint
MPBGP MultiprotocolBorderGatewayProtocol
MPLS MultiProtocolLabelSwitching
OSPF OpenShortestPathFirst
OSPFTE OpenShortestPathFirstTrafficEngineering
P2MP PointtoMultiPoint
P2P PointtoPoint
PE ProviderEdge
PHP PenultimateHopPopping
PWE3 PseudoWireEmulationEdgetoEdge
PWID PseudoWireIdentifier
QoS QualityofService
RSVP ResourceReservationProtocol
RSVPTE ResourceReservationProtocolTrafficEngineering
TE TrafficEngineering
VC VirtualCircuit
VPLS VirtualPrivateLANService
VPWS VirtualPrivateWireService
VRF VPNRoutingandForwarding

3
1Cenrioseservios
AtopologiaabaixoserutilizadacomorefernciaparaosexemplosdeconfiguraoMPLS
demonstradosnestedocumento.

4
 Asseguintesfuneslgicasestorepresentadasnatopologiaacima:
Core10GdaredeIP:representadopelosequipamentosPE1,PE2,PE3ePE4;
Equipamentosdeclientes:representadospeloselementosCE1,CE2,CE3eCE4;
Geradordetrfego:representadopelosTestsetDatacom#1e#2ePCs;

Destaforma,algunsexemplosdeconfiguraoMPLSserocobertosporestedocumento*:
InfraestruturaMPLSutilizandoLDP;
lnfraestruturaMPLSutilizandoLDPoRSVP;
L2VPNVPWSouEVCpontoaponto(P2P);
L2VPNVPLSEVCpontoamultiponto(P2MP)oumultipontoamultiponto(MP2MP);
L2VPNHVPLSouhubandspokeEVCP2MP;
L3VPNMPLSIPVPN;

*ParamaioresinformaessobrecomandoutilizadosnoMPLS,consultardocumentoDmSwitch
CommandReference.

5
2ConfiguraesBsicas
Este captulo contm as configuraes bsicas dos equipamentos, tais como plano de
VLANs,endereamentoIP,servidordeclock,dentreoutros.

2.1ConfiguraoBsicadosSwitchesDM4000

2.1.1ConfiguraoemDM4001PE1
!
hostnameDm4001_PE1
!
noterminalpaging
!
iprouting
!
ipdefaultgateway172.16.1.254
!
monitordestination1/8
!
sntpclient
sntpserver172.16.1.94
clocktimezoneBRA3
!
cpudosprotectratelimitglobal350
!
interfaceportchannel1
setmemberethernetrange1/11/2
monitorsourceall
dscpmapping
!
interfacevlan100
setmembertaggedethernet1/4
!
interfacevlanrange15001502
setmembertaggedportchannel1
!
interfacevlan3100
ipaddress40.40.0.1/30
setmemberuntaggedethernet1/25
linkdetect
!
interfacevlan3102
ipaddress40.40.2.1/30
setmemberuntaggedethernet1/26
linkdetect
!
interfaceportchannel1
noloopbackdetection
monitorsourceall
!
interfaceethernet1/4
noloopbackdetection
switchportnativevlan100
monitorsourceall
!
interfaceethernet1/25
noloopbackdetection
switchportnativevlan3100

6
monitorsourceall
!
interfaceethernet1/26
noloopbackdetection
switchportnativevlan3102
monitorsourceall
!
interfaceloopback0
ipaddress1.1.1.1/32
!
interfacemgmteth
ipaddress172.16.1.189/24
!
lldp
!
interfacevlan1
nosetmemberethernetall
!
nospanningtree1
!

2.1.2ConfiguraoemDM4001PE2
!
hostnameDm4001_PE2
!
noterminalpaging
!
iprouting
!
ipdefaultgateway172.16.1.254
!
monitordestination1/8
!
sntpclient
sntpserver172.16.1.94
clocktimezoneBRA3
!
cpudosprotectratelimitglobal350
!
interfacevlan100
setmembertaggedethernet1/4
!
interfacevlanrange15001502
setmembertaggedethernet1/1
!
interfacevlan3100
ipaddress40.40.0.2/30
setmemberuntaggedethernet1/25
linkdetect
!
interfacevlan3108
ipaddress40.40.8.2/30
setmemberuntaggedethernet1/26
linkdetect
!
interfaceethernet1/1
noloopbackdetection
monitorsourceall
!
interfaceethernet1/4
noloopbackdetection
switchportnativevlan100
monitorsourceall

7
!
interfaceethernet1/25
noloopbackdetection
switchportnativevlan3100
monitorsourceall
!
interfaceethernet1/26
noloopbackdetection
switchportnativevlan3108
monitorsourceall
!
interfaceloopback0
ipaddress1.1.1.2/32
!
interfacemgmteth
ipaddress172.16.1.169/24
!
lldp
!
interfacevlan1
nosetmemberethernetall
!
nospanningtree1
!

2.1.3ConfiguraoemDM4001PE3
!
hostnameDm4001_PE3
!
noterminalpaging
!
iprouting
!
ipdefaultgateway172.16.1.254
!
monitordestination1/8
!
sntpclient
sntpserver172.16.1.94
clocktimezoneBRA3
!
cpudosprotectratelimitglobal350
!
interfacevlan100
setmembertaggedethernet1/4
!
interfacevlanrange15001502
setmembertaggedethernet1/1
!
interfacevlan3102
ipaddress40.40.2.2/30
setmemberuntaggedethernet1/25
linkdetect
!
interfacevlan3106
ipaddress40.40.6.1/30
setmemberuntaggedethernet1/26
linkdetect
!
interfaceethernet1/1

8
noloopbackdetection
monitorsourceall
!
interfaceethernet1/4
noloopbackdetection
switchportnativevlan100
monitorsourceall
!
interfaceethernet1/25
noloopbackdetection
switchportnativevlan3102
monitorsourceall
!
interfaceethernet1/26
noloopbackdetection
switchportnativevlan3106
monitorsourceall
!
interfaceloopback0
ipaddress1.1.1.3/32
!
interfacemgmteth
ipaddress172.16.1.188/24
!
lldp
!
interfacevlan1
nosetmemberethernetall
!
nospanningtree1
!

2.1.4ConfiguraoemDM4004PE4

hostnameDm4004_PE4
!
noterminalpaging
!
iprouting
!
ipdefaultgateway172.16.1.254
!
monitordestination2/8
!
sntpclient
sntpserver172.16.1.94
clocktimezoneBRA3
!
cpudosprotectratelimitglobal350
!
interfacevlan100
setmembertaggedethernet2/4
!
interfacevlanrange15001502
setmembertaggedethernet2/1
!
interfacevlan3106
ipaddress40.40.6.2/30
setmemberuntaggedethernet2/26
linkdetect

9
!
interfacevlan3108
ipaddress40.40.8.1/30
setmemberuntaggedethernet2/25
linkdetect
!
interfaceethernet2/1
noloopbackdetection
monitorsourceall
!
interfaceethernet2/4
noloopbackdetection
switchportnativevlan100
monitorsourceall
!
interfaceethernet2/25
noloopbackdetection
switchportnativevlan3108
monitorsourceall
!
interfaceethernet2/26
noloopbackdetection
switchportnativevlan3106
monitorsourceall
!
interfaceloopback0
ipaddress1.1.1.4/32
!
interfacemgmteth
ipaddress172.16.1.211/24
!
lldp
!
interfacevlan1
nosetmemberethernetall
!
nospanningtree1
!

2.2ConfiguraoBsicadoSwitchesDM3000

2.2.1ConfiguraoemDM3000CE1
hostnameDm3000_CE1
!
monitordestination1/8
!
iprouting
!
interfacevlanrange15001502
setmembertaggedportchannel1
setmembertaggedethernet1/25
!
!
interfacevlan1511
ipaddress100.100.5.178/28
setmembertaggedethernet1/25
!
interfacevlan2001
ipaddress192.168.10.2/24

10
setmembertaggedportchannel1
!
interfaceethernet1/25
monitorsourceall
noloopbackdetection
!
interfaceportchannel1
setmemberethernetrange1/271/28
monitorsourceall
noloopbackdetection
!
interfaceloopback0
ipaddress50.50.50.1/32
!
filternewactiondscp46matchvlan1500ingressethernet1/25
!
lldp
!

2.2.2ConfiguraoemDM3000CE2
hostnameDm3000_CE2
!
monitordestination1/8
!
iprouting
!
interfacevlanrange15001502
setmembertaggedethernet1/25
setmembertaggedethernet1/28
!
interfacevlan1512
ipaddress100.100.5.146/28
setmembertaggedethernet1/25
!
interfacevlan2002
ipaddress192.168.20.2/24
setmembertaggedethernet1/28
!
interfaceethernet1/25
monitorsourceall
noloopbackdetection
!
interfaceethernet1/28
monitorsourceall
noloopbackdetection
!
interfaceloopback0
ipaddress50.50.50.2/32
!
lldp

2.2.3ConfiguraoemDM3000CE3
hostnameDm3000_CE3
!
monitordestination1/8
!
iprouting
!
interfacevlanrange15001502
setmembertaggedethernet1/25
setmembertaggedethernet1/28
!

11
interfacevlan1513
ipaddress100.100.5.130/28
setmembertaggedethernet1/25
!
interfacevlan2003
ipaddress192.168.30.2/24
setmembertaggedethernet1/28
!
interfaceethernet1/25
monitorsourceall
noloopbackdetection
!
interfaceethernet1/28
monitorsourceall
noloopbackdetection
!
interfaceloopback0
ipaddress50.50.50.3/32
!
lldp

2.2.4ConfiguraoemDM3000CE4
hostnameDm3000_CE4
!
monitordestination1/8
!
iprouting
!
interfacevlanrange15001502
setmembertaggedethernet1/25
setmembertaggedethernet1/28
!
interfacevlan1514
ipaddress100.100.5.162/28
setmembertaggedethernet1/25
!
interfacevlan2004
ipaddress192.168.40.2/24
setmembertaggedethernet1/28
!
interfaceethernet1/25
monitorsourceall
noloopbackdetection
!
interfaceethernet1/28
monitorsourceall
noloopbackdetection
!
interfaceloopback0
ipaddress50.50.50.4/32
!
lldp
!
filternewaction802.1p2matchvlan1500ingressethernet1/25

12
3ConfiguraesdeRoteamento
OsitensaseguirapresentamumexemplodeconfiguraoparaativaodoprotocoloIGP
nosequipamentosDatacom.Nesteexemplo,serutilizadooprotocoloderoteamentoOSPF.

3.1ExemplodeconfiguraodoprotocoloOSPF
Os roteadores PEseroconfigurados em uma nica reaOSPF denominada rea 0.As
mensagensOSPFutilizaroautenticaocriptografadaMD5.Nesteexemplo,seroconfiguradas
porinterfacevlannosequipamentos.

3.1.1ConfiguraoemDM4001PE1
routerospf
network40.40.0.0/30area0.0.0.0
network40.40.2.0/30area0.0.0.0
network1.1.1.1/32area0.0.0.0
routerid1.1.1.1
!
interfacevlan3100
ipospfnetworkpointtopoint
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5datacom0
!
interfacevlan3102
ipospfnetworkpointtopoint
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5datacom2
!

3.1.2ConfiguraoemDM4001PE2
routerospf
network40.40.0.0/30area0.0.0.0
network40.40.8.0/30area0.0.0.0
network1.1.1.2/32area0.0.0.0
routerid1.1.1.2
!
interfacevlan3100
ipospfnetworkpointtopoint
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5datacom0
!
interfacevlan3108
ipospfnetworkpointtopoint
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5datacom8
!

3.1.3ConfiguraoemDM4001PE3
routerospf
network40.40.2.0/30area0.0.0.0
network40.40.6.0/30area0.0.0.0
network1.1.1.3/32area0.0.0.0
routerid1.1.1.3

13
!
interfacevlan3102
ipospfnetworkpointtopoint
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5datacom2
!
interfacevlan3106
ipospfnetworkpointtopoint
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5datacom6
!

3.1.4ConfiguraoemDM4004PE4
routerospf
network40.40.6.0/30area0.0.0.0
network40.40.8.0/30area0.0.0.0
network1.1.1.4/32area0.0.0.0
routerid1.1.1.4
!
interfacevlan3106
ipospfnetworkpointtopoint
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5datacom6
!
interfacevlan3108
ipospfnetworkpointtopoint
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5datacom8
!

14
4ConfiguraesdaInfraestruturaMPLS
Os dois protocolos de sinalizao suportados pelo switch Datacom so o Resource
ReservationProtocol(RSVP)eoLabelDistributionProtocol(LDP).RSVP umprotocolode
sinalizao genrico que foi adaptado para o uso do MPLS. J o LDP foi desenvolvido
exclusivamenteparaoMPLS.Essesdoisprotocolossoindependentesumdooutro,maspodemser
usadosemconjuntonamesmarede.
Aseguir,seroapresentadasasconfiguraesdosprotocolosMPLSparaaformaode
caminhos(LSPs)emumaredeemtopologiaanel10G.Nesteexemplo,serdemonstradoocaso
ondeoprotocoloLDPutilizadoparaadistribuiodoslabels.

4.1InfraestruturaMPLS:ProtocoloLDP
OprotocoloLDP,especificadopelaRFC3036,foidesenvolvidopeloMPLSWorkingGroup
doIETFnofinaldadcadade1990.
AlgumasconsideraesemrelaoaoprotocoloLDP:
O protocolo LDP foi desenvolvido especificamente para o utilizao MPLS e no tem
capacidadedeTE(trafficengineering);
CadacaminhoLSPsegueoIGPdarede,nocaso,serutilizadooOSPF;
CadaroteadorLDPanunciaumendereovialabelMPLSdentrododomnioLDP.Essa
informaotrocadaentreosvizinhosfazendocomquetodososroteadoresdaredesejam
ingressroutersparatodososegressrouters.OresultadofinalumfullmeshdeLSPs;
DetectavizinhosatravsdemensagensHelloLDP(UDP,port:646)e,seencontrado,cria
umaconexoTCP(port:646)comosvizinhosparatrocarinformaesdoslabels;

MododeOperaodoprotocoloLDP
MododedescobrimentobsicodavizinhanaLDP quandooprotocoloLDPiniciadono
equipamento,LDPLinkHellomessagessoenviadasparatodasasinterfacesdavlanquepossuem
o LDP habilitado. Essas mensagens possuem endereo IP multicast de destino conhecido
224.0.0.2/32esoenviadaspelaportaUDP646.AsLDPHellomessagescontmumcampocoma
identificaodoLDPeutilizaanotao<RouterID:LabelSpace>.OLDPIDpossui6bytes,4
bytesrepresentandooRouterID(ouLSRid)e2bytesoLabelSpace.OswitchDatacomutiliza
label space igual a 0, o que representa que labels recebidos so compartilhados por todas as
interfacesdoequipamento(perplataform).
MododedescobrimentoestendidodavizinhanaLDPEstemecanismodedescobrimentode
vizinhanasLDPutilizaLDPTargetedHello
messages
,cujoprincpiodefuncionamentodiferedo
anteriorsomentepelofatodeasmensagensseremenviadasemunicast,diretamenteaoroteadorde
destino,aoinvsdemensagensmulticast.

15
EstabelecimentodeSessesLDPduandodoisvizinhosLDPconhecemseusrespectivoslabel
spaceeoendereodetransporte,aprendidosviaLDPHellomessages,umasessoLDPpodeser
estabelecida.Essasessousadaparaoanunciodosendereosdasinterfaces,labelseprefixos
alcanveis atravs das LSPs. Para uma maior confiabilidade das informaes, essa sesso
estabelecida via protocolo TCP pela porta 646 e iniciada pelo roteador com maior LSRid,
conhecidocomonativo.QuandoosvizinhossecomunicamviaprotocoloTCP,onativo(active
node)enviauma LDPinitializationmessage paraoseu peer (passivenode).Essamensagemde
inicializaocontminformaesbsicasnecessriasparaestabelecerumasessoLDPentreos
vizinhos(porexemplo,versodoprotocoloLDP,mtododedistribuiodelabels,dentreoutros).
Gerenciamentoedistribuiodelabels
a)MtodosdeDistribuiodeLabels
UnsolicitedDownstream:umLSRdistribuilabelsassociadosparaoutrosLSRssemquetenhasido
explicitamentesolicitado;
Downstreamondemand:umLSRsolicitaumlabelassociadoparaumFECemparticularparaseu
LSRvizinho.
OsequipamentosDatacomutilizamomtododedistribuiodelabelsUnsolicitedDownstream.
b)MododeRetenodeLabels
Liberal: um LSR armazena todos os labels associados a uma FEC em paticular recebidos de
diferentesLSR,osquaisnosonecessariamenteosLSRdiretamenteconectados.
Conservative:umLSRdescartalabelsassociadosquesorecebidosdeoutroLSRnodiretamente
conectados.
OsswitchesDatacomutilizamomododeretenodelabelsLiberal.
c)MododealocaodeLabels
Independent:umLSRpodeanunciarlabelsassociadosparaumLSRdiretamenteconectadoa
qualquermomento.
Ordered:umLSRpodeanunciarlabelsassociadosparaumLSRdiretamenteconectadosomente
setiverrecebidodeseudownstreamLSRumlabelassociadoparaadeterminadaFECouseexistir
umegressLSRparaaquelaFEC.
OsswitchesDatacomutilizamomododealocaodelabelsOrdered.
AnunciandoosenderecosdeinterfaceAprimeirainformaotransmitidaentredoispeerso
endereodasinterfacesLDPdoroteador.Issopermitequeosroteadoresdedestinoassociemum
labelcomainterfacefsicadonexthop.EssainformaotransmitidapelaLDPaddressmessage,

DivulgandoLabelsadistribuiodelabelsparacadaFECocorre,geralmente,peloenviode
LabelMappingmessages,ondeumLSRrecebeumamensagemdoroteadordownstreameadivulga
nosentidoupstream.Osroteadoresdownstreamquerecebemopacote,(localizadosnofinalouno
meiodoLSP)informamparaoupstream(roteadorimediatamenteanterior)quallabeldeverser
usadonoLSP.QuandoumLSRquerretirarumaFECeumlabelanuciado,eleenviaumaLabel
Withdrawnmessage.OslabelsdosVirtualCircuitscriados(VClabels)tambemsodivulgadosvia
LabelMappingmessages.AsLabelRequestmessagessoutilizadasporumLSRupstreampara
explicitamentesolicitarqueoLSRdownstreamatribuaedivulgueumlabelparaumadeterminada

16
FEC.

MensagemdeNotificao: LDPNotificationmessages carregamstatusdosTLVs,informando

eventosespecficosqueestosendosinalizados.Porexemplo,nosequipamentosDatacom,LDP
NotificationMessagespodemserenviadasaumLSRvizinhoparasinalizarqueaportadeacesso
localdeumaVPNVPWS/VPLSmodificouseustatusatual(updown)e,portanto,ostatusdoVC
remotodeveriaser,damesmaforma,modificadoparadown;
ManutenodasSessesLDPdepoisqueumasessaoLDPeestabelecida,umLSRmantma
integridadedasessoenviando LDPKeepAlivemessages acada60segundos,pordefault.A
temporizaodoKeepalivereiniciadatodavezqueumpacoterecebidoporaquelasessoLDP.
SeatemporizaodoKeepaliveexpira(180segundos,pordefault),oLDPconcluiqueaconexo
TCPestdeterioradaequeopeernoestmaisativo.UmLSRpodefinalizarumasessoLDPa
qualquermomentoenviandoumaLDPShutdownmessageparaopeer.
Manutenodas Adjacencias LDP oLDPutilizaorecebimentoconstantedeLDP Hello
messagesparaindicaraintenodeumpeeremcontinuarutilizandoumdeterminadolabelspace.
UmLSRmantmumHoldTimerparacadaadjacncia,oqualreiniciadoacadarecebimentode
umaHellomenssageenviadaporumaadjacnciaemparticular.Seatemporizaoexpira,oLDP
concluiqueaquelepeernodesejamaistrocarlabelscomaquelelabelspaceouopeernoest
maisativo.OLDP,ento,finalizaasessoestabelecidaatravsdoenviodeumaLDPNotification
messageedofechamentodaconexoTCP.
ExemplodeconfiguraodoLDPnosSwitchesDatacom

1)HabilitantoMPLSnaInterfaceloopback:comopremissaparautilizaodoMPLS,
necessriohabilitloemumainterfaceloopback.EsteconfiguraodefiniroLSRidutilizado
pelosswitchesDatacom;
2)HabilitandoLDPnainterfaceVlan: paraqueinformaesdelabelssejamtrocadas
entreosswitchespertencentesaodomnioMPLS,oLDPdeveestarhabilitadonasinterfacevlando
equipamentos.Pordefault,oswitchDatacomanunciasomenteainterfaceLoopbackcomoFEC,
possibilitandoquetodososroteadoresnaredeestabeleamumLSPcomsuasloopbacks,criando
assim,umfullmeshdeLSPs.
3)DefinindoLDPTargetedSessions: Emumcenrioemanel,casoos linksentreos
switchesvizinhosfalhem,assessesLDPseromantidasviaassessesLDPtargetedredundantes
criadas;

17
4.1.1ExemplodeConfiguraodoprotocoloLDP

a) ConfiguraoemDM4001PE1:
interfaceloopback0
mplsenable
!
interfacevlan3100
ldpenable
!
interfacevlan3102
ldpenable
!
mplsldpneighbor1.1.1.2
!
mplsldpneighbor1.1.1.3
!
mplsldpneighbor1.1.1.4

b) ConfiguraoemDM4001PE2:
interfaceloopback0
mplsenable
!
interfacevlan3100
ldpenable
!
interfacevlan3108
ldpenable
!
mplsldpneighbor1.1.1.1
!
mplsldpneighbor1.1.1.3
!
mplsldpneighbor1.1.1.4

c) ConfiguraoemDM4001PE3:
interfaceloopback0
mplsenable
!
interfacevlan3102
ldpenable
!
interfacevlan3106
ldpenable
!
mplsldpneighbor1.1.1.1
!
mplsldpneighbor1.1.1.2
!
mplsldpneighbor1.1.1.4

d) ConfiguraoemDM4004PE4:
interfaceloopback0
mplsenable
!
interfacevlan3106
ldpenable
!
interfacevlan3108
ldpenable

18
!
mplsldpneighbor1.1.1.1
!
mplsldpneighbor1.1.1.2
!
mplsldpneighbor1.1.1.3

4.1.2VerificaoLDP

LDPDiscovery: mostraas vizinhanasLDPmantidaspelasHellomessages(UDP,port646), via

mododedescobrimentobsico(multicast)ouestendido(unicast);
Dm4001_PE1(config)#shmplsldpdiscovery

AdjacencyID|DiscoveryMechanism|HoldTime|

1.1.1.2:0|Basic|15s|
1.1.1.2:0|Extended|45s|
1.1.1.3:0|Basic|15s|
1.1.1.3:0|Extended|45s|
1.1.1.4:0|Extended|45s|

LDPNeighbor:mostraassessesLDPestabelecidas(TCP,port646);
Dm4001_PE1(config)#shmplsldpneighbor

AdjacencyID|Status|LocalRole|

1.1.1.2:0|Operational|Passive|
1.1.1.3:0|Operational|Passive|
1.1.1.4:0|Operational|Passive|

LDPDatabase:mostratodasasFECseosLSPspossveisparacadaumadelas,atravsdoslabels
aprendidos dosswitchesdownstreameenviados paraos switches upstream,duranteatrocade
LabelMappingMessages;
Dm4001_PE1(config)#shmplsldpdatabase

NumberofEntries:19
NumberofFECs...:4

NS=NotSelected

NetworkPrefix|UpStreamLSRID|Label|DownStreamLSRID|Label|

1.1.1.1|1.1.1.2|3|||
1.1.1.1|1.1.1.3|3|||
1.1.1.1|1.1.1.4|3|||
NS1.1.1.1|||1.1.1.4|18|
1.1.1.2|1.1.1.3|16|||
1.1.1.2|1.1.1.4|16|||
1.1.1.2|||1.1.1.2|3|
NS1.1.1.2|||1.1.1.3|18|
NS1.1.1.2|||1.1.1.4|17|
1.1.1.3|1.1.1.2|17|||
1.1.1.3|1.1.1.4|17|||

19
NS1.1.1.3|||1.1.1.2|18|
1.1.1.3|||1.1.1.3|3|
NS1.1.1.3|||1.1.1.4|16|
1.1.1.4|1.1.1.2|18|||
1.1.1.4|1.1.1.4|18|||
NS1.1.1.4|||1.1.1.2|17|
1.1.1.4|||1.1.1.3|17|
NS1.1.1.4|||1.1.1.4|3|

TabeladeroteamentodoIGP:mostraatabeladerotasdoprotocoloderoteamento,aqualser
seguidapeloLDP;
Dm4001_PE1(config)#shiproute

Destination/MaskGatewayProtocolCostOutputInterfaceStatus

0.0.0.0/0172.16.1.254static1mgmtinterfaceActive
1.1.1.1/320.0.0.0connect0Active
1.1.1.2/3240.40.0.2ospf1VLAN3100Active
1.1.1.3/3240.40.2.2ospf1VLAN3102Active
1.1.1.4/3240.40.2.2ospf2VLAN3102Active
40.40.0.0/300.0.0.0ospf1VLAN3100Inactive
40.40.0.0/3040.40.0.1connect0VLAN3100Active
40.40.0.1/320.0.0.0connect0Active
40.40.2.0/300.0.0.0ospf1VLAN3102Inactive
40.40.2.0/3040.40.2.1connect0VLAN3102Active
40.40.2.1/320.0.0.0connect0Active
40.40.6.0/3040.40.2.2ospf2VLAN3102Active
40.40.8.0/3040.40.0.2ospf2VLAN3100Active
172.16.1.0/24172.16.1.189connect0mgmtinterfaceActive
172.16.1.189/320.0.0.0connect0Active

Atravsdastabelasacima,possvelverificarqueumLSPestabelecidodePE1paraPE4,
por exemplo, seria roteado atravs de PE3 (definido pelo IGP), sendo realizada uma ao de
inserodolabel17emPE1.ParadeterminaroslabelsutilizadospeloLSPatodestino,podese
verificarasmesmastabelasnosequipamentosintermediriosdarede.

Geralmente,oequipamentodedestinodoLSPinformaoupstreamparaquenenhumlabel
sejaencaminhadoparaele,talfuncionalidadechamadadePHP(PenultimateHopPopping).

possvel,tambm,verificarostatusoperacionaldeumLSPatravsdasfuncionalidadesde
MPLSLSPpingeMPLSLSPtraceroute.

4.2InfraestruturaMPLS:ProtocoloRSVPTE
OprotocoloRSVPTEutilizadoparaincorporarsredesMPLSfuncionalidadestaiscomo,
trafficengineering(TE)eFastReroute(FRR),possibilitandoummaiorcontroleeredundnciados
caminhos estabelecidos. Este captulo abordar os passos necessrios para a configurao do
protocoloRSVPTEemanisL3formadosporswitchesDatacom,bemcomoacriaodostneis
RSVPeoFastReroute.

20
MododeOperaodoprotocoloRSVP
Mensagens RSVP so enviadas na rede pelo Headend Router para identificar a
disponibilidadederecursosdocaminhodeumaorigemespecificaatodestino.OHeadendrouter
sempreaorigemdeumtunelRSVPeoTailendrouterodestinofinaldestetunel.Asquatro
principaismensagensutilizadas peloRSVPTEso:RSVPPathmessage,RSVPResvmessage,
RSVPErrormessageeRSVPTearmessage.
RSVPPathmessages:sogeradaspeloHeadendRoutereencaminhadaspelaredeatoTailend
Router.Acadandarede,aPathmessageverificaadisponiblidadedosrecursossolicitadose
armazenaestainformao.OutrafunodaPathmessagesolicitarmapeamentodelabels(Label
Request)nodomnioMPLS,propagandoestepedidopelaredenosentidodownstream.
RSVPResvMessages:criadaspeloTailendRouternodomnioMPLSeutilizadasparaconfirmara
reservaderecursossolicitadospelasPathmessages.AsResvmessagestambmpossuemafuno
deatribuirlabelsepropaglospelarede,nosentidoupstream,atoHeadendrouter.Esteprocesso
deatribuiodelabelsrepetidoemcadandarede,ondeocorremapeamentoealocaolocaisde
labelsparaotunelRSVP.
RSVP Error Messages: caso ocorra indisponibidade dos recursos solicitados, determinado
roteadorenviaumaErrormessageparaoroteadorquehaviasolicitadoorecurso.
RSVPTearMessages:doistiposdeTearmessagespodemsercriadas,PathTearmessageeResv
Tear message. Estas mensagens permitem a liberao dos recursos previamente utilizados,
possibilitandooreusoparasolicitaessubsequentes.

ExemplodeconfiguraodoRSVPnosSwitchesDatacom

1)HabilitandoMPLSnaInterfaceloopback:comopremissaparautilizaodoMPLS,
necessriohabilitloemumainterfaceloopback.
2)HabilitandoRSVPedefinindotimersnainterfaceVlan:paraquemensagensRSVP
possamsertrocadasentreosswitchesvizinhos,oRSVPdeveestarhabilitadonasinterfacesvlan.Os
timersdeRSVPHellomessagespodemseralteradosparamelhorarostemposdeconvergnciado

21
protocolo.Pordefault,otempodeenviodeRSVPHelloMessages30segundos;
3)DefinindoexplicitamenteocaminhodotnelRSVP: permitidoaousuriodefinir
umalistadenexthopspelosquaisotunelRSVPsercriado.
4)ConfigurandoparmetrosdetnelRSVP:definidaascaractersticasgeraisdotunel
RSVP,taiscomo:destino,mododeproteo,larguradebandaexigida,definiodocaminhodo
tnelpelarede,dentreoutros.Nesteexemplo,sermostradoomodo1:1doFastreroute;
5) AnunciandotneisnatabeladeroteamentodoIGP: permiteautilizaodetneis
RSVPcomonexthopnatabeladeroteamentodoIGP;
6)ConfigurandoIGPparasuporteMPLSTE:habilitaousodeextensesTEparaoIGP
utilizado.ParaoprotocoloderoteamentoOSPF,permiteatrocadeOpaqueLSAs;

4.2.1ExemplodeConfiguraodoprotocoloRSVPTE

a)ConfiguraoemDM4001PE1:
interfaceloopback0
mplsenable
!
interfacevlan3100
rsvpsignallinghellorefreshinterval2000
rsvpsignallinghellorefreshmisses1
rsvpenable
!
interfacevlan3102
rsvpsignallinghellorefreshinterval2000
rsvpsignallinghellorefreshmisses1
rsvpenable
!
mplsexplpath
explicitpathidentifier1
tsphop1pathoption1nextaddressipv440.40.0.2strict
tsphop2pathoption1nextaddressipv440.40.8.1strict
!

!
mplste
interfacetetunnel14
tunnelmplsdestination1.1.1.4
tunnelmplstrafficengautorouteannounce
tunnelmplstrafficengfastrerouteonetoone
tunnelmplstrafficengpathoption1explicitpathidentifier1
noshutdown
!
routerospf
mplstrafficeng

b)ConfiguraoemDM4001PE2:
interfaceloopback0
mplsenable
!
interfacevlan3100
rsvpsignallinghellorefreshinterval2000
rsvpsignallinghellorefreshmisses1
rsvpenable
!

22
interfacevlan3108
rsvpsignallinghellorefreshinterval2000
rsvpsignallinghellorefreshmisses1
rsvpenable
!
mplsexplpath
explicitpathidentifier1
tsphop1pathoption1nextaddressipv440.40.8.1strict
!

!
mplste
interfacetetunnel24
tunnelmplsdestination1.1.1.4
tunnelmplstrafficengautorouteannounce
tunnelmplstrafficengfastrerouteonetoone
tunnelmplstrafficengpathoption1explicitpathidentifier1
noshutdown
!
routerospf
mplstrafficeng

c)ConfiguraoemDM4001PE3:
interfaceloopback0
mplsenable
!
interfacevlan3102
rsvpsignallinghellorefreshinterval2000
rsvpsignallinghellorefreshmisses1
rsvpenable
!
interfacevlan3106
rsvpsignallinghellorefreshinterval2000
rsvpsignallinghellorefreshmisses1
rsvpenable
!
mplsexplpath
explicitpathidentifier1
tsphop1pathoption1nextaddressipv440.40.6.2strict
!

!
mplste
interfacetetunnel34
tunnelmplsdestination1.1.1.4
tunnelmplstrafficengautorouteannounce
tunnelmplstrafficengfastrerouteonetoone
tunnelmplstrafficengpathoption1explicitpathidentifier1
noshutdown
!
routerospf
mplstrafficeng

d)ConfiguraoemDM4004PE4:
interfaceloopback0
mplsenable
!
interfacevlan3106
rsvpsignallinghellorefreshinterval2000

23
rsvpsignallinghellorefreshmisses1
rsvpenable
!
interfacevlan3108
rsvpsignallinghellorefreshinterval2000
rsvpsignallinghellorefreshmisses1
rsvpenable
!
mplsexplpath
explicitpathidentifier1
tsphop1pathoption1nextaddressipv440.40.8.2strict
tsphop2pathoption1nextaddressipv440.40.0.1strict
!
explicitpathidentifier2
tsphop1pathoption1nextaddressipv440.40.8.2strict
!
explicitpathidentifier3
tsphop1pathoption1nextaddressipv440.40.6.1strict
!

!
mplste
interfacetetunnel41
tunnelmplsdestination1.1.1.1
tunnelmplstrafficengautorouteannounce
tunnelmplstrafficengfastrerouteonetoone
tunnelmplstrafficengpathoption1explicitpathidentifier1
noshutdown
!
interfacetetunnel42
tunnelmplsdestination1.1.1.2
tunnelmplstrafficengautorouteannounce
tunnelmplstrafficengfastrerouteonetoone
tunnelmplstrafficengpathoption1explicitpathidentifier2
noshutdown
!
interfacetetunnel43
tunnelmplsdestination1.1.1.3
tunnelmplstrafficengautorouteannounce
tunnelmplstrafficengfastrerouteonetoone
tunnelmplstrafficengpathoption1explicitpathidentifier3
noshutdown
!
routerospf
mplstrafficeng

4.2.2VerificaodosTneisRSVP

StatusdetneisRSVP:mostraasinformaespertinentesaotneisRSVPiniciados(Headend),
terminados (Tailend) e intermedirios (Transit) do equipamento, bem como o mapeamento de
labels,interfacesdesada,disponibilidadedoFRR,dentreoutros;
Dm4004_PE4#shmplstetrafficengtunnels

TunnelNameDestinationDetourUpIfDownIfAdm/Oper

Dm4001_PE1_T141.1.1.4avail.3108,3up/up
Dm4001_PE2_T241.1.1.4avail.3108,3up/up
Dm4001_PE3_T341.1.1.4avail.3106,3up/up
Dm4004_PE4_T411.1.1.1avail.3108,18up/up
Dm4004_PE4_T421.1.1.2avail.3108,3up/up
Dm4004_PE4_T431.1.1.3avail.3106,3up/up

24
StatusdoFastReroute:mostraasinformaesatuaisdoFRRparacadatunel,bemcomoarelao
aosnexthopsutilizados(principalebackup);
Dm4004_PE4#showmplsrsvptable

++++++
|Tnl(P/F)|Prot.Handle|Prot.NextHop|FailHandle|BackupNextHop|
++++++
|43(1/2)|0x014c0000|40.40.6.1|0x01500000|40.40.8.2|
|42(1/2)|0x01220000|40.40.8.2|0x015c0000|40.40.6.1|
|41(1/2)|0x012d0000|40.40.8.2|0x01590000|40.40.6.1|
++++++
RSVPLSCStatus:0None,1ACT,2UP,3DOWN,4UPD
Tableentries:3

possvelverificaraestadooperacionaldetnelRSVPatravsdafuncionalidadedeMPLSLSP
Ping;

4.3TunelamentodeLDPsobreRSVPTE
Neste item, mostrase como conciliar as vantagens do LDP e do RSVPTE, aliando
simplicidadenacriaodeLSPssfuncionalidadescomooTEeFRR.
OtunelamentodeLDPsobreRSVPTEseparaafunodetransportedelabelsdafunode
distribuiodelabels.OstneiscontinuamsendocriadoscomoauxliodoprotocoloRSVPTE,
mantendotodasasvantagensdecontroledoscaminhosestabelecidosemecanismosderedundncia
notransportedelabels,cabendoagoraaoLDP,atarefadeatribuiredistribuirlabelsaolongoda
rede.
AoutilizarLDPtuneladosobreRSVPTE,podeseassociarmltiplasFECsaomesmotnel,
poisoprotocoloLDPgaranteadefiniodelabelsdistintosparacadaumadelassemsepreocupar
comoLSPescolhido.OutraconsequnciaofatodoLDP"concatenar"vriostneisRSVPTE
paraformarumLSPatravsdaredeMPLS.Aoperaoderedenonecessariamentecriartneis
conectandotodososequipamentosdebordaentresi.Logo,noseriapossvelutilizarumnico
tnelparaalcanartodososdestinos.ComLDP,podeseencontrarnaredeumasequnciadetneis
adjacentesquepermitamalcanarqualquerroteadornarede.ApesardoLSPtersidoestabelecido
peloLDP,todootrfegoencaminhadosegundoasdiretrizesdeTEaplicadasaostneis.

4.3.1ExemplodeConfiguraodoLDPoRSVP

a)ConfiguraoemDM4001PE1:
interfacevlan3100
ipospfcost100
!
interfacevlan3102
ipospfcost100
!
mplsldpneighbor1.1.1.2
!
mplsldpneighbor1.1.1.3

25
!
mplsldpneighbor1.1.1.4

b)ConfiguraoemDM4001PE2:
interfacevlan3100
ipospfcost100
!
interfacevlan3108
ipospfcost100
!
mplsldpneighbor1.1.1.1
!
mplsldpneighbor1.1.1.3
!
mplsldpneighbor1.1.1.4

c)ConfiguraoemDM4001PE3:
interfacevlan3102
ipospfcost100
!
interfacevlan3106
ipospfcost100
!
mplsldpneighbor1.1.1.1
!
mplsldpneighbor1.1.1.2
!
mplsldpneighbor1.1.1.4

d)ConfiguraoemDM4004PE4:
interfacevlan3106
ipospfcost100
!
interfacevlan3108
ipospfcost100
!
mplsldpneighbor1.1.1.1
!
mplsldpneighbor1.1.1.2
!
mplsldpneighbor1.1.1.3

4.3.2VerificaodoLDPoRSVP

LDPNeighbor:mostraassessesLDPestabelecidassobreotnelRSVP;
Dm4004_PE4#shmplsldpneighbor

AdjacencyID|Status|LocalRole|

1.1.1.1:0|Operational|Active|
1.1.1.2:0|Operational|Active|
1.1.1.3:0|Operational|Active|

26
TabeladeroteamentoIGP:mostraqueasFECssoalcanveisviaostneisRSVPestabelecidos;
Dm4004_PE4#shiproute

Codes:ADAdministrativeDistance

Destination/MaskGatewayProtocolAD/CostOutputInterfaceStatus
/
0.0.0.0/0172.16.1.254static0/0mgmtethActive
1.1.1.1/320.0.0.0ospf30/1Dm4004_PE4_T41Active
1.1.1.2/320.0.0.0ospf30/1Dm4004_PE4_T42Active
1.1.1.3/320.0.0.0ospf30/1Dm4004_PE4_T43Active
1.1.1.4/320.0.0.0connect0/0Active
40.40.0.0/300.0.0.0ospf30/101Dm4004_PE4_T42Active
40.40.2.0/300.0.0.0ospf30/101Dm4004_PE4_T43Active
40.40.6.0/3040.40.6.2connect0/0VLAN3106Active
40.40.6.2/320.0.0.0connect0/0Active
40.40.8.0/3040.40.8.1connect0/0VLAN3108Active
40.40.8.1/320.0.0.0connect0/0Active
172.16.1.0/24172.16.1.211connect0/0mgmtethActive
172.16.1.211/320.0.0.0connect0/0Active
40.40.6.0/300.0.0.0ospf30/100VLAN3106Inactive
40.40.8.0/300.0.0.0ospf30/100VLAN3108Inactive

27
5ServiosMPLS
OsitensaseguirexemplificamosserviosbaseadosemMPLSpropostosnestedocumento.

5.1Layer2VirtualPrivateNetworkL2VPN
L2VPNvemaserumatcnicanaqualutilizaseumaredeMPLSparatransportardados
baseandose apenas na camada 2. No caso das redes Metro Ethernet, os pacotes ingress so
encaminhadosnaredeMPLSdeacordocomcritrioscomoportadeentrada,VLANdeentradae
MACdedestino.
A configurao do servio L2VPN se divide em duas etapas: provisionamento da
infraestruturaMPLS(tnelouLSPqueconectaosLERsingresseegress),eprovisionamentodos
circuitosvirtuaisquedistinguemasL2VPNsentresi.OsLSPjforamprovisionadosnositens
anteriores.Emrelaoaoscircuitos,seroexemplificadostantocircuitosP2PdotipoVPWSquanto
circuitosP2MPdotipoVPLSouHVPLS;

5.1.1ExemplodeCenrioL2VPNVPWS
EstecenriovisademonstraracriaodeumaL2VPNentreelementospertencentesaum
mesmoanelL3,atravsdeumcircuitoP2Pentreoselementos.
AnegociaodoslabelsdeVCserfeitadeformasinalizadapeloprotocoloLDPatravsda
tcnica PWE3 (conforme RFC 4447), simplificando o provisionamento e gerncia dos labels
utilizados. As mesmas entidades LDP targeted criadas anteriormente em cada LER (ingress e
egress)seroutilizadastambmparaatrocadelabelsdeVC.

a) ConfiguraoemDM4001PE1:
mplsvpws
vpn1enable
xconnectvlan1500vctypevlan
neighbor1.1.1.2pwidfecpwid100groupid10mplstypenonte
!
vpn2enable
xconnectvlan1501vctypevlan
neighbor1.1.1.4pwidfecpwid101groupid10mplstypenonte
!

b) ConfiguraoemDM4001PE2:
mplsvpws
vpn1enable
xconnectvlan1500vctypevlan
neighbor1.1.1.1pwidfecpwid100groupid20mplstypenonte
!
vpn2enable
xconnectvlan1502vctypevlan
neighbor1.1.1.4pwidfecpwid102groupid20mplstypenonte
!

28
 c) ConfiguraoemDM4004PE4:
mplsvpws
vpn1enable
xconnectvlan1501vctypevlan
neighbor1.1.1.1pwidfecpwid101groupid40mplstypenonte
!
vpn2enable
xconnectvlan1502vctypevlan
neighbor1.1.1.2pwidfecpwid102groupid40mplstypenonte
!

d) Verificao
Verificaodoestadodostneis:showmplstetrafficengtunnels
VerificaodoestadodasL2VPNs:showmplsl2vpn
VerificaodetalhadadasVPNs:showmplsl2vpndetail
VerificaodofuncionamentodaL2VPNVPWSentrePE1PE2,PE2P4ePE1PE4atravs
doenviodepingentreosPCs(ouTestset);
CapturaeanlisedospacotesenviadosentreasVPNsatravsumanalisadordeprotocolos;

StatusdoscircuitosL2VPNVPWSestabelecidos
PE1
Dm4001_PE1(config)#shmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPWS|vlan1500|100|1.1.1.2|Up|31|25

2|VPWS|vlan1501|101|1.1.1.4|Up|32|21

PE2
Dm4001_PE2(config)#shmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPWS|vlan1500|100|1.1.1.1|Up|25|31

2|VPWS|vlan1502|102|1.1.1.4|Up|26|22

29
PE4
Dm4004_PE4(config)#shmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPWS|vlan1501|101|1.1.1.1|Up|21|32

2|VPWS|vlan1502|102|1.1.1.2|Up|22|26

e) DeletarconfiguraesdeVPNs
ConfiguraoemDM4001PE1,DM4001PE2eDM4004PE4;
mplsvpws
novpnall
exit

5.1.2ExemplodeCenrioL2VPNVPLS

EstecenriovisademonstraracriaodeumaL2VPNP2MPentre3PEsdeummesmo
anelL3.SerocriadoscircuitosdotipoVPLSinterligandoPE4PE1ePE2.

a) ConfiguraoemDM4001PE1:
mplsvpws
vpn1enable
xconnectvlan1500vctypevlan
neighbor1.1.1.4pwidfecpwid201groupid10mplstypenonte

b) ConfiguraoemDM4001PE2:
mplsvpws
vpn1enable
xconnectvlan1500vctypevlan
neighbor1.1.1.4pwidfecpwid201groupid20mplstypenonte

c) ConfiguraoemDM4004PE4:
mplsvpls
vpn1enable
xconnectvlan1500vctypevlan
neighbor1.1.1.2pwidfecpwid201groupid40mplstypenonte
neighbor1.1.1.1pwidfecpwid201groupid40mplstypenonte

d) Verificao
Verificaodoestadodostneis:showmplstetrafficengtunnels
VerificaodoestadodasL2VPNs:showmplsl2vpn
VerificaodetalhadadasVPNs:showmplsl2vpndetail

30
 VerificaodofuncionamentodaL2VPNVPLSentrePE4PE1ePE4PE2atravsdoenvio
depingentreosPCs(ouTestset);
CapturaeanlisedospacotesenviadosentreasVPNsatravsumanalisadordeprotocolos;

StatusdoscircuitosL2VPNVPLSestabelecidos

Dm4001_PE1(config)#showmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPWS|vlan1500|201|1.1.1.4|Up|31|31

Dm4001_PE2(config)#showmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPWS|vlan1500|201|1.1.1.4|Up|33|30

Dm4004_PE4(config)#showmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPLS|vlan1500|201|1.1.1.2|Up|30|33
|||201|1.1.1.1|Up|31|31

e) Deletarconfiguraesiniciais
ConfiguraoemDM4001PE1,DM4001PE2eDM4004PE4;
mplsvpws
novpnall
exit
mplsvpls
novpnall

31
5.1.3ExemplodeCenrioL2VPNHVPLS
EstecenriovisademonstraracriaodeumaL2VPNP2MPentre3elementos,sendoo
PE4ohubdaconfiguraohubspoke.SerocriadoscircuitosdotipoHVPLSinterligandoos
equipamentosPE1ePE2viaPE4.

a) ConfiguraoemDM4001PE1:
mplsvpws
vpn1enable
xconnectvlan1500vctypevlan
neighbor1.1.1.4pwidfecpwid301groupid10mplstypenonte

b) ConfiguraoemDM4001PE2:
mplsvpws
vpn1enable
xconnectvlan1500vctypevlan
neighbor1.1.1.4pwidfecpwid301groupid20mplstypenonte

c) ConfiguraoemDM4004PE4:
mplsvpls
vpn1enable
xconnectvlan1500vctypevlan
neighbor1.1.1.2pwidfecpwid301groupid40mplstypenontenosplithorizon
neighbor1.1.1.1pwidfecpwid301groupid40mplstypenontenosplithorizon

d) Verificao
Verificaodoestadodostneis:showmplstetrafficengtunnels
VerificaodoestadodasL2VPNs:showmplsl2vpn
VerificaodetalhadadasVPNs:showmplsl2vpndetail
VerificaodofuncionamentodaL2VPNHVPLS entrePE4PE1,PE4PE2ePE1PE2
atravsdoenviodepingentreosPCs(ouTestset);
CapturaeanlisedospacotesenviadosentreasVPNsatravsumanalisadordeprotocolos;

StatusdoscircuitosL2VPNVPLSestabelecidos

Dm4001_PE1(config)#shmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPWS|vlan1500|301|1.1.1.4|Up|32|37

32
Dm4001_PE2(config)#shmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPWS|vlan1500|301|1.1.1.4|Up|34|36

Dm4004_PE4(config)#shmplsl2vpn

VPNID|AccessInt|UplinkInterfaces(PW's)
|
|Type|VCtype/VID|pw_id|destaddress|status|l_label|r_label

1|VPLS|vlan1500|301|1.1.1.2|Up|36|34
|||301|1.1.1.1|Up|37|32

5.2Layer3VirtualPrivateNetworkL3VPN
AL3VPN,tambmconhecidacomoMPLSIPVPN,aaplicaoquemelhorrepresentaa
tecnologiaMPLS,combinandoasvantagensdasinalizaoBGPscaractersticasdeisolamentode
trfegoesuporteVRFs(VPNRoutingandForwarding)doMPLS.
Como o prprio nome j define, possibilita a criao de VPNs baseadas em IP. Tal
caracterstica traduzse no compartilhamento das tabelas de roteamento entre os PEs e CEs
pertencentesVPN,fornecendoconectividadeIPentreasbordasdeformatransparenteaocoreda
rede.
AconfiguraodoserviodeL3VPNsedivideem4etapas:criaodaVRF,ativaoda
VRFnaVLANdeacesso,configuraodoMPBGPeconfiguraodoIBGP.

5.2.1ExemplodeCenrioL3VPNMPLSIPVPN
EstecenriovisademonstraracriaodeumaL3VPNentreos3elementosdocore10G.
SerocriadoscircuitosMP2MPinterligandoPE1,PE2ePE4.

a) ConfiguraoemDM4001PE1:
ipvrfvpn1
rd65000:1
routetargetboth65000:5
!
routerbgp65000
bgprouterid1.1.1.1
neighbor1.1.1.2remoteas65000
neighbor1.1.1.2localaddress1.1.1.1
neighbor1.1.1.2nexthopself
neighbor1.1.1.4remoteas65000
neighbor1.1.1.4localaddress1.1.1.1
neighbor1.1.1.4nexthopself
!
addressfamilyvpnv4

33
neighbor1.1.1.2activate
neighbor1.1.1.4activate
exitaddressfamily
!
addressfamilyipv4vrfvpn1
neighbor192.168.10.2remoteas65001
exitaddressfamily
!
interfacevlan2005
ipvrfforwardingvpn1
ipaddress192.168.10.1/24
setmembertaggedportchannel1

b) ConfiguraoemDM4001PE2:
ipvrfvpn1
rd65000:2
routetargetboth65000:5
!
routerbgp65000
bgprouterid1.1.1.2
neighbor1.1.1.1remoteas65000
neighbor1.1.1.1localaddress1.1.1.2
neighbor1.1.1.1nexthopself
neighbor1.1.1.4remoteas65000
neighbor1.1.1.4localaddress1.1.1.2
neighbor1.1.1.4nexthopself
!
addressfamilyvpnv4
neighbor1.1.1.1activate
neighbor1.1.1.4activate
exitaddressfamily
!
addressfamilyipv4vrfvpn1
neighbor192.168.20.2remoteas65002
exitaddressfamily
!
interfacevlan2002
ipvrfforwardingvpn1
ipaddress192.168.20.1/24
setmembertaggedethernet1/1

c) ConfiguraoemDM4004PE4:
ipvrfvpn1
rd65000:4
routetargetboth65000:5
!
routerbgp65000
bgprouterid1.1.1.4
neighbor1.1.1.1remoteas65000
neighbor1.1.1.1localaddress1.1.1.4
neighbor1.1.1.1nexthopself
neighbor1.1.1.2remoteas65000
neighbor1.1.1.2localaddress1.1.1.4
neighbor1.1.1.2nexthopself
!
addressfamilyvpnv4
neighbor1.1.1.1activate
neighbor1.1.1.2activate
exitaddressfamily
!
addressfamilyipv4vrfvpn1
neighbor192.168.40.2remoteas65004

34
exitaddressfamily
!
interfacevlan2004
ipvrfforwardingvpn1
ipaddress192.168.40.1/24
setmembertaggedethernet2/1

d) ConfiguraoemDM3000CE1:
routerbgp65001
bgprouterid50.50.50.1
neighbor192.168.10.1remoteas65000
redistributeconnected

e) ConfiguraoemDM3000CE2:
routerbgp65002
bgprouterid50.50.50.2
neighbor192.168.20.1remoteas65000
redistributeconnected

f) ConfiguraoemDM3000CE4:
routerbgp65004
bgprouterid50.50.50.3
neighbor192.168.40.1remoteas65000
redistributeconnected

g) Verificao
VerificaodoestadodaL3VPNnosPEs:showiproutevrfvpn1
VerificaodoslabelstrocadospelasL3VPN:showipbgpvpnv4alllabels
VerificaodoestadodaL3VPNnosCEs:showiproutebgp
VerificaodofuncionamentodaL3VPNentrePE1,PE2ePE4atravsdoenviodeping
entreosPCs(ouTestset);
CapturaeanlisedospacotesenviadosentreasVPNsatravsumanalisadordeprotocolos;

TabelasderotasespecficadaVRFcriadavpn1
Dm4004_PE4#shiproutevrfvpn1

Codes:ADAdministrativeDistance

Destination/MaskGatewayProtocolAD/CostOutputInterfaceStatus
/
100.100.5.144/281.1.1.2bgp200/0Dm4004_PE4_T42Active
100.100.5.144/281.1.1.2bgp200/0LDPActive
100.100.5.160/28192.168.40.2bgp20/0VLAN2004Active
100.100.5.176/281.1.1.1bgp200/0Dm4004_PE4_T41Active
100.100.5.176/281.1.1.1bgp200/0LDPActive
192.168.40.0/24192.168.40.1connect0/0VLAN2004Active
192.168.40.1/320.0.0.0connect0/0Active

35
TabelasdelabelsalocadosparaL3VPN
Dm4004_PE4#showipbgpvpnv4alllabels
BGPRoutingwithRouterID:1.1.1.4
Adminstatus:up,Operationalstatus:up
LocalASnumber:65000
DisplayingVPNv4routes:
NetworkNextHopIn/OutLabel

RouterDistinguisher:65000:1
100.100.5.176/281.1.1.122out
RouterDistinguisher:65000:2
100.100.5.144/281.1.1.216out
RouterDistinguisher:65000:4
100.100.5.160/281.1.1.419in
Totalnumberofprefixes3

6ExemplodeconfiguraodeQoS

Nestetem,serodemonstradasconfiguraesparaomapeamentodosvaloresdeEXP,CoS
eDSCP,definindoosparmetrosdeQoSnarede.

a) ConfiguraocomumparatodososPEs:
mplsexpmapegressprio0exp0
mplsexpmapegressprio1exp2
mplsexpmapegressprio2exp1
mplsexpmapegressprio3exp3
mplsexpmapegressprio4exp4
mplsexpmapegressprio5exp5
mplsexpmapegressprio6exp6
mplsexpmapegressprio7exp7
!
mplsexpmapingressexp0prio0
mplsexpmapingressexp1prio2
mplsexpmapingressexp2prio1
mplsexpmapingressexp3prio3
mplsexpmapingressexp4prio4
mplsexpmapingressexp5prio5
mplsexpmapingressexp6prio6
mplsexpmapingressexp7prio7
!
dscptable000
dscptable12123
dscptable14143
dscptable18183
dscptable26263
dscptable30306
dscptable34344
dscptable36364
dscptable38384
dscptable46465
dscptable57577

36
 b) Verificao

CapturareanalisarospacotesenviadosentreasVPNsatravsumanalisadordeprotocolos.
PacotesqueentrampeloLAGdePE1evlan.id==1500,recebidoscomDSCP46,temseu
campo DSCP remarcado, repriorizado (dscptable 46 46 5) e so encaminhados para a rede
MPLScomEXP=5(mplsexpmapegressprio5exp5).

Pacotesrecebidospelaporta2/1dePE4evlan.id==1500,recebidoscomcampo802.1p=2,
somapeadoseencaminhadosparaaredeMPLScomEXP=1(mplsexpmapegressprio2exp
1).

PacotesrecebidosdaredeMPLSsoencaminhadosdeacordocomomapeamentodeexp
mapingress(mplsexpmapingressexp5prio5/mplsexpmapingressexp2prio1);

37