tip香港ip代理

IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuideAvayaDataSolutionsDocumentDate:July2010DocumentNumber:NN48500-562DocumentVersion:1.
1EthernetRoutingSwitch8600EngineeringIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide2July2010avaya.
com2010AvayaInc.
AllRightsReserved.
NoticesWhilereasonableeffortshavebeenmadetoensurethattheinformationinthisdocumentiscompleteandaccurateatthetimeofprinting,Avayaassumesnoliabilityforanyerrors.
Avayareservestherighttomakechangesandcorrectionstotheinformationinthisdocumentwithouttheobligationtonotifyanypersonororganizationofsuchchanges.
DocumentationdisclaimerAvayashallnotberesponsibleforanymodifications,additions,ordeletionstotheoriginalpublishedversionofthisdocumentationunlesssuchmodifications,additions,ordeletionswereperformedbyAvaya.
EndUseragreetoindemnifyandholdharmlessAvaya,Avaya'sagents,servantsandemployeesagainstallclaims,lawsuits,demandsandjudgmentsarisingoutof,orinconnectionwith,subsequentmodifications,additionsordeletionstothisdocumentation,totheextentmadebyEndUser.
LinkdisclaimerAvayaisnotresponsibleforthecontentsorreliabilityofanylinkedWebsitesreferencedwithinthissiteordocumentation(s)providedbyAvaya.
Avayaisnotresponsiblefortheaccuracyofanyinformation,statementorcontentprovidedonthesesitesanddoesnotnecessarilyendorsetheproducts,services,orinformationdescribedorofferedwithinthem.
Avayadoesnotguaranteethattheselinkswillworkallthetimeandhasnocontrolovertheavailabilityofthelinkedpages.
WarrantyAvayaprovidesalimitedwarrantyonthisproduct.
Refertoyoursalesagreementtoestablishthetermsofthelimitedwarranty.
Inaddition,Avaya'sstandardwarrantylanguage,aswellasinformationregardingsupportforthisproduct,whileunderwarranty,isavailabletoAvayacustomersandotherpartiesthroughtheAvayaSupportWebsite:http://www.
avaya.
com/supportPleasenotethatifyouacquiredtheproductfromanauthorizedreseller,thewarrantyisprovidedtoyoubysaidresellerandnotbyAvaya.
LicensesTHESOFTWARELICENSETERMSAVAILABLEONTHEAVAYAWEBSITE,HTTP://SUPPORT.
AVAYA.
COM/LICENSEINFO/AREAPPLICABLETOANYONEWHODOWNLOADS,USESAND/ORINSTALLSAVAYASOFTWARE,PURCHASEDFROMAVAYAINC.
,ANYAVAYAAFFILIATE,ORANAUTHORIZEDAVAYARESELLER(ASAPPLICABLE)UNDERACOMMERCIALAGREEMENTWITHAVAYAORANAUTHORIZEDAVAYARESELLER.
UNLESSOTHERWISEAGREEDTOBYAVAYAINWRITING,AVAYADOESNOTEXTENDTHISLICENSEIFTHESOFTWAREWASOBTAINEDFROMANYONEOTHERTHANAVAYA,ANAVAYAAFFILIATEORANAVAYAAUTHORIZEDRESELLER,ANDAVAYARESERVESTHERIGHTTOTAKELEGALACTIONAGAINSTYOUANDANYONEELSEUSINGORSELLINGTHESOFTWAREWITHOUTALICENSE.
BYINSTALLING,DOWNLOADINGORUSINGTHESOFTWARE,ORAUTHORIZINGOTHERSTODOSO,YOU,ONBEHALFOFYOURSELFANDTHEENTITYFORWHOMYOUAREINSTALLING,DOWNLOADINGORUSINGTHESOFTWARE(HEREINAFTERREFERREDTOINTERCHANGEABLYAS"YOU"AND"ENDUSER"),AGREETOTHESETERMSANDCONDITIONSANDCREATEABINDINGCONTRACTBETWEENYOUANDAVAYAINC.
ORTHEAPPLICABLEAVAYAAFFILIATE("AVAYA").
CopyrightExceptwhereexpresslystatedotherwise,nouseshouldbemadeoftheDocumentation(s)andProduct(s)providedbyAvaya.
Allcontentinthisdocumentation(s)andtheproduct(s)providedbyAvayaincludingtheselection,arrangementanddesignofthecontentisownedeitherbyAvayaoritslicensorsandisprotectedbycopyrightandotherintellectualpropertylawsincludingthesuigenerisrightsrelatingtotheprotectionofdatabases.
Youmaynotmodify,copy,reproduce,republish,upload,post,transmitordistributeinanywayanycontent,inwholeorinpart,includinganycodeandsoftware.
Unauthorizedreproduction,transmission,dissemination,storage,andorusewithouttheexpresswrittenconsentofAvayacanbeacriminal,aswellasaciviloffenseundertheapplicablelaw.
ThirdPartyComponentsCertainsoftwareprogramsorportionsthereofincludedintheProductmaycontainsoftwaredistributedunderthirdpartyagreements("ThirdPartyComponents"),whichmaycontaintermsthatexpandorlimitrightstousecertainportionsoftheProduct("ThirdPartyTerms").
InformationregardingdistributedLinuxOSsourcecode(forthoseProductsthathavedistributedtheLinuxOSsourcecode),andidentifyingthecopyrightholdersoftheThirdPartyComponentsandtheThirdPartyTermsthatapplytothemisavailableontheAvayaSupportWebsite:http://support.
avaya.
com/Copyright.
TrademarksThetrademarks,logosandservicemarks("Marks")displayedinthissite,thedocumentation(s)andproduct(s)providedbyAvayaaretheregisteredorunregisteredMarksofAvaya,itsaffiliates,orotherthirdparties.
UsersarenotpermittedtousesuchMarkswithoutpriorwrittenconsentfromAvayaorsuchthirdpartywhichmayowntheMark.
Nothingcontainedinthissite,thedocumentation(s)andproduct(s)shouldbeconstruedasgranting,byimplication,estoppel,orotherwise,anylicenseorrightinandtotheMarkswithouttheexpresswrittenpermissionofAvayaortheapplicablethirdparty.
AvayaisaregisteredtrademarkofAvayaInc.
Allnon-Avayatrademarksarethepropertyoftheirrespectiveowners.
DownloadingdocumentsForthemostcurrentversionsofdocumentation,seetheAvayaSupport.
Website:http://www.
avaya.
com/support.
ContactAvayaSupportAvayaprovidesatelephonenumberforyoutousetoreportproblemsortoaskquestionsaboutyourproduct.
Thesupporttelephonenumberis1-800-242-2121intheUnitedStates.
Foradditionalsupporttelephonenumbers,seetheAvayaWebsite:http://www.
avaya.
com/support.
IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide3July2010avaya.
comAbstractThisTechnicalConfigurationGuideprovidesabriefsummaryfortheconfigurationofIPVPN-LitefortheAvayaEthernetRoutingSwitch8600.
IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide4July2010avaya.
comTableofContentsFigures5DocumentUpdates6Conventions61.
Overview:IPVPN-Lite.
71.
1RFC4364MP-BGPBasedIPVPNsOverview.
71.
2DeliveringRFC4364IPVPNsoveranIPBackbonewithAvayaIPVPN-Lite.
101.
3HardwareRequirements122.
Configuration–IPVPN-Lite132.
1ConfigurationSteps.
142.
2Verification.
253.
SoftwareBaseline334.
ReferenceDocumentation.
335.
Customerservice345.
1Gettingtechnicaldocumentation.
345.
2Gettingproducttraining.
345.
3Gettinghelpfromadistributororreseller.
345.
4GettingtechnicalsupportfromtheAvayaWebsite.
34IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide5July2010avaya.
comFiguresFigure1:IPVPN-LiteFramework7Figure2:CEtoPEConnectivity8Figure3:PEtoPEConnectivity.
8Figure4:HubandSpoke9Figure5:VPN-IPv4Address.
10Figure6:RDValue.
11Figure7:SMLTDeployment11Figure8:IPVPN-LiteConfigurationExample.
13IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide6July2010avaya.
comDocumentUpdatesJuly2010ConventionsThissectiondescribesthetext,image,andcommandconventionsusedinthisdocument.
Symbols:Tip–Highlightsaconfigurationortechnicaltip.
Note–Highlightsimportantinformationtothereader.
Warning–Highlightsimportantinformationaboutanactionthatmayresultinequipmentdamage,configurationordataloss.
Text:Boldtextindicatesemphasis.
ItalictextinaCourierNewfontindicatestexttheusermustenterorselectinamenuitem,buttonorcommand:ERS5520-48T#showrunning-configOutputexamplesfromAvayadevicesaredisplayedinaLucindaConsolefont:ERS5520-48T#showrunning-config!
EmbeddedASCIIConfigurationGeneratorScript!
Model=EthernetRoutingSwitch5520-24T-PWR!
Softwareversion=v5.
0.
0.
011enableconfigureterminalIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide7July2010avaya.
com1.
Overview:IPVPN-Lite1.
1RFC4364MP-BGPBasedIPVPNsOverviewIPVPN-Lite,basedonRFC4364,providestheabilitytorunIPvirtualprivatenetworksacrossanormalIPbackbonerunninganytypeofIGPprotocolusingMP-BGP–pleasenotethatRFC4364obsoletesRFC2547.
TheRFCframeworkdefinestwonodetypesinsidetheproviderbackbone:Provider(P)node&ProviderEdge(PE)node.
AlsoonenodetypelocatedattheCustomerpremises:CustomerEdge(CE)node.
Figure1:IPVPN-LiteFrameworkInaserviceproviderenvironmenttheCEnodesaretypicallyownedbytheendcustomersandareL3IProuters.
However,inatypicalEnterpriseenvironment,theCEnodesaremorelikelytobeownedbythesameEnterprisewhichownsthebackbone.
Typically,theCEdevicesmightalsobesimpleL2switches.
WewillthusrefertothoseCEdevicesasL2CEs.
TheRFCframeworkdefinesanarchitecturewherethebackbonePnodesarecompletelyunawareoftheVPNservicestheyarecarrying.
ThismeansthattheycanscaletoanunlimitednumberofIPVPNsandalsothatnoconfigurationchangeisrequiredonthePnodeswhenIPVPNservicesareaddedorremoved.
ThisisachievedbydefiningtheIPVPNsattheedgeofthebackbonenetworkinthePEnodesandallowingthePEnodestoformiBGPpeeringamongthemselves.
ThisisensuredatthedataplaneviatheuseofsomeformofencapsulationtohidethecustomerIPforwardingheadersfromthePnodes.
ThePEnodesmustbeabletoexchangeIPv4customerrouteswiththelocallyattachedCEdevices.
TheseroutesneedtobekeptseparatefromtheBackboneIGProutesaswellasfromotherIPv4routesfromdifferentCEdevicesbelongingtodifferentcustomers.
TheframeworkalsoensuresthatPEnodescanhandlethesameIPv4route(e.
g.
usingprivateaddressspace)inuseinmultiplelocallyattachedCEdevicesbelongingtodifferentcustomers.
ThisisallachievedviatheuseofVPNRouting&Forwarding(VRF)TableswhichessentiallyequatetocreatingvirtualroutinginstancesonthePEnodes.
EachVRFisthusassociatedwithonesingleCustomer,connectingtooneormoreCEdevicesbutallbelongingtothesameCustomer.
TheseVRFswillthusexchangerouteswiththelocallyconnectedCEdevicesusinganysuitableroutingprotocol(eBGP,OSPF,RIP,StaticRoutes)iftheCEisaL3device.
IfontheotherhandtheCEisaL2switchthentheCustomerrouteswillbelocal(direct)routesconfigureddirectlyontherelevantVRFofthePEnode.
IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide8July2010avaya.
comFigure2:CEtoPEConnectivityThePEnodesmustalsobeabletoexchangetheselocalVRFcustomerIPv4routeswithotherremotePEnodeswhoalsoownaVRFforthesamecustomer(sameIPVPN)whilestillensuringthatroutesfromdifferentcustomers/IPVPNsarekeptseparateand,likewise,anyidenticalIPv4routesoriginatingfromtwodifferentcustomerscanbothbeadvertisedandkeptseparate.
ThisisachievedviatheuseofiBGPpeeringbetweenthePEnodes.
TheseiBGPsessionsareterminatedonasingleCircuitlessinterfaceonthePEnodes(whichbelongstotheBackboneGlobalRoutingTable(GRT)).
BGPrunsoverTCPandcanthereforeberundirectlybetweenthePEnodesacrossthebackbone(thereisnoBGPrequirementonthePnodes).
Figure3:PEtoPEConnectivityAfulliBGPpeeringmeshisrequiredbetweenallPEs.
InordertoscaletoalargenumberofPEdevices,theuseofBGPRoutereflectorsisrecommended.
TheRFCframeworkmandatestheuseonMulti-Protocol(MP)BGP.
Thisrequirementstemsfromtheneedto(a)makeidenticalIPv4routesoriginatingfromdifferentcustomersuniqueforBGPand(b)theneedtoassociateagivencustomerIPv4routewithagivenVPN-id.
TheformerisachievedviatheuseofRouteDistinguishers(RD)andtheuseofanewtypeofaddresstobeadvertisedinBGPUpdates.
AnewAddressFamilyIdentifier(AFI)andSubsequentAddressFamilyIdentifier(SAFI)aredefinedinMP-BGPforVPN-IPv4routeswhereaVPN-IPv4routeisthecustomerIPv4routepre-pendedwithaconfigurableRD.
TheRDisconfiguredoneachandeveryVRFcreatedonthePEnodesandmustbeconfiguredinsuchawaythatnootherVRFonanyotherPEinthebackbonehasthesamevalue.
RDsareencodedaspartoftheNetworkLayerReachabilityInformation(NLRI)intheBGPUpdatemessages.
ThelatterisachievedviatheuseRouteTargets(RT)whichareencodedasMP-BGPextendedcommunities.
RTsareconfiguredonthePEnodes,withintheVRFs,aseitherimportorexportorboth.
RTsconstitutethegluewhichdetermineswhetheracustomerVPN-IPv4routebeingadvertisedbyonePEnodeistobeacceptedbyanotherremotePEnodethusformingalogicalIPVPNendtoend.
TheexportRTisaddedtoVPN-IPv4BGPUpdatesoriginatingfromthePEwhichisadvertisingthosecustomerroutes.
TheserouteswillonlybeacceptedbyremotePEnodesifthesehaveamatchingimportRTconfiguredononeoftheirVRFsandfurthermoretherouteswillthenonlybeinstalledinthoseVRFsIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide9July2010avaya.
comwithmatchingimportRTs.
RTsmustthereforebeconfiguredinsuchawayastobeuniqueforeachIPVPN.
ThismechanismalsoenhancesthePEscalingcapabilitysinceagivenPEnodewillonlyacceptVPN-IPv4routesforwhichithaslocalVRFsbelongingtothatIPVPN;anyotherVPN-IPv4routeswillnotbeaccepted.
SinceeachVRFcanbeconfiguredwithanynumberofRTs(eitherasimport,exportorboth)thisallowseachVRFtobepartofanynumberofoverlappingIPVPNs.
TheuseofRTcanalsobeexploitedtoachieveanumberofdifferentIPVPNtopologies,fromany-to-any(meshed)whereallVRFsinthesameIPVPNhavethesameimportandexportRT,tohub&spoketopologieswherethehubnodesuseoneexportRT(configuredasimportRTonspokes)andadifferentimportRT(configuredasexportRTonthespokes);topologieswithmultiplehubsitescanalsobeeasilyachieved.
Figure4:HubandSpokeIntermsofconfigurationboththeRDandtheRTareconfiguredwiththesameformatandareusuallyconfiguredinthesameVRFcontextonthePEdevice.
ThefollowingdiagramillustratestheformatusedfortheRD.
RouteDistinguisher(RD)IPv4Address32bits64bits0000ASNnnRDFormats00024byteASNnnBothconfiguredasASN:nnAutonomousSystemNumber(ASN)ofbackbone;shouldbeIANAassignedthatisuniqueperserviceproviderIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide10July2010avaya.
comFigure5:VPN-IPv4AddressSofarwehavecoveredhowtheRFCframeworkworksatthecontrolplane,i.
e.
howthecustomerIPVPNroutesarere-advertisedovertheproviderbackbone.
IntermsofDataPlanepacketforwardingacrossthesamebackplane,RFC4364definesanimplementationbasedonMPLSwheretheBackbonemustbeMPLScapableandafullmeshofMPLSLabelSwitchedPaths(LSPs)mustalreadybeinplacebetweenthePEnodes.
WhilestillleveragingthesameidenticalRFC4364frameworkatthecontrolplanelevel,AvayaIPVPN-LitedeliversthesameIPVPNcapabilitiesoverasimpleIProutedbackboneusingsimpleIPinIPencapsulationwithnorequirementforMPLSandthecomplexitiesinvolvedwithrunningandmaintaininganMPLSbackbone.
1.
2DeliveringRFC4364IPVPNsoveranIPBackbonewithAvayaIPVPN-LiteWithIPVPN-LiteasecondCircuitlessIPaddressisconfiguredonthePEnodes(againintheBackboneGRTandre-advertisedacrosstheBackbonebytheIGP).
ThissecondCircuitlessaddresswillbeusedtoprovideaddressspacefortheouterheaderofIP-in-IPencapsulationforallIPVPNspacketsterminatingtoandoriginatingfromthePE.
ThissecondCircuitlessaddressisthereforeideallyconfiguredasanetworkroute(i.
e.
notasa32bitmaskhostroute)withenoughaddressspacetoaccommodateeveryVRFconfiguredonthePE.
A24bitmaskwillthusprovidesufficientaddressspacefor252VRFs.
Furthermore,sincethesenetworksonlyneedtoberoutedwithintheproviderbackboneandnofurther,publicaddressspacecanbeused.
WhenthissecondCircuitlessIPaddressisconfigureditmustalsobeenabledforIPVPNservices.
WithAvayaIPVPN-Lite,theRDisnowusedtoconveyoneextrapieceofinformationoverandaboveitsintendedusewithintheRFC4364framework.
IntheRFC,theonlypurposeoftheRDistoensurethatidenticalIPv4routesfromdifferentcustomersarerendereduniquesothatBGPcantreatthemasseparateVPN-IPv4routes.
WithIPVPN-Lite,theRDisnowalsousedtoadvertisetoremotePEdeviceswhatIPaddressneedstobeusedastheouterIP-in-IPencapsulationwhenthoseremotePEdevicesneedtodeliveracustomerpacketovertheIPVPNbacktothePEnodewhichownsthedestinationroutetowhichthepacketisaddressed.
ThereforewhenconfiguringRDforIPVPN-LitetheRDmust(a)alwaysbeconfiguredasType1format(IPaddress:number)and(b)theIPaddressconfiguredintheRDmustallocateonehostIPaddressdefinedbythesecondCircuitlessinterfaceforeachVRFonthePE.
Again,theRDmuststillbeconfiguredtoensurethatnootherVRFonanyotherPEhasthesameRD.
InthefollowingexamplethesecondcircuitlessIPinterfaceisconfiguredasaprivateaddress,witha24bitmask,wherethethirdoctetidentifiesthePEnode-idandthefourthoctet(thehostportion)definestheVRFonthatPEnode.
ThenumberfollowingtheIPaddressisthensimplyallocatedtouniquelyidentifytheVPN-id.
0001IPaddressnnBothconfiguredasIP-address:nnDefinedifbackboneusesprivateASnumberMandatoryformatonERS8600whendoingIPVPN-LiteIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide11July2010avaya.
comFigure6:RDValueIPVPN-LitecanthereforeeasilybedeployedonanyenterpriseexistingIProutednetworkandautomaticallyleveragetheexistingbackbonearchitectureintermsofloadbalancingandsub-secondfailoverresiliency.
WhileMPLSstrugglestoachievethesegoalsandonlydoessobybringinginexponentialcomplexity,AvayaIPVPN-LitecansimplyleveragethesecapabilitiesfromeitherapureIPOSPFroutedcorewhereECMPisenabledoranetworkcoredesignedwithAvayaSMLT/RSMLTclustering.
Furthermore,PEscanbejustaseasilydeployedwithSMLTclusteringtowardstheCEedgedevicesthusdeliveringaveryattractiveclusteredPEsolution.
ThisiseasilyachievablewhethertheCEisaL2device(usingSMLTClustering)oranL3device(wheretheSMLTclusterneedstobeRSMLTenabled).
Figure7:SMLTDeploymentOverall,IPVPN-Liteprovidessupportforthefollowing:256VPNspereachsystemFilteringsupport(UNIside)OverlappingaddressesIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide12July2010avaya.
comMP-BGPextensionsBGProuterefreshBGProutereflectionPeeringtomultipleroutereflectorsRoutereflectionserver(NNIside)FullmeshandhubandspokedesignsExtendedcommunityType0and1importandexportroutetargetsandroutedistinguishersIP-BGPextensionsIEEE802.
3ad/MLTSplitMultiLinkTrunking(SMLT)andRoutedSplitMultiLinkTrunking(RSMLT)forCEconnectivityECMPVRF-basedpingandtracerouteUNIpacketclassification(port,VLAN,IP,VRF,andVPN)VRFUNIroutingprotocols(RIP,OSPF,eBGP)AnIPVPN-LitePEdeviceprovidesfourfunctions:AnIGPprotocol,suchasOSPF,acrossthecorenetworktoconnectremotePEdevicesVRFstoprovidetrafficseparationMP-BGPtoexchangeVPNroutesandserviceIPaddresseswithremotePEdevicesTheforwardingplanetoencapsulatethecustomerIPpacketintothereviseIPheader1.
3HardwareRequirementsIPVPN-LiteworksonlywithRorRSmodulesandrequiresaSuperMezzaninedaughtercardforthe8692SF.
ThisfeaturecanoperateinmixedmodebutonlyRandRSmodulescanbeused.
IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide13July2010avaya.
com2.
Configuration–IPVPN-LiteThefollowingisaconfigurationexampleusingIPVPN-LitebetweenfourERS8600's.
ThesefourERS8600aredeployedacrossanOSPFbackboneasshowninthediagrambelow.
AtotaloftwoVRF'swillbeconfigured,VRFblueandVRFred,allowingforover-lappingOSPFnetworks.
Figure8:IPVPN-LiteConfigurationExampleToeasetheiBGPpeeringrequirements,wewillconfigureERS8600-1asaroutereflectorwithERS8600-2,ERS8600-3,andERS8600-4asclients.
Typically,foraddedresilience,asecondroutereflectorcouldbedeployedinacluster–forthisexample,wewillonlydeployoneroutereflector.
FormoredetailsofthistopicandotherBGPrelateditems,pleaserefertotheBGP-4TCG(partnumberNN48500-538).
InregardstotheIPVPN-Literelateditems,thefollowingsettingswillbeused.
ItemERS8600-1ERS8600-2ERS8600-3ERS8600-4CircuitlessIPAddresses(CLIP)CLIP1-Global10.
1.
1.
1/3210.
2.
1.
1/3210.
3.
1.
1/3210.
4.
1.
1/32CLIP2-VRF10.
1.
2.
254/2410.
2.
2.
254/2410.
3.
2.
254/2410.
4.
2.
254/24BGPTypeiBGPwithRouteReflection(RR)enablediBGP,RRclientto8600-1iBGP,RRclientto8600-1iBGP,RRclientto8600-1AS3030IPVPN-LiteEnabledforeachneighborIPVPN-LiteIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide14July2010avaya.
comRD–blue(vrf1)10.
1.
2.
1:1-10.
3.
2.
1:110.
4.
2.
1:1RT–blue3030:1RD–red(vrf2)10.
1.
2.
2:210.
2.
2.
2:210.
3.
2.
2:2-RT–red3030:2AlthoughaseparateCLIPaddresscouldbeconfigureforeachVRF,itisrecommendedtoconfigurejustoneCLIPaddressforallVRF'switha24-bitmaskandconfiguretheRDaddressfromtheCLIPaddressspaceusingthenetworkportionandusingtheVRFIDasthehostportion.
Inthisexamplefor8600-1,CLIP#2isconfiguredas10.
1.
2.
254/24whiletheRDvaluefortheblueVRFisconfiguredas10.
1.
2.
1:1,andtheRDvaluefortheredVRFisconfiguredas10.
1.
2.
2:22.
1ConfigurationStepsTheconfigurationstepsrequiredareasfollows:1.
BaseConfigurationBaseVLANconfigurationtocorewithIGPprotocoloInourexample,OSPFisusedItrecommendedtouseauniqueaddressschemeperzone,i.
e.
10.
.
.
d,i.
e.
forthisexample,wewillusethefollowing:o8600-1willusezone1,8600-2willusezone2,8600-3willusezone3,while8600-4willusezone4oForcoreVLAN'sid's,use2-99oForcustomerVLAN'sid's,use1000-3999CLIPaddressesoACLIPaddressisrequiredforiBGPpeeringbetweenthePErouters.
ItisrecommendedtouseaCLIPaddresswitha32-bitnetmaskoAnotherCLIPaddressisrequiredfortheVRF's.
ItisrecommendedtoconfigureoneCLIPaddresswitha24-bitmaskforVRF'sandthenconfiguretheRDvaluefromthisCLIPaddressspaceusingthesamenetworkspaceandahostaddresssettothesamevalueasthatoftheVRFID.
PleasenotethatthenetworkportionmustbeuniqueperPE.
2.
BGPConfigurationiBGPpeeringisrequiredbetweenthePErouters,8600-1,8600-2,8600-3,and8600-4Tohelpwithscaling,routereflectorsshouldbeusedBetweeneachBGPpeer,IPVPN-Litecapabilitymustbeenabled3.
VRFconfigurationAddVRF(s)andassigningVLAN,IPaddress,andIGPprotocolorstaticroutingtoeachVRF4.
IPVPN-LiteConfigurationAddaIPVPN-LiteRouterIdentifier(RD)derivedfromtheCLIPaddressconfiguredinstep1:oMaketheRD=IPaddress:nnwheretheIPaddressisderivedfromtheCLIPnetworkaddressportionandthehostissettotheVRFandnnequalstheVPN-idoForeachPErouter,theRDmustbeuniqueIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide15July2010avaya.
comAddaIPVPN-LiteRouteTarget(RT)oCreateacommonBGPextendedcommunityroutetarget(RT)addressthatisusedtoidentifytheIP-VRFbetweentheERS8600PEswitchesoIsitrecommendedtouseanRTvalueinthefollowingformat:ASN:VPN-idIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide16July2010avaya.
com2.
1.
1ERS8600–BaseConfiguration2.
1.
1.
1CreatetheCoreVLANsERS8600-1Step1–CreateVLAN20ERS8600-1:5#configethernet4/5perform-taggingenableERS8600-1:5#configvlan1portremove4/5ERS8600-1:5#configvlan20createbyport1ERS8600-1:5#configvlan20portsadd4/5ERS8600-1:5#configvlan20ipcreate10.
1.
20.
1/24ERS8600-1:5#configvlan20ipospfenableERS8600-1:5#configethernet4/5stg1stpdisableERS8600-1:5#configethernet4/5statedisableERS8600-1:5#configethernet4/5stateenableERS8600-2Step1–CreateVLAN20ERS8600-2:5#configethernet4/7perform-taggingenableERS8600-2:5#configvlan1portremove4/7ERS8600-2:5#configvlan20createbyport1ERS8600-2:5#configvlan20portsadd4/7ERS8600-2:5#configvlan20ipcreate10.
2.
20.
1/24ERS8600-2:5#configvlan20ipospfenableERS8600-2:5#configethernet4/7stg1stpdisableERS8600-2:5#configethernet4/7statedisableERS8600-2:5#configethernet4/7stateenableERS8600-3Step1–CreateVLAN60ERS8600-3:5#configvlan60createbyport1ERS8600-3:5#configvlan60portadd2/3ERS8600-3:5#configvlan60ipcreate10.
3.
60.
1/30ERS8600-3:5#configvlan60ipospfenableERS8600-3:5#configethernet2/3stg1stpdisableERS8600-3:5#configethernet2/3statedisableERS8600-3:5#configethernet2/3stateenableERS8600-4Step1–CreateVLAN60ERS8600-4:5#configvlan60createbyport1ERS8600-4:5#configvlan60portadd2/3IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide17July2010avaya.
comERS8600-4:5#configvlan60ipcreate10.
4.
60.
1/30ERS8600-4:5#configvlan60ipospfenableERS8600-4:5#configethernet2/3stg1stpdisableERS8600-4:5#configethernet2/3statedisableERS8600-4:5#configethernet2/3stateenable2.
1.
1.
2CreateCircuitlessIPAddresses(CLIPAddresses)ERS8600-1Step1–CreateCLIP1andCLIP2withOSPFenabledplusenableIPVPN-liteforCLIP2onlyERS8600-1:5#configipcircuitless-ip-int1create10.
1.
1.
1/32ERS8600-1:5#configipcircuitless-ip-int1ospfenableERS8600-1:5#configipcircuitless-ip-int2create10.
1.
2.
254/24ERS8600-1:5#configipcircuitless-ip-int2ospfenableERS8600-1:5#configipcircuitless-ip-int2ipvpn-lite-capabilityenableERS8600-2Step1–CreateCLIP1andCLIP2withOSPFenabledplusenableIPVPN-liteforCLIP2onlyERS8600-2:5#configipcircuitless-ip-int1create10.
2.
1.
1/32ERS8600-2:5#configipcircuitless-ip-int1ospfenableERS8600-2:5#configipcircuitless-ip-int2create10.
2.
2.
254/24ERS8600-2:5#configipcircuitless-ip-int2ospfenableERS8600-2:5#configipcircuitless-ip-int2ipvpn-lite-capabilityenableERS8600-3Step1–CreateCLIP1andCLIP2withOSPFenabledplusenableIPVPN-liteforCLIP2onlyERS8600-3:5#configipcircuitless-ip-int1create10.
3.
1.
1/32ERS8600-3:5#configipcircuitless-ip-int1ospfenableERS8600-3:5#configipcircuitless-ip-int2create10.
3.
2.
254/24ERS8600-3:5#configipcircuitless-ip-int2ospfenableERS8600-3:5#configipcircuitless-ip-int2ipvpn-lite-capabilityenableERS8600-4Step1–CreateCLIP1andCLIP2withOSPFenabledplusenableIPVPN-liteforCLIP2onlyERS8600-4:5#configipcircuitless-ip-int1create10.
4.
1.
1/32ERS8600-4:5#configipcircuitless-ip-int1ospfenableERS8600-4:5#configipcircuitless-ip-int2create10.
4.
2.
254/24ERS8600-4:5#configipcircuitless-ip-int2ospfenableERS8600-4:5#configipcircuitless-ip-int2ipvpn-lite-capabilityenableIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide18July2010avaya.
com2.
1.
1.
3EnableOSPFERS8600-1Step1–EnableOSPFgloballyandsetOSPFrouter-idtoCLIP1addressERS8600-1:5#configipospfadmin-stateenableERS8600-1:5#configipospfrouter-id10.
1.
1.
1ERS8600-1:5#configipospfenableERS8600-2Step2–EnableOSPFgloballyandsetOSPFrouter-idtoCLIP1addressERS8600-2:5#configipospfadmin-stateenableERS8600-2:5#configipospfrouter-id10.
2.
1.
1ERS8600-2:5#configipospfenableERS8600-3Step1–EnableOSPFgloballyandsetOSPFrouter-idtoCLIP1addressERS8600-3:5#configipospfadmin-stateenableERS8600-3:5#configipospfrouter-id10.
3.
1.
1ERS8600-3:5#configipospfenableERS8600-4Step1–EnableOSPFgloballyandsetOSPFrouter-idtoCLIP1addressERS8600-4:5#configipospfadmin-stateenableERS8600-4:5#configipospfrouter-id10.
4.
1.
1ERS8600-4:5#configipospfenable2.
1.
2BGPConfigurationwithIPVPN-LiteCapabilityEnabled2.
1.
2.
1EnableBGPGloballyandAddNeighborsERS8600-1Step1–EnableBGPgloballyERS8600-1:5#configipbgpauto-summarydisableERS8600-1:5#configipbgpsynchronizationdisableERS8600-1:5#configipbgplocal-as3030ERS8600-1:5#configipbgpenableERS8600-2Step1–EnableBGPgloballyERS8600-2:5#configipbgpauto-summarydisableERS8600-2:5#configipbgpsynchronizationdisableERS8600-2:5#configipbgplocal-as3030ERS8600-2:5#configipbgpenableIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide19July2010avaya.
comERS8600-3Step1–EnableBGPgloballyERS8600-3:5#configipbgpauto-summarydisableERS8600-3:5#configipbgpsynchronizationdisableERS8600-3:5#configipbgplocal-as3030ERS8600-3:5#configipbgpenableERS8600-4Step1–EnableBGPgloballyERS8600-4:5#configipbgpauto-summarydisableERS8600-4:5#configipbgpsynchronizationdisableERS8600-4:5#configipbgplocal-as3030ERS8600-4:5#configipbgpenableERS8600-1Step2–AddBGPneighborsusingtheCLIPaddress,enableBGProutereflectorforeachneighborandenableIPVPN-liteERS8600-1:5#configipbgpneighbor10.
2.
1.
1createERS8600-1:5#configipbgpneighbor10.
2.
1.
1remote-as3030ERS8600-1:5#configipbgpneighbor10.
2.
1.
1route-reflector-clientenableERS8600-1:5#configipbgpneighbor10.
2.
1.
1update-source-interface10.
1.
1.
1addERS8600-1:5#configipbgpneighbor10.
2.
1.
1address-familyvpnv4enableERS8600-1:5#configipbgpneighbor10.
2.
1.
1ipvpn-lite-capabilityenableERS8600-1:5#configipbgpneighbor10.
2.
1.
1admin-stateenableERS8600-1:5#configipbgpneighbor10.
3.
1.
1createERS8600-1:5#configipbgpneighbor10.
3.
1.
1remote-as3030ERS8600-1:5#configipbgpneighbor10.
3.
1.
1route-reflector-clientenableERS8600-1:5#configipbgpneighbor10.
3.
1.
1update-source-interface10.
1.
1.
1addERS8600-1:5#configipbgpneighbor10.
3.
1.
1address-familyvpnv4enableERS8600-1:5#configipbgpneighbor10.
3.
1.
1ipvpn-lite-capabilityenableERS8600-1:5#configipbgpneighbor10.
3.
1.
1admin-stateenableERS8600-1:5#configipbgpneighbor10.
4.
1.
1createERS8600-1:5#configipbgpneighbor10.
4.
1.
1remote-as3030ERS8600-1:5#configipbgpneighbor10.
4.
1.
1route-reflector-clientenableERS8600-1:5#configipbgpneighbor10.
4.
1.
1update-source-interface10.
1.
1.
1addERS8600-1:5#configipbgpneighbor10.
4.
1.
1address-familyvpnv4enableERS8600-1:5#configipbgpneighbor10.
4.
1.
1ipvpn-lite-capabilityenableERS8600-1:5#configipbgpneighbor10.
4.
1.
1admin-stateenableIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide20July2010avaya.
comERS8600-2Step2–AddBGPneighborsandenableIPVPN-lite.
Asthisisaroutereflectorclient,itonlyneedstopeerwith8600-1.
ERS8600-3:5#configipbgpneighbor10.
1.
1.
1createERS8600-3:5#configipbgpneighbor10.
1.
1.
1remote-as3030ERS8600-3:5#configipbgpneighbor10.
1.
1.
1update-source-interface10.
2.
1.
1addERS8600-3:5#configipbgpneighbor10.
1.
1.
1address-familyvpnv4enableERS8600-3:5#configipbgpneighbor10.
1.
1.
1ipvpn-lite-capabilityenableERS8600-3:5#configipbgpneighbor10.
1.
1.
1admin-stateenableERS8600-3Step2–AddBGPneighborsandenableIPVPN-lite,Asthisisaroutereflectorclient,itonlyneedstopeerwith8600-1.
ERS8600-3:5#configipbgpneighbor10.
1.
1.
1createERS8600-3:5#configipbgpneighbor10.
1.
1.
1remote-as3030ERS8600-3:5#configipbgpneighbor10.
1.
1.
1update-source-interface10.
3.
1.
1addERS8600-3:5#configipbgpneighbor10.
1.
1.
1address-familyvpnv4enableERS8600-3:5#configipbgpneighbor10.
1.
1.
1ipvpn-lite-capabilityenableERS8600-3:5#configipbgpneighbor10.
1.
1.
1admin-stateenableERS8600-4Step2–AddBGPneighborsandenableIPVPN-lite.
Asthisisaroutereflectorclient,itonlyneedstopeerwith8600-1.
ERS8600-4:5#configipbgpneighbor10.
1.
1.
1createERS8600-4:5#configipbgpneighbor10.
1.
1.
1remote-as3030ERS8600-4:5#configipbgpneighbor10.
1.
1.
1update-source-interface10.
4.
1.
1addERS8600-4:5#configipbgpneighbor10.
1.
1.
1address-familyvpnv4enableERS8600-4:5#configipbgpneighbor10.
1.
1.
1ipvpn-lite-capabilityenableERS8600-4:5#configipbgpneighbor10.
1.
1.
1admin-stateenable2.
1.
3VRFConfiguration2.
1.
3.
1CreateVRFInstancesPleasenotetheVRFinstanceIDisoflocalsignificancetotheswitch.
EnteranIDnumberfrom1to255.
ERS8600-1Step1–CreateVRFinstancesERS8600-1:5#configipvrfbluecreateid1ERS8600-1:5#configipvrfblueospfcreateERS8600-1:5#configipvrfredcreateid2ERS8600-1:5#configipvrfredospfcreateIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide21July2010avaya.
comERS8600-2Step1–CreateVRFinstancesERS8600-2:5#configipvrfredcreateid2ERS8600-2:5#configipvrfredospfcreateERS8600-3Step1–CreateVRFinstancesERS8600-3:5#configipvrfbluecreateid1ERS8600-3:5#configipvrfblueospfcreateERS8600-3:5#configipvrfredcreateid2ERS8600-3:5#configipvrfredospfcreateERS8600-4Step1–CreateVRFinstancesERS8600-4:5#configipvrfbluecreateid1ERS8600-4:5#configipvrfblueospfcreate2.
1.
3.
2CreateVLANsforVRFERS8600-1Step1–CreateVLAN1200and1201ERS8600-1:5#configvlan1200createbyport1nameblueERS8600-1:5#configvlan1200vrfblueERS8600-1:5#configvlan1200portsadd4/23ERS8600-1:5#configvlan1200ipcreate10.
1.
120.
1/24ERS8600-1:5#configvlan1200ipospfenableERS8600-1:5#configvlan1201createbyport1nameredERS8600-1:5#configvlan1201vrfredERS8600-1:5#configvlan1201portsadd4/24ERS8600-1:5#configvlan1201ipcreate10.
1.
120.
1/24ERS8600-1:5#configvlan1201ipospfenableERS8600-2Step2–CreateVLAN1201ERS8600-2:5#configvlan1201createbyport1nameredERS8600-2:5#configvlan1201vrfredERS8600-2:5#configvlan1201portsadd4/24ERS8600-2:5#configvlan1201ipcreate10.
2.
120.
1/24ERS8600-2:5#configvlan1201ipospfenableERS8600-3Step1–CreateVLAN1200and1201ERS8600-3:5#configvlan1200createbyport1nameblueIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide22July2010avaya.
comERS8600-3:5#configvlan1200vrfblueERS8600-3:5#configvlan1200portsadd3/1ERS8600-3:5#configvlan1200ipcreate10.
3.
120.
1/24ERS8600-3:5#configvlan1200ipospfenableERS8600-3:5#configvlan1201createbyport1nameredERS8600-3:5#configvlan1201vrfredERS8600-3:5#configvlan1201portsadd3/2ERS8600-3:5#configvlan1201ipcreate10.
3.
120.
1/24ERS8600-3:5#configvlan1201ipospfenableERS8600-4Step1–CreateVLAN1200ERS8600-4:5#configvlan1200createbyport1nameblueERS8600-4:5#configvlan1200vrfblueERS8600-4:5#configvlan1200portsadd3/1ERS8600-4:5#configvlan1200ipcreate10.
4.
120.
1/24ERS8600-4:5#configvlan1200ipospfenableERS8600-1Step2–EnableOSPFgloballyforVRFinstancesERS8600-1:5#configipvrfblueospfenableERS8600-1:5#configipvrfredospfenableERS8600-2Step2–EnableOSPFgloballyforVRFinstancesERS8600-2:5#configipvrfredospfenableERS8600-3Step2–EnableOSPFgloballyforVRFinstancesERS8600-3:5#configipvrfblueospfenableERS8600-3:5#configipvrfredospfenableERS8600-4Step2–EnableOSPFgloballyforVRFinstancesERS8600-4:5#configipvrfblueospfenableERS8600-1Step3–DisableBGPauto-summarizationandsynchronizationERS8600-1:5#configipvrfbluebgpauto-summarydisableERS8600-1:5#configipvrfbluebgpsynchronizationdisableERS8600-1:5#configipvrfredbgpauto-summarydisableERS8600-1:5#configipvrfredbgpsynchronizationdisableIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide23July2010avaya.
comERS8600-2Step3–DisableBGPauto-summarizationandsynchronizationERS8600-2:5#configipvrfredbgpauto-summarydisableERS8600-2:5#configipvrfredbgpsynchronizationdisableERS8600-3Step3–DisableBGPauto-summarizationandsynchronizationERS8600-3:5#configipvrfblueauto-summarydisableERS8600-3:5#configipvrfbluesynchronizationdisableERS8600-3:5#configipvrfredbgpauto-summarydisableERS8600-3:5#configipvrfredbgpsynchronizationdisableERS8600-4Step3–DisableBGPauto-summarizationandsynchronizationERS8600-4:5#configipvrfblueauto-summarydisableERS8600-4:5#configipvrfbluesynchronizationdisable2.
1.
4IPVPN-LiteConfiguration2.
1.
4.
1IPVPN-LiteConfigurationForthisconfigurationexample,theRouteDistinguisher(RD)networkaddressisderivedfromtheCLIP2addressconfiguredabovewithahostaddressequaltoVRFIDwhiletheroutetarget(RT)ofASnumber:VPNIDERS8600-1Step1–FortheblueVRF,theRouteDistinguisher(RD)isconfiguredas10.
1.
2.
1:1whiletheroutetarget(RT)isconfiguredas3030:1ERS8600-1:5#configipvrfblueipvpncreateERS8600-1:5#configipvrfblueipvpnrd10.
1.
2.
1:1ERS8600-1:5#configipvrfblueipvpnrtaddimport3030:1ERS8600-1:5#configipvrfblueipvpnrtaddexport3030:1ERS8600-1:5#configipvrfblueipvpnenableERS8600-1Step2–FortheredVRF,theRouteDistinguisher(RD)isconfiguredas10.
1.
2.
2:2whiletheroutetarget(RT)isconfiguredas3030:2ERS8600-1:5#configipvrfredipvpncreateERS8600-1:5#configipvrfredipvpnrd10.
1.
2.
2:2ERS8600-1:5#configipvrfredipvpnrtaddimport3030:2ERS8600-1:5#configipvrfredipvpnrtaddexport3030:2ERS8600-1:5#configipvrfredipvpnenableIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide24July2010avaya.
comERS8600-2Step1–FortheredVRF,theRouteDistinguisher(RD)isconfiguredas10.
2.
2.
2:2whiletheroutetarget(RT)isconfiguredas3030:2ERS8600-2:5#configipvrfredipvpncreateERS8600-2:5#configipvrfredipvpnrd10.
2.
2.
2:2ERS8600-2:5#configipvrfredipvpnrtaddimport3030:2ERS8600-2:5#configipvrfredipvpnrtaddexport3030:2ERS8600-2:5#configipvrfredipvpnenableERS8600-3Step1–FortheblueVRF,theRouteDistinguisher(RD)isconfiguredas10.
3.
2.
1:1whiletheroutetarget(RT)isconfiguredas3030:1ERS8600-3:5#configipvrfblueipvpncreateERS8600-3:5#configipvrfblueipvpnrd10.
3.
2.
1:1ERS8600-3:5#configipvrfblueipvpnrtaddimport3030:1ERS8600-3:5#configipvrfblueipvpnrtaddexport3030:1ERS8600-3:5#configipvrfblueipvpnenableERS8600-3Step2–FortheredVRF,theRouteDistinguisher(RD)isconfiguredas10.
3.
2.
2:2whiletheroutetarget(RT)isconfiguredas3030:2ERS8600-3:5#configipvrfredipvpncreateERS8600-3:5#configipvrfredipvpnrd10.
3.
2.
2:2ERS8600-3:5#configipvrfredipvpnrtaddimport3030:2ERS8600-3:5#configipvrfredipvpnrtaddexport3030:2ERS8600-3:5#configipvrfredipvpnenableERS8600-4Step1–FortheblueVRF,theRouteDistinguisher(RD)isconfiguredas10.
4.
2.
1:1whiletheroutetarget(RT)isconfiguredas3030:1ERS8600-4:5#configipvrfblueipvpncreateERS8600-4:5#configipvrfblueipvpnrd10.
4.
2.
1:1ERS8600-4:5#configipvrfblueipvpnrtaddimport3030:1ERS8600-4:5#configipvrfblueipvpnrtaddexport3030:1ERS8600-4:5#configipvrfblueipvpnenableIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide25July2010avaya.
com2.
2Verification2.
2.
1BGPandVRF2.
2.
1.
1VerifyBGPPeersPleasenotethatERS8600-1isconfiguredasaroutereflector,itwillbepeeredwithallswitchesusedinthisexample.
InthecaseofERS8600-2,ERS8600-3,andERS8600-4,theywillonlybepeeredwithERS8600-1.
Step1–AssumingweareloggedintoERS8600-1,verifytheBGPpeersareallestablishedERS8600-1:5#showipbgpsumResult:BGPSummary-GlobalRouterBGPversion-4local-as-3030Identifier-10.
1.
1.
1Decisionstate-IdleThetotalnumberofroutesis13BGPNEIGHBORINFO:NEIGHBORRMTASSTATEHLDTMKPALVHLDCFGKPCFGWGHTCONRTYADVINT10.
2.
1.
13030Established1806018060100120510.
3.
1.
13030Established1806018060100120510.
4.
1.
13030Established18060180601001205Totalbgpneighbors:3ViaERS8600-1,verifythefollowinginformation:OptionVerifyNEIGHBORSTATEVerifythatthestatebetweeneachiBGPpeerisdisplayedasEstablishedforiBGPpeers10.
2.
1.
1,10.
3.
1.
1,and10.
4.
1.
1.
AsERS8600-1isconfiguredasaroute-reflector,onlythisswitchwillhaveastateestablishedtoeachpeer.
RMTASDisplaysas3030,whichistheBGPASnumberusedforthisexamplefortheiBGPbetweenthefourswitches.
IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide26July2010avaya.
comlocal-asIdentifierThelocal-asshouldbedisplayedas3030whiletheIdentifiershouldbedisplayedas10.
1.
1.
1whichcouldbetheCLIPaddressassignedastheOSPFrouter-id.
2.
2.
1.
2VerifyMP-BGPRDandRTAssumingweareloggedintoERS8600-1,usethefollowingcommandtoverifytheBGPextendedcommunityattributetoeachBGPpeer.
Step1–VerifytheBGPextendedcommunityattribute,inthisexampletoiBGPpeerERS8600-3ERS8600-1:5#showipbgpneighborroute-vpnv410.
3.
1.
1ext-communityor,foreachindividualVRF,enterthefollowingcommands:showipbgpneighborroute-vpnv410.
3.
1.
1ext-communityvrfblueshowipbgpneighborroute-vpnv410.
3.
1.
1ext-communityvrfredResult:IPVPNBGPNeighborRoutes-VRFblueThetotalnumberofacceptedroutesfromtheneighboris1NETWORK/MASKPEERREMADDRNEXTHOPADDRESSORGLOCPREFSTATUS10.
3.
120.
0/2410.
3.
1.
110.
3.
2.
1INC100UsedSvcLabel:524290RD-Type:IPADDRValue:10.
3.
2.
1:1RT-Type:IPADDRValue:3030:1AS_PATH:path-is-emptyIPVPNBGPNeighborRoutes-VRFredThetotalnumberofacceptedroutesfromtheneighboris1NETWORK/MASKPEERREMADDRNEXTHOPADDRESSORGLOCPREFSTATUS10.
3.
120.
0/2410.
3.
1.
110.
3.
2.
2INC100UsedSvcLabel:524291RD-Type:IPADDRValue:10.
3.
2.
2:2IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide27July2010avaya.
comRT-Type:IPADDRValue:3030:2AS_PATH:path-is-emptyViaERS8600-1,verifythefollowinginformation:OptionVerifyNETWORK/MASKForthisexample,forERS8600-3,VRFblueandVRFredbothareconfiguredwiththesameover-lappingsubnetandshouldbedisplayedas10.
3.
120.
0/24.
PEERREMADDRDisplaysas10.
3.
1.
1,whichistheiBGPpeeraddressofERS8600-3.
NEXTHOPThenext-hopaddressforVRFblueshouldbedisplayedas10.
3.
2.
1(CLIPaddressforVRFblue)whilethenext-hopforVRFredshouldbedisplayedas10.
3.
2.
2(CLIPaddressforVRFred)RD–Type:IPADDRShouldbedisplayedas10.
3.
2.
1:1forVRFblueand10.
3.
2.
2:2forVRFred.
RT–Type:IPADDRShouldbedisplayedas3030:1forVRFblueand3030:2forVRFred.
2.
2.
1.
3VerifyVRFRoutesAssumingweareloggedintoERS8600-1andwishtoverifytheVRF,BGP,andneighborroutes.
Step1–VerifyVRFblueroutesbyusingthefollowingcommandERS8600-1:5#showiprouteinfovrfblueResult:IPRoute-VRFblueNHINTERDSTMASKNEXTVRFCOSTFACEPROTAGETYPEPRF10.
1.
120.
0255.
255.
255.
010.
1.
120.
1-11200LOC0DB010.
1.
10.
0255.
255.
255.
010.
1.
120.
2blue201200OSPF0IB2510.
1.
11.
0255.
255.
255.
010.
1.
120.
2blue201200OSPF0IB2510.
1.
12.
0255.
255.
255.
010.
1.
120.
2blue201200OSPF0IB2510.
1.
13.
0255.
255.
255.
010.
1.
120.
2blue201200OSPF0IB2510.
11.
11.
0255.
255.
255.
010.
3.
60.
2Glob~020BGP0IBV17510.
11.
33.
0255.
255.
255.
010.
3.
60.
2Glob~020BGP0IBV17510.
11.
34.
0255.
255.
255.
010.
3.
60.
2Glob~020BGP0IBV17510.
11.
35.
0255.
255.
255.
010.
3.
60.
2Glob~020BGP0IBV17510.
11.
36.
0255.
255.
255.
010.
3.
60.
2Glob~020BGP0IBV17510.
22.
22.
0255.
255.
255.
010.
4.
60.
2Glob~020BGP0IBV175IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide28July2010avaya.
com10.
22.
66.
0255.
255.
255.
010.
4.
60.
2Glob~020BGP0IBV17510.
22.
67.
0255.
255.
255.
010.
4.
60.
2Glob~020BGP0IBV17510.
22.
68.
0255.
255.
255.
010.
4.
60.
2Glob~020BGP0IBV17510.
22.
69.
0255.
255.
255.
010.
4.
60.
2Glob~020BGP0IBV17515outof15TotalNumofRouteEntries,15TotalNumofDestNetworksdisplayed.
TYPELegend:I=IndirectRoute,D=DirectRoute,A=AlternativeRoute,B=BestRoute,E=EcmpRoute,U=UnresolvedRoute,N=NotinHW,F=ReplacedbyFTN,V=IPVPNRouteStep2–VerifyVPNblueBGProutesbyusingthefollowingcommandERS8600-1:5#showipbgproutevrfblueResult:BGPRoutes-VRFblueThetotalnumberofroutesis10NETWORK/MASKPEERREMADDRNEXTHOPADDRESSORGLOCPREF10.
11.
11.
0/2410.
3.
1.
110.
3.
2.
1INC100AS_PATH:path-is-empty10.
11.
33.
0/2410.
3.
1.
110.
3.
2.
1INC100AS_PATH:path-is-empty10.
11.
34.
0/2410.
3.
1.
110.
3.
2.
1INC100AS_PATH:path-is-empty10.
11.
35.
0/2410.
3.
1.
110.
3.
2.
1INC100AS_PATH:path-is-empty10.
11.
36.
0/2410.
3.
1.
110.
3.
2.
1INC100AS_PATH:path-is-empty10.
22.
22.
0/2410.
4.
1.
110.
4.
2.
1INC100AS_PATH:path-is-empty10.
22.
66.
0/2410.
4.
1.
110.
4.
2.
1INC100AS_PATH:path-is-empty10.
22.
67.
0/2410.
4.
1.
110.
4.
2.
1INC100AS_PATH:path-is-empty10.
22.
68.
0/2410.
4.
1.
110.
4.
2.
1INC100AS_PATH:path-is-empty8600-3CLIP2Address(BlueVRF)8600-4CLIP2Address(BlueVRF)IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide29July2010avaya.
com10.
22.
69.
0/2410.
4.
1.
110.
4.
2.
1INC100AS_PATH:path-is-emptyStep3–VerifyVPNblueroutesfromBGPneighborERS8600-3ERS8600-1:5#showipbgpneighborroute-vpnv410.
3.
1.
1vrfblueResult:IPVPNBGPNeighborRoutes-VRFblueThetotalnumberofacceptedroutesfromtheneighboris5NETWORK/MASKPEERREMADDRNEXTHOPADDRESSORGLOCPREFSTATUS10.
11.
11.
0/2410.
3.
1.
110.
3.
2.
1INC100UsedAS_PATH:path-is-empty10.
11.
33.
0/2410.
3.
1.
110.
3.
2.
1INC100UsedAS_PATH:path-is-empty10.
11.
34.
0/2410.
3.
1.
110.
3.
2.
1INC100UsedAS_PATH:path-is-empty10.
11.
35.
0/2410.
3.
1.
110.
3.
2.
1INC100UsedAS_PATH:path-is-empty10.
11.
36.
0/2410.
3.
1.
110.
3.
2.
1INC100UsedAS_PATH:path-is-emptyStep4–VerifyVPNblueroutesfromBGPneighborERS8600-4ERS8600-1:5#showipbgpneighborroute-vpnv410.
4.
1.
1vrfblueResult:IPVPNBGPNeighborRoutes-VRFblueThetotalnumberofacceptedroutesfromtheneighboris5NETWORK/MASKPEERREMADDRNEXTHOPADDRESSORGLOCPREFSTATUS10.
22.
22.
0/2410.
4.
1.
110.
4.
2.
1INC100UsedAS_PATH:path-is-emptyIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide30July2010avaya.
com10.
22.
66.
0/2410.
4.
1.
110.
4.
2.
1INC100UsedAS_PATH:path-is-empty10.
22.
67.
0/2410.
4.
1.
110.
4.
2.
1INC100UsedAS_PATH:path-is-empty10.
22.
68.
0/2410.
4.
1.
110.
4.
2.
1INC100UsedAS_PATH:path-is-empty10.
22.
69.
0/2410.
4.
1.
110.
4.
2.
1INC100UsedAS_PATH:path-is-empty2.
2.
1.
4PacketCapture–BGPRouteUpdateAssumingwehaveenableportmirroringonERS8600-4fromin-port2/3toamirroredport1/7asshowninthediagramabove,shownbelowisapacketcapturedisplayingarouteupdatefromERS8600-1toERS86000-4withERS8600-1advertisingroutes10.
1.
10.
0/24to10.
1.
13.
0/24andthelocalinterfacefromtheblueVRF.
Thecommandshownwasusedtoenableportmirroringforthisexample:ERS8600-4:5#configdiagmirror-by-port1createin-port2/3out-port1/7modebothenabletrueIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide31July2010avaya.
comIPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide32July2010avaya.
com2.
2.
1.
5PacketCapture–PingTraceShownbelowisapacketcapturefromERS8600-1toERS8600-4viatheblueVRFVLAN1200capturedonERS8600-4.
IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide33July2010avaya.
com3.
SoftwareBaselineSoftwarerevision5.
0orhigherisrequired.
4.
ReferenceDocumentationDocumentTitlePublicationNumberDescriptionConfiguration–IPVPNNN46205-520(323790-A)Configuration–MPLSServicesNN46205-519(323614-1)IP-VPN(MPLS)forERS8600TechnicalConfigurationGuideNN48500-569VRF-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuideNN48500-570Configuration—BGPServicesNN46205-510BorderGatewayProtocol(BGP-4)TechnicalConfigurationGuideNN48500-538IPVPN-LiteforEthernetRoutingSwitch8600TechnicalConfigurationGuide34July2010avaya.
com5.
CustomerserviceVisittheAvayaWebsitetoaccessthecompleterangeofservicesandsupportthatAvayaprovides.
Gotowww.
avaya.
comorgotooneofthepageslistedinthefollowingsections.
5.
1GettingtechnicaldocumentationTodownloadandprintselectedtechnicalpublicationsandreleasenotesdirectlyfromtheInternet,gotowww.
avaya.
com/support.
5.
2GettingproducttrainingOngoingproducttrainingisavailable.
Formoreinformationortoregister,youcanaccesstheWebsiteatwww.
avaya.
com/support.
FromthisWebsite,youcanlocatetheTrainingcontactslinkontheleft-handnavigationpane.
5.
3GettinghelpfromadistributororresellerIfyoupurchasedaservicecontractforyourAvayaproductfromadistributororauthorizedreseller,contactthetechnicalsupportstaffforthatdistributororresellerforassistance.
5.
4GettingtechnicalsupportfromtheAvayaWebsiteTheeasiestandmosteffectivewaytogettechnicalsupportforAvayaproductsisfromtheAvayaTechnicalSupportWebsiteatwww.
avaya.
com/support.