Layer 2 VPNs
Layer 2 VPN Sol uti ons
- Layer 2 pr ot ocol s can be tunnel ed over I P/ MPLS net work.
- The end resul t, is that cust omer CE1 l ooks di rectly connect ed t o CE2
- No PE- CE routing.
- Cust omer br oadcast do mai n i s end-t o- end
- Gi ves SP fl exi bility f or the type of medi a to connect cust omer, either
Et her net, PPP, FR, AT M or I P.
- 3 Types of tunneli ng through the SP:
1. L2TPv3
2. ATOM
3. VPLS
3- VPLS
-VPLS – Vi rtual Pri vate LAN Servi ce
-Us ed excl usi vel y f or Et her net tunnel thr ough SP net work.
-All ows mul ti poi nt Et her net net work tunnel ed over MPLS
-VPLS e mul at es a LAN over a MPLS core
I n VPLS, PE routes traffi c based on Et her net MAC Addr esses
MOHA ME D ABD ALL AH
For I SP cust omer s who i mpl e ment VPLS, all sites appear to be i n the
sa me Et her net LAN even t hough traffi c travel s across the servi ce
pr ovi der' s net work.
-i n our net work every operat or [Vodaf one, Eti salat, Orange, and Noor]
has VLAN range as bel ow:
Oper at or VLAN RANGE
Eti sal at 2300- 2549
Vodaf one 2550- 2799
Noor 2800- 3049
Or ange 3050- 3299
Ther e are t wo types of connecti ons f or VPLS i n our net work:
1- Cabi n and i nterconnecti on on sa me rout er
On t hat sol uti on, Cabi n and Oper at or are ter mi nat ed on sa me MX- 104 as bel ow di agra m:
Cust o mer Cabi n I nterconne
Oper at or
si de cti on
si de
Rout er
MOHA ME D ABD ALL AH
*sa mpl e confi gurati on:
1- det er mi ne with i nterface connect ed to cabi n and with connected to operat or si de:
-i n our exa mpl e:
Bel owI nt erf ace connect ed to cabi n
And bel owi nt erf ace connect ed t o oper at or (i nterf ace that has i nterconnecti on)
2- confi grati on on i nterface that connect ed to cabi n port:
3- confi grati on on i nterface connect ed to operat or (i nterconnecti on):
4- vpl s prot ocol confi gurati on:
MOHA ME D ABD ALL AH
2- Cabi n and i nterconnecti on on different rout er:
On t hat sol uti on, Cabi n and Oper at or are ter mi nat ed on sa me MX- 104 as bel ow di agra m:
Cust o mer I nterconnecti on Oper at or
Cabi n Rout er Rout er si de
Si de ( MX104)
(aggr egat or)
*sa mpl e confi gurati on:
Fr om MX- 104 cabi n ter mi nat ed confi guration:
1- det er mi ne with i nterface connect ed to cabi n
-i n our exa mpl e:
Bel owI nt erf ace connect ed to cabi n
2- confi grati on on i nterface that connect ed to cabi n port:
3- vpl s prot ocol confi gurati on:
MOHA ME D ABD ALL AH
Fr om aggregat or whi ch i nterconnecti on termi nat ed confi gurati on
1- det er mi ne with i nterface connect ed to aggregat or (i nterconnecti on Rout er )
-i n our exa mpl e:
Bel owI nt erf ace connect ed to aggregat or
2- confi grati on on i nterface connect ed to operat or (i nterconnecti on):
3- vpl s prot ocol confi gurati on:
*we can verify that cust omer has successf ul connecti on with operat or by check that there i s
mac address l earned fromcust omer si de and i nterconnecti on si de al so as bel ow:
MOHA ME D ABD ALL AH
Cr eat e ter mi nation to test i nterconnecti on:
-there i s cases that operat or compl ai ns that cust omer with specifi c vl an
cannot reach operat or si de
-i n that case we need t o creat e l 3 connecti on bet ween
i nterconnecti on rout er and operat or si de i nstead of l 2 connecti on to
test connecti on poi nt to poi nt.
-and there are many ways to make test:
We can take custo mer wi t h vl an 2412 (i n Eti sal at vl an range):
1-first met hod
We ask operat or for i p addr ess, i nner and out er vl an and i n that case
we can creat e i nterconnecti on wit h bel ow steps:
set i nt erf aces ae8 uni t 2412 vl an-i d 2412
set i nt erf aces ae8 uni t 2412 vl an-tags out er 2412 i nner 98
set i nt erf aces ae8 uni t 2412 f a mil y i net addr ess 10. 221. 4. 190/30
set routi ng-i nstances test i nterf ace ae8. 2412
MOHA ME D ABD ALL AH
2-second met hod:
To ask oper at or f or i p addr ess onl y and creat ed l 3 connecti on by splitti ng vl an
range f or oper at or to to re move vl an of cust omer t hat have a pr obl e mt o do not
aff ect( di sconnect ) the whol e range of oper at or vl an and t hen make make l 3
connecti on on cust omer vl an :
del ete i nterf aces ae8 uni t 2300 vl an-i d-range 2300- 2549
set i nterf aces ae8 uni t 2300 encapsul ati on vl an- vpl s
set i nterf aces ae8 uni t 2300 vl an-i d-range 2300- 2411
set i nterf ace ae8 uni t 2413 vl an-i d-range 2413- 2549
set i nterf aces ae8 uni t 2413 encapsul ati on vl an- vpl s
set routi ng-i nstances ETI SALAT- VPLS- BI TSTREA Mi nterf ace ae8. 2300
set routi ng-i nstances ETI SALAT- VPLS- BI TSTREA Mi nterf ace ae8. 2413
set routi ng-i nstances test i nstance-type vi rtual -rout e
set i nterf ace ae8 uni t 2412 vl an-i d 2412
set i nterf ace ae8 uni t 2412 fa mil y i net addres 10. 221. 4. 189/30
set routi ng-i nstances test i nterf ace ae8. 2412
MOHA ME D ABD ALL AH