l3vpn in surfnet een verkenning · multi protocol label switching –laag 2.5 label exp s ttl mpls...
TRANSCRIPT
Wat is een L3VPN?
Gerouteerde VPN service over het SURFnet netwerk
SURFnet SURFnet
Klant BKlant A
Klant C Klant C
MP-BGP
L3VPN naast de bestaande diensten
MSP Poort – Ethernet met VLAN tagging
SURFinternet SURF-lightpath SURF-lightpath OnDemand lightpath Free
2 Gbit/s 1 Gbit/s 2 Gbit/s 3 Gbit/s 2 Gbit/s
10 Gbit/s
MSP Interface
• Netwerkdiensten
• SURFinternet
• Lichtpaden
• Optical Private Network (OPN)
• E-LAN (L2VPN ; pilot)
Andere toepassingen, bv Pinnen-over-IP
SURFnet SURFnet
Klant BKlant A
PIN Provider PIN Provider
MP-BGP
Multi Protocol Label Switching – Laag 2.5
Label EXP S TTL
MPLS header:
Outer labelInner/VPN label
DATA L3 L2
DATA L3 MPLS hdr L2
DATA L3 MPLS hdr MPLS hdr L2
MPLS operations:1. Label imposition: adding a label between L2 and L3
2. Label disposition: remove last label
3. Label swapping: replace top label by other label; “pop + push”
4. Label pushing: adding label to on top of the stack
5. Label popping: remove top label
6. Aggregate: pop label + L3 lookup.
Multi Protocol Label Switching – Laag 2.5
PE-Router PE-Router
CE-RouterCE-Router
CE-Router CE-Router
P-Routers
Label Switch Path (LSP)
DATA L3 MPLS hdr L2 DATA L3 MPLS hdr L2
DATA
L3
L2
DATA
L3
L2
MPLS Label distributie
RSVP-TE
-traffic
engineered-
IGP
-segment
routing-
BGP
-services-
LDP
-label
distribution
protocol-
L3VPN op basis van MPLS
PE-Router PE-Router
Klant BKlant A
Klant C Klant C
P-Routers
Label Switch Path (LSP)
RSVP
(loopbacks)
RSVP
(loopbacks)
BGP VPNV4
BGP VPNV4 route
Adres = klantroute + 8 byte Route Distinguisher
Incl. Route Target BGP Community
RD koppelt route aan VPN en is uniek in het netwerk
RT koppelt route aan VPN en is uniek per VPN
L3VPN op basis van MPLS
PE-Router PE-Router
Klant BKlant A
Klant C Klant C
P-Routers
Label Switch Path (LSP)
RSVP
(loopbacks)
RSVP
(loopbacks)
BGP VPNV4DATA L3 MPLS
hdr
MPLS
hdr
L
2
DATA L3 MPLS
hdr
MPLS
hdr
L
2
DATA
L3
L2
DATA
L3
L2
L3VPN in SURFnet7
SURFnetAS1103
connected
instituteconnected
instituteconnected
instituteconnected
institute
connected
institute
connected
institute
Core Routers
Research networks
&
Internet
Nieuwe VLANs
Nieuwe BGP sessies
L3VPN in SURFnet7
otter@re1-bor4000> show configuration interfaces ae0.500 family mpls;
otter@re1-bor4000> show configuration protocols rsvp {
interface ae0.500;}
mpls {traffic-engineering;label-switched-path bor-to-truus {
to 145.145.127.7;}interface ae0.500;
}
otter@re1-bor4000> show configuration protocols bgp group ibgp-full family inet-vpn {
any;}
otter@re1-bor4000> show configuration routing-instances umc-l3vpn {
instance-type vrf;route-distinguisher 145.145.127.5:1;vrf-target target:1103:1;vrf-table-label;
}
Afronding
• Testen met de UMCs
• Technische details uitwerken; filters bij SURFnet gewenst?
• Administratie en automatisering
• Nadenken over implementatie in SURFnet8
• Nieuwe toepassingen voor u?