Introduction To MPLS: Session Rst-1601
Introduction To MPLS: Session Rst-1601
Introduction To MPLS: Session Rst-1601
SESSION RST-1601
RST-1601
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 1
Agenda
• Background
• Technology Basics
What Is MPLS? Where Is it Used?
• Label Distribution in MPLS Networks
LDP, RSVP, BGP
• Building MPLS-Based Services
VPNs
AToM
Traffic Engineering
• Configurations
Configuring MPLS, LDP, TE
• Summary
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 2
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 3
Terminology
• Acronyms
PE—Provider Edge router
P—Provider Core router
CE—Customer Edge router (also referred to as CPE)
ASBR—Autonomous System Boundary Router
RR—Route Reflector
• TE—Traffic Engineering
TE head end—router that initiates a TE tunnel
TE midpoint—router where the TE tunnel transits
• VPN—Collection of sites that share common policies
• AToM—Any Transport over MPLS
Commonly known scheme for building layer 2 circuits over MPLS
Attachment circuit—layer 2 circuit between PE and CE
Emulated circuit—pseudowire between PEs
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 4
What Is MPLS?
Provider Any
Traffic IP+Optical
Provisioned IP+ATM Transport
Engineering GMPLS
VPNs over MPLS
MPLS
Network Infrastructure
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 8
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 9
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
Label = 20 Bits
COS/EXP = Class of Service, 3 Bits
S = Bottom of Stack, 1 Bit
TTL = Time to Live, 8 Bits
LAN MAC Label Header MAC Header Label Layer 2/L3 Packet
ATM MPLS Cell Header GFC VPI VCI PTI CLP HEC DATA
Label
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 11
• IP prefix/host address
• Layer 2 circuits (ATM, FR, PPP, HDLC, Ethernet)
• Groups of addresses/sites—VPN x
• A bridge/switch instance—VSI
• Tunnel interface—traffic engineering
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 12
MPLS Operation
1a. Existing Routing Protocols (e.g. OSPF, IS-IS) 4. Edge LSR at
Establish Reachability to Destination Networks Egress Removes
Label and Delivers
1b. Label Distribution Protocol (LDP) Packet
Establishes Label to Destination
Network Mappings
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 15
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 16
• Discovery
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 17
171.69 1 171.69 1
…
… …
128.89
0
0 128.89.25.4 Data
1 128.89.25.4 Data
1
128.89.25.4 Data 128.89.25.4 Data
171.69
Packets Forwarded
Based on IP Address
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 18
0 128.89
0
1
Routing Updates
You Can Reach 171.69 Thru Me 171.69
(OSPF, EIGRP, …)
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 19
0 128.89
0
1
Label Distribution
Use Label 7 for 171.69 171.69
Protocol (LDP)
(Downstream Allocation)
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 20
0 128.89
0
128.89.25.4 Data
1
9 128.89.25.4 Data
128.89.25.4 Data 4 128.89.25.4 Data 1
• Downstream unsolicited
Downstream node just advertises labels for prefixes/FEC
reachable via that device
Previous example
• Downstream on-demand
Upstream node requests a label for a learnt prefix via the
downstream node
Next example—ATM MPLS
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 22
1 0 128.89
1 2 0
I Need a Label for 128.89
I Need Another Label for 128.89
I Need a Label for 128.89 3 1
I Need a Label for 171.69 I Need a Label for 171.69
Label Distribution
I Need a Label for 128.89 171.69
Protocol (LDP)
(Downstream Allocation on Demand)
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 23
1 0 128.89
1 2 0
Use Label 9 for 128.89
Use Label 10 for 128.89
Use Label 4 for 128.89 3 1
Use Label 5 for 171.69 Use Label 7 for 171.69
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 24
1 0 128.89
1 2 0
128.89.25.4 Data
9 128.89.25.4 Data
128.89.25.4 Data
4 128.89.25.4 Data 1
1 5 128.89 0 3
2 8 128.89 0 3
Cells … … … … …
5
5 Help!
Packet 5
5
1 0
128.89
Packet 8 2
8 3 3 3 3 3 3
8
8
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 26
1 5 128.89 0 3
2 8 128.89 0 7
Cells … … … … …
5
5 Much Better!
Packet 5
5
1 0
128.89
Packet 8 2
8 7 3 7 3 7 3
8
8
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 27
Label Merge
• Done by default for packet networks—unique label
advertised per FEC
• Requires VC merge for ATM networks
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 28
Prefix 129.161/16
Prefix 129.161/16
VC Merge
1 5 128.89 0 3
2 8 128.89 0 3
Cells … … … … …
5
5
Packet 5
5
1 0
128.89
Packet 8 2
8 3 3 3 3 3 3
8
8
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 30
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 31
• Independent mode
Labels are allocated independently of neighbors’ bindings
As long as the router has routes—it allocates a label
irrespective of the neighbor
• Ordered mode
Labels are allocated only after the bindings from neighbors
are received
Takes care of propagation delays in routing changes
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 32
• Neighbor discovery
Discover directly attached neighbors—pt-to-pt links
(including Ethernet)
Establish a session
Exchange prefix/FEC and label information
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 33
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 34
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 35
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 36
Route
RIB Routing Updates/
Process Adjacency
Label Bind
LIB MPLS Updates/
Process Adjacency
MFI FIB
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 38
MPLS VPNS
LAYER 2 AND LAYER 3
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 40
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 41
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 42
• Layer 2 VPNs
Customer endpoints (CPE) connected via Layer 2 such as
Frame Relay DLCI, ATM VC or point-to-point connection
If it connects IP routers then peering or routing relationship
is between the endpoints
Multiple logical connections (one with each endpoint)
• Layer 3 VPNs
Customer end points peer with provider routers
Single peering relationship
No mesh of connections
Provider network responsible for
Distributing routing information to VPN sites
Separation of routing tables from one VPN to another
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 43
LAYER 3 VPNS
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 44
Multicast
VPN B
Hosting
Intranet
VPN A
VoIP
Extranet
VPN A
VPN B
VPN C VPN C
VPN A VPN B
Cust A A A Cust A
---- ----
--- ---
---- ----
B
----
---
----
Cust A
B MPLS
----
---
---- Network
Cust B Cust B
• Simple idea
Use a label to designate VPN prefix
Route that VPN packet to egress PE advertising that prefix
Use the IGP label to the VPN packet to the egress node
• How is it done?
Routers need to maintain separate VPN routing tables
called VRFs (Virtual Routing and Forwarding Tables)
Routers then export and import routes using BGP
extensions to identify and separate one VPNs routes
from another
Routers then exchange labels for VPN routes in addition to
IGP routes
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 47
CE
CE iBGP—VPNv4 VRF
Label Exchange
VRF
CE
Overlapping Addresses Are VRF
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 48
CE CE
IPv4 Route
Exchange
PE PE
P P
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 49
IPv4 IPv4
CE CE
IPv4 IPv4
IPv4
Forwarded PE PE
Packet
Vpnv4 Routes Advertised via BGP
Labels Exchanged via BGP
IPv4
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 50
• Scalable VPNs
Add more PEs if more VPNs are needed VPN Membership-
No N^2 mesh Based on Logical Port
VPNs are built in to the cloud
• IP QoS and traffic VPN A VPN A
engineering Site 2 Site 3
• Easy to manage and MPLS Network
no VC mesh provisioning
Corp A MPLS VPN Renault Corp B
required
Site 1 Site 2
• Provides a level of MPLS VPN Bankcorp
security/separation
equivalent to
Frame Relay and ATM Corp B Corp B
Site 3 Site 1
• Supports the Traffic Separation at Layer 3
deployment Each VPN Has Unique RD
of new value-added applications
• Customer IP address freedom
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 51
Key Features
• Security:
Basic security is comparable to that provided by FR/ATM-
based VPNs without providing data encryption
VPN customer may still use IPSec-based mechanisms
e.g., CE-CE IPSec-based encryption
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 52
• Quality of Service:
Flexible and scaleable support for a CoS-based networks
• Scalability:
Total capacity of the system isn’t bounded by the capacity
of an individual component
Scale to virtually unlimited number of VPNs per VPN
Service Provider and scale to thousands of sites per VPN
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 53
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 54
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 55
LAYER 2 VPNS
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 56
Similar to L3VPN
• Designate a label for the circuit
• Exchange that label information with the egress PE
• Encapsulate the incoming traffic (Layer 2 frames)
• Apply label (learnt through the exchange)
• Forward the MPLS packet (l2 encapsulated to
destination on an LSP)
• At the egress
Lookup the L2 label
Forward the packet onto the L2 attachment circuit
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 57
Architecture
Attachment Circuit
Ethernet VLAN, FR DLCI, ATM VC, PPP Session
VPN A VPN A
CE CE
PE PE
Emulated VC/Pseudowire
Labels Exchanged via Directed LDP
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 58
Directed LDP
Label Exchange for VC1—Label 10
Label Exchange for VC2—Label 21
PE2
PE1 101 10 50 101 10 90
MPLS LSP
CPE Router, CPE Router,
FRAD Any Transport FRAD
over MPLS
(AtoM) Tunnel
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 59
Summary
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 60
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 61
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 62
R8 R3
R4
R5
R2
R1
R6
R7
Router B Router F
35M
OC-3 b Dro OC-3
Router A ps! Router E
ffic DS3
b Tr a Router G
80M
OC-3
OC-3 DS3
Router B Router F
OC-3 OC-3
Router A Router E
DS3
b Router G
40M
OC-3
OC-3 40Mb DS3
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 67
Information Distribution
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 68
RESV
RESV PATH
PATH
• Policy Routing
Hop-by-hop decision making
No accounting of bandwidth
• Traffic Engineering
Headend-based
Accounts for available link bandwidth
Admission control
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 70
R8 R9
R3
R4
R2
R1 R5
R7
R6
Mimic SONET APS
Reroute in 50ms or Less
Link Protection
Router X Router Y
Router C
*Actual Time Varies—Well Below 50ms in Lab Tests, Can Also Be Higher
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 72
Router X Router Y
Router C
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 73
TE DEPLOYMENT SCENARIOS
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 74
Internet
Service Provider
Backbone
Oversubscribed
Shortest Links
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 75
Service Provider
Backbone
Service Provider
Backbone
VPN Site A
Service Provider
Backbone
Central Site
Primary Tunnel
VPN Site B Backup Tunnel
Tight QoS—
RST-1061
Policing, Queuing Etc.
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 78
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 79
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 80
Router# configure
Step 1 terminal
Enables Configuration Mode
Router(config)# ip
Step 2 cef [distributed]
Configures Cisco Express Forwarding
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 81
Show Commands
Router# show mpls interfaces show mpls ip binding [vrf vpn-name] [network
Interface IP Tunnel Operational {mask | length} [longer-prefixes]]
Ethernet1/1/1 Yes (tdp) No No [local-label {atm vpi vci | label [- label]}]
Ethernet1/1/2 Yes (tdp) Yes No [remote-label {atm vpi vci | label [- label]}]
Ethernet1/1/3 Yes (tdp) Yes Yes [neighbor address] [local]
POS2/0/0 Yes (tdp) No No [interface interface] [generic | atm]
ATM0/0.1 Yes (tdp) No No (ATM labels) show mpls ip binding summary
ATM3/0.1 Yes (ldp) No Yes (ATM labels)
ATM0/0.2 Yes (tdp) No Yes
Router# show mpls ldp discovery Router# show mpls ip binding 194.44.44.0 24
Local LDP Identifier: 194.44.44.0/24
118.1.1.1:0 in label: 24
Discovery Sources: in vc label: 1/37 lsr: 203.0.7.7:2 ATM1/0.8
Interfaces: Active egress (vcd 56)
POS2/0 (ldp): xmit/recv out label: imp-null lsr: 155.0.0.55:0 inuse
LDP Id: 155.0.0.55:0 Router#
Tunnel1 (ldp): Targeted -> 133.0.0.33
Targeted Hellos:
118.1.1.1 -> 133.0.0.33 (ldp): active, xmit/recv
LDP Id: 133.0.0.33:0
118.1.1.1 -> 168.7.0.16 (tdp): passive, xmit/recv
TDP Id: 168.7.0.16:0
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 82
SUMMARY
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 84
PNNI MPLS
IP+ATM Switch
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 85
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 86
Optical IP
Services Services IP+Optical Integration
• Eliminates IP “over” Optical Complexity
IP
• Uses MPLS as a control Plane for setting up lightpaths
(wavelengths)
O-UNI MPLS • One control plane for Internet, Business IP VPNs, and
optical transport
IP+Optical Switch
Frame Frame
Relay Relay
Any Transport over MPLS
• Transport ATM, FR, Ethernet, PPP over MPLS
• Provide Services to existing installed base
• Protect Investment in the installed gear
• Leverage capabilities of the packet core
ATM • Combine with other packet based services such as MPLS VPNs
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 87
Further Reading
• http://www.cisco.com/go/mpls
• MPLS and VPN Architectures—Jim Guichard, Ivan
Papelnjak—Cisco Press®
• Traffic Engineering with MPLS—Eric Osborne, Ajay
Simha—Cisco Press
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 88
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 89
RST-1061
9776_05_2004_c1 © 2004 Cisco Systems, Inc. All rights reserved. 90