Ipv6 Over Mpls Cisco Ipv6 Provider Edge Router (6pe) Cisco Ipv6 VPN Provider Edge Router (6vpe)
Ipv6 Over Mpls Cisco Ipv6 Provider Edge Router (6pe) Cisco Ipv6 VPN Provider Edge Router (6vpe)
Ipv6 Over Mpls Cisco Ipv6 Provider Edge Router (6pe) Cisco Ipv6 VPN Provider Edge Router (6vpe)
(6VPE)
Patrick Grossetete [email protected]
Presentation_ID
Cisco Confidential
Access
Few customers, no native IPv6 service form the PoP or Data link is not (yet) native IPv6 capable, ie: Cable Docsis (*) Native IPv4-IPv6 services between aggregation and endusers Dedicated circuits IPv4 IPv6
Tunnels
Yes
Core
Presentation_ID
Cisco Confidential
Presentation_ID
Cisco Confidential
Pre-existing MPLS core = IPv4 services; think coexistence Because you want to provide IPv6 access and transit services, and MPLS is a cool technology to do so ? (speed, traffic engineering , QoS, VPN, resiliency)
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
New core
Providing mixed (IPv4/IPv6) services challenge) IPv6-only No LDPv6 availability yet IPv4-based (4PE is a
Presentation_ID
Cisco Confidential
What Technology?
Mechanism
IPv6 over a circuit transport over MPLS
Primary Use
SP with circuit to the CE (ATM, Ethernet, etc.) SP willing to offer IPv6 service on top of an existing IPv4 MPLS service
Benefits
Transparent to the SP
Limitations
Scalability
Impact limited to PE
Impact limited to PE
Presentation_ID
Cisco Confidential
IPv6 IPv4 PE
v6
v4
P
OC48/192
PE
v6
v6
IPv6 IPv4
P
PE
P
IPv4
PE
v4
v4
No impact on existing IPv4 or MPLS Core (IPv6 unaware) Only CEs have to be IPv6-aware (Dual stack) Mesh of IPv6 over IPv4 Tunnels CE-to-CE Overhead: IPv4 header + MPLS header MPLS/VPN support IPv4-native and IPv6 tunnels Service Provider cant delegate his IPv6 prefix to the CE routers
Presentation_ID
Cisco Confidential
IPv6
IPv6
v6
P P
IPv6
v6
v6
IPv6
No impact on existing IPv4 or MPLS Core (IPv6 unaware) Edge MPLS Routers need to support Circuit_over_MPLS Mesh of Circuit_Over_MPLS PE-to-PE PE routers can also be regular IPv6 Routers (IPv6 over ATM, IPv6 over FR, IPv6 over Ethernet, etc.) to aggregate Customers IPv6 routers
Presentation_ID
Cisco Confidential
BGP label
IPv6 packet
PE1
200.10.10.1
PE2
200.11.11.1
router bgp 100 bgp log-neighbor-changes neighbor 200.11.11.1 remote-as 100 ! address-family ipv6 neighbor 200.11.11.1 activate neighbor 200.11.11.1 send-label ! address-family vpnv6 neighbor 200.11.11.1 activate
router bgp 100 bgp log-neighbor-changes neighbor 200.10.10.1 remote-as 100 ! address-family ipv6 neighbor 200.10.10.1 activate neighbor 200.10.10.1 send-label ! address-family vpnv6 neighbor 200.10.10.1 activate
Presentation_ID
Cisco Confidential
IPv6
IPv6
v6
P
v6
P
IPv6 MPLS
IPv6
v6
IPv6
Core Infrastructure requires full Control Plane upgrade to IPv6 IPv6 Routing in core IPv6 Label Distribution Protocol in core Dual Control Plane management if IPv4 and IPv6 services or a need for 4PE design based on IETF Softwire WG?
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
10
Presentation_ID
Cisco Confidential
11
Presentation_ID
Cisco Confidential
6PE router
v6
CE v4/v6 v4
MP-iBGP session
POP
FTTH
NAT-PT
GE IPv4 Server
GE
GE
IPv6 Server
MPLS/IPv4
Presentation_ID
6PE RFC 4798 defined by Cisco and available from IOS MPLS/IPv4 Core Infrastructure is IPv6-unaware PEs are updated to support Dual Stack/6PE IPv6 reachability exchanged among 6PEs via iBGP (MP-BGP) IPv6 packets transported from 6PE to 6PE inside MPLS
2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
13
Presentation_ID
Cisco Confidential
14
6PE Overview
MP-BGP sessions
2001:0620:: v6 145.95.0.0 IPv6 IPv4 IPv6
v6
2001:0420::
v4
6PE
6PE
IPv6
v6
2001:0421::
2001:0621::
v6
IPv4
IPv6
P
6PE
Dual Stack
P
6PE
IPv4
v4
192.254.10.0
192.76.10.0
v4
V6: IGP/BGP
V6: IGP/BGP
15
6PE1
200.11.11.1/32
CE2
16
6PE: Routing
IGPv6 or MP-BGP advertising 2001:100:1000::/48 6PE1 sends MP-iBGP advertisement to 6PE2: 2001:100:1000::/48 is reachable via BGP Next Hop = 200.11.11.1 (6PE1)
6PE1
200.11.11.1/32
200.10.10.1/32
Presentation_ID
Cisco Confidential
17
P1 6PE1
MP-iBGP IPv6+label update: Net1, Next-hop=::FFFF:PE1v4, Label=L1 BGP IPv6 table Prefix Net1
P2
iGP+LDP v4 : PE1v4 , Label Lc
6PE2
IPv4 table Label stack Lc PE1 L1 Prefix Next Hop P2 Adjacency MacP2
Presentation_ID
Cisco Confidential
18
Forwarding
CE1 PE1 P1 P2 PE2 CE2
IPv6 header
IPv6 payload
Lc
L1
IPv6 header
IPv6 payload
L1
IPv6 header
IPv6 payload
IPv6 header
IPv6 payload
PE2#sh ipv6 cef BEEF:14::/64 nexthop 31.1.1.1 Ethernet0/0 label 18 24 00:07:25: MPLS les: Et1/0: rx: Len 122 Stack {18 0 63} {24 0 63} - ipv6 data 00:07:25: MPLS les: Et0/0: tx: Len 122 Stack {16 0 62} {24 0 63} - ipv6 data 00:07:25: MPLS les: Et1/0: rx: Len 122 Stack {16 0 62} {24 0 63} - ipv6 data 00:07:25: MPLS les: Et0/0: tx: Len 118 Stack {24 0 61} - ipv6 data 00:07:25: MPLS les: Et1/0: rx: Len 118 Stack {24 0 61} - ipv6 data
Presentation_ID
Cisco Confidential
19
.1
1
.1
Si
.1
101
2
.2 .2
Si
4
.2
Si
102
103
.1
5
105
Si
104
VPN
BGP Send-label
.1
.1
LDP
.2
6
106
7
.2
107
Si
IPv6
.2
Si
Si
6PE
8
.2
Si
.1
.1
.1
IPv6
10
108
Presentation_ID
109
2006 Cisco Systems, Inc. All rights reserved.
.2
Si
110
20
Available on Cisco 7600, Release 12.2SR and Catalyst 6500, Release 12.2SX
Initially available from Release 12.2(14)S on Cisco 7200/7400/7500 Series
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
21
Presentation_ID
Cisco Confidential
22
Presentation_ID
Cisco Confidential
23
Presentation_ID
Cisco Confidential
24
6VPEThe Technology
VPNv4 RD 2bytes:6bytes TYPE:VALUE RT (extended community) VPN address 2bytes:6bytes TYPE:VALUE 8bytes:4bytes RD:IPv4-address MP_REACH-NLRI AFI=1 SAFI=128 NLRI VRF (Virtual Routing & forwarding instance) Nexthop <length, IPv4-prefix, label> 1 VRF = 1 RIB + 1 FIB 0:IPv4-address 6VPE 2bytes:6bytes TYPE:VALUE 2bytes:6bytes TYPE:VALUE [8bytes]16bytes [RD]IPv6-address AFI=2 SAFI=128 <length, IPv4-prefix, label> MP-VRF [0]::FFFF:IPv4-address [0]:IPv6-address [0]:IPv6-LL-address Peering IPv4-address IPv4-address IPv6-address IPv6-LL-address
25
Presentation_ID
Cisco Confidential
P1
200.11.11.1
P2
200.10.10.1
FC 00 :20 0:: /64
CE1
PE1
iGP-v4 (OSPF, ISIS) LDP-v4
CE2
FC00:201::/64
PE2
VRF blue
VRF blue
Site-4
MP-eBGP session
Address-family IPv6
MP-iBGP session
Address-family VPNv6
IPv4-signalled LSP iBGP VPNv6 AF peering between 6VPE (PE1, PE2) eBGP IPv6+vrf AF peering with CE Only eBGP and Static Route within VRF between CE-PE
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
26
Routing Tables
Customer#1 Site-1 Default table
200.14.14.1
:/6 4
Customer#1 Site-2
1 2 3
BGP table
5 2001 4
CE
20 01 :1 00 :
CE1
:3 00 ::/ 64
MP-iBGP tunnel
:/6 4
CE2
20 01: 20 0:
PE-1
PE-2
Provider Network
4 :/6 0: 0 :4 01 20
CE
Customer#2 Site-2
At the 6VPE
A set of private IPv6 routing tables (red, blue) A default routing table (IPv4 or IPv6) A BGP table (AF VPNv6)
Presentation_ID
Cisco Confidential
27
200.14.14.1
BGP table
CE
CE1
2
CE2 Provider Network
PE-1 Customer#2 Site-1
CE
Customer#2 Site-2
28
route
200.10.10.0/32 is subnetted, 1 subnets 200.10.10.1 [115/30] via 40.1.1.3, Ethernet1/0 31.0.0.0/24 is subnetted, 1 subnets 31.1.1.0 [115/30] via 40.1.1.3, Ethernet1/0 200.11.11.0/32 is subnetted, 1 subnets 200.11.11.1 is directly connected, Loopback0
2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
29
Route Distinguisher: 200:1 (default for vrf red) *> 2001:200::/64 *> 2001:400::/64 :: ::FFFF:200.10.10.1 0 0
Presentation_ID
Cisco Confidential
30
PE1
P1
P2
PE2
VRF red
VRF red
LDP v4 table
Prefix Next Hop Label Prefix Next Hop Label
::FFFF:PE1
L1
PE1
P2
Lc
Import route
Prefix
Layer2
Label stack
Presentation_ID
Cisco Confidential
31
Forwarding
CE1
vrf red
PE1
P1
P2
PE2
vrf red
CE2
IPv6 header
IPv6 payload
Lc
L1
IPv6 header
IPv6 payload
L1
IPv6 header
IPv6 payload
IPv6 header
IPv6 payload
PE2#sh ipv6 cef vrf red BEEF:14::/64 nexthop 31.1.1.1 Ethernet0/0 label 18 24 00:07:25: MPLS les: Et1/0: rx: Len 122 Stack {18 0 63} {24 0 63} - ipv6 data 00:07:25: MPLS les: Et0/0: tx: Len 122 Stack {16 0 62} {24 0 63} - ipv6 data 00:07:25: MPLS les: Et1/0: rx: Len 122 Stack {16 0 62} {24 0 63} - ipv6 data 00:07:25: MPLS les: Et0/0: tx: Len 118 Stack {24 0 61} - ipv6 data 00:07:25: MPLS les: Et1/0: rx: Len 118 Stack {24 0 61} - ipv6 data
Presentation_ID
Cisco Confidential
32
Multi-Protocol VRF
vrf red
I/F list Protocols IF1, IF2 Specific IPv4 IPv6 tables Common policies Route-targets Specific Policies Route-map Route-targets RIBv6, FIBv6 Policies Route-map Route-targets tables RIBv4, FIBv4
CE
Site-A
CE
Site-B
PE
CE
Site-C
IF4
CE
Site-D
tables I/F list Protocols IF3, IF4 Policies IPv6 Route-map Route-targets RIBv6, FIBv6
vrf yellow
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
33
vrf
Address-family IPv4 Address-family IPv6
Dual-stack network
Site-1
2001:101::/64 10.101/16
P1
CE1
P2 PE2
Dual-stack network
PE1
VRF red
CE2
VRF red
Site-2
2001:201::/64 10.201/16
MP-eBGP session
Address-family IPv4 Address-family IPv6
MP-eBGP session
Address-family IPv4 Address-family IPv6
vrf definition site1 rd 100:1 route-target import 100:1 route-target export 100:1 address-family ipv4 address-family ipv6 ! interface ethernet0/0 vrf forwarding site1 ip address 10.100.1.2 255.255.0.0 ipv6 address 2001:100::72b/64
Presentation_ID
Cisco Confidential
34
router bgp 100 neighbor 200.10.10.1 remote-as 100 neighbor 200.10.10.1 update-source Loopback0 ! address-family ipv4 vrf site1 neighbor 10.100.1.1 remote-as 200 neighbor 10.100.1.1 activate
35
Presentation_ID
Cisco Confidential
36
RR
Site-1
CE1
200.11.11.1
P1
P2
200.10.10.1
CE2
VRF red
PE1
VRF red
Site-2
PE2
MP-eBGP session
Address-family IPv6
MP-eBGP session
Address-family IPv6
MP-iBGP session
Address-family VPNv6
37
Presentation_ID
Cisco Confidential
vrf
Address-family IPv4 Address-family IPv6
Dual-stack network
Site-1
2001:101::/64 10.101/16
P1
CE1
P2 PE2
Dual-stack network
PE1
VRF red
CE2
VRF red
Site-2
2001:201::/64 10.201/16
MP-eBGP session
Address-family IPv4 Address-family IPv6
MP-eBGP session
Address-family IPv4 Address-family IPv6
MPLS/IPv4 Core Infrastructure is IPv6-unaware PEs are updated to support Dual Stack/6VPE IPv6 VPN can co-exist with IPv4 VPN same scope and policies 6VPE RFC 4659 Cisco authored for IPv6 VPN over MPLS/IPv4 infrastructure Cisco IOS Release 12.2(33)SRB on Cisco 7600, IOSXR 3.5 on Cisco 12000
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
vrf definition site1 rd 100:1 route-target import 100:1 route-target export 100:1 address-family ipv4 address-family ipv6 ! interface ethernet0/0 vrf forwarding site1 ip address 10.100.1.2 255.255.0.0 ipv6 address 2001:100::72b/64
38
Conclusions
IPv6 migration does not need MPLS but, where MPLS is deployed, it enables attractive approaches for IPv6 integration Cisco IPv6 and MPLS solutions provides the broadest deployment scenario feature set Cisco 6PE & 6VPE are ones such IPv6 integration approach over IPv4 MPLS, which offers IPv6 deployment at marginal cost/risk
No upgrade/reconfiguration in IPv4/MPLS core IPv6 simultaneously with IPv4, IPv4 VPNs, L2 services, etc.
Presentation_ID
Cisco Confidential
39
Q and A
Presentation_ID
Cisco Confidential
40
Presentation_ID
Cisco Confidential
41
More Information
CCO IPv6 - http://www.cisco.com/ipv6 Cisco IPv6 Solutions http://www.cisco.com/en/US/tech/tk872/technologies_white_paper09186a 00802219bc.shtml Deployment Guides http://www.cisco.com/en/US/products/ps6553/products_data_sheets_list.h tml IPv6 Application Notes http://www.cisco.com/warp/public/732/Tech/ipv6/ipv6_techdoc.shtml Cisco IOS IPv6 Manuals http://www.cisco.com/en/US/products/ps6441/products_configuration_guid e_book09186a008049e1d7.html
Presentation_ID
Cisco Confidential
42
Coming Soon
Presentation_ID
Cisco Confidential
43