cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
910
Views
10
Helpful
8
Replies

MPLS L3 and L2 architecture issues

pica.cxi.isc
Level 1
Level 1

Hi,

I'm on an MPLS IP-VPN architecture and I would like to add a point to point L2-VPN (VLL ?).

Can we do L2-VPN on a cisco 2800 series ? 3800 series ?

Can I setup a lease line beetween a 3800 and a 6500 ?

I can see on my 3800 that I have the mpls L2transport commands but it doesn't seem to work on a vlan interface (which seems to be the easiest way to setup a virtual lease line as explain here: http://www.cisco.com/en/US/tech/tk436/tk428/technologies_white_paper09186a00800a3e69.shtml#wp41167)

Are there any issues to add L2-VPN on PE already use for L3-VPN ?

Best regards !

8 Replies 8

mounir.mohamed
Level 7
Level 7

Would you give me the result of

Router#Show version

Router#show mpls l2transport vc 200

On my cisco 2800 series :

sh ver

Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.4(4)T7, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2006 by Cisco Systems, Inc.

Compiled Tue 28-Nov-06 18:37 by kellythw

ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)

ROUTER_2800 uptime is 8 weeks, 6 days, 19 hours, 17 minutes

System returned to ROM by power-on

System image file is "flash:c2800nm-spservicesk9-mz.124-4.T7.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Cisco 2811 (revision 53.51) with 251904K/10240K bytes of memory.

Processor board ID FCZ110473CW

6 FastEthernet interfaces

1 ATM interface

DRAM configuration is 64 bits wide with parity enabled.

239K bytes of non-volatile configuration memory.

62720K bytes of ATA CompactFlash (Read/Write)

Configuration register is 0x2102

sh mpls l2transport doesn't exist

-------------------

On my cisco 3800 series

ROUTER_3800#sh ver

Cisco IOS Software, 3800 Software (C3825-ADVENTERPRISEK9-M), Version 12.4(11)T, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2006 by Cisco Systems, Inc.

Compiled Sat 18-Nov-06 23:16 by prod_rel_team

ROM: System Bootstrap, Version 12.3(11r)T2, RELEASE SOFTWARE (fc1)

R_LPRS_3825_PE_MPLS uptime is 13 weeks, 3 days, 17 hours, 18 minutes

System returned to ROM by power-on

System image file is "flash:c3825-adventerprisek9-mz.124-11.T.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Cisco 3825 (revision 1.1) with 224256K/37888K bytes of memory.

Processor board ID FCZ1013704D

4 FastEthernet interfaces

2 Gigabit Ethernet interfaces

1 Serial(sync/async) interface

1 Virtual Private Network (VPN) Module

DRAM configuration is 64 bits wide with parity enabled.

479K bytes of NVRAM.

62720K bytes of ATA System CompactFlash (Read/Write)

Configuration register is 0x2102

sh mpls l2transport vc 200

Local intf Local circuit Dest address VC ID Status

------------- -------------------------- --------------- ---------- ----------

Tanks again

Hi,

Actually I did't face any immplementaion for AToM over low end devices

As you know there is 2 types of Ethernet over MPLS implementations.

VC Type 4 is used for Ethernet VLAN mode.

VC Type 5 is used for Ethernet Port mode.

After checking the IOS image you use(c3825-adventerprisek9-mz.124-11.T.bin) i found that this image support AToM for Ethernet port mode only, so AToM VLAN-mode not supported in this image.

So try Ethernet over MPLS port mode (VC-Type-5) by using xconnect command instead of legacy mpls l2transport command, and if it's works fine use http://www.cisco.com/go/fn to find the image that support VLAN-mode.

Please rate helpful posts.

Best Regards,

Mounir Mohamed

Ok, here is my config :

I have a network made of provider point to point layer 2 virtual link (mean that I need to configure a mpls subinterface in the good vlan)

On this network, I setup my MPLS network with L3 VPNs.

Can i setup a EoMPLS with VC Type 4 as i'm already in a provider L2 VPN ?

Hi pica,

As far as i understand you have operational MPLS network and you need to implement AToM VC Type-4 on Dot1Q sub-interface (Correct me if i understand it wrong)

Again the IOS image you use doesn't support VC-Type 4.

Please rate helpful posts.

Best Regards,

Mounir Mohamed

Ok maybe my explanation is not clear. I understand that i need to change the ios but :

I'm using a provider point to point access for my metropolitan network.

Example :

Site A

Int gig 0/0.100

ip address

encap dot1q 100

mpls ip

Int gig 0/0.200

ip address

encap dot1q 200

mpls ip

Site B

Int gig 0/0.100

ip address

encap dot1q 100

mpls ip

Site C

Int gig 0/0.200

ip address

encap dot1q 200

mpls ip

Mean that Site A has a L2 connection with Site B (via VLAN 100) and Site C (via VLAN 200). I can't use other VLAN than those given me by the provider.

Ok, now, i want to extend a vlan (20 for example) from Site A to Site B. Can I do that with VC Type 4 ?

This is seems to be wired configurations for me, why do you enable mpls ip on your CE Dot1q sub-interfaces? The customer CE should never be MPLS aware in MPLS implantations like VPN/AToM/Metro.

Regarding other VLANs provided by ISP, simply ask your provider to provision the new VLAN between the desired branches.

Best Regards,

Mounir Mohamed

(pica.cxi.isc is my pro account)

It's not my CE configuration, it's my PE confs that I've given to you. It's a bit tricky because there is the provider MPLS network (that give us some L2 VPN) and my MPLS network on it (where i use L3 VPN but as i can see, it's impossible to add L2 VPN).

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: