Networks - Junos vpnl3

Configs

ce1#sh run

Building configuration...

Current configuration : 803 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname ce1

!

boot-start-marker

boot-end-marker

!

no aaa new-model

memory-size iomem 15

!

ip cef

ip auth-proxy max-nodata-conns 3

ip admission max-nodata-conns 3

!

interface Loopback0

ip address 88.88.8.8 255.255.255.255

!

interface Ethernet0

ip address 192.168.50.1 255.255.255.0

half-duplex

!

interface FastEthernet0

no ip address

shutdown

speed auto

!

router bgp 65535

no synchronization

bgp log-neighbor-changes

redistribute connected

neighbor 192.168.50.2 remote-as 65412

no auto-summary

!

ip forward-protocol nd

no ip http server

no ip http secure-server

!

control-plane

!

line con 0

line aux 0

line vty 0 4

login

!

end

ce1#

MX1

lab@ROUTER-JUNOS-SP> show configuration | display set

set version 14.1R1.10

set system host-name ROUTER-JUNOS-SP

set system root-authentication encrypted-password "$1$iiqdh9ru$CBQygri2MkpfgtgdGo8GO1"

set system login user lab uid 2000

set system login user lab class super-user

set system login user lab authentication encrypted-password "$1$oW1NeMUu$N7IVMfy8GfJ02jzQzJ39h/"

set system services telnet connection-limit 5

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set logical-systems r1 interfaces ge-0/0/0 unit 0 family inet address 10.1.1.1/24

set logical-systems r2 interfaces ge-0/0/1 unit 0 family inet address 10.1.1.2/24

set interfaces ge-0/0/2 unit 0 family inet address 10.0.0.1/30

set interfaces ge-0/0/2 unit 0 family mpls

set interfaces ge-0/0/3 unit 0 family inet address 192.168.50.2/24

set interfaces em0 unit 0 family inet address 192.168.56.10/24

set interfaces lo0 unit 0 family inet address 8.8.8.8/32

set routing-options autonomous-system 65412

set protocols mpls traffic-engineering mpls-forwarding

set protocols mpls interface ge-0/0/2.0

set protocols mpls interface lo0.0

set protocols bgp import ACEITA-BGP

set protocols bgp export ACEITA-BGP

set protocols bgp group INTERNO-BACKBONE type internal

set protocols bgp group INTERNO-BACKBONE local-address 8.8.8.8

set protocols bgp group INTERNO-BACKBONE family inet-vpn unicast >>> ativa a family do vpnv4 = cisco

set protocols bgp group INTERNO-BACKBONE peer-as 65412

set protocols bgp group INTERNO-BACKBONE local-as 65412

set protocols bgp group INTERNO-BACKBONE neighbor 9.9.9.9

set protocols bgp group TO-CE type internal

set protocols ospf area 0.0.0.0 interface ge-0/0/2.0

set protocols ospf area 0.0.0.0 interface lo0.0

set protocols ldp interface ge-0/0/2.0

set protocols ldp interface lo0.0

set policy-options policy-statement ACEITA-BGP from protocol bgp

set policy-options policy-statement ACEITA-BGP then accept

set policy-options policy-statement REDISTRIBUI-CONNECTED from protocol direct

set policy-options policy-statement REDISTRIBUI-CONNECTED from protocol bgp

set policy-options policy-statement REDISTRIBUI-CONNECTED then accept

set routing-instances TESTE instance-type vrf

set routing-instances TESTE interface ge-0/0/3.0

set routing-instances TESTE route-distinguisher 1:1

set routing-instances TESTE vrf-target target:65412:12

set routing-instances TESTE protocols bgp group TO-CE type external

set routing-instances TESTE protocols bgp group TO-CE import ACEITA-BGP

set routing-instances TESTE protocols bgp group TO-CE export ACEITA-BGP

set routing-instances TESTE protocols bgp group TO-CE peer-as 65535

set routing-instances TESTE protocols bgp group TO-CE as-override

set routing-instances TESTE protocols bgp group TO-CE neighbor 192.168.50.1

lab@ROUTER-JUNOS-SP>

core mpls cisco

R1-CRE#SH RUN

Building configuration...

Current configuration : 801 bytes

!

version 15.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R1-CRE

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip cef

!

no ipv6 cef

!

mpls label protocol ldp

multilink bundle-name authenticated

!

interface Loopback0

ip address 1.1.1.1 255.255.255.255

ip ospf 1 area 0

!

interface FastEthernet0/0

ip address 10.0.0.5 255.255.255.252

ip ospf 1 area 0

duplex full

!

interface FastEthernet1/0

ip address 10.0.0.2 255.255.255.252

ip ospf 1 area 0

duplex full

!

router ospf 1

router-id 1.1.1.1

mpls ldp autoconfig

!

ip forward-protocol nd

!

no ip http server

no ip http secure-server

!

control-plane

!

line con 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

login

!

end

R1-CRE#

CORE MPLS CISCO R2

R2C-CORE#SH RUN

Building configuration...

Current configuration : 869 bytes

!

version 15.2

service timestamps debug datetime msec

service timestamps log datetime msec

!

hostname R2C-CORE

!

boot-start-marker

boot-end-marker

!

no aaa new-model

ip cef

!

no ipv6 cef

!

mpls label protocol ldp

multilink bundle-name authenticated

!

interface Loopback0

ip address 2.2.2.2 255.255.255.255

ip ospf 1 area 0

!

interface FastEthernet0/0

ip address 10.0.0.9 255.255.255.252

ip ospf 1 area 0

duplex full

!

interface FastEthernet1/0

ip address 10.0.0.6 255.255.255.252

ip ospf 1 area 0

duplex full

!

interface FastEthernet2/0

no ip address

shutdown

duplex full

!

router ospf 1

router-id 2.2.2.2

mpls ldp autoconfig

!

ip forward-protocol nd

!

no ip http server

no ip http secure-server

!

control-plane

!

line con 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

login

!

end

R2C-CORE#

lab@ROUTER-PR> show configuration | display set

set version 14.1R1.10

set system host-name ROUTER-PR

set system root-authentication encrypted-password "$1$iiqdh9ru$CBQygri2MkpfgtgdGo8GO1"

set system login user lab uid 2000

set system login user lab class super-user

set system login user lab authentication encrypted-password "$1$oW1NeMUu$N7IVMfy8GfJ02jzQzJ39h/"

set system services telnet connection-limit 5

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set logical-systems r1 interfaces ge-0/0/0 unit 0 family inet address 10.1.1.1/24

set logical-systems r2 interfaces ge-0/0/1 unit 0 family inet address 10.1.1.2/24

set interfaces ge-0/0/2 unit 0 family inet address 192.168.20.2/24

set interfaces ge-0/0/3 unit 0 family inet address 10.0.0.10/30

set interfaces ge-0/0/3 unit 0 family mpls

set interfaces em0 unit 0 family inet address 192.168.56.10/24

set interfaces em0 unit 0 family inet address 192.168.20.1/24

set interfaces lo0 unit 0 family inet address 9.9.9.9/32

set routing-options autonomous-system 65412

set protocols mpls traffic-engineering mpls-forwarding

set protocols mpls interface ge-0/0/3.0

set protocols mpls interface lo0.0

set protocols bgp group INTERNO-BACKBONE local-address 9.9.9.9

set protocols bgp group INTERNO-BACKBONE family inet-vpn unicast

set protocols bgp group INTERNO-BACKBONE peer-as 65412

set protocols bgp group INTERNO-BACKBONE neighbor 8.8.8.8

set protocols ospf area 0.0.0.0 interface ge-0/0/3.0

set protocols ospf area 0.0.0.0 interface lo0.0

set protocols ldp interface ge-0/0/3.0

set protocols ldp interface lo0.0

set policy-options policy-statement ACEITA-BGP from protocol bgp

set policy-options policy-statement ACEITA-BGP then accept

set policy-options policy-statement REDISTRIBUI-CONNECTED from protocol direct

set policy-options policy-statement REDISTRIBUI-CONNECTED from protocol bgp

set policy-options policy-statement REDISTRIBUI-CONNECTED then accept

set routing-instances TESTE instance-type vrf

set routing-instances TESTE interface ge-0/0/2.0

set routing-instances TESTE route-distinguisher 1:1

set routing-instances TESTE vrf-target target:65412:12

set routing-instances TESTE protocols bgp group TO-CE type external

set routing-instances TESTE protocols bgp group TO-CE local-address 192.168.20.2

set routing-instances TESTE protocols bgp group TO-CE import ACEITA-BGP

set routing-instances TESTE protocols bgp group TO-CE export ACEITA-BGP

set routing-instances TESTE protocols bgp group TO-CE peer-as 65535

set routing-instances TESTE protocols bgp group TO-CE as-override

set routing-instances TESTE protocols bgp group TO-CE neighbor 192.168.20.1

lab@ROUTER-PR>

CUSTOMER-B#sh run

Building configuration...

Current configuration : 812 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname CUSTOMER-B

!

boot-start-marker

boot-end-marker

!

no aaa new-model

memory-size iomem 15

!

ip cef

ip auth-proxy max-nodata-conns 3

ip admission max-nodata-conns 3

!

interface Loopback0

ip address 28.28.28.28 255.255.255.255

!

interface Ethernet0

ip address 192.168.20.1 255.255.255.0

half-duplex

!

interface FastEthernet0

no ip address

shutdown

speed auto

!

router bgp 65535

no synchronization

bgp log-neighbor-changes

redistribute connected

neighbor 192.168.20.2 remote-as 65412

no auto-summary

!

ip forward-protocol nd

no ip http server

no ip http secure-server

!

control-plane

!

line con 0

line aux 0

line vty 0 4

login

!

end

CUSTOMER-B#

TESTE.inet.0: 5 destinations, 6 routes (5 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

28.28.28.28/32 *[BGP/170] 00:17:42, MED 0, localpref 100

AS path: 65535 ?, validation-state: unverified

> to 192.168.20.1 via ge-0/0/2.0

88.88.8.8/32 *[BGP/170] 00:18:35, MED 0, localpref 100, from 8.8.8.8

AS path: 65535 ?, validation-state: unverified

> to 10.0.0.9 via ge-0/0/3.0, Push 299856, Push 18(top)

192.168.20.0/24 *[Direct/0] 02:29:05

> via ge-0/0/2.0

[BGP/170] 00:17:42, MED 0, localpref 100

AS path: 65535 ?, validation-state: unverified

> to 192.168.20.1 via ge-0/0/2.0

192.168.20.2/32 *[Local/0] 02:29:06

Local via ge-0/0/2.0

192.168.50.0/24 *[BGP/170] 00:18:35, localpref 100, from 8.8.8.8

AS path: I, validation-state: unverified

> to 10.0.0.9 via ge-0/0/3.0, Push 299856, Push 18(top)

lab@ROUTER-PR>

lab@ROUTER-JUNOS-SP> show route table TESTE.inet.0

TESTE.inet.0: 5 destinations, 6 routes (5 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

28.28.28.28/32 *[BGP/170] 00:18:15, MED 0, localpref 100, from 9.9.9.9

AS path: 65535 ?, validation-state: unverified

> to 10.0.0.2 via ge-0/0/2.0, Push 299856, Push 19(top)

88.88.8.8/32 *[BGP/170] 00:19:08, MED 0, localpref 100

AS path: 65535 ?, validation-state: unverified

> to 192.168.50.1 via ge-0/0/3.0

192.168.20.0/24 *[BGP/170] 00:18:15, localpref 100, from 9.9.9.9

AS path: I, validation-state: unverified

> to 10.0.0.2 via ge-0/0/2.0, Push 299856, Push 19(top)

192.168.50.0/24 *[Direct/0] 02:29:21

> via ge-0/0/3.0

[BGP/170] 00:19:08, MED 0, localpref 100

AS path: 65535 ?, validation-state: unverified

> to 192.168.50.1 via ge-0/0/3.0

192.168.50.2/32 *[Local/0] 02:29:23

Local via ge-0/0/3.0

lab@ROUTER-JUNOS-SP>