Configuring Layer 3 VPN

Layer 3 VPN Named VRF Configuration describes named VRF Layer 3 VPN configuration. This procedure takes place on the PE router and assumes you have configured the VRF for the L3 VPN (Virtual Routing and Forwarding (VRF) Configuration) and are in the executive command mode for that VRF. All commands are entered in the VRF to which the L3 VPN belongs.

Layer 3 VPN Named VRF Configuration

Step	Task	Command(s)
1	In named VRF configuration mode, assign a route distinguisher for the VRF.	rd {asn:num | ipv4Addr:num}
2	In named VRF configuration mode, configure one or more route targets to identify the routes to import and export for the L3 VPN.	route-target {import | export | both} oui:num
3	Optionally, in named VRF configuration mode, configure a VPN identifier, if network features outside of the L3 VPN need to identify the VPN to which a client packet flow belongs.	vpn id oui:vpn-index
4	Optionally, when using Native MPLS, change the MPLS label mode to allocate a unique label for each prefix route in the routing table. Defaults to a single label for the VRF.	mpls label mode {per-prefix | per-vrf}

Layer 3 VPN using MPLS Global VRF Configuration describes global VRF Layer 3 VPN configuration. This procedure takes place in global VRF global configuration mode on the PE router.

Layer 3 VPN using MPLS Global VRF Configuration

Step	Task	Command(s)
1	When configuring a L3 VPN using Native MPLS, enable Native MPLS for the appropriate address family.	mpls ip [exclude-nexthop nexthop-address] mpls ipv6 transport-address [exclude-nexthop nexthop-address]
2	When configuring a L3 VPN using Native MPLS, enable LDP as the active label distribution protocol for the appropriate address family for this L3 VPN.	mpls label-protocol-ldp {ipv4 | ipv6}
3	Optionally, enable LDP graceful restart for all LDP sessions. Graceful restart must also be enabled on associated routing protocols that are present in the network: BGP, OSPF, and IS-IS.	mpls label-protocol-ldp {ipv4 | ipv6} graceful-restart
4	When configuring a L3 VPN using Native MPLS, optionally, configure the LDP label advertisement mode.	mpls ldp-advertisement-mode {unsolicited | demand}
5	Optionally, configure LDP label allocation filtering.	mpls ldp-label-allocate {bgp-routes | host-routes}
6	When configuring a L3 VPN using Native MPLS, optionally, configure the LDP label retention mode	mpls ldp-label-retention-mode {liberal | conservative}
7	Optionally, enable the propagation of TTL from IPv4 and IPv6 headers to the MPLS label for forwarded packets, local packets or both.	mpls ip propagate-ttl [forwarded | local]
8	Optionally, enable LDP graceful restart for all LDP sessions.	mpls ldp-graceful-restart [reconnect-timeout seconds] [forwarding-state-holdtime seconds]
9	Configure a network wide unique LSR ID for the router. Optional for an IPv6 system, required for an IPv4 system	mpls ldp-lsr-id lsr-id
10	Configure a loopback interface for this L3 VPN and specify the IPv4 or IPv6 for this interface.	interface loopback-name     ip address ipv4-address     ipv6 address ipv6-address
11	Configure any VLANs associated with this router‘s L3 VPN domain.	interface vlan-name
12	When configuring a L3 VPN using L3 tunnels, configure a L3 tunnel to each VPN edge router for each BGP peering session. Configure the IPv4 or IPv6 address associated with the tunnel, as well as, the tunnel source and destination addresses.	interface tunnel-name     ip | ipv6 address ip-address     tunnel source ip-address     tunnel destination ip-address
13	When configuring a L3 VPN using L3 tunnels, configure a static route so that the remote peer‘s loopback address prefers the tunneled interface as the next-hop over the VLAN interface the tunnels use.	ip route prefix/prefix-length interface tunnel-name ipv6 route prefix/prefix-length interface tunnel-name
14	Configure OSPFv2 or OSPFv3 to provide reachability for all LSRs within the tunneled domain. Reachability can also be achieved using static routes.	See Open Shortest Path First (OSPFv2) Configuration for OSPF configuration details for an IPv4 L3 VPN. Open Shortest Path First Version 3 (OSPFv3) Configuration for OSPF configuration details for an IPv6 L3 VPN.

Global Router BGP Configuration describes global VRF Layer 3 VPN configuration. This procedure takes place in global VRF global configuration mode on the PE router.

Global Router BGP Configuration

Step	Task	Command(s)
1	In BGP configuration mode, Enter the BGP IPv4 or IPv6 L3 VPN address family.	address-family {vpnv4 | vpnv6}
2	In IPv4 or IPv6 BGP L3 VPN address family mode, activate peers for this L3 VPN.	neighbor ip-address activate
3	In IPv4 or IPv6 BGP L3 VPN address family mode, enable the address family.	enable
4	In BGP configuration mode, enter the IPv4 or IPv6 address mode for the VRF	address-family [ipv4 | ipv6] [unicast | multicast | both] [vrf vrf-name]
5	If OSPF configuration is present, redistribute L3 VPN routes learned on this VRF to the CE router(s).	Using Redistribution.

To configure SPBV in a L3 VPN over SPBV network, see Configuring Shortest Path Bridging VLAN.

Refer to the S-, K-, and 7100 Series CLI Reference Guide for more information about each command.