Layer 3 VSN configuration example
The following figure shows a sample Layer 3 VSN deployment.
Layer 3 VSN
The following sections show the steps required to configure the Layer 3 VSN parameters in this example.
Note that IP IS-IS redistribution needs to be configured to inject the VRF routes into IS-IS.
You must first configure basic SPBM and IS-IS infrastructure.
VRF green configuration
The following figure shows the green VRF in this Layer 3 VSN example.
Layer 3 VSN
— VRF green
The following sections show the steps required to configure the green VRF parameters in this example.
VRF green – Switch-C
VRF CONFIGURATION ip vrf green vrfid 1 VLAN CONFIGURATION vlan create 101 type port-mstprstp 0 vlan mlt 101 1 vlan members 101 1/2 portmember interface Vlan 101 vrf green ip address 10.1.101.1 255.255.255.0 1 exit ISIS PLSB IPVPN CONFIGURATION router vrf green ipvpn i-sid 13990001 ipvpn enable exit IP REDISTRIBUTION CONFIGURATION - VRF router vrf green isis redistribute direct isis redistribute direct metric 1 isis redistribute direct enable exit IP REDISTRIBUTE APPLY CONFIGURATIONS isis apply redistribute direct vrf green
VRF green – Switch-D
VRF CONFIGURATION ip vrf green vrfid 1 VLAN CONFIGURATION vlan create 102 type port-mstprstp 0 vlan mlt 102 1 vlan members add 102 1/2 portmember interface vlan 102 vrf green ip address 10.1.102.1 255.255.255.0 1 exit ISIS PLSB IPVPN CONFIGURATION router vrf green ipvpn i-sid 13990001 ipvpn enable exit IP REDISTRIBUTION CONFIGURATION - VRF router vrf green isis redistribute direct isis redistribute direct metric 1 isis redistribute direct enable exit IP REDISTRIBUTE APPLY CONFIGURATIONS isis apply redistribute direct vrf green
VRF red configuration
The following figure shows the red VRF in this Layer 3 VSN example.
Layer 3 VSN
— VRF red
The following sections show the steps required to configure the red VRF parameters in this example.
VRF red – Switch-C
VRF CONFIGURATION ip vrf red vrfid 2 VLAN CONFIGURATION vlan create 201 type port-mstprstp 0 vlan mlt 201 1 vlan members 201 1/2 portmember interface Vlan 201 vrf red ip address 10.2.201.1 255.255.255.0 1 exit ISIS PLSB IPVPN CONFIGURATION router vrf red ipvpn i-sid 13990002 ipvpn enable exit IP REDISTRIBUTION CONFIGURATION - VRF router vrf red isis redistribute direct isis redistribute direct metric 1 isis redistribute direct enable exit IP REDISTRIBUTE APPLY CONFIGURATIONS isis apply redistribute direct vrf red
VRF red – Switch-D
VRF CONFIGURATION ip vrf red vrfid 2 VLAN CONFIGURATION vlan create 202 type port-mstprstp 0 vlan mlt 101 1 vlan members 202 1/2 portmember interface Vlan 202 vrf red ip address 10.3.202.1 255.255.255.0 1 exit ISIS PLSB IPVPN CONFIGURATION router vrf red ipvpn i-sid 13990002 ipvpn enable exit IP REDISTRIBUTION CONFIGURATION - VRF router vrf red isis redistribute direct isis redistribute direct metric 1 isis redistribute direct enable exit IP REDISTRIBUTE APPLY CONFIGURATIONS isis apply redistribute direct vrf red
Verifying Layer 3 VSN operation
The following sections show the steps required to verify the Layer 3 VSN configuration in this example.
Switch-C
Switch-C:1# show isis spbm ip-unicast-fib
================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
================================================================================
VRF DEST OUTGOING SPBM PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST PREFERENCE
--------------------------------------------------------------------------------
GRT - - 10.0.0.2/32 Switch-D 4000 1/3 20 1 7
GRT - - 10.0.14.0/24 Switch-D 4000 1/3 20 1 7
--------------------------------------------------------------------------------
Total number of SPBM IP-UNICAST FIB entries 2
--------------------------------------------------------------------------------
Switch-C:1# show isis spbm ip-unicast-fib id 13990001
================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
====================================================================================
VRF DEST OUTGOING SPBM PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST PREFERENCE
------------------------------------------------------------------------------------
green - 13990001 10.1.101.0/24 Switch-D 4000 1/2 20 1 7
------------------------------------------------------------------------------------
Total number of SPBM IP-UNICAST FIB entries 1
------------------------------------------------------------------------------------
Switch-C:1# show isis spbm ip-unicast-fib id 13990002
================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
====================================================================================
VRF DEST OUTGOING SPBM PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST PREFERENCE
------------------------------------------------------------------------------------
red - 13990002 10.2.202.0/24 Switch-D 4000 1/3 20 1 7
------------------------------------------------------------------------------------
Total number of SPBM IP-UNICAST FIB entries 1
------------------------------------------------------------------------------------
Switch-C:1# show isis spbm ip-unicast-fib id all
===================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
===================================================================================
VRF DEST OUTGOING SPBM PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST PREFERENCE
-----------------------------------------------------------------------------------
GRT - - 10.0.0.2/32 Switch-D 4000 1/3 20 1 7
GRT - - 10.0.14.0/24 Switch-D 4000 1/3 20 1 7
green - 13990001 10.1.102.0/24 Switch-D 4000 1/3 20 1 7
red - 13990002 10.2.202.0/24 Switch-D 4000 1/3 20 1 7
-----------------------------------------------------------------------------------
Total number of SPBM IP-UNICAST FIB entries 4
-----------------------------------------------------------------------------------
Switch-D
Switch-D:1# show isis spbm ip-unicast-fib
================================================================================
VRF DEST OUTGOING SPBM PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST PREFERENCE
--------------------------------------------------------------------------------
GRT - - 10.0.0.1/32 Switch-C 4000 1/2 20 1 7
GRT - - 10.0.13.0/24 Switch-C 4000 1/2 20 1 7
--------------------------------------------------------------------------------
Total number of SPBM IP-UNICAST FIB entries 2
--------------------------------------------------------------------------------
Switch-D:1# show isis spbm ip-unicast-fib id 13990001
================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
====================================================================================
VRF DEST OUTGOING SPBM PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST PREFERENCE
------------------------------------------------------------------------------------
green - 13990001 10.1.101.0/24 Switch-C 4000 1/2 20 1 7
------------------------------------------------------------------------------------
Total number of SPBM IP-UNICAST FIB entries 1
------------------------------------------------------------------------------------
Switch-D:1# show isis spbm ip-unicast-fib id 13990002
================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
====================================================================================
VRF DEST OUTGOING SPBM PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST PREFERENCE
------------------------------------------------------------------------------------
red - 13990002 10.2.201.0/24 Switch-C 4000 1/2 20 1 7
------------------------------------------------------------------------------------
Total number of SPBM IP-UNICAST FIB entries 1
------------------------------------------------------------------------------------
Switch-D:1# show isis spbm ip-unicast-fib id all
================================================================================
SPBM IP-UNICAST FIB ENTRY INFO
====================================================================================
VRF DEST OUTGOING SPBM PREFIX IP ROUTE
VRF ISID ISID Destination NH BEB VLAN INTERFACE COST COST PREFERENCE
------------------------------------------------------------------------------------
GRT - - 10.0.0.1/32 Switch-C 4000 1/2 20 1 7
GRT - - 10.0.13.0/24 Switch-C 4000 1/2 20 1 7
green - 13990001 10.1.101.0/24 Switch-C 4000 1/2 20 1 7
red - 13990002 10.2.201.0/24 Switch-C 4000 1/2 20 1 7
------------------------------------------------------------------------------------
Total number of SPBM IP-UNICAST FIB entries 4
-------------------------------------------------------------------------------------
VRF green—Switch-C
Switch-C:1# show ip route vrf green
================================================================================
IP Route - VRF green
================================================================================
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
--------------------------------------------------------------------------------
10.1.101.0 255.255.255.0 10.1.101.1 - 1 101 LOC 0 DB 0
10.1.102.0 255.255.255.0 Switch-D vrf green 20 4000 ISIS 0 IBSV 7
2 out of 2 Total Num of Route Entries, 0 Total Num of Dest Networks displayed.
--------------------------------------------------------------------------------
TYPE Legend:
I=Indirect Route, D=Direct Route, A=Alternative Route, B=Best Route, E=Ecmp Rout
e,
U=Unresolved Route, N=Not in HW, F=Replaced by FTN, V=IPVPN Route, S=SPBM Route
PROTOCOL Legend:
v=Inter-VRF route redistributed
VRF green—Switch-D
Switch-D:1# show ip route vrf green
================================================================================
IP Route - VRF green
================================================================================
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
--------------------------------------------------------------------------------
10.1.101.0 255.255.255.0 Switch-C vrf green 20 4000 ISIS 0 IBSV 7
10.1.102.0 255.255.255.0 10.1.102.1 - 1 102 LOC 0 DB 0
2 out of 2 Total Num of Route Entries, 0 Total Num of Dest Networks displayed.
--------------------------------------------------------------------------------
TYPE Legend:
I=Indirect Route, D=Direct Route, A=Alternative Route, B=Best Route, E=Ecmp Rout
e,
U=Unresolved Route, N=Not in HW, F=Replaced by FTN, V=IPVPN Route, S=SPBM Route
PROTOCOL Legend:
v=Inter-VRF route redistributed
VRF red—Switch-C
Switch-C:1# show ip route vrf red
================================================================================
IP Route - VRF red
================================================================================
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
--------------------------------------------------------------------------------
10.2.201.0 255.255.255.0 10.2.201.1 - 1 201 LOC 0 DB 0
10.2.202.0 255.255.255.0 Switch-D vrf red 20 4000 ISIS 0 IBSV 7
2 out of 2 Total Num of Route Entries, 0 Total Num of Dest Networks displayed.
--------------------------------------------------------------------------------
TYPE Legend:
I=Indirect Route, D=Direct Route, A=Alternative Route, B=Best Route, E=Ecmp Rout
e,
U=Unresolved Route, N=Not in HW, F=Replaced by FTN, V=IPVPN Route, S=SPBM Route
PROTOCOL Legend:
v=Inter-VRF route redistributed
VRF red—Switch-D
Switch-D:1# show ip route vrf red
================================================================================
IP Route - VRF red
================================================================================
NH INTER
DST MASK NEXT VRF/ISID COST FACE PROT AGE TYPE PRF
--------------------------------------------------------------------------------
10.2.201.0 255.255.255.0 Switch-C vrf red 20 4000 ISIS 0 IBSV 7
10.2.202.0 255.255.255.0 10.2.202.1 - 1 202 LOC 0 DB 0
2 out of 2 Total Num of Route Entries, 0 Total Num of Dest Networks displayed.
--------------------------------------------------------------------------------
TYPE Legend:
I=Indirect Route, D=Direct Route, A=Alternative Route, B=Best Route, E=Ecmp Rout
e,
U=Unresolved Route, N=Not in HW, F=Replaced by FTN, V=IPVPN Route, S=SPBM Route
PROTOCOL Legend:
v=Inter-VRF route redistributed