MPLS AtoM / Pseudowire Ethernet over MPLS (EoMPLS)

Written by Rene Molenaar on 17 December 2010. Posted in MPLS

Scenario:

One of the largest service providers in The Netherlands has been succesfully implementing MPLS in their backbone. The last years they have been serving customers with PE-CE setups without any problem. Yesterday a new customer specialized in selling Bananas arrived who is not looking for a PE-CE solution but rather would see an end-to-end Ethernet solution. Since the ISP has never configured this before they ask you; A respected Cisco Guru to implement MPLS AtoM (Any Type over MPLS) for them. Let's see if you can pull this one off!

Goal:

All IP addresses have been preconfigured for you.
All ISP routers have a loopback0 interfaced configured as following:
PE1: 2.2.2.2 /25
P: 3.3.3.3 /25
PE2: 4.4.4.4 /25
Configure OSPF Area 0 at the provider side (Router PE1, PE2 and P).
Advertise the loopback interfaces as well in OSPF.
Make sure you don't send any OSPF Hello packets towards the customer.
Ensure you have full reachability in the OSPF domain.
Configure MPLS on all physical interfaces in the service provider domain, do not configure MPLS on physical interfaces pointing towards the customer.
Configure the PE routers to encapsulate every frame in a MPLS packet and to forward it to the other PE router using VC ID 15.
Make sure router BananaHQ and BananaBranch can ping each other.

IOS:

c7200-adventerprisek9-mz.124-20.T.bin

Topology:

Video Solution:

You need to register to be able to download the GNS3 Topology File. (Registration is Free!)

Related Articles: Frame Mode MPLS
Basic MPLS VPN
PPP over Ethernet (PPPOE)
MPLS Labs coming soon
Advanced MPLS VPN

Only registered users can write comments!

Comments (7)

betotheone
2011-01-08 19:53:59

good one

ahmed.moshref
2011-02-17 12:29:25

I've tried it but unfortunally i cant ping back to back? from the 2 CEs

Do you think i have any missing config.
please check the PE config as below

PE1

PE1#sh run
Building configuration...

Current configuration : 1471 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE1
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
ip source-route
ip cef
!
!
!
!
no ip domain lookup
ip vrf banana
rd 1:1
route-target export 1:1
route-target import 1:1
!
no ipv6 cef
!
multilink bundle-name authenticated
mpls label protocol ldp
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
l2 vfi test point-to-point
!
!
!
!
!
interface Loopback0
ip address 2.2.2.2 255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
ip address 192.168.23.2 255.255.255.0
duplex auto
speed auto
mpls ip
!
interface FastEthernet1/1
no ip address
duplex auto
speed auto
xconnect 4.4.4.4 1 encapsulation mpls
!
interface FastEthernet2/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet2/1
no ip address
shutdown
duplex auto
speed auto
!
router ospf 1
router-id 2.2.2.2
log-adjacency-changes
network 2.2.2.2 0.0.0.0 area 0
network 192.168.23.2 0.0.0.0 area 0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
logging alarm informational
!
!
!
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
logging synchronous
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
end
---------------------------------------------------------------------------
PE2

PE2#
PE2#sh run
Building configuration...

Current configuration : 1188 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname PE2
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
ip source-route
ip cef
!
!
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 4.4.4.4 255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
ip address 192.168.34.4 255.255.255.0
duplex auto
speed auto
mpls ip
!
interface FastEthernet1/1
no ip address
duplex auto
speed auto
xconnect 2.2.2.2 1 encapsulation mpls
!
router ospf 1
router-id 4.4.4.4
log-adjacency-changes
network 4.4.4.4 0.0.0.0 area 0
network 192.168.34.4 0.0.0.0 area 0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
logging alarm informational
!
!
!
!
!
!
mpls ldp router-id Loopback0
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
logging synchronous
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
end

tineg
2011-02-17 22:19:33

My configuration is the same as yours and the ping fails even though the p2p is up between PEs. I'm looking for the right conf for 2 days now.
The debug all (thank you Dynamips) shows an error that I could'nt manage to find any related issues.

tineg
2011-02-19 20:41:31

Ok I've solved my problem. I hope the solution will help you. Just verify that your PE's loopbacks used in the "mpls ldp router-id loopback 0 force" global are configured with a /32 mask.

ahmed.moshref
2011-02-22 09:15:47

Yeap.. here it go. its working
the Mask was the issue! thanks alot but why do you think the /24 would not make it work!?

ReneMolenaar
2011-02-22 15:34:34

Be careful with OSPF and MPLS. OSPF will ALWAYS advertise the loopback ip address as /32 even though you have a /24 configured. This will give LDP errors since there's a mismatch in the subnet mask. 2 ways to fix this:

- Make sure you configure a /32 for the IP address on the loopback interface.

OR

- Use the "ip ospf network" command on the loopback interface so it advertises the /24 instead of the /32.

Have fun!

Rene

bdk907
2011-03-08 02:52:13

To save people an IOS headache, I thought that I would present my problem to help others out.

c7200-adventerprisek9-mz.124-6.T.bin - DOES NOT SUPPORT MPLS ENCAP'D PSEUDOWIRE!

I can configure a pseudowire-class:

Router(config)#pseudowire-class atom2
Router(config-pw-class)#encap mpls
Router(config-pw-class)#

But when I try to apply that pseudowire class I get:

Router(config-pw-class)#int f1/0
Router(config-if)#xconn 1.2.3.4 5 pw atom2
MPLS encap is not supported on this circuit
Router(config-if)#

I tested an Advanced IP Services 12.4-9 and that allows MPLS encapsulation but the Advanced Enterprise 12.4-6 doesn't. Weird? Not too weird as someone else ahd roughly the same issue http://7200emu.hacki.at/viewtopic.php?p=27269&sid=77cab6cd9d822361f00a5dc9c7fdf0f6. Right now Cisco's IOS compare site is extremely slow, so when in doubt, try another IOS version.

-bdk

Master CCNA

Master CCNP SWITCH

Master CCNP ROUTE