RFC2547 VPN discussion group? (With an inter-AS VPN question )
Hi All, Does anyone know RFC2547 VPN discussion group ? I can only find generic MPLS discussion from IETF. Better cisco oriented, because we use Cisco RFC2547 solution. Here is one of the problem we encountered now. Can anyone help ? We have 3 PEs connected with 3 CEs. PE1, PE2 are in the same AS4134, while PE3 in AS41340. It's not so luck that PE1 and PE3 is not back-to-back connected, but can be reached via a tag-switching enabled intermediate network. PE1-PE2 has MP-iBGP peer, while PE1-PE3 has MP-eBGP peer. Then we verify the traffic, and see that CE3, CE1 can ping each other, while CE3 can't ping CE2 ? But all three CEs can see prefix from other CEs. AS4134 AS41340 |----| |---| |---| |CE1 |-------|PE1|--(Tag switching )--|PE3| |----| |---| enabled inter- |---| | mediate network | | | | |---| | |CE3| |----| |---| |---| |CE2 |-------|PE2| |----| |---| BTW, We run PE on IOS Version 12.1(5)T6 regards, Yu Ning ____________________________________________ (Mr.) Yu Ning, Chief Engineer ChinaNET(AS4134) Sr. Sup.& New Sev. R&D Internet Product Dep. DCB, China Telecom Beijing, P.R.China +86-10-62072357/62072354 ____________________________________________
Hi Yu, Quite a few mpls operational quiestions is being discussed on mpls-ops alias. For cisco specific I have created closed alias mpls-deployment@cisco.com Please use the last one for escalation issues with mpls. Reg your issue without further troubleshooting I am unable to help you so pls open a TAC case. R.
Yu Ning wrote:
Hi All,
Does anyone know RFC2547 VPN discussion group ? I can only find generic MPLS discussion from IETF. Better cisco oriented, because we use Cisco RFC2547 solution.
Here is one of the problem we encountered now. Can anyone help ?
We have 3 PEs connected with 3 CEs. PE1, PE2 are in the same AS4134, while PE3 in AS41340. It's not so luck that PE1 and PE3 is not back-to-back connected, but can be reached via a tag-switching enabled intermediate network. PE1-PE2 has MP-iBGP peer, while PE1-PE3 has MP-eBGP peer.
Then we verify the traffic, and see that CE3, CE1 can ping each other, while CE3 can't ping CE2 ? But all three CEs can see prefix from other CEs.
AS4134 AS41340
|----| |---| |---| |CE1 |-------|PE1|--(Tag switching )--|PE3| |----| |---| enabled inter- |---| | mediate network | | | | |---| | |CE3| |----| |---| |---| |CE2 |-------|PE2| |----| |---|
BTW, We run PE on IOS Version 12.1(5)T6
regards,
Yu Ning ____________________________________________
(Mr.) Yu Ning, Chief Engineer ChinaNET(AS4134) Sr. Sup.& New Sev. R&D Internet Product Dep. DCB, China Telecom Beijing, P.R.China +86-10-62072357/62072354 ____________________________________________
Why did you send this to us? On Tue, 22 May 2001, Robert Raszuk wrote:
Hi Yu,
Quite a few mpls operational quiestions is being discussed on mpls-ops alias.
For cisco specific I have created closed alias mpls-deployment@cisco.com Please use the last one for escalation issues with mpls. Reg your issue without further troubleshooting I am unable to help you so pls open a TAC case.
R.
Yu Ning wrote:
Hi All,
Does anyone know RFC2547 VPN discussion group ? I can only find generic MPLS discussion from IETF. Better cisco oriented, because we use Cisco RFC2547 solution.
Here is one of the problem we encountered now. Can anyone help ?
We have 3 PEs connected with 3 CEs. PE1, PE2 are in the same AS4134, while PE3 in AS41340. It's not so luck that PE1 and PE3 is not back-to-back connected, but can be reached via a tag-switching enabled intermediate network. PE1-PE2 has MP-iBGP peer, while PE1-PE3 has MP-eBGP peer.
Then we verify the traffic, and see that CE3, CE1 can ping each other, while CE3 can't ping CE2 ? But all three CEs can see prefix from other CEs.
AS4134 AS41340
|----| |---| |---| |CE1 |-------|PE1|--(Tag switching )--|PE3| |----| |---| enabled inter- |---| | mediate network | | | | |---| | |CE3| |----| |---| |---| |CE2 |-------|PE2| |----| |---|
BTW, We run PE on IOS Version 12.1(5)T6
regards,
Yu Ning ____________________________________________
(Mr.) Yu Ning, Chief Engineer ChinaNET(AS4134) Sr. Sup.& New Sev. R&D Internet Product Dep. DCB, China Telecom Beijing, P.R.China +86-10-62072357/62072354 ____________________________________________
Hi nanog, I've solved the problem mentioned in my former letter. I'm too over-worked and forget to add "next-hop-self" in the PE1 to PE2 MP-iBGP peer, so no PE can reach PE1 in other AS, unless the directly connected one. But Cisco MPLS VPN command seems not very friendly,:-) After add the "next-hop-self" in the VPNV4 section, the MP-iBGP peer won't refresh itself, and I have no command to clear the VPNV4 peer, then I have to delete the config and paste it again to trigger the new update. I hope the "clear ip b n vrf xxx.xxx " can be added into IOS soon,:-) regards,
-----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Yu Ning Sent: Tuesday, May 22, 2001 10:18 AM To: Nanog-Post Subject: RFC2547 VPN discussion group? (With an inter-AS VPN question )
Hi All,
Does anyone know RFC2547 VPN discussion group ? I can only find generic MPLS discussion from IETF. Better cisco oriented, because we use Cisco RFC2547 solution.
Here is one of the problem we encountered now. Can anyone help ?
We have 3 PEs connected with 3 CEs. PE1, PE2 are in the same AS4134, while PE3 in AS41340. It's not so luck that PE1 and PE3 is not back-to-back connected, but can be reached via a tag-switching enabled intermediate network. PE1-PE2 has MP-iBGP peer, while PE1-PE3 has MP-eBGP peer.
Then we verify the traffic, and see that CE3, CE1 can ping each other, while CE3 can't ping CE2 ? But all three CEs can see prefix from other CEs.
AS4134 AS41340
|----| |---| |---| |CE1 |-------|PE1|--(Tag switching )--|PE3| |----| |---| enabled inter- |---| | mediate network | | | | |---| | |CE3| |----| |---| |---| |CE2 |-------|PE2| |----| |---|
BTW, We run PE on IOS Version 12.1(5)T6
regards,
Yu Ning ____________________________________________
(Mr.) Yu Ning, Chief Engineer ChinaNET(AS4134) Sr. Sup.& New Sev. R&D Internet Product Dep. DCB, China Telecom Beijing, P.R.China +86-10-62072357/62072354 ____________________________________________
Hello, Yu Ning Clear ip bgp is fine with me, I used it quite often. It works well on both global table or address family. The format I use is "clear ip bgp x.x.x.x vrf xxx", or clear the whole iBGP peer. rgds Yu Ning wrote:
Hi nanog,
I've solved the problem mentioned in my former letter. I'm too over-worked and forget to add "next-hop-self" in the PE1 to PE2 MP-iBGP peer, so no PE can reach PE1 in other AS, unless the directly connected one. But Cisco MPLS VPN command seems not very friendly,:-) After add the "next-hop-self" in the VPNV4 section, the MP-iBGP peer won't refresh itself, and I have no command to clear the VPNV4 peer, then I have to delete the config and paste it again to trigger the new update. I hope the "clear ip b n vrf xxx.xxx " can be added into IOS soon,:-)
regards,
-----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Yu Ning Sent: Tuesday, May 22, 2001 10:18 AM To: Nanog-Post Subject: RFC2547 VPN discussion group? (With an inter-AS VPN question )
Hi All,
Does anyone know RFC2547 VPN discussion group ? I can only find generic MPLS discussion from IETF. Better cisco oriented, because we use Cisco RFC2547 solution.
Here is one of the problem we encountered now. Can anyone help ?
We have 3 PEs connected with 3 CEs. PE1, PE2 are in the same AS4134, while PE3 in AS41340. It's not so luck that PE1 and PE3 is not back-to-back connected, but can be reached via a tag-switching enabled intermediate network. PE1-PE2 has MP-iBGP peer, while PE1-PE3 has MP-eBGP peer.
Then we verify the traffic, and see that CE3, CE1 can ping each other, while CE3 can't ping CE2 ? But all three CEs can see prefix from other CEs.
AS4134 AS41340
|----| |---| |---| |CE1 |-------|PE1|--(Tag switching )--|PE3| |----| |---| enabled inter- |---| | mediate network | | | | |---| | |CE3| |----| |---| |---| |CE2 |-------|PE2| |----| |---|
BTW, We run PE on IOS Version 12.1(5)T6
regards,
Yu Ning ____________________________________________
(Mr.) Yu Ning, Chief Engineer ChinaNET(AS4134) Sr. Sup.& New Sev. R&D Internet Product Dep. DCB, China Telecom Beijing, P.R.China +86-10-62072357/62072354 ____________________________________________
participants (4)
-
Franklin Lian -
Robert Raszuk -
Susan Harris -
Yu Ning