06_02_引入重叠VPN

2019年7月27日 07:18 作者：金淼淋分类：MPLS  891

Complex MPLS VPNs
YES LAB
Introducing Overlapping VPNs
YES LAB
wwwveslabnet Outline
YES LAB
— Overview
— Who Are the Participants in OverlappingVPNs?
— What Are Typical Overlapping VPN Usages?
— OverlappingVPN Routing
— OverlappingVPN Data Flow
— Configuring OverlappingVPNs
— Summary
wwwveslabnet Overlapping VPNs
P-Network
MPLS
Backbone
YES LAB
PE-I
A-Central
PE-2
-Central
— CE routers participate in simple VPNs.
— Some CE routers participate in more than one simple
VPN:
• Here, A-Central talks to B-CentraI. Typical Overlapping VPN Usa
YES LAB
— Companies where central sites participate in a corporate
networkand in an extranet.
— A company with several security-conscious departments
that exchange data between their servers. Overlapping VPN Routing
RD 123:750
RT 123:750
Import
Export
RT 123:750
A-Central
RD 123:751
RD 123:750
Site B-l
RD 123:760
YES LAB
Site B-2
RD 123:760
Import
Export
RT 123:1001
Import
Export
RT 123:760
Import
Export
RT 123:760
B-Central
RD 123:761 Overlapping VPN Data Flow
Site A-I
RD 123:750
Data Flo
Site A-2
Data Flow
RD 123:750
ta Flow
Site B-l
RD 123:760
A-Central
RD 123:751
Data Flow
YES LAB
Site B-2
Data Flow
RD 123:760
BCentral
RD 123:761 OverlappingVPNs—Configuration
Tasks
P-Network
MPLS
Backbone
A-Spoke-l
B-Spok•e-2
A-Central
PE-I
PE-2
YES LAB
A-Spoke-2
B-Spoke-l
B-central
• Configure one VRF per set of sites with the same VPN membership per PE
+VRFO
router.
• For every set of sites with the same VPN membership, use the same RD.
• Configure RTS based on the VPN membership of sites in
each iff%fidHRTo Summary
YES LAB
— Overlapping VPNs are used to provide connectivity
between segments of two
— There are two uses for overlapping VPNs:
• Companies that use MPLS VPNs to implement both intranet and
filhdMPLS
extranet services.
• Companies that might decide to limit visibility between
departments. fblJ MJiiJ MJ ÄJ.
wwwveslabnet Summary(cont.)
YES LAB
— Sites that participate in more than one (overlapping)
VPN import and export routes with RTS from any VPN
in which they participate.
— Sites cannot talk to each other if they belong to
differentVPNs.
— Overlapping VPN sites are configured with the required
RTS based on the VPN membership.
wwwveslabnet