1 00:00:00,000 --> 00:00:03,784 [AUDIO LOGO] 2 00:00:03,784 --> 00:00:08,050 3 00:00:08,050 --> 00:00:11,320 So now let's jump in and take a more detailed look 4 00:00:11,320 --> 00:00:16,059 at the different types of layer 2 VPNs that are available. 5 00:00:16,059 --> 00:00:17,620 We're going to start off by looking 6 00:00:17,620 --> 00:00:23,230 at a list of, really, two major VPN types and all 7 00:00:23,230 --> 00:00:25,000 the different names that they share, 8 00:00:25,000 --> 00:00:29,810 depending on the particular vendor or organizing body. 9 00:00:29,810 --> 00:00:32,509 So let's go ahead and take a look at that. 10 00:00:32,509 --> 00:00:34,930 And then, of course, we'll dig into those two types 11 00:00:34,930 --> 00:00:38,200 in a little bit more detail to understand the differences 12 00:00:38,200 --> 00:00:39,530 and how they work. 13 00:00:39,530 --> 00:00:44,770 So let's go ahead and jump in, taking a look at that table. 14 00:00:44,770 --> 00:00:47,160 So a sort of interesting aspect about layer 15 00:00:47,160 --> 00:00:51,240 2 VPN types is these types actually 16 00:00:51,240 --> 00:00:56,460 have different names depending on the organization, meaning 17 00:00:56,460 --> 00:00:59,970 either the standards body or the vendor. 18 00:00:59,970 --> 00:01:02,220 So if we bring up a little table here, 19 00:01:02,220 --> 00:01:07,290 we have two major flavors of layer 2 VPNs. 20 00:01:07,290 --> 00:01:13,590 We have the point to point, which the Metro Ethernet Forum, 21 00:01:13,590 --> 00:01:18,330 or MEF, refers to as an E-Line. 22 00:01:18,330 --> 00:01:24,630 Then we have the multipoint, which is referred to as E-LAN. 23 00:01:24,630 --> 00:01:28,360 Now, just focusing on the point to point for a moment, 24 00:01:28,360 --> 00:01:31,500 they're also referred to as Ethernet Private 25 00:01:31,500 --> 00:01:38,250 Lines, or EPLs, Ethernet Virtual Private Lines, or EVPLs. 26 00:01:38,250 --> 00:01:43,290 The IETF refers to these as the Virtual Private Wire 27 00:01:43,290 --> 00:01:48,420 Service, which is how we referred to them earlier, VPWS. 28 00:01:48,420 --> 00:01:50,940 These Cisco-specific terms over here 29 00:01:50,940 --> 00:01:52,920 are actually pretty legacy. 30 00:01:52,920 --> 00:01:56,160 But they also did refer to these as Ethernet Wire 31 00:01:56,160 --> 00:02:01,980 Service, or EWS, and Ethernet Relay Service, or ERS. 32 00:02:01,980 --> 00:02:07,200 The multipoints are referred to as Transparent LAN Service, 33 00:02:07,200 --> 00:02:14,310 or TLS, Ethernet Virtual Connection Service, or EVCS. 34 00:02:14,310 --> 00:02:16,260 Of course, again, earlier, we used 35 00:02:16,260 --> 00:02:20,670 this term, the Virtual Private Lan Service, VPLS. 36 00:02:20,670 --> 00:02:26,040 And once again, Cisco call these Ethernet Multipoint Service, 37 00:02:26,040 --> 00:02:32,400 or EMS, or Ethernet Relay Multipoint Service, ERMS. 38 00:02:32,400 --> 00:02:34,830 So again, there's two major types-- 39 00:02:34,830 --> 00:02:38,040 the point to point and the multipoint. 40 00:02:38,040 --> 00:02:42,150 And even though we've been using the IETF phrasing up 41 00:02:42,150 --> 00:02:46,740 until now, actually, the MEF names 42 00:02:46,740 --> 00:02:49,980 are more commonly used today. 43 00:02:49,980 --> 00:02:51,660 Again, the one I would say is really not 44 00:02:51,660 --> 00:02:54,810 used at all is pretty much the Cisco terms. 45 00:02:54,810 --> 00:03:01,140 But I would probably be familiar with the terms E-Line and VPWS 46 00:03:01,140 --> 00:03:07,230 as well as E-LAN and VPLS, and know that those are effectively 47 00:03:07,230 --> 00:03:09,340 the same thing. 48 00:03:09,340 --> 00:03:12,250 Something else that's a bit important to discuss here, 49 00:03:12,250 --> 00:03:14,230 as we're talking about connections 50 00:03:14,230 --> 00:03:16,840 with the customer and different VPN types, 51 00:03:16,840 --> 00:03:20,560 is the flexible ethernet mapping. 52 00:03:20,560 --> 00:03:23,110 Effectively, what this does is it 53 00:03:23,110 --> 00:03:29,290 allows us to process and classify various Ethernet frame 54 00:03:29,290 --> 00:03:30,220 types. 55 00:03:30,220 --> 00:03:33,130 We can do this either by EtherType field-- 56 00:03:33,130 --> 00:03:39,040 so maybe IPv4 versus IPv6, something along those lines. 57 00:03:39,040 --> 00:03:42,340 Very commonly, we do this with a VLAN tag 58 00:03:42,340 --> 00:03:44,770 to distinguish different types of traffic. 59 00:03:44,770 --> 00:03:48,650 And we can also do it with the Class of Service field, 60 00:03:48,650 --> 00:03:52,780 which is, of course, generally used for QoS. 61 00:03:52,780 --> 00:03:54,490 Now, the reason this is important 62 00:03:54,490 --> 00:03:57,580 to our current discussion of VPN type 63 00:03:57,580 --> 00:04:01,240 is I could actually offer different VPN 64 00:04:01,240 --> 00:04:05,500 types to the customer and have just one physical link going 65 00:04:05,500 --> 00:04:07,270 out to that customer. 66 00:04:07,270 --> 00:04:10,420 This service allows me to differentiate 67 00:04:10,420 --> 00:04:14,380 between the traffic coming in on the interface from the customer 68 00:04:14,380 --> 00:04:16,720 and therefore treat it differently. 69 00:04:16,720 --> 00:04:20,140 Maybe it goes into one VPN that gets one type of treatment 70 00:04:20,140 --> 00:04:23,720 or a different VPN that gets a different type of treatment. 71 00:04:23,720 --> 00:04:26,560 Maybe it's different types of VPNs. 72 00:04:26,560 --> 00:04:30,070 So it's important to be able to distinguish the traffic coming 73 00:04:30,070 --> 00:04:32,950 from the customer in order to be able to put it 74 00:04:32,950 --> 00:04:35,770 into the correct VPN based on the service 75 00:04:35,770 --> 00:04:37,860 that they've requested. 76 00:04:37,860 --> 00:04:41,540 Now, on the Cisco ASR 9000 Series 77 00:04:41,540 --> 00:04:44,390 and a couple of other platforms, this 78 00:04:44,390 --> 00:04:49,640 is referred to as an Ethernet Flow Point, or an EFP. 79 00:04:49,640 --> 00:04:52,970 Each of these flows from the customer-- 80 00:04:52,970 --> 00:04:55,100 or you could call it the access side-- 81 00:04:55,100 --> 00:05:00,980 is mapped or connected to a service on the trunk side. 82 00:05:00,980 --> 00:05:03,800 This is what's allowing us to offer different services, 83 00:05:03,800 --> 00:05:07,940 maybe put them into a separate VPN, that sort of thing. 84 00:05:07,940 --> 00:05:12,170 The Customer Equipment or the CE, device 85 00:05:12,170 --> 00:05:15,090 connects to the carrier Ethernet network, 86 00:05:15,090 --> 00:05:17,660 which is, of course, the service provider network, 87 00:05:17,660 --> 00:05:23,510 using the UNI, or the User-Network Interface. 88 00:05:23,510 --> 00:05:27,410 The UNI is essentially the interface facing the customer. 89 00:05:27,410 --> 00:05:30,210 That would be on the PE router. 90 00:05:30,210 --> 00:05:34,580 And we did mention this before that the attachment circuit 91 00:05:34,580 --> 00:05:40,110 is between the CE and the UNI or the PE interface. 92 00:05:40,110 --> 00:05:42,180 So again, the two major types-- 93 00:05:42,180 --> 00:05:46,830 first, we have the point to point, or the E-Line. 94 00:05:46,830 --> 00:05:50,720 This can actually either be locally connected, which 95 00:05:50,720 --> 00:05:55,250 would be two EFPs on the same platform using 96 00:05:55,250 --> 00:05:58,850 native Ethernet-- so basically, if you had a customer connected 97 00:05:58,850 --> 00:06:01,910 to the same PE and you needed to connect their two 98 00:06:01,910 --> 00:06:03,470 sites together. 99 00:06:03,470 --> 00:06:05,390 More commonly, of course, we would 100 00:06:05,390 --> 00:06:07,830 be doing Ethernet over MPLS. 101 00:06:07,830 --> 00:06:12,170 This is going to involve those two EFPs but this time 102 00:06:12,170 --> 00:06:14,150 on different platforms. 103 00:06:14,150 --> 00:06:16,640 And the connection between them is 104 00:06:16,640 --> 00:06:20,690 going to be using Pseudo Wires, or PWs. 105 00:06:20,690 --> 00:06:23,810 So that's two different ways of offering the customer 106 00:06:23,810 --> 00:06:25,940 a point-to-point connection. 107 00:06:25,940 --> 00:06:31,160 For point to multipoint, or E-LAN, again, 108 00:06:31,160 --> 00:06:33,090 there's still sort of two ways. 109 00:06:33,090 --> 00:06:36,230 One is we could do local bridging. 110 00:06:36,230 --> 00:06:41,850 This would be two or more EFPs on the same platform. 111 00:06:41,850 --> 00:06:44,510 And it's going to use, again, native Ethernet. 112 00:06:44,510 --> 00:06:48,300 But we're going to put this into a bridge domain. 113 00:06:48,300 --> 00:06:50,720 If you're not familiar with a bridge domain, 114 00:06:50,720 --> 00:06:55,590 it's effectively a layer 2 broadcast domain. 115 00:06:55,590 --> 00:06:59,780 This is actually very similar in concept to a VLAN. 116 00:06:59,780 --> 00:07:02,780 But it's just a construct on the device that 117 00:07:02,780 --> 00:07:06,650 lets us put multiple interfaces into a single layer 118 00:07:06,650 --> 00:07:09,560 2 environment, where all the devices can communicate 119 00:07:09,560 --> 00:07:11,570 with each other without necessarily 120 00:07:11,570 --> 00:07:15,410 carrying that stigma of a VLAN or a VLAN tag. 121 00:07:15,410 --> 00:07:17,900 But overall, it's the same sort of idea 122 00:07:17,900 --> 00:07:21,410 that they're all in the same layer 2 broadcast domain. 123 00:07:21,410 --> 00:07:24,410 When we get to VPLS bridging, we'll 124 00:07:24,410 --> 00:07:28,190 notice, once again, it's almost the same idea here, 125 00:07:28,190 --> 00:07:31,670 where it's two or more EFPs. 126 00:07:31,670 --> 00:07:35,370 This time, of course, they're on the different platforms. 127 00:07:35,370 --> 00:07:38,660 But they're also in a bridge domain. 128 00:07:38,660 --> 00:07:43,760 These are then connected with a full mesh of those pseudo 129 00:07:43,760 --> 00:07:44,840 wires. 130 00:07:44,840 --> 00:07:49,260 That's what's going to make it a multipoint connection. 131 00:07:49,260 --> 00:07:53,040 So in this video, we took a more detailed look 132 00:07:53,040 --> 00:07:57,780 at the different types of VPNs that we have available. 133 00:07:57,780 --> 00:07:59,910 Just to be very generic about it, 134 00:07:59,910 --> 00:08:06,090 it's essentially point-to-point or multipoint layer 2 VPNs. 135 00:08:06,090 --> 00:08:08,860 Those are our two major categories. 136 00:08:08,860 --> 00:08:11,310 So now it's going to be time to jump into more 137 00:08:11,310 --> 00:08:14,110 detail on each one of those. 138 00:08:14,110 --> 00:08:16,830 So we're going to start with VPLS. 139 00:08:16,830 --> 00:08:18,330 We're going to start off by talking 140 00:08:18,330 --> 00:08:21,450 about the details on that type of VPN. 141 00:08:21,450 --> 00:08:24,400 And that's exactly what we're going to do next. 142 00:08:24,400 --> 00:08:27,780 Until then, I hope this has been informative for you, 143 00:08:27,780 --> 00:08:30,920 and I'd like to thank you for viewing. 144 00:08:30,920 --> 00:08:34,000