1
00:00:00,000 --> 00:00:03,824
[AUDIO LOGO]

2
00:00:03,824 --> 00:00:08,130

3
00:00:08,130 --> 00:00:10,770
So now that we've
optimized our network core,

4
00:00:10,770 --> 00:00:12,570
we're now ready
to actually start

5
00:00:12,570 --> 00:00:15,450
setting up our layer 3 VPN.

6
00:00:15,450 --> 00:00:19,740
Now, the steps needed to do this
can be done in whatever order

7
00:00:19,740 --> 00:00:21,270
you want, for the most part.

8
00:00:21,270 --> 00:00:22,920
But what we're
going to do is we're

9
00:00:22,920 --> 00:00:26,980
going to start by creating the
VRFs apps on the PE routers.

10
00:00:26,980 --> 00:00:29,880
So let's start by taking
a look at our goals,

11
00:00:29,880 --> 00:00:31,680
planning out what
we're going to do.

12
00:00:31,680 --> 00:00:33,840
Then of course, we'll
look at the diagram

13
00:00:33,840 --> 00:00:36,360
to make sure we know what
we need to configure where.

14
00:00:36,360 --> 00:00:38,070
And then we'll jump
into the command line

15
00:00:38,070 --> 00:00:41,910
and get our VRFs up and running.

16
00:00:41,910 --> 00:00:45,680
So the overall goal here
is we need to configure

17
00:00:45,680 --> 00:00:48,980
VRFs for each of our customers.

18
00:00:48,980 --> 00:00:52,327
We're going to have customer
A and customer B. So

19
00:00:52,327 --> 00:00:54,660
what we're going to do is
we're going to configure route

20
00:00:54,660 --> 00:00:58,980
distinguisher 100:10
for customer A

21
00:00:58,980 --> 00:01:06,610
and 100:20 for customer
B. For the route targets,

22
00:01:06,610 --> 00:01:16,030
we'll use 100:1000 for customer
A and 100:2000 for customer B.

23
00:01:16,030 --> 00:01:17,890
Now, there's really
no good reason

24
00:01:17,890 --> 00:01:21,730
to make the route target
and the route distinguisher

25
00:01:21,730 --> 00:01:24,350
different in these examples.

26
00:01:24,350 --> 00:01:26,500
The only reason we're
really making them different

27
00:01:26,500 --> 00:01:30,220
is simply to demonstrate
that the route distinguisher

28
00:01:30,220 --> 00:01:33,370
and the route target
really don't have anything

29
00:01:33,370 --> 00:01:35,860
to do with each other
and that they're two

30
00:01:35,860 --> 00:01:38,470
completely independent numbers.

31
00:01:38,470 --> 00:01:41,200
Normally, these might
be kept the same.

32
00:01:41,200 --> 00:01:43,930
But the point is they have
nothing to do with each other.

33
00:01:43,930 --> 00:01:47,810
And therefore, they don't have
to match or anything like that.

34
00:01:47,810 --> 00:01:51,020
So now let's jump over and
take a look at our topology.

35
00:01:51,020 --> 00:01:54,770
So VRFs, of course, get
configured on the PE devices.

36
00:01:54,770 --> 00:01:59,110
So this will be
routers 1, 2, and 5.

37
00:01:59,110 --> 00:02:03,490
On router 1 here, we're going
to need a VRF for customer A.

38
00:02:03,490 --> 00:02:05,350
On router 5, we're
actually going

39
00:02:05,350 --> 00:02:08,680
to build two VRFs
for customer A.

40
00:02:08,680 --> 00:02:13,150
So we'll make these
customer A1 and customer A2.

41
00:02:13,150 --> 00:02:14,890
And then on router
2, we're going

42
00:02:14,890 --> 00:02:18,760
to need a VRF for
customer B. And router 5,

43
00:02:18,760 --> 00:02:22,070
we'll need a VRF for
customer B as well.

44
00:02:22,070 --> 00:02:25,060
We can also see here, of course,
the interfaces on each router

45
00:02:25,060 --> 00:02:27,130
that we need to put
into those VRFs.

46
00:02:27,130 --> 00:02:29,360
But we'll do that as we go.

47
00:02:29,360 --> 00:02:31,610
So let's go ahead and jump
into the command line.

48
00:02:31,610 --> 00:02:32,830
We'll start on router 1.

49
00:02:32,830 --> 00:02:35,620

50
00:02:35,620 --> 00:02:38,800
So let's start by
creating the VRF itself.

51
00:02:38,800 --> 00:02:42,190
We'll just create
VRF Customer A. Next,

52
00:02:42,190 --> 00:02:44,410
we'll set the route
distinguisher.

53
00:02:44,410 --> 00:02:47,640
We said we were
going to use 100:10.

54
00:02:47,640 --> 00:02:49,710
Next, we'll go into
our address family

55
00:02:49,710 --> 00:02:52,830
specifically for IPv4 unicast.

56
00:02:52,830 --> 00:02:55,090
And we'll set up
our route targets.

57
00:02:55,090 --> 00:02:57,090
So we're just going to
use the same route target

58
00:02:57,090 --> 00:02:59,400
for importing and exporting.

59
00:02:59,400 --> 00:03:02,040
So we'll say import
route-target.

60
00:03:02,040 --> 00:03:04,770
And we can simply put
the number right here--

61
00:03:04,770 --> 00:03:07,080
100:1000.

62
00:03:07,080 --> 00:03:10,020
And we'll do the same
thing for the export.

63
00:03:10,020 --> 00:03:13,080
So again, we'll just import and
export the same two numbers.

64
00:03:13,080 --> 00:03:16,050
And just to get
this ready for IPv6,

65
00:03:16,050 --> 00:03:20,370
we'll do the exact same thing
but for address-family ipv6.

66
00:03:20,370 --> 00:03:22,470
And we will actually
use the same import

67
00:03:22,470 --> 00:03:24,463
and export route targets.

68
00:03:24,463 --> 00:03:26,130
Let's go ahead and
commit those changes,

69
00:03:26,130 --> 00:03:28,240
make sure we don't
have any errors.

70
00:03:28,240 --> 00:03:29,890
So we see that that
was successful.

71
00:03:29,890 --> 00:03:31,740
Now let's go into
our interfaces.

72
00:03:31,740 --> 00:03:35,250
Here it's going to be
interface gig 0/0/0/0.

73
00:03:35,250 --> 00:03:38,340
We'll put this in
the VRF Customer A.

74
00:03:38,340 --> 00:03:43,110
And if we commit this and we
look at our interface again,

75
00:03:43,110 --> 00:03:46,420
notice that there's
no IP address on it.

76
00:03:46,420 --> 00:03:48,090
It's also shut down.

77
00:03:48,090 --> 00:03:50,770
This interface was
not yet configured.

78
00:03:50,770 --> 00:03:53,880
So let's go ahead and finish
up that configuration.

79
00:03:53,880 --> 00:03:56,970
For now, we'll just
put on an IPv4 address.

80
00:03:56,970 --> 00:04:00,570
This is going to be 16.1
going towards router 6.

81
00:04:00,570 --> 00:04:02,760
And we'll just make it a /24.

82
00:04:02,760 --> 00:04:05,220
We'll also bring
that interface up.

83
00:04:05,220 --> 00:04:07,170
Commit those changes.

84
00:04:07,170 --> 00:04:09,840
And we should see the
interface come up.

85
00:04:09,840 --> 00:04:12,930
So just to wrap up with
some verification here,

86
00:04:12,930 --> 00:04:15,780
let's do a show ip
interface brief.

87
00:04:15,780 --> 00:04:19,260
And what we see on this output
is that our gigabit 0/0/0/0

88
00:04:19,260 --> 00:04:22,560
interface not only has
the IP address we gave it.

89
00:04:22,560 --> 00:04:24,750
But we can also
see here that it is

90
00:04:24,750 --> 00:04:27,900
in the VRF called Customer A.

91
00:04:27,900 --> 00:04:30,390
We can also do a show vrf all.

92
00:04:30,390 --> 00:04:34,590
This will show us that the VRF
Customer A has been configured.

93
00:04:34,590 --> 00:04:37,020
It has the route
distinguisher that we gave it.

94
00:04:37,020 --> 00:04:39,540
And we can see that
it has the import

95
00:04:39,540 --> 00:04:46,900
and export route targets set
both for IPv4 and IPv6 unicast.

96
00:04:46,900 --> 00:04:49,270
So it looks like router 1
is configured correctly.

97
00:04:49,270 --> 00:04:52,010
Let's hop over and do router 2.

98
00:04:52,010 --> 00:04:55,490
Router 2 here is going to be
very similar, except our VRF is

99
00:04:55,490 --> 00:04:58,880
going to be named Customer
B. And of course, it

100
00:04:58,880 --> 00:05:00,860
will use a few
different numbers.

101
00:05:00,860 --> 00:05:05,030
First, we'll set the router
distinguisher to the 100:20.

102
00:05:05,030 --> 00:05:07,590
That's what we said
we were going to use.

103
00:05:07,590 --> 00:05:11,360
We'll go into our
address-family for ipv4 unicast.

104
00:05:11,360 --> 00:05:16,280
We'll set our import route
target to be 100:2000.

105
00:05:16,280 --> 00:05:18,710
And we'll do the
same for export.

106
00:05:18,710 --> 00:05:21,980
Once again, we'll do
it for IPv6 as well.

107
00:05:21,980 --> 00:05:23,530
Commit the changes.

108
00:05:23,530 --> 00:05:25,280
Just make sure everything
works correctly.

109
00:05:25,280 --> 00:05:26,550
We're good.

110
00:05:26,550 --> 00:05:30,170
This, again, is going to
be interface gig 0/0/0/0.

111
00:05:30,170 --> 00:05:32,150
We'll put it in our VRF.

112
00:05:32,150 --> 00:05:35,160
Once again, there's no
IPv4 address on this.

113
00:05:35,160 --> 00:05:38,060
So we're going to
do the 192.168.

114
00:05:38,060 --> 00:05:40,280
And this is going to
be .27 because it's

115
00:05:40,280 --> 00:05:42,020
between routers 2 and 7.

116
00:05:42,020 --> 00:05:45,230
And this side is going to be .2.

117
00:05:45,230 --> 00:05:47,820
Once again, this will be a /24.

118
00:05:47,820 --> 00:05:48,950
Bring the interface up.

119
00:05:48,950 --> 00:05:51,200
And commit our changes.

120
00:05:51,200 --> 00:05:53,300
Let us do our show
ip interface brief.

121
00:05:53,300 --> 00:05:57,740
And we see that we have our
interface gig 0/0/0/0 with

122
00:05:57,740 --> 00:06:01,580
the correct IP address
and, again, in Customer B.

123
00:06:01,580 --> 00:06:04,020
So this looks like
router 2 is correct.

124
00:06:04,020 --> 00:06:07,190
So let's go ahead and
move on to router 5.

125
00:06:07,190 --> 00:06:11,520
Now, on IOS XE, the syntax is
just a little bit different.

126
00:06:11,520 --> 00:06:15,727
We say vrf definition and
then give it the name.

127
00:06:15,727 --> 00:06:17,810
Now, remember, here we're
going to want a customer

128
00:06:17,810 --> 00:06:20,780
A1 and a customer A2.

129
00:06:20,780 --> 00:06:23,400
We still specify our route
distinguisher right here.

130
00:06:23,400 --> 00:06:24,500
And we'll make this 100.

131
00:06:24,500 --> 00:06:25,958
Let's make these
a little different

132
00:06:25,958 --> 00:06:28,010
since they're going to be
two different customers

133
00:06:28,010 --> 00:06:29,510
on the same router.

134
00:06:29,510 --> 00:06:31,100
Let's actually make these 11.

135
00:06:31,100 --> 00:06:34,190
So we'll make a change on
the fly here a little bit.

136
00:06:34,190 --> 00:06:36,710
And then we'll set up
our route target's.

137
00:06:36,710 --> 00:06:39,500
Here its route-target export.

138
00:06:39,500 --> 00:06:41,300
And then we'll
put in the number.

139
00:06:41,300 --> 00:06:44,330
Again, this should be 100:1000.

140
00:06:44,330 --> 00:06:49,760
We'll do the same
thing but for import.

141
00:06:49,760 --> 00:06:52,940
And then we have to activate
our address families.

142
00:06:52,940 --> 00:06:56,990
If I just said do show
vrf here on IOS XE,

143
00:06:56,990 --> 00:07:00,980
notice it's created
the VRF Customer A1.

144
00:07:00,980 --> 00:07:03,290
And it's put on the
route distinguisher.

145
00:07:03,290 --> 00:07:07,700
But notice, under Protocols,
unlike our management VRF,

146
00:07:07,700 --> 00:07:10,550
which I have created just
for our lab environment here,

147
00:07:10,550 --> 00:07:14,000
of course, which is
enabled for IPv4, well,

148
00:07:14,000 --> 00:07:16,430
this one is enabled for nothing.

149
00:07:16,430 --> 00:07:21,860
We have to actually say
address-family ipv4 and

150
00:07:21,860 --> 00:07:26,570
address-family ipv6 if
we want to enable those.

151
00:07:26,570 --> 00:07:30,380
If we look at our
VRFs again, we see now

152
00:07:30,380 --> 00:07:35,720
that IPv4 and IPv6 are
enabled for that VRF.

153
00:07:35,720 --> 00:07:37,910
So just to be
clear, we don't have

154
00:07:37,910 --> 00:07:41,270
to actually configure anything
under those address families.

155
00:07:41,270 --> 00:07:46,220
But we do have to at least
type address-family ipv4 and/or

156
00:07:46,220 --> 00:07:51,810
address-family ipv6 to enable
the address family in the VRF.

157
00:07:51,810 --> 00:07:55,100
So now let's go ahead
and create our other VRF.

158
00:07:55,100 --> 00:07:57,455
And we can use a lot of
command history for this.

159
00:07:57,455 --> 00:08:00,230
This is just going to be A2.

160
00:08:00,230 --> 00:08:02,210
Next thing, of course,
would be we go back

161
00:08:02,210 --> 00:08:04,190
to the route distinguisher.

162
00:08:04,190 --> 00:08:06,860
And let's go ahead
and make this one 12.

163
00:08:06,860 --> 00:08:10,170
Now, the route targets, of
course, will be the same.

164
00:08:10,170 --> 00:08:13,640
So we'll set up our export
and our import route targets.

165
00:08:13,640 --> 00:08:15,920
And then we'll do
our address families.

166
00:08:15,920 --> 00:08:18,710
As you can see, technically, we
don't have to hit exit there.

167
00:08:18,710 --> 00:08:20,330
It just makes it a
little bit cleaner

168
00:08:20,330 --> 00:08:21,480
when you're typing it in.

169
00:08:21,480 --> 00:08:22,610
But we don't have to.

170
00:08:22,610 --> 00:08:25,370
If we say do show
vrf now, we can

171
00:08:25,370 --> 00:08:28,520
see that we have our Customer
2 using the other route

172
00:08:28,520 --> 00:08:29,360
distinguisher.

173
00:08:29,360 --> 00:08:31,920
And it still has both protocols.

174
00:08:31,920 --> 00:08:35,090
So the last one we have to
create here is Customer B.

175
00:08:35,090 --> 00:08:38,198
And again, we can still use
a bit of our command history.

176
00:08:38,198 --> 00:08:39,740
Of course, we're
going to change this

177
00:08:39,740 --> 00:08:42,960
to Customer B. The route
distinguisher is, of course,

178
00:08:42,960 --> 00:08:43,919
going to be different.

179
00:08:43,919 --> 00:08:46,250
It's going to be 100:20.

180
00:08:46,250 --> 00:08:48,350
And our import and
export route targets

181
00:08:48,350 --> 00:08:50,670
are going to change as well.

182
00:08:50,670 --> 00:08:53,430
But we just have to
change the one number.

183
00:08:53,430 --> 00:08:55,370
So we can just change that.

184
00:08:55,370 --> 00:08:56,280
Change that.

185
00:08:56,280 --> 00:08:57,360
And we're going to go.

186
00:08:57,360 --> 00:09:00,080
And then, of course, it's
our address families.

187
00:09:00,080 --> 00:09:01,320
They're going to be the same.

188
00:09:01,320 --> 00:09:04,220
So we can just command
history those as well.

189
00:09:04,220 --> 00:09:06,000
Do our show vrf again.

190
00:09:06,000 --> 00:09:09,680
And we see that now we have our
Customer A1, our Customer A2,

191
00:09:09,680 --> 00:09:12,650
our Customer B all with
the appropriate route

192
00:09:12,650 --> 00:09:16,880
distinguishers and with the
appropriate protocols enabled.

193
00:09:16,880 --> 00:09:20,280
What we don't have yet
are the interfaces.

194
00:09:20,280 --> 00:09:22,850
So let's go ahead
and configure those.

195
00:09:22,850 --> 00:09:27,140
On router 5, we'll start
with interface gigabit 2.

196
00:09:27,140 --> 00:09:32,270
The way we configure this on
IOS XE is we say vrf forwarding,

197
00:09:32,270 --> 00:09:34,500
and then list the VRF.

198
00:09:34,500 --> 00:09:37,250
So this would be Customer A1.

199
00:09:37,250 --> 00:09:40,170
We put on our IP address.

200
00:09:40,170 --> 00:09:44,700
Just as another quick note here,
if these interfaces already

201
00:09:44,700 --> 00:09:47,430
had IP addresses on them--

202
00:09:47,430 --> 00:09:49,590
I'm sure you've probably
done this before--

203
00:09:49,590 --> 00:09:53,950
as soon as you put it in a VRF,
it will remove that IP address.

204
00:09:53,950 --> 00:09:56,760
So that's sort of why
in our preconfiguration,

205
00:09:56,760 --> 00:09:59,470
I didn't even bother to
configure these interfaces.

206
00:09:59,470 --> 00:10:02,550
But if there was an address
already, it would remove it.

207
00:10:02,550 --> 00:10:04,680
And we would just have
to put it back on,

208
00:10:04,680 --> 00:10:06,990
assuming we wanted the
same IP address on it.

209
00:10:06,990 --> 00:10:10,900
Or of course, put on whatever
new IP address you want to use.

210
00:10:10,900 --> 00:10:16,860
So again, this is going
to be 192.168.58.5.

211
00:10:16,860 --> 00:10:18,960
Once again a /24.

212
00:10:18,960 --> 00:10:21,270
And we'll do a no shut.

213
00:10:21,270 --> 00:10:24,390
Using our command history,
we can just do gigabit 3.

214
00:10:24,390 --> 00:10:28,195
This is going to
be VRF Customer A2.

215
00:10:28,195 --> 00:10:30,570
And we can even do the command
history for the IP address

216
00:10:30,570 --> 00:10:32,590
here because it's going
to be very similar.

217
00:10:32,590 --> 00:10:36,240
Instead of 58, it's simply 59.

218
00:10:36,240 --> 00:10:37,740
We'll do our no shut.

219
00:10:37,740 --> 00:10:41,010
And finally, interface gig 4.

220
00:10:41,010 --> 00:10:45,030
This is in VRF Customer
B. And even its IP address

221
00:10:45,030 --> 00:10:46,840
is not that different.

222
00:10:46,840 --> 00:10:50,730
It's in 51.5 /24.

223
00:10:50,730 --> 00:10:53,280
Once again, a no shut.

224
00:10:53,280 --> 00:10:55,750
And we'll exit configuration.

225
00:10:55,750 --> 00:10:58,380
Now, let's do a show
ip interface brief.

226
00:10:58,380 --> 00:11:01,230
One thing to note
is that on IOS XE,

227
00:11:01,230 --> 00:11:04,200
notice that the show ip
interface brief does not

228
00:11:04,200 --> 00:11:08,620
show the VRF like IOS XR did.

229
00:11:08,620 --> 00:11:10,350
Now, what we can
see, of course, is

230
00:11:10,350 --> 00:11:14,430
that we've put the correct IP
addresses on interfaces 2, 3,

231
00:11:14,430 --> 00:11:17,350
and 4, and that they are up, up.

232
00:11:17,350 --> 00:11:20,370
But if we do a show
vrf, this is where

233
00:11:20,370 --> 00:11:24,840
we can see which interfaces
are actually in which VRFs.

234
00:11:24,840 --> 00:11:27,840
We can see over on the
right, the gigabit 2

235
00:11:27,840 --> 00:11:31,770
is in Customer A1;
gigabit 3, Customer A2;

236
00:11:31,770 --> 00:11:36,460
and gigabit 4 is in Customer
B. Gigabit 5, of course,

237
00:11:36,460 --> 00:11:39,480
is simply what we're using
for management of our lab

238
00:11:39,480 --> 00:11:42,470
environment.

239
00:11:42,470 --> 00:11:44,920
So in this video,
we went through,

240
00:11:44,920 --> 00:11:49,390
and we set up all the VRFs
for customer A and customer B.

241
00:11:49,390 --> 00:11:52,630
We put the correct
interfaces into those VRFs,

242
00:11:52,630 --> 00:11:55,780
made sure the proper address
families were enabled.

243
00:11:55,780 --> 00:12:00,490
And we put our IPv4 addresses
on those interfaces.

244
00:12:00,490 --> 00:12:02,410
We then, of course,
did a few commands

245
00:12:02,410 --> 00:12:06,190
to verify that the VRFs
were configured properly.

246
00:12:06,190 --> 00:12:09,340
Our next step for
configuring layer 3 VPN

247
00:12:09,340 --> 00:12:13,670
will be to configure
multiprotocol BGP in the core.

248
00:12:13,670 --> 00:12:16,310
And that's exactly
what we get to do next.

249
00:12:16,310 --> 00:12:19,690
Until then, I hope this has
been informative for you,

250
00:12:19,690 --> 00:12:22,740
and I'd like to thank
you for viewing.

251
00:12:22,740 --> 00:12:26,000