1 00:00:00,000 --> 00:00:03,792 [AUDIO LOGO] 2 00:00:03,792 --> 00:00:08,070 3 00:00:08,070 --> 00:00:11,160 Now that we have our customer VRFs configured, 4 00:00:11,160 --> 00:00:14,820 it's time to set up and configure multi-protocol BGP 5 00:00:14,820 --> 00:00:19,230 in our core network between our route reflector and our PE 6 00:00:19,230 --> 00:00:20,340 routers. 7 00:00:20,340 --> 00:00:23,250 Much like we did with the VRFs, we'll 8 00:00:23,250 --> 00:00:25,170 go ahead and configure this to support 9 00:00:25,170 --> 00:00:29,190 IPv4 and IPv6 at the same time. 10 00:00:29,190 --> 00:00:32,670 And we'll go ahead and use some peer templates and such 11 00:00:32,670 --> 00:00:36,160 to make this a little bit easier to configure as we go. 12 00:00:36,160 --> 00:00:40,620 So as per usual, let's take a look at our topology diagram, 13 00:00:40,620 --> 00:00:42,990 draw out what we're going to be building, and then 14 00:00:42,990 --> 00:00:46,800 jump into the command line and get multi-protocol BGP up 15 00:00:46,800 --> 00:00:49,288 and running. 16 00:00:49,288 --> 00:00:50,830 So what we're going to be configuring 17 00:00:50,830 --> 00:00:53,540 in this part of our demonstration, 18 00:00:53,540 --> 00:00:56,080 we're going to be configuring multi-protocol BGP 19 00:00:56,080 --> 00:01:01,480 neighborships between router 1, router 2, router 20 00:01:01,480 --> 00:01:04,730 5, and the route reflector. 21 00:01:04,730 --> 00:01:08,080 So our logical IBGP neighborships 22 00:01:08,080 --> 00:01:11,300 will look like our orange lines here. 23 00:01:11,300 --> 00:01:14,350 So let's go ahead and jump into the command line. 24 00:01:14,350 --> 00:01:17,380 This time, we'll start on router reflector 1. 25 00:01:17,380 --> 00:01:20,320 26 00:01:20,320 --> 00:01:23,870 So let's begin by configuring BGP. 27 00:01:23,870 --> 00:01:25,580 We have to create the actual instance, 28 00:01:25,580 --> 00:01:28,120 so we'll do router bgp 100. 29 00:01:28,120 --> 00:01:30,850 We'll set our bgp router-id. 30 00:01:30,850 --> 00:01:32,530 The route reflector is essentially 31 00:01:32,530 --> 00:01:35,120 acting as router 12 in our environment, 32 00:01:35,120 --> 00:01:39,790 so we'll set the router ID to 10.12.12.12, which is also 33 00:01:39,790 --> 00:01:41,650 its loopback interface that we're going 34 00:01:41,650 --> 00:01:44,190 to be using for our peering. 35 00:01:44,190 --> 00:01:47,790 Now something else we can do to optimize our environment here, 36 00:01:47,790 --> 00:01:52,620 we can actually disable the default IPv4 address 37 00:01:52,620 --> 00:01:55,440 family on iOS XE. 38 00:01:55,440 --> 00:02:01,650 We don't need to form a BGP neighborship for IPv4, just 39 00:02:01,650 --> 00:02:05,820 for VPNv4 and VPNv6. 40 00:02:05,820 --> 00:02:08,800 Now this step isn't entirely necessary, 41 00:02:08,800 --> 00:02:10,650 but if we're not going to be doing 42 00:02:10,650 --> 00:02:14,790 regular IPv4 routes in our core, then there's 43 00:02:14,790 --> 00:02:17,760 really no need for that extra neighborship. 44 00:02:17,760 --> 00:02:21,240 So let's go ahead and just turn that off. 45 00:02:21,240 --> 00:02:25,260 It's simply no bgp default ipv4. 46 00:02:25,260 --> 00:02:30,110 Now the next thing we want to do is create some peer templates. 47 00:02:30,110 --> 00:02:32,270 So the first thing we'll do is we'll create 48 00:02:32,270 --> 00:02:35,600 a template for our peer-policy. 49 00:02:35,600 --> 00:02:39,710 And we'll just call this PP_PE for Peer-Policy 50 00:02:39,710 --> 00:02:42,800 towards our Provider Edge routers. 51 00:02:42,800 --> 00:02:46,940 What things do we need to say towards the PEs? 52 00:02:46,940 --> 00:02:49,100 Well, one thing we're going to need 53 00:02:49,100 --> 00:02:51,470 is to say that they're route-reflector-clients, 54 00:02:51,470 --> 00:02:54,260 since this is the route reflector. 55 00:02:54,260 --> 00:02:57,110 The other thing we have to do is configure this 56 00:02:57,110 --> 00:02:59,150 to send communities. 57 00:02:59,150 --> 00:03:02,030 We'll go ahead and configure it to send both communities, 58 00:03:02,030 --> 00:03:05,450 extended and standard, even though we only really need 59 00:03:05,450 --> 00:03:09,960 extended to support our layer 3 VPNs. 60 00:03:09,960 --> 00:03:11,400 The next thing we're going to need 61 00:03:11,400 --> 00:03:14,040 is a peer-session template. 62 00:03:14,040 --> 00:03:17,610 We'll call this PS_PE for Peer-Session 63 00:03:17,610 --> 00:03:19,680 to the Provider Edges. 64 00:03:19,680 --> 00:03:22,110 Things we want to configure in here 65 00:03:22,110 --> 00:03:25,110 is that they are in remote-as 100. 66 00:03:25,110 --> 00:03:28,740 And we'll set the update-source to lo0. 67 00:03:28,740 --> 00:03:31,740 So this should take care of our peer templates, 68 00:03:31,740 --> 00:03:35,213 both for the policy and for the session. 69 00:03:35,213 --> 00:03:36,630 Now all we have to do is configure 70 00:03:36,630 --> 00:03:39,760 our neighbors to actually use these templates. 71 00:03:39,760 --> 00:03:43,650 So we'll start with nei 10.1.1.1, which is router 1. 72 00:03:43,650 --> 00:03:49,230 And we will tell it to inherit peer-session PS_PE. 73 00:03:49,230 --> 00:03:54,870 We have to repeat the same thing for router 2 and router 5. 74 00:03:54,870 --> 00:03:58,560 Next, we'll go into our address-family, specifically 75 00:03:58,560 --> 00:04:00,660 for vpnv4. 76 00:04:00,660 --> 00:04:05,040 First thing we have to do is activate our neighbors 77 00:04:05,040 --> 00:04:07,980 and tell it to inherit our peer-policy. 78 00:04:07,980 --> 00:04:11,500 We'll do both of these commands for all of the other routers, 79 00:04:11,500 --> 00:04:15,150 so router 2 and router 5. 80 00:04:15,150 --> 00:04:18,730 Now we want to configure this for IPv6 as well. 81 00:04:18,730 --> 00:04:22,740 But a real easy way to do that is if we say do sho run. 82 00:04:22,740 --> 00:04:24,978 And look for the section for BGP. 83 00:04:24,978 --> 00:04:26,520 What we're going to do is we're going 84 00:04:26,520 --> 00:04:29,010 to say address-family vpnv6. 85 00:04:29,010 --> 00:04:31,560 86 00:04:31,560 --> 00:04:33,000 And we're going to copy and paste 87 00:04:33,000 --> 00:04:35,880 this configuration because it's going to be the same. 88 00:04:35,880 --> 00:04:37,410 But before we do that, I also want 89 00:04:37,410 --> 00:04:42,690 to point out that notice that iOS XE went ahead and added 90 00:04:42,690 --> 00:04:47,280 that send-community extended on each of our neighbor statements 91 00:04:47,280 --> 00:04:49,860 for 1, 2, and 5. 92 00:04:49,860 --> 00:04:54,120 So I still like to put it in the peer-template 93 00:04:54,120 --> 00:04:55,660 just so it's there. 94 00:04:55,660 --> 00:04:58,050 But notice that iOS does take care 95 00:04:58,050 --> 00:05:02,460 of the send-community for us. 96 00:05:02,460 --> 00:05:05,870 Now what we want to do is copy and paste all of this 97 00:05:05,870 --> 00:05:08,520 into the VPNv6 section. 98 00:05:08,520 --> 00:05:11,480 So we'll simply highlight all of that configuration 99 00:05:11,480 --> 00:05:13,740 and simply paste it in. 100 00:05:13,740 --> 00:05:16,430 We'll do our sho run s bgp again. 101 00:05:16,430 --> 00:05:19,070 And we'll just make sure that all of that information 102 00:05:19,070 --> 00:05:22,250 went under VPNv6 as well as VPNv4 103 00:05:22,250 --> 00:05:24,488 so we can see that it's correct. 104 00:05:24,488 --> 00:05:26,030 We'll go ahead and exit configuration 105 00:05:26,030 --> 00:05:28,190 on the route reflector. 106 00:05:28,190 --> 00:05:31,020 And now let's go ahead and configure the clients. 107 00:05:31,020 --> 00:05:36,020 So here on router 1, again, router bgp 100. 108 00:05:36,020 --> 00:05:38,630 We'll set our BGP router ID. 109 00:05:38,630 --> 00:05:41,570 We'll activate our two address families. 110 00:05:41,570 --> 00:05:45,740 Then we'll configure our neighbor, which is 10.12.12.12. 111 00:05:45,740 --> 00:05:50,390 And for that neighbor, we'll set the remote-as to 100, 112 00:05:50,390 --> 00:05:53,750 set the update-source to our lo0 interface, 113 00:05:53,750 --> 00:05:55,670 and activate the address families 114 00:05:55,670 --> 00:05:57,830 for these individual neighbors. 115 00:05:57,830 --> 00:06:01,820 We'll commit those changes and exit configuration. 116 00:06:01,820 --> 00:06:05,120 We can also see here that neighbor 10.12.12.12 117 00:06:05,120 --> 00:06:07,190 has come up. 118 00:06:07,190 --> 00:06:08,960 Now router 2's configuration is going 119 00:06:08,960 --> 00:06:11,490 to be almost identical except, of course, 120 00:06:11,490 --> 00:06:13,880 for the BGP router ID, so we'll just 121 00:06:13,880 --> 00:06:15,335 go ahead and copy and paste. 122 00:06:15,335 --> 00:06:17,890 123 00:06:17,890 --> 00:06:20,020 So we have the configuration paste in. 124 00:06:20,020 --> 00:06:24,450 And once again, we see that router 12 has come up. 125 00:06:24,450 --> 00:06:27,850 Finally, let's configure router 5. 126 00:06:27,850 --> 00:06:31,930 At this point, we've configured BGP on iOS XE 127 00:06:31,930 --> 00:06:33,470 quite a few times. 128 00:06:33,470 --> 00:06:36,560 So although this is specific here, 129 00:06:36,560 --> 00:06:38,800 I think if we just paste the configuration in, 130 00:06:38,800 --> 00:06:41,480 we can just talk about what we've configured. 131 00:06:41,480 --> 00:06:44,090 So we'll paste in the configuration. 132 00:06:44,090 --> 00:06:46,730 So as we can see, the neighbor has come up here. 133 00:06:46,730 --> 00:06:48,880 And as far as the configuration, it's 134 00:06:48,880 --> 00:06:51,790 a fairly standard BGP configuration. 135 00:06:51,790 --> 00:06:56,890 We did turn off that default address family for iOS XE. 136 00:06:56,890 --> 00:06:59,260 And then, of course, we set up our neighbor 137 00:06:59,260 --> 00:07:03,430 10.12.12.12 with the remote-as, the update-source. 138 00:07:03,430 --> 00:07:05,770 And then, of course, we activated it 139 00:07:05,770 --> 00:07:10,840 and said send-community both under both the VPNv4 140 00:07:10,840 --> 00:07:13,820 and the VPNv6 address families. 141 00:07:13,820 --> 00:07:16,400 So this all looks really good. 142 00:07:16,400 --> 00:07:19,660 Let's do our verification up on the route reflector 143 00:07:19,660 --> 00:07:22,400 because it should see all the neighbors. 144 00:07:22,400 --> 00:07:24,550 So on the route reflector here, we'll simply 145 00:07:24,550 --> 00:07:30,730 do a sh bgp vpnv4 uni all summ. 146 00:07:30,730 --> 00:07:34,450 And we can see that we do, in fact, have neighbors 1, 2, 147 00:07:34,450 --> 00:07:38,560 and 5 currently up in AS 100. 148 00:07:38,560 --> 00:07:42,140 Now, again, we haven't sent any prefixes yet, 149 00:07:42,140 --> 00:07:45,140 so under the state prefix received field, of course, 150 00:07:45,140 --> 00:07:48,430 it's zeros, but this does indicate that our neighborships 151 00:07:48,430 --> 00:07:51,790 are up and working for VPNv4. 152 00:07:51,790 --> 00:07:56,260 We can do the exact same command simply change this v6. 153 00:07:56,260 --> 00:07:59,440 And we can see that those neighbors are ready to exchange 154 00:07:59,440 --> 00:08:02,330 address family VPNv6 as well. 155 00:08:02,330 --> 00:08:06,130 So that takes care of configuring multi-protocol BGP 156 00:08:06,130 --> 00:08:08,940 in our core. 157 00:08:08,940 --> 00:08:11,610 So in this video, we simply saw how 158 00:08:11,610 --> 00:08:15,240 to configure multi-protocol BGP in our core 159 00:08:15,240 --> 00:08:17,820 to support Layer 3 VPN. 160 00:08:17,820 --> 00:08:23,730 We set up support for both VPNv4 and VPNv6 addressing. 161 00:08:23,730 --> 00:08:26,640 We see it was really just the exact same config, 162 00:08:26,640 --> 00:08:29,250 just change which address family we're putting 163 00:08:29,250 --> 00:08:30,930 the configuration under. 164 00:08:30,930 --> 00:08:33,600 We also saw how to use our route reflector 165 00:08:33,600 --> 00:08:36,480 and how we can simplify the configuration there 166 00:08:36,480 --> 00:08:38,820 by using some peer templates. 167 00:08:38,820 --> 00:08:43,110 Now we're ready to set up our CE-PE protocol 168 00:08:43,110 --> 00:08:46,530 so we can actually start getting some routes from the customers 169 00:08:46,530 --> 00:08:48,640 to pass through to the other side. 170 00:08:48,640 --> 00:08:51,520 And that's exactly what we get to do next. 171 00:08:51,520 --> 00:08:54,810 Until then, I hope this has been informative for you, 172 00:08:54,810 --> 00:08:57,860 and I'd like to thank you for viewing. 173 00:08:57,860 --> 00:09:02,000