1 00:00:00,000 --> 00:00:02,946 [AUDIO LOGO] 2 00:00:02,946 --> 00:00:08,060 3 00:00:08,060 --> 00:00:10,140 So now we're going to jump in and talk 4 00:00:10,140 --> 00:00:15,150 about IPv6 support over MPLS, specifically 5 00:00:15,150 --> 00:00:19,630 with MPLS running over an IPv4-only core. 6 00:00:19,630 --> 00:00:24,640 Now, we've already talked all about MPLS in this course. 7 00:00:24,640 --> 00:00:29,370 So we'll of course just be focusing in on the IPv6 aspect. 8 00:00:29,370 --> 00:00:32,430 Now, this isn't, again, exactly tunneling. 9 00:00:32,430 --> 00:00:35,770 But it is encapsulation, which at the end of the day, 10 00:00:35,770 --> 00:00:37,360 that's what tunneling is. 11 00:00:37,360 --> 00:00:40,470 So we're going to take a look at the three different ways 12 00:00:40,470 --> 00:00:44,110 of supporting IPv6 over MPLS. 13 00:00:44,110 --> 00:00:47,790 Now, one of them, truth be told, there's not really 14 00:00:47,790 --> 00:00:49,230 too much to talk about. 15 00:00:49,230 --> 00:00:51,090 We'll see that as we jump in. 16 00:00:51,090 --> 00:00:54,960 We really want to focus on our layer 3 options, 17 00:00:54,960 --> 00:00:59,520 both for layer 3 forwarding and for layer 3 VPN. 18 00:00:59,520 --> 00:01:01,420 So let's go ahead and jump in. 19 00:01:01,420 --> 00:01:03,670 We'll take a look at all three methods, 20 00:01:03,670 --> 00:01:07,495 but again, mostly focusing in on the layer 3 options. 21 00:01:07,495 --> 00:01:10,040 22 00:01:10,040 --> 00:01:12,760 So there are a few different options 23 00:01:12,760 --> 00:01:17,470 for supporting IPv6 over MPLS, the first of which 24 00:01:17,470 --> 00:01:23,860 is simply to run IPv6 over a traditional layer 2 VPN. 25 00:01:23,860 --> 00:01:30,130 The next option is to support IPv6 directly on top of MPLS, 26 00:01:30,130 --> 00:01:33,610 using something called 6PE. 27 00:01:33,610 --> 00:01:39,670 And the final choice is IPv6 over layer 3 VPN. 28 00:01:39,670 --> 00:01:43,360 And this is something we call 6VPE. 29 00:01:43,360 --> 00:01:46,700 So let's take a look at each of these options. 30 00:01:46,700 --> 00:01:50,680 Let's look at layer 2 VPN first because it is certainly 31 00:01:50,680 --> 00:01:52,750 the easiest one to discuss. 32 00:01:52,750 --> 00:01:55,420 The reason it's the easiest one to discuss 33 00:01:55,420 --> 00:02:02,260 is, well, layer 2 VPN forwards frames at layer 2. 34 00:02:02,260 --> 00:02:06,910 And as such, that means that the layer 3 payload-- 35 00:02:06,910 --> 00:02:10,850 again, IPv4 versus IPv6-- 36 00:02:10,850 --> 00:02:13,560 is completely irrelevant. 37 00:02:13,560 --> 00:02:16,070 It doesn't care what it's carrying. 38 00:02:16,070 --> 00:02:19,850 So we don't care what the actual payload is. 39 00:02:19,850 --> 00:02:23,270 Therefore, absolutely nothing needs 40 00:02:23,270 --> 00:02:25,970 to be done for supporting IPv6. 41 00:02:25,970 --> 00:02:30,740 So if our devices support layer 2 VPN and that's 42 00:02:30,740 --> 00:02:33,140 the technology we've chosen to implement, 43 00:02:33,140 --> 00:02:34,800 we don't have to do anything. 44 00:02:34,800 --> 00:02:38,090 We can just have the customers use IPv6. 45 00:02:38,090 --> 00:02:41,360 So clearly, it's the layer 3 options 46 00:02:41,360 --> 00:02:43,770 that are going to cause us to have some discussion. 47 00:02:43,770 --> 00:02:47,710 So let's go ahead and jump into 6PE. 48 00:02:47,710 --> 00:02:51,460 So let's talk about some of those attributes of MPLS 49 00:02:51,460 --> 00:02:53,560 using 6PE. 50 00:02:53,560 --> 00:02:56,410 The first thing-- and we've mentioned this a few times-- 51 00:02:56,410 --> 00:03:00,880 same as with tunnels, the PEs themselves 52 00:03:00,880 --> 00:03:03,400 are going to have to be dual stack. 53 00:03:03,400 --> 00:03:08,410 Once again, we have to talk to IPv4 on the underlay. 54 00:03:08,410 --> 00:03:12,490 And we have to talk IPv6 to the end networks 55 00:03:12,490 --> 00:03:15,650 and over MPLS itself. 56 00:03:15,650 --> 00:03:19,540 Now, the P routers, the provider routers in the core, 57 00:03:19,540 --> 00:03:23,200 do not need IPv6 support. 58 00:03:23,200 --> 00:03:25,300 This is sort of the point and why 59 00:03:25,300 --> 00:03:29,410 we're talking about sending this over an IPv4-only core. 60 00:03:29,410 --> 00:03:34,000 The P routers are not going to be involved in the IPv6. 61 00:03:34,000 --> 00:03:40,840 What we do instead is we add to multiprotocol BGP the ability 62 00:03:40,840 --> 00:03:45,340 to carry these IPv6 routes and the associated 63 00:03:45,340 --> 00:03:49,150 labels between the PEs, much like we 64 00:03:49,150 --> 00:03:55,060 do when we start talking about VPNs in layer 3 VPN. 65 00:03:55,060 --> 00:03:58,790 Now, at the end of the day, remember, this is still MPLS. 66 00:03:58,790 --> 00:04:03,580 So the core data plane is still just doing label switching. 67 00:04:03,580 --> 00:04:08,570 That's why we need these labels up here for the IPv6 prefixes. 68 00:04:08,570 --> 00:04:11,410 Now, much like VPN, this is going 69 00:04:11,410 --> 00:04:13,930 to have to use two labels. 70 00:04:13,930 --> 00:04:16,990 The first label, or the top label, 71 00:04:16,990 --> 00:04:22,840 is, just like in VPN, to get us to the egress PE. 72 00:04:22,840 --> 00:04:26,590 Once we get to the egress PE, that second label 73 00:04:26,590 --> 00:04:32,410 is going to be to identify which IPv6 prefix this is for. 74 00:04:32,410 --> 00:04:35,350 And the other thing that gets a little bit tricky 75 00:04:35,350 --> 00:04:39,610 is what to use for the BGP next hop. 76 00:04:39,610 --> 00:04:41,950 If we're going to be sending this stuff through BGP, 77 00:04:41,950 --> 00:04:44,230 it needs a next hop, and it has to be 78 00:04:44,230 --> 00:04:46,040 something we know how to use. 79 00:04:46,040 --> 00:04:50,780 So the IPv6 next hop is going to be 80 00:04:50,780 --> 00:04:56,370 what's called an IPv4-mapped IPv6 address. 81 00:04:56,370 --> 00:04:57,840 Well, what does that mean? 82 00:04:57,840 --> 00:05:02,660 Well, it means that we're going to take colon colon FFFF. 83 00:05:02,660 --> 00:05:04,700 And we're simply going to put that 84 00:05:04,700 --> 00:05:09,770 in front of the IPv4 address that represents 85 00:05:09,770 --> 00:05:14,030 the egress PE's IPv4 address. 86 00:05:14,030 --> 00:05:18,230 And that's what it's going to use for the IPv6 next hop. 87 00:05:18,230 --> 00:05:21,980 And all of this works fine because the devices understand 88 00:05:21,980 --> 00:05:26,870 that they're pulling the IPv4 address out of the IPv6-mapped 89 00:05:26,870 --> 00:05:29,200 address. 90 00:05:29,200 --> 00:05:34,240 As far as configuration for 6PE, if we look at IOS XR, 91 00:05:34,240 --> 00:05:39,640 we see that the main thing we need to do is under BGP, 92 00:05:39,640 --> 00:05:44,110 we need to go into the address-family ipv6 unicast 93 00:05:44,110 --> 00:05:47,590 and add this statement-- allocate-label 94 00:05:47,590 --> 00:05:49,600 for all prefixes. 95 00:05:49,600 --> 00:05:52,480 Then under our neighbor statement, 96 00:05:52,480 --> 00:05:57,160 we enable address-family ipv6, and we configure it 97 00:05:57,160 --> 00:06:00,300 for labeled-unicast. 98 00:06:00,300 --> 00:06:04,330 For IOS XE, it's actually a little bit easier. 99 00:06:04,330 --> 00:06:08,580 All we have to do is go into address-family ipv6, 100 00:06:08,580 --> 00:06:11,820 activate that neighbor because IPv6 would not 101 00:06:11,820 --> 00:06:14,910 be normally activated to a neighborship, 102 00:06:14,910 --> 00:06:19,450 and add the neighbor, and say send-label. 103 00:06:19,450 --> 00:06:23,460 So this is all we need to do on IOS XE. 104 00:06:23,460 --> 00:06:28,170 Now, our third choice is to do IPv6 105 00:06:28,170 --> 00:06:33,510 over layer 3 VPN, also known as 6VPE. 106 00:06:33,510 --> 00:06:36,270 Now, here's the cool thing about this feature. 107 00:06:36,270 --> 00:06:42,930 This is exactly the same as IPv4 layer 3 VPN. 108 00:06:42,930 --> 00:06:46,860 And of course, we've been over that in great detail 109 00:06:46,860 --> 00:06:49,240 in our MPLS skills. 110 00:06:49,240 --> 00:06:54,510 So we should already know how to configure IPv4 L3 VPN. 111 00:06:54,510 --> 00:07:01,000 So all we need to do is add a new address family, VPNv6, 112 00:07:01,000 --> 00:07:05,320 which is almost exactly the same as VPNv4. 113 00:07:05,320 --> 00:07:07,870 It simply adds the route distinguisher 114 00:07:07,870 --> 00:07:11,560 to the front of the IPv6 route. 115 00:07:11,560 --> 00:07:15,700 And then we pretty much just duplicate the configuration, 116 00:07:15,700 --> 00:07:20,200 adding IPv6 to, again, that same configuration 117 00:07:20,200 --> 00:07:24,610 that we used for IPv4 L3 VPN. 118 00:07:24,610 --> 00:07:27,200 So let's go ahead and take a look. 119 00:07:27,200 --> 00:07:30,760 So the configuration for IOS XR, we 120 00:07:30,760 --> 00:07:32,870 can see a few things we need to do. 121 00:07:32,870 --> 00:07:34,840 We have to go into our VRF. 122 00:07:34,840 --> 00:07:38,890 And we have to enable the address-family ipv6. 123 00:07:38,890 --> 00:07:42,490 Under our BGP process, we have to add 124 00:07:42,490 --> 00:07:45,250 the address-family vpnv6. 125 00:07:45,250 --> 00:07:48,550 We have to go into the neighbor and add the address-family 126 00:07:48,550 --> 00:07:50,080 to the neighborship. 127 00:07:50,080 --> 00:07:52,900 And then whatever IGP we're using-- 128 00:07:52,900 --> 00:07:57,400 we can see in this example, we used OSPF version three. 129 00:07:57,400 --> 00:07:59,560 But we then have to go into the BGP 130 00:07:59,560 --> 00:08:02,500 instance of the VRF and configure whatever 131 00:08:02,500 --> 00:08:04,430 redistribution we need to do. 132 00:08:04,430 --> 00:08:07,480 So here we can see we're redistributing OSPF version 133 00:08:07,480 --> 00:08:11,230 3, process 1 into BGP. 134 00:08:11,230 --> 00:08:13,210 And here at the bottom, we can see 135 00:08:13,210 --> 00:08:15,880 that we go into router ospfv3. 136 00:08:15,880 --> 00:08:21,290 And for the VRF Customer A, we redistribute bgp. 137 00:08:21,290 --> 00:08:23,170 So this is the same configuration 138 00:08:23,170 --> 00:08:24,910 that we would do for IPv4. 139 00:08:24,910 --> 00:08:27,680 We're just duplicating it for IPv6. 140 00:08:27,680 --> 00:08:30,020 And the same with IOS XE. 141 00:08:30,020 --> 00:08:31,790 We have to go into our VRF. 142 00:08:31,790 --> 00:08:34,789 We have to add the address-family ipv6. 143 00:08:34,789 --> 00:08:36,710 We go into BGP. 144 00:08:36,710 --> 00:08:39,919 We enable the address-family vpnv6. 145 00:08:39,919 --> 00:08:42,200 We activate that for the neighbor. 146 00:08:42,200 --> 00:08:44,690 We tell it to send both communities. 147 00:08:44,690 --> 00:08:46,980 Again, we only need extended communities, 148 00:08:46,980 --> 00:08:49,040 but I generally enable both. 149 00:08:49,040 --> 00:08:51,860 And then we do our redistribution again-- 150 00:08:51,860 --> 00:08:57,710 OSPF into BGP and then BGP into OSPF. 151 00:08:57,710 --> 00:09:01,190 So as you can see, both of these configurations 152 00:09:01,190 --> 00:09:04,280 are almost identical to what we do for IPv4. 153 00:09:04,280 --> 00:09:08,995 We're just doing it for the address family IPv6 and VPNv6. 154 00:09:08,995 --> 00:09:11,670 155 00:09:11,670 --> 00:09:15,420 So in this video we looked at three different choices 156 00:09:15,420 --> 00:09:20,970 we have for transporting IPv6 over MPLS 157 00:09:20,970 --> 00:09:24,730 running over an IPv4-only core. 158 00:09:24,730 --> 00:09:28,890 So our first option, again, was simply layer 2 VPN. 159 00:09:28,890 --> 00:09:33,570 Layer 2 VPN doesn't care what the layer 3 payload is. 160 00:09:33,570 --> 00:09:36,900 Therefore, you can forward IPv6 just 161 00:09:36,900 --> 00:09:40,740 as easily as you can configure IPv4 or, really, 162 00:09:40,740 --> 00:09:45,270 any other protocol, as long as it's supported on our networks. 163 00:09:45,270 --> 00:09:48,420 The next choice is, of course, layer 3 164 00:09:48,420 --> 00:09:51,150 directly on top of MPLS. 165 00:09:51,150 --> 00:09:56,850 In that case, what we call 6PE is used to forward the traffic. 166 00:09:56,850 --> 00:09:59,340 And we simply carry the extra information 167 00:09:59,340 --> 00:10:02,070 in multiprotocol BGP. 168 00:10:02,070 --> 00:10:06,100 Finally, we have almost the exact same thing, 169 00:10:06,100 --> 00:10:11,190 but now it's 6VPE because now we're implementing VRFs. 170 00:10:11,190 --> 00:10:14,980 And these function exactly like layer 3 171 00:10:14,980 --> 00:10:20,410 VPN does for IPv4, just supporting IPv6. 172 00:10:20,410 --> 00:10:23,350 So that takes care of everything that we 173 00:10:23,350 --> 00:10:25,760 need to discuss in this skill. 174 00:10:25,760 --> 00:10:29,800 That leaves us with nothing else to cover except for a review 175 00:10:29,800 --> 00:10:31,460 in the form of a quiz. 176 00:10:31,460 --> 00:10:34,030 And that's exactly what we're going to do next. 177 00:10:34,030 --> 00:10:37,390 Till then, I hope this has been informative for you, 178 00:10:37,390 --> 00:10:40,500 and I'd like to thank you for viewing. 179 00:10:40,500 --> 00:10:44,000