Nested Vpn - HP 12500 Series Configuration Manual
Mpls, routing switch series
Hide thumbs
Also See for 12500 Series:
- Configuration manual (338 pages) ,
- Network management and monitoring command reference (320 pages) ,
- Command reference manual (157 pages)
Table of Contents
Advertisement
Figure 58 Scenario where the Level 2 carrier is an MPLS L3VPN service provider
PE 3
NOTE:
If there are equal cost routes between the Level 1 carrier and the Level 2 carrier, HP recommends
establishing equal cost LSPs between them accordingly.
Nested VPN
Background
In an MPLS L3VPN network, generally a service provider runs an MPLS L3VPN backbone and provides
VPN services through PEs. Different sites of a VPN customer are connected to the PEs through CEs to
implement communication. In this scenario, a customer's networks are ordinary IP networks and cannot
be further divided into sub-VPNs.
However, in actual applications, customer networks can be dramatically different in form and complexity,
and a customer network may need to use VPNs to further group its users. The traditional solution to this
request is to implement internal VPN configuration on the service provider's PEs. This solution is easy to
deploy, but it increases the network operation cost and brings issues on management and security
because:
•
The number of VPNs that PEs must support will increase sharply.
Any modification of an internal VPN must be done through the service provider.
•
The nested VPN technology offers a better solution. It exchanges VPNv4 routes between PEs and CEs of
the ISP MPLS L3VPN and allows a customer to manage its own internal VPNs.
VPN network. On the service provider's MPLS VPN network, there is a customer VPN named VPN A. The
customer VPN contains two sub-VPNs, VPN A- 1 and VPN A-2. The service provider PEs treat the
customer's network as a common VPN user and do not join any sub-VPNs. The customer's CE devices
(CE 1, CE 2, CE 7 and CE 8) exchange VPNv4 routes that carry the sub-VPN routing information with the
service provider PEs, implementing the propagation of the sub-VPN routing information throughout the
customer network.
PE 1
CE 1
IGP/LDP/Labeled BGP
Level 2 carrier
IGP/LDP
PE 2
MP-IBGP
Level 1 carrier
IGP/LDP
MP-IBGP
204
CE 2
Level 2 carrier
PE 4
Figure 59
depicts a nested
Advertisement
Table of Contents
Troubleshooting
