Skip to main content

basic MPLS VPN scenario

It's really basic topology with two VPN clients. I decided to use VRF CLIENT_A and VRF CLIENT_B; CLIENT_A is running OSPF and CLIENT_B is running BGP. There is another link between SW3 and SW2. I have configured sham-link to avoid it.


Something interesting and maybe a common mistake is when you configure the sham-links to use wrong "area id" and what would happen is that the routes in your fib table will appear as INTER-AREA routes instead of INTRA-AREA routes.


There is nothing specific about VRF CLIENT_B, anyway, if someone is digging and looking for some scenario maybe this picture will be useful.


Popular posts from this blog

Juniper IS-IS summary

##################################################################################################### ## ISIS ##################################################################################################### # Be sure to set family iso on the interface to be placed into ISIS set interfaces <interface> family iso # By default Junos places interfaces as L1/L2 # Default route leaking:         L1 to L2 - all internal routes         L2 to L1 - 0/0 route # L1/L2 will send the attached-bit down to L1 and it will act as a NSSA-like area.  When the L1 interface # receives the attached-bit it will inject a 0/0 route into the RIB point to the L1/L2 interface. # To disable the attached bit use: set protocols isis ignore-attached-bit # Be careful with the "interface all" command, as it may have some unexpected consequences such as trying # to establish a neighbor on your fxp0 management...

CompTIA+

Sometimes you just need a good distraction, and I randomly got the urge to study for an exam;  something I haven't done in years. I decided to look into network security and started watching some CompTIA training videos, and...it was all a bit too familiar. Apparently the search continues.

SecurityIE Forum

http://www.securityie.com/ Securityie is an open forum for CCIEs and CCIE candidates to discuss issues and technologies related to the CCIE Security certification. Signing up is free. If you sign up for one forum you are automatically setup for our other forums Routerie and Voiceie. We have over 20000 members active on these boards many of which already have their CCIE.