Vous êtes sur la page 1sur 25

Junos MPLS and VPNs

10.a

Lab Diagrams

Worldwide Education Services


1194 North Mathilda Avenue
Sunnyvale, CA 94089
USA
408-745-2000
www.juniper.net
Course Number: EDU-JUN-JMV

This document is produced by Juniper Networks, Inc.


This document or any part thereof may not be reproduced or transmitted in any form under penalty of law, without the prior written permission of Juniper Networks
Education Services.
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other
countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered
trademarks, or registered service marks are the property of their respective owners.
Junos MPLS and VPNs Lab Diagrams, Revision 10.a
Copyright 2010 Juniper Networks, Inc. All rights reserved.
Printed in USA.
Revision History:
Revision 10.aDecember 2010
The information in this document is current as of the date listed above.
The information in this document has been carefully verified and is believed to be accurate for software Release 10.3R1.9. Juniper Networks assumes no
responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary,
incidental, or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.

Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
YEAR 2000 NOTICE
Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The Junos operating system has
no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
SOFTWARE LICENSE
The terms and conditions for using Juniper Networks software are described in the software license provided with the software, or to the extent applicable, in an
agreement executed between you and Juniper Networks, or Juniper Networks agent. By using Juniper Networks software, you indicate that you understand and
agree to be bound by its license terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the Juniper
Networks software, may contain prohibitions against certain uses, and may state conditions under which the license is automatically terminated. You should
consult the software license for further details.

Serial Console
Connections

2010 Juniper Networks, Inc. All rights reserved.

Terminal
Server

Server

vrvr-device

mxDmxD-2

mxAmxA-2

mxAmxA-1

Student
Workstations

____________/___

mxCmxC-2

_______________

_______________

___________/___

___________/___

___________/___

Term Server _______________

Gateway

Server

vrvr-device

mxDmxD-2

mxDmxD-1

Worldwide Education Services

www.juniper.net

Note: Your instructor will provide address and access information.

____________/___

mxCmxC-1

____________/___

mxBmxB-1

____________/___

____________/___

mxAmxA -2

mxBmxB-2

____________/___

mxAmxA -1

Management Addressing

___.___.___.___/___

Management
Network

fxp0 (On all student devices)

Management Network Diagram

2010 Juniper Networks, Inc. All rights reserved.

1
2
2
3
3
4
4

mxA-2
mxB-1
mxB-2
mxC-1
mxC-2
mxD-1
mxD-2

Worldwide Education Services

mxA-1

Student Switch

X= _

 Fill in the blank on this page and on each of the


following pages

Device and Variable Assignments

www.juniper.net

.1

p4

.2

lo0 = 192.168.5.4

.2

.1

2010 Juniper Networks, Inc. All rights reserved.

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

.2

lo0 = 192.168.5.1

p1

172.22.202.0/24

.2

.2

172.22.203.0/24

.1

172.22.201.0/24

.1
.1

lo0 = 192.168.5.2

p2

AS 65512
OSPF Area 0

.2

.2
172.22.204.0/24

.1

172.22.206.0/24

.1

p3
.1

.2

lo0= 192.168.5.6

p6

.2

.2

lo0 = 192.168.5.3

vrvr-device

Worldwide Education Services

lo0 = 192.168.5.5

p5

.2

172.22.205.0/24

X= _

pe2

mx_mx_-2

.1

www.juniper.net

lo0.0 = 192.168.X.2

.1

Lab 1: Part 1Static LSPs (Infrastructure)

172.22.207.0/24

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

ge-1/0/4

ge-1/1/4

AS 65X01

Label
1000X01

2010 Juniper Networks, Inc. All rights reserved.

lo0.1 =192.168.1X.1/32

ceXceX-1

.2

.2

ge-1/0/0

.1

172.22.2X0.0/24
VLAN 2X0

lo0 = 192.168.5.1

p1

.1

.2

p2

.2

lo0 = 192.168.5.3

p3

Worldwide Education Services

my-static-lsp

.1

172.22.206.0/24

lo0 = 192.168.5.2

172.22.201.0/24

vrvr-device

AS 65512
OSPF Area 0

X= _

.2

Label
1000X02

.1
ge-1/0/0

172.22.2X2.0/24
VLAN 2X2

AS 65X02

ceXceX-2

.2

lo0.1 =192.168.1X.2/32

pe2

www.juniper.net

mx_mx_-2

lo0.0 = 192.168.X.2

.1

10.0.X1.0/24

Lab 1: Parts 23Static LSPs

ge-1/0/4

10.0.X0.0/24

ge-1/1/4

.1

.1

ge-1/0/4

ge-1/1/4

.1

p4

.2

AS 65X01

lo0 = 192.168.5.4

.2

.2

2010 Juniper Networks, Inc. All rights reserved.

lo0.1 =192.168.1X.1/32

ceXceX-1

.2

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

p1

.2

.2

172.22.203.0/24

.1

172.22.201.0/24

.1
.1

lo0 = 192.168.5.2

p2

AS 65512
OSPF Area 0

.2
172.22.204.0/24

.1

p3
.1

.2

lo0= 192.168.5.6

p6

.2

.2

lo0 = 192.168.5.3

Worldwide Education Services

lo0 = 192.168.5.5

p5

.2

.2

172.22.206.0/24

.1

vrvr-device
AS 65X02

ceXceX-2

.2

lo0.1 =192.168.1X.2/32

pe2
.1

www.juniper.net

mx_mx_-2

lo0.0 = 192.168.X.2

.1 .1

ge-1/0/4

10.0.X0.0/24

lo0 = 192.168.5.1

172.22.202.0/24

X= _

172.22.205.0/24

10.0.X1.0/24

Lab 2: Label Distribution Protocols

172.22.207.0/24

ge-1/1/4

.1

p4

.2

lo0 = 192.168.5.4

.2

.1

2010 Juniper Networks, Inc. All rights reserved.

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

.2

lo0 = 192.168.5.1

172.22.202.0/24

.2

172.22.203.0/24

.1

silver

172.22.201.0/24

.1

gold
bronze .2
.1

lo0 = 192.168.5.2

p2

silver
.2

.2
172.22.204.0/24

.1

gold
bronze

172.22.206.0/24

.1

p3
.1

.2

lo0= 192.168.5.6

p6

.2

.2

lo0 = 192.168.5.3

vrvr-device

Worldwide Education Services

lo0 = 192.168.5.5

p5

.2

172.22.205.0/24

p1

gold
silver

AS 65512
OSPF Area 0

gold
silver
bronze

X= _

172.22.207.0/24

Lab 3: CSPF

bronze

pe2

mx_mx_-2

.1

www.juniper.net

lo0.0 = 192.168.X.2

.1

.1

p4

.2

lo0 = 192.168.5.4

.2

.1

2010 Juniper Networks, Inc. All rights reserved.

PE1 static route:


10.0.1.0/24 reject

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

.2

lo0 = 192.168.5.1

p1

172.22.202.0/24

.2

.2

172.22.203.0/24

.1

172.22.201.0/24

.1
.1

.2
172.22.204.0/24

.1

p3
.1

.2

lo0= 192.168.5.6

p6

.2

.2

lo0 = 192.168.5.3

Worldwide Education Services

lo0 = 192.168.5.5

p5

.2

.2

vrvr-device

172.22.206.0/24

.1

Primary Path
pe2pe2-toto-pe1

lo0 = 192.168.5.2

p2

Primary Path
pe1pe1-toto-pe2

AS 65512
OSPF Area 0

172.22.205.0/24

X= _

Lab 4: Traffic Protection

172.22.207.0/24

pe2

mx_mx_-2

.1

www.juniper.net

lo0.0 = 192.168.X.2

.1

PE2 static route:


10.0.2.0/24 reject

.1

.1 ge-1/0/4

10.0.X0.0/24

p4

.2

lo0 = 192.168.5.4

.2

.1

2010 Juniper Networks, Inc. All rights reserved.

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

.2

lo0 = 192.168.5.1

.2

.2

172.22.203.0/24

.1

172.22.201.0/24

.1

.2

172.22.204.0/24

p6

.2

.2

lo0= 192.168.5.6

Worldwide Education Services

lo0 = 192.168.5.5

p5

.2

.2
.2

p3
lo0 = 192.168.5.3

.1

.1

172.22.206.0/24

.1

.1

lo0 = 192.168.5.2

p2

vrvr-device

172.22.205.0/24

p1

172.22.202.0/24

AS 65512
OSPF Area 0

172.22.207.0/24

X= _

Lab 5: Parts 13Miscellaneous MPLS

pe2
.1

www.juniper.net

mx_mx_-2

lo0.0 = 192.168.X.2

.1

10.0.X1.0/24
ge-1/0/4 .1

.1

p4

.2

lo0 = 192.168.5.4

.2

.1

2010 Juniper Networks, Inc. All rights reserved.

PE1 static routes:


10.X.1.0/24 receive
10.X.2.0/24 receive

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

.2

lo0 = 192.168.5.1

p1

172.22.202.0/24

.2

.2

172.22.203.0/24

.1

172.22.201.0/24

.1

.2

.2

.2
172.22.204.0/24

.1

172.22.206.0/24

.1

p3
.1

.2

lo0= 192.168.5.6

p6

.2

.2

lo0 = 192.168.5.3

vrvr-device

Worldwide Education Services

lo0 = 192.168.5.5

p5

.1

lo0 = 192.168.5.2

p2

AS 65512
OSPF Area 0

172.22.205.0/24

X= _

pe2
.1

www.juniper.net

mx_mx_-2

lo0.0 = 192.168.X.2

.1

PE2 static routes:


10.X.3.0/24 receive
10.X.4.0/24 receive

Lab 5: Parts 49Miscellaneous MPLS

172.22.207.0/24

.1

p4

.2

lo0 = 192.168.5.4

.2

.1

2010 Juniper Networks, Inc. All rights reserved.

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

.2

lo0 = 192.168.5.1

p1

172.22.202.0/24

.2

.2

172.22.203.0/24

.1

172.22.201.0/24

.1

.2

.2

.2
172.22.204.0/24

.1

172.22.206.0/24

.1

p3
.1

.2

lo0= 192.168.5.6

p6

.2

.2

lo0 = 192.168.5.3

vrvr-device

Worldwide Education Services

lo0 = 192.168.5.5

p5

.1

lo0 = 192.168.5.2

p2

AS 65512
OSPF Area 0

172.22.205.0/24

X= _

Lab 6: Part 1VPN Baseline (PE)

172.22.207.0/24

pe2

mx_mx_-2

.1

www.juniper.net

lo0.0 = 192.168.X.2

.1

.1

pe2

.1

lo0.0 = 192.168.X.2

Worldwide Education Services

.2

lo0.0 = 192.168.X.1

ge-1/0/4
.2

2010 Juniper Networks, Inc. All rights reserved.

lo0.1 =192.168.1X.1/32

VLAN 6X0

ceXceX-1

ge-1/1/4

172.X0.0-3/24
AS 65X01

ceXceX-2

www.juniper.net

lo0.1 =192.168.1X.2/32

ge-1/0/4

pe1

mx_mx_-1

AS 65512
OSPF Area 0

172.X0.4-7/24
AS 65X01
ge-1/1/4

10.0.X0.0/24

X= _

mx_mx_-2

10.0.X1.0/24

Lab 6: Part 2VPN Baseline (CE)

VLAN 6X0

.1

ge-1/1/4

ceXceX-1

2010 Juniper Networks, Inc. All rights reserved.

lo0.1 =192.168.1X.1/32

VLAN 6X0
.2

Worldwide Education Services

pe2

.1

lo0.0 = 192.168.X.2

ge-1/0/4

172.X0.0-3/24
AS 65X01

.2

lo0.0 = 192.168.X.1

Layer 3 VPN

ceXceX-2

www.juniper.net

lo0.1 =192.168.1X.2/32

ge-1/0/4

pe1

mx_mx_-1

AS 65512
OSPF Area 0

172.X0.4-7/24
AS 65X01
ge-1/1/4

10.0.X0.0/24

X= _

mx_mx_-2

10.0.X1.0/24

Lab 7: Layer 3 VPN Configuration

VLAN 6X0

.1

p4

.1

.2

lo0 = 192.168.5.4

.2

2010 Juniper Networks, Inc. All rights reserved.

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

.2

lo0 = 192.168.5.1

p1

.2

.2

172.22.203.0/24

.1

172.22.201.0/24

.1

.2

.2

.2
172.22.204.0/24

.1

172.22.206.0/24

.1

p3
.1

.2

lo0.= 192.168.5.6

p6

.2

.2

lo0 = 192.168.5.3

vrvr-device

Worldwide Education Services

lo0 = 192.168.5.5

p5

.1

lo0 = 192.168.5.2

p2

172.22.205.0/24

X= _

172.22.202.0/24

AS 65512
OSPF Area 0

pe2

mx_mx_-2

.1

www.juniper.net

lo0.0 = 192.168.X.2

.1

Lab 8: Parts 12Layer 3 VPN Scaling and


Internet Access

172.22.207.0/24

172.X0.4-7/24
AS 65X01

pe2

.1

.2

2010 Juniper Networks, Inc. All rights reserved.

lo0.1 =192.168.1X.1/32

VLAN 6X0

ceXceX-1

.2

ceXceX-2

.2

lo0.1 =192.168.1X.2/32

VLAN 6X0

Worldwide Education Services

10.0.X0.0/24
ge-1/0/4
ge-1/1/4
.1

.1

Layer 3 VPN

AS 65512
OSPF Area 0

ceXceX-4
lo0.2 =192.168.2X.2/32

lo0.0 = 192.168.X.2

VLAN 6X1

lo0.0 = 192.168.X.1

pe1

.1

.2

172.X1.4-7/24
AS 65X02

VLAN 6X1

10.0.X1.0/24
ge-1/0/4
ge-1/1/4

172.X0.0-3/24
AS 65X01

ceXceX-3

lo0.2 =192.168.2X.1/32

10.1.X0.0/24
ge-1/1/5
ge-1/0/5

mx_mx_-1

172.X1.0-3/24
AS 65X02

www.juniper.net

mx_mx_-2

Lab 8: Parts 38Layer 3 VPN Scaling and


Internet Access
X= _
10.1.X1.0/24
ge-1/1/5
ge-1/0/5

pe1

10.2.X0.0/24

ceXceX-1

lo0.1 =192.168.1X.1/32

ge-1/1/4.6X0

2010 Juniper Networks, Inc. All rights reserved.

172.X0.0-3/24
AS 65X01

ge-1/1/4.X00 .2 .2

VLAN X00

ge-1/0/4.X00 .1 .1 ge-1/0/4.6X0

lo0.0 = 192.168.X.1

mx_mx_-1

10.0.X0.0/24
VLAN 6X0

lo0.0 = 192.168.X.2

pe2

mx_mx_-2

ge-1/0/4.X00 .1 .1 ge-1/0/4.6X0

ge-1/1/4.6X0

www.juniper.net

lo0.1 =192.168.1X.2/32

ceXceX-2

ge-1/1/4.X00 .2 .2

172.X0.4-7/24
AS 65X01

Worldwide Education Services

Layer 3 VPN

AS 65512
OSPF Area 0

10.2.X1.0/24
VLAN X00

X= _

Lab 8: Part 9Layer 3 VPN Scaling and


Internet Access

10.0.X1.0/24
VLAN 6X0

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

ge-1/0/4

ceXceX-1

ge-1/1/4

2010 Juniper Networks, Inc. All rights reserved.

lo0.1 =192.168.1X.1/32

VLAN 6X0
.2

gr-1/0/10.0

gr-1/0/10.0

Worldwide Education Services

GRE Tunnel

AS 65512
OSPF Area 0

172.X0.4-7/24
AS 65X01
ceXceX-2

.2

lo0.1 =192.168.1X.2/32

lo0.0 = 192.168.X.2

pe2

.1

ge-1/0/4

172.X0.0-3/24
AS 65X01

X= _

mx_mx_-2

10.0.X1.0/24

Lab 9: GRE Tunnel Integration

ge-1/1/4

10.0.X0.0/24

VLAN 6X0
www.juniper.net

.1

p4

.2

lo0 = 192.168.5.4

.2

.1

2010 Juniper Networks, Inc. All rights reserved.

.1

lo0.0 = 192.168.X.1

pe1

mx_mx_-1

.2

lo0 = 192.168.5.1

p1

172.22.202.0/24

.2

.2

172.22.203.0/24

.1

172.22.201.0/24

.1
.1

lo0 = 192.168.5.2

p2

AS 65512
OSPF Area 0

.2

.2
172.22.204.0/24

.1

172.22.206.0/24

.1

p3
.1

.2

lo0.= 192.168.5.6

p6

.2

.2

lo0 = 192.168.5.3

vrvr-device

Worldwide Education Services

lo0 = 192.168.5.5

p5

.2

172.22.205.0/24

X= _

Lab 10: Parts 12BGP Layer 2 VPN

172.22.207.0/24

pe2

mx_mx_-2

.1

www.juniper.net

lo0.0 = 192.168.X.2

.1

ceXceX-1

ge-1/1/4

2010 Juniper Networks, Inc. All rights reserved.

Site ID 1

lo0.1 =192.168.1X.1/32

VLAN 6X0
.1

Worldwide Education Services

pe2
lo0.0 = 192.168.X.2

ge-1/0/4

172.X0.0-3/24
AS 65X01

.2

Site ID 2

lo0.0 = 192.168.X.1

BGP Layer 2 VPN

ceXceX-2

www.juniper.net

lo0.1 =192.168.1X.2/32

ge-1/0/4

pe1

mx_mx_-1

AS 65512
OSPF Area 0

172.X0.4-7/24
AS 65X01
ge-1/1/4

10.0.X0.0/24

X= _

mx_mx_-2

10.0.X0.0/24

Lab 10: Parts 35BGP Layer 2 VPN

VLAN 6X0

pe1
lo0.0 = 192.168.X.1

mx_mx_-1

ge-1/0/4
ge-1/1/4

ceXceX-1

2010 Juniper Networks, Inc. All rights reserved.

lo0.1 =192.168.1X.1/32

VLAN 6X0
.1

Worldwide Education Services

LDP Layer 2 Circuit

AS 65512
OSPF Area 0

172.X0.4-7/24
AS 65X01

ceXceX-2

.2

lo0.0 = 192.168.X.2

pe2

www.juniper.net

lo0.1 =192.168.1X.2/32

ge-1/0/4

172.X0.0-3/24
AS 65X01

X= _

mx_mx_-2

10.0.X0.0/24

Lab 11: LDP Layer 2 Circuit

ge-1/1/4

10.0.X0.0/24

VLAN 6X0

pe1
lo0.0 = 192.168.X.1

mx_mx_-1

ge-1/0/5
ge-1/1/5

ceXceX-1

2010 Juniper Networks, Inc. All rights reserved.

lo0.1 =192.168.1X.1/32

VLAN 6X0
.1

Worldwide Education Services

CCC Circuit

AS 65512
OSPF Area 0

172.X0.4-7/24
AS 65X01

ceXceX-2

.2

lo0.0 = 192.168.X.2

pe2

www.juniper.net

lo0.1 =192.168.1X.2/32

ge-1/0/5

172.X0.0-3/24
AS 65X01

X= _

mx_mx_-2

10.0.X0.0/24

Lab 11: Circuit Cross Connect

ge-1/1/5

10.0.X0.0/24

VLAN 6X0

ge-1/0/6

Virtual Switch

ge-1/0/7
ge-1/1/7

ge-1/1/6

2010 Juniper Networks, Inc. All rights reserved.

Virtual Router

lo0.1 =192.168.1X.1/32

c-routerXrouterX-1

ge-1/1/4
.1 ge-1/0/4

VLAN 6X0
10.0.X0.0/24

mx_mx_-1

ce
ce--vsX
vsX--1

X= _

pe2

VLAN 6X0
10.0.X0.0/24

www.juniper.net

Virtual Router

lo0.1 =192.168.1X.2/32

c-routerX-routerX--2
--2

ge-1/1/4
ge-1/0/4 .2

mx_mx_-2

Virtual Switch

ge-1/0/7
ge-1/1/7

ge-1/1/6

ge-1/0/6

Worldwide Education Services

VPLS

AS 65512
OSPF Area 0

lo0.0 = 192.168.X.2

lo0.0 = 192.168.X.1

pe1

Lab 12: Parts 1-6 LDP VPLS

ce
ce--vsX
vsX--2

ge-1/0/8

Virtual Switch

ge-1/0/9
ge-1/1/9

ge-1/1/8

2010 Juniper Networks, Inc. All rights reserved.

Virtual Router

lo0.1 =192.168.1X.1/32

c-routerXrouterX-1

ge-1/1/4
.1 ge-1/0/4

VLAN 6X1
10.0.X1.0/24

mx_mx_-1

ce
ce--vsX
vsX--1

X= _

pe2

www.juniper.net

Virtual Router

lo0.1 =192.168.1X.2/32

c-routerX-routerX--2
--2

ge-1/1/4

VLAN 6X1
10.0.X1.0/24

ge-1/0/4 .2

mx_mx_-2

Virtual Switch

ge-1/0/9
ge-1/1/9

ge-1/1/8

ge-1/0/8

Worldwide Education Services

VPLS

AS 65512
OSPF Area 0

lo0.0 = 192.168.X.2

lo0.0 = 192.168.X.1

pe1

Lab 12: Parts 7-9 BGP VPLS

ce
ce--vsX
vsX--2

.1

s-ce1

.2 ge-1/0/5
ge-1/1/5 .1

AS 65X01
OSPF Area 0

Virtual Router

c-ce1

10.0.20.0/24

.2 ge-1/0/4
ge-1/1/4 .1

Logical System

lo0.1 =192.168.1X.1/32

2010 Juniper Networks, Inc. All rights reserved.

Customer

Logical System

10.0.50.0/24

Subscriber

c-pe1

mx_mx_-1

lo0.0 = 192.168.X.1

lo0.0 = 192.168.X.2

p-pe2

10.0.21.0/24

ge-1/0/4 .2
.1 ge-1/1/4

Worldwide Education Services

Main Routing Instance


and VRF

L3VPN

BGP VPLS

Provider
AS 65512
OSPF Area 0

c-ce2

Logical System

www.juniper.net

Logical System

Customer

.2

s-ce2

Subscriber

10.0.60.0/24

ge-1/0/5 .2
.1 ge-1/1/5

AS 65X02
OSPF Area 0

Virtual Router

mx_mx_-2

lo0.1 =192.168.1X.2/32

X= _

10.0.51.0/24
VLAN 6X0

p-pe1

Lab 13: Carrier-of-Carrier VPNs

lo0.2 =192.168.1X.3/32

ge-1/0/6
1/0/6
ge-1/1/6
1/1/6

c-pe2

ge-1/1/6
1/1/6
10.0.51.0/24
VLAN 6X0

lo0.2 =192.168.1X.4/32

ge
ge-1/0/6

Vous aimerez peut-être aussi