CCNP Service Provider lab 16 of 23
Inter-AS L3VPN: options A and B
Join a VPN across two autonomous systems on IOS XR. Build back-to-back VRFs first, then replace them with eBGP VPNv4 and follow the label swaps at each ASBR.
Run this lab
It needs Standard: its 6 nodes are set to 6 vCPU and 11,264 MB in total.
In your workspace: Shared, then CCNP Service Provider guided labs, then 16 - Inter-AS L3VPN - options A and B
- Level
- Advanced
- Time
- About 90 minutes
- Nodes need
- 6 vCPU, 11,264 MB
- Smallest plan
- Standard
The scenario
Maple Foods has grown. Its second site is in a region served by Tarnside Metro, which Fellgate Carrier bought but hasn't merged: Tarnside is AS 64501, with its own IS-IS and LDP. Maple wants one VPN across both networks. The two providers meet on one link, between ASBR1 and ASBR2.
Each AS works internally. PE1 and PE2 have VRF MAPLE with route target 64500:100, and each CE has its BGP session up. PE1 and PE2 know nothing of each other's routes.
You'll join the VPN in two ways, because that's how a real project goes: the simple way first, and then the one that scales.
| Device | Interface | Address | Connects to |
|---|---|---|---|
| CE1 | Loopback1 | 192.168.1.1/24 | |
| CE1 | Gi0/0 | 172.16.1.2/30 | PE1 Gi0/0/0/2 |
| PE1 | Loopback0 | 10.255.0.1/32 | |
| PE1 | Gi0/0/0/0 | 10.0.12.1/30 | ASBR1 Gi0/0/0/0 |
| PE1 | Gi0/0/0/2 | 172.16.1.1/30 | CE1 Gi0/0 |
| ASBR1 | Loopback0 | 10.255.0.2/32 | |
| ASBR1 | Gi0/0/0/0 | 10.0.12.2/30 | PE1 Gi0/0/0/0 |
| ASBR1 | Gi0/0/0/1 | 10.0.99.1/30 | ASBR2 Gi0/0/0/1 |
| ASBR2 | Loopback0 | 10.255.0.3/32 | |
| ASBR2 | Gi0/0/0/0 | 10.0.34.1/30 | PE2 Gi0/0/0/0 |
| ASBR2 | Gi0/0/0/1 | 10.0.99.2/30 | ASBR1 Gi0/0/0/1 |
| PE2 | Loopback0 | 10.255.0.4/32 | |
| PE2 | Gi0/0/0/0 | 10.0.34.2/30 | ASBR2 Gi0/0/0/0 |
| PE2 | Gi0/0/0/2 | 172.16.2.1/30 | CE2 Gi0/0 |
| CE2 | Loopback1 | 192.168.2.1/24 | |
| CE2 | Gi0/0 | 172.16.2.2/30 | PE2 Gi0/0/0/2 |
What you’ll practise
- Compare inter-AS options A, B and C
- Build option A with a VRF sub-interface and eBGP
- Build option B with retain route-target and next-hop-self
- Follow VPN labels across the ASBR link
The tasks
- Three options, in one table
- Option A
- Option B
- Follow the labels
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- CE1
Gi0/0to PE1Gi0/0/0/2 - PE1
Gi0/0/0/0to ASBR1Gi0/0/0/0 - ASBR1
Gi0/0/0/1to ASBR2Gi0/0/0/1 - ASBR2
Gi0/0/0/0to PE2Gi0/0/0/0 - PE2
Gi0/0/0/2to CE2Gi0/0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| CE1 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| PE1 | Cisco IOS XRv | xrv-k9-demo-6.3.1 | 1 vCPU, 2,560 MB |
| ASBR1 | Cisco IOS XRv | xrv-k9-demo-6.3.1 | 1 vCPU, 2,560 MB |
| ASBR2 | Cisco IOS XRv | xrv-k9-demo-6.3.1 | 1 vCPU, 2,560 MB |
| PE2 | Cisco IOS XRv | xrv-k9-demo-6.3.1 | 1 vCPU, 2,560 MB |
| CE2 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
CCNP Service Provider guided labs.Open
16 - Inter-AS L3VPN - options A and Band start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More CCNP Service Provider labs
All CCNP Service Provider labs
Related labs in other courses
CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.