CCNP Service Provider lab 16 of 23

Inter-AS L3VPN: options A and B

Join a VPN across two autonomous systems on IOS XR. Build back-to-back VRFs first, then replace them with eBGP VPNv4 and follow the label swaps at each ASBR.

Run this lab

It needs Standard: its 6 nodes are set to 6 vCPU and 11,264 MB in total.

In your workspace: Shared, then CCNP Service Provider guided labs, then 16 - Inter-AS L3VPN - options A and B

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 6 vCPU and 11,264 MB together. Every lab plan includes every guided lab.

Level
Advanced
Time
About 90 minutes
Nodes need
6 vCPU, 11,264 MB
Smallest plan
Standard

The scenario

Maple Foods has grown. Its second site is in a region served by Tarnside Metro, which Fellgate Carrier bought but hasn't merged: Tarnside is AS 64501, with its own IS-IS and LDP. Maple wants one VPN across both networks. The two providers meet on one link, between ASBR1 and ASBR2.

Each AS works internally. PE1 and PE2 have VRF MAPLE with route target 64500:100, and each CE has its BGP session up. PE1 and PE2 know nothing of each other's routes.

You'll join the VPN in two ways, because that's how a real project goes: the simple way first, and then the one that scales.

DeviceInterfaceAddressConnects to
CE1Loopback1192.168.1.1/24
CE1Gi0/0172.16.1.2/30PE1 Gi0/0/0/2
PE1Loopback010.255.0.1/32
PE1Gi0/0/0/010.0.12.1/30ASBR1 Gi0/0/0/0
PE1Gi0/0/0/2172.16.1.1/30CE1 Gi0/0
ASBR1Loopback010.255.0.2/32
ASBR1Gi0/0/0/010.0.12.2/30PE1 Gi0/0/0/0
ASBR1Gi0/0/0/110.0.99.1/30ASBR2 Gi0/0/0/1
ASBR2Loopback010.255.0.3/32
ASBR2Gi0/0/0/010.0.34.1/30PE2 Gi0/0/0/0
ASBR2Gi0/0/0/110.0.99.2/30ASBR1 Gi0/0/0/1
PE2Loopback010.255.0.4/32
PE2Gi0/0/0/010.0.34.2/30ASBR2 Gi0/0/0/0
PE2Gi0/0/0/2172.16.2.1/30CE2 Gi0/0
CE2Loopback1192.168.2.1/24
CE2Gi0/0172.16.2.2/30PE2 Gi0/0/0/2

What you’ll practise

  • Compare inter-AS options A, B and C
  • Build option A with a VRF sub-interface and eBGP
  • Build option B with retain route-target and next-hop-self
  • Follow VPN labels across the ASBR link

The tasks

  1. Three options, in one table
  2. Option A
  3. Option B
  4. Follow the labels

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Inter-AS L3VPN - options A and B6 nodes, 5 links. Every link is listed as text below the diagram.CE1PE1ASBR1ASBR2PE2CE2Gi0/0Gi0/0/0/2Gi0/0/0/0Gi0/0/0/0Gi0/0/0/1Gi0/0/0/1Gi0/0/0/0Gi0/0/0/0Gi0/0/0/2Gi0/0
6 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Nodes in Inter-AS L3VPN: options A and B, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
CE1Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
PE1Cisco IOS XRvxrv-k9-demo-6.3.11 vCPU, 2,560 MB
ASBR1Cisco IOS XRvxrv-k9-demo-6.3.11 vCPU, 2,560 MB
ASBR2Cisco IOS XRvxrv-k9-demo-6.3.11 vCPU, 2,560 MB
PE2Cisco IOS XRvxrv-k9-demo-6.3.11 vCPU, 2,560 MB
CE2Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNP Service Provider guided labs.

  3. Open 16 - Inter-AS L3VPN - options A and B and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNP Service Provider labs

All CCNP Service Provider labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.