CloudLabBox
Try the free demo

CCNP Service Provider lab 15 of 23

L3VPN shared services and Internet access

Give two VPN customers shared services without letting them see each other, using route targets and an export policy on IOS XR. Then leak a default and a public block for Internet access from a VRF.

Run this lab

It needs Lite: its 6 nodes are set to 6 vCPU and 7,168 MB in total. That fits the free demo too.

In your workspace: Shared, then CCNP Service Provider guided labs, then 15 - L3VPN shared services and Internet access

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Advanced
Time
About 75 minutes
Nodes need
6 vCPU, 7,168 MB
Smallest plan
Lite

The scenario

Maple Foods and Rowan Freight are happy with their VPNs and they want more. Both want to use Fellgate Carrier's hosted services in 10.200.0.0/24: DNS, monitoring and a software mirror. Neither may see the other. Maple also wants Internet access for its public web servers in 203.0.113.64/29, through its VPN connection.

The VPNs work. PE1 has VRF MAPLE and the Internet uplink, in the global table. PE2 has VRF ROWAN and VRF SHARED. SHARED exports 64500:900 and imports 64500:910.

DeviceInterfaceAddressConnects to
M1Loopback1192.168.1.1/24
M1Gi0/0172.16.1.2/30PE1 Gi0/0/0/2
M1Loopback2203.0.113.65/29
UPLoopback1198.51.100.1/24
UPGi0/0198.18.0.2/30PE1 Gi0/0/0/3
PE1Loopback010.255.0.1/32
PE1Gi0/0/0/010.0.12.1/30PE2 Gi0/0/0/0
PE1Gi0/0/0/2172.16.1.1/30M1 Gi0/0
PE1Gi0/0/0/3198.18.0.1/30UP Gi0/0
PE2Loopback010.255.0.2/32
PE2Gi0/0/0/010.0.12.2/30PE1 Gi0/0/0/0
PE2Gi0/0/0/2172.16.2.1/30R1 Gi0/0
PE2Gi0/0/0/3172.16.9.1/30SVC Gi0/0
R1Loopback1192.168.2.1/24
R1Gi0/0172.16.2.2/30PE2 Gi0/0/0/2
SVCLoopback110.200.0.1/24
SVCGi0/0172.16.9.2/30PE2 Gi0/0/0/3

What you’ll practise

  • Design route targets for shared services
  • Add a route target to chosen routes with an export policy
  • Leak a default route from the global table into a VRF
  • Leak a public block from a VRF into the global table
  • Prove what is and is not reachable

The tasks

  1. See the starting point
  2. Tag routes for the shared VPN
  3. Internet access from a VRF

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of L3VPN shared services and Internet access6 nodes, 5 links. Every link is listed as text below the diagram.M1UPPE1PE2R1SVCGi0/0Gi0/0/0/2Gi0/0Gi0/0/0/3Gi0/0/0/2Gi0/0Gi0/0/0/3Gi0/0Gi0/0/0/0Gi0/0/0/0
6 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • M1 Gi0/0 to PE1 Gi0/0/0/2
  • UP Gi0/0 to PE1 Gi0/0/0/3
  • PE1 Gi0/0/0/0 to PE2 Gi0/0/0/0
  • PE2 Gi0/0/0/2 to R1 Gi0/0
  • PE2 Gi0/0/0/3 to SVC Gi0/0
Nodes in L3VPN shared services and Internet access, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
M1Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
UPCisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
PE1Cisco IOS XRvxrv-k9-demo-6.3.11 vCPU, 2,560 MB
PE2Cisco IOS XRvxrv-k9-demo-6.3.11 vCPU, 2,560 MB
R1Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
SVCCisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNP Service Provider guided labs.

  3. Open 15 - L3VPN shared services and Internet access and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNP Service Provider labs

All CCNP Service Provider labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.