MPLS and L3VPN lab 6 of 11
A RouterOS PE in a Cisco core
Make a MikroTik router a full PE in an IOS core, with two customers: one on eBGP and one on OSPF. Compare how RouterOS expresses VRFs, route targets and redistribution, read per-VRF labels, and find where the two vendors differ.
Run this lab
It needs Lite: its 6 nodes are set to 6 vCPU and 2,560 MB in total. That fits the free demo too.
In your workspace: Shared, then MPLS and L3VPN guided labs, then 06 - A RouterOS PE in a Cisco core
- Level
- Advanced
- Time
- About 90 minutes
- Nodes need
- 6 vCPU, 2,560 MB
- Smallest plan
- Lite
The scenario
Wrenfield Networks has picked up a small provider in a market town, and its only router runs RouterOS. Replacing it costs money that nobody wants to spend. So the question for you is simple: can a MikroTik router be a full PE in a Cisco core, with two customers on it?
| Customer | VRF | At PE1 (IOS) | At PE3 (RouterOS) | RD on PE3 | RT |
|---|---|---|---|---|---|
| Alder Foods | ALDER | CE1, eBGP | CE3, eBGP, AS 65203, 192.168.3.0/24 | 65100:3 | 65100:100 |
| Birch Logistics | BIRCH | Loopback20, 192.168.20.0/24 | CE4 (RouterOS), OSPF, 192.168.4.0/24 | 65100:4 | 65100:200 |
The same ideas in RouterOS 7:
| Idea | IOS | RouterOS 7 |
|---|---|---|
| VRF | vrf definition plus vrf forwarding on the interface | /ip vrf add name=X interfaces=etherN |
| RD and RTs | Under the VRF | /routing bgp vpn add vrf=X route-distinguisher=... import.route-targets=... export.route-targets=... |
| Put routes in the VPN | redistribute under address-family ipv4 vrf | export.redistribute= on /routing bgp vpn |
| Take VPN routes out to a customer | Automatic for eBGP in the VRF | output.redistribute=bgp-mpls-vpn on the customer's connection |
| Session address family | address-family vpnv4 | address-families=vpnv4 on the connection |
| Device | Interface | Address | Connects to |
|---|---|---|---|
| CE1 | Loopback1 | 192.168.1.1/24 | |
| CE1 | Gi0/0 | 172.16.1.2/30 | PE1 Gi0/0 |
| PE1 | Loopback0 | 10.255.0.1/32 | |
| PE1 | Loopback20 | 192.168.20.1/24 | |
| PE1 | Gi0/0 | 172.16.1.1/30 | CE1 Gi0/0 |
| PE1 | Gi0/1 | 10.0.12.1/30 | P Gi0/0 |
| P | Loopback0 | 10.255.0.2/32 | |
| P | Gi0/0 | 10.0.12.2/30 | PE1 Gi0/1 |
| P | Gi0/1 | 10.0.23.1/30 | PE3 ether1 |
| PE3 | loopback | 10.255.0.3/32 | |
| PE3 | ether1 | 10.0.23.2/30 | P Gi0/1 |
| CE3 | Loopback1 | 192.168.3.1/24 | |
| CE3 | Gi0/0 | 172.16.3.2/30 | PE3 ether2 |
| CE4 | ether1 | 172.16.4.2/30 | PE3 ether3 |
| CE4 | lan | 192.168.4.1/24 |
What you’ll practise
- Join a RouterOS router to an IOS LDP core
- Build VRFs, RDs and RTs on RouterOS 7 and a VPNv4 session to an IOS PE
- Connect an eBGP customer and an OSPF customer to a RouterOS PE
- Read per-VRF labels beside per-prefix labels on the two PEs
- Say where interoperability stops, and test around it
The tasks
- Join the label core
- Create the VRFs
- Build the VPNv4 session
- Put Alder in the VPN
- Put Birch in the VPN, over OSPF
- Read the labels
- Where the vendors differ
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- CE1
Gi0/0to PE1Gi0/0 - PE1
Gi0/1to PGi0/0 - P
Gi0/1to PE3ether1 - PE3
ether2to CE3Gi0/0 - PE3
ether3to CE4ether1
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| CE1 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| PE1 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| P | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| PE3 | MikroTik RouterOS | mikrotik-7.14.2 | 1 vCPU, 256 MB |
| CE3 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| CE4 | MikroTik RouterOS | mikrotik-7.14.2 | 1 vCPU, 256 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
MPLS and L3VPN guided labs.Open
06 - A RouterOS PE in a Cisco coreand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More MPLS and L3VPN labs
Related labs in other courses
CloudLabBox is independent of Cisco, Juniper Networks and MikroTik. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.