Solved: problems emulating MPL-te tunnel(explicit patch) iosXR on ciscoCML 2.8

heiliger-eliet · ‎04-08-2025

Hi there !!

I trying to make some test in cisco cml 2.8 with traffic engineer tunnel with explicit patch .

I'm using the the topology in the image below. I have already configure tunnel with explicit path from PE1( PE1-p2-p5-p3-p4-PE3) it is working, that is with IOS XE also I have test some other patch from PE1 and work grate. but I have the problem with PE3(IOS XR) that the tunnels isn't work with explicit path, with dynamic patch work great. I had tried to configure the same patch that the router select on dynamic path in explicit patch but that does not work.

can some see if I'm making a mistake in the configuration ?

or MPLS tunnel doesn't work well on ios XR in cisco cml ?

Topology

Configurations :

PE1

!
hostname PE1
!
!
vrf definition test-bgp
 rd 1000:300
 !
 address-family ipv4
  route-target export 1000:300
  route-target import 1000:300
 exit-address-family
!
vrf definition test-ospf
 rd 1000:200
 !
 address-family ipv4
  route-target export 1000:200
  route-target import 1000:200
 exit-address-family
!
vrf definition test-static
 rd 1000:101
 !
 address-family ipv4
  route-target export 1000:101
  route-target import 1000:101
 exit-address-family
!

! 
!
!
mpls label range 1000 1099
mpls traffic-eng tunnels
multilink bundle-name authenticated
l2vpn vfi context test_sign 
 vpn id 15
 autodiscovery bgp signaling bgp 
  ve id 11
  ve range 50
!

!

bridge-domain 15 
 member GigabitEthernet4 service-instance 15
 member vfi test_sign
!

!
interface Loopback1
 ip address 11.11.11.11 255.255.255.255
 ip ospf 1 area 0
!
interface Loopback2
 vrf forwarding test-ospf
 ip address 12.12.12.12 255.255.255.255
!
interface Tunnel1
 ip unnumbered Loopback1
 tunnel mode mpls traffic-eng
 tunnel destination 33.33.33.33
 tunnel mpls traffic-eng autoroute announce
 tunnel mpls traffic-eng path-option 1 explicit name to-pe3-2534
!
interface GigabitEthernet1
 ip address 10.100.111.11 255.255.255.0
 negotiation auto
 mpls traffic-eng tunnels
 no mop enabled
 no mop sysid
 ip rsvp bandwidth
!
interface GigabitEthernet2
 ip address 10.100.112.12 255.255.255.0
 negotiation auto
 mpls traffic-eng tunnels
 no mop enabled
 no mop sysid
 ip rsvp bandwidth
!
interface GigabitEthernet3
 no ip address
 negotiation auto
 no keepalive
 no mop enabled
 no mop sysid
 xconnect 33.33.33.33 10 encapsulation mpls
!
interface GigabitEthernet4
 vrf forwarding test-bgp
 ip address 10.200.11.1 255.255.255.252
 negotiation auto
 no mop enabled
 no mop sysid
!
interface BDI15
 ip address 192.168.0.3 255.255.255.0
 no mop enabled
 no mop sysid
!
router ospf 1
 router-id 11.11.11.11
 network 10.100.0.0 0.0.0.0 area 0
 network 10.100.0.0 0.0.255.255 area 0
 mpls ldp sync
 mpls ldp autoconfig
 mpls traffic-eng router-id Loopback1
 mpls traffic-eng area 0
!
router bgp 1000
 bgp router-id interface Loopback1
 bgp log-neighbor-changes
 no bgp default ipv4-unicast
 neighbor 5.5.5.5 remote-as 1000
 neighbor 5.5.5.5 update-source Loopback1
 !
 address-family ipv4
 exit-address-family
 !
 address-family vpnv4
  neighbor 5.5.5.5 activate
  neighbor 5.5.5.5 send-community both
 exit-address-family
 !
 address-family ipv4 vrf test-bgp
  neighbor 10.200.11.2 remote-as 1120
  neighbor 10.200.11.2 ebgp-multihop 5
  neighbor 10.200.11.2 update-source GigabitEthernet4
  neighbor 10.200.11.2 activate
  neighbor 10.200.11.2 as-override
 exit-address-family
 !
 address-family ipv4 vrf test-ospf
  network 12.12.12.12 mask 255.255.255.255
 exit-address-family
 !
 address-family ipv4 vrf test-static
  redistribute connected
  redistribute static
 exit-address-family
!
ip forward-protocol nd
no ip http server
ip http secure-server
!
ip route vrf test-static 10.200.1.1 255.255.255.255 10.200.11.2
!
!
ip explicit-path name to-pe3-2534 enable
 index 1 next-address 2.2.2.2
 index 2 next-address 5.5.5.5
 index 3 next-address 3.3.3.3
 index 4 next-address 4.4.4.4
 index 5 next-address 33.33.33.33
!
!
!
ip prefix-list p1p3-ShamLink seq 5 permit 12.12.12.12/32
ip prefix-list p1p3-ShamLink seq 10 permit 32.32.32.32/32
!
!
route-map p1p3-ShamLink deny 5 
 description block Ips to be us for sham lik
 match ip address prefix-list p1p3-ShamLink
!
route-map p1p3-ShamLink permit 10 
!
mpls ldp router-id Loopback1 force
!
!
end

P1

hostname P1
!
ip cef
login on-success log
no ipv6 cef
!
!
!
!
!
!
!
!
mpls label range 100 199
mpls traffic-eng tunnels
!
!

!
!
interface Loopback1
 ip address 1.1.1.1 255.255.255.255
 ip ospf 1 area 0
!
interface Ethernet0/0
 ip address 10.100.15.1 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/1
 ip address 10.100.12.1 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/2
 ip address 10.100.13.1 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/3
 ip address 10.100.111.1 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet1/0
 ip address 10.100.122.1 255.255.255.0
!
interface Ethernet1/1
 no ip address
 shutdown
!
interface Ethernet1/2
 no ip address
 shutdown
!
interface Ethernet1/3
 no ip address
 shutdown
!
router ospf 1
 router-id 1.1.1.1
 network 10.100.0.0 0.0.255.255 area 0
 mpls ldp sync
 mpls ldp autoconfig
 mpls traffic-eng router-id Loopback1
 mpls traffic-eng area 0
!
ip forward-protocol nd
!
!
ip http server
ip http secure-server
ip ssh bulk-mode 131072
no logging btrace
mpls ldp router-id Loopback1
!
!
!
control-plane
!
!
!
line con 0
 exec-timeout 0 0
 logging synchronous
line aux 0
line vty 0 4
 exec-timeout 0 0
 login
 transport input ssh
!

!
end

P2

hostname P2
!
!
ip cef
login on-success log
no ipv6 cef
!

!
!
mpls label range 200 299
mpls traffic-eng tunnels

!
!
interface Loopback1
 ip address 2.2.2.2 255.255.255.255
 ip ospf 1 area 0
!
interface Ethernet0/0
 ip address 10.100.25.2 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/1
 ip address 10.100.12.2 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/2
 ip address 10.100.24.2 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/3
 ip address 10.100.112.2 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
router ospf 1
 router-id 2.2.2.2
 network 10.100.0.0 0.0.255.255 area 0
 mpls ldp sync
 mpls ldp autoconfig
 mpls traffic-eng router-id Loopback1
 mpls traffic-eng area 0
!
ip forward-protocol nd
!

mpls ldp router-id Loopback1
!

!
!
end

P3

hostname P3
!
!
mpls label range 300 399
mpls traffic-eng tunnels
!
!
interface Loopback1
 ip address 3.3.3.3 255.255.255.255
 ip ospf 1 area 0
!
interface Ethernet0/0
 ip address 10.100.35.3 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/1
 ip address 10.100.34.3 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/2
 ip address 10.100.13.3 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/3
 ip address 10.100.33.3 255.255.255.0
 ip ospf network point-to-point
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet1/0
 ip address 10.100.32.3 255.255.255.0
!
interface Ethernet1/1
 ip address 30.200.11.3 255.255.255.0
 ip ospf network point-to-point
 ip ospf 1 area 0
!
interface Ethernet1/2
 no ip address
 shutdown
!
interface Ethernet1/3
 no ip address
 shutdown
!
router ospf 1
 router-id 3.3.3.3
 network 10.100.0.0 0.0.255.255 area 0
 mpls ldp sync
 mpls ldp autoconfig
 mpls traffic-eng router-id Loopback1
 mpls traffic-eng area 0
!
ip forward-protocol nd
!
!
ip http server
ip http secure-server
ip ssh bulk-mode 131072
no logging btrace
mpls ldp router-id Loopback1
!
!
end

hostname P4
!
!
!
ip cef
login on-success log
no ipv6 cef
!

!
mpls label range 400 499
mpls traffic-eng tunnels
!
!
!
interface Loopback1
 ip address 4.4.4.4 255.255.255.255
 ip ospf 1 area 0
!
interface Ethernet0/0
 ip address 10.100.45.4 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/1
 ip address 10.100.34.4 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/2
 ip address 10.100.24.4 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/3
 ip address 10.100.43.4 255.255.255.0
 ip ospf network point-to-point
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
router ospf 1
 router-id 4.4.4.4
 network 10.100.0.0 0.0.255.255 area 0
 mpls ldp sync
 mpls ldp autoconfig
 mpls traffic-eng router-id Loopback1
 mpls traffic-eng area 0
!
mpls ldp router-id Loopback1
!
!
end

P5

hostname P5
!
!
mpls label range 500 599
mpls traffic-eng tunnels
!
!
interface Loopback1
 ip address 5.5.5.5 255.255.255.255
 ip ospf 1 area 0
!
interface Ethernet0/0
 ip address 10.100.15.5 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/1
 ip address 10.100.25.5 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/2
 ip address 10.100.35.5 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
interface Ethernet0/3
 ip address 10.100.45.5 255.255.255.0
 mpls traffic-eng tunnels
 ip rsvp bandwidth
!
router ospf 1
 network 10.100.0.0 0.0.255.255 area 0
 mpls ldp sync
 mpls ldp autoconfig
 mpls traffic-eng router-id Loopback1
 mpls traffic-eng area 0
!
router bgp 1000
 bgp router-id interface Loopback1
 bgp log-neighbor-changes
 bgp listen range 33.33.33.33/32 peer-group pe-group
 bgp listen range 11.11.11.11/32 peer-group pe-group
 no bgp default ipv4-unicast
 neighbor pe-group peer-group
 neighbor pe-group remote-as 1000
 neighbor pe-group update-source Loopback1
 neighbor 10.10.10.10 remote-as 1000
 neighbor 10.10.10.10 update-source Loopback1
 neighbor 11.11.55.55 remote-as 1000
 neighbor 11.11.55.55 update-source Loopback1
 !
 address-family ipv4
  neighbor 11.11.55.55 activate
  neighbor 11.11.55.55 next-hop-self all
  neighbor 11.11.55.55 send-label
 exit-address-family
 !
 address-family vpnv4
  neighbor pe-group activate
  neighbor pe-group send-community both
  neighbor pe-group route-reflector-client
  neighbor pe-group next-hop-self all
  neighbor 10.10.10.10 activate
  neighbor 10.10.10.10 send-community both
  neighbor 10.10.10.10 route-reflector-client
  neighbor 10.10.10.10 next-hop-self all
 exit-address-family
!
mpls ldp router-id Loopback1
!

PE3

RP/0/RP0/CPU0:PE3#
RP/0/RP0/CPU0:PE3#
RP/0/RP0/CPU0:PE3#show running-config 
Tue Apr  8 16:47:39.612 UTC
!! Building configuration...
!! IOS XR Configuration 24.3.1
!! Last configuration change at Tue Apr  8 16:46:28 2025 by cisco
!
hostname PE3
logging console disable
username cisco
 group root-lr
 group cisco-support
 secret 10 $6$jlA.zA1kD.w1z...$UCqJKaPJn7TYOed7ZW3J8VKTgY4IWP2UAuL7fk7CZfbB4LEVwoRJ9D4zSKVwgr8Am/TeKqqz2tiuKi4ptCHDf.
!
explicit-path identifier 11
 index 1 next-address strict ipv4 unicast 4.4.4.4
 index 2 next-address strict ipv4 unicast 3.3.3.3
 index 3 next-address strict ipv4 unicast 5.5.5.5
 index 4 next-address strict ipv4 unicast 1.1.1.1
 index 5 next-address strict ipv4 unicast 11.11.11.11
!
vrf test-bgp
 rd 1000:300
 address-family ipv4 unicast
  import route-target
   1000:300
  !       
  export route-target
   1000:300
  !
 !
!
vrf test-ospf
 rd 1000:200
 address-family ipv4 unicast
  import route-target
   1000:200
  !
  export route-target
   1000:200
  !
 !
!
vrf test-static
 rd 1000:101
 address-family ipv4 unicast
  import route-target
   1000:101
  !
  export route-target
   1000:101
  !
 !
!
line console
 exec-timeout 0 0
 absolute-timeout 0
 session-timeout 0
!
line default
 exec-timeout 0 0
 absolute-timeout 0
 session-timeout 0
!
ipv4 prefix-list p1p2-ShamLink
 10 permit 12.12.12.12/32
 20 permit 32.32.32.32/32
!
interface Loopback1
 ipv4 address 33.33.33.33 255.255.255.255
!
interface Loopback2
 vrf test-ospf
 ipv4 address 32.32.32.32 255.255.255.255
!
interface tunnel-te1
 ipv4 unnumbered Loopback1
 autoroute announce
 !
 destination 11.11.11.11
 path-option 1 explicit identifier 11
!
interface MgmtEth0/RP0/CPU0/0
 shutdown
!
interface GigabitEthernet0/0/0/0
 vrf test-bgp
 ipv4 address 10.200.32.1 255.255.255.252
!
interface GigabitEthernet0/0/0/1
 shutdown
!
interface GigabitEthernet0/0/0/2
 shutdown
!
interface GigabitEthernet0/0/0/3
 ipv4 address 10.100.33.33 255.255.255.0
!
interface GigabitEthernet0/0/0/4
 ipv4 address 10.100.43.33 255.255.255.0
!
prefix-set p1p2-ShamLim
  12.12.12.12/32,
  32.32.32.32/32
end-set
!
route-policy default-bgp
  pass
end-policy
!
route-policy p1p2-ShamLink
  if destination in p1p2-ShamLim then
    drop
  else
    pass
  endif
end-policy
!
router static
 vrf test-static
  address-family ipv4 unicast
   10.200.2.2/32 10.200.32.2
  !
 !
!
router ospf 1
 address-family ipv4 unicast
 area 0
  mpls ldp sync
  mpls ldp auto-config
  mpls traffic-eng
  interface Loopback1
  !
  interface GigabitEthernet0/0/0/3
   network point-to-point
  !
  interface GigabitEthernet0/0/0/4
   network point-to-point
  !
 !
 mpls traffic-eng router-id Loopback1
!         
router bgp 1000
 bgp router-id 33.33.33.33
 address-family vpnv4 unicast
 !
 neighbor 5.5.5.5
  remote-as 1000
  update-source Loopback1
  address-family vpnv4 unicast
  !
 !
 vrf test-bgp
  address-family ipv4 unicast
  !
  neighbor 10.200.32.2
   remote-as 1120
   ebgp-multihop 5
   as-override
   update-source GigabitEthernet0/0/0/0
   address-family ipv4 unicast
    route-policy default-bgp in
    route-policy default-bgp out
   !
  !       
 !
 vrf test-ospf
  address-family ipv4 unicast
   network 32.32.32.32/32
   redistribute ospf 20
  !
 !
 vrf test-static
  address-family ipv4 unicast
   redistribute connected
   redistribute static
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/3
  bandwidth
 !
 interface GigabitEthernet0/0/0/4
  bandwidth
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/3
 !
 interface GigabitEthernet0/0/0/4
 !
!
mpls ldp
 router-id 33.33.33.33
!
mpls label range table 0 33000 33100
end

Show mpls traffic-eng tunnels 1

RP/0/RP0/CPU0:PE3#show mpls traffic-eng tunnels 1
Tue Apr  8 16:49:33.601 UTC


Name: tunnel-te1  Destination: 11.11.11.11  Ifhandle:0x2c 
  Signalled-Name: PE3_t1
  Status:
    Admin:    up Oper: down   Path: not valid   Signalling: Down

    path option 1,  type explicit 11
    Last PCALC Error: Tue Apr  8 16:45:39 2025
      Info: No path to destination, 11.11.11.11 (reverselink)
    G-PID: 0x0800 (derived from egress interface properties)
    Bandwidth Requested: 0 kbps  CT0
    Creation Time: Tue Apr  8 16:43:35 2025 (00:05:58 ago)
  Config Parameters:
    Source: router ID (default)
    Bandwidth:        0 kbps (CT0) Priority:  7  7 Affinity: 0x0/0xffff
    Metric Type: TE (global)
    Path Selection:
      Tiebreaker: Min-fill (default)
    Hop-limit: disabled
    Cost-limit: disabled
    Delay-limit: disabled
    Delay-measurement: disabled
    Path-invalidation timeout: 10000 msec (default), Action: Tear (default)
    AutoRoute:  enabled  LockDown: disabled   Policy class: not set
    Forward class: 0 (not enabled)
    Forwarding-Adjacency: disabled
    Autoroute Destinations: 0
    Loadshare:          0 equal loadshares
    Load-interval: 300 seconds
    Auto-bw: disabled
    Auto-Capacity: Disabled:
    Self-ping: Disabled
    Fast Reroute: Disabled, Protection Desired: None
    Path Protection: Not Enabled
    BFD Fast Detection: Disabled
    Reoptimization after affinity failure: Enabled
    Soft Preemption: Disabled


LSP Tunnel 11.11.11.11 1 [10] is signalled, Signaling State: up
  Tunnel Name: PE1_t1 Tunnel Role: Tail
  InLabel: GigabitEthernet0/0/0/4, implicit-null
  Signalling Info:
    Src 11.11.11.11 Dst 33.33.33.33, Tun ID 1, Tun Inst 10, Ext ID 11.11.11.11
    Router-IDs: upstream   4.4.4.4
                local      33.33.33.33
    Bandwidth: 0 kbps (CT0) Priority:  7  7 DSTE-class: 0
    Soft Preemption: None
    SRLGs: not collected
    Path Info:
      Incoming Address: 10.100.43.33
      Incoming:
        Explicit Route:
          Strict, 10.100.43.33
          Strict, 33.33.33.33

      Record Route: Disabled
      Tspec: avg rate=0 kbits, burst=1000 bytes, peak rate=0 kbits
      Session Attributes: Local Prot: Not Set, Node Prot: Not Set, BW Prot: Not Set
                          Soft Preemption Desired: Not Set
    Resv Info: None
      Record Route: Disabled
      Fspec: avg rate=0 kbits, burst=1000 bytes, peak rate=0 kbits
Displayed 1 (of 1) heads, 0 (of 0) midpoints, 1 (of 1) tails
Displayed 0 up, 1 down, 0 recovering, 0 recovered heads

Traceroute to PE1

RP/0/RP0/CPU0:PE3#traceroute 11.11.11.11
Tue Apr  8 16:50:52.271 UTC

Type escape sequence to abort.
Tracing the route to 11.11.11.11

 1  10.100.33.3 [MPLS: Label 314 Exp 0] 7 msec 
    10.100.43.4 4 msec  5 msec 
 2  10.100.13.1 [MPLS: Label 113 Exp 0] 5 msec 
    10.100.24.2 6 msec 
    10.100.13.1 4 msec 
 3  10.100.111.11 26 msec  *  5 msec 
RP/0/RP0/CPU0:PE3#

Harold Ritter · ‎04-08-2025

Hi @heiliger-eliet ,

Make sure you configure all the core interfaces as point-to-point in ospf. It should fix the issue.

Regards,
Harold Ritter, CCIE #4168 (EI, SP)

View solution in original post

Harold Ritter · ‎04-08-2025

Hi @heiliger-eliet ,

Make sure you configure all the core interfaces as point-to-point in ospf. It should fix the issue.

Regards,
Harold Ritter, CCIE #4168 (EI, SP)

heiliger-eliet · ‎04-08-2025

Wao!!!!! it is working now ... thanks a lot @Harold Ritter .

can I ask .... why cor interfaces must be configure as point-to-point ? I haven't read that on documentation that Te tunnel need IGP point to point interfaces.

Harold Ritter · ‎04-09-2025

Hi @heiliger-eliet ,

> why cor interfaces must be configure as point-to-point ?

This is not a requirement, but configuring the core links as p2p is considered a best practice in SP networks.

> I haven't read that on documentation that Te tunnel need IGP point to point interfaces.

You could get the MPLS TE to work with the interfaces in broadcast mode, but it imposes additional restrictions. For example you would need to use the interface address in the explicit path configuration instead of the router-id.

Regards,
Harold Ritter, CCIE #4168 (EI, SP)