cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
845
Views
0
Helpful
1
Replies

L2 over L3 Network again

Tls31
Level 1
Level 1

Hi Forum,

 

I searched but did not find a clue for my issue.

 

We do our own MPLS with 6880X as PE.

 

I have an issue with one of our building, we will move to a new address.

 

Old site : 6880X (in 15.1) as PE linked to a 4506 (in 15.1) as CE. So I have mutliple SVI with /30 to peer between the CE and the PE (one by VRF).

Why SVI? Because this old platform can not do the job with sub-interfaces..

4506 have SVI interface to the 6880X over a physical interface. Layer 2 link with /30 vlan for BGP peering.

6880x have L3 interface to MPLS (all others 6880x).

 

New site : 6880X (in 15.1) as PE/CE, more simple.

This router will have a L3 interface to MPLS

 

So I will configure my MPLS for the new site as a new PE, no issue here.

 

Before the relocation, we have to test some stuffs on the new site but with the same subnets as the old site. Even we have to keep the gateways on the old site..

 

So my issue is to create a Layer 2 tunnel over my L3 network.

 

I have found several ways but none of them seems to be possible with the 4506.. :

 

1/

 

 
Note: When you configure the bridge-group on the Tunnel interface on older Cisco IOS versions, the IOS reports that the command is unreleased and unsupported, but it still accepts the command. In more recent versions, this command is completely obsolete, and the error message displays.

 

2/

 

VPDN

 

I think it does not work anymore.. :

https://web.archive.org/web/20090127060833/http://cisco.com/en/US/docs/ios/12_0t/12_0t1/feature/guide/l2tpT.html

 

3/

 

EoMPLS, L2TPv3, OTV, VPLS, AToMPLS

All theses methods are, I think, not supported by the 4506 :(

 

4/

 

Vfi, Xconnect :

It could be a good solution but my old site is connected to its 6880 with a L2 interfaces with SVI.. so it should not be able to route to the MPLS if I set a VFI on this physical interface.. :(

 

-----

 

 

Any help is welcome, I think of a simple GRE Tunnel over L3 but I can't find the "simple" way..

 

 

I try to not add another equipment, with a IpSec on a dedicated firewall on each side it will work otherwise.

 

Sorry for my english, is not my native language.

 

 

 

 

1 Reply 1

Tls31
Level 1
Level 1

Hi, 

 

Someone have a clue about this issue?

 

Regards,