layer 2 between 2 sites over wires only mpls

[carl_townshend]

Hi guys

we have an mpls wires only network where we manage the ce routers, so just run bgp to our provider and can advertise whatever we want. We use ISR 4k routers

If i wanted to extend vlans between 2 of my sites over this, what is the best technology to achieve it? L2TPv3?  How about evpn? Could i do evpn without vxlan?

I would also like to lab this in cml, anyone got a lab for an evpn setup ?

many thanks

Carl

[MHM Cisco World]

For evpn ypu need to contact SP  

For l2tpv3 aince you have already l3vpn run with sp then you can config l2tpv3 xconnect over l3vpn.

MHM

[MHM Cisco World]

R4#show running-config
Building configuration...

Current configuration : 1934 bytes
!
! Last configuration change at 01:39:30 UTC Wed Jul 10 2024
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R4
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 5
pseudowire-class class
encapsulation l2tpv3
ip local interface Loopback0
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 4.4.4.4 255.255.255.255
!
interface Loopback10
ip address 44.44.44.44 255.255.255.255
!
interface Loopback100
ip address 144.144.144.144 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.4 255.255.255.0
duplex full
!
interface FastEthernet1/0
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet1/1
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet2/0
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet2/1
no ip address
speed auto
duplex auto
no keepalive
xconnect 5.5.5.5 45 encapsulation l2tpv3 pw-class class
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
interface GigabitEthernet4/0
no ip address
shutdown
negotiation auto
!
router bgp 100
bgp log-neighbor-changes
network 4.4.4.4 mask 255.255.255.255
network 44.44.44.44 mask 255.255.255.255
neighbor 10.0.0.1 remote-as 200
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!
!
end

R5#show run
Building configuration...

*Jul 10 01:40:45.299: %SYS-5-CONFIG_I: Configured from console by console
Current configuration : 1761 bytes
!
! Last configuration change at 01:40:45 UTC Wed Jul 10 2024
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R5
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 5
pseudowire-class class
encapsulation l2tpv3
ip local interface Loopback0
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface FastEthernet0/0
ip address 11.0.0.5 255.255.255.0
duplex full
!
interface FastEthernet1/0
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet1/1
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet2/0
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet2/1
no ip address
speed auto
duplex auto
no keepalive
xconnect 4.4.4.4 45 encapsulation l2tpv3 pw-class class
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
interface GigabitEthernet4/0
no ip address
shutdown
negotiation auto
!
router bgp 400
bgp log-neighbor-changes
network 5.5.5.5 mask 255.255.255.255
neighbor 11.0.0.3 remote-as 300
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!
!
end

R1#show run
R1#show running-config
*Jul 10 01:40:49.791: %LDP-5-NBRCHG: LDP Neighbor 200.0.0.2:0 (1) is UP
R1#show running-config
Building configuration...

Current configuration : 2270 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
ip vrf RED
rd 1:100
route-target export 1:100
route-target import 1:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label mode vrf RED protocol bgp-vpnv4 per-vrf
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip vrf forwarding RED
ip address 10.0.0.1 255.255.255.0
duplex full
!
interface FastEthernet1/0
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet1/1
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet2/0
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet2/1
no ip address
shutdown
speed auto
duplex auto
!
interface Serial3/0
ip address 100.0.0.1 255.255.255.0
mpls ip
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
interface GigabitEthernet4/0
no ip address
shutdown
negotiation auto
!
router ospf 100
network 1.1.1.1 0.0.0.0 area 0
network 100.0.0.0 0.0.0.255 area 0
!
router bgp 200
bgp log-neighbor-changes
neighbor 3.3.3.3 remote-as 300
neighbor 3.3.3.3 ebgp-multihop 255
neighbor 3.3.3.3 update-source Loopback0
neighbor 3.3.3.3 next-hop-unchanged
!
address-family vpnv4
neighbor 3.3.3.3 activate
neighbor 3.3.3.3 send-community extended
exit-address-family
!
address-family ipv4 vrf RED
redistribute static
neighbor 10.0.0.2 remote-as 100
neighbor 10.0.0.2 activate
neighbor 10.0.0.4 remote-as 100
neighbor 10.0.0.4 activate
exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip route vrf RED 144.144.144.144 255.255.255.255 10.0.0.4
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!
!
end

R3#show ru
R3#show running-config
Building configuration...

Current configuration : 2127 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
ip vrf RED
rd 1:100
route-target export 1:100
route-target import 1:100
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
mpls label mode vrf RED protocol bgp-vpnv4 per-vrf
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
ip vrf forwarding RED
ip address 11.0.0.3 255.255.255.0
duplex full
!
interface FastEthernet1/0
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet1/1
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet2/0
no ip address
shutdown
speed auto
duplex auto
!
interface FastEthernet2/1
no ip address
shutdown
speed auto
duplex auto
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
ip address 200.0.0.3 255.255.255.0
mpls ip
serial restart-delay 0
!
interface GigabitEthernet4/0
no ip address
shutdown
negotiation auto
!
router ospf 100
network 3.3.3.3 0.0.0.0 area 0
network 200.0.0.0 0.0.0.255 area 0
!
router bgp 300
bgp log-neighbor-changes
neighbor 1.1.1.1 remote-as 200
neighbor 1.1.1.1 ebgp-multihop 255
neighbor 1.1.1.1 update-source Loopback0
neighbor 1.1.1.1 next-hop-unchanged
!
address-family vpnv4
neighbor 1.1.1.1 activate
neighbor 1.1.1.1 send-community extended
exit-address-family
!
address-family ipv4 vrf RED
neighbor 11.0.0.5 remote-as 400
neighbor 11.0.0.5 activate
exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!
!
end

[paul driver]

Hello
VXLAN sounds like the best alternative additionally EVPN if you wish to route between those vlans

[Giuseppe Larosa]

Hello @carl_townshend ,

>> We use ISR 4k routers

I think L2TPv3 is your best choice of course the limitation is that thisis  a L2 point to point transport service.

Consider @MHM Cisco World 's post for an example of configuration

Hope to help

Giuseppe

[carl_townshend]

Hi 

Thanks for the responses, what if we wanted to extend multiple vlans using L2TPv3 ? would you need multiple pseudowire classes? any examples?

Also VXLAN EVPN was also mentioned, is one better than the other ?

[MHM Cisco World]

Thanks for the responses, what if we wanted to extend multiple vlans using L2TPv3 ? would you need multiple pseudowire classes? any examples?

No for class you can use same class but add

interworking vlan

And multi vlan ypu need in CE route config subinterface and use xconnect for each subinterface with different VC value' VC value is the label and it must be unique.

MHM

[paul driver]

Hello
review here mpls L2 vpns as @Giuseppe Larosa noted options available would be based on platform dependency