Mpls layer 3 vpn

[samrckz17]

connection details
CE--PE1---P1---PE3---CE3
i have provided the configuration of the above 5 ASR 9k routers please help me to configure mpls intranet vpn from Ce1 to Ce3
 

[M02@rt37]

Hello @samrckz17,

We need more clarification.

You want IPs on CE joined IP on CE3? You consider CE and CE3 are the same "customer" ? 

[samrckz17]

CE 1 and CE 2 are same customer with different branch 

[M02@rt37]

OK @samrckz17

You need to activate VPNv4 on PE and P. Consider P as RR of your topology. Create vrf on PEs dedicated to that "custumer".

CE and CE3 don't need MPLS feature. 

https://www.cisco.com/c/en/us/td/docs/ios_xr_sw/iosxr_r3-7/mpls/configuration/guide/gc37v3.html

[MHM Cisco World]

Check as number of ce 

There are 6500 and 5001 and in ce I think you wrong use as number 

[samrckz17]

Configured ebgp between CE1 to PE1 and CE3 to PE3 and ibgp between PE1 to P1 and PE2 to P1

[MHM Cisco World]

Only check as number 

Ce must use 6500 and mpls cloud must use 5001 I see wrong config in CE2 

[Harold Ritter]

Hi @samrckz17 ,

Lots of issues with the configurations.

1. You need to configure a VRF context on both PE1 and PE3, as this is what create the VPN.

vrf test
address-family ipv4 unicast
import route-target
1:1
!
export route-target
1:1 

2. On PE1 and PE3, configure the newly configured VRF on the interface connected to the CE. For example on PE1:

interface GigabitEthernet0/0/0/2
description connection to CE1
vrf test
ipv4 address 192.168.170.1 255.255.255.0

3. You need to configure the eBGP session between PE1 and CE1 and PE3 and CE3 inside the VRF context (context created in step 1) under the BGP process. 

router bgp 65000
vrf test
rd 1:1
address-family ipv4 unicast
!
neighbor 192.168.170.2
remote-as 5001
address-family ipv4 unicast
route-policy PASS in
route-policy PASS out

4. The session between PE1 and P1 and PE3 and P1 should be established using the loopback address, rather thanks the physical address. Don't forget to configure "update-source lo0" on all these neighbors. Example for PE1:

router bgp 65000
address-family vpnv4 unicast
!
neighbor-group BGP-PEER
remote-as 65000
update-source Loopback0
address-family vpnv4 unicast
!
neighbor 1.1.1.1
use neighbor-group BGP-PEER
address-family vpnv4 unicast
route-policy SET-MED-P1 out

5. Need to change "address-family ipv4 unicast" to "address-family vpnv4 unicast" on PE1, P1 (route-reflector) and PE3, as PE1 example in step 4.

6. Remove the interface between PE and CE from MPLS LDP configuration, as PE and CE do not need run LDP between each other.

Regards,