Re: [nsp] MPLS VPN questions

From: Eric Osborne (eosborne@cisco.com)
Date: Sat Jul 28 2001 - 18:57:48 EDT


On Sat, Jul 28, 2001 at 01:13:19PM -0400, jlewis@lewis.org wrote:
> I've put together a small lab to do some MPLS VPN testing. I've got 2 PE
> routers (1 7206, 1 3640), and 3 CE routers. The layout is:
>
> CE1
> |
> CE2--PE1---PE2---CE3
>
> The example I'm sort of following is
> http://www.cisco.com/warp/public/105/mpls_vpn_basic.html
> though their use of lo interfaces on the PE's for "customer links" is very
> confusing.
>
> At first, I setup just PE1, CE1, and CE2 as T1's going into WIC-1T's on a
> NM-1E2W in PE1. That worked without any trouble. PE1 has static vrf
> routes for private /24's to each CE1 and CE2. CE1 and CE2 can ping each
> other. PE1 can ping vrf the CE1 and CE2.
>
> Then I added PE2 (ethernet crossover from a PA-4E on the 7200 to an
> NM-1E2W on the 3640). I setup another 3640 as CE3 with a T3 into a PA-T3
> on the 7200. CE3 is configured to be in the same VPN as the first 2 CE's,
> and PE2 can ping vrf CE3.
>
> Then I setup BGP on PE1 and PE2, and verified that the vrf routes are
> being propogated. The trouble is, I can't ping from CE1 or CE2 to CE3,
> and I can't ping vrf from PE1 to CE3.

What do 'show ip route vrf <foo>' show you on PE1 and PE2? Or 'debug
ip {icmp|packet}' on the CEs to see if you're getting the pings? Can
you ping from PE1 to PE2 within the vrf?

eric

>
> I did some searching and found a post from someone else several months ago
> who apparently followed the same example and setup the same test network
> and ran into the same problem. I didn't find any followups to his post
> and his address bounces, so I wasn't able to see if he'd found the
> problem.
>
> I can post actual configs a little later. I don't have access to them
> right now. The PE 3640 is running c3640-p7-mz.121-5.T9.bin, the PE 7200
> is running c7200-p-mz.121-5.T8.bin.
>
> --
> ----------------------------------------------------------------------
> Jon Lewis *jlewis@lewis.org*| I route
> System Administrator | therefore you are
> Atlantic Net |
> _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:47 EDT