[j-nsp] L3VPN configuration assistance

sthaug at nethelp.no sthaug at nethelp.no
Fri Jul 21 13:54:43 EDT 2006


> I have Juniper M-20s on my network.  I have a customer configured as a
> virtual router because all their VPN sites were in the same city,
> connected to the same PE router.  They're now adding a site in another
> city.  Can I keep the virtual router config and inject the routes from
> it into a VRF to talk to the remote site, or do I need to reconfigure
> the whole thing as a VRF?

If you can get a "separate" point to point link to the other city, by
way of VLANs, Frame Relay DLCIs, GRE tunnels or something similar, you
can keep the virtual router. Simply configure the interface on the local
router in the VR, and create another VR on the router at the other end
of the point to point link.

If you need to do this exercise many times, if may be simpler to do full
MPLS VPNs.

> Also, is there a better way than virtual
> routers to configure an L3VPN where all the sites connect to the same PE
> router?

Sounds like what you do here fits very well with VR. You *could* probably
put the customers into the default routing table and use various policy 
routing tricks instead, but it would be more complex and error-prone.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no


More information about the juniper-nsp mailing list