MPLS cisco QOS VPN full 03 mpls te toi

MPLS TE TOI eosborne@cisco.com Course Number Presentation_ID © 2001, Cisco Systems, Inc Agenda • How MPLS TE works • What Code Is MPLS TE In? • Platform Issues in Implementation Lab Demo - config Presentation_ID â 2001, Cisco Systems, Inc How MPLS TE Works • Prerequisites • How MPLS-TE Works • Basic Configuration • Knobs! Knobs! Knobs! • Deploying and Designing Presentation_ID © 2001, Cisco Systems, Inc Prerequisites You should already understand… • How to configure a Cisco router • Basic MPLS concepts like push/pop/swap, EXP, and LFIB • How a link-state routing protocol works • Basic QoS mechanisms like MDRR and LLQ Presentation_ID © 2001, Cisco Systems, Inc Agenda • Prerequisites • How MPLS-TE Works • Basic Configuration • Knobs! Knobs! Knobs! • Deploying and Desiginig Presentation_ID © 2001, Cisco Systems, Inc How MPLS-TE Works • How MPLS-TE Works -What good is MPLS-TE? -Information Distribution -Path Calculation -Path Setup -Forwarding Traffic Down A Tunnel Presentation_ID © 2001, Cisco Systems, Inc What Good Is MPLS-TE? • There are two kinds of networks Those that have plenty of bandwidth everywhere Those with congestion in some places, but not in others • Presentation_ID The first kind always evolve into the second kind! © 2001, Cisco Systems, Inc What Good Is MPLS-TE? • MPLS-TE introduces a 3rd kind: Those that have plenty of bandwidth everywhere Those with congestion in some places, but not in others Those that use all of their bandwidth to its maximum efficiency, regardless of shortestpath routing! Presentation_ID © 2001, Cisco Systems, Inc What Good Is MPLS-TE? What is MPLS-TE? What is it not? Multi Protocol Label Switching Traffic Engineering Magic Problem-solving Labor Substitute which is Totally Effortless This stuff takes work, but it’s worth it!!! Presentation_ID â 2001, Cisco Systems, Inc Information Distribution You need a link-state protocol as your IGP IS-IS or OSPF • Link-state requirement is only for MPLS-TE! Not a requirement for VPNs, etc! Presentation_ID © 2001, Cisco Systems, Inc 10 TunnelVision Client Screenshot Presentation_ID © 2001, Cisco Systems, Inc 170 TunnelVision • Cisco is also working with an external partner to add node protection path calculation • The partner has world-class algorithm development experience • TunnelVision will feed topology to this tool, tool will calculate backup paths Presentation_ID © 2001, Cisco Systems, Inc 171 Other Tools • There are other MPLS-TE tools WANDL, Make Systems, Orchestream, OpNet, etc • Off-net modeling and path calculation very important to help scale TE deployment Presentation_ID © 2001, Cisco Systems, Inc 172 Deploying and Designing • Deployment Methodologies • Scalability • Management • Security Presentation_ID â 2001, Cisco Systems, Inc 173 Security MPLS-TE is not enabled on externally facing intefaces • Biggest security risk is spoofed RSVP -hacker would have to know a lot about your topo to anything -RSVP authentication exists (rfc2747), not implemented Presentation_ID © 2001, Cisco Systems, Inc 174 Security • MPLS-TE can hide your network topology from the outside world • Is this “security”? That’s debatable But it’s certainly a neat knob! RtrA(config)#no mpls ip propagate-ttl ? forwarded Propagate IP TTL for forwarded traffic local Presentation_ID Propagate IP TTL for locally originated traffic © 2001, Cisco Systems, Inc 175 Conclusion • TE is cool • You should use lots of it • It will make you popular • It also cures leprosy, rickets, and tennis elbow! Presentation_ID © 2001, Cisco Systems, Inc 176 Agenda • How MPLS TE works • What Code Is MPLS TE In? • Platform Issues in Implementation • Lab Demo - config Presentation_ID © 2001, Cisco Systems, Inc 177 What Code Is MPLS-TE In? • IS-IS Support: 12.0(5)S, 12.0(6)T • OSPF Support: 12.0(8)S, 12.1(3)T • Also in future derivatives of these trains Presentation_ID © 2001, Cisco Systems, Inc 178 Agenda • How MPLS TE works • What Code Is MPLS TE In? • Platform Issues in Implementation • Lab Demo - config Presentation_ID © 2001, Cisco Systems, Inc 179 Platform Issues in Implementation • Basic TE needs software only RSVP, IS-IS, OSPF, TE • DS-TE Needs some form of LLQ Queueing not tied to advertisement (yet!) • FRR Need some quick way to communicate cutover to LCs • Label Push/Pop Could push labels (TE+LDP), if VPN also Presentation_ID © 2001, Cisco Systems, Inc 180 Reading Material • ENG-59293 – MPLS Forwarding Spec ENG-42799 TE FRR Design Spec Presentation_ID â 2001, Cisco Systems, Inc 181 Agenda • How MPLS TE works • What Code Is MPLS TE In? • Platform Issues in Implementation Lab Demo - config Presentation_ID â 2001, Cisco Systems, Inc 182 Core Topology G SR2 O C3PO S N3 P O S /1 O C3PO S N2 P O S /0 to v p n to v p n G SR1 O C 192 N5 P O S /0 O C 48 N4 P O S /0 P O S /0 SR P12 N6 P O S /0 O C48 N8 O C48 N7 P O S /0 P O S /0 G SR3 P O S /1 P O S /0 G SR8 P O S /0 P O S /0 G SR G SR O C12 N10 P O S /0 P O S /1 O C12 N11 P O S /0 O C12 N12 G SR7 O C 12 N13 P O S /1 P O S /0 G SR Presentation_ID © 2001, Cisco Systems, Inc 183 TE Topology VXR 12 VXR14 VXR15 G SR G SR1 N 22 AS65001 N 28 O SPF BG P R IP AS3402 AS65501 BG P N 25 VXR13 VXR 10 N 31 VXR16 VXR 11 VXR NO TE: Tun12 and Tun15 flo w a c r o s s th e b o tto m ( lo n g ) p a th a n d a r e p r o t e c t e d v ia t h e t o p p a th Presentation_ID © 2001, Cisco Systems, Inc 184 ... • How MPLS TE works • What Code Is MPLS TE In? • Platform Issues in Implementation • Lab Demo - config Presentation_ID © 2001, Cisco Systems, Inc How MPLS TE Works • Prerequisites • How MPLS- TE... Knobs! Knobs! • Deploying and Desiginig Presentation_ID © 2001, Cisco Systems, Inc How MPLS- TE Works • How MPLS- TE Works -What good is MPLS- TE? -Information Distribution -Path Calculation -Path Setup... DS3 OC3 RtrG DS3 RtrC Presentation_ID RtrE OC3 © 2001, Cisco Systems, Inc DS3 OC3 RtrD 16 How MPLS- TE Works • How MPLS- TE Works -What good is MPLS- TE? -Information Distribution -Path Calculation