Cisco Systems 3.6.6 manual 6VPE Overview, PE1 PE2 CE2

Page 60

Chapter 6 IPv6 VPN over MPLS

6VPE Overview

6VPE Overview

Figure 6-1illustrates the 6VPE network architecture and control plane protocols when two IPv6 sites communicate through an MPLS IPv4 backbone.

Figure 6-1 6VPE Network Architecture

Customer#1

Default

routing table

site1

 

 

 

2001:100:1:1000::/56

routing table “red”

 

 

200.14.14.1

 

 

 

 

 

 

 

 

BGP table

CE1

 

 

 

 

1

 

 

2001:100:1:1000::/64

200.11.11.1

 

200.10.10.1

 

 

 

 

2

3

4

 

 

MP-iBGP

2001:100:2:1000::/64

 

PE1

 

PE2

CE2

routing table “blue”

 

 

 

 

Provider

2001:100:2:1000::/56

 

 

 

Default

network

 

 

 

 

 

routing table

 

Customer#2

 

 

 

site1

 

 

 

Customer#1

site2

2001:100:1:2000::/56

CE

5

2001:100:1:2000::/64

2001:100:1:2000::/64

2001:100:2:2000::/56

CE

 

Customer#2

210612

site2

Dual stack is a technique that lets IPv4 and IPv6 coexist on the same interfaces. Dual stack implementations depend on the network area:

•Network Core—In the network core, IPv6 is carried in a VPN manner over a non IPv6-aware MPLS core. This allows IPv4 or IPv6 communities to communicate with each other over an IPv4 MPLS backbone without modifying the core infrastructure. By avoiding dual stacking on the core routers, resources can be dedicated to their primary function to avoid any complexity on the operational side. The transition and integration with respect to the current state of networks is also transparent.

•Network Access—To support native IPv6, the access that connects to IPv4 and IPv6 domains must be IPv6-aware. Service PE elements can exchange routing information with end users; therefore, dual stacking is a mandatory requirement on the access layer.

When IPv6 is enabled on the subinterface that is participating in a VPN, it becomes an IPv6 VPN. The CE-PE link runs IPv6 or IPv4 natively. The addition of IPv6 on a PE router turns the PE into 6VPE, thereby enabling service providers to support an IPv6 over the MPLS network.

PE routers use VRF tables to maintain the segregated reachability and forwarding information of each IPv6 VPN. MP-BGP with its IPv6 extensions distributes the routes from 6VPE to other 6VPEs through a direct interior BGP (iBGP) session or through VPNv6 route reflectors. The next hop of the advertising PE router still retains the IPv4 address (normally it is a loopback interface), but with the addition of IPv6, a value of ::FFFF: is prepended to the IPv4 next hop.

The technique can be seen as automatic tunneling of the IPv6 packets through the IPv4 backbone. The MP-BGP relationships remain the same as they are for VPNv4 traffic, with an additional capability of VPNv6. Where both IPv4 and IPv6 are supported, the same set of MP-BGP peering relationships is used.

Cisco Active Network Abstraction 3.6.6 MPLS User Guide

6-2

OL-19192-01

 

 

Page 59 Page 61
Image 60
Page 59 Page 61
Contents Cisco Active Network Abstraction 3.6.6 Mpls User Guide Americas HeadquartersPage N T E N T S Viewing Rate Limit Information IPv6 VPN over Mpls Running a VPN Leak Report A-1 Preface OrganizationSection Title Description Related Documentation ConventionsConvention Indication Obtaining Documentation and Submitting a Service Request OL-19192-01 Viewing Mpls VPNs Supported Mpls and VPN Technologies and Routing ProtocolsVPN Business Configurations Mpls VPN Maps OverviewLayer 3 VPN Business Configuration Layer 2 VPN Business Configuration and TunnelsVPN Topology Connections Topology Example Line Description Association Example DescriptionLayer 3 VPN Map Layer 2 VPN MapCisco ANA NetworkVision Window Tree Pane Tree Map PaneRepresents Tree Pane Map Pane DescriptionMap Pane Ticket PaneManaging Mpls VPN Maps Adding a VPN to a MapConnecting a CE Device Removing a VPN from a MapDisconnecting a CE Device Showing or Hiding a CE DeviceCreating an Aggregated Node Disaggregating an Aggregated NodeNode is separated into its parts OL-19192-01 Managing VPN Business Configurations Creating a VPNManaging VPN Business Configurations Creating a VPN Moving a Virtual Router Adding a Tunnel to a VPNRemoving a Tunnel Add Tunnels Dialog BoxCreating an LCA Moving an LCADeleting an LCA Moving an LCP Jumping to an Adjacent LCPRenaming a Business Element Deleting a Business Element RequirementsOL-19192-01 Viewing Mpls VPN Properties Viewing VPN PropertiesViewing Site Properties Viewing Virtual Router Properties VRF Properties Cisco Active Network Abstraction 3.6.6 Mpls User Guide Viewing VRF Properties in the Inventory Window Displaying VRF Egress and Ingress AdjacentsVRF Properties From a Device Inventory Window Working with the VPN Service Overlay Choosing an OverlayDisplaying or Hiding Overlays Displaying or Hiding CalloutsPage OL-19192-01 Viewing Mpls Logical Inventory Mpls VPN Logical Inventory OverviewViewing Mpls VPN Properties When finished, press Ctrl + F4 to close the inventory window Viewing Routing Entities Viewing the ARP Table Viewing a Label Switched Entity Mpls Interfaces TabTraffic Engineering LSPs Tab Viewing Mpls Logical Inventory Viewing Mpls VPN Properties Viewing MP-BGP Information Viewing VRF InformationOL-19192-01 Viewing Port Configuration Port Information in the Inventory WindowViewing Pseudowire End-to End Emulation Tunnels Viewing Cross VRF Routing EntriesViewing Mpls TE Tunnel Information Viewing Access List Information OL-19192-01 OL-19192-01 IPv6 VPN over Mpls 6VPE Overview PE1 PE2 CE2Viewing IPv4 and IPv6 Addresses Addresses Interface Table Properties WindowPort with IPv4 and IPv6 Addresses Cisco ANA 6VPE Support Limitations Device Software VersionIPv6 Addressing IPv6 Address RepresentationIPv6 Address Prefix Text Representation Address TypeCompressed IPv6 Address Non-Compressed IPv4 and IPv6 AddressAdding Route Target Using Cisco ANA NetworkVision Provisioning Route TargetsCommand Builder Route Target Commands 3 4 5 6 Add Route Target Export with Address Family Preview Enabling IPv6 VRFs Adding Route Targets with IPv4 and IPv6 Address FamiliesDeleting Route Targets with IPv4 and IPv6 Address Families Deleting Route Targets Mpls Network Faults Mpls Network Alarms OverviewBGP Neighbor Loss Alarm AlarmDescription Up Alarm BGP Process Down Alarm Broken LSP Discovered AlarmLDP Neighbor Down Alarm Example of an Mpls Black Hole ScenarioMpls Black Hole Found Alarm Mpls TE Tunnel AlarmsPseudo Wire Mpls Tunnel Down Alarm Service Impact Analysis Overview Impact Analysis in Mpls NetworksService Impact Analysis For MPLS-Based VPN Services L3 VPN ReportSupported Fault Scenarios Pseudowire L2 VPN ReportLink Down Scenario Link Overutilized/Data Loss ScenarioBGP Neighbor Loss Scenario Route Reflector Example Pseudowire Mpls Tunnel Down Scenario Broken LSP Discovered ScenarioMpls TE Tunnel Down Scenario OL-19192-01 Using Cisco ANA PathTracer in Mpls Networks Cisco ANA PathTracer Tracing CapabilityUsing Cisco ANA PathTracer in Mpls Networks Cisco ANA PathTracer Starting PointsElement Location Start Options Cisco ANA PathTracer Windows Cisco ANA PathTracer EndpointsElement Location End Options Cisco ANA PathTracer Multipath Window Cisco ANA PathTracer Single-Path Window Using Cisco ANA PathTracer for Layer 3 VPN Using Cisco ANA PathTracer for Layer 2 VPNUsing Cisco ANA PathTracer for Mpls TE Tunnels Viewing Mpls TE Tunnel Information Running a VPN Leak Report OL-19192-01 Numerics IN-2 IN-3 IN-4

3.6.6 specifications

Cisco Systems has continually evolved its networking solutions to address the demands of modern enterprises, with the introduction of the Cisco Systems 3.6.6 version being no exception. This version integrates cutting-edge technologies designed to enhance network performance, security, and management efficiency, catering to the increasingly complex needs of businesses across various sectors.

One of the standout features of Cisco Systems 3.6.6 is its enhanced support for automation and orchestration. This version incorporates advanced automation tools, allowing IT teams to deploy and configure network resources more rapidly and efficiently. With features such as Cisco DNA Center’s intent-based networking, organizations can streamline operations and reduce manual intervention, leading to quicker service delivery and reduced operational costs.

Security remains a top priority, and Cisco Systems 3.6.6 includes improved security protocols that help protect sensitive data and critical infrastructure. The integration of Cisco SecureX provides a unified view of security across the network, enabling organizations to respond to threats in real-time, manage vulnerabilities proactively, and maintain compliance with regulatory standards. The incorporation of machine learning and AI-driven analytics ensures that potential threats are identified and mitigated before they can escalate.

Interoperability is another key characteristic of version 3.6.6, allowing existing Cisco hardware and software to work seamlessly together. This flexibility ensures that enterprises can leverage their current investments while adopting newer technologies without the need for a complete overhaul of their existing network architecture.

Additionally, Cisco Systems 3.6.6 has enhanced support for IoT devices, integrating robust frameworks that enable organizations to manage and secure an increasing number of connected devices. With the proliferation of IoT in various industries, this feature is vital for maintaining efficiency and security, as it allows for better monitoring and control over the connected ecosystem.

In conclusion, Cisco Systems 3.6.6 embodies a comprehensive approach to modern networking challenges. Its emphasis on automation, advanced security features, interoperability, and IoT support positions it as a pivotal solution for businesses looking to enhance their operational capabilities and embrace digital transformation. As organizations worldwide adapt to an ever-evolving technological landscape, Cisco Systems 3.6.6 stands out as a reliable partner in navigating these complexities.
Top Page Image Contents