Cisco Systems OL-4344-01

1-8

Cisco IP Solution Center, 3.0: MPLS VPN Management User Guide, 3.0

OL-4344-01

Chapter1 About Cisco IP Solution Center

Overview of ISC

Figure 1-4 Defining the User Role

The permissions to Create, View, Modify, and Delete are enforced for the following resources:

PENDING DEPLOYED FUNCTIONAL

BROKEN

93827

LOST

REQUESTED

WAIT

DEPLOY

FAILED

DEPLOY

FAILED

AUDIT

CLOSED

Provisioning States

Auditing States

ISC Service Request States

INVALID

•Persistent task

•SAA probe

•Workflow

•Device

•ISC host

•Customer

•Provider

•PE

•CPE

•Qos Policy

•Qos service request

•MPLS policy

•MPLS service request

•Layer 2 VPN policy

•Layer 2 VPN service request

•Firewall policy

•Firewall service request

•Network Address Translation service request

•IPsec policy

•IPsec service request

•Deployment flow

•Template

Contents

Main CHAPT ER About Cisco IP Solution Center Overview of ISC ISC Features Page Resource Pools Features and Functions Provided in Provisioning with ISC VPN Service Profile-Based Provisioning Role-Based Access Control (RBAC) Page The Customers and Providers View of the Network About Provider Edge Routers (PEs) About Multi-VRF CEs Page Mapping IPsec Tunnels to MPLS VPNs Using Templates to Customize Configuration Files Uses for the Template Function Auditing Service Requests About MPLS VPNs Characteristics of MPLS VPNs Principal Technologies Intranets and Extranets VPN Routing and Forwarding Tables (VRFs) 1-17 VRF Implementation Considerations Similarly, you can utilize the Traceroute and Ping commands in a VRF context. When implementing VPNs and VRFs, Cisco recommends you keep the following considerations in mind: that PE, you must issue the following command to connect from the PE to the CE: Creating a VRF Instance Route Distinguishers and Route Targets Route Target Communities CE Routing Communities Hub and Spoke Considerations Full Mesh Considerations Security Requirements for MPLS VPNs Address Space and Routing Separation Address Space Separation Routing Separation Hiding the MPLS Core Structure Resistance to Attacks Securing the Routing Protocol Label Spoofing Securing the MPLS Core Trusted Devices PE-CE Interface Routing Authentication Separation of CE-PE Links LDP Authentication Connectivity Between VPNs MP-BGP Security Features Security Through IP Address Resolution Ensuring VPN Isolation North Bound Interface (NBI) API Functionality Supported NBI Benefits API Approach Distributed Load Balancing Page The Four-Tier System Architecture