in
Internetwork Expert's Online Community
 

Latest post 10-23-2008 7:03 AM by dev13. 11 replies.
Page 1 of 1 (12 items)
Sort Posts: Previous Next
  • 08-19-2008 12:11 PM

    • dev13
    • Top 50 Contributor
    • Joined on 08-19-2008
    • Overland Park
    • Posts 40
    • Points 710

    Inter-AS Multicast VPN

    I have very simple topology, I have 5 routers connected in one chain...
     
    R1-R2-R3-R4-R5
     
    R1/R2/R3 is in one AS and R4/R5 in other AS... and running option B...
    I have configured MSDP also and R3 and R4 are peering with each oter for MSDP... no wehn I configured the MDT on R1 and R5, I can see the tunnel is up/up but R1 and R5 didn't see each other as a neighbor for PIM... so what will be the issue there i dont understand? as well as I have configured one extra loopback on R1 and R5 and those loopback in one VRF with same RT/RD value... and R1's loopback is RP for that VRF and it is configured as a static RP for that VRF on both R1 and R5... then I configured other loopback on R1 and again that loopback is in the same VRF.... now I configured join-group on new Loopback on R1 and tried to ping that loopback (Multicast Address) from R5, I cant able to make it... as well as under sh ip rfp VRF I can see the RPF failed on all VRF routes learned in each other VRF... why is it so  that is what i am searching for...
     
    all routers are runing PIM-SM between each other... R3 is SP RP for its own AS and R4 is SP RP for its own AS...

    Dev
    • Post Points: 35
  • 08-19-2008 4:31 PM In reply to

    • Seba
    • Top 25 Contributor
    • Joined on 07-17-2008
    • Ireland
    • Posts 80
    • Points 965

    Re: Inter-AS Multicast VPN

    If you have option B, in my opinion, you need to use SAFI MDT (address-family ipv4 mdt) in BGP on PE's and ASBR's.

    On 7200 you need 12.0S for this feature, on other (smaller) platforms (3600, 3700) I am not sure if it is supported at all!

    Sebastian Pasternacki

    CCIE #17541 RS/Sec

    • Post Points: 5
  • 08-19-2008 4:35 PM In reply to

    Re: Inter-AS Multicast VPN

    FYI Inter-AS Multicast over MPLS VPN is technically not supported without MDT BGP.  I've seen it work in some cases and not others.  You need this feature which is in 12.0S: http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/iasmcvpn.html.


    HTH,

    Brian McGahan, CCIE #8593 (R&S/SP/Security)
    bmcgahan@internetworkexpert.com
     
    Internetwork Expert, Inc.
    http://www.InternetworkExpert.com
    Toll Free: 877-224-8987 x 705
    Outside US: 775-826-4344 x 705
    Online Community: http://www.IEOC.com
    CCIE Blog: http://blog.internetworkexpert.com


    dev13 wrote:
    I have very simple topology, I have 5 routers connected in one chain...
     
    R1-R2-R3-R4-R5
     
    R1/R2/R3 is in one AS and R4/R5 in other AS... and running option B...
    I have configured MSDP also and R3 and R4 are peering with each oter for MSDP... no wehn I configured the MDT on R1 and R5, I can see the tunnel is up/up but R1 and R5 didn't see each other as a neighbor for PIM... so what will be the issue there i dont understand? as well as I have configured one extra loopback on R1 and R5 and those loopback in one VRF with same RT/RD value... and R1's loopback is RP for that VRF and it is configured as a static RP for that VRF on both R1 and R5... then I configured other loopback on R1 and again that loopback is in the same VRF.... now I configured join-group on new Loopback on R1 and tried to ping that loopback (Multicast Address) from R5, I cant able to make it... as well as under sh ip rfp VRF I can see the RPF failed on all VRF routes learned in each other VRF... why is it so  that is what i am searching for...
     
    all routers are runing PIM-SM between each other... R3 is SP RP for its own AS and R4 is SP RP for its own AS...

    Dev



    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx
    • Post Points: 20
  • 08-19-2008 5:31 PM In reply to

    • dev13
    • Top 50 Contributor
    • Joined on 08-19-2008
    • Overland Park
    • Posts 40
    • Points 710

    Re: Inter-AS Multicast VPN

    Thanks for your reply... I just checked for the routers lower then 7200 and i didn't find any IOS which can support the Inter-AS multicast on lower routers... so can we still expect the inter-AS multicast configuration as well as testing in SP lab exam? and if yes then that set up must be having 7200, I mean they have 7200 in lab but how about the P routers... so in short to test Inter-AS MVPN we need to have to have 7200 router right!!!

    DP

    • Post Points: 20
  • 08-19-2008 6:29 PM In reply to

    Re: Inter-AS Multicast VPN

    No, you should not expect it because they are using 12.2S on the 7200s.  AFAIK the newest revision of 12.2S has not yet integrated MDT address-family.


    HTH,

    Brian McGahan, CCIE #8593 (R&S/SP/Security)
    bmcgahan@internetworkexpert.com
     
    Internetwork Expert, Inc.
    http://www.InternetworkExpert.com
    Toll Free: 877-224-8987 x 705
    Outside US: 775-826-4344 x 705
    Online Community: http://www.IEOC.com
    CCIE Blog: http://blog.internetworkexpert.com


    dev13 wrote:

    Thanks for your reply... I just checked for the routers lower then 7200 and i didn't find any IOS which can support the Inter-AS multicast on lower routers... so can we still expect the inter-AS multicast configuration as well as testing in SP lab exam? and if yes then that set up must be having 7200, I mean they have 7200 in lab but how about the P routers... so in short to test Inter-AS MVPN we need to have to have 7200 router right!!!

    DP




    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx
    • Post Points: 35
  • 08-19-2008 8:15 PM In reply to

    • dev13
    • Top 50 Contributor
    • Joined on 08-19-2008
    • Overland Park
    • Posts 40
    • Points 710

    Re: Inter-AS Multicast VPN

    So there will not be any kind of Inter-AS MVPN in LAB Exam right, not on any Option A/B/C right?

    So Internet Expert has a Rental Rack session... right!!!  so is that rack support that Inter-AS Multicast option?

     

    DP

    • Post Points: 20
  • 08-20-2008 10:31 AM In reply to

    Re: Inter-AS Multicast VPN

    No, our racks don't support it because the 7200s run 12.2S instead of 12.0S.  12.2S is what they use in the exam, not 12.0S.  Even though the train number is higher, 12.0S has more features than 12.2S, and in many cases more so than 12.4 and 12.4T when it comes to service provider topics.

    Brian McGahan, CCIE #8593 (R&S/SP/Security)
    bmcgahan@internetworkexpert.com
     
    Internetwork Expert, Inc.
    http://www.InternetworkExpert.com
    Toll Free: 877-224-8987 x 705
    Outside US: 775-826-4344 x 705
    Online Community: http://www.IEOC.com
    CCIE Blog: http://blog.internetworkexpert.com


    dev13 wrote:

    So there will not be any kind of Inter-AS MVPN in LAB Exam right, not on any Option A/B/C right?

    So Internet Expert has a Rental Rack session... right!!!  so is that rack support that Inter-AS Multicast option?

     

    DP




    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx
    • Post Points: 20
  • 08-20-2008 12:57 PM In reply to

    • dev13
    • Top 50 Contributor
    • Joined on 08-19-2008
    • Overland Park
    • Posts 40
    • Points 710

    Re: Inter-AS Multicast VPN

    Thanks Brian...

     

    So what are the other option to configure the Inter-AS MVPN with out having ipv4 mdt family configured on router?

    DP

    • Post Points: 20
  • 08-20-2008 2:00 PM In reply to

    Re: Inter-AS Multicast VPN

    None.  It's not officially supported without MDT address-family.

    Brian McGahan, CCIE #8593 (R&S/SP/Security)
    bmcgahan@internetworkexpert.com
     
    Internetwork Expert, Inc.
    http://www.InternetworkExpert.com
    Toll Free: 877-224-8987 x 705
    Outside US: 775-826-4344 x 705
    Online Community: http://www.IEOC.com
    CCIE Blog: http://blog.internetworkexpert.com


    dev13 wrote:

    Thanks Brian...

     

    So what are the other option to configure the Inter-AS MVPN with out having ipv4 mdt family configured on router?

    DP




    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx
    • Post Points: 5
  • 10-22-2008 6:42 PM In reply to

    Re: Inter-AS Multicast VPN

    So I don't really know how to say this, but it seems that Inter-AS Multicast VPNs could be on the exam...

     

    For example, I am having some trouble understanding LAB 4 Vol II task 6.5.  Is this task not technically setting up an Inter-AS Multicast VPN?  I personally have never been able to get that particular task to work, even when loading the final configs.  Is that because it is not technically supported, or is there something there that I am missing in understanding what an Inter-AS Multicast VPN is.

     

    Thanks!

     

     

    • Post Points: 20
  • 10-23-2008 1:32 AM In reply to

    Re: Inter-AS Multicast VPN

    It's technically not supported in that design that we wrote it in.  It works as a hack, but the real solution is to use address-family MDT.

    Brian McGahan, CCIE #8593 (R&S/SP/Security)
    bmcgahan@internetworkexpert.com
     
    Internetwork Expert, Inc.
    http://www.InternetworkExpert.com
    Toll Free: 877-224-8987 x 705
    Outside US: 775-826-4344 x 705
    Online Community: http://www.IEOC.com
    CCIE Blog: http://blog.internetworkexpert.com


    apollogold wrote:

    So I don't really know how to say this, but it seems that Inter-AS Multicast VPNs could be on the exam...

     

    For example, I am having some trouble understanding LAB 4 Vol II task 6.5.  Is this task not technically setting up an Inter-AS Multicast VPN?  I personally have never been able to get that particular task to work, even when loading the final configs.  Is that because it is not technically supported, or is there something there that I am missing in understanding what an Inter-AS Multicast VPN is.

     

    Thanks!

     

     




    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx
    • Post Points: 20
  • 10-23-2008 7:03 AM In reply to

    • dev13
    • Top 50 Contributor
    • Joined on 08-19-2008
    • Overland Park
    • Posts 40
    • Points 710

    Re: Inter-AS Multicast VPN

    Brian,

     

    If we can make it work by hack, then can you please post the some configuration for OPTION A/B/C so we can test it!!!


    I tried number of times to configure the Inter-AS MVPN with the help of MSDP between both the site but some time i got it working and some time not. So it will be great if you can help us in that topic.

    Please post some working config so if it is in exam then we can work out for the same...

    regards

    Dev

    • Post Points: 5
Page 1 of 1 (12 items)