MPLS VPN Implementation: Network Decisions and Configuration Report

This assignment solution details the design and implementation of an MPLS VPN network using BGP and OSPF. The network model includes three Provider Edge (PE) routers, each connected to one or more Customer Edge (CE) routers across different locations (Perth, Brisbane, Sydney). The solution justifies the choice of MPLS VPN for its quality performance, traffic control, security, and bandwidth management. The document provides network addressing schemes, interface configurations, and basic router configurations, including setting console and Telnet passwords, DHCP server configurations, and OSPF area configurations for PE and P routers. It also covers the basic MPLS VPN configuration on Perth, Brisbane and Sydney PE routers and CE routers, including VRF definitions, route distinguishers, route targets, and BGP configurations with address families and neighbor settings. The configuration includes setting up BGP routing, advertising network IPs, and configuring VPN address families. The setup ensures secure and efficient communication between different departments (Marketing, R&D, Manufacturing, HR, and Payroll) within the cloud network.

Network Decisions
We designed the above model using MPLS VPN. Here we used three PE router. These PE router
may have one or more CE. All PE router use BGP configuration to dynamically communicate with each
other. Every CE router is directly attached to PE Routers. We have chosen the layer 3 MPLS VPN model
which creates more scalable and easy to manage the VPN. HR and Payroll routers are interconnected
between them. It acts as network loop routers or backbone connection to Sydney (PE) Router. Perth has
one CE Router (Marketing). Brisbane (PE) Router has two CE Routers (R & D, Manufacture). Sydney (PE)
router has HR and Payroll
Justifications
Why we choose MPLS VPN?
 It provides the best quality performance for cloud based application in chiefly. It controls the
traffic of the massive file transfer in cloud application also
 It is carried over single carrier’s network. It secures the network more than the public network
 It provides the bandwidth depends upon the customer requirement
PE1 (Perth) PE3 (Sydney)
PE2 (Brisbane)
Cloud (P)
CE1 (Marketing)
CE2 (R&D) CE3 (Manufacture) CE4 (HR) CE5 (Payroll)

Network Topology

Network Addressing
Network
Name
Number
of IP
Required
Network
Address
Subnet Mask IP Range Broadcast
Address
Marketing 250 200.200.200.0 255.255.255.0 200.200.200.1 to
200.200.200.254
200.200.200.255
Manufacture 200 200.200.201.0 255.255.255.0 200.200.201.1 to
200.200.201.254
200.200.201.255
R&D 50 200.200.202.0 255.255.255.192 200.200.202.1 to
200.200.202.62
200.200.202.63
HR 30 200.200.202.64 255.255.255.224 200.200.202.65 to
200.200.202.94
200.200.202.95
Payroll 25 200.200.202.96 255.255.255.224 200.200.202.97 to
200.200.202.126
200.200.202.127
Perth-
Marketing
2 200.200.202.128 255.255.255.252 200.200.202.129
to
200.200.202.130
200.200.202.131
RD – Brisbane 2 200.200.202.132 255.255.255.252 200.200.202.133
to
200.200.202.134
200.200.202.135
Manufacture-
Brisbane
2 200.200.202.136 255.255.255.252 200.200.202.137
to
200.200.202.138
200.200.202.139
Sydney-
Payroll
2 200.200.202.140 255.255.255.252 200.200.202.141
to
200.200.202.142
200.200.202.143
Sydney-HR 2 200.200.202.144 255.255.255.252 200.200.202.145
to
200.200.202.146
200.200.202.147
HR-Payroll 2 200.200.202.148 255.255.255.252 200.200.202.149
to
200.200.202.150
200.200.202.151

Interface Addressing
Network Name Interface IP Address Subnet Mask Default Gateway
Marketing Fa0/0 200.200.200.1 255.255.255.0 -
Marketing Fa0/1 200.200.202.130 255.255.255.252 -
Manufacture Fa0/1 200.200.201.1 255.255.255.0 -
Manufacture Fa0/0 200.200.202.137 255.255.255.252 -
R&D Fa0/1 200.200.202.1 255.255.255.192 -
R&D Fa0/0 200.200.202.134 255.255.255.252 -
HR Fa0/1 200.200.202.65 255.255.255.224 -
HR Fa1/0 200.200.202.150 255.255.255.252 -
HR Fa0/0 200.200.202.146 255.255.255.252 -
Payroll Fa0/1 200.200.202.97 255.255.255.224 -
Payroll Fa0/0 200.200.202.142 255.255.255.252 -
Payroll Fa1/0 200.200.202.149 255.255.255.252 -
Perth Fa0/1 200.200.202.129 255.255.255.252 -
Brisbane Fa0/1 200.200.202.138 255.255.255.252 -
Brisbane Fa1/0 200.200.202.133 255.255.255.252 -
Sydney Fa0/1 200.200.202.141 255.255.255.252 -
Sydney Fa1/0 200.200.202.145 255.255.255.252 -
Perth Fa0/0 150.50.50.50 255.255.255.252 -
Brisbane Fa0/0 150.50.50.21 255.255.255.252 -
Sydney Fa0/0 150.50.50.2 255.255.255.252 -

Basic Configuration
The Company has stipulated that all routers must be locally secure
The following command is used to enter into configuration mode
Perth#conf t
Enter configuration commands, one per line. End with CNTL/Z.
After entering configuration mode, set the console password. Here we use cisco as the password
Perth(config)#line console 0
Perth(config-line)# password cisco
Here login command is used to ask the password when we enter the console mode
Perth(config-line)#login
Here exit command is used to exit from the previous prompt
Perth(config-line)#exit
Set the telnet password as class
Perth(config)#line vty 0 4
Perth(config-line)#password class
Perth(config-line)#login
Perth(config-line)#exit
Here secret password is not able to view in the running configuration result
Perth(config)#enable secret cisco
Interface Configuration

After entering the configuration mode, select the interface and set the specified ip address to
that interface. No shut command is used to open the interface and configure that IP address to that
interface. Similarly, we configured all the interface which is specified in the networking address table
Perth(config)#interface FastEthernet0/0
Perth(config-if)# ip address 150.50.50.50 255.255.255.252
Perth(config-if)# no shut
Perth(config-if)#exit
DHCP Configuration
We have designed the DHCP server configuration to all CE router.
The below command is used to create the DHCP pool
Marketing(config)#ip dhcp pool marketdhcp
Setting the network address which is allocate to DHCP client
Marketing(dhcp-config)# network 200.200.200.0 255.255.255.0
Setting the default router IP address. But this address is the current router interface address
Marketing(dhcp-config)#default-router 200.200.200.1
Exit from the DHCP pool configuration
Marketing(dhcp-config)#exit
Remove the unnecessary IP from DHCP pool using the below command
Marketing(config)#ip dhcp excluded-address 200.200.200.1

OSPF Configuration
In Perth Router (PE), We create the OSPF AS 100 and enter into OSPF configuration mode
Perth(config)# router ospf 100
Configure the PE and P network
Perth(config-router)# network 150.50.50.48 0.0.0.3 area 0
Setting the Router ID as 1.1.1.1. It is used to debug the routing configuration if not configure in
the neighboring router
Perth(config-router)# router-id 1.1.1.1
Exit from the OSPF configuration mode
Perth(config-router)# exit
In Sydney Router (PE), We create the OSPF AS 100 and enter into OSPF configuration mode
Sydney(config)# router ospf 100
Configure the PE and P network
Sydney(config-router)# network 150.50.50.0 0.0.0.3 area 0
Setting the Router ID as 1.1.1.1. It is used to debug the routing configuration if not configure in
the neighboring router
Sydney(config-router)# router-id 2.2.2.2
Exit from the OSPF configuration mode
Sydney(config-router)# exit
In Brisbane Router (PE), we create the OSPF AS 100 and enter into OSPF configuration mode
Brisbane(config)# router ospf 100
Configure the PE and P network
Brisbane(config-router)# network 150.50.50.20 0.0.0.3 area 0
Setting the Router ID as 1.1.1.1. It is used to debug the routing configuration if not configure in
the neighboring router
Brisbane(config-router)# router-id 3.3.3.3
Exit from the OSPF configuration mode
Brisbane(config-router)# exit

In Cloud Router (P), we create the OSPF AS 100 and enter into OSPF configuration mode
Cloud(config)# router ospf 100
Configure the PE and P network
Cloud(config-router)# network 150.50.50.20 0.0.0.3 area 0
Cloud(config-router)# network 150.50.50.0 0.0.0.3 area 0
Cloud(config-router)# network 150.50.50.48 0.0.0.3 area 0
Setting the Router ID as 1.1.1.1. It is used to debug the routing configuration if not configure in
the neighboring router
Cloud(config-router)# router-id 4.4.4.4
Exit from the OSPF configuration mode
Cloud (config-router)# exit
Basic MPLS VPN Configuration
In Perth (PE) Router, we configure the vrf routing
Perth(config)# ip vrf markc1
Set the routing distinguisher as 65000:10 (here 65000 is the BGP AS)
Perth(config-vrf)# rd 65000:10
Set the Target VPN Extended Communities (here 65000 is the BGP AS)
Perth(config-vrf)# route-target both 65000:10
Exit from the VRF configuration
Perth(config-vrf)# exit
Assign the Marketing (CE) interface to the respective VRF
Perth(config)# interface fa0/1
Set the VRF routing label to Fast Ethernet interface
Perth(config-if)# ip vrf forwarding markc1
If any assigned IP removed automatically, we need to set once again
Perth(config-if)#
*Apr 19 20:47:43.275: %TDP-5-INFO: Default-IP-Routing-Table: TDP ID removed

Perth(config-if)# ip address 200.200.202.129 255.255.255.252
Perth(config-if)# no shut
Exit from the interface configuration
Perth(config-if)# exit
Configure the interface which is used in LDP
Perth(config)# interface fa0/0
Configure the MPLS parameter
Perth(config-if)# mpls ip
Perth(config-if)# no shut
Exit from the interface configuration
Perth(config-if)# exit
In Perth Router, Configure BGP with the Customer markc1
Perth(config)# router bgp 65000
Enter into the address family command mode
Perth(config-router)# address-family ipv4 vrf markc1
Specify the BGP neighbor (Marking Router BGP AS Number)
Perth(config-router-af)# neighbor 200.200.202.130 remote-as 65500
Set neighbor soft reconfigure
Perth(config-router-af)# neighbor 200.200.202.130 soft-reconfiguration inbound
Configure the override the AS number while sending update
Perth(config-router-af)# neighbor 200.200.202.130 as-override
Exit from address family mode
Perth(config-router-af)# exit
Configure the remote BGP router loopback
Perth(config-router)#neighbor 150.50.50.21 remote-as 65000
Perth(config-router)#neighbor 150.50.50.2 remote-as 65000
Configure the VPN of address family in BGP and activate the remote BGP router and define the
send community extended for the RT values to be sent and received

Perth(config-router)#address-family vpnv4
Perth(config-router-af)#neighbor 150.50.50.21 activate
Configure RT value used the extended community
Perth(config-router-af)#neighbor 150.50.50.21 send-community extended
Perth(config-router-af)#neighbor 150.50.50.2 activate
Perth(config-router-af)#neighbor 150.50.50.21 send-community extended
*Apr 20 04:13:16.979: %BGP-5-ADJCHANGE: neighbor 150.50.50.21 Up
Perth(config-router-af)#neighbor 150.50.50.2 send-community extended
Set no auto-summary configuration to BGP routing
Perth(config-router)# no auto-summary
Perth(config-router)# no synchronization
Perth(config-router)# Exit
In Marking Router (CE), we configure the BGP
Marketing(config)#router bgp 65500
Specify the BGP neighbor (Perth Router BGP AS Number)
Marketing(config-router)#neighbor 200.200.202.129 remote-as 65000
Set neighbor soft reconfigure
Marketing(config-router)#neighbor 200.200.202.129 soft-reconfiguration in
Set no auto-summary configuration to BGP routing
Marketing(config-router)#no auto-summary
Marketing(config-router)#no synchronization
Marketing(config-router)#exit
In Brisbane Router(PE), we configure the MPLS VPN
To enter into configuration mode
Brisbane#conf t
Enter configuration commands, one per line. End with CNTL/Z.
In Brisbane (PE) Router, we configure the vrf routing for R & D Customer

Brisbane(config)# ip vrf rdc1
Set the routing distinguisher as 65000:10 (here 65000 is the BGP AS)
Brisbane(config-vrf)# rd 65000:10
Set the Target VPN Extended Communities (here 65000 is the BGP AS)
Brisbane(config-vrf)# route-target both 65000:10
Brisbane(config-vrf)# exit
In Brisbane (PE) Router, we configure the vrf routing for Manufacture Customer
Brisbane(config)#ip vrf manuc1
Brisbane(config-vrf)#rd 65000:20
Brisbane(config-vrf)#route-target 65000:20
Brisbane(config-vrf)#exit

Assign the R&D (CE) interface to the respective VRF
Brisbane(config)#int fa1/0
Brisbane(config-if)#ip vrf forwarding rdc1
If any assigned IP removed automatically, we need to set once again
% Interface FastEthernet1/0 IP address 200.200.202.13 removed due to enabling VRF
rdc1
Brisbane(config-if)#ip address 200.200.202.133 255.255.255.252
Brisbane(config-if)#no shut
Brisbane(config-if)#exit
Assign the Manufactue (CE) interface to the respective VRF
Brisbane(config)#int fa0/1
Brisbane(config-if)#ip vrf forwarding manuc1
% Interface FastEthernet0/1 IP address 200.200.202.138 removed due to enabling VRF
manuc1
Brisbane(config-if)#
*Apr 20 03:40:38.295: %TDP-5-INFO: Default-IP-Routing-Table: TDP ID removed
Brisbane(config-if)#ip address 200.200.202.138 255.255.255.252
Brisbane(config-if)#no shut
Brisbane(config-if)#exit
Configure the interface which is used in LDP
Brisbane(config)#int fa0/0
Configure the MPLS parameter
Brisbane(config-if)#mpls ip
Brisbane(config-if)#exit
In Brisbane(Router, Configure BGP with the Customer rdc1(R&D) and Specify the BGP neighbor
Brisbane(config)#router bgp 65000
Brisbane(config-router)#address-family ipv4 vrf rdc1
Brisbane(config-router-af)#neighbor 200.200.202.134 remote-as 65500
Brisbane(config-router-af)#neighbor 200.200.202.134 soft-reconfiguration in