Networking Requirements

The integrated L2VPN access to L3VPN solution allows Ethernet NodeBs to communicate with Radio Network Controllers (RNCs). It terminates the L2VPN and connects the L3VPN on a SR by creating a Virtual Ethernet group (VE-group). PW redundancy is configured to protect PWs on the L2VPN and VPN FRR is configured to protect links on the L3VPN, providing reliable connections for services. H-VPLS or PWE3 can be used to construct the L2VPN. This example uses PWE3. This scheme has the following characteristics.

L2VPN Type	PWE3
PW Redundancy Mode	Independent mode
Type of the PW Between SR1 and SR2	Bypass PW
Tunnel Type and Tunnel Protection	TE tunnel with tunnel protection
Implementation Characteristics	Two-level protection (tunnel protection and PW protection) is provided, improving reliability.
	PW redundancy in independent mode allows a public network fault to trigger only the public network link switchover.
	MAC address learning is not required. IP-interworking is supported.

Figure 1 Networking diagram for configuring an integrated IP RAN (PWE3 + L3VPN) with Ethernet NodeBs

Device	Interface	Peer Device	IP Address
CSG	GE1/0/1	SR1	172.0.1.1/24
	GE1/0/2	SR2	172.0.4.1/24
	GE1/0/3	NodeB	–
SR1	GE1/0/0	SR2	172.0.2.2/24
	GE1/0/1	CSG	172.0.1.2/24
	GE1/0/3	RSG1	172.0.3.1/24
	GE1/0/4	RSG2	172.0.8.0/24
SR2	GE1/0/0	SR1	172.0.2.1/24
	GE1/0/2	CSG	172.0.4.2/24
	GE1/0/3	RSG2	172.0.6.1/24
	GE1/0/4	RSG1	172.0.7.1/24
RSG1	GE1/0/0	RSG2	–
	GE1/0/1	SR1	172.0.3.2/24
	GE1/0/2	SR2	172.0.7.2/24
	GE1/0/3	RNC	–
RSG2	GE1/0/0	RSG1	–
	GE1/0/1	SR2	172.0.6.2/24
	GE1/0/2	SR1	172.0.8.2/24/24
	GE1/0/3	RNC	–

Procedure

1. Assign an IP address to and configure a routing protocol on each interface.
   1. Assign an IP address to each interface.
   2. Configure a routing protocol on the CSG, SR1, SR2, RSG1, and RSG2 to make them routable. In this example, OSPF is used.
   After the configuration is complete, run the display ip routing-table command on the CSG, SRs, and RSGs. You can view the routes learned from each other. Note that when configuring OSPF, you need to advertise 32-bit loopback interface addresses (LSR IDs) of the CSG, SRs, and RSGs.
   The detailed configuration is not mentioned here.
2. Configure basic MPLS functions and public network tunnels.
    NOTE:

   • Configure explicit paths between the CSG and SR1 and between the CSG and SR2.
   • Configure LSPs between SRs and between SRs and RSGs.
   • Enable RSVP GR, LDP GR, and OSPF GR to enhance the switching performance.
   1. Enable MPLS TE and RSVP-TE and configure CSPF and OSPF TE.
      # Configure the CSG.

      [CSG] mpls lsr-id 1.1.1.1

      [CSG] mpls

      [CSG-mpls] mpls te

      [CSG-mpls] mpls rsvp-te

      [CSG-mpls] mpls rsvp-te hello

      [CSG-mpls] mpls rsvp-te hello full-gr

      [CSG-mpls] mpls te cspf

      [CSG-mpls] quit

      [CSG] interface GigabitEthernet1/0/1

      [CSG-GigabitEthernet1/0/1] mpls

      [CSG-GigabitEthernet1/0/1] mpls te

      [CSG-GigabitEthernet1/0/1] mpls rsvp-te

      [CSG-GigabitEthernet1/0/1] mpls rsvp-te hello

      [CSG-GigabitEthernet1/0/1] quit

      [CSG] interface GigabitEthernet1/0/2

      [CSG-GigabitEthernet1/0/2] mpls

      [CSG-GigabitEthernet1/0/2] mpls te

      [CSG-GigabitEthernet1/0/2] mpls rsvp-te

      [CSG-GigabitEthernet1/0/2] mpls rsvp-te hello

      [CSG-GigabitEthernet1/0/2] quit

      [CSG] ospf 100

      [CSG-ospf-100] opaque-capability enable

      [CSG-ospf-100] graceful-restart

      [CSG-ospf-100] area 0

      [CSG-ospf-100-area-0.0.0.0] mpls-te enable

      [CSG-ospf-100-area-0.0.0.0] quit

      [CSG-ospf-100] quit

      # Configure SR1.

      [SR1] mpls lsr-id 2.2.2.2

      [SR1] mpls

      [SR1-mpls] mpls te

      [SR1-mpls] mpls rsvp-te

      [SR1-mpls] mpls rsvp-te hello

      [SR1-mpls] mpls rsvp-te hello full-gr

      [SR1-mpls] mpls te cspf

      [SR1-mpls] quit

      [SR1] mpls ldp

      [SR1-mpls-ldp] graceful-restart

      [SR1-mpls-ldp] quit

      [SR1] interface gigabitEthernet1/0/1

      [SR1-GigabitEthernet1/0/1] mpls

      [SR1-GigabitEthernet1/0/1] mpls te

      [SR1-GigabitEthernet1/0/1] mpls rsvp-te

      [SR1-GigabitEthernet1/0/1] mpls rsvp-te hello

      [SR1-GigabitEthernet1/0/1] quit

      [SR1] interface gigabitEthernet1/0/3

      [SR1-GigabitEthernet1/0/3] mpls

      [SR1-GigabitEthernet1/0/3] mpls ldp

      [SR1-GigabitEthernet1/0/3] quit

      [SR1] interface GigabitEthernet1/0/0

      [SR1-GigabitEthernet1/0/0] mpls

      [SR1-GigabitEthernet1/0/0] mpls ldp

      [SR1-GigabitEthernet1/0/0] quit

      [SR1] interface GigabitEthernet1/0/4

      [SR1-GigabitEthernet1/0/4] mpls

      [SR1-GigabitEthernet1/0/4] mpls ldp

      [SR1-GigabitEthernet1/0/4] quit

      [SR1] ospf 100

      [SR1-ospf-100] opaque-capability enable

      [SR1-ospf-100] graceful-restart

      [SR1-ospf-100] area 0

      [SR1-ospf-100-area-0.0.0.0] mpls-te enable

      [SR1-ospf-100-area-0.0.0.0] quit

      [SR1-ospf-100] quit

      # Configure SR2.

      [SR2] mpls lsr-id 3.3.3.3

      [SR2] mpls

      [SR2-mpls] mpls te

      [SR2-mpls] mpls rsvp-te

      [SR2-mpls] mpls rsvp-te hello

      [SR2-mpls] mpls rsvp-te hello full-gr

      [SR2-mpls] mpls te cspf

      [SR2-mpls] quit

      [SR2-mpls-ldp] mpls ldp

      [SR2] graceful-restart

      [SR2-mpls-ldp] quit

      [SR2] interface gigabitEthernet1/0/2

      [SR2-GigabitEthernet1/0/2] mpls

      [SR2-GigabitEthernet1/0/2] mpls te

      [SR2-GigabitEthernet1/0/2] mpls rsvp-te

      [SR2-GigabitEthernet1/0/2] mpls rsvp-te hello

      [SR2-GigabitEthernet1/0/2] quit

      [SR2] interface gigabitEthernet1/0/3

      [SR2-GigabitEthernet1/0/3] mpls

      [SR2-GigabitEthernet1/0/3] mpls ldp

      [SR2-GigabitEthernet1/0/3] quit

      [SR2] interface GigabitEthernet1/0/0

      [SR2-GigabitEthernet1/0/0] mpls

      [SR2-GigabitEthernet1/0/0] mpls ldp

      [SR2-GigabitEthernet1/0/0] quit

      [SR2] interface GigabitEthernet1/0/4

      [SR2-GigabitEthernet1/0/4] mpls

      [SR2-GigabitEthernet1/0/4] mpls ldp

      [SR2-GigabitEthernet1/0/4] quit

      [SR2] ospf 100

      [SR2-ospf-100] opaque-capability enable

      [SR2-ospf-100] graceful-restart

      [SR2-ospf-100] area 0

      [SR2-ospf-100-area-0.0.0.0] mpls-te enable

      [SR2-ospf-100-area-0.0.0.0] quit

      [SR2-ospf-100] quit

      # Configure RSG1.

      [RSG1] mpls lsr-id 4.4.4.4

      [RSG1] mpls

      [RSG1-mpls] quit

      [RSG1] mpls ldp

      [RSG1-mpls-ldp] graceful-restart

      [RSG1-mpls-ldp] quit

      [RSG1] interface GigabitEthernet1/0/1

      [RSG1-GigabitEthernet1/0/1] mpls

      [RSG1-GigabitEthernet1/0/1] mpls ldp

      [RSG1-GigabitEthernet1/0/1] quit

      [RSG1] interface GigabitEthernet1/0/2

      [RSG1-GigabitEthernet1/0/2] mpls

      [RSG1-GigabitEthernet1/0/2] mpls ldp

      [RSG1-GigabitEthernet1/0/2] quit

      [RSG1] ospf 100

      [RSG1-ospf-100] opaque-capability enable

      [RSG1-ospf-100] graceful-restart

      [RSG1-ospf-100] quit

      # Configure RSG2.

      [RSG2] mpls lsr-id 5.5.5.5

      [RSG2] mpls

      [RSG2-mpls] quit

      [RSG2] mpls ldp

      [RSG2-mpls-ldp] graceful-restart

      [RSG2-mpls-ldp] quit

      [RSG2] interface GigabitEthernet1/0/1

      [RSG2-GigabitEthernet1/0/1] mpls

      [RSG2-GigabitEthernet1/0/1] mpls ldp

      [RSG2-GigabitEthernet1/0/1] quit

      [RSG2] interface GigabitEthernet1/0/2

      [RSG2-GigabitEthernet1/0/2] mpls

      [RSG2-GigabitEthernet1/0/2] mpls ldp

      [RSG2-GigabitEthernet1/0/2] quit

      [RSG2] ospf 100

      [RSG2-ospf-100] opaque-capability enable

      [RSG2-ospf-100] graceful-restart

      [RSG2-ospf-100] quit
   2. Configure explicit paths for the primary and backup MPLS TE tunnels.
      # Configure the CSG.

      [CSG] explicit-path to_sr1

      [CSG-explicit-path-to_sr1] next hop 172.0.1.2

      [CSG-explicit-path-to_sr1] next hop 2.2.2.2

      [CSG-explicit-path-to_sr1] quit

      [CSG] explicit-path to_sr2

      [CSG-explicit-path-to_sr2] next hop 172.0.4.2

      [CSG-explicit-path-to_sr2] next hop 3.3.3.3

      [CSG-explicit-path-to_sr2] quit

      # Configure SR1.

      [SR1] explicit-path to_csg

      [SR1-explicit-path-to_csg] next hop 172.0.1.1

      [SR1-explicit-path-to_csg] next hop 1.1.1.1

      [SR1-explicit-path-to_csg] quit

      # Configure SR2.

      [SR2] explicit-path to_csg

      [SR2-explicit-path-to_csg] next hop 172.0.4.1

      [SR2-explicit-path-to_csg] next hop 1.1.1.1

      [SR2-explicit-path-to_csg] quit
   3. Configure MPLS TE tunnel interfaces and hot backup.
      # Configure the CSG.

      [CSG] interface tunnel 1/0/1

      [CSG-Tunnel1/0/1] ip address unnumbered interface loopback 0

      [CSG-Tunnel1/0/1] tunnel-protocol mpls te

      [CSG-Tunnel1/0/1] destination 2.2.2.2

      [CSG-Tunnel1/0/1] mpls te tunnel-id 100

      [CSG-Tunnel1/0/1] mpls te record-route

      [CSG-Tunnel1/0/1] mpls te signal-protocol rsvp-te

      [CSG-Tunnel1/0/1] mpls te path explicit-path to_sr1

      [CSG-Tunnel1/0/1] mpls te backup hot-standby wtr 15

      [CSG-Tunnel1/0/1] mpls te reserved-for-binding

      [CSG-Tunnel1/0/1] mpls te commit

      [CSG-Tunnel1/0/1] quit

      [CSG] interface tunnel 1/0/2

      [CSG-Tunnel1/0/2] ip address unnumbered interface loopback 0

      [CSG-Tunnel1/0/2] tunnel-protocol mpls te

      [CSG-Tunnel1/0/2] destination 3.3.3.3

      [CSG-Tunnel1/0/2] mpls te tunnel-id 200

      [CSG-Tunnel1/0/2] mpls te record-route

      [CSG-Tunnel1/0/2] mpls te signal-protocol rsvp-te

      [CSG-Tunnel1/0/2] mpls te path explicit-path to_sr2

      [CSG-Tunnel1/0/2] mpls te backup hot-standby wtr 15

      [CSG-Tunnel1/0/2] mpls te reserved-for-binding

      [CSG-Tunnel1/0/2] mpls te commit

      [CSG-Tunnel1/0/2] quit

      # Configure SR1.

      [SR1] interface tunnel 1/0/1

      [SR1-Tunnel1/0/1] ip address unnumbered interface loopback 0

      [SR1-Tunnel1/0/1] tunnel-protocol mpls te

      [SR1-Tunnel1/0/1] destination 1.1.1.1

      [SR1-Tunnel1/0/1] mpls te tunnel-id 100

      [SR1-Tunnel1/0/1] mpls te record-route

      [SR1-Tunnel1/0/1] mpls te signal-protocol rsvp-te

      [SR1-Tunnel1/0/1] mpls te path explicit-path to_csg

      [SR1-Tunnel1/0/1] mpls te backup hot-standby wtr 15

      [SR1-Tunnel1/0/1] mpls te reserved-for-binding

      [SR1-Tunnel1/0/1] mpls te commit

      [SR1-Tunnel1/0/1] quit

      # Configure SR2.

      [SR2] interface tunnel 1/0/2

      [SR2-Tunnel1/0/2] ip address unnumbered interface loopback 0

      [SR2-Tunnel1/0/2] tunnel-protocol mpls te

      [SR2-Tunnel1/0/2] destination 1.1.1.1

      [SR2-Tunnel1/0/2] mpls te tunnel-id 200

      [SR2-Tunnel1/0/1] mpls te record-route

      [SR2-Tunnel1/0/2] mpls te signal-protocol rsvp-te

      [SR2-Tunnel1/0/2] mpls te path explicit-path to_csg

      [SR2-Tunnel1/0/1] mpls te backup hot-standby wtr 15

      [SR2-Tunnel1/0/2] mpls te reserved-for-binding

      [SR2-Tunnel1/0/2] mpls te commit

      [SR2-Tunnel1/0/2] quit
   4. Configure a tunnel policy.
      # Configure the CSG.

      [CSG] tunnel-policy policy1

      [CSG-tunnel-policy-policy1] tunnel binding destination 2.2.2.2 te Tunnel1/0/1

      [CSG-tunnel-policy-policy1] tunnel binding destination 3.3.3.3 te Tunnel1/0/2

      [CSG-tunnel-policy-policy1] quit

      # Configure SR1.

      [SR1] tunnel-policy policy1

      [SR1-tunnel-policy-policy1] tunnel binding destination 1.1.1.1 te Tunnel1/0/1

      [SR1-tunnel-policy-policy1] quit

      # Configure SR2.

      [SR2] tunnel-policy policy1

      [SR2-tunnel-policy-policy1] tunnel binding destination 1.1.1.1 te Tunnel1/0/2

      [SR2-tunnel-policy-policy1] quit
3. Configure PW redundancy.
   1. Configure MPLS LDP remote sessions between the CSG and SRs.
       NOTE:

      In this configuration example, TE tunnels are configured between the CSG and SRs, and thus MPLS LDP is not required. PWE3, however, uses extended LDP signaling to distribute VPN labels. Therefore, MPLS LDP remote sessions have to be configured between the CSG and SRs. An LDP LSP is configured to directly connect SRs, and thus no LDP remote session needs to be configured between SRs.
      # Configure the CSG.

      [CSG] mpls ldp

      [CSG-mpls-ldp] quit

      [CSG] mpls ldp remote-peer 2.2.2.2

      [CSG-mpls-ldp-remote-2.2.2.2] remote-ip 2.2.2.2

      [CSG-mpls-ldp-remote-2.2.2.2] quit

      [CSG] mpls ldp remote-peer 3.3.3.3

      [CSG-mpls-ldp-remote-3.3.3.3] remote-ip 3.3.3.3

      [CSG-mpls-ldp-remote-3.3.3.3] quit

      # Configure SR1.

      [SR1] mpls ldp

      [SR1-mpls-ldp] quit

      [SR1] mpls ldp remote-peer 1.1.1.1

      [SR1-mpls-ldp-remote-1.1.1.1] remote-ip 1.1.1.1

      [SR1-mpls-ldp-remote-1.1.1.1] quit

      # Configure SR2.

      [SR2] mpls ldp

      [SR2-mpls-ldp] quit

      [SR2] mpls ldp remote-peer 1.1.1.1

      [SR2-mpls-ldp-remote-1.1.1.1] remote-ip 1.1.1.1

      [SR2-mpls-ldp-remote-1.1.1.1] quit

      # Verify the configuration. Run the display mpls ldp session all command on the CSG and SRs to check whether the LDP session status is Operational. If the LDP session status is Operational, the LDP session is established. Use the CSG as an example.

      [CSG] display mpls ldp session all

       LDP Session(s) in Public Network
       Codes: LAM(Label Advertisement Mode), SsnAge Unit(DDDD:HH:MM)
       A '*' before a session means the session is being deleted.
       ------------------------------------------------------------------------------
       PeerID             Status      LAM  SsnRole  SsnAge      KASent/Rcv
       ------------------------------------------------------------------------------
       2.2.2.2:0          Operational DU   Passive  0000:00:47  190/190
       3.3.3.3:0          Operational DU   Passive  0000:00:47  190/190
       ------------------------------------------------------------------------------
       TOTAL: 2 session(s) Found.    
   2. Configure service PWs.
      # Configure the CSG.

      [CSG] mpls l2vpn

      [CSG-l2vpn] quit

      [CSG] interface GigabitEthernet1/0/3

      [CSG-GigabitEthernet1/0/3] undo shutdown

      [CSG-GigabitEthernet1/0/3] quit

      [CSG] interface GigabitEthernet1/0/3.10

      [CSG-GigabitEthernet1/0/3.10] vlan-type dot1q 10

      [CSG-GigabitEthernet1/0/3.10] mpls l2vc 2.2.2.2 100 tunnel-policy policy1

      [CSG-GigabitEthernet1/0/3.10] mpls l2vc 3.3.3.3 200 secondary tunnel-policy policy1

      [CSG-GigabitEthernet1/0/3.10] mpls l2vpn redundancy independent

      [CSG-GigabitEthernet1/0/3.10] mpls l2vpn stream-dual-receiving

      [CSG-GigabitEthernet1/0/3.10] quit

      # Configure SR1.

      [SR1] mpls l2vpn

      [SR1-l2vpn] quit

      [SR1] interface virtual-ethernet 1/0/0

      [SR1-Virtual-Ethernet1/0/0] ve-group 1 l2-terminate

      [SR1-Virtual-Ethernet1/0/0] quit

      [SR1] interface virtual-ethernet 1/0/0.1

      [SR1-Virtual-Ethernet1/0/0.1] vlan-type dot1q 10

      [SR1-Virtual-Ethernet1/0/0.1] mpls l2vc 1.1.1.1 100 tunnel-policy policy1

      [SR1-Virtual-Ethernet1/0/0.1] mpls l2vc 3.3.3.3 300 bypass

      [SR1-Virtual-Ethernet1/0/0.1] quit

      # Configure SR2.

      [SR2] mpls l2vpn

      [SR2-l2vpn] quit

      [SR2] interface virtual-ethernet 1/0/0

      [SR2-Virtual-Ethernet1/0/0] ve-group 1 l2-terminate

      [SR1-Virtual-Ethernet1/0/0] quit

      [SR2] interface virtual-ethernet 1/0/0.1

      [SR2-Virtual-Ethernet1/0/0.1] mpls l2vc 1.1.1.1 200 tunnel-policy policy1

      [SR2-Virtual-Ethernet1/0/0.1] mpls l2vc 2.2.2.2 300 bypass

      [SR2-Virtual-Ethernet1/0/0.1] quit
   3. Configure an mPW and a bypass PW, and then associate the bypass PW with the mPW.
      # Configure SR1.

      [SR1] interface loopback 1

      [SR1-LoopBack1] mpls l2vc 3.3.3.3 400 control-word admin

      [SR1-LoopBack1] quit

      [SR1] interface virtual-ethernet 1/0/0.1

      [SR1-Virtual-Ethernet1/0/0.1] mpls l2vc bypass track admin-vc interface LoopBack1

      [SR1-Virtual-Ethernet1/0/0.1] quit

      # Configure SR2.

      [SR2] interface loopback 1

      [SR2-LoopBack1] mpls l2vc 2.2.2.2 400 control-word admin

      [SR2-LoopBack1] quit

      [SR2] interface virtual-ethernet 1/0/0.1

      [SR2-Virtual-Ethernet1/0/0.1] mpls l2vc bypass track admin-vc interface LoopBack1

      [SR2-Virtual-Ethernet1/0/0.1] quit

      # Verify the configuration. Run the display mpls l2vc brief command on the CSG and SRs. You can view that service PWs and the mPW are in the Up state. Use SR1 as an example.

      [SR1] display mpls l2vc brief

       Total ldp vc : 3     3 up       0 down
      
       *Client Interface     : Virtual-Ethernet1/0/0.1
        Administrator PW     : no
        AC status            : up
        VC State             : up
        Label state          : 0
        Token state          : 0
        VC ID                : 100
        VC Type              : VLAN
        session state        : up
        Destination          : 1.1.1.1
        link state           : up
      
       *Client Interface     : Virtual-Ethernet1/0/0.1
        Administrator PW     : no
        AC status            : up
        VC State             : up
        Label state          : 0
        Token state          : 0
        VC ID                : 300
        VC Type              : VLAN
        session state        : up
        Destination          : 3.3.3.3
        link state           : up
      
       *Client Interface     : LoopBack1
        Administrator PW     : yes
        AC status            : up
        VC State             : up
        Label state          : 0
        Token state          : 0
        VC ID                : 400
        VC Type              : IP-interworking
        session state        : up
        Destination          : 3.3.3.3
        link state           : up   
   4. Configure BFD to monitor the mPW.
      # Configure SR1.

      [SR1] bfd

      [SR1-bfd] quit

      [SR1] bfd bypass bind pw interface loopback 1

      [SR1-bfd-lsp-session-SR1] discriminator local 2

      [SR1-bfd-lsp-session-SR1] discriminator remote 2

      [SR1-bfd-lsp-session-SR1] commit

      [SR1-bfd-lsp-session-SR1] quit

      # Configure SR2.

      [SR2] bfd

      [SR2-bfd] quit

      [SR2] bfd bypass bind pw interface loopback 1

      [SR2-bfd-lsp-session-SR2] discriminator local 2

      [SR2-bfd-lsp-session-SR2] discriminator remote 2

      [SR2-bfd-lsp-session-SR2] commit

      [SR2-bfd-lsp-session-SR2] quit

      # Verify the configuration. Run the display bfd session all command on SRs. You can view that BFD sessions are in the Up state. Use SR1 as an example.

      [SR1] display bfd session all

      --------------------------------------------------------------------------------
      Local Remote PeerIpAddr      State     Type        InterfaceName
      --------------------------------------------------------------------------------
      2     2      --.--.--.--     Up        S_PW(M)     LoopBack1
      --------------------------------------------------------------------------------
           Total UP/DOWN Session Number : 1/0     
   5. Configure VRRP to determine the primary PW.
       NOTE:

      If PW redundancy in independent mode is used, VRRP has to be configured on SRs to determine which SR is the master in the VRRP backup group. After PWs are associated with mVRRP, the primary PW is determined.
      # Configure SR1.

      [SR1] interface gigabitethernet 1/0/0

      [SR1-GigabitEthernet1/0/0] vrrp vrid 20 virtual-ip 172.0.2.3

      [SR1-GigabitEthernet1/0/0] admin-vrrp vrid 20 ignore-if-down

      [SR1-GigabitEthernet1/0/0] vrrp vrid 20 priority 150

      [SR1-GigabitEthernet1/0/0] quit

      [SR1] interface virtual-ethernet 1/0/0.1

      [SR1-Virtual-Ethernet1/0/0.1] mpls l2vc track admin-vrrp interface gigabitethernet 1/0/0 vrid 20 pw-redundancy

      [SR1-Virtual-Ethernet1/0/0.1] quit

      # Configure SR2.

      [SR2] interface gigabitethernet 1/0/0

      [SR2-GigabitEthernet1/0/0] vrrp vrid 20 virtual-ip 172.0.2.3

      [SR2-GigabitEthernet1/0/0] admin-vrrp vrid 20 ignore-if-down

      [SR2-GigabitEthernet1/0/0] quit

      [SR2] interface virtual-ethernet 1/0/0.1

      [SR2-Virtual-Ethernet1/0/0.1] mpls l2vc track admin-vrrp interface gigabitethernet 1/0/0 vrid 20 pw-redundancy

      [SR2-Virtual-Ethernet1/0/0.1] quit

      # Verify the configuration. Run the display vrrp command on SRs. You can view the role of each SR in the VRRP backup group. Use SR1 as an example. The default VRRP priority value is 100, and thus SR1 whose VRRP priority value is set to 150 functions as the master in the VRRP backup group.

      [SR1] display vrrp

        GigabitEthernet1/0/0 | Virtual Router 1
          State : Master
          Virtual IP : 172.0.2.3
          Master IP : 172.0.2.2
          PriorityRun : 150
          PriorityConfig : 150
          MasterPriority : 150
          Preempt : YES   Delay Time : 0
          TimerRun : 1
          TimerConfig : 1
          Auth Type : NONE
          Virtual Mac :  0000-5e00-0101
          Check TTL : YES
          Config type : admin-vrrp
          Create time : 2010-09-05 15:25:47
          Last change time : 2010-09-05 15:25:51

      [RSG1] display vrrp

        Vlanif10 | Virtual Router 1
          State : Master
          Virtual IP : 120.0.1.3
          Master IP : 120.0.1.1
          PriorityRun : 150
          PriorityConfig : 150
          MasterPriority : 150
          Preempt : YES   Delay Time : 0
          TimerRun : 1
          TimerConfig : 1
          Auth Type : NONE
          Virtual Mac :  0000-5e00-0101
          Check TTL : YES
          Config type : normal-vrrp
          Create time : 2010-09-14 19:39:27
          Last change time : 2010-09-14 19:39:30 
4. Configure an L3VPN.
   1. Configure a VPN instance on SR1 and RSG1, and then bind the VPN instance to interfaces.
      # The configuration on SR1 is as follows, the same as the configuration on SR2.

      [SR1] ip vpn-instance vpna

      [SR1-vpn-instance-vpna] ipv4-family

      [SR1-vpn-instance-vpna-af-ipv4] route-distinguisher 1:1

      [SR1-vpn-instance-vpna-af-ipv4] vpn-target 1:1

      [SR1-vpn-instance-vpna-af-ipv4] quit

      [SR1] interface virtual-ethernet 1/0/1

      [SR1-Virtual-Ethernet1/0/1] ve-group 1 l3-access

      [SR1-Virtual-Ethernet1/0/1] quit

      [SR1] interface virtual-ethernet 1/0/1.1

      [SR1-Virtual-Ethernet1/0/1.1] vlan-type dot1q 10

      [SR1-Virtual-Ethernet1/0/1.1] ip binding vpn-instance vpna

      [SR1-Virtual-Ethernet1/0/1.1] ip address 120.0.0.2 24

      [SR1-Virtual-Ethernet1/0/1.1] quit

      # The configuration on RSG1 is as follows, the same as the configuration on RSG2.

      [RSG1] ip vpn-instance vpna

      [RSG1-vpn-instance-vpna] ipv4-family

      [RSG1-vpn-instance-vpna-af-ipv4] route-distinguisher 1:1

      [RSG1-vpn-instance-vpna-af-ipv4] vpn-target 1:1

      [RSG1-vpn-instance-vpna-af-ipv4] quit

      [RSG1] interface GigabitEthernet1/0/3

      [RSG1-GigabitEthernet1/0/3] portswitch

      [RSG1-GigabitEthernet1/0/3] port link-type trunk

      [RSG1-GigabitEthernet1/0/3] port trunk allow-pass vlan 10

      [RSG1-GigabitEthernet1/0/3] quit

      [RSG1] interface GigabitEthernet1/0/0

      [RSG1-GigabitEthernet1/0/0] portswitch

      [RSG1-GigabitEthernet1/0/0] port link-type trunk

      [RSG1-GigabitEthernet1/0/0] port trunk allow-pass vlan 10

      [RSG1-GigabitEthernet1/0/0] quit

      [RSG1] vlan 10

      [RSG1-vlan10] quit

      [RSG1] interface Vlanif 10

      [RSG1-Vlanif10] ip binding vpn-instance vpna

      [RSG1-Vlanif10] ip address 120.0.1.1 24

      [RSG1-Vlanif10] quit
   2. Establish MP-IBGP peer relationships between SRs and RSGs.
      # The configuration on SR2 is as follows, the same as the configuration on SR1.

      [SR2] bgp 100

      [SR2-bgp] graceful-restart

      [SR2-bgp] peer 2.2.2.2 as-number 100

      [SR2-bgp] peer 2.2.2.2 connect-interface LoopBack0

      [SR2-bgp] peer 4.4.4.4 as-number 100

      [SR2-bgp] peer 4.4.4.4 connect-interface LoopBack0

      [SR2-bgp] peer 5.5.5.5 as-number 100

      [SR2-bgp] peer 5.5.5.5 connect-interface LoopBack0

      [SR2-bgp] ipv4-family vpnv4

      [SR2-bgp-af-vpnv4] peer 2.2.2.2 enable

      [SR2-bgp-af-vpnv4] peer 4.4.4.4 enable

      [SR2-bgp-af-vpnv4] peer 5.5.5.5 enable

      [SR2-bgp-af-vpnv4] quit

      # The configuration on RSG1 is as follows, the same as the configuration on RSG2.

      [RSG1] bgp 100

      [RSG1-bgp] graceful-restart

      [RSG1-bgp] peer 2.2.2.2 as-number 100

      [RSG1-bgp] peer 2.2.2.2 connect-interface LoopBack0

      [RSG1-bgp] peer 3.3.3.3 as-number 100

      [RSG1-bgp] peer 3.3.3.3 connect-interface LoopBack0

      [RSG1-bgp] peer 5.5.5.5 as-number 100

      [RSG1-bgp] peer 5.5.5.5 connect-interface LoopBack0

      [RSG1-bgp] ipv4-family vpnv4

      [RSG1-bgp-af-vpnv4] peer 2.2.2.2 enable

      [RSG1-bgp-af-vpnv4] peer 3.3.3.3 enable

      [RSG1-bgp-af-vpnv4] peer 5.5.5.5 enable

      [RSG1-bgp-af-vpnv4] quit
   3. Import direct VPN routes to SRs and RSGs.
      # The configuration on SR2 is as follows, the same as the configuration on SR1.

      [SR2-bgp] ipv4-family vpn-instance vpna

      [SR2-bgp-vpna] import-route direct

      [SR2-bgp-vpna] quit

      [SR2-bgp] quit

      # The configuration on RSG1 is as follows, the same as the configuration on RSG2.

      [RSG1-bgp] ipv4-family vpn-instance vpna

      [RSG1-bgp-vpna] import-route direct

      [RSG1-bgp-vpna] quit

      [RSG1-bgp] quit
   4. Configure VPN FRR.
      # The configuration of RSG1 is as follows, the same as the configuration on SRs and RSG2.

      [RSG1] ip vpn-instance vpna

      [RSG1-vpn-instance-vpna-af-ipv4] vpn frr route-policy vpna

      [RSG1-vpn-instance-vpna-af-ipv4] quit

      [RSG1-vpn-instance-vpna] route-policy vpna permit node 5

      [RSG1-route-policy] apply backup-nexthop auto

      [RSG1-route-policy] quit
5. Configure VRRP on SR1 and SR2 to determine a gateway for Ethernet NodeBs.
   # Configure SR1.

   [SR1] interface virtual-ethernet 1/0/1.1

   [SR1-Virtual-Ethernet1/0/1.1] vrrp vrid 10 virtual-ip 120.0.0.3

   [SR1-Virtual-Ethernet1/0/1.1] vrrp vrid 10 track admin-vrrp interface gigabitethernet1/0/0 vrid 20 

   [SR1-Virtual-Ethernet1/0/1.1] quit

   # Configure SR2.

   [SR2] interface virtual-ethernet 1/0/1.1

   [SR1-Virtual-Ethernet1/0/1.1] vrrp vrid 10 virtual-ip 120.0.0.3

   [SR2-Virtual-Ethernet1/0/1.1] vrrp vrid 10 track admin-vrrp interface gigabitethernet1/0/0 vrid 20 

   [SR2-Virtual-Ethernet1/0/1.1] quit
6. Configure VRRP on RSGs to determine their roles in the VRRP backup group.
   # Configure RSG1.

   [RSG1] interface Vlanif 10

   [RSG1-Vlanif10] vrrp vrid 1 virtual-ip 120.0.1.3

   [RSG1-Vlanif10] vrrp vrid 1 priority 150

   [RSG1-Vlanif10] quit

   # Configure RSG2.

   [RSG2] interface Vlanif 10

   [RSG2-Vlanif10] vrrp vrid 1 virtual-ip 120.0.1.3

   [RSG2-Vlanif10] quit

    NOTE:

   Configure the RNC as follows:

   • Configure an Eth-Trunk link to determine the active and standby links.
   • Configure a VLANIF interface and assign an IP address to the VLANIF interface. Ensure that the IP address is in the same network segment with the virtual IP addresses configured on RSGs.

   On an Ethernet NodeB, you need to create a sub-interface on an Ethernet interface, encapsulate 802.1Q on the sub-interface, and associate a VLAN ID with the sub-interface.