CCIE Routing & Switching Version 5.0 - VPN

Understand how VPN implementations emulate point-to-point links over service provider networks with MPLS focus, gain insight into cost savings and scalability, and learn terms like provider edge and customer edge.

Explore a VPN models overview, comparing overlay and P2P approaches, including frame relay, GRE, IPsec, and MPLS L3 VPNs, with VRF-based virtual point-to-point connections.

Explore overlay versus P2P VPN models, noting encapsulation overhead and many virtual circuits in overlays, while MPLS blends strengths and enables easier VPN deployment through the provider edge router.

Learn how Cisco Express Forwarding speeds packet switching by moving routing decisions from software to hardware, using a prebuilt forward information base and adjacency table in the data plane.

Explore how MPLS VPNs differ from leased lines and P2P models, use label switching and vrfs to provide scalable, bgp-free reachability via vpn v4 peering between provider edge routers.

Learn MPLS basics, label switching, and how Cisco Express Forwarding uses the forward information base and LDP to forward packets by labels.

Explain MPLS labels and MPLS tags, detailing the 32-bit label format, including the 20-bit label, experimental bits, bottom of stack, ttl, and label stacks for VPNs and traffic engineering.

Explain how MPLS label information is shared inside the service provider network using label distribution protocols like LDP and Cisco Tag Distribution Protocol, enabling label-based forwarding and RSVP-enabled traffic engineering.

Configure LDP in service provider network after enabling SF and IP reachability. Use OSPF area zero to advertise WAN and loopback interfaces, and verify neighbors to build FIB and LFIB.

Configure mpls ldp on service border routers, set the ldp router id to loopback zero, enable mpls ip on service-facing interfaces, and verify neighbors and interfaces with show commands.

Explore how MPLS label forwarding uses LDP, IGP, and label switching routers to assign local labels, exchange label bindings, build the label forwarding information base, and forward packets.

Explore penultimate hop popping (php) in MPLS networks, where the edge router advertises implicit null to enable popping before the last hop and reduce label lookups.

Troubleshoot MPLS LDP configurations by verifying MPLS IP on interfaces, checking neighbor status, and resolving protocol mismatches, authentication, and router-id reachability to ensure end-to-end label paths.

Discover how MPLS VPNs replace leased lines with label switching, using provider edge routers, VRFs, and VPN v4 peering to deliver scalable, BGP-free customer reachability.

Configure igp and mpls ldp in the service border core, set up vrfs with route distinguisher values and route targets on the provider edge, and enable vpnv4 peering with redistribution.

Explore how MPLS L3 VPNs use VRF to isolate customer routes with separate routing tables, and how route distinguisher and route target govern VPN routes.

Configure VRF on provider edge routers to isolate customer routes with route distinguisher and route target, assign customer-facing interfaces to the VRF, and verify connectivity via VRF specific commands.

Configure static and default routes in a VRF to establish B to C routing in an MPLS L3 VPN, validate with VRF routing table checks and ping tests.

Explains vpnv4 peering between provider edge routers to form a tunnel using bgp vpnv4 unicast. Explores loopback-based peering, route targets, extended communities, and next-hop requirements for mpls l3 vpn.

Redistribute static and connected routes into BGP within the VRF on provider edge routers to publish customer routes over VPNv4, enabling site connectivity.

Learn to configure mpls l3 vpn for rip version 2 with vrfs, route targets, and vpnv4 peering, including redistribution between rip and bgp in vrf a1 and a2.

Learn to configure ERP in MPLS L3 VPNs, including P-to-C routing, VPN v4 peering, VRFs, LDP, and BGP redistribution between provider and customer routers.

This lecture explains configuring an MPLS LDP-backed L3 VPN for OSPF, detailing IGP prerequisites, vrf with route distinguisher and route target, p2c routing, vpnv4 peering, and redistribution.

Implement and verify an mpls l3 vpn using bgp vpnv4 across vrfs, redistributing ospf into bgp and bgp into ospf with match criteria for internal and external routes.

Understand how MPLS VPN uses an OSPF super backbone to preserve route types and area zero behavior while redistributing between OSPF and BGP across sites.

Explain how OSPF domain ID governs the super backbone in MPLS VPN, showing how matching domain IDs on PE routers converts redistributed routes into inter-area routes rather than E1/E2.

Verify the ospf domain-id to ensure the super backbone works, emphasizing matching domain values on both sides and understanding how to align domain values or reset BGP before redistribution.

Explore the purpose of OSPF sham-link in MPLS VPNs, enabling a virtual intra-area connection between P routers to prefer the MPLS backbone over backup links.

verify ospf sham-link between router five and six, configure qam link via vrf with loopback addresses, advertise via vrf and ospf, and prefer mpls backbone over backup link.

Configure mpls l3 vpn with ebgp as the b2c routing protocol, create vrf-based bgp sessions between customer and provider edge, enable ldp, and verify connectivity across vrfs.

configure vpnv4 ebgp between routers for mpls l3 vpn and verify the vpnv4 neighborships, then overcome same-as issues using the as override command to propagate customer routes end-to-end.

Explore overlapping VPNs and how root target values control cross customer routing; configure import export values, VRF, and VPNv4 with BGP to enable selective cross-site communication.

Configure vrfs and route targets to exchange routes between customer A and customer B in overlapping vpns, importing and exporting 500:2 and 500:1 across a1, a2, b1, b2.

Master overlap vpn concepts by configuring selective route exchange between customer sites using new route targets, import/export rules, and precise site pairs (A1 with B2) to control inter-customer routing.

Discover how layer 2 vpns provide end-to-end layer two connectivity over mpls without customer routing, contrasting with l3 vpns. Explore l2tpv3, atm, and vpls using pseudo wires.

Learn how IPv6 over MPLS delivers end-to-end IPv6 by leveraging the existing MPLS core, LDP, and IGP, with dual-stack interfaces and VPNv6 routing through VRFs and route targets.

Discover how MPLS traffic engineering uses RSVP and multiple paths to reserve bandwidth, prevent overutilization, and dynamically route traffic based on available bandwidth rather than solely on OSPF.

Explore inter-AS VPN concepts by examining interface options, MPLS L3 VPN configurations, and BGP VPNv4 peering to provide end-to-end connectivity across different service providers.

Troubleshoot MPLS L3 VPNs by validating IGP and LDP are configured, verifying VPNv4 BGP neighbor sessions, and ensuring proper VRF route targets, redistribution, and extended community settings.

Diagnose MPLS L3 VPN issues by validating VPNv4 neighborship, confirming VRF route visibility and import/export targets, and ensuring end-to-end reachability through proper next-hop self and LDP convergence.

Explore VPN over the internet concepts, including GRE tunnels, DMVPN, and IPsec, to create dedicated point-to-point and point-to-multipoint connections while highlighting encryption differences and the need for public IP addresses.

Learn how gre creates point-to-point tunnels over any transit network, carrying IPv4, IPv6, multicast and routing protocol traffic (e.g., ospf), with simple configs but no encryption.

Understand the default lab topology used for all labs, with four branch routers and an internet router, private LANs (192.168.1–4 networks), public IPs, and tunnels built for reachability.

configure a GRE point-to-point tunnel between router one and router two, define tunnel source and destination, assign tunnel IPs, verify reachability, and advertise LAN routes with a routing protocol.

Build GRE point-to-point tunnels from router 1 to routers 2, 3, and 4, enable ERP, and advertise LAN networks to ensure site connectivity while noting scalability limits of multiple tunnels.

Explore dynamic multipoint vpn (dmvpn) and how it builds automatic, full-mesh tunnels across spokes with dynamic ip addresses using multipoint gre and NHRP.

Explain DMVPN phases one through three, comparing hub-and-spoke and multipoint deployments, spoke-to-spoke dynamic tunnels, and the NP redirect mechanism.

Learn to configure DMVPN phase 1 with static NHRP mappings across hub and spoke routers, using multipoint tunnel mode, manual mappings, and 10.x tunnel addressing.

Configure dmvpn phase-1 with dynamic nhrp mappings using a multipoint hub and point-to-point spokes; enable ntp dynamic mappings, register spokes, and verify mappings with show ip nhrp detail.

Configure dmvpn phase two with static nhrp mappings, establishing multipoint tunnels between hub and spokes and spoke-to-spoke links; verify with show commands and note dynamic mappings for our next video.

Configure DMVPN phase two with dynamic NHRP mappings across a multipoint hub and spokes, enabling NTP, next-hop server on spokes, and tunnel IP to NHRP address mappings.