CCIE Routing & Switching Version 5.0 - VPN

Explore overlay versus P2P VPN models, noting encapsulation overhead and many virtual circuits in overlays, while MPLS blends strengths and enables easier VPN deployment through the provider edge router.

Learn how Cisco Express Forwarding speeds packet switching by moving routing decisions from software to hardware, using a prebuilt forward information base and adjacency table in the data plane.

Explain how MPLS label information is shared inside the service provider network using label distribution protocols like LDP and Cisco Tag Distribution Protocol, enabling label-based forwarding and RSVP-enabled traffic engineering.

Configure LDP in service provider network after enabling SF and IP reachability. Use OSPF area zero to advertise WAN and loopback interfaces, and verify neighbors to build FIB and LFIB.

Configure mpls ldp on service border routers, set the ldp router id to loopback zero, enable mpls ip on service-facing interfaces, and verify neighbors and interfaces with show commands.

Explore penultimate hop popping (php) in MPLS networks, where the edge router advertises implicit null to enable popping before the last hop and reduce label lookups.

Troubleshoot MPLS LDP configurations by verifying MPLS IP on interfaces, checking neighbor status, and resolving protocol mismatches, authentication, and router-id reachability to ensure end-to-end label paths.

Configure igp and mpls ldp in the service border core, set up vrfs with route distinguisher values and route targets on the provider edge, and enable vpnv4 peering with redistribution.

Understand how MPLS VPN uses an OSPF super backbone to preserve route types and area zero behavior while redistributing between OSPF and BGP across sites.

verify ospf sham-link between router five and six, configure qam link via vrf with loopback addresses, advertise via vrf and ospf, and prefer mpls backbone over backup link.

Master overlap vpn concepts by configuring selective route exchange between customer sites using new route targets, import/export rules, and precise site pairs (A1 with B2) to control inter-customer routing.

Explore inter-AS VPN concepts by examining interface options, MPLS L3 VPN configurations, and BGP VPNv4 peering to provide end-to-end connectivity across different service providers.

Explore VPN over the internet concepts, including GRE tunnels, DMVPN, and IPsec, to create dedicated point-to-point and point-to-multipoint connections while highlighting encryption differences and the need for public IP addresses.

configure a GRE point-to-point tunnel between router one and router two, define tunnel source and destination, assign tunnel IPs, verify reachability, and advertise LAN routes with a routing protocol.

Learn to configure DMVPN phase 1 with static NHRP mappings across hub and spoke routers, using multipoint tunnel mode, manual mappings, and 10.x tunnel addressing.

Configure dmvpn phase two with static nhrp mappings, establishing multipoint tunnels between hub and spokes and spoke-to-spoke links; verify with show commands and note dynamic mappings for our next video.

Configure DMVPN phase two with dynamic NHRP mappings across a multipoint hub and spokes, enabling NTP, next-hop server on spokes, and tunnel IP to NHRP address mappings.