MPLS-VPN — full PE-side configuration (CE has it; now build the PE)
- WAN & MPLS
- Advanced
- 18 min
- 3 steps
- Cisco IOS-style
Use the bundled l3vpn-blue topology — two PEs and one P router carrying VRF blue. Inspect PE1's pre-loaded VRF + RD/RT + iBGP VPNv4 config, verify VPNv4 routes propagate to PE2, and ping across the MPLS L3VPN.
Open this lab in your browser →
Free · no install · no account
Scenario
The PE is the load-bearing piece of an L3VPN. Three layers stack: 1. VRF + RD + RT — per-customer routing table with a 64-bit RD prefix and a list of import/export route-targets (32-bit communities). 2. MP-BGP VPNv4 — iBGP between PEs with the vpnv4 address-family activated. PEs advertise VRF prefixes tagged with their export-RTs; receiving PEs import based on their VRF's import-RTs. 3. MPLS LDP — the underlay LSP between PEs. Each PE pushes a [transport-label, vpn-label] stack on ingress; the egress PE pops the transport label (PHP at the penultimate hop), pops the VPN label, and IP-forwards in the matching VRF. The bundled builtin:l3vpn-blue topology pre-loads all three layers on PE1, P, and PE2. This lab walks the existing config and confirms end-to-end ping in the VRF.
Topology
3 × router · Cisco IOS-style
PE1— routerP— routerPE2— router
What you will do
On PE1, run
show ip vrfto confirm VRFblueexists with its RD and route-targets.On PE1, run
show ip bgp vpnv4 all summary. Confirm the iBGP session to PE2 is up under the VPNv4 AF.From PE1, ping in the VRF:
ping vrf blue <PE2-VRF-loopback>(the VPN loopback that PE2's VRF blue exposes).
Open this lab in your browser →
More labs on this topic
- GRE tunnel: connect two sites over the public internetIntermediate · 18 min
- MPLS L3VPN: connect a customer to a 3rd-party providerAdvanced · 15 min
This lab in other languages
MPLS-VPN — vollständige PE-seitige Konfiguration (CE steht; jetzt baust du den PE)MPLS-VPN — configuración completa del lado PE (el CE ya está; ahora arma el PE)MPLS-VPN — configuração completa do lado PE (o CE já está pronto; agora monte o PE)MPLS-VPN — configuration complète côté PE (le CE est prêt ; à toi de monter le PE)MPLS-VPN — पूरा PE-side configuration (CE तैयार है; अब PE बनाएँ)MPLS-VPN——完整的 PE 侧配置(CE 已就绪;现在搭建 PE)MPLS-VPN — configurazione completa lato PE (il CE c'è; ora costruisci il PE)MPLS-VPN — PE 側の完全な設定(CE は完成済み、今度は PE を構築)MPLS-VPN — PE 측 전체 구성 (CE 는 준비됨; 이제 PE 를 구성합니다)MPLS-VPN — полная конфигурация на стороне PE (CE готов; теперь строим PE)MPLS-VPN — PE tarafı tam yapılandırma (CE hazır; sıra PE'de)MPLS-VPN — cấu hình đầy đủ phía PE (CE đã có; giờ dựng PE)