: CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

RE: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

RE: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

RE: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

RE: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

  _____  

From: Robert McCallum [mailto:RMcCallum <at> thrupoint.net] 
Sent: 11 June 2007 10:53
To: 'Mohammed Shahnawaz'; 'sanjeewa <at> cisco.com'; 'mpls-ops <at> mplsrc.com'
Subject: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES
USING BGP MPLS VPN

You would look for service providers who are linked via inter-as.  That way
your mpls bgp will trundle through happily

Robert McCallum
Senior Consultant

  _____  

From: Mohammed Shahnawaz [mailto:mshahnawaz <at> huawei.com] 
Sent: 11 June 2007 10:03
To: sanjeewa <at> cisco.com; mpls-ops <at> mplsrc.com
Subject: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES
USING BGP MPLS VPN

Dear Sanjeeva,

Let me try to explain to you the scenario. Supposing that we have to connect
2 Cisco offices located in UAE & USA through BGP MPLS VPN, how this can be
achieved.  I have read in the draft "rosen-rfc2547bis-03" that it is
possible. It is also explained in Chapter 10 "Inter-Provider Backbones".
According to this document, there are 3 options (a, b & c), but I don't
understand how to select the value of RT and configure.

Best regards,

Shahnawaz

  _____  

From: Sanjeewa Alahakone (sanjeewa) [mailto:sanjeewa <at> cisco.com] 
Sent: Monday, June 11, 2007 12:42 PM
To: 'Mohammed Shahnawaz'; mpls-ops <at> mplsrc.com
Subject: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES
USING BGP MPLS VPN

Hi Mohammed,

Since you mentioned "different AS" it seems that you are trying to connect
your networks through the Internet, if this is the case mpls VPNs *may* not
be the solution.

There are two aspects of MPLS VPN, one is the service provider and the other
is the customer.

SP builds the MPLS vpn once and sells many times to customers, so they can
competes with leased line providers.

SP network has these elements

1, Provider edge router (PE) where customers connect to

2, Provider router (P), a core router where  PE or another P router connects
to

3, IGP a routing protocol like ospf, isis or something else

4, Then BGP needs run between PE routers also called mBGP

These PE routers can be in UAE or USA or just across your cabinets.

Then the customers connects to these PE routers with a ip routing protocol,
and PE router redistribute this RP through the BGP visa versa.

The question you should clarify is whether you are going to build the
customer side network or the SP network.

For sample configurations you may go to www.cisco.com and look for "mpls
vpn" there are heaps of examples.

This would be a good place to start

http://www.cisco.com/en/US/tech/tk436/tk428/technologies_configuration_examp
le09186a00800a6c11.shtml

Regards

Sanjeewa

  _____  

From: Mohammed Shahnawaz [mailto:mshahnawaz <at> huawei.com] 
Sent: Monday, 11 June 2007 5:29 PM
To: mpls-ops <at> mplsrc.com
Subject: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING
BGP MPLS VPN

Hi,

Is it possible to connect 2 offices spread in different countries using BGP
MPLS VPN? Supposing, there is one branch office in UAE and another in USA,
is it possible to connect them through BGP MPLS VPN? Since, the traffic will
be passing through many autonomous systems, how to choose the value of RD
and what could be the possible configuration of both the PEs?  

Can someone give me insight on the above? Answer with the supporting
documents would be great. 

Thanks & Regards,

Shahnawaz

Note:The information contained in this message may be privileged and confidential and protected from
disclosure . If the reader of this message is not the
intended recipient, or an employee or agent responsible for delivering this message to the intended
recipient, you are hereby notified that any 
dissemination, distribution or copying of this communication is strictly prohibited. If you have
received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer. Thankyou. ThruPoint Ltd.

RE: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

Re: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

Re: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

Hi all,

There might be different scenarios to look at:

1) The two offices require IPv4 connectivity ONLY From an MPLS VPN perspective they are the "CE" side and the
solution is to find either an MPLS VPN SP present at both sites or two ISPs using MPLS VPN inter-as solutions
(which RFC2547bis option is transparent to the customer thus irrelevant).

2) The two offices have MPLS VPN PE routers and thus require MPLS connectivity. This is definately more
tricky as there are more possible options.
First, keep in mind, your two PE routers need control and data plane connectivity. This means an
operational MP-BGP session for VPNv4 (control plane) AND MPLS labeled transport between the two PE to
pass the VPN labeled customer packets (data plane).
Possible solutions for case 2):
A) IPv4 connectivity between the two PEs and MPLS over GRE tunnels. 
   Pro: no MPLS needed with involved SPs - "normal" IPv4 internet will do
   Con: not very scalable and MTU related issues because of the GRE headers.
B) Inter-as setup with intermediate MPLS VPN providers ("VPNv4
internet") 
   Pro: different, wellknown design options (RFC 2547bis 10a-c)
   Con: need for MPLS SP(s) offering this type of service in both locations; routing convergence is slow
because of many AS involved; IF only one official AS is present at the customer sites: difficult BGP setup,
potential routing loops with AS-override
C) CsC (Carrier of Carriers)
   Could also be called "P router emulator service": connecting SPs build a P router functionality for your
MPLS VPN environment
   Pro: complete control over internal MP-BGP policies, only exchange BGP next-hop routes and labels with
intermediate SPs; different design options (IPv4+label or IGP+LDP), faster convergence than
inter-as, because VPNv4 is only exchanged between your own PE routers
   Con: Need for MPLS labeled connectivity through intermediate SPs; potentially MTU related issues (three
labels involved), which have to be addressed by the SPs.

If you are looking at case 2, I would opt for a CsC solution, which might be the most flexible design.
Final comment: whatever solution you are going to choose, make sure you understand the overall routing
design and work closely with the involved SPs

Regards, Martin

-------- Original-Nachricht --------
Datum: Wed, 13 Jun 2007 15:42:15 +0530
Von: "Shravan N" <shravan.nagraj <at> gmail.com>
An: "Mohammed Shahnawaz" <mshahnawaz <at> huawei.com>
CC: mpls-ops <at> mplsrc.com
Betreff: Re: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

> HI Shanawaz...
> 
> I went through the draft that you mentioned.....
> what you are talking about is what is commony known as EBGP multihop.
> 
> Please refer to some cisco commands :
> http://www.cisco.com/en/US/products/sw/iosswrel/ps5187/products_command_reference_chapter09186a008017d02a.html#wp1037550
> 
> and juniper material:
> 
> http://www.juniper.net/techpubs/software/junos/junos73/swconfig73-routing/html/bgp-config33.html
> 
> 
> But again,, as it was commented by sanjeewa.... MPLS is more of a service
> provider,s job.
> If you are a customer... you just need to ask for an mpls VPN .. if the SP
> has to do ebgp multihop he will do it provided he as the proper agreements
> with other SPs (assuming he cannot serve two customer locations within his
> ISP or with his and one other SP as in inter AS VPN).
> 
> So are you looking at configuration or development of your software to
> support ebgp multihop?
> 
> 
> regards
> 
> 
> 
> 
> On 6/11/07, Mohammed Shahnawaz <mshahnawaz <at> huawei.com> wrote:
> >
> >
> >
> >
> >
> > Hi,
> >
> >
> >
> > Is it possible to connect 2 offices spread in different countries using
> > BGP MPLS VPN? Supposing, there is one branch office in UAE and another
> in
> > USA, is it possible to connect them through BGP MPLS VPN? Since, the
> traffic
> > will be passing through many autonomous systems, how to choose the value
> of
> > RD and what could be the possible configuration of both the PEs?
> >
> >
> >
> > Can someone give me insight on the above? Answer with the supporting
> > documents would be great.
> >
> >
> >
> >
> >
> > Thanks & Regards,
> >
> >
> >
> > Shahnawaz
> >
> >
> >
> >
> >
> >
> >
> >
> >

--

-- 
Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten 
Browser-Versionen downloaden: http://www.gmx.net/de/go/browser

RE: RE: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN

Hi Martin,

Thanks a lot for the explanation. For my information, can you please
elaborate the case 1? Why you say that RFRC2547bis option is irrelevant for
case 1? Is the following scenario possible using BGP MPLS VPN?

Office A - PE (SP1) - P (SP1) - P (SP2) - PE (SP2) - Office B

Best regards,

Shahnawaz

-----Original Message-----
From: Martin Heusinger (mheusing) [mailto:mheusing <at> cisco.com] 
Sent: Wednesday, June 13, 2007 3:21 PM
To: RMcCallum <at> thrupoint.net; mshahnawaz <at> huawei.com; Sanjeewa Alahakone
(sanjeewa); mpls-ops <at> mplsrc.com
Subject: RE: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT
COUNTRIES USING BGP MPLS VPN

 
Hi all,

There might be different scenarios to look at:

1) The two offices require IPv4 connectivity ONLY
From an MPLS VPN perspective they are the "CE" side and the solution is
to find either an MPLS VPN SP present at both sites or two ISPs using
MPLS VPN inter-as solutions (which RFC2547bis option is transparent to
the customer thus irrelevant).

2) The two offices have MPLS VPN PE routers and thus require MPLS
connectivity
This is definately more tricky as there are more possible options.
First, keep in mind, your two PE routers need control and data plane
connectivity. This means an operational MP-BGP session for VPNv4
(control plane) AND MPLS labeled transport between the two PE to pass
the VPN labeled customer packets (data plane).
Possible solutions for case 2):
A) IPv4 connectivity between the two PEs and MPLS over GRE tunnels. 
   Pro: no MPLS needed with involved SPs - "normal" IPv4 internet will
do
   Con: not very scalable and MTU related issues because of the GRE
headers.
B) Inter-as setup with intermediate MPLS VPN providers ("VPNv4
internet") 
   Pro: different, wellknown design options (RFC 2547bis 10a-c)
   Con: need for MPLS SP(s) offering this type of service in both
locations; routing convergence is slow because of many AS involved; IF
only one official AS is present at the customer sites: difficult BGP
setup, potential routing loops with AS-override
C) CsC (Carrier of Carriers)
   Could also be called "P router emulator service": connecting SPs
build a P router functionality for your MPLS VPN environment
   Pro: complete control over internal MP-BGP policies, only exchange
BGP next-hop routes and labels with intermediate SPs; different design
options (IPv4+label or IGP+LDP), faster convergence than inter-as,
because VPNv4 is only exchanged between your own PE routers
   Con: Need for MPLS labeled connectivity through intermediate SPs;
potentially MTU related issues (three labels involved), which have to be
addressed by the SPs.

If you are looking at case 2, I would opt for a CsC solution, which
might be the most flexible design.
Final comment: whatever solution you are going to choose, make sure you
understand the overall routing design and work closely with the involved
SPs

Regards, Martin

-------- Original-Nachricht --------
Datum: Mon, 11 Jun 2007 11:25:44 +0100
Von: jerome.law <at> bt.com
An: RMcCallum <at> thrupoint.net, mshahnawaz <at> huawei.com, sanjeewa <at> cisco.com,
mpls-ops <at> mplsrc.com
Betreff: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT
COUNTRIES USING BGP MPLS VPN

You have to be very careful when you are using 6CoS as different service
providers use different values. Easier way might be to build an overlay
of different routing protocol or another AS if you are truncating
through different providers.

________________________________

From: Robert McCallum [mailto:RMcCallum <at> thrupoint.net]
Sent: 11 June 2007 10:54
To: 'Robert McCallum'; 'Mohammed Shahnawaz'; sanjeewa <at> cisco.com;
mpls-ops <at> mplsrc.com
Subject: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT
COUNTRIES USING BGP MPLS VPN

________________________________

From: Robert McCallum [mailto:RMcCallum <at> thrupoint.net] 
Sent: 11 June 2007 10:53
To: 'Mohammed Shahnawaz'; 'sanjeewa <at> cisco.com'; 'mpls-ops <at> mplsrc.com'
Subject: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT
COUNTRIES USING BGP MPLS VPN

You would look for service providers who are linked via inter-as.  That
way your mpls bgp will trundle through happily

Robert McCallum
Senior Consultant

________________________________

From: Mohammed Shahnawaz [mailto:mshahnawaz <at> huawei.com] 
Sent: 11 June 2007 10:03
To: sanjeewa <at> cisco.com; mpls-ops <at> mplsrc.com
Subject: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT
COUNTRIES USING BGP MPLS VPN

Dear Sanjeeva,

Let me try to explain to you the scenario. Supposing that we have to
connect 2 Cisco offices located in UAE & USA through BGP MPLS VPN, how
this can be achieved.  I have read in the draft "rosen-rfc2547bis-03"
that it is possible. It is also explained in Chapter 10 "Inter-Provider
Backbones". According to this document, there are 3 options (a, b & c),
but I don't understand how to select the value of RT and configure.

Best regards,

Shahnawaz

________________________________

From: Sanjeewa Alahakone (sanjeewa) [mailto:sanjeewa <at> cisco.com] 
Sent: Monday, June 11, 2007 12:42 PM
To: 'Mohammed Shahnawaz'; mpls-ops <at> mplsrc.com
Subject: RE: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT
COUNTRIES USING BGP MPLS VPN

Hi Mohammed,

Since you mentioned "different AS" it seems that you are trying to
connect your networks through the Internet, if this is the case mpls
VPNs *may* not be the solution.

There are two aspects of MPLS VPN, one is the service provider and the
other is the customer.

SP builds the MPLS vpn once and sells many times to customers, so they
can competes with leased line providers.

SP network has these elements

1, Provider edge router (PE) where customers connect to

2, Provider router (P), a core router where  PE or another P router
connects to

3, IGP a routing protocol like ospf, isis or something else

4, Then BGP needs run between PE routers also called mBGP

These PE routers can be in UAE or USA or just across your cabinets.

Then the customers connects to these PE routers with a ip routing
protocol, and PE router redistribute this RP through the BGP visa versa.

The question you should clarify is whether you are going to build the
customer side network or the SP network.

For sample configurations you may go to www.cisco.com and look for "mpls
vpn" there are heaps of examples.

This would be a good place to start

http://www.cisco.com/en/US/tech/tk436/tk428/technologies_configuration_e
xample09186a00800a6c11.shtml

Regards

Sanjeewa

________________________________

From: Mohammed Shahnawaz [mailto:mshahnawaz <at> huawei.com] 
Sent: Monday, 11 June 2007 5:29 PM
To: mpls-ops <at> mplsrc.com
Subject: [MPLS-OPS]: CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES
USING BGP MPLS VPN

Hi,

Is it possible to connect 2 offices spread in different countries using
BGP MPLS VPN? Supposing, there is one branch office in UAE and another
in USA, is it possible to connect them through BGP MPLS VPN? Since, the
traffic will be passing through many autonomous systems, how to choose
the value of RD and what could be the possible configuration of both the
PEs?  

Can someone give me insight on the above? Answer with the supporting
documents would be great. 

Thanks & Regards,

Shahnawaz

________________________________

Note:The information contained in this message may be privileged and
confidential and protected from disclosure . If the reader of this
message is not the
intended recipient, or an employee or agent responsible for delivering
this message to the intended recipient, you are hereby notified that any

dissemination, distribution or copying of this communication is strictly
prohibited. If you have received this communication in error, please
notify us
immediately by replying to the message and deleting it from your
computer. Thankyou. ThruPoint Ltd. 

RE: RE: : CONNECTING OFFICES SPREAD IN DIFFERENT COUNTRIES USING BGP MPLS VPN