Hot answers tagged

12

L2VPN is generic term for group of technologies out of which one is VPLS, but could be number of other technologies such as emerging EVPN. For more information read WG charter/mailing lists as L2VPN has lot of active work going on. Also read RFC6624 and RFC4761


8

Short answer, just use Resource ReSerVation Protocol (RSVP). Long answer, you could use multi-topology-routing and have multiple metrics in each interface and force some packets to different topology than another packets. But I would not really venture there. You might want to talk to your account team that you want segment routing implemented: http://...


7

So it seems the way to go is to use a logical tunnel interface on MX. Just put one end of the lt Interface in the VPLS instance and the other end in the L2VPN instance: lt-1/2/0 { mtu 1514; unit 0 { encapsulation ethernet-ccc; peer-unit 1; family ccc; } unit 1 { encapsulation ...


4

Let's say that it is a 'new protocol heavily based on L2TPv2'. It shares a lot of the messages, constructs, flows with L2TPv2 but it is not strictly backwards compatible. It does have an L2TP 'compatibility' scheme as indicated in section 4.7 of the RFC, but that comes with limitations. The most significant changes are actually listed directly in the RFC: ...


4

Putting myself in a customer perspective, with presumption that customer has solid technical competence. If you have multiple offices, you should confirm that L2VPN product you're offered is multipoint, any-to-any solution, like VPLS. Then ask how many MAC addresses can be in each sites, how are bcast/mcast/unknown unicast limited. If there are no ...


4

This is a very broad question and you need to do some more background reading, but quick answers to your questions: L2 MPLS VPN – forwards based on the L2 address of the L2 PDU. The L2 PDU is encapsulated in the transport protocol (MPLS). The VPN can provide point-to-point (AToM) or LAN type multipoint service (VPLS). Something to remember about these ...


3

You are correct. L2VPN is the technology, and VPLS and VPWS are services configured using that technology. When someone talks about configuring an L2VPN, they could be talking about configuring any of those services. https://datatracker.ietf.org/wg/l2vpn/about/ https://tools.ietf.org/html/rfc4664


3

The real strengths of MPLS are that it provides a clear boundary between service and transport and is highly extensible - the fact that you can configure L2 or L3 VPNs across the same IP underlay is testament to this. I'm not clear what you're suggesting in your L2VPN example, but the xconnect is mapped to the AC so that there is some way of identifying the ...


3

Why there is a need for again source MAC and destination MAC addresses? The original source and destination MAC addresses have no meaning while the packet is in the tunnel. My understanding is that it uses MPLS labeling for switching/routing within the core network. Once it moves out from the PE, it will go to its attachment circuit based on the ...


3

Pretty sure you need to add family ccc to the interface on the PE_MX80. set interfaces ge-1/0/9 unit 555 family ccc


2

The point of sale software requires all ipads to be on the same network to function. Generally, that is bad design. Servers and clients should be able to reside in different subnets. If you scatter 192.168.33.0/24 across several sites you'll need to use L2VPN - L2 tunneling over WAN is a general problem and should be avoided wherever possible. I'd ...


2

You can't use packet-tracer for outside-to-inside traffic when it comes to tunnels terminated directly on the ASA. Have you actually tested the tunnel both directions with real traffic? Also, you can't define your tunnels to AWS the way you have, because AWS tunnels are route-based. AWS requires that "any" be used in the cryptomap match ACL, and that all ...


2

For starters, they aren't identical: 1718.1, 1718.2, 1718.3 There will be one security association ("tunnel") per ACL rule.


2

Understanding and Configuring VLAN Routing and Bridging on a Router Using the IRB Feature Background Information In order for a VLAN to span a router, the router must be capable of forwarding frames from one interface to another, while maintaining the VLAN header. If the router is configured for routing a Layer 3 (network layer) protocol, it will terminate ...


2

VPWS is a point to point L2VPN, using this technology two geographically remote hosts from the same IP subnet are able to communicate as if they were connected to the same switch. This thing is achieved by the transport of Ethernet frames inside an MPLS tunnel. So if to capture the packet as it travels between two LSRs inside the MPLS core you would get ...


2

Here is a short answer: OTV allows for more than just two sites. It prevents bridging loops better than spanning tree. OTV controls unknown MAC flooding, and only advertises MACs to other sites as necessary. OTV limits "local" protocols like STP, VTP, etc to the local site. OTV prevents broadcast storms, L2 loops, etc from affecting more than one ...


2

VPWS and Xconnect is about the same technology. VPWS is the name of technology, xconnect - keyword for configuring pseudowire. You can find different naming like VLL, L2VC, PWE3, etc. Essentially they are referring to the same technology of p2p l2 connections. You can find more info in RFC 4664 For instance section 1.3 says: There are two fundamentally ...


1

In a nutshell, VPWS or VLL (virtual leased line) support n-to-m connections like Ethernet while Xconnects are point-to-point only.


1

It's kind of strange to differentiate price for the service based on technology rather than SLA. Nevertheless, the best way to find out certainly is to ask your ISP, because there're plenty of techniques to do so, such as: End to end VLAN or bridged connection through router L2TPv3 VXLAN OTV Older technologies such as Frame Relay more and more.


1

a) Can this be done at all? Yes, it can. b) Can we do it in our own gear? (We currently use the Sonicwall NSA 3600, but will migrate off if we need to. What do we need to have, spec wise, in gear to do that?) Yes, you can do this with your firewalls; they support layer-2 tunneling. c) Suggested "closest options" to this? I'm not sure what you ...


Only top voted, non community-wiki answers of a minimum length are eligible