OcNOS SP : Multi-Protocol Label Switching Guide : Multi-Protocol Label Switching Configuration : MPLS Service Mapping Configuration
MPLS Service Mapping Configuration
This chapter includes step-by-step configurations for tunnel policy configuration for all the MPLS services.
Overview
This feature enables MPLS services L2VPN, L3VPN, EVPN traffic steering with SR-policy as the underlying transport using local-tunnel-policy configuration. This is achieved with the help of color coding and association between service and MPLS transport.
A local-tunnel-policy is created which specifies the color of the transport-tunnel in order to be selected for a VPN service. The created tunnel-policy is now applied for the VPN service so that it will select the preferred tunnel. The destination address of the preferred tunnel identifies a peer PE so the PE will forward traffic destined for that peer PE over the preferred tunnel. If you specify multiple preferred tunnels that have the same destination address in a tunnel policy, only the first configured tunnel takes effect and if the first tunnel is not available, the second tunnel is used, and so forth. No load balancing will be performed on these tunnels.
The tunnels selected by 2 methods, dedicated and best-effort. By default, tunnel policy uses dedicated method. If you configure dedicated method for a tunnel policy, the tunnel policy uses the preferred tunnel to forward traffic destined for the peer PE. If not, the MPLS VPN service will be down. If you configure best-effort method for a tunnel policy, the tunnel policy uses the preferred tunnel to forward traffic destined for the peer PE. If not, the MPLS VPN selects the available MPLS transport in MPLS forwarding table.
Topology
The diagram depicts the topology for the configuration examples that follow.
Service mapping to Tunnel
Configuration
Below are the sample configuration for EVPN (E-LINE, E-LAN), L3VPN, 6VPE, VPWS, and VPLS services with Tunnel Policy along with SR as transport.
PE1: Loopback Interface
 
#configure terminal
Enter configuration mode.
(config)#interface lo
Enter the Interface mode for the loopback interface.
(config-if)#ip address 10.143.73.1/32 secondary
Configure IP address on loopback interface.
(config-if)#prefix-sid index 1
Configure prefix sid index value
(config-if)#exit
Exit interface mode
PE1: Global EVPN MPLS Command:
#configure terminal
Enter configuration mode.
(config)#evpn mpls enable
Enable EVPN MPLS. Note: Reload is required after Enabling/ Disabling EVPN MPLS Feature.
(config)#evpn mpls vtep-ip-global 10.143.73.1
Configuring loopback IP as VTEP global IP
(config)#commit
Commit the candidate configuration to the running configuration
(config)#end
Ending config mode
#write memory
Save config to startup config
#reload
Reload device after enabling evpn
PE1: LDP Configuration
 
(config)#router ldp
Enter the Router LDP mode.
(config-router)#router-id 10.143.73.1
Set the router ID to IP address 10.143.73.1.
(config-router)#transport-address ipv4 10.143.73.1
Configure the transport address to be used for a TCP session over which LDP will run on an IPv4 interface.
(config-router)# targeted-peer ipv4 10.143.73.3
Configure targeted peer
(config-router-targeted-peer)# exit-targeted-peer-mode
Exit from router target peer and LDP mode
PE1: Interface Configuration Network Side
 
(config)#interface xe16
Enter the Interface mode for xe16
(config-if)# ip address 10.255.128.2/31
Configure IP address on the interface.
(config-if)#mtu 9900
Configure mtu at interface level
(config-if)# label-switching
Enable label switching on the interface.
(config-if)# enable-ldp ipv4
Enable ldp on the interface.
(config-if)#exit
Exit interface mode
(config)#interface xe4
Enter the Interface mode for xe4.
(config-if)# ip address 10.255.128.10/31
Configure IP address on the interface.
(config-if)#mtu 9900
Configure mtu at interface level
(config-if)# label-switching
Enable label switching on the interface.
(config-if)# enable-ldp ipv4
Enable ldp on the interface.
(config-if)#exit
Exit interface mode
PE1: OSPF Configuration
 
(config)#router ospf 100
Enter the Router OSPF mode.
(config-router)#ospf router-id 10.143.73.1
Router-id configurations
(config-router)# bfd all-interfaces
Enable the OSPF enabled interfaces with bfd
(config-router)# network 10.143.73.1/32 area 0.0.0.0
Advertise loopback address in OSPF.
(config-router)# network 10.255.128.2/31 area 0.0.0.0
Advertise network address in OSPF.
(config-router)# network 10.255.128.10/31 area 0.0.0.0
Advertise network address in OSPF.
(config-router)# ospf segment-routing global block 16000 17000
Enable SRGB under ospf process 100
(config-router)#segment-routing mpls
Enable segment routing
(config-router)#exit
Exit Router OSPF mode and return to Configure mode.
PE1: BGP Configuration
 
(config)# router bgp 100
Enter the Router BGP mode, ASN: 100.
(config-router)# neighbor 10.143.73.3 remote-as 100
Configuring PE3 as iBGP neighbor using it's loopback ip.
(config-router)# neighbor 10.143.73.3 fall-over bfd multihop
Configure neighbor bfd multihop
(config-router)# neighbor 10.143.73.3 update-source lo
Source of routing updates as loopback
(config-router)# neighbor 10.143.73.3 advertisement-interval 0
Configure advertisement interval
(config-router)# address-family vpnv4 unicast
Enter VPNv4 Address family mode
(config-router-af)# neighbor 10.143.73.3 activate
Enabling VPNv4 Address family for neighbor..
(config-router-af)# exit-address-family
Exit Address-family mode.
(config-router)# address-family l2vpn vpls
Enter l2vpn Address family mode
(config-router-af)# neighbor 10.143.73.3 activate
Enabling l2vpn Address family for neighbor..
(config-router-af)# exit-address-family
Exit Address-family mode.
(config-router)# address-family l2vpn evpn
Enter evpn Address family mode
(config-router-af)# neighbor 10.143.73.3 activate
Enabling evpn Address family for neighbor..
(config-router-af)# exit-address-family
Exit Address-family mode.
(config-router)# address-family vpnv6 unicast
Enter VPNv6 Address family mode
(config-router-af)# neighbor 10.143.73.3 activate
Enabling VPNv6 Address family for neighbor..
(config-router-af)# exit-address-family
Exit Address-family mode.
PE1: SR policy Configuration
 
(config)#segment-routing
Enter the segment routing mode.
(config-sr)# mpls sr-prefer
prefer segment routing MPLS entries for forwarding.
((config-sr)#traffic-engineering
Enter traffic engineering mode.
(config-sr-te)# policy PE1-P1-PE3
Configure SR policy
(config-sr-pol)# color 1 end-point 10.143.73.3
Configure color with destination address.
(config-sr-pol)#candidate-path 1
Enter candidate path mode.
(config-sr-pol-cp)#dynamic-path ospf 100
Configure dynamic path ospf
(config-sr-pol-cp)#constraints
Enter constraint mode
(config-sr-dyn-cp-cons)# 10.143.73.5 loose
Configure P1 as next-hop loose mode.
(config-sr-dyn-cp-cons)#exit-pol-cp
Exit candidate path mode.
(config-sr-pol-cp)#exit-sr-pol
Exit SR policy mode.
(config-sr-te)# policy PE1-P2-PE3
Configure SR policy
(config-sr-pol)# color 2 end-point 10.143.73.3
Configure color with destination address.
(config-sr-pol)#candidate-path 1
Enter candidate path mode.
(config-sr-pol-cp)#dynamic-path ospf 100
Configure dynamic path ospf
(config-sr-pol-cp)#constraints
Enter constraint mode
(config-sr-dyn-cp-cons)# 10.143.73.6 loose
Configure P2 as next-hop loose mode.
(config-sr-dyn-cp-cons)#exit-pol-cp
Exit candidate path mode.
(config-sr-pol-cp)#exit-sr-pol
Exit SR policy mode.
PE1: Tunnel Policy Configuration
 
(config)# tunnel-policy PE1-P1-PE3
Configure tunnel policy
(config-tnl-policy)#color 1
Map the color with the SR policy to be used..
(config-tnl-policy)#exit
Exiting tunnel policy mode
(config)# tunnel-policy PE1-P2-PE3
Configure tunnel policy
(config-tnl-policy)#color 2
Map the color with the SR policy to be used..
(config-tnl-policy)#exit
Exiting tunnel policy mode
PE1: VPWS Configuration
 
(config)# mpls l2-circuit pe1-to-pe3 2002 10.143.73.3
Configure the VC for PE3. In this
example, pe1-to-pe3 is the VC name, 2002 is the VC ID, and 10.143.73.3 is the VC endpoint IP address.
(config-pseudowire)# tunnel-select-policy PE1-P1-PE3
Configure Tunnel-Policy on VC pe1-to-pe3
(config-pseudowire)#exit
Exit pseudowire config mode.
(config)#exit
Exiting from config mode
(config)#service-template pe1-to-pe3
Template configuration.
(config-svc)# match outer-vlan 2002
Match criteria under template configuration
(config)#exit
Exiting from config mode
PE1: VPLS Configuration
 
(config)# mpls vpls vpls-pe1-to-pe3pe4-1 2502
Enter VPLS config mode
(config-vpls)#signaling ldp
Define Signaling as LDP
(config-vpls-sig)#vpls-type ethernet
Type ethernet configuration for VPLS
(config-vpls-sig)# vpls-peer 10.143.73.3 tunnel-select-policy PE1-P2-PE3
Configure VPLS Peer with tunnel-policy
(config-vpls-sig)#exit-signaling
Exit Signaling LDP mode
(config-vpls)#exit
Exit VPLS mode
(config)#service-template vpls-pe1-to-pe3pe4-1
Template configuration.
(config-svc)# match outer-vlan 2502
Match criteria under template configuration
(config-svc)# rewrite ingress translate 2600 outgoing-tpid dot1.q
Action performed for service template.
(config)# mpls vpls vpls-pe1-to-pe3pe4-2 2503
Enter VPLS config mode
(config-vpls)#signaling bgp
Enter the Signaling bgp mode for BGP VPLS.
(config-vpls-sig)# ve-id 3
Configure VE ID, which is mandatory for BGP VPLS, otherwise, signaling does not take place. VE ID should be unique per VPLS instance
(config-vpls-sig)# tunnel-select-policy PE1-P1-PE3
Configure tunnel-policy for a VPLS instance
(config-vpls-sig)#exit-signaling
Exit Signaling LDP mode
(config-vpls)#exit
Exit VPLS mode
(config)#service-template vpls-pe1-to-pe3pe4-2
Template configuration.
(config-svc)# match double-tag outer-vlan 2503 inner-vlan 2504
Match criteria under template configuration
(config-svc)# rewrite ingress push 2505
Action performed for service template.
PE1: MAC VRF and IP VRF Configuration for EVPN and L3VPN services
Note: For EVPN Service, Tunnel Policy can be applied at mac vrf level and VNID level, When Configured at both levels, Preference is given to VNID level.
 
(config)#mac vrf vrf2
Enter VRF mode
(config-vrf)# tunnel-select-policy PE1-P1-PE3
Map tunnel policy to mac vrf
(config-vrf)#rd 10.143.73.1:2
Configuring Route-Distinguisher value 10.143.73.1:2
(config-vrf)#route-target both 2:2
Configuring import and export value as 2:2
(config-vrf)#exit
Exiting VRF Mode.
(config)#mac vrf elan500
Enter VRF mode
(config-vrf)#rd 10.143.73.1:500
Configuring Route-Distinguisher value 10.143.73.1:500
(config-vrf)#route-target both 500:500
Configuring import and export value as 500:500
(config)# ip vrf vrf600
Enter VRF mode
(config-vrf)# tunnel-select-policy PE1-P1-PE3
Configure tunnel-policy to be used for the VRF.
(config-vrf)# rd 10.143.73.1:600
Configuring Route-Distinguisher value 10.143.73.1:600
(config-vrf)#route-target both 600:600
Configuring import and export value as 600:600
(config-vrf)#exit
Exiting VRF Mode.
PE1: EVPN and MAC-VRF mapping for ELAN and ELINE
 
(config)#evpn mpls id 2 xconnect target-mpls-id 252
Configure the EVPN-ELINE identifier with source identifier 2 and target identifier 252.
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2
Mapping vrf "vrf2" to EVPN-VPWS identifier.
(config-evpn-mpls)#exit
Exiting from evpn-mpls mode
(config)# evpn mpls id 500
Configure evpn mpls id 500
(config-evpn-mpls)#tunnel-select-policy PE1-P2-PE3
Map tunnel-policy to EVI
(config-evpn-mpls)#host-reachability-protocol evpn-bgp elan500
Mapping vrf " elan500" to EVPN-VPLS identifier.
PE1: Access side Configuration
 
(config)#interface xe8
Enter the Interface mode for xe8
(config-if)# switchport
Configure interface as switch port
(config-if)# mpls-l2-circuit pe1-to-pe3 service-template pe1-to-pe3 primary
Bind the interface to the VC with service template
(config-if)# mpls-vpls vpls-pe1-to-pe3pe4-1 service-template vpls-pe1-to-pe3pe4-1
Bind the VPLS instance to the interface
(config-if-vpls)# exit-if-vpls
Exit VPLS attachment-circuit mode
(config-if)# mpls-vpls vpls-pe1-to-pe3pe4-2 service-template vpls-pe1-to-pe3pe4-2
Bind the VPLS instance to the interface
(config-if-vpls)#split-horizon group access1
Configure split-horizon group on VPLS
(config-if-vpls)# exit-if-vpls
Exit VPLS attachment-circuit mode
(config-if)# exit
Exit from the interface
(config)#interface xe8.2 switchport
Configure Interface xe8.2 as switchport
(config-if)#encapsulation dot1q 2
Setting Encapsulation to dot1q with VLAN ID 2
(config-if)#access-if-evpn
Entering Access mode for EVPN MPLS ID configuration.
(config-access-if)#map vpn-id 2
Map vpn-id 2 to interface xe8.2 (VPWS).
(config-access-if)#exit
Exiting out of access interface mode.
(config)#interface xe8.500 switchport
Configure Interface xe8.500 as switchport
(config-if)#encapsulation dot1q 500
Setting Encapsulation to dot1q with VLAN ID 500
(config-if)#access-if-evpn
Entering Access mode for EVPN MPLS ID configuration.
(config-access-if)#map vpn-id 500
Map vpn-id 500 to interface xe8.500 (VPLS).
(config-access-if)#exit
Exiting out of access interface mode.
(config)#interface xe8.600
Enter Interface mode xe8.600
(config-if)# ip vrf forwarding vrf600
Bind the VRF instance to the interface
(config-if)# ip address 170.1.1.1/24
Configure IP address
(config-if)# ipv6 address 1111::1/64
Configure ipv6 address
(config-if)#encapsulation dot1q 600
Setting Encapsulation to dot1q with VLAN ID 600
(config-if)#exit
Exiting interface Mode.
(config)# router bgp 100
Enter BGP router mode
(config-router)#address-family ipv4 vrf vrf600
Configure VRF address family
(config-router-af)redistribute connected
Redistribute connected router
(config-router-af)#neighbor 170.1.1.2 remote-as 200
Configure neighbor with remote-as
(config-router-af)#neighbor 170.1.1.2 activate
Activate the VPN neighbour
(config-router-af)exit-address-family
Exit VRF address family
(config-router)#address-family ipv6 vrf vrf600
Configure ipv6 VRF address family
(config-router-af)redistribute connected
Redistribute connected router
(config-router-af)#neighbor 1111::2 remote-as 200
Configure neighbor with remote-as
(config-router-af)#neighbor 1111::2 activate
Activate the VPN neighbour
(config-router-af)exit-address-family
Exit VRF address family
(config-router-af)exit
End
(config-router)#commit
Commit the candidate configuration to the running configuration
P1: Loopback Interface
 
(config)#interface lo
Enter the Interface mode for the loopback interface.
(config-if)#ip address 10.143.73.5/32 secondary
Configure IP address on loopback interface.
(config-if)#prefix-sid index 5
Configure prefix sid index value
(config-if)#exit
Exit interface mode
P1: Interface Configuration Network Side
 
(config)#interface xe15
Enter the Interface mode for xe15
(config-if)# ip address 10.255.128.3/31
Configure IP address on the interface.
(config-if)# mtu 9900
Configure mtu
(config-if)# label-switching
Enable label switching on the interface.
(config-if)#exit
Exit interface mode
(config)#interface xe7
Enter the Interface mode for xe7.
(config-if)# ip address 10.255.128.23/31
Configure IP address on the interface.
(config-if)# label-switching
Enable label switching on the interface.
(config-if)#exit
Exit interface mode
P1: OSPF Configuration
 
(config)#router ospf 100
Enter the Router OSPF mode.
(config-router)#ospf router-id 10.143.73.5
Router-id configurations
(config-router)# bfd all-interfaces
Enable the OSPF enabled interfaces with bfd
(config-router)# network 10.143.73.5/32 area
 
0.0.0.0
Advertise network address in OSPF.
(config-router)# network 10.255.128.2/31 area 0.0.0.0
Advertise network address in OSPF.
(config-router)# network 10.255.128.22/31 area 0.0.0.0
Advertise network address in OSPF.
(config-router)# ospf segment-routing global block 16000 17000
Enable SRGB under ospf process 100
(config-router)#segment-routing mpls
Enable segment routing
(config-router)#exit
Exit Router OSPF mode and return to Configure mode.
(config)#commit
Commit the candidate configuration to the running configuration
P2: Loopback Interface
 
#configure terminal
Enter configuration mode.
(config)#interface lo
Enter the Interface mode for the loopback interface.
(config-if)#ip address 10.143.73.6/32 secondary
Configure IP address on loopback interface.
(config-if)#prefix-sid index 6
Configure prefix sid index value
(config-if)#exit
Exit interface mode
P2: Interface Configuration Network Side
 
(config)#interface xe4
Enter the Interface mode for xe4
(config-if)# ip address 10.255.128.11/31
Configure IP address on the interface.
(config-if)# mtu 9900
Configure mtu
(config-if)# label-switching
Enable label switching on the interface.
(config-if)#exit
Exit interface mode
(config)#interface xe5
Enter the Interface mode for xe5.
(config-if)# ip address 10.255.128.25/31
Configure IP address on the interface.
(config-if)# label-switching
Enable label switching on the interface.
(config-if)#exit
Exit interface mode
P2: OSPF Configuration
 
(config)#router ospf 100
Enter the Router OSPF mode.
(config-router)#ospf router-id 10.143.73.6
Router-id configurations
(config-router)# bfd all-interfaces
Enable the OSPF enabled interfaces with bfd
(config-router)# network 10.143.73.6/32 area
 
0.0.0.0
Advertise network address in OSPF.
(config-router)# network 10.255.128.10/31 area 0.0.0.0
Advertise network address in OSPF.
(config-router)# network 10.255.128.24/31 area 0.0.0.0
Advertise network address in OSPF.
(config-router)# ospf segment-routing global block 16000 17000
Enable SRGB under ospf process 100
(config-router)#segment-routing mpls
Enable segment routing
(config-router)#exit
Exit Router OSPF mode and return to Configure mode.
(config)#commit
Commit the candidate configuration to the running configuration
PE3: Loopback Interface
 
#configure terminal
Enter configuration mode.
(config)#interface lo
Enter the Interface mode for the loopback interface.
(config-if)# ip address 10.143.73.3/32 secondary
Configure IP address on loopback interface.
(config-if)#prefix-sid index 3
Configure prefix sid index value
(config-if)#exit
Exit interface mode
PE3: Global EVPN MPLS Command
 
#configure terminal
Enter configuration mode.
(config)#evpn mpls enable
Enable EVPN MPLS. Note: Reload is required after Enabling/ Disabling EVPN MPLS Feature.
(config)#evpn mpls vtep-ip-global 10.143.73.3
Configuring vtep global ip to loopback IP.
(config)#commit
Commit the candidate configuration to the running configuration
(config)#end
End configuration mode
#write memory
Saving configs to startup config
#reload
Reload device after enabling evpn
PE3: LDP Configuration
 
(config)#router ldp
Enter the Router LDP mode.
(config-router)#router-id 10.143.73.3
Set the router ID to IP address 10.143.73.3.
(config-router)#transport-address ipv4 10.143.73.3
Configure the transport address to be used for a TCP session over which LDP will run on an IPv4 interface.
(config-router)# targeted-peer ipv4 10.143.73.1
Configure targeted peer
(config-router-targeted-peer)# exit-targeted-peer-mode
Exit from router target peer and LDP mode
PE3: Interface Configuration Network Side
 
(config)#interface xe5
Enter the Interface mode for xe5
(config-if)# ip address 10.255.128.24/31
Configure IP address on the interface.
(config-if)#mtu 9900
Configure mtu at interface level
(config-if)# label-switching
Enable label switching on the interface.
(config-if)# enable-ldp ipv4
Enable ldp on the interface.
(config-if)#exit
Exit interface mode
(config)#interface xe7
Enter the Interface mode for xe7.
(config-if)# ip address 10.255.128.22/31
Configure IP address on the interface.
(config-if)# label-switching
Enable label switching on the interface.
(config-if)# enable-ldp ipv4
Enable ldp on the interface.
(config-if)#exit
Exit interface mode
PE3: OSPF Configuration
 
(config)#router ospf 100
Enter the Router OSPF mode.
(config-router)#ospf router-id 10.143.73.3
Router-id configurations
(config-router)# bfd all-interfaces
Enable the OSPF enabled interfaces with bfd
(config-router)# network 10.143.73.3/32 area 0.0.0.0
Advertise loopback address in OSPF.
(config-router)# network 10.255.128.22/31 area 0.0.0.0
Advertise network address in OSPF.
(config-router)# network 10.255.128.24/31 area 0.0.0.0
Advertise network address in OSPF.
(config-router)# ospf segment-routing global block 16000 17000
Enable SRGB under ospf process 100
(config-router)#segment-routing mpls
Enable segment routing
(config-router)#exit
Exit Router OSPF mode and return to Configure mode.
PE3: BGP Configuration
 
(config)# router bgp 100
Enter the Router BGP mode, ASN: 100.
(config-router)# neighbor 10.143.73.1 remote-as 100
Configuring PE3 as iBGP neighbor using it's loopback ip.
(config-router)# neighbor 10.143.73.1 fall-over bfd multihop
Configure neighbor bfd multihop
(config-router)# neighbor 10.143.73.1 update-source lo
Source of routing updates as loopback
(config-router)# neighbor 10.143.73.1 advertisement-interval 0
Configure advertisement interval
(config-router)# address-family vpnv4 unicast
Enter VPNv4 Address family mode
(config-router-af)# neighbor 10.143.73.1 activate
Enabling VPNv4 Address family for neighbor..
(config-router-af)# exit-address-family
Exit Address-family mode.
(config-router)# address-family l2vpn vpls
Enter l2vpn Address family mode
(config-router-af)# neighbor 10.143.73.1 activate
Enabling l2vpn Address family for neighbor..
(config-router-af)# exit-address-family
Exit Address-family mode.
(config-router)# address-family l2vpn evpn
Enter evpn Address family mode
(config-router-af)# neighbor 10.143.73.1 activate
Enabling evpn Address family for neighbor..
(config-router-af)# exit-address-family
Exit Address-family mode.
(config-router)# address-family vpnv6 unicast
Enter VPNv6 Address family mode
(config-router-af)# neighbor 10.143.73.1 activate
Enabling VPNv6 Address family for neighbor..
(config-router-af)# exit-address-family
Exit Address-family mode.
PE3: VPWS Configuration
 
(config)# mpls l2-circuit pe3-to-pe1 2002 10.143.73.1
Configure the VC for PE-1. In this example, pe3-to-pe1 is the VC name, 2002 is the VC ID, and 10.143.73.1 is the VC endpoint IP address.
(config)#exit
Exiting from config mode
(config)#service-template pe3-to-pe1
Template configuration.
(config-svc)# match outer-vlan 2002
Match criteria under template configuration
(config)#exit
Exiting from config mode
PE3: VPLS Configuration
 
(config)# mpls vpls vpls-pe3-to-pe1pe4-1 2502
Enter VPLS config mode
(config-vpls)#signaling ldp
Define Signaling as LDP
(config-vpls-sig)#vpls-type Ethernet
Type ethernet configuration for VPLS
(config-vpls-sig)# vpls-peer 10.143.73.1
Configure VPLS Peer
(config-vpls-sig)#exit-signaling
Exit Signaling LDP mode
(config-vpls)#exit
Exit VPLS mode
(config)#service-template vpls-pe3-to-pe1pe4-1
Template configuration.
(config-svc)# match outer-vlan 2502
Match criteria under template configuration
(config-svc)# rewrite ingress translate 2600 outgoing-tpid dot1.q
Action performed for service template.
(config)# mpls vpls vpls-pe3-to-pe1pe4-2 2503
Enter VPLS config mode
(config-vpls)#signaling bgp
Enter the Signaling bgp mode for BGP VPLS.
(config-vpls-sig)# ve-id 4
Configure VE ID, which is mandatory for BGP VPLS, otherwise, signaling does not take place. VE ID should be unique per VPLS instance
(config-vpls-sig)#exit-signaling
Exit Signaling LDP mode
(config-vpls)#exit
Exit VPLS mode
(config)#service-template vpls-pe3-to-pe1pe4-2
Template configuration.
(config-svc)# match double-tag outer-vlan 2503 inner-vlan 2504
Match criteria under template configuration
(config-svc)# rewrite ingress push 2505
Action performed for service template.
PE3: MAC and IP VRF Configuration
 
(config)#mac vrf vrf2
Enter VRF mode
(config-vrf)#rd 10.143.73.3:2
Configuring Route-Distinguisher value 10.143.73.3:2
(config-vrf)#route-target both 2:2
Configuring import and export value as 2:2
(config-vrf)#exit
Exiting VRF Mode.
(config)#mac vrf elan500
Enter VRF mode
(config-vrf)#rd 10.143.73.3:500
Configuring Route-Distinguisher value 10.143.73.3:500
(config-vrf)#route-target both 500:500
Configuring import and export value as 500:500
(config)# ip vrf vrf600
Enter VRF mode
(config-vrf)# rd 10.143.73.3:600
Configuring Route-Distinguisher value 10.143.73.3:600
(config-vrf)#route-target both 600:600
Configuring import and export value as 600:600
(config-vrf)#exit
Exiting VRF Mode.
PE3: EVPN and mac vrf mapping Configuration
 
(config)#evpn mpls id 252 xconnect target-mpls-id 2
Configure the EVPN-ELINE identifier with source identifier 252 and target identifier 2.
(config-evpn-mpls)#host-reachability-protocol evpn-bgp vrf2
Mapping vrf "vrf2" to EVPN-VPWS identifier.
(config-evpn-mpls)#exit
Exiting from evpn-mpls mode
(config)# evpn mpls id 500
Configure evpn mpls id 500
(config-evpn-mpls)#host-reachability-protocol evpn-bgp elan500
Mapping vrf " elan500" to EVPN-VPLS identifier.
PE3: Access side Configuration
 
(config)#interface xe4
Enter the Interface mode for xe8
(config-if)# switchport
Configure interface as switch port
(config-if)# mpls-l2-circuit pe3-to-pe1 service-template pe3-to-pe1 primary
Bind the VPWS instance to the interface
(config-if)# mpls-vpls vpls-pe3-to-pe1pe4-1 service-template vpls-pe3-to-pe1pe4-1
Bind the VPLS instance to the interface
(config-if-vpls)# exit-if-vpls
Exit VPLS attachment-circuit mode
(config-if)# mpls-vpls vpls-pe3-to-pe1pe4-2 service-template vpls-pe3-to-pe1pe4-2
Bind the VPLS instance to the interface
(config-if-vpls)# exit-if-vpls
Exit VPLS attachment-circuit mode
(config-if)# exit
Exit from the interface
(config)#interface xe4.2 switchport
Configure Interface xe4.2 as switchport
(config-if)#encapsulation dot1q 2
Setting Encapsulation to dot1q with VLAN ID 2
(config-if)#access-if-evpn
Entering Access mode for EVPN MPLS ID configuration.
(config-access-if)#map vpn-id 252
Map vpn-id 252 to interface xe4.2 (VPWS).
(config-access-if)#exit
Exiting out of access interface mode.
(config)#interface xe4.500 switchport
Configure Interface xe4.500 as switchport
(config-if)#encapsulation dot1q 500
Setting Encapsulation to dot1q with VLAN ID 500
(config-if)#access-if-evpn
Entering Access mode for EVPN MPLS ID configuration.
(config-access-if)#map vpn-id 500
Map vpn-id 500 to interface xe4.500 (VPLS).
(config-access-if)#exit
Exiting out of access interface mode.
(config)#interface xe4.600
Enter Interface mode xe4.600
(config-if)# ip vrf forwarding vrf600
Bind the VRF instance to the interface
(config-if)# ip address 180.1.1.1/24
Configure IP address
(config-if)# ipv6 address 2222::1/64
Configure ipv6 address
(config-if)#encapsulation dot1q 600
Setting Encapsulation to dot1q with VLAN ID 600
(config-if)#exit
Exiting interface Mode.
(config)# router bgp 100
Enter BGP router mode
(config-router)#address-family ipv4 vrf vrf600
Configure VRF address family
(config-router-af)redistribute connected
Redistribute connected router
(config-router-af)#neighbor 180.1.1.2 remote-as 300
Configure neighbor with remote-as
(config-router-af)#neighbor 180.1.1.2 activate
Activate the VPN neighbour
(config-router-af)exit-address-family
Exit VRF address family
(config-router)#address-family ipv6 vrf vrf600
Configure ipv6 VRF address family
(config-router-af)redistribute connected
Redistribute connected router
(config-router-af)#neighbor 2222::2 remote-as 300
Configure neighbor with remote-as
(config-router-af)#neighbor 2222::2 activate
Activate the VPN neighbour
(config-router-af)exit-address-family
Exit VRF address family
(config-router-af)end
End
(config)#commit
Commit the candidate configuration to the running configuration
Validation
CLI's : Show segment-routing policy, show tunnel-policy, show tunnel-policy service details, show mpls forwarding-table
PE1
PE1#show segment-routing policy
 
Policy-Name Color End-point State Forwarding-Info
PE1-P1-PE3 1 10.143.73.3 UP 3/16003/xe16
PE1-P2-PE3 2 10.143.73.3 UP 3/16003/xe4
VPWS
PE1#show mpls vc-table
VC-ID Vlan-ID Inner-Vlan-ID Access-Intf Network-Intf Out Label Tunnel-Label Nexthop Status
2002 N/A N/A xe8 xe16 25600 3 10.143.73.3 Active
 
PE1#show mpls l2-circuit
MPLS Layer-2 Virtual Circuit: pe1-to-pe3, id: 2002 PW-INDEX: 2 service-tpid: dot1.q
Tunnel-Policy: PE1-P1-PE3 >>> VPWS is up by using Applied Tunnel Policy
Endpoint: 10.143.73.3
Control Word: 0
MPLS Layer-2 Virtual Circuit Group: none
Bound to interface: xe8
Virtual Circuit Type: Ethernet VLAN
Virtual Circuit is configured as Primary
Virtual Circuit is configured as Active
Virtual Circuit is active
Service-template : pe1-to-pe3
Match criteria : 2002
VPLS
PE1#show mpls vpls mesh
VPLS-ID Peer Addr Tunnel-Label In-Label Network-Intf Out-Label Lkps/St PW-INDEX SIG-Protocol Status
2502 10.143.73.3 3 26241 xe4 25601 2/Up 1 LDP Active
2503 10.143.73.3 3 25604 xe16 24962 2/Up 3 BGP Active
 
PE1#show mpls vpls detail
Virtual Private LAN Service Instance: vpls-pe1-to-pe3pe4-1, ID: 2502
SIG-Protocol: LDP
Attachment-Circuit :UP
Learning: Enabled
Control-Word: Disabled
Group ID: 0, VPLS Type: Ethernet, Configured MTU: 1500
Description: none
service-tpid: dot1.q
Operating mode: Raw
Configured interfaces:
Interface: xe8
Service-template : vpls-pe1-to-pe3pe4-1
Match criteria : 2502
Action type : Translate
Action value : 2600
Outgoing tpid : dot1.q
 
Mesh Peers:
10.143.73.3 (Up)
Tunnel-Policy: PE1-P2-PE3 >>> VPLS-LDP is up using applied tunnel policy
 
 
Virtual Private LAN Service Instance: vpls-pe1-to-pe3pe4-2, ID: 2503
SIG-Protocol: BGP
Route-Distinguisher :100:2503
Route-Target :100:2503
VE-ID :3
Attachment-Circuit :UP
Learning: Enabled
Control-Word: Disabled
Group ID: 0, Configured MTU: 1500
Description: none
service-tpid: dot1.q
Operating mode: Raw
Configured interfaces:
Interface: xe8
Service-template : vpls-pe1-to-pe3pe4-2
Match criteria : 2503/2504
Action type : Push
Action value : 2505
 
Mesh Peers:
10.143.73.3 (Up)
Tunnel-Policy: PE1-P1-PE3 VPLS-BGP is up using applied tunnel policy
 
EVPN E-LAN
PE1#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
Destination Status evpn-id Policy Network-Intf Tunnel-Label MC-
Local Remote
Label UC-Label MC-Label UC-Label
===================================================================================
10.143.73.3 Installed 500 PE1-P2-PE3 xe4 3 640 17 640 --
Total number of entries are 1
 
Here Tunnel Policy is applied under VNID level.
EVPN E-LINE
PE1#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
Local Remote
Destination Status VPWS-ID VPWS-ID Policy Network-Intf Tunnel-
Local Remote
Label MC-Label UC-Label MC-Label UC-Label
==========================================================================================================================
10.143.73.3 Installed 2 252 PE1-P1-PE3(*) xe16 3 -- 16 -- 16
 
Total number of entries are 1
 
Here Tunnel Policy is applied under mac-vrf level.
L3VPN and 6VPE
PE1#show mpls vrf-table
Output for IPv4 VRF table with id: 4
Primary FTN entry with FEC: 180.1.1.0/24, id: 1, row status: Active, Tunnel-Policy: PE1-P1-PE3
Owner: BGP, distance: 0, Action-type: Redirect to Tunnel, Exp-bits: 0x0, Incoming DSCP: none
Transport Tunnel id: 1, Protected LSP id: 0, QoS Resource id: 0, Description: N/A, Color: 1
Cross connect ix: 6, in intf: - in label: 0 out-segment ix: 8
Owner: BGP, Persistent: No, Admin Status: Up, Oper Status: Up
Out-segment with ix: 8, owner: BGP, Stale: NO, BGP out intf: xe16, transport out intf: xe16, out label: 25024
Nexthop addr: 10.143.73.3 cross connect ix: 6, op code: Push and Lookup
 
 
Output for IPv6 VRF table with id: 4
Primary FTN entry with FEC: 2222::/64, id: 13, row status: Active, Tunnel-Policy: PE1-P1-PE3
Owner: BGP, distance: 0, Action-type: Redirect to Tunnel, Exp-bits: 0x0, Incoming DSCP: none
Transport Tunnel id: 1, Protected LSP id: 0, QoS Resource id: 0, Description: N/A, Color: 1
Cross connect ix: 6, in intf: - in label: 0 out-segment ix: 8
Owner: BGP, Persistent: No, Admin Status: Up, Oper Status: Up
Out-segment with ix: 8, owner: BGP, Stale: NO, BGP out intf: xe16, transport out intf: xe16, out label: 25024
Nexthop addr: 10.143.73.3 cross connect ix: 6, op code: Push and Lookup
 
PE1#show mpls forwarding-table
Codes: > - installed FTN, * - selected FTN, p - stale FTN,
B - BGP FTN, K - CLI FTN, t - tunnel, P - SR Policy FTN,
L - LDP FTN, R - RSVP-TE FTN, S - SNMP FTN, I - IGP-Shortcut,
U - unknown FTN, O - SR-OSPF FTN, i - SR-ISIS FTN, k - SR-CLI FTN
 
Code FEC FTN-ID Nhlfe-ID Tunnel-id Pri LSP-Type Out-Label Out-Intf ELC Nexthop
P> 10.143.73.3/32 4 10 1 Yes LSP_DEFAULT 3 xe16 No 10.255.128.3
P> 10.143.73.3/32 5 11 2 Yes LSP_DEFAULT 3 xe4 No 10.255.128.11
O 10.143.73.3/32 1 3 0 Yes LSP_DEFAULT 16003 xe16 No 10.255.128.3
O> 10.143.73.5/32 2 5 0 Yes LSP_DEFAULT 3 xe16 No 10.255.128.3
O> 10.143.73.6/32 3 6 0 Yes LSP_DEFAULT 3 xe4 No 10.255.128.11
 
PE1#show mpls forwarding-table detail
FEC prefix: 10.143.73.3/32, FTN-ID: 4
Owner: SR_POLICY, FTN type: Regular, State: Installed
Tunnel-Name: N/A, Tunnel-id: 1, Color: 1
LSP-ID: N/A, LSP-type: Primary
NHLFE-id: 10
Out-Label: 3, Out-Intf: xe16, Nexthop: 10.255.128.3
Exp-bits: 0x0, Incoming DSCP: none, QoS Resource id: 0
ELC: No
 
FEC prefix: 10.143.73.3/32, FTN-ID: 5
Owner: SR_POLICY, FTN type: Regular, State: Installed
Tunnel-Name: N/A, Tunnel-id: 2, Color: 2
LSP-ID: N/A, LSP-type: Primary
NHLFE-id: 11
Out-Label: 3, Out-Intf: xe4, Nexthop: 10.255.128.11
Exp-bits: 0x0, Incoming DSCP: none, QoS Resource id: 0
ELC: No
 
FEC prefix: 10.143.73.3/32, FTN-ID: 1
Owner: OSPF-SR, FTN type: Regular, State: Not Selected
Tunnel-Name: N/A, Tunnel-id: N/A, Color: N/A
LSP-ID: N/A, LSP-type: Primary
NHLFE-id: 3
Out-Label: 16003, Out-Intf: xe16, Nexthop: 10.255.128.3
Exp-bits: 0x0, Incoming DSCP: none, QoS Resource id: 0
ELC: No
 
FEC prefix: 10.143.73.5/32, FTN-ID: 2
Owner: OSPF-SR, FTN type: Regular, State: Installed
Tunnel-Name: N/A, Tunnel-id: N/A, Color: N/A
LSP-ID: N/A, LSP-type: Primary
NHLFE-id: 5
Out-Label: 3, Out-Intf: xe16, Nexthop: 10.255.128.3
Exp-bits: 0x0, Incoming DSCP: none, QoS Resource id: 0
ELC: No
 
FEC prefix: 10.143.73.6/32, FTN-ID: 3
Owner: OSPF-SR, FTN type: Regular, State: Installed
Tunnel-Name: N/A, Tunnel-id: N/A, Color: N/A
LSP-ID: N/A, LSP-type: Primary
NHLFE-id: 6
Out-Label: 3, Out-Intf: xe4, Nexthop: 10.255.128.11
Exp-bits: 0x0, Incoming DSCP: none, QoS Resource id: 0
ELC: No
 
Tunnel policy Output after applying under all services
PE1#show tunnel-policy
tunnel-policy PE1-P1-PE3
color 1
tunnel-mode dedicated
tunnel-type any
Total Services attached:
VRF : 1
VPWS : 1
VPLS : 1
EVPN : 1
 
tunnel-policy PE1-P2-PE3
color 2
tunnel-mode dedicated
tunnel-type any
Total Services attached:
VRF : 0
VPWS : 0
VPLS : 1
EVPN : 1
 
PE1#show tunnel-policy service details
List of services configured with tunnel-policy PE1-P1-PE3:
VPWS
VPWS-Id: 2002, Name: pe1-to-pe3 Status: UP, Mapped Tunnel: SR_POLICY, ftn_ix 4, color 1
L3VPN
VRF id 4
FTN id: 1, Prefix: 180.1.1.0/24, Status: Up, Label: 25024, Mapped Tunnel: SR_POLICY, ftn_ix 4, color 1
FTN id: 13, Prefix: 2222::/64, Status: Up, Label: 25024, Mapped Tunnel: SR_POLICY, ftn_ix 4, color 1
VPLS
VPLS-Id: 2503, Name: vpls-pe1-to-pe3pe4-2, Status: UP, Mapped Tunnel: SR_POLICY, ftn_ix 4, color 1
EVPN
EVPN-Id: 2, Tunnel count: 1
Peer: 10.143.73.3, Mapped Tunnel: SR_POLICY, ftn_ix 4, color 1
List of services configured with tunnel-policy PE1-P2-PE3:
VPLS
VPLS-Id: 2502, Name: vpls-pe1-to-pe3pe4-1, Status: UP, Mapped Tunnel: SR_POLICY, ftn_ix 5, color 2
EVPN
EVPN-Id: 500, Tunnel count: 1
Peer: 10.143.73.3, Mapped Tunnel: SR_POLICY, ftn_ix 5, color 2
 
PE2 Validation:
 
PE2#show mpls vc-table
(m) - Service mapped over multipath transport
(e) - Service mapped over LDP ECMP
 
VC-ID Vlan-ID Inner-Vlan-ID Access-Intf Network-Intf Out Label Tunnel-Label Nexthop Status
2002 N/A N/A xe22 xe7 26880 16001 10.143.73.1 Active
 
PE2#show mpls l2-circuit
MPLS Layer-2 Virtual Circuit: pe3-to-pe1, id: 2002 PW-INDEX: 2 service-tpid: dot1.q
Endpoint: 10.143.73.1
Control Word: 0
Flow Label Status: Disabled, Direction: None, Static: No
MPLS Layer-2 Virtual Circuit Group: none
Bound to interface: xe4
Virtual Circuit Type: Ethernet VLAN
Virtual Circuit is configured as Primary
Virtual Circuit is configured as Active
Virtual Circuit is active
Service-template : pe3-to-pe1
Match criteria : 2002
 
PE2#show mpls vpls mesh
(m) - Service mapped over multipath transport
(e) - Service mapped over LDP ECMP
 
VPLS-ID Peer Addr Tunnel-Label In-Label Network-Intf Out-Label Lkps/St PW-INDEX SIG-Protocol Status
2502 10.143.73.1 16001 26881 xe7 26881 2/Up 1 LDP Active
2503 10.143.73.1 16001 25602 xe7 25603 2/Up 3 BGP Active
 
PE2#show mpls vpls detail
Virtual Private LAN Service Instance: vpls-pe3-to-pe1pe4-1, ID: 2502
SIG-Protocol: LDP
Attachment-Circuit :UP
Learning: Enabled
Control-Word: Disabled
Flow Label Status: Disabled, Direction: None, Static: No
Group ID: 0, VPLS Type: Ethernet, Configured MTU: 1500
Description: none
service-tpid: dot1.q
Operating mode: Raw
Configured interfaces:
Interface: xe4
Service-template : vpls-pe3-to-pe1pe4-1
Match criteria : 2502
Action type : Translate
Action value : 2600
Outgoing tpid : dot1.q
 
Mesh Peers:
10.143.73.1 (Up)
Virtual Private LAN Service Instance: vpls-pe3-to-pe1pe4-2, ID: 2503
 
SIG-Protocol: BGP
Route-Distinguisher :100:2503
Route-Target :100:2503
VE-ID :4
Attachment-Circuit :UP
Learning: Enabled
Control-Word: Disabled
Flow Label Status: Disabled, Direction: None, Static: No
Group ID: 0, Configured MTU: 1500
Description: none
service-tpid: dot1.q
Operating mode: Raw
Configured interfaces:
Interface: xe4
Service-template : vpls-pe3-to-pe1pe4-2
Match criteria : 2503/2504
Action type : Push
Action value : 2505
 
Mesh Peers:
10.143.73.1 (Up)
 
PE2#show evpn mpls tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
(e) - Service mapped over MPLS Multipath/ECMP
================+===========+=========+===============+=========+=========+=========+=========+============+=========+============+========
Local Remote MPLS-Multipath Underlay
Destination Status VPN-ID Policy MC-Label UC-Label MC-Label UC-Label Grp-Name NHLFE-ix NW-Intf NW-Label
================+===========+=========+===============+=========+=========+=========+=========+============+=========+============+========
10.143.73.1 Installed 500 -- 640 17 640 -- -- -- xe7 16001
Total number of entries are 1
 
PE2#show evpn mpls xconnect tunnel label
EVPN-MPLS Network tunnel labels
(*) in Policy - tunnel-policy inherited from mac-vrf
(e) - Service mapped over MPLS Multipath/ECMP
================+===========+=========+=========+===============+=========+=========+============+=========+============+=========
Local Remote Local Remote MPLS-Multipath Underlay
Destination Status VPWS-ID VPWS-ID Policy UC-Label UC-Label Grp-Name NHLFE-ix NW-Intf NW-Label
================+===========+=========+=========+===============+=========+=========+============+=========+============+=========
10.143.73.1 Installed 252 2 -- 16 16 -- -- xe7 16001
Total number of entries are 1
PE2#show mpls vrf-table
Output for IPv4 VRF table with id: 4
Primary FTN entry with FEC: 170.1.1.0/24, id: 1, row status: Active, Tunnel-Policy: N/A
Owner: BGP, distance: 0, Action-type: Redirect to Tunnel, Exp-bits: 0x0, Incoming DSCP: none
VRF id 4, BGP peer 10.143.73.1 BGP prefix 170.1.1.0
Transport Tunnel id: 0, Protected LSP id: 0, QoS Resource id: 0, Description: N/A, , Color: 0
Cross connect ix: 4, in intf: - in label: 0 out-segment ix: 5
 
Owner: BGP, Persistent: No, Admin Status: Up, Oper Status: Up
Out-segment with ix: 5, owner: BGP, Stale: NO, BGP out intf: xe7, transport out intf: xe7, out label: 25664
Nexthop addr: 10.143.73.1 cross connect ix: 4, op code: Push and Lookup
 
Output for IPv6 VRF table with id: 4
Primary FTN entry with FEC: 1111::/64, id: 2, row status: Active, Tunnel-Policy: N/A
Owner: BGP, distance: 0, Action-type: Redirect to Tunnel, Exp-bits: 0x0, Incoming DSCP: none
VRF id 4, BGP peer a8f:4901:: BGP prefix 1111::
Transport Tunnel id: 0, Protected LSP id: 0, QoS Resource id: 0, Description: N/A, , Color: 0
Cross connect ix: 4, in intf: - in label: 0 out-segment ix: 5
Owner: BGP, Persistent: No, Admin Status: Up, Oper Status: Up
Out-segment with ix: 5, owner: BGP, Stale: NO, BGP out intf: xe7, transport out intf: xe7, out label: 25664
Nexthop addr: 10.143.73.1 cross connect ix: 4, op code: Push and Lookup
 
PE2#sh mpls forwarding-table
Codes: > - installed FTN, * - selected FTN, p - stale FTN, ! - using backup
B - BGP FTN, K - CLI FTN, t - tunnel, P - SR Policy FTN,
L - LDP FTN, R - RSVP-TE FTN, S - SNMP FTN, I - IGP-Shortcut,
U - unknown FTN, O - SR-OSPF FTN, i - SR-ISIS FTN, k - SR-CLI FTN
(m) - FTN mapped over multipath transport, (e) - FTN is ECMP
Code FEC FTN-ID Nhlfe-ID Tunnel-id Pri LSP-Type Out-Label Out-Intf ELC Nexthop
O> 10.143.73.1/32 1 9 0 Yes LSP_DEFAULT 16001 xe7 No 10.255.128.23
O> 10.143.73.5/32 2 10 0 Yes LSP_DEFAULT 3 xe7 No 10.255.128.23
O> 10.143.73.6/32 3 14 0 Yes LSP_DEFAULT 3 xe5 No 10.255.128.25
PE2#show mpls forwarding-table detail
FEC prefix: 10.143.73.1/32, FTN-ID: 1
Owner: OSPF-SR, FTN type: Regular, State: Installed
Tunnel-Name: N/A, Tunnel-id: N/A, Color: N/A
LSP-ID: N/A, LSP-type: Primary
NHLFE-id: 9
Out-Label: 16001, Out-Intf: xe7, Nexthop: 10.255.128.23
Exp-bits: 0x0, Incoming DSCP: none, QoS Resource id: 0
ELC: No
FEC prefix: 10.143.73.5/32, FTN-ID: 2
Owner: OSPF-SR, FTN type: Regular, State: Installed
Tunnel-Name: N/A, Tunnel-id: N/A, Color: N/A
LSP-ID: N/A, LSP-type: Primary
NHLFE-id: 10
Out-Label: 3, Out-Intf: xe7, Nexthop: 10.255.128.23
Exp-bits: 0x0, Incoming DSCP: none, QoS Resource id: 0
ELC: No
FEC prefix: 10.143.73.6/32, FTN-ID: 3
Owner: OSPF-SR, FTN type: Regular, State: Installed
Tunnel-Name: N/A, Tunnel-id: N/A, Color: N/A
LSP-ID: N/A, LSP-type: Primary
NHLFE-id: 14
Out-Label: 3, Out-Intf: xe5, Nexthop: 10.255.128.25
Exp-bits: 0x0, Incoming DSCP: none, QoS Resource id: 0
 
Note: The following CLI will be used to change from dedicated mode to best effort
tunnel-policy PE1-P1-PE3
color 1
mode best-effort