Task - Leak The L-2 Routes into ISIS Level-1 Domain with minimal commands.
Initial Configuration
=============
R1
===
!
en
!
conf t
!
no ip do lo
!
line con 0
no exec-time
logging syn
exit
!
ho R1
!
int lo1
ip add 1.1.1.1 255.255.255.255
exit
!
int p1/0
ip add 12.0.0.1 255.255.255.0
no sh
exit
!
int p2/0
ip add 13.0.0.1 255.255.255.0
no sh
exit
!
ipv6 unicast-routing
!
router isis
net 49.0111.0000.0000.1111.00
metric-style wide
add ipv6
multi
exit
exit
!
int lo1
ip router isis
isis circuit-type level-2
exit
!
int p1/0
ip router isis
isis circuit-type level-2
exit
!
int p2/0
ip router isis
isis circuit-type level-2
exit
!
end
!
wr
!
=============================
R2
===
!
en
!
conf t
!
no ip do lo
!
line con 0
no exec-time
logging syn
exit
!
ho R2
!
int lo2
ip add 2.2.2.2 255.255.255.255
exit
!
int p1/0
ip add 12.0.0.2 255.255.255.0
no sh
exit
!
int p2/0
ip add 24.0.0.2 255.255.255.0
no sh
exit
!
ipv6 unicast-routing
!
router isis
net 49.0122.0000.0000.2222.00
metric-style wide
add ipv6
multi
exit
exit
!
int lo2
ip router isis
isis circuit-type level-2
exit
!
int p1/0
ip router isis
isis circuit-type level-2
exit
!
int p2/0
ip router isis
isis circuit-type level-2
exit
!
end
!
wr
!
=============================
R3
===
!
en
!
conf t
!
no ip do lo
!
line con 0
no exec-time
logging syn
exit
!
ho R3
!
int lo3
ip add 3.3.3.3 255.255.255.255
exit
!
int p1/0
ip add 34.0.0.3 255.255.255.0
no sh
exit
!
int p2/0
ip add 13.0.0.3 255.255.255.0
no sh
exit
!
int p3/0
ip add 35.0.0.3 255.255.255.0
no sh
exit
!
ipv6 unicast-routing
!
router isis
net 49.0133.0000.0000.3333.00
metric-style wide
add ipv6
multi
exit
exit
!
int lo3
ip router isis
isis circuit-type level-2
exit
!
int p1/0
ip router isis
isis circuit-type level-2
exit
!
int p2/0
ip router isis
isis circuit-type level-2
exit
!
int p3/0
ip router isis
isis circuit-type level-1
exit
!
end
!
wr
!
=============================
R4
===
!
en
!
conf t
!
no ip do lo
!
line con 0
no exec-time
logging syn
exit
!
ho R4
!
int lo4
ip add 4.4.4.4 255.255.255.255
exit
!
int p1/0
ip add 34.0.0.4 255.255.255.0
no sh
exit
!
int p2/0
ip add 24.0.0.4 255.255.255.0
no sh
exit
!
ipv6 unicast-routing
!
router isis
net 49.0144.0000.0000.4444.00
metric-style wide
add ipv6
multi
exit
exit
!
int lo4
ip router isis
isis circuit-type level-2
exit
!
int p1/0
ip router isis
isis circuit-type level-2
exit
!
int p2/0
ip router isis
isis circuit-type level-2
exit
!
end
!
wr
!
=============================
R5
===
!
en
!
conf t
!
no ip do lo
!
line con 0
no exec-time
logging syn
exit
!
ho R5
!
int lo5
ip add 5.5.5.5 255.255.255.255
exit
!
int p3/0
ip add 35.0.0.5 255.255.255.0
no sh
exit
!
ipv6 unicast-routing
!
router isis
net 49.0133.0000.0000.5555.00
metric-style wide
add ipv6
multi
exit
exit
!
int lo5
ip router isis
isis circuit-type level-1
exit
!
int p3/0
ip router isis
isis circuit-type level-1
exit
!
end
!
wr
!
Simple Trick
=========
Earlier on R5
=========
On R3
=====
Redistribute level-2 into level-1 with a Dummy Access list that doesn't exist.
Later on R5
========
HTH...
Deepak Arora
Evil CCIE
R1
===
!
mpls label protocol ldp
!
mpls ldp router-id Loopback0 force
!
pseudowire-class ATOM
encapsulation mpls
!
connect ATOM Serial1/0 100 l2transport
xconnect 3.3.3.3 67 pw-class ATOM
!
!
R3
===
!
mpls label protocol ldp
!
mpls ldp router-id Loopback0 force
!
pseudowire-class ATOM
encapsulation mpls
!
connect ATOM Serial1/0 100 l2transport
xconnect 1.1.1.1 67 pw-class ATOM
!
!
========================================
R1#sh mpls forwarding
Local Outgoing Prefix Bytes Label Outgoing Next Hop
Label Label or Tunnel Id Switched interface
16 Pop Label 2.2.2.2/32 0 Fa2/0 12.0.0.2
17 Pop Label 23.0.0.0/24 0 Fa2/0 12.0.0.2
18 17 3.3.3.3/32 0 Fa2/0 12.0.0.2
19 No Label l2ckt(67) 22782 Se1/0 point2point
R3#sh mpls for
Local Outgoing Prefix Bytes Label Outgoing Next Hop
Label Label or Tunnel Id Switched interface
16 Pop Label 2.2.2.2/32 0 Fa2/0 23.0.0.2
17 16 1.1.1.1/32 0 Fa2/0 23.0.0.2
18 Pop Label 12.0.0.0/24 0 Fa2/0 23.0.0.2
19 No Label l2ckt(67) 25768 Se1/0 point2point
R1#sh xconnect all detail
Legend: XC ST=Xconnect State S1=Segment1 State S2=Segment2 State
UP=Up DN=Down AD=Admin Down IA=Inactive
SB=Standby HS=Hot Standby RV=Recovering NH=No Hardware
XC ST Segment 1 S1 Segment 2 S2
------+---------------------------------+--+---------------------------------+--
UP ac Se1/0:100(FR DLCI) UP mpls 3.3.3.3:67 UP
Interworking: none Local VC label 19
Remote VC label 19
pw-class: ATOM
R3#sh xconnect all detail
Legend: XC ST=Xconnect State S1=Segment1 State S2=Segment2 State
UP=Up DN=Down AD=Admin Down IA=Inactive
SB=Standby HS=Hot Standby RV=Recovering NH=No Hardware
XC ST Segment 1 S1 Segment 2 S2
------+---------------------------------+--+---------------------------------+--
UP ac Se1/0:100(FR DLCI) UP mpls 1.1.1.1:67 UP
Interworking: none Local VC label 19
Remote VC label 19
pw-class: ATOM
========================================================================
R6
===
R6#sh run | s ospf|Serial0/0|Loopback0
interface Loopback0
ip address 6.6.6.6 255.255.255.255
ipv6 address 2000:6::6/128
ipv6 ospf 1 area 0
interface Serial0/0
ip address 67.0.0.6 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-point
ipv6 address 2000:67::6/64
ipv6 address FE80::6 link-local
ipv6 ospf network point-to-point
ipv6 ospf 1 area 0
clock rate 2000000
frame-relay map ipv6 FE80::7 200 broadcast
frame-relay map ip 67.0.0.7 200 broadcast
frame-relay map ipv6 2000:67::7 200 broadcast
no frame-relay inverse-arp
router ospf 1
router-id 6.6.6.6
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ipv6 router ospf 1
log-adjacency-changes
R7#sh run | s ospf|Serial0/0|Loopback0
interface Loopback0
ip address 7.7.7.7 255.255.255.255
ipv6 address 2000:7::7/128
ipv6 ospf 1 area 0
interface Serial0/0
ip address 67.0.0.7 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-point
ipv6 address 2000:67::7/64
ipv6 address FE80::7 link-local
ipv6 ospf network point-to-point
ipv6 ospf 1 area 0
clock rate 2000000
frame-relay map ipv6 FE80::6 200 broadcast
frame-relay map ip 67.0.0.6 200 broadcast
frame-relay map ipv6 2000:67::6 200 broadcast
no frame-relay inverse-arp
router ospf 1
router-id 7.7.7.7
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ipv6 router ospf 1
log-adjacency-changes
================================================
R6#sh ip ospf nei
Neighbor ID Pri State Dead Time Address Interface
7.7.7.7 0 FULL/ - 00:00:37 67.0.0.7 Serial0/0
R6#
R6#sh ipv6 ospf nei
Neighbor ID Pri State Dead Time Interface ID Interface
7.7.7.7 1 FULL/ - 00:00:33 6 Serial0/0
R6#
R6#sh ip ro os
7.0.0.0/32 is subnetted, 1 subnets
O 7.7.7.7 [110/65] via 67.0.0.7, 00:22:34, Serial0/0
R6#
R6#sh ipv6 ro os
IPv6 Routing Table - 6 entries
Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP
U - Per-user Static route
I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
O 2000:7::7/128 [110/64]
via FE80::7, Serial0/0
R6#
R6#ping 7.7.7.7 so lo0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 7.7.7.7, timeout is 2 seconds:
Packet sent with a source address of 6.6.6.6
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/64/84 ms
R6#
R6#trace 7.7.7.7 so lo0
Type escape sequence to abort.
Tracing the route to 7.7.7.7
1 67.0.0.7 100 msec * 96 msec
R6#
R6#ping 2000:7::7 so lo0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2000:7::7, timeout is 2 seconds:
Packet sent with a source address of 2000:6::6
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 44/61/72 ms
R6#trace 2000:7::7
Type escape sequence to abort.
Tracing the route to 2000:7::7
1 2000:7::7 80 msec 76 msec 76 msec
HTH...
Deepak Arora
Evil CCIE
R3#sh run | s mpls|FastEthernet0/0.34|FastEthernet0/0.36|Loopback33|router isis|Tunnel
mpls traffic-eng tunnels
mpls label protocol ldp
ip router isis
interface Loopback33
ip address 33.33.33.33 255.255.255.255
interface Tunnel319
ip unnumbered Loopback0
tunnel mode mpls traffic-eng
tunnel destination 19.19.19.19
tunnel mpls traffic-eng priority 7 7
tunnel mpls traffic-eng bandwidth 2000
tunnel mpls traffic-eng path-option 1 explicit name TE
interface FastEthernet0/0.34
encapsulation dot1Q 34
ip address 20.3.4.3 255.255.255.0
ip router isis
ipv6 address 2001:20:3:4::3/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
interface FastEthernet0/0.36
encapsulation dot1Q 36
ip address 20.3.6.3 255.255.255.0
ip router isis
ipv6 address 2001:20:3:6::3/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
router isis
net 11.0703.0000.0000.0000.3333.00
metric-style wide
!
address-family ipv6
multi-topology
exit-address-family
mpls ldp autoconfig level-2
mpls traffic-eng router-id Loopback0
mpls traffic-eng level-2
ip route 199.199.199.199 255.255.255.255 Tunnel319
mpls ldp router-id Loopback0 force
ip route 199.199.199.199 255.255.255.255 Tunnel319
==================================================================================================
R4#sh run | s mpls|FastEthernet0/0.34|FastEthernet0/0.45|FastEthernet0/0.46|router isis
mpls traffic-eng tunnels
mpls label protocol ldp
interface FastEthernet0/0.34
encapsulation dot1Q 34
ip address 20.3.4.4 255.255.255.0
ip router isis
ipv6 address 2001:20:3:4::4/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
interface FastEthernet0/0.45
encapsulation dot1Q 45
ip address 20.4.5.4 255.255.255.0
ip router isis
ipv6 address 2001:20:4:5::4/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
interface FastEthernet0/0.46
encapsulation dot1Q 46
ip address 20.4.6.4 255.255.255.0
ip router isis
ipv6 address 2001:20:4:6::4/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
mpls ldp autoconfig level-2
mpls traffic-eng router-id Loopback0
mpls traffic-eng level-2
mpls ldp router-id Loopback0 force
router isis
net 11.0744.0000.0000.0000.4444.00
metric-style wide
!
address-family ipv6
multi-topology
exit-address-family
mpls ldp autoconfig level-2
mpls traffic-eng router-id Loopback0
mpls traffic-eng level-2
==================================================================================================
R5#sh run | s mpls|FastEthernet0/0.45|FastEthernet0/0.56|FastEthernet0/0.519|router isis
mpls traffic-eng tunnels
mpls label protocol ldp
ip router isis
interface FastEthernet0/0.45
encapsulation dot1Q 45
ip address 20.4.5.5 255.255.255.0
ip router isis
ipv6 address 2001:20:4:5::5/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
interface FastEthernet0/0.56
encapsulation dot1Q 56
ip address 20.5.6.5 255.255.255.0
ip router isis
ipv6 address 2001:20:5:6::5/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
interface FastEthernet0/0.519
encapsulation dot1Q 519
ip address 20.5.19.5 255.255.255.0
ip router isis
router isis
net 11.0755.0000.0000.5555.00
metric-style wide
!
address-family ipv6
multi-topology
exit-address-family
mpls ldp autoconfig level-2
mpls traffic-eng router-id Loopback0
mpls traffic-eng level-2
==================================================================================================
R6#sh run | s mpls|FastEthernet0/0.36|FastEthernet0/0.46|FastEthernet0/0.56|FastEthernet0/0.619|router isis
mpls traffic-eng tunnels
mpls label protocol ldp
ip router isis
ipv6 router isis
interface FastEthernet0/0.36
encapsulation dot1Q 36
ip address 20.3.6.6 255.255.255.0
ip router isis
ipv6 address 2001:20:3:6::6/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
interface FastEthernet0/0.46
encapsulation dot1Q 46
ip address 20.4.6.6 255.255.255.0
ip router isis
ipv6 address 2001:20:4:6::6/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
interface FastEthernet0/0.56
encapsulation dot1Q 56
ip address 20.5.6.6 255.255.255.0
ip router isis
ipv6 address 2001:20:5:6::6/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
interface FastEthernet0/0.619
encapsulation dot1Q 619
ip address 20.6.19.6 255.255.255.0
ip router isis
ipv6 address 2001:20:6:19::6/64
mpls traffic-eng tunnels
isis circuit-type level-2-only
ip rsvp bandwidth 2000
router isis
net 11.0766.0000.0000.0066.6600
metric-style wide
!
address-family ipv6
multi-topology
exit-address-family
mpls ldp autoconfig level-2
mpls traffic-eng router-id Loopback0
mpls traffic-eng level-2
mpls ldp router-id Loopback0 force
==================================================================================================
XR1
===
explicit-path name TE
index 1 next-address strict ipv4 unicast 20.5.19.5
index 2 next-address strict ipv4 unicast 20.4.5.4
index 3 next-address strict ipv4 unicast 20.3.4.3
!
interface tunnel-te193
ipv4 unnumbered Loopback0
signalled-bandwidth 2000
destination 3.3.3.3
path-option 1 explicit name TE
!
!
router static
address-family ipv4 unicast
33.33.33.33/32 tunnel-te193
!
!
router isis abcd
net 11.0719.0000.0000.1919.00
address-family ipv4 unicast
metric-style wide
mpls traffic-eng level-2-only
mpls traffic-eng router-id Loopback0
!
address-family ipv6 unicast
metric-style wide
!
interface Loopback0
circuit-type level-2-only
address-family ipv4 unicast
!
!
interface GigabitEthernet0/1/0/0.519
circuit-type level-2-only
address-family ipv4 unicast
!
!
interface GigabitEthernet0/1/0/0.619
circuit-type level-2-only
address-family ipv4 unicast
!
!
rsvp
interface GigabitEthernet0/1/0/0.519
bandwidth 2000
!
interface GigabitEthernet0/1/0/0.619
bandwidth 2000
!
!
mpls traffic-eng
interface GigabitEthernet0/1/0/0.519
!
interface GigabitEthernet0/1/0/0.619
!
!
mpls ldp
router-id 19.19.19.19
interface GigabitEthernet0/1/0/0.519
!
interface GigabitEthernet0/1/0/0.619
!
==================================================================================================
R3#traceroute 199.199.199.199 source lo33
Type escape sequence to abort.
Tracing the route to 199.199.199.199
1 20.3.6.6 [MPLS: Label 16 Exp 0] 4 msec 0 msec 4 msec
2 20.5.6.5 [MPLS: Label 16 Exp 0] 0 msec 4 msec 0 msec
3 20.5.19.19 4 msec * 4 msec
RP/0/0/CPU0:XR1#traceroute 33.33.33.33 so 199.199.199.199
Wed May 1 02:09:04.449 UTC
Type escape sequence to abort.
Tracing the route to 33.33.33.33
1 20.5.19.5 [MPLS: Label 27 Exp 0] 4 msec 4 msec 3 msec
2 20.4.5.4 [MPLS: Label 26 Exp 0] 4 msec 3 msec 3 msec
3 20.3.4.3 2 msec * 3 msec
HTH...
Deepak Arora
Evil CCIE
As far I know he was youngest Dual CCIE in World leaving Rick Mur behind and now becoming Youngest Triple CCIE.
Join me to congratulate him on amazing success.
HTH...
Deepak Arora
Evil CCIE
