Tag Archives: MPLS VPN

Some time ago we talked about a basic configuration of BGP/MPLS VPNs. Let’s go on with hub&spoke networking today. Such solution can be adopted to control the mutual access of users, when an access control device is set. In this case no direct route exists between spoke sites. A spoke site advertises routes to a hub site and then the hub site advertises the routes to other spoke sites. Thus, communication between spoke sites is controlled by hub site.

Let’s look at our topology:

1. CE1 and CE5 are in VPN labnario_1
2. CE2 and CE8 are in VPN labnario_2
3. ISIS level -2 as IGP
4. Connections CE1—PE3 and CE5—PE4 – static routes
5. Connection CE2—PE3 – OSPF
6. Connection CE8—PE4 – EBGP
7. Users in different VPNs cannot access each other.

A BGP/MPLS IP VPN uses the Border Gateway Protocol (BGP) to advertise VPN routes and the Multiprotocol Label Switching (MPLS) to forward VPN packets on backbone networks.