HP 10500 series User Manual

68
Configuring LDP MD5 authentication
LDP sessions are established based on TCP connections. To improve the security of LDP sessions, you can
configure MD5 authentication for the underlying TCP connections, so that the TCP connections can be
established only if the peers have the same authentication password.
IMPORTANT:
To establish an LDP session successfully between two LDP peers, make sure their LDP MD5 authentication
settings are the same.
To configure LDP MD5 authentication:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter MPLS LDP view.
mpls ldp N/A
3. Enable LDP MD5
authentication and set the
password.
md5-password { cipher | plain }
peer-lsr-id password
By default, LDP MD5
authentication is disabled.
Configuring LDP label filtering
The LDP label filtering feature provides two mechanisms, label acceptance control for controlling which
labels are accepted and label advertisement control for controlling which labels are advertised. In
complicated MPLS network environments, you can use LDP label filtering to control which LSPs are to be
established dynamically and prevent devices from accepting and advertising excessive label bindings.
Label acceptance control
Label acceptance control is for filtering received label bindings. An upstream LSR filters the label
bindings received from the specified downstream LSR and accepts only those permitted by the specified
prefix list. As shown in Figure 19, up
stream device LSR A filters the label bindings received from
downstream device LSR B. Only if the destination address of an FEC matches the specified prefix list,
does LSR A accept the label binding of the FEC from LSR B. LSR A does not filter label bindings received
from downstream device LSR C.
Figure 19 Network diagram of label acceptance control

HP 10500 series Specifications

General

Layer	Layer 2/3/4
Product Series	HP 10500
Category	Switch
Switch Type	Modular
Redundancy	Power supplies, fans, management modules
Power Supply	Hot-swappable redundant power supplies
Power Supply Options	AC or DC
Management	CLI, SNMP, IMC (Intelligent Management Center)
Security Features	ACL, 802.1X, RADIUS, TACACS+
Virtualization Support	IRF (Intelligent Resilient Framework) virtualization technology
Form Factor	Rack-mountable
Ports	Varies by model and configuration

Summary

Configuring MCE

Overview

Introduces MPLS L3VPN information relevant to MCE features.

MPLS L3VPN concepts

Details concepts like Site, Address Space Overlapping, VPN Instance, and VPN-IPv4 Address.

Multi-VPN-instance CE (MCE)

Explains MCE's role in managing multiple VPNs on a single CE for cost and security.

Configuring routing on an MCE

Covers MCE routing configurations for service isolation and route exchange.

Route exchange between an MCE and a PE

Details routing information exchange protocols between MCE and PE devices.

Configuring basic MPLS

MPLS overview

Explains MPLS fundamentals, advantages, and its position between Layer 2 and Layer 3.

Basic concepts

Defines core MPLS concepts like FEC, Label, LSR, LER, LSP, LFIB, and control/forwarding planes.

LSP establishment and label distribution

Explains how MPLS establishes Label Switched Paths (LSPs) and distributes labels using protocols like LDP.

Configuring LDP

Details the configuration of the Label Distribution Protocol (LDP) for dynamic LSP setup and management.

Configuring MPLS TE

MPLS TE overview

Introduces MPLS Traffic Engineering (TE) for optimizing network resources and avoiding congestion.

MPLS TE implementation

Explains MPLS TE functions like static and dynamic CR-LSP processing, path calculation, and establishment.

CR-LSP

Defines Constraint-Based Routing (CR) and its concepts for establishing LSPs with specific criteria.

RSVP-TE

Details RSVP-TE as a signaling protocol supporting MPLS label distribution and resource reservation.

Traffic forwarding

Describes methods like static routing, policy-based routing, and automatic route advertisement for traffic forwarding over MPLS TE tunnels.

Configuring VPLS

VPLS overview

Introduces Virtual Private LAN Service (VPLS) for point-to-multipoint Layer 2 VPNs over public networks.

Basic VPLS concepts

Defines core VPLS concepts such as CE, PE, VSI, PW, AC, QinQ, Forwarders, Tunnel, and Encapsulation.

MAC address learning and flooding

Explains VPLS's reachability mechanism through MAC address learning and flooding on PEs.

VPLS loop avoidance

Describes methods like full mesh and split horizon forwarding for VPLS loop avoidance.

H-VPLS implementation

Details Hierarchy of VPLS (H-VPLS) for extending VPLS access range and reducing costs.

Configuring MPLS L2VPN

MPLS L2VPN overview

Introduces MPLS L2VPN as an MPLS-based Layer 2 VPN technology for Layer 2 connections.

Basic concepts

Defines core MPLS L2VPN concepts: CE, PE, Attachment Circuit (AC), Virtual Circuit (VC), Tunnel, Provider Device.

MPLS L2VPN network models

Discusses remote and local connection models for MPLS L2VPN.

Packet forwarding process

Explains how MPLS L2VPN forwards Layer 2 user packets using VC labels and tunnel tags.

Implementation of MPLS L2VPN

Details setup procedures for remote MPLS L2VPN connections in CCC, SVC, Martini, and Kompella modes.

Martini MPLS L2VPN

Explains Martini MPLS L2VPN using LDP for VC label distribution.

Kompella MPLS L2VPN

Describes Kompella MPLS L2VPN using BGP for VC label distribution and VPN concepts.

Configuring MPLS L3VPN

MPLS L3VPN overview

Introduces MPLS L3VPN as a PE-based Layer 3 VPN technology using BGP and MPLS.

MPLS L3VPN concepts

Covers concepts like Site, Address Space Overlapping, VPN Instance, VPN-IPv4 Address, Route Target, and BGP Extended Community Attributes.

MPLS L3VPN packet forwarding

Explains the Layer 1 and Layer 2 labels used in MPLS L3VPN packet forwarding.

MPLS L3VPN networking schemes

Discusses basic, hub-and-spoke, extranet, inter-AS VPN, nested VPN, and HoVPN schemes.

Configuring routing between PEs

Details how to configure routing between Provider Edge (PE) devices, including MP-BGP.

Configuring IPv6 MPLS L3VPN

Overview

Introduces IPv6 MPLS L3VPN, its similarity to IPv4, and network model.

IPv6 MPLS L3VPN packet forwarding

Explains the packet forwarding procedure for IPv6 MPLS L3VPN.

IPv6 MPLS L3VPN routing information advertisement

Describes how IPv6 VPN routes are advertised between CEs, PEs, and across the backbone.

IPv6 MPLS L3VPN network schemes and functions

Lists supported IPv6 MPLS L3VPN network schemes and functions.

Configuring basic IPv6 MPLS L3VPN

Covers key tasks for managing IPv6 VPN routes, including PE-CE and PE-PE route exchange.

Configuring carrier's carrier

Network requirements

Outlines the network setup and route exchange requirements for carrier's carrier deployment.

Configuring HoVPN

Network requirements

Describes the network topology and requirements for HoVPN, including SPE and UPE roles.

Implementation of HoVPN

Explains the basic architecture and hierarchical PE structure of HoVPN.

OSPF VPN extension

Focuses on the OSPF VPN extension for PE-CE connectivity, including area configurations.