1. © 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.2—6-1 Complex MPLS VPNs Introducing Managed CE Router Service

2. © 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.2—6-2 Outline Overview What Are the Requirements of Manageds CE Routers? What Are the VRF and RD Requirements? Configuring Managed CE Routers Summary

3. © 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.2—6-3 Central server NMS needs access to loopback addresses of all CE routers. Very similar to central services and simple VPNs: –All of the CE routers participate in the central services VPN. –Only the loopback addresses of the CE routers need to be exported into the central services VPN. Managed CE Routers

4. © 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.2—6-4 Create one VRF per customer VPN per PE router. Assign the same RD to each customer VRF. Create an NMS VRF on the PE-CS router. Assign a unique RD to the NMS VRF. VRF Creation and RD Overview

5. © 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.2—6-5 Configure the per-customer import-export RT in all customer VRFs. Configure the NMS import-export RT in NMS VRF. Import routes with the NMS RT into the customer VRF. Export loopback addresses from the customer VRF with RT NMS_Client. Import routes with RT NMS_Client into NMS VRF. Configuring Route Targets

6. © 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.2—6-6 Configuring VRFs

7. © 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.2—6-7 Summary The managed CE routers service allows the service provider to access the loopback addresses of the CE router for management purposes. Managed VRF and RD design is the same as with the hybrid of a central and a simple VPN. Managed RT design is the same as with the hybrid of a central and simple VPN, except for the RT marking process during route export.

8. © 2006 Cisco Systems, Inc. All rights reserved. MPLS v2.2—6-8