Cisco Active Network Abstraction Technology Support and Information Model Reference Manual, 3.6.6
Virtual Private Networks

Table Of Contents

Virtual Private Networks

Technology Description

VPN

6VPE

VRF-Lite (Multi-VRF)

Inventory and Information Model Objects (IMOs)

Virtual Routing Forwarding (VRF) Entity

Equivalent Routing Entry

Virtual Routing Entry

Multi Protocol BGP Entity

Equivalent Cross Virtual Routing Entry

Cross Virtual Routing Entry

Vendor-Specific Inventory and IMOs

Network Topology

Service Alarms


Virtual Private Networks


This chapter describes the level of support that Cisco ANA provides for Virtual Private Networks (VPNs), as follows:

Technology Description

Inventory and Information Model Objects (IMOs)

Network Topology

Service Alarms

Technology Description

VPN

BGP/MPLS VPNs, as defined in RFC 2547 and related drafts and standards, provide a Layer 3 VPN. With Layer 3 VPNs, each Provider Edge (PE) device acts like a set of virtual routers, one per VPN. The network provider configures the VPN membership of each PE router interface. In most cases, one port is used for multiple interfaces where each is associated with different VPNs. The port's view of the network is restricted to the VPNs of which it is a member, and it cannot address devices outside that environment. Conventional IP routing is the interface between Customer Edge (CE) and PE devices: Static routes can be provisioned on both the CE and PE, or for more complex scenarios, a routing protocol (such as RIP, OSPF or BGP) is run between CE and PE.

The network provider can also establish a suitable mesh of MPLS Label Switched Paths (LSPs) between all the PE routers that need to communicate. The PE devices qualify each external IP address that they learn with a per VPN identifier, and broadcast them to all other PE routers using an extended form of BGP depending on BGP connectivity. They also include an MPLS label that is specific to the destination route (or, in some implementations, the destination port). Through this process, the PE devices build up a complete map of the VPNs and destination labels. The PE routers then use this information to route the packets across the backbone network to the correct destination within the relevant VPN.

6VPE

6VPE (RFC 2547) permits IPv6 domains to communicate with each other over an IPv4 core network, without explicit tunnel setup, requiring only one IPv4 address per IPv6 domain. 6VPE operates much like a normal IPv4 MPLS VPN provider edge, but with the addition of IPv6 support within VRF. It lets service providers support IPv6 over operational IPv4 MPLS backbones without requiring dual-stacking within the MPLS core, representing a large cost savings over core re-engineering. Only PE equipment must be dual-stack, to support awareness of both IPv4 and IPv6 access devices. 6VPE provides logically separate routing table entries for VPN member devices.

VRF-Lite (Multi-VRF)

VRF-Liteis an application based on VRF that extends the concept of VRF to the customer-premises router. It supports multiple, overlapping, independent routing and forwarding tables per customer.

Any routing protocol supported by normal VRF can be used in a VRF-Lite CE implementation. The CE supports traffic separation between customer networks. As there is no MPLS functionality on the CE, no label exchange happens between the CE and PE.

Inventory and Information Model Objects (IMOs)

This section describes the following IMOs:

Virtual Routing Forwarding (VRF) Entity (IVrf)

Equivalent Routing Entry (IRoutingEntries)

Virtual Routing Entry (IVrfEntry)

Multi Protocol BGP Entity (IMpBgp)

Equivalent Cross Virtual Routing Entry (ICrossVrf)

Cross Virtual Routing Entry (ICrossVrfRoutingEntry)

Virtual Routing Forwarding (VRF) Entity

The Virtual Routing Forwarding (VRF) Entity object describes the routing and address resolution protocols independent forwarding component of a MPLS-BGP based VPN router. It is bound by its Logical Sons attribute to all the Network layer IP Interface objects among which it is routing IP Packets.

Table 14-1 Virtual Routing Forwarding (VRF) Entity (IVrf)

Attribute Name
Attribute Description
Scheme
Polling Interval

Virtual Routing Table

Array of Equivalent Routing Entries

IP Core

Configuration

Exported Route Targets

Array of route target identifiers

IP Core

Configuration

Imported Route Targets

Array of route target identifiers

IP Core

Configuration

AddressFamilies

List of the address families (IPv4, IPv6, or both)

IP Core

Configuration

Route Distinguisher

Route distinguisher

IP Core

Configuration

ARP Entity

Address Resolution Entity (ARP Entity) (see Internet Protocol)

IP Core

Configuration

Name

VRF name

IP Core

Configuration

Logical Sons

Array of all IP Interfaces among which this Virtual Routing Forwarding (VRF) Entity is routing IP packets

IP Core

N/A


Equivalent Routing Entry

The Equivalent Routing Entry and Virtual Routing Entry objects describe a routing table's entries. Each is an array of Virtual Routing Entries sharing a single IP Subnetwork destination.

Table 14-2 Equivalent Routing Entry (IRoutingEntries)

Attribute Name
Attribute Description
Scheme
Polling Interval

Routing Entries

Array of Virtual Routing Entries sharing a single destination

IP Core

Configuration


Virtual Routing Entry

Table 14-3 Virtual Routing Entry (IVrfEntry) 

Attribute Name
Attribute Description
Scheme
Polling Interval

Next Hop BGP Address

Next hop BGP IP address

IP Core

Configuration

Incoming and Outgoing Inner Label

Incoming and outgoing inner MPLS label

IP Core

Configuration

Outer Label

Outer MPLS label

IP Core

Configuration

Destination IP Subnet

Final destination IP subnet

IP Core

Configuration

Next Hop IP Address

Next hop IP address

IP Core

Configuration

Type

Route entry type (Null, Other, Invalid, Direct, Indirect, Static)

IP Core

Configuration

Routing Protocol Type

Routing protocol type (Null, Other, "Local, Network Managed, ICMP, EGP, GGP, Hello, RIP, IS-IS, ES-IS, Cisco IGRP, BBN SPF IGP, OSPF, BGP, EIGRP)

IP Core

Configuration

Outgoing Interface Name

Outgoing IP interface name

IP Core

Configuration


Multi Protocol BGP Entity

The Multi Protocol BGP Entity object describes the BGP component of a MPLS-BGP based VPN router. It is bound by its Logical Sons attribute to all Virtual Routing Forwarding (VRF) Entity objects among which it is routing IP Packets.

Table 14-4 Multi Protocol BGP Entity (IMpBgp)

Attribute Name
Attribute Description
Scheme
Polling Interval

BGP Identifier

Border Gateway Protocol (BGP) identifier

IP Core

Configuration

Local Autonomous System

Local peer autonomous system

IP Core

Configuration

Cross Virtual Routing Table

Array of Equivalent Cross Virtual Routing Entry

IP Core

Configuration

BGP Neighbors

Array of BGP neighbor entries (see Routing Protocols (BGP/OSPF))

IP Core

Configuration

Logical Sons

Array of all Virtual Routing Forwarding (VRF) Entity objects among which this Multi Protocol BGP Entity is routing IP Packets

IP Core

N/A


Equivalent Cross Virtual Routing Entry

The Equivalent Cross Virtual Routing Entry and Cross Virtual Routing Entry objects describe the first dimension of a cross virtual routing table, as an array of Cross Virtual Routing Entry objects sharing a single Virtual Routing Forwarding (VRF) Entity destination.

Table 14-5 Equivalent Cross Virtual Routing Entry (ICrossVrf)

Attribute Name
Attribute Description
Scheme
Polling Interval

Virtual Routing Entries

Array of Cross Virtual Routing Entry objects sharing a single destination

IP Core

Configuration

Virtual Routing Entity Name

Virtual Routing Entity (VRF) name

IP Core

Configuration


Cross Virtual Routing Entry

Table 14-6 Cross Virtual Routing Entry (ICrossVrfRoutingEntry)

Attribute Name
Attribute Description
Scheme
Polling Interval

Outgoing Virtual Routing Entity Identifier

Outgoing virtual routing entity Object Identifier (OID)

IP Core

Configuration

Incoming and Outgoing Virtual Routing Tags

Incoming and outgoing virtual routing tags

IP Core

Configuration

Destination IP Subnet

Final destination IP subnet

IP Core

Configuration

Next Hop IP Address

Next hop IP address

IP Core

Configuration

Type

Route entry type (Null, Other, Invalid, Direct, Indirect, Static)

IP Core

Configuration

Routing Protocol Type

Routing protocol type (Null, Other, "Local, Network Managed, ICMP, EGP, GGP, Hello, RIP, IS-IS, ES-IS, Cisco IGRP, BBN SPF IGP, OSPF, BGP, EIGRP)

IP Core

Configuration

Outgoing Interface Name

Outgoing IP interface name

IP Core

Configuration


Vendor-Specific Inventory and IMOs

There are no vendor-specific inventory or IMOs for this technology.

Network Topology

Cisco ANA discovers MPLS-BGP based Virtual Private (VPN) network topology by searching for the existence of the local Virtual Routing Forwarding (VRF) Entity's imported route targets in any remote side's VRF entity exported route targets.

Service Alarms

The following alarm is supported for this technology:

Duplicate IP on VPN Found/Duplicate IP on VPN Fixed. This alarm is disabled by default.

For detailed information about alarms and correlation, see the Cisco Active Network Abstraction 3.6.6 User Guide.