Lets explore what really is the VPN Label. Is it a single label? or a stack of labels? or maybe a group of labels?. Lets analyze it.
When a route is learned from the CE, at the PE it will get a label assigned by BGP.
PE2#sh ip vrf Name Default RD Interfaces BLUE 567:200 FastEthernet0/0 PE2#sh ip bgp vpnv4 vrf BLUE labels Network Next Hop In label/Out label Route Distinguisher: 567:200 (BLUE) 1.1.1.1/32 150.4.4.4 nolabel/23 2.2.2.2/32 10.2.78.8 20/nolabel 10.1.12.0/24 150.4.4.4 nolabel/24 10.2.78.0/24 0.0.0.0 21/nolabel 22.22.22.0/24 10.2.78.8 25/nolabel PE2#sh mpls forwarding-table vrf BLUE Local Outgoing Prefix Bytes Label Outgoing Next Hop Label Label or VC or Tunnel Id Switched interface 20 No Label 2.2.2.2/32[V] 570 Fa0/0 10.2.78.8 21 Aggregate 10.2.78.0/24[V] 0 BLUE 25 No Label 22.22.22.0/24[V] 0 Fa0/0 10.2.78.8 PE2#sh mpls forwarding-table vrf BLUE detail Local Outgoing Prefix Bytes Label Outgoing Next Hop Label Label or VC or Tunnel Id Switched interface 20 No Label 2.2.2.2/32[V] 570 Fa0/0 10.2.78.8 MAC/Encaps=0/0, MRU=1504, Label Stack{} VPN route: BLUE No output feature configured 21 Aggregate 10.2.78.0/24[V] 0 BLUE MAC/Encaps=0/0, MRU=1504, Label Stack{} VPN route: BLUE No output feature configured 25 No Label 22.22.22.0/24[V] 0 Fa0/0 10.2.78.8 MAC/Encaps=0/0, MRU=1504, Label Stack{} VPN route: BLUE No output feature configuredListing #1
As you can see on line #3, I have VRF BLUE defined in this particular PE. Then in lines #9, #11 and #12 you can see that BGP has assigned some "In Label". These are going to be the labels that packets arriving to this PE wanting to communicate to those destination at the CE will have to have.
Now, these are what are normally referred as the "VPN Label". As you can see, it is not really a "VPN Label" but more a destination label. Lets take destination 2.2.2.2/32 inside the CE. As you may see in line #24, BGP has assigned the label 20. Any packet arriving with label 20 will be "POP" and send as a regular IPv4 packet towards the CE.
If we go to an ASBR which will see all the routes in this lab, we can see that it has knowledge of the label 20 for the destination 2.2.2.2/32 and it has assigned a local label of 23 (see line #11 of Listing #2).
ASBR2#sh mpls forwarding-table Local Outgoing Prefix Bytes Label Outgoing Next Hop Label Label or VC or Tunnel Id Switched interface 16 Pop Label 150.6.6.6/32 0 Fa0/0 150.2.56.6 17 Pop Label 150.2.67.0/24 0 Fa0/0 150.2.56.6 18 16 150.7.7.7/32 0 Fa0/0 150.2.56.6 19 Pop Label 192.168.45.4/32 590 Fa1/0 192.168.45.4 20 18 150.2.2.2/32 0 Fa1/0 192.168.45.4 21 19 150.3.3.3/32 0 Fa1/0 192.168.45.4 22 Pop Label 150.4.4.4/32 0 Fa1/0 192.168.45.4 23 20 567:200:2.2.2.2/32 \ 610 Fa0/0 150.2.56.6 24 21 567:200:10.2.78.0/24 \ 0 Fa0/0 150.2.56.6 25 25 567:200:22.22.22.0/24 \ 0 Fa0/0 150.2.56.6 ASBR2#sh mpls forwarding-table labels 23 detail Local Outgoing Prefix Bytes Label Outgoing Next Hop Label Label or VC or Tunnel Id Switched interface 23 20 567:200:2.2.2.2/32 \ 610 Fa0/0 150.2.56.6 MAC/Encaps=14/22, MRU=1496, Label Stack{16 20} CA00A59C0008CA07A59C00088847 0001000000014000 No output feature configured ASBR2#Listing #2
If we go further into the details of that LSP we see that we have stack (line #23 Listing #2) with two labels 16 and 20. The 16 is the top label and the 20 the bottom label. We already know where the 20 comes from (line #9 Listing #1). So, where does the 16 comes from? The answer is in line #6 of Listing #2. That is the IGP label towards the PE which have the CE connected to it. So, this top label will be the one changing on per hop basis but the bottom label will remain there up to the penultimate hop.
In this particular lab that will be P2.
P2#sh mpls forwarding-table Local Outgoing Prefix Bytes Label Outgoing Next Hop Label Label or VC or Tunnel Id Switched interface 16 Pop Label 150.7.7.7/32 6978 Fa1/0 150.2.67.7 17 Pop Label 150.5.5.5/32 7373 Fa0/0 150.2.56.5 18 Pop Label 192.168.45.0/24 0 Fa0/0 150.2.56.5 19 20 150.2.2.2/32 0 Fa0/0 150.2.56.5 20 21 150.3.3.3/32 0 Fa0/0 150.2.56.5 21 22 150.4.4.4/32 610 Fa0/0 150.2.56.5 P2#Listing #3
As it can be see from Listing #3, the label 16 is removed. Now, that will remove the 16 but will have the label 20 when it arrives to the PE2. At this point, PE2 (line #17 Listing #1) knows what to do. It will POP that label and send a regular IPv4 packet towards the CE.
So, at the end, the VPN label does not refer to a single label but rather to the label or labels that the PE has associated to the VPNv4 routes of a particular VRF.
Hope this explains it... or at least give you enough headache to forget about it ;-)
I read your comment on my blog.
ReplyDeleteBuzz me sometime, we can have a chat.
We can clearly see how much Cisco is relying on OEQs, IOS bugs and other nonsense to make it difficult. Cisco cant corner us on the core technologies!!
Swap
ccie19804 _at_ gmail com
#19804
I am planning to get training on mpls and bgp network, it being great to know about mpls vpn label being so informative.
ReplyDeleteMPLS training course
I haven’t any word to appreciate this post.....Really i am impressed from this post....the person who create this post it was a great human..thanks for shared this with us. private internet access review
ReplyDeleteMany people on Internet discussion forums and answering sites seem to be having a problem with distinguishing between a remote desktop and VPN services. It is hard to blame them, since these two concepts are definitely alike, and a layperson has every right to be confused. To make it easier for you, below you will find a concise explanation of their key differences. howtogetamericannetflix.pro
ReplyDeleteCompare top best cheap VPN service providers. Read user reviews. Best Cheap VPN
ReplyDeleteYour firewall setting ought to be done in a way that will permit your VPN to stream freely. In spite of the fact that the firewall may not confine your VPN,get indian ip
ReplyDeleteI appreciated your work very thanks online
ReplyDeleteThanks for sharing nice information with us. i like your post and all you share with us is uptodate and quite informative, i would like to bookmark the page so i can come here again to read you, as you have done a wonderful job. online
Nice written & very inspirational Post. Keep sharing :)
ReplyDeleteMobile Repairing Institute in Delhi
Mobile Repairing Course in Delhi
Laptop Repairing Course in Delhi
Mobile Repairing Course in Laxmi Nagar
Mobile Repairing Institute in Laxmi Nagar
LED LCD Repairing Course in Delhi
nice content posting your share i am very happy mobile repairing course in laxmi nagar
ReplyDeletemobile repairing training institute in laxmi nagar
laptop repairing course in laxmi nagar
computer hardware course in laxmi nagar
hello (William Caban) i am alsi plaining related to this posting
ReplyDeletemobile repairing course in laxmi nagar
laptop repairing course in laxmi nagar
Computer Hardware repairing course in laxmi nagar
advance mobile repairing course in laxmi nagar
Hitech institute in laxmi nagar
i am looking some thing like your posting
ReplyDeletemobile repairing course in delhi
laptop repairing course in delhi
Computer hardware repairing course in delhi
hitech institute in delhi
advance mobile repairing course in delhi
Your Posting Inspired a lot, Keep Posting.
ReplyDeleteMobile repairing course in
Patna
Mobile repairing course in
Bihar
I really appreciate the kind of topics you post here. Thanks for sharing us a great information that is actually helpful. Good day! best cheap vpn
ReplyDeleteLED LCD TV Repairing Course in Delhi
ReplyDeleteLED LCD Smart TV Repairing Course in Delhi
LED Smart TV Repairing Course in Delhi
LED LCD TV Repair Training
LED LCD TV Repair Training in Delhi
LED LCD TV Repairing Course
LED LCD TV Repair Course
LED LCD TV Repair Institute in Delhi
LCD TV Repair Training Institute in Delhi
Mobile Repairing Course in Delhi
Mobile Repairing Institute in Delhi
Mobile Repairing Course in India
Mobile Repairing Course in Laxmi Nagar
Mobile Repairing Institute in Laxmi Nagar
Mobile Repairing Institute in India
LED LCD TV Repairing Course in Laxmi Nagar
This comment has been removed by the author.
ReplyDeleteYour blog is so unique. Thanks.
ReplyDeleteLed Lcd Tv Repairing Institute in Delhi
Led Lcd Tv Repairing Course in Delhi
Led Lcd Smart Tv Repairing Course in Delhi
Led Lcd Smart Tv Repairing Institute in Delhi
Led Lcd Tv Repairing Course in Laxmi Nagar
Led Lcd Tv Repairing Institute in Laxmi Nagar
Led Lcd Tv Repairing Institute in India
Led Lcd Tv Repairing Course in India
Mobile Repairing Institute in Delhi
Mobile Repairing course in Delhi
Virtual Private Network empowers you to utilize https://novavpn.com/blog/yify/ web to associate with machines while ensuring that the associations are private.
ReplyDeleteSuperb examining .Thanks for sharing. It's late finding this show up. https://privacidadenlared.es
ReplyDeleteI have looked couple of days and discovered some spellbinding formed work on it. In any case, it is the best of all. privatnostonline
ReplyDeleteSo luck to come across your excellent blog. Your blog brings me a great deal of fun.. Good luck with the site. internetprivatsphare.ch
ReplyDeleteIt was a very good post indeed. I thoroughly enjoyed reading it in my lunch time. Will surely come and visit this blog more often. Thanks for sharing. vpn
ReplyDeleteRegular visits listed here are the easiest method to appreciate your energy, which is why why I am going to the website everyday, searching for new, interesting info. Many, thank you was ist vpn
ReplyDeleteThis blog was extremely helpful. I really appreciate your kindness in sharing this with me and everyone else! privacyinthenetwork
ReplyDeleteLayer 2 Tunneling Protocol is an augmentation of the PPP Protocol (PPP, which builds up network between 2 hubs or PCs) L2TP enables ISPs to work VPNs is my vpn working
ReplyDeleteIf you are not very tech savvy and would like to skip the hassles of these two procedures, you can simply use a router detector software to find your router IP address online here http://whatsmyrouterip.com/ easily.
ReplyDeleteThe tone is so persuasive and plausible.
ReplyDeleteWindows VPN
This comment has been removed by the author.
ReplyDeleteI have used a lot of juicers in the past and I created this blog to help juice lovers make the right decision in choosing the type of juicer that best fit their needs. There are several good masticating juicers to choose from. vpnveteran
ReplyDeleteThis is a great high resolution screen which you have shared for the users. Making a website is not an easy task but managing a good website is really a hard work. As far as this website is concerned, I am very happy. Klik hier
ReplyDeleteI found so many interesting stuff in your blog especially its discussion. Really its great article. Keep it up. internetetsecurite
ReplyDeleteMatter is s basic, why somebody will give you such free administrations!! Answer is "Promotions" If you enlisted for a free hosting administration, you'll for the most part get paid advertisements in the sidebar [Left, right etc] of your site, bitcoin
ReplyDeleteNice article, Which you have shared here about the VPN Label. Your article is very informative and useful to know more about the MPLS VPN Label. Thank you for sharing this article here. Best Hardware & Networking Training in Delhi
ReplyDeleteI am happy to find this post very useful for me, as it contains a lot of information about MPLS vpn. I always prefer to read the quality content and this thing I found in your post. Thanks for sharing. Oracle Fusion Applications Cloud Training
ReplyDeleteIt is really a great and helpful piece of info. I am glad that you shared this helpful information with us. Please keep us informed like this. Thank you for sharing.
ReplyDeletePMP Training
thanks for share this blog .
ReplyDeletethis blog is gret article
home tutor in lahore
Very informative blog,never read such an informative blog and enjoyed it. You have such an updated blog with peace of knowledge.
ReplyDeleteLove back Solution Specialist
Love Marriage Specialist
love marriage specialist astrologer Love marriage specialist in Hyderabad love marriage specialist in Bangalore Love marriage specialist in Kolkata Love marriage astrology Love marriage specialist in Qatar Love marriage specialist in Italy
Never knew so much went into creating a VPN. Thanks for sharing this information with us:
ReplyDeletecustom logo design company
Its useful for everyone
ReplyDeleteMedical Alert Systems
This content material is written very well. Your use of formatting when making your factors makes your observations very clear and clean to apprehend. Thanks.
ReplyDeletelaw dissertation Writing Service
Well researched article regarding MPLS VPN Label. This is very helpful for a beginner. Thanks, admin for the post. Regards - satta king
ReplyDelete
ReplyDeleteSpeakatoo is a leading, trending & the most popular AI based converts Speech in various types of audio files from text. Speakatoo is a real time text-to-speech tool that enables you to generate rich, human like conversations for your client's or self service applications. Convert Urdu Text to Speech
It is well written approved article. Please keep me updated in this article. I must share this article with my family members. Now its time to avail limo service east bay ca for more information.
ReplyDelete