gesh75 MPLS L3VPN
Do not use for EVPN-VXLAN DC fabrics. Not for SD-WAN overlay.
Procedure
- RD unique per PE per VRF. RT import/export match the customer's VPN, not a shared "internet" RT.
- PE-CE: eBGP with prefix-limit, or static with an object-track. Dual-CE uses MED or local-pref, not as-path prepend as the only lever.
- QoS: classify on CE, exp-map on PE. Voice EF, not a remark later.
- Core is label-only. Do not leak inet.0 into a customer VRF.
- Verify: CE ping, PE
show route table vrf, traceroute showing labels.
vrf FINANCE
rd 65000:2401
import target 65000:100
export target 65000:100
prefix-limit 200
Anti-patterns
- Never reuse an RD.
- Do not default-originate into a customer VRF without a written request.
Safety
RT changes can merge VPNs. Twin or offline RR view first.