# MPLS Layer 3 VPN PE-CE RIP

**URL:** https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289
**Category:** Lessons Discussion
**Created:** [December 29, 2016, 8:11pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289 "2016-12-29T20:11:02Z")
**Posts on this page:** 18
**Page:** 1

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 29, 2016, 8:11pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/1 "2016-12-29T20:11:02Z")

</div>

This topic is to discuss the following lesson::

> **[MPLS Layer 3 VPN PE-CE RIP](https://networklessons.com/rip/mpls-layer-3-vpn-pe-ce-rip)**
>
> This configuration example explains how to configure MPLS L3 VPN with RIP as the PE-CE routing protocol.

---

<div class="post-metadata">

### Author: ![haiminh8811](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/h/3be4f8/32.png) [@haiminh8811](https://forum.networklessons.com/u/haiminh8811)
#### Post date: [February 6, 2016, 4:43am UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/2 "2016-02-06T04:43:54Z")

</div>

Thanks for great lesson.  
I’m quite new to Vpn l3. Could you explain about label stack of vpn packet when it travels from CE1 to PE1, then through isp , then out on PE2, then to CE2. Tks !!

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [February 10, 2016, 1:47pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/3 "2016-02-10T13:47:38Z")

</div>

For sure, it’s explained here:

[MPLS Labels and Devices](https://networklessons.com/mpls/mpls-labels-and-devices)

---

<div class="post-metadata">

### Author: ![akram.napier](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/4491bb/32.png) [@akram.napier](https://forum.networklessons.com/u/akram.napier)
#### Post date: [March 7, 2016, 12:27pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/4 "2016-03-07T12:27:06Z")

</div>

Hi,

Thank you for the this great site.

Can we redistribute into OSPF instead of redistributing into BGP.

Thanks  
Akram

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [March 7, 2016, 5:07pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/5 "2016-03-07T17:07:51Z")

</div>

Hi Akram,

Redistributing RIP into OSPF is no problem but you can’t use it for MPLS VPN. You need BGP since it has address families for VPN routes.

Rene

---

<div class="post-metadata">

### Author: ![zeeshan.faiq](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/z/4bbf92/32.png) [@zeeshan.faiq](https://forum.networklessons.com/u/zeeshan.faiq)
#### Post date: [September 20, 2016, 3:51am UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/6 "2016-09-20T03:51:21Z")

</div>

Hi Rene,  
Very nice explanation. I have a general question: We are using IGP between PE-CE routers, Aren’t we only allowed to use e-BGP between different AS routers?

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [October 10, 2016, 6:03pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/7 "2016-10-10T18:03:06Z")

</div>

Hi Zeeshan,

In an MPLS PE-CE scenario, you can use IGPs or BGP. Even static routes are possible.

Rene

---

<div class="post-metadata">

### Author: ![farooqtech786](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/f/57b2e6/32.png) [@farooqtech786](https://forum.networklessons.com/u/farooqtech786)
#### Post date: [February 5, 2018, 5:26am UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/8 "2018-02-05T05:26:34Z")

</div>

Hello Rene,

I have the lab for MPLS L3 VPN and RIP is my IGP.

I could see all the routes but not able to R5 loopback 0 from R1 with source address of loopback 0 and vice versa.

I could see the 5.0.0.0 routes on R1 and 1.0.0.0.0 routes on R5.

Please help me if I am missing something.

---

<div class="post-metadata">

### Author: ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [February 10, 2018, 12:57pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/9 "2018-02-10T12:57:33Z")

</div>

Hello mohammed

In order to be able to help you we’d need a little more information. Have you attempted connectivity between the Fa0/0 interfaces on CE1 and CE2? (I assume when you say R1 and R5 you mean CE1 and CE2). If that is not successful, you should check out the configurations on all your routers. If it is successful, check to make sure the Lo interfaces are participating in BGP.

I hope this has been helpful!

Laz

---

<div class="post-metadata">

### Author: ![risyou](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/r/b38774/32.png) [@risyou](https://forum.networklessons.com/u/risyou)
#### Post date: [September 23, 2018, 3:46am UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/10 "2018-09-23T03:46:50Z")

</div>

Hi Rene.  
Will you please advise me how do I advertise loopback I/F of PE1 to CE1?  
I have added

```
PE1(config)#router rip
PE1(config-router)#address-family ipv4 vrf CUSTOMER
PE1(config-router-af)#version 2
PE1(config-router-af)#no auto-summary 
PE1(config-router-af)#network 192.168.12.0
**PE1(config-router-af)#network 2.2.2.2**
and even
**PE1(config-router-af)#redistribute connnected**

```

It seems the PE1 are not advertise its loopback to CE1.  
Thanks.

---

<div class="post-metadata">

### Author: ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [September 24, 2018, 12:39pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/11 "2018-09-24T12:39:05Z")

</div>

Hello Shang

This behaviour is normal. Not only that, it is actually desired. The whole purpose of the MPLS Layer 3 VPN is to be able to create a transparent MPLS VPN between the two CE routers as if they are directly connected to each other. You’ve configured the Loopback to participate in the RIP routing, but you’ve also configured the `ip vrf forwarding CUSTOMER` VRF on the customer facing Fa0/0 interface and the `mpls ldp autoconfig` on the network facing interface. This will cause all additional network interfaces to be “inside the VPN” and not visible to the RIP process.

I hope this has been helpful!

Laz

---

<div class="post-metadata">

### Author: ![risyou](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/r/b38774/32.png) [@risyou](https://forum.networklessons.com/u/risyou)
#### Post date: [September 24, 2018, 1:04pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/12 "2018-09-24T13:04:54Z")

</div>

Hello lagapides  
Thank you for your kindly explaination.  
I also find some hint in the next few lessons.  
S

---

<div class="post-metadata">

### Author: ![viral.bhagalia1986](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/v/a88e4f/32.png) [@viral.bhagalia1986](https://forum.networklessons.com/u/viral.bhagalia1986)
#### Post date: [January 13, 2019, 8:08pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/13 "2019-01-13T20:08:43Z")

</div>

Hello Rene,

I understand that bet PE and CE we can use RIP/BGP/OSPF as well.

But can we use BGP in the Core Service provider network (bet PE1, P and PE2 routers), or we only have to use OSPF as our IGP in the core MPLS network?

Can any other protocol (except OSPF as shown here) can be used as IGP in MPLS cloud network?

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [January 18, 2019, 11:32am UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/14 "2019-01-18T11:32:34Z")

</div>

Hello Viral,

You’ll need an IGP so that your IBGP routers know how to reach each other. Here is an example:

> **[Internal BGP (Border Gateway Protocol) explained](https://networklessons.com/bgp/internal-bgp-border-gateway-protocol-explained)**
>
> This lesson explains why we need Internal BGP, what IBGP split horizon is about and how to configure IBGP on Cisco IOS Routers.

Another IGP is no problem, you could use EIGRP or IS-IS.

Rene

---

<div class="post-metadata">

### Author: ![viral.bhagalia1986](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/v/a88e4f/32.png) [@viral.bhagalia1986](https://forum.networklessons.com/u/viral.bhagalia1986)
#### Post date: [January 24, 2019, 8:37pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/15 "2019-01-24T20:37:57Z")

</div>

thanks Rene,

So we cant use eBGP bet PE1,PE and PE2 routers right? I tried using eBGP, tht did not worked.

It worked fine with OSPF.

Also, 1 more thing, can we use eBGP between PE 1 and PE2 routers (edge routers), or only iBGP works?

I tried with eBGP between PE1 and PE2, it did not work. It worked fine with iBGP.

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [February 15, 2019, 1:42pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/16 "2019-02-15T13:42:24Z")

</div>

Hi Viral,

Technically, you should be able to make it work. In a scenario like this, the PE and P routers belong to a single SP so it’s more likely that they use a single AS internally.

Rene

---

<div class="post-metadata">

### Author: ![akshayrane413](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/cab0a1/32.png) [@akshayrane413](https://forum.networklessons.com/u/akshayrane413)
#### Post date: [August 29, 2021, 3:04pm UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/17 "2021-08-29T15:04:10Z")

</div>

Hello Rene,

How do we generate a VPN label ? I understand we need VPN label in VRF to route it properly from egress PE to CE. But how do we get it? i may have missed it in the lessons, sorry for that.

Regards,  
Akshay

---

<div class="post-metadata">

### Author: ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [August 31, 2021, 5:10am UTC](https://forum.networklessons.com/t/mpls-layer-3-vpn-pe-ce-rip/1289/18 "2021-08-31T05:10:15Z")

</div>

Hello Akshay

When you enable iBGP on the PE routers, you enable the use of VPNv4 routes, and thus the creation of VPN labels. This is enabled when you configure [iBGP between PE1 and PE2](https://networklessons.com/mpls/mpls-layer-3-vpn-pe-ce-rip#IBGP_between_PE1_and_PE2). Once that’s done there’s no need for any further configurations to enable VPN labels.

I hope this has been helpful!

Laz
