https://ittechnetworkk.co.uk/tags/vpn/ Recent content in Vpn on ittechnetworkk Hugo en-US Wed, 01 Apr 2026 12:48:42 +0200 https://ittechnetworkk.co.uk/posts/mpls-l3vpn-small-lab/ Wed, 01 Apr 2026 12:48:42 +0200 https://ittechnetworkk.co.uk/posts/mpls-l3vpn-small-lab/ <h2 id="overview">Overview</h2> <p>This lab builds a full MPLS L3VPN service across an ISP core (AS 35500) with OSPF Area 0 as the IGP, LDP for label distribution, and MP-BGP (VPNv4) for customer route exchange. Two VPNs — <strong>RED</strong> (AS 25942) and <strong>BLUE</strong> (AS 48273) — carry overlapping address space through the same physical infrastructure, demonstrating VRF isolation.</p> <p><strong>Key design choices:</strong></p> <ul> <li><strong>P1 and P4</strong> act as BGP Route Reflectors — PEs only peer with these two, no full-mesh iBGP required</li> <li><strong><code>as-override</code></strong> on all PE-CE peerings since both RED CEs share an AS and both BLUE CEs share an AS</li> <li><strong>OSPF point-to-point</strong> network type on all /30 core links (skips DR/BDR election)</li> <li>All BGP loopback peerings use <strong>update-source Loopback0</strong></li> </ul> <p>Here is the topology:</p> https://ittechnetworkk.co.uk/posts/dmvpn-phase3-ipsec1-ospf/ Wed, 01 Apr 2026 08:00:00 +0000 https://ittechnetworkk.co.uk/posts/dmvpn-phase3-ipsec1-ospf/ <p>Hi everyone, in this lab I&rsquo;ll walk you through how to configure a Dual Hub DMVPN Phase3 - IPSec topology.</p>