Provisioning L3 VPN services across different platforms requires consistent service modeling and reliable configuration delivery. Device-specific configuration differences in multi-vendor environments add integration complexity. Using controller-driven provisioning with NETCONF and YANG enables service abstraction and ensures standardized, repeatable deployment. In this test, we validated L3 VPN provisioning with NETCONF and YANG-based service models across several vendor implementations.
For each run, the controller created an L3 VPN service using a structured service instance. The service model instance specified the VPN topology, participating nodes, and per-site parameters. It included creating VRFs (network instances) with associated route distinguishers and route targets, as well as service attachment via 802.1Q subinterfaces with customer VLAN identifiers. PE–CE routing was established using BGP within the VPN context. Routing policy configuration was also provisioned as part of the service, including VRF import/export policies and BGP neighbor policy attachment where supported.
The controller delivered the generated configuration to both service endpoints and verified successful deployment. We validated the service by verifying the operational VRFs and confirming successful VPN route exchange between the participating nodes.
Both SR-MPLS and SRv6 transport variants were covered. In the SRv6 scenario, the service deployment included per-VRF SRv6 behavior with an associated locator and VPN-specific SID handling at the headend.