L3VPN over SRv6
L3VPN remains a fundamental network service due to its combination of traffic isolation, scalability, operational simplicity, and predictable performance. As a result, it is one of the most widely deployed WAN services for both enterprises and service providers.
After the physical topology and control plane were established, the L3VPN service was verified on all participating Provider Edge nodes. The validation used SRv6 with the End.DT46 behavior. The End.DT46 performs packet decapsulation and a lookup in a VRF that supports both IPv4 and IPv6. This enables dual-stack L3VPN services over an IPv6 SRv6 underlay.
Control-plane verification confirmed that each PE received VPNv4 and VPNv6 routes from remote PEs, and these routes included SRv6 service SIDs. These SIDs were verified to be of type End.DT46. Each egress PE instantiated a local End.DT46 SID and was bound to the correct VRF.
Data-plane validation was performed using end-to-end traffic tests between VPN endpoints. IPv4 and IPv6 traffic were forwarded successfully.
| ABR | PE | Route Reflector | Traffic Generator |
|---|---|---|---|
Cisco 8711-32FH-M, | Arista 7280R4, | Cisco 8711-32FH-M, | Keysight IxNetwork |
Table 45: L3VPN over SRv6 - µSID-End.DT46 with CSID-IPv4
| ABR | PE | Route Reflector | Traffic Generator |
|---|---|---|---|
Cisco 8711-32FH-M, | Arista 7280R4, | Cisco 8711-32FH-M, | Keysight IxNetwork |
Table 43: L3VPN over SRv6 - µSID-End.DT46 with CSID-IPv6
For the L3VPN service, a group of participants used SRv6 transposition as defined in RFC 9252. These participants advertised VPN-IP routes using transposed SRv6 SIDs. The common locator was signaled using the SRv6 SID Structure TLV. The function part of the SID was carried in the MPLS label field of the BGP NLRI.
| PE |
|---|
Ciena 5164, |
Table 44: L3VPN over SRv6 - L3VPN route using Transposition
| < Previous | Next > |