! version 15.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname PE01 ! boot-start-marker boot-end-marker ! aqm-register-fnf ! vrf definition VPN-10 rd 10:10 ! address-family ipv4 route-target export 10:10 route-target import 10:10 exit-address-family ! vrf definition VPN-20 rd 20:20 ! address-family ipv4 route-target export 20:20 route-target import 20:20 exit-address-family ! ! no aaa new-model clock timezone EET 2 0 mmi polling-interval 60 no mmi auto-configure no mmi pvc mmi snmp-timeout 180 ! ! ! ! ! ! ! ! ! ! ! ! no ip domain lookup ip cef no ipv6 cef ! multilink bundle-name authenticated mpls label range 1000 1999 mpls label protocol ldp ! ! ! ! ! ! ! ! ! redundancy ! ! pseudowire-class ETH-2-PPP encapsulation mpls interworking ip ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 1.1.1.1 255.255.255.255 ip router isis ! interface Ethernet0/0 vrf forwarding VPN-10 ip address 192.168.111.1 255.255.255.0 ! interface Ethernet0/1 vrf forwarding VPN-20 ip address 192.168.121.1 255.255.255.0 ! interface Ethernet0/2 no ip address xconnect 4.4.4.4 40 encapsulation mpls ! interface Ethernet0/3 ip address 192.168.120.1 255.255.255.0 ip router isis mpls ip ! interface Serial1/0 ip address 192.168.110.1 255.255.255.0 ip router isis mpls ip serial restart-delay 0 isis metric 50 ! interface Serial1/1 no ip address encapsulation ppp serial restart-delay 0 xconnect 4.4.4.4 30 encapsulation mpls pw-class ETH-2-PPP ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! router ospf 10 vrf VPN-10 redistribute bgp 1453 subnets network 192.168.111.1 0.0.0.0 area 0 ! router isis net 49.0001.0001.0001.0001.00 metric-style wide ! router bgp 1453 bgp router-id 1.1.1.1 bgp log-neighbor-changes no bgp default ipv4-unicast neighbor 99.99.99.99 remote-as 1453 neighbor 99.99.99.99 update-source Loopback0 ! address-family ipv4 neighbor 99.99.99.99 activate exit-address-family ! address-family vpnv4 neighbor 99.99.99.99 activate neighbor 99.99.99.99 send-community extended exit-address-family ! address-family ipv4 vrf VPN-10 redistribute ospf 10 match internal external 1 external 2 route-map INTERLINK-DENY exit-address-family ! address-family ipv4 vrf VPN-20 redistribute static route-map INTERLINK-DENY exit-address-family ! ip forward-protocol nd ! ! no ip http server no ip http secure-server ip route vrf VPN-20 10.10.10.0 255.255.255.0 192.168.121.21 ! ! ip prefix-list VPN-10-LINK seq 5 permit 192.168.111.0/24 ! ip prefix-list VPN-20-LINK seq 5 permit 192.168.121.0/24 ! route-map INTERLINK-DENY deny 10 match ip address prefix-list VPN-10-LINK VPN-20-LINK ! route-map INTERLINK-DENY permit 20 ! ! mpls ldp router-id Loopback0 ! control-plane ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous login line aux 0 line vty 0 4 login transport input none ! ! end