Solved

MPLS VPN advertise labels

Posted on 2011-03-03
5
673 Views
Last Modified: 2012-05-11
Hello MPLS experts,

I'm trying to decifer the reason why someone would want to control the distribution of MPLS LDP labels by assigning an ACL to "mpls ldp advertise-labels for [ACL].

The ACL is PERMITTING one /32 loopback of the switch. What exactly is that doing and what would be some of the benefits someone would want to do this?

Seems like it is only allowing the Loopback to advertise labels and not the other interfaces.
0
Comment
Question by:trojan81
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 3

Expert Comment

by:IamTheMorsa
ID: 35032897
Trusted interface for the injection and not allow something or someone else to inject?
0
 

Author Comment

by:trojan81
ID: 35033216
Iam, please elaborate..thanks
0
 

Author Comment

by:trojan81
ID: 35044358
IamthemOrsa,

IWhat exactly is the command doing? mpls ldp advertise-labels for [ACL].

I see that the P  router also is filtering with this command and the ACL it is using includes the loopback of this PE.
0
 
LVL 32

Accepted Solution

by:
harbor235 earned 500 total points
ID: 35045042

You want to control the distribution of labels for the same reason you would want to restrict the distribution of routes, to restrict who can route to a particular destination prefix. Remember, labels are built based on which routes are in the forwarding table.


harbor235 ;}
0
 

Author Comment

by:trojan81
ID: 35105434
sorry IAMmorsa. meant to split the points.
0

Featured Post

Save the day with this special offer from ATEN!

Save 30% on the CV211 using promo code EXPERTS30 now through April 30th. The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to scan the entire subnet and get the Printers IP address ? 6 228
cisco switch stacking 6 72
Connect two buildings 6 64
BGP recommended setup with failover 2 105
Auditors face some challenges when reviewing router and firewall configurations.  I'm going to discuss a few of them in this article.  My assumption is that there is a device hardening standard in place, which points out the key elements of configur…
Introduction This article explores the design of a cache system that can improve the performance of a web site or web application.  The assumption is that the web site has many more “read” operations than “write” operations (this is commonly the ca…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question