Configuring MPLS LPS Traffic Injection

In Multiprotocol Label Switching (MPLS) Label Switched Path (LSP) traffic injection, MPLS LSP is established between the cleaning device and the traffic-injection router. Thereby, cleaned traffic is tagged with single-layer labels and is finally forwarded to the Zone.

Implementation Mechanism

This function is configured on the AntiDDoS.

As shown in Figure 1, Router1 is a traffic-diversion router. A traffic-diversion channel is established between GE1/0/1 on Router1 and GE2/0/1 on the cleaning device. Inbound traffic is diverted to GE2/0/1 through Router1 GE1/0/1 for cleaning.

MPLS and LDP are configured respectively on the cleaning device, Router1, and Router2, MPLS labels are tagged, and MPLS LSP is established. In this regard, cleaned traffic is tagged with single-layer labels on the cleaning device, and is injected to the original link based on the pre-defined LSP. This avoids the traffic-diversion route advertised by the cleaning device.

In practice, the traffic-injection router can be either Router2 or another downstream router.

Figure 1 MPLS LSP traffic injection

In the BGP traffic-diversion scenario, MPLS LSP traffic injection can evade the traffic-diversion route to directly issue injected traffic to the downstream router that cannot learn the traffic-diversion route, avoiding loops.

As typical dynamic traffic injection, MPLS LSP traffic injection delivers flexible applications and sound scalability, but demands MPLS supported by routers.

Configuring the Cleaning Device

  1. Set the IP address of the interface on the cleaning device and loopback address serving as the LSR ID. Use OSPF to notify the network segment connected to each interface and the host route of the LSR ID.
  2. Configure basic MPLS functions.
    1. Run the system-view command in the user view to access the system view.
    2. Run the mpls lsr-id lsr-id command to set an LSR ID.

      lsr-id specifies an LSR ID, in dotted decimal notation. It is used for identifying an LSR.

      Setting the LSR ID is the premise of configuring other MPLS commands.

      No default LSR ID is available. You are advised to use the IP address of the loopback interface of the LSR as the LSR ID.

      To modify the specified LSR ID, run the undo mpls command in the system view to delete all MPLS configurations.

    3. Run the mpls command to enable global MPLS and access the MPLS view.
    4. Run the quit command to return to the system view.
    5. Run the mpls ldp command to enable global LDP and access the MPLS-LDP view.
    6. Run the quit command to return to the system view.
    7. Run the interface interface-type { interface-number | interface-number.subinterface-number } command to access the interface view.

      The interface type can be 10GE, GigabitEthernet, POS, Eth-Trunk, IP-Trunk, or the subinterface of 10GE, GigabitEthernet, or Eth-Trunk. However, it cannot be GigabitEthernet 0/0/0 on the MPU.

      The interface indicates the traffic-injection interface on the cleaning device.

    8. Run the mpls command to enable interface-based MPLS.
    9. Run the mpls ldp command to enable interface-based LDP.
    10. Run the quit command to return to the system view.
  3. Configure a policy for establishing an LSP.
    1. Run the mpls command to access the MPLS view.
    2. Run the lsp-trigger all command to configure a policy for establishing an LSP.
    3. Run the quit command to return to the system view.

Configuring Router1

The following uses Huawei NE80E as an example for describing how to configure Router1 in MPLS LSP traffic injection.

  1. Set the IP address of the Router1 interface and loopback address serving as the LSR ID. Use OSPF to notify the network segment connected to each interface and the host route of the LSR ID.
  2. Configure basic MPLS functions.
    1. Run the system-view command in the user view to access the system view.
    2. Run the mpls lsr-id lsr-id command to set an LSR ID.

      lsr-id specifies an LSR ID, in dotted decimal notation. It is used for identifying an LSR.

      Setting the LSR ID is the premise of configuring other MPLS commands.

      No default LSR ID is available. You are advised to use the IP address of the loopback interface of the LSR as the LSR ID.

      To modify the specified LSR ID, run the undo mpls command in the system view to delete all MPLS configurations.

    3. Run the mpls command to enable global MPLS and access the MPLS view.
    4. Run the quit command to return to the system view.
    5. Run the mpls ldp command to enable global LDP and access the MPLS-LDP view.
    6. Run the quit command to return to the system view.
    7. Run the interface interface-type { interface-number | interface-number.subinterface-number } command to access the interface view.

      Interfaces indicate inbound interface GE1/0/2 and outbound interface GE1/0/3.

    8. Run the mpls command to enable interface-based MPLS.
    9. Run the mpls ldp command to enable interface-based LDP.
    10. Run the quit command to return to the system view.

Configuring Router2

The following uses Huawei NE80E as an example for describing how to configure Router2 in MPLS LSP traffic injection.

  1. Set the IP address of the Router2 interface and loopback address serving as the LSR ID. Use OSPF to notify the network segment connected to each interface and the host route of the LSR ID.
  2. Configure basic MPLS functions.
    1. Run the system-view command in the user view to access the system view.
    2. Run the mpls lsr-id lsr-id command to set an LSR ID.

      lsr-id specifies an LSR ID, in dotted decimal notation. It is used for identifying an LSR.

      Setting the LSR ID is the premise of configuring other MPLS commands.

      No default LSR ID is available. You are advised to use the IP address of the loopback interface of the LSR as the LSR ID.

      To modify the specified LSR ID, run the undo mpls command in the system view to delete all MPLS configurations.

    3. Run the mpls command to enable global MPLS and access the MPLS view.
    4. Run the quit command to return to the system view.
    5. Run the mpls ldp command to enable global LDP and access the MPLS-LDP view.
    6. Run the quit command to return to the system view.
    7. Run the interface interface-type { interface-number | interface-number.subinterface-number } command to access the interface view.

      The interface indicates the inbound interface GE1/0/1 of injected traffic.

    8. Run the mpls command to enable interface-based MPLS.
    9. Run the mpls ldp command to enable interface-based LDP.
    10. Run the quit command to return to the system view.
  3. Configure a policy for establishing an LSP.
    1. Run the mpls command to access the MPLS view.
    2. Run the lsp-trigger all command to configure a policy for establishing an LSP.
    3. Run the quit command to return to the system view.
Parent topic: Configuring Traffic Injection
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.