Project for Inter-AS Networks 2023/2024
Welcome to the Project Inter-AS Networks 2023/2024! This project focuses on the implementation of MPLS VPN using Ansible. The project draws inspiration from the Ansible For Network Automation playlist on YouTube by Network Savage, along with the blog post Creating MPLS VPN. Additionally, the project incorporates instructions and guidelines from the laboratory sessions on Teams from channel AGH Inter-AS Networks.
Before getting started, ensure that the following requirements are met:
- GNS3 configuration and preparation for network automation.
- VMware Station Pro configuration and creating VM for the automation.
- Knowledge of Ansible playbooks.
- Familiarity with MPLS VPN concepts and configurations.
- Basic understanding networking principles.
- Ability to run bash scripts.
For the setup I used the Ansible for Network Automation linked in overview. It explains pretty well how to achieve the working configuration. By this I mean that you should be able to run properly ansible playbooks within the network. All routers in the projects are Cisco 7200 Series so please take that into consideration when going with the videos.
When running the network automation for the first time you may encounter some errors. I encountered two of them. First one was concerning the VM for VMware Station Pro that couldn't load due to error "Virtualized AMD-V/RVI is not supported on this platform". Fortunately, I resolved this (on Windows 10) with the following website: Solution The second one was actually on the network automation and while running any playbook I got: "To use 'ssh' connection type with passwords, you must install the sshpass program". To fix this I had to do couple of things:
- Add NAT to your GNS3 project
- Change /etc/network/interfaces for the machine to get dhcp address and also Internet access
- Reboot your network automation (just in GNS3 project)
- Do the installs on the machine - firstly apt-get update -y, then apt-get upgrade -y, apt-get install sshpass -y
- Go back to manual configuration of /etc/network/interfaces
- Reboot your network automation again
Please note that as run_pl.sh is a Bash script you should be able to execute it (chmod +x on the file - if you have any doubts about this check with ls -la for file permissions).
- Start all devices within the network
- Check any configurations you may want to
- Go to network automation and run ./run_pl.sh
- Wait for the devices to configure
- Check the connection and :)
Topology:
Traceroute and ping from device CE1A towards network behind CE2A:
Traceroute and ping from device CE2A towards network behind CE1A:
Devices P1, P2, PE1, PE2 cannot reach the networks behind CEs: