MPLS Label Distribution Protocol (LDP)
MPLS Label Distribution Protocol (LDP)
Multiprotocol Label Switching (MPLS) Label Distribution Protocol (LDP) enables peer label switch
routers (LSRs) in an MPLS network to exchange label binding information for supporting hop-by-hop
forwarding in an MPLS network. This module explains the concepts related to MPLS LDP and describes
how to configure MPLS LDP in a network.
History for the MPLS LDP Feature
Release
Modification
12.0(10)ST
12.0(14)ST
This feature was integrated into Cisco IOS Release 12.0(14)ST. This
release introduced several new MPLS CLI commands, provided support
for MPLS VPNs by means of a new vrf vpn-name parameter in certain
existing commands, and modified other commands to ensure consistent
interpretation of associated prefix-access-list arguments by Cisco IOS
software.
12.1(2)T
This feature was integrated into Cisco IOS 12.1(2)T. Also, the debug mpls
atm-ldp api, debug mpls atm-ldp routes, and debug mpls atm-ldp
states commands were modified.
12.1(8a)E
12.2(2)T
12.2(4)T
This feature was integrated into Cisco IOS Release 12.2(4)T. Also, support
was added for Cisco MGX 8850 and MGX 8950 switches equipped with a
Cisco MGX RPM-PR card, and the VPI range in the show mpls atm-ldp
bindings and show mpls ip binding commands was changed to 4095.
12.2(8)T
This feature was integrated into Cisco IOS Release 12.2(8)T. This release
introduced the debug mpls atm-ldp failure command.
12.0(21)ST
This feature was integrated into Cisco IOS Release 12.0(21)ST. This
release introduced the mpls ldp neighbor implicit-withdraw command.
Corporate Headquarters:
Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
12.0(22)S
This feature was integrated into Cisco IOS Release 12.0(22)S. The mpls
ldp neighbor targeted-session command and the interface keyword for
the mpls ldp advertise-labels command were added.
12.0(23)S
This feature was integrated into Cisco IOS Release 12.0(23)S. Default
values for the mpls ldp discovery command holdtime and interval
keywords were changed.
12.2(13)T
12.4(3)
The default MPLS label distribution protocol changed from TDP to LDP.
If no protocol is explicitly configured by the mpls label protocol
command, LDP is the default label distribution protocol. See the mpls
label protocol (global configuration) command for more information.
Note
Use caution when upgrading the image on a router that uses TDP.
Ensure that the TDP sessions are established when the new image
is loaded. You can accomplish this by issuing the global
configuration command mpls label protocol tdp. Issue this
command and save it to the startup configuration before loading
the new image. Alternatively, you can enter the command and save
the running configuration immediately after loading the new
image.
LDP configuration commands are saved by using the MPLS form of the
command rather than the tag-switching form. Previously, commands were
saved by using the tag-switching form of the command, for backward
compatibility. See the Saving Configurations: MPLS/Tag Switching
Commands section on page 13 for more information.
12.4(5)
The vrf vrf-name keyword/argument pair was added for the mpls ldp
router-id command to allow you to associate the LDP router ID with a
nondefault VRF.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
Introduction to LDP Label Bindings, Label Spaces, and LDP Identifiers, page 5
From an historical and functional standpoint, LDP is a superset of the Cisco prestandard Tag Distribution
Protocol (TDP), which also supports MPLS forwarding along normally routed paths. For those features
that LDP and TDP share in common, the pattern of protocol exchanges between network routing
platforms is identical. The differences between LDP and TDP for those features supported by both
protocols are largely embedded in their respective implementation details, such as the encoding of
protocol messages.
This release of LDP, which supports both the LDP and TDP protocols, provides the means for
transitioning an existing network from a TDP environment to an LDP environment. Thus, you can run
LDP and TDP simultaneously on any router platform. The label distribution protocol that you select can
be configured on a per-interface basis for directly connected neighbors and on a per-session basis for
nondirectly connected (targeted) neighbors. In addition, an LSP across an MPLS network can be
supported by LDP on some hops and by TDP on other hops.
Downstream Unsolicited: An LSR advertises label mappings to peers without being asked to.
Downstream on Demand: An LSR advertises label mappings to a peer only when the peer asks for
them.
For information about creating LDP sessions, see the Enabling Directly Connected LDP Sessions
section on page 7.
You can use the mpls ldp neighbor targeted command to set up a targeted session when other means
of establishing targeted sessions do not apply, such as configuring mpls ip on a traffic engineering (TE)
tunnel or configuring Any Transport over MPLS (AToM) virtual circuits (VCs). For example, you can
use this command to create a targeted session between directly connected MPLS label switch routers
(LSRs) when MPLS label forwarding convergence time is an issue.
The mpls ldp neighbor targeted command can improve label convergence time for directly connected
neighbor LSRs when the link(s) directly connecting them are down. When the links between the
neighbor LSRs are up, both the link and targeted Hellos maintain the LDP session. If the links between
the neighbor LSRs go down, the targeted Hellos maintain the session, allowing the LSRs to retain labels
learned from each other. When a link directly connecting the LSRs comes back up, the LSRs can
immediately reinstall labels for forwarding use without having to reestablish their LDP session and
exchange labels.
The exchange of targeted Hello messages between two nondirectly connected neighbors can occur in
several ways, including the following:
Router 1 sends targeted Hello messages carrying a response request to Router 2. Router 2 sends
targeted Hello messages in response if its configuration permits. In this situation, Router 1 is
considered to be active and Router 2 is considered to be passive.
Router 1 and Router 2 both send targeted Hello messages to each other. Both routers are considered
to be active. Both, one, or neither router can also be passive, if they have been configured to respond
to requests for targeted Hello messages from each other.
The default behavior of an LSR is to ignore requests from other LSRs that send targeted Hello messages.
You can configure an LSR to respond to requests for targeted Hello messages by issuing the mpls ldp
discovery targeted-hello accept command.
The active LSR mandates the protocol that is used for a targeted session. The passive LSR uses the
protocol of the received targeted Hello messages.
For information about creating MPLS LDP targeted sessions, see the Establishing Nondirectly
Connected MPLS LDP Sessions section on page 10.
Interface-specificAn interface-specific label space uses interface resources for labels. For
example, label-controlled ATM (LC-ATM) interfaces use virtual path identifiers/virtual circuit
identifiers (VPIs/VCIs) for labels. Depending on its configuration, an LDP platform may support
zero, one, or more interface-specific label spaces.
Platform-wideAn LDP platform supports a single platform-wide label space for use by interfaces
that can share the same labels. For Cisco platforms, all interface types, except LC-ATM, use the
platform-wide label space.
LDP uses a 6-byte quantity called an LDP Identifier (or LDP ID) to name label spaces. The LDP ID is
made up of the following components:
The first four bytes, called the LPD router ID, identify the LSR that owns the label space.
The last two bytes, called the local label space ID, identify the label space within the LSR. For the
platform-wide label space, the last two bytes of the LDP ID are always both 0.
172.16.0.0:0
192.168.0.0:3
The router determines the LDP router ID as follows, if the mpls ldp router-id command is not executed,
1.
2.
If these IP addresses include loopback interface addresses, the router selects the largest loopback
address as the LDP router ID.
3.
Otherwise, the router selects the largest IP address pertaining to an operational interface as the LDP
router ID.
The normal (default) method for determining the LDP router ID may result in a router ID that is not
usable in certain situations. For example, the router might select an IP address as the LDP router ID that
the routing protocol cannot advertise to a neighboring router. The mpls ldp router-id command allows
you to specify the IP address of an interface as the LDP router ID. Make sure the specified interface is
operational so that its IP address can be used as the LDP router ID.
When you issue the mpls ldp router-id command without the force keyword, the router select selects
the IP address of the specified interface (provided that the interface is operational) the next time it is
necessary to select an LDP router ID, which is typically the next time the interface is shut down or the
address is configured.
When you issue the mpls ldp router-id command with the force keyword, the effect of the mpls ldp
router-id command depends on the current state of the specified interface:
If the interface is up (operational) and if its IP address is not currently the LDP router ID, the LDP
router ID changes to the IP address of the interface. This forced change in the LDP router ID tears
down any existing LDP sessions, releases label bindings learned via the LDP sessions, and interrupts
MPLS forwarding activity associated with the bindings.
If the interface is down (not operational) when the mpls ldp router-id force command is issued,
when the interface transitions to up, the LDP router ID changes to the IP address of the interface.
This forced change in the LDP router ID tears down any existing LDP sessions, releases label
bindings learned via the LDP sessions, and interrupts MPLS forwarding activity associated with the
bindings.
Preserving QoS Settings with MPLS LDP Explicit Null, page 15 (optional)
Protecting Data Between LDP Peers with MD5 Authentication, page 19 (optional)
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
mpls ip
4.
5.
6.
mpls ip
7.
exit
8.
exit
9.
DETAILED STEPS
Step 1
Command or Action
Purpose
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
Step 3
mpls ip
Example:
Router(config)# mpls ip
Step 4
Example:
Router(config)# mpls label protocol ldp
Step 5
Command or Action
Purpose
Example:
Router(config)# interface ethernet3/0
Step 6
mpls ip
Example:
Router(config-if)# mpls ip
Step 7
exit
Example:
Router(config-if)# exit
Step 8
exit
Example:
Router(config)# exit
Step 9
Example:
Router# show mpls interfaces
Step 10
Example:
Router# show mpls ldp discovery
Step 11
Example:
Router# show mpls ldp neighbor
Examples
The following show mpls interfaces command verifies that interfaces Ethernet 1/0 and 1/1 have been
configured to use LDP:
Router# show mpls interfaces
Interface
Ethernet3/0
Ethernet3/1
IP
Yes (ldp)
Yes
Tunnel
No
No
The following show mpls ldp discovery command verifies that the interface is up and is sending LDP
Discovery Hello messages (as opposed to TDP Hello messages):
Router# show mpls ldp discovery
Local LDP Identifier:
172.16.12.1:0
Discovery Sources:
Interfaces:
Ethernet3/0 (ldp): xmit
The following example shows that the LDP session between routers was successfully established:
Router# show mpls ldp neighbor
Peer LDP Ident: 10.1.1.2:0; Local LDP Ident 10.1.1.1:0
TCP connection: 10.1.1.2.18 - 10.1.1.1.66
State: Oper; Msgs sent/rcvd: 12/11; Downstream
Up time: 00:00:10
LDP discovery sources:
FastEthernet1/0, Src IP addr: 10.20.10.2
Addresses bound to peer LDP Ident:
10.1.1.2
10.20.20.1
10.20.10.2
For examples on configuring directly connected LDP sessions, see the Configuring Directly Connected
MPLS LDP Sessions: Example section on page 22.
Prerequisites
You must configure the routers at both ends of the tunnel to be active or enable one router to be
passive with the mpls ldp discovery targeted-hello accept command.
1.
enable
2.
configure terminal
3.
mpls ip
4.
5.
interface tunnelnumber
6.
7.
mpls ip
8.
exit
9.
exit
SUMMARY STEPS
DETAILED STEPS
Step 1
Command or Action
Purpose
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
Step 3
mpls ip
Example:
Router(config)# mpls ip
10
Step 4
Command or Action
Purpose
Example:
Step 5
interface tunnelnumber
Example:
Router(config)# interface tunnel1
Step 6
Example:
Router(config-if)# tunnel destination
172.16.1.1
Step 7
mpls ip
Example:
Router(config-if)# mpls ip
Step 8
exit
Example:
Router(config-if)# exit
Step 9
exit
Example:
Router(config)# exit
Step 10
Example:
Router# show mpls ldp discovery
11
Example
The following example shows the output of the show mpls ldp discovery command for a nondirectly
connected LDP session.
Router# show mpls ldp discovery
Local LDP Identifier:
172.16.0.0:0
Discovery Sources:
Interfaces:
POS2/0 (ldp): xmit/recv
LDP Id: 172.31.255.255:0
Tunnel1 (ldp): Targeted -> 192.168.255.255
Targeted Hellos:
172.16.0.0 -> 192.168.255.255 (ldp): active, xmit/recv
LDP Id: 192.168.255.255:0
172.16.0.0 -> 192.168.0.0 (tdp): passive, xmit/recv
TDP Id: 192.168.0.0:0
The local LSR (172.16.0.0) sent LDP link Hello messages on interface POS2/0 and discovered
neighbor 172.31.255.255.
The local LSR sent LDP targeted Hello messages associated with interface Tunnel1 to target
192.168.255.255. The LSR was configured to use LDP.
The local LSR is active for targeted discovery activity with 192.168.255.255; this means that the
targeted Hello messages it sends to 192.168.255.255 carry a response request. The local LSR was
configured to have an LDP session with the nondirectly connected LSR 192.168.255.255.
The local LSR is not passive from the discovery activity with 192.168.255.255 for one of the
following reasons:
The targeted Hello messages it receives from 192.168.255.255 do not carry a response request.
The local LSR has not been configured to respond to such requests.
The local LSR sent TDP directed Hello messages to the target LSR 192.168.0.0. This LSR uses TDP
because the Hello messages received from the target LSR 192.168.0.0 were TDP directed Hello
messages.
The local LSR is passive in discovery activity with LSR 192.168.0.0. This means that the directed
Hello messages it receives from LSR 192.168.0.0 carry a response request and that the local LSR
has been configured with the mpls ldp discovery targeted-hello accept command to respond to
such requests from LSR 192.168.0.0.
The local LSR is not active in discovery activity with LSR 192.168.0.0, because no application that
requires an LDP session with LSR 192.168.0.0 has been configured on the local LSR.
For examples of configuring LDP targeted sessions, see the Establishing Nondirectly Connected MPLS
LDP Sessions: Example section on page 24.
12
After you enter these commands and save this configuration or display the running configuration with
the show running command, the commands saved or displayed appear as follows:
interface ATM3/0.1 mpls
ip unnumbered Loopback0
mpls ip
mpls label protocol ldp
2.
If these addresses include loopback interface addresses, the router selects the largest loopback
address. Configuring a loopback address helps ensure a stable LDP ID for the router, because the
state of loopback addresses does not change. However, configuring a loopback interface and
IP address on each router is not required.
The loopback IP address does not become the router ID of the local LDP ID under the following
circumstances:
If the loopback interface has been explicitly shut down.
If the mpls ldp router-id command specifies that a different interface should be used as the
The router might select a router ID that is not usable in certain situations. For example, the router might
select an IP address that the routing protocol cannot advertise to a neighboring router.
The router implements the router ID the next time it is necessary to select an LDP router ID. The effect
of the command is delayed until the next time it is necessary to select an LDP router ID, which is
typically the next time the interface is shut down or the address is deconfigured.
13
If you use the force keyword with the mpls ldp router-id command, the router ID takes effect more
quickly. However, implementing the router ID depends on the current state of the specified interface:
If the interface is up (operational) and its IP address is not currently the LDP router ID, the LDP
router ID is forcibly changed to the IP address of the interface. This forced change in the LDP router
ID tears down any existing LDP sessions, releases label bindings learned via the LDP sessions, and
interrupts MPLS forwarding activity associated with the bindings.
If the interface is down, the LDP router ID is forcibly changed to the IP address of the interface when
the interface transitions to up. This forced change in the LDP router ID tears down any existing LDP
sessions, releases label bindings learned via the LDP sessions, and interrupts MPLS forwarding
activity associated with the bindings.
Prerequisites
Make sure the specified interface is operational before assigning it as the LDP router ID.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
mpls ip
4.
5.
6.
exit
7.
DETAILED STEPS
Step 1
Command or Action
Purpose
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
Step 3
mpls ip
Example:
Router(config)# mpls ip
14
Step 4
Command or Action
Purpose
Example:
Router(config)# mpls label protocol ldp
Step 5
Example:
Router(config)# mpls ldp router-id pos2/0/0
Step 6
exit
Example:
Router(config)# exit
Step 7
Example:
Router# show mpls ldp discovery
Example
The following example assigns interface pos2/0/0 as the LDP router ID:
Router> enable
Router# configure terminal
Router(config)# mpls ip
Router(config)# mpls label protocol ldp
Router(config)# mpls ldp router-id pos2/0/0 force
15
Note
An explicit NULL label is not needed when the penultimate hop receives MPLS packets with a label
stack that contains at least two labels and penultimate hop popping is performed. In that case, the inner
label can still carry the QoS value needed by the penultimate and edge LSR to implement their QoS
policy.
When you issue the mpls ldp explicit-null command, Explicit Null is advertised in place of Implicit
Null for directly connected prefixes.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
mpls ip
4.
5.
6.
mpls ip
7.
exit
8.
9.
exit
10. show mpls forwarding-table [network {mask | length} | labels label [- label] | interface interface
DETAILED STEPS
Step 1
Command or Action
Purpose
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
Step 3
mpls ip
Example:
Router(config)# mpls ip
16
Step 4
Command or Action
Purpose
Example:
Router(config)# mpls label protocol ldp
Step 5
Example:
Router(config)# interface atm2/0
Step 6
mpls ip
Example:
Router(config-if)# mpls ip
Step 7
exit
Example:
Router(config-if)# exit
Step 8
Example:
Router(config)# mpls ldp explicit-null
Step 9
exit
Example:
Router(config)# exit
Step 10
Example:
Router# show mpls forwarding-table
Examples
Enabling explicit-null on an egress LSR causes that LSR to advertise the explicit-null label to all
adjacent MPLS routers.
Router# configure terminal
Router(config)# mpls ldp explicit-null
If you issue the show mpls forwarding-table command on an adjacent router, the output shows that
MPLS packets are forwarded with an explicit-null label (value of 0). In the following example, the
second column shows that entries have outgoing labels of 0, where once they were marked Pop label.
Router# show mpls forwarding-table
Local
Outgoing
Prefix
Next Hop
17
label
19
22
23
24
25
26
27
28
label or VC or Tunnel Id
Pop tag
10.12.12.12/32
0
10.14.14.14/32
0
172.24.24.24/32
0
192.168.0.0/8
0
10.15.15.15/32
0
172.16.0.0/8
25
10.16.16.16/32
0
10.34.34.34/32
switched
0
0
0
0
0
0
0
0
interface
Fa2/1/0
Fa2/0/0
Fa2/0/0
Fa2/0/0
Fa2/0/0
Fa2/0/0
Fa2/0/0
Fa2/0/0
172.16.0.1
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.22
192.168.0.2
Enabling explicit-null and specifying the for keyword with a standard access control list (ACL) changes
all adjacent MPLS routers' tables to swap an explicit-null label for only those entries specified in the
access-list. In the following example, an access-list is created that contains the 10.24.24.24/32 entry.
Explicit null is configured and the access list is specified.
Router# configure terminal
Router(config)# mpls label protocol ldp
Router(config)# access-list 24 permit host 10.24.24.24
Router(config)# mpls ldp explicit-null for 24
If you issue the show mpls forwarding-table command on an adjacent router, the output shows that the
only the outgoing labels for the addresses specified (172.24.24.24/32) change from Pop label to 0. All
other Pop label outgoing labels remain the same.
Router# show mpls forwarding-table
Local
label
19
22
23
24
25
26
27
28
Outgoing
Prefix
label or VC or Tunnel Id
Pop tag
10.12.12.12/32
0
10.14.14.14/32
0
172.24.24.24/32
0
192.168.0.0/8
0
10.15.15.15/32
0
172.16.0.0/8
25
10.16.16.16/32
0
10.34.34.34/32
Next Hop
172.16.0.1
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.22
192.168.0.2
Enabling explicit null and adding the to keyword and an access list enables you to advertise explicit-null
labels to only those adjacent routers specified in the access-list.To advertise explicit-null to a particular
router, you must specify the router's LDP ID in the access-list.
In the following example, an access-list contains the 10.15.15.15/32 entry, which is the LDP ID of an
adjacent MPLS router. The router that is configured with explicit null advertises explicit-null labels only
to that adjacent router.
Router# show mpls ldp discovery
Local LDP Identifier:
10.15.15.15:0
Discovery Sources:
Interfaces:
Ethernet4 (ldp): xmit/recv
TDP Id: 10.14.14.14:0
Router# configure terminal
Router(config)# mpls label protocol ldp
Router(config)# access-list 15 permit host 10.15.15.15
Router(config)# mpls ldp explicit-null to 15
18
If you issue the show mpls forwarding-table command, the output shows that explicit null labels are
going only to the router specified in the access list.
Router# show mpls forwarding-table
Local
label
19
22
23
24
25
26
27
28
Outgoing
Prefix
label or VC or Tunnel Id
Pop tag
10.12.12.12/32
0
10.14.14.14/32
0
172.24.24.24/32
0
192.168.0.0/8
0
10.15.15.15/32
0
172.16.0.0/8
25
10.16.16.16/32
0
10.34.34.34/32
Next Hop
172.16.0.1
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.2
192.168.0.22
192.168.0.2
Enabling explicit-null with both the for and to keywords enables you to specify which routes to advertise
with explicit-null labels and to which adjacent routers to advertise these explicit-null labels.
Router# show access 15
Standard IP access list 15
permit 10.15.15.15 (7 matches)
Router# show access 24
Standard IP access list 24
permit 10.24.24.24 (11 matches)
Router# configure terminal
Router(config)# mpls label protocol ldp
Router(config)# mpls ldp explicit-null for 24 to 15
If you issue the show mpls forwarding-table command on the router called 47K-60-4, the output shows
that it receives explicit null labels for 10.24.24.24/32.
Router# show mpls forwarding-table
Local
label
17
20
21
22
23
25
27
28
29
Outgoing
Prefix
label or VC or Tunnel Id
0 <--10.24.24.24/32
Pop tag
172.16.0.0/8
20
10.12.12.12/32
16
10.0.0.0/8
21
10.13.13.13/32
Pop tag
10.14.14.14/32
Pop tag
192.168.0.0/8
25
10.16.16.16/32
Pop tag
192.168.34.34/32
Next Hop
172.16.0.1
172.16.0.1
172.16.0.1
172.16.0.1
172.16.0.1
172.16.0.1
172.16.0.1
172.16.0.1
172.16.0.1
19
To enable authentication, issue the mpls ldp neighbor command with the password keyword. This
causes the router to generate an MD5 digest for every segment sent on the TCP connection and check
the MD5 digest for every segment received from the TCP connection.
When you configure a password for an LDP neighbor, the router tears down existing LDP sessions and
establishes new sessions with the neighbor.
If a router has a password configured for a neighbor, but the neighboring router does not have a password
configured, a message such as the following appears on the console who has a password configured
while the two routers attempt to establish an LDP session. The LDP session is not established.
%TCP-6-BADAUTH: No MD5 digest from [peer's IP address](11003) to [local router's IP
address](646)
Similarly, if the two routers have different passwords configured, a message such as the following
appears on the console. The LDP session is not established.
%TCP-6-BADAUTH: Invalid MD5 digest from [peer's IP address](11004) to [local router's IP
address](646)
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
mpls ip
4.
5.
6.
show mpls ldp neighbor [[vrf vpn-name] [address | interface] [detail] | [all]]
DETAILED STEPS
Step 1
Command or Action
Purpose
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
Step 3
mpls ip
Example:
Router(config)# mpls ip
20
Step 4
Command or Action
Purpose
Example:
Router(config)# mpls label protocol ldp
Step 5
Example:
Router(config)# mpls ldp neighbor 172.27.0.15
password onethirty9
Step 6
exit
Example:
Router(config)# exit
Step 7
Example:
Router# show mpls ldp neighbor detail
Examples
The following example configures a router with the password cisco:
Router> enable
Router# configure terminal
Router(config)# mpls ip
Router(config)# mpls label protocol ldp
Router(config)# mpls ldp neighbor 10.1.1.1 password cisco
Router(config)# exit
The following example shows that the LDP session between routers was successfully established:
Router# show mpls ldp neighbor
Peer LDP Ident: 10.1.1.2:0; Local LDP Ident 10.1.1.1:0
TCP connection: 10.1.1.2.11118 - 10.1.1.1.646
State: Oper; Msgs sent/rcvd: 12/11; Downstream
Up time: 00:00:10
LDP discovery sources:
FastEthernet1/0, Src IP addr: 10.20.10.2
Addresses bound to peer LDP Ident:
10.1.1.2
10.20.20.1
10.20.10.2
The following show mpls ldp neighbor detail command shows that MD5 (shown in bold) is used for
the LDP session.
Router# show mpls ldp neighbor 10.0.0.21 detail
Peer LDP Ident: 10.0.0.21:0; Local LDP Ident 10.0.0.22:0
TCP connection: 10.0.0.21.646 - 10.0.0.22.14709; MD5 on
State: Oper; Msgs sent/rcvd: 1020/1019; Downstream; Last TIB rev sent 2034
Up time: 00:00:39; UID: 3; Peer Id 1;
21
MPLS hop-by-hop forwarding for the POS links between Router 1 and Router 2 and between
Router 1 and Router 3.
A loopback interface and IP address for each LSR that can be used as the LDP router ID.
Figure 1
Router 2
POS2/0/0
10.0.0.33
POS3/0/0
10.0.0.44
Router 1
POS3/0/1
192.168.0.44
39405
Router 3
POS1/0
192.168.0.55
Note
The configuration examples below show only the commands related to configuring LDP for Router 1,
Router 2, and Router 3 in the sample network shown in Figure 1.
22
Router 1 Configuration
ip cef distributed
interface Loopback0
ip address 172.16.0.11 255.255.255.255
!
interface POS3/0/0
ip address 10.0.0.44 255.0.0.0
mpls ip
mpls label protocol ldp
!
interface POS3/0/1
ip address 192.168.0.44 255.0.0.0
mpls ip
mpls label protocol tdp
Router 2 Configuration
ip cef distributed
!
interface Loopback0
ip address 172.16.0.22 255.255.255.255
!
interface POS2/0/0
ip address 10.0.0.33 255.0.0.0
mpls ip
mpls label protocol ldp
Router 3 Configuration
ip cef
!
interface Loopback0
ip address 172.16.0.33 255.255.255.255
!
interface POS1/0
ip address 192.168.0.55 255.0.0.0
mpls ip
mpls label protocol tdp
The LDP configuration for Router 1 uses the mpls label protocol ldp command in interface
configuration mode, because some of its interfaces use LDP and some use TDP. Another way to
configure Router 1 is to use the mpls label protocol ldp command in global configuration mode to
configure LDP as the default protocol for interfaces and use the mpls label protocol tdp command in
interface configuration mode to configure TDP for the POS3/0/1 link to Router 3. This alternative way
to configure Router 1 is shown below:
Router 1 Configuration
ip cef distributed
mpls label protocol ldp
!
interface Loopback0
ip address 172.16.0.11 255.255.255.255
interface POS3/0/0
ip address 10.0.0.44 255.0.0.0
mpls ip
interface POS3/0/1
ip address 192.168.0.44 255.0.0.0
mpls ip
mpls label protocol tdp
23
The configuration of Router 2 also uses the mpls label protocol ldp command in interface configuration
mode. To specify LDP for all interfaces, use the mpls label protocol ldp command in global
configuration mode without any interface mpls label protocol commands.
Configuring the mpls ip command on an interface triggers the transmission of discovery Hello messages
for the interface.
Router 4
10.11.0.4
Router 1
MPLS network
10.11.0.5
10.11.0.6
41142
10.11.0.1
Router 6
Router 5
Targeted sessions between Routers 1 and 4 use LDP. Routers 1 and 4 are both active.
Targeted sessions between Routers 1 and 6 use LDP. Router 1 is active and Router 6 is passive.
These examples assume that the active ends of the nondirectly connected sessions are associated with
tunnel interfaces, such as MPLS traffic engineering tunnels. They show only the commands related to
configuring LDP targeted sessions. The examples do not show configuration of the applications that
initiate the targeted sessions.
24
Router 1 Configuration
Tunnel interfaces Tunnel14 and Tunnel16 specify LDP for targeted sessions associated with these
interfaces. The targeted session for Router 5 requires TDP. The mpls label protocol ldp command in
global configuration mode makes it unnecessary to explicitly specify LDP as part of the configuration
from the Tunnel14 and Tunnel16.
ip cef distributed
mpls label protocol ldp
interface Loopback0
!Loopback interface for LDP ID.
ip address 10.25.0.11 255.255.255.255
interface Tunnel14
tunnel destination 10.11.0.4
mpls ip
interface Tunnel15
tunnel destination 10.11.0.5
mpls label protocol tdp
mpls ip
interface Tunnel16
tunnel destination 10.11.0.6
mpls ip
Router 4 Configuration
The mpls label protocol ldp command in global configuration mode makes it unnecessary to explicitly
specify LDP as part of the configuration for the Tunnel41 targeted session with Router 1.
ip cef distributed
mpls label protocol ldp
interface Loopback0
!Loopback interface for LDP ID.
ip address 10.25.0.44 255.255.255.255
interface Tunnel41
!Tunnel to Router 1 requiring label distribution
tunnel destination 10.11.0.1 !Tunnel endpoint is Router 1
mpls ip
!Enable hop-by-hop forwarding on the interface
Router 5 Configuration
Router 5 must use TDP for all targeted sessions. Therefore, its configuration includes the mpls label
protocol tdp command.
ip cef
mpls label protocol tdp
interface Loopback0
!Loopback interface for LDP ID.
ip address 10.25.0.55 255.255.255.255
interface Tunnel51
tunnel destination 10.11.0.1
mpls ip
25
Router 6 Configuration
By default, a router cannot be a passive neighbor in targeted sessions. Therefore, Router 1, Router 4, and
Router 5 are active neighbors in any targeted sessions. The mpls ldp discovery targeted-hello accept
command permits Router 6 to be a passive target in targeted sessions with Router 1. Router 6 can also
be an active neighbor in targeted sessions, although the example does not include such a configuration.
ip cef distributed
interface Loopback0
ip address 10.25.0.66 255.255.255.255
Additional References
The following sections provide references related to MPLS LDP.
Related Documents
Related Topic
Document Title
Allows ACLs to control the label bindings that an LSR MPLS LDP Inbound Label Binding Filtering
accepts from its peer LSRs.
Provides faster LDP convergence when a link recovers MPLS LDP Session Protection
following an outage.
Enables standard, SNMP-based network management
of the label switching features in Cisco IOS.
Standards
Standard
Title
None
26
MIBs
MIB
MIBs Link
SNMP-VACM-MIB
The View-based Access Control Model (ACM)
MIB for SNMP
RFCs
RFC
Title
RFC 3036
LDP Specification
Technical Assistance
Description
Link
http://www.cisco.com/techsupport
The Cisco Technical Support website contains
thousands of pages of searchable technical content,
including links to products, technologies, solutions,
technical tips, and tools. Registered Cisco.com users
can log in from this page to access even more content.
Command Reference
This section describes the following modified commands for Cisco IOS Releases 12.4(3) and 12.4(5):
For information about other MPLS LDP commands, see the following document:
Cisco IOS Multiprotocol Label Switching Command Reference, Release 12.4T.
27
Syntax Description
ldp
tdp
Specifies that Tag Distribution Protocol (TDP) is the default label distribution
protocol.
Defaults
Command Modes
Global configuration
Command History
Release
Modification
12.0(10)ST
12.0(14)ST
12.1(2)T
12.1(8a)E
12.2(2)T
12.2(4)T
12.2(8)T
12.0(21)ST
12.0(22)S
Usage Guidelines
Note
12.0(23)S
12.2(13)T
12.4(3)
If neither the global mpls label protocol ldp command nor the interface mpls label protocol ldp
command is used, all label distribution sessions use LDP.
Use caution when upgrading the image on a router that uses TDP. Ensure that the TDP sessions are
established when the new image is loaded. You can accomplish this by issuing the global configuration
command mpls label protocol tdp. Issue this command and save it to the startup configuration before
loading the new image. Alternatively, you can enter the command and save the running configuration
immediately after loading the new image.
28
Examples
The following command establishes LDP as the label distribution protocol for the platform:
Router(config)# mpls label protocol ldp
Related Commands
Command
Description
Displays information about one or more or all interfaces that are configured
for label switching.
29
Syntax Description
Defaults
vrf vrf-name
(Optional) Selects the interface as the LDP router ID for the named Virtual
Private Network (VPN) routing/forwarding table instance (VRF). The
selected interface must be associated with the named VRF.
interface
force
If the mpls ldp router-id command is not executed, the router determines the LDP router ID as follows:
a. The router examines the IP addresses of all operational interfaces.
b. If these IP addresses include loopback interface addresses, the router selects the largest
Command Modes
Global configuration
Command History
Release
Modification
12.0(10)ST
12.0(14)ST
Usage Guidelines
12.1(2)T
12.1(8a)E
12.2(2)T
12.0(22)S
12.4(5)
The mpls ldp router-id command allows you to establish the IP address of an interface as the LDP router
ID.
The following steps describe the normal process for determining the LDP router ID:
1.
30
2.
If these addresses include loopback interface addresses, the router selects the largest loopback
address. Configuring a loopback address helps ensure a stable LDP ID for the router, because the
state of loopback addresses does not change. However, configuring a loopback interface and
IP address on each router is not required.
The loopback IP address does not become the router ID of the local LDP ID under the following
circumstances:
If the loopback interface has been explicitly shut down.
If the mpls ldp router-id command specifies that a different interface should be used as the
The router might select a router ID that is not usable in certain situations. For example, the router might
select an IP address that the routing protocol cannot advertise to a neighboring router.
The router implements the router ID the next time it is necessary to select an LDP router ID. The effect
of the command is delayed until the next time it is necessary to select an LDP router ID, which is
typically the next time the interface is shut down or the address is deconfigured.
If you use the force keyword with the mpls ldp router-id command, the router ID takes effect more
quickly. However, implementing the router ID depends on the current state of the specified interface:
If the interface is up (operational) and its IP address is not currently the LDP router ID, the LDP
router ID is forcibly changed to the IP address of the interface. This forced change in the LDP router
ID tears down any existing LDP sessions, releases label bindings learned via the LDP sessions, and
interrupts MPLS forwarding activity associated with the bindings.
If the interface is down, the LDP router ID is forcibly changed to the IP address of the interface when
the interface transitions to up. This forced change in the LDP router ID tears down any existing LDP
sessions, releases label bindings learned via the LDP sessions, and interrupts MPLS forwarding
activity associated with the bindings.
The following behaviors apply to the default VRF as well as to VRFs that you explicitly configure with
the vrf vrf-name keyword/argument pair:
The interface you select as the router ID of the VRF must be associated with the VRF.
If the interface is no longer associated with the VRF, the mpls ldp router-id command that uses the
interface is removed.
If the selected interface is deleted, the mpls ldp router-id command that uses the interface is
removed.
If you delete a VRF that you configured, the mpls ldp router-id command for the deleted VRF is
removed. The default VRF cannot be deleted.
31
Examples
The following example shows that the POS2/0/0 interface has been specified as the preferred interface
for the LDP router ID. The IP address of that interface is used as the LDP router ID.
Router(config)# mpls ldp router-id pos2/0/0
The following example shows that the Ethernet 1/0 interface, which is associated with the VRF vpn-1,
is the preferred interface. The IP address of the interface is used as the LDP router ID.
Router(config)# mpls ldp router-id vrf vpn-1 eth1/0
Related Commands
Command
Description
CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is
a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco
Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity,
Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS,
iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networkers,
Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient,
and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (0711R)
32