description mpls inspection addrouter r1 int eth1 eth 0000.0000.1111 $1a$ $1b$ ! vrf def v1 rd 1:1 label-mode per-prefix exit access-list test4 deny 1 any all any all permit all any all any all exit access-list test6 deny all 4321:: ffff:: all 4321:: ffff:: all permit all any all any all exit int lo0 vrf for v1 ipv4 addr 2.2.2.1 255.255.255.255 ipv6 addr 4321::1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff exit int eth1 vrf for v1 ipv4 addr 1.1.1.1 255.255.255.0 ipv6 addr 1234:1::1 ffff:ffff:: ipv4 access-group-in test4 ipv6 access-group-in test6 mpls enable mpls ldp4 mpls ldp6 exit ipv4 route v1 2.2.2.2 255.255.255.255 1.1.1.2 ipv4 route v1 2.2.2.3 255.255.255.255 1.1.1.2 ipv6 route v1 4321::2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 1234:1::2 ipv6 route v1 4321::3 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 1234:1::2 ! addrouter r2 int eth1 eth 0000.0000.2222 $1b$ $1a$ int eth2 eth 0000.0000.2222 $2a$ $2b$ ! vrf def v1 rd 1:1 label-mode per-prefix exit int lo0 vrf for v1 ipv4 addr 2.2.2.2 255.255.255.255 ipv6 addr 4321::2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff exit int eth1 vrf for v1 ipv4 addr 1.1.1.2 255.255.255.0 ipv6 addr 1234:1::2 ffff:ffff:: mpls enable mpls ldp4 mpls ldp6 mpls inspect mac exit int eth2 vrf for v1 ipv4 addr 1.1.2.2 255.255.255.0 ipv6 addr 1234:2::2 ffff:ffff:: mpls enable mpls ldp4 mpls ldp6 exit ipv4 route v1 2.2.2.1 255.255.255.255 1.1.1.1 ipv4 route v1 2.2.2.3 255.255.255.255 1.1.2.3 ipv6 route v1 4321::1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 1234:1::1 ipv6 route v1 4321::3 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 1234:2::3 ! addrouter r3 int eth1 eth 0000.0000.3333 $2b$ $2a$ ! vrf def v1 rd 1:1 label-mode per-prefix exit access-list test4 deny 1 any all any all permit all any all any all exit access-list test6 deny all 4321:: ffff:: all 4321:: ffff:: all permit all any all any all exit int lo0 vrf for v1 ipv4 addr 2.2.2.3 255.255.255.255 ipv6 addr 4321::3 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff exit int eth1 vrf for v1 ipv4 addr 1.1.2.3 255.255.255.0 ipv6 addr 1234:2::3 ffff:ffff:: ipv4 access-group-in test4 ipv6 access-group-in test6 mpls enable mpls ldp4 mpls ldp6 exit ipv4 route v1 2.2.2.1 255.255.255.255 1.1.2.2 ipv4 route v1 2.2.2.2 255.255.255.255 1.1.2.2 ipv6 route v1 4321::1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 1234:2::2 ipv6 route v1 4321::2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 1234:2::2 ! r1 tping 100 10 2.2.2.2 /vrf v1 /int lo0 r1 tping 100 10 4321::2 /vrf v1 /int lo0 r1 tping 100 10 2.2.2.3 /vrf v1 /int lo0 r1 tping 100 10 4321::3 /vrf v1 /int lo0 r2 tping 100 10 2.2.2.1 /vrf v1 /int lo0 r2 tping 100 10 4321::1 /vrf v1 /int lo0 r2 tping 100 10 2.2.2.3 /vrf v1 /int lo0 r2 tping 100 10 4321::3 /vrf v1 /int lo0 r3 tping 100 10 2.2.2.1 /vrf v1 /int lo0 r3 tping 100 10 4321::1 /vrf v1 /int lo0 r3 tping 100 10 2.2.2.2 /vrf v1 /int lo0 r3 tping 100 10 4321::2 /vrf v1 /int lo0 r2 output show mpls insp eth1 sess r2 output show mpls insp eth1 top output ../binTmp/crypt-insp05.html here is the flows:
show:0
here is the tops:
show:1
!