Dorphnet

🚀 New Network Project Completed: MPLS L3VPN & L2VPN with Centralized Internet Access

After several phases of design, configuration, and troubleshooting, I have finalized a comprehensive lab simulating an MPLS Service Provider infrastructure, featuring:

✅ MPLS Backbone
✅ MPLS L3VPN
✅ MPLS L2VPN VPWS
✅ MP-BGP VPNv4
✅ VRF Isolation
✅ Multi-Process OSPF
✅ Centralized Internet Breakout
✅ NAT/PAT
✅ Cisco & MikroTik Interconnection

🔹 BLUE Client: Layer 3 interconnection via MPLS L3VPN.
🔹 GREEN Client: Layer 2 extension via MPLS L2VPN VPWS with centralized Internet access from the HQ.

The various tests conducted successfully validated:
✔️ MPLS Label Exchange
✔️ OSPF Adjacencies
✔️ MP-BGP VPNv4 Routes
✔️ VRF Isolation
✔️ Inter-site Connectivity
✔️ Remote Site Internet Access via Centralized NAT

The most challenging part of the project was troubleshooting NAT and managing Internet access for remote sites across the MPLS backbone. This phase significantly improved my network diagnostics and multi-vendor problem-solving skills.

This project has allowed me to strengthen my expertise in Service Provider technologies and Enterprise Network Architecture.

Yes for PDF

HOW TO CONFIGURE INTERNET ACCESS ON MIKROTIK ROUTER

https://youtu.be/VDsrghB0KNM

How to configure failover on mikrotik ?

Need pdf ?

**************************ROUTER**************************

Building configuration...

Current configuration : 2835 bytes
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ROUTER
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no ip icmp rate-limit unreachable
!
!
!
!
!
!
!
!

!
!
ip dhcp pool vlan_10_finance
network 192.168.10.0 255.255.255.0
default-router 192.168.10.254
dns-server 4.4.2.2
lease 0 1
!
ip dhcp pool vlan_20_technique
network 192.168.20.0 255.255.255.0
default-router 192.168.20.254
dns-server 4.4.2.2
lease 0 1
!
ip dhcp pool vlan_30_comptabilite
network 192.168.30.0 255.255.255.0
default-router 192.168.30.254
dns-server 4.4.2.2
lease 0 1
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Ethernet0/0
ip address 1.1.1.2 255.255.255.0
ip nat outside
ip virtual-reassembly in
!
interface Ethernet0/1
no ip address
!
interface Ethernet0/1.10
encapsulation dot1Q 10
ip address 192.168.10.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Ethernet0/1.20
encapsulation dot1Q 20
ip address 192.168.20.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Ethernet0/1.30
encapsulation dot1Q 30
ip address 192.168.30.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Ethernet0/2
no ip address
shutdown
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip nat inside source list loic interface Ethernet0/0 overload
ip route 0.0.0.0 0.0.0.0 1.1.1.1
!
ip access-list extended loic
permit ip 192.168.10.0 0.0.0.255 any
permit ip 192.168.20.0 0.0.0.255 any
permit ip 192.168.30.0 0.0.0.255 any
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
transport input none
!
!
end

*******************************switch**********************************

Building configuration...

Current configuration : 1573 bytes
!
! Last configuration change at 20:13:33 UTC Tue Feb 21 2023
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname SW
!
boot-start-marker
boot-end-marker
!
!
logging discriminator EXCESS severity drops 6 msg-body drops EXCESSCOLL
logging buffered 50000
logging console discriminator EXCESS
!
no aaa new-model
!
!
!
!
!
no ip icmp rate-limit unreachable
!
!
!
no ip domain-lookup
ip cef
no ipv6 cef
!
!
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Ethernet0/0
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface Ethernet0/1
switchport access vlan 10
switchport mode access
!
interface Ethernet0/2
switchport access vlan 20
switchport mode access
!
interface Ethernet0/3
switchport access vlan 30
switchport mode access
!
interface Ethernet1/0
!
interface Ethernet1/1
!
interface Ethernet1/2
!
interface Ethernet1/3
!
interface Ethernet2/0
!
interface Ethernet2/1
!
interface Ethernet2/2
!
interface Ethernet2/3
!
interface Ethernet3/0
!
interface Ethernet3/1
!
interface Ethernet3/2
!
interface Ethernet3/3
!
interface Vlan1
no ip address
shutdown
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end

**************************pc1********************************
PC1> ip dhcp
DDORA IP 192.168.10.1/24 GW 192.168.10.254

PC1> ping 8.8.8.8
84 bytes from 8.8.8.8 icmp_seq=1 ttl=254 time=1.392 ms
84 bytes from 8.8.8.8 icmp_seq=2 ttl=254 time=1.909 ms
84 bytes from 8.8.8.8 icmp_seq=3 ttl=254 time=1.697 ms
84 bytes from 8.8.8.8 icmp_seq=4 ttl=254 time=1.653 ms
84 bytes from 8.8.8.8 icmp_seq=5 ttl=254 time=2.324 ms

*************************pc2********************************
PC2> ip dhcp
DDORA IP 192.168.20.1/24 GW 192.168.20.254

PC2> ping 8.8.8.8
84 bytes from 8.8.8.8 icmp_seq=1 ttl=254 time=2.417 ms
84 bytes from 8.8.8.8 icmp_seq=2 ttl=254 time=1.803 ms
84 bytes from 8.8.8.8 icmp_seq=3 ttl=254 time=1.643 ms
84 bytes from 8.8.8.8 icmp_seq=4 ttl=254 time=1.972 ms
84 bytes from 8.8.8.8 icmp_seq=5 ttl=254 time=1.837 ms

***********************pc3**********************************
PC3> ip dhcp
DDORA IP 192.168.30.1/24 GW 192.168.30.254

PC3> ping 8.8.8.8
84 bytes from 8.8.8.8 icmp_seq=1 ttl=254 time=1.626 ms
84 bytes from 8.8.8.8 icmp_seq=2 ttl=254 time=2.229 ms
84 bytes from 8.8.8.8 icmp_seq=3 ttl=254 time=1.810 ms
84 bytes from 8.8.8.8 icmp_seq=4 ttl=254 time=3.009 ms
84 bytes from 8.8.8.8 icmp_seq=5 ttl=254 time=1.837 ms