25-Feb-2015
SAKURA Internet Research Center.
Senior Researcher / Naoto MATSUMOTO
Basic Ideas
L2TPv3 Tunnel termination over IPv6 network
How does it work?
Up to 9M L2TPv3 tunnels or 16M vSwitches
How to build it (CentOS7)
OSPFv3 & L2TPv3 Configuration
vSwitch(Bridge) Configuration
Check your L2TPv3 tunnel
# tcpdump -i eeaaaaaa1065530
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eeaaaaaa1065530, link-type EN10MB (Ethernet), ...
...178229 ARP, Request who-has 10.255.255.255 (Broadcast) ...
...179250 ARP, Request who-has 10.255.255.255 (Broadcast) ...
...180326 ARP, Request who-has 10.255.255.255 (Broadcast) ...
:
# arping 10.255.255.255 -I eeaaaaaa1065530
:
^C
Fast OSPFv3 Link Update
# vtysh
# configure terminal
# interface eth0
# ipv6 ospf6 hello-interval 1
# ipv6 ospf6 retransmit-interval 2
# ipv6 ospf6 dead-interval 3
# interface eth1
# ipv6 ospf6 hello-interval 1
# ipv6 ospf6 retransmit-interval 2
# ipv6 ospf6 dead-interval 3
:
# end
# write
# quit
# vtysh
# configure terminal
# interface eth0
# ipv6 ospf6 hello-interval 1
# ipv6 ospf6 retransmit-interval 2
# ipv6 ospf6 dead-interval 3
# interface eth1
# ipv6 ospf6 hello-interval 1
# ipv6 ospf6 retransmit-interval 2
# ipv6 ospf6 dead-interval 3
:
# end
# write
# quit
vSwitch High Availability
L2TPv3 Tunnel failover using OSPFv3 LSA update
L2TPv3 Tunnel kickstart script
#!/bin/bash
exec 2> /tmp/eeaaaaaa1065530.log
exec 1>&2
set -x
while true; do
sleep 10
ip l2tp add tunnel 
local fd50:eeaa:aaaa:ffff:eeaa:aaaa:106:5530 
remote fd50:d026:7eee:1001:eeaa:aaaa:106:5530 
tunnel_id 1065530 peer_tunnel_id 1065530 
udp_sport 1701 udp_dport 1701 encap udp
ip l2tp add session name eeaaaaaa1065530 
tunnel_id 1065530 session_id 1065530 
peer_session_id 1065530
nmcli device disconnect eeaaaaaa1065530
if [ $(/usr/sbin/ip link show | grep -o eeaaaaaa1065530 | wc -l ) -ne 0 ]; then
break
fi
done
exit 0
Thanks for your interset.
SAKURA Internet Research Center.

More Related Content

PDF
UNDOCUMENTED Vyatta vRouter: Unbreakable VPN Tunneling (MEMO)
PDF
Tiny Server Clustering using Vyatta/VyOS (MEMO)
PDF
Unbreakable VPN using Vyatta/VyOS - HOW TO -
PDF
An Easy way to build a server cluster without top of rack switches (MEMO)
PDF
Vyos clustering ipsec
PPTX
High Availability Server Clustering without ILB(Internal Load Balancer) (MEMO)
PDF
UNDOCUMENTED Vyatta vRouter: IPv4 over IPv6 Tunneling
PDF
IPv4 over IPv6 Tunneling with IPSec [DRAFT]
UNDOCUMENTED Vyatta vRouter: Unbreakable VPN Tunneling (MEMO)
Tiny Server Clustering using Vyatta/VyOS (MEMO)
Unbreakable VPN using Vyatta/VyOS - HOW TO -
An Easy way to build a server cluster without top of rack switches (MEMO)
Vyos clustering ipsec
High Availability Server Clustering without ILB(Internal Load Balancer) (MEMO)
UNDOCUMENTED Vyatta vRouter: IPv4 over IPv6 Tunneling
IPv4 over IPv6 Tunneling with IPSec [DRAFT]

What's hot (17)

PDF
VPNIPSec site to site
PDF
How to install OpenStack MITAKA --allinone - cheat sheet -
PDF
How to ride a 100GbE LAN -MEMO-
PDF
Configuring GRE Tunnel Through a Cisco ASA Firewall
PDF
VYATTAによるマルチパスVPN接続手法
PDF
Ip sec vpn with dynamic routing mikrotik and cisco - mikro-tik wiki
PDF
How to Cisco ACI Multi-Pod
PDF
Nxll14 cut through-proxy on asa
PDF
Site-to-Site IPSEC VPN Between Cisco ASA and Pfsense
PDF
Caso de estudio(ccna4)
PPT
Linux networking
PDF
SR-IOV, KVM and Intel X520 10Gbps cards on Debian/Stable
PDF
Westermo WeOS Multicast Tunneling
PDF
Nxll18 vpn (s2 s gre & dmvpn)
PDF
SSL Web VPN
PDF
Nxll09 access list
PDF
Eincop Netwax Lab: Site 2 Site VPN with Routing Protocols
VPNIPSec site to site
How to install OpenStack MITAKA --allinone - cheat sheet -
How to ride a 100GbE LAN -MEMO-
Configuring GRE Tunnel Through a Cisco ASA Firewall
VYATTAによるマルチパスVPN接続手法
Ip sec vpn with dynamic routing mikrotik and cisco - mikro-tik wiki
How to Cisco ACI Multi-Pod
Nxll14 cut through-proxy on asa
Site-to-Site IPSEC VPN Between Cisco ASA and Pfsense
Caso de estudio(ccna4)
Linux networking
SR-IOV, KVM and Intel X520 10Gbps cards on Debian/Stable
Westermo WeOS Multicast Tunneling
Nxll18 vpn (s2 s gre & dmvpn)
SSL Web VPN
Nxll09 access list
Eincop Netwax Lab: Site 2 Site VPN with Routing Protocols
Ad

Viewers also liked (9)

PDF
mmm... beacons
PDF
パブリッククラウドにおけるL2TPv3を用いたサーバ高可用性の評価
PDF
100GbE NICを使ったデータセンター・ネットワーク実証実験 -メモ-
PDF
[WIP] ネットワーク仮想化における仮想ネットワークインターフェイス冗長化の考察
PDF
デバイスとネットワーク仮想化を使ったワイヤレスネットワーク拡張の実証実験 -メモ-
PDF
大規模なスイッチレス・サーバクラスタリング構築運用の考察
PDF
データセンターを構成する最新ネットワーク技術動向
PDF
クラウド時代のネットワーク再入門
PDF
ネットワーク仮想化と設計図を考える
mmm... beacons
パブリッククラウドにおけるL2TPv3を用いたサーバ高可用性の評価
100GbE NICを使ったデータセンター・ネットワーク実証実験 -メモ-
[WIP] ネットワーク仮想化における仮想ネットワークインターフェイス冗長化の考察
デバイスとネットワーク仮想化を使ったワイヤレスネットワーク拡張の実証実験 -メモ-
大規模なスイッチレス・サーバクラスタリング構築運用の考察
データセンターを構成する最新ネットワーク技術動向
クラウド時代のネットワーク再入門
ネットワーク仮想化と設計図を考える
Ad

Similar to Large Scale L2TPv3 Overlay Networking with OSPFv3(DRAFT) (20)

PDF
CCN3Switching_lab_5_5_2
PDF
Ccnp3 lab 3_3_en
PPTX
Data centre networking at London School of Economics and Political Science - ...
PDF
VXLAN BGP EVPN: Technology Building Blocks
PDF
Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)
PDF
Xpress path vxlan_bgp_evpn_appricot2019-v2_
PDF
Open stack advanced_part
PDF
Exercise 4c stp rapid pvst+ question
PPTX
VXLAN Distributed Service Node
PDF
Securing & Enforcing Network Policy and Encryption with Weave Net
PDF
The Life of a Packet III - Service Mesh London
PDF
cisco-ws-c3850-48p-l-datasheet.pdf
PDF
Howto ethereal-wireshark-trace en
PDF
OpenNebulaConf2018 - Scalable L2 overlay networks with routed VXLAN / BGP EVP...
PPT
CCNA 2
PPT
Training Day Slides
PPTX
Transitioning IPv4 to IPv6
PDF
The Life of a Packet through Istio - DevExperience Romania, April 2019
PDF
cisco-ws-c3850-48f-l-datasheet.pdf
CCN3Switching_lab_5_5_2
Ccnp3 lab 3_3_en
Data centre networking at London School of Economics and Political Science - ...
VXLAN BGP EVPN: Technology Building Blocks
Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)
Xpress path vxlan_bgp_evpn_appricot2019-v2_
Open stack advanced_part
Exercise 4c stp rapid pvst+ question
VXLAN Distributed Service Node
Securing & Enforcing Network Policy and Encryption with Weave Net
The Life of a Packet III - Service Mesh London
cisco-ws-c3850-48p-l-datasheet.pdf
Howto ethereal-wireshark-trace en
OpenNebulaConf2018 - Scalable L2 overlay networks with routed VXLAN / BGP EVP...
CCNA 2
Training Day Slides
Transitioning IPv4 to IPv6
The Life of a Packet through Istio - DevExperience Romania, April 2019
cisco-ws-c3850-48f-l-datasheet.pdf

More from Naoto MATSUMOTO (20)

PDF
Alder Lake-S CPU Temperature Monitoring
PDF
CPU製品出荷状況と消費電力の見える化
PDF
5Gの見える化
PDF
2023年以降のサーバークラスタリング設計(メモ)
PDF
防災を考慮した水中調査の一考察
PDF
旅するパケットの見える化
PDF
LTE-M/NB IoTを試してみる nRF9160/Thingy:91
PDF
災害時における無線モニタリングによる社会インフラの見える化
PDF
BeautifulSoup / selenium Deep dive
PDF
AMDGPU ROCm Deep dive
PDF
Network Adapter Deep dive
PDF
RTL2838 DVB-T Deep dive
PDF
x86_64 Hardware Deep dive
PDF
ADS-B, AIS, APRS cheatsheet
PDF
curl --http3 cheatsheet
PDF
3/4G USB modem Cheat Sheet
PDF
How To Train Your ARM(SBC)
PDF
全国におけるCOVID-19対策の見える化 ~宿泊業の場合~
PDF
我が国の電波の使用状況/携帯電話向け割当 (2019年3月1日現在)
PDF
私たちに訪れる(かもしれない)未来と計算機によるモノコトの見える化
Alder Lake-S CPU Temperature Monitoring
CPU製品出荷状況と消費電力の見える化
5Gの見える化
2023年以降のサーバークラスタリング設計(メモ)
防災を考慮した水中調査の一考察
旅するパケットの見える化
LTE-M/NB IoTを試してみる nRF9160/Thingy:91
災害時における無線モニタリングによる社会インフラの見える化
BeautifulSoup / selenium Deep dive
AMDGPU ROCm Deep dive
Network Adapter Deep dive
RTL2838 DVB-T Deep dive
x86_64 Hardware Deep dive
ADS-B, AIS, APRS cheatsheet
curl --http3 cheatsheet
3/4G USB modem Cheat Sheet
How To Train Your ARM(SBC)
全国におけるCOVID-19対策の見える化 ~宿泊業の場合~
我が国の電波の使用状況/携帯電話向け割当 (2019年3月1日現在)
私たちに訪れる(かもしれない)未来と計算機によるモノコトの見える化

Recently uploaded (20)

PDF
The influence of sentiment analysis in enhancing early warning system model f...
PDF
A contest of sentiment analysis: k-nearest neighbor versus neural network
PPTX
AI IN MARKETING- PRESENTED BY ANWAR KABIR 1st June 2025.pptx
PPTX
The various Industrial Revolutions .pptx
PDF
STKI Israel Market Study 2025 version august
PDF
sbt 2.0: go big (Scala Days 2025 edition)
PDF
sustainability-14-14877-v2.pddhzftheheeeee
PDF
How ambidextrous entrepreneurial leaders react to the artificial intelligence...
PDF
Produktkatalog für HOBO Datenlogger, Wetterstationen, Sensoren, Software und ...
PPT
What is a Computer? Input Devices /output devices
PDF
CloudStack 4.21: First Look Webinar slides
DOCX
search engine optimization ppt fir known well about this
PPTX
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
PDF
Flame analysis and combustion estimation using large language and vision assi...
PDF
Developing a website for English-speaking practice to English as a foreign la...
PDF
Five Habits of High-Impact Board Members
PDF
Hindi spoken digit analysis for native and non-native speakers
PDF
Abstractive summarization using multilingual text-to-text transfer transforme...
PPTX
Configure Apache Mutual Authentication
PDF
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
The influence of sentiment analysis in enhancing early warning system model f...
A contest of sentiment analysis: k-nearest neighbor versus neural network
AI IN MARKETING- PRESENTED BY ANWAR KABIR 1st June 2025.pptx
The various Industrial Revolutions .pptx
STKI Israel Market Study 2025 version august
sbt 2.0: go big (Scala Days 2025 edition)
sustainability-14-14877-v2.pddhzftheheeeee
How ambidextrous entrepreneurial leaders react to the artificial intelligence...
Produktkatalog für HOBO Datenlogger, Wetterstationen, Sensoren, Software und ...
What is a Computer? Input Devices /output devices
CloudStack 4.21: First Look Webinar slides
search engine optimization ppt fir known well about this
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
Flame analysis and combustion estimation using large language and vision assi...
Developing a website for English-speaking practice to English as a foreign la...
Five Habits of High-Impact Board Members
Hindi spoken digit analysis for native and non-native speakers
Abstractive summarization using multilingual text-to-text transfer transforme...
Configure Apache Mutual Authentication
From MVP to Full-Scale Product A Startup’s Software Journey.pdf

Large Scale L2TPv3 Overlay Networking with OSPFv3(DRAFT)

  • 1. 25-Feb-2015 SAKURA Internet Research Center. Senior Researcher / Naoto MATSUMOTO
  • 2. Basic Ideas L2TPv3 Tunnel termination over IPv6 network
  • 3. How does it work? Up to 9M L2TPv3 tunnels or 16M vSwitches
  • 4. How to build it (CentOS7)
  • 5. OSPFv3 & L2TPv3 Configuration
  • 7. Check your L2TPv3 tunnel # tcpdump -i eeaaaaaa1065530 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eeaaaaaa1065530, link-type EN10MB (Ethernet), ... ...178229 ARP, Request who-has 10.255.255.255 (Broadcast) ... ...179250 ARP, Request who-has 10.255.255.255 (Broadcast) ... ...180326 ARP, Request who-has 10.255.255.255 (Broadcast) ... : # arping 10.255.255.255 -I eeaaaaaa1065530 : ^C
  • 8. Fast OSPFv3 Link Update # vtysh # configure terminal # interface eth0 # ipv6 ospf6 hello-interval 1 # ipv6 ospf6 retransmit-interval 2 # ipv6 ospf6 dead-interval 3 # interface eth1 # ipv6 ospf6 hello-interval 1 # ipv6 ospf6 retransmit-interval 2 # ipv6 ospf6 dead-interval 3 : # end # write # quit # vtysh # configure terminal # interface eth0 # ipv6 ospf6 hello-interval 1 # ipv6 ospf6 retransmit-interval 2 # ipv6 ospf6 dead-interval 3 # interface eth1 # ipv6 ospf6 hello-interval 1 # ipv6 ospf6 retransmit-interval 2 # ipv6 ospf6 dead-interval 3 : # end # write # quit
  • 9. vSwitch High Availability L2TPv3 Tunnel failover using OSPFv3 LSA update
  • 10. L2TPv3 Tunnel kickstart script #!/bin/bash exec 2> /tmp/eeaaaaaa1065530.log exec 1>&2 set -x while true; do sleep 10 ip l2tp add tunnel local fd50:eeaa:aaaa:ffff:eeaa:aaaa:106:5530 remote fd50:d026:7eee:1001:eeaa:aaaa:106:5530 tunnel_id 1065530 peer_tunnel_id 1065530 udp_sport 1701 udp_dport 1701 encap udp ip l2tp add session name eeaaaaaa1065530 tunnel_id 1065530 session_id 1065530 peer_session_id 1065530 nmcli device disconnect eeaaaaaa1065530 if [ $(/usr/sbin/ip link show | grep -o eeaaaaaa1065530 | wc -l ) -ne 0 ]; then break fi done exit 0
  • 11. Thanks for your interset. SAKURA Internet Research Center.