Layer 3 Virtual Private Networks (l3vpn) ---------------------------------------- Charter Last Modified: 2009-10-07 Current Status: Active Working Group Chair(s): Marshall Eubanks Danny McPherson Ben Niven-Jenkins Routing Area Director(s): Ross Callon Adrian Farrel Routing Area Advisor: Ross Callon Secretary(ies): Daniel King Mailing Lists: General Discussion:l3vpn@ietf.org To Subscribe: https://www.ietf.org/mailman/listinfo/l3vpn Archive: http://www.ietf.org/mail-archive/web/l3vpn/current/maillist.html Description of Working Group: This working group is responsible for defining and specifying a limited number of solutions for supporting provider-provisioned Layer-3 (routed) Virtual Private Networks (L3VPNs). The WG is responsible for standardization of the following solutions: 1. BGP/MPLS IP VPNs (based on RFC 2547) 2. IP VPNs using Virtual Routers 3. CE-based VPNs using IPsec The following VPN deployment scenarios will be considered by the WG: 1. Internet-wide: VPN sites attached to arbitrary points in the Internet 2. Single service provider (SP)/single AS: VPN sites attached to the network of a single provider within the scope of a single AS 3. Single SP/multiple AS'es: VPN sites attached to the network of a single provider consisting of multiple AS'es 4. Cooperating SPs: VPN sites attached to networks of different providers that cooperate with each other to provide VPN service The WG will address deployment of the following features in a VPN environment: 1. IP Multicast 2. IPv6 As part of this effort the WG will work on the following tasks (additional work items will require rechartering): 1. Requirements and framework for Layer 3 VPNs 2. Solution documents for each approach listed above (including applicability statements) 3. MIB definitions for each approach 4. Security mechanisms for each approach As a general rule, the WG will not create new protocols, but will provide functional requirements for extensions of the existing protocols that will be discussed in the protocol-specific WGs. L3VPN WG will review proposed protocol extensions for L3VPNs before they are recommended to appropriate protocol-specific WGs. As stated above, the WG will define an IPv6 over BGP / MPLS VPN solution. This will include a forwarding plane component and a control plane component. In the forwarding plane, IPv6 datagrams will be encapsulated within an MPLS header. If any aspect of IPv6 forwarding over MPLS is as yet undefined, the L3VPN WG will defer to the MPLS and appropriate IPv6 WGs. On the control plane, BGP extensions may also need to be defined. In this respect, the L3VPN WG will defer to the IDR and appropriate IPv6 WGs. QoS support is excluded from the charter at this time. It may be considered for inclusion in an updated charter at a later time. Future work items may also include OAM support. Goals and Milestones: Done Submit L3 VPN Requirements Document to IESG for publication as Info Done Submit Generic Requirements Document to IESG for publication as Info Done Submit L3 VPN Framework Document to IESG for publication as Info Done Submit VPN Security Analysis to IESG for publication as Info (draft-fang-ppvpn-security-framework-00) Done Submit BGP/MPLS VPNs specification and AS to IESG for publication as PS (draft-ietf-ppvpn-rfc2547bis-03, draft-ietf-ppvpn-as2547-01) Done Submit CE-based specification and AS to IESG for publication as PS (draft-ietf-ppvpn-ce-based-03, draft-declercq-ppvpn-ce-based-sol-00, draft-declercq-ppvpn-ce-based-as-01) Done Submit Virtual Router specification and AS to IESG for publication as PS (draft-ietf-ppvpn-vpn-vr-03, draft-ietf-ppvpn-as-vr-01) Done Submit BGP as an Auto-Discovery Mechanism for publication as PS (draft-ietf-ppvpn-bgpvpn-auto-05.txt) Done Submit specification of using GRE for PE-PE encapsulation in BGP/MPLS VPNs to IESG for publication as PS (draft-ietf-ppvpn-gre-ip-2547-02) Done Submit VPN MIB Textual Conventions to IESG for publication as PS (draft-ietf-ppvpn-tc-mib-02) Done Submit MPLS/BGP VPN MIB to IESG for publication as PS (draft-ietf-ppvpn-mpls-vpn-mib-05) Done Submit VR MIB to IESG for publication as PS (draft-ietf-ppvpn-vr-mib-04) Done Submit specification of using IPSEC for PE-PE encapsulation in BGP/MPLS VPNs to IESG for publication as PS (draft-ietf-ppvpn-ipsec-2547-03) Done Submit specification of OSPF as the PE/CE Protocol in BGP/MPLS VPNs for publication (draft-ietf-l3vpn-ospf-2547-xx.txt) Done Submit specification of IPv6 over BGP/MPLS VPNs for publication Feb 2008 Submit specification of IPv4 multicast over BGP/MPLS VPNs for publication Internet-Drafts: Posted Revised I-D Title ------ ------- -------------------------------------------- Jun 2005 Jan 2010 Multicast in MPLS/BGP IP VPNs Aug 2006 Sep 2009 BGP Encodings and Procedures for Multicast in MPLS/BGP IP VPNs Apr 2008 Dec 2009 Requirements for supporting Customer RSVP and RSVP-TE over a BGP/MPLS IP-VPN Oct 2008 Nov 2009 OSPFv3 as a PE-CE routing protocol Nov 2008 Feb 2010 Mandatory Features in a Layer 3 Multicast BGP/MPLS VPN Solution Request For Comments: RFC Stat Published Title ------- -- ----------- ------------------------------------ RFC3809 I Jun 2004 Generic Requirements for Provider Provisioned Virtual Private Networks RFC4026 I Mar 2005 Provider Provisioned Virtual Private Network (VPN) Terminology RFC4031 I Apr 2005 Service requirements for Layer 3 Provider Provisioned Virtual Private Networks RFC4110 I Jul 2005 A Framework for Layer 3 Provider Provisioned Virtual Private Networks (PPVPNs) RFC4111 I Jul 2005 Security Framework for Provider Provisioned Virtual Private Networks (PPVPNs) RFC4176 I Oct 2005 Framework for Layer 3 Virtual Private Networks (L3VPN) Operations and Management RFC4265Standard Dec 2005 Definition of Textual Conventions for Virtual Private Network (VPN) Management RFC4365 I Feb 2006 Applicability Statement for BGP/MPLS IP Virtual Private Networks (VPNs) RFC4364Standard Feb 2006 BGP/MPLS IP Virtual Private Networks (VPNs) RFC4382Standard Feb 2006 MPLS/BGP Layer 3 Virtual Private Network (VPN) Management Information Base RFC4577 PS Jun 2006 OSPF as the Provider/Customer Edge Protocol for BGP/MPLS IP Virtual Private Networks (VPNs) RFC4659 PS Sep 2006 BGP-MPLS IP Virtual Private Network (VPN) Extension for IPv6 VPN RFC4684 PS Nov 2006 Constrained Route Distribution for Border Gateway Protocol/MultiProtocol Label Switching (BGP/MPLS) Internet Protcol (IP) Virtual Private Networks (VPNs) RFC4797 I Jan 2007 Use of Provider Edge to Provider Edge (PE-PE) Generic Routing Encapsulation (GRE) or IP in BGP/MPLS IP Virtual Private Networks RFC4834 I Apr 2007 Requirements for Multicast in Layer 3 Provider-Provisioned Virtual Private (PPVPNs) RFC5668 PS Oct 2009 4-Octet AS Specific BGP Extended Community RFC5701 PS Nov 2009 IPv6 Address Specific BGP Extended Communities Attribute