Verifying a VPN Configuration

To verify the connectivity of Layer 2 VPNs, Layer 3 VPNs, and Layer 2 circuits, use the ping mpls command. This command helps to verify that a VPN or circuit has been enabled. This command tests the integrity of the VPN or Layer 2 circuit connection between the PE Services Routers. It does not test the connection between a PE and a CE Services Router.

This section contains the following topics:

• Pinging a Layer 2 VPN
• Pinging a Layer 3 VPN
• Pinging a Layer 2 Circuit

Pinging a Layer 2 VPN

To ping a Layer 2 VPN, use one of the following commands:

• ping mpls l2vpn interfaceinterface-name

  Ping an interface configured for the Layer 2 VPN on the PE router.

• ping mpls l2vpn instance l2vpn-instance-name local-site-idlocal-site-id-number remote-site-idremote-site-id-number

  Ping a combination of the Layer 2 VPN routing instance name, the local site identifier, and the remote site identifier to test the integrity of the Layer 2 VPN connection (specified by identifiers) between the two PE Services Routers.

Pinging a Layer 3 VPN

To ping a Layer 3 VPN, use the following command:

ping mpls l3vpn l3vpn-nameprefixprefix <count count>

Ping a combination of a IPv4 destination prefix and a Layer 3 VPN name on the destination PE Services Router to test the integrity of the VPN connection between the source and destination Services Routers. The destination prefix corresponds to a prefix in the Layer 3 VPN. However, ping tests only whether the prefix is present in a PE VRF table.

Pinging a Layer 2 Circuit

To ping a Layer 2 circuit, use one of the following commands:

• ping mpls l2circuit interfaceinterface-name

  Ping an interface configured for the Layer 2 circuit on the PE Services Router.

• ping mpls l2circuit virtual-circuit<prefix> <virtual-circuit-id>

  Ping a combination of the IPv4 prefix and the virtual circuit ID on the destination PE Services Router to test the integrity of the Layer 2 circuit between the source and destination Services Routers.