Sign in Subscribe
CCNP-ENCOR

Understanding LISP for Network Virtualization

Explores LISP (Locator/ID Separation Protocol) architecture and its role in network virtualization, covering EID/RLOC separation, infrastructure components, and enterprise benefits for scalability and mobility.

Jay Whale

• 3 min read
Understanding LISP for Network Virtualization

Locator/ID Separation Protocol (LISP) represents a fundamental shift in how we approach network addressing and virtualization. As enterprise networks grow increasingly complex with cloud migrations, data center consolidations, and mobility requirements, LISP provides an elegant solution to the scalability and flexibility challenges that traditional IP addressing creates.

The Core Problem LISP Solves

Traditional IP addressing serves dual purposes: identifying a host (identity) and determining its location in the network (routing locator). This dual role creates significant challenges in modern networks. When devices move between subnets, they must change IP addresses, breaking application sessions. Multi-homing becomes complex, and the global routing table continues to grow unsustainably.

LISP architecture fundamentally separates these two functions. Endpoint Identifiers (EIDs) provide device identity, remaining constant regardless of location, while Routing Locators (RLOCs) indicate topological location in the network infrastructure.

LISP Architecture Components

Understanding LISP requires grasping its key architectural elements and their interactions:

Endpoint Identifier (EID) Space

EIDs represent the devices and subnets that require connectivity. These addresses remain static from the application perspective, enabling seamless mobility and multi-homing. EID prefixes are typically allocated from private address space or dedicated blocks that don't appear in the global routing table.

Routing Locator (RLOC) Space

RLOCs identify the network attachment points where EIDs can be reached. These addresses exist in the traditional IP routing infrastructure and must be routable through the underlying network. A single EID prefix can be mapped to multiple RLOCs, enabling load balancing and redundancy.

LISP Infrastructure Components

The LISP architecture relies on several specialized devices:

  • Ingress Tunnel Router (ITR): Encapsulates packets from EID sources destined for remote EIDs
  • Egress Tunnel Router (ETR): Decapsulates packets and forwards them to local EIDs
  • Proxy ITR (PITR): Handles traffic from non-LISP sites to LISP sites
  • Proxy ETR (PETR): Manages traffic from LISP sites to non-LISP destinations
  • Map Server (MS): Accepts EID-to-RLOC mappings from ETRs
  • Map Resolver (MR): Processes mapping requests from ITRs

Mapping System Operation

The mapping system forms the heart of LISP functionality. When an ITR needs to send traffic to a remote EID, it queries the mapping system to discover the appropriate RLOCs. This process involves several steps:

ITR# show ip lisp map-cache
LISP IPv4 Mapping Cache for EID-table default (IID 0), 2 entries

10.1.1.0/24, uptime: 00:15:23, expires: 23:44:37, via map-reply
  Locator  Uptime    State      Pri/Wgt
  192.168.1.1  00:15:23  up        1/100
  192.168.1.2  00:15:23  up        2/100

The mapping cache shows how EID prefixes map to RLOCs, including priority and weight values used for traffic engineering.

LISP Benefits in Network Design

Enhanced Mobility and Multi-homing

LISP network virtualization enables true device mobility without breaking sessions. When a subnet moves between data centers, only the EID-to-RLOC mapping changes while applications maintain connectivity using consistent EIDs. This capability is particularly valuable for data center migrations and disaster recovery scenarios.

Improved Scalability

By aggregating EID prefixes at LISP sites and using RLOCs for inter-site connectivity, LISP dramatically reduces routing table size in core networks. Service providers can aggregate customer prefixes more effectively, while enterprises gain better control over their address space utilization.

Traffic Engineering Flexibility

LISP provides granular traffic engineering capabilities through RLOC priority and weight values. Network administrators can influence traffic paths per EID prefix, enabling sophisticated load balancing and path selection policies.

Example statistics output:

router# show ip lisp statistics
LISP Statistics - last cleared: never
Control Packets:
  Map-Requests in/out:                    245/189
  Map-Replies in/out:                     189/245
  Map-Registers in/out:                   156/0
  Map-Notify in/out:                      78/0

Data Packets:
  Encapsulated in/out:                    45623/52341
  Decapsulated in/out:                    52341/45623

Implementation Considerations

Deploying LISP requires careful planning around several key areas.

The mapping system must be highly available and properly distributed to avoid single points of failure. Network design should account for the overhead introduced by LISP encapsulation, typically 36 bytes for IPv4-over-IPv4 tunneling.

Integration with existing network services also requires attention. Features such as quality of service, security policies, and monitoring tools must understand LISP operations to function correctly. Many organizations start with pilot deployments in specific network segments before expanding to broader implementations.

Troubleshooting LISP Operations

LISP troubleshooting requires understanding both the mapping system and the data plane. Key verification commands include:

router# show ip lisp forwarding eid local
router# show ip lisp map-resolver 
router# debug ip lisp control-plane all

Common issues typically involve:

  • Mapping system connectivity
  • RLOC reachability
  • MTU considerations due to encapsulation overhead

What’s Next

With LISP fundamentals established, the next logical step is Software-Defined Access (SD-Access), which leverages LISP as a core component for campus fabric virtualization.

SD-Access builds upon LISP concepts to create policy-driven, automated network segmentation, addressing modern enterprise security and operational requirements.

CCNP ENCOR study resources