Implementing Virtual Private LAN Services

Transcription

1 Implementing Virtual Private LAN Services This module provides the conceptual and configuration infmation f Virtual Private LAN Services (VPLS) on Cisco IOS XR software. VPLS suppts Layer 2 VPN technology and provides transparent multipoint Layer 2 connectivity f customers. This approach enables service providers to host a multitude of new services such as broadcast TV, Layer 2 VPNs. F MPLS Layer 2 virtual private netwks (VPNs), see Implementing MPLS Layer 2 VPNs module. Note F me infmation about MPLS Layer 2 VPN on Cisco IOS XR software and f descriptions of the commands listed in this module, see the Related Documents section. To locate documentation f other commands that might appear while executing a configuration task, search online in the Cisco IOS XR software master command index. Feature Histy f Implementing Virtual Private LAN Services on Cisco IOS XR Configuration Module Release Release Release Release 4.0 Release Modification This feature was introduced. Suppt f the bridging funtionality feature (VPLS based) and pseudowire redundancy was added. The following features were added: Blocking unknown unicast flooding. Disabling MAC flush. The following features were added: H-VPLS with MPLS Access pseudowire H-VPLS with Ethernet Access MAC Address withdrawal Suppt f the BGP Autodiscovery with LDP Signaling feature was added. VPC-45

2 Contents Implementing Virtual Private LAN Services Contents Befe you configure VPLS, ensure that the netwk is configured as follows:, page VPC-46 Restrictions f Implementing Virtual Private LAN Services, page VPC-46 Infmation About Implementing Virtual Private LAN Services, page VPC-47 How to Implement Virtual Private LAN Services, page VPC-57 Configuration Examples f Virtual Private LAN Services, page VPC-106 Additional References, page VPC-116 Prerequisites f Implementing Virtual Private LAN Services Befe you configure VPLS, ensure that the netwk is configured as follows: To perfm these configuration tasks, your Cisco IOS XR software system administrat must assign you to a user group associated with a task group that includes the cresponding command task IDs. All command task IDs are listed in individual command references and in the Cisco IOS XR Task ID Reference Guide. If you need assistance with your task group assignment, contact your system administrat. Configure IP routing in the ce so that the provider edge (PE) routers can reach each other through IP. Configure MPLS and Label Distribution Protocol (LDP) in the ce so that a label switched path (LSP) exists between the PE routers. Configure a loopback interface to iginate and terminate Layer 2 traffic. Make sure that the PE routers can access the other router's loopback interface. Note The loopback interface is not needed in all cases. F example, tunnel selection does not need a loopback interface when VPLS is directly mapped to a TE tunnel. Restrictions f Implementing Virtual Private LAN Services The following restrictions are listed f implementing VPLS: All attachment circuits in a bridge domain on an Engine 3 line card must be the same type (f example, pt, dot1q, qinq, qinany), value (VLAN ID), and EtherType (f example, 0x8100, 0x9100, 0x9200). The Cisco CRS-1 router suppts multiple types of attachment circuits in a bridge domain. The line card requires ternary content addressable memy (TCAM) Carving configuration. The Cisco CRS-1 router however, does not require the TCAM Carving configuration. Virtual Fwarding Instance (VFI) names have to be unique, because a bridge domain can have only one VFI. A PW cannot belong to both a peer-to-peer (P2P) cross-connect group and a VPLS bridge-domain. This means that the neighbing IP address and the pseudowire ID have to be unique on the router, because the pseudowire ID is signaled to the remote provider edge. VPC-46

3 Implementing Virtual Private LAN Services Infmation About Implementing Virtual Private LAN Services F the Engine 5 line card, version 1 of the Ethernet SPA does not suppt QinQ mode and QinAny mode. Note F the Engine 5 line card, version 2 of the Ethernet SPA suppts all VLAN modes, such as VLAN mode, QinQ mode, QinAny mode. The Cisco CRS-1 router suppts only the Ethernet pt mode and the 802.1q VLAN mode. Infmation About Implementing Virtual Private LAN Services To implement Virtual Private LAN Services (VPLS), you should understand the following concepts: Virtual Private LAN Services Overview, page VPC-47 VPLS f an MPLS-based Provider Ce, page VPC-48 Hierarchical VPLS, page VPC-48 VPLS Discovery and Signaling, page VPC-50 Bridge Domain, page VPC-53 MAC Address-related Parameters, page VPC-53 LSP Ping over VPWS and VPLS, page VPC-55 Pseudowire Redundancy f P2P AToM Cross-Connects, page VPC-56 Virtual Private LAN Services Overview Virtual Private LAN Service (VPLS) enables geographically separated local-area netwk (LAN) segments to be interconnected as a single bridged domain over an MPLS netwk. The full functions of the traditional LAN such as MAC address learning, aging, and switching are emulated across all the remotely connected LAN segments that are part of a single bridged domain. A service provider can offer VPLS service to multiple customers over the MPLS netwk by defining different bridged domains f different customers. Packets from one bridged domain are never carried over delivered to another bridged domain, thus ensuring the privacy of the LAN service. VPLS transpts Ethernet 802.3, VLAN 802.1q, and VLAN-in-VLAN (Q-in-Q) traffic across multiple sites that belong to the same Layer 2 broadcast domain. VPLS offers simple Virtual LAN services that include flooding broadcast, multicast, and unknown unicast frames that are received on a bridge. The VPLS solution requires a full mesh of pseudowires that are established among provider edge (PE) routers. The VPLS implementation is based on Label Distribution Protocol (LDP)-based pseudowire signaling. A VFI is a virtual bridge pt that is capable of perfming native bridging functions, such as fwarding, based on the destination MAC address, source MAC address learning and aging. After provisioning attachment circuits, neighb relationships across the MPLS netwk f this specific instance are established through a set of manual commands identifying the end PEs. When the neighb association is complete, a full mesh of pseudowires is established among the netwk-facing provider edge devices, which is a gateway between the MPLS ce and the customer domain. The service provider netwk starts switching the packets within the bridged domain specific to the customer by looking at destination MAC addresses. All traffic with unknown, broadcast, and multicast destination MAC addresses is flooded to all the connected customer edge devices, which connect to the VPC-47

4 Infmation About Implementing Virtual Private LAN Services Implementing Virtual Private LAN Services service provider netwk. The netwk-facing provider edge devices learn the source MAC addresses as the packets are flooded. The traffic is unicasted to the customer edge device f all the learned MAC addresses. VPLS requires the provider edge device to be MPLS-capable. The VPLS provider edge device holds all the VPLS fwarding MAC tables and Bridge Domain infmation. In addition, it is responsible f all flooding broadcast frames and multicast replications. Note VPLS with Traffic Engineering Fast Reroute (TE FRR) is not suppted. VPLS f an MPLS-based Provider Ce VPLS is a multipoint Layer 2 VPN technology that connects two me customer devices using bridging techniques. The VPLS architecture allows f the end-to-end connection between the Provider Edge (PE) routers to provide Multipoint Ethernet Services. VPLS requires the creation of a bridge domain (Layer 2 broadcast domain) on each of the PE routers. The access connections to the bridge domain on a PE router are called attachment circuits (AC). The attachment circuits can be a set of physical pts, virtual pts, both that are connected to the bridge at each PE device in the netwk. The MPLS/IP provider ce simulates a virtual bridge that connects the multiple attachment circuits on each of the PE devices together to fm a single broadcast domain. A VFI is created on the PE router f each VPLS instance. The PE routers make packet-fwarding decisions by looking up the VFI of a particular VPLS instance. The VFI acts like a virtual bridge f a given VPLS instance. Me than one attachment circuit belonging to a given VPLS are connected to the VFI. The PE router establishes emulated VCs to all the other PE routers in that VPLS instance and attaches these emulated VCs to the VFI. Packet fwarding decisions are based on the data structures maintained in the VFI. Hierarchical VPLS Hierarchical VPLS (H-VPLS) is an extension of basic VPLS that provides scaling and operational benefits. H-VPLS provides a solution to deliver Ethernet multipoint services over MPLS. H-VPLS partitions a netwk into several edge domains that are interconnected using an MPLS ce. The use of Ethernet switches at the edge offers significant technical and economic advantages. H-VPLS also allows Ethernet point-to-point and multipoint Layer 2 VPN services, as well as Ethernet access to high-speed Internet and IP VPN services. Two flavs of H-VPLS are: Ethernet access in the edge domain MPLS access in the edge domain H-VPLS with Ethernet Access QinQ QinAny Figure 8 shows Ethernet access f H-VPLS. The edge domain can be built using Ethernet switches and techniques such as QinQ. Using Ethernet as the edge technology simplifies the operation of the edge domain and reduces the cost of the edge devices. VPC-48

5 Implementing Virtual Private LAN Services Infmation About Implementing Virtual Private LAN Services Figure 8 Ethernet Access f H-VPLS CE1 U-PE1 QinQ/QinAny ACs Ce PWs N-PE2 Ethernet Access Netwk N-PE1 VPLS Ce Netwk CE2 U-PE2 N-PE H-VPLS with PW-access Figure 9 shows pseudowire (PW) access f H-VPLS. The edge domain can be an MPLS access netwk. In this scenario, the U-PE device carries the customer traffic from attachment circuits (AC) over the point to point (p2p) pseudowires. The p2p pseudowires terminate in a bridge domain configured on the N-PE device. Access PW is configured as a member directly under a bridge domain. A bridge-domain in N-PE1 can have multiple ACs (physical/vlan Ethernet pts), multiple access PWs and one VFI (consisting of ce PWs) as members, is depicted in Figure 9. Figure 9 PW access f H-VPLS P2P AC1 CE1 U-PE1 N-PE2 Ethernet Access Netwk N-PE1 VPLS Ce Netwk CE2 U-PE2 P2P AC2 Ethernet AC N-PE3 CE Access PWs/P2P Ce PWs VPC-49

6 Infmation About Implementing Virtual Private LAN Services Implementing Virtual Private LAN Services VPLS Discovery and Signaling VPLS is a Layer 2 multipoint service and it emulates a LAN service across a WAN. VPLS enables service providers to interconnect several LAN segments over a packet-switched netwk and make them behave as a single LAN. Service providers can provide a native Ethernet access connection to customers using VPLS. The VPLS control plane consists of two imptant components, autodiscovery and signaling: VPLS Autodiscovery eliminates the need to manually provision VPLS neighbs. VPLS Autodiscovery enables each VPLS PE router to discover other provider edge (PE) routers that are part of the same VPLS domain. Once the PEs are discovered, pseudowires (PWs) are signaled and established across pairs of PE routers, fming a full mesh of PWs across PE routers in a VPLS domain. Figure 10 VPLS Autodiscovery and Signaling L2-VPN Discovery Multipoint BGP Signaling Protocol LDP BGP Tunneling Protocol MPLS BGP-based VPLS Autodiscovery An imptant aspect of VPN technologies, including VPLS, is the ability of netwk devices to automatically signal infmation to other devices, about any association with a particular VPN. Autodiscovery requires this infmation to be distributed to all members of a VPN. VPLS is a multipoint mechanism f which BGP is well-suited. BGP-based VPLS autodiscovery eliminates the need to manually provision VPLS neighbs. VPLS autodiscovery enables each VPLS PE router to discover other provider edge (PE) routers that are part of the same VPLS domain. VPLS Autodiscovery also tracks occurrences when PE routers are added to, removed from, the VPLS domain. When the discovery process is complete, each PE router has the infmation required to setup VPLS pseudowires (PWs). BGP Auto Discovery With BGP Signaling The implementation of VPLS in a netwk requires the establishment of a full mesh of PWs between the provider edge (PE) routers. The PWs can be signaled using BGP signaling. VPC-50

7 Implementing Virtual Private LAN Services Infmation About Implementing Virtual Private LAN Services Figure 11 Discovery and Signaling Attributes Label Signaling BGP CE1 PE1 PE2 CE2 MPLS Ce Tunnel LSP = LDP Payload BGP VC Label LDP IGP Label Traffic Flow The BGP signaling and autodiscovery scheme has these components: A means by which a PE can learn which remote PEs are members of a given VPLS. This process is known as autodiscovery. A means by which a PE can learn about the pseudowire label that is expected by a given remote PE f a given VPLS. This process is known as signaling. The BGP Netwk Layer Reachability Infmation (NLRI) takes care of both these components simultaneously. The NLRI generated by a given PE contains necessary infmation required by other PEs. These components enable the automatic setup of a full mesh of pseudowires f each VPLS, without having to manually configure those pseudowires on each PE. NLRI Fmat f VPLS with BGP AD and Signaling Figure 12 shows the NLRI fmat f VPLS with BGP AD and Signaling. Figure 12 NLRI Fmat Length (2 octets) Route Distinguisher (8 octets) VE ID (2 octets) VE Block Offset (2 octets) VE Block Size (2 octets) Label Base (3 octets) BGP Auto Discovery With LDP Signaling Signaling of pseudowires requires exchange of infmation between two endpoints. Label Distribution Protocol (LDP) is better suited f point-to-point signaling. The signaling of pseudowires, between provider edge devices, uses targeted LDP sessions to exchange label values and attributes, and configure the pseudowires. VPC-51

8 Infmation About Implementing Virtual Private LAN Services Implementing Virtual Private LAN Services Figure 13 Discovery and Signaling Attributes Label Signaling LDP CE1 PE1 PE2 CE2 MPLS Ce Tunnel LSP = LDP Payload LDP VC Label LDP IGP Label Traffic Flow A PE router advertises an identifier through BGP f each VPLS instance. This identifier is unique within the VPLS instance and acts like a VPLS ID. The identifier enables the PE router, receiving the BGP advertisement, to identify the VPLS associated with the advertisement, and impt it to the crect VPLS instance. In this manner, f each VPLS, a PE router learns which other PE routers are members of the VPLS. The LDP protocol is used to configure a pseudowire to all other PE routers. The FEC 129 standard is used f signaling. The infmation carried by FEC 129 includes the VPLS ID, the Target Attachment Individual Identifier (TAII) and the Source Attachment Individual Identifier (SAII). The LDP advertisement also contains the inner label VPLS label that is expected f incoming traffic over the pseudowire. This enables the LDP peer to identify the VPLS instance with which the pseudowire is to be associated, and the label value that it is expected to use when sending traffic on that pseudowire. NLRI and Extended Communities Figure 12 depicts NLRI and extended communities. Figure 14 NLRI and Extended Communities NLRI: Length (2 octets) Route Distinguisher (8 octets) L2VPN Router ID (4 octets) Ext Comms: VPLS-ID (8 octets) Route Target (8 octets) VPC-52

9 Implementing Virtual Private LAN Services Infmation About Implementing Virtual Private LAN Services Bridge Domain The native bridge domain refers to a Layer 2 broadcast domain consisting of a set of physical virtual pts (including VFI). Data frames are switched within a bridge domain based on the destination MAC address. Multicast, broadcast, and unknown destination unicast frames are flooded within the bridge domain. In addition, the source MAC address learning is perfmed on all incoming frames on a bridge domain. A learned address is aged out. Incoming frames are mapped to a bridge domain, based on either the ingress pt a combination of both an ingress pt and a MAC header field. By default, split hizon is enabled on a bridge domain. In other wds, any packets that are coming on either the attachment circuits pseudowires are not returned on the same attachment circuits pseudowires. In addition, the packets that are received on one pseudowire are not replicated on other pseudowires in the same VFI. MAC Address-related Parameters MAC Address Flooding The MAC address table contains a list of the known MAC addresses and their fwarding infmation. In the current VPLS design, the MAC address table and its management are distributed. In other wds, a copy of the MAC address table is maintained on the route process (RP) card and the line cards. These topics provide infmation about the MAC address-related parameters: MAC Address Flooding, page VPC-53 MAC Address-based Fwarding, page VPC-53 MAC Address Source-based Learning, page VPC-54 MAC Address Aging, page VPC-54 MAC Address Limit, page VPC-54 MAC Address Withdrawal, page VPC-55 Ethernet services require that frames that are sent to broadcast addresses and to unknown destination addresses be flooded to all pts. To obtain flooding within VPLS broadcast models, all unknown unicast, broadcast, and multicast frames are flooded over the cresponding pseudowires and to all attachment circuits. Therefe, a PE must replicate packets across both attachment circuits and pseudowires. MAC Address-based Fwarding To fward a frame, a PE must associate a destination MAC address with a pseudowire attachment circuit. This type of association is provided through a static configuration on each PE through dynamic learning, which is flooded to all bridge pts. Note In this case, split hizon fwarding applies; f example, frames that are coming in on an attachment circuit pseudowire are not sent out of the same attachment circuit pseudowire. The pseudowire frames, which are received on one pseudowire, are replicated on to other attachment circuits, VFI pseudowires and access pseudowires. VPC-53

10 Infmation About Implementing Virtual Private LAN Services Implementing Virtual Private LAN Services MAC Address Source-based Learning MAC Address Aging MAC Address Limit When a frame arrives on a bridge pt (f example, pseudowire attachment circuit) and the source MAC address is unknown to the receiving PE router, the source MAC address is associated with the pseudowire attachment circuit. Outbound frames to the MAC address are fwarded to the appropriate pseudowire attachment circuit. MAC address source-based learning uses the MAC address infmation that is learned in the hardware fwarding path. The updated MAC tables are sent to all line cards (LCs) and program the hardware f the router. The number of learned MAC addresses is limited through configurable per-pt and per-bridge domain MAC address limits. A MAC address in the MAC table is considered valid only f the duration of the MAC address aging time. When the time expires, the relevant MAC entries are repopulated. When the MAC aging time is configured only under a bridge domain, all the pseudowires and attachment circuits in the bridge domain use that configured MAC aging time. A bridge fwards, floods, drops packets based on the bridge table. The bridge table maintains both static entries and dynamic entries. Static entries are entered by the netwk manager by the bridge itself. Dynamic entries are entered by the bridge learning process. A dynamic entry is automatically removed after a specified length of time, known as aging time, from the time the entry was created last updated. If hosts on a bridged netwk are likely to move, decrease the aging-time to enable the bridge to adapt to the change quickly. If hosts do not transmit continuously, increase the aging time to recd the dynamic entries f a longer time, thus reducing the possibility of flooding when the hosts transmit again. The MAC address limit is used to limit the number of learned MAC addresses. The limit is set at the bridge domain level and the pt level. When the MAC address limit is violated, the system is configured to take one of the actions that are listed in Table 2. Table 2 Action Limit flood Limit no-flood Shutdown MAC Address Limit Actions Description Discards the new MAC addresses. Discards the new MAC addresses. Flooding of unknown unicast packets is disabled. Disables the bridge domain bridge pt. When the bridge domain is down, none of the bridging functions, such as learning, flooding, fwarding, and so fth take place f the bridge domain. If a bridge pt is down as a result of the action, the interface pseudowire representing the bridge pt remains up but the bridge pt is not participating in the bridge. When disabled, the pt bridge domain is manually brought up by using an EXEC CLI. When a limit is exceeded, the system is configured to perfm the following notifications: VPC-54

11 Implementing Virtual Private LAN Services Infmation About Implementing Virtual Private LAN Services Syslog (default) Simple Netwk Management Protocol (SNMP) trap Syslog and SNMP trap None (no notification) To clear the MAC limit condition, the number of MACs must go below 75 percent of the configured limit. Note On the Cisco CRS-1 router, MAC address limit action is suppted only on the ACs and not on ce pseudowires. MAC Address Withdrawal F faster VPLS convergence, you can remove unlearn the MAC addresses that are learned dynamically. The Label Distribution Protocol (LDP) Address Withdrawal message is sent with the list of MAC addresses, which need to be withdrawn to all other PEs that are participating in the cresponding VPLS service. F the Cisco IOS XR VPLS implementation, a ption of the dynamically learned MAC addresses are cleared by using the MAC addresses aging mechanism by default. The MAC address withdrawal feature is added through the LDP Address Withdrawal message. To enable the MAC address withdrawal feature, use the withdrawal command in bridge group bridge domain MAC configuration mode. To verify that the MAC address withdrawal is enabled, use the show bridge-domain command with the detail keywd. Note By default, the LDP MAC Withdrawal feature is enabled on Cisco IOS XR. The LDP MAC Withdrawal feature is generated due to the following events: Attachment circuit goes down. You can remove add the attachment circuit through the CLI. MAC withdrawal messages are received over a VFI pseudowire and are not propagated over access pseudowires. RFC 4762 specifies that both wildcards (by means of an empty Type, Length and Value [TLV]) and a specific MAC address withdrawal. Cisco IOS XR software suppts only a wildcard MAC address withdrawal. LSP Ping over VPWS and VPLS F Cisco IOS XR software, the existing suppt f the Label Switched Path (LSP) ping and traceroute verification mechanisms f point-to-point pseudowires (signaled using LDP FEC128) is extended to cover the pseudowires that are associated with the VFI (VPLS). Currently, the suppt f the LSP ping and traceroute is limited to manually configured VPLS and access pseudowires (signaled using LDP FEC128). Virtual Circuit Connection Verification (VCCV) is also suppted on access pseudowires. F infmation about VCCV suppt and the ping mpls pseudowire command, see Cisco IOS XR MPLS Command Reference f the Cisco CRS Router. VPC-55

12 Infmation About Implementing Virtual Private LAN Services Implementing Virtual Private LAN Services VPLS Scalability and Perfmance Targets The Cisco CRS-1router employs the ternary content addressable memy (TCAM) to meet the perfmance and scalable targets over VPLS. Table 3 describes the scalability and perfmance targets f the Cisco CRS-1 router. Table 3 VPLS Scalability and Perfmance Targets Perfmance Maximum bridge domains per Line Card Maximum bridge domains per system Maximum MACs per bridge domain Maximum MACs per Line Card Maximum MACs per system Maximum attachment circuits per bridge domain Maximum pseudowires per bridge domain Maximum pseudowires per system Scalability Target Pseudowire Redundancy f P2P AToM Cross-Connects Backup pseudowires (PW) are associated with the cresponding primary pseudowires. A backup PW is not programmed to fward data when inactive. It is activated only if a primary PW fails. This is known as pseudowire redundancy. The primary reason f backing up a PW is to reduce traffic loss when a primary PW fails. When the primary PW is active again, it resumes its activity. A primary PW can be associated with only one backup PW. Similarly, a backup PW can be associated with only one primary PW. It is recommended to enable pseudowire status time length value (TLV) f optimal switchover perfmance. Note This feature is suppted only f an AToM instance on the Cisco XR Series Router, and f an EoMPLS instance on the Cisco CRS-1 router. VPC-56

13 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services How to Implement Virtual Private LAN Services This section describes the tasks that are required to implement VPLS: Configuring a Bridge Domain, page VPC-57 Configuring a Layer 2 Virtual Fwarding Instance, page VPC-75 Configuring the MAC Address-related Parameters, page VPC-87 Configuring VPLS with BGP Autodiscovery and Signaling, page VPC-100 Configuring VPLS with BGP Autodiscovery and LDP Signaling, page VPC-102 Configuring a Bridge Domain Creating a Bridge Domain SUMMARY STEPS These topics describe how to configure a bridge domain: Creating a Bridge Domain, page VPC-57 Configuring a Pseudowire, page VPC-59 Configuring an Access Pseudowire, page VPC-61 Associating Members with a Bridge Domain, page VPC-70 Configuring Bridge Domain Parameters, page VPC-72 Disabling a Bridge Domain, page VPC-73 Configuring a Layer 2 Virtual Fwarding Instance, page VPC-75 Perfm this task to create a bridge domain. 1. configure bridge group bridge-group-name 4. bridge-domain bridge-domain-name 5. end VPC-57

14 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge-group-name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain-name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# end RP/0/RP0/CPU0:router(config--bg-bd)# end RP/0/RP0/CPU0:router(config--bg-bd)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-58

15 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Configuring a Pseudowire SUMMARY STEPS DETAILED STEPS Perfm this task to configure a pseudowire under a bridge domain. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. vfi {vfi name} 6. exit 7. neighb {A.B.C.D} {pw-id value} 8. end Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. VPC-59

16 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Step 5 Step 6 Command Action vfi {vfi-name} RP/0/RP0/CPU0:router(config--bg-bd)# vfi v1 RP/0/RP0/CPU0:router(config--bg-bd-vfi)# exit Configures the virtual fwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode. Use the vfi-name argument to configure the name of the specified virtual fwarding interface. Exits the current configuration mode. Step 7 Step 8 RP/0/RP0/CPU0:router(config--bg-bd-vfi)# exit RP/0/RP0/CPU0:router(config--bg-bd)# neighb {A.B.C.D} {pw-id value} RP/0/RP0/CPU0:router(config--bg-bd)# neighb pw-id 1000 RP/0/RP0/CPU0:router(config--bg-bd-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-pw)# Adds an access pseudowire pt to a bridge domain a pseudowire to a bridge virtual fwarding interface (VFI). Use the A.B.C.D argument to specify the IP address of the cross-connect peer. Use the pw-id keywd to configure the pseudowire ID. The range is 1 to Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-60

17 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Configuring an Access Pseudowire SUMMARY STEPS DETAILED STEPS Perfm this task to configure an access pseudowire under a bridge domain. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. interface type interface-path-id 6. neighb {A.B.C.D} {pw-id value} 7. end Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# interface type interface-path-id RP/0/RP0/CPU0:router(config--bg-bd)# interface GigabitEthernet 0/4/0/0 RP/0/RP0/CPU0:router(config--bg-bd-ac)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Enters interface configuration mode and adds an interface to a bridge domain that allows packets to be fwarded and received from other interfaces that are part of the same bridge domain. VPC-61

18 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Step 6 Command Action exit Exits the current configuration mode. Step 7 Step 8 RP/0/RP0/CPU0:router(config--bg-bd-ac)# exit RP/0/RP0/CPU0:router(config--bg-bd)# neighb {A.B.C.D} {pw-id value} RP/0/RP0/CPU0:router(config--bg-bd)# neighb pw-id 1000 RP/0/RP0/CPU0:router(config--bg-bd-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-pw)# Adds an access pseudowire pt to a bridge domain a pseudowire to a bridge virtual fwarding interface (VFI). Use the A.B.C.D argument to specify the IP address of the cross-connect peer. Use the pw-id keywd to configure the pseudowire ID. The range is 1 to Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-62

19 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Enabling Pseudowire Status TLV When a pseudowire is setup, label distribution protocol (LDP) determines the method f signaling pseudowire status. Cisco IOS-XR provides a configuration option that allows you to enable pseudowire status type length value (TLV). Note Unless pseudowire status TLV is explicitly enabled under L2VPN configuration, the default signaling method is Label Withdrawal. Pseudowire status TLV must be enabled on both local and remote PEs. If only one provider edge router is configured with the pw-status tlv command, then label withdrawal method is used. Perfm this task to enable pseudowire status TLV. SUMMARY STEPS 1. configure pw-status tlv 4. end DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# VPC-63

20 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Step 3 Command Action pw-status tlv Enables pseudowire status TLV. Step 4 RP/0/RP0/CPU0:router(config-)# pw-status tlv end RP/0/RP0/CPU0:router(config-)#end RP/0/RP0/CPU0:router(config-)# Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-64

21 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Configuring a Backup Pseudowire Perfm this task to configure a backup pseudowire f a point-to-point neighb. SUMMARY STEPS 1. configure xconnect group group name 4. p2p xconnect name 5. neighb ip-address pw-id number 6. backup neighb ip-address pw-id number 7. end DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# xconnect group group name Enters the name of the cross-connect group. Step 4 RP/0/RP0/CPU0:router(config-)# xconnect group A RP/0/RP0/CPU0:router(config--xc)# p2p xconnect name Enters a name f the point-to-point cross-connect. Step 5 RP/0/RP0/CPU0:router(config--xc)# p2p rtrx_to_rtry RP/0/RP0/CPU0:router(config--xc-p2p)# neighb ip-address pw-id number RP/0/RP0/CPU0:router(config--xc-p2p)# neighb pw-id 2 RP/0/RP0/CPU0:router(config--xc-p2p-pw)# Configures the pseudowire segment f the cross-connect. VPC-65

22 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Step 6 Step 7 Command Action backup neighb ip-address pw-id number RP/0/RP0/CPU0:router(config--xc-p2p)# backup neighb pw-id 2 RP/0/RP0/CPU0:router(config--xc-p2p-pw-backup)# end RP/0/RP0/CPU0:router(config--xc-p2p-pw-backup)# end RP/0/RP0/CPU0:router(config--xc-p2p-pw-backup)# Configures the backup pseudowire f the point-to-point neighb. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-66

23 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Configuring Backup Disable Delay SUMMARY STEPS DETAILED STEPS The Backup Disable Delay function specifies the time f which the primary pseudowire in active state waits befe it takes over f the backup pseudowire. Perfm this task to configure a disable delay. 1. configure pw-class class name 4. backup disable delay seconds 5. exit 6. xconnect group group name 7. p2p xconnect name 8. neighb ip-address pw-id number 9. pw-class class name 10. backup neighb ip-address pw-id number 11. end Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# pw-class class_1 Configures the pseudowire class name. Step 4 RP/0/RP0/CPU0:router(config-)# pw-class class_1 RP/0/RP0/CPU0:router(config--pwc)# backup disable delay seconds RP/0/RP0/CPU0:router(config--pwc)# backup disable delay 20 RP/0/RP0/CPU0:router(config--pwc)# Specifies how long a backup pseudowire virtual circuit (VC) should wait befe resuming operation after the primary pseudowire VC becomes nonfunctional. VPC-67

24 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Step 5 Command Action exit Exits the pseudowire class submode. Step 6 RP/0/RP0/CPU0:router(config--pwc)# exit xconnect group group name Enters the name of the cross-connect group. Step 7 RP/0/RP0/CPU0:router(config-)# xconnect group A RP/0/RP0/CPU0:router(config--xc)# p2p xconnect name Enters a name f the point-to-point cross-connect. Step 8 Step 9 RP/0/RP0/CPU0:router(config--xc)# p2p rtrx_to_rtry RP/0/RP0/CPU0:router(config--xc-p2p)# neighb ip-address pw-id number RP/0/RP0/CPU0:router(config--xc-p2p)# neighb pw-id 2 RP/0/RP0/CPU0:router(config--xc-p2p-pw)# pw-class class_1 Configures the pseudowire segment f the cross-connect. Configures the pseudowire class name. RP/0/RP0/CPU0:router(config--xc-p2p-pw)# pw-class class_1 RP/0/RP0/CPU0:router(config--xc-p2p-pw)# VPC-68

25 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 10 Step 11 Command Action backup neighb ip-address pw-id number RP/0/RP0/CPU0:router(config--xc-p2p-pw)# backup neighb pw-id 2 RP/0/RP0/CPU0:router(config--xc-p2p-pw-backup)# end RP/0/RP0/CPU0:router(config--xc-p2p-pw-backup)# end RP/0/RP0/CPU0:router(config--xc-p2p-pw-backup)# Configures the backup pseudowire f the point-to-point neighb. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-69

26 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Associating Members with a Bridge Domain SUMMARY STEPS DETAILED STEPS After a bridge domain is created, perfm this task to assign interfaces to the bridge domain. The following types of bridge pts are associated with a bridge domain: Ethernet and VLAN VFI 1. configure bridge group bridge-group-name 4. bridge-domain bridge-domain-name 5. interface type interface-path-id 6. static-mac-address {MAC-address} 7. end Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge-group-name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain-name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. VPC-70

27 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 5 Step 6 Step 7 Command Action interface type interface-path-id RP/0/RP0/CPU0:router(config--bg-bd)# interface GigabitEthernet 0/4/0/0 RP/0/RP0/CPU0:router(config--bg-bd-ac)# static-mac-address {MAC-address} RP/0/RP0/CPU0:router(config--bg-bd-ac)# static-mac-address end RP/0/RP0/CPU0:router(config--bg-bd-ac)# end RP/0/RP0/CPU0:router(config--bg-bd-ac)# Enters interface configuration mode and adds an interface to a bridge domain that allows packets to be fwarded and received from other interfaces that are part of the same bridge domain. Configures the static MAC address to associate a remote MAC address with a pseudowire any other bridge interface. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-71

28 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Configuring Bridge Domain Parameters SUMMARY STEPS DETAILED STEPS To configure the bridge domain parameters, associate the following parameters with a bridge domain: Maximum transmission unit (MTU) Specifies that all members of a bridge domain have the same MTU. The bridge domain member with a different MTU size is not used by the bridge domain even though it is still associated with a bridge domain. Flooding Enables disables flooding on the bridge domain. By default, flooding is enabled. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. flooding disable 6. mtu bytes 7. end Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters configuration mode. Step 3 Step 4 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters bridge group bridge domain configuration mode. VPC-72

29 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 5 Step 6 Step 7 Command Action flooding disable RP/0/RP0/CPU0:router(config--bg-bd)# flooding disable mtu bytes RP/0/RP0/CPU0:router(config--bg-bd)# mtu 1000 end RP/0/RP0/CPU0:router(config--bg-bd)# end RP/0/RP0/CPU0:router(config--bg-bd)# Configures flooding f traffic at the bridge domain level at the bridge pt level. Adjusts the maximum packet size maximum transmission unit (MTU) size f the bridge domain. Use the bytes argument to specify the MTU size, in bytes. The range is from 64 to Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Disabling a Bridge Domain SUMMARY STEPS Perfm this task to disable a bridge domain. When a bridge domain is disabled, all VFIs that are associated with the bridge domain are disabled. You are still able to attach detach members to the bridge domain and the VFIs that are associated with the bridge domain. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. shutdown VPC-73

30 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services 6. end DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge-group-name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain-name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters bridge group bridge domain configuration mode. VPC-74

31 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 5 Step 6 Command Action shutdown RP/0/RP0/CPU0:router(config--bg-bd)# end RP/0/RP0/CPU0:router(config--bg-bd)# end RP/0/RP0/CPU0:router(config--bg-bd)# Shuts down a bridge domain to bring the bridge and all attachment circuits and pseudowires under it to admin down state. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Configuring a Layer 2 Virtual Fwarding Instance These topics describe how to configure a Layer 2 virtual fwarding instance (VFI): Adding the Virtual Fwarding Instance Under the Bridge Domain, page VPC-76 Associating Pseudowires with the Virtual Fwarding Instance, page VPC-77 Associating a Virtual Fwarding Instance to a Bridge Domain, page VPC-79 Attaching Pseudowire Classes to Pseudowires, page VPC-81 Configuring Any Transpt over Multiprotocol Pseudowires By Using Static Labels, page VPC-83 Disabling a Virtual Fwarding Instance, page VPC-85 VPC-75

32 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Adding the Virtual Fwarding Instance Under the Bridge Domain SUMMARY STEPS DETAILED STEPS Perfm this task to create a Layer 2 Virtual Fwarding Instance (VFI) on all provider edge devices under the bridge domain. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. vfi {vfi name} 6. end Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. VPC-76

33 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 5 Step 6 Command Action vfi {vfi name} RP/0/RP0/CPU0:router(config--bg-bd)# vfi v1 RP/0/RP0/CPU0:router(config--bg-bd-vfi)# end RP/0/RP0/CPU0:router(config--bg-bd-vfi-vpn)# end RP/0/RP0/CPU0:router(config--bg-bd-vfi-vpn)# Configures virtual fwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Associating Pseudowires with the Virtual Fwarding Instance SUMMARY STEPS After a VFI is created, perfm this task to associate one me pseudowires with the VFI. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. vfi {vfi name} 6. neighb A.B.C.D {pw-id value} 7. end VPC-77

34 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# vfi {vfi name} RP/0/RP0/CPU0:router(config--bg-bd)# vfi v1 RP/0/RP0/CPU0:router(config--bg-bd-vfi)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Configures virtual fwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode. VPC-78

35 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 6 Step 7 Command Action neighb A.B.C.D {pw-id value} RP/0/RP0/CPU0:router(config--bg-bd-vfi)# neighb pw-id 1000 RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# Adds an access pseudowire pt to a bridge domain a pseudowire to a bridge virtual fwarding interface (VFI). Use the A.B.C.D argument to specify the IP address of the cross-connect peer. Use the pw-id keywd to configure the pseudowire ID and ID value. The range is 1 to Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Associating a Virtual Fwarding Instance to a Bridge Domain Perfm this task to associate a VFI to be a member of a bridge domain. SUMMARY STEPS 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. vfi {vfi name} 6. neighb {A.B.C.D} {pw-id value} VPC-79

36 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services 7. static-mac-address {MAC address} 8. end DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 Step 6 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# vfi vfi name RP/0/RP0/CPU0:router(config--bg-bd)# vfi v1 RP/0/RP0/CPU0:router(config--bg-bd-vfi)# neighb A.B.C.D {pw-id value} RP/0/RP0/CPU0:router(config--bg-bd-vfi)# neighb pw-id 1000 RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Configures virtual fwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode. Adds an access pseudowire pt to a bridge domain a pseudowire to a bridge virtual fwarding interface (VFI). Use the A.B.C.D argument to specify the IP address of the cross-connect peer. Use the pw-id keywd to configure the pseudowire ID and ID value. The range is 1 to VPC-80

37 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 7 Step 8 Command Action static-mac-address {MAC address} RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# static-mac-address end RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# Configures the static MAC address to associate a remote MAC address with a pseudowire any other bridge interface. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Attaching Pseudowire Classes to Pseudowires SUMMARY STEPS Perfm this task to attach a pseudowire class to a pseudowire. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. vfi {vfi name} 6. neighb {A.B.C.D} {pw-id value} 7. pw-class {class name} 8. end VPC-81

38 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 Step 6 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# vfi {vfi name} RP/0/RP0/CPU0:router(config--bg-bd)# vfi v1 RP/0/RP0/CPU0:router(config--bg-bd-vfi)# neighb {A.B.C.D} {pw-id value} RP/0/RP0/CPU0:router(config--bg-bd-vfi)# neighb pw-id 1000 RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Configures virtual fwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode. Adds an access pseudowire pt to a bridge domain a pseudowire to a bridge virtual fwarding interface (VFI). Use the A.B.C.D argument to specify the IP address of the cross-connect peer. Use the pw-id keywd to configure the pseudowire ID and ID value. The range is 1 to VPC-82

39 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 7 Step 8 Command Action pw-class {class name} RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# pw-class canada end RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# Configures the pseudowire class template name to use f the pseudowire. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Configuring Any Transpt over Multiprotocol Pseudowires By Using Static Labels SUMMARY STEPS Perfm this task to configure the Any Transpt over Multiprotocol (AToM) pseudowires by using the static labels. A pseudowire becomes a static AToM pseudowire by setting the MPLS static labels to local and remote. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. vfi {vfi name} 6. neighb {A.B.C.D} {pw-id value} VPC-83

40 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services 7. mpls static label {local value} {remote value} 8. end DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 Step 6 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# vfi {vfi name} RP/0/RP0/CPU0:router(config--bg-bd)# vfi v1 RP/0/RP0/CPU0:router(config--bg-bd-vfi)# neighb {A.B.C.D} {pw-id value} RP/0/RP0/CPU0:router(config--bg-bd-vfi)# neighb pw-id 1000 RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Configures virtual fwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode. Adds an access pseudowire pt to a bridge domain a pseudowire to a bridge virtual fwarding interface (VFI). Use the A.B.C.D argument to specify the IP address of the cross-connect peer. Use the pw-id keywd to configure the pseudowire ID and ID value. The range is 1 to VPC-84

41 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 7 Step 8 Command Action mpls static label {local value} {remote value} RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# mpls static label local 800 remote 500 end RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# end RP/0/RP0/CPU0:router(config--bg-bd-vfi-pw)# Configures the MPLS static labels and the static labels f the access pseudowire configuration. You can set the local and remote pseudowire labels. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Disabling a Virtual Fwarding Instance SUMMARY STEPS Perfm this task to disable a VFI. When a VFI is disabled, all the previously established pseudowires that are associated with the VFI are disconnected. LDP advertisements are sent to withdraw the MAC addresses that are associated with the VFI. However, you can still attach detach attachment circuits with a VFI after a shutdown. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. vfi {vfi name} 6. shutdown VPC-85

42 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services 7. end 8. show bridge-domain [detail] DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 Step 6 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# vfi {vfi name} RP/0/RP0/CPU0:router(config--bg-bd)# vfi v1 RP/0/RP0/CPU0:router(config--bg-bd-vfi)# shutdown Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Configures virtual fwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode. Disables the virtual fwarding interface (VFI). RP/0/RP0/CPU0:router(config--bg-bd-vfi)# shutdown VPC-86

43 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 7 Step 8 Command Action end RP/0/RP0/CPU0:router(config--bg-bd-vfi)# end RP/0/RP0/CPU0:router(config--bg-bd-vfi)# show bridge-domain [detail] RP/0/RP0/CPU0:router# show bridge-domain detail Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Displays the state of the VFI. F example, if you shut down the VFI, the VFI is shown as shut down under the bridge domain. Configuring the MAC Address-related Parameters These topics describe how to configure the MAC address-related parameters: Configuring the MAC Address Source-based Learning, page VPC-88 Disabling the MAC Address Withdrawal, page VPC-90 Configuring the MAC Address Limit, page VPC-93 Configuring the MAC Address Aging, page VPC-95 Disabling MAC Flush at the Bridge Pt Level, page VPC-98 The MAC table attributes are set f the bridge domains. VPC-87

44 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Configuring the MAC Address Source-based Learning SUMMARY STEPS DETAILED STEPS Perfm this task to configure the MAC address source-based learning. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. mac 6. learning disable 7. end 8. show bridge-domain [detail] Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd-mac)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Enters L2VPN bridge group bridge domain MAC configuration mode. VPC-88

45 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 6 Step 7 Step 8 Command Action learning disable RP/0/RP0/CPU0:router(config--bg-bd-mac)# learning disable end RP/0/RP0/CPU0:router(config--bg-bd-mac)# end RP/0/RP0/CPU0:router(config--bg-bd-mac)# show bridge-domain [detail] RP/0/RP0/CPU0:router# show bridge-domain detail Overrides the MAC learning configuration of a parent bridge sets the MAC learning configuration of a bridge. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Displays the details that the MAC address source-based learning is disabled on the bridge. VPC-89

46 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Disabling the MAC Address Withdrawal SUMMARY STEPS DETAILED STEPS Perfm this task to disable the MAC address withdrawal f a specified bridge domain. 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. mac 6. withdraw { access-pw disable disable } 7. end 8. show bridge-domain [detail] Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd-mac)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Enters L2VPN bridge group bridge domain MAC configuration mode. VPC-90

47 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 6 withdraw { access-pw disable disable } Step 7 Step 8 Command Action RP/0/RP0/CPU0:router(config--bg-bd-mac)# withdraw access-pw disable end RP/0/RP0/CPU0:router(config--bg-bd-mac)# end RP/0/RP0/CPU0:router(config--bg-bd-mac)# show bridge-domain [detail] P/0/RP0/CPU0:router# show bridge-domain detail Disables the MAC address withdrawal f the specified bridge domain. Note Mac address withdrawal is generated when the access pseudowire is not operational. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Displays detailed sample output to specify that the MAC address withdrawal is enabled. In addition, the sample output displays the number of MAC withdrawal messages that are sent over received from the pseudowire. The following sample output shows the MAC address withdrawal fields: RP/0/0/CPU0:router# show bridge-domain detail Bridge group: siva_group, bridge-domain: siva_bd, id: 0, state: up, ShgId: 0, MSTi: 0 MAC Learning: enabled MAC withdraw: enabled Flooding: Broadcast & Multicast: enabled Unknown Unicast: enabled MAC address aging time: 300 s Type: inactivity MAC address limit: 4000, Action: none, Notification: syslog MAC limit reached: no Security: disabled DHCPv4 Snooping: disabled MTU: 1500 MAC Filter: Static MAC addresses: ACs: 1 (1 up), VFIs: 1, PWs: 2 (1 up) VPC-91

48 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services List of ACs: AC: GigabitEthernet0/4/0/1, state is up Type Ethernet MTU 1500; XC ID 0x ; interwking none; MSTi 0 (unprotected) MAC Learning: enabled MAC withdraw: disabled Flooding: Broadcast & Multicast: enabled Unknown Unicast: enabled MAC address aging time: 300 s Type: inactivity MAC address limit: 4000, Action: none, Notification: syslog MAC limit reached: no Security: disabled DHCPv4 Snooping: disabled Static MAC addresses: Statistics: packet totals: receive 6,send 0 byte totals: receive 360,send 4 List of Access PWs: List of VFIs: VFI siva_vfi PW: neighb , PW ID 1, state is down ( local ready ) PW class not set, XC ID 0xff Encapsulation MPLS, protocol LDP PW type Ethernet, control wd enabled, interwking none PW backup disable delay 0 sec Sequencing not set MPLS Local Remote Label unknown Group ID 0x0 0x0 Interface siva/vfi unknown MTU 1500 unknown Control wd enabled unknown PW type Ethernet unknown Create time: 19/11/ :20:14 (00:25:25 ago) Last time status changed: 19/11/ :44:00 (00:01:39 ago) MAC withdraw message: send 0 receive 0 VPC-92

49 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Configuring the MAC Address Limit Perfm this task to configure the parameters f the MAC address limit. Note MAC Address Limit action is suppted only on the ACs and not on the ce pseudowires. SUMMARY STEPS 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. mac 6. limit 7. maximum {value} 8. action {flood no-flood shutdown} 9. notification {both none trap} 10. end 11. show bridge-domain [detail] DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. VPC-93

50 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Command Action bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd-mac)# limit RP/0/RP0/CPU0:router(config--bg-bd-mac)# limit RP/0/RP0/CPU0:router(config--bg-bd-mac-limit)# maximum {value} RP/0/RP0/CPU0:router(config--bg-bd-mac-limit)# maximum 5000 action {flood no-flood shutdown} RP/0/RP0/CPU0:router(config--bg-bd-mac-limit)# action flood notification {both none trap} RP/0/RP0/CPU0:router(config--bg-bd-mac-limit)# notification both Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Enters L2VPN bridge group bridge domain MAC configuration mode. Sets the MAC address limit f action, maximum, and notification and enters L2VPN bridge group bridge domain MAC limit configuration mode. Configures the specified action when the number of MAC addresses learned on a bridge is reached. Configures the bridge behavi when the number of learned MAC addresses exceed the MAC limit configured. Specifies the type of notification that is sent when the number of learned MAC addresses exceeds the configured limit. VPC-94

51 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 10 Step 11 Command Action end RP/0/RP0/CPU0:router(config--bg-bd-mac-limit)# end RP/0/RP0/CPU0:router(config--bg-bd-mac-limit)# show bridge-domain [detail] Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Displays the details about the MAC address limit. RP/0/RP0/CPU0:router# show bridge-domain detail Configuring the MAC Address Aging Perfm this task to configure the parameters f MAC address aging. SUMMARY STEPS 1. configure bridge group bridge group name 4. bridge-domain bridge-domain name 5. mac 6. aging 7. time {seconds} 8. type {absolute inactivity} VPC-95

52 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services 9. end 10. show bridge-domain [detail] DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 Step 5 Step 6 Step 7 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge group name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd-mac)# aging RP/0/RP0/CPU0:router(config--bg-bd-mac)# aging RP/0/RP0/CPU0:router(config--bg-bd-mac-aging)# time {seconds} RP/0/RP0/CPU0:router(config--bg-bd-mac-aging)# time 300 Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode. Enters L2VPN bridge group bridge domain MAC configuration mode. Enters the MAC aging configuration submode to set the aging parameters such as time and type. Configures the maximum aging time. Use the seconds argument to specify the maximum age of the MAC address table entry. The range is from 300 to seconds. Aging time is counted from the last time that the switch saw the MAC address. The default value is 300 seconds. VPC-96

53 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 8 Step 9 Step 10 Command Action type {absolute inactivity} RP/0/RP0/CPU0:router(config--bg-bd-mac-aging)# type absolute end RP/0/RP0/CPU0:router(config--bg-bd-mac-aging)# end RP/0/RP0/CPU0:router(config--bg-bd-mac-aging)# show bridge-domain [detail] Configures the type f MAC address aging. Use the absolute keywd to configure the absolute aging type. Use the inactivity keywd to configure the inactivity aging type. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Displays the details about the aging fields. RP/0/RP0/CPU0:router# show bridge-domain detail VPC-97

54 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Disabling MAC Flush at the Bridge Pt Level SUMMARY STEPS DETAILED STEPS Perfm this task to disable the MAC flush at the bridge domain level. You can disable the MAC flush at the bridge domain, bridge pt access pseudowire levels. By default, the MACs learned on a specific pt are immediately flushed, when that pt becomes nonfunctional. 1. configure bridge group bridge-group name 4. bridge-domain bridge-domain name 5. mac 6. pt-down flush disable 7. end Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 RP/0/RP0/CPU0:router(config)# RP/0/RP0/CPU0:router(config-)# bridge group bridge-group-name RP/0/RP0/CPU0:router(config-)# bridge group csco RP/0/RP0/CPU0:router(config--bg)# bridge-domain bridge-domain-name RP/0/RP0/CPU0:router(config--bg)# bridge-domain abc RP/0/RP0/CPU0:router(config--bg-bd)# Creates a bridge group so that it can contain bridge domains and then assigns netwk interfaces to the bridge domain. Establishes a bridge domain and enters bridge group bridge domain configuration mode. VPC-98

55 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 5 Step 6 Step 7 Command Action mac RP/0/RP0/CPU0:router(config--bg-bd)# mac RP/0/RP0/CPU0:router(config--bg-bd-mac)# pt-down flush disable RP/0/RP0/CPU0:router(config--bg-bd-mac)# pt-down flush disable end RP/0/RP0/CPU0:router(config--bg-bd-mac)# end RP/0/RP0/CPU0:router(config--bg-bd-mac)# Enters bridge group bridge domain MAC configuration mode. Disables MAC flush when the bridge pt becomes nonfunctional. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-99

56 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Configuring VPLS with BGP Autodiscovery and Signaling SUMMARY STEPS DETAILED STEPS Perfm this task to configure BGP-based autodiscovery and signaling. 1. configure bridge group bridge-group-name 4. bridge-domain bridge-domain-name 5. vfi {vfi-name} 6. vpn-id vpn-id 7. autodiscovery bgp 8. rd {as-number:nn ip-address:nn auto} 9. route-target {as-number:nn ip-address:nn expt impt} 10. route-target impt {as-number:nn ip-address:nn} 11. route-target expt {as-number:nn ip-address:nn} 12. signaling-protocol bgp 13. ve-id {number} 14. ve-range {number} 15. end Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 RP/0/RP0/CPU0:router(config)# bridge group bridge-group-name Enters configuration mode f the named bridge group. RP/0/RP0/CPU0:router(config-)# bridge group metroa VPC-100

57 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 4 Command Action bridge-domain bridge-domain-name Enters configuration mode f the named bridge domain. Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 RP/0/RP0/CPU0:router(config--bg)# bridge-domain east vfi {vfi-name} RP/0/RP0/CPU0:router(config--bg-bd)# vfi vfi-east vpn-id vpn-id RP/0/RP0/CPU0:router(config--bg-bd-vfi)# vpn-id 100 autodiscovery bgp RP/0/RP0/CPU0:router(config--bg-bd-vfi)# autodiscovery bgp rd {as-number:nn ip-address:nn auto} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# rd auto route-target {as-number:nn ip-address:nn} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# route-target 500:99 route-target impt {as-number:nn ip-address:nn} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# route-target impt 200:20 route-target expt {as-number:nn ip-address:nn} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# route-target expt 100:10 Enters virtual fwarding instance (VFI) configuration mode. Specifies the identifier f the VPLS service. The VPN ID has to be globally unique within a PE router; that is the same VPN ID cannot exist in multiple VFIs on the same PE router. In addition, a VFI can have only one VPN ID. Enters BGP autodiscovery configuration mode where all BGP autodiscovery parameters are configured. This command is not provisioned to BGP until the VPN ID and the signaling protocol is configured. Specifies the route distinguisher (RD) under the VFI. The RD is used in the BGP NLRI to identify VFI. Only one RD can be configured f each VFI, and except f rd auto, the same RD cannot be configured in multiple VFIs on the same PE. When rd auto is configured, the RD value is: {BGP Router ID}:{16 bits auto-generated unique index}. Specifies the route target (RT) f the VFI. At least one impt and one expt route target ( just one route target with both roles) need to be configured in each PE in der to establish BGP autodiscovery between PEs. If no expt impt keywd is specified, it means that the RT is both impt and expt. A VFI can have multiple expt impt RTs. However, the same RT is not allowed in multiple VFIs in the same PE. Specifies the impt route target f the VFI. The PE compares impt route target with the RT in the received NLRI: the RT in the received NLRI must match the impt RT to determine that the RTs belong to the same VPLS service. Specifies the expt route target f the VFI. Expt route target is the RT that will be in the NLRI advertised to other PEs. VPC-101

58 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Step 12 Step 13 Step 14 Step 15 Command Action signaling-protocol bgp RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# signaling-protocol bgp ve-id {number} RP/0/RP0/CPU0:router(config--bg-bd-vfi-adsig)# ve-id 10 ve-range {number} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad-si g)# ve-range 40 end RP0RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad - sig)# end RP0RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad - sig)# Specifies the signaling protocol to be used to manage the pseudowires. Specifies the local PE identifier f the VFI f VPLS configuration. The VE ID identifies a VFI within a VPLS service. This means that VFIs in the same VPLS service cannot share the same VE ID. The scope of the VE ID is only within a bridge domain. Therefe, VFIs in different bridge domains within a PE can still use the same VE ID. Overrides the minimum size of VPLS edge (VE) blocks. The default minimum size is 10. Any configured VE range must be higher than 10. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. Configuring VPLS with BGP Autodiscovery and LDP Signaling Perfm this task to configure BGP-based Autodiscovery and signaling. SUMMARY STEPS 1. configure 2. VPC-102

59 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services 3. route-id 4. bridge group bridge-group-name 5. bridge-domain bridge-domain-name 6. vfi {vfi-name} 7. autodiscovery bgp 8. vpn-id vpn-id 9. rd {as-number:nn ip-address:nn auto} 10. route-target {as-number:nn ip-address:nn expt impt} 11. route-target impt {as-number:nn ip-address:nn} 12. route-target expt {as-number:nn ip-address:nn} 13. signaling-protocol ldp 14. vpls-id {as-number:nn ip-address:nn} 15. end DETAILED STEPS Step 1 Command Action configure Enters global configuration mode. Step 2 RP/0/RP0/CPU0:router# configure Enters L2VPN configuration mode. Step 3 Step 4 RP/0/RP0/CPU0:router(config)# router-id ip-address RP/0/RP0/CPU0:router(config-)# router-id bridge group bridge-group-name Specifies a unique Layer 2 (L2) router ID f the provider edge (PE) router. The router ID must be configured f LDP signaling, and is used as the L2 router ID in the BGP NLRI, SAII (local L2 Router ID) and TAII (remote L2 Router ID). Any arbitrary value in the IPv4 address fmat is acceptable. Note Each PE must have a unique L2 router ID. This CLI is optional, because a PE automatically generates a L2 router ID using the LDP router ID. Enters configuration mode f the named bridge group. RP/0/RP0/CPU0:router(config-)# bridge group metroa VPC-103

60 How to Implement Virtual Private LAN Services Implementing Virtual Private LAN Services Step 5 Command Action bridge-domain bridge-domain-name Enters configuration mode f the named bridge domain. Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 RP/0/RP0/CPU0:router(config--bg)# bridge-domain east vfi {vfi-name} RP/0/RP0/CPU0:router(config--bg-bd)# vfi vfi-east vpn-id vpn-id RP/0/RP0/CPU0:router(config--bg-bd-vfi)# vpn-id 100 autodiscovery bgp RP/0/RP0/CPU0:router(config--bg-bd-vfi)# autodiscovery bgp rd {as-number:nn ip-address:nn auto} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# rd auto route-target {as-number:nn ip-address:nn} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# route-target 500:99 route-target impt {as-number:nn ip-address:nn} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# route-target impt 200:20 route-target expt {as-number:nn ip-address:nn} RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# route-target expt 100:10 Enters virtual fwarding instance (VFI) configuration mode. Specifies the identifier f the VPLS service. The VPN ID has to be globally unique within a PE router; that is the same VPN ID cannot exist in multiple VFIs on the same PE router. In addition, a VFI can have only one VPN ID. Enters BGP autodiscovery configuration mode where all BGP autodiscovery parameters are configured. This command is not provisioned to BGP until the VPN ID and the signaling protocol is configured. Specifies the route distinguisher (RD) under the VFI. The RD is used in the BGP NLRI to identify VFI. Only one RD can be configured f each VFI, and except f rd auto, the same RD cannot be configured in multiple VFIs on the same PE. When rd auto is configured, the RD value is: {BGP Router ID}:{16 bits auto-generated unique index}. Specifies the route target (RT) f the VFI. At least one impt route target and one expt route target ( just one route target with both roles) need to be configured in each PE in der to establish BGP autodiscovery between PEs. If no expt impt keywd is specified, it means that the RT is both impt and expt. A VFI can have multiple expt impt RTs. However, the same RT is not allowed in multiple VFIs in the same PE. Specifies the impt route target f the VFI. The PE compares the impt route target with the RT in the received NLRI: the RT in the received NLRI must match the impt RT to determine that the RTs belong to the same VPLS service. Specifies the expt route target f the VFI. Expt route target is the RT that will be in the NLRI advertised to other PEs. VPC-104

61 Implementing Virtual Private LAN Services How to Implement Virtual Private LAN Services Step 13 Step 14 Step 15 Command Action signaling-protocol ldp RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad)# signaling-protocol ldp vpls-id {as-number:nn ip-address:nn} RP/0/RP0/CPU0:router(config--bg-bd-vfi-adsig)# vpls-id 10:20 end RP0RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad -sig)# end RP0RP/0/RP0/CPU0:router(config--bg-bd-vfi-ad -sig)# Enables LDP signaling, and enters the LDP signaling configuration submode where LDP signaling parameters are configured. Specifies VPLS ID which identifies the VPLS domain during signaling. This command is optional in all PEs that are in the same Autonomous System (that is, PEs that share the same ASN) because a default VPLS ID is automatically generated using BGP's ASN and the configured VPN ID (that is, the default VPLS ID equals ASN:VPN-ID). If an ASN of 4 bytes is used, the lower two bytes of the ASN are used to build the VPLS ID. In case of InterAS, the VPLS ID must be explicitly configured. Only one VPLS ID can be configured f each VFI, and the same VPLS ID cannot be used f multiple VFIs. Saves configuration When you issue the end command, the system prompts you to changes: Unted changes found, them befe exiting(yes/no/cancel)? [cancel]: Entering yes saves configuration changes to the running configuration file, exits the configuration session, and returns the router to EXEC mode. Entering no exits the configuration session and returns the router to EXEC mode without ting the configuration Entering cancel leaves the router in the current configuration session without exiting ting the configuration Use the command to save the configuration changes to the running configuration file and remain within the configuration session. VPC-105

62 Configuration Examples f Virtual Private LAN Services Implementing Virtual Private LAN Services Configuration Examples f Virtual Private LAN Services This section includes the following configuration examples: Configuing a Pseudowire: Example, page VPC-106 Configuring an Access Pseudowire: Example, page VPC-106 Virtual Private LAN Services Configuration f Provider Edge-to-Provider Edge: Example, page VPC-106 Virtual Private LAN Services Configuration f Provider Edge-to-Customer Edge: Example, page VPC-107 Configuring Backup Disable Delay: Example, page VPC-108 Disabling MAC Flush: Examples, page VPC-108 H-VPLS Configuration: Examples, page VPC-109 Configuring VPLS with BGP Autodiscovery and Signaling: Example, page VPC-111 Configuing a Pseudowire: Example This example shows how to configure a pseudowire: configure bridge group bridge group1 bridge-domain bridge-domain my_domain vfi vfi1 exit neighb pw-id 100! Configuring an Access Pseudowire: Example This example shows how to configure access pseudowire: configure bridge group bridge group1 bridge-domain bridge-domain domain1 interface GigabitEthernet 0/1/0/2 neighb pw-id 200! Virtual Private LAN Services Configuration f Provider Edge-to-Provider Edge: Example These configuration examples show how to create a Layer 2 VFI with a full-mesh of participating VPLS provider edge (PE) nodes. The following configuration example shows how to configure PE 1: configure bridge group 1 VPC-106

63 Implementing Virtual Private LAN Services Configuration Examples f Virtual Private LAN Services bridge-domain PE1-VPLS-A GigabitEthernet0/0---AC exit vfi 1 neighb pw-id 1---PW1 neighb pw-id 1---PW2!! interface loopback 0 ipv4 address The following configuration example shows how to configure PE 2: configure bridge group 1 bridge-domain PE2-VPLS-A interface GigabitEthernet0/0---AC exit vfi 1 neighb pw-id 1---PW1 neighb pw-id 1---PW2!! interface loopback 0 ipv4 address The following configuration example shows how to configure PE 3: configure bridge group 1 bridge-domain PE3-VPLS-A interface GigabitEthernet0/0---AC exit vfi 1 neighb pw-id 1---PW1 neighb pw-id 1---PW2!! interface loopback 0 ipv4 address Virtual Private LAN Services Configuration f Provider Edge-to-Customer Edge: Example The following configuration shows how to configure VPLS f a PE-to-CE nodes: configure interface GigabitEthernet0/0 l2transpt---ac interface exit no ipv4 address no ipv4 directed-broadcast negotiation auto no cdp enable end VPC-107

64 Configuration Examples f Virtual Private LAN Services Implementing Virtual Private LAN Services Configuring Backup Disable Delay: Example The following example shows how a backup delay is configured f point-to-point PW where the backup disable delay is 50 seconds: pw-class class_1 backup disable delay 20 exit xconnect group_a p2p rtrx_to_rtry neighb pw-id 2 pw-class class_1 backup neighb pw- id 5 The following example shows how a backup delay is configured f point-to-point PW where the backup disable delay is never: pw-class class_1 backup disable never exit xconnect group_a p2p rtrx_to_rtry neighb pw-id 2 pw-class class_1 backup neighb pw-id 5 Disabling MAC Flush: Examples You can disable the MAC flush at the following levels: bridge domain bridge pt (attachment circuit (AC)) access pseudowire (PW) The following example shows how to disable the MAC flush at the bridge domain level: configure bridge-group group1 bridge-domain domain1 mac pt-down flush disable end The following example shows how to disable the MAC flush at the bridge pt level: configure bridge-group group1 bridge-domain domain1 interface POS 0/1/0/1 mac pt-down flush disable end VPC-108

65 Implementing Virtual Private LAN Services Configuration Examples f Virtual Private LAN Services The following example shows how to disable the MAC flush at the access pseudowire level: configure bridge-group group1 bridge-domain domain1 neighb pw-id 1000 mac pt-down flush disable end H-VPLS Configuration: Examples This example shows how to configure hierarchical VPLS (H-VPLS). All examples in this section are based on the following topology where N-PE1 is the H-VPLS Node: VPLS with QinQ QinAny: Example Global Interface Configuration at N-PE1: interface GigabitEthernet0/0/0/0 dot1q tunneling ethertype 0x9200! interface GigabitEthernet0/0/0/1 dot1q tunneling ethertype 0x9100! interface GigabitEthernet0/0/0/0.1 l2transpt dot1q vlan 20 21! interface GigabitEthernet0/0/0/1.1 l2transpt dot1q vlan 10 any L2VPN Configuration at N-PE1: bridge group g1 bridge-domain d1 interface GigabitEthernet0/0/0/0.1! interface GigabitEthernet0/0/0/1.1 VPC-109