ME3800X/ME3600X Metro/IP/MPLS Configuration Ahmed Naail Abeer ([email protected]) Waris Sagheer ([email protected])

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

1

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

2

Router Configuration

Topology

Interface GigabitEthernet0/1

Traffic Flow

switchport mode trunk end interface GigabitEthernet0/2

Untagged IPv4

Untagged IPv4

switchport mode trunk end

IXIA Interface Configuration

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

3

Untagged Ethernet IPv4 Frame

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

4

Router Configuration

Topology Traffic Flow

Interface GigabitEthernet0/1 switchport mode trunk end interface GigabitEthernet0/2

Untagged IPv6

Untagged IPv6

switchport mode trunk end

IXIA Interface Configuration

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

5

Untagged Ethernet IPv6 Frame

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

6

© © 2010 2010 Cisco Cisco and/or and/or its its affiliates. affiliates. All All rights rights reserved. reserved.

Cisco Confidential

77

ME3800-HL-3 Configuration

TopologyEFP with

interface GigabitEthernet0/5 switchport trunk allowed vlan none switchport mode trunk

Point A

BD BD: 2000 Encap dot1q 1-4094

EFP with BD BD:2000 VLAN ID: 10 Pop1 symmetric

Point B

service instance 1 ethernet encapsulation dot1q 1-4094 bridge-domain 2000 !

VLAN TAG 100 Traffic Flow IXIA Interface Configuration

interface TenGigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric bridge-domain 2000

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

8

IXIA Traffic Capture

IXIA Packet Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

9

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

10

ME3800-HL-3 Configuration

TopologyEFP with

interface GigabitEthernet0/5 switchport trunk allowed vlan none switchport mode trunk

Point A

BD BD: 2000 Encap dot1q 1-4094

EFP with BD BD:2000 VLAN ID: 10 Pop1 symmetric

Point B

service instance 1 ethernet encapsulation dot1q 1-4094 bridge-domain 2000 !

VLAN TAG 10, 100 Traffic Flow IXIA Interface Configuration

interface TenGigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric bridge-domain 2000

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

11

IXIA Traffic Capture

IXIA Packet Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

12

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

13

ME3800-HL-3 Configuration

TopologyEFP with

interface GigabitEthernet0/5 switchport trunk allowed vlan none switchport mode trunk

Point A

BD BD: 2000 Encap dot1q 1-4094

EFP with BD BD:2000 VLAN ID: 10 Pop1 symmetric

Point B

service instance 1 ethernet encapsulation dot1q 1-4094 bridge-domain 2000 !

VLAN TAG 10 Traffic Flow IXIA Interface Configuration

interface TenGigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric bridge-domain 2000

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

14

IXIA Traffic Capture

IXIA Packet Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

15

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

16

Router Configuration W2-2

Topology VC Label = 38 IGP Label = 18

interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 10 etype ipv6

Popped (18) 18 38

Routed Port

Popped (38)

rewrite ingress tag pop 1 symmetric bridge-domain 2000

18

38

end Imposed(18,38)

interface Vlan2000

Traffic Capture

no ip address xconnect 200.1.1.12 100 encapsulation mpls end

100 % LOSS © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

17

W2-2 Configuration interface GigabitEthernet0/4

ME3800-H-2 Configuration interface GigabitEthernet0/14

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation priority-tagged

encapsulation priority-tagged

bridge-domain 2507

bridge-domain 2507

! interface GigabitEthernet0/5

TRUNK PORT

TRUNK PORT

Traffic Flow

! interface GigabitEthernet0/22

switchport mode trunk !

Topology

switchport mode trunk !

TRUNK PORT

Traffic Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

18

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

19

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

20

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

21

INGRESS UNI interface GigabitEthernet0/1 port-type nni switchport access vlan 10

EGRESS NNI interface GigabitEthernet0/2 switchport mode trunk

Bridged to VLAN 10

Untagged Packet

Ingress Switchport Gig 0/1

PUSH TAG 10 Egress Switchport Gig 0/2

VLAN 10 (CTAG)

ME3800X/ME3600X SWITCH

Traffic Direction

Switchport: Implicit push on egress & implicit pop on ingress © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

22

Topology

IXIA Interface Configuration Traffic Flow Ingress

Untagged IPv4

VLAN 10

IPv4

Egress

Router Configuration interface GigabitEthernet0/1 switchport access vlan 10 end interface GigabitEthernet0/2 switchport mode trunk end

© 2010 Cisco and/or its affiliates. All rights reserved.

No VLAN

Cisco Confidential

23

Single Tagged Frame

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

24

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

25

Router Configuration

Topology Traffic Flow

interface GigabitEthernet0/1

Ingress

switchport access vlan 10 end

Untagged IPv6

VLAN 10

IPv6

interface GigabitEthernet0/2 switchport mode trunk

Egress

end

IXIA Interface Configuration

No VLAN

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

26

Single Tagged Frame

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

27

INGRESS UNI interface GigabitEthernet0/1 port-type nni switchport trunk native vlan 10 switchport mode trunk

EGRESS NNI interface GigabitEthernet0/2 switchport mode trunk

*By defalult untagged goes to vlan 1, to change the behavior use the command “native vlan 10” under trunk

Untagged Packet

Ingress Switchport

Bridged to VLAN 10

Egress Switchport PUSH

Switch Gig 0/2 Gig 0/1 Under Test SWITCH ME3800X/ME3600X

VLAN 10 (CTAG)

Traffic Direction

Switchport: Implicit push on egress & implicit pop on ingress © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

28

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

29

INGRESS UNI interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 10 bridge-domain 100

EGRESS NNI interface GigabitEthernet0/2 switchport mode trunk

TAG 10

VLAN 10 (C-TAG)

INGRESS EFP

Egress Switchport VLAN 100 (S-TAG) PUSH

Switch Gig 0/2 Gig 0/1 Under Test SWITCH ME3800X/ME3600X

VLAN 10 (C-TAG)

Traffic Direction

Switchport: Implicit push on egress & implicit pop on ingress © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

30

Router Configuration

Topology 1200 based on bridge-domain

Traffic Flow interface GigabitEthernet0/1

Ingress

switchport trunk allowed vlan none switchport mode trunk

C-VLAN 10

IPv4

S-VLAN 1200

C-VLAN 10

IPv4

service instance 1 ethernet encapsulation dot1q 10 bridge-domain 1200

Egress

IXIA Interface Configuration

! interface GigabitEthernet0/2 switchport mode trunk !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

31

S TAG Double Tagged Frame C TAG

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

32

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

33

Router Configuration

Topology

Traffic Flow

interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk

1200 based on bridge-domain

Ingress C-VLAN 10

IPv6

S-VLAN 1200

C-VLAN 10

IPv6

service instance 1 ethernet encapsulation dot1q 10 bridge-domain 1200

Egress

IXIA Interface Configuration

End interface GigabitEthernet0/2 switchport mode trunk end

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

34

S TAG Double Tagged Frame C TAG

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

35

INGRESS UNI interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 10-20 bridge-domain 100

EGRESS NNI interface GigabitEthernet0/2 switchport mode trunk

service instance 20 ethernet encapsulation dot1q 20-30 bridge-domain 200

TAG 10-20 TAG 20-30 VLAN 10-20 (C-TAG) VLAN 20-30 (C-TAG)

INGRESS EFP

Egress Switchport PUSH

Switch Gig 0/2 Under Test SWITCH ME3800X/ME3600X

Gig 0/1

VLAN 100, 10-20 VLAN 200, 20-30

Traffic Direction

Switchport: Implicit push on egress & implicit pop on ingress © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

36

INGRESS UNI interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 1-50 bridge-domain 5000

EGRESS UNI interface GigabitEthernet0/2 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 5000

BD 5000 VLAN 1-50 (C-TAG)

INGRESS EFP

Egress EFP

Switch Gig 0/2 Under Test SWITCH ME3800X/ME3600X

Gig 0/1

VLAN 100 (S-TAG) VLAN 1-50 (CTAG)

Traffic Direction

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

37

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 20 Priority: 4 C-VLAN VLAN ID: 100 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric bridge-domain 1200 !

ME3800-H-2 Egress (Gi0/4) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20

interface GigabitEthernet0/4

100. .... .... .... = Priority: 4

switchport trunk allowed vlan none

...0 .... .... .... = CFI: 0

switchport mode trunk

.... 0000 0001 0100 = ID: 20

service instance 1 ethernet

Type: 802.1Q Virtual LAN (0x8100)

encapsulation dot1q 20 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

38

1:1 VLAN Mapping Multi-Tenant Unit

Customer A Headquarters Customer CPE

Customer-A VLAN - 10

Customer CPE

UNI ME3600X

Customer B Headquarters

Service Provider Network MPLS Core with dot1Q Ethernet Access Domain

UNI 0/1

ME3800X UNI 0/2

Customer-B VLAN - 10

Customer CPE

ME3600X

Customer CPE

UNI

Problem: Customer-A and Customer-B have the overlapping VLANs configured on their networks and the service provider does NOT want to deploy QinQ. Why is it Important: This removes the need for coordinate the CVLANs with customers. Allowing more Flexible Service Delivery © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

39

INGRESS UNI interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric bridge-domain 10

VLAN 10

INGRESS EFP POP

EGRESS UNI interface GigabitEthernet0/2 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 20 rewrite ingress tag pop 1 symmetric bridge-domain 10

UNTAG

EGRESS EFP PUSH

Switch Gig 0/2 Gig 0/1 Under Test ME3800X/ME3600X SWITCH

VLAN 20

Traffic Direction © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

40

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 3200 Priority: 4

C-VLAN VLAN ID: 20 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric

Traffic Flow

bridge-domain 1200 ! interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

ME3800-H-2 (Gi0/4) Egress Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0

encapsulation dot1q 20 .... 0000 0001 0100 = ID: 20 rewrite ingress tag pop 1 symmetric bridge-domain 1200 !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

41

1:2 VLAN Mapping / Selective QinQ Customer A Remote Branch # 1

Customer CPE

Push QinQ Tag Customer A Headquarters

UNI

Service Provider Network Pop QinQ Tag Customer A Remote Branch # 2

UNI

Customer CPE

Pop QinQ Tag © 2010 Cisco and/or its affiliates. All rights reserved.

Customer CPE UNI

MPLS Core with QinQ Ethernet Access Domain Ethernet Virtual Private Line Service • Leverages Selective QinQ (1:2 VLAN Mapping) on ME ME3800X/ME3600X with multiplexed UNI • Uses EVC (Flexible UNI) infrastructure • Adds / Removes Service Provider VLAN (S-VLAN) based upon the Customer (CE-VLAN) mapping • EVPL serves as a replacement for lower speed Frame Relay service offerings • The New ME3800X/ME3600X ASIC allows the user full flexibility of marking the SVLAN Tag COS marking based 42 on the Customer CoS / DSCP / IP Prec marking Cisco Confidential

INGRESS UNI interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric bridge-domain 10

EGRESS UNI interface GigabitEthernet0/2 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 20 second-dot1q 30 rewrite ingress tag pop 2 symmetric bridge-domain 10

UNTAG

VLAN 10

INGRESS POP Gig 0/1

Switch Under

EGRESS PUSH Gig 0/2

VLAN 20, VLAN 30 (C-VLAN)

ME3800X/ME3600X SWITCH

Traffic Direction © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

43

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 20 Priority: 4 C-VLAN VLAN ID: 100 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric bridge-domain 1200 !

ME3800-H-2 Egress (Gi0/4) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20

interface GigabitEthernet0/4

100. .... .... .... = Priority: 4

switchport trunk allowed vlan none

...0 .... .... .... = CFI: 0

switchport mode trunk

.... 0000 0001 0100 = ID: 20

service instance 1 ethernet

Type: 802.1Q Virtual LAN (0x8100)

encapsulation dot1q 20 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

44

L2 VPN

•  Provides Port Isolation allowing multiple customers single switch to have same internal Vlans •  Flexibility for Service Provider to choose Vlans to pass over Core •  Does NOT require mixing of Customer and Provider Vlans

Customer A Dot1Q Tunnel Dot1Q Tunnel

Customer B Customer A Customer B

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

45

INGRESS UNI interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 10 second-dot1q 20 rewrite ingress tag pop 2 symmetric bridge-domain 10

EGRESS UNI interface GigabitEthernet0/2 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 30 rewrite ingress tag pop 1 symmetric bridge-domain 10

UNTAG

VLAN 10, VLAN 20 (C-VLAN)

INGRESS POP Gig 0/1

EGRESS PUSH Gig 0/2

VLAN 30

ME3800X/ME3600X SWITCH

Traffic Direction © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

46

Router (ME3800-H-2) Interface Configuration interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

Topology S-VLAN VLAN ID: 3200 Priority: 4 C-VLAN VLAN ID: 100 Priority: 6

C-VLAN VLAN ID: 100 Priority: 4

encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200

Traffic Flow

! interface GigabitEthernet0/4

ME3800-H-2 Egress (Gi0/4) Capture

switchport trunk allowed vlan none 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100 switchport mode trunk 100. .... .... .... = Priority: 4 service instance 1 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric

...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

bridge-domain 1200 !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

47

INGRESS UNI interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 10 second-dot1q 20 rewrite ingress tag pop 2 symmetric bridge-domain 10

EGRESS UNI interface GigabitEthernet0/2 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 30 second-dot1q 40 rewrite ingress tag pop 2 symmetric bridge-domain 10

UNTAG

VLAN 10, VLAN 20 (C-VLAN)

INGRESS POP Gig 0/1

Switch Under

EGRESS PUSH Gig 0/2

VLAN 30, VLAN 40 (C-VLAN)

ME3800X/ME3600X SWITCH

Traffic Direction © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

48

Router (ME3800-H-2) Interface Configuration interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

Topology S-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 100 Priority: 4

C-VLAN VLAN ID: 100 Priority: 6

C-VLAN VLAN ID: 20 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200 !

ME3800-H-2 Egress (Gi0/4) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100

interface GigabitEthernet0/4

100. .... .... .... = Priority: 4

switchport trunk allowed vlan none

...0 .... .... .... = CFI: 0

switchport mode trunk

.... 0000 0110 0100 = ID: 100

service instance 1 ethernet

Type: 802.1Q Virtual LAN (0x8100)

encapsulation dot1q 100 second-dot1q 20 rewrite ingress tag pop 2 symmetric bridge-domain 1200

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 0000 0001 0100 = ID: 20

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

49

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

50

•  To enable L2PT, the command to do this is: “l2protocol tunnel “ interface GigabitEthernet0/4 service instance 20 ethernet encapsulation untagged, dot1q 200 second-dot1q 300 l2protocol tunnel cdp stp vtp dtp pagp lacp udld lldp bridge-domain 10 •  Valid include: cdp, dtp, lacp, pagp, stp, vtp udld lldp •  If a protocol is not listed in , then it is dropped at the

interface

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

51

1 GE

Core

Distribution

ME3800X/ME3600X 10GE

10 GE

L2PT Forward Configuration interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 10 second-dot1q 20 rewrite ingress tag pop 2 symmetric l2protocol forward cdp stp xconnect 5.5.5.5 1000 encapsulation mpls mtu 1500

L2PT Forward Option 3600-HL-1(config-if-srv)#l2protocol forward ? cdp Cisco Discovery Protocol dtp Dynamic Trunking Protocol lacp LACP Protocol lldp Link Layer Discovery Protocol pagp Port Aggregation Protocol stp Spanning Tree Protocol udld UDLD Protocol vtp Vlan Trunking Protocol

Why L2PT Forward? •  Interop with Cisco devices which do not support L2PT tunnel (e.g. Cisco 7600) •  Interop with Non Cisco devices to tunnel BPDUs © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

52

EFP with BD

EFP with SVI (Xconnect)

EFP with Xconnect

Default (No L2PT tunnel & L2PT Forward)

Drop all BPDU

Drop all BPDU

Drop all BPDU

L2PT Forward

Forward All*: l2protocol forward

Forward All*: l2protocol forward

Forward All*: l2protocol forward

Selective: l2protocol forward cdp stp *Hop by Hop need to enable on every hop

Selective: l2protocol forward cdp stp

Selective: l2protocol forward cdp stp

Forward All*: l2protocol tunnel

Forward All*: l2protocol tunnel

Forward All*: l2protocol tunnel

Selective: l2protocol tunnel cdp stp

Selective: l2protocol tunnel cdp stp

Selective: l2protocol tunnel cdp stp

L2PT Tunnel

All*: Local Switching is supported with tunnel and forward cdp Cisco Discovery Protocol dtp Dynamic Trunking Protocol lacp LACP Protocol lldp Link Layer Discovery Protocol pagp Port Aggregation Protocol stp Spanning Tree Protocol udld UDLD Protocol vtp Vlan Trunking Protocol

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

53

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

54

•  Default COS propagation from Inner to Outer COS (Egress PUSH 1 &

Egress PUSH 2)

•  No COS propagation from Outer COS to Inner COS in case of

Disposition

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

55

Test Cases

Result

VLAN Translation 1:1

“P” bit Ingress = 4 and Egress = 4

VLAN Translation 1:1 with Ingress “Set COS” Policy

“P” bit Ingress = 4 and Egress = 3

VLAN Translation 1:1 with Egress “Set COS” Policy

“P” bit Ingress = 4 and Egress = 3

VLAN Translation 1:2

“P” bit Ingress = 4 and Egress = 4(S-VLAN), 4 (C-VLAN)

VLAN Translation 1:2 with Ingress “Set COS” Policy

“P” bit Ingress = 4 and Egress = 3(S-VLAN), 4 (C-VLAN)

VLAN Translation 1:2 with Egress “Set COS” Policy

“P” bit Ingress = 4 and Egress = 3(S-VLAN), 4 (C-VLAN)

VLAN Translation 1:2 (EFP only)

“P” bit Ingress = 4 and Egress = 4(S-VLAN), 4 (C-VLAN)

VLAN Translation 2:1

“P” bit Ingress = 4(S-VLAN), 6 (C-VLAN) and Egress = 4

VLAN Translation 2:1 with Ingress “Set COS” Policy

“P” bit Ingress = 4(S-VLAN), 6 (C-VLAN) and Egress = 3

VLAN Translation 2:1 with Egress “Set COS” Policy

“P” bit Ingress = 4(S-VLAN), 6 (C-VLAN) and Egress = 3

VLAN Translation 2:2

“P” bit Ingress = 4(S-VLAN), 6 (C-VLAN) and Egress = 4(S-VLAN), 4 (C-VLAN)

VLAN Translation 2:2 with Ingress “Set COS” Policy

“P” bit Ingress = 4(S-VLAN), 6 (C-VLAN) and Egress = 3(S-VLAN), 3 (C-VLAN)

VLAN Translation 2:2 with Egress “Set COS” Policy

“P” bit Ingress = 4(S-VLAN), 6 (C-VLAN) and Egress = 3(S-VLAN), 3 (C-VLAN)

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

56

IXIA Interface Configuration

Topology

Traffic Flow

Traffic Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

57

IXIA Interface Configuration

Topology

Traffic Flow

Traffic Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

58

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 3200 Priority: 4

C-VLAN VLAN ID: 20 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric

Traffic Flow

bridge-domain 1200 ! interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

ME3800-H-2 (Gi0/4) Egress Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0

encapsulation dot1q 20 .... 0000 0001 0100 = ID: 20 rewrite ingress tag pop 1 symmetric bridge-domain 1200 !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

59

Router (ME3600-HL-2) Interface Configuration

Topology

interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 20 Priority: 4

C-VLAN VLAN ID: 3200 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric

Traffic Flow

bridge-domain 1200 ! interface GigabitEthernet0/4 switchport trunk allowed vlan none

ME3600-HL-2 (Gi0/6) Egress Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20

switchport mode trunk

100. .... .... .... = Priority: 4

service instance 1 ethernet

...0 .... .... .... = CFI: 0

encapsulation dot1q 20

.... 0000 0001 0100 = ID: 20

rewrite ingress tag pop 1 symmetric bridge-domain 1200 !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

60

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 3200 Priority: 4

C-VLAN VLAN ID: 20 Priority: 3

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric

Traffic Flow

service-policy input set-cos-3 bridge-domain 1200 !

ME3800-H-2 (Gi0/4) Egress Capture 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 20

interface GigabitEthernet0/4 011. .... .... .... = Priority: 3 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

...0 .... .... .... = CFI: 0 .... 0000 0001 0100 = ID: 20

encapsulation dot1q 20 rewrite ingress tag pop 1 symmetric bridge-domain 1200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

61

Router (ME3600-HL-2) Interface Configuration

Topology

interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 20 Priority: 3

C-VLAN VLAN ID: 3200 Priority: 3

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric

Traffic Flow

bridge-domain 1200 ! interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

ME3600-HL-2 (Gi0/6) Egress Capture 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 3200 011. .... .... .... = Priority: 3

encapsulation dot1q 20

...0 .... .... .... = CFI: 0

rewrite ingress tag pop 1 symmetric

.... 1100 1000 0000 = ID: 3200

bridge-domain 1200 !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

62

3800-H-2#sh run policy-map !

3800-H-2#sh policy-map interface gi0/14 service instance 1 input !

policy-map set-cos-3 GigabitEthernet0/14: EFP 1 class class-default set cos 3

Service-policy input: set-cos-3

Class-map: class-default (match-any) 126267 packets, 176773800 bytes 5 minute offered rate 3835000 bps, drop rate 0000 bps Match: any set cos 3

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

63

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

C-VLAN VLAN ID: 3200 Priority: 4

C-VLAN VLAN ID: 20 Priority: 3

encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric bridge-domain 1200

Traffic Flow

! interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 20

ME3800-H-2 Egress (Gi0/4) Capture 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 20 011. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0

rewrite ingress tag pop 1 symmetric .... 0000 0001 0100 = ID: 20 service-policy output set-cos-3-parent bridge-domain 1200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

64

Router (ME3600-HL-2) Interface Configuration

Topology

interface GigabitEthernet0/6 switchport trunk allowed vlan none

C-VLAN VLAN ID: 20 Priority: 3

switchport mode trunk

C-VLAN VLAN ID: 3200 Priority: 3

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric

Traffic Flow

bridge-domain 1200 ! interface GigabitEthernet0/4 switchport trunk allowed vlan none

ME3600-HL-2 (Gi0/6) Egress Capture 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 3200

switchport mode trunk

011. .... .... .... = Priority: 3

service instance 1 ethernet

...0 .... .... .... = CFI: 0

encapsulation dot1q 20

.... 1100 1000 0000 = ID: 3200

rewrite ingress tag pop 1 symmetric bridge-domain 1200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

65

3800-H-2#sh running-config policy-map Building configuration...

3800-H-2#sh policy-map interface gi0/16 service instance 1 output GigabitEthernet0/16: EFP 1 Service-policy output: set-cos-3-parent

Current configuration : 135 bytes !

Class-map: vlan3200 (match-all) 0 packets, 0 bytes

policy-map set-cos-3 class class-default set cos 3

5 minute offered rate 0000 bps Match: vlan

3200

Service-policy : set-cos-3

policy-map set-cos-3-parent

Class-map: class-default (match-any)

class vlan3200 0 packets, 0 bytes service-policy set-cos-3 5 minute offered rate 0000 bps, drop rate 0000 !

bps Match: any set cos 3 Queue-limit current-queue-depth 0 bytes Output Queue: Tail Packets Drop: 0 Cisco Confidential

© 2010 Cisco and/or its affiliates. All rights reserved.

Class-map: class-default (match-any)

66

Router (ME3800-H-2) Interface Configuration interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

Topology C-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 1200 Priority: 4 C-VLAN VLAN ID: 3200 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 bridge-domain 1200

ME3800-H-2 Egress (Gi0/16) Capture

! 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 1200

interface GigabitEthernet0/16 switchport mode trunk

100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 0100 1011 0000 = ID: 1200 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

67

Router (W2-2) Interface Configuration interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

Topology S-VLAN VLAN ID: 1200 Priority: 4 C-VLAN VLAN ID: 3200 Priority: 4

C-VLAN VLAN ID: 3200 Priority: 4

encapsulation dot1q 3200 bridge-domain 1200 ! interface GigabitEthernet0/7

W2-2 Egress (Gi0/4) Capture

switchport mode trunk

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200

!

100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

68

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none swtchport mode trunk

C-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 1200 Priority: 3 C-VLAN VLAN ID: 3200 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 service-policy input set-cos-3

ME3800-H-2 Egress (Gi0/16) Capture

bridge-domain 1200 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 1200

!

011. .... .... .... = Priority: 3

interface GigabitEthernet0/16

...0 .... .... .... = CFI: 0

switchport mode trunk

.... 0100 1011 0000 = ID: 1200

!

Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

69

Router (W2-2) Interface Configuration interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk

Topology S-VLAN VLAN ID: 1200 Priority: 3

C-VLAN VLAN ID: 3200 Priority: 4

C-VLAN VLAN ID: 3200 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 bridge-domain 1200 ! interface GigabitEthernet0/7

W2-2 Egress (Gi0/4) Capture

switchport mode trunk 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200

! 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

70

3800-H-2#sh run policy-map

3800-H-2#sh policy-map interface gi0/14 service instance 1 input

! policy-map set-cos-3 GigabitEthernet0/14: EFP 1 class class-default set cos 3

Service-policy input: set-cos-3

Class-map: class-default (match-any) 21624 packets, 30273600 bytes 5 minute offered rate 478000 bps, drop rate 0000 bps Match: any set cos 3

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

71

Router (ME3800-H-2) Interface Configuration

Topology

Interface GigabitEthernet0/14 switchport trunk allowed vlan none

C-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 1200 Priority: 3 C-VLAN VLAN ID: 3200 Priority: 4

switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 bridge-domain 1200 !

ME3800-H-2 Egress (Gi0/16) Capture 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 1200

interface GigabitEthernet0/4

011. .... .... .... = Priority: 3

switchport mode trunk

...0 .... .... .... = CFI: 0

service-policy output set-cos-3-parent

.... 0100 1011 0000 = ID: 1200 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

72

Router (ME3600-HL-2) Interface Configuration interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk

Topology

S-VLAN VLAN ID: 1200 Priority: 3 C-VLAN VLAN ID: 3200 Priority: 4

C-VLAN VLAN ID: 3200 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 bridge-domain 1200 ! interface GigabitEthernet0/4 switchport mode trunk !

ME3600-HL-2 Egress (Gi0/6) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

73

3800-H-2#sh running-config policy-map Building configuration...

3800-H-2#sh policy-map interface gi0/16 service instance 1 output GigabitEthernet0/16: EFP 1 Service-policy output: set-cos-3-parent

Current configuration : 135 bytes !

Class-map: vlan3200 (match-all) 0 packets, 0 bytes

policy-map set-cos-3 class class-default set cos 3

5 minute offered rate 0000 bps Match: vlan

3200

Service-policy : set-cos-3

policy-map set-cos-3-parent

Class-map: class-default (match-any)

class vlan3200 0 packets, 0 bytes service-policy set-cos-3 5 minute offered rate 0000 bps, drop rate 0000 !

bps Match: any set cos 3 Queue-limit current-queue-depth 0 bytes Output Queue: Tail Packets Drop: 0 Cisco Confidential

© 2010 Cisco and/or its affiliates. All rights reserved.

Class-map: class-default (match-any)

74

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 20 Priority: 4 C-VLAN VLAN ID: 100 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric bridge-domain 1200 !

ME3800-H-2 Egress (Gi0/4) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20

interface GigabitEthernet0/4

100. .... .... .... = Priority: 4

switchport trunk allowed vlan none

...0 .... .... .... = CFI: 0

switchport mode trunk

.... 0000 0001 0100 = ID: 20

service instance 1 ethernet

Type: 802.1Q Virtual LAN (0x8100)

encapsulation dot1q 20 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

75

Router (ME3600-HL-2) Interface Configuration

Topology

interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

S-VLAN VLAN ID: 20 Priority: 4 C-VLAN VLAN ID: 100 Priority: 4

C-VLAN VLAN ID: 3200 Priority: 4

encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric bridge-domain 1200 ! interface GigabitEthernet0/4 switchport trunk allowed vlan none

ME3600-HL-2 Egress (Gi0/6) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200

switchport mode trunk

100. .... .... .... = Priority: 4

service instance 1 ethernet

...0 .... .... .... = CFI: 0

encapsulation dot1q 20 second-dot1q 100

.... 1100 1000 0000 = ID: 3200

rewrite ingress tag pop 2 symmetric bridge-domain 1200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

76

IXIA Interface Configuration

Topology

Traffic Flow

Traffic Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

77

Router (ME3800-H-2) Interface Configuration interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

Topology S-VLAN VLAN ID: 3200 Priority: 4 C-VLAN VLAN ID: 100 Priority: 6

C-VLAN VLAN ID: 100 Priority: 4

encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200

Traffic Flow

! interface GigabitEthernet0/4

ME3800-H-2 Egress (Gi0/4) Capture

switchport trunk allowed vlan none 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100 switchport mode trunk 100. .... .... .... = Priority: 4 service instance 1 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric

...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

bridge-domain 1200 !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

78

Router (ME3600-HL-2) Interface Configuration

Topology

S-VLAN VLAN ID: 3200 Priority: 4

interface GigabitEthernet0/6 switchport trunk allowed vlan none

C-VLAN VLAN ID: 100 Priority: 4

switchport mode trunk

C-VLAN VLAN ID: 100 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200 !

ME3600- HL-2 Egress (Gi0/6) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200

interface GigabitEthernet0/4

100. .... .... .... = Priority: 4

switchport trunk allowed vlan none

...0 .... .... .... = CFI: 0

switchport mode trunk

.... 1100 1000 0000 = ID: 3200

service instance 1 ethernet

Type: 802.1Q Virtual LAN (0x8100)

encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0

bridge-domain 1200 .... 0000 0110 0100 = ID: 100

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

79

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none

S-VLAN VLAN ID: 3200 Priority: 4

switchport mode trunk service instance 1 ethernet

C-VLAN VLAN ID: 100 Priority: 6

C-VLAN VLAN ID: 100 Priority: 3

encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric service-policy input set-cos-3 bridge-domain 1200

Traffic Flow

! interface GigabitEthernet0/4

ME3800-H-2 Egress (Gi0/4) Capture

switchport trunk allowed vlan none 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 100 switchport mode trunk 011. .... .... .... = Priority: 3 service instance 1 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric

...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

bridge-domain 1200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

80

Router (ME3600-HL-2) Interface Configuration

Topology

S-VLAN VLAN ID: 3200 Priority: 3

interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk

C-VLAN VLAN ID: 100 Priority: 3

C-VLAN VLAN ID: 100 Priority: 3

service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200

ME3600- HL-2 Egress (Gi0/6) Capture

! 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 3200

interface GigabitEthernet0/4 011. .... .... .... = Priority: 3

switchport trunk allowed vlan none ...0 .... .... .... = CFI: 0

switchport mode trunk .... 1100 1000 0000 = ID: 3200

service instance 1 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 1200 !

© 2010 Cisco and/or its affiliates. All rights reserved.

Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 100 011. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

Cisco Confidential

81

Valli

Router (ME3800-H-2) Interface Configuration

Topology

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100

S-VLAN VLAN ID: 3200 Priority: 4 C-VLAN VLAN ID: 100 Priority: 6

C-VLAN VLAN ID: 100 Priority: 3

rewrite ingress tag pop 2 symmetric bridge-domain 1200

Traffic Flow

! interface GigabitEthernet0/4 switchport trunk allowed vlan none

ME3800-H-2 Egress (Gi0/4) Capture

switchport mode trunk service instance 1 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric service-policy output set-cos-3-parent

802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 100 011. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

bridge-domain 1200

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

82

Router (ME3600-HL-2) Interface Configuration interface GigabitEthernet0/6 switchport trunk allowed vlan none

S-VLAN VLAN ID: 3200 Priority: 3

Topology C-VLAN VLAN ID: 100 Priority: 3

C-VLAN VLAN ID: 100 Priority: 3

switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200

ME3600- HL-2 Egress (Gi0/6) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200

! interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 1200

100. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100 100. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

83

3800-H-2#sh run policy-map !

3800-H-2#sh policy-map interface gi0/4 service instance 1 output GigabitEthernet0/4: EFP 1

policy-map set-cos-3 class class-default set cos 3 policy-map set-cos-3-parent class vlan3200

Service-policy output: set-cos-3-parent Class-map: vlan3200 (match-any) 426989 packets, 597784600 bytes 5 minute offered rate 8587000 bps Match: vlan

20

Match: vlan

1200

!

Match: vlan

100

end

Service-policy : set-cos-3

service-policy set-cos-3

Class-map: class-default (match-any) 426989 packets, 597784600 bytes 5 minute offered rate 8587000 bps, drop rate 0000 bps Match: any set cos 3 Queue-limit current-queue-depth 0 bytes Cisco Confidential

© 2010 Cisco and/or its affiliates. All rights reserved.

Output Queue:

84

Router (ME3800-H-2) Interface Configuration interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk

Topology S-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 100 Priority: 4

C-VLAN VLAN ID: 100 Priority: 6

C-VLAN VLAN ID: 20 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200 !

ME3800-H-2 Egress (Gi0/4) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100

interface GigabitEthernet0/4

100. .... .... .... = Priority: 4

switchport trunk allowed vlan none

...0 .... .... .... = CFI: 0

switchport mode trunk

.... 0000 0110 0100 = ID: 100

service instance 1 ethernet

Type: 802.1Q Virtual LAN (0x8100)

encapsulation dot1q 100 second-dot1q 20 rewrite ingress tag pop 2 symmetric bridge-domain 1200

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 0000 0001 0100 = ID: 20

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

85

Router (ME3600-HL-2) Interface Configuration interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk

Topology S-VLAN VLAN ID: 100 Priority: 4

S-VLAN VLAN ID: 3200 Priority: 4

C-VLAN VLAN ID: 20 Priority: 4

C-VLAN VLAN ID: 100 Priority: 4

service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200

ME3600- HL-2 Egress (Gi0/6) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200

!

100. .... .... .... = Priority: 4

interface GigabitEthernet0/4 ...0 .... .... .... = CFI: 0

switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

.... 1100 1000 0000 = ID: 3200 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100

encapsulation dot1q 100 second-dot1q 20

100. .... .... .... = Priority: 4

rewrite ingress tag pop 2 symmetric

...0 .... .... .... = CFI: 0

bridge-domain 1200

.... 0000 0110 0100 = ID: 100

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

86

Router (ME3800-H-2) Interface Configuration interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

Topology S-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 100 Priority: 3

C-VLAN VLAN ID: 100 Priority: 6

C-VLAN VLAN ID: 20 Priority: 3

encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric service-policy input set-cos-3 bridge-domain 1200 !

ME3800-H-2 Egress (Gi0/4) Capture 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 100 011. .... .... .... = Priority: 3

interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

...0 .... .... .... = CFI: 0 .... 0000 0110 0100 = ID: 100 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 20

encapsulation dot1q 100 second-dot1q 20

011. .... .... .... = Priority: 3

rewrite ingress tag pop 2 symmetric

...0 .... .... .... = CFI: 0

bridge-domain 1200

.... 0000 0001 0100 = ID: 20

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

87

Router (ME3600-HL-2) Interface Configuration interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

Topology S-VLAN VLAN ID: 100 Priority: 3

S-VLAN VLAN ID: 3200 Priority: 3

C-VLAN VLAN ID: 20 Priority: 3

C-VLAN VLAN ID: 100 Priority: 3

encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200 !

ME3600- HL-2 Egress (Gi0/6) Capture 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 3200

interface GigabitEthernet0/4

011. .... .... .... = Priority: 3

switchport trunk allowed vlan none

...0 .... .... .... = CFI: 0

switchport mode trunk

.... 1100 1000 0000 = ID: 3200

service instance 1 ethernet encapsulation dot1q 100 second-dot1q 20

Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 100 011. .... .... .... = Priority: 3

rewrite ingress tag pop 2 symmetric ...0 .... .... .... = CFI: 0

bridge-domain 1200 .... 0000 0110 0100 = ID: 100

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

88

3800-H-2#sh run policy-map !

800-H-2#sh policy-map interface gi0/14 service instance 1 input GigabitEthernet0/14: EFP 1

policy-map set-cos-3 Service-policy input: set-cos-3 class class-default Class-map: class-default (match-any) set cos 3

543859 packets, 761402600 bytes 5 minute offered rate 9418000 bps, drop rate 0000 bps Match: any set cos 3

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

89

Router (ME3800-H-2) Interface Configuration interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

Topology S-VLAN VLAN ID: 3200 Priority: 4

S-VLAN VLAN ID: 100 Priority: 3

C-VLAN VLAN ID: 100 Priority: 6

C-VLAN VLAN ID: 20 Priority: 3

encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200 !

ME3800-H-2 Egress (Gi0/4) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100

interface GigabitEthernet0/4 100. .... .... .... = Priority: 3

switchport trunk allowed vlan none ...0 .... .... .... = CFI: 0

switchport mode trunk .... 0000 0110 0100 = ID: 100

service instance 1 ethernet Type: 802.1Q Virtual LAN (0x8100)

encapsulation dot1q 100 second-dot1q 20 rewrite ingress tag pop 2 symmetric service-policy output set-cos-3-parent bridge-domain 1200

© 2010 Cisco and/or its affiliates. All rights reserved.

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 20 100. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 0000 0001 0100 = ID: 20

Cisco Confidential

90

Router (ME3600-HL-2) Interface Configuration interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk

Topology S-VLAN VLAN ID: 100 Priority: 3 C-VLAN VLAN ID: 20 Priority: 3

S-VLAN VLAN ID: 3200 Priority: 3 C-VLAN VLAN ID: 100 Priority: 3

service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 2 symmetric bridge-domain 1200 !

ME3600- HL-2 Egress (Gi0/6) Capture 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200

interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 100 second-dot1q 20

100. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100 100. .... .... .... = Priority: 3

rewrite ingress tag pop 2 symmetric ...0 .... .... .... = CFI: 0

bridge-domain 1200

© 2010 Cisco and/or its affiliates. All rights reserved.

.... 0000 0110 0100 = ID: 100

Cisco Confidential

91

3800-H-2#sh run policy-map !

3800-H-2#sh policy-map interface gi0/4 service instance 1 output GigabitEthernet0/4: EFP 1

policy-map set-cos-3 class class-default set cos 3 policy-map set-cos-3-parent class vlan3200 service-policy set-cos-3 ! end

Service-policy output: set-cos-3-parent Class-map: vlan3200 (match-any) 764276 packets, 1069986400 bytes 5 minute offered rate 10396000 bps Match: vlan

1200

Match: vlan

100

Service-policy : set-cos-3 Class-map: class-default (match-any) 764276 packets, 1069986400 bytes 5 minute offered rate 10396000 bps, drop rate 0000 bps Match: any set cos 3 Queue-limit current-queue-depth 0 bytes Output Queue: Cisco Confidential

© 2010 Cisco and/or its affiliates. All rights reserved.

Tail Packets Drop: 0

92

© © 2010 2010 Cisco Cisco and/or and/or its its affiliates. affiliates. All All rights rights reserved. reserved.

Cisco Confidential

93 93

Interface Type

Supported Configuration

Routed Port

IP VRF Xconnect

EFP-BD with SVI

IP VRF Xconnect

Recommended configuration for IP and VRF

Xconnect on EFP

Xconnect

Recommended configuration for VPWS

Switchport Trunk

IP VRF Xconnect

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

94

Interface Type

Supported Configuration

Routed Port

IP MPLS

EFP-BD with SVI

IP MPLS

Switchport Trunk

IP MPLS

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

95

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

96

interface GigabitEthernet0/1

interface GigabitEthernet0/1

no switchport

no switchport

ip address 12.1.1.1 255.255.255.0

ip vrf forwarding VPN1 ip address 12.1.1.1 255.255.255.0

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

97

interface GigabitEthernet0/1 no switchport no ip address xconnect 1.1.1.1 10 encapsulation mpls

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

98

interface GigabitEthernet0/1

interface GigabitEthernet0/1 switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 10 ethernet

service instance 10 ethernet encapsulation dot1q 100 second-dot1q 200

encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 2 symmetric

bridge-domain 10

bridge-domain 10

!

!

interface Vlan10

interface Vlan10

ip address 10.10.30.2 255.255.255.0

ip address 10.10.30.2 255.255.255.0

Preferred Configuration © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

99

interface GigabitEthernet0/1

interface GigabitEthernet0/1

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 10 ethernet

service instance 10 ethernet

encapsulation dot1q 100

encapsulation dot1q 100 second-dot1q 200

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 2 symmetric

bridge-domain 10

bridge-domain 10

!

!

interface Vlan10

interface Vlan10

ip vrf forwarding VPN1

ip vrf forwarding VPN1

ip address 12.1.1.1 255.255.255.0

ip address 12.1.1.1 255.255.255.0

Preferred Configuration © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

100

interface GigabitEthernet0/1

interface GigabitEthernet0/1

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 10 ethernet

service instance 10 ethernet

encapsulation dot1q 100

encapsulation dot1q 100 second-dot1q 200

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 2 symmetric

bridge-domain 10

bridge-domain 10

interface Vlan10

interface Vlan10

no ip address

no ip address

xconnect 2.2.2.2 10 encapsulation mpls

xconnect 2.2.2.2 10 encapsulation mpls

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

101

interface GigabitEthernet0/1

interface GigabitEthernet0/1

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation dot1q 10

encapsulation dot1q 10 second-dot1q 100

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 2 symmetric

xconnect 1.1.1.1 10 encapsulation mpls

xconnect 1.1.1.1 10 encapsulation mpls

!

Preferred Configuration

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

102

interface GigabitEthernet0/1

interface GigabitEthernet0/1

switchport trunk allowed vlan 10

switchport trunk allowed vlan 10

switchport mode trunk

switchport mode trunk

interface Vlan10

interface Vlan10

ip address 10.10.30.2 255.255.255.0

ip vrf forwarding VPN1 ip address 12.1.1.1 255.255.255.0

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

103

interface GigabitEthernet0/1 switchport trunk allowed vlan 10 switchport mode trunk

interface Vlan10 no ip address xconnect 2.2.2.2 10 encapsulation mpls

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

104

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

105

interface GigabitEthernet0/2

interface GigabitEthernet0/2

no switchport

no switchport

ip address 12.1.1.1 255.255.255.0

ip address 12.1.1.1 255.255.255.0 ip ospf network point-to-point mpls ip mpls label protocol ldp

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

106

interface GigabitEthernet0/2

interface GigabitEthernet0/2

switchport trunk allowed vlan 10

switchport trunk allowed vlan 10

switchport mode trunk

switchport mode trunk

interface Vlan10

interface Vlan10

ip address 10.10.30.2 255.255.255.0

ip address 10.10.30.2 255.255.255.0 ip ospf network point-to-point mpls ip mpls label protocol ldp

Preferred Configuration

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

107

interface GigabitEthernet0/1

interface GigabitEthernet0/1

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 10 ethernet

service instance 10 ethernet

encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 10 ! interface Vlan10

ncapsulation dot1q 100 second-dot1q 200 rewrite ingress tag pop 2 symmetric bridge-domain 10 ! interface Vlan10 ip address 10.10.30.2 255.255.255.0

ip address 10.10.30.2 255.255.255.0

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

108

interface GigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 10

interface Vlan10 ip address 10.10.30.2 255.255.255.0 ip ospf network point-to-point mpls ip mpls label protocol ldp © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

109

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

110 110

ME3800-HL-3 Configuration

Topology

interface TenGigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 10

IXIA Interface Configuration

! interface Vlan10 ip address 12.1.1.1 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0 ! interface GigabitEthernet0/11 no switchport ip address 53.53.53.1 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0 © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

111

ME3800-HL-2 Configuration

Topology

interface TenGigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 10 !

IXIA Interface Configuration

interface Vlan10 ip address 10.10.30.1 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0

interface GigabitEthernet0/11 no switchport ip address 53.53.53.2 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0 © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

112

Untagged Ethernet IPv4 Frame

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

113

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

114

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

115 115

ME3800-HL-3 Configuration

Topology

interface TenGigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 10 ! interface Vlan10

IXIA Interface Configuration

ip address 12.1.1.1 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0 ! interface GigabitEthernet0/11 switchport trunk allowed vlan 20 switchport mode trunk ! interface Vlan20 ip address 53.53.53.1 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

116

ME3800-HL-2 Configuration

Topology

interface TenGigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk service instance 10 ethernet encapsulation dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 10 ! interface Vlan10

IXIA Interface Configuration

ip address 10.10.30.1 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0 ! interface GigabitEthernet0/11 switchport trunk allowed vlan 20 switchport mode trunk ! interface Vlan20 ip address 53.53.53.1 255.255.255.0 ip ospf network point-to-point ©ip 2010ospf Cisco and/or its affiliates. 1 area 0 All rights reserved.

Cisco Confidential

117

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

118

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

119

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

120

ME3600-HL-3 Configuration

ME3600-HL-3 Configuration (Contd …)

Topology

VPN Label = 19

! ip vrf cust1

router bgp 100

rd 65000:100

bgp log-neighbor-changes

route-target export 65000:100

no bgp default ipv4-unicast

route-target import 65000:100

neighbor 5.1.1.2 remote-as 200

Egress = Routed Port VPN Label = 19 (Imposed)

Popped(19)

19

!

neighbor 10.10.10.2 remote-as 100

interface Loopback100

neighbor 10.10.10.2 update-source Loopback100

ip address 10.10.10.1 255.255.255.255

!

!

address-family ipv4

interface TenGigabitEthernet0/1

exit-address-family

switchport trunk allowed vlan none

!

switchport mode trunk

neighbor 10.10.10.2 activate

encapsulation dot1q 100

neighbor 10.10.10.2 sendcommunity extended

rewrite ingress tag pop 1 symmetric

!

© 2010 Cisco and/or its affiliates. All rights reserved.

IXIA Configuration

address-family vpnv4

service instance 10 ethernet

bridge-domain 10

Ingress = EFPBD

Traffic Capture

neighbor 10.10.10.2 next-hop-self exit-address-family !

Cisco Confidential

121

ME3600-HL-2 Configuration !

ME3600-HL-2 Configuration (Contd …)

Topology

VPN Label = 19

router bgp 100

bgp log-neighbor-changes

ip vrf cust1

no bgp default ipv4-unicast

rd 65000:100

Egress = Routed Port VPN Label = 19 (Imposed)

Popped(19)

neighbor 6.1.1.2 remote-as 200

19 neighbor 10.10.10.1 remote-as 100

route-target export 65000:100

neighbor 10.10.10.1 update-source Loopback100

route-target import 65000:100

!

address-family ipv4

!

exit-address-family

interface Loopback100

Ingress = EFPBD

!

address-family vpnv4

ip address 10.10.10.2 255.255.255.255

IXIA Configuration

neighbor 10.10.10.1 activate

neighbor 10.10.10.1 send-community extended

! neighbor 10.10.10.1 next-hop-self

interface TenGigabitEthernet0/1

exit-address-family

!

switchport trunk allowed vlan none address-family ipv4 vrf cust1

switchport mode trunk

redistribute connected

redistribute static

service instance 10 ethernet neighbor 6.1.1.2 remote-as 200

encapsulation dot1q 100

neighbor 6.1.1.2 activate

exit-address-family

rewrite ingress tag pop 1 symmetric

Traffic Capture

!

mpls ldp router-id Loopback100 force

bridge-domain 10 !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

122

ME3800-HL-3

3600-HL-3#sh ip bgp all su For address family: VPNv4 Unicast

3600-HL-3#sh ip ospf ne Neighbor ID

Pri

State

200.1.1.2 0 FULL/ GigabitEthernet0/11

-

Dead Time

Address

00:00:31

10.1.1.2

Interface

BGP router identifier 200.1.1.1, local AS number 100 4 network entries using 672 bytes of memory 4 path entries using 256 bytes of memory

!

2/2 BGP path/bestpath attribute entries using 288 bytes of memory

3600-HL-3#sh mpls ld ne Peer LDP Ident: 200.1.1.2:0; Local LDP Ident 10.10.10.1:0 TCP connection: 200.1.1.2.36945 - 10.10.10.1.646

1 BGP extended community entries using 24 bytes of memory BGP using 1240 total bytes of memory

State: Oper; Msgs sent/rcvd: 28/28; Downstream

BGP activity 6/2 prefixes, 6/2 paths, scan interval 60 secs

LDP discovery sources:

Neighbor V State/PfxRcd

AS MsgRcvd MsgSent

5.1.1.2 0

4

200

63

72

13

0

0 00:30:25

10.10.10.2 2

4

100

40

42

13

0

0 00:34:14

TblVer

InQ OutQ Up/Down

GigabitEthernet0/11, Src IP addr: 10.1.1.2 Addresses bound to peer LDP Ident: 10.1.1.2

200.1.1.2

10.10.10.2

! ! 3600-HL-3#ping vrf cust1 6.1.1.1 3600-HL-3#sh bgp vrf cust1 all labels Type escape sequence to abort. For address family: VPNv4 Unicast Sending 5, 100-byte ICMP Echos to 6.1.1.1, timeout is 2 seconds: Network

Next Hop

In label/Out label

!!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

© 2010 Cisco and/or its affiliates. All rights reserved.

Route Distinguisher: 65000:100 (cust1) 5.1.1.0/24

0.0.0.0

17/nolabel(cust1)

6.1.1.0/24

10.10.10.2

nolabel/19

Cisco Confidential

123

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

124

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

125

ME3600-HL-3 Configuration

ME3600-HL-3 Configuration (Contd …)

Topology

VPN Label = 19

! ip vrf cust1

router bgp 100

rd 65000:100

bgp log-neighbor-changes

route-target export 65000:100

no bgp default ipv4-unicast

route-target import 65000:100

neighbor 5.1.1.2 remote-as 200

!

neighbor 10.10.10.2 remote-as 100

interface Loopback100

neighbor 10.10.10.2 update-source Loopback100

ip address 10.10.10.1 255.255.255.255 !

!

Egress = Trunk with SVI VPN Label = 19 (Imposed)

Popped(19)

19

Ingress = EFPBD

IXIA Configuration

address-family ipv4

interface TenGigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk

exit-address-family ! address-family vpnv4

service instance 10 ethernet

neighbor 10.10.10.2 activate

encapsulation dot1q 100 neighbor 10.10.10.2 send-community extended

rewrite ingress tag pop 1 symmetric

neighbor 10.10.10.2 next-hop-self

bridge-domain 10

exit-address-family

! interface Vlan10 ip vrf forwarding cust1 © 2010 Cisco and/or its affiliates. All rights reserved.

Traffic Capture

! address-family ipv4 vrf cust1 redistribute connected

Cisco Confidential

126

ME3600-HL-2 Configuration

ME3600-HL-2 Configuration (Contd …)

Topology

VPN Label = 19

! ip vrf cust1

router bgp 100

rd 65000:100

bgp log-neighbor-changes

route-target export 65000:100

no bgp default ipv4-unicast

route-target import 65000:100

neighbor 6.1.1.2 remote-as 200

!

neighbor 10.10.10.1 remote-as 100

interface Loopback100

neighbor 10.10.10.1 update-source Loopback100

ip address 10.10.10.2 255.255.255.255 !

!

Egress = Trunk with SVI VPN Label = 19 (Imposed)

Popped(19)

19

Ingress = EFPBD

IXIA Configuration

address-family ipv4

interface TenGigabitEthernet0/1 switchport trunk allowed vlan none switchport mode trunk

exit-address-family ! address-family vpnv4

service instance 10 ethernet

neighbor 10.10.10.1 activate

encapsulation dot1q 100 neighbor 10.10.10.1 send-community extended

rewrite ingress tag pop 1 symmetric

neighbor 10.10.10.2 next-hop-self

bridge-domain 10

exit-address-family

! interface Vlan10 ip vrf forwarding cust1 © 2010 Cisco and/or its affiliates. All rights reserved.

Traffic Capture

! address-family ipv4 vrf cust1 redistribute connected

Cisco Confidential

127

ME3800-HL-3

3600-HL-3#sh ip bgp all su For address family: VPNv4 Unicast

3600-HL-3#sh ip ospf ne Neighbor ID

Pri

State

200.1.1.2 0 FULL/ GigabitEthernet0/11

-

Dead Time

Address

00:00:31

10.1.1.2

Interface

BGP router identifier 200.1.1.1, local AS number 100 4 network entries using 672 bytes of memory 4 path entries using 256 bytes of memory

!

2/2 BGP path/bestpath attribute entries using 288 bytes of memory

3600-HL-3#sh mpls ld ne Peer LDP Ident: 200.1.1.2:0; Local LDP Ident 10.10.10.1:0 TCP connection: 200.1.1.2.36945 - 10.10.10.1.646

1 BGP extended community entries using 24 bytes of memory BGP using 1240 total bytes of memory

State: Oper; Msgs sent/rcvd: 28/28; Downstream

BGP activity 6/2 prefixes, 6/2 paths, scan interval 60 secs

LDP discovery sources:

Neighbor V State/PfxRcd

AS MsgRcvd MsgSent

5.1.1.2 0

4

200

63

72

13

0

0 00:30:25

10.10.10.2 2

4

100

40

42

13

0

0 00:34:14

TblVer

InQ OutQ Up/Down

GigabitEthernet0/11, Src IP addr: 10.1.1.2 Addresses bound to peer LDP Ident: 10.1.1.2

200.1.1.2

10.10.10.2

! ! 3600-HL-3#ping vrf cust1 6.1.1.1 3600-HL-3#sh bgp vrf cust1 all labels Type escape sequence to abort. For address family: VPNv4 Unicast Sending 5, 100-byte ICMP Echos to 6.1.1.1, timeout is 2 seconds: Network

Next Hop

In label/Out label

!!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

© 2010 Cisco and/or its affiliates. All rights reserved.

Route Distinguisher: 65000:100 (cust1) 5.1.1.0/24

0.0.0.0

17/nolabel(cust1)

6.1.1.0/24

10.10.10.2

nolabel/19

Cisco Confidential

128

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

129

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

130

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

131 131

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

132

Router Configuration ME3800-H-2 interface GigabitEthernet0/14

Router Configuration W2-2 interface GigabitEthernet0/4

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation dot1q 10 second-dot1q 20

encapsulation dot1q 10 second-dot1q 20

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 1 symmetric

bridge-domain 2000

bridge-domain 2000

!

Topology VC Label = 5657 IGP Label = 16 Popped (16)

16 5657

Routed Ports

Popped (5657)

16

5657

Imposed(16,5657)

!

interface Vlan2000

interface Vlan2000

no ip address

no ip address

xconnect 200.1.1.11 100 encapsulation mpls !

Traffic Capture

xconnect 200.1.1.12 100 encapsulation mpls !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

133

Router W2-2

ROUTER ME3800-H-2

W2-2#sh mpls l2 vc 100 de

3800-H-2#sh mpls l2transport vc 100 detail

Local interface: Vl2000 up, line protocol up, Eth VLAN 2000 up

Local interface: Vl2000 up, line protocol up, Eth VLAN 2000 up

Interworking type is Ethernet

Destination address: 200.1.1.11, VC ID: 100, VC status: up

Destination address: 200.1.1.12, VC ID: 100, VC status: up Output interface: Gi0/2, imposed label stack {16 5657} Preferred path: not configured

Next hop: 39.39.39.1

Next hop: 42.42.42.1

Create time: 00:04:55, last status change time: 00:04:55

Create time: 00:04:53, last status change time: 00:04:08 Signaling protocol: LDP, peer 200.1.1.12:0 up Targeted Hello: 200.1.1.11(LDP Id) -> 200.1.1.12, LDP is UP

LDP route watch

: enabled/supported : disabled

MPLS VC labels: local 16, remote 5657

© 2010 Cisco and/or its affiliates. All rights reserved.

Preferred path: not configured Default path: active

Default path: active

Status TLV support (local/remote)

Output interface: Gi0/4, imposed label stack {21 17}

Signaling protocol: LDP, peer 200.1.1.11:0 up Targeted Hello: 200.1.1.12(LDP Id) -> 200.1.1.11, LDP is UP Status TLV support (local/remote) LDP route watch

: enabled/supported : enabled

MPLS VC labels: local 5657, remote 17 PWID: 8218

Cisco Confidential

134

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

135

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

136

Router Configuration W2-2

Topology VC Label = 38 IGP Label = 18

interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 10 etype ipv6

Popped (18) 18 38

Routed Port

Popped (38)

rewrite ingress tag pop 1 symmetric bridge-domain 2000

18

38

end Imposed(18,38)

interface Vlan2000

Traffic Capture

no ip address xconnect 200.1.1.12 100 encapsulation mpls end

100 % LOSS © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

137

Router Configuration W2-2 interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 10

Topology VC Label = 5657 IGP Label = 16 Popped (16)

5657 16 Popped (5657)

Routed Ports

rewrite ingress tag pop 1 symmetric xconnect 200.1.1.12 100 encapsulation mpls !

16

Router Configuration ME3800-H-2

5657

Imposed(16,5657)

interface GigabitEthernet0/14 switchport trunk allowed vlan none

Traffic Capture

switchport mode trunk service instance 1 ethernet encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric xconnect 200.1.1.11 100 encapsulation mpls !

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

138

ME3800-H-2 PW Status

W2-2 PW Status

3800-H-2#sh mpls l2transport vc 100 detail

W2-2#sh mpls l2 vc 100 de

Local interface: Gi0/14 up, line protocol up, Eth VLAN 10 up

Local interface: Gi0/4 up, line protocol up, Eth VLAN 10 up

Destination address: 200.1.1.11, VC ID: 100, VC status: up Output interface: Gi0/4, imposed label stack {21 25} Default path: active Next hop: 39.39.39.1 Create time: 00:02:21, last status change time: 00:00:43 Signaling protocol: LDP, peer 200.1.1.11:0 up Targeted Hello: 200.1.1.12(LDP Id) -> 200.1.1.11, LDP is UP MPLS VC labels: local 5657, remote 25

© 2010 Cisco and/or its affiliates. All rights reserved.

Interworking type is Ethernet Destination address: 200.1.1.12, VC ID: 100, VC status: up Output interface: Gi0/2, imposed label stack {16 5657} Next hop: 42.42.42.1 Create time: 00:07:57, last status change time: 00:01:35 Signaling protocol: LDP, peer 200.1.1.12:0 up Targeted Hello: 200.1.1.11(LDP Id) -> 200.1.1.12, LDP is UP MPLS VC labels: local 25, remote 5657

Cisco Confidential

139

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

140

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

141

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

142 142

Router Configuration ME3600HL-3

Topology VC Label = 16

interface TenGigabitEthernet0/1 switchport trunk allowed vlan none

Imposed(16 )

switchport mode trunk

16

Popped(16)

16

service instance 1 ethernet encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric xconnect 10.10.10.2 10 encapsulation mpls

IXIA Configuration

!

Router Configuration ME3600HL-2 interface GigabitEthernet0/6 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 10

Traffic Capture

rewrite ingress tag pop 1 symmetric xconnect 10.10.10.1 10 encapsulation mpls © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

143

Router Configuration ME3600-HL-3

Topology

interface GigabitEthernet0/11

switchport trunk allowed vlan 10

VC Label = 16

switchport mode trunk Imposed(16 )

! interface Vlan10

16

Popped(16)

16

ip address 10.1.1.1 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0 mpls ip

IXIA Configuration

mpls label protocol ldp !

Router Configuration ME3600-HL-2 interface GigabitEthernet0/11 switchport trunk allowed vlan 10 switchport mode trunk ! interface Vlan10 ip address 10.1.1.2 255.255.255.0

Traffic Capture

ip ospf network point-to-point mpls ip © 2010 Cisco and/or its affiliates. All rights reserved.

mpls label protocol ldp

Cisco Confidential

144

ME3600-HL-3 PW Status

ME3600-HL-2 PW Status

3600-HL-3#sh mpls l2transport vc 10 de

3600-HL-2#sh mpls l2transport vc 10 de

Local interface: Te0/1 up, line protocol up, Eth VLAN 10 up

Local interface: Gi0/6 up, line protocol up, Eth VLAN 10 up

Interworking type is Ethernet Destination address: 10.10.10.2, VC ID: 10, VC status: up Output interface: Vl10, imposed label stack {16} Preferred path: not configured Default path: active Next hop: 10.1.1.2 Create time: 00:48:54, last status change time: 00:48:54

Interworking type is Ethernet Destination address: 10.10.10.1, VC ID: 10, VC status: up Output interface: Vl10, imposed label stack {19} Preferred path: not configured Default path: active Next hop: 10.1.1.1 Create time: 00:51:32, last status change time: 00:50:44 Signaling protocol: LDP, peer 10.10.10.1:0 up

Signaling protocol: LDP, peer 200.1.1.2:0 up Targeted Hello: 10.10.10.1(LDP Id) -> 10.10.10.2, LDP is UP

Targeted Hello: 200.1.1.2(LDP Id) -> 10.10.10.1, LDP is UP MPLS VC labels: local 16, remote 19

MPLS VC labels: local 19, remote 16

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

145

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

146

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

147

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

148 148

Router Configuration ME3600-HL-3 interface TenGigabitEthernet0/1

Topology VC Label = 16

no switchport no ip address

Imposed(16 ) 16

xconnect 10.10.10.2 10 encapsulation mpls

Popped(16)

16

!

Router Configuration ME3600-HL-2 interface GigabitEthernet0/6

IXIA Configuration

no switchport no ip address xconnect 10.10.10.1 10 encapsulation mpls !

Traffic Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

149

Router Configuration ME3600-HL-3

Topology

interface GigabitEthernet0/11 switchport trunk allowed vlan 10

VC Label = 16

switchport mode trunk Imposed(16 )

! interface Vlan10

16

Popped(16)

16

ip address 10.1.1.1 255.255.255.0 ip ospf network point-to-point ip ospf 1 area 0 mpls ip

IXIA Configuration

mpls label protocol ldp ! Router Configuration ME3600-HL-2 interface GigabitEthernet0/11 switchport trunk allowed vlan 10 switchport mode trunk !

Traffic Capture

interface Vlan10 ip address 10.1.1.2 255.255.255.0 ip ospf network point-to-point ©mpls 2010 Cisco ip and/or its affiliates. All rights reserved.

Cisco Confidential

150

ME3600-HL-3 PW Status

ME3600-HL-2 PW Status

3600-HL-3#sh mpls l2transport vc 10 de

3600-HL-2#sh mpls l2transport vc 10 de

Local interface: Te0/1 up, line protocol up, Ethernet up

Local interface: Gi0/6 up, line protocol up, Ethernet up

Destination address: 10.10.10.2, VC ID: 10, VC status: up

Destination address: 10.10.10.1, VC ID: 10, VC status: up

Output interface: Vl10, imposed label stack {16}

Output interface: Vl10, imposed label stack {21}

Preferred path: not configured

Preferred path: not configured

Default path: active

Default path: active

Next hop: 10.1.1.2

Next hop: 10.1.1.1

Create time: 00:08:10, last status change time: 00:08:10

Create time: 00:04:09, last status change time: 00:03:23

Signaling protocol: LDP, peer 200.1.1.2:0 up

Signaling protocol: LDP, peer 10.10.10.1:0 up

Targeted Hello: 10.10.10.1(LDP Id) -> 10.10.10.2, LDP is UP MPLS VC labels: local 21, remote 16

© 2010 Cisco and/or its affiliates. All rights reserved.

Targeted Hello: 200.1.1.2(LDP Id) -> 10.10.10.1, LDP is UP MPLS VC labels: local 16, remote 21

Cisco Confidential

151

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

152

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

153

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

154 154

v  Routed VPLS/EoMPLS provides the ability to route or bridge frames to and from pseudowires with MPLS encapsulation. Routed VPLS/EoMPLS accomplishes this by allowing cross-connect and IP addresses to be configured on an SVI. Ø  Multicast routing is not supported on Routed VPLS Ø  Routed VPLS/EoMPLS supports: Ø  P2P (SVI based EoMPLS) Ø  Multi-Point (VPLS) v  The following features are supported on routed Routed PW/VPLS: Ø  SVI based routed pseudowire Ø  Routed VPLS Ø  Routed pseudowire over FRR Ø  L2 multicast over routed pseudowire/VPLS © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

155

Router Configuration ME3600-HL-3

Topology VC Label = 16

interface TenGigabitEthernet0/1 switchport trunk allowed vlan 20 switchport mode trunk

VLAN 20 Ip address 1.1.1.1

Imposed(16 )

Popped(16)

16

16

! interface Vlan20 ip address 1.1.1.1 255.255.255.0 xconnect 10.10.10.2 10 encapsulation mpls

IXIA Configuration

VLAN 20 Ip address 1.1.1.2

!

Router Configuration ME3600-HL-2 interface GigabitEthernet0/6 switchport trunk allowed vlan 20 switchport mode trunk ! interface Vlan20

Traffic Capture

ip address 1.1.1.2 255.255.255.0 xconnect 10.10.10.1 10 encapsulation mpls © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

156

Router Configuration ME3600-HL-3

Topology VC Label = 16

interface GigabitEthernet0/11

switchport trunk allowed vlan 10 switchport mode trunk !

VLAN 20 Ip address 1.1.1.1

Imposed(16 )

Popped(16)

16

16

interface Vlan10 ip address 10.1.1.1 255.255.255.0 ip ospf network point-to-point mpls ip

IXIA Configuration

VLAN 20 Ip address 1.1.1.2

mpls label protocol ldp !

Router Configuration ME3600-HL-2 interface GigabitEthernet0/11 switchport trunk allowed vlan 10 switchport mode trunk ! interface Vlan10 ip address 10.1.1.2 255.255.255.0

Traffic Capture

ip ospf network point-to-point mpls ip mpls label protocol ldp © 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

157

ME3600-HL-3 PW Status

ME3600-HL-2 PW Status

3600-HL-3#sh mpls l2transport vc 10 de

3600-HL-2#sh mpls l2transport vc 10 de

Local interface: Te0/1 up, line protocol up, Ethernet up

Local interface: Gi0/6 up, line protocol up, Ethernet up

Destination address: 10.10.10.2, VC ID: 10, VC status: up

Destination address: 10.10.10.1, VC ID: 10, VC status: up

Output interface: Vl10, imposed label stack {16}

Output interface: Vl10, imposed label stack {21}

Preferred path: not configured

Preferred path: not configured

Default path: active

Default path: active

Next hop: 10.1.1.2

Next hop: 10.1.1.1

Create time: 00:08:10, last status change time: 00:08:10

Create time: 00:04:09, last status change time: 00:03:23

Signaling protocol: LDP, peer 200.1.1.2:0 up

Signaling protocol: LDP, peer 10.10.10.1:0 up

Targeted Hello: 10.10.10.1(LDP Id) -> 10.10.10.2, LDP is UP MPLS VC labels: local 21, remote 16

© 2010 Cisco and/or its affiliates. All rights reserved.

Targeted Hello: 200.1.1.2(LDP Id) -> 10.10.10.1, LDP is UP MPLS VC labels: local 16, remote 21

Cisco Confidential

158

ME3600-HL-3 PW Status 3600-HL-3#ping 1.1.1.2 source lo0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.2, timeout is 2 seconds: Packet sent with a source address of 200.1.1.1 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms ! 3600-HL-3#show ip int br | i Vlan20 | interface Vlan20

© 2010 Cisco and/or its affiliates. All rights reserved.

1.1.1.1

YES manual up

up

Cisco Confidential

159

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

160

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

161

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

162

Router Configuration W2-2

Router Configuration ME3800-H-2

interface GigabitEthernet0/4

interface GigabitEthernet0/14

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation dot1q 10

encapsulation dot1q 10

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 1 symmetric

xconnect 200.1.1.12 100 encapsulation mpls

bridge-domain 2000 !

VC Label = 5657 IGP Label = 16

interface Vlan2000 16 Popped (16)

no ip address

5657

Routed Ports

xconnect 200.1.1.11 100 encapsulation mpls Popped (5657)

16

!

5657

Imposed(16,5657)

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

163

W2-2 PW STATUS

ME3800-H-2 PW STATUS

W2-2#sh mpls l2transport vc 100 detail

3800-H-2#sh mpls l2 vc 100 de

Local interface: Gi0/4 up, line protocol up, Eth VLAN 10 up

Local interface: Vl2000 up, line protocol up, Eth VLAN 2000 up

Interworking type is Ethernet Destination address: 200.1.1.12, VC ID: 100, VC status: up Output interface: Gi0/2, imposed label stack {16 5657} Preferred path: not configured Default path: active Next hop: 42.42.42.1 Create time: 00:00:25, last status change time: 00:00:25 Signaling protocol: LDP, peer 200.1.1.12:0 up Targeted Hello: 200.1.1.11(LDP Id) -> 200.1.1.12, LDP is UP

Destination address: 200.1.1.11, VC ID: 100, VC status: up Output interface: Gi0/4, imposed label stack {21 25} Preferred path: not configured Default path: active Next hop: 39.39.39.1 Create time: 00:46:12, last status change time: 00:02:49 Signaling protocol: LDP, peer 200.1.1.11:0 up Targeted Hello: 200.1.1.12(LDP Id) -> 200.1.1.11, LDP is UP MPLS VC labels: local 5657, remote 25

MPLS VC labels: local 25, remote 5657

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

164

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

165

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

166

W2-2 Configuration interface GigabitEthernet0/4

ME3800-H-2 Configuration switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation dot1q 10

encapsulation dot1q 10

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 1 symmetric

xconnect 200.1.1.12 100 encapsulation mpls

xconnect 200.1.1.11 100 encapsulation mpls

!

!

19 popped(19)

TRUNK PORT

19

TRUNK PORT Imposed(19)

interface GigabitEthernet0/4

switchport trunk allowed vlan 10

switchport trunk allowed vlan 10

switchport mode trunk

switchport mode trunk

!

TRUNK PORT

interface GigabitEthernet0/14

switchport trunk allowed vlan none

interface GigabitEthernet0/2

Topology

Traffic Capture

!

interface Vlan10

interface Vlan10

ip address 42.42.42.2 255.255.255.0

ip address 42.42.42.1 255.255.255.0

ip ospf network point-to-point

ip ospf network point-to-point

mpls ip

mpls ip

mpls label protocol ldp

mpls label protocol ldp

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

167

ME3800-H-2 PW Status

W2-2 PW Status

3800-H-2#sh mpls l2transport vc 100 detail

W2-2#sh mpls l2 vc 100 detail

Local interface: Gi0/14 up, line protocol up, Eth VLAN 10 up

Local interface: Gi0/4 up, line protocol up, Eth VLAN 10 up

Destination address: 200.1.1.11, VC ID: 100, VC status: up Output interface: Vl10, imposed label stack {25}

Interworking type is Ethernet Destination address: 200.1.1.12, VC ID: 100, VC status: up

Preferred path: not configured

Output interface: Vl10, imposed label stack {5657}

Default path: active

Preferred path: not configured

Next hop: 42.42.42.2

Default path: active

Create time: 01:56:51, last status change time: 00:11:16 Signaling protocol: LDP, peer 200.1.1.11:0 up Targeted Hello: 200.1.1.12(LDP Id) -> 200.1.1.11, LDP is UP

Next hop: 42.42.42.1 Create time: 02:00:36, last status change time: 00:10:15 Signaling protocol: LDP, peer 200.1.1.12:0 up Targeted Hello: 200.1.1.11(LDP Id) -> 200.1.1.12, LDP is UP

MPLS VC labels: local 5657, remote 25 MPLS VC labels: local 25, remote 5657

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

168

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

169

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

170

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

171

VPWS PW

Switch PACKET CAPTURE

R-2

G0/4

G0/2

802.1Q Virtual LAN, PRI: 5, CFI: 0, ID: 1200 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 100

R-3

G0/2 G0/2

G0/3

Frame 18130: 1418 bytes on wire (11344 bits), 1418 bytes captured (11344 bits) Ethernet II, Src: Cisco_e3:c9:42 (00:22:bd:e3:c9:42), Dst: Cisco_b9:a9:42 (f4:ac:c1:b9:a9:42) MultiProtocol Label Switching Header, Label: 25, Exp: 0, S: 0, TTL: 255 MultiProtocol Label Switching Header, Label: 34, Exp: 0, S: 1, TTL: 255 Ethernet II, Src: 00:00:00_00:00:14 (00:00:00:00:00:14), Dst: 00:00:00_00:00:02 (00:00:00:00:00:02)

G0/4

Router

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.11 100 encapsulation mpls

G0/4

R-4 interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 second-dot1q 100 rewrite ingress tag pop 1 symmetric bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.12 100 encapsulation mpls © 2010 Cisco and/or its affiliates. All rights reserved.

R-1

3800-H-2

Cisco Confidential

172

•  R-1 (Imposition Router) & R-4 (Disposition Router) •  Packet is coming with S-TAG 3200 and C-TAG 100 •  R-1 pops S-TAG 3200 and Push S-TAG 1200 based on Bridge-

domain 1200 •  Packet Capture at R-1 core facing interface showing S-TAG 1200

& C-TAG 100 •  R-4 pops S-TAG 1200 and PUSH S-TAG 3200 based to EVC

rewrite command •  Packet capture is showing the S-TAG 3200 & C-TAG 100

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

173

VPWS PW

Switch R-2

Payload TAGS

G0/11 G0/11

G0/13 G0/5

802.1Q Virtual LAN, PRI: 0, CFI: 0, ID: 1200 000. .... .... .... = Priority: 0 ...0 .... .... .... = CFI: 0 .... 0100 1011 0000 = ID: 1200 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

R-3

G0/13

G0/22

Router

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.11 100 encapsulation mpls

G0/4

R-4 interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200-3300 bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.12 100 encapsulation mpls © 2010 Cisco and/or its affiliates. All rights reserved.

R-1

3800-H-2

Capture of C-TAG 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

Cisco Confidential

174

•  S-TAG P bit value cannot be set using QOS policy •  S-TAG P bit value is always be zero.

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

175

VPWS PW

Switch R-2

Payload TAGS

G0/11 G0/11

G0/13 G0/5

802.1Q Virtual LAN, PRI: 0, CFI: 0, ID: 1200 000. .... .... .... = Priority: 0 ...0 .... .... .... = CFI: 0 .... 0100 1011 0000 = ID: 1200 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

R-3

G0/13

G0/22

Router

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200-3300 bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.11 100 encapsulation mpls

G0/4

R-4 interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200-3300 bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.12 100 encapsulation mpls © 2010 Cisco and/or its affiliates. All rights reserved.

R-1

3800-H-2

Capture of C-TAG 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

Cisco Confidential

176

VPWS PW

Switch R-2

Payload TAGS

G0/11 G0/11

G0/13 G0/5

802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 1200 011. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 0100 1011 0000 = ID: 1200 Type: 802.1Q Virtual LAN (0x8100) 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

R-3

G0/13

G0/22

Router

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200-3300 bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.11 100 encapsulation mpls

G0/4

R-4 interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200-3300 service-policy input set-cos-3 bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.12 100 encapsulation mpls © 2010 Cisco and/or its affiliates. All rights reserved.

R-1

3800-H-2

Capture of C-TAG 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

Cisco Confidential

177

W2-2#sh running-config policy-map set-cos-3 ! policy-map set-cos-3 class class-default set cos 3 ! W2-2#sh policy-map interface gi0/4 service instance 1 input GigabitEthernet0/4: EFP 1 Service-policy input: set-cos-3

Class-map: class-default (match-any) 733278 packets, 1026589200 bytes 5 minute offered rate 10268000 bps, drop rate 0000 bps Match: any set cos 3

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

178

VPWS PW

Switch R-2

R-3

G0/11 G0/11

Payload TAGS

G0/13

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 1200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 0100 1011 0000 = ID: 1200

G0/13

G0/5

G0/22

Router

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.11 100 encapsulation mpls

G0/4

R-4 interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.12 100 encapsulation mpls © 2010 Cisco and/or its affiliates. All rights reserved.

R-1

3800-H-2

Capture of C-TAG 802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 3200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

Cisco Confidential

179

•  Rewrite POP 1 symmetric can only be used with single C-TAG. •  Using “POP1 rewrite” with “platform push” command •  “P” bit value of the “pop” tag is copied to “P” bit value of the “push” S-TAG

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

180

VPWS PW

Switch R-2

R-3

G0/11 G0/11

Payload TAGS

G0/13

802.1Q Virtual LAN, PRI: 4, CFI: 0, ID: 1200 100. .... .... .... = Priority: 4 ...0 .... .... .... = CFI: 0 .... 0100 1011 0000 = ID: 1200

G0/13

G0/5

G0/22

Router

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric service-policy output set-cos-3-parent bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.11 100 encapsulation mpls

G0/4

R-4 interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric bridge-domain 1200 ! interface Vlan1200 no ip address platform rewrite imposition tag push 1 symmetric xconnect 200.1.1.12 100 encapsulation mpls © 2010 Cisco and/or its affiliates. All rights reserved.

R-1

3800-H-2

Capture of C-TAG 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 3200 011. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

Cisco Confidential

181

3800-H-2#sh running-config policy-map policy-map set-cos-3 class class-default set cos 3 policy-map set-cos-3-parent class vlan3200 service-policy set-cos-3 !

© 2010 Cisco and/or its affiliates. All rights reserved.

3800-H-2#sh policy-map interface gi0/14 service instance 1 output GigabitEthernet0/14: EFP 1 Service-policy output: set-cos-3-parent Class-map: vlan3200 (match-all) 629059 packets, 880682600 bytes 5 minute offered rate 9842000 bps Match: vlan

3200

contd….

Cisco Confidential

182

3800-H-2#sh policy-map interface gi0/14 service instance 1 output (contd…) Service-policy : set-cos-3 Class-map: class-default (match-any) 629059 packets, 880682600 bytes 5 minute offered rate 9842000 bps, drop rate 0000 bps Match: any set cos 3 Queue-limit current-queue-depth 0 bytes Output Queue: Tail Packets Drop: 0 Tail Bytes Drop: 0

Class-map: class-default (match-any) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: any

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

183

VPWS PW

Switch R-2

No C-VLAN TAG

R-3

G0/11 G0/11

G0/13

Payload TAGS

Router

G0/13

G0/5

interface GigabitEthernet0/14 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric service-policy output set-cos-3-parent xconnect 200.1.1.11 100 encapsulation mpls !

G0/22

G0/4

R-4 R-1 interface GigabitEthernet0/4 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet encapsulation dot1q 3200 rewrite ingress tag pop 1 symmetric xconnect 200.1.1.12 100 encapsulation mpls !

© 2010 Cisco and/or its affiliates. All rights reserved.

3800-H-2

Capture of C-TAG 802.1Q Virtual LAN, PRI: 3, CFI: 0, ID: 3200 011. .... .... .... = Priority: 3 ...0 .... .... .... = CFI: 0 .... 1100 1000 0000 = ID: 3200

Cisco Confidential

184

3800-H-2#sh running-config policy-map policy-map set-cos-3 class class-default set cos 3 policy-map set-cos-3-parent class vlan3200 service-policy set-cos-3 !

© 2010 Cisco and/or its affiliates. All rights reserved.

3800-H-2#sh policy-map interface gi0/14 service instance 1 output GigabitEthernet0/14: EFP 1 Service-policy output: set-cos-3-parent Class-map: vlan3200 (match-all) 629059 packets, 880682600 bytes 5 minute offered rate 9842000 bps Match: vlan

3200

contd….

Cisco Confidential

185

3800-H-2#sh policy-map interface gi0/14 service instance 1 output (contd…) Service-policy : set-cos-3 Class-map: class-default (match-any) 629059 packets, 880682600 bytes 5 minute offered rate 9842000 bps, drop rate 0000 bps Match: any set cos 3 Queue-limit current-queue-depth 0 bytes Output Queue: Tail Packets Drop: 0 Tail Bytes Drop: 0

Class-map: class-default (match-any) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: any

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

186

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

187

Router Configuration ME3800-H-1

Router Configuration ME3800-H-1 l2 vfi VPLS-100 manual

Topology

interface GigabitEthernet0/18 no switchport

vpn id 100

VC Label = 16

ip address 100.1.0.2 255.255.0.0

neighbor 5.5.5.5 encapsulation mpls

mpls ip

!

mpls label protocol ldp

interface Loopback0 ip address 4.4.4.4 255.255.255.255

!

router ospf 100

!

!

router bgp 1000 bgp log-neighbor-changes

encapsulation dot1q 100

Traffic Capture

bgp update-delay 30

bridge-domain 100

no bgp default ipv4-unicast

!

neighbor 5.5.5.5 remote-as 1000

interface Vlan100

neighbor 5.5.5.5 update-source Loopback0

no ip address xconnect vfi VPLS-100

Popped (16)

network 100.1.0.0 0.0.255.255 area 0

switchport trunk allowed vlan none

service instance 1 ethernet

Imposed(16)

network 4.4.4.4 0.0.0.0 area 0

interface GigabitEthernet0/2

switchport mode trunk

16

16

! address-family l2vpn vpls

! © 2010 ldp Cisco and/or its affiliates.Loopback0 All rights reserved.force mpls router-id

neighbor 5.5.5.5 activate

Cisco Confidential

188

Router Configuration ASR1002 l2 vfi VPLS-100 manual

Router Configuration ASR1002

Topology

interface GigabitEthernet0/0/0

vpn id 100

ip address 100.1.0.1 255.255.0.0

bridge-domain 100

negotiation auto

neighbor 4.4.4.4 encapsulation mpls

mpls ip

!

VC Label = 16

mpls label protocol ldp

interface Loopback0 ip address 5.5.5.5 255.255.255.255

!

16

router ospf 100

!

network 5.5.5.5 0.0.0.0 area 0

interface GigabitEthernet0/0/1

network 100.1.0.0 0.0.255.255 area 0

no ip address negotiation auto

16 Imposed(16) Popped (16)

!

router bgp 1000 bgp log-neighbor-changes

service instance 1 ethernet

Traffic Capture

bgp update-delay 30

encapsulation dot1q 100

no bgp default ipv4-unicast

bridge-domain 100

neighbor 4.4.4.4 remote-as 1000

!

neighbor 4.4.4.4 update-source Loopback0 mpls ldp router-id Loopback0 force ! address-family l2vpn vpls neighbor 4.4.4.4 activate © 2010 Cisco and/or its affiliates. All rights reserved.

neighbor 4.4.4.4 send-community extended

Cisco Confidential

189

Router ME3800-H-1

ROUTER ASR1000

3800-H-1#sh mpls l2transport vc 100 de

asr1k-1#sh mpls l2transport vc 100 detail

Local interface: VFI VPLS-100 vfi up

Local interface: VFI VPLS-100 vfi up

Interworking type is Ethernet

Interworking type is Ethernet

Destination address: 5.5.5.5, VC ID: 100, VC status: up

Destination address: 4.4.4.4, VC ID: 100, VC status: up

Output interface: Gi0/18, imposed label stack {16}

Output interface: Gi0/0/0, imposed label stack {16}

Preferred path: not configured

Preferred path: not configured

Default path: active

Default path: active

Next hop: 100.1.0.1

Next hop: 100.1.0.2

Create time: 01:53:33, last status change time: 01:14:21 Signaling protocol: LDP, peer 5.5.5.5:0 up Targeted Hello: 4.4.4.4(LDP Id) -> 5.5.5.5, LDP is UP Status TLV support (local/remote)

Create time: 01:51:29, last status change time: 01:13:00 Last label FSM state change time: 01:13:00 Signaling protocol: LDP, peer 4.4.4.4:0 up

: enabled/supported

Targeted Hello: 5.5.5.5(LDP Id) -> 4.4.4.4, LDP is UP

LDP route watch

: disabled

Status TLV support (local/remote)

Label/status state machine

: established, LruRru

Last local dataplane

status rcvd: No fault

Last BFD dataplane

status rcvd: Not sent

Last BFD peer monitor

status rcvd: No fault

© 2010 Cisco and/or its affiliates. All rights reserved.

Last local AC

circuit status rcvd: No fault

LDP route watch

: enabled/supported : enabled

Label/status state machine LruRru

: established,

Last local dataplane

status rcvd: No fault

Last BFD dataplane

status rcvd: Not sent

Cisco Confidential

190

Router ME3800-H-1

ROUTER ASR1000

3800-H-1#sh vfi name VPLS-100

asr1k-1#sh vfi name VPLS-100

Legend: RT=Route-target, S=Split-horizon, Y=Yes, N=No

VFI name: VPLS-100, state: up, type: multipoint signaling: LDP

Legend: RT=Route-target, S=Split-horizon, Y=Yes, N=No

VFI name: VPLS-100, state: up, type: multipoint signaling: LDP

VPN ID: 100 VPN ID: 100 Bridge-Domain 100 attachment circuits: Bridge-Domain 100 attachment circuits:

Vlan100 Neighbors connected via pseudowires:

Neighbors connected via pseudowires:

Peer Address

VC ID

S

Peer Address

VC ID

S

5.5.5.5

100

Y

4.4.4.4

100

Y

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

191

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

192

Router Configuration ME3800-H-1

Router Configuration ME3800-H-1 l2 vfi VPLS-200 autodiscovery

Topology

interface GigabitEthernet0/18 no switchport

vpn id 200

VC Label = 19

ip address 100.1.0.2 255.255.0.0

!

mpls ip

interface Loopback0

mpls label protocol ldp

ip address 4.4.4.4 255.255.255.255 !

!

interface GigabitEthernet0/2

router ospf 100

Popped (19)

network 100.1.0.0 0.0.255.255 area 0

switchport mode trunk

encapsulation dot1q 200

Imposed(19)

network 4.4.4.4 0.0.0.0 area 0

switchport trunk allowed vlan none

service instance 2 ethernet

19

19

!

router bgp 1000 bgp log-neighbor-changes

bridge-domain 200

Traffic Capture

bgp update-delay 30

!

no bgp default ipv4-unicast

interface Vlan200

neighbor 5.5.5.5 remote-as 1000

no ip address

neighbor 5.5.5.5 update-source Loopback0

xconnect vfi VPLS-200 !

! mpls ldp router-id Loopback0 force © 2010 Cisco and/or its affiliates. All rights reserved.

address-family l2vpn vpls neighbor 5.5.5.5 activate

Cisco Confidential

193

Router Configuration ASR1002 l2 vfi VPLS-200 autodiscovery

Router Configuration ASR1002

Topology

interface GigabitEthernet0/0/0

vpn id 200

ip address 100.1.0.1 255.255.0.0

bridge-domain 200

negotiation auto

VC Label = 16

mpls ip mpls label protocol ldp

!

interface Loopback0 ip address 5.5.5.5 255.255.255.255

!

19

router ospf 100

!

network 5.5.5.5 0.0.0.0 area 0

interface GigabitEthernet0/0/1

network 100.1.0.0 0.0.255.255 area 0

no ip address negotiation auto

19 Imposed(19) Popped (19)

!

router bgp 1000 bgp log-neighbor-changes

service instance 1 ethernet

Traffic Capture

bgp update-delay 30

encapsulation dot1q 100

no bgp default ipv4-unicast

bridge-domain 100

neighbor 4.4.4.4 remote-as 1000

!

neighbor 4.4.4.4 update-source Loopback0 mpls ldp router-id Loopback0 force ! address-family l2vpn vpls neighbor 4.4.4.4 activate © 2010 Cisco and/or its affiliates. All rights reserved.

neighbor 4.4.4.4 send-community extended

Cisco Confidential

194

Router ME3800-H-1

ROUTER ASR1000

3800-H-1#sh mpls l2transport vc 200 de

asr1k-1#sh mpls l2transport vc 200 detail

Local interface: VFI VPLS-200 vfi up

Local interface: VFI VPLS-200 vfi up

Interworking type is Ethernet

Interworking type is Ethernet

Destination address: 5.5.5.5, VC ID: 200, VC status: up

Destination address: 4.4.4.4, VC ID: 200, VC status: up

Output interface: Gi0/18, imposed label stack {19}

Output interface: Gi0/0/0, imposed label stack {21}

Preferred path: not configured

Preferred path: not configured

Default path: active

Default path: active

Next hop: 100.1.0.1

Next hop: 100.1.0.2

Create time: 00:12:40, last status change time: 00:07:58 Signaling protocol: LDP, peer 5.5.5.5:0 up Targeted Hello: 4.4.4.4(LDP Id) -> 5.5.5.5, LDP is UP Status TLV support (local/remote)

Create time: 00:13:22, last status change time: 00:08:41 Last label FSM state change time: 00:08:41 Signaling protocol: LDP, peer 4.4.4.4:0 up

: enabled/supported

Targeted Hello: 5.5.5.5(LDP Id) -> 4.4.4.4, LDP is UP

LDP route watch

: disabled

Status TLV support (local/remote)

Label/status state machine

: established, LruRru

Last local dataplane

status rcvd: No fault

Last BFD dataplane

status rcvd: Not sent

Last BFD peer monitor

status rcvd: No fault

© 2010 Cisco and/or its affiliates. All rights reserved.

Last local AC

circuit status rcvd: No fault

LDP route watch

: enabled/supported : enabled

Label/status state machine LruRru

: established,

Last local dataplane

status rcvd: No fault

Last BFD dataplane

status rcvd: Not sent

Cisco Confidential

195

Router ME3800-H-1

ROUTER ASR1000

3800-H-1#sh vfi name VPLS-200

asr1k-1#sh vfi name VPLS-200

Legend: RT=Route-target, S=Split-horizon, Y=Yes, N=No

Legend: RT=Route-target, S=Split-horizon, Y=Yes, N=No

VFI name: VPLS-200, state: up, type: multipoint signaling: LDP

VFI name: VPLS-200, state: up, type: multipoint signaling: LDP

VPN ID: 200, VPLS-ID: 1000:200 VPN ID: 200, VPLS-ID: 1000:200 RD: 1000:200, RT: 1000:200 RD: 1000:200, RT: 1000:200

Bridge-Domain 200 attachment circuits:

Bridge-Domain 200 attachment circuits:

Vlan200

Neighbors connected via pseudowires:

Neighbors connected via pseudowires: Peer Address

VC ID

Discovered Router ID

S

Peer Address

VC ID

Discovered Router ID

S

5.5.5.5

200

5.5.5.5

Y

4.4.4.4

200

4.4.4.4

Y

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

196

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

197

Router Configuration ME3800-H-1

Router Configuration ME3800-H-1 l2 vfi VPLS-200 autodiscovery

Topology

interface GigabitEthernet0/18

VC Label = 19 VC Label = 30

no switchport

vpn id 200

ip address 100.1.0.2 255.255.0.0

neighbor 200.1.1.12 encapsulation mpls nosplit-horizon

Popped (19)

mpls ip

!

19

mpls label protocol ldp

interface Loopback0 ip address 4.4.4.4 255.255.255.255

30

!

30 Imposed(30)

router ospf 100

Popped (30)

19

!

network 4.4.4.4 0.0.0.0 area 0

interface GigabitEthernet0/2 switchport trunk allowed vlan none switchport mode trunk

network 100.1.0.0 0.0.255.255 area 0 !

router bgp 1000

service instance 2 ethernet

bgp log-neighbor-changes

encapsulation dot1q 200

bgp update-delay 30

bridge-domain 200

neighbor 5.5.5.5 remote-as 1000

interface Vlan200

xconnect vfi VPLS-200 ! © 2010 Cisco and/or its affiliates. All rights reserved.

mpls ldp router-id Loopback0 force

Traffic Capture

no bgp default ipv4-unicast

!

no ip address

Imposed(19)

neighbor 5.5.5.5 update-source Loopback0 ! address-family l2vpn vpls neighbor 5.5.5.5 activate

Cisco Confidential

198

Router Configuration ME3800-H-2

Router Configuration ME3800-H-2 interface Loopback0

Topology

interface GigabitEthernet0/11

VC Label = 19 VC Label = 30

no switchport

ip address 200.1.1.12 255.255.255.255

ip address 54.54.54.1 255.255.255.0

!

ip ospf network point-to-point

interface GigabitEthernet0/14

30

mpls label protocol ldp

switchport mode trunk

encapsulation dot1q 200

19

mpls ip

switchport trunk allowed vlan none

service instance 1 ethernet

Popped (19)

30 Imposed(30)

!

Popped (30)

19

router ospf 100 router-id 200.1.1.12

xconnect 4.4.4.4 200 encapsulation mpls

Imposed(19)

network 54.54.54.0 0.0.0.255 area 0

!

network 200.1.1.12 0.0.0.0 area 0

mpls ldp router-id Loopback0 force !

Traffic Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

199

Router Configuration ASR1002 l2 vfi VPLS-200 autodiscovery

Router Configuration ASR1002

Topology VC Label = 19

interface GigabitEthernet0/0/0

VC Label = 30 vpn id 200

ip address 100.1.0.1 255.255.0.0

bridge-domain 200

negotiation auto

Popped (19)

mpls ip 19

mpls label protocol ldp

!

interface Loopback0 ip address 5.5.5.5 255.255.255.255

30

!

30

router ospf 100 network 5.5.5.5 0.0.0.0 area 0

interface GigabitEthernet0/0/1

network 100.1.0.0 0.0.255.255 area 0

negotiation auto

Popped (30)

19

!

no ip address

Imposed(30)

!

router bgp 1000 bgp log-neighbor-changes

service instance 1 ethernet

bgp update-delay 30

encapsulation dot1q 100

Traffic Capture

no bgp default ipv4-unicast

bridge-domain 100

neighbor 4.4.4.4 remote-as 1000

!

neighbor 4.4.4.4 update-source Loopback0 mpls ldp router-id Loopback0 force ! address-family l2vpn vpls neighbor 4.4.4.4 activate © 2010 Cisco and/or its affiliates. All rights reserved.

neighbor 4.4.4.4 send-community extended

Cisco Confidential

200

Router ME3800-H-1

ROUTER ME3800-H-1 (Contd…)

3800-H-1#sh mpls l2transport vc 200 detail

Local interface: VFI VPLS-200 vfi up

Local interface: VFI VPLS-200 vfi up

Interworking type is Ethernet

Interworking type is Ethernet

Destination address: 200.1.1.12, VC ID: 200, VC status: up

Destination address: 5.5.5.5, VC ID: 200, VC status: up Output interface: Gi0/10, imposed label stack {30} Output interface: Gi0/18, imposed label stack {19} Preferred path: not configured Preferred path: not configured

Default path: active

Default path: active Next hop: 54.54.54.1 Next hop: 100.1.0.1 Create time: 1d00h, last status change time: 1d00h Create time: 1d00h, last status change time: 1d00h Signaling protocol: LDP, peer 200.1.1.12:0 up Signaling protocol: LDP, peer 5.5.5.5:0 up Targeted Hello: 4.4.4.4(LDP Id) -> 5.5.5.5, LDP is UP Status TLV support (local/remote)

: enabled/supported

LDP route watch

: disabled

Label/status state machine

: established, LruRru

Last local dataplane

status rcvd: No fault

Last BFD dataplane © 2010 Cisco and/or its affiliates. All rights reserved.

status rcvd: Not sent

Targeted Hello: 4.4.4.4(LDP Id) -> 200.1.1.12, LDP is UP Status TLV support (local/remote) LDP route watch

: enabled/supported : disabled

Label/status state machine LruRru

: established,

Last local dataplane

status rcvd: No fault

Last BFD dataplane

status rcvd: Not sent

Cisco Confidential

201

Router ME3800-H-1

Router ME3800-H-1

3800-H-1#sh xconnect all

3800-H-1#sh vfi name VPLS-200

Legend:

Legend: RT=Route-target, S=Split-horizon, Y=Yes, N=No

VFI name: VPLS-200, state: up, type: multipoint signaling: LDP

S2=Segment2 State

DN=Down

AD=Admin Down

IA=Inactive

SB=Standby

HS=Hot Standby

RV=Recovering

NH=No Hardware

Segment 1

S1 Segment 2

------+---------------------------------+--+--------------------------

RD: 1000:200, RT: 1000:200 Bridge-Domain 200 attachment circuits: Vlan200 Neighbors connected via pseudowires: Peer Address

VC ID

Discovered Router ID

S

200.1.1.12

200

n/a

N

5.5.5.5

200

5.5.5.5

Y

© 2010 Cisco and/or its affiliates. All rights reserved.

S1=Segment1 State

UP=Up

XC ST

VPN ID: 200, VPLS-ID: 1000:200

XC ST=Xconnect State

UP pri

vfi VPLS-200

UP mpls 200.1.1.12:200

UP pri

vfi VPLS-200

UP mpls 5.5.5.5:200

UP pri

ac Vl200:200(Eth VLAN)

UP

vfi VPLS-200

UP pri

bd 200

UP

vfi VPLS-200

Cisco Confidential

202

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

203

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

204

W2-2 Configuration interface GigabitEthernet0/4

ME3800-H-2 Configuration interface GigabitEthernet0/14

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation priority-tagged

encapsulation priority-tagged

bridge-domain 2507

bridge-domain 2507

! interface GigabitEthernet0/5

TRUNK PORT

TRUNK PORT

Traffic Flow

! interface GigabitEthernet0/22

switchport mode trunk !

Topology

switchport mode trunk !

TRUNK PORT

Traffic Capture

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

205

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

206

W2-2 Configuration interface GigabitEthernet0/4

ME3800-H-2 Configuration interface GigabitEthernet0/14

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation priority-tagged

encapsulation priority-tagged

bridge-domain 2506

bridge-domain 2507

! interface Vlan2506

Topology

TRUNK PORT 20

TRUNK PORT

Traffic Flow

Imposed(20)

! interface Vlan2507

no ip address

no ip address

xconnect 200.1.1.12 5058 encapsulation mpls

xconnect 200.1.1.11 5058 encapsulation mpls

!

!

interface GigabitEthernet0/5

interface GigabitEthernet0/22

switchport mode trunk

20

TRUNK PORT

Popped(20)

Traffic Capture

switchport mode trunk

!

!

interface Vlan10

interface Vlan10

ip address 42.42.42.2 255.255.255.0

ip address 42.42.42.1 255.255.255.0

ip ospf network point-to-point

ip ospf network point-to-point

mpls ip

mpls ip

© 2010 label Cisco and/or its affiliates. All rights reserved. mpls protocol ldp

mpls label protocol ldp

Cisco Confidential

207

ME3800-H-2 PW Status

W2-2 PW Status

3800-H-2#sh mpls l2transport vc 5058 de

W2-2#sh mpls l2transport vc 5058 de

Local interface: Vl2507 up, line protocol up, Eth VLAN 2507 up

Local interface: Vl2506 up, line protocol up, Eth VLAN 2506 up

Interworking type is Ethernet

Interworking type is Ethernet

Destination address: 200.1.1.11, VC ID: 5058, VC status: up

Destination address: 200.1.1.12, VC ID: 5058, VC status: up

Output interface: Vl10, imposed label stack {20}

Output interface: Vl10, imposed label stack {4193}

Preferred path: not configured

Preferred path: not configured

Default path: active

Default path: active

Next hop: 42.42.42.2

Next hop: 42.42.42.1

Create time: 01:56:51, last status change time: 00:11:16 Signaling protocol: LDP, peer 200.1.1.11:0 up Targeted Hello: 200.1.1.12(LDP Id) -> 200.1.1.11, LDP is UP

Create time: 02:00:36, last status change time: 00:10:15 Signaling protocol: LDP, peer 200.1.1.12:0 up Targeted Hello: 200.1.1.11(LDP Id) -> 200.1.1.12, LDP is UP MPLS VC labels: local 20, remote 4193

MPLS VC labels: local 4193, remote 20

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

208

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

209

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

210

W2-2 Configuration interface GigabitEthernet0/4

ME3800-H-2 Configuration

Topology

interface GigabitEthernet0/14

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation priority-tagged

encapsulation priority-tagged

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 1 symmetric

bridge-domain 2506

bridge-domain 2507

TRUNK PORT 20

TRUNK PORT

Traffic Flow

Imposed(20)

! !

interface Vlan2507

interface Vlan2506

no ip address

no ip address xconnect 200.1.1.12 5058 encapsulation mpls !

xconnect 200.1.1.11 5058 encapsulation mpls

interface GigabitEthernet0/5

Popped(20)

Traffic Capture

switchport mode trunk

switchport mode trunk

!

!

interface Vlan10 ip address 42.42.42.1 255.255.255.0

ip address 42.42.42.2 255.255.255.0

ip ospf network point-to-point

ip ospf network point-to-point

mpls ip

© 2010 Cisco and/or its affiliates. All rights reserved.

TRUNK PORT

! interface GigabitEthernet0/22

interface Vlan10

20

Cisco Confidential

211

ME3800-H-2 PW Status

W2-2 PW Status

3800-H-2#sh mpls l2transport vc 5058 de

W2-2#sh mpls l2transport vc 5058 de

Local interface: Vl2507 up, line protocol up, Eth VLAN 2507 up

Local interface: Vl2506 up, line protocol up, Eth VLAN 2506 up

Interworking type is Ethernet

Interworking type is Ethernet

Destination address: 200.1.1.11, VC ID: 5058, VC status: up

Destination address: 200.1.1.12, VC ID: 5058, VC status: up

Output interface: Vl10, imposed label stack {20}

Output interface: Vl10, imposed label stack {4193}

Preferred path: not configured

Preferred path: not configured

Default path: active

Default path: active

Next hop: 42.42.42.2

Next hop: 42.42.42.1

Create time: 01:56:51, last status change time: 00:11:16 Signaling protocol: LDP, peer 200.1.1.11:0 up Targeted Hello: 200.1.1.12(LDP Id) -> 200.1.1.11, LDP is UP

Create time: 02:00:36, last status change time: 00:10:15 Signaling protocol: LDP, peer 200.1.1.12:0 up Targeted Hello: 200.1.1.11(LDP Id) -> 200.1.1.12, LDP is UP MPLS VC labels: local 20, remote 4193

MPLS VC labels: local 4193, remote 20

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

212

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

213

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

214

W2-2 Configuration interface GigabitEthernet0/4

ME3800-H-2 Configuration interface GigabitEthernet0/14

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation priority-tagged

encapsulation priority-tagged

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 1 symmetric

bridge-domain 2506

bridge-domain 2507

! interface Vlan2506

ROUTED PORT 19

ROUTED PORT

Traffic Flow

20

Imposed(19,20)

! interface Vlan2507

no ip address

no ip address

xconnect 200.1.1.12 5058 encapsulation mpls

xconnect 200.1.1.11 5058 encapsulation mpls

!

!

interface GigabitEthernet0/2

interface GigabitEthernet0/4

no switchport

no switchport

ip address 42.42.42.2 255.255.255.0

ip address 39.39.39.2 255.255.255.0

ip ospf network point-to-point

ip ospf network point-to-point

mpls ip

mpls ip

mpls label protocol ldp

mpls label protocol ldp

© 2010 Cisco and/or its affiliates. All rights reserved.

Topology

Popped(19)

20

19

ROUTED PORT

Popped(20)

Traffic Capture

Cisco Confidential

215

ME3800-H-2 PW Status

W2-2 PW Status

3800-H-2#sh mpls l2transport vc 5058 de

W2-2#sh mpls l2transport vc 5058 de

Local interface: Vl2507 up, line protocol up, Eth VLAN 2507 up

Local interface: Vl2506 up, line protocol up, Eth VLAN 2506 up

Interworking type is Ethernet

Interworking type is Ethernet

Destination address: 200.1.1.11, VC ID: 5058, VC status: up

Destination address: 200.1.1.12, VC ID: 5058, VC status: up

Output interface: Gi0/4, imposed label stack {19 20}

Output interface: Gi0/2, imposed label stack {17 4193}

Preferred path: not configured

Preferred path: not configured

Default path: active

Default path: active

Next hop: 42.42.42.2

Next hop: 42.42.42.1

Create time: 01:56:51, last status change time: 00:11:16 Signaling protocol: LDP, peer 200.1.1.11:0 up Targeted Hello: 200.1.1.12(LDP Id) -> 200.1.1.11, LDP is UP

Create time: 02:00:36, last status change time: 00:10:15 Signaling protocol: LDP, peer 200.1.1.12:0 up Targeted Hello: 200.1.1.11(LDP Id) -> 200.1.1.12, LDP is UP MPLS VC labels: local 20, remote 4193

MPLS VC labels: local 4193, remote 20

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

216

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

217

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

218

W2-2 Configuration interface GigabitEthernet0/4

ME3800-H-2 Configuration

Topology

interface GigabitEthernet0/14

switchport trunk allowed vlan none

switchport trunk allowed vlan none

switchport mode trunk

switchport mode trunk

service instance 1 ethernet

service instance 1 ethernet

encapsulation priority-tagged

encapsulation priority-tagged

rewrite ingress tag pop 1 symmetric

rewrite ingress tag pop 1 symmetric

xconnect 200.1.1.12 5058 encapsulation mpls

xconnect 200.1.1.11 5058 encapsulation mpls

ROUTED PORT 19

ROUTED PORT

Traffic Flow

20

Imposed(19,20)

! ! interface GigabitEthernet0/2

interface GigabitEthernet0/4 no switchport

no switchport ip address 42.42.42.2 255.255.255.0

ip address 39.39.39.2 255.255.255.0

Popped(19)

20

19

ROUTED PORT

Popped(20)

ip ospf network point-to-point ip ospf network point-to-point mpls ip

mpls ip

Traffic Capture

mpls label protocol ldp mpls label protocol ldp

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

219

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

220

IP-MPLS_Capture.pdf

2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3. Router Configuration. Interface GigabitEthernet0/1. switchport mode trunk. end. interface ...

13MB Sizes 15 Downloads 117 Views

Recommend Documents

No documents