Cisco ASR 920 series Manuale utente

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

First Published: July 29, 2014

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

CONTENTS

CHAPTER 1

Trunk EFP Support 1

Finding Feature Information 1

Restrictions for Trunk EFP Support 1

Information About Trunk EFP Support 2

Benefits of Trunk EFP Support 2

Ethernet Flow Points 2

Trunk Ports 3

How to Enable Trunk EFP Support 3

Enabling Trunk EFP Support 3

Verifying the Trunk EFP Support Configuration 5

Configuration Examples for Trunk EFP Support 6

Example: Configuring Trunk EFP Support 6

Example: Verifying the Trunk EFP Support Configuration 7

Additional References 7

Feature Information for Trunk EFP Support 9

CHAPTER 2

Ethernet Virtual Connections Configuration 11

Finding Feature Information 12

Supported EVC Features 12

Restrictions for Ethernet Virtual Connections Configuration 13

Ethernet Virtual Connections 14

Service Instances and EFPs 14

Encapsulation 15

Ethertype 17

Bridge Domains 18

Split-Horizon 18

Rewrite Operations 19

Static MAC Addresses 19

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

iii

Layer 2 Protocol Features 20

Configuring EFPs 20

Default EVC Configuration 20

Configuration Guidelines 20

Creating Service Instances 21

Creating a Trunk EFP 22

Configuring Asymmetric EFPs 24

Configuration Examples 25

Example for Configuring a Service Instance 25

Example for Encapsulation Using a VLAN Range 25

Configuration Example for Larger String VLAN in Encapsulation 26

Example for Two Service Instances Joining the Same Bridge Domain 26

Example for Bridge Domains and VLAN Encapsulation 26

Example for Rewrite 27

Example for Split Horizon 27

Example for Hairpinning 27

Example for Egress Filtering 28

Configuring Examples for Asymmetric EFPs 28

Configuring Other Features on EFPs 29

EFPs and EtherChannels 29

Layer 2 Protocol Peering 30

Layer 2 Protocol Forwarding 30

Configuring IEEE 802.1Q Tunneling and Layer 2 Protocol Tunneling Using EFPs 30

802.1Q Tunneling (QinQ) 30

Method 1 31

Method 2 32

Example for VLAN Translation Configurations 32

Example for Ingress Mapping of C-CoS to S-CoS 33

Example for Ingress Mapping of C-CoS to C-CoS 33

Example for Egress Classification Based on CoS 34

Layer 2 Protocol Tunneling 34

EFPs and Ethernet over Multiprotocol Layer Switching (EoMPLS) 38

Bridge Domain Routing 38

EFPs and Trunk Port MAC Addresses 39

EFPs and MSTP 39

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

Contents

L3 Unicast and Multicast Routing on a Bridge Domain with Multiple EFPs 40

Example for Configuring L3 Multicast Routing on a Bridge Domain 40

Cross-Connect on EFP Interfaces 40

Restrictions 41

Configuring Cross-Connect on an EFP Interface 41

MAC Address Forwarding, Learning and Aging on EFPs 42

Configuring a Static MAC Address 43

Limitations 43

Configuring a Static MAC Address 43

Configuring a Multicast Static MAC Address 45

Monitoring EVC 46

Additional References 49

Feature Information for Ethernet Virtual Connections Configuration 50

CHAPTER 3

EVC Local Connect 51

Finding Feature Information 51

Information About EVC Local Connect 52

Benefits of EVC Local Connect 52

Prerequisites for EVC Local Connect 52

Restrictions for EVC Local Connect 52

How to Configure EVC Local Connect 53

Configuring EVC Local Connect 53

Configuring EVC Local Connect as Interworking VLAN 53

Verifying EVC Local Connect Configuration 54

Verifying Traffic Statistics 54

Configuration Examples 55

Example: Configuration Example for EVC Local Connect 55

Example: Configuration Example for EVC Local Connect as Interworking VLAN 56

Use Cases or Deployment Scenarios 56

Additional References for EVC Local Connect 57

Feature Information for EVC Local Connect 58

CHAPTER 4

Using Ethernet Fault Detection 59

Information about Ethernet Fault Detection 59

Prerequisites for EFD 60

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

Contents

Limitations and Restrictions for EFD 60

Enabling Ethernet Fault Detection for a Service 61

Configuration Example for EFD 62

CHAPTER 5

Transparent CFM 65

Information About Transparent CFM 65

EFP (Q-in-Q interfaces with dot1q or dot1ad C-UNI) 65

Benefits of Transparent CFM 66

S-VLAN Component with Transparent CFM Support 66

C-VLAN Component with Transparent CFM Support on C-VLANs 66

Prerequisites for Transparent CFM 66

Restrictions for Transparent CFM 66

Configuring Transparent CFM 67

Configuring Transparent CFM on EFP 68

Configuration Examples for Transparent CFM 69

Example: Configuration of Transparent CFM on EFP 69

Example: Configuration of Transparent CFM 70

CHAPTER 6

VLAN Translation with QoS 71

Benefits of VLAN Translation 71

Scenarios showing VLAN Translation 72

Limitations for VLAN Translation with QoS 73

Configuring 1:1 VLAN Translation 74

Configuring 2:1 VLAN Translation 75

Configuring policy for ingress QoS 76

Configuration Example for 1:1 VLAN Translation 77

Configuration Example for 2:1 VLAN Translation 78

Configuration Example for policing ingress QoS 78

Configuration Verifications for VLAN Translation with QoS 78

Verifying the VLAN configuration 78

Verifying policy-map on ingress QoS 78

Verifying policy-map on egress QoS 79

Verifying the QoS Labels 79

Verifying Egress TCAM Details 80

Verifying TCAM Index Details 80

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

Contents

CHAPTER 7

Configuring MAC Address Limiting on Service Instances Bridge Domains and EVC Port

Channels 81

Finding Feature Information 81

Prerequisites for MAC Address Limiting on Service Instances Bridge Domains and EVC Port

Channels 82

Restrictions for MAC Address Limiting on Service Instances Bridge Domains and EVC Port

Channels 82

Information About MAC Address Limiting on Service Instances Bridge Domains and EVC Port

Channels 82

Ethernet Virtual Circuits, Service Instances, and Bridge Domains 82

EVCs on Port Channels 83

MAC Security and MAC Addressing 83

MAC Address Permit List 83

MAC Address Deny List 84

MAC Address Limiting and Learning 84

Static and Dynamic MAC Addresses 85

Dynamic MAC Address Learning 85

MAC Address Limiting on Service Instances 85

MAC Address Limiting for Bridge Domains 85

Relationship Between the MAC Address Limit on a Bridge Domain and on a Service

Instance 85

MAC Move and MAC Locking 86

Violation Response Configuration 86

MAC Address Aging Configuration 87

Sticky MAC Address Configurations 88

Aging for Sticky Addresses 88

Transitions 88

MAC Security Enabled on a Service Instance 88

MAC Security Disabled on a Service Instance 89

Service Instance Moved to a New Bridge Domain 89

Service Instance Removed from a Bridge Domain 89

Service Instance Shut Down Due to Violation 89

Interface Service Instance Down Linecard OIR Removed 89

Interface Service Instance Re-activated Linecard OIR Inserted 89

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

vii

Contents

MAC Address Limit Decreased 89

Sticky Addresses Added or Removed on a Service Instance 90

How to Configure MAC Address Limiting on Service Instances Bridge Domains and EVC

Port Channels 90

Enabling MAC Security on a Service Instance 90

Enabling MAC Security on an EVC Port Channel 92

Configuring a MAC Address Permit List 93

Configuring a MAC Address Deny List 96

Configuring MAC Address Limiting on a Bridge Domain 98

Configuring MAC Address Limiting on a Service Instance 99

Configuring a MAC Address Violation 101

Configuring MAC Address Aging 103

Configuring a Sticky MAC Address 104

Displaying the MAC Security Status of a Specific Service Instance 106

Displaying the Service Instances with MAC Security Enabled 107

Displaying the Service Instances with MAC Security Enabled on a Specific Bridge

Domain 108

Showing the MAC Addresses of All Secured Service Instances 108

Showing the MAC Addresses of a Specific Service Instance 109

Showing the MAC Addresses of All Service Instances on a Specific Bridge Domain 110

Showing the MAC Security Statistics of a Specific Service Instance 110

Showing the MAC Security Statistics of All Service Instances on a Specific Bridge

Domain 111

Showing the Last Violation Recorded on Each Service Instance on a Specific Bridge

Domain 112

Clearing All Dynamically Learned MAC Addresses on a Service Instance 113

Clearing All Dynamically Learned MAC Addresses on a Bridge Domain 114

Configuration Examples for MAC Address Limiting on Service Instances and Bridge Domains

and EVC Port Channels 115

Example Enabling MAC Security on a Service Instance 115

Example Enabling MAC Security on an EVC Port Channel 115

Example Configuring a MAC Address Permit List 115

Example Configuring a MAC Address Deny List 116

Example Configuring MAC Address Limiting on a Bridge Domain 116

Example Configuring a MAC Address Limit on a Service Instance 116

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

viii

Contents

Example Configuring a MAC Address Violation Response 116

Example Configuring MAC Address Aging 117

Example Configuring a Sticky MAC Address 117

Example Displaying the MAC Addresses on a Specific Secure Service Instance 117

Example Displaying the Last Violation on a Specific Service Instance 117

Example Displaying the MAC Security Status of a Specific Service Instance 117

Example Displaying the MAC Addresses of All Secured Service Instances 118

Example Displaying the MAC Security Statistics of All Service Instances 118

Example: Displaying the MAC Addresses on All Service Instances for a Bridge Domain 118

Example Displaying the Secured Service Instances for a Specific Bridge Domain 118

Additional References 119

Feature Information for MAC Address Limiting on Service Instances Bridge Domains and EVC

Port Channels 120

CHAPTER 8

Configuring Ethernet Connectivity Fault Management in a Service Provider Network 123

Finding Feature Information 124

Prerequisites for Configuring Ethernet CFM in a Service Provider Network 124

Restrictions for Configuring Ethernet CFM in a Service Provider Network 124

Information About Configuring Ethernet CFM in a Service Provider Network 125

Ethernet CFM 125

Benefits of Ethernet CFM 125

Customer Service Instance 125

Maintenance Domain 126

Maintenance Associations and Maintenance Points 127

Maintenance Point 129

Maintenance Endpoints 129

Maintenance Intermediate Points 130

CFM Messages 131

Cross-Check Function 132

SNMP Traps 132

Ethernet CFM and Ethernet OAM Interaction 133

Ethernet Virtual Circuit 133

OAM Manager 133

CFM over Bridge Domains 133

How to Set Up Ethernet CFM in a Service Provider Network 134

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

Contents

Designing CFM Domains 134

Examples 136

What to Do Next 136

Configuring Ethernet CFM 137

Provisioning the Network 137

Provisioning the Network on the CE-A 137

Provisioning the Network on the U-PE A 140

Provisioning the Network on the PE-AGG A 144

Provisioning the Network on the N-PE A 147

Provisioning the Network on the CE-B 150

Provisioning the Network on the U-PE B 153

Provisioning the Network on the PE-AGG B 156

Provisioning the Network on the N-PE B 159

Provisioning Service 162

Provisioning Service on the CE-A 162

Provisioning Service on the U-PE A 166

Provisioning Service on the PE-AGG A 170

Provisioning Service on the N-PE A 173

Provisioning Service on the CE-B 177

Provisioning Service on the U-PE B 180

Provisioning Service on the PE-AGG B 184

Provisioning Service on the N-PE B 187

Configuring and Enabling the Cross-Check Function 190

Configuring and Enabling Cross-Checking for an Inward Facing MEP on the U

PE-A 190

Configuring and Enabling Cross-Checking for an Inward Facing MEP on the U

PE-B 192

Configuring and Enabling Cross-Checking for an Outward Facing MEP on the

CE-A 194

Configuring and Enabling Cross-Checking for an Outward Facing MEP on the

CE-B 195

Configuring CFM over Bridge Domains 197

Troubleshooting Tips 202

Configuring Ethernet OAM Interaction with CFM 202

Configuring the OAM Manager 202

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

Contents

Altri manuali per ASR 920 series

Indice

Altri manuali Cisco Router di rete

Cisco

Cisco Catalyst 1900 Series Manuale

Cisco

Cisco ASR 9901 Manuale utente

Cisco

Cisco Linksys E1550 Guida rapida

Cisco

Cisco WS-C3550-12G Manuale utente

Cisco

Cisco EA-Series Manuale utente

Cisco

Cisco 2611 - Router - EN Manuale utente

Cisco

Cisco Cable Mgmt Bracket Cisco 7513/7576 Manuale utente

Cisco

Cisco HGA5T-3 Manuale utente

Cisco

Cisco 7201 Manuale utente

Cisco

Cisco 7609-S Manuale utente

Cisco

Cisco IR829 Manuale

Cisco

Cisco ASR1004 - ASR 1004 Modular Expansion Base Manuale utente

Cisco

Cisco MWR 1941-DC - 1941 Mobile Wireless Router Manuale utente

Cisco

Cisco WS-C5509 Manuale

Cisco

Cisco 1005 Guida all'installazione

Cisco

Cisco SOHO 91 Manuale utente

Cisco

Cisco 1600 series Manuale utente

Cisco

Cisco RV042 - Small Business Dual WAN VPN Router Manuale utente

Cisco

Cisco 12000 - Series Chassis Modular Expansion... Manuale

Cisco

Cisco Nexus 9000 Series Manuale utente

Cisco

Cisco WRT54GP2 Guida

Cisco

Cisco 910 Manuale utente

Cisco

Cisco 1840 Istruzioni originali

Cisco

Cisco 4000-M series Manuale elenco delle parti

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

EnGenius

EnGenius ESR-9710 Manuale utente

LevelOne

LevelOne FBR-1416 Manuale utente

Dynacord

Dynacord Promatrix 6000 Manuale utente

Lorex

Lorex F5D8230-4 Manuale utente