Cisco ASR 5000 Instruction Manual

ASR 5000 System Administration Guide, StarOS Release 21.1
First Published: 2017-01-26
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2017 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface About this Guide xxvii
Conventions Used xxvii
Related Documentation xxviii
Contacting Customer Support xxviii
CHAPTER 1 System Operation and Configuration 1
System Management Overview 1
Terminology 3
Contexts 3
Ports 3
Logical Interfaces 3
Management Interface 4
Bindings 4
Services 4
AAA Servers 5
Subscribers 5
Trusted Builds 6
How the System Selects Contexts 6
Context Selection for Context-level Administrative User Sessions 7
Context Selection for Subscriber Sessions 9
Understanding the ASR 5000 Boot Process 9
Understanding Configuration Files 11
IP Address Notation 12
IPv4 Dotted-Decimal Notation 13
IPv6 Colon-Separated-Hexadecimal Notation 13
CIDR Notation 13
Alphanumeric Strings 14
ASR 5000 System Administration Guide, StarOS Release 21.1
iii

Character Set 14
Quoted Strings 15
CHAPTER 2 Getting Started 17
ASR 5000 Configuration 17
Using the ASR 5000 Quick Setup Wizard 17
The Quick Setup Wizard 18
Using the CLI for Initial Configuration 22
Configuring the System for Remote Access 24
Configuring SSH Options 27
SSH Keys 27
Setting SSH Key Size 27
Configuring SSH Key Generation Wait Time 28
Specifying SSH Encryption Ciphers 28
Generating SSH Keys 29
Setting SSH Key Pair 29
Authorized SSH User Access 30
Authorizing SSH User Access 30
SSH User Login Restrictions 30
Creating an Allowed Users List 31
SSH User Login Authentication 31
Secure Session Logout 32
Changing Default sshd Secure Session Logout Parameters 33
SSH Client Login to External Servers 33
Generating SSH Client Key Pair 33
Pushing an SSH Client Public Key to an External Server 34
Configuring the Management Interface with a Second IP Address 35
CHAPTER 3 System Settings 37
Configuring a Second Management Interface 38
Verifying and Saving Your Interface and Port Configuration 38
Configuring System Timing 39
Setting the System Clock and Time Zone 39
Verifying and Saving Your Clock and Time Zone Configuration 40
Configuring Network Time Protocol Support 40
ASR 5000 System Administration Guide, StarOS Release 21.1
iv
Contents

Configuring NTP Servers with Local Sources 41
Using a Load Balancer 41
Verifying the NTP Configuration 42
Configuring Transmit Timing Source 43
Configure BITS as the Timing Source 43
Configure Line-timing as the Timing Source 44
Configure Both BITS and Line as Timing Sources 44
Confirming the Timing Source 44
Enabling CLI Timestamping 45
Configuring CLI Confirmation Prompts 45
Enabling Automatic Confirmation 45
Requiring Confirmation for autoconfirm and configure Commands 46
Requiring Confirmation for Specific Exec Mode Commands 46
Configuring System Administrative Users 47
Configuring Context-level Administrative Users 48
Configuring Context-level Security Administrators 48
Configuring Context-level Administrators 48
Configuring Context-level Operators 49
Configuring Context-level Inspectors 49
Configuring LI Administrators 50
Verifying Context-level Administrative User Configuration 50
Configuring Local-User Administrative Users 50
Verifying Local-User Configuration 51
Updating Local-User Database 51
Updating and Downgrading the local-user Database 51
Provisioning Lawful Intercept 52
Restricting User Access to a Specified Root Directory 53
Configuring an SFTP root Directory 54
Associating an SFTP root Directory with a Local User 54
Associating an SFTP root Directory with an Administrator 54
Associating an SFTP root Directory with a Config Administrator 54
Configuring TACACS+ for System Administrative Users 54
Operation 55
User Account Requirements 55
TACACS+ User Account Requirements 55
ASR 5000 System Administration Guide, StarOS Release 21.1
v
Contents

StarOS User Account Requirements 56
Configuring TACACS+ AAA Services 56
Configuring TACACS+ for Non-local VPN Authentication 57
Verifying the TACACS+ Configuration 57
Separating Authentication Methods 58
Disable TACACS+ Authentication for Console 59
Disable AAA-based Authentication for Console 59
Disable TACACS+ Authentication at the Context Level 59
Limit local-user Login on Console/vty Lines 60
Limit Console Access for AAA-based Users 60
Verify Configuration Changes 61
Configuring a Chassis Key 61
Overview 61
Configuring a New Chassis Key Value 62
CLI Commands 62
Quick Setup Wizard 63
Configuring Virtual MAC Addresses 63
Verifying Virtual MAC Address Configuration 64
Configuring Packet Processing and Line Card Availability 64
Verifying Packet Processing and Line Card Configurations 65
Configuring Line Card and SPIO Port Redundancy 65
Enabling Line Card and SPIO Port Redundancy 68
Verifying Line Card and SPIO Port Redundancy 69
Configuring Line Card and SPIO Port Redundancy Auto-Recovery 69
Verifying Line Card and SPIO Port Redundancy Auto-Recovery 70
Configuring ASR 5000 Link Aggregation 70
LAG and Master Port 71
LAG and Port Redundancy 71
LAG and Multiple Switches 71
Multiple Switches without L2 Redundancy 71
Multiple Switches with L2 Redundancy 72
Port States for Auto-Switch 73
Hold Time 73
Preferred Slot 73
Auto-Switch Criteria 73
ASR 5000 System Administration Guide, StarOS Release 21.1
vi
Contents

Distribution Option 74
show Commands 74
Suppressing SPOF Alarm for XGLC 74
QGLC Link Aggregation 75
Requirements 75
Operation 75
XGLC Link Aggregation 76
Link Aggregation Control 76
Redundancy Options 78
Distribution Option 78
Toggle Link 78
Horizontal Link Aggregation with Two Ethernet Switches 78
Link Aggregation Status 79
Configuring a Demux Card 79
Overview 79
Configuration 79
Configuring Flow Control on XGLCs 79
CHAPTER 4 Config Mode Lock Mechanisms 81
Overview of Config Mode Locking 81
Requesting an Exclusive-Lock 82
Effect of Config Lock on URL Scripts 83
Saving a Configuration File 84
Reload and Shutdown Commands 84
show administrators Command 85
CHAPTER 5 Management Settings 87
ORBEM 87
Configuring ORBEM Client and Port Parameters 88
Configuring IIOP Transport Parameters 88
Verifying ORBEM Parameters 89
SNMP MIB Browser 89
SNMP Support 92
Configuring SNMP and Alarm Server Parameters 92
Verifying SNMP Parameters 93
ASR 5000 System Administration Guide, StarOS Release 21.1
vii
Contents

Controlling SNMP Trap Generation 94
CHAPTER 6 Verifying and Saving Your Configuration 95
Verifying the Configuration 95
Feature Configuration 95
Service Configuration 96
Context Configuration 96
System Configuration 96
Finding Configuration Errors 96
Synchronizing File Systems 97
Saving the Configuration 97
CHAPTER 7 System Interfaces and Ports 99
Contexts 99
Creating Contexts 99
Viewing and Verifying Contexts 100
Ethernet Interfaces and Ports 100
Creating an Interface 101
Configuring a Port and Binding It to an Interface 101
Configuring a Static Route for an Interface 102
Viewing and Verifying Port Configuration 102
ATM Interfaces and Ports 103
Enabling the OLC (ATM) Line Card 104
Creating an IP Interface for Use with an ATM Port 104
Configuring an ATM Port to Use an IP Interface 104
Configuring an ATM Port for an SS7 Link 105
Binding an SS7 Link to an ATM Port 105
Verifying Port and Interface Configuration 105
Frame Relay Interfaces and Ports 106
Setting the Characteristics of the Channelized Line Card 107
Configuring the Channel Characteristics 107
Binding a DLCI 107
Verifying the Frame Relay Interface Configuration and Status 108
Display Port and DLCI Configuration Details 108
Display Port and DLCI Configuration and Status 108
ASR 5000 System Administration Guide, StarOS Release 21.1
viii
Contents

CHAPTER 8 System Security 111
Per-Chassis Key Identifier 111
Chassis Synchronization 112
Protection of Passwords 112
Secure Password Encryption 113
Support for Non-Current Encryptions and Decryptions 113
Support for ICSR Configurations 114
Encrypted SNMP Community Strings 114
Lawful Intercept Restrictions 114
LI Server Addresses 114
Modifying Intercepts 115
Adding, Modifying and Removing Users 115
Notification of Users Being Added or Deleted 115
Notification of Changes in Privilege Levels 115
User Access to Operating System Shell 116
Test-Commands 116
Enabling cli test-commands Mode 116
Enabling Password for Access to CLI-test commands 116
Exec Mode cli test-commands 117
Configuration Mode cli test-commands 117
CHAPTER 9 Software Management Operations 119
Understanding the Local File System 119
File Types Used by the Local File System 120
Understanding the boot.sys File 120
Maintaining the Local File System 121
File System Management Commands 121
Synchronizing the File System 121
Creating Directories 121
Renaming Files and Directories 121
Copying Files 122
Deleting Files 122
Removing Directories 122
Formatting Local Devices 123
ASR 5000 System Administration Guide, StarOS Release 21.1
ix
Contents

Applying Pre-existing CLI Configuration Files 123
Viewing Files on the Local File System 123
Viewing the Contents of a Local Device 124
Viewing CLI Configuration and boot.sys Files 124
Validating an Operating System File 124
Configuring the Boot Stack 125
System Boot Methods 125
Viewing the Current Boot Stack 125
Adding a New Boot Stack Entry 127
Deleting a Boot Stack Entry 127
Network Booting Configuration Requirements 127
Configuring the Boot Interface 127
Configuring the Boot Network 128
Configuring Boot Network Delay Time 129
Configuring a Boot Nameserver 129
Upgrading the Operating System Software 129
Identifying OS Release Version and Build Number 130
Verify Free Space on the /flash Device 130
Download the Software Image from the Support Site 131
Transfer StarOS Image to /flash on the Chassis 131
Saving a Copy of the Current Configuration File 131
Preparing for a Software Downgrade 132
Downgrading from Release 12.2 to 12.0 132
Downgrading from Release 15.0 to 14.0 132
Downgrading from Release 20.0 133
Software Upgrade Methods 133
On-Line Software Upgrade 134
System Requirements to Support the On-line Software Upgrade Method 134
CLI Verification and System Preparation 134
Stage 1 - Soft Busy-out 135
Stage 2 - Stand-alone Operation 135
Stage 3 - Management Card Upgrade 136
Stage 4 - Reboot All Packet Processing Cards 136
Stage 5 - Return System to Normal Operation 137
Performing an On-line Software Upgrade 137
ASR 5000 System Administration Guide, StarOS Release 21.1
x
Contents

Aborting an On-line Software Upgrade 139
Restoring the Previous (Pre-online Upgrade) Software Image 140
Off-line Software Upgrade 140
Configure a Newcall Policy 140
Configure a Message of the Day Banner 141
Back up the Current CLI Configuration File 141
Create a New Boot Stack Entry 142
Synchronize File Systems 142
Save the Running Configuration 142
Reboot the Chassis 142
Verify the Running Software Version 143
Restoring the Previous Software Image 143
Upgrading ICSR Chassis 143
Performing Dynamic Software Updates 143
Managing License Keys 144
New System License Keys 144
Session Use and Feature Use Licenses 144
Installing New License Keys 144
Cutting and Pasting the Key 145
Adding License Keys to Configuration Files 145
License Expiration Behavior 146
Requesting License Keys 146
Viewing License Information 147
Deleting a License Key 147
Management Card Replacement and License Keys 147
Managing Local-User Administrative Accounts 147
Configuring Local-User Password Properties 148
Configuring Local-User Account Management Properties 148
Local-User Account Lockouts 148
Local-User Account Suspensions 149
Changing Local-User Passwords 149
CHAPTER 10 Monitoring the System 151
SNMP Notifications 151
Monitoring System Status and Performance 151
ASR 5000 System Administration Guide, StarOS Release 21.1
xi
Contents

Clearing Statistics and Counters 153
Monitoring ASR 5000 Hardware Status 153
CHAPTER 11 Bulk Statistics 157
Configuring Communication with the Collection Server 157
Configuring Standard Settings 157
Configuring Optional Settings 158
Configuring Bulk Statistic Schemas 158
Configuring a Separate Bulkstats Config File 158
Using show bulkstats Commands 159
Verifying Your Configuration 159
Saving Your Configuration 160
Viewing Collected Bulk Statistics Data 160
Manually Gathering and Transferring Bulk Statistics 161
Clearing Bulk Statistics Counters and Information 161
Bulkstats Schema Nomenclature 161
Statistic Types 161
Data Types 162
Key Variables 162
Bulk Statistics Event Log Messages 164
CHAPTER 12 System Logs 165
System Log Types 165
Configuring Event Logging Parameters 166
Configuring Event Log Filters 166
Exec Mode Filtering 167
Global Configuration Mode Filtering 169
Configuring syslog Servers 169
Configuring Active Logs 170
Specifying Facilities 170
Configuring Trace Logging 179
Configuring Monitor Logs 179
Enabling Monitor Logs 180
Disabling Monitor Logs 180
Viewing Logging Configuration and Statistics 180
ASR 5000 System Administration Guide, StarOS Release 21.1
xii
Contents

Viewing Event Logs Using the CLI 181
Configuring and Viewing Crash Logs 181
Crash Logging Architecture 182
Configuring Software Crash Log Destinations 182
Viewing Abridged Crash Log Information Using the CLI 183
Reducing Excessive Event Logging 185
Configuring Log Source Thresholds 185
Checkpointing Logs 186
Saving Log Files 186
Event ID Overview 187
Event Severities 195
Understanding Event ID Information in Logged Output 196
CHAPTER 13 Troubleshooting 197
Detecting Faulty Hardware 197
Using the CLI to View Status LEDs 198
Checking the LED on the PFU 198
Checking the LEDs on the SMC 199
SMC Run/Fail LED States 200
SMC Active LED States 201
SMC Standby LED States 202
SMC Status LED States 203
SMC Service LED States 203
SMC Busy LED States 204
Checking the LEDs on the Packet Processing Cards 204
Packet Processing Card Run/Fail LED States 205
Packet Processing Card Active LED States 206
Packet Processing Card Standby LED States 207
Checking the LEDs on the SPIO 208
SPIO Run/Fail LED States 208
SPIO Active LED States 209
SPIO Standby LED States 210
SPIO Interface Link LED States 210
SPIO Interface –Activity LED States 211
Checking the LEDs on Ethernet Line Cards 211
ASR 5000 System Administration Guide, StarOS Release 21.1
xiii
Contents

Ethernet Line Card Run/Fail LED States 212
Ethernet Line Card Active LED States 212
Ethernet Line Card Standby LED States 213
Ethernet Line Card Interface –Link LED States 214
Ethernet Line Card Interface Activity LED States 214
Checking the LEDs on the RCC 215
RCC Run/Fail LED States 215
RCC Active LED States 216
RCC Standby LED States 217
Testing System Alarm Outputs 217
Taking Corrective Action 217
Manually Initiating a Management Card Switchover 218
Manually Initiating a Packet Processing Card Migration 218
Manually Initiating a Line Card or SPIO Switchover 219
Halting Cards 220
Initiate a Card Halt 220
Restoring a Previously Halted Card 221
Verifying Network Connectivity 221
Using the ping or ping6 Command 221
Syntax 221
Troubleshooting 222
Using the traceroute or traceroute6 Command 222
traceroute –IPv4 Syntax 222
traceroute6 –IPv6 Syntax 223
Viewing IP Routes 223
Viewing the Address Resolution Protocol Table 223
Using the System Diagnostic Utilities 224
Using the Monitor Utility 224
Using the Protocol Monitor 224
Using the Protocol Monitor for a Specific Subscriber 225
Generating an SSD 227
Configuring and Using the Support Data Collector 228
CHAPTER 14 Access Control Lists 229
Overview 229
ASR 5000 System Administration Guide, StarOS Release 21.1
xiv
Contents

Understanding ACLs 230
Rule(s) 230
Actions 230
Criteria 230
Rule Order 232
Configuring ACLs on the System 232
Creating ACLs 232
Configuring Action and Criteria for Subscriber Traffic 233
Configuring an Undefined ACL 233
Verifying the ACL Configuration 234
Applying IP ACLs 234
Applying the ACL to an Interface 236
Applying an ACL to an Individual Interface 236
Verifying the ACL Configuration on an Interface 237
Applying the ACL to a Context 237
Applying an ACL to All Traffic Within a Context 238
Verifying the ACL Configuration in a Context 238
Applying an ACL to a RADIUS-based Subscriber 239
Applying an ACL to an Individual Subscriber 240
Verifying the ACL Configuration to an Individual Subscriber 240
Applying an ACL to the Subscriber Named default 241
Applying an ACL to the Subscriber Named default 241
Verifying the ACL Configuration to the Subscriber Named default 242
Applying an ACL to Service-specified Default Subscriber 242
Applying an ACL to Service-specified Default Subscriber 243
Verifying the ACL Configuration to Service-specified Default Subscriber 243
Applying a Single ACL to Multiple Subscribers 244
Applying an ACL to Multiple Subscriber via APNs 245
Applying an ACL to Multiple Subscriber via APNs 245
Verifying the ACL Configuration to APNs 246
CHAPTER 15 Congestion Control 247
Overview 247
Configuring Congestion Control 248
Configuring the Congestion Control Threshold 248
ASR 5000 System Administration Guide, StarOS Release 21.1
xv
Contents

Configuring Service Congestion Policies 249
Configuring Overload Reporting on the MME 249
Enabling Congestion Control Redirect Overload Policy 250
Verify the Service Overload Policies 250
Verify the Congestion Control Configuration 250
Verify MME Congestion Action Profiles 250
Disconnecting Subscribers Based on Call or Inactivity Time 250
CHAPTER 16 Routing 253
Routing Policies 253
Creating IP Prefix Lists 254
Creating Route Access Lists 254
Creating AS Path Access Lists 254
Creating Route Maps 255
Sample Configuration 255
Static Routing 255
Adding Static Routes to a Context 256
Deleting Static Routes From a Context 256
OSPF Routing 256
OSPF Version 2 Overview 257
Basic OSPFv2 Configuration 258
Enabling OSPF Routing For a Specific Context 258
Enabling OSPF Over a Specific Interface 258
Redistributing Routes Into OSPF (Optional) 258
Confirming OSPF Configuration Parameters 259
OSPFv3 Routing 259
OSPFv3 Overview 259
Basic OSPFv3 Configuration 259
Enabling OSPFv3 Routing For a Specific Context 259
Enabling OSPFv6 Over a Specific Interface 260
Redistributing Routes Into OSPFv3 (Optional) 260
Confirming OSPFv3 Configuration Parameters 260
Equal Cost Multiple Path (ECMP) 260
BGP-4 Routing 261
Overview of BGP Support 261
ASR 5000 System Administration Guide, StarOS Release 21.1
xvi
Contents

Configuring BGP 262
Redistributing Routes Into BGP (Optional) 262
BGP Communities and Extended Communities 263
BGP Communities 263
Configuring a BGP Community 263
Setting the Community Attribute 264
Filtering via a BGP Community 264
BGP Extended Communities 264
Configuring a BGP Extended Community (Route Target) 264
Setting the Extended Community Attribute 265
Filtering via a BGP Extended Community 265
BGP Local Preference 265
ICSR and SRP Groups 265
Advertising BGP Routes from a Standby ICSR Chassis 265
Configurable BGP Route Advertisement Interval for ICSR 266
BGP CLI Configuration Commands 266
Confirming BGP Configuration Parameters 268
Bidirectional Forwarding Detection 268
Overview of BFD Support 269
Configuring BFD 269
Configuring a BFD Context 270
Configuring IPv4 BFD for Static Routes 270
Configuring IPv6 BFD for Static Routes 270
Configuring BFD for Single Hop 271
Configuring Multihop BFD 271
Scaling of BFD 272
Associating BGP Neighbors with the Context 272
Associating OSPF Neighbors with the Context 272
Associating BFD Neighbor Groups with the BFD Protocol 272
Enabling BFD on OSPF Interfaces 273
All OSPF Interfaces 273
Specific OSPF Interface 273
Monitoring BFD Connection for ICSR 273
Saving the Configuration 273
Chassis-to-Chassis BFD Monitoring for ICSR 273
ASR 5000 System Administration Guide, StarOS Release 21.1
xvii
Contents

Enable Primary Chassis BFD Monitoring 274
Set BFD to Ignore ICSR Dead Interval 274
Configure ICSR Switchover Guard Timer 274
Enable BFD Multihop Fall-over 275
ip route Command 275
ip routev6 Command 276
Adjust BFD Interval 276
Enable Advertising BGP Routes from Standby ICSR Chassis 276
Saving the Configuration 276
BFD Support for Link Aggregation Member Links 276
Overview 277
Configuring Support for BFD Linkagg Member-links 277
Saving the Configuration 278
Viewing Routing Information 278
CHAPTER 17 VLANs 281
Overview 281
Overlapping IP Address Pool Support –GGSN 282
RADIUS VLAN Support –Enhanced Charging Services 282
APN Support –PDN Gateway (P-GW) 282
Creating VLAN Tags 283
Verifying the Port Configuration 283
Configuring Subscriber VLAN Associations 284
RADIUS Attributes Used 284
Configuring Local Subscriber Profiles 284
Verify the Subscriber Profile Configuration 285
VLAN-Related CLI Commands 285
CHAPTER 18 BGP MPLS VPNs 289
Introduction 289
MPLS-CE Connected to PE 290
ASR 5x00 as a PE 291
Overview 291
Sample Configuration 291
IPv6 Support for BGP MPLS VPNs 293
ASR 5000 System Administration Guide, StarOS Release 21.1
xviii
Contents

Overview 293
Sample Configuration 294
VPN-Related CLI Commands 296
CHAPTER 19 Content Service Steering 301
Overview 301
Configuring Internal Content Service Steering 302
Defining IP Access Lists for Internal CSS 302
Applying an ACL to an Individual Subscriber (Optional) 303
Applying an ACL to Multiple Subscribers (Optional) 303
Applying an ACL to the Subscriber Named default (Optional) 303
Applying an ACL to Service-specified Default Subscribers (Optional) 303
Applying an ACL to Multiple Subscribers via APNs (Optional) 303
CHAPTER 20 System Recovery 305
Prerequisites 305
Console Access 305
Boot Image 305
Accessing the boot CLI 306
Initiate a Reboot 306
Interrupt the Boot Sequence 306
Enter CLI Mode 307
boot Command Syntax 307
Booting from a Selected Image 307
Boot Using No Configuration FIle 307
Boot Using A Specified Configuration File 308
CHAPTER 21 Session Recovery 309
How Session Recovery Works 309
Additional ASR 5x00 Hardware Requirements 312
Configuring the System to Support Session Recovery 312
Enabling Session Recovery 313
Enabling Session Recovery on an Out-of-Service System 313
Enabling Session Recovery on an In-Service System 313
Disabling the Session Recovery Feature 314
ASR 5000 System Administration Guide, StarOS Release 21.1
xix
Contents

Viewing Session Recovery Status 314
Viewing Recovered Session Information 315
Recovery Control Task Statistics 316
show rct stats Command 317
Sample Output for show rct stats verbose 317
CHAPTER 22 Interchassis Session Recovery 319
Overview 319
Interchassis Communication 321
Checkpoint Messages 321
SRP CLI Commands 321
Exec Mode CLI Commands 321
show Commands 322
AAA Monitor 323
BGP Interaction 323
Requirements 323
ICSR Operation 325
Chassis Initialization 328
Chassis Operation 328
Chassis Communication 328
Chassis Switchover 328
Configuring Interchassis Session Recovery (ICSR) 329
Configuring the Service Redundancy Protocol (SRP) Context 330
Creating and Binding the SRP Context 330
Configuring SRP Context Parameters 331
Basic Parameters 331
SRP Redundancy, AAA and Diameter Guard Timers 332
DSCP Marking of SRP Messages 333
Optimizing Switchover Transitions 333
Allow Non-VoLTE Traffic During ICSR Switchover 334
Allow All Data Traffic 336
Allow Early Active Transition 336
Graceful Cleanup of ICSR After Audit of Failed Calls 336
Optimization of Switchover Control Outage Time 337
Configuring the SRP Context Interface Parameters 337
ASR 5000 System Administration Guide, StarOS Release 21.1
xx
Contents