Cisco 10000-2P2-2DC User manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Cisco 10000 Series Router Software
Configuration Guide
June, 2010
Text Part Number: OL-2226-23

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Cisco 10000 Series Router Software Configuration Guide
Copyright © 2007-2010 Cisco Systems, Inc. All rights reserved.

iii
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
CONTENTS
About This Guide xxv
Guide Revision History i-xxv
Audience i-xxx
Document Organization i-xxx
Document Conventions i-xxxii
Related Documentation i-xxxiii
RFCs i-xxxiv
Obtaining Documentation, Obtaining Support, and Security Guidelines i-xxxiv
CHAPTER 1Broadband Aggregation and Leased-Line Overview 1-1
Hardware Requirements 1-1
Checking Hardware and Software Compatibility 1-1
Broadband Architecture Models 1-2
PPP Termination and Aggregation Architectures 1-2
PTA to Virtual Routing and Forwarding Architecture 1-3
PTA to Multiprotocol Label Switching Virtual Private Network Architecture 1-4
L2TP Architectures 1-5
L2TP to Virtual Routing and Forwarding Architecture 1-5
L2TP over MPLS to Virtual Routing and Forwarding Instance 1-6
L2TP Access Concentrator Architecture 1-7
Routed Bridge Encapsulation Architectures 1-7
RBE to Virtual Routing and Forwarding Architecture 1-8
RBE to Multiprotocol Label Switching Virtual Private Network Architecture 1-9
Leased-Line Architecture Models 1-10
Channelized Aggregation 1-10
Frame Relay Aggregation 1-10
ATM Aggregation 1-11
Ethernet Aggregation 1-12
MPLS Provider Edge Applications 1-12
Combined Broadband and Leased-Line Applications 1-13
Load Balancing Architecture Models 1-13
IP and MPLS Applications 1-13
Single Ingress and Single Egress Provider Edge Applications 1-14
Single Ingress and Two Egress Provider Edge Applications 1-14

Contents
iv
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Multiple Ingress and Multiple Egress Provider Edge Applications 1-15
New Features, Enhancements, and Changes 1-15
New Features in Cisco IOS Release 12.2(33)XNE3 1-16
New Features in Cisco IOS Release 12.2(33)XNE 1-16
New Features in Cisco IOS Release 12.2(33)SB3 1-18
New Features in Cisco IOS Release 12.2(33)SB2 1-18
New Features in Cisco IOS Release 12.2(33)SB 1-18
New Features in Cisco IOS Release 12.2(31)SB5 1-19
New Features in Cisco IOS Release 12.2(31)SB3 1-19
New Features in Cisco IOS Release 12.2(31)SB2 1-20
New Features in Cisco IOS Release 12.2(28)SB1 1-21
New Features in Cisco IOS Release 12.2(28)SB 1-21
New Features in Cisco IOS Release 12.3(7)XI7 1-25
New Features in Cisco IOS Release 12.3(7)XI3 1-26
New Features in Cisco IOS Release 12.3(7)XI2 1-26
New Features in Cisco IOS Release 12.3(7)XI1 1-26
CHAPTER 2Scalability and Performance 2-1
Line Card VC Limitations 2-1
Limitations and Restrictions 2-3
Scaling Enhancements in Cisco IOS Release 12.2(33)XNE 2-4
Scaling Enhancements in Cisco IOS Release 12.2(33)SB 2-5
Layer 4 Redirect Scaling 2-5
Scaling Enhancements in Cisco IOS Release 12.3(7)XI1 2-6
FIB Scaling 2-6
Policy-Map Scaling 2-6
Queue Scaling 2-7
Scaling Enhancements in Cisco IOS Release 12.3(7)XI2 2-7
Queue Scaling 2-7
VC Scaling 2-8
Scaling Enhancements in Cisco IOS Release 12.2(28)SB 2-8
Configuring the Cisco 10000 Series Router for High Scalability 2-8
Configuring Parameters for RADIUS Authentication 2-9
Configuring L2TP Tunnel Settings 2-9
VPDN Group Session Limiting 2-10
Configuring the PPP Authentication Timeout 2-10
Disabling Cisco Discovery Protocol 2-10
Disabling Gratuitous ARP Requests 2-11
Configuring a Virtual Template Without Interface-Specific Commands 2-11

Contents
v
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Monitoring PPP Sessions Using the SNMP Management Tools 2-13
SNMP Process and High CPU Utilization 2-13
CISCO-ATM-PVCTRAP-EXTN-MIB 2-14
Configuring the Trunk Interface Input Hold Queue 2-15
Configuring no atm pxf queuing 2-15
Configuring atm pxf queuing 2-16
Configuring keepalive 2-17
Enhancing Scalability of Per-User Configurations 2-17
Setting VRF and IP Unnumbered Interface Configurations in User Profiles 2-18
Setting VRF and IP Unnumbered Interface Configuration in a Virtual Interface Template 2-18
Redefining User Profiles to Use the ip:vrf-id and ip:ip-unnumbered VSAs 2-18
Placing PPPoA Sessions in Listening Mode 2-19
Scaling L2TP Tunnel Configurations 2-19
Using the RADIUS Attribute cisco-avpair="lcp:interface-config" 2-20
Using Full Virtual Access Interfaces 2-20
Preventing Full Virtual Access Interfaces 2-21
CHAPTER 3Configuring Remote Access to MPLS VPN 3-1
MPLS VPN Architecture 3-2
Access Technologies 3-3
PPP over ATM to MPLS VPN 3-4
PPP over Ethernet to MPLS VPN 3-5
RBE over ATM to MPLS VPN 3-7
MPLS VPN ID 3-7
DHCP Relay Agent Information Option—Option 82 3-9
DHCP Relay Support for MPLS VPN Suboptions 3-9
Feature History for RA to MPLS VPN 3-10
Restrictions for RA to MPLS VPN 3-10
Prerequisites for RA to MPLS VPN 3-11
Configuration Tasks for RA to MPLS VPN 3-12
Configuring the MPLS Core Network 3-12
Enabling Label Switching of IP Packets on Interfaces 3-12
Configuring Virtual Routing and Forwarding Instances 3-13
Associating VRFs 3-13
Configuring Multiprotocol BGP PE to PE Routing Sessions 3-14
Configuring Access Protocols and Connections 3-16
Configuring a Virtual Template Interface 3-17
Configuring PPP over ATM Virtual Connections and Applying Virtual Templates 3-18
Configuring PPPoE over ATM Virtual Connections and Applying Virtual Templates 3-18

Contents
vi
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Configuring PPPoE over Ethernet Virtual Connections and Applying Virtual Templates 3-20
Configuring RBE over ATM Virtual Connections 3-22
Configuring and Associating Virtual Private Networks 3-28
Configuring Virtual Private Networks 3-28
Associating VPNs with a Virtual Template Interface 3-28
Configuring RADIUS User Profiles for RADIUS-Based AAA 3-30
Verifying VPN Operation 3-30
Configuration Examples for RA to MPLS VPN 3-30
PPPoA to MPLS VPN Configuration Example 3-31
PPPoE to MPLS VPN Configuration Example 3-34
RBE to MPLS VPN Configuration Example 3-38
Monitoring and Maintaining an MPLS Configuration 3-39
Verifying the Routing Protocol Is Running 3-40
Verifying MPLS 3-40
Verifying Connections Between Neighbors 3-40
Verifying Label Distribution 3-41
Verifying Label Bindings 3-42
Verifying Labels Are Set 3-43
Monitoring and Maintaining the MPLS VPN 3-43
Verifying VRF Configurations 3-44
Verifying the Routing Table 3-44
Verifying the PE to PE Routing Protocols 3-45
Verifying the PE to CE Routing Protocol 3-46
Verifying the MPLS VPN Labels 3-46
Testing the VRF 3-46
Monitoring and Maintaining PPPoX to MPLS VPN 3-47
Monitoring and Maintaining RBE to MPLS VPN 3-48
CHAPTER 4Configuring Multiprotocol Label Switching 4-1
BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN 4-1
Feature History for BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN 4-2
Restrictions for BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN 4-3
Prerequisites for BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN 4-3
IGP Convergence Acceleration 4-3
Configuring IGP Convergence Acceleration 4-4
Configuring BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN 4-4
Configuring Multipath Load Sharing for eBGP and iBGP 4-5
Verifying Multipath Load Sharing for eBGP and iBGP 4-5
Configuration Examples for BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN 4-5

Contents
vii
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
eBGP and iBGP Multipath Load Sharing Configuration Example 4-6
Verifying eBGP and iBGP Multipath Load Sharing 4-6
Monitoring and Maintaining BGP Multipath Load Sharing for eBGP and iBGP 4-7
IPv6 VPN over MPLS 4-7
Feature History for IPv6 VPN over MPLS 4-8
Prerequisites for Implementing IPv6 VPN over MPLS 4-8
Restrictions for Implementing IPv6 VPN over MPLS 4-9
Configuration Tasks for Implementing IPv6 VPN over MPLS 4-9
BGP Features 4-10
IPv6 Internet Access 4-11
VRF-Aware Router Applications 4-12
VRF-Lite 4-12
QoS Features 4-12
Configuration Example for Implementing IPv6 VPN over MPLS 4-13
Monitoring and Maintaining IPv6 VPN over MPLS 4-15
Session Limit Per VRF 4-15
Application of VPDN Parameters to VPDN Groups 4-16
VPDN Template Configuration 4-17
Feature History for Session Limit Per VRF 4-17
Restrictions for Session Limit Per VRF 4-17
Prerequisites for Session Limit Per VRF 4-17
Configuring Session Limit Per VRF 4-18
Verifying a Session Limit Per VRF Configuration 4-19
Configuration Examples for Session Limit Per VRF 4-19
Monitoring and Maintaining Session Limit Per VRF 4-21
Half-Duplex VRF 4-21
Upstream and Downstream VRFs 4-22
Reverse Path Forwarding Check Support 4-23
Feature History for Half-Duplex VRF 4-23
Restrictions for Half-Duplex VRF 4-23
Prerequisites for Half-Duplex VRF 4-23
Configuration Tasks for Half-Duplex VRF 4-24
Configuring Upstream and Downstream VRFs on the L2TP Access Concentrator and PE
Router 4-24
Associating VRFs 4-25
Configuring RADIUS 4-26
Configuration Examples for Half-Duplex VRF 4-26
Hub and Spoke Sample Configuration with Half-Duplex VRFs 4-27
RADIUS Sample Configuration 4-28
Monitoring and Maintaining Half-Duplex VRF 4-29

Contents
viii
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
CHAPTER 5Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server 5-1
IP Reassembly 5-1
Feature History for IP Reassembly 5-2
Layer 2 Access Concentrator 5-2
Tunnel Sharing 5-4
Tunnel Service Authorization 5-4
Tunnel Selection 5-4
Sessions per Tunnel Limiting 5-5
Session Load Balancing 5-6
Session Load Failover 5-6
Feature History for LAC 5-6
Restrictions for LAC 5-7
Required Configuration Tasks for LAC 5-7
Enabling the LAC to Look for Tunnel Definitions 5-7
Optional Configuration Tasks for LAC 5-7
Enabling Sessions with Different Domains to Share the Same Tunnel 5-8
Enabling the LAC to Conduct Tunnel Service Authorization 5-8
Configuring Sessions Per Tunnel Limiting on the LAC 5-12
RADIUS Server Optional Configuration Tasks for LAC 5-13
Enabling Tunnel Sharing for RADIUS Services 5-13
Enabling the RADIUS Server to Conduct Tunnel Service Authorization 5-14
Configuring Sessions Per Tunnel Limiting in the RADIUS Service Profile 5-16
Configuration Example for LAC 5-17
Monitoring and Maintaining LAC 5-21
L2TP Network Server 5-22
Virtual Template Interface 5-23
Virtual Routing and Forwarding Instance 5-23
Per VRF AAA 5-23
Private Servers 5-24
RADIUS Attribute Screening 5-24
Packet Fragmentation 5-24
Tunnel Accounting 5-25
Tunnel Authentication 5-25
Named Method Lists 5-27
Framed-Route VRF Aware 5-27
Feature History for LNS 5-28
Restrictions for the LNS 5-28
Prerequisites for LNS 5-28
Required Configuration Tasks for LNS 5-29

Contents
ix
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Configuring the Virtual Template Interface 5-29
Configuring the LNS to Initiate and Receive L2TP Traffic 5-29
Optional Configuration Tasks for LNS 5-30
Configuring per VRF AAA Services 5-31
Configuring a VRF on the LNS 5-36
Configuring Sessions per Tunnel Limiting on the LNS 5-36
Configuring RADIUS Attribute Accept or Reject Lists 5-37
Configuring the LNS for RADIUS Tunnel Accounting 5-39
Configuring the LNS for RADIUS Tunnel Authentication 5-42
Configuration Examples for LNS 5-45
Managed LNS Configuration Example 5-45
Tunnel Accounting Configuration Examples 5-47
Tunnel Authentication Configuration Examples 5-50
Monitoring and Maintaining LNS 5-51
CHAPTER 6Configuring PPPoE over Ethernet and IEEE 802.1Q VLAN 6-1
PPPoE over Ethernet 6-1
Feature History for PPPoE over Ethernet 6-2
Restrictions for PPPoE over Ethernet 6-2
Configuration Tasks for PPPoE over Ethernet 6-2
Configuring a Virtual Template Interface 6-2
Creating an Ethernet Interface and Enabling PPPoE 6-3
Configuring PPPoE in a VPDN Group 6-3
Configuring PPPoE in a BBA Group 6-3
Configuration Example for PPPoE over Ethernet 6-5
Static MAC Address for PPPoE 6-5
Feature History for Static MAC Address for PPPoE 6-6
PPPoE over IEEE 802.1Q VLANs 6-7
Feature History for PPPoE over IEEE 802.1Q VLANs 6-7
Restrictions for PPPoE over IEEE 802.1Q VLANs 6-7
Configuration Tasks for PPPoE over IEEE 802.1Q VLANs 6-7
Configuring a Virtual Template Interface 6-8
Creating an Ethernet 802.1Q Encapsulated Subinterface and Enabling PPPoE 6-8
Configuring PPPoE in a VPDN Group 6-8
Configuring PPPoE in a BBA Group 6-9
Configuration Examples for PPPoE over IEEE 802.1Q VLANs 6-10
Verifying PPPoE over Ethernet and IEEE 802.1Q VLAN 6-11
Clearing PPPoE Sessions 6-12
TCP MSS Adjust 6-12

Contents
x
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Feature History for TCP MSS Adjust 6-12
Information about TCP MSS Adjust 6-12
Restrictions for TCP MSS Adjust 6-13
Configuration Task for TCP MSS Adjust 6-13
TCP MSS Adjustment Configuration: Examples 6-14
VLAN Range 6-15
Feature History for VLAN Range 6-15
Restrictions for VLAN Range 6-16
Configuration Task for VLAN Range 6-16
Configuring a Range of VLAN Subinterfaces 6-16
Configuration Examples for VLAN Range 6-17
Verifying the Configuration of a Range of Subinterfaces 6-18
CHAPTER 7Configuring IP Unnumbered on IEEE 802.1Q VLANs 7-1
Feature History for IP Unnumbered on VLANs 7-2
Benefits for IP Unnumbered on VLANs 7-2
Restrictions for IP Unnumbered on VLANs 7-3
Configuration Tasks for IP Unnumbered on VLANs 7-3
Configuring IP Unnumbered for an Ethernet VLAN Subinterface 7-3
Configuring IP Unnumbered for a Range of Ethernet VLAN Subinterfaces 7-4
Configuration Examples for IP Unnumbered on VLANs 7-4
Monitoring and Maintaining IP Unnumbered Ethernet VLAN Subinterfaces 7-5
CHAPTER 8Configuring ATM Permanent Virtual Circuit Autoprovisioning 8-1
ATM PVC Autoprovisioning 8-1
Local Template-Based ATM PVC Provisioning 8-2
Feature History for Local Template-Based ATM PVC Provisioning 8-2
ATM Interface Oversubscription 8-2
VC Class 8-3
ATM VC Scaling and VC Assignment 8-4
When SAR the Page Limit is Reached 8-5
OC-12 ATM Line Card and VC Scaling 8-5
Feature History for ATM PVC Autoprovisioning 8-5
Restrictions for ATM PVC Autoprovisioning 8-5
Configuration Tasks for ATM PVC Autoprovisioning 8-6
Creating an On-Demand PVC Using a VC Class 8-6
Creating an On-Demand PVC Directly 8-8
Creating an On-Demand PVC With Infinite Range 8-11
Monitoring and Maintaining ATM PVC Autoprovisioning 8-12