Cisco ASR 5000 Series Instruction Manual

ASR 5500 System Administration Guide, StarOS Release 21.4
First Published: 2017-11-22
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2017 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface About this Guide xxix
Conventions Used xxix
Related Documentation xxx
MIOs and DPCs xxx
Contacting Customer Support xxxi
CHAPTER 1 System Operation and Configuration 1
System Management Overview 1
Terminology 3
Contexts 3
Ports 3
Logical Interfaces 4
Management Interface 4
Bindings 4
Services 4
AAA Servers 5
Subscribers 5
Trusted Builds 6
How the System Selects Contexts 7
Context Selection for Context-level Administrative User Sessions 7
Context Selection for Subscriber Sessions 10
Understanding the ASR 5500 Boot Process 10
Understanding Configuration Files 11
IP Address Notation 13
IPv4 Dotted-Decimal Notation 13
IPv6 Colon-Separated-Hexadecimal Notation 13
CIDR Notation 13
ASR 5500 System Administration Guide, StarOS Release 21.4
iii

Alphanumeric Strings 14
Character Set 14
Quoted Strings 16
CHAPTER 2 Getting Started 17
ASR 5500 Configuration 17
Using the ASR 5500 Quick Setup Wizard 17
The Quick Setup Wizard 18
Using the CLI for Initial Configuration 24
Configuring System Administrative Users 26
Limiting the Number of Concurrent CLI Sessions 26
Automatic Logout of CLI Sessions 26
Configuring the System for Remote Access 27
Configuring SSH Options 29
SSH Host Keys 30
Setting SSH Key Size 30
Configuring SSH Key Generation Wait Time 30
Specifying SSH Encryption Ciphers 31
Generating SSH Keys 32
Setting SSH Key Pair 32
Authorized SSH User Access 32
Authorizing SSH User Access 33
SSH User Login Restrictions 33
Creating an Allowed Users List 33
SSH User Login Authentication 34
Secure Session Logout 35
Changing Default sshd Secure Session Logout Parameters 35
SSH Client Login to External Servers 36
Setting SSH Client Ciphers 36
Setting Preferred Authentication Methods 37
Generating SSH Client Key Pair 38
Pushing an SSH Client Public Key to an External Server 38
Enabling NETCONF 39
Configuring the Management Interface with a Second IP Address 39
ASR 5500 System Administration Guide, StarOS Release 21.4
iv
Contents

CHAPTER 3 System Settings 41
Configuring a Second Management Interface 42
Verifying and Saving Your Interface and Port Configuration 42
Configuring System Timing 43
Setting the System Clock and Time Zone 43
Verifying and Saving Your Clock and Time Zone Configuration 44
Configuring Network Time Protocol Support 44
Configuring NTP Servers with Local Sources 45
Using a Load Balancer 45
Verifying the NTP Configuration 46
Configuring SF Boot Configuration Pause 47
Enabling CLI Timestamping 47
Configuring CLI Confirmation Prompts 48
Enabling Automatic Confirmation 48
Requiring Confirmation for autoconfirm and configure Commands 48
Requiring Confirmation for Specific Exec Mode Commands 49
Configuring System Administrative Users 50
User Name Character Restrictions 50
Configuring Context-level Administrative Users 51
Configuring Context-level Security Administrators 51
Configuring Context-level Administrators 52
Configuring Context-level Operators 52
Configuring Context-level Inspectors 52
Configuring LI Administrators 53
Segregating System and LI Configurations 53
Verifying Context-level Administrative User Configuration 54
Configuring Local-User Administrative Users 55
Verifying Local-User Configuration 55
Updating Local-User Database 56
Updating and Downgrading the local-user Database 56
Provisioning Lawful Intercept 57
Restricting User Access to a Specified Root Directory 58
Configuring an SFTP root Directory 59
Associating an SFTP root Directory with a Local User 59
ASR 5500 System Administration Guide, StarOS Release 21.4
v
Contents

Associating an SFTP root Directory with an Administrator 59
Associating an SFTP root Directory with a Config Administrator 59
Configuring TACACS+ for System Administrative Users 60
Operation 60
User Account Requirements 61
TACACS+ User Account Requirements 61
StarOS User Account Requirements 61
Configuring TACACS+ AAA Services 62
Configuring TACACS+ for Non-local VPN Authentication 63
Verifying the TACACS+ Configuration 63
Separating Authentication Methods 64
Disable TACACS+ Authentication for Console 64
Disable AAA-based Authentication for Console 64
Disable TACACS+ Authentication at the Context Level 65
Limit local-user Login on Console/vty Lines 65
Limit Console Access for AAA-based Users 66
Verify Configuration Changes 66
Configuring a Chassis Key 66
Overview 66
Configuring a New Chassis Key Value 67
CLI Commands 67
Quick Setup Wizard 68
Configuring MIO/UMIO/MIO2 Port Redundancy 68
Configuring MIO/UMIO/MIO2 Port Redundancy Auto-Recovery 71
Verifying Port Redundancy Auto-Recovery 72
Configuring Data Processing Card Availability 72
Verifying Card Configurations 73
Enabling Automatic Reset of FSC Fabric 73
Configuring ASR 5500 Link Aggregation 73
LAG and Master Port 74
LAG and Port Redundancy 74
LAG and Multiple Switches 74
Multiple Switches with L2 Redundancy 75
Port States for Auto-Switch 75
Hold Time 75
ASR 5500 System Administration Guide, StarOS Release 21.4
vi
Contents

Preferred Slot 76
Auto-Switch Criteria 76
Link Aggregation Control 76
Minimum Links 77
Redundancy Options 78
Horizontal Link Aggregation with Two Ethernet Switches 78
Non-Redundant (Active-Active) LAG 78
Faster Data Plane Convergence 79
Link Aggregation Status 80
Configuring a Demux Card 80
Overview 80
MIO Demux Restrictions 81
Configuration 82
CHAPTER 4 Config Mode Lock Mechanisms 83
Overview of Config Mode Locking 83
Requesting an Exclusive-Lock 84
Effect of Config Lock on URL Scripts 85
Saving a Configuration File 86
Reload and Shutdown Commands 86
show administrators Command 87
CHAPTER 5 Management Settings 89
ORBEM 89
Configuring ORBEM Client and Port Parameters 90
Configuring IIOP Transport Parameters 90
Verifying ORBEM Parameters 91
SNMP MIB Browser 91
SNMP Support 94
Configuring SNMP and Alarm Server Parameters 94
Verifying SNMP Parameters 95
Controlling SNMP Trap Generation 96
CHAPTER 6 Verifying and Saving Your Configuration 97
Verifying the Configuration 97
ASR 5500 System Administration Guide, StarOS Release 21.4
vii
Contents

Feature Configuration 97
Service Configuration 98
Context Configuration 98
System Configuration 98
Finding Configuration Errors 98
Synchronizing File Systems 99
Saving the Configuration 99
CHAPTER 7 System Interfaces and Ports 101
Contexts 101
Creating Contexts 101
Viewing and Verifying Contexts 102
Ethernet Interfaces and Ports 102
Creating an Interface 103
Configuring a Port and Binding It to an Interface 103
Configuring a Static Route for an Interface 103
Viewing and Verifying Port Configuration 104
VLANs 105
Hypervisors 105
VLANs and Management Ports 105
CHAPTER 8 System Security 107
Per-Chassis Key Identifier 107
MIO Synchronization 108
Protection of Passwords 108
Secure Password Encryption 109
Support for Non-Current Encryptions and Decryptions 109
Support for ICSR Configurations 110
Encrypted SNMP Community Strings 110
Lawful Intercept Restrictions 110
LI Server Addresses 110
Modifying Intercepts 111
Adding, Modifying and Removing Users 111
Notification of Users Being Added or Deleted 111
Notification of Changes in Privilege Levels 111
ASR 5500 System Administration Guide, StarOS Release 21.4
viii
Contents

User Access to Operating System Shell 112
Test-Commands 112
Enabling cli test-commands Mode 112
Enabling Password for Access to CLI-test commands 112
Exec Mode cli test-commands 113
Configuration Mode cli test-commands 113
CHAPTER 9 Secure System Configuration File 115
Feature Summary and Revision History 115
Feature Description 116
How System Configuration Files are Secured 116
Create a Digital Signature 116
Validate the Digital Signature 117
Configuring Signature Verification 117
Import RSA Public Key for Verification 117
Enable or Disable Signature Verification 118
CHAPTER 10 Software Management Operations 119
Understanding the Local File System 119
File Types Used by the Local File System 119
Understanding the boot.sys File 120
Maintaining the Local File System 120
File System Management Commands 120
Synchronizing the File System 121
Creating Directories 121
Renaming Files and Directories 121
Copying Files 122
Deleting Files 122
Removing Directories 122
Formatting Local Devices 122
Applying Pre-existing CLI Configuration Files 123
Viewing Files on the Local File System 123
Viewing the Contents of a Local Device 123
Viewing CLI Configuration and boot.sys Files 124
Validating an Operating System File 124
ASR 5500 System Administration Guide, StarOS Release 21.4
ix
Contents

Configuring the Boot Stack 125
System Boot Methods 125
Viewing the Current Boot Stack 125
Adding a New Boot Stack Entry 127
Deleting a Boot Stack Entry 127
Network Booting Configuration Requirements 127
Configuring the Boot Interface 127
Configuring the Boot Network 128
Configuring Boot Network Delay Time 129
Configuring a Boot Nameserver 129
Upgrading the Operating System Software 129
Identifying OS Release Version and Build Number 129
Verify Free Space on the /flash Device 130
Download the Software Image from the Support Site 130
Transfer StarOS Image to /flash 131
Saving a Copy of the Current Configuration File 131
Downgrading from Release 15.0 to 14.0 131
Downgrading from Release 20.0 132
Off-line Software Upgrade 132
Configure a Newcall Policy 132
Configure a Message of the Day Banner 133
Back up the Current CLI Configuration File 133
Create a New Boot Stack Entry 133
Synchronize File Systems 134
Save the Running Configuration 134
Reboot the System 134
Verify the Running Software Version 135
Restoring the Previous Software Image 135
Upgrading ICSR Chassis 135
Performing Dynamic Software Updates 135
Managing License Keys 135
New System License Keys 136
Session Use and Feature Use Licenses 136
Installing New License Keys 136
Cutting and Pasting the Key 136
ASR 5500 System Administration Guide, StarOS Release 21.4
x
Contents

Adding License Keys to Configuration Files 137
License Expiration Behavior 138
Requesting License Keys 138
Viewing License Information 138
Deleting a License Key 138
Management Card Replacement and License Keys 139
Managing Local-User Administrative Accounts 139
Configuring Local-User Password Properties 139
Configuring Local-User Account Management Properties 139
Local-User Account Lockouts 139
Local-User Account Suspensions 140
Changing Local-User Passwords 140
CHAPTER 11 Smart Licensing 141
Feature Summary and Revision History 141
Smart Software Licensing 142
Cisco Smart Software Manager 143
Smart Accounts/Virtual Accounts 143
Request a Cisco Smart Account 143
Software Tags and Entitlement Tags 144
Configuring Smart Licensing 145
Monitoring and Troubleshooting Smart Licensing 146
Smart Licensing Bulk Statistics 146
CHAPTER 12 Monitoring the System 149
SNMP Notifications 149
Monitoring System Status and Performance 149
Monitoring ASR 5500 Hardware Status 151
Clearing Statistics and Counters 153
CHAPTER 13 Bulk Statistics 155
Feature Summary and Revision History 155
Configuring Communication with the Collection Server 156
Configuring Standard Settings 156
Configuring Optional Settings 157
ASR 5500 System Administration Guide, StarOS Release 21.4
xi
Contents

Configuring Bulk Statistic Schemas 157
Configuring a Separate Bulkstats Config File 158
Using show bulkstats Commands 158
Verifying Your Configuration 159
Saving Your Configuration 160
Viewing Collected Bulk Statistics Data 160
Collecting Bulk Statistics Samples in SSD 160
Manually Gathering and Transferring Bulk Statistics 160
Clearing Bulk Statistics Counters and Information 161
Bulkstats Schema Nomenclature 161
Statistic Types 161
Data Types 162
Key Variables 162
Bulk Statistics Event Log Messages 164
CHAPTER 14 System Logs 165
Feature Summary and Revision History 165
System Log Types 166
Configuring Event Logging Parameters 167
Configuring Event Log Filters 168
Exec Mode Filtering 168
Global Configuration Mode Filtering 170
Configuring syslog Servers 171
Configuring Active Logs 171
Specifying Facilities 172
Configuring Trace Logging 181
Configuring Monitor Logs 181
Enabling Monitor Logs 181
Disabling Monitor Logs 181
Viewing Logging Configuration and Statistics 182
Viewing Event Logs Using the CLI 182
Configuring and Viewing Crash Logs 183
Crash Logging Architecture 183
Configuring Software Crash Log Destinations 184
Viewing Abridged Crash Log Information Using the CLI 185
ASR 5500 System Administration Guide, StarOS Release 21.4
xii
Contents

Reducing Excessive Event Logging 186
Configuring Log Source Thresholds 187
Checkpointing Logs 187
Saving Log Files 188
Event ID Overview 188
Event Severities 197
Understanding Event ID Information in Logged Output 197
CHAPTER 15 Troubleshooting 199
Detecting Faulty Hardware 199
Licensing Issues 200
Using the CLI to View Status LEDs 200
Checking the LEDs on the PFU 200
Checking the LEDs on the MIO Card 202
MIO Run/Fail LED States 202
MIO Active LED States 203
MIO Redundancy LED States 204
MIO Master LED States 204
MIO Busy LED States 205
MIO –Interface Link LED States 205
MIO –Interface Activity LED States 206
Checking the LEDs on the DPC 206
DPC Run/Fail LED States 207
DPC Active LED States 208
DPC Redundancy LED States 209
Checking the LEDs on the FSC 209
FSC Run/Fail LED States 210
FSC Active LED States 211
FSC Redundancy LED States 211
FSC Drive n Activity LED States 212
Checking the LEDs on the SSC 213
SSC Run/Fail LED States 213
SSC Active LED States 214
SSC Redundancy LED States 215
SSC System Status LED States 215
ASR 5500 System Administration Guide, StarOS Release 21.4
xiii
Contents

SSC System Service LED States 216
Testing System Alarm Outputs 216
Taking Corrective Action 216
Switching MIOs 217
Busying Out a DPC 217
Migrating a DPC 218
Halting Cards 218
Initiate a Card Halt 219
Restore a Previously Halted Card 219
Verifying Network Connectivity 220
Using the ping or ping6 Command 220
Syntax 220
Troubleshooting 220
Using the traceroute or traceroute6 Command 221
traceroute –IPv4 221
traceroute6 –IPv6 221
Viewing IP Routes 222
Viewing the Address Resolution Protocol Table 222
Using the System Diagnostic Utilities 223
Using the Monitor Utility 223
Using the Protocol Monitor 223
Using the Protocol Monitor for a Specific Subscriber 224
Generating an SSD 226
Configuring and Using the Support Data Collector 226
CHAPTER 16 Packet Capture (PCAP) Trace 229
Feature Information 229
Feature Description 230
Configuring PCAP Trace 230
Enabling Multiple Instances of CDRMOD 230
Configuring the Hexdump Module 231
Configuring the Hexdump File Parameters 233
Enabling or Disabling Hexdump 236
Enabling PCAP Trace for MME 236
Monitoring and Troubleshooting PCAP Trace 237
ASR 5500 System Administration Guide, StarOS Release 21.4
xiv
Contents

Show Command(s) and/or Outputs 237
show cdr statistics 237
show { hexdump-module | cdr } file-space-usage 238
show hexdump-module statistics 239
CHAPTER 17 System Recovery 243
Prerequisites 243
Console Access 243
Boot Image 243
Accessing the boot CLI 244
Initiate a Reboot 244
Interrupt the Boot Sequence 244
Enter CLI Mode 245
boot Command Syntax 245
Booting from a Selected Image 245
Boot Using No Configuration FIle 245
Boot Using A Specified Configuration File 246
CHAPTER 18 Access Control Lists 247
Overview 247
Understanding ACLs 248
Rule(s) 248
Actions 248
Criteria 248
Rule Order 250
Configuring ACLs on the System 250
Creating ACLs 250
Configuring Action and Criteria for Subscriber Traffic 251
Configuring an Undefined ACL 251
Verifying the ACL Configuration 252
Applying IP ACLs 252
Applying the ACL to an Interface 254
Applying an ACL to an Individual Interface 254
Verifying the ACL Configuration on an Interface 255
Applying the ACL to a Context 255
ASR 5500 System Administration Guide, StarOS Release 21.4
xv
Contents

Applying an ACL to All Traffic Within a Context 256
Verifying the ACL Configuration in a Context 256
Applying an ACL to a RADIUS-based Subscriber 257
Applying an ACL to an Individual Subscriber 258
Verifying the ACL Configuration to an Individual Subscriber 258
Applying an ACL to the Subscriber Named default 259
Applying an ACL to the Subscriber Named default 259
Verifying the ACL Configuration to the Subscriber Named default 260
Applying an ACL to Service-specified Default Subscriber 260
Applying an ACL to Service-specified Default Subscriber 261
Verifying the ACL Configuration to Service-specified Default Subscriber 261
Applying a Single ACL to Multiple Subscribers 262
Applying an ACL to Multiple Subscriber via APNs 263
Applying an ACL to Multiple Subscriber via APNs 263
Verifying the ACL Configuration to APNs 264
CHAPTER 19 Congestion Control 265
Overview 265
Configuring Congestion Control 266
Configuring the Congestion Control Threshold 266
Configuring Service Congestion Policies 267
Configuring Overload Reporting on the MME 267
Enabling Congestion Control Redirect Overload Policy 268
Verify the Service Overload Policies 268
Verify the Congestion Control Configuration 268
Verify MME Congestion Action Profiles 268
Disconnecting Subscribers Based on Call or Inactivity Time 268
CHAPTER 20 Routing 271
Routing Policies 271
Creating IP Prefix Lists 272
Creating Route Access Lists 272
Creating AS Path Access Lists 272
Creating Route Maps 273
Sample Configuration 273
ASR 5500 System Administration Guide, StarOS Release 21.4
xvi
Contents

Static Routing 273
Adding Static Routes to a Context 274
Deleting Static Routes From a Context 274
OSPF Routing 274
OSPF Version 2 Overview 275
Basic OSPFv2 Configuration 276
Enabling OSPF Routing For a Specific Context 276
Enabling OSPF Over a Specific Interface 276
Redistributing Routes Into OSPF (Optional) 276
Confirming OSPF Configuration Parameters 277
OSPFv3 Routing 277
OSPFv3 Overview 277
Basic OSPFv3 Configuration 277
Enabling OSPFv3 Routing For a Specific Context 277
Enabling OSPFv6 Over a Specific Interface 278
Redistributing Routes Into OSPFv3 (Optional) 278
Confirming OSPFv3 Configuration Parameters 278
Equal Cost Multiple Path (ECMP) 278
BGP-4 Routing 279
Overview of BGP Support 279
Configuring BGP 280
Redistributing Routes Into BGP (Optional) 280
BGP Communities and Extended Communities 281
BGP Communities 281
Configuring a BGP Community 281
Setting the Community Attribute 282
Filtering via a BGP Community 282
BGP Extended Communities 282
Configuring a BGP Extended Community (Route Target) 282
Setting the Extended Community Attribute 283
Filtering via a BGP Extended Community 283
BGP Local Preference 283
ICSR and SRP Groups 283
Advertising BGP Routes from a Standby ICSR Chassis 283
Configurable BGP Route Advertisement Interval for ICSR 284
ASR 5500 System Administration Guide, StarOS Release 21.4
xvii
Contents

BGP CLI Configuration Commands 284
Confirming BGP Configuration Parameters 286
Bidirectional Forwarding Detection 286
Overview of BFD Support 287
Configuring BFD 287
Configuring a BFD Context 288
Configuring IPv4 BFD for Static Routes 288
Configuring IPv6 BFD for Static Routes 288
Configuring BFD for Single Hop 289
Configuring Multihop BFD 289
Scaling of BFD 290
Associating BGP Neighbors with the Context 290
Associating OSPF Neighbors with the Context 290
Associating BFD Neighbor Groups with the BFD Protocol 290
Enabling BFD on OSPF Interfaces 291
All OSPF Interfaces 291
Specific OSPF Interface 291
Monitoring BFD Connection for ICSR 291
Saving the Configuration 291
Chassis-to-Chassis BFD Monitoring for ICSR 291
Enable Primary Chassis BFD Monitoring 292
Set BFD to Ignore ICSR Dead Interval 292
Configure ICSR Switchover Guard Timer 292
Enable BFD Multihop Fall-over 293
ip route Command 293
ip routev6 Command 294
Adjust BFD Interval 294
Enable Advertising BGP Routes from Standby ICSR Chassis 294
Saving the Configuration 294
BFD Support for Link Aggregation Member Links 294
Overview 295
Configuring Support for BFD Linkagg Member-links 295
Saving the Configuration 296
Viewing Routing Information 296
ASR 5500 System Administration Guide, StarOS Release 21.4
xviii
Contents

CHAPTER 21 VLANs 299
Overview 299
Overlapping IP Address Pool Support –GGSN 300
RADIUS VLAN Support –Enhanced Charging Services 300
APN Support –PDN Gateway (P-GW) 301
Creating VLAN Tags 301
Verifying the Port Configuration 301
Configuring Subscriber VLAN Associations 302
RADIUS Attributes Used 302
Configuring Local Subscriber Profiles 302
Verify the Subscriber Profile Configuration 303
VLAN-Related CLI Commands 303
CHAPTER 22 BGP MPLS VPNs 307
Introduction 307
MPLS-CE Connected to PE 308
ASR 5500 as a PE 309
Overview 309
Sample Configuration 309
IPv6 Support for BGP MPLS VPNs 311
Overview 311
Sample Configuration 312
VPN-Related CLI Commands 314
CHAPTER 23 Content Service Steering 319
Overview 319
Configuring Internal Content Service Steering 320
Defining IP Access Lists for Internal CSS 320
Applying an ACL to an Individual Subscriber (Optional) 321
Applying an ACL to Multiple Subscribers (Optional) 321
Applying an ACL to the Subscriber Named default (Optional) 321
Applying an ACL to Service-specified Default Subscribers (Optional) 321
Applying an ACL to Multiple Subscribers via APNs (Optional) 321
ASR 5500 System Administration Guide, StarOS Release 21.4
xix
Contents

CHAPTER 24 Session Recovery 323
How Session Recovery Works 323
Additional ASR 5500 Hardware Requirements 326
Configuring the System to Support Session Recovery 326
Enabling Session Recovery 327
Enabling Session Recovery on an Out-of-Service System 327
Enabling Session Recovery on an In-Service System 327
Disabling the Session Recovery Feature 328
Viewing Session Recovery Status 328
Viewing Recovered Session Information 329
Recovery Control Task Statistics 330
show rct stats Command 331
Sample Output for show rct stats verbose 331
CHAPTER 25 Interchassis Session Recovery 333
Overview 333
Interchassis Communication 335
Checkpoint Messages 335
SRP CLI Commands 335
Exec Mode CLI Commands 335
show Commands 336
AAA Monitor 337
BGP Interaction 337
Requirements 337
ICSR Operation 339
Chassis Initialization 342
Chassis Operation 342
Chassis Communication 342
Chassis Switchover 342
Configuring ICSR 343
Configuring the Service Redundancy Protocol (SRP) Context 344
Creating and Binding the SRP Context 344
Configuring SRP Context Parameters 345
Basic Parameters 345
ASR 5500 System Administration Guide, StarOS Release 21.4
xx
Contents