Cisco ASR 9000 Series Instruction Manual

L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000
Series Routers, IOS XR Release 6.3.x
First Published: 2017-09-01
Last Modified: 2018-03-01
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com
go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
other company. (1721R)
©2017–2018 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface xxv
PREFACE
Changes to This Document xxv
Obtaining Documentation and Submitting a Service Request xxv
New and Changed VPN Features 1
CHAPTER 1
New and Changed VPN Features 1
The Carrier Ethernet Model 5
CHAPTER 2
Prerequisites for Configuring Layer 2 Ethernet Interfaces 5
Layer 2 Theory and Standards Adherence 6
Ethernet Technology Overview 6
Carrier Ethernet Services 6
Ethernet Wire Service 7
Ethernet Virtual Private Line 8
Ethernet LAN Service 8
Ethernet Flow Point 9
Ethernet Virtual Circuit 9
Ethernet OAM Protocols 9
Layer 2 VPN on Ethernet Interfaces 9
Gigabit Ethernet Protocol Standards Overview 10
IEEE 802.3 Physical Ethernet Infrastructure 10
IEEE 802.3ab 1000BASE-T Gigabit Ethernet 10
IEEE 802.3z 1000 Mbps Gigabit Ethernet 10
IEEE 802.3ae 10 Gbps Ethernet 11
General Ethernet Standards 11
MAC Address 11
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
iii

Ethernet MTU 11
Flow Control on Ethernet Interfaces 12
VRRP 12
HSRP 12
Link Autonegotiation on Ethernet Interfaces 13
What is an Ethernet Flow Point? 13
Improving the Scalability of EFPs on Bundle Interfaces 14
EFP CLI Overview 14
Egress EFP Filtering 15
Identifying Frames of an EFP 15
Applying Features 17
Defining Data-Forwarding Behavior 17
802.1Q VLAN 18
802.1Q Tagged Frames 18
Subinterfaces 18
Subinterface MTU 19
VLAN Subinterfaces on Ethernet Bundles 19
Layer 2 VPN on VLANs 19
How to Configure Layer 2 Features on Ethernet Interfaces 20
Default Configuration Values for Gigabit Ethernet and 10-Gigabit Ethernet 20
Configuring Ethernet Interfaces 21
Configuring a 10-Gigabit Ethernet Interface 21
Configuring a Gigabit Ethernet Interface 23
What to Do Next 25
Configuring an Attachment Circuit on an Ethernet Port 25
Configuring Egress EFP Filtering 28
Configuring 802.1Q VLAN Interfaces 30
Configuring 802.1Q VLAN Subinterfaces 30
Configuring Native VLAN 32
Removing an 802.1Q VLAN Subinterface 33
Configuration Examples 34
Configuring an Ethernet Interface: Example 34
Configuring a L2VPN AC: Example 35
Configuring VPWS with Link Bundles: Example 36
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
iv
Contents

Physical Interfaces (Port mode) 36
Sub Interfaces (EFP mode) 36
Configuring Ethernet Bundle with L2 and L3 Services: Example 37
Configuring VLAN Subinterfaces: Example 37
Where to Go Next 38
Ethernet Features 39
CHAPTER 3
Prerequisites for Implementing Ethernet Features 39
Information About Implementing Ethernet Features 39
Policy Based Forwarding 39
Layer 2 Protocol Tunneling 40
L2PT Features 40
L2PT in the Forward Mode 40
L2PT in the Reverse Mode with Protocol Frame Tagging 42
L2PT Configuration Notes 45
How to Implement Ethernet Features 46
Configuring Policy Based Forwarding 46
Enabling Policy Based Forwarding 46
Configuring Source Bypass Filter 48
Configuration Examples 49
Configuring Policy Based Forwarding: Example 49
Configuring Layer 2 Protocol Tunneling: Example 50
Configuring L2PT in forward mode 50
Configuring L2PT in reverse mode 51
Configuring Link Bundles 53
CHAPTER 4
Feature History for Configuring Link Bundles 53
Prerequisites for Configuring Link Bundles 53
Information About Configuring Link Bundles 54
Link Bundling Overview 54
Characteristics of Link Bundles 55
IEEE 802.3ad Standard 56
Non Revertive Behavior for LACP Bundle Interface 56
QoS and Link Bundling 56
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
v
Contents

VLANs on an Ethernet Link Bundle 57
Link Bundle Configuration Overview 57
Nonstop Forwarding During Card Failover 58
Link Failover 58
Bundle Interfaces: Redundancy, Load Sharing, Aggregation 58
How to Configure Link Bundling 58
Configuring Ethernet Link Bundles 58
Configuring VLAN Bundles 62
Configuration Examples for Link Bundles 67
EtherChannel Bundle running LACP: Example 67
Creating VLANs on a Ethernet Bundle: Example 68
ASR 9000 Link Bundles connected to a Cisco 7600 EtherChannel: Example 68
Implementing Point to Point Layer 2 Services 73
CHAPTER 5
Prerequisites for Implementing Point to Point Layer 2 Services 75
Information About Implementing Point to Point Layer 2 Services 75
Layer 2 Virtual Private Network Overview 75
Layer 2 Local Switching Overview 75
ATMoMPLS with L2VPN Overview 76
Virtual Circuit Connection Verification on L2VPN 76
Ethernet over MPLS 76
Ethernet Port Mode 76
VLAN Mode 77
Inter-AS Mode 77
QinQ Mode 78
QinAny Mode 79
Quality of Service 79
High Availability 80
Preferred Tunnel Path 80
Multisegment Pseudowire 80
Pseudowire Redundancy 82
Pseudowire Load Balancing 82
Pseudowire Grouping 82
Ethernet Wire Service 83
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
vi
Contents

IGMP Snooping 83
IP Interworking 84
AToM iMSG 85
Any Transport over MPLS 86
Control Word Processing 87
High-level Data Link Control over MPLS 87
PPP over MPLS 87
Frame Relay over MPLS 87
MPLS Transport Profile 88
Circuit Emulation Over Packet Switched Network 88
L2VPN Nonstop Routing 90
L2TPv3 over IPv6 90
Overview 90
L2TPv3 over IPv4 91
Dynamic Single-Segment Pseudowire 92
Active and Passive Signaling 92
Functionality of Dynamic Single Segment Pseudowire 92
Prerequisites for Configuring L2VPN Single Segment Pseudowires 93
Restrictions for Configuring L2VPN Single Segment Pseudowires 93
Configuring L2VPN Single Segment Pseudowire 93
EVPN Virtual Private Wire Service (VPWS) 98
Information About EVPN-VPWS Single Homed 98
Prerequisites for EVPN-VPWS 99
Restrictions for EVPN-VPWS 99
How to Implement Point to Point Layer 2 Services 100
Configuring an Interface or Connection for Point to Point Layer 2 Services 100
Configuring Local Switching 101
Configuring Local Connection Redundancy 103
Configuring Static Point-to-Point Cross-Connects 105
Configuring Dynamic Point-to-Point Cross-Connects 107
Configuring Inter-AS 108
Configuring L2VPN Quality of Service 109
Restrictions 109
Configuring an L2VPN Quality of Service Policy in Port Mode 109
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
vii
Contents

Configuring an L2VPN Quality of Service Policy in VLAN Mode 110
Configuring Multisegment Pseudowire 111
Provisioning a Multisegment Pseudowire Configuration 111
Provisioning a Global Multisegment Pseudowire Description 113
Provisioning a Cross-Connect Description 114
Provisioning Switching Point TLV Security 116
Enabling Multisegment Pseudowires 117
Configuring Pseudowire Redundancy 118
Configuring Point-to-Point Pseudowire Redundancy 118
Forcing a Manual Switchover to the Backup Pseudowire 121
Configuring a Backup Pseudowire 121
Configuring Point-to-Point Pseudowire Redundancy 122
Forcing a Manual Switchover to the Backup Pseudowire 125
Configuring Preferred Tunnel Path 125
Configuring PW Status OAM 126
Enabling Flow-based Load Balancing 127
Enabling Flow-based Load Balancing for a Pseudowire Class 129
Enabling Pseudowire Grouping 130
Setting Up Your Multicast Connections 131
Configuring AToM IP Interworking 133
Configuring PPP IP Interworking 134
Configuring IP Interworking between PPP and Ethernet 137
Configuring MLPPP IP Interworking 140
Configuring Circuit Emulation Over Packet Switched Network 143
Adding CEM attachment circuit to a Pseudowire 143
Associating a Pseudowire Class 144
Enabling Pseudowire Status 147
Configuring a Backup Pseudowire 147
Configuring L2VPN Nonstop Routing 149
Configure MPLS LDP Nonstop Routing 150
Configuring L2TPv3 over IPv6 Tunnels 151
Configuring Neighbor AFI for Pseudowire 151
Configuring L2TPv3 encapsulation and protocol 153
Configuring Source IPv6 address for L2TPv3 over IPv6 tunnel 154
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
viii
Contents

Configuring Local and Remote Sessions 156
Configuring Local And Remote Cookies 158
Enabling L2TP Static Submode 160
Enabling TOS Reflection in the L2TPv3 Header 161
Configuring TTL for L2TPv3 over IPv6 Tunnels 163
Configuring Traffic Mirroring over L2TPv3 over IPv6 Tunnels 164
Configuring L2TPv3 over IPv4 Tunnels 166
Configuring a Dynamic L2TPv3 Pseudowire 167
Configuring L2TPv3 Encapsulation and Protocol 168
Configuring L2TP Control-Channel Parameters 169
Configuring L2VPN Single Segment Pseudowire 172
Configuring L2VPN Global Parameters 172
Configuring L2VPN VPWS SS-PW 174
Configuring L2VPN MS-PW Address Family Under BGP 176
Verifying Single-Segment Pseudowires 177
Displaying Information about the L2VPN Single-Segment Pseudowires 177
How to Configure EPVN-VPWS 177
Configuring L2VPN EVPN Address Family Under BGP 177
Configuring EVPN-VPWS 178
Configuring an Access Pseudowire using EVPN-VPWS 180
Configuration Examples for Point to Point Layer 2 Services 181
L2VPN Interface Configuration: Example 182
Local Switching Configuration: Example 182
Local Connection Redundancy Configuration: Example 182
Point-to-Point Cross-connect Configuration: Examples 183
Inter-AS: Example 183
L2VPN Quality of Service: Example 185
Pseudowires: Examples 185
Configuring Dynamic Pseudowires at T-PE1 Node: Example 186
Configuring Dynamic Pseudowires at S-PE1 Node: Example 186
Configuring Dynamic Pseudowires at T-PE2 Node: Example 186
Configuring Dynamic Pseudowires and Preferred Paths at T-PE1 Node: Example 187
Configuring Dynamic Pseudowires and Preferred Paths at S-PE1 Node: Example 187
Configuring Dynamic Pseudowires and Preferred Paths at T-PE2 Node: Example 187
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
ix
Contents

Configuring Static Pseudowires at T-PE1 Node: Example 188
Configuring Static Pseudowires at S-PE1 Node: Example 188
Configuring Static Pseudowires at T-PE2 Node: Example 188
Preferred Path: Example 188
MPLS Transport Profile: Example 189
Configuring Preferred Tunnel Path: Example 189
Configuring PW Status OAM: Example 189
Viewing Pseudowire Status: Example 189
show l2vpn xconnect 189
show l2vpn xconnect detail 189
Configuring Any Transport over MPLS: Example 190
Configuring AToM IP Interworking: Example 191
Configuring PPP IP Interworking: Example 191
Configuring cHDLC IP Interworking: Example 191
Configuring MLPPP IP Interworking: Example 192
Configuring Circuit Emulation Over Packet Switched Network: Example 192
Configuring L2VPN Nonstop Routing: Example 193
Enabling Pseudowire Grouping: Example 194
Configuring L2TPv3 over IPv6 Tunnels: Example 194
Configuring Neighbor AFI for Pseudowire: Example 194
Configuring L2TPv3 encapsulation and protocol: Example 194
Configuring Source IPv6 address for L2TPv3 over IPv6 tunnel: Example 194
Configuring Local and Remote Sessions: Example 194
Configuring Local and Remote Cookies: Example 195
Enabling L2TP Static Submode: Example 195
Enabling TOS Reflection in the L2TPv3 Header: Example 196
Configuring TTL for L2TPv3 over IPv6 Tunnels: Example 196
Configuring Traffic Mirroring over L2TPv3 over IPv6 Tunnels: Example 196
Configuring L2TPv3 over IPv4 Tunnels: Example 197
Configuring a Dynamic L2TPv3 Pseudowire 197
Configuring L2TPv3 Encapsulation and Protocol: Example 198
Configuring L2TP Control-Channel Parameters: Example 199
Configuration Examples for EVPN-VPWS 199
Configuring EVPN-VPWS: Example 199
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
x
Contents

Configuring an Access PW using EVPN-VPWS: Example 199
Implementing Multipoint Layer 2 Services 201
CHAPTER 6
Prerequisites for Implementing Multipoint Layer 2 Services 203
Information About Implementing Multipoint Layer 2 Services 203
Multipoint Layer 2 Services Overview 204
Bridge Domain 204
Pseudowires 206
Virtual Forwarding Instance 206
VPLS for an MPLS-based Provider Core 207
VPLS Architecture 207
VPLS for Layer 2 Switching 208
VPLS Discovery and Signaling 208
BGP-based VPLS Autodiscovery 209
BGP Auto Discovery With BGP Signaling 209
BGP Auto Discovery With LDP Signaling 210
Service Path Preference for L2VPN 211
Understanding How Service Path Preference Works 211
L2VPN Route Policy 212
Interoperability Between Cisco IOS XR and Cisco IOS on VPLS LDP Signaling 212
MAC Address-related Parameters 213
MAC Address Flooding 213
MAC Address-based Forwarding 213
MAC Address Source-based Learning 213
MAC Address Aging 214
MAC Address Limit 214
MAC Address Withdrawal 214
MAC Address Security 215
MAC Address Move and Unicast Traffic Counters 215
LSP Ping over VPWS and VPLS 215
Split Horizon Groups 215
Layer 2 Security 216
Port Security 216
Dynamic Host Configuration Protocol Snooping 217
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xi
Contents

G.8032 Ethernet Ring Protection 217
Overview 217
Flow Aware Transport Pseudowire (FAT PW) 221
Pseudowire Headend 222
Benefits of PWHE 223
Restrictions 223
Generic Interface List 224
LFA over Pseudowire Headend 224
PW-HE Multicast 224
PW-HE over MPLS-TE Tunnels 224
L2VPN over GRE 224
L2VPN over GRE Restrictions 225
GRE Deployment Scenarios 225
GRE Tunnel as Preferred Path 227
Multipoint Layer 2 Services Label Switched Multicast 227
Ingress Replication and its Limitations 227
VPLS LSM as a Solution 227
VPLS LSM Limitations 228
How to Implement Multipoint Layer 2 Services 229
Configuring a Bridge Domain 229
Creating a Bridge Domain 229
Configuring a Pseudowire 230
Associating Members with a Bridge Domain 232
Configuring Bridge Domain Parameters 234
Disabling a Bridge Domain 236
Blocking Unknown Unicast Flooding 237
Changing the Flood Optimization Mode 238
Configuring Layer 2 Security 240
Enabling Layer 2 Security 240
Attaching a Dynamic Host Configuration Protocol Profile 241
Configuring a Layer 2 Virtual Forwarding Instance 242
Creating the Virtual Forwarding Instance 242
Associating Pseudowires with the Virtual Forwarding Instance 244
Associating a Virtual Forwarding Instance to a Bridge Domain 245
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xii
Contents

Attaching Pseudowire Classes to Pseudowires 247
Configuring Pseudowires Using Static Labels 249
Disabling a Virtual Forwarding Instance 251
Configuring the MAC Address-related Parameters 252
Configuring the MAC Address Source-based Learning 252
Enabling the MAC Address Withdrawal 254
Configuring the MAC Address Limit 256
Configuring the MAC Address Aging 258
Disabling MAC Flush at the Bridge Port Level 260
Configuring MAC Address Security 262
Configuring an Attachment Circuit to the AC Split Horizon Group 264
Adding an Access Pseudowire to the AC Split Horizon Group 265
Configuring VPLS with BGP Autodiscovery and Signaling 267
Configuring VPLS with BGP Autodiscovery and LDP Signaling 270
Configuring Service Path Preference 274
Setting a Forward Class in a Route Policy 274
Attaching a Route Policy at Table Policy Attach Point 274
Associating a TE Tunnel with Forward Class Index 275
Enabling Route Policy for L2VPN VPLS with BGP Autodiscovery 275
Enabling Route Policy for L2VPN VPWS with BGP Autodiscovery 277
Configuring G.8032 Ethernet Ring Protection 278
Configuring ERP Profile 279
Configuring CFM MEP 280
Configuring an ERP Instance 280
Configuring ERP Parameters 283
Configuring TCN Propagation 285
Configuring Flow Aware Transport Pseudowire 286
Enabling Load Balancing with ECMP and FAT PW for VPWS 286
Enabling Load Balancing with ECMP and FAT PW for VPLS 289
Configuring Pseudowire Headend 292
PWHE Configuration Restrictions 292
Configuring Generic Interface List 293
Configuring PWHE Interfaces 294
Configuring PWHE Crossconnect 295
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xiii
Contents

Configuring the Source Address 297
Configuring PWHE Interface Parameters 298
Configuring PWHE Layer 2 Subinterfaces and Adding it to the Bridge-domain 301
Configuring PWHE Layer 3 Subinterfaces 304
Configuring L2VPN over GRE 306
Configuring a GRE Tunnel as Preferred Path for Pseudowire 312
Configuring VPLS LSM: Examples 313
Enabling P2MP PW with RSVP-TE on a VFI 313
Enabling BGP Autodiscover Signaling for P2MP PW on a VFI 315
Configuring VPN ID 317
Configuring IGMP Snooping 319
Configuration Examples for Multipoint Layer 2 Services 321
Multipoint Layer 2 Services Configuration for Provider Edge-to-Provider Edge: Example 321
Multipoint Layer 2 Services Configuration for Provider Edge-to-Customer Edge: Example 322
Displaying MAC Address Withdrawal Fields: Example 322
Split Horizon Group: Example 324
Blocking Unknown Unicast Flooding: Example 325
Disabling MAC Flush: Examples 326
Bridging on IOS XR Trunk Interfaces: Example 327
Bridging on Ethernet Flow Points: Example 331
Changing the Flood Optimization Mode 334
Configuring VPLS with BGP Autodiscovery and Signaling: Example 335
LDP and BGP Configuration 335
Minimum L2VPN Configuration for BGP Autodiscovery with BGP Signaling 336
VPLS with BGP Autodiscovery and BGP Signaling 336
Minimum Configuration for BGP Autodiscovery with LDP Signaling 338
VPLS with BGP Autodiscovery and LDP Signaling 338
VPLS with both BGP Autodiscovery and Manual Provisioning of VPLS Peers 340
Configuring Dynamic ARP Inspection: Example 340
Configuring IP Source Guard: Example 342
Configuring G.8032 Ethernet Ring Protection: Example 343
Configuring Interconnection Node: Example 344
Configuring the Node of an Open Ring: Example 345
Configuring Flow Aware Transport Pseudowire: Example 346
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xiv
Contents

Configuring Pseudowire Headend: Example 347
Configuring L2VPN over GRE: Example 350
Configuring a GRE Tunnel as Preferred Path for Pseudowire 350
Configuring VPLS LSM: Examples 352
Enabling P2MP PW with RSVP-TE on a VFI: Example 352
Enabling BGP Autodiscover Signaling for P2MP PW on a VFI: Example 352
Configuring VPN ID: Example 352
Configuring IGMP Snooping: Example 353
Implementing IEEE 802.1ah Provider Backbone Bridge 355
CHAPTER 7
Prerequisites for Implementing 802.1ah Provider Backbone Bridge 356
Information About Implementing 802.1ah Provider Backbone Bridge 356
Benefits of IEEE 802.1ah standard 356
IEEE 802.1ah Standard for Provider Backbone Bridging Overview 357
Backbone Edge Bridges 358
IB-BEB 359
Multiple I-SID Registration Protocol Lite 360
Provider Backbone Bridging Ethernet VPN 363
Ethernet VPN 363
PBB-EVPN Overview 364
MMRP for PBB VPLS Flood Optimization 366
Configuring PBB-VPLS Flood Optimization 367
Enabling PBB-VPLS Flood Optimization on PBB Core Bridge 367
Configuring Generic MRP Protocol Parameters 369
How to Implement 802.1ah Provider Backbone Bridge 370
Restrictions for Implementing 802.1ah Provider Backbone Bridge 370
Configuring Ethernet Flow Points on CNP and PNP Ports 371
Configuring PBB Edge Bridge Domain and Service Instance ID 372
Configuring the PBB Core Bridge Domain 374
Configuring Backbone VLAN Tag under the PBB Core Bridge Domain 375
Configuring Backbone Source MAC Address 377
Configuring Unknown Unicast Backbone MAC under PBB Edge Bridge Domain 378
Configuring Static MAC addresses under PBB Edge Bridge Domain 380
Configuring PBB VPLS 382
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xv
Contents

Configuring Access Pseudowire in I-Component 382
Configuring Core Pseudowire in B-Component 385
Configuring PBB-EVPN 386
Configuring PBB Core Bridge Domains 386
Configuring PBB Edge Bridge Domains 388
Configuring EVPN Ethernet Segment 388
Configuring BGP Route Target 391
Configuring Global EVPN Timers 393
Configuring EVPN Timers Per Ethernet Segment and CE flushing mechanism 394
Configuring Multichassis Link Aggregation 396
Configuring BGP Routing Process 396
Configuration Examples for Implementing 802.1ah Provider Backbone Bridge 398
Configuring Ethernet Flow Points: Example 398
Configuring PBB Edge Bridge Domain and Service Instance ID: Example 398
Configuring PBB Core Bridge Domain: Example 399
Configuring Backbone VLAN Tag: Example 399
Configuring Backbone Source MAC Address: Example 399
Configuring Static Mapping and Unknown Unicast MAC Address under the PBB Edge Bridge
Domain 399
Configuring PBB-VPLS: Example 400
Configuring MIRP Lite: Example 400
Configuring PBB-EVPN: Example 401
PBB-EVPN on Single Homed Device/Single Homed Network 401
PBB EVPN on Dual Homed Device/Multi Homed Device with Active/Active per Flow
load-balancing 402
PBB EVPN on Dual Homed Device/Multi Homed Device with Active/Active per Service
load-balancing and Dynamic Service Carving 404
PBB EVPN on Dual Homed Device/Multi Homed Device with Active/Active per Service
load-balancing and Manual Service Carving 406
PBB-EVPN Multi Homed Network 409
Implementing Multiple Spanning Tree Protocol 411
CHAPTER 8
Prerequisites for Implementing Multiple Spanning Tree Protocol 411
Information About Implementing Multiple Spanning Tree Protocol 412
Spanning Tree Protocol Overview 412
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xvi
Contents

STP Protocol Operation 412
Topology Changes 413
Variants of STP 413
Multiple Spanning Tree Protocol Overview 414
MSTP Regions 414
MSTP Port Fast 415
MSTP Root Guard 415
MSTP Topology Change Guard 416
MSTP Supported Features 416
BPDU Guard 417
Flush Containment 417
Bringup Delay 417
Restrictions for configuring MSTP 418
Access Gateway 418
Overview of Access Gateway 419
Topology Change Propagation 421
Preempt Delay 422
Supported Access Gateway Protocols 422
MSTAG Edge Mode 422
PVSTAG on Bundle Interfaces 424
Per-VLAN Rapid Spanning Tree 424
Multiple VLAN Registration Protocol 425
How to Implement Multiple Spanning Tree Protocol 425
Configuring MSTP 426
Enabling MSTP 426
Configuring MSTP parameters 426
Verifying MSTP 431
Configuring MSTAG or REPAG 432
Configuring an untagged subinterface 432
Enabling MSTAG 432
Configuring MSTAG parameters 432
Configuring MSTAG Topology Change Propagation 438
Verifying MSTAG 438
MSTAG Uplink Tracking 439
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xvii
Contents

Benefits 440
Prerequisites 440
Restrictions 440
Configure MSTAG Uplink Tracking 440
Configuring PVSTAG or PVRSTAG 442
Enabling PVSTAG 442
Configuring PVSTAG parameters 442
Configuring Subinterfaces 446
Verifying PVSTAG 447
Configuring PVRST 447
Configuring MVRP-lite 449
Enabling MVRP-lite 449
Configuring MVRP-lite parameters 449
Verifying MVRP-lite 451
Configuration Examples for Implementing MSTP 451
Configuring MSTP: Examples 451
Configuring MSTAG: Examples 455
Configuring PVSTAG: Examples 458
Configuring PVSTAG on a Cluster with a Satellite: Example 458
Configuring PVRST: Example 461
Configuring MVRP-Lite: Examples 461
Implementing of Layer 2 Access Lists 463
CHAPTER 9
Prerequisites for Implementing Layer 2 Access Lists 463
Information About Implementing Layer 2 Access Lists 464
Ethernet Services Access Lists Feature Highlights 464
Purpose of Ethernet Services Access Lists 464
How an Ethernet Services Access List Works 464
Ethernet Services Access List Process and Rules 464
Helpful Hints for Creating Ethernet Services Access Lists 465
Source and Destination Addresses 465
Ethernet Services Access List Entry Sequence Numbering 465
Sequence Numbering Behavior 465
How to Implement Layer 2 Access Lists 466
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xviii
Contents

Restrictions for Implementing Layer 2 Access Lists 466
Configuring Ethernet Services Access Lists 466
What to Do Next 467
Applying Ethernet Services Access Lists 467
Controlling Access to an Interface 468
Copying Ethernet Services Access Lists 469
Resequencing Access-List Entries 470
Configuration Examples for Implementing Layer 2 Access Lists 471
Resequencing Entries in an Access List: Example 471
Adding Entries with Sequence Numbers: Example 471
Implementing VXLAN 473
CHAPTER 10
Prerequisites for implementing VXLANs 473
Information about Implementing VXLAN 473
VXLAN 474
VXLAN Anycast Gateway 474
VXLAN Packet Format 475
VXLAN Tunnel Endpoint 475
Configuring a Layer 2 VXLAN gateway 476
Prerequisites 476
Restrictions 476
Creating and Configuring the Network Virtualization Endpoint (NVE) interface 477
Creating and configuring a layer 2 sub-interface 479
Associating VLAN and VXLAN with a bridge domain 479
Configuring VXLAN source UDP port 480
Configuring VXLAN destination UDP port 481
Configuration Example for Implementing Layer 2 VXLAN Gateway 481
EVPN Features 485
CHAPTER 11
EVPN Overview 485
EVPN Operation 486
EVPN Route Types 487
Configure EVPN L2 Bridging Service 488
EVPN Software MAC Learning 490
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xix
Contents

Software and Hardware Support 491
Configure EVPN Native with Software MAC Learning 491
Supported Modes for EVPN Native with Software MAC Learning 492
Single Home Device or Single Home Network 492
Configure EVPN in Single Home Device or Single Home Network 492
Dual Home Device—All-Active Load Balancing Mode 493
Configure EVPN Software MAC Learning in Dual Home Device—All-Active Mode 494
Dual Home Device—Single-Active Load Balancing 496
Configure EVPN in Dual Home Device—Single-Active Mode 496
Verify EVPN Native with Software MAC Learning 498
EVPN VXLAN Layer 2 Data Center Interconnect Gateway 500
All-Active Multi Homing with Anycast VTEP IP Address 500
All-Active Multi Homing with Unique VTEP IP Address 501
EVPN ESI Multipath for VxLAN - EVI Based Load balancing 501
EVPN ESI Multipath for VxLAN - Flow-based Load Balancing 502
Configure EVPN VXLAN Layer 2 Data Center Interconnect Gateway 503
Configure L2 EVPN Address Family under BGP Routing Process 503
Configure the Routing Sessions Between the DCI and ToR 504
Configure BGP session for remote DCI Connectivity 506
Configure Network Virtualization Endpoint (NVE) Interface 508
Configure a Bridge Domain 511
Configure BGP Route Targets Import/Export Rules 512
Configure Ethernet Segment Identifier 514
Configure ICCP Group 516
Enable Flow-based Load Balancing 517
Example: All-Active Multi Homing with Anycast VTEP IP Address Configuration 518
Example: All-Active Multi Homing with Unique VTEP IP Address Configuration 519
EVPN MPLS Seamless Integration with VPLS 520
Migrate VPLS Network to EVPN Network through Seamless Integration 520
Configure EVPN on the Existing VPLS Network 521
EVPN Single-Active Multi-Homing 532
Configure EVPN Single-Active Multi-Homing 533
Configuring EVPN Ethernet Segment 533
Configure EVPN Service Instance (EVI) Parameters 536
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
xx
Contents