Cisco ASR 920 series User manual

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
First Published: July 29, 2014
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

©2014 Cisco Systems, Inc. All rights reserved.

CONTENTS
CHAPTER 1 Trunk EFP Support 1
Finding Feature Information 1
Restrictions for Trunk EFP Support 1
Information About Trunk EFP Support 2
Benefits of Trunk EFP Support 2
Ethernet Flow Points 2
Trunk Ports 3
How to Enable Trunk EFP Support 3
Enabling Trunk EFP Support 3
Verifying the Trunk EFP Support Configuration 5
Configuration Examples for Trunk EFP Support 6
Example: Configuring Trunk EFP Support 6
Example: Verifying the Trunk EFP Support Configuration 7
Additional References 7
Feature Information for Trunk EFP Support 9
CHAPTER 2 Ethernet Virtual Connections Configuration 11
Finding Feature Information 12
Supported EVC Features 12
Restrictions for Ethernet Virtual Connections Configuration 13
Ethernet Virtual Connections 14
Service Instances and EFPs 14
Encapsulation 15
Ethertype 17
Bridge Domains 18
Split-Horizon 18
Rewrite Operations 19
Static MAC Addresses 19
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
iii

Layer 2 Protocol Features 20
Configuring EFPs 20
Default EVC Configuration 20
Configuration Guidelines 20
Creating Service Instances 21
Creating a Trunk EFP 22
Configuring Asymmetric EFPs 24
Configuration Examples 25
Example for Configuring a Service Instance 25
Example for Encapsulation Using a VLAN Range 25
Configuration Example for Larger String VLAN in Encapsulation 26
Example for Two Service Instances Joining the Same Bridge Domain 26
Example for Bridge Domains and VLAN Encapsulation 26
Example for Rewrite 27
Example for Split Horizon 27
Example for Hairpinning 27
Example for Egress Filtering 28
Configuring Examples for Asymmetric EFPs 28
Configuring Other Features on EFPs 29
EFPs and EtherChannels 29
Layer 2 Protocol Peering 30
Layer 2 Protocol Forwarding 30
Configuring IEEE 802.1Q Tunneling and Layer 2 Protocol Tunneling Using EFPs 30
802.1Q Tunneling (QinQ) 30
Method 1 31
Method 2 32
Example for VLAN Translation Configurations 32
Example for Ingress Mapping of C-CoS to S-CoS 33
Example for Ingress Mapping of C-CoS to C-CoS 33
Example for Egress Classification Based on CoS 34
Layer 2 Protocol Tunneling 34
EFPs and Ethernet over Multiprotocol Layer Switching (EoMPLS) 38
Bridge Domain Routing 38
EFPs and Trunk Port MAC Addresses 39
EFPs and MSTP 39
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
iv
Contents

L3 Unicast and Multicast Routing on a Bridge Domain with Multiple EFPs 40
Example for Configuring L3 Multicast Routing on a Bridge Domain 40
Cross-Connect on EFP Interfaces 40
Restrictions 41
Configuring Cross-Connect on an EFP Interface 41
MAC Address Forwarding, Learning and Aging on EFPs 42
Configuring a Static MAC Address 43
Limitations 43
Configuring a Static MAC Address 43
Configuring a Multicast Static MAC Address 45
Monitoring EVC 46
Additional References 49
Feature Information for Ethernet Virtual Connections Configuration 50
CHAPTER 3 EVC Local Connect 51
Finding Feature Information 51
Information About EVC Local Connect 52
Benefits of EVC Local Connect 52
Prerequisites for EVC Local Connect 52
Restrictions for EVC Local Connect 52
How to Configure EVC Local Connect 53
Configuring EVC Local Connect 53
Configuring EVC Local Connect as Interworking VLAN 53
Verifying EVC Local Connect Configuration 54
Verifying Traffic Statistics 54
Configuration Examples 55
Example: Configuration Example for EVC Local Connect 55
Example: Configuration Example for EVC Local Connect as Interworking VLAN 56
Use Cases or Deployment Scenarios 56
Additional References for EVC Local Connect 57
Feature Information for EVC Local Connect 58
CHAPTER 4 Using Ethernet Fault Detection 59
Information about Ethernet Fault Detection 59
Prerequisites for EFD 60
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
v
Contents

Limitations and Restrictions for EFD 60
Enabling Ethernet Fault Detection for a Service 61
Configuration Example for EFD 62
CHAPTER 5 Transparent CFM 65
Information About Transparent CFM 65
EFP (Q-in-Q interfaces with dot1q or dot1ad C-UNI) 65
Benefits of Transparent CFM 66
S-VLAN Component with Transparent CFM Support 66
C-VLAN Component with Transparent CFM Support on C-VLANs 66
Prerequisites for Transparent CFM 66
Restrictions for Transparent CFM 66
Configuring Transparent CFM 67
Configuring Transparent CFM on EFP 68
Configuration Examples for Transparent CFM 69
Example: Configuration of Transparent CFM on EFP 69
Example: Configuration of Transparent CFM 70
CHAPTER 6 VLAN Translation with QoS 71
Benefits of VLAN Translation 71
Scenarios showing VLAN Translation 72
Limitations for VLAN Translation with QoS 73
Configuring 1:1 VLAN Translation 74
Configuring 2:1 VLAN Translation 75
Configuring policy for ingress QoS 76
Configuration Example for 1:1 VLAN Translation 77
Configuration Example for 2:1 VLAN Translation 78
Configuration Example for policing ingress QoS 78
Configuration Verifications for VLAN Translation with QoS 78
Verifying the VLAN configuration 78
Verifying policy-map on ingress QoS 78
Verifying policy-map on egress QoS 79
Verifying the QoS Labels 79
Verifying Egress TCAM Details 80
Verifying TCAM Index Details 80
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
vi
Contents

CHAPTER 7 Configuring MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 81
Finding Feature Information 81
Prerequisites for MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 82
Restrictions for MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 82
Information About MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 82
Ethernet Virtual Circuits, Service Instances, and Bridge Domains 82
EVCs on Port Channels 83
MAC Security and MAC Addressing 83
MAC Address Permit List 83
MAC Address Deny List 84
MAC Address Limiting and Learning 84
Static and Dynamic MAC Addresses 85
Dynamic MAC Address Learning 85
MAC Address Limiting on Service Instances 85
MAC Address Limiting for Bridge Domains 85
Relationship Between the MAC Address Limit on a Bridge Domain and on a Service
Instance 85
MAC Move and MAC Locking 86
Violation Response Configuration 86
MAC Address Aging Configuration 87
Sticky MAC Address Configurations 88
Aging for Sticky Addresses 88
Transitions 88
MAC Security Enabled on a Service Instance 88
MAC Security Disabled on a Service Instance 89
Service Instance Moved to a New Bridge Domain 89
Service Instance Removed from a Bridge Domain 89
Service Instance Shut Down Due to Violation 89
Interface Service Instance Down Linecard OIR Removed 89
Interface Service Instance Re-activated Linecard OIR Inserted 89
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
vii
Contents

MAC Address Limit Decreased 89
Sticky Addresses Added or Removed on a Service Instance 90
How to Configure MAC Address Limiting on Service Instances Bridge Domains and EVC
Port Channels 90
Enabling MAC Security on a Service Instance 90
Enabling MAC Security on an EVC Port Channel 92
Configuring a MAC Address Permit List 93
Configuring a MAC Address Deny List 96
Configuring MAC Address Limiting on a Bridge Domain 98
Configuring MAC Address Limiting on a Service Instance 99
Configuring a MAC Address Violation 101
Configuring MAC Address Aging 103
Configuring a Sticky MAC Address 104
Displaying the MAC Security Status of a Specific Service Instance 106
Displaying the Service Instances with MAC Security Enabled 107
Displaying the Service Instances with MAC Security Enabled on a Specific Bridge
Domain 108
Showing the MAC Addresses of All Secured Service Instances 108
Showing the MAC Addresses of a Specific Service Instance 109
Showing the MAC Addresses of All Service Instances on a Specific Bridge Domain 110
Showing the MAC Security Statistics of a Specific Service Instance 110
Showing the MAC Security Statistics of All Service Instances on a Specific Bridge
Domain 111
Showing the Last Violation Recorded on Each Service Instance on a Specific Bridge
Domain 112
Clearing All Dynamically Learned MAC Addresses on a Service Instance 113
Clearing All Dynamically Learned MAC Addresses on a Bridge Domain 114
Configuration Examples for MAC Address Limiting on Service Instances and Bridge Domains
and EVC Port Channels 115
Example Enabling MAC Security on a Service Instance 115
Example Enabling MAC Security on an EVC Port Channel 115
Example Configuring a MAC Address Permit List 115
Example Configuring a MAC Address Deny List 116
Example Configuring MAC Address Limiting on a Bridge Domain 116
Example Configuring a MAC Address Limit on a Service Instance 116
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
viii
Contents

Example Configuring a MAC Address Violation Response 116
Example Configuring MAC Address Aging 117
Example Configuring a Sticky MAC Address 117
Example Displaying the MAC Addresses on a Specific Secure Service Instance 117
Example Displaying the Last Violation on a Specific Service Instance 117
Example Displaying the MAC Security Status of a Specific Service Instance 117
Example Displaying the MAC Addresses of All Secured Service Instances 118
Example Displaying the MAC Security Statistics of All Service Instances 118
Example: Displaying the MAC Addresses on All Service Instances for a Bridge Domain 118
Example Displaying the Secured Service Instances for a Specific Bridge Domain 118
Additional References 119
Feature Information for MAC Address Limiting on Service Instances Bridge Domains and EVC
Port Channels 120
CHAPTER 8 Configuring Ethernet Connectivity Fault Management in a Service Provider Network 123
Finding Feature Information 124
Prerequisites for Configuring Ethernet CFM in a Service Provider Network 124
Restrictions for Configuring Ethernet CFM in a Service Provider Network 124
Information About Configuring Ethernet CFM in a Service Provider Network 125
Ethernet CFM 125
Benefits of Ethernet CFM 125
Customer Service Instance 125
Maintenance Domain 126
Maintenance Associations and Maintenance Points 127
Maintenance Point 129
Maintenance Endpoints 129
Maintenance Intermediate Points 130
CFM Messages 131
Cross-Check Function 132
SNMP Traps 132
Ethernet CFM and Ethernet OAM Interaction 133
Ethernet Virtual Circuit 133
OAM Manager 133
CFM over Bridge Domains 133
How to Set Up Ethernet CFM in a Service Provider Network 134
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
ix
Contents

Designing CFM Domains 134
Examples 136
What to Do Next 136
Configuring Ethernet CFM 137
Provisioning the Network 137
Provisioning the Network on the CE-A 137
Provisioning the Network on the U-PE A 140
Provisioning the Network on the PE-AGG A 144
Provisioning the Network on the N-PE A 147
Provisioning the Network on the CE-B 150
Provisioning the Network on the U-PE B 153
Provisioning the Network on the PE-AGG B 156
Provisioning the Network on the N-PE B 159
Provisioning Service 162
Provisioning Service on the CE-A 162
Provisioning Service on the U-PE A 166
Provisioning Service on the PE-AGG A 170
Provisioning Service on the N-PE A 173
Provisioning Service on the CE-B 177
Provisioning Service on the U-PE B 180
Provisioning Service on the PE-AGG B 184
Provisioning Service on the N-PE B 187
Configuring and Enabling the Cross-Check Function 190
Configuring and Enabling Cross-Checking for an Inward Facing MEP on the U
PE-A 190
Configuring and Enabling Cross-Checking for an Inward Facing MEP on the U
PE-B 192
Configuring and Enabling Cross-Checking for an Outward Facing MEP on the
CE-A 194
Configuring and Enabling Cross-Checking for an Outward Facing MEP on the
CE-B 195
Configuring CFM over Bridge Domains 197
Troubleshooting Tips 202
Configuring Ethernet OAM Interaction with CFM 202
Configuring the OAM Manager 202
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
x
Contents