Cisco CRS User manual

Cisco IOS XR Virtual Private Network Configuration Guide for the
Cisco CRS Router, Release 6.1.x
First Published: 2016-11-01
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2016 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xiii
Changes to This Document xiii
Obtaining Documentation and Submitting a Service Request xiii
CHAPTER 1 New and Changed VPN Features 1
New and Changed Information 1
CHAPTER 2 The Carrier Ethernet Model 3
Ethernet Flow Point 3
EFP CLI Overview 4
CHAPTER 3 Implementing Point to Point Layer 2 services 5
Prerequisites for Implementing Point to Point Layer 2 Services 6
Information About Implementing Point to Point Layer 2 Services 6
L2VPN Overview 6
ATMoMPLS with L2VPN Capability 7
ATMoMPLS with L2VPN Overview 7
Layer 2 Local Switching Overview 7
ATM Adaptation Layer 5 7
Virtual Circuit Connection Verification on L2VPN 8
Ethernet over MPLS 8
Ethernet Port Mode 8
Ethernet Remote Port Shutdown 9
VLAN Mode 9
Inter-AS Mode 10
QinQ Mode 11
QinAny Mode 12
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
iii

Quality of Service 12
High Availability 13
Preferred Tunnel Path 13
Generic Routing Encapsulation Support for L2VPN 14
Ethernet over MPLS Forwarding Using GRE Tunnels 14
Limitations 15
Pseudowire Redundancy 15
Flow Aware Transport Pseudowire (FAT PW) 16
Any Transport over MPLS 16
Control Word Processing 17
L2VPN Nonstop Routing 17
How to Implement Point to Point Layer 2 Services 17
Configuring an Interface or Connection for Point to Point Layer 2 Services 17
Configuring Static Point-to-Point Cross-Connects 19
Configuring Dynamic Point-to-Point Cross-Connects 21
Configuring Inter-AS 23
Configuring L2VPN Quality of Service 24
Restrictions 24
Configuring an L2VPN Quality of Service Policy in Port Mode 24
Configuring an L2VPN Quality of Service Policy in VLAN Mode 25
Configuring Preferred Tunnel Path 26
Enabling Load Balancing with ECMP and FAT PW 27
Configuring L2VPN Nonstop Routing 28
Configuration Examples for Point to Point Layer 2 Services 30
L2VPN Interface Configuration: Example 30
Point-to-Point Cross-connect Configuration: Examples 30
Inter-AS: Example 30
L2VPN Quality of Service: Example 32
Preferred Path: Example 32
Enabling Load Balancing with FAT PW: Example 32
AToM Cross Connect Configuration: Example 33
Configuring L2VPN over GRE Tunnels: Example 34
Configuring L2VPN Nonstop Routing: Example 34
CHAPTER 4 Implementing MPLS VPNs over IP Tunnels 35
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
iv
Contents

Prerequisites for Configuring MPLS VPNs over IP Tunnels 35
Restrictions for Configuring MPLS VPNs over IP Tunnels 36
Information About MPLS VPNs over IP Tunnels 36
Overview: MPLS VPNs over IP Tunnels 36
Advertising Tunnel Type and Tunnel Capabilities Between PE Routers—BGP 37
PE Routers and Address Space 37
Packet Validation Mechanism 37
Quality of Service Using the Modular QoS CLI 37
BGP Multipath Load Sharing for MPLS VPNs over IP Tunnels 38
Inter-AS over IP Tunnels 38
Multiple Tunnel Source Address 38
6PE/6VPE over L2TPv3 39
How to Configure MPLS VPNs over IP Tunnels 40
Configuring the Global VRF Definition 40
Configuring a Route-Policy Definition 42
Configuring a Static Route 43
Configuring an IPv4 Loopback Interface 44
Configuring a CFI VRF Interface 45
Configuring the Core Network 47
Configuring Inter-AS over IP Tunnels 47
Configuring the ASBRs to Exchange VPN-IPv4 Addresses for IP Tunnels 47
Configuring the Backbone Carrier Core for IP Tunnels 51
Verifying MPLS VPN over IP 51
Configuring Source Pool Address for MPLS VPNs over IP Tunnels 51
Configuration Examples for MPLS VPNs over IP Tunnels 53
Configuring an L2TPv3 Tunnel: Example 53
Configuring the Global VRF Definition: Example 54
Configuring a Route-Policy Definition: Example 54
Configuring a Static Route: Example 54
Configuring an IPv4 Loopback Interface: Example 54
Configuring a CFI VRF Interface: Example 54
Configuring Source Pool Address for MPLS VPNs over IP Tunnels: Example 55
CHAPTER 5 Implementing Multipoint Layer 2 Services 57
Prerequisites for Implementing Multipoint Layer 2 Services 58
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
v
Contents

Restrictions for Implementing Multipoint Layer 2 Services 59
Information About Implementing Multipoint Layer 2 Services 59
Multipoint Layer 2 Services Overview 59
VPLS for an MPLS-based Provider Core 60
Hierarchical VPLS 60
H-VPLS with Ethernet Access QinQ or QinAny 61
H-VPLS with PW-access 61
VPLS Discovery and Signaling 62
BGP-based VPLS Autodiscovery 63
BGP Auto Discovery With BGP Signaling 63
BGP Auto Discovery With LDP Signaling 64
Interoperability Between Cisco IOS XR and Cisco IOS on VPLS LDP Signaling 65
Bridge Domain 65
MAC Address-related Parameters 66
MAC Address Flooding 66
MAC Address-based Forwarding 66
MAC Address Source-based Learning 66
MAC Address Aging 66
MAC Address Limit 67
MAC Address Withdrawal 67
LSP Ping over VPWS and VPLS 68
VPLS Scalability and Performance Targets 68
Pseudowire Redundancy for P2P AToM Cross-Connects 68
Pseudowire Headend 69
PWHE Interfaces 70
Pseudowire Grouping 70
How to Implement Multipoint Layer 2 Services 70
Configuring a Bridge Domain 70
Creating a Bridge Domain 70
Configuring a Pseudowire 71
Enabling Pseudowire Status TLV 73
Configuring a Backup Pseudowire 74
Configuring Backup Disable Delay 76
Associating Members with a Bridge Domain 78
Configuring Bridge Domain Parameters 80
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
vi
Contents

Disabling a Bridge Domain 81
Configuring a Layer 2 Virtual Forwarding Instance 83
Creating the Virtual Forwarding Instance 83
Associating Pseudowires with the Virtual Forwarding Instance 84
Associating a Virtual Forwarding Instance to a Bridge Domain 86
Attaching Pseudowire Classes to Pseudowires 88
Configuring Pseudowires Using Static Labels 89
Disabling a Virtual Forwarding Instance 91
Configuring the MAC Address-related Parameters 93
Configuring the MAC Address Source-based Learning 93
Disabling the MAC Address Withdrawal 95
Configuring the MAC Address Limit 98
Configuring the MAC Address Aging 101
Disabling MAC Flush at the Bridge Port Level 102
Configuring VPLS with BGP Autodiscovery and Signaling 104
Configuring VPLS with BGP Autodiscovery and LDP Signaling 107
Configuring Pseudowire Headend 111
PWHE Configuration Restrictions 111
Configuring PWHE Interfaces 111
Restrictions for Configuring PWHE Interfaces 112
Configuring PWHE Interface Parameters 113
Configuring PWHE Crossconnect 115
Enabling Pseudowire Grouping 116
Configuration Examples for Multipoint Layer 2 Services 117
Multipoint Layer 2 Services Configuration for Provider Edge-to-Provider Edge: Example 118
Multipoint Layer 2 Services Configuration for Provider Edge-to-Customer Edge: Example 118
Configuring Backup Disable Delay: Example 119
Disabling MAC Flush: Examples 119
H-VPLS Configuration: Examples 120
VPLS with QinQ or QinAny: Example 120
H-VPLS with Access-PWs: Example 121
Configuring VPLS with BGP Autodiscovery and Signaling: Example 122
LDP and BGP Configuration 122
Minimum L2VPN Configuration for BGP Autodiscovery with BGP Signaling 123
VPLS with BGP Autodiscovery and BGP Signaling 123
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
vii
Contents

Minimum Configuration for BGP Autodiscovery with LDP Signaling 124
VPLS with BGP Autodiscovery and LDP Signaling 125
Configuring Pseudowire Headend: Example 127
Enabling Pseudowire Grouping: Example 129
CHAPTER 6 Implementing IPv6 VPN Provider Edge Transport over MPLS 131
Prerequisites for Implementing 6PE/VPE 131
Information About 6PE/VPE 132
Overview of 6PE/VPE 132
Benefits of 6PE/VPE 132
IPv6 on the Provider Edge and Customer Edge Routers 133
IPv6 Provider Edge Multipath 134
OSPFv3 6VPE 134
Multiple VRF Support 134
OSPFv3 PE-CE Extensions 134
VRF Lite 134
How to Implement 6PE/VPE 135
Configuring 6PE/VPE 135
Configuring PE to PE Core 137
Configuring OSPFv3 as the Routing Protocol Between the PE and CE Routers 141
Configuration Examples for 6PE/VPE 144
Configuring 6PE on a PE Router: Example 144
Configuring OSPFv3 6VPE: Example 144
CHAPTER 7 Implementing Layer 2 Tunnel Protocol Version 3 145
Prerequisites for Layer 2 Tunnel Protocol Version 3 145
Information About Layer 2 Tunnel Protocol Version 3 146
L2TPv3 Operation 146
L2TPv3 Benefits 147
L2TPv3 Features 147
Static L2TPv3 Sessions 148
Dynamic L2TPv3 Sessions 148
Local Switching 148
Local Switching: Quality of Service 149
L2TPv3 Pseudowire Switching 149
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
viii
Contents

L2TPv3 Pseudowire Manager 150
IP Packet Fragmentation 150
L2TPv3 Type of Service Marking 150
Keepalive 150
Maximum Transmission Unit Handling 151
IP Security Mapping to L2 Tunneling Protocol, Version 3 151
Like-to-Like Pseudowires 152
How to Implement Layer 2 Tunnel Protocol Version 3 152
Configuring a Pseudowire Class 152
Configuring L2TP Control-Channel Parameters 154
Configuring L2TP Control-Channel Timing Parameters 154
Configuring L2TPv3 Control-Channel Authentication Parameters 156
Configuring Authentication for the L2TP Control-Channel 156
Configuring L2TPv3 Control Message Hashing 158
Configuring L2TPv3 Digest Secret Graceful Switchover 159
Configuring L2TP Control-Channel Maintenance Parameters 162
Configuring L2TPv3 Pseudowires 163
Configuring a Dynamic L2TPv3 Pseudowire 163
Configuring a Static L2TPv3 Pseudowire 165
Configuration Examples for Layer 2 Tunnel Protocol Version 3 169
Configuring an L2TP Class for L2TPv3-based L2VPN PE Routers: Example 169
Configuring a Pseudowire Class: Example 169
Configuring L2TPv3 Control Channel Parameters: Example 169
Configuring an Interface for Layer 2 Transport Mode: Example 170
CHAPTER 8 Implementing MPLS Layer 3 VPNs 171
Prerequisites for Implementing MPLS L3VPN 172
MPLS L3VPN Restrictions 173
Information About MPLS Layer 3 VPNs 174
MPLS L3VPN Overview 174
MPLS L3VPN Benefits 175
How MPLS L3VPN Works 175
Virtual Routing and Forwarding Tables 176
VPN Routing Information: Distribution 176
BGP Distribution of VPN Routing Information 176
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
ix
Contents

MPLS Forwarding 177
Automatic Route Distinguisher Assignment 177
MPLS L3VPN Major Components 178
Inter-AS Support for L3VPN 178
Inter-AS Restrictions 178
Inter-AS Support: Overview 178
Inter-AS and ASBRs 179
Transmitting Information Between Autonomous Systems 180
Exchanging VPN Routing Information 181
Packet Forwarding 183
Confederations 186
MPLS VPN Inter-AS BGP Label Distribution 188
Exchanging IPv4 Routes with MPLS labels 188
BGP Routing Information 189
BGP Messages and MPLS Labels 189
Sending MPLS Labels with Routes 190
Generic Routing Encapsulation Support for L3VPN 190
GRE Restriction for L3VPN 190
VPNv4 Forwarding Using GRE Tunnels 191
Ingress of Encapsulation Router 191
Egress of Encapsulation Router 191
Ingress of Decapsulation Router 191
Egress of Decapsulation Router 191
Carrier Supporting Carrier Support for L3VPN 191
CSC Prerequisites 192
CSC Benefits 192
Configuration Options for the Backbone and Customer Carriers 193
Customer Carrier: ISP with IP Core 193
Customer Carrier: MPLS Service Provider 194
IPv6 VPN Provider Edge (6VPE) Support 194
6VPE Benefits 194
6VPE Network Architecture 195
Dual Stack 195
6VPE Operation 196
How to Implement MPLS Layer 3 VPNs 196
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
x
Contents