Page 1 Ethernet Routing Switch 8600 Engineering Network Design Implementation to Provide L2 & L3 VPN Connectivity between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide Core Sales Engineering Document Date: November 2010 Document Number: NN48500-580 Document Version: 1.1...
Page 2 Unauthorized reproduction, transmission, dissemination, storage, and or use without the express written consent of Avaya can be a criminal, as well as a civil offense under the applicable law.
Page 3 Revision Control Date Version Revised by Remarks 04/08/2009 v 1.0 First External Release Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 4: Table Of Contents
Verifying IP connectivity within the Red IPVPNs ..............118 3.13 Verifying BGP IPVPN Routes for Internet VRFs ............... 119 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 5 Getting technical documentation ....................294 Getting product training ......................294 Getting help from a distributor or reseller .................. 294 Getting technical support from the Avaya Web site ..............294 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010...
Page 6 Figure 19: Internet IPVPN ........................... 78 Figure 20: Internet IPVPN in Case of Firewall failure ................. 84 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 7: Document Updates
Italic text in a Courier New font indicates text the user must enter or select in a menu item, button or command: ERS5520-48T# show running-config Output examples from Avaya devices are displayed in a Lucinda Console font: ERS5520-48T# show running-config ! Embedded ASCII Configuration Generator Script ! Model = Ethernet Routing Switch 5520-24T-PWR ! Software version = v5.0.0.011...
Page 8: Overview
The design is based on Avaya Ethernet Routing Switch (ERS) 8600. 1.1 IPVPN-Lite brief overview Avaya’s IPVPN-Lite is based on RFC4364 BGP/MPLS IP VPNs. At the control plane level, IPVPN-Lite is identical to RFC4364. A single instance of BGP running in the backbone is used to re-advertise IPv4 routes belonging to all L3 VPNs.
Page 9: Figure 1: Five Sites To Interconnect For L2+L3 Vpn + Internet Access
Site1 Site2 Site4 Site5 Figure 1: Five Sites to interconnect for L2+L3 VPN + Internet access Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 10: Solution Overview
Site5 Figure 2: SMLT interconnect An ERS 8600 will be deployed at each site. The five ERS 8600s will be interconnected using 10Gigabit Ethernet links in an SMLT Clustering configuration. The ERS 8600s in the two main sites, which provide Internet connectivity to the network, will be made the SMLT Cluster nodes (logically acting as one switch) and will be interconnected by a DMLT IST connection.
Page 11: L2 Vpn Design
Figure 3, Vlan-id 12 is spanned across 3 sites. Please note that any of these L2 VLANs must always be configured on both Main Sites 1 & 2 (SMLT IST cluster) and only on the ERS 8600 SMLT edge switches that require the VLAN(s).
Page 12: Inter-Site Igp Routing Design
5 ERS 8600s. This routing instance will constitute the default routing instance of the ERS 8600 platform which is know as the Global Routing Table (GRT) or VRF0. The purpose of this routed GRT routing instance is purely to provide IP connectivity between a number of Circuitless IP (CLIP) interfaces which need to be created on each ERS 8600 as follows.
Page 13: L3 Vpn Design
Figure 5: Example of two separate L3 VPNs To provide address space for the IPinIP encapsulation, each ERS 8600 will also be configured with a second CLIP network address (the Service IP) which will be created using a 24 bit mask rather than a host 32 bit mask.
Page 14: Internet L3 Vpn Design
IPinIP encapsulated L3 VPN traffic destined for the Internet. This will allow both the Site 1 ERS 8600 and Site 2 ERS 8600 to handle Internet bound traffic from any of Site 3, 4 or 5 regardless of the MLT hash used by these SMLT edge Sites (i.e.
Page 15: Management & Monitoring
The design requirement only call for a maximum of 100 L2 VPNs and 100 L3 VPNs. In terms of L2 VPNs, this design can in theory scale up to 2000 L2-VLANs (Maximum ERS 8600 MGID scaling for VLANs over SMLT). Though in practice the scaling limit will be dictated by the cumulative size of the MAC tables (FDB) across all L2-VLANs.
Page 16: Configuration
2. Configuration Figure 7 shows the physical connectivity used in this TCG between the five ERS 8600 nodes as well as towards the Internet firewalls. Internet Site3 SMLT 4/10 4/10 Site1 Site2 IST MLT SMLT SMLT Site4 Site5 Figure 7: Physical layout and port numbers used In addition to the port numbers shown in Figure 7, port 4/1 on all ERS 8600s will be used to drop off all VPN services (L2 and L3) to the local site.
Page 17: Addressing & Numbering Conventions
 s = Switch number CLIP#2 addresses: 172.16.s.254/24; where:  s = Switch number CLIP#3 Cluster address: 172.16.0.254/24 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 18: Route Distinguisher (Rd) Conventions
1. Base Configuration  Enabling R-mode  Configuring switch names  Configuring edge & firewall interfaces Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 19 Configuring DiffServ Core links  Configuring ACLs to remark/set QOS for L2-VLANs  Configuring Policers for L2-VLANs Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 20: Cli Mode To Use (Cli Or Acli)
This TCG provides configuration for every step in both CLI and ACLI modes. The ERS 8600 can only accept commands in one mode or the other. To set the desired CLI mode use the boot.cfg ACLI flag which can be set or reset as follows: ERS-8610:5# config bootconfig flags nncli <true|false>...
Page 21: Base Configuration
Site 1 ERS-8610:5# config cli prompt "Site1" ACLI ERS-8610:5> enable ERS-8610:5# config terminal ERS-8610:5(config)# prompt "Site1" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 22 VLAN 1. The firewall interface will also have Spanning Tree disabled. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 23 Site3:5(config)# interface GigabitEthernet 4/1 Site3:5(config-if)# encapsulation dot1q Site3:5(config-if)# exit Site3:5(config)# vlan members remove 1 4/1 Site 4 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 24: Smlt Configuration
Smlt-id 2 Smlt-id 3 Smlt-id 2 Smlt-id 3 SMLT-MLT1 SMLT-MLT1 Site4 Site5 Figure 8: SMLT Configuration Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 25 Site2:5# config mlt 32 perform-tagging enable Site2:5# config mlt 32 ist create ip 10.0.255.1 vlan-id 4000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 26 Site1:5# config mlt 3 name "Site5" Site1:5# config mlt 3 perform-tagging enable Site1:5# config mlt 3 smlt create smlt-id 3 ACLI Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 27 Site3:5(config)# mlt 1 encapsulation dot1q Site3:5(config)# interface GigabitEthernet 2/1-2/2 Site3:5(config-if)# no spanning-tree stp 1 enable Site3:5(config-if)# exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 28 Site3:5# config ethernet 2/1,2/2 vlacp timeout short Site3:5# config ethernet 2/1,2/2 vlacp enable ACLI Site3:5(config)# vlacp enable Site3:5(config)# interface GigabitEthernet 2/1,2/2 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 29: L2 Vpn Service Configuration (L2 Vlans)
(VLAN 1 on all ports & VLACP disabled) will not flood VLACP PDUs sent with this destination MAC.  ERS 8600 default VLACP short timer = 200ms & VLACP timeout-scale = 3 are used. This allows VLACP to trigger in 600ms. ...
Page 30 Site3:5(config)# vlan create 10 name "L2-VLAN-10" type port 1 Site3:5(config)# vlan mlt 10 1 Site3:5(config)# vlan members add 10 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 31: Figure 10: L2 Vlan11 Spanning Sites 1, 2, 4 & 5
Site1:5(config)# vlan mlt 11 3 Site1:5(config)# vlan mlt 11 32 Site1:5(config)# vlan members add 11 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 32: Figure 11: L2 Vlan12 Spanning Sites 2, 3 & 5
IST MLT Site4 Site5 Vlan id 12 Figure 11: L2 VLAN12 spanning Sites 2, 3 & 5 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 33 Site3:5(config)# vlan create 12 name "L2-VLAN-12" type port 1 Site3:5(config)# vlan mlt 12 1 Site3:5(config)# vlan members add 12 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 34: Figure 12: L2 Vlan13 Spanning Sites 1, 3 & 4
Site1:5# config vlan 13 ports add 4/1 ACLI Site1:5(config)# vlan create 13 name "L2-VLAN-13" type port 1 Site1:5(config)# vlan mlt 13 1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 35 Site3:5(config)# vlan create 13 name "L2-VLAN-13" type port 1 Site3:5(config)# vlan mlt 13 1 Site3:5(config)# vlan members add 13 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 36: Configuring The Circuitless (Clip) Interfaces
Site1:5(config-if)# exit Site 2 Site2:5# config ip circuitless-ip-int 1 create 10.0.0.2/32 ACLI Site2:5(config)# interface loopback 1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 37 Site1:5# config ip circuitless-ip-int 2 ipvpn-lite-capability enable ACLI Site1:5(config)# interface loopback 2 Site1:5(config-if)# ip address 172.16.1.254/24 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 38 Site 5 Site5:5# config ip circuitless-ip-int 2 create 172.16.5.254/24 Site5:5# config ip circuitless-ip-int 2 ipvpn-lite-capability enable ACLI Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 39: L3 Igp Core Configuration (Ospf)
Site1 or Site2 being the DR across both OSPF VLANs which would then defeat the objective of having two segments in the first place. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 40: Figure 14: L3 Igp Core With Ospf & Rsmlt
Site1:5# config vlan 3998 ip create 10.0.98.1/24 Site1:5# config vlan 3999 create byport 1 name "GRT-IGP-OSPF2" Site1:5# config vlan 3999 add-mlt 1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 41 Site2:5# config vlan 3999 add-mlt 3 Site2:5# config vlan 3999 add-mlt 32 Site2:5# config vlan 3999 ip create 10.0.99.2/24 ACLI Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 42 Site3:5(config)# vlan mlt 3999 1 Site3:5(config)# interface Vlan 3999 Site3:5(config-if)# ip address 10.0.99.3 255.255.255.0 Site3:5(config-if)# exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 43 Site5:5(config-if)# exit Site5:5(config)# vlan create 3999 name "GRT-IGP-OSPF2" type port 1 Site5:5(config)# vlan mlt 3999 1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 44 Site1:5(config)# interface loopback 1 Site1:5(config-if)# ip ospf Site1:5(config-if)# exit Site1:5(config)# interface loopback 2 Site1:5(config-if)# ip ospf Site1:5(config-if)# exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 45 Site2:5(config)# interface loopback 2 Site2:5(config-if)# ip ospf Site2:5(config-if)# exit Site2:5(config)# interface loopback 3 Site2:5(config-if)# ip ospf Site2:5(config-if)# exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 46 Site4:5# config ip ospf enable Site4:5# config vlan 3998 ip ospf priority 0 Site4:5# config vlan 3998 ip ospf enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 47 Site5:5# config ip circuitless-ip-int 1 ospf enable Site5:5# config ip circuitless-ip-int 2 ospf enable ACLI Site5:5(config)# router ospf enable Site5:5(config)# router ospf Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 48 Site1:5(config-if)# ip rsmlt enable Site1:5(config-if)# exit To verify operation of OSPF and RSMLT refer to sections 3.3 and 3.4 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 49: Bgp Configuration
Site1:5# config ip bgp local-as 65000 Site1:5# config ip bgp aggregation disable Site1:5# config ip bgp traps enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 50 RT) the BGP speaker is then able to request to his route-refresh capable peers that all routes be refreshed. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 51 Site1:5(config)# neighbor 10.0.0.4 peer-group "IPVPN-Lite" Site1:5(config)# neighbor 10.0.0.5 Site1:5(config)# neighbor 10.0.0.5 peer-group "IPVPN-Lite" Site1:5(config)# neighbor "IPVPN-Lite" enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 52 Site2:5(config)# neighbor 10.0.0.4 peer-group "IPVPN-Lite" Site2:5(config)# neighbor 10.0.0.5 Site2:5(config)# neighbor 10.0.0.5 peer-group "IPVPN-Lite" Site2:5(config)# neighbor "IPVPN-Lite" enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 53 Site3:5(config)# neighbor 10.0.0.4 peer-group "IPVPN-Lite" Site3:5(config)# neighbor 10.0.0.5 Site3:5(config)# neighbor 10.0.0.5 peer-group "IPVPN-Lite" Site3:5(config)# neighbor "IPVPN-Lite" enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 54 Site4:5(config)# neighbor 10.0.0.3 peer-group "IPVPN-Lite" Site4:5(config)# neighbor 10.0.0.5 Site4:5(config)# neighbor 10.0.0.5 peer-group "IPVPN-Lite" Site4:5(config)# neighbor "IPVPN-Lite" enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 55 Site5:5(config)# neighbor 10.0.0.3 peer-group "IPVPN-Lite" Site5:5(config)# neighbor 10.0.0.4 Site5:5(config)# neighbor 10.0.0.4 peer-group "IPVPN-Lite" Site5:5(config)# neighbor "IPVPN-Lite" enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 56 RT) the BGP speaker is then able to request to his route-refresh capable peers that all routes be refreshed. To verify operation of BGP refer to section 3.6 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 57: L3 Vpn Configuration (Ipvpns)
2 or say 3 sites, then it only needs to be created on the relevant Sites. Every IPVPN needs to be terminated in a VRF instance. In software release 5.0, the ERS 8600 can scale up to 255 VRFs, hence this design can scale up to 255 distinct IPVPNs, if these IPVPNs are terminated at all 5 Sites.
Page 58 Site2:5# config vlan 121 create byport 1 name "VRF1-VLAN-121" Site2:5# config vlan 121 vrf green Site2:5# config vlan 121 ports add 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 59 Site3:5(config-if)# exit Site3:5(config)# vlan create 131 name "VRF1-VLAN-131" type port 1 Site3:5(config)# vlan members 131 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 60 Site5:5# config vlan 150 create byport 1 name "VRF1-VLAN-150" Site5:5# config vlan 150 vrf green Site5:5# config vlan 150 ports add 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 61 Site1:5# config ip vrf green bgp auto-summary disable ACLI Site1:5(config)# router vrf green Site1:5(config-vrf)# ipvpn Site1:5(config-vrf)# rd 172.16.1.1 1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 62 Site3:5(config-vrf)# rd 172.16.3.1 1 Site3:5(config-vrf)# route-target both 65000 60010 Site3:5(config-vrf)# ipvpn enable Site3:5(config-vrf)# no ip bgp auto-summary Site3:5(config-vrf)# exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 63 1. It creates and enables BGP within the VRF. BGP synchronization is by default disabled, but auto-summary is not. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 64 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 65: Figure 17: Red Any-Any Ipvpn-2
Site1:5# config vlan 211 create byport 1 name "VRF2-VLAN-211" Site1:5# config vlan 211 vrf red Site1:5# config vlan 211 ports add 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 66 Site2:5(config-if)# exit Site2:5(config)# vlan create 221 name "VRF2-VLAN-221" type port 1 Site2:5(config)# vlan members 221 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 67 Site4:5# config vlan 240 create byport 1 name "VRF2-VLAN-240" Site4:5# config vlan 240 vrf red Site4:5# config vlan 240 ports add 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 68 Site5:5(config)# vlan create 250 name "VRF2-VLAN-250" type port 1 Site5:5(config)# vlan members 250 4/1 Site5:5(config)# interface Vlan 250 Site5:5(config-if)# vrf red Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 69 Site2:5# config ip vrf red ipvpn rt add both 65000:60020 Site2:5# config ip vrf red ipvpn enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 70 Site4:5# config ip vrf red bgp auto-summary disable ACLI Site4:5(config)# router vrf red Site4:5(config-vrf)# ipvpn Site4:5(config-vrf)# rd 172.16.4.2 2 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 71 <VRF-name> bgp synchronization disable ip vrf <VRF-name> bgp enable # IP REDISTRIBUTION CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 72 To verify operation of the Red IPVPN refer to sections 3.10, 3.11 and 3.12 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 73: Internet L3 Vpn Configuration
IP routing any traffic it might receive from the local firewall until all the IPVPN routes are in place. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 74: Figure 18: Vrf Internet And Associated Vlans/Networks
Figure 18: VRF Internet and associated VLANs/Networks In this design this will be achieved by deploying VRRP instances as shown in figure 18. The ERS 8600 locally attached to the firewall will be made the VRRP Master for the relevant VLAN. The VRRP Master will also be configured with a suitably high VRRP hold-down timer.
Page 75 Site1:5(config-if)# ip vrrp address 92 10.255.92.10 Site1:5(config-if)# ip vrrp 92 priority 20 Site1:5(config-if)# ip vrrp 92 enable Site1:5(config-if)# exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 76 Site2:5(config-if)# ip vrrp address 91 10.255.91.10 Site2:5(config-if)# ip vrrp 91 priority 20 Site2:5(config-if)# ip vrrp 91 enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 77 Red IPVPN-2) even though the Hub Internet VRF will have the necessary IP routes to do so in the control plane. This is enforced by the ERS 8600 in the data plane. Network Design Implementation to Provide L2 & L3 VPN Connectivity...
Page 78: Figure 19: Internet Ipvpn
This will ensure that the spokes only learn the default route from the 2 hubs while the 2 hubs will learn all the spoke routes. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 79 Site1:5(config)# router vrf red Site1:5(config-vrf)# route-target import 65000 60000 Site1:5(config-vrf)# route-target export 65000 60001 Site1:5(config-vrf)# exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 80 Site2:5(config)# router vrf red Site2:5(config-vrf)# route-target import 65000 60000 Site2:5(config-vrf)# route-target export 65000 60001 Site2:5(config-vrf)# exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 81 Site5:5# config ip vrf green ipvpn rt add export 65000:60001 Site5:5# config ip vrf red ipvpn rt add import 65000:60000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 82 <VRF-name> bgp redistribute static apply ACLI # BGP CONFIGURATION - VRF router vrf <VRF-name> Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 83 For the return path the firewalls should only have routes with next hop the VRRP IP defined on the VLAN where the firewall is connected. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 84: Figure 20: Internet Ipvpn In Case Of Firewall Failure
Figure 20: Internet IPVPN in Case of Firewall failure To verify operation of the Internet IPVPN refer to sections 3.13, 3.14 and 3.15 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 85: Configuring The Network For Correct Qos Operation
The discrepancy between p-bit 0/1 and QOS level 1/0 is due to the default QOS ingress map on  the ERS 8600 which by default will steer p-bit 0 traffic into the Standard/Default queue which is the lowest Weighted Balanced queue used for Best Effort traffic Network Design Implementation to Provide L2 &...
Page 86 ACLI - Site1:5# show qos egress-queue-set 2 queue ================================================================================ R-Module QOS Shapers Table ================================================================================ Qid Q-name Q-style min-rate max-rate max-q-length -------------------------------------------------------------------------------- Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 87 Site1:5# config filter acl 4000 ace 11 create name "L2-VLAN11" Site1:5# config filter acl 4000 ace 11 action permit remark-dot1p zero Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 88 Always select an ACT with the minimum required fields to ensure the lowest switching latency. Some ACTs (4081 – 4096) are pre-defined on the ERS 8600 and can be used. In the above example none of the pre-defined ACTs were suitable and thus a new ACT was defined.
Page 89 Site1:5(config)# filter acl ace action 4000 10 permit police 10 Site1:5(config)# filter acl ace 4000 10 enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 90 Site1:5(config)# qos policy 13 peak-rate 100000 svc-rate 10000 lanes 4/1,4/2 name "L2- VLAN13-Policer" Site1:5(config)# filter acl ace 4000 13 disable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 91: Enabling Network Management Features
Site2:5# config filter acl 4000 ace 12 debug count enable ACLI Site2:5(config)# filter acl ace debug 4000 12 count enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 92 Site2:5# config filter acl 200 set global-action count Site2:5# config filter acl 200 vlan add 220-221 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 93 Site4:5(config)# filter acl vlan 100 140-141 Site4:5(config)# filter acl 200 type inVlan act 4094 name "Red-VRF-2" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 94 Site1:5(config)# ip ipfix collector 2 <collctr-ip> enable exporter-ip 10.0.0.1 Site1:5(config)# ip ipfix collector 3 <collctr-ip> enable exporter-ip 10.0.0.1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 95 Site3:5(config)# ip ipfix collector 4 <collctr-ip> enable exporter-ip 10.0.0.3 Site3:5(config)# interface GigabitEthernet 2/1,2/2,4/1 Site3:5(config-if)# ip ipfix enable Site3:5(config-if)# exit Site 4 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 96  Avaya ERS 8600 R and RS Modules can handle IPFIX sampling at 1:1 rate at full 10 Gig without any impact on Main CPU. To verify operation of IPFIX refer to section 3.17 Network Design Implementation to Provide L2 &...
Page 97 For L3 Switches like the ERS 8600 it can be necessary to configure Autotopology to advertise a specific IP address type; there are 3 possible options (a) inband local interface IP address, (b) inband CircuitLess IP address or (c) Out-of-band IP address.
Page 98 Site1:5(config)# load-encryption-module AES Site1:5(config)# no snmp-server user initial Site1:5(config)# snmp-server user admin group v3adm md5 <auth-passwd> aes <priv- Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 99 Note – Inband Management access (SNMP, Telnet, SSH, FTP, SCP, Rlogin, TFTP) to the ERS  8600 is ONLY allowed on IP interfaces belonging to the GRT. Hence SNMP-v3 USM users admingreen, adminred, usergreen, userred will need GRT access in order to manage their respective VRFs Network Design Implementation to Provide L2 &...
Page 100 Telnetd, Rlogind, Ftpd, Tftpd. This can be done by disabling the corresponding bootconfig flags  Note – Inband Management access (SNMP, Telnet, SSH, FTP, SCP, Rlogin, TFTP) to the ERS 8600 is ONLY allowed on IP interfaces belonging to the GRT Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010...
Page 101: Verification
10 11 12 3998 3999 6175 trunk normal 2/3,3/3 10 11 12 13 3991 3992 3998 3999 4000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 102: Verifying Igp Ospf Operation
0.0.0.0 10.0.99.1 0.0.0.0 DR_O 10 10.0.99.2 brdc none 0.0.0.0 10.0.98.1 0.0.0.0 10.0.98.1 brdc none 0.0.0.0 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 103 10.0.98.1 10.0.0.5 10.0.98.5 Full Dynamic 10.0.98.1 10.0.0.2 10.0.98.2 Full Dynamic Total ospf neighbors: 8 Result Site2: Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 104 10.0.0.3 255.255.255.255 10.0.99.3 Glob~ 20 3999 OSPF 0 10.0.0.4 255.255.255.255 10.0.99.4 Glob~ 20 3999 OSPF 0 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 105 The CLIP#2 and CLIP#3 network addresses need to be reachable within the GRT so that IPVPN IPinIP encapsulated packet’s outer IP Destination address can be routed to the correct Site. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 106: Verifying Rsmlt Operation
3992 10.255.92.10 00:00:5e:00:01:5c Back Up Enabled VRID MASTER UP TIME HLD DWN CRITICAL IP (ENABLED) -------------------------------------------------------------------------------- Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 107: Verifying Bgp Operation
10.0.0.2 65000 Established 10.0.0.5 65000 Established 10.0.0.4 65000 Established 10.0.0.3 65000 Established Total bgp neighbors: 4 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 108  On the ERS 8600 the BGP identifier is always the OSPF Router id  The BGP peerings are IBGP because the local AS (local-as) is the same as the remote ASes (RMTAS), i.e. 65000 Step 2 – Verify that the MBGP negotiated capabilities for each neighbor include vpnv4, ipvpn-lite and...
Page 109 - 12000 nexthop-self - disable originate-def-route - disable MD5-authentication - disable neighbor-debug - none remove-private-as - disable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 110: Verifying Bgp Ipvpn Routes For Green Vrfs
Hence the Green VRF will accept VPNv4 Routes with either an RT of 65000:60010 or 65000:60000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 111 Value: 172.16.4.1:1 RT -Type: ASNUM Value: 65000:60010 Type: ASNUM Value: 65000:60001 10.1.41.0/24 10.0.0.4 172.16.4.1 INC 100 524289 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 112 VPNv4 route within the BGP Update. With IPVPN-Lite this MPLS label is simply not used and can be ignored Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 113: Verifying The Green Vrf Ip Routing Table
Site2, OSPF will have selected one or the other. In this case Site2 was selected and so the Next Hop for Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 114: Verifying Ip Connectivity Within The Green Ipvpns
Source IP always select a local IP interface belonging to the VRF; these can be viewed with ―show ip interface vrf <vrf name>‖ Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 115: Verifying Bgp Ipvpn Routes For Red Vrfs
Svc Label: 524290 RD -Type: IPADDR Value: 172.16.2.2:2 RT -Type: ASNUM Value: 65000:60020 Type: ASNUM Value: 65000:60001 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 116 65000:60000. The other default route advertised by the same Site1 will not appear here but is in fact directly installed in the VRF IP routing table. Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 117: Verifying The Red Vrf Ip Routing Table
10.0.99.3 Glob~ 0 3999 10.2.31.0 255.255.255.0 10.0.99.3 Glob~ 0 3999 10.2.40.0 255.255.255.0 10.0.99.4 Glob~ 0 3999 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 118: Verifying Ip Connectivity Within The Red Ipvpns
Site1:5# ping 10.2.50.1 vrf red source 10.2.10.1 Result: 10.2.20.1 is alive 10.2.30.1 is alive 10.2.40.1 is alive Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 119: Verifying Bgp Ipvpn Routes For Internet Vrfs
Value: 172.16.2.1:1 RT -Type: ASNUM Value: 65000:60010 Type: ASNUM Value: 65000:60001 10.1.21.0/24 10.0.0.2 172.16.2.1 INC 100 524289 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 120 INC 100 524290 Svc Label: 524290 RD -Type: IPADDR Value: 172.16.3.2:2 RT -Type: ASNUM Value: 65000:60020 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 121 IPinIP encapsulation is always the IP address configured in the RD of the local ingress VRF). Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 122: Verifying The Internet Vrf Ip Routing Table
23 out of 23 Total Num of Route Entries, 23 Total Num of Dest Networks displayed. -------------------------------------------------------------------------------- TYPE Legend: Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 123: Verifying Internet Ip Connectivity
Source IP always select a local IP interface belonging to the VRF; these can be viewed with ―show ip interface vrf <vrf name>‖ Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 124: Verifying Topology Operation
Step 2 – Let Enterprise Switch Manager (ESM) build a map of the Network ESM / Edit / Preferences… Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 125 Result: Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 126: Verifying Ipfix Operation
10.0.0.1 Port JAN 23 15:25:43 Total number of Displayed Flows on Slot 3 : 3 -------------------------------------------------------------------------------- Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 127 Green VRF @ Site3; we can see that this flow is arriving on Site1 switch on interface 3/2 and being switched out of interface 2/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 128: Verifying Snmp-V3 Access
12 out of 12 Total entries displayed -------------------------------------------------------------------------------- ================================================================================ VACM Group Access Configuration Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 129 The v3usr, v3usrvrf1 and v3usrvrf2 Group Names only have a MIB-view defined for ReadV and hence are read only capable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 130 Step 4 – JDM connecting to a switch with SNMPv3 as user admingreen (full rights VRF Green only) JDM / Device / Open… Result: Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 131: Verifying L2-Vlan Policer Statistics
4/2:4/17-4/32 0 VLAN12 4/1:4/1-4/16 633661 5702949 5587551 4696515 VLAN12 4/2:4/17-4/32 0 VLAN13 4/1:4/1-4/16 31619204 284572836 235168560 0 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 132 1 or more physical ports. On an 8648GTR(S) Lane 1 spans ports 1-24 and Lane 2 spans ports 25-48. In the example above, the Site 3 ERS 8600 was fitted with an 8634XGRS in slot 4 where Lane 1 spans ports 4/1-4/16 and Lane 2 spans ports 4/17-4/32 ...
Page 133 Step 2 – Viewing the same statistics from JDM JDM menu / QOS / Policy… Select Policy id then “Graph…” button Result: Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 134: Verifying Per-L2-Vlan Traffic Statistics
OIDs: rcPrFilterAceStatsTable .1.3.6.1.4.1.2272.1.202.1.1.2.4.24 rcPrFilterAceStatsEntry .1.3.6.1.4.1.2272.1.202.1.1.2.4.24.1  rcPrFilterAceStatsAclId .1.3.6.1.4.1.2272.1.202.1.1.2.4.24.1.1 rcPrFilterAceStatsAceId .1.3.6.1.4.1.2272.1.202.1.1.2.4.24.1.2 rcPrFilterAceStatsPortId .1.3.6.1.4.1.2272.1.202.1.1.2.4.24.1.3 rcPrFilterAceStatsMatchCountPkts .1.3.6.1.4.1.2272.1.202.1.1.2.4.24.1.4 rcPrFilterAceStatsMatchCountOctets .1.3.6.1.4.1.2272.1.202.1.1.2.4.24.1.5 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 135 JDM menu / Security / Data Path / Advanced Filters (ACE/ACLs)… ACL tab Select ACL 4000 then “ACE” button Statistics tab Result: Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 136: Verifying Per-Vrf Traffic Statistics
The same statistics can be viewed in JDM or polled directly via SNMP with the following MIB OIDs: rcPrFilterAclStatsTable .1.3.6.1.4.1.2272.1.202.1.1.2.3.2  rcPrFilterAclStatsEntry .1.3.6.1.4.1.2272.1.202.1.1.2.3.2.1 rcPrFilterAclStatsAclId .1.3.6.1.4.1.2272.1.202.1.1.2.3.2.1.1 rcPrFilterAclStatsMatchDefaultCounterPkts .1.3.6.1.4.1.2272.1.202.1.1.2.3.2.1.2 rcPrFilterAclStatsMatchDefaultOctets .1.3.6.1.4.1.2272.1.202.1.1.2.3.2.1.3 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 137 JDM menu / Security / Data Path / Advanced Filters (ACE/ACLs)… ACL tab Select ACL 100 or ACL 200 then “Graph” button Result: Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 138: Complete Configuration Files
#!flags multicast-check-packet true #!flags system-monitor true #!record-reservation filter 4096 #!record-reservation ipmc 500 #!record-reservation local 2000 #!record-reservation mac 2000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 139 1 host enable # LOG CONFIGURATION # LINK-FLAP-DETECT CONFIGURATION # IEEE VLAN AGING CONFIGURATION # ACCESS-POLICY CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 140 "v3admvrf1" "vrf1" usm authPriv snmp-v3 group-access view "v3admvrf1" "vrf1" usm authPriv read "vrf" write "vrf" notify "vrf" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 141 1000 svc-rate 1000 lanes 4/1,4/2 name "VLAN10" qos policy 11 create peak-rate 1000 svc-rate 250 lanes 4/1,4/2 name "VLAN11" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 142 2 create mlt 2 add ports 3/1 mlt 2 name "Site4" mlt 2 perform-tagging enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 143 11 ports add 2/3,3/1-3/3,4/1,4/3 member portmember vlan 12 create byport 1 name "L2-VLAN-12" vlan 12 add-mlt 1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 144 3992 create byport 1 name "VRF255-FW2" vlan 3992 vrf internet vlan 3992 add-mlt 32 vlan 3992 ports remove 2/1-2/2,3/1-3/2,4/1-4/30 member portmember Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 145 2/1 vlacp enable ethernet 2/1 vlacp timeout short ethernet 2/2 untagged-frames-discard enable ethernet 2/3 untagged-frames-discard enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 146 # IP CONFIGURATION # IP AS LIST CONFIGURATION - GlobalRouter # IP AS LIST CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 147 2 ipvpn-lite-capability enable ip circuitless-ip-int 3 create 172.16.0.254/255.255.255.0 ip circuitless-ip-int 3 ospf enable ip circuitless-ip-int 3 ipvpn-lite-capability enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 148 # OSPF CONFIGURATION - VRF # MROUTE CONFIGURATION # MCAST RESOURCE USAGE CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 149 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 150 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 151 # UDP FWD CONFIGURATION - GlobalRouter # UDP FWD CONFIGURATION - VRF # VRRP CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 152 # NTP CONFIGURATION ntp enable true ntp server create 47.162.221.7 # NAAP CONFIGURATION # R-MODULE FILTER CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 153 # IPV6 INTERFACE CONFIGURATION # IPV6 TUNNEL CONFIGURATION # IPV6 MLD CONFIGURATION # IPV6 ND CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 154: Site2 Cli Config
SFM: OP=3 TMUX=2 SWIP=23 FAD=16 CF=72 # Slot 0x00000001 0x00000000 # Slot 0x00000001 0x00000000 # Slot 0x00000001 0x00000000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 155 # CLI CONFIGURATION cli prompt "Site2" cli timeout 65535 cli password password-history 3 # SYSTEM CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 156 "v3adm" "" usm authPriv snmp-v3 group-access view "v3adm" "" usm authPriv read "root" write "root" notify "root" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 157 # SNMP V3 NOTIFY FILTER CONFIGURATION # SNMP V3 NOTIFY FILTER PROFILE CONFIGURATION # DNS CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 158 # TRAFFIC-FILTER CONFIGURATION # DVMRP CONFIGURATION # PIM CONFIGURATION # SVLAN-CONFIGURATION # PORT CONFIGURATION - PHASE I Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 159 # IP PREFIX LIST CONFIGURATION - GlobalRouter # IP PREFIX LIST CONFIGURATION - VRF # VLAN CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 160 221 create byport 1 name "VRF2-VLAN-221" vlan 221 vrf red vlan 221 ports remove 2/1-2/3,3/1-3/3,4/2,4/4-4/30 member portmember Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 161 3999 ip ospf priority 100 vlan 3999 ip rsmlt enable vlan 4000 create byport 1 name "IST-VLAN" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 162 3/3 vlacp enable ethernet 4/1 untagged-frames-discard enable ethernet 4/1 default-vlan-id 10 ethernet 4/1 enable-diffserv true Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 163 0.0.0.0/0.0.0.0 next-hop 10.255.91.20 cost 100 ip vrf internet static-route create 0.0.0.0/0.0.0.0 next-hop 10.255.92.20 cost 10 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 164 # PIM STATIC RP CONFIGURATION # PIM VIRTUAL NBR CONFIGURATION # PIM CIRCUITLESS IP CANDBSR CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 165 10.0.0.3 peer-group "IPVPN-Lite" add ip bgp neighbor 10.0.0.4 peer-group "IPVPN-Lite" add ip bgp neighbor 10.0.0.5 peer-group "IPVPN-Lite" add Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 166 65000:60001 ip vrf internet ipvpn rt add export 65000:60000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 167 # OSPF ACCEPT CONFIGURATION - GlobalRouter # OSPF ACCEPT CONFIGURATION - VRF # RIP POLICY CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 168 4/10 all-traffic enable # RSMLT CONFIGURATION # POS CONFIGURATION # ATM CONFIGURATION # DIAG CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 169 4000 ace 12 debug count enable filter acl 4000 ace 12 ethernet vlan-id eq 12 filter acl 4000 ace 12 enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 170: Site3 Cli Config
# software version : 5.0.0.0 # monitor version : 5.0.0.0 # cli mode : 8600 CLI Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 171 #!power slot-priority 3 high #!power slot-priority 4 high #!end config load-encryption-module 3DES load-encryption-module AES # CLI CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 172 "admin" usm "v3adm" snmp-v3 group-member create "userred" usm "v3usrvrf2" snmp-v3 group-member create "adminred" usm "v3admvrf2" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 173 # SNMP V3 TARGET PARAMS CONFIGURATION # SNMP V3 NOTIFY FILTER CONFIGURATION # SNMP V3 NOTIFY FILTER PROFILE CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 174 2 # TRAFFIC-FILTER CONFIGURATION # DVMRP CONFIGURATION # PIM CONFIGURATION # SVLAN-CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 175 130 create byport 1 name "VRF1-VLAN-130" vlan 130 vrf green vlan 130 ports remove 2/1-2/3,4/2,4/4-4/34 member portmember Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 176 2/1 vlacp timeout short ethernet 2/2 untagged-frames-discard enable ethernet 2/2 default-vlan-id 10 ethernet 2/2 enable-diffserv true Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 177 # IP ROUTE POLICY CONFIGURATION - GlobalRouter # IP ROUTE POLICY CONFIGURATION - VRF # IP CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 178 # PIM STATIC RP CONFIGURATION # PIM VIRTUAL NBR CONFIGURATION # PIM CIRCUITLESS IP CANDBSR CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 179 10.0.0.2 peer-group "IPVPN-Lite" add ip bgp neighbor 10.0.0.4 peer-group "IPVPN-Lite" add ip bgp neighbor 10.0.0.5 peer-group "IPVPN-Lite" add Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 180 # IP REDISTRIBUTION CONFIGURATION - VRF ip vrf green bgp redistribute rip create ip vrf green bgp redistribute rip enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 181 # DVMRP POLICY CONFIGURATION - GlobalRouter # DVMRP POLICY CONFIGURATION - VRF # UDP FWD CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 182 # NTP CONFIGURATION ntp enable true ntp server create 47.162.221.7 # NAAP CONFIGURATION # R-MODULE FILTER CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 183 # IPV6 INTERFACE CONFIGURATION # IPV6 TUNNEL CONFIGURATION # IPV6 MLD CONFIGURATION # IPV6 ND CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 184: Site4 Cli Config
# Slot 0x00000001 0x00000000 # Slot 0x00000001 0x00000000 # Slot 0x00000001 0x00000000 # Slot 0x00000001 0x00000000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 185 "Site4" cli timeout 65535 cli password password-history 3 # SYSTEM CONFIGURATION sys set force-topology-ip-flag true Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 186 "v3adm" "" usm authPriv read "root" write "root" notify "root" snmp-v3 group-access create "v3adm" "vrf1" usm authPriv Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 187 # SNMP V3 NOTIFY FILTER PROFILE CONFIGURATION # DNS CONFIGURATION # NET6-MGMT CONFIGURATION # SLOT CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 188 # PORT CONFIGURATION - PHASE I ethernet 4/1 perform-tagging enable ethernet 4/3 perform-tagging enable # MLT CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 189 141 ports add 4/1,4/3 member portmember vlan 141 ip create 10.1.41.1/255.255.255.0 mac_offset 3 vlan 240 create byport 1 name "VRF2-VLAN-240" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 190 4/1 untagged-frames-discard enable ethernet 4/1 default-vlan-id 10 ethernet 4/1 enable-diffserv true ethernet 4/3 untagged-frames-discard enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 191 # IP CONFIGURATION - GlobalRouter # IP CONFIGURATION - VRF # RIP CONFIGURATION - GlobalRouter # RIP CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 192 10.0.0.4 ip ospf enable # OSPF CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 193 "IPVPN-Lite" address-family vpnv4 enable ip bgp neighbor "IPVPN-Lite" ipvpn-lite-capability enable ip bgp neighbor "IPVPN-Lite" admin-state enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 194 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 195 # UDP FWD CONFIGURATION - VRF # VRRP CONFIGURATION - GlobalRouter # VRRP CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 196 100 set global-action count filter acl 100 vlan add 140-141 filter acl 200 create inVlan act 4094 name "Red-VRF-2" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 197 # IPV6 MLD CONFIGURATION # IPV6 ND CONFIGURATION # IPV6 NEIGHBOR CONFIGURATION # IPV6 STATIC ROUTE CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 198: Site5 Cli Config
#!flags r-mode true #!resource-reservation max-vlan false #!resource-reservation multicast 2048 #!flags multicast-check-packet true #!flags system-monitor true #!record-reservation filter 4096 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 199 # LINK-FLAP-DETECT CONFIGURATION # IEEE VLAN AGING CONFIGURATION # ACCESS-POLICY CONFIGURATION sys access-policy policy 1 service ftp enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 200 "v3usrvrf1" "vrf1" usm authPriv read "vrf" write "" notify "" snmp-v3 group-access create "v3usrvrf2" "vrf2" usm authPriv Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 201 12 create peak-rate 10000 svc-rate 1000 lanes 4/1,4/2 name "VLAN12" # LACP CONFIGURATION config vlacp enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 202 # CLUSTER CONFIGURATION # IP PREFIX LIST CONFIGURATION - GlobalRouter # IP PREFIX LIST CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 203 3998 ip create 10.0.98.5/255.255.255.0 mac_offset 0 vlan 3998 ip ospf enable vlan 3998 ip ospf priority 0 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 204 # IP AS LIST CONFIGURATION - GlobalRouter # IP AS LIST CONFIGURATION - VRF # IP COMMUNITY LIST CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 205 2 ipvpn-lite-capability enable # CIRCUITLESS IP INTERFACE CONFIGURATION - VRF # TOPOLOGY-CLIP-IP sys set clipId-topology-ip Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 206 # MCAST RESOURCE USAGE CONFIGURATION # PGM CONFIGURATION # MCAST MLT DISTRIBUTION CONFIGURATION # TIMED PRUNE CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 207 # IPVPN CONFIGURATION ip vrf green ipvpn create ip vrf green ipvpn rd 172.16.5.1:1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 208 # OSPF ACCEPT CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 209 4/1 all-traffic enable ip ipfix port 4/3 all-traffic enable # RSMLT CONFIGURATION # POS CONFIGURATION # ATM CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 210 4000 ace 12 create name "L2-VLAN12" filter acl 4000 ace 12 action permit remark-dot1p two police 12 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 211 # IPV6 OSPF NBMA NBR CONFIGURATION # SLPP CONFIGURATION # MPLS CONFIGURATION # MPLS GLOBAL CONFIGURATION back Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 212: Acli Configs
#!flags system-monitor true #!record-reservation filter 4096 #!record-reservation ipmc 500 #!record-reservation local 2000 #!record-reservation mac 2000 #!record-reservation static-route 200 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 213 # LOG CONFIGURATION # LINK-FLAP-DETECT CONFIGURATION # IEEE VLAN AGING CONFIGURATION # ACCESS-POLICY CONFIGURATION access-policy 1 ftp Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 214 "v3usrvrf1" "vrf1" auth-priv read-view vrf snmp-server group "v3usrvrf2" "vrf2" auth-priv read-view vrf # SNMP V3 TARGET ADDRESS CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 215 255 # TRAFFIC-FILTER CONFIGURATION # DVMRP CONFIGURATION # PIM CONFIGURATION # SVLAN-CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 216 2 smlt 2 exit interface mlt 3 smlt 3 exit interface mlt 32 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 217 13 name "L2-VLAN-13" type port 1 vlan mlt 13 1 vlan mlt 13 2 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 218 10.255.92.1 255.255.255.0 4 ip vrrp address 92 10.255.92.10 ip vrrp 92 priority 20 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 219 01:80:c2:00:00:0f vlacp enable no spanning-tree stp 1 enable exit interface GigabitEthernet 2/2 untagged-frames-discard exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 220 GigabitEthernet 4/1 untagged-frames-discard default-vlan-id 10 enable-diffserv enable exit interface GigabitEthernet 4/3 untagged-frames-discard default-vlan-id 10 enable-diffserv enable exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 221 # IP ROUTE MAP CONFIGURATION - VRF # IP CONFIGURATION - GlobalRouter # IP CONFIGURATION - router vrf green Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 222 # UDP FORWARDING CONFIGURATION - GlobalRouter # UDP FORWARDING CONFIGURATION - VRF # UDP FORWARDING VLAN CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 223 # MCAST RESOURCE USAGE CONFIGURATION # MCAST MLT DISTRIBUTION CONFIGURATION # TIMED PRUNE CONFIGURATION # PGM CONFIGURATION # IPFIX CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 224 # DIAG CONFIGURATION # RADIUS CONFIGURATION # NTP CONFIGURATION ntp server 47.162.221.7 # NAAP CONFIGURATION # EAP CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 225 "IPVPN-Lite" remote-as 65000 neighbor "IPVPN-Lite" update-source 10.0.0.1 neighbor "IPVPN-Lite" route-refresh neighbor "IPVPN-Lite" address-family vpnv4 neighbor "IPVPN-Lite" ipvpn-lite-capability Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 226 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 227 # DVMRP POLICY CONFIGURATION - PORT # IPVPN CONFIGURATION router vrf green ipvpn rd 172.16.1.1 1 route-target import 65000 60010 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 228 4000 10 count enable filter acl ace ethernet 4000 10 vlan-id eq 10 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 229 # IP REDISTRIBUTE APPLY CONFIGURATIONS ip bgp apply redistribute rip vrf green ip bgp apply redistribute ospf vrf green Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 230: Site2 Acli Config
#!flags global-filter-ordering false #!flags r-mode true #!resource-reservation max-vlan false #!resource-reservation multicast 2048 #!flags multicast-check-packet true #!flags system-monitor true Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 231 1 address 47.162.221.7 syslog host 1 enable # LOG CONFIGURATION # LINK-FLAP-DETECT CONFIGURATION # IEEE VLAN AGING CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 232 "v3admvrf2" "vrf2" auth-priv read-view vrf write-view vrf notify-view vrf snmp-server group "v3usrvrf1" "vrf1" auth-priv read-view vrf Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 233 2 ip vrf internet vrfid 255 # TRAFFIC-FILTER CONFIGURATION # DVMRP CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 234 32 member 2/3,3/3 mlt 32 encapsulation dot1q interface mlt 1 smlt 1 exit interface mlt 2 smlt 2 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 235 12 name "L2-VLAN-12" type port 1 vlan mlt 12 1 vlan mlt 12 3 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 236 3992 name "VRF255-FW2" type port 1 vlan mlt 3992 32 vlan members 3992 2/3,3/3,4/10 portmember Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 237 # PORT CONFIGURATION - PHASE II interface GigabitEthernet 2/1 untagged-frames-discard default-vlan-id 10 enable-diffserv enable vlacp timeout short funcmac-addr 01:80:c2:00:00:0f vlacp enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 238 1 enable exit interface GigabitEthernet 4/1 untagged-frames-discard default-vlan-id 10 enable-diffserv enable exit Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 239 # IP ROUTE MAP CONFIGURATION - GlobalRouter # IP ROUTE MAP CONFIGURATION - VRF # IP CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 240 # VRRP CONFIGURATION - GlobalRouter # VRRP CONFIGURATION - VRF # UDP FORWARDING CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 241 # MROUTE CONFIGURATION # MCAST RESOURCE USAGE CONFIGURATION # MCAST MLT DISTRIBUTION CONFIGURATION # TIMED PRUNE CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 242 # POS CONFIGURATION # ATM CONFIGURATION # DIAG CONFIGURATION # RADIUS CONFIGURATION # NTP CONFIGURATION ntp server 47.162.221.7 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 243 10.0.0.1 peer-group "IPVPN-Lite" neighbor 10.0.0.3 peer-group "IPVPN-Lite" neighbor 10.0.0.4 peer-group "IPVPN-Lite" neighbor 10.0.0.5 peer-group "IPVPN-Lite" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 244 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 245 # RIP PORT CONFIGURATION # DVMRP POLICY CONFIGURATION - VLAN # DVMRP POLICY CONFIGURATION - PORT # IPVPN CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 246 4000 type inPort act 1 name "L2-VLANs" filter acl port 4000 4/1,4/3 filter acl ace 4000 10 name "L2-VLAN10" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 247 # IPV6 NEIGHBOR CONFIGURATION # MPLS CONFIGURATION # MPLS GLOBAL CONFIGURATION # IP ECMP APPLY CONFIGURATIONS Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 248: Site3 Acli Config
#!flags global-filter-ordering false #!flags r-mode true #!resource-reservation max-vlan false #!resource-reservation multicast 2048 #!flags multicast-check-packet true #!flags system-monitor true Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 249 1 enable # LOG CONFIGURATION # LINK-FLAP-DETECT CONFIGURATION # IEEE VLAN AGING CONFIGURATION # ACCESS-POLICY CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 250 "v3usrvrf2" "vrf2" auth-priv read-view vrf # SNMP V3 TARGET ADDRESS CONFIGURATION # SLOT CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 251 2 # TRAFFIC-FILTER CONFIGURATION # DVMRP CONFIGURATION # PIM CONFIGURATION # SVLAN-CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 252 13 1 vlan members 13 2/1-2/2,4/1,4/3 portmember vlan create 130 name "VRF1-VLAN-130" type port 1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 253 # PORT CONFIGURATION - PHASE II interface GigabitEthernet 2/1 untagged-frames-discard default-vlan-id 10 enable-diffserv enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 254 # IP AS LIST CONFIGURATION - VRF # IP COMMUNITY LIST CONFIGURATION - GlobalRouter # IP COMMUNITY LIST CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 255 # CIRCUITLESS IP INTERFACE CONFIGURATION - VRF exit # TOPOLOGY-CLIP-IP sys clipId-topology-ip # VRRP CONFIGURATION - GlobalRouter # VRRP CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 256 # PIM STATIC RP CONFIGURATION # PIM VIRTUAL NBR CONFIGURATION # MROUTE CONFIGURATION # MCAST RESOURCE USAGE CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 257 # ATM CONFIGURATION # DIAG CONFIGURATION # RADIUS CONFIGURATION # NTP CONFIGURATION ntp server 47.162.221.7 # NAAP CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 258 10.0.0.4 peer-group "IPVPN-Lite" neighbor 10.0.0.5 peer-group "IPVPN-Lite" neighbor "IPVPN-Lite" remote-as 65000 neighbor "IPVPN-Lite" update-source 10.0.0.3 neighbor "IPVPN-Lite" route-refresh Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 259 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 260 65000 60001 route-target export 65000 60010 ipvpn enable exit router vrf red ipvpn rd 172.16.3.2 2 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 261 4000 13 count enable filter acl ace ethernet 4000 13 vlan-id eq 13 filter acl ace 4000 13 enable Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 262: Site4 Acli Config
: ERS-8010 # software version : 5.0.0.0 # monitor version : 5.0.0.0 # cli mode : NNCLI Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 263 #!power slot-priority 4 high #!power slot-priority 7 high #!power slot-priority 8 high #!power slot-priority 9 high Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 264 # SSH CONFIGURATION # FAST HW RESET CONFIGURATION # MCAST SOFTWARE FORWARDING CONFIGURATION # MCAST SMLT CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 265 # SLOT CONFIGURATION # WEB CONFIGURATION # GLOBAL FDB FILTER CONFIGURATION # RMON CONFIGURATION # QOS CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 266 GigabitEthernet 4/3 encapsulation dot1q exit # MLT CONFIGURATION mlt 1 enable name "Site1-2" mlt 1 member 2/1-2/2 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 267 10.1.41.1 255.255.255.0 3 exit vlan create 240 name "VRF2-VLAN-240" type port 1 vlan members 240 4/1,4/3 portmember Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 268 01:80:c2:00:00:0f vlacp enable no spanning-tree stp 1 enable exit interface GigabitEthernet 4/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 269 # IP ROUTE MAP CONFIGURATION - GlobalRouter # IP ROUTE MAP CONFIGURATION - VRF # IP CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 270 # UDP FORWARDING CONFIGURATION - VRF # UDP FORWARDING VLAN CONFIGURATION # DHCP CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 271 # TIMED PRUNE CONFIGURATION # PGM CONFIGURATION # IPFIX CONFIGURATION ip ipfix enable interface GigabitEthernet 2/1 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 272 OSPF CONFIGURATION - GlobalRouter router ospf enable router ospf router-id 10.0.0.4 exit OSPF CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 273 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 274 # OSPF VLAN CONFIGURATION interface vlan 3998 ip ospf priority 0 exit interface vlan 3999 ip ospf priority 0 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 275 65000 60020 ipvpn enable exit # SLPP CONFIGURATION # R-MODULE FILTER CONFIGURATION filter act 1 name "L2-VLAN-ACT" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 276 # IPV6 TUNNEL CONFIGURATION # IPV6 OSPFV3 CONFIGURATION # IPV6 STATIC ROUTE CONFIGURATION # NET6-MGMT CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 277: Site5 Acli Config
5 8692SF 0x200e0100 0x00000000 CPU: CPLD=19 MEZZ=4 SFM: OP=3 TMUX=2 SWIP=23 FAD=16 CF=192 # Slot 0x00000001 0x00000000 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 278 1 syslog host 1 address 47.162.221.7 syslog host 1 enable # LOG CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 279 "v3adm" "vrf2" auth-priv read-view vrf write-view vrf notify-view vrf snmp-server group "v3usr" "" auth-priv read-view root snmp-server group "v3usr" "vrf1" auth-priv read-view vrf Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 280 # VRF CONFIGURATION ip vrf green vrfid 1 ip vrf red vrfid 2 # TRAFFIC-FILTER CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 281 # IP PREFIX LIST CONFIGURATION - VRF router vrf green exit router vrf red exit # VLAN CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 282 3999 name "GRT-IGP-OSPF2" type port 1 vlan mlt 3999 1 vlan members 3999 2/1-2/2 portmember interface Vlan 3999 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 283 # IPX CONFIGURATION # IPX ROUTE-MAP CONFIGURATION # IP CONFIGURATION # IP AS LIST CONFIGURATION - GlobalRouter Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 284 2 172.16.5.254/255.255.255.0 ip ospf 2 ip ipvpn-lite-capability 2 # CIRCUITLESS IP INTERFACE CONFIGURATION - VRF Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 285 # RIP VLAN CONFIGURATION # IGMP CONFIGURATION # PIM RP CONFIGURATION # PIM STATIC RP CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 286 4/3 enable exit # RSMLT CONFIGURATION # POS CONFIGURATION # ATM CONFIGURATION # DIAG CONFIGURATION Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 287 65000 enable router bgp quick-start enable neighbor "10.0.0.1" neighbor "10.0.0.4" Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 288 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 289 # DVMRP POLICY CONFIGURATION - VLAN # DVMRP POLICY CONFIGURATION - PORT # IPVPN CONFIGURATION router vrf green ipvpn Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 290 4000 11 permit remark-dot1p zero filter acl ace action 4000 11 permit police 11 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 291 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 292 Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 293: Reference Documentation
Configuration — BGP Services Avaya Ethernet Routing Switch 8600 NN46205-520 323790-A Rev 01 Configuration — IP VPN Network Design Implementation to Provide L2 & L3 VPN Connectivity November 2010 between Sites using SMLT and IPVPN-Lite for ERS 8600 Technical Configuration Guide...
Page 294: Customer Service
6. Customer service Visit the Avaya Web site to access the complete range of services and support that Avaya provides. Go www.avaya.com or go to one of the pages listed in the following sections. 6.1 Getting technical documentation To download and print selected technical publications and release notes directly from the Internet,go to www.avaya.com/support.

Avaya 8600 Technical Configuration Manual

Document Updates

Conventions

1 Overview

2 Configuration

3 Verification

4 Complete Configuration Files

5 Reference Documentation

6 Customer Service

Quick Links

Related Manuals for Avaya 8600

Summary of Contents for Avaya 8600

Table of Contents