Configuring G.8032 Ethernet Ring Protection: Example - Cisco ASR 9000 Series Configuration Manuallines
L2vpn and ethernet services configuration guide
Hide thumbs
Also See for ASR 9000 Series:
- Command reference manual (1138 pages) ,
- Routing configuration manual (702 pages) ,
- Reference manual (696 pages)
Table of Contents
Advertisement
Implementing Multipoint Layer 2 Services
...
IP Source Guard: enabled, Logging: enabled
...
IP source guard drop counters:
This example shows the output of the show l2vpn forwarding interface interface-name detail location
location-name command:
# show l2vpn forwarding interface g0/0/0/1.10 detail location 0/0/CPU0
Local interface: GigabitEthernet0/0/0/1.10, Xconnect id: 0x40001, Status: up
...
This example shows the logging display:
LC/0/0/CPU0:Jun 16 13:32:25.334 : l2fib[188]: %L2-L2FIB-5-SECURITY_IPSG_VIOLATION_AC : IP
source guard in AC
0000.0000.0200, destination MAC: 0000.0003.0000, source IP: 130.0.0.1, destination IP:
125.34.2.5
LC/0/5/CPU0:Jun 16 13:33:25.530 : l2fib[188]: %L2-L2FIB-5-SECURITY_IPSG_VIOLATION_AC : IP
source guard in AC Bundle-Ether100.100 detected violated packet - source MAC: 0000.0000.0064,
destination MAC: 0000.0040.0000, source IP: 14.5.1.3, destination IP: 45.1.1.10
Configuring G.8032 Ethernet Ring Protection: Example
This sample configuration illustrates the elements that a complete G.8032 configuration includes:
# Configure the ERP profile characteristics if ERP instance behaviors are non-default.
ethernet ring g8032 profile ERP-profile
timer wtr 60
timer guard 100
timer hold-off 1
non-revertive
# Configure CFM MEPs and configure to monitor the ring links.
ethernet cfm
domain domain1
continuity-check interval 100ms
mep crosscheck
mep-id 2
domain domain2
continuity-check interval 100ms
mep crosscheck
mep id 2
Interface Gig 0/0/0/0
ethernet cfm mep domain domain1 service link1 mep-id 1
Interface Gig 1/1/0/0
ethernet cfm mep domain domain2 service link2 mep-id 1
# Configure the ERP instance under L2VPN
l2vpn
packets: 1000, bytes: 64000
IP Source Guard: enabled, Logging: enabled
GigabitEthernet0_0_0_7.1001 detected violated packet - source MAC:
service link1 down-meps
efd
service link2 down-meps
efd protection-switching
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
Configuring G.8032 Ethernet Ring Protection: Example
343
Advertisement
Table of Contents
