Table of Contents
Advertisement
Configuring MPLS Layer-2 VPNs
Adding a TLS Tunnel
To add a static labeled TLS tunnel, use the following command:
config mpls add tls-tunnel <tunnel_name> [lsp <lsp_name> | <ipaddress> |
<host_name>] <local_vlan_name> tls-labels <ingress_label> <egress_label>
To add a dynamic labeled TLS tunnel (martini-draft compliant), use the following
command:
config mpls add tls-tunnel <tunnel_name> [lsp <lsp_name> | <ipaddress> |
<host_name>] <local_vlan_name> vcid <vcid> <groupid>
The
parameter is a character string that is to be used to identify the TLS
<tunnel_name>
tunnel within the switch. It must begin with an alphabetic character and can contain up
to 31 additional alphanumeric characters.
The
parameter identifies the peer LSR that is the endpoint of the tunnel.
<ipaddress>
This IP address should be configured with a 32-bit prefix on the peer LSR. When the
peer LSR is also an Extreme switch, either OSPF must also be enabled on the VLAN to
which the IP address is assigned (using the
peer switch), or the peer switch must be configured to distribute direct routes into the
OSPF domain (using the
command should be used when the tunnel LSP needs to cross OSPF area boundaries or
when ESRP is enabled on the VLAN to which the IP address is assigned.
The
parameters are used to configure dynamic TLS tunnels when full
<vcid>
martini-draft TLS tunnel compliance is desired. The
advertised on a targeted LDP session to the specified tunnel endpoint ipaddress in a
martini-draft defined FEC-TLV. Each LER advertises the vcid, groupid, and VLAN label
in the Label Mapping message across an LDP session. This three-tuple TLS tunnel
information allows each egress LER to dynamically bind the TLS tunnel to a local
VLAN. The vcid is a non-zero 32-bit ID that defines the tunnel connection and the
optionally specified groupid is a 32-bit value that defines logical virtual tunnel
connection group. The groupid value defaults to zero if not explicitly configured.
The
<local_vlan_name>
transported. All of the local traffic received by the switch for this VLAN is transported
across the tunnel.
The
parameters specify the innermost labels of the tunnel label stack and
tls-labels
are used to configure static TLS label tunnels. The
7-8
config ospf add vlan
enable ospf export direct
parameter identifies the Layer-2 traffic that is to be
command on the
command). The
and
values are
vcid
groupid
is inserted into the
<egress_label>
MPLS Module Installation and User Guide
ospf export
Advertisement
Table of Contents
