Extreme Networks BlackDiamond 6800 MPLS Installation And User Manual page 133

Using ESRP with MPLS TLS
The following commands create a tagged ESRP VLAN over which ESRP control packets
flow. Tagging the VLAN separates the customer's local traffic from the ESRP control
packets and prevents OSPF routes from the MPLS service provider domain from
leaking into the customer's VLAN:
create vlan mplsesrp
config vlan mplsesrp tag 1234
config vlan mplsesrp ipaddress 10.10.10.1/32
config vlan mplsesrp add port 2:24 tagged
The ESRP VLAN must be OSPF-enabled so that the router interface is advertised into
the MPLS domain. The ESRP router interface is used as the LSP destination for the TLS
tunnel. By configuring a TLS tunnel using the ESRP VLAN router interface, the TLS
tunnel can migrate between switches as switches change ESRP state:
config ospf add vlan mplsesrp area 0.0.0.0
config ospf vlan mplsesrp cost 10
The following command enables ESRP on VLAN mplsesrp. The ESRP VLAN and the
TLS VLAN must have the same port membership. In this example, port 2:24 is a
member of both VLANs:
enable esrp vlan mplsesrp
The following command enables ESRP and VLAN mplsesrp and unc:
enable esrp vlan unc
The following command creates a TLS tunnel from VLAN unc to the master switch
providing connectivity for VLAN unc-wilmington:
config mpls add tls-tunnel rt40 10.10.10.2 unc tls-labels 8f001 8f004
From an ESRP perspective, LSR 5 is configured identically as LSR 1. The TLS tunnel
command is slightly different, as follows:
config mpls add tls-tunnel rt40 10.10.10.1 unc-wilmington tls-labels 8f004
8f001
MPLS Module Installation and User Guide 7-23