Download Print this page

Advertisement

Quick Links

LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1
7450 ETHERNET SERVICE SWITCH
7750 SERVICE ROUTER
7950 EXTENSIBLE ROUTING SYSTEM
VIRTUALIZED SERVICE ROUTER
LAYER 2 SERVICES AND EVPN GUIDE
RELEASE 19.5.R1
3HE 15084 AAAA TQZZA 01
Issue: 01
May 2019
Nokia — Proprietary and confidential.
Use pursuant to applicable agreements.

Advertisement

loading
Need help?

Need help?

Do you have a question about the 7450 and is the answer not in the manual?

Questions and answers

Summary of Contents for Nokia 7450

  • Page 1 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 7450 ETHERNET SERVICE SWITCH 7750 SERVICE ROUTER 7950 EXTENSIBLE ROUTING SYSTEM VIRTUALIZED SERVICE ROUTER LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3HE 15084 AAAA TQZZA 01 Issue: 01 May 2019 Nokia — Proprietary and confidential.
  • Page 2 © 2019 Nokia. Contains proprietary/trade secret information which is the property of Nokia and must not be made available to, or copied or used by anyone outside Nokia without its written authorization. Not to be used or disclosed except in accordance with applicable agreements.
  • Page 3 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table of Contents Getting Started................19 About This Guide..................19 Layer 2 Services and EVPN Configuration Process........21 VLL Services .................23 ATM VLL (Apipe) Services ...............23 2.1.1 Apipe For End-to-End ATM Service ............23 2.1.2 ATM Virtual Trunk Over IP/MPLS Packet Switched Network....24 2.1.3 Traffic Management Support ..............25 2.1.3.1...
  • Page 4 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.5.3 Extension to IP VLL for Discovery of Ethernet CE IP Address....55 2.5.3.1 VLL Ethernet SAP Processes..............56 2.5.4 IPv6 Support on IP Interworking VLL ............59 2.5.4.1 IPv6 Datapath Operation ................59 2.5.4.2 IPv6 Stack Capability Signaling..............61 Services Configuration for MPLS-TP............63 2.6.1 MPLS-TP SDPs..................63...
  • Page 5 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.8.10.4 BGP-MH Specifics for MH Site Support for Ethernet Tunnels....117 2.8.10.5 PW Redundancy for BGP-MH Site Support for Ethernet Tunnels...118 2.8.10.6 T-LDP Status Notification Handling Rules of BGP-MH Epipes ....118 2.8.11 Access Node Resilience Using MC-LAG and Pseudowire Redundancy ....................129 2.8.12 VLL Resilience for a Switched Pseudowire Path........131...
  • Page 6 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.15.5 Pseudowire Configuration Notes .............195 2.15.6 Configuring Two VLL Paths Terminating on T-PE2.........197 2.15.7 Configuring VLL Resilience ..............199 2.15.8 Configuring VLL Resilience for a Switched Pseudowire Path ....200 2.15.9 Configuring BGP Virtual Private Wire Service (VPWS)......202 2.15.9.1 Single-Homed BGP VPWS..............202 2.15.9.2...
  • Page 7 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.18 VLL Show Command Reference .............417 2.18.1 Command Hierarchies................417 2.18.1.1 Show Commands ..................417 2.18.1.2 Clear Commands..................418 2.18.1.3 Debug Commands...................418 2.18.1.4 Tools Commands ..................419 2.18.2 Command Descriptions ................419 2.18.2.1 VLL Show Commands................419 2.18.2.2 VLL Clear Commands ................466 2.18.2.3 VLL Debug Commands ................470...
  • Page 8 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.10.4 Support for Single Chassis Endpoint Mechanisms........521 3.2.10.5 Using B-VPLS for Increased Scalability and Reduced Convergence Times ................524 3.2.10.6 MAC Flush Additions for PBB VPLS ............525 3.2.11 VPLS Access Redundancy..............528 3.2.11.1 STP-based Redundant Access to VPLS ..........529 3.2.11.2 Redundant Access to VPLS Without STP ..........529 3.2.12...
  • Page 9 VPLS SAP Ingress IP Filter Override ............581 3.3.7.2 IP Interface Defined Egress QoS Reclassification ........582 3.3.7.3 Remarking for VPLS and Routed Packets ..........582 3.3.7.4 7450 Mixed Mode Chassis ..............582 3.3.7.5 IPv4 Multicast Routing................582 3.3.7.6 R-VPLS Supported Routing-related Protocols ........583 3.3.7.7 Spanning Tree and Split Horizon.............583...
  • Page 10 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.5.3.3 Configuring GSMP Parameters ...............612 3.5.3.4 Configuring a VPLS SAP.................613 3.5.3.5 Configuring SAP Subscriber Management Parameters ......623 3.5.3.6 MSTP Control over Ethernet Tunnels............624 3.5.3.7 Configuring SDP Bindings ...............625 3.5.3.8 Configuring Overrides on Service SAPs..........626 3.5.4 Configuring VPLS Redundancy...............637 3.5.4.1...
  • Page 11 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.7.2.6 VPLS Multicast Commands..............921 3.7.2.7 Redundancy Commands .................950 VPLS Show, Clear, Debug, and Tools Command Reference ....957 3.8.1 Command Hierarchies................957 3.8.1.1 Show Commands ..................957 3.8.1.2 Clear Commands..................960 3.8.1.3 Debug Commands...................962 3.8.1.4 Tools Commands ..................964 3.8.2 Command Descriptions ................964 3.8.2.1...
  • Page 12 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 4.2.12.1 I-VPLS Changes and Related MMRP Behavior ........1164 4.2.12.2 Limiting the Number of MMRP Entries on a Per B-VPLS Basis ....1164 4.2.12.3 Optimization for Improved Convergence Time ........1164 4.2.12.4 Controlling MRP Scope using MRP Policies .........1165 4.2.13 PBB and BGP-AD..................1168 4.2.14...
  • Page 13 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 4.4.2.3 BGP-MH for I-VPLS Commands ............1254 PBB Show, Clear, and Debug Command Reference ......1263 4.5.1 Command Hierarchies................1263 4.5.1.1 Show Commands ..................1263 4.5.1.2 Clear Commands...................1264 4.5.1.3 Debug Commands.................1264 4.5.2 Command Descriptions .................1265 4.5.2.1 PBB Show Commands ................1265 4.5.2.2 PBB Clear Commands ................1294...
  • Page 14 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 5.2.4 Layer 2 Multicast Optimization for VXLAN (Assisted-Replication) ..1389 5.2.4.1 Replicator (AR-R) Procedures...............1390 5.2.4.2 Leaf (AR-L) procedures .................1392 5.2.4.3 Assisted-Replication Interaction with Other VPLS Features ....1395 5.2.5 DC GW Policy Based Forwarding/Routing to an EVPN ESI ....1396 5.2.5.1 Policy Based Forwarding in VPLS Services for Nuage Service Chaining Integration in L2-Domains ............1396...
  • Page 15 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 5.3.14.2 BUM Traffic in Inter-AS Option B and VPN-NH-RR Networks ....1524 5.3.14.3 EVPN Multi-Homing in Inter-AS Option B and VPN-NH-RR Networks....................1525 5.3.14.4 EVPN E-Tree in Inter-AS Option B and VPN-NH-RR Networks....1526 General EVPN Topics ................1527 5.4.1 ARP/ND Snooping and Proxy Support ..........1527 5.4.1.1...
  • Page 16 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 5.4.17.1 Routing Policies for BGP EVPN IP Prefixes..........1587 Configuring an EVPN Service with CLI ..........1591 5.5.1 EVPN-VXLAN Configuration Examples..........1591 5.5.1.1 Layer 2 PE Example ................1591 5.5.1.2 EVPN for VXLAN in R-VPLS Services Example ........1592 5.5.1.3 EVPN for VXLAN in EVPN Tunnel R-VPLS Services Example ....1594 5.5.1.4...
  • Page 17 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 6.4.3.3 ESM Termination...................1759 6.4.4 Configuration Steps ................1760 6.4.5 Fragmentation and MTU Configuration ..........1762 6.4.6 Reassembly ..................1764 Pseudowire Ports Command Reference ..........1767 6.5.1 Command Hierarchies................1767 6.5.1.1 PW-port Configuration Commands............1767 6.5.1.2 Redundant Interface Commands............1767 6.5.1.3 Show Commands ..................1768 6.5.2...
  • Page 18 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 19 RELEASE 19.5.R1 1 Getting Started 1.1 About This Guide This guide describes Layer 2 service and EVPN functionality provided by the Nokia family of routers and presents examples to configure and implement various protocols and services. This guide is organized into functional chapters and provides concepts and descriptions of the implementation flow, as well as Command Line Interface (CLI) syntax and command usage.
  • Page 20 Getting Started LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Note: This guide generically covers Release 19.x.Rx content and may contain some content that will be released in later maintenance loads. Refer to SR OS 19.x.Rx Software Release Notes, part number 3HE 15407 000x TQZZA, for information about features supported in each load of the Release 19.x.Rx software.
  • Page 21 LAYER 2 SERVICES AND EVPN GUIDE Getting Started RELEASE 19.5.R1 1.2 Layer 2 Services and EVPN Configuration Process Table 2 lists the tasks related to configuring and implementing Layer 2 Services and EVPN functionality. This guide is presented in an overall logical configuration flow. Each section describes a software area and provides CLI syntax and command usage to configure parameters for a functional area.
  • Page 22 Getting Started LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 23 An Apipe provides a point-to-point ATM service between users connected to 7450 ESS or 7750 SR nodes on an IP/MPLS network. Users are either directly connected to a PE or through an ATM access network. In both cases, an ATM PVC (for example, a virtual channel (VC) or a virtual path (VP)) is configured on the PE.
  • Page 24 OSSG053 2.1.2 ATM Virtual Trunk Over IP/MPLS Packet Switched Network For 7450 ESS or 7750 SR OS, ATM virtual trunk (VT) implements a transparent trunking of user and control traffic between two ATM switches over an ATM pseudowire. Figure 2 shows ATM 2 and ATM 3 switches that appear as if they are directly connected over an ATM link.
  • Page 25 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 The VT SAP on a PE is identified by a tuple (port, VPI-range) meaning that all cells arriving on the specified port within the specified VPI range are fed into a single ATM pseudowire for transport across the IP/MPLS network.
  • Page 26 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.1.3.2 Ingress Queuing and Shaping on the IOM Each SAP of an ATM VLL has an associated single ingress service queue on the IOM. The default QoS policy configures this queue to have CIR=0 and PIR=line rate. Other QoS policies can be applied if they specify a single service queue.
  • Page 27 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Shaping and scheduling of egress ATM VLL traffic is performed entirely at the ATM layer and is, therefore, not forwarding-class-aware. If the offered rate is greater than can be transmitted toward the customer (either because the shaping rate limits transmission or because the SAP does not receive sufficient servicing in the weighed round-robin used for scheduled SAPs), the per-VC queue will begin to discard traffic.
  • Page 28 CSR roles, and transport acronyms used in Figure 3. With a channelized OC3/STM1 CES MDA in the 7750 SR, Nokia can provide a converged, flexible solution for IP/MPLS infrastructures for 2G/2.5G/3G mobile networks supporting both the CES (by CES MDA) and ATM/IMA transported traffic (by the ASAP MDA).
  • Page 29 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 3 Mobile Infrastructure Access Core (MTSO) PSTN Node B BTS VoIP Peers Node B IP/MPLS Aggregation Network IP/MPLS Core Network Node B SGSN GGSN Data Peers OSSG184 Table 4 Mobile Infrastructure Definitions Cellsite Backhaul Type CSR Role...
  • Page 30 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 RFC 4553 (SAToP) MPLS PSN Encapsulation: 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ MPLS Label Stack +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+...
  • Page 31 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 |VLP|C| VLAN ID (opt) Ethertype +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ECID (20 bits) RES (set to 0x102) +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | RES(0)|L|R| M |FRG| Length Sequence Number +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ opt|RTV|P|X| RTP Sequence Number +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ opt| Timestamp +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ opt| SSRC identifier +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+...
  • Page 32 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.2.3.2 Absolute Mode Option For all circuit emulation channels except those with differential clock sources, RTP headers in absolute mode can be optionally enabled (disabled by default). For circuit emulation channels that use differential clock sources, this configuration is blocked. All channel groups on a specific DS1 or E1 can be configured for the same mode of operation.
  • Page 33 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 The full ABCD signaling value can be derived before the packet is sent. This occurs for every 24 frames for DS1 ESF and every 16 frames for E1. For DS1 SF, ABAB signaling is actually sent because SF framing only supports AB signaling every 12 frames.
  • Page 34 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 6 Structured Number of Default Frames (Continued) No CAS DS1 CAS E1 CAS Timeslots num- Default Minimum Payload Packet Payload Packet frames Payload Payload Size Size default Frames) Frames) Note: num-frames DS1 CAS are multiples of 24;...
  • Page 35 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 5<=N<=15, 8 ms N>=16, 5 ms 2.2.3.5 CES Circuit Operation The circuit status can be tracked to be either up, loss of packets, or administratively down. Statistics are available for the number of in-service seconds and the number of out-of-service seconds when the circuit is administratively up.
  • Page 36 If a CES circuit is being used for adaptive clock recovery at the remote end (such that the local end is now an adaptive clock master), Nokia recommends setting the DS- 1/E-1 to be node-timed to prevent potential jitter issues in the recovered adaptive clock at the remote device.
  • Page 37 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.2.6 Cpipe Payload Figure 4 shows the format of the CESoPSN TDM payload (with and without CAS) for packets carrying trunk-specific 64 kb/s service. In CESoPSN, the payload size is dependent on the number of timeslots used.
  • Page 38 This section provides information about the Epipe service and implementation. 2.3.1 Epipe Service Overview An Epipe service is the Nokia implementation of an Ethernet VLL based on the IETF “Martini Drafts” (draft-martini-l2circuit-trans-mpls-08.txt and draft-martini-l2circuit- encapmpls-04.txt) and the IETF Ethernet Pseudowire Draft (draft-so-pwe3-ethernet- 00.txt).
  • Page 39 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.3.2 Epipe Service Pseudowire VLAN Tag Processing Distributed Epipe services are connected using a pseudowire, which can be provisioned statically or dynamically and is represented in the system as a spoke- SDP.
  • Page 40 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • The following are not supported with force-qinq-vc-forwarding [c-tag-c-tag | s-tag-c-tag] configured under the spoke-SDP, or in the related PW template: −Multi-segment pseudowires. −PBB-Epipe services −force-vlan-vc-forwarding under the same spoke-SDP or PW template −Eth-CFM LM tests are NOT supported on UP MEPs when force-qinq-vc- forwarding is enabled.
  • Page 41 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 7 Epipe Spoke-SDP VLAN Tag Processing: Ingress (Continued) Ingress (Received on Zero VLAN Tags One VLAN Tag Two VLAN Tags (enabled by Spoke-SDP) force-qinq-vc-forwarding [c- tag-c-tag | s-tag-c-tag] Qos (dot1p/DE) Dot1p/DE=0 Dot1p/DE taken from Dot1p/DE taken as follows:...
  • Page 42 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 8 Epipe-Spoke SDP VLAN Tag Processing: Egress Egress (Sent on Mesh Zero VLAN Tags One VLAN Tag Two VLAN Tags (enabled by or Spoke-SDP) force-qinq-vc-forwarding [c- tag-c-tag | s-tag-c-tag] VLAN identifiers (set in The tag is derived from one of The inner and outer VLAN tags...
  • Page 43 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 8 Epipe-Spoke SDP VLAN Tag Processing: Egress (Continued) Egress (Sent on Mesh Zero VLAN Tags One VLAN Tag Two VLAN Tags (enabled by or Spoke-SDP) force-qinq-vc-forwarding [c- tag-c-tag | s-tag-c-tag] Ethertype (set in VLAN 0x8100 or value configured Both inner and outer VLAN...
  • Page 44 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 8 Epipe-Spoke SDP VLAN Tag Processing: Egress (Continued) Egress (Sent on Mesh Zero VLAN Tags One VLAN Tag Two VLAN Tags (enabled by or Spoke-SDP) force-qinq-vc-forwarding [c- tag-c-tag | s-tag-c-tag] •...
  • Page 45 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 becomes operationally down, the operational state of the Epipe will not transition to down. The operational state of the Epipe will remain up. This does not change that the SAP is down and no traffic can transit an operationally down SAP. Removing and adding this command on the fly will evaluate the operational state of the service, based on the SAPs and the addition or deletion of this command.
  • Page 46 Because the IPv6 addressing uniqueness identifies the customer and service binding, the L2TPv3 control plane is disabled in this mode. L2TPv3 is supported on non-12e 7750 SR and 7450 ESS (mixed mode) and 7950 XRS platforms. ETH-CFM is supported for OAM services.
  • Page 47 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 7 Application of Ethernet Interworking VLL APS Protected ATM Switching/ Links FRF.8.2 IWF ATM/FR Ethernet-MPLS ATM1 Network IWF Ethernet Ethernet 7750 SR 7750 SR ATM2 (VLAN) UNI PVC/SPVC IP/MPLS PE 2 PE 1 FRF8.2...
  • Page 48 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The service manager keeps track of the available bandwidth for each SDP. The SDP available bandwidth is applied through a configured booking factor. An administrative bandwidth value is assigned to the spoke-SDP. When a VLL service is bound to an SDP, the amount of bandwidth is subtracted from the adjusted available SDP bandwidth.
  • Page 49 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 8 MC-Ring in a Combination with VLL Service sap-3 sap-3 BSA-3 BSA-3 sdp-2 sdp-1 sdp-2 sdp-1 Active Standby Standby Active BSA-1 BSA-2 BSA-1 BSA-2 Master Standby Standby Master sap-1 sap-2 sap-1 sap-2...
  • Page 50 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.4 Frame Relay VLL (Fpipe) Services This section provides information about the Frame Relay VLL (Fpipe) service and implementation. Fpipe is supported for the 7750 SR only. 2.4.1 Frame Relay VLL Figure 9 shows an application of a Frame Relay VLL.
  • Page 51 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.4.2 Frame Relay-to-ATM Interworking (FRF.5) VLL Figure 10 provides an example of a point-to-point Frame Relay service between users where one user is connected to an existing ATM network, the other to a 7750 SR PE node on an IP/MPLS network.
  • Page 52 The drop preference is set to high. 2.4.3.3 Egress Network EXP Marking FC-to-EXP mapping is supported for the 7450 ESS and 7750 SR only and is as per the Network Egress QoS policy. Marking of the EXP field in both label stacks is performed.
  • Page 53 Ethernet interface. Both hosts appear to be on the same LAN segment. This feature is supported for the 7450 ESS and 7750 SR and enables service interworking between different link layer technologies. A typical use of this...
  • Page 54 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The Frame Relay SAP uses RFC 2427, Multiprotocol Interconnect over Frame Relay, routed PDU encapsulation of an IPv4 packet. A PPP interface uses RFC 1332, The PPP Internet Protocol Control Protocol (IPCP), PPP IPCP encapsulation of an IPv4 packet.
  • Page 55 ARP request message received from the FR-attached CE device. Only Ethernet SAP and FR SAP can learn the CE address through ARP and invFR ARP, respectively. The 7450 ESS and 7750 SR OS do not support invATM ARP on an ATM interface.
  • Page 56 ARP request message or of the target IP address being resolved. • The 7450 ESS, 7750 SR, and 7950 XRS routers will always reply to a received ARP request message from the Ethernet SAP with the SAP MAC address and a source IP address of the target IP address being resolved without any further check of the latter.
  • Page 57 VLL FR SAP Procedures The operator enables the following CE address dynamic learning procedures by enabling the ce-address-discovery option under the VLL service on the 7450 ESS or 7750 SR. • Allow the service to come up without the CE address parameter configured at both the SAP and spoke-SDP.
  • Page 58 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • If the remote PE included the address list TLV in the received label mapping message, the local router updates the remote PE node with the most current IP address of the FR CE using a T-LDP status notification message containing an LDP address list.
  • Page 59 PE in both PPP and Cisco-HDLC SAP cases. 2.5.4 IPv6 Support on IP Interworking VLL The 7450 ESS, 7750 SR, and 7950 XRS nodes support both the transport of IPv6 packets and the interworking of IPv6 Neighbor discovery/solicitation messages on an IP Interworking VLL.
  • Page 60 CE3[2001:fc3:85a7:: 3/1/1:100 812e:e70:7334/128] CE4[2001:fc3:85a7:: 812e:e70:7335/128] OSSG482-7450 With reference to neighbor discovery between Ethernet and PPP CEs in Figure the steps are as follows: 1. Ethernet-attached CE2 sends a Neighbor Solicitation message toward PE2 in order to begin the neighbor discovery process.
  • Page 61 LDP status code “IP Address type mismatch”. If a 7750 SR, 7450 ESS, and 7950 XRS PE that supports IPv6 (that is, stack- capability-signaling ipv6 is enabled) has not yet sent a label mapping message for...
  • Page 62 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 If the IPv6 stack is not supported by both PEs, or at least one of the PEs does support IPv6 but does not have the ce-address-discovery ipv6 option selected in the CLI, IPv6 packets received from the AC are discarded by the PE.
  • Page 63 2.6 Services Configuration for MPLS-TP MPLS-TP PWs are supported in Epipe, Apipe, and Cpipe VLLs and Epipe spoke termination on IES/VPRN and VPLS, I-VPLS, and B-VPLS on the 7450 ESS and 7750 SR only. This section describes how SDPs and spoke-SDPs are used with MPLS-TP LSPs and static pseudowires with MPLS-TP OAM.
  • Page 64 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The far-end node-id ip-address global-id global-id command is used to associate an SDP far end with an MPLS-TP tunnel whose far-end address is an MPLS-TP node ID. If the SDP is associated with an RSVP-TE LSP, the far end must be a routable IPv4 address.
  • Page 65 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.6.2 VLL Spoke SDP Configuration The system can be a T-PE or an S-PE for a pseudowire (a spoke-SDP) supporting MPLS-TP OAM. MPLS-TP related commands are applicable to spoke-SDPs configured under all services supported by MPLS-TP pseudowires. All commands and functions that are applicable to spoke-SDPs are supported, except for those that explicitly depend on T-LDP signaling of the pseudo-wire, or as stated following.
  • Page 66 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The control-channel-status command enables static pseudowire status signaling. This is valid for any spoke-SDP where signaling none is configured on the SDP (for example, where T-LDP signaling is not in use). The refresh timer is specified in seconds, from 10-65535, with a default of 0 (off).
  • Page 67 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • control-word is enabled (control-word by default is disabled) • the service type is Epipe, Apipe, VPLS, Cpipe, or IES/VPRN interface • pw-status-signaling is enabled (as follows) • pw-path-id is configured for this spoke The hash-label option is only configurable if SDP far end is not node-id/global-id.
  • Page 68 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.6.2.1 Epipe VLL Spoke SDP Termination on IES, VPRN, and VPLS All existing commands (except for those explicitly specified following) are supported for spoke-SDP termination on IES, VPRN, and VPLS (VPLS, I-VPLS and B-VPLS and routed VPLS) services.
  • Page 69 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 MPLS-TP provides the ability to conduct test service throughput for PWs, using lock instruct messages and loopback configuration. To conduct a service throughput test, you can apply an administrative lock at each end of the PW. This creates a test service that contains the SAP connected to the external device.
  • Page 70 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • If a VPLS interface is paired to a spoke-SDP that is administratively locked, the L2 interface is taken down locally. • Control-channel-status must be shutdown prior to administratively locking a spoke-SDP.
  • Page 71 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • TDM E1, E3, DS0, DS3, and so on The following constraints and conditions apply: • Up to a maximum of 16 test services can be configured per system. • It is possible to configure access ingress and access egress QoS policies on a test SAP, as well as any other applicable SAP-specific commands and overrides.
  • Page 72 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • The lock can be configured at a spoke-SDP that is bound to a VLL SAP or a VPLS interface. • The test-svc-id parameter refers to the test service that should be used to inject test traffic into the service.
  • Page 73 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • The spoke-SDP cannot be an ICB or be bound to a VPLS interface. • A PW path ID must be configured, that is, the spoke-SDP must be static and use MPLS-TP identifiers.
  • Page 74 The use of VCCV Ping and VCCV Trace on an MS-PW composed of a mix of static MPLS-TP and dynamic FEC128 segments is described in more detail in the 7450 ESS, 7750 SR, 7950 XRS, and VSR OAM and Diagnostics Guide. 3HE 15084 AAAA TQZZA 01...
  • Page 75 This section provides information about VCCV BFD support for VLL, spoke-SDP Termination on IES and VPRN, and VPLS Services. VCCV BFD is supported on the 7450 ESS and 7750 SR only. 2.7.1 VCCV BFD Support The SR OS supports RFC 5885, which specifies a method for carrying BFD in a pseudowire-associated channel.
  • Page 76 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.7.2 VCCV BFD Encapsulation on a Pseudowire The SR OS supports IP/UDP encapsulation for BFD. With this encapsulation type, the UDP headers are included on the BFD packet. IP/UDP encapsulation is supported for pseudowires that use router alert (VCCV Type 2), and for pseudowires with a control word (VCCV Type 1).
  • Page 77 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.7.4 Configuring VCCV BFD Generic BFD session parameters are configured for VCCV using the bfd-template command, in the config>router>bfd context. However, there are some restrictions. For VCCV, the BFD session cannot terminate on the CPM network processor. Therefore, an error is generated if the user tries to bind a BFD template using the type cpm-np command within the config>router>bfd>bfd-template context.
  • Page 78 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 For IES and VPRN spoke-SDP termination where the pseudowire template does not apply (that is, where the spoke-SDP is signaled with LDP and uses the pseudowire ID FEC (FEC128)), the BFD template is configured using the config service ies | vprn if spoke-sdp bfd-template name command, then enabled using the config service ies | vprn if spoke-sdp bfd-enable command.
  • Page 79 Also, the user configures an Epipe VLL service on the pseudowire switching node using the two SDPs. |7450 ESS, 7750 SR, and 7950 XRS PE1 (Epipe)|---sdp 2:10---|7450 ESS, 7750 SR, and 7950 XRS PW SW (Epipe)|---sdp 7:15---|7450 ESS, 7750 SR, and 7950 XRS PE2 (Epipe)|...
  • Page 80 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Configuration examples are in Configuring Two VLL Paths Terminating on T-PE2. 2.8.1 Pseudowire Switching with Protection Pseudowire switching scales VLL and VPLS services over a multi-area network by removing the need for a full mesh of targeted LDP sessions between PE nodes. Figure 14 shows the use of pseudowire redundancy to provide a scalable and resilient VLL service across multiple IGP areas in a provider network.
  • Page 81 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 14 VLL Resilience with Pseudowire Redundancy and Switching Primary PW Access Node Standby PW 7x50 T-PE2 7x50 T-PE3 Metro area B SDP6:600 SDP3:300 7x50 7x50 7x50 S-PE3 7x50 S-PE4 PW switching PW switching Core area...
  • Page 82 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.8.2 Pseudowire Switching Behavior In the network in Figure 14, PE nodes act as masters and pseudowire switching nodes act as slaves for the purpose of pseudowire signaling. This is because a switching node will need to pass the SAP interface parameters of each PE to the other.
  • Page 83 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |1|0| pw sw TLV...
  • Page 84 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 When the label mapping for the egress direction is also received from the T-LDP peer, and the information in the FEC matches that of the local configuration, the static-to-dynamic cross-connect is created. It is possible that end nodes of a static pseudowire segment can be misconfigured.
  • Page 85 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 15 Ingress VLAN Swapping C-VLAN= application L-VLAN= DSL line Lb= VC label D-VLAN= DSLAM MPLS network Payload Payload Payload Payload Service per application SAP per per DSLAM DSLAM Service per application SAP per DSL &...
  • Page 86 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.8.5 Pseudowire Redundancy Pseudowire redundancy provides the ability to protect a pseudowire with a pre- provisioned secondary standby pseudowire and to switch traffic over to that secondary standby pseudowire in case of a SAP and/or network failure condition. Normally, pseudowires are redundant by the virtue of the SDP redundancy mechanism.
  • Page 87 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 17 Dynamic MS-PW Overview Fully qualified info in signalled FEC allows T-PE/S-PE to select next hop T-LDP T-LDP T-PE T-LDP S-PE MPLS MPLS T-PE MS-PW T-PE S-PE MPLS tunnel FEC 129 provides a unique key for the MPLS...
  • Page 88 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The AII type is mapped into the MS-PW BGP NLRI (a BGP AFI of L2VPN, and SAFI for network layer reachability information for dynamic MS-PWs). As soon as a new T- PE is configured with a local prefix address of global id: prefix, pseudowire routing will proceed to advertise this new address to all the other T- PEs and S-PEs in the network, as depicted in...
  • Page 89 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 20 Signaling of Dynamic MS-PWs using T-LDP T-PE1 (IP1) provisioning: T-PE2 (IP2) provisioning: 1’ SAII (GID:Prefix: AC ID) = 1:IP1:100 SAII (GID:Prefix:AC ID) = 1:IP2:200 TAII (GID:Prefix:AC ID) = 1:IP2:200 TAII (GID:Prefix:AC ID) = 1:IP1:100 Before sending LM: On LM receipt:...
  • Page 90 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Before T-LDP signaling starts, the two T-PEs decide on an active and passive relationship using the highest AII (comparing the configured SAII and TAII) or the configured precedence. Next, the active T-PE (in the IETF draft, this is referred to as the source T-PE or ST-PE) checks the PW routing table to determine the next signaling hop for the configured TAII using the longest match between the TAII and the entries in the PW routing table.
  • Page 91 MS-PW routing parameters are configured in the config>service>pw-routing context. To enable support for dynamic MS-PWs on a 7750 SR, 7450 ESS, or 7950 XRS node to be used as a T-PE or S-PE, a single, globally unique, S-PE ID, known as the S-PE address, is first configured under config>service>pw-routing on each node...
  • Page 92 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 An export policy is also required in order to export MS-PW routes in MP-BGP. This can be done using a default policy, such as the following: *A:lin-123>config>router>policy-options# info ---------------------------------------------- policy-statement "ms-pw" default-action accept exit exit...
  • Page 93 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.8.6.2.2 Explicit Paths A set of default explicit routes to a remote T-PE or S-PE prefix may be configured on a T-PE under config>services>pw-routing using the path name command. Explicit paths are used to populate the explicit route TLV used by MS-PW T-LDP signaling.
  • Page 94 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 SAII>TAII assumes the active role. However, it is possible to override this behavior using the signaling {master | auto} command under spoke-sdp-fec. If master is selected at a specified T-PE, that T-PE will assume the active role. If a T-PE is at the endpoint of a spoke-SDP that is bound to an VLL SAP and single-sided auto- configuration is used (see 2.8.6.3.2), then that endpoint is always passive.
  • Page 95 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 If an explicit path name is not configured, the TT-PE or S-PE will perform a longest match lookup for a route (static if it exists, and BGP if not) to the next hop S-PE or T- PE to reach the TAII.
  • Page 96 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 23 Pseudowire Redundancy BGP –1:1.1.4.1 BGP –1:1.1.1.1 GID:1 GID:1 Pr efix: SAP:1 Pre fix: 1.1.2.1 1.1.4.1 AC_ID:1 GID:1 7750 S-PE1 Prefix: 7750 T-PE2 1.1.1.1 AC_ID:1 SAP:1 MC-LAG GID:1 Prefix: 1.1.1.2 AC_ID:1 GID:1...
  • Page 97 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Since the SDP ID is determined dynamically at signaling time, it cannot be used as a tie breaker to choose the primary MS-PW between multiple MS-PWs of the same precedence. The user should, therefore, explicitly configure the precedence values to determine which MS-PW is active in the final selection.
  • Page 98 2.8.6.7 VCCV-Trace on Dynamic MS-PWs The 7750 SR, 7450 ESS, and 7950 XRS support the MS-PW path trace mode of operation for VCCV trace, as per pseudowire switching, but using FEC129 AII type 2. As in the case of vccv-ping, the SAII:TAII used in the VCCV echo request message sent from the T-PE or S-PE from which the VCCV trace command is executed is specified by the user or derived from the context of the MS-PW.
  • Page 99 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 When this routing and signaling infrastructure is established, spoke-sdp-fecs can be configured on each of the T-PEs, as follows: config router targeted-session peer 10.20.1.5 exit exit policy-options begin policy-statement "exportMsPw" entry 10 from family ms-pw...
  • Page 100 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 taii-type2 6:10.20.1.6:1 no shutdown exit no shutdown exit config router targeted-session peer 10.20.1.2 exit exit … policy-options begin policy-statement "exportMsPw" entry 10 from family ms-pw exit action accept exit exit exit commit exit...
  • Page 101 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 retry-timer 10 retry-count 10 saii-type2 6:10.20.1.6:1 taii-type2 3:10.20.1.3:1 no shutdown exit no shutdown exit config router targeted-session peer 10.20.1.3 exit peer 10.20.1.2 exit exit … family ms-pw connect-retry 1 min-route-advertisement 1 rapid-withdrawal group "ebgp"...
  • Page 102 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 neighbor 10.20.1.5 multihop 255 peer-as 200 exit neighbor 10.20.1.6 multihop 255 peer-as 400 exit exit exit service pw-routing spe-address 2:10.20.1.2 exit 2.8.8 VLL Resilience with Two Destination PE Nodes Figure 25 shows the application of pseudowire redundancy to provide Ethernet VLL service resilience for broadband service subscribers accessing the broadband service on the service provider BRAS.
  • Page 103 Nokia routers support the ability for a user-initiated manual switchover of the VLL path to the primary or any of the secondary, be supported to divert user traffic in case of a planned outage such as in node upgrade procedures.
  • Page 104 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 On the 7750 SR, this application can make use of all types of VLL supported on SR- series routers. However, if a SAP is configured on an MC-LAG instance, only the Epipe service type is allowed.
  • Page 105 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Master-slave pseudowire redundancy adds the ability for the remote peer to react to the pseudowire standby status notification, even if only one spoke-SDP terminates on the VLL endpoint on the remote peer. When the CLI command standby- signaling-slave is enabled at the spoke-SDP or explicit endpoint level in PE2 and PE3, then any spoke-SDP for which the remote peer signals PW FWD Standby will be blocked in the transmit direction.
  • Page 106 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.8.8.1.1 Interaction with SAP-Specific OAM If all of the spoke-SDPs bound to a SAP at a slave PE are selected as standby, then this should be treated from a SAP OAM perspective in the same manner as a fault on the service: an SDP binding down or remote SAP down.
  • Page 107 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • Rules for processing and merging local and received endpoint objects with an up or down operational status: 1. Endpoint X is operationally up if at least one of its objects is operationally up. It is Down if all of its objects are operationally down.
  • Page 108 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 VLL Resilience Path Example Figure 28 shows VLL resilience path example. An sample configuration follows. Figure 28 VLL Resilience PE-2 spoke-sdp 1:100 sap 1/2/1:100 sap 1/1/1:100 PE-1 BRAS spoke-sdp 2:200 sap 1/1/2:100 PE-3 OSSG246...
  • Page 109 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.8.8.1.4 VLL Resilience for a Switched Pseudowire Path Figure 29 displays VLL resilience for a switched pseudowire path example. A sample configuration follows. Figure 29 VLL Resilience with Pseudowire Switching S-PE-1 spoke-sdp 4:400 spoke-sdp 1:100...
  • Page 110 4:400 2.8.9 Pseudowire SAPs Refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Layer 3 Services Guide: IES and VPRN for information about how to use pseudowire SAPs with Layer 2 services. 2.8.10 Epipe Using BGP-MH Site Support for Ethernet Tunnels Using Epipe in combination with G.8031 and BGP multi-homing in the same manner...
  • Page 111 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 30 BGP-MH Site Support for Ethernet Tunnels Provider Edge Provider Edge Site 1 Site 2 Endpoint Endpoint Oper Up Oper Up Epipe Epipe MPLS PW Resiliency BGP-MH BGP-MH Standby Standby G.8031 G.8031...
  • Page 112 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 31 G.8031 for Slave Operation CE A PE B Epipe VLAN 100 Epipe Data and Control Endpoint Path a G.8031 Path b Epipe Endpoint VLAN 101 Data and Control PE C OSSG749 In a single-service deployment, the control (CFM) and data will share the same port...
  • Page 113 No Fault (Up), and Fault (Down) to control the G.8031 SAP. However, in the 7750 SR, 7450 ESS, and 7950 XRS model, fate shared Ethernet tunnels with no MEP are allowed. In this case, it is up to the CE to manage these CE-based fate shared tunnels.
  • Page 114 If a path is disabled on the CE, the result may force the SAP with an MEP on the PE to eventually take the SAP down; Nokia recommends running commands from the BGP-MH side to control these connections.
  • Page 115 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 10 SAP MEP Signaling (Continued) G.8031 ET on CE Path A MEP Path B MEP Path B PE MEP Path B PE MEP Facing Node B Facing Node ifStatus ifStatus Local ifStatus C Local...
  • Page 116 Table 10 row 5. 12. There is traffic loss during the BGP-MH convergence. −Load sharing mode is recommended when using a 7450 as a CE node A device. −BGP-MH signals that node C is now the DF; see Table 10 row 3.
  • Page 117 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Unidirectional failures: At point 6 the failure was detected at both ends. In the case of a unidirectional failure, CCM times out on one side. 1. In the case where the PE detects the failure, it propagates the failure to BGP- MH and the BGP-MH takes the site down causing the SAPs on the PE to signal a Fault to the CE.
  • Page 118 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.8.10.5 PW Redundancy for BGP-MH Site Support for Ethernet Tunnels Pseudowire Redundancy Service Models VLL Resilience with Pseudowire Redundancy and Switching are used for the MPLS network resiliency. BGP MH site support for Ethernet tunnels reuses this model.
  • Page 119 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2. If the SAP in endpoint X transitions locally to the down state, or received a SAP Down notification via SAP-specific OAM signal (SAP MEP), the node must send T-LDP SAP down status bits on the Y endpoint ICB spoke-SDP only. BGP-MH SAPs support MEPs for ifStatusTLV signaling.
  • Page 120 The following are supported: • All Ethernet-tunnel G.8031 SAPs on CE: −7750 SR, 7450 ESS, or 7950 XRS G.8031 in load sharing mode (recommended) −7750 SR, 7450 ESS, or 7950 XRS G.8031 in non-load sharing mode • Epipe and endpoint with SAPs on PE devices.
  • Page 121 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • Other multi-chassis redundancy features are not supported on the multi-homed site object, as follows: −MC-LAG −MC-EP −MC-Ring −MC-APS • Master and Slave pseudowire is not supported. Figure 33 Sample Topology Full Redundancy Node-1: PE Node-4: P 1/1/2...
  • Page 122 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 remote-mepid 310 exit association 2 format icc-based name "node-3-site-1-1" bridge-identifier 100 exit remote-mepid 311 exit exit exit #-------------------------------------------------- echo "Service Configuration" #-------------------------------------------------- service customer 1 create description "Default customer" exit sdp 2 mpls create far-end 10.1.1.4 lsp "to-node-4-lsp-1"...
  • Page 123 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 oper-group "og-name-et" exit spoke-sdp 2:1 endpoint "y" create precedence primary no shutdown exit spoke-sdp 3:1 endpoint "y" create precedence 2 no shutdown exit no shutdown exit epipe 100 customer 1 create description "Epipe 100 in separate opergroup"...
  • Page 124 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 rapid-update l2-vpn group "internal" type internal neighbor 10.1.1.2 family l2-vpn exit exit exit exit Node-3: Using operational groups and Ethernet CFM per SAP #-------------------------------------------------- echo "Eth-CFM Configuration" #-------------------------------------------------- eth-cfm domain 100 format none level 3 association 2 format icc-based name "node-3-site-1-0"...
  • Page 125 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 ccm-enable control-mep no shutdown exit exit no shutdown exit path 2 member 1/1/4 control-tag 1.2 eth-cfm mep 320 domain 100 association 3 ccm-enablepath control-mep no shutdown exit exit no shutdown exit no shutdown exit...
  • Page 126 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 sap 2/1/2:1.1 create exit sap eth-tunnel-1 create exit no shutdown exit epipe 100 customer 1 create service-mtu 500 sap 2/1/10:1.100 create exit sap eth-tunnel-2 create exit no shutdown exit Configuration with Fate Sharing on Node-3 In this example, the SAPs monitoring the operational groups do not need CFM if the corresponding SAP on the CE side is using fate sharing.
  • Page 127 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 sap 1/1/2:1.1 endpoint "x" create eth-cfm mep 130 domain 100 association 1 direction down fault-propagation-enable use-if-tlv ccm-enable no shutdown exit exit oper-group "og-name-et" exit spoke-sdp 2:1 endpoint "y" create precedence primary no shutdown exit spoke-sdp 3:1 endpoint "y"...
  • Page 128 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 remote-mepid 130 exit association 2 format icc-based name "node-3-site-2-0" bridge-identifier 2 exit ccm-interval 1 remote-mepid 120 exit exit exit #-------------------------------------------------- echo "Service Configuration" #-------------------------------------------------- eth-tunnel 2 description "Eth Tunnel loadsharing mode QinQ example" protection-type loadsharing ethernet encap-type qinq...
  • Page 129 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 exit #-------------------------------------------------- echo "Service Configuration for a shared fate Ethernet Tunnel" #-------------------------------------------------- epipe 2 customer 1 create sap 1/10/2:3 create exit sap eth-tunnel-1:2 create eth-tunnel path 1 tag 1.2 path 2 tag 1.2 exit exit no shutdown...
  • Page 130 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 34 Access Node Resilience TLDP Aggregation Aggregation node node Active Standby Active Standby Active Standby Inter-chassis Inter-chassis MSAN MSAN PW for VLL PW for VLL Standby Active Standby Active Aggregation Aggregation Standby...
  • Page 131 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 An SR-series node selects a pseudowire as the active path for forwarding packets when both the local pseudowire status and the received remote pseudowire status indicate active status. However, an SR-series device in standby status according to the SAP in its local MC-LAG instance is capable of processing packets for a VLL service received over any of the pseudowires that are up.
  • Page 132 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 35 VLL Resilience with Pseudowire Redundancy and Switching Primary PW Access Node Standby PW 7x50 T-PE2 7x50 T-PE3 Metro area B SDP6:600 SDP3:300 7x50 7x50 7x50 S-PE3 7x50 S-PE4 PW switching PW switching Core area...
  • Page 133 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 switch the path of the VLL to the secondary standby pseudowire and remain there until the status notification is cleared. Then, the VLL path is switched back to the primary pseudowire due to the revertive behavior operation. The path will not switch back to a secondary path when it comes up, even if it has a higher precedence than the currently active secondary path.
  • Page 134 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.9 Pseudowire Redundancy Service Models This section describes the various MC-LAG and pseudowire redundancy scenarios as well as the algorithm used to select the active transmit object in a VLL endpoint. The redundant VLL service model is described in the following section, Redundant VLL Service...
  • Page 135 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 36 is just an example; the Y endpoint can also have a SAP and/or an ICB spoke-SDP. The following describes the four types of endpoint objects supported and the rules used when associating them with an endpoint of a VLL service: •...
  • Page 136 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.9.2 T-LDP Status Notification Handling Rules Using Redundant VLL Endpoint Objects as a reference, the following are the rules for generating, processing, and merging T-LDP status notifications in VLL service with endpoints.
  • Page 137 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 If the ICB spoke-SDP in endpoint X received T-LDP SDP-binding down status bits or pseudowire not forwarding status bits, the node saves this status and takes no further action. The saved status is used for selecting the active transmit endpoint object.
  • Page 138 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • received T-LDP SAP down status bits • received T-LDP SDP-binding down status bits • received PW not forwarding status bits An Ethernet SAP does not support signaling status notifications. 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 139 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.10 High-Speed Downlink Packet Access (HSDPA) Off Load Fallback over ATM For many Universal Mobile Telecommunications System (UMTS) networks planning to deploy High-Speed Downlink Packet Access (HSDPA), the existing mobile backhaul topology consists of a cell site that is partially backhauled over DSL (for the HSDPA portion) and partially over an existing TDM/ATM infrastructure (for UMTS voice traffic).
  • Page 140 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Normally, if the MPLS pseudowire path is active, this path is used. If a failure happens on the IP/MPLS path, detected through BFD-TLDP or local notification, traffic needs to switch to the SAP that is connected to the ATM/TDM backhaul network.
  • Page 141 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 38 HSDPA Off Load Fallback with MC-APS 7750 SR #1 apipe epipe Endpoint Endpoint Endpoint Endpoint MPLS Network HSPA NodeB 7705 SAR L2 Switched apipe Network epipe Endpoint Endpoint 7750 SR #2 apipe epipe...
  • Page 142 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 sap 1/1/2:0 endpoint X exit spoke-sdp 1:100 endpoint X icb exit spoke-sdp 10:500 endpoint Y precedence primary exit sap 1/1/3:0 endpoint Y exit spoke-sdp 1:200 endpoint Y icb exit ---------------------------------------------- *A:ALA-A>config>service# 7750 SR #2 *A:ALA-B>config>service# epipe 1...
  • Page 143 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 39 Ethernet Failure At Cell Site 7750 SR #1 apipe epipe Endpoint Endpoint Endpoint Endpoint Active MPLS Network HSPA NodeB Active 7705 SAR L2 Switched Standby apipe Network epipe Standby Endpoint Endpoint...
  • Page 144 RELEASE 19.5.R1 2.11 VLL Using G.8031 Protected Ethernet Tunnels The use of MPLS tunnels provides the 7450 ESS and 7750 SR OS a way to scale the core while offering fast failover times using MPLS FRR. In environments where Ethernet services are deployed using native Ethernet backbones, Ethernet tunnels are provided to achieve the same fast failover times as in the MPLS FRR case.
  • Page 145 Transport label, known as the hash label (RFC 6391). These labels allow LSR nodes in a network to load-balance labeled packets in a much more granular fashion than allowed by just hashing on the standard label stack. See the 7450 ESS, 7750 SR, 7950 XRS, and VSR MPLS Guide for further information.
  • Page 146 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.13 BGP Virtual Private Wire Service (VPWS) BGP Virtual Private Wire Service (VPWS) is a point-to-point L2 VPN service based on RFC 6624 Layer 2 Virtual Private Networks using BGP for Auto-Discovery and Signaling which in turn uses the BGP pseudowire signaling concepts from RFC 4761, Virtual Private LAN Service Using BGP for Auto-Discovery and Signaling.
  • Page 147 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 An Epipe is configured on PE1 and PE2 with BGP VPWS enabled. PE1 and PE2 are connected to site A and B, respectively, each using a SAP. The interconnection between the two PEs is achieved through a pseudowire that is signaled using BGP VPWS updates over a specific tunnel LSP.
  • Page 148 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 An Epipe with BGP VPWS enabled is configured on each PE. Site A is dual-homed to PE1 and PE2 with the remote PE (PE3) connecting to site B. An Epipe service is configured on each PE in which there is a SAP connecting to the local site.
  • Page 149 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 42 Dual-homed BGP VPWS with Active/Standby Pseudowires ve-id=1 mh-id=1 rd=65536:1 rt=65536:1 site-preference 200 Designated Forwarder epipe Active Spoke-SDP Site A Site B epipe ve-id=3 rd=65536:3 Standby Spoke-SDP rt=65536:1 Blocked epipe ve-id=2 mh-id=1...
  • Page 150 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Operational state changes to the GRE tunnel are reflected in the state of the Epipe and propagated accordingly in the BGP VPWS spoke-SDP status signaling, specifically using the BGP update D and CSV bits. The following configuration is required: 1.
  • Page 151 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.13.3.1 Pseudowire Signaling The BGP signaling mechanism used to establish the pseudowires is described in the BGP VPWS standards with the following differences: • As stated in Section 3 of RFC 6624, there are two modifications of messages when compared to RFC 4761.
  • Page 152 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • VPLS Preference – VPLS preference has a default value of zero for BGP-VPWS updates sent by the system, indicating that it is not in use. If the site-preference is configured, its value is used for the VPLS preference and is also used in the local designated forwarder election.
  • Page 153 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 S — Sequenced delivery. Sequenced delivery is not supported. This is set to 0 on sending (no sequenced delivery) and, if a non-zero value is received (indicating sequenced delivery required), the pseudowire will not be created. The BGP VPWS NLRI is based on that defined for BGP VPLS, but is extended with a circuit status vector, as shown in Figure...
  • Page 154 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The circuit status vector is used to indicate the status of both the SAP/GRE tunnel and the status of the spoke-SDP within the local service. Because the VE block size used is 1, the most significant bit in the circuit status vector TLV value will be set to 1 if either the SAP/GRE tunnel or spoke-SDP is down, otherwise it will be set to 0.
  • Page 155 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.13.3.3 BGP VPWS Configuration Procedure In addition to configuring the associated BGP and MPLS infrastructure, the provisioning of a BGP VPWS service requires: • Configuring the BGP Route Distinguisher, Route Target −Updates are accepted into the service only if they contain the configured import route-target •...
  • Page 156 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • Layer 2 MTU – derived from service VPLS service-mtu parameter. −The same value must be used by the remote BGP VPWS instance to ensure that the related pseudowire will come up. •...
  • Page 157 {ether | vlan} vlan-vc-tag vlan-id no vlan-vc-tag For more information about this command, refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Services Overview Guide. The use-provisioned-sdp option is permitted when creating the pseudowire template if a pre-provisioned SDP is to be used. Pre-provisioned SDPs must be configured whenever RSVP-signaled transport tunnels are used.
  • Page 158 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The command: tools perform service id <service-id> endpoint <endpoint-name> force-switchover will have no effect on an automatically created VPWS endpoint. 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 159 VLL Services RELEASE 19.5.R1 2.14 VLL Service Considerations This section describes the general 7450 ESS, 7750 SR, and 7950 XRS service features and any special capabilities or considerations as they relate to VLL services. 2.14.1 SDPs The most basic SDPs must have the following: •...
  • Page 160 The Epipe service is designed to carry Ethernet frame payloads, so it can provide connectivity between any two SAPs that pass Ethernet frames. The following SAP encapsulations are supported on the 7450 ESS, 7750 SR, and 7950 XRS Epipe service: •...
  • Page 161 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 While different encapsulation types can be used, encapsulation mismatching can occur if the encapsulation behavior is not understood by connecting devices, which are unable to send and receive the expected traffic. For example, if the encapsulation type on one side of the Epipe is dot1q and the other is null, tagged traffic received on the null SAP will be double-tagged when it is transmitted out of the dot1q SAP.
  • Page 162 Layer 3 (IP), classification is performed. 2.14.2.4 Filter Policies 7450 ESS, 7750 SR, and 7950 XRS Epipe, Fpipe, and Ipipe services can have a single filter policy associated on both ingress and egress. Both MAC and IP filter policies can be used on Epipe services.
  • Page 163 Epipe services are point-to-point Layer 2 VPNs capable of carrying any Ethernet payloads. Although an Epipe is a Layer 2 service, the 7450 ESS, 7750 SR, and 7950 XRS Epipe implementation does not perform any MAC learning on the service, so Epipe services do not consume any MAC hardware resources.
  • Page 164 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 165 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.15 Configuring a VLL Service with CLI This section provides information to configure Virtual Leased Line (VLL) services using the command line interface. 2.15.1 Common Configuration Tasks This section provides a brief overview of the tasks that must be performed, and the CLI commands to configure the VLL services, as follows: 1.
  • Page 166 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 PE router 1 (A:ALA-41): Example: A:ALA-41>config>service# apipe 5 customer 1 create A:ALA-41config>service>apipe# description “apipe test” A:ALA-41config>service>apipe# service-mtu 1400 A:ALA-41config>service>apipe# no shutdown A:ALA-41config>service>apipe# PE router 2 (A:ALA-42): Example: A:ALA-42>config>service# apipe 5 customer 1 create A:ALA-42>config>service>apipe# description “apipe test”...
  • Page 167 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 CLI Syntax: config>service# apipe service-id [customer customer-id] [vpn vpn-id] [vc-type {atm-vcc|atm-sdu|atm-vpc|atm- cell}][vc-switching] sap sap-id accounting-policy acct-policy-id egress traffic-desc traffic-desc-profile-id ingress traffic-desc traffic-desc-profile-id alarm-cells terminate collect-stats description description-string egress qos policy-id scheduler-policy scheduler-policy-name ingress qos policy-id [shared-queuing]...
  • Page 168 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 A:ALA-42>config>service>apipe>sap>egress# exit A:ALA-42>config>service>apipe>sap# no shutdown A:ALA-42>config>service>apipe>sap# exit A:ALA-42>config>service>apipe# The following output shows the Apipe SAP configuration. PE Router 1 (ALA-41): A:ALA-41>config>service# info ------------------------------------- apipe 5 customer 1 create description "apipe test" service-mtu 1400 sap 1/1/1:0/32 create ingress...
  • Page 169 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.15.2.1.2 Configuring an ATM SAP in the N-to-1 Mapping of ATM VPI/VCI to ATM Pseudowire Users can configure an ATM-cell Apipe service with a new ATM SAP type. The SAP type refers to a preconfigured ATM connection profile name.
  • Page 170 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • An ATM SAP with a connection profile assigned cannot be configured on a port that is part of an MC-APS protection group. • It is strongly recommended to not apply a VCI-based QoS Filter to the ingress of an ATM SAP with a connection profile.
  • Page 171 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 A:ALA-42>config>service>apipe>spoke-sdp# exit The following output shows the Apipe spoke-SDP configurations. PE Router 1 (ALA-41): A:ALA-41>config>service# info ------------------------------------- apipe 5 customer 1 create description "apipe test" service-mtu 1400 sap 1/1/1:0/32 create ingress qos 102 exit...
  • Page 172 [vpn vpn-id] [vc-type {satop-e1 | satop-t1 | cesopsn | cesopsn-cas}] [vc-switching] [create] For the 7450 ESS platforms, the vc-switching option must be configured for Cpipe functionality, as follows: cpipe 1 name "XYZ Cpipe 1" customer 1 vc-switching vc-type cesopsn create spoke-sdp 20:1 create description "Description for Sdp Bind 20 for Svc ID 1"...
  • Page 173 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.15.2.2.2 Configuration Requirements Before a Cpipe service can be provisioned, the following tasks must be completed: • Configuring a DS1 Port • Configuring a Channel Group Configuring a DS1 Port The following example shows a DS1 port configured for CES: A:sim216# show port 1/5/10.1.3.1...
  • Page 174 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Idle Cycle Flags : flags Load-balance-algo : default Egr. Sched. Pol : n/a =============================================================================== A:sim216# 2.15.2.2.3 Configuring Cpipe SAPs and Spoke-SDPs The following examples show Cpipe SAP and spoke-SDP configurations: *A:ALA-49>config>service# info #-------------------------------------------------- echo "Service Configuration"...
  • Page 175 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 A:sim213>config>service>cpipe# info ---------------------------------------------- description "cpipe-100" sap 1/5/10.1.1.1 create packet jitter-buffer 16 payload-size 384 report-alarm rpktloss no report-alarm stray rtp-header exit exit spoke-sdp 1:100 create exit no shutdown ---------------------------------------------- A:sim213>config>service>cpipe# 2.15.2.3 Creating an Epipe Service Use the following CLI syntax to create an Epipe service.
  • Page 176 {ip ip-filter-name | mac mac-filter- name} match-qinq-dot1p {top | bottom} qos policy-id scheduler-policy scheduler-policy-name The following example shows a configuration for the 7450 ESS and 7750 SR. CLI Syntax: config>service# epipe service-id [customer customer-id] sap sap-id [endpoint endpoint-name] sap sap-id [no-endpoint]...
  • Page 177 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Local Epipe SAPs To configure a basic local Epipe service, enter the sap sap-id command twice with different port IDs in the same service configuration. By default, QoS policy ID 1 is applied to ingress and egress service SAPs. Existing filter policies or other existing QoS policies can be associated with service SAPs on ingress and egress ports.
  • Page 178 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>epipe>sap>ingress# filter ip 1 config>service>epipe>sap>ingress# exit config>service>epipe>sap# egress config>service>epipe>sap>egress# qos 627 config>service>epipe>sap>egress# scheduler-policy alpha config>service>epipe>sap>egress# exit config>service>epipe>sap# no shutdown config>service>epipe>sap# exit The following example shows the local Epipe configuration: A:ALA-1>config>service# info ---------------------------------------------- epipe 500 customer 5 vpn 500 create description "Local epipe service"...
  • Page 179 Ingress and egress SAP parameters can be applied to local and distributed Epipe service SAPs. For SDP configuration information, refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Services Overview Guide. For SDP binding information, see Configuring SDP Bindings.
  • Page 180 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 sap 221/1/3:21 create ingress qos 555 filter ip 1 exit egress scheduler-policy "alpha" qos 627 exit exit exit ---------------------------------------------- A:ALA-1>config>service# A:ALA-2>config>service# info ---------------------------------------------- epipe 5500 customer 5 vpn 5500 create description "Distributed epipe service to west coast"...
  • Page 181 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 CLI Syntax: configure service vpls 200 customer 1 b-vpls create *A:Wales-1>config>service>vpls# info ---------------------------------------------------------------------- service-mtu 2000 fdb-table-size 131071 no shutdown exit sap 1/1/8 create exit sap 1/2/3:200 create exit mesh-sdp 1:200 create exit mesh-sdp 100:200 create exit...
  • Page 182 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>epipe>sap>egress# scheduler-policy alpha config>service>epipe>sap>egress# exit config>service>epipe>sap# The following example shows the Epipe SAP ingress and egress configuration: A:ALA-1>config>service# ---------------------------------------------- epipe 5500 customer 5 vpn 5500 create description "Distributed epipe service to east coast" sap 2/1/3:21 create ingress qos 555...
  • Page 183 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 49 SDPs — Uni-Directional Tunnels ALA-1 ALA-2 demux SDP 3 SPOKE-SDP 3 EPIPE 2 for Customer 6 SDP 2 SPOKE-SDP 2 EPIPE 2 for Customer 6 demux L2_Guide_47 Use the following CLI syntax to create a spoke-SDP binding with an Epipe service. CLI Syntax: config>service# epipe service-id [customer customer-id] spoke-sdp sdp-id:vc-id [vc-type {ether | vlan}]...
  • Page 184 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 A:ALA-1>config>service# info ---------------------------------------------- epipe 5500 customer 5 vpn 5500 create description "Distributed epipe service to east coast" sap 2/1/3:21 create ingress qos 555 filter ip 1 exit egress scheduler-policy "alpha" qos 627 exit exit...
  • Page 185 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 A:ALA-2>config>service# 2.15.2.4 Creating an Fpipe Service Use the following CLI syntax to create an Fpipe service on a 7750 SR. CLI Syntax: config>service# fpipe service-id [customer customer-id] [vpn vpn-id] [vc-type {fr-dlci}] [vc-switching] description description-string service-mtu octets no shutdown...
  • Page 186 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 PE router 2 (A:ALA-42): A:ALA-42>config>service# info ------------------------------------------- fpipe 1 customer 1 create description “fpipe test” service-mtu 1400 no shutdown exit ------------------------------------------- A:ALA-42>config>service# 2.15.2.4.1 Configuring Fpipe SAP Parameters Use the following CLI syntax to configure Fpipe SAP parameters. CLI Syntax: config>service# fpipe service-id [customer customer-id] [vpn vpn-id] [vc-type {fr-dlci}] [vc-switching]...
  • Page 187 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 A:ALA-41>config>service>fpipe>sap>egress# exit A:ALA-41>config>service>fpipe>sap# no shutdown A:ALA-41>config>service>fpipe>sap# exit A:ALA-41>config>service>fpipe# PE router 2 (A:ALA-42): Example: A:ALA-42>config>service# fpipe 1 A:ALA-42>config>service>fpipe# sap 2/1/1.1:16 create A:ALA-42>config>service>fpipe>sap# ingress A:ALA-42>config>service>fpipe>sap>ingress# qos 101 A:ALA-42>config>service>fpipe>sap>ingress# exit A:ALA-42>config>service>fpipe>sap# egress A:ALA-42>config>service>fpipe>sap>egress# qos 1020 A:ALA-42>config>service>fpipe>sap>egress# exit A:ALA-42>config>service>fpipe>sap# no shutdown A:ALA-42>config>service>fpipe>sap# exit...
  • Page 188 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 qos 101 exit egress qos 1020 exit exit no shutdown exit ------------------------------------- A:ALA-42>config>service# 2.15.2.4.2 Configuring Fpipe SDP Bindings Use the following CLI syntax to create a spoke-SDP binding with an Fpipe service. CLI Syntax: config>service# fpipe service-id [customer customer-id] [vpn vpn-id] [vc-type {fr-dlci}] [vc-switching]...
  • Page 189 ------------------------------------- A:ALA-42>config>service# 2.15.2.5 Creating an Ipipe Service Use the following CLI syntax to create an Ipipe service on a 7450 ESS or 7750 SR. CLI Syntax: config>service# ipipe service-id [customer customer-id] [vpn vpn-id] [vc-switching] description description-string no shutdown...
  • Page 190 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The following example shows an Ipipe configuration: A:ALA-1>config>service# info ------------------------------------------- ipipe 202 customer 1 create description "eth_ipipe" no shutdown exit ------------------------------------------- A:ALA-1>config>service# 2.15.2.5.1 Configuring Ipipe SAP Parameters The following example shows an Ipipe SAP configuration: A:ALA-48>config>service# info ---------------------------------------------- ipipe 202 customer 1 create...
  • Page 191 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 A:ALA-48>config>service# info ---------------------------------------------- ipipe 204 customer 1 create sap 1/1/2:446 create description "eth_fr_ipipe" ce-address 32.32.32.1 exit sap 2/2/2:16 create ce-address 32.32.32.2 exit no shutdown exit ---------------------------------------------- A:ALA-48>config>service# The following example shows a PPP to Ethernet local Ipipe configuration. Example: config>service# ipipe 206 customer 1 create config>service>ipipe$ sap 1/1/2:447 create...
  • Page 192 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.15.2.5.2 Configuring Ipipe SDP Bindings The following example shows an Ipipe SDP configuration: A:ALA-48>config>service# info ---------------------------------------------- sdp 16 mpls create far-end 10.4.4.4 path-mtu 1600 keep-alive shutdown exit no shutdown exit ipipe 207 customer 1 create shutdown sap 1/1/2:449 create...
  • Page 193 2.15.4 Same-Fate Epipe VLANs Access Protection The following example shows a G.8031 Ethernet tunnel for Epipe protection configuration for 7450 ESS or 7750 SR using same-fate SAPs for each Epipe access (two Ethernet member ports 1/1/1 and 2/1/1/1 are used):...
  • Page 194 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 *A:7750_ALU>config>eth-tunnel 1 ---------------------------------------------- description "Protection is APS" protection-type 8031_1to1 ethernet mac 00:11:11:11:11:12 encap-type dot1q exit ccm-hold-time down 5 up 10 // 50 ms down, 1 second up path 1 member 1/1/1 control-tag 5 // primary control vlan 5 precedence primary eth-cfm...
  • Page 195 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 eth-tunnel path 1 tag 10 eth-tunnel path 2 tag 110 exit … ---------------------------------------------- 2.15.5 Pseudowire Configuration Notes The vc-switching parameter must be specified when the VLL service is created. When the vc-switching parameter is specified, you are configuring an S-PE. This is a pseudowire switching point (switching from one pseudowire to another).
  • Page 196 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The following example shows the command usage to configure VLL pseudowire switching services: Example: config>service# apipe 1 customer 1 vpn 1 vc-switching create config>service>apipe$ description “Default apipe description for service id 100” config>service>apipe# spoke-sdp 3:1 create config>service>apipe>spoke-sdp# exit config>service>apipe# spoke-sdp 6:200 create...
  • Page 197 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.15.6 Configuring Two VLL Paths Terminating on T-PE2 Figure 50 VLL Resilience with Pseudowire Redundancy and Switching Access Node Primary PW Standby PW 7x50 T-PE2 7x50 T-PE3 Metro area B SDP6:600 SDP3:300 7x50...
  • Page 198 0 exit spoke-sdp 6:600 endpoint "y" create precedence 0 exit no shutdown ---------------------------------------------- *A:ALA-T-PE2>config>service>epipe# The following shows and example of the T-PE2 configuration for 7450 ESS and 7750 SR. T-PE2 *A:ALA-T-PE2>config>service>epipe# info ---------------------------------------------- endpoint "x" create exit endpoint "y" create exit sap 2/2/2:200 endpoint "x"...
  • Page 199 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 spoke-sdp 2:200 create exit spoke-sdp 3:300 create exit no shutdown ---------------------------------------------- *A:ALA-S-PE1>config>service>epipe# S-PE2: Specifying the vc-switching parameter enables a VC cross-connect, so the service manager does not signal the VC label mapping immediately, but will put this into passive mode.
  • Page 200 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 *A:ALA-48>config>service>epipe# info ---------------------------------------------- endpoint "x" create exit endpoint "y" create exit spoke-sdp 1:100 endpoint "y" create precedence primary exit spoke-sdp 2:200 endpoint "y" create precedence 1 exit no shutdown ---------------------------------------------- *A:ALA-48>config>service>epipe# 2.15.8 Configuring VLL Resilience for a Switched Pseudowire Path...
  • Page 201 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 exit spoke-sdp 3:300 endpoint "y" create precedence 1 exit no shutdown ---------------------------------------------- *A:ALA-48>config>service>epipe# T-PE-2 The following example shows the configuration on T-PE-2. *A:ALA-49>config>service>epipe# info ---------------------------------------------- endpoint "x" create exit endpoint "y" create revert-time 100 exit spoke-sdp 4:400 endpoint "y"...
  • Page 202 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.15.9 Configuring BGP Virtual Private Wire Service (VPWS) 2.15.9.1 Single-Homed BGP VPWS Figure 53 shows an example topology for a BGP VPWS service used to create a virtual lease-line across an MPLS network between two sites: A and B. Figure 53 Single-Homed BGP VPWS Configuration Example ve-id=1...
  • Page 203 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 exit sap 1/1/1:1 create exit no shutdown exit PE2: pw-template 1 create vc-type vlan exit epipe 1 customer 1 create route-distinguisher 65536:2 route-target export target:65536:1 import target:65536:1 pw-template-binding 1 exit exit bgp-vpws ve-name PE2...
  • Page 204 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.15.9.2 Dual-Homed BGP VPWS Single Pseudowire Example: Figure 54 shows an example topology for a dual-homed BGP VPWS service used to create a virtual lease-line across an MPLS network between two sites: A and B. A single pseudowire is established between the designated forwarder of the dual- homed PEs and the remote PE.
  • Page 205 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 exit exit bgp-vpws ve-name PE1 ve-id 1 exit remote-ve-name PE3 ve-id 3 exit no shutdown exit sap 1/1/1:1 create exit site "siteA" create site-id 1 sap 1/1/1:1 boot-timer 20 site-activation-timer 5 no shutdown exit no shutdown...
  • Page 206 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 PE3: pw-template 1 create exit epipe 1 customer 1 create route-distinguisher 65536:3 route-target export target:65536:1 import target:65536:1 pw-template-binding 1 exit exit bgp-vpws ve-name PE3 ve-id 3 exit remote-ve-name PE1orPE2 ve-id 1 exit no shutdown exit...
  • Page 207 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Figure 55 Example of Dual-homed BGP VPWS with Active/Standby Pseudowires ve-id=1 mh-id=1 rd=65536:1 rt=65536:1 site-preference 200 Designated Forwarder epipe Active Spoke-SDP Site A Site B epipe ve-id=3 rd=65536:3 Standby Spoke-SDP rt=65536:1 Blocked epipe...
  • Page 208 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 ve-id 3 exit no shutdown exit sap 1/1/1:1 create exit site "siteA" create site-id 1 sap 1/1/1:1 boot-timer 20 site-activation-timer 5 site-preference 200 no shutdown exit no shutdown exit PE2: pw-template 1 create exit epipe 1 customer 1 create...
  • Page 209 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 route-distinguisher 65536:3 route-target export target:65536:1 import target:65536:1 pw-template-binding 1 exit exit bgp-vpws ve-name PE3 ve-id 3 exit remote-ve-name PE1 ve-id 1 exit remote-ve-name PE2 ve-id 2 exit no shutdown exit sap 1/1/1:1 create exit no shutdown...
  • Page 210 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.16 Service Management Tasks This section discusses VLL service management tasks. 2.16.1 Modifying Apipe Service Parameters The following example shows the command usage to modify Apipe parameters, supported on the 7750 SR only: PE router 1 (A:ALA-41): Example: A:ALA-41>config>service# apipe 5...
  • Page 211 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 ingress qos 102 exit egress qos 103 exit exit spoke-sdp 1:4 create egress vc-label 16 exit no shutdown exit ------------------------------------- A:ALA-41>config>service# PE Router 2 (ALA-42): A:ALA-42>config>service# info ------------------------------------- apipe 5 customer 1 create description "apipe test"...
  • Page 212 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Example: A:ALA-41>config>service# apipe 5 A:ALA-41>config>service>apipe# shutdown A:ALA-41>config>service>apipe# exit PE router 2 (A:ALA-42): Example: A:ALA-42>config>service# apipe 5 A:ALA-42>config>service>apipe# shutdown A:ALA-42>config>service>apipe# exit PE Router 1 (ALA-41): A:ALA-41>config>service# info ------------------------------------- apipe 5 customer 1 create shutdown description "apipe test"...
  • Page 213 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 exit exit spoke-sdp 1:4 create egress vc-label 16 exit exit ------------------------------------- A:ALA-42>config>service# 2.16.3 Re-enabling an Apipe Service Use the following CLI syntax to re-enable an Apipe service that was shut down. CLI Syntax: config>service# apipe service-id...
  • Page 214 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 no spoke-sdp [sdp-id:vc-id] shutdown PE router 1 (A:ALA-41): Example: A:ALA-41>config>service# apipe 5 A:ALA-41>config>service>apipe# sap 1/1/1:0/32 A:ALA-41>config>service>apipe>sap# shutdown A:ALA-41>config>service>apipe>sap# exit A:ALA-41>config>service>apipe# no sap 1/1/1:0/32 A:ALA-41>config>service>apipe# spoke-sdp 1:4 A:ALA-41>config>service>apipe>spoke-sdp# shutdown A:ALA-41>config>service>apipe>spoke-sdp# exit A:ALA-41>config>service>apipe# no spoke-sdp 1:4 A:ALA-41>config>service>apipe# shutdown A:ALA-41>config>service>apipe# exit...
  • Page 215 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 ingress qos 20 exit exit spoke-sdp 14004:94002 endpoint "to7705" create exit spoke-sdp 100:294002 endpoint "toMC-APS" icb create exit spoke-sdp 100:194002 endpoint "to7705" icb create exit no shutdown exit ---------------------------------------------- *A:ALA-1>config>service> Cpipe# 2.16.6 Deleting a Cpipe Service A Cpipe service cannot be deleted until SAPs are shut down and deleted.
  • Page 216 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 spoke-sdp 2:6000 create exit no shutdown exit ---------------------------------------------- ALA-1>config>service# 2.16.8 Disabling an Epipe Service You can shut down an Epipe service without deleting the service parameters. CLI Syntax: config>service> epipe service-id shutdown Example: config>service# epipe 2...
  • Page 217 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 [no] epipe service-id shutdown [no] sap sap-id shutdown [no] spoke-sdp sdp-id:vc-id shutdown Example: config>service# epipe 2 config>service>epipe# sap 2/1/3:21 config>service>epipe>sap# shutdown config>service>epipe>sap# exit config>service>epipe# no sap 2/1/3:21 config>service>epipe# spoke-sdp 2:6000 config>service>epipe>spoke-sdp# shutdown config>service>epipe>spoke-sdp# exit config>service>epipe# no spoke-sdp 2:6000...
  • Page 218 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 A:ALA-42>config>service>fpipe>spoke-sdp>egress# filter ip 10 A:ALA-42>config>service>fpipe>spoke-sdp>egress# exit A:ALA-42>config>service>fpipe>spoke-sdp# exit A:ALA-42>config>service>fpipe# PE Router 1 (ALA-41): A:ALA-41>config>service# info ------------------------------------- fpipe 1 customer 1 create description "fpipe test" service-mtu 1400 sap 1/2/1:16 create accounting-policy 2 ingress qos 101 exit...
  • Page 219 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 ------------------------------------- A:ALA-42>config>service# 2.16.12 Disabling an Fpipe Service An Fpipe service can be shut down without deleting any service parameters. CLI Syntax: config>service# fpipe service-id shutdown PE router 1 (A:ALA-41): Example: A:ALA-41>config>service# fpipe 1 A:ALA-41>config>service>fpipe# shutdown PE router 2 (A:ALA-42):...
  • Page 220 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 A:ALA-42>config>service# info ------------------------------------- fpipe 1 customer 1 create shutdown description "fpipe test" service-mtu 1400 sap 2/1/1.1:16 create accounting-policy 2 ingress qos 101 exit egress qos 1020 exit exit spoke-sdp 1:1 create egress filter ip 10 exit...
  • Page 221 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.16.14 Deleting an Fpipe Service An Fpipe service cannot be deleted until the SAP is shut down. If protocols and/or a spoke-SDP are defined, they must be shut down and removed from the configuration as well.
  • Page 222 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.16.15 Modifying Ipipe Service Parameters The following example shows the command usage to modify Ipipe parameters, supported on the 7450 ESS and 7750 SR only: Example: config>service# ipipe 202 config>service>ipipe# sap 1/1/2:444 config>service>ipipe>sap# shutdown...
  • Page 223 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 ipipe 202 customer 1 create shutdown sap 1/1/2:445 create description "eth_ipipe" ce-address 10.31.31.2 exit sap 1/1/2:555 create description "eth_ipipe" ce-address 10.31.31.1 exit exit ---------------------------------------------- A:ALA-48>config>service# 2.16.17 Re-enabling an Ipipe Service Use the following CLI syntax to re-enable an Ipipe service that was shut down.
  • Page 224 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>ipipe>sap# shutdown config>service>ipipe>sap# exit config>service>ipipe# no sap 1/1/2:449 config>service>ipipe# spoke-sdp 16:516 config>service>ipipe>spoke-sdp# shutdown config>service>ipipe>spoke-sdp# exit config>service>ipipe# no spoke-sdp 16:516 config>service>ipipe# exit config>service# no ipipe 207 config>service# 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 225 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.17 VLL Service Configuration Command Reference This chapter describes the VLL service configuration command reference. 2.17.1 Command Hierarchies • Apipe Service Configuration Commands • Cpipe Service Configuration Commands • Epipe Service Configuration Commands •...
  • Page 226 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no interworking — service-mtu octets — no service-mtu — [no] shutdown — signaled-vc-type-override atm-vcc — no signaled-vc-type-override 2.17.1.1.2 Apipe SAP Commands config — service — apipe — {port-id | aps-id}:[vpi/vci | vpi | vpi1.vpi2 | cp.conn-prof-id] —...
  • Page 227 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — policer policer-id [create] — no policer policer-id — size [bytes | kilobytes] — no — size [bytes | kilobytes] — no — packet-byte-offset {add add-bytes | subtract sub-bytes} — no packet-byte-offset —...
  • Page 228 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no scheduling-class — ingress — policer-control-override [create] — no policer-control-override — max-rate {rate | max} — priority-mbs-thresholds — min-thresh-separation size [bytes | kilobytes] — [no] priority level — mbs-contribution size [bytes | kilobytes] —...
  • Page 229 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — rate pir-rate [cir cir-rate] — no rate — scheduler-policy scheduler-policy-name — no scheduler-policy — multi-service-site customer-site-name — no multi-service-site — [no] shutdown 2.17.1.1.3 Apipe Spoke-SDP Commands config — service —...
  • Page 230 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no precedence — [no] pw-path-id — — no — saii-type2 global-id:node-id:ac-id — no saii-type2 — taii-type2 global-id:node-id:ac-id — no taii-type2 — [no] shutdown 2.17.1.2 Related Apipe Commands 2.17.1.2.1 Connection Profile Commands config —...
  • Page 231 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — no description — revert-time {revert-time | infinite} — no revert-time — service-mtu octets — no service-mtu — [no] shutdown 2.17.1.3.2 Cpipe SAP Commands config — service — cpipe service-id [customer customer-id] [create] [vpn vpn-id] [vc-type {satop-e1 | satop-t1 | cesopsn | cesopsn-cas}] [vc-switching] [test] [name name] —...
  • Page 232 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no — size [bytes | kilobytes] — no — packet-byte-offset {add add-bytes | subtract sub-bytes} — percent-rate pir-percent [cir cir-percent] — no percent-rate — rate {rate | max} [cir {max | rate}] —...
  • Page 233 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — mbs-contribution size [bytes | kilobytes] — policer-control-policy policy-name — no policer-control-policy — [no] policer-override — policer policer-id [create] — no policer policer-id — size [bytes | kilobytes] — no —...
  • Page 234 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.17.1.3.3 Cpipe Spoke-SDP Commands config — service — cpipe service-id [customer customer-id] [create] [vpn vpn-id] [vc-type {satop-e1 | satop-t1 | cesopsn | cesopsn-cas}] [vc-switching] [test] [name name] — no cpipe service-id —...
  • Page 235 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.17.1.4 Epipe Service Configuration Commands • Epipe Global Commands • Epipe SAP Configuration Commands • Epipe Spoke-SDP Configuration Commands • Epipe SAP Template Commands 2.17.1.4.1 Epipe Global Commands config — service —...
  • Page 236 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — — [no] force-qtag-forwarding — tunnel service-id backbone-dest-mac mac-name isid ISID — tunnel service-id backbone-dest-mac ieee-address isid ISID — no tunnel — pw-port pw-port-id fpe fpe-id [create] — no pw-port —...
  • Page 237 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — accounting-policy acct-policy-id — no accounting-policy [acct-policy-id] — app-profile app-profile-name — no app-profile — — egress — traffic-desc traffic-desc-profile-id — no traffic-desc — encapsulation atm-encap-type — ingress — traffic-desc traffic-desc-profile-id —...
  • Page 238 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no — rate pir-rate — no rate — slope-policy hsmda-slope-policy-name allowable — no slope-policy — wrr-weight weight — no wrr-weight — secondary-shaper secondary-shaper-name — no secondary-shaper — wrr-policy hsmda-wrr-policy-name —...
  • Page 239 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — no adaptation-rule — avg-frame-overhead percentage — no avg-frame-overhead — burst-limit {default | size [bytes | kilobytes]} — no burst-limit — {size-in-kbytes | default} — no — drop-tail low — percent-reduction-from-mbs percent —...
  • Page 240 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no ccm-padding-size ccm-padding — [no] csf-enable — multiplier multiplier-value — no multiplier — description description-string — no description — [no] eth-test-enable — [no] bit-error-threshold bit-errors — test-pattern {all-zeros | all-ones} [crc-enable] —...
  • Page 241 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — network-policy-id fp- redirect-group queue-group-name instance instance-id — no — [no] hsmda-queue-override — packet-byte-offset {add add-bytes | subtract sub-bytes} — no packet-byte-offset — [no] queue queue-id — rate pir-rate — no rate —...
  • Page 242 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — [no] monitor-depth — parent {[weight weight] [cir-weight cir-weight]} — no parent — percent-rate pir-percent [cir cir-percent] — no percent-rate — rate pir-rate [cir cir-rate] — no rate — [no] scheduler-override —...
  • Page 243 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — [no] bfd-enable — bfd-template name — no bfd-template — [no] block-on-peer-fault — [no] collect-stats — [no] control-channel-status — [no] acknowledgment — refresh-timer value — no refresh-timer — request-timer timer1 retry-timer timer2 [timeout-multiplier multiplier] —...
  • Page 244 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no ccm-ltm-priority — [no] description — [no] eth-test-enable — ccm-padding-size ccm-padding — no ccm-padding-size ccm-padding — [no] csf-enable — multiplier multiplier-value — no multiplier — [no] description — [no] eth-test-enable —...
  • Page 245 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — precedence [precedence-value | primary] — no precedence — [no] pw-path-id — — no — saii-type2 global-id:node-id:ac-id — no saii-type2 — taii-type2 global-id:node-id:ac-id — no taii-type2 — [no] pw-status-signaling — [no] shutdown —...
  • Page 246 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — ip-filter-id — no — ipv6 ipv6-filter-id — no ipv6 — mac-filter-id — no — [no] filter-name — name — no — ipv6 name — no ipv6 — name — no —...
  • Page 247 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — no fpipe service-id — description description-string — no description — [no] endpoint endpoint-name [create] — active-hold-delay active-endpoint-delay — no active-hold-delay — description description-string — no description — revert-time {revert-time | infinite} —...
  • Page 248 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — policer policer-id [create] — no policer policer-id — size [bytes | kilobytes] — no — {size [bytes | kilobytes] | default} — no — packet-byte-offset {add add-bytes | subtract sub-bytes} —...
  • Page 249 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — no scheduling-class — ingress — filter [ip ip-filter-id] — filter [ipv6 ipv6-filter-id] — no filter [ip ip-filter-id] [ipv6 ipv6-filter-id] — policer-control-override [create] — no policer-control-override — max-rate {rate | max} —...
  • Page 250 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no scheduler scheduler-name — parent [weight weight] [cir-weight cir-weight] — no parent — rate pir-rate [cir cir-rate] — no rate — scheduler-policy scheduler-policy-name — no scheduler-policy — multi-service-site customer-site-name —...
  • Page 251 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.17.1.6 Ipipe Service Configuration Commands • Ipipe Global Commands • Ipipe SAP Commands • Ipipe Spoke-SDP Commands 2.17.1.6.1 Ipipe Global Commands config — service — ipipe service-id [customer customer-id] [create] [vpn vpn-id] [vc-switching] [name name] —...
  • Page 252 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — accounting-policy acct-policy-id — no accounting-policy [acct-policy-id] — app-profile app-profile-name — no app-profile — — egress — traffic-desc traffic-desc-profile-id — no traffic-desc — encapsulation atm-encap-type — ingress — traffic-desc traffic-desc-profile-id —...
  • Page 253 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — priority-mbs-thresholds — min-thresh-separation size [bytes | kilobytes] — [no] priority level — mbs-contribution size [bytes | kilobytes] — policer-control-policy policy-name — no policer-control-policy — [no] policer-override — policer policer-id [create] —...
  • Page 254 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — {size [bytes | kilobytes] | default} — no — monitor-depth — [no] monitor-depth — parent {[weight weight] [cir-weight cir-weight]} — no parent — percent-rate pir-percent [cir cir-percent] — no percent-rate —...
  • Page 255 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — no squelch-ingress-levels — tunnel-fault [accept | ignore] — eth-tunnel — path path-index tag qtag[.qtag] — no path path-index — frame-relay — [no] frf-12 — ete-fragment-threshold threshold — no ete-fragment-threshold —...
  • Page 256 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — {size [bytes | kilobytes] | default} — no — [no] monitor-depth — parent {[weight weight] [cir-weight cir-weight]} — no parent — percent-rate pir-percent [cir cir-percent] — no percent-rate — rate pir-rate [cir cir-rate] —...
  • Page 257 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — bfd-template name — no bfd-template — ce-address ip-address — no ce-address — [no] control-word — description description-string — no description — egress — filter {ip ip-filter-id | ipv6 ipv6-filter-id} —...
  • Page 258 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>cpipe>spoke-sdp config>service>epipe config>service>epipe>bgp-vpws config>service>epipe>site config>service>epipe>sap config>service>epipe>spoke-sdp config>service>epipe>sap>eth-cfm>mep config>service>epipe>spoke-sdp>eth-cfm>mep config>service>fpipe config>service>fpipe>sap config>service>fpipe>spoke-sdp config>service>ipipe config>service>ipipe>sap config>service>ipipe>spoke-sdp config>service>epipe>pw-port Description This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of any entities contained within.
  • Page 259 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 no description Context config>service>apipe config>service>apipe>endpoint config>service>cpipe config>service>cpipe>endpoint config>service>epipe config>service>epipe>spoke-sdp config>service>epipe>endpoint config>service>fpipe config>service>fpipe>endpoint config>service>ipipe config>service>ipipe>endpoint config>service>ipipe>spoke-sdp config>connection-profile Description This command creates a text description stored in the configuration file for a configuration context.
  • Page 260 This ID must be unique to this service and may not be used for any other service of any type. The service-id must be the same number used for every 7450 ESS or 7750 SR on which this service is defined. Values...
  • Page 261 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 test — Specifies a unique test service type for the service context which will contain only a SAP configuration. The test service can be used to test the throughput and performance of a path for MPLS-TP PWs.
  • Page 262 — Specifies a unique test service type for the service context which will contain only a SAP configuration. The test service can be used to test the throughput and performance of a path for MPLS-TP PWs. This parameter applies to the 7450 ESS and 7750 SR only.
  • Page 263 An Epipe connects two endpoints defined as Service Access Points (SAPs). Both SAPs may be defined in one 7450 ESS, 7750 SR, or 7950 XRS or they may be defined in separate devices connected over the service provider network. When the endpoint SAPs are separated by the service provider network, the far end SAP is generalized into a Service Distribution Point (SDP).
  • Page 264 — Specifies a unique test service type for the service context which will contain only a SAP configuration. The test service can be used to test the throughput and performance of a path for MPLS-TP PWs. This parameter applies to the 7450 ESS and 7750 SR only.
  • Page 265 This ID must be unique to this service and may not be used for any other service of any type. The service-id must be the same number used for every 7450 ESS or 7750 SR on which this service is defined. Values...
  • Page 266 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 create — Keyword used to create the Ipipe service instance. The create keyword requirement can be enabled/disabled in the environment>create context. name name — Configures an optional service name identifier, up to 64 characters, to a given service.
  • Page 267 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Description This command specifies that the node will delay sending the change in the T-LDP status bits for the VLL endpoint when the MC-LAG transitions the LAG subgroup which hosts the SAP for this VLL endpoint from active to standby or when any object in the endpoint.
  • Page 268 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 standby-signaling-master Syntax [no] standby-signaling-master Context config>service>epipe>endpoint config>service>ipipe>endpoint Description When this command is enabled, the pseudowire standby bit (value 0x00000020) will be sent to T-LDP peer for each spoke SDP of the endpoint that is selected as a standby. This command is mutually exclusive with a VLL mate SAP created on a mc-lag/mc-aps or ICB.
  • Page 269 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 no service-mtu Context config>service>apipe config>service>cpipe config>service>epipe config>service>fpipe config>service>ipipe Description This command configures the service payload (Maximum Transmission Unit – MTU), in bytes, for the service. This MTU value overrides the service-type default MTU. The service- mtu defines the payload capabilities of the service.
  • Page 270 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 13 MTU Values SAP VC-Type Example: Service Advertised MTU Ethernet 1514 1500 Ethernet (with preserved dot1q) 1518 1504 VPLS 1514 1500 VPLS (with preserved dot1q) 1518 1504 VLAN (dot1p transparent to MTU value) 1514 1500 VLAN (Q-in-Q with preserved bottom Qtag)
  • Page 271 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.17.2.4 Service SAP Commands Commands listed in this section may apply to multiple Apipe, Cpipe, Epipe, Fpipe, and Ipipe contexts. Syntax sap sap-id [create] [no-endpoint] sap sap-id [create] endpoint endpoint-name no sap sap-id Context config>service>apipe...
  • Page 272 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • Frame Relay SAP RFC 2427, routed PDU encapsulation for an Ipipe service • Ethernet SAP RFC 1332, PPP IPCP encapsulation of an IPv4 packet for an Ipipe service • Ethernet SAP HDLC SAP uses the routed IPv4 encapsulation for an Ipipe service •...
  • Page 273 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 port-id slot/mda/port [.channel] eth-sat-id esat-id/slot/port esat keyword 1 to 20 pxc-id pxc-id.sub-port keyword 1 to 64 sub-port a, b endpoint — Adds a SAP endpoint association. no endpoint — Removes the association of a SAP or a spoke SDP with an explicit endpoint name.
  • Page 274 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 An accounting policy must be defined before it can be associated with a SAP. If the policy-id does not exist, an error message is generated. A maximum of one accounting policy can be associated with a SAP at one time. Accounting policies are configured in the config>log context.
  • Page 275 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Context config>service>apipe>sap>atm config>service>epipe>sap>atm Description This command configures ingress ATM attributes for the SAP. traffic-desc Syntax traffic-desc traffic-desc-profile-id no traffic-desc Context config>service>apipe>sap>atm>egress config>service>apipe>sap>atm>ingress config>service>epipe>sap>atm>egress config>service>epipe>sap>atm>ingress Description This command assigns an ATM traffic descriptor profile to a specified context (for example, a SAP).
  • Page 276 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 For the 7750 SR, the ATM port must be configured as a SAP on an Apipe service of vc-type atm-cell. The ATM port must also be configured on the following MDAs: •...
  • Page 277 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 When alarm-cells functionality is enabled, a PVCC’s operational status is affected when a PVCC goes into an AIS or RDI state because of an AIS/RDI processing (assuming nothing else affects PVCC’s operational status, for example, if the PVCC goes operationally down, or enters a fault state and becomes operationally up, or exits that fault state).
  • Page 278 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 For Apipe services, the user has the option of enabling or disabling this option for vc types atm-vcc and atm-sdu since these service types maintain the ATM layer and/or the AAL5 layer across the VLL.
  • Page 279 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 config>service>fpipe>sap config>service>ipipe>sap Description This command enables accounting and statistical data collection for either the SAP, network port, or IP interface. When applying accounting policies the data, by default, is collected in the appropriate records and written to the designated billing file.
  • Page 280 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 If no sap-egress QoS policy is defined, the system default sap-egress QoS policy is used for egress processing. ingress Syntax ingress Context config>service>apipe>sap config>service>cpipe>sap config>service>epipe>sap config>service>fpipe>sap config>service>ipipe>sap Description This command enables the context to configure ingress SAP Quality of Service (QoS) policies.
  • Page 281 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 rate Syntax rate kilobits-per-second no rate Context config>service>apipe>sap>egress>agg-rate config>service>cpipe>sap>egress>agg-rate config>service>epipe>sap>egress>agg-rate config>service>fpipe>sap>egress>agg-rate config>service>ipipe>sap>egress>agg-rate Description This command defines the enforced aggregate rate for all queues associated with the agg- rate context. A rate must be specified for the agg-rate context to be considered to be active on the context’s object (SAP, subscriber, Vport, and so on).
  • Page 282 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters create — The create keyword is required when the policer-control-overrides node is being created and the system is configured to expect explicit confirmation that a new object is being created. When the system is not configured to expect explicit confirmation, the create keyword is not required.
  • Page 283 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 min-thresh-separation Syntax min-thresh-separation size [bytes | kilobytes] Context config>service>apipe>sap>egress>policer-control-override>priority-mbs-threshold config>service>apipe>sap>ingress>policer-control-override>priority-mbs-threshold config>service>cpipe>sap>egress>policer-control-override>priority-mbs-threshold config>service>cpipe>sap>ingress>policer-control-override>priority-mbs-threshold config>service>epipe>sap>egress>policer-control-override>priority-mbs-threshold config>service>epipe>sap>ingress>policer-control-override>priority-mbs-threshold config>service>fpipe>sap>egress>policer-control-override>priority-mbs-threshold config>service>fpipe>sap>ingress>policer-control-override>priority-mbs-threshold config>service>ipipe>sap>egress>policer-control-override>priority-mbs-threshold config>service>ipipe>sap>ingress>policer-control-override>priority-mbs-threshold Description This command, within the SAP ingress and egress contexts, is used to override the root arbiter’s parent policer min-thresh-separation parameter that is defined within the policer- control-policy applied to the SAP.
  • Page 284 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>fpipe>sap>ingress>policer-control-override>priority-mbs-threshold config>service>ipipe>sap>egress>policer-control-override>priority-mbs-threshold config>service>ipipe>sap>ingress>policer-control-override>priority-mbs-threshold Description The priority-level level override CLI node contains the specified priority level’s mbs- contribution override value. This node does not need to be created and will not be output in show or save configurations unless an mbs-contribution override exist for level.
  • Page 285 On the SAP side, an instance of a policy is created each time a policy is applied. When applied to a sub-profile on a 7450 ESS and 7750 SR, an instance of the policy is created each time a subscriber successfully maps one or more hosts to the profile per ingress SAP.
  • Page 286 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 For subscribers, the maximum rate may only be overridden on the subscriber profile which will then be applied to all instances associated with the profile. The maximum rate is defined within the context of the root arbiter which is always present in a policer-control-policy.
  • Page 287 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Each child policer supports three leaky buckets. The PIR bucket manages the policer’s peak rate and maximum burst size, the CIR leaky bucket manages the policer’s committed rate and committed burst size. The third leaky bucket is used by the policer control policy instance to manage the child policer’s fair rate (FIR).
  • Page 288 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 To visualize the behavior of the parent policer, picture that when the aggregate forwarding rate of all child policers is currently above the decrement rate of the parent PIR leaky bucket, the bucket depth will increase over time.
  • Page 289 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 When the association counter is zero, both the shared-portion and the fair-portion for that priority level are zero since neither discard thresholds will be used. Whenever the association counter is greater than 0, the fair-portion for that priority level will be derived from the current value of the priority’s mbs-contribution parameter and the global min-thresh-separation parameter.
  • Page 290 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command, within the SAP ingress or egress contexts, is used to create a CLI node for specific overrides to one or more policers created on the SAP through the sap-ingress or sap- egress QoS policies.
  • Page 291 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 config>service>apipe>sap>ingress>policer-over>plcr config>service>cpipe>sap>egress>policer-over>plcr config>service>cpipe>sap>ingress>policer-over>plcr config>service>epipe>sap>egress>policer-over>plcr config>service>epipe>sap>ingress>policer-over>plcr config>service>fpipe>sap>egress>policer-over>plcr config>service>fpipe>sap>ingress>policer-over>plcr config>service>ipipe>sap>egress>policer-over>plcr config>service>ipipe>sap>ingress>policer-over>plcr Description This command, within the SAP ingress and egress policer-overrides contexts, is used to override the sap-ingress and sap-egress QoS policy configured CBS parameter for the specified policer-id.
  • Page 292 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Default no mbs Parameters size — The size parameter is required when specifying mbs override and is expressed as an integer representing the required size in either bytes or kilobytes. The default is kilobytes.
  • Page 293 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 sub-bytes — Specifies the number of bytes that are subtracted from the size of each packet associated with the policer for rate metering, profiling and accounting purposes. From the policer’s perspective, the maximum packet size is reduced by the amount being subtracted from the size of each packet.
  • Page 294 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description The percent-rate command within the SAP ingress and egress QoS policy enables supports for a queue’s PIR and CIR rate to be configured as a percentage of the egress port’s line rate or of its parent scheduler’s rate.
  • Page 295 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 rate Syntax rate {rate | max} [cir {rate | max}] Context config>service>apipe>sap>egress>policer-over>plcr config>service>apipe>sap>ingress>policer-over>plcr config>service>cpipe>sap>egress>policer-over>plcr config>service>cpipe>sap>ingress>policer-over>plcr config>service>epipe>sap>egress>policer-over>plcr config>service>epipe>sap>ingress>policer-over>plcr config>service>fpipe>sap>egress>policer-over>plcr config>service>fpipe>sap>ingress>policer-over>plcr config>service>ipipe>sap>egress>policer-over>plcr config>service>ipipe>sap>ingress>policer-over>plcr Description This command within the SAP ingress and egress policer-overrides contexts is used to override the sap-ingress and sap-egress QoS policy configured rate parameters for the specified policer-id.
  • Page 296 The no form of this command attempts to return the policer’s stat-mode setting to minimal. Refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Quality of Service Guide for detailed information about the supported parameters for the policer stat-mode command.
  • Page 297 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 config>service>cpipe>sap>egress config>service>epipe>sap>egress config>service>fpipe>sap>egress config>service>ipipe>sap>egress Description When enabled (the encapsulation type of the access port where this SAP is defined as qinq), the qinq-mark-top-only command specifies which P-bits/DEI bit to mark during packet egress.
  • Page 298 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters policy-id — The egress policy ID to associate with SAP on egress. The policy ID must already exist. Values 1 to 65535 queue-group-name — Specifies the name of the egress port queue group of the IOM/ IMM/XMA, up to 32 characters in length.
  • Page 299 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Parameters policy-id — The ingress policy ID to associate with SAP or IP interface on ingress. The policy ID must already exist. Values 1 to 65535 shared-queuing — This keyword can only be specified on SAP ingress. The shared- queuing keyword specifies the shared queue policy will be used by this SAP.
  • Page 300 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>epipe>sap>egress>queue-override config>service>ipipe>sap>egress>queue-override Description This command configures the HS secondary shaper to be used to apply an aggregate rate and per-scheduling class rates to the SAP egress HSQ queue group. The no form of the command removes the HS secondary shaper override from the configuration, reverting the SAP egress HSQ queue group to the default HS secondary shaper on that port.
  • Page 301 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 percent-rate Syntax percent-rate percent no percent-rate Context config>service>epipe>sap>egress>queue-override>hs-wrr-group config>service>ipipe>sap>egress>queue-override>hs-wrr-group Description This command overrides the scheduling rate applied to the HS WRR group as a percentage of the port rate, including both the port's egress rate and port's HS scheduler policy maximum rate, if configured.
  • Page 302 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of this command removes the class weight override value from the configuration. Parameters weight — Specifies the weight of the queue. Values 1, 2, 4, 8 hs-wred-queue Syntax hs-wred-queue policy slope-policy-name no hs-wred-queue...
  • Page 303 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 config>service>cpipe>sap>egress>queue-override config>service>cpipe>sap>ingress>queue-override config>service>epipe>sap>egress>queue-override config>service>epipe>sap>ingress>queue-override config>service>fpipe>sap>egress>queue-override config>service>fpipe>sap>ingress>queue-override config>service>ipipe>sap>egress>queue-override config>service>ipipe>sap>ingress>queue-override Description This command specifies the ID of the queue whose parameters are to be overridden. Parameters queue-id — The queue ID whose parameters are to be overridden. Values 1 to 32 create —...
  • Page 304 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters pir — The pir parameter defines the constraints enforced when adapting the PIR rate defined within the queue queue-id rate command. The pir parameter requires a qualifier that defines the constraint used when deriving the operational PIR for the queue.
  • Page 305 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • Offered-load — The offered-load of a queue is calculated by starting with the queue depth in octets, adding the received octets at the queue and subtracting queue discard octets. The result is the number of octets the queue has available to transmit. This is the packet based offered-load.
  • Page 306 On the 7450 ESS and 7750 SR, SAP and subscriber SLA-profile average frame overhead override — The average frame overhead parameter on a sap-egress may be overridden at an individual egress queue basis.
  • Page 307 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Description The queue burst-limit command defines an explicit shaping burst size for a queue. The configured size defines the shaping leaky bucket threshold level that indicates the maximum burst over the queue’s shaping rate. The no form of this command restores the default burst limit to the specified queue.
  • Page 308 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 It is permissible, and possibly desirable, to oversubscribe the total CBS reserved buffers for a specific access port egress buffer pool. Oversubscription may be desirable due to the potential large number of service queues and the economy of statistical multiplexing the individual queue’s CBS setting into the defined reserved total.
  • Page 309 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 config>service>cpipe>sap>ingress>queue-override>queue>drop-tail config>service>fpipe>sap>egress>queue-override>queue>drop-tail config>service>fpipe>sap>ingress>queue-override>queue>drop-tail config>service>ipipe>sap>egress>queue-override>queue>drop-tail config>service>ipipe>sap>ingress>queue-override>queue>drop-tail config>service>epipe>sap>egress>queue-override>queue>drop-tail config>service>epipe>sap>ingress>queue-override>queue>drop-tail Description This command enables the context to configure the queue low drop-tail parameters. The low drop tail defines the queue depth beyond which out-of-profile packets are not accepted into the queue and will be discarded.
  • Page 310 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>epipe>sap>ingress>queue-override>queue config>service>fpipe>sap>egress>queue-override>queue config>service>fpipe>sap>ingress>queue-override>queue config>service>ipipe>sap>egress>queue-override>queue config>service>ipipe>sap>ingress>queue-override>queue Description This command overrides specific attributes of the specified queue’s MBS parameters. A queue uses its MBS value to determine whether it has exhausted all of its buffers while enqueuing packets.
  • Page 311 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 The no form of the command removes queue depth monitoring for the specified queue. parent Syntax parent {[weight weight] [cir-weight cir-weight]} no parent Context config>service>apipe>sap>egress>queue-override>queue config>service>apipe>sap>ingress>queue-override>queue config>service>cpipe>sap>egress>queue-override>queue config>service>cpipe>sap>ingress>queue-override>queue config>service>epipe>sap>egress>queue-override>queue config>service>epipe>sap>ingress>queue-override>queue config>service>fpipe>sap>egress>queue-override>queue config>service>fpipe>sap>ingress>queue-override>queue config>service>ipipe>sap>egress>queue-override>queue...
  • Page 312 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of the command removes a child association with a parent scheduler. If a parent association does not currently exist, the command has no effect and returns without an error. Once a parent association has been removed, the former child queue attempts to operate based on its configured rate parameter.
  • Page 313 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Description The percent-rate command supports a queue’s shaping rate and CIR rate as a percentage of the egress port’s line rate. When the rates are expressed as a percentage within the template, the actual rate used per instance of the queue group queue-id will vary based on the port speed.
  • Page 314 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>cpipe>sap>egress>queue-override>queue config>service>cpipe>sap>ingress>queue-override>queue config>service>epipe>sap>egress>queue-override>queue config>service>epipe>sap>ingress>queue-override>queue config>service>fpipe>sap>egress>queue-override>queue config>service>fpipe>sap>ingress>queue-override>queue config>service>ipipe>sap>egress>queue-override>queue config>service>ipipe>sap>ingress>queue-override>queue Description This command can be used to override specific attributes of the specified queue’s Peak Information Rate (PIR) and the Committed Information Rate (CIR) parameters. The PIR defines the maximum rate that the queue can transmit packets out an egress interface (for SAP egress queues).
  • Page 315 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 cir-rate — The cir parameter overrides the default administrative CIR used by the queue. When the rate command is executed, a CIR setting is optional. When the rate command has not been executed or the cir parameter is not explicitly specified, the default CIR (0) is assumed.
  • Page 316 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command can be used to override specific attributes of the specified scheduler name. A scheduler defines bandwidth controls that limit each child (other schedulers, policers, and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy.
  • Page 317 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 parent Syntax parent [weight weight] [cir-weight cir-weight] no parent Context config>service>apipe>sap>ingress>sched-override>scheduler config>service>apipe>sap>egress>sched-override>scheduler config>service>cpipe>sap>ingress>sched-override>scheduler config>service>cpipe>sap>egress>sched-override>scheduler config>service>epipe>sap>ingress>sched-override>scheduler config>service>epipe>sap>egress>sched-override>scheduler config>service>fpipe>sap>ingress>sched-override>scheduler config>service>fpipe>sap>egress>sched-override>scheduler config>service>ipipe>sap>ingress>sched-override>scheduler config>service>ipipe>sap>egress>sched-override>scheduler Description This command can be used to override the scheduler’s parent weight and cir-weight information.
  • Page 318 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 cir-weight — The cir-weight keyword defines the relative weight of this scheduler in comparison to other child schedulers, policers, and queues at the same cir-level defined by the cir-level parameter in the applied scheduler policy. Within the strict cir-level, all cir-weight values from active children at that level are summed and the ratio of each active child’s cir-weight to the total is used to distribute the available bandwidth at that level.
  • Page 319 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 When a scheduler is defined without specifying a rate, the default rate is max. If the scheduler is a root scheduler (no parent defined), the default maximum rate must be changed to an explicit value.
  • Page 320 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the ingress SAP queues associated with the customer site.
  • Page 321 ARP messages. On a 7450 ESS, this command specifies the IP address of the CE device associated with an Ipipe SAP. In the case of a SAP, it is the address of the CE device directly attached to the SAP.
  • Page 322 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Transit AA subscribers are managed by the system through this service policy, which determines how transit subs are created and removed for that service. The no form of the command removes the association of the policy to the service. Default no transit-policy Parameters...
  • Page 323 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Default no use-broadcast-mac Syntax [no] mac ieee-address Context config>service>ipipe>sap Description This command assigns a specific MAC address to an Ipipe SAP. The no form of this command returns the MAC address of the SAP to the default value. Default The physical MAC address associated with the Ethernet interface where the SAP is configured.
  • Page 324 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>ipipe>sap config>service>ipipe>spoke-sdp Description This command configures the application profile name. Parameters app-profile-name — Specifies an existing application profile name configured in the config>app-assure>group>policy context. cflowd Syntax [no] cflowd Context config>service>epipe>sap Description This command enables cflowd to collect traffic flow samples through a service interface (SAP) for analysis.
  • Page 325 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Parameters policy-id — Specifies an existing CPU protection policy. Values 1 to 255 mac-monitoring — This keyword enables MAC monitoring. eth-cfm-monitoring — This keyword enables Ethernet Connectivity Fault Management monitoring. aggregate —...
  • Page 326 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 eth-tunnel-sap-id — Specifies a SAP ID of a same-fate SAP. Values 0 to 4094 aarp Syntax aarp aarpId type type no aarp Context config>service>epipe>sap config>service>epipe>spoke-sdp Description This command associates an AARP instance with a multi-homed SAP or spoke SDP. This instance uses the same AARP ID in the same node to provide traffic flow and packet asymmetry removal for a multi-homed SAP or spoke SDP.
  • Page 327 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Description This command associates an AARP instance to an Ipipe spoke SDP. This instance is paired with the same aarp-id in a peer node as part of a configuration to provide flow and packet asymmetry removal for traffic for a multi-homed SAP or spoke SDP.
  • Page 328 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command configures weight and class to this SAP to be used on LAG egress when the LAG uses weighted per-link-hash. The no form of this command restores default configuration. Default no lag-per-link-hash (equivalent to weight 1 class 1) queue-frame-based-accounting...
  • Page 329 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 The SDP has an operational state which determines the operational state of the SDP within the service. For example, if the SDP is administratively or operationally down, the SDP for the service will be down.
  • Page 330 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 SDPs must be explicitly associated and bound to a service. If an SDP is not bound to a service, no far-end devices can participate in the service. This command can also be used to associate a GRE tunnel carrying Ethernet payload with an Epipe and terminate it on a PW port referenced within the same Epipe service.
  • Page 331 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 vlan — Defines the VC type as VLAN. The top VLAN tag, if a VLAN tag is present, is stripped from traffic received on the pseudowire, and a VLAN tag is inserted when forwarding into the pseudowire.
  • Page 332 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 When the user binds a VLL service to this SDP, an amount of bandwidth equal to bandwidth is subtracted from the SDP available bandwidth adjusted by the booking factor. When the user deletes this VLL service binding from this SDP, an amount of bandwidth equal to bandwidth is added back into the SDP available bandwidth.
  • Page 333 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Context config>service>epipe>spoke-sdp Description When enabled, this command blocks the transmit direction of a PW when any of the following PW status codes is received from the far end PE: 0x00000001 Pseudowire Not Forwarding 0x00000002 Local Attachment Circuit (ingress) Receive Fault...
  • Page 334 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>epipe>bgp>pw-template-binding config>service>fpipe>spoke-sdp config>service>ipipe>spoke-sdp Description This command configures a named BFD template to be used by VCCV BFD on PWs belonging to the VLL, BGP VPWS, or VPLS service. The template specifies parameters, such as the minimum transmit and receive control packet timer intervals, to be used by the BFD session.
  • Page 335 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 The no form of the command resets the configuration to ignore the CLP change as an indication to complete the cell concatenation. max-cells Syntax max-cells cell-count no max-cells [cell-count] Context config>service>apipe>spoke-sdp>cell-concat Description This command enables the configuration of the maximum number of ATM cells to accumulate...
  • Page 336 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters delay-time — Specifies the maximum amount of time, in hundreds of microseconds, to wait before transmitting the MPLS packet with whatever ATM cells have been received. For example, to bound the delay to 1 ms the user would configure 10 (hundreds of microseconds).
  • Page 337 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 refresh-timer Syntax refresh-timer value no refresh-timer Context config>service>apipe>spoke-sdp>control-channel-status config>service>cpipe>spoke-sdp>control-channel-status config>service>epipe>spoke-sdp>control-channel-status config>service>vpls>spoke-sdp>control-channel-status Description This command configures the refresh timer for control channel status signaling packets. By default, no refresh packets are sent. Default no refresh-timer Parameters...
  • Page 338 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 control-word Syntax [no] control-word Context config>service>apipe>spoke-sdp config>service>cpipe>spoke-sdp config>service>epipe>spoke-sdp config>service>fpipe>spoke-sdp config>service>ipipe>spoke-sdp Description The control word command provides the option to add a control word as part of the packet encapsulation for pseudowire types for which the control word is optional. These are Ethernet pseudowires (Epipe).
  • Page 339 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 config>service>epipe>spoke-sdp>egress config>service>fpipe>spoke-sdp>egress config>service>ipipe>spoke-sdp>egress config>service>vpls>spoke-sdp>egress config>service>vpls>mesh-sdp>egress config>service>pw-template>egress Description This command is used to redirect PW packets to an egress port queue-group for the purpose of shaping. The egress PW shaping provisioning model allows the mapping of one or more PWs to the same instance of queues, or policers and queues, that are defined in the queue-group template.
  • Page 340 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3. When a PW FC is redirected to use a queue or a policer and a queue in a queue-group and the queue-group name exists and the policer-id or policer-id plus queue-id exist, it is not required to check that an instance of that queue-group exists in all egress network ports that have network IP interfaces.
  • Page 341 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 vc-label Syntax [no] vc-label egress-vc-label | ingress-vc-label Context config>service>apipe>spoke-sdp>egress config>service>apipe>spoke-sdp>ingress config>service>cpipe>spoke-sdp>egress config>service>cpipe>spoke-sdp>ingress config>service>fpipe>spoke-sdp>egress config>service>fpipe>spoke-sdp>ingress config>service>ipipe>spoke-sdp>egress config>service>ipipe>spoke-sdp>ingress Description This command configures the egress and ingress VC label. The actual maximum value that can be configured is limited by the config>router>mpls- labels>static-label-range command.
  • Page 342 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>pw-template>ingress Description This command is used to redirect PW packets to an ingress forwarding plane queue-group for the purpose of rate-limiting. The ingress PW rate-limiting feature uses a policer in queue-group provisioning model. This model allows the mapping of one or more PWs to the same instance of policers that are defined in a queue-group template.
  • Page 343 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 −When a PW packet for that FC is received and an instance of the referenced queue- group name does not exist on that FP, the PW packets will be fed directly into the corresponding ingress network shared queue for that FC defined in the network- queue policy applied to the ingress of the FP.
  • Page 344 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 precedence Syntax precedence [precedence-value | primary] no precedence Context config>service>apipe>spoke-sdp config>service>cpipe>spoke-sdp config>service>epipe>spoke-sdp config>service>fpipe>spoke-sdp config>service>ipipe>spoke-sdp Description This command specifies the precedence of the SDP binding when there are multiple SDP bindings attached to one service endpoint. The value of zero can only be assigned to one SDP bind making it the primary SDP bind.
  • Page 345 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Default no pw-path-id Syntax agi agi no agi Context config>service>apipe>spoke-sdp>pw-path-id config>service>cpipe>spoke-sdp>pw-path-id config>service>epipe>spoke-sdp>pw-path-id config>service>vpls>spoke-sdp>pw-path-id Description This command configures the attachment group identifier for an MPLS-TP PW. Parameters agi — Specifies the attachment group identifier. Values 0 to 4294967295 saii-type2...
  • Page 346 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 taii-type2 Syntax taii-type2 global-id:node-id:ac-id no taii-type2 Context config>service>apipe>spoke-sdp>pw-path-id config>service>cpipe>spoke-sdp>pw-path-id config>service>epipe>spoke-sdp>pw-path-id config>service>vpls>spoke-sdp>pw-path-id Description This command configures the Target Individual Attachment Identifier (TAII) for an MPLS-TP spoke SDP. If this is configured on a spoke SDP for which vc-switching is also configured (for example, it is at an S-PE), then the values must match those of the saii-type2 of the mate spoke SDP.
  • Page 347 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 The entropy label and hash label features are mutually exclusive. The entropy label cannot be configured on a spoke SDP or service where the hash label feature has already been configured.
  • Page 348 • The user can enable or disable the signal-capability option in CLI as needed. When doing so, the 7450 ESS or 7750 SR must withdraw the label it sent to its peer and send a new label mapping message with the new value of the F bit in the flow label interface parameters sub-TLV of the PW ID FEC element.
  • Page 349 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Description An ePipe service will not transition to Oper State: Down when a SAP fails and when this optional command is configured under that specific SAP. Only a single SAP in an ePipe may have this optional command included.
  • Page 350 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command specifies the operational group to be monitored by the object under which it is configured. The oper-group name must be already configured under the config>service context before its name is referenced in this command. The no form of the command removes the association.
  • Page 351 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 This command will fail when configuring it under a spoke SDP within a PBB-Epipe that is connected to a B-VPLS with mac-notification enabled. Default no use-sdp-bmac vlan-vc-tag Syntax vlan-vc-tag tag no vlan-vc-tag tag Context config>service>epipe>spoke-sdp...
  • Page 352 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The SDP has an operational state which determines the operational state of the SDP within the service. For example, if the SDP is administratively or operationally down, the SDP for the service will be down.
  • Page 353 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Automatic Endpoint Configuration allows the configuration of a spoke SDP endpoint without specifying the TAII associated with that spoke SDP. It allows a single-sided provisioning model where an incoming label mapping message with a TAII that matches the SAII of that spoke SDP to be automatically bound to that endpoint.
  • Page 354 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>epipe>spoke-sdp-fec Description This command specifies the precedence of the SDP binding when there are multiple SDP bindings attached to one service endpoint. The value of zero can only be assigned to one SDP bind making it the primary SDP bind.
  • Page 355 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Default retry-count 30 Parameters retry-count — The maximum number of retries before putting the spoke-sdp into the shutdown state. Values 10 to 10000 retry-timer Syntax retry-timer retry-timer no retry-timer Context config>service>epipe>spoke-sdp-fec Description This command specifies a retry-timer for the spoke SDP.
  • Page 356 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 signaling Syntax signaling signaling Context config>service>epipe>spoke-sdp-fec Description This command enables a user to configure this router as the active pr passive T-PE for signaling this MS-PW, or to automatically select whether this T-PE is active or passive based on the prefix.
  • Page 357 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Parameters global-id — A Global ID of this router T-PE. This value must correspond to one of the global_id values configured for a local-prefix under config>service>pw- routing>local-prefix context. Values 1 to 4294967295 prefix —...
  • Page 358 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>connection-profile Description This command allows the adding of discrete VPI/VCI values to an ATM connection profile for assignment to an ATM SAP of an Apipe VLL of vc-type atm-cell. Up to a maximum of 16 discrete VPI/VCI values can be configured in a connection profile.
  • Page 359 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • On transmission, the settings for the L2-Info extended community in the BGP updates are derived from the pseudowire template attributes. If multiple pseudowire template bindings (with or without import-rt) are specified for the same VPWS instance the first pw-template entry will be used for the information in the BGP update sent.
  • Page 360 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 route-distinguisher rd Context config>service>epipe>bgp Description This command configures the Route Distinguisher (RD) component that is signaled in the MPBGP NLRI for L2VPN AFI. This value is used for BGP multi-homing and BGP-VPWS. An RD value must be configured under BGP node.
  • Page 361 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • A two-octet AS-specific extended community, IPv4 specific extended community. • An RT value must be configured under BGP node when BGP Epipe is configured. Parameters export ext-community — Specifies communities allowed to be sent to remote PE neighbors.
  • Page 362 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of the command removes the ve-name. Parameters name — Specifies a site name up to 32 characters in length. ve-id Syntax ve-id value no ve-id Context config>service>epipe>bgp-vpws>ve-name config>service>epipe>bgp-vpws>remote-ve-name Description This command configures a ve-id for either the local VPWS instance when configured under...
  • Page 363 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Description This command administratively enables/disables the local BGP VPWS instance. On de- activation an MP-UNREACH-NLRI is sent for the local NLRI. The no form of the command enables the BGP VPWS addressing and the related BGP advertisement.
  • Page 364 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 −Transit traffic is the traffic going between BVPLS endpoints −An example of non-PBB transit traffic in BVPLS is the OAM traffic −The preceding rules apply regardless of traffic type −Unicast, BUM flooded without MMRP or with MMRP, IGMP snooped The no form of this command implies the use of existing hashing options.
  • Page 365 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Description This command configures a Provider Backbone Bridging (PBB) tunnel with Backbone VPLS (B-VPLS) service information. Parameters service-id — Specifies the B-VPLS service for the PBB tunnel associated with this service.
  • Page 366 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 shaper Syntax [no] shaper Context config>service>epipe>pw-port>egress Description This command enables the context to configure PW-port shaper parameters. int-dest-id Syntax int-dest-id name no int-dest-id Context config>service>epipe>pw-port>egress>shaper Description This command configures an intermediate destination identifier applicable to ESM PW SAPs. Parameters name —...
  • Page 367 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 site Syntax site name [create] no site name Context config>service>epipe Description This command configures a Epipe site. The no form of the command removes the name from the configuration. Parameters name —...
  • Page 368 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 site-activation-timer Syntax site-activation-timer seconds no site-activation-timer Context config>service>epipe>site Description This command configures the time-period the system keeps the local sites in standby status, waiting for BGP updates from remote PEs before running the DF (designated-forwarder) election algorithm to decide whether the site should be unblocked.
  • Page 369 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 • If the site goes down on the designated forwarder but there are no BGP multi-homing peers with the same site in an operationally up state, then the site-min-down-timer is not started and is not used.
  • Page 370 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>ipipe>eth-legacy-fault-notification Description This timer provides the legacy protocols PPP, MLPPP and HDLC time to establish after the Ethernet fault condition has cleared. The legacy protocol is afforded this amount of time to establish the connection before a fault is declared on the legacy side and propagated to the Ethernet segment.
  • Page 371 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 This command is mutually exclusive with an endpoint that is part of an mc-lag, mc-aps or an ICB. If the command is disabled, the node assumes the existing independent mode of behavior for the forwarding on the spoke SDP.
  • Page 372 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 oper-group Syntax oper-group name no oper-group Context config>service>epipe>vxlan>egr-vtep Description This command associates an operational group to the VXLAN static egress VTEP. If the egress VTEP IP disappears from the routing table, the oper-group status will become operationally down.
  • Page 373 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 epipe-sap-template Syntax epipe-sap-template name [create] no epipe-sap-template name Context config>service>template Description This command specifies which SAP parameter template should be applied to the l2-ap SAP. This can only be changed when the l2-ap is shutdown. The no form of the command removes the template, the SAP will use default parameters.
  • Page 374 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>template>epipe-sap-template>egress>filter config>service>template>epipe-sap-template>ingress>filter Description This command associates an existing IP filter policy with the template. This command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). Parameters ip-filter-id — Specifies the IP filter policy ID. The filter ID must already exist within the created IP filters.
  • Page 375 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 filter-name Syntax [no] filter-name Context config>service>template>epipe-sap-template>egress config>service>template>epipe-sap-template>ingress Description This command enables the context to configure filter parameters. Syntax ip name no ip Context config>service>template>epipe-sap-template>egress>filter-name config>service>template>epipe-sap-template>ingress>filter-name Description This command associates an existing IP filter policy with the template. Parameters name —...
  • Page 376 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Syntax qos policy-id qos name sap-egress-policy-name no qos Context config>service>template>epipe-sap-template>egress Description This command associates an existing QoS policy with the template. Parameters policy-id — The egress policy ID to associate with SAP or IP interface on egress. The policy ID must already exist.
  • Page 377 IPv4 and IPv6 address discovery are supported. If the ipv6 keyword is not included, then only IPv4 address discovery is supported and IPv6 packets are dropped. For the 7450 ESS platforms, it requires mixed mode support. keep — The keep keyword is only applicable to eth-legacy-fault-notification. This option maintains the CE address discovered even when the SAP on which the address was learned fails.
  • Page 378 This command if only applicable to the Ipipe service and must be blocked for all other services. This command has no effect if both SAPs on the Ipipe service are local to the node. For the 7450 ESS platforms, it requires mixed mode support. Default no stack-capability-signaling 2.17.2.10...
  • Page 379 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Default The default value depends on the CEM SAP endpoint type, and if applicable, the number of timeslots as shown in Table Table 14 Packet CEM SAP Endpoint Types Endpoint Type Timeslots Default Jitter Buffer (in ms) unstructuredE1...
  • Page 380 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 15 CEM SAP Endpoint Types (Continued) Endpoint Type Timeslots Default Payload Size (in bytes) nxDS0 (E1/T1) N = 1 N = 2 to 4 N x 32 N = 5 to 15 N x 16 N >= 16 N x 8...
  • Page 381 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 pktloss — Reports the lack of reception of CES packets. overrun — Reports the reception of too many CES packets resulting in a overrun of the receive jitter buffer. underrun — Reports the reception of too few CES packets resulting in a overrun of the receive jitter buffer.
  • Page 382 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters emulated circuit identifier — Specifies the value to be used as the remote (destination) ECID for the circuit emulation service. Upon CES packet reception, the ECID in the packet will be compared to the configured local-ecid value. These must match for the packet payload to be used for the TDM circuit.
  • Page 383 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 config>service>epipe>sap config>service>epipe>spoke-sdp config>service>ipipe>sap Description This command enables the context to configure ETH-CFM parameters. tunnel-fault Syntax tunnel-fault {accept | ignore} Context config>service>epipe>eth-cfm config>service>epipe>sap>eth-cfm config>service>ipipe>eth-cfm config>service>ipipe>sap>eth-cfm Description Allows the individual service SAPs to react to changes in the tunnel MEP state. When tunnel- fault accept is configured at the service level, the SAP will react according to the service type, Epipe will set the operational flag and VPLS, IES and VPRN SAP operational state will become down on failure or up on clear.
  • Page 384 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 low-priority-defect Syntax low-priority-defect {allDef | macRemErrXcon} Context config>lag>eth-cfm>mep>ais config>lag>eth-cfm>mep>ais config>port>ethernet>eth-cfm>mep>ais config>service>epipe>sap>eth-cfm>mep>ais config>service>epipe>spoke-sdp>eth-cfm>mep>ais config>service>vpls>mesh-sdp>eth-cfm>mep>ais Description This command allows the operator to include all CCM Defect conditions or exclude the Remote Defect Indication CCM (DefRDICCM) as a trigger for generating AIS. AIS generation can only occur when the client-meg-level configuration option has been included.
  • Page 385 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 A differential is performed when this command is re-entered. Omitted FCs will stop counting, newly added FCs will start counting, and unchanged FCs will continue to count. Up to eight FCs may be specified. An FC that is specified as part of this command for this specific context cannot be specified as a profile-aware FC using the fc-in-profile command under the same context.
  • Page 386 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters fc-name — Specifies the name of the FC for which to create an individual profile-aware counter. In order for the counter to be used, the config>oam-pm>session> ethernet>priority command must be configured with a numerical value representing the FC name (7 = NC, 6 = H1, 5 = EF, 4 = H2, 3 = L1, 2 = AF, 1 = L2, 0 = BE), and the config>oam-pm>session>ethernet>lmm>enable-fc-collection command must be enabled.
  • Page 387 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Parameters level — Specifies the client MEG level. Values 1 to 7 Default interface-support-enable Syntax [no] interface-support-enable Context config>service>epipe>sap>eth-cfm>mep>ais config>service>epipe>spoke-sdp>eth-cfm>mep>ais Description This command enables the AIS function to consider the operational state of the entity on which it is configured.
  • Page 388 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters priority-value — Specifies the priority value of the AIS messages originated by the node. Values 0 to 7 Default eth-tunnel Syntax eth-tunnel Context config>service>epipe>sap config>service>ipipe>sap Description This command enables the context to configure Ethernet tunnel SAP parameters. path Syntax path path-index tag qtag[.qtag]...
  • Page 389 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Parameters mep-id — Specifies the maintenance endpoint identifier. Values 1 to 8191 md-index — Specifies the maintenance domain (MD) index value. Values 1 to 4294967295 ma-index — Specifies the maintenance association (MA) index value. Values 1 to 4294967295 direction {up | down} —...
  • Page 390 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters priority — Specifies the priority of CCM and LTM messages. Values 0 to 7 ccm-padding-size Syntax ccm-padding-size ccm-padding no ccm-padding-size ccm-padding Context config>service>epipe>sap>eth-cfm>mep config>service>ipipe>sap>eth-cfm>mep config>service>epipe>sdp>eth-cfm>mep config>service>epipe>spoke-sdp>eth-cfm>mep config>service>vpls>sap>eth-cfm>mep config>service>vpls>spoke-sdp>eth-cfm>mep config>service>vpls>mesh-sdp>eth-cfm>mep config>service>vpls>sap>eth-cfm>mep config>service>vpls>spoke-sdp>eth-cfm>mep config>service>vpls>mesh-sdp>eth-cfm>mep...
  • Page 391 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 no multiplier Context config>service>epipe>sap>eth-cfm>mep>csf-enable config>service>epipe>spoke-sdp>eth-cfm>mep>csf-enable Description This command enables the multiplication factor applied to the receive time used to clear the CSF condition in increments of .5. Default multiplier 3.5 Parameters multiplier-value —...
  • Page 392 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 A check is performed for both the provisioning and test to ensure the MEP is an Y.1731 MEP (MEP provisioned with domain format none, association format icc-based). If not, the operation fails.
  • Page 393 — Specifies to suspend continuity check messages. grace Syntax grace Context config>service>epipe>sap>eth-cfm>mep config>service>epipe>spoke-sdp>eth-cfm>mep config>service>ipipe>sap>eth-cfm>mep Description This command enables the context to configure Nokia ETH-CFM Grace and ITU-T Y.1731 ETH-ED expected defect functional parameters. eth-ed Syntax eth-ed Context config>service>epipe>sap>eth-cfm>mep>grace config>service>epipe>spoke-sdp>eth-cfm>mep>grace config>service>ipipe>sap>eth-cfm>mep>grace Description This command enables the context to configure ITU-T Y.1731 ETH-ED expected defect...
  • Page 394 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters seconds — Specifies the duration, in seconds, of the maximum expected defect window. Values 1 to 86400 priority Syntax priority priority no priority Context config>service>epipe>sap>eth-cfm>mep>grace>eth-ed config>service>epipe>spoke-sdp>eth-cfm>mep>grace>eth-ed config>service>ipipe>sap>eth-cfm>mep>grace>eth-ed Description This command sets the priority bits and determines the forwarding class based on the mapping of priority to FC.
  • Page 395 The Nokia Grace function is a vendor-specific PDU that informs MEP peers that the local node may be entering a period of expected defect. The no form of the command disables the reception of the Nokia ETH-CFM Grace PDU on the MEP.
  • Page 396 This command enables the transmission of the Nokia ETH-CFM Grace PDU from the MEP when a system soft reset notification is received for one or more cards. The Nokia Grace function is a vendor-specific PDU that informs MEP peers that the local node may be entering a period of expected defect.
  • Page 397 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 match when the functions are enabled on the same reflection point, and the domain level of the inbound ETH-LBM must be the same as that of the MEP configured with the lbm-svc- act-responder option.
  • Page 398 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters mac-address — Specifies the MAC address of the MEP Values 6-byte mac-address in the form of xx:xx:xx:xx:xx:xx or xx-xx-xx-xx- xx-xx of the MEP. Must be unicast. Using the all zeros address is equivalent to the no form of this command.
  • Page 399 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 primary-vlan-enable — Provides a method for linking the MIP with the primary VLAN configured under the bridge-identifier for the MA. This is only allowed if the mhf- creation method is static. MIPs cannot be changed from or to primary VLAN functions without first being deleted.
  • Page 400 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 2.17.2.12 Service Filter and QoS Policy Commands force-qinq-vc-forwarding Syntax force-qinq-vc-forwarding [{c-tag-c-tag | s-tag-c-tag}] no force-qinq-vc-forwarding Context config>service>epipe>spoke-sdp config>service>vpls>mesh-sdp config>service>vpls>spoke-sdp config>service>pw-template config>service>epipe>bgp-evpn>mpls Description This command forces the data path to push two VLAN tags at network egress when sending traffic on SDP bindings or EVPN-MPLS destinations.
  • Page 401 The default scope of a filter is local. IPv6 filters are only supported by the 7450 ESS and 7750 SR but are not supported on a Layer 2 SAP that is configured with QoS MAC criteria. Also, MAC filters are not supported on a Layer 2 SAP that is configured with QoS IPv6 criteria.
  • Page 402 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 ipv6-filter-id — Specifies the IPv6 filter policy for 7450 ESS or 7750 SR. The filter ID must already exist within the created IPv6 filters. Values 1 to 65535 mac-filter-id — Specifies the MAC filter policy. The specified filter ID must already exist within the created MAC filters.
  • Page 403 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 cookie2 — Specifies the second cookie, in the form of a 64-bit colon-separated hex value. hsmda-queue-override Syntax [no] hsmda-queue-override Context config>service>epipe>sap>egress config>service>ipipe>sap>egress Description This command configures HSMDA egress and ingress queue overrides. packet-byte-offset Syntax packet-byte-offset {add add-bytes | subtract sub-bytes}...
  • Page 404 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The packet-byte-offset command accepts either add or subtract as valid keywords which define whether bytes are being added or removed from each packet traversing the queue. Up to 20 bytes may be added to the packet and up to 43 bytes may be removed from the packet. An example use case for subtracting bytes from each packet is an IP based accounting function.
  • Page 405 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Description This command, within the QoS policy hsmda-queue context, is a container for the configuration parameters controlling the behavior of an HSMDA queue. Unlike the standard QoS policy queue command, this command is not used to actually create or dynamically assign the queue to the object which the policy is applied.
  • Page 406 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 rate Syntax rate pir-rate no rate Context config>service>epipe>sap>egress>hsmda-queue-over>queue config>service>ipipe>sap>egress>hsmda-queue-over>queue Description This command specifies the administrative PIR by the user. Parameters pir-rate — Configures the administrative PIR specified by the user. Values 1 to 40000000, max wrr-weight...
  • Page 407 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 no slope-policy Context config>service>epipe>sap>egress>hsmda-queue-over config>service>ipipe>sap>egress>hsmda-queue-over Description This command assigns an HSMDA slope policy to the SAP. The policy may be assigned to an ingress or egress HSMDA queue. The policy contains the Maximum Buffer Size (MBS) that will be applied to the queue and the high and low priority RED slope definitions.
  • Page 408 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 filter Syntax filter [ip ip-filter-id] filter [ipv6 ipv6-filter-id] no filter [ip ip-filter-id] [ipv6 ipv6-filter-id] no filter [ip ip-filter-id] Context config>service>fpipe>sap>egress config>service>fpipe>sap>ingress config>service>cpipe>spoke-sdp>egress config>service>cpipe>spoke-sdp>ingress config>service>fpipe>spoke-sdp>egress config>service>fpipe>spoke-sdp>ingress config>service>ipipe>spoke-sdp>egress config>service>ipipe>sap>ingress config>service>ipipe>sap>egress config>service>ipipe>spoke-sdp>ingress Description This command associates a filter policy with an ingress or egress Service Access Point (SAP) or IP interface.
  • Page 409 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 vlan-translation Syntax vlan-translation {vlan-id | copy-outer} no vlan-translation Context config>service>epipe>sap>ingress config>service>vpls>sap>ingress Description This command configures ingress VLAN translation. If enabled with an explicit VLAN value, the preserved VLAN id will be overwritten with this value. This setting is applicable to dot1q encapsulated ports.
  • Page 410 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters s-tag.c-tag — These are the VLAN tag values that are pushed on SDP bindings and EVPN-MPLS destinations when force-qinq-vc-forwarding s-tag-c-tag is configured. When force-qinq-vc-forwarding c-tag-c-tag is configured, only the c- tag value in qinq-vlan-translation s-tag.c-tag is pushed.
  • Page 411 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 16 Default QinQ and TopQ SAP Dot1P Evaluation (Continued) Port / SAP Type Existing Packet Tags PBits Used for Match QinQ / TopQ TopQ BottomQ TopQ PBits QinQ / QinQ TopQ BottomQ BottomQ PBits Default...
  • Page 412 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 18 Bottom Position QinQ and TopQ SAP Dot1P Evaluation Port / SAP Type Existing Packet Tags PBits Used for Match Null None None Null Dot1P (VLAN ID 0) Dot1P PBits Null Dot1Q Dot1Q PBits...
  • Page 413 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 The QinQ and TopQ SAP PBit/DEI bit marking follows the default behavior defined in the preceding table when qinq-mark-top-only is not specified. The dot1p dot1p-value command must be configured without the qinq-mark-top-only parameter to remove the TopQ PBits only marking restriction.
  • Page 414 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of the command reverts to the default. Parameters threshold — The maximum length of a fragment to be transmitted. Values 128 to 512 Default interleave Syntax [no] interleave Context config>service>epipe>sap>frame-relay>frf.12 config>service>ipipe>sap>frame-relay>frf.12...
  • Page 415 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Parameters class-id — Specifies the scheduling class to use for this sap. Values 0 to 3 Default 2.17.2.14 ATM Commands encapsulation Syntax encapsulation atm-encap-type Context config>service>epipe>sap>atm Description This command specifies the data encapsulation for an ATM PVCC delimited Epipe SAP. The definition references RFC 2684, Multiprotocol Encapsulation over ATM AAL5, and to the ATM Forum LAN Emulation specification.
  • Page 416 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 aal5mux-ip — Routed IP encapsulation for VC multiplexed circuit as defined in RFC 2684. 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 417 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 2.18 VLL Show Command Reference This section describes the VLL show command reference. 2.18.1 Command Hierarchies 2.18.1.1 Show Commands show — service — egress-label start-label [end-label] — id service-id — —...
  • Page 418 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — sdp-using far-end {ip-address | ipv6-address} — sdp-using [sdp-is[:vc-id]] — sdp-using transit-policy ip transit-ip-policy — sdp-using transit-policy prefix transit-prefix-policy — service-using [epipe] [ies] [vpls] [vprn] [mirror] [apipe] [fpipe] [ipipe] [cpipe] [etree] [vsd] [b-vpls] [i-vpls] [m-vpls] [sdp sdp-id] [customer customer-id] [origin creation-origin] —...
  • Page 419 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 — [no] event-type {arp | config-change | oper-status-change | neighbor-discovery} — [no] sdp-id:vc-id — [no] event-type {config-change | oper-status-change | neighbor- discovery| control-channel-status} 2.18.1.4 Tools Commands tools — dump — epipe-map-access-to-egress-port service service-id [end-service service-id] —...
  • Page 420 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 end-label — The ending egress label value for which to display services using the label range. Default The end-label value. Values 18432 to 524287 Output The following output is an example of egress label information, and Table 20 describes the output fields.
  • Page 421 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 20 Show Service Egress Label Output Fields (Continued) Label Description Number of bindings The total number of SDP bindings that exist within the specified found egress label range. Syntax Context show>service>id Description...
  • Page 422 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 ------------------------------------------------------------------------------- No Matching Entries ------------------------------------------------------------------------------- Service Access Points ------------------------------------------------------------------------------- ------------------------------------------------------------------------------- SAP 1/1/1 ------------------------------------------------------------------------------- Service Id : 1/1/1 Encap : null Description : (Not Specified) Admin State : Up Oper State : Up Flags : None...
  • Page 423 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 ------------------------------------------------------------------------------- Ingress qos-policy : 1 Egress qos-policy : 1 Ingress FP QGrp : (none) Egress Port QGrp : (none) Ing FP QGrp Inst : (none) Egr Port QGrp Inst: (none) Shared Q plcy : n/a Multipoint shared : Disabled...
  • Page 424 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Dro. HiPrio Dro. LowPrio For. InProf For. OutProf Egress Queue 1 For. In/InplusProf For. Out/ExcProf Dro. In/InplusProf Dro. Out/ExcProf * indicates that the corresponding row element may have been truncated. ------------------------------------------------------------------------------- SAP 1/1/9:1 -------------------------------------------------------------------------------...
  • Page 425 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 LMM FC Stats : None LMM FC In Prof : None ------------------------------------------------------------------------------- ------------------------------------------------------------------------------- Ingress qos-policy : 1 Egress qos-policy : 1 Ingress FP QGrp : (none) Egress Port QGrp : (none) Ing FP QGrp Inst : (none) Egr Port QGrp Inst: (none)
  • Page 426 The number which identifies the VPN. Service Type Specifies the type of service. VLL Type Specifies the VLL type. SDP Id The SDP identifier for the 7450 ESS or 7750 SR. Description Generic information about the service. Customer Id The customer identifier. Last Mgmt Change The date and time of the most recent management-initiated change.
  • Page 427 The number of SDPs bound to this service for the 7450 ESS or 7750 SR. Split Horizon Group Specifics Split Horizon Group Name of the split horizon group for this VPLS for the 7450 ESS or 7750 SR. Description Description of the split horizon group for the 7450 ESS or 7750 SR.
  • Page 428 Show Service ID Output Fields (Continued) Label Description (Continued) Admin State The administrative state of this SD for the 7450 ESS or 7750 SR. Oper State The operational state of this SDP for the 7450 ESS or 7750 SR. Jitter Buffer...
  • Page 429 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 statistics Syntax statistics [policy name] [sap sap-id] Context show>service>id>authentication Description This command displays session authentication statistics for this service. Parameters name — Specifies the subscriber authentication policy statistics to display. sap-id —...
  • Page 430 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description : (Not Specified) Customer Id Creation Origin : manual Last Status Change: 05/20/2018 14:53:08 Last Mgmt Change : 05/20/2018 14:53:08 Test Service : No Admin State : Up Oper State : Up : 1514 Vc Switching...
  • Page 431 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 22 Show Service-ID Base Output Fields (Continued) Label Description (Continued) Type Specifies the signaling protocol used to obtain the ingress and egress labels used in frames transmitted and received on the SDP.
  • Page 432 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 =============================================================================== *A:cses-E11>config>service>epipe>bgp-vpws# endpoint Syntax endpoint [endpoint-name] Context show>service>id Description This command displays service endpoint information. Parameters endpoint-name — Specifies the name of an existing endpoint for the service. Output The following output is an example of service endpoint information. Sample Output *A:ALA-48>config>service>epipe# show service id 6 endpoint ===============================================================================...
  • Page 433 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Sample Output *A:ALA-12# show service id 1 labels ============================================================================== Martini Service Labels ============================================================================== Svc Id Sdp Id Type I.Lbl E.Lbl ------------------------------------------------------------------------------ 10:1 Mesh 0 20:1 Mesh 0 30:1 Mesh 0 40:1 Mesh 130081 131061...
  • Page 434 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command displays information for the SAPs associated with the service. If no optional parameters are specified, a summary of all associated SAPs is displayed. Parameters sap-id — The ID that displays SAPs for the service in the form slot/mda/port[.channel]. detail —...
  • Page 435 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Tunnel Faults : n/a : Disabled MC Prop-Hold-Timer : n/a Squelch Levels : None Collect Lmm Stats : Disabled LMM FC Stats : None LMM FC In Prof : None ------------------------------------------------------------------------------- ------------------------------------------------------------------------------- Ingress qos-policy : 1...
  • Page 436 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 For. Out/ExcProf ------------------------------------------------------------------------------- Sap per Queue stats ------------------------------------------------------------------------------- Packets Octets Ingress Queue 1 (Unicast) (Priority) Off. HiPrio Off. LowPrio Dro. HiPrio Dro. LowPrio For. InProf For. OutProf Egress Queue 1 For.
  • Page 437 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 24 Show Service-ID SAP Output Fields (Continued) Label Description (Continued) Last Mgmt Change The time of the most recent management-initiated change to this SAP. Admin MTU The desired largest service frame size (in octets) that can be transmitted through the SAP to the far-end router, without requiring the packet to be fragmented.
  • Page 438 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 ipv6-address — Displays only SDPs matching the specified far-end IPv6 address. detail — Displays detailed SDP information. mrp — Displays detailed MRP information. Output The following output is an example of SDP information, and Table 25 describes the output fields.
  • Page 439 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 MCAC In use Opnl BW: 0 MCAC Avail Opnl BW: unlimited Associated LSP LIST : Lsp Name : A_B_1 Admin State : Up Oper State : Up Time Since Last Tr*: 00h26m35s Lsp Name : A_B_2 Admin State...
  • Page 440 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 =============================================================================== Stp Service Destination Point specifics ------------------------------------------------------------------------------- Mac Move : Blockable Stp Admin State : Up Stp Oper State : Down Core Connectivity : Down Port Role : N/A Port State : Forwarding Port Number : 2049...
  • Page 441 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 25 Show Service-ID SDP Output Fields (Continued) Label Description (Continued) Admin State The administrative state of this SDP. Oper State The current state of this SDP. Ingress Label The label used by the far-end device to send packets to this device in this service by this SDP.
  • Page 442 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 25 Show Service-ID SDP Output Fields (Continued) Label Description (Continued) Session Mismatch Specifies a mismatch detected between the configured (far-end binding) cookie to what is received by the local IP address of the L2TPv3 SDP.
  • Page 443 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Associated LSP LIST : SDP Delivery Mechanism is not MPLS ------------------------------------------------------------------------------- Number of SDPs : 1 =============================================================================== *A:ALA-Dut-B>config>service>epipe# The following is an example when one side (PE) has the control word enabled (the pipe will be down).
  • Page 444 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 This is the side with control word enabled: *A:ALA-B# show service id 2100 sdp detail =============================================================================== Services: Service Destination Points Details =============================================================================== Sdp Id 1:12000 -(10.3.3.3) ------------------------------------------------------------------------------- Description : Default sdp description SDP Id : 1:12000 Type...
  • Page 445 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 VC Type : Ether VC Tag : n/a Admin Path MTU : 1600 Oper Path MTU : 1600 Far End : 10.1.1.1 Delivery : GRE Admin State : Up Oper State : Up Acct.
  • Page 446 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Admin BW(Kbps) Oper BW(Kbps) Last Status Change : 10/08/2009 06:55:54 Signaling : TLDP Last Mgmt Change : 10/08/2009 07:04:27 Force Vlan-Vc : Disabled Endpoint : N/A Precedence Class Fwding State : Down Flags : SvcAdminDown SdpOperDown NoIngVCLabel NoEgrVCLabel...
  • Page 447 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Spoke Descr : (Not Specified) VC Type : Ether VC Tag : n/a Admin Path MTU Oper Path MTU : 8890 Delivery : L2TPv3 Far End : 2001:db8::1 Local End : 2001:db8:aaab::36 Tunnel Far End : n/a...
  • Page 448 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Egress Cookie : AB:BA:BA:BB:A0:00:00:00 Session Mismatch : false Sess Mismatch Clrd : 06/19/2014 17:23:21 ------------------------------------------------------------------------------- Control Channel Status ------------------------------------------------------------------------------- PW Status : disabled Refresh Timer : <none> Peer Status Expire : false Request Timer : <none>...
  • Page 449 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 =============================================================================== Service Spoke-SDP FEC Information =============================================================================== Spoke-Sdp-Fec-Id Admin State : enabled FEC Type : 129 AII Type Standby Sig Slave : disabled : disabled Signaling : auto Auto Config : disabled PW Template Id : (none) Precedence...
  • Page 450 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters session — Displays a summary of all VCCV sessions. Output The following output is an example of VCCV BFD information. Sample Output *A:Dut-C# show service id 1000 vccv-bfd session =============================================================================== BFD Session ===============================================================================...
  • Page 451 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 end-label — The ending ingress label value for which to display services using the label range. Values 18432 to 524287 Default The start-label value. Output The following output is an example of ingress label information, and Table 26 describes the output fields.
  • Page 452 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 26 Show Service Ingress-Label Output Fields (Continued) Label Description (Continued) E.Lbl The egress label used by this device to send packets to the far- end device in this service by the SDP. Number of Bindings The number of SDP bindings within the label range specified.
  • Page 453 ------------------------------------------------------------------------ Number of SAPs : 7 ------------------------------------------------------------------------ ======================================================================== The following is a sample of SAP information for a specific SAP for the 7450 ESS or 7750 SR: A:ALA-42# *A:ALA-48# show service sap-using sap 1/1/21:0 =============================================================================== Service Access Points Using Port 1/1/21:0...
  • Page 454 The MAC or IP filter policy ID applied to the ingress SAP. Egr. QoS The SAP egress QoS policy number specified on the egress SAP for the 7450 ESS and 7750 SR only. Egr. Fltr The MAC or IP filter policy ID applied to the egress SAP.
  • Page 455 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Parameters sdp-id — Specifies the SDP ID for which to display information. Values 1 to 17407 pw-port-id — Specifies the pseudowire port identifier. Values 1 to 10239 ip-address — Displays only SDPs with the specified far-end IPv4 address. 64 characters maximum.
  • Page 456 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 =============================================================================== SDP Binding port : lag-1 VC-Id Admin Status : up Encap : dot1q Oper Status : up VC Type : ether Oper Flags : (Not Specified) Monitor Oper-Group : (Not Specified) Statistics I.
  • Page 457 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 ------------------------------------------------------------------------------- Class-based forwarding : ------------------------------------------------------------------------------- Class forwarding : Disabled EnforceDSTELspFc : Disabled Default LSP : Uknwn Multicast LSP : None =============================================================================== FC Mapping Table =============================================================================== FC Name LSP Name ------------------------------------------------------------------------------- No FC Mappings ------------------------------------------------------------------------------- Segment Routing...
  • Page 458 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 vc-id — The virtual circuit identifier. Values 1 to 4294967295 ip-address — Displays only services matching with the specified far-end IP address. 64 characters maximum. Default Services with any far-end IP address. ipv6-address —...
  • Page 459 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Table 28 Show Service SDP Using Output Fields (Continued) Label Description (Continued) Egress Label The label used by this device to send packets to the far-end device in this service by this SDP. service-using Syntax service-using [epipe] [ies] [vpls] [vprn] [mirror] [apipe] [fpipe] [ipipe] [cpipe] [etree] [vsd]...
  • Page 460 Down Down 10/26/2006 16:14:33 ------------------------------------------------------------------------------- Matching Services : 8 ------------------------------------------------------------------------------- *A:ALA-12# The following is a sample of epipe service information for the 7450 ESS or 7750 SR. *A:ALA-12# show service service-using epipe 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 461 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 =============================================================================== Services [epipe] =============================================================================== ServiceId Type CustomerId Last Mgmt Change ------------------------------------------------------------------------------- Epipe 06/22/2006 23:05:58 Epipe 06/22/2006 23:05:58 Epipe 06/22/2006 23:05:58 Epipe 06/22/2006 23:05:58 ------------------------------------------------------------------------------- Matching Services : 4 =============================================================================== *A:ALA-12# Table 29 Show Service-Using Output Fields Label...
  • Page 462 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 name — Specifies the path name. 32 characters maximum. expired — Displays information for expired SDPs. Output The following output is an example of spoke-SDP information. Sample Output *A:Dut-C# show service spoke-sdp-fec-using =============================================================================== Service Spoke-SDP-Fec Information ===============================================================================...
  • Page 463 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Parameters pw-port-id — Specifies the pseudowire port identifier. Values 1 to 10239 detail — Displays detailed port information that includes all the pw-port output fields. sdp-id — The SDP ID for which to display matching PW port information. Values 1 to 17407 statistics —...
  • Page 464 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 *A:ALA-48>config>pw-port$ show pw-port sdp 1 ============================================================================ PW Port Information ============================================================================ PW Port Encap IfIndex VC-Id ---------------------------------------------------------------------------- dot1q 1526726657 qinq 1526726658 dot1q 1526726659 qinq 1526726660 ============================================================================ Table 30 Show PW-Port Output Fields Label Description PW Port...
  • Page 465 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 ------------------------------------------------------------------------ ======================================================================== *A:Dut-A# *A:Dut-A# show connection-profile 10 ======================================================================== Connection Profile 10 Information ======================================================================== Description : (Not Specified) Last Change : 10/16/2010 06:53:30 ------------------------------------------------------------------------ VPI/VCI ------------------------------------------------------------------------ 10/11 10/12 ======================================================================== *A:Dut-A# *A:Dut-A# *A:bksim2801# show connection-profile ======================================================================== Connection Profile Summary Information...
  • Page 466 This command clears commands for a specific service. For the 7450 ESS or 7750 SR, it clears the discovered IPv6 address of the neighboring CE associated with an iPipe SAP. When IPv6CP comes back up following the execution of this command on an IPv6CP SAP, the node will check to see if an IPv6 address has been learned for the remote CE attached to the Ipipe service.
  • Page 467 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 mesh-sdp Syntax mesh-sdp sdp-id[:vc-id] ingress-vc-label mesh-sdp sdp-id[:vc-id] vccv-bfd {session | statistics} Context clear>service>id Description This command clears and resets the mesh SDP binding. Parameters sdp-id — The spoke-SDP ID for which to clear statistics. Values 1 to 17407 vc-id —...
  • Page 468 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 l2tpv3 — Specifies to clear the session mismatch flag on the spoke-SDP binding after the flag was set to true by a detected mismatch between the configured parameters and the received parameters. vccv-bfd session —...
  • Page 469 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 Syntax sap sap-id {all | cem | counters | stp | l2pt | mrp} sap sap-id encap-group group-name [member encap-id] Context clear>service>statistics Description This command clears SAP statistics for a SAP. Parameters sap-id —...
  • Page 470 — Debugs service operational status changes. neighbor-discovery — Displays the status of IPv6 neighbor discovery for the sap or the spoke-sdp for the 7450 ESS or 7750 SR only. Output The following output is an example of event-type information.
  • Page 471 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 A:bksim180# debug service id 1000 sap 1/7/1 event-type arp DEBUG OUTPUT show on CLI is as follows: 3 2008/11/17 18:13:24.35 UTC MINOR: DEBUG #2001 Base Service 1000 SAP 1/7/1 "Service 1000 SAP 1/7/1: RX: ARP_REQUEST (0x0001) hwType : 0x0001...
  • Page 472 — Debugs configuration change events. oper-status-change — Debugs service operational status changes. neighbor-discovery — Displays the status of IPv6 neighbor discovery for the sap or the spoke-sdp for the 7450 ESS or 7750 SR only. control-channel-status — 2.18.2.4 VLL Tools Commands...
  • Page 473 LAYER 2 SERVICES AND EVPN GUIDE VLL Services RELEASE 19.5.R1 lag-id — This parameter caused the command to return the egress port for all service with SAPs associated with the specified LAG ID. Values 1 to 800 Issue: 01 3HE 15084 AAAA TQZZA 01...
  • Page 474 VLL Services LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 475 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3 Virtual Private LAN Service 3.1 VPLS Service Overview VPLS as described in RFC 4905, Encapsulation methods for transport of layer 2 frames over MPLS, is a class of virtual private network service that allows the connection of multiple sites in a single bridged domain over a provider-managed IP/ MPLS network.
  • Page 476 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 56 VPLS Service Architecture PE D LSP Full-mesh VPLS Service1 VPLS Service1 PE A PE C IP/MPLS Virtual Network Bridge PE B OSSG201 1. PE Router A (Figure i.
  • Page 477 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 iii. The destination MAC address in the packet is looked up in the FDB table for the VPLS instance. There are two possibilities: either the destination MAC address has already been learned (known MAC address) or the destination MAC address is not yet learned (unknown MAC address).
  • Page 478 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 All the core routers (“P” routers in IETF nomenclature) between PE Router A and PE Router B and PE Router C are Label Switch Routers (LSRs) that switch the packet based on the transport (outer) label of the packet until the packet arrives at the far-end PE Router.
  • Page 479 • Forwarding Database (FDB) management features on a per service-level basis including: −Configurable FDB size limit. On the 7450 ESS, it can be configured on a per-VPLS, per-SAP, and per spoke-SDP basis. −FDB size alarms. On the 7450 ESS, it can be configured on a per-VPLS basis.
  • Page 480 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.2 VPLS over MPLS The VPLS architecture proposed in RFC 4762, Virtual Private LAN Services Using LDP Signaling specifies the use of provider equipment (PE) that is capable of learning, bridging, and replication on a per-VPLS basis.
  • Page 481 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 tags found and forwards the resulting packet. As some of the related configuration parameters are local and not communicated in the signaling plane, an asymmetrical behavior cannot always be detected and so cannot be blocked. With an asymmetrical behavior, protocol extractions will not necessarily function as they would with a symmetrical configuration, resulting in an unexpected operation.
  • Page 482 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 31 Table 32 describe the VLAN tag processing with respect to the zero, one, and two VLAN tag configuration described for the VLAN identifiers, Ethertype, ingress QoS classification (dot1p/DE), and QoS propagation to the egress (which can be used for egress classification and/or to set the QoS information in the innermost egress VLAN tag).
  • Page 483 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Table 32 VPLS Mesh and Spoke-SDP VLAN Tag Processing: Egress Egress (sent on mesh Zero VLAN One VLAN tag Two VLAN Tags (enabled by or spoke-SDP) tags force-qinq-vc-forwarding [c- tag-c-tag | s-tag-c-tag] VLAN identifiers (set in For one VLAN tag, one of the...
  • Page 484 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 32 VPLS Mesh and Spoke-SDP VLAN Tag Processing: Egress (Continued) Egress (sent on mesh Zero VLAN One VLAN tag Two VLAN Tags (enabled by or spoke-SDP) tags force-qinq-vc-forwarding [c- tag-c-tag | s-tag-c-tag] •...
  • Page 485 SAP egress QoS policy. 3.2.4 VPLS MAC Learning and Packet Forwarding The 7950 XRS, 7750 SR, and 7450 ESS perform the packet replication required for broadcast and multicast traffic across the bridged domain. MAC address learning is performed by the router to reduce the amount of unknown destination MAC address flooding.
  • Page 486 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The 7450 ESS, 7750 SR, and 7950 XRS routers learn the source MAC addresses of the traffic arriving on their access and network ports. Each router maintains an FDB for each VPLS service instance and learned MAC addresses are populated in the FDB table of the service.
  • Page 487 Virtual Private LAN Service RELEASE 19.5.R1 The 7450 ESS, 7750 SR, and 7950 XRS routers enable MAC learning protection capability for SAPs and SDPs. With this mechanism, forwarding and learning rules apply to the non-protected SAPs. Assume hosts H1, H2, and H3...
  • Page 488 Ethernet services are deployed using native Ethernet backbones. The Nokia VPLS implementation offers the capability to use core Ethernet tunnels compliant with ITU-T G.8031 specification to achieve 50 ms resiliency for backbone failures. This is required to comply with the stringent SLAs provided by service providers in the current competitive environment.
  • Page 489 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.2.6 Pseudowire Control Word The control-word command enables the use of the control word individually on each mesh SDP or spoke-SDP. By default, the control word is disabled. When the control word is enabled, all VPLS packets, including the BPDU frames, are encapsulated with the control word.
  • Page 490 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 When using selective learning in an I-VPLS service, the learned CMACs are allocated FDB entries on all the line cards where the I-VPLS service has a configured object and on the line cards on which the associated B-VPLS has a configured object.
  • Page 491 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Figure 62 shows the FDB entry allocation when the MAC addresses are global and when they are selective. Notice that in the selective case, all MAC addresses are allocated FDB entries on line card 2, but line card 1 and 3 only have FDB entries allocated for services VPLS 1 and VPLS 2, respectively.
  • Page 492 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.7.1.1 Example Operational Information The show and tools dump command output can display the global and selective MAC addresses along with the MAC address limits and the number of allocated and free MAC-address FDB entries.
  • Page 493 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 00:00:00:00:02:01 sap:2/1/2:2 01/31/17 08:44:37 00:00:00:00:02:02 sap:2/1/2:2 01/31/17 08:44:37 00:00:00:02:02:03 sap:2/1/1:2 01/31/17 08:44:37 00:00:00:02:02:04 sap:2/1/1:2 01/31/17 08:44:37 ------------------------------------------------------------------------------- No. of Entries: 8 ------------------------------------------------------------------------------- Legend: L=Learned O=Oam P=Protected-MAC C=Conditional S=Static Lf=Leaf =============================================================================== *A:PE1# A total of eight MAC addresses are learned.
  • Page 494 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 ------------------------------------------------------------------------------- =============================================================================== *A:PE1# All of the line cards have four FDB entries allocated in VPLS 1. The “PendAlloc” and “PendFree” columns show the number of pending MAC address allocate and free operations, which are all zero.
  • Page 495 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 =============================================================================== FDB Usage =============================================================================== System ------------------------------------------------------------------------------- Limit: 511999 Allocated: 8 Free: 511991 Global: ------------------------------------------------------------------------------- Line Cards ------------------------------------------------------------------------------- Card Selective Allocated Limit Free ------------------------------------------------------------------------------- 511999 511997 511999 511993 511999 511995 ------------------------------------------------------------------------------- ===============================================================================...
  • Page 496 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 =============================================================================== *A:PE1# There are two FDB entries allocated on line card 1, two on line card 2, and four on line card 5. The “PendAlloc” and “PendFree” columns are all zeros. The following output displays the MAC address status for VPLS 1: *A:PE1# tools dump service id 1 fdb mac-status ===============================================================================...
  • Page 497 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 If an attempt is made to configure the system FDB table size such that: • the new size is greater than or equal to the current number of allocated FDB entries, the command succeeds and the new system FDB table size is used •...
  • Page 498 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 −The log event SAP MAC Limit Reached is generated when the limit is reached. When the condition is cleared, the log event SAP MAC Limit Reached Condition Cleared is generated. −Disable learning allows users to disable the dynamic learning function on a SAP or a spoke-SDP of a VPLS service instance.
  • Page 499 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.2.7.7 Local and Remote Aging Timers Like a Layer 2 switch, learned MACs within a VPLS instance can be aged out if no packets are sourced from the MAC address for a specified period of time (the aging time).
  • Page 500 If two clients in the VPLS have the same MAC address, the VPLS will experience a high relearn rate for the MAC. When MAC move is enabled, the 7450 ESS, 7750 SR, or 7950 XRS will shut down the SAP or spoke-SDP and create an alarm event when the threshold is exceeded.
  • Page 501 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 retry timeout period must be larger than the period before blocking the highest priority port so that the retry timeout sufficiently spans across the period required to block all ports in sequence.
  • Page 502 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • the ability to discard frames associated with automatically protected MACs instead of shutting down the entire SAP/SDP as with the restrict-protected-src feature. This is enabled using a restrict-protected-src discard-frame command in the SAP/spoke or mesh SDP/SHG context.
  • Page 503 3. MAC-move 3.2.7.13.1 Operation Figure 63 shows a specific configuration using auto-learn-mac-protect and restrict- protected-src discard-frame in order to describe their operation for the 7750 SR, 7450 ESS, or 7950 XRS. Figure 63 Auto-Learn-Mac-Protect Operation ALMP SAP3 SAP1 RPS + DF...
  • Page 504 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 1. A frame with source MAC A enters SAP1, MAC A is learned on SAP1, and MAC- A/SAP1 is protected because of the presence of the auto-learn-mac-protect on SAP1.
  • Page 505 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3. All subsequent frames with source MAC A entering SAP3 are forwarded into the VPLS. 4. A frame with source MAC A enters SAP1, these frames are discarded, and an alarm indicating MAC A and SAP1 is initiated because of the presence of the restrict-protected-src discard-frame on SAP1.
  • Page 506 Nokia’s VPLS service provides a bridged or switched Ethernet Layer 2 network. Equipment connected to SAPs forward Ethernet packets into the VPLS service. The 7450 ESS, 7750 SR, or 7950 XRS participating in the service learns where the customer MAC addresses reside, on ingress SAPs or ingress SDPs.
  • Page 507 802.1Q-REV/D5.0-09/2005. This mode of operation is only supported in a Management VPLS (M-VPLS). While the 7450 ESS, 7750 SR, or 7950 XRS initially use the mode configured for the VPLS, it will dynamically fall back (on a per-SAP basis) to STP (IEEE 802.1D-1998) based on the detection of a BPDU of a different format.
  • Page 508 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The 7450 ESS, 7750 SR, and 7950 XRS support two BDPU encapsulation formats, and can dynamically switch between the following supported formats (on a per-SAP basis): • IEEE 802.1D STP •...
  • Page 509 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 • Access Type C — Two or more ES devices connected by QinQ/802.1ad SAPs Figure 65 Access Resiliency 7x50 7x50 Null/dot1q 802.1ad/QinQ Metro Network OSSG205 The following mechanisms are supported for the I-VPLS: •...
  • Page 510 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.9.4 Provider MSTP Provider MSTP is specified in IEEE-802.1ad-2005. It uses a provider bridge group address instead of a regular bridge group address used by STP, RSTP, and MSTP BPDUs.
  • Page 511 7450 ESS, 7750 SR, or 7950 XRS devices is closest to the root of the network. This PE device is internally designated as the primary bridge for the VPLS mesh. As a result of this, all network ports on the primary bridges are assigned the designated port role and therefore remain in the forwarding state.
  • Page 512 MAC address is then overwritten back to the MAC address of the respective Layer 2 protocol. The 7450 ESS, 7750 SR, and 7950 XRS routers support L2PT termination for STP BPDUs. More specifically: • At ingress of every SAP/spoke-SDP that is configured as L2PT termination, all...
  • Page 513 To address these network designs, BPDU format translation is supported on 7450 ESS, 7750 SR, and 7950 XRS devices. If enabled on a specified SAP or spoke-SDP, the system will intercept all BPDUs destined for that interface and perform required format translation such as STP-to-PVST or vice versa.
  • Page 514 VPLS services (using a full mesh of SDPs between PEs), node redundancy for spoke-SDPs needs to be provided separately. Nokia routers have implemented special features for improving the resilience of hierarchical VPLS instances, in both MTU and inter-metro applications. 3.2.10.1...
  • Page 515 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Figure 66 HVPLS with Spoke Redundancy MPLS Transit Network Spoke MPLS Tunnel Spoke = Metro IP/MPLS Network = Full Mesh OSSG045 3.2.10.2 Spoke SDP Based Redundant Access This feature provides the ability to have a node deployed as MTUs (Multi-Tenant Units) to be multi-homed for VPLS to multiple routers deployed as PEs without requiring the use of M-VPLS.
  • Page 516 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.10.3 Inter-Domain VPLS Resiliency Using Multi-Chassis Endpoints Inter-domain VPLS refers to a VPLS deployment where sites may be located in different domains. An example of inter-domain deployment can be where different metro domains are interconnected over a Wide Area Network (Metro1-WAN-Metro2) or where sites are located in different autonomous systems (AS1-ASBRs-AS2).
  • Page 517 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Figure 68 Multi-Chassis Pseudowire Endpoint for VPLS Resilient Inter-domain Metro Region Handoff Active PW VPLS VPLS Standby PWs (Mesh) (Mesh) PE3’ OSSG250 The two gateway pairs, PE3-PE3’ and PE1-PE2, are interconnected using a full mesh of four pseudowires out of which only one pseudowire is active at any time.
  • Page 518 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • Pseudowire data plane — Represented by the four pseudowires inter- connecting the gateway PEs. −Only one of the pseudowires is activated based on the primary/secondary, preference configuration, and pseudowire status. In case of a tie, the pseudowire located on the master chassis will be chosen.
  • Page 519 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 −The shutdown command in the config>redundancy>multi- chassis>peer>mc-ep or from under config>redundancy>multi- chassis>peer contexts. MC-EP keep-alives are still exchanged for the following reasons: • As a backup; if the BFD session does not come up or is disabled, the MC-EP protocol will use its own keep-alives for failure detection.
  • Page 520 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 69 MC-EP in Passive Mode Resilient Inter-domain Metro Region Handoff Active PW VPLS VPLS Standby PWs (Mesh) (Mesh) Pass PE3’ OSSG251 When in passive mode, the MC-EP peers stay dormant as long as one active pseudowire is signaled from the remote end.
  • Page 521 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.2.10.4 Support for Single Chassis Endpoint Mechanisms In cases of SC-EP, there is a consistency check to ensure that the configuration of the member pseudowires is the same. For example, mac-pining, mac-limit, and ignore standby signaling must be the same.
  • Page 522 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 70 MAC Flush in the MC-EP Solution Resilient Inter-domain Domain1 Domain2 Handoff Active PW VPLS VPLS (Mesh) (Mesh) Standby PWs PE3’ OSSG252 Regular MAC flush behavior will apply for the LDP MAC withdraw sent over the T- LDP sessions associated with the active pseudowire in the MC-EP;...
  • Page 523 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.2.10.4.2 Block-on-Mesh-Failure Support in MC-EP Scenario The following rules describe how the block-on-mesh-failure operates with the MC-EP solution (see Figure 70): • If PE3 does not have any forwarding path toward Domain1 mesh, it should block both PW1 and PW2 and inform PE3 so one of its pseudowires can be activated.
  • Page 524 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 In the MC-EP case, this command has a similar effect when there is a single forced SDP binding in an MC-EP. The forced SDP binding (pseudowire) will be elected as active.
  • Page 525 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Figure 71 MC-EP with B-VPLS Metro Region Resilient Inter-domain Handoff Active PW VPLS (Mesh) VPLS (Mesh) Standby PWs Legend PE3’ i-vpls Instances vpls Instances b-vpls Instances OSSG487 Multiple I-VPLS instances may be used to represent in the gateway PEs the customer VPLS instances using the PBB-VPLS M:1 model described in the PBB section.
  • Page 526 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 72 MC-EP with B-VPLS Failure Scenario Resilient Inter-domain Handoff X - >SAP2 X - >PWtoPE1 Y - >PWtoPE3 Y - >SAP1 X - >PWtoA X - >BM3 - >PW1 Y - >BM1 - >PW1 Y - >PWtoB CMAC Y...
  • Page 527 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Figure 73 MC-EP with B-VPLS MAC Flush Solution Resilient Inter-domain Handoff Y - >SAP1 X - >SAP2 Y - >PWtoB X - >PWtoA CMAC Y CMAC X VPLS (Mesh) Standby PWs VPLS...
  • Page 528 PE might be the terminating PBB PE and may not be able to reach the BMAC of the other remote PE. Therefore, connectivity between them exists only over the regular VPLS mesh. For the same reasons, Nokia recommends that static BMAC not be used on SC/MC endpoints. 3.2.11 VPLS Access Redundancy A second application of hierarchical VPLS is using MTUs that are not MPLS-enabled that must have Ethernet links to the closest PE node.
  • Page 529 3.2.11.2 Redundant Access to VPLS Without STP The Nokia implementation also includes alternative methods for providing a redundant access to Layer 2 services, such as MC-LAG, MC-APS, or MC-Ring. Also in this case, the topology change event needs to be propagated into the VPLS topology in order to provide fast convergence.
  • Page 530 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.12 Object Grouping and State Monitoring This feature introduces a generic operational group object that associates different service endpoints (pseudowires, SAPs, IP interfaces) located in the same or in different service instances.
  • Page 531 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 There are two steps involved in enabling the block-on-mesh failure feature in a VPLS scenario: 1. Identify a set of objects whose forwarding state should be considered as a whole group, then group them under an operational group using the oper-group CLI command.
  • Page 532 This section summarizes basic rules for generation and processing of these messages. As described in respective sections, the 7450 ESS, 7750 SR, and 7950 XRS support two types of MAC flush message: flush-all-but-mine and flush-mine. The main difference between these messages is the type of action they signal. Flush-all-but- mine messages request clearing of all FDB entries that were learned from all other LDP peers except the originating PE.
  • Page 533 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Note: The 7750 SR will not send a withdrawal if the M-VPLS does not contain a mesh SDP. A mesh SDP must be configured in the M-VPLS to send withdrawals. •...
  • Page 534 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.13.1 Dual Homing to a VPLS Service Figure 75 Dual-homed CE Connection to VPLS PE-A PE-C L2-A L2-B PE-B PE-D MAC flush Link down PE-A PE-C L2-A L2-B PE-B PE-D PE-A...
  • Page 535 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The message described here is different than the message described in RFC 4762, Virtual Private LAN Services Using LDP Signaling. The difference is in the interpretation and action performed in the receiving PE. According to the standard definition, upon receipt of a MAC withdraw message, all MAC addresses, except the ones learned from the source PE, are flushed.
  • Page 536 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.14 ACL Next-Hop for VPLS The ACL next-hop for VPLS feature enables an ACL that has a forward to a SAP or SDP action specified to be used in a VPLS service to direct traffic with specific match criteria to a SAP or SDP.
  • Page 537 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.2.15 SDP Statistics for VPLS and VLL Services The simple three-node network in Figure 77 shows two MPLS SDPs and one GRE SDP defined between the nodes. These SDPs connect VPLS1 and VPLS2 instances that are defined in the three nodes.
  • Page 538 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 BGP AD complements an already established and well-deployed Layer 2 VPN signaling mechanism target LDP, providing one-touch provisioning for LDP VPLS, where all the related PEs are discovered automatically. The service provider may make use of existing BGP policies to regulate the exchanges between PEs in the same, or in different, autonomous system (AS) domains.
  • Page 539 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 To advertise this information, BGP AD employs a simplified version of the BGP VPLS NLRI where just the RD and the next 4 bytes are used to identify the VPLS instance. There is no need for Label Block and Label Size fields as T-LDP will signal the service labels later on.
  • Page 540 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The generalized pseudowire-ID FEC element has been designed for auto-discovery applications. It provides a field, the address group identifier (AGI), that is used to signal the membership information from the VPLS-ID. Separate address fields are provided for the source and target address associated with the VPLS endpoints, called the Source Attachment Individual Identifier (SAII) and Target Attachment Individual Identifier (TAII), respectively.
  • Page 541 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.2.16.4 BGP-AD and Target LDP (T-LDP) Interaction BGP is responsible for discovering the location of VSIs that share the same VPLS membership. LDP protocol is responsible for setting up the pseudowire infrastructure between the related VSIs by exchanging service-specific labels between them.
  • Page 542 SDP only exists for LDP-based transport tunnels. Using a manually provisioned SDP is available for both RSVP-TE and LDP transport tunnels. Refer to the appropriate 7450 ESS, 7750 SR, 7950 XRS, and VSR MPLS Guide for more information about MPLS, LDP, and RSVP.
  • Page 543 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 When two endpoints need to connect and no SDP exists, a new SDP will automatically be constructed. New services added between two endpoints that already have an automatically created SDP will be immediately used; no new SDP will be constructed.
  • Page 544 The Nokia implementation provides for safe handling of pseudowire templates. Changes to the pseudowire templates are not automatically propagated. Tools are provided to evaluate and distribute the changes. The following command is used to...
  • Page 545 Resiliency Schemes The use of BGP AD on the network side, or in the backbone, does not affect the different resiliency schemes Nokia has developed in the access network. This means that both Multi-Chassis Link Aggregation (MC-LAG) and Management-VPLS (M- VPLS) can still be used.
  • Page 546 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 81 BGP VPLS Solution VPLS VPLS Service Provider Route Distinquisher Network (8 Octets) VE ID (2) VE BI Off (2) VE BI Size (2) BGP VPLS Label Base (3) VPLS VPLS OSSG488...
  • Page 547 • VE Block size (VBS): defines how many contiguous pseudowire labels are reserved, starting with the Label Base: −Nokia implementation always uses a value of eight (8). • Label Base (LB): local allocated label base: −The next eight consecutive labels available are allocated for remote PEs.
  • Page 548 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • The PEs owning the set of VE-IDs from 1 to 8 will ignore this NLRI. In addition to the pseudowire label information, the Layer2 Info Extended Community attribute must be included in the BGP update for BGP VPLS to signal the attributes of all the pseudowires that converge toward the originator VPLS PE.
  • Page 549 • C – a Control word that must or must not be present when sending VPLS packets to this PE, depending on whether C is 1 or 0, respectively. By default, Nokia implementation uses value 0. • MBZ – Must Be Zero bits, set to zero when sending and ignored when receiving •...
  • Page 550 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.17.2 Supported VPLS Features BGP VPLS includes support for a new type of pseudowire signaling based on MP- BGP, based on the existing VPLS instance; therefore, it inherits all the existing Ethernet switching functions.
  • Page 551 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 VCCV BFD is supported on the following VPLS services: • T-LDP spoke-SDP termination on VPLS (including I-VPLS, B-VPLS, and R- VPLS) • H-VPLS spoke-SDP • BGP VPLS • VPLS with BGP auto-discovery To configure VCCV BFD for H-VPLS (where the pseudowire template does not apply), configure the BFD template using the config>service>vpls>spoke- sdp>bfd-template name command, then enable it using the...
  • Page 552 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 83 BGP Multi-Homing for VPLS VSI-ID = 1.1.1.1 PE4 VSI-ID = 1.1.1.1 VSI-ID = 2.2.2.2 CE5 SITE-ID = 5 CE6 SITE-ID = 6 VPLS VPLS Service Provider 1 Access link is active.
  • Page 553 MH sites in a VPLS will be placed in standby except for the site selected as DF. Nokia BGP-based multi-homing solution uses the DF election procedure described in the IETF working group document draft-ietf-bess- vpls-multihoming-01.
  • Page 554 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.19.2 Supported Services and Multi-Homing Objects This feature is supported for the following services: • LDP VPLS with or without BGP-AD • BGP VPLS (BGP multi-homing for inter-AS BGP-VPLS services is not supported) •...
  • Page 555 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.2.19.3.1 MAC Flush to the Core PEs Assuming that there is a transition of the existing DF to non-DF status, the PE that owns the MH site experiencing this transition will generate a MAC flush-all-from-me (negative MAC flush) toward the related core PEs.
  • Page 556 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 85 BGP MH Used in an HVPLS Topology VPLS VPLS VPLS VPLS VPLS with BGP VPLS Multi-homing VPLS VPLS VPLS VPLS VPLS OSSG491 LDP VPLS domains are interconnected using a core VPLS domain, either BGP VPLS or LDP VPLS.
  • Page 557 (S,G). IGMP snooping operates in a proxy mode, where the system summarizes upstream IGMP reports and responds to downstream queries. See “IGMP Snooping” in the 7450 ESS, 7750 SR, and VSR Triple Play Service Delivery Architecture Guide for a description of IGMP snooping.
  • Page 558 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • B-VPLS • Routed I-VPLS • EVPN-MPLS services • PBB-EVPN services MLD snooping is not supported under the following forms of default SAP: • * • *.null • *.* MLD snooping is not supported in a VPLS service configured with a connection profile VLAN SAP.
  • Page 559 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 −on a router configured with enable-inter-as-vpn or enable-rr-vpn- forwarding −under the following forms of default SAP: • * • *.null • *.* −in a VPLS service configured with a connection profile VLAN SAP −with connected SR OSs configured with improved-assert −with subscriber management in the VPLS service −as a mechanism to drive MCAC...
  • Page 560 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • generate join/prune messages upstream using the IP address of one of the downstream CE routers • run an upstream PIM state machine to determine whether a join/prune message should be sent upstream Join/prune suppression is not required to be disabled on CE routers, but it requires all PEs in the VPLS to have PIM proxy enabled.
  • Page 561 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 For IPv6 multicast address to MAC address mapping, Ethernet MAC addresses in the range of 33-33-00-00-00-00 to 33-33-FF-FF-FF-FF are reserved for IPv6 multicast. To map an IPv6 multicast address to a MAC-layer multicast address, the low-order 32 bits of the IPv6 multicast address are mapped directly to the low-order 32 bits in the MAC-layer multicast address.
  • Page 562 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.20.4.2 SG-Based IPv6 Multicast Forwarding When PIM snooping for IPv6 is configured, SG-based forwarding can be enabled, which causes the IPv6 multicast forwarding to be based on both the source (if specified) and destination IPv6 address in the received join.
  • Page 563 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 It is not supported in the following services: • PBB B-VPLS • PBB I-VPLS • Routed-VPLS (including with I-VPLS and BGP-EVPN) • BGP-EVPN-MPLS (including PBB-EVPN) • VPLS E-Tree •...
  • Page 564 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 When PIM snooping is enabled within a VPLS service, all IP multicast traffic and flooded PIM messages (these include all PIM snooped messages when not in PIM proxy mode and PIM hellos when in PIM proxy mode) will be sent to any SAP or SDP binding configured with an IGMP-snooping mrouter port.
  • Page 565 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 For IGMP snooping and PIM snooping for IPv4 to work correctly with MCS on QinQ ports using x.* SAPs, one of the following must be true: • MCS is configured with a sync-tag for the entire port. •...
  • Page 566 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.2.20.6.2 MLD Snooping Synchronization MCS for MLD snooping is not supported. The command is not blocked for backward- compatibility reasons, but has no effect on the system if configured. 3.2.20.6.3 PIM Snooping for IPv4 Synchronization MCS for PIM snooping for IPv4 synchronizes the neighbor information from PIM...
  • Page 567 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 PIM snooping for IPv4 synchronization is also only supported for the following active/ standby redundancy mechanisms on dual-homed systems: • MC-LAG • BGP Multi-homing • active/standby pseudowires • Single-Active Multi-homing (EVPN-MPLS and PBB-EVPN I-VPLS) Configuring an mrouter port under an object that has the synchronization of PIM snooping for IPv4 states enabled is not recommended.
  • Page 568 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 When enabled, this feature relies on BGP Auto-Discovery (BGP-AD) or BGP-VPLS to discover the PE nodes participating in a specified VPLS/B-VPLS instance. The BGP route contains the information required to signal both the point-to-point (P2P) PWs used for forwarding unicast known Ethernet frames and the RSVP P2MP LSP used to forward the BUM frames.
  • Page 569 Transport label (known as the hash label) (RFC 6391). These labels allow LSR nodes in a network to load-balance labeled packets in a much more granular fashion than allowed by simply hashing on the standard label stack. See the 7450 ESS, 7750 SR, 7950 XRS, and VSR MPLS Guide for further information.
  • Page 570 3.3 Routed VPLS and I-VPLS This section provides information about Routed VPLS (R-VPLS) and I-VPLS. R- VPLS and I-VPLS apply to the 7450 ESS and 7750 SR. 3.3.1 IES or VPRN IP Interface Binding For the remainder of this section R-VPLS and Routed I-VPLS will both be described as a VPLS service and differences will be pointed out where applicable.
  • Page 571 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 If an IP interface is not currently bound to the service name used by the VPLS service, no action is taken at the time of the service name assignment. 3.3.1.2 Service Binding Requirements If the defined service ID is created on the system, the system will check to ensure...
  • Page 572 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • If the name is currently in use by a VPLS service without the allow-ip-int-bind flag set, the IP interface will be placed in the operationally down: VPLS service allow-ip-int-bind flag not set state.
  • Page 573 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.3.2 IP Interface MTU and Fragmentation The VPLS service is affected by two MTU values: port MTUs and the VPLS service MTU. The MTU on each physical port defines the largest Layer 2 packet (including all DLC headers) that may be transmitted out a port.
  • Page 574 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.3.3 ARP and VPLS FDB Interactions Two address-oriented table entries are used when routing into a VPLS service. On the routing side, an ARP entry is used to determine the destination MAC address used by an IP next-hop.
  • Page 575 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.3.3.1 R-VPLS Specific ARP Cache Behavior In typical routing behavior, the system uses the IP route table to select the egress interface, and then at the egress forwarding engine, an ARP entry is used to forward the packet to the appropriate Ethernet MAC.
  • Page 576 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 35 Egress R-VPLS Next-Hop Behavior (Continued) Next-Hop ARP Next-Hop MAC Egress Behavior Cache Entry FDB Entry ARP Cache Hit Known Forward out of specific egress VPLS or I-VPLS virtual ports where MAC has been learned.
  • Page 577 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.3.4.3 R-VPLS Feature Restrictions When the allow-ip-int-bind flag is set on a VPLS service, the following restrictions apply. The flag also cannot be enabled while any of these features are applied to the VPLS service: •...
  • Page 578 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.3.5 IPv4 and IPv6 Multicast Routing Support IPv4 and IPv6 multicast routing is supported in a R-VPLS service through its IP interface when the source of the multicast stream is on one side of its IP interface and the receivers are on either side of the IP interface.
  • Page 579 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 configure service vpls <service-id> allow-ip-int-bind igmp-snooping mrouter-port mld-snooping mrouter-port exit exit exit exit This configuration achieves a faster failover in scenarios with redundant routers where multicast traffic is sent to systems on the VPLS side of their R-VPLS services and IGMP/MLD snooping is enabled in the VPLS service.
  • Page 580 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 IPv4 or IPv6 multicast traffic entering the IP side of the R-VPLS service and exiting over a multi-port LAG on the VPLS side of the service is sent on a single link of that egress LAG, specifically the link used for all broadcast, unknown, and multicast traffic.
  • Page 581 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The IPv4/IPv6 multicast traffic entering the lower VPLS service from the connected system will be flooded in that VPLS service, unless IGMP/MLD snooping is enabled, in which case it will only be forwarded to SAPs, spoke-SDPs, or the R-VPLS IP interface if joins have been received on them.
  • Page 582 3.3.7.4 7450 Mixed Mode Chassis The mixed mode on the 7450 ESS that allows 7750 SR-based IOMs to be populated and operational in a 7450 ESS chassis supports R-VPLS as long as all the forwarding plane and port type restrictions are observed.
  • Page 583 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 • multicast VLAN registration functions within the associated VPLS service • configuration of a video ISA within the associated VPLS service • configuration of MFIB-allowed MDA destinations under spoke/mesh SDPs within the associated VPLS service •...
  • Page 584 LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.4 VPLS Service Considerations This section describes the 7450 ESS, 7750 SR, and 7950 XRS service features and any special capabilities or considerations as they relate to VPLS services. 3.4.1 SAP Encapsulations VPLS services are designed to carry Ethernet frame payloads, so the services can provide connectivity between any SAPs and SDPs that pass Ethernet frames.
  • Page 585 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 In situations 2 and 3 above, traffic encapsulated with tags for which there is no definition are discarded. 3.4.3 Ingress VLAN Swapping This feature is supported on VPLS and VLL service where the end-to-end solution is built using two node solutions (requiring SDP connections between the nodes).
  • Page 586 IEEE 802.1ad), or Backbone VLAN IDs (BVID) in a Provider Backbone Bridging (PBB) domain (refer to IEEE 802.1ah). The initial focus of Nokia MVRP implementation is a Service Provider QinQ domain with or without a PBB core. The QinQ access into a PBB core example is used throughout this section to describe the MVRP implementation.
  • Page 587 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 • Configure the MVRP infrastructure −This requires the configuration of a Management VPLS (M-VPLS) context. −MSTP may be used in M-VPLS to provide the loop-free topology over which the MVRP exchanges take place.
  • Page 588 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • The vpls-template binding is used to instantiate the VPLS instance where the service ID is derived from the VLAN value as per service-range configuration. • The vpls-sap-template binding is used to create dot1q SAPs by deriving from the VLAN value the service delimiter as per service-range configuration.
  • Page 589 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Example: no shutdown mmrp shutdown mvrp no shutdown sap 1/1/1:0 mrp mvrp no shutdown sap 2/1/2:0 mrp mvrp no shutdown sap 3/1/10:0 mrp mvrp no shutdown vpls-group 1 service-range 100-2000 vpls-template-binding Autovpls1 sap-template-binding Autosap1...
  • Page 590 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 This section will discuss how MVRP is used to activate service connectivity between a BEB SAP and a UNI SAP located on one of the switches in the local domain. A similar procedure is used in the case of UNI SAPs configured on two switches located in the same access domain.
  • Page 591 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 A hold-time parameter (config>service>vpls>mrp>mvrp>hold-time) is provided in the M-VPLS configuration to control when the end-station or last UNI SAP is considered active from an MVRP perspective. The hold-time controls the amount of MVRP advertisements generated on fast transitions of the end-station or UNI SAPs.
  • Page 592 Ethernet environment. M-VPLS and the associated MSTP (or P-MSTP) control plane provides the loop avoidance component in the Nokia implementation. Nokia MVRP may also be used in a non- MSTP, loop free topology.
  • Page 593 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.4.4.5.1 Interaction Between MVRP and Instantiated SAP Status This section describes how MVRP reacts to changes in the instantiated SAP status. There are a number of mechanisms that may generate operational or admin down status for the SAPs and VPLS instances controlled by MVRP: 1.
  • Page 594 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 To minimize the effects of MAC flushing and MVRP convergence, a temporary flooding behavior is implemented. When enabled, the temporary flooding eliminates the time it takes to flush the MAC tables. In the initial implementation, the temporary flooding is initiated only on reception of an STP TCN.
  • Page 595 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 A VPLS E-Tree service may support an arbitrary number of leaf access (leaf-ac) interfaces, root access (root-ac) interfaces, and root-leaf tagged (root-leaf-tag) interfaces. Leaf-ac interfaces are supported on SAPs and SDP binds and can only communicate with root-ac interfaces (also supported on SAPs and SDP binds).
  • Page 596 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 An Ethernet service access SAP is characterized as either a leaf-ac or a root-ac for a VPLS E-Tree service. As far as SR OS is concerned, these are normal SAPs with either no tag (Null), priority tag, or dot1q or QinQ encapsulation on the frame.
  • Page 597 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.4.5.4 Root-leaf-tag SAPs Support on root-leaf-tag SAPs requires that the outer VID is overloaded to indicate root and leaf. To support the SR service model for a SAP, the ability to send and receive two different tags on a single SAP has been added.
  • Page 598 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.4.5.5 Root-leaf-tag SDP Binds Typically, in a VPLS environment over MPLS, mesh and spoke-SDP binds interconnect the local VPLS instances to remote PEs. To support VPLS E-Tree, the root and leaf traffic is sent over the SDP bind using a fixed VLAN tag value.
  • Page 599 −Since xSTP is not aware of the root-leaf topology either, root ports might end up blocked before leaf interfaces. −When xSTP is used as a access redundancy mechanism, Nokia recommends that the dual-homed device is connected to the same type of E-Tree AC, to avoid unexpected forwarding behaviors when xSTP converges.
  • Page 600 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • Redundancy mechanisms such as MC-LAG, SDP bind end-points, or BGP-MH are fully supported on VPLS E-Tree services. However, eth-tunnel SAPs or eth- ring control SAPs are not supported on VPLS E-Tree services. 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 601 The following fields require specific input (there are no defaults) to configure a basic VPLS service: • Customer ID (refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Services Overview Guide for more information) • For a local service, configure two SAPs, specifying local access ports and encapsulation values.
  • Page 602 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 ---------------------------------------------- *A:ALA-1>config>service# *A:ALA-2>config>service# info ---------------------------------------------- vpls 9000 customer 6 create description "This is a distributed VPLS." shutdown exit sap 1/1/5:16 create description "VPLS SAP" exit spoke-sdp 2:22 create exit mesh-sdp 8:750 create exit...
  • Page 603 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Step 2. Define SAPs: −Select node(s) and port(s) −Optional — Select QoS policies other than the default (configured in config>qos context) −Optional — Select filter policies (configured in config>filter context) −Optional —...
  • Page 604 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.5.3.2 Enabling Multiple MAC Registration Protocol (MMRP) Once MMRP is enabled in the B-VPLS, it advertises the presence of the I-VPLS instances associated with this B-VPLS. The following example shows a configuration with MMRP enabled. *A:PE-B>config>service# info ---------------------------------------------- vpls 11 customer 1 vpn 11 i-vpls create...
  • Page 605 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 ------------------------------------------------------------------------------- Admin State : Up Failed Register Cnt: 0 Max Attributes : 1023 Attribute Count Attr High Watermark: 95% Attr Low Watermark : 90% Flood Time : 10 ------------------------------------------------------------------------------- *A:PE-C# show service id 100 mmrp mac -------------------------------------------------------------------------------...
  • Page 606 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.5.3.2.1 Enabling MAC Move The mac-move feature is useful to protect against undetected loops in your VPLS topology as well as the presence of duplicate MACs in a VPLS service. For example, if two clients in the VPLS have the same MAC address, the VPLS will experience a high re-learn rate for the MAC and will shut down the SAP or spoke-SDP when the threshold is exceeded.
  • Page 607 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Flags : None Time to RetryReset: never Retries Left Mac Move : Blockable Blockable Level : Secondary ------------------------------------------------------------------------------- SDP Mac Move Information: 21:502 ------------------------------------------------------------------------------- Admin State : Up Oper State : Down Flags...
  • Page 608 When STP on the VPLS is administratively disabled, any BPDUs are forwarded transparently through the 7450 ESS, 7750 SR, or 7950 XRS. When STP on the VPLS is administratively enabled, but the administrative state of a SAP or spoke- SDP is down, BPDUs received on such a SAP or spoke-SDP are discarded.
  • Page 609 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Bridge Priority The bridge-priority command is used to populate the priority portion of the bridge ID field within outbound BPDUs (the most significant 4 bits of the bridge ID). It is also used as part of the decision process when determining the best BPDU between messages received and sent.
  • Page 610 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Forward Delay RSTP, as defined in the IEEE 802.1D-2004 standards, will normally transition to the forwarding state by a handshaking mechanism (rapid transition), without any waiting times. If handshaking fails (for example, on shared links, as follows), the system falls back to the timer-based mechanism defined in the original STP (802.1D-1998) standard.
  • Page 611 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The configured hello-time value can also be used to calculate the bridge forward delay; see Forward Delay. CLI Syntax: config>service>vpls service-id# stp hello-time hello-time Range: 1 to 10 seconds Default: 2 seconds Restore Default: no hello-time Hold Count...
  • Page 612 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 MST Max Hops The mst-max-hops command defines the maximum number of hops the BPDU can traverse inside the region. Outside the region, max-age is used. MST Name The MST name defines the name that the operator gives to a region. Together with MST revision and the VLAN to mst-instance mapping, it forms the MST configuration identifier.
  • Page 613 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 priority-marking dscp dscp-name priority-marking prec ip-prec-value [no] shutdown [no] shutdown [no] shutdown This example shows a GSMP group configuration. A:ALA-48>config>service>vpls>gsmp# info ---------------------------------------------- group "group1" create description "test group config" neighbor 10.10.10.104 create description "neighbor1 config"...
  • Page 614 VPLS consists of a SAP on each participating node and an SDP bound to each participating node. For SDP configuration information, refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Services Overview Guide. For SDP binding information, see Configuring SDP Bindings.
  • Page 615 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 exit sap 1/2/5:0 create description "VPLS SAP" multi-service-site "West" exit exit -------------------------------------------- *A:ALA-1>config>service# *A:ALA-2>config>service# info -------------------------------------------- vpls 9000 customer 6 vpn 750 create description "Distributed VPLS services." shutdown exit sap 1/1/2:22 create description "VPLS SAP"...
  • Page 616 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • SAP Path Cost • SAP Edge Port • SAP Auto Edge • SAP Link Type SAP STP Administrative State The administrative state of STP within a SAP controls how BPDUs are transmitted and handled when received.
  • Page 617 SAP. When configuration BPDUs are being received, the configured SAP priority will be used in some circumstances to determine whether a SAP will be designated or blocked. These are the values used for CIST when running MSTP for the 7450 ESS or 7750 SR.
  • Page 618 STP suggests that the path cost is defined as a function of the link bandwidth. Since SAPs are controlled by complex queuing dynamics, in the 7450 ESS, 7750 SR, and 7950 XRS the STP path cost is a purely static configuration.
  • Page 619 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The edge-port command is used to initialize the internal OPER_EDGE variable. At any time, when OPER_EDGE is false on a SAP, the normal mechanisms are used to transition to the forwarding state (see Forward Delay).
  • Page 620 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 SAP Link Type The SAP link-type parameter instructs STP on the maximum number of bridges behind this SAP. If there is only a single bridge, transitioning to forwarding state will be based on handshaking (fast transitions).
  • Page 621 IEEE 802.1d (referred as Dot1d) and Cisco’s per VLAN Spanning Tree (PVST) BPDU encapsulations are supported on a per-SAP basis for the 7450 ESS and 7750 SR. STP is associated with a VPLS service like PVST is associated per VLAN.
  • Page 622 Ethernet interface with encapsulation type set to null. Each transition between encapsulation types optionally generates an alarm that can be logged and optionally transmitted as an SNMP trap on the 7450 ESS or 7750 SR. 3.5.3.4.5 Configuring VPLS SAPs with Split Horizon To configure a VPLS service with a split horizon group, add the split-horizon-group parameter when creating the SAP.
  • Page 623 Configuring SAP Subscriber Management Parameters Use the following CLI syntax to configure subscriber management parameters on a VPLS service SAP on the 7450 ESS and 7750 SR. The policies and profiles that are referenced in the def-sla-profile, def-sub-profile, non-sub-traffic, and sub-ident- policy commands must already be configured in the config>subscr-mgmt context.
  • Page 624 When MSTP is used to control VLANs, a range of VLAN IDs is normally used to specify the VLANs to be controlled on the 7450 ESS and 7750 SR. If an Ethernet tunnel SAP is to be controlled by MSTP, the Ethernet tunnel SAP ID needs to be within the VLAN range specified under the mst-instance.
  • Page 625 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 vlan-range 1-100 exit mst-name "abc" mst-revision 1 no shutdown exit sap 1/1/1:0 create // untagged exit sap eth-tunnel-1 create exit no shutdown exit vpls 401 customer 1 create shutdown exit sap 1/1/1:12 create...
  • Page 626 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 A spoke-SDP connects a VPLS service between two sites and, in its simplest form, could be a single tunnel LSP. A set of ingress and egress VC labels are exchanged for each VPLS service instance to be transported over this LSP.
  • Page 627 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 exit egress scheduler-policy "SLA1" policer-control-policy "SLA1-p" policer-control-override create max-rate 60000 exit qos 100 queue-override queue 1 create adaptation-rule pir max cir max exit exit policer-override policer 1 create mbs 2000 kilobytes exit exit...
  • Page 628 Use the following CLI syntax to create mesh or spoke-SDP bindings with a distributed VPLS service. SDPs must be configured prior to binding. Refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Services Overview Guide for information about creating SDPs.
  • Page 629 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 description "This is a distributed VPLS." shutdown exit sap 1/2/5:0 create exit spoke-sdp 2:22 create exit mesh-sdp 5:750 create exit mesh-sdp 7:750 create exit no shutdown exit ---------------------------------------------- *A:ALA-1>config>service# *A:ALA-2>config>service# info ----------------------------------------------...
  • Page 630 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.5.3.8.1 Configuring Spoke-SDP Specific STP Parameters When a VPLS has STP enabled, each spoke-SDP within the VPLS has STP enabled by default. The operation of STP on each spoke-SDP is governed by: •...
  • Page 631 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Spoke-SDP Virtual Port Number The virtual port number uniquely identifies a spoke-SDP within configuration BPDUs. The internal representation of a spoke-SDP is unique to a system and has a reference space much bigger than the 12 bits definable in a configuration BPDU.
  • Page 632 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The default value for spoke-SDP priority is 128. This parameter can be modified within a range of 0 to 255; 0 being the highest priority. Masking causes the values actually stored and displayed to be 0 to 240, in increments of 16.
  • Page 633 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The edge-port command is used to initialize the internal OPER_EDGE variable. At any time, when OPER_EDGE is false on a spoke-SDP, the normal mechanisms are used to transition to the forwarding state (see Forward Delay).
  • Page 634 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Spoke-SDP Link Type The spoke-SDP link-type command instructs STP on the maximum number of bridges behind this spoke-SDP. If there is only a single bridge, transitioning to forwarding state will be based on handshaking (fast transitions). If more than two bridges are connected by a shared media, their spoke-SDPs should all be configured as shared, and timer-based transitions are used.
  • Page 635 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 When, during normal operation, the router detects a downstream loop behind a spoke-SDP, BPDUs can be received at a very high rate. To recover from this situation, STP will transition the spoke-SDP to a disabled state for the configured forward-delay duration.
  • Page 636 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 37 Spoke-SDP BPDU Encapsulation States Field dot1d dot1d PVST PVST encap-type null encap-type dot1q encap-type encap-type dot1q null Destination MAC 01:80:c2:00:00:00 01:80:c2:00:00:00 01:00:0c:cc:cc:cd Source MAC Sending Port MAC Sending Port MAC Sending Port MAC EtherType...
  • Page 637 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 • PVST specifies that the switch is currently sending proprietary encapsulated BPDUs. PVST BPDUs are only supported on Ethernet interfaces with the encapsulation type set to dot1q. The spoke-SDP continues in the PVST BPDU encapsulation state until a dot1d encapsulated BPDU is received, in which case the spoke-SDP reverts to the dot1d encapsulation state.
  • Page 638 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.5.4.1 Creating a Management VPLS for SAP Protection This section provides a brief overview of the tasks that must be performed to configure a management VPLS for SAP protection and provides the CLI commands; Figure 95.
  • Page 639 ALA-2 = vpls 10 (user vpls) 1/1:100 = vpls 1 (m-vpls) OSSG047 Use the following CLI syntax to create a management VPLS on the 7450 ESS or 7750 SR. CLI Syntax: config>service# sdp sdp-id mpls create far-end ip-address lsp lsp-name...
  • Page 640 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 no shutdown exit vpls 1 customer 1 m-vpls create sap 1/1/1:1 create managed-vlan-list range 100-1000 exit exit mesh-sdp 300:1 create exit exit no shutdown exit ---------------------------------------------- *A:ALA-1>config>service# 3.5.4.2 Creating a Management VPLS for Spoke-SDP Protection This section provides a brief overview of the tasks that must be performed to configure a management VPLS for spoke-SDP protection and provides the CLI...
  • Page 641 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Note: The SDP should be protected by, for example, a backup LSP or Fast Reroute. If the SDP went down, STP on both nodes would go to forwarding state and a loop would occur. Figure 96 Example Configuration for Protected VPLS Spoke-SDP block-on-mesh-failure...
  • Page 642 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 *A:ALA-A1>config>service# info ---------------------------------------------- sdp 100 mpls create far-end 10.0.0.30 lsp "toALA-B1" no shutdown exit sdp 300 mpls create far-end 10.0.0.20 lsp "toALA-A2" no shutdown exit vpls 101 customer 1 m-vpls create spoke-sdp 100:1 create exit meshspoke-sdp 300:1 create...
  • Page 643 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Figure 97 Example Configuration for Load Balancing Across Two Protected VPLS Spoke- SDPs SDP 102, ALA-A1 ALA-B1 path-cost=1 102:2 102:2 101:1 101:1 SDP 101, path-cost=1000 300:2 300:1 300:1 300:2 Metro 1 Metro 2...
  • Page 644 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 *A:ALA-A1>config>service# info ---------------------------------------------- sdp 101 mpls create far-end 10.0.0.30 lsp "1toALA-B1" no shutdown exit sdp 102 mpls create far-end 10.0.0.30 lsp "2toALA-B1" no shutdown exit vpls 101 customer 1 m-vpls create spoke-sdp 101:1 create path-cost 1 exit...
  • Page 645 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 vpls 101 customer 1 m-vpls create spoke-sdp 101:1 create path-cost 1000 exit exit mesh-sdp 300:1 create exit exit no shutdown exit vpls 102 customer 1 m-vpls create spoke-sdp 102:2 create path-cost 1 exit exit...
  • Page 646 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 exit vpls 102 customer 1 m-vpls create spoke-sdp 102:2 create path-cost 1000 exit exit mesh-sdp 300:2 create exit exit no shutdown exit ---------------------------------------------- *A:ALA-A1>config>service# The following example shows the VPLS configuration on ALA-A4 (bottom right, IP address 10.0.0.40): *A:ALA-A2>config>service# info ----------------------------------------------...
  • Page 647 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 ---------------------------------------------- *A:ALA-A2>config>service# 3.5.4.4 Configuring Selective MAC Flush Use the following CLI syntax to enable selective MAC flush in a VPLS. CLI Syntax: config>service# vpls service-id send-flush-on-failure Use the following CLI syntax to disable selective MAC flush in a VPLS. CLI Syntax: config>service# vpls service-id no send-flush-on-failure...
  • Page 648 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 *A:Dut-B>config>service>vpls# info ---------------------------------------------- fdb-table-size 20000 send-flush-on-failure shutdown exit endpoint "mcep-t1" create no suppress-standby-signaling block-on-mesh-failure mc-endpoint 1 mc-ep-peer Dut-C exit exit mesh-sdp 201:1 vc-type vlan create exit mesh-sdp 211:1 vc-type vlan create exit spoke-sdp 221:1 vc-type vlan endpoint "mcep-t1"...
  • Page 649 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 fdb-table-size 20000 send-flush-on-failure shutdown exit endpoint "mcep-t1" create no suppress-standby-signaling block-on-mesh-failure mc-endpoint 1 mc-ep-peer Dut-B exit exit mesh-sdp 301:1 vc-type vlan create exit mesh-sdp 311:1 vc-type vlan create exit spoke-sdp 321:1 vc-type vlan endpoint "mcep-t1"...
  • Page 650 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 exit endpoint "mcep-t1" create block-on-mesh-failure mc-endpoint 1 mc-ep-peer Dut-E exit exit mesh-sdp 401:1 vc-type vlan create exit spoke-sdp 411:1 vc-type vlan endpoint "mcep-t1" create shutdown exit block-on-mesh-failure precedence 2 exit spoke-sdp 421:1 vc-type vlan endpoint "mcep-t1"...
  • Page 651 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 mc-endpoint 1 mc-ep-peer Dut-D exit exit spoke-sdp 501:1 vc-type vlan endpoint "mcep-t1" create shutdown exit block-on-mesh-failure precedence 3 exit spoke-sdp 511:1 vc-type vlan endpoint "mcep-t1" create shutdown exit block-on-mesh-failure exit mesh-sdp 521:1 vc-type vlan create...
  • Page 652 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 98 ATM/Frame Relay PVC Access and Termination on a VPLS Example APS Protected Links ATM/FR Ethernet-MPLS ATM1 Network IWF Ethernet Ethernet 7750 SR 7750 SR ATM2 (VLAN) UNI VPLS VPLS PVC/SPVC...
  • Page 653 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 All VPLS functionality available on the 7750 SR is applicable to FR and ATM- delimited VPLS SAPs. For example, bridged PDUs received over ATM SAP can be tunneled through or dropped, all FIB functionality applies, packet level QoS and MAC filtering applies, and so on.
  • Page 654 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 99 BGP AD Configuration Example pw-template 1 pw-template 1 pw-template 1 vpls 100 customer 1 create vpls 100 customer 1 create vpls 100 customer 1 create service-mtu 1478 service-mtu 1478 service-mtu 1478 pw-template-binding 1...
  • Page 655 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 ======================================================================= Services: L2 Route Information - Summary Service ======================================================================= Svc Id L2-Routes (RD-Prefix) Next Hop Origin Sdp Bind Id ----------------------------------------------------------------------- 65535:100-1.1.1.134 1.1.1.134 BGP-L2 17406:4294967295 ----------------------------------------------------------------------- No. of L2 Route Entries: 1 ======================================================================= PERs6># When only one of the endpoints has an entry for the service in the l2-routing-table, it...
  • Page 656 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • SAII from the locally configured VSI-ID • TAII from the VSI-ID contained in the last 4 bytes of the received BGP NLRI Figure 100 shows the different detailed phases of the LDP signaling path, post BGP AD completion.
  • Page 657 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Figure 102 Show Router LDP Bindings FEC-Type Services PERs6# show router ldp bindings fec-type services LDP LSR ID: 1.1.1.6 Legend: U – Label In Use, N – Label Not In Use, W – Label Withdrawn S –...
  • Page 658 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 [no] limit-mac-move - Configure mac move [no] mac-pinning - Enable/disable MAC address pinning on this spoke SDP [no] max-nbr-mac-ad* - Configure the maximum number of MAC entries in the FDB from this SDP [no] restrict-prote* - Enable/disable protected src MAC restriction...
  • Page 659 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.5.7 Configuring BGP VPLS This section provides a configuration example required to bring up BGP VPLS in the VPLS PEs depicted in Figure 104. Figure 104 BGP VPLS Example PE-24 VPRN1 IP/MPLS...
  • Page 660 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 exit bgp-vpls max-ve-id 100 ve-name 25 ve-id 25 exit no shutdown exit sap 1/1/19:600.* create exit no shutdown ---------------------------------------------- *A:PE25>config>service>vpls# *A:PE26>config>service>vpls# info ---------------------------------------------- route-distinguisher 65026:600 route-target export target:65019:600 import target:65019:600 pw-template-binding 1 exit bgp-vpls...
  • Page 661 VPLS service. For information about configuring filter policies, refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide. Issue: 01 3HE 15084 AAAA TQZZA 01...
  • Page 662 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Figure 105 Policy-Based Forwarding For Deep Packet Inspection DPI Box Normal Stream PBF Diverted Stream Residential Split VPLS 10 IngressPBF Filter on Incoming Traffic Split Horizon SAPs Disable Learning OSSG125 The following example shows the service configuration: *A:ALA-48>config>service# info...
  • Page 663 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 no shutdown exit ---------------------------------------------- *A:ALA-48>config>service# The following example shows the MAC filter configuration: *A:ALA-48>config>filter# info ---------------------------------------------- mac-filter 100 create default-action forward entry 10 create match dot1p 7 7 exit log 101 action forward sap 1/1/22:1...
  • Page 664 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 sap 1/1/23:5 create static-mac 00:00:00:31:13:05 create exit spoke-sdp 3:5 create exit no shutdown exit ..---------------------------------------------- *A:ALA-48>config>service# 3.5.9 Configuring VPLS E-Tree Services When configuring a VPLS E-Tree service, the etree keyword must be specified when the VPLS service is created.
  • Page 665 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 exit spoke-sdp 12:2006 leaf-ac create no shutdown exit no shutdown exit ..*A:ALA-48>config>service# info ---------------------------------------------- Issue: 01 3HE 15084 AAAA TQZZA 01...
  • Page 666 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.6 Service Management Tasks This section describes VPLS service management tasks. 3.6.1 Modifying VPLS Service Parameters You can change existing service parameters. The changes are applied immediately. To display a list of services, use the show service service-using vpls command. Enter the parameter such as description, SAP, SDP, and/or service-MTU command syntax, then enter the new information.
  • Page 667 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.6.3 Deleting a Management VPLS As with normal VPLS service, a management VPLS cannot be deleted until SAPs and SDPs are unbound (deleted), interfaces are shut down, and the service is shut down on the service level.
  • Page 668 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 [no] vpls service-id shutdown [no] mesh-sdp sdp-id shutdown sap sap-id [split-horizon-group group-name] no sap sap-id shutdown 3.6.6 Disabling a VPLS Service You can shut down a VPLS service without deleting the service parameters. CLI Syntax: config>service>...
  • Page 669 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.7 VPLS Service Configuration Command Reference This section describes the VPLS service configuration command reference. 3.7.1 Command Hierarchies • Global Commands • General Switch Management Protocol (GSMP) Commands •...
  • Page 670 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — ip-address — no — ieee-address — no — description description-string — no description — [no] disable-aging — [no] disable-learning — [no] discard-unknown — endpoint endpoint-name [create] — no endpoint —...
  • Page 671 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — mac-address mac-address — no mac-address — one-way-delay-threshold seconds — [no] shutdown — tunnel-fault [accept | ignore] — fdb-table-high-wmark high-water-mark — no fdb-table-high-wmark [high-water-mark] — fdb-table-low-wmark low-water-mark — no fdb-table-low-wmark [low-water-mark] —...
  • Page 672 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no static-arp unnumbered] — unnumbered [ip-int-name | ip-address] — no unnumbered — isid-policy — entry range-entry-id [create] — no entry range-entry-id — [no] advertise-local — range isid [to isid] —...
  • Page 673 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — no mfib-table-size — mld-snooping — — description description-string — no description — group-policy policy-name — no group-policy — [no] shutdown — query-interval seconds — no query-interval — query-src-ip ipv6-address —...
  • Page 674 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — boot-timer seconds — no boot-timer — failed-threshold [1 to 1000] — failed-threshold — [no] mesh-sdp-binding — monitor-oper-group name — no monitor-oper-group — sap-id — no — [no] shutdown —...
  • Page 675 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — ieee-address [create] spoke-sdp sdp-id:vc-id monitor {fwd- status} — no ieee-address — — forward-delay forward-delay — no forward-delay — hello-time hello-time — no hello-time [hello-time] — hold-count BDPU tx hold count —...
  • Page 676 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.7.1.2 General Switch Management Protocol (GSMP) Commands config — service — vpls — gsmp — [no] group name [create] — ancp — [no] dynamic-topology-discover — [no] — description description-string —...
  • Page 677 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — route-distinguisher — no route-distinguisher — route-distinguisher auto-rd — vsi-export policy-name [policy-name...(up to 5 max)] — no vsi-export — vsi-import policy-name [policy-name...(up to 5 max)] — no vsi-import —...
  • Page 678 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — arp-host — host-limit max-num-hosts — no host-limit — min-auth-interval min-auth-interval — no min-auth-interval — [no] shutdown — arp-reply-agent [sub-ident] — no arp-reply-agent — — egress — traffic-desc traffic-desc-profile-id —...
  • Page 679 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — [no] service-id — string text — no string — [no] system-id — proxy-server — emulated-server ip-address — no emulated-server — lease-time [days days] [hrs hours] [min minutes] [sec seconds] [radius-override] —...
  • Page 680 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no packet-byte-offset — queue queue-id — no queue queue-id — wrr-weight weight — no wrr-weight — size {[bytes | kilobytes] | default} — no — rate pir-rate —...
  • Page 681 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — avg-frame-overhead percentage — no avg-frame-overhead — burst-limit {default | size [bytes | kilobytes]} — no burst-limit — size-in-kbytes — no — drop-tail — — percent-reduction-from-mbs percent — no percent-reduction-from-mbs —...
  • Page 682 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — interval {1 | 60} — no interval — priority priority-value — no priority — [no] ccm-enable — ccm-ltm-priority priority — no ccm-ltm-priority — [no] eth-test-enable — test-pattern {all-zeros | all-ones} [crc-enable] —...
  • Page 683 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — no expiry-time — import policy-name — no import — max-num-groups max-num-groups — no max-num-groups — max-num-sources max-num-sources — no max-num-sources — max-num-grp-sources [1..32000] — no max-num-grp-sources — igmp-snooping —...
  • Page 684 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — [no] starg — version version — no version — ingress — filter ip ip-filter-id — filter ipv6 ipv6-filter-id — filter mac mac-filter-id — no filter [ip ip-filter-id] [mac mac-filter-id] [ipv6 ipv6-filter-id] —...
  • Page 685 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — no percent-rate — rate pir-rate [cir cir-rate] — no rate — [no] scheduler-override — [no] scheduler scheduler-name — parent [weight weight] [cir-weight cir-weight] — no parent — rate pir-rate [cir cir-rate] —...
  • Page 686 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no fast-leave — to-sap sap-id — no to-sap — query-interval seconds — no query-interval — query-response-interval seconds — no query-response-interval — robust-count robust-count — no robust-count — [no] send-queries —...
  • Page 687 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — hello-interval seconds — no hello-interval — hello-multiplier multiplier — no hello-multiplier — metric ipv4-metric — no metric — lsp-pacing-interval milli-seconds — no lsp-pacing-interval — retransmit-interval seconds — no retransmit-interval —...
  • Page 688 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no def-sla-profile — def-sub-profile default-subscriber-profile-name — no def-sub-profile — [no] mac-da-hashing — multi-sub-sap [subscriber-limit] — [no] shutdown — single-sub-parameters — non-sub-traffic sub-profile sub-profile-name sla- profile sla-profile-name [subscriber sub-ident-string] —...
  • Page 689 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — remote-age aging-timer — no remote-age — service-mtu octets — no service-mtu — — forward-delay forward-delay — no forward-delay — hello-time hello-time — no hello-time [hello-time] — hold-count BDPU tx hold count —...
  • Page 690 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — name sap-egress-policy-name — no — scheduler-policy scheduler-policy-name — no scheduler-policy — ingress — filter ip ip-filter-id — filter ipv6 ipv6-filter-id — filter mac mac-filter-id — no filter [ip ip-filter-id] [mac mac-filter-id] [ipv6 ipv6-filter-id] —...
  • Page 691 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — accounting-policy acct-policy-id — no accounting-policy — [no] auto-learn-mac-protect — [no] bfd-enable — bfd-template name — no bfd-template — [no] collect-stats — [no] control-word — cpu-protection policy-id {[mac-monitoring] | [eth-cfm-monitoring [aggregate] [car]]} —...
  • Page 692 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no ccm-padding-size — [no] csf-enable — multiplier multiplier-value — no multiplier — description description-string — no description — [no] eth-test-enable — [no] bit-error-threshold — test-pattern {all-zeros | all-ones} [crc-enable] —...
  • Page 693 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — policy policy-name — no policy — unconstrained-bw bandwidth mandatory-bw mandatory-bw — no unconstrained-bw — [no] mrouter-port — query-interval seconds — no query-interval — query-response-interval interval — no query-response-interval —...
  • Page 694 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — robust-count robust-count — no robust-count — [no] send-queries — static — [no] group grp-ipv6-address — [no] source src-ipv6-address — [no] starg — version version — no version —...
  • Page 695 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — [no] acknowledgment — refresh-timer value — no refresh-timer — request-timer request-timer-secs retry-timer retry-timer-secs timeout-multiplier multiplier — no request-timer — [no] control-word — description description-string — no description —...
  • Page 696 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — multiplier multiplier-value — no multiplier — [no] description — [no] eth-test-enable — bit-error-threshold bit-errors — test-pattern {all-zeros | all-ones} [crc-enable] — no test-pattern — fault-propagation-enable {use-if-tlv | suspend-ccm} —...
  • Page 697 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — unconstrained-bw bandwidth mandatory-bw mandatory-bw — no unconstrained-bw — [no] mrouter-port — query-interval interval — no query-interval — query-response-interval interval — no query-response-interval — robust-count robust-count — no robust-count —...
  • Page 698 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — no query-interval — query-response-interval seconds — no query-response-interval — robust-count robust-count — no robust-count — [no] send-queries — static — [no] group group-address — [no] source ip-address —...
  • Page 699 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — metric ipv4-metric — no metric — lsp-pacing-interval milli-seconds — no lsp-pacing-interval — retransmit-interval seconds — no retransmit-interval — [no] shutdown — static-isid — range range-id isid isid-value [to isid-value] [create] —...
  • Page 700 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.7.1.10 Multi-Chassis Redundancy Commands — config — redundancy — multi-chassis — [no] peer ip-address — [no] sync — [no] igmp — [no] igmp-snooping — [no] — [no] mld-snooping —...
  • Page 701 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 config>service>vpls>mesh-sdp>eth-cfm>mep config>service>vpls>mld-snooping config>service>vpls>mld-snooping>mvr config>service>vpls>mrp config>service>vpls>mrp>mmrp config>service>vpls>mrp>mvrp config>service>vpls>sap config>service>vpls>sap>arp-host config>service>vpls>sap>dhcp>proxy config>service>vpls>sap>eth-cfm>mep config>service>vpls>sap>igmp-snooping>mcac>mc-constraints config>service>vpls>sap>mld-snooping>mcac>mc-constraints config>service>vpls>sap>spb config>service>vpls>sap>stp config>service>vpls>sap>sub-sla-mgmt config>service>vpls>spb>level config>service>vpls>split-horizon-group config>service>vpls>spoke-sdp config>service>vpls>spoke-sdp>eth-cfm>mep config>service>vpls>spoke-sdp>spb config>service>vpls>spoke-sdp>stp config>service>vpls>stp config>redundancy>multi-chassis>peer>sync Description This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
  • Page 702 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 SDP (service level) — Shutting down an SDP within a service only affects traffic on that service from entering or being received from the SDP. The SDP itself may still be operationally up for other services.
  • Page 703 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters description-string — The description character string. Allowed values are any string up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
  • Page 704 The service must be deleted and re-created with a new customer association. To create a management VPLS on the 7450 ESS, the m-vpls keyword must be specified. See section Hierarchical VPLS Redundancy for an introduction to the concept of management VPLS.
  • Page 705 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 customer customer-id — Specifies the customer ID number to be associated with the service. This parameter is required on service creation and optional for service editing or deleting. Values 1 to 2147483647 vpn vpn-id —...
  • Page 706 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 allow-ip-int-bind Syntax [no] allow-ip-int-bind Context config>service>vpls Description The allow-ip-int-bind command that sets a flag on the VPLS or I-VPLS service that enables the ability to attach an IES or VPRN IP interface to the VPLS service in order to make the VPLS service routable.
  • Page 707 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 If a service name is applied to a VPLS service and that service name is also bound to an IP interface but the allow-ip-int-bind flag has not been set on the VPLS service context, the system attempt to resolve the service name between the VPLS service and the IP interface will fail.
  • Page 708 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>vpls>allow-ip-int-bind Description This command configures MLD snooping parameters. vxlan-ipv4-tep-ecmp Syntax [no] vxlan-ipv4-tep-ecmp Context config>service>vpls>allow-ip-int-bind Description This command enables and disables ECMP on VXLAN IPv4 destinations for R-VPLS services. When this command is enabled, packets entering a VPRN connected to an R-VPLS that is terminating on a VXLAN IPv4 destination are looked up in the routing table.
  • Page 709 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The no form of the command disables STP on the backbone VPLS service. disable-aging Syntax [no] disable-aging Context config>service>vpls config>service>vpls>spoke-sdp config>service>vpls>sap config>service>template>vpls-template Description This command disables MAC address aging across a VPLS service or on a VPLS service SAP or spoke-SDP.
  • Page 710 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 This parameter is mainly used in conjunction with the discard-unknown command. The no form of this command enables learning of MAC addresses. Default no disable-learning (Normal MAC learning is enabled) discard-unknown Syntax [no] discard-unknown...
  • Page 711 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command specifies whether to enable automatic population of the MAC protect list with source MAC addresses learned on the associated with this SHG. For more information, see Auto-Learn MAC Protect.
  • Page 712 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>vpls>sap config>service>vpls>endpoint Description Enabling this command will disable re-learning of MAC addresses on other SAPs within the VPLS. The MAC address will remain attached to a specified SAP for duration of its age-timer. The age of the MAC address entry in the FDB is set by the age timer.
  • Page 713 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Context config>service>vpls>endpoint Description This command specifies the identifier associated with the multi-chassis endpoint. This value should be the same on both MC-EP peers for the pseudowires that must be part of the same group.
  • Page 714 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command indicates how the agent will handle relearn requests for protected MAC addresses, either manually added using the mac-protect command or automatically added using the auto-learn-mac-protect command. While enabled all packets entering the configured SAP, spoke-SDP, mesh-SDP, or any SAP that is part of the configured split horizon group (SHG) will be verified not to contain a protected source MAC address.
  • Page 715 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Context config>service>vpls>endpoint Description This command configures the time to wait before reverting to primary spoke-SDP. In a regular endpoint the revert-time setting affects just the pseudowire defined as primary (precedence 0).
  • Page 716 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 fdb-table-high-wmark Syntax fdb-table-high-wmark high-water-mark no fdb-table-high-wmark [high-water-mark] Context config>service>vpls config>service>template>vpls-template Description This command specifies the value to send logs and traps when the threshold is reached. Parameters high-water-mark — Specifies the value to send logs and traps when the threshold is reached Values 0 to 100...
  • Page 717 Parameters table-size — Specifies the number of entries permitted in the forwarding database for this VPLS instance Values 7450 ESS, 7950 XRS, or 7750 SR-7, SR-12, SR-12e: 1 to 511999 7750 SR-e, SR-a: 1 to 250000 host-connectivity-verify Syntax host-connectivity-verify source-ip ip-address [source-mac ieee-address] [interval...
  • Page 718 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>vpls>sap Description This command enters the context to configure IGMP host tracking parameters. expiry-time Syntax expiry-time expiry-time no expiry-time Context config>service>vpls>igmp-host-tracking config>service>vpls>sap>igmp-host-tracking Description This command configures the time that the system continues to track inactive hosts. The no form of the command removes the values from the configuration.
  • Page 719 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 group-policy Syntax group-policy policy-name no group-policy Context config>service>vpls>pim-snooping config>service>vpls>sap>igmp-snooping>mvr config>service>vpls>mld-snooping>mvr Description This command identifies filter policy of multicast groups to be applied to this VPLS entity. The sources of the multicast traffic must be a member of the VPLS. The no form of the command removes the policy association from the VPLS configuration.
  • Page 720 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters seconds — Specifies the time interval, in seconds, that the router transmits general host-query messages Values 2 to 1024 Values config>service>vpls>igmp-snooping: 1 - 65535 config>service>vpls>sap>igmp-snooping: 2 - 1024 query-src-ip Syntax query-src-ip ip-address...
  • Page 721 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description If the send-queries command is enabled, this parameter allows tuning for the expected packet loss on a SAP or SDP. The robust-count variable allows tuning for the expected packet loss on a subnet and is comparable to a retry count.
  • Page 722 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters ip-int-name — Specifies the name of the IP interface. Interface names must be unique within the group of defined IP. An interface name: • Should not be in the form of an IP address. •...
  • Page 723 ARP table. If arp-timeout is set to a value of zero seconds, ARP aging is disabled. For the 7450 ESS or 7750 SR, when the arp-populate and lease-populate commands are enabled on an interface, the ARP table entries will no longer be dynamically learned, but instead by snooping DHCP ACK message from a DHCP server.
  • Page 724 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters seconds — The minimum number of seconds a learned ARP entry will be stored in the ARP table, expressed as a decimal integer. A value of zero specifies that the timer is inoperative and learned ARP entries will not be aged.
  • Page 725 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 up ipv6 seconds [init-only] no up ipv6 Context config>service>vpls>interface>hold-time Description This command will cause a delay in the activation of the associated IP interface by the specified number of seconds. The delay is invoked whenever the system attempts to bring the associated IP interface up, unless the init-only option is configured.
  • Page 726 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 static-arp Syntax static-arp ieee-mac-addr unnumbered no static-arp unnumbered Context config>service>vpls>interface Description This command configures a static address resolution protocol (ARP) entry associating a subscriber IP address with a MAC address for the core router instance. A static ARP can only be configured if it exists on the network attached to the IP interface.
  • Page 727 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 unnumbered Syntax unnumbered [ip-int-name | ip-address] no unnumbered Context config>service>vpls>interface Description This command configures the interface as an unnumbered interface. Parameters ip-int-name — Specifies the name of the IP interface. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes ip-address —...
  • Page 728 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 −isid 316 • the minimum and maximum values from overlapping ranges are considered and displayed. The above entries will be equivalent with “isid from 301 to 316” statement. •...
  • Page 729 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Default no range Parameters isid — Specifies the ISID value in 24 bits. When singular, ISID identifies a particular ISID to be used for matching Values 0 to 16777215 to isid —...
  • Page 730 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 • The above rules apply regardless of traffic type −Unicast, BUM flooded without MMRP or with MMRP, IGMP snooped The no form of this command implies the use of existing hashing options. Default no per-service-hashing spi-load-balancing...
  • Page 731 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Like in a Layer 2 switch, learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (the aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the FDB.
  • Page 732 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of this command disables MAC move. move-frequency Syntax move-frequency frequency no move-frequency Context config>service>vpls>mac-move config>service>template>vpls-template>mac-move Description This command indicates the maximum rate at which MACs can be re-learned in the VPLS service, before the SAP where the moving MAC was last seen is automatically disabled in order to protect the system against undetected loops or duplicate MACs.
  • Page 733 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 config>service>template>vpls-template>mac-move Description This command enters the context to define primary VPLS ports. VPLS ports that were declared as secondary prior to the execution of this command will be moved from secondary port-level to primary port-level.
  • Page 734 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls>mac-move>primary-ports config>service>vpls>mac-move>secondary-ports Description This command declares a specified SAP as a primary (or secondary) VPLS port. Parameters sap-id — Specifies the physical port identifier portion of the SAP definition spoke-sdp Syntax [no] spoke-sdp spoke-id...
  • Page 735 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters timeout — Specifies the time, in seconds, to wait before a SAP that has been disabled after exceeding the maximum relearn rate is re-enabled. Values 0 to 120 mac-notification Syntax mac-notification...
  • Page 736 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 interval Syntax interval deci-seconds no interval Context config>service>vpls>mac-notification Description This command controls the frequency of subsequent MAC notification messages. By default, this command inherits the chassis level configuration from config>service>mac- notification.
  • Page 737 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Syntax [no] mac ieee-address Context config>service>vpls>mac-protect Description This command adds a protected MAC address entry. Parameters ieee-address — Specifies the 48-bit MAC address in the form aa:bb:cc:dd:ee:ff or aa-bb- cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers mac-subnet-length Syntax...
  • Page 738 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 When the scope is configured as sg-based, the IPv6 snooped multicast traffic is forwarded based on both its full source (if specified in the join) and destination IPv6 address. SG-based forwarding is only supported on FP3- (or higher) based line cards.
  • Page 739 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 mfib-table-size Syntax mfib-table-size size no mfib-table-size Context config>service>vpls Description This command specifies the maximum number of (s,g) entries in the multicast forwarding database (MFIB) for this VPLS instance. The mfib-table-size parameter specifies the maximum number of multicast database entries for both learned and static multicast addresses for the VPLS instance.
  • Page 740 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command configures MVRP parameters. attribute-table-high-wmark Syntax [no] attribute-table-high-wmark high-water-mark Context config>service>vpls>mrp>mmrp config>service>vpls>mrp>mvrp Description This command specifies the percentage filling level of the MMRP attribute table where logs and traps are sent.
  • Page 741 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 If a new lower limit (smaller than the current number of attributes) from a local or dynamic IVPLS is being provisioned, a CLI warning will be issued stating that the system is currently beyond the new limit.
  • Page 742 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls>mrp>mvrp Description This command enables the dampening timer and applies to both types of provisioned SAPs – end-station and UNI. When a value is configured for the timer, it controls the delay between detecting that the last provisioned SAP in VPLS goes down and reporting it to the MVRP module.
  • Page 743 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 hold-time Syntax hold-time seconds no hold-time Context config>service>vpls>pim-snooping Description This command configures the duration that allows the PIM-snooping switch to snoop all the PIM states in the VPLS. During this duration, multicast traffic is flooded in the VPLS. At the end of this duration, multicast traffic is forwarded using the snooped states.
  • Page 744 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 mode Syntax mode mode Context config>service>vpls>pim-snooping Description This command sets the PIM snooping mode to proxy or plain snooping. Parameters mode — Specifies PIM snooping mode Values snoop, proxy Default proxy remote-age...
  • Page 745 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command determines which line cards FDB entries are allocated on for MAC addresses in the VPLS service in which the command is configured. By default, FDB entries for MAC addresses in VPLS services are allocated on all line cards in the system.
  • Page 746 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls Description This command enabled propagation of mac-flush messages received from the specified T- LDP on all spoke and mesh-SDPs within the context of the VPLS service. The propagation will follow split-horizon principles and any data-path blocking in order to avoid looping of these messages.
  • Page 747 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 VC-Type Example Advertised MTU Service MTU Ethernet 1514 1500 Ethernet (with preserved dot1q) 1518 1504 VPLS 1514 1500 VPLS (with preserved dot1q) 1518 1504 VLAN (dot1p transparent to MTU value) 1514 1500 VLAN (QinQ with preserved bottom Qtag)
  • Page 748 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 no boot-timer Context config>service>vpls>site Description This command configures for how long the service manger waits after a node reboot before running the DF election algorithm. The boot-timer value should be configured to allow for the BGP sessions to come up and for the NLRI information to be refreshed/exchanged.
  • Page 749 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Context config>service>vpls>site config>service>vpls>spoke-sdp config>service>vpls>sap config>service>vpls>bgp>pw-template-binding Description This command specifies the operational group to be monitored by the object under which it is configured. The oper-group name must be already configured under the config>service context before its name is referenced in this command.
  • Page 750 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 site-min-down-timer Syntax site-min-down-timer seconds no site-min-down-timer Context config>service>vpls>site Description This command configures the BGP multi-homing site minimum down time. When set to a non-zero value, if the site goes operationally down it will remain operationally down for at least the length of time configured for the site-min-down-timer, regardless of whether other state changes would have caused it to go operationally up.
  • Page 751 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 split-horizon-group Syntax split-horizon-group group-name no split-horizon-group Context config>service>vpls>site Description This command configures the value of split-horizon group associated with this site. The no form of the command reverts the default. Default no split-horizon-group Parameters...
  • Page 752 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 fid — Specifies the FID Values 1 to 4095 create — This keyword is mandatory when creating an SPB instance level Syntax level [1 to 1] Context config>service>vpls>spb config>service>vpls>sap>spb config>service>vpls>spoke-sdp>spb Description...
  • Page 753 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 forwarding-tree-topology Syntax forwarding-tree-topology unicast {spf | st} Context config>service>vpls>spb>level Description This command specifies level 1 unicast forwarding to follow the shortest path tree or to follow a single tree for this Shortest Path Bridging context in this VPLS service. Default forwarding-tree-topology unicast spf Parameters...
  • Page 754 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command configures the LSP refresh timer interval. When configuring the LSP refresh interval, the value that is specified for lsp-lifetime must also be considered. The LSP refresh interval cannot be greater than 90% of the LSP lifetime.
  • Page 755 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 overload-on-boot Syntax overload-on-boot [timeout seconds] no overload-on-boot Context config>service>vpls>spb Description When the router is in an overload state, the router is used only if there is no other router to reach the destination.
  • Page 756 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 timers Syntax [no] timers Context config>service>vpls>spb Description This command configures the IS-IS timer values. Default no timers lsp-wait Syntax lsp-wait lsp-wait [lsp-initial-wait lsp-initial-wait] [lsp-second-wait lsp-second-wait] no lsp-wait Context config>service>vpls>spb>timers Description This command is used to customize LSP generation throttling.
  • Page 757 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 spf-wait Syntax spf-wait sfp-wait [sfp-initial-wait sfp-initial-wait] [sfp-second-wait sfp-second-wait] no spf-wait Context config>service>vpls>spb>timers Description This command defines the maximum interval between two consecutive SPF calculations in milliseconds. Timers that determine when to initiate the first, second and subsequent SPF calculations after a topology change occurs can be controlled with this command.
  • Page 758 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command creates a new split horizon group for the VPLS instance. Traffic arriving on a SAP or spoke-SDP within this split horizon group will not be copied to other SAPs or spoke- SDPs in the same split horizon group.
  • Page 759 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command assigns a pre-configured lag link map profile to a SAP/network interface configured on a LAG or a PW port that exists on a LAG. Once assigned/unassigned, the SAP/ network interface egress traffic will be re-hashed over LAG as required by the new configuration.
  • Page 760 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 pagp — Specifies the port aggregation protocol stp — Specifies all spanning tree protocols: stp, rstp, mstp, pvst (default) udld — Specifies unidirectional link detection vtp — Specifies the virtual trunk protocol l2tpv3-session Syntax l2tpv3-session [create]...
  • Page 761 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 config>service>vprn>if>sap>l2tpv3-session Description This command specifies the router in a L2TPv3 session. The no form of this command deletes the router configuration. Parameters router-instance — Specifies the router name or service ID used to identify the router instance.
  • Page 762 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command enters the context to configure the default gateway information when using Dual Homing in L2-TPSDA. The IP and MAC address of the default gateway used for subscribers on an L2 MC-Ring are configured in this context.
  • Page 763 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 no dhcp-python-policy Context config>service>vpls>sap Description This command specifies the name of the Python policy. The Python policy is created in the config>python>python-policy policy-name context. The no form of the command reverts to the default. Parameters policy-name —...
  • Page 764 This command assigns a conditional static MAC address entry to an SPBM B-VPLS SAP/ spoke-SDP allowing external MACs for single and multi-homed operation. For the 7450 ESS or 7750 SR, this command also assigns a conditional static MAC address entry to an EVPN VPLS SAP/spoke-SDP.
  • Page 765 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Context config>service>vpls>isid-policy>entry Description The use-def-mcast option prevents local installation of the ISIDs in the range in the MFIB and uses the default multicast tree instead for a B-VPLS. In a node that does not have I-VPLS or static-isids, this command prevents the building of an MFIB entry for this ISID when received in a SPBM TLV and allows the broadcast of ISID based traffic on the default multicast tree.
  • Page 766 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters multiplier — Specifies the multiplier for the hello interval expressed as a decimal integer Values 2 to 100 metric Syntax metric ipv4-metric no metric Context config>service>vpls>sap>spb>level config>service>vpls>spoke-sdp>spb>level Description This command configures the IS-IS interface metric for IPv4 unicast.
  • Page 767 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 retransmit-interval Syntax retransmit-interval seconds no retransmit-interval Context config>service>vpls>sap>spb config>service>vpls>spoke-sdp>spb Description This command configures the minimum time between LSP PDU retransmissions on a point- to-point interface. The no form of the command reverts to the default value. Default retransmit-interval 100 Parameters...
  • Page 768 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description For the 7450 ESS or 7750 SR, this command specifies an existing PPPoE policy. These policies are referenced from interfaces configured for PPPoE. Multiple PPPoE policies may be configured. Parameters pppoe-policy-name —...
  • Page 769 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command indicates how the system will forward packets destined for an unprotected MAC address, either manually added using the mac-protect command or automatically added using the auto-learn-mac-protect command. While enabled all packets entering the configured SAP or SAPs within a split horizon group (but not spoke or mesh-SDPs) will be verified to contain a protected destination MAC address.
  • Page 770 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of this command disallows MVRP control over this VPLS. The VPLS will be created with a regular FDB and will become as a result active upon creation time. Command change is allowed only when the related vpls-group is in shutdown state.
  • Page 771 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Modifications of the service id and vlan ranges are allowed with the following restrictions. • service-range increase can be achieved in two ways: −Allowed when vpls-group is in shutdown state −By creating a new vpls-group •...
  • Page 772 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of this command removes the binding and deletes the related VPLS instances. The command will fail if any of the affected VPLS instances have either a provisioned SAP or an active MVRP declaration/registration or if the related vpls-group id is in no shutdown state.
  • Page 773 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters id — Specifies the range index Values 1 to 4094 startvid-endvid — Specifies the range of VLANs to be controlled by MVRP Values 1 to 4094 static-host Syntax static-host ip ip-address [mac ieee-address] [create] static-host mac ieee-address [create]...
  • Page 774 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters app-profile-name — Specifies the application profile name up to 32 characters in length inter-dest-id Syntax inter-dest-id intermediate-destination-id no inter-dest-id Context config>service>vpls>sap>static-host Description Specifies to which intermediate destination (for example a DSLAM) this host belongs. Parameters intermediate-destination-id —...
  • Page 775 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command specifies an existing subscriber identification profile to be associated with the static subscriber host. Parameters sub-ident — Specifies the subscriber identification subscriber-sap-id Syntax [no] subscriber-sap-id Context config>service>vpls>sap>static-host Description...
  • Page 776 Description This command associates a previously configured vsd-domain to an existing VPRN or VPLS service. The vsd-domain is a tag used between the VSD and the 7750 SR, 7450 ESS, or 7950 XRS to correlate configuration parameters to a service.
  • Page 777 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Enabling or disabling the AR function, or changing the role between the replicator and leaf requires the BGP EVPN MPLS to be shutdown. If the leaf parameter is configured, the system creates a Broadcast or Multicast (BM) destination to the selected AR-R and Unknown Unicast (U) destinations to the rest of the VTEPs.
  • Page 778 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 no qos Context config>service>vpls>vxlan>network>ingress Description This command is used to redirect traffic arriving on VXLAN tunnels in an EVPN VXLAN service as a single entity (per forwarding class) to policers in an ingress forwarding plane queue group for the purpose of rate-limiting.
  • Page 779 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 restrict-protected-src Syntax restrict-protected-src discard-frame no restrict-protected-src Context config>service>vpls>vxlan Description This command enables protected SRS MAC restrictions. send-bvpls-flush Syntax send-bvpls-flush {[all-but-mine] [all-from-me]} no send-bvpls-flush Context config>service>vpls Description This command enables generation of LDP MAC withdrawal “flush-all-from-me” in the B-VPLS domain when the following triggers occur in the related IVPLS: •...
  • Page 780 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command enters the context to configure General Switch Management Protocol (GSMP) connections maintained in this service. Default gsmp shutdown group Syntax [no] group name Context config>service>vpls>gsmp Description This command specifies a GSMP name.
  • Page 781 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 hold-multiplier Syntax hold-multiplier multiplier no hold-multiplier Context config>service>vpls>gsmp>group Description This command configures the hold-multiplier for the GSMP connections in this group. Parameters multiplier — Specifies the GSMP hold multiplier value Values 1 to 100 keepalive...
  • Page 782 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command configures the source ip-address used in the connection toward the neighbor. The local address is optional. If specified the node will accept connections only for that address in the service running ANCP.
  • Page 783 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command enables the system to store DSL line information in memory. If the GSMP connection terminates, the DSL line information will remain in memory and accessible for Radius authentication and accounting.
  • Page 784 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters nbr-of-entries — Specifies the number of DHCP leases allowed Values 1 to 8000 option Syntax [no] option Context config>service>vpls>sap>dhcp Description This command enables DHCP Option 82 (Relay Agent Information Option) parameters processing and enters the context for configuring Option 82 sub-options.
  • Page 785 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 circuit-id Syntax circuit-id [ascii-tuple | vlan-ascii-tuple] circuit-id hex [0x0..0xFFFFFFFF...(64 hex nibbles)] no circuit-id Context config>service>vpls>sap>dhcp>option Description When enabled, the router sends an ASCII-encoded tuple in the circuit-id sub-option of the DHCP packet.
  • Page 786 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 mac — This keyword specifies the MAC address of the remote end is encoded in the sub-option string string — Specifies the remote-id. vendor-specific-option Syntax [no] vendor-specific-option Context config>service>vpls>sap>dhcp>option Description This command configures the vendor specific sub-option of the DHCP relay packet.
  • Page 787 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The no form of the command disables the sending of the service ID in the vendor specific sub-option of the DHCP relay packet. string Syntax [no] string text Context config>service>vpls>sap>dhcp>option>vendor Description...
  • Page 788 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of this command reverts to the default setting. The local proxy server will not become operational without the emulated-server address being specified. Parameters ip-address — Specifies the emulated server address lease-time Syntax lease-time [days days] [hrs hours] [min minutes] [sec seconds] [radius-override]...
  • Page 789 This command enters the context to configure the Spanning Tree Protocol (STP) parameters. Nokia’s STP is simply the Spanning Tree Protocol (STP) with a few modifications to better suit the operational characteristics of VPLS services. The most evident change is to the root bridge election.
  • Page 790 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 edge-port Syntax [no] edge-port Context config>service>vpls>sap>stp config>service>template>vpls-sap-template>stp config>service>vpls>spoke-sdp>stp Description This command configures the SAP or SDP as an edge or non-edge port. If auto-edge is enabled for the SAP, this value will be used only as the initial value. Note: The function of the edge-port command is similar to the rapid-start command.
  • Page 791 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 For timer-based transitions, the 802.1D-2004 standard defines an internal variable forward- delay, which is used in calculating the default number of seconds that a SAP or spoke-SDP spends in the discarding and learning states when transitioning to the forwarding state. The value of the forward-delay variable depends on the STP operating mode of the VPLS instance: •...
  • Page 792 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 no hold-count Context config>service>vpls>stp config>service>template>vpls-template>stp Description This command configures the peak number of BPDUs that can be transmitted in a period of one second. The no form of this command returns the hold count to the default value Default hold-count 6 Parameters...
  • Page 793 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 mst-path-cost Syntax mst-path-cost inst-path-cost no mst-path-cost Context config>service>vpls>sap>stp>mst-instance Description This commands specifies path-cost within a specified instance, expressing probability that a specified port will be put into the forwarding state in case a loop occurs (the highest value expresses lowest priority).
  • Page 794 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 STP uses the max-age value configured in the root bridge. This value is propagated to the other bridges via the BPDUs. The no form of this command returns the max age to the default value. Default max-age 20 Parameters...
  • Page 795 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command creates the context to configure MST instance (MSTI) related parameters. Up to 16 instances will be supported by MSTP. The instance 0 is mandatory by protocol and therefore, it cannot be created by the CLI.
  • Page 796 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of this command removes the vlan-range from the specified mst-instance. Parameters vlan-range — The first VLAN range specifies the left-bound (i.e., minimum value) of a range of VLANs that are associated with the mVPLS SAP.
  • Page 797 STP suggests that the path cost is defined as a function of the link bandwidth. Since SAPs and spoke-SDPs are controlled by complex queuing dynamics, in the 7450 ESS, 7750 SR, and 7950 XRS the STP path cost is a purely static configuration.
  • Page 798 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 port-num Syntax port-num virtual-port-number no port-num [virtual-port-number] Context config>service>vpls>sap>stp config>service>vpls>spoke-sdp>stp Description This command configures the virtual port number which uniquely identifies a SAP within configuration bridge protocol data units (BPDUs). The internal representation of a SAP is unique to a system and has a reference space much bigger than the 12 bits definable in a configuration BPDU.
  • Page 799 Description This command configures the Nokia Spanning Tree Protocol (STP) priority for the SAP or spoke-SDP. STP priority is a configurable parameter associated with a SAP or spoke-SDP. When configuration BPDUs are received, the priority is used in some circumstances as a tie breaking mechanism to determine whether the SAP or spoke-SDP will be designated or blocked.
  • Page 800 This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the 7450 ESS, 7750 SR, and 7950 XRS. Each SAP must be unique.
  • Page 801 — Specifies the name of the split horizon group to which the SAP belongs. This parameter applies to the 7450 ESS or 7750 SR only. capture-sap — Specifies a capturing SAP in which triggering packets will be sent to the CPM.
  • Page 802 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 discard-unknown-source Syntax [no] discard-unknown-source Context config>service>vpls>sap config>service>vpls>spoke-sdp config>service>template>vpls-sap-template Description When this command is enabled, packets received on a SAP or a spoke-SDP with an unknown source MAC address will be dropped only if the maximum number of MAC addresses for that SAP or spoke-SDP (see max-nbr-mac-addr) has been reached.
  • Page 803 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command enters the context to configure egress ATM attributes for the SAP. encapsulation Syntax encapsulation atm-encap-type Context config>service>vpls>sap>atm Description This command specifies the data encapsulation for an ATM PVCC delimited SAP. The definition references RFC 2684, Multiprotocol Encapsulation over ATM AAL5, and to the ATM Forum LAN Emulation specification.
  • Page 804 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 When configured under the egress context, the specified traffic descriptor profile defines the traffic contract in the backward direction. The no form of the command reverts the traffic descriptor to the default traffic descriptor profile.
  • Page 805 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The no command disables alarm-cells functionality for a PVCC. When alarm-cells functionality is disabled, the PVCC’s operational status is no longer affected by the PVCC’s OAM state changes due to AIS/RDI processing. When alarm-cells is disabled, a PVCC will change operational status to operationally up from operationally down due to alarm-cell processing).
  • Page 806 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>vpls>bgp Description This command binds the advertisements received with the route target (RT) that matches the configured list (either the generic or the specified import) to a specific pw-template. If the RT list is not present the pw-template is used for all of them.
  • Page 807 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 ip-addr: a.b.c.d comm-val: [0 to 65535] 2byte-as-number: [0 to 65535] ext-comm-val: [0 to 4294967295] 4byte-asnumber: [0 to 4294967295] bfd-enable Syntax [no] bfd-enable Context config>service>vpls>bgp>pw-template-binding Description This command enables the use of bi-directional forwarding (BFD) to control the state of the associated protocol interface.
  • Page 808 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command configures a named BFD template to be used by VCCV BFD on PWs belonging to the VLL, BGP VPWS, or VPLS service. The template specifies parameters, such as the minimum transmit and receive control packet timer intervals, to be used by the BFD session.
  • Page 809 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 • if BGP AD VPLS-id is configured and an RD value is also configured under BGP node, the configured RD value prevails Values and format (6 bytes, other 2 bytes of type will be automatically generated) Alternatively, the auto-rd option allows the system to automatically generate an RD based on the bgp-auto-rd-range command configured at service level.
  • Page 810 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 vsi-export Syntax vsi-export policy-name [policy-name...(up to 5 max)] no vsi-export Context config>service>vpls>bgp-ad config>service>vpls>bgp Description This command specifies the name of the VSI export policies to be used for BGP auto- discovery, BGP VPLS and BGP multi-homing if these features are configured in this VPLS service.
  • Page 811 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 ext-comm-val: [0 to 4294967295] vsi-id Syntax vsi-id Context config>service>vpls>bgp-ad Description This command enters the context to configure the Virtual Switch Instance Identifier (VSI-ID). prefix Syntax prefix low-order-vsi-id no prefix Context config>service>vpls>bgp-ad>vsi-id Description...
  • Page 812 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of this command sets the max-ve-id to un-configured. The BGP VPLS status should be administratively down for “no max-ve-id” to be used. The max-ve-id value can be changed without shutting down bgp-vpls if the newly provisioned value does not conflict with the already configured local VE-ID.
  • Page 813 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters name — Specifies the A character string to identify the VPLS Edge instance up to 32 characters in length ve-id Syntax ve-id ve-id-value no ve-id Context config>service>vpls>bgp-vpls>ve-name Description This command configures a ve-id.
  • Page 814 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.7.2.5 ETH-CFM Service Commands eth-cfm Syntax eth-cfm Context config>service>vpls config>service>vpls>mesh-sdp config>service>vpls>spoke-sdp config>service>vpls>sap Description This command enters the context to configure ETH-CFM parameters. eth-tunnel Syntax eth-tunnel Context config>service>vpls>sap Description The command enables the context to configure Ethernet tunnel SAP parameters.
  • Page 815 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Context config>service>vpls>sap>eth-tunnel Description This command configures Ethernet tunnel SAP path parameters. The no form of the command removes the values from the configuration. Parameters path-index — Specifies the path index value. Values 1 to 16 tag qtag[.qtag] —...
  • Page 816 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Default no fc Parameters fc-name — Specifies up to eight names of the FC for which to create an individual profile- unaware counter. In order for the counter to be used, the config>oam- pm>session>...
  • Page 817 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Context config>service>epipe>sap>eth-cfm config>service>epipe>spoke-sdp>eth-cfm config>service>vpls>sap>eth-cfm config>service>vpls>spoke-sdp>eth-cfm config>service>vpls>mesh-sdp>eth-cfm config>service>ipipe>sap>eth-cfm Description This command enables the collection of statistics on the SAP or MPLS SDP binding on which the ETH- LMM test is configured. The collection of LMM statistics must be enabled if a MEP is launching or responding to ETH-LMM packets.
  • Page 818 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 up — Sends ETH-CFM messages toward the MAC relay entity primary-vlan-enable — Provides a method for linking the MEP with the primary VLAN configured under the bridge-identifier for the MA. MEPs cannot be changed from or to primary VLAN functions.
  • Page 819 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Context config>service>template>vpls-sap-template>eth-cfm Description This command allows Maintenance Intermediate Points (MIPs). The creation rules of the MIP are dependent on the mhf-creation configuration for the MA. This MIP option is only available for default and static mhf-creation methods.
  • Page 820 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 interface-support-enable Syntax [no] interface-support-enable Context config>service>vpls>sap>eth-cfm>mep>ais-enable config>service>vpls>spoke-sdp>eth-cfm>mep>ais-enable config>service>vpls>mesh-sdp>eth-cfm>mep>ais-enable Description This command enables the AIS function to consider the operational state of the entity on which it is configured. With this command, ETH-AIS on operationally down MEPs will be triggered and cleared based on the operational status of the entity on which it is configured.
  • Page 821 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 macRemErrXcon — Keyword that excludes RDI CCM Defect condition to trigger AIS generation. priority Syntax priority priority-value no priority Context config>service>vpls>mesh-sdp>eth-cfm>mep>ais-enable config>service>vpls>spoke-sdp>eth-cfm>mep>ais-enable Description This command specifies the priority of AIS messages originated by the node. Parameters priority-value —...
  • Page 822 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters priority — Specifies the priority of CCM and LTM messages Values 0 to 7 ccm-padding-size Syntax ccm-padding-size ccm-padding no ccm-padding-size Context config>service>vpls>mesh-sdp>eth-cfm>mep config>service>vpls>sap>eth-cfm>mep config>service>vpls>spoke-sdp>eth-cfm>mep Description Set the byte size of the optional Data TLV to be included in the ETH-CC PDU. This will increase the size of the ETH-CC PDU by the configured value.
  • Page 823 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Default multiplier 3.5 Parameters multiplier-value — Specifies the multiplier used for timing out CSF Values 0.0, 2.0 to 30.0 eth-test-enable Syntax [no] eth-test-enable Context config>service>vpls>sap>eth-cfm>mep config>service>vpls>spoke-sdp>eth-cfm>mep config>service>vpls>mesh-sdp>eth-cfm>mep Description For ETH-test to work, operators need to configure ETH-test parameters on both sender and receiver nodes.
  • Page 824 — Specifies to suspend the continuity check messages. grace Syntax grace Context config>service>vpls>eth-cfm>mep config>service>vpls>mesh-sdp>eth-cfm>mep config>service>vpls>spoke-sdp>eth-cfm>mep config>service>vpls>sap>eth-cfm>mep Description This command enters the context to configure Nokia ETH-CFM Grace and ITU-T Y.1731 ETH-ED expected defect functional parameters. eth-ed Syntax eth-ed Context config>service>vpls>eth-cfm>mep>grace config>service>vpls>mesh-sdp>eth-cfm>mep>grace config>service>vpls>spoke-sdp>eth-cfm>mep>grace config>service>vpls>sap>eth-cfm>mep>grace...
  • Page 825 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command enters the context to configure ITU-T Y.1731 ETH-ED expected defect functional parameters. max-rx-defect-window Syntax max-rx-defect-window seconds no max-rx-defect-window Context config>service>vpls>eth-cfm>mep>grace>eth-ed config>service>vpls>mesh-sdp>eth-cfm>mep>grace>eth-ed config>service>vpls>spoke-sdp>eth-cfm>mep>grace>eth-ed config>service>vpls>sap>eth-cfm>mep>grace>eth-ed Description This command limits the duration of the received ETH-ED expected defect window to the lower value of either the received value from the peer or this parameter.
  • Page 826 The config>eth-cfm>system>grace-tx-enable command must be configured to instruct the system that the node is capable of transmitting expected defect windows to the peers. Only one form of ETH-CFM grace (Nokia ETH-CFM Grace or ITU-T Y.1731 ETH-ED) may be transmitted. The no form of the command disables the transmission of the ITU-T Y.1731 ETH-ED PDU from the MEP.
  • Page 827 The Nokia Grace function is a vendor-specific PDU that informs MEP peers that the local node may be entering a period of expected defect. The no form of the command disables the reception of the Nokia ETH-CFM Grace PDU on the MEP.
  • Page 828 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 lbm-svc-act-responder Syntax [no] lbm-svc-act-responder Context config>service>vpls>mesh-sdp>eth-cfm>mep config>service>vpls>sap>eth-cfm>mep config>service>vpls>spoke-sdp>eth-cfm>mep Description This command enables the MEP to process service activation streams encapsulated in ETH- CFM LBM frames that are directed to the MEP. The MEP will be allocated additional resources to rapidly respond to a high-speed stream of LBM messages.
  • Page 829 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters low-priority-defect — The low priority defect values are defined below. Values allDef DefRDICCM, DefMACstatus, DefRemoteCCM, DefErrorCCM, and DefXconCCM macRemErrXcon Only DefMACstatus, DefRemoteCCM, DefErrorCCM, and DefXconCCM remErrXcon Only DefRemoteCCM, DefErrorCCM, and DefXconCCM errXcon Only DefErrorCCM and DefXconCCM...
  • Page 830 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 tunnel-fault Syntax tunnel-fault {accept | ignore} Context config>service>vpls>eth-cfm config>service>vpls>sap>eth-cfm Description Allows the individual service SAPs to react to changes in the tunnel MEP state. When tunnel- fault accept is configured at the service level, the SAP will react according to the service type, Epipe will set the operational flag and VPLS, IES and VPRN SAP operational state will become down on failure or up on clear.
  • Page 831 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The no form of the command removes the silent discarding of previously matching ETH-CFM PDUs. Default no squelch-ingress-levels Parameters md-level — Identifies the level. Values 0 to 7 vmep-filter Syntax [no] vmep-filter...
  • Page 832 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 msap-defaults Syntax msap-defaults Context config>service>vpls>sap Description This command configures the msap-defaults. service Syntax [no] service service-id Context config>service>vpls>sap>msap-defaults Description This command sets default service for all subscribers created based on trigger packets received on the specified capture SAP in case the corresponding VSA is not included in RADIUS authentication response.
  • Page 833 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 This command is mutually exclusive with the SAP ingress and egress scheduler-policy commands. If a scheduler-policy has been applied to either the ingress or egress nodes on the SAP, the multi-service-site command will fail without executing. The locally applied scheduler policies must be removed prior to executing the multi-service-site command.
  • Page 834 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls>sap>static-isid config>service>vpls>spoke-sdp>static-isid Description This command identifies a set of ISIDs for I-VPLS services that are external to SPBM. These ISIDs are advertised as supported locally on this node unless an altered by an isid-policy. This allows communication from I-VPLS services external to SPBM through this node.
  • Page 835 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 static-mac Syntax static-mac ieee-address [create] no static-mac ieee-address Context config>service>vpls>sap config>service>vpls>mesh-sdp config>service>vpls>spoke-sdp Description This command creates a local static MAC entry in the Virtual Private LAN Service (VPLS) forwarding database (FDB) associated with the Service Access Point (SAP).
  • Page 836 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 This command is only valid when the VPLS in which it is entered was created as a management VPLS. default-sap Syntax [no] default-sap Context config>service>vpls>sap>managed-vlan-list Description This command adds a default SAP to the managed VLAN list. The no form of the command removes the default SAP to the managed VLAN list.
  • Page 837 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 If no sap-egress QoS policy is defined, the system default sap-egress QoS policy is used for egress processing. If no egress filter is defined, no filtering is performed. ingress Syntax ingress...
  • Page 838 L2 PBF SAP redirect when a remote end of the SAP interface is an L3 interface with a MAC address different from the MAC address of the non-PBF-ed L3 interface. See Filter Policy in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide for more details.
  • Page 839 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 encap-defined-qos Syntax encap-defined-qos Context config>service>vpls>sap>egress Description This command creates a new QoS sub-context in B-VPLS SAP egress context. The user can define encapsulation groups, referred to as encap-group, based on the ISID value in the packet’s encapsulation and assign a QoS policy and a scheduler policy or aggregate rate limit to the group.
  • Page 840 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 A SAP egress QoS policy must first be assigned to the created encap group before the user can add members to this group. Conversely, the user cannot perform the no qos command until all members are deleted from the encap-group.
  • Page 841 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters encap-id — The value of the single encap-id or the start encap-id of the range. ISID is the only encap-id supported. to encap-id — The value of the end encap-id of the range. ISID is the only encap-id supported.
  • Page 842 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The filter command is used to associate a filter policy with a specified filter ID with an ingress or egress SAP. The filter ID must already be defined before the filter command is executed. If the filter policy does not exist, the operation will fail and an error message returned.
  • Page 843 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command configures overrides for a HSMDA queue. The actual valid values are those defined in the specified SAP QoS policy. Parameters queue-id — Specifies the queue ID to override Values 1 to 8 create —...
  • Page 844 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 As inferred above, the variable accounting size offered by the packet-byte-offset command is targeted at the queue and queue group level. The packet-byte-offset, when set, applies to all queues in the queue group.
  • Page 845 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 wrr-weight Syntax wrr-weight value no wrr-weight Context config>service>vpls>sap>egress>hsmda-queue-over>queue Description This command assigns the weight value to the HSMDA queue. The no form of the command returns the weight value for the queue to the default value. Parameters percentage —...
  • Page 846 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description When enabled (the encapsulation type of the access port where this SAP is defined as qinq), the qinq-mark-top-only command specifies which P-bits/DEI bit to mark during packet egress.
  • Page 847 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters rate | max — Specifies the max rate override in kilobits per second or use the maximum Values 1 to 6400000000, max priority-mbs-thresholds Syntax priority-mbs-thresholds Context config>service>vpls>sap>egress>policer-ctrl-over config>service>vpls>sap>ingress>policer-ctrl-over Description This command overrides the CLI node contains the configured min-thresh-separation and the...
  • Page 848 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls>sap>egress>policer-ctrl-over>mbsthrshlds config>service>vpls>sap>ingress>policer-ctrl-over>mbsthrshlds Description The priority-level level override CLI node contains the specified priority level’s mbs- contribution override value. This node does not need to be created and will not be output in show or save configurations unless an mbs-contribution override exist for level.
  • Page 849 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 policer-control-policy Syntax policer-control-policy policy-name no policer-control-policy Context config>service>vpls>sap>egress config>service>vpls>sap>ingress config>service>template>vpls-sap-template>egress config>service>template>vpls-sap-template>ingress Description This command, within the qos CLI node, is used to create, delete or modify policer control policies.
  • Page 850 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The parent policer is a single leaky bucket that monitors the aggregate throughput rate of the associated child policers. Forwarded packets increment the bucket by the size of each packet.
  • Page 851 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The fair/unfair forwarding control in the root parent policer is accomplished by implementing two different discard thresholds for the priority. The first threshold is discard-unfair and the second is discard-all for packet associated with the priority level. As the parent policer PIR bucket fills (due the aggregate forwarded rate being greater than the parent policers PIR decrement rate) and the bucket depth reaches the first threshold, all unfair packets within the priority are discarded.
  • Page 852 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 As noted above, each child’s rate feeding into the parent policer is governed by the child policer’s PIR bucket decrement rate. The amount of bandwidth the child policer offers to the parent policer will not exceed the child policer’s configured maximum rate.
  • Page 853 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 A policer-control-policy may be applied on any Ethernet ingress or egress SAP that is associated with a port (or ports in the case of LAG). The no form of the command removes a non-associated policer control policy from the system.
  • Page 854 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Ingress unicast service queues are mapped one-for-one with hardware queues and unicast packets traverse the ingress forwarding plane twice, similar to the shared- queuing option. In addition, the multipoint queues defined in the ingress SAP QoS policy are not created.
  • Page 855 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The no form of the command is used to remove any existing policer overrides. Default no policer-overrides policer Syntax policer policer-id [create] no policer policer-id Context config>service>vpls>sap>egress>policer-override config>service>vpls>sap>ingress>policer-override Description This command, within the SAP ingress or egress contexts, is used to create a CLI node for specific overrides to a specific policer created on the SAP through a sap-ingress or sap-...
  • Page 856 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters size — This parameter is required when specifying CBS override and is expressed as an integer representing the required size in either bytes or kilobytes. The default is kilobytes.
  • Page 857 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Default no packet-byte-offset Parameters add-bytes — The add keyword is mutually exclusive to the subtract keyword. Either add or subtract must be specified. When add is defined the corresponding bytes parameter specifies the number of bytes that is added to the size each packet associated with the policer for rate metering, profiling and accounting purposes.
  • Page 858 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls>sap>egress>policer-override>plcr config>service>vpls>sap>ingress>policer-override>plcr Description This command within the SAP ingress and egress policer-overrides contexts is used to override the sap-ingress and sap-egress QoS policy configured rate parameters for the specified policer-id.
  • Page 859 The no form of the command returns the policer’s stat-mode setting to minimal. Refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Quality of Service Guide for detailed information about the policer stat-mode command parameters.
  • Page 860 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Only one ingress and one egress QoS policy can be associated with a SAP at one time. Attempts to associate a second QoS policy of a specified type will return an error. When an ingress QoS policy is defined on IES ingress IP interface that is bound to a VPLS, the policy becomes associated with every SAP on the VPLS and augments the QoS policy that is defined on each SAP.
  • Page 861 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 instance-id — Specifies the instance of the named queue group to be created on the IOM/IMMXMA ingress forwarding plane. Syntax qos policy-id [port-redirect-group queue-group-name instance instance-id] no qos Context config>service>vpls>sap>egress Description...
  • Page 862 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 queue-override Syntax [no] queue-override Context config>service>vpls>sap>egress config>service>vpls>sap>ingress config>service>vpls>sap>egress>hsmda-queue-over>queue config>service>vpls>sap>ingress>hsmda-queue-over>queue Description This command enters the context to configure override values for the specified SAP egress or ingress QoS queue. These values override the corresponding ones specified in the associated SAP egress or ingress QoS policy.
  • Page 863 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 class-weight Syntax class-weight weight no class-weight Context config>service>vpls>sap>egress>queue-override>hs-wrr-group Description This command overrides the class weight of this WRR group at its parent primary shaper, relative to the other queues and WRR groups in different HSQ queue groups in the same scheduling class.
  • Page 864 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters rate — Specifies the scheduling rate of the HS WRR group in Kb/s. Values 1 to 2000000000, max queue Syntax [no] queue queue-id Context config>service>vpls>sap>egress>queue-override config>service>vpls>sap>ingress>queue-override Description This command specifies the ID of the queue whose parameters are to be overridden.
  • Page 865 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 cir — This parameter defines the constraints enforced when adapting the CIR rate defined within the queue queue-id rate command. The cir parameter requires a qualifier that defines the constraint used when deriving the operational CIR for the queue.
  • Page 866 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 For egress Ethernet queues, the frame encapsulation overhead is calculated by multiplying the number of offered-packets for the queue by 20 bytes. If a queue was offered 50 packets then the frame encapsulation overhead would be 50 x 20 or 1000 octets.
  • Page 867 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Port scheduler operation using frame transformed rates — The port scheduler uses the frame based rates to calculate the maximum rates that each queue may receive during the within- cir and above-cir bandwidth allocation passes.
  • Page 868 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 size — When a numeric value is specified (size), the system interprets the value as an explicit burst limit size. The value is expressed as an integer and by default is interpreted as the burst limit in kilobytes.
  • Page 869 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters size-in-kbytes — Specifies the number of kilobytes reserved for the queue. For a value of 10 kbytes, enter the value 10. A value of 0 specifies that no reserved buffers are required by the queue (a minimum reserved size can be applied for scheduling purposes).
  • Page 870 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 hs-class-weight Syntax hs-class-weight weight no hs-class-weight Context config>service>vpls>sap>egress>queue-override>queue Description This command overrides the class weight of this queue at its parent primary shaper, relative to the other queues and WRR groups in different HSQ queue groups in the same scheduling class.
  • Page 871 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Syntax mbs {size [bytes | kilobytes] | default} no mbs Context config>service>vpls>sap>egress>queue-override>queue Description This command overrides specific attributes of the specified queue’s MBS parameters. The MBS value is used by a queue to determine whether it has exhausted all of its buffers while enqueuing packets.
  • Page 872 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command overrides specific attributes of the specified queue’s MBS parameters. The MBS value is used by a queue to determine whether it has exhausted all of its buffers while enqueuing packets.
  • Page 873 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Checks are not performed to see if a scheduler-name exists when the parent command is defined on the queue. Scheduler names are configured in the config>qos>scheduler- policy>tier level context. Multiple schedulers can exist with the scheduler-name and the association pertains to a scheduler that should exist on the egress SAP as the policy is applied and the queue created.
  • Page 874 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 cir-weight — Defines the weight the queue or scheduler will use at the within-cir port priority level (defined by the cir-level parameter). The weight is specified as an integer value from 0 to 100 with 100 being the highest weight.
  • Page 875 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters pir-percent — Specifies the queue’s shaping rate as a percentage of line rate. The line rate associated with the queue’s port may dynamically change due to configuration or auto-negotiation.
  • Page 876 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of the command returns all queues created with the queue-id by association with the QoS policy to the default PIR and CIR parameters (max, 0). Default rate max cir 0 Parameters...
  • Page 877 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 queue Syntax [no] queue queue-id Context config>service>vpls>sap>egress>queue-override config>service>vpls>sap>ingress>queue-override Description This command specifies the ID of the queue whose parameters are to be overridden. Parameters queue-id — Specifies the queue ID whose parameters are to be overridden Values 1 to 32 adaptation-rule...
  • Page 878 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 adaptation-rule — Specifies the criteria to use to compute the operational CIR and PIR values for this queue, while maintaining a minimum offset. Values max — This keyword is mutually exclusive with the min and closest options.
  • Page 879 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 • Frame based offered-load — The frame based offered-load is calculated by adding the offered-load to the frame encapsulation overhead. If the offered-load is 10000 octets and the encapsulation overhead was 1000 octets, the frame based offered-load would equal 11000 octets.
  • Page 880 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 SAP and subscriber SLA-profile average frame overhead override — The average frame overhead parameter on a sap-egress may be overridden at an individual egress queue basis. On each SAP and within the sla-profile policy used by subscribers an avg-frame-overhead command may be defined under the queue-override context for each queue.
  • Page 881 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters size-in-kbytes — Specifies an integer expression of the number of kilobytes reserved for the queue. If a value of 10KBytes is needed, enter the value 10. A value of 0 specifies that no reserved buffers are required by the queue (a minimal reserved size can still be applied for scheduling purposes).
  • Page 882 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 no mbs Context config>service>vpls>sap>ingress>queue-override>queue Description This command can be used to override specific attributes of the specified queue’s MBS parameters. The MBS value is used by a queue to determine whether it has exhausted all of its buffers while enqueuing packets.
  • Page 883 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 scheduler Syntax scheduler scheduler-name no scheduler scheduler-name Context config>service>vpls>sap>egress>sched-override Description This command can be used to override specific attributes of the specified scheduler name. A scheduler defines a bandwidth controls that limit each child (other schedulers, policers, and queues) associated with the scheduler.
  • Page 884 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 create — Specifies that it is acceptable to create a scheduler with the given scheduler- name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true.
  • Page 885 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 cir-weight — Specifies the relative weight of this scheduler in comparison to other child schedulers and queues at the same cir-level defined by the cir-level parameter in the applied scheduler policy.
  • Page 886 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 cir-rate — Specifies a value in kilobits per second, or the keyword max or sum. Any other value will result in an error without modifying the current CIR rate. If cir is set to max, then the CIR rate is set to infinity, but bounded by the PIR rate.
  • Page 887 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command specifies which Dot1Q tag position Dot1P bits in a QinQ encapsulated packet should be used to evaluate Dot1P QoS classification. The match-qinq-dot1p command allows the top or bottom PBits to be used when evaluating the applied sap-ingress QoS policy’s Dot1P entries.
  • Page 888 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 39 Top Position QinQ dot1P Evaluation Behavior Port / SAP Type Existing Packet Tags PBits Used for Match Null None None Null Dot1P (VLAN ID 0) Dot1P PBits Null Dot1Q Dot1Q PBits...
  • Page 889 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Table 40 Bottom Position QinQ and TopQ SAP Dot1P Evaluation Port / SAP Type Existing Packet Tags PBits Used for Match QinQ / QinQ TopQ BottomQ BottomQ PBits Table 41 Egress SAP Types Egress SAP Type...
  • Page 890 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 authentication-policy Syntax authentication-policy name no authentication-policy Context config>service>vpls>sap Description This command defines which subscriber authentication policy must be applied when a DHCP message is received on the interface. The authentication policies must already be defined. The policy will only be applied when DHCP snooping is enabled on the SAP.
  • Page 891 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters auto — Specifies that appropriate format will be detected automatically, based on type of BPDUs received on such port. auto-rw — Specifies that appropriate format will be detected automatically and the VLAN ID will be rewritten as follows: •...
  • Page 892 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 accounting-policy Syntax accounting-policy acct-policy-id no accounting-policy [acct-policy-id] Context config>service>vpls>spoke-sdp config>service>vpls>mesh-sdp config>service>vpls>sap Description This command creates the accounting policy context that can be applied to a SAP or SDP. An accounting policy must be defined before it can be associated with a SAP or SDP.
  • Page 893 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 When the no collect-stats command is issued the statistics are still accumulated by the IOM or XCM cards. However, the CPU will not obtain the results and write them to the billing file. If a subsequent collect-stats command is issued then the counters written to the billing file include all the traffic while the no collect-stats command was in effect.
  • Page 894 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command configures the refresh timer for control channel status signaling packets. By default, no refresh packets are sent. Default no refresh-timer Parameters seconds — Specifies the refresh timer value, in seconds. Values 10 to 65535 Default...
  • Page 895 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The configuration for the two directions of the pseudowire must match because the control word negotiation procedures described in Section 6.2 of RFC 4447 are not supported. The C-bit in the pseudowire FEC sent in the label mapping message is set to 1 when the control word is enabled.
  • Page 896 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 [no] sap All the other VPLS attributes are not supported. Parameters name/id — Specifies the name in ASCII or the template ID Values name: ASCII string Values ID: [1 to 2147483647] vpls-sap-template Syntax vpls-sap-template name/id create...
  • Page 897 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command associates an existing IP filter policy with the template. Parameters name — Specifies the IP filter policy name, up to 64 characters. ipv6 Syntax ipv6 name no ipv6 Context config>service>template>vpls-sap-template>egress>filter-name...
  • Page 898 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls config>service>template>vpls-template Description The temporary flooding is designed to minimize failover times by eliminating the time it takes to flush the MAC tables and if MVRP is enabled the time it takes for MVRP registration. Temporary flooding is initiated only upon xSTP TCN reception.
  • Page 899 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command creates the context to configure the use of a P2MP LSP as the default tree for forwarding Broadcast, Unicast unknown, and Multicast (BUM) packets of a VPLS or B-VPLSs instance.
  • Page 900 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The root-and-leaf command is required otherwise this node will behave as a leaf-only node by default. When the node is leaf only for the I-PMSI of type P2MP RSVP LSP, no PMSI Tunnel Attribute is included in BGP-AD route update messages and therefore no RSVP P2MP LSP is signaled but the node can join RSVP P2MP LSP rooted at other PE nodes participating in this VPLS/B-VPLS service.
  • Page 901 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 At the expiry of this timer, the VPLS/B-VPLS will begin forwarding of BUM packets over the P2MP LSP instance even if not all the S2L paths are up. The no version of this command re-instates the default value for this delay timer.
  • Page 902 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 root-and-leaf Syntax [no] root-and-leaf Context config>service>vpls>provider-tunnel>inclusive Description This command configures the node to operate as both root and leaf of the I-PMSI in a specified VPLS/B-VPLS instance. By default, a node will behave as a leaf-only node. When the node is leaf only for the I-PMSI of type P2MP RSVP LSP, no PMSI Tunnel Attribute is included in BGP-AD route update messages and therefore no RSVP P2MP LSP is signaled but the node can join RSVP P2MP LSP rooted at other PE nodes participating in this VPLS/B-VPLS service.
  • Page 903 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The no version of this command removes the P2MP LSP template from the I-PMSI configuration. Parameters p2mp-lsp-template-name — Specifies the name of the P2MP LSP template up to 32 characters in length.
  • Page 904 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 vc-id — Specifies the virtual circuit identifier. This value is used to validate the VC ID portion of each mesh SDP binding defined in the service. The default value of this object is equal to the service ID.
  • Page 905 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 leaf-ac — Specifies an access (AC) mesh SDP binding under a E-Tree VPLS as a leaf access (AC) SDP. The default E-Tree SDP type is a root-ac if leaf-ac or root-leaf-tag is not specified at SDP binding creation.
  • Page 906 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 vc-type — This command overrides the default VC type signaled for the spoke or mesh binding to the far end of the SDP. The VC type is a 15 bit-quantity containing a value which represents the type of VC.
  • Page 907 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 leaf-ac — Specifies an access (AC) spoke-SDP binding under a E-Tree VPLS as a leaf access (AC) SDP. The default E-Tree SDP binding type is a root-ac if leaf-ac or root- leaf-tag is not specified at SDP creation.
  • Page 908 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 config>service>pw-template>egress Description This command is used to redirect pseudowire packets to an egress port queue-group for the purpose of shaping. The egress pseudowire shaping provisioning model allows the mapping of one or more pseudowires to the same instance of queues, or policers and queues, which are defined in the queue-group template.
  • Page 909 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 When a pseudowire packet for that FC is forwarded and an instance of the referenced queue- group name exists on that egress port, the packet is processed by the queue-group policer and will then be fed to the queue-group queue.
  • Page 910 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls>mesh-sdp config>service>vpls>spoke-sdp Description This command configures the ingress SDP context. Syntax qos network-policy-id fp-redirect-group queue-group-name instance instance-id] no qos Context config>service>apipe>spoke-sdp>ingress config>service>cpipe>spoke-sdp>ingress config>service>epipe>spoke-sdp>ingress config>service>fpipe>spoke-sdp>ingress config>service>ipipe>spoke-sdp>ingress config>service>vpls>spoke-sdp>ingress config>service>vpls>mesh-sdp>ingress config>service>pw-template>ingress Description This command is used to redirect pseudowire packets to an ingress forwarding plane queue-...
  • Page 911 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Step 1. When a pseudowire FC is redirected to use a policer in a named policer queue- group and the queue-group name does not exist, the association is failed at the time the user associates the ingress context of a spoke-SDP to the named queue- group.
  • Page 912 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 can apply a QoS filter matching the dot1-p in the VLAN tag corresponding to the Ethernet port encapsulation, the EXP in the outer label when the tunnel is an LSP, the DSCP in the IP header if the tunnel encapsulation is GRE, and the DSCP in the payload IP header if the user enabled the ler-use-dscp option and the pseudowire terminates in IES or VPRN service (spoke-interface).
  • Page 913 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 If no MDAs are defined within the allowed-mda-destinations node, the system operates normally and will forward IP multicast flooded packets associated with the spoke or mesh SDP binding to all switch fabric taps containing network IP interfaces. The MDA inclusion list should include all MDAs that the SDP binding may attempt to forward through.
  • Page 914 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 vc-label Syntax vc-label ingress-vc-label no vc-label [ingress-vc-label] Context config>service>vpls>mesh-sdp>ingress config>service>vpls>spoke-sdp>ingress Description This command configures the ingress VC label. Parameters vc-label — Specifies the VC ingress value that indicates a specific connection. Values 2048 to 18431 entropy-label...
  • Page 915 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 In a VPLS service, MAC addresses are associated with a Service Access Point (SAP) or with a Service Distribution Point (SDP). MACs associated with a SAP are classified as local MACs, and MACs associated with an SDP are remote MACs.
  • Page 916 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command specifies an explicit dot1q value used when encapsulating to the SDP far end. When signaling is enabled between the near and far end, the configured dot1q tag can be overridden by a received TLV specifying the dot1q value expected by the far end.
  • Page 917 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 default-msap-policy Syntax default-msap-policy policy-name no default-msap-policy Context config>service>vpls>sap Description This command specifies an existing managed SAP policy. Managed SAPs allow the use of policies and a SAP template for the creation of a SAP. Managed SAP policies are created in the config>subscr-mgmt context.
  • Page 918 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 def-sla-profile Syntax def-sla-profile default-sla-profile-name no def-sla-profile Context config>service>vpls>sap>sub-sla-mgmt Description This command specifies a default SLA profile for this SAP. The SLA profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sla-profile context. An SLA profile is a named group of QoS parameters used to define per service QoS for all subscriber hosts common to the same subscriber within a provider service offering.
  • Page 919 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 mac-da-hashing Syntax [no] mac-da-hashing Context config>service>vpls>sap>sub-sla-mgmt Description This command specifies whether subscriber traffic egressing a LAG SAP has its egress LAG link selected by a function of the MAC destination address instead of the subscriber ID. This command is only meaningful if subscriber management is enabled and can be configured for this VPLS service.
  • Page 920 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 sla-profile-name — Specifies an existing SLA profile name to be associated with the static subscriber host. The SLA profile is configured in the config>subscr- mgmt>sla-profile context. subscriber sub-ident-string — Specifies an existing subscriber identification profile to be associated with the static subscriber host.
  • Page 921 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command enters the context to configure single subscriber parameters for this SAP. sub-ident-policy Syntax sub-ident-policy sub-ident-policy-name Context config>service>vpls>sap>sub-sla-mgmt Description This command associates a subscriber identification policy to this SAP. The subscriber identification policy must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-ident-policy context.
  • Page 922 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command enables fast leave. When IGMP or MLD fast leave processing is enabled, the SR OS will immediately remove a SAP or SDP from the multicast group when it detects an IGMP or MLD “leave”...
  • Page 923 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters mac-name — Specifies a (predefined) MAC name to associate with the SAP or SDP, indirectly specifying a Fault Propagation BMAC address. Up to 32 characters in length ieee-address —...
  • Page 924 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command forces vc-vlan-type forwarding in the data path for spoke or mesh SDPs which have ether vc-type. This command is not allowed on vlan-vc-type SDPs. The system expects a symmetrical configuration with its peer, specifically it expects to remove the same number of VLAN tags from received traffic as it adds to transmitted traffic.
  • Page 925 • The user can enable or disable the signal-capability option in CLI as needed. When doing so, the 7450 ESS, 7750 SR, and 7950 XRS must withdraw the label it sent to its peer and send a new label mapping message with the new value of the F bit in the flow label interface parameters sub-TLV of the pseudowire ID FEC element.
  • Page 926 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 disable-router-alert-check Syntax [no] disable-router-alert-check Context config>service>vpls>mesh-sdp>igmp-snooping config>service>vpls>mesh-sdp>mld-snooping config>service>vpls>sap>igmp-snooping config>service>vpls>sap>igmp-host-tracking config>service>vpls>sap>mld-snooping config>service>vpls>spoke-sdp>igmp-snooping config>service>vpls>spoke-sdp>mld-snooping Description This command disables the IGMP or MLD router alert check option. The no form of the command enables the router alert check. Default no disable-router-alert-check import...
  • Page 927 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The no form of the command removes the policy association from the SAP or SDP. Default no import Parameters policy-name — Specifies the import policy name. Values can be string up to 32 characters long of printable, 7-bit ASCII characters.
  • Page 928 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters max-num-groups — Specifies the maximum number of multicast groups allowed to be tracked Values 1 to 196607 max-num-groups Syntax max-num-groups count no max-num-groups Context config>service>vpls>sap>igmp-snooping config>service>vpls>spoke-sdp>igmp-snooping config>service>vpls>mesh-sdp>igmp-snooping config>service>vpls>sap>mld-snooping config>service>vpls>spoke-sdp>mld-snooping config>service>vpls>mesh-sdp>mld-snooping...
  • Page 929 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters 1 to 32000 — Specifies the maximum number of multicast sources allowed to be tracked per group max-num-sources Syntax max-num-sources max-num-sources no max-num-sources Context config>service>vpls>mesh-sdp>igmp-snooping config>service>vpls>sap>igmp-host-tracking config>service>vpls>sap>igmp-snooping config>service>vpls>spoke-sdp>igmp-snooping Description This command configures the maximum number of multicast sources allowed per group.
  • Page 930 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Description This command assigns existing MCAC interface policy to this interface. MCAC interface policy is not supported with MLD-snooping, therefore executing the command in the mld- snooping contexts will return an error. The no form of the command removes the MCAC interface policy association.
  • Page 931 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command configures the bandwidth for the interface's multicast CAC policy traffic. When disabled (no unconstrained-bw) there will be no checking of bandwidth constraints on the interface level. When enabled and a policy is defined, enforcement is performed. The allocated bandwidth for optional channels should not exceed the unconstrained-bw minus the mandatory-bw and the mandatory channels have to stay below the specified value for the mandatory-bw.
  • Page 932 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 If two multicast routers exist in the network, one of them will become the active querier. While the other multicast router (non-querier) stops sending IGMP queries, it should still receive reports to keep its multicast trees up-to-date.
  • Page 933 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 no level level-id Context config>service>vpls>sap>igmp-snooping>mcac>mc-constraints config>service>vpls>sap>mld-snooping>mcac>mc-constraints Description This command configures levels and their associated bandwidth for multicast CAC policy on this interface. Parameters level-id — Specifies has an entry for each multicast CAC policy constraint level configured on this system Values 1 to 8...
  • Page 934 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Parameters max-num-sources — Specifies the maximum number of multicast sources allowed per group Values 1 to 1000 query-response-interval Syntax query-response-interval seconds Context config>service>vpls>sap>igmp-snooping config>service>vpls>spoke-sdp>igmp-snooping config>service>vpls>mesh-sdp>igmp-snooping config>service>vpls>sap>mld-snooping config>service>vpls>spoke-sdp>mld-snooping config>service>vpls>mesh-sdp>mld-snooping Description This command configures the IGMP query response interval.
  • Page 935 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 config>service>vpls>spoke-sdp>mrp config>service>vpls>mesh-sdp>mrp Description This command controls the interval between transmit opportunities that are applied to the Applicant state machine. An instance of this Join Period Timer is required on a per-Port, per- MRP Participant basis.
  • Page 936 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Context config>service>vpls>sap>mrp config>service>vpls>spoke-sdp>mrp config>service>vpls>mesh-sdp>mrp Description This command controls the frequency with which the LeaveAll state machine generates LeaveAll PDUs. The timer is required on a per-Port, per-MRP Participant basis. The Leave All Period Timer is set to a random value, T, in the range LeaveAllTime<T<1.5*leave-all-time when it is started.
  • Page 937 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command controls the frequency the Periodic Transmission state machine generates periodic events if the Periodic Transmission Timer is enabled. The timer is required on a per- Port basis.
  • Page 938 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 The no form of the command removes the association. Default no oper-group Parameters name — Specifies a character string of maximum 32 ASCII characters identifying the group instance. monitor-oper-group Syntax [no] monitor-oper-group name...
  • Page 939 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command enters the context to configure an MPLS-TP Pseudowire Path Identifier for a spoke-sdp. All elements of the PW path ID must be configured in order to enable a spoke- sdp with a PW path ID.
  • Page 940 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 node-id — Specifies the node ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP. Values a.b.c.d or 0 to 4294967295 ac-id — Specifies the attachment circuit ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.
  • Page 941 TLV in the initial label mapping message of the pseudowire used for a spoke-SDP. This will force both 7450 ESS, 7750 SR, and 7950 XRS PEs to use the pseudowire label withdrawal method for signaling pseudowire status.
  • Page 942 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 group Syntax [no] group grp-ip-address [no] group grp-ipv6-address Context config>service>vpls>igmp-snooping>static config>service>vpls>mesh-sdp>igmp-snooping>static config>service>vpls>mesh-sdp>mld-snooping>static config>service>vpls>sap>igmp-snooping>static config>service>vpls>sap>mld-snooping>static config>service>vpls>spoke-sdp>igmp-snooping>static config>service>vpls>spoke-sdp>mld-snooping>static Description This command enters the context to add a static multicast group as a (*, G) or as one or more (S,G) records.
  • Page 943 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The source command in combination with the group is used to create a specific (S,G) static group entry. Use the no form of the command to remove the source from the configuration. Parameters ip-address —...
  • Page 944 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 If the send-query command is not configured, the version command has no effect. The version used on that SAP or SDP will be the version of the querier. This implies that, for example, when there is a v2 querier, a v3 group or group-source specific query when a host wants to leave a certain group will never be sent.
  • Page 945 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Parameters ip — Configures SAP anti-spoof filtering to use only the source IP address in its lookup. If a static host exists on the SAP without an IP address specified, the anti-spoof ip command will fail.
  • Page 946 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 min-auth-interval Syntax min-auth-interval min-auth-interval no min-auth-interval Context config>service>vpls>sap>arp-host Description This command configures the minimum authentication interval. The no form of the command returns the value to the default. Default min-auth-interval 15 Parameters...
  • Page 947 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 The arp-reply-agent command will fail if an existing static host on the SAP does not have both MAC and IP addresses specified. Once the ARP reply agent is enabled, creating a static host on the SAP without both an IP address and MAC address will fail.
  • Page 948 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Extending or adding new range into a managed-vlan-range declaration will fail as soon as there is at least one SAPs falling into the specified vlan-range does not have l2pt-termination enabled.
  • Page 949 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Default ete-fragment-threshold 128 Parameters threshold — Specifies the maximum length of a fragment to be transmitted. Values 128 to 512 interleave Syntax interleave no interleave Context config>service>vpls>sap>frame-relay>frf.12 Description This command enables interleaving of high priority frames and low priority frame fragments within a FR SAP using FRF.12 end-to-end fragmentation.
  • Page 950 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3.7.2.7 Redundancy Commands redundancy Syntax redundancy Context config Description This command enters the context to perform redundancy operations. multi-chassis Syntax multi-chassis Context config>redundancy Description This command enters the context to configure multi-chassis parameters. peer Syntax [no] peer ip-address create...
  • Page 951 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command enters the context to configure synchronization parameters. igmp Syntax [no] igmp Context config>redundancy>multi-chassis>peer>sync Description This command specifies whether IGMP protocol information should be synchronized with the multi-chassis peer.
  • Page 952 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 pim-snooping Syntax pim-snooping [saps] [spoke-sdps] no pim-snooping Context config>redundancy>multi-chassis>peer>sync Description This command specifies whether PIM snooping for IPv4 information should be synchronized with a multi-chassis peer. Entering pim-snooping without any parameters results in the synchronization being applied only to SAPs.
  • Page 953 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 no range encap-range Context config>redundancy>multi-chassis>peer>sync>port Description This command configures a range of encapsulation values. Parameters encap-range — Specifies a range of encapsulation values on a port to be synchronized with a multi-chassis peer Values Dot1q...
  • Page 954 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Non-existent spoke-SDPs may be specified. If these spoke-SDPs are created at a later time, then all states on the spoke-SDPs will be synchronized according to the synchronization tag and the synchronization protocols enabled.
  • Page 955 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 • pseudowire SAPs • ESM-over-MPLS pseudowires Non-existent spoke-SDPs may be specified. If these spoke-SDPs are created at a later time, then all states on the spoke-SDPs will be synchronized according to the synchronization tag and the synchronization protocols enabled.
  • Page 956 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 3HE 15084 AAAA TQZZA 01 Issue: 01...
  • Page 957 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 3.8 VPLS Show, Clear, Debug, and Tools Command Reference 3.8.1 Command Hierarchies • Show Commands • Clear Commands • Debug Commands • Tools Commands 3.8.1.1 Show Commands show —...
  • Page 958 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — labels — l2pt disabled — l2pt [detail] — mac-move — mac-protect [implicit] — mfib [ipv4 | ipv6 | mac] — mfib brief — mfib group group-address [statistics] —...
  • Page 959 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — service-using [vpls] [b-vpls] [i-vpls] [m-vpls] — service-using [msap] [dyn-script] [description] e-tree — subscriber-using [service-id service-id] [sap-id sap-id] [interface ip-int-name] [ip ip- address[/mask]] [mac ieee-address] [sub-profile sub-profile-name] [sla-profile sla-profile-name] —...
  • Page 960 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — — base — mrouters [detail] — — port-db sap sap-id — port-db sap sap-id detail — port-db sap sap-id group grp-ipv6-address — port-db sdp sdp-id:vc-id — port-db sdp \sdp-id:vc-id detail —...
  • Page 961 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — port-db group grp-ip-address source src-ip-address vxlan vtep ip- address vni vni-id — querier — statistics {evpn-mpls | all | sap sap-id | sdp sdp-id:vc-id | vxlan vtep ip-address vni vni-id} —...
  • Page 962 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 — sap-id {all | cem | counters | l2pt | stp | mrp} — sap-id {keep-alive} 3.8.1.3 Debug Commands debug — service — service-id — [no] arp-host — [no] ip-address —...
  • Page 963 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 — [group grp-ip-address] [source ip-address] [detail] — no — database [group grp-ip-address] [source ip-address] [detail] — no database — [group grp-ip-address] [source ip-address] [detail] — no — [detail] —...
  • Page 964 — eval-vpls-template — eval-vpls-sap-template [sap-id] — instantiate-data-saps sap-id — provider-tunnels Refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR OAM and Diagnostics Guide for information about CLI commands and syntax for OAM and diagnostics commands. 3.8.2 Command Descriptions 3.8.2.1...
  • Page 965 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Description This command displays active subscriber information. Parameters sap sap-id — Displays SAP information for the specified SAP ID. sla-profile sla-profile-name — Displays information for the specified SLA profile. summary —...
  • Page 966 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 +-- 192.168.1.55 - mac:00:00:10:10:12:11 - DHCP - svc:1000 ------------------------------------------------------------------------------- Number of active subscribers : 2 Flags: (N) = the host or the managed route is in non-forwarding state =============================================================================== A:Dut-A# A:Dut-A# show service active-subscribers subscriber nokia_110...
  • Page 967 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 =============================================================================== ------------------------------------------------------------------------------- Subscriber nokia_110-2 (sub-default) ------------------------------------------------------------------------------- I. Sched. Policy : N/A E. Sched. Policy : N/A E. Agg Rate Limit: 10 I. Policer Ctrl. : N/A E. Policer Ctrl. : N/A Q Frame-Based Ac*: Disabled Acct.
  • Page 968 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 192.168.1.56 00:00:10:10:12:13 DHCP 1000 ------------------------------------------------------------------------------- ------------------------------------------------------------------------ SLA Profile Instance statistics ------------------------------------------------------------------------ Packets Octets Off. HiPrio Off. LowPrio Off. Uncolor Off. Managed Queueing Stats (Ingress QoS Policy 1) Dro. HiPrio Dro.
  • Page 969 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 If both start-label and end-label parameters are specified, the services using the range of labels X where start-label <= X <= end-label are displayed. Use the show router ldp bindings command to display dynamic labels. Parameters start-label —...
  • Page 970 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 42 Show Service Egress Command Output Fields Label Description Svc Id The ID that identifies a service. Sdp Id The ID that identifies an SDP. Type Indicates whether the SDP binding is a spoke or a mesh. I.
  • Page 971 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Service Id Mac Move : Disabled Primary Factor Secondary Factor Mac Move Rate Mac Move Timeout : 10 Mac Move Retries Table Size : 250 Allocated Count Total In Use Learned Count Static Count OAM MAC Count...
  • Page 972 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 43 Show FDB Information Fields (Continued) Label Description (Continued) Mac Move Rate Displays the maximum rate at which MACs can be re-learned in this service, before the SAP where the moving MAC was last seen is automatically disabled in order to protect the system against undetected loops or duplicate MAs.
  • Page 973 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Table 43 Show FDB Information Fields (Continued) Label Description (Continued) Cond MAC Count Displays the total number of conditional static MAC entries in the FDB of this service. BGP EVPN Count Displays the total number of BGP EVPN entries in the FDB of this service.
  • Page 974 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 43 Show FDB Information Fields (Continued) Label Description (Continued) Type/Age Type — Specifies the number of seconds used to age out TLS FDB entries learned on local SAPs. Age —...
  • Page 975 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 ------------------------------------------------------------------------------- 00:00:00:00:00:01 sap:1/1/1 LP/0 01/07/2011 20:25:34 00:00:00:00:00:02 sap:1/1/2 01/07/2011 20:26:25 00:00:00:00:00:03 sap:1/1/1 01/07/2011 20:25:34 ------------------------------------------------------------------------------- No. of Entries: 2 ------------------------------------------------------------------------------- Legend: L=Learned; P=MAC is protected; A=Auto learn protected =============================================================================== *A:ian2# The following shows the protected MACs in the FDB.
  • Page 976 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Table 44 Show FDB-MAC Command Output Fields (Continued) Label Description (Continued) The specified MAC address. Source-Identifier The location where the MAC is defined. Type/Age Static — FDB entries created by management. Learned —...
  • Page 977 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Sample Output *A:ALA-12# show service ingress-label 0 ============================================================================== Martini Service Labels ============================================================================== Svc Id Sdp Id Type I.Lbl E.Lbl ------------------------------------------------------------------------------ 10:1 Mesh 0 20:1 Mesh 0 30:1 Mesh 0 50:1 Mesh 0 100:1...
  • Page 978 — Specifies matching an ingress policy egress — Specifies matching an egress policy qos-policy-id — The ingress or egress QoS Policy ID for which the matching SAPs will be displayed. This parameter applies to the 7450 ESS or 7750 SR only. Values 1 to 65535 td-profile-id —...
  • Page 979 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 =============================================================================== Service Access Points =============================================================================== PortId SvcId Ing. Ing. Egr. Egr. Anti Fltr Fltr Spoof ------------------------------------------------------------------------------- 1/1/3 10203041 none none 1/1/4 10203042 none none ------------------------------------------------------------------------------- Number of SAPs : 2 ------------------------------------------------------------------------------- A:ALA-701# show service sap-using process-cpm-traffic-on-sap-down...
  • Page 980 — Displays only information for the specified SDP ID. An SDP is a logical mechanism that ties a far-end 7450 ESS or 7750 SR to a particular service without having to specifically define far end SAPs. Each SDP represents a method to reach a router.
  • Page 981 RELEASE 19.5.R1 far-end ip-addr — Displays only SDPs matching with the specified system IP address of the far-end destination 7450 ESS or 7750 SR OS for the Service Distribution Point (SDP) that is the termination point for a service. Default SDPs with any far-end IP address.
  • Page 982 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Net-Domain : default Egr Interfaces : Consistent FPE LSP Id Weighted ECMP : Disabled Flags : None Table 47 describes show service-id SDP output fields. Table 47 Show Service-ID SDP Fields Label Description Sdp Id...
  • Page 983 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Table 47 Show Service-ID SDP Fields (Continued) Label Description (Continued) Oper State The operational state of the Keepalive process. Hello Time Specifies how often the SDP echo request messages are transmitted on this SDP.
  • Page 984 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 far-end ip-address — Displays only services matching with the specified far-end IP address Default Services with any far-end IP address. etree — Specifies matching of SDP bindings configured as E-Tree SDP bi9ndings and the corresponding role in the E-Tree services: Leaf-AC, Root-AC or Root-leaf-tag SDP binds.
  • Page 985 Parameters epipe — Displays matching Epipe services ies — Displays matching IES instances. This parameter applies to the 7450 ESS or 7750 SR only. vpls — Displays matching VPLS instances vprn —...
  • Page 986 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 i-vpls — Displays matching I-VPLS services. This parameter applies to the 7450 ESS or 7750 SR only. apipe — Displays matching Apipe services. This parameter applies to the 7750 SR only fpipe —...
  • Page 987 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 *A:ALA-14# show service service-using =============================================================================== Services =============================================================================== ServiceId Type CustomerId Last Mgmt Change ------------------------------------------------------------------------------- mVPLS Down Down 10/26/2006 15:44:57 mVPLS Down Down 10/26/2006 15:44:57 mVPLS 10/26/2006 15:44:57 mVPLS 10/26/2006 15:44:57 mVPLS 10/26/2006 15:44:57...
  • Page 988 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 10000 Down Down 09/25/2007 21:45:59 10001 VPLS Down 09/25/2007 21:45:58 483000 Ipipe Down Down 09/25/2007 21:45:59 483001 Ipipe Down 09/25/2007 21:45:59 483004 Ipipe Down Down 09/25/2007 21:45:59 483007 VPLS Down Down...
  • Page 989 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Down Down ------------------------------------------------------------------------------- Number of Entries : 1 ------------------------------------------------------------------------------- *A:term17>config>service>epipe# The following sample outputs show VPLS Services configured as E-Tree. *A:DutA# show service service-using =============================================================================== Services =============================================================================== ServiceId Type CustomerId Service Name -------------------------------------------------------------------------------...
  • Page 990 A string up to 64 characters in length all — Displays detailed information about the service arp — Displays ARP entries for the service. This parameter applies to the 7450 ESS or 7750 SR only. authentication — Displays subscriber authentication information. This parameter applies to the 7450 ESS or 7750 SR only.
  • Page 991 RELEASE 19.5.R1 dhcp — Displays DHCP information. This parameter applies to the 7450 ESS or 7750 SR only. Refer to the 7450 ESS, 7750 SR, and VSR Triple Play Service Delivery Architecture Guide for information about CLI command commands and descriptions.
  • Page 992 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 pppoe — Displays PPPoE information. This parameter applies to the 7450 ESS or 7750 SR only. retailers — Displays service retailer information. This parameter applies to the 7450 ESS or 7750 SR only.
  • Page 993 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Allow IP Intf Bind: Disabled Fwd-IPv4-Mcast-To*: Disabled Fwd-IPv6-Mcast-To*: Disabled Mcast IPv6 scope : mac-based Def. Gateway IP : None Def. Gateway MAC : None Temp Flood Time : Disabled Temp Flood : Inactive Temp Flood Chg Cnt: 0...
  • Page 994 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Admin MTU : 1514 Oper MTU : 1514 Ingr IP Fltr-Id : n/a Egr IP Fltr-Id : n/a Ingr Mac Fltr-Id : n/a Egr Mac Fltr-Id : n/a Ingr IPv6 Fltr-Id : n/a Egr IPv6 Fltr-Id...
  • Page 995 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 ------------------------------------------------------------------------------- Stp Admin State : Up Stp Oper State : Down Core Connectivity : Down Port Role : N/A Port State : Forwarding Port Number : N/A Port Priority : 128 Port Path Cost : 10...
  • Page 996 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 ------------------------------------------------------------------------------- Admin State : Down MAC DA Hashing : False Def Sub-Id : None Def Sub-Profile : None Def SLA-Profile : None Def Inter-Dest-Id : None Def App-Profile : None Sub-Ident-Policy : None...
  • Page 997 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Ingress Queue 1 (Unicast) (Priority) Off. HiPrio Off. LowPrio Dro. HiPrio Dro. LowPrio For. InProf For. OutProf Ingress Queue 11 (Multipoint) (Priority) Off. HiPrio Off. LowPrio Off. Managed Dro.
  • Page 998 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 L2PT Termination : Disabled Vlan-translation : None Qinq-vlan- Qinq-vlan- translation : None translation Ids : None Acct. Pol : None Collect Stats : Disabled Anti Spoofing : None Dynamic Hosts : Enabled Avl Static Hosts...
  • Page 999 LAYER 2 SERVICES AND EVPN GUIDE Virtual Private LAN Service RELEASE 19.5.R1 Forward transitions: 0 Bad BPDUs rcvd Cfg BPDUs rcvd Cfg BPDUs tx TCN BPDUs rcvd TCN BPDUs tx TC bit BPDUs rcvd TC bit BPDUs tx RST BPDUs rcvd RST BPDUs tx MST BPDUs rcvd MST BPDUs tx...
  • Page 1000 Virtual Private LAN Service LAYER 2 SERVICES AND EVPN GUIDE RELEASE 19.5.R1 Static host management MAC learn options : N/A ------------------------------------------------------------------------------- Sap Aggregate Stats ------------------------------------------------------------------------------- Packets Octets Ingress Aggregate Offered Aggregate Forwarded Aggregate Dropped Egress Aggregate Forwarded Aggregate Dropped ------------------------------------------------------------------------------- Sap Statistics ------------------------------------------------------------------------------- Last Cleared Time...

This manual is also suitable for:

77507950