Cisco Systems OL-10729-01 Network Router User Manual


 
A-12
Cisco IP Solution Center Metro Ethernet and L2VPN User Guide, 4.2
OL-10729-01
Appendix A Sample Configlets
VPLS (Multipoint) ERS
VPLS (Multipoint) ERS
Configuration Service: L2VPN/Metro Ethernet
Feature: VPLS (multipoint) ERS
Device configuration:
The N-PE is a CISCO7600 with IOS 12.2(18)SXF, Sup720-3BXL
The U-PE is a CISCO3750ME with IOS 12.2(25)EY1. No port security, no tunneling.
VPLS Multipoint VPN with VLAN 767
C3750ME (FA1/0/21 – FA1/0/23) <–> C7600 (FA2/18)
Configlets
Comments
The N-PE is a 7600 with OSM or SIP-600 module.
The VFI contains all the N-PEs (neighbors) that this N-PE talks to.
The U-PE is a generic Metro Ethernet (ME) switch. The customer BPDUs are blocked by the PACL.
The VPLS ERS UNI is the same as the L2VPN (point-to-point) ERS UNI.
The SVI (interface 767) refers to the global VFI, which contains multiple peering N-PEs.
UP-E N-PE
vlan 767
exit
!
interface FastEthernet1/0/21
no cdp enable
no keepalive
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan none
switchport trunk allowed vlan 767
switchport nonegotiate
spanning-tree bpdufilter enable
mac access-group ISC-FastEthernet1/0/21 in
!
interface FastEthernet1/0/23
no ip address
mac access-list extended
ISC-FastEthernet1/0/21
deny any host 0100.0ccc.cccc
deny any host 0100.0ccc.cccd
deny any host 0100.0ccd.cdd0
deny any host 0180.c200.0000
permit any any
l2 vfi vpls_ers_1-0 manual
vpn id 89017
neighbor 99.99.10.9 encapsulation mpls
neighbor 99.99.5.99 encapsulation mpls
!
vlan 767
exit
!
interface FastEthernet2/18
switchport trunk allowed vlan
350,351,430,630,767,780,783,785-791
!
interface Vlan767
no ip address
description VPLS ERS
xconnect vfi vpls_ers_1-0
no shutdown