|
Techpubs Home
Report an Error
Short Contents
Entire manual as PDF [4225 KB]
|
 |
- Chapter:
About This Guide
[PDF 57 KB]
- Objectives
- Audience
- Document Organization
- Part Organization
- Using the Indexes
- Documentation Conventions
- General Conventions
- Conventions for Software Commands and Statements
- List of Technical Publications
- Documentation Feedback
- How to Request Support
- Chapter:
VPN Overview
[PDF 50 KB]
- VPN Standards
- VPN Terminology
- Types of VPNs
- Layer 2 VPNs
- Layer 3 VPNs
- VPLS
- Virtual-Router Routing Instances
- VPNs and Class of Service
- VPNs and Logical Routers
- VPN Graceful Restart
- Chapter:
Configure VPNs
[PDF 164 KB]
- Enable a Signaling Protocol on the PE Routers
- Use LDP for VPN Signaling
- Use RSVP for VPN Signaling
- Configure an IGP on the PE and P Routers
- Configure an IBGP Session between PE Routers
- Configure a VPN Routing Instance on the PE Routers
- Configure the Description
- Configure the Instance Type
- Configure Interfaces for VPN Routing
- General Configuration for VPN Routing
- Configure Interfaces for Layer 3 VPNs
- Configure Interfaces for Carrier-of-Carriers VPNs
- Configure Unicast RPF on VPN Interfaces
- Configure the Route Distinguisher
- Configure Policy for the PE Router's VRF Table
- Configure the Route Target
- Configure the Route Origin
- Configure Import Policy for the PE Router's VRF Table
- Configure Export Policy for the PE Router's VRF Table
- Apply Both the VRF Export and the BGP Export Policies
- Configure a VRF Target
- Configure BGP Route Target Filtering
- BGP Route Target Filtering Overview
- Configure BGP Route Target Filtering for VPNs
- Configure a Virtual-Router Routing Instance
- Configure a Routing Protocol between the Service Provider Routers
- Configure Logical Interfaces between Participating Routers
- Configure Graceful Restart
- Configure Aggregate Labels for VPNs
- Rewrite Markers and VPNs
- Transmit Nonstandard BPDUs
- Ping VPNs and Layer 2 Circuits
- Chapter:
Summary of VPN Configuration Statements
[PDF 58 KB]
- aggregate-label
- description
- family route-target
- graceful-restart
- instance-type
- interface
- route-distinguisher
- route-distinguisher-id
- vpn-apply-export
- vrf-export
- vrf-import
- vrf-target
- Chapter:
Layer 2 VPN Overview
[PDF 21 KB]
- Layer 2 VPN Overview
- Layer 2 VPN Standards
- Chapter:
Configure Layer 2 VPNs
[PDF 79 KB]
- Configure the Connections to the Local Site
- Configure the Site
- Configure the Remote Site ID
- Configure the Encapsulation Type
- Trace Layer 2 VPN Traffic and Operations
- Disable Normal TTL Decrementing for VPNs
- Configure CCC Encapsulation on Interfaces
- Configure TCC Encapsulation on Interfaces
- Configure Layer 2 VPN Policing on Interfaces
- Disable the Control Word for Layer 2 VPNs
- Chapter:
Layer 2 VPN Configuration Example
[PDF 126 KB]
- Simple Full-Mesh Layer 2 VPN Overview
- Enable an IGP on the PE Routers
- Configure MPLS LSP Tunnels between the PE Routers
- Configure IBGP on the PE Routers
- Configure Routing Instances for Layer 2 VPNs on the PE Routers
- Configure CCC Encapsulation on the Interfaces
- Configure VPN Policy on the PE Routers
- Layer 2 VPN Configuration Summarized by Router
- Summary for Router A (PE Router for Sunnyvale)
- Summary for Router B (PE Router for Austin)
- Summary for Router C (PE Router for Portland)
- Chapter:
Summary of Layer 2 VPN Configuration Statements
[PDF 76 KB]
- control-word
- encapsulation
- encapsulation (logical interface)
- encapsulation (physical interface)
- encapsulation (Layer 2 VPN)
- no-control-word
- policer
- proxy
- remote
- remote-site-id
- site
- site-identifier
- traceoptions
- Chapter:
Layer 3 VPN Overview
[PDF 155 KB]
- Layer 3 VPN Overview
- Layer 3 VPN Standards
- Layer 3 VPN Attributes
- VPN-IPv4 Addresses and Route Distinguishers
- IPv6 Layer 3 VPNs
- VPN Routing and Forwarding Tables
- Route Distribution within a Layer 3 VPN
- Distribution of Routes from CE to PE Routers
- Distribution of Routes between PE Routers
- Distribution of Routes from PE to CE Routers
- Forwarding across the Provider's Core Network
- Routing Instances for VPNs
- Multicast over Layer 3 VPNs
- Multicast over Layer 3 VPNs Overview
- Sending PIM Hello Messages to the PE Routers
- Sending PIM Join Messages to the PE Routers
- Receiving the Multicast Transmission
- Chapter:
Configure Layer 3 VPNs
[PDF 231 KB]
- Configure VPN Routing between the PE and CE Routers
- Configure BGP between the PE and CE Routers
- Configure OSPF between the PE and CE Routers
- Configure OSPF Version 2 between the PE and CE Routers
- Configure OSPF Version 3 between the PE and CE Routers
- Configure OSPF Sham Links for Layer 3 VPNs
- OSPF Sham Links Overview
- Configure OSPF Sham Links
- OSPF Sham Links Example
- Configure an OSPF Domain ID
- Hub-and-Spoke Layer 3 VPNs and OSPF Domain ID
- Configure RIP between the PE and CE Routers
- Configure Static Routes between the PE and CE Routers
- Limit the Routes Accepted from a CE Router
- Configure IPv6 between the PE and CE Routers
- Configure IPv6 on the PE Router
- Configure BGP or Static Routes on the PE Router
- Configure BGP on the PE Router to Handle IPv6 Routes
- Configure BGP on the PE Router for IPv4 and IPv6 Routes
- Configure Static Routes on the PE Router
- Configure IPv6 on the Interfaces
- Configure EBGP or IBGP Multihop between PE and CE Routers
- Configure Layer 3 VPNs to Carry IBGP Traffic
- Filter Traffic Based on the IP Header
- Egress Filtering Options
- Limitations for ATM and Frame Relay
- Other Limitations
- Configure a VPN Tunnel for VRF Table Lookup
- Configure a Logical Unit on the Loopback Interface
- Configure Multicast over Layer 3 VPNs
- Configure Packet Forwarding for Layer 3 VPNs
- Configure a GRE Tunnel Interface for Layer 3 VPNs
- Configure the GRE Tunnel Interface on the PE Router
- Configure the GRE Tunnel Interface on the CE Router
- Configure an ES Tunnel Interface for Layer 3 VPNs
- Configure the ES Tunnel Interface on the PE Router
- Configure the ES Tunnel Interface on the CE Router
- Configure IPSec Instead of MPLS between PE Routers
- Configure SCU and DCU for Layer 3 VPNs
- Protocol-Independent Load Balancing for Layer 3 VPNs
- Configure Protocol-Independent Load Balancing for Layer 3 VPNs
- Configure Protocol-Independent Load Balancing and Routing Policies
- Chapter:
Troubleshoot Layer 3 VPNs
[PDF 112 KB]
- Diagnose Common Problems
- Troubleshoot Layer 3 VPNs Using ping and traceroute
- Ping the CE Router from Another CE Router
- Ping Router CE2 from Router CE1
- Traceroute from Router CE1's Loopback Interface to Router CE2's Loopback Interface
- Ping Router CE1 from Router CE2
- Traceroute from Router CE2 to Router CE1
- Ping the Remote PE and CE Routers from the Local CE Router
- Ping Router CE2 from Router CE1
- Traceroute from Router CE1 to Router CE2
- Ping Router PE2 from Router CE1
- Traceroute from Router CE1 to Router PE2
- Pinging a CE Router from a Multiaccess Interface
- Ping the Directly Connected PE Routers from the CE Routers
- Ping Router PE1 from the Loopback Interface on Router CE1
- Traceroute from the Loopback Interface on Router CE1 to PE1
- Ping Router PE2 from the Loopback Interface on Router CE2
- Traceroute from the Loopback Interface on Router CE2 to PE2
- Ping the Directly Connected CE Routers from the PE Routers
- Ping the VPN Interface on Router CE1 from Router PE1
- Ping the Loopback Interface on Router CE1 from Router PE1
- Traceroute from Router PE1 to Router CE1
- Ping the VPN Interface on Router CE2 from Router PE2
- Ping the Loopback Interface on Router CE2 from Router PE2
- Traceroute from Router PE2 to Router CE2
- Ping the Remote CE Router from the Local PE Router
- Limitation on Pinging a Remote CE Router from a PE Router
- Ping a Layer 3 VPN
- Disable Normal TTL Decrementing for Layer 3 VPNs
- Indirect Next-hop Address Space and Route Reflectors
- Chapter:
Layer 3 VPN Configuration Examples
[PDF 593 KB]
- Configure a Simple Full-Mesh VPN Topology
- Enable an IGP on the PE and P Routers
- Enable RSVP and MPLS on the P Router
- Configure the MPLS LSP Tunnel between the PE Routers
- Configure IBGP on the PE Routers
- Configure Routing Instances for VPNs on the PE Routers
- Configure VPN Policy on the PE Routers
- Simple VPN Configuration Summarized by Router
- Router A (PE Router)
- Router B (P Router)
- Router C (PE Router)
- Configure a Full-Mesh VPN Topology with Route Reflectors
- Configure a Hub-and-Spoke VPN Topology
- Enable an IGP on the Hub-and-Spoke PE Routers
- Configure LDP on the Hub-and-Spoke PE Routers
- Configure IBGP on the PE Routers
- Configure VPN Routing Instances on the Hub-and-Spoke PE Routers
- Configure VPN Policy on the PE Routers
- Hub-and-Spoke VPN Configuration Summarized by Router
- Router D (Hub PE Router)
- Router E (Spoke PE Router)
- Router F (Spoke PE Router)
- Configure an LDP-over-RSVP VPN Topology
- Enable an IGP on the PE and P Routers
- Enable LDP on the PE and P Routers
- Enable RSVP and MPLS on the P Router
- Configure the MPLS LSP Tunnel between the P Routers
- Configure IBGP on the PE Routers
- Configure Routing Instances for VPNs on the PE Routers
- Configure VPN Policy on the PE Routers
- LDP-over-MPLS VPN Configuration Summarized by Router
- Router PE1
- Router P1
- Router P2
- Router P3
- Router PE2
- Configure an Application-Based Layer 3 VPN Topology
- Configuration on Router A
- Configuration on Router E
- Configuration for Router F
- Configure an OSPF Domain ID for a Layer 3 VPN
- Configure Interfaces on Router PE1
- Configure Routing Options on Router PE1
- Configure Protocols on Router PE1
- Configure Policy Options on Router PE1
- Configure the Routing Instance on Router PE1
- Configuration Summary for Router PE1
- Configure Overlapping VPNs Using Routing Table Groups
- Configure Routing Table Groups
- Configure Static Routes between the PE and CE Routers
- Configure the Routing Instance for VPN A
- Configure the Routing Instance for VPN AB
- Configure the Routing Instance for VPN B
- Configure VPN Policy
- Configure BGP between the PE and CE Routers
- Configure OSPF between the PE and CE Routers
- Configure Static, BGP, and OSPF Routes between PE and CE Routers
- Configure Overlapping VPNs Using Automatic Route Export
- Configure Overlapping VPNs with BGP and Automatic Route Export
- Configure Overlapping VPNs and Additional Tables
- Configure Automatic Route Export for all VRF Instances
- Configure a GRE Tunnel Interface between PE Routers
- Configure the Routing Instance on Router A
- Configure the Routing Instance on Router D
- Configure MPLS, BGP, and OSPF on Router A
- Configure MPLS, BGP, and OSPF on Router D
- Configure the Tunnel Interface on Router A
- Configure the Tunnel Interface on Router D
- Configure the Routing Options on Router A
- Configure the Routing Options on Router D
- Configuration Summary for Router A
- Configuration Summary for Router D
- Configure a GRE Tunnel Interface between a PE and CE Router
- Configure the Routing Instance without the Encapsulating Interface
- Configure the Routing Instance on Router PE1
- Configure the GRE Tunnel Interface on Router PE1
- Configure the Encapsulation Interface on Router PE1
- Configure the Routing Instance with the Encapsulating Interface
- Configure the Routing Instance on Router PE1
- Configure the GRE Tunnel Interface on Router PE1
- Configure the Encapsulation Interface on Router PE1
- Configure the GRE Tunnel Interface on Router CE1
- Configure an ES Tunnel Interface between a PE and CE Router
- Configure IPSec on Router PE1
- Configure the Routing Instance without the Encapsulating Interface
- Configure the Routing Instance on Router PE1
- Configure the ES Tunnel Interface on Router PE1
- Configure the Encapsulating Interface for the ES Tunnel
- Configure the Routing Instance with the Encapsulating Interface
- Configure the Routing Instance on Router PE1
- Configure the ES Tunnel Interface on Router PE1
- Configure the Encapsulating Interface on Router PE1
- Configure the ES Tunnel Interface on Router CE1
- Configure IPSec on Router CE1
- Chapter:
Layer 3 VPN Internet Access Examples
[PDF 277 KB]
- Non-VRF Internet Access
- CE Router Accesses Internet Independently of the PE Router
- PE Router Provides Layer 2 Internet Service
- Distributed Internet Access
- Route VPN and Internet Traffic through Different Interfaces
- Configure Interfaces on Router PE1
- Configure Routing Options on Router PE1
- Configure BGP, IS-IS, and LDP Protocols on Router PE1
- Configure a Routing Instance on Router PE1
- Configure Policy Options on Router PE1
- Traffic Routed by Different Interfaces Configuration Summarized by Router
- Router PE1
- Route VPN and Outgoing Internet Traffic through the Same Interface and Route Return Internet Traffic through a Different Interface
- Configuration for Router PE1
- Route VPN and Internet Traffic through the Same Interface Bidirectionally (VPN Has Public Addresses)
- Configure Routing Options on Router PE1
- Configure Routing Protocols on Router PE1
- Configure the Routing Instance on Router PE1
- Traffic Routed through the Same Interface Bidirectionally Configuration Summarized by Router
- Router PE1
- Route VPN and Internet Traffic through the Same Interface Bidirectionally (VPN Has Private Addresses)
- Configure Routing Options for Router PE1
- Configure a Routing Instance for Router PE1
- Configure Policy Options for Router PE1
- Traffic Routed by the Same Interface Bidirectionally (VPN Has Private Addresses) Configuration Summarized by Router
- Router PE1
- Route Internet Traffic through a Separate NAT Device
- Configure Interfaces on Router PE1
- Configure Routing Options for Router PE1
- Configure Routing Protocols on Router PE1
- Configure a Routing Instance for Router PE1
- Traffic Routed by Separate NAT Device Configuration Summarized by Router
- Router PE1
- Centralized Internet Access
- Route Internet Traffic through a Hub CE Router
- Configure a Routing Instance on Router PE1
- Configure Policy Options on Router PE1
- Internet Traffic Routed by a Hub CE Router Configuration Summarized by Router
- Router PE1
- Route Internet Traffic through Multiple CE Routers
- Configure a Routing Instance on Router PE1
- Configure Policy Options on Router PE1
- Configure a Routing Instance on Router PE3
- Configure Policy Options on Router PE3
- Route Internet Traffic through Multiple CE Routers Configuration Summarized by Router
- Router PE1
- Router PE2
- Router PE3
- Chapter:
Summary of Layer 3 VPN Configuration Statements
[PDF 42 KB]
- independent-domain
- inet6-vpn
- metric
- multihop
- multipath
- sham-link local
- sham-link-remote
- vpn-group-address
- vrf-table-label
- Chapter:
VPLS Overview
[PDF 30 KB]
- VPLS Overview
- VPLS Routing and Virtual Ports
- VPLS Standards
- Supported Platforms and PICs
- Chapter:
Configure VPLS
[PDF 114 KB]
- Configure Interfaces for VPLS Routing
- Configure the Interface Name
- Configure the Interface Encapsulation
- Enable VLAN Tagging
- Configure the VPLS Site
- Configure the Site Name and Site Identifier
- Configure the Site Range
- Configure the Size of the VPLS MAC Address Table
- Configure an Ethernet Switch as the CE Device
- Map VPLS Traffic to a Specific LSP
- Configure VPLS Filters and Policers
- Configure a VPLS Filter
- Configure an Interface-Specific Counter for VPLS
- Configure the VPLS Filter Match Conditions
- Configure an Action for the VPLS Filter
- Configure VPLS FTFs
- Precedence for Spanning Tree BPDU Packets
- Apply a VPLS Filter to an Interface
- Apply a VPLS Filter to a VPLS Routing Instance
- Configure a Filter for Flooded Traffic
- Configure a VPLS Policer
- Trace VPLS Traffic and Operations
- Chapter:
Summary of VPLS Configuration Statements
[PDF 50 KB]
- encapsulation
- mac-table-size
- site
- site-identifier
- site-range
- traceoptions
- vlan-id
- vlan-tagging
- vpls
- Chapter:
Interprovider and Carrier-of-Carriers VPNs Overview
[PDF 53 KB]
- Interprovider and Carrier-of-Carriers VPN Standards
- Traditional VPNs, Interprovider VPNs, and Carrier-of-Carriers VPNs
- Standard VPNs
- Interprovider and Carrier-of-Carriers VPNs
- Interprovider VPNs
- Link VRFs between Autonomous Systems
- Configure MP-EBGP between AS Border Routers
- Configure Multihop MP-EBGP between AS Border Routers
- Carrier-of-Carriers VPNs
- Internet Service Provider as the Customer
- VPN Service Provider as the Customer
- Chapter:
Configure Interprovider and Carrier-of-Carriers VPNs
[PDF 146 KB]
- Configure Interprovider VPNs
- Configure Interprovider VPNs Using MP-EBGP
- Configure RSVP
- Configure MPLS
- Configure BGP
- Configure OSPF
- Configure Interprovider VPNs Using Multihop MP-EBGP
- Configure the AS Border Routers
- Configure BGP
- Configure Policy Options
- Configure the PE Router
- Configure Carrier-of-Carriers VPNs
- Configure Carrier-of-Carriers VPN—Customer Provides Internet Service
- Configure the Carrier-of-Carriers VPN Service Customer's CE Router
- Configure MPLS
- Configure BGP
- Configure OSPF
- Configure Policy Options
- Configure the Carrier-of-Carriers VPN Service Provider's PE Routers
- Configure MPLS
- Configure BGP
- Configure IS-IS
- Configure LDP
- Configure a Routing Instance
- Configure Policy Options
- Configure Carrier-of-Carriers VPN—Customer Provides VPN Service
- Configure the Carrier-of-Carriers Customer's PE Router
- Configure MPLS
- Configure BGP
- Configure OSPF
- Configure LDP
- Configure VPN Service in the Routing Instance
- Configure Policy Options
- Configure the Carrier-of-Carriers Customer's CE Router
- Configure MPLS
- Configure BGP
- Configure OSPF and LDP
- Configure Policy Options
- Configure the Provider's PE Router
- Configure MPLS
- Configure a PE-Router-to-PE-Router BGP Session
- Configure IS-IS and LDP
- Configure Policy Options
- Configure a Routing Instance to Send Routes to the CE Router
- Configure BGP to Gather Interprovider and Carrier-of-Carriers VPNs Statistics
- Chapter:
Configuration Examples for Interprovider and Carrier-of-Carriers VPNs
[PDF 233 KB]
- Example Terminology
- Interprovider VPN Examples
- Interprovider VPN Example—MP-EBGP between ISP Peer Routers
- Configuration for Router A
- Configuration for Router B
- Configuration for Router C
- Configure for Router D
- Configuration for Router E
- Configuration for Router F
- Interprovider VPN Example—Multihop MP-EBGP
- Configuration for Router B
- Configuration for Router C
- Configuration for Router D
- Configuration for Router E
- Carrier-of-Carriers VPN Examples
- Carrier-of-Carriers VPN Example—Customer Provides Internet Service
- Configuration for Router A
- Configuration for Router B
- Configuration for Router C
- Configuration for Router D
- Configuration for Router E
- Configuration for Router F
- Configuration for Router G
- Configuration for Router H
- Configuration for Router I
- Configuration for Router J
- Configuration for Router K
- Configuration for Router L
- Carrier-of-Carriers VPN Example—Customer Provides VPN Service
- Configuration for Router A
- Configuration for Router B
- Configuration for Router C
- Configuration for Router D
- Configuration for Router E
- Configuration for Router F
- Configuration for Router G
- Configuration for Router H
- Configuration for Router I
- Configuration for Router J
- Configuration for Router K
- Configuration for Router L
- Multiple Instances for LDP and Carrier-of-Carriers VPNs
- Chapter:
Summary of the Interprovider and Carrier-of-Carriers VPNs Configuration Statements
[PDF 24 KB]
- labeled-unicast
- per-group-label
- traffic-statistics
- Chapter:
Layer 2 Circuit Overview
[PDF 40 KB]
- Layer 2 Circuit Overview
- Layer 2 Circuit Standards
- Layer 2 Circuit Policy
- Layer 2 Circuit Bandwidth Accounting and Call Admission Control
- Bandwidth Accounting and Call Admission Control Overview
- Selecting an LSP Based on the Bandwidth Constraint
- LSP Path Protection and CAC
- Secondary Paths and CAC
- Fast Reroute and CAC
- Link and Node Protection and CAC
- Chapter:
Layer 2 Circuit Configuration Guidelines
[PDF 98 KB]
- Configure Interfaces for Layer 2 Circuits
- Configure the Neighbor and Interface
- Configure the Protect Interface
- Configure the Interface Encapsulation Type for Layer 2 Circuits
- Configure ATM2 Interfaces for Layer 2 Circuits
- Configure the Virtual Circuit ID
- Configure LDP for Layer 2 Circuits
- Configure Layer 2 Circuit Policies
- Configure the Layer 2 Circuit Community
- Configure the Policy Statement for the Layer 2 Circuit Community
- Example: Configure a Policy for a Layer 2 Circuit Community
- Verify the Layer 2 Circuit Policy Configuration
- Configure the Control Word for Layer 2 Circuits
- Configure the Control Word for Frame Relay Interfaces
- Disable the Control Word for Layer 2 Circuits
- Configure ATM Trunking on Layer 2 Circuits
- Configure Bandwidth Allocation and Call Admission Control
- Trace Layer 2 Circuit Creation and Changes
- Chapter:
Layer 2 Circuits Example
[PDF 48 KB]
- Configure Router PE1
- Configure Router PE2
- Configure Router CE1
- Configure Router CE2
- Chapter:
Summary of Layer 2 Circuit Configuration Statements
[PDF 55 KB]
- bandwidth
- community
- control-word
- description
- install-nexthop
- interface
- neighbor
- no-control-word
- protect-interface
- traceoptions
- virtual-circuit-id
- Chapter:
Index
[]
- Chapter:
Index of Statements and Commands
[]
|