OcNOS-RON : Multi-Protocol Label Switching Guide : Multi-Protocol Label Switching Configuration Guide : MPLS-TP Layer 2 Virtual Circuit
MPLS-TP Layer 2 Virtual Circuit
The MPLS-TP Layer 2 Virtual Circuit (VC) is a point-to-point Layer-2 connection that is transported by a Multi-Protocol Label Switching Transport Profile (MPLS-TP) on the service provider’s network. The Layer 2 circuit is transported over a single Label Switched Path (LSP) tunnel between two Provider Edge (PE) routers.
Topology
The diagram below illustrates the configuration example in this chapter. Interfaces eth2 on PE1 and eth3 on PE2 are connected to the customer network (Host3 and Host 4). Interfaces eth1 on PE1 and eth2 on PE2 are connected to the MPLS-TP cloud. The following is a summary of the VC configuration process:
Configure the VC
Bind the customer interface to the VC
Map the VC to the tunnel
Layer 2 Virtual Circuit
The configurations are based on the network shown in Figure 14-1.
For tunnel connectivity, refer to Figure 13-1.
For details about configuring a co-routed tunnel, refer to Co-Routed Bi-Directional Tunnel.
Configure Virtual Circuit
Each VC ID uniquely identifies the Layer 2 circuit among all the Layer-2 circuits.
Note: Both PE routers (endpoints) must be configured with the same VC-ID.
PE1 (NSM)
 
#configure terminal
Enter configure mode.
(config)#mpls l2-circuit VC-1 101 300 3.3.3.3 200 grp-1 manual
Configure the virtual circuit (VC) for PE2. In this example, VC-1 is the VC name, 101 is the VC ID, 300 is the peer global ID, 3.3.3.3 is the VC endpoint node ID, 200 is VC endpoint, AC-ID grp-1 is the group name.
PE2 (NSM)
 
#configure terminal
Enter configure mode.
(config)#mpls l2-circuit VC-1 101 100 1.1.1.1 200 grp-1 manual
Configure the virtual circuit (VC) for PE1. In this example, VC-1 is the VC name, 101 is the VC ID, 100 is the peer global ID, 1.1.1.1 is the VC endpoint node ID, 200 is VC endpoint, VC is VC-ID, grp-1 is the group name.
Bind Customer Interface to VC
Attach the Customer Interface to the VC.
Note: Layer 2 VCs can only be bound to Layer 2 interfaces. VC encapsulation should be Ethernet (default), VLAN, HDLC or PPP.
Layer-2 Untagged Traffic
Use Access mode for Layer 2 untagged traffic.
PE1 (NSM)
 
#configure terminal
Enter configure mode.
(config)#bridge 1 protocol ieee vlan- bridge
Configure the VLAN for bridge 1.
(config)#interface eth2
Enter interface mode.
(config-if)#switchport
Switch to Layer 2 mode.
(config-if)#bridge-group 1
Associate the eth2 interface with bridge group 1.
(config-if)#switchport mode access
Set the switching characteristics of this interface to access mode.
(config-if)#mpls-tp service-interface type layer-2 200
Configure the service interface.in this example, local AC-ID is 200.
(config-if)#mpls-l2-circuit VC-1 ethernet
Bind the access interface to the Ethernet VC.
PE2 (NSM)
 
#configure terminal
Enter configure mode.
(config)#bridge 1 protocol ieee vlan- bridge
Specify the VLAN for bridge 1.
(config)#interface eth3
Enter interface mode.
(config-if)#switchport
Switch to Layer 2 mode.
(config-if)#bridge-group 1
Associate the eth3 interface with bridge group 1.
(config-if)#switchport mode access
Set the switching characteristics of this interface to Access mode.
(config-if)#mpls-tp service-interface type layer-2 200
Configure the service interface.In this example, local AC-ID is 200.
(config-if)#mpls-l2-circuit VC-1 ethernet
Bind the interface to the VC.
Layer-2 Tagged Traffic
Use
Trunk mode for Layer 2 tagged traffic. The following configuration allows only VLAN 2 and 3 traffic.
PE1
 
#configure terminal
Enter configure mode.
(config)#bridge 1 protocol ieee vlan- bridge
Specify the VLAN for bridge 1.
(config)#mpls l2-circuit VC-2 201 300 3.3.3.3 200 grp-1
Configure the VC for PE2. In this example, VC-2 is the VC name, 201 is the VC ID, 300 is the peer global ID, 3.3.3.3 is the VC endpoint node ID, 200 is VC endpoint VC-ID and grp-1 is the group name.
 
(config-pseudowire)#control-word
Enable Control-word.
(config-pseudowire)#manual-pseudowire
Configure pseudowire manual (no signaling).
(config-pseduowire)#exit
Exit pseudowire mode.
(config)#vlan database
Enter the VLAN configuration mode.
(config-vlan)#vlan 2 bridge 1
Enable the state of VLAN 2 on bridge 1.
(config-vlan)#exit
Exit the VLAN configuration mode.
(config)#interface eth2
Enter interface mode.
(config-if)#switchport
Switch to Layer 2 mode.
(config-if)#bridge-group 1
Associate the eth2 interface with bridge group 1.
(config-if)#switchport mode trunk
Configure the switching characteristics of this interface to Trunk mode.
(config-if)#switchport trunk allowed vlan add 2
Enable VLAN ID 2 on this port.
(config-if)#mpls-tp service-interface type layer-2 200
Configure the service interface.in this example local AC-id is 200.
(config-if)#mpls-l2-circuit VC-2 vlan 2
Allow VLAN 2 traffic on this VC.
PE2
 
#configure terminal
Enter configure mode.
(config)#bridge 1 protocol ieee vlan- bridge
Specify the VLAN for bridge 1.
(config)#mpls l2-circuit VC-2 201 100 1.1.1.1 200 grp-1
Configure the VC for PE2. In this example, VC-2 is the VC name, 201 is the VC ID and 1.1.1.1 is the VC endpoint node-id.
 
(config-pseudowire)#control-word
Enable Control-word.
(config-pseudowire)#manual-pseudowire
Configure pseudowire manual (no signaling).
(config-pseduowire)#exit
Exit pseudowire mode.
(config)#interface eth3
Enter interface mode.
(config-if)#switchport
Switch to Layer 2 mode.
(config-if)#bridge-group 1
Associate the eth1 interface with bridge group 1.
(config-if)#switchport mode trunk
Configure the switching characteristics of this interface to Trunk mode.
(config-if)#switchport trunk allowed vlan add 2
Enable VLAN ID 2 on this port.
(config-if)#mpls-tp service-interface type layer-2 200
Configure the service interface.in this example local AC-id is 200.
(config-if)#mpls-l2-circuit VC-2 vlan 2
Allow VLAN 2 traffic on this VC.
Map VC to Tunnel
PE1 (NSM)
 
#configure terminal
Enter configure mode.
(config)#mpls l2-circuit-fib-entry 101 1111 2222 tp-tunnel tnl1 eth2
Configured an FIB entry. In this example, 111 is the incoming label, 2222 is the outgoing label, 3.3.3.3 is the endpoint, eth2 is the AC interface name, and tnl1 is the tunnel name.
PE2 (NSM)
 
#configure terminal
Enter configure mode.
(config)#mpls l2-circuit-fib-entry 101 2222 1111 tp-tunnel tnl2 eth3
Configure an FIB entry. In this example, 2222 is the incoming label, 1111 is the outgoing label, 3.3.3.3 is the endpoint, eth3 is the AC interface name, and tnl2 is the tunnel name.
Validation
For a correct configuration, the following commands should provide these results:
Status is Active in the show mpls vc-table command on ingress/egress for the configured virtual circuit
Ping from CE1 to CE2 is successful
Validation is displayed in the following example. The command used to display Layer 2 virtual circuit information:
show mpls mapped-routes (in the NSM daemon)
 
#show mpls vc-table
VC-ID Vlan-ID Inner-Vlan-ID Access-Intf Network-Intf Out Label tunnel-Label Nexthop Status
100 2 N/A eth1 eth2 1111 2001 N/A Active