Administrative Group Constraints
To configure administrative group constraints (also known as color constraints) in Level-1 and Level-2 on L1-L2 IS:
• Configure support for required admin groups in NSM on all participating routers
• Configure required administrative groups on all participating interfaces
The configuration in this example forces the primary LSP to be setup through links that belong either to admin group A or C. A link that does not belong to either of these admin groups will not be used for setting up the LSP.
Figure 15-124: MPLS-TE Topology
R2
#configure terminal | Enter Configure mode. |
(config)#interface eth1 | Specify the interface (eth1) to configure, and enter Interface mode. |
(config-if)#ip address 13.1.1.2/24 | Configure ip address to the interface eth1. |
(config-if)#ip router isis 1 | Enable ISIS on interface eth1. |
(config-if)#isis circuit-type level-1 | Configure ISIS circuit-type as Level-1 |
(config)#interface eth2 | Enter Interface eth2 configure mode. |
(config-if)#ip address 15.1.1.2/24 | Configure ip address to the interface eth2. |
(config-if)#ip router isis 1 | Enable ISIS on interface eth2. |
(config-if)#isis circuit-type level-2 | Configure ISIS circuit-type as Level-2. |
(config-if)#commit | Commit candidate configuration to the running configuration |
(config-if)#exit | Exit from interface configuration mode. |
(config)#admin-group a 0 | Add new administrative groups and specify their names and assign bit values to them. |
(config)#admin-group b 1 | |
(config)#admin-group c 2 | |
(config)#admin-group d 3 | |
(config)#router isis 1 | Create an IS-IS routing instance for area 49 (1). |
(config-router)#metric-style wide | Configure the new style of metric type as wide. |
(config-router)#mpls traffic-eng router-id 2.2.2.2 | Configure MPLS-TE unique router-id TLV. |
(config-router)#mpls traffic-eng level-1 | Enable MPLS-TE in is-type Level-1. |
(config-router)#mpls traffic-eng level-2 | Enable MPLS-TE in is-type Level-2. |
(config-router)#net 49.0001.0000.0000.0002.00 | Configure the ISIS net address with area id as: 49.0001 and system id as: 0000.0000.0002. |
(config-router)#commit | Commit candidate configuration to the running configuration |
(config-router)#exit | Exit Router mode. |
(config)#interface eth1 | Enter the interface configure mode. |
(config-if)#admin-group a | Add administrative groups to the links. When used in the interface mode, this command adds a link between an Interface and a group. The name is the name of the group Previously configured. You can have multiple groups per Interface. |
(config-if)#admin-group c | |
(config-if)#exit | Exit interface configure mode. |
(config)#interface eth2 | Enter the interface configure mode. |
(config-if)#admin-group b | Add administrative groups to the links. When used in the interface mode, this command adds a link between an Interface and a group. The name is the name of the group previously configured. You can have multiple groups per Interface. |
(config-if)#admin-group d | |
(config-if)#commit | Commit candidate configuration to the running configuration |
(config-if)#end | Exit interface configure mode. |
R1
#configure terminal | Enter Configure mode. |
(config)#interface eth1 | Specify the interface (eth1) to configure, and enter Interface mode. |
(config-if)#ip address 13.1.1.1/24 | Configure ip address to the interface eth1. |
(config-if)#ip router isis 1 | Enable ISIS on interface eth1. |
(config-if)#isis circuit-type level-1 | Configure ISIS circuit-type as Level-1 |
(config-if)#commit | Commit candidate configuration to the running configuration |
(config-if)#exit | Exit interface configure mode. |
(config)#admin-group a 0 | Add new administrative groups and specify their names and assign bit values to them. |
(config)#admin-group c 2 | |
(config)#router isis 1 | Create an IS-IS routing instance for area 49 (1). |
(config-router)#metric-style wide | Configure the new style of metric type as wide. |
(config-router)#is-type level-1 | Configure IS-Type as Level-1 router. |
(config-router)#mpls traffic-eng router-id 1.1.1.1 | Configure MPLS-TE unique router-id TLV. |
(config-router)#mpls traffic-eng level-1 | Enable MPLS-TE in is-type Level-1. |
(config-router)#net 49.0001.0000.0000.0001.00 | Configure the ISIS net address with area id as: 49.0001 and system-id as: 0000.0000.0001. |
(config-router)#commit | Commit candidate configuration to the running configuration |
(config-router)#exit | Exit Router mode. |
(config)#interface eth1 | Enter the interface configure mode. |
(config-if)#admin-group a | Add administrative groups to the links. When used in the interface mode, this command adds a link between an Interface and a group. The name is the name of the group Previously configured. You can have multiple groups per Interface. |
(config-if)#admin-group c | |
(config-if)#commit | Commit candidate configuration to the running configuration |
(config-if)#end | Exit interface configure mode. |
R3
#configure terminal | Enter Configure mode. |
(config)#interface eth2 | Specify the interface (eth2) to configure, and enter Interface mode. |
(config-if)#ip address 15.1.1.3/24 | Configure ip address to the interface eth1. |
(config-if)#ip router isis 1 | Enable ISIS on interface eth1. |
(config-if)#isis circuit-type level-2 | Configure ISIS circuit-type as Level-1 |
(config-if)#commit | Commit candidate configuration to the running configuration |
(config-if)#exit | Exit interface configure mode. |
(config)#admin-group b 1 | Add new administrative groups and specify their names and assign bit values to them. |
(config)#admin-group d 3 | |
(config)#router isis 1 | Create an IS-IS routing instance for area 49 (1). |
(config-router)#metric-style wide | Configure the new style of metric type as wide. |
(config-router)#is-type level-2 | Configure IS-Type as Level-2 router. |
(config-router)#mpls traffic-eng router-id 3.3.3.3 | Configure MPLS-TE unique router-id TLV. |
(config-router)#mpls traffic-eng level-2 | Enable MPLS-TE in is-type Level-2. |
(config-router)#net 49.0001.0000.0000.0003.00 | Configure the ISIS net address with area id as: 49.0001 and system-id as: 0000.0000.0003. |
(config-router)#commit | Commit candidate configuration to the running configuration |
(config-router)#exit | Exit Router mode. |
(config)#interface eth2 | Enter the interface configure mode. |
(config-if)#admin-group b | Add administrative groups to the links. When used in the interface mode, this command adds a link between an Interface and a group. The name is the name of the group Previously configured. You can have multiple groups per Interface. |
(config-if)#admin-group d | |
(config-if)#commit | Commit candidate configuration to the running configuration |
(config-if)#end | Exit interface configure mode. |
Validation
R2
Check the output of “show clns neighbors” to verify that ISIS adjacency is up.
#show clns neighbors
Area 1:
System Id Interface SNPA State Holdtime Type Protocol
0000.0000.0001 eth1 5254.00bb.5e85 Up 24 L1 IS-IS
0000.0000.0003 eth2 5254.00ac.f960 Up 9 L2 IS-IS
Check the output of “show isis database level-1 verbose” to verify that LSP does have configured admin-group constraints in Level-1.
straints in Level-1.
R2#show isis database level-1 verbose
Tag 1: VRF : default
IS-IS Level-1 Link State Database:
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
0000.0000.0001.00-00 0x00000004 0x3022 1020 0/0/0
Area Address: 49.0001
NLPID: 0xCC
IP Address: 13.1.1.1
Router ID: 1.1.1.1
Metric: 10 IS-Extended 0000.0000.0001.01
Admin-Group:
Group 0
Group 2
IPv4 Interface Address: 13.1.1.1
Neighbor IP Address: 13.1.1.1
Maximum Link Bandwidth: 10g
Reservable Bandwidth: 10g
Unreserved Bandwidth:
Unreserved Bandwidth at priority 0: 10g
Unreserved Bandwidth at priority 1: 10g
Unreserved Bandwidth at priority 2: 10g
Unreserved Bandwidth at priority 3: 10g
Unreserved Bandwidth at priority 4: 10g
Unreserved Bandwidth at priority 5: 10g
Unreserved Bandwidth at priority 6: 10g
Unreserved Bandwidth at priority 7: 10g
TE-Default Metric: 10
Metric: 10 IP-Extended 13.1.1.0/24
0000.0000.0001.01-00 0x00000001 0x8F3D 820 0/0/0
Metric: 0 IS-Extended 0000.0000.0001.00
Metric: 0 IS-Extended 0000.0000.0002.00
0000.0000.0002.00-00* 0x00000004 0xBB8D 1070 0/0/0
Area Address: 49.0001
NLPID: 0xCC
IP Address: 13.1.1.2
Router ID: 2.2.2.2
Metric: 10 IS-Extended 0000.0000.0001.01
Admin-Group:
Group 0
Group 2
IPv4 Interface Address: 13.1.1.2
Neighbor IP Address: 13.1.1.1
Maximum Link Bandwidth: 10g
Reservable Bandwidth: 10g
Unreserved Bandwidth:
Unreserved Bandwidth at priority 0: 10g
Unreserved Bandwidth at priority 1: 10g
Unreserved Bandwidth at priority 2: 10g
Unreserved Bandwidth at priority 3: 10g
Unreserved Bandwidth at priority 4: 10g
Unreserved Bandwidth at priority 5: 10g
Unreserved Bandwidth at priority 6: 10g
Unreserved Bandwidth at priority 7: 10g
TE-Default Metric: 10
Metric: 10 IP-Extended 13.1.1.0/24
Check the output of “show isis database level-2 verbose” to verify that LSP does have configured admin-group constraints in Level-2.
R2#show isis database level-2 verbose
Tag 1: VRF : default
IS-IS Level-2 Link State Database:
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
0000.0000.0002.00-00* 0x00000005 0x1FDE 1058 0/0/0
Area Address: 49.0001
NLPID: 0xCC
IP Address: 15.1.1.2
Router ID: 2.2.2.2
Metric: 10 IS-Extended 0000.0000.0003.01
Admin-Group:
Group 1
Group 3
IPv4 Interface Address: 15.1.1.2
Neighbor IP Address: 15.1.1.3
Maximum Link Bandwidth: 10g
Reservable Bandwidth: 10g
Unreserved Bandwidth:
Unreserved Bandwidth at priority 0: 10g
Unreserved Bandwidth at priority 1: 10g
Unreserved Bandwidth at priority 2: 10g
Unreserved Bandwidth at priority 3: 10g
Unreserved Bandwidth at priority 4: 10g
Unreserved Bandwidth at priority 5: 10g
Unreserved Bandwidth at priority 6: 10g
Unreserved Bandwidth at priority 7: 10g
TE-Default Metric: 10
Metric: 10 IP-Extended 15.1.1.0/24
Metric: 10 IP-Extended 13.1.1.0/24
0000.0000.0003.00-00 0x00000004 0x71BF 1081 0/0/0
Area Address: 49.0001
NLPID: 0xCC
IP Address: 15.1.1.3
Router ID: 3.3.3.3
Metric: 10 IS-Extended 0000.0000.0003.01
Admin-Group:
Group 1
Group 3
IPv4 Interface Address: 15.1.1.3
Neighbor IP Address: 15.1.1.3
Maximum Link Bandwidth: 10g
Reservable Bandwidth: 10g
Unreserved Bandwidth:
Unreserved Bandwidth at priority 0: 10g
Unreserved Bandwidth at priority 1: 10g
Unreserved Bandwidth at priority 2: 10g
Unreserved Bandwidth at priority 3: 10g
Unreserved Bandwidth at priority 4: 10g
Unreserved Bandwidth at priority 5: 10g
Unreserved Bandwidth at priority 6: 10g
Unreserved Bandwidth at priority 7: 10g
TE-Default Metric: 10
Metric: 10 IP-Extended 15.1.1.0/24
0000.0000.0003.01-00 0x00000001 0x9333 827 0/0/0
Metric: 0 IS-Extended 0000.0000.0003.00
Metric: 0 IS-Extended 0000.0000.0002.00
R1
Check the output of “show clns neighbors” to verify that ISIS adjacency is up.
#show clns neighbors
Area 1:
System Id Interface SNPA State Holdtime Type Protocol
0000.0000.0002 eth1 5254.00f6.4ae7 Up 7 L1 IS-IS
Check the output of “show isis database level-1 verbose” to verify that LSP does have configured admin-group constraints in Level-1.
R1#show isis database level-1 verbose
Tag 1: VRF : default
IS-IS Level-1 Link State Database:
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
0000.0000.0001.00-00* 0x00000004 0x3022 1105 0/0/0
Area Address: 49.0001
NLPID: 0xCC
IP Address: 13.1.1.1
Router ID: 1.1.1.1
Metric: 10 IS-Extended 0000.0000.0001.01
Admin-Group:
Group 0
Group 2
IPv4 Interface Address: 13.1.1.1
Neighbor IP Address: 13.1.1.1
Maximum Link Bandwidth: 10g
Reservable Bandwidth: 10g
Unreserved Bandwidth:
Unreserved Bandwidth at priority 0: 10g
Unreserved Bandwidth at priority 1: 10g
Unreserved Bandwidth at priority 2: 10g
Unreserved Bandwidth at priority 3: 10g
Unreserved Bandwidth at priority 4: 10g
Unreserved Bandwidth at priority 5: 10g
Unreserved Bandwidth at priority 6: 10g
Unreserved Bandwidth at priority 7: 10g
TE-Default Metric: 10
Metric: 10 IP-Extended 13.1.1.0/24
0000.0000.0001.01-00* 0x00000001 0x8F3D 905 0/0/0
Metric: 0 IS-Extended 0000.0000.0001.00
Metric: 0 IS-Extended 0000.0000.0002.00
0000.0000.0002.00-00 0x00000004 0xBB8D 1153 0/0/0
Area Address: 49.0001
NLPID: 0xCC
IP Address: 13.1.1.2
Router ID: 2.2.2.2
Metric: 10 IS-Extended 0000.0000.0001.01
Admin-Group:
Group 0
Group 2
IPv4 Interface Address: 13.1.1.2
Neighbor IP Address: 13.1.1.1
Maximum Link Bandwidth: 10g
Reservable Bandwidth: 10g
Unreserved Bandwidth:
Unreserved Bandwidth at priority 0: 10g
Unreserved Bandwidth at priority 1: 10g
Unreserved Bandwidth at priority 2: 10g
Unreserved Bandwidth at priority 3: 10g
Unreserved Bandwidth at priority 4: 10g
Unreserved Bandwidth at priority 5: 10g
Unreserved Bandwidth at priority 6: 10g
Unreserved Bandwidth at priority 7: 10g
TE-Default Metric: 10
Metric: 10 IP-Extended 13.1.1.0/24
R3
Check the output of “show clns neighbors” to verify that ISIS adjacency is up.
#show clns neighbors
Area 1:
System Id Interface SNPA State Holdtime Type Protocol
0000.0000.0002 eth2 5254.0062.3ea6 Up 28 L2 IS-IS
Check the output of “show isis database level-2 verbose” to verify that LSP does have configured admin-group constraints in Level-2.
R3#show isis database level-2 verbose
Tag 1: VRF : default
IS-IS Level-2 Link State Database:
LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
0000.0000.0002.00-00 0x00000005 0x1FDE 1037 0/0/0
Area Address: 49.0001
NLPID: 0xCC
IP Address: 15.1.1.2
Router ID: 2.2.2.2
Metric: 10 IS-Extended 0000.0000.0003.01
Admin-Group:
Group 1
Group 3
IPv4 Interface Address: 15.1.1.2
Neighbor IP Address: 15.1.1.3
Maximum Link Bandwidth: 10g
Reservable Bandwidth: 10g
Unreserved Bandwidth:
Unreserved Bandwidth at priority 0: 10g
Unreserved Bandwidth at priority 1: 10g
Unreserved Bandwidth at priority 2: 10g
Unreserved Bandwidth at priority 3: 10g
Unreserved Bandwidth at priority 4: 10g
Unreserved Bandwidth at priority 5: 10g
Unreserved Bandwidth at priority 6: 10g
Unreserved Bandwidth at priority 7: 10g
TE-Default Metric: 10
Metric: 10 IP-Extended 15.1.1.0/24
Metric: 10 IP-Extended 13.1.1.0/24
0000.0000.0003.00-00* 0x00000004 0x71BF 1063 0/0/0
Area Address: 49.0001
NLPID: 0xCC
IP Address: 15.1.1.3
Router ID: 3.3.3.3
Metric: 10 IS-Extended 0000.0000.0003.01
Admin-Group:
Group 1
Group 3
IPv4 Interface Address: 15.1.1.3
Neighbor IP Address: 15.1.1.3
Maximum Link Bandwidth: 10g
Reservable Bandwidth: 10g
Unreserved Bandwidth:
Unreserved Bandwidth at priority 0: 10g
Unreserved Bandwidth at priority 1: 10g
Unreserved Bandwidth at priority 2: 10g
Unreserved Bandwidth at priority 3: 10g
Unreserved Bandwidth at priority 4: 10g
Unreserved Bandwidth at priority 5: 10g
Unreserved Bandwidth at priority 6: 10g
Unreserved Bandwidth at priority 7: 10g
TE-Default Metric: 10
Metric: 10 IP-Extended 15.1.1.0/24
0000.0000.0003.01-00* 0x00000001 0x9333 808 0/0/0
Metric: 0 IS-Extended 0000.0000.0003.00
Metric: 0 IS-Extended 0000.0000.0002.00
Last modified date: 08/28/2023