Cisco 10000 Series Router Software
Configuration Guide
June, 2010
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: OL-2226-23
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
IMPLIED, INCLUDING, WITHOUT
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Cisco 10000 Series Router Software Configuration Guide
Obtaining Documentation, Obtaining Support, and Security Guidelinesi-xxxiv
CHAPTER
1Broadband Aggregation and Leased-Line Overview1-1
Hardware Requirements1-1
Checking Hardware and Software Compatibility1-1
Broadband Architecture Models1-2
PPP Termination and Aggregation Architectures1-2
PTA to Virtual Routing and Forwarding Architecture1-3
PTA to Multiprotocol Label Switching Virtual Private Network Architecture1-4
L2TP Architectures1-5
L2TP to Virtual Routing and Forwarding Architecture1-5
L2TP over MPLS to Virtual Routing and Forwarding Instance1-6
L2TP Access Concentrator Architecture1-7
Routed Bridge Encapsulation Architectures1-7
RBE to Virtual Routing and Forwarding Architecture1-8
RBE to Multiprotocol Label Switching Virtual Private Network Architecture1-9
IP and MPLS Applications1-13
Single Ingress and Single Egress Provider Edge Applications1-14
Single Ingress and Two Egress Provider Edge Applications1-14
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
iii
Contents
Multiple Ingress and Multiple Egress Provider Edge Applications1-15
New Features, Enhancements, and Changes1-15
New Features in Cisco IOS Release 12.2(33)XNE31-16
New Features in Cisco IOS Release 12.2(33)XNE1-16
New Features in Cisco IOS Release 12.2(33)SB31-18
New Features in Cisco IOS Release 12.2(33)SB21-18
New Features in Cisco IOS Release 12.2(33)SB1-18
New Features in Cisco IOS Release 12.2(31)SB51-19
New Features in Cisco IOS Release 12.2(31)SB31-19
New Features in Cisco IOS Release 12.2(31)SB21-20
New Features in Cisco IOS Release 12.2(28)SB11-21
New Features in Cisco IOS Release 12.2(28)SB1-21
New Features in Cisco IOS Release 12.3(7)XI71-25
New Features in Cisco IOS Release 12.3(7)XI31-26
New Features in Cisco IOS Release 12.3(7)XI21-26
New Features in Cisco IOS Release 12.3(7)XI11-26
CHAPTER
2Scalability and Performance2-1
Line Card VC Limitations2-1
Limitations and Restrictions2-3
Scaling Enhancements in Cisco IOS Release 12.2(33)XNE2-4
Scaling Enhancements in Cisco IOS Release 12.2(33)SB2-5
Layer 4 Redirect Scaling2-5
Scaling Enhancements in Cisco IOS Release 12.3(7)XI12-6
Scaling Enhancements in Cisco IOS Release 12.3(7)XI22-7
Queue Scaling2-7
VC Scaling2-8
Scaling Enhancements in Cisco IOS Release 12.2(28)SB2-8
Configuring the Cisco 10000 Series Router for High Scalability2-8
Configuring Parameters for RADIUS Authentication2-9
Configuring L2TP Tunnel Settings2-9
VPDN Group Session Limiting2-10
Configuring the PPP Authentication Timeout2-10
Disabling Cisco Discovery Protocol2-10
Disabling Gratuitous ARP Requests2-11
Configuring a Virtual Template Without Interface-Specific Commands2-11
Cisco 10000 Series Router Software Configuration Guide
iv
OL-2226-23
Monitoring PPP Sessions Using the SNMP Management Tools2-13
SNMP Process and High CPU Utilization2-13
CISCO-ATM-PVCTRAP-EXTN-MIB2-14
Configuring the Trunk Interface Input Hold Queue2-15
Configuring no atm pxf queuing2-15
Configuring atm pxf queuing2-16
Configuring keepalive2-17
Enhancing Scalability of Per-User Configurations2-17
Setting VRF and IP Unnumbered Interface Configurations in User Profiles2-18
Setting VRF and IP Unnumbered Interface Configuration in a Virtual Interface Template2-18
Redefining User Profiles to Use the ip:vrf-id and ip:ip-unnumbered VSAs2-18
Placing PPPoA Sessions in Listening Mode2-19
Scaling L2TP Tunnel Configurations2-19
Using the RADIUS Attribute cisco-avpair="lcp:interface-config"2-20
Using Full Virtual Access Interfaces2-20
Contents
CHAPTER
Preventing Full Virtual Access Interfaces2-21
3Configuring Remote Access to MPLS VPN3-1
MPLS VPN Architecture3-2
Access Technologies3-3
PPP over ATM to MPLS VPN3-4
PPP over Ethernet to MPLS VPN3-5
RBE over ATM to MPLS VPN3-7
MPLS VPN ID3-7
DHCP Relay Agent Information Option—Option 823-9
DHCP Relay Support for MPLS VPN Suboptions3-9
Feature History for RA to MPLS VPN3-10
Restrictions for RA to MPLS VPN3-10
Prerequisites for RA to MPLS VPN3-11
Configuration Tasks for RA to MPLS VPN3-12
Configuring the MPLS Core Network3-12
Enabling Label Switching of IP Packets on Interfaces3-12
Configuring Virtual Routing and Forwarding Instances3-13
Associating VRFs3-13
Configuring Multiprotocol BGP PE to PE Routing Sessions3-14
Configuring Access Protocols and Connections3-16
Configuring a Virtual Template Interface3-17
Configuring PPP over ATM Virtual Connections and Applying Virtual Templates3-18
Configuring PPPoE over ATM Virtual Connections and Applying Virtual Templates3-18
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
v
Contents
Configuring PPPoE over Ethernet Virtual Connections and Applying Virtual Templates3-20
Configuring RBE over ATM Virtual Connections3-22
Configuring and Associating Virtual Private Networks3-28
Configuring Virtual Private Networks3-28
Associating VPNs with a Virtual Template Interface3-28
Configuring RADIUS User Profiles for RADIUS-Based AAA3-30
Verifying VPN Operation3-30
Configuration Examples for RA to MPLS VPN3-30
PPPoA to MPLS VPN Configuration Example3-31
PPPoE to MPLS VPN Configuration Example3-34
RBE to MPLS VPN Configuration Example3-38
Monitoring and Maintaining an MPLS Configuration3-39
Verifying the Routing Protocol Is Running3-40
Verifying MPLS3-40
Verifying Connections Between Neighbors3-40
Verifying Label Distribution3-41
Verifying Label Bindings3-42
Verifying Labels Are Set3-43
CHAPTER
Monitoring and Maintaining the MPLS VPN3-43
Verifying VRF Configurations3-44
Verifying the Routing Table3-44
Verifying the PE to PE Routing Protocols3-45
Verifying the PE to CE Routing Protocol3-46
Verifying the MPLS VPN Labels3-46
Testing the VRF3-46
Monitoring and Maintaining PPPoX to MPLS VPN3-47
Monitoring and Maintaining RBE to MPLS VPN3-48
4Configuring Multiprotocol Label Switching4-1
BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN4-1
Feature History for BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN4-2
Restrictions for BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN4-3
Prerequisites for BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN4-3
IGP Convergence Acceleration4-3
Configuring IGP Convergence Acceleration4-4
Configuring BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN4-4
Configuring Multipath Load Sharing for eBGP and iBGP4-5
Verifying Multipath Load Sharing for eBGP and iBGP4-5
Configuration Examples for BGP Multipath Load Sharing for eBGP and iBGP in an MPLS VPN4-5
Cisco 10000 Series Router Software Configuration Guide
vi
OL-2226-23
eBGP and iBGP Multipath Load Sharing Configuration Example4-6
Verifying eBGP and iBGP Multipath Load Sharing4-6
Monitoring and Maintaining BGP Multipath Load Sharing for eBGP and iBGP4-7
IPv6 VPN over MPLS4-7
Feature History for IPv6 VPN over MPLS4-8
Prerequisites for Implementing IPv6 VPN over MPLS4-8
Restrictions for Implementing IPv6 VPN over MPLS4-9
Configuration Tasks for Implementing IPv6 VPN over MPLS4-9
BGP Features4-10
IPv6 Internet Access4-11
VRF-Aware Router Applications4-12
VRF-Lite4-12
QoS Features4-12
Configuration Example for Implementing IPv6 VPN over MPLS4-13
Monitoring and Maintaining IPv6 VPN over MPLS4-15
Contents
Session Limit Per VRF4-15
Application of VPDN Parameters to VPDN Groups4-16
VPDN Template Configuration4-17
Feature History for Session Limit Per VRF4-17
Restrictions for Session Limit Per VRF4-17
Prerequisites for Session Limit Per VRF4-17
Configuring Session Limit Per VRF4-18
Verifying a Session Limit Per VRF Configuration4-19
Configuration Examples for Session Limit Per VRF4-19
Monitoring and Maintaining Session Limit Per VRF4-21
Half-Duplex VRF4-21
Upstream and Downstream VRFs4-22
Reverse Path Forwarding Check Support4-23
Feature History for Half-Duplex VRF4-23
Restrictions for Half-Duplex VRF4-23
Prerequisites for Half-Duplex VRF4-23
Configuration Tasks for Half-Duplex VRF4-24
Configuring Upstream and Downstream VRFs on the L2TP Access Concentrator and PE
Router4-24
Associating VRFs4-25
Configuring RADIUS4-26
Configuration Examples for Half-Duplex VRF4-26
Hub and Spoke Sample Configuration with Half-Duplex VRFs4-27
RADIUS Sample Configuration4-28
Monitoring and Maintaining Half-Duplex VRF4-29
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
vii
Contents
CHAPTER
5Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server5-1
IP Reassembly5-1
Feature History for IP Reassembly5-2
Layer 2 Access Concentrator5-2
Tunnel Sharing5-4
Tunnel Service Authorization5-4
Tunnel Selection5-4
Sessions per Tunnel Limiting5-5
Session Load Balancing5-6
Session Load Failover5-6
Feature History for LAC5-6
Restrictions for LAC5-7
Required Configuration Tasks for LAC5-7
Enabling the LAC to Look for Tunnel Definitions5-7
Optional Configuration Tasks for LAC5-7
Enabling Sessions with Different Domains to Share the Same Tunnel5-8
Enabling the LAC to Conduct Tunnel Service Authorization5-8
Configuring Sessions Per Tunnel Limiting on the LAC5-12
RADIUS Server Optional Configuration Tasks for LAC5-13
Enabling Tunnel Sharing for RADIUS Services5-13
Enabling the RADIUS Server to Conduct Tunnel Service Authorization5-14
Configuring Sessions Per Tunnel Limiting in the RADIUS Service Profile5-16
Configuration Example for LAC5-17
Monitoring and Maintaining LAC5-21
viii
L2TP Network Server5-22
Virtual Template Interface5-23
Virtual Routing and Forwarding Instance5-23
Per VRF AAA5-23
Private Servers5-24
RADIUS Attribute Screening5-24
Packet Fragmentation5-24
Tunnel Accounting5-25
Tunnel Authentication5-25
Named Method Lists5-27
Framed-Route VRF Aware5-27
Feature History for LNS5-28
Restrictions for the LNS5-28
Prerequisites for LNS5-28
Required Configuration Tasks for LNS5-29
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Configuring the Virtual Template Interface5-29
Configuring the LNS to Initiate and Receive L2TP Traffic5-29
Optional Configuration Tasks for LNS5-30
Configuring per VRF AAA Services5-31
Configuring a VRF on the LNS5-36
Configuring Sessions per Tunnel Limiting on the LNS5-36
Configuring RADIUS Attribute Accept or Reject Lists5-37
Configuring the LNS for RADIUS Tunnel Accounting5-39
Configuring the LNS for RADIUS Tunnel Authentication5-42
6Configuring PPPoE over Ethernet and IEEE 802.1Q VLAN6-1
PPPoE over Ethernet6-1
Feature History for PPPoE over Ethernet6-2
Restrictions for PPPoE over Ethernet6-2
Configuration Tasks for PPPoE over Ethernet6-2
Configuring a Virtual Template Interface6-2
Creating an Ethernet Interface and Enabling PPPoE6-3
Configuring PPPoE in a VPDN Group6-3
Configuring PPPoE in a BBA Group6-3
Configuration Example for PPPoE over Ethernet6-5
Static MAC Address for PPPoE6-5
Feature History for Static MAC Address for PPPoE6-6
PPPoE over IEEE 802.1Q VLANs6-7
Feature History for PPPoE over IEEE 802.1Q VLANs6-7
Restrictions for PPPoE over IEEE 802.1Q VLANs6-7
Configuration Tasks for PPPoE over IEEE 802.1Q VLANs6-7
Configuring a Virtual Template Interface6-8
Creating an Ethernet 802.1Q Encapsulated Subinterface and Enabling PPPoE6-8
Configuring PPPoE in a VPDN Group6-8
Configuring PPPoE in a BBA Group6-9
Configuration Examples for PPPoE over IEEE 802.1Q VLANs6-10
Verifying PPPoE over Ethernet and IEEE 802.1Q VLAN6-11
Clearing PPPoE Sessions6-12
TCP MSS Adjust6-12
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
ix
Contents
Feature History for TCP MSS Adjust6-12
Information about TCP MSS Adjust6-12
Restrictions for TCP MSS Adjust6-13
Configuration Task for TCP MSS Adjust6-13
TCP MSS Adjustment Configuration: Examples6-14
VLAN Range6-15
Feature History for VLAN Range6-15
Restrictions for VLAN Range6-16
Configuration Task for VLAN Range6-16
Configuring a Range of VLAN Subinterfaces6-16
Configuration Examples for VLAN Range6-17
Verifying the Configuration of a Range of Subinterfaces6-18
CHAPTER
CHAPTER
7Configuring IP Unnumbered on IEEE 802.1Q VLANs7-1
Feature History for IP Unnumbered on VLANs7-2
Benefits for IP Unnumbered on VLANs7-2
Restrictions for IP Unnumbered on VLANs7-3
Configuration Tasks for IP Unnumbered on VLANs7-3
Configuring IP Unnumbered for an Ethernet VLAN Subinterface7-3
Configuring IP Unnumbered for a Range of Ethernet VLAN Subinterfaces7-4
Configuration Examples for IP Unnumbered on VLANs7-4
Monitoring and Maintaining IP Unnumbered Ethernet VLAN Subinterfaces7-5
Configuration Example for ATM PVC Oversubscription8-18
Contents
CHAPTER
CHAPTER
9Configuring Multihop9-1
Feature History for Multihop9-2
Restrictions for Multihop9-3
Required Configuration Tasks for Multihop9-3
Enabling VPDN and Multihop Functionality9-3
Terminating the Tunnel from the LAC9-4
Mapping the Ingress Tunnel Name to an LNS9-4
Optional Configuration Tasks for Multihop9-5
Specifying VPDN Tunnel Authorization Searches by Ingress Tunnel Name9-5
Preserving the Type of Service Field of Encapsulated IP Packets9-5
Configuring an Accept-Dialin VPDN Group to Preserve IP TOS9-6
Configuring a Request-Dialout VPDN Group to Preserve IP TOS9-7
Configuration Examples for Multihop9-8
Monitoring and Maintaining Multihop Configurations9-9
10Configuring Address Pools10-1
Address Assignment Mechanisms10-1
Local Address Pool10-2
Benefits of a Local Address Pool10-2
Limitations of a Local Address Pool10-2
RADIUS-Based Address Assignment10-2
Benefits of RADIUS-Based Address Assignment10-3
Limitations of RADIUS-Based Address Assignment10-3
DHCP-Based Address Assignment10-3
Benefits of DHCP-based Address Assignment10-3
Limitations of DHCP-Based Address Assignment10-4
On-Demand Address Pool Manager10-4
Feature History for On-Demand Address Pool Manager10-5
Address Allocation for PPP Sessions10-5
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
xi
Contents
Subnet Releasing10-5
On-Demand Address Pools for MPLS VPNs10-5
Benefits On-Demand Address Pool Manager10-6
Prerequisites for On-Demand Address Pool Manager10-6
Required Configuration Tasks for On-Demand Address Pool Manager10-6
Defining DHCP ODAPs as the Global Default Pooling Mechanism10-7
Configuring the DHCP Pool as an ODAP10-7
Configuring the AAA Client10-8
Configuring RADIUS10-9
Optional Configuration Tasks for On-Demand Address Pool Manager10-10
Defining ODAPs on an Interface10-10
Configuring ODAPs to Obtain Subnets Through IPCP Negotiation10-11
Disabling ODAPs10-11
Verifying On-Demand Address Pool Operation10-12
Configuration Examples for On-Demand Address Pool Manager10-14
Configuring DHCP ODAPs on an Interface10-14
Configuring ODAPs to Obtain Subnets Through IPCP Negotiation10-15
Monitoring and Maintaining an On-Demand Address Pool10-15
CHAPTER
Overlapping IP Address Pools10-16
Feature History for Overlapping IP Address Pools10-17
Restrictions for Overlapping IP Address Pools10-17
Configuration Tasks for Overlapping IP Address Pools10-17
Configuring a Local Pool Group for IP Overlapping Address Pools10-17
Verifying Local Pool Groups for IP Overlapping Address Pools10-18
Configuration Examples for Overlapping IP Address Pools10-18
Generic IP Overlapping Address Pools Example10-18
IP Overlapping Address Pools for VPNs and VRFs Example10-19
11Configuring Local AAA Server, User Database—Domain to VRF11-1
Feature History for Local AAA Server, User Database—Domain to VRF11-2
Prerequisites for Local AAA Server, User Database—Domain to VRF11-2
Establishing a PPP Connection11-2
AAA Authentication11-2
AAA Authorization11-3
AAA Accounting11-3
AAA Attribute Lists11-4
Converting from RADIUS Format to Cisco IOS AAA Format11-4
Cisco 10000 Series Router Software Configuration Guide
xii
OL-2226-23
Configuration Tasks for Local AAA Server, User Database—Domain to VRF Using Local
Attributes11-6
Defining AAA11-6
Defining RADIUS and Enabling NAS-PORT11-7
Defining a VRF11-7
Applying AAA to a Virtual Template11-7
Defining a Loopback Interface11-8
Creating an IP Address Pool11-8
Defining a Subscriber Profile11-8
Defining an AAA Attribute List11-8
Verifying Local AAA Server, User Database—Domain to VRF Using Local Attributes11-9
Configuration Example for Local AAA Server, User Database—Domain to VRF11-9
Example—VRF with DBS11-11
Example—VRF with ACL11-12
Monitoring and Maintaining Local AAA Server, User Database—Domain to VRF11-12
Contents
CHAPTER
12Configuring Traffic Filtering12-1
IP Receive ACLs12-1
Feature History for IP Receive ACLs12-2
Restrictions for IP Receive ACLs12-2
Configuration Tasks for IP Receive ACLs12-2
Configuring Receive ACLs12-3
Verifying Receive ACLs12-3
Configuration Example for IP Receive ACLs12-3
Time-Based ACLs12-4
Feature History for Time-Based ACLs12-4
Restrictions for Time-Based ACLs12-5
Configuration Tasks for Time-Based ACLs12-5
Creating a Time Range12-5
Applying a Time Range to a Numbered Access Control List12-6
Applying a Time Range to a Named Access Control List12-7
Monitoring and Maintaining Time-Based ACLs12-8
Configuration Examples for Time-Based ACLs12-8
CHAPTER
13Unicast Reverse Path Forwarding13-11
Feature History for uRPF13-12
Prerequisites for uRPF13-12
Restrictions for uRPF13-12
Configuring Unicast RPF13-13
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
xiii
Contents
Monitoring and Maintaining uRPF13-14
Configuration Examples of uRPF13-16
Configuring Loose Mode uRPF13-17
Configuring Loose Mode uRPF with the allow-self-ping Option13-17
Configuring Loose Mode uRPF with the allow-default Option13-18
CHAPTER
14Configuring Automatic Protection Switching14-19
Multirouter Automatic Protection Switching14-19
Feature History for MR-APS14-20
Restrictions for MR-APS14-21
Configuration Tasks for MR-APS14-21
Configuring MR-APS on Unchannelized Line Cards14-21
Configuring MR-APS on Channelized Line Cards14-22
Configuring MR-APS with Static Routes14-23
Configuring MR-APS with Static Routes on Unchannelized Line Cards14-23
Configuring MR-APS with Static Routes on Channelized Line Cards14-25
Monitoring and Maintaining the MR-APS Configuration14-27
Single-router Automatic Protection Switching14-27
Feature History for SR-APS14-29
Configuring SR-APS14-29
Disabling SR-APS14-29
Monitoring and Maintaining the SR-APS Configuration14-30
Threshold Commands14-31
Specifying SR-APS Signal Degrade BER Threshold14-31
Specifying SR-APS Signal Fail BER Threshold14-32
CHAPTER
15Configuring IP Multicast15-33
Feature History for IP Multicast15-34
Restrictions for IP Multicast15-34
Configuration Tasks for IP Multicast Routing15-34
Enabling IP Multicast Routing15-35
Enabling PIM on an Interface15-35
Enabling Dense Mode15-35
Enabling Sparse Mode15-36
Enabling Sparse-Dense Mode15-36
Configuring Native Multicast Load Splitting15-36
Configuring the Control Plane Protocol Policy15-36
Cisco 10000 Series Router Software Configuration Guide
xiv
OL-2226-23
Contents
CHAPTER
16Configuring RADIUS Features16-39
RADIUS Attribute Screening16-39
Feature History for RADIUS Attribute Screening16-40
Restrictions for RADIUS Attribute Screening16-40
Prerequisites for RADIUS Attribute Screening16-40
Configuration Tasks for RADIUS Attribute Screening16-41
Configuration Examples for RADIUS Attribute Screening16-41
Authorization Accept Configuration Example16-41
Accounting Reject Configuration Example16-41
Authorization Reject and Accounting Accept Configuration Example16-42
Feature History for RADIUS Transmit Retries16-43
Restrictions for RADIUS Transmit Retries16-43
Configuring RADIUS Transmit Retries16-43
Configuration Example for RADIUS Transmit Retries16-43
Monitoring and Troubleshooting RADIUS Transmit Retries16-44
Extended NAS-Port-Type and NAS-Port Support16-44
Feature History for Extended NAS-Port-Type and NAS-Port Support16-45
NAS-Port-Type (RADIUS Attribute 61)16-45
NAS-Port (RADIUS Attribute 5)16-46
NAS-Port-ID (RADIUS Attribute 87)16-46
Prerequisites for Extended NAS-Port-Type and NAS-Port Attributes Support16-46
Configuring Extended NAS-Port-Type and NAS-Port Attributes Support16-47
Verifying Extended NAS-Port-Type and NAS-Port-ID Attributes Support16-49
Configuration Examples for Extended NAS-Port-Type Attribute Support16-50
RADIUS Attribute 31: PPPoX Calling Station ID16-51
Feature History for PPPoX Calling Station ID16-51
Calling-Station-ID Formats16-51
Restrictions for PPPoX Calling Station ID16-52
Related Documents for PPPoX Calling Station ID16-53
Configuration Tasks for PPPoX Calling Station ID16-53
Configuring the Calling-Station-ID Format16-53
Verifying the Calling-Station-ID16-53
Configuration Example for PPPoX Calling Station ID16-54
Related Commands for PPPoX Calling Station ID16-55
RADIUS Packet of Disconnect16-55
Feature History for RADIUS Packet of Disconnect16-56
Benefits for RADIUS Packet of Disconnect16-56
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
xv
Contents
Restrictions for RADIUS Packet of Disconnect16-56
Related Documents for RADIUS Packet of Disconnect16-57
Prerequisites for RADIUS Packet of Disconnect16-57
Configuration Tasks for RADIUS Packet of Disconnect16-57
Configuring AAA POD Server16-58
Verifying AAA POD Server16-58
Monitoring and Maintaining AAA POD Server16-59
Configuration Example for RADIUS Packet of Disconnect16-59
CHAPTER
CHAPTER
17Cisco 10000 Series Router PXF Stall Monitor17-61
Feature History of Cisco 10000 Series Router PXF Stall Monitor17-61
Information about Cisco 10000 Series Router PXF Stall Monitor17-61
Recovery Actions17-63
Restrictions for Cisco 10000 Series Router PXF Stall Monitor17-63
Configuring Cisco 10000 Series Router PXF Stall Monitor17-64
Configuration Example of Cisco 10000 Series Router PXF Stall Monitor17-65
18SSO-BFD18-69
Feature History of SSO-BFD18-69
Information about SSO-BFD18-69
Enhanced Timers18-70
BFD HA Process18-70
Early Packet Send18-70
Restrictions of SSO-BFD18-71
Monitoring and Maintaining SSO-BFD18-72
Configuration Examples of SSO-BFD18-72
SSO-BFD with Static: Example18-73
SSO-BFD with BGP: Example18-75
SSO-BFD with EIGRP: Example18-79
SSO-BFD with ISIS: Example18-82
SSO-BFD with OSPF: Example18-84
CHAPTER
19Configuring Link Noise Monitoring19-1
About Link Noise Monitoring19-1
Feature History of Link Noise Monitoring19-1
Restrictions for Link Noise Monitoring19-1
Configuration Tasks for Link Noise Monitoring19-2
Enabling Syslog Messages19-3
Cisco 10000 Series Router Software Configuration Guide
xvi
OL-2226-23
Configuration Examples for Link Noise Monitoring19-4
Example of LNM Configuration on a Line Card19-4
Example of LNM Configuration on a Shared Port Adapter19-5
Example of a Syslog Message19-5
Verification Example for Link Noise Monitoring19-5
Contents
CHAPTER
20Configuring L2 Virtual Private Networks20-1
Feature History for L2VPN20-3
Supported L2VPN Transport Types20-3
Prerequisites for L2VPN: AToM20-4
Supported Line Cards20-4
Restrictions for L2VPN20-5
Standards and RFCs20-5
MIBs20-6
NSF and SSO—L2VPN20-6
Checkpointing AToM Information20-7
Checkpointing Troubleshooting Tips20-7
Prerequisites for NSF/SSO - L2VPN20-7
Neighbor Routers in the MPLS HA Environment20-7
Stateful Switchover20-7
Nonstop Forwarding for Routing Protocols20-8
Restrictions for NSF/SSO - L2VPN20-8
Configuring NSF/SSO - L2VPN20-8
Configuration Examples of NSF/SSO—Layer 2 VPN20-9
L2VPN Local Switching—HDLC/PPP20-10
Prerequisites of L2VPN Local Switching—HDLC/PPP20-10
Restrictions of L2VPN Local Switching—HDLC/PPP20-10
PPP Like-to-Like Local Switching20-10
HDLC Like-to-Like Local Switching20-11
Configuration Tasks and Examples20-11
Configuration Tasks for L2VPN20-12
Setting Up the Pseudowire—AToM Circuit20-12
Configuring ATM AAL5 SDU Support over MPLS20-14
Verifying ATM AAL5 SDU Support over MPLS20-14
Configuring ATM-to-ATM PVC Local Switching20-14
Configuring OAM Cell Emulation for ATM AAL5 SDU Support over MPLS20-15
Configuring OAM Cell Emulation for ATM AAL5 SDU Support over MPLS on PVCs20-16
Configuring OAM Cell Emulation for ATM AAL5 SDU Support over MPLS in VC Class
Configuration Mode20-18
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
xvii
Contents
Configuring Ethernet over MPLS20-19
Ethernet over MPLS Restrictions20-20
Configuring Ethernet over MPLS in VLAN Mode20-20
Configuring Ethernet over MPLS in Port Mode20-21
IEEE 802.1Q Tunneling for AToM—QinQ20-22
Prerequisites for IEEE 802.1Q Tunneling (QinQ) for AToM20-23
Restrictions for IEEE 802.1Q Tunneling (QinQ) for AToM20-23
Restrictions for Configuring Remote Ethernet Port Shutdown20-26
Configuring Remote Ethernet Port Shutdown20-26
Configuring Ethernet over MPLS with VLAN ID Rewrite20-27
Configuring Frame Relay over MPLS20-28
Configuring Frame Relay over MPLS with DLCI-to-DLCI Connections20-28
Configuring Frame Relay over MPLS with Port-to-Port Connections20-29
Enabling Other PE Devices to Transport Frame Relay Packets20-30
Configuring Frame Relay-to-Frame Relay Local Switching20-31
Configuring Frame Relay for Local Switching20-32
Configuring Frame Relay Same-Port Switching20-33
Verifying Layer 2 Local Switching for Frame Relay20-34
Configuring QoS Features20-34
Configuring HDLC and PPP over MPLS20-36
Restrictions for HDLC over MPLS20-36
Restrictions for PPP over MPLS20-36
Configuring HDLC over MPLS or PPP over MPLS20-36
Estimating the Size of Packets Traveling Through the Core Network20-37
Estimating Packet Size—Example20-38
Changing the MTU Size on P and PE Routers20-38
Setting Experimental Bits with AToM20-38
Configuring QoS Features20-40
Monitoring and Maintaining L2VPN20-43
Configuration Example—Frame Relay over MPLS20-44
Any Transport over MPLS—Tunnel Selection20-47
Configuration Example—Any Transport over MPLS: Tunnel Selection20-47
CHAPTER
21Configuring L2VPN Interworking21-1
Bridged Interworking21-1
Cisco 10000 Series Router Software Configuration Guide
xviii
OL-2226-23
Ethernet to VLAN—Bridged Interworking21-2
Configuring L2VPN Interworking21-2
Verifying the Configuration21-3
Configuration Examples of Ethernet to VLAN—Bridged21-3
Ethernet to VLAN over LS—Bridged: Example21-4
Ethernet to VLAN over AToM—Bridged: Example21-4
Routed Interworking21-4
Restrictions for Routed Interworking21-5
Ethernet/VLAN to ATM AAL5 Interworking21-5
Prerequisites of Ethernet/VLAN to ATM AAL5 Interworking21-6
Restrictions of Ethernet/VLAN to ATM AAL5 Interworking21-6
ATM AAL5 to Ethernet Local Switching—Bridged Interworking21-8
ATM AAL5 to VLAN 802.1Q Local Switching—Bridged Interworking21-9
ATM AAL5 to Ethernet Port AToM—Bridged Interworking21-9
ATM AAL5 to Ethernet VLAN 802.1Q AToM—Bridged Interworking21-10
ATM to Ethernet—Routed Interworking21-11
Configuration Tasks and Examples21-12
Local Switching21-12
AToM21-14
Contents
CHAPTER
Ethernet/VLAN to Frame Relay Interworking21-17
Prerequisites of Ethernet/VLAN to Frame Relay Interworking21-17
Restrictions for Ethernet/VLAN to Frame Relay Interworking21-17
FR DLCI to Ethernet Local Switching—Bridged Interworking21-19
FR DLCI to VLAN 802.1Q Local Switching—Bridged Interworking21-20
FR DLCI to Ethernet Port AToM—Bridged Interworking21-20
FR DLCI to Ethernet VLAN 802.1Q AToM—Bridged Interworking21-21
Frame Relay to Ethernet—Routed Interworking21-22
Configuration Tasks and Examples21-23
Performance and Scalability for MLP over Serial Interfaces22-14
Restrictions and Limitations for MLP over Serial Interfaces22-14
Single-VC MLP over ATM Virtual Circuits22-15
Performance and Scalability for Single-VC MLP over ATM22-15
Restrictions and Limitations for Single-VC MLP over ATM22-15
Multi-VC MLP over ATM Virtual Circuits22-16
Performance and Scalability for Multi-VC MLP over ATM VCs22-17
Restrictions and Limitations for Multi-VC MLP over ATM VCs22-17
MLP on LNS22-18
About MLP on LNS22-19
PPP multilink links max Command22-21
Performance and Scalability of MLP on LNS22-21
PXF Memory and Performance Impact for MLP on LNS22-21
Scenario 122-22
Scenario 222-22
Restrictions and Limitations for MLP on LNS22-23
Configuring MLP on LNS22-24
MLPoE LAC Switching22-24
Restrictions for MLPoE LAC Switching22-24
Cisco 10000 Series Router Software Configuration Guide
xx
OL-2226-23
MLPoE at PTA22-25
ATM Overhead Accounting22-26
Prerequisites of MLPoE at PTA22-26
Restrictions of MLPoE at PTA22-26
Memory and Performance Impact of MLPoE at PTA22-27
MLP-Based Link Fragmentation and Interleaving22-27
Configuring MLP Bundles and Member Links22-27
Creating an MLP Bundle Interface22-28
Configuration Example for Creating an MLP Bundle Interface22-29
Enabling MLP on a Virtual Template22-30
Configuration Example for Enabling MLP on a Virtual Template22-31
Adding a Serial Member Link to an MLP Bundle22-31
Adding an ATM Member Link to an MLP Bundle22-32
Configuration Example for Adding ATM Links to an MLP Bundle22-34
Moving a Member Link to a Different MLP Bundle22-35
Removing a Member Link from an MLP Bundle22-36
Changing the Default Endpoint Discriminator22-37
Configuration Example for Changing the Endpoint Discriminator22-37
Contents
CHAPTER
Configuration Examples for Configuring MLP22-38
Configuration Example for Configuring MLP over Serial Interfaces22-38
Configuration Example for Configuring Single-VC MLP over ATM22-38
Configuration Example for Configuring Multi-VC MLP over ATM22-39
Configuration Example for MLP on LNS22-39
Configuration Example for MLPoE LAC Switching22-41
Configuration Examples of MLPoE at PTA22-41
Configuring MLPoE over IEEE 802.1Q VLANs22-42
Configuring MLPoE through RADIUS22-42
Verifying and Monitoring MLP Connections22-43
Bundle Counters and Link Counters22-44
Verification Examples for MLP Connections22-44
Verification Example for the show interfaces multilink Command22-44
Verification Example for the show ppp multilink Command22-45
Verification Example for the show interfaces multilink stat Command22-46
Related Documentation22-46
23Configuring Gigabit EtherChannel Features23-1
Feature History for Gigabit EtherChannel23-2
Prerequisites for Gigabit EtherChannel Configuration23-3
Restrictions for Gigabit EtherChannel Configuration23-3
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
xxi
Contents
Configuring QoS Service Policies on GEC Interfaces23-3
Restrictions for QoS Service Policies on GEC Bundles23-5
Configuration Examples23-5
Configuration Example for Using the VLAN Group Feature to Apply QoS on Member Links23-5
Configuration Example for Applying QoS on GEC Bundle Subinterfaces23-6
Configuring Policy Based Routing Support on a GEC Bundle23-7
Restriction for Configuring PBR Support on a GEC Bundle23-7
Configuring IEEE 802.1Q and QinQ Support on GEC Bundle23-7
Prerequisites for Configuring IEEE 802.1Q and QinQ Support23-7
Restrictions for Configuring IEEE 802.1Q and QinQ Support on GEC Bundle23-7
Configuration Tasks for IEEE 802.1Q and QinQ on Subinterfaces23-8
Configuration Examples23-8
Configuring MVPN Support on GEC Bundle23-9
Configuration Tasks and Examples23-9
Configuring PPPoX Support on a GEC Bundle23-9
Restrictions for Configuring PPPoX Support for GEC Bundle23-9
Configuration Tasks23-10
Configuration Examples23-10
CHAPTER
Configuring High Availability Support on GEC Bundle23-11
Configuring 8 Member Links per GEC Bundle23-11
Configuration Tasks23-11
Configuring VLAN-Based Load Balancing23-12
Restrictions for VLAN-Based Load Balancing23-12
Configuration Tasks23-13
Configuration Example23-14
Configuration Example of VLAN-Based Load Balancing23-14
Configuration Example for Applying VLAN QoS on GEC Bundle Subinterfaces23-15
Configuration Example for Using the VLAN Group Feature to Apply QoS23-16
Configuration Example for Tunnel VRF27-4
Configuration Examples for VRF-Aware VPDN Tunnels27-5
APPENDIX
G
LOSSARY
I
NDEX
ARADIUS AttributesA-1
RADIUS IETF AttributesA-1
Vendor-Proprietary RADIUS AttributesA-4
Vendor-Specific RADIUS IETF AttributesA-8
Cisco 10000 Series Router Software Configuration Guide
xxiv
OL-2226-23
About This Guide
This guide provides configuration information for features that are platform-specific to the
Cisco
10000 series router. Documentation is also provided for cross-platform features that function
differently on the Cisco
Cross-platform features that function on the Cisco 10000 series router as they do on other supported
platforms, and platform-independent features that are supported on the Cisco
described in the general Cisco IOS documentation.
This introduction provides information about the following topics:
•Guide Revision History, page xxv
•Audience, page xxx
•Document Organization, page xxx
10000 series router than on other supported platforms.
10000 series router are
•Document Conventions, page xxxii
•Related Documentation, page xxxiii
•Obtaining Documentation, Obtaining Support, and Security Guidelines, page xxxiv
Guide Revision History
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(33)XNE3OL-2226-23June, 2010
Added the features listed in the “New Features in Cisco IOS Release 12.2(33)XNE3” section on
page 1-16
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(33)XNEOL-2226-22November, 2009
Added the features listed in the “New Features in Cisco IOS Release 12.2(33)XNE” section on page 1-16
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
xxv
Guide Revision History
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(33)SB3OL-2226-21December, 2008
Added the features listed in the “New Features in Cisco IOS Release 12.2(33)SB3” section on page 1-18
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(33)SB2OL-2226-20September, 2008
Added the features listed in the “New Features in Cisco IOS Release 12.2(33)SB2” section on page 1-18
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(33)SBOL-2226-19September, 2008
About This Guide
Added the scaling limit of L4R sessions for PRE2, PRE3, and PRE4 in the Chapter 2, “Scalability and
Performance”
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(33)SBOL-2226-18March, 2008
Removed Using PXF Commands and Configuring Layer 2 Local Switching chapters.
Added the features listed in the “New Features in Cisco IOS Release 12.2(33)SB” section on page 1-18.
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(31)SB5OL-2226-17April, 2007
Added the GRE Tunnel IP Source and Destination VRF Membership feature in Chapter 27, “IP
Tunneling.”
Added the “New Features in Cisco IOS Release 12.2(31)SB5” section on page 1-19.
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(31)SB3OL-2226-16February, 2007
Description
Added the features listed in the “New Features in Cisco IOS Release 12.2(31)SB3” section on page 1-19.
Cisco 10000 Series Router Software Configuration Guide
xxvi
OL-2226-23
About This Guide
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(31)SB2OL-2226-15November, 2006
Description
Added the features listed in the “New Features in Cisco IOS Release 12.2(31)SB2” section on page 1-20.
Cisco IOS ReleasePart NumberPublication Date
Release 12.2(28)SBOL-2226-14July, 2006
Description
Added the features listed in the New Features in Cisco IOS Release 12.2(28)SB, page 1-21.
Cisco IOS ReleasePart NumberPublication Date
Release 12.3(7)XI7OL-2226-13September, 2005
Guide Revision History
Description
Changed the Related Documentation link to the new Cisco 10000 Series Router Documentation
Roadmap
Added the features listed in the “New Features in Cisco IOS Release 12.3(7)XI7” section on page 1-25.
Removed the “pointer to a pointer” for the PPPoE Circuit-Tag Processing feature by removing a
summary and a pointer from Chapter 16, Configuring RADIUS Features, and retaining only the pointer
to the feature module in the
New Features in Cisco IOS Release 12.3(7)XI3, page 1-26.
Removed the restriction for non-support of SSG in Restrictions for IP Unnumbered on VLANs,
page 7-3.
Added support for the 1-Port Channelized OC-12/STM-4 line card in Restrictions for MR-APS,
page 14-21.
Removed Chapter 16, “IEEE 802.1Q-in-Q VLAN Tag Termination,” and added a pointer to the
PPPoE—QinQ Support
feature guide, located at the following URL. This document includes support for
IPoQ-in-Q.
http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801f0f4a.
html
Relocated the remaining QoS features to the Cisco 10000 Series Router Quality of Service Configuration Guide, located at the following URL:
•IEEE 802.1p Class of Service—See “Marking Traffic.”
•Per DSCP Weighted Random Early Detection—See “Managing Packet Queue Congestion.”
•Per Precedence Weighted Random Early Detection Statistics—See “Managing Packet Queue
Congestion.”
•Weighted Random Early Detection with Queue Limit—See “Managing Packet Queue Congestion.”
•VC Weighting—See “Oversubscribing Physical and Virtual Links.”
•Dynamic ATM VP and VC Configuration Modification—See “Oversubscribing Physical and Virtual
Links.”
•Interface Oversubscription—See “Oversubscribing Physical and Virtual Links.”
•3-Level Hierarchical QoS Policies—See “Defining QoS for Multiple Policy Levels.”
Cisco IOS ReleasePart NumberPublication Date
Release 12.3(7)XI2OL-2226-08November, 2004
Description
Added the features listed in the “New Features in Cisco IOS Release 12.3(7)XI2” section on page 1-26.
Added a scaling limitation for create on demand PVCs and PPP sessions in Limitations and Restrictions,
page 2-3
Changed the SAR page limit (CSCee59870) in ATM VC Scaling and VC Assignment, page 8-4
Added information about the behavior of high water mark and low water mark values used with VC
weighting in High Water Mark and Low Water Mark Values (moved to the Cisco 10000 Series Router Quality of Service Configuration Guide)
Added a table indicating scaling limits for active VCs on ATM line cards in:
•Configuring atm pxf queuing, page 2-16
•Restrictions for Hierarchical Shaping (moved to the Cisco 10000 Series Router Quality of Service
Configuration Guide)
•ATM VC Scaling and VC Assignment, page 8-4
•Restrictions for VBR-nrt Oversubscription, page 8-15
OL-2226-23
Cisco 10000 Series Router Software Configuration Guide
xxix
Audience
Cisco IOS ReleasePart NumberPublication Date
Release 12.3(7)XI1OL-2226-07August, 2004
Description
Added the new features listed in the “New Features in Cisco IOS Release 12.3(7)XI1” section on
page 1-26.
Audience
This guide is designed for system and network managers responsible for configuring broadband
aggregation, leased-line, and MPLS services and on the Cisco
be experienced using Cisco IOS software and be familiar with the operation of the
Cisco
10000 series router.
10000 series router. The manager should
About This Guide
Document Organization
This guide contains the following chapters:
ChapterTitleDescription
Chapter 1Broadband Aggregation OverviewLists new features and enhancements in each release; describes
hardware requirements. Provides examples of broadband and
leased-line architecture models.
Chapter 2Scalability and PerformanceDescribes limitations and restrictions, and how to configure the
Cisco
10000 series router for high scalability.
Chapter 3Configuring Remote Access to MPLS
VPN
Chapter 4Configuring Multiprotocol Label
Switching
Chapter 5Configuring Layer 2 Tunnel Protocol
Access Concentrator and Network Server
Chapter 6Configuring PPPoE over Ethernet and
IEEE 802.1Q VLANs
Chapter 7Configuring IP Unnumbered over VLAN Describes the IP Unnumbered over VLAN feature that helps
Describes the Remote Access (RA) to MPLS VPN feature that
allows the service provider to offer a scalable end-to-end VPN
service to remote users.
Describes MPLS-related features, such as BGP Multipath load
sharing, Session Limit per VRF, and Half-duplex VRF.
Describes how to configure the Cisco 10000 series router as a
Layer
2 Tunnel Protocol Access Concentrator (LAC) or as an
L2TP Network Server (LNS). The managed LNS feature of the
Cisco
10000 series router enables the router to assign a
subscriber session to a VRF instance and route the session
within the VRF to the destination network.
Describes the PPPoE over Ethernet feature that enables direct
connection to an Ethernet interface. Also describes the
IEEE
802.1Q VLANs feature that enables the
Cisco
10000 series router to support PPPoE over IEEE 802.1Q
encapsulated VLANs using Gigabit Ethernet.
service providers to conserve IP address space for service
provider configurations that include Ethernet VLAN
subinterfaces.
Cisco 10000 Series Router Software Configuration Guide
xxx
OL-2226-23
Loading...
+ 594 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.