Cisco Systems A9014CFD Storm Control

CHAPTER

38-1

Cisco ASR 901 Series Aggregation Services Router Software Configuration Guide

OL-23826-09

Storm Control

This feature module describes the Storm Control feature that helps to monitor the incoming broadcast,

multicast, and unknown unicast packets and prevent them from flooding the LAN ports.

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest feature

information and caveats, see the release notes for your platform and software release. To find information

about the features documented in this module, and to see a list of the releases in which each feature is

supported, see the “Feature Information for Storm Control” section on page 38-9.

Use Cisco Feature Navigator to find information about platform support and Cisco software image

support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on

Cisco.com is not required.

Contents

•Prerequisites, page 38-2

•Restrictions, page 38-2

•Feature Overview, page 38-2

•Configuring Storm Control, page 38-2

•Configuring Error Disable Recovery, page 38-5

•Configuration Example for Storm Control, page 38-7

•Additional References, page 38-8

•Feature Information for Storm Control, page 38-9

Contents

Main Page CONTENTS Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page About This Guide Document Revision History Page Page Page Page Page Page Page Page Page Objectives Audience Organization Page Page Conventions Related Documentation Obtaining Documentation, Obtaining Support, and Security Guidelines Page Cisco ASR 901 Router Overview Introduction Features Performance Features Management Options Manageability Features Security Features Quality of Service and Class of Service Features Layer 3 Features Layer 3 VPN Services Monitoring Features Page Licensing Licenses Supported on Cisco ASR 901 Router Page License Types Image Level License Features Supported Feature Based License Port Based/Mode License Port or Interface Behavior 2-6 Port Based License Example: When Port Based License is not Installed Example: When Port Based License is Installed The following example shows how to install the port based license: 10gigUpgrade License Example: When 10gigUpgrade License is not Installed Example: When 10gigUpgrade License is Installed Flexi License Example: When Flexi License is not Installed Example: When Flexi License is Installed 1588BC License Example: When 1588BC License is not Installed Example: When 1588BC License is Installed 2-10 Following is a sample output from the show license command: Removing the 1588BC License Complete the following steps to remove the 1588BC license. Step 1 Use the no ptp clock command to remove the PTP boundary clock configuration. Step 2 Use the license clear command to remove the 1588BC license. Generating the License Installing the License Changing the License Return Materials Authorization License Process Example: RMA Process 2-14 Verifying the License To verify the new license, use the show license command. Page Page Feature Information for Licensing Page First-Time Configuration Setup Mode Before Starting Your Router Using Setup Mode Configuring Global Parameters 3-3 Note The messages vary, depending on the Cisco IOS software image and interface modules in your Step 2 To begin the initial configuration dialog, enter yes when the following message appears: Step 3 Enter a hostname for the router (this example uses 901-1). viewing the configuration. Completing the Configuration Verifying the Cisco IOS Software Version Configuring the Hostname and Password Verifying the Hostname and Password Managing and Monitoring Network Management Features Network Management Features for the ASR 901 Cisco Active Network Abstraction (ANA) SNMP MIB Support Cisco Networking Services (CNS) How to Configure Network Management Features on ASR 901 Configuring SNMP Support Page Page Page Page Configuring Remote Network Management Page Enabling Cisco Networking Services (CNS) and Zero-Touch Deployment Zero-Touch Deployment Image Download Configuring a DHCP Server Configuring a TFTP Server Creating a Bootstrap Configuration Enabling a TFTP Server on the Edge Router Configuring the Cisco Configuration Engine 4-15 Example: Configuring SNMP Support Example: Configuring Remote Network Management Example: Configuring a DHCP Server Example: Zero-touch Deployment Page Feature Information for Monitoring and Managing the ASR 901 Using the Command-Line Interface Understanding Command Modes Page Understanding the Help System Understanding Abbreviated Commands Understanding no and default Forms of Commands Understanding CLI Error Messages Using Command History Changing the Command History Buffer Size Recalling Commands Disabling the Command History Feature Using Editing Features Enabling and Disabling Editing Features Editing Commands through Keystrokes Editing Command Lines that Wrap Searching and Filtering Output of show and more Commands Accessing the CLI Accessing the CLI through a Console Connection or through Telnet Saving Configuration Changes Software Upgrade Selecting a Cisco IOS Image Upgrading the Cisco IOS image Page Page 6-4 AUTO_UPGRADE_ROMMON to TRUE or FALSE: Auto Upgrading the MCU MCU Auto upgrade can be enabled or disabled by setting the ROMMON variable Manually Upgrading the ROMMON Auto Upgrade of ROMMON Configuring Gigabit Ethernet Interfaces Configuring the Interface Setting the Speed and Duplex Mode Enabling the Interface Modifying MTU Size on the Interface Verifying the MTU Size MAC Flap Control Configuring MAC FLap Control Configuring a Combo Port Page 7-8 Verifying the Media Type Following is a sample output when fiber-optic is selected as the physical connection: Following is a sample output when the media type is auto-select and the interface is down: Configuring Ethernet Virtual Connections Supported EVC Features Understanding EVC Features Ethernet Virtual Connections Service Instances and EFPs Encapsulation Bridge Domains DHCP Client on Switch Virtual Interface Split-Horizon Rewrite Operations Configuring EFPs Default EVC Configuration Configuration Guidelines Creating Service Instances Page Configuration Examples of Supported Features Example: Configuring a Service Instance Example: Encapsulation Using a VLAN Range Example: Two Service Instances Joining the Same Bridge Domain Example: Bridge Domains and VLAN Encapsulation Example: Rewrite Example: Split Horizon Configuration Examples of Unsupported Features Example: Filtering Example: Overlapping Encapsulation How to Configure EVC Default Encapsulation Configuring EVC Default Encapsulation with Bridge-Domain Configuring EVC Default Encapsulation with Xconnect Verifying EVC Default Encapsulation with Bridge-Domain Verifying EVC Default Encapsulation with Xconnect Configuration Examples for EVC Default Encapsulation Example: Configuring EVC Default Encapsulation with Bridge-Domain Example: Configuring EVC Default Encapsulation with Xconnect Configuring Other Features on EFPs EFPs and EtherChannels MAC Address Forwarding, Learning and Aging on EFPs Disabling MAC Address Learning on an Interface or Bridge Domain Configuration Examples Configuring IEEE 802.1Q Tunneling using EFPs 802.1Q Tunneling (QinQ) Page 8-22 You can use EFPs to configure 802.1Q tunneling in two ways: User-to-Network Interface (UNI) is not enforced if the range is more than 1000. Routed QinQ Configuration Example Example: User to Network Interface Example: Network to Network Interface/Core Router Bridge Domain Routing Example: Configuring Bridge-Domain Routing How to Configure DHCP Client on SVI Configuring DHCP Client on SVI Verifying DHCP Client on SVI Configuration Example for DHCP Client on SVI EFPs and Switchport MAC Addresses EFPs and MSTP Monitoring EVC Sample Configuration with Switchport to EVC Mapping 8-30 Configuration Example 8-31 Page Feature Information for Configuring Ethernet Virtual Connections Page Configuring EtherChannels Understanding How EtherChannels Work EtherChannel Feature Overview Understanding How EtherChannels Are Configured EtherChannel Configuration Overview Understanding Manual EtherChannel Configuration Understanding IEEE 802.3ad LACP EtherChannel Configuration Page Understanding Port-Channel Interfaces Understanding Load Balancing EtherChannel Configuration Guidelines and Restrictions Configuring Etherchannels Configuring Channel Groups Configuring the LACP System Priority and System ID Configuring the LACP Transmit Rate Verifying the LACP Transmit Rate Configuring EtherChannel Load Balancing Modifying MTU Size on Port-Channel Verifying the MTU Size on Port-Channel EVC On Port-Channel Restrictions for EVC EtherChannel Configuring EVC on Port-Channel Verifying the Configuration Troubleshooting Configuring Ethernet OAM Contents Understanding Ethernet CFM IP SLA Support for CFM Configuring Ethernet CFM Default Ethernet CFM Configuration Ethernet CFM Configuration Restrictions and Guidelines Configuring the CFM Domain Page Page Page Configuring Multi-UNI CFM MEPs in the Same VPN Page Page Configuration Examples for Multi-UNI CFM MEPs 10-11 Use the following commands to verify a configuration: Use the show ethernet cfm maintenance-point local command to verify the Multi-UNI CFMs over EVC configuration. This command shows the basic configuration information for Multi-UNI CFM. Use the show ethernet cfm maintenance-point remote to verify the MEP configuration: Configuring Ethernet CFM Crosscheck Configuring Static Remote MEP Configuring a Port MEP Configuring SNMP Traps Configuring IP SLA CFM Operation Manually Configuring an IP SLA CFM Probe or Jitter Operation Page Configuring an IP SLA Operation with Endpoint Discovery Configuring CFM over EFP with Cross Connect Configuring CFM over EFP Interface with Cross Connect Examples 10-22 Example for single tag Encapsulation Configuring CFM over EFP Interface with Cross ConnectPort Channel-Based Cross Connect Tunnel Examples Use the following commands to verify a configuration: Use the show ethernet cfm maintenance-point local commands to verify the CFM over EVC configuration. This command shows the basic configuration information for CFM. 10-23 Use the show ethernet cfm maintenance-point remote to verify the MEP configuration: Use the show ethernet cfm mpdb command to verify the catalouge of CC with MIP in intermediate routers. Configuring CFM with EVC Default Encapsulation Verifying CFM with EVC Default Encapsulation Example: Configuring CFM with EVC Default Encapsulation Configuring Y.1731 Fault Management Default Y.1731 Configuration Configuring ETH-AIS Configuring ETH-LCK Page Managing and Displaying Ethernet CFM Information Page Understanding the Ethernet OAM Protocol OAM Features Discovery Link Monitoring Remote Failure Indication Remote Loopback Cisco Vendor-Specific Extensions OAM Messages Setting Up and Configuring Ethernet OAM Default Ethernet OAM Configuration Restrictions and Guidelines Enabling Ethernet OAM on an Interface Page Enabling Ethernet OAM Remote Loopback Configuring Ethernet OAM Link Monitoring Page Page Configuring Ethernet OAM Remote Failure Indications Configuring Ethernet OAM Templates Page Page Displaying Ethernet OAM Protocol Information Verifying Ethernet OAM Configuration 10-47 Verifying Link Monitoring Configuration and Status Understanding E-LMI Configuring E-LMI Default E-LMI Configuration Enabling E-LMI Displaying E-LMI Information Understanding Ethernet Loopback Configuring Ethernet Loopback Enabling Ethernet Loopback Page Configuration Example 10-55 This example shows how to configure Ethernet Internal Loopback for cross connect: GigabitEthernet0/0 This following is the example of the output from the show ethernet loopback command: 201 Configuring Y.1564 to Generate Ethernet Traffic Page Configuring IP SLA for Traffic Generation Page Page 10-61 Example: Two-Way Measurement Example: Traffic Generation Mode The following is a sample configuration for traffic generation mode to measure tx and txbytes. 10-62 The following is an example of the output from the show ip sla statistics command. ITU-T Y.1731 Performance Monitoring Prerequisites for ITU-T Y.1731 Performance Monitoring Restrictions for ITU-T Y.1731 Performance Monitoring Information About ITU-T Y.1731 Performance Monitoring Frame Delay and Frame-Delay Variation Frame Loss Ratio On-Demand and Concurrent Operations Supported interfaces Benefits of ITU-T Y.1731 Performance Monitoring How to Configure ITU-T Y.1731 Performance Monitoring Configuring Two-Way Delay Measurement Page Page What to Do Next Configuring Single-Ended Synthetic Loss Measurement Page Page Page Page What to Do Next Scheduling IP SLAs Operations 11-15 Verifying the Frame Delay and Synthetic Loss Measurement Configurations Enter your password if prompted. Step 3 Do one of the following: Step 4 Exits global configuration mode and enters privileged EXEC mode. Example: Verifying Sender MEP for a Two-Way Delay Measurement Operation Example: Verifying Receiver MEP for a Two-Way Delay Measurement Operation Note The Cisco ASR 901 router supports hardware-based timestamping. Enable the hardware-based timestamping using the dmm responder hardware timestamp command on the receiver MEP. 11-17 Example: Verifying Sender MEP for a Synthetic Loss Measurement Operation Example: Verifying Ethernet CFM Performance Monitoring To view the Ethernet CFM performance monitoring activities, use the show ethernet cfm pm command. 11-18 Example: Verifying History for IP SLAs Operations To view the history collected for IP SLAs operations, use the show ip sla history command. Note The show ip sla history full command is not supported for the ITU-T Y.1731 operations. How to Configure IP SLAs Y.1731 On-Demand and Concurrent Operations Configuring Direct On-Demand Operation on a Sender MEP Configuring Referenced On-Demand Operation on a Sender MEP 11-21 Configuring IP SLAs Y.1731 Concurrent Operation on a Sender MEP Configuration Examples for IP SLAs Y.1731 On-Demand Operations Example: On-Demand Operation in Direct Mode 11-22 Example: On-Demand Operation in Referenced Mode Page Page Feature Information for ITU-T Y.1731 Performance Monitoring Page Configuring Resilient Ethernet Protocol Understanding Resilient Ethernet Protocol (REP) Overview Page Page Link Integrity Fast Convergence VLAN Load Balancing (VLB) Page Spanning Tree Interaction REP Ports Configuring Resilient Ethernet Protocol (REP) Default REP Configuration REP Configuration Guidelines Page Configuring the REP Administrative VLAN Configuring REP Interfaces Page Page Page Page Configuring REP as Dual Edge No-Neighbor Port Page Page 12-18 Cisco ASR 901 Dual Rep Edge No-Neighbor Topology Example Note This section provides partial configurations intended to demonstrate a specific feature. ASR_1 7600_1 12-19 7600_2 Setting up Manual Preemption for VLAN Load Balancing Configuring SNMP Traps for REP Monitoring REP Page Configuration Examples for REP Configuring the REP Administrative VLAN: Example Configuring a REP Interface: Example 12-25 Figure 6 Example of VLAN Blocking Setting up the Preemption for VLAN Load Balancing: Example The following is an example of setting the preemption for VLAN load balancing on a REP segment. Configuring SNMP Traps for REP: Example This example shows how to configure the router to send REP traps at a rate of 10 traps per second: Monitoring the REP Configuration: Example Cisco ASR 901 Topology Example Note This section provides partial configurations intended to demonstrate a specific feature. ASR_1 12-27 ASR_2 12-28 7600_1 7600_2 12-29 Page Configuring MST Overview of MST and STP Overview of MST on EVC Bridge Domain Restrictions and Guidelines 13-3 When an MST is configured on the outer VLAN, you can configure any number of service instances with the same outer VLAN as shown in the following configuration example. Configuring MST on EVC Bridge Domain Page Configuration Example for MST on EVC Bridge Domain Verification Page 13-8 This example shows MST on port channels: Troubleshooting Tips Page Configuring Multiprotocol Label Switching Page Configuring EoMPLS Understanding EoMPLS Configuring EoMPLS EoMPLS Configuration Example Configuring Pseudowire Redundancy Configuration Commands Port Based EoMPLS Page Configuring MPLS VPNs Understanding MPLS VPNs 16-2 Configuring MPLS VPNs Configuration Examples for MPLS VPN This section contains the following sample configurations involving three routers: PE1 Configuration, page 16-2 Provider Configuration, page 16-5 PE2 Configuration, page 16-6 PE1 Configuration 16-3 16-4 16-5 Provider Configuration 16-6 PE2 Configuration Interface details 16-7 OSPF and BGP details 16-8 Loop Back details 16-9 Page Configuring MPLS OAM Understanding MPLS OAM LSP Ping LSP Traceroute LSP Ping over Pseudowire Configuring MPLS OAM Using LSP Ping for LDP IPv4 FEC Using LSP Traceroute for LDP IPv4 FEC Using LSP Ping for Pseudowire Using LSP Traceroute over Pseudowire Displaying AToM VCCV capabilities Configuring Routing Protocols Changing Default Hashing Algorithm for ECMP Page Configuring Bidirectional Forwarding Detection Understanding BFD Configuring BFD BFD Configuration Guidelines and Restrictions Configuring BFD for OSPF Configuring BFD for OSPF on One of More Interfaces Configuring BFD for OSPF on All Interfaces Configuring BFD for BGP Configuring BFD for IS-IS Configuring BFD for IS-IS on a Single Interface Configuring BFD for IS-IS for All Interfaces Configuring BFD for Static Routes Configuration Examples for BFD BFD with OSPF on All Interfaces BFD with OSPF on Individual Interfaces 19-8 BFD with BGP BFD with IS-IS on All Interfaces BFD with IS-IS on Individual Interfaces 19-9 BFD with Static Routes Page Configuring T1/E1 Controllers Configuring the Card Type Configuring E1 Controllers Page Configuring T1 Controllers Troubleshooting Controllers Troubleshooting E1 Controllers Troubleshooting T1 Controllers Page Page Configuring Pseudowire Understanding Pseudowires Structure-Agnostic TDM over Packet Structure-Aware TDM Circuit Emulation Service over Packet-Switched Network Transportation of Service Using Ethernet over MPLS Limitations Hot Standby Pseudowire Support for ATM/IMA Configuring Pseudowire Configuring Pseudowire Classes Page Configuring CEM Classes Page Configuring a Backup Peer Configuring Structure-Agnostic TDM over Packet Page Configuring a SAToP Pseudowire with UDP Encapsulation Page Page Configuring Circuit Emulation Service over Packet-Switched Network Configuring a CESoPSN Pseudowire with UDP Encapsulation Page Page QoS for CESoPSN over UDP and SAToP over UDP Configuring Transportation of Service Using Ethernet over MPLS Page Configuring L2VPN Pseudowire Redundancy Page Example: Pseudowire Redundancy Configuring Hot Standby Pseudowire Support for ATM/IMA Configuring ATM/IMA Pseudowire Redundancy in PVC Mode Page Configuring ATM/IMA Pseudowire Redundancy in PVP Mode Configuring ATM/IMA Pseudowire Redundancy in Port Mode Verifying Hot Standby Pseudowire Support for ATM/IMA 21-27 TDM Local Switching Note Effective with 15.2(2)SNH1 release, you can configure local switching on the T1 or E1 mode. Configuring TDM Local Switching on a T1/E1 Mode 21-29 Step 3 interface-name connection-name Configuration Example for Local Switching The following is a sample configuration of local switching: Selects the CEM interface to configure the pseudowire. interface-name Configuration Examples of Hot Standby Pseudowire Support for ATM/IMA Example: Configuring ATM/IMA Pseudowire Redundancy in PVC Mode Example: Configuring ATM/IMA Pseudowire Redundancy in PVP Mode 21-31 Example: Configuring ATM/IMA Pseudowire Redundancy in Port Mode Configuration Examples for Pseudowire This section contains the following examples: Example: TDM over MPLS Configuration-Example Figure 21-3 shows a TDM over MPLS configuration. The configuration uses CESoPSN for E1. ASR_A 21-32 21-33 ASR_B 21-34 Example: CESoPSN with UDP Note This section provides a partial configuration intended to demonstrate a specific feature. The following configuration uses CESoSPN with UDP encapsulation. 21-35 Example: Ethernet over MPLS The following configuration example shows an Ethernet pseudowire (aka EoMPLS) configuration. Page Feature Information for Configuring Pseudowire Page Configuring Clocking Restrictions Configuring Network Clock for Cisco ASR 901 Router Configuring Network Clock in Global Configuration Mode Page Page Configuring Network Clock in Interface Configuration Mode Understanding SSM and ESMC Synchronization Status Message Ethernet Synchronization Messaging Channel Clock Selection Algorithm ESMC behavior for Port Channels Configuring ESMC in Global Configuration Mode Configuring ESMC in Interface Configuration Mode Verifying ESMC Configuration 22-11 show network-clock synchronization You can manage the synchronization using the following management commands: Managing Synchronization 22-12 Synchronization Example Example 22-1 Configuration for QL-disabled mode clock selection Example 22-2 GPS Configuration Clears the forced switch and manual switch commands. 22-13 Configuring Synchronous Ethernet for Copper Ports You can configure synchronization on the copper ports using the following commands: Verifying the Synchronous Ethernet configuration Use the show network-clock synchronization command to display the sample output. 22-14 22-15 Troubleshooting Tips Troubleshooting ESMC Configuration Configuring PTP for the Cisco ASR 901 Router Setting System Time to Current Time Configuring PTP Ordinary Clock Configuring Master Ordinary Clock Page Configuring Slave Ordinary Clock Page Page Page Configuring PTP in Unicast Mode Configuring PTP in Unicast Negotiation Mode PTP Boundary Clock Configuring PTP Boundary Clock Page 22-29 Verifying PTP modes Ordinary Clock Use the show ptp clock dataset current command to display the sample output. Use the show ptp clock dataset default command to display the sample output. Use the show ptp clock dataset parent domain command to display the sample output. 22-30 Use the show ptp clock dataset time-properties domain command to display the sample output. Boundary Clock Use the show ptp clock dataset current command to display the sample output. Use the show ptp clock dataset default command to display the sample output. Verifying PTP Configuration on the 1588V2 Slave 22-32 Verifying PTP Configuration on the 1588V2 Master A typical configuration on a 1588V2 master is: Use the show ptp clock running domain command to display the PTP clock configuration: 22-33 Use the show platform ptp stats command to display the PTP statistics: PTP Hybrid Clock Configuring a Hybrid Ordinary Clock Page Page Configuring a Hybrid Boundary Clock Verifying Hybrid modes 22-39 Use the show ptp clock running domain command to display the sample output. SSM and PTP Interaction ClockClass Mapping Telecom Profiles PTP Redundancy Configuring Telecom Profile in Slave Ordinary Clock Page Configuring Telecom Profile in Master Ordinary Clock Verifying Telecom profile 22-45 Use the show ptp clock running domain command to display the sample output. Setting the TimeProperties ASR901 Negotiation Mechanism Static Unicast Mode Configuring ToD on 1588V2 Slave Troubleshooting Tips Page Cisco IOS IP SLA Configuring IPSLA Path Discovery Page 23-3 Following parameters can be configured in the auto-ip-sla-mpls-params mode: Following parameters can be configured in the auto-ip-sla-mpls-lpd-params mode: Example for IPSLA Path Discovery 23-4 This example shows the LPD parameter values configured: Two-Way Active Measurement Protocol Configuring TWAMP Configuring the TWAMP Server Configuring the TWAMP Reflector Configuration Examples for TWAMP Page Page Configuring QoS Understanding QoS Page Modular QoS CLI Input and Output Policies Input Policy Maps Output Policy Maps Access Control Lists Classification Class Maps The match Command Classification Based on Layer 2 CoS Classification Based on IP Precedence Classification Based on IP DSCP Classification Comparisons Classification Based on QoS Groups Classification Based on VLAN IDs Table Maps Policing Individual Policing Configuration Examples Unconditional Priority Policing Egress Policing Marking Congestion Management and Scheduling Traffic Shaping Class-Based Shaping Port Shaping Parent-Child Hierarchy Class-Based Weighted Fair Queuing Page Priority Queuing Ingress and Egress QoS Functions Configuring Quality of Service (QoS) QoS Limitations General QoS Limitations Statistics Limitations Propagation Limitations Classification Limitations Marking Limitations Congestion Management Limitations ACL-based QoS Restrictions Improving Feature Scalability TCAM with QoS QoS for MPLS/IP over MLPPP QoS for CPU Generated Traffic QoS Configuration Guidelines Sample QoS Configuration Configuring Classification Creating a Class Map for Classifying Network Traffic Creating a Policy Map for Applying a QoS Feature to Network Traffic Attaching the Policy Map to an Interface Attaching Policy Map to Cross Connect EVC Configuring Marking Creating a Class Map for Marking Network Traffic Creating a Policy Map for Applying a QoS Feature to Network Traffic Attaching the Policy Map to an Interface Configuring MPLS Exp Bit Marking using a Pseudowire Configuring Congestion Management Configuring Low Latency Queueing (LLQ) Configuring Multiple Priority Queueing Page Configuring Class-Based Weighted Fair Queuing (CBFQ) Weighted Random Early Detection (WRED) Configuring Shaping Configuring Class-Based Traffic Shaping in a Primary-Level (Parent) Policy Map Configuring the Secondary-Level (Child) Policy Map Configuring Ethernet Trusted Mode Creating IP Extended ACLs Using Class Maps to Define a Traffic Class Page Creating a Named Access List What to do Next 24-54 TCAM with ACL Configuration Examples for ACL The following is a sample output of the show ip access-lists tcam command. 24-55 Verifying Named Access List To verify the ACL-based QoS classification, use the show policy-map command as given below: 24-56 Configuration Example for Named Access List The following is the sample configuration of a named access list on the Cisco ASR 901 Router. not related to each other. 24-57 24-58 24-59 24-60 24-61 QoS Treatment for Performance-Monitoring Protocols Cisco IP-SLAs QoS Treatment for IP-SLA Probes Marking Queuing QoS Queuing for CPU-Generated Traffic Extending QoS for MLPPP Configuring Class-map for Matching MPLS EXP Bits Configuring Class-map for Matching IP DSCP Value Configuring Class-map for Matching MPLS EXP Bits or IP DSCP Value Configuring a Policy-map Page Page Attaching the Policy-map to MLPPP Interface Page Re-marking IP DSCP Values of CPU Generated Traffic Re-marking MPLS EXP Values of CPU Generated Traffic Configuring a Policy-map to Match on CS5 and EXP4 Page Attaching the Policy-map to Match on CS5 and EXP4 to MLPPP Interface Configuration Examples for Extending QoS for MPLS over MLPPP Configuring Class-map for Matching MPLS EXP Bits 24-77 Configuring Class-map for Matching IP DSCP Value The following example shows a configuration of class-map for matching IP DSCP value. Configuring Class-map for Matching MPLS EXP Bits or IP DSCP Value Configuring a Policy-map The following example shows a configuration of a policy-map. Configuring a Policy-map to Match on CS5 and EXP 4 The following example shows a configuration of a policy-map. Attaching the Policy-map to MLPPP Interface The following example shows a configuration of attaching the policy-map to MLPPP interface. Verifying MPLS over MLPPP Configuration Configuration Guidelines Page Page Page 24-84 2. To free up a slice by unconfiguring features that are no longer required. Configuring a service-policy fails because of insufficient resources. 24-85 We now have enough free entries to configure policy2. 24-86 Page Feature Information for Configuring QoS Configuring MLPPP Prerequisites Restrictions MLPPP Optimization Features Distributed Multilink Point-to-Point Protocol Offload Multiclass MLPPP MPLS over MLPPP MPLS Features Supported for MLPPP MPLS over MLPPP on PE-to-CE Links 25-5 MPLS over MLPPP on Core Links MPLS over MLPPP on CE to PE Links Configuring MLPPP Backhaul Configuring the Card Type, E1 and T1 Controllers Configuring a Multilink Backhaul Interface Creating a Multilink Bundle Configuring MRRU Configuring PFC and ACFC Configuring PFC Page Configuring ACFC Enabling Multilink and Identifying the Multilink Interface Configuring a Serial Interface as a Member Link of a MLPPP Group MLPPP Offload Configuring Additional MLPPP Settings Configuring MPLS over the MLPPP on a Serial Interface Page Configuring MPLS over MLPPP for OSPF Page Configuration Examples for MPLS over MLPPP 25-19 The following example shows a sample configuration of MPLS over MLPPP for a Serial Interface. Verifying MPLS over MLPPP Configuration 25-20 Page Feature Information for MLPPP Onboard Failure Logging Understanding OBFL 26-2 Configuring OBFL module 0 Use the following commands to configure and verify OBFL: Verifying OBFL Configuration Example 1 26-3 26-4 Hot Standby Router Protocol and Virtual Router Redundancy Protocol Information About HSRP and VRRP Overview of HSRP and VRRP Text Authentication Preemption How to Configure HSRP Configuring HSRP 27-4 Enables privileged EXEC mode. Step 8 Step 7 Step 6 Configuration Examples for HSRP Example: Configuring HSRP Active Router Example: Configuring HSRP Backup Router object-number [decrement priority-decrement] Step 10 How to Configure VRRP Configuring VRRP Page 27-8 Returns to privileged EXEC mode. group-number Configuration Examples for VRRP Example: Configuring a VRRP Master Router This example shows how to configure a VRRP Master router. Example: Configuring a VRRP Backup Router object-number [decrement priority-decrement] Example: VRRP Text Authentication Page Feature Information for HSRP and VRRP Page Configuring Link Layer Discovery Protocol Restrictions for LLDP Overview of LLDP How to Configure LLDP Configuring LLDP Page Verifying LLDP Configuration Example for LLDP Example: Enabling LLDP Globally Example: Configuring Hold Time 28-5 Example: Configuring Delay Time Example: Configuring Intervals Page Page Feature Information for LLDP Configuring Multihop Bidirectional Forwarding Detection Restrictions for Multihop BFD Information About Multihop BFD Overview of Multihop BFD How to Configure Multihop BFD Configuring Multihop BFD Template Page Configuring a Multihop BFD Map Configuration Examples for Multihop BFD Example : Configuring Multihop BFD 29-5 Configuration for Router B Page Feature Information for Multihop BFD Page Bit Error Rate Testing How to Configure BERT Performing BERT on a T1/E1 Line Terminating BERT on a T1/E1 Controller Verifying BERT on a T1/E1 Controller Page Feature Information for Bit Error Rate Testing Page Page Microwave ACM Signaling and EEM Integration Page Benefits How to Configure Microwave ACM Signaling and EEM Integration Configuring Connectivity Fault Management Page Page Configuring EEP Applet Using CLIs Page Configuring Event Handler Verifying Microwave Microwave ACM Signaling and EEM Integration Configuration Configuration Examples for Microwave ACM Signaling and EEM Integration Example: Configuring CFM Example: Configuring EEP Applet 31-12 31-13 31-14 31-15 Example: Configuring Event Handler The following is a sample configuration of Event Handler. Page Feature Information for Microwave ACM Signaling and EEM Integration Page IPv6 Support on the Cisco ASR 901 Router Prerequisites for IPv6 Support on the Cisco ASR 901 Router Restrictions for IPv6 Support on the Cisco ASR 901 Router Information About IPv6 Support on the Cisco ASR 901 Router Benefits Overview of IPv6 IPv6 Address Formats IPv6 Addressing and Discovery Static Configuration Stateless Autoconfiguration ICMPv6 IPv6 Duplicate Address Detection IPv6 Neighbor Discovery IPv4 and IPv6 Dual-Stack on an Interface Routing Protocols IS-IS Enhancements for IPv6 OSPFv3 for IPv6 Multiprotocol BGP Extensions for IPv6 Bidirectional Forwarding Detection for IPv6 How to Configure IPv6 Support on the Cisco ASR 901 Router Configuring IPv6 Addressing and Enabling IPv6 Routing Page Configuring a Static IPv6 Route Enabling Stateless Auto-Configuration Implementing IPv6 on VLAN Interfaces Implementing IPv6 Addressing on Loopback Interfaces Configuring ICMPv6 Rate Limiting Configuring IPv6 Duplicate Address Detection Configuring IPv6 Neighbor Discovery Configuring IPv6 and IPv4 Dual-Stack on the Same VLAN Configuring OSPFv3 for IPv6 Configuring IS-IS for IPv6 Page Configuring Multiprotocol-BGP for IPv6 Configuring BFD for IPv6 Specifying a Static BFDv6 Neighbor Associating an IPv6 Static Route with a BFDv6 Neighbor Page Configuring BFDv6 and OSPFv3 Configuring BFDv6 for BGP Implementing QoS for IPv6 Verifying the Configuration of IPv6 Support on the Cisco ASR 901 Router Verifying IPv6 Addressing Routing 32-28 Verifying a Static IPv6 Route 32-29 Verifying a Stateless Auto-Configuration To verify the autoconfigured IPv6 address and its state, use the show ipv6 interface command in Verifying IPv6 Implementation on VLAN Interfaces To verify the IPv6 implementation on VLAN interfaces, use the show ipv6 interface command in 32-30 Verifying IPv6 Implementation on Loopback Interfaces To verify the IPv6 implementation on loopback interfaces, use the show ipv6 interface command in Verifying ICMPv6 Configuration 32-31 32-32 Verifying IPv6 Duplicate Address Detection Configuration 32-33 Verifying IPv6 Neighbor Discovery Configuration To verify the IPv6 neighbor discovery configuration, use the show ipv6 neighbors command in Verifying IPv6 and IPv4 Dual-Stack Configuration 32-34 Verifying OSPFv3 for IPv6 Configuration 32-35 Verifying IS-IS for IPv6 Configuration To verify the IPv6 Addressing Routing information, use the show isis ipv6 rib command in privileged Verifying Multiprotocol-BGP for IPv6 Configuration 32-36 32-37 Verifying BFD for IPv6 Configuration To verify the IPv6 Addressing Routing information, use the show bfd neighbors command in privileged 32-38 Verifying BFDv6 and OSPFv3 Configuration Verifying BFDv6 for BGP Configuration Configuration Examples for IPv6 Support on the Cisco ASR 901 32-40 Example: IPv6 Addressing on VLAN Interfaces The following is a sample configuration of IPv6 addressing on VLAN interfaces. Example: IPv6 Addressing on Loopback Interfaces The following is a sample configuration of IPv6 addressing on Loopback interfaces. Example: Customizing ICMPv6 Example: Configuring IPv6 Neighborhood Discovery The following is a sample configuration of IPv6 neighborhood discovery. Example: Enabling IPv6 Stateless Address Autoconfiguration The following is a sample configuration of IPv6 stateless address autoconfiguration. Example: Configuring the IPv4 and IPv6 Dual-Stack Example: Configuring BFD and Static Routing for IPv6 Example: Configuring OSPFv3 for IPv6 The following is a sample configuration of OSPFv3 for IPv6. Example: Configuring BFD and OSPFv3 for IPv6 32-43 Example: Configuring IS-IS for IPv6 The following is a sample configuration of IS-IS for IPv6. 32-44 Example: Configuring Multiprotocol-BGP for IPv6 The following is a sample configuration of multiprotocol-BGP for IPv6. 32-45 Example: Configuring BFD and Multiprotocol-BGP for IPv6 Page Page Page Feature Information for IPv6 Support on the Cisco ASR 901 Page Page Page Labeled BGP Support Overview of Labeled BGP Support How to Configure Labeled BGP Support Configuration Example for Labeled Support 33-4 Verifying Labeled BGP Support To verify the Labeled BGP Support on the Cisco ASR 901 router, use the show commands given below: 33-5 To verify three Label Support, use the show ip cef vrf command as shown in the following example. 33-6 Page Feature Information for Labeled BGP Support MPLS Traffic Engineering - Fast Reroute Link Protection Page BFD-triggered Fast Reroute R8 R1 R9 R5 R2 R3 R6 R7 BFD How to Configure Traffic Engineering - Fast Reroute Link Protection Enabling MPLS TE-FRR on an SVI Interface Enabling MPLS TE-FRR for EoMPLS on a Global Interface Page Enabling MPLS TE-FRR for EoMPLS on an Interface Page Enabling MPLS TE-FRR for IS-IS Page Configuring Primary One-hop Auto-Tunnels Page Configuring Backup Auto-Tunnels Enabling Targeted LDP session over Primary one-hop Auto-Tunnels Enabling BFD Triggered FRR on an SVI Interface Enabling BFD Triggered FRR on a Router Verification Examples Verifying MPLS TE-FRR Configuration 34-18 Use the following command to verify whether the LSPs are protected. Use the following command to verify the backup tunnel information. Use the following command to verify the reservation detail. 34-19 Verifying Primary One-hop Auto-Tunnels Verifying Backup Auto-Tunnels To verify the configuration of backup auto-tunnels, use the show commands as shown in the following 34-20 Verifying BFD Triggered FRR Configuration To verify the configuration of BFD triggered FRR, use the show commands as shown in the following 34-21 Use the following command to verify whether the LSPs are protected: 34-22 Use the following command to verify the backup tunnel information. 34-23 Use this command to display the interface configuration for Hello. Example: Configuring MPLS TE-FRR Example: Configuring Primary One-hop Auto-Tunnels Example: Configuring Backup Auto-Tunnels Example: Configuring BFD Triggered FRR Page Page Feature Information for MPLS Traffic Engineering - Fast Reroute Link Protection Page Layer 2 Control Protocol Peering, Forwarding, and Tunneling Layer 2 Control Protocol Forwarding Layer 2 Control Protocol Tunneling 4 4 CE CE 1 2 32 1 How to Configure Layer 2 Control Protocol Peering, Forwarding, and Tunneling CE CE 1 2 32 1 ASR901 ASR901 PE Configuring Layer 2 Peering Configuring Layer 2 Forwarding Page Configuring Layer 2 Tunneling Page 35-9 Verifying Layer 2 Peering Verifying Layer 2 Forwarding Verifying Layer 2 Tunneling 35-10 Example: Configuring Layer 2 Peering The following is a sample configuration of layer 2 peering. Example: Configuring Layer 2 Forwarding The following is a sample configuration of layer 2 protocol forwarding at untagged EFP. 35-11 Example: Configuring Layer 2 Tunneling The following is a sample configuration of layer 2 control protocol tunneling for untagged packets. 35-12 Cisco ASR 901 routers. Router 1 Router 2 Page Page Feature Information for Layer 2 Control Protocol Peering, Forwarding, and Tunneling Page Configuring Inverse Muliplexing over ATM How to Configure IMA Configuring ATM IMA on T1/E1 Interface Configuring ATM IMA over MPLS Configuring the T1/E1 Controller Configuring an ATM IMA Interface Configuring ATM over MPLS Pseudowire Interface Configuring a Port Mode Pseudowire Configuring an N-to-1 VCC Cell Mode Configuring an N-to-1 vPC Cell Mode ATM AAL5 SDU VCC Transport Verifying IMA Configurations How to Configure ATM Class of Service Configuring Constant Bit Rate Configuring Unspecified Bit Rate Configuring Unspecified Bit Rate Plus Configuring Variable Bit Rate for Real/Non-Real Time Traffic Configuration Examples Example: Creating an IMA Interface Example: Configuring a Port Mode Pseudowire 36-16 Example: Configuring an N-to-1 VCC Cell Mode The following is a sample configuration of N-to-1 VCC cell mode: The following is a sample configuration for AAL5 SDU mode: Example: Configuring an N-to-1 VPC Cell Mode The following is a sample configuration of N-to-1 Permanent Virtual Circuit (VPC) cell mode. Configuring Marking MPLS Experimental Bits Creating a Policy-map for PVP/PVC/ATM IMA Interface Applying the Policy-map Applying a Policy map on PVC and PVP Page Applying a Policy map on ATM IMA Interface Creating a Table-map Creating a Policy-map for SVI Interface Applying a Service Policy on SVI Interface Page Page Feature Information for Inverse Multiplexing over ATM IPv6 over MPLS: 6PE and 6VPE Page Benefits of 6PE and 6VPE IPv6 on Provider Edge Routers IPv6 on VPN Provider Edge Routers Components of MPLS-based 6VPE Network Supported Features Scalability Numbers How to Configure IPv6 over MPLS: 6PE and 6VPE Configuring 6PE Page Page Configuring 6VPE Setting up IPv6 Connectivity from PE to CE Routers Setting up MP-BGP Peering to the Neighboring PE Page Setting up MPLS/IPv4 Connectivity with LDP Creating IPv6 VRFs on PE Routers Configuring IPv6-only VRF Configuring Dual-stack VRF Verifying IPv6 over MPLS: 6PE and 6VPE Configuration 37-16 37-17 37-18 To display output information linking the MPLS label with prefixes, use the following show command. To display entries in the IPv6 BGP routing table, use the following show command: Example: Configuring 6PE, page 37-18 Example: Configuring 6VPE, page 37-19 Example: Configuring 6PE The following is a sample configuration of 6PE. 37-19 Example: Configuring 6VPE The following is a sample configuration of 6VPE. Page Feature Information for IPv6 over MPLS: 6PE and 6VPE Page Storm Control Configuring Storm Control Page Verifying Storm Control Configuring Error Disable Recovery 38-6 Step 4 Monitoring Error Disable Recovery seconds Configures the period to recover from a specified error-disable cause. secondsSpecifies the time to recover from a specified error-disable cause. Configuration Example for Storm Control Page Feature Information for Storm Control Page Remote Loop-Free Alternate - Fast Reroute Page Page Benefits of Remote LFA-FRR Avoiding Traffic Drops Pseudowire Redundancy over FRR Conditions for Switchover How to Configure Remote Loop-Free Alternate - Fast Reroute Configuring Remote LFA-FRR for IS-IS Page Page Configuring Remote LFA-FRR for OSPF Page Configuring Remote LFA-FRR for Ethernet and TDM Pseudowires Configuring Remote LFA-FRR on a Global Interface Configuring Remote LFA-FRR on a GigabitEthernet Interface Configuring Remote LFA-FRR on an SVI Interface Configuring Remote LFA-FRR on IS-IS Page Page Page Configuring LFA-FRR for EoMPLS Page Configuring LFA-FRR for ATM/IMA Page Configuring LFA-FRR for CESoPSN Page Configuring LFA-FRR for SAToP Page Verification Examples for Remote LFA-FRR 39-28 Verifying Remote LFA-FRR Configuration 39-29 To display information for an IS-IS per-prefix LFA-FRR configuration, use the following show To display entries in the CEF Forwarding Information Base (FIB) use the following show command. 39-30 To display information about IS-IS FRR configurations, use the following show command. Verifying Remote LFA-FRR Configuration for EoMPLS on a GigabitEthernet Interface 39-31 39-32 Verifying Remote LFA-FRR Configuration for EoMPLS on an EVC Interface 39-33 Verifying Remote LFA-FRR Configuration on IS-IS Verifying Remote LFA-FRR Configuration on ATM/IMA 39-34 Verifying Remote LFA-FRR Configuration on CESoPSN Verifying Remote LFA-FRR Configuration on SAToP Configuration Examples for Remote LFA-FRR 39-36 Example: Configuring Remote LFA-FRR for IS-IS The following is a sample configuration of Remote LFA-FRR for IS-IS on all nodes. Example: Configuring Remote LFA-FRR for OSPF The following is a sample configuration of Remote LFA-FRR for OSPF on all nodes. Example: Configuring Remote LFA-FRR Globally Example: Configuring Remote LFA-FRR on a GigabitEthernet Interface The following is a sample configuration of Remote LFA-FRR on a GigabitEthernet Interface. Example: Configuring Remote LFA-FRR on an SVI Interface The following is a sample configuration of Remote LFA-FRR on an SVI Interface. Example: Configuring EoMPLS Pseudowire Redundancy over FRR Example: Configuring LFA-FRR on CESoPSN Example: Configuring LFA-FRR on SAToP Page Feature Information for Remote Loop-Free Alternate - Fast Reroute Digital Optical Monitoring How to Enable Transceiver Monitoring Examples Example: Displaying Transceiver Information 40-4 Example: Displaying Detailed Transceiver Information This example shows how to display detailed transceiver information: 40-5 Example: Displaying List of Supported Transceivers This example shows how to display the list of supported DOM transceivers: 40-6 Example: Displaying Threshold Tables This example shows how to display the threshold tables for all transceivers on the ASR 901 router: 40-7 40-8 40-9 Example: Displaying Threshold Violations Example: Displaying Threshold Violations on a Specific Interface This example shows how to display violations for the transceiver on a specific interface: Example: When Transceiver Monitoring is Disabled This example shows how to disable transceiver monitoring for all transceivers: Example: Displaying SPF Details The following is the sample output from the show controller gig0/x command. 40-11 Page Feature Information for Digital Optical Monitoring Page IPv4 Multicast Page Supported Protocols PIM SSM for IPv4 Source Specific Multicast Protocol Independent Multicast PIM SSM Address Range IGMP IGMPv1 IGMPv2 IGMPv3 PIM SSM Mapping Static SSM Mapping Reverse Path Forwarding Configuring IPv4 Multicast Enabling IPv4 Multicast Routing Configuring PIM SSM Configuring PIM SSM Mapping Verifying IPv4 Multicast Routing Verifying PIM SSM 41-10 Verifying PIM SSM Mapping Configuration Examples for IPv4 Multicast 41-12 Example: IPv4 Multicast Routing Example: Configuring PIM SSM The following is a sample configuration of PIM SSM on the Cisco ASR 901 router. Example: Configuring PIM SSM Mapping The following is a sample configuration of PIM SSM Mapping on the Cisco ASR 901 router. Example: Configuring Rendezvous Point Caution We suggest you do not use these debug commands without TAC supervision. To display IGMP packets received and sent, use the following debug command. Page Page Feature Information for IPv4 Multicast Page Page IPv6 Multicast Page IPv6 Multicast Groups IPv6 Multicast Routing Implementation Multicast Listener Discovery Protocol for IPv6 Protocol Independent Multicast PIM Source Specific Multicast Source Specific Multicast Mapping for IPv6 PIM-Sparse Mode Rendezvous Point Configuring IPv6 Multicast Enabling IPv6 Multicast Routing Disabling IPv6 Multicast Forwarding Disabling MLD Device-Side Processing Configuring MLD Protocol on an Interface Configuring a Rendezvous Point Configuring PIM SSM Options Disabling PIM SSM Multicast on an Interface Configuring IPv6 SSM Mapping Verifying IPv6 Multicast 42-14 To display the MLD interface specific parameters, use the show command described in the following To display the MLD traffic counters, use the show command described in the following example. To display interface specific information for PIM, use the show command described in the following 42-15 42-16 To display the number of PIM neighbors discovered, use the show command described in the following To display PIM topology table for given group or all groups, use the show command described in the 42-17 To display information about the PIM register encapsulation and decapsulation tunnels, use the show 42-18 42-19 To display information about the various MRIB clients, use the show command described in the 42-20 To display summary information about the number of IPv6 MFIB entries and interfaces, use the show Configuration Examples for IPv6 Multicast Example: Enabling IPv6 Multicast Routing Example: Configuring IPv6 SSM Mapping Example: Configuring Rendezvous Point Page Page Feature Information for IPv6 Multicast Page Page Configuring Switched Port Analyzer SPAN Limitations and Configuration Guidelines Understanding SPAN Overview SPAN Session Source Interface Destination Interface Traffic Types SPAN Traffic Configuring SPAN Creating a SPAN Session 43-5 Step 5 Step 4 Removing Sources or Destination from a SPAN Session Specifies the SPAN session number. Specifies the destination interface. Step 6 Enables the SPAN session using the no shutdown Configuration Examples for SPAN Verifying Local SPAN 43-7 The following is sample output from the show monitor session all detail command. Page Feature Information for Switched Port Analyzer Page INDEX Numerics A B C Page D E F G H I L M N O P Q R S T V Y