Cisco Systems OL-10729-01 Configlets EWS, A-10, Up-E, N-Pe, Comments, EWS Hybrid, deny any host

Appendix A Sample Configlets

EWS Hybrid

Configlets (EWS)

UP-E	N-PE
system mtu 1522	vlan 775
!	exit
vlan 775	!
exit	interface FastEthernet8/17
!	switchport trunk allowed vlan
system mtu 1522	1,451,653,659,766-768,772,773-775,878
!	!
vlan 775	interface Vlan775
exit	no ip address
!	description L2VPN EWS
interface FastEthernet1/0/19	xconnect 99.99.8.99 89029 encapsulation
no cdp enable	mpls
no keepalive	no shutdown
switchport
switchport access vlan 775
switchport mode dot1q-tunnel
switchport nonegotiate

switchport port-security maximum 34 switchport port-security aging time 32 switchport port-security violation shutdown switchport port-security l2protocol-tunnel cdp l2protocol-tunnel stp l2protocol-tunnel vtp l2protocol-tunnel shutdown-threshold cdp 88 l2protocol-tunnel shutdown-threshold stp 99 l2protocol-tunnel shutdown-threshold vtp 56 l2protocol-tunnel drop-threshold cdp 56 l2protocol-tunnel drop-threshold stp 64 l2protocol-tunnel drop-threshold vtp 34 storm-control unicast level 34.0 storm-control broadcast level 23.0 storm-control multicast level 12.0

spanning-tree portfast spanning-tree bpdufilter enable

mac access-group ISC-FastEthernet1/0/19 in

interface FastEthernet1/0/23 no ip address

switchport trunk allowed vlan 774-775,787-788

!

mac access-list extended ISC-FastEthernet1/0/19 no permit any any

deny any host 3456.3456.1234

permit any any

Comments		• This is the EWS side (UNI).
		• N-PE is 7600 with an OSM or a SIP-600 module. Provisioning is the same as the ERS.
		• The U-PE is a generic Metro Ethernet (ME) switch.
		• PACL with one user-defined entry.
		• BPDUs (cdp, stp and vtp) are tunneled through the MPLS core.
		• Storm control is enabled for unicast, multicast, and broadcast.
		Cisco IP Solution Center Metro Ethernet and L2VPN User Guide, 4.2
	A-10	OL-10729-01