VPLS Multipoint ERS, A-12, Up-E, N-Pe, Comments

Appendix A Sample Configlets

VPLS (Multipoint) ERS

Configuration

Configlets

•Service: L2VPN/Metro Ethernet

•Feature: VPLS (multipoint) ERS

•Device configuration:

–The N-PE is a CISCO7600 with IOS 12.2(18)SXF, Sup720-3BXL

–The U-PE is a CISCO3750ME with IOS 12.2(25)EY1. No port security, no tunneling.

–VPLS Multipoint VPN with VLAN 767

–C3750ME (FA1/0/21 – FA1/0/23) <–> C7600 (FA2/18)

UP-E	N-PE

vlan 767	l2 vfi vpls_ers_1-0 manual
exit	vpn id 89017
!	neighbor 99.99.10.9 encapsulation mpls
interface FastEthernet1/0/21	neighbor 99.99.5.99 encapsulation mpls
no cdp enable	!
no keepalive	vlan 767
no ip address	exit
switchport	!
switchport trunk encapsulation dot1q	interface FastEthernet2/18
switchport mode trunk	switchport trunk allowed vlan
switchport trunk allowed vlan none	350,351,430,630,767,780,783,785-791
switchport trunk allowed vlan 767	!
switchport nonegotiate	interface Vlan767
spanning-tree bpdufilter enable	no ip address
mac access-group ISC-FastEthernet1/0/21 in	description VPLS ERS
!	xconnect vfi vpls_ers_1-0
interface FastEthernet1/0/23	no shutdown
no ip address
mac access-list extended
ISC-FastEthernet1/0/21
deny any host 0100.0ccc.cccc
deny any host 0100.0ccc.cccd
deny any host 0100.0ccd.cdd0
deny any host 0180.c200.0000
permit any any

Comments	•	The N-PE is a 7600 with OSM or SIP-600 module.
	• The VFI contains all the N-PEs (neighbors) that this N-PE talks to.
	• The U-PE is a generic Metro Ethernet (ME) switch. The customer BPDUs are blocked by the PACL.
		The VPLS ERS UNI is the same as the L2VPN (point-to-point) ERS UNI.
	•	The SVI (interface 767) refers to the global VFI, which contains multiple peering N-PEs.

	Cisco IP Solution Center Metro Ethernet and L2VPN User Guide, 4.2
A-12	OL-10729-01

Cisco Systems OL-10729-01 appendix VPLS Multipoint ERS, A-12, Configuration Configlets, Up-E, N-Pe