Cmts l2vpn
Cmts l2vpn
Cmts l2vpn
First Published: February 14, 2008 Last Updated: November 29, 2010
In Cisco IOS Release 12.2(33)SCA, the Layer 2 VPN (L2VPN) Support over Cable feature on the Cisco CMTS provides point-to-point Transparent LAN Service (TLS) in support of the Business Services over DOCSIS (BSOD) CableLabs specification. The L2VPN Support over Cable feature in Cisco IOS Release 12.2(33)SCA differs from prior L2VPN and TLS support for cable in Cisco IOS release 12.3BC in the following ways:
Both features use an Ethernet trunking interface to transport traffic for multiple L2VPN tunnels in support of different cable modems (CMs) and service flows (SFs) based on IEEE 802.1q VLAN IDs. For the the legacy TLS service, only the primary upstream or downstream SFs are used. With the new L2VPN Support over Cable feature, both primary and secondary SFs can be used. The TLS feature uses CLI to provision the service. The L2VPN Support over Cable feature uses the CM configuration file to provision the service, and a single CLI to identify the default Ethernet Network System Interface (NSI) interface. Downstream traffic is forwarded on a per-CM basis and upstream traffic is forwarded on a per-SF basis. For L2VPN Support over Cable, upstream traffic for the same L2VPN can use multiple upstream service flows and downstream traffic can use different downstream service flows.
Your Cisco IOS software release may not support all of the features documented in this module. To reach links to specific feature documentation in this module and to see a list of the releases in which each feature is supported, use the Feature Information for L2VPN Support over Cable section on page 14.
Finding Support Information for Platforms and Cisco IOS and Catalyst OS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Americas Headquarters: Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
Contents
Prerequisites for L2VPN Support over Cable, page 2 Restrictions for L2VPN Support over Cable, page 3 Information About L2VPN Support over Cable, page 4 How to Configure L2VPN Support over Cable, page 8 Configuration Examples for L2VPN over Cable, page 11 Additional References, page 12 Feature Information for L2VPN Support over Cable, page 14
You have the following hardware running Cisco IOS Release 12.2(33)SCA or later:
Cisco uBR10012 (with PRE-2) or Cisco uBR7246VXR (with NPE-G1 or NPE-G2)
You are using crypto-supported images. Refer to the Cross-Platform Release Notes for Cisco Universal Broadband Routers in Cisco IOS Release 12.2SC for the latest image information. Cable modems must be configured to support BPI+.
Note
The hardware components introduced in a given Cisco IOS Release will be supported in all subsequent releases unless otherwise specified.
Table 1 L2VPN Support over Cable Feature Hardware Compatibility Matrix
Processor Engine
Cisco IOS Release 12.2(33)SCA and later Cisco IOS Release 12.2(33)SCB and later
PRE2
Cisco uBR10-MC5X20U/H
Cisco IOS Release 12.2(33)SCB and later Cisco IOS Release 12.2(33)SCC and later
PRE4
Cisco UBR-MC20X20V
Cisco uBR-MC3GX60V1
L2VPN Support over Cable Restrictions for L2VPN Support over Cable
Table 1
Processor Engine Cable Interface Cards Cisco IOS Release 12.2(33)SCA and later Cisco IOS Release 12.2(33)SCA and later NPE-G1 Cisco uBR-MC28U/X
NPE-G2
Cisco uBR-MC88V2 Cisco IOS Release 12.2(33)SCA and later Cisco IOS Release 12.2(33)SCA and later NPE-G1 Cisco uBR-E-28U
Cisco IOS Release 12.2(33)SCB and later
NPE-G2
Cisco uBR-MC88V
1. Cisco uBR3GX60V cable interface line card is not compatible with PRE2. You must use PRE4 with the Cisco uBR3GX60V cable interface line card. 2. Cisco uBR-MC88V cable interface line card is not compatible with NPE-G1. You must use NPE-G2 with the Cisco uBR-MC88V cable interface line card.
DOCSIS 1.0 CMs are not supported. For other specific CM requirements, refer to the Business Services over DOCSIS (BSOD) Layer 2 Virtual Private Networks specification that can be found using the Additional References section on page 12. Load balancing, Dynamic Channel Change (DCC), and DSx are not supported for CMs that are enabled for L2VPN support. DSx (Dynamic Service Add [DSA], Dynamic Service Change [DSC], and Dynamic Service Delete [DSD]) is not supported. Therefore, L2VPN TLVs are also not supported in DSx TLVs. Multipoint L2VPN is not supported, and any SNMP MIBs for multipoint L2VPN are not supported. eSAFE DHCP snooping is not supported (L2VPN subtype 43.5.3) A maximum of 1024 L2VPNs are supported on a single Mac-Domain. A maximum of 8 upstream SFs are supported per L2VPN service. A maximum of 8 downstream classifiers are supported per L2VPN service. eSAFE exclusion is supported for only one eSAFE host. If the REG-REQ for a compliant CM specifies multiple eSAFE hosts, then eMTA (ifIndex 16) will be selected as the eSAFE host to be excluded by the Cisco CMTS router. If eMTA is not included as part of the capability of the CM, then the first eSAFE host in the capability is selected for exclusion. The maximum length of the Cable Modem Interface Mask (CMIM) is 4 bytes. The following areas of the Business Services over DOCSIS (BSOD) Layer 2 Virtual Private Networks specification are not supported:
Vendor-specific L2VPN encodings for the replacement of the required VPN ID and NSI
Cisco IOS CMTS Cable Software Configuration Guide Cisco IOS CMTS Cable Software Configuration Guide
L2VPN Support over Cable Information About L2VPN Support over Cable
Mapping of egress user priority to an NSI port transmission traffic class as specified by IEEE
supported.
Acceptance of multiple Downstream Classifier L2VPN Encoding with the same VPN ID to
BPDUs on all NSI and RF interfaces configured for L2VPN operation is not supported.
Implementation of a DSTP SAID specifically for DSTP forwarding to the CPE ports of all
VPN ID Restrictions
A maximum of four VPN IDs are supported for each CM. A maximum of one VPN ID can be associated with each SF in a CM; although multiple SFs in a CM can belong to the same L2VPN. A maximum of 4093 unique VPN IDs are supported per CMTS router. The maximum length of a VPN ID is 16 bytes. All L2VPN Encodings must contain a VPN ID, except for upstream classifier encodings.
Supports point-to-point L2VPN forwarding mode. Supports up to 4 VPN IDs per CM. Supports multiple upstream service flows (SFs) per CM, with one or more SFs belonging to the same VPN ID. Supports a single Ethernet Network System Interface (NSI) that serves as a trunking port for one or more L2VPN tunnels on the Cisco CMTS router. Supports BPI+ encryption using primary SAID of the CM. Supports L2VPN encodings in the CM configuration file and CM registration (REG-REQ with L2VPN encoding). Supports upstream L2VN tunnel in support of per-CM and per-SF forwarding. Supports synchronization and recovery of the L2VPN database and upstream and downstream SFs during PRE2 NSF/SSO and N+1 line card redundancy switchovers. Supports QoS in upstream and downstream. Supports stacked IEEE 802.1q tags.
L2VPN Support over Cable Information About L2VPN Support over Cable
Supports exclusion of traffic from the L2VPN tunnel for a single Embedded Service/Application Functional Entity (eSAFE) host. Supports Layer 2 classifier via Cable Modem Interface Mask (CMIM) and 802.1p priority bits. Supports detection of provisioning errors such as duplicate VLAN IDs across CMs or existing VLAN IDs in use and moves a CM offline with a corresponding error message. Supports coexistence of L2VPN and non-L2VPN traffic on the same RF MAC domain, with non-L2VPN traffic isolated from other tunnel traffic.
Cisco IOS CMTS Cable Software Configuration Guide Cisco IOS CMTS Cable Software Configuration Guide
L2VPN Support over Cable Information About L2VPN Support over Cable
Figure 1
L2VPN
Enterprise A L2VPN A Enterprise B L2VPN B
CMTS router
L2VPN Forwarder
CM1
CM2
CM3
CM4
CPE4
211306
L2VPNID=B VLANID=40
Per-CM L2VPN encodingsAn encoding that appears at the top level of the CM configuration file. Per-SF L2VPN EncodingAn encoding that appears as a subtype of the Upstream Service Flow Encoding (type 24). Upstream Classifier L2VPN EncodingAn encoding that appears in an Upstream Packet Classification Configuration Setting (type 22).
L2VPN Support over Cable Information About L2VPN Support over Cable
Downstream Classifier L2VPN EncodingAn encoding that appears in a Downstream Packet Classification Configuration Setting (type 23).
The simplest CM configuration file has a single per-SF L2VPN Encoding within the primary upstream SF definition and a single per-CM L2VPN Encoding with a NSI Encapsulation subtype for that L2VPN.
The Cisco CMTS routers support the following downstream classifier encodings:
VPN identifier (43.5.1) CMIM (43.5.4) and (22/23.13) User priority range (43.5.9)
For more information about the CM configuration file and L2VPN Encodings, refer to the Business Services over DOCSIS (BSOD) Layer 2 Virtual Private Networks specification that can be found using the Standards section on page 12. For information about how to use the configuration file generator on the Cisco CMTS, refer to the DOCSIS Internal Configuration File Generator for the Cisco CMTS document that can be found using the Related Documents section on page 12.
SNMPv3 Interface
L2VPN Support over Cable in Cisco IOS Release 12.2(33)SCA supports the following MIBs in SNMPv3:
DOCSIS-L2VPN-MIB
For a link to the Cisco IOS MIB tools, see the MIBs section on page 13.
Cisco IOS CMTS Cable Software Configuration Guide Cisco IOS CMTS Cable Software Configuration Guide
L2VPN Support over Cable How to Configure L2VPN Support over Cable
DOCSIS-L2VPN-MIB
The DOCSIS-L2VPN-MIB contains the SNMP management objects used by the Cisco CMTS router for L2VPN support. The MIB is bundled with the Cisco IOS software images that support the L2VPN Support over Cable feature. Table 2 lists the tables in the DOCSIS-L2VPN-MIB supported by the Cisco CMTS routers. For more information, refer to the MIB documentation.
Table 2 DOCSIS-L2VPN-MIB Tables
Object docsL2vpnIdToIndexTable
Description Indexed by the octet string DocsL2vpnIdentifier that provides the local agent's internally assigned docsL2vpnIdx value for that DocsL2vpnIdentifier value. Indexed by agent's local docsL2vpnIdx that provides the global L2VPN Identifier. Describes L2VPN per-CM information that is in common with all L2VPNs for the CM, regardless of forwarding mode. Describes the operation of L2VPN forwarding on each CM. Contains statistics for forwarding of packets to and from a CM on each VPN. Displays summary information for the run-time state of each VPN that is currently operating on each bridge port. Displays SF-specific L2VPN forwarding status for each upstream service flow configured with a per-SF L2VPN Encoding. Provides the L2VPN-specific objects for packet classifiers that apply to only L2VPN traffic. The indices of this table are a subset of the indices of classifiers in docsQosPktClassTable. Describes the NSI configuration for a single CM when operating in point-to-point forwarding mode for an L2VPN.
docsL2vpnCmNsiTable
Configuring the Ethernet Network System Interface, page 8 (required) Preparing the DOCSIS Configuration File for L2VPN Support, page 9 (required) Verifying L2VPN Support over Cable, page 10 (required)
L2VPN Support over Cable How to Configure L2VPN Support over Cable
Prerequisites
This following interface types can be configured as an NSI for L2VPN Support over Cable:
Cisco uBR100012 Universal Broadband RouterGigabit Ethernet. Cisco uBR7246VXR Universal Broadband RouterFast Ethernet or Gigabit Ethernet
Restrictions
The Cisco CMTS routers only support the configuration of a single L2VPN NSI per CMTS.
SUMMARY STEPS
1. 2. 3.
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
Step 3
Configures an Ethernet Network System Interface for Layer 2 VPN support over cable.
Example:
cable l2-vpn-service default-nsi GigabitEthernet4/0/0
Cisco IOS CMTS Cable Software Configuration Guide Cisco IOS CMTS Cable Software Configuration Guide
L2VPN Support over Cable How to Configure L2VPN Support over Cable
SUMMARY STEPS
1. 2. 3. 4. 5.
show cable l2-vpn dot1q-vc-map show cable l2-vpn dot1q-vc-map vpn vpnid show cable l2-vpn dot1q-vc-map mac-address vpn vpnid show cable l2-vpn dot1q-vc-map mac-address vpn vpnid verbose show cable l2-vpn dot1q-vc-map mac-address verbose
DETAILED STEPS
Step 1
To display VLAN information for all cable modems, use the show cable l2-vpn dot1q-vc-map command as shown in the following example:
Router# show cable l2-vpn dot1q-vc-map MAC Address Ethernet Interface VLAN ID 0014.f8c1.fd66 GigabitEthernet4/0/0 68 Cable Intf Cable6/0/0 SID 3 Customer Name/VPN ID 0234560001
Step 2
To display VLAN information for a particular L2VPN ID, use the show cable l2 dot1q-vc-map vpn form of the command as shown in the following example:
Router# show cable l2 dot1q-vc-map vpn 0234560001 MAC Address Ethernet Interface VLAN ID Cable Intf 0014.f8c1.fd66 GigabitEthernet4/0/0 68 Cable6/0/0 SID 3 Customer Name/VPNID 0234560001
Step 3
To display information for a particular L2VPN ID on a specific cable modem, use the show cable l2 dot1q-vc-map vpn form of the command along with specification of the cable modem MAC address, as shown in the following example:
Router# show cable l2-vpn dot1q-vc-map 0014.f8c1.fd66 vpn 0234560001 MAC Address Ethernet Interface VLAN ID Cable Intf SID Customer Name/VPNID 0014.f8c1.fd66 GigabitEthernet4/0/0 68 Cable6/0/0 3 0234560001
Step 4
To display detailed information for a particular L2VPN ID on a specific cable modem, use the show cable l2 dot1q-vc-map vpn verbose form of the command along with specification of the cable modem MAC address, as shown in the following example:
Router# show cable l2-vpn dot1q-vc-map 0014.f8c1.fd66 vpn 0234560001 verbose MAC Address : 0014.f8c1.fd66 Prim Sid : 3 Cable Interface : Cable6/0/0 VPN ID : 0234560001 L2VPN SAID : 12294 Upstream SFID : 23 Downstream CFRID[SFID] : 2[24] CMIM : 0x60 Ethernet Interface : GigabitEthernet4/0/0 DOT1Q VLAN ID : 68 Total US pkts : 1372 Total US bytes : 500226 Total US pkt Discards : 0 Total US byte Discards : 0 Total DS pkts : 1248
10
L2VPN Support over Cable Configuration Examples for L2VPN over Cable
: 415584 : 0 : 0
Step 5
To display detailed information for a particular cable modem, use the the show cable l2 dot1q-vc-map verbose form of the command along with specification of the cable modem MAC address, as shown in the following example:
Router# show cable l2-vpn dot1q-vc-map 0014.f8c1.fd66 verbose MAC Address Prim Sid Cable Interface L2VPNs provisioned DUT Control/CMIM VPN ID L2VPN SAID Upstream SFID Downstream CFRID[SFID] CMIM Ethernet Interface DOT1Q VLAN ID Total US pkts Total US bytes Total US pkt Discards Total US byte Discards Total DS pkts Total DS bytes Total DS pkt Discards Total DS byte Discards : : : : : : : : : : : : : : : : : : : : 0014.f8c1.fd66 3 Cable6/0/0 1 Enable/0xFFFFFFFF 0234560001 12294 23 2[24] 0x60 GigabitEthernet4/0/0 68 1374 501012 0 0 1250 416250 0 0
Cisco IOS CMTS Cable Software Configuration Guide Cisco IOS CMTS Cable Software Configuration Guide
11
Additional References
The following sections provide references related to the L2VPN Support over Cable feature.
Related Documents
Related Topic Cable modem configuration file creation Document Title DOCSIS Internal Configuration File Generator for the Cisco CMTS http://www.cisco.com/en/US/docs/ios/cable/configuration/guide/c mts_dsis_cfg_gen_ps2209_TSD_Products_Configuration_Guide_ Chapter.html SNMP configuration information Cisco IOS Configuration Fundamentals Configuration Guide, Part 3: Cisco IOS System Management, Configuring SNMP Support section http://www.cisco.com/en/US/docs/ios/12_2/configfun/configuratio n/guide/fcf014.html SNMP command information Cisco IOS Network Management Command Reference, Release 12.2SB http://www.cisco.com/en/US/docs/ios/netmgmt/command/referenc e/nm_book.html
Standards
Standard CM-SP-BPI+-I12-050812 Title Baseline Privacy Plus Interface Specification http://www.cablemodem.com/downloads/specs/CM-SP-BPI+_I12050812.pdf CM-SP-L2VPN-I03-061222 Business Services over DOCSIS (BSOD) Layer 2 Virtual Private Networks http://www.cablemodem.com/downloads/specs/CM-SP-L2VPN-I0 3-061222.pdf CM-SP-RFIv2.0-I11-060602 Radio Frequency Interface Specification http://www.cablemodem.com/downloads/specs/CM-SP-RFI2.0-I11 -060602.pdf IEEE 802.1ad IEEE 802.1ad-2005 IEEE Standards for Local and metropolitan area networksVirtual Bridged Local Area Networks http://www.ieee.org IEEE 802.1q IEEE Std 802.1Q Virtual Bridged Local Area Networks http://www.ieee.org
12
MIBs
MIB DOCS-L2VPN-MIB MIBs Link To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: http://www.cisco.com/go/mibs
RFCs
RFC RFC 2685 RFC 4364 Title Virtual Private Networks Identifier http://www.ietf.org/rfc/rfc2685.txt BGP/MPLS IP Virtual Private Networks (VPNs) http://www.ietf.org/rfc/rfc4364.txt
Technical Assistance
Description The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. Link http://www.cisco.com/cisco/web/support/index.html
Cisco IOS CMTS Cable Software Configuration Guide Cisco IOS CMTS Cable Software Configuration Guide
13
L2VPN Support over Cable Feature Information for L2VPN Support over Cable
Note
Table 3 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release. Unless noted otherwise, subsequent releases of that Cisco IOS software release also support that feature.
Table 3
Feature Information for Multicast VPN and DOCSIS 3.0 Multicast QoS Support
Releases
Feature Information
12.2(33)SCA This feature was introduced and provides point-to-point Transparent LAN Service (TLS) in support of the Business Services over DOCSIS (BSOD) CableLabs specification. The cable l2-vpn-service default-nsi command is introduced.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R) Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental. 2008-2010 Cisco Systems, Inc. All rights reserved.
14