Cisco OL-21636-01 - Manual (Page 152)

7-24
Cisco IP Solution Center L2VPN and Carrier Ethernet User Guide, 6.0
OL-21636-01
Chapter 7 Creating an L2VPN Policy
Defining an Ethernet EWS (EPL) Policy without a CE
Step 3 Check the Standard UNI Port check box to enable port security.
This is the default. When you uncheck the check box, the port is treated as an uplink with no security
features, and the window dynamically changes to eliminate items related to port security.
Note The Standard UNI Port attribute will be unavailable within service requests based on this policy if the
UNI is on an N-PE device running IOS XR.
Note In previous releases, the only Layer 2 VPN support for EWS (EPL) was from EWS (EPL) to EWS (EPL).
In ISC 4.1.2 and later, support is also from EWS (EPL) to Network to Network Interface (NNI) as a trunk
port. To create this new type of service request, you need to create an EWS (EPL) “hybrid” policy by
unchecking the standard UNI flag. When using the EWS (EPL) hybrid policy for service request
creation, check the Standard UNI Port flag for the EWS (EPL) side of the connection and uncheck the
standard UNI flag for the NNI side of the connection.
Note In the case of hybrid services, UNI on an N-PE running IOS XR is not supported.
Step 4 Enter an Interface Format as the slot number/port number for the PE interface (for example, 1/0
indicates that the interface is located at slot 1, port 0).
This is especially useful to specify here if you know that the link will always go through a particular
interface’s slot/port location on all or most of the network devices in the service.
Step 5 Choose an Encapsulation type.
The choices are:
• DOT1Q
• DEFAULT
If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type.
Note If the Interface Type is ANY, ISC will not ask for an Encapsulation type in the policy.
Step 6 Check the UNI Shutdown check box if you want to leave the UNI port shut during service activation,
for example, when the service provider wants to deploy a service in the network but wants to activate it
at a later time.
Step 7 Check the Keep Alive check box to configure keepalives on the UNI port.
By default, this check box is unchecked, which causes the command no keepalive to be provisioned on
the UNI port. This prevents a CPE from sending keepalive packets to the U-PE, for security purposes.
This attribute is editable to support modification on a per-service request basis.
Step 8 Check the ANY check box to display all interface types as choices for the UNI interface (when creating
service requests based on this policy).
This check box is not checked by default.
Step 9 Check the UNI check box to display all interfaces defined as type UNI as choices for the UNI interface
(when creating service requests based on this policy).
This check box is not checked by default.