Cisco OL-21636-01 - Manual (Page 307)

A-29
Cisco IP Solution Center L2VPN and Carrier Ethernet User Guide, 6.0
OL-21636-01
Appendix A Sample Configlets
VPLS (Multipoint, ERMS/EVP-LAN)
VPLS (Multipoint, ERMS/EVP-LAN)
Configuration • Service: L2VPN/Metro Ethernet.
• Feature: VPLS (multipoint) ERMS (EVP-LAN).
• Device configuration:
– The N-PE is a Cisco 7600 with IOS 12.2(18)SXF, Sup720-3BX.L
Interface(s): FA2/18.
– The U-PE is a Cisco 3750ME with IOS 12.2(25)EY1. No port security, no tunneling.
Interface(s): FA1/0/21 – FA1/0/23.
– VPLS Multipoint VPN with VLAN 767.
Configlets
Comments • The N-PE is a 7600 with OSM or SIP-600 module.
• The VFI contains all the N-PEs (neighbors) that this N-PE talks to.
• The U-PE is a generic Metro Ethernet (ME) switch. The customer BPDUs are blocked by the PACL.
The VPLS ERMS (EVP-LAN) UNI is the same as the L2VPN (point-to-point) ERS (EVPL) UNI.
• The SVI (interface 767) refers to the global VFI, which contains multiple peering N-PEs.
U-PE N-PE
vlan 767
exit
!
interface FastEthernet1/0/21
no cdp enable
no keepalive
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan none
switchport trunk allowed vlan 767
switchport nonegotiate
spanning-tree bpdufilter enable
mac access-group ISC-FastEthernet1/0/21 in
!
interface FastEthernet1/0/23
no ip address
mac access-list extended
ISC-FastEthernet1/0/21
deny any host 0100.0ccc.cccc
deny any host 0100.0ccc.cccd
deny any host 0100.0ccd.cdd0
deny any host 0180.c200.0000
permit any any
l2 vfi vpls_ers_1-0 manual
vpn id 89017
neighbor 99.99.10.9 encapsulation mpls
neighbor 99.99.5.99 encapsulation mpls
!
vlan 767
exit
!
interface FastEthernet2/18
switchport trunk allowed vlan
350,351,430,630,767,780,783,785-791
!
interface Vlan767
no ip address
description VPLS ERS
xconnect vfi vpls_ers_1-0
no shutdown