07-19-2012 05:54 AM
Hi,
We have 2 ASR9K's and 6 ME3400's in an OSPF layer 3 ring with an MPLS core. We have been creating VPLS links for customers from ME3400 to ME3400 with no problems. Now we are trying to configure the same VPLS tunnel from a ME3400 to an ASR9K but can't get it to work. Here's the ME3800 config. What config would we need on the ASR9K to make the l2vpn connect? Thanks for any help you can provide.
ME3800X Config:
vlan 81
name test
l2 vfi test manual
vpn id 81
neighbor 10.10.10.10 encapsulation mpls
interface GigabitEthernet0/2
description ** test **
switchport trunk allowed vlan none
switchport mode trunk
mtu 1550
no cdp enable
service instance 81 ethernet
description ** test **
encapsulation dot1q 81
bridge-domain 81
interface Vlan81
description ** test **
mtu 1550
no ip address
xconnect vfi test
07-19-2012 07:42 AM
Interesting,
since you are using bridge-domain, you may have to add the
"rewrite ingress tag pop 1 symmetric"
line to your configuration.
Ill have to look at documentation.
Jude Bryant
07-19-2012 08:37 AM
Thanks for the reply.
The problem is, we don't know what to use for the matching configuration on the ASR9K. I've tried many to no avail. Problem is, I don't understand VPLS/l2vpn's to the extent to know how to configure the ASR9K to match the ME3800 config. We are researching and learning but it's a slow process. We are new to the ASR9k XR, and ME3800 platforms.
If someone could point us in the right direction we'd be most greatful. Thanks in advance.
Here's one thing I've tried and it doesn't work. This is the config for our ME3400 and ASR9K.
ME3800X Config:
vlan 81
name test
l2 vfi test manual
vpn id 81
neighbor 10.10.10.10 encapsulation mpls
interface GigabitEthernet0/2
description ** test **
switchport trunk allowed vlan none
switchport mode trunk
mtu 1550
no cdp enable
service instance 81 ethernet
description ** test **
encapsulation dot1q 81
bridge-domain 81
interface Vlan81
description ** test **
mtu 1550
no ip address
xconnect vfi test
ASR9K
interface GigabitEthernet0/3/0/2
transceiver permit pid all
interface GigabitEthernet0/3/0/2.81 l2transport
encapsulation dot1q 81
l2vpn
pw-class biomass
encapsulation mpls
protocol ldp
bridge group 81
bridge-domain biomass
interface GigabitEthernet0/3/0/2.81
vfi 81
neighbor 10.10.10.2 pw-id 81
pw-class biomass
Any ideas what we need to do to make this work?
07-19-2012 01:01 PM
Wbashlor
Here is an example of how this works. I hope this will be helpful too you.
user/client<==>(switch)<==>(me3800x)<==>(asr9k1)<=mpls=>(asr9k2)<==>(me3800x)<==>(switch)<==>user/client
asr9k1 has loopback0 ip address 1.1.1.1
asr9k2 has loopback0 ip address 2.2.2.2
client
(Cisco switch)
vlan 200
!
interface gig0/1
description "traffic to_from user_customer"
switchport mode access
switchport access vlan 200
!
interface gig0/24
description "trunk port to_from me3800x"
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 200
(cisco me3800x)
interface gig0/1
description "trunk port to_from switch"
switchport trunk allowed vlan none
switchport mode trunk
mtu 9800
no cdp enable
service instance 200 ethernet
encapsulation untagged , dot1q 200 (untagged is if you want to tunnel cdp, stp, vtp *please look below)
l2protocol tunnel cdp stp vtp
bridge-domain 200
!
interface gig0/2
description "connection to asr9k"
switchport trunk allowed vlan none
switchport mode trunk
no cdp enable
service instance 200 ethernet
encapsulation untagged , dot1q 200
rewrite ingress tag pop 1 symmetric
bridge-domain 200
(asr9k1)
RP/0/RSP0/CPU0:asr9k1(config)#interface te0/0/0/2.200 l2transport
RP/0/RSP0/CPU0:asr9k1(config-if)#description "connection to_from me3800x"
RP/0/RSP0/CPU0:asr9k1(config-if)#encapsulation dot1q 200
RP/0/RSP0/CPU0:asr9k1(config)#l2vpn
RP/0/RSP0/CPU0:asr9k1(config)# xconnect asr9k_mpls
RP/0/RSP0/CPU0:asr9k1(config)# p2p asr9k2
RP/0/RSP0/CPU0:asr9k1(config)# interface te0/0/0/2.200
RP/0/RSP0/CPU0:asr9k1(config)# neighber 2.2.2.2 pw-id 200 (2.2.2.2 is loopback of asr9k2)
RP/0/RSP0/CPU0:asr9k1(config)#end
* if the switches on the edge has a change to its native vlan, it needs to be reflected where the "untagged" word is*
-Regards
Jude
07-20-2012 12:48 PM
Thanks very much for the reply, but I don't understand mpls enough yet for your post to help me with my specific scenario. I should have posted more info. Here's the actual topology and configs that's currently not working. It will be obvious by the mistakes in the configs that I don't understand MPLS yet, but maybe this gives a better idea of what we are trying to accomplish and what needs correcting in my configs to make it work. Thanks.
Click to make larger:
Here are the current configs (not working):
ME3800 Config
pseudowire-class biomass
encapsulation mpls
l2 vfi biomass manual
vpn id 81
interface GigabitEthernet0/3
switchport trunk allowed vlan none
switchport mode trunk
mtu 1550
no cdp enable
service instance 81 ethernet
description ** biomass **
encapsulation dot1q 81
rewrite ingress tag pop 1 symmetric
bridge-domain 81
interface TenGigabitEthernet0/1
no switchport
dampening
mtu 9216
bandwidth 10000000
ip address 10.10.10.33 255.255.255.254
ip ospf network point-to-point
ip ospf mtu-ignore
ip ospf bfd
logging event link-status
load-interval 30
mpls ip
flowcontrol receive on
bfd interval 200 min_rx 200 multiplier 3
ip rsvp bandwidth
interface Vlan81
mtu 1550
ip address 192.168.100.21 255.255.255.0
xconnect 10.10.10.10 81 encapsulation mpls pw-class biomass
! Incomplete or Invalid Xconnect config
ASR9K Config
interface GigabitEthernet0/3/0/2
transceiver permit pid all
!
interface GigabitEthernet0/3/0/2.81 l2transport
encapsulation dot1q 81
rewrite ingress tag pop 1 symmetric
interface TenGigE0/3/0/0
bandwidth 10000000
cdp
mtu 9216
ipv4 address 10.10.10.32 255.255.255.254
flow-control bidirectional
dampening
transceiver permit pid all
l2vpn
pw-class biomass
encapsulation mpls
protocol ldp
!
!
xconnect group biomass
p2p biomass
interface GigabitEthernet0/3/0/2.81
neighbor 10.10.10.2 pw-id 81
bridge group biomass