Re: ASR9K to ME3800 l2vpn Config - Need Help

wbashlor · ‎07-19-2012

Hi,

We have 2 ASR9K's and 6 ME3400's in an OSPF layer 3 ring with an MPLS core. We have been creating VPLS links for customers from ME3400 to ME3400 with no problems. Now we are trying to configure the same VPLS tunnel from a ME3400 to an ASR9K but can't get it to work. Here's the ME3800 config. What config would we need on the ASR9K to make the l2vpn connect? Thanks for any help you can provide.

ME3800X Config:

vlan 81

name test

l2 vfi test manual

vpn id 81

neighbor 10.10.10.10 encapsulation mpls

interface GigabitEthernet0/2

description ** test **

switchport trunk allowed vlan none

switchport mode trunk

mtu 1550

no cdp enable

service instance 81 ethernet

description ** test **

encapsulation dot1q 81

bridge-domain 81

interface Vlan81

description ** test **

mtu 1550

no ip address

xconnect vfi test

judebryant · ‎07-19-2012

Interesting,

since you are using bridge-domain, you may have to add the

"rewrite ingress tag pop 1 symmetric"

line to your configuration.

Ill have to look at documentation.

Jude Bryant

wbashlor · ‎07-19-2012

Thanks for the reply.

The problem is, we don't know what to use for the matching configuration on the ASR9K. I've tried many to no avail. Problem is, I don't understand VPLS/l2vpn's to the extent to know how to configure the ASR9K to match the ME3800 config. We are researching and learning but it's a slow process. We are new to the ASR9k XR, and ME3800 platforms.

If someone could point us in the right direction we'd be most greatful. Thanks in advance.

Here's one thing I've tried and it doesn't work. This is the config for our ME3400 and ASR9K.

ME3800X Config:

vlan 81

name test

l2 vfi test manual

vpn id 81

neighbor 10.10.10.10 encapsulation mpls

interface GigabitEthernet0/2

description ** test **

switchport trunk allowed vlan none

switchport mode trunk

mtu 1550

no cdp enable

service instance 81 ethernet

description ** test **

encapsulation dot1q 81

bridge-domain 81

interface Vlan81

description ** test **

mtu 1550

no ip address

xconnect vfi test

ASR9K

interface GigabitEthernet0/3/0/2

transceiver permit pid all

interface GigabitEthernet0/3/0/2.81 l2transport

encapsulation dot1q 81

l2vpn

pw-class biomass

encapsulation mpls

protocol ldp

bridge group 81

bridge-domain biomass

interface GigabitEthernet0/3/0/2.81

vfi 81

neighbor 10.10.10.2 pw-id 81

pw-class biomass

Any ideas what we need to do to make this work?

judebryant · ‎07-19-2012

Wbashlor

Here is an example of how this works. I hope this will be helpful too you.

user/client<==>(switch)<==>(me3800x)<==>(asr9k1)<=mpls=>(asr9k2)<==>(me3800x)<==>(switch)<==>user/client

asr9k1 has loopback0 ip address 1.1.1.1
asr9k2 has loopback0 ip address 2.2.2.2

client

(Cisco switch)
vlan 200
!
interface gig0/1
description "traffic to_from user_customer"
switchport mode access
switchport access vlan 200
!
interface gig0/24
description "trunk port to_from me3800x"
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 200

(cisco me3800x)
interface gig0/1
description "trunk port to_from switch"
switchport trunk allowed vlan none
switchport mode trunk
mtu 9800
no cdp enable
service instance 200 ethernet
encapsulation untagged , dot1q 200 (untagged is if you want to tunnel cdp, stp, vtp *please look below)
l2protocol tunnel cdp stp vtp
bridge-domain 200
!
interface gig0/2
description "connection to asr9k"
switchport trunk allowed vlan none
switchport mode trunk
no cdp enable
service instance 200 ethernet
encapsulation untagged , dot1q 200
rewrite ingress tag pop 1 symmetric
bridge-domain 200

(asr9k1)
RP/0/RSP0/CPU0:asr9k1(config)#interface te0/0/0/2.200 l2transport
RP/0/RSP0/CPU0:asr9k1(config-if)#description "connection to_from me3800x"
RP/0/RSP0/CPU0:asr9k1(config-if)#encapsulation dot1q 200
RP/0/RSP0/CPU0:asr9k1(config)#l2vpn
RP/0/RSP0/CPU0:asr9k1(config)# xconnect asr9k_mpls
RP/0/RSP0/CPU0:asr9k1(config)# p2p asr9k2
RP/0/RSP0/CPU0:asr9k1(config)# interface te0/0/0/2.200
RP/0/RSP0/CPU0:asr9k1(config)# neighber 2.2.2.2 pw-id 200 (2.2.2.2 is loopback of asr9k2)
RP/0/RSP0/CPU0:asr9k1(config)#end

* if the switches on the edge has a change to its native vlan, it needs to be reflected where the "untagged" word is*

-Regards

Jude

wbashlor · ‎07-20-2012

Thanks very much for the reply, but I don't understand mpls enough yet for your post to help me with my specific scenario. I should have posted more info. Here's the actual topology and configs that's currently not working. It will be obvious by the mistakes in the configs that I don't understand MPLS yet, but maybe this gives a better idea of what we are trying to accomplish and what needs correcting in my configs to make it work. Thanks.

Click to make larger:

Here are the current configs (not working):

ME3800 Config

pseudowire-class biomass

encapsulation mpls

l2 vfi biomass manual

vpn id 81

interface GigabitEthernet0/3

switchport trunk allowed vlan none

switchport mode trunk

mtu 1550

no cdp enable

service instance 81 ethernet

description ** biomass **

encapsulation dot1q 81

rewrite ingress tag pop 1 symmetric

bridge-domain 81

interface TenGigabitEthernet0/1

no switchport

dampening

mtu 9216

bandwidth 10000000

ip address 10.10.10.33 255.255.255.254

ip ospf network point-to-point

ip ospf mtu-ignore

ip ospf bfd

logging event link-status

load-interval 30

mpls ip

flowcontrol receive on

bfd interval 200 min_rx 200 multiplier 3

ip rsvp bandwidth

interface Vlan81

mtu 1550

ip address 192.168.100.21 255.255.255.0

xconnect 10.10.10.10 81 encapsulation mpls pw-class biomass

! Incomplete or Invalid Xconnect config

ASR9K Config

interface GigabitEthernet0/3/0/2

transceiver permit pid all

!

interface GigabitEthernet0/3/0/2.81 l2transport

encapsulation dot1q 81

rewrite ingress tag pop 1 symmetric

interface TenGigE0/3/0/0

bandwidth 10000000

cdp

mtu 9216

ipv4 address 10.10.10.32 255.255.255.254

flow-control bidirectional

dampening

transceiver permit pid all

l2vpn

pw-class biomass

encapsulation mpls

protocol ldp

!

xconnect group biomass

p2p biomass

interface GigabitEthernet0/3/0/2.81

neighbor 10.10.10.2 pw-id 81

bridge group biomass