day 8 cau hinh dich vu man-e_cisco

8/12/2019 Day 8 Cau Hinh Dich Vu MAN-E_Cisco

1/55

CU HNH DCH V MAN-E

www.ct-in.com.vn

Joint Stock Company for Telecom & Informatics (CTIN)

L B Duy Mn CCIE#24929 (SP)

Dec 2009


2/55

Ni dung

Gii thiu v m hnh cu hnh Cisco EVC

Cu hnh dch v EPL

Cu hnh dch v EVPL

Cu hnh dch v EP-LAN Cu hnh dch v EVP-LAN

Cu hnh dch v EP-TREE

Cu hnh dch v EVP-TREE

Cu hnh dch v HSI

Cu hnh dch v IPTV

May 30, 2014

2

www.ct-in.com.vn


3/55

Flexible Ethernet Edge

May 30, 2014www.ct-in.com.vn

3

Access Edge

BRAS

SR/PE

DPI

Core NetworkMPLS /IP

Content Farm

VOD TV SIP

DSL

Residential

STB

Content Farm

VOD TV SIP

Mobile

ETTx

PON

MSPP

Cable

Business

Corporate

Residential

STB

Aggregation

L2 P-to-P (local orxconnect)L2 MP localbridgingL2 MP VPLS

L3 routed

UntaggedSingle taggedDoubletagged

802.1q802.1adetc


4/55

Example


4

ndu-acc-76-01

Switch 3750

PE-VDC

PTIC FTP Server

Cisco BRAS

1000

Vlan30

CE500

Vlan 5

tunneling

Internet

Vlan 304

Vlan20

Vlan1

0

Vlan

1(nativ

e)ES20

Vlan 10

Vlan 20

Vlan (30,5)

Vlan 304

Vlan 102

untagged

Vlan

30

4

Vlan

(303,50)

Vlan

(3

01,20)

Vlan

(302

,2)


5/55

EVCNew CLI


5

interface

sub-interfaceservice instance X service instance Y

Per Port Per EVCFeatures

Per Port Per EVCFeatures

Per PortFeatures

Per Sub-interfaceFeatures (L3)

Layer 2 Services

Bridging (VPLS via SVI)

xconnect (EoMPLS)

Local Connect L3/VRF termination

interface

service instance ethernet ID is per interface scope

VLAN tags, MAC, CoS, Ethertype

VLAN tags pop/push/translation

bridge-domain, xconnect or local connect

QoS,ACL, etc


6/55

M hnh EVC

Thitb bin mngcaphn lptptrung lulngtrong kintrc CarrierEthernet tngthphipngkhnnggiao tip, nnhiuloilulngkhcnhau:

Untagged

Single tagged

Double tagged

802.1q

802.1 ad

Trn cng 1 giao tipEthernet, v phic khnngchuynticc loilulngny titpcc dchvkhc nhau:

L2 point to point local connect

L2 point to point xconnect

L2 multipoint local bridging

L2 multipoint VPLS

L3 termination.


6


7/55

M hnh EVC

M hnh EVC l kin trc dng lnh mi dng cu hnh cc giao din Ethernet

Cc m hnh cu hnh truyn thng (Port, vlan,sub-interface) h tr cu hnh cc tnh nngc bn, nhng khng h tr tt c cc tnhnng ca mt thit b bin dch v mi nhSelective QinQ, Double Tag Translation. Cc

tnh nng ny ch c h tr trong m hnhEVC.


7


8/55

EVCKhi to Service Instances


8

Physical Interface

Services instance

interface

service instance ethernet ID is per interface scope

interface TenGigabitEthernet1/0/1no ip address

service instance 20 ethernetdescription ELINE Test


9/55

EVCMap lu lng vo Service instance


9

Physical Interface

Service Instance

interface

service instance ethernet ID is per interfacescope

encapsulation

.1Q traffic vi tag vlan = 10


QinQ traffic 10,20)

Untagged traffic


10/55

EVCMap lu lng vo Service instance


10

Physical Interface

Service instance



QinQ traffic 10,20)

Untagged traffic

interface TenGigabitEthernet1/0/1no ip address

service instance 1 ethernetencapsultion dot1q 10

Service instance 2 ethernetEncapsultion dot1q 20

Service instance 3 ethernetEncapsulation dot1q 10 second-dot1q 20

Service instance 40 ethernetEncapsulation untagged


11/55

Flexible Frame Matching CLI


11

Single tagged frame

encapsulation dot1q {any | [,[-]]}Vlan tag can be single, multiple or range or any (1-4096).

Double tagged frame(only look up to 2 tags if receive more than 2 tagged frames)encapsulation dot1q second-dot1q {any | [,[-]]}First vlan tag must be unique, second vlan tag can be any, unique, range or multiple

Default tag

encapsulation default

Match all frames tagged or untagged that are not matched by other more specific serviceinstances

untagged

encapsulation untagged

Match no tagged frames, for example native vlan

interface gig 1/1/1service instance 1 ethernetencapsulation ?default catch-all unconfigured encapsulationdot1ad 802.1ad - Provider Bridges

dot1q IEEE 802.1Q Virtual LAN or S-VLANpriority-tagged Priority tagged EFPuntagged Untagged encapsulation


12/55

EVCVLAN Manipultion


12

Physical Interface

Physical Interface

interface

service instance ethernet ID is per interfacescope

encapsulation

rewrite ingress



QinQ traffic 10,20)

Untagged traffic

QinQ traffic vi tag vlan = (50,100)


Untagged traffic

.1Q traffic Vlan = 101


13/55

EVCFlexible VLAN TagManipulation and Translation


13

Flexible VLAN tag manipulation and translationof any combination of up to 2 VLAN tags.

Virtually any tag (0,1 or 2) can be rewritten to anyother tag (0,1,2)

1-1,1-2,2-1,2-2 VLAN translation

Add 1 or 2 new VLAN tags

Removing 1 or 2 existing VLAN tags


14/55

Encapsulation Rewrite CLI


14

NPE1(config-if-srv)#rewrite ingress tag pop ?

1 Pop the outermost tagremove 1 tag

2 Pop two outermost tagsremove 2 tag

NPE1(config-if-srv)#rewrite ingress tag push dot1q 10 add one tag

NPE1(config-if-srv)#rewrite ingress tag push dot1q 10 second-dot1q 20 add two tag

NPE1(config-if-srv)#rewrite ingress tag translate ?

1-to-1 Translate 1-to-1




interface gig 1/1/1service instance 1 ethernetencapsulation dot1q 10

rewrite ingress tag ?pop Pop the tagpush Rewrite Operation of pushtranslate Translate Tag


15/55

EVC Map traffic vo dch v


15

ATM / FR

PVC / DLCI

BD

SWIDB

Service Instances

L2 inter-working

Bridging

Ethernet access to L3VPN/IP

EFPsPhysical Ports

BD

BD

SVI

L2 VFI

BD (Bridge domain) = VLAN

SVI (Switched Virtual Interface) = Interface VLAN

BD SVIP-to-P xconnect, local connect

SWIDB L3/VRF

MP

LS

MPLSUPLINK


16/55

Service CLIPoint-to-point


16

P-to-P local/xconnect doesnt require global VLAN resource, no MAC learning/forwarding. It can scale beyond 4KVLAN limit

Point-to-point local connect

connect interface GigabitEthernet4/1/0service instance 3 ethernetencapsulation dot1q 51

rewrite ingress tag translate 1-to-2 dot1q 52 second-dot1q 52 symmetric

interface GigabitEthernet4/1/1service instance 3 ethernetencapsulation dot1q 52 second-dot1q 52

connect eline-3 GigabitEthernet4/1/0 3 GigabitEthernet4/1/1 3

Point-to-point xconnect

xconnect encapsulation mpls

interface GigabitEthernet4/1/1service instance 11 ethernetencapsulation dot1q 101 second-dot1q 60-70xconnect 10.0.0.3 101 encapsulation mpls


17/55

Service CLIMultipointMAC based forwarding


17

Multiple point local bridging and VPLSbridge-domain [split-horizon]

Split-horizon to disable L2 communication between two EFPsLocal Bridging(Packet flow example 3C)

interface GigabitEthernet4/1/0service instance 101 ethernetencapsulation dot1q 101-1000bridge-domain 100

interface GigabitEthernet4/1/1service instance 101 ethernetencapsulation dot1q 101-1000bridge-domain 100

interface GigabitEthernet3/1switchport access vlan 100switchport mode dot1q-tunnel

VPLS

interface GigabitEthernet4/1/0service instance 2 ethernetencapsulation dot1q 20bridge-domain 20 split-horizon

interface GigabitEthernet4/1/1service instance 2 ethernetencapsulation dot1q 20bridge-domain 20 split-horizon

interface Vlan20xconnect vfi vpls-20


18/55

Service CLIL3 routed


18

Single tag termination

interface GigabitEthernet4/1/1service instance 100 ethernet

encapsulation dot1q 100rewrite ingress tag pop 1 symmetricbridge-domain 100

interface Vlan100ip address 100.1.100.1 255.255.255.0

Double tag termination

interface GigabitEthernet4/1/1service instance 100 ethernet

encapsulation dot1q 100 second 200rewrite ingress tag pop 2 symmetricbridge-domain 100

interface Vlan100ip address 100.1.100.1 255.255.255.0


19/55

Cu hnh dch v EPL


19

Router ID:

PE1: 1.1.1.1

PE2: 2.2.2.2


20/55

Cu hnh dch v EPL


20

PE1

int g2/24

switchport

switchport access vlan 20

switchport mode dot1q-tunnel

no cdp enable

l2protocol-tunnel cdpl2protocol-tunnel stp

l2protocol-tunnel vtp

vlan 20

int vlan 20

no ip address

xconnect 2.2.2.2 100 encapsulation

mpls

exit

PE2

int g2/24

switchport


switchport mode dot1q-tunnel

no cdp enable

l2protocol-tunnel cdpl2protocol-tunnel stp


vlan 20

int vlan 20

no ip address

xconnect 1.1.1.1 100 encapsulationmpls

exit

Nu khng s dng m hnh EVC, mi dch v EPL cn 1 S-VLAN i vi khch hng sdng CPE l switch


21/55

Cu hnh dch v EPL


21

PE1

interface GigabitEthernet1/0/1

no ip address

service instance 20 ethernetdescription EPL


xconnect 1.1.1.1 100 encapsulation mpls

PE2


no ip address

service instance 20 ethernetdescription EPL



i vi m hnh Cisco EVC, cc dch v Point to Point khng i hi tiu tn S-VLAN canh cung cp dch v


22/55

Cu hnh dch v EVPL


22

Router ID:

PE1: 1.1.1.1

PE2: 2.2.2.2

PE3: 3.3.3.3


23/55

Cu hnh dch v EVPL


23

PE1

interface GigaEthernet2/23.100

encapsulation dot1Q 100


mpls

mtu 1526

no cdp enable




mpls

mtu 1526

no cdp enableend

PE2




mpls

mtu 1526

no cdp enable

PE3




mpls

mtu 1526no cdp enable

Nu khng s dng m hnh EVC, mi knh ca dch vEVPL yu cu 1 S-VLAN


24/55

Cu hnh dch v EVPL


24

PE1

interface GigabitEthernet1/0/1no ip addressservice instance 10 ethernet

description EVPLencapsulation dot1q 100xconnect 2.2.2.2 102 encapsulation mpls

service instance 20 ethernetdescription EVPLencapsulation dot1q 200


PE2


description EVPLencapsulation dot1q 100xconnect 1.1.1 102 encapsulation mpls

PE3


description EVPLencapsulation dot1q 200xconnect 1.1.1.1 103 encapsulation mpls

i vi m hnh Cisco EVC, cc dch vPoint to Point khng i hi tiu tn S-VLAN ca nh cung cp dch v


25/55

Cu hnh dch v EP-LAN


25

Router ID:

PE1: 1.1.1.1

PE2: 2.2.2.2

PE3: 3.3.3.3


26/55

Cu hnh dch v EP-LAN


26

PE1int g2/24

switchport


switchport mode dot1q-

tunnel

no cdp enable

l2protocol-tunnel cdp

l2protocol-tunnel stpl2protocol-tunnel vtp

vlan 20

int vlan 20

no ip address

xconnect vfi EP-LAN-20

Exit

L2 vfi EP-LAN-20 manual

Vpn id 100

Neighbor 2.2.2.2

encapsulation mpls

Neighbor 3.3.3.3

encapsulation mpls

PE2

int g2/20

switchport



tunnel

no cdp enable


l2protocol-tunnel stp


vlan 20

int vlan 20

no ip address


Exit


Vpn id 100

Neighbor 1.1.1.1

encapsulation mpls

Neighbor 3.3.3.3

encapsulation mpls

PE3

int g2/20

switchport



tunnel

no cdp enable


l2protocol-tunnel stp


vlan 20

int vlan 20

no ip address


Exit


Vpn id 100

Neighbor 1.1.1.1

encapsulation mpls

Neighbor 2.2.2.2

encapsulation mpls


27/55

Cu hnh dch v EP-LAN


27

PE1


service instance 1 ethernet

description EP-LAN


bridge-domain 20

L2 vfi EP-LAN-20 manualVpn id 100

Neighbor 2.2.2.2 encapsulation mpls


vlan 20

int vlan 20

no ip address


Exit

PE2

interface TenGigabitEthernet1/0/1


description EP-LAN


bridge-domain 20

L2 vfi EP-LAN-20 manualVpn id 100



vlan 20

int vlan 20

no ip address


Exit

PE3



description EP-LAN


bridge-domain 20

vL2 vfi EP-LAN-20 manualVpn id 100



vlan 20

int vlan 20

no ip addressxconnect vfi EP-LAN-20

Exit

Dch v EP-LAN yu cu 1 S-VLAN cho mi khch hng

H EP LAN


28/55

Hot ng ca EP-LANSplit horizon Rule


28


29/55

Hot ng ca EP-LANFlooding and MAC Learning


29

VFI MAC Port

101 aa E0/1


30/55


31/55

Hot ng ca EP-LANMAC Learning & Switching


31

VFI MAC Port

101 aa E0/1

101 cc PW12

VFI MAC Port

101 aa PW13

VFI MAC Port

101 aa PW12

101 cc E0/1


32/55

Hot ng ca EP-LANMAC Learning & Switching


32

VFI MAC Port

101 aa E0/1

101 cc PW12

VFI MAC Port

101 aa PW13

VFI MAC Port

101 aa PW12

101 cc E0/1


33/55

Cu hnh dch v EVP-LAN


33


34/55



34

PE1int g2/24

switchport

switchport mode trunk

Switchport trunk allowed vlan 10, 20

no cdp enable

Vlan 10

Interface vlan 10

Xconnect 3.3.3.3 103 encapsulation mpls

Vlan 20

Interface vlan 20

Xconnect vfi EP-LAN-20


Vpn id 200



PE2int g2/24

switchport


Switchport trunk allowed

vlan 20

no cdp enable

Vlan 20

Interface vlan 20


L2 vfi EP-LAN-20

manual

Vpn id 200

Neighbor 1.1.1.1

encapsulation mpls

Neighbor 3.3.3.3

encapsulation mpls

PE3int g2/24

switchport


Switchport trunk allowed vlan 10, 20

no cdp enable

Vlan 10

Interface vlan 10


Vlan 20

Interface vlan 20



Vpn id 200




35/55



35

PE1interface GigabitEthernet1/0/1


description EPL

encapsulation dot1q 10


service instance 2 ethernetdescription EP-LAN


bridge-domain 20

Vlan 20

Interface vlan 20



Vpn id 200





description EP-LAN


bridge-domain 20

Vlan 20

Interface vlan 20



Vpn id 200





description EPL


Xconnect 1.1.1.1 103 encapsulationmpls


description EP-LAN


bridge-domain 20

Vlan 20

Interface vlan 20Xconnect vfi EP-LAN-20


Vpn id 200




36/55

VPLS and H-VPLS


36

Kin trc H-VPLS cho php gim s EoMPLS PW trong mt VFICh cc core node (khi to VFI) thc hin hc a ch MAC ca khch hng


37/55

EP-LAN with H-VPLS architecture


37


38/55

EP-LAN with H-VPLS architecture


38



description EP-LAN


xconnect 11.11.11.11 200encapsulation mpls



description EP-LAN


xconnect 11.11.11.11 200encapsulation mpls



description EP-LAN


xconnect 3.3.3.3 200 encapsulationmpls

P1Vlan 20

Interface vlan 20



Vpn id 200

Neighbor 33.33.33.33encapsulation mpls

Neighbor 1.1.1.1 encapsulation

mpls no-split-horizon



P2Vlan 20

Interface vlan 20



Vpn id 200Neighbor 11.11.11.11

encapsulation mpls



Router ID:

PE1: 1.1.1.1

PE2: 2.2.2.2

PE3: 3.3.3.3

P1: 11.11.11.11P2: 22.22.22.22

P3: 33.33.33.33


39/55

Cu hnh EP-TREE


39


40/55

Cu hnh EP-TREE


40

PE1



description EP-TREE


bridge-domain 20

L2 vfi EP-TREE-20 manualVpn id 100



vlan 20

int vlan 20

no ip address

xconnect vfi EP-TREE-20Exit

PE2



description EP-TREE


bridge-domain 20

L2 vfi EP-TREE-20 manualVpn id 100


vlan 20

int vlan 20

no ip address

xconnect vfi EP-TREE-20

Exit

PE3



description EP-TREE


bridge-domain 20

vL2 vfi EP-TREE-20 manualVpn id 100


vlan 20

int vlan 20

no ip address


Exit


41/55

Cu hnh EVP-TREE


41


42/55

Cu hnh EVP-TREE

May 30, 2014

www.ct-in.com.vn

42



description EP-TREE

encapsulation dot 1q 10

bridge-domain 10


description EP-LAN


bridge-domain 20


Vpn id 100



vlan 20

int vlan 20

no ip address


Exit

PE2interface TenGigabitEthernet1/0/1


description EP-TREE


bridge-domain 10


description EP-LAN


bridge-domain 20


Vpn id 100



vlan 20

int vlan 20

no ip address


Exit

PE3interface TenGigabitEthernet1/0/1


description EP-TREE


bridge-domain 10


description EP-LAN


bridge-domain 20

vL2 vfi EP-LAN-20 manual

Vpn id 100



vlan 20

int vlan 20

no ip address


Exit


43/55

Cu hnh EVP-TREE


43

PE1

L2 vfi EP-TREE-10 manual

Vpn id 50



vlan 10

int vlan 10

no ip address


Exit

PE2


Vpn id 50


vlan 10

int vlan 10

no ip address


Exit

PE3


Vpn id 50


vlan 10

int vlan 10

no ip address


Exit


44/55

Cu hnh dch v HSI


44

ACI: Agent Circuit ID


45/55

Cu hnh dch v HSI


45

Access Routerinterface GigabitEthernet0/0/1.62

Encapsulation dot1q 62


Core Routerinterface GigabitEthernet0/0/1.62



Router ID:

Access Router: 1.1.1.1

Core Router: 2.2.2.2

S-VLAN:

S-VLAN = 62


46/55

Cu hnh dch v HSI


46

Access Routerinterface GigabitEthernet0/0/1




Core Routerinterface GigabitEthernet0/0/1




Router ID:



S-VLAN:

S-VLAN = 62


47/55

Cu hnh dch v HSI


47


48/55

Cu hnh dch v HSI


48



Encapsulation default

Rewrite ingress tag push 1 dot1q 62


Core Routerinterface GigabitEthernet0/0/1




Router ID:



S-VLAN:

S-VLAN = 62


49/55

Cu hnh dch v IPTV


49

S dng IGMP Static join i vi cc knh thngxuyn c dng m bo Video content lunc ti v node ny

-> Gim c thi gian delay lc chuyn knh

Static PIM-SSM mapping hoc DNS-based PIM SSMc s dng trong trng hp STB dng IGMPv2,MAN-E s dng PIM-SSM

IGMPv2 join


50/55

Cu hnh dch v IPTV

H thng Setup Box (STB) c gn a ch IP static hoc nhn tng qua giao thc DHCP

Tnh nng DHCP relay c s dng trn access router relaybn tin DHCP request t STB ti DHCP server

Mng Metro thc hin chc nng routing, to ra kt ni gia STBv Multicast source (IPTV Server)

Mi knh (channel) tng ng vi 1 multicast group address

Khi ngi dng xem 1 knh, STB gi bn tin IGMP join vomulticast group address tng ng vi knh

Phng thc truyn ti multicast c s dng truyn d liut multicast source ti STB


50


51/55

Cu hnh dch v IPTV

i vi cc knh thng xuyn c s dng, IGMPstatic join c s dng trn 1 s router ko lulng video lun sn sng trn router ny, gip gim tr thi gian truyn ti video ti STB

-> Gim c thi gian delay lc chuyn knh

Trong tng hp nh cung cp dch v s dng giaothc PIM-SSM, Static PIM-SSM mapping hoc DNS-

based PIM SSM c s dng h tr STB khngsupport IGMPv3 m ch support IGMPv2


51

Cu hnh dch v IPTV


52/55

Cu hnh dch v IPTVCu hnh ipDSLAM facing Interface



description EFP for Video Service


rewrite ingress tag pop 1 symmetric

bridge-domain 517 split-horizon

interface Vlan517

description SA-DSLAM1 Trunk Video Edge

ip dhcp relay information trusted

ip address 170.201.0.1 255.255.0.0

ip helper-address 10.20.61.11 ! -> a ch ca DHCP Server

no ip unreachables

ip pim sparse-mode

load-interval 30


52

Cu hnh dch v IPTV


53/55

Cu hnh dch v IPTVCu hnh Static PIM-SSM Mapping

Access Router

ip igmp ssm-map enable .

ip igmp ssm-map staticaccess-list source-address

V d:

ip igmp ssm-map static 15 203.150.100.100

access-list 15 permit 232.1.1.0 0.0.0.255

Cc bn tin IGMPv2 join vo multicast group address thuc vo ACL 15 s cmapping thnh bn tin join vo multicast group address thuc vo ACL15 vmulticast source 203.150.100.100


53

Cu hnh dch v IPTV


54/55

Cu hnh dch v IPTVDNS based PIM-SSM Mapping

Access Router

ip igmp ssm-map enable

ip igmp ssm-map query dns

ip name-server server-address1 [server-address2...server-address6]


54

Cu hnh dch v IPTV


55/55

Cu hnh dch v IPTVCu hnh IGMP static joinCore Router

class-map type multicast-flows static ! Tn ca class map

group 227.7.7.7

group 232.7.7.7 to 232.7.7.9 source 10.1.1.10group 232.7.7.7 source 10.1.1.10

group 227.7.7.7 to 227.7.7.9

Interface Gi1/0/10Description connect to Edge Router

ip igmp static-group class-map static

May 30 2014www ct in com vn

55

day 8 cau hinh dich vu man-e_cisco

Documents