MPLS Layer 2 VPNs Configuration Guide, Cisco IOS XE Release 3S
Configuring Virtual Private LAN Services
Downloads: This chapterpdf (PDF - 1.63MB) The complete bookPDF (PDF - 7.56MB) | The complete bookePub (ePub - 1.78MB) | Feedback

Configuring Virtual Private LAN Services

Contents

Configuring Virtual Private LAN Services


Note


For complete syntax and usage information for the commands used in this chapter, see these publications:


  • Cisco IOS Release 12.2SY supports only Ethernet interfaces. Cisco IOS Release 12.2SY does not support any WAN features or commands.

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Search Tool and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table at the end of this module.

Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/​go/​cfn. An account on Cisco.com is not required.

Information about Virtual Private LAN Services

VPLS Overview

VPLS (Virtual Private LAN Service) enables enterprises to link together their Ethernet-based LANs from multiple sites via the infrastructure provided by their service provider. From the enterprise perspective, the service provider's public network looks like one giant Ethernet LAN. For the service provider, VPLS provides an opportunity to deploy another revenue-generating service on top of their existing network without major capital expenditures. Operators can extend the operational life of equipment in their network.

Virtual Private LAN Services (VPLS) uses the provider core to join multiple attachment circuits together to simulate a virtual bridge that connects the multiple attachment circuits together. From a customer point of view, there is no topology for VPLS. All of the CE devices appear to connect to a logical bridge emulated by the provider core (see the figure below).

Figure 1. VPLS Topology



Full-Mesh Configuration

The full-mesh configuration requires a full mesh of tunnel label switched paths (LSPs) between all the PEs that participate in the VPLS. With full-mesh, signaling overhead and packet replication requirements for each provisioned VC on a PE can be high.

You set up a VPLS by first creating a virtual forwarding instance (VFI) on each participating PE router. The VFI specifies the VPN ID of a VPLS domain, the addresses of other PE routers in the domain, and the type of tunnel signaling and encapsulation mechanism for each peer PE router.

The set of VFIs formed by the interconnection of the emulated VCs is called a VPLS instance; it is the VPLS instance that forms the logic bridge over a packet switched network. The VPLS instance is assigned a unique VPN ID.

The PE routers use the VFI to establish a full-mesh LSP of emulated VCs to all the other PE routers in the VPLS instance. PE routers obtain the membership of a VPLS instance through static configuration using the Cisco IOS CLI.

The full-mesh configuration allows the PE router to maintain a single broadcast domain. Thus, when the PE router receives a broadcast, multicast, or unknown unicast packet on an attachment circuit, it sends the packet out on all other attachment circuits and emulated circuits to all other CE devices participating in that VPLS instance. The CE devices see the VPLS instance as an emulated LAN.

To avoid the problem of a packet looping in the provider core, the PE devices enforce a "split-horizon" principle for the emulated VCs. That means if a packet is received on an emulated VC, it is not forwarded on any other emulated VC.

After the VFI has been defined, it needs to be bound to an attachment circuit to the CE device.

The packet forwarding decision is made by looking up the Layer 2 virtual forwarding instance (VFI) of a particular VPLS domain.

A VPLS instance on a particular PE router receives Ethernet frames that enter on specific physical or logical ports and populates a MAC table similarly to how an Ethernet switch works. The PE router can use the MAC address to switch those frames into the appropriate LSP for delivery to the another PE router at a remote site.

If the MAC address is not in the MAC address table, the PE router replicates the Ethernet frame and floods it to all logical ports associated with that VPLS instance, except the ingress port where it just entered. The PE router updates the MAC table as it receives packets on specific ports and removes addresses not used for specific periods.

Static VPLS Configuration

The following diagram shows an example of an implementation of static VPLS over MPLS-TP tunnels.

Figure 2. Example of Static VPLS over MPLS-TP Tunnels


This Image 300920.jpg is not available in preview/cisco.com


To configure static VPLS over MPLS-TP tunnels, you must complete the following procedures, as described later in this chapter:

  • Configure the pseudowire class
  • Configure the VFI connection to one or more bridge domains
  • Configure H-VPLS
  • Configure the VPLS Multicast VLAN Registration (MRV)
  • Configure the static VPLS

H-VPLS

Hierarchical VPLS (H-VPLS) reduces both signaling and replication overhead by using both full-mesh as well as hub and spoke configurations. Hub and spoke configurations operate with split horizon to allow packets to be switched between pseudo-wires (PWs), effectively reducing the number of PWs between PEs.


Note


Split horizon is the default configuration to avoid broadcast packet looping. To avoid looping when using the no-split-horizon keyword, be very mindful of your network configuration.


Supported Features

Multipoint-to-Multipoint Support

Two or more devices are associated over the core network. No one device is designated as the Root node, but all devices are treated as Root nodes. All frames can be exchanged directly between nodes.

Non-Transparent Operation

A virtual Ethernet connection (VEC) can be transparent or non-transparent with respect to Ethernet PDUs (that is, BPDUs). The purpose of VEC non-transparency is to allow the end user to have a Frame Relay-type service between Layer 3 devices.

Circuit Multiplexing

Circuit Multiplexing allows a node to participate in multiple services over a single Ethernet connection. By participating in multiple services, the Ethernet connection is attached to multiple logical networks. Some examples of possible service offerings are VPN services between sites, Internet services, and third-party connectivity for intercompany communications.

MAC-Address Learning Forwarding and Aging

PEs must learn remote MAC addresses and directly attached MAC addresses on customer facing ports. MAC address learning accomplishes this by deriving topology and forwarding information from packets originating at customer sites. A timer is associated with stored MAC addresses. After the timer expires, the entry is removed from the table.

Jumbo Frame Support

Jumbo frame support provides support for frame sizes between 1548 through 9216 bytes. You use the CLI to establish the jumbo frame size for any value specified in the above range. The default value is 1500 bytes in any Layer 2/VLAN interface. You can configure jumbo frame support on a per-interface basis.

Q-in-Q Support and Q-in-Q to EoMPLS Support

With 802.1Q tunneling (Q-in-Q), the CE issues VLAN-tagged packets and the VPLS forwards the packets to a far-end CE. Q-in-Q refers to the fact that one or more 802.1Q tags may be located in a packet within the interior of the network. As packets are received from a CE device, an additional VLAN tag is added to incoming Ethernet packets to segregate traffic from different CE devices. Untagged packets originating from the CE use a single tag within the interior of the VLAN switched network, while previously tagged packets originating from the CE use two or more tags.

VPLS Services

Transparent LAN Service

Transparent LAN Service (TLS) is an extension to the point-to-point port-based EoMPLS, used to provide bridging protocol transparency (for example, bridge protocol data units [BPDUs]) and VLAN values. Bridges see this service as an Ethernet segment. With TLS, the PE router forwards all Ethernet packets received from the customer-facing interface (including tagged, untagged, and BPDUs) as follows:

  • To a local Ethernet interface or an emulated VC if the destination MAC address is found in the Layer 2 forwarding table.
  • To all other local Ethernet interfaces and emulated VCs belonging to the same VPLS domain if the destination MAC address is a multicast or broadcast address or if the destination MAC address is not found in the Layer 2 forwarding table.

Note


You must enable Layer 2 protocol tunneling to run the Cisco Discovery Protocol (CDP), the VLAN Trunking Protocol (VTP), and the Spanning-Tree Protocol (STP).


Ethernet Virtual Connection Service

Ethernet Virtual Connection Service (EVCS) is an extension to the point-to-point VLAN-based EoMPLS that allows routers to reach multiple intranet and extranet locations from a single physical port. Routers see subinterfaces through which they access other routers. With EVCS, the PE router forwards all Ethernet packets with a particular VLAN tag received from the customer-facing interface (excluding BPDUs) as follows:

  • To a local Ethernet interface or to an emulated VC if the destination MAC address is found in the Layer 2 forwarding table.
  • To all other local Ethernet interfaces and emulated VCs belonging to the same VPLS domain if the destination MAC address is a multicast or broadcast address or if the destination MAC address is not found in the Layer 2 forwarding table.

Note


Because it has only local significance, the demultiplexing VLAN tag that identifies a VPLS domain is removed before forwarding the packet to the outgoing Ethernet interfaces or emulated VCs.


Prerequisites

Before you configure VPLS, ensure that the network is configured as follows:

  • Configure IP routing in the core so that the PE routers can reach each other via IP.
  • Configure MPLS in the core so that a label switched path (LSP) exists between the PE routers.
  • Configure a loopback interface for originating and terminating Layer 2 traffic. Make sure the PE routers can access the other router's loopback interface. Note that the loopback interface is not needed in all cases. For example, tunnel selection does not need a loopback interface when VPLS is directly mapped to a TE tunnel.

VPLS configuration requires you to identify peer PE routers and to attach Layer 2 circuits to the VPLS at each PE router.

Restrictions for VPLS

The following general restrictions pertain to all transport types under VPLS:

  • Split horizon is the default configuration to avoid broadcast packet looping and to isolate Layer 2 traffic. Split horizon prevents packets received from an emulated VC from being forwarded into another emulated VC. This technique is important for creating loop-free paths in a full-meshed network.
  • Supported maximum values:
    • Total number of VFIs: 4,096 (4K)
    • Maximum combined number of edge and the core peer PEs per VFI:

—VPLS: 250

—H-VPLS 500

    • Total number of VC: 12,288 (12K)
  • No software-based data plane is supported.
  • No auto-discovery mechanism is supported.
  • Load sharing and failover on redundant CE-PE links are not supported.
  • The addition or removal of MAC addresses with Label Distribution Protocol (LDP) is not supported.
  • The virtual forwarding instance (VFI) is supported only with the interface vlan command.

Configuring VPLS

  • Provisioning a VPLS link involves provisioning the associated attachment circuit and the VFI on the PE.

Configuring PE Layer 2 Interfaces to CEs

  • You can configure the Ethernet Flow Point (EFP) as the Layer 2 virtual interface. You have the option of selecting tagged or untagged traffic from the CE device.

Configuring 802.1Q Access Ports for Tagged Traffic from a CE


Note


When EVCS is configured, the PE router forwards all Ethernet packets with a particular VLAN tag to a local Ethernet interface or emulated VC if the destination MAC address is found in the Layer 2 forwarding table.


SUMMARY STEPS

    1.    interface gigabitethernet

    2.    no ip address [ip_address mask] [secondary]

    3.    negotiation auto

    4.    service instance si-id ethernet

    5.    encapsulation dot1q vlan-id

    6.    bridge-domain bd-id


DETAILED STEPS
      Command or Action Purpose
    Step 1 interface gigabitethernet


    Example:
    Router(config)# interface gigabitethernet 1/0
     

    Specifies the Gigabit Ethernet interface and enters interface configuration mode.

     
    Step 2 no ip address [ip_address mask] [secondary]


    Example:
    Router(config-if)# no ip address 
     

    Disables IP processing.

     
    Step 3 negotiation auto


    Example:
    Router(config-if)# negotiation auto
     

    Enables the autonegotiation protocol to configure the speed, duplex, and automatic flow control of the Gigabit Ethernet interface.

     
    Step 4 service instance si-id ethernet


    Example:
    Router(config-if)# service instance 10 ethernet
     

    Specifies the service instance ID.

     
    Step 5 encapsulation dot1q vlan-id


    Example:
    Router(config-if-srv)# encapsulation dot1q 200
     

    Defines the matching criteria to map 802.1Q frames ingress on an interface to the appropriate service instance.

    Make sure the interface on the adjoining CE router is on the same VLAN as this PE router.

     
    Step 6 bridge-domain bd-id


    Example:
    Router(config-if-srv)# bridge-domain 100
     

    Binds a service instance to a bridge domain instance.

     
    Examples

    This example shows how to configure the tagged traffic.

    Router(config)# interface GigabitEthernet4/4
    Router(config-if)# no ip address
    Router(config-if)# negotiation auto
    Router(config-if)# service instance 10 ethernet
    Router(config-if-srv)# encapsulation dot1q 200
    Router(config-if-srv)# bridge-domain 100
    

    This example shows how to use the show run interface command to verify the configuration.

    Router# show run interface GigabitEthernet4/4
    Building configuration...
    Current configuration : 212 bytes
    !
    interface GigabitEthernet4/4
     no ip address
     negotiation auto
     service instance 10 ethernet
     encapsulation dot1q 200
     bridge-domain 100
    end

    Configuring 802.1Q Access Ports for Tagged Traffic from a CE using the commands associated with the L2VPN Protocol-Based CLIs feature


    Note


    When EVCS is configured, the PE router forwards all Ethernet packets with a particular VLAN tag to a local Ethernet interface or emulated VC if the destination MAC address is found in the Layer 2 forwarding table.


    SUMMARY STEPS

      1.    interface gigabitethernet interface-type-number

      2.    no ip address [ip_address mask] [secondary]

      3.    negotiation auto

      4.    service instance si-id ethernet

      5.    encapsulation dot1q vlan-id

      6.    exit

      7.    bridge-domain bd-id

      8.    member interface-type-number service-instance service-id [split-horizon group group-id ]

      9.    end


    DETAILED STEPS
        Command or Action Purpose
      Step 1 interface gigabitethernet interface-type-number


      Example:
      Device(config)# interface gigabitethernet 1/0
       

      Specifies the Gigabit Ethernet interface and enters interface configuration mode.

       
      Step 2 no ip address [ip_address mask] [secondary]


      Example:
      Device(config-if)# no ip address 
       

      Disables IP processing.

       
      Step 3 negotiation auto


      Example:
      Device(config-if)# negotiation auto
       

      Enables the autonegotiation protocol to configure the speed, duplex, and automatic flow control of the Gigabit Ethernet interface.

       
      Step 4 service instance si-id ethernet


      Example:
      Device(config-if)# service instance 10 ethernet
       

      Specifies the service instance ID.

       
      Step 5 encapsulation dot1q vlan-id


      Example:
      Device(config-if-srv)# encapsulation dot1q 200
       

      Defines the matching criteria to map 802.1Q frames ingress on an interface to the appropriate service instance.

      Make sure the interface on the adjoining CE router is on the same VLAN as this PE router.

       
      Step 6 exit


      Example:
      Device(config-if-srv)# exit
       

      Exits service instance mode and returns to global configuration mode.

       
      Step 7 bridge-domain bd-id


      Example:
      Device(config)# bridge-domain 100
       

      Specifies the bridge domain id and enters bridge-domain configuration mode.

       
      Step 8 member interface-type-number service-instance service-id [split-horizon group group-id ]


      Example:
      Device(config-bdomain)# member gigabitethernet0/0/0 service-instance 1000
       

      Binds a service instance to a bridge domain instance.

       
      Step 9 end


      Example:
      Device(config-bdomain)# end
       

      Exits the current configuration mode and returns to privileged EXEC mode.

       
      Examples using the commands associated with the L2VPN Protocol-Based CLIs feature

      This example shows how to configure the tagged traffic.

      Device(config)# interface GigabitEthernet4/4
      Device(config-if)# no ip address
      Device(config-if)# negotiation auto
      Device(config-if)# service instance 10 ethernet
      Device(config-if-srv)# encapsulation dot1q 200
      Device(config-if-srv)# exit
      Device(config)# bridge-domain 100
      Device(config-bdomain)# member GigabitEthernet4/4 service-instance 10
      

      This example shows how to use the show run interface command to verify the configuration.

      Device# show run interface GigabitEthernet4/4
      Building configuration...
      Current configuration : 212 bytes
      !
      interface GigabitEthernet4/4
       no ip address
       negotiation auto
       service instance 10 ethernet
       encapsulation dot1q 200
      bridge-domain 100
      	member GigabitEthernet4/4 service-instance 10
      	end

      Configuring Access Ports for Untagged Traffic from CE

      SUMMARY STEPS

        1.    interface gigabitethernet

        2.    no ip address [ip_address mask] [secondary]

        3.    negotiation auto

        4.    service instance si-id ethernet

        5.    encapsulation untagged

        6.    bridge-domain bd-id


      DETAILED STEPS
          Command or Action Purpose
        Step 1 interface gigabitethernet


        Example:
        Router(config)# interface gigabitethernet 1/0
         

        Specifies the Gigabit Ethernet interface and enters interface configuration mode.

         
        Step 2 no ip address [ip_address mask] [secondary]


        Example:
        Router(config-if)# no ip address 
         

        Disables IP processing.

         
        Step 3 negotiation auto


        Example:
        Router(config-if)# negotiation auto
         

        Enables the autonegotiation protocol to configure the speed, duplex, and automatic flow control of the Gigabit Ethernet interface.

         
        Step 4 service instance si-id ethernet


        Example:
        Router(config-if)# service instance 10 ethernet
         

        Specifies the service instance ID.

         
        Step 5 encapsulation untagged


        Example:
        Router(config-if-srv)# encapsulation untagged
         

        Defines the matching criteria to map untagged ingress Ethernet frames on an interface to the appropriate service instance.

        Make sure the interface on the adjoining CE router is on the same VLAN as this PE router.

         
        Step 6 bridge-domain bd-id


        Example:
        Router(config-if-srv)# bridge-domain 100
         

        Binds a service instance or a MAC tunnel to a bridge domain instance.

         
        Examples

        The following example shows a VFI configuration.

        Router(config)# l2 vfi VPLSA manual
        Router(config-vfi)# vpn id 110
        Router(config-vfi)# neighbor 11.11.11.11 encapsulation mpls
        Router(config-vfi)# neighbor 33.33.33.33 encapsulation mpls
        Router(config-vfi)# neighbor 44.44.44.44 encapsulation mpls
        Router(config-vfi)# bridge-domain 100

        The following example shows a VFI configuration for hub and spoke.

        Router(config)# l2 vfi VPLSA manual
        Router(config-vfi)# vpn id 110
        Router(config-vfi)# neighbor 9.9.9.9 encapsulation mpls
        Router(config-vfi)# neighbor 12.12.12.12 encapsulation mpls
        Router(config-vfi)# neighbor 33.33.33.33 encapsulation mpls no-split-horizon
        Router(config-vfi)# bridge-domain 100

        The show mpls 12transport vc command displays various information related to PE1.


        Note


        The show mpls l2transport vc [detail] command is also available to show detailed information about the VCs on a PE router as in the following example.


        VPLS-PE2# show mpls l2transport vc 201
        Local intf     Local circuit        Dest address    VC ID      Status
        -------------  -------------------- --------------- ---------- ----------
        VFI test1      VFI                  153.1.0.1       201        UP
        VFI test1      VFI                  153.3.0.1       201        UP
        VFI test1      VFI                  153.4.0.1       201        UP
        

        Note


        The VC ID in the output represents the VPN ID; the VC is identified by the combination of the Dest address and the VC ID as in the example below.


        The show vfi vfi name command shows VFI status.

        nPE-3# show vfi VPLS-2
        VFI name: VPLS-2, state: up
          Local attachment circuits:
            Vlan2  
          Neighbors connected via pseudowires:
          Peer Address     VC ID     Split-horizon
          1.1.1.1          2             Y
          1.1.1.2          2             Y
          2.2.2.3          2             N

        Configuring Access Ports for Untagged Traffic from CE using the commands associated with the L2VPN Protocol-Based CLIs feature

        SUMMARY STEPS

          1.    interface gigabitethernet

          2.    no ip address [ip-address mask] [secondary]

          3.    negotiation auto

          4.    service instance si-id ethernet

          5.    encapsulation untagged

          6.    exit

          7.    bridge-domain bd-id

          8.    member interface-type-numberservice-instance service-id [split-horizon groupgroup-id]

          9.    end


        DETAILED STEPS
            Command or Action Purpose
          Step 1 interface gigabitethernet


          Example:
          Device(config)# interface gigabitethernet 1/0
           

          Specifies the Gigabit Ethernet interface and enters interface configuration mode.

           
          Step 2 no ip address [ip-address mask] [secondary]


          Example:
          Device(config-if)# no ip address 
           

          Disables IP processing.

           
          Step 3 negotiation auto


          Example:
          Device(config-if)# negotiation auto
           

          Enables the autonegotiation protocol to configure the speed, duplex, and automatic flow control of the Gigabit Ethernet interface.

           
          Step 4 service instance si-id ethernet


          Example:
          Device(config-if)# service instance 10 ethernet
           

          Specifies the service instance ID.

           
          Step 5 encapsulation untagged


          Example:
          Device(config-if-srv)# encapsulation untagged
           

          Defines the matching criteria to map untagged ingress Ethernet frames on an interface to the appropriate service instance.

          Make sure the interface on the adjoining CE router is on the same VLAN as this PE router.

           
          Step 6 exit


          Example:
          Device(config-if-srv)# exit
           

          Exits service instance mode and returns to global configuration mode.

           
          Step 7 bridge-domain bd-id


          Example:
          Device(config)# bridge-domain 100
           

          Specifies the bridge domain id and enters bridge-domain configuration mode.

           
          Step 8 member interface-type-numberservice-instance service-id [split-horizon groupgroup-id]


          Example:
          Device(config-bdomain)# member gigabitethernet0/0/0 service-instance 1000
           

          Binds a service instance to a bridge domain instance.

           
          Step 9 end


          Example:
          Device(config-bdomain)# end
           

          Exits the current configuration mode and returns to privileged EXEC mode.

           
          Examples using the commands associated with the L2VPN Protocol-Based CLIs feature

          This example shows how to configure the untagged traffic.

          Device(config)# interface GigabitEthernet4/4
          Device(config-if)# no ip address
          Device(config-if)# negotiation auto
          Device(config-if)# service instance 10 ethernet
          Device(config-if-srv)# encapsulation untagged
          Device(config-if-srv)# exit
          Device(config)# bridge-domain 100
          Device(config-bdomain)# member GigabitEthernet4/4 service-instance 10
          

          This example shows how to use the show run interface command to verify the configuration.

          Device# show run interface GigabitEthernet4/4
          Building configuration...
          Current configuration : 212 bytes
          !
          interface GigabitEthernet4/4
           no ip address
           nonegotiation auto
           service instance 10 ethernet
           encapsulation untagged
          bridge-domain 100
          	member GigabitEthernet4/4 service-instance 10
          	end

          Configuring Q-in-Q EFP


          Note


          When TLS is configured, the PE router forwards all Ethernet packets received from the CE device to all local Ethernet interfaces and emulated VCs belonging to the same VPLS domain if the MAC address is not found in the Layer 2 forwarding table.


          SUMMARY STEPS

            1.    interface gigabitethernet

            2.    no ip address [ip_address mask] [secondary]

            3.    negotiation auto

            4.    service instance si-id ethernet

            5.    encapsulation dot1q vlan-id second-dot1q vlan-id

            6.    bridge-domain bd-id


          DETAILED STEPS
              Command or Action Purpose
            Step 1 interface gigabitethernet


            Example:
            Router(config)# interface gigabitethernet 1/0
             

            Specifies the Gigabit Ethernet interface and enters interface configuration mode.

             
            Step 2 no ip address [ip_address mask] [secondary]


            Example:
            Router(config-if)# no ip address 
             

            Disables IP processing.

             
            Step 3 negotiation auto


            Example:
            Router(config-if)# negotiation auto
             

            Enables the autonegotiation protocol to configure the speed, duplex, and automatic flow control of the Gigabit Ethernet interface.

             
            Step 4 service instance si-id ethernet


            Example:
            Router(config-if)# service instance 10 ethernet
             

            Specifies the service instance ID.

             
            Step 5 encapsulation dot1q vlan-id second-dot1q vlan-id


            Example:
            Router(config-if-srv)# encapsulation dot1q 200 second-dot1q 400
             

            Defines the matching criteria to map Q-in-Q ingress frames on an interface to the appropriate service instance.

            Make sure the interface on the adjoining CE router is on the same VLAN as this PE router.

             
            Step 6 bridge-domain bd-id


            Example:
            Router(config-if-srv)# bridge-domain 100
             

            Binds a service instance or a MAC tunnel to a bridge domain instance.

             
            Examples

            This example shows how to configure the tagged traffic.

            Router(config)# interface GigabitEthernet4/4
            Router(config-if)# no ip address
            Router(config-if)# nonegotiate auto
            Router(config-if)# service instance 10 ethernet
            Router(config-if-srv)# encapsulation dot1q 200 second-dot1q 400
            Router(config-if-srv)# bridge-domain 100
            

            This example shows how to use the show run interface command to verify the configuration.

            Router# show run interface GigabitEthernet4/4
            Building configuration...
            Current configuration : 212 bytes
            !
            interface GigabitEthernet4/4
             no ip address
             negotiate auto
             service instance 10 ethernet
             encapsulation dot1q 200 second-dot1q 400
             bridge-domain 100
            end
            

            Use the show spanning-tree vlan command to verify the port is not in a blocked state.

            Use the show vlan id command to verify that a specific port is configured to send and receive a specific VLAN’s traffic.

            Configuring Q-in-Q EFP using the commands associated with the L2VPN Protocol-Based CLIs feature


            Note


            When thread-local storage (TLS) is configured, the PE router forwards all Ethernet packets received from the CE device to all local Ethernet interfaces and emulated VCs belonging to the same VPLS domain if the MAC address is not found in the Layer 2 forwarding table.


            SUMMARY STEPS

              1.    interface gigabitethernet interface-type-number

              2.    no ip address [ip-address mask] [secondary]

              3.    negotiation auto

              4.    service instance si-id ethernet

              5.    encapsulation dot1q vlan-id second-dot1q vlan-id

              6.    exit

              7.    bridge-domain bd-id

              8.    member interface-type-number service-instance service-id [split-horizon group group-id]

              9.    end


            DETAILED STEPS
                Command or Action Purpose
              Step 1 interface gigabitethernet interface-type-number


              Example:
              Device(config)# interface gigabitethernet 1/0
               

              Specifies the Gigabit Ethernet interface and enters interface configuration mode.

               
              Step 2 no ip address [ip-address mask] [secondary]


              Example:
              Device(config-if)# no ip address 
               

              Disables IP processing.

               
              Step 3 negotiation auto


              Example:
              Device(config-if)# negotiation auto
               

              Enables the autonegotiation protocol to configure the speed, duplex, and automatic flow control of the Gigabit Ethernet interface.

               
              Step 4 service instance si-id ethernet


              Example:
              Device(config-if)# service instance 10 ethernet
               

              Specifies the service instance ID.

               
              Step 5 encapsulation dot1q vlan-id second-dot1q vlan-id


              Example:
              Device(config-if-srv)# encapsulation dot1q 200 second-dot1q 400
               

              Defines the matching criteria to map Q-in-Q ingress frames on an interface to the appropriate service instance.

              Make sure the interface on the adjoining CE router is on the same VLAN as this PE router.

               
              Step 6 exit


              Example:
              Device(config-if-srv)# exit
               

              Exits service instance mode and returns to global configuration mode.

               
              Step 7 bridge-domain bd-id


              Example:
              Device(config)# bridge-domain 100
               

              Specifies the bridge domain id and enters bridge-domain configuration mode.

               
              Step 8 member interface-type-number service-instance service-id [split-horizon group group-id]


              Example:
              Device(config-bdomain)# member gigabitethernet0/0/0 service-instance 1000
               

              Binds a service instance to a bridge domain instance.

               
              Step 9 end


              Example:
              Device(config-bdomain)# end
               

              Exits the current configuration mode and returns to privileged EXEC mode.

               
              Examples using the commands associated with the L2VPN Protocol-Based CLIs feature

              This example shows how to configure the tagged traffic.

              Device(config)# interface GigabitEthernet4/4
              Device(config-if)# no ip address
              Device(config-if)# nonegotiate auto
              Device(config-if)# service instance 10 ethernet
              Device(config-if-srv)# encapsulation dot1q 200 second-dot1q 400
              Device(config-if-srv)# exit
              Device(config)# bridge-domain 100
              Device(config-bdomain)# member GigabitEthernet4/4 service-instance 10
              

              This example shows how to use the show run interface command to verify the configuration.

              Device# show run interface GigabitEthernet4/4
              Building configuration...
              Current configuration : 212 bytes
              !
              interface GigabitEthernet4/4
               no ip address
               negotiate auto
               service instance 10 ethernet
               encapsulation dot1q 200 second-dot1q 400
              bridge-domain 100
              	member GigabitEthernet4/4 service-instance 10
              	end
              

              Use the show spanning-tree vlan command to verify the port is not in a blocked state.

              Use the show vlan id command to verify that a specific port is configured to send and receive a specific VLAN’s traffic.

              Configuring MPLS in the PE

              To configure MPLS in the PE, you must provide the required MPLS parameters.


              Note


              Before configuring MPLS, ensure that you have IP connectivity between all PEs by configuring Interior Gateway Protocol (IGP) (Open Shortes Path First [OSPF] or Intermediate System to Intermediate System [IS-IS]) between the PEs.


              SUMMARY STEPS

                1.    enable

                2.    configure terminal

                3.    mpls label protocol {ldp | tdp}

                4.    mpls ldp logging neighbor-changes

                5.    mpls ldp discovery hello holdtimeseconds

                6.    mpls ldp router-id Loopback0 force


              DETAILED STEPS
                  Command or Action Purpose
                Step 1 enable


                Example:
                Router> enable
                 

                Enables privileged EXEC mode.

                • Enter your password if prompted.
                 
                Step 2 configure terminal


                Example:
                Router# configure terminal
                 

                Enters global configuration mode.

                 
                Step 3 mpls label protocol {ldp | tdp}

                Example:
                Router(config)# mpls label protocol ldp
                 

                Specifies the default Label Distribution Protocol for a platform.

                 
                Step 4 mpls ldp logging neighbor-changes

                Example:
                Router(config)# mpls ldp logging neighbor-changes
                 

                (Optional) Determines logging neighbor changes.

                 
                Step 5 mpls ldp discovery hello holdtimeseconds

                Example:
                Router(config)# mpls ldp discovery hello holdtime 5
                 

                Configures the interval between transmission of LDP (TDP) discovery hello messages, or the hold time for a LDP transport connection

                 
                Step 6 mpls ldp router-id Loopback0 force

                Example:
                Router(config)# mpls ldp router-id Loopback0 force
                 

                Configures MPLS.

                 

                Examples

                This example shows global MPLS configuration.

                Router(config)# mpls label protocol ldp
                Router(config)# tag-switching tdp discovery directed hello 
                Router(config)# tag-switching tdp router-id Loopback0 force
                

                Use the show ip cef command to verify that the LDP label is assigned.

                Router# show ip cef 192.168.17.7
                192.168.17.7/32, version 272, epoch 0, cached adjacency to POS4/1
                0 packets, 0 bytes
                  tag information set
                    local tag: 8149
                    fast tag rewrite with PO4/1, point2point, tags imposed: {4017}
                  via 11.3.1.4, POS4/1, 283 dependencies
                    next hop 11.3.1.4, POS4/1
                    valid cached adjacency
                    tag rewrite with PO4/1, point2point, tags imposed: {4017}

                Configuring the VFI in the PE

                The virtual switch instance (VFI) specifies the VPN ID of a VPLS domain, the addresses of other PE routers in this domain, and the type of tunnel signaling and encapsulation mechanism for each peer. (This is where you create the VSI and associated VCs.) Configure a VFI as follows:


                Note


                Only MPLS encapsulation is supported.


                SUMMARY STEPS

                  1.    l2 vfi name manual

                  2.    vpn id vpn-id

                  3.    neighbor remote router id {encapsulation mpls} [no-split-horizon]

                  4.    bridge-domain bd-id


                DETAILED STEPS
                    Command or Action Purpose
                  Step 1 l2 vfi name manual

                  Example:
                  Router(config)# l2 vfi vfi110 manual


                  Example:

                   

                  Enables the Layer 2 VFI manual configuration mode.

                   
                  Step 2 vpn id vpn-id

                  Example:
                  Router(config-vfi)# vpn id 110


                  Example:

                   

                  Configures a VPN ID for a VPLS domain. The emulated VCs bound to this Layer 2 VRF use this VPN ID for signaling.

                   
                  Step 3 neighbor remote router id {encapsulation mpls} [no-split-horizon]


                  Example:
                  Router(config-vfi)# neighbor 1.5.1.1 encapsulation mpls


                  Example:

                   

                  Specifies the remote peering router ID and the tunnel encapsulation type or the pseudo-wire property to be used to set up the emulated VC.

                  Note   

                  Split horizon is the default configuration to avoid broadcast packet looping and to isolate Layer 2 traffic. Use the no-split-horizon keyword to disable split horizon and to configure multiple VCs per spoke into the same VFI.

                   
                  Step 4 bridge-domain bd-id


                  Example:
                  Router(config-vfi)# bridge-domain 100
                   

                  Specifies bridge domain.

                   

                  Examples

                  The following example shows a VFI configuration.

                  Router(config)# l2 vfi VPLSA manual
                  Router(config-vfi)# vpn id 110
                  Router(config-vfi)# neighbor 11.11.11.11 encapsulation mpls
                  Router(config-vfi)# neighbor 33.33.33.33 encapsulation mpls
                  Router(config-vfi)# neighbor 44.44.44.44 encapsulation mpls
                  Router(config-vfi)# bridge-domain 100

                  The following example shows a VFI configuration for hub and spoke.

                  Router(config)# l2 vfi VPLSA manual
                  Router(config-vfi)# vpn id 110
                  Router(config-vfi)# neighbor 9.9.9.9 encapsulation mpls
                  Router(config-vfi)# neighbor 12.12.12.12 encapsulation mpls
                  Router(config-vfi)# neighbor 33.33.33.33 encapsulation mpls no-split-horizon
                  Router(config-vfi)# bridge-domain 100

                  The show mpls 12transport vc command displays various information related to PE1.


                  Note


                  The show mpls l2transport vc [detail] command is also available to show detailed information about the VCs on a PE router as in the following example.


                  VPLS-PE2# show mpls l2transport vc 201
                  Local intf     Local circuit        Dest address    VC ID      Status
                  -------------  -------------------- --------------- ---------- ----------
                  VFI test1      VFI                  153.1.0.1       201        UP
                  VFI test1      VFI                  153.3.0.1       201        UP
                  VFI test1      VFI                  153.4.0.1       201        UP
                  

                  Note


                  The VC ID in the output represents the VPN ID; the VC is identified by the combination of the Dest address and the VC ID as in the example below.


                  The show vfi vfi name command shows VFI status.

                  nPE-3# show vfi VPLS-2
                  VFI name: VPLS-2, state: up
                    Local attachment circuits:
                      Vlan2  
                    Neighbors connected via pseudowires:
                    Peer Address     VC ID     Split-horizon
                    1.1.1.1          2             Y
                    1.1.1.2          2             Y
                    2.2.2.3          2             N

                  Configuring the VFI in the PE using the commands associated with the L2VPN Protocol-Based CLIs feature

                  The virtual switch instance (VFI) specifies the VPN ID of a VPLS domain, the addresses of other PE routers in this domain, and the type of tunnel signaling and encapsulation mechanism for each peer. (This is where you create the VSI and associated VCs.) Configure a VFI as follows:


                  Note


                  Only MPLS encapsulation is supported.


                  SUMMARY STEPS

                    1.    l2vpn vfi context name

                    2.    vpn id id

                    3.    neighbor remote router idencapsulation mpls[no-split-horizon]

                    4.    exit

                    5.    bridge-domain bd-id

                    6.    member vfi vfi-name


                  DETAILED STEPS
                      Command or Action Purpose
                    Step 1 l2vpn vfi context name


                    Example:
                    Device(config)# l2vpn vfi context vfi110
                     

                    Enables the Layer 2 VFI manual configuration mode.

                     
                    Step 2 vpn id id


                    Example:
                    Device(config-vfi)# vpn id 110
                     

                    Configures a VPN ID for a VPLS domain. The emulated VCs bound to this Layer 2 VRF use this VPN ID for signaling.

                     
                    Step 3 neighbor remote router idencapsulation mpls[no-split-horizon]


                    Example:
                    Device(config-vfi)# neighbor 1.5.1.1 encapsulation mpls
                     

                    Specifies the remote peering router ID and the tunnel encapsulation type or the pseudo-wire property to be used to set up the emulated VC.

                    Note   

                    Split horizon is the default configuration to avoid broadcast packet looping and to isolate Layer 2 traffic. Use the no-split-horizon keyword to disable split horizon and to configure multiple VCs per spoke into the same VFI.

                     
                    Step 4 exit


                    Example:
                    Device(config-vfi)# exit
                     

                    Exits VFI configuration mode and returns to global configuration mode.

                     
                    Step 5 bridge-domain bd-id


                    Example:
                    Device(config)# bridge-domain 100
                     

                    Specifies bridge domain.

                     
                    Step 6 member vfi vfi-name


                    Example:
                    Device(config-bdomain)# member vfi vfi110
                     

                    Binds a VFI instance to a bridge domain instance.

                     

                    Examples using the commands associated with the L2VPN Protocol-Based CLIs feature

                    The following example shows a VFI configuration.

                    l2vpn vfi context VPLSA 
                    	vpn id 110
                    	neighbor 11.11.11.11 encapsulation mpls
                    	neighbor 33.33.33.33 encapsulation mpls
                    	neighbor 44.44.44.44 encapsulation mpls
                    bridge-domain 100
                     member vfi VPLSA
                     member GigabitEthernet0/0/0 service-instance 100

                    The following example shows a VFI configuration for hub and spoke.

                    l2vpn vfi context VPLSA
                    	vpn id 110
                    	neighbor 9.9.9.9 encapsulation mpls
                    	neighbor 12.12.12.12 encapsulation mpls
                    bridge-domain 100
                    	member vfi VPLSA
                    	member GigabitEthernet0/0/0 service-instance 100
                    	member 33.33.33.33 10 encapsulation mpls

                    The show l2vpn atom vc command displays various information related to PE1.


                    Note


                    The show l2vpn atom vc command is also available to show information about Any Transport over MPLS (AToM) virtual circuits (VCs) and static pseudowires that have been enabled to route Layer 2 packets on a device.


                    Device# show l2vpn atom vc
                    
                    Local intf     Local circuit      Dest address    VC ID      Status    
                    -------------  ------------------ --------------- ---------- ----------
                    Se5/0          FR DLCI 55         10.0.0.1        55         UP        
                    AT4/0          ATM AAL5 0/100     10.0.0.1        100        UP        
                    AT4/0          ATM AAL5 0/200     10.0.0.1        200        UP        
                    AT4/0.300      ATM AAL5 0/300     10.0.0.1        300        UP
                    

                    Note


                    The VC ID in the output represents the VPN ID; the VC is identified by the combination of the Dest address and the VC ID as in the example below.


                    The show l2vpn vfi command shows VFI status.

                    nPE-3# show l2vpn vfi VPLS-2
                    Legend: RT= Route-target
                    
                    VFI name: serviceCore1, State: UP, Signaling Protocol: LDP
                      VPN ID: 100, VPLS-ID: 9:10, Bridge-domain vlan: 100
                      RD: 9:10, RT: 10.10.10.10:150
                      Pseudo-port Interface: Virtual-Ethernet1000
                     
                      Neighbors connected via pseudowires:
                      Interface    Peer Address    VC ID      Discovered Router ID   Next Hop
                      Pw2000       10.0.0.1        10         10.0.0.1               10.0.0.1   
                      Pw2001       10.0.0.2        10         10.1.1.2               10.0.0.2   
                      Pw2002       10.0.0.3        10         10.1.1.3               10.0.0.3   
                      Pw5          10.0.0.4        10         -                      10.0.0.4

                    VPLS Integrated Routing and Bridging

                    VPLS integrated routing and bridging can route Layer 3 traffic as well as switch Layer 2 frames for pseudowire connections between provider edge (PE) devices using Virtual Private LAN Services (VPLS) multipoint PE. The ability to route frames to and from these interfaces supports termination of a pseudowire into a Layer 3 network (VPN or global) on the same switch, or to tunnel Layer 3 frames over a Layer 2 tunnel (VPLS).


                    Note


                    VPLS integrated routing and bridging is also known as routed pseudowire and routed VPLS.


                    • VPLS integrated routing and bridging does not support multicast routing.

                    To configure routing support for the pseudowire, configure an IP address and other Layer 3 features for the Layer 3 domain (VPN or global) in the interface configuration.

                    • The following example assigns the IP address 10.10.10.1 to a BDI interface.
                    interface bdi 100
                      ip address 10.10.10.1 255.255.255.0 
                    
                    • The following example assigns an IP address 20.20.20.1 to a BDI interface.
                    interface bdi 200
                      ip address 20.20.20.1 255.255.255.0

                    Configuring Static Virtual Private LAN Services

                    To configure static Virtual Private LAN Services (VPLS), you must complete the following procedures:

                    Configuring the Pseudowire Class for Static VPLS using the commands associated with the L2VPN Protocol-Based CLIs feature

                    The successful transmission of the Layer 2 frames between PE routers is due to the configuration of the PE routers. You set up the connection, called a pseudowire, between the routers.

                    The template pseudowire configuration is used to configure the VC type for the VPI pseudowire and can specify the pseudowire to use the TP tunnnel.

                    In the following example, any pseudowire using this template pseudowire will go through a MPLS-TP tunnel (TP-Tunnel 1)

                    The template pseudowire configuration group specifies the characteristics of the tunneling mechanism, which are:

                    • Encapsulation type
                    • Control protocol
                    • Payload-specific options
                    • Preferred path

                    Perform this task to configure an template pseudowire for static VLPS.

                    SUMMARY STEPS

                      1.    enable

                      2.    configure terminal

                      3.    template type pseudowire name

                      4.    encapsulation mpls

                      5.    exit

                      6.    interface pseudowire number

                      7.    source template type pseudowire name

                      8.    neighbor peer-address vcid-value

                      9.    signaling protocol none

                      10.    preferred-path interface Tunnel-tp

                      11.    end


                    DETAILED STEPS
                        Command or Action Purpose
                      Step 1 enable


                      Example:
                      Router> enable
                       

                      Enables privileged EXEC mode.

                      • Enter your password if prompted.
                       
                      Step 2 configure terminal


                      Example:
                      Router# configure terminal
                       

                      Enters global configuration mode.

                       
                      Step 3 template type pseudowire name


                      Example:
                      Router(config)# template type pseudowire static-vlps
                       

                      Establishes a pseudowire with a name that you specify. Enters pseudowire configuration mode.

                       
                      Step 4 encapsulation mpls


                      Example:
                      Router(config-pw)# encapsulation mpls 
                       

                      Specifies the tunneling encapsulation. For AToM, the encapsulation type is mpls.

                       
                      Step 5 exit


                      Example:
                      Router(config-pw)# exit
                       

                      Exits to privileged EXEC mode.

                       
                      Step 6 interface pseudowire number


                      Example:
                      Router(config)# interface pseudowire 1
                       

                      Establishes a pseudowire with a name that you specify. Enters interface configuration mode.

                       
                      Step 7 source template type pseudowire name


                      Example:
                      Router(config-if)# source template type pseudowire static-vlps
                       

                      Configures the source template of type pseudowire named static-vlps.

                       
                      Step 8 neighbor peer-address vcid-value


                      Example:
                      Router(config-if)#  neighbor 10.0.0.1 123
                       

                      Specifies the peer IP address and virtual circuit (VC) ID value of a Layer 2 VPN (L2VPN) pseudowire.

                       
                      Step 9 signaling protocol none


                      Example:
                      Router(config-if)# signaling protocol none 
                       

                      Specifies that no protocol is configured for pseudowire class

                       
                      Step 10 preferred-path interface Tunnel-tp


                      Example:
                      Router(config-if)# preferred-path interface Tunnel-tpl 
                       

                      (Optional) Configures the preferred path.

                       
                      Step 11 end

                      Example:
                      Router(config-if)# end
                       

                      Returns to global configuration mode.

                       

                      Configuring the Pseudowire Class for Static VPLS using the commands associated with the L2VPN Protocol-Based CLIs feature

                      The successful transmission of the Layer 2 frames between PE routers is due to the configuration of the PE routers. You set up the connection, called a pseudowire, between the routers.

                      The template pseudowire configuration is used to configure the VC type for the VPI pseudowire and can specify the pseudowire to use the TP tunnnel.

                      In the following example, any pseudowire using this template pseudowire will go through a MPLS-TP tunnel (TP-Tunnel 1)

                      The template pseudowire configuration group specifies the characteristics of the tunneling mechanism, which are:

                      • Encapsulation type
                      • Control protocol
                      • Payload-specific options
                      • Preferred path

                      Perform this task to configure an template pseudowire for static VLPS.

                      SUMMARY STEPS

                        1.    enable

                        2.    configure terminal

                        3.    template type pseudowire name

                        4.    encapsulation mpls

                        5.    exit

                        6.    interface pseudowire number

                        7.    source template type pseudowire name

                        8.    neighbor peer-address vcid-value

                        9.    signaling protocol none

                        10.    preferred-path interface Tunnel-tp

                        11.    end


                      DETAILED STEPS
                          Command or Action Purpose
                        Step 1 enable


                        Example:
                        Router> enable
                         

                        Enables privileged EXEC mode.

                        • Enter your password if prompted.
                         
                        Step 2 configure terminal


                        Example:
                        Router# configure terminal
                         

                        Enters global configuration mode.

                         
                        Step 3 template type pseudowire name


                        Example:
                        Router(config)# template type pseudowire static-vlps
                         

                        Establishes a pseudowire with a name that you specify. Enters pseudowire configuration mode.

                         
                        Step 4 encapsulation mpls


                        Example:
                        Router(config-pw)# encapsulation mpls 
                         

                        Specifies the tunneling encapsulation. For AToM, the encapsulation type is mpls.

                         
                        Step 5 exit


                        Example:
                        Router(config-pw)# exit
                         

                        Exits to privileged EXEC mode.

                         
                        Step 6 interface pseudowire number


                        Example:
                        Router(config)# interface pseudowire 1
                         

                        Establishes a pseudowire with a name that you specify. Enters interface configuration mode.

                         
                        Step 7 source template type pseudowire name


                        Example:
                        Router(config-if)# source template type pseudowire static-vlps
                         

                        Configures the source template of type pseudowire named static-vlps.

                         
                        Step 8 neighbor peer-address vcid-value


                        Example:
                        Router(config-if)#  neighbor 10.0.0.1 123
                         

                        Specifies the peer IP address and virtual circuit (VC) ID value of a Layer 2 VPN (L2VPN) pseudowire.

                         
                        Step 9 signaling protocol none


                        Example:
                        Router(config-if)# signaling protocol none 
                         

                        Specifies that no protocol is configured for pseudowire class

                         
                        Step 10 preferred-path interface Tunnel-tp


                        Example:
                        Router(config-if)# preferred-path interface Tunnel-tpl 
                         

                        (Optional) Configures the preferred path.

                         
                        Step 11 end

                        Example:
                        Router(config-if)# end
                         

                        Returns to global configuration mode.

                         

                        Configuring the VFI for Static VPLS

                        This procedure shows how to configure the VFI for Static VPLS.

                        SUMMARY STEPS

                          1.    enable

                          2.    configure terminal

                          3.    l2 vfi vfi-name manual

                          4.    vpn id vpn-id

                          5.    bridge-domain bd-id

                          6.    neighbor ip-address pw-class pw-name

                          7.    mpls label local-pseudowire-label remote-pseudowire-label

                          8.    [no] mpls control-word

                          9.    exit

                          10.    neighbor ip-address pw-class pw-name

                          11.    mpls label local-pseudowire-label remote-pseudowire-label

                          12.    mpls control-word

                          13.    end


                        DETAILED STEPS
                            Command or Action Purpose
                          Step 1 enable


                          Example:
                          Router> enable
                           

                          Enables privileged EXEC mode.

                          • Enter your password if prompted.
                           
                          Step 2 configure terminal


                          Example:
                          Router# configure terminal
                           

                          Enters global configuration mode.

                           
                          Step 3 l2 vfi vfi-name manual


                          Example:
                          Router(config)# l2 vfi static-vfi manual
                           

                          Creates a Layer 2 VFI and enters Layer 2 VFI manual configuration mode.

                           
                          Step 4 vpn id vpn-id


                          Example:
                          Router(config-vfi)# vpn id 100
                           

                          Specifies the VPN ID.

                           
                          Step 5 bridge-domain bd-id


                          Example:
                          Router(config-vfi)# bridge-domain 24
                           

                          Specifies the bridge domain ID.

                           
                          Step 6 neighbor ip-address pw-class pw-name


                          Example:
                          Router(config-vfi)# neighbor 2.3.4.4 pw-class static-vpls
                           

                          Specifies the IP address of the peer and the pseudowire class.

                           
                          Step 7 mpls label local-pseudowire-label remote-pseudowire-label


                          Example:
                          Router(config-vfi-neighbor)# mpls label 301 17
                           

                          Configures an Any Transport over MPLS (AToM) static pseudowire connection by defining local and remote circuit labels .

                           
                          Step 8 [no] mpls control-word


                          Example:
                          Router(config-vfi-neighbor)# mpls control-word
                           

                          (Optional) Enables the Multiprotocol Label Switching (MPLS) control word in an Any Transport over MPLS (AToM) static pseudowire connection .

                           
                          Step 9 exit


                          Example:
                          Router(config-vfi-neighbor)# exit
                           

                          Exits the current configuration mode and returns to VFI manual configuration mode.

                           
                          Step 10 neighbor ip-address pw-class pw-name


                          Example:
                          Router(config-vfi)# neighbor 2.3.4.3 pw-class static-vpls
                           

                          Specifies the IP address of the peer and the pseudowire class.

                           
                          Step 11 mpls label local-pseudowire-label remote-pseudowire-label


                          Example:
                          Router(config-vfi-neighbor)# mpls label 302 18
                           

                          Configures an Any Transport over MPLS (AToM) static pseudowire connection by defining local and remote circuit labels .

                           
                          Step 12 mpls control-word


                          Example:
                          Router(config-vfi-neighbor)# mpls control-word
                           

                          Enables the Multiprotocol Label Switching (MPLS) control word in an Any Transport over MPLS (AToM) static pseudowire connection .

                           
                          Step 13 end


                          Example:
                          Router(config-vfi-neighbor)# end
                           

                          Exits the current configuration mode and returns to privileged EXEC mode.

                           

                          Configuring the VFI for Static VPLS using the commands associated with the L2VPN Protocol-Based CLIs feature

                          Perform this task to configure the VFI for Static VPLS.

                          SUMMARY STEPS

                            1.    enable

                            2.    configure terminal

                            3.    l2vpn vfi context vfi-name

                            4.    vpn id vpn-id

                            5.    neighbor ip-address pw-class pw-name

                            6.    label local-pseudowire-label remote-pseudowire-label

                            7.    [no] control-word

                            8.    exit

                            9.    neighbor ip-address pw-class pw-name

                            10.    label local-pseudowire-label remote-pseudowire-label

                            11.    control-word

                            12.    end

                            13.    configure terminal

                            14.    bridge-domain bd-id

                            15.    member vfi vfi-name


                          DETAILED STEPS
                              Command or Action Purpose
                            Step 1 enable


                            Example:
                            Device> enable
                             

                            Enables privileged EXEC mode.

                            • Enter your password if prompted.
                             
                            Step 2 configure terminal


                            Example:
                            Device# configure terminal
                             

                            Enters global configuration mode.

                             
                            Step 3 l2vpn vfi context vfi-name


                            Example:
                            Device(config)# l2vpn vfi context vpls1
                             

                            Establishes an L2VPN VFI context and enters L2 VFI configuration mode.

                             
                            Step 4 vpn id vpn-id


                            Example:
                            Device(config-vfi)# vpn id 100
                             

                            Specifies the VPN ID.

                             
                            Step 5 neighbor ip-address pw-class pw-name


                            Example:
                            Device(config-vfi)# neighbor 2.3.4.4 pw-class static-vpls
                             

                            Specifies the IP address of the peer and the pseudowire class.

                             
                            Step 6 label local-pseudowire-label remote-pseudowire-label


                            Example:
                            Device(config-vfi-neighbor)# label 301 17
                             

                            Configures an Any Transport over MPLS (AToM) static pseudowire connection by defining local and remote circuit labels.

                             
                            Step 7 [no] control-word


                            Example:
                            Device(config-vfi-neighbor)# control-word
                             

                            (Optional) Enables the Multiprotocol Label Switching (MPLS) control word in an Any Transport over MPLS (AToM) dynamic pseudowire connection.

                             
                            Step 8 exit


                            Example:
                            Device(config-vfi-neighbor)# exit
                             

                            Exits the current configuration mode and returns to VFI manual configuration mode.

                             
                            Step 9 neighbor ip-address pw-class pw-name


                            Example:
                            Device(config-vfi)# neighbor 2.3.4.3 pw-class static-vpls
                             

                            Specifies the IP address of the peer and the pseudowire class.

                             
                            Step 10 label local-pseudowire-label remote-pseudowire-label


                            Example:
                            Device(config-vfi-neighbor)# label 302 18
                             

                            Configures an Any Transport over MPLS (AToM) static pseudowire connection by defining local and remote circuit labels.

                             
                            Step 11 control-word


                            Example:
                            Device(config-vfi-neighbor)# control-word
                             

                            Enables the Multiprotocol Label Switching (MPLS) control word in an Any Transport over MPLS (AToM) dynamic pseudowire connection.

                             
                            Step 12 end


                            Example:
                            Device(config-vfi-neighbor)# end
                             

                            Exits the current configuration mode and returns to privileged EXEC mode.

                             
                            Step 13 configure terminal


                            Example:
                            Device# configure terminal
                             

                            Enters global configuration mode.

                             
                            Step 14 bridge-domain bd-id


                            Example:
                            Device(config)# bridge-domain 24
                             

                            Specifies the bridge domain ID.

                             
                            Step 15 member vfi vfi-name


                            Example:
                            Device(config-bdomain)# member vfi vpls1
                             

                            Binds a VFI instance to a bridge domain instance.

                             

                            Configuring the Attachment Circuit for Status VPLS

                            This procedure shows how to configure the attachment circuit for static VPLS.

                            SUMMARY STEPS

                              1.    enable

                              2.    configure terminal

                              3.    interface gigabitethernet slot/interface

                              4.    service instance si-id ethernet

                              5.    encapsulation dot1q vlan-id

                              6.    rewrite ingress pop number symmetric

                              7.    bridge-domain bd-id

                              8.    end


                            DETAILED STEPS
                                Command or Action Purpose
                              Step 1 enable


                              Example:
                              Router> enable
                               

                              Enables privileged EXEC mode.

                              • Enter your password if prompted.
                               
                              Step 2 configure terminal


                              Example:
                              Router# configure terminal
                               

                              Enters global configuration mode.

                               
                              Step 3 interface gigabitethernet slot/interface


                              Example:
                              Router(config)# interface gigabitethernet 1/0
                               

                              Specifies the Gigabit Ethernet subinterface and enters subinterface configuration mode.

                              Make sure the subinterfaces between the CE and PE routers that are running Ethernet over MPLS are in the same subnet. All other subinterfaces and backbone routers do not need to be in the same subnet.

                               
                              Step 4 service instance si-id ethernet


                              Example:
                              Router(config-if)# service instance 10 ethernet
                               

                              Specifies the service instance ID.

                               
                              Step 5 encapsulation dot1q vlan-id


                              Example:
                              Router(config-vfi)# encapsulation dot1q 200
                               

                              Enables the subinterface to accept 802.1Q VLAN packets.

                              Make sure the subinterface on the adjoining CE router is on the same VLAN as this PE router.

                               
                              Step 6 rewrite ingress pop number symmetric


                              Example:
                              Router(config-if)# rewrite ingress pop 1 symmetric
                               

                              (Optional) Specifies the ingress rewrite

                               
                              Step 7 bridge-domain bd-id


                              Example:
                              Router(config-vfi)# bridge-domain 24
                               

                              ( Optional) When the MVR source bridge domain and MVR receiver ports are in a different bridge domain, specifies the bridge domain for which the MVR configuration will be done.

                               
                              Step 8 end


                              Example:
                              Router(config-if)# end
                               

                              Exits the current configuration mode and returns to privileged EXEC mode.

                               

                              Configuring the Attachment Circuit for Status VPLS using the commands associated with the L2VPN Protocol-Based CLIs feature

                              Perform this task to configure the attachment circuit for static VPLS.

                              SUMMARY STEPS

                                1.    enable

                                2.    configure terminal

                                3.    interface gigabitethernet slot/interface

                                4.    service instance si-id ethernet

                                5.    encapsulation dot1q vlan-id

                                6.    rewrite ingress pop number symmetric

                                7.    exit

                                8.    bridge-domain bd-id

                                9.    member interface-type-numberservice-instance service-id [split-horizon groupgroup-id]

                                10.    end


                              DETAILED STEPS
                                  Command or Action Purpose
                                Step 1 enable


                                Example:
                                Device> enable
                                 

                                Enables privileged EXEC mode.

                                • Enter your password if prompted.
                                 
                                Step 2 configure terminal


                                Example:
                                Device# configure terminal
                                 

                                Enters global configuration mode.

                                 
                                Step 3 interface gigabitethernet slot/interface


                                Example:
                                Device(config)# interface gigabitethernet 1/0
                                 

                                Specifies the Gigabit Ethernet subinterface and enters subinterface configuration mode.

                                Make sure the subinterfaces between the CE and PE routers that are running Ethernet over MPLS are in the same subnet. All other subinterfaces and backbone routers do not need to be in the same subnet.

                                 
                                Step 4 service instance si-id ethernet


                                Example:
                                Device(config-if)# service instance 10 ethernet
                                 

                                Specifies the service instance ID.

                                 
                                Step 5 encapsulation dot1q vlan-id


                                Example:
                                Device(config-if-srv)# encapsulation dot1q 200
                                 

                                Enables the subinterface to accept 802.1Q VLAN packets.

                                Make sure the subinterface on the adjoining CE router is on the same VLAN as this PE router.

                                 
                                Step 6 rewrite ingress pop number symmetric


                                Example:
                                Device(config-if-srv)# rewrite ingress pop 1 symmetric
                                 

                                (Optional) Specifies the ingress rewrite

                                 
                                Step 7 exit


                                Example:
                                Device(config-if-srv)# exit
                                 

                                Exits service instance mode and returns to global configuration mode.

                                 
                                Step 8 bridge-domain bd-id


                                Example:
                                Device(config)# bridge-domain 100
                                 

                                Specifies the bridge domain id and enters bridge-domain configuration mode.

                                 
                                Step 9 member interface-type-numberservice-instance service-id [split-horizon groupgroup-id]


                                Example:
                                Device(config-bdomain)# member gigabitethernet0/0/0 service-instance 1000
                                 

                                (Optional) When the MVR source bridge domain and MVR receiver ports are in a different bridge domain, specifies the bridge domain for which the MVR configuration will be done.

                                 
                                Step 10 end


                                Example:
                                Device(config-bdomain)# end
                                 

                                Exits the current configuration mode and returns to privileged EXEC mode.

                                 

                                Configuring the MPLS-TP Tunnel for Static VPLS with TP

                                Perform this task to configure the MPLS-TP Tunnel for Static VPLS over TP.

                                SUMMARY STEPS

                                  1.    enable

                                  2.    configure terminal

                                  3.    interface Tunnel-tp number

                                  • Use the same interface as you configured for the pseudowire class above.

                                  4.    no ip address

                                  5.    no keepalive

                                  6.    tp destination ip-address

                                  7.    bfd tp

                                  8.    working-lsp

                                  9.    out-label number out-link number

                                  10.    in-label number

                                  11.    lsp-number number

                                  12.    exit

                                  13.    protect-lsp

                                  14.    out-label number out-link number

                                  15.    in-label number

                                  16.    lsp-number number

                                  17.    exit

                                  18.    interface interface-name

                                  19.    ip address ip_address ip-mask

                                  20.    mpls tp link number {ipv4 ip_address | tx-mac mac_address}

                                  21.    end


                                DETAILED STEPS
                                    Command or Action Purpose
                                  Step 1 enable


                                  Example:
                                  Router> enable
                                   

                                  Enables privileged EXEC mode.

                                  • Enter your password if prompted.
                                   
                                  Step 2 configure terminal


                                  Example:
                                  Router# configure terminal
                                   

                                  Enters global configuration mode.

                                   
                                  Step 3 interface Tunnel-tp number
                                  • Use the same interface as you configured for the pseudowire class above.


                                  Example:
                                  Router(config)# interface Tunnel-tp 4
                                   

                                  Configures a MPLS Transport Profile interface. Enters interface configuration mode.

                                   
                                  Step 4 no ip address


                                  Example:
                                  Router(config-if)# no ip address
                                   

                                  Disables the IP address configuration.

                                   
                                  Step 5 no keepalive


                                  Example:
                                  Router(config-if)# no keepalive
                                   

                                  Disables the keepalive configuration.

                                   
                                  Step 6 tp destination ip-address


                                  Example:
                                  Router(config-if)# tp destination 22.22.22.22
                                   

                                  Configures the tunnel destination.

                                   
                                  Step 7 bfd tp


                                  Example:
                                  Router(config-if)# bfd tp
                                   

                                  Configures the Bidirectional Forwarding Detection (BFD) protocol.

                                   
                                  Step 8 working-lsp


                                  Example:
                                  Router(config-if)# working-lsp
                                   

                                  Configures the working label switched path (LSP).

                                   
                                  Step 9 out-label number out-link number


                                  Example:
                                  Router(config-if-working)# out-link 10 out-label 100
                                   

                                  Configures the out link and out label for the working LSP.

                                   
                                  Step 10 in-label number


                                  Example:
                                  Router(config-if-working)# in-label 400
                                   

                                  Configures the in label for the working LSP.

                                   
                                  Step 11 lsp-number number


                                  Example:
                                  Router(config-if-working)# lsp 0
                                   

                                  Configures the ID number for the working LSP.

                                   
                                  Step 12 exit

                                  Example:
                                  Router(config-if-working)# exit
                                   

                                  Returns to interface configuration mode.

                                   
                                  Step 13 protect-lsp


                                  Example:
                                  Router(config-if)# protect-lsp
                                   

                                  Enters protection configuration mode for the label switched path (LSP).

                                   
                                  Step 14 out-label number out-link number


                                  Example:
                                  Router(config-if-protect)# out-link 11 out-label 500
                                   

                                  Configures the out link and out label for the protect LSP.

                                   
                                  Step 15 in-label number


                                  Example:
                                  Router(config-if-protect)# in-label 600
                                   

                                  Configures the in label for the protect LSP.

                                   
                                  Step 16 lsp-number number


                                  Example:
                                  Router(config-if-protect)# lsp-number 0
                                   

                                  Configures the ID number for the working protect LSP.

                                   
                                  Step 17 exit

                                  Example:
                                  Router(config-if-working)# exit
                                   

                                  Returns to interface configuration mode.

                                   
                                  Step 18 interface interface-name


                                  Example:
                                  Router(config-if)# interface Ethernet1/0
                                   

                                  Configures a interface and enters interface configuration mode.

                                   
                                  Step 19 ip address ip_address ip-mask


                                  Example:
                                  Router(config-if)# ip address 20.0.0.1 255.255.255.0
                                   

                                  (Optional) Configures the IP address and mask if not using IP-less core.

                                   
                                  Step 20 mpls tp link number {ipv4 ip_address | tx-mac mac_address}


                                  Example:
                                  Router(config-if)# mpls tp link 10 ipv4 20.0.0.2
                                   

                                  Configures the MPLS Transport Profile link number and ARP translation.

                                   
                                  Step 21 end

                                  Example:
                                  Router(config-if)# end
                                   

                                  Returns to global configuration mode.

                                   

                                  Configuring the VFI for Static VPLS using the commands associated with the L2VPN Protocol-Based CLIs feature

                                  Perform this task to configure the VFI for Static VPLS.

                                  SUMMARY STEPS

                                    1.    enable

                                    2.    configure terminal

                                    3.    l2vpn vfi context vfi-name

                                    4.    vpn id vpn-id

                                    5.    neighbor ip-address pw-class pw-name

                                    6.    label local-pseudowire-label remote-pseudowire-label

                                    7.    [no] control-word

                                    8.    exit

                                    9.    neighbor ip-address pw-class pw-name

                                    10.    label local-pseudowire-label remote-pseudowire-label

                                    11.    control-word

                                    12.    end

                                    13.    configure terminal

                                    14.    bridge-domain bd-id

                                    15.    member vfi vfi-name


                                  DETAILED STEPS
                                      Command or Action Purpose
                                    Step 1 enable


                                    Example:
                                    Device> enable
                                     

                                    Enables privileged EXEC mode.

                                    • Enter your password if prompted.
                                     
                                    Step 2 configure terminal


                                    Example:
                                    Device# configure terminal
                                     

                                    Enters global configuration mode.

                                     
                                    Step 3 l2vpn vfi context vfi-name


                                    Example:
                                    Device(config)# l2vpn vfi context vpls1
                                     

                                    Establishes an L2VPN VFI context and enters L2 VFI configuration mode.

                                     
                                    Step 4 vpn id vpn-id


                                    Example:
                                    Device(config-vfi)# vpn id 100
                                     

                                    Specifies the VPN ID.

                                     
                                    Step 5 neighbor ip-address pw-class pw-name


                                    Example:
                                    Device(config-vfi)# neighbor 2.3.4.4 pw-class static-vpls
                                     

                                    Specifies the IP address of the peer and the pseudowire class.

                                     
                                    Step 6 label local-pseudowire-label remote-pseudowire-label


                                    Example:
                                    Device(config-vfi-neighbor)# label 301 17
                                     

                                    Configures an Any Transport over MPLS (AToM) static pseudowire connection by defining local and remote circuit labels.

                                     
                                    Step 7 [no] control-word


                                    Example:
                                    Device(config-vfi-neighbor)# control-word
                                     

                                    (Optional) Enables the Multiprotocol Label Switching (MPLS) control word in an Any Transport over MPLS (AToM) dynamic pseudowire connection.

                                     
                                    Step 8 exit


                                    Example:
                                    Device(config-vfi-neighbor)# exit
                                     

                                    Exits the current configuration mode and returns to VFI manual configuration mode.

                                     
                                    Step 9 neighbor ip-address pw-class pw-name


                                    Example:
                                    Device(config-vfi)# neighbor 2.3.4.3 pw-class static-vpls
                                     

                                    Specifies the IP address of the peer and the pseudowire class.

                                     
                                    Step 10 label local-pseudowire-label remote-pseudowire-label


                                    Example:
                                    Device(config-vfi-neighbor)# label 302 18
                                     

                                    Configures an Any Transport over MPLS (AToM) static pseudowire connection by defining local and remote circuit labels.

                                     
                                    Step 11 control-word


                                    Example:
                                    Device(config-vfi-neighbor)# control-word
                                     

                                    Enables the Multiprotocol Label Switching (MPLS) control word in an Any Transport over MPLS (AToM) dynamic pseudowire connection.

                                     
                                    Step 12 end


                                    Example:
                                    Device(config-vfi-neighbor)# end
                                     

                                    Exits the current configuration mode and returns to privileged EXEC mode.

                                     
                                    Step 13 configure terminal


                                    Example:
                                    Device# configure terminal
                                     

                                    Enters global configuration mode.

                                     
                                    Step 14 bridge-domain bd-id


                                    Example:
                                    Device(config)# bridge-domain 24
                                     

                                    Specifies the bridge domain ID.

                                     
                                    Step 15 member vfi vfi-name


                                    Example:
                                    Device(config-bdomain)# member vfi vpls1
                                     

                                    Binds a VFI instance to a bridge domain instance.

                                     

                                    Full-Mesh Configuration Example

                                    In a full-mesh configuration, each PE router creates a multipoint-to-multipoint forwarding relationship with all other PE routers in the VPLS domain using a VFI. An Ethernet or VLAN packet received from the customer network can be forwarded to one or more local interfaces and or emulated VCs in the VPLS domain. To avoid broadcasted packets looping around in the network, no packet received from an emulated VC can be forwarded to any emulated VC of the VPLS domain on a PE router. That is, the Layer 2 split horizon should always be enabled as the default in a full-mesh network.

                                    Figure 3. VPLS Configuration Example

                                    Configuration on PE 1

                                    This shows the creation of the virtual switch instances (VSIs) and associated VCs.

                                    l2 vfi PE1-VPLS-A manual
                                      vpn id 110
                                      neighbor 2.2.2.2 encapsulation mpls
                                      neighbor 3.3.3.3 encapsulation mpls
                                      bridge domain 100
                                    !
                                    interface Loopback 0
                                      ip address 1.1.1.1 255.255.255.255
                                    

                                    This configures the CE device interface (there can be multiple Layer 2 interfaces in a VLAN).

                                    interface FastEthernet0/0
                                       no ip address 
                                       negotiation auto 
                                       service instance 10 ethernet 
                                       encapsulation dot1q 200 
                                       bridge-domain 100
                                    

                                    Configuration on PE 2

                                    This shows the creation of the virtual switch instances (VSIs) and associated VCs.

                                    l2 vfi PE2-VPLS-A manual
                                      vpn id 111
                                      neighbor 1.1.1.1 encapsulation mpls
                                      neighbor 3.3.3.3 encapsulation mpls
                                      bridge domain 100
                                    !
                                    interface Loopback 0
                                      ip address 2.2.2.2 255.255.255.255
                                    

                                    This configures the CE device interface (there can be multiple Layer 2 interfaces in a VLAN).

                                    interface FastEthernet0/0
                                      no ip address 
                                       negotiation auto 
                                       service instance 10 ethernet 
                                       encapsulation dot1q 200 
                                       bridge-domain 100
                                    

                                    Configuration on PE 3

                                    This shows the creation of the virtual switch instances (VSIs) and associated VCs.

                                    l2 vfi PE3-VPLS-A manual
                                      vpn id 112
                                      neighbor 1.1.1.1 encapsulation mpls
                                      neighbor 2.2.2.2 encapsulation mpls
                                      bridge domain 100
                                    !
                                    interface Loopback 0
                                      ip address 3.3.3.3 255.255.255.255
                                    

                                    This configures the CE device interface (there can be multiple Layer 2 interfaces in a VLAN).

                                    interface FastEthernet0/1
                                       no ip address 
                                       negotiation auto 
                                       service instance 10 ethernet 
                                       encapsulation dot1q 200 
                                       bridge-domain 100
                                    !

                                    The show mpls l2 vc command provides information on the status of the VC.

                                    VPLS1# show mpls l2 vc
                                    Local intf     Local circuit        Dest address    VC ID      Status
                                    -------------  -------------------- --------------- ---------- ----------
                                    Vi1            VFI                  22.22.22.22     200        DOWN
                                    Vi1            VFI                  22.22.22.22     400        UP
                                    Vi1            VFI                  33.33.33.33     200        UP
                                    Vi1            VFI                  44.44.44.44     200        UP
                                    Vi1            VFI                  44.44.44.44     400        UP
                                    

                                    The show vfi command provides information on the VFI.

                                    PE-1# show vfi PE1-VPLS-A
                                    VFI name: VPLSA, state: up
                                      Local attachment circuits:
                                        Vlan200
                                      Neighbors connected via pseudowires:
                                        2.2.2.2  3.3.3.3
                                    

                                    The show mpls 12transport vc command provides information the virtual circuits.

                                    Router# show mpls l2 vc det
                                    Local interface: VFI vfi17 up
                                      Destination address: 1.3.1.1, VC ID: 17, VC status: up
                                        Tunnel label: imp-null, next hop point2point
                                        Output interface: PO3/4, imposed label stack {18}
                                      Create time: 3d15h, last status change time: 1d03h
                                      Signaling protocol: LDP, peer 1.3.1.1:0 up
                                        MPLS VC labels: local 18, remote 18
                                        Group ID: local 0, remote 0
                                        MTU: local 1500, remote 1500
                                        Remote interface description: 
                                      Sequencing: receive disabled, send disabled
                                      VC statistics:
                                        packet totals: receive 0, send 0
                                        byte totals:   receive 0, send 0
                                        packet drops:  receive 0, send 0

                                    Full-Mesh Configuration Example using the commands associated with the L2VPN Protocol-Based CLIs feature

                                    In a full-mesh configuration, each provider edge (PE) router creates a multipoint-to-multipoint forwarding relationship with all other PE routers in the virtual private LAN services (VPLS) domain using a virtual forwarding interface (VFI). An Ethernet or virtual LAN (VLAN) packet received from the customer network can be forwarded to one or more local interfaces and or emulated virtual circuits (VCs) in the VPLS domain. To avoid broadcasted packets looping around in the network, no packet received from an emulated VC can be forwarded to any emulated VC of the VPLS domain on a PE router. That is, the Layer 2 split horizon should always be enabled as the default in a full-mesh network.

                                    Figure 4. VPLS Configuration Example

                                    Configuration on PE 1

                                    This example shows the creation of the virtual switch instances (VSIs) and associated VCs and configures the CE device interface (there can be multiple Layer 2 interfaces in a VLAN).

                                    interface gigabitethernet1/0/0
                                      service instance 100 ethernet
                                      encap dot1q 100
                                      no shut
                                    l2vpn vfi context PE1-VPLS-A
                                     vpn id 110
                                     neighbor 2.2.2.2 encapsulation mpls
                                     neighbor 3.3.3.3 encapsulation mpls
                                    bridge-domain 100
                                     member gigabitethernet1/0/0 service-instance 100
                                     member vfi PE1-VPLS-A
                                    

                                    Configuration on PE 2

                                    This example shows the creation of the virtual switch instances (VSIs) and associated VCs and configures the CE device interface (there can be multiple Layer 2 interfaces in a VLAN).

                                    interface gigabitethernet1/0/0
                                      service instance 100 ethernet
                                      encap dot1q 100
                                      no shut
                                    l2vpn vfi context PE2-VPLS-A
                                     vpn id 111
                                     neighbor 1.1.1.1 encapsulation mpls
                                     neighbor 3.3.3.3 encapsulation mpls
                                    bridge-domain 100
                                     member gigabitethernet1/0/0 service-instance 100
                                     member vfi PE2-VPLS-A
                                    

                                    Configuration on PE 3

                                    This example shows the creation of the virtual switch instances (VSIs) and associated VCs and configures the CE device interface (there can be multiple Layer 2 interfaces in a VLAN).

                                    interface gigabitethernet1/0/0
                                      service instance 100 ethernet
                                      encap dot1q 100
                                      no shut
                                    l2vpn vfi context PE3-VPLS-A
                                     vpn id 112
                                     neighbor 1.1.1.1 encapsulation mpls
                                     neighbor 2.2.2.2 encapsulation mpls
                                    bridge-domain 100
                                     member gigabitethernet1/0/0 service-instance 100
                                     member vfi PE3-VPLS-A
                                    

                                    The show mpls l2 vc command provides information on the status of the VC.

                                    VPLS1# show mpls l2 vc
                                    Local intf     Local circuit        Dest address    VC ID      Status
                                    -------------  -------------------- --------------- ---------- ----------
                                    Vi1            VFI                  22.22.22.22     200        DOWN
                                    Vi1            VFI                  22.22.22.22     400        UP
                                    Vi1            VFI                  33.33.33.33     200        UP
                                    Vi1            VFI                  44.44.44.44     200        UP
                                    Vi1            VFI                  44.44.44.44     400        UP
                                    

                                    The show l2vpn vfi command provides information on the VFI.

                                    PE-1# show l2vpn vfi VPLS-2
                                    Legend: RT= Route-target
                                    
                                    VFI name: serviceCore1, State: UP, Signaling Protocol: LDP
                                      VPN ID: 100, VPLS-ID: 9:10, Bridge-domain vlan: 100
                                      RD: 9:10, RT: 10.10.10.10:150
                                      Pseudo-port Interface: Virtual-Ethernet1000
                                     
                                      Neighbors connected via pseudowires:
                                      Interface    Peer Address    VC ID      Discovered Router ID   Next Hop
                                      Pw2000       10.0.0.1        10         10.0.0.1               10.0.0.1   
                                      Pw2001       10.0.0.2        10         10.1.1.2               10.0.0.2   
                                      Pw2002       10.0.0.3        10         10.1.1.3               10.0.0.3   
                                      Pw5          10.0.0.4        10         -                      10.0.0.4
                                    

                                    The show l2vpn atom vc command provides information on the virtual circuits.

                                    Device# show l2vpn atom vc
                                    
                                    Local intf     Local circuit      Dest address    VC ID      Status    
                                    -------------  ------------------ --------------- ---------- ----------
                                    Se5/0          FR DLCI 55         10.0.0.1        55         UP        
                                    AT4/0          ATM AAL5 0/100     10.0.0.1        100        UP        
                                    AT4/0          ATM AAL5 0/200     10.0.0.1        200        UP        
                                    AT4/0.300      ATM AAL5 0/300     10.0.0.1        300        UP

                                    Feature Information for Configuring Virtual Private LAN Services

                                    The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.

                                    Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/​go/​cfn. An account on Cisco.com is not required.

                                    Table 1 Feature Information for Configuring Virtual Private LAN Services

                                    Feature Name

                                    Releases

                                    Feature Information

                                    Virtual Private LAN Services (VPLS)

                                    15.2(1)S

                                    Cisco IOS XE Release 3.5S

                                    Cisco IOS XE Release 3.8S

                                    This feature enables you to configure dynamic Virtual Private LAN Services (VPLS). VPLS is a class of VPN that supports the connection of multiple sites in a single bridged domain over a managed IP/MPLS network.

                                    In Cisco IOS XE Release 3.5S, this feature was introduced on the Cisco ASR 1000 Series Aggregation Services Routers.

                                    In Cisco IOS XE Release 3.5S, support was added for the Cisco ASR 903 Router.

                                    In Cisco IOS Release 15.2(1)S, this feature was integrated.

                                    In Cisco IOS XE Release 3.8S, support was added for the Cisco ISR 4400 Series Routers.

                                    Static VPLS over MPLS-TP

                                    Cisco IOS XE Release 3.6S

                                    This features enables you to static Virtual Private LAN Services to use MPLS Transport Profile (MPLS-TP).

                                    In Cisco IOS XE Release 3.6S, this feature was introduced on the Cisco ASR 903 Router.