Cisco ASR 9000 Series Aggregation Services Router L2VPN and Ethernet Services Command Reference
Multipoint Layer 2 Services Commands
Downloads: This chapterpdf (PDF - 916.0KB) The complete bookPDF (PDF - 7.38MB) | Feedback

Multipoint Layer 2 Services Commands

Table Of Contents

Multipoint Layer 2 Services Commands

action (VPLS)

aging (VPLS)

autodiscovery bgp

backbone interface

bridge-domain (VPLS)

bridge group (VPLS)

clear l2vpn bridge-domain (VPLS)

clear l2vpn forwarding mac-address-table

dhcp ipv4 snoop profile (VPLS)

flooding disable

flooding unknown-unicast disable (VPLS)

interface (VPLS)

isolation recovery-delay

l2vpn resynchronize forwarding mac-address-table location

learning disable (VPLS)

limit (VPLS)

mac (VPLS)

mac secure

maximum (VPLS)

member neighbor

mpls static label (VPLS)

mtu (VPLS)

neighbor (VPLS)

notification (VPLS)

port-down flush disable (VPLS)

pw-class

pw-status (L2VPN)

redundancy iccp group

redundancy one-way

route-target

show iccp group

show l2vpn bridge-domain (VPLS)

show l2vpn forwarding bridge-domain (VPLS)

show l2vpn forwarding bridge-domain mac-address (VPLS)

shutdown (Bridge Domain)

shutdown (VFI)

signaling-protocol

split-horizon group

static-address (VPLS)

static-mac-address (VPLS)

storm-control

time (VPLS)

type (VPLS)

vfi (VPLS)

withdraw (VPLS)


Multipoint Layer 2 Services Commands


This module describes the commands used to configure, monitor, and troubleshoot Virtual Private LAN Services (VPLS) on Cisco 9000 Series Aggregation Services Routers.

For detailed information about virtual private network concepts, configuration tasks, and examples, refer to the Cisco ASR 9000 Series Aggregation Services Router Virtual Private Network.

action (VPLS)

To configure the bridge behavior when the number of learned MAC addresses reaches the MAC limit configured, use the action command in L2VPN bridge group bridge domain MAC limit configuration mode. To disable this feature, use the no form of this command.

action {flood | no-flood | shutdown}

no action {flood | no-flood | shutdown}

Syntax Description

flood

Configures the action to flood all unknown unicast packets when the MAC limit is reached. If the action is set to flood, all unknown unicast packets, with unknown destination addresses, are flooded over the bridge.

no-flood

Configures the action to no-flood so all unknown unicast packets are dropped when the MAC limit is reached. If the action is set to no-flood, all unknown unicast packets, with unknown destination addresses, are dropped.

shutdown

Stops forwarding when the MAC limit is reached. If the action is set to shutdown, all packets are dropped.


Command Defaults

No action is taken when the MAC address limit is reached.

Command Modes

L2VPN bridge group bridge domain MAC limit configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the action command to specify the type of action to be taken when the action is violated.

The configured action has no impact if the MAC limit has not been reached.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure the bridge bar to flood all unknown unicast packets when the number of MAC addresses learned by the bridge reaches 10:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# limit
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-limit)# action flood
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-limit)# maximum 10
 
   

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

limit (VPLS)

Sets the MAC address limit for action, maximum, and notification and enters L2VPN bridge group bridge domain MAC limit configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.

maximum (VPLS)

Configures the specified action when the number of MAC addresses learned on a bridge is reached.

notification (VPLS)

Specifies the type of notification that is sent when the number of learned MAC addresses exceeds the configured limit.


aging (VPLS)

To enter the MAC aging configuration submode to set the aging parameters such as time and type, use the aging command in L2VPN bridge group bridge domain configuration mode. To return to the default value for all parameters that are attached to this configuration submode, use the no form of this command.

aging

no aging

Syntax Description

This command has no arguments or keywords.

Command Defaults

No defaults are attached to this parameter since it is used as a configuration submode. See defaults that are assigned to the time (VPLS) and the type (VPLS) parameters.

Command Modes

L2VPN bridge group bridge domain MAC configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the aging command to enter L2VPN bridge group bridge domain MAC aging configuration mode.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to enter MAC aging configuration submode and to set the MAC aging time to 120 seconds:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# aging
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-aging)# time 120
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.

time (VPLS)

Configures the maximum aging time.

type (VPLS)

Configures the type for MAC address aging.


autodiscovery bgp

To enable BGP autodiscovery, use the autodiscovery bgp command in the VFI configuration mode. To return to the default value, use the no form of this command.

autodiscovery bgp

no autodiscovery bgp

Syntax Description

This command has no arguments or keywords.

Command Defaults

None.

Command Modes

VFI configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure a bridge domain:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group EGroup
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain eastdomain
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi eastvfi
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)# autodiscovery bgp
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.


backbone interface

To configure interchassis group ICCP backbone interface, use the backbone interface command in the redundancy group ICCP configuration mode. To return to the default behavior, use the no form of this command.

backbone interface type interface-path-id

no backbone interface type interface-path-id

Syntax Description

type

Interface type. For more information, use the question mark (?) online help function.

interface-path-id

Physical interface or virtual interface.

Note Use the show interfaces command to see a list of all interfaces currently configured on the router.

For more information about the syntax for the router, use the question mark (?) online help function.


Command Defaults

None

Command Modes

Redundancy group ICCP configuration

Command History

Release
Modification

Release 4.0.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

config-services

read, write


Examples

The following example shows how to configure interchassis group ICCP backbone interface:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# redundancy iccp group 10
RP/0//CPU0:router(config-redundancy-iccp-group)# backbone interface GigabitEthernet 
0/2/1/0
RP/0//CPU0:router(config-redundancy-iccp-group)#
 
   

Related Commands

Commands
Description

redundancy iccp group

Configures ICCP parameters.


bridge-domain (VPLS)

To establish a bridge domain and to enter L2VPN bridge group bridge domain configuration mode, use the bridge-domain command in L2VPN bridge group configuration mode. To return to a single bridge domain, use the no form of this command.

bridge-domain bridge-domain-name

no bridge-domain bridge-domain-name

Syntax Description

bridge-domain-name

Name of the bridge domain.

Note The maximum number of characters that can be specified in the bridge domain name is 27.


Command Defaults

The default value is a single bridge domain.

Command Modes

L2VPN bridge group configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the bridge-domain command to enter L2VPN bridge group bridge domain configuration mode.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure a bridge domain:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)#
 
   

Related Commands

Commands
Description

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.


bridge group (VPLS)

To create a bridge group so that it can contain bridge domains and then to assign network interfaces to the bridge domain, use the bridge group command in L2VPN configuration mode. To remove all the bridge domains that are created under this bridge group and to remove all network interfaces that are assigned under this bridge group, use the no form of this command.

bridge group bridge-group-name

no bridge-group bridge-group-name

Syntax Description

bridge-group-name

Number of the bridge group to which the interface belongs.


Command Defaults

No bridge group is created.

Command Modes

L2VPN configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the bridge group command to enter L2VPN bridge group configuration mode.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows that bridge group 1 is assigned:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)#
 
   

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

l2vpn

Enters L2VPN configuration mode.


clear l2vpn bridge-domain (VPLS)

To clear the MAC addresses and to restart the bridge domains on the router, use the clear l2vpn bridge-domain command in EXEC mode.

clear l2vpn bridge-domain {all | bd-name name | group group}

Syntax Description

all

Clears and restarts all the bridge domains on the router.

bd-name name

Clears and restarts the specified bridge domain. The name argument specifies the name of the bridge-domain.

group group

Clears and restarts all the bridge domains that are part of the bridge group.


Command Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

This is the method that allows a bridge to forward again after it was put in Shutdown state as a result of exceeding the configured MAC limit.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to clear all the MAC addresses and to restart all the bridge domains on the router:

RP/0//CPU0:router# clear l2vpn bridge-domain all
 
   

Related Commands

Commands
Description

show l2vpn bridge-domain (VPLS)

Displays information for the bridge ports such as attachment circuits and pseudowires for the specific bridge domains.


clear l2vpn forwarding mac-address-table

To clear L2VPN forwarding MAC address tables, use the clear l2vpn forwarding mac-address-table command in EXEC mode.

clear l2vpn forwarding mac-address-table {address address | bridge-domain name | interface type interface-path-id | location node-id}

Syntax Description

address

Clears a specified MAC address.

bridge-domain name

Clears bridge domains learned from a MAC address table.

type

Interface type. For more information, use the question mark (?) online help function.

interface-path-id

Physical interface or a virtual interface.

Note Use the show interfaces command to see a list of all interfaces currently configured on the router.

For more information about the syntax for the router, use the question mark (?) online help function.

location node-id

Clears L2VPN forwarding message counters for the specified location. The node-id argument is entered in the rack/slot/module notation.


Command Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to clear L2VPN forwarding MAC address tables on a specified node:

RP/0//CPU0:router# clear l2vpn forwarding mac-address location 1/1/1

Related Commands

Command
Description

show l2vpn forwarding

Displays forwarding information from the Layer 2 FIB manager on the line card.


dhcp ipv4 snoop profile (VPLS)

To enable DHCP snooping on a bridge and to attach a DHCP snooping profile to the bridge, use the dhcp ipv4 snoop command in L2VPN bridge group bridge domain configuration mode. To disable DHCP snooping on an interface, use the no form of this command.

dhcp ipv4 snoop profile { profile-name}

no dhcp ipv4 snoop

Syntax Description

profile profile-name

Attaches a DHCP profile. Profile name for DHCPv4 snooping.


Command Defaults

None

Command Modes

L2VPN bridge group bridge domain configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to enable DHCP snooping on a bridge:

RP/0/RSP0/CPU0:router# configure
RP/0/RSP0/CPU0:router(config)# l2vpn
RP/0/RSP0/CPU0:router(config-l2vpn)# bridge group 1
RP/0/RSP0/CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)# dhcp ipv4 snoop profile attach
 
   

This example shows how to enable DHCP snooping over a pseudowire:

RP/0/RSP0/CPU0:router# configure
RP/0/RSP0/CPU0:router(config)# l2vpn
RP/0/RSP0/CPU0:router(config-l2vpn)# bridge group 1
RP/0/RSP0/CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)#vfi vf1
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-vfi)#exit
RP/0/RSP0/CPU0:PE44_ASR-9010(config-l2vpn-bg-bd)#neighbor 10.1.1.1 pw-id 100
RP/0/RSP0/CPU0:PE44_ASR-9010(config-l2vpn-bg-bd-pw)#dhcp ipv4 snoop profile A

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain.

bridge group (VPLS)

Assigns each network interface to a bridge group.

l2vpn

Enters L2VPN configuration mode.


flooding disable

To configure flooding for traffic at the bridge domain level or at the bridge port level, use the flooding disable command in L2VPN bridge group bridge domain configuration mode. To return the bridge to normal flooding behavior when all unknown unicast packets, all broadcast packets, and all multicast packets are flooded over all other bridge domain network interfaces, use the no form of this command.

flooding disable

no flooding disable

Syntax Description

This command has no arguments or keywords.

Command Defaults

The default behavior is that packets are flooded when their destination MAC address is not found.

Command Modes

L2VPN bridge group bridge domain configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the flooding disable command to override the parent bridge configuration.

By default, bridge ports inherit the flooding behavior of the bridge domain.

When flooding is disabled, all unknown unicast packets, all broadcast packets, and all multicast packets are discarded.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to disable flooding on the bridge domain called bar:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# flooding disable
 
   

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mtu (VPLS)

Adjusts the maximum packet size or maximum transmission unit (MTU) size for the bridge domain.


flooding unknown-unicast disable (VPLS)

To disable flooding of unknown unicast traffic at the bridge domain level or at the bridge port level, use the flooding unknown-unicast disable command in L2VPN bridge group bridge domain configuration mode. To return the bridge to normal flooding behavior, use the no form of this command.

flooding unknown-unicast disable

no flooding unknown-unicast disable

Syntax Description

This command has no arguments or keywords.

Command Defaults

The default behavior is that packets are flooded when their destination MAC address is not found.

Command Modes

L2VPN bridge group bridge domain configuration

Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the flooding unknown-unicast disable command to override the parent bridge configuration.

By default, bridge ports inherit the flooding behavior of the bridge domain.

When flooding is disabled, all unknown unicast packets are discarded.

Use this command on Layer 2 interfaces. This command is not applicable on BVI interfaces.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to disable flooding on the bridge domain called bar:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# flooding unknown-unicast disable
 
   

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mtu (VPLS)

Adjusts the maximum packet size or maximum transmission unit (MTU) size for the bridge domain.


interface (VPLS)

To add an interface to a bridge domain that allows packets to be forwarded and received from other interfaces that are part of the same bridge domain, use the interface command in L2VPN bridge group bridge domain configuration mode. To remove an interface from a bridge domain, use the no form of this command.

interface type interface-path-id

no interface type interface-path-id

Syntax Description

type

Interface type. For more information, use the question mark (?) online help function.

interface-path-id

Physical interface or virtual interface.

Note Use the show interfaces command to see a list of all interfaces currently configured on the router.

For more information about the syntax for the router, use the question mark (?) online help function.


Command Defaults

None

Command Modes

L2VPN bridge group bridge domain configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the interface command to enter L2VPN bridge group bridge domain attachment circuit configuration mode. In addition, the interface command enters the interface configuration submode to configure parameters specific to the interface.

By default, an interface is not part of a bridge.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure the bundle Ethernet interface as an attachment circuit:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# interface gigabitethernet 0/1/0/9
RP/0//CPU0:router(config-l2vpn-bg-bd-ac)#

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.


isolation recovery-delay

To specify a delay before clearing the isolation condition after recovery from failure, use the isolation recovery-delay command in the redundancy group ICCP configuration mode. To return to the default value, use the no form of this command.

isolation recovery-delay seconds

no isolation recovery-delay seconds

Syntax Description

seconds

Recovery delay in seconds.


Command Defaults

None

Command Modes

Redundancy group ICCP configuration

Command History

Release
Modification

Release 4.0.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

config-services

read, write


Examples

The following example shows how to configure ICCP parameters:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# redundancy iccp group 10
RP/0//CPU0:router(config-redundancy-iccp-group)# isolation recovery-delay 35
RP/0//CPU0:router(config-redundancy-iccp-group)#
 
   

Related Commands

Commands
Description

redundancy iccp group

Configures ICCP parameters.


l2vpn resynchronize forwarding mac-address-table location

To retrieve a MAC address table from network processors and transfer the MAC address tables to the L2FIB manager, use the l2vpn resynchronize forwarding mac-address-table location command in EXEC mode.

l2vpn resynchronize forwarding mac-address-table location <node-id>

Syntax Description

<node-id>

Location of the mac-address-table. The node-id argument is entered using the rack/slot/module notation.


Command Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.9.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

To ensure that correct information is displayed, enter this command before issuing any show commands for the mac address tables.

The l2vpn resynchronize forwarding mac-address-table location command initiates the transfer of MAC learn information from the network processors, to the L2FIB manager. This operation is CPU intensive especially when there are 512K MACs. Therefore, the command is throttled, so that you cannot issue this command back to back. The throttle time depends on the number of MAC addresses. If the number of MAC addresses is under 16K MACs, the throttle time is five seconds. If it is between 16K and 128K, the throttle time is one minute, and if it is between 128K and 256K, the throttle time is two minutes. The throttle time is four minutes for MAC addresses above 256K.

Task ID
Task ID
Operations

l2vpn

read, write, execute


Examples

The following example shows how to retrieve the MAC address table from the network processors:

RP/0/RSP0/CPU0:router# l2vpn resynchronize forwarding mac-address-table location 0/4/CPU0
Wed Nov 25 21:40:59.690 PST
RP/0/RSP0/CPU0:router#

Related Commands

Command
Description

show l2vpn forwarding

Displays forwarding information from the L2FIB manager on the line card.


learning disable (VPLS)

To override the MAC learning configuration of a parent bridge or to set the MAC learning configuration of a bridge, use the learning disable command in L2VPN bridge group bridge domain MAC configuration mode. To disable this feature, use the no form of this command.

learning disable

no learning disable

Syntax Description

This command has no arguments or keywords.

Command Defaults

By default, learning is enabled on all bridge domains and all interfaces on that bridge inherits this behavior.

Command Modes

L2VPN bridge group bridge domain MAC configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

When set, the learning disable command stops all MAC learning either on the specified interface or the bridge domain.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

In the following example, MAC learning is disabled on all ports in the bridge domain called bar, which is applied to all interfaces in the bridge unless the interface has its own MAC learning enable command.

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# learning disable

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.


limit (VPLS)

To set the MAC address limit for action, maximum, and notification and to enter L2VPN bridge group bridge domain MAC limit configuration mode, use the limit command in L2VPN bridge group bridge domain MAC configuration mode. To remove all limits that were previously configured under the MAC configuration submodes, use the no form of this command.

limit

no limit

Syntax Description

This command has no arguments or keywords.

Command Defaults

None

Command Modes

L2VPN bridge group bridge domain MAC configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the limit command to enter L2VPN bridge group bridge domain MAC limit configuration mode. The limit command specifies that one syslog message is sent or a corresponding trap is generated with the MAC limit when the action is violated.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how the MAC limit for the bridge bar is set to 100 with an action of shutdown. After the configuration, the bridge stops all forwarding after 100 MAC addresses are learned. When this happens, a syslog message and an SNMP trap are created.

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# limit
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-limit)# maximum 100
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-limit)# action shutdown
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-limit)# notification both

Related Commands

Command
Description

action (VPLS)

Configures the bridge behavior when the number of learned MAC addresses exceed the MAC limit configured.

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.

maximum (VPLS)

Configures the specified action when the number of MAC addresses learned on a bridge is reached.

notification (VPLS)

Specifies the type of notification that is sent when the number of learned MAC addresses exceeds the configured limit.


mac (VPLS)

To enter L2VPN bridge group bridge domain MAC configuration mode, use the mac command in L2VPN bridge group bridge domain configuration mode. To disable all configurations added under the MAC configuration submodes, use the no form of this command.

mac

no mac

Syntax Description

This command has no arguments or keywords.

Command Defaults

None

Command Modes

L2VPN bridge group bridge domain configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the mac command to enter L2VPN bridge group bridge domain MAC configuration mode.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to enter L2VPN bridge group bridge domain MAC configuration mode:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)#
 
   

Related Commands

Command
Description

aging (VPLS)

Enters MAC aging configuration submode to set the aging parameters such as time and type.

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

learning disable (VPLS)

Overrides the MAC learning configuration of a parent bridge or sets the MAC learning configuration of a bridge.

limit (VPLS)

Sets the MAC address limit for action, maximum, and notification and enters L2VPN bridge group bridge domain MAC limit configuration mode.

static-address (VPLS)

Adds static entries to the MAC address for filtering.

withdraw (VPLS)

Enables MAC address withdrawal for a specified bridge domain.


mac secure

To configure MAC security at a port and to set the default action that is to be taken when security is violated, use the mac secure command in the l2vpn bridge group bridge domain configuration mode. To disable MAC security, use the no form of this command.

mac secure {action [ none | shutdown | restrict] | logging | disable}

no mac secure {action [ none | shutdown ] | logging | disable}

Syntax Description

action

(Optional) Indicates the action to be taken when security is violated.

none

Forwards the violating packet and allows the MAC address to be relearned.

shutdown

Shuts down the violating bridge port.

restrict

Drops the violating packet and disables the learn attempt.

Note The restrict keyword in applicable to interfaces only.

logging

(Optional) Enables logging.

disable

(Optional) Disables mac security.


Command Default

If a MAC address has been learned on a secure port and, a relearn attempt from another port (secure or not) is made, the default action is restrict.

Command Modes

l2vpn bridge group bridge domain configuration

Command History

Release
Modification

Release 4.0.1

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

This example shows how to enable mac security on bridge bar:

RP/0/RSP0/CPU0:router#configure 
Tue Oct 19 03:06:14.663 DST
RP/0/RSP0/CPU0:router(config)#l2vpn 
RP/0/RSP0/CPU0:router(config-l2vpn)#bridge group b1
RP/0/RSP0/CPU0:router(config-l2vpn-bg)#bridge-domain bar
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)#mac secure
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-mac-secure)#
 
   

This example shows how to shut down a violating bridge port on bridge bar:

RP/0/RSP0/CPU0:router#configure 
Tue Oct 19 03:06:14.663 DST
RP/0/RSP0/CPU0:router(config)#l2vpn 
RP/0/RSP0/CPU0:router(config-l2vpn)#bridge group b1
RP/0/RSP0/CPU0:router(config-l2vpn-bg)#bridge-domain bar
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)#mac secure
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-mac-secure)#action shutdown
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-mac-secure)#

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration submode.


maximum (VPLS)

To configure the specified action when the number of MAC addresses learned on a bridge is reached, use the maximum command in L2VPN bridge group bridge domain MAC limit configuration mode. To disable this feature, use the no form of this command.

maximum value

no maximum value

Syntax Description

value

Maximum number of learned MAC addresses. The range is from 5 to 512000.


Command Defaults

The default maximum value is 4000.

Command Modes

L2VPN bridge group bridge domain MAC limit configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

The action can either be flood, no flood, or shutdown. Depending on the configuration, a syslog, an SNMP trap notification, or both are issued.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows when the number of MAC address learned on the bridge reaches 5000 and the bridge stops learning but continues flooding:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# limit
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-limit)# maximum 5000
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-limit)# action no-flood
 
   

Related Commands

Command
Description

action (VPLS)

Configures the bridge behavior when the number of learned MAC addresses exceed the MAC limit configured.

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

limit (VPLS)

Sets the MAC address limit for action, maximum, and notification and enters L2VPN bridge group bridge domain MAC limit configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.

notification (VPLS)

Specifies the type of notification that is sent when the number of learned MAC addresses exceeds the configured limit.


member neighbor

To configure interchassis group ICCP members, use the member neighbor command in redundancy ICCP group configuration mode. To return to the default behavior, use the no form of this command.

member neighbor neighbor-ip-address

no member neighbor neighbor-ip-address

Syntax Description

neighbor-ip-address

Specifies the ICCP member neighbor IP address.


Command Defaults

None

Command Modes

Redundancy ICCP group configuration

Command History

Release
Modification

Release 4.0.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

config-services

read, write


Examples

The following example shows how to configure interchassis group ICCP members:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# redundancy iccp group 10
RP/0//CPU0:router(config-redundancy-iccp-group)# member neighbor 10.1.1.1
RP/0//CPU0:router(config-redundancy-iccp-group)#
 
   

Related Commands

Command
Description

redundancy iccp group

Configures ICCP parameter


mpls static label (VPLS)

To configure the MPLS static labels and the static labels for the access pseudowire configuration, use the mpls static label command in L2VPN bridge group bridge domain VFI pseudowire configuration mode. To assign the dynamic MPLS labels to either the virtual forwarding interface (VFI) pseudowire or the access pseudowire, use the no form of this command.

mpls static label local {remote value}

no mpls static label local {remote value}

Syntax Description

local value

Configures the local pseudowire label.

Note Use the show mpls label range command to obtain the range for the local labels.

remote value

Configures the remote pseudowire label.

Note The range of values for the remote labels depends on the label allocator of the remote router.


Command Defaults

By default, the router attempts to assign dynamic labels to the pseudowire.

Command Modes

L2VPN bridge group bridge domain Access/VFI pseudowire configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Ensure that both ends of the pseudowire have matching static labels.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure the VFI pseudowire 10.1.1.2 with pseudowire ID of 1000 to use MPLS label 800 and remote MPLS label 500:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi model
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)# neighbor 10.1.1.2 pw-id 1000
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi-pw)# mpls static label local 800 remote 500

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

neighbor (VPLS)

Adds an access pseudowire port to a bridge domain or a pseudowire to a bridge virtual forwarding interface (VFI).

pw-class

Configures the pseudowire class template name to use for the pseudowire.

vfi (VPLS)

Configures virtual forwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode.


mtu (VPLS)

To adjust the maximum packet size or maximum transmission unit (MTU) size for the bridge domain, use the mtu command in L2VPN bridge group bridge domain configuration mode. To disable this feature, use the no form of this command.

mtu bytes

no mtu

Syntax Description

bytes

MTU size, in bytes. The range is from 46 to 65535.


Command Defaults

The default MTU value is 1500.

Command Modes

L2VPN bridge group bridge domain configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Each interface has a default maximum packet size or MTU size. This number generally defaults to the largest size possible for that interface type. On serial interfaces, the MTU size varies, but cannot be set smaller than 64 bytes.

The MTU for the bridge domain includes only the payload of the packet. For example, a configured bridge MTU of 1500 allows tagged packets of 1518 bytes (6 bytes DA, 6 bytes SA, 2 bytes ethertype, or 4 bytes qtag).


Note Bridge wide MTU is not enforced on the data traffic.


Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example specifies an MTU of 1000 bytes:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mtu 1000
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

flooding disable

Configures flooding for traffic at the bridge domain level or at the bridge port level.

l2vpn

Enters L2VPN configuration mode.


neighbor (VPLS)

To add an access pseudowire port to a bridge domain or a pseudowire to a bridge virtual forwarding interface (VFI), use the neighbor command in the appropriate L2VPN bridge group bridge domain configuration submode. To remove the pseudowire either from the bridge or from the VFI, use the no form of this command.

neighbor A.B.C.D pw-id value

no neighbor A.B.C.D pw-id value

Syntax Description

A.B.C.D

IP address of the cross-connect peer.

pw-id value

Configures the pseudowire ID and ID value. Range is 1 to 4294967295.


Command Defaults

None

Command Modes

L2VPN bridge group bridge domain configuration

L2VPN bridge group bridge domain VFI configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the neighbor command to enter L2VPN bridge group bridge domain VFI pseudowire configuration mode. Alternatively, use the neighbor command to enter L2VPN bridge group bridge domain access pseudowire configuration mode.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure an access pseudowire directly under a bridge domain in L2VPN bridge group bridge domain configuration mode:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# neighbor 10.1.1.2 pw-id 1000
RP/0//CPU0:router(config-l2vpn-bg-bd-pw)#
 
   

The following example shows how to configure the parameters for any pseudowire in L2VPN bridge group bridge domain VFI configuration mode:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi v1
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)# neighbor 10.1.1.2 pw-id 1000
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi-pw)#
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mpls static label (VPLS)

Configures the MPLS static labels and the static labels for the access pseudowire configuration.

pw-class

Configures the pseudowire class template name to use for the pseudowire.

static-mac-address (VPLS)

Configures the static MAC address to associate a remote MAC address with a pseudowire or any other bridge interface.

vfi (VPLS)

Configures virtual forwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode.


notification (VPLS)

To specify the type of notification that is sent when the number of learned MAC addresses exceeds the configured limit, use the notification command in L2VPN bridge group bridge domain MAC limit configuration mode. To use the notification as only a syslog entry, use the no form of this command.

notification {both | none | trap}

no notification {both | none | trap}

Syntax Description

both

Sends syslog and trap notifications when the action is violated.

none

Specifies no notification.

trap

Sends trap notifications when the action is violated.


Command Defaults

By default, only a syslog message is sent when the number of learned MAC addresses reaches the maximum configured.

Command Modes

L2VPN bridge group bridge domain MAC limit configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

A syslog message and an SNMP trap is generated. Alternatively, an SNMP trap is generated. Finally, no notification is generated.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how both a syslog message and an SNMP trap are generated with the bridge bar and learns more MAC addresses than the configured limit:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# limit
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-limit)# notification both

Related Commands

Command
Description

action (VPLS)

Configures the bridge behavior when the number of learned MAC addresses exceed the MAC limit configured.

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.

maximum (VPLS)

Configures the specified action when the number of MAC addresses learned on a bridge is reached.


port-down flush disable (VPLS)

To disable MAC flush when the bridge port is nonfunctional, use the port-down flush disable command in the L2VPN bridge group bridge domain MAC configuration mode. Use the no form of this command to enable the MAC flush when the bridge port is nonfunctional.

port-down flush disable

no port-down flush disable

Syntax Description

This command has no arguments or keywords.

Command Defaults

None

Command Modes

L2VPN bridge group bridge domain MAC configuration

Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

The port-down flush disable command disables the MAC flush when the bridge port is nonfunctional.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to disable MAC flush when the bridge port is nonfunctional:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# port-down flush disable

Related Commands

Command
Description

action (VPLS)

Configures the bridge behavior when the number of learned MAC addresses exceed the MAC limit configured.

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.

maximum (VPLS)

Configures the specified action when the number of MAC addresses learned on a bridge is reached.

notification (VPLS)

Specifies the type of notification that is sent when the number of learned MAC addresses exceeds the configured limit.


pw-class

To configure the pseudowire class template name to use for the pseudowire, use the pw-class command in L2VPN bridge group bridge domain VFI pseudowire configuration mode. To delete the pseudowire class, use the no form of this command.

pw-class class-name

no pw-class class-name

Syntax Description

class-name

Pseudowire class name.


Command Defaults

None

Command Modes

L2VPN bridge group bridge domain Access/VFI pseudowire configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to attach the pseudowire class to the pseudowire:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi v1
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)# neighbor 10.1.1.2 pw-id 1000
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi-pw)# pw-class canada 
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mpls static label (VPLS)

Configures the MPLS static labels and the static labels for the access pseudowire configuration.

neighbor (VPLS)

Adds an access pseudowire port to a bridge domain or a pseudowire to a bridge virtual forwarding interface (VFI).

vfi (VPLS)

Configures virtual forwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode.


pw-status (L2VPN)

To enable status sginaling on a pseudowire, use the pw-status command in L2VPN configuration submode. To disable the pseudowire status signaling, use the no form of this command.

pw-status

no pw- status

Syntax Description

This command has no arguments or keywords.

Command Defaults

None

Command Modes

L2VPN configuration submode

Command History

Release
Modification

Release 4.0.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Cisco IOS XR provides two methods for signaling pseudowires (PW) status:

Using Label Withdraw Message

The provider edge routers (PEs) send Label Mapping Message to their peers as soon as the pseudowire is configured and administratively enabled. The pseudowire label should not be withdrawn unless the pseudowire is administratively disabled or deleted.

Using PW status TLV

The PEs use LDP pseudowire status TLV to indicate pseudowire status to their peers. The LDP pseudowire status TLV contains additional information compared to the Label Withdraw Message.


Note Unless pseudowire status TLV is explicitly enabled under L2VPN configuration, the default signaling method is Label Withdrawal.


Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to enable pseudowire status signaling on configured pseudowires:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# pw-status
RP/0//CPU0:router(config-l2vpn)# 

Related Commands

Command
Description

l2vpn

Enters L2VPN configuration mode.


redundancy iccp group

To configure Inter Chassis Communication Protocol (ICCP) parameters, use the redundancy iccp group command in the global configuration mode. To return to the default, use the no form of this command.

redundancy iccp group group-id

no redundancy iccp group group-id

Syntax Description

group-id

Specifies ICCP group ID.


Command Defaults

ICCP redundancy is disabled.

Command Modes

Global configuration mode

Command History

Release
Modification

Release 4.0.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

config-services

read, write


Examples

The following example shows how to configure ICCP parameters:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# redundancy iccp group 10
RP/0//CPU0:router(config-redundancy-iccp-group)# 

redundancy one-way

To enforce one-way pseudowire redundancy behavior when the redundancy group is configured, use the redundancy one-way command in the L2VPN pseudowire class configuration mode. To return to the default, use the no form of this command.

redundancy one-way

no redundancy one-way

Syntax Description

This command has no arguments or keywords.

Command Defaults

One-way redundancy is disabled.

Command Modes

L2VPN pseudowire class configuration

Command History

Release
Modification

Release 4.0.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to :

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# pw-class class_mpls
RP/0//CPU0:router(config-l2vpn-pwc)# encapsulation mpls
RP/0//CPU0:router(config-l2vpn-pwc-mpls)# redundancy one-way
RP/0//CPU0:router(config-l2vpn-pwc-mpls)#

Related Commands

Command
Description

l2vpn

Enters L2VPN configuration mode.


route-target

To specify a route target for the VFI, use the route-target command in the BGP autodiscovery mode. To return to the default value, use the no form of this command.

route-target {as-number:nn | ip-address:nn | export | import}

no route-target {as-number:nn | ip-address:nn | export | import}

Syntax Description

as-number:nn

Autonomous system (AS) number of the route distinguisher.

as-number—16-bit AS number

Range for 2-byte numbers is 1 to 65535. Range for 4-byte numbers is 1.0 to 65535.65535.

nn—32-bit number

ip-address:nn

IP address of the route distinguisher.

ip-address—32-bit IP address

nn—16-bit number

export

Specifies export route target.

import

Specifies import route target.


Command Defaults

None.

Command Modes

BGP autodiscovery configuration

Command History

Release
Modification

Release 4.0.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure a bridge domain:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group EGroup
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain eastdomain
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi eastvfi
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)# autodiscovery bgp
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi-ad)#route-target 100:20
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Assigns each network interface to a bridge group.

l2vpn

Enters L2VPN configuration mode.


show iccp group

To display information for the ICCP parameters, use the show iccp command in EXEC mode.

show iccp group { group-id | location node-id}

Syntax Description

group-id

ICCP group ID.

location  

Specifies the location.

node-id

Node ID. The node-id argument is entered in the rack/slot/module notation.


Command Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 4.0.0

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

mpls-ldp

read


Examples

The following example shows the output of the show iccp group command:

Example 1

RP/0/0/CPU0:router#show iccp group 
 
   
Redundancy Group 1
  member ip:2.2.2.2 (router2), up (connected)
    monitor: route-watch (up)
  backbone interface Gi0/2/0/3: up
  enabled applications: mLACP
  isolation recovery delay timer: 180 s, not running
Redundancy Group 2
  member ip:2.2.2.2 (router2), up (disconnected)
    monitor: route-watch (up)
  backbone interface Gi0/2/0/3: up
  enabled applications: mLACP
  isolation recovery delay timer: 180 s, not running
RP/0/0/CPU0:router#
 

Example 2:

RP/0/0/CPU0:router#show iccp group 1
Redundancy Group 1
  member ip:2.2.2.2 (router2), up (connected)
    monitor: route-watch (up)
  backbone interface Gi0/2/0/3: up
  enabled applications: mLACP
  isolation recovery delay timer: 180 s, not running
RP/0/0/CPU0:router#

show l2vpn bridge-domain (VPLS)

To display information for the bridge ports such as attachment circuits and pseudowires for the specific bridge domains, use the show l2vpn bridge-domain command in EXEC mode.

show l2vpn bridge-domain [autodiscovery | bd-name bridge-domain-name | brief | detail | group bridge-domain-group name | hardware | interface type interface-path-id} | neighbor IP-address [pw-id value] | pbb | private | summary]

Syntax Description

autodiscovery

(Optional) Displays BGP/Radius autodiscovery information.

bd-name bridge-domain-name

(Optional) Displays the bridges by the bridge ID. The bridge-domain-name argument is used to name a bridge domain.

brief

(Optional) Displays brief information about the bridges.

detail

(Optional) Displays the output for the Layer 2 VPN (L2VPN) to indicate whether or not the MAC withdrawal feature is enabled and the number of MAC withdrawal messages that are sent or received from the pseudowire.

group bridge-domain-
group-name

(Optional) Displays filter information on the bridge-domain group name. The bridge-domain-group-name argument is used to name the bridge domain group.

hardware

(Optional) Displays hardware information.

interface

(Optional) Displays the filter information for the interface on the bridge domain.

type

Interface type. For more information, use the question mark (?) online help function.

interface-path-id

Physical interface or virtual interface.

Note Use the show interfaces command to see a list of all interfaces currently configured on the router.

For more information about the syntax for the router, use the question mark (?) online help function.

neighbor ip-address

(Optional) Displays only the bridge domain that contains the pseudowires to match the filter for the neighbor. The ip-address argument is used to configure IP address of the neighbor.

pw-id value

(Optional) Displays the filter for the pseudowire ID. The range is from 1 to 4294967295.

pbb

(Optional) Displays provider backbone bridge information.

private

(Optional) Displays private information.

summary

(Optional) Displays the summary information for the bridge domain.


Command Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the interface keyword to display only the bridge domain that contains the specified interface as an attachment circuit. In the sample output, only the attachment circuit matches the filter that is displayed. No pseudowires are displayed.

Task ID
Task ID
Operations

l2vpn

read


Examples

The following sample output shows information for the bridge ports such as attachment circuits and pseudowires for the specific bridge domains:

RP/0//CPU0:router# #show l2vpn bridge-domain 
Tue Feb 23 20:21:56.758 PST
Bridge group: 189, bridge-domain: 189, id: 0, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 2 (2 up), VFIs: 0, PWs: 0 (0 up), PBBs: 0 (0 up)
  List of ACs:
    Gi0/1/0/3.189, state: up, Static MAC addresses: 0
    Gi0/1/0/7.189, state: up, Static MAC addresses: 0
  List of Access PWs:
  List of VFIs:
Bridge group: 190, bridge-domain: 190, id: 1, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 0 (0 up), VFIs: 1, PWs: 3 (3 up), PBBs: 0 (0 up)
  List of ACs:
  List of Access PWs:
  List of VFIs:
    VFI 190
      Neighbor 10.19.19.19 pw-id 190, state: up, Static MAC addresses: 0
Bridge group: 210, bridge-domain: 210, id: 2, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up), PBBs: 0 (0 up)
  List of ACs:
    Gi0/1/0/7.210, state: up, Static MAC addresses: 0
  List of Access PWs:
  List of VFIs:
    VFI 210
      Neighbor 10.19.19.19 pw-id 210, state: up, Static MAC addresses: 0
Bridge group: 211, bridge-domain: 211, id: 3, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up), PBBs: 0 (0 up)
  List of ACs:
    Gi0/1/0/7.211, state: up, Static MAC addresses: 0
  List of Access PWs:
  List of VFIs:
    VFI 211
      Neighbor 10.19.19.19 pw-id 211, state: up, Static MAC addresses: 0
Bridge group: 215, bridge-domain: 215, id: 4, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 2 (2 up), VFIs: 1, PWs: 1 (1 up), PBBs: 0 (0 up)
  List of ACs:
    Gi0/1/0/3.215, state: up, Static MAC addresses: 0
    Gi0/1/0/7.215, state: up, Static MAC addresses: 0
  List of Access PWs:
  List of VFIs:
    VFI 215
      Neighbor 10.19.19.19 pw-id 215, state: up, Static MAC addresses: 0
Bridge group: 2130, bridge-domain: 2130, id: 5, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up), PBBs: 0 (0 up)
  List of ACs:
    Gi0/1/0/7.2130, state: up, Static MAC addresses: 0
  List of Access PWs:
  List of VFIs:
    VFI 2130
      Neighbor 10.19.19.19 pw-id 2130, state: up, Static MAC addresses: 0Table 1 describes 
the significant fields shown in the display.

Table 1 show l2vpn bridge-domain Command Field Descriptions 

Field
Description

Bridge group

Name of bridge domain group is displayed.

bridge-domain

Name of bridge domain is displayed.

id

ID assigned to this bridge domain is displayed.

state

Current state of the bridge domain is displayed.


The following example shows sample output for a bridge named bd1:

RP/0//CPU0:router# show l2vpn bridge-domain bd-name bd1
 
   
Bridge group: g1, bridge-domain: bd1, id: 0, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up)
  List of ACs:
    Gi0/1/0/0, state: up, Static MAC addresses: 2, MSTi: 0 (unprotected)
  List of Access PWs:
  List of VFIs:
    VFI 1
      Neighbor 10.1.1.1 pw-id 1, state: up, Static MAC addresses: 0
 
   

The following sample output shows brief information about the bridges:

RP/0//CPU0:router# show l2vpn bridge-domain brief
Bridge Group/Bridge-Domain Name  ID    State      Num ACs/up     Num PWs/up
-------------------------------- ----- ---------- -------------- ------------
bg1/bd1                          0     up         1/1            0/0           
bg1/bd2                          1     up         0/0            0/0           
bg1/bd3                          2     up         0/0            0/0           
 
   
 
   

Table 2 describes the significant fields shown in the display.

Table 2 show l2vpn bridge-domain brief Command Field Descriptions 

Field
Description

Bridge Group/Bridge-Domain Name

Bridge domain group name followed by the bridge domain name are displayed.

ID

ID assigned to this bridge domain is displayed.

State

Current state of the bridge domain is displayed.

Num ACs/up

Total number of attachment circuits that are up in this bridge domain is displayed.

Num PWs/up

Total number of pseudowires that are up in this bridge domain is displayed. The count includes both VFI pseudowires and access pseudowires.


The following sample output shows detailed information:

RP/0//CPU0:router# show l2vpn bridge-domain detail
 
   
Bridge group: , bridge-domain: , id: , state: up, ShgId: 0, MSTi: 0
  MAC learning: enabled
  MAC withdraw: disabled
  Flooding:
    Broadcast & Multicast: enabled
    Unknown unicast: enabled
  MAC aging time: 300 s, Type: inactivity
  MAC limit: 4000, Action: none, Notification: syslog
  : 
  : disabled
  : 
  MTU: 
  Filter MAC addresses:
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up)
  List of ACs:
    AC: GigabitEthernet0/1/0/, state is up
      Type 
      MTU ; XC ID ; interworking none; MSTi 0 (unprotected)
      MAC learning: enabled
      Flooding:
        Broadcast & Multicast: enabled
        Unknown unicast: enabled
      MAC aging time: 300 s, Type: inactivity
      MAC limit: 4000, Action: none, Notification: syslog
      : 
      : disabled
      
      :
        
        
      
        packet totals: 
        byte totals: 
  List of Access PWs:
  List of VFIs:
    VFI 
      PW: neighbor ..., PW ID , state is up ( established )
        PW class , XC ID 
        Encapsulation MPLS, protocol LDP
        PW type Ethernet, control word disabled, interworking none
        PW backup disable delay 0 sec
        Sequencing not set
                MPLS         Local                          Remote                        
          ------------ ------------------------------ -------------------------
                                                                 
                                                             
                                                                    
                                                     
                                                     
          type                                               
                                      
                                    
                                         
                       ()                    
          ------------ ------------------------------ -------------------------
        Create time: //14::(17::ago)
        Last time status changed: 13//::(::ago)
        MAC withdraw message: send 0 receive 0
        Static MAC addresses:
        Statistics:
          packet totals: receive , send 
          byte totals: receive , send 
      VFI Statistics:
        drops: illegal VLAN 0, illegal length 0
 
   

The following sample output shows that when a bridge operates in VPWS mode, the irrelevant information for MAC learning is suppressed:

RP/0//CPU0:router# show l2vpn bridge-domain detail
Bridge group: g1, bridge-domain: bd1, id: 0, state: up, ShgId: 0, MSTi: 0
  MAC learning: enabled
  MAC withdraw: disabled
  Flooding:
    Broadcast & Multicast: enabled
    Unknown unicast: enabled
  MAC aging time: 300 s, Type: inactivity
  MAC limit: 4000, Action: none, Notification: syslog
  MAC limit reached: yes
  Security: disabled
  DHCPv4 snooping: disabled
  MTU: 1500
  Filter MAC addresses:
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up)
  List of ACs:
    AC: GigabitEthernet0/1/0/0, state is up
      Type Ethernet
      MTU 1500; XC ID 0x2000001; interworking none; MSTi 0
      MAC learning: enabled
      Flooding:
        Broadcast & Multicast: enabled
        Unknown unicast: enabled
      MAC aging time: 300 s, Type: inactivity
      MAC limit: 4000, Action: none, Notification: syslog
      MAC limit reached: yes
      Security: disabled
      DHCPv4 snooping: disabled
      Static MAC addresses:
        0000.0000.0000
        0001.0002.0003
      Statistics:
        packet totals: receive 3919680,send 9328
        byte totals: receive 305735040,send 15022146
  List of Access PWs:
  List of VFIs:
    VFI 1
      PW: neighbor 1.1.1.1, PW ID 1, state is up ( established )
        PW class mpls, XC ID 0xff000001
        Encapsulation MPLS, protocol LDP
        PW type Ethernet, control word disabled, interworking none
        PW backup disable delay 0 sec
        Sequencing not set
                MPLS         Local                          Remote                        
          ------------ ------------------------------ ----------
          Label        16003                          16003                         
          Group ID     0x0                            0x0                           
          Interface    1                              1                             
          MTU          1500                           1500                          
          Control word disabled                       disabled                      
          PW type      Ethernet                       Ethernet                      
          VCCV CV type 0x2                            0x2                           
                       (LSP ping verification)        (LSP ping verification)       
          VCCV CC type 0x2                            0x2                           
                       (router alert label)           (router alert label)          
          ------------ ------------------------------ ----------
        Create time: 12/03/2008 14:03:00 (17:17:30 ago)
        Last time status changed: 13/03/2008 05:57:58 (01:22:31 ago)
        MAC withdraw message: send 0 receive 0
        Static MAC addresses:
        Statistics:
          packet totals: receive 3918814, send 3918024
          byte totals: receive 305667492, send 321277968
      VFI Statistics:
        drops: illegal VLAN 0, illegal length 0
 
   
Bridge group: g2, bridge-domain: pbb-bd1, id: 1, state: up, ShgId: 0, MSTi: 0
  Type:  pbb-edge, I-SID: 1234
  Core-bridge: pbb-bd2
  MAC learning: enabled
  MAC withdraw: disabled
  Flooding:
    Broadcast & Multicast: enabled
    Unknown unicast: enabled
  MAC aging time: 300 s, Type: inactivity
  MAC limit: 4000, Action: none, Notification: syslog
  MAC limit reached: yes
  Security: disabled
  DHCPv4 snooping: disabled
  MTU: 1500
  Filter MAC addresses:
ACs: 1 (1 up), VFIs: 0, PWs: 0 (0 up), PBBs: 1 (1 up)
List of PBBs:
    PBB Edge, state is up
      XC ID 0x2000001
      MAC learning: enabled
      Flooding:
        Broadcast & Multicast: enabled
        Unknown unicast: enabled
      MAC aging time: 300 s, Type: inactivity
      MAC limit: 4000, Action: none, Notification: syslog
      MAC limit reached: yes
      Split Horizon Group: none
      DHCPv4 snooping: disabled
      IGMP Snooping profile: 
      Storm Control: disabled
      Unknown-unicast-bmac: 666.777.888               
      CMAC to BMAC Mapping Table: 
         CMAC             |    BMAC
         -------------------------------------------------
         222.333.444     |    777.888.999
         333.444.555     |    888.999.111
      Statistics:
        packet totals: receive 3919680,send 9328
        byte totals: receive 305735040,send 15022146
 
   
 List of ACs:
    AC: GigabitEthernet0/1/0/0, state is up
      Type Ethernet
      MTU 1500; XC ID 0x2000001; interworking none; MSTi 0
      MAC learning: enabled
      Flooding:
        Broadcast & Multicast: enabled
        Unknown unicast: enabled
      MAC aging time: 300 s, Type: inactivity
      MAC limit: 4000, Action: none, Notification: syslog
      MAC limit reached: yes
      Security: disabled
      DHCPv4 snooping: disabled
      Static MAC addresses:
        0000.0000.0000
        0001.0002.0003
      Statistics:
        packet totals: receive 3919680,send 9328
        byte totals: receive 305735040,send 15022146
 
   
 
   
Bridge group: g2, bridge-domain: pbb-bd2, id: 2, state: up, ShgId: 0, MSTi: 0
  Type:  pbb-core 
  Number of associated pbb-edge BDs: 1	
  MAC learning: enabled
  MAC withdraw: disabled
  Flooding:
    Broadcast & Multicast: enabled
    Unknown unicast: enabled
  MAC aging time: 300 s, Type: inactivity
  MAC limit: 4000, Action: none, Notification: syslog
  MAC limit reached: yes
  Security: disabled
  DHCPv4 snooping: disabled
  MTU: 1500
  Filter MAC addresses:
  
ACs: 1 (1 up), VFIs: 0, PWs: 0 (0 up), PBBs: 1 (1 up)
List of PBBs:
    PBB Core, state is up
      Vlan-id: 1; XC ID 0x2000001
      MAC learning: enabled
      Flooding:
        Broadcast & Multicast: enabled
        Unknown unicast: enabled
      MAC aging time: 300 s, Type: inactivity
      MAC limit: 600, Action: none, Notification: syslog
      MAC limit reached: no
      Security: disabled
      Split Horizon Group: none
      DHCPv4 snooping: profile foo
      IGMP Snooping profile: 
      Storm Control: disabled
 
   
List of ACs:
    AC: GigabitEthernet0/1/0/0, state is up
      Type Ethernet
      MTU 1500; XC ID 0x2000001; interworking none; MSTi 0
      MAC learning: enabled
      Flooding:
        Broadcast & Multicast: enabled
        Unknown unicast: enabled
      MAC aging time: 300 s, Type: inactivity
      MAC limit: 4000, Action: none, Notification: syslog
      MAC limit reached: yes
      Security: disabled
      DHCPv4 snooping: disabled
      Static MAC addresses:
        0000.0000.0000
        0001.0002.0003
      Statistics:
        packet totals: receive 3919680,send 9328
        byte totals: receive 305735040,send 15022146
 
   
 
   

Table 4 describes the significant fields shown in the display.

Table 3 show l2vpn bridge-domain detail Command Field Descriptions 

Field
Description

Bridge group

Name of bridge domain group is displayed.

bridge-domain

Name of bridge domain is displayed.

ID

ID assigned to this bridge domain is displayed.

state

Current state of the bridge domain is displayed.

MSTi

ID for the Multiple Spanning Tree.


The following sample output shows filter information about the bridge-domain group named g1:

RP/0//CPU0:router# show l2vpn bridge-domain group g1
 
   
Bridge group: g1, bridge-domain: bd1, id: 0, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up)
  List of ACs:
    Gi0/1/0/0, state: up, Static MAC addresses: 2, MSTi: 0 (unprotected)
  List of Access PWs:
  List of VFIs:
    VFI 1
      Neighbor .1.1.1 pw-id 1, state: up, Static MAC addresses: 0
 
   

The following sample output shows display the filter information for the interface on the bridge domain:

RP/0//CPU0:router# show l2vpn bridge-domain interface gigabitEthernet 0/1/0/0
 
   
Bridge group: g1, bridge-domain: bd1, id: 0, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up)
  List of ACs:
    Gi0/1/0/0, state: up, Static MAC addresses: 2, MSTi: 0 (unprotected)
 
   

The following sample output shows that the bridge domain contains the pseudowires to match the filter for the neighbor:

RP/0//CPU0:router# show l2vpn bridge-domain neighbor .1.1.1
 
   
Bridge group: g1, bridge-domain: bd1, id: 0, state: up, ShgId: 0, MSTi: 0
  Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
  Filter MAC addresses: 0
  ACs: 1 (1 up), VFIs: 1, PWs: 1 (1 up)
  List of Access PWs:
  List of VFIs:
    VFI 1
      Neighbor .1.1.1 pw-id 1, state: up, Static MAC addresses: 0
 
   

The following sample output shows the summary information for the bridge domain:

RP/0//CPU0:router# show l2vpn bridge-domain summary
 
   
Number of groups: 1, bridge-domains: 2, Up: 2, Shutdown: 0
Default: 0, pbb-edge: 1, pbb-core: 1
Number of ACs: 1 Up: 1, Down: 0
Number of PWs: 0 Up: 0, Down: 0
 
   

Table 4 describes the significant fields shown in the display.

Table 4 show l2vpn bridge-domain summary Command Field Descriptions 

Field
Description

Number of groups

Number of configured bridge domain groups is displayed.

bridge-domains

Number of configured bridge domains is displayed.

Shutdown

Number of bridge domains that are in Shutdown state is displayed.

Number of ACs

Number of attachment circuits that are in Up state and Down state are displayed.

Number of PWs

Number of pseudowires that are in Up state and Down state are displayed. This includes the VFI pseudowire and the access pseudowire.


Related Commands

Command
Description

clear l2vpn bridge-domain (VPLS)

Clears the MAC addresses and restarts the bridge domains on the router.


show l2vpn forwarding bridge-domain (VPLS)

To display information on the bridge that is used by the forwarding layer, use the show l2vpn forwarding bridge-domain command in EXEC mode.

show l2vpn forwarding bridge-domain [bridge-domain-name] {detail | hardware {egress | ingress}} {location node-id}

Syntax Description

bridge-domain-name

(Optional) Name of a bridge domain.

detail

Displays all the detailed information on the attachment circuits and pseudowires.

hardware

Displays the hardware location entry.

egress

Reads information from the egress PSE.

ingress

Reads information from the ingress PSE.

location node-id

Displays the bridge-domain information for the specified location. The node-id argument is entered in the rack/slot/module notation.


Command Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

For each bridge, you can display summary information about the number of split-horizon groups, bridge ports, number of MAC addresses, and so forth.

The hardware keyword displays detailed information, and is meant for field investigation by a specialized Cisco engineer.

Task ID
Task ID
Operations

l2vpn

read


Examples

The following sample output shows bridge-domain information for location 0/1/CPU0:

RP/0/RP0/CPU0:router# show l2vpn forwarding bridge-domain location 0/1/CPU0 
 
   
Bridge-Domain Name               ID     Ports addr   Flooding Learning State    
-------------------------------- ------ ----- ------ -------- -------- ---------
g1:bd1
 
   
Bridge-domain name: g1:bd1, id: 0, state: up
 MAC learning: enabled
 Flooding:
   Broadcast & Multicast: enabled
   Unknown unicast: enabled
 MAC aging time: 300 s, Type: inactivity
 MAC limit: 4000, Action: none, Notification: syslog
 MAC limit reached: yes
 Security: disabled
 DHCPv4 snooping: profile not known on this node
 Bridge MTU: 1500 bytes
 Number of bridge ports: 2
 Number of MAC addresses: 65536
 Multi-spanning tree instance: 0
 
   
  GigabitEthernet0/1/0/0, state: oper up
    Number of MAC: 32770
    Sent(Packets/Bytes): 0/21838568
    Received(Packets/Bytes): 5704781/444972918
 
   
  Nbor 1.1.1.1 pw-id 1
    Number of MAC: 32766
    Sent(Packets/Bytes): 0/0
    Received(Packets/Bytes): 5703987/444910986
            0      2     65536  Enabled  Enabled  UP 
 
   

The following sample output shows detailed information for hardware location 0/1/CPU0 from the egress pse:

RP/0/RP0/CPU0:router# show l2vpn forwarding bridge-domain hardware egress detail location 
0/1/CPU0
 
   
Bridge-domain name: g1:bd1, id: 0, state: up
 MAC learning: enabled
 Flooding:
   Broadcast & Multicast: enabled
   Unknown unicast: enabled
 MAC aging time: 300 s, Type: inactivity
 MAC limit: 4000, Action: none, Notification: syslog
 MAC limit reached: yes
 Security: disabled
 DHCPv4 snooping: profile not known on this node
 Bridge MTU: 1500 bytes
 Number of bridge ports: 2
 Number of MAC addresses: 65536
 Multi-spanning tree instance: 0
 
   

Table 5 describes the significant fields shown in the display.

Table 5 show l2vpn forwarding bridge-domain Command Field Descriptions 

Field
Description

Bridge-Domain Name

Name of bridge domain is displayed.

Bridge ID

ID assigned to this bridge domain is displayed.

Ports

Number of ports that are part of this bridge domain is displayed.

MAC Addr

Number of MAC addresses that are learned on this bridge domain is displayed.

Flooding

Flooding of packets are displayed if they are enabled on this bridge domain.

Learning

Learning of MAC addresses are displayed if they are enabled on this bridge domain.

State

Current state of the bridge domain is displayed.


Related Commands

Command
Description

show l2vpn forwarding bridge-domain mac-address (VPLS)

Displays the summary information for the MAC address.


show l2vpn forwarding bridge-domain mac-address (VPLS)

To display the summary information for the MAC address, use the show l2vpn forwarding bridge-domain mac-address command in EXEC mode.

show l2vpn forwarding bridge-domain [bridge-domain-name] mac-address {MAC-address | detail | hardware {egress | ingress} | interface type interface-path-id | neighbor address {pw-id pw-id}} {location node-id}

Syntax Description

bridge-domain-name

(Optional) Name of a bridge domain.

MAC-address

MAC address.

detail

Displays detailed information for the MAC address.

hardware

Reads information from the hardware.

egress

Reads information from the egress PSE.

ingress

Reads information from the ingress PSE.

interface

Displays the match for the attachment circuit subinterface.

type

Interface type. For more information, use the question mark (?) online help function.

interface-path-id

Physical interface or virtual interface.

Note Use the show interfaces command to see a list of all interfaces currently configured on the router.

For more information about the syntax for the router, use the question mark (?) online help function.

neighbor address

Displays the match for the neighbor IP address.

pw-id pw-id

Displays the match for the pseudowire ID.

location node-id

Displays the bridge-domain information for the MAC address of the specified location. The node-id argument is entered in the rack/slot/module notation.


Command Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read


Examples

The following sample output shows the specified location of the bridge-domain name g1:bd1 for the MAC address:

RP/0//CPU0:router# show l2vpn forwarding bridge-domain g1:bd1 location 0/1/CPU0
                                 Bridge       MAC
Bridge-Domain Name               ID     Ports addr   Flooding Learning State    
-------------------------------- ------ ----- ------ -------- -------- ---------
g1:bd1                           0      2     65536  Enabled  Enabled  UP    
 
   

The following sample output shows the list of MAC addresses that are learned on a specified bridge and summary information for the addresses:

RP/0//CPU0:router# show l2vpn forwarding bridge-domain mac-address location 0/1/CPU0
 
   
Mac Address    Type    Learned from/Filtered on    LC learned Age               
--------------------------------------------------------------------------------
0000.0000.0000 static  Gi0/1/0/0                   N/A        N/A               
0000.0001.0101 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0102 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0103 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0104 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0105 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0106 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0107 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0108 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0109 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.010a dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.010b dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.010c dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.010d dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.010e dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.010f dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0110 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0111 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s      
0000.0001.0112 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 22s   
....

The following sample output shows the MAC address on a specified interface on a specified bridge:

RP/0//CPU0:router# show l2vpn forwarding bridge-domain g1:bd1 mac-address 1.2.3 location 
0/1/CPU0
 
   
Mac Address    Type    Learned from/Filtered on    LC learned Age               
--------------------------------------------------------------------------------
0001.0002.0003 static  Gi0/1/0/0                   N/A        N/A 
 
   

The following sample output shows the hardware information from the egress pse:

RP/0//CPU0:router# show l2vpn forwarding bridge-domain g1:bd1 mac-address hardware egress 
location 0/1/CPU0
 
   
Mac Address    Type    Learned from/Filtered on    LC learned Age               
--------------------------------------------------------------------------------
0000.0000.0000 static  Gi0/1/0/0                   N/A        N/A               
0000.0001.0101 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0102 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0103 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0104 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0105 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0106 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0107 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0108 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0109 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.010a dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.010b dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.010c dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.010d dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.010e dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.010f dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0110 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0111 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0112 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0113 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s      
0000.0001.0114 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 24s   
...
 
   

The following sample output shows the MAC addresses that are learned on a specified pseudowire on a specified bridge:

RP/0//CPU0:router# show l2vpn forwarding bridge-domain mac-address neighbor .1.1.1 pw-id 1 
location 0/1/CPU0
 
   
Mac Address    Type    Learned from/Filtered on    LC learned Age               
--------------------------------------------------------------------------------
0000.0003.0101 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0102 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0103 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0104 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0105 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0106 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0107 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0108 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0109 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.010a dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.010b dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.010c dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.010d dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.010e dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.010f dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0110 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0111 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0112 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0113 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0114 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s      
0000.0003.0115 dynamic .1.1.1, 1                  0/1/CPU0   0d 0h 0m 30s 
...
 
   

The following sample output shows the detailed information for MAC addresses that are learned on a specified interface and on specified bridge of a specified interface card. The sample output lists all the MAC addresses, the learned location, and the current age.

RP/0//CPU0:router# show l2vpn forwarding bridge-domain g1:bd1 mac-address interface 
gigabitEthernet 0/1/0/0 location 0/1/CPU0
 
   
Mac Address    Type    Learned from/Filtered on    LC learned Age               
--------------------------------------------------------------------------------
0000.0000.0000 static  Gi0/1/0/0                   N/A        N/A               
0000.0001.0101 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0102 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0103 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0104 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0105 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0106 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0107 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0108 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0109 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.010a dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.010b dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.010c dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.010d dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.010e dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.010f dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0110 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0111 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0112 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0113 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s      
0000.0001.0114 dynamic Gi0/1/0/0                   0/1/CPU0   0d 0h 2m 14s 

Related Commands

Command
Description

show l2vpn forwarding bridge-domain (VPLS)

Displays the list of bridges by the bridge ID.


shutdown (Bridge Domain)

To shut down a bridge domain to bring the bridge and all attachment circuits and pseudowires under it to admin down state, use the shutdown command in L2VPN bridge group bridge domain configuration mode. To re-enable the bridge domain, use the no form of this command.

shutdown

no shutdown

Syntax Description

This command has no arguments or keywords.

Command Defaults

By default, the bridge is not shutdown.

Command Modes

L2VPN bridge group bridge domain configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

When a bridge domain is disabled, all VFIs associated with the bridge domain are disabled. You can still attach or detach members to or from the bridge domain as well as the VFIs associated with the bridge domain.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to disable the bridge domain named bar:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# shutdown
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.


shutdown (VFI)

To disable virtual forwarding interface (VFI), use the shutdown command in L2VPN bridge group bridge domain VFI configuration mode. To re-enable VFI, use the no form of this command.

shutdown

no shutdown

Syntax Description

This command has no arguments or keywords.

Command Defaults

By default, the VFI is not shutdown.

Command Modes

L2VPN bridge group bridge domain VFI configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to disable VFI:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi v1
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)# shutdown
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mpls static label (VPLS)

Configures the MPLS static labels and the static labels for the access pseudowire configuration.

neighbor (VPLS)

Adds an access pseudowire port to a bridge domain or a pseudowire to a bridge virtual forwarding interface (VFI).


signaling-protocol

To enable signaling for the VFI, use the signaling-protocol command in the BGP autodiscovery mode. To return to the default value, use the no form of this command.

signaling-protocol {bgp | ldp}

no signaling-protocol {bgp | ldp}

Syntax Description

bgp

Enables BGP protocol signaling.

ldp

Enables LDP protocol signaling.


Command Defaults

LDP signaling is enabled.

Command Modes

BGP autodiscovery configuration

Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure a bridge domain:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group EGroup
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain eastdomain
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi eastvfi
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)# autodiscovery bgp
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi-ad)#route-target 100:20
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi-ad)#signaling-protocol bgp
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.


split-horizon group

To add an AC to a split horizon group, use the split-horizon group command in L2VPN bridge group bridge domain attachment circuit configuration mode. To remove the AC from the group, use the no form of this command.

split-horizon group

no split-horizon group

Syntax Description

No arguments or keywords

Command Defaults

None

Command Modes

L2VPN bridge group bridge domain attachment circuit configuration mode

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Only one split horizon group exists for ACs per bridge domain. By default, the group does not have any ACs. You can configure individual ACs to become members of the group using the split-horizon group configuration command.

You can configure an entire physical interface or EFPs within an interface to become members of the split horizon group.

Task ID

Task ID
Operations

l2vpn

Read, write


Examples

The following example adds an EFP under a GigabitEthernet interface to the AC split horizon group:

RP/0/RSP0/CPU0:router# configure
RP/0/RSP0/CPU0:router(config)# l2vpn 
RP/0/RSP0/CPU0:router(config-l2vpn)# bridge group metroA
RP/0/RSP0/CPU0:router(config-l2vpn-bg)# bridge-domain east 
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)# interface GigabitEthernet0/1/0/6.15 
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-ac)# split-horizon group 
RP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-ac)# commit

Related Commands

Command
Description

show l2vpn bridge-domain (VPLS)

Displays information about bridge domains and ports.


static-address (VPLS)

To add static entries to the MAC address for filtering, use the static-address command in L2VPN bridge group bridge domain MAC configuration mode. To remove entries profiled by the combination of a specified entry information, use the no form of this command.

static-address MAC-address drop

no static-address MAC-address drop

Syntax Description

MAC-address

Static MAC address that is used to filter on the bridge domain.

drop

Drops all traffic that is going to the configured MAC address.


Command Defaults

No static MAC address is configured.

Command Modes

L2VPN bridge group bridge domain MAC configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to add static MAC entries in L2VPN bridge group bridge domain MAC configuration mode. This entry causes all packets with destination MAC address 1.1.1 to be dropped.

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# static-address 1.1.1 drop
 
   

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.


static-mac-address (VPLS)

To configure the static MAC address to associate a remote MAC address with a pseudowire or any other bridge interface, use the static-mac-address command in the appropriate L2VPN bridge group bridge domain configuration submode. To disable this feature, use the no form of this command.

static-mac-address MAC-address

no static-mac-address {MAC-address

Syntax Description

MAC-address

Static address to add to the MAC address.


Command Defaults

None

Command Modes

L2VPN bridge group bridge domain VFI pseudowire configuration

L2VPN bridge group bridge domain attachment circuit configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to associate a remote MAC address with a pseudowire:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi model
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)# neighbor 10.1.1.2 pw-id 1000
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi-pw)# static-mac-address 1.1.1
 
   

The following example shows how to associate a GigabitEthernet interface from a bridge domain to static MAC address 1.1.1:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# interface GigabitEthernet 0/1/0/0
RP/0//CPU0:router(config-l2vpn-bg-bd-ac)# static-mac-address 1.1.1
 
   

The following example shows how to associate an access pseudowire to static MAC address 2.2.2:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# neighbor 10.1.1.2 pw-id 2000
RP/0//CPU0:router(config-l2vpn-bg-bd-pw)# static-mac-address 2.2.2

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mpls static label (VPLS)

Configures the MPLS static labels and the static labels for the access pseudowire configuration.

neighbor (VPLS)

Adds an access pseudowire port to a bridge domain or a pseudowire to a bridge virtual forwarding interface (VFI).

vfi (VPLS)

Configures virtual forwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode.


storm-control

To enable traffic storm control on a bridge port EFP or access pseudowire, use the storm-control command in the appropriate L2VPN bridge group bridge domain configuration submode. To disable this feature, use the no form of this command.

storm-control {broadcast | multicast | unknown-unicast } pps pps-value

no storm-control {broadcast | multicast | unknown-unicast } pps pps-value

Syntax Description

broadcast

Configures broadcast storm control.

multicast

Configures multicast storm control.

unknown-unicast

Configures unknown-unicast storm control.

pps

Sets the storm control pps.

pps-value

PPS value. The range is between 1 to 160000. The granularity is 8 pps and the configured value is rounded to the nearest factor of 8.


Command Defaults

Storm control feature is disabled.

Command Modes

L2VPN bridge group bridge domain Access pseudowire configuration

L2VPN bridge group bridge domain attachment circuit configuration

Command History

Release
Modification

Release 3.9.1

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

When the storm control policer is configured on a bundle EFP, the policers are allocated on each Bundle Line Card (BLC). For example, if a broadcast storm control is configured with 16 pps, each member on the bundle allows 16pps. Regardless of which line card the bundle member link is on, the threshold is applied for each member. However, when multiple members of the same bundle are on the same node processor (NP), then the allowed storm control rate is multiplied for each member. For example, if a bundle has 3 members (two on same NP (NP0), and 1 on a different NP (NP1)), with a storm control rate of 16 pps, then NP0 applies 32 pps and NP1 applies 16 pps for this EFP.

When storm control policer is configured on an access pseudowire (PW), the policers are allocated on each line card in the system. Each line card allows the same configured rate on this access PW. For example, if broadcast storm control is configured as 32 pps, then each NP of each linecard of this PW allows 32 pps.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to enable traffic storm control on a bridge EFP port:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group bg1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bd1
RP/0//CPU0:router(config-l2vpn-bg-bd)# interface GigabitEthernet 0/1/0/18
RP/0//CPU0:router(config-l2vpn-bg-bd-ac)# storm-control broadcast pps 70000
RP/0//CPU0:router(config-l2vpn-bg-bd-ac)# 
 
   

The following example shows how to enable traffic storm control on a on a bridge access pseudowire port:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group bg1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bd1
RP/0//CPU0:router(config-l2vpn-bg-bd)# neighbor 1.1.1.1 pw-id 100
RP/0//CPU0:router(config-l2vpn-bg-bd-pw)# storm-control broadcast pps 70000
RP/0//CPU0:router(config-l2vpn-bg-bd-pw)# 
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

neighbor (VPLS)

Adds an access pseudowire port to a bridge domain or a pseudowire to a bridge virtual forwarding interface (VFI).

vfi (VPLS)

Configures virtual forwarding interface (VFI) parameters and enters L2VPN bridge group bridge domain VFI configuration mode.


time (VPLS)

To configure the maximum aging time, use the time command in L2VPN bridge group bridge domain MAC aging configuration mode. To disable this feature, use the no form of this command.

time seconds

no time seconds

Syntax Description

seconds

MAC address table entry maximum age. The range is from 300 to 30000 seconds. Aging time is counted from the last time that the switch saw the MAC address. The default value is 300 seconds.


Command Defaults

seconds: 300

Command Modes

L2VPN bridge group bridge domain MAC aging configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

If no packets are received from the MAC address for the duration of the maximum aging time, the dynamic MAC entry previously learned is removed from the forwarding table.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to increase the maximum aging time to 600 seconds. After 600 seconds of inactivity from a MAC address, the MAC address is removed form the forwarding table.

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# aging
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-aging)# time 600

Related Commands

Commands
Description

aging (VPLS)

Enters MAC aging configuration submode to set the aging parameters such as time and type.

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.

type (VPLS)

Configures the type for MAC address aging.


type (VPLS)

To configure the type for MAC address aging, use the type command in L2VPN bridge group bridge domain MAC aging configuration mode. To disable this feature, use the no form of this command.

type {absolute | inactivity}

no type {absolute | inactivity}

Syntax Description

absolute

Configures the absolute aging type.

inactivity

Configures the inactivity aging type.


Command Defaults

By default, the inactivity type is configured.

Command Modes

L2VPN bridge group bridge domain MAC aging configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

In general, the type is set to inactivity. With an inactivity type configuration, a MAC address is removed from the forwarding table after the MAC address is inactive for the configured aging time.

With an absolute type configuration, a MAC address is always removed from the forwarding table after the aging time has elapsed once it is initially learned.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to configure the MAC address aging type to absolute for every member of the bridge domain named bar:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# aging
RP/0//CPU0:router(config-l2vpn-bg-bd-mac-aging)# type absolute
 
   

Related Commands

Commands
Description

aging (VPLS)

Enters MAC aging configuration submode to set the aging parameters such as time and type.

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.

time (VPLS)

Configures the maximum aging time.


vfi (VPLS)

To configure virtual forwarding interface (VFI) parameters and to enter L2VPN bridge group bridge domain VFI configuration mode, use the vfi command in L2VPN bridge group bridge domain configuration mode. To remove all configurations that are made under the specified VFI, use the no form of this command.

vfi vfi-name

no vfi vfi-name

Syntax Description

vfi-name

Name of the specified virtual forwarding interface.


Command Defaults

None

Command Modes

L2VPN bridge group bridge domain configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Use the vfi command to enter L2VPN bridge group bridge domain VFI configuration mode.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to create a VFI:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# vfi v1
RP/0//CPU0:router(config-l2vpn-bg-bd-vfi)#
 
   

Related Commands

Commands
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mpls static label (VPLS)

Configures the MPLS static labels and the static labels for the access pseudowire configuration.

neighbor (VPLS)

Adds an access pseudowire port to a bridge domain or a pseudowire to a bridge virtual forwarding interface (VFI).


withdraw (VPLS)

To disable MAC address withdrawal for a specified bridge domain, use the withdraw command in L2VPN bridge group bridge domain MAC configuration mode. To disable this feature, use the no form of this command.

withdraw {access-pw disable | disable}

no withdraw {access-pw disable | disable}

Syntax Description

access-pw disable

Disables the sending of MAC withdraw messages to access pseudowires.

disable

Disables MAC address withdrawal.


Command Defaults

By default, MAC address withdrawal is enabled.

Command Modes

L2VPN bridge group bridge domain MAC configuration

Command History

Release
Modification

Release 3.7.2

This command was introduced.

Release 4.0

The access-pw disable keyword was added.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator.

Task ID
Task ID
Operations

l2vpn

read, write


Examples

The following example shows how to enable MAC withdrawal:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# withdraw disable
 
   

The following example shows how to disable sending MAC withdrawal messages to access pseudowires:

RP/0//CPU0:router# configure
RP/0//CPU0:router(config)# l2vpn
RP/0//CPU0:router(config-l2vpn)# bridge group 1
RP/0//CPU0:router(config-l2vpn-bg)# bridge-domain bar
RP/0//CPU0:router(config-l2vpn-bg-bd)# mac
RP/0//CPU0:router(config-l2vpn-bg-bd-mac)# withdraw access-pw disable
 
   

Related Commands

Command
Description

bridge-domain (VPLS)

Establishes a bridge domain and enters L2VPN bridge group bridge domain configuration mode.

bridge group (VPLS)

Creates a bridge group so that it can contain bridge domains and then assigns network interfaces to the bridge domain.

l2vpn

Enters L2VPN configuration mode.

mac (VPLS)

Enters L2VPN bridge group bridge domain MAC configuration mode.