Cisco IP Solution Center L2VPN User Guide, 3.1 - Creating a VPLS Policy [Cisco IP Solution Center]

Table Of Contents

Creating a VPLS Policy

Define a VPLS Policy

Define an MPLS/ERS Policy when CE is Present

Define an MPLS/ERS Policy without a CE

Define an MPLS/EWS Policy when CE is Present

Define an MPLS/EWS Policy without a CE

Define an Ethernet/ERS Policy when CE is Present

Define an Ethernet/ERS Policy without a CE

Define an Ethernet/EWS Policy when CE is Present

Define an Ethernet/EWS Policy without a CE

Creating a VPLS Policy

This chapter contains the basic steps to create a VPLS policy:

•Define a VPLS Policy

•Define an MPLS/ERS Policy when CE is Present

•Define an MPLS/ERS Policy without a CE

•Define an MPLS/EWS Policy when CE is Present

•Define an MPLS/EWS Policy without a CE

•Define an Ethernet/ERS Policy when CE is Present

•Define an Ethernet/ERS Policy without a CE

•Define an Ethernet/EWS Policy when CE is Present

•Define an Ethernet/EWS Policy without a CE

Define a VPLS Policy

You must define a VPLS policy before you can provision a service. A VPLS policy defines the common characteristics shared by the Attachment Circuit (AC) attributes.

A policy can be shared by one or more service requests that have similar service requirements. The Editable check box gives the network operator the option of making a field editable. If the value is set to editable, the service request creator can change to other valid values for the particular policy item. If the value is not set to editable, the service request creator cannot change the policy item.

VPLS policies correspond to the one of the core types that VPLS provides:

•MPLS core type—provider core network is MPLS enabled

•Ethernet core type—provider core network uses Ethernet switches

and to one of the service types that VPLS provides:

•Multi-point Ethernet Relay Service (ERS)

•Multi-point Ethernet Wire Service (EWS)

A policy is a template of most of the parameters needed to define a VPLS service request. Once you define it, a VPLS policy can be used by all the VPLS service requests that share a common set of characteristics.

You create a new VPLS policy whenever you create a new type of service or a service with different parameters. VPLS policy creation is normally performed by experienced network engineers.

To define a VPLS policy in the Cisco IP Solution Center (ISC), use the following steps. See Figure 5-1.

Step 1 Choose Service Design.

Step 2 Choose Policy Manager. The Policies window appears as show in Figure 5-1.

Figure 5-1 Creating a Policy

Step 3 Click Create.

Step 4 Choose VPLS Policy. The VPLS Policy Editor window in Figure 5-2 appears:

Figure 5-2 Creating a VPLS Policy

Step 5 Enter a Policy Name for the VPLS policy.

Step 6 Choose the Policy Owner for the VPLS policy.

There are three types of VPLS policy ownership:

•Customer ownership

•Provider ownership

•Global ownership: any service operator can make use of this VPLS policy.

This ownership has relevance when the ISC Role-Based Access Control (RBAC) comes into play. For example, a VPLS policy that is customer owned can only be seen by operators who are allowed to work on this customer-owned policy.

Similarly, operators who are allowed to work on a provider's network can view, use, and deploy a particular provider-owned policy.

Step 7 Click Select to choose the owner of the VPLS policy. The policy owner was established when you created customers or providers during ISC setup. If the ownership is global, the Select function does not appear.

Step 8 Choose the Core Type of the VPLS policy.

There are two core types for VPLS policies:

•MPLS—running on an IP network

•Ethernet—all PEs are on an Ethernet provider network

Step 9 Choose the Service Type of the VPLS policy.

There are two service types for VPLS policies:

•Multi-point Ethernet Relay Service (ERS)

•Multi-point Ethernet Wire Service (EWS)

Step 10 Check the CE Present box if you want ISC to ask the service operator who uses this VPLS policy to provide a CE router and interface during service activation. The default is CE present in the service.

If you do not check CE Present, ISC asks the service operator, during service activation, only for the PE-CLE or the PE-POP router and customer-facing interface.

Define an MPLS/ERS Policy when CE is Present

This section describes defining a VPLS policy with an MPLS core type and an ERS service type with CE present. Figure 5-3 is an example of the first page of this policy.

Figure 5-3 MPLS/ERS Policy with CE Present

Step 1 Click NEXT. The window in Figure 5-4 appears.

The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation.

Figure 5-4 Define MPLS/ERS with CE Policy Attributes

Step 2 Choose an Interface Type from the drop-down menu.

You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are:

•ANY (Any interface can be chosen.)

•Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.)

•Ethernet

•FastEthernet

•GE-WAN

•GigabitEthernet

The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types.

Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0).

This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service.

Step 4 Choose a CE Encapsulation type. The choices are:

•DOT1Q

•DEFAULT

If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type.

Step 5 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 6 Choose a Port Type: The choices are:

•Access Port

•Trunk with Native VLAN

Step 7 Enter a Link Speed of none, 10, 100, 1000, or auto.

Step 8 Enter a Line Duplex of none, full, half, or auto.

Step 9 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port.

Step 10 Check the Filter BPDU box to specify that the UNI port should not process Layer 2 Bridge Protocol Data Units (BPDUs).

Step 11 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface.

a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security.

b. For Aging, enter the length of time the MAC address can stay on the port security table.

c. For Violation Action, choose what action will occur when a port security violation is detected:

•PROTECT

•RESTRICT

•SHUTDOWN

d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses.

Step 12 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B ERS Service.

Step 13 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management.

Step 14 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation.

Step 15 Click Finish.

Define an MPLS/ERS Policy without a CE

This section describes defining a VPLS policy with an MPLS core type and an ERS service type without a CE present. Figure 5-5 is an example of the first page of this policy.

Figure 5-5 MPLS/ERS Policy without a CE

Step 1 Click NEXT. The window in Figure 5-6 appears.

The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation.

Figure 5-6 Define MPLS/ERS without CE Policy Attributes

Step 2 Choose an Interface Type from the drop-down menu.

You can choose to select a particular interface on a PE-POP or PE-CLE interface based on the service provider's POP design. The interfaces are:

•ANY (Any interface can be chosen.)

•Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.)

•Ethernet

•FastEthernet

•GE-WAN

•GigabitEthernet

The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types.

Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0).

This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service.

Step 4 Choose a CE Encapsulation type. The choices are:

•DOT1Q

•DEFAULT

If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type.

Step 5 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 6 Choose a Port Type: The choices are:

•Access Port

•Trunk with Native VLAN

Step 7 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 8 Enter a Link Speed of none, 10, 100, 1000, or auto.

Step 9 Enter a Line Duplex of none, full, half, or auto.

Step 10 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port.

Step 11 Check the Filter BPDU box to specify that the UNI port should not process Layer 2 Bridge Protocol Data Units (BPDUs).

Step 12 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface.

a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security.

b. For Aging, enter the length of time the MAC address can stay on the port security table.

c. For Violation Action, choose what action will occur when a port security violation is detected:

•PROTECT

•RESTRICT

•SHUTDOWN

d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses.

Step 13 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B ERS Service.

Step 14 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management.

Step 15 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation.

Step 16 Click Finish.

Define an MPLS/EWS Policy when CE is Present

This section describes defining a VPLS policy with an MPLS core type and an EWS service type with CE present. Figure 5-7 is an example of the first page of this policy.

Figure 5-7 MPLS/EWS Policy with CE Present

Step 1 Click NEXT. The window in Figure 5-8 appears.

The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation.

Figure 5-8 Define MPLS/EWS with CE Policy Attributes

Step 2 Choose an Interface Type from the drop-down menu.

You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are:

•ANY (Any interface can be chosen.)

•Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.)

•Ethernet

•FastEthernet

•GE-WAN

•GigabitEthernet

The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types.

Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0).

This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service.

Step 4 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 5 Enter a Link Speed of none, 10, 100, 1000, or auto.

Step 6 Enter a Line Duplex of none, full, half, or auto.

Step 7 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port.

Step 8 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface.

a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security.

b. For Aging, enter the length of time the MAC address can stay on the port security table.

c. For Violation Action, choose what action will occur when a port security violation is detected:

•PROTECT

•RESTRICT

•SHUTDOWN

d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses.

Step 9 Check the Protocol Tunneling box (see Figure 5-9) if you want to define the Layer 2 Bridge Protocol Data Unit (BPDU) frames that can be tunneled over the core to the other end.

Figure 5-9 Protocol Tunneling

For each protocol that you check, enter the threshold for that protocol:

a. Tunnel CDP Set a flag to enable Layer 2 tunnelling on a Cisco Discover Protocol (CDP).

b. CDP Threshold Enter the number of packets per second to be received before the interface is shut down for the CDP protocol.

c. Tunnel VTP Enable Layer 2 tunnelling on a VLAN Trunk Protocol (VTP).

d. VTP Threshold Enter the number of packets per second to be received before the interface is shut down for the VTP protocol.

e. Tunnel STP Enable Layer 2 tunnelling on a Spanning Tree Protocol (STP).

f. STP Threshold Enter the number of packets per second to be received before the interface is shut down for the STP protocol.

g. Recovery Interval enter the amount of time, in seconds, to wait before recovering a UNI port.

Step 10 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B EWS Service.

Step 11 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management.

Step 12 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation.

Step 13 Enter the System MTU in bytes.

Step 14 Click Finish.

Define an MPLS/EWS Policy without a CE

This section describes defining a VPLS policy with an MPLS core type and an EWS service type without a CE present. Figure 5-10 is an example of the first page of this policy.

Figure 5-10 MPLS/EWS Policy without CE

Step 1 Click NEXT. The window in Figure 5-11 appears.

The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation.

Figure 5-11 Define MPLS/EWS without CE Policy Attributes

Step 2 Choose an Interface Type from the drop-down menu.

You can choose to select a particular interface on a PE-POP or PE-CLE interface based on the service provider's POP design. The interfaces are:

•ANY (Any interface can be chosen.)

•Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.)

•Ethernet

•FastEthernet

•GE-WAN

•GigabitEthernet

The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types.

Step 3 Enter an Interface Format as the slot number/port number for the PE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0).

This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service.

Step 4 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 5 Enter a Link Speed of none, 10, 100, 1000, or auto.

Step 6 Enter a Line Duplex of none, full, half, or auto.

Step 7 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port.

Step 8 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface.

a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security.

b. For Aging, enter the length of time the MAC address can stay on the port security table.

c. For Violation Action, choose what action will occur when a port security violation is detected:

•PROTECT

•RESTRICT

•SHUTDOWN

d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses.

Step 9 Check the Protocol Tunneling box (see Figure 5-12) if you want to define the Layer 2 Bridge Protocol Data Unit (BPDU) frames that can be tunneled over the core to the other end.

Figure 5-12 Protocol Tunneling

For each protocol that you check, enter the threshold for that protocol:

a. Tunnel CDP Set a flag to enable Layer 2 tunnelling on a Cisco Discover Protocol (CDP).

b. CDP Threshold Enter the number of packets per second to be received before the interface is shut down for the CDP protocol.

c. Tunnel VTP Enable Layer 2 tunnelling on a VLAN Trunk Protocol (VTP).

d. VTP Threshold Enter the number of packets per second to be received before the interface is shut down for the VTP protocol.

e. Tunnel STP Enable Layer 2 tunnelling on a Spanning Tree Protocol (STP).

f. STP Threshold Enter the number of packets per second to be received before the interface is shut down for the STP protocol.

g. Recovery Interval enter the amount of time, in seconds, to wait before recovering a UNI port.

Step 10 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B EWS Service.

Step 11 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management.

Step 12 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation.

Step 13 Enter the System MTU in bytes.

Step 14 Click Finish.

Define an Ethernet/ERS Policy when CE is Present

This section describes defining a VPLS policy with an Ethernet core type and an ERS service type with CE present. Figure 5-13 is an example of the first page of this policy.

Figure 5-13 Ethernet/ERS Policy with CE Present

Step 1 Click NEXT. The window in Figure 5-14 appears.

The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation.

Figure 5-14 Ethernet ERS with CE Policy Attributes

Step 2 Choose an Interface Type from the drop-down menu.

You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are:

•ANY (Any interface can be chosen.)

•Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.)

•Ethernet

•FastEthernet

•GE-WAN

•GigabitEthernet

The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types.

Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0).

This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service.

Step 4 Choose a CE Encapsulation type. The choices are:

•DOT1Q

•DEFAULT

If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type.

Step 5 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 6 Choose a Port Type: The choices are:

•Access Port

•Trunk with Native VLAN

Step 7 Enter a Link Speed of none, 10, 100, 1000, or auto.

Step 8 Enter a Line Duplex of none, full, half, or auto.

Step 9 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port.

Step 10 Check the Filter BPDU box to specify that the UNI port should not process Layer 2 Bridge Protocol Data Units (BPDUs).

Step 11 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface.

a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security.

b. For Aging, enter the length of time the MAC address can stay on the port security table.

c. For Violation Action, choose what action will occur when a port security violation is detected:

•PROTECT

•RESTRICT

•SHUTDOWN

d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses.

Step 12 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B ERS Service.

Step 13 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management.

Step 14 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation.

Step 15 Click Finish.

Define an Ethernet/ERS Policy without a CE

This section describes defining a VPLS policy with an Ethernet core type and an ERS service type without a CE present. Figure 5-15 is an example of the first page of this policy.

Figure 5-15 Ethernet/ERS without CE Policy

Step 1 Click NEXT. The window in Figure 5-16 appears.

The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation.

Figure 5-16 Ethernet/ERS without CE Policy Attributes

Step 2 Choose an Interface Type from the drop-down menu.

You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are:

•ANY (Any interface can be chosen.)

•Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.)

•Ethernet

•FastEthernet

•GE-WAN

•GigabitEthernet

The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types.

Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0).

This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service.

Step 4 Choose a CE Encapsulation type. The choices are:

•DOT1Q

•DEFAULT

If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type.

Step 5 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 6 Choose a Port Type: The choices are:

•Access Port

•Trunk with Native VLAN

Step 7 Enter a Link Speed of none, 10, 100, 1000, or auto.

Step 8 Enter a Line Duplex of none, full, half, or auto.

Step 9 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port.

Step 10 Check the Filter BPDU box to specify that the UNI port should not process Layer 2 Bridge Protocol Data Units (BPDUs).

Step 11 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface.

a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security.

b. For Aging, enter the length of time the MAC address can stay on the port security table.

c. For Violation Action, choose what action will occur when a port security violation is detected:

•PROTECT

•RESTRICT

•SHUTDOWN

d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses.

Step 12 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B ERS Service.

Step 13 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management.

Step 14 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation.

Step 15 Click Finish.

Define an Ethernet/EWS Policy when CE is Present

This section describes defining a VPLS policy with an Ethernet core type and an ERS service type with a CE present. Figure 5-17 is an example of the first page of this policy.

Figure 5-17 Ethernet/EWS Policy with CE Present

Step 1 Click NEXT. The window in Figure 5-18 appears.

The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation.

Figure 5-18 Ethernet/EWS with CE Policy Attributes

Step 2 Choose an Interface Type from the drop-down menu.

You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are:

•ANY (Any interface can be chosen.)

•Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.)

•Ethernet

•FastEthernet

•GE-WAN

•GigabitEthernet

The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types.

Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0).

This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service.

Step 4 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 5 Enter a Link Speed of none, 10, 100, 1000, or auto.

Step 6 Enter a Line Duplex of none, full, half, or auto.

Step 7 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port.

Step 8 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface.

a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security.

b. For Aging, enter the length of time the MAC address can stay on the port security table.

c. For Violation Action, choose what action will occur when a port security violation is detected:

•PROTECT

•RESTRICT

•SHUTDOWN

d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses.

Step 9 Check the Protocol Tunneling box (see Figure 5-19) if you want to define the Layer 2 Bridge Protocol Data Unit (BPDU) frames that can be tunneled over the core to the other end.

Figure 5-19 Protocol Tunneling

For each protocol that you check, enter the threshold for that protocol:

a. Tunnel CDP Set a flag to enable Layer 2 tunnelling on a Cisco Discover Protocol (CDP).

b. CDP Threshold Enter the number of packets per second to be received before the interface is shut down for the CDP protocol.

c. Tunnel VTP Enable Layer 2 tunnelling on a VLAN Trunk Protocol (VTP).

d. VTP Threshold Enter the number of packets per second to be received before the interface is shut down for the VTP protocol.

e. Tunnel STP Enable Layer 2 tunnelling on a Spanning Tree Protocol (STP).

f. STP Threshold Enter the number of packets per second to be received before the interface is shut down for the STP protocol.

g. Recovery Interval enter the amount of time, in seconds, to wait before recovering a UNI port.

Step 10 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B EWS Service.

Step 11 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management.

Step 12 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation.

Step 13 Enter the System MTU in bytes.

Step 14 Click Finish.

Define an Ethernet/EWS Policy without a CE

This section describes defining a VPLS policy with an Ethernet core type and an EWS service type without a CE present. Figure 5-20 is an example of the first page of this policy.

Figure 5-20 Ethernet/EWS Policy without CE

Step 1 Check NEXT. The window in Figure 5-21 appears.

The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation.

Figure 5-21 Ethernet/EWS without CE Policy Attributes

Step 2 Choose an Interface Type from the drop-down menu.

You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are:

•ANY (Any interface can be chosen.)

•Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.)

•Ethernet

•FastEthernet

•GE-WAN

•GigabitEthernet

The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types.

Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0).

This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service.

Step 4 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time.

Step 5 Enter a Link Speed of none, 10, 100, 1000, or auto.

Step 6 Enter a Line Duplex of none, full, half, or auto.

Step 7 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port.

Step 8 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface.

a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security.

b. For Aging, enter the length of time the MAC address can stay on the port security table.

c. For Violation Action, choose what action will occur when a port security violation is detected:

•PROTECT

•RESTRICT

•SHUTDOWN

d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses.

Step 9 Check the Protocol Tunneling box (see Figure 5-22) if you want to define the Layer 2 Bridge Protocol Data Unit (BPDU) frames that can be tunneled over the core to the other end.

Figure 5-22 Protocol Tunneling

For each protocol that you check, enter the threshold for that protocol:

a. Tunnel CDP Set a flag to enable Layer 2 tunnelling on a Cisco Discover Protocol (CDP).

b. CDP Threshold Enter the number of packets per second to be received before the interface is shut down for the CDP protocol.

c. Tunnel VTP Enable Layer 2 tunnelling on a VLAN Trunk Protocol (VTP).

d. VTP Threshold Enter the number of packets per second to be received before the interface is shut down for the VTP protocol.

e. Tunnel STP Enable Layer 2 tunnelling on a Spanning Tree Protocol (STP).

f. STP Threshold Enter the number of packets per second to be received before the interface is shut down for the STP protocol.

g. Recovery Interval enter the amount of time, in seconds, to wait before recovering a UNI port.

Step 10 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B EWS Service.

Step 11 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management.

Step 12 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation.

Step 13 Enter the System MTU in bytes.

Step 14 Click Finish.

	Cisco IP Solution Center L2VPN User Guide, 3.1
	Creating a VPLS Policy
Cisco IP Solution Center L2VPN User Guide, 3.1 Index About This Guide ISC L2VPN and VPLS Concepts Setting up the ISC Service Creating an L2VPN Policy Managing an L2VPN Service Request Creating a VPLS Policy Managing a VPLS Service Request Managing and Auditing Service Requests	Download this chapter Creating a VPLS Policy Download the complete book Cisco IP Solution Center, 3.1: L2VPN Management User Guide, 3.1 - Entire Book in PDF (PDF - 3 MB) Table Of Contents Creating a VPLS Policy Define a VPLS Policy Define an MPLS/ERS Policy when CE is Present Define an MPLS/ERS Policy without a CE Define an MPLS/EWS Policy when CE is Present Define an MPLS/EWS Policy without a CE Define an Ethernet/ERS Policy when CE is Present Define an Ethernet/ERS Policy without a CE Define an Ethernet/EWS Policy when CE is Present Define an Ethernet/EWS Policy without a CE Creating a VPLS Policy This chapter contains the basic steps to create a VPLS policy: •Define a VPLS Policy •Define an MPLS/ERS Policy when CE is Present •Define an MPLS/ERS Policy without a CE •Define an MPLS/EWS Policy when CE is Present •Define an MPLS/EWS Policy without a CE •Define an Ethernet/ERS Policy when CE is Present •Define an Ethernet/ERS Policy without a CE •Define an Ethernet/EWS Policy when CE is Present •Define an Ethernet/EWS Policy without a CE Define a VPLS Policy You must define a VPLS policy before you can provision a service. A VPLS policy defines the common characteristics shared by the Attachment Circuit (AC) attributes. A policy can be shared by one or more service requests that have similar service requirements. The Editable check box gives the network operator the option of making a field editable. If the value is set to editable, the service request creator can change to other valid values for the particular policy item. If the value is not set to editable, the service request creator cannot change the policy item. VPLS policies correspond to the one of the core types that VPLS provides: •MPLS core type—provider core network is MPLS enabled •Ethernet core type—provider core network uses Ethernet switches and to one of the service types that VPLS provides: •Multi-point Ethernet Relay Service (ERS) •Multi-point Ethernet Wire Service (EWS) A policy is a template of most of the parameters needed to define a VPLS service request. Once you define it, a VPLS policy can be used by all the VPLS service requests that share a common set of characteristics. You create a new VPLS policy whenever you create a new type of service or a service with different parameters. VPLS policy creation is normally performed by experienced network engineers. To define a VPLS policy in the Cisco IP Solution Center (ISC), use the following steps. See Figure 5-1. Step 1 Choose Service Design. Step 2 Choose Policy Manager. The Policies window appears as show in Figure 5-1. Figure 5-1 Creating a Policy Step 3 Click Create. Step 4 Choose VPLS Policy. The VPLS Policy Editor window in Figure 5-2 appears: Figure 5-2 Creating a VPLS Policy Step 5 Enter a Policy Name for the VPLS policy. Step 6 Choose the Policy Owner for the VPLS policy. There are three types of VPLS policy ownership: •Customer ownership •Provider ownership •Global ownership: any service operator can make use of this VPLS policy. This ownership has relevance when the ISC Role-Based Access Control (RBAC) comes into play. For example, a VPLS policy that is customer owned can only be seen by operators who are allowed to work on this customer-owned policy. Similarly, operators who are allowed to work on a provider's network can view, use, and deploy a particular provider-owned policy. Step 7 Click Select to choose the owner of the VPLS policy. The policy owner was established when you created customers or providers during ISC setup. If the ownership is global, the Select function does not appear. Step 8 Choose the Core Type of the VPLS policy. There are two core types for VPLS policies: •MPLS—running on an IP network •Ethernet—all PEs are on an Ethernet provider network Step 9 Choose the Service Type of the VPLS policy. There are two service types for VPLS policies: •Multi-point Ethernet Relay Service (ERS) •Multi-point Ethernet Wire Service (EWS) Step 10 Check the CE Present box if you want ISC to ask the service operator who uses this VPLS policy to provide a CE router and interface during service activation. The default is CE present in the service. If you do not check CE Present, ISC asks the service operator, during service activation, only for the PE-CLE or the PE-POP router and customer-facing interface. Define an MPLS/ERS Policy when CE is Present This section describes defining a VPLS policy with an MPLS core type and an ERS service type with CE present. Figure 5-3 is an example of the first page of this policy. Figure 5-3 MPLS/ERS Policy with CE Present Step 1 Click NEXT. The window in Figure 5-4 appears. The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation. Figure 5-4 Define MPLS/ERS with CE Policy Attributes Step 2 Choose an Interface Type from the drop-down menu. You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are: •ANY (Any interface can be chosen.) •Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.) •Ethernet •FastEthernet •GE-WAN •GigabitEthernet The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types. Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0). This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service. Step 4 Choose a CE Encapsulation type. The choices are: •DOT1Q •DEFAULT If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type. Step 5 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 6 Choose a Port Type: The choices are: •Access Port •Trunk with Native VLAN Step 7 Enter a Link Speed of none, 10, 100, 1000, or auto. Step 8 Enter a Line Duplex of none, full, half, or auto. Step 9 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port. Step 10 Check the Filter BPDU box to specify that the UNI port should not process Layer 2 Bridge Protocol Data Units (BPDUs). Step 11 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface. a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security. b. For Aging, enter the length of time the MAC address can stay on the port security table. c. For Violation Action, choose what action will occur when a port security violation is detected: •PROTECT •RESTRICT •SHUTDOWN d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses. Step 12 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B ERS Service. Step 13 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management. Step 14 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation. Step 15 Click Finish. Define an MPLS/ERS Policy without a CE This section describes defining a VPLS policy with an MPLS core type and an ERS service type without a CE present. Figure 5-5 is an example of the first page of this policy. Figure 5-5 MPLS/ERS Policy without a CE Step 1 Click NEXT. The window in Figure 5-6 appears. The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation. Figure 5-6 Define MPLS/ERS without CE Policy Attributes Step 2 Choose an Interface Type from the drop-down menu. You can choose to select a particular interface on a PE-POP or PE-CLE interface based on the service provider's POP design. The interfaces are: •ANY (Any interface can be chosen.) •Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.) •Ethernet •FastEthernet •GE-WAN •GigabitEthernet The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types. Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0). This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service. Step 4 Choose a CE Encapsulation type. The choices are: •DOT1Q •DEFAULT If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type. Step 5 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 6 Choose a Port Type: The choices are: •Access Port •Trunk with Native VLAN Step 7 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 8 Enter a Link Speed of none, 10, 100, 1000, or auto. Step 9 Enter a Line Duplex of none, full, half, or auto. Step 10 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port. Step 11 Check the Filter BPDU box to specify that the UNI port should not process Layer 2 Bridge Protocol Data Units (BPDUs). Step 12 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface. a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security. b. For Aging, enter the length of time the MAC address can stay on the port security table. c. For Violation Action, choose what action will occur when a port security violation is detected: •PROTECT •RESTRICT •SHUTDOWN d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses. Step 13 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B ERS Service. Step 14 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management. Step 15 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation. Step 16 Click Finish. Define an MPLS/EWS Policy when CE is Present This section describes defining a VPLS policy with an MPLS core type and an EWS service type with CE present. Figure 5-7 is an example of the first page of this policy. Figure 5-7 MPLS/EWS Policy with CE Present Step 1 Click NEXT. The window in Figure 5-8 appears. The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation. Figure 5-8 Define MPLS/EWS with CE Policy Attributes Step 2 Choose an Interface Type from the drop-down menu. You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are: •ANY (Any interface can be chosen.) •Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.) •Ethernet •FastEthernet •GE-WAN •GigabitEthernet The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types. Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0). This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service. Step 4 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 5 Enter a Link Speed of none, 10, 100, 1000, or auto. Step 6 Enter a Line Duplex of none, full, half, or auto. Step 7 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port. Step 8 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface. a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security. b. For Aging, enter the length of time the MAC address can stay on the port security table. c. For Violation Action, choose what action will occur when a port security violation is detected: •PROTECT •RESTRICT •SHUTDOWN d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses. Step 9 Check the Protocol Tunneling box (see Figure 5-9) if you want to define the Layer 2 Bridge Protocol Data Unit (BPDU) frames that can be tunneled over the core to the other end. Figure 5-9 Protocol Tunneling For each protocol that you check, enter the threshold for that protocol: a. Tunnel CDP Set a flag to enable Layer 2 tunnelling on a Cisco Discover Protocol (CDP). b. CDP Threshold Enter the number of packets per second to be received before the interface is shut down for the CDP protocol. c. Tunnel VTP Enable Layer 2 tunnelling on a VLAN Trunk Protocol (VTP). d. VTP Threshold Enter the number of packets per second to be received before the interface is shut down for the VTP protocol. e. Tunnel STP Enable Layer 2 tunnelling on a Spanning Tree Protocol (STP). f. STP Threshold Enter the number of packets per second to be received before the interface is shut down for the STP protocol. g. Recovery Interval enter the amount of time, in seconds, to wait before recovering a UNI port. Step 10 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B EWS Service. Step 11 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management. Step 12 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation. Step 13 Enter the System MTU in bytes. Step 14 Click Finish. Define an MPLS/EWS Policy without a CE This section describes defining a VPLS policy with an MPLS core type and an EWS service type without a CE present. Figure 5-10 is an example of the first page of this policy. Figure 5-10 MPLS/EWS Policy without CE Step 1 Click NEXT. The window in Figure 5-11 appears. The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation. Figure 5-11 Define MPLS/EWS without CE Policy Attributes Step 2 Choose an Interface Type from the drop-down menu. You can choose to select a particular interface on a PE-POP or PE-CLE interface based on the service provider's POP design. The interfaces are: •ANY (Any interface can be chosen.) •Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.) •Ethernet •FastEthernet •GE-WAN •GigabitEthernet The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types. Step 3 Enter an Interface Format as the slot number/port number for the PE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0). This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service. Step 4 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 5 Enter a Link Speed of none, 10, 100, 1000, or auto. Step 6 Enter a Line Duplex of none, full, half, or auto. Step 7 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port. Step 8 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface. a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security. b. For Aging, enter the length of time the MAC address can stay on the port security table. c. For Violation Action, choose what action will occur when a port security violation is detected: •PROTECT •RESTRICT •SHUTDOWN d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses. Step 9 Check the Protocol Tunneling box (see Figure 5-12) if you want to define the Layer 2 Bridge Protocol Data Unit (BPDU) frames that can be tunneled over the core to the other end. Figure 5-12 Protocol Tunneling For each protocol that you check, enter the threshold for that protocol: a. Tunnel CDP Set a flag to enable Layer 2 tunnelling on a Cisco Discover Protocol (CDP). b. CDP Threshold Enter the number of packets per second to be received before the interface is shut down for the CDP protocol. c. Tunnel VTP Enable Layer 2 tunnelling on a VLAN Trunk Protocol (VTP). d. VTP Threshold Enter the number of packets per second to be received before the interface is shut down for the VTP protocol. e. Tunnel STP Enable Layer 2 tunnelling on a Spanning Tree Protocol (STP). f. STP Threshold Enter the number of packets per second to be received before the interface is shut down for the STP protocol. g. Recovery Interval enter the amount of time, in seconds, to wait before recovering a UNI port. Step 10 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B EWS Service. Step 11 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management. Step 12 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation. Step 13 Enter the System MTU in bytes. Step 14 Click Finish. Define an Ethernet/ERS Policy when CE is Present This section describes defining a VPLS policy with an Ethernet core type and an ERS service type with CE present. Figure 5-13 is an example of the first page of this policy. Figure 5-13 Ethernet/ERS Policy with CE Present Step 1 Click NEXT. The window in Figure 5-14 appears. The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation. Figure 5-14 Ethernet ERS with CE Policy Attributes Step 2 Choose an Interface Type from the drop-down menu. You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are: •ANY (Any interface can be chosen.) •Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.) •Ethernet •FastEthernet •GE-WAN •GigabitEthernet The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types. Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0). This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service. Step 4 Choose a CE Encapsulation type. The choices are: •DOT1Q •DEFAULT If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type. Step 5 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 6 Choose a Port Type: The choices are: •Access Port •Trunk with Native VLAN Step 7 Enter a Link Speed of none, 10, 100, 1000, or auto. Step 8 Enter a Line Duplex of none, full, half, or auto. Step 9 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port. Step 10 Check the Filter BPDU box to specify that the UNI port should not process Layer 2 Bridge Protocol Data Units (BPDUs). Step 11 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface. a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security. b. For Aging, enter the length of time the MAC address can stay on the port security table. c. For Violation Action, choose what action will occur when a port security violation is detected: •PROTECT •RESTRICT •SHUTDOWN d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses. Step 12 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B ERS Service. Step 13 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management. Step 14 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation. Step 15 Click Finish. Define an Ethernet/ERS Policy without a CE This section describes defining a VPLS policy with an Ethernet core type and an ERS service type without a CE present. Figure 5-15 is an example of the first page of this policy. Figure 5-15 Ethernet/ERS without CE Policy Step 1 Click NEXT. The window in Figure 5-16 appears. The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation. Figure 5-16 Ethernet/ERS without CE Policy Attributes Step 2 Choose an Interface Type from the drop-down menu. You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are: •ANY (Any interface can be chosen.) •Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.) •Ethernet •FastEthernet •GE-WAN •GigabitEthernet The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types. Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0). This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service. Step 4 Choose a CE Encapsulation type. The choices are: •DOT1Q •DEFAULT If DEFAULT is the CE encapsulation type, ISC shows another field for the UNI port type. Step 5 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 6 Choose a Port Type: The choices are: •Access Port •Trunk with Native VLAN Step 7 Enter a Link Speed of none, 10, 100, 1000, or auto. Step 8 Enter a Line Duplex of none, full, half, or auto. Step 9 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port. Step 10 Check the Filter BPDU box to specify that the UNI port should not process Layer 2 Bridge Protocol Data Units (BPDUs). Step 11 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface. a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security. b. For Aging, enter the length of time the MAC address can stay on the port security table. c. For Violation Action, choose what action will occur when a port security violation is detected: •PROTECT •RESTRICT •SHUTDOWN d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses. Step 12 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B ERS Service. Step 13 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management. Step 14 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation. Step 15 Click Finish. Define an Ethernet/EWS Policy when CE is Present This section describes defining a VPLS policy with an Ethernet core type and an ERS service type with a CE present. Figure 5-17 is an example of the first page of this policy. Figure 5-17 Ethernet/EWS Policy with CE Present Step 1 Click NEXT. The window in Figure 5-18 appears. The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation. Figure 5-18 Ethernet/EWS with CE Policy Attributes Step 2 Choose an Interface Type from the drop-down menu. You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are: •ANY (Any interface can be chosen.) •Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.) •Ethernet •FastEthernet •GE-WAN •GigabitEthernet The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types. Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0). This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service. Step 4 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 5 Enter a Link Speed of none, 10, 100, 1000, or auto. Step 6 Enter a Line Duplex of none, full, half, or auto. Step 7 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port. Step 8 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface. a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security. b. For Aging, enter the length of time the MAC address can stay on the port security table. c. For Violation Action, choose what action will occur when a port security violation is detected: •PROTECT •RESTRICT •SHUTDOWN d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses. Step 9 Check the Protocol Tunneling box (see Figure 5-19) if you want to define the Layer 2 Bridge Protocol Data Unit (BPDU) frames that can be tunneled over the core to the other end. Figure 5-19 Protocol Tunneling For each protocol that you check, enter the threshold for that protocol: a. Tunnel CDP Set a flag to enable Layer 2 tunnelling on a Cisco Discover Protocol (CDP). b. CDP Threshold Enter the number of packets per second to be received before the interface is shut down for the CDP protocol. c. Tunnel VTP Enable Layer 2 tunnelling on a VLAN Trunk Protocol (VTP). d. VTP Threshold Enter the number of packets per second to be received before the interface is shut down for the VTP protocol. e. Tunnel STP Enable Layer 2 tunnelling on a Spanning Tree Protocol (STP). f. STP Threshold Enter the number of packets per second to be received before the interface is shut down for the STP protocol. g. Recovery Interval enter the amount of time, in seconds, to wait before recovering a UNI port. Step 10 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B EWS Service. Step 11 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management. Step 12 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation. Step 13 Enter the System MTU in bytes. Step 14 Click Finish. Define an Ethernet/EWS Policy without a CE This section describes defining a VPLS policy with an Ethernet core type and an EWS service type without a CE present. Figure 5-20 is an example of the first page of this policy. Figure 5-20 Ethernet/EWS Policy without CE Step 1 Check NEXT. The window in Figure 5-21 appears. The Editable check box gives you the option of making a field editable. If you check Editable, the service operator who is using this VPLS policy can modify the editable parameter during VPLS service request creation. Figure 5-21 Ethernet/EWS without CE Policy Attributes Step 2 Choose an Interface Type from the drop-down menu. You can choose to select a particular interface on a CE, PE-POP, or PE-CLE interface based on the service provider's POP design. The interfaces are: •ANY (Any interface can be chosen.) •Port-Channel (A bundle of ports that share the same characteristics—this gives the service provider the ability to aggregate bandwidth and protection.) •Ethernet •FastEthernet •GE-WAN •GigabitEthernet The value defined here functions as a filter to restrict the interface types an operator can see during VPLS service request creation. If defined as ANY, the operator can see all interface types. Step 3 Enter an Interface Format as the slot number/port number for the CE interface (for example, 1/0 indicates that the interface is located at slot 1, port 0). This is especially useful to specify here if you know that the link will always go through a particular interface's slot/port location on all or most of the network devices in the service. Step 4 Check UNI Shutdown box if you want to leave the UNI port shut during service activation, for example, when the service provider wants to deploy a service in the network but wants to activate it at a later time. Step 5 Enter a Link Speed of none, 10, 100, 1000, or auto. Step 6 Enter a Line Duplex of none, full, half, or auto. Step 7 Check the Disable CDP box if you want to disable the Cisco Discover Protocol (CDP) on the UNI port. Step 8 Check the UNI Port Security box if you to want to provision port security-related CLIs to the UNI port by controlling the mac addresses that are allowed to go through the interface. a. For Maximum Number of MAC address, enter the number of MAC addresses allowed for port security. b. For Aging, enter the length of time the MAC address can stay on the port security table. c. For Violation Action, choose what action will occur when a port security violation is detected: •PROTECT •RESTRICT •SHUTDOWN d. In the Secure MAC Addresses box, enter one or more Ethernet MAC addresses. Step 9 Check the Protocol Tunneling box (see Figure 5-22) if you want to define the Layer 2 Bridge Protocol Data Unit (BPDU) frames that can be tunneled over the core to the other end. Figure 5-22 Protocol Tunneling For each protocol that you check, enter the threshold for that protocol: a. Tunnel CDP Set a flag to enable Layer 2 tunnelling on a Cisco Discover Protocol (CDP). b. CDP Threshold Enter the number of packets per second to be received before the interface is shut down for the CDP protocol. c. Tunnel VTP Enable Layer 2 tunnelling on a VLAN Trunk Protocol (VTP). d. VTP Threshold Enter the number of packets per second to be received before the interface is shut down for the VTP protocol. e. Tunnel STP Enable Layer 2 tunnelling on a Spanning Tree Protocol (STP). f. STP Threshold Enter the number of packets per second to be received before the interface is shut down for the STP protocol. g. Recovery Interval enter the amount of time, in seconds, to wait before recovering a UNI port. Step 10 In the PE/UNI Interface Description box, enter an optional description, for example Customer-B EWS Service. Step 11 Check the Enable Templates box if you want to download free-format CLIs to a device. If you enable templates, you can create templates and data files to push down to the routers commands that are not normally supported by ISC. See the Cisco IP Solution Center Infrastructure Reference, 3.1 for more information about template management. Step 12 Check the VLANID AutoPick box if you want ISC to choose a VLAN ID. If you do not check this box, you will be prompted to provide the VLAN in a Provider VLAN ID field during service activation. Step 13 Enter the System MTU in bytes. Step 14 Click Finish.
	© 1992-2008 Cisco Systems, Inc. All rights reserved. Terms & Conditions \| Privacy Statement \| Cookie Policy \| Trademarks of Cisco Systems, Inc.