This module describes the commands used to configure, monitor, and troubleshoot a Layer 2 or Layer 3 virtual private network (VPN).
For detailed information about virtual private network concepts, configuration tasks, and examples, refer to the
Cisco ASR 9000 Series Aggregation
Services Router L2VPN and Ethernet Services Configuration Guide.
To configure the backup pseudowire for the cross-connect, use the
backup command in L2VPN xconnect p2p pseudowire
configuration mode. To disable this feature, use the no form of this command.
backupneighborIP-addresspw-idvalue
nobackupneighborIP-addresspw-idvalue
Syntax Description
neighborIP-address
Specifies the peer to cross connect. The
IP-address argument is the IPv4 address of the
peer.
pw-idvalue
Configures the pseudowire ID. The range is from 1 to 4294967295.
Command Default
None
Command Modes
L2VPN xconnect p2p pseudowire configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Use the backup command to
enter L2VPN xconnect p2p pseudowire backup configuration mode.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to configure backup
pseudowires:
To specify how long a backup pseudowire should wait before resuming operation after the
primary pseudowire goes down, use the backup disable command
in L2VPN pseudowire class configuration mode. To disable this feature, use the no
form of this command.
backupdisable
{ delayvalue | never }
nobackupdisable
{ delayvalue | never }
Syntax Description
delayvalue
Specifies the number of seconds that elapse after the primary pseudowire
becomes nonfunctional before the Cisco IOS XR software attempts to activate
the secondary pseudowire.
The range, in seconds, is from 0 to 180. The default is 0.
never
Specifies that the secondary pseudowire does not fall back to the primary
pseudowire if the primary pseudowire becomes available again, unless the
secondary pseudowire fails.
Command Default
The default disable delay is the value of 0, which
means that the primary pseudowire is activated immediately when it comes back up.
Command Modes
L2VPN pseudowire class configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how a backup delay is
configured for point-to-point pseudowire in which the backup disable delay is set to 50
seconds:
To clear the state change counters for L2VPN collaborators, use the clear
l2vpn collaborators command in EXEC mode.
clearl2vpncollaborators
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to clear
change counters for L2VPN collaborators:
Displays information about the state of the interprocess communications connections between l2vpn_mgr and other processes.
clear l2vpn counters bridge mac-withdrawal
To clear the MAC withdrawal statistics for the counters of the bridge domain, use the
clear l2vpn counters bridge mac-withdrawal command in
EXEC mode.
clearl2vpncountersbridgemac-withdrawal
{ all | groupgroup-namebd-namebd-name | neighborip-addresspw-idvalue }
Syntax Description
all
Clears the MAC withdrawal statistics over all the bridges.
groupgroup-name
Clears the MAC withdrawal statistics over the specified group.
bd-namebd-name
Clears the MAC withdrawal statistics over the specified bridge.
neighborip-address
Clears the MAC withdrawal statistics over the specified neighbor.
pw-idvalue
Clears the MAC withdrawal statistics over the specified pseudowire. The
range is from 1 to 4294967295.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to
clear the MAC withdrawal statistics over all the bridges:
RP/0/RSP0/CPU0:router# clear l2vpn counters bridge mac-withdrawal all
clear l2vpn forwarding counters
To clear L2VPN forwarding counters, use the clear l2vpn forwarding
counters command in EXEC mode.
clearl2vpnforwardingcounters
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to
clear L2VPN forwarding counters:
Clears L2VPN forwarding message counters for the specified location.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows
how to clear L2VPN forwarding message counters on a specified node:
Displays forwarding information from the layer2_fib manager on the line card.
clear l2vpn forwarding table
To clear an L2VPN forwarding table at a specified location, use the clear
l2vpn forwarding table command in EXEC mode.
clearl2vpnforwardingtablelocationnode-id
Syntax Description
locationnode-id
Clears L2VPN forwarding tables for the specified location.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.9.0
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows
how to clear an L2VPN forwarding table from a specified location:
Displays forwarding information from the layer2_fib manager on the line card.
control-word
To enable control word for MPLS encapsulation, use the control-word command in L2VPN pseudowire class encapsulation submode. To disable the control word, use the no form of this command.
control-word
nocontrol-word
Syntax Description
This command has no keywords or arguments.
Command Default
None
Command Modes
L2VPN pseudowire class encapsulation configuration
Command History
Release
Modification
Release 4.2.1
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
This example shows how to enable control word for MPLS encapsulation:
To validate Address Resolution Protocol (ARP) packets in a network, use the
dynamic-arp-inspection command in the l2vpn bridge group bridge domain
configuration mode. To disable dynamic ARP inspection, use the
no form of this command.
When you use the logging option, the log messages indicate the interface
on which the violation has occured along with the IP or MAC source of the
violation traffic. The log messages are rate limited at 1 message per 10
seconds.
Caution
Not all the violation events are recorded in the syslog.
address-validation
(Optional) Performs address-validation.
src-mac
Source MAC address in the Ethernet header.
dst-mac
Destination MAC address in the Ethernet header.
ipv4
IP addresses in the ARP body.
Command Default
Dynamic ARP inspection
is disabled.
Command Modes
l2vpn bridge group bridge domain configuration
Command History
Release
Modification
Release 4.0.1
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
This example shows how
to enable dynamic ARP inspection on bridge bar:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# bridge group b1RP/0/RSP0/CPU0:router(config-l2vpn-bg)# bridge-domain barRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)# dynamic-arp-inspectionRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-dai)#
This example shows how
to enable dynamic ARP inspection logging on bridge bar:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# bridge group b1RP/0/RSP0/CPU0:router(config-l2vpn-bg)# bridge-domain barRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)# dynamic-arp-inspection loggingRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-dai)#
This example shows how
to enable dynamic ARP inspection address validation on bridge bar:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# bridge group b1RP/0/RSP0/CPU0:router(config-l2vpn-bg)# bridge-domain barRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)# dynamic-arp-inspection address-validationRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-dai)#
To change the flood mode from Bandwidth Optimized to Convergence Optimized, use the
flood mode convergence-optimized command in the l2vpn
bridge group bridge domain configuration mode. To return the bridge to normal flooding
behavior (when all unknown unicast, broadcast and multicast packets are flooded over
other bridge domain network interfaces), use the no form of
this command.
Configures bridge to use Resilience Optimized mode.
convergence-optimized
Configures bridge to use Convergence Optimized mode.
Command Default
The bridge domain
operates in the Bandwidth Optimized Mode.
Command Modes
l2vpn bridge group bridge domain configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
The flood
mode command allows you to change the flood optimization mode to
either Convergence Optimized mode or Resilience Optimized mode. The Convergence
Optimized mode floods all traffic to all line cards; all unknown unicast packets, all
broadcast packets, and all multicast packets are flooded over all other bridge domain
network interfaces. The Resilience Optimized Mode works like Bandwidth Optimized mode,
except that it floods traffic to both primary and backup FRR links for a Pseudowire.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example
shows how to clear an L2VPN forwarding table from a specified location:
Creates a bridge group so that it can contain bridge domains and then to assign network interfaces to the bridge domain.
interface (p2p)
To configure an attachment circuit, use the interface command
in p2p configuration submode. To return to the default behavior, use the
no form of this command.
interfacetypeinterface-path-id
nointerfacetypeinterface-path-id
Syntax Description
type
Interface type. For more information, use the question mark (?) online help
function.
interface-path-id
Physical interface or a virtual interface.
Note
Use the show interfaces command to see a list
of all possible interfaces currently configured on the router.
For more information about the syntax for the router, use the question mark
(?) online help function.
Command Default
None
Command Modes
p2p configuration submode
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example
shows how to configure an attachment circuit on a TenGigE interface:
Enters p2p configuration submode to configure point-to-point cross-connects.
ip-source-guard
To enable source IP address filtering on a layer 2 port, use the
ip-source-guard command in l2vpn bridge group bridge
domain configuration mode. To disable source IP address filtering, use the
no form of this command.
ip-source-guardlogging
noip-source-guardlogging
Syntax Description
logging
(Optional) Enables logging.
Command Default
IP Source Guard
is disabled.
Command Modes
l2vpn bridge group bridge domain configuration
Command History
Release
Modification
Release 4.0.1
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
This example
shows how to enable ip source guard on bridge bar:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# bridge group b1RP/0/RSP0/CPU0:router(config-l2vpn-bg)# bridge-domain barRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)# ip-source-guardRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-ipsg)#
This example
shows how to enable ip source guard logging on bridge bar:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# bridge group b1RP/0/RSP0/CPU0:router(config-l2vpn-bg)# bridge-domain barRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd)# ip-source-guard loggingRP/0/RSP0/CPU0:router(config-l2vpn-bg-bd-ipsg)#
To configure a physical interface to operate in Layer 2 transport mode, use the
l2transport command in interface configuration mode. To
return to the default behavior, use the no form of this
command.
l2transport
nol2transport
This command has no arguments or keywords.
Command Default
None
Command Modes
Interface configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
The l2transport
command and these configuration items are mutually exclusive:
IPv4 address and feature (for example, ACL) configuration
IPv4 enable, address and feature (for example, ACL) configuration
Bundle-enabling configuration
L3 subinterfaces
Layer 3 QoS Policy
Note
After an interface or connection is set to Layer 2 switched, commands such as
ipv4 address are not usable. If you configure routing
commands on the interface, l2transport is rejected.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example
shows how to configure an interface or connection as Layer 2 switched under several
different modes:
Displays forwarding information from the layer2_fib manager on the line card.
l2transport l2protocol
To configure Layer 2 protocol handling, use the l2transport
l2protocol command in interface configuration mode. To return to the
default behavior, use the no form of this command.
Enables L2PT for the interface. L2PT is enabled for the following protocols
only:
CDP
STP
VTP
Note
STP includes all Spanning Tree protocol derivatives (RSTP, MSTP,
etc.)
tunnel
Performs L2PT encapsulation on frames as they enter the interface. Also,
performs L2PT de-encapsulation on frames as they exit they interface.
L2PT encapsulation rewrites the destination MAC address with the L2PT
destination MAC address. L2PT deencapsulation replaces the L2PT destination
MAC address with the original destination MAC address.
reverse-tunnel
Performs L2PT encapsulation on frames as they exit the interface. Also,
perform L2PT deencapsulation on frames as they enter the interface.
Command Default
None
Command Modes
Interface configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
These L2
protocols are available:
Cisco Discovery Protocol (CDP)—CDP is protocol-independent and is used to obtain
protocol addresses, platform information, and other data about neighboring
devices.
PVST maintains a spanning tree instance for each VLAN configured in the network
and permits a VLAN trunk to be forwarding for some VLANs and not for others. It
can also load balance Layer 2 traffic by forwarding some VLANs on one trunk and
other VLANs n others.
Spanning-Tree Protocol (STP)—STP is a link management protocol that provides path
redundancy in the network. For Ethernet networks to function properly, only one
active path can exist between two stations.
VLAN Trunk Protocol (VTP)—VTP is a Cisco-proprietary protocol that reduces
administration in a switched network. When you configure a new VLAN on one VTP
server, the VLAN is distributed through all switches in the domain.
Task ID
Task ID
Operations
l2vpn
read, write
atm
read, write
Examples
The following example
shows how to configure Layer 2 protocol handling:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# interface GigabitEthernet 0/0/0/0RP/0/RSP0/CPU0:router(config-if)# l2transport l2protocol cpsv reverse-tunnelstp drop
Displays forwarding information from the layer2_fib manager on the line card.
l2transport propagate
To propagate Layer 2 transport events, use the l2transport
propagate command in interface configuration mode. To return to the
default behavior, use the no form of this command.
l2transportpropagateremote-status
nol2transportpropagateremote-status
Syntax Description
remote-status
Propagates remote link status changes.
Command Default
None
Command Modes
Interface configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
The l2transport
propagate command provides a mechanism for the detection and propagation of
remote link failure for port mode EoMPLS.
To display the state
of l2transport events, use the show controller internal command in
To display the state of l2transport events, use the show controller internal command in
Cisco ASR 9000 Series Aggregation Services Router
Interface and Hardware Component Configuration Guide
For more information
about the Ethernet remote port shutdown feature, see
Cisco ASR 9000 Series
Aggregation Services Router MPLS Configuration Guide.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example
shows how to propagate remote link status changes:
Displays forwarding information from the layer2_fib manager on the line card.
l2transport service-policy
To configure a Layer 2 transport quality of service (QoS) policy, use the
l2transport service-policy command in interface
configuration mode. To return to the default behavior, use the
no form of this command.
Configures the direction of service policy application: input.
outputpolicy-name
Configures the direction of service policy application: output.
Command Default
None
Command Modes
Interface configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
atm
read, write
Examples
The following example
shows how configure an L2 transport quality of service (QoS) policy:
Displays forwarding information from the layer2_fib manager on the line card.
l2vpn
To enter L2VPN configuration mode, use the l2vpn command in
global configuration mode. To return to the default behavior, use the
no form of this command.
l2vpn
nol2vpn
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Note
All L2VPN configuration can be deleted using the no l2vpn
command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example
shows how to enter L2VPN configuration mode:
Displays forwarding information from the layer2_fib manager on the line card.
load-balancing flow
To enable all bundle EFPs and PW to use either L2 flow based or L3 flow based balancing,
use the load-balancing flow command in L2VPN configuration mode.
load-balancingflow
[ src-dst-mac | src-dst-ip ]
Syntax Description
src-dst-mac
Enables global flow load balancing hashed on source and destination MAC
addresses.
src-dst-ip
Enables global flow load balancing hashed on source and destination IP
addresses.
Command Default
None
Command Modes
L2VPN configuration
Command History
Release
Modification
Release 4.0.0
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following
example shows how to set the bridge ID:
To balance the load based on flow-labels, use the load balancing flow label command in l2vpn pseudowire class mpls configuration mode. To undo flow-label based load-balancing, use the
no form of this command.
Inserts or discards flow labels on transmit or receive.
receive
Discards flow label on receive.
transmit
Inserts flow label on transmit.
static
Sets flow label parameters statically.
Command Default
None
Command Modes
L2vpn pseudowire class mpls configuration mode
Command History
Release
Modification
Release 4.2.1
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operation
l2vpn
read, write
Examples
This example shows the output of the load-balancing flow-label command of the both keyword.
RP/0/RSP0/CPU0:router#configRP/0/RSP0/CPU0:router(config)#l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)#pw-class p1RP/0/RSP0/CPU0:router(config-l2vpn-pwc)#encapsulationRP/0/RSP0/CPU0:router(config-l2vpn-pwc)#encapsulation mplsRP/0/RSP0/CPU0:router(config-l2vpn-pwc-mpls)#load-balancingRP/0/RSP0/CPU0:router(config-l2vpn-pwc-mpls)#load-balancing flow-labelRP/0/RSP0/CPU0:router(config-l2vpn-pwc-mpls)#load-balancing flow-label bothRP/0/RSP0/CPU0:router(config-l2vpn-pwc-mpls)#load-balancing flow-label both static
To enable all pseudowires using the defined class to use virtual circuit based load
balancing, use the load-balancing pw-label command in pseudowire class
configuration mode.
load-balancingpw-label
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
Pseudowire class configuration
Command History
Release
Modification
Release 4.0.0
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following
example shows how to set the bridge ID:
To enable cross-connect logging, use the logging command in
L2VPN configuration submode. To return to the default behavior, use the
no form of this command.
loggingpseudowirestatus
nologgingpseudowirestatus
Syntax Description
pseudowire status
Enables pseudowire state change logging.
Command Default
None
Command Modes
L2VPN configuration submode
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Note
All L2VPN configuration can be deleted using the no l2vpn
command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example
shows how to enable cross-connect logging:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# logging pseudowire status
To attach a traffic monitoring session as one of the segments for a cross connect, use
the monitor-session command in point-to-point cross connect
configuration mode. To remove the association between a traffic mirroring session and a
cross connect, use the no form of this command.
monitor-sessionsession-name
nomonitor-sessionsession-name
Syntax Description
session-name
Name of the monitor session to configure.
Command Default
No default behavior or values
Command Modes
Point-to-point cross connect configuration
Command History
Release
Modification
Release 4.0.0
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Before you can attach a traffic mirroring session to a cross connect, you must define it
using the monitor-session global configuration command. Once
the traffic mirroring session is defined, use the
monitor-session point-to-point cross connect configuration
command to attach this session as one of the segments for the cross connect. Once
attached, all traffic replicated from the monitored interfaces (in other words,
interfaces that are associated with the monitor-session) is replicated to the pseudowire
that is attached to the other segment of the cross-connect.
The session-name argument should be different than any
interface names currently used in the system.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
This example shows how to attach a traffic mirroring session as segment for the
xconnect:
Defines a traffic mirroring session and enter monitor session configuration mode.
mpls static label (L2VPN)
To configure static labels for MPLS L2VPN, use the mpls static
label command in L2VPN cross-connect P2P pseudowire configuration mode.
To have MPLS assign a label dynamically, use the no form of this command.
mplsstaticlabellocallabelremotevalue
nomplsstaticlabellocallabelremotevalue
Syntax Description
locallabel
Configures a local pseudowire label. Range is 16 to 15999.
remotevalue
Configures a remote pseudowire label. Range is 16 to 15999.
Command Default
The default behavior
is a dynamic label assignment.
Command Modes
L2VPN cross-connect P2P pseudowire configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example
shows how to configure static labels for MPLS L2VPN:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpn xconnect group l2vpnRP/0/RSP0/CPU0:router(config-l2vpn-xc)# p2p rtrA_to_rtrBRP/0/RSP0/CPU0:router(config-xc-p2p)# neighbor 10.1.1.2 pw-id 1000RP/0/RSP0/CPU0:router(config-l2vpn-xc-p2p-pw)# mpls static label local 800 remote 500
To configure a pseudowire for a cross-connect, use the
neighbor command in p2p configuration submode. To return to
the default behavior, use the no form of this command.
Configures the pseudowire ID and ID value. Range is 1 to 4294967295.
backup
(Optional) Specifies the backup pseudowire for the cross-connect.
mpls
(Optional) Configures an MPLS static label.
pw-class
(Optional) Configures the pseudowire class template name to use for this
cross-connect.
Command Default
None
Command Modes
p2p configuration submode
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
A cross-connect may
have two segments:
An Attachment Circuit (AC)
An second AC or a pseudowire
Note
The pseudowire is identified by two keys: neighbor and pseudowire ID. There may be
multiple pseudowires going to the same neighbor. It is not possible to configure a
neighbor only.
All L2VPN
configurations can be deleted using the no l2vpn command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following
example shows a point-to-point cross-connect configuration (including pseudowire
configuration):
To configure an MPLS TE tunnel to be used for L2VPN traffic, use the
preferred-path command in Encapsulation MPLS
configuration mode. To delete the preferred-path, use the no
form of this command.
(Optional) Disables fallback for preferred path tunnel settings.
tunnel te
Specifies the TE tunnel interface name for the preferred path.
tunnel tp
Specifies the TP tunnel interface name for the preferred path.
Command Default
None
Command Modes
Encapsulation MPLS configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Release 4.2.0
The keyword tunnel-tp was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
The preferred-path command is applicable only to pseudowires with MPLS
encapsulation.
Cisco IOS XR software supports only fallback disable. Traffic does not use the
default LDP path if the tunnel is down.
Use the show l2vpn xconnect detail command to show the status
of fallback (that is, enabled or disabled).
Note
All L2VPN configurations can be deleted using the no l2vpn
command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
This example shows how to configure preferred-path tunnel settings:
Displays brief information on configured cross-connects.
pw-class (L2VPN)
To enter pseudowire class submode to define a pseudowire class template, use the
pw-class command in L2VPN configuration submode. To
delete the pseudowire class, use the no form of this
command.
pw-classclass-name
nopw-classclass-name
Syntax Description
class-name
Pseudowire class name.
Command Default
None
Command Modes
L2VPN configuration submode
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Note
All L2VPN configurations can be deleted using the no l2vpn
command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to define a simple pseudowire class template:
Enters p2p configuration submode to configure point-to-point cross-connects.
pw-class encapsulation l2tpv3
To configure L2TPv3 pseudowire encapsulation, use the pw-class encapsulation
l2tpv3 command in L2VPN pseudowire class configuration mode. To
return to the default behavior, use the no form of this
command.
(Optional) Configures the L2TPv3 cookie size setting:
0—Cookie size is 0 bytes.
4—Cookie size is 4 bytes.
8—Cookie size is 8 bytes.
ipv4 sourceaddress
(Optional) Configures the local source IPv4 address.
pmtu max68-65535
(Optional) Configures the value of the maximum allowable session MTU.
protocol l2tpv3 classname
(Optional) Configures L2TPv3 as the signaling protocol for the pseudowire
class.
tos {reflect value0-255 | value0-255}
(Optional) Configures TOS and the TOS value. Range is 0 to 255.
ttlvalue
Configures the Time-to-live (TTL) value. Range is 1 to 255.
Command Default
None
Command Modes
L2VPN pseudowire class configuration
Command History
Release
Modification
Release 3.9.0
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Note
All L2VPN configurations can be deleted using the no l2vpn
command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to define L2TPV3 pseudowire encapsulation:
To configure MPLS pseudowire encapsulation, use the pw-class encapsulation
mpls command in L2VPN pseudowire class configuration mode. To undo the configuration, use the no form of this command.
Disables control word for MPLS encapsulation. Disabled by default.
ipv4
Sets the local source IPv4 address.
load-balancingflow-label
Sets flow label-based load balancing.
preferred-path
Configures the preferred path tunnel settings.
protocol ldp
Configures LDP as the signaling protocol for this pseudowire class.
redundancy one-way
Configures one-way PW redundancy behavior in the Redundancy Group.
sequencing
Configures sequencing on receive or transmit.
switching tlv
Configures switching TLV to be hidden or not.
tag-rewrite
Configures VLAN tag rewrite.
transport-mode
Configures transport mode to be either Ethernet or VLAN.
vccv none
Enables or disables the VCCV verification type.
Command Default
None
Command Modes
L2VPN pseudowire class configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Release 3.9.0
The following keywords were added:
preferred-path
sequencing
switching tlv
tag-rewrite
transport-mode
Release 4.2.0
The keyword redundancy one-way was introduced.
Release 4.3.0
The keyword load-balancing flow-label
was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Note
All L2VPN configurations can be deleted using the no l2vpn
command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
This example shows how to define MPLS pseudowire encapsulation:
Enters pseudowire class submode to define a pseudowire class template.
p2p
To enter p2p configuration submode to configure point-to-point cross-connects, use the
p2p command in L2VPN xconnect mode. To return to the
default behavior, use the no form of this command.
p2pxconnect-name
nop2pxconnect-name
Syntax Description
xconnect-name
(Optional) Configures the name of the point-to-point cross- connect.
Command Default
None
Command Modes
L2VPN xconnect
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
The name of the point-to-point cross-connect string is a free format description
string.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows a point-to-point cross-connect configuration (including
pseudowire configuration):
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# xconnect group group 1RP/0/RSP0/CPU0:router(config-l2vpn-xc)# p2p xc1
To configure L2VPN pseudowire class sequencing, use the pw-class
sequencing command in L2VPN pseudowire class encapsulation mode. To
return to the default behavior, use the no form of this
command.
sequencing
{ both | receive | transmit{resynch5-65535} }
no sequencing
{ both | receive | transmit{resynch5-65535} }
Syntax Description
both
Configures transmit and receive side sequencing.
receive
Configures receive side sequencing.
transmit
Configures transmit side sequencing.
resynch5-65535
Configures the threshold for out-of-sequence packets before
resynchronization. Range is 5 to 65535.
Command Default
None
Command Modes
L2VPN pseudowire class encapsulation mode
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Do not configure sequence resynch on high speed circuits. On
low speed circuits, do not configure a threshold lower than 10 to 20 seconds of
traffic.
Note
This command is not supported on the Cisco ASR 9000 Series Aggregation Services Router.
Note
All L2VPN configurations can be deleted using the no l2vpn
command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to configure L2VPN pseudowire class sequencing:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# pw-class kanata01RP/0/RSP0/CPU0:router(config-l2vpn-pw)# encapsulation mplsRP/0/RSP0/CPU0:router(config-l2vpn-encap-mpls)# sequencing both
Enters pseudowire class submode to define a pseudowire class template.
show l2vpn collaborators
To display information about the state of the interprocess communications connections
between l2vpn_mgr and other processes, use the show l2vpn
collaborators command in EXEC mode.
showl2vpncollaborators
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows sample output for the show l2vpn
collaborators command:
RP/0/RSP0/CPU0:router# show l2vpn collaborators
L2VPN Collaborator stats:
Name State Up Cnts Down Cnts
-------------------- ---------- ----------- -----------
IMC Down 0 0
LSD Up 1 0
This table describes the significant fields
shown in the display.
Table 1 show l2vpn collaborators Field Descriptions
Field
Description
Name
Abbreviated name of the task interacting with l2vpn_mgr.
State
Indicates if l2vpn_mgr has a working connection with the other
process.
Up Cnts
Number of times the connection between l2vpn_mgr and the other process
has been successfully established.
Down Cnts
Number of times that the connection between l2vpn_mgr and the other
process has failed or been terminated.
Displays bridge domain related forwarding information.
xconnect
Displays VPWS edge information.
summary
Displays summary information.
private
Displays private log or trace information.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following examples display output for the show l2vpn
discovery command with bridge-domain filter:
RP/0/RSP0/CPU0:router#show l2vpn discovery bridge-domain
Service Type: VPLS, Connected
List of VPNs (8001 VPNs):
Bridge group: bg1, bridge-domain: bg1_bd1, id: 0, signaling protocol: LDP
VPLS-ID: (auto) 1:101
Local L2 router id: 10.10.10.10
List of Remote NLRI (3 NLRIs):
Local Addr Remote Addr Remote L2 RID Time Created
--------------- --------------- --------------- -------------------
10.10.10.10 20.20.20.20 20.20.20.20 03/13/2010 21:27:05
10.10.10.10 30.30.30.30 30.30.30.30 03/13/2010 21:27:05
10.10.10.10 40.40.40.40 40.40.40.40 03/13/2010 21:27:05
The following examples display output for the show l2vpn discovery
summary command:
RP/0/RSP0/CPU0:router#show l2vpn discovery summary
Sun Mar 14 15:13:31.240 EDT
BGP: connected=yes, active=yes, stdby=yes
Services
Bridge domain: registered=yes, Num VPNs=8001
Num Local Edges=8001, Num Remote Edges=24001, Num Received NLRIs=24001
Xconnect: registered=yes, Num VPNs=0
Num Local Edges=0, Num Remote Edges=0, Num Received NLRIs=0
Displays layer2_fib manager information for the specified location. The
node-id argument is entered in the
rack/slot/module notation.
message
Displays messages exchanged with collaborators.
mstp
Displays multi-spanning tree related forwarding information.
resource
Displays resource availability information in the layer2_fib manager.
retry-list
Displays retry list related information.
summary
Displays summary information about cross-connects in the layer2_fib
manager.
unresolved
Displays unresolved entries only.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read
Examples
Example 1:
The following sample output is from the show l2vpn forwarding bridge detail
location command:
RP/0/RSP0/CPU0:router# show l2vpn forwarding location 0/2/cpu0
Bridge-domain name: bg1:bd1, id: 0, state: up
MAC learning: enabled
Flooding:
Broadcast & Multicast: enabled
Unknown unicast: enabled
MAC aging time: 300 s, Type: inactivity
MAC limit: 4000, Action: none, Notification: syslog
MAC limit reached: no
Security: disabled
DHCPv4 snooping: profile not known on this node
IGMP snooping: disabled, flooding: disabled
Bridge MTU: 1500 bytes
Number of bridge ports: 1
Number of MAC addresses: 0
Multi-spanning tree instance: 0
GigabitEthernet0/1/0/1.2, state: oper up
Number of MAC: 0
Statistics:
packets: received 0, sent 0
bytes: received 0, sent 0
Storm control drop counters:
packets: broadcast 0, multicast 0, unknown unicast 0
bytes: broadcast 0, multicast 0, unknown unicast 0
Bridge-domain name: bg1:bd2, id: 1, state: up
Type: pbb-edge, I-SID: 1234
Core-bridge: pbb-bd2
MAC learning: enabled
Flooding:
Broadcast & Multicast: enabled
Unknown unicast: enabled
MAC aging time: 300 s, Type: inactivity
MAC limit: 4000, Action: none, Notification: syslog
MAC limit reached: no
Security: disabled
DHCPv4 snooping: profile not known on this node
IGMP snooping: disabled, flooding: disabled
Bridge MTU: 1500 bytes
Number of bridge ports: 0
Number of MAC addresses: 0
Multi-spanning tree instance: 0
PBB Edge, state: up
Number of MAC: 0
GigabitEthernet0/1/0/1.3, state: oper up
Number of MAC: 0
Storm control drop counters:
packets: broadcast 0, multicast 0, unknown unicast 0
bytes: broadcast 0, multicast 0, unknown unicast 0
Bridge-domain name: bg1:bd3, id: 2, state: up
Type: pbb-core
Number of associated pbb-edge BDs: 1
MAC learning: enabled
Flooding:
Broadcast & Multicast: enabled
Unknown unicast: enabled
MAC aging time: 300 s, Type: inactivity
MAC limit: 4000, Action: none, Notification: syslog
MAC limit reached: no
Security: disabled
DHCPv4 snooping: profile not known on this node
IGMP snooping: disabled, flooding: disabled
Bridge MTU: 1500 bytes
Number of bridge ports: 0
Number of MAC addresses: 0
Multi-spanning tree instance: 0
PBB Core, state: up
Vlan-id: 1
GigabitEthernet0/1/0/1.4, state: oper up
Number of MAC: 0
Storm control drop counters:
packets: broadcast 0, multicast 0, unknown unicast 0
bytes: broadcast 0, multicast 0, unknown unicast 0
The following sample outputs shows the backup pseudowire information:
RP/0/RSP0/CPU0:router#show l2vpn forwarding detail location 0/2/CPU0
Local interface: GigabitEthernet0/2/0/0.1, Xconnect id: 0x3000001, Status: up
Segment 1
AC, GigabitEthernet0/2/0/0.1, Ethernet VLAN mode, status: Bound
RG-ID 1, active
Statistics:
packets: received 0, sent 0
bytes: received 0, sent 0
Segment 2
MPLS, Destination address: 101.101.101.101, pw-id: 1000, status: Bound
Pseudowire label: 16000
Statistics:
packets: received 0, sent 0
bytes: received 0, sent 0
Backup PW
MPLS, Destination address: 102.102.102.102, pw-id: 1000, status: Bound
Pseudowire label: 16001
Statistics:
packets: received 0, sent 0
bytes: received 0, sent 0
RP/0/RSP0/CPU0:router#show l2vpn forwarding bridge-domain detail location 0/2/CPU0
Bridge-domain name: bg1:bd1, id: 0, state: up
….
GigabitEthernet0/2/0/0.4, state: oper up
RG-ID 1, active
Number of MAC: 0
…..
Nbor 101.101.101.101 pw-id 5000
Backup Nbor 101.101.101.101 pw-id 5000
Number of MAC: 0
….
The following sample outputs displays the SPAN segment information of the xconnect:
RP/0/RSP0/CPU0:router# show l2vpn forwarding counter location 0/7/CPU0
Legend: ST = State, DN = Down
Segment 1 Segment 2 ST Byte
Switched
----------------------------- ----------------------- -- ---------
pw-span-test (Monitor-Session) mpls 2.2.2.2 UP 0
RP/0/RSP0/CPU0:router #Show l2vpn forwarding monitor-session location 0/7/CPU0
Segment 1 Segment 2 State
------------------------------------ ------------------------------------ ------
pw-span-test(monitor-session) mpls 2.2.2.2 UP
pw-span-sess(monitor-session) mpls 3.3.3.3 UP
RP/0/RSP0/CPU0:router #Show l2vpn forwarding monitor-session pw-span-test location 0/7/CPU0
Segment 1 Segment 2 State
------------------------------------ ------------------------------------ ------
pw-span-test(Monitor-Session) mpls 2.2.2.2 UP
Example 4:
RP/0/RSP0/CPU0:router #show l2vpn forwarding detail location 0/7/CPU0
Xconnect id: 0xc000001, Status: up
Segment 1
Monitor-Session, pw-span-test, status: Bound
Segment 2
MPLS, Destination address: 2.2.2.2, pw-id: 1, status: Bound
Pseudowire label: 16001
Statistics:
packets: received 0, sent 11799730
bytes: received 0, sent 707983800
Example 5:
show l2vpn forwarding private location 0/11/CPU0
Xconnect ID 0xc000001
Xconnect info:
Base info: version=0xaabbcc13, flags=0x0, type=2, reserved=0
xcon_bound=TRUE, switching_type=0, data_type=3
AC info:
Base info: version=0xaabbcc11, flags=0x0, type=3, reserved=0
xcon_id=0xc000001, ifh= none, subifh= none, ac_id=0, ac_type=SPAN,
ac_mtu=1500, iw_mode=none, adj_valid=FALSE, adj_addr none
PW info:
Base info: version=0xaabbcc12, flags=0x0, type=4, reserved=0
pw_id=1, nh_valid=TRUE, sig_cap_flags=0x20, context=0x0,
MPLS, pw_label=16001
Statistics:
packets: received 0, sent 11799730
bytes: received 0, sent 707983800
Object: NHOP
Event Trace History [Total events: 5]
--------------------------------------------------------------------
Time Event Flags
==== ===== =====
--------------------------------------------------------------------
Nexthop info:
Base info: version=0xaabbcc14, flags=0x10000, type=5, reserved=0
nh_addr=2.2.2.2, plat_data_valid=TRUE, plat_data_len=128, child_count=1
Object: XCON
Event Trace History [Total events: 16]
--------------------------------------------------------------------
Time Event Flags
==== ===== =====
-------------------------------------------------------------------
RP/0/RSP0/CPU0:router #show l2vpn forwarding summary location 0/7/CPU0
Major version num:1, minor version num:0
Shared memory timestamp:0x31333944cf
Number of forwarding xconnect entries:2
Up:2 Down:0
AC-PW:1 (1 mpls) AC-AC:0 AC-BP:0 AC-Unknown:0
PW-BP:0 PW-Unknown:0 Monitor-Session-PW:1
Number of xconnects down due to:
AIB:0 L2VPN:0 L3FIB:0
Number of p2p xconnects: 2
Number of bridge-port xconnects: 0
Number of nexthops:1
MPLS: Bound:1 Unbound:0 Pending Registration:0
Number of bridge-domains: 0
Number of static macs: 0
Number of locally learned macs: 0
Number of remotely learned macs: 0
Number of total macs: 0
The following sample output is from the show l2vpn forwarding
command:
RP/0/RSP0/CPU0:router# show l2vpn forwarding location 0/2/cpu0
ID Segment 1 Segment 2
-----------------------------------
1 Gi0/2/0/0 1 1.1.1.1 9)
The following sample output shows the MAC information in the layer2_fib manager
summary:
RP/0/RSP0/CPU0:router# show l2vpn forwarding summary location 0/3/CPU0
Major version num:1, minor version num:0
Shared memory timestamp:0x66ff58e894
Number of forwarding xconnect entries:2
Up:1 Down:0
AC-PW:0 AC-AC:0 AC-BP:1 PW-BP:1
Number of xconnects down due to:
AIB:0 L2VPN:0 L3FIB:0
Number of nexthops:1
Number of static macs: 5
Number of locally learned macs: 5
Number of remotely learned macs: 0
Number of total macs: 10
This example shows the sample output of a configured flow label:
RP/0/RSP0/CPU0:router# show l2vpn forwarding detail location 0/0/cPU0
Local interface: GigabitEthernet0/0/1/1, Xconnect id: 0x1000002, Status: up
Segment 1
AC, GigabitEthernet0/0/1/1, Ethernet port mode, status: Bound
Statistics:
packets: received 24849, sent 24847
bytes: received 1497808, sent 1497637
Segment 2
MPLS, Destination address: 3.3.3.3, pw-id: 2, status: Bound, Active
Pseudowire label: 16004 Control word disabled
Backup PW
MPLS, Destination address: 2.2.2.2, pw-id: 6, status: Bound
Pseudowire label: 16000
Flow label enabled
Statistics:
packets: received 24847, sent 24849
bytes: received 1497637, sent 1497808
Xconnect id: 0xff000014, Status: down
Segment 1
MPLS, Destination address: 2.2.2.2, pw-id: 1, status: Not bound
Pseudowire label: UNKNOWN Control word disabled
Flow label enabled
Statistics:
packets: received 0, sent 0
bytes: received 0, sent 0
Segment 2
Bridge id: 0, Split horizon group id: 0
Storm control: disabled
MAC learning: enabled
MAC port down flush: enabled
Flooding:
Broadcast & Multicast: enabled
Unknown unicast: enabled
MAC aging time: 300 s, Type: inactivity
MAC limit: 4000, Action: none, Notification: syslog
MAC limit reached: no
Security: disabled
DHCPv4 snooping: profile not known on this node, disabled
IGMP snooping profile: profile not known on this node
Router guard disabled
To display L2VPN pseudowire class information, use the show l2vpn
pw-class command in EXEC mode.
showl2vpnpw-class
[ detail | nameclassname ]
Syntax Description
detail
(Optional) Displays detailed information.
nameclass-name
(Optional) Displays information about a specific pseudowire class name.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read
Examples
The following example shows sample output for the show l2vpn
pw-class command:
RP/0/RSP0/CPU0:router# show l2vpn pw-class
Name Encapsulation Protocol
------------------------- ---------- ----------
mplsclass_75 MPLS LDP
l2tp-dynamic L2TPv3 L2TPv3
This table describes the significant fields
shown in the display.
Table 2
show l2vpn pw-class CommandField Descriptions
To display the memory state in the L2VPN process, use the show l2vpn
resource command in EXEC mode.
showl2vpnresource
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Task ID
Operations
l2vpn
read
Examples
The following example shows sample output for the show l2vpn
resource command:
RP/0/RSP0/CPU0:router# show l2vpn resource
Memory: Normal
describes the significant fields
shown in the display.Table 1
Table 3 show l2vpn resource Command Field Descriptions
Field
Description
Memory
Displays memory status.
show l2vpn xconnect
To display brief information on configured cross-connects, use the show
l2vpn connect command in EXEC mode.
showl2vpnxconnect
[ brief | detail | encapsulation | group | groups | interface | mp2mp | neighbor | pw-class | state | summary | type
{ ac-pw | locally-switched | monitor-session-pw | ms-pw } ]
(Optional) Displays all cross-connects in a specified group.
groups
(Optional) Displays all groups information.
interface
(Optional) Filters on interface and subinterface.
mp2mp
(Optional) Displays MP2MP information.
mpsw
(Optional) Displays ms_pw information.
neighbor
(Optional) Filters on neighbor.
private
(Optional) Displays private information.
pw-class
(Optional) Filters on pseudowire class
state
(Optional) Filters the following xconnect state types:
up
down
summary
(Optional) Displays AC information from the AC Manager database.
type
(Optional) Filters the following xconnect types:
ac-pw
locally switched
monitor-session-pw
ms-pw
Command Default
None
Command Modes
EXEC
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
If a specific cross-connect is specified in the command (for instance, AC_to_PW1) then
only that cross-connect will be displayed; otherwise, all cross-connects are
displayed.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows sample output for the show l2vpn
xconnect command:
RP/0/RSP0/CPU0:router# show l2vpn xconnect
Legend: ST = State, UP = Up, DN = Down, AD = Admin Down, UR = Unresolved,
LU = Local Up, RU = Remote Up, CO = Connected
XConnect Segment 1 Segment 2
Group Name ST Description ST Description ST
---------------------------- --------------------------- -------------------------
g1 x1 UP pw-span-test UP 2.2.2.2 1 UP
siva_xc siva_p2p UP Gi0/4/0/1 UP 10.1.1.1 1 UP
Backup
10.2.2.2 2 UP
--------------------------------------------------------------------------------
The following sample output shows that the backup is in standby mode for the show l2vpn xconnect detail command:
RP/0/RSP0/CPU0:router# show l2vpn xconnect detail
Group siva_xc, XC siva_p2p, state is up; Interworking none
Monitor-Session: pw-span-test, state is configured
AC: GigabitEthernet0/4/0/1, state is up
Type Ethernet
MTU 1500; XC ID 0x5000001; interworking none; MSTi 0
Statistics:
packet totals: send 90
byte totals: send 19056
PW: neighbor 10.1.1.1, PW ID 1, state is up ( established )
PW class not set, XC ID 0x5000001
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word enabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 30005 16003
Group ID 0x5000300 0x5000400
Interface GigabitEthernet0/4/0/1 GigabitEthernet0/4/0/2
Interface pw-span-test GigabitEthernet0/3/0/1
MTU 1500 1500
Control word enabled enabled
PW type Ethernet Ethernet
VCCV CV type 0x2 0x2
(LSP ping verification) (LSP ping verification)
VCCV CC type 0x3 0x3
(control word) (control word)
(router alert label) (router alert label)
------------ ------------------------------ -----------------------------
Create time: 20/11/2007 21:45:07 (00:49:18 ago)
Last time status changed: 20/11/2007 21:45:11 (00:49:14 ago)
Statistics:
packet totals: receive 0
byte totals: receive 0
Backup PW:
PW: neighbor 2.2.2.2, PW ID 2, state is up ( established )
Backup for neighbor 1.1.1.1 PW ID 1 ( standby )
PW class not set, XC ID 0x0
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word enabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 30006 16003
Group ID unassigned 0x5000400
Interface unknown GigabitEthernet0/4/0/2
MTU 1500 1500
Control word enabled enabled
PW type Ethernet Ethernet
VCCV CV type 0x2 0x2
(LSP ping verification) (LSP ping verification)
VCCV CC type 0x3 0x3
(control word) (control word)
(router alert label) (router alert label)
------------ ------------------------------ -----------------------------
Backup PW for neighbor 10.1.1.1 PW ID 1
Create time: 20/11/2007 21:45:45 (00:48:40 ago)
Last time status changed: 20/11/2007 21:45:49 (00:48:36 ago)
Statistics:
packet totals: receive 0
byte totals: receive 0
The following sample output shows that the backup is active for the show l2vpn xconnect detail command:
RP/0/RSP0/CPU0:router# show l2vpn xconnect detail
Group siva_xc, XC siva_p2p, state is down; Interworking none
Monitor-Session: pw-span-test, state is configured
AC: GigabitEthernet0/4/0/1, state is up
Type Ethernet
MTU 1500; XC ID 0x5000001; interworking none; MSTi 0
Statistics:
packet totals: send 98
byte totals: send 20798
PW: neighbor 10.1.1.1, PW ID 1, state is down ( local ready )
PW class not set, XC ID 0x5000001
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word enabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 30005 unknown
Group ID 0x5000300 0x0
Interface GigabitEthernet0/4/0/1 unknown
Interface pw-span-test GigabitEthernet0/3/0/1
MTU 1500 unknown
Control word enabled unknown
PW type Ethernet unknown
VCCV CV type 0x2 0x0
(none)
(LSP ping verification)
VCCV CC type 0x3 0x0
(none)
(control word)
(router alert label)
------------ ------------------------------ -----------------------------
Create time: 20/11/2007 21:45:06 (00:53:31 ago)
Last time status changed: 20/11/2007 22:38:14 (00:00:23 ago)
Statistics:
packet totals: receive 0
byte totals: receive 0
Backup PW:
PW: neighbor 10.2.2.2, PW ID 2, state is up ( established )
Backup for neighbor 10.1.1.1 PW ID 1 ( active )
PW class not set, XC ID 0x0
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word enabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 30006 16003
Group ID unassigned 0x5000400
Interface unknown GigabitEthernet0/4/0/2
MTU 1500 1500
Control word enabled enabled
PW type Ethernet Ethernet
VCCV CV type 0x2 0x2
(LSP ping verification) (LSP ping verification)
VCCV CC type 0x3 0x3
(control word) (control word)
(router alert label) (router alert label)
------------ ------------------------------ -----------------------------
Backup PW for neighbor 10.1.1.1 PW ID 1
Create time: 20/11/2007 21:45:44 (00:52:54 ago)
Last time status changed: 20/11/2007 21:45:48 (00:52:49 ago)
Statistics:
packet totals: receive 0
byte totals: receive 0
The following sample output displays the xconnects with switch port analyzer (SPAN) as
one of the segments:
Show l2vpn xconnect type minotor-session-pw
Legend: ST = State, UP = Up, DN = Down, AD = Admin Down, UR = Unresolved,
LU = Local Up, RU = Remote Up, CO = Connected
XConnect Segment 1 Segment 2
Group Name ST Description ST Description ST
----------------------------- --------------------------- --------------------------
g1 x1 UP pw-span-test UP 2.2.2.2 1 UP
--------------------------------------------------------------------------------------
The following sample output shows that one-way redundancy is enabled:
Group g1, XC x2, state is up; Interworking none
AC: GigabitEthernet0/2/0/0.2, state is up, active in RG-ID 1
Type VLAN; Num Ranges: 1
VLAN ranges: [2, 2]
MTU 1500; XC ID 0x3000002; interworking none
Statistics:
packets: received 103, sent 103
bytes: received 7348, sent 7348
drops: illegal VLAN 0, illegal length 0
PW: neighbor 101.101.101.101, PW ID 2000, state is up ( established )
PW class class1, XC ID 0x3000002
Encapsulation MPLS, protocol LDP
PW type Ethernet VLAN, control word disabled, interworking none
PW backup disable delay 0 sec
One-way PW redundancy mode is enabled
Sequencing not set
…..
Incoming Status (PW Status TLV):
Status code: 0x0 (Up) in Notification message
Outgoing Status (PW Status TLV):
Status code: 0x0 (Up) in Notification message
…..
Backup PW:
PW: neighbor 102.102.102.102, PW ID 3000, state is standby ( all ready )
Backup for neighbor 101.101.101.101 PW ID 2000 ( inactive )
PW class class1, XC ID 0x3000002
Encapsulation MPLS, protocol LDP
PW type Ethernet VLAN, control word disabled, interworking none
Sequencing not set
…..
Incoming Status (PW Status TLV):
Status code: 0x26 (Standby, AC Down) in Notification message
Outgoing Status (PW Status TLV):
Status code: 0x0 (Up) in Notification message
The following example shows sample output for the show l2vpn
xconnect command:
RP/0/RSP0/CPU0:router# show l2vpn xconnect
Legend: ST = State, UP = Up, DN = Down, AD = Admin Down, UR = Unresolved,
LU = Local Up, RU = Remote Up, CO = Connected
XConnect Segment 1 Segment 2
Group Name ST Description ST Description ST
---------------------------- --------------------------- -------------------------
siva_xc siva_p2p UP Gi0/4/0/1 UP 1.1.1.1 1 UP
Backup
2.2.2.2 2 UP
--------------------------------------------------------------------------------
The following sample output shows that the backup is in standby mode for the show l2vpn xconnect detail command:
RP/0/RSP0/CPU0:router# show l2vpn xconnect detail
Group siva_xc, XC siva_p2p, state is up; Interworking none
AC: GigabitEthernet0/4/0/1, state is up
Type Ethernet
MTU 1500; XC ID 0x5000001; interworking none; MSTi 0
Statistics:
packet totals: received 90, sent 90
byte totals: received 19056, sent 19056
PW: neighbor 1.1.1.1, PW ID 1, state is up ( established )
PW class not set, XC ID 0x5000001
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word enabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 30005 16003
Group ID 0x5000300 0x5000400
Interface GigabitEthernet0/4/0/1 GigabitEthernet0/4/0/2
MTU 1500 1500
Control word enabled enabled
PW type Ethernet Ethernet
VCCV CV type 0x2 0x2
(LSP ping verification) (LSP ping verification)
VCCV CC type 0x3 0x3
(control word) (control word)
(router alert label) (router alert label)
------------ ------------------------------ -----------------------------
Create time: 20/11/2007 21:45:07 (00:49:18 ago)
Last time status changed: 20/11/2007 21:45:11 (00:49:14 ago)
Statistics:
packet totals: received 0, sent 0
byte totals: received 0, sent 0
Backup PW:
PW: neighbor 2.2.2.2, PW ID 2, state is up ( established )
Backup for neighbor 1.1.1.1 PW ID 1 ( standby )
PW class not set, XC ID 0x0
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word enabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 30006 16003
Group ID unassigned 0x5000400
Interface unknown GigabitEthernet0/4/0/2
MTU 1500 1500
Control word enabled enabled
PW type Ethernet Ethernet
VCCV CV type 0x2 0x2
(LSP ping verification) (LSP ping verification)
VCCV CC type 0x3 0x3
(control word) (control word)
(router alert label) (router alert label)
------------ ------------------------------ -----------------------------
Backup PW for neighbor 1.1.1.1 PW ID 1
Create time: 20/11/2007 21:45:45 (00:48:40 ago)
Last time status changed: 20/11/2007 21:45:49 (00:48:36 ago)
Statistics:
packet totals: received 0, sent 0
byte totals: received 0, sent 0
The following sample output shows that the backup is active for the show l2vpn xconnect detail command:
RP/0/RSP0/CPU0:router# show l2vpn xconnect detail
Group siva_xc, XC siva_p2p, state is down; Interworking none
AC: GigabitEthernet0/4/0/1, state is up
Type Ethernet
MTU 1500; XC ID 0x5000001; interworking none; MSTi 0
Statistics:
packet totals: send 98
byte totals: send 20798
PW: neighbor 1.1.1.1, PW ID 1, state is down ( local ready )
PW class not set, XC ID 0x5000001
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word enabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 30005 unknown
Group ID 0x5000300 0x0
Interface GigabitEthernet0/4/0/1 unknown
MTU 1500 unknown
Control word enabled unknown
PW type Ethernet unknown
VCCV CV type 0x2 0x0
(none)
(LSP ping verification)
VCCV CC type 0x3 0x0
(none)
(control word)
(router alert label)
------------ ------------------------------ -----------------------------
Create time: 20/11/2007 21:45:06 (00:53:31 ago)
Last time status changed: 20/11/2007 22:38:14 (00:00:23 ago)
Statistics:
packet totals: received 0, sent 0
byte totals: received 0, sent 0
Backup PW:
PW: neighbor 2.2.2.2, PW ID 2, state is up ( established )
Backup for neighbor 1.1.1.1 PW ID 1 ( active )
PW class not set, XC ID 0x0
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word enabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 30006 16003
Group ID unassigned 0x5000400
Interface unknown GigabitEthernet0/4/0/2
MTU 1500 1500
Control word enabled enabled
PW type Ethernet Ethernet
VCCV CV type 0x2 0x2
(LSP ping verification) (LSP ping verification)
VCCV CC type 0x3 0x3
(control word) (control word)
(router alert label) (router alert label)
------------ ------------------------------ -----------------------------
Backup PW for neighbor 1.1.1.1 PW ID 1
Create time: 20/11/2007 21:45:44 (00:52:54 ago)
Last time status changed: 20/11/2007 21:45:48 (00:52:49 ago)
Statistics:
packet totals: received 0, sent 0
byte totals: received 0, sent 0
This example shows that the PW type changes to Ethernet, which is Virtual Circuit (VC) type 5, on the interface when a double tag rewrite option is used.
RP/0/RSP0/CPU0:router# show l2vpn xconnect pw-class pw-class1 detail
Group VPWS, XC ac3, state is up; Interworking none
AC: GigabitEthernet0/7/0/5.3, state is up
Type VLAN; Num Ranges: 1
VLAN ranges: [12, 12]
MTU 1508; XC ID 0x2440096; interworking none
Statistics:
packets: received 26392092, sent 1336
bytes: received 1583525520, sent 297928
drops: illegal VLAN 0, illegal length 0
PW: neighbor 3.3.3.3, PW ID 3, state is up ( established )
PW class VPWS1, XC ID 0x2440096
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word disabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
Preferred path tunnel TE 3, fallback disabled
PW Status TLV in use
MPLS Local Remote
------------ ------------------------------ -----------------------------
Label 16147 21355
Group ID 0x120001c0 0x120001c0
Interface GigabitEthernet0/7/0/5.3 GigabitEthernet0/7/0/5.3
MTU 1508 1508
Control word disabled disabled
PW type Ethernet Ethernet
VCCV CV type 0x2 0x2
(LSP ping verification) (LSP ping verification)
VCCV CC type 0x6 0x6
(router alert label) (router alert label)
(TTL expiry) (TTL expiry)
------------ ------------------------------ -----------------------------
Incoming Status (PW Status TLV):
Status code: 0x0 (Up) in Notification message
Outgoing Status (PW Status TLV):
Status code: 0x0 (Up) in Notification message
MIB cpwVcIndex: 4294705365
Create time: 21/09/2011 08:05:01 (00:14:01 ago)
Last time status changed: 21/09/2011 08:07:01 (00:12:01 ago)
Statistics:
packets: received 1336, sent 26392092
bytes: received 297928, sent 1583525520
This example shows the sample output of a configured flow label:
RP/0/RSP0/CPU0:router# show l2vpn xconnect detail
Group g1, XC p1, state is up; Interworking none
AC: GigabitEthernet0/0/1/1, state is up
Type Ethernet
MTU 1500; XC ID 0x1000002; interworking none
Statistics:
packets: received 24688, sent 24686
bytes: received 1488097, sent 1487926
PW: neighbor 3.3.3.3, PW ID 2, state is up ( established )
PW class class1, XC ID 0x1000002
Encapsulation MPLS, protocol LDP
PW type Ethernet, control word disabled, interworking none
PW backup disable delay 0 sec
Sequencing not set
Flow label flags configured (Rx=1,Tx=1), negotiated (Rx=0,Tx=1)
This table describes the significant fields shown in the display.
Table 4 show l2vpn xconnect Command Field Descriptions
Field
Description
XConnect Group
Displays a list of all configured cross-connect groups.
Group
Displays the cross-connect group number.
Name
Displays the cross-connect group name.
Description
Displays the cross-connect group description. If no description is
configured, the interface type is displayed.
ST
State of the cross-connect group: up (UP) or down (DN).
To configure L2VPN pseudowire class transport mode, use the transport
mode command in L2VPN pseudowire class MPLS encapsulation mode. To
return to the default behavior, use the no form of this
command.
transportmode
{ ethernet | vlanpassthrough
}
notransportmode
{ ethernet | vlanpassthrough
}
Syntax Description
ethernet
Configures Ethernet port mode.
vlan
Configures VLAN tagged mode.
passthrough
Enables the pseudowires to pass through the incoming tags.
Command Default
None
Command Modes
L2VPN pseudowire class MPLS encapsulation
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Release 4.1.0
The variable passthrough was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Note
All L2VPN configurations can be deleted using the no l2vpn
command.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to configure Ethernet transport mode:
Enters pseudowire class submode to define a pseudowire class template.
xconnect group
To configure cross-connect groups, use the xconnect group
command in L2VPN configuration mode. To return to the default behavior, use the
no form of this command.
xconnectgroupgroup-name
noxconnectgroupgroup-name
Syntax Description
group-name
Configures a cross-connect group name using a free-format 32-character
string.
Command Default
None
Command Modes
L2VPN configuration
Command History
Release
Modification
Release 3.7.2
This command was introduced.
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Note
You can configure up to a maximum of 16K cross-connects per box.
Task ID
Task ID
Operations
l2vpn
read, write
Examples
The following example shows how to group all cross -connects for customer_atlantic:
RP/0/RSP0/CPU0:router# configureRP/0/RSP0/CPU0:router(config)# l2vpnRP/0/RSP0/CPU0:router(config-l2vpn)# xconnect group customer_atlantic