MPLS Access Lists

Configure MPLS access lists

MPLS access lists enable filtering of MPLS packets based on MPLS label and sending filtered packets to configured redirect interfaces.

Procedure


Step 1

Enter global configuration mode using the configure terminal command.

Example:

switch# configure terminal
switch(config)#

Step 2

Enable parsing of MPLS packets using the [no]install feature-set mpls command.

This is mandatory to filter MPLS packets based on MPLS label.

Example:

switch(config)# install feature-set mpls
switch(config)# feature-set mpls
switch(config)# feature mpls segment-routing

Step 3

Configure mpls-access list with filtering based on incoming outer MPLS label using the mpls access list mpls-acl command.

In the example, MPLS packets with incoming label 1600 are matched and redirected to Ethernet1/15.

Example:

switch(config)# mpls access list mpls-acl
switch(config-mpls-acl)# 10 permit mpls 1600 any redirect Ethernet1/15

Step 4

(Optional) Copy the running configuration to the startup configuration using the copy running-config startup-config command.

Example:

switch(config)# copy running-config startup-config

Verification of MPLS access lists configuration

Use the show command listed in the table to verify the output that displays information about the MPLS access list configuration.

Command

Purpose

show mpls access lists

Displays information about MPLS access lists.

Configuration example for MPLS access lists

This example shows how to configure MPLS access lists.

switch# configure terminal
switch(config)# install feature-set mpls
switch(config)# feature-set mpls
switch(config)# feature mpls segment-routing
switch(config)# mpls access list mpls-acl
switch(config-mpls-acl)# 10 permit mpls 1600 any redirect Ethernet1/15
switch(config)# copy running-config startup-config