Release 15.4SY Supervisor Engine 6T Software Configuration Guide

Step 1

enable

Example:

Device> enable

Enables privileged EXEC mode. Enter your password if prompted.

Step 2

configure terminal

Example:

Device# configure terminal

Enters the global configuration mode.

Step 3

router lisp

Example:

Device(config)# router lisp

Enters Locator ID/Separation Protocol (LISP) configuration mode.

Step 4

site site-name

Example:

Device(config-router-lisp)# site FD_Default

Configures a LISP site on a control-plane device and enters LISP site configuration mode.

Step 5

authentication-key key

Example:

Device(config-router-lisp-site)# authentication-key examplekey

Configures the password used to create the Hash-based Message Authentication Code (HMAC) Secure Hash Algorithm (SHA-1) hash for authenticating the map-register messages sent by edge devices when registering with the control-plane device.

Step 6

eid-prefix instance-id <value> <prefix> accept-more-specifics

Example:

Device(config-router-lisp-site)# eid-prefix 10.1.0.0/16 accept-more-specifics

Device(config-router-lisp-site)# eid-prefix instance-id 10 10.1.0.0/16 accept-more-specifics

Configures a host-pool or a list of endpoint identifier (EID) prefixes that are allowed in a map-register message sent by the edge device when registering with the control-plane device. Specifies that an EID prefix that is more specific than the EID prefix configured is accepted and tracked. The instance-id keyword includes the specified instance ID (the instance ID used by the context you want to include in the host-pool) with the host-pool when it is registered with the control-plane device.

Step 7

exit

Example:

Device(config-router-lisp-site)# exit

Exits LISP site configuration mode and returns to LISP configuration mode.

Step 8

Repeat Step 4 to Step 7 to configure another LISP site.

Step 9

ipv4 map-server

Example:

Device(config-router-lisp)# ipv4 map-server

Configures a device to act as an IPv4 control-plane device.

Step 10

ipv4 map-resolver

Example:

Device(config-router-lisp)# ipv4 map-resolver

In the fabric domain, the control-plane device acts as the map-server and the map-resolver. Enables the control-plane device with IPv4 LISP map resolver capabilities.

Step 11

end

Example:

Device(config-router-lisp)# end

Exits LISP configuration mode and returns to privileged EXEC mode.

Step 1

enable

Example:

Device> enable

Enables privileged EXEC mode. Enter your password if prompted.

Step 2

configure terminal

Example:

Device# configure terminal

Enters the global configuration mode.

Step 3

router lisp

Example:

Device(config)# router lisp

Enters Locator ID/Separation Protocol (LISP) configuration mode.

Step 4

site site-name

Example:

Device(config-router-lisp)# site FD_Default

Configures a LISP site on a control-plane device and enters LISP site configuration mode.

Step 5

authentication-key key

Example:

Device(config-router-lisp-site)# authentication-key examplekey

Configures the password used to create the Hash-based Message Authentication Code (HMAC) Secure Hash Algorithm (SHA-1) hash for authenticating the map-register messages sent by edge devices when registering with the control-plane device.

Step 6

eid-prefix instance-id <value> <ipv6_prefix>

Example:

Device(config-router-lisp-site)# eid-prefix 10:1::/64

Device(config-router-lisp-site)# eid-prefix instance-id 10 10:1::/64

Configures a host-pool or a list of endpoint identifier (EID) prefixes that are allowed in a map-register message sent by the edge device when registering with the control-plane device. Specifies that an EID prefix that is more specific than the EID prefix configured is accepted and tracked. The instance-id keyword includes the specified instance ID (the instance ID used by the context you want to include in the host-pool) with the host-pool when it is registered with the control-plane device.

Step 7

exit

Example:

Device(config-router-lisp-site)# exit

Exits LISP site configuration mode and returns to LISP configuration mode.

Step 8

Repeat Step 4 to Step 7 to configure another LISP site.

Step 9

ipv6 map-server

Example:

Device(config-router-lisp)# ipv6 map-server

Configures a device to act as an IPv6 control-plane device.

Step 10

ipv6 map-resolver

Example:

Device(config-router-lisp)# ipv6 map-resolver

In the fabric domain, the control-plane device acts as the map-server and the map-resolver. Enables the control-plane device with IPv6 LISP map resolver capabilities.

Step 11

end

Example:

Device(config-router-lisp)# end

Exits LISP configuration mode and returns to privileged EXEC mode.

Step 1

enable

Example:

Device> enable

Enables privileged EXEC mode. Enter your password if prompted.

Step 2

configure terminal

Example:

Device# configure terminal

Enters the global configuration mode.

Step 3

router lisp

Example:

Device(config)# router lisp

Enters LISP configuration mode.

Step 4

encapsulation vxlan

Example:

Device(config-router-lisp)# encapsulation vxlan

Specifies VXLAN-based encapsulation.

Step 5

eid-table vrf <vrf_name> instance-id <value>

Example:

Device(config-router-lisp)# eid-table vrf abcd instance-id 10

Associates the non-default EID table with the specified instance ID.

Step 6

eid-table default instance-id instance-id

Example:

Device(config-router-lisp)# eid-table default instance-id 0

Associates the default EID table with the specified instance ID.

Control-plane device messages include this instance ID along with the associated EID prefixes.

Step 7

map-cache eid-prefix map-request

Example:

Device(config-router-lisp)# map-cache 10.1.1.0/24 map-request

Configures a static IPv4 EID-to-RLOC mapping relationship by adding a map-cache with action send-map-request for the specified dynamic EID or host pool.

Step 8

ipv4 sgt

Example:

Device(config-router-lisp)# ipv4 sgt

Enables the transport of Security Group Tags (SGT) in the fabric. For more information on SGTs, see Cisco TrustSec Configuration Guide.

Step 9

ipv4 proxy-etr

Example:

Device(config-router-lisp)# ipv4 proxy-etr

Enables the border device service in the fabric domain.

Step 10

ipv4 proxy-itr ipv4 address

Example:

Device(config-router-lisp)# ipv4 proxy-itr 10.1.1.1

Configures the device to operate as an IPv4 proxy ingress tunnel router (PITR), and configures the interface IP address used as a source address for encapsulation of data packets. The IPv4 locator address is used as the source address for data packets or a map-request messages.

Step 11

ipv4 itr map-resolver ipv4 address

Example:

Device(config-router-lisp)# ipv4 itr map-resolver 10.1.1.2

Configures the map-resolver IP from where it needs to query the RLOC corresponding to destination EID IP

Step 12

exit

Example:

Device(config-router-lisp)# exit

Exits LISP configuration mode and enters global configuration mode.

Step 13

ip route ipv4-prefix next-hop

Example:

Device(config)# ip route 0.0.0.0 0.0.0.0 10.10.10.1

Configures an IPv4 static route.

Step 14

exit

Example:

Device(config)# exit

Exits global configuration mode and returns to privileged EXEC mode.

Step 1

enable

Example:

Device> enable

Enables privileged EXEC mode. Enter your password if prompted.

Step 2

configure terminal

Example:

Device# configure terminal

Enters the global configuration mode.

Step 3

router lisp

Example:

Device(config)# router lisp

Enters LISP configuration mode.

Step 4

encapsulation vxlan

Example:

Device(config-router-lisp)# encapsulation vxlan

Specifies VXLAN-based encapsulation.

Step 5

eid-table vrf <vrf_name> instance-id <value>

Example:

Device(config-router-lisp)# eid-table vrf abcd instance-id 10

Associates the non-default EID table with the specified instance ID.

Step 6

eid-table default instance-id instance-id

Example:

Device(config-router-lisp)# eid-table default instance-id 0

Associates the default EID table with the specified instance ID.

Control-plane device messages include this instance ID along with the associated EID prefixes.

Step 7

map-cache eid-prefix ipv6 address/subnet mask map-request

Example:

Device(config-router-lisp)# map-cache 10:1:1::/64 map-request

Configures a static IPv6 EID-to-RLOC mapping relationship by adding a map-cache with action send-map-request for the specified dynamic EID or host pool.

Step 8

ipv6 sgt

Example:

Device(config-router-lisp)# ipv6 sgt

Enables the transport of Security Group Tags (SGT) in the fabric. For more information on SGTs, see Cisco TrustSec Configuration Guide.

Step 9

ipv6 proxy-etr

Example:

Device(config-router-lisp)# ipv6 proxy-etr

Enables the border device service in the fabric domain.

Step 10

ipv6 proxy-itr ipv6 address

Example:

Device(config-router-lisp)# ipv6 proxy-itr 10.1.1.1

Configures the device to operate as an IPv6 proxy ingress tunnel router (PITR), and configures the interface IP address used as a source address for encapsulation of data packets. The IPv6 locator address is used as the source address for data packets or a map-request messages.

Step 11

ipv6 itr map-resolver ipv6 address

Example:

Device(config-router-lisp)# ipv6 itr map-resolver 10.1.1.2

Configures the map-resolver IP from where it needs to query the RLOC corresponding to destination EID IP

Step 12

exit

Example:

Device(config-router-lisp)# exit

Exits LISP configuration mode and enters global configuration mode.

Step 13

exit

Example:

Device(config)# exit

Exits global configuration mode and returns to privileged EXEC mode.