레이어 2 터널링 프로토콜(버전 3) 정적 방법 및 헤어피닝 방법 컨피그레이션 예

소개

이 문서에서는 L2TPv3(Layer 2 Tunneling Protocol Version 3) 정적 및 헤어피닝 방법에 대한 샘플 컨피그레이션을 제공합니다.

이 표에서는 L2TPv3에 대한 Cisco IOS^® 소프트웨어 릴리스 수정 지원에 대해 설명합니다.

L2TPv3 기능을 사용하려면 Cisco CEF(Express Forwarding)를 활성화해야 합니다. CEF가 활성화될 때까지 Xconnect 구성 하위 모드가 차단됩니다. Cisco 7500 Series와 같은 분산 플랫폼에서 세션이 설정되는 동안 CEF가 비활성화된 경우 CEF가 다시 활성화될 때까지 세션이 해제되고 중단됩니다. CEF를 활성화하려면 ip cef 또는 ip cef distributed 명령을 사용합니다.

루프백 인터페이스를 구성하기 위해 소스 IP 주소를 지정하는 것이 좋습니다. 루프백 인터페이스를 구성하지 않으면 라우터가 코어 연결 인터페이스에 구성된 모든 IP 주소일 수 있는 최적의 로컬 주소를 선택합니다. 이 컨피그레이션으로 제어 채널을 설정할 수 없습니다. 루프백 주소는 코어 네트워크에서 연결할 수 있어야 합니다.

사전 요구 사항

요구 사항

이 컨피그레이션을 시도하기 전에 다음을 숙지해야 합니다.

• L2TPv3: Layer 2 Tunnel Protocol 버전 3

사용되는 구성 요소

이 문서는 특정 소프트웨어 및 하드웨어 버전으로 한정되지 않습니다.

표기 규칙

문서 표기 규칙에 대한 자세한 내용은 Cisco 기술 팁 표기 규칙을 참조하십시오.

구성

이 섹션에는 이 문서에서 설명하는 기능을 구성하기 위한 정보가 표시됩니다.

참고: 이 문서에 사용된 명령에 대한 추가 정보를 찾으려면 명령 조회 도구(등록된 고객만 해당)를 사용합니다.

네트워크 다이어그램

이 문서에서는 다음 네트워크 설정을 사용합니다.

참고: 라우터 R2 및 R3은 공급자가 사용합니다. 라우터 R1, R4, R5 및 R6은 최종 고객입니다. L2TPv3을 사용하면 라우터 R4가 R5에 직접 연결된 것으로 보입니다. 라우터 R1과 라우터 R6 간의 연결도 마찬가지입니다.

구성

이 문서에서는 다음 구성을 사용합니다.

• IP 클라우드를 통한 정적 의사 전선 구성의 관련 부분은 2개의 단방향 터널이 구성된 R2 및 R3에서 찾을 수 있습니다.

• 헤어핀 의사 와이어 또는 로컬 스위칭(동일한 라우터의 한 포트에서 다른 포트로) 이 구성은 R2에서만 수행되며 라우터 R2에 있는 두 루프백을 가리키는 2개의 단방향 터널 구성으로 구성됩니다.

R2# show running-config 
Building configuration...
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R2
!
!
clock timezone EST 10
ip subnet-zero
ip cef
no ip domain-lookup
l2tp-class R2signal
 hello 10
 password 0 cisco
 cookie size 8
!
pseudowire-class wireR5R4
 encapsulation l2tpv3
 protocol l2tpv3 R2signal
 ip local interface Loopback0
 ip dfbit set
!
pseudowire-class wireR6R1
 encapsulation l2tpv3
 protocol l2tpv3 R2signal
 ip local interface Loopback1
 ip dfbit set
!
pseudowire-class wireR1R6
 encapsulation l2tpv3
 protocol l2tpv3 R2signal
 ip local interface Loopback2
 ip dfbit set
!
interface Loopback0
description Used by wireR5R4 for Static Connection
 ip address 2.2.2.2 255.255.255.255
 no ip directed-broadcast
!
interface Loopback1
description Used by wireR6R1 for Hair Pinning Connection
 ip address 2.2.2.6 255.255.255.255
 no ip directed-broadcast
!
interface Loopback2
description Used by wireR1R6 for Hair Pinning Connection
 ip address 2.2.2.1 255.255.255.255
 no ip directed-broadcast
!
interface Ethernet0/0
description Connection to R1
 no ip address
 no ip directed-broadcast
 xconnect 2.2.2.6 16 encapsulation l2tpv3 pw-class wireR1R6
!
interface Ethernet1/0
description Connection to Pretend Cloud.
 ip address 20.20.20.2 255.255.255.0
 no ip directed-broadcast
 no cdp enable
!
interface Ethernet2/0
description Connection to R5
 no ip address
 no ip directed-broadcast
 no cdp enable
 xconnect 3.3.3.3 12 encapsulation l2tpv3 pw-class wireR5R4
!
interface Ethernet3/0
description Connection to R6
 no ip address
 no ip directed-broadcast
 xconnect 2.2.2.1 16 encapsulation l2tpv3 pw-class wireR6R1
!
ip classless
ip route 3.3.3.3 255.255.255.255 20.20.20.3

!--- The other end of wireR5R4 loopback (3.3.3.3) must be
 

!--- reachable from this router. Hair Pinning loopbacks
 

!--- are reachable—there is no need for additional routes.

!
!
line con 0
 exec-timeout 0 0
 privilege level 15
line aux 0
line vty 0 4
 login
!
end

R3# show running-config 
Building configuration...
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R3
!
!
clock timezone EST 10
ip subnet-zero
ip cef
!
l2tp-class R3signal
 hello 10
 password 0 cisco
 cookie size 8
!
pseudowire-class wireR4R5
 encapsulation l2tpv3
 protocol l2tpv3 R3signal
 ip local interface Loopback0
 ip dfbit set
!
interface Loopback0
description Use by wireR4R5 for static connection
 ip address 3.3.3.3 255.255.255.255
 no ip directed-broadcast
!
interface Ethernet0/0
 ip address 20.20.20.3 255.255.255.0
 no ip directed-broadcast
!
interface Ethernet1/0
 no ip address
 no ip directed-broadcast
 no cdp enable
 xconnect 2.2.2.2 12 encapsulation l2tpv3 pw-class wireR4R5
!
ip classless
ip route 2.2.2.2 255.255.255.255 Ethernet0/0

!--- The other end of wireR4R5 loopback (3.3.3.3) must be
 

!--- reachable from this router.

!
line con 0
 exec-timeout 0 0
 privilege level 15
line aux 0
line vty 0 4
 login
!
end

고객 R1R6 터널(pseudo-wire) 최종 라우터 컨피그레이션:

R1# show running-config 
Building configuration...
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R1
!
!
clock timezone EST 10
ip subnet-zero
no ip domain-lookup
!
interface Ethernet0/0
 ip address 10.10.10.1 255.255.255.0
 no ip directed-broadcast
!
ip classless
!
line con 0
 exec-timeout 0 0
 privilege level 15
line aux 0
line vty 0 4
 login
!
end

R6# show running-config 
Building configuration...
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R6
!
!
clock timezone EST 10
ip subnet-zero
no ip domain-lookup
!
interface Ethernet0/0
 ip address 10.10.10.6 255.255.255.0
 no ip directed-broadcast
!
ip classless
!
line con 0
 exec-timeout 0 0
 privilege level 15
line aux 0
line vty 0 4
 login
!
end

고객 R4R5 터널(pseudo-wire) 최종 라우터 컨피그레이션:

R4# show running-config 
Building configuration...
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R4
!
!
ip subnet-zero
!
interface Ethernet0/0
 ip address 30.30.30.4 255.255.255.0
 no ip directed-broadcast
!
router ospf 1
 log-adjacency-changes
 network 30.30.30.0 0.0.0.255 area 0
!
ip classless
!
line con 0
 exec-timeout 0 0
 privilege level 15
line aux 0
line vty 0 4
 login
!
end

R5# show running-config 
Building configuration...
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R5
!
!
ip subnet-zero
!
interface Ethernet0/0
 ip address 30.30.30.5 255.255.255.0
 no ip directed-broadcast
!
router ospf 1
 log-adjacency-changes
 network 30.30.30.0 0.0.0.255 area 0
!
ip classless
!
line con 0
 exec-timeout 0 0
 privilege level 15
line aux 0
line vty 0 4
 login
!
end

다음을 확인합니다.

이 섹션에서는 컨피그레이션이 제대로 작동하는지 확인하는 데 사용할 수 있는 정보를 제공합니다.

R4# show ip ospf neighbor 
Neighbor ID  Pri  State     Dead Time   Address     Interface
30.30.30.5    1   FULL/DR   00:00:39    30.30.30.5  Ethernet0/0

R5# show ip ospf neighbor  
Neighbor ID  Pri  State     Dead Time   Address     Interface
30.30.30.4    1   FULL/BDR  00:00:38    30.30.30.4  Ethernet0/0


R1# show cdp neighbors 
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater
Device ID   Local Intrfce  Holdtme Capability Platform  Port ID
R6           Eth 0/0       158        R       7206VXR   Eth 0/0

일부 show 명령은 출력 인터프리터 툴 에서 지원되는데(등록된 고객만), 이 툴을 사용하면 show 명령 출력의 분석 결과를 볼 수 있습니다.

• show l2tun tunnel all - L2TPv3 세션의 현재 상태를 표시하고 로컬 및 원격 L2TP 호스트 이름, 집계 패킷 수 및 L2TP 제어 채널을 포함하여 현재 구성된 세션에 대한 정보를 표시하려면 EXEC 모드에서 show l2tun tunnel all 명령을 사용합니다.

  R2# show l2tun tunnel all
   Tunnel Information Total tunnels 3 sessions 3
  
  Tunnel id 54217 is up, remote id is 44186, 1 active sessions
       Tunnel state is established, time since change 00:12:07
       Tunnel transport is IP (115)
       Remote tunnel name is R2
       Internet Address 2.2.2.6, port 0
       Local tunnel name is R2
       Internet Address 2.2.2.1, port 0
       Tunnel domain is 
       VPDN group for tunnel is -
       L2TP class for tunnel is R2signal
       88 packets sent, 87 received
       10086 bytes sent, 11092 received
       Control Ns 76, Nr 74
       Local RWS 1024 (default), Remote RWS 1024 (max)
       Tunnel PMTU checking disabled
       Retransmission time 1, max 1 seconds
       Unsent queuesize 0, max 0
       Resend queuesize 0, max 2
       Total resends 0, ZLB ACKs sent 72
       Current nosession queue check 0 of 5
       Retransmit time distribution: 0 0 0 0 0 0 0 0 0 
       Sessions disconnected due to lack of resources 0
  
  Tunnel id 44186 is up, remote id is 54217, 1 active sessions
       Tunnel state is established, time since change 00:12:08
       Tunnel transport is IP (115)
       Remote tunnel name is R2
       Internet Address 2.2.2.1, port 0
       Local tunnel name is R2
       Internet Address 2.2.2.6, port 0
       Tunnel domain is 
       VPDN group for tunnel is -
       L2TP class for tunnel is R2signal
       87 packets sent, 88 received
       11092 bytes sent, 10086 received
       Control Ns 74, Nr 76
       Local RWS 1024 (default), Remote RWS 1024 (max)
       Tunnel PMTU checking disabled
       Retransmission time 1, max 1 seconds
       Unsent queuesize 0, max 0
       Resend queuesize 0, max 1
       Total resends 0, ZLB ACKs sent 74
       Current nosession queue check 0 of 5
       Retransmit time distribution: 0 0 0 0 0 0 0 0 0 
       Sessions disconnected due to lack of resources 0
  
  Tunnel id 24124 is up, remote id is 48735, 1 active sessions
       Tunnel state is established, time since change 00:11:00
       Tunnel transport is IP (115)
       Remote tunnel name is R3
       Internet Address 3.3.3.3, port 0
       Local tunnel name is R2
       Internet Address 2.2.2.2, port 0
       Tunnel domain is 
       VPDN group for tunnel is -
       L2TP class for tunnel is R2signal
       155 packets sent, 158 received
       15230 bytes sent, 17586 received
       Control Ns 69, Nr 67
       Local RWS 1024 (default), Remote RWS 1024 (max)
       Tunnel PMTU checking disabled
       Retransmission time 1, max 1 seconds
       Unsent queuesize 0, max 0
       Resend queuesize 0, max 2
       Total resends 1, ZLB ACKs sent 65
       Current nosession queue check 0 of 5
       Retransmit time distribution: 0 0 1 0 0 0 0 0 0 
       Sessions disconnected due to lack of resources 0
  
  R3# show l2tun tunnel all
   Tunnel Information Total tunnels 1 sessions 1
  
  Tunnel id 48735 is up, remote id is 24124, 1 active sessions
       Tunnel state is established, time since change 00:12:36
       Tunnel transport is IP (115)
       Remote tunnel name is R2
       Internet Address 2.2.2.2, port 0
       Local tunnel name is R3
       Internet Address 3.3.3.3, port 0
       Tunnel domain is 
       VPDN group for tunnel is -
       L2TP class for tunnel is R3signal
       180 packets sent, 176 received
       19766 bytes sent, 17316 received
       Control Ns 77, Nr 79
       Local RWS 1024 (default), Remote RWS 1024 (max)
       Tunnel PMTU checking disabled
       Retransmission time 1, max 1 seconds
       Unsent queuesize 0, max 0
       Resend queuesize 0, max 1
       Total resends 1, ZLB ACKs sent 78
       Current nosession queue check 0 of 5
       Retransmit time distribution: 0 0 1 0 0 0 0 0 0 
       Sessions disconnected due to lack of resources 0

• show l2tun session all - 레이어 2 세션의 현재 상태를 표시하고 L2TPv3 제어 채널에 대한 프로토콜 정보를 표시하려면 EXEC 모드에서 show l2tun session all 명령을 사용합니다.

  R2# show l2tun session all
   Session Information Total tunnels 3 sessions 3
  Session id 19996 is up, tunnel id 54217
       Call serial number is 1492400000
       Remote tunnel name is R2
       Internet address is 2.2.2.6
       Session is L2TP signalled
       Session state is established, time since change 00:15:37
       112 Packets sent, 111 received
       12309 Bytes sent, 13312 received
       Receive packets dropped:
        out-of-order: 0
        total: 0
       Send packets dropped:
        exceeded session MTU: 0
        total: 0
       Session vcid is 16
       Session Layer 2 circuit, type is Ethernet, name is Ethernet0/0
       Circuit state is UP
       Remote session id is 19999, remote tunnel id 44186
       DF bit on, ToS reflect disabled, ToS value 0, TTL value 255
       Session cookie information:
       local cookie, size 8 bytes, value 6E 47 8C 4A BA BF 7E A4 
       remote cookie, size 8 bytes, value 7F 9F 65 C4 C7 5B 57 FF 
       FS cached header information:
       encap size = 32 bytes
       00000000 00000000 00000000 00000000
       00000000 00000000 00000000 00000000
       
       Sequencing is off
  Session id 19999 is up, tunnel id 44186
       Call serial number is 1492400000
       Remote tunnel name is R2
       Internet address is 2.2.2.1
       Session is L2TP signalled
       Session state is established, time since change 00:15:38
       111 Packets sent, 112 received
       13312 Bytes sent, 12309 received
       Receive packets dropped:
        out-of-order: 0
        total: 0
       Send packets dropped:
        exceeded session MTU: 0
        total: 0
       Session vcid is 16
       Session Layer 2 circuit, type is Ethernet, name is Ethernet3/0
       Circuit state is UP
       Remote session id is 19996, remote tunnel id 54217
       DF bit on, ToS reflect disabled, ToS value 0, TTL value 255
       Session cookie information:
       local cookie, size 8 bytes, value 7F 9F 65 C4 C7 5B 57 FF 
       remote cookie, size 8 bytes, value 6E 47 8C 4A BA BF 7E A4 
       FS cached header information:
       encap size = 32 bytes
       00000000 00000000 00000000 00000000
       00000000 00000000 00000000 00000000
       
       Sequencing is off
  Session id 20005 is up, tunnel id 24124
       Call serial number is 1492400002
       Remote tunnel name is R3
       Internet address is 3.3.3.3
       Session is L2TP signalled
       Session state is established, time since change 00:14:29
       200 Packets sent, 204 received
       19650 Bytes sent, 22100 received
       Receive packets dropped:
        out-of-order: 0
        total: 0
       Send packets dropped:
        exceeded session MTU: 0
        total: 0
       Session vcid is 12
       Session Layer 2 circuit, type is Ethernet, name is Ethernet2/0
       Circuit state is UP
       Remote session id is 17834, remote tunnel id 48735
       DF bit on, ToS reflect disabled, ToS value 0, TTL value 255
       Session cookie information:
       local cookie, size 8 bytes, value 22 09 F1 E9 BC 8C 00 94 
       remote cookie, size 8 bytes, value 39 DD CB 00 9C 4B 1C 8C 
       FS cached header information:
       encap size = 32 bytes
       00000000 00000000 00000000 00000000
       00000000 00000000 00000000 00000000
       
       Sequencing is off
  
  R3# show l2tun session all
   Session Information Total tunnels 1 sessions 1
  Session id 17834 is up, tunnel id 48735
       Call serial number is 1492400002
       Remote tunnel name is R2
       Internet address is 2.2.2.2
       Session is L2TP signalled
       Session state is established, time since change 00:23:53
       327 Packets sent, 322 received
       33758 Bytes sent, 31248 received
       Receive packets dropped:
        out-of-order: 0
        total: 0
       Send packets dropped:
        exceeded session MTU: 0
        total: 0
       Session vcid is 12
       Session Layer 2 circuit, type is Ethernet, name is Ethernet1/0
       Circuit state is UP
       Remote session id is 20005, remote tunnel id 24124
       DF bit on, ToS reflect disabled, ToS value 0, TTL value 255
       Session cookie information:
       local cookie, size 8 bytes, value 39 DD CB 00 9C 4B 1C 8C 
       remote cookie, size 8 bytes, value 22 09 F1 E9 BC 8C 00 94 
       FS cached header information:
       encap size = 32 bytes
       00000000 00000000 00000000 00000000
       00000000 00000000 00000000 00000000
       
       Sequencing is off

문제 해결

이 섹션에서는 컨피그레이션 문제를 해결하는 데 사용할 수 있는 정보를 제공합니다.

이러한 L2TPv3 기능 관련 버그에 대한 자세한 내용은 Bug Tool Kit(등록된 고객만 해당)를 사용할 수 있습니다.

• CSCdz01467(등록된 고객만 해당) —해결됨(R) L2TPv3: 터널 패킷 카운터에 부정확한 카운트가 표시됩니다.

• CSCeb56061(등록된 고객만 해당) —해결됨(R) L2TPv3: L2TPv3oETH는 좀비 터널을 생성합니다.

• CSCeb35497(등록된 고객만 해당) —해결됨(R) L2TPv3 시퀀스: Tx Seqnum은 16777215 이후 1로 감싸지 않습니다.

• CSCdz48481(등록된 고객만 해당) —해결됨(R) L2TPv3 헤어피닝 컨피그레이션은 더 이상 지원되지 않습니다.

• CSCec00463(등록된 고객만 해당) —해결됨(R) L2TPv3: Gig Ethernet Port mode decap failure(기가비트 이더넷 포트 모드 디맵 실패)

• CSCec44356(등록된 고객만 해당) —해결됨(R) C10720: L2TPv3 헤어피닝에서 Match 802.1P가 손상되었습니다.

관련 정보

• IP 라우팅 프로토콜 지원 페이지
• IP 라우팅 지원 페이지
• Technical Support - Cisco Systems