Professional Documents
Culture Documents
Layer 2 Transport and Tunneling (L2VPN) Application and Deployment
Layer 2 Transport and Tunneling (L2VPN) Application and Deployment
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 2
1
Objectives
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 3
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 4
2
Agenda
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 5
Access
Different Access Technologies Access
Different Core Solutions
Only Partial Integration
FR/ATM FR/ATM
Broadband ATM Broadband
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 6
3
Consolidated Core –
Supports…
Access
Different Access Technologies Access
Complete Integration
FR/ATM FR/ATM
Broadband Broadband
Ethernet Ethernet
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 7
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 8
4
What Is an L2VPN?
IETF’s L2VPN Logical Context
• An L2VPN is comprised of
switched connections
between subscriber endpoints
over a shared network. Non- SP Interconnection
Provider
subscribers do not have Edge
access to those same
endpoints. Remote Subscriber Location
SP Network
Provider
Edge
Pseudowire
FR Many subscriber
ATM
encapsulations
supportable
PPP HDLC
Ethernet
ACC-2001 Some L1 frame encapsulations are transportable under the framework of L2VPN. This
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. is acceptable since (unlike native L1) Frames can be dropped due to congestion. 9
L2VPN –
Data Messages
Opt.
Control MUX
Info
ID
Transported / Tunneled Outer Delivery Protocol
Protocol
5
Layer-2 Transport across MPLS
Directed LDP
Control
Connection Used for VC-Label Negotiation, Withdrawal, Error Notification
ACC-2001
L2 Payload:ATM, HDLC, PPP, Ethernet, Frame Relay, etc.
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 12
6
Agenda
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 13
L2VPN –
XConnect CLI Overview
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 14
7
L2TPv3 –
XConnect CLI Components
Example: ß L2TP-Class is optional
l2tp-class (optional) l2tp-class default
hostname PE3
- Defines Control Plane attributes
password 0 cisco
- Used to tweak defaults
cookie size 8
pseudowire-class vlan-hi-priority
pseudowire-class encapsulation l2tpv3
- Characteristics template for PWs ip local interface Loopback0
- Tunneling mechanism ip pmtu
interface FastEthernet5/1.500
AToM –
XConnect CLI Components
Example:
ldp enabled
mpls label protocol ldp
- Defines LDP as label protocol mpls ldp router-id loopback 0 force
- Globally defined
interface FastEthernet5/1.500
2 Ways to configure:
encapsulation dot1Q 500
- xconnect <target PE> service-policy input vlan -hi-priority
- mpls l2transport route <target PE> xconnect 172.18.255.3 1002 pw-class foo
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 16
8
L2TPv3 –
Example of FR with different priorities
frame-relay switching
Turn Frame Relay Switching On
!
pseudowire-class FR -CIR
encapsulation l2tpv3
sequencing both
Establish PW characteristics that
ip local interface Loopback0
reflect the service you wish to
ip tos value 5 provide.
!
Note: PW class is data plane only
pseudowire-class FR -NO-CIR
and the ToS values are in the outer
encapsulation l2tpv3 delivery header.
ip local interface Loopback0
ip tos value 0
!
connect fr-cir -1 ser2/0 500 l2transport Apply to correct DLCIs
xconnect 172.18.255.3 500 pw-class FR -CIR
connect fr-no-cir-1 ser2/0 501 l2transport
xconnect
ACC-2001 172.18.255.3 501 pw-class FR -NO-CIR
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 17
Platform Support
• 7200, 7500, 10720, 12000 – in S
• 1700, 2600, 3700, 7400 – in T
Cisco IOS Image
• 12.0(23)S ßService Provider Train
• 12.3(1)T ß Technology Train
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 18
9
Agenda
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 19
Things to Consider..
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 20
10
Service Level Agreements –
Why Important?
Layer-2 SLA
• FR / ATM customers
receive traditional SLA Service
Provider
• FR / ATM / Ethernet PE PE
access network may
enforce SLA
ATM
Frame Relay
• Pay-as-you-grow Ethernet CE
services can be CE
implemented for PPP / Site 2
HDLC
Site 1
• Service is typically
unmanaged
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 22
11
Service –
What Priority Options Do the SP Have?
BE
FE
DLCI C/R EA DLCI CN DE
CN
DA SA Type TAG L3 Data CRC
Service –
Precedence Equivalence: MPLS / IP
IP Packet MPLS Label
Outer
Delivery Data Label EXP S TTL
Header
Inner IP
Header
X X X y y 0
Class
DSCP
• IP Precedence is the most often used in determining different
traffic priorities (0 – 7)
• Most SPs implement 3 – 4 traffic classes (Best Effort à
Mission Critical)
• Enforce policies through shaping, marking, policing
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 24
12
Example –
What Are Common Service Requirements?
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 25
QoS –
What Tools Are Available?
13
Traffic Leaving Enterprise Network
Access
Network
CE PE CE PE
Access
Network
CE PE CE PE
Access CE PE
CE Network PE Output Policy Input Policy
Output Policy Input Policy Input Policy
<irrelevant> Policing
<irrelevant> Policing [Marking]
[Marking]
[Marking]
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 28
14
Traffic Leaving Service Provider Network
Access
Network
CE PE CE PE
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 29
Access
Network
CE PE CE PE
Access CE PE
CE Network PE Input Policy Output Policy
Input Policy Output Policy Output Policy
<irrelevant>
<irrelevant> Queuing (LLQ)
Queuing (LLQ) <optional>
Dropping (WRED) WRED
[Shaping] [shaping]
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 30
15
The Complete Picture
- WRED IP/MPLS based
- Per Interface level
- LLQ IP/MPLS based shaping
- QoS-Group LLQ
- Discard-Class WRED
- De-bit marking
- BECN/FECN marking
PW-VC
Traffic flow
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 31
L2VPN –
MQC Policing Example
Example:
class-map fr-dlci-100
• Match Traffic on L2 Information
match fr-dlci 100 • Set a Policy Map for the entire interface
class-map fr-dlci-101
match fr-dlci 101 • Define actions for access circuit
policy-map serial-3-1-in
class fr -dlci -100
police 256000 16000 16000 conform set -mpls-exp-transmit 3 /
exceed set-mpls-exp-transmit 2
class fr -dlci -333
police 128000 conform transmit exceed drop
interface Serial3/1
encapsulation frame-relay
• Apply to the Interface
service-policy input serial -3-1-in
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 32
16
AToM –
MPLS-TE w / FRR Highlights
MPLS-TE:
• Allows MPLS enabled cores to utilize optimized paths for
differing traffic requirements.
• Optimizes SPF-only routing behavior
• Can make sure underutilized links get used. (Equal/Unequal load
balancing)
17
What MPLS-TE Addresses
• Router A sees all links
Node
Node Next-Hop
Next-Hop Cost
Cost • Router A computes paths
BB B
B 10
10
C
C C
C 10
10 on properties other than
D
D
E
E
C
C
B
B
20
20
20
20
just shortest cost
F Tunnel 0 30
G Tunnel 1 30 • Like a L2 PVC, but no IGP
adjacency over the ‘PVC’!!
Router B
Router F
OC-3 OC-3
Router A Router E
DS3 Router G
b
40M
OC-3
OC-3 40Mb DS3
DS3
Router C Router D
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 35
MPLS FRR –
What Does this Mean to AToM?
You Can Minimize packet loss, thus increasing guarantees!
FR AToM PW FR
P1
P2 P3
CE1 PE1 PE2 CE1
Primary
Secondary
18
MPLS FRR –
What Is Required to Enabled it?
P1
Primary
Secondary
P2 P3
CE1 PE1 PE2 CE1
AToM –
FRR Protection: PW Configuration Ex
Primary 1.0.0.27 1.0.0.4
Backup
L1
19
MTU Calculation / ICMP PMTU
MTU Size:
POS POS
FR ~ 4470
FR X FR
POS ~ 4470
CE1 PE1 PE2 CE1
FE ~ 1500 POS FE
P
Inter -PoP
SLA –
How Do I Monitor Service?
1.0.0.27 1.0.0.4
Unmanaged
Managed
20
SLA –
SAA Configuration Example
1.0.0.27 1.0.0.4
Probe Packet 1
Packet 1 Response
Probe Packet 2
PE1 PE2
PE1(config)#rtr 200
PE1(config-rtr)#type jitter dest-ip 1.0.0.4 dest-port 99 num-packets 20 interval 20
PE1(config)#rtr schedule 1 life forever start-time now
PE2# conf t
PE2(config)#rtr responder
Add it Up..
21
Agenda
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 43
L2VPN Application –
Objectives
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 44
22
L2VPNs –
Network Consolidation
Provider Profile:
• Wireless services, updating internal infrastructure, no new
service creation
Problem:
• Next generation technology required build-out of new network
infrastructure
• Legacy services left too many overlapping networks to support,
maintain and operate.
• New high-speed network is underutilized
L2VPNs –
Pre - Network Consolidation
T1s T1s
HDLC HDLC
DS3 2G DS3
MSC MSC
MSC MSC
3G
OC-3 OC-3
23
Consolidation –
Migration Steps
Consolidation –
Migration Steps
CE1 FRR Link & Node
Protection
PE2
PE1
P
PE1(Configuration): PE2(Configuration):
pseudowire-class HDLC_CEs pseudowire-class HDLC_CEs
encapsulation mpls encapsulation mpls
preferred-path interface Tunnel10 disable -.. preferred-path interface Tunnel10 disable -..
Serial1/0 Serial1/0.
encapsulation hdlc encapsulation hdlc
xconnect 1.0.0.1 100 pw-class HDLC_CEs xconnect 1.0.0.1 100 pw-class HDLC_CEs
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 48
24
L2VPNs –
Post - Network Consolidation
Serial Connections DS3
terminated locally on
MPLS enabled Edge
Router
MSC MSC
Consolidation –
Benefit Summary
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 50
25
L2VPNs –
Recurring Cost Reduction
Provider Profile:
• Tier 2 Service Provider, regulatory limitation prevents owning
copper last mile; ILEC leased. Providing Frame Relay, Leased
Line services
Problem:
• Recurring costs from ILEC make aggressive competition
impossible.
• Wireless bypass alone doesn’t allow existing customer’s
service protection
• Limited ability to expand.
L2VPNs –
PRE - Recurring Cost Reduction
Customer Tier 1 SP Tier 2 SP Tier 1 SP Customer
CPE
ATM/FR CPE
NTU NTU
DTE DTE
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 52
26
Cost Reduction –
Migration Steps
Cost Reduction –
Migration Steps
RTR
1751 1.0.0.1
RTR#
1.0.0.27
rtr 1
7200 type jitter dest-ipaddr 1.0.0.27 /
1.0.0.1
dest-port 2020 request-data-size 1000
1751(Configuration): rtr schedule 1 life forever start-time now
pseudowire-class l2tpv3_1
7200(Configuration):
encapsulation l2tpv3
pseudowire-class l2tpv3_1
ip pmtu
encapsulation l2tpv3
sequencing
ip pmtu
Serial1/0
sequencing
encapsulation hdlc
Serial1/0
xconnect 1.0.0.1 100 pw-class l2tpv3_1
encapsulation hdlc
rtrACC-2001
responder
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved.
xconnect 1.0.0.27 100 pw-class l2tpv3_1 54
27
L2VPNs –
Recurring Cost Reduction
Customer Tier 2 SP
CPE Wireless Access ATM/FR
U-PE
DTE
DCE
CPE
U-PE
Cust. Prem. MGX Edge - FRSM
L2TPv3 Tunnel
Frame Relay Encap
Cost Reduction –
Benefit Summary
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 56
28
L2VPNs –
New Service Offering
Provider Profile:
• Tier 1 Service Provider with traditional voice & data
services.
Problem:
• Existing L3 data network is massively underutilized
• Upgrading legacy L2 ATM/FR network with switches
is undesirable.
• Would like to offer more competitive L2 options.
• Possibly migrate FR switches to IP backbone.
Q: How can the Service Provider take advantage of the
unused bandwidth on their existing L3 packet infrastructure?
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 57
L2VPNs –
PRE - New Service Offering
Separate IP Core
ATM/FR
10%
3%
9%
8% 7% Europe
6%
11% 3%
12%
Asia
OC-192
OC-48
• Internet & IP-VPN traffic only OC-12
29
New Service –
Preparation
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 59
New Service –
QoS Configuration
7507
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 60
30
L2VPNs –
POST - New Service Offering
IP Core
FR
FR FRoL2TPv3
Europe
FR
Asia
FRoL2TPv3
OC-192
OC-48
• Resist purchasing legacy switches OC-12
• New L2 services offered cost effectively
• Drive up utilization on L3 network
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved.
South America 61
Consolidation –
Benefit Summary
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 62
31
L2VPN –
Summary
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 63
Any Questions ?
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 64
32
What’s Next?
Follow-on Sessions:
• RST-2062 – Deploying MPLS Traffic Engineering
• RST-2081 – Deploying Quality of Service for Converged Networks
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 65
Thank You!
ematkovi@cisco.com
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 66
33
Please Complete Your
Evaluation Form
Session ACC-2001
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 67
ACC-2001
8309_06_2003_X © 2003, Cisco Systems, Inc. All rights reserved. 68
34