6.3. Configuring a VPRN Service with CLI

This section provides information to configure Virtual Private Routed Network (VPRN) services using the command line interface.

6.3.1. Basic Configuration

The following fields require specific input (there are no defaults) to configure a basic VPRN service:

  1. Customer ID (refer to Configuring Customer Accounts)
  2. Specify interface parameters

The following is a sample configuration output of a VPRN service.

*A:ALA-1>config>service>vprn# info
----------------------------------------------
            vrf-import "vrfImpPolCust1"
            vrf-export "vrfExpPolCust1"
            autonomous-system 10000
            route-distinguisher 10001:1
            auto-bind ldp
            vrf-target target:10001:1
            interface "to-ce1" create
                address 10.1.0.1/24
                exit
                sap 1/1/10:1 create
                    ingress
                        qos 100
                    exit
                        filter ip 10
                    exit
                exit
                exit
            exit
            static-route 10.5.0.0/24 next-hop 10.1.1.2
            bgp
                router-id 10.0.0.1
                group "to-cel"
                    export "vprnBgpExpPolCust1"
                    peer-as 65101
                    neighbor 10.1.1.2
                    exit
                exit
            exit
            no shutdown
----------------------------------------------
*A:ALA-1>config>service>vprn#

6.3.2. Common Configuration Tasks

This section provides a brief overview of the tasks that must be performed to configure a VPRN service and provides the syntax commands.

  1. Associate a VPRN service with a customer ID.
  2. Define an autonomous system (optional).
  3. Define a route distinguisher (mandatory).
  4. Define VRF route-target associations or VRF import/export policies.
  5. Create an interface.
  6. Define SAP parameters on the interface.
    1. Select nodes and ports.
    2. Optional - select QoS policies other than the default (configured in config>qos context).
    3. Optional - select filter policies (configured in config>filter context).
    4. Optional - select accounting policy (configured in config>log context).
  7. Define BGP parameters (optional).
    1. BGP must be enabled in the config>router>bgp context.
  8. Enable the service.

6.3.3. Configuring VPRN Components

6.3.3.1. Creating a VPRN Service

Use the following syntax to create a VRPN service. A route distinguisher must be defined in order for VPRN to be operationally active.

config>service# vprn service-id [customer customer-id]
— route-distinguisher [ip-address:number1 | asn:number2]
— description description-string
— no shutdown
—

The following is a sample VPRN service configuration output.

*A:ALA-1>config>service# info
----------------------------------------------
...
        vprn 1 customer 1 create
            route-distinguisher 10001:0
            no shutdown
        exit
...
----------------------------------------------
*A:ALA-1>config>service>vprn# 
 

6.3.3.2. Configuring Global VPRN Parameters

Refer to VPRN Services Command Reference for CLI syntax to configure VPRN parameters.

The following is a sample VPRN service with configured parameters.

*A:ALA-1>config>service# info
----------------------------------------------
...
        vprn 1 customer 1 create
            vrf-import "vrfImpPolCust1"
            vrf-export "vrfExpPolCust1"
            autonomous-system 10000
            route-distinguisher 10001:1
            exit
            no shutdown
        exit
...
----------------------------------------------
*A:ALA-1>config>service# 

6.3.3.2.1. Configuring Router Interfaces

See the 7210 SAS-M, T, R6, R12, Mxp, Sx, S Router Configuration Guide for command descriptions and syntax information to configure router interfaces.

The following is a sample router interface configuration output.

ALA48>config>router# info
#------------------------------------------
echo "IP Configuration"
#------------------------------------------
...
        interface "if1"
            address 10.2.2.1/24
        exit
        interface "if2"
            address 10.49.1.46/24
            port 1/1/34
        exit
        interface "if3"
            address 10.11.11.1/24
        exit
...
#------------------------------------------
ALA48>config>router# 

6.3.3.2.2. Configuring VPRN Protocols - BGP

The autonomous system number and router ID configured in the VPRN context only applies to that particular service.

The minimal parameters that should be configured for a VPRN BGP instance are:

  1. Specify an autonomous system number for the router. See Configuring Global VPRN Parameters.
  2. Specify a router ID - Note that if a new or different router ID value is entered in the BGP context, then the new values takes precedence and overwrites the VPRN-level router ID. See Configuring Global VPRN Parameters.
  3. Specify a VPRN BGP peer group.
  4. Specify a VPRN BGP neighbor with which to peer.
  5. Specify a VPRN BGP peer-AS that is associated with the above peer.

VPRN BGP is administratively enabled upon creation. Minimally, to enable VPRN BGP in a VPRN instance, you must associate an autonomous system number and router ID for the VPRN service, create a peer group, neighbor, and associate a peer ASN. There are no default VPRN BGP groups or neighbors. Each VPRN BGP group and neighbor must be explicitly configured.

All parameters configured for VPRN BGP are applied to the group and are inherited by each peer, but a group parameter can be overridden on a specific basis. VPRN BGP command hierarchy consists of three levels:

  1. The global level
  2. The group level
  3. The neighbor level

For example:

CLI Syntax:
config>service>vprn>bgp# (global level)
group (group level)
neighbor (neighbor level)

Note that the local-address must be explicitly configured if two systems have multiple BGP peer sessions between them for the session to be established.

For more information about the BGP protocol, refer to the 7210 SAS-M, T, R6, R12, Mxp, Sx, S Router Configuration Guide.

6.3.3.2.2.1. Configuring VPRN BGP Group and Neighbor Parameters

A group is a collection of related VPRN BGP peers. The group name should be a descriptive name for the group. Follow your group, name, and ID naming conventions for consistency and to help when troubleshooting faults.

All parameters configured for a peer group are applied to the group and are inherited by each peer (neighbor), but a group parameter can be overridden on a specific neighbor-level basis.

After a group name is created and options are configured, neighbors can be added within the same autonomous system to create IBGP connections and/or neighbors in different autonomous systems to create EBGP peers. All parameters configured for the peer group level are applied to each neighbor, but a group parameter can be overridden on a specific neighbor basis.

6.3.3.2.2.2. VPRN BGP CLI Syntax

Use the syntax to configure VPRN BGP parameters (BGP Configuration Commands).

The following is a sample VPRN BGP configuration output.

*A:ALA-1>config>service# info 
----------------------------------------------
...
        vprn 1 customer 1 create
            vrf-import "vrfImpPolCust1"
            vrf-export "vrfExpPolCust1"
            autonomous-system 10000
            route-distinguisher 10001:1
            auto-bind ldp
            vrf-target target:10001:1
            interface "to-ce1" create
                address 10.1.0.1/24
                sap 1/1/10:1 create
                    ingress
                        
                        qos 100
                    exit
                        
                        filter ip 6
                    exit
                exit
            exit
            static-route 10.5.0.0/24 next-hop 10.1.1.2
            bgp
                router-id 10.0.0.1
                group "to-cel"
                    export "vprnBgpExpPolCust1"
                    peer-as 65101
                    neighbor 10.1.1.2
                    exit
                exit
            exit
            spoke-sdp 2 create
            exit
            no shutdown
        exit
...
----------------------------------------------
*A:ALA-1>config>service#

6.3.3.2.3. Configuring a VPRN Interface

Interface names associate an IP address to the interface, and then associate the IP interface with a physical port. The logical interface can associate attributes like an IP address, port, Link Aggregation Group (LAG) or the system.

There are no default interfaces.

Note that you can configure a VPRN interface as a loopback interface by issuing the loopback command instead of the sap sap-id command. The loopback flag cannot be set on an interface where a SAP is already defined and a SAP cannot be defined on a loopback interface.

When using mtrace/mstat in a Layer 3 VPN context then the configuration for the VPRN should have a loopback address configured which has the same address as the core instance's system address (BGP next-hop).

Refer to OSPF Configuration Commands (IPv4 only) for CLI commands and syntax.

The following is a sample VPRN interface configuration output.

*A:7210 SAS>config>service>vprn>if# info detail
----------------------------------------------
                no description
                no address
                no mac
                arp-timeout 14400
                no allow-directed-broadcasts
                icmp
                    mask-reply
                    redirects 100 10
                    unreachables 100 10
                    ttl-expired 100 10
                exit
                no arp-populate
                dhcp
                    shutdown
                    no description
                    proxy-server
                        shutdown
                        no emulated-server
                        no lease-time
                    exit
                    no option
                    no server
                    no trusted
                    no lease-populate
                    no gi-address
                    no relay-plain-bootp
                    no use-arp
                exit
                no authentication-policy
                no ip-mtu
                no host-connectivity-verify
                no delayed-enable
                no bfd
                ipcp
                    no peer-ip-address
                    no dns
                exit
                no proxy-arp-policy
                no local-proxy-arp
                no remote-proxy-arp
                no shutdown
----------------------------------------------
*A:7210 SAS>config>service>vprn>if#

6.3.3.2.4. Configuring a VPRN Interface SAP

A SAP is a combination of a port and encapsulation parameters which identifies the service access point on the interface and within the 7210 SAS. Each SAP must be unique within a router. A SAP cannot be defined if the interface loopback command is enabled.

When configuring VPRN interface SAP parameters, a default QoS policy is applied to each ingress and egress SAP. Additional QoS policies and scheduler policies must be configured in the config>qos context. Filter policies are configured in the config>filter context and must be explicitly applied to a SAP. There are no default filter policies.

The following is a sample VPRN interface SAP configuration output.

*A:ALA-1>config>service# info
----------------------------------------------
...
        vprn 1 customer 1 create
            vrf-import "vrfImpPolCust1"
            vrf-export "vrfExpPolCust1"
            autonomous-system 10000
            route-distinguisher 10001:1
            auto-bind ldp
            vrf-target target:10001:1
            interface "to-ce1" create
                address 10.1.0.1/24
                sap 1/1/10:1 create
                    ingress
                        
                        qos 100
                    exit
                       
                        filter ip 6
                    exit
                exit
            exit
            static-route 6.5.0.0/24 next-hop 10.1.1.2
            spoke-sdp 2 create
            exit
            no shutdown
        exit
...
----------------------------------------------
*A:ALA-1>config>service#
 
 
 

6.3.4. Configuring VPRN Protocols - OSPF

In a VPRN interface, each VPN routing instance is isolated from any other VPN routing instance, and from the routing used across the backbone. OSPF can be run with any VPRN, independently of the routing protocols used in other VPRNs, or in the backbone itself. For more information about the OSPF protocol, see the 7210 SAS-M, T, R6, R12, Mxp, Sx, S Routing Protocols Guide.

CLI Syntax: config>service>vprn>ospf#

6.3.4.1. VPRN OSPF CLI Syntax

Refer to Configuring VPRN Protocols - OSPF for CLI syntax to configure VPRN parameters.

The following is a sample VPRN OSPF configuration output.

A:duta>config>service>vprn# info
----------------------------------------------
            router-id 10.10.10.1
            autonomous-system 100
            route-distinguisher 65510:1
            auto-bind ldp
            vrf-target target:65520:1
            interface "to-ixia-1" create
                address 10.1.1.1/24
                sap 1/1/9:1 create
                exit
            exit
            interface "to-ixia-2" create
                address 10.1.2.1/24
                sap 1/1/9:12 create
                exit
            exit
            ospf
                super-backbone
                vpn-domain 0005 0000.0000.0001
                export "from_mbgp_to_ospf"
                area 0.0.0.0
                    interface "to-ixia-2"
                        mtu 1500
                        no shutdown
                    exit
                    sham-link "to-ixia-1" 10.1.1.1
                    exit
                    sham-link "to-ixia-1" 111.11.1.1
                    exit
                exit
            exit
            no shutdown
----------------------------------------------
A:duta>config>service>vprn#

For more information about the OSPF protocol, refer to the 7210 SAS-M, T, R6, R12, Mxp, Sx, S Routing Protocols Guide.

6.3.5. Service Management Tasks

This section describes the service management tasks.

6.3.5.1. Modifying VPRN Service Parameters

Use the syntax to modify VPRN parameters (VPRN Services Command Reference).

The following is a sample VPRN service creation output.

*A:ALA-1>config>service# info
----------------------------------------------
...
vprn 1 customer 1 create
            shutdown
            vrf-import "vrfImpPolCust1"
            vrf-export "vrfExpPolCust1"
            maximum-routes 2000
            autonomous-system 10000
            route-distinguisher 10001:1
            interface "to-ce1" create
                address 10.1.1.1/24
                sap 1/1/10:1 create
                exit
            exit
            static-route 10.5.0.0/24 next-hop 10.1.1.2
            bgp
                router-id 10.0.0.1
                group "to-ce1"
                    export "vprnBgpExpPolCust1"
                    peer-as 65101
                    neighbor 10.1.1.2
                    exit
                exit
            exit
            spoke-sdp 2 create
            exit
        exit
...
----------------------------------------------
*A:ALA-1>config>service>vprn#

6.3.5.2. Deleting a VPRN Service

An VPRN service cannot be deleted until SAPs and interfaces are shut down and deleted. If protocols and/or a spoke-SDP are defined, they must be shut down and removed from the configuration as well.

Use the following syntax to delete a VPRN service.

CLI Syntax:
config>service#
[no] vprn service-id [customer customer-id]
shutdown
[no] interface ip-int-name
shutdown
[no] sap sap-id]
[no] bgp
shutdown
[no] spoke-sdp sdp-id
[no] shutdown

6.3.5.3. Disabling a VPRN Service

Use the following syntax to shutdown a VPN service without deleting any service parameters.

CLI Syntax:
config>service#
vprn service-id [customer customer-id]
shutdown

Example: config>service# vprn 1 config>service>vprn# shutdown config>service>vprn# exit

*A:ALA-1>config>service# info
----------------------------------------------
...
        vprn 1 customer 1 create
            shutdown
            vrf-import "vrfImpPolCust1"
            vrf-export "vrfExpPolCust1"
            autonomous-system 10000
            route-distinguisher 10001:1
            auto-bind ldp
            vrf-target target:10001:1
            interface "to-ce1" create
                address 11.1.0.1/24
                sap 1/1/10:1 create
                    ingress
                        
                        qos 100
                    exit
filter ip 6
                    exit
                exit
            exit
            static-route 10.5.0.0/24 next-hop 10.1.1.2
            bgp
                router-id 10.0.0.1
                group "to-cel"
                    export "vprnBgpExpPolCust1"
                    peer-as 65101
                    neighbor 10.1.1.2
                    exit
                exit
            exit
            spoke-sdp 2 create
            exit
        exit
...
----------------------------------------------
*A:ALA-1>config>service#

6.3.5.4. Re-enabling a VPRN Service

Use the following syntax to re-enable a VPRN service that was shut down.

CLI Syntax:
config>service#
vprn service-id [customer customer-id]
no shutdown