4.1.1. ATM VLL for End-to-End ATM Service

ATM VLLs (Apipe) provide a point-to-point ATM service between users connected to 7705 SAR nodes or other SR routers over an IP/MPLS network (see Figure 35). User ATM traffic is connected to a 7705 SAR either directly or through an ATM access network. In both cases, an ATM PVC—for example, a virtual channel (VC) or a virtual path (VP)—is configured on the 7705 SAR. VPI/VCI translation is supported in the ATM VLL.

The ATM pseudowire (PW) is initiated using targeted LDP signaling as specified in RFC 4447, Pseudowire Setup and Maintenance using LDP; alternatively, it can be configured manually. The 7705 SAR supports MPLS, GRE, and IP as the tunneling technologies for transporting ATM PWs.

The 7705 SAR receives standard UNI/NNI cells on the ATM SAP, or on a number of SAPs belonging to a SAP aggregation group, which are then encapsulated into a pseudowire packet using N-to-1 cell mode encapsulation in accordance with RFC 4717. See ATM PWE3 N-to-1 Cell Mode Encapsulation for more information about N-to-1 cell mode encapsulation.

In addition to supporting N-to-1 cell mode encapsulation, ATM VLL service supports cell concatenation, control word (CW), SAP-to-SAP (local service), and SAP-to-SDP binding (distributed service). See SAP Encapsulations and Pseudowire Types for more information. ATM SAP-to-SAP service is not supported when N > 1; see ATM SAP-to-SAP Service for information about ATM SAP-to-SAP services.

ATM VLL optimizes the ATM cell from a 53-byte cell to a 52-byte packet by removing the header error control (HEC) byte at the near end. The far end regenerates the HEC before switching ATM traffic to the attached circuit.

Figure 35:  ATM VLL for End-to-End ATM Service 

4.1.2. ATM Virtual Trunk Over an IP/MPLS Packet-Switched Network

ATM virtual trunks (VT), also known as ATM transparent cell transport in RFC 4446, provide a transparent trunking function for user and control traffic between two ATM switches over an ATM pseudowire. ATM control traffic includes PNNI signaling and routing traffic, ILMI traffic, and F4/F5 OAM traffic. Figure 36 shows two switches labeled ATM 2 and ATM 4 that appears to be directly connected over an ATM link because the virtual trunk emulates a direct connection between the ATM switches.

Virtual trunks are supported on 7705 SAR 4-port OC3/STM1 Clear Channel Adapter cards with ports configured for OC3 or STM1 and 4-port DS3/E3 Adapter cards with ports configured for DS3 and E3.

All cells arriving on a port configured for virtual trunking on the 7705 SAR are fed to a single ATM pseudowire. The VPI range cannot be configured. No VPI/VCI translation is performed on ingress or egress. Cell order is maintained within a VT. SAP to SAP service is supported. The two ATM ports can therefore be on the same PE node.

By carrying all cells from all VPIs making up the VT in one pseudowire, a transport solution is provided that is both robust and operationally efficient since the entire VT can be managed as a single entity from the NSP NFM-P (single point for configuration, status, alarms, statistics).

ATM virtual trunks use PWE3 N:1 ATM cell mode encapsulation to provide cell-mode transport, supporting all AAL types, over the MPLS network. Cell concatenation on a pseudowire packet is supported. The SDP type can be MPLS or GRE.

The ATM pseudowire is initiated using targeted LDP (T-LDP) signaling (defined in draft-ietfpwe3-control-protocol-xx.txt, Pseudowire Setup and Maintenance using LDP). In this application, there is no ATM signaling on the 7705 SAR gateway nodes since both endpoints of the MPLS network are configured by the network operator. ATM signaling between the ATM nodes is passed transparently over the VT (along with user traffic) from one ATM port on a 7705 SAR PE to another ATM port on a remote (or the same) 7705 SAR PE.

OAM signaling functions in the same way as user traffic in that OAM cells are transported transparently and no special action is taken when F4 or F5 OAM cells are received at the SAP ingress or egress. As well, all ILMI messages are transported transparently between two endpoints. In the case of a pseudowire failure (for example, label withdrawal, loss of reachability, loss of tunnel to the eLER), the virtual trunk service SAP port is not taken down.

Figure 36:  ATM Virtual Trunk Over IP/ MPLS Packet-Switched Network 

4.1.3. ATM SAP-to-SAP Service

ATM VLLs can be configured with both endpoints (SAPs) on the same 7705 SAR. This is referred to as an ATM SAP-to-SAP or local ATM service. An ATM SAP-to-SAP service emulates local ATM switching between two ATM endpoints on the 7705 SAR. Both ingress and egress traffic is legacy ATM traffic. The two SAPs can be any combination of supported ATM encapsulation ports, channel-groups, or IMA bundles.

Note: ATM SAP-to-SAP connections are supported on any combination of the following: IMA group T1/E1 ASAP port E3/DS3 port OC3/STM1 port. The OC3 port can be configured for clear channel or channelized service.

Note: ATM SAP-to-SAP connections are not supported for pseudowire packets using N-to-1 cell mode encapsulation where N > 1.

4.1.4. ATM Traffic Management Support

The 7705 SAR supports the ATM Forum Traffic Management Specification Version 4.1.

Topics in this section include:

4.1.4.2. ATM Access Egress Queuing and Shaping

The 7705 SAR provides a per-SAP queuing architecture on the 16-port T1/E1 ASAP Adapter card, 32-port T1/E1 ASAP Adapter card, 4-port DS3/E3 Adapter card, and 4-port OC3/STM1 Clear Channel Adapter card. After the ATM pseudowire is terminated at the access egress point, all the ATM cells are mapped to default queue 1, and queuing is performed on a per-SAP basis.

Access ingress and access egress traffic management features are identical for SAP-to-SAP and SAP-to-SDP applications.

Note: The ATM access egress shaping configuration in a SAP egress QoS policy is ignored when that policy is assigned to an ATM SAP. The shaping of the egress cell stream is controlled by the atm-td-profile command. If the atm-td-profile is not configured, the default atm-td-profile is in effect.

For more information on ATM access egress queuing and scheduling, refer to the 7705 SAR Quality of Service Guide.

4.1.5. Control Word

ATM VLLs support an optional control word. The control word contains protocol control information and can be enabled to guarantee ordered cell delivery for ATM (Apipe) pseudowire service. See Pseudowire Control Word for more information.

4.2.1. Cpipe Service Overview

Cpipe service is the Nokia implementation of TDM PW VLL as defined in the IETF PWE3 working group.

The 7705 SAR can support TDM circuit applications that are able to transport delay-sensitive TDM traffic over a packet network. For example, in the case of cell site aggregation, Cpipe services provide transport service for 2G connectivity between the base transceiver station and the base station controller, and for 3G backhaul applications (for example, EVDO traffic from T1/E1 ports with MLPPP). Cpipe services over MPLS or GRE tunnels are supported.

The 2G traffic is transported encapsulated in a TDM VLL over the packet switched network (PSN). The entire T1/E1 frame or part of a frame (n × 64 kb/s) is carried as a TDM VLL over the PSN. At the far end, the transport layer frame structure is regenerated when structured circuit emulation is used, or simply forwarded as part of the payload when unstructured circuit emulation is used. The 3G UMTS R99 traffic uses ATM/IMA as the transport protocol. The IMA sessions are terminated at the site by the 7705 SAR and the 3G ATM traffic is transported across the PSN through the use of ATM VLLs (PWE3).

4.2.2. TDM SAP-to-SAP Service

TDM VLLs can be configured with both endpoints (SAPs) on the same 7705 SAR. This is referred to as TDM SAP-to-SAP or local TDM service. TDM SAP-to-SAP emulates a TDM multiplexing and switching function on the 7705 SAR.

A TDM SAP-to-SAP connection is set up in the 7705 SAR and a pseudowire is configured between the two endpoints.

Note: TDM SAP-to-SAP connections are supported between any T1/E1 port or channel that is configured for access mode and circuit emulation service and another port or channel with the same configuration (endpoint type, bit rate [number of DS0s in a channel group], payload size, CAS enabled/disabled, and RTP enabled/disabled).

4.2.3. Cpipe Service Modes

Cpipe services support unstructured circuit emulation mode (SAToP) for DS3, E3, DS1, and E1 circuits as per RFC 4553 and structured circuit emulation mode (CESoPSN) for n × 64 kb/s timeslots in DS1 and E1 circuits as per RFC 5086.

The 7705 SAR supports MEF 8, which allows both structured and unstructured emulation of TDM services across Epipes, also known as Circuit Emulation Services over Ethernet (CESoETH). See MEF 8 for more information about CESoETH.

Topics in this section include:

4.2.3.1. Unstructured Mode (SAToP)

Structure-agnostic TDM over Packet (SAToP) is an unstructured circuit emulation mode used for the transport of unstructured TDM or structured TDM (where the structure is ignored).

Note: The word “agnostic” is used in RFC 4553, but it is not used in the literal sense. The meaning of agnostic in this case is “unaware or independent”; therefore, structure-agnostic is used to mean structure-unaware or structure-independent.

As a structure-unaware or structure-independent service, SAToP service does not align to any framing; the framing mode for the port is set to unframed. For structured TDM, SAToP disregards the bit sequence and TDM structure in order to transport the entire signal over a PSN as a pseudowire.

SAToP also supports asymmetric delay control (ADC). See Asymmetric Delay Control for information.

4.2.3.3. SAToP Teleprotection Interface

The 8-port C37.94 Teleprotection card supports the SAToP teleprotection interface (TPIF) VC type, making it possible to transport the entire C37.94 signal, which is 2.048 Mb/s. Because this transport rate is the same rate as an E1 circuit, the encapsulation is as per RFC 4553. The SAToP TPIF VC type extends the current capability to transport n x 64 kb/s channels within the C37.94 frame using CESoPSN.

The 8-port C37.94 Teleprotection card supports a maximum of four clear channel C37.94 ports for SAToP service. The card consists of four pairs of ports (ports 1/2, 3/4, 5/6, and 7/8). Only the odd-numbered port in each pair can be configured for SAToP, unframed C37.94. If a port is configured for SAToP, the even-numbered port cannot be used for framed or unframed service.

The SAToP TPIF VC has a configurable payload size and a configurable jitter buffer size. For information about configuring the payload size and jitter buffer, see Packet Payload Size and Jitter Buffer.

The SAToP TPIF VC also supports asymmetric delay control (ADC). See Asymmetric Delay Control for information.

Note: SAToP TPIF VCs are not supported on the 8-port Voice & Teleprotection card.

4.2.3.4. Structured Mode (CESoPSN)

Structure-aware circuit emulation is used for the transport of structured TDM, taking at least some level of the structure into account. By selecting only the necessary n × 64 kb/s timeslots to transport, bandwidth usage is reduced or optimized (compared to a full DS1 or E1). Full DS1s or E1s can be transported by selecting all the timeslots in the DS1 or E1 circuit. Framing bits (DS1) or FAS (E1) are terminated at the near end and reproduced at the far end.

The 7705 SAR supports CESoPSN with and without Channel Associated Signaling (CAS) for DS1 and E1.

When CESoPSN with CAS is selected, the ABCD bits are coded into the T1 or E1 multiframe packets, transported within the TDM PW, and reconstructed in the T1 or E1 multiframe at the far end for each timeslot.

CAS includes four signaling bits (A, B, C, and D) in the messages sent over a voice trunk. These messages provide information such as the dialed digits and the call state (whether on-hook or off-hook).

The mechanism for E1 CAS is described in ITU-T G.732. When configured for E1 CAS, timeslot 17 carries the signaling information for the timeslots used for voice trunking. Each channel requires four signaling bits, so grouping 16 E1 frames into a multiframe allows the signaling bits for all 30 channels to be trunked.

As shown in Figure 37, timeslot 1 of all frames within the E1 multiframe is reserved for alignment, alarm indication, and CRC. For Frame 0, timeslot 17 is reserved for multiframe alignment bits. For the remaining 15 frames, timeslot 17 contains ABCD bits for two channels.

Note: For E1 CAS, timeslots are numbered 1 to 32 on the 7705 SAR.

Figure 37:  E1 Framing for CAS Support in an E1 Multiframe 

For T1 CAS, the signaling bits are transferred using Robbed Bit Signaling (RBS), where the least significant bit in the channel is used periodically to transport these bits instead of voice data. T1 CAS is supported when extended superframe format (ESF) or superframe format (SF) framing is configured. ESF framing uses a 24-frame multiframe and transfers all four signaling bits (ABCD). SF framing uses a 12-frame multiframe and transfers only the AB bits. The signaling bits are carried in the least significant bit of the following frames:

1. A bit in frame 6
2. B bit in frame 12
3. C bit in frame 18
4. D bit in frame 24

When CESoPSN with CAS is selected, the ABCD bits are decoded from the incoming E1/T1 multiframe, transferred within the TDM PW, and reconstructed in the E1/T1 multiframe at the far end for every DS0 channel. CAS can be configured on a per-T1/E1 basis or on a per-DS0/64 kb/s channel basis.

In previous releases, when a Cpipe was configured for CESoPSN with CAS, the T1 ports at each end of the Cpipe had to be configured for the same framing format: either ESF or SF. If the framing formats did not match, a SapParamMismatch alarm was raised.

The 7705 SAR now supports mixed framing formats for the T1 ports on a Cpipe configured for CESoPSN with CAS; that is, one port can be configured for ESF framing and the other port for SF framing.

If the ingress port is an ESF-framed T1 port, when the packets arrive at the egress port, the ABCD bits from the ingress ESF SAP are sent out as AB bits in two consecutive superframes on the egress SF SAP. The CD bits from the ingress ESF SAP are mapped as AB bits in the second SF frame.

If the ingress port is an SF-framed T1 port, when the packets arrive at the egress port, the AB bits from every second SF frame from the ingress SF SAP are repeated twice as the ABCD bits of an egress ESF frame. The AB bits from the interlacing SF frames are dropped.

ESF and SF framing interoperability is supported on DS1 (T1) ports or channels on the following hardware:

1. 16-port T1/E1 ASAP Adapter card
2. 32-port T1/E1 ASAP Adapter card
3. 2-port OC3/STM1 Channelized Adapter card
4. 4-port DS3/E3 Adapter card
5. 4-port OC3/STM1 / 1-port OC12/STM4 Adapter card
6. 4-port T1/E1 and RS-232 Combination module (supported on the 7705 SAR-H)
7. 7705 SAR-A (variant with T1/E1 ports)
8. 7705 SAR-M (variants with T1/E1 ports)
9. 7705 SAR-X

Table 22 shows the structure of a T1 ESF multiframe that uses RBS. The structure of a T1 SF multiframe is based on 12 frames and only the A and B bits are available.

Table 22:  T1 Framing for CAS (RBS) Support in a T1 ESF Multiframe 

Frame Number	F Bit				Bit Numbers in Each Channel Timeslot		Signaling Channel Designation  4
	Bit Number within Multiframe	Assignments
		FAS  1	DL  2	CRC  3	For Character Signal  4	For Signaling  4
1	1	—	m	—	1-8	—	—
2	194	—	—	e1	1-8	—	—
3	387	—	m	—	1-8	—	—
4	580	0	—	—	1-8	—	—
5	773	—	m	—	1-8	—	—
6	966	—	—	e2	1-7	8	A
7	1159	—	m	—	1-8	—	—
8	1352	0	—	—	1-8	—	—
9	1545	—	m	—	1-8	—	—
10	1738	—	—	e3	1-8	—	—
11	1931	—	m	—	1-8	—	—
12	2124	1	—	—	1-7	8	B
13	2317	—	m	—	1-8	—	—
14	2510	—	—	e4	1-8	—	—
15	2703	—	m	—	1-8	—	—
16	2896	0	—	—	1-8	—	—
17	3089	—	m	—	1-8	—	—
18	3282	—	—	e5	1-7	8	C
19	3475	—	m	—	1-8	—	—
20	3668	1	—	—	1-8	—	—
21	3861	—	m	—	1-8	—	—
22	4054	—	—	e6	1-8	—	—
23	4247	—	m	—	1-8	—	—
24	4440	1	—	—	1-7	8	D

Notes:

1. FAS = frame alignment signal (....001011.....)
2. DL = 4 kb/s data link (m represents message bits)
3. CRC = CRC-6 block check field (e1 to e6 represent check bits)
4. Only applicable for CAS

4.2.4. TDM PW Encapsulation

TDM circuits are MPLS-encapsulated as per RFC 4553 (SAToP) and RFC 5086 (CESoPSN). (see Figure 38 and Figure 39).

For GRE tunnels, the same encapsulations shown in Figure 39 are used, but GRE tunnel headers are used instead of MPLS tunnel headers.

Figure 38:  SAToP MPLS Encapsulation 

Figure 39:  CESoPSN MPLS Encapsulation 

Figure 40 shows the format of the CESoPSN TDM payload (with and without CAS) for packets carrying trunk-specific n × 64 kb/s service.

Figure 40:  CESoPSN Packet Payload Format for Trunk-Specific n x 64 kb/s (With and Without CAS Transport) 

For CESoPSN without CAS, select the packet size so that an integer number of frames are transported. That is, if n timeslots per frame are to be encapsulated in a TDM PW, then the packet size must be a multiple of n (where n is not equal to 1). For example, if n = 4 timeslots, then the packet size can be 8, 12, 16, and so on. If only one timeslot per frame is being transported, the packet size must be an even number.

For CESoPSN with CAS, the packet size is an integer number of frames. A single T1/E1 port can have a mix of CAS and non-CAS traffic in each DS0/64 kb/s channel. You must configure the relevant T1/E1 port or channel group for CAS signal mode before provisioning the TDM PW with CAS or the system will disallow the signal mode configuration. The extra bytes for ABCD (CAS) signaling bits are not included when setting the packet size.

For a single T1/E1 port that contains a mix of CAS and non-CAS signaling, all the non-CAS channel Cpipes inherit the CAS channel restriction concerning 24/16 frames for payload size. For a T1 port, the payload size is equal to the number of CAS and/or non-CAS timeslots × 24 frames/multiframe × n multiframes, where n = 1 to 8. For an E1 port, the payload size is equal to the number of CAS and/or non-CAS timeslots × 16 frames/multiframe × n multiframes, where n =1 to 8.

Note: The extra bytes for CAS signaling bits must be included when setting the service-mtu size. See Structured T1/E1 CES with CAS for more information.

4.2.5. Circuit Emulation Parameters and Options

Cpipe services support unstructured circuit emulation mode (SAToP) for DS3, E3, DS1, and E1 circuits as per RFC 4553, and structured circuit emulation mode (CESoPSN) for n × 64 kb/s timeslots in DS1 and E1 circuits as per RFC 5086.

Table 23 lists the adapter cards, modules, and chassis that support SAToP and CESoPSN.

See Service Support for further information on circuit emulation VLL services.

The following parameters and options are described in this section:

4.2.5.1. Unstructured

Unstructured CES is configured by choosing satop-t1, satop-e1, satop-t3, satop-e3, or satop-tpif as the vc-type when creating a Cpipe service. For DS1, E1, and TPIF unstructured circuit emulation, the framing parameter of the port must be set to ds1-unframed, e1-unframed, and unframed (respectively) because SAToP service ignores the underlying framing. Additionally, channel group 1 must contain all 24 or 32 timeslots, which is configured automatically when channel group 1 is created.

For DS1, E1, DS3, and E3 circuit emulation, the payload packet size is configurable and must be an integer value between 64 and 1514 octets and a multiple of 32. The payload packet size affects the packet efficiency and packetization delay. Table 24 shows the default values for packet size and packetization delay. See Packet Payload Size for more information.

Note: When using SAToP to transport DS1 traffic, the framing bit (bit 193) in the DS1 overhead is included and packed in the payload and sent over the PSN. If the underlying framing is ESF, the Facility Data Link (FDL) channel is transported over the Cpipe as part of the SAToP service. Regardless of the underlying framing, the framing parameter of the port must be set to unframed.

Table 24:  Unstructured Payload Defaults 

Circuit	Payload Size (Octets)	Packetization Delay (ms)
DS1	192	1.00
E1	256	1.00
DS3	1024	0.183
E3	1024	0.238

4.2.5.3. Structured T1/E1 CES with CAS

Structured circuit emulation with CAS is supported for T1 and E1 circuits.

Structured CES with CAS service is configured by choosing cesopsn-cas as the vc-type when creating a Cpipe service. The DS1 or E1 service on the port associated with the Cpipe SAP should be configured to support CAS (via the signal-mode {cas} command) before configuring the Cpipe service to support DS1 or E1 with CAS. Refer to the 7705 SAR Interface Configuration Guide for information on configuring signal mode.

For n × DS0 and n × 64 kb/s structured circuit emulation with CAS, the implementation is almost identical to that of CES without CAS. When CAS operation is enabled, timeslot 16 (channel 17) cannot be included in the channel group on E1 carriers. Since the CAS in-band method is used, separate PW support for CAS is not provided.

When CAS is enabled, the packet size is based on the number of multiframes per packet and whether the circuit is configured for E1 or T1. Payload size is user-configurable to correspond to the desired integer number of multiframes. The 7705 SAR supports up to 8 multiframes, where a multiframe contains 24 frames for T1 and 16 frames for E1. Therefore, the payload size = number of timeslots × 24 (T1) or 16 (E1) frames per multiframe × number of multiframes. For example, the payload size for a T1 line (24 frames) using 2 timeslots and 8 multiframes is 384 bytes (384 = (2 × 24) × 8).

Multiple multiframes are supported on the following cards and platforms:

1. 6-port E&M Adapter card (see note below)
2. 16-port T1/E1 ASAP Adapter card
3. 32-port T1/E1 ASAP Adapter card
4. 7705 SAR-A (variant with T1/E1 ports)
5. 7705 SAR-M (variants with T1/E1 ports)
6. 7705 SAR-X

Note: If the 6-port E&M Adapter card is configured for A-Law companding, the E&M ports support 16 (E1) frames per multiframe. If the card is configured for Mu-Law companding, the ports support 24 (T1) frames per multiframe.

Table 26 shows the default payload sizes based on the number of timeslots.

For CAS, the signaling portion adds (n/2) bytes (n is an even integer) or ((n+1)/2) bytes (n is odd) to the packet, where n is the number of timeslots in the channel group. You do not include the additional signaling bytes when setting the TDM payload size. However, the operating system includes the additional bytes in the total packet payload, and the total payload must be accounted for when setting the service-mtu size. Continuing the example above, since n = 4, the total payload is 64 octets plus (4/2 = 2) CAS octets, or 66 octets. Refer to Figure 40 to see the structure of the CES with CAS payload.

CES fragmentation is not supported.

Note: If you configure the service-mtu size to be smaller than the total payload size (payload plus CAS bytes), then the Cpipe will not become operational. This must be considered if you change the service-mtu from its default value.

Table 26:  Default Values for the Payload Size for T1 and E1 CESoPSN with CAS 

Number of Timeslots	T1			E1
	Number of Frames per Packet	Payload Size (Octets)	Packetization Delay (ms)	Number of Frames per Packet	Payload Size (Octets)	Packetization Delay (ms)
1	24	24	3.00	16	16	2.00
2	24	48	3.00	16	32	2.00
3	24	72	3.00	16	48	2.00
4	24	96	3.00	16	64	2.00
5	24	120	3.00	16	80	2.00
6	24	144	3.00	16	96	2.00
7	24	168	3.00	16	112	2.00
8	24	192	3.00	16	128	2.00
9	24	216	3.00	16	144	2.00
10	24	240	3.00	16	160	2.00
11	24	264	3.00	16	176	2.00
12	24	288	3.00	16	192	2.00
13	24	312	3.00	16	208	2.00
14	24	336	3.00	16	224	2.00
15	24	360	3.00	16	240	2.00
16	24	384	3.00	16	256	2.00
17	24	408	3.00	16	272	2.00
18	24	432	3.00	16	288	2.00
19	24	456	3.00	16	304	2.00
20	24	480	3.00	16	320	2.00
21	24	504	3.00	16	336	2.00
22	24	528	3.00	16	352	2.00
23	24	552	3.00	16	368	2.00
24	24	576	3.00	16	384	2.00
25	NA	NA	NA	16	400	2.00
26	NA	NA	NA	16	416	2.00
27	NA	NA	NA	16	432	2.00
28	NA	NA	NA	16	448	2.00
29	NA	NA	NA	16	464	2.00
30	NA	NA	NA	16	480	2.00

4.2.5.5. Jitter Buffer

A circuit emulation service uses a jitter buffer to ensure that received packets are tolerant to packet delay variation (PDV). The selection of jitter buffer size must take into account the size of the TDM-encapsulated packets (payload size). A properly configured jitter buffer provides continuous play-out, thereby avoiding discards due to overruns and underruns (packets arriving too early or too late). The maximum receive jitter buffer size is configurable for each SAP configured for circuit emulation. The range of values is from 1 to 250 ms in increments of 1 ms.

4.2.5.5.1. Configuration and Design Considerations

Determining the best configuration value for the jitter buffer may require some adjustments to account for the requirements of your network, which can change PDV as nodes are added or removed.

For each circuit, the maximum receive jitter buffer is configurable. Play-out from this buffer must start when the buffer is 50% full, in order to give an operational PDV equal to half the maximum buffer size. The supported range is 1 to 250 ms in increments of 1 ms. The buffer size must be set to at least 3 times the packetization delay and no greater than 32 times the packetization delay. Use a buffer size (in ms) that is equal to or greater than the peak-to-peak PDV expected in the network used by circuit emulation service. For example, for a PDV of ±5 ms, configure the jitter buffer to be at least 10 ms.

Note: The jitter buffer setting and payload size (packetization delay) interact such that it may be necessary for the operating system to adjust the jitter buffer setting in order to ensure no loss of packets. Thus, the configured jitter buffer value may not be the value used by the system. Use the show>service>id service-id>all command to show the effective PDVT (packet delay variation tolerance). If asymmetric delay control is enabled (asym-delay-control), it must be enabled on both ends of the Cpipe and the jitter buffer size must match on both ends of the Cpipe; otherwise, a service parameter mismatch state occurs and the service is brought down.

The following values are the default jitter buffer times for structured circuits without CAS, where N is the number of timeslots:

1. for N = 1, the default is 32 ms
2. for 2 ≤ N ≤ 4, the default is 16 ms
3. for 5 ≤ N ≤ 15, the default is 8 ms
4. for N ≥ 16, the default is 5 ms

For CESoPSN with CAS, the default jitter buffer is 12 ms for T1 and 8 ms for E1.

Jitter buffer overrun and underrun counters are available for statistics and can raise an alarm (optional) while the circuit is operational. For overruns, excess packets are discarded and counted. For underruns, an all-ones pattern is sent for unstructured circuits and an all-ones or a user-defined pattern is sent for structured circuits (based on configuration).

The circuit status and statistics can be displayed using the show command.

4.2.5.6. Asymmetric Delay Control

If there is high jitter in the network, the last packet for initialization of the circuit emulation service may arrive early or late, resulting in a jitter buffer latency that is different from the expected configured jitter buffer setting (time associated with 50% jitter buffer size). The latency difference between each direction of the TDM PW is known as asymmetric latency, and because some applications (for example, power industry networks) require a very low latency difference, it must be controlled.

Asymmetric delay control (ADC) is used to control the asymmetric latency contributed by the jitter buffer. When the asym-delay-control command is enabled, a special startup sequence is triggered when the TDM PW is initially started or is restarted after being brought down (due to faults such as packet overflow, packet underflow, or the port going down).

Upon startup, a configurable number of TDM PW packets are analyzed. During this analysis period, the access port transmits an all-ones pattern (for the 8-port Voice & Teleprotection card or 8-port C37.94 Teleprotection card) or the configured idle-payload-fill value (for the other port types). Refer to the 7705 SAR Interface Configuration Guide for information on the idle-payload-fill command. The service is considered to be down during this period.

If any packet loss is detected during the analysis period, the analysis is restarted. If no packet loss is detected, the average jitter buffer latency is computed. Based on the difference between the average latency and the expected latency of the jitter buffer size, the network processor will either:

1. drop a number of octets based on the difference (if the measured average is higher than expected)
2. add a number of dummy octets based on the difference (if the measured average is lower than expected); the dummy octets are based on the idle-payload-fill value of the channel or port

Note: ADC can only reduce asymmetry in the jitter buffer. It does not reduce any asymmetry that may exist in the network path. Because of this, the network must be engineered to maintain symmetrical latency: use explicit-path LSPs with strict hops do not use MPLS FRR because it may change the latency characteristics of a single direction without changing the other direction ensure that both directions of the TDM PW traverse the same path end to end With ADC, care must be taken when designing the network to prevent a situation where an error recovery mechanism would result in different MPLS paths in the two directions of the Cpipe, between the two SAPs across the network. If different paths are used, latencies may be different, causing asymmetry. To avoid this situation, the 7705 SAR supports path redundancy for ADC. See ADC for Redundant Paths.

Optionally, the ADC analysis can be set to repeat at configured time intervals after the service is up. This analysis is done with live traffic (that is, not with all-ones or the idle-payload-fill value). If the difference between the calculated average latency and the expected latency is greater than the threshold-repeat value, octets are added or dropped as necessary.

On-demand ADC allows users to initiate a one-time ADC analysis and correction on a live service using the tools>perform>service>id>sap command. Similar to the ADC repeat function, ADC uses the threshold-repeat value to determine if octets need to be added or dropped.

If ADC is enabled, it must be enabled on both ends of the Cpipe; otherwise, a service parameter mismatch state occurs and the service is brought down. Jitter buffer size is also included in the set of parameters that will cause a service parameter mismatch if the value is not the same at both ends of the Cpipe. This prevents the operator from changing the jitter buffer size, which would immediately change the latency symmetry of the Cpipe service.

As well, Cpipes using ADC must have the same card and port type on both ends of the Cpipe. Mismatched card/port configuration is not blocked in the CLI or in SNMP but must be avoided; otherwise, differential delay will be introduced caused by different framer delays on the cards/ports.

ADC can only be enabled for Cpipes configured as CESoPSN without CAS, SAToP TPIF, or SAToP (applies only to E1 circuits on the 16-port T1/E1 ASAP Adapter card or the 32-port T1/E1 ASAP Adapter card). If ADC is enabled, ACR, DCR, and RTP cannot be enabled on the port.

The following adapter cards, modules, and platforms support ADC:

1. 4-port T1/E1 and RS-232 Combination module (RS-232 channels) on the 7705 SAR-H
2. 8-port Voice & Teleprotection card (G.703 (codir) and C37.94 (TPIF) channels) on the 7705 SAR-8 Shelf V2 and 7705 SAR-18
3. 8-port C37.94 Teleprotection card (C37.94 (TPIF) channels) on the 7705 SAR-8 Shelf V2 and 7705 SAR-18
4. 12-port Serial Data Interface cards (RS-232, X.21, and V.35 on all 12-port Serial Data Interface card versions and RS-530 on 12-port Serial Data Interface card version 3) on the 7705 SAR-8 Shelf V2 and 7705 SAR-18
5. 7705 SAR-Hc (RS-232 channels)
6. T1/E1 ports on the 16-port T1/E1 ASAP Adapter card and 32-port T1/E1 ASAP Adapter card on the 7705 SAR-8 Shelf V2 and 7705 SAR-18

4.2.5.6.1. ADC for Redundant Paths

When two paths are created between Cpipe endpoint routers, there is no guarantee that the latency of the two paths is exactly the same. Each path may be a different distance and have different numbers or types of switches or routers, and path failures may occur in a single direction. Automatic path switchover in these cases will result in asymmetry of traffic latency. This is problematic for networks that require high availability, such as power industry networks that use teleprotection. To overcome this problem, the 7705 SAR supports ADC over redundant network paths.

To enable ADC over redundant network paths in a Cpipe service, each router in the service must be configured with one SAP and two SDPs, where:

1. one router is configured as the standby-signaling master and the other is configured as the standby-signaling slave
2. the two SDPs on each router provide two different paths between the routers. In order to keep the service symmetric, both the master endpoint router and the slave endpoint router must use the same SDP and therefore the same path at any one time.
3. each path is made up of two unidirectional LSPs with strict hop-by-hop routing over the two routers

If the active path becomes unavailable, as detected through LOS, BFD failure, LSP down, or spoke SDP down, the standby-signaling master and the standby-signaling slave routers both switch over to the available path.

After each path switchover, ADC automatically executes its analysis and resets the jitter buffer latency to the engineered value. This occurs because the switchover process may leave the path in a state that is susceptible to asymmetry.

In addition, TDM PWs enabled with ADC receive data only from the active path. Normally, incoming traffic is accepted from both active and inactive paths. However, because in-transit traffic may cause symmetry issues after a path switchover, only traffic on the active path is accepted.

4.2.5.6.2. Active Multipath

Active multipath (AMP) mode allows TDM traffic to be transmitted simultaneously over up to four paths from the near end of a Cpipe to the far end. This allows the traffic to switch paths in a hitless fashion while experiencing minimal packet loss. At startup or restart of the Cpipe service, all paths must be up in order to support this functionality.

AMP is supported on the following:

1. 8-port Voice & Teleprotection card
2. 12-port Serial Data Interface card, version 2 and 3
3. 8-port C37.94 Teleprotection card
4. 16-port T1/E1 ASAP Adapter card
5. 32-port T1/E1 ASAP Adapter card
6. 6-port E&M Adapter card
7. 4-port T1/E1 and RS-232 Combination module on the 7705 SAR-H
8. RS-232 ports on the 7705 SAR-Hc

If ADC is enabled, symmetrical TDM service (delay symmetry) is also provided over the Cpipe. If an application requires hitless path redundancy without symmetrical TDM service, ADC does not need to be enabled. The 7705 SAR supports AMP with ADC on the same adapter cards and platforms that support AMP; the exception is the 6-port E&M Adapter card, which does not support ADC.

Figure 41 shows an example of AMP hitless simultaneous transmission of TDM traffic over two paths with symmetrical TDM service.

Two different spoke SDP paths for the TDM SAP are configured at the host node (Node L). The active-multipath command is enabled at the endpoint to allow packets that encapsulate the ingress TDM traffic to be duplicated and sent over both paths (Path 1 and Path 2). For maximum resilience, it is recommended that the network links of the two paths be on different adapter cards, but this is not a requirement.

Figure 41:  AMP Hitless Simultaneous Transmission of TDM traffic over Two Paths with Symmetrical TDM Service 

Network latency (the time it takes for data to go from one end to the other) may be different for each path between the 7705 SAR nodes at each end. Path 1 can be different from Path 2 but both directions of each path must be symmetrical. To achieve symmetrical TDM service, each path is based on hop-by-hop strict LSPs; Fast Reroute (FRR) is not supported.

The configuration for the TDM service is the same at both the egress and ingress 7705 SAR nodes. The duplicated packets arrive over two different paths and are sent to the associated TDM adapter card. The packets are first processed through the new combiner for each TDM service. The combiner then feeds only a single copy of each packet to the jitter buffer while discarding unneeded packets.

ADC is mandatory as part of the symmetrical TDM service configuration. ADC analysis and adjustment are based on the traffic egressing the combiner. Jitter buffer overruns and underruns may still occur and result in service restarts, which is normal operation.

Note: Because the combiner is part of the jitter buffer implementation, the size of the jitter buffer selected by the operator must take this into account. The jitter buffer fill level may shift by a value that is equivalent to the maximum expected delta in latency between the fast path and the slow path. Therefore, the jitter buffer size should be set as 2 x (network jitter + maximum delta in path latency).

4.2.5.6.2.1. Combiner Operation

On startup, the combiner waits for traffic from the configured paths to be sent.

The all-paths-active state on the Cpipe is achieved when traffic is received from the configured paths and the combiner is able to compensate for the differential delay.

The spoke SDP path activity state for active-multipath (all-paths-active, not-all-paths-active, initialization, or down) can be viewed using CLI show commands or SNMP commands.

4.2.5.6.2.2. Access Ingress Fabric Shaping

If the destination-mode fabric profile is configured at access ingress, the multipoint destination shaper of the destination-mode fabric profile is used for shaping the traffic. For more information on fabric shaping, refer to the 7705 SAR Quality of Service Guide.

4.2.5.8. Control Word

The control word is mandatory for SAToP and CESoPSN. The bit structure is shown in Figure 42. Table 27 describes the bit fields. See Pseudowire Control Word for more information.

Figure 42:  Control Word Bit Structure 

Table 27:  Control Word Bit Descriptions  

Bit	Description
Bits 0 to 3	The use of bits 0 to 3 is described in RFC 4385. These bits are set to 0 unless they are being used to indicate the start of an Associated Channel Header (ACH) for the purposes of VCCV.
L (Local TDM Failure)	The L bit is set to 1 if an abnormal condition of the attachment circuit such as LOS, LOF, or AIS has been detected and the TDM data carried in the payload is invalid. The L bit is cleared (set back to 0) when fault is rectified.
R (Remote Loss of Frames indication)	The R bit is set to 1 if the local CE-bound interworking function (IWF) is in the packet loss state and cleared (reset to 0) after the local CE-bound IWF is no longer in the packet loss state.
M (Modifier)	The M bits are a 2-bit modifier field. For SAToP, M is set to 00 as per RFC 4553. For CESoPSN, M is set according to RFC 5086, summarized as follows: When L bit = 0, and M = 00—Normal conditions M = 01—Reserved for future use M = 10—RDI condition for the attachment circuit (AC) M = 11—Reserved for CESoPSN When L bit = 1, and M = 00—TDM data is invalid M = 01—Reserved for future use M = 10—Reserved for future use M = 11—Reserved for future use
FRG	The FRG bits in the CESoPSN control word are set to 00.
LEN	The LEN bits (bits 10 to 15) carry the length of the CESoPSN packet (defined as the size of the CESoPSN header plus the payload size) if it is less than 64 bytes, and set to 0 otherwise.
Sequence number	The sequence number is used to provide the common PW sequencing function as well as detection of lost packets.

4.2.6. Transparent SDH/SONET Over Packet (TSoP)

Transparent SDH/SONET over Packet (TSoP) is a method for transporting clear channel OC3/STM1 or clear channel OC12/STM4 traffic over a packet network using OC3/STM1 TSoP SFPs and OC12/STM4 TSoP SFPs. With TSoP, the entire signal is encapsulated in a pseudowire and transported over the network to a single destination, which simplifies operation. TSoP is modeled after the SAToP method for pseudowire transport of DS1, E1, DS3, or E3 circuits (RFC 4553).

TSoP SFPs are inserted into Ethernet SFP ports, and the 7705 SAR treats them as standard Ethernet SFPs. To set up the TSoP service, an Epipe must be created across the network connecting two OC3/STM1 TSoP SFPs or two OC12/STM4 TSoP SFPs. The TSoP SFPs implement DCR for service clock delivery. Both nodes must be synchronized against a common clock for DCR.

TSoP SFPs are supported on the 7705 SAR-8 Shelf V2 and 7705 SAR-18 on the following adapter cards:

Each adapter card supports two OC3/STM1 or OC12/STM4 TSoP SFPs. A maximum of 16 TSoP SFPs are supported on the 7705 SAR-8 Shelf V2 or 7705 SAR-18.

Note: For a 7705 SAR-8 Shelf V2 with a maximum ambient temperature of 131°F (55°C), a maximum of eight TSoP SFPs are supported per adapter card.

4.2.7.  Error Situations

The CE-bound interworking function (IWF) uses the sequence numbers in the control word to detect lost and incorrectly ordered packets. Incorrectly ordered packets that cannot be reordered are discarded.

For unstructured CES, the payload of received packets with the L bit set is replaced with an all-ones pattern. For structured CES, the payload of received packets with the L bit set is replaced with an all-ones or a user-configurable bit pattern. This is configured using the idle-payload-fill command. For structured CES with CAS, the signaling bits are replaced with an all-ones or a user-configurable bit pattern. This is configured using the idle-signal-fill command. Refer to the 7705 SAR Interface Configuration Guide for more information.

All circuit emulation services can have a status of up, loss of packets (LOP) or admin down, and any jitter buffer overruns or underruns are logged.

4.3.1. Epipe Service Overview

An Ethernet pseudowire (PW) is used to carry Ethernet/802.3 protocol data units (PDUs) over an MPLS or IP network, allowing service providers to offer emulated Ethernet services over existing MPLS or IP networks. For the 7705 SAR, Ethernet emulation is a point-to-point service.

The 7705 SAR uses Ethernet VLLs to carry Ethernet traffic from various sources at a site, including traffic such as e911 locators, power supply probes, and HSPA-dedicated interfaces. Native Ethernet bridging is not supported.

An MPLS Epipe service is the Nokia implementation of an Ethernet VLL based on the IETF RFC 4448, Encapsulation Methods for Transport of Ethernet over MPLS Networks.

Figure 43 shows a typical Ethernet VLL frame together with its MPLS tunnel encapsulation.

Figure 43:  Ethernet VLL Frame with MPLS Encapsulation 

An Epipe service is a Layer 2 point-to-point service where the customer data is encapsulated and transported across a service provider’s MPLS or IP network. Figure 44 shows a typical Epipe service. An Epipe service is completely transparent to the subscriber’s data and protocols. Like other PW VLL services, Epipe service functions as a non-learning Ethernet bridge. A distributed Epipe service consists of a SAP and an SDP pair, where one SDP is on same router as the SAP, and the second SDP is on the far-end router.

Each SAP configuration includes a specific port on which service traffic enters the 7705 SAR from the customer side (also called the access side). Each port is configured with an encapsulation type (SAP encapsulation). Thus, a whole Ethernet port can be bound to a single service (that is, the whole Ethernet port is configured as a SAP), or if a port is configured for IEEE 802.1Q or 802.1ad encapsulation (referred to as dot1q or qinq, respectively), then a unique encapsulation value (ID) must be specified.

Figure 44:  Epipe Service 

4.3.2. Ethernet Access Egress Queuing and Scheduling

Ethernet access egress queuing and scheduling is very similar to the Ethernet access ingress behavior. Once the Ethernet pseudowire is terminated, traffic is mapped to up to eight different forwarding classes per SAP. Mapping traffic to different forwarding classes is performed based on the EXP bit settings of the received Ethernet pseudowire.

For more information on Ethernet access egress queuing and scheduling, refer to the 7705 SAR Quality of Service Guide.

4.3.3. Ethernet SAP-to-SAP

Ethernet VLLs can be configured with both endpoints (SAPs) on the same 7705 SAR. This is referred to as Ethernet SAP-to-SAP or local Ethernet service. Ethernet SAP-to-SAP provides local Ethernet switching between two Ethernet endpoints on the 7705 SAR.

An Ethernet SAP-to-SAP connection is set up on the 7705 SAR and a pseudowire is configured between the two endpoints.

When the port encapsulation is null, there is no change to the VLAN tags on the ingress and egress frame headers, if VLAN tags are present.

When the port encapsulation is dot1q, the VLAN tag is removed from the ingress frame header and a new VLAN tag is inserted into the egress frame header. No VLAN tag is inserted into the egress frame header if the SAP has a VLAN ID of 0.

When the port encapsulation is qinq, the VLAN tags are removed from the ingress frame header and a new set of outer and inner VLAN tags are inserted in the egress frame header. No VLAN tags are inserted in the egress frame if the SAP has a VLAN ID of 0 or VLAN IDs of 0.*. SAP 0.0 is not a valid combination.

In addition, the 7705 SAR-M can use a SAP-to-SAP Ethernet PW to provide an Ethernet-to-ATM interworking service. This is done by having one SAP on an Ethernet port and the other SAP on an ATM port or IMA bundle. Encapsulation options are specified in RFC 2684, Multiprotocol Encapsulation over ATM Adaptation Layer 5. The Ethernet-to-ATM interworking service can be used to support:

See Configuring ATM Encapsulation Under Epipe Service (7705 SAR-M only) for more information.

4.3.4. Epipe with ATM SAPs

The 7705 SAR supports Epipe with ATM SAPs over an Ethernet SDP; this feature is available on the 7705 SAR-8 Shelf V2 or 7705 SAR-18. IP interworking is between an OC3 clear channel ATM over a 10-Gigabit or Gigabit Ethernet connection through an MPLS network. The SAP connection is from an ATM VC configured on a 4-port OC3/STM1 Clear Channel Adapter card. The Ethernet SDP connection is from a 6-port Ethernet 10Gbps Adapter card. The ATM SAP format can only be UNI. BPDU with LLC/SNAP is used as specified in RFC 2684.

Figure 45 shows an example of an Epipe network configuration with an ATM SAP on a 7705 SAR-8 Shelf V2. For a CLI configuration example, see Configuring Epipe with ATM SAP.

Figure 45:  Epipe Network Configuration with ATM SAP 

4.3.5. MEF 8

The 7705 SAR supports MEF 8 as defined in the Implementation Agreement for the Emulation of PDH Circuits over Metro Ethernet Networks. Support for the MEF 8 standard allows both structured and unstructured emulation of TDM services across Epipes, also known as Circuit Emulation Services over Ethernet (CESoETH). The MEF 8 feature enables the 7705 SAR to interoperate with equipment that does not support MPLS-based Cpipes but does support MEF 8 Epipes.

Figure 46 shows an Ethernet-encapsulated TDM circuit. See TDM PW Encapsulation for complete information about TDM PW encapsulation.

Figure 46:  CESoETH Encapsulation 

The 7705 SAR supports the following MEF 8 configuration scenarios:

Figure 47:  TDM SAP to Ethernet SAP 

Figure 48:  TDM SAP to Spoke SDP 

Table 28 shows the platforms, adapter cards, and modules that support MEF 8.

4.3.5.1. Epipe Service Modes

Epipe services support structured circuit emulation mode for nxDS0 and structured or unstructured circuit emulation mode for DS1, E1, DS3, and E3 as defined in the MEF 8 specification.

There are two methods for using MEF 8 to emulate TDM circuits over Ethernet using an Epipe:

1. TDM SAP-to-Ethernet SAP
2. TDM SAP-to-spoke SDP

Defining one TDM SAP and one Ethernet SAP is known as Circuit Emulation Services over Ethernet (CESoETH). The TDM SAP configured in the Epipe must include a local and remote Emulated Circuit Identifier (ECID) and a far-end destination MAC address. The TDM port’s MAC address is used as the source MAC address for the circuit.

TDM can also be encapsulated into Ethernet which is then encapsulated in MPLS (or GRE). This method is known as Circuit Emulation Services over Ethernet over MPLS (CESoETHoMPLS). CESoETHoMPLS is configured with an Epipe with a TDM SAP and a spoke SDP. The TDM SAP configured in the Epipe must include a local and remote ECID and a far-end destination MAC address. The TDM port’s MAC address is used as the source MAC address for the circuit.

The 7705 SAR supports unicast MAC addresses and non-IEEE-reserved group multicast MAC addresses.

Note: Users should exercise caution when using multicast MAC addresses, as Ethernet frames with a multicast destination address could be flooded when traversing an Ethernet broadcast domain.

The TDM SAP’s framing and CAS settings determine the MEF 8 circuit emulation mode. If the TDM port is framed, MEF 8 is in structured mode. If the TDM port is unframed, MEF 8 is in unstructured mode. If the TDM SAP is configured with CAS enabled, MEF 8 is in structured mode with CAS. See Unstructured, Structured DS1/E1 CES without CAS, and Structured T1/E1 CES with CAS for more information about circuit emulation modes.

Adaptive clock recovery (ACR) is supported for MEF 8 in structured or unstructured mode on the following platforms and adapter cards:

1. 7705 SAR-A (variant with T1/E1 ports)
2. 7705 SAR-M (variants with T1/E1 ports)
3. 7705 SAR-X (T1/E1 ports)
4. 16-port T1/E1 ASAP Adapter card
5. 32-port T1/E1 ASAP Adapter card

For more information on ACR, refer to the 7705 SAR Basic System Configuration Guide, “Adaptive Clock Recovery (ACR)”.

Differential clock recovery (DCR) is supported for MEF 8 in structured or unstructured mode on the following platforms, adapter cards, and modules:

1. 7705 SAR-A (variant with T1/E1 ports)
2. 7705 SAR-M (variants with T1/E1 ports)
3. 7705 SAR-X (T1/E1 ports)
4. 16-port T1/E1 ASAP Adapter card
5. 32-port T1/E1 ASAP Adapter card
6. 4-port OC3/STM1 / 1-port OC12/STM4 Adapter card (DS1/E1 channels)
7. 4-port DS3/E3 Adapter card (clear channel DS3/E3 ports and DS1/E1 channels on channelized DS3 ports (E3 ports cannot be channelized)); DCR on DS1/E1 channels is supported only on the first three ports of the card
8. T1/E1 ports of the 4-port T1/E1 and RS-232 Combination module

To enable DCR, the network must have a common clock between the two terminating SAPs or SAP/spoke SDP using MEF 8. In each direction, the service clock is compared to the common clock and the difference is encoded into the RTP header in the TDM PW overhead. At the other end of the network, the original service clock is reproduced by comparing the common clock to the frequency difference in the RTP header.

Note: DCR is not supported on DS1 or E1 channels that have CAS signaling enabled.

For more information on DCR, refer to the 7705 SAR Basic System Configuration Guide, “Differential Clock Recovery (DCR)”.

4.3.6. Ethernet OAM

Ethernet VLL service supports Ethernet OAM functions for ETH-CFM according to the 802.1ag and Y.1731 standards, for Y.1731 Performance Monitoring, and for EFM OAM according to the 802.3ah standard. For more information, see ETH-CFM (802.1ag and Y.1731), and refer to the “Ethernet OAM” section in the 7705 SAR Interface Configuration Guide, and the “Ethernet OAM Capabilities” section in the 7705 SAR OAM and Diagnostics Guide.

Ethernet ports in access or network mode also support CFM loopback message (LBM) frames for Layer 1 and Layer 2 OAM tests on unlabeled ports. For more information, refer to the “Ethernet OAM” section in the 7705 SAR Interface Configuration Guide.

4.3.7. Control Word

Ethernet (Epipe) services support an optional control word, with the exception of MEF 8 (CESoETH) services for which the control word is mandatory (for information on the MEF 8 service control word, see the Control Word section in Circuit Emulation Parameters and Options).

If the Epipe service control word is enabled, it is set to all zeros and ignored on egress.

See Pseudowire Control Word for more information.

4.3.8. MTU

Network-facing Ethernet ports must support a larger MTU than access-facing Ethernet ports in order to account for the pseudowire headers that are added to the access Ethernet frames.

As an example, the following list gives the worst-case MTU sizes for Ethernet VLLs over Ethernet ports under various configurations, where the worst case is the largest MTU size required in order to carry a standard payload (1500 bytes):

Note: Since it is not practical to split a Layer 2 Ethernet frame into smaller frames, the access port (SAP) MTU must be smaller than the service and network port MTU. If the access port MTU is larger than the tunnel MTU, the Ethernet VLL does not come into service and remains in the inoperative state. See MTU Settings for information on MTU for VLL service.

4.3.9. Raw and Tagged Modes

An Ethernet PW operates in one of two modes: raw or tagged. Raw and tagged modes relate to the way the router handles VLAN tags embedded in the header of an Ethernet frame. Both modes are supported by the 7705 SAR.

Raw and tagged modes are configured using the vc-type {ether | vlan} parameter under the spoke-sdp command. To configure raw mode, choose the ether option; to configure tagged mode, choose vlan.

VLAN tags can provide service-delimiting information about a frame. Service-delimiting means that information in the tag affects the forwarding decisions that are made to route the packet. The port connected to the attachment circuit (AC) can be configured for null, dot1q, or qinq operation. When the port is configured for null, the 7705 SAR treats any attached tag received at the SAP (from the AC) as not service-delimiting; when configured for dot1q or qinq, received tags are service-delimiting.

4.3.9.4. Tagging Rules for Epipe

Table 29 and Table 30 show the general tagging rules for combinations of interface port type (null, dot1q, or qinq) and Epipe type (Ethernet or VLAN) for SAP ingress and SAP egress directions.

An AC (attachment circuit, ingress or egress) can be configured for one of the following encapsulation types:

1. null
2. dot1q
3. qinq

Note: Single-tagged Ethernet packets with VLAN ID set to 0 are handled in the same way as other tagged packets. For Ethernet VLL SAP-to-SAP with a VLAN SAP, the dot1p header is not popped at ingress. Instead, it is preserved across the ingress and egress ports to ensure dot1p transparency. Dot1q bits are overwritten with configured VLAN information at egress. If there is a matching non-default QoS policy applied at egress, the dot1p bits are re-marked accordingly.

Table 29:  Ingress SAP Tagging Rules 

Ingress SAP Type  1	VC Type (Epipe)
	Raw (Ethernet)	Tagged (VLAN)
Null	No operation	Push (VC tag)
Dot1q	Pop (outer tag)	Pop (outer tag) Push (VC tag)  2
QinQ	Pop (outer tag)	Pop (outer tag) Push (VC tag)

Notes:

1. Ingress SAP type is configured at the port level.
2. If the VC tag is not set, then the original tag is preserved. The VC tag is set on the spoke SDP, using the vlan-vc-tag command.

Table 30:  Egress SAP Tagging Rules 

Egress SAP Type  1	VC Type (Epipe)
	Raw (Ethernet)	Tagged (VLAN)
Null	No operation	Pop (VC tag)
Dot1q	Push (SAP tag)  2	Pop (VC tag) Push (SAP tag)  3
QinQ	Push (SAP tags)	Pop (VC tag) Push (SAP tags)

Notes:

1. Egress SAP type is configured at the port level.
2. If the SAP tag is 0, then no VLAN tag is pushed.
3. If the SAP tag is 0, then only the pop operation is performed.

Table 31 shows several examples of how VLAN tags are translated as they flow from ingress to egress. The ingress or egress point can be a SAP or an SDP. For a SAP, encapsulation can be null, dot1q, or qinq; for an SDP, encapsulation (vc-type) can be ether raw or VLAN (tagged). When the SAP encapsulation is dot1q or qinq, outer and inner tags are used.

Note: When the SAP type is dot1q or qinq: the SAP VLAN tag always delimits the ingress traffic, regardless of the Ethernet VLL type (raw or tagged) untagged frames are dropped at the SAP ingress. That is, only the frames with an outer VLAN tag that matches the SAP VLAN tag are forwarded. The exception to this case occurs when the VLAN tag = 0. When a SAP is configured with VLAN ID = 0, any received untagged packets are processed.

Table 31:  VLAN Tagging Examples (Epipe)  

Example	Configuration Settings
	Rx (Ing)/ Tx (Egr)	SAP/ SDP	Encap.	SAP VLAN Tag
				Outer	Inner
1	Rx Tx	SAP SAP	Null Null	N/A N/A	N/A N/A
	Result: Untagged, single-, and double-tagged frames are accepted. On egress, all frames are transmitted untouched.
2	Rx Tx	SAP SAP	Dot1q Null	252 N/A	N/A N/A
	Result: Single- and double-tagged frames are accepted if the outermost VLAN ID matches. On egress, the outermost VLAN tag is popped.
3	Rx Tx	SAP SAP	QinQ Dot1q	525 789	353 N/A
	Result: Double-tagged frames are accepted if the outer/inner VLAN ID matches. On egress, the outer VLAN tag is popped and the inner VLAN tag is swapped.
4	Rx Tx	SAP SDP	QinQ VLAN	525 456	353 N/A
	Result: Double-tagged frames are accepted if the outer/inner VLAN ID matches. On egress, the outer VLAN tag is popped and the inner VLAN tag is swapped.
5	Rx Tx	SDP SAP	Ether QinQ	N/A 123	N/A 654
	Result: Untagged, single-, and double-tagged frames are accepted. On egress, a double-push (outer and inner) is performed.
6	Rx Tx	SAP SDP	Dot1q VLAN	Default (*) 741	N/A N/A
	Result: Untagged, single-, and double-tagged frames are accepted. On egress, a push is performed.
7	Rx Tx	SAP SDP	QinQ VLAN	852 963	0 N/A
	Result: Single- and double-tagged frames are accepted if the outermost VLAN ID matches. On egress, the outermost VLAN tag is swapped.
8	Rx Tx	SAP SAP	QinQ QinQ	Default (*) Default (*)	Default (*) Default (*)
	Result: Any double-tagged frames are accepted. On egress, all frames are transmitted untouched.

4.3.10. IP Filters (Epipe)

IP filters are applied to Epipe SAPs in the ingress direction, as described below. For a full list of entities to which IP filters can be applied, see IP Filter Policies.

Ethernet pseudowires are generally used to transparently switch traffic across an MPLS network to the far end. However, in some cases, the traffic that is switched over the network, consuming valuable bandwidth, is just discarded at the other end of the pseudowire. As well, with the 7705 SAR expanding into areas such as vertical markets, and with local area networks being connected to the 7705 SAR Ethernet ports, an increasing amount of traffic must stay local and not pass through the MPLS network to the far end. By using IP filters at the access ingress, operators can determine what traffic is passed through the pseudowire and therefore use the network links more efficiently.

IP filters can also be used for security purposes, by allowing access only to designated services (for example, allowing e-mail and FTP services while disallowing Telnet services) at the origin of the traffic.

IP filter policies specify either a forward or a drop action for packets, based on information specified in the match criteria. Within each filter policy, you can create entries that define matching criteria.

The same IP filter policy can be assigned to any entity (network interfaces, IP pseudowires, Ethernet pseudowires, IES, and VPRN services), all of which can be configured on the same adapter card. For example, a filter policy defined as “filter-5” can be assigned to multiple Epipe SAPs and, simultaneously, to network interfaces on the same adapter card.

A filter policy assigned to an entity on one adapter card can also be assigned to any entity on another adapter card. For example, a filter policy defined as “filter-2” can be assigned to an Epipe on an Ethernet Adapter card and to a network interface on another Ethernet Adapter card.

Assigning the same filter policy to different entities on a card counts as using one filter policy.

Configuration and assignment of filter policies is similar for network interfaces, IES management SAPs, Ethernet and IP pseudowire SAPs, VPRN and IES SAPs and spoke SDPs, and VPLS SAPs and SDPs (spoke and mesh). This guide describes the assignment of filter policies to SAPs and SDPs. Refer to the 7705 SAR Router Configuration Guide, “Filter Policies”, for information on configuring filter policies and assigning them to network interfaces.

4.3.11. MPLS Entropy Label

For Cpipes, Epipes, and Ipipes, the router supports MPLS entropy labels as per RFC 6790. The entropy label provides greater granularity for load balancing on an LSR where load balancing is typically based on the MPLS label stack.

For more information, refer to the “MPLS Entropy Labels” section in the 7705 SAR MPLS Guide and to the “LAG and ECMP Hashing” section in the 7705 SAR Interface Configuration Guide.

4.3.12. Security Zones and Epipes

The 7705 SAR supports a number of mechanisms for node security, including Access Control Lists (ACLs), Network Address Translation (NAT), and stateful, zone-based firewalls. For information about ACLs, NAT, and firewalls, refer to the 7705 SAR Router Configuration Guide, “Configuring Security Parameters”.

NAT and firewall security configurations are both based on zones. Zones segment a network, making it easier to control and organize traffic. A zone consists of a group of Layer 2 endpoints or Layer 3 interfaces with common criteria, bundled together. Security policies, which define a set of rules that determine how NAT or firewall should direct traffic, can be applied to the entire zone or to multiple zones. Layer 3 zones support both NAT and firewall security policies. Layer 2 zones support only firewalls. To enable NAT or firewall functionality, security policy and profile parameters must be configured under the config>security context in the CLI, and a security zone must be configured under one or more of the following contexts:

Layer 2 and Layer 3 firewalls share system resources; that is, they share the maximum number of policies, profiles, and session ID space supported by the system.

A zone is created by adding at least one Layer 2 endpoint or Layer 3 interface to the zone configuration. Multiple zones can be created within each Layer 3 service or within the router context. Layer 2 services support only one zone. Layer 2 endpoints or Layer 3 interfaces from different services cannot be grouped into a single common zone. Table 32 lists the supported interfaces and endpoints that can be added to zones in each CLI context for NAT or firewall.

Note: A group of endpoints used for pseudowire redundancy cannot be added to a zone configured under an Epipe.

A zone configured under a Layer 2 service (VPLS or Epipe context) allows the 7705 SAR to perform Layer 3 firewall functionality on IPv4 packets.

NAT is not supported for zones configured under a Layer 2 service. A zone cannot be configured on a VPLS service with EVPN.

Unicast, multicast, and broadcast IPv4 packets are firewalled when they cross a Layer 2 service zone boundary.

Users can configure bypass policies to allow certain traffic, such as control plane protocols (OSPF, RIP, BGP, IGMP, PIM, LDP, RSVP, VRRP, DHCP, NTP, and so on) to bypass a firewall in a Layer 2 service. Refer to the 7705 SAR Router Configuration Guide, “Bypass Policies for Firewalls in a Layer 2 Service”, for details. If not configured to bypass the zone, these packets are firewalled as normal unicast, multicast, or broadcast traffic and should be regulated by configuring firewall security policies for these protocols.

4.4.1. Fpipe Service Overview

The frame relay VLL (Fpipe) provides a point-to-point frame relay service between users connected to 7705 SAR nodes or other SR routers over an IP/MPLS network. Users are connected to the 7705 SAR nodes using frame relay PVCs.The 7705 SAR receives a standard Q.922 core frame on the frame relay SAP and encapsulates it into a pseudowire packet according to the one-to-one frame relay encapsulation mode in RFC 4619 Encapsulation Methods for Transport of Frame Relay over Multiprotocol Label Switching (MPLS) Networks.

The MPLS tunnel label is used by MPLS LSRs to forward a PW packet from one PE to the other. The PW label identifies one PW (that is, one LSP) assigned to an FR VC in one direction. Together the MPLS tunnel label and PW label form an MPLS label stack, as described in RFC 3032.

The control word contains protocol control information and must be used for any frame relay (Fpipe) pseudowire service in one-to-one mapping mode; see Frame Relay PW Control Word for more information. The payload field corresponds to X.36/X.76 FR frame information field with the following components removed: bit/byte stuffing, FR header, and FCS.The maximum length of the payload field must be agreed on by the two PEs; this agreement can be achieved by using the MTU interface parameter when the PW is established (RFC 4447).

Figure 49 shows an example of the frame relay VLL end-to-end service.

Figure 49:  FR VLL for End-to-End FR Service 

Fpipe SAPs are supported on the following:

Before an Fpipe can be configured on an MDA that supports multiple MDA modes, namely the 16-port T1/E1 ASAP Adapter card, 32-port T1/E1 ASAP Adapter card, and the 4-port DS3/E3 Adapter card, the mda-mode command must be set to cem-fr-hdlc-ppp. Likewise, the AC port that is bound to the Fpipe SAP must have the encap-type command set to frame-relay. Refer to the 7705 SAR Interface Configuration Guide for more information about how to set the mda-mode command at the card level and the encap-type command at the port/channel level. See Service Support for more information about the supported chassis and the port- and channel-level configuration requirements.

4.4.2. Frame Relay SAP-to-SAP Service

FR VLLs can be configured with both endpoints (SAPs) on the same 7705 SAR, which is referred to as an FR SAP-to-SAP or local FR service. FR SAP-to-SAP emulates local FR switching between two FR endpoints on the same 7705 SAR node.

4.4.3. Frame Relay Traffic Management

Traffic management of frame relay VLLs is achieved through the application of ingress and egress QoS policies to SAPs.

4.4.4. Frame Relay Encapsulation

Figure 50 shows the standard FR frame.

Figure 50:  FR Frame 

Figure 51 shows the one-to-one mapping mode for FR encapsulation over an MPLS network according to RFC 4619. The FR service payload can be n octets.

Figure 51:  FR PW 1-to-1 MPLS PSN Encapsulation 

The native FR PDU is processed as follows:

4.4.4.1. Frame Relay PW Control Word

The control word is required for FR one-to-one mode. Figure 52 shows the FR PW control word.

Figure 52:  FR PW Control Word 

Table 33 describes the bits used in the FR PW control word.

Table 33:  Control Word Bit Descriptions  

Bit	Description
Bits 0 to 3	4 bits. Bits 0 to 3 are always set to 0 to indicate the presence of the PW.
F	Bit 4; FR FECN bit. The F bit is copied from the FR frame.
B	Bit 5; FR BECN bit. The B bit is copied from the FR frame.
D	Bit 6; FR DE bit. The D bit is copied from the FR frame, but can be reset as a result of the ingress frame policy, as described in Frame Relay Traffic Management.
C	Bit 7; FR frame C/R bit. The C bit is copied unchanged from the FR frame.
FRG	2 bits (bits 8 and 9). FRG bits are not supported. The bits must be set to 0.
Length	6 bits (bits 10 to 15). If the frame length (defined as the length of the FR Layer 2 payload plus the length of the control word) is less than 64 octets, the length field must be set to the PW payload length. Otherwise, the length field must be set to zero. The value of the length field, if non-zero, is used to remove the padding characters by the egress PE. See the control-word command description for more information.
Sequence Number	A 16-bit, unsigned circular space. Sequence numbers provide a mechanism to ensure the ordered delivery of PW packets. The sequence number field is not supported. The sequence number value 0 indicates that the sequence number check algorithm is not used.

4.4.5. Status Signaling and OAM Propagation

The 7705 SAR supports the mapping and notification of defect states between an FR PW and an ACs in accordance with Pseudowire (PW) OAM Message Mapping draft-ietf-pwe3-oam-msg-map-14.txt, Section 10. Failures in the network are propagated to the customer edge using LMI messages. LMI and AC failures are propagated to the network using PW status signaling.

4.5.1. Hpipe Service Overview

An HDLC PW is used to carry HDLC PDUs over an MPLS network. HDLC PWs enable service providers to offer emulated HDLC services over existing MPLS networks.

HDLC mode provides port-to-port transport of HDLC-encapsulated traffic.The HDLC PDU is transported in its entirety, including the HDLC address and control fields, but the HDLC flags and the FCS are excluded. If the optional control word is used, the flag bits in the control word are not used and must be set to 0 for transmitting and must be ignored upon receipt.

HDLC PWs are implemented in accordance with RFC 4618.

Hpipe SAPs are supported on the following:

Before HDLC SAPs can be configured on the 16-port T1/E1 ASAP Adapter card or 32-port T1/E1 ASAP Adapter card, the mda-mode command must be set to cem-fr-hdlc-ppp at the card level. Refer to the 7705 SAR Interface Configuration Guide for more information about how to set the mda-mode command. See Service Support for more information about the supported chassis and the port- and channel-level configuration requirements.

Only ports that are configured with HDLC encapsulation can be mapped to an Hpipe SAP. HDLC encapsulating ports do not terminate the HDLC. The ports pass the HDLC frames through the Hpipe. HDLC encapsulated ports can pass through any HDLC-framed traffic, such as Cisco-HDLC, FR, PPP, and so on.

HDLC encapsulation can be used on a port to transmit Cisco-HDLC frames over an H-pipe. To transport Cisco-HDLC traffic over an Hpipe, the attachment circuit (AC) port that is bound to the Hpipe SAP must have the encap-type command set to hdlc, not cisco-hdlc. Refer to the 7705 SAR Interface Configuration Guide for more information about how to set the encap-type command.

Note: A Cisco-HDLC encapsulating port cannot be bound to an Hpipe SAP. A Cisco-HDLC encapsulating port can only be bound to an Ipipe SAP. See IP Interworking VLL (Ipipe) Services for more information.

4.5.2. HDLC VLL for End-to-End HDLC Service

Figure 53 shows an example of how a mobile operator can deploy end-to-end HDLC services over an MPLS network.

Figure 53:  HDLC VLL for End-to-End HDLC Service 

In Figure 53, the CE (an ATM switch) transmits HDLC PDUs and receives HDLC PDUs over the physical layer between the CE and a 7705 SAR (PE1). The native service processing (NSP) function in PE1 performs the packet processing, such as bit stuffing, PW-PW bridging, L2 encapsulation, shaping, and policing, for the HDLC packets that are forwarded to the PW termination point in PE1. The PW, which terminates at a logical port in the PE1, delivers the unaltered HDLC packets that are received across the MPLS network to the corresponding logical port on PE2 at the other end of the PW.

The PW termination points on each PE represent the operations that establish and maintain the PW and that encapsulate and decapsulate the HDLC packets. For more information, refer to the PW reference diagram packet processing that supports the HDLC PW as described in RFC 4618.

4.5.3. HDLC SAP-to-SAP Service

HDLC VLLs can be configured with both endpoints (SAPs) on the same 7705 SAR, which is referred to as an HDLC SAP-to-SAP or local HDLC service. HDLC SAP-to-SAP emulates local HDLC switching between two endpoints on the same 7705 SAR node.

4.5.4. HDLC Encapsulation

Figure 54 shows a typical HDLC VLL frame.

Figure 54:  HDLC VLL Frame 

Figure 55 shows a typical HDLC VLL frame together with its MPLS tunnel encapsulation.

Figure 55:  HDLC VLL Frame with MPLS Encapsulation 

The native HDLC PDU is processed as follows:

The MPLS tunnel is used to transport the encapsulated HDLC across the PSN and the PW header is appended to the modified HDLC PDU as described in RFC 4618. The HDLC control word is inserted in the frame before the HDLC payload. See HDLC PW Control Word and Payload Size for information.

4.5.4.1. HDLC PW Control Word and Payload Size

HDLC VLLs support an optional control word (CW). The control word must be used for any HDLC (Hpipe) pseudowire service that transports packets that are less than 64 bytes.

To switch frames through the 7705 SAR switch fabric, the frame size must be 64 bytes or larger. If the HDLC frames received at the SAP are not 64 bytes or larger, the 7705 SAR pads the HDLC payload at the access ingress to ensure that the HDLC payload can be passed through the switch fabric and transported properly across the network. When padding occurs, the size of the original payload must be indicated in the length field of the control word so that at the termination of the HDLC PW, the far-end device can correctly determine the actual size of the HDLC payload, remove the padding, and forward the original, non-padded HDLC payload to the access egress. See RFC 4618, section 4.1 part-2. Figure 56 shows the HDLC PW control word.

Figure 56:  HDLC PW Control Word 

Table 34 describes the bits used in the HDLC PW control word.

Table 34:  Control Word Bit Descriptions  

Bit	Description
Bits 0 to 3	The use of bits 0 to 3 is described in RFC 4385. The bits are always set to 0 to indicate the presence of the CW.
Flags	4 bits (bits 4 to 7). No flags are defined for the HDLC PW. The bits must be set to 0 and must be ignored by the PE.
FRG	2 bits (bits 8 and 9). FRG bits are not supported. The bits must be set to 0.
Length	6 bits (bits 10 to 15). The length represents the combined size of the CW and the HDLC payload. If the combined size is less than 64 bytes, this field must be populated to indicate the actual size of the HDLC payload that is received at the access ingress. At the access egress, this field is used to strip bytes that are appended for padding purposes. If the combined size of the CW and the HDLC payload exceeds 64 bytes, all bits in this field must be set to 0. See the control-word command description for more information.
Sequence Number	The sequence number is used to provide the common PW sequencing function as well as detection of lost packets. The sequence number field is not supported on the 7705 SAR.

See Pseudowire Control Word for more information.

4.5.5. Status Signaling

The HDLC PW supports status signaling in accordance with RFC 4618, section 5.1. When the PE detects a status change in the attachment circuit (AC) status, such as an AC physical link failure, or if the AC is administratively disabled, the PE sends the appropriate PW status notification message that corresponds to the HDLC AC status. The local PW status is also reflected in a PW status notification message, as described in RFC 4447, section 5.4.

4.6.1. Ipipe Service Overview

An Ipipe pseudowire (IP PW) enables service interworking between different link layer technologies and network interworking between connections with the same link layer technologies. IP PWs provide an efficient means to connect Layer 3 IP traffic to the IP/MPLS network, even without access to VLANs.

An Ipipe is a point-to-point Layer 2 service where the customer data is encapsulated and transported across an MPLS or IP network. An Ipipe service transparently forwards all packets received on one SAP to the other SAP. No native IP routing of customer packets occurs.

IP interworking allows connections to be created with any combination of PPP, MLPPP, Ethernet, LAG, FR, and Cisco HDLC (cHDLC) SAPs, but the payload must always be IP. Ipipes can be used to transport IP payloads more efficiently than Epipes because an Ipipe service does not need to forward the Ethernet header information.

Figure 57 shows an example of IP connectivity between a host attached to a point-to-point access circuit (FR, cHDLC, and PPP) with routed PDU IPv4 encapsulation and a host attached to an Ethernet interface. Both hosts are on the same LAN segment.

Figure 57:  IP Pseudowires Between SAR Nodes 

A frame relay SAP makes use of RFC 2427, Multiprotocol Interconnect over Frame Relay, routed PDU encapsulation of an IPv4 packet. A PPP interface makes use of RFC 1332, The PPP Internet Protocol Control Protocol (IPCP), for PPP IPCP encapsulation of an IPv4 packet. A Cisco HDLC SAP uses the routed IPv4 encapsulation. The PW uses the IP Layer 2 transport pseudowire encapsulation type.

4.6.2. IP Interworking VLL Datapath

In order to be able to forward IP packets between CE 1 and CE 3 in Figure 57, PE 2 is configured with both CE 1 and CE 3 IP addresses. These are host addresses and are entered in the /32 format.

Note: Addresses can be configured manually or by using CE Address discovery.

PE 2 maintains an ARP cache context for each IP interworking VLL and responds to ARP request messages received on the Ethernet SAP. PE 2 responds with the Ethernet SAP configured MAC address as a proxy for any ARP request for the CE 1 IP address. PE 2 silently discards any ARP request messages received on the Ethernet SAP for addresses other than CE 1. Likewise, PE 2 silently discards any ARP request messages with source IP addresses other than CE 3. In all cases, PE 2 keeps track of the association of IP to MAC addresses for ARP requests it receives over the Ethernet SAP. All entries are subject to aging.

In order to forward unicast frames destined for CE 3, PE 2 needs to know the MAC address of CE 3. If there is no entry in the ARP cache, PE 2 sends an ARP request message for the CE 3 MAC address over the Ethernet SAP.

IP broadcast and IP multicast packets are sent on the Ethernet SAP using the broadcast or direct-mapped multicast MAC address.

In order to forward unicast frames destined for CE 1, PE 2 validates the MAC destination address of the received Ethernet frame. It should match that of the Ethernet SAP. PE 2 then removes the Ethernet header and encapsulates the IP packet directly into a pseudowire with or without the optional control word. PE 1 removes the pseudowire encapsulation and forwards the IP packet over the SAP using PPP encapsulation.

When a packet reaches the access egress and the configured SAP is over a VLAN, the node pushes (inserts) the appropriate VLAN tag into the Ethernet frame header before forwarding the Ethernet frame out of the port. Ethernet frames at the access egress can also be marked with appropriate dot1 priority bits if the dot1 priority QoS profile is assigned to the forwarding class configuration.

Ethernet frames mapped to an Ipipe service can have a maximum of two VLAN tags. Frames with more than two VLAN tags are dropped at the Ipipe access ingress SAP.

At access ingress, PE 1 performs proxy PPP negotiation and provides the IP address of the remote CE 3 device to CE 1 during IPCP negotiation using the IP-Address option.

A PE does not flush the ARP cache unless the SAP goes administratively or operationally down. The PE with the Ethernet SAP sends unsolicited ARP requests to refresh the ARP cache according to the refresh interval. ARP requests are staggered at an increasing rate if no reply is received to the first unsolicited ARP request. The refresh interval is configurable using the mac-refresh CLI command.

4.6.3. CE IP Address Discovery and Distribution

The following subsections describe the customer edge (CE) IP address discovery methods and how the CE IP address is distributed to remote PE nodes. Topics include:

4.6.4. IP SAP-to-SAP Service

IP VLLs can be configured with both endpoints (SAPs) on the same 7705 SAR, which is referred to as an IP SAP-to-SAP or local IP service. IP SAP-to-SAP emulates local IP switching between two endpoints on the same 7705 SAR node.

4.6.5. Hardware Support for Interworking IP PWs

Table 35 lists the hardware that supports interworking IP PWs.

4.6.6. Control Word

IP interworking VLLs support an optional control word. The control word may be required to interoperate with devices at the far end. If the control word is enabled, it is set to all zeros and ignored on egress.

See Pseudowire Control Word for more information.

4.6.7. Termination at Access

The following sections describe the termination requirements and features for interworking pseudowires. Topics include:

4.6.7.3. cHDLC Termination

The following features are supported for cHDLC termination:

1. ports must be configured for access mode according to the cHDLC frame format. Refer to the 7705 SAR Interface Configuration Guide for information about how to configure the encap-type command to cisco-hdlc.
2. IP encapsulation (0x0800). Figure 59 shows the cHDLC header frame.
3. keepalive support using SLARP (0x8035). Figure 60 shows the SLARP keepalive frame.
4. configurable service MTU of 1 to 2048 bytes. When encapsulated in the IPv4 PDU, the cHDLC packet shown in Figure 59 is modified to remove the flag, address, control, protocol ID, and FCS.

Figure 59:  cHDLC Header Frame 

Note: cHDLC encapsulation cannot be used to transmit HDLC frames into an Ipipe.

Figure 60:  SLARP Keepalive Frame 

Refer to the 7705 SAR Interface Configuration Guide for more information about how to configure access ports for interworking IP PWs.

4.6.7.4. PPP and MLPPP Termination on 2-port OC3/STM1 Channelized Adapter Cards

PPP termination is supported on DS1/E1 and n x DS0 (64 kb/s) channels.

MLPPP termination is supported on DS1/E1 channels.

One use for PPP and MLPPP termination to IP pseudowires is in fixed backhaul networks with customers connected to the network via DS1/E1 or n x DS1/E1 rates.

Figure 61 shows an example of a network using PPP and MLPPP encapsulation to IP PWs on a 2-port OC3/STM1 Channelized Adapter card.

Figure 61:  PPP and MLPPP to IP PWs on 2-port OC3/STM1 Channelized Adapter Cards 

Customer traffic aggregation remains on the available SONET/SDH infrastructure and is sent to a 2-port OC3/STM1 Channelized Adapter card on the 7705 SAR, where the PPP/MLPPP encapsulation termination takes place. Using an IP PW with PPP/MLPPP encapsulation from a SAP-to-VLAN SAP, the 7705 SAR passes the data to a 7750 SR. The 7750 SR offers the necessary scale of IP services, such as IES or VPRN, needed to handle the large amount of traffic coming from each OC3/STM1 port.

After terminating PPP/MLPPP encapsulated traffic on a channelized OC3/STM1 port, the 7705 SAR switches the IP traffic, without performing any IP lookup, to another SAP over an Ipipe. IP traffic is then passed on to the 7750 SR with a unique VLAN identifier on a per-connection basis.

Refer to the 7705 SAR Interface Configuration Guide for more information about how to configure 2-port OC3/STM1 Channelized Adapter card ports for interworking IP PWs and PPP/MLPPP termination.

4.6.8. Traffic Management

4.6.9. Status Signaling

4.6.10. IP Filters (Ipipe)

IP filters are applied to Ipipe SAPs in the ingress direction, as described below. For a full list of entities to which IP filters can be applied, see IP Filter Policies.

IP pseudowires are generally used to transparently switch traffic across an MPLS network to the far end. However, in some cases, the traffic that is switched over the network, consuming valuable bandwidth, is just discarded at the other end of the pseudowire. As well, with the 7705 SAR expanding into areas such as vertical markets, and with local area networks being connected to the 7705 SAR Ethernet ports, an increasing amount of traffic must stay local and not pass through the MPLS network to the far end. By using IP filters at the access ingress, operators can determine what traffic is passed through the pseudowire and therefore use the network links more efficiently.

Another use for IP filters is in cases where a customer router is connected to an access port on the 7705 SAR with PPP/MLPPP encapsulation. The service provider may want to filter incoming traffic from the customer at the boundaries of the network.

IP filters can also be used for security purposes, by allowing access only to designated services (for example, allowing e-mail and FTP services while disallowing Telnet services) at the origin of the traffic.

IP filter policies specify either a forward or a drop action for packets, based on information specified in the match criteria. Within each filter policy, you can create entries that define matching criteria.

The same IP filter policy can be assigned to any entity (network interfaces, IP pseudowires, Ethernet pseudowires, IES, and VPRN services), all of which can be configured on the same adapter card. For example, a filter policy defined as “filter-5” can be assigned to multiple Ipipe SAPs and, simultaneously, to network interfaces on the same adapter card.

A filter policy assigned to an entity on one adapter card can also be assigned to any entity on another adapter card. For example, a filter policy defined as “filter-2” can be assigned to an Ipipe on an Ethernet Adapter card and to a network interface on another Ethernet Adapter card.

Assigning the same filter policy to different entities on a card counts as using one filter policy.

Configuration and assignment of filter policies is similar for network interfaces, IES management SAPs, Ethernet and IP pseudowire SAPs, VPRN and IES SAPs and spoke SDPs, and VPLS SAPs and SDPs (spoke and mesh). This guide describes the assignment of filter policies to SAPs and SDPs. Refer to the 7705 SAR Router Configuration Guide, “Filter Policies”, for information on configuring filter policies and assigning them to network interfaces.

4.7.1. Overview

The pseudowire switching feature provides the user with the ability to create a VLL service by cross-connecting two spoke SDPs.

Services with one SAP and one spoke SDP are created normally on the PE; however, when a pseudowire originates at customer equipment and not the 7705 SAR, the target destination of the SDP is the 7705 SAR pseudowire switching node instead of the remote PE. In such cases, the user must configure a VLL service on the pseudowire switching node (the 7705 SAR, in this case) using the two SDPs and no SAP. This creates a VLL service that travels over two different types of tunnels. The first pseudowire segment connects the Node B to the 7705 SAR, and the second segment connects the 7705 SAR to a 7750 SR node. Figure 62 shows an example of a VLL pseudowire switching service.

For the 7750 SR node, there is no implementation change required. The pseudowire segment is treated as a 7705 SAR-initiated dynamic ATM pseudowire. The 7705 SAR signals for the ATM pseudowire and negotiates all required parameters, including the pseudowire label, control word, and VCCV type.

The pseudowire switching node acts in a passive role with respect to signaling of the pseudowires. The node waits until one or both of the PEs send the label mapping message before relaying it to the other PE. This is because it needs to pass the interface parameters of each PE to the other. For example, the 7705 SAR assumes the pseudowire payload from the Node B, then signals for the ATM pseudowire to the far end and negotiates all required parameters, including the pseudowire label, control word, and VCCV type.

The switching pseudowire inserts a pseudowire switching point TLV indicating the system address in the label mapping message. This TLV is useful because it allows for troubleshooting of the path of the pseudowire, especially if multiple pseudowire switching points exist between the two PEs. The TLV also helps in loop detection of T-LDP signaling messages, where a switching point receives a label mapping message that it already relayed. The switching point TLV is inserted in pseudowire status notification messages when they are sent end-to-end or from a pseudowire switching node towards a destination PE. See Pseudowire Switching TLV for more information.

Pseudowire OAM is supported for dynamic switching pseudowires and allows the 7705 SAR pseudowire switching node to relay end-to-end pseudowire status notification messages between the two PEs. The 7705 SAR can generate a pseudowire status and send it to one, or both, of the PEs by including its system address in the pseudowire switching point TLV. This allows a 7705 SAR PE to identify the origin of the pseudowire status notification message.

The pseudowire segment between the 7705 SAR and the 7750 SR supports OAM tools as well as BFD; however, since Node Bs are not dual-homed, OAM tools operating on this pseudowire segment can only provide informative messages. The 7705 SAR responds to Node B-initiated ping packets if the destination IP address is the system IP or interface IP address of the 7705 SAR. If the IP packet does not contain a SAR destination IP address, the 7705 SAR does not respond, and instead, forwards the packet.

Figure 62 shows an example of static-simplex to dynamic-simplex pseudowire switching. This service consists of a SAP and a spoke SDP. However, the target destination of the SDP is not the remote PE but the pseudowire switching node. In addition, the user configures a VLL service on the pseudowire switching node using the two SDPs.

Figure 62:  Simplex to Simplex Pseudowire Switching 

Configuration examples can be found in Configuring PW Switching.

Table 36 shows the pseudowire switching options supported on the 7705 SAR.

The 7705 SAR supports use of an optional control word on both pseudowire segments. Use of a control word is negotiated by the 7705 SAR and 7750 SR during the signaling phase. The 7705 SAR and 7750 SR negotiate during the signaling phase even if a control word is not used. If a control word is used, the 7705 SAR generates it and configures it with all 0s.

When the 7705 SAR appends or strips the control word to support VCCV ping type 1, the TTL value of the switched pseudowire is reset to 255. If the control word is present on the ingress pseudowire packet and it is not removed because it is on an end-to-end service, the 7705 SAR reduces the pseudowire TTL by 1 at the time of pseudowire switching.

4.7.2. Pseudowire Switching with Pseudowire Redundancy

Pseudowire switching with pseudowire redundancy supports one redundant pseudowire with up to four redundant spoke SDPs. Figure 63 shows an example of a network with simplex to redundant pseudowire switching.

Figure 63:  Simplex to Redundant Pseudowire Switching 

To enable pseudowire redundancy, the first pseudowire segment must be a static pseudowire (that is, T-LDP disabled). The second pseudowire segment can then be configured with up to four redundant spoke SDPs. See Pseudowire Redundancy for instructions on configuring redundancy. Pseudowire switching with pseudowire redundancy also supports standby signaling. See Active/Standby Mode for Pseudowire Redundancy (Standby Signaling) for more information.

4.7.3. Pseudowire Switching Behavior

In the network in Figure 64, T-PE nodes act as leading nodes and pseudowire switching nodes (S-PE nodes) act as followers for the purpose of pseudowire signaling. Switching nodes need to pass the SAP interface parameters of each PE to the other PE. T-PE1 sends a label mapping message for the Layer 2 FEC to the peer pseudowire switching node; for example, S-PE1. It includes the SAP interface parameters, such as MTU, in the label mapping message. S-PE1 checks the FEC against the local information, and if a match exists, it appends the optional pseudowire switching point TLV to the FEC TLV in which it records its system address. T-PE1 then relays the label mapping message to S-PE2. S-PE2 performs a similar operation and forwards a label mapping message to T-PE2.

Figure 64:  Pseudowire Switching Network 

The same procedures are followed for the label mapping message in the reverse direction; for example, from T-PE2 to T-PE1. S-PE1 and S-PE2 will affect the spoke SDP cross-connect only when both directions of the pseudowire have been signaled and matched.

Pseudowire status notification messages can be generated by the T-PE nodes and/or the S-PE nodes. Pseudowire status notification messages received by a switching node are processed and then passed on to the next hop. An S-PE node appends the optional pseudowire switching TLV, with its system address added to it, to the FEC in the pseudowire status notification message only if it originated the message or the message was received with the TLV in it. If the S-PE node is not the originator or if there is no TLV with the system address in the message, this means that the message was originated by a T-PE node. In this case, the S-PE processes and passes the message without changes except for the VC ID value in the FEC TLV.

The merging of the received T-LDP status notification message and the local status for the spoke SDPs from the service manager at a 7705 SAR PE complies with the following rules.

When one segment of the pseudowire cross-connect at the S-PE is static while the other is signaled using T-LDP, the S-PE operates much like a T-PE from a signaling perspective and as an S-PE from a data plane perspective. The S-PE signals a label mapping message as soon as the local configuration is complete. The control word C-bit field in the pseudowire FEC is set to the value configured on the static spoke SDP.

When the label mapping for the egress direction is also received from the T-LDP peer, and the information in the FEC matches that of the local configuration, the static-to-dynamic cross-connect is established.

In a static-to-dynamic pseudowire switching service, it is possible for the end nodes of the static pseudowire segment to be misconfigured. In this case, an S-PE or T-PE node may receive packets with the wrong encapsulation. If this happens, an invalid payload might be forwarded over the pseudowire or the SAP respectively.

Furthermore, if the S-PE or T-PE node is expecting the control word in the packet encapsulation, and the received packet arrives with no control word but the first nibble below the label stack is 0x0001, the packet may be mistaken for a VCCV OAM packet and may be forwarded to the CSM. In that case, the CSM will perform a check of the IP header fields. If any of the fields fail the check, the VCCV packet will be discarded.

4.7.4. Pseudowire Switching TLV

Figure 65 shows the format of the pseudowire switching TLV and Table 37 describes the fields.

Figure 65:  Pseudowire Switching TLV 

The following list describes details specific to pseudowire switching point sub-TLVs:

4.8.1. Service Support

The section describes hardware support for the following VLL services:

ATM

ATM VLL service is supported on the following:

Ethernet

Ethernet VLL service is supported on the following:

Frame Relay

Frame relay VLL service is supported on the following:

TDM

TDM VLL service is supported on the following:

HDLC

HDLC VLL service is supported on the following:

IP Interworking

IP interworking VLL service is supported on the following:

Note: MPLS and VLL service over MPLS are not supported on access ports.

4.8.2. SDPs

The most basic SDPs must have the following characteristics:

4.8.3. SAP Encapsulations and Pseudowire Types

The section describes encapsulations and PW types for the following VLL services:

Apipe

ATM VLLs can be configured with both endpoints (SAPs) on the same router or with the two endpoints on different routers. In the latter case, Pseudowire Emulation Edge-to-Edge (PWE3) signaling can be used to establish a pseudowire between the devices, allowing ATM traffic to be tunneled through an MPLS or IP network.

Note: ATM SAP-to-SAP connections are not supported for pseudowire packets using N-to-1 cell mode encapsulation where N > 1.

As an alternative to signaled pseudowires, manual configuration of pseudowires is also supported.

The Apipe service supports virtual trunking, VP connections, and VC connections, which are identified by specifying the vc-type when provisioning the Apipe. When vc-type is atm-cell, ATM transparent cell transport mode is used for VT connections. The N-to-1 cell transport mode is supported for VC and VP services (see ATM PWE3 N-to-1 Cell Mode Encapsulation). For VCCs, the value of N can be 1 (N = 1) or greater than 1 (N > 1). The value of N is always 1 for VPCs.

The supported PW service types are 0x0009 (for ATM N-to-1 VCC cell mode, where N is ≥ 1), 0x000A (for ATM N-to-1 VPC cell mode, where N = 1) and 0x0003 (for ATM transparent cell transport mode). Refer to RFC 4717 and RFC 4446 for more information.

Cpipe

Cpipe service supports CESoPSN and SAToP encapsulation over MPLS or GRE tunnels to connect to the far-end circuit. Cpipes support SAP-to-SAP and SAP-to-spoke SDP binding with a default service MTU of 1514 bytes.

The supported PW service types are 0x0011 (SAToP E1), 0x0012 (SAToP T1), 0x0013 (SAToP E3), 0x0014 (SAToP T3), 0x0015 (CESoPSN basic mode), and 0x0017 (CESoPSN TDM with CAS).

Epipe

Epipe service is designed to carry Ethernet frame payloads, so it can provide connectivity between any two SAPs on different nodes that pass Ethernet frames. The following SAP encapsulations are supported on the 7705 SAR Epipe service:

While different encapsulation types can be used at either end, encapsulation mismatching can occur if the encapsulation behavior is not understood by connecting devices and if those devices are unable to send and receive the expected traffic. For example, if the encapsulation type on one side of the Epipe is dot1q and the other is null, tagged traffic received on the null SAP will be double-tagged when it is transmitted out of the dot1q SAP.

The supported PW service types are 0x0004 (Ethernet tagged mode), and 0x0005 (Ethernet raw).

Fpipe

Fpipe service supports frame relay services over an MPLS PSN. MPLS label switched paths—also referred to as MPLS tunnels—are used to forward PW packets between two PEs.

The 7705 SAR supports one-to-one mapping of FR VCs to PWs. An MPLS tunnel can contain several PWs, but each PW encapsulates the traffic of one FR VC.

Fpipes support SAP-to-SAP and SAP-to-spoke SDP binding.

Fpipe service supports the 0x0019 (frame relay DLCI) PW service type.

Hpipe

The 7705 SAR supports many-to-one mapping of HDLC PDUs to PWs, which is also known as port mode encapsulation.The Hpipe provides port-to-port transport of HDLC-encapsulated traffic. The HDLC PDU is transported from PE port to PE port in its entirety, including the HDLC address and control fields, but excluding HDLC flags and the FCS.

Hpipes support SAP-to-SAP and SAP-to-spoke SDP binding.

Hpipe service supports the 0x0006 (HDLC) PW service type.

Ipipe

Ipipe service supports Ethernet null, Ethernet dot1q, Ethernet qinq, IPCP, PPP/MLPPP, FR, and cHDLC SAP encapsulation over IP or MPLS. Ipipes support SAP-to-SAP and SAP-to-spoke SDP binding with a default service MTU of 1500 bytes.

Ipipe service supports 0x000B (IP Layer 2 Transport) PW service type.

4.8.4. ATM PWE3 N-to-1 Cell Mode Encapsulation

The 7705 SAR supports N-to-1 cell mode encapsulation for ATM VPCs and VCCs (per RFC 4717), where N represents the number of VCs or VPs that can be multiplexed onto a single ATM VLL.

For VCCs, N is a configurable value where N can be greater than or equal to 1 (N ≥ 1). VCC cell mode supports the 0x0009 (ATM N-to-1 VCC Cell Mode) PW service type. The N > 1 cell mode encapsulation enables service providers to multiplex multiple ATM VCs onto a single VLL to optimize the use of PWs in the network, to reduce the associated overhead of maintaining the PWs, and to increase the bandwidth available to transport user data. N > 1 cell mode encapsulation is implemented on the 7705 SAR using SAP aggregation groups. See SAP Aggregation Groups for more information about how to configure a SAP aggregation group.

For VPCs, N is not user-configurable and must be equal to 1 (N = 1). VPC cell mode supports the 0x000A (ATM N-to-1 VPC Cell Mode) PW service type.

In N-to-1 mode, OAM cells are transported through the VLL in the same way as any other cell.

An optional control word (CW) is supported for ATM VLLs. See Pseudowire Control Word for more information.

Figure 66 shows the structure of an N-to-1 cell mode frame.

Figure 66:  N-to-1 Cell Mode Encapsulation 

4.8.4.1. N-to-1 Cell Mode Encapsulation (N = 1)

The following sections describe ATM cell mode encapsulation where N = 1.

4.8.4.1.1. Deployment Scenario for N = 1 Cell Mode Encapsulation

In a typical network multiple cell sites are aggregated to individual 7705 SAR nodes. Each cell site has one or more Node Bs. The Node Bs are typically from the same vendor and deployed on a regional basis, and it is common for carriers to simplify provisioning by using the same VPI and VCI values for specific types of traffic handled at different cell sites.

Such a scenario applies, for example, to a service provider that deploys multiple Node Bs in a specific region to support voice, low-speed, and high-speed packet data. In this case, the 7705 SAR grooms the three traffic types from each of the node Bs onto the network. Each traffic type is transported over a dedicated VC as follows:

1. circuit-switched VC for voice services
2. packet-switched VC for low-bandwidth data services
3. HSxPA VC for high-bandwidth data services

In this N-to-1 scenario where N = 1, three VCs and three ATM PWs are required for each Node B.

4.8.4.1.2. VPI/VCI Translation (N = 1)

Before traffic from different cell sites can be switched to an RNC, VPI and VCI translation may be required in order to uniquely identify the site and the far-end equipment. If overlapping VPI/VCI values, as described in Deployment Scenario for N = 1 Cell Mode Encapsulation, are not used, VPI/VCI translation is not necessary.

The endpoints of a PWE3 N-to-1 cell mode ATM VLL can be:

1. ATM VCs—VPI/VCI translation is supported
   In this case, when the VPI/VCI used at the endpoints (NodeB endpoint and RNC endpoint) are different, the VPI/VCI value can be modified at the endpoint of the far-end PE node, before the cells are switched to the ATM interface.
2. ATM VPs—VPI translation is supported (the VPI at each endpoint need not be the same, but the original VCI will be maintained)
   In this case, when the VPI and VCI used at the endpoints are different, only the VPI can be modified at the endpoint (VPI can only be changed by the far-end PE node, before the cells are switched to the ATM interface).

See VPI/VCI Translation for SAP Aggregation Group Members (N>1) for information about how VPI/VCI translation functions with N > 1 mode.

4.8.4.1.3. Cell Concatenation (N = 1)

The 7705 SAR supports the concatenation of ATM VP and VC cells into a pseudowire packet payload. Cells are packed on ingress to the VLL and unpacked on egress.

The number of cells in the payload of a single VLL packet is user-configurable, which ensures proper transport of traffic sensitive to delay and jitter. For example, for voice traffic in 3G/WCDMA, delay is a crucial factor and the time spent for concatenation should be minimized. The payload is extremely delay-sensitive and should be transported with only a small amount of bandwidth optimization.

In all cases, the number of cells in a VLL packet must be less than the MTU size, where the MTU maximum is 1514 bytes and the maximum N-to-1 mode payload is 29 cells (52 ATM bytes per cell (no HEC byte)).

While cells are being packed, the concatenation process may be terminated and the packet sent by any one of the following conditions. Each condition has a configurable attribute associated with it:

1. reaching a maximum number of cells per packet
2. expiring of a timer
3. changing of the cell loss priority (CLP) bit

The CLP bits are untouched, even if VPI/VCI translation occurs at egress.

Note: Configuring the attributes that provide the best compromise between minimizing delay (low number of cells concatenated) and maximizing bandwidth (high number of cells concatenated) requires careful planning.

4.8.4.1.4. QoS and Traffic Descriptor Profiles (N = 1)

QoS is configured on individual SAPs at ingress and egress using the SAP configuration hierarchy.

Individual SAPs support VC-based characteristics that include ingress and egress ATM (Layer 2) traffic descriptor profiles. Apipe rate-limiting on egress is controlled by the traffic-descriptor profile, not the QoS policy queue rates.

4.8.4.1.5. OAM (N = 1)

The ATM PW N-to-1 mode supports OAM operations in non-terminating mode for N = 1 services. The far-end PE node translates the incoming VPI/VCI values of the ATM OAM cells in the same way as the user data cells.

4.8.4.2. N-to-1 Cell Mode Encapsulation (N > 1)

The following sections describe ATM cell mode encapsulation where N > 1.

4.8.4.2.1. Deployment Scenario for N > 1 Cell Mode Encapsulation

N-to-1 mode where N >1 can be used by wireless service providers to optimize the PWs that are deployed in a network. By multiplexing the VCs of the same type that derive from different ATM base stations (Node Bs), the number of PWs can be decreased to one PW per service type.

With N-to-1 cell mode encapsulation where N > 1 traffic with the same characteristics and QoS requirements (such as delay, jitter, and loss) can be carried over the payload of a single ATM PW.

Figure 67 shows a typical network where N > 1 is deployed.

Figure 67:  VCC Cell Mode Encapsulation with N > 1  

4.8.4.2.2. PW Optimization (N > 1)

A network that uses a single PW for each type of traffic significantly reduces the number of ATM PWs that need to be configured to groom the traffic from multiple Node Bs. The result is a more efficient network backhaul configuration and traffic management strategy.

4.8.4.2.3. Overhead Optimization (N > 1)

A VC carrying signaling information between a Node B and an RNC must be configured with minimal packetization delay. N-to-1 cell mode encapsulation where N > 1 can be employed to:

1. optimize the overhead associated with ATM PW headers because one PW packet header is used to transport multiple cells
2. improve performance for delay and throughput efficiency

Typically, operators configure packetization delay to be 1 ms. Every 1 ms, an ATM PW packet is required to switch the signaling information from the 7705 SAR to the 7750 SR—regardless of the number of ATM cells that are received to transport signaling information. In most cases, the ATM PW packet carries very few ATM cells.

When signaling VCs from multiple Node Bs are mapped to the same ATM PW in N-to-1 fashion, the number of ATM cells that are received every 1 ms potentially increases. For example, if signaling from five Node Bs is aggregated for each ATM PW, a much larger number of ATM cells can be transported per ATM PW header.

4.8.4.2.4. Cell Concatenation (N > 1)

The maximum N-to-1 mode payload is 29 cells for N-to-1 cell mode where N > 1. This value applies to all of the SAPs that are members of the same SAP aggregation group. When the cell concatenation is configured for a specified number of cells, the 7705 SAR counts the cells it has received from all of the SAPs in the same SAP aggregation group and transmits the ATM PW packet when the limit is reached.

For example, for an ATM N >1 VCC service with four SAPs bound to the same SAP aggregation group, where the maximum number of cells for cell concatenation is set to 10, SAP1 might have 2 cells, SAP2 might have 5 cells, SAP3 might have 0 cells, and SAP4 might have 3 cells.

In all cases, the number of cells in a VLL packet must be less than the MTU size, where the MTU maximum is 1514 bytes and the maximum N-to-1 mode payload is 29 cells (52 ATM bytes per cell (no HEC byte)).

The max-delay configuration also applies at the SAP aggregation group level.

Note: CLP change-based termination of payload concatenation is not supported for N > 1 cell mode.

4.8.4.2.5. OAM (N > 1)

The ATM PW N-to-1 mode supports OAM operations in non-terminating mode for N > 1 services. The 7705 SAR forwards the Layer 2 AIS cells that it receives from the SAP aggregation group SAPs over the PW. The 7705 SAR translates the incoming VPI/VCI values of the AIS cells in the same way as any other type of traffic.

4.8.4.2.6. Hardware Support for N > 1 Cell Mode Encapsulation

The following hardware supports N > 1 cell mode encapsulation:

1. 16-port T1/E1 ASAP Adapter card
2. 32-port T1/E1 ASAP Adapter card
3. 7705 SAR-M (variants with T1/E1 ports)

4.8.4.2.7. SAP Support for N > 1

The SAP aggregation group can include SAPs on:

1. different ATM ports
2. different IMA ports
3. a combination of ATM and IMA ports

Note: All SAPs that are bound to the same N > 1 ATM PW must be configured on the same adapter card. An N > 1 ATM PW cannot span multiple adapter cards.

4.8.5. SAP Aggregation Groups

N > 1 cell mode encapsulation is implemented on the 7705 SAR using SAP aggregation groups. The following sections describe how to configure and manage SAP aggregation groups:

Note: An Apipe can have either regular SAPs or SAPs that belong to SAP aggregation groups, but not both.

See Apipe Service with SAP Aggregation Configuration Commands for more information about the commands and parameters that are required to configure a SAP aggregation group.

4.8.5.1. Configuration

The following section describes the objects required to configure a SAP aggregation group and group members. See VLL Services Configuration Commands for more information.

4.8.5.1.1. Sap-aggregation-group Keyword

The sap-aggregation-group keyword is used to associate multiple SAPs with a single ATM VCC Apipe service. The SAP aggregation group is a high-level object under which general features are defined. These features include accounting, statistics, and the packet layer QoS profile. All common access parameters are configured under the sap-aggregation-group.

4.8.5.1.2. Sap-aggregation-group Group Identifier

The sap-aggregation-group group-id is used for two purposes:

1. to identify a SAP aggregation group. The group-id is an alphanumeric identifier. For example:
        sap-aggregation-group group_id_1
2. to identify a SAP as a member of an aggregation group. SAPs that are to be bound to the same ATM PW payload must be tagged with the same sap-aggregation-group group-id. For example:
        sap 1/2/3.1:3/300 sap-aggregation-group group_id_1

The sap-aggregation-group group-id can be up to 32 alphanumeric characters.

4.8.5.1.3. VPI/VCI Translation for SAP Aggregation Group Members (N>1)

The vcid-translation vpi/vci keyword is an optional configuration item that is used only for SAPs that are members of a SAP aggregation group. The vcid-translation vpi/vci keyword translates the VPI and VCI values of the incoming ATM cells before the cells are mapped to an ATM PW payload. That is, at ingress, the VPI/VCI values for a SAP that is a member of a SAP aggregation group are rewritten by the VPI/VCI values of the vcid-translation keyword.

In the reverse direction, when the 7705 SAR receives the cells with translated VPI/VCI values from its peer (such as a 7750 SR), another translation to SAP-configured VPI/VCI values is required before cells are sent to the SAP.

The vcid-translation keyword applies to user and OAM cells. When the vcid-translation keyword is configured, all cells are translated.

If the vcid-translation keyword is not configured for any ATM SAP aggregation group, the ingress VPI/VCI values are retained.

Note: The 7705 SAR performs a check to ensure the uniqueness of the translated VPI/VCI values for all of the SAPs of the same ATM PW service, that is, within the same SAP aggregation group. If there are duplicate VC identifiers, the status of the VCs are set to operationally down and flagged as ApipeSapVcIdNotUnique. It is the sole responsibility of the user to ensure uniqueness of VPI/VCI values after translation.

4.8.5.2. QoS and Traffic Descriptor Profiles (N > 1)

Packet layer, N > 1 ATM PW QoS functions are configured using the SAP aggregation group hierarchy. The QoS profiles for ingress and egress are configurable for each N > 1 service. Any existing QoS profile can be applied to an N > 1 service. The QoS policy determines the QoS offering, including the classification and queuing for the whole PW, irrespective of the number of SAPs that are bound to the aggregated service.

Although a single SAP egress policy is configured for a SAP aggregation group, a separate egress queue is created for each SAP. The MBS and CBS values for each of these egress SAP queues are set to equal the MBS and CBS values configured in the SAP egress QoS policy for the SAP aggregation group. The SAP egress QoS policy causes n times the values of the CBS buffers to be committed, where n is the number of SAPs in the SAP aggregation group. Refer to the 7705 SAR Quality of Service Guide for more information.

Note: ATM layer policing on individual SAPs within a SAP aggregation group is not supported. You cannot apply ATM QoS traffic descriptor profiles on ingress to a SAP in a SAP aggregation group; the profile is set to the default (1).

Rate-limiting on egress for aggregated SAPs is controlled by the ATM traffic-descriptor profile, not the QoS policy queue rates. Each SAP that is a member of a SAP aggregation group has its own egress Layer 2 traffic descriptors. These descriptors are used for shaping and scheduling priority at egress.

4.8.6. QoS Policies

When applied to 7705 SAR Apipe, Cpipe, Epipe, and Ipipe services, service ingress QoS policies only create the unicast queues defined in the policy.

With Apipe, Cpipe, Epipe, and Ipipe services, egress QoS policies function as with other services where the class-based queues are created as defined in the policy.

Both Layer 2 and Layer 3 criteria can be used in the QoS policies for traffic classification in a Cpipe, Epipe, or Ipipe service. QoS policies on Apipes cannot perform any classification.

4.8.7. IP Filter Policies

The 7705 SAR supports IPv4 and IPv6 filter policies on the following entities:

Configuration and assignment of IP filter policies is similar for network interfaces, IES management SAPs, Ethernet and IP pseudowire SAPs, VPRN and IES SAPs and spoke SDPs, and VPLS SAPs and SDPs (spoke and mesh). Refer to the 7705 SAR Router Configuration Guide, “Filter Policies”, for information on configuring IP filters.

4.8.8. MTU Settings

There are several MTU values that must be set properly for a VLL service (Apipe, Cpipe, Epipe, Fpipe, Hpipe, or Ipipe) to work from end to end. Figure 68 locates the MTU point for each value. Table 38 describes the MTU points. The MTU points are:

In order for a VLL service to be declared “up” without any MTU-related error messages, the following rule must be true:

        SAP MTU ≥ Service MTU ≤ Path MTU

Figure 68:  MTU Points on the 7705 SAR 

Table 39 displays the default, minimum, and maximum service MTU values for Ethernet ports. These values are dependent upon the port type, mode, encapsulation type, and service type.

Table 40 and Table 41 aid in calculating MTU values for various configurations and operating scenarios.

For more information on port MTU, refer to “MTU Configuration Guidelines” in the 7705 SAR Interface Configuration Guide.

Note: In order to accommodate current and future services (including overhead), the MTU values for Gigabit Ethernet and PPP/MLPPP ports have the default value set to 1572 bytes. For 10/100 Ethernet ports, the MTU value is set to 1514 or 1518 or 1522 bytes, depending on the encapsulation setting (null or dot1q or qinq). The default service MTU value is 1514 bytes; the maximum value is 1522 bytes.