Services Architecture v3.2 Lab Guide
Services Architecture v3.2 Lab Guide
LAB SOLUTIONS......................................................................................................................................................91
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 2/122
LIST OF FIGURES
3/122
LIST OF TABLES
Table 1-1 Lab 1 Command List.........................................................................................................................6
Table 1-2 IP Interface Addresses.......................................................................................................................7
Table 2-1 Lab 2 Command List.......................................................................................................................12
Table 3-1 VPLS Service Commands...............................................................................................................18
Table 6-1 Mirror Service Command List ........................................................................................................47
Table 8-1 VPLS with Spoke SDP Commands ................................................................................................59
Table 9-1 IPv4 Addresses................................................................................................................................63
Table 9-2 Customer Provisioning Parameters .................................................................................................66
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 4/122
LAB 1 IP/MPLS Infrastructure
Objectives:
Verify the preconfigured IP addressing and physical operation
Configure IGP routing and MPLS for the service provider network, connected according to the
following diagram:
Labs 1-10:
Routers R1 through R4 are used as P routers
Routers R5 through R8 are used as PE routers
Routers R9 through R12 are used as CE routers
5/122
Syntax:
Commands required for this exercise are found in Table 1-1. Use the ‘?’ character for help and to
explore all command line options. Other commands may also be used, including those from previous
courses.
2. Check the port MTU for all the network ports. If any are set to 1514, make sure they are set to at
least 1536 to support the Layer 2 services we will configure later.
3. Verify the preconfigured interfaces. The IP addresses should be similar to those shown in Table 1-2,
unless you are given a different address plan by your instructor.
4. Configure the service provider network with IS-IS as the routing protocol. Configure all routers as
Level 1/2 capable with point-to-point interfaces. Put each router in area x, where x is your pod
number.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 6/122
Pod Number Router Port Interface IP Address
name
Pod 1 R5 --- System 10.10.10.5/32
toR1 10.1.5.5/24
R1 --- System 10.10.10.1/32
toR3 10.1.3.1/24
toR2 10.1.2.1/24
7/122
Verification:
1. Verify that all required interfaces are active and operational.
===============================================================================
Interface Table (Router: Base)
===============================================================================
Interface-Name Adm Opr(v4/v6) Mode Port/SapId
2. Verify that the routing tables on the routers of your pod have all internal networks listed.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 8/122
*A:R1# show router route-table
===============================================================================
Route Table (Router: Base)
===============================================================================
Dest Prefix Type Proto Age Pref
Next Hop[Interface Name] Metric
-------------------------------------------------------------------------------
10.1.2.0/24 Local Local 00h44m53s 0
toR2 0
10.1.3.0/24 Local Local 00h44m31s 0
toR3 0
3. Verify in LDP that you have active label bindings for all eight system interface addresses.
9/122
*A:R1# show router ldp bindings active
===============================================================================
Legend: (S) - Static
===============================================================================
LDP Prefix Bindings (Active)
===============================================================================
Prefix Op IngLbl EgrLbl EgrIntf/LspId EgrNextHop
-------------------------------------------------------------------------------
10.10.10.1/32 Pop 131071 -- -- --
10.10.10.2/32 Push -- 131071 1/1/2 10.1.2.2
10.10.10.2/32 Swap 131070 131071 1/1/2 10.1.2.2
Notes
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 10/122
LAB 2 Distributed Epipe Service
Objective:
Configure two epipe services.
11/122
Lab 2 command list
configure service customer <customer-id> create
configure service epipe <service-id> customer <customer-id> create
configure service epipe <service-id> sap <sap-id> [create]
configure service sdp <sdp-id> mpls create
configure service sdp far-end <ip address>
configure service sdp lsp <lsp-name>
Phase I
1. On the CE routers, configure the network port towards the PE router for dot1q encapsulation. In
the lab exercise to follow, multiple IP interfaces will be configured using a different VLAN ID for
each one.
2. On the CE router, configure a first interface towards your PE router with an IP address of
192.168.10.x/24 (where x is your pod number) using a VLAN ID of 10.
3. On your PE router, create an SDP using LDP to your diagonal pod (pods 1 and 4 are diagonal and
pods 2 and 3 are diagonal).
4. Create an epipe service on your PE router with a SAP for the epipe on the port facing your CE
router. You will have to change this port to access mode. Be sure to use dot1q encapsulation on
your SAP and the same VLAN ID of 10.
6. Stop here and wait until the instructor has introduced Phase II before proceeding.
Phase II
1. Switch routers with your pod partner so that the person who configured the CE router in Phase I
will configure the PE router in Phase II, and vice versa.
2. Configure a second interface on the CE router similar to the first, with the address
192.168.20.x/24, except this time the VLAN ID will be 20.
3. Create a second epipe service to your diagonal pod using VLAN 20.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 12/122
Verification:
The epipe service should be operational at this time. Use the following verification steps to ensure the
epipe is operational and to discover useful information about the service and the associated LSPs.
Note: the sample verification screen shots shown below are only for one epipe service on pod 1. Actual
screen shots will vary for each pod.
1. Use the show service SDP command to ensure the SDP is operational
==============================================================================
Service Destination Point (Sdp Id : 8)
==============================================================================
SdpId Adm MTU Opr MTU IP address Adm Opr Deliver Signal
------------------------------------------------------------------------------
8 0 1556 10.10.10.8 Up Up LDP TLDP
==============================================================================
2. Use the show service sap-using command to verify the correct Service ID is being used and to
ensure that the SAP is both administratively and operationally UP.
===============================================================================
Service Access Points
===============================================================================
PortId SvcId Ing. Ing. Egr. Egr. Adm Opr
QoS Fltr QoS Fltr
-------------------------------------------------------------------------------
1/1/2:10 10 1 none 1 none Up Up
1/1/2:20 20 1 none 1 none Up Up
-------------------------------------------------------------------------------
Number of SAPs : 2
-------------------------------------------------------------------------------
3. Use the show service id svc-id base command to verify that the epipe is UP and to confirm the
Customer ID, SAP ID and Spoke ID.
13/122
*A:R5# show service id 10 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 10 Vpn Id : 0
Service Type : Epipe
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/10/2012 21:03:33
Last Mgmt Change : 01/10/2012 21:00:02
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sap:1/1/2:10 q-tag 1518 1518 Up Up
sdp:8:10 S(10.10.10.8) Spok 0 1556 Up Up
===============================================================================
4. Use the show service id svc-id all command to display more detailed information about your
service. This information can be used for troubleshooting as well as statistics-gathering. This
command will provide you with the following information:
Service type
Service Destination Point (SDP)
LSP associated with the SDP
Number of SDPs
SAPs are associated with this service
Encapsulation type used
SAP statistics
Queuing statistics
5. Use the show service id svc-id labels command to see the inner Martini service labels and to
ensure that the Service ID is being mapped to the correct SDP binding.
===============================================================================
Martini Service Labels
===============================================================================
Svc Id Sdp Binding Type I.Lbl E.Lbl
-------------------------------------------------------------------------------
10 8:10 Spok 131063 131063
-------------------------------------------------------------------------------
Number of Bound SDPs : 1
-------------------------------------------------------------------------------
6. Use the show router ldp bindings command to ensure that LDP is operational, and to ensure
that you are seeing the LDP binding for the service peer.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 14/122
*A:R5# show router ldp bindings
===============================================================================
LDP LSR ID: 10.10.10.5
===============================================================================
Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn
S - Status Signaled Up, D - Status Signaled Down
E - Epipe Service, V - VPLS Service, M - Mirror Service
A - Apipe Service, F - Fpipe Service, I - IES Service, R - VPRN service
P - Ipipe Service, WP - Label Withdraw Pending, C - Cpipe Service
TLV - (Type, Length: Value)
===============================================================================
===============================================================================
LDP Service FEC 128 Bindings
===============================================================================
Type VCId SvcId SDPId Peer IngLbl EgrLbl LMTU RMTU
-------------------------------------------------------------------------------
E-Eth 10 10 8 10.10.10.8 131063U 131063S 1500 1500
E-Eth 20 20 8 10.10.10.8 131062U 131062S 1500 1500
-------------------------------------------------------------------------------
No. of VC Labels: 2
===============================================================================
LDP Service FEC 129 Bindings
===============================================================================
AGI SAII TAII
Type SvcId SDPId Peer IngLbl EgrLbl LMTU RMTU
-------------------------------------------------------------------------------
No Matching Entries Found
===============================================================================
7. Ping from your CE router to the CE router of your diagonally connected pod.
Note: In order to ping successfully, both CE routers have to be members of the same subnet.
15/122
*A:R9# ping 192.168.10.4
PING 192.168.10.4 56 data bytes
64 bytes from 192.168.10.4: icmp_seq=1 ttl=64 time=7.33ms.
64 bytes from 192.168.10.4: icmp_seq=2 ttl=64 time=4.42ms.
64 bytes from 192.168.10.4: icmp_seq=3 ttl=64 time=4.37ms.
64 bytes from 192.168.10.4: icmp_seq=4 ttl=64 time=4.37ms.
64 bytes from 192.168.10.4: icmp_seq=5 ttl=64 time=4.22ms.
1. You can see labels for the system address of P routers as well as PE routers by using the show router
ldp bindings command. A label is required for the PE router because it is the end of the transport
tunnel. Why do P routers need labels as well?
_______________________________________________________________________________
2. The show router ldp bindings command shows the LMTU and RMTU for the service. What is the
meaning of these values? Why is the value 1500?
_______________________________________________________________________________
3. CE1, CE2, CE3 and CE4 are all in the same subnet. Why is it possible to ping CE4 from CE1, but not
from CE2 or CE3?
_______________________________________________________________________________
Notes
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 16/122
LAB 3 VPLS Service
Objective:
Configure a Virtual Private LAN Service (VPLS).
17/122
Lab 3-1 Command List
configure service customer <customer-id> create
configure service vpls <service-id> customer <customer-id> create
configure service vpls description
configure port <port-id> ethernet mode access
configure service vpls <service-id>
configure service vpls sap <sap-id> create
1. Ensure that you have active LDP label bindings for all four PE routers within the domain.
2. Create a full mesh of Service Distribution Paths (SDP) between all PE routers. You must create an
SDP from your router to every other router that is part of the VPLS; in other words, create an SDP to
each other PE router within the domain. In this lab, each of the other PE routers is part of the VPLS.
3. Create a Customer ID of 200. Use Customer 200 to create a VPLS that has a Service ID of 200.
4. Verify that the PE port connecting to the CE is configured as an access port with dot1q
encapsulation.
5. Add a SAP to the VPLS service. Use dot1q encapsulation with VLAN ID of 30 for the SAP.
8. Create a common subnet for all CE routers. Use subnet 192.168.30.0/24 as the common subnet and
configure the CE network interface for VLAN ID 30 with address 192.168.30.x/24, where x is your
pod number. You should be able to ping all other CE routers on this common subnet once all the
other students have completed their configurations.
Verification
1. Use the show service id 200 base command to verify that the service and all components are
operational.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 18/122
*A:R5# show service id 200 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 200 Vpn Id : 0
Service Type : VPLS
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 200
Last Status Change: 01/10/2012 23:08:15
Last Mgmt Change : 01/10/2012 23:08:15
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sap:1/1/2:30 q-tag 1518 1518 Up Up
sdp:6:200 M(10.10.10.6) Mesh 0 1556 Up Up
sdp:7:200 M(10.10.10.7) Mesh 0 1556 Up Up
sdp:8:200 M(10.10.10.8) Mesh 0 1556 Up Up
===============================================================================
2. Use the show service id 200 all command and compare the results to show service id 200 base.
3. Use the show service fdb-mac command. How many MAC addresses are in the table? Explain.
===============================================================================
Service Forwarding Database
===============================================================================
ServId MAC Source-Identifier Type Last Change
Age
-------------------------------------------------------------------------------
No Matching Entries
-------------------------------------------------------------------------------
No. of Entries: 0
-------------------------------------------------------------------------------
Legend: L=Learned; P=MAC is protected
4. Use the ping command to ensure that your CE router can ping the other CE routers.
19/122
*A:R9# ping 192.168.30.4
PING 192.168.30.4 56 data bytes
64 bytes from 192.168.30.4: icmp_seq=1 ttl=64 time=10.0ms.
64 bytes from 192.168.30.4: icmp_seq=2 ttl=64 time=3.92ms.
64 bytes from 192.168.30.4: icmp_seq=3 ttl=64 time=4.49ms.
64 bytes from 192.168.30.4: icmp_seq=4 ttl=64 time=4.56ms.
64 bytes from 192.168.30.4: icmp_seq=5 ttl=64 time=4.73ms.
===============================================================================
Service Forwarding Database
===============================================================================
ServId MAC Source-Identifier Type Last Change
Age
-------------------------------------------------------------------------------
200 7a:4c:01:01:00:02 sap:1/1/2:30 L/60 01/10/2012 23:30:03
200 7a:4f:01:01:00:02 sdp:8:200 L/60 01/10/2012 23:30:03
-------------------------------------------------------------------------------
No. of Entries: 2
-------------------------------------------------------------------------------
Legend: L=Learned; P=MAC is protected
===============================================================================
a) Use the show port <port-id> command on your CE router to find the MAC address of your CE
router interface and compare that MAC address to the MAC address found in step 5.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 20/122
*A:R9# show port 1/1/2
===============================================================================
Ethernet Interface
===============================================================================
Description : 1-Gig Ethernet SFP
Interface : 1/1/2 Oper Speed : 1 Gbps
Link-level : Ethernet Config Speed : N/A
Admin State : up Oper Duplex : full
Oper State : up Config Duplex : N/A
Physical Link : Yes MTU : 1578
Single Fiber Mode : No
===============================================================================
Traffic Statistics
===============================================================================
Input Output
-------------------------------------------------------------------------------
Octets 1196 1516
Packets 12 17
Errors 0 0
===============================================================================
b) Ask the person in the corresponding pod to confirm their CE router MAC address and
compare it to the MAC address discovered in step 6 above.
21/122
*A:R8# show service fdb-mac
===============================================================================
Service Forwarding Database
===============================================================================
ServId MAC Source-Identifier Type Last Change
Age
-------------------------------------------------------------------------------
200 7a:4c:01:01:00:02 sdp:5:200 L/165 01/11/2012 00:30:17
200 7a:4f:01:01:00:02 sap:1/1/2:30 L/165 01/11/2012 00:30:17
-------------------------------------------------------------------------------
No. of Entries: 2
7. At this point you should be able to ping all CE devices in the network. If not, troubleshoot the
problem until this is complete.
8. Use the show service fdb-mac command to confirm that the MAC forwarding database now
contains all expected entries.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 22/122
*A:R5# show service fdb-mac
===============================================================================
Service Forwarding Database
===============================================================================
ServId MAC Source-Identifier Type Last Change
Age
-------------------------------------------------------------------------------
200 7a:4c:01:01:00:02 sap:1/1/2:30 L/60 01/10/2012 23:41:20
200 7a:4d:01:01:00:02 sdp:6:200 L/75 01/10/2012 23:41:20
200 7a:4e:01:01:00:02 sdp:7:200 L/75 01/10/2012 23:41:28
200 7a:4f:01:01:00:02 sdp:8:200 L/60 01/10/2012 23:30:03
-------------------------------------------------------------------------------
9. Confirm the CE routers MAC addresses and compare them to the MAC addresses discovered in step 8
above.
23/122
Questions
1. What command can you use to find the service type of a service?
______________________________________________________
Notes
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 24/122
Exercise II
This exercise will explore some of the possibilities for SAP encapsulation.
1. Use ping to verify that you have connectivity between CE routers over VPLS service 200.
2. Create a new subnet, 192.168.50.0/24, on the CE devices by creating new IP interfaces using the
address 192.168.50.x/24, where x is your pod number. Use VLAN ID 50 for the interfaces.
25/122
*A:R9# show router interface
===============================================================================
Interface Table (Router: Base)
===============================================================================
Interface-Name Adm Opr(v4/v6) Mode Port/SapId
IP-Address PfxState
-------------------------------------------------------------------------------
system Up Up/Down Network system
10.10.10.9/32 n/a
toR5-1 Up Up/Down Network 1/1/2:10
192.168.10.1/24 n/a
toR5-2 Up Up/Down Network 1/1/2:20
192.168.20.1/24 n/a
3. Check whether you have connectivity between CE devices on the new subnet.
5. Check whether you can ping between CE devices on both VLAN 30 and VLAN 50.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 26/122
*A:R9# ping 192.168.30.2
PING 192.168.30.2 56 data bytes
64 bytes from 192.168.30.2: icmp_seq=1 ttl=64 time=4.27ms.
64 bytes from 192.168.30.2: icmp_seq=2 ttl=64 time=4.54ms.
64 bytes from 192.168.30.2: icmp_seq=3 ttl=64 time=5.35ms.
64 bytes from 192.168.30.2: icmp_seq=4 ttl=64 time=5.24ms.
64 bytes from 192.168.30.2: icmp_seq=5 ttl=64 time=5.83ms.
6. After pinging the remote CE devices, examine the FDB for VPLS service 200.
===============================================================================
Service Forwarding Database
===============================================================================
ServId MAC Source-Identifier Type Last Change
Age
-------------------------------------------------------------------------------
200 7a:4c:01:01:00:02 sap:1/1/2:* L/0 01/11/2012 20:18:50
200 7a:4d:01:01:00:02 sdp:6:200 L/0 01/11/2012 19:57:50
200 7a:4e:01:01:00:02 sdp:7:200 L/0 01/11/2012 19:57:59
200 7a:4f:01:01:00:02 sdp:8:200 L/15 01/11/2012 20:25:42
-------------------------------------------------------------------------------
No. of Entries: 4
-------------------------------------------------------------------------------
27/122
Questions
2. If the port was set to null encapsulation, how would you define the SAP? What would happen to
tagged traffic on this SAP?
3. If the access port encapsulation was changed to qinq on the PE router, what changes would be
required in the services previously configured to make them still work? Are there any changes
required on the CE router?
Notes
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 28/122
LAB 4 Spoke Termination to a VPLS
Objective:
Configure an epipe spoke that terminates in a VPLS.
29/122
Exercise
In this exercise you will configure a second VPLS with spokes terminating in the VPLS. The routers that
were acting as the P routers in the previous exercises will act as the PE routers for this VPLS. The
spokes will connect the access routers (former PE routers) to the VPLS.
1. Create a full mesh of Service Distribution Paths (SDPs) between all PE routers (formerly P routers).
2. Create a Customer ID of 300 and associate it with the VPLS service when you create the service.
Use a VPLS Service ID of 300 to create the VPLS on your PE router.
4. On your PE router, create an SDP to your access router. Bind that SDP to your VPLS as a spoke SDP.
6. On the access router, create Customer ID 300 and create an epipe service. Bind the SDP to the
epipe as a spoke SDP. Add a SAP to the epipe service using dot1q encapsulation and VLAN ID of 40.
8. Create a new common subnet for the CE routers. Use subnet 192.168.40.0/24 as the common
subnet and configure the CE network interface for VLAN ID 40 with an address of 192.168.40.x/24,
where x is your pod number. You should be able to ping all other CE routers on this common subnet
once all the other students have completed their configurations.
Verification
1. Use the show service id base command on the epipe and VPLS to verify that the service and all
components are operational.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 30/122
*A:R1# show service id 300 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 300 Vpn Id : 0
Service Type : VPLS
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 300
Last Status Change: 01/11/2012 23:08:18
Last Mgmt Change : 01/11/2012 23:06:18
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sdp:2:300 M(10.10.10.2) Mesh 0 1556 Up Up
sdp:3:300 M(10.10.10.3) Mesh 0 1556 Up Up
sdp:4:300 M(10.10.10.4) Mesh 0 1556 Up Up
sdp:5:300 S(10.10.10.5) Spok 0 1556 Up Up
===============================================================================
===============================================================================
Service Basic Information
===============================================================================
Service Id : 300 Vpn Id : 0
Service Type : Epipe
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 300
Last Status Change: 01/11/2012 17:28:47
Last Mgmt Change : 01/11/2012 17:28:47
Admin State : Up Oper State : Up
MTU : 1514
Vc Switching : False
SAP Count : 1 SDP Bind Count : 1
Per Svc Hashing : Disabled
Force QTag Fwd : Disabled
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sap:1/1/2:40 q-tag 1518 1518 Up Up
sdp:1:300 S(10.10.10.1) Spok 0 1556 Up Up
===============================================================================
2. Use the show service id all command if you need more information to troubleshoot the service.
31/122
3. Use the show service fdb-mac command on the PE router and on the access router. Compare the
results.
===============================================================================
Service Forwarding Database
===============================================================================
ServId MAC Source-Identifier Type Last Change
Age
-------------------------------------------------------------------------------
===============================================================================
Service Forwarding Database
===============================================================================
ServId MAC Source-Identifier Type Last Change
Age
-------------------------------------------------------------------------------
No Matching Entries
-------------------------------------------------------------------------------
No. of Entries: 0
-------------------------------------------------------------------------------
Legend: L=Learned; P=MAC is protected
===============================================================================
4. Use the ping command to ensure that your CE router can ping the other CE routers.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 32/122
*A:R9# ping 192.168.40.2
PING 192.168.40.2 56 data bytes
64 bytes from 192.168.40.2: icmp_seq=1 ttl=64 time=9.45ms.
64 bytes from 192.168.40.2: icmp_seq=2 ttl=64 time=4.64ms.
64 bytes from 192.168.40.2: icmp_seq=3 ttl=64 time=4.56ms.
64 bytes from 192.168.40.2: icmp_seq=4 ttl=64 time=4.87ms.
64 bytes from 192.168.40.2: icmp_seq=5 ttl=64 time=4.79ms.
5. Use the show service fdb-mac command to confirm that the MAC forwarding database now
contains entries.
===============================================================================
Service Forwarding Database
===============================================================================
ServId MAC Source-Identifier Type Last Change
Age
-------------------------------------------------------------------------------
300 7a:4c:01:01:00:02 sdp:5:300 L/60 01/11/2012 23:46:46
300 7a:4d:01:01:00:02 sdp:2:300 L/135 01/11/2012 23:46:46
300 7a:4e:01:01:00:02 sdp:3:300 L/630 01/11/2012 23:47:06
300 7a:4f:01:01:00:02 sdp:4:300 L/630 01/11/2012 23:47:06
-------------------------------------------------------------------------------
No. of Entries: 4
-------------------------------------------------------------------------------
Legend: L=Learned; P=MAC is protected
6. Use the show router ldp bindings command on the PE and access routers to identify the transport
and service labels used to carry a customer PDU from one access router to another. Identify the
label operations and label values used for each hop.
33/122
*A:R5# show router ldp bindings
===============================================================================
LDP LSR ID: 10.10.10.5
===============================================================================
Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn
S - Status Signaled Up, D - Status Signaled Down
E - Epipe Service, V - VPLS Service, M - Mirror Service
A - Apipe Service, F - Fpipe Service, I - IES Service, R - VPRN service
P - Ipipe Service, WP - Label Withdraw Pending, C - Cpipe Service
TLV - (Type, Length: Value)
===============================================================================
===============================================================================
LDP Service FEC 128 Bindings
===============================================================================
Type VCId SvcId SDPId Peer IngLbl EgrLbl LMTU RMTU
-------------------------------------------------------------------------------
E-Eth 10 10 8 10.10.10.8 131063U 131063S 1500 1500
E-Eth 20 20 8 10.10.10.8 131062U 131062S 1500 1500
V-Eth 200 200 6 10.10.10.6 131061U 131061 1500 1500
V-Eth 200 200 7 10.10.10.7 131060U 131061 1500 1500
V-Eth 200 200 8 10.10.10.8 131059U 131061 1500 1500
E-Eth 300 300 1 10.10.10.1 131058U 131060S 1500 1500
-------------------------------------------------------------------------------
No. of VC Labels: 6
===============================================================================
LDP Service FEC 129 Bindings
===============================================================================
AGI SAII TAII
Type SvcId SDPId Peer IngLbl EgrLbl LMTU RMTU
-------------------------------------------------------------------------------
No Matching Entries Found
===============================================================================
Check egress label for epipe service to 10.10.10.1 and transport tunnel to 10.10.10.1. Service label is
131060, transport label is 131071.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 34/122
*A:R1# show router ldp bindings
===============================================================================
LDP LSR ID: 10.10.10.1
===============================================================================
Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn
S - Status Signaled Up, D - Status Signaled Down
E - Epipe Service, V - VPLS Service, M - Mirror Service
A - Apipe Service, F - Fpipe Service, I - IES Service, R - VPRN service
P - Ipipe Service, WP - Label Withdraw Pending, C - Cpipe Service
TLV - (Type, Length: Value)
===============================================================================
LDP Prefix Bindings
===============================================================================
===============================================================================
LDP Service FEC 128 Bindings
===============================================================================
Type VCId SvcId SDPId Peer IngLbl EgrLbl LMTU RMTU
-------------------------------------------------------------------------------
V-Eth 300 300 2 10.10.10.2 131063U 131063 1500 1500
V-Eth 300 300 3 10.10.10.3 131062U 131063 1500 1500
V-Eth 300 300 4 10.10.10.4 131061U 131063 1500 1500
V-Eth 300 300 5 10.10.10.5 131060U 131058S 1500 1500
-------------------------------------------------------------------------------
No. of VC Labels: 4
===============================================================================
LDP Service FEC 129 Bindings
===============================================================================
AGI SAII TAII
Type SvcId SDPId Peer IngLbl EgrLbl LMTU RMTU
-------------------------------------------------------------------------------
No Matching Entries Found
===============================================================================
35/122
Check egress label for VPLS service to 10.10.10.2 and transport tunnel to 10.10.10.2. Service label is
131063, transport label is 131071.
===============================================================================
LDP LSR ID: 10.10.10.2
===============================================================================
Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn
S - Status Signaled Up, D - Status Signaled Down
E - Epipe Service, V - VPLS Service, M - Mirror Service
A - Apipe Service, F - Fpipe Service, I - IES Service, R - VPRN service
P - Ipipe Service, WP - Label Withdraw Pending, C - Cpipe Service
===============================================================================
LDP Service FEC 128 Bindings
===============================================================================
Type VCId SvcId SDPId Peer IngLbl EgrLbl LMTU RMTU
-------------------------------------------------------------------------------
V-Eth 300 300 1 10.10.10.1 131063U 131063 1500 1500
V-Eth 300 300 3 10.10.10.3 131062U 131062 1500 1500
V-Eth 300 300 4 10.10.10.4 131061U 131062 1500 1500
V-Eth 300 300 6 10.10.10.6 131060U 131058S 1500 1500
-------------------------------------------------------------------------------
No. of VC Labels: 4
===============================================================================
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 36/122
Check egress label for epipe service to 10.10.10.6 and transport tunnel to 10.10.10.6. Service label is
131058, transport label is 131071.
===============================================================================
LDP LSR ID: 10.10.10.6
===============================================================================
Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn
S - Status Signaled Up, D - Status Signaled Down
E - Epipe Service, V - VPLS Service, M - Mirror Service
A - Apipe Service, F - Fpipe Service, I - IES Service, R - VPRN service
P - Ipipe Service, WP - Label Withdraw Pending, C - Cpipe Service
===============================================================================
LDP Service FEC 128 Bindings
===============================================================================
Type VCId SvcId SDPId Peer IngLbl EgrLbl LMTU RMTU
-------------------------------------------------------------------------------
E-Eth 10 10 7 10.10.10.7 131063U 131063S 1500 1500
E-Eth 20 20 7 10.10.10.7 131062U 131062S 1500 1500
V-Eth 200 200 5 10.10.10.5 131061U 131061 1500 1500
V-Eth 200 200 7 10.10.10.7 131060U 131060 1500 1500
V-Eth 200 200 8 10.10.10.8 131059U 131060 1500 1500
E-Eth 300 300 2 10.10.10.2 131058U 131060S 1500 1500
-------------------------------------------------------------------------------
No. of VC Labels: 6
===============================================================================
Verify that the ingress label for epipe service matches egress from 10.10.10.6, and that the ingress
label for transport tunnel matches egress from 10.10.10.6. Service ingress label is 131058, transport
ingress label is 131071.
To summarize, the egress labels used by R5-Access1, R1-PE1 and R2-PE2 are:
37/122
Questions
1. How does the VPLS learn MAC addresses if it does not have any SAPs?
______________________________________________________________
2. Describe the signaling of service labels to create the service between two access routers.
______________________________________________________________
Notes
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 38/122
LAB 5 OAM Tools
Objective:
Explore OAM tools available for managing and troubleshooting service networks.
Exercise I
SDP Ping
SDP Ping performs in-band unidirectional or round-trip connectivity tests on SDPs. The SDP Ping OAM
packets are sent in-band in the tunnel encapsulation, so they will follow the same path as traffic within
the service. The SDP Ping response can be received out-of-band in the control plane, or in-band using
the data plane for a round-trip test.
1. Use the oam sdp-ping command to verify the connectivity to the local service SDP.
Note: This will test the local SDP but does not perform a round-trip test.
39/122
*A:R5# oam sdp-ping 8
Err SDP-ID Info Local Remote
--------------------------------------------------
SDP-ID: 8 N/A
Administrative State: Up N/A
Operative State: Up N/A
Path MTU: 1556 N/A
Response SDP Used: No
IP Interface State: Up
Actual IP Address: 10.10.10.5 10.10.10.8
Expected Peer IP: 10.10.10.8 10.10.10.5
2. Use the oam sdp-ping resp-sdp command to perform a round-trip SDP ping test.
IP Interface State: Up
Actual IP Address: 10.10.10.5 10.10.10.8
Expected Peer IP: 10.10.10.8 10.10.10.5
Forwarding Class be be
Profile Out Out
3. Use the oam sdp-mtu size-inc command to determine the maximum MTU size that your SDP can
support.
Note: The Path MTU Discovery tool enables service providers to get the exact MTU supported
between the service ingress and service termination points (accurate to one byte). It is important to
understand the MTU path end-to-end when provisioning services, especially for VPWS services where
the service must support the ability to transmit the largest customer packet.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 40/122
*A:R5# oam sdp-mtu 8 size-inc 1500 1590 step 10
Size Sent Response
----------------------------
1500 . Success
1510 . Success
1520 . Success
1530 . Success
1540 . Success
1550 . Success
1560 ... Request Timeout
4. Use the oam svc-ping command to verify the operation of your service. Use the control plane to
send and receive the OAM messages.
Alcatel-Lucent’s Service Ping feature provides end-to-end connectivity testing for an individual
service. Service Ping operates at a higher level than the SDP diagnostics in that it verifies an
individual service and not the connection of services carried within an SDP.
Service Ping is initiated from a 7750 SR router to verify round-trip connectivity and delay to the far-
end of the service. Alcatel-Lucent’s implementation functions for both GRE and MPLS tunnels and
tests edge-to-edge parameters.
Note: This version of the Service Ping test uses the control plane to send and receive OAM messages
rather than the data plane.
===============================================================================
Services
===============================================================================
ServiceId Type Adm Opr CustomerId Service Name
-------------------------------------------------------------------------------
10 Epipe Up Up 1
20 Epipe Up Up 1
200 VPLS Up Up 200
300 Epipe Up Up 300
2147483648 IES Up Down 1 _tmnx_InternalIesService
-------------------------------------------------------------------------------
Matching Services : 5
-------------------------------------------------------------------------------
41/122
*A:R5# show service id 10 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 10 Vpn Id : 0
Service Type : Epipe
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/10/2012 21:03:33
Last Mgmt Change : 01/10/2012 21:00:02
Admin State : Up Oper State : Up
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sap:1/1/2:10 q-tag 1518 1518 Up Up
sdp:8:10 S(10.10.10.8) Spok 0 1556 Up Up
===============================================================================
IP Interface State: Up
Actual IP Addr: 10.10.10.5 10.10.10.8
Expected Peer IP: 10.10.10.8 10.10.10.5
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 42/122
Use the oam svc-ping local-sdp remote-sdp command to send the OAM packets over the same path as
the customer traffic.
Note: The SDP Path Used is showing “yes”.
IP Interface State: Up
Actual IP Addr: 10.10.10.5 10.10.10.8
Expected Peer IP: 10.10.10.8 10.10.10.5
43/122
Questions
2. What is the value of the VC-ID? _____________________ Where did it come from? __________
5. What is the state of “SDP Path Used?” ____________ What does this mean? __________________
7. Do the ingress and egress labels have to be the same (as in the example above)? Explain.
__________________________________________________________________________________
Notes
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 44/122
Exercise II
This exercise will explore the use of the oam sdp-mtu command and MTU issues related to a Layer 2
service.
1. In the previous exercise you used the oam sdp-mtu size-inc command to find the maximum MTU
size that your SDP could support. What was the maximum MTU size?
_____________________________
4. Set the MTU to 1514 on the network port of the P router to P router on the diagonal link. Check the
service status, service MTU and the SDP path MTU. What has changed? ________________________
5. Use oam sdp-mtu size-inc to find the maximum MTU size that your SDP now supports. What is this
value? Considering the MPLS encapsulation overhead, does this make sense? ____________________
6. Validate your results by pinging between the CE routers with different size packets.
7. Configure an RSVP LSP using a loose path from your PE router to the diagonally opposite PE router.
You need to enable MPLS on the interfaces.
8. Change the SDP created in Lab 2 to use this LSP instead of LDP. Verify that the LSP and the SDP
come up.
9. How is the path MTU of the SDP different from its previous state? ____________________________
10. Change the LSP to use ADSPEC. This should cause RSVP to signal MTU along the LSP. What is the
path MTU of the SDP with ADSPEC enabled?
11. What is the status of the service and what can you do about it?
_______________________________
12. At the end of this exercise change the port back to its default value.
Notes
45/122
LAB 6 Mirror Service
Objective:
Configure a local and remote mirror service and examine the result on a protocol analyzer.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 46/122
Lab 6 Command List
configure mirror mirror-dest <service-id> create
configure mirror mirror-dest <service-id> sap <sap--id> create
configure mirror mirror-dest <service-id> spoke-sdp <sdp-id:vc-id> create
configure mirror mirror-dest <service-id> remote-source far-end <ip-address>
configure mirror mirror-dest <service-id>no shutdown
In this exercise you will work together to configure local mirror service.
Pod 1 and Pod 3 will be configuring a local mirror service
Pod 2 and Pod 4 will be configuring the IP filters to capture the ICMP packets. In other words,
PE2 and PE4 will be acting as sniffers for traffic on PE1 and PE3 respectively.
1. The following instructions are for creating the local mirror service (Pod 1 and Pod 3)
a) On your PE router, configure port 1/1/3 as the mirror destination. Use Service ID 103.
b) Ensure that the mirror service 103 is enabled and operational.
c) On your PE router, configure the port connected to your CE router as the mirror source
for both egress and ingress traffic.
2. The following instructions are for creating the IP filter (Pod 2 and Pod 4)
a) Create a filter log with a log-id of 100 + your Pod number. For example: Pod 2 will have
a log-id of 102. Use memory as the destination for this filter log.
b) Create an IP filter with a filter-id value that equals your pod number. For example: Pod
2 will have filter-id 2.
c) Configure the IP filter to match packets sent to the CE router across the configured
epipe 10 service. For example, the filter configured on R6-PE2 should be configured to
match packets sent from R9-CE1 to R12-CE4 across epipe 10 service.
d) Create a local epipe service on your PE router; use service id 2000 on PE2, and 4000 on
PE4. Create two SAPs under this service: SAP 1/1/3 and 1/1/2:100.
e) Apply the filter under the ingress of SAP 1/1/3.
Verification:
1. Use the show mirror command to confirm that the mirror service is operational and that it is
bound to the correct source port.
47/122
*A:R5# show mirror mirror-dest 103
===============================================================================
Mirror Service
===============================================================================
Service Id : 103 Type : Ether
Description : (Not Specified)
Admin State : Up Oper State : Up
Forwarding Class : be Remote Sources: No
Slice : 0
Destination SAP : 1/1/3 Egr QoS Policy: 1
-------------------------------------------------------------------------------
Local Sources
2. Use the show debug command to confirm that the correct mirror source is being used.
3. Ping the opposite CE router from your Pod CE router and verify connectivity.
4. The IP filter acting as a sniffer for your pod should capture the ICMP packets. Verify that the
filter has captured the ICMP packets using command show filter log <log-id>.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 48/122
*A:R6# show filter log 102
===============================================================================
Filter Log
===============================================================================
Admin state : Enabled
Description : (Not Specified)
Destination : Memory
Wrap : Enabled
-------------------------------------------------------------------------------
Maximum entries configured : 100
Number of entries logged : 8
2012/03/08 07:28:27 Ip Filter: 2:10 Desc:
SAP: 1/1/3 Direction: Ingress Action: Forward
Src MAC: 7c-6c-01-01-00-02 Dst MAC: 7c-6f-01-01-00-02 EtherType: 0800
49/122
Exercise II – Remote Mirroring
In this exercise you will work together to configure remote mirror service. We will use the epipe
service configured between Pod 1 and Pod 4 and between Pod 2 and Pod 3 to perform remote
mirroring. The mirror source will be configured on PE1. The mirror destination will be configured on
PE4. For this remote mirror service, PE3 will be configured as a sniffer.
For the second remote mirror service between Pod 2 and Pod 3, the mirror source will be on PE3, while
the mirror destination will be configured on PE2; for this mirror service, PE1 will be configured as a
sniffer.
Note: Before you proceed to the step 1, remove the local mirror and local epipe services configured in
exercise I.
1. The following instructions are for creating the mirror source (Pod 1 and Pod 3)
a. Configure a mirror destination. Take note of the Service ID you used for your
destination mirror service.
b. Bind this mirror destination to the SDP used for the epipe to your partner’s PE router in
order to send mirrored traffic over the SDP.
c. Enable the mirror service.
d. Use the debug command to enable a mirror source for both egress and ingress traffic.
Use the same Service ID as used in step a.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 50/122
2. The following instructions are for creating the mirror destination (Pod 2 and Pod 4)
a. Configure a mirror destination Service ID using the same Service ID that was configured in
step 1 above.
b. Configure a remote source on this router by specifying the system address of the source PE
router
c. Bind this mirror destination to the SAP port toward your sniffer router.
d. Enable the destination mirror service.
e. Ensure that the mirror service is enabled and operational.
3. The following instructions are for creating the IP filter (Pod 1 and Pod 3)
a. Create a filter log with a log ID of 100 + your pod number. For example: Pod 3 will have
a log ID of 103. Use memory as the destination for this filter log.
b. Create an IP filter with a filter ID value that equals your Pod number. For example: Pod
3 will have filter ID 3.
c. Configure the IP filter to match packets sent between the CE routers across the
configured epipe 10 service. The sniffer on PE3 should capture the traffic between CE1
and CE4, while the sniffer on PE1 should capture the traffic between CE2 and CE3.
d. Create a local epipe service on the sniffer router; use Service ID 1000 on PE1, and 3000
on PE3. Create two SAPs under this service, SAP 1/1/3 and 1/1/2:100.
e. Apply the filter under the ingress of SAP 1/1/3.
Verification
1. Issue a ping request from CE1 to CE4 and from CE2 to CE3 to verify that remote mirroring is
working.
51/122
*A:R9# ping 192.168.10.4
PING 192.168.10.4 56 data bytes
64 bytes from 192.168.10.4: icmp_seq=1 ttl=64 time=5.03ms.
64 bytes from 192.168.10.4: icmp_seq=2 ttl=64 time=4.59ms.
64 bytes from 192.168.10.4: icmp_seq=3 ttl=64 time=4.61ms.
64 bytes from 192.168.10.4: icmp_seq=4 ttl=64 time=5.12ms.
64 bytes from 192.168.10.4: icmp_seq=5 ttl=64 time=5.73ms.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 52/122
Exercise III - Mirror Slicing
1. Clear the filter IP counters and verify there are no packets matched.
2. Enable mirror slicing by selecting only the first 128 bytes of a packet to be mirrored.
3. Issue a ping request from CE1 to CE4 and from CE2 to CE3 with a packet size of 1200 bytes.
4. Verify that mirror slicing is working using the command show filter ip 11 counters
=============================================================================
53/122
Notes
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 54/122
LAB 7 Internet Enhanced Service (IES)
Objective:
Configure an IES service and verify the effects on IP routing.
55/122
Lab 7 Command List
configure port <port -id>
configure port <port -id> Ethernet mode access
configure port <port -id> Ethernet mtu <mtu-bytes>
configure service ies <service-id> customer <customer-id> create
configure service ies <service-id> interface < ip-int-name > create
configure service ies <service-id> interface < ip-int-name > address <ip address>
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 56/122
Exercise
2. Create a new interface within the IES context and give it a name. Assign an IP address to this
new interface. Use the IP address 172.16.x.1/24, where x is your pod number.
3. Create a SAP for the interface using VLAN ID 60. Enable the IES service.
6. Create a loopback interface on the CE router with IP address 100.100.x.1/24, where x is your
pod number. This is intended to represent a local customer network.
7. Verify that you can ping the IES interface from the CE router.
8. Verify that the IES interface is in the route table on the PE router. Check for the loopback
network.
9. Configure your CE router as an L1 router in IS-IS, including the link towards the provider
network and your local loopback network in IS-IS.
10. Try to ping the system address of one of the P routers. If your network is being distributed into
the service provider network you should be able to reach any address there, as well as the
other CE loopback networks. Try a traceroute to another CE loopback.
11. Compare the traceroute above with a traceroute between the interfaces that use your epipe.
(traceroute 192.168.10.4 from CE1, for example)
57/122
Questions:
1. Explain the difference between the CE to CE ping through the IES interface and the CE to CE
ping through your epipe.___________________________________________________________
Notes
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 58/122
LAB 8 VPLS Spoke Termination on IES
Objective:
Configure and verify layer 3 termination for a VPLS service.
Exercise:
Note: Before you start this exercise, shutdown the IES service you created in the previous exercise.
1. On your PE router, configure a VPLS service x100, where x is your pod number.
2. Bind a SAP for the CE router to the VPLS using VLAN ID 70. Bind a spoke SDP for your P router.
3. On your CE router, configure a network interface with an address of 172.17.x.2/24 and a VLAN ID
of 70, where x is your pod number. Add the interface to IS-IS.
59/122
4. On your P router, configure an IES service with an address of 172.17.x.1/24, where x is your pod.
Bind the IES interface to a spoke SDP for your PE router.
5. Use the command show service id svc-id base to verify that the service is up.
6. If the service does not come up as expected, use the commands show service id svc-id all and
show router ldp bindings to identify the problem.
7. On your P router, put the IES interface created in step 4 into IS-IS.
Verification:
Questions
1. What MAC address is being used as the destination MAC address when you ping from your CE router
to any other CE router?
__________________________________________________________________________________
2. What happens to the Layer 2 Header when it reaches the IES interface when you ping from your CE
router to any other CE router?
__________________________________________________________________________________
3. Use the traceroute command to trace the path between your CE router and the CE router beside
your POD.
__________________________________________________________________________________
4. What table is being used for each router along the path to make the forwarding decision? (e.g.
route-table, FDB)
__________________________________________________________________________________
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 60/122
Notes
61/122
Alcatel-Lucent Confidential for Internal Use ONLY - Do Not Distribute
LAB 9 IPv4 VPRNs
Enabling the Provider Core for MPLS
Objective:
Configure the provider core, including the PE and CE devices, to enable a Layer 3 VPRN using
LDP.
AS 64497 AS 64499
BGP
Pod 2
Pod 1
R9-CE 1 R10-CE 2
MP-BGP
LDP
Pod 3 Pod 4
AS 64500 AS 64498
Red VPN Site 2 Blue VPN Site 2
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 62/122
Exercise
Configure loopback interfaces on the CE routers as shown in Table 9.1. These loopback interfaces will
be used to simulate the customer LAN.
Parameter Value
Pod Number x = 1, 2, 3, or 4 (Circle your Pod number)
CE loopback interface (Customer LAN) 10.10.x.1/24
Verification
Note: The sample screen shots below may not be identical to the screen shots from your routers.
1. On the CE, verify that all required physical ports and interfaces are active and operational.
*A:R9# show router interface
===============================================================================
Interface Table (Router: Base)
===============================================================================
Interface-Name Adm Opr(v4/v6) Mode Port/SapId
IP-Address PfxState
-------------------------------------------------------------------------------
Blue_Site_1 Up Up/Down Network loopback
10.10.1.1/24 n/a
loopback_1 Up Up/Down Network loopback
100.100.1.1/24 n/a
system Up Up/Down Network system
10.10.10.9/32 n/a
toR5-1 Up Up/Down Network 1/1/2:10
192.168.10.1/24 n/a
toR5-2 Up Up/Down Network 1/1/2:20
192.168.20.1/24 n/a
toR5-3 Up Up/Down Network 1/1/2:30
192.168.30.1/24 n/a
toR5-4 Up Up/Down Network 1/1/2:40
192.168.40.1/24 n/a
toR5-5 Up Up/Down Network 1/1/2:50
192.168.50.1/24 n/a
to_IES Up Up/Down Network 1/1/2:60
172.16.1.2/24 n/a
to_ISP_7 Up Up/Down Network 1/1/2:70
172.17.1.2/24 n/a
-------------------------------------------------------------------------------
Interfaces : 10
63/122
Configuring MP-BGP as the PE to PE Protocol
Exercise
Configure a full mesh of MP-BGP sessions between provider core PE routers.
On each PE, perform the following tasks:
1. Configure the provider Autonomous System (AS) number. Use AS number 64496.
2. Configure all other PE routers as MP-BGP neighbors. Establish all peering sessions using PE
system addresses.
3. Enable support for the exchange of VPN-IPv4 prefixes between PE neighbors.
===============================================================================
BGP Summary
===============================================================================
Neighbor
AS PktRcvd InQ Up/Down State|Rcv/Act/Sent (Addr Family)
PktSent OutQ
-------------------------------------------------------------------------------
10.10.10.6
64496 6 0 00h02m14s 0/0/0 (VpnIPv4)
7 0
10.10.10.7
64496 4 0 00h01m26s 0/0/0 (VpnIPv4)
5 0
10.10.10.8
64496 3 0 00h00m48s 0/0/0 (VpnIPv4)
4 0
===============================================================================
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 64/122
2. View the Base BGP table of the PE routers and ensure that there are no routes present at this
time.
*A:R5# show router bgp routes
===============================================================================
BGP Router ID:10.10.10.5 AS:64496 Local AS:64496
===============================================================================
Legend -
Status codes : u - used, s - suppressed, h - history, d - decayed, * - valid
Origin codes : i - IGP, e - EGP, ? - incomplete, > - best
65/122
Enabling the VPRN Service on the PE
Exercise
Configure the VPRN Service for the customer connected to your PE router using the parameters from
Table 9.2.
Note: Pods 1 and 4 will be part of the Blue VPRN while Pods 2 and 3 will be part of the Red VPRN.
Verification
Ensure that the VPRN service instance is enabled and operational. A sample is shown on the
following page.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 66/122
*A:R5# show service id 110 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 110 Vpn Id : 0
Service Type : VPRN
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 110
Last Status Change: 04/21/2012 07:47:33
Last Mgmt Change : 04/21/2012 07:47:33
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sap:1/1/2:110 q-tag 1518 1518 Up Up
===============================================================================
67/122
PE BGP Configuration
Exercise
Configure BGP as the PE to CE routing protocol and the associated policy requirements on the PE using
the parameters from Table 9-3.
Verification
1. Verify that the policy has been configured and applied to the VPRN BGP instance on the PE.
2. Verify that BGP has been enabled under the VPRN service instance. An example is shown on the
following page.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 68/122
A:R5# show router 110 status
================================================================
Router Status (Service: 110)
================================================================
Admin State Oper State
----------------------------------------------------------------
Router Up Up
OSPF Down Down
RIP Down Down
ISIS Not configured Not configured
MPLS Not configured Not configured
RSVP Not configured Not configured
69/122
CE BGP Configuration
Exercise
Configure BGP as the PE to CE routing protocol and the associated policy requirements on the CE.
Verification
1. Verify that the PE and the CE have become BGP peers and are exchanging IPv4 prefixes. An
example is shown below.
*A:R5# show router 110 bgp summary
===============================================================================
BGP Router ID:10.10.10.5 AS:64496 Local AS:64496
===============================================================================
BGP Admin State : Up BGP Oper State : Up
Total Peer Groups : 1 Total Peers : 1
Total BGP Paths : 4 Total Path Memory : 512
Total IPv4 Remote Rts : 1 Total IPv4 Rem. Active Rts : 1
Total IPv6 Remote Rts : 0 Total IPv6 Rem. Active Rts : 0
Total Supressed Rts : 0 Total Hist. Rts : 0
Total Decay Rts : 0
===============================================================================
BGP Summary
===============================================================================
Neighbor
AS PktRcvd InQ Up/Down State|Rcv/Act/Sent (Addr Family)
PktSent OutQ
-------------------------------------------------------------------------------
10.5.9.9
64497 33 0 00h13m53s 1/1/2 (IPv4)
35 0
===============================================================================
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 70/122
2. Verify that the PEs are exchanging VPN-IPv4 prefixes. An example is shown below.
*A:R5# show router bgp routes vpn-ipv4
===============================================================================
BGP Router ID:10.10.10.5 AS:64496 Local AS:64496
===============================================================================
Legend -
Status codes : u - used, s - suppressed, h - history, d - decayed, * - valid
Origin codes : i - IGP, e - EGP, ? - incomplete, > - best
3. Verify that the PE VRF table contains the customer LAN route received from the local CE. An
example is shown below.
*A:R5# show router 110 route-table
===============================================================================
Route Table (Service: 110)
===============================================================================
Dest Prefix Type Proto Age Pref
Next Hop[Interface Name] Metric
-------------------------------------------------------------------------------
10.5.9.0/24 Local Local 00h48m41s 0
PE1_to_CE1 0
10.8.12.0/24 Remote BGP VPN 00h04m02s 170
10.10.10.8 (tunneled) 0
10.10.1.0/24 Remote BGP 00h14m43s 170
10.5.9.9 0
10.10.4.0/24 Remote BGP VPN 00h01m40s 170
10.10.10.8 (tunneled) 0
-------------------------------------------------------------------------------
No. of Routes: 4
===============================================================================
71/122
4. Verify that the CE is receiving routes from the remote site in the same VPN.
*A:R9# show router route-table
===============================================================================
Route Table (Router: Base)
===============================================================================
Dest Prefix Type Proto Age Pref
Next Hop[Interface Name] Metric
-------------------------------------------------------------------------------
…
10.5.9.0/24 Local Local 00h16m51s 0
5. Ensure connectivity between customer sites over the VPN by using PE-based diagnostic tools
such as oam vprn-ping and oam vprn-trace.
*A:R5# oam vprn-trace 110 source 10.5.9.5 destination 10.8.12.8
----------------------------------------------------------------------------
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 72/122
Questions
1. Why are route policies required to enable the exchange of routes across a VPRN service?
_________________________________________________________________________________________
2. Which commands will display the route distinguisher?
_________________________________________________________________________________________
Notes
_________________________________________________________________________________________
73/122
LAB 10 IPv6 VPRNs (6VPE)
Objective:
Configure and verify IPv6 VPN (6VPE) routing over IPv4 MPLS infrastructure with BGP routing
between CE and PE. 6VPE operation is very similar to VPRN for IPv4. The main difference is
that the advertised customer routes are IPv6 instead of IPv4. The PE routers must run IPv4 (to
communicate with the IPv4 MPLS core) and IPv6 (to communicate with customers).
BGP
Pod 2
Pod 1 R10-CE 2
R9-CE 1
R6-PE 2
R5-PE 1
MP-BGP
LDP
R7-PE 3 R8-PE 4
Pod 3 Pod 4
AS 64500 AS 64498
Red VPN Site 2 Blue VPN Site 2
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 74/122
Parameter Value
Pod Number x = 1, 2, 3, or 4 (Circle your Pod number)
7750 SR router you are configuring Core___ or Edge___
Last octet of management address from Table 1-1 y = ______ (Use as the last octet of system address)
IPv6 System IP address 2001:db8::y/128
Core 1 to Edge 1 IPv6 subnet 2001:db8:11::/64
Core 2 to Edge 2 IPv6 subnet 2001:db8:22::/64
In the setup, there are two separate sites of two IPv6 VPN customers. These customer sites (CE1, CE2,
CE3 and CE4) are running IPv6 only. They are separated in the middle by the IPv4 network. PE1, PE2,
PE3, and PE4 are dual stack (IPv4/IPv6) routers, which have interfaces connected to both IPv6 and IPv4
networks.
Exercises
Note: Prior to starting these exercises, configure the IPv6 address on the CE routers for the system
interface, loopback interface, and interface to PE using the addresses found in Table 10-1.
On the PE routers, configure the IPv6 address for the system interface.
CE BGP Configuration
On the CE routers, BGP is already configured from a previous lab. However, since the CE routers are
currently running IPv6, you will need to use the IPv6 family and the IPv6 address for neighbor
declaration.
1. Modify the BGP configuration on the CE routers to support the IPv6 family.
2. Use the addresses from Table 10-1 to configure the neighboring PE router.
3. Configure a policy to export directly-connected routes into BGP.
PE VPRN Configuration
Some changes are needed for the VPRN configuration on the PE routers.
1. Configure the IPv6 address for the customer interface in the VPRN instance.
2. Modify the VPRN BGP configuration to support IPv6.
75/122
PE BGP Configuration
Make necessary changes to the PE BGP configurations to support IPv6 VPN.
Verification
1. On the PE routers, verify that the BGP sessions to the CE routers are established and that the
VPN IPv6 routes are exchanged.
===============================================================================
BGP Summary
===============================================================================
Neighbor
AS PktRcvd InQ Up/Down State|Rcv/Act/Sent (Addr Family)
PktSent OutQ
-------------------------------------------------------------------------------
10.5.9.9
64497 2108 0 00h05m39s 0/0/5 (IPv6)
2160 0
2001:DB8:11::1
64497 13 0 00h05m07s 3/2/0 (IPv6)
12 0
===============================================================================
2. On the PE routers, verify that the BGP sessions to the other PE routers are established and that
the VPN IPv6 routes are exchanged.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 76/122
*A:R5# show router bgp summary
===============================================================================
BGP Router ID:10.10.10.5 AS:64496 Local AS:64496
===============================================================================
BGP Admin State : Up BGP Oper State : Up
Total Peer Groups : 1 Total Peers : 3
Total BGP Paths : 21 Total Path Memory : 2584
Total IPv4 Remote Rts : 0 Total IPv4 Rem. Active Rts : 0
Total IPv6 Remote Rts : 0 Total IPv6 Rem. Active Rts : 0
Total Supressed Rts : 0 Total Hist. Rts : 0
Total Decay Rts : 0
===============================================================================
BGP Summary
===============================================================================
Neighbor
AS PktRcvd InQ Up/Down State|Rcv/Act/Sent (Addr Family)
PktSent OutQ
-------------------------------------------------------------------------------
10.10.10.6
64496 347 0 00h02m27s 0/0/1 (VpnIPv4)
364 0 0/0/3 (VpnIPv6)
10.10.10.7
64496 345 0 00h02m07s 0/0/1 (VpnIPv4)
361 0 0/0/3 (VpnIPv6)
10.10.10.8
64496 355 0 00h01m51s 1/1/1 (VpnIPv4)
361 0 3/3/3 (VpnIPv6)
===============================================================================
3. On the CE routers, verify that the VPN IPv6 routes are acquired via PE-CE BGP sessions and
installed in the route table.
77/122
*A:R9# show router route-table ipv6
===============================================================================
IPv6 Route Table (Router: Base)
===============================================================================
Dest Prefix Type Proto Age Pref
Next Hop[Interface Name] Metric
-------------------------------------------------------------------------------
2001:DB8::35/128 Remote BGP 00h01m39s 170
2001:DB8:11::2 0
2001:DB8::37/128 Local Local 00h23m22s 0
system 0
4. On the PE routers, verify that the VPN IPv6 routes are acquired via MBGP from the remote PE
routers.
*A:R5# show router 110 route-table ipv6
===============================================================================
IPv6 Route Table (Service: 110)
===============================================================================
Dest Prefix Type Proto Age Pref
Next Hop[Interface Name] Metric
-------------------------------------------------------------------------------
2001:DB8::35/128 Remote BGP VPN 00h02m38s 170
10.10.10.8 (tunneled) 0
2001:DB8::37/128 Remote BGP 00h07m07s 170
2001:DB8:11::1 0
2001:DB8:1::/48 Remote BGP 00h07m07s 170
2001:DB8:11::1 0
2001:DB8:4::/48 Remote BGP VPN 00h02m38s 170
10.10.10.8 (tunneled) 0
2001:DB8:11::/64 Local Local 00h08m39s 0
PE1_to_CE1 0
2001:DB8:44::/64 Remote BGP VPN 00h02m38s 170
10.10.10.8 (tunneled) 0
-------------------------------------------------------------------------------
No. of Routes: 6
==============================================================================
5. Verify that the VPN IPv6 routes are received by the remote PE routers.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 78/122
*A:R8# show router bgp routes vpn-ipv6
===============================================================================
BGP Router ID:10.10.10.8 AS:64496 Local AS:64496
===============================================================================
Legend -
Status codes : u - used, s - suppressed, h - history, d - decayed, * - valid
Origin codes : i - IGP, e - EGP, ? - incomplete, > - best
===============================================================================
BGP VPN-IPv6 Routes
===============================================================================
Flag Network LocalPref MED
6. Use the ping command at the CE router to verify the accessibility of the remote CE.
*A:R12# ping 2001:db8:1::1
PING 2001:DB8:1::1 56 data bytes
64 bytes from 2001:DB8:1::1 icmp_seq=1 hlim=62 time=2.83ms.
64 bytes from 2001:DB8:1::1 icmp_seq=2 hlim=62 time=1.96ms.
64 bytes from 2001:DB8:1::1 icmp_seq=3 hlim=62 time=3.14ms.
64 bytes from 2001:DB8:1::1 icmp_seq=4 hlim=62 time=3.08ms.
64 bytes from 2001:DB8:1::1 icmp_seq=5 hlim=62 time=2.51ms.
79/122
Questions
_________________________________________________________________________________________
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 80/122
VPRN Lab Commands
Lab Configuration Commands List
configure router autonomous-system <autonomous-system-number>
configure router bgp family <address-family>
configure router interface <interface name> [no] shutdown
configure router no interface <interface name>
configure router <protocol>
81/122
Lab Configuration Commands List
configure service vprn <service-id> [no] <protocol>
configure service vprn <service-id> <protocol> group <group name>
configure service vprn <service-id> <protocol> group <group name> {import | export} <policy name>
configure service vprn <service-id> <protocol> group <group name> neighbor <neighbor name>
configure service vprn <service-id>
configure service vprn <service-id> bgp group <group-name> family ipv6
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 82/122
Lab Verification Commands List
show router <router-instance> ospf database
show router <service-id> bgp summary
show router bgp summary
show router route-table ipv6
show router <service-id> route-table ipv6
show router bgp routes vpn-ipv6
83/122
Answers to Review Questions
Lab 2 - Distributed Epipe Service
1. When you do show router ldp bindings, you see labels for the system address of the P routers as
well as the PE routers. A label is required for the PE router because it is the end of the transport
tunnel. Why are there labels for the P routers as well?
The default behavior on the Alcatel-Lucent 7750 SR is to generate labels for the system interface
2. The show router ldp bindings command shows the LMTU and RMTU for the service. What is the
meaning of these values? Why is the value 1500?
These values are sometimes known as the VC-MTU and are signaled when the service labels are
signaled. Martini signaling was originally developed for IP VPNs, therefore the value signaled is the
MTU of the Layer 3 payload. For an Ethernet service, add 14 bytes to get the service MTU.
3. CE1, CE2, CE3 and CE4 are all in the same subnet. Why is it possible to ping CE4 from CE1, but not
from CE2 or CE3?
CE1 and CE4 are connected by an epipe and can therefore ping each other. CE2 and CE3 are
connected by a different epipe and can ping each other. However, these are effectively two
separate networks even if they are addressed with the same network addresses.
1. What command can you use to find the service type of a service?
Use show service id base or show service id 200 all to find that the MTU is 1514.
3. What will happen if you try to send a frame larger than this MTU to the service?
Configure the CE port and the SAP with MTUs of 5000 and send a large ping to the other CE device.
The ping will be dropped because it exceeds the size of the service MTU. Check the SAP statistics
for the service.
Sap Statistics
-------------------------------------------------------------------------------
Last Cleared Time : N/A
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 84/122
Packets Octets
Forwarding Engine Stats
Dropped : 6 22814
Off. HiPrio : 0 0
Off. LowPrio : 13 1184
Off. Uncolor : 0 0
Untagged traffic will be captured by the default SAP and carried on VPLS 200.
2. If the port was set to null encapsulation, how would you define the SAP? What would happen to
tagged traffic on this SAP?
To define a SAP for a null encapsulated port, it is simply *A:PE1>config>service>vpls# sap 1/1/2
create
All traffic is captured by this SAP, including any tagged traffic.
3. If the access port encapsulation was changed to qinq on the PE router, what changes would be
required in the services previously configured to make them still work? Are there any changes
required on the CE router?
All the SAPs must be changed to the qinq format. In the service VPLS 200, for example, the SAP
command would change to *A:PE1>config>service>vpls# sap 1/1/2:30.* create
No changes are required on the CE router. This SAP will still capture any dot1q encapsulated
traffic.
The VPLS learns the MAC addresses from the SDPs that the frames arrive on.
2. Describe the signaling of service labels to create the service between two access routers
If we look at the signaling between access router PE1 and access router PE2, there are three
Martini signaling sessions that are required to enable the service. PE1 signals to P1 to exchange
85/122
service labels for the epipe service. P1 signals to P2 to exchange service labels for the VPLS
service. P2 signals with PE2 to exchange labels for the second epipe service.
3. If each access and PE router in this scenario participated in a full mesh VPLS service, how many
SDPs would be required on each router?
Each router would require an SDP to each other router in the VPLS service, therefore seven SDPs
are required on each router.
1556 bytes
1514 bytes
==============================================================================
Service Destination Point (Sdp Id : 8)
==============================================================================
SdpId Adm MTU Opr MTU IP address Adm Opr Deliver Signal
------------------------------------------------------------------------------
8 0 1556 10.10.10.8 Up Up LDP TLDP
==============================================================================
By default the SDP path MTU is calculated from the MTU of the egress port of the PE router. The
path MTU is the port MTU minus the encapsulation overhead (frame header plus two MPLS labels).
In this case the path MTU is calculated as 1578 – (14 + 4 + 4) = 1556 bytes.
4. Set the MTU to 1514 on the network port of the P router to P router link for your epipe. Check the
service status, service MTU and the SDP path MTU. What has changed?
Nothing has changed with the service or SDP MTU. The service is not aware of the port MTU change
in the provider network
5. Use oam sdp-mtu size-inc to find the maximum MTU size that your SDP now supports. What is this
value? Considering the MPLS encapsulation overhead, does this make sense?
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 86/122
*A:R5# oam sdp-mtu 8 size-inc 1450 1550 step 10
Size Sent Response
----------------------------
1450 . Success
1460 . Success
1470 . Success
1480 . Success
1490 . Success
1500 ... Request Timeout
The new MTU size supported is now 1492 bytes. Adding 14 bytes for the Ethernet header and 8
bytes for the MPLS labels equals 1514 bytes, which is the expected size of the port MTU on the
provider port.
6. Validate your results by pinging between the CE routers with different size packets.
It is possible to specify the size of the data bytes in the ping packet. This value does not include
the 8 bytes of the ICMP header, the 20 bytes of the IP header or the 14 bytes of the Ethernet
frame. Subtracting 42 from 1492 means that a ping size of 1450 should generate the maximum size
frame of 1492 bytes.
Note: If you use a significantly larger value for the size parameter, the ping may work. This is
because the frame is too large for the Ethernet MTU and is fragmented. If you specify “do-not-
fragment” no value larger than 1450 will work.
87/122
7. Configure an RSVP LSP from your PE router to the diagonally opposite PE router. Change the SDP
created in Lab 2 to use this LSP instead of LDP. Verify that the LSP and the SDP come up.
Path MTU is not changed, nor is the service. The SDP still thinks it can transport a 1514 byte
payload.
9. Change the LSP to use adspec. This should cause RSVP to signal MTU along the LSP. What is the
path MTU of the SDP with adspec enabled?
10. What is the status of the service and what can you do about it?
Service is operationally down because the service MTU is larger than the path MTU. The service can
be brought up by adjusting the service MTU to match the path MTU on both ends; however, the
service will drop any frames it receives that are larger than the service MTU.
1. Explain the difference between the CE to CE ping through the IES interface and the CE to CE ping
through your epipe.
The ping through the IES interface is routed through the service provider network to the other IES
interface. The ping through the epipe service is carried across the service provider’s network in an
MPLS tunnel.
1. What MAC address is being used as the destination MAC address when you ping from your CE
router to any other CE router?
The default gateway for the CE router is the IES interface on the P router. Therefore the chassis
MAC address of the P router is used.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 88/122
*A:R9# show router arp
===============================================================================
ARP Table (Router: Base)
===============================================================================
IP Address MAC Address Expiry Type Interface
-------------------------------------------------------------------------------
10.10.10.9 7a:4c:ff:00:00:00 00h00m00s Oth system
192.168.10.1 7a:4c:01:01:00:02 00h00m00s Oth[I] toR5-1
192.168.10.4 7a:4f:01:01:00:02 00h25m47s Dyn[I] toR5-1
192.168.20.1 7a:4c:01:01:00:02 00h00m00s Oth[I] toR5-2
192.168.30.1 7a:4c:01:01:00:02 00h00m00s Oth[I] toR5-3
192.168.40.1 7a:4c:01:01:00:02 00h00m00s Oth[I] toR5-4
===============================================================================
Chassis Information
===============================================================================
Name : R1
Type : 7750 SR-7
Location :
Coordinates :
CLLI code :
Number of slots : 7
Number of ports : 20
Critical LED state : Off
Major LED state : Off
Minor LED state : Off
Over Temperature state : OK
Base MAC address : 7a:44:ff:00:00:00
Admin chassis mode : c
Oper chassis mode : c
2. What happens to the Layer 2 header when it reaches the IES interface when you ping from your CE
router to any other CE router?
The ping is routed at the IES interface, therefore the Layer 2 header is replaced with another Layer
2 header for transmission to the next hop.
3. Use the traceroute command to trace the path between your CE router and the CE router beside
your pod.
89/122
4. What table is being used for each router along the path to make the forwarding decision? (e.g.
route-table, FDB)
The packet travels from the CE router to the VPLS on the PE router. The VPLS FDB is used to
forward the packet on the spoke SDP to the IES interface. From the IES interface, the packet is
routed through the provider network to the IES interface for the next pod. The packet is forwarded
at the IES interface to the spoke SDP based on a routing decision. When the packet arrives at the
VPLS, it is forwarded out the SAP towards the CE router based on the VPLS FDB.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 90/122
Lab Solutions
Lab 1 IP/MPLS Infrastructure
*A:R1>config>router>isis$ area-id 1
*A:R1>config>router>isis$ interface "toR5" interface-type point-to-point
*A:R1>config>router>isis$ info
----------------------------------------------
area-id 00
area-id 01
interface "system"
exit
interface "toR2"
interface-type point-to-point
exit
interface "toR3"
interface-type point-to-point
exit
interface "toR4"
interface-type point-to-point
exit
interface "toR5"
interface-type point-to-point
exit
----------------------------------------------
91/122
Lab 2 Distributed Epipe Service
Phase I
Configure the CE routers
Phase II
Configure the CE routers
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 92/122
Lab 3 VPLS Service Exercise I
Create CE interface
93/122
Lab 4 Spoke Termination to a VPLS
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 94/122
*A:R5>config>service>epipe>spoke-sdp$ exit
*A:R5>config>service>epipe# no shutdown
95/122
Lab 5 OAM Tools
Exercise II
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 96/122
*A:R5>config>router# show router mpls lsp
===============================================================================
MPLS LSPs (Originating)
===============================================================================
LSP Name To Fastfail Adm Opr
Config
-------------------------------------------------------------------------------
R5-R8 10.10.10.8 No Up Up
-------------------------------------------------------------------------------
LSPs : 1
===============================================================================
==============================================================================
Services: Service Destination Points
==============================================================================
SdpId Adm MTU Opr MTU IP address Adm Opr Deliver Signal
------------------------------------------------------------------------------
1 0 1556 10.10.10.1 Up Up LDP TLDP
6 0 1556 10.10.10.6 Up Up LDP TLDP
7 0 1556 10.10.10.7 Up Up LDP TLDP
8 0 1556 10.10.10.8 Up Up MPLS TLDP
------------------------------------------------------------------------------
Number of SDPs : 4
------------------------------------------------------------------------------
===============================================================================
Service Basic Information
===============================================================================
Service Id : 10 Vpn Id : 0
Service Type : Epipe
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/11/2012 22:41:40
Last Mgmt Change : 01/10/2012 21:00:02
Admin State : Up Oper State : Up
MTU : 1514
Vc Switching : False
SAP Count : 1 SDP Bind Count : 1
Per Svc Hashing : Disabled
Force QTag Fwd : Disabled
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sap:1/1/2:10 q-tag 1518 1518 Up Up
sdp:8:10 S(10.10.10.8) Spok 0 1556 Up Up
===============================================================================
97/122
exit
path "loose"
no shutdown
exit
lsp "R5-R8"
to 10.10.10.8
primary "loose"
exit
no shutdown
exit
no shutdown
----------------------------------------------
*A:R5>config>router>mpls# lsp "R5-R8"
==============================================================================
Services: Service Destination Points
==============================================================================
SdpId Adm MTU Opr MTU IP address Adm Opr Deliver Signal
------------------------------------------------------------------------------
1 0 1556 10.10.10.1 Up Up LDP TLDP
6 0 1556 10.10.10.6 Up Up LDP TLDP
7 0 1556 10.10.10.7 Up Up LDP TLDP
8 0 1492 10.10.10.8 Up Up MPLS TLDP
------------------------------------------------------------------------------
Number of SDPs : 4
-----------------------------------------------------------------------------
===============================================================================
Service Basic Information
===============================================================================
Service Id : 10 Vpn Id : 0
Service Type : Epipe
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/11/2012 22:48:37
Last Mgmt Change : 01/10/2012 21:00:02
Admin State : Up Oper State : Down
MTU : 1514
Vc Switching : False
SAP Count : 1 SDP Bind Count : 1
Per Svc Hashing : Disabled
Force QTag Fwd : Disabled
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sap:1/1/2:10 q-tag 1518 1518 Up Up
sdp:8:10 S(10.10.10.8) Spok 0 1492 Up Down
==============================================================================
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 98/122
*A:R5# show service id 10 all
===============================================================================
Service Detailed Information
===============================================================================
Service Id : 10 Vpn Id : 0
Service Type : Epipe
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/11/2012 22:48:37
Last Mgmt Change : 01/10/2012 21:00:02
Admin State : Up Oper State : Down
MTU : 1514
Vc Switching : False
99/122
*A:R5# show service id 10 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 10 Vpn Id : 0
Service Type : Epipe
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/11/2012 23:04:39
Last Mgmt Change : 01/11/2012 22:58:01
Admin State : Up Oper State : Down
MTU : 1492
Vc Switching : False
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 100/122
*A:R5# show router ldp bindings
===============================================================================
LDP LSR ID: 10.10.10.5
===============================================================================
Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn
S - Status Signaled Up, D - Status Signaled Down
E - Epipe Service, V - VPLS Service, M - Mirror Service
A - Apipe Service, F - Fpipe Service, I - IES Service, R - VPRN service
P - Ipipe Service, WP - Label Withdraw Pending, C - Cpipe Service
TLV - (Type, Length: Value)
===============================================================================
LDP Prefix Bindings
===============================================================================
Prefix Peer IngLbl EgrLbl EgrIntf/ EgrNextHop
Note that LMTU and RMTU do not match for Epipe 10. The service will not come up if these are not
equal.
101/122
*A:R5> show service id 10 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 10 Vpn Id : 0
Service Type : Epipe
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/11/2012 22:59:41
Last Mgmt Change : 01/11/2012 22:58:01
Admin State : Up Oper State : Up
MTU : 1492
Vc Switching : False
Put the port and SDP back to normal (you need to resignal the lsp)
*A:R5# tools perform router mpls resignal lsp "R5-R8" path "loose"
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 102/122
Lab 6 Mirror Service
On your PE router, configure port 1/1/3 as the mirror destination. Use service-id 103
*A:R5# configure port 1/1/3 shutdown
*A:R5# configure port 1/1/3 ethernet mode access
*A:R5# configure port 1/1/3 no shutdown
*A:R5# configure mirror mirror-dest 103 create
*A:R5>config>mirror>mirror-dest$ sap 1/1/3 create
*A:R5>config>mirror>mirror-dest>sap$ exit
*A:R5>config>mirror>mirror-dest# no shutdown
On the PE router, configure the port connected to your CE router as the mirror source
for both egress and ingress
*A:R6>config>filter# info
----------------------------------------------
log 102 create
destination memory 100
exit
ip-filter 2 create
entry 10 create
match
dst-ip 192.168.10.4/24
exit
log 102
action forward
exit
exit
----------------------------------------------
103/122
ingress
filter ip 2
exit
exit
sap 1/1/2:100 create
exit
no shutdown
----------------------------------------------
*A:R5>config>mirror# info
----------------------------------------------
mirror-dest 104 create
description "sending_mirrored_traffic_to_remote_site-R8-PE4"
spoke-sdp 8:104 create
exit
no shutdown
exit
----------------------------------------------
*A:R5# show debug mirror
mirror-source 104
port 1/1/2 egress ingress
no shutdown
exit
exit
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 104/122
far-end 10.10.10.5
exit
sap 1/1/3 create
exit
no shutdown
----------------------------------------------
*A:R7>config>filter# info
----------------------------------------------
log 103 create
105/122
Lab 7 Internet Enhanced Service (IES)
===============================================================================
Interface Table (Router: Base)
===============================================================================
Interface-Name Adm Opr(v4/v6) Mode Port/SapId
IP-Address PfxState
-------------------------------------------------------------------------------
customer_500 Up Up/Down IES 1/1/2:60
172.16.1.1/24 n/a
system Up Up/Down Network system
10.10.10.5/32 n/a
toR1 Up Up/Down Network 1/1/1
10.1.5.5/24 n/a
-------------------------------------------------------------------------------
Interfaces : 3
===============================================================================
*A:R5>config>router>isis# info
----------------------------------------------
area-id 01
interface "system"
exit
interface "toR1"
interface-type point-to-point
exit
----------------------------------------------
*A:R5>config>router>isis# area-id 01
*A:R5>config>router>isis# interface "customer_500"
*A:R5>config>router>isis>if# interface-type point-to-point
*A:R5>config>router>isis>if# exit
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 106/122
Configure network and loopback interfaces on CE router and enable IS-IS
107/122
*A:R9>config>router>isis$ interface "loopback_1"
*A:R9>config>router>isis>if$ exit
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 108/122
*A:R9# show router route-table
===============================================================================
Route Table (Router: Base)
===============================================================================
Dest Prefix Type Proto Age Pref
Next Hop[Interface Name] Metric
-------------------------------------------------------------------------------
10.1.2.0/24 Remote ISIS 00h30m48s 15
172.16.1.1 30
10.1.3.0/24 Remote ISIS 00h30m48s 15
172.16.1.1 30
10.1.4.0/24 Remote ISIS 00h30m48s 15
172.16.1.1 30
10.1.5.0/24 Remote ISIS 00h30m48s 15
172.16.1.1 20
10.2.3.0/24 Remote ISIS 00h30m48s 15
109/122
Verify network reachability
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 110/122
Lab 8 VPLS Spoke Termination on IES
111/122
*A:R5# show service id 1100 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 1100 Vpn Id : 0
Service Type : VPLS
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/12/2012 19:04:09
Last Mgmt Change : 01/12/2012 19:04:09
Admin State : Up Oper State : Up
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 112/122
*A:R5# show service id 1100 all
===============================================================================
Service Detailed Information
===============================================================================
Service Id : 1100 Vpn Id : 0
Service Type : VPLS
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 01/12/2012 19:04:09
Last Mgmt Change : 01/12/2012 19:04:09
Admin State : Up Oper State : Up
113/122
*A:R5# show router ldp bindings
===============================================================================
LDP LSR ID: 10.10.10.5
===============================================================================
Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn
S - Status Signaled Up, D - Status Signaled Down
E - Epipe Service, V - VPLS Service, M - Mirror Service
A - Apipe Service, F - Fpipe Service, I - IES Service, R - VPRN service
P - Ipipe Service, WP - Label Withdraw Pending, C - Cpipe Service
TLV - (Type, Length: Value)
===============================================================================
LDP Prefix Bindings
After show service id 1100 all note the “ServiceMTUMismatch” in the flags section. Also, note LMTU of
1500 and RMTU of 1542 in the service label output of show router ldp bindings. Correct the problem
by specifying MTU of 1500 in the IES service to match the Layer 2 MTU.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 114/122
*A:R5# show service id 1000 base
===============================================================================
Service Basic Information
===============================================================================
Service Id : 1100 Vpn Id : 0
Service Type : VPLS
Name : (Not Specified)
Description : (Not Specified)
Customer Id : 1
Last Status Change: 03/27/2012 08:56:58
Last Mgmt Change : 03/27/2012 08:56:58
Admin State : Up Oper State : Up
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sdp:5:1100 S(10.10.10.5) Spok 0 1556 Up Up
===============================================================================
115/122
Lab 9 IPv4 VPRNs
This lab requires configuring the provider core (which consists only of PE routers) for MPLS support. The
port facing the customer will be reconfigured as a service port, therefore the interface must be
deleted and the port mode changed to access.
Configuring the loopback interfaces on the CE routers - The configuration below is for R9-CE1
This lab will establish MP-BGP peering between PE’s. A full mesh of MP-BGP must be established in the
provider core to ensure propagation of VPRN routes. The peer sessions across the provider core should
always be established between system addresses.
*A:R5>config>router>bgp# info
----------------------------------------------
family vpn-ipv4
group "MP-iBGP"
peer-as 64496
neighbor 10.10.10.6
exit
neighbor 10.10.10.7
exit
neighbor 10.10.10.8
exit
exit
----------------------------------------------
This lab requires configuring the customer description and VPRN service. The router-ID, route-
distinguisher, and Route Target need to be defined for each customer VPRN of the PE. An interface will
be defined in the VPRN service context using the SAP facing the local CE.
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 116/122
configure
service
customer 110 create
description "VPRN Service for Customer Blue"
contact "Administrator"
phone "1-888-555-1212"
exit
vprn 110 customer 110 create
description "VPRN Service for Customer Blue"
router-id 10.10.10.5
autonomous-system 64496
PE BGP Configuration
BGP will be enabled between the PE and the CE. Route policy must be defined to enable the exchange
of routes on the PE from MP-BGP to BGP.
# "Policy Configuration"
#------------------------------------------
configure
router
policy-options
begin
policy-statement "MPBGP-BGP"
entry 10
from
protocol bgp-vpn
exit
to
protocol bgp
exit
action accept
exit
exit
exit
commit
exit all
*A:R5>config>service>vprn# bgp
*A:R5>config>service>vprn>bgp$ group to_CE1_Blue
*A:R5>config>service>vprn>bgp>group$ export "MPBGP-BGP"
*A:R5>config>service>vprn>bgp>group$ neighbor 10.5.9.9
117/122
*A:R5>config>service>vprn>bgp>group>neighbor$ peer-as 64497
*A:R5>config>service>vprn>bgp>group>neighbor$ exit
*A:R5>config>service>vprn>bgp>group# exit
*A:R5>config>service>vprn>bgp# exit all
*A:R5# configure service vprn 110 no shutdown
CE BGP Configuration
This lab is performed on the CE.BGP is enabled between the PE and the CE. Route policy will be
defined to enable the exchange of routes on the CE between the directly connected interfaces and
BGP.
"Policy Configuration"
--------------------------------------------------
policy-options
begin
prefix-list "prefixBlue"
prefix 10.10.1.0/24 exact
exit
policy-statement "exportBlue"
entry 10
from
prefix-list "prefixBlue"
exit
action accept
exit
exit
default-action reject
exit
exit
------------------------------------------
*A:R9# configure router autonomous-system 64497
------------------------------------------
"BGP Configuration"
------------------------------------------
*A:R9# configure router bgp
*A:R9>config>router>bgp$ group to_PE1
*A:R9>config>router>bgp>group$ peer-as 64496
*A:R9>config>router>bgp>group$ neighbor 10.5.9.5
*A:R9>config>router>bgp>group>neighbor$ export "exportBlue"
*A:R9>config>router>bgp>group>neighbor$ exit all
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 118/122
Lab 10 IPv6 VPRNs (6vPE)
Pre-Requisites Configuration
A:R9>config>router# info
#--------------------------------------------------
interface "BlueSite1"
loopback
ipv6
address 2001:DB8:1::1/48
PE IPv6 Configuration
*A:R5>config>router# info
----------------------------------------------
echo "IP Configuration"
#--------------------------------------------------
interface "system"
address 10.10.10.5/32
ipv6
address 2001:DB8::36/128
exit
exit
CE BGP Configuration
*A:R9>config>router>bgp# info
----------------------------------------------
group "to_PE1"
family ipv6
peer-as 64496
neighbor 10.5.9.5
export "exportBlue"
exit
119/122
neighbor 2001:DB8:11::2
export "direct_to_bgp"
exit
exit
----------------------------------------------
PE VPRN Configuration
A:R5>config>service>vprn# info
----------------------------------------------
description "Customer_Blue"
router-id 10.10.10.5
autonomous-system 64496
route-distinguisher 64496:110
auto-bind ldp
vrf-target target:64496:110
interface "PE1_to_CE1" create
description "Customer_BlueSite1"
address 10.5.9.5/24
ipv6
address 2001:db8:11::2/64
exit
sap 1/1/2:110 create
exit
exit
no shutdown
----------------------------------------------
PE BGP Configuration
A:R5>config>service>vprn>bgp# info
----------------------------------------------
group "to_CE1"
family ipv6
export "MPBGP-BGP"
neighbor 10.5.9.9
peer-as 64497
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 120/122
exit
neighbor 2001:DB8:11::1
peer-as 64497
exit
exit
*A:R5>config>router>bgp# info
----------------------------------------------
group "MP-BGP"
family vpn-ipv4 vpn-ipv6
peer-as 64496
121/122
Alcatel-Lucent Confidential for Internal Use ONLY - Do Not Distribute
http://www.alcatel-lucent.com/src
Alcatel-Lucent Services Architecture Lab Guide v 3.2 | All rights reserved © 2012 Alcatel-Lucent 122/122