No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - VPN 01

NE05E and NE08E V300R003C10SPC500

This is NE05E and NE08E V300R003C10SPC500 Configuration Guide - VPN
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring IP Hard Pipe

Configuring IP Hard Pipe

IP hard pipe is a pipe technology that establishes a static PW over a static bidirectional co-routed LSP to simulate an SDH leased line. The NE strictly isolates soft and hard pipes by reserving hardware so that the soft and hard pipes do not affect each other when carrying leased line services of high-value customers, reserving bandwidth and ensuring low delay for hard pipe services.

Usage Scenario

VPWS enables carriers to provide L2VPN services on an IP hard pipe network over different media, implementing P2P services over the hard pipe and enhancing leased line services of high-value customers.

Pre-configuration Tasks

Before configuring IP hard pipe, complete the following tasks:

  • Configure static routes or an IGP protocol on PEs and Ps on the MPLS backbone network to provide IP connectivity.

  • Configure a static bidirectional co-routed CR-LSP.

NOTE:
Note the following issues:
  • Do not specify the bandwidth for the static bidirectional co-routed CR-LSP. This is because an NMS is used to assign bandwidth for CR-LSPs in an IP hard pipe scenario.
  • The outgoing-interface interface-type interface-number parameter must be configured to specify an outbound interface of the static bidirectional co-routed CR-LSP.

Configuration Procedures

Figure 8-2 Flowchart for configuring IP hard pipe

Configuring Interface-based Hard Pipe Bandwidth Reservation

The physical interface bandwidth on the public network is divided and allocated to hard and soft pipes. The hard and soft pipe bandwidths are isolated.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface interface-type interface-number

    The interface view is displayed.

  3. Run qos hard-pipe share-mode bandwidth bandwidth-value outbound

    An IP hard pipe bandwidth is configured.

Configuring a Static Bidirectional Co-Routed CR-LSP as a Public Network CR-LSP over Which an IP Hard Pipe Is Established

A static bidirectional co-routed CR-LSP can be configured to implement public network service isolation and label forwarding for PW packets transmitted along an IP hard pipe.

Usage Scenario

An IP hard pipe is a pipe technique that establishes a static PW over a static bidirectional co-routed CR-LSP to simulate an SDH leased line. To enable a device to use a static PW over a static bidirectional co-routed CR-LSP as a public network CR-LSP for an IP hard pipe, run the hard-pipe enable command.

A static bidirectional co-routed CR-LSP consists of an ingress, transit nodes, and an egress. The hard-pipe enable command must be run on each node.

Procedure

  • Perform the following steps on the ingress:
    1. Run system-view

      The system view is displayed.

    2. Run bidirectional static-cr-lsp ingress tunnel-name

      The view of an ingress static bidirectional co-routed CR-LSP is displayed.

    3. Run hard-pipe enable

      The ingress static bidirectional co-routed CR-LSP is configured as a public network CR-LSP for the IP hard pipe.

    4. Run commit

      The configuration is committed.

  • Perform the following steps on each transit node:
    1. Run system-view

      The system view is displayed.

    2. Run bidirectional static-cr-lsp transit lsp-name

      The view of a transit bidirectional co-routed CR-LSP is displayed.

    3. Run hard-pipe enable

      The transit static bidirectional co-routed CR-LSP is configured as a public network CR-LSP for the IP hard pipe.

    4. Run commit

      The configuration is committed.

  • Perform the following steps on the egress:
    1. Run system-view

      The system view is displayed.

    2. Run bidirectional static-cr-lsp egress lsp-name

      The view of the egress static bidirectional co-routed CR-LSP is displayed.

    3. Run hard-pipe enable

      The egress static bidirectional co-routed CR-LSP is configured as a public network CR-LSP for the IP hard pipe.

    4. Run commit

      The configuration is committed.

Configuring a Hard-Pipe VPWS PW

Configuring a hard-pipe VPWS PW to carry leased line services of high-value customers implements P2P services over the hard pipe.

Context

VPWS enables carriers to provide L2VPN services on an IP hard pipe network over different media, implementing P2P services over the hard pipe and enhancing leased line services of high-value customers.

Procedure

  1. Enable MPLS L2VPN.
    1. Run system-view

      The system view is displayed.

    2. Run mpls l2vpn

      MPLS L2VPN is enabled.

    3. Run commit

      The configuration is committed.

    4. Run quit

      Return to the system view.

  2. Create a tunnel policy.
    1. Run tunnel-policy policy-name

      A tunnel policy is created, and the tunnel policy view is displayed.

    2. Run tunnel binding destination dest-ip-address te { tunnel interface-number } &<1-16>

      The TE tunnel to be bound is specified in the tunnel policy.

    3. Run commit

      The configuration is committed.

    4. Run quit

      Return to the system view.

  3. Configure a hard-pipe VPWS PW.

    Hard pipe only applies to static VPWS PWs. Determine which procedure to take based on the PW type:
    • Static SS-PW
      1. Run interface interface-type interface-number

        The AC interface view is displayed.

      2. Run either of the following commands to create an SVC based on the AC interface type:
        • If the AC interface is an Ethernet interface, run:

          mpls static-l2vc { { destination ip-address | pw-template pw-template-name vc-id } * | destination ip-address [ vc-id ] } transmit-vpn-label transmit-label-value receive-vpn-label receive-label-value [ tunnel-policy tnl-policy-name | access-port | [ control-word | no-control-word ] | [ raw | tagged ] ] *
        • If the AC interface is a non-Ethernet interface, run:

          mpls static-l2vc { { destination ip-address | pw-template pw-template-name vc-id } * | destination ip-address [ vc-id ] } transmit-vpn-label transmit-label-value  receive-vpn-label receive-label-value [ tunnel-policy tnl-policy-name | access-port | [ control-word | no-control-word ] | [ jitter-buffer depth ] | [ tdm-encapsulation number ] | [ tdm-sequence-number ] | [ idle-code idle-code-value ] | [ rtp-header ] ] *
      3. Run either of the following commands to configure hard pipe based on the AC interface type:
        • If the AC interface is an Ethernet interface, run:

          mpls l2vpn hard-pipe bandwidth bandwidth [ burst-time burst-time ] [ expand-ratio expand-ratio ]
        • If the AC interface is a non-Ethernet interface, run:

          mpls l2vpn hard-pipe [ expand-ratio expand-ratio ]
      4. Run commit

        The configuration is committed.

      5. Run quit

        Return to the system view.

    • Static MS-PW
      1. Run mpls switch-l2vc [ instance-name instance-name ] ip-address vc-id trans trans-label recv received-label [ tunnel-policy policy-name ] [ oam-packet pop flow-label ] between ip-address vc-id trans trans-label recv received-label [ tunnel-policy policy-name ] [ oam-packet pop flow-label ] encapsulation { atm-1to1-vcc | atm-1to1-vpc | atm-aal5-pdu | atm-aal5-sdu | atm-nto1-vcc | atm-nto1-vpc | atm-trans-cell | cesopsn-basic | satop-e1 | ethernet | fr | hdlc | ip-interworking | ip-layer2 | ppp | satop-e3 | satop-t1 | vlan } [ control-word | no-control-word ]

        A static MS-PW is configured.

      2. Run mpls switch-l2vc hard-pipe peer-ip vc-id { ethernet | hdlc | ip-interworking | ip-layer2 | ppp | satop-e1 | satop-e3 | satop-t1 | vlan } hard-pipe [ bandwidth bandwidth expand-ratio expand-ratio ]

        Hard pipe is configured for the static MS-PW.

      3. Run commit

        The configuration is committed.

Configuring a Hard-Pipe VPLS PW

Configuring a hard pipe for a VPLS PW that uses LDP allows P2MP services to be carried over the hard pipe, enhancing leased line services of high-value customers.

Context

VPLS enables carriers to provide L2VPN services on an IP hard pipe network through different media, implementing P2MP services over the hard pipe and enhancing leased line services of high-value customers.

Procedure

  1. Enable MPLS L2VPN.
    1. Run system-view

      The system view is displayed.

    2. Run mpls l2vpn

      MPLS L2VPN is enabled.

    3. Run quit

      Return to the system view.

  2. Create a tunnel policy.
    1. Run tunnel-policy policy-name

      A tunnel policy is created, and the tunnel policy view is displayed.

    2. Run tunnel binding destination dest-ip-address te { tunnel interface-number } &<1-16>

      An MPLS TE tunnel to be bound to the tunnel policy is specified.

    3. Run quit

      Return to the system view.

  3. Configure a hard pipe for a VPLS PW.

    A hard pipe for a VPLS supports only static PWs that use LDP as the signaling protocol.

    1. Run vsi vsi-name

      A VSI is created, and the VSI view is displayed.

    2. Run pwsignal ldp

      LDP is configured as the PW signaling protocol, and the VSI-LDP view is displayed.

    3. Run hard-pipe enable

      The hard pipe capability is enabled in the VSI-LDP view.

    4. Run peer peer-address [ negotiation-vc-id vc-id ] [ encapsulation { ethernet | vlan } ] [ tnl-policy policy-name ] { static-npe | static-upe } trans transmit-label recv receive-label [ hard-pipe bandwidth bandwidth [ burst-time burst-time ] ]

      The hard pipe function for a static PW is configured.

    5. Run quit

      Return to the system view.

(Optional) Configuring an Alarm Threshold for the Outbound Bandwidth Usage of the Soft Pipe

After the hard pipe is configured on the network-side or AC-side interface, you can configure an alarm threshold for the soft pipe bandwidth usage to monitor the soft pipe load on the device. When the bandwidth usage exceeds alarm threshold, the device reports an alarm to prompt users to properly plan service traffic or expand the device capacity. You can set the alarm threshold and clear alarm threshold as required.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface { ethernet | gigabitethernet }

    The specified Ethernet interface view is displayed.

  3. Run qos soft-pipe trap-threshold output-rate bandwidth-in-use [ resume-rate resume-threshold ]

    The alarm and clear alarm thresholds are set for the outbound bandwidth usage of the soft pipe.

Verifying the IP Hard Pipe Configuration

After configuring a hard-pipe VPWS/VPLS PW, check the configurations.

Prerequisites

A hard-pipe VPWS/VPLS PW has been configured.

Procedure

  • Run the display qos hard-pipe statistics interface interface-name outbound command to check hard pipe statistics of outgoing traffic on an interface.
  • Run the display qos hard-pipe ability [ interface interface-name ] command to check the hard pipe mode supported on an interface.
  • Run the display mpls static-l2vc hard-pipe [ brief | vc-id | interface interface-type interface-number | state { down | up } ] command to check hard-pipe static PW information.
  • Run the display mpls switch-l2vc hard-pipe [ brief | ip-address vc-id encapsulation { atm-1to1-vcc | atm-1to1-vpc | atm-aal5-pdu | atm-aal5-sdu | atm-nto1-vcc | atm-nto1-vpc | atm-trans-cell | cesopsn-basic | ethernet | fr | hdlc | ip-interworking | ip-layer2 | ppp | satop-e1 | satop-e3 | satop-t1 | vlan } | state { down | up } ] command to check hard-pipe static MS-PW information.
  • Run the display mpls static-l2vc hard-pipe statistics interface { interface-name | interface-type interface-number } [ inbound | outbound ] command to check statistics about the hard pipe traffic on the AC side.
  • Run the display vsi [ name vsi-name ] [ verbose ] command. The command output shows hard-pipe static PW information of the VPLS.
  • Run the display traffic-statistics vsi vsi-name hard-pipe [ peer peer-address [ negotiation-vc-id vc-id ] ] command. The command output shows hard-pipe static PW traffic statistics information of the VPLS.

Example

Run the display qos hard-pipe statistics interface interface-name outbound command. The command output shows hard pipe statistics of outgoing traffic on an interface.
<HUAWEI> display qos hard-pipe statistics interface gigabitethernet0/2/0 outbound
GigabitEthernet0/2/0 outbound traffic statistics:
Total pass:
                                   0 packets,                          0 bytes
Total discard:
                                   0 packets,                          0 bytes
Last 30 seconds pass rate:
                                   0 pps,                              0 bps
Last 30 seconds discard rate:
                                   0 pps,                              0 bps 
Run the display qos hard-pipe ability command. The command output shows the hard pipe mode supported on an interface.
<HUAWEI> display qos hard-pipe ability
 E   : The port support exclusive-mode hard pipe.
 S   : The port support share-mode hard pipe.
 N   :None hard-pipe ability.
 U   :Unknown hard-pipe ability.
 M   :The port need split member interface.
 Note: Only ethernet physical port and Eth-trunk can support hard pipe.
 Interface                            Ability
------------------------------------------------------------------------------
 Eth-Trunk1                           U
 Eth-Trunk2                           S
 Eth-Trunk3                           S
 Eth-Trunk4                           U
 Eth-Trunk5                           U

Run the display mpls static-l2vc hard-pipe command. The command output shows hard-pipe static PW information.

<HUAWEI> display mpls static-l2vc hard-pipe
 Total svc connections:  1,  1 up, 0 down

 *Client Interface        : GigabitEthernet0/1/0.1 is up
  AC Status               : up
  VC State                : up
  VC ID                   : 9
  VC Type                 : Ethernet
  Destination             : 3.3.3.9
  Transmit VC Label       : 19
  Receive VC Label        : 19
  Label Status            : 0
  Token Status            : 0
  Control Word            : Disable
  VCCV Capability         : alert ttl lsp-ping bfd 
  active state            : inactive
  OAM Protocol            : --
  OAM Status              : --
  OAM Fault Type          : --
  PW APS ID               : --
  PW APS Status           : --
  TTL Value               : 1
  Link State              : up
  Tunnel Policy Name      : tp
  PW Template Name        : --
  Main or Secondary       : Main
  load balance type       : flow
  Access-port             : false
  VC tunnel/token info    : 1 tunnels/tokens
  NO.0  TNL Type          : te    , TNL ID : 0x000000000300000002
  Create time             : 0 days, 0 hours, 1 minutes, 27 seconds
  UP time                 : 0 days, 0 hours, 1 minutes, 27 seconds
  Last change time        : 0 days, 0 hours, 1 minutes, 27 seconds
  VC last up time         : 2015/07/25 16:23:07
  VC total up time        : 0 days, 0 hours, 1 minutes, 27 seconds
  CKey                    : 1
  NKey                    : 3959423113
  Hard-pipe bandwidth   : 50 Kbps
  Hard-pipe expand-ratio: 20 %

Run the display mpls static-l2vc hard-pipe command. The command output shows hard-pipe static MS-PW information.

<HUAWEI> display mpls static-l2vc hard-pipe
 Total Switch VC : 1, 1 up, 0 down

*Switch-l2vc type             : SVC<---->SVC
 Peer IP Address              : 2.2.2.2, 3.3.3.3
 VC ID                        : 2, 3
 VC Type                      : VLAN
 VC State                     : up
 In/Out Label                 : 18/18, 19/19
 InLabel Status               : 0 , 0
 Control Word                 : Disable, Disable
 VCCV Capability              : alert ttl lsp-ping bfd , alert ttl lsp-ping bfd 
 Hard-pipe bandwidth        : 50 Kbps, --
 Hard-pipe expand-ratio     : 30 %, --

 Switch-l2vc tunnel info      :
                                0 tunnels for peer 2.2.2.2
                                0 tunnels for peer 3.3.3.3
 CKey                         : 1, 2
 NKey                         : 1040187529, 1040187530
 Tunnel policy                : tp2, tp2
 Create time                  : 0 days, 0 hours, 10 minutes, 45 seconds
 UP time                      : 0 days, 0 hours, 10 minutes, 45 seconds
 Last change time             : 0 days, 0 hours, 10 minutes, 45 seconds
 VC last up time              : 2015/07/25 15:34:26
 VC total up time             : 0 days, 0 hours, 10 minutes, 45 seconds
Run the display mpls static-l2vc hard-pipe statistics command. The command output shows statistics about the upstream hard pipe traffic on the AC side.
<HUAWEI> system-view
[~HUAWEI] display mpls l2vpn hard-pipe statistics interface GigabitEthernet0/1/1 inbound
GigabitEthernet0/1/1 inbound traffic statistics:
 Passed: 0 bytes, 0 packets
 Dropped: 0 bytes, 0 packets
 Last 30 seconds passed rate: 0 bps, 0 pps
 Last 30 seconds dropped rate: 0 bps, 0 pps
Run the display vsi command. The command output shows hard-pipe static PW information of the VPLS.
<HUAWEI> display vsi name vsi1 verbose
    VSI Name               : vsi1
    Work Mode              : normal
    Administrator VSI      : no
    Isolate Spoken         : disable
    VSI Index              : 2
    PW Signaling           : ldp
    Member Discovery Style : --
    Bridge-domain Mode     : disable
    PW MAC Learn Style     : unqualify
    Encapsulation Type     : vlan
    MTU                    : 1500
    Diffserv Mode          : uniform
    Service Class          : --
    Color                  : --
    DomainId               : 255
    Domain Name            : 
    Ignore AcState         : disable
    P2P VSI                : disable
    Multicast Fast Switch  : disable
    Create Time            : 0 days, 0 hours, 30 minutes, 35 seconds
    VSI State              : up
    Resource Status        : --
                
    VSI ID                 : 1
   *Peer Router ID         : 3.3.3.9
    Negotiation-vc-id      : 1
    primary or secondary   : primary
    ignore-standby-state   : no
    VC Label               : 200
    Peer Type              : static
    Tunnel ID              : 0x000000000300000001 
    Broadcast Tunnel ID    : --
    Broad BackupTunnel ID  : --
    Tunnel Policy Name     : policy1
    CKey                   : 130
    NKey                   : 620757232
    Stp Enable             : 0
    PwIndex                : 65
    Control Word           : disable
    BFD for PW             : unavailable
    Hard-pipe bandwidth    : 112 Kbps
    Hard-pipe burst time   : 222 us
                
    Interface Name         : Ethernet0/1/0
    State                  : up
    Access Port            : false
    Last Up Time           : 2017/09/18 11:51:03
    Total Up Time          : 0 days, 0 hours, 26 minutes, 10 seconds
                
  **PW Information:
                
   *Peer Ip Address        : 3.3.3.9
    PW State               : up
    Local VC Label         : 200
    Remote VC Label        : 200
    Remote Control Word    : disable
    PW Type                : MEHVPLS
    Local  VCCV            : alert lsp-ping bfd 
    Remote VCCV            : alert lsp-ping bfd 
    Tunnel ID              : 0x000000000300000001 
    Broadcast Tunnel ID    : --
    Broad BackupTunnel ID  : --
    Ckey                   : 130
    Nkey                   : 620757232
    Main PW Token          : 0x0
    Slave PW Token         : 0x0
    Tnl Type               : te
    OutInterface           : --
    Backup OutInterface    : --
    Stp Enable             : 0
    Mac Flapping           : 0
    PW Last Up Time        : 2017/09/18 12:15:40
    PW Total Up Time       : 0 days, 0 hours, 1 minutes, 33 seconds
Run the display traffic-statistics vsi hard-pipe command. The command output shows hard-pipe static PW traffic statistics information of the VPLS.
<HUAWEI> display traffic-statistics vsi vsi1 hard-pipe
vsi-name: 1
Peer-address: 2.2.2.2
Negotiation-vc-id: 10
Statistics last cleared: never
Last 300 seconds passed rate : 1 bytes/sec, 1 packets/sec
Last 300 seconds dropped rate: 1 bytes/sec, 1 packets/sec
Passed: 1 bytes, 1 packets
Dropped: 1 bytes, 1 packets
vsi-name: 1
Peer-address: 2.2.2.2
Negotiation-vc-id: 11
Statistics last cleared: never
Last 300 seconds passed rate : 1 bytes/sec, 1 packets/sec
Last 300 seconds dropped rate: 1 bytes/sec, 1 packets/sec
Passed: 1 bytes, 1 packets
Dropped: 1 bytes, 1 packets
vsi-name: 1
Peer-address: 2.2.2.2
Negotiation-vc-id: 12
Statistics last cleared: 2017/07/21 12:06:07
Last 300 seconds passed rate : 1 bytes/sec, 1 packets/sec
Last 300 seconds dropped rate: 1 bytes/sec, 1 packets/sec
Passed: 1 bytes, 1 packets
Dropped: 1 bytes, 1 packets
Translation
Download
Updated: 2019-01-14

Document ID: EDOC1100058925

Views: 36657

Downloads: 61

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next