Table Of Contents
Setting Up the ISC Service
Performing Device Settings to Support ISC
Configuring Switches in VTP Transparent Mode
Setting the Loopback Addresses on N-PE Devices
Creating Target Devices and Assign Roles (N-PE or U-PE)
Setting the Loopback Address
Setting the L2TPv3 Local Switching Loopback
Defining a Service Provider and Its Regions
Defining Customers and Their Sites
Defining VPNs
Creating Access Domains
Creating VLAN Pools
Creating a VC ID Pool
Creating Named Physical Circuits
Creating NPCs Through an NPC GUI Editor
Creating a Ring-Only NPC
Creating NPC Links Through the Autodiscovery Process
Setting Up the ISC Service
You define the service-related elements, such as target devices, VPNs, and network links. Normally, you create these elements once. This chapter contains the basic steps to set up the Cisco IP Solution Center (ISC) service for an L2VPN, L2TPv3, or VPLS service. It contains the following sections:
•
Performing Device Settings to Support ISC
•
Creating Target Devices and Assign Roles (N-PE or U-PE)
•
Defining a Service Provider and Its Regions
•
Defining Customers and Their Sites
•
Defining VPNs
•
Creating Access Domains
•
Creating VLAN Pools
•
Creating a VC ID Pool
•
Creating Named Physical Circuits
Note
This chapter presents high-level information on ISC services that are relevant to L2VPN and VPLS. For more detailed information on setting up these and other basic ISC services, see Cisco IP Solution Center Installation Guide, 4.1.
Performing Device Settings to Support ISC
Two device settings must be configured to support the use of ISC in the network:
•
Switches in the network must be operating in VTP transparent mode.
•
Loopback addresses must be set on N-PE devices.
Note
These are the two minimum device settings required for ISC to function properly in the network. You must, of course, perform other device configuration steps for the proper functioning of the devices in the network.
Configuring Switches in VTP Transparent Mode
For security reasons, ISC requires VTPs to be configured in transparent mode on all the switches involved in ERS or EWS services before provisioning L2VPN service requests. To set the VTP mode, enter the following Cisco IOS commands:
Switch# configure terminal
Switch(config)# vtp mode transparent
Enter the following Cisco IOS command to verify that the VTP mode has changed to transparent:
Setting the Loopback Addresses on N-PE Devices
See the section "Setting the Loopback Address" section for information.
Creating Target Devices and Assign Roles (N-PE or U-PE)
Every network element that ISC manages must be defined as a device in the system. An element is any device from which ISC can collect information. In most cases, devices are Cisco IOS routers that function as N-PE, U-PE, and P.
For detailed steps to create devices, see Cisco IP Solution Center Infrastructure Reference, 4.1.
Setting the Loopback Address
The loopback address for the N-PE has to be properly configured for an AToMPLS connection. The IP address specified in the loopback interface must be reachable from the remote pairing PE. The LDP tunnels are established between the two loopback interfaces of the PE pair.
See Figure 3-1 for an example of a loopback address.
Figure 3-1 PE Loopback Address
To prevent a wrong loopback address being entered into the system, the loopback IP address field on the GUI is read only. You choose the loopback address with the help of a separate pop-up window, which you access by clicking the Select button. This ensures that you will select only a valid loopback address defined on the device. See Figure 3-2.
Figure 3-2 Select Device Interface
This feature ensures that a valid loopback address is set.
To further narrow the search, you can select the LDPTermination Only check box and click the Select button. This will then limit the list to the LDP-terminating loopback interface(s).
Setting the L2TPv3 Local Switching Loopback
Local switching requires that you select two loopback addresses. Each loopback must be unique. To set a second loopback address, select the Enable L2TPV3 Loopback Definition check box. See Figure 3-3.
Figure 3-3 PE Local Switching Loopback Addresses
This causes two additional GUI fields to appear, Local Switching Loopback 1 and Local Switching Loopback 2. Use the Select button to set the local switching loopbacks.
Defining a Service Provider and Its Regions
You must define the service provider administrative domain before provisioning L2VPN. The provider administrative domain is the administrative domain of an ISP with one BGP autonomous system (AS) number. The network owned by the provider administrative domain is called the backbone network. If an ISP has two AS numbers, you must define it as two provider administrative domains. Each provider administrative domain can own many region objects.
For detailed steps to define the provider administrative domain, see Cisco IP Solution Center Infrastructure Reference, 4.1.
Defining Customers and Their Sites
You must define customers and their sites before provisioning L2VPN. A customer is a requestor of a VPN service from an ISP. Each customer can own many customer sites. Each customer site belongs to one and only one Customer and can own many CPEs. For detailed steps to create customers, see Cisco IP Solution Center Infrastructure Reference, 4.1.
Defining VPNs
You must define VPNs before provisioning L2VPN or VPLS. In L2VPN, one VPN can be shared by different service types. In VPLS, one VPN is required for each VPLS instance.
To create a VPN, perform the following steps.
Step 1
Select Service Inventory > Inventory and Connection Manager.
Step 2
Click VPNs in the left column. The VPNs window appears as shown in Figure 3-4.
Figure 3-4 Defining a VPN
For detailed steps to create VPNs, see Cisco IP Solution Center Infrastructure Reference, 4.1.
Note
The VPN in L2VPN is only a name used to group all the L2VPN links. It has no intrinsic meaning as it does for MPLS VPN.
Creating Access Domains
For L2VPN and VPLS, you create an Access Domain if you provision an Ethernet-based service and want ISC to automatically assign a VLAN for the link from the VLAN pool.
Note
You do not create an access domain for L2TPv3.
For each Layer 2 access domain, you need a corresponding Access Domain object in ISC. During creation, you select all the N-PE devices that are associated with this domain. Later, one VLAN pool can be created for an Access Domain. This is how N-PEs are automatically assigned a VLAN. See Figure 3-5.
Before you begin, be sure that you:
•
Know the name of the access domain that you want to create.
•
Have created a service provider to associate with the new access domain.
•
Have created a provider region associated with your provider and PE devices.
•
Have created PE devices to associate with the new access domain.
•
Know the starting value and size of each VLAN to associate with the new access domain.
•
Know which VLAN will serve as the management VLAN.
To create an Access Domain, perform the following steps.
Step 1
Select Service Inventory > Inventory and Connection Manager.
Step 2
Click Access Domains in the left column. The Access Domains window appears as shown in Figure 3-5.
Figure 3-5 Create an Access Domain
The Access Domains window contains the following:
•
Access Domain Name Lists the names of access domains. The first character must be a letter. The name can contain letters, numbers, and these punctuation characters: period, underscore, and dash. Limit: 80 characters. You can sort the list by access domain name.
•
Provider Name Lists the names of providers. Must begin with a letter. Can contain letters, numbers, and these punctuation characters: period, underscore, and dash. Limited to 80 characters. You can sort the list by provider name.
•
From the Access Domains window, you can create, edit, or delete access domains using the following buttons:
–
Create—Click to create new access domain. Enabled only if you do not select an access domain.
–
Edit—Click to edit the selected access domain (select by clicking the corresponding box). Enabled only if you select a a single access domain.
–
Delete—Click to delete the selected access domain (select by clicking the corresponding box). Enabled only if you select one or more access domains.
Creating VLAN Pools
For L2VPN and VPLS, you create a VLAN pool so that ISC can assign a VLAN to the links. VLAN ID pools are defined with a starting value and a size of the VLAN pool. A VLAN pool can be attached to an access domain. During the deployment of an Ethernet service, VLAN IDs can be auto-allocated from the access domain's pre-existing VLAN pools. When you deploy a new service, ISC changes the status of the VLAN pool from Available to Allocated. Auto-allocation gives the service provider tighter control of VLAN ID allocation.
You can also allocate VLAN IDs manually.
Note
When you are setting a manual VLAN ID on an ISC service, ISC warns you if the VLAN ID is outside the valid range of the defined VLAN pool. If so, ISC does not include the manually defined VLAN ID in the VLAN pool. We recommend that you preset the range of the VLAN pool to include the range of any VLAN IDs that you manually assign.
Note
For L2TPv3, you do not create a VLAN pool.
Create one VLAN pool per access domain. Within that VLAN pool, you can define multiple ranges.
Before you begin, be sure that you:
•
Know each VLAN pool start number.
•
Know each VLAN pool size.
•
Have created an access domain for the VLAN pool (see Creating Access Domains).
•
Know the name of the access domain to which each VLAN pool will be allocated.
Perform these steps if you want to have ISC automatically assign a VLAN to the links.
Step 1
Select Service Inventory.
Step 2
Select Inventory and Connection Manager.
Step 3
Select Resource Pools. The Resource Pools window appears.
Step 4
Select VLAN from the drop-down Pool Type list as shown in Figure 3-6.
Figure 3-6 VLAN Resource Pools
Step 5
Click Create. The Create VLAN Pool window appears as shown in Figure 3-7.
Figure 3-7 Create VLAN Pool
Step 6
Enter a VLAN Pool Start number.
Step 7
Enter a VLAN Pool Size number.
Step 8
If the correct access domain is not showing in the Access Domain field, click Select to the right of Access Domain field.
The Access Domain for New VLAN Pool dialog box appears as shown in Figure 3-8.
If the correct access domain is showing, continue with Step 9.
Figure 3-8 Access Domain for New VLAN Pool
a.
Select an Access Domain Name by clicking the button in the Select column to the left of that Access Domain.
b.
Click Select. The updated Create VLAN Pool window appears as shown in Figure 3-9.
Figure 3-9 Updated Create VLAN Pool
Step 9
Click Save.
The updated VLAN Resource Pools window appears as shown in Figure 3-10.
Note
The pool name is created automatically, using a combination of the provider name and the access domain name.
Note
The Status field reads "Allocated" if you already filled in the Reserved VLANs information when you created the access domain. If you did not fill in the Reserved VLANs information when you created the access domain, the Status field reads "Available." To allocate a VLAN pool, you must fill in the corresponding VLAN information by editing the access domain. (See Creating Access Domains.) The VLAN pool status automatically sets to "Allocated" on the Resource Pools window when you save your work.
Figure 3-10 Updated VLAN Resource Pools
Step 10
Repeat this procedure for each range you want to define within the VLAN.
Creating a VC ID Pool
VC ID pools are defined with a starting value and a size of the VC ID pool. A given VC ID pool is not attached to any inventory object (a provider or customer). During deployment of an L2VPN or VPLS service, the VC ID can be auto-allocated from the same VC ID pool or you can set it manually.
Note
When you are setting a manual VC ID on an ISC service, ISC warns you if the VC ID is outside the valid range of the defined VC ID pool. If so, ISC does not include the manually defined VC ID in the VC ID pool. We recommend that you preset the range of the VC ID pool to include the range of any VC IDs that you manually assign.
Create one VC ID pool per network.
In a VPLS instance, all N-PE routers use the same VC ID for establishing emulated Virtual Circuits (VCs). The VC-ID is also called the VPN ID in the context of the VPLS VPN. (Multiple attachment circuits must be joined by the provider core in a VPLS instance. The provider core must simulate a virtual bridge that connects the multiple attachment circuits. To simulate this virtual bridge, all N-PE routers participating in a VPLS instance form emulated VCs among them.)
Note
VC ID is a 32-bit unique identifier that identifies a circuit/port.
Before you begin, be sure that you have the following information for each VC ID pool you must create:
•
The VC Pool start number
•
The VC Pool size
Perform these steps for all L2VPN and VPLS services.
Step 1
Select Service Inventory.
Step 2
Select Inventory and Connection Manager.
Select Resource Pools. The Resource Pools window appears.
Step 3
Select VC ID from the drop-down Pool Type list as shown in Figure 3-11. Because this pool is a global pool, it is not associated with any other object.
Figure 3-11 VC ID Resource Pools
Step 4
Click Create. The Create VC ID Pool window appears as shown in Figure 3-12.
Figure 3-12 Create VC ID Pool
Step 5
Enter a VC pool start number.
Step 6
Enter a VC pool size number.
Step 7
Click Save. The updated VC ID Resource Pools window appears as shown in Figure 3-13.
Figure 3-13 Updated VC ID Resource Pools
Creating Named Physical Circuits
Before creating an L2VPN, L2TPv3, or VPLS service request, you must predefine the physical links between CEs and PEs. The Named Physical Circuit (NPC) represents a link going through a group of physical ports. Thus, more than one logical link can be provisioned on the same NPC; therefore, the NPC is defined once but used during several L2VPN or VPLS service request creations.
There are two ways to create the NPC links:
•
Through an NPC GUI editor.
•
Through the autodiscovery process.
An NPC definition must observe the following creation rules:
•
An NPC must begin with a CE or an up-link of the device where UNI resides or a Ring.
•
An NPC must end with an N-PE or a ring that ends in an N-PE.
If you are inserting NPC information for a link between a CE and UNI, you enter the information as:
•
Source Device is the CE device.
•
Source Interface is the CE port connecting to UNI.
•
Destination Device is the UNI box.
•
Destination interface is the UNI port.
If you are inserting NPC information for a CE not present case, you enter the information as:
•
Source Device is the UNI box.
•
Source Interface is the UP-LINK port, not the UNI port, on the UNI box connecting to the N-PE or another U-PE or PE-AGG.
•
Destination Device is the U-PE, PE-AGG, or N-PE.
•
Destination Interface is the DOWN-LINK port connecting to the N-PE or another U-PE or PE-AGG.
If you have a single N-PE and no CE (no U-PE and no CE), you do not have to create an NPC since there is no physical link that needs to be presented.
If an NPC involves two or more links (three or more devices), for example, it connects ence11, enpe1, and enpe12, you can construct this NPC as follows:
•
Build the link that connects two ends:mlce1 and mlpe4 (as shown in Figure 3-25).
•
Insert a device (enpe12) to the link you just made.
•
Click Insert Device to insert the device.
Creating NPCs Through an NPC GUI Editor
Perform the following steps to create NPCs through the NPC GUI editor.
Step 1
Select Service Inventory
Step 2
Select Inventory and Connection Manager
Step 3
Select Named Physical Circuits. The Named Physical Circuits window appears as shown in Figure 3-14.
Figure 3-14 Named Physical Circuit
To create a new NPC, you choose a CE as the beginning of the link and a N-PE as the end. If more than two devices are in a link, you can add or insert more devices (or a ring) to the NPC. Note that the new device or ring added is always placed after the device selected, while a new device or ring inserted is placed before the device selected.
Each line on the Point-to-Point Editor represents a physical link. Each physical link has five attributes:
•
Source Device
•
Source Interface
•
Destination Device (must be a N-PE)
•
Destination Interface
•
Ring
Note
Before adding or inserting a ring in an NPC, you must create a ring and save it in the repository. To obtain information on creating NPC rings, see Cisco IP Solution Center Infrastructure Reference, 4.1.
Source Device is the beginning of the link and Destination Device is the end of the link.
In the following example, there is a link with one end connecting a device called mlce1 on interface Ethernet0/0 and another link connecting to mlpe4 on interface FastEthernet0/0. Use the following steps to enter these devices.
Step 4
Click Create.
The Create a Named Physical Circuit window appears. See Figure 3-15.
Figure 3-15 Create a Named Physical Circuit
Step 5
Click Add Device. A list like the one in Figure 3-16 appears.
Figure 3-16 Choose a CPE
Step 6
Choose a CPE as the beginning of the link.
Step 7
Click Select. The device appears as shown in Figure 3-17.
Figure 3-17 Device Selected for NPC
Step 8
To insert another device or a ring, click Insert Device or Insert Ring. To add another device or ring to the NPC, click Add Device or Add Ring.
For this example, click Add Device to add the N-PE.
Step 9
Choose a N-PE as the destination device.
Step 10
Click Select. The device appears as shown in Figure 3-18.
Figure 3-18 Second Device Selected for NPC
Step 11
In the Outgoing Interface column, click Select outgoing interface.
A list of interfaces, similar to the one in Figure 3-19, that were entered into the system appears.
Figure 3-19 Select Outgoing Interface
Step 12
Choose an interface from the list and click Select.
Step 13
In the Incoming Interface column, click Select incoming interface.
A list of interfaces, similar to the one in Figure 3-20, that were entered into the system appears.
Figure 3-20 Select Incoming Interface
.
Step 14
Choose an interface from the list as the end of the link and click Select.
If you did not create a ring that you want to insert into the NPC, go to Step 25.
Step 15
If you created a ring to be used with the NPC, click Add Ring or Insert Ring. The Select NPC Ring window appears as shown in Figure 3-21.
Note
For L2TPv3, you cannot create rings.
Figure 3-21 Select NPC Ring
Step 16
Select a Ring Name and click Select. The Create a Named Physical Circuit window appears similar to the one in Figure 3-22.
Figure 3-22 Create a Named Physical Circuit
Step 17
Click Select device.
Step 18
Select a Device from the ring to connect to mlce1 from a window like the one in Figure 3-23 and click Select.
Figure 3-23 Select a Device from the Ring
Step 19
Click Select incoming interface.
Step 20
Select the Interface and click Select.
Step 21
Click Select device.
Step 22
Select a Device from the ring to connect to mlpe4 from a window like the one in Figure 3-23 and click Select.
Step 23
Click Select outgoing interface.
Step 24
Select the Interface and click Select.
The NPC that includes the ring is now complete as shown in Figure 3-24.
Figure 3-24 Ring Complete
Step 25
Click Save. The Named Physical Circuits window now displays the NPC that you created as shown in Figure 3-25.
Figure 3-25 Created NPC
Creating a Ring-Only NPC
You can also create an NPC that contains only a ring without specifying CE.
Step 1
Select Service Inventory > Inventory and Connection Manager > Named Physical Circuits.
Step 2
Click Create.
Step 3
The Create a Named Physical Circuit window appears, appears as shown in Figure 3-26.
Figure 3-26 Create an NPC that is a Ring
Step 4
Click Add Ring. The Select NPC Ring window (Figure 3-27) appears.
Figure 3-27 Select a Ring
Step 5
Select a ring and click Select. The ring appears in a window like the one in Figure 3-28.
Figure 3-28 Select Device
Step 6
Click the Select device link to select the beginning of the ring. A window appears like the one in Figure 3-29, showing a list of devices.
Figure 3-29 Select the Beginning of the Ring
Step 7
Choose the device that is the beginning of the ring and click Select.
Step 8
Click the Select device link to choose the end of the ring.
Step 9
Choose the device that is the end of the ring and click Select.
Note
The device that is the end of the ring in a ring-only NPC must be an N-PE.
Step 10
The Create a Named Physical Circuit window appears (Figure 3-30) showing the Ring-Only NPC.
Figure 3-30 Ring-Only NPC
Step 11
Click Save to save the NPC to the repository.
Creating NPC Links Through the Autodiscovery Process
With autodiscovery, the existing connectivity of network devices can be automatically retrieved and stored in the ISC database. NPCs are further abstracted from the discovered connectivity.
For detailed steps to create NPCs using autodiscovery, see Cisco IP Solution Center Infrastructure Reference, 4.1.