Configure SPBM IPv4 Layer 3 VSN

Before you begin

  • Configure the required SPBM IS-IS infrastructure.

  • Configure a VRF on the switch. For more information, see VRF Lite Configuration using CLI.

  • Create the Customer VLANs and add slots/ports.

About this task

After you have configured the SPBM infrastructure, you can enable SPBM Layer 3 VSN to advertise IPv4 routes across the SPBM network from one VRF to another using the following procedure.

SPBM Layer 3 VSN uses IS-IS to exchange the routing information for each VRF. In the VRF, just like in the Global Router (VRF 0), the routes are not redistributed into IS-IS automatically. To advertise the VRF routes, you must explicitly redistribute one of the following protocols into IS-IS: direct, static, RIP, OSPF, or BGP. Routing between VRFs is also possible by using redistribution policies and injecting routes from the other protocols.

Procedure

  1. Enter VRF Router Configuration mode for a specific VRF context:

    enable

    configure terminal

    router vrf WORD<1-16>

  2. Create an IPv4 VPN instance on the VRF:

    ipvpn

  3. Configure SPBM Layer 3 VSN:

    i-sid <0–16777215>

  4. Enable IPv4 VPN on the VRF:

    ipvpn enable

    By default, a new IPv4 VPN instance is disabled.

  5. Display all IPv4 VPNs:

    show ip ipvpn [vrf WORD<1–16>] [vrfids WORD<0–512>]

  6. Identify routes on the local switch to be announced into the SPBM network:

    isis redistribute {direct | bgp | ospf | rip | static}

  7. Enable routes on the local switch to be announced into the SPBM network:

    isis redistribute {direct | bgp | ospf | rip | static} enable

  8. Identify other routing protocols to which to redistribute IS-IS routes:

    ip {bgp | ospf | rip} redistribute isis

  9. Optional: Tag routes that BGP or OSPF redistribute into IS-IS:
    isis redistribute {bgp | ospf} tag <1-4294967295>
  10. Enable IS-IS redistribution to other routing protocols:

    ip {bgp | ospf | rip} redistribute isis enable

  11. Return to Privileged EXEC mode:

    end

  12. Apply the configured redistribution:

    isis apply redistribute {direct | bgp | ospf | rip | static} vrf WORD<1–16>

    ip bgp apply redistribute isis vrf WORD<1–16>

    ip ospf apply redistribute isis vrf WORD<1–16>

    ip rip apply redistribute isis vrf WORD<1–16>

  13. Display the redistribution configuration:

    show ip isis redistribute [vrf WORD<1–16>] [vrfids WORD<0–512>]

Example

Create the IPv4 VPN instance:

Switch:1>enable
Switch:1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch:1(config)#router vrf green
Switch:1(router-vrf)#ipvpn
Switch:1(router-vrf)#i-sid 109
Switch:1(router-vrf)#ipvpn enable
Switch:1(router-vrf)#show ip ipvpn
==========================================================================================
                                        IPv4 IPVPN
==========================================================================================
VRF Name            VRF ID   IPv4 IPVPN   IPv6 IPVPN   I-SID        I-SID Name
------------------------------------------------------------------------------------------
green               1        enabled      disabled     109          ExtremeServer1
------------------------------------------------------------------------------------------
1 out of 1 Total IPv4 L3 VSN, 1 active IPv4 and 0 active IPv6 displayed.   
Switch:1(router-vrf)#isis redistribute ospf
Switch:1(router-vrf)#isis redistribute ospf enable
Switch:1(router-vrf)#isis redistribute ospf enable
Switch:1(config)#end
Switch:1#isis apply redistribute ospf vrf vrfred
Switch:1#show ip isis redistribute vrf vrfred
================================================================================
                        ISIS Redistribute List - VRF vrfred
================================================================================

SOURCE MET MTYPE      SUBNET   ENABLE LEVEL  RPOLICY    TAG
--------------------------------------------------------------------------------
LOC    1   internal   allow    FALSE  l1                0

Variable Definitions

The following table defines parameters for the show ip ipvpn command.

Variable

Value

vrf WORD<1–16>

Specifies the VRF name.

vrfids WORD<0–512>

Specifies the VRF ID.

The following table defines parameters for the i-sid command.

Variable

Value

<0–16777215>

Assigns an I-SID to the VRF being configured.

Use the no or default option to remove the I-SID to VRF allocation for this VRF.

The following table defines parameters for the isis redistribute command.

Variable

Value

{direct | bgp | ospf | rip | static}

Specifies the protocol.

enable

Enables the redistribution of the specified protocol into the SPBM network.

The default is disabled. Use the no or default options to disable the redistribution.

metric <0–65535>

Configures the metric (cost) to apply to redistributed routes. The default is 1.

metric-type {external|internal}

Configures the type of route to import into the protocol. The default is internal.

route-map WORD<0–64>

Configures the route policy to apply to redistributed routes. Specifies a name.

subnets {allow|suppress}

Indicates whether the subnets are advertised individually or aggregated to their classful subnet. Choose suppress to advertise subnets aggregated to their classful subnet. Choose allow to advertise the subnets individually with the learned or configured mask of the subnet. The default is allow.
tag <1-4294967295> Apply a tag to routes that BGP or OSPF redistribute to IS-IS. You can then configure router filtering to prevent tagged IS-IS routes from being redistributed back to either protocol.

The following table defines parameters for the isis apply redistribute command.

Variable

Value

{direct | bgp | ospf | rip | static}

Specifies the protocol.

vrf WORD<1–16>

Applies IS-IS redistribute for a particular VRF. Specifies the VRF name.
9039040-00 Rev AB