Building Carrier Ethernet Services Using
Cisco Ethernet Virtual Circuit (EVC) Framework
BRKSPG-2204
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
Agenda
ƒ Introduction
ƒ Cisco EVC Fundamentals
ƒ Operation and Packet Flow
ƒ Dynamic Ethernet Service Activation (DESA)
ƒ Deployment Use Cases—Residential / Business / DCI Services
ƒ Platform Support
ƒ Summary
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
3
Introduction
What Is Cisco EVC Framework?
ƒ Cisco Ethernet Virtual Circuit (EVC) is the next-generation
cross-platform Carrier Ethernet Software Infrastructure
ƒ Addresses Flexible Ethernet Edge requirements
ƒ Supports service convergence over Ethernet
ƒ Complies with MEF, IEEE, IETF standards
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
5
Flexible Ethernet Edge
Mobile
Content Farm
Access
Residential
Aggregation
Edge
MSPP
VOD
TV
SIP
Cable
STB
Business
Corporate
Residential
Untagged
Single tagged
ETTx tagged
Double
802.1q
802.1ad
etc
DSL
L2 P-to-P native
L2 P-to-P over PW
L2 MP native bridging
L2 MP VPLS
L3 routed
BRAS
Core Network
MPLS /IP
DPI
Content Farm
SR/PE
PON
STB
VOD
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
TV
SIP
6
Introducing Cisco EVC Framework
Functional Highlights
Support mix of Layer 2
and Layer 3 services on
same physical port
Concurrent support of
different flavors of Layer
2 services: Pt-to-Pt and
Mpt
Alignment with
emerging standards:
ƒ MEF 6, 10.1, 11
ƒ IEEE 802.1ad
ƒ IEEE 802.1ah
BRKSPG-2204
Ethernet Flow Points
ƒ Model Ethernet Service Layer
ƒ Transport agnostic
Service Abstraction
Multiplexed
Forwarding
Services
EVC
Framework
Technology
Flexible
Service
Mapping
Advanced
Frame
Manipulation
Flexible definition of
service delimiters based
on Ethernet header
fields
Selective EVC Mapping
Advanced VLAN tag
manipulation
Standards Alignment
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
7
Cisco EVC Fundamentals
Cisco EVC Building Blocks
Cisco EVC Uses the Following New Concepts:
ƒ Ethernet Flow Point (EFP)
Transport-agnostic abstraction of an Ethernet service on an interface
ƒ Ethernet Virtual Circuit (EVC)
Device local object (container) for network-wide service parameters
ƒ Bridge Domain (BD)
Ethernet Broadcast Domain local to a device
ƒ Bridge Domain Interface (BDI)
ԟ Logical Layer 3 interface associated with a BD to perform integrated routing and
bridging
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
9
Cisco EVC Building Blocks
Ethernet Flow Point (EFP)
CE A3
EVC Blue
CE A2
CE A1
CE B2
CE B1
EFP
EVC Red
EFP
EFP
EFP
Interface
ƒ Instance of a MEF EVC on a port
ƒ Also defined as Service Instance
ƒ Classify frames belonging to a particular Ethernet Service
ƒ Apply features selectively to service frames
ƒ Define forwarding actions and behavior
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
10
Cisco EVC Building Blocks
Ethernet Virtual Circuit
EVC
EVC
EFP
Management
Plane
EFP
EFP
EFP
Interface
ƒ Representation of a MEF EVC on the device
ƒ Management Plane container
ƒ Hosts global EVC attributes
ƒ One-to-many mapping from EVC to EFPs
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
11
Cisco EVC Building Blocks
Bridge Domain
EVC
EVC
EFP
Management
Plane
EFP
EFP
EFP
Interface
Bridge Domain
ƒ Broadcast Domain internal to the device
ƒ Allows decoupling broadcast domain from VLAN
ƒ Per port VLAN significance
ƒ One-to-many mapping from BD to EFPs
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
12
Cisco EVC Building Blocks
Bridge Domain vs. VLAN Bridge
Bridge
Domain
VLAN
VLAN
EFP
VLAN
VLAN Bridge
EVC Bridge
ƒ VLAN bridge has 1:1 mapping between VLAN and internal Broadcast Domain
ԟ VLAN has global per-device significance
ƒ EVC bridge decouples VLAN from Broadcast Domain
ԟ VLAN treated as encapsulation on a wire
ƒ VLAN on a wire mapped to internal Bridge Domain via EFPs
ԟ Net result: per-port VLAN significance
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
13
Cisco EVC Building Blocks
Bridge Domain Interface
L2 Network
BD
EFP
Bridge
Domain
Interface
BDI
L3 Network
L3 Interface
L3 Routing
ƒ Logical Layer 3 (routed) port associated with a Bridge Domain
ƒ Support termination of Ethernet traffic to IP / L3VPN (VRF aware)
ƒ Only a single BDI per Bridge Domain is allowed
ƒ Maintains Admin State (CLI) and Operational State (derived from BD)
ԟ If all EFPs in BD are Down or Admin-Down, then BDI operational state will be Down
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
14
Operation and Packet Flow
Packet Flow Pipeline
Flexible
Service
Mapping
Ingress
Interface
Ingress
Encapsulation
Adjustment
Input
Features
Inbound EFP
Egress
Interface
Forwarder
Outbound EFP
Egress
Encapsulation
Adjustment
Output
Features
Frame Filtering
16
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
Operation and Packet Flow
Flexible Service Mapping
Flexible Service Mapping
PORT
GE / 10GE
Single Tagged VLAN Matching
Untagged
ƒ Untagged traffic
ƒ Single VLAN ID value
ƒ Single VLAN ID Range (contiguous)
ƒ Single VLAN ID List
ƒ Single VLAN ID Range and List
70
20 21
22
30 40
50
10 11
Range
List
Range
and List
19 12
Ethernet Flow Points
S-VLAN C-VLAN
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
18
Flexible Service Mapping
PORT
GE / 10GE
Double Tagged VLAN Matching
ƒ Outer VLAN, Inner VLAN
ƒ Outer VLAN and Range of Inner VLANs
(contiguous)
ƒ Outer VLAN and List of Inner VLANs
ƒ Outer VLAN and Range and List of Inner
VLANs
Outer
Inner
Outer
Inner Range
Outer
Inner List
100
200
12
10
300
90
70
11
80
10
S-VLAN C-VLAN
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
19
Flexible Service Mapping
PORT
GE / 10GE
Header Matching
ƒ Single VLAN, single 802.1p (COS) value
ƒ Single VLAN, COS List/Range
ƒ Outer VLAN, outer COS and Inner VLAN
ƒ Outer VLAN, Inner VLAN and inner COS
ƒ Single VLAN, Ethertype value (PPPoE, IPv4, IPv6)
ƒ Outer VLAN, Inner VLAN and Ethertype value
(PPPoE, IPv4, IPv6)
COS
COS
Range
PPPoE
400
500
600
COS
5
COS
2-5
PPPoE
S-VLAN C-VLAN
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
20
Flexible Service Mapping
PORT
GE / 10GE
Comprehensive Matching Capabilities
Untagged
ƒ EFP construct classifies L2 flows
on Ethernet interfaces
20 21
22
ƒ Single Tagged
ƒ Double Tagged
ƒ Header/Payload
100
10
Ethernet Flow
Pointss
70
30 40
50
10 11
19 12
200
12
10
300
90
70
11
80
400
500
600
COS
5
COS
2-5
PPPoE
S-VLAN C-VLAN
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
21
Flexible Service Mapping
Loose Match Classification Rule
ƒ Cisco EVC follows a Loose Match classification model
ƒ Unspecified fields are treated as wildcard
ƒ encap dot1q 10 matches any frame with outer tag equal to 10
10
10
50
ƒ encap dot1q 10 second-dot1q 50 matches any frame with outer-most tag as 10
and second tag as 50
BRKSPG-2204
10
50
10
50
4
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
22
Flexible Service Mapping
Longest Match Classification Rule
ƒ Cisco EVC follows a Longest Match classification model
ƒ Frames are mapped to EFP with longest matching set of classification fields
EFP
10
10
200
S-VLAN 10
10
10
100
C-VLAN 100
S-VLAN 10
130
BRKSPG-2204
Interface
VLAN 10
C-VLAN 128-133
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
23
Flexible Service Mapping
EFP with ‘Default’ Encapsulation
ƒ Matches all frames unmatched by any other EFP on a port
VLAN 10
VLAN 20
VLAN 10
VLAN 20
VLAN 50
Untagged
Default
Interface
EFP
ƒ If default EFP is the only one configured on a port, it matches all traffic on the
port (tagged and untagged)
VLAN 10
VLAN 20
Default
VLAN 50
Untagged
EFP
Interface
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
24
Flexible Service Mapping
Trunk EFP
ƒ Matches a range and/or list of VLANs.
ƒ Allocates each VLAN to a unique bridge-domain.
ƒ Emulates ‘switchport mode trunk’ behavior.
BD
VLAN 10
BD
VLAN 20
Trunk EFP
VLAN 50
Interface
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
BD
Cisco Public
25
Operation and Packet Flow
Advanced Frame Manipulation
Advanced Frame Manipulation
PUSH Operations
ƒ Add one VLAN tag
ƒ Add two VLAN tags
BRKSPG-2204
DA SA 20
DA SA 25 20
DA SA
DA SA 25 31
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
27
Advanced Frame Manipulation
POP Operations
ƒ Remove one VLAN tag
ƒ Remove two VLAN tags
BRKSPG-2204
DA SA 20
DA SA 25 20
DA SA
DA SA 25 31
DA SA 10 20
DA SA 20
DA SA 10 20
DA SA
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
28
Advanced Frame Manipulation
Translation Operations
ƒ 1:1 VLAN Translation
DA SA 20
DA SA 25 20
ƒ 1:2 VLAN Translation
DA SA
DA SA 25 31
ƒ 2:1 VLAN Translation
DA SA 10 20
DA SA 20
DA SA 10 20
DA SA
DA SA 10
DA SA 25
DA SA 10
DA SA 25 31
DA SA 10 20
DA SA 31
DA SA 10 20
DA SA 25 31
ƒ 2:2 VLAN Translation
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
29
Advanced Frame Manipulation
VLAN Tag Manipulation
DA SA 20
DA SA 25 20
DA SA
DA SA 25 31
DA SA 10 20
DA SA 20
DA SA 10 20
DA SA
DA SA 10
DA SA 25
DA SA 10
DA SA 25 31
DA SA 10 20
DA SA 31
DA SA 10 20
DA SA 25 31
ƒ PUSH operations
ƒ POP operations
ƒ TRANSLATION operations
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
30
Encapsulation Adjustment Considerations
EoMPLS PW VC Type and EVC VLAN Rewrites
ƒ VLAN tags can be added, removed or
translated prior to VC label imposition
or after disposition
ԟ Any VLAN tag(s), if retained, will appear
as payload to the VC
ƒ VC label imposition and service
delimiting tag are independent from
EVC VLAN tag operations
MPLS Imposition
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
PUSH 1
VLAN tag
4
EVC VLAN
Rewrite
VC
Type
5
MPLS Label
Imposition
PW
AC
MPLS Disposition
Dummy
VLAN tag
POP 1
VLAN tag
ԟ Dummy VLAN tag – RFC 4448 (sec 4.4.1)
ƒ VC service-delimiting VLAN-ID is
removed before passing packet to
Attachment Circuit processing
Dummy
VLAN tag
MPLS Label
Disposition
4
VC
Type
PW
Cisco Public
5
EVC VLAN
Rewrite
AC
31
Operation and Packet Flow
Multiplexed Forwarding Services
Multiplexed Forwarding Services
ƒ Cisco EVC supports flexible access VLAN to forwarding service mapping
ԟ 1-to-1 access VLAN to a service
ԟ Same port, multiple access VLANs to a service
ԟ Multiple ports, multiple access VLANs to a service
ƒ Forwarding services include:
ԟ L2 point-to-point local connect
ԟ L2 point-to-point xconnect
ԟ L2 multipoint bridging
ԟ L2 multipoint VPLS
ԟ L2 point-to-multipoint bridging
ԟ L3 termination
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
33
Multiplexed Forwarding Services
Local and Bridged P2P and MP Forwarding Services
ƒ Layer 2 P2P local services
Local Hair-Pin
ԟNo MAC learning
Layer 2 Point-to-Point
ԟTwo EFPs on same interface (hair-pin)
ԟTwo EFPs on different interfaces
ƒ Layer 2 MP bridged services
BD
ԟMAC based forwarding and learning
Split
ԟLocal VLAN significance
Horizon
Layer 2
Multipoint
bridged
ԟBridge Domain (BD)—different access
VLANs in the same broadcast domain
ԟSplit-horizon—prevent communication
between EFPs
EFPs
BRKSPG-2204
BD = Bridge Domain
PW = Pseudowire
© 2012 Cisco and/or its affiliates. All rights reserved.
VFI = Virtual Fwd Instance
SVI = Switch Virtual Instance
Cisco Public
34
Multiplexed Forwarding Services
Provider Backbone Bridging (PBB) Forwarding Services
ƒ PBB Forwarding Services
ԟ MAC Tunneling per IEEE Std. 802.1ah
MAC Tunnel
ԟ C-MAC BD performs MAC learning and
forwarding based on Customer MAC
Addresses (1:1 mapping between CMAC BD & I-SID)
C-MAC
BD
ԟ B-MAC BD performs MAC learning and
forwarding based on Backbone MAC
Addresses
C-MAC
BD
ԟ MAC Tunnel performs PBB
encapsulation/de-capsulation (I-SID, BVLAN, Backbone Addresses Header)
EFPs
BRKSPG-2204
B-MAC
BD
© 2012 Cisco and/or its affiliates. All rights reserved.
C-MAC BD = Customer MAC Bridge Domain
B-MAC BD = Backbone MAC Bridge Domain
Cisco Public
35
Multiplexed Forwarding Services
MPLS-Based P2P and MP Forwarding Services
ƒ Layer 2 P2P services using Ethernet
over MPLS
PW
BD
VFI
ԟ EFP to EoMPLS PW
PW
PW
ƒ Layer 2 MP services using VPLS
Layer 2 Multipoint VPLS
ԟExtends ethernet multipoint bridging
over a full mesh
of PWs
ԟSplit horizon support over attachment
circuits (configurable) and PWs
Layer 2 Point-to-Point EoMPLS
BD = Bridge Domain
PW = Pseudowire
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
VFI = Virtual Fwd Instance
SVI = Switch Virtual Instance
36
Multiplexed Forwarding Services
Rooted-Multipoint Forwarding Services (E-TREE)
ƒ BD with Split Horizon Group can be used to implement rooted-multipoint
forwarding service:
ԟ Place all Leaf EFPs in Split Horizon Group
ԟ Keep Root EFP outside the Split Horizon Group
ƒ Net effect:
Leaf
EFP
Root EFP
Bridge Domain
ԟBidirectional connectivity
between Root and all
Leaf EFPs
ԟLeaf EFPs cannot
communicate to
each other
BD
Leaf
EFP
Split Horizon
Group
Interface
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
Leaf
EFP
37
Multiplexed Forwarding Services
Layer 3 Forwarding Services
Layer 3
IP / L3VPN via sub-int
ƒ Co-existence with Routed
sub-interfaces
ƒ Layer 3 termination through
SVI/BVI/BDI interface
ƒ Layer 3 termination through
Routed sub-interfaces
BD
Layer 3
IP / L3VPN via SVI, BVI or BDI
BD
SVI/BVI/BDI
BD
BD = Bridge Domain
VFI = Virtual Fwd Instance
PW = Pseudowire
SVI = Switch Virtual Instance
BDI = Bridge Domain Interface BVI = Bridge Virtual Interface
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
38
Multiplexed Forwarding Services
Putting It All Together
PW
ƒ Multiplexed Service Interface
BD
ƒ Mix of L2 and L3 services on
same port
PW
BD
PW
MAC Tunnel
ƒ Different types of
L2 services
B-MAC
BD
C-MAC
BD
ԟ Point-to-Point
ԟ Multipoint
BD
EFPs
BRKSPG-2204
VFI
SVI/BVI/BDI
BD = Bridge Domain
VFI = Virtual Fwd Instance
PW = Pseudowire
SVI = Switch Virtual Instance
BDI = Bridge Domain Interface BVI = Bridge Virtual Interface
C-MAC BD = Customer MAC Bridge Domai
B-MAC BD = Backbone MAC Bridge Domain
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
39
Operation and Packet Flow
Features
Service-Instance/Bridge Domain Features
Security Features
Bridging Control
Access Control
• MAC Address
Limiting on EVC
Bridge Domain
• MAC Security
on EFP
• Storm Control
on Ports with
EVCs
• L2 MAC ACL on
EFP
• L3 ACL on EFP
• L4 ACL on EFP
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Address Spoofing
/ Masquerading
• IP Source Guard
for EFP
• DHCP snooping
with Option-82
on EFP
• Dynamic ARP
Inspection (DAI)
Cisco Public
41
Service-Instance/Bridge Domain Features
Topic covered at:
BRKSPG-2207
Resiliency Features
Link Redundancy
Device Multi-homing
• EVC “static”
Etherchannel
• EVC “LACP”
Etherchannel
• EVC Etherchannel
Manual Load
Balancing
• EVC and FlexLink
(backup interface)
integration
• Multi-Chassis
LACP (mLACP)
• ICCP Multi-chassis
VLAN Redundancy
(Pseudo mLACP,
a.k.a mLACP
Active/Active)
• Pseudowire
Redundancy
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Network Multihoming
• MST on EVC
Bridge Domain
• G.8032 Ethernet
Ring Protection
(ERP)
• Resilient Ethernet
Protocol (REP) on
EVC
• MST/PVST Access
Gateway
Cisco Public
42
Service-Instance/Bridge Domain Features
OAM Features
Topic covered at:
BRKSPG-2202
Service OAM
Performance
Management
Fault Management
• IEEE 802.1ag (CFM) on
EFP with Bridge Domain
• CFM on EFP with
Xconnect
• CFM on L2 VFI
• E-LMI (MEF16)
• CFM to Ethernet LMI (ELMI) Interworking
• PW OAM to E-LMI
Interworking
• Link OAM to CFM
Interworking
BRKSPG-2204
• IP SLA (IOS) / Ethernet
SLA (IOS-XR)
• ITU-T Y.1731
Performance
Management
© 2012 Cisco and/or its affiliates. All rights reserved.
Link OAM
• 802.3ah Link OAM
• UDLD on EFP
Cisco Public
43
Service-Instance/Bridge Domain Features
Miscellaneous and Instrumentation Features
Miscellaneous
• IGMP Snooping
• Custom ether-type on
EFP
• Static unicast / multicast
MAC on EFP and VFI
PW
• SPAN on EVC
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Instrumentation
• IF-MIB (extensions to
support EFPs)
• CISCO-EVC-MIB
• CISCO-BRIDGEDOMAIN-MIB
Cisco Public
44
Dynamic Ethernet Service Activation (DESA)
What Is DESA?
ƒ Ethernet infrastructure with
programmatic interface
ƒ Intelligent Service Management
engine
ƒ Power of dynamic subscriber
management from ISG to
automate provisioning of
Ethernet Services
Ethernet Virtual
Circuit (EVC)
Framework
Intelligent
Services Gateway
(ISG)
ƒ Automated, customized
Ethernet service provisioning
infrastructure that saves OPEX
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
46
What Is ISG?
Cisco Intelligent Services Gateway (ISG) is a
licensed feature set on Cisco IOS that
provides Session Management and Policy
Management services to a variety of access
networks
Subscriber Policy Layer
Policy
Server
AAA
Server
Web
Portal
DHCP
Server
…
Open
Northbound
Interfaces
Subscriber Identity
Management
ISG
ƒ Subscriber Identification
Policy
Management and
Enforcement
ƒ Subscriber Authentication
ƒ Subscriber Services Determination and
Enforcement
ƒ Dynamic Service update
ISG
So focal, that the entire device is often referred as an:
Intelligent Services Gateway router or simply “The ISG”
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
47
ISG Session Types
ƒ Based on Subscriber Access Protocol
ƒ Sessions Supported:
Initiation
Dynamically Created Sessions:
PPP sessions
IP sessions
NEW with
DESA
IP “Subnet” sessions
Authentication
Session
Termination
Ethernet sessions
Statically Created Sessions:
Interface sessions (IP-based)
Service
Activation
Ethernet sessions
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
48
SMB—Service Activation Example
1.
Customer orders L2
service at portal
ԟCPE is shipped to customer
5.
ԟCustomer plugs in CPE
2.
3.
4.
5.
First L2-traffic triggers
RADIUS request to
activate services
1.
L2 Service profile applied
(ACLs, QOS, Pseudowire,
etc.)
Activates billing and
inventory functions
RADIUS
Accounting
4.
DESA
CPE
2.
L2-Session
Dynamic
Pseudowire
L2-Session
Dynamic
Service
Profile
Customer changes profile
dynamically on-demand
BRKSPG-2204
2. 5.
Self-care
© 2012 Cisco and/or its affiliates. All rights reserved.
3.
3. 5.
Cisco Public
49
Ethernet Accounting
Wholesale Use Case
RADIUS
EFP:
Encapsulation VLAN 1-300
rewrite ingress tag push dot1q 880
Residential
Account per
VLAN (sub) *
Features
Wholesale EVC
VLAN 100
STB
VLAN 200
Residential
Account per
Wholesale
Pipe (EVC)
VLAN 300
Acct.
Acct.
Acct.
Acct.
Acct.
Gold
Acct.
Silver
STB
Accounting Record
reports to customers
Bronze
Acct.
Account per CoS (or
DSCP) per VLAN
(subscriber flow) *
(*) Per-Flow accounting planned for future phases
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
50
Deployment Use Cases
Residential Access Model Implementation
Trunk UNI, N:1 Service VLAN
Residential Service Connectivity Overview
ƒ Split Horizon Forwarding, locally significant VLAN ids combined into a per
service ‘Bridge Domains’ (N:1)
ƒ Video routed (unnumbered) in Aggregation, other transported to Distribution
Ethernet, WiMAX, PON or DSL Access Node
Routed RG
Aggregation Node
N:1 Service VLAN
Voice Service Router Function
Video Service Router Function
BNG
Internet Service
Router
Trunk or Multi VC UNI
802.1Q
Bridged RG
N:1 Service VLAN
Bridge Domain
Emulated Bridge Domain
Function
Default Gateway for the Routed CPEs or
Appliances Connected in the Bridged RGs
ADSL, ADSL2+, 802.3
Multi VC or Trunk UNI
BRKSPG-2204
802.1Q
Gateways for the Specific
Video/Voice Application Subnets
ƒ PPPoE Server
ƒ DHCP Relay
ƒ IP Unnumbered Interface
ƒ DHCP Relay
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
52
Residential Service Use Case
Trunk UNI, N:1 Data Service VLAN (PW Per AGG Node)
Access Node (AN)
Aggregation
10
10
Distribution
BNG
EoMPLS PW
BD
310
310
310
310
10
10
Access Node assigns a
single VLAN for Data
service (e.g. 10). This vlan
is shared for all
subscribers (N:1)
BRKSPG-2204
DATA EFP
Ingress direction:
ƒ Match traffic from AN based on
single VID (e.g. 10)
ƒ POP the service vlan
ƒ Send traffic to DATA bridge domain
(BD)
Egress direction:
ƒ PUSH service vlan (e.g. 10) on
traffic received from DATA BD
Single EoMPLS PW carries
traffic from all ANs in a
given AGG node
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
DATA EFP
Egress direction:
ƒ PUSH vlan representing AGG node
(e.g. 310) on traffic received from PW
Ingress direction:
ƒ Match traffic from BNG based on
AGG VID (e.g. 310)
ƒ POP AGG vlan
ƒ Send traffic to PW
53
Trunk UNI - Single Attached Access Node
Aggregation Node EVC/SVI Configuration
Distribution
Aggregation
Aggregation EVC
ƒ One common bridge
domain for HSI (VLAN
310)
ƒ Per Access Node SVI for
video (VLAN 311 and
VLAN 312)
ƒ Active/Active example
using VPLS
BRKSPG-2204
interface GigabitEthernet4/0/4
service instance 1 ethernet
encapsulation dot1q 10
rewrite ingress tag pop 1 symmetric
bridge-domain 310 split-horizon
!
service instance 2 ethernet
encapsulation dot1q 11
rewrite ingress tag pop 1 symmetric
bridge-domain 311 split-horizon
!
interface GigabitEthernet4/0/5
service instance 1 ethernet
encapsulation dot1q 10
rewrite ingress tag pop 1 symmetric
bridge-domain 310 split-horizon
!
service instance 2 ethernet
encapsulation dot1q 11
rewrite ingress tag pop 1 symmetric
bridge-domain 312 split-horizon
© 2012 Cisco and/or its affiliates. All rights reserved.
BNG
Aggregation SVI
vlan 310
vlan 311
vlan 312
!
interface Loopback1
ip address 130.173.1.1 255.255.255.255
!
interface Vlan310
xconnect vfi v310
!
interface Vlan311
ip dhcp relay information trusted
ip unnumbered Loopback1
ip helper-address 10.20.61.3
ip pim sparse-mode
!
interface Vlan312
ip dhcp relay information trusted
ip unnumbered Loopback1
ip helper-address 10.20.61.3
ip pim sparse-mode
Cisco Public
54
Trunk UNI - Single Attached Access Node
Distribution Node/VPLS Configuration
Distribution
Aggregation
BNG
Aggregation
vlan 310
!
pseudowire-class F1701
encapsulation mpls
preferred-path interface Tunnel1
!
pseudowire-class F1601
encapsulation mpls
preferred-path interface Tunnel3
!
l2 vfi v310 manual
vpn id 310
neighbor 10.30.30.16 pw-class F1601 no-split-horizon
neighbor 10.30.30.17 pw-class F1701 no-split-horizon
!
interface Loopback0
ip address 10.30.30.172 255.255.255.255
!
interface Vlan310
xconnect vfi v310
Distribution #1
interface Loopback0
ip address 10.30.30.16 255.255.255.255
!
interface GigabitEthernet3/0/3
service instance 310 ethernet
encapsulation dot1q 310
rewrite ingress tag pop 1 symmetric
xconnect 10.30.30.173 310 pw-class F1703
Distribution #2
interface Loopback0
ip address 10.30.30.17 255.255.255.255
!
interface GigabitEthernet3/0/3
service instance 310 ethernet
encapsulation dot1q 310
rewrite ingress tag pop 1 symmetric
xconnect 10.30.30.173 310 pw-class F1703
(*) These configurations reflect only the VPLS CLI required for HSI transport toward the redundant BNGs on the
Aggregation Node; for complete Aggregation Node configuration, please refer to the previous slide
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
55
Residential Service Use Case
Trunk UNI, N:1 Data Service VLAN (PW Per Access Node)
Access Node (AN)
Aggregation
10
10
Distribution
BNG
EoMPLS PW
310
310
410
410
10
10
AN assigns a single VLAN
for Data service (e.g. 10).
This vlan is shared for all
subscribers (N:1)
DATA EFP
Ingress direction:
ƒ Match traffic from AN based on
single VID (e.g. 10)
ƒ POP the service vlan
ƒ Send traffic to PW
Single EoMPLS PW carries
traffic from all subscribers
in a given AN
© 2012 Cisco and/or its affiliates. All rights reserved.
Egress direction:
ƒ PUSH vlan representing AN (e.g. 310,
410) on traffic received from PW
Ingress direction:
ƒ Match traffic from BNG based on AN
VID (e.g. 310, 410)
ƒ POP AN vlan
ƒ Send traffic to PW
Egress direction:
ƒ PUSH service vlan (e.g. 10) on
traffic received from PW
BRKSPG-2204
DATA EFP
Cisco Public
56
Deployment Use Cases
Business Services Implementation
Carrier Ethernet Business Services
MEF Service Visualization
E-LINE: Ethernet Private Line (EPL)
E-LAN: Ethernet Private LAN (EP-LAN)
E-LINE: Ethernet Virtual Private Line (EVPL)
E-LAN: Ethernet Virtual Private LAN (EVP-LAN)
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
58
Deployment Use Cases
Business use cases presented in the section:
Service Type
Service
E-LINE
Ethernet Virtual Private Line
E-LINE
Ethernet Private Line
E-LAN
Ethernet Virtual Private LAN
E-LAN
Ethernet Private LAN
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
59
Deployment Use Cases
Business Services Implementation
Point-To-Point (EVPL and EPL)
Ethernet Virtual Private Line (EVPL)
Logical View
C-VLAN popped on
ingress
New C-VLAN pushed on
egress
Port-Level C-VLAN
significance
Aggregation
Local
connect
Local Connect for
services on same
node
Distribution
No MAC learning
No global VLAN used
Core
VPWS EoMPLS for
services to remote
nodes
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
61
Ethernet Virtual Private Line (EVPL)
Sample Configurations
Aggregation
1 GE
10GE
EVPL Service Between Aggregations *
interface GigabitEthernet3/0/15
no cdp enable
service instance 100 ethernet
encapsulation dot1q 2593
rewrite ingress tag pop 1 symmetric
xconnect 10.40.40.26 11111 pw-class AS40
pseudowire-class AS40
encapsulation mpls
preferred-path interface Tunnel1040
Core
Distribution
10 GE
EVPL Service on Same Aggregation
interface GigabitEthernet3/0/15
mls qos trust cos
no cdp enable
service instance 100 ethernet
encapsulation dot1q 2595
rewrite ingress tag pop 1 symmetric
interface GigabitEthernet3/0/16
mls qos trust cos
no cdp enable
service instance 200 ethernet
encapsulation dot1q 2595
rewrite ingress tag pop 1 symmetric
connect EVPL_local GigabitEthernet3/0/15 100
GigabitEthernet3/0/16 200
(*) Configuration sample for remote EVPL reflects only one end of the connection
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
62
Ethernet Private Line (EPL)
Logical View
Catch-all encapsulation
default used for port-based
service
One service per
Port
Aggregation
Local
connect
Local Connect for
services on same
node
Distribution
No MAC learning
No global VLAN used
Core
VPWS EoMPLS for
services to remote
nodes
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
63
Ethernet Private Line (EPL)
Sample Configurations
Aggregation
1 GE
Core
Distribution
10GE
10 GE
EPL Service Between Aggregations *
EPL Service on Same Aggregation
interface GigabitEthernet3/0/4
description Sample EPL
mtu 9216
no cdp enable
service instance 30 ethernet
encapsulation default
xconnect 10.40.40.26 1111 pw-class AS40
interface GigabitEthernet3/0/11
mtu 9216
no cdp enable
service instance 100 ethernet
encapsulation default
pseudowire-class AS40
encapsulation mpls
preferred-path interface Tunnel1040
interface GigabitEthernet3/0/12
mtu 9216
no cdp enable
service instance 200 ethernet
encapsulation default
connect EPL-sample GigabitEthernet3/0/11 100
GigabitEthernet3/0/12 200
(*) Configuration sample for remote EPL reflects only one end of the connection
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
64
Deployment Use Cases
Business Services Implementation
Multipoint (EVP-LAN and EP-LAN)
Ethernet Virtual Private LAN (EVP-LAN)
Logical View
Spoke PW (split-horizon OFF)
between Aggregation and
Distribution Nodes
EFPs tied to a common BD
(opt.) C-VLAN POP at ingress
Aggregation
Distribution Node implements
full-mesh VPLS (splithorizon ON) towards Core
Distribution
VFI
Bridge Domain
Bridge Domain
BD tied to an SVI with
Xconnect to distribution
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
BD = Bridge Domain
VFI = Virtual Forwarding Instance
Cisco Public
66
Ethernet Virtual Private LAN (EVP-LAN)
Sample ConfigurationsAggregation
1 GE
Aggregation Node
interface GigabitEthernet3/0/15
mtu 9216
service instance 100 ethernet
encapsulation dot1q 2504
rewrite ingress tag pop 1 symmetric
bridge-domain 2511
interface GigabitEthernet3/0/16
mtu 9216
service instance 200 ethernet
encapsulation dot1q 2514
rewrite ingress tag pop 1 symmetric
bridge-domain 2511
interface Vlan2511
mtu 9216
xconnect 10.10.10.25 1111 pw-class F2501
pseudowire-class F2501
encapsulation mpls
preferred-path interface Tunnel11
Core
Distribution
10GE
10 GE
Distribution Node *
l2 vfi EVPLAN-sample manual
vpn id 1111
!Neighbor aggregation node
neighbor 10.10.10.26 pw-class F2601 no-splithorizon
!Neighbor Distribution node
neighbor 10.10.10.24 pw-class F2401
!Remote Distribution node
neighbor 10.40.40.63 encapsulation mpls
interface Vlan2511
mtu 9216
xconnect vfi EVPLAN-sample
pseudowire-class F2401
encapsulation mpls
preferred-path interface Tunnel11
pseudowire-class F2601
encapsulation mpls
preferred-path interface Tunnel13
(*) Distribution
SVI will stay up even
if not associated to a EFP
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
67
Ethernet Private LAN (EP-LAN)
Logical View
Single EFP on Ingress Interfaces with
“encapsulation default” to match all untagged
and tagged traffic
Spoke PW (split-horizon OFF)
between Aggregation and
Distribution Nodes
Aggregation
Distribution Node implements
full-mesh VPLS (splithorizon ON) towards Core
Distribution
VFI
Bridge Domain
Bridge Domain
EFPs tied to a common BD
“L2-protocol forward” enabled for L2PDU
forwarding in the BD
(opt.) S-VLAN PUSH at ingress
BRKSPG-2204
BD tied to an SVI with
Xconnect to distribution
© 2012 Cisco and/or its affiliates. All rights reserved.
BD = Bridge Domain
VFI = Virtual Forwarding Instance
Cisco Public
68
Ethernet Private LAN (EP-LAN)
Sample Configurations
Aggregation
1 GE
Core
Distribution
10GE
10 GE
Distribution Node *
Aggregation Node
interface GigabitEthernet4/0/2
mtu 9216
no cdp enable
service instance 200 ethernet
encapsulation default
l2protocol forward
bridge-domain 2711
l2 vfi EPLAN-sample manual
vpn id 1111
!Neighbor aggregation node
neighbor 10.10.10.26 pw-class F2601 no-splithorizon
!Neighbor Distribution node
neighbor 10.10.10.24 pw-class F2401
!Remote Distribution node
neighbor 10.40.40.63 encapsulation mpls
interface Vlan2711
mtu 9216
xconnect 10.10.10.25 1111 pw-class F2501
interface Vlan2711
mtu 9216
xconnect vfi EPLAN-sample
pseudowire-class F2501
encapsulation mpls
preferred-path interface Tunnel11
pseudowire-class F2401
encapsulation mpls
preferred-path interface Tunnel11
pseudowire-class F2601
encapsulation mpls
preferred-path interface Tunnel13
(*) Distribution SVI will stay up even if not associated to a EFP
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
69
Deployment Use Cases
Data Center Interconnect
Data Center Interconnect with MC-LAG + vPC and VPLS
DCm
DCn
VPLS full mesh or EoMPLS if two DC sites
VFI
VFI
VFI
VFI
ICCP
Active
link
vPC
• Simplified dual-homing with
MC-LAG + vPC (no STP between
site and PE)
• ~ second convergence time
VFI
VFI
ICCP
Standby
link
vPC
DC aggregation
Si
VSS
Si
DC Access
Note, PW between two PEs in the same DC site may or may not be required, depends
on the intra-DC design
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
Data Center Interconnect with MC-LAG + vPC and VPLS
Logical View
EFP tied to a BD
(opt.) C-VLAN Translation or POP at ingress
WAN Edge 1
Red vPC (MC-LAG)
WAN Edge 1 is primary
BD
BD tied to Active VFI with
neighbors to remote DC site
VFI
Per-VLAN load balancing:
For better load balancing
over two PE WAN links,
configure 2 MC-LAG
bundles and evenly
distribute the VLANs
across two bundles (static
configuration).
VFI
BD
Blue vPC (MC-LAG)
WAN Edge 2 is primary
BD
VFI
VFI
BD
BRKSPG-2204
WAN Edge 2
© 2012 Cisco and/or its affiliates. All rights reserved.
BD tied to Standby VFI with
neighbors to remote DC site
BD = Bridge Domain
VFI = Virtual Forwarding Instance
Cisco Public
72
Data Center Interconnect with VPLS
Sample Configuration
WAN Edge Node
DC1
DC 1 WAN Edge Node
DC2
WAN Edge Node
interface bundle-ethernet1.1 l2transport Å VLAN range 1
encapsulation dot1q 1-250 Å VLAN Bundling
interface bundle-ethernet2.2 l2transport Å VLAN range 2
encapsulation dot1q 251-500 Å VLAN Bundling
L2vpn
bridge group DCI
bridge-domain DCI1
interface bundle-ethernet1.1
vfi DCI1
neighbor 2.2.2.2 pw-id 1
neighbor 3.3.3.3 pw-id 1
ƒ One VFI to aggregate multiple VLANs.
ƒ Enhanced VPLS VFI scale.
ƒ Reduced Configuration.
Note: Only EVC specific configuration shown.
bridge-domain DCI2
interface bundle-ethernet2.2
vfi DCI2
neighbor 2.2.2.2 pw-id 2
neighbor 3.3.3.3 pw-id 2
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
73
Platform Support
Cisco EVC Framework
Platform Support
Aggregation
Access
Cisco 7600
Cisco ME3600X
Cisco ME3800X
ASR 901
ASR 903
BRKSPG-2204
CPT 600
CPT 50
Cisco ONS 15454
Cisco ASR 1000
SIP-400
ES-20 and
ES+ linecards
Cisco ASR 9000
Nexus 7000
Catalyst 6500
Supervisor 2T
ML-MR linecard
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
75
Summary
Cisco EVC Framework
ƒ Introduction
ƒ Cisco EVC Fundamentals
ƒ Operation and Packet Flow
ƒ Dynamic Ethernet Service Activation (DESA)
ƒ Deployment Use Cases—Residential / Business / DCI Services
ƒ Platform Support
ƒ Summary
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
77
Cisco EVC Framework
Key Takeaways
ƒ Next-generation cross-platform Carrier Ethernet Software
Infrastructure
ƒ Addresses Flexible Ethernet Edge requirements
ƒ Flexible Service Mapping
ƒ Advanced Frame Manipulation
ƒ Service Multiplexing
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
78
For More Information
ƒ Cisco 7600 – Ethernet Services + (ES+) Configuration Guide—Layer 2
Features
ƒ Cisco 7600 – Ethernet Services (ES) Configuration Guide—Layer 2
Features
ƒ Cisco 7600 – SPA Interface Processor-400 (SIP-400) Configuration
Guide
ƒ Cisco ASR 9000 Series Aggregation Services Router L2VPN and
Ethernet Services Configuration Guide
ƒ Cisco ME 3600X / ME 3800X – Configuring Ethernet Virtual
Connections (EVCs)
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
79
For More Information (Cont.)
ƒ Cisco ASR 1000 – Carrier Ethernet Configuration Guide, Cisco IOS
XE Release 3S
ƒ Cisco ONS 15454 – Configuring Ethernet Virtual Circuits and QoS on
the ML-MR-10 Card
ƒ Dynamic Ethernet Service Activation Configuration Guide
ƒ Cisco Carrier Packet Transport
ƒ Cisco ASR 903 Aggregation Services Router Configuration Guide
ƒ Cisco ASR 901 Aggregation Services Router Configuration Guide
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
80
Acronyms
Acronym
Acronym
ACL
Access Control List
IPoETV
TV on IP over Ethernet
AN
Access Node
IPTV
Television over IP
BD
Bridge Domain
MEF
Metro Ethernet Forum
BRAS
Broadband Access Server
MEN
Metro Ethernet Network
CE
Customer Equipment (Edge)
MPLS
Multi-protocol Label Switching
C-VLAN / CEVLAN
Customer VLAN
OAM
Operations, Administration and Maintenance
CoS
Class of Service
PBB
Provider Backbone Bridging
E-LAN
Ethernet LAN service (multipoint)
PE
Provider Edge device
E-Line
Ethernet Line service (point-to-point)
PW
Pseudowire
E-Tree
Ethernet Tree service (rooted multipoint)
Q-in-Q
VLAN tunneling using two 802.1Q tags
EFP
Ethernet Flow Point
QoS
Quality of Service
EoMPLS
Ethernet over MPLS
SVI
Switch Virtual Interface (interface vlan)
EPL
Ethernet Private Line
S-VLAN
Service VLAN (Provider VLAN)
EVC
Ethernet Virtual Connection
UNI
User to Network Interface
EVPL
Ethernet Virtual Private Line
VLAN
Virtual LAN
VoD
Video on Demand
IEEE
Institute of Electrical and Electronics Engineers
VoIP
Voice over IP
IETF
Internet Engineering Task Force
VPLS
Virtual Private LAN Service
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
81
Complete Your Online
Session Evaluation
ƒ Give us your feedback and you
could win fabulous prizes.
Winners announced daily.
ƒ Receive 20 Passport points for each
session evaluation you complete.
ƒ Complete your session evaluation
online now (open a browser through
our wireless network to access our Don’t forget to activate your
Cisco Live Virtual account for access to
portal) or visit one of the Internet
all session material, communities, and
stations throughout the Convention on-demand and live activities throughout
Center.
the year. Activate your account at the
Cisco booth in the World of Solutions or visit
www.ciscolive.com.
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
82
Final Thoughts
ƒ Get hands-on experience with the Walk-in Labs located in World of
Solutions, booth 1042
ƒ Come see demos of many key solutions and products in the main Cisco
booth 2924
ƒ Visit www.ciscoLive365.com after the event for updated PDFs, ondemand session videos, networking, and more!
ƒ Follow Cisco Live! using social media:
ԟ Facebook: https://www.facebook.com/ciscoliveus
ԟ Twitter: https://twitter.com/#!/CiscoLive
ԟ LinkedIn Group: http://linkd.in/CiscoLI
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public
83
BRKSPG-2204
© 2012 Cisco and/or its affiliates. All rights reserved.
Cisco Public