b Scg for Asr901s

8/21/2019 b Scg for Asr901s

1/971

Cisco ASR 901S Series Aggregation Services Router SoftwareConfiguration GuideFirst Published: December 18, 2013

Last Modified: March 31, 2014

Americas HeadquartersCisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: OL-30498-03


2/971

2013-2014 Cisco Systems, Inc. All rights reserved.


3/971

C O N T E N T S

P r e f a c e About This Guide xxxix

About This Guide xxxix

Document Revision History xxxix

Objectives xliiAudience xlii

Organization xlii

Conventions xlv

Related Documentation xlvi

Obtaining Documentation and Submitting a Service Request xlvii

C H A P T E R 1 Cisco ASR 901S Router Overview 1

Introduction 1

Features 2

Performance Features 2

Management Options 3

Manageability Features 3

Security Features 4

Quality of Service and Class of Service Features 4

Layer 3 Features 5

Layer 3 VPN Services 5

Monitoring Features 5

C H A P T E R 2 Licensing 7

Finding Feature Information 7

Feature Overview 8

Licenses Supported on Cisco ASR 901S Router 8

License Types 9

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 iii


4/971

Image Level License 9

Features Supported 9

Feature Based License 10

Port Based/Mode License10

1588BC License 11

Port or Interface Behavior 11

Port Based License 11

Example: When Port Based License is not Installed 11

Example: When Port Based License is Installed 12

10gigUpgrade License 13

Example: When 10gigUpgrade License is not Installed 13

Example: When 10gigUpgrade License is Installed 13

Flexi License 14

Example: When Flexi License is not Installed 14

Example: When Flexi License is Installed 15

1588BC License 15

Example: When 1588BC License is not Installed 15

Example: When 1588BC License is Installed 15

Removing the License 16

Generating the License 17

Installing the License 17Changing the License 19

Verifying the License 19

Where to Go Next 19

Additional References 19

Feature Information for Licensing 21

C H A P T E R 3 First-Time Configuration 23

Setup Mode 23

Before Starting Your Router 23

Using Setup Mode 24

Configuring Global Parameters 24

Completing the Configuration 26

Verifying the Cisco IOS Software Version 27

Configuring the Hostname and Password 27

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guideiv OL-30498-03

Contents


5/971

Verifying the Hostname and Password 29

C H A P T E R 4 Managing and Monitoring Network Management Features 31

Finding Feature Information 32Network Management Features for the Cisco ASR 901S 32

Cisco Active Network Abstraction (ANA) 32

SNMP MIB Support 32

Cisco Networking Services (CNS) 32

How to Configure Network Management Features on Cisco ASR 901S 33

Configuring SNMP Support 33

Configuring Remote Network Management 37

Enabling Cisco Networking Services (CNS) and Zero-Touch Deployment 39

Zero-Touch Deployment 39

Image Download 41

Configuring a DHCP Server 42

Configuring a TFTP Server 44

Creating a Bootstrap Configuration 44

Enabling a TFTP Server on the Edge Router 44

Configuring the Cisco Configuration Engine 44

Configuration Examples 45

Example: Configuring SNMP Support 45

Example: Configuring Remote Network Management 45

Example: Configuring a DHCP Server 45

Example: Zero-touch Deployment 45

Configuring LEDs 46

Disabling and Enabling LEDs 47

Configuring Alarm Port Monitoring 48

Disabling and Enabling Alarms 49

Where to Go Next 49


Feature Information for Monitoring and Managing the Cisco ASR 901S Router 51

C H A P T E R 5 Using the Command-Line Interface 53

Understanding Command Modes 53

Understanding the Help System 55

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 v

Contents


6/971

Understanding Abbreviated Commands 56

Understanding no and default Forms of Commands 56

Understanding CLI Error Messages 56

Using Command History57

Changing the Command History Buffer Size 57

Recalling Commands 58

Disabling the Command History Feature 58

Using Editing Features 58

Enabling and Disabling Editing Features 58

Editing Commands through Keystrokes 59

Editing Command Lines that Wrap 61

Searching and Filtering Output of show and more Commands 61

Accessing the CLI 62

Accessing the CLI through a Console Connection or through Telnet 62

Saving Configuration Changes 62

C H A P T E R 6 Software Upgrade 63

Selecting a Cisco IOS Image 63

Upgrading the Cisco IOS image 63

Auto Upgrading the MCU 67

Manually Upgrading the ROMMON 67

Auto Upgrade of ROMMON 68

C H A P T E R 7 Configuring Gigabit Ethernet Interfaces 71

Configuring the Interface 71

Setting the Speed and Duplex Mode 72

Enabling the Interface 73

Modifying MTU Size on the Interface 74

Verifying the MTU Size 75

MAC Flap Control 76

Configuring MAC FLap Control 76

Configuring a Combo Port 77

Verifying the Media Type 79

C H A P T E R 8 Configuring Ethernet Virtual Connections 81

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidevi OL-30498-03

Contents


7/971


Supported EVC Features 82

Understanding EVC Features 82

Ethernet Virtual Connections83

Service Instances and EFPs 83

Encapsulation 84

VLAN Counters 85

Bridge Domains 85

DHCP Client on Switch Virtual Interface 86

Split-Horizon 86

Rewrite Operations 86

DHCP Snooping with Option 82 on EVC 87

Configuring EFPs 88

Default EVC Configuration 88

Configuring VLAN Counters on SVI 88

Verifying VLAN Counters Configuration on SVI 89

Configuration Guidelines 89

Creating Service Instances 90

Configuring DHCP Snooping with Option-82 on EVC 92

Configuring Per-Port Rate Limit 93

Verifying DHCP Snooping with Option 82 on EVC 94Example: Configuring DHCP Snooping with Option 82 on EVC 95

Configuration Examples of Supported Features 95

Example: Configuring a Service Instance 96

Example: Encapsulation Using a VLAN Range 96

Example: Configuring VLAN Counters on SVI 96

Example: Two Service Instances Joining the Same Bridge Domain 96

Example: Bridge Domains and VLAN Encapsulation 96

Example: Rewrite 97

Example: Split Horizon 97

How to Configure EVC Default Encapsulation 97

Configuring EVC Default Encapsulation with Bridge-Domain 97

Configuring EVC Default Encapsulation with Xconnect 99

Verifying EVC Default Encapsulation with Bridge-Domain 100

Verifying EVC Default Encapsulation with Xconnect 100

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 vii

Contents


8/971

Configuration Examples for EVC Default Encapsulation 101

Example: Configuring EVC Default Encapsulation with Bridge-Domain 101

Example: Configuring EVC Default Encapsulation with Xconnect 101

Configuring Other Features on EFPs101

EFPs and EtherChannels 101

MAC Address Forwarding, Learning and Aging on EFPs 101

Disabling MAC Address Learning on an Interface or Bridge Domain 102

Example: Configuring EFP and EtherChannels 103

Verification 104

Configuring IEEE 802.1Q Tunneling using EFPs 105

Restrictions 105

802.1Q Tunneling (QinQ) 105

Example: Configuring IEEE 802.1Q Tunneling Using EFPs 107

Routed QinQ 108

Restrictions 108

Configuration Examples for Routed QinQ 108

Example: User to Network Interface 108

Example: Network to Network Interface/Core Router 108

Bridge Domain Routing 109

Restrictions 109

Example: Configuring Bridge-Domain Routing 109How to Configure DHCP Client on SVI 109

Configuring DHCP Client on SVI 110

Verifying DHCP Client on SVI 111

Example: Configuring DHCP Client on SVI 111

EFPs and MAC Addresses 111

EFPs and MSTP 112

Monitoring EVC 112

Configuring Switchport to EVC Mapping 114

Example: Configuring Switchport to EVC Mapping 114

Troubleshooting DHCP Snooping with Option-82 on EVC 115


Feature Information for Configuring Ethernet Virtual Connections 117

C H A P T E R 9 Configuring EtherChannels 119

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guideviii OL-30498-03

Contents


9/971

Understanding How EtherChannels Work 119

EtherChannel Feature Overview 119

Understanding How EtherChannels Are Configured 120

EtherChannel Configuration Overview120

Understanding Manual EtherChannel Configuration 120

Understanding IEEE 802.3ad LACP EtherChannel Configuration 120

Understanding Port-Channel Interfaces 122

Understanding Load Balancing 122

EtherChannel Configuration Guidelines and Restrictions 122

Configuring Etherchannels 123

Configuring Channel Groups 123

Configuring the LACP System Priority and System ID 124

Configuring the LACP Transmit Rate 125

Verifying the LACP Transmit Rate 127

Configuring EtherChannel Load Balancing 127

Modifying MTU Size on Port-Channel 128

Verifying the MTU Size on Port-Channel 129

EVC On Port-Channel 129

Restrictions for EVC EtherChannel 130

Configuring EVC on Port-Channel 130

Verifying the Configuration 131Troubleshooting Scenarios for EVC on a Port-Channel 132

C H A P T E R 1 0 Configuring Ethernet OAM 133

Understanding Ethernet CFM 134

IP SLA Support for CFM 134

Configuring Ethernet CFM 134

Default Ethernet CFM Configuration 135

Ethernet CFM Configuration Restrictions and Guidelines 135

Configuring the CFM Domain 135

Configuring Multi-UNI CFM MEPs in the Same VPN 139

Configuration Examples for Multi-UNI CFM MEPs 143

Verification 144

Configuring Ethernet CFM Crosscheck 145

Configuring Static Remote MEP 146

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 ix

Contents


10/971

Configuring a Port MEP 148

CFM with Hardware Offloading for G.8032 150

Restrictions 150

Configuring CFM with Hardware Offloading for G.8032151

Verifying the CFM Configuration with Hardware Offloading for G.8032 152

Configuration Examples for CFM with Hardware Offloading for G.8032 153

Configuring SNMP Traps 154

Configuring IP SLA CFM Operation 155

Manually Configuring an IP SLA CFM Probe or Jitter Operation 155

Configuring an IP SLA Operation with Endpoint Discovery 158

Configuring CFM over EFP with Cross Connect 160

Configuring CFM over EFP Interface with Cross Connect 161

Examples 163

Configuring CFM over EFP Interface with Cross ConnectPort Channel-Based Cross

Connect Tunnel 163

Examples 163

Verification 164

Configuring CFM with EVC Default Encapsulation 165

Verifying CFM with EVC Default Encapsulation 167

Example: Configuring CFM with EVC Default Encapsulation 167

Configuring Y.1731 Fault Management 167

Default Y.1731 Configuration 167

Configuring ETH-AIS 168

Configuring ETH-LCK 170

Managing and Displaying Ethernet CFM Information 173

Understanding the Ethernet OAM Protocol 175

OAM Features 176

Discovery 176

Link Monitoring 176

Remote Failure Indication 177

Remote Loopback 177

Cisco Vendor-Specific Extensions 177

OAM Messages 177

Setting Up and Configuring Ethernet OAM 178

Default Ethernet OAM Configuration 178

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidex OL-30498-03

Contents


11/971

Restrictions and Guidelines 178

Enabling Ethernet OAM on an Interface 179

Configuration Example 180

Enabling Ethernet OAM Remote Loopback180

Configuring Ethernet OAM Link Monitoring 181

Configuring Ethernet OAM Remote Failure Indications 185

Configuring Ethernet OAM Templates 186


Displaying Ethernet OAM Protocol Information 189

Verifying Ethernet OAM Configuration 189

Understanding E-LMI 192

Restrictions 192

Configuring E-LMI 192

Default E-LMI Configuration 193

Enabling E-LMI 193

Displaying E-LMI Information 194

Understanding Ethernet Loopback 195

Configuring Ethernet Loopback 195

Restrictions 195

Enabling Ethernet Loopback 196

Configuration Example 198Configuring Y.1564 to Generate Ethernet Traffic 199

Configuring IP SLA for Traffic Generation 202


Example: Two-Way Measurement 205

Example: Traffic Generation Mode 206

C H A P T E R 1 1 ITU-T Y.1731 Performance Monitoring 207


Prerequisites for ITU-T Y.1731 Performance Monitoring 207

Restrictions for ITU-T Y.1731 Performance Monitoring 208

Information About ITU-T Y.1731 Performance Monitoring 208

Frame Delay and Frame-Delay Variation 209

Frame Loss Ratio 210

On-Demand and Concurrent Operations 210

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xi

Contents


12/971

Supported Interfaces 211

Benefits of ITU-T Y.1731 Performance Monitoring 211

How to Configure ITU-T Y.1731 Performance Monitoring 212

Configuring Two-Way Delay Measurement212

What to Do Next 215

Configuring Single-Ended Synthetic Loss Measurement 215

What to Do Next 220

Scheduling IP SLAs Operations 220

Verifying the Frame Delay and Synthetic Loss Measurement Configurations 221

Example: Verifying Sender MEP for a Two-Way Delay Measurement Operation 221

Example: Verifying Receiver MEP for a Two-Way Delay Measurement Operation 222

Example: Verifying Sender MEP for a Synthetic Loss Measurement Operation 222

Example: Verifying Ethernet CFM Performance Monitoring 223

Example: Verifying History for IP SLAs Operations 224

How to Configure IP SLAs Y.1731 On-Demand and Concurrent Operations 224

Configuring Direct On-Demand Operation on a Sender MEP 224

Configuring Referenced On-Demand Operation on a Sender MEP 225

Configuring IP SLAs Y.1731 Concurrent Operation on a Sender MEP 226

Configuration Examples for IP SLAs Y.1731 On-Demand Operations 226

Example: On-Demand Operation in Direct Mode 226

Example: On-Demand Operation in Referenced Mode 227Additional References 227

Feature Information for ITU-T Y.1731 Performance Monitoring 229

C H A P T E R 1 2 Configuring Resilient Ethernet Protocol 231

Understanding Resilient Ethernet Protocol 231

Overview 231

Restrictions 233

Link Integrity 233

Fast Convergence 234

VLAN Load Balancing (VLB) 234

Spanning Tree Interaction 236

REP Ports 236

Configuring Resilient Ethernet Protocol (REP) 236

Default REP Configuration 237

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexii OL-30498-03

Contents


13/971

REP Configuration Guidelines 237

Configuring the REP Administrative VLAN 238

Configuring REP Interfaces 240

Configuring REP as Dual Edge No-Neighbor Port244

Cisco Cisco ASR 901S Dual Rep Edge No-Neighbor Topology Example 246

Setting up Manual Preemption for VLAN Load Balancing 248

Configuring SNMP Traps for REP 249

Monitoring REP 250

Configuration Examples for REP 251

Configuring the REP Administrative VLAN: Example 251

Configuring a REP Interface: Example 251

Setting up the Preemption for VLAN Load Balancing: Example 252

Configuring SNMP Traps for REP: Example 253

Monitoring the REP Configuration: Example 253

Cisco ASR 901 Topology Example 253

C H A P T E R 1 3 Configuring MST on EVC Bridge Domain 257

Overview of MST and STP 257

Overview of MST on EVC Bridge Domain 258

Restrictions and Guidelines 258

Configuring MST on EVC Bridge Domain 260

Configuration Example for MST on EVC Bridge Domain 262

Verification 262

Troubleshooting Tips 264

C H A P T E R 1 4 Multiprotocol Label Switching 267

Configuring Multiprotocol Label Switching 267

C H A P T E R 1 5 Configuring EoMPLS 269

Understanding EoMPLS 269

Restrictions for EoMPLS 270

Configuring EoMPLS 271

EoMPLS Configuration Example 272

Configuring EVC Default Encapsulation with xconnect 273

Verifying EVC Default Encapsulation with xconnect 275

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xiii

Contents


14/971

Configuration Example for EVC Default Encapsulation with Xconnect 275

Configuring Pseudowire Redundancy 275

Configuration Commands 276

Port-Based EoMPLS277

Feature Information for Configuring EoMPLS 278

C H A P T E R 1 6 Configuring MPLS VPNs 279

Understanding MPLS VPNs 279

Configuring MPLS VPNs 280

Configuration Examples for MPLS VPN 280

C H A P T E R 1 7 Configuring MPLS OAM 287

Understanding MPLS OAM 287

LSP Ping 287

LSP Traceroute 288

LSP Ping over Pseudowire 288

Configuring MPLS OAM 288

Using LSP Ping for LDP IPv4 FEC 289

Using LSP Traceroute for LDP IPv4 FEC 289

Using LSP Ping for Pseudowire 289

Using LSP Traceroute over Pseudowire 290

Displaying AToM VCCV capabilities 290

290

C H A P T E R 1 8 Configuring Routing Protocols 291

Configuring Routing Protocols 291

Changing Default Hashing Algorithm for ECMP 292

C H A P T E R 1 9 Configuring Bidirectional Forwarding Detection 293

Understanding BFD 293

Configuring BFD 293

BFD Configuration Guidelines and Restrictions 293

Configuring BFD for OSPF 294

Configuring BFD for OSPF on One of More Interfaces 294

Configuring BFD for OSPF on All Interfaces 295

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexiv OL-30498-03

Contents


15/971

Configuring BFD for BGP 296

Configuring BFD for IS-IS 297

Configuring BFD for IS-IS on a Single Interface 297

Configuring BFD for IS-IS for All Interfaces298

Configuring BFD for Static Routes 300

Configuration Examples for BFD 301

BFD with OSPF on All Interfaces 301

BFD with OSPF on Individual Interfaces 301

BFD with BGP 301

BFD with IS-IS on All Interfaces 302

BFD with IS-IS on Individual Interfaces 302

BFD with Static Routes 302

C H A P T E R 2 0 Configuring Pseudowire 305


Understanding Pseudowires 306

Transportation of Service Using Ethernet over MPLS 306

Limitations 306

Hot Standby Pseudowire Support for ATM/IMA 306

Configuring Pseudowire 307

Configuring Pseudowire Classes 307

Configuring CEM Classes 308

Configuring a Backup Peer 311

Configuring Transportation of Service Using Ethernet over MPLS 312

Configuring L2VPN Pseudowire Redundancy 314

Example: Pseudowire Redundancy 317

Configuring Hot Standby Pseudowire Support for ATM/IMA 317

Configuring ATM/IMA Pseudowire Redundancy in PVC Mode 317

Configuring ATM/IMA Pseudowire Redundancy in PVP Mode 318

Configuring ATM/IMA Pseudowire Redundancy in Port Mode 320

Verifying Hot Standby Pseudowire Support for ATM/IMA 321

Configuration Examples of Hot Standby Pseudowire Support for ATM/IMA 322

Example: Configuring ATM/IMA Pseudowire Redundancy in PVC Mode 322

Example: Configuring ATM/IMA Pseudowire Redundancy in PVP Mode 323

Example: Configuring ATM/IMA Pseudowire Redundancy in Port Mode 323

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xv

Contents


16/971

Configuration Examples for Pseudowire 323

Example: Ethernet over MPLS 323


Feature Information for Configuring Pseudowire325

C H A P T E R 2 1 Configuring Clocking 327

Configuring Clocking 327

Restrictions 327

Configuring Network Clock for Cisco ASR 901 Router 328

Configuring Network Clock in Global Configuration Mode 328

Configuring Network Clock in Interface Configuration Mode 331

Understanding SSM and ESMC 332

Synchronization Status Message 332

Ethernet Synchronization Messaging Channel 332

Clock Selection Algorithm 332

ESMC behavior for Port Channels 333

ESMC behavior for STP Blocked Ports 333

Configuring ESMC in Global Configuration Mode 334

Configuring ESMC in Interface Configuration Mode 335

Verifying ESMC Configuration 336

Managing Synchronization 337

Synchronization Example 337

Configuring Synchronous Ethernet for Copper Ports 338

Verifying the Synchronous Ethernet configuration 338


Troubleshooting ESMC Configuration 342

Configuring PTP for the Cisco ASR 901 Router 342

Restrictions 343

Precision Time Protocol 343

IEEEV2 Best Master Clock Algorithm Overview 344

Information About Best Master Clock Algorithm 344

Setting System Time to Current Time 345

Configuring PTP Ordinary Clock 346

Configuring Master Ordinary Clock 346

Configuring Slave Ordinary Clock 348

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexvi OL-30498-03

Contents


17/971

Configuring PTP in Unicast Mode 351

Configuring PTP in Unicast Negotiation Mode 352

Configuring PTP in Multicast Mode 353

PTP Boundary Clock355

Configuring PTP Boundary Clock 355

Verifying PTP modes 359

Verifying PTP Configuration on the 1588V2 Slave in Unicast Mode 361

Verifying PTP Configuration on the 1588V2 Slave in Multicast Mode 363

Verifying PTP Configuration on the 1588V2 Master in Unicast Mode 365

Verifying PTP Configuration on the 1588V2 Master in Multicast Mode 366

PTP Hybrid Clock 369

Configuring a Hybrid Ordinary Clock 369

Configuring a Hybrid Boundary Clock 372

Verifying Hybrid modes 375

Configuration Examples for BMCA 376

Example: Configuring a Slave Ordinary Clock in BMCA 376

Example: Configuring a Boundary Clock in BMCA 376

SSM and PTP Interaction 376

ClockClass Mapping 377

Telecom Profiles 377

PTP Redundancy 377Configuring Telecom Profile in Slave Ordinary Clock 377

Configuring Telecom Profile in Master Ordinary Clock 380

Verifying Telecom profile 381

Setting the TimeProperties 382

ASR901 Negotiation Mechanism 383

Static Unicast Mode 383

VRF-Aware Precision Time Protocol 383

Configuring VRF-Aware Precision Time Protocol 383

Examples 386

Configuring ToD on 1588V2 Slave 386


C H A P T E R 2 2 Cisco IOS IP SLA 389

Configuring IPSLA Path Discovery 389

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xvii

Contents


18/971

Example for IPSLA Path Discovery 391

Two-Way Active Measurement Protocol 393

Configuring TWAMP 394

Configuring the TWAMP Server394

Configuring the TWAMP Reflector 396

Configuring the TWAMP Reflector 396

Configuration Examples for TWAMP 397

Example: Configuring the Router as an IP SLA TWAMP server 397

Example: Configuring the Router as an IP SLA TWAMP Reflector 397

C H A P T E R 2 3 Configuring QoS 399


Understanding QoS 400

Modular QoS CLI 401

Input and Output Policies 402

Input Policy Maps 403

Output Policy Maps 403

Access Control Lists 404

Restrictions 404

Classification 404

Class Maps 405

The match Command 406

Classification Based on Layer 2 CoS 406

Classification Based on IP Precedence 406

Classification Based on IP DSCP 407

Classification Comparisons 408

Classification Based on QoS Groups 410

Classification Based on VLAN IDs 411

Classification Based on ACL 412

Table Maps 412

Policing 413

Individual Policing 413


Unconditional Priority Policing 415

Egress Policing 416

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexviii OL-30498-03

Contents


19/971

Marking 416

Congestion Management and Scheduling 417

Traffic Shaping 418

Class-Based Shaping418

Port Shaping 419

Parent-Child Hierarchy 419

Class-Based Weighted Fair Queuing 420

Priority Queuing 421

Ingress and Egress QoS Functions 423

Configuring QoS 423

QoS Limitations 424

General QoS Limitations 424

Statistics Limitations 425

Propagation Limitations 425

Classification Limitations 425

Marking Limitations 427

Congestion Management Limitations 428

ACL-based QoS Restrictions 430

Improving Feature Scalability 430

TCAM with QoS 431

QoS for MPLS over MLPPP and IP over MLPPP 431QoS for CPU-Generated Traffic 431

QoS Configuration Guidelines 432

Sample QoS Configuration 433

Configuring Classification 434

Creating a Class Map for Classifying Network Traffic 434

Creating a Policy Map for Applying a QoS Feature to Network Traffic 435

Attaching the Policy Map to an Interface 437

Attaching a Policy Map to a Cross-Connect EVC 438

Configuring Marking 440

Creating a Class Map for Marking Network Traffic 440

Creating a Policy Map for Applying a QoS Feature to Network Traffic 441

Attaching the Policy Map to an Interface 443

Configuring MPLS Exp Bit Marking using a Pseudowire 444


Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xix

Contents


20/971

Configuring Congestion Management 445

Configuring Low Latency Queueing 446

Configuring Multiple Priority Queueing 447

Configuration Examples448

Configuring Class-Based Weighted Fair Queuing (CBFQ) 449

Weighted Random Early Detection (WRED) 450

Configuring Shaping 452

Configuring Class-Based Traffic Shaping in a Primary-Level (Parent) Policy Map 452

Configuring the Secondary-Level (Child) Policy Map 454

Configuring Ethernet Trusted Mode 455

Creating IP Extended ACLs 455

Using Class Maps to Define a Traffic Class 456

Creating a Named Access List 458

What to do Next 460

TCAM with ACL 460

Configuration Examples for ACL 460

Verifying Named Access List 461

Configuration Example for Named Access List 462

Access Control Lists for IPv6 Traffic Filtering 467

Creating and Configuring an IPv6 ACL for Traffic Filtering 467

Configuration Example 469Applying the IPv6 ACL to an Interface 469


QoS Treatment for Performance-Monitoring Protocols 470

Cisco IP-SLAs 470

QoS Treatment for IP-SLA Probes 470

Marking 470

Queuing 470

QoS Marking for CPU-Generated Traffic 471

QoS Queuing for CPU-Generated Traffic 471

Extending QoS for MLPPP 472

Configuring Class-map for Matching MPLS EXP Bits 472

Configuring Class-map for Matching IP DSCP Value 473

Configuring Class-map for Matching MPLS EXP Bits or IP DSCP Value 474

Configuring a Policy-map 475

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexx OL-30498-03

Contents


21/971

Attaching the Policy-map to MLPPP Interface 478

Re-marking IP DSCP Values of CPU Generated Traffic 480

Re-marking MPLS EXP Values of CPU Generated Traffic 481

Configuring a Policy-map to Match on CS5 and EXP4482

Attaching the Policy-map to Match on CS5 and EXP4 to MLPPP Interface 485

Configuration Examples for Extending QoS for MPLS over MLPPP 485

Configuring Class-map for Matching MPLS EXP Bits 485

Configuring Class-map for Matching IP DSCP Value 486

Configuring Class-map for Matching MPLS EXP Bits or IP DSCP Value 486

Configuring a Policy-map 486

Configuring a Policy-map to Match on CS5 and EXP 4 486

Attaching the Policy-map to MLPPP Interface 487

Verifying MPLS over MLPPP Configuration 487

Configuration Guidelines 488



Feature Information for Configuring QoS 495

C H A P T E R 2 4 Onboard Failure Logging 497

Understanding OBFL 497

Configuring OBFL 498

Verifying OBFL Configuration 498

C H A P T E R 2 5 Hot Standby Router Protocol and Virtual Router Redundancy Protocol 501


Information About HSRP and VRRP 502

Overview of HSRP and VRRP 502

Text Authentication 502

Preemption 502

How to Configure HSRP 503

Configuring HSRP 503

Configuration Examples for HSRP 505

Example: Configuring HSRP Active Router 505

Example: Configuring HSRP Backup Router 505

Example: HSRP Text Authentication 506

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxi

Contents


22/971

How to Configure VRRP 506

Configuring VRRP 506

Configuration Examples for VRRP 508

Example: Configuring a VRRP Master Router508

Example: Configuring a VRRP Backup Router 508

Example: VRRP Text Authentication 509

Where to Go Next 509


Feature Information for HSRP and VRRP 510

C H A P T E R 2 6 Configuring Link Layer Discovery Protocol 513


Restrictions for LLDP 514

Overview of LLDP 514

How to Configure LLDP 514

Configuring LLDP 514

Verifying LLDP 516

Configuration Example for LLDP 516

Example: Enabling LLDP Globally 516

Example: Configuring Hold Time 517

Example: Configuring Delay Time 517

Example: Configuring Intervals 517

Where to go Next 517


Feature Information for LLDP 519

C H A P T E R 2 7 Configuring Multihop Bidirectional Forwarding Detection 521


Restrictions for Multihop BFD 522

Information About Multihop BFD 522

Overview of Multihop BFD 522

How to Configure Multihop BFD 522

Configuring Multihop BFD Template 522

Configuring a Multihop BFD Map 523

Configuration Examples for Multihop BFD 524

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxii OL-30498-03

Contents


23/971

Example : Configuring Multihop BFD 524



Feature Information for Multihop BFD527

C H A P T E R 2 8 Microwave ACM Signaling and EEM Integration 529


Prerequisites for Microwave ACM Signaling and EEM Integration 530

Feature Overview 530

Benefits 531

How to Configure Microwave ACM Signaling and EEM Integration 531

Configuring Connectivity Fault Management 532

Configuring EEP Applet Using CLIs 534

Configuring Event Handler 537

Verifying Microwave Microwave ACM Signaling and EEM Integration Configuration 538

Configuration Examples for Microwave ACM Signaling and EEM Integration 539

Example: Configuring CFM 539

Example: Configuring EEP Applet 539

Example: Configuring Event Handler 542


Feature Information for Microwave ACM Signaling and EEM Integration 543

C H A P T E R 2 9 IPv6 Support on the Cisco ASR 901S Router 545


Prerequisites for IPv6 Support on the Cisco ASR 901 Router 546

Restrictions for IPv6 Support on the Cisco ASR 901 Router 546

Information About IPv6 Support on the Cisco ASR 901 Router 547

Benefits 547

Overview of IPv6 547

IPv6 Address Formats 547

IPv6 Addressing and Discovery 548

Static Configuration 549

Stateless Autoconfiguration 549

ICMPv6 549

IPv6 Duplicate Address Detection 550

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxiii

Contents


24/971

IPv6 Neighbor Discovery 550

IPv4 and IPv6 Dual-Stack on an Interface 550

Routing Protocols 551

IS-IS Enhancements for IPv6551

OSPFv3 for IPv6 551

Multiprotocol BGP Extensions for IPv6 551

Bidirectional Forwarding Detection for IPv6 551

QoS for IPv6 552

How to Configure IPv6 Support on the Cisco ASR 901 Router 552

Configuring IPv6 Addressing and Enabling IPv6 Routing 552

Configuring a Static IPv6 Route 554

Enabling Stateless Auto-Configuration 555

Implementing IPv6 on VLAN Interfaces 555

Implementing IPv6 Addressing on Loopback Interfaces 557

Configuring ICMPv6 Rate Limiting 558

Configuring IPv6 Duplicate Address Detection 559

Configuring IPv6 Neighbor Discovery 559

Configuring IPv6 and IPv4 Dual-Stack on the Same VLAN 561

Configuring OSPFv3 for IPv6 562

Configuring IS-IS for IPv6 563

Configuring Multiprotocol-BGP for IPv6 565Configuring BFD for IPv6 566

Specifying a Static BFDv6 Neighbor 566

Associating an IPv6 Static Route with a BFDv6 Neighbor 567

Configuring BFDv6 and OSPFv3 568

Configuring BFDv6 for BGP 570

Implementing QoS for IPv6 571

Verifying the Configuration of IPv6 Support on the Cisco ASR 901 Router 571

Verifying IPv6 Addressing Routing 571

Verifying a Static IPv6 Route 572

Verifying a Stateless Auto-Configuration 572

Verifying IPv6 Implementation on VLAN Interfaces 573

Verifying IPv6 Implementation on Loopback Interfaces 573

Verifying ICMPv6 Configuration 574

Verifying IPv6 Duplicate Address Detection Configuration 575

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxiv OL-30498-03

Contents


25/971

Verifying IPv6 Neighbor Discovery Configuration 576

Verifying IPv6 and IPv4 Dual-Stack Configuration 576

Verifying OSPFv3 for IPv6 Configuration 577

Verifying IS-IS for IPv6 Configuration578

Verifying Multiprotocol-BGP for IPv6 Configuration 578

Verifying BFD for IPv6 Configuration 580

Verifying BFDv6 and OSPFv3 Configuration 580

Verifying BFDv6 for BGP Configuration 581

Configuration Examples for IPv6 Support on the Cisco ASR 901S Router 581

Example: IPv6 Addressing on VLAN Interfaces 581

Example: IPv6 Addressing on Loopback Interfaces 581

Example: Customizing ICMPv6 582

Example: Configuring IPv6 Duplicate Address Detection 582

Example: Configuring IPv6 Neighborhood Discovery 582

Example: Enabling IPv6 Stateless Address Autoconfiguration 582

Example: Configuring the IPv4 and IPv6 Dual-Stack 583

Example: Configuring IPv6 Static Routing 583

Example: Configuring BFD and Static Routing for IPv6 583

Example: Configuring OSPFv3 for IPv6 583

Example: Configuring BFD and OSPFv3 for IPv6 584

Example: Configuring IS-IS for IPv6 584Example: Configuring Multiprotocol-BGP for IPv6 585

Example: Configuring BFD and Multiprotocol-BGP for IPv6 586




Feature Information for IPv6 Support on the Cisco ASR 901 Router 589

C H A P T E R 3 0 Labeled BGP Support 595


Prerequisites for Labeled BGP Support 595

Restrictions for Labeled BGP Support 596

Overview of Labeled BGP Support 596

How to Configure Labeled BGP Support 596

Configuration Example for Labeled Support 598

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxv

Contents


26/971

Verifying Labeled BGP Support 598


Feature Information for Labeled BGP Support 601

C H A P T E R 3 1 MPLS Traffic Engineering - Fast Reroute Link Protection 603


Prerequisites for MPLS Traffic Engineering - Fast Reroute Link Protection 604

Restrictions for MPLS Traffic Engineering - Fast Reroute Link Protection 604

MPLS TE-FRR Link Protection Overview 605

BFD-triggered Fast Reroute 606

BFD 606

Fast Reroute 606

Link Protection 606

How to Configure Traffic Engineering - Fast Reroute Link Protection 606

Enabling MPLS TE-FRR on an SVI Interface 606

Enabling MPLS TE-FRR for EoMPLS on a Global Interface 607

Enabling MPLS TE-FRR for EoMPLS on an Interface 609

Enabling MPLS TE-FRR for IS-IS 611

Configuring Primary One-hop Auto-Tunnels 613

Configuring Backup Auto-Tunnels 615

Enabling Targeted LDP session over Primary one-hop Auto-Tunnels 616

Enabling BFD Triggered FRR on an SVI Interface 617

Enabling BFD Triggered FRR on a Router 618

Verification Examples 619

Verifying MPLS TE-FRR Configuration 619

Verifying Primary One-hop Auto-Tunnels 621

Verifying Backup Auto-Tunnels 621

Verifying BFD Triggered FRR Configuration 622


Example: Configuring MPLS TE-FRR 625

Example: Configuring Primary One-hop Auto-Tunnels 625

Example: Configuring Backup Auto-Tunnels 625

Example: Configuring BFD Triggered FRR 625


Feature Information for MPLS Traffic Engineering - Fast Reroute Link Protection 626

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxvi OL-30498-03

Contents


27/971

C H A P T E R 3 2 Layer 2 Control Protocol Peering, Forwarding, and Tunneling 629


Prerequisites for Layer 2 Control Protocol Peering, Forwarding, and Tunneling 630Restrictions for Layer 2 Control Protocol Peering, Forwarding, and Tunneling 630

Layer 2 Control Protocol Forwarding 630

Layer 2 Control Protocol Tunneling 631

How to Configure Layer 2 Control Protocol Peering, Forwarding, and Tunneling 632

Configuring Layer 2 Peering 632

Configuring Layer 2 Forwarding 634

Configuring Layer 2 Tunneling 636

Verifying Layer 2 Peering 638

Verifying Layer 2 Forwarding 638

Verifying Layer 2 Tunneling 639


Example: Configuring Layer 2 Peering 639

Example: Configuring Layer 2 Forwarding 640

Example: Configuring Layer 2 Tunneling 641


Feature Information for Layer 2 Control Protocol Peering, Forwarding, and Tunneling 644

C H A P T E R 3 3 IPv6 over MPLS: 6PE and 6VPE 645


Prerequisites 646

Restrictions 646


Benefits of 6PE and 6VPE 647

IPv6 on Provider Edge Routers 647

IPv6 on VPN Provider Edge Routers 648

Components of MPLS-based 6VPE Network 648

Supported Features 649

Scalability Numbers 650

How to Configure IPv6 over MPLS: 6PE and 6VPE 650

Configuring 6PE 650

Configuring 6VPE 653

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxvii

Contents


28/971

Setting up IPv6 Connectivity from PE to CE Routers 653

Setting up MP-BGP Peering to the Neighboring PE 655

Setting up MPLS/IPv4 Connectivity with LDP 656

Creating IPv6 VRFs on PE Routers657

Configuring IPv6-only VRF 657

Configuring Dual-stack VRF 658

Verifying IPv6 over MPLS: 6PE and 6VPE Configuration 659


Example: Configuring 6PE 662

Example: Configuring 6VPE 663


Feature Information for IPv6 over MPLS: 6PE and 6VPE 665

C H A P T E R 3 4 Storm Control 667


Prerequisites for Storm Control 667

Restrictions for Storm Control 668

Information About Storm Control 668

Configuring Storm Control 668

Verifying Storm Control 670

Configuring Error Disable Recovery 670

Monitoring Error Disable Recovery 671

Configuration Example for Storm Control 672

Troubleshooting Tips for Storm Control 672


Feature Information for Storm Control 674

C H A P T E R 3 5 Configuring Power over Ethernet 675

Information about Power over Ethernet 675

Device Roles 675

Configuring PoE Support 675

PoE Features Supported on the Router 676

Limitations 677

Configuring PoE on an Interface 677

Example for Configuring PoE on an Interface 678

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxviii OL-30498-03

Contents


29/971

Verifying PoE 678

Configuring PoE Port Priority 679


Feature Information for Power over Ethernet680

C H A P T E R 3 6 Remote Loop-Free Alternate - Fast Reroute 683


Prerequisites for Remote Loop-Free Alternate - Fast Reroute 683

Restrictions for Remote Loop-Free Alternate - Fast Reroute 684


Benefits of Remote LFA-FRR 686

Avoiding Traffic Drops 686

Pseudowire Redundancy over FRR 686

Conditions for Switchover 687

How to Configure Remote Loop-Free Alternate - Fast Reroute 687

Configuring Remote LFA-FRR for IS-IS 687

Configuring Remote LFA-FRR for OSPF 691

Configuring Remote LFA-FRR for Ethernet and TDM Pseudowires 694

Configuring Remote LFA-FRR on a Global Interface 694

Configuring Remote LFA-FRR on a GigabitEthernet Interface 695

Configuring Remote LFA-FRR on an SVI Interface 697

Configuring Remote LFA-FRR on IS-IS 698

Configuring LFA-FRR for EoMPLS 702

Configuring LFA-FRR for ATM/IMA 704

Configuring LFA-FRR for CESoPSN 706

Configuring LFA-FRR for SAToP 709

Verification Examples for Remote LFA-FRR 711

Verifying Remote LFA-FRR Configuration 711

Verifying Remote LFA-FRR Configuration for EoMPLS on a GigabitEthernet

Interface 713

Verifying Remote LFA-FRR Configuration for EoMPLS on an EVC Interface 715

Verifying Remote LFA-FRR Configuration on IS-IS 716

Verifying Remote LFA-FRR Configuration on ATM/IMA 716

Verifying Remote LFA-FRR Configuration on CESoPSN 717

Verifying Remote LFA-FRR Configuration on SAToP 717

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxix

Contents


30/971

Configuration Examples for Remote LFA-FRR 718

Example: Configuring Remote LFA-FRR for IS-IS 718

Example: Configuring Remote LFA-FRR for OSPF 718

Example: Configuring Remote LFA-FRR Globally719

Example: Configuring Remote LFA-FRR on a GigabitEthernet Interface 719

Example: Configuring Remote LFA-FRR on an SVI Interface 719

Example: Configuring EoMPLS Pseudowire Redundancy over FRR 719

Example: Configuring LFA-FRR on ATM/IMA 720

Example: Configuring LFA-FRR on CESoPSN 720

Example: Configuring LFA-FRR on SAToP 720


Feature Information for Remote Loop-Free Alternate - Fast Reroute 722

C H A P T E R 3 7 Digital Optical Monitoring 723



How to Enable Transceiver Monitoring 724

Examples 725

Example: Displaying Transceiver Information 725

Example: Displaying Detailed Transceiver Information 725

Example: Displaying List of Supported Transceivers 726

Example: Displaying Threshold Tables 727

Example: Displaying Threshold Violations 729

Example: Displaying Threshold Violations on a Specific Interface 729

Example: When Transceiver Monitoring is Disabled 730

Example: Displaying SFP Details 730


Feature Information for Digital Optical Monitoring 732

C H A P T E R 3 8 Autonomic Networking Infrastructure 733

Autonomic Networking 733


Prerequisites for Autonomic Networking 733

Restrictions for Autonomic Networking 734

Information About Autonomic Networking 734

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxx OL-30498-03

Contents


31/971

Overview of Autonomic Networking 734

Autonomic Networking Infrastructure 735

New Device Joining the Autonomic Network 736

Working of the Registrar736

Channel Discovery in Autonomic Networking 737

Service Discovery in Autonomic Networking 737

Autonomic Control Plane 738

IPsec on Link Local GRE IPv6 Tunnels in Autonomic Networking 738

How to Configure Autonomic Networking 738

Configuring the Registrar 738

Verifying and Monitoring Autonomic Networking Configuration 740

Configuration Examples for Autonomic Networking 742

Example: Configuring the Registrar 742

Additional References for Autonomic Networking 742

Feature Information for Autonomic Networking 742

C H A P T E R 3 9 IPv4 Multicast 745


Prerequisites for IPv4 Multicast 745

Restrictions for IPv4 Multicast 746

Information About IPv4 Multicast 746

Supported Protocols 747

PIM SSM for IPv4 747

Source Specific Multicast 747

Protocol Independent Multicast 747

PIM SSM Address Range 748

IGMP 748

IGMPv1 748

IGMPv2 748

IGMPv3 748

IGMP Snooping 749

IGMP Snooping Support 749

PIM SSM Mapping 750

Static SSM Mapping 750

Reverse Path Forwarding 750

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxxi

Contents


32/971

IP Multicast VRF Lite 751

PIM BFD 751

Configuring IPv4 Multicast 752

Enabling IPv4 Multicast Routing752

Configuring PIM SSM 753

Configuring PIM SSM Mapping 754

Configuring Multicast Receivers in VRF Interface 755

Configuring IGMP Snooping 756

Enabling IGMP Snooping Globally 757

Enabling IGMP Snooping on a VLAN 757

Configuring an IGMP Snooping Query 758

Disabling IGMP Snooping 761

Configuring IPv4 Multicast Routing for VRF Lite 761

Enabling a VRF Under the VLAN Interface 763

Configuring PIM BFD on an IPv4 Interface 764

Verifying IPv4 Multicast Routing 765

Verifying PIM SSM 765

Verifying PIM SSM Mapping 766

Verifying Static Mroute 767

Verifying IGMP Snooping 768

Verifying IP Multicast Routing for VRF Lite 769Verifying PIM BFD Support 772

Configuration Examples for IPv4 Multicast 773

Example: IPv4 Multicast Routing 773

Example: Configuring PIM SSM 773

Example: Configuring PIM SSM Mapping 773

Example: Configuring Rendezvous Point 774

Example: Configuring Multicast Receivers in the VRF Interface 774

Example: Configuring IGMP Snooping 774

Example: Configuring IPv4 Multicast Routing for VRF Lite 775

Example: Configuring PIM BFD on an IPv4 Interface 775



Feature Information for IPv4 Multicast 778

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxxii OL-30498-03

Contents


33/971

C H A P T E R 4 0 IPv6 Multicast 781


Prerequisites for IPv6 Multicast 781Restrictions for IPv6 Multicast 782

Information About IPv6 Multicast 782

IPv6 Multicast Groups 783

IPv6 Multicast Routing Implementation 783

Multicast Listener Discovery Protocol for IPv6 783

MLD Snooping 784

MLD Snooping Support 785

Protocol Independent Multicast 785

PIM Source Specific Multicast 786

Source Specific Multicast Mapping for IPv6 786

PIM-Sparse Mode 786

Rendezvous Point 787

IPv6 Multicast VRF Lite 787

PIM BFD 787

Configuring IPv6 Multicast 788

Enabling IPv6 Multicast Routing 788

Disabling IPv6 Multicast Forwarding 789

Disabling MLD Device-Side Processing 789

Configuring MLD Protocol on an Interface 790

Configuring MLD Snooping 792

Enabling MLD Snooping Globally 793

Enabling MLD Snooping on a VLAN 793

Configuring a Static Multicast Group 794

Configuring a Multicast Router Port 795

Enabling MLD Immediate Leave 796

Configuring an MLD Snooping Query 797

Disabling MLD Listener Message Suppression 799

Configuring a Rendezvous Point 800

Configuring PIM SSM Options 800

Disabling PIM SSM Multicast on an Interface 801

Configuring IPv6 SSM Mapping 802

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxxiii

Contents


34/971

Configuring IPv6 Multicast Routing for VRF Lite 803

Enabling VRF Under a VLAN Interface 804

Configuring PIM BFD on an IPv6 Interface 805

Verifying IPv6 Multicast806

Verifying MLD Snooping 814

Verifying IPv6 Multicast Routing for VRF Lite 817

Verifying PIM BFD Support 821

Configuration Examples for IPv6 Multicast 822

Example: Enabling IPv6 Multicast Routing 822

Example: Configuring IPv6 SSM Mapping 823

Example: Configuring IPv6 MLD Snooping 823

Example: Configuring Rendezvous Point 823

Example: Configuring IPv6 Multicast Routing for VRF Lite 823

Example: Configuring BFD PIM on an IPv6 Interface 824



Feature Information for IPv6 Multicast 827

C H A P T E R 4 1 Configuring Switched Port Analyzer 831


SPAN Limitations and Configuration Guidelines 831

Understanding SPAN 832

Overview 832

SPAN Session 833

Source Interface 833

Destination Interface 834

Traffic Types 834

SPAN Traffic 834

Configuring SPAN 834

Creating a SPAN Session 834

Removing Sources or Destination from a SPAN Session 836

Configuration Examples for SPAN 836

Verifying Local SPAN 836


Feature Information for Switched Port Analyzer 838

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxxiv OL-30498-03

Contents


35/971

C H A P T E R 4 2 IP Security 841


Prerequisites for IP Security 841Restrictions for IP Security 842

Information About IP Security 842

IKE Security Protocol 842

Advanced Encryption Standard 843

Triple DES Encryption 843

Encrypted Preshared Key 843

IKE Modes 843

Supported Components 844

Configuring IP Security 845

Creating a Preshared Key 845

Creating an ISAKMP Policy 846

Creating an ISAKMP Profile 847

Defining an IPsec Transform Set 848

Creating an IPsec Profile 849

Creating a VPN Tunnel Interface 850

Configuring Static Routing 852

Verifying Static Routing 853

Enabling Dynamic Routing 853

Verifying Dynamic Routing 855

Configuration Examples for IP Security 856

Example: Creating a Preshared Key 856

Example: Creating an ISAKMP Policy 856

Example: Creating an ISAKMP Profile 856

Example: Defining an IPsec Transform Set 857

Example: Creating an IPsec Profile 857

Example: Creating a VPN Tunnel Interface 857

Example: Configuring Static Routing 857

Example: Enabling Dynamic Routing 858


Related Documents 858

Standards 858

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxxv

Contents


36/971

MIBs 859

RFCs 859

Technical Assistance 859

Feature Information for IP Security859

C H A P T E R 4 3 ITU-T G.8032 Ethernet Ring Protection Switching 861


Prerequisites for Configuring ITU-T G.8032 Ethernet Ring Protection Switching 862

Restrictions for Configuring ITU-T G.8032 Ethernet Ring Protection Switching 862

Information About Configuring ITU-T G.8032 Ethernet Ring Protection Switching 862

G.8032 Overview 862

ITU-T G.8032 Ethernet Ring Protection Switching Functionality 863

Single-Ring Topology 865

Multiple-Rings Topology 865

R-APS Control Messages 866

CFM Protocols and Link Failures 867

G.8032 Ring-Supported Commands and Functionality 867

G.8032 ERP Timers 868

Protection Switching Functionality in a Single Link Failure and Recovery 868

How to Configure ITU-T G.8032 Ethernet Ring Protection Switching 871

Configuring the Ethernet Ring Profile 871

Configuring an Ethernet Protection Ring 872

Configuring Topology Change Notification Propagation 875

Verifying Ethernet Ring Protection Configuration 876


Configuration Examples for ITU-T G.8032 Ethernet Ring Protection Switching 881

Example: Configuration for Ethernet Ring Protection 881



Standards 882

RFCs 882


Feature Information for Configuring ITU-T G.8032 Ethernet Ring Protection Switching 883

C H A P T E R 4 4 Configuring NAT for IP Address Conservation 885

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxxvi OL-30498-03

Contents


37/971


Prerequisites for Configuring NAT for IP Address Conservation 886

Restrictions for Configuring NAT for IP Address Conservation 886

Information About Configuring NAT for IP Address Conservation886

Overview 886

How NAT Works 887

Types of NAT 887

NAT Inside and Outside Addresses 888

Static IP Address Support 888

Supported Components 888

How to Configure NAT for IP Address Conservation 889

Configuring an Inside Source Address 889

Configuring Dynamic Translation of Inside Source Addresses Without Overload 891

Configuring Dynamic Translation of Inside Source Addresses with Overload 893

Configuring Static PAT 895

Verifying Configuration of NAT for IP Address Conservation 897

Configuration Examples for NAT for IP Address Conservation 897

Example: Configuring Inside Source Address 897

Example: Configuring Dynamic Translation of Inside Source Addresses Without Overload 897

Example: Configuring Dynamic Translation of Inside Source Addresses with Overload 898

Example: Configuring Static PAT 898Additional References 898


Standards 899

RFCs 899


Feature Information for Configuring NAT for IP Address Conservation 899

C H A P T E R 4 5 Auto-IP 901

Auto-IP 901

C H A P T E R 4 6 Configuring the Wi-Fi Management Interface 903

Configuring the Wi-Fi Management Interface 903

Restrictions for the Wi-Fi Management Interface 904

Information About the Wi-Fi Management Interface 904

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxxvii

Contents


38/971

Configuring the Wi-Fi Management Interface 905

Enabling the Wi-Fi Interface 905

Assigning an IP Address 907

Verifying IP Address908

Configuring the WPA2 PSK 908

Configuring Virtual Access Point 909

Verifying the VAP Configuration 910

Configuring the Country Code 911

Verifying the Country Code 912

Verifying Wi-Fi Management Interface Configurations 912


Feature Information for the Wi-Fi Management Interface 918

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexxxviii OL-30498-03

Contents


39/971

About This Guide

This section describes the objectives, audience, organization, and conventions of this software configuration

guide. It contains the following sections:

About This Guide, page xxxix

Document Revision History, page xxxix

Objectives, page xlii

Audience, page xlii

Organization, page xlii

Conventions, page xlv

Related Documentation, page xlvi

Obtaining Documentation and Submitting a Service Request, page xlvii

About This GuideThis section describes the objectives, audience, organization, and conventions of this software configuration

guide. It contains the following sections:

Document Revision HistoryThe Document Revision History table records technical changes to this document.

Change SummaryDateDocument Number

Initial version of the document.December 2013OL-30498-01

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xxxix


40/971


Configuring Power over EthernetEffective with Cisco IOS

Release 15.4(2)S, support was provided for Power over

Ethernet (PoE) on the FA chassis models of the Cisco ASR

901S router. PoE can be enabled or disabled using the Cisco

IOS CLI.

802.1ad for EVC Cross ConnectEffective with Cisco IOS

release 15.4 (2) S, the Cisco ASR 901S router supports

configuring EVC default encapsulation with xconnect.

ACL-based QoSEffective with Cisco IOS release 15.4 (2)S,

the Cisco ASR 901S router supports ACL-based QoS on Layer

4. This feature allows you to configure the Layer 3 or Layer

4 options while configuring the ACL for QoS on ingress only.

Layer 3 or layer 4 options like ToS, source port, and destination

port are supported.

Auto-IPEffective with Cisco IOS release 15.4 (2)S, the

Cisco ASR 901S router supports Auto-IP feature. The auto-IP

feature automatically provides IP addresses to the nodes

inserted into a ring. In ring topology, when a device is inserted

into the ring, the neighboring node interfaces require manual

reconfiguration. The auto-IP feature addresses the problem of

manually reconfiguring nodes during insertion, deletion, and

movement of nodes within the ring.

BGP - Accumulated IGPThe BGP Accumulated IGP feature

is an optional non-transitive Border Gateway Protocol (BGP)

path attribute. The attribute type code for the accumulated

interior gateway protocol (AIGP) attribute is assigned by the

Internet Assigned Numbers Authority (IANA). The value fieldof the AIGP attribute is defined as a set of type, length, value

(TLV) elements. The AIGP TLV contains the AIGP metric.

March 2014OL-30498-02

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexl OL-30498-03

About This Guide

Document Revision History


41/971


G.8032 at Interface LevelThe ITU-T G.8032 Ethernet Ring

Protection Switching feature implements protection switching

mechanisms for Ethernet layer ring topologies. This feature

uses the G.8032 Ethernet Ring Protection (ERP) protocol,

defined in ITU-T G.8032, to provide protection for Ethernet

traffic in a ring topology, while ensuring that no loops are

within the ring at the Ethernet layer. The loops are prevented

by blocking traffic on either a predetermined link or a failed

link.

IGMP SnoopingIGMP snooping allows a router to examine

IGMP packets and make forwarding decisions based on their

content. Using IGMP snooping, the router intercepts IGMP

messages from the host and updates its multicast table

accordingly.

IP Security

The IP Security feature enables you to configure

the Internet Key Exchange (IKE) protocol for basic IP Security

(IPsec) Virtual Private Networks (VPNs). IKE is a key

management protocol standard that is used in conjunction with

the IPsec standard. IPsec is an IP security feature that provides

robust authentication and encryption of IP packets.

IPv6 Services: Extended Access Control ListsThe standard

ACL functionality in IPv6 is similar to standard ACLs in IPv4.

Access lists determine what traffic is blocked and what traffic

is forwarded at router interfaces and allow filtering based on

source and destination addresses and inbound interface. Each

access list has an implicit deny statement at the end. IPv6 ACLs

are defined and their deny and permit conditions are set usingthe ipv6 access-list command with the deny and permit

keywords in global configuration mode.

MLD SnoopingMLD is a protocol used by IPv6 multicast

routers to discover the presence of multicast listeners (nodes

looking to receive IPv6 multicast packets) on its directly

attached links, and to discover which multicast packets are of

interest to neighboring nodes.

Network Address TranslationEffective with Cisco IOS

Release 15.4(2)S, you can configure Network Address

Translation (NAT) for IP address conservation. This module

also provides information about the benefits of configuring

NAT for IP address conservation.

TWAMP RFC ComplianceThe TWAMP RFC compliance

feature supports RFC 5357 which specifies a Two-Way Active

Measurement Protocol (TWAMP), based on the One-way

Active Measurement Protocol (OWAMP), that adds two-way

or round-trip measurement capabilities.

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xli

About This Guide

Document Revision History


42/971


Configuring Wi-Fi Management InterfaceEffective with

Cisco IOS Release 15.4(3)S, support is provided for the Wi-Fi

management interface on the FA chassis models of the Cisco

ASR 901S router. The Wi-Fi management interface can be

enabled or disabled using the Cisco IOS CLIs.

July 2014OL-30498-03

ObjectivesThis guide explains how to configure software features on the Cisco ASR 901S Series Aggregation Services

Routers.

AudienceThis guide is for the person responsible for configuring the router. This guide is intended for the following

audiences:

Customers with technical networking background and experience.

System administrators who are familiar with the fundamentals of router-based internetworking, but who

may not be familiar with Cisco IOS software.

System administrators who are responsible for installing and configuring internetworking equipment,

and who are familiar with Cisco IOS software.

OrganizationThe major sections of this software configuration guide are listed in the following table:

DescriptionChapter

Provides an overview of the Cisco ASR 901S router.Cisco ASR 901S Router Overview

Describes the licensing aspects of the router.Licensing

Describes the first time configuration of the router.First-Time Configuration

Describes how to monitor, manage and deploy avariety of network management features.

Managing and Monitoring Network ManagementFeatures

Describes the CLI of the router.Using the Command-Line Interface

Describes how to upgrade the Cisco IOS image on

the router.

Software Upgrade

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexlii OL-30498-03

About This Guide

Objectives
http://-/?-http://-/?-


43/971

Describes how to configure gigabit ethernet interfaces

on the router.

Configuring Gigabit Ethernet Interfaces

Describes how to configure EVCs on the router.Configuring Ethernet Virtual Connections

Describes how to configure EtherChannels on therouter.

Configuring EtherChannels

Describes how to configure Ethernet OAM on the

router.

Configuring Ethernet OAM

Displays information on the ITU-T Y.1731

Performance Monitoring for the Cisco ASR 901S

Series Aggregation Services Router.

ITU-T Y.1731 Performance Monitoring

Describes how to configure REP on the router.Configuring Resilient Ethernet Protocol

Describes how to configure MSTP on the router.Configuring MST on EVC Bridge Domain

Describes how to configure MPLS on the router.Configuring Multiprotocol Label Switching

Describes how to configure EoMPLS on the router.Configuring EoMPLS

Describes how to configure MPLS VPNs on the

router.

Configuring MPLS VPNs

Describes how to configure MPLS OAM on the

router.

Configuring MPLS OAM

Describes how to configure the routing protocols on

the router.

Configuring Routing Protocols

Describes how to configure BFD on the router.Configuring Bidirectional Forwarding Detection

Describes how to configure pseudowire on the router.Configuring Pseudowire

Describes how to configure clocking on the router.Configuring Clocking

Describes the IPSLA aspects of the router.Cisco IOS IP SLA

Describes how to configure QoS on the router.Configuring QoS

Describes how to configure OBFL on the router.Onboard Failure Logging

Describes how to configure HSRP and VSRP.Hot Standby Router Protocol and Virtual Router

Redundancy Protocol

Describes how to configure LLDP.Configuring Link Layer Discovery Protocol

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xliii

About This Guide

Organization


44/971

Describes how to configure multihop BFDConfiguring Multihop Bidirectional Forwarding

Detection

Describes how the Microwave Adaptive Code

Modulation (ACM) Signaling and Embedded Event

Manager (EEM) integration that enables themicrowave radio transceivers to report link bandwidth

information to an upstream Ethernet switch and take

action on the signal degradation to provide optimal

bandwidth.

Microwave ACM Signaling and EEM Integration

Describes how to support Long Term Evolution (LTE)

rollouts that provides high-bandwidth data connection

for mobile wireless devices.

IPv6 Support on the Cisco ASR 901S Router

Describes how to add label mapping information to

the Border Gateway Protocol

Labeled BGP Support

Describes how to add Fast Reroute (FRR) link

protection and Bidirectional Forwarding Detection

(BFD)-triggered FRR feature of Multiprotocol Label

Switching (MPLS) traffic engineering (TE).

MPLS Traffic Engineering - Fast Reroute Link

Protection

Describes how to configure Layer 2 (L2) Control

Protocol Peering, Forwarding, and Tunneling feature

on the Cisco ASR 901S Series Aggregation Services

Routers.

Layer 2 Control Protocol Peering, Forwarding, and

Tunneling

Describes how to implement IPv6 VPN Provider Edge

Transport over MPLS (IPv6 on Provider Edge Routers

[6PE]) and IPv6 on ASR 901S.

IPv6 over MPLS: 6PE and 6VPE

Describes how to monitor the incoming broadcast,

multicast, and unknown unicast packets and prevent

them from flooding the LAN ports.

Storm Control

Describes how to configure Power over Ethernet

(PoE) support on the Cisco ASR 901S Series

Aggregation Services Router.

Configuring Power over Ethernet

Describes the Remote Loop-free Alternate (LFA) -

Fast Reroute (FRR) feature that uses a backup route,

computed using dynamic routing protocol during a

node failure, to avoid traffic loss.

Remote Loop-Free Alternate - Fast Reroute

Provides information on the digital optical monitoring

(DOM) feature for the Cisco ASR 901S Series

Aggregation Services Router.

Digital Optical Monitoring

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexliv OL-30498-03

About This Guide

Organization


45/971

Describes how the Autonomic Networking

Infrastructure feature makes new and unconfigured

devices securely reachable by an operator or network

management system.

Autonomic Networking Infrastructure

Describes how to configure IP multicast in an IPv4network.

IPv4 Multicast

Describes how to configure basic IP multicast in an

IPv6 network.

IPv6 Multicast

Describes how to configure a switched port analyzer

(SPAN) on the Cisco ASR 901S Router.

Configuring Switched Port Analyzer

Describes how to configure the Internet Key

Exchange (IKE) protocol for basic IP Security (IPsec)

Virtual Private Networks (VPNs).

IP Security

Describes how to implement protection switching

mechanisms for Ethernet layer ring topologies.

G.8032 Overview

Describes how to configure Network Address

Translation (NAT) for IP address conservation.

Overview

Describes how to configure auto-IP in an auto-IPring.Auto-IP

ConventionsThis publication uses the following conventions to convey instructions and information.

DescriptionConvention

Commands and keywords.boldface font

Variables for which you supply values.italic font

Keywords or arguments that appear within square

brackets are optional.

[ ]

A choice of required keywords appears in braces

separated by vertical bars. You must select one.

{x | y | z}

Examples of information displayed on the screen.screen font

Examples of information the user enters.boldface screen font

Nonprinting characters, for example passwords,

appear in angle brackets.

< >

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xlv

About This Guide

Conventions
http://-/?-http://-/?-


46/971

DescriptionConvention

Default responses to system prompts appear in square

brackets.

[ ]

Meansreader take note. Notes contain helpful suggestions or references to material not covered in the

manual.

Note

Meansthe described action saves time.Timesaver

Meansthe following information will help you solve a problem . The tips information might not be

troubleshooting or even an action, but could be useful information, similar to a Timesaver.

Tip

Meansreader be careful. In this situation, you might do something that could result in equipment damage

or loss of data.

Caution

Related DocumentationThe following list includes documentation related to your product by implementation.

Cisco Cisco ASR 901S Series Aggregation Services Router Documents

Cisco ASR 901S Series Aggregation Services Router Command Reference

Cisco ASR 901S Series Aggregation Services Router Hardware Installation Guide

Cisco Regulatory Compliance and Safety Information for Cisco ASR 901S Series Aggregation

Services Router

Release Notes

Release Notes for Cisco ASR 901S Series Aggregation Services Router

To access the related documentation on Cisco.com, go to:

http://www.cisco.com/c/en/us/support/routers/asr-901s-series-aggregation-services-routers/tsd-products-support-series-home.html

To obtain the latest information, access the online documentation.Note

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexlvi OL-30498-03

About This Guide

Related Documentation
http://www.cisco.com/c/en/us/support/routers/asr-901s-series-aggregation-services-routers/tsd-products-support-series-home.htmlhttp://www.cisco.com/c/en/us/support/routers/asr-901s-series-aggregation-services-routers/tsd-products-support-series-home.htmlhttp://www.cisco.com/c/en/us/support/routers/asr-901s-series-aggregation-services-routers/tsd-products-support-series-home.htmlhttp://www.cisco.com/c/en/us/support/routers/asr-901s-series-aggregation-services-routers/tsd-products-support-series-home.html


47/971

Obtaining Documentation and Submitting a Service RequestFor information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service

request, and gathering additional information, see What's New in Cisco Product Documentation, at: http://

www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.

Subscribe toWhat's New in Cisco Product Documentation, which lists all new and revised Cisco technical

documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The

RSS feeds are a free service.

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 xlvii

About This Guide

Obtaining Documentation and Submitting a Service Request
http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.htmlhttp://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.htmlhttp://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.htmlhttp://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html


48/971

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guidexlviii OL-30498-03

About This Guide

Obtaining Documentation and Submitting a Service Request


49/971

C H A P T E R 1

Cisco ASR 901S Router Overview

Cisco ASR 901S Series Aggregation Services Routers are small-form factor, environmentally-hardened

(IP65 rated), low-powered, cost-effective routers. They complement the Cisco ASR 901 as part of the Cisco

end-to-end mobile backhaul solution and transparently integrate into existing operational environments. A

Cisco ASR 901S router prioritizes and processes small cell-site voice, data, and signaling traffic as part ofthe Cisco unified radio access network (RAN) solution for reliable transport across any available backhaul

networks.

The ASR 901S routers can be installed in the outside plant (OSP) without an enclosure. These routers can

be easily deployed in challenging locations such as on lamp posts, telephone poles, and sides of walls.

The Cisco ASR 901S router helps enable a variety of RAN solutions by extendingIP connectivityto devices

using Global System for Mobile Communications (GSM), General Packet Radio Service (GPRS), Node Bs

using HSPA or LTE, Base Transceiver Stations (BTSs) using Enhanced Data Rates for GSM Evolution

(EDGE), Code Division Multiple Access (CDMA), CDMA-2000, EVDO, or WiMAX, and other cell-site

equipment.

The Cisco ASR 901S router transparently and efficiently transports cell-site voice, data, and signaling traffic

over IP including leased line, microwave, and satellite. It also supports alternative backhaul networks,including Carrier Ethernet and Ethernet in the First Mile (EFM).

The Cisco ASR 901S router also supports standards-based Internet Engineering Task Force (IETF) Internet

protocols over the RAN transport network, including those standardized at the Third-Generation Partnership

Project (3GPP) for IP RAN transport.

The Cisco ASR 901S router supports Ethernet Virtual Circuits (EVC) only. Metro-Ethernet Forum (MEF)

defines an Ethernet Virtual Connection as an association between two or more user network interfaces

identifying a point-to-point or multipoint-to-multipoint path within the service provider network. An EVC

is a conceptualservice pipewithin the service provider network.

For more information on EVCs, seeConfiguring Ethernet Virtual Connections, on page 81.

Introduction, page 1

Features, page 2

IntroductionThe Cisco ASR 901S router is a small cell site gateway designed to transport small cell BTS traffic and send

it to the base station controller.

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 1


50/971

Small cells (for example, Long Term Evolution [LTE] femtocells) are low-power cellular base stations that

use licensed spectrum and are typically deployed in residential, enterprise, metropolitan hotspot or rural

settings. They provide an excellent user experience through enhanced coverage, performance, throughput and

services based on location.

A typical RAN backhaul network connects cell-site nodes with central-site node. In the case of LTE based

pico cell the eNode is connected to the core network (Mobility Management Entity [MME]) via the backhaulwhereby the need of small cell router comes in.

Traffic emanating from larger cells is routed over the RAN to the core network through the Radio Network

Controller (RNC) via the lub interface. Traffic from smaller cells, specifically femtocells, may be more

efficiently routed over a separate gateway (via the luh interface) using an additional device, such as a Home

NodeB gateway.

The Cisco ASR 901S router provides fixed four GE optical ports for back haul and two GE copper for

downstream connectivity. This router provides teh following chassis models and interfaces:

DescriptionProduct Identifier of Chassis Model

4 external SFP ports + 1 gland interface for internal ports, DC power

supply

A901S-4SG-F-D

3 external SFP ports + 1 external copper (Cu) port + 1 gland interface

for internal ports, DC power supply

A901S-3SG-F-D

2 external SFP ports + 2 external Cu ports + 1 gland interface for

internal ports, DC power supply

A901S-2SG-F-D

3 external SFP ports + 1 gland interface for internal ports, AC PSU,

1 sec holdover for 1 power over Ethernet plus (POE+) port

A901S-3SG-F-AH

2 external SFP ports + 1 external Cu port + 1 gland interface for

internal ports, AC PSU, 1 sec holdover for 1 POE+ port

A901S-2SG-F-AH

FeaturesThis section contains the following topics:

Performance Features

Autosensing of port speed and autonegotiation of duplex mode on all ports for optimizing bandwidth.

Automatic-medium-dependent interface crossover (auto-MDIX) capability on 100 and 100/1000 Mbpsinterfaces and on 100/1000 BASE-T/TX small form-factor pluggable (SFP) module interfaces that

enables the interface to automatically detect the required cable connection type (straight-through or

crossover) and to configure the connection appropriately.

EtherChannel for enhanced fault tolerance and for providing up to 8 Gbps (Gigabit EtherChannel) or

800 Mbps (Fast EtherChannel) full duplex of bandwidth between switches, routers, and servers.

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guide2 OL-30498-03


Features


51/971

Link Aggregation Control Protocol (LACP) for automatic creation of EtherChannel links (supported

only on NNIs or ENIs).

Forwarding of Layer 2 and Layer 3 packets at Gigabit line rate.

Management Options

CLIYou can access the CLI either by connecting your management station directly to the router

console port or by using Telnet from a remote management station. For more information about the CLI

seeUsing the Command-Line Interface, on page 53

Cisco Configuration EngineThe Cisco Configuration Engine is a network management device that

works with embedded Cisco IOS CNS Agents in the Cisco ASR 901S Series Aggregation Services

Router software. You can automate initial configurations and configuration updates by generating

router-specific configuration changes, sending them to the router, executing the configuration change,

and logging the results.

SNMPSNMP management applications such as CiscoWorks2000 LAN Management Suite (LMS)

and HP OpenView. You can manage from an SNMP-compatible management station that is running

platforms such as HP OpenView or SunNet Manager.

For information about configuring SNMP, seehttp://www.cisco.com/en/US/docs/ios/12_2/configfun/

configuration/guide/fcf014.html.

For the list of MIBs that Cisco ASR 901S router supports, see the Release Notes for Cisco ASR 901S router

Manageability Features

Address Resolution Protocol (ARP) for identifying a router through its IP address and its corresponding

MAC address

Cisco Discovery Protocol (CDP) Versions 1 and 2 for network topology discovery and mapping between

the router and other Cisco devices on the network (supported on NNIs by default, can be enabled on

ENIs, not supported on UNIs)

Network Time Protocol (NTP) for providing a consistent time stamp to all routers from an external

source

Cisco IOS File System (IFS) for providing a single interface to all file systems that the router uses.

In-band management access for up to five simultaneous Telnet connections for multiple CLI-based

sessions over the network. Effective with Cisco IOS Release 15.3(2)S1, in-band management access

for up to 98 simultaneous Telnet connections for multiple CLI-based sessions over the network.

In-band management access for up to five simultaneous, encrypted Secure Shell (SSH) connections for

multiple CLI-based sessions over the network.

In-band management access through SNMP Versions 1 and 2c get and set requests.

Out-of-band management access through the router console port to a directly attached terminal or to a

remote terminal through a serial connection or a modem

User-defined command macros for creating custom router configurations for simplified deployment

across multiple routers

Cisco ASR 901S Series Aggregation Services Router Software Configuration GuideOL-30498-03 3


Management Options
http://www.cisco.com/en/US/docs/ios/12_2/configfun/configuration/guide/fcf014.htmlhttp://www.cisco.com/en/US/docs/ios/12_2/configfun/configuration/guide/fcf014.htmlhttp://www.cisco.com/en/US/docs/ios/12_2/configfun/configuration/guide/fcf014.htmlhttp://www.cisco.com/en/US/docs/ios/12_2/configfun/configuration/guide/fcf014.html


52/971

Support for metro Ethernet operation, administration, and maintenance (OAM) IEEE 802.1ag Connectivity

Fault Management (CFM), Ethernet Line Management Interface (E-LMI) on customer-edge and

provider-edge devices, and IEEE 802.3ah Ethernet OAM discovery, link monitoring, remote fault

detection, and remote loopback, and IEEE 802.3ah Ethernet OAM discovery, link monitoring, remote

fault detection, and remote loopback (requires the metro IP access or metro access image)

Configuration replacement and rollback to replace the running configuration on a router with any saved

Cisco IOS configuration file

CPU utilization threshold logs.

Security Features

Password-protected access (read-only and read-write access) to management interfaces for protection

against unauthorized configuration changes

Configuration file security so that only authenticated and authorized users have access to the configuration

file, preventing users from accessing the configuration file by using the password recovery process

Multilevel security for a choice of security level, notification, and resulting actions

Automatic control-plane protection to protect the CPU from accidental or malicious overload due to

Layer 2 control traffic on UNIs or ENIs

TACACS+, a proprietary feature for managing network security through a TACACS server

RADIUS for verifying the identity of, granting access to, and tracking the actions of remote users through

authentication, authorization, and accounting (AAA) services

Extended IP access control lists for defining security policies in the inbound direction on physical ports.

Extended IP access control lists for defining security policies in the inbound and outbound direction on

SVIs.

Quality of Service and Class of Service Features

Configurable control-plane queue assignment to assign control plane traffic for CPU-generated traffic

to a specific egress queue.

Cisco modular quality of service (QoS) command-line (MQC) implementation

Classification based on IP precedence, Differentiated Services Code Point (DSCP), and IEEE 802.1p

class of service (CoS) packet fields, or assigning a QoS label for output classification

Policing

One-rate policing based on average rate and burst rate for a policer

Two-color policing that allows different actions for packets that conform to or exceed the rate

Aggregate policing for policers shared by multiple traffic classes

Table maps for mapping CoS, and IP precedence values

Queuing and Scheduling

Cisco ASR 901S Series Aggregation Services Router Software Configuration Guide4 OL-30498-03


Security Features


53/971

Class-based traffic shaping to specify a maximum permitted average rate for a traffic class

Port shaping to specify the maximum permitted average rate for a port

Class-based weighted queuing (CBWFQ) to control bandwidth to a traffic class

Low-latency priority queuing to allow preferential treatment to certain traffic

Per-port, per-VLAN QoS to control tra

b Scg for Asr901s

Documents

Transcript of b Scg for Asr901s