3com 8807 User Guide

Page of 883
648
C
HAPTER
 52: VPLS C
ONFIGURATION
# Configure a LDP remote peer (PE2) to set up LDP session.
[PE1] mpls ldp remote-peer 1
 
[PE1-mpls-remote1] remote-ip 1.2.3.4 
# Enable L2VPN globally.
[PE1] mpls l2vpn 
# Configure a VPLS instance and VSI-ID (VPN-ID). Enter VSI-LDP view to configure 
the IP address of PE2.
[PE1] vsi 3Com static
 
[PE1-vsi-3Com] pwsignal ldp
 
[PE1-vsi-3Com-ldp] vsi-id 500
 
[PE1-vsi-3Com-ldp] peer 1.2.3.4
 
[PE1-vsi-3Com-ldp] quit 
# Configure a private VLAN, add a port to it, and bind a VSI instance.
[PE1] vlan 100
 
[PE1-vlan-100] port Ethernet 6/1/48
 
[PE1-vlan-100] interface vlan 100
 
[PE1-vlan-interface100] l2 binding vsi 3Com access-mode ethernet 
# Enable VLAN-VPN on the port of the private network.
[PE1] interface Ethernet 6/1/48
 
[PE1-Ethernet6/1/48] vlan-vpn enable 
# Configure user-defined flow template, and ACL redirection rule to allow for 
MPLS packets with VPLS labels.
[PE1] flow-template user-defined slot 4 ethernet-protocol vlanid
 
[PE1] acl number 4000
 
[PE1-acl-link-4000] rule 0 permit mpls l2label-range ingress any egress any
 
[PE1-acl-link-4000] quit 
# Define user flow template in port view and configure redirection rule to redirect 
VPLS packets back from the public network to the VPLS service processor card and 
specify the VLAN ID of the redirection flow.
[PE1] interface GigabitEthernet4/1/1
 
[PE1-GigabitEthernet4/1/1] flow-template user-defined
 
[PE1-GigabitEthernet4/1/1] traffic-redirect inbound link-group 4000 rule 0 
 
slot 5 10 join-vlan 
Note that, if a common interface module is on slot 4 and all the eight label ranges 
corresponding to the rule are not assigned, you must configure the following 
command to prevent the flow in other label ranges not matched from being 
reported to the CPU:
# Configure an ACL redirection rule for denying the MPLS packets with VPLS 
labels.
[PE1] acl number 4001
 
[PE1-acl-link-4001] rule 1 deny mpls l2label-range ingress any egress any