Configuring and Applying Tunnel Policies

Context

If VLL services need to be transmitted over TE tunnels or if VLL services need to be load balanced among multiple tunnels, tunnel policies must be configured.

Layer 2 data on the VLL network is transmitted over tunnels. By default, LSP tunnels are used to transmit data, and each service is transmitted by only one LSP tunnel.

If the default tunnel configuration cannot meet the service requirements of a VLL, apply tunnel policies to the VLL. These policy types may be configured:

Tunnel type prioritization policy: This policy can change the type of tunnels selected for VPN data transmission or select multiple tunnels for load balancing.
Tunnel binding policy: This policy can bind multiple TE tunnels to provide QoS guarantee for a VPN.

CCC VLL does not support tunnel policies.

Pre-configuration Tasks

Before configuring and applying tunnel policies, create an LSP tunnel or an MPLS TE tunnel to transmit VLL services.

For details on how to create an LSP tunnel and a TE tunnel, see MPLS LDP Configuration in the S2720, S5700, and S6700 V200R019C10 Configuration Guide - MPLS and MPLS TE Configuration in the S2720, S5700, and S6700 V200R019C10 Configuration Guide - MPLS.

Perform the following operations on the PE devices that require a tunnel policy:

Procedure

Configure a tunnel policy using either of the following methods.

Configure a tunnel type prioritization policy.

By default, no tunnel policy is configured. LSP tunnels are used to transmit VLL data and each VLL service is transmitted over one LSP tunnel.
1. Run system-view
  
  The system view is displayed.
2. Run tunnel-policy policy-name
  
  A tunnel policy is created, and tunnel policy view is displayed.
3. (Optional) Run description description-information
  
  The description of the tunnel policy is configured.
4. Run tunnel select-seq { cr-lsp | gre | lsp } ^* load-balance-number load-balance-number
  
  The sequence in which each type of tunnel is selected and the number of tunnels participating in load balancing are set.
  
  The device does not support GRE tunnels.
Configure a tunnel binding policy.
1. Run system-view
  
  The system view is displayed.
2. Run interface tunnel interface-number
  
  The tunnel interface view of the MPLS TE tunnel is displayed.
3. Run mpls te reserved-for-binding
  
  The binding capability of the TE tunnel is enabled.
4. Run mpls te commit
  
  The MPLS TE configuration is committed for the configuration to take effect.
5. Run quit
  
  Return to the system view.
6. Run tunnel-policy policy-name
  
  A tunnel policy is created.
7. (Optional) Run description description-information
  
  The description of the tunnel policy is configured.
8. Run tunnel binding destination dest-ip-address te { tunnel interface-number } &<1-6> [ ignore-destination-check ] [ down-switch ]
  
  The TE tunnel is bound to a specified tunnel policy.
  - In Kompella VLL mode, if the PE device has multiple peers, you can run the tunnel binding command multiple times to specify different destination IP addresses in a tunnel policy.
  - If down-switch is specified in the command, the system selects available tunnels in an order of LSP and CR-LSP when the bound tunnels are unavailable.
Apply the tunnel policy.
- In Martini VLL Mode
  
  Perform the following operations on the AC interfaces of the PE devices:
  - Run mpls l2vc { ip-address | pw-template pw-template-name } ^* vc-id tunnel-policy policy-name [ group-id group-id | [ control-word | no-control-word ] | [ raw | tagged ] | mtu mtu-value | secondary ] ^*
    
    A Martini VLL connection is created and the tunnel policy is applied to the connection.
- In SVC VLL Mode
  
  Perform the following operations on the AC interfaces of the PE devices:
  - Run mpls static-l2vc destination ip-address transmit-vpn-label transmit-label-value receive-vpn-label receive-label-value tunnel-policy tnl-policy-name [ [ control-word | no-control-word ] | [ raw | tagged ] ]^*
    
    An SVC VLL connection is created and the tunnel policy is applied to the connection.
- In Kompella VLL Mode
  
  Perform the following operations on the PE devices:
  1. Run system-view
    
    The system view is displayed.
  2. Run mpls l2vpn l2vpn-name
    
    The MPLS L2VPN instance view is displayed.
  3. Run ce ce-name id ce-id [ range ce-range ] [ default-offset ce-offset ]
    
    A CE is created and the MPLS-L2VPN-CE view is displayed.
  4. Run connection [ ce-offset id ] interface interface-type interface-number tunnel-policy policy-name [ raw | tagged ]
    
    A Kompella VLL connection is created for the CE and the tunnel policy is applied to the connection.

Verifying the Configuration

After configuring a tunnel policy and applying it to a VLL, you can check information about the tunnel policy applied to the VLL and tunnels in the system.

Run the display tunnel-info { tunnel-id tunnel-id | all | statistics [ slots ] } command to check information about tunnels in the system.
Run the display interface tunnel interface-number command to check detailed information about a specified tunnel interface.
Run the display tunnel-policy [ tunnel-policy-name ] command to check information about the specified tunnel policy.
Run the display mpls static-l2vc [ vc-id | interface interface-type interface-number | state { down | up } ] command to check tunnel information about the SVC VLL.
Run the display mpls l2vc [ vc-id | interface interface-type interface-number | remote-info [ vc-id | verbose ] | state { down | up } ] command to check tunnel information about the Martini VLL.
Run the display mpls l2vpn connection interface interface-type interface-number command to check tunnel information about the Kompella VLL.