IOS XR Layer 2 internetworking and layer 2 local switching

I have 12410 with iox 3.6.1 and sip 501 with spa-5GE I want to configure layer 2 vpns for internetworking and layer 2 local switching. I search in the command reference and I didnt find the connect command nor internetwork ip under the PW class. can any one tell me how to configure it

Hi,
Here is an example for local switching:
RP/0/1/CPU0:router(config-if)#l2vpn
RP/0/1/CPU0:router(config-l2vpn)#xconnect group local
RP/0/1/CPU0:router(config-l2vpn-xc)#p2p ac1
RP/0/1/CPU0:router(config-l2vpn-xc-p2p)#interface gi0/3/0/0
RP/0/1/CPU0:router(config-l2vpn-xc-p2p)#interface gi0/3/0/1
RP/0/1/CPU0:router(config-l2vpn-xc-p2p)#commit
RP/0/1/CPU0:router(config-l2vpn-xc-p2p)#end
Any-2-Any connection type required 3.8
HTH
Laurent.

Similar Messages

TACACS login 1st attend fail and prompt for local switch password

Hi,
The switch will prompt us the local switch password after we key in wrong username and password when prompt by the switch. We are wondering is this behave correct or normal?
This is because any hacker can just try on first the login which is prompt by TACACS then they can try hacking to the switch using the switch local password.
This there any work around that each attend is prompts for TACACS login? Only when TACACS server is down will be prompt by the switch local login?

Hi Farrukh,
Here is the tacacs-server setting:
tacacs-server host 10.130.209.23
tacacs-server host 10.130.209.24
tacacs-server directed-request
tacacs-server key xxx
Result is the same even I have remove those two commands.
I ahve attached the debug result obtain from the switch without those two commands.
And below is the scenario on the login when the debug is turn on:
Username: ivan
Password:
Password:
% Authentication failed
User Access Verification
Username: TanCH
Password:
Password:
% Authentication failed
User Access Verification
Username: siah
Password:
Password:
% Authentication failed
=---------------------------------------------------------------=
All Access to this system will be LOGGED.
All UNAUTHORISED access is PROHIBITED and will be dealt with seriously.
=---------------------------------------------------------------=
User Access Verification
Username: ivancheng
Password:
SWB1111>exit

Layer2 Local Switching and SpanningTree

I setup a connection between two Ethernet Subinterfaces, each on a seperate vlan.
At the other end of the trunk (on a switch), the port goes into BKN (broken) mode as bpdu's from VLANa are now appearing on VLANb (because of the connect statement on the router).
Is the correct way to fix this to enable bpdufilter on the switch? This fixes the problem and I'm guessing we shouldn't really be using spanning-tree in this sort of SP environment anyway?
RC

Hi Peter,
in general I would agree with you that disabling STP is a call for troubles.
But in this very specific case we are dealing with Layer 2 local switching feature which requires the use of locally significant dot1q tags on the subinterfaces that you want to inter-connect.
So the assumption is (as I wrote in my post) that the vlans 80 and 81 have locally significance only and that even if they are carried in the trunk up to the switch (where interface gi0/32 resides) they don't exist anywhere else.
The assumptiom comes from the other thread opened by RC on the topic (where I suggested to use L2 local switching) > https://supportforums.cisco.com/message/3450564
From my understanding after the switch we have the 2 carrier circuits with different tags and beyond that point there is no more tag significance.
If this is true the use of BPDU filter is equivalent to disabling STP for those 2 vlans.
Of course if the 2 vlans also belong to a switched network it is not safe to disable STP on the switch as the presence of actual redundant links can create lots of troubles.
In conclusion I don't think I disagree with you as I was just giving my opinion on a very specific scenario
Riccardo

Helper Address on a ONLY Layer 2 aware Switch

Hi,
Been scratching my head for a while now, i don't know why a switch even has the " Ip helper address" command, Dosent it need routing to acomplish this kind of a task?
I have a switch with 2 SVI's, fair enough, one for Vlan 10 and the other for Vlan 20,
Vlan 10 = 192.168.10.0/24
Vlan 20 = 192.168.20.0/24
I have a DHCP server on vlan 10, with the IP address 192.168.10.1, Now it has scopes for vlan 20 as well, i go into vlan 20 and do this:
# interface vlan 20
# ip address 192.168.20.1 255.255.255.0
#ip helper address 192.168.10.1
Now this should work right? but it dosen't !( Ive seen in Wireshark that it dosent even forward the DISCOVER Message on to SVI 10's Vlan 10 ports) ..But it does work when we configure a DEFAULT GATEWAY for the switch and the DHCP server is on a REMOTE Location where the switch does not have and interface directly connected to! what is this? its like blowing my mind! please elaborate

If this is a Layer 2 only switch then I cannot see how a helper address would work.
The SVI's you have created are going to be for management, they cannot be the Default Gateways of the Vlans IF the switch is Layer 2 only.
When your clients send out a DHCPDISCOVER message, that frame will hit the SVI address because its a 'host' on that same vlan that the client is on.
If this were a Layer 3 SVI (i.e on a Layer 3 switch) then it would forward that frame to the helper address configured. In order for the Layer 3 switch to forward the frame, it needs to do a lookup in its routing table for the destination subnet.
This is a layer 2 switch, is has no routing table so will be unable to forward the DHCPDISCOVER message to the helper address.
See here (Peters post) for an explanation of why the Layer 2 switch can act as a DHCP relay if the DHCP server is on a remote subnet:
https://supportforums.cisco.com/discussion/11385901/does-ip-helper-address-work-layer-2-switch-2950

Layer 2 multicast switching capacity

Will you tell me the "Layer 2 multicast switching capacity" of the catalyst switches(1924,2900,2950,3500,3550,3750 ,6500) and router 7600)?
Is it same as the Layer 2 unicast switching capacity?
Also, the layer 2 multicast switching is processed by hardware or software?
Thanks.

Probably not. Why? Because multicast is copied on to all ports or with IGMP and/or CGMP enabled, copied only to ports interested in such traffic. It takes more processing then a mac-address-table lookup used for unicast.
All switching occurs in hardware ASICs.

Layer 2 & 3 switch question\understanding

Hello,
I would like to have a nice explanation on a couple of things regarding layer 2 & 3 switches. The last time I asked this question it kind of went in different directions, so to avoid that I'll try and be clearer. These things below are what I do not need explanations on (followed below that I will explain what I need to understand better). What I do not need explanations on:
- I understand what vlans are
- I understand the difference between layer 2 & 3 switches
- I know what vlan trunking\tagging is
- I know what a default gateway is
- I understand that Layer 3 switches does the IP routing and layer 2 doesn't (mac addresses).
What I need to understand clearly is:
When I look at a layer 2 switch (show run) I see that the default vlan1 has no ip address and is shut down, a new vlan was created vlan10 and this vlan was given an IP address and default gateway. But the switch its self was given an IP address as well.
For ex:
interface Vlan1
no ip address
shutdown
interface Vlan10
ip address 10.10.50.2 255.255.255.0
ip helper-address 10.10.50.101
no ip route-cache
ip default-gateway 10.10.50.20
So I'm assuming the default gateway for the pc's that connect to this switch is 10.10.50.20 which is also the IP of the inside interface of the firewall.
So if that is correct then this is what I don't understand:
Why is there an IP for interface and DG address for vlan10?
Why do I read that there can only be 1 management vlan per switch? What do they specifically mean by management vlan? There has to be obviously an IP address to telnet into (10.10.40.2)? But if its used for management only why then are almost all the interfaces associated with that vlan10?
Shouldn't there be a vlan interface to access the switch and another vlan for all the computers to associate with?
So basically I need to understand better the concept of interface vlan and management vlan and ip default gateway.
Thanks!
Hello,
I would like to have a nice explanation on a couple of things regarding layer 2 & 3 switches. The last time I asked this question it kind of went in different directions, so to avoid that I'll try and be clearer. These things below are what I do not need explanations on (followed below that I will explain what I need to understand better). What I do not need explanations on:
- I understand what vlans are
- I understand the difference between layer 2 & 3 switches
- I know what vlan trunking\tagging is
- I know what a default gateway is
- I understand that Layer 3 switches does the IP routing and layer 2 doesn't (mac addresses).
What I need to understand clearly is:
When I look at a layer 2 switch (show run) I see that the default vlan1 has no ip address and is shut down, a new vlan was created vlan10 and this vlan was given an IP address and default gateway. But the switch its self was given an IP address as well.
For ex:
interface Vlan1
no ip address
shutdown
interface Vlan10
ip address 10.10.50.2 255.255.255.0
ip helper-address 10.10.50.101
no ip route-cache
ip default-gateway 10.10.50.20
So I'm assuming the default gateway for the pc's that connect to this switch is 10.10.50.20 which is also the IP of the inside interface of the firewall.
So if that is correct then this is what I don't understand:
Why is there an IP for interface and DG address for vlan10?
Why do I read that there can only be 1 management vlan per switch? What do they specifically mean by management vlan? There has to be obviously an IP address to telnet into (10.10.40.2)? But if its used for management only why then are almost all the interfaces associated with that vlan10?
Shouldn't there be a vlan interface to access the switch and another vlan for all the computers to associate with?
So basically I need to understand better the concept of interface vlan and management vlan and ip default gateway.
Thanks!

Ok but the book I'm reading says there can only be one management vlan per switch for management traffic. So all the clients in vlan10 is just a name, doesnt mean anything to them?
Yes there can be only one management vlan. But remember a L2 switch can have multiple vlans configured on it at L2 ie. in the vlan database. The restriction on a L2 switch is that you can only have one L3 vlan interface. So if you configured the management vlan to be vlan 3 for example the the switch would have 2 vlans at L2 but you would only have a L3 vlan interface for vlan 11 So -
"sh vlan brief" would show vlan 10 and vlan 11
"sh ip int brief | include Vlan" would show only one vlan interface up/up and that would be vlan 11. The only other vlan interface you would see would be for vlan 1 but it would be down with no ip address configured.
Ok, I understand all clients (switch included) use the ip address 10.10.50.2 255.255.255.0 as the default gateway (the firewall). I dont understand "If you used a different vlan to manage the switch then you wouldn't have the same default gateway as the clients. "
The default gateway is tied to IP subnet. So lets say as above you use vlan 11 for management with an IP subnet of 192.168.5.0/24.
int vlan 11
ip address 192.168.5.2 255.255.255.0
ip default-gateway 192.168.5.1 <--- the default gateway needs to be in the same subnet.
So the clients in vlan 10 attached to the switch are still using 10.10.50.2 as their default gateway but the switch is using 192.168.5.1 as it's default gateway. The device with the IP address 192.168.5.1 could be another interface on the firewall, it could be a vlan interface on a L3 switch, it could be on a router.
Now to make things simple lets say instead of the firewall both default gateways IPs are on a L3 switch.
int vlan 10
ip address 10.10.50.2 255.255.255.0
int vlan 11
ip address 192.168.5.1 255.255.255.0
the L2 switch is connnected to the L3 switch with a L2 trunk. It needs to be because you need both vlan 10 and 11 to go via the trunk.
From a PC in vlan 10 you want to connect to the switch. You telnet to the switch.
1) the PC compares it's IP and subnet mask with the IP of the switch and realises it is on a different subnet so it needs to send the packets to it's default gateway
2) the packet goes from the PC down the trunk (tagged with vlan 10) to the L3 switch
3) the L3 switch looks up the destination IP and sees it is for a 192.168.5.x address
4) the L3 switch has an interface on the 192.168.5.x subnet so it routes the packet onto that vlan and sends it back down the trunk link to the L2 switch. This time the packet is tagged with a vlan 11 tag.
5) the L2 switch receives the packet.
The return traffic is just the same but done in reverse.
Note i assumed the PC had the mac address of it's default gateway in it's arp table. I also assumed the L2 and L3 switches had all the mac address to port mappings in their respective mac address tables.
Again, please feel free to come back.
Jon

I can not view ANY videos on Vimeo, I have 'reset' the Ipad, original IOS 5, cleared the history and cookies, I have changed the DNS number to 8.8.8.8, I have worked on this for 2 days and still can't find a fix, HELP!!

I can not view ANY videos on Vimeo, I have 'reset' the Ipad, original IOS 5, cleared the history and cookies, I haves changed the DNs number to 8.8.8.8, I have worked on this for 3 days now, HELP!!!!

Try a reset: Simultaneously hold down the Home and On buttons until the device shuts down. Ignore the off slider if it appears. Once shut down is complete, if it doesn't restart on it own, turn the device back on using the On button. In some cases it also helps to double click the Home button and close all apps BEFORE doing the reset.

HT204291 My iPad 4 does not show up on my TV screen when in AirPlay mirroring mode using WiFi. The iPad displays AirPlay set to TV with the Mirroring On (green). My iPad IOS software is 8.2 and my Apple TV software is at 7.1. The TV displays the Apple

My iPad 4 does not show up on my TV screen when in AirPlay mirroring mode using WiFi. The iPad displays AirPlay set to TV with the Mirroring On (green).
My iPad IOS software is 8.2 and my Apple TV software is at 7.1. The TV displays the Apple Menu. The “Settings” does however displays the General menu allowing me to see:
Apple software: 7.1 (7003)
Apple TV: Model No. A1464, Part No. MD199B/A
Signal Strength shows 5 circles.
It does not display the iPad screen but when I use the BT Sport App I can hear the sound but there is no video. I have searched the internet for a solution to no avail. The problem first arose when the IOS was at 8.1+ but it worked correctly briefly when I updated to IOS 8.2. Can you help please?

Welcome to the Apple Community.
Try the following steps, check whether things are working after each step where appropriate, before trying the next.
Check AirPlay is turned on on the Apple TV (turn it off and on if it already is)
Check that both devices are on the same network (Settings > Wifi, on the mobile device and Settings > General > Network, on the Apple TV).
Restart the Apple TV (Settings > General > Restart).
Restart the Apple TV by removing ALL the cables for 30 seconds.
Restart your router. (Also try removing it’s power cord for at least 30 seconds)
Restart your mobile device.
If you are still having problems, the following article(s) may help you.
Troubleshooting AirPlay
Troubleshooting Wi-Fi networks and connections
Recommended Wi-Fi settings
Wifi Diagnostic Software (for Mac users)
You may also find some help on this page, where I’ve collected some of the more unusual solutions to network issues.
When making adjustments to your network for better optimisation, you may find some of the points mentioned on this page helpful.

My ipod 5th gen ios 7.0.6 crashed and keeps going from the apple logo, going to a black screen, back to the apple logo, then back to the black screen and so on. Furthermore, my laptop doesn't recognise that the iPod is connected. What do I do?

My ipod 5th gen ios 7.0.6 crashed and keeps going from the apple logo, going to a black screen, back to the apple logo, then back to the black screen and so on. Furthermore, my laptop doesn't recognise that the iPod is connected. What do I do?
Please help me out as this is very irritating. This has been happening for the last 20-30 minutes. It had roughly half battery left.

Try:
- iOS: Not responding or does not turn on
- Also try DFU mode after try recovery mode
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
- If not successful and you can't fully turn the iOS device fully off, let the battery fully drain. After charging for an least an hour try the above again.
- Try another cable
- Try on another computer
- If still not successful that usually indicates a hardware problem and an appointment at the Genius Bar of an Apple store is in order.
Apple Retail Store - Genius Bar

IPad 1 Safari crashes frequently. I went to many Apple stores in different countries and each Apple staff member had their own different opinions with no help. I had upgraded my iOS to 5.1.1 and the Safari crashing started about one year

IPad 1 Safari crashes frequently. I went to many Apple stores in different countries and each Apple staff member had their own different opinions with no help. I had upgraded my iOS to 5.1.1 and the Safari crashing started about one year after the upgrade and some Apple staff blame this- but this started one year later after the iOS upgrade. Recently at the Apple Store in Vancouver an Apple staff reset my computer (erased everything and sent to iCloud to reset the iPad) and I hoped this would fix the problem. IPad Safari still crashes. Short of booking an appointment for taking it for repair to Apple technicians which will cost me money can anyone help me to fix this Safari crashing.

Hi,
You might have a 3rd party plugin that isn't compatible with Safari 4.0.4. Go here for help...
Safari add-ons can cause performance issues or other situations
If you are using a USB hub, try disconnecting and restarting with just your keyboard and mouse connected.
From the Safari Menu Bar, click Safari / Empty Cache. When you are done with that...
from the Safari Menu Bar, click Safari / Reset Safari. Select the top 5 buttons and click Reset.
Mac OS: Web Browser Quits Unexpectedly or Stops Responding
Also, you could download and install the 10.5.8 combo update (PowerPC) available here.
http://support.apple.com/downloads/MacOS_X_10_5_8_ComboUpdate
It contains fixes that might help. Then repair disk permissions.
Quit any open applications/programs. Launch Disk Utility. (Applications/Utilities) Select MacintoshHD in the panel on the left, select the FirstAid tab. Click: Repair Disk Permissions. When it's finished from the Menu Bar, Quit Disk Utility and restart your Mac. If you see a long list of "messages" in the permissions window, it's ok. That can be ignored. As long as you see, "Permissions Repair Complete" when it's finished... you're done. Quit Disk Utility and restart your Mac.
Carolyn

I started my update for ios 5.1for iPhone 4s and cancelled it have way through now it says it's downloaded but really it's not the update is still there and when I try to update it it says unable to install update : an error occurred installing iOS 5.1 ?

I started my update for ios 5.1for iPhone 4s and cancelled it have way through now it says it's downloaded but really it's not the update is still there and when I try to update it it says unable to install update : an error occurred installing iOS 5.1 ?

See Here... Unable to Update or Restore...
http://support.apple.com/kb/HT1808

Hello, i have updated my iphone 5 black 16 gb to ios 7 ios 7.0.2 (11a501) and my battery has become worse it gives 9 hours of usage with out doing anything, i have done everything i tried, not using my iphone as well but still no change at all!

hello, i have updated my iphone 5 black 16 gb to ios 7.0.2 (11a501) and my battery life of my iphone has become worse it gives 9 hours of usage with out doing anything, i have done everything every tip that is available online i had 3gs and 4s so i know how to save battry life,i even tried not using my iphone as well but still no change at all!. i have upadted to ios 7.0.3 then downgraded it , i thought battery may be an issue ,so i put brand new battery still no change , so what should i do ? , update to the latest version which is ios 7.0.4 or wait for the ios 7.1 , i was using iphone 4s running on ios 6.1 it gave me 3 days of battery timing , iphone 5 seemed to be very bad for me ,help ! ?
its facory unlocked btw

Try to do a reset, if it doesn't work try remove recently added apps this may solve your problem ( like google app because it has happened with me)
Take a look at apps using your location service in privacy, it can cause battery draining.

I had the developer preview for IOS 6 on my phone, and just got a message telling me that my operating system is no longer active. How do I get my phone activated again?

I had the developer preview for IOS 6 on my phone, and just got a message telling me that my operating system is no longer active. How do I get my phone activated again?
I had the developer preview installed. Never had to update to the release version of the OS. Now, the preview has expired, and I cannot use my phone because my iTunes reads my OS as being current, but my iPhone cannot active. Any ideas on how to fix this issue?

If I Google for Michael Superczynski, first match tells "Michael Superczynski's Profile : Apple Support Communities". It in fact does a lot of work there even if not paid.
And yes we do not have disagreement about "official apple developers". Problem is that Apple screwed our devices because we are "official apple developers" and did effort to stop us getting proper help. I unbricked my ipad and iphone thanks to unofficial help. Thank you who wrote this unofficial help and "no thanks" for apple for ruining my access to my devices. My mistake was assuming that "update" button on my devices works. It did not because it always told "Your device has latest IOS6 installed" until it bricked yesterday.
If Apple does not want to listen us, continue do delete post, blame us installing your software and yes we stop buying your devices and developing for them.
Tonu

I updated to iOS 8 on iPhone 5s and now iMessage will not verify my email. It has said "Verifyng" since yesterday, but has not sent a verification email. I checked my iCloud settings for that email address and it shows "pending".

I updated to iOS 8 on iPhone 5s and now iMessage will not verify my email address to use to send/ receive messages. It has said "Verifyng" beside it in settings since yesterday, but has not sent a verification email. I have also tried Adding it as a new email address several times, but get the same outcome. I can still send/ receive texts from my phone number, just not from the email address.
In my iCloud settings under Contact Information for that email address and it shows "pending". When I select "Resend Verification Email" I get "Cannot Connect to iCloud".

Hello, Dorian071.
Thank you for visiting Apple Support Communities.
Here is the best article to reference when experiencing issues with iMessage activation issues.
iOS: Troubleshooting FaceTime and iMessage activation
http://support.apple.com/kb/ts4268
Cheers,
Jason H.

The time on my iphone 5C is constantly changing, regardless of me setting the correct time manually or automatically, all iOS is up to date and phone is not damaged, any ideas?

The time will stay correct for an hour or so, then jump backwards for no reason. I have tried setting the time manually and automatically and still get the same problem, and have tried with wifi on and off and it still does it. All my software is up to date and tried contacting EE who said to ask Apple. Phone is about 11 months old and have had no previous problems.

Hi jennehbear,
Thank you for using Apple Support Communities.
Your time jumping backwards an hour sounds like an issue with the time zone. Take a look at this article to troubleshoot the issue.
iOS: Troubleshooting issues with date and time - Apple Support
Regards,
Jeff D.

IOS XR Layer 2 internetworking and layer 2 local switching

Similar Messages

Maybe you are looking for