Remote Access to MPLS VPN Integration 2.0 Overview and Provisioning Guide

Cisco Remote Access to MPLS VPN Integration 2.0 Overview and Provisioning Guide......Page 1
Audience......Page 11
Document Organization......Page 12
Safety Warnings......Page 13
Network Management References......Page 15
Aggregation/Home Gateway/PE Routers......Page 16
Cisco IOS......Page 17
For More Information......Page 18
Documentation Feedback......Page 19
Technical Assistance Center......Page 20
Cisco TAC Escalation Center......Page 21
Introduction......Page 23
MPLS Summary......Page 24
Cisco MPLS VPN Solution Center Summary......Page 25
Cisco MPLS VPN SC Initialization......Page 27
Creating Service Requests......Page 28
Deploying Service Requests......Page 29
Equipment and Software Selection......Page 30
Command Modes......Page 31
Saving Configurations......Page 33
Passwords......Page 34
Overview of Dial Access......Page 35
Overview of L2TP Dial-in Remote Access......Page 36
Network Access Servers......Page 38
Overview of Direct ISDN PE Dial-in Remote Access......Page 39
Network Access Servers/Provider Edge Routers......Page 40
Overview of Dial Backup......Page 41
Dial Backup Components and Features......Page 42
Overview of Dial-out Access......Page 43
Common Components and Features......Page 45
Per-VRF AAA......Page 46
Address Management......Page 47
Authorization and Authentication......Page 48
Network Management Components for Dial Access......Page 49
Overview of Optional Features Used with Dial Access......Page 50
Dial-Out and Multiple LACs on the LNS......Page 51
Multichassis Multilink PPP......Page 52
Requirements for MMP Support......Page 53
Before You Begin......Page 55
Dial-In Provisioning Checklist......Page 56
Task 1. Configure the PE Routers for MPLS......Page 57
Task 2. Configure the SP AAA RADIUS Server with Client Information......Page 58
Adding New Customer Groups......Page 60
Task 1. Configure L2TP Information for New Customers (L2TP only)......Page 61
Task 3. Configure VPDN Information for the Customer Group (L2TP only)......Page 63
Task 4. Configure Authentication and Authorization......Page 64
Task 5. Configure Accounting Between the VHG/PE or NAS/PE and the Access Registrar......Page 67
Task 6. Configure Address Management......Page 68
Task 7. (If You Are Using MLP) Configure LCP Renegotiation and Enable MLP for Users in the Group......Page 70
Task 8. (If You Are Using MMP) Configure SGBP on Each Stack Group Member......Page 71
Configuring Routing on a Backup CE-PE Link......Page 72
Before You Begin......Page 74
Task 1. Configure the Dialer Profile......Page 75
Task 2. Configure the VPDN Group (L2TP Only)......Page 76
Task 4. Configure VPDN on the NAS (L2TP only)......Page 77
Sample NAS Configuration......Page 78
Sample VHG/PE Configuration......Page 80
Sample SP AAA Server Configuration......Page 82
DSL Access to MPLS VPN Integration......Page 85
RFC 1483 Routing Integration......Page 86
Address Management......Page 87
SLA Reporting......Page 88
RFC 1483 Provisioning......Page 89
Configuring the VHG/PE......Page 90
Configuring CNR Network Server......Page 91
RFC 1483 Routed Bridge Encapsulation to MPLS VPN Integration......Page 92
Authorization and Authentication......Page 94
Fault Monitoring......Page 96
Configuring the VHG/PE......Page 97
Configuring DHCP Option 82 for RBE......Page 99
Configuring the PE Router for a New Service......Page 100
RBE Configuration Example......Page 101
PPPoX with SSG......Page 103
Authorization......Page 104
PPPoX with SSG Core Network......Page 105
PPPoX with SSG Event Sequences......Page 106
Logging On To a Service......Page 107
Configuring the PE Routers......Page 108
Configuring the SSG NRP......Page 110
Configuring the Customer DSL Routers......Page 111
Configuring the AR Network Server......Page 112
Configuring CNR Network Server......Page 113
PPPoX VHG/PE Routers......Page 114
Address Management......Page 115
VPN Management......Page 117
SLA Reporting......Page 118
PPPoX Provisioning......Page 119
Configuring the VHG/PE Routers......Page 120
Configuring the AR and CNR Network Servers on the VHG/PE......Page 121
Configuring the VHG/PE for a New Customer......Page 122
Configuring the Customer DSL Routers......Page 123
DSL L2TP Access Network......Page 124
DSL L2TP Radius Servers......Page 125
Accounting......Page 126
Network Management......Page 127
VHG Farms......Page 128
SLA Reporting......Page 129
DSL L2TP Provisioning......Page 130
Miscellaneous Component Configurations......Page 131
Configuring the AAA Network Server using AR......Page 132
Configuring Access Servers for New Customers......Page 133
Configuring VHG/PE for a New Customer......Page 135
Configuring Authentication & Authorization Components......Page 136
Configuring Accounting Between the VHG and AR......Page 139
Configuring Address Management Components......Page 140
Configure a Per-user Static Route Using the Framed-route Attribute on the RADIUS AAA Server,......Page 142
On-demand Address Pools (ODAP)......Page 143
Configuring the RADIUS AR for ODAP......Page 144
Creating Templates and Configuration Files......Page 145
Template Examples......Page 146
Cable DOCSIS 1.0 SID to MPLS VPN Integration......Page 149
VHG/PE Routers......Page 150
Address Management......Page 151
Network Management......Page 152
DOCSIS Provisioning......Page 153
Configuring CiscouBR7200 VHG/PE Routers......Page 154
Configuring the SP CNR Network Server......Page 158
Configuring the Customer Cable Access Router......Page 166
AAA Radius Event Sequence......Page 169
Tunnel Authentication......Page 170
Authorization, Authentication, and Address Assignment at the VHG using SP Radius Server......Page 171
Index......Page 173